@desplega.ai/agent-swarm 1.155.0 → 1.156.0

package/dist/{cli-3bh2bbga.js → cli-24w39x6n.js}

@@ -17,7 +17,7 @@ import {
   normalizeAssetKey,
   parseAssetKey,
   parseModelTier
-} from "./cli-fb79s4p1.js";
+} from "./cli-h0wdadsx.js";
 import {
   IdentityFieldBudgetError,
   checkIdentityFieldBudget,
@@ -30,7 +30,7 @@ import {
   init_templates,
   matchesDefaultClaudeMd,
   matchesDefaultIdentityMd
-} from "./cli-6265kmdz.js";
+} from "./cli-3gmcwfyx.js";
 import {
   configureDbResolver,
   getAllTemplateDefinitions,
@@ -40,7 +40,7 @@ import {
   init_steering_enabled,
   isSteeringEnabled,
   registerTemplate
-} from "./cli-dnpg5yrw.js";
+} from "./cli-ggm92wcn.js";
 import {
   deriveProviderFromKeyType,
   init_credentials
@@ -53,6 +53,11 @@ import {
   activeModelBlock,
   init_model_rate_limit_windows
 } from "./cli-de1396j2.js";
+import {
+  SUBSCRIPTION_KEY_TYPES,
+  estimateClaudePlan,
+  init_subscription_plans
+} from "./cli-cqt19wg6.js";
 import {
   init_env_flag,
   isEnvFlagEnabled
@@ -72,7 +77,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-qxmjs2tx.js";
+} from "./cli-865swy5p.js";
 import {
   init_secret_scrubber,
   registerVolatileSecret,
@@ -618,6 +623,17 @@ var init_telemetry = __esm(() => {
     agent(event, props) {
       track({ event: `agent.${event}`, properties: props });
     },
+    onboarding(event, props) {
+      const installedAtMs = installedAt ? Date.parse(installedAt) : Number.NaN;
+      const secondsSinceInstall = Number.isFinite(installedAtMs) ? Math.max(0, Math.floor((Date.now() - installedAtMs) / 1000)) : undefined;
+      track({
+        event: `onboarding.${event}`,
+        properties: {
+          ...props,
+          ...secondsSinceInstall !== undefined ? { seconds_since_install: secondsSinceInstall } : {}
+        }
+      });
+    },
     integration(event, props) {
       const type = KNOWN_INTEGRATION_TYPES.has(props.type) ? props.type : "other";
       const provider = props.provider ? integrationProviderEntry(props.provider)?.provider : undefined;
@@ -4328,6 +4344,12 @@ var init_task_tool_manifest = __esm(() => {
 });
 
 // src/be/swarm-config-guard.ts
+function isInternalConfigKey(key) {
+  return INTERNAL_CONFIG_KEYS.has(key.toLowerCase());
+}
+function internalConfigKeyError(key) {
+  return new Error(`Key '${key}' is managed by /api/onboarding`);
+}
 function isReservedConfigKey(key) {
   return RESERVED_KEYS.has(key.toUpperCase());
 }
@@ -4405,7 +4427,7 @@ function validateConfigValue(key, value) {
   const validator = VALIDATED_KEYS[key.toUpperCase()];
   return validator ? validator(value) : null;
 }
-var RESERVED_KEYS, BOOLEAN_LITERALS, MAX_DB_RETENTION_DAYS = 1e6, DB_RETENTION_TUNING_BOUNDS, VALIDATED_KEYS;
+var RESERVED_KEYS, INTERNAL_CONFIG_KEYS, BOOLEAN_LITERALS, MAX_DB_RETENTION_DAYS = 1e6, DB_RETENTION_TUNING_BOUNDS, VALIDATED_KEYS;
 var init_swarm_config_guard = __esm(() => {
   init_reaction_shortcode();
   init_types();
@@ -4416,6 +4438,7 @@ var init_swarm_config_guard = __esm(() => {
     "CORS_ALLOW_ANY_ORIGIN",
     "EXTENSION_ALLOW_LEAD_ACTIVATION"
   ]);
+  INTERNAL_CONFIG_KEYS = new Set(["onboarding_state"]);
   BOOLEAN_LITERALS = ["true", "false", "1", "0"];
   DB_RETENTION_TUNING_BOUNDS = {
     DB_RETENTION_TICK_BUDGET_MS: { min: 1000, max: 300000 },
@@ -4589,6 +4612,7 @@ __export(exports_db, {
   SKILL_FILE_LIMITS: () => SKILL_FILE_LIMITS,
   UNATTRIBUTED_USER_ID: () => UNATTRIBUTED_USER_ID,
   __resetSqliteVecExtensionPathCacheForTests: () => __resetSqliteVecExtensionPathCacheForTests,
+  abandonSlackOutcomeDelivery: () => abandonSlackOutcomeDelivery,
   acceptTask: () => acceptTask,
   assignUnassignedTaskPending: () => assignUnassignedTaskPending,
   autoEncryptLegacyPlaintextSecrets: () => autoEncryptLegacyPlaintextSecrets,
@@ -4783,6 +4807,7 @@ __export(exports_db, {
   getLogsByAgentId: () => getLogsByAgentId,
   getLogsByEventType: () => getLogsByEventType,
   getLogsByTaskId: () => getLogsByTaskId,
+  getLogsByTaskIdAndEventType: () => getLogsByTaskIdAndEventType,
   getLogsByTaskIdChronological: () => getLogsByTaskIdChronological,
   getMcpServerById: () => getMcpServerById,
   getMcpServerByName: () => getMcpServerByName,
@@ -4810,6 +4835,7 @@ __export(exports_db, {
   getPromptTemplateById: () => getPromptTemplateById,
   getPromptTemplateHistory: () => getPromptTemplateHistory,
   getPromptTemplates: () => getPromptTemplates,
+  getReadyAgentCounts: () => getReadyAgentCounts,
   getRecentBudgetRefusalNotifications: () => getRecentBudgetRefusalNotifications,
   getRecentCompletedCount: () => getRecentCompletedCount,
   getRecentFailedCount: () => getRecentFailedCount,
@@ -4882,6 +4908,7 @@ __export(exports_db, {
   getUnassignedTasksCount: () => getUnassignedTasksCount,
   getUnreadInboxMessages: () => getUnreadInboxMessages,
   getUnreadMessages: () => getUnreadMessages,
+  getUsageDataVersion: () => getUsageDataVersion,
   getUserById: () => getUserById,
   getWaitStateById: () => getWaitStateById,
   getWaitStateByStepId: () => getWaitStateByStepId,
@@ -4913,6 +4940,7 @@ __export(exports_db, {
   isExtensionAgent: () => isExtensionAgent,
   isPendingSlackMessage: () => isPendingSlackMessage,
   isPoolAffinityEnforcementEnabled: () => isPoolAffinityEnforcementEnabled,
+  isSettledSlackMessage: () => isSettledSlackMessage,
   isSqliteVecAvailable: () => isSqliteVecAvailable,
   listAgentsWithCredStatusByProvider: () => listAgentsWithCredStatusByProvider,
   listAllMetrics: () => listAllMetrics,
@@ -4956,6 +4984,7 @@ __export(exports_db, {
   moveTaskFromBacklog: () => moveTaskFromBacklog,
   moveTaskToBacklog: () => moveTaskToBacklog,
   normalizeSkillFilePath: () => normalizeSkillFilePath,
+  noteSlackOutcomeDeliveryFailure: () => noteSlackOutcomeDeliveryFailure,
   overwriteTerminalTaskResultText: () => overwriteTerminalTaskResultText,
   pauseTask: () => pauseTask,
   postMessage: () => postMessage,
@@ -4992,6 +5021,7 @@ __export(exports_db, {
   searchSkills: () => searchSkills,
   setAgentHarnessProvider: () => setAgentHarnessProvider,
   setApiKeyName: () => setApiKeyName,
+  setApiKeyPlan: () => setApiKeyPlan,
   setBudgetRefusalFollowUpTaskId: () => setBudgetRefusalFollowUpTaskId,
   setFavorite: () => setFavorite,
   setSlackMessageTracking: () => setSlackMessageTracking,
@@ -5110,6 +5140,9 @@ async function ensureSlackDelegationActivation() {
 function isPendingSlackMessage(record) {
   return record.ts.startsWith(PENDING_SLACK_MESSAGE_TS_PREFIX);
 }
+function isSettledSlackMessage(record) {
+  return !!record.finalizedAt || !!record.deliveryAbandonedAt;
+}
 function rowToSlackMessage(row) {
   return {
     id: row.id,
@@ -5125,6 +5158,9 @@ function rowToSlackMessage(row) {
     conclusionKind: row.conclusion_kind ?? undefined,
     deferralResolvedAt: row.deferral_resolved_at ?? undefined,
     deferralAbandonedAt: row.deferral_abandoned_at ?? undefined,
+    deliveryAttempts: row.delivery_attempts,
+    deliveryAbandonedAt: row.delivery_abandoned_at ?? undefined,
+    deliveryLastError: row.delivery_last_error ?? undefined,
     createdAt: row.created_at,
     updatedAt: row.updated_at
   };
@@ -5282,6 +5318,26 @@ async function markSlackDeferralResolved(id, options = {}) {
   const now = new Date().toISOString();
   await getDbClient().run("UPDATE slack_messages SET deferral_resolved_at = ?, deferral_abandoned_at = ? WHERE id = ?", [now, options.abandoned ? now : null, id]);
 }
+async function noteSlackOutcomeDeliveryFailure(taskId, lastError) {
+  const now = new Date().toISOString();
+  const row = await getDbClient().get(`UPDATE slack_messages SET
+         delivery_attempts = delivery_attempts + 1,
+         delivery_last_error = ?,
+         updated_at = ?
+       WHERE task_id = ? AND kind = 'outcome' AND delivery_abandoned_at IS NULL
+       RETURNING *`, [lastError.slice(0, 500), now, taskId]);
+  return row ? rowToSlackMessage(row) : null;
+}
+async function abandonSlackOutcomeDelivery(taskId, lastError) {
+  const now = new Date().toISOString();
+  const row = await getDbClient().get(`UPDATE slack_messages SET
+         delivery_abandoned_at = ?,
+         delivery_last_error = ?,
+         updated_at = ?
+       WHERE task_id = ? AND kind = 'outcome' AND delivery_abandoned_at IS NULL
+       RETURNING *`, [now, lastError.slice(0, 500), now, taskId]);
+  return row ? rowToSlackMessage(row) : null;
+}
 async function getSlackTreeMessages() {
   const rows = await getDbClient().query(`SELECT tree.*
        FROM slack_messages tree
@@ -5300,7 +5356,7 @@ async function getSlackTreeMessages() {
              SELECT 1 FROM slack_messages outcome
              WHERE outcome.kind = 'outcome'
              AND outcome.task_id = task.id
-             AND outcome.finalized_at IS NOT NULL
+             AND (outcome.finalized_at IS NOT NULL OR outcome.delivery_abandoned_at IS NOT NULL)
            )
          )
          OR
@@ -5326,7 +5382,7 @@ async function getSlackTreeMessages() {
            AND outcome.thread_ts = tree.thread_ts
            AND task.createdAt >= state.activated_at
            AND (
-             outcome.finalized_at IS NULL
+             (outcome.finalized_at IS NULL AND outcome.delivery_abandoned_at IS NULL)
              OR outcome.updated_at > tree.updated_at
            )
          )
@@ -6104,6 +6160,10 @@ async function getLogsByTaskId(taskId, limit = 200) {
   const rows = await getDbClient().query("SELECT * FROM agent_log WHERE taskId = ? ORDER BY createdAt DESC LIMIT ?", [taskId, limit]);
   return rows.map(rowToAgentLog);
 }
+async function getLogsByTaskIdAndEventType(taskId, eventType) {
+  const rows = await getDbClient().query("SELECT * FROM agent_log WHERE taskId = ? AND eventType = ? ORDER BY createdAt ASC", [taskId, eventType]);
+  return rows.map(rowToAgentLog);
+}
 async function getLogsByTaskIdChronological(taskId) {
   const rows = await getDbClient().query("SELECT * FROM agent_log WHERE taskId = ? ORDER BY createdAt ASC", [taskId]);
   return rows.map(rowToAgentLog);
@@ -7613,6 +7673,7 @@ async function getSessionCostsFiltered(opts) {
 }
 async function getSessionCostSummary(opts) {
   const from = "FROM session_costs sc LEFT JOIN agent_tasks t ON t.id = sc.taskId";
+  const fromHf = `${from} LEFT JOIN human_free_tasks hf ON hf.id = t.id`;
   const conditions = [];
   const params = [];
   if (opts.startDate) {
@@ -7634,6 +7695,10 @@ async function getSessionCostSummary(opts) {
     params.push(opts.userId);
   }
   const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
+  const classify = opts.userId !== undefined;
+  const withHf = classify ? `WITH RECURSIVE ${HUMAN_FREE_TASKS_CTE}` : "";
+  const scopedFrom = classify ? fromHf : from;
+  const subscriptionSql = `t.credentialKeyType IN (${SUBSCRIPTION_KEY_TYPES.map((k) => `'${k}'`).join(", ")})`;
   const totalsRow = await getDbClient().get(`WITH RECURSIVE ${HUMAN_FREE_TASKS_CTE}
       SELECT
         COALESCE(SUM(sc.totalCostUsd), 0) as totalCostUsd,
@@ -7649,8 +7714,10 @@ async function getSessionCostSummary(opts) {
           THEN sc.totalCostUsd ELSE 0 END), 0) as attributableCostUsd,
         COALESCE(SUM(CASE WHEN ${HUMAN_FREE_SQL}
           THEN sc.totalCostUsd ELSE 0 END), 0) as excludedCostUsd,
-        COUNT(DISTINCT CASE WHEN ${HUMAN_FREE_SQL} THEN t.id END) as excludedTaskCount
-      ${from} ${where}`, params);
+        COUNT(DISTINCT CASE WHEN ${HUMAN_FREE_SQL} THEN t.id END) as excludedTaskCount,
+        COALESCE(SUM(CASE WHEN ${subscriptionSql}
+          THEN sc.totalCostUsd ELSE 0 END), 0) as subscriptionCostUsd
+      ${fromHf} ${where}`, params);
   const totals = totalsRow ? {
     ...totalsRow,
     avgCostPerSession: totalsRow.totalSessions > 0 ? totalsRow.totalCostUsd / totalsRow.totalSessions : 0
@@ -7666,25 +7733,28 @@ async function getSessionCostSummary(opts) {
     attributedCostUsd: 0,
     attributableCostUsd: 0,
     excludedCostUsd: 0,
-    excludedTaskCount: 0
+    excludedTaskCount: 0,
+    subscriptionCostUsd: 0
   };
   const groupBy = opts.groupBy ?? "both";
   let daily = [];
   if (groupBy === "day" || groupBy === "both") {
-    daily = await getDbClient().query(`WITH RECURSIVE ${HUMAN_FREE_TASKS_CTE}
+    daily = await getDbClient().query(`${withHf}
         SELECT
           DATE(sc.createdAt) as date,
           COALESCE(SUM(sc.totalCostUsd), 0) as costUsd,
           COALESCE(SUM(sc.inputTokens), 0) as inputTokens,
           COALESCE(SUM(sc.outputTokens), 0) as outputTokens,
-          COUNT(*) as sessions
-        ${from} ${where}
+          COUNT(*) as sessions,
+          COALESCE(SUM(CASE WHEN ${subscriptionSql} THEN sc.totalCostUsd ELSE 0 END), 0)
+            as subscriptionCostUsd
+        ${scopedFrom} ${where}
         GROUP BY DATE(sc.createdAt)
         ORDER BY date ASC`, params);
   }
   let byAgent = [];
   if (groupBy === "agent" || groupBy === "both") {
-    byAgent = await getDbClient().query(`WITH RECURSIVE ${HUMAN_FREE_TASKS_CTE}
+    byAgent = await getDbClient().query(`${withHf}
         SELECT
           sc.agentId as agentId,
           COALESCE(SUM(sc.totalCostUsd), 0) as costUsd,
@@ -7692,7 +7762,7 @@ async function getSessionCostSummary(opts) {
           COALESCE(SUM(sc.outputTokens), 0) as outputTokens,
           COUNT(*) as sessions,
           COALESCE(SUM(sc.durationMs), 0) as durationMs
-        ${from} ${where}
+        ${scopedFrom} ${where}
         GROUP BY sc.agentId
         ORDER BY costUsd DESC`, params);
   }
@@ -7706,11 +7776,62 @@ async function getSessionCostSummary(opts) {
           COALESCE(SUM(sc.outputTokens), 0) as outputTokens,
           COUNT(DISTINCT sc.taskId) as tasks,
           COALESCE(SUM(sc.durationMs), 0) as durationMs
-        ${from} ${where}
+        ${fromHf} ${where}
         GROUP BY CASE WHEN ${HUMAN_FREE_SQL} THEN NULL ELSE t.requestedByUserId END
         ORDER BY costUsd DESC`, params);
   }
-  return { totals, daily, byAgent, byUser };
+  let byCredential = [];
+  if (groupBy === "both") {
+    const rows = await getDbClient().query(`${withHf}
+        SELECT
+          t.credentialKeyType as keyType,
+          t.credentialKeySuffix as keySuffix,
+          COALESCE(SUM(sc.totalCostUsd), 0) as costUsd,
+          COALESCE(SUM(sc.inputTokens), 0) as inputTokens,
+          COALESCE(SUM(sc.outputTokens), 0) as outputTokens,
+          COUNT(*) as sessions,
+          MIN(sc.createdAt) as firstSessionAt,
+          MAX(sc.createdAt) as lastSessionAt
+        ${scopedFrom} ${where}
+        GROUP BY t.credentialKeyType, t.credentialKeySuffix
+        ORDER BY costUsd DESC`, params);
+    const labels = await getCredentialLabels();
+    byCredential = rows.map((row) => {
+      const label = row.keyType && row.keySuffix ? labels.get(credentialKey(row.keyType, row.keySuffix)) : undefined;
+      return {
+        ...row,
+        name: label?.name ?? null,
+        subscription: row.keyType !== null && SUBSCRIPTION_KEY_TYPES.includes(row.keyType),
+        plan: label?.plan ?? null,
+        planSource: label?.planSource ?? null
+      };
+    });
+  }
+  return { totals, daily, byAgent, byUser, byCredential };
+}
+function credentialKey(keyType, keySuffix) {
+  return `${keyType}:${keySuffix}`;
+}
+async function getCredentialLabels() {
+  const rows = await getDbClient().query(`SELECT keyType, keySuffix, name, plan, planSource FROM api_key_status
+      ORDER BY CASE planSource WHEN 'manual' THEN 0 WHEN 'detected' THEN 1 WHEN 'estimated' THEN 2 ELSE 3 END,
+        updatedAt DESC`);
+  const labels = new Map;
+  for (const row of rows) {
+    const key = credentialKey(row.keyType, row.keySuffix);
+    const seen = labels.get(key);
+    if (!seen) {
+      labels.set(key, { name: row.name, plan: row.plan, planSource: row.planSource });
+    } else if (!seen.name && row.name) {
+      seen.name = row.name;
+    }
+  }
+  return labels;
+}
+async function getUsageDataVersion() {
+  const row = await getDbClient().get(`SELECT COALESCE((SELECT MAX(rowid) FROM session_costs), 0) || ':' ||
+            COALESCE((SELECT MAX(rowid) FROM agent_tasks), 0) as version`);
+  return row?.version ?? "0:0";
 }
 async function getAttributionByPerson(opts) {
   const conditions = ["t.requestedByUserId IS NOT NULL"];
@@ -7786,7 +7907,9 @@ async function getAttributionByPerson(opts) {
       LEFT JOIN shipped_roots s ON s.rootId = t.id
       GROUP BY t.requestedByUserId`, params);
   const reachRows = await getDbClient().query(`WITH RECURSIVE report_tasks AS (
-        SELECT t.*
+        -- Only the columns read below: a task row carries its full prompt and output.
+        SELECT t.id, t.agentId, t.vcsRepo, t.source, t.parentTaskId, t.requestedByUserId,
+          t.requestedByUserIdInherited, t.taskType, t.tags, t.workflowRunId
         FROM agent_tasks t
         ${where}
       ),
@@ -8419,7 +8542,7 @@ async function getInjectableGlobalConfigs() {
        WHERE scope = 'global'
          AND UPPER(key) NOT IN ('API_KEY', 'SECRETS_ENCRYPTION_KEY', 'CORS_ALLOW_ANY_ORIGIN', 'EXTENSION_ALLOW_LEAD_ACTIVATION')
        ORDER BY key ASC`);
-  return rows.map(rowToSwarmConfig);
+  return rows.filter((row) => !isInternalConfigKey(row.key)).map(rowToSwarmConfig);
 }
 async function getSwarmConfigById(id) {
   const row = await getDbClient().get("SELECT * FROM swarm_config WHERE id = ?", [
@@ -11069,7 +11192,7 @@ async function getAvailableKeyIndices(keyType, totalKeys, scope = "global", scop
     earliestModelResetAt: earliestModelResetsAtSec !== undefined ? new Date(earliestModelResetsAtSec * 1000).toISOString() : null
   };
 }
-async function recordKeyUsage(keyType, keySuffix, keyIndex, taskId, scope = "global", scopeId = null) {
+async function recordKeyUsage(keyType, keySuffix, keyIndex, taskId, scope = "global", scopeId = null, plan = null) {
   const now = new Date().toISOString();
   const client = getDbClient();
   const effectiveScopeId = scopeId ?? "";
@@ -11082,9 +11205,27 @@ async function recordKeyUsage(keyType, keySuffix, keyIndex, taskId, scope = "glo
        totalUsageCount = totalUsageCount + 1,
        keyIndex = excluded.keyIndex,
        updatedAt = excluded.updatedAt`, [keyType, keySuffix, keyIndex, scope, effectiveScopeId, now, provider, now]);
+  let planChanged = false;
+  if (plan) {
+    const result = await client.run(`UPDATE api_key_status SET plan = ?, planSource = 'detected'
+         WHERE keyType = ? AND keySuffix = ? AND COALESCE(planSource, '') != 'manual'
+           AND (plan IS NOT ? OR planSource IS NOT 'detected')`, [plan, keyType, keySuffix, plan]);
+    planChanged = result.changes > 0;
+  }
   if (taskId) {
     await client.run("UPDATE agent_tasks SET credentialKeySuffix = ?, credentialKeyType = ? WHERE id = ?", [keySuffix, keyType, taskId]);
   }
+  return { planChanged };
+}
+async function setApiKeyPlan(keyType, keySuffix, plan) {
+  const now = new Date().toISOString();
+  const result = plan ? await getDbClient().run(`UPDATE api_key_status SET plan = ?, planSource = 'manual', updatedAt = ?
+           WHERE keyType = ? AND keySuffix = ?`, [plan, now, keyType, keySuffix]) : await getDbClient().run(`UPDATE api_key_status
+           SET plan = CASE WHEN planSource = 'manual' THEN NULL ELSE plan END,
+               planSource = CASE WHEN planSource = 'manual' THEN NULL ELSE planSource END,
+               updatedAt = ?
+           WHERE keyType = ? AND keySuffix = ?`, [now, keyType, keySuffix]);
+  return result.changes > 0;
 }
 async function markKeyRateLimited(keyType, keySuffix, keyIndex, rateLimitedUntil, scope = "global", scopeId = null) {
   const now = new Date().toISOString();
@@ -11116,14 +11257,15 @@ function mergeRateLimitWindowTelemetry(stored, reported) {
 }
 async function recordKeyRateLimitWindows(keyType, keySuffix, keyIndex, windows, scope = "global", scopeId = null) {
   if (Object.keys(windows).length === 0)
-    return;
+    return { planChanged: false };
   const now = new Date().toISOString();
   const effectiveScopeId = scopeId ?? "";
   const provider = deriveProviderFromKeyType(keyType);
-  await getDbClient().transaction(async (tx) => {
+  const merged = await getDbClient().transaction(async (tx) => {
     const existing = await tx.get(`SELECT rateLimitWindows FROM api_key_status
          WHERE keyType = ? AND keySuffix = ? AND scope = ? AND scopeId = ?`, [keyType, keySuffix, scope, effectiveScopeId]);
-    const serialized = JSON.stringify(mergeRateLimitWindowTelemetry(parseRateLimitWindowsJson(existing?.rateLimitWindows), windows));
+    const mergedWindows = mergeRateLimitWindowTelemetry(parseRateLimitWindowsJson(existing?.rateLimitWindows), windows);
+    const serialized = JSON.stringify(mergedWindows);
     await tx.run(`INSERT INTO api_key_status (keyType, keySuffix, keyIndex, scope, scopeId, rateLimitWindows, provider, updatedAt)
          VALUES (?, ?, ?, ?, ?, ?, ?, ?)
          ON CONFLICT(keyType, keySuffix, scope, scopeId)
@@ -11132,7 +11274,33 @@ async function recordKeyRateLimitWindows(keyType, keySuffix, keyIndex, windows,
            keyIndex = excluded.keyIndex,
            provider = excluded.provider,
            updatedAt = excluded.updatedAt`, [keyType, keySuffix, keyIndex, scope, effectiveScopeId, serialized, provider, now]);
+    return mergedWindows;
   });
+  const planChanged = keyType === "CLAUDE_CODE_OAUTH_TOKEN" && await refreshEstimatedClaudePlan(keySuffix, merged);
+  return { planChanged };
+}
+async function refreshEstimatedClaudePlan(keySuffix, windows) {
+  const week = windows.seven_day;
+  if (!week?.utilization || !week.resetsAt)
+    return false;
+  const client = getDbClient();
+  const stronger = await client.get(`SELECT 1 as found FROM api_key_status
+       WHERE keyType = 'CLAUDE_CODE_OAUTH_TOKEN' AND keySuffix = ? AND planSource IN ('manual', 'detected')
+       LIMIT 1`, [keySuffix]);
+  if (stronger)
+    return false;
+  const windowStart = new Date((week.resetsAt - WEEK_SECONDS) * 1000).toISOString();
+  const spend = await client.get(`SELECT COALESCE(SUM(sc.totalCostUsd), 0) as spendUsd
+       FROM session_costs sc JOIN agent_tasks t ON t.id = sc.taskId
+       WHERE t.credentialKeyType = 'CLAUDE_CODE_OAUTH_TOKEN' AND t.credentialKeySuffix = ?
+         AND sc.createdAt >= ?`, [keySuffix, windowStart]);
+  const plan = estimateClaudePlan(week.utilization, spend?.spendUsd ?? 0);
+  if (!plan)
+    return false;
+  const result = await client.run(`UPDATE api_key_status SET plan = ?, planSource = 'estimated'
+       WHERE keyType = 'CLAUDE_CODE_OAUTH_TOKEN' AND keySuffix = ?
+         AND COALESCE(planSource, 'estimated') = 'estimated' AND plan IS NOT ?`, [plan, keySuffix, plan]);
+  return result.changes > 0;
 }
 async function setApiKeyName(keyType, keySuffix, name, scope = "global", scopeId = null) {
   const result = await getDbClient().run(`UPDATE api_key_status
@@ -11798,6 +11966,13 @@ async function getLiveAgentCounts(minutes = 5) {
     workers_alive: row?.workers_alive ?? 0
   };
 }
+async function getReadyAgentCounts() {
+  const row = await getDbClient().get(`SELECT SUM(CASE WHEN isLead = 1 THEN 1 ELSE 0 END) AS leads,
+            SUM(CASE WHEN isLead = 0 THEN 1 ELSE 0 END) AS workers
+       FROM agents
+      WHERE status IN ('idle', 'busy') AND ${NOT_EXTENSION_AGENT_SQL}`);
+  return { leads: row?.leads ?? 0, workers: row?.workers ?? 0 };
+}
 async function getInstanceActivity() {
   const { leads_alive, workers_alive } = await getLiveAgentCounts(5);
   const tasksRow = await getDbClient().get(`SELECT COUNT(*) AS count FROM agent_tasks
@@ -12325,7 +12500,7 @@ END`, ELIGIBILITY_SCAN_BATCH_SIZE, ELIGIBILITY_SCAN_CAP, UNATTRIBUTED_USER_ID =
         JOIN human_free_tasks parent ON child.parentTaskId = parent.id
         WHERE child.requestedByUserId IS NULL
           OR child.requestedByUserIdInherited = 1
-      )`, HUMAN_FREE_SQL = "EXISTS (SELECT 1 FROM human_free_tasks WHERE id = t.id)", ROOT_HUMAN_FREE_SQL = `(
+      )`, HUMAN_FREE_SQL = "hf.id IS NOT NULL", ROOT_HUMAN_FREE_SQL = `(
         COALESCE(t.taskType, '') IN ('heartbeat', 'heartbeat-checklist', 'boot-triage')
         OR COALESCE(t.tags, '[]') LIKE '%"heartbeat"%'
         OR (COALESCE(t.source, '') = 'schedule' AND t.requestedByUserId IS NULL)
@@ -12340,7 +12515,7 @@ END`, ELIGIBILITY_SCAN_BATCH_SIZE, ELIGIBILITY_SCAN_CAP, UNATTRIBUTED_USER_ID =
               AND run.created_by IS NULL
           )
         )
-      )`, SCHEDULE_TEMPLATE_PREVIEW_LENGTH = 280, RESERVED_CONFIG_PLACEHOLDER = "[reserved key stored in swarm_config; delete this row]", SKILL_FILE_LIMITS, BINARY_SKILL_FILE_PLACEHOLDER = "[binary file - not synced]", SKILL_SLIM_COLUMNS = "id, name, description, type, scope, ownerAgentId, sourceUrl, sourceRepo, sourcePath, sourceBranch, sourceHash, isComplex, allowedTools, model, effort, context, agent, disableModelInvocation, userInvocable, version, isEnabled, systemDefault, createdAt, lastUpdatedAt, lastFetchedAt, '' as content", KvTypeCollisionError;
+      )`, SCHEDULE_TEMPLATE_PREVIEW_LENGTH = 280, RESERVED_CONFIG_PLACEHOLDER = "[reserved key stored in swarm_config; delete this row]", SKILL_FILE_LIMITS, BINARY_SKILL_FILE_PLACEHOLDER = "[binary file - not synced]", SKILL_SLIM_COLUMNS = "id, name, description, type, scope, ownerAgentId, sourceUrl, sourceRepo, sourcePath, sourceBranch, sourceHash, isComplex, allowedTools, model, effort, context, agent, disableModelInvocation, userInvocable, version, isEnabled, systemDefault, createdAt, lastUpdatedAt, lastFetchedAt, '' as content", WEEK_SECONDS, KvTypeCollisionError;
 var init_db = __esm(() => {
   init_package();
   init_key();
@@ -12356,6 +12531,7 @@ var init_db = __esm(() => {
   init_model_rate_limit_windows();
   init_request_auth_context();
   init_secret_scrubber();
+  init_subscription_plans();
   init_asset_key_audit();
   init_crypto();
   init_date_utils();
@@ -12412,6 +12588,7 @@ var init_db = __esm(() => {
     maxTotalBytes: Number(process.env.SKILL_FILES_MAX_TOTAL_BYTES ?? 10 * 1024 * 1024),
     maxFileBytes: Number(process.env.SKILL_FILES_MAX_FILE_BYTES ?? 500 * 1024)
   };
+  WEEK_SECONDS = 7 * 24 * 3600;
   KvTypeCollisionError = class KvTypeCollisionError extends Error {
     existingType;
     constructor(existingType) {
@@ -12422,4 +12599,4 @@ var init_db = __esm(() => {
   };
 });
 
-export { slackContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, _resolveIntegrationType, _resolveIntegrationProvider, initTelemetry, telemetry, emitIntegrationConnected, init_telemetry, HeartbeatExpiryError, init_heartbeat_expiry, beginRequestAuthScope, setRequestAuth, getRequestAuth, getCurrentRequestAuth, runWithoutRequestAuth, init_request_auth_context, auditAssetKeys, init_asset_key_audit, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, normalizeDate, normalizeDateRequired, init_date_utils, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, init_credential_broker, isInTransaction, init_db_client, getPromptTemplateDefaultDrift, init_default_drift, init_templates2 as init_templates, isSqliteVecAvailable, resolveSqliteVecExtensionPath, __resetSqliteVecExtensionPathCacheForTests, initDb, getDb, closeDb, getDbClient, updateAgentCredentialState, updateAgentCredentialMissing, createAgent, getAgentById, EXTENSION_AGENT_ROLE, NOT_EXTENSION_AGENT_SQL, isExtensionAgent, extensionAgentAssignmentError, ReservedAgentRoleError, reservedRoleViolation, ExtensionAgentAssignmentError, getAllAgents, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, isPoolAffinityEnforcementEnabled, buildRoutingAffinityFromAgent, isAgentEligibleForTask, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, getTaskById, getChildTasks, hasNonTerminalResumeChild, hasNonTerminalRerouteDecisionChild, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getPendingSlackRelayTasks, markSlackRelayAttempted, markSlackRelayDelivered, markFinalizedSlackRelaysDelivered, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getSlackTasksMissingTree, getInProgressTasksByContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getLatestScriptRunStepTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getLatestLeadTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, onTaskStarted, init_task_lifecycle_events, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, updateTaskClaudeSessionId, updateTaskTitle, completeTask, failTask, overwriteTerminalTaskResultText, cancelTask, supersedeTask, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, SteeringRequestError, isSteeringEnabled2 as isSteeringEnabled, getTaskSteeringFields, promotePendingSteeringForTask, markSteeringUndeliverable, requestSteering, init_steering, SLACK_REACTION_DEFAULTS, SLACK_REACTION_CONFIG_KEYS, reactionName, init_reaction_shortcode, parseTaskToolManifest, selectTaskTools, init_task_tool_manifest, isReservedConfigKey, reservedKeyError, MAX_DB_RETENTION_DAYS, DB_RETENTION_TUNING_BOUNDS, validateConfigValue, init_swarm_config_guard, getSlackRenderV2ActivatedAt, ensureSlackRenderV2Activation, getSlackDelegationActivatedAt, ensureSlackDelegationActivation, isPendingSlackMessage, recordSlackMessage, reserveSlackMessage, bindSlackMessageTimestamp, updateSlackMessageRecord, markSlackTreeRendered, deleteSlackMessageRecord, getSlackTreeMessage, getSlackTreeMessageByThread, getSlackOutcomeMessage, getResolvableDeferralOutcomes, markSlackDeferralResolved, getSlackTreeMessages, getSlackMessageByChannelTs, getSlackTasksInThread, markTaskSlackReplySent, setSlackMessageTracking, updateTaskVcs, insertTaskAttachment, recordTaskPullRequestAttachments, getAssetKeyMappingByProvider, upsertAssetKeyMapping, getAssetKeyMapping, listAssetSummaries, moveAssetKey, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, createSteeringMessage, getSteeringMessagesForTask, getSteeringMessageById, getPendingSteeringForTask, getPendingSteeringForAgent, markSteeringDelivered, markSteeringHandled, markSteeringPromoted, cancelPendingSteeringForTask, hasPendingSteering, getAgentWithTasks, getAllAgentsWithTasks, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, promoteDraftTask, refreshDraftTaskLease, promoteAbandonedDraftTasks, releaseStaleReviewingTasks, releaseStaleOfferedTasksForOfflineAgents, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, getUnassignedTaskIdsForAgent, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, UNATTRIBUTED_USER_ID, getSessionCostSummary, getAttributionByPerson, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, emitBuiltInIntegrationConnectedOnce, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getStaleUnassignedAffinityTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, countWorkflowRuns, listWorkflowRunsPage, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, detachTaskFromWorkflowRunStep, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createAppVersion, getAppVersions, getAppVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, cancelPendingApprovalRequestsForRun, listCancelledApprovalRequestsForRun, listCancelledApprovalRequestsForStep, claimApprovalCancellationNotification, completeApprovalCancellationNotificationClaim, releaseApprovalCancellationNotificationClaim, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, emitMcpServerConnectedTelemetry, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, markKeyRateLimited, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listFavorites, listUserFavorites, getFavoriteItemIdSet, setFavorite, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, sweepExpiredKv, sweepExpiredKvPrefix, upsertKv, claimKv, deleteKv, KvTypeCollisionError, incrKv, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, updateScriptRunIfNotTerminal, updateScriptRunIfRunning, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db };
+export { slackContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, _resolveIntegrationType, _resolveIntegrationProvider, initTelemetry, telemetry, emitIntegrationConnected, init_telemetry, HeartbeatExpiryError, init_heartbeat_expiry, beginRequestAuthScope, setRequestAuth, getRequestAuth, getCurrentRequestAuth, runWithoutRequestAuth, init_request_auth_context, auditAssetKeys, init_asset_key_audit, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, normalizeDate, normalizeDateRequired, init_date_utils, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, init_credential_broker, isInTransaction, init_db_client, getPromptTemplateDefaultDrift, init_default_drift, init_templates2 as init_templates, isSqliteVecAvailable, resolveSqliteVecExtensionPath, __resetSqliteVecExtensionPathCacheForTests, initDb, getDb, closeDb, getDbClient, updateAgentCredentialState, updateAgentCredentialMissing, createAgent, getAgentById, EXTENSION_AGENT_ROLE, NOT_EXTENSION_AGENT_SQL, isExtensionAgent, extensionAgentAssignmentError, ReservedAgentRoleError, reservedRoleViolation, ExtensionAgentAssignmentError, getAllAgents, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, isPoolAffinityEnforcementEnabled, buildRoutingAffinityFromAgent, isAgentEligibleForTask, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, getTaskById, getChildTasks, hasNonTerminalResumeChild, hasNonTerminalRerouteDecisionChild, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getPendingSlackRelayTasks, markSlackRelayAttempted, markSlackRelayDelivered, markFinalizedSlackRelaysDelivered, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getSlackTasksMissingTree, getInProgressTasksByContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getLatestScriptRunStepTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getLatestLeadTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, onTaskStarted, init_task_lifecycle_events, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, updateTaskClaudeSessionId, updateTaskTitle, completeTask, failTask, overwriteTerminalTaskResultText, cancelTask, supersedeTask, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, SteeringRequestError, isSteeringEnabled2 as isSteeringEnabled, getTaskSteeringFields, promotePendingSteeringForTask, markSteeringUndeliverable, requestSteering, init_steering, SLACK_REACTION_DEFAULTS, SLACK_REACTION_CONFIG_KEYS, reactionName, init_reaction_shortcode, parseTaskToolManifest, selectTaskTools, init_task_tool_manifest, isInternalConfigKey, internalConfigKeyError, isReservedConfigKey, reservedKeyError, MAX_DB_RETENTION_DAYS, DB_RETENTION_TUNING_BOUNDS, validateConfigValue, init_swarm_config_guard, getSlackRenderV2ActivatedAt, ensureSlackRenderV2Activation, getSlackDelegationActivatedAt, ensureSlackDelegationActivation, isPendingSlackMessage, isSettledSlackMessage, recordSlackMessage, reserveSlackMessage, bindSlackMessageTimestamp, updateSlackMessageRecord, markSlackTreeRendered, deleteSlackMessageRecord, getSlackTreeMessage, getSlackTreeMessageByThread, getSlackOutcomeMessage, getResolvableDeferralOutcomes, markSlackDeferralResolved, noteSlackOutcomeDeliveryFailure, abandonSlackOutcomeDelivery, getSlackTreeMessages, getSlackMessageByChannelTs, getSlackTasksInThread, markTaskSlackReplySent, setSlackMessageTracking, updateTaskVcs, insertTaskAttachment, recordTaskPullRequestAttachments, getAssetKeyMappingByProvider, upsertAssetKeyMapping, getAssetKeyMapping, listAssetSummaries, moveAssetKey, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, createSteeringMessage, getSteeringMessagesForTask, getSteeringMessageById, getPendingSteeringForTask, getPendingSteeringForAgent, markSteeringDelivered, markSteeringHandled, markSteeringPromoted, cancelPendingSteeringForTask, hasPendingSteering, getAgentWithTasks, getAllAgentsWithTasks, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdAndEventType, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, promoteDraftTask, refreshDraftTaskLease, promoteAbandonedDraftTasks, releaseStaleReviewingTasks, releaseStaleOfferedTasksForOfflineAgents, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, getUnassignedTaskIdsForAgent, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, UNATTRIBUTED_USER_ID, getSessionCostSummary, getUsageDataVersion, getAttributionByPerson, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, emitBuiltInIntegrationConnectedOnce, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getStaleUnassignedAffinityTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, countWorkflowRuns, listWorkflowRunsPage, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, detachTaskFromWorkflowRunStep, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createAppVersion, getAppVersions, getAppVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, cancelPendingApprovalRequestsForRun, listCancelledApprovalRequestsForRun, listCancelledApprovalRequestsForStep, claimApprovalCancellationNotification, completeApprovalCancellationNotificationClaim, releaseApprovalCancellationNotificationClaim, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, emitMcpServerConnectedTelemetry, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, setApiKeyPlan, markKeyRateLimited, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listFavorites, listUserFavorites, getFavoriteItemIdSet, setFavorite, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getReadyAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, sweepExpiredKv, sweepExpiredKvPrefix, upsertKv, claimKv, deleteKv, KvTypeCollisionError, incrKv, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, updateScriptRunIfNotTerminal, updateScriptRunIfRunning, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db };

package/dist/{cli-jbzfb1np.js → cli-28wkjpdp.js}

@@ -4,11 +4,11 @@ import {
   getEmbeddingProvider,
   init_embedding,
   serializeEmbedding
-} from "./cli-1n7d9wac.js";
+} from "./cli-08n8jxcw.js";
 import {
   getDbClient,
   init_db
-} from "./cli-3bh2bbga.js";
+} from "./cli-24w39x6n.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-6265kmdz.js → cli-3gmcwfyx.js}

@@ -6,7 +6,7 @@ import {
   isSteeringEnabled,
   registerTemplate,
   resolveTemplateAsync
-} from "./cli-dnpg5yrw.js";
+} from "./cli-ggm92wcn.js";
 import {
   getSlackConfiguration,
   init_config

package/dist/{cli-4mwfhwwc.js → cli-7j2098n5.js}

@@ -1,6 +1,6 @@
 import {
   runStopHookSessionSummarySubprocess
-} from "./cli-e2fmyxrc.js";
+} from "./cli-b05d7szr.js";
 import {
   fetchInstalledMcpServers
 } from "./cli-tng3131n.js";
@@ -822,7 +822,7 @@ class ClaudeAdapter {
     if (transport === "sdk" && isClaudeBridgeEffective(sourceEnv)) {
       throw new Error("CLAUDE_TRANSPORT=sdk cannot run with an effective Claude Bridge configuration. Select CLI transport or disable the bridge.");
     }
-    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-ze81m2c1.js") : undefined;
+    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-k7pb5kfz.js") : undefined;
     claudeSdk?.validateClaudeSdkAdditionalArgs([
       ...claudeBinaryArgv.slice(1),
       ...config.additionalArgs ?? []

package/dist/{cli-3361cns4.js → cli-7pgcpcrg.js}

@@ -1,7 +1,7 @@
 import {
   init_package,
   package_default
-} from "./cli-qxmjs2tx.js";
+} from "./cli-865swy5p.js";
 
 // src/commands/shared/client-config.ts
 init_package();