@desplega.ai/agent-swarm 1.131.1 → 1.134.0

package/dist/{cli-50vbt00w.js → cli-m07313tr.js}

@@ -1,35 +1,44 @@
+import {
+  IdentityFieldBudgetError,
+  checkIdentityFieldBudget,
+  init_identity_field_budget,
+  init_templates
+} from "./cli-34w2584r.js";
 import {
   configureDbResolver,
   getAllTemplateDefinitions,
-  init_env_flag,
   init_registry,
   init_resolver,
   init_session_templates,
   init_steering_enabled,
-  isEnvFlagEnabled,
   isSteeringEnabled,
   registerTemplate
-} from "./cli-xpxde7rm.js";
+} from "./cli-2wv4kj0e.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   init_constants
-} from "./cli-x23me2mg.js";
+} from "./cli-a1rrkrb4.js";
 import {
   deriveProviderFromKeyType,
   init_credentials
-} from "./cli-z2zcxes1.js";
+} from "./cli-qt5bt3vk.js";
+import {
+  init_env_flag,
+  isEnvFlagEnabled
+} from "./cli-nanaxrz6.js";
 import {
   exports_zod,
   init_zod
-} from "./cli-zsspvvm2.js";
-import {
-  init_secret_scrubber,
-  scrubSecrets
-} from "./cli-4j2mrzag.js";
+} from "./cli-1ybr6vw2.js";
 import {
   init_package,
   package_default
-} from "./cli-ccf9vy7q.js";
+} from "./cli-jmvk6et8.js";
+import {
+  init_secret_scrubber,
+  registerVolatileSecret,
+  scrubSecrets
+} from "./cli-mkq1rk7b.js";
 import {
   _enum,
   array,
@@ -37,13 +46,13 @@ import {
   object,
   string,
   union
-} from "./cli-5dsbcjjw.js";
+} from "./cli-ghexzd2d.js";
 import {
   __commonJS,
   __esm,
   __export,
   __require
-} from "./cli-p9swy5t3.js";
+} from "./cli-pq2ee5ja.js";
 
 // src/utils/provider-metadata.ts
 function parseProviderMeta(rawProvider, rawMeta) {
@@ -2077,7 +2086,7 @@ function resolveTaskModelSelection(opts) {
 function isTerminalTaskStatus(status) {
   return TERMINAL_TASK_STATUSES.includes(status);
 }
-var AssetKeySchema, AssetEntityTypeSchema, AssetProviderRefSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, ProviderNameSchema, SteerModeSchema, SteeringStatusSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, TaskAttachmentKindSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, RetryPolicySchema, ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, WebhookVerificationSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
+var AssetKeySchema, AssetEntityTypeSchema, AssetProviderRefSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, ProviderNameSchema, SteerModeSchema, SteeringStatusSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, TaskAttachmentKindSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY = "_agentSwarmGeneratedBy", attachmentCapabilitiesSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, UserCommsPrefsSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, RuntimeInstanceStatusSchema, RuntimeInstanceSchema, RetryPolicySchema, ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, WebhookVerificationSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
 var init_types = __esm(() => {
   init_key();
   init_constants();
@@ -2361,12 +2370,62 @@ var init_types = __esm(() => {
     totalCostUsd: exports_zod.number().min(0).optional(),
     routingAffinity: RoutingAffinitySchema.optional()
   }).openapi("AgentTask");
+  CreateTaskOptionsSchema = exports_zod.object({
+    key: exports_zod.string().min(1).optional(),
+    agentId: exports_zod.string().nullable().optional(),
+    creatorAgentId: exports_zod.string().optional(),
+    source: AgentTaskSourceSchema.optional(),
+    taskType: exports_zod.string().max(50).optional(),
+    tags: exports_zod.array(exports_zod.string()).optional(),
+    priority: exports_zod.number().int().min(0).max(100).optional(),
+    dependsOn: exports_zod.array(exports_zod.string()).optional(),
+    offeredTo: exports_zod.string().optional(),
+    status: exports_zod.enum(["backlog", "unassigned"]).optional(),
+    slackChannelId: exports_zod.string().optional(),
+    slackThreadTs: exports_zod.string().optional(),
+    slackTriggerMessageTs: exports_zod.string().optional(),
+    slackUserId: exports_zod.string().optional(),
+    overrideSlackContext: exports_zod.boolean().optional(),
+    vcsProvider: exports_zod.enum(["github", "gitlab"]).optional(),
+    vcsRepo: exports_zod.string().optional(),
+    vcsEventType: exports_zod.string().optional(),
+    vcsNumber: exports_zod.number().int().optional(),
+    vcsCommentId: exports_zod.number().int().optional(),
+    vcsAuthor: exports_zod.string().optional(),
+    vcsUrl: exports_zod.string().optional(),
+    vcsInstallationId: exports_zod.number().int().optional(),
+    vcsNodeId: exports_zod.string().optional(),
+    agentmailInboxId: exports_zod.string().optional(),
+    agentmailMessageId: exports_zod.string().optional(),
+    agentmailThreadId: exports_zod.string().optional(),
+    mentionMessageId: exports_zod.string().optional(),
+    mentionChannelId: exports_zod.string().optional(),
+    dir: exports_zod.string().optional(),
+    parentTaskId: exports_zod.string().optional(),
+    model: exports_zod.string().optional(),
+    modelTier: ModelTierSchema.optional(),
+    effort: ReasoningEffortSchema.optional(),
+    scheduleId: exports_zod.string().optional(),
+    workflowRunId: exports_zod.string().optional(),
+    workflowRunStepId: exports_zod.string().optional(),
+    sourceTaskId: exports_zod.string().optional(),
+    outputSchema: exports_zod.record(exports_zod.string(), exports_zod.unknown()).optional(),
+    inheritParentOutputSchema: exports_zod.boolean().optional(),
+    followUpConfig: FollowUpConfigSchema.optional(),
+    requestedByUserId: exports_zod.string().optional(),
+    contextKey: exports_zod.string().optional(),
+    bypassTrackerContextDedup: exports_zod.boolean().optional(),
+    routingAffinity: RoutingAffinitySchema.optional()
+  });
   TaskAttachmentKindSchema = exports_zod.enum(["agent-fs", "url", "shared-fs", "page"]);
+  attachmentCapabilitiesSchema = exports_zod.record(exports_zod.string(), exports_zod.unknown()).refine((capabilities) => !(SERVER_GENERATED_ATTACHMENT_CAPABILITY in capabilities), {
+    message: `${SERVER_GENERATED_ATTACHMENT_CAPABILITY} is reserved for server-generated attachments`
+  });
   attachmentCommonFields = {
     name: exports_zod.string().min(1).describe("Display name for the attachment."),
     providerId: exports_zod.string().min(1).optional(),
     providerKey: exports_zod.string().min(1).optional(),
-    capabilities: exports_zod.record(exports_zod.string(), exports_zod.unknown()).optional(),
+    capabilities: attachmentCapabilitiesSchema.optional(),
     mimeType: exports_zod.string().optional(),
     sizeBytes: exports_zod.number().int().min(0).optional(),
     sha256: exports_zod.string().optional(),
@@ -2437,6 +2496,11 @@ var init_types = __esm(() => {
     createdAt: exports_zod.iso.datetime(),
     lastUpdatedAt: exports_zod.iso.datetime()
   }).openapi("User");
+  UserCommsPrefsSchema = exports_zod.object({
+    tone: exports_zod.string().optional(),
+    language: exports_zod.string().optional(),
+    verbosity: exports_zod.string().optional()
+  }).openapi("UserCommsPrefs");
   IdentityEventTypeSchema = exports_zod.enum([
     "auto_merge",
     "manual_merge",
@@ -2746,6 +2810,8 @@ var init_types = __esm(() => {
     "system.boot",
     "system.migration",
     "system.error",
+    "system.profile_sync_rejected",
+    "system.profile_sync_reconciled",
     "script.global_upsert",
     "schedule.deleted"
   ]);
@@ -2891,9 +2957,22 @@ var init_types = __esm(() => {
     taskDescription: exports_zod.string().nullable(),
     runnerSessionId: exports_zod.string().nullable(),
     providerSessionId: exports_zod.string().nullable(),
+    runtimeInstanceId: exports_zod.string().nullable().optional(),
     startedAt: exports_zod.iso.datetime(),
     lastHeartbeatAt: exports_zod.iso.datetime()
   }).openapi("ActiveSession");
+  RuntimeInstanceStatusSchema = exports_zod.enum(["active", "offline"]);
+  RuntimeInstanceSchema = exports_zod.object({
+    id: exports_zod.string(),
+    agentId: exports_zod.string(),
+    status: RuntimeInstanceStatusSchema,
+    reportedSlots: exports_zod.number().int(),
+    credentialReady: exports_zod.boolean().nullable().optional(),
+    metadata: exports_zod.record(exports_zod.string(), exports_zod.unknown()).nullable(),
+    lastSeenAt: exports_zod.iso.datetime(),
+    createdAt: exports_zod.iso.datetime(),
+    updatedAt: exports_zod.iso.datetime()
+  }).openapi("RuntimeInstance");
   RetryPolicySchema = exports_zod.object({
     maxRetries: exports_zod.number().int().min(0).default(3),
     strategy: exports_zod.enum(["exponential", "static", "linear"]).default("exponential"),
@@ -3201,6 +3280,7 @@ var init_types = __esm(() => {
     triggerData: exports_zod.unknown().optional(),
     context: exports_zod.record(exports_zod.string(), exports_zod.unknown()).optional(),
     error: exports_zod.string().optional(),
+    createdBy: exports_zod.string().optional(),
     startedAt: exports_zod.string(),
     lastUpdatedAt: exports_zod.string(),
     finishedAt: exports_zod.string().optional()
@@ -3564,6 +3644,58 @@ var init_types = __esm(() => {
   }).openapi("KvEntry");
 });
 
+// src/utils/github-pull-request.ts
+function parseGitHubPullRequestToken(token) {
+  const candidate = token.replace(TRAILING_PROSE_PUNCTUATION_RE, "");
+  const lowerCandidate = candidate.toLowerCase();
+  if (!lowerCandidate.startsWith("https://github.com/") && !lowerCandidate.startsWith("http://github.com/") && !lowerCandidate.startsWith("github.com/")) {
+    return null;
+  }
+  const withScheme = /^https?:\/\//i.test(candidate) ? candidate : `https://${candidate}`;
+  let parsed;
+  try {
+    parsed = new URL(withScheme);
+  } catch {
+    return null;
+  }
+  if (parsed.host.toLowerCase() !== "github.com" || parsed.username.length > 0 || parsed.password.length > 0) {
+    return null;
+  }
+  const [owner, repo, pull, numberText] = parsed.pathname.split("/").filter(Boolean);
+  if (!owner || !repo || pull?.toLowerCase() !== "pull" || !numberText || !GITHUB_PATH_SEGMENT_RE.test(owner) || !GITHUB_PATH_SEGMENT_RE.test(repo) || !/^\d+$/.test(numberText)) {
+    return null;
+  }
+  return {
+    url: `https://github.com/${owner}/${repo}/pull/${numberText}`,
+    owner,
+    repo,
+    number: Number(numberText)
+  };
+}
+function extractGitHubPullRequestUrls(text) {
+  if (!text)
+    return [];
+  const results = [];
+  const seen = new Set;
+  for (const match of text.matchAll(CANDIDATE_TOKEN_RE)) {
+    const pullRequest = parseGitHubPullRequestToken(match[0]);
+    if (!pullRequest)
+      continue;
+    const dedupeKey = pullRequest.url.toLowerCase();
+    if (seen.has(dedupeKey))
+      continue;
+    seen.add(dedupeKey);
+    results.push(pullRequest);
+  }
+  return results;
+}
+var CANDIDATE_TOKEN_RE, TRAILING_PROSE_PUNCTUATION_RE, GITHUB_PATH_SEGMENT_RE;
+var init_github_pull_request = __esm(() => {
+  CANDIDATE_TOKEN_RE = /[^\s()[\]{}<>"'`]+/g;
+  TRAILING_PROSE_PUNCTUATION_RE = /[)\]},.;:!]+$/;
+  GITHUB_PATH_SEGMENT_RE = /^[\w.-]+$/;
+});
+
 // src/utils/request-auth-context.ts
 import { AsyncLocalStorage } from "node:async_hooks";
 function setRequestAuth(req, auth) {
@@ -4224,19 +4356,19 @@ function runMigrations(db) {
       }
       continue;
     }
-    console.debug(`[migrations] Applying: ${migration.name}`);
+    console.log(`[migrations] Applying: ${migration.name}`);
     const start = performance.now();
-    db.transaction(() => {
-      db.exec(migration.sql);
-      db.run("INSERT INTO _migrations (version, name, applied_at, checksum) VALUES (?, ?, ?, ?)", [
-        migration.version,
-        migration.name,
-        new Date().toISOString(),
-        migration.checksum
-      ]);
-    })();
+    try {
+      db.transaction(() => {
+        db.exec(migration.sql);
+        db.run("INSERT INTO _migrations (version, name, applied_at, checksum) VALUES (?, ?, ?, ?)", [migration.version, migration.name, new Date().toISOString(), migration.checksum]);
+      })();
+    } catch (error) {
+      const detail = error instanceof Error ? error.message : String(error);
+      throw new Error(`[migrations] Migration ${migration.version} (${migration.name}) failed: ${detail}`, { cause: error });
+    }
     const elapsed = (performance.now() - start).toFixed(1);
-    console.debug(`[migrations] Applied: ${migration.name} (${elapsed}ms)`);
+    console.log(`[migrations] Applied: ${migration.name} (${elapsed}ms)`);
   }
   db.run("PRAGMA foreign_keys = ON");
 }
@@ -4302,135 +4434,18 @@ var init_oauth_encryption_backfill = __esm(() => {
   init_crypto();
 });
 
-// src/commands/templates.ts
-var init_templates = __esm(() => {
-  init_registry();
-  registerTemplate({
-    eventType: "task.trigger.assigned",
-    header: "",
-    defaultBody: `{{work_on_task_cmd}} {{task_id}}{{task_desc_section}}{{attachments_section}}{{output_instructions}}`,
-    variables: [
-      { name: "work_on_task_cmd", description: "Formatted /work-on-task command" },
-      { name: "task_id", description: "Task ID" },
-      { name: "task_desc_section", description: "Task description section or empty string" },
-      {
-        name: "attachments_section",
-        description: "Ready-to-run fetch recipe per task attachment (or empty string if none) — lets the agent download an attachment in one call instead of discovering the path/provider itself"
-      },
-      {
-        name: "output_instructions",
-        description: "Output format instructions (with outputSchema if present, or generic store-progress)"
-      }
-    ],
-    category: "task_lifecycle"
-  });
-  registerTemplate({
-    eventType: "task.trigger.offered",
-    header: "",
-    defaultBody: `{{review_offered_task_cmd}} {{task_id}}{{task_desc_section}}
-
-Accept if you have capacity and skills. Reject with a reason if you cannot handle it.`,
-    variables: [
-      { name: "review_offered_task_cmd", description: "Formatted /review-offered-task command" },
-      { name: "task_id", description: "Task ID" },
-      { name: "task_desc_section", description: "Task description section or empty string" }
-    ],
-    category: "task_lifecycle"
-  });
-  registerTemplate({
-    eventType: "task.trigger.unread_mentions",
-    header: "",
-    defaultBody: `You have {{mention_count}} mention(s) in chat channels.
-
-1. Use \`read-messages\` with unreadOnly: true to see them
-2. Respond to questions or requests directed at you
-3. If a message requires work, create a task using \`send-task\``,
-    variables: [{ name: "mention_count", description: "Number of unread mentions or 'unread'" }],
-    category: "task_lifecycle"
-  });
-  registerTemplate({
-    eventType: "task.trigger.pool_available",
-    header: "",
-    defaultBody: `{{task_count}} task(s) available in the pool.
-
-1. Run \`get-tasks\` with unassigned: true to browse
-2. Pick one matching your skills
-3. Run \`task-action\` with action: "claim" and taskId: "<id>"
-
-Note: Claims are first-come-first-serve. If claim fails, pick another.`,
-    variables: [{ name: "task_count", description: "Number of available pool tasks" }],
-    category: "task_lifecycle"
-  });
-  registerTemplate({
-    eventType: "task.trigger.channel_activity",
-    header: "",
-    defaultBody: `## Slack Channel Activity
-
-{{message_count}} new message(s) in monitored Slack channels:
-
-{{messages_detail}}
-## Your Task
-
-Review these messages and decide if any require action:
-1. If a message is a question or request, respond using \`slack-reply\` or create a task with \`send-task\`
-2. If a message is informational, no action needed
-3. Use \`slack-read\` with the channelId to get more context if needed`,
-    variables: [
-      { name: "message_count", description: "Number of new messages" },
-      {
-        name: "messages_detail",
-        description: "Formatted list of messages with channel and user info"
-      }
-    ],
-    category: "task_lifecycle"
-  });
-  registerTemplate({
-    eventType: "task.resumption.with_progress",
-    header: "",
-    defaultBody: `{{work_on_task_cmd}} {{task_id}}
-
-**RESUMED TASK** - This task was interrupted during a deployment and is being resumed.
-
-Task: "{{task_description}}"
-
-Previous Progress:
-{{progress}}
-
-Continue from where you left off. Review the progress above and complete the remaining work.{{completion_instructions}}`,
-    variables: [
-      { name: "work_on_task_cmd", description: "Formatted /work-on-task command" },
-      { name: "task_id", description: "Task ID" },
-      { name: "task_description", description: "Original task description" },
-      { name: "progress", description: "Previous progress text" },
-      {
-        name: "completion_instructions",
-        description: "Completion instructions (empty for providers without MCP)"
-      }
-    ],
-    category: "task_lifecycle"
-  });
-  registerTemplate({
-    eventType: "task.resumption.no_progress",
-    header: "",
-    defaultBody: `{{work_on_task_cmd}} {{task_id}}
-
-**RESUMED TASK** - This task was interrupted during a deployment and is being resumed.
-
-Task: "{{task_description}}"
-
-No progress was saved before the interruption. Start the task fresh but be aware files may have been partially modified.{{completion_instructions}}`,
-    variables: [
-      { name: "work_on_task_cmd", description: "Formatted /work-on-task command" },
-      { name: "task_id", description: "Task ID" },
-      { name: "task_description", description: "Original task description" },
-      {
-        name: "completion_instructions",
-        description: "Completion instructions (empty for providers without MCP)"
-      }
-    ],
-    category: "task_lifecycle"
-  });
-});
+// src/prompts/default-drift.ts
+function getPromptTemplateDefaultDrift(template, defaultBody) {
+  const customizedBytes = Buffer.byteLength(template.body, "utf8");
+  const defaultBytes = Buffer.byteLength(defaultBody, "utf8");
+  return {
+    defaultDrifted: !template.isDefault && template.body !== defaultBody,
+    customizedBytes,
+    defaultBytes,
+    byteDelta: defaultBytes - customizedBytes
+  };
+}
+var init_default_drift = () => {};
 
 // src/tools/templates.ts
 var init_templates2 = __esm(() => {
@@ -4678,10 +4693,23 @@ function seedDefaultTemplates() {
       });
     } else if (globalRecord.isDefault && globalRecord.body !== def.defaultBody) {
       resetPromptTemplateToDefault(globalRecord.id, def.defaultBody);
+    } else if (!globalRecord.isDefault) {
+      const drift = getPromptTemplateDefaultDrift(globalRecord, def.defaultBody);
+      if (drift.defaultDrifted) {
+        const ageMs = Math.max(0, Date.now() - Date.parse(globalRecord.updatedAt));
+        const frozenDays = Math.floor(ageMs / 86400000);
+        const frozenHours = Math.floor(ageMs / 3600000);
+        const frozenFor = frozenDays > 0 ? `${frozenDays} day${frozenDays === 1 ? "" : "s"}` : `${frozenHours} hour${frozenHours === 1 ? "" : "s"}`;
+        const signedByteDelta = drift.byteDelta > 0 ? `+${drift.byteDelta}` : `${drift.byteDelta}`;
+        console.warn(`[prompt-templates] Customized template "${def.eventType}" has drifted from its code default; frozen for ${frozenFor} since ${globalRecord.updatedAt}; byte delta ${signedByteDelta} (code default ${drift.defaultBytes} bytes, customization ${drift.customizedBytes} bytes). The customization was preserved; reset it manually to reconcile.`);
+      } else if (globalRecord.state === "enabled") {
+        resetPromptTemplateToDefault(globalRecord.id, def.defaultBody);
+      }
     }
   }
 }
 var init_seed_prompt_templates = __esm(() => {
+  init_default_drift();
   init_registry();
   init_db();
   init_session_templates();
@@ -4712,7 +4740,7 @@ function promoteSteeringToTask(task, message) {
     source: message.source === "script" ? "api" : message.source,
     taskType: "follow-up",
     parentTaskId: task.id,
-    requestedByUserId: message.createdByUserId ?? task.requestedByUserId,
+    requestedByUserId: message.createdByUserId,
     bypassTrackerContextDedup: true
   });
 }
@@ -4915,7 +4943,15 @@ var init_swarm_config_guard = __esm(() => {
         return null;
       return "Invalid BEDROCK_AUTH_MODE value (must be one of: sdk, bearer)";
     },
+    AGENT_MAX_TASKS: (value) => {
+      const str = String(value).trim();
+      if (!/^\d+$/.test(str) || Number(str) < 1 || Number(str) > 100) {
+        return "Invalid AGENT_MAX_TASKS (must be an integer between 1 and 100)";
+      }
+      return null;
+    },
     ...booleanValidators([
+      "MULTI_RUNTIME_ENABLED",
       "STEERING_ENABLED",
       "MEMORY_HYBRID_SEARCH",
       "MEMORY_GRAPH_EXPANSION",
@@ -4938,7 +4974,8 @@ var init_swarm_config_guard = __esm(() => {
       "MCP_OAUTH_ALLOW_PRIVATE_HOSTS",
       "OTEL_TRACE_POLL",
       "ANONYMIZED_TELEMETRY",
-      "SWARM_HIDE_CLOUD_PROMO"
+      "SWARM_HIDE_CLOUD_PROMO",
+      "DB_QUERY_BOUNDED_ENABLED"
     ]),
     ...enumValidator("SLACK_THREAD_STEERING", ["lead", "all"]),
     ...enumValidator("SLACK_THREAD_STEERING_MODE", ["steer", "queue"]),
@@ -4953,8 +4990,13 @@ var init_swarm_config_guard = __esm(() => {
       "WORKFLOW_MAX_ITERATIONS",
       "WORKFLOW_MAX_STEPS_PER_RUN",
       "SCHEDULER_INTERVAL_MS",
+      "RUNTIME_STALE_THRESHOLD_MIN",
       "SCRIPT_RUN_CONCURRENCY_CAP",
-      "WORKER_API_READY_TIMEOUT_SECONDS"
+      "WORKER_API_READY_TIMEOUT_SECONDS",
+      "DB_QUERY_HTTP_BUDGET_MS",
+      "DB_QUERY_HTTP_MAX_ROWS",
+      "DB_QUERY_MCP_BUDGET_MS",
+      "DB_QUERY_MCP_MAX_ROWS"
     ], 1),
     ...integerValidators(["HEARTBEAT_MAX_AUTO_ASSIGN"], 0),
     MEMORY_MIN_SIMILARITY: (value) => validateFloatRange("MEMORY_MIN_SIMILARITY", value, 0, 1, "between 0 and 1 inclusive"),
@@ -5171,7 +5213,7 @@ Environment-specific knowledge that's unique to your setup:
 var init_defaults = () => {};
 
 // node_modules/sqlite-vec/index.cjs
-var require_sqlite_vec = __commonJS((exports, module) => {
+var require_sqlite_vec = __commonJS(function(exports, module) {
   var { arch, platform } = __require("node:process");
   var BASE_PACKAGE_NAME = "sqlite-vec";
   var ENTRYPOINT_BASE_NAME = "vec0";
@@ -5208,442 +5250,448 @@ var require_sqlite_vec = __commonJS((exports, module) => {
 // src/be/db.ts
 var exports_db = {};
 __export(exports_db, {
-  withFavoriteFlags: () => withFavoriteFlags,
-  upsertSwarmConfig: () => upsertSwarmConfig,
-  upsertSkillFiles: () => upsertSkillFiles,
-  upsertSkillFile: () => upsertSkillFile,
-  upsertService: () => upsertService,
-  upsertScriptRunJournalStep: () => upsertScriptRunJournalStep,
-  upsertPromptTemplate: () => upsertPromptTemplate,
-  upsertKv: () => upsertKv,
-  upsertInboxState: () => upsertInboxState,
-  upsertChannelActivityCursor: () => upsertChannelActivityCursor,
-  upsertBudget: () => upsertBudget,
-  upsertAssetKeyMapping: () => upsertAssetKeyMapping,
-  updateWorkflowRunStep: () => updateWorkflowRunStep,
-  updateWorkflowRun: () => updateWorkflowRun,
-  updateWorkflow: () => updateWorkflow,
-  updateUser: () => updateUser,
-  updateTaskVcs: () => updateTaskVcs,
-  updateTaskTitle: () => updateTaskTitle,
-  updateTaskProgress: () => updateTaskProgress,
-  updateTaskClaudeSessionId: () => updateTaskClaudeSessionId,
-  updateSwarmRepo: () => updateSwarmRepo,
-  updateSlackMessageRecord: () => updateSlackMessageRecord,
-  updateSkill: () => updateSkill,
-  updateServiceStatus: () => updateServiceStatus,
-  updateScriptRun: () => updateScriptRun,
-  updateScheduledTask: () => updateScheduledTask,
-  updateReadState: () => updateReadState,
-  updatePage: () => updatePage,
-  updateMetric: () => updateMetric,
-  updateMcpServer: () => updateMcpServer,
-  updateApprovalRequestNotifications: () => updateApprovalRequestNotifications,
-  updateAgentStatusFromCapacity: () => updateAgentStatusFromCapacity,
-  updateAgentStatus: () => updateAgentStatus,
-  updateAgentProvider: () => updateAgentProvider,
-  updateAgentProfile: () => updateAgentProfile,
-  updateAgentName: () => updateAgentName,
-  updateAgentMaxTasks: () => updateAgentMaxTasks,
-  updateAgentCredentialState: () => updateAgentCredentialState,
-  updateAgentCredStatus: () => updateAgentCredStatus,
-  updateAgentActivity: () => updateAgentActivity,
-  updateActiveSessionProviderSessionId: () => updateActiveSessionProviderSessionId,
-  uninstallSkill: () => uninstallSkill,
-  uninstallMcpServer: () => uninstallMcpServer,
-  toggleAgentSkill: () => toggleAgentSkill,
-  taskQueries: () => taskQueries,
-  sweepExpiredKvPrefix: () => sweepExpiredKvPrefix,
-  sweepExpiredKv: () => sweepExpiredKv,
-  supersedeTask: () => supersedeTask,
-  startTask: () => startTask,
-  shouldBlockPolling: () => shouldBlockPolling,
-  setUserFavorite: () => setUserFavorite,
-  setSlackMessageTracking: () => setSlackMessageTracking,
-  setFavorite: () => setFavorite,
-  setBudgetRefusalFollowUpTaskId: () => setBudgetRefusalFollowUpTaskId,
-  setApiKeyName: () => setApiKeyName,
-  setAgentHarnessProvider: () => setAgentHarnessProvider,
-  sessionLogQueries: () => sessionLogQueries,
-  searchSkills: () => searchSkills,
-  resumeTask: () => resumeTask,
-  resolveWaitState: () => resolveWaitState,
-  resolvePromptTemplate: () => resolvePromptTemplate,
-  resolveApprovalRequest: () => resolveApprovalRequest,
-  resetTasksNotified: () => resetTasksNotified,
-  resetPromptTemplateToDefault: () => resetPromptTemplateToDefault,
-  resetOrphanedInProgressTasksForAgent: () => resetOrphanedInProgressTasksForAgent,
-  resetEmptyPollCount: () => resetEmptyPollCount,
-  reserveSlackMessage: () => reserveSlackMessage,
-  replaceTaskAttachment: () => replaceTaskAttachment,
-  releaseTask: () => releaseTask,
-  releaseStaleReviewingTasks: () => releaseStaleReviewingTasks,
-  releaseStaleProcessingInbox: () => releaseStaleProcessingInbox,
-  releaseStaleMentionProcessing: () => releaseStaleMentionProcessing,
-  releaseMentionProcessing: () => releaseMentionProcessing,
-  rejectTask: () => rejectTask,
-  recordSlackMessage: () => recordSlackMessage,
-  recordKeyUsage: () => recordKeyUsage,
-  recordKeyRateLimitWindows: () => recordKeyRateLimitWindows,
-  recordInlineScriptRun: () => recordInlineScriptRun,
-  recordBudgetRefusalNotification: () => recordBudgetRefusalNotification,
-  reassociateSessionLogs: () => reassociateSessionLogs,
-  postMessage: () => postMessage,
-  pauseTask: () => pauseTask,
-  overwriteTerminalTaskResultText: () => overwriteTerminalTaskResultText,
-  normalizeSkillFilePath: () => normalizeSkillFilePath,
-  moveTaskToBacklog: () => moveTaskToBacklog,
-  moveTaskFromBacklog: () => moveTaskFromBacklog,
-  moveAssetKey: () => moveAssetKey,
-  maskSecrets: () => maskSecrets,
-  markTasksNotified: () => markTasksNotified,
-  markTaskSlackReplySent: () => markTaskSlackReplySent,
-  markSteeringPromoted: () => markSteeringPromoted,
-  markSteeringHandled: () => markSteeringHandled,
-  markSteeringDelivered: () => markSteeringDelivered,
-  markSlackTreeRendered: () => markSlackTreeRendered,
-  markKeyRateLimited: () => markKeyRateLimited,
-  markInboxMessageResponded: () => markInboxMessageResponded,
-  markInboxMessageRead: () => markInboxMessageRead,
-  markInboxMessageDelegated: () => markInboxMessageDelegated,
-  logQueries: () => logQueries,
-  listWorkflows: () => listWorkflows,
-  listWorkflowRunsPage: () => listWorkflowRunsPage,
-  listWorkflowRuns: () => listWorkflowRuns,
-  listUserFavorites: () => listUserFavorites,
-  listTaskTemplates: () => listTaskTemplates,
-  listSkills: () => listSkills,
-  listSkillFileManifest: () => listSkillFileManifest,
-  listScriptRuns: () => listScriptRuns,
-  listScriptRunJournalSteps: () => listScriptRunJournalSteps,
-  listRecentSessions: () => listRecentSessions,
-  listPagesByAgent: () => listPagesByAgent,
-  listMetricsByAgent: () => listMetricsByAgent,
-  listMcpServers: () => listMcpServers,
-  listKv: () => listKv,
-  listInboxState: () => listInboxState,
-  listFavorites: () => listFavorites,
-  listAssetSummaries: () => listAssetSummaries,
-  listApprovalRequests: () => listApprovalRequests,
-  listAllPages: () => listAllPages,
-  listAllMetrics: () => listAllMetrics,
-  listAgentsWithCredStatusByProvider: () => listAgentsWithCredStatusByProvider,
-  isSqliteVecAvailable: () => isSqliteVecAvailable,
-  isPoolAffinityEnforcementEnabled: () => isPoolAffinityEnforcementEnabled,
-  isPendingSlackMessage: () => isPendingSlackMessage,
-  isAgentEligibleForTask: () => isAgentEligibleForTask,
-  installSystemDefaultSkillsForAgent: () => installSystemDefaultSkillsForAgent,
-  installSkill: () => installSkill,
-  installMcpServer: () => installMcpServer,
-  insertTaskAttachment: () => insertTaskAttachment,
-  insertPricingRow: () => insertPricingRow,
-  insertActiveSession: () => insertActiveSession,
-  initDb: () => initDb,
-  incrementPageViewCount: () => incrementPageViewCount,
-  incrementEmptyPollCount: () => incrementEmptyPollCount,
-  incrKv: () => incrKv,
-  heartbeatActiveSession: () => heartbeatActiveSession,
-  hasPendingSteering: () => hasPendingSteering,
-  hasNonTerminalResumeChild: () => hasNonTerminalResumeChild,
-  hasNonTerminalRerouteDecisionChild: () => hasNonTerminalRerouteDecisionChild,
-  hasFirstCompletedTask: () => hasFirstCompletedTask,
-  hasCapacity: () => hasCapacity,
-  hasBudgetRefusalNotificationToday: () => hasBudgetRefusalNotificationToday,
-  getWorkflowsByScheduleId: () => getWorkflowsByScheduleId,
-  getWorkflowVersions: () => getWorkflowVersions,
-  getWorkflowVersion: () => getWorkflowVersion,
-  getWorkflowRunStepsByRunId: () => getWorkflowRunStepsByRunId,
-  getWorkflowRunStep: () => getWorkflowRunStep,
-  getWorkflowRun: () => getWorkflowRun,
-  getWorkflow: () => getWorkflow,
-  getWaitStateByStepId: () => getWaitStateByStepId,
-  getWaitStateById: () => getWaitStateById,
-  getUserById: () => getUserById,
-  getUnreadMessages: () => getUnreadMessages,
-  getUnreadInboxMessages: () => getUnreadInboxMessages,
-  getUnassignedTasksCount: () => getUnassignedTasksCount,
-  getUnassignedTaskIdsForAgent: () => getUnassignedTaskIdsForAgent,
-  getUnassignedTaskIds: () => getUnassignedTaskIds,
-  getUnassignedPoolTasks: () => getUnassignedPoolTasks,
-  getTasksCount: () => getTasksCount,
-  getTasksByStatus: () => getTasksByStatus,
-  getTasksByAgentId: () => getTasksByAgentId,
-  getTaskStats: () => getTaskStats,
-  getTaskByWorkflowRunStepId: () => getTaskByWorkflowRunStepId,
-  getTaskById: () => getTaskById,
-  getTaskAttachments: () => getTaskAttachments,
-  getSystemDefaultSkills: () => getSystemDefaultSkills,
-  getSwarmRepos: () => getSwarmRepos,
-  getSwarmRepoByUrl: () => getSwarmRepoByUrl,
-  getSwarmRepoByName: () => getSwarmRepoByName,
-  getSwarmRepoById: () => getSwarmRepoById,
-  getSwarmMetrics: () => getSwarmMetrics,
-  getSwarmConfigs: () => getSwarmConfigs,
-  getSwarmConfigLookupById: () => getSwarmConfigLookupById,
-  getSwarmConfigById: () => getSwarmConfigById,
-  getStuckWorkflowRuns: () => getStuckWorkflowRuns,
-  getStuckWaitRuns: () => getStuckWaitRuns,
-  getStuckApprovalRuns: () => getStuckApprovalRuns,
-  getStepCountForNode: () => getStepCountForNode,
-  getStepByIdempotencyKey: () => getStepByIdempotencyKey,
-  getSteeringMessagesForTask: () => getSteeringMessagesForTask,
-  getSteeringMessageById: () => getSteeringMessageById,
-  getStalledInProgressTasks: () => getStalledInProgressTasks,
-  getStaleUnassignedAffinityTasks: () => getStaleUnassignedAffinityTasks,
-  getStalePinnedResumes: () => getStalePinnedResumes,
-  getSlackTreeMessages: () => getSlackTreeMessages,
-  getSlackTreeMessageByThread: () => getSlackTreeMessageByThread,
-  getSlackTreeMessage: () => getSlackTreeMessage,
-  getSlackTasksMissingTree: () => getSlackTasksMissingTree,
-  getSlackTasksInThread: () => getSlackTasksInThread,
-  getSlackRenderV2ActivatedAt: () => getSlackRenderV2ActivatedAt,
-  getSlackOutcomeMessage: () => getSlackOutcomeMessage,
-  getSlackMessageByChannelTs: () => getSlackMessageByChannelTs,
-  getSkillFiles: () => getSkillFiles,
-  getSkillFile: () => getSkillFile,
-  getSkillByName: () => getSkillByName,
-  getSkillById: () => getSkillById,
-  getSessionLogsByTaskId: () => getSessionLogsByTaskId,
-  getSessionLogsBySession: () => getSessionLogsBySession,
-  getSessionCostsFiltered: () => getSessionCostsFiltered,
-  getSessionCostsByTaskId: () => getSessionCostsByTaskId,
-  getSessionCostsByAgentId: () => getSessionCostsByAgentId,
-  getSessionCostSummary: () => getSessionCostSummary,
-  getServicesByAgentId: () => getServicesByAgentId,
-  getServiceById: () => getServiceById,
-  getServiceByAgentAndName: () => getServiceByAgentAndName,
-  getScriptRunJournalStep: () => getScriptRunJournalStep,
-  getScriptRunByIdempotencyKey: () => getScriptRunByIdempotencyKey,
-  getScriptRun: () => getScriptRun,
-  getScheduledTasks: () => getScheduledTasks,
-  getScheduledTaskByName: () => getScheduledTaskByName,
-  getScheduledTaskById: () => getScheduledTaskById,
-  getRunningScriptRuns: () => getRunningScriptRuns,
-  getRootTaskChain: () => getRootTaskChain,
-  getRetryableSteps: () => getRetryableSteps,
-  getResolvedConfig: () => getResolvedConfig,
-  getRemainingCapacity: () => getRemainingCapacity,
-  getRecentlyFinishedWorkerTasks: () => getRecentlyFinishedWorkerTasks,
-  getRecentlyCancelledTasksForAgent: () => getRecentlyCancelledTasksForAgent,
-  getRecentFailedTasks: () => getRecentFailedTasks,
-  getRecentFailedCount: () => getRecentFailedCount,
-  getRecentCompletedCount: () => getRecentCompletedCount,
-  getRecentBudgetRefusalNotifications: () => getRecentBudgetRefusalNotifications,
-  getPromptTemplates: () => getPromptTemplates,
-  getPromptTemplateHistory: () => getPromptTemplateHistory,
-  getPromptTemplateById: () => getPromptTemplateById,
-  getPricingRows: () => getPricingRows,
-  getPendingWaitsByEvent: () => getPendingWaitsByEvent,
-  getPendingTaskForAgent: () => getPendingTaskForAgent,
-  getPendingSteeringForTask: () => getPendingSteeringForTask,
-  getPendingSteeringForAgent: () => getPendingSteeringForAgent,
-  getPendingEventWaitNames: () => getPendingEventWaitNames,
-  getPausedTasksForAgent: () => getPausedTasksForAgent,
-  getPageVersions: () => getPageVersions,
-  getPageVersion: () => getPageVersion,
-  getPageBySlug: () => getPageBySlug,
-  getPage: () => getPage,
-  getOrphanedInProgressTasksForAgent: () => getOrphanedInProgressTasksForAgent,
-  getOfferedTasksForAgent: () => getOfferedTasksForAgent,
-  getMostRecentTaskInThread: () => getMostRecentTaskInThread,
-  getMetricVersions: () => getMetricVersions,
-  getMetricVersion: () => getMetricVersion,
-  getMetricBySlug: () => getMetricBySlug,
-  getMetric: () => getMetric,
-  getMessageById: () => getMessageById,
-  getMentionsForAgent: () => getMentionsForAgent,
-  getMcpServerByName: () => getMcpServerByName,
-  getMcpServerById: () => getMcpServerById,
-  getLogsByTaskIdChronological: () => getLogsByTaskIdChronological,
-  getLogsByTaskId: () => getLogsByTaskId,
-  getLogsByEventType: () => getLogsByEventType,
-  getLogsByAgentId: () => getLogsByAgentId,
-  getLiveAgentCounts: () => getLiveAgentCounts,
-  getLeadAgent: () => getLeadAgent,
-  getLatestTaskByContextKey: () => getLatestTaskByContextKey,
-  getLatestStepForNode: () => getLatestStepForNode,
-  getLatestScriptRunStepTaskByContextKey: () => getLatestScriptRunStepTaskByContextKey,
-  getLatestPageBySlug: () => getLatestPageBySlug,
-  getLatestLeadTaskInThread: () => getLatestLeadTaskInThread,
-  getLatestContextVersion: () => getLatestContextVersion,
-  getLatestActiveTaskInThread: () => getLatestActiveTaskInThread,
-  getLastSuccessfulRun: () => getLastSuccessfulRun,
-  getLastRunStart: () => getLastRunStart,
-  getLastReadAt: () => getLastReadAt,
-  getKv: () => getKv,
-  getKeyStatuses: () => getKeyStatuses,
-  getKeyCostSummary: () => getKeyCostSummary,
-  getInstanceActivity: () => getInstanceActivity,
-  getInjectableGlobalConfigs: () => getInjectableGlobalConfigs,
-  getInboxSummary: () => getInboxSummary,
-  getInboxMessageById: () => getInboxMessageById,
-  getInProgressTasksByContextKey: () => getInProgressTasksByContextKey,
-  getInProgressSlackTasks: () => getInProgressSlackTasks,
-  getIdleWorkersWithCapacity: () => getIdleWorkersWithCapacity,
-  getFavoriteItemIdSet: () => getFavoriteItemIdSet,
-  getExpiredPendingApprovals: () => getExpiredPendingApprovals,
-  getDueWaitStates: () => getDueWaitStates,
-  getDueScheduledTasks: () => getDueScheduledTasks,
-  getDependentTasks: () => getDependentTasks,
-  getDb: () => getDb,
-  getDashboardCostSummary: () => getDashboardCostSummary,
-  getDailySpendGlobal: () => getDailySpendGlobal,
-  getDailySpendForUser: () => getDailySpendForUser,
-  getDailySpendForAgent: () => getDailySpendForAgent,
-  getContextVersionHistory: () => getContextVersionHistory,
-  getContextVersion: () => getContextVersion,
-  getContextSummaryByTaskId: () => getContextSummaryByTaskId,
-  getContextSnapshotsByTaskId: () => getContextSnapshotsByTaskId,
-  getContextSnapshotsBySessionId: () => getContextSnapshotsBySessionId,
-  getConcurrentContext: () => getConcurrentContext,
-  getCompletedStepNodeIds: () => getCompletedStepNodeIds,
-  getCompletedSlackTasks: () => getCompletedSlackTasks,
-  getChildTasks: () => getChildTasks,
-  getChannelMessages: () => getChannelMessages,
-  getChannelByName: () => getChannelByName,
-  getChannelById: () => getChannelById,
-  getChannelActivityCursor: () => getChannelActivityCursor,
-  getBudgets: () => getBudgets,
-  getBudgetRefusalNotification: () => getBudgetRefusalNotification,
-  getBudget: () => getBudget,
-  getAvailableKeyIndices: () => getAvailableKeyIndices,
-  getAssetKeyMappingByProvider: () => getAssetKeyMappingByProvider,
-  getAssetKeyMapping: () => getAssetKeyMapping,
-  getApprovalRequestByStepId: () => getApprovalRequestByStepId,
-  getApprovalRequestById: () => getApprovalRequestById,
-  getAppVersions: () => getAppVersions,
-  getAppVersion: () => getAppVersion,
-  getAllUsers: () => getAllUsers,
-  getAllTasks: () => getAllTasks,
-  getAllSessionCosts: () => getAllSessionCosts,
-  getAllServices: () => getAllServices,
-  getAllPricingRows: () => getAllPricingRows,
-  getAllLogs: () => getAllLogs,
-  getAllChannels: () => getAllChannels,
-  getAllChannelActivityCursors: () => getAllChannelActivityCursors,
-  getAllAgentsWithTasks: () => getAllAgentsWithTasks,
-  getAllAgents: () => getAllAgents,
-  getAllAgentMailInboxMappings: () => getAllAgentMailInboxMappings,
-  getAgentWorkingOnThread: () => getAgentWorkingOnThread,
-  getAgentWithTasks: () => getAgentWithTasks,
-  getAgentSkills: () => getAgentSkills,
-  getAgentMcpServers: () => getAgentMcpServers,
-  getAgentMailInboxMappingsByAgent: () => getAgentMailInboxMappingsByAgent,
-  getAgentMailInboxMapping: () => getAgentMailInboxMapping,
-  getAgentHarnessProviders: () => getAgentHarnessProviders,
-  getAgentCurrentTask: () => getAgentCurrentTask,
-  getAgentById: () => getAgentById,
-  getActiveTaskCount: () => getActiveTaskCount,
-  getActiveSessions: () => getActiveSessions,
-  getActiveSessionForTask: () => getActiveSessionForTask,
-  getActivePricingRow: () => getActivePricingRow,
-  generateDefaultToolsMd: () => generateDefaultToolsMd,
-  generateDefaultSoulMd: () => generateDefaultSoulMd,
-  generateDefaultIdentityMd: () => generateDefaultIdentityMd,
-  generateDefaultClaudeMd: () => generateDefaultClaudeMd,
-  findTaskByVcs: () => findTaskByVcs,
-  findTaskByGitHub: () => findTaskByGitHub,
-  findTaskByAgentMailThread: () => findTaskByAgentMailThread,
-  findRecentSimilarTasks: () => findRecentSimilarTasks,
-  findRecentCancelledTaskInThread: () => findRecentCancelledTaskInThread,
-  findExistingLinearTrackerContextWork: () => findExistingLinearTrackerContextWork,
-  findCompletedTaskInThread: () => findCompletedTaskInThread,
-  failTask: () => failTask,
-  failPendingResumeIfUnclaimed: () => failPendingResumeIfUnclaimed,
-  ensureSlackRenderV2Activation: () => ensureSlackRenderV2Activation,
-  detachTaskFromWorkflowRunStep: () => detachTaskFromWorkflowRunStep,
-  deleteWorkflow: () => deleteWorkflow,
-  deleteUser: () => deleteUser,
-  deleteTaskAttachment: () => deleteTaskAttachment,
-  deleteTask: () => deleteTask,
-  deleteSwarmRepo: () => deleteSwarmRepo,
-  deleteSwarmConfigByKey: () => deleteSwarmConfigByKey,
-  deleteSwarmConfig: () => deleteSwarmConfig,
-  deleteSlackMessageRecord: () => deleteSlackMessageRecord,
-  deleteSkillFile: () => deleteSkillFile,
-  deleteSkill: () => deleteSkill,
-  deleteServicesByAgentId: () => deleteServicesByAgentId,
-  deleteService: () => deleteService,
-  deleteScheduledTask: () => deleteScheduledTask,
-  deletePromptTemplate: () => deletePromptTemplate,
-  deletePricingRow: () => deletePricingRow,
-  deletePage: () => deletePage,
-  deleteMetric: () => deleteMetric,
-  deleteMcpServer: () => deleteMcpServer,
-  deleteKv: () => deleteKv,
-  deleteChannel: () => deleteChannel,
-  deleteBudget: () => deleteBudget,
-  deleteAgentMailInboxMapping: () => deleteAgentMailInboxMapping,
-  deleteAgent: () => deleteAgent,
-  deleteActiveSessionById: () => deleteActiveSessionById,
-  deleteActiveSession: () => deleteActiveSession,
-  createWorkflowVersion: () => createWorkflowVersion,
-  createWorkflowRunStep: () => createWorkflowRunStep,
-  createWorkflowRun: () => createWorkflowRun,
-  createWorkflow: () => createWorkflow,
-  createWaitState: () => createWaitState,
-  createUser: () => createUser,
-  createTaskExtended: () => createTaskExtended,
-  createTask: () => createTask,
-  createSwarmRepo: () => createSwarmRepo,
-  createSteeringMessage: () => createSteeringMessage,
-  createSkill: () => createSkill,
-  createSessionLogs: () => createSessionLogs,
-  createSessionCost: () => createSessionCost,
-  createService: () => createService,
-  createScriptRun: () => createScriptRun,
-  createScheduledTask: () => createScheduledTask,
-  createPageVersion: () => createPageVersion,
-  createPage: () => createPage,
-  createMetricVersion: () => createMetricVersion,
-  createMetric: () => createMetric,
-  createMcpServer: () => createMcpServer,
-  createLogEntry: () => createLogEntry,
-  createInboxMessage: () => createInboxMessage,
-  createContextVersion: () => createContextVersion,
-  createContextSnapshot: () => createContextSnapshot,
-  createChannel: () => createChannel,
-  createApprovalRequest: () => createApprovalRequest,
-  createAppVersion: () => createAppVersion,
-  createAgentMailInboxMapping: () => createAgentMailInboxMapping,
-  createAgent: () => createAgent,
-  countWorkflowRuns: () => countWorkflowRuns,
-  countSessions: () => countSessions,
-  countScriptRuns: () => countScriptRuns,
-  countScriptRunJournalSteps: () => countScriptRunJournalSteps,
-  countScriptRunJournalAgentTaskSteps: () => countScriptRunJournalAgentTaskSteps,
-  countPagesByAgent: () => countPagesByAgent,
-  countMetricsByAgent: () => countMetricsByAgent,
-  countKv: () => countKv,
-  countAllPages: () => countAllPages,
-  countAllMetrics: () => countAllMetrics,
-  countActiveScriptRuns: () => countActiveScriptRuns,
-  computeContentHash: () => computeContentHash,
-  completeTask: () => completeTask,
-  closeDb: () => closeDb,
-  clearKeyRateLimit: () => clearKeyRateLimit,
-  cleanupStaleSessions: () => cleanupStaleSessions,
-  cleanupAgentSessions: () => cleanupAgentSessions,
-  claimTask: () => claimTask,
-  claimOfferedTask: () => claimOfferedTask,
-  claimMentions: () => claimMentions,
-  claimInboxMessages: () => claimInboxMessages,
-  checkoutPromptTemplate: () => checkoutPromptTemplate,
-  checkDependencies: () => checkDependencies,
-  cascadeFailDependents: () => cascadeFailDependents,
-  cancelTask: () => cancelTask,
-  cancelPendingSteeringForTask: () => cancelPendingSteeringForTask,
-  buildRoutingAffinityFromAgent: () => buildRoutingAffinityFromAgent,
-  bindSlackMessageTimestamp: () => bindSlackMessageTimestamp,
-  backfillSupersedeTaskResumeTaskId: () => backfillSupersedeTaskResumeTaskId,
-  autoEncryptLegacyPlaintextSecrets: () => autoEncryptLegacyPlaintextSecrets,
-  assignUnassignedTaskPending: () => assignUnassignedTaskPending,
-  agentQueries: () => agentQueries,
-  acceptTask: () => acceptTask,
-  UNATTRIBUTED_USER_ID: () => UNATTRIBUTED_USER_ID,
-  SKILL_FILE_LIMITS: () => SKILL_FILE_LIMITS,
+  KvTypeCollisionError: () => KvTypeCollisionError,
   MAX_EMPTY_POLLS: () => MAX_EMPTY_POLLS,
-  KvTypeCollisionError: () => KvTypeCollisionError
+  SKILL_FILE_LIMITS: () => SKILL_FILE_LIMITS,
+  UNATTRIBUTED_USER_ID: () => UNATTRIBUTED_USER_ID,
+  __resetSqliteVecExtensionPathCacheForTests: () => __resetSqliteVecExtensionPathCacheForTests,
+  acceptTask: () => acceptTask,
+  agentQueries: () => agentQueries,
+  assignUnassignedTaskPending: () => assignUnassignedTaskPending,
+  autoEncryptLegacyPlaintextSecrets: () => autoEncryptLegacyPlaintextSecrets,
+  backfillSupersedeTaskResumeTaskId: () => backfillSupersedeTaskResumeTaskId,
+  bindSlackMessageTimestamp: () => bindSlackMessageTimestamp,
+  buildRoutingAffinityFromAgent: () => buildRoutingAffinityFromAgent,
+  cancelPendingSteeringForTask: () => cancelPendingSteeringForTask,
+  cancelTask: () => cancelTask,
+  cascadeFailDependents: () => cascadeFailDependents,
+  checkDependencies: () => checkDependencies,
+  checkoutPromptTemplate: () => checkoutPromptTemplate,
+  claimInboxMessages: () => claimInboxMessages,
+  claimMentions: () => claimMentions,
+  claimOfferedTask: () => claimOfferedTask,
+  claimTask: () => claimTask,
+  cleanupAgentSessions: () => cleanupAgentSessions,
+  cleanupStaleSessions: () => cleanupStaleSessions,
+  clearKeyRateLimit: () => clearKeyRateLimit,
+  closeDb: () => closeDb,
+  completeTask: () => completeTask,
+  computeContentHash: () => computeContentHash,
+  countActiveScriptRuns: () => countActiveScriptRuns,
+  countAllMetrics: () => countAllMetrics,
+  countAllPages: () => countAllPages,
+  countKv: () => countKv,
+  countMetricsByAgent: () => countMetricsByAgent,
+  countPagesByAgent: () => countPagesByAgent,
+  countScriptRunJournalAgentTaskSteps: () => countScriptRunJournalAgentTaskSteps,
+  countScriptRunJournalSteps: () => countScriptRunJournalSteps,
+  countScriptRuns: () => countScriptRuns,
+  countSessions: () => countSessions,
+  countWorkflowRuns: () => countWorkflowRuns,
+  createAgent: () => createAgent,
+  createAgentMailInboxMapping: () => createAgentMailInboxMapping,
+  createAppVersion: () => createAppVersion,
+  createApprovalRequest: () => createApprovalRequest,
+  createChannel: () => createChannel,
+  createContextSnapshot: () => createContextSnapshot,
+  createContextVersion: () => createContextVersion,
+  createInboxMessage: () => createInboxMessage,
+  createLogEntry: () => createLogEntry,
+  createMcpServer: () => createMcpServer,
+  createMetric: () => createMetric,
+  createMetricVersion: () => createMetricVersion,
+  createPage: () => createPage,
+  createPageVersion: () => createPageVersion,
+  createScheduledTask: () => createScheduledTask,
+  createScriptRun: () => createScriptRun,
+  createService: () => createService,
+  createSessionCost: () => createSessionCost,
+  createSessionLogs: () => createSessionLogs,
+  createSkill: () => createSkill,
+  createSteeringMessage: () => createSteeringMessage,
+  createSwarmRepo: () => createSwarmRepo,
+  createTask: () => createTask,
+  createTaskExtended: () => createTaskExtended,
+  createUser: () => createUser,
+  createWaitState: () => createWaitState,
+  createWorkflow: () => createWorkflow,
+  createWorkflowRun: () => createWorkflowRun,
+  createWorkflowRunStep: () => createWorkflowRunStep,
+  createWorkflowVersion: () => createWorkflowVersion,
+  deleteActiveSession: () => deleteActiveSession,
+  deleteActiveSessionById: () => deleteActiveSessionById,
+  deleteAgent: () => deleteAgent,
+  deleteAgentMailInboxMapping: () => deleteAgentMailInboxMapping,
+  deleteBudget: () => deleteBudget,
+  deleteChannel: () => deleteChannel,
+  deleteKv: () => deleteKv,
+  deleteMcpServer: () => deleteMcpServer,
+  deleteMetric: () => deleteMetric,
+  deletePage: () => deletePage,
+  deletePricingRow: () => deletePricingRow,
+  deletePromptTemplate: () => deletePromptTemplate,
+  deleteScheduledTask: () => deleteScheduledTask,
+  deleteService: () => deleteService,
+  deleteServicesByAgentId: () => deleteServicesByAgentId,
+  deleteSkill: () => deleteSkill,
+  deleteSkillFile: () => deleteSkillFile,
+  deleteSlackMessageRecord: () => deleteSlackMessageRecord,
+  deleteSwarmConfig: () => deleteSwarmConfig,
+  deleteSwarmConfigByKey: () => deleteSwarmConfigByKey,
+  deleteSwarmRepo: () => deleteSwarmRepo,
+  deleteTask: () => deleteTask,
+  deleteTaskAttachment: () => deleteTaskAttachment,
+  deleteUser: () => deleteUser,
+  deleteWorkflow: () => deleteWorkflow,
+  detachTaskFromWorkflowRunStep: () => detachTaskFromWorkflowRunStep,
+  ensureSlackRenderV2Activation: () => ensureSlackRenderV2Activation,
+  failPendingResumeIfUnclaimed: () => failPendingResumeIfUnclaimed,
+  failTask: () => failTask,
+  findCompletedTaskInThread: () => findCompletedTaskInThread,
+  findExistingLinearTrackerContextWork: () => findExistingLinearTrackerContextWork,
+  findRecentCancelledTaskInThread: () => findRecentCancelledTaskInThread,
+  findRecentSimilarTasks: () => findRecentSimilarTasks,
+  findTaskByAgentMailThread: () => findTaskByAgentMailThread,
+  findTaskByGitHub: () => findTaskByGitHub,
+  findTaskByVcs: () => findTaskByVcs,
+  generateDefaultClaudeMd: () => generateDefaultClaudeMd,
+  generateDefaultIdentityMd: () => generateDefaultIdentityMd,
+  generateDefaultSoulMd: () => generateDefaultSoulMd,
+  generateDefaultToolsMd: () => generateDefaultToolsMd,
+  getActivePricingRow: () => getActivePricingRow,
+  getActiveSessionForTask: () => getActiveSessionForTask,
+  getActiveSessions: () => getActiveSessions,
+  getActiveTaskCount: () => getActiveTaskCount,
+  getAgentById: () => getAgentById,
+  getAgentCurrentTask: () => getAgentCurrentTask,
+  getAgentHarnessProviders: () => getAgentHarnessProviders,
+  getAgentMailInboxMapping: () => getAgentMailInboxMapping,
+  getAgentMailInboxMappingsByAgent: () => getAgentMailInboxMappingsByAgent,
+  getAgentMcpServers: () => getAgentMcpServers,
+  getAgentSkills: () => getAgentSkills,
+  getAgentWithTasks: () => getAgentWithTasks,
+  getAgentWorkingOnThread: () => getAgentWorkingOnThread,
+  getAllAgentMailInboxMappings: () => getAllAgentMailInboxMappings,
+  getAllAgents: () => getAllAgents,
+  getAllAgentsWithTasks: () => getAllAgentsWithTasks,
+  getAllChannelActivityCursors: () => getAllChannelActivityCursors,
+  getAllChannels: () => getAllChannels,
+  getAllLogs: () => getAllLogs,
+  getAllPricingRows: () => getAllPricingRows,
+  getAllServices: () => getAllServices,
+  getAllSessionCosts: () => getAllSessionCosts,
+  getAllTasks: () => getAllTasks,
+  getAllUsers: () => getAllUsers,
+  getAppVersion: () => getAppVersion,
+  getAppVersions: () => getAppVersions,
+  getApprovalRequestById: () => getApprovalRequestById,
+  getApprovalRequestByStepId: () => getApprovalRequestByStepId,
+  getAssetKeyMapping: () => getAssetKeyMapping,
+  getAssetKeyMappingByProvider: () => getAssetKeyMappingByProvider,
+  getAttributionByPerson: () => getAttributionByPerson,
+  getAvailableKeyIndices: () => getAvailableKeyIndices,
+  getBudget: () => getBudget,
+  getBudgetRefusalNotification: () => getBudgetRefusalNotification,
+  getBudgets: () => getBudgets,
+  getChannelActivityCursor: () => getChannelActivityCursor,
+  getChannelById: () => getChannelById,
+  getChannelByName: () => getChannelByName,
+  getChannelMessages: () => getChannelMessages,
+  getChildTasks: () => getChildTasks,
+  getCompletedSlackTasks: () => getCompletedSlackTasks,
+  getCompletedStepNodeIds: () => getCompletedStepNodeIds,
+  getConcurrentContext: () => getConcurrentContext,
+  getContextSnapshotsBySessionId: () => getContextSnapshotsBySessionId,
+  getContextSnapshotsByTaskId: () => getContextSnapshotsByTaskId,
+  getContextSummaryByTaskId: () => getContextSummaryByTaskId,
+  getContextVersion: () => getContextVersion,
+  getContextVersionHistory: () => getContextVersionHistory,
+  getDailySpendForAgent: () => getDailySpendForAgent,
+  getDailySpendForUser: () => getDailySpendForUser,
+  getDailySpendGlobal: () => getDailySpendGlobal,
+  getDashboardCostSummary: () => getDashboardCostSummary,
+  getDb: () => getDb,
+  getDependentTasks: () => getDependentTasks,
+  getDueScheduledTasks: () => getDueScheduledTasks,
+  getDueWaitStates: () => getDueWaitStates,
+  getExpiredPendingApprovals: () => getExpiredPendingApprovals,
+  getFavoriteItemIdSet: () => getFavoriteItemIdSet,
+  getIdleWorkersWithCapacity: () => getIdleWorkersWithCapacity,
+  getInProgressSlackTasks: () => getInProgressSlackTasks,
+  getInProgressTasksByContextKey: () => getInProgressTasksByContextKey,
+  getInboxMessageById: () => getInboxMessageById,
+  getInboxSummary: () => getInboxSummary,
+  getInjectableGlobalConfigs: () => getInjectableGlobalConfigs,
+  getInstanceActivity: () => getInstanceActivity,
+  getKeyCostSummary: () => getKeyCostSummary,
+  getKeyStatuses: () => getKeyStatuses,
+  getKv: () => getKv,
+  getLastReadAt: () => getLastReadAt,
+  getLastRunStart: () => getLastRunStart,
+  getLastSuccessfulRun: () => getLastSuccessfulRun,
+  getLatestActiveTaskInThread: () => getLatestActiveTaskInThread,
+  getLatestContextVersion: () => getLatestContextVersion,
+  getLatestLeadTaskInThread: () => getLatestLeadTaskInThread,
+  getLatestPageBySlug: () => getLatestPageBySlug,
+  getLatestScriptRunStepTaskByContextKey: () => getLatestScriptRunStepTaskByContextKey,
+  getLatestStepForNode: () => getLatestStepForNode,
+  getLatestTaskByContextKey: () => getLatestTaskByContextKey,
+  getLeadAgent: () => getLeadAgent,
+  getLiveAgentCounts: () => getLiveAgentCounts,
+  getLogsByAgentId: () => getLogsByAgentId,
+  getLogsByEventType: () => getLogsByEventType,
+  getLogsByTaskId: () => getLogsByTaskId,
+  getLogsByTaskIdChronological: () => getLogsByTaskIdChronological,
+  getMcpServerById: () => getMcpServerById,
+  getMcpServerByName: () => getMcpServerByName,
+  getMentionsForAgent: () => getMentionsForAgent,
+  getMessageById: () => getMessageById,
+  getMetric: () => getMetric,
+  getMetricBySlug: () => getMetricBySlug,
+  getMetricVersion: () => getMetricVersion,
+  getMetricVersions: () => getMetricVersions,
+  getMostRecentTaskInThread: () => getMostRecentTaskInThread,
+  getOfferedTasksForAgent: () => getOfferedTasksForAgent,
+  getOrphanedInProgressTasksForAgent: () => getOrphanedInProgressTasksForAgent,
+  getPage: () => getPage,
+  getPageBySlug: () => getPageBySlug,
+  getPageVersion: () => getPageVersion,
+  getPageVersions: () => getPageVersions,
+  getPausedTasksForAgent: () => getPausedTasksForAgent,
+  getPendingEventWaitNames: () => getPendingEventWaitNames,
+  getPendingSteeringForAgent: () => getPendingSteeringForAgent,
+  getPendingSteeringForTask: () => getPendingSteeringForTask,
+  getPendingTaskForAgent: () => getPendingTaskForAgent,
+  getPendingWaitsByEvent: () => getPendingWaitsByEvent,
+  getPricingRows: () => getPricingRows,
+  getPromptTemplateById: () => getPromptTemplateById,
+  getPromptTemplateHistory: () => getPromptTemplateHistory,
+  getPromptTemplates: () => getPromptTemplates,
+  getRecentBudgetRefusalNotifications: () => getRecentBudgetRefusalNotifications,
+  getRecentCompletedCount: () => getRecentCompletedCount,
+  getRecentFailedCount: () => getRecentFailedCount,
+  getRecentFailedTasks: () => getRecentFailedTasks,
+  getRecentlyCancelledTasksForAgent: () => getRecentlyCancelledTasksForAgent,
+  getRecentlyFinishedWorkerTasks: () => getRecentlyFinishedWorkerTasks,
+  getRemainingCapacity: () => getRemainingCapacity,
+  getResolvedConfig: () => getResolvedConfig,
+  getRetryableSteps: () => getRetryableSteps,
+  getRootTaskChain: () => getRootTaskChain,
+  getRunningScriptRuns: () => getRunningScriptRuns,
+  getScheduledTaskById: () => getScheduledTaskById,
+  getScheduledTaskByName: () => getScheduledTaskByName,
+  getScheduledTasks: () => getScheduledTasks,
+  getScriptRun: () => getScriptRun,
+  getScriptRunByIdempotencyKey: () => getScriptRunByIdempotencyKey,
+  getScriptRunJournalStep: () => getScriptRunJournalStep,
+  getServiceByAgentAndName: () => getServiceByAgentAndName,
+  getServiceById: () => getServiceById,
+  getServicesByAgentId: () => getServicesByAgentId,
+  getSessionCostSummary: () => getSessionCostSummary,
+  getSessionCostsByAgentId: () => getSessionCostsByAgentId,
+  getSessionCostsByTaskId: () => getSessionCostsByTaskId,
+  getSessionCostsFiltered: () => getSessionCostsFiltered,
+  getSessionLogsBySession: () => getSessionLogsBySession,
+  getSessionLogsByTaskId: () => getSessionLogsByTaskId,
+  getSkillById: () => getSkillById,
+  getSkillByName: () => getSkillByName,
+  getSkillFile: () => getSkillFile,
+  getSkillFiles: () => getSkillFiles,
+  getSlackMessageByChannelTs: () => getSlackMessageByChannelTs,
+  getSlackOutcomeMessage: () => getSlackOutcomeMessage,
+  getSlackRenderV2ActivatedAt: () => getSlackRenderV2ActivatedAt,
+  getSlackTasksInThread: () => getSlackTasksInThread,
+  getSlackTasksMissingTree: () => getSlackTasksMissingTree,
+  getSlackTreeMessage: () => getSlackTreeMessage,
+  getSlackTreeMessageByThread: () => getSlackTreeMessageByThread,
+  getSlackTreeMessages: () => getSlackTreeMessages,
+  getStalePinnedResumes: () => getStalePinnedResumes,
+  getStaleUnassignedAffinityTasks: () => getStaleUnassignedAffinityTasks,
+  getStalledInProgressTasks: () => getStalledInProgressTasks,
+  getSteeringMessageById: () => getSteeringMessageById,
+  getSteeringMessagesForTask: () => getSteeringMessagesForTask,
+  getStepByIdempotencyKey: () => getStepByIdempotencyKey,
+  getStepCountForNode: () => getStepCountForNode,
+  getStuckApprovalRuns: () => getStuckApprovalRuns,
+  getStuckWaitRuns: () => getStuckWaitRuns,
+  getStuckWorkflowRuns: () => getStuckWorkflowRuns,
+  getSwarmConfigById: () => getSwarmConfigById,
+  getSwarmConfigLookupById: () => getSwarmConfigLookupById,
+  getSwarmConfigs: () => getSwarmConfigs,
+  getSwarmMetrics: () => getSwarmMetrics,
+  getSwarmRepoById: () => getSwarmRepoById,
+  getSwarmRepoByName: () => getSwarmRepoByName,
+  getSwarmRepoByUrl: () => getSwarmRepoByUrl,
+  getSwarmRepos: () => getSwarmRepos,
+  getSystemDefaultSkills: () => getSystemDefaultSkills,
+  getTaskAttachments: () => getTaskAttachments,
+  getTaskById: () => getTaskById,
+  getTaskByWorkflowRunStepId: () => getTaskByWorkflowRunStepId,
+  getTaskStats: () => getTaskStats,
+  getTasksByAgentId: () => getTasksByAgentId,
+  getTasksByStatus: () => getTasksByStatus,
+  getTasksCount: () => getTasksCount,
+  getUnassignedPoolTasks: () => getUnassignedPoolTasks,
+  getUnassignedTaskIds: () => getUnassignedTaskIds,
+  getUnassignedTaskIdsForAgent: () => getUnassignedTaskIdsForAgent,
+  getUnassignedTasksCount: () => getUnassignedTasksCount,
+  getUnreadInboxMessages: () => getUnreadInboxMessages,
+  getUnreadMessages: () => getUnreadMessages,
+  getUserById: () => getUserById,
+  getWaitStateById: () => getWaitStateById,
+  getWaitStateByStepId: () => getWaitStateByStepId,
+  getWorkflow: () => getWorkflow,
+  getWorkflowRun: () => getWorkflowRun,
+  getWorkflowRunStep: () => getWorkflowRunStep,
+  getWorkflowRunStepsByRunId: () => getWorkflowRunStepsByRunId,
+  getWorkflowVersion: () => getWorkflowVersion,
+  getWorkflowVersions: () => getWorkflowVersions,
+  getWorkflowsByScheduleId: () => getWorkflowsByScheduleId,
+  hasBudgetRefusalNotificationToday: () => hasBudgetRefusalNotificationToday,
+  hasCapacity: () => hasCapacity,
+  hasFirstCompletedTask: () => hasFirstCompletedTask,
+  hasNonTerminalRerouteDecisionChild: () => hasNonTerminalRerouteDecisionChild,
+  hasNonTerminalResumeChild: () => hasNonTerminalResumeChild,
+  hasPendingSteering: () => hasPendingSteering,
+  heartbeatActiveSession: () => heartbeatActiveSession,
+  incrKv: () => incrKv,
+  incrementEmptyPollCount: () => incrementEmptyPollCount,
+  incrementPageViewCount: () => incrementPageViewCount,
+  initDb: () => initDb,
+  insertActiveSession: () => insertActiveSession,
+  insertPricingRow: () => insertPricingRow,
+  insertTaskAttachment: () => insertTaskAttachment,
+  installMcpServer: () => installMcpServer,
+  installSkill: () => installSkill,
+  installSystemDefaultSkillsForAgent: () => installSystemDefaultSkillsForAgent,
+  isAgentEligibleForTask: () => isAgentEligibleForTask,
+  isPendingSlackMessage: () => isPendingSlackMessage,
+  isPoolAffinityEnforcementEnabled: () => isPoolAffinityEnforcementEnabled,
+  isSqliteVecAvailable: () => isSqliteVecAvailable,
+  listAgentsWithCredStatusByProvider: () => listAgentsWithCredStatusByProvider,
+  listAllMetrics: () => listAllMetrics,
+  listAllPages: () => listAllPages,
+  listApprovalRequests: () => listApprovalRequests,
+  listAssetSummaries: () => listAssetSummaries,
+  listFavorites: () => listFavorites,
+  listInboxState: () => listInboxState,
+  listKv: () => listKv,
+  listMcpServers: () => listMcpServers,
+  listMetricsByAgent: () => listMetricsByAgent,
+  listPagesByAgent: () => listPagesByAgent,
+  listRecentSessions: () => listRecentSessions,
+  listScriptRunJournalSteps: () => listScriptRunJournalSteps,
+  listScriptRuns: () => listScriptRuns,
+  listSkillFileManifest: () => listSkillFileManifest,
+  listSkills: () => listSkills,
+  listTaskTemplates: () => listTaskTemplates,
+  listUserFavorites: () => listUserFavorites,
+  listWorkflowRuns: () => listWorkflowRuns,
+  listWorkflowRunsPage: () => listWorkflowRunsPage,
+  listWorkflows: () => listWorkflows,
+  logQueries: () => logQueries,
+  markInboxMessageDelegated: () => markInboxMessageDelegated,
+  markInboxMessageRead: () => markInboxMessageRead,
+  markInboxMessageResponded: () => markInboxMessageResponded,
+  markKeyRateLimited: () => markKeyRateLimited,
+  markSlackTreeRendered: () => markSlackTreeRendered,
+  markSteeringDelivered: () => markSteeringDelivered,
+  markSteeringHandled: () => markSteeringHandled,
+  markSteeringPromoted: () => markSteeringPromoted,
+  markTaskSlackReplySent: () => markTaskSlackReplySent,
+  markTasksNotified: () => markTasksNotified,
+  maskSecrets: () => maskSecrets,
+  moveAssetKey: () => moveAssetKey,
+  moveTaskFromBacklog: () => moveTaskFromBacklog,
+  moveTaskToBacklog: () => moveTaskToBacklog,
+  normalizeSkillFilePath: () => normalizeSkillFilePath,
+  overwriteTerminalTaskResultText: () => overwriteTerminalTaskResultText,
+  pauseTask: () => pauseTask,
+  postMessage: () => postMessage,
+  reassociateSessionLogs: () => reassociateSessionLogs,
+  recordBudgetRefusalNotification: () => recordBudgetRefusalNotification,
+  recordInlineScriptRun: () => recordInlineScriptRun,
+  recordKeyRateLimitWindows: () => recordKeyRateLimitWindows,
+  recordKeyUsage: () => recordKeyUsage,
+  recordSlackMessage: () => recordSlackMessage,
+  recordTaskPullRequestAttachments: () => recordTaskPullRequestAttachments,
+  rejectTask: () => rejectTask,
+  releaseMentionProcessing: () => releaseMentionProcessing,
+  releaseStaleMentionProcessing: () => releaseStaleMentionProcessing,
+  releaseStaleOfferedTasksForOfflineAgents: () => releaseStaleOfferedTasksForOfflineAgents,
+  releaseStaleProcessingInbox: () => releaseStaleProcessingInbox,
+  releaseStaleReviewingTasks: () => releaseStaleReviewingTasks,
+  releaseTask: () => releaseTask,
+  replaceTaskAttachment: () => replaceTaskAttachment,
+  reserveSlackMessage: () => reserveSlackMessage,
+  resetEmptyPollCount: () => resetEmptyPollCount,
+  resetOrphanedInProgressTasksForAgent: () => resetOrphanedInProgressTasksForAgent,
+  resetPromptTemplateToDefault: () => resetPromptTemplateToDefault,
+  resetTasksNotified: () => resetTasksNotified,
+  resolveApprovalRequest: () => resolveApprovalRequest,
+  resolvePromptTemplate: () => resolvePromptTemplate,
+  resolveSqliteVecExtensionPath: () => resolveSqliteVecExtensionPath,
+  resolveWaitState: () => resolveWaitState,
+  resumeTask: () => resumeTask,
+  searchSkills: () => searchSkills,
+  sessionLogQueries: () => sessionLogQueries,
+  setAgentHarnessProvider: () => setAgentHarnessProvider,
+  setApiKeyName: () => setApiKeyName,
+  setBudgetRefusalFollowUpTaskId: () => setBudgetRefusalFollowUpTaskId,
+  setFavorite: () => setFavorite,
+  setSlackMessageTracking: () => setSlackMessageTracking,
+  setUserFavorite: () => setUserFavorite,
+  shouldBlockPolling: () => shouldBlockPolling,
+  startTask: () => startTask,
+  supersedeTask: () => supersedeTask,
+  sweepExpiredKv: () => sweepExpiredKv,
+  sweepExpiredKvPrefix: () => sweepExpiredKvPrefix,
+  taskQueries: () => taskQueries,
+  toggleAgentSkill: () => toggleAgentSkill,
+  uninstallMcpServer: () => uninstallMcpServer,
+  uninstallSkill: () => uninstallSkill,
+  updateActiveSessionProviderSessionId: () => updateActiveSessionProviderSessionId,
+  updateAgentActivity: () => updateAgentActivity,
+  updateAgentCredStatus: () => updateAgentCredStatus,
+  updateAgentCredentialMissing: () => updateAgentCredentialMissing,
+  updateAgentCredentialState: () => updateAgentCredentialState,
+  updateAgentMaxTasks: () => updateAgentMaxTasks,
+  updateAgentName: () => updateAgentName,
+  updateAgentProfile: () => updateAgentProfile,
+  updateAgentProvider: () => updateAgentProvider,
+  updateAgentStatus: () => updateAgentStatus,
+  updateAgentStatusFromCapacity: () => updateAgentStatusFromCapacity,
+  updateApprovalRequestNotifications: () => updateApprovalRequestNotifications,
+  updateMcpServer: () => updateMcpServer,
+  updateMetric: () => updateMetric,
+  updatePage: () => updatePage,
+  updateReadState: () => updateReadState,
+  updateScheduledTask: () => updateScheduledTask,
+  updateScriptRun: () => updateScriptRun,
+  updateServiceStatus: () => updateServiceStatus,
+  updateSkill: () => updateSkill,
+  updateSlackMessageRecord: () => updateSlackMessageRecord,
+  updateSwarmRepo: () => updateSwarmRepo,
+  updateTaskClaudeSessionId: () => updateTaskClaudeSessionId,
+  updateTaskProgress: () => updateTaskProgress,
+  updateTaskTitle: () => updateTaskTitle,
+  updateTaskVcs: () => updateTaskVcs,
+  updateUser: () => updateUser,
+  updateWorkflow: () => updateWorkflow,
+  updateWorkflowRun: () => updateWorkflowRun,
+  updateWorkflowRunStep: () => updateWorkflowRunStep,
+  upsertAssetKeyMapping: () => upsertAssetKeyMapping,
+  upsertBudget: () => upsertBudget,
+  upsertChannelActivityCursor: () => upsertChannelActivityCursor,
+  upsertInboxState: () => upsertInboxState,
+  upsertKv: () => upsertKv,
+  upsertPromptTemplate: () => upsertPromptTemplate,
+  upsertScriptRunJournalStep: () => upsertScriptRunJournalStep,
+  upsertService: () => upsertService,
+  upsertSkillFile: () => upsertSkillFile,
+  upsertSkillFiles: () => upsertSkillFiles,
+  upsertSwarmConfig: () => upsertSwarmConfig,
+  withFavoriteFlags: () => withFavoriteFlags
 });
 import { Database } from "bun:sqlite";
 function assetKeyPrefixPattern(input) {
@@ -5672,6 +5720,24 @@ function taskContextForTelemetry(task) {
 function isSqliteVecAvailable() {
   return sqliteVecAvailable;
 }
+function resolveSqliteVecExtensionPath() {
+  if (cachedSqliteVecExtensionPath !== null)
+    return cachedSqliteVecExtensionPath;
+  const extensionPath = process.env.SQLITE_VEC_EXTENSION_PATH;
+  if (extensionPath) {
+    cachedSqliteVecExtensionPath = extensionPath;
+    return cachedSqliteVecExtensionPath;
+  }
+  try {
+    cachedSqliteVecExtensionPath = require_sqlite_vec().getLoadablePath();
+  } catch {
+    cachedSqliteVecExtensionPath = undefined;
+  }
+  return cachedSqliteVecExtensionPath;
+}
+function __resetSqliteVecExtensionPathCacheForTests() {
+  cachedSqliteVecExtensionPath = null;
+}
 function loadSqliteVec(database) {
   sqliteVecAvailable = false;
   try {
@@ -5715,7 +5781,17 @@ function initDb(dbPath = "./agent-swarm-db.sqlite") {
   database.run("PRAGMA mmap_size = 268435456;");
   database.run("PRAGMA temp_store = MEMORY;");
   loadSqliteVec(database);
-  runMigrations(database);
+  try {
+    runMigrations(database);
+  } catch (error) {
+    db = null;
+    try {
+      database.close();
+    } catch (closeError) {
+      console.error("[migrations] Failed to close database after migration failure:", closeError);
+    }
+    throw error;
+  }
   ensureAgentProfileColumns(database);
   try {
     const taskSchemaInfo = db.prepare("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'agent_tasks'").get();
@@ -5933,6 +6009,10 @@ function updateAgentCredentialState(agentId, ready, missing) {
     resetEmptyPollCount(agentId);
   return row ? rowToAgent(row) : null;
 }
+function updateAgentCredentialMissing(agentId, missing) {
+  const json = missing && missing.length > 0 ? JSON.stringify(missing) : null;
+  getDb().prepare("UPDATE agents SET credentialMissing = ?, lastUpdatedAt = strftime('%Y-%m-%dT%H:%M:%fZ', 'now') WHERE id = ?").run(json, agentId);
+}
 function createAgent(agent) {
   const id = agent.id ?? crypto.randomUUID();
   const maxTasks = agent.maxTasks ?? 1;
@@ -6040,7 +6120,9 @@ function deleteAgent(id) {
   return result.changes > 0;
 }
 function getActiveTaskCount(agentId) {
-  const result = getDb().prepare("SELECT COUNT(*) as count FROM agent_tasks WHERE agentId = ? AND status = 'in_progress'").get(agentId);
+  const result = getDb().prepare(`SELECT COUNT(*) as count FROM agent_tasks
+       WHERE (agentId = ? AND status = 'in_progress')
+          OR (offeredTo = ? AND status = 'reviewing')`).get(agentId, agentId);
   return result?.count ?? 0;
 }
 function hasCapacity(agentId) {
@@ -6583,9 +6665,18 @@ function updateTaskTitle(taskId, title) {
   return row ? rowToAgentTask(row) : null;
 }
 function updateTaskVcs(taskId, vcs) {
-  const row = getDb().prepare(`UPDATE agent_tasks
-       SET vcsProvider = ?, vcsRepo = ?, vcsNumber = ?, vcsUrl = ?, lastUpdatedAt = ?
-       WHERE id = ? RETURNING *`).get(vcs.vcsProvider, vcs.vcsRepo, vcs.vcsNumber, vcs.vcsUrl, new Date().toISOString(), taskId);
+  const row = getDb().transaction(() => {
+    const updated = getDb().prepare(`UPDATE agent_tasks
+         SET vcsProvider = ?, vcsRepo = ?, vcsNumber = ?, vcsUrl = ?, lastUpdatedAt = ?
+         WHERE id = ? RETURNING *`).get(vcs.vcsProvider, vcs.vcsRepo, vcs.vcsNumber, vcs.vcsUrl, new Date().toISOString(), taskId);
+    if (updated) {
+      reconcileTaskPullRequestAttachments(taskId, updated.agentId, [
+        updated.output,
+        vcs.vcsProvider === "github" ? vcs.vcsUrl : null
+      ]);
+    }
+    return updated;
+  })();
   return row ? rowToAgentTask(row) : null;
 }
 function getTasksByAgentId(agentId) {
@@ -7020,13 +7111,24 @@ function completeTask(id, output) {
   if (isTerminalTaskStatus(oldTask.status)) {
     return null;
   }
-  const finishedAt = new Date().toISOString();
-  let row = taskQueries.updateStatus().get("completed", finishedAt, id);
+  const row = getDb().transaction(() => {
+    const finishedAt = new Date().toISOString();
+    let completed = taskQueries.updateStatus().get("completed", finishedAt, id);
+    if (!completed)
+      return null;
+    if (output) {
+      completed = taskQueries.setOutput().get(scrubSecrets(output), id);
+    }
+    if (completed) {
+      reconcileTaskPullRequestAttachments(id, completed.agentId, [
+        completed.output,
+        completed.vcsProvider === "github" ? completed.vcsUrl : null
+      ]);
+    }
+    return completed;
+  })();
   if (!row)
     return null;
-  if (output) {
-    row = taskQueries.setOutput().get(scrubSecrets(output), id);
-  }
   if (row && oldTask) {
     emitTaskLifecycleTelemetryAfterCommit("completed", {
       taskId: id,
@@ -7044,17 +7146,15 @@ function completeTask(id, output) {
         newValue: "completed"
       });
     } catch {}
-    try {
-      import("./event-bus-axn823e9.js").then(({ workflowEventBus }) => {
-        workflowEventBus.emit("task.completed", {
-          taskId: id,
-          output,
-          agentId: row.agentId,
-          workflowRunId: row.workflowRunId,
-          workflowRunStepId: row.workflowRunStepId
-        });
+    import("./event-bus-n8sb35pw.js").then(({ workflowEventBus }) => {
+      workflowEventBus.emit("task.completed", {
+        taskId: id,
+        output,
+        agentId: row.agentId,
+        workflowRunId: row.workflowRunId,
+        workflowRunStepId: row.workflowRunStepId
       });
-    } catch {}
+    }).catch((err) => console.error("[db] task.completed event not emitted:", scrubSecrets(err instanceof Error ? err.message : String(err))));
     try {
       promotePendingSteeringForTask(id, "Task completed before steering was delivered");
     } catch (error) {
@@ -7091,17 +7191,15 @@ function failTask(id, reason) {
         metadata: { reason: scrubbedReason }
       });
     } catch {}
-    try {
-      import("./event-bus-axn823e9.js").then(({ workflowEventBus }) => {
-        workflowEventBus.emit("task.failed", {
-          taskId: id,
-          failureReason: reason,
-          agentId: row.agentId,
-          workflowRunId: row.workflowRunId,
-          workflowRunStepId: row.workflowRunStepId
-        });
+    import("./event-bus-n8sb35pw.js").then(({ workflowEventBus }) => {
+      workflowEventBus.emit("task.failed", {
+        taskId: id,
+        failureReason: reason,
+        agentId: row.agentId,
+        workflowRunId: row.workflowRunId,
+        workflowRunStepId: row.workflowRunStepId
       });
-    } catch {}
+    }).catch((err) => console.error("[db] task.failed event not emitted:", scrubSecrets(err instanceof Error ? err.message : String(err))));
     try {
       promotePendingSteeringForTask(id, "Task failed before steering was delivered");
     } catch (error) {
@@ -7121,7 +7219,16 @@ function overwriteTerminalTaskResultText(id, patch) {
     return null;
   const output = patch.output !== undefined ? scrubSecrets(patch.output) : task.output ?? null;
   const failureReason = patch.failureReason !== undefined ? scrubSecrets(patch.failureReason) : task.failureReason ?? null;
-  const row = taskQueries.setTerminalResultText().get(output, failureReason, id) ?? null;
+  const row = getDb().transaction(() => {
+    const updated = taskQueries.setTerminalResultText().get(output, failureReason, id) ?? null;
+    if (updated && patch.output !== undefined) {
+      reconcileTaskPullRequestAttachments(id, updated.agentId, [
+        updated.output,
+        updated.vcsProvider === "github" ? updated.vcsUrl : null
+      ]);
+    }
+    return updated;
+  })();
   return row ? rowToAgentTask(row) : task;
 }
 function cancelTask(id, reason) {
@@ -7152,16 +7259,14 @@ function cancelTask(id, reason) {
         metadata: reason ? { reason } : undefined
       });
     } catch {}
-    try {
-      import("./event-bus-axn823e9.js").then(({ workflowEventBus }) => {
-        workflowEventBus.emit("task.cancelled", {
-          taskId: id,
-          agentId: row.agentId,
-          workflowRunId: row.workflowRunId,
-          workflowRunStepId: row.workflowRunStepId
-        });
+    import("./event-bus-n8sb35pw.js").then(({ workflowEventBus }) => {
+      workflowEventBus.emit("task.cancelled", {
+        taskId: id,
+        agentId: row.agentId,
+        workflowRunId: row.workflowRunId,
+        workflowRunStepId: row.workflowRunStepId
       });
-    } catch {}
+    }).catch((err) => console.error("[db] task.cancelled event not emitted:", scrubSecrets(err instanceof Error ? err.message : String(err))));
     try {
       promotePendingSteeringForTask(id, "Task was cancelled before steering was delivered");
     } catch (error) {
@@ -7208,18 +7313,16 @@ function supersedeTask(id, args) {
         metadata: { reason: args.reason, resumeTaskId: args.resumeTaskId }
       });
     } catch {}
-    try {
-      import("./event-bus-axn823e9.js").then(({ workflowEventBus }) => {
-        workflowEventBus.emit("task.superseded", {
-          taskId: id,
-          reason: args.reason,
-          resumeTaskId: args.resumeTaskId,
-          agentId: row.agentId,
-          workflowRunId: row.workflowRunId,
-          workflowRunStepId: row.workflowRunStepId
-        });
+    import("./event-bus-n8sb35pw.js").then(({ workflowEventBus }) => {
+      workflowEventBus.emit("task.superseded", {
+        taskId: id,
+        reason: args.reason,
+        resumeTaskId: args.resumeTaskId,
+        agentId: row.agentId,
+        workflowRunId: row.workflowRunId,
+        workflowRunStepId: row.workflowRunStepId
       });
-    } catch {}
+    }).catch((err) => console.error("[db] task.superseded event not emitted:", scrubSecrets(err instanceof Error ? err.message : String(err))));
     try {
       cascadeFailDependents(id, "superseded");
     } catch (err) {
@@ -7373,15 +7476,13 @@ function updateTaskProgress(id, progress) {
         newValue: scrubbedProgress
       });
     } catch {}
-    try {
-      import("./event-bus-axn823e9.js").then(({ workflowEventBus }) => {
-        workflowEventBus.emit("task.progress", {
-          taskId: id,
-          progress: scrubbedProgress,
-          agentId: row.agentId
-        });
+    import("./event-bus-n8sb35pw.js").then(({ workflowEventBus }) => {
+      workflowEventBus.emit("task.progress", {
+        taskId: id,
+        progress: scrubbedProgress,
+        agentId: row.agentId
       });
-    } catch {}
+    }).catch((err) => console.error("[db] task.progress event not emitted:", scrubSecrets(err instanceof Error ? err.message : String(err))));
   }
   return row ? rowToAgentTask(row) : null;
 }
@@ -7446,6 +7547,55 @@ function insertTaskAttachment(input) {
     return attachment;
   })();
 }
+function pullRequestKey(pullRequest) {
+  return `${pullRequest.owner.toLowerCase()}/${pullRequest.repo.toLowerCase()}#${pullRequest.number}`;
+}
+function recordTaskPullRequestAttachments(taskId, agentId, text) {
+  const pullRequests = extractGitHubPullRequestUrls(text);
+  if (pullRequests.length === 0)
+    return [];
+  const existingPullRequests = new Set(getDb().prepare("SELECT url FROM task_attachments WHERE task_id = ? AND kind = 'url' AND url IS NOT NULL").all(taskId).flatMap((row) => extractGitHubPullRequestUrls(row.url)).map(pullRequestKey));
+  const stored = [];
+  for (const pullRequest of pullRequests) {
+    const dedupeKey = pullRequestKey(pullRequest);
+    if (existingPullRequests.has(dedupeKey))
+      continue;
+    stored.push(insertTaskAttachment({
+      taskId,
+      agentId,
+      name: `GitHub pull request #${pullRequest.number}`,
+      kind: "url",
+      url: pullRequest.url,
+      providerId: GENERATED_PULL_REQUEST_PROVIDER_ID,
+      capabilities: {
+        [SERVER_GENERATED_ATTACHMENT_CAPABILITY]: GENERATED_PULL_REQUEST_SOURCE
+      },
+      intent: GENERATED_PULL_REQUEST_INTENT,
+      description: GENERATED_PULL_REQUEST_DESCRIPTION
+    }));
+    existingPullRequests.add(dedupeKey);
+  }
+  return stored;
+}
+function reconcileTaskPullRequestAttachments(taskId, agentId, sourceTexts) {
+  const desiredPullRequests = sourceTexts.flatMap(extractGitHubPullRequestUrls);
+  const desiredKeys = new Set(desiredPullRequests.map(pullRequestKey));
+  const generatedRows = getDb().prepare(`SELECT id, name, url
+       FROM task_attachments
+       WHERE task_id = ?
+         AND kind = 'url'
+         AND url IS NOT NULL
+         AND json_extract(capabilities, '$.${SERVER_GENERATED_ATTACHMENT_CAPABILITY}') = ?`).all(taskId, GENERATED_PULL_REQUEST_SOURCE);
+  for (const row of generatedRows) {
+    const pullRequest = extractGitHubPullRequestUrls(row.url)[0];
+    const expectedName = pullRequest ? `GitHub pull request #${pullRequest.number}` : null;
+    if (!pullRequest || row.name !== expectedName || !desiredKeys.has(pullRequestKey(pullRequest))) {
+      getDb().run("DELETE FROM task_attachments WHERE id = ?", [row.id]);
+    }
+  }
+  return recordTaskPullRequestAttachments(taskId, agentId, desiredPullRequests.map((pullRequest) => pullRequest.url).join(`
+`));
+}
 function insertTaskAttachmentRow(input) {
   const db2 = getDb();
   if (input.sha256) {
@@ -7986,6 +8136,11 @@ function findRecentSimilarTasks(opts) {
   return getDb().prepare(query).all(...params).map(rowToAgentTask);
 }
 function createTaskExtended(task, options) {
+  if (typeof task !== "string" || task.trim().length === 0) {
+    throw new Error("createTaskExtended: 'task' must be a non-empty string");
+  }
+  options = CreateTaskOptionsSchema.parse(options ?? {});
+  let requestedByUserIdInherited = false;
   const id = crypto.randomUUID();
   const now = new Date().toISOString();
   const status = options?.offeredTo ? "offered" : options?.agentId ? "pending" : options?.status === "backlog" ? "backlog" : "unassigned";
@@ -8052,6 +8207,7 @@ function createTaskExtended(task, options) {
       }
       if (parent.requestedByUserId && !options.requestedByUserId) {
         options.requestedByUserId = parent.requestedByUserId;
+        requestedByUserIdInherited = true;
       }
       if (parent.key && !options.key) {
         options.key = parent.key;
@@ -8121,8 +8277,8 @@ function createTaskExtended(task, options) {
         vcsInstallationId, vcsNodeId,
         agentmailInboxId, agentmailMessageId, agentmailThreadId,
         mentionMessageId, mentionChannelId, dir, parentTaskId, model, modelTier, effort, scheduleId,
-        workflowRunId, workflowRunStepId, outputSchema, followUpConfig, requestedByUserId, contextKey, routingAffinity, swarmVersion, createdAt, lastUpdatedAt, created_by, updated_by
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`).get(id, assetKey, options?.agentId ?? null, options?.creatorAgentId ?? null, task, status, options?.source ?? "mcp", options?.taskType ?? null, JSON.stringify(options?.tags ?? []), options?.priority ?? 50, JSON.stringify(options?.dependsOn ?? []), options?.offeredTo ?? null, options?.offeredTo ? now : null, options?.slackChannelId ?? null, options?.slackThreadTs ?? null, options?.slackTriggerMessageTs ?? null, options?.slackUserId ?? null, options?.vcsProvider ?? null, options?.vcsRepo ?? null, options?.vcsEventType ?? null, options?.vcsNumber ?? null, options?.vcsCommentId ?? null, options?.vcsAuthor ?? null, options?.vcsUrl ?? null, options?.vcsInstallationId ?? null, options?.vcsNodeId ?? null, options?.agentmailInboxId ?? null, options?.agentmailMessageId ?? null, options?.agentmailThreadId ?? null, options?.mentionMessageId ?? null, options?.mentionChannelId ?? null, options?.dir ?? null, options?.parentTaskId ?? null, options?.model ?? null, options?.modelTier ?? null, options?.effort ?? null, options?.scheduleId ?? null, options?.workflowRunId ?? null, options?.workflowRunStepId ?? null, options?.outputSchema ? JSON.stringify(options.outputSchema) : null, options?.followUpConfig ? JSON.stringify(options.followUpConfig) : null, options?.requestedByUserId ?? null, options?.contextKey ?? null, options?.routingAffinity ? JSON.stringify(options.routingAffinity) : null, package_default.version, now, now, auditUserId, auditUserId);
+        workflowRunId, workflowRunStepId, outputSchema, followUpConfig, requestedByUserId, requestedByUserIdInherited, contextKey, routingAffinity, swarmVersion, createdAt, lastUpdatedAt, created_by, updated_by
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`).get(id, assetKey, options?.agentId ?? null, options?.creatorAgentId ?? null, task, status, options?.source ?? "mcp", options?.taskType ?? null, JSON.stringify(options?.tags ?? []), options?.priority ?? 50, JSON.stringify(options?.dependsOn ?? []), options?.offeredTo ?? null, options?.offeredTo ? now : null, options?.slackChannelId ?? null, options?.slackThreadTs ?? null, options?.slackTriggerMessageTs ?? null, options?.slackUserId ?? null, options?.vcsProvider ?? null, options?.vcsRepo ?? null, options?.vcsEventType ?? null, options?.vcsNumber ?? null, options?.vcsCommentId ?? null, options?.vcsAuthor ?? null, options?.vcsUrl ?? null, options?.vcsInstallationId ?? null, options?.vcsNodeId ?? null, options?.agentmailInboxId ?? null, options?.agentmailMessageId ?? null, options?.agentmailThreadId ?? null, options?.mentionMessageId ?? null, options?.mentionChannelId ?? null, options?.dir ?? null, options?.parentTaskId ?? null, options?.model ?? null, options?.modelTier ?? null, options?.effort ?? null, options?.scheduleId ?? null, options?.workflowRunId ?? null, options?.workflowRunStepId ?? null, options?.outputSchema ? JSON.stringify(options.outputSchema) : null, options?.followUpConfig ? JSON.stringify(options.followUpConfig) : null, options?.requestedByUserId ?? null, requestedByUserIdInherited ? 1 : 0, options?.contextKey ?? null, options?.routingAffinity ? JSON.stringify(options.routingAffinity) : null, package_default.version, now, now, auditUserId, auditUserId);
   if (!row)
     throw new Error("Failed to create task");
   try {
@@ -8141,19 +8297,17 @@ function createTaskExtended(task, options) {
     hasParent: !!row.parentTaskId,
     priority: row.priority
   }, (task2) => task2 !== null);
-  try {
-    import("./event-bus-axn823e9.js").then(({ workflowEventBus }) => {
-      workflowEventBus.emit("task.created", {
-        taskId: row.id,
-        task: row.task,
-        source: row.source,
-        tags: options?.tags ?? [],
-        agentId: row.agentId,
-        workflowRunId: row.workflowRunId,
-        workflowRunStepId: row.workflowRunStepId
-      });
+  import("./event-bus-n8sb35pw.js").then(({ workflowEventBus }) => {
+    workflowEventBus.emit("task.created", {
+      taskId: row.id,
+      task: row.task,
+      source: row.source,
+      tags: options?.tags ?? [],
+      agentId: row.agentId,
+      workflowRunId: row.workflowRunId,
+      workflowRunStepId: row.workflowRunStepId
     });
-  } catch {}
+  }).catch((err) => console.error("[db] task.created event not emitted:", scrubSecrets(err instanceof Error ? err.message : String(err))));
   return rowToAgentTask(row);
 }
 function claimTask(taskId, agentId) {
@@ -8313,6 +8467,17 @@ function releaseStaleReviewingTasks(timeoutMinutes = 30) {
      WHERE status = 'reviewing' AND lastUpdatedAt < ?`, [now, cutoffTime]);
   return result.changes;
 }
+function releaseStaleOfferedTasksForOfflineAgents() {
+  const now = new Date().toISOString();
+  const result = getDb().run(`UPDATE agent_tasks
+     SET status = 'unassigned', offeredTo = NULL, offeredAt = NULL, lastUpdatedAt = ?
+     WHERE status = 'offered'
+       AND offeredTo IS NOT NULL
+       AND NOT EXISTS (
+         SELECT 1 FROM agents WHERE agents.id = agent_tasks.offeredTo AND agents.status != 'offline'
+       )`, [now]);
+  return result.changes;
+}
 function getOfferedTasksForAgent(agentId) {
   return getDb().prepare("SELECT * FROM agent_tasks WHERE offeredTo = ? AND status = 'offered' ORDER BY createdAt ASC, rowid ASC").all(agentId).map(rowToAgentTask);
 }
@@ -8424,6 +8589,24 @@ function updateAgentProfile(id, updates, meta) {
     const current = database.prepare("SELECT * FROM agents WHERE id = ?").get(id);
     if (!current)
       return null;
+    for (const field of BUDGETED_IDENTITY_FIELDS) {
+      const nextValue = updates[field];
+      if (nextValue === undefined)
+        continue;
+      const result = checkIdentityFieldBudget({
+        field,
+        currentValue: current[field] ?? "",
+        nextValue
+      });
+      if (!result.ok) {
+        throw new IdentityFieldBudgetError(result, computeContentHash(current[field] ?? ""), computeContentHash(nextValue));
+      }
+    }
+    if (updates.name !== undefined) {
+      const existingAgent = database.prepare("SELECT * FROM agents WHERE name = ? AND id != ?").get(updates.name, id);
+      if (existingAgent)
+        throw new Error("Agent name already exists");
+    }
     for (const field of VERSIONABLE_FIELDS) {
       const newValue = updates[field];
       if (newValue === undefined || newValue === null)
@@ -8451,6 +8634,7 @@ function updateAgentProfile(id, updates, meta) {
     const avatarJson = updates.avatar ? JSON.stringify(updates.avatar) : null;
     const now = new Date().toISOString();
     const row = database.prepare(`UPDATE agents SET
+          name = COALESCE(?, name),
           description = COALESCE(?, description),
           role = COALESCE(?, role),
           capabilities = COALESCE(?, capabilities),
@@ -8462,18 +8646,12 @@ function updateAgentProfile(id, updates, meta) {
           heartbeatMd = COALESCE(?, heartbeatMd),
           avatar = CASE WHEN ? = 1 THEN ? ELSE avatar END,
           lastUpdatedAt = ?
-         WHERE id = ? RETURNING *`).get(updates.description ?? null, updates.role ?? null, updates.capabilities ? JSON.stringify(updates.capabilities) : null, updates.claudeMd ?? null, updates.soulMd ?? null, updates.identityMd ?? null, updates.setupScript ?? null, updates.toolsMd ?? null, updates.heartbeatMd ?? null, avatarProvided ? 1 : 0, avatarJson, now, id);
+         WHERE id = ? RETURNING *`).get(updates.name ?? null, updates.description ?? null, updates.role ?? null, updates.capabilities ? JSON.stringify(updates.capabilities) : null, updates.claudeMd ?? null, updates.soulMd ?? null, updates.identityMd ?? null, updates.setupScript ?? null, updates.toolsMd ?? null, updates.heartbeatMd ?? null, avatarProvided ? 1 : 0, avatarJson, now, id);
     return row ? rowToAgent(row) : null;
   })();
 }
 function updateAgentName(id, newName) {
-  const existingAgent = getDb().prepare("SELECT * FROM agents WHERE name = ? AND id != ?").get(newName, id);
-  if (existingAgent) {
-    throw new Error("Agent name already exists");
-  }
-  const now = new Date().toISOString();
-  const row = getDb().prepare("UPDATE agents SET name = ?, lastUpdatedAt = ? WHERE id = ? RETURNING *").get(newName, now, id);
-  return row ? rowToAgent(row) : null;
+  return updateAgentProfile(id, { name: newName });
 }
 function rowToChannel(row) {
   return {
@@ -9017,13 +9195,14 @@ function getSessionCostSummary(opts) {
     params.push(opts.agentId);
   }
   if (opts.userId === UNATTRIBUTED_USER_ID) {
-    conditions.push("t.requestedByUserId IS NULL");
+    conditions.push(`(t.requestedByUserId IS NULL OR ${HUMAN_FREE_SQL})`);
   } else if (opts.userId) {
-    conditions.push("t.requestedByUserId = ?");
+    conditions.push(`(t.requestedByUserId = ? AND NOT ${HUMAN_FREE_SQL})`);
     params.push(opts.userId);
   }
   const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
-  const totalsRow = getDb().prepare(`SELECT
+  const totalsRow = getDb().prepare(`WITH RECURSIVE ${HUMAN_FREE_TASKS_CTE}
+      SELECT
         COALESCE(SUM(sc.totalCostUsd), 0) as totalCostUsd,
         COALESCE(SUM(sc.inputTokens), 0) as totalInputTokens,
         COALESCE(SUM(sc.outputTokens), 0) as totalOutputTokens,
@@ -9031,8 +9210,13 @@ function getSessionCostSummary(opts) {
         COALESCE(SUM(sc.cacheWriteTokens), 0) as totalCacheWriteTokens,
         COALESCE(SUM(sc.durationMs), 0) as totalDurationMs,
         COUNT(*) as totalSessions,
-        COALESCE(SUM(CASE WHEN t.requestedByUserId IS NOT NULL THEN sc.totalCostUsd ELSE 0 END), 0)
-          as attributedCostUsd
+        COALESCE(SUM(CASE WHEN t.requestedByUserId IS NOT NULL AND NOT ${HUMAN_FREE_SQL}
+          THEN sc.totalCostUsd ELSE 0 END), 0) as attributedCostUsd,
+        COALESCE(SUM(CASE WHEN NOT ${HUMAN_FREE_SQL}
+          THEN sc.totalCostUsd ELSE 0 END), 0) as attributableCostUsd,
+        COALESCE(SUM(CASE WHEN ${HUMAN_FREE_SQL}
+          THEN sc.totalCostUsd ELSE 0 END), 0) as excludedCostUsd,
+        COUNT(DISTINCT CASE WHEN ${HUMAN_FREE_SQL} THEN t.id END) as excludedTaskCount
       ${from} ${where}`).get(...params);
   const totals = totalsRow ? {
     ...totalsRow,
@@ -9046,12 +9230,16 @@ function getSessionCostSummary(opts) {
     totalDurationMs: 0,
     totalSessions: 0,
     avgCostPerSession: 0,
-    attributedCostUsd: 0
+    attributedCostUsd: 0,
+    attributableCostUsd: 0,
+    excludedCostUsd: 0,
+    excludedTaskCount: 0
   };
   const groupBy = opts.groupBy ?? "both";
   let daily = [];
   if (groupBy === "day" || groupBy === "both") {
-    daily = getDb().prepare(`SELECT
+    daily = getDb().prepare(`WITH RECURSIVE ${HUMAN_FREE_TASKS_CTE}
+        SELECT
           DATE(sc.createdAt) as date,
           COALESCE(SUM(sc.totalCostUsd), 0) as costUsd,
           COALESCE(SUM(sc.inputTokens), 0) as inputTokens,
@@ -9063,7 +9251,8 @@ function getSessionCostSummary(opts) {
   }
   let byAgent = [];
   if (groupBy === "agent" || groupBy === "both") {
-    byAgent = getDb().prepare(`SELECT
+    byAgent = getDb().prepare(`WITH RECURSIVE ${HUMAN_FREE_TASKS_CTE}
+        SELECT
           sc.agentId as agentId,
           COALESCE(SUM(sc.totalCostUsd), 0) as costUsd,
           COALESCE(SUM(sc.inputTokens), 0) as inputTokens,
@@ -9076,19 +9265,175 @@ function getSessionCostSummary(opts) {
   }
   let byUser = [];
   if (groupBy === "user" || groupBy === "both") {
-    byUser = getDb().prepare(`SELECT
-          t.requestedByUserId as userId,
+    byUser = getDb().prepare(`WITH RECURSIVE ${HUMAN_FREE_TASKS_CTE}
+        SELECT
+          CASE WHEN ${HUMAN_FREE_SQL} THEN NULL ELSE t.requestedByUserId END as userId,
           COALESCE(SUM(sc.totalCostUsd), 0) as costUsd,
           COALESCE(SUM(sc.inputTokens), 0) as inputTokens,
           COALESCE(SUM(sc.outputTokens), 0) as outputTokens,
           COUNT(DISTINCT sc.taskId) as tasks,
           COALESCE(SUM(sc.durationMs), 0) as durationMs
         ${from} ${where}
-        GROUP BY t.requestedByUserId
+        GROUP BY CASE WHEN ${HUMAN_FREE_SQL} THEN NULL ELSE t.requestedByUserId END
         ORDER BY costUsd DESC`).all(...params);
   }
   return { totals, daily, byAgent, byUser };
 }
+function getAttributionByPerson(opts) {
+  const conditions = ["t.requestedByUserId IS NOT NULL"];
+  const params = [];
+  if (opts.startDate) {
+    conditions.push("t.createdAt >= ?");
+    params.push(opts.startDate);
+  }
+  if (opts.endDate) {
+    const dateOnlyEnd = /^\d{4}-\d{2}-\d{2}$/.test(opts.endDate) ? new Date(`${opts.endDate}T00:00:00.000Z`) : null;
+    if (dateOnlyEnd && !Number.isNaN(dateOnlyEnd.getTime()) && dateOnlyEnd.toISOString().slice(0, 10) === opts.endDate) {
+      dateOnlyEnd.setUTCDate(dateOnlyEnd.getUTCDate() + 1);
+      conditions.push("t.createdAt < ?");
+      params.push(dateOnlyEnd.toISOString());
+    } else {
+      conditions.push("t.createdAt <= ?");
+      params.push(opts.endDate);
+    }
+  }
+  const where = `WHERE ${conditions.join(" AND ")}`;
+  const rootRows = getDb().prepare(`WITH RECURSIVE selected_roots(id, requestedByUserId, status, output) AS (
+        SELECT t.id, t.requestedByUserId, t.status, t.output
+        FROM agent_tasks t
+        ${where} AND t.parentTaskId IS NULL AND NOT ${ROOT_HUMAN_FREE_SQL}
+      ),
+      task_tree(rootId, taskId, output) AS (
+        SELECT id, id, output
+        FROM selected_roots
+
+        UNION ALL
+
+        SELECT tree.rootId, child.id, child.output
+        FROM agent_tasks child
+        JOIN task_tree tree ON child.parentTaskId = tree.taskId
+      )
+      SELECT
+        t.requestedByUserId as userId,
+        COUNT(*) as initiated,
+        SUM(CASE WHEN t.status = 'completed' AND (
+          EXISTS (
+            SELECT 1
+            FROM task_tree tree
+            JOIN task_attachments ta ON ta.task_id = tree.taskId
+            WHERE tree.rootId = t.id
+              AND ta.kind = 'url'
+              AND (
+                ta.url LIKE '%github.com/%/pull/%'
+                OR ta.url LIKE '%/-/merge_requests/%'
+              )
+          )
+          OR EXISTS (
+            SELECT 1 FROM task_attachments ta
+            JOIN task_tree tree ON tree.taskId = ta.task_id
+            WHERE tree.rootId = t.id AND ta.kind = 'page'
+          )
+          OR EXISTS (
+            SELECT 1 FROM task_tree tree
+            WHERE tree.rootId = t.id
+              AND (
+                tree.output LIKE '%github.com/%/pull/%'
+                OR tree.output LIKE '%/-/merge_requests/%'
+              )
+          )
+        ) THEN 1 ELSE 0 END) as shipped
+      FROM selected_roots t
+      GROUP BY t.requestedByUserId`).all(...params);
+  const reachRows = getDb().prepare(`WITH RECURSIVE report_tasks AS (
+        SELECT t.*
+        FROM agent_tasks t
+        ${where}
+      ),
+      task_ancestry(
+        taskId, id, parentTaskId, requestedByUserId, requestedByUserIdInherited,
+        taskType, tags, source, workflowRunId
+      ) AS (
+        SELECT
+          id, id, parentTaskId, requestedByUserId, requestedByUserIdInherited,
+          taskType, tags, source, workflowRunId
+        FROM report_tasks
+
+        UNION ALL
+
+        SELECT
+          child.taskId, parent.id, parent.parentTaskId, parent.requestedByUserId,
+          parent.requestedByUserIdInherited, parent.taskType, parent.tags,
+          parent.source, parent.workflowRunId
+        FROM agent_tasks parent
+        JOIN task_ancestry child ON parent.id = child.parentTaskId
+        WHERE child.requestedByUserId IS NULL
+          OR child.requestedByUserIdInherited = 1
+      ),
+      human_free_report_tasks(id) AS (
+        SELECT DISTINCT ancestor.taskId
+        FROM task_ancestry ancestor
+        LEFT JOIN agent_tasks parent ON parent.id = ancestor.parentTaskId
+        WHERE COALESCE(ancestor.taskType, '') IN ('heartbeat', 'heartbeat-checklist', 'boot-triage')
+          OR COALESCE(ancestor.tags, '[]') LIKE '%"heartbeat"%'
+          OR (COALESCE(ancestor.source, '') = 'schedule' AND ancestor.requestedByUserId IS NULL)
+          OR (
+            ancestor.parentTaskId IS NULL
+            AND COALESCE(ancestor.source, '') = 'workflow'
+            AND ancestor.requestedByUserId IS NULL
+            AND EXISTS (
+              SELECT 1
+              FROM workflow_runs run
+              WHERE run.id = ancestor.workflowRunId
+                AND run.triggerType = 'schedule'
+                AND run.created_by IS NULL
+            )
+          )
+          OR (
+            COALESCE(ancestor.source, '') = 'system'
+            AND parent.id IS NOT NULL
+            AND parent.requestedByUserId IS NULL
+          )
+      )
+      SELECT
+        t.requestedByUserId as userId,
+        COUNT(DISTINCT t.agentId) as agentsReached,
+        COUNT(DISTINCT t.vcsRepo) as reposReached,
+        COUNT(DISTINCT t.source) as surfacesReached
+      FROM report_tasks t
+      WHERE NOT EXISTS (SELECT 1 FROM human_free_report_tasks WHERE id = t.id)
+      GROUP BY t.requestedByUserId`).all(...params);
+  const byUser = new Map;
+  for (const r of rootRows) {
+    byUser.set(r.userId, {
+      userId: r.userId,
+      problemsInitiated: r.initiated,
+      problemsShipped: r.shipped,
+      agentsReached: 0,
+      reposReached: 0,
+      surfacesReached: 0,
+      firstPassYield: null
+    });
+  }
+  for (const r of reachRows) {
+    const existing = byUser.get(r.userId);
+    if (existing) {
+      existing.agentsReached = r.agentsReached;
+      existing.reposReached = r.reposReached;
+      existing.surfacesReached = r.surfacesReached;
+    } else {
+      byUser.set(r.userId, {
+        userId: r.userId,
+        problemsInitiated: 0,
+        problemsShipped: 0,
+        agentsReached: r.agentsReached,
+        reposReached: r.reposReached,
+        surfacesReached: r.surfacesReached,
+        firstPassYield: null
+      });
+    }
+  }
+  return Array.from(byUser.values());
+}
 function getDashboardCostSummary() {
   const now = new Date;
   const startOfDayUtc = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate())).toISOString();
@@ -9612,6 +9957,9 @@ function upsertSwarmConfig(data) {
       console.error(`Failed to write env file ${config.envPath}:`, e);
     }
   }
+  if (config.isSecret) {
+    registerVolatileSecret(config.value, `config:${config.key}`);
+  }
   return config;
 }
 function deleteSwarmConfig(id) {
@@ -9766,9 +10114,9 @@ function findTaskByAgentMailThread(agentmailThreadId) {
 function insertActiveSession(session) {
   const id = crypto.randomUUID();
   const now = new Date().toISOString();
-  const row = getDb().prepare(`INSERT INTO active_sessions (id, agentId, taskId, triggerType, inboxMessageId, taskDescription, runnerSessionId, startedAt, lastHeartbeatAt)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
-       RETURNING *`).get(id, session.agentId, session.taskId ?? null, session.triggerType, session.inboxMessageId ?? null, session.taskDescription ?? null, session.runnerSessionId ?? null, now, now);
+  const row = getDb().prepare(`INSERT INTO active_sessions (id, agentId, taskId, triggerType, inboxMessageId, taskDescription, runnerSessionId, runtimeInstanceId, startedAt, lastHeartbeatAt)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+       RETURNING *`).get(id, session.agentId, session.taskId ?? null, session.triggerType, session.inboxMessageId ?? null, session.taskDescription ?? null, session.runnerSessionId ?? null, session.runtimeInstanceId ?? null, now, now);
   if (!row)
     throw new Error("Failed to insert active session");
   return row;
@@ -10075,6 +10423,7 @@ function rowToWorkflowRun(row) {
     triggerData: row.triggerData ? JSON.parse(row.triggerData) : undefined,
     context: row.context ? JSON.parse(row.context) : undefined,
     error: row.error ?? undefined,
+    createdBy: row.created_by ?? undefined,
     startedAt: normalizeDateRequired(row.startedAt),
     lastUpdatedAt: normalizeDateRequired(row.lastUpdatedAt),
     finishedAt: normalizeDate(row.finishedAt) ?? undefined
@@ -10082,7 +10431,7 @@ function rowToWorkflowRun(row) {
 }
 function createWorkflowRun(data) {
   const now = new Date().toISOString();
-  const row = getDb().prepare(`INSERT INTO workflow_runs (id, workflowId, startedAt, triggerData) VALUES (?, ?, ?, ?) RETURNING *`).get(data.id, data.workflowId, now, data.triggerData ? JSON.stringify(data.triggerData) : null);
+  const row = getDb().prepare(`INSERT INTO workflow_runs (id, workflowId, triggerType, startedAt, triggerData, created_by) VALUES (?, ?, ?, ?, ?, ?) RETURNING *`).get(data.id, data.workflowId, data.triggerType ?? "manual", now, data.triggerData ? JSON.stringify(data.triggerData) : null, data.createdBy ?? null);
   if (!row)
     throw new Error("Failed to create workflow run");
   return rowToWorkflowRun(row);
@@ -11969,10 +12318,63 @@ function updateUser(id, data) {
   const row = getDb().prepare(`UPDATE users SET ${sets.join(", ")} WHERE id = ? RETURNING *`).get(...params);
   return row ? rowToUser(row) : null;
 }
-function deleteUser(id) {
-  getDb().prepare("UPDATE agent_tasks SET requestedByUserId = NULL WHERE requestedByUserId = ?").run(id);
-  const result = getDb().prepare("DELETE FROM users WHERE id = ?").run(id);
-  return result.changes > 0;
+function quoteSqlIdentifier(identifier) {
+  return `"${identifier.replaceAll('"', '""')}"`;
+}
+function deleteUser(id, replacementUserId) {
+  if (replacementUserId === id) {
+    throw new Error("Replacement user must differ from deleted user");
+  }
+  const database = getDb();
+  return database.transaction(() => {
+    const userExists = database.prepare("SELECT EXISTS(SELECT 1 FROM users WHERE id = ?) AS present").get(id)?.present;
+    if (!userExists)
+      return false;
+    if (replacementUserId) {
+      const replacementExists = database.prepare("SELECT EXISTS(SELECT 1 FROM users WHERE id = ?) AS present").get(replacementUserId)?.present;
+      if (!replacementExists)
+        throw new Error("Replacement user not found");
+    }
+    const references = database.prepare(`SELECT tables.name AS tableName, foreign_keys."from" AS columnName
+         FROM sqlite_schema AS tables
+         JOIN pragma_foreign_key_list(tables.name) AS foreign_keys
+         JOIN pragma_table_info(tables.name) AS columns
+           ON columns.name = foreign_keys."from"
+         WHERE tables.type = 'table'
+           AND foreign_keys."table" = 'users'
+           AND foreign_keys.on_delete IN ('NO ACTION', 'RESTRICT')
+           AND columns."notnull" = 0
+         UNION ALL
+         SELECT 'scheduled_tasks' AS tableName, columns.name AS columnName
+         FROM pragma_table_info('scheduled_tasks') AS columns
+         WHERE columns.name IN ('created_by', 'updated_by')
+           AND columns."notnull" = 0
+           AND NOT EXISTS (
+             SELECT 1
+             FROM pragma_foreign_key_list('scheduled_tasks') AS foreign_keys
+             WHERE foreign_keys."from" = columns.name
+               AND foreign_keys."table" = 'users'
+           )`).all();
+    const replacement = replacementUserId ?? null;
+    for (const reference of references) {
+      const table = quoteSqlIdentifier(reference.tableName);
+      const column = quoteSqlIdentifier(reference.columnName);
+      database.prepare(`UPDATE ${table} SET ${column} = ? WHERE ${column} = ?`).run(replacement, id);
+    }
+    if (replacementUserId) {
+      database.prepare(`UPDATE workflow_runs
+           SET context = json_set(context, '$.swarm.requestedByUserId', ?)
+           WHERE json_valid(context)
+             AND json_extract(context, '$.swarm.requestedByUserId') = ?`).run(replacementUserId, id);
+    } else {
+      database.prepare(`UPDATE workflow_runs
+           SET context = json_remove(context, '$.swarm.requestedByUserId')
+           WHERE json_valid(context)
+             AND json_extract(context, '$.swarm.requestedByUserId') = ?`).run(id);
+    }
+    const result = database.prepare("DELETE FROM users WHERE id = ?").run(id);
+    return result.changes > 0;
+  })();
 }
 function rowToInboxItemState(row) {
   return {
@@ -12811,7 +13213,54 @@ function countScriptRunJournalAgentTaskSteps(runId) {
   const row = getDb().prepare("SELECT COUNT(*) AS count FROM script_run_journal WHERE runId = ? AND stepType = 'agent-task'").get(runId);
   return row?.count ?? 0;
 }
-var db = null, sqliteVecAvailable = false, VERSIONABLE_FIELDS, agentQueries, MAX_EMPTY_POLLS = 2, taskQueries, PENDING_SLACK_MESSAGE_TS_PREFIX = "pending:", findTaskByGitHub, LINEAR_TRACKER_CONTEXT_KEY_PREFIX = "task:trackers:linear:", logQueries, ELIGIBILITY_SCAN_BATCH_SIZE, ELIGIBILITY_SCAN_CAP, sessionLogQueries, sessionCostQueries, UNATTRIBUTED_USER_ID = "unattributed", SCHEDULE_TEMPLATE_PREVIEW_LENGTH = 280, TASK_PREVIEW_LENGTH = 300, RESERVED_CONFIG_PLACEHOLDER = "[reserved key stored in swarm_config; delete this row]", SKILL_FILE_LIMITS, BINARY_SKILL_FILE_PLACEHOLDER = "[binary file - not synced]", SKILL_SLIM_COLUMNS = "id, name, description, type, scope, ownerAgentId, sourceUrl, sourceRepo, sourcePath, sourceBranch, sourceHash, isComplex, allowedTools, model, effort, context, agent, disableModelInvocation, userInvocable, version, isEnabled, systemDefault, createdAt, lastUpdatedAt, lastFetchedAt, '' as content", contextSnapshotQueries, KvTypeCollisionError;
+var db = null, sqliteVecAvailable = false, cachedSqliteVecExtensionPath = null, VERSIONABLE_FIELDS, BUDGETED_IDENTITY_FIELDS, agentQueries, MAX_EMPTY_POLLS = 2, taskQueries, PENDING_SLACK_MESSAGE_TS_PREFIX = "pending:", findTaskByGitHub, LINEAR_TRACKER_CONTEXT_KEY_PREFIX = "task:trackers:linear:", GENERATED_PULL_REQUEST_PROVIDER_ID = "github", GENERATED_PULL_REQUEST_INTENT = "task-deliverable", GENERATED_PULL_REQUEST_DESCRIPTION = "Pull request shipped by this task", GENERATED_PULL_REQUEST_SOURCE = "task-pull-request-recorder", logQueries, ELIGIBILITY_SCAN_BATCH_SIZE, ELIGIBILITY_SCAN_CAP, sessionLogQueries, sessionCostQueries, UNATTRIBUTED_USER_ID = "unattributed", HUMAN_FREE_TASKS_CTE = `human_free_tasks(id) AS (
+        SELECT task.id
+        FROM agent_tasks task
+        LEFT JOIN agent_tasks parent ON parent.id = task.parentTaskId
+        WHERE COALESCE(task.taskType, '') IN ('heartbeat', 'heartbeat-checklist', 'boot-triage')
+          OR COALESCE(task.tags, '[]') LIKE '%"heartbeat"%'
+          OR (COALESCE(task.source, '') = 'schedule' AND task.requestedByUserId IS NULL)
+          OR (
+            task.parentTaskId IS NULL
+            AND COALESCE(task.source, '') = 'workflow'
+            AND task.requestedByUserId IS NULL
+            AND EXISTS (
+              SELECT 1
+              FROM workflow_runs run
+              WHERE run.id = task.workflowRunId
+                AND run.triggerType = 'schedule'
+                AND run.created_by IS NULL
+            )
+          )
+          OR (
+            COALESCE(task.source, '') = 'system'
+            AND parent.id IS NOT NULL
+            AND parent.requestedByUserId IS NULL
+          )
+
+        UNION
+
+        SELECT child.id
+        FROM agent_tasks child
+        JOIN human_free_tasks parent ON child.parentTaskId = parent.id
+        WHERE child.requestedByUserId IS NULL
+          OR child.requestedByUserIdInherited = 1
+      )`, HUMAN_FREE_SQL = "EXISTS (SELECT 1 FROM human_free_tasks WHERE id = t.id)", ROOT_HUMAN_FREE_SQL = `(
+        COALESCE(t.taskType, '') IN ('heartbeat', 'heartbeat-checklist', 'boot-triage')
+        OR COALESCE(t.tags, '[]') LIKE '%"heartbeat"%'
+        OR (COALESCE(t.source, '') = 'schedule' AND t.requestedByUserId IS NULL)
+        OR (
+          COALESCE(t.source, '') = 'workflow'
+          AND t.requestedByUserId IS NULL
+          AND EXISTS (
+            SELECT 1
+            FROM workflow_runs run
+            WHERE run.id = t.workflowRunId
+              AND run.triggerType = 'schedule'
+              AND run.created_by IS NULL
+          )
+        )
+      )`, SCHEDULE_TEMPLATE_PREVIEW_LENGTH = 280, TASK_PREVIEW_LENGTH = 300, RESERVED_CONFIG_PLACEHOLDER = "[reserved key stored in swarm_config; delete this row]", SKILL_FILE_LIMITS, BINARY_SKILL_FILE_PLACEHOLDER = "[binary file - not synced]", SKILL_SLIM_COLUMNS = "id, name, description, type, scope, ownerAgentId, sourceUrl, sourceRepo, sourcePath, sourceBranch, sourceHash, isComplex, allowedTools, model, effort, context, agent, disableModelInvocation, userInvocable, version, isEnabled, systemDefault, createdAt, lastUpdatedAt, lastFetchedAt, '' as content", contextSnapshotQueries, KvTypeCollisionError;
 var init_db = __esm(() => {
   init_provider_metadata();
   init_package();
@@ -12822,6 +13271,8 @@ var init_db = __esm(() => {
   init_types();
   init_credentials();
   init_env_flag();
+  init_github_pull_request();
+  init_identity_field_budget();
   init_request_auth_context();
   init_secret_scrubber();
   init_asset_key_audit();
@@ -12843,6 +13294,12 @@ var init_db = __esm(() => {
     "setupScript",
     "heartbeatMd"
   ];
+  BUDGETED_IDENTITY_FIELDS = [
+    "soulMd",
+    "identityMd",
+    "claudeMd",
+    "toolsMd"
+  ];
   agentQueries = {
     insert: () => getDb().prepare("INSERT INTO agents (id, name, isLead, status, maxTasks, provider, harness_provider, createdAt, lastUpdatedAt) VALUES (?, ?, ?, ?, ?, ?, ?, strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) RETURNING *"),
     getById: () => getDb().prepare("SELECT * FROM agents WHERE id = ?"),
@@ -12932,4 +13389,4 @@ var init_db = __esm(() => {
   };
 });
 
-export { normalizeAssetKey, defaultAssetKey, parseAssetKey, canWriteAssetKey, init_key, slackContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, initTelemetry, telemetry, init_telemetry, $OpenAPIRegistry, $OpenApiGeneratorV31, init_dist, init_zod_openapi, AssetKeySchema, AssetEntityTypeSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, ReasoningEffortSchema, splitLegacyModelAlias, resolveTaskModelSelection, AgentTaskStatusSchema, isTerminalTaskStatus, AgentTaskSourceSchema, ProviderNameSchema, SteerModeSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, FollowUpConfigSchema, AgentTaskSchema, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentLatestModelSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChannelTypeSchema, ServiceStatusSchema, ServiceSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSchema, PageVersionSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types, setRequestAuth, getRequestAuth, getCurrentRequestAuth, init_request_auth_context, auditAssetKeys, init_asset_key_audit, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, init_credential_broker, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, normalizeDate, normalizeDateRequired, init_date_utils, init_templates, init_templates2 as init_templates1, SteeringRequestError, isSteeringEnabled2 as isSteeringEnabled, getTaskSteeringFields, promotePendingSteeringForTask, markSteeringUndeliverable, requestSteering, init_steering, isReservedConfigKey, reservedKeyError, validateConfigValue, init_swarm_config_guard, onTaskStarted, init_task_lifecycle_events, generateDefaultClaudeMd, generateDefaultSoulMd, generateDefaultIdentityMd, generateDefaultToolsMd, init_defaults, isSqliteVecAvailable, initDb, getDb, closeDb, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, agentQueries, updateAgentCredentialState, createAgent, getAgentById, getAllAgents, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, isPoolAffinityEnforcementEnabled, buildRoutingAffinityFromAgent, isAgentEligibleForTask, taskQueries, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, getTaskById, getSlackRenderV2ActivatedAt, ensureSlackRenderV2Activation, isPendingSlackMessage, recordSlackMessage, reserveSlackMessage, bindSlackMessageTimestamp, updateSlackMessageRecord, markSlackTreeRendered, deleteSlackMessageRecord, getSlackTreeMessage, getSlackTreeMessageByThread, getSlackOutcomeMessage, getSlackTreeMessages, getSlackMessageByChannelTs, getSlackTasksInThread, markTaskSlackReplySent, setSlackMessageTracking, getChildTasks, hasNonTerminalResumeChild, hasNonTerminalRerouteDecisionChild, updateTaskClaudeSessionId, updateTaskTitle, updateTaskVcs, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getSlackTasksMissingTree, getInProgressTasksByContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getLatestScriptRunStepTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getLatestLeadTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, completeTask, failTask, overwriteTerminalTaskResultText, cancelTask, supersedeTask, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, insertTaskAttachment, getAssetKeyMappingByProvider, upsertAssetKeyMapping, getAssetKeyMapping, listAssetSummaries, moveAssetKey, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, createSteeringMessage, getSteeringMessagesForTask, getSteeringMessageById, getPendingSteeringForTask, getPendingSteeringForAgent, markSteeringDelivered, markSteeringHandled, markSteeringPromoted, cancelPendingSteeringForTask, hasPendingSteering, getAgentWithTasks, getAllAgentsWithTasks, logQueries, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, releaseStaleReviewingTasks, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, getUnassignedTaskIdsForAgent, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, sessionLogQueries, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, UNATTRIBUTED_USER_ID, getSessionCostSummary, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getStaleUnassignedAffinityTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, countWorkflowRuns, listWorkflowRunsPage, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, detachTaskFromWorkflowRunStep, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createAppVersion, getAppVersions, getAppVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, markKeyRateLimited, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listFavorites, listUserFavorites, getFavoriteItemIdSet, setFavorite, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, sweepExpiredKv, sweepExpiredKvPrefix, upsertKv, deleteKv, KvTypeCollisionError, incrKv, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db };
+export { normalizeAssetKey, defaultAssetKey, parseAssetKey, canWriteAssetKey, init_key, slackContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, initTelemetry, telemetry, init_telemetry, $OpenAPIRegistry, $OpenApiGeneratorV31, init_dist, init_zod_openapi, AssetKeySchema, AssetEntityTypeSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, ReasoningEffortSchema, splitLegacyModelAlias, resolveTaskModelSelection, AgentTaskStatusSchema, isTerminalTaskStatus, AgentTaskSourceSchema, ProviderNameSchema, SteerModeSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, FollowUpConfigSchema, AgentTaskSchema, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, UserCommsPrefsSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentLatestModelSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChannelTypeSchema, ServiceStatusSchema, ServiceSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, RuntimeInstanceSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSchema, PageVersionSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types, setRequestAuth, getRequestAuth, getCurrentRequestAuth, init_request_auth_context, auditAssetKeys, init_asset_key_audit, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, init_credential_broker, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, normalizeDate, normalizeDateRequired, init_date_utils, getPromptTemplateDefaultDrift, init_default_drift, init_templates2 as init_templates, SteeringRequestError, isSteeringEnabled2 as isSteeringEnabled, getTaskSteeringFields, promotePendingSteeringForTask, markSteeringUndeliverable, requestSteering, init_steering, isReservedConfigKey, reservedKeyError, validateConfigValue, init_swarm_config_guard, onTaskStarted, init_task_lifecycle_events, generateDefaultClaudeMd, generateDefaultSoulMd, generateDefaultIdentityMd, generateDefaultToolsMd, init_defaults, isSqliteVecAvailable, resolveSqliteVecExtensionPath, __resetSqliteVecExtensionPathCacheForTests, initDb, getDb, closeDb, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, agentQueries, updateAgentCredentialState, updateAgentCredentialMissing, createAgent, getAgentById, getAllAgents, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, isPoolAffinityEnforcementEnabled, buildRoutingAffinityFromAgent, isAgentEligibleForTask, taskQueries, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, getTaskById, getSlackRenderV2ActivatedAt, ensureSlackRenderV2Activation, isPendingSlackMessage, recordSlackMessage, reserveSlackMessage, bindSlackMessageTimestamp, updateSlackMessageRecord, markSlackTreeRendered, deleteSlackMessageRecord, getSlackTreeMessage, getSlackTreeMessageByThread, getSlackOutcomeMessage, getSlackTreeMessages, getSlackMessageByChannelTs, getSlackTasksInThread, markTaskSlackReplySent, setSlackMessageTracking, getChildTasks, hasNonTerminalResumeChild, hasNonTerminalRerouteDecisionChild, updateTaskClaudeSessionId, updateTaskTitle, updateTaskVcs, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getSlackTasksMissingTree, getInProgressTasksByContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getLatestScriptRunStepTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getLatestLeadTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, completeTask, failTask, overwriteTerminalTaskResultText, cancelTask, supersedeTask, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, insertTaskAttachment, recordTaskPullRequestAttachments, getAssetKeyMappingByProvider, upsertAssetKeyMapping, getAssetKeyMapping, listAssetSummaries, moveAssetKey, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, createSteeringMessage, getSteeringMessagesForTask, getSteeringMessageById, getPendingSteeringForTask, getPendingSteeringForAgent, markSteeringDelivered, markSteeringHandled, markSteeringPromoted, cancelPendingSteeringForTask, hasPendingSteering, getAgentWithTasks, getAllAgentsWithTasks, logQueries, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, releaseStaleReviewingTasks, releaseStaleOfferedTasksForOfflineAgents, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, getUnassignedTaskIdsForAgent, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, sessionLogQueries, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, UNATTRIBUTED_USER_ID, getSessionCostSummary, getAttributionByPerson, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getStaleUnassignedAffinityTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, countWorkflowRuns, listWorkflowRunsPage, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, detachTaskFromWorkflowRunStep, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createAppVersion, getAppVersions, getAppVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, markKeyRateLimited, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listFavorites, listUserFavorites, getFavoriteItemIdSet, setFavorite, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, sweepExpiredKv, sweepExpiredKvPrefix, upsertKv, deleteKv, KvTypeCollisionError, incrKv, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db };