@desplega.ai/agent-swarm 1.136.0 → 1.138.0

package/dist/{cli-tmn19cdz.js → cli-kq9htgbr.js}

@@ -35,15 +35,6 @@ import {
   exports_zod,
   init_zod
 } from "./cli-s35981d0.js";
-import {
-  init_secret_scrubber,
-  registerVolatileSecret,
-  scrubSecrets
-} from "./cli-mkq1rk7b.js";
-import {
-  init_package,
-  package_default
-} from "./cli-4r4jkqep.js";
 import {
   _enum,
   array,
@@ -52,6 +43,15 @@ import {
   string,
   union
 } from "./cli-pqv5gvyf.js";
+import {
+  init_package,
+  package_default
+} from "./cli-kkn46gfr.js";
+import {
+  init_secret_scrubber,
+  registerVolatileSecret,
+  scrubSecrets
+} from "./cli-mkq1rk7b.js";
 import {
   __commonJS,
   __esm,
@@ -437,6 +437,28 @@ function _resolveInstallMethod(raw, isE2b) {
     return "e2b";
   return "manual";
 }
+function integrationProviderEntry(providerSlug) {
+  const raw = providerSlug?.trim().toLowerCase();
+  if (!raw)
+    return;
+  let candidate = raw;
+  try {
+    candidate = new URL(raw).hostname.toLowerCase();
+  } catch {
+    const sshHost = raw.match(/^[^@]+@([^:]+):/)?.[1];
+    if (sshHost)
+      candidate = sshHost;
+  }
+  if (candidate.startsWith("www."))
+    candidate = candidate.slice(4);
+  return INTEGRATION_PROVIDERS.get(candidate);
+}
+function _resolveIntegrationType(providerSlug) {
+  return integrationProviderEntry(providerSlug)?.type ?? "other";
+}
+function _resolveIntegrationProvider(providerSlug) {
+  return integrationProviderEntry(providerSlug)?.provider;
+}
 function _resolveInstallPreset(raw) {
   const normalized = raw?.trim();
   return normalized && KNOWN_INSTALL_PRESETS.has(normalized) ? normalized : undefined;
@@ -554,7 +576,18 @@ function track(options) {
     }).catch(() => {});
   } catch {}
 }
-var TELEMETRY_ENDPOINT = "https://proxy.desplega.sh/v1/events", PRODUCT = "agent-swarm", TIMEOUT_MS = 5000, installationId = null, installedAt = null, source = "unknown", cachedIsCloud = false, cachedIsE2b = false, cachedHasEmbedding = false, cachedHasSlackChannel = false, cachedHasEmailChannel = false, cachedInstallMethod = "manual", cachedInstallPreset, CLOUD_HOST_EXACT, CLOUD_HOST_SUFFIXES, KNOWN_INSTALL_METHODS, KNOWN_INSTALL_PRESETS, telemetry;
+function emitIntegrationConnected(type, providerSlug, firstOfType) {
+  if (!isEnabled() || !installationId)
+    return false;
+  const provider = _resolveIntegrationProvider(providerSlug);
+  telemetry.integration("connected", {
+    type,
+    ...provider ? { provider } : {},
+    first_of_type: firstOfType
+  });
+  return true;
+}
+var TELEMETRY_ENDPOINT = "https://proxy.desplega.sh/v1/events", PRODUCT = "agent-swarm", TIMEOUT_MS = 5000, installationId = null, installedAt = null, source = "unknown", cachedIsCloud = false, cachedIsE2b = false, cachedHasEmbedding = false, cachedHasSlackChannel = false, cachedHasEmailChannel = false, cachedInstallMethod = "manual", cachedInstallPreset, CLOUD_HOST_EXACT, CLOUD_HOST_SUFFIXES, KNOWN_INSTALL_METHODS, KNOWN_INSTALL_PRESETS, KNOWN_INTEGRATION_TYPES, INTEGRATION_PROVIDERS, telemetry;
 var init_telemetry = __esm(() => {
   init_package();
   init_env_flag();
@@ -566,6 +599,57 @@ var init_telemetry = __esm(() => {
   CLOUD_HOST_SUFFIXES = [".agent-swarm.dev", ".agent-swarm.cloud"];
   KNOWN_INSTALL_METHODS = new Set(["onboard_interactive", "onboard_noninteractive"]);
   KNOWN_INSTALL_PRESETS = new Set(["dev", "content", "research", "solo", "custom"]);
+  KNOWN_INTEGRATION_TYPES = new Set([
+    "code_repo",
+    "comms",
+    "task_manager",
+    "information_management",
+    "other"
+  ]);
+  INTEGRATION_PROVIDERS = new Map([
+    ["github", { provider: "github", type: "code_repo" }],
+    ["github.com", { provider: "github", type: "code_repo" }],
+    ["api.github.com", { provider: "github", type: "code_repo" }],
+    ["gitlab", { provider: "gitlab", type: "code_repo" }],
+    ["gitlab.com", { provider: "gitlab", type: "code_repo" }],
+    ["bitbucket", { provider: "bitbucket", type: "code_repo" }],
+    ["bitbucket.org", { provider: "bitbucket", type: "code_repo" }],
+    ["api.bitbucket.org", { provider: "bitbucket", type: "code_repo" }],
+    ["slack", { provider: "slack", type: "comms" }],
+    ["slack.com", { provider: "slack", type: "comms" }],
+    ["api.slack.com", { provider: "slack", type: "comms" }],
+    ["email", { provider: "email", type: "comms" }],
+    ["kapso", { provider: "kapso", type: "comms" }],
+    ["kapso.ai", { provider: "kapso", type: "comms" }],
+    ["api.kapso.ai", { provider: "kapso", type: "comms" }],
+    ["discord", { provider: "discord", type: "comms" }],
+    ["discord.com", { provider: "discord", type: "comms" }],
+    ["telegram", { provider: "telegram", type: "comms" }],
+    ["telegram.org", { provider: "telegram", type: "comms" }],
+    ["api.telegram.org", { provider: "telegram", type: "comms" }],
+    ["whatsapp", { provider: "whatsapp", type: "comms" }],
+    ["whatsapp.com", { provider: "whatsapp", type: "comms" }],
+    ["linear", { provider: "linear", type: "task_manager" }],
+    ["linear.app", { provider: "linear", type: "task_manager" }],
+    ["api.linear.app", { provider: "linear", type: "task_manager" }],
+    ["jira", { provider: "jira", type: "task_manager" }],
+    ["asana", { provider: "asana", type: "task_manager" }],
+    ["asana.com", { provider: "asana", type: "task_manager" }],
+    ["app.asana.com", { provider: "asana", type: "task_manager" }],
+    ["trello", { provider: "trello", type: "task_manager" }],
+    ["trello.com", { provider: "trello", type: "task_manager" }],
+    ["api.trello.com", { provider: "trello", type: "task_manager" }],
+    ["google_drive", { provider: "google_drive", type: "information_management" }],
+    ["gdrive", { provider: "google_drive", type: "information_management" }],
+    ["drive.google.com", { provider: "google_drive", type: "information_management" }],
+    ["notion", { provider: "notion", type: "information_management" }],
+    ["notion.so", { provider: "notion", type: "information_management" }],
+    ["api.notion.com", { provider: "notion", type: "information_management" }],
+    ["dropbox", { provider: "dropbox", type: "information_management" }],
+    ["dropbox.com", { provider: "dropbox", type: "information_management" }],
+    ["api.dropboxapi.com", { provider: "dropbox", type: "information_management" }],
+    ["confluence", { provider: "confluence", type: "information_management" }]
+  ]);
   telemetry = {
     taskEvent(event, props) {
       track({ event: `task.${event}`, properties: props });
@@ -585,6 +669,18 @@ var init_telemetry = __esm(() => {
     agent(event, props) {
       track({ event: `agent.${event}`, properties: props });
     },
+    integration(event, props) {
+      const type = KNOWN_INTEGRATION_TYPES.has(props.type) ? props.type : "other";
+      const provider = props.provider ? integrationProviderEntry(props.provider)?.provider : undefined;
+      track({
+        event: `integration.${event}`,
+        properties: {
+          type,
+          ...provider ? { provider } : {},
+          first_of_type: props.first_of_type
+        }
+      });
+    },
     compaction(event, props) {
       track({ event: `compaction.${event}`, properties: props });
     }
@@ -2188,6 +2284,12 @@ var init_types = __esm(() => {
       regular: "devin",
       smart: "devin",
       ultra: "devin"
+    },
+    acp: {
+      smol: "",
+      regular: "",
+      smart: "",
+      ultra: ""
     }
   };
   AgentTaskStatusSchema = exports_zod.enum([
@@ -2247,7 +2349,8 @@ var init_types = __esm(() => {
     "pi",
     "devin",
     "claude-managed",
-    "opencode"
+    "opencode",
+    "acp"
   ]);
   SteerModeSchema = exports_zod.enum(["steer", "queue"]);
   SteeringStatusSchema = exports_zod.enum([
@@ -2290,7 +2393,8 @@ var init_types = __esm(() => {
     devin: ["queue"],
     opencode: ["queue"],
     claude: ["queue"],
-    codex: ["queue"]
+    codex: ["queue"],
+    acp: []
   };
   FollowUpConfigSchema = exports_zod.object({
     disabled: exports_zod.boolean().optional(),
@@ -2301,7 +2405,8 @@ var init_types = __esm(() => {
     sourceAgentId: exports_zod.string().optional(),
     role: exports_zod.string().max(100).optional(),
     harnessProvider: ProviderNameSchema.optional(),
-    capabilities: exports_zod.array(exports_zod.string()).default([])
+    capabilities: exports_zod.array(exports_zod.string()).default([]),
+    leadOnly: exports_zod.boolean().optional()
   }).openapi("RoutingAffinity");
   AgentTaskSchema = exports_zod.object({
     id: exports_zod.uuid(),
@@ -2374,7 +2479,8 @@ var init_types = __esm(() => {
     harnessVariant: exports_zod.string().optional(),
     harnessVariantMeta: exports_zod.record(exports_zod.string(), exports_zod.unknown()).optional(),
     totalCostUsd: exports_zod.number().min(0).optional(),
-    routingAffinity: RoutingAffinitySchema.optional()
+    routingAffinity: RoutingAffinitySchema.optional(),
+    routingAffinityInvalid: exports_zod.boolean().optional()
   }).openapi("AgentTask");
   CreateTaskOptionsSchema = exports_zod.object({
     key: exports_zod.string().min(1).optional(),
@@ -2711,6 +2817,8 @@ var init_types = __esm(() => {
     "task_rejected",
     "task_claimed",
     "task_claim_rejected_affinity",
+    "task_authorization_rejected",
+    "task_recovery_authorization",
     "task_released",
     "channel_message",
     "service_registered",
@@ -3588,7 +3696,8 @@ var init_types = __esm(() => {
     "pi",
     "opencode",
     "devin",
-    "gemini"
+    "gemini",
+    "acp"
   ]);
   PricingTokenClassSchema = exports_zod.enum([
     "input",
@@ -4327,6 +4436,16 @@ class BunSqliteClient {
       return { changes: result.changes };
     });
   }
+  async runTimed(sql, params = []) {
+    let executionMs = 0;
+    const result = await this.execute((db) => {
+      const run = db.query(sql).run(...params);
+      return { changes: run.changes };
+    }, (ms) => {
+      executionMs += ms;
+    });
+    return { ...result, executionMs };
+  }
   async transaction(fn, opts) {
     const existing = txContext.getStore();
     if (existing && !existing.closed) {
@@ -4429,10 +4548,20 @@ class BunSqliteClient {
       throw err;
     }
   }
-  async execute(op) {
+  async execute(op, recordExecutionMs) {
+    const timed = (attempt) => {
+      if (!recordExecutionMs)
+        return attempt();
+      const startedAt = performance.now();
+      try {
+        return attempt();
+      } finally {
+        recordExecutionMs(performance.now() - startedAt);
+      }
+    };
     const ctx = txContext.getStore();
     if (ctx && !ctx.closed) {
-      return op(this.getDatabase());
+      return timed(() => op(this.getDatabase()));
     }
     let sleptMs = 0;
     for (let attemptIndex = 0;; attemptIndex++) {
@@ -4441,7 +4570,7 @@ class BunSqliteClient {
       const release = await this.lock.acquire();
       let backoff = 0;
       try {
-        return canRetryAfter ? this.shortSpin(this.getDatabase(), () => op(this.getDatabase())) : op(this.getDatabase());
+        return timed(() => canRetryAfter ? this.shortSpin(this.getDatabase(), () => op(this.getDatabase())) : op(this.getDatabase()));
       } catch (err) {
         if (!isSqliteBusy(err) || !canRetryAfter || next === undefined)
           throw err;
@@ -5177,6 +5306,13 @@ function integerValidators(keys, min) {
     }
   ]));
 }
+function boundedIntegerValidatorsFor(bounds) {
+  const validators = {};
+  for (const [key, { min, max }] of Object.entries(bounds)) {
+    Object.assign(validators, boundedIntegerValidators([key], min, max));
+  }
+  return validators;
+}
 function boundedIntegerValidators(keys, min, max) {
   return Object.fromEntries(keys.map((key) => [
     key,
@@ -5201,11 +5337,16 @@ function validateConfigValue(key, value) {
   const validator = VALIDATED_KEYS[key.toUpperCase()];
   return validator ? validator(value) : null;
 }
-var RESERVED_KEYS, BOOLEAN_LITERALS, MAX_DB_RETENTION_DAYS = 1e6, VALIDATED_KEYS;
+var RESERVED_KEYS, BOOLEAN_LITERALS, MAX_DB_RETENTION_DAYS = 1e6, DB_RETENTION_TUNING_BOUNDS, VALIDATED_KEYS;
 var init_swarm_config_guard = __esm(() => {
   init_types();
   RESERVED_KEYS = new Set(["API_KEY", "SECRETS_ENCRYPTION_KEY"]);
   BOOLEAN_LITERALS = ["true", "false", "1", "0"];
+  DB_RETENTION_TUNING_BOUNDS = {
+    DB_RETENTION_TICK_BUDGET_MS: { min: 1000, max: 300000 },
+    DB_RETENTION_CATCHUP_INTERVAL_MS: { min: 5000, max: 3600000 },
+    DB_RETENTION_MAX_STATEMENT_MS: { min: 25, max: 5000 }
+  };
   VALIDATED_KEYS = {
     HARNESS_PROVIDER: (value) => {
       const parsed = ProviderNameSchema.safeParse(value);
@@ -5291,6 +5432,7 @@ var init_swarm_config_guard = __esm(() => {
       "DB_QUERY_MCP_MAX_ROWS",
       "AGENT_FS_REQUEST_TIMEOUT_MS"
     ], 1),
+    ...boundedIntegerValidatorsFor(DB_RETENTION_TUNING_BOUNDS),
     ...boundedIntegerValidators(["SESSION_LOG_RETENTION_DAYS", "AGENT_LOG_RETENTION_DAYS", "EVENTS_RETENTION_DAYS"], 1, MAX_DB_RETENTION_DAYS),
     ...integerValidators(["HEARTBEAT_MAX_AUTO_ASSIGN"], 0),
     MEMORY_MIN_SIMILARITY: (value) => validateFloatRange("MEMORY_MIN_SIMILARITY", value, 0, 1, "between 0 and 1 inclusive"),
@@ -5366,11 +5508,13 @@ __export(exports_db, {
   backfillSupersedeTaskResumeTaskId: () => backfillSupersedeTaskResumeTaskId,
   bindSlackMessageTimestamp: () => bindSlackMessageTimestamp,
   buildRoutingAffinityFromAgent: () => buildRoutingAffinityFromAgent,
+  cancelPendingApprovalRequestsForRun: () => cancelPendingApprovalRequestsForRun,
   cancelPendingSteeringForTask: () => cancelPendingSteeringForTask,
   cancelTask: () => cancelTask,
   cascadeFailDependents: () => cascadeFailDependents,
   checkDependencies: () => checkDependencies,
   checkoutPromptTemplate: () => checkoutPromptTemplate,
+  claimApprovalCancellationNotification: () => claimApprovalCancellationNotification,
   claimInboxMessages: () => claimInboxMessages,
   claimKv: () => claimKv,
   claimMentions: () => claimMentions,
@@ -5380,6 +5524,7 @@ __export(exports_db, {
   cleanupStaleSessions: () => cleanupStaleSessions,
   clearKeyRateLimit: () => clearKeyRateLimit,
   closeDb: () => closeDb,
+  completeApprovalCancellationNotificationClaim: () => completeApprovalCancellationNotificationClaim,
   completeTask: () => completeTask,
   computeContentHash: () => computeContentHash,
   countActiveScriptRuns: () => countActiveScriptRuns,
@@ -5449,6 +5594,8 @@ __export(exports_db, {
   deleteUser: () => deleteUser,
   deleteWorkflow: () => deleteWorkflow,
   detachTaskFromWorkflowRunStep: () => detachTaskFromWorkflowRunStep,
+  emitBuiltInIntegrationConnectedOnce: () => emitBuiltInIntegrationConnectedOnce,
+  emitMcpServerConnectedTelemetry: () => emitMcpServerConnectedTelemetry,
   ensureSlackRenderV2Activation: () => ensureSlackRenderV2Activation,
   failPendingResumeIfUnclaimed: () => failPendingResumeIfUnclaimed,
   failTask: () => failTask,
@@ -5679,6 +5826,8 @@ __export(exports_db, {
   listAllPages: () => listAllPages,
   listApprovalRequests: () => listApprovalRequests,
   listAssetSummaries: () => listAssetSummaries,
+  listCancelledApprovalRequestsForRun: () => listCancelledApprovalRequestsForRun,
+  listCancelledApprovalRequestsForStep: () => listCancelledApprovalRequestsForStep,
   listFavorites: () => listFavorites,
   listInboxState: () => listInboxState,
   listKv: () => listKv,
@@ -5723,6 +5872,7 @@ __export(exports_db, {
   recordSlackMessage: () => recordSlackMessage,
   recordTaskPullRequestAttachments: () => recordTaskPullRequestAttachments,
   rejectTask: () => rejectTask,
+  releaseApprovalCancellationNotificationClaim: () => releaseApprovalCancellationNotificationClaim,
   releaseMentionProcessing: () => releaseMentionProcessing,
   releaseStaleMentionProcessing: () => releaseStaleMentionProcessing,
   releaseStaleOfferedTasksForOfflineAgents: () => releaseStaleOfferedTasksForOfflineAgents,
@@ -6311,24 +6461,27 @@ async function buildRoutingAffinityFromAgent(agentId) {
   };
 }
 function isAgentEligibleForTask(agent, task) {
-  if (!isPoolAffinityEnforcementEnabled())
-    return true;
   const affinity = task.routingAffinity;
+  if (task.routingAffinityInvalid)
+    return false;
   if (!affinity)
     return true;
+  const requiredCapabilities = affinity.capabilities ?? [];
+  const hasRequiredCapabilities = () => {
+    const agentCapabilities = new Set(agent.capabilities ?? []);
+    return requiredCapabilities.every((cap) => agentCapabilities.has(cap));
+  };
+  if (affinity.leadOnly)
+    return agent.isLead && hasRequiredCapabilities();
+  if (!isPoolAffinityEnforcementEnabled())
+    return true;
   if (affinity.sourceAgentId && affinity.sourceAgentId === agent.id)
     return true;
   if (!agent.role || !affinity.role)
     return false;
   if (agent.role !== affinity.role)
     return false;
-  const requiredCapabilities = affinity.capabilities ?? [];
-  if (requiredCapabilities.length > 0) {
-    const agentCapabilities = new Set(agent.capabilities ?? []);
-    if (!requiredCapabilities.every((cap) => agentCapabilities.has(cap)))
-      return false;
-  }
-  return true;
+  return hasRequiredCapabilities();
 }
 function rowToAgentTask(row) {
   let followUpConfig;
@@ -6346,16 +6499,19 @@ function rowToAgentTask(row) {
     }
   }
   let routingAffinity;
+  let routingAffinityInvalid = false;
   if (row.routingAffinity) {
     try {
       const parsed = RoutingAffinitySchema.safeParse(JSON.parse(row.routingAffinity));
       if (parsed.success) {
         routingAffinity = parsed.data;
       } else {
-        console.warn(`[db] Ignoring invalid agent_tasks.routingAffinity for task ${row.id}:`, parsed.error.message);
+        routingAffinityInvalid = true;
+        console.warn(`[db] Quarantining invalid agent_tasks.routingAffinity for task ${row.id}:`, parsed.error.message);
       }
     } catch (error) {
-      console.warn(`[db] Ignoring malformed agent_tasks.routingAffinity for task ${row.id}:`, error instanceof Error ? error.message : String(error));
+      routingAffinityInvalid = true;
+      console.warn(`[db] Quarantining malformed agent_tasks.routingAffinity for task ${row.id}:`, error instanceof Error ? error.message : String(error));
     }
   }
   return {
@@ -6429,7 +6585,8 @@ function rowToAgentTask(row) {
     harnessVariant: row.harnessVariant ?? undefined,
     harnessVariantMeta: row.harnessVariantMeta ? JSON.parse(row.harnessVariantMeta) : undefined,
     totalCostUsd: row.totalCostUsd ?? undefined,
-    routingAffinity
+    routingAffinity,
+    routingAffinityInvalid: routingAffinityInvalid || undefined
   };
 }
 function rowToAgentTaskSummary(row) {
@@ -6495,28 +6652,34 @@ async function createTask(agentId, task, options) {
 }
 async function getPendingTaskForAgent(agentId) {
   const rows = await getDbClient().query("SELECT * FROM agent_tasks WHERE agentId = ? AND status = 'pending' ORDER BY priority DESC, createdAt ASC", [agentId]);
+  const agent = await getAgentById(agentId);
+  if (!agent)
+    return null;
   for (const row of rows) {
     const task = rowToAgentTask(row);
+    if (!isAgentEligibleForTask(agent, task))
+      continue;
     const { ready } = await checkDependencies(task.id);
-    if (ready) {
+    if (ready)
       return task;
-    }
   }
   return null;
 }
 async function assignUnassignedTaskPending(taskId, agentId) {
-  if (isPoolAffinityEnforcementEnabled()) {
+  {
     const task = await getTaskById(taskId);
     const agent = await getAgentById(agentId);
-    if (task && agent && !isAgentEligibleForTask(agent, task)) {
+    if (task && (!agent || !isAgentEligibleForTask(agent, task))) {
       try {
         await createLogEntry({
           eventType: "task_claim_rejected_affinity",
           agentId,
           taskId,
           metadata: {
-            agentRole: agent.role ?? null,
-            requiredRole: task.routingAffinity?.role ?? null
+            agentRole: agent?.role ?? null,
+            requiredRole: task.routingAffinity?.role ?? null,
+            leadOnly: task.routingAffinity?.leadOnly === true,
+            agentIsLead: agent?.isLead ?? false
           }
         });
       } catch {}
@@ -8556,8 +8719,24 @@ async function createTaskExtended(task, options) {
       if (parent.followUpConfig && !options.followUpConfig) {
         options.followUpConfig = parent.followUpConfig;
       }
-      if (parent.routingAffinity && !options.routingAffinity) {
-        options.routingAffinity = parent.routingAffinity;
+      if (parent.routingAffinityInvalid) {
+        throw new Error(`Cannot continue task ${parent.id}: routing affinity is invalid.`);
+      }
+      if (parent.routingAffinity) {
+        if (!options.routingAffinity) {
+          options.routingAffinity = parent.routingAffinity;
+        } else if (parent.routingAffinity.leadOnly) {
+          options.routingAffinity = {
+            ...options.routingAffinity,
+            capabilities: [
+              ...new Set([
+                ...parent.routingAffinity.capabilities ?? [],
+                ...options.routingAffinity.capabilities ?? []
+              ])
+            ],
+            leadOnly: true
+          };
+        }
       }
     }
   }
@@ -8600,6 +8779,24 @@ async function createTaskExtended(task, options) {
       }
     }
   }
+  const targetAgentId = options.agentId ?? options.offeredTo;
+  if (options.routingAffinity && targetAgentId) {
+    const target = await getAgentById(targetAgentId);
+    if (!target || !isAgentEligibleForTask(target, { routingAffinity: options.routingAffinity })) {
+      try {
+        await createLogEntry({
+          eventType: "task_authorization_rejected",
+          agentId: options.creatorAgentId,
+          metadata: {
+            leadOnly: options.routingAffinity.leadOnly === true,
+            targetAgentId,
+            decision: "reject_ineligible_assignment"
+          }
+        });
+      } catch {}
+      throw new Error(options.routingAffinity.leadOnly ? `Lead-only task routing affinity does not authorize assignment or offer to agent "${targetAgentId}".` : `Task routing affinity does not authorize assignment or offer to agent "${targetAgentId}".`);
+    }
+  }
   const auditUserId = getCurrentRequestUserId() ?? null;
   const assetKey = normalizeAssetKey(options?.key ?? defaultAssetKey("task", id));
   const claim = await getDbClient().transaction(async () => {
@@ -8682,7 +8879,11 @@ async function createTaskExtended(task, options) {
       agentId: options?.creatorAgentId,
       taskId: id,
       newValue: status,
-      metadata: { source: options?.source ?? "mcp" }
+      metadata: {
+        source: options?.source ?? "mcp",
+        leadOnly: options?.routingAffinity?.leadOnly === true,
+        authorization: options?.routingAffinity?.leadOnly ? { decision: "authorized", targetAgentId: options.agentId ?? options.offeredTo ?? null } : undefined
+      }
     });
   } catch {}
   emitTaskLifecycleTelemetryAfterCommit("created", {
@@ -8690,6 +8891,7 @@ async function createTaskExtended(task, options) {
     source: row.source,
     ...taskContextForTelemetry(rowToAgentTask(row)),
     hasParent: !!row.parentTaskId,
+    has_repo: !!row.vcsRepo,
     priority: row.priority
   }, (task2) => task2 !== null);
   getDbClient().afterCommit(() => {
@@ -8708,18 +8910,20 @@ async function createTaskExtended(task, options) {
   return rowToAgentTask(row);
 }
 async function claimTask(taskId, agentId) {
-  if (isPoolAffinityEnforcementEnabled()) {
+  {
     const task = await getTaskById(taskId);
     const agent = await getAgentById(agentId);
-    if (task && agent && !isAgentEligibleForTask(agent, task)) {
+    if (task && (!agent || !isAgentEligibleForTask(agent, task))) {
       try {
         await createLogEntry({
           eventType: "task_claim_rejected_affinity",
           agentId,
           taskId,
           metadata: {
-            agentRole: agent.role ?? null,
-            requiredRole: task.routingAffinity?.role ?? null
+            agentRole: agent?.role ?? null,
+            requiredRole: task.routingAffinity?.role ?? null,
+            leadOnly: task.routingAffinity?.leadOnly === true,
+            agentIsLead: agent?.isLead ?? false
           }
         });
       } catch {}
@@ -8772,6 +8976,22 @@ async function acceptTask(taskId, agentId) {
   const task = await getTaskById(taskId);
   if (!task)
     return null;
+  const agent = await getAgentById(agentId);
+  if ((task.routingAffinity?.leadOnly || task.routingAffinityInvalid) && (!agent || !isAgentEligibleForTask(agent, task))) {
+    try {
+      await createLogEntry({
+        eventType: "task_claim_rejected_affinity",
+        agentId,
+        taskId,
+        metadata: {
+          leadOnly: true,
+          agentIsLead: agent?.isLead ?? false,
+          decision: "reject_offer_accept"
+        }
+      });
+    } catch {}
+    return null;
+  }
   if (!(task.status === "offered" || task.status === "reviewing") || task.offeredTo !== agentId)
     return null;
   const now = new Date().toISOString();
@@ -8922,6 +9142,22 @@ async function claimOfferedTask(taskId, agentId) {
     return null;
   if (task.status !== "offered" || task.offeredTo !== agentId)
     return null;
+  const agent = await getAgentById(agentId);
+  if ((task.routingAffinity?.leadOnly || task.routingAffinityInvalid) && (!agent || !isAgentEligibleForTask(agent, task))) {
+    try {
+      await createLogEntry({
+        eventType: "task_claim_rejected_affinity",
+        agentId,
+        taskId,
+        metadata: {
+          leadOnly: true,
+          agentIsLead: agent?.isLead ?? false,
+          decision: "reject_offer_claim"
+        }
+      });
+    } catch {}
+    return null;
+  }
   const now = new Date().toISOString();
   const row = await getDbClient().get(`UPDATE agent_tasks SET status = 'reviewing', lastUpdatedAt = ?
        WHERE id = ? AND status = 'offered' RETURNING *`, [now, taskId]);
@@ -10591,6 +10827,16 @@ async function upsertSwarmConfig(data) {
   }
   return config;
 }
+async function emitBuiltInIntegrationConnectedOnce(provider) {
+  try {
+    const key = `telemetry.integration.${provider}.emitted`;
+    if ((await getSwarmConfigs({ scope: "global", key })).length > 0)
+      return;
+    if (!emitIntegrationConnected(_resolveIntegrationType(provider), provider, true))
+      return;
+    await upsertSwarmConfig({ scope: "global", key, value: "true" });
+  } catch {}
+}
 async function deleteSwarmConfig(id) {
   const result = await getDbClient().run("DELETE FROM swarm_config WHERE id = ?", [id]);
   return result.changes > 0;
@@ -11986,6 +12232,7 @@ function rowToApprovalRequest(row) {
     responses: row.responses ? JSON.parse(row.responses) : null,
     resolvedBy: row.resolvedBy,
     resolvedAt: normalizeDate(row.resolvedAt),
+    resolutionReason: row.resolutionReason,
     timeoutSeconds: row.timeoutSeconds,
     expiresAt: normalizeDate(row.expiresAt),
     notificationChannels: row.notificationChannels ? JSON.parse(row.notificationChannels) : null,
@@ -11997,34 +12244,72 @@ function rowToApprovalRequest(row) {
 async function createApprovalRequest(data) {
   const now = new Date().toISOString();
   const expiresAt = data.timeoutSeconds ? new Date(Date.now() + data.timeoutSeconds * 1000).toISOString() : null;
-  const row = await getDbClient().get(`INSERT INTO approval_requests (id, title, questions, workflowRunId, workflowRunStepId, sourceTaskId, approvers, timeoutSeconds, expiresAt, notificationChannels, created_by, createdAt, updatedAt)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+  const row = await getDbClient().transaction(async () => {
+    let status = "pending";
+    let resolutionReason = null;
+    if (data.requireActionableWorkflow && data.workflowRunId && data.workflowRunStepId) {
+      const run = await getWorkflowRun(data.workflowRunId);
+      const step = await getWorkflowRunStep(data.workflowRunStepId);
+      if (!run || run.status !== "running" && run.status !== "waiting") {
+        status = "cancelled";
+        resolutionReason = run?.error ?? `Workflow run is ${run?.status ?? "missing"}`;
+      } else if (!step || step.runId !== run.id || step.status !== "running") {
+        status = "cancelled";
+        resolutionReason = `Human-in-the-loop step is ${step?.status ?? "missing"}`;
+      }
+    }
+    return getDbClient().get(`INSERT INTO approval_requests
+         (id, title, questions, workflowRunId, workflowRunStepId, sourceTaskId,
+          approvers, status, resolutionReason, resolvedAt, timeoutSeconds, expiresAt,
+          notificationChannels, created_by, createdAt, updatedAt)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
        RETURNING *`, [
-    data.id,
-    data.title,
-    JSON.stringify(data.questions),
-    data.workflowRunId ?? null,
-    data.workflowRunStepId ?? null,
-    data.sourceTaskId ?? null,
-    JSON.stringify(data.approvers),
-    data.timeoutSeconds ?? null,
-    expiresAt,
-    data.notificationChannels ? JSON.stringify(data.notificationChannels) : null,
-    data.createdBy ?? null,
-    now,
-    now
-  ]);
+      data.id,
+      data.title,
+      JSON.stringify(data.questions),
+      data.workflowRunId ?? null,
+      data.workflowRunStepId ?? null,
+      data.sourceTaskId ?? null,
+      JSON.stringify(data.approvers),
+      status,
+      resolutionReason,
+      status === "cancelled" ? now : null,
+      data.timeoutSeconds ?? null,
+      expiresAt,
+      data.notificationChannels ? JSON.stringify(data.notificationChannels) : null,
+      data.createdBy ?? null,
+      now,
+      now
+    ]);
+  });
   return rowToApprovalRequest(row);
 }
 async function getApprovalRequestById(id) {
   const row = await getDbClient().get("SELECT * FROM approval_requests WHERE id = ?", [id]);
   return row ? rowToApprovalRequest(row) : null;
 }
-async function resolveApprovalRequest(id, data) {
+async function resolveApprovalRequest(id, data, options) {
   const now = new Date().toISOString();
+  const actionableWorkflowClause = options?.requireActionableWorkflow ? `AND (
+         workflowRunId IS NULL
+         OR (
+           EXISTS (
+             SELECT 1 FROM workflow_runs
+             WHERE id = approval_requests.workflowRunId
+               AND status IN ('running', 'waiting')
+           )
+           AND EXISTS (
+           SELECT 1 FROM workflow_run_steps
+             WHERE id = approval_requests.workflowRunStepId
+               AND runId = approval_requests.workflowRunId
+               AND status = 'waiting'
+           )
+         )
+       )` : "";
   const row = await getDbClient().get(`UPDATE approval_requests
        SET status = ?, responses = ?, resolvedBy = ?, resolvedAt = ?, updatedAt = ?
        WHERE id = ? AND status = 'pending'
+         ${actionableWorkflowClause}
        RETURNING *`, [
     data.status,
     data.responses ? JSON.stringify(data.responses) : null,
@@ -12035,6 +12320,68 @@ async function resolveApprovalRequest(id, data) {
   ]);
   return row ? rowToApprovalRequest(row) : null;
 }
+async function cancelPendingApprovalRequestsForRun(workflowRunId, reason) {
+  const now = new Date().toISOString();
+  const rows = await getDbClient().query(`UPDATE approval_requests
+       SET status = 'cancelled', resolutionReason = ?, resolvedAt = ?, updatedAt = ?
+       WHERE workflowRunId = ? AND status = 'pending'
+       RETURNING *`, [reason, now, now, workflowRunId]);
+  return rows.map(rowToApprovalRequest);
+}
+async function listCancelledApprovalRequestsForRun(workflowRunId) {
+  const rows = await getDbClient().query(`SELECT * FROM approval_requests
+       WHERE workflowRunId = ? AND status = 'cancelled'`, [workflowRunId]);
+  return rows.map(rowToApprovalRequest);
+}
+async function listCancelledApprovalRequestsForStep(workflowRunStepId) {
+  const rows = await getDbClient().query(`SELECT * FROM approval_requests
+       WHERE workflowRunStepId = ? AND status = 'cancelled'`, [workflowRunStepId]);
+  return rows.map(rowToApprovalRequest);
+}
+async function claimApprovalCancellationNotification(id, notificationKey) {
+  return getDbClient().transaction(async () => {
+    const row = await getDbClient().get("SELECT * FROM approval_requests WHERE id = ? AND status = 'cancelled'", [id]);
+    if (!row)
+      return null;
+    const claims = row.cancellationNotificationClaims ? JSON.parse(row.cancellationNotificationClaims) : {};
+    const existing = claims[notificationKey];
+    if (existing === "delivered")
+      return null;
+    if (existing && typeof existing !== "string" && Date.now() - new Date(existing.claimedAt).getTime() < 60000) {
+      return null;
+    }
+    const now = new Date().toISOString();
+    const leaseToken = crypto.randomUUID();
+    claims[notificationKey] = { claimedAt: now, leaseToken };
+    await getDbClient().run(`UPDATE approval_requests
+         SET cancellationNotificationClaims = ?, updatedAt = ?
+         WHERE id = ? AND status = 'cancelled'`, [JSON.stringify(claims), now, id]);
+    return { approval: rowToApprovalRequest(row), leaseToken };
+  });
+}
+async function completeApprovalCancellationNotificationClaim(id, notificationKey, leaseToken) {
+  await updateApprovalCancellationNotificationClaim(id, notificationKey, leaseToken, "delivered");
+}
+async function releaseApprovalCancellationNotificationClaim(id, notificationKey, leaseToken) {
+  await updateApprovalCancellationNotificationClaim(id, notificationKey, leaseToken, null);
+}
+async function updateApprovalCancellationNotificationClaim(id, notificationKey, leaseToken, value) {
+  await getDbClient().transaction(async () => {
+    const row = await getDbClient().get("SELECT cancellationNotificationClaims AS claims FROM approval_requests WHERE id = ?", [id]);
+    const claims = row?.claims ? JSON.parse(row.claims) : {};
+    const current = claims[notificationKey];
+    if (!current || typeof current === "string" || current.leaseToken !== leaseToken) {
+      return;
+    }
+    if (value === null)
+      delete claims[notificationKey];
+    else
+      claims[notificationKey] = value;
+    await getDbClient().run(`UPDATE approval_requests
+         SET cancellationNotificationClaims = ?, updatedAt = ?
+         WHERE id = ? AND status = 'cancelled'`, [JSON.stringify(claims), new Date().toISOString(), id]);
+  });
+}
 async function updateApprovalRequestNotifications(id, notificationChannels) {
   const now = new Date().toISOString();
   await getDbClient().run("UPDATE approval_requests SET notificationChannels = ?, updatedAt = ? WHERE id = ?", [JSON.stringify(notificationChannels), now, id]);
@@ -12723,6 +13070,12 @@ async function createMcpServer(data) {
     throw new Error("Failed to create MCP server");
   return rowToMcpServer(row);
 }
+async function emitMcpServerConnectedTelemetry() {
+  try {
+    const row = await getDbClient().get("SELECT COUNT(*) as count FROM mcp_servers");
+    emitIntegrationConnected("other", undefined, row?.count === 1);
+  } catch {}
+}
 async function updateMcpServer(id, updates) {
   const existing = await getMcpServerById(id);
   if (!existing)
@@ -14313,4 +14666,4 @@ var init_db = __esm(() => {
   };
 });
 
-export { normalizeAssetKey, defaultAssetKey, parseAssetKey, canWriteAssetKey, init_key, slackContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, initTelemetry, telemetry, init_telemetry, $OpenAPIRegistry, $OpenApiGeneratorV31, init_dist, init_zod_openapi, AssetKeySchema, AssetEntityTypeSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, ReasoningEffortSchema, splitLegacyModelAlias, resolveTaskModelSelection, AgentTaskStatusSchema, isTerminalTaskStatus, AgentTaskSourceSchema, ProviderNameSchema, SteerModeSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, FollowUpConfigSchema, AgentTaskSchema, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, UserCommsPrefsSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentLatestModelSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChannelTypeSchema, ServiceStatusSchema, ServiceSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, RuntimeInstanceSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSchema, PageVersionSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types, beginRequestAuthScope, setRequestAuth, getRequestAuth, getCurrentRequestAuth, runWithoutRequestAuth, init_request_auth_context, auditAssetKeys, init_asset_key_audit, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, init_credential_broker, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, normalizeDate, normalizeDateRequired, init_date_utils, getPromptTemplateDefaultDrift, init_default_drift, init_templates2 as init_templates, SteeringRequestError, isSteeringEnabled2 as isSteeringEnabled, getTaskSteeringFields, promotePendingSteeringForTask, markSteeringUndeliverable, requestSteering, init_steering, isReservedConfigKey, reservedKeyError, MAX_DB_RETENTION_DAYS, validateConfigValue, init_swarm_config_guard, onTaskStarted, init_task_lifecycle_events, isSqliteVecAvailable, resolveSqliteVecExtensionPath, __resetSqliteVecExtensionPathCacheForTests, initDb, getDb, closeDb, getDbClient, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, updateAgentCredentialState, updateAgentCredentialMissing, createAgent, getAgentById, getAllAgents, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, isPoolAffinityEnforcementEnabled, buildRoutingAffinityFromAgent, isAgentEligibleForTask, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, getTaskById, getSlackRenderV2ActivatedAt, ensureSlackRenderV2Activation, isPendingSlackMessage, recordSlackMessage, reserveSlackMessage, bindSlackMessageTimestamp, updateSlackMessageRecord, markSlackTreeRendered, deleteSlackMessageRecord, getSlackTreeMessage, getSlackTreeMessageByThread, getSlackOutcomeMessage, getSlackTreeMessages, getSlackMessageByChannelTs, getSlackTasksInThread, markTaskSlackReplySent, setSlackMessageTracking, getChildTasks, hasNonTerminalResumeChild, hasNonTerminalRerouteDecisionChild, updateTaskClaudeSessionId, updateTaskTitle, updateTaskVcs, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getSlackTasksMissingTree, getInProgressTasksByContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getLatestScriptRunStepTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getLatestLeadTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, completeTask, failTask, overwriteTerminalTaskResultText, cancelTask, supersedeTask, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, insertTaskAttachment, recordTaskPullRequestAttachments, getAssetKeyMappingByProvider, upsertAssetKeyMapping, getAssetKeyMapping, listAssetSummaries, moveAssetKey, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, createSteeringMessage, getSteeringMessagesForTask, getSteeringMessageById, getPendingSteeringForTask, getPendingSteeringForAgent, markSteeringDelivered, markSteeringHandled, markSteeringPromoted, cancelPendingSteeringForTask, hasPendingSteering, getAgentWithTasks, getAllAgentsWithTasks, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, promoteDraftTask, promoteAbandonedDraftTasks, releaseStaleReviewingTasks, releaseStaleOfferedTasksForOfflineAgents, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, getUnassignedTaskIdsForAgent, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, UNATTRIBUTED_USER_ID, getSessionCostSummary, getAttributionByPerson, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getStaleUnassignedAffinityTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, countWorkflowRuns, listWorkflowRunsPage, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, detachTaskFromWorkflowRunStep, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createAppVersion, getAppVersions, getAppVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, markKeyRateLimited, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listFavorites, listUserFavorites, getFavoriteItemIdSet, setFavorite, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, sweepExpiredKv, sweepExpiredKvPrefix, upsertKv, claimKv, deleteKv, KvTypeCollisionError, incrKv, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, updateScriptRunIfNotTerminal, updateScriptRunIfRunning, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db };
+export { normalizeAssetKey, defaultAssetKey, parseAssetKey, canWriteAssetKey, init_key, slackContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, _resolveIntegrationType, _resolveIntegrationProvider, initTelemetry, telemetry, emitIntegrationConnected, init_telemetry, $OpenAPIRegistry, $OpenApiGeneratorV31, init_dist, init_zod_openapi, AssetKeySchema, AssetEntityTypeSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, ReasoningEffortSchema, splitLegacyModelAlias, resolveTaskModelSelection, AgentTaskStatusSchema, isTerminalTaskStatus, AgentTaskSourceSchema, ProviderNameSchema, SteerModeSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, FollowUpConfigSchema, AgentTaskSchema, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, UserCommsPrefsSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentLatestModelSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChannelTypeSchema, ServiceStatusSchema, ServiceSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, RuntimeInstanceSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSchema, PageVersionSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types, beginRequestAuthScope, setRequestAuth, getRequestAuth, getCurrentRequestAuth, runWithoutRequestAuth, init_request_auth_context, auditAssetKeys, init_asset_key_audit, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, init_credential_broker, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, normalizeDate, normalizeDateRequired, init_date_utils, getPromptTemplateDefaultDrift, init_default_drift, init_templates2 as init_templates, SteeringRequestError, isSteeringEnabled2 as isSteeringEnabled, getTaskSteeringFields, promotePendingSteeringForTask, markSteeringUndeliverable, requestSteering, init_steering, isReservedConfigKey, reservedKeyError, MAX_DB_RETENTION_DAYS, DB_RETENTION_TUNING_BOUNDS, validateConfigValue, init_swarm_config_guard, onTaskStarted, init_task_lifecycle_events, isSqliteVecAvailable, resolveSqliteVecExtensionPath, __resetSqliteVecExtensionPathCacheForTests, initDb, getDb, closeDb, getDbClient, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, updateAgentCredentialState, updateAgentCredentialMissing, createAgent, getAgentById, getAllAgents, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, isPoolAffinityEnforcementEnabled, buildRoutingAffinityFromAgent, isAgentEligibleForTask, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, getTaskById, getSlackRenderV2ActivatedAt, ensureSlackRenderV2Activation, isPendingSlackMessage, recordSlackMessage, reserveSlackMessage, bindSlackMessageTimestamp, updateSlackMessageRecord, markSlackTreeRendered, deleteSlackMessageRecord, getSlackTreeMessage, getSlackTreeMessageByThread, getSlackOutcomeMessage, getSlackTreeMessages, getSlackMessageByChannelTs, getSlackTasksInThread, markTaskSlackReplySent, setSlackMessageTracking, getChildTasks, hasNonTerminalResumeChild, hasNonTerminalRerouteDecisionChild, updateTaskClaudeSessionId, updateTaskTitle, updateTaskVcs, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getSlackTasksMissingTree, getInProgressTasksByContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getLatestScriptRunStepTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getLatestLeadTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, completeTask, failTask, overwriteTerminalTaskResultText, cancelTask, supersedeTask, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, insertTaskAttachment, recordTaskPullRequestAttachments, getAssetKeyMappingByProvider, upsertAssetKeyMapping, getAssetKeyMapping, listAssetSummaries, moveAssetKey, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, createSteeringMessage, getSteeringMessagesForTask, getSteeringMessageById, getPendingSteeringForTask, getPendingSteeringForAgent, markSteeringDelivered, markSteeringHandled, markSteeringPromoted, cancelPendingSteeringForTask, hasPendingSteering, getAgentWithTasks, getAllAgentsWithTasks, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, promoteDraftTask, promoteAbandonedDraftTasks, releaseStaleReviewingTasks, releaseStaleOfferedTasksForOfflineAgents, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, getUnassignedTaskIdsForAgent, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, UNATTRIBUTED_USER_ID, getSessionCostSummary, getAttributionByPerson, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, emitBuiltInIntegrationConnectedOnce, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getStaleUnassignedAffinityTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, countWorkflowRuns, listWorkflowRunsPage, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, detachTaskFromWorkflowRunStep, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createAppVersion, getAppVersions, getAppVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, cancelPendingApprovalRequestsForRun, listCancelledApprovalRequestsForRun, listCancelledApprovalRequestsForStep, claimApprovalCancellationNotification, completeApprovalCancellationNotificationClaim, releaseApprovalCancellationNotificationClaim, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, emitMcpServerConnectedTelemetry, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, markKeyRateLimited, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listFavorites, listUserFavorites, getFavoriteItemIdSet, setFavorite, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, sweepExpiredKv, sweepExpiredKvPrefix, upsertKv, claimKv, deleteKv, KvTypeCollisionError, incrKv, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, updateScriptRunIfNotTerminal, updateScriptRunIfRunning, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db };