@desplega.ai/agent-swarm 1.164.1 → 1.166.0

package/dist/{cli-a9bw0xxt.js → cli-df56tqdw.js}

@@ -2,12 +2,12 @@ import {
   COMPOSIO_HTTP_METHODS,
   composioArgsFromParts,
   executeComposioRequest
-} from "./cli-003785v9.js";
+} from "./cli-xvc3q9br.js";
 import {
   ampModelError,
   ampPinCatalogError,
   ampPinProviderError
-} from "./cli-07s39g1n.js";
+} from "./cli-mv2520nm.js";
 import {
   LlmRater,
   REFERENCES_SOURCE_MAX_LENGTH,
@@ -20,7 +20,7 @@ import {
 import {
   ensurePricingSeeded,
   ensureRbacSeeded
-} from "./cli-etbrt8x1.js";
+} from "./cli-0nhdwxd5.js";
 import {
   buildCatalogEntries,
   getCatalogGeneration,
@@ -30,10 +30,10 @@ import {
   requestModelCatalogRefresh,
   startPricingRefreshLoop,
   upsertModelCatalogOverlay
-} from "./cli-976r1zqx.js";
+} from "./cli-rggdq8wq.js";
 import {
   loadModelsDevCache
-} from "./cli-wg8yjqtw.js";
+} from "./cli-ysnyhws9.js";
 import {
   AppDefinitionSchema,
   AppElementsSchema,
@@ -64,7 +64,6 @@ import {
   decodeAppDefinition,
   definitionNodeIds,
   deleteApp,
-  deleteScript,
   disableCredentialBinding,
   extractArgsJsonSchema,
   extractScriptSignature,
@@ -75,12 +74,9 @@ import {
   getOAuthBindingTokenStatus,
   getOAuthProviderConfig,
   getSavedScriptOwnerAgentId,
-  getScript,
   getScriptApiConnectionDescriptors,
-  getScriptById,
   getScriptConnectionById,
   getScriptMcpConnectionDescriptors,
-  getScriptVersion,
   getSuccessors,
   isIso8601Date,
   listApps,
@@ -95,7 +91,6 @@ import {
   resolveSyncRunAs,
   resolveValidationPort,
   resolveWorkflowLlmConfig,
-  restoreScratchScriptLastUsedIfUnchanged,
   runSavedScriptAsAgent,
   runScript,
   sandboxSpawnEnv,
@@ -103,17 +98,15 @@ import {
   snapshotCapped,
   systemOneRetryViolations,
   systemOneUnresolvedError,
-  touchScratchScriptLastUsed,
   typecheckScript,
   updateApp,
   upgradeAppDefinition,
   upsertCredentialBinding,
-  upsertScriptByName,
   upsertScriptConnection,
   validateDefinition,
   validateScriptImports,
   writeBareImportShim
-} from "./cli-j0tmc908.js";
+} from "./cli-jvj6a0cv.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
@@ -127,46 +120,13 @@ import {
   getFileStorageProvider,
   providerPath
 } from "./cli-mzfth0bp.js";
-import {
-  embedScript
-} from "./cli-0a7r5331.js";
-import {
-  CANDIDATE_SET_MULTIPLIER,
-  LONGTERM_ROOT,
-  MEMORY_KEY_MAX_LENGTH,
-  MEMORY_KEY_PATTERN,
-  MEMORY_KEY_PATTERN_MESSAGE,
-  computeScore,
-  consolidatedKeyMessage,
-  getEmbeddingProvider,
-  getMemoryStore,
-  init_constants as init_constants2,
-  init_key_paths,
-  init_reranker,
-  init_sqlite_store,
-  isConsolidatedKey,
-  isGraphExpansionEnabled,
-  isLongtermKey,
-  longtermKeyError,
-  rerank,
-  resolveStoreKey,
-  rowToCandidate
-} from "./cli-v7fqehqd.js";
 import {
   buildAuthorizationUrl,
-  createOAuthApp,
   ensureAuthorizationTokenOrThrow,
   ensureToken,
   ensureTokenOrThrow,
-  getAuthorizationById,
-  getOAuthApp,
-  getOAuthAppById,
-  getOAuthAppIdByProvider,
-  getOAuthTokens,
-  listAuthorizationsForApp,
-  onAuthorizationRefreshed,
-  upsertOAuthApp
-} from "./cli-93rxw9yd.js";
+  onAuthorizationRefreshed
+} from "./cli-j2jbr8af.js";
 import {
   ZodFirstPartyTypeKind,
   objectType
@@ -196,16 +156,11 @@ import {
   taskCitationWarnings,
   upsertTaskCitations,
   withSpan
-} from "./cli-4drstbb9.js";
-import {
-  init_task_attachment_links,
-  taskAttachmentDisplayUrl,
-  taskAttachmentFetchCommand
-} from "./cli-cvk6yzw5.js";
+} from "./cli-ecknp7p1.js";
 import {
   getUserGrant,
   init_rbac_roles
-} from "./cli-xb7kyanp.js";
+} from "./cli-8kgvmkak.js";
 import {
   can,
   decideAdmission,
@@ -214,19 +169,26 @@ import {
   init_rbac,
   isRbacEnabled,
   revokeLeadEquivalence
-} from "./cli-1wd1n2ya.js";
+} from "./cli-rfphkzh5.js";
 import {
   API_DRAIN_MAX_MS_LIMIT,
+  CANDIDATE_SET_MULTIPLIER,
   CredentialBindingSchema,
   EXTENSION_AGENT_ROLE,
   KvTypeCollisionError,
+  LONGTERM_ROOT,
   MAX_EMPTY_POLLS,
+  MEMORY_KEY_MAX_LENGTH,
+  MEMORY_KEY_PATTERN,
+  MEMORY_KEY_PATTERN_MESSAGE,
   SteeringRequestError,
+  WorkflowReplayStateError,
   acceptTask,
   agentContextKey,
   agentmailContextKey,
   azureDevOpsContextKey,
   beginRequestAuthScope,
+  breaksJsonValidity,
   buildJiraContextKey,
   buildRoutingAffinityFromAgent,
   cancelApprovalRequestById,
@@ -238,6 +200,8 @@ import {
   claimTask,
   completeTask,
   computeContentHash,
+  computeScore,
+  consolidatedKeyMessage,
   countKv,
   createAgent,
   createAgentMailInboxMapping,
@@ -248,6 +212,7 @@ import {
   createMcpServer,
   createMetric,
   createMetricVersion,
+  createOAuthApp,
   createPage,
   createPageVersion,
   createScheduledTask,
@@ -265,6 +230,7 @@ import {
   deletePage,
   deletePromptTemplate,
   deleteScheduledTask,
+  deleteScript,
   deleteService,
   deleteSkill,
   deleteSkillFile,
@@ -272,6 +238,7 @@ import {
   deleteUser,
   deleteWorkflow,
   detachTaskFromWorkflowRunStep,
+  embedScript,
   emitMcpServerConnectedTelemetry,
   exports_db,
   extensionAgentAssignmentError,
@@ -299,6 +266,7 @@ import {
   getAppVersion,
   getAppVersions,
   getApprovalRequestById,
+  getAuthorizationById,
   getBudget,
   getChannelById,
   getChannelByName,
@@ -315,6 +283,7 @@ import {
   getDependentTasks,
   getDueScheduledTasks,
   getDueWaitStates,
+  getEmbeddingProvider,
   getInProgressTasksByContextKey,
   getInboxMessageById,
   getInboxSummary,
@@ -328,10 +297,15 @@ import {
   getLogsByTaskIdChronological,
   getMcpServerById,
   getMcpServerByName,
+  getMemoryStore,
   getMentionsForAgent,
   getMetric,
   getMetricBySlug,
   getMetricVersions,
+  getOAuthApp,
+  getOAuthAppById,
+  getOAuthAppIdByProvider,
+  getOAuthTokens,
   getOfferedTasksForAgent,
   getPage,
   getPageBySlug,
@@ -349,6 +323,9 @@ import {
   getScheduledTaskById,
   getScheduledTaskByName,
   getScheduledTasks,
+  getScript,
+  getScriptById,
+  getScriptVersion,
   getServiceByAgentAndName,
   getServiceById,
   getSessionLogsByTaskId,
@@ -389,39 +366,54 @@ import {
   incrementEmptyPollCount,
   initDb,
   init_api_drain,
+  init_constants as init_constants2,
   init_context_key,
   init_credential_broker,
   init_date_utils,
   init_db,
+  init_db1 as init_db2,
   init_db_client,
+  init_embeddings,
+  init_key_paths,
+  init_memory,
   init_model_tier_keys,
+  init_oauth,
   init_request_auth_context,
+  init_reranker,
+  init_scrub_json,
   init_slack_routing,
+  init_sqlite_store,
   init_steering,
   init_swarm_config_guard,
   init_task_lifecycle_events,
   init_telemetry,
   init_telemetry_identity,
   init_templates1 as init_templates,
+  init_workflow_replay,
   insertTaskAttachment,
   installMcpServer,
   installSkill,
   internalConfigKeyError,
   isAgentEligibleForTask,
+  isConsolidatedKey,
   isExtensionAgent,
+  isGraphExpansionEnabled,
   isInTransaction,
   isInternalConfigKey,
   isLinearTrackerContextKey,
+  isLongtermKey,
   isReservedConfigKey,
   isSteeringEnabled,
   kvPrefixUpperBound,
   linearContextKey,
+  listAuthorizationsForApp,
   listCancelledApprovalRequestsForRun,
   listKv,
   listMcpServers,
   listSkills,
   listWorkflowRunsPage,
   listWorkflows,
+  longtermKeyError,
   markInboxMessageResponded,
   markSteeringHandled,
   markTaskSlackReplySent,
@@ -443,14 +435,19 @@ import {
   releaseMentionProcessing,
   releaseTask,
   requestSteering,
+  rerank,
   reservedKeyError,
   resetEmptyPollCount,
   resolveApprovalRequest,
   resolveSqliteVecExtensionPath,
+  resolveStoreKey,
   resolveWaitState,
+  restoreScratchScriptLastUsedIfUnchanged,
+  rowToCandidate,
   runWithoutRequestAuth,
   scheduleContextKey,
   scheduleOrgDomainRecompute,
+  scrubJsonValue,
   searchSkills,
   setBudgetRefusalFollowUpTaskId,
   setRequestAuth,
@@ -459,6 +456,7 @@ import {
   sweepExpiredKvPrefix,
   telemetry,
   tierConfigKey,
+  touchScratchScriptLastUsed,
   uninstallMcpServer,
   uninstallSkill,
   updateAgentMaxTasks,
@@ -480,13 +478,15 @@ import {
   updateWorkflowRun,
   updateWorkflowRunStep,
   upsertKv,
+  upsertOAuthApp,
   upsertPromptTemplate,
+  upsertScriptByName,
   upsertService,
   upsertSkillFiles,
   upsertSwarmConfig,
   validateConfigValue,
   workflowContextKey
-} from "./cli-0wn3ypqv.js";
+} from "./cli-yshaazs1.js";
 import {
   $OpenAPIRegistry,
   $OpenApiGeneratorV31,
@@ -546,18 +546,21 @@ import {
   parseAssetKey,
   parseModelTier,
   splitLegacyModelAlias
-} from "./cli-v0e7jpr5.js";
+} from "./cli-xvdgasgy.js";
 import {
   generateDefaultClaudeMd,
   generateDefaultIdentityMd,
   generateDefaultSoulMd,
-  init_defaults
-} from "./cli-vbr859rz.js";
+  init_defaults,
+  init_task_attachment_links,
+  taskAttachmentDisplayUrl,
+  taskAttachmentFetchCommand
+} from "./cli-jhm6hzjn.js";
 import {
   getSlackConfiguration,
   init_config,
   isSlackConfigured
-} from "./cli-n7h1kqpf.js";
+} from "./cli-dmtrxqhg.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getAgentFsDefaultDriveId,
@@ -594,10 +597,11 @@ import {
   harnessModelMismatch,
   init_src,
   isAlias,
+  isHarnessModelJudged,
   modelFamilyKey,
   parseAlias,
   resolveAlias
-} from "./cli-g3qgrzck.js";
+} from "./cli-zsh093hk.js";
 import {
   exports_zod,
   init_zod
@@ -646,11 +650,11 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-1d3w4xm3.js";
+} from "./cli-4r1sjfc4.js";
 import {
   init_event_bus,
   workflowEventBus
-} from "./cli-xxz89c2n.js";
+} from "./cli-mb75wpxf.js";
 import {
   init_bus,
   realtimeBus
@@ -663,7 +667,7 @@ import {
   registerVolatileSecret,
   scrubObject,
   scrubSecrets
-} from "./cli-qt5wzq6v.js";
+} from "./cli-wt7ccy4r.js";
 import {
   __callDispose,
   __commonJS,
@@ -14386,7 +14390,7 @@ async function notifyAutomationPreflightFailure(preflight) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-w2d26h4f.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-43vrdmv8.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Automation Preflight] Slack not available, cannot send notification");
@@ -14410,7 +14414,11 @@ Fix setup: ${getAppUrl()}${preflight.fixUrl}`),
 
 // src/be/automation-preflight.ts
 init_config();
-init_db();
+init_env_flag();
+init_secret_scrubber();
+init_db2();
+init_oauth();
+init_scrub_json();
 var NEEDS_SETUP_PREFIX = "needs_setup:";
 function hasValue(value) {
   if (value == null)
@@ -14564,9 +14572,6 @@ function renderAutomationTokens(value, params) {
   }
   return render(value);
 }
-function enabled(flag) {
-  return flag !== "true" && flag !== "1";
-}
 function present(value) {
   return !!value?.trim();
 }
@@ -14592,7 +14597,7 @@ async function getAutomationSetupStates() {
     linear: linearTokens ? "verified" : "unverified",
     jira: jiraTokens && jiraCloudId ? "verified" : "unverified",
     gsc: gscConfigured ? "verified" : "unverified",
-    agentmail: enabled(process.env.AGENTMAIL_DISABLE) && present(process.env.AGENTMAIL_API_KEY) ? "verified" : "unverified",
+    agentmail: !isEnvFlagEnabled("AGENTMAIL_DISABLE", false) && present(process.env.AGENTMAIL_API_KEY) ? "verified" : "unverified",
     agentfs: present(process.env.AGENT_FS_API_URL) && present(agentFsKey) && present(agentFsOrg) && present(process.env.AGENT_FS_DEFAULT_DRIVE_ID) ? "verified" : "unverified"
   };
 }
@@ -14624,16 +14629,17 @@ function utcDayBounds(now) {
   return { start: start.toISOString(), end: new Date(start.getTime() + 86400000).toISOString() };
 }
 async function recordSchedulePreflightFailure(scheduleId, failureReason, now = new Date) {
+  const message = scrubSecrets(failureReason);
   return await getDbClient().transaction(async (tx) => {
     const row = await tx.get("SELECT lastErrorAt, lastErrorMessage FROM scheduled_tasks WHERE id = ?", [scheduleId]);
     if (!row)
       return false;
-    if (row.lastErrorMessage === failureReason && row.lastErrorAt?.slice(0, 10) === now.toISOString().slice(0, 10)) {
+    if (row.lastErrorMessage === message && row.lastErrorAt?.slice(0, 10) === now.toISOString().slice(0, 10)) {
       return false;
     }
     await tx.run(`UPDATE scheduled_tasks
        SET lastErrorAt = ?, lastErrorMessage = ?, lastUpdatedAt = ?
-       WHERE id = ?`, [now.toISOString(), failureReason, now.toISOString(), scheduleId]);
+       WHERE id = ?`, [now.toISOString(), message, now.toISOString(), scheduleId]);
     return true;
   });
 }
@@ -14657,8 +14663,8 @@ async function recordWorkflowPreflightFailure(input) {
       runId,
       input.workflowId,
       input.triggerType,
-      input.triggerData === undefined ? null : JSON.stringify(input.triggerData),
-      input.failureReason,
+      input.triggerData === undefined ? null : scrubJsonValue(input.triggerData),
+      scrubSecrets(input.failureReason),
       input.createdBy ?? null,
       timestamp,
       timestamp,
@@ -14669,11 +14675,12 @@ async function recordWorkflowPreflightFailure(input) {
 }
 
 // src/workflows/engine.ts
-init_db();
+init_db2();
+init_workflow_replay();
 init_telemetry();
 
 // src/workflows/checkpoint.ts
-init_db();
+init_db2();
 async function checkpointStep(runId, stepId, nodeId, result, ctx) {
   await getDbClient().transaction(async () => {
     await updateWorkflowRunStep(stepId, {
@@ -14760,10 +14767,10 @@ function calculateBackoff(policy, attempt) {
 }
 
 // src/workflows/completed-step-routing.ts
-init_db();
+init_db2();
 
 // src/workflows/foreach-join.ts
-init_db();
+init_db2();
 var FOREACH_TERMINAL_STEP_STATUSES = new Set([
   "completed",
   "failed",
@@ -14860,7 +14867,7 @@ async function loadCompletedStepRouting(def, runId, completedNodeIds) {
 }
 
 // src/workflows/cooldown.ts
-init_db();
+init_db2();
 function cooldownToMs(cooldown) {
   let ms = 0;
   if (cooldown.hours)
@@ -14890,7 +14897,7 @@ async function shouldSkipCooldown(workflowId, cooldown) {
 }
 
 // src/workflows/input.ts
-init_db();
+init_db2();
 init_secret_scrubber();
 async function resolveInputs(input) {
   const resolved = {};
@@ -15298,6 +15305,22 @@ async function startWorkflowExecution(workflow, triggerData, registry, options =
 }
 var activeWalks = new Map;
 var executingSteps = new Set;
+async function failRunOnUnreadableReplay(runId, err, stepId) {
+  if (!(err instanceof WorkflowReplayStateError))
+    return false;
+  const finishedAt = new Date().toISOString();
+  console.error(`[workflow] ${err.message}`);
+  if (stepId) {
+    await updateWorkflowRunStep(stepId, {
+      status: "failed",
+      error: err.message,
+      finishedAt,
+      nextRetryAt: null
+    });
+  }
+  await updateWorkflowRun(runId, { status: "failed", error: err.message, finishedAt });
+  return true;
+}
 function isWorkflowRunActive(runId) {
   return activeWalks.has(runId);
 }
@@ -15319,6 +15342,9 @@ async function walkGraph(def, runId, ctx, startNodes, registry, workflowId, secr
   const release = holdWorkflowRun(runId);
   try {
     await walkGraphOwned(def, runId, ctx, startNodes, registry, workflowId, secretKeys, options);
+  } catch (err) {
+    if (!await failRunOnUnreadableReplay(runId, err))
+      throw err;
   } finally {
     release();
   }
@@ -15374,10 +15400,10 @@ async function walkGraphOwned(def, runId, ctx, startNodes, registry, workflowId,
       });
       return;
     }
-    const results = await Promise.all(pendingNodes.map((node) => executeStep(def, runId, ctx, node, registry, workflowId, secretKeys, options).catch((_err) => ({
-      outcome: "failed",
-      successors: []
-    }))));
+    const results = await Promise.all(pendingNodes.map((node) => executeStep(def, runId, ctx, node, registry, workflowId, secretKeys, options).catch(async (err) => {
+      await failRunOnUnreadableReplay(runId, err);
+      return { outcome: "failed", successors: [] };
+    })));
     const nextBatch = new Map;
     let hasWaiting = false;
     for (let i = 0;i < results.length; i++) {
@@ -15591,6 +15617,11 @@ async function executeStep(def, runId, ctx, node, registry, workflowId, secretKe
   }
   try {
     return await runClaimedStep(def, runId, ctx, node, registry, dedup.existingStep, dedup.stepId, workflowId, options);
+  } catch (err) {
+    if (await failRunOnUnreadableReplay(runId, err, dedup.stepId)) {
+      return { outcome: "failed", successors: [] };
+    }
+    throw err;
   } finally {
     executingSteps.delete(dedup.stepId);
   }
@@ -15878,7 +15909,7 @@ function timeoutPromise(ms) {
 init_event_bus();
 
 // src/workflows/recovery.ts
-init_db();
+init_db2();
 
 // src/workflows/approval-resolution.ts
 function shapeApprovalResolution(registry, definition, nodeId, parkedOutput, approval) {
@@ -15902,7 +15933,7 @@ function shapeApprovalResolution(registry, definition, nodeId, parkedOutput, app
 var FAILED_TASK_OUTPUT_PREFIX = "[FAILED:";
 
 // src/workflows/resume.ts
-init_db();
+init_db2();
 init_secret_scrubber();
 init_event_bus();
 
@@ -16183,7 +16214,7 @@ function computeNextPort(mode, status) {
 }
 
 // src/workflows/task-step-routing.ts
-init_db();
+init_db2();
 init_types();
 async function isTaskBoundToStep(taskId, stepId) {
   const task = await getTaskById(taskId);
@@ -16337,7 +16368,18 @@ function setupWorkflowResumeListener(eventBus, registry) {
     eventBus.off("approval.resolved", onApprovalResolved);
   };
 }
+async function failClosedOnUnreadableReplay(runId, stepId, resume) {
+  try {
+    await resume();
+  } catch (err) {
+    if (!await failRunOnUnreadableReplay(runId, err, stepId))
+      throw err;
+  }
+}
 async function resumeFromTaskCompletion(event, registry) {
+  await failClosedOnUnreadableReplay(event.workflowRunId, event.workflowRunStepId, () => resumeFromTaskCompletionUnguarded(event, registry));
+}
+async function resumeFromTaskCompletionUnguarded(event, registry) {
   const run = await getWorkflowRun(event.workflowRunId);
   if (!run || run.status !== "waiting" && run.status !== "running")
     return;
@@ -16392,6 +16434,9 @@ async function finalizeOrWait(runId) {
   });
 }
 async function handleTaskFailure(event, reason, registry, options) {
+  await failClosedOnUnreadableReplay(event.workflowRunId, event.workflowRunStepId, () => handleTaskFailureUnguarded(event, reason, registry, options));
+}
+async function handleTaskFailureUnguarded(event, reason, registry, options) {
   const run = await getWorkflowRun(event.workflowRunId);
   if (!run || run.status !== "waiting" && run.status !== "running")
     return;
@@ -16534,6 +16579,9 @@ async function cancelWorkflowRun(runId, reason) {
   await postApprovalCancellationUpdates(cancelledApprovals, applied ? cancelReason : latestRun?.error ?? cancelReason);
 }
 async function resumeFromApprovalResolution(event, registry) {
+  await failClosedOnUnreadableReplay(event.workflowRunId, event.workflowRunStepId, () => resumeFromApprovalResolutionUnguarded(event, registry));
+}
+async function resumeFromApprovalResolutionUnguarded(event, registry) {
   const run = await getWorkflowRun(event.workflowRunId);
   if (!run || run.status !== "waiting" && run.status !== "running")
     return;
@@ -16543,11 +16591,11 @@ async function resumeFromApprovalResolution(event, registry) {
   const workflow = await getWorkflow(run.workflowId);
   if (!workflow)
     return;
-  const ctx = run.context ?? {};
   if (event.status === "cancelled") {
     console.warn(`[workflows] approval ${event.requestId} is cancelled; step ${event.workflowRunStepId} stays waiting for the run cancel path`);
     return;
   }
+  const ctx = run.context ?? {};
   const { output: stepOutput, nextPort } = shapeApprovalResolution(registry, workflow.definition, step.nodeId, step.output, { requestId: event.requestId, status: event.status, responses: event.responses });
   const routing = await checkpointPortStepAndResolveSuccessors(workflow.definition, run.id, step.id, step.nodeId, stepOutput, nextPort, ctx);
   if (!routing.claimed)
@@ -16566,6 +16614,9 @@ async function resumeWaitState(waitId, status, payload, registry) {
   if (!result.updated || !result.row)
     return;
   const waitRow = result.row;
+  await failClosedOnUnreadableReplay(waitRow.workflowRunId, waitRow.workflowRunStepId, () => resumeClaimedWait(waitRow, status, cappedPayload, registry));
+}
+async function resumeClaimedWait(waitRow, status, cappedPayload, registry) {
   const run = await getWorkflowRun(waitRow.workflowRunId);
   if (!run || run.status !== "waiting" && run.status !== "running")
     return;
@@ -16750,6 +16801,8 @@ async function recoverRunningRuns(registry) {
       }
       recovered++;
     } catch (err) {
+      if (await failRunOnUnreadableReplay(runId, err))
+        continue;
       console.error(`[workflows] Failed to recover running run ${runId}:`, err);
     }
   }
@@ -16835,6 +16888,8 @@ async function recoverWaitingRuns(registry) {
       }
       recovered++;
     } catch (err) {
+      if (await failRunOnUnreadableReplay(stuck.runId, err))
+        continue;
       console.error(`[workflows] Failed to recover waiting run ${stuck.runId}:`, err);
     }
   }
@@ -16889,6 +16944,8 @@ async function recoverApprovalWaitingRuns(registry) {
       }
       recovered++;
     } catch (err) {
+      if (await failRunOnUnreadableReplay(stuck.runId, err))
+        continue;
       console.error(`[workflows] Failed to recover approval-waiting run ${stuck.runId}:`, err);
     }
   }
@@ -16912,6 +16969,8 @@ async function recoverWaitStates(registry) {
       await resumeWaitState(stuck.waitId, resumeStatus, payload, registry);
       recovered++;
     } catch (err) {
+      if (await failRunOnUnreadableReplay(stuck.runId, err))
+        continue;
       console.error(`[workflows] Failed to recover wait-state ${stuck.waitId}:`, err);
     }
   }
@@ -16929,7 +16988,7 @@ async function getRunIdsByStatus(status) {
   return rows.map((r) => r.id);
 }
 // src/workflows/retry-poller.ts
-init_db();
+init_db2();
 var pollerTimeout = null;
 function startRetryPoller(registry, intervalMs = 5000) {
   if (pollerTimeout !== null)
@@ -17018,11 +17077,15 @@ function startRetryPoller(registry, intervalMs = 5000) {
               }
             }
           } catch (err) {
+            if (await failRunOnUnreadableReplay(run.id, err, step.id))
+              continue;
             const errorMsg = err instanceof Error ? err.message : String(err);
             const retryPolicy = node.retry || executor.retryPolicy;
             await checkpointStepFailure(run.id, step.id, errorMsg, step.retryCount, retryPolicy);
           }
         } catch (err) {
+          if (await failRunOnUnreadableReplay(step.runId, err, step.id))
+            continue;
           console.error(`[workflows] Retry failed for step ${step.id}:`, err);
         } finally {
           release?.();
@@ -17130,7 +17193,7 @@ function replaceStringPlaceholders(template, variables) {
   });
 }
 // src/workflows/triggers.ts
-init_db();
+init_db2();
 import crypto2 from "node:crypto";
 var DEFAULT_HMAC_HEADER = "X-Hub-Signature-256";
 var FALLBACK_HMAC_HEADERS = ["x-hub-signature-256", "x-signature", "x-webhook-signature"];
@@ -17398,7 +17461,7 @@ class WebhookError extends Error {
   }
 }
 // src/workflows/version.ts
-init_db();
+init_db2();
 async function snapshotWorkflow(workflowId, changedByAgentId) {
   const workflow = await getWorkflow(workflowId);
   if (!workflow) {
@@ -17444,7 +17507,7 @@ async function snapshotAndUpdateWorkflow(workflowId, updates, opts = {}) {
   });
 }
 // src/workflows/wait-poller.ts
-init_db();
+init_db2();
 var pollerTimeout2 = null;
 function startWaitPoller(registry, intervalMs = 5000) {
   if (pollerTimeout2 !== null)
@@ -17475,7 +17538,7 @@ function stopWaitPoller() {
 }
 
 // src/workflows/index.ts
-init_db();
+init_db2();
 init_secret_scrubber();
 init_event_bus();
 
@@ -17487,18 +17550,18 @@ init_zod();
 
 // src/be/model-validation.ts
 init_src();
-init_db();
+init_db2();
 
 // src/be/model-tier-resolution.ts
 init_src();
 init_zod();
 init_types();
-init_db();
+init_db2();
 
 // src/be/harness-model-support.ts
 init_src();
 init_secret_scrubber();
-init_db();
+init_db2();
 var CLI_PINNED_HARNESSES = new Set(["claude", "codex"]);
 async function getHarnessModelSupport(harness, cliVersion, modelId) {
   const row = await getDbClient().get("SELECT status FROM harness_model_support WHERE harness = ? AND cliVersion = ? AND modelId = ?", [harness, cliVersion, modelId]);
@@ -17741,7 +17804,7 @@ function harnessMismatchReason(model, harness) {
 }
 async function resolveTaskModel(input) {
   const harness = input.harnessProvider ?? null;
-  const judged = harness !== null && harnessCatalogSection(harness) !== null;
+  const judged = harness !== null && isHarnessModelJudged(harness);
   const sections = judged ? (await loadResolutionCatalog()).catalog : {};
   for (const candidate of taskModelCandidates(input)) {
     let resolution = null;
@@ -18006,19 +18069,20 @@ ${issues.join(`
 
 // src/scheduler/scheduler.ts
 var import_cron_parser = __toESM(require_dist2(), 1);
+init_db2();
 init_db();
 init_telemetry();
 
 // src/scheduler/deferred-task-waits.ts
-init_db();
+init_db2();
 init_event_bus();
 
 // src/scheduler/schedule-task.ts
-init_db();
+init_db2();
 init_context_key();
 
 // src/tasks/sibling-awareness.ts
-init_db();
+init_db2();
 
 // src/tasks/errors.ts
 class TaskCreationBlockedError extends Error {
@@ -18778,7 +18842,9 @@ async function runScheduleNow(scheduleId) {
 }
 
 // src/be/extensions/assets.ts
+init_db2();
 init_db();
+init_embeddings();
 
 // src/be/skill-parser.ts
 function parseSkillContent(content) {
@@ -19437,7 +19503,7 @@ async function removeAssets(extensionId) {
 }
 
 // src/be/extensions/db.ts
-init_db();
+init_db2();
 
 class ExtensionOwnershipError extends Error {
 }
@@ -24242,7 +24308,7 @@ var EMPTY_COMPLETION_RESULT = {
 
 // src/server.ts
 init_package();
-init_db();
+init_db2();
 init_steering();
 
 // src/github/task-reactions.ts
@@ -24253,14 +24319,14 @@ init_secret_scrubber();
 init_secret_scrubber();
 
 // src/github/app.ts
+init_env_flag();
 var initialized = false;
 var webhookSecret = null;
 var appId = null;
 var privateKey = null;
 var tokenCache = new Map;
 function isGitHubEnabled() {
-  const githubDisable = process.env.GITHUB_DISABLE;
-  if (githubDisable === "true" || githubDisable === "1") {
+  if (isEnvFlagEnabled("GITHUB_DISABLE", false)) {
     return false;
   }
   return !!process.env.GITHUB_WEBHOOK_SECRET;
@@ -24278,8 +24344,7 @@ function initGitHub() {
     return isGitHubEnabled();
   }
   initialized = true;
-  const githubDisable = process.env.GITHUB_DISABLE;
-  if (githubDisable === "true" || githubDisable === "1") {
+  if (isEnvFlagEnabled("GITHUB_DISABLE", false)) {
     console.log("[GitHub] Disabled via GITHUB_DISABLE");
     return false;
   }
@@ -24547,12 +24612,12 @@ function registerGithubTaskReactions() {
 }
 
 // src/agentmail/app.ts
+init_env_flag();
 var import_svix = __toESM(require_dist5(), 1);
 var initialized2 = false;
 var webhookSecret2 = null;
 function isAgentMailEnabled() {
-  const disabled = process.env.AGENTMAIL_DISABLE;
-  if (disabled === "true" || disabled === "1") {
+  if (isEnvFlagEnabled("AGENTMAIL_DISABLE", false)) {
     return false;
   }
   return !!process.env.AGENTMAIL_WEBHOOK_SECRET;
@@ -24567,8 +24632,8 @@ function initAgentMail() {
     return isAgentMailEnabled();
   }
   initialized2 = true;
-  const disabled = process.env.AGENTMAIL_DISABLE;
-  if (disabled === "true" || disabled === "1") {
+  const disabled = isEnvFlagEnabled("AGENTMAIL_DISABLE", false);
+  if (disabled) {
     console.log("[AgentMail] Disabled via AGENTMAIL_DISABLE");
     return false;
   }
@@ -24595,11 +24660,11 @@ function verifyAgentMailWebhook(rawBody, headers) {
   }
 }
 // src/agentmail/handlers.ts
-init_db();
+init_db2();
 
 // src/be/users.ts
 init_telemetry_identity();
-init_db();
+init_db2();
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 function actorString(actor) {
   return `${actor.kind}:${actor.id}`;
@@ -24777,7 +24842,7 @@ function base62(bytes) {
 function sha256Hex(input) {
   return createHash("sha256").update(input).digest("hex");
 }
-async function mintToken(userId, label, actor) {
+async function mintToken(userId, label, actor, options = {}) {
   const plaintext = `${TOKEN_PREFIX}${base62(randomBytes(24))}`;
   const tokenId = randomUUID().replace(/-/g, "");
   const hash = sha256Hex(plaintext);
@@ -24786,7 +24851,12 @@ async function mintToken(userId, label, actor) {
   await getDbClient().transaction(async (tx) => {
     await tx.run(`INSERT INTO user_tokens (id, userId, label, tokenHash, tokenPreview, createdAt)
        VALUES (?, ?, ?, ?, ?, ?)`, [tokenId, userId, label, hash, preview, now]);
-    await recordIdentityEvent(userId, "token_minted", actor, null, { tokenId, label, preview });
+    await recordIdentityEvent(userId, "token_minted", actor, null, {
+      tokenId,
+      label,
+      preview,
+      ...options.source ? { source: options.source } : {}
+    });
   });
   return { tokenId, plaintext };
 }
@@ -24971,7 +25041,7 @@ function envEnabled(flag) {
   return process.env[flag] === "true";
 }
 function createIngressBuffer(opts) {
-  const enabled2 = envEnabled(opts.envFlag);
+  const enabled = envEnabled(opts.envFlag);
   const timeoutMs = opts.timeoutMs ?? 1e4;
   const buffer = createAdditiveBuffer({
     timeoutMs,
@@ -24981,9 +25051,9 @@ function createIngressBuffer(opts) {
     }
   });
   return {
-    enabled: enabled2,
+    enabled,
     maybeBuffer(contextKey, siblingInFlight, payload) {
-      if (!enabled2)
+      if (!enabled)
         return false;
       if (!contextKey)
         return false;
@@ -25511,7 +25581,7 @@ async function likeAzureDevOpsComment(ref, threadId, commentId) {
   }
 }
 // src/azure-devops/handlers.ts
-init_db();
+init_db2();
 init_resolver();
 init_context_key();
 
@@ -25905,10 +25975,10 @@ _Note: There's an active task (${existingTask.id}) for this PR #${pr.pullRequest
   return { created: true, taskId: task.id };
 }
 // src/http/core.ts
-init_db();
+init_db2();
 
 // src/be/multi-runtime.ts
-init_db();
+init_db2();
 var AGENT_MAX_TASKS_CONFIG_KEY = "AGENT_MAX_TASKS";
 function parseAgentMaxTasksValue(raw) {
   const str = raw.trim();
@@ -26091,7 +26161,7 @@ async function expireStaleRuntimeInstances() {
 
 // src/be/rbac-audit.ts
 init_env_flag();
-init_db();
+init_db2();
 import { AsyncLocalStorage } from "node:async_hooks";
 var FLUSH_INTERVAL_MS = 2000;
 var FLUSH_MAX_ROWS = 200;
@@ -26112,6 +26182,7 @@ function principalIdOf(principal) {
     case "user":
       return principal.userId;
     case "operator":
+    case "guest":
       return null;
   }
 }
@@ -26275,7 +26346,7 @@ function stopAuditGc() {
 // src/http/core.ts
 init_rbac_roles();
 // src/github/handlers.ts
-init_db();
+init_db2();
 init_resolver();
 init_context_key();
 
@@ -27625,7 +27696,7 @@ function resetGitLab() {
   gitlabUrl = "https://gitlab.com";
 }
 // src/gitlab/handlers.ts
-init_db();
+init_db2();
 init_resolver();
 init_context_key();
 
@@ -28228,11 +28299,13 @@ function extractMentions(adf) {
   return ids;
 }
 // src/jira/app.ts
+init_oauth();
 init_constants();
+init_env_flag();
 
 // src/be/db-queries/tracker.ts
 init_date_utils();
-init_db();
+init_db2();
 function normalizeTrackerSync(row) {
   return {
     ...row,
@@ -28376,8 +28449,12 @@ async function createTrackerAgentMapping(data) {
 init_secret_scrubber();
 init_event_bus();
 
+// src/jira/client.ts
+init_oauth();
+
 // src/jira/metadata.ts
-init_db();
+init_db2();
+init_oauth();
 async function getJiraMetadata() {
   const app = await getOAuthApp("jira");
   if (!app)
@@ -28670,10 +28747,11 @@ Original issue: {{issue_key}} — {{issue_summary}}`,
 });
 
 // src/jira/sync.ts
-init_db();
+init_db2();
+init_oauth();
 
 // src/be/unmapped-identities.ts
-init_db();
+init_db2();
 var TTL_MS = 30 * 24 * 60 * 60 * 1000;
 function namespace(kind) {
   return `integration:unmapped:${kind}`;
@@ -29092,7 +29170,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-w2d26h4f.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-43vrdmv8.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -29163,7 +29241,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDbClient: getDbClient2 } = await import("./db-01g8wtvw.js");
+  const { getDbClient: getDbClient2 } = await import("./db-sjks418k.js");
   await getDbClient2().transaction(async (tx) => {
     const row = await tx.get("SELECT metadata FROM oauth_apps WHERE provider = 'jira'");
     if (!row) {
@@ -29272,11 +29350,10 @@ function stopJiraWebhookKeepalive() {
 // src/jira/app.ts
 var initialized5 = false;
 function isJiraEnabled() {
-  const disabled = process.env.JIRA_DISABLE;
-  if (disabled === "true" || disabled === "1")
+  if (isEnvFlagEnabled("JIRA_DISABLE", false))
     return false;
-  const enabled2 = process.env.JIRA_ENABLED;
-  if (enabled2 === "false" || enabled2 === "0")
+  const enabled = process.env.JIRA_ENABLED;
+  if (enabled === "false" || enabled === "0")
     return false;
   return !!process.env.JIRA_CLIENT_ID;
 }
@@ -29404,7 +29481,9 @@ async function dispatchAndRecord(event, body, deliveryId) {
   }
 }
 // src/linear/app.ts
+init_oauth();
 init_constants();
+init_env_flag();
 
 // node_modules/@linear/sdk/dist/chunk-DPPnyiuk.mjs
 var __commonJSMin = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
@@ -100881,6 +100960,7 @@ var LinearClient = class extends LinearSdk {
 };
 
 // src/linear/client.ts
+init_oauth();
 var linearClient = null;
 async function getLinearClient() {
   const tokens = await getOAuthTokens("linear");
@@ -100900,7 +100980,8 @@ init_secret_scrubber();
 init_event_bus();
 
 // src/linear/sync.ts
-init_db();
+init_db2();
+init_oauth();
 init_resolver();
 init_context_key();
 init_types();
@@ -101833,11 +101914,10 @@ function shouldSkipForLoopPrevention2(sync) {
 var initialized6 = false;
 var unsubscribeRefresh = null;
 function isLinearEnabled() {
-  const disabled = process.env.LINEAR_DISABLE;
-  if (disabled === "true" || disabled === "1")
+  if (isEnvFlagEnabled("LINEAR_DISABLE", false))
     return false;
-  const enabled2 = process.env.LINEAR_ENABLED;
-  if (enabled2 === "false" || enabled2 === "0")
+  const enabled = process.env.LINEAR_ENABLED;
+  if (enabled === "false" || enabled === "0")
     return false;
   return !!process.env.LINEAR_CLIENT_ID;
 }
@@ -102051,7 +102131,7 @@ async function getFileInfo(client, fileId) {
   }
 }
 // src/slack/router.ts
-init_db();
+init_db2();
 init_env_flag();
 function hasOtherUserMention(text, botUserId) {
   const mentions = text.match(/<@([A-Z0-9]+)>/g) ?? [];
@@ -102116,7 +102196,7 @@ init_request_auth_context();
 init_secret_scrubber();
 
 // src/http/auth.ts
-init_db();
+init_db2();
 
 // src/utils/page-session.ts
 import { createHmac, randomBytes as randomBytes2, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
@@ -102239,6 +102319,8 @@ async function verifyPageSession(token) {
     return null;
   }
   const candidate = payload;
+  if (candidate.op !== undefined && candidate.op !== true)
+    return null;
   if (candidate.uid !== undefined && typeof candidate.uid !== "string")
     return null;
   if (candidate.name !== undefined && typeof candidate.name !== "string")
@@ -102271,7 +102353,8 @@ async function issuePageSessionCookie(pageId, opts) {
     pageId,
     exp,
     ...opts.uid ? { uid: opts.uid } : {},
-    ...opts.name ? { name: opts.name } : {}
+    ...opts.name ? { name: opts.name } : {},
+    ...opts.op ? { op: true } : {}
   });
   const attrs = [
     `page_session=${token}`,
@@ -102324,7 +102407,10 @@ async function resolveHttpRequestAuth(req, apiKey) {
           return null;
         return { kind: "user", userId: user.id, user, page };
       }
-      return { kind: "operator", fingerprint: fingerprintApiKey(bearer), page };
+      if (payload.op) {
+        return { kind: "operator", fingerprint: fingerprintApiKey(bearer), page };
+      }
+      return { kind: "guest", page };
     }
     return { kind: "operator", fingerprint: fingerprintApiKey(bearer) };
   }
@@ -102356,7 +102442,7 @@ init_zod();
 init_secret_scrubber();
 
 // src/http/utils.ts
-init_db();
+init_db2();
 init_env_flag();
 init_secret_scrubber();
 var DEFAULT_ALLOWED_ORIGINS = [
@@ -102960,7 +103046,7 @@ async function reloadGlobalConfigsAndIntegrations() {
   return runWithoutRequestAuth(() => reloadGlobalConfigsAndIntegrationsInner());
 }
 async function reloadGlobalConfigsAndIntegrationsInner() {
-  const { getEmbeddingProvider: getEmbeddingProvider2, resetEmbeddingProvider } = await import("./index-c4aqcyz1.js");
+  const { getEmbeddingProvider: getEmbeddingProvider2, resetEmbeddingProvider } = await import("./index-9b65j1m5.js");
   const wasEmbeddingsConfigured = getEmbeddingProvider2().isConfigured();
   const updated = await loadGlobalConfigsIntoEnv(true);
   await stopSlackApp();
@@ -102973,10 +103059,10 @@ async function reloadGlobalConfigsAndIntegrationsInner() {
     integrations.push("embeddings");
   }
   if (!wasEmbeddingsConfigured && isEmbeddingsConfigured) {
-    import("./boot-reembed-6rhcpsjf.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+    import("./boot-reembed-s7k7c6v2.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
       console.error("[config-reload] memory backfill failed (non-fatal):", err);
     });
-    import("./boot-reembed-k1q2s4fc.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+    import("./boot-reembed-998jtpdg.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
       console.error("[config-reload] script backfill failed (non-fatal):", err);
     });
   }
@@ -103307,14 +103393,14 @@ init_config();
 
 // src/tools/accept-steer.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/tools/task-tool-ctx.ts
 init_rbac();
 
 // src/tools/utils.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/kv-overflow.ts
 var MCP_OVERFLOW_NAMESPACE = "mcp:overflow";
@@ -103331,6 +103417,234 @@ function mcpOverflowAuthError(namespace2, agentId) {
   return "access to another agent's MCP overflow namespace is forbidden";
 }
 
+// src/kv-view.ts
+var KV_PATH_MAX_CHARS = 1024;
+var KV_SHAPE_PATH_BUDGET_BYTES = 2048;
+function pathBytes(path2) {
+  return Buffer.byteLength(JSON.stringify(path2), "utf8");
+}
+function hasKvViewArgs(args) {
+  return args.path !== undefined || args.offset !== undefined || args.limit !== undefined;
+}
+function kvViewType(value) {
+  if (value === null || value === undefined)
+    return "null";
+  if (Array.isArray(value))
+    return "array";
+  switch (typeof value) {
+    case "object":
+      return "object";
+    case "string":
+      return "string";
+    case "number":
+    case "bigint":
+      return "number";
+    case "boolean":
+      return "boolean";
+    default:
+      return "null";
+  }
+}
+function kvViewRoot(value) {
+  if (typeof value !== "string")
+    return { root: value, json: true };
+  try {
+    const parsed = JSON.parse(value);
+    if (parsed !== null && typeof parsed === "object")
+      return { root: parsed, json: true };
+  } catch {}
+  return { root: value, json: false };
+}
+function itemCount(value) {
+  if (Array.isArray(value))
+    return value.length;
+  if (typeof value === "string")
+    return value.length;
+  if (value !== null && typeof value === "object")
+    return Object.keys(value).length;
+  return;
+}
+function splitKvPath(path2) {
+  const segments = [];
+  let current = "";
+  for (let i = 0;i < path2.length; i++) {
+    const char = path2[i];
+    if (char === "\\" && i + 1 < path2.length) {
+      current += path2[++i];
+    } else if (char === ".") {
+      segments.push(current);
+      current = "";
+    } else {
+      current += char;
+    }
+  }
+  segments.push(current);
+  return segments;
+}
+function joinKvPath(segments) {
+  return segments.map((key) => key.replace(/[\\.]/g, "\\$&")).join(".");
+}
+function resolvePath(root, path2) {
+  if (path2 === "")
+    return { ok: true, value: root };
+  const segments = splitKvPath(path2);
+  if (segments.some((segment) => segment === "")) {
+    return {
+      ok: false,
+      error: `path "${path2}" has an empty segment; use dot paths like "data.rows"`
+    };
+  }
+  let current = root;
+  for (let i = 0;i < segments.length; i++) {
+    const segment = segments[i];
+    const at = joinKvPath(segments.slice(0, i)) || "(root)";
+    if (Array.isArray(current)) {
+      const index = /^\d+$/.test(segment) ? Number(segment) : Number.NaN;
+      if (!(index < current.length)) {
+        return {
+          ok: false,
+          error: `path "${path2}" not found: "${at}" is an array of ${current.length}; "${segment}" is not a valid index`
+        };
+      }
+      current = current[index];
+    } else if (current !== null && typeof current === "object") {
+      if (!Object.hasOwn(current, segment)) {
+        return { ok: false, error: `path "${path2}" not found: no key "${segment}" under "${at}"` };
+      }
+      current = current[segment];
+    } else {
+      return {
+        ok: false,
+        error: `path "${path2}" not found: "${at}" is a ${kvViewType(current)}, it has no "${segment}"`
+      };
+    }
+  }
+  return { ok: true, value: current };
+}
+function resolveKvTarget(value, path2) {
+  const { root, json: json2 } = kvViewRoot(value);
+  if (path2 !== "" && !json2) {
+    return {
+      ok: false,
+      error: `path "${path2}" needs a JSON value; this entry is a plain string (use offset/limit alone to page its characters)`
+    };
+  }
+  return resolvePath(root, path2);
+}
+function sliceKvTarget(target, offset, limit) {
+  const total = itemCount(target);
+  if (total === undefined)
+    return;
+  const start = Math.min(offset, total);
+  const end = limit === undefined ? total : Math.min(total, start + limit);
+  let value;
+  let returned = end - start;
+  if (Array.isArray(target)) {
+    value = target.slice(start, end);
+  } else if (typeof target === "string") {
+    const lastCode = target.charCodeAt(end - 1);
+    const splitsPair = end > start && end < total && lastCode >= 55296 && lastCode <= 56319;
+    const safeEnd = splitsPair ? end - 1 > start ? end - 1 : end + 1 : end;
+    value = target.slice(start, safeEnd);
+    returned = safeEnd - start;
+  } else {
+    value = Object.fromEntries(Object.entries(target).slice(start, end));
+  }
+  const reached = start + returned;
+  return { value, total, returned, nextOffset: reached < total ? reached : null };
+}
+function resolveKvView(value, args) {
+  const path2 = args.path ?? "";
+  const resolved = resolveKvTarget(value, path2);
+  if (!resolved.ok)
+    return resolved;
+  const type = kvViewType(resolved.value);
+  const offset = args.offset ?? 0;
+  const sliced = sliceKvTarget(resolved.value, offset, args.limit);
+  if (!sliced) {
+    if (args.offset !== undefined || args.limit !== undefined) {
+      return {
+        ok: false,
+        error: `offset/limit page arrays, objects, and strings; "${path2 || "(root)"}" is a ${type}`
+      };
+    }
+    return { ok: true, value: resolved.value, view: { path: path2, type } };
+  }
+  return {
+    ok: true,
+    value: sliced.value,
+    view: {
+      path: path2,
+      type,
+      total: sliced.total,
+      offset,
+      returned: sliced.returned,
+      nextOffset: sliced.nextOffset
+    }
+  };
+}
+function shapeEntry(segments, value, ancestors) {
+  const items = itemCount(value);
+  return {
+    path: joinKvPath(segments),
+    type: kvViewType(value),
+    bytes: Buffer.byteLength(JSON.stringify(value) ?? "", "utf8"),
+    ...items !== undefined ? { items } : {},
+    value,
+    segments,
+    ancestors
+  };
+}
+function childEntries(node) {
+  const { value, segments, ancestors } = node;
+  if (value === null || typeof value !== "object" || Array.isArray(value))
+    return [];
+  return Object.entries(value).map(([key, child]) => shapeEntry([...segments, key], child, [...ancestors, value]));
+}
+function addressable(node, budget) {
+  for (let depth = node.segments.length;depth > 0; depth--) {
+    const segments = node.segments.slice(0, depth);
+    if (segments.includes(""))
+      continue;
+    const path2 = joinKvPath(segments);
+    if (path2.length > KV_PATH_MAX_CHARS || pathBytes(path2) > budget)
+      continue;
+    if (depth === node.segments.length)
+      return node;
+    return shapeEntry(segments, node.ancestors[depth], node.ancestors.slice(0, depth));
+  }
+  return shapeEntry([], node.ancestors[0] ?? node.value, []);
+}
+function summarizeKvShape(root, maxEntries = 8, maxPathBytes = KV_SHAPE_PATH_BUDGET_BYTES) {
+  const rootBytes = Buffer.byteLength(JSON.stringify(root) ?? "", "utf8");
+  let entries = childEntries({ value: root, segments: [], ancestors: [] });
+  for (let step = 0;step < 8; step++) {
+    const candidate = entries.filter((entry) => entry.type === "object" && (entry.items ?? 0) > 0).sort((a, b) => b.bytes - a.bytes)[0];
+    if (!candidate || candidate.bytes * 4 < rootBytes)
+      break;
+    entries = entries.filter((entry) => entry !== candidate).concat(childEntries(candidate));
+  }
+  const sorted = entries.sort((a, b) => b.bytes - a.bytes);
+  const significant = sorted.filter((entry) => entry.bytes * 100 >= rootBytes);
+  const shape = [];
+  let budget = maxPathBytes;
+  for (const entry of significant.length > 0 ? significant : sorted) {
+    if (shape.length >= maxEntries)
+      break;
+    const {
+      value: _value,
+      segments: _segments,
+      ancestors: _ancestors,
+      ...node
+    } = addressable(entry, budget);
+    if (shape.some((seen) => seen.path === node.path))
+      continue;
+    shape.push(node);
+    budget -= pathBytes(node.path);
+  }
+  return shape;
+}
+
 // src/tools/utils.ts
 init_secret_scrubber();
 var scriptSdkRequestOrigins = new WeakSet;
@@ -103413,7 +103727,13 @@ var swarmToolTruncationSchema = looseObject({
   fullValueAt: string(),
   originalBytes: number(),
   limitBytes: number(),
-  retrieval: string()
+  retrieval: string(),
+  shape: array(looseObject({
+    path: string().optional(),
+    type: string().optional(),
+    bytes: number().optional(),
+    items: number().optional()
+  })).optional()
 });
 var swarmToolEnvelopeShape = {
   success: boolean(),
@@ -103521,12 +103841,12 @@ var NUDGES = {
     if (!entry)
       return;
     const rendered = typeof entry.value === "string" ? entry.value : JSON.stringify(entry.value) ?? "";
-    return rendered.length > MCP_RESULT_WIRE_LIMIT_BYTES ? "Large value — your harness may truncate this result; to filter or aggregate it, process it in a script via ctx.swarm.kv_get instead." : undefined;
+    return rendered.length > MCP_RESULT_WIRE_LIMIT_BYTES ? "Large value — your harness may truncate this result; re-call kv-get with path/offset/limit for a bounded slice, or process it in a script via ctx.swarm.kv_get." : undefined;
   }
 };
 var MCP_RESULT_WIRE_LIMIT_BYTES = 1e4;
 var MCP_OVERFLOW_TTL_MS = 24 * 60 * 60 * 1000;
-var MCP_PROSE_PREVIEW_CHARS = 1200;
+var MCP_PROSE_PREVIEW_FLOOR_CHARS = 1200;
 var scrubMiddleware = (result) => result.allowSecretEgress ? result : scrubObject(result);
 var nudgeMiddleware = (result, ctx) => {
   if (result.nudge)
@@ -103537,7 +103857,12 @@ var nudgeMiddleware = (result, ctx) => {
 function composeWireResult(r) {
   const normalizedDetails = r.details?.trim() || undefined;
   const dataFallback = !normalizedDetails && r.data && Object.keys(r.data).length > 0 ? JSON.stringify(r.data, null, 2) : undefined;
-  const text = [r.message, r.nudge, normalizedDetails ?? dataFallback].filter((part) => Boolean(part?.trim())).join(`
+  const text = [
+    r.message,
+    r.nudge,
+    normalizedDetails ?? dataFallback,
+    r.truncation ? renderTruncationPointer(r.truncation) : undefined
+  ].filter((part) => Boolean(part?.trim())).join(`
 
 `);
   const structuredContent = {
@@ -103545,7 +103870,7 @@ function composeWireResult(r) {
     success: r.ok,
     message: r.message
   };
-  if (normalizedDetails)
+  if (normalizedDetails && !r.omitStructuredDetails)
     structuredContent.details = normalizedDetails;
   if (r.nudge)
     structuredContent.nudge = r.nudge;
@@ -103557,13 +103882,65 @@ function composeWireResult(r) {
     isError: !r.ok
   };
 }
+function renderTruncationPointer(t) {
+  const shape = t.shape?.length ? `
+Shape: ${renderShape(t.shape)}` : "";
+  return `Full value: ${t.fullValueAt} (${t.originalBytes} bytes)${shape}
+Retrieval: ${t.retrieval}`;
+}
+function wireChannelBytes(wire) {
+  const text = (wire.content ?? []).map((block) => block.type === "text" ? block.text ?? "" : "").join("");
+  return Math.max(Buffer.byteLength(text, "utf8"), Buffer.byteLength(JSON.stringify(wire.structuredContent ?? {}), "utf8"));
+}
+function swarmToolResultBytes(r) {
+  return wireChannelBytes(composeWireResult(r));
+}
+function fitsWireLimit(r) {
+  return swarmToolResultBytes(r) <= MCP_RESULT_WIRE_LIMIT_BYTES;
+}
+function safePrefix(source, chars) {
+  const end = Math.min(chars, source.length);
+  const code = source.charCodeAt(end - 1);
+  return code >= 55296 && code <= 56319 ? source.slice(0, end - 1) : source.slice(0, end);
+}
+function previewWithMarker(source, chars) {
+  const preview = safePrefix(source, chars);
+  const omitted = source.length - preview.length;
+  return omitted > 0 ? `${preview}
+… [truncated ${omitted} chars]` : preview;
+}
+function fillPreviewToBudget(source, render) {
+  let low = 0;
+  let high = source.length;
+  while (low < high) {
+    const mid = Math.ceil((low + high) / 2);
+    if (fitsWireLimit(render(previewWithMarker(source, mid))))
+      low = mid;
+    else
+      high = mid - 1;
+  }
+  return render(previewWithMarker(source, low));
+}
 function overflowKey(toolName, value) {
   const safeToolName = toolName.replace(/[^a-zA-Z0-9._-]/g, "-").slice(0, 80);
   const hash = new Bun.CryptoHasher("sha256").update(value).digest("hex");
   return `v1/${safeToolName}/${hash}`;
 }
-function overflowRetrieval(namespace2, key) {
-  return `kv-get(${JSON.stringify({ namespace: namespace2, key })}) returns the full value ` + `(your harness may truncate it); to filter or aggregate it instead, ` + `process it in a script via ctx.swarm.kv_get.`;
+function overflowRetrieval(namespace2, key, shape) {
+  const target = shape.find((entry) => entry.type === "array") ?? shape.find((entry) => entry.type === "object" || entry.type === "string") ?? (shape[0] && { path: joinKvPath(splitKvPath(shape[0].path).slice(0, -1)) });
+  if (!target) {
+    return `kv-get(${JSON.stringify({ namespace: namespace2, key })}) returns the full value ` + `(your harness may truncate it); in a script, ctx.swarm.kv_get keeps it out of your context.`;
+  }
+  return `kv-get(${JSON.stringify({ namespace: namespace2, key, path: target.path, offset: 0 })}) returns a ` + `bounded page (nextOffset pages on; any Shape path works; no path = the full value). ` + `ctx.swarm.kv_get takes the same args in a script.`;
+}
+function formatBytes(bytes) {
+  return bytes >= 1024 ? `${(bytes / 1024).toFixed(1)}KB` : `${bytes}B`;
+}
+function renderShape(shape) {
+  return shape.map((entry) => {
+    const count = entry.items === undefined ? "" : entry.type === "array" ? `[${entry.items}]` : entry.type === "object" ? `{${entry.items} keys}` : ` ${entry.items} chars`;
+    return `${entry.path} ${entry.type}${count} ${formatBytes(entry.bytes)}`;
+  }).join("; ");
 }
 function canonicalOverflowPayload(toolName, result) {
   const safe = result.allowSecretEgress ? scrubObject(result) : result;
@@ -103644,23 +104021,20 @@ function arrayTruncationMessage(message, targets) {
     return message;
   return `${message} Returned ${summaries.join(", ")} in this bounded response.`;
 }
-function arrayPreservingOverflowResult(result, data, targets, truncation, pointer) {
-  const normalizedDetails = result.details?.trim() || undefined;
-  const details = normalizedDetails ? `${normalizedDetails.slice(0, MCP_PROSE_PREVIEW_CHARS)}
-… [truncated ${Math.max(normalizedDetails.length - MCP_PROSE_PREVIEW_CHARS, 0)} chars]
-${pointer}` : `JSON payload truncated in place:
-${JSON.stringify(data, null, 2)}
-${pointer}`;
+function arrayPreservingOverflowResult(result, data, targets, truncation, detailsPreview) {
+  const details = detailsPreview ?? `JSON payload truncated in place:
+${JSON.stringify(data, null, 2)}`;
   return {
     ok: result.ok,
     message: arrayTruncationMessage(result.message, targets),
     details,
     data,
     nudge: result.nudge,
-    truncation
+    truncation,
+    omitStructuredDetails: true
   };
 }
-function truncateArraysInPlace(result, truncation, pointer) {
+function truncateArraysInPlace(result, truncation) {
   if (!result.data)
     return;
   const data = cloneResultData(result.data);
@@ -103669,8 +104043,11 @@ function truncateArraysInPlace(result, truncation, pointer) {
   if (targets.length === 0)
     return;
   targets.sort((a, b) => Buffer.byteLength(JSON.stringify(b.originalItems), "utf8") - Buffer.byteLength(JSON.stringify(a.originalItems), "utf8"));
-  const render = () => arrayPreservingOverflowResult(result, data, targets, truncation, pointer);
-  const fits = () => Buffer.byteLength(JSON.stringify(composeWireResult(render())), "utf8") <= MCP_RESULT_WIRE_LIMIT_BYTES;
+  const prose = result.details?.trim() || undefined;
+  const renderWith = (preview) => arrayPreservingOverflowResult(result, data, targets, truncation, preview);
+  const render = () => renderWith(prose ? previewWithMarker(prose, MCP_PROSE_PREVIEW_FLOOR_CHARS) : undefined);
+  const fits = () => fitsWireLimit(render());
+  const finish = () => prose ? fillPreviewToBudget(prose, renderWith) : render();
   for (const target of targets) {
     setArrayLength(target, 0);
     if (!fits())
@@ -103686,10 +104063,10 @@ function truncateArraysInPlace(result, truncation, pointer) {
         high = mid - 1;
     }
     setArrayLength(target, low);
-    return render();
+    return finish();
   }
   if (fits())
-    return render();
+    return finish();
   pruneBranchesWithoutArrays(data);
   if (!fits())
     return;
@@ -103706,27 +104083,31 @@ function truncateArraysInPlace(result, truncation, pointer) {
     }
     setArrayLength(target, low);
   }
-  return render();
+  return finish();
 }
 var ctxControlMiddleware = async (result, ctx) => {
   if (ctx.callOrigin === "script-sdk" || ctx.callOrigin === "extension")
     return result;
   if (CTX_CONTROL_EXEMPT_TOOLS.has(ctx.toolName))
     return result;
-  const fullWire = composeWireResult(result);
-  const fullWireJson = JSON.stringify(fullWire);
-  const fullWireBytes = Buffer.byteLength(fullWireJson, "utf8");
+  const fullWireBytes = swarmToolResultBytes(result);
   if (fullWireBytes <= MCP_RESULT_WIRE_LIMIT_BYTES) {
     return result;
   }
+  if (result.details?.trim() && result.data && Object.keys(result.data).length > 0) {
+    const deduped = { ...result, omitStructuredDetails: true };
+    if (fitsWireLimit(deduped))
+      return deduped;
+  }
+  const storedValue = canonicalOverflowPayload(ctx.toolName, result);
+  const shape = summarizeKvShape(JSON.parse(storedValue));
   let fullValueAt;
   let retrieval;
   if (ctx.agentId) {
-    const storedValue = canonicalOverflowPayload(ctx.toolName, result);
     const key = overflowKey(ctx.toolName, storedValue);
     const namespace2 = mcpOverflowNamespace(ctx.agentId);
     fullValueAt = `kv://${namespace2}/${key}`;
-    retrieval = overflowRetrieval(namespace2, key);
+    retrieval = overflowRetrieval(namespace2, key, shape);
     const expiresAt = Date.now() + MCP_OVERFLOW_TTL_MS;
     await sweepExpiredKvPrefix(MCP_OVERFLOW_NAMESPACE);
     await upsertKv({
@@ -103745,26 +104126,27 @@ var ctxControlMiddleware = async (result, ctx) => {
     fullValueAt,
     originalBytes: fullWireBytes,
     limitBytes: MCP_RESULT_WIRE_LIMIT_BYTES,
-    retrieval
+    retrieval,
+    ...shape.length > 0 ? { shape } : {}
   };
-  const pointer = `Full value: ${fullValueAt}
-Retrieval: ${retrieval}
-` + `Truncation: ${JSON.stringify(truncation)}`;
-  const arrayPreservingResult = truncateArraysInPlace(result, truncation, pointer);
+  const arrayPreservingResult = truncateArraysInPlace(result, truncation);
   if (arrayPreservingResult)
     return arrayPreservingResult;
-  const normalizedDetails = result.details?.trim() || undefined;
-  const details = normalizedDetails ? `${normalizedDetails.slice(0, MCP_PROSE_PREVIEW_CHARS)}
-… [truncated ${Math.max(normalizedDetails.length - MCP_PROSE_PREVIEW_CHARS, 0)} chars]
-${pointer}` : `JSON payload omitted because the composed result exceeded ${MCP_RESULT_WIRE_LIMIT_BYTES} bytes.
-${pointer}`;
-  return {
+  const spilled = (details) => ({
     ok: result.ok,
     message: result.message,
     details,
     nudge: result.nudge,
     truncation
-  };
+  });
+  const prose = result.details?.trim() || undefined;
+  if (prose)
+    return fillPreviewToBudget(prose, spilled);
+  const json2 = result.data ? JSON.stringify(result.data, null, 2) : "";
+  if (!json2)
+    return spilled("Payload omitted.");
+  return fillPreviewToBudget(json2, (preview) => spilled(`JSON payload head:
+${preview}`));
 };
 var FINALIZE_PIPELINE = [
   scrubMiddleware,
@@ -103798,7 +104180,7 @@ function setPreloadedTools(server, names) {
 async function applyPreToolCall(name, args, requestInfo, inputSchema) {
   if (requestInfo.callOrigin !== "mcp")
     return { args };
-  const dispatcher = await import("./dispatcher-nn2k1wxd.js");
+  const dispatcher = await import("./dispatcher-1es759rn.js");
   const result = await dispatcher.dispatchPre("pre.tool.call", { tool: name, args, requestInfo }, inputSchema ? {
     validateModify: async (data) => {
       const schema = normalizeObjectSchema(inputSchema) ?? inputSchema;
@@ -104012,15 +104394,15 @@ var registerAcceptSteerTool = (server) => {
 init_zod();
 
 // src/apps/version.ts
-init_db();
+init_db2();
 
 // src/apps/schema-migrate.ts
 init_zod();
-init_db();
+init_db2();
 init_secret_scrubber();
 
 // src/apps/row-store.ts
-init_db();
+init_db2();
 init_db_client();
 class AppRowValidationError extends Error {
   issues;
@@ -104399,6 +104781,7 @@ function purgeAppRows(appId2, models, afterPurge) {
 
 // src/apps/sync.ts
 init_zod();
+init_db2();
 init_db();
 init_types();
 init_secret_scrubber();
@@ -105809,12 +106192,12 @@ async function rollbackApp(input) {
 }
 
 // src/tools/app-diff.ts
-init_db();
+init_db2();
 init_rbac();
 
 // src/tools/context-diff.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 import { tmpdir } from "node:os";
 import { join } from "node:path";
@@ -105996,13 +106379,13 @@ var registerAppDiffTool = (server) => {
 
 // src/tools/app-get.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/http/apps.ts
 init_zod();
 
 // src/apps/user-config.ts
-init_db();
+init_db2();
 var USER_CONFIG_THEME_KEY = "$theme";
 var RESERVED_KEY_PATTERNS = {
   [USER_CONFIG_THEME_KEY]: /^[a-z][a-z0-9-]{0,39}$/
@@ -106084,6 +106467,7 @@ async function upsertAppUserConfigValues(appId2, scope, values) {
 
 // src/http/apps.ts
 init_key();
+init_db2();
 init_db();
 init_resolver();
 init_rbac();
@@ -106093,7 +106477,7 @@ init_secret_scrubber();
 
 // src/be/audit-user.ts
 init_request_auth_context();
-init_db();
+init_db2();
 async function resolveTaskAuditUserId(sourceTaskId, callerAgentId) {
   if (!callerAgentId)
     return null;
@@ -106635,6 +107019,9 @@ async function authorizeApp(req, res, myAgentId, verb, resource) {
   } else if (auth?.kind === "user") {
     principal = { kind: "user", userId: auth.userId };
     actor = `user:${auth.userId}`;
+  } else if (auth?.kind === "guest") {
+    principal = { kind: "guest" };
+    actor = "guest";
   } else {
     const agent = myAgentId ? await getAgentById(myAgentId) : null;
     principal = { kind: "agent", agentId: myAgentId ?? "", isLead: agent?.isLead ?? false };
@@ -107641,7 +108028,7 @@ var registerAppQueryTool = (server) => {
 
 // src/tools/app-history.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 function escapeTableCell2(value) {
   return String(value ?? "—").replaceAll("\\", "\\\\").replaceAll("|", "\\|").replace(/\r\n|\r|\n/g, "<br>");
@@ -107746,7 +108133,7 @@ var registerAppListTool = (server) => {
 
 // src/tools/app-patch.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerAppPatchTool = (server) => {
   createToolRegistrar(server)("app-patch", {
@@ -107867,7 +108254,7 @@ var registerAppPatchTool = (server) => {
 };
 // src/tools/app-rollback.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerAppRollbackTool = (server) => {
   createToolRegistrar(server)("app-rollback", {
@@ -107947,7 +108334,7 @@ var registerAppRollbackTool = (server) => {
 
 // src/tools/app-sync.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 function cell(value) {
   return String(value ?? "—").replaceAll("\\", "\\\\").replaceAll("|", "\\|").replace(/\r\n|\r|\n/g, "<br>");
@@ -108034,7 +108421,7 @@ var registerAppSyncTool = (server) => {
 
 // src/tools/app-upsert.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerAppUpsertTool = (server) => {
   createToolRegistrar(server)("app-upsert", {
@@ -108178,10 +108565,10 @@ var registerAppUpsertTool = (server) => {
 
 // src/tools/cancel-approval-request.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/workflows/approval-cancel.ts
-init_db();
+init_db2();
 init_rbac();
 var LIVE_RUN_STATUSES = new Set(["running", "waiting"]);
 async function cancelApprovalRequest(input) {
@@ -108321,12 +108708,12 @@ var registerCancelApprovalRequestTool = (server) => {
 
 // src/tools/cancel-task.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 
 // src/tools/get-task-details.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 
 // src/utils/requester-comms.ts
@@ -108639,7 +109026,7 @@ var registerCancelTaskTool = (server) => {
 
 // src/tools/context-history.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerContextHistoryTool = (server) => {
   createToolRegistrar(server)("context-history", {
@@ -108715,7 +109102,7 @@ var registerContextHistoryTool = (server) => {
 
 // src/tools/create-channel.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var ChannelOutputSchema = looseObject({
   id: string().optional(),
@@ -108772,16 +109159,17 @@ var registerCreateChannelTool = (server) => {
 
 // src/tools/create-metric.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/http/db-query.ts
 init_zod();
+init_secret_scrubber();
 
 // src/http/db-query-bounded.ts
-init_db();
+init_db2();
 
 // src/http/db-query-shared.ts
-init_db();
+init_db2();
 init_env_flag();
 import { Database } from "bun:sqlite";
 class DbQueryTimeoutError extends Error {
@@ -108806,19 +109194,91 @@ function assertSingleStatement(sql) {
     throw new Error("Only one SQL statement is allowed");
   }
 }
-function executeReadOnlyQuery(sql, params = [], maxRows) {
-  assertSingleStatement(sql);
+var DB_QUERY_DENIED_TABLES = new Set([
+  "oauth_authorizations",
+  "oauth_apps",
+  "oauth_pending",
+  "user_tokens",
+  "session_tokens",
+  "script_apis",
+  "codex_oauth_device_flows"
+]);
+
+class DbQueryDeniedTableError extends Error {
+  tables;
+  constructor(tables) {
+    super(`db-query cannot read ${tables.join(", ")}: ${tables.length === 1 ? "this table holds" : "these tables hold"} credentials. ` + "Use the dedicated OAuth, token or config tools instead.");
+    this.tables = tables;
+    this.name = "DbQueryDeniedTableError";
+  }
+}
+var CURSOR_OPEN_OPCODES = new Set(["OpenRead", "ReopenIdx", "OpenWrite"]);
+function openReadOnlyReader() {
   const database = getDb();
   const reader = !database.filename || database.filename === ":memory:" ? Database.deserialize(database.serialize(), { readonly: true }) : new Database(database.filename, { readonly: true });
+  const vecExtensionPath = resolveSqliteVecExtensionPath();
+  if (vecExtensionPath) {
+    try {
+      reader.loadExtension(vecExtensionPath);
+    } catch {}
+  }
+  return reader;
+}
+function assertNoDeniedTables(sql, reader) {
+  const statement = stripTrailingSemicolon(sql);
+  if (/^explain\b/i.test(stripLeadingComments(statement)))
+    return;
+  const db = reader ?? openReadOnlyReader();
   try {
     let __stack = [];
     try {
-      const vecExtensionPath = resolveSqliteVecExtensionPath();
-      if (vecExtensionPath) {
-        try {
-          reader.loadExtension(vecExtensionPath);
-        } catch {}
+      const rootPages = new Map;
+      for (const row of db.query("SELECT rootpage, tbl_name FROM main.sqlite_master WHERE rootpage > 0").all()) {
+        rootPages.set(row.rootpage, row.tbl_name.toLowerCase());
+      }
+      const program = __using(__stack, db.prepare(`EXPLAIN ${statement}`), 0);
+      const denied = new Set;
+      for (const op of program.all()) {
+        if (!CURSOR_OPEN_OPCODES.has(op.opcode) || op.p3 !== 0)
+          continue;
+        const table = rootPages.get(op.p2);
+        if (table && DB_QUERY_DENIED_TABLES.has(table))
+          denied.add(table);
       }
+      if (denied.size > 0)
+        throw new DbQueryDeniedTableError([...denied].sort());
+    } catch (_catch) {
+      var _err = _catch, _hasErr = 1;
+    } finally {
+      __callDispose(__stack, _err, _hasErr);
+    }
+  } finally {
+    if (!reader)
+      db.close();
+  }
+}
+function stripLeadingComments(sql) {
+  let rest = sql.trimStart();
+  for (;; ) {
+    if (rest.startsWith("--")) {
+      const end = rest.indexOf(`
+`);
+      rest = end === -1 ? "" : rest.slice(end + 1).trimStart();
+    } else if (rest.startsWith("/*")) {
+      const end = rest.indexOf("*/");
+      rest = end === -1 ? "" : rest.slice(end + 2).trimStart();
+    } else {
+      return rest;
+    }
+  }
+}
+function executeReadOnlyQuery(sql, params = [], maxRows) {
+  assertSingleStatement(sql);
+  const reader = openReadOnlyReader();
+  try {
+    let __stack = [];
+    try {
+      assertNoDeniedTables(sql, reader);
       const stmt = __using(__stack, reader.prepare(sql), 0);
       if (stmt.columnNames.length === 0) {
         throw new Error("Only read-only queries are allowed");
@@ -108967,6 +109427,7 @@ function releaseBoundedQuerySlot() {
 }
 async function executeReadOnlyQueryBounded(sql, params = [], budgetMs, maxRows) {
   assertSingleStatement(sql);
+  assertNoDeniedTables(sql);
   acquireBoundedQuerySlot();
   try {
     return await runBoundedQueryChild(sql, params, budgetMs, maxRows);
@@ -109090,7 +109551,9 @@ var dbQueryRoute = route({
         rowLimit: exports_external.number().nullable()
       })
     },
-    400: { description: "Invalid or disallowed SQL" },
+    400: {
+      description: "Invalid or disallowed SQL, including queries that read credential tables"
+    },
     408: { description: "Query exceeded its wall-clock budget and was terminated" },
     429: { description: "Too many concurrent bounded db-query executions; retry shortly" }
   },
@@ -109105,7 +109568,7 @@ async function handleDbQuery(req, res, pathSegments, queryParams) {
     return true;
   try {
     const result = await executeReadOnlyQueryGated(resolveDbQuerySql(parsed.body), parsed.body.params, getDbQueryHttpBudgetMs(), getDbQueryHttpMaxRows());
-    dbQueryRoute.respond(res, 200, result);
+    dbQueryRoute.respond(res, 200, scrubObject(result));
   } catch (err) {
     if (err instanceof DbQueryConcurrencyCapError) {
       res.setHeader("Retry-After", "1");
@@ -109123,7 +109586,7 @@ async function handleDbQuery(req, res, pathSegments, queryParams) {
 }
 
 // src/metrics/version.ts
-init_db();
+init_db2();
 async function snapshotMetric(metricId, changedByAgentId) {
   const metric = await getMetric(metricId);
   if (!metric) {
@@ -109273,10 +109736,10 @@ async function authorizeAssetKeyWrite(input, trustedUserId) {
 }
 
 // src/tools/create-page.ts
-init_db();
+init_db2();
 
 // src/pages/version.ts
-init_db();
+init_db2();
 async function snapshotPage(pageId, changedByAgentId) {
   const page = await getPage(pageId);
   if (!page) {
@@ -109436,7 +109899,8 @@ var registerCreatePageTool = (server) => {
 
 // src/tools/credential-bindings/tool.ts
 init_zod();
-init_db();
+init_db2();
+init_oauth();
 
 // src/oauth/app-validation.ts
 function assertOAuthAppUrlsSafe(input) {
@@ -109991,7 +110455,7 @@ var DbQueryToolInputSchema = object({
 var registerDbQueryTool = (server) => {
   createToolRegistrar(server)("db-query", {
     title: "Execute database query",
-    description: "Execute a read-only SQL query against the swarm database (SQLite). Available to all authenticated agents — be aware results may include secrets (oauth_tokens, configs). Runs in a short-lived child process with a wall-clock budget by default (fails gracefully with a timeout or a 429-style concurrency error rather than freezing); results capped at a default row count (operator-configurable via `DB_QUERY_MCP_MAX_ROWS`) regardless of how many the query matched. See the sql parameter's description for which tables are unsafe to read whole, and the db-query-guidance skill for config knobs.",
+    description: "Execute a read-only SQL query against the swarm database (SQLite). Available to all authenticated agents. Queries that read credential tables (OAuth authorizations, apps and pending flows, user and session tokens, script API bearers, Codex device-login state) are rejected, and secret-shaped values in results are redacted. Runs in a short-lived child process with a wall-clock budget by default (fails gracefully with a timeout or a 429-style concurrency error rather than freezing); results capped at a default row count (operator-configurable via `DB_QUERY_MCP_MAX_ROWS`) regardless of how many the query matched. See the sql parameter's description for which tables are unsafe to read whole, and the db-query-guidance skill for config knobs.",
     annotations: { readOnlyHint: true },
     inputSchema: DbQueryToolInputSchema,
     outputSchema: swarmToolOutputSchema({
@@ -110031,13 +110495,14 @@ ${result.total} rows in ${result.elapsed}ms`;
 
 // src/tools/defer-task.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/tasks/task-terminal-effects.ts
-init_db();
+init_db2();
+init_memory();
 
 // src/be/memory/raters/retrieval.ts
-init_db();
+init_db2();
 function dedupeMemoryDocumentIds(memories) {
   const documents = new Map;
   for (const memory of memories) {
@@ -110188,7 +110653,7 @@ function getRaterWeightMultiplier(name) {
 }
 
 // src/be/memory/raters/store.ts
-init_db();
+init_db2();
 class ExplicitSelfDuplicateError extends Error {
   event;
   constructor(message, event) {
@@ -110389,7 +110854,7 @@ var shouldPersistTaskCompletionMemory = shouldPersistAutomaticTaskMemory;
 
 // src/tasks/worker-follow-up.ts
 init_zod();
-init_db();
+init_db2();
 init_resolver();
 init_types();
 init_env_flag();
@@ -110853,7 +111318,7 @@ ${taskContent}`,
 }
 
 // src/tasks/terminal-result-guard.ts
-init_db();
+init_db2();
 init_types();
 init_secret_scrubber();
 function getTaskOutputValidationError(outputSchema, output) {
@@ -111210,7 +111675,7 @@ Deferred until ${nextRunAt} (schedule ${schedule.id}). Pending: ${note}${checksB
 
 // src/tools/delete-channel.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var GENERAL_CHANNEL_ID = "00000000-0000-4000-8000-000000000001";
 var registerDeleteChannelTool = (server) => {
@@ -111288,7 +111753,7 @@ var registerDeleteChannelTool = (server) => {
 
 // src/tools/delete-page.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var DeletedPageSchema = looseObject({
   id: string().optional(),
@@ -111813,7 +112278,7 @@ var registerExtensionListTool = (server) => {
 
 // src/tools/get-metrics.ts
 init_zod();
-init_db();
+init_db2();
 var CountByStatusSchema = record(string(), number());
 var registerGetMetricsTool = (server) => {
   createToolRegistrar(server)("get-metrics", {
@@ -111856,7 +112321,7 @@ var registerGetMetricsTool = (server) => {
 
 // src/tools/get-swarm.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var agentOutputShape = looseObject({
   id: string().optional(),
@@ -111909,7 +112374,7 @@ var registerGetSwarmTool = (server) => {
 
 // src/tools/get-tasks.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var TaskSummarySchema = looseObject({
   id: string().optional(),
@@ -112067,7 +112532,8 @@ var registerGetTasksTool = (server) => {
 
 // src/tools/inject-learning.ts
 init_zod();
-init_db();
+init_db2();
+init_memory();
 init_rbac();
 var LearningCategoryEnum = _enum([
   "mistake-pattern",
@@ -112124,7 +112590,7 @@ ${learning}`;
     });
     try {
       const provider = getEmbeddingProvider();
-      const embedding = await provider.embed(content);
+      const embedding = await provider.embed(memory.content);
       if (embedding) {
         await store.updateEmbedding(memory.id, embedding, provider.name);
       }
@@ -112138,7 +112604,7 @@ ${learning}`;
 
 // src/tools/join-swarm.ts
 init_zod();
-init_db();
+init_db2();
 init_defaults();
 init_types();
 var agentOutputShape2 = looseObject({
@@ -112244,11 +112710,11 @@ var registerJoinSwarmTool = (server) => {
 
 // src/tools/kv/kv-delete.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 
 // src/tools/kv/kv-write-auth.ts
-init_db();
+init_db2();
 
 // src/kv-reserved-namespaces.ts
 var RESERVED_FAMILIES = new Map([
@@ -112296,7 +112762,7 @@ async function kvWriteAuthError(namespace2, info, key) {
 }
 
 // src/tools/kv/resolve-namespace.ts
-init_db();
+init_db2();
 init_context_key();
 async function resolveNamespace(explicit, info) {
   if (explicit && explicit.length > 0) {
@@ -112357,7 +112823,7 @@ var registerKvDeleteTool = (server) => {
 };
 // src/tools/kv/kv-get.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 
 // src/tools/kv/kv-read-auth.ts
@@ -112380,21 +112846,89 @@ function renderKvEntry(entry) {
   const expiry = entry.expiresAt ? ` (expires ${new Date(entry.expiresAt).toISOString()})` : "";
   return `value (${entry.valueType}): ${valueText}${expiry}`;
 }
+var kvViewOutputSchema = looseObject({
+  path: string().optional(),
+  type: string().optional(),
+  total: number().optional(),
+  offset: number().optional(),
+  returned: number().optional(),
+  nextOffset: number().nullable().optional()
+});
+function describeView(view) {
+  const target = view.path ? `"${view.path}"` : "the value";
+  if (view.total === undefined)
+    return `${target} (${view.type})`;
+  const unit = view.type === "array" ? "items" : view.type === "object" ? "keys" : "chars (JSON-encoded)";
+  const offset = view.offset ?? 0;
+  return `${target} ${unit} ${offset}..${offset + (view.returned ?? 0)} of ${view.total}`;
+}
+function boundedView(entry, agentId, args) {
+  const { namespace: namespace2, key } = entry;
+  const failed = (error) => toolErr(error, { data: { yourAgentId: agentId, namespace: namespace2 } });
+  const checked = resolveKvView(entry.value, args);
+  if (!checked.ok)
+    return failed(checked.error);
+  const target = resolveKvTarget(entry.value, args.path ?? "");
+  if (!target.ok)
+    return failed(target.error);
+  const { value: _value, ...meta2 } = entry;
+  const render = (value, view) => toolOk(`Read ${describeView(view)} from "${key}" in "${namespace2}".`, {
+    details: JSON.stringify(value),
+    data: { yourAgentId: agentId, namespace: namespace2, entry: meta2, view }
+  });
+  const baseView = checked.view;
+  if (baseView.total === undefined)
+    return render(checked.value, baseView);
+  const offset = baseView.offset ?? 0;
+  const wanted = Math.min(args.limit ?? baseView.total, Math.max(0, baseView.total - offset));
+  const firstKey = baseView.type === "array" ? String(offset) : baseView.type === "object" ? Object.keys(target.value)[offset] : undefined;
+  const firstPath = firstKey === undefined || firstKey === "" ? undefined : `${baseView.path ? `${baseView.path}.` : ""}${joinKvPath([firstKey])}`;
+  const narrowTo = firstPath !== undefined && firstPath.length <= KV_PATH_MAX_CHARS;
+  const page = (count) => {
+    const sliced = sliceKvTarget(target.value, offset, count);
+    const result = render(sliced?.value, {
+      ...baseView,
+      returned: sliced?.returned ?? 0,
+      nextOffset: sliced?.nextOffset ?? null
+    });
+    if (count >= wanted)
+      return result;
+    const note = count === 0 && narrowTo ? ` The entry at offset ${offset} alone exceeds the ${MCP_RESULT_WIRE_LIMIT_BYTES}-byte cap; narrow the path to "${firstPath}".` : ` Page shrunk to fit the ${MCP_RESULT_WIRE_LIMIT_BYTES}-byte cap; continue at view.nextOffset.`;
+    return { ...result, message: `${result.message}${note}` };
+  };
+  const fits = (count) => swarmToolResultBytes(page(count)) <= MCP_RESULT_WIRE_LIMIT_BYTES;
+  if (fits(wanted))
+    return page(wanted);
+  let low = 0;
+  let high = wanted;
+  while (low < high) {
+    const mid = Math.ceil((low + high) / 2);
+    if (fits(mid))
+      low = mid;
+    else
+      high = mid - 1;
+  }
+  return page(low);
+}
 var registerKvGetTool = (server) => {
   createToolRegistrar(server)("kv-get", {
     title: "KV Get",
-    description: "Read a key from the swarm KV store. Returns the entry or null if missing/expired. Namespace defaults to your current context (Slack thread / PR / Linear issue when invoked from a task; otherwise your agent scratchpad).",
+    description: "Read a key from the swarm KV store. Returns the entry or null if missing/expired. Namespace defaults to your current context (Slack thread / PR / Linear issue when invoked from a task; otherwise your agent scratchpad). Without path/offset/limit the whole value comes back unbounded. With any of them you get a bounded view (≤10KB per channel): `path` is a dot path into a JSON value (string entries holding JSON, such as spilled tool results, count as JSON; numeric segments index arrays, e.g. `outcome.data.rows` or `rows.3`; escape a dot inside a key as `\\.`), and `offset`/`limit` page the array items, object keys, or string characters found there. The result's `view.nextOffset` says where the next page starts.",
     annotations: { readOnlyHint: true },
     inputSchema: object({
       key: KvKeySchema.describe("KV key (≤512 chars, [a-zA-Z0-9._:/-])."),
-      namespace: KvNamespaceSchema.optional().describe("Optional explicit namespace. Defaults to the caller's contextKey.")
+      namespace: KvNamespaceSchema.optional().describe("Optional explicit namespace. Defaults to the caller's contextKey."),
+      path: string().max(KV_PATH_MAX_CHARS).optional().describe('Dot path into the JSON value, e.g. "outcome.data.rows" or "rows.3". "" is the whole value. A dot inside a key is escaped as "\\.".'),
+      offset: number().int().nonnegative().optional().describe("First array item / object key / string char to return. Default 0."),
+      limit: number().int().positive().optional().describe("Max items / keys / chars to return; the page also shrinks to fit the cap.")
     }),
     outputSchema: swarmToolOutputSchema({
       yourAgentId: string().optional(),
       namespace: string().optional(),
-      entry: kvEntryOutputSchema.nullable().optional()
+      entry: kvEntryOutputSchema.nullable().optional(),
+      view: kvViewOutputSchema.optional()
     })
-  }, async ({ key, namespace: namespace2 }, requestInfo) => {
+  }, async ({ key, namespace: namespace2, path: path2, offset, limit }, requestInfo) => {
     const resolved = await resolveNamespace(namespace2, requestInfo);
     if ("error" in resolved) {
       return toolErr(resolved.error, { data: { yourAgentId: requestInfo.agentId } });
@@ -112406,6 +112940,9 @@ var registerKvGetTool = (server) => {
       });
     }
     const entry = await getKv(resolved.namespace, key);
+    if (entry && hasKvViewArgs({ path: path2, offset, limit })) {
+      return boundedView(entry, requestInfo.agentId, { path: path2, offset, limit });
+    }
     return toolOk(entry ? `Found "${key}" in "${resolved.namespace}".` : `No entry for "${key}" in "${resolved.namespace}".`, {
       details: entry ? renderKvEntry(entry) : undefined,
       data: {
@@ -112418,7 +112955,7 @@ var registerKvGetTool = (server) => {
 };
 // src/tools/kv/kv-incr.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var kvEntryOutputSchema2 = looseObject({
   namespace: string().optional(),
@@ -112475,7 +113012,7 @@ var registerKvIncrTool = (server) => {
 };
 // src/tools/kv/kv-list.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var MAX_KV_LIST_LIMIT = 1000;
 var kvEntryOutputSchema3 = looseObject({
@@ -112545,7 +113082,7 @@ var registerKvListTool = (server) => {
 };
 // src/tools/kv/kv-set.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var MAX_KV_BODY_BYTES = 2 * 1024 * 1024;
 var kvEntryOutputSchema4 = looseObject({
@@ -112646,7 +113183,7 @@ var registerKvSetTool = (server) => {
 };
 // src/tools/list-channels.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var ChannelOutputSchema2 = looseObject({
   id: string().optional(),
@@ -112680,7 +113217,7 @@ var registerListChannelsTool = (server) => {
 
 // src/tools/list-services.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var serviceWithAgentNameOutputShape = looseObject({
   id: string().optional(),
@@ -112758,7 +113295,7 @@ var registerListServicesTool = (server) => {
 
 // src/tools/manage-user.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var userOutputShape = looseObject({
   id: string().optional(),
@@ -112973,7 +113510,7 @@ var registerManageUserTool = (server) => {
 
 // src/tools/mcp-servers/mcp-server-create.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerMcpServerCreateTool = (server) => {
   createToolRegistrar(server)("mcp-server-create", {
@@ -113078,7 +113615,7 @@ var registerMcpServerCreateTool = (server) => {
 };
 // src/tools/mcp-servers/mcp-server-delete.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerMcpServerDeleteTool = (server) => {
   createToolRegistrar(server)("mcp-server-delete", {
@@ -113123,7 +113660,7 @@ var registerMcpServerDeleteTool = (server) => {
 };
 // src/tools/mcp-servers/mcp-server-get.ts
 init_zod();
-init_db();
+init_db2();
 var registerMcpServerGetTool = (server) => {
   createToolRegistrar(server)("mcp-server-get", {
     title: "Get MCP Server",
@@ -113160,7 +113697,7 @@ var registerMcpServerGetTool = (server) => {
 };
 // src/tools/mcp-servers/mcp-server-install.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerMcpServerInstallTool = (server) => {
   createToolRegistrar(server)("mcp-server-install", {
@@ -113218,15 +113755,15 @@ var registerMcpServerInstallTool = (server) => {
 };
 // src/tools/mcp-servers/mcp-server-list.ts
 init_zod();
-init_db();
+init_db2();
 function renderServerLines(servers) {
   if (servers.length === 0)
     return;
   return servers.map((entry) => {
     const s = entry;
-    const enabled2 = s.isEnabled === false ? "disabled" : "enabled";
+    const enabled = s.isEnabled === false ? "disabled" : "enabled";
     const status = typeof s.status === "string" && s.status ? `, status=${s.status}` : "";
-    return `- ${String(s.name ?? "?")} (${String(s.transport ?? "?")}, ${enabled2}${status})`;
+    return `- ${String(s.name ?? "?")} (${String(s.transport ?? "?")}, ${enabled}${status})`;
   }).join(`
 `);
 }
@@ -113267,7 +113804,7 @@ var registerMcpServerListTool = (server) => {
 };
 // src/tools/mcp-servers/mcp-server-uninstall.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerMcpServerUninstallTool = (server) => {
   createToolRegistrar(server)("mcp-server-uninstall", {
@@ -113311,10 +113848,10 @@ var registerMcpServerUninstallTool = (server) => {
 };
 // src/tools/mcp-servers/mcp-server-update.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/be/mcp-server-checked-update.ts
-init_db();
+init_db2();
 async function updateMcpServerChecked(id, updates, check) {
   return await getDbClient().transaction(async () => {
     const existing = await getMcpServerById(id);
@@ -113437,7 +113974,8 @@ var registerMcpServerUpdateTool = (server) => {
 };
 // src/tools/memory-delete.ts
 init_zod();
-init_db();
+init_db2();
+init_memory();
 init_rbac();
 var registerMemoryDeleteTool = (server) => {
   createToolRegistrar(server)("memory-delete", {
@@ -113483,7 +114021,8 @@ var registerMemoryDeleteTool = (server) => {
 
 // src/tools/memory-edit.ts
 init_zod();
-init_db();
+init_db2();
+init_memory();
 
 // src/be/memory/key-guard.ts
 init_rbac();
@@ -113533,7 +114072,7 @@ function assertKeyWritable(key, origin, writer) {
 init_key_paths();
 
 // src/be/memory/link-resolver.ts
-init_db();
+init_db2();
 init_constants();
 var WIKILINK_RE = /\[\[([^\]]+)\]\]/g;
 var PR_HASH_RE = /(?:^|[\s(])#(\d{1,5})(?=[\s,.)!?]|$)/gm;
@@ -113890,7 +114429,8 @@ var registerMemoryEditTool = (server) => {
 
 // src/tools/memory-get.ts
 init_zod();
-init_db();
+init_db2();
+init_memory();
 
 // src/be/memory/access.ts
 function canReadMemory(memory, agentId) {
@@ -113898,7 +114438,7 @@ function canReadMemory(memory, agentId) {
 }
 
 // src/be/memory/links-store.ts
-init_db();
+init_db2();
 function redactedTargetId(sourceText) {
   const wikilink = /^\[\[(.+)\]\]$/.exec(sourceText ?? "");
   return wikilink?.[1] ?? "";
@@ -114188,11 +114728,12 @@ var registerMemoryRateTool = (server) => {
 
 // src/tools/memory-search.ts
 init_zod();
-init_db();
+init_db2();
+init_memory();
 init_constants2();
 
 // src/be/memory/graph-expansion.ts
-init_db();
+init_db2();
 init_constants2();
 init_sqlite_store();
 init_reranker();
@@ -114438,7 +114979,7 @@ var registerMemorySearchTool = (server) => {
 
 // src/tools/memory-store.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/be/chunking.ts
 var MAX_CHUNK_SIZE = 2000;
@@ -114588,6 +115129,7 @@ function addOverlap(chunks, _originalText) {
 }
 
 // src/be/memory/index-content.ts
+init_memory();
 init_secret_scrubber();
 async function indexMemoryContent(params) {
   const { agentId, content, name, scope, source, sourceTaskId, sourcePath, tags } = params;
@@ -114620,7 +115162,7 @@ async function indexMemoryContent(params) {
         intent: "re-index memory source path",
         changedByAgentId: agentId
       });
-      const embedding = await provider.embed(contentChunks[0].content);
+      const embedding = await provider.embed(result.memory.content);
       if (embedding)
         await store.updateEmbedding(result.memory.id, embedding, provider.name);
       try {
@@ -114660,7 +115202,7 @@ async function indexMemoryContent(params) {
   }
   (async () => {
     try {
-      const embeddings = await provider.embedBatch(contentChunks.map((c) => c.content));
+      const embeddings = await provider.embedBatch(memories.map((m) => m.content));
       for (let i = 0;i < embeddings.length; i++) {
         if (embeddings[i]) {
           await store.updateEmbedding(memories[i].id, embeddings[i], provider.name);
@@ -114752,7 +115294,7 @@ var registerMemoryStoreTool = (server) => {
 
 // src/tools/model-catalog/index.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 async function denyUnlessCatalogWriter(agentId) {
   const agent = await getAgentById(agentId);
@@ -114853,7 +115395,7 @@ var registerModelCatalogOverlayUpsertTool = (server) => {
 
 // src/tools/my-agent-info.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var agentOutputShape3 = looseObject({
   id: string().optional(),
@@ -114908,6 +115450,7 @@ var registerMyAgentInfoTool = (server) => {
 
 // src/tools/oauth-access-token.ts
 init_zod();
+init_oauth();
 init_secret_scrubber();
 function assertTokenUsable(provider, expiresAt, minValidityMs) {
   const expiresAtMs = Date.parse(expiresAt);
@@ -115031,7 +115574,7 @@ init_zod();
 // src/be/api-drain.ts
 init_api_drain();
 init_secret_scrubber();
-init_db();
+init_db2();
 var DEFAULT_API_DRAIN_MAX_MS = 0;
 var DRAIN_CHECK_INTERVAL_MS = 500;
 var LIVE_WORKER_WINDOW_MS = 30000;
@@ -115129,7 +115672,7 @@ function describe2(err) {
 }
 
 // src/tools/poll-task.ts
-init_db();
+init_db2();
 var DEFAULT_POLL_INTERVAL_MS = 2000;
 var MAX_POLL_DURATION_MS = 1 * 60 * 1000;
 var registerPollTaskTool = (server) => {
@@ -115297,7 +115840,7 @@ var registerPollTaskTool = (server) => {
 
 // src/tools/post-message.ts
 init_zod();
-init_db();
+init_db2();
 var PostedMessageSchema = looseObject({
   id: string().optional(),
   channelId: string().optional(),
@@ -115356,7 +115899,7 @@ var registerPostMessageTool = (server) => {
 
 // src/tools/prompt-templates/delete.ts
 init_zod();
-init_db();
+init_db2();
 var registerDeletePromptTemplateTool = (server) => {
   createToolRegistrar(server)("delete-prompt-template", {
     title: "Delete Prompt Template",
@@ -115399,7 +115942,7 @@ var registerDeletePromptTemplateTool = (server) => {
 };
 // src/tools/prompt-templates/get.ts
 init_zod();
-init_db();
+init_db2();
 init_registry();
 var promptTemplateOutputShape = looseObject({
   id: string().optional(),
@@ -115479,7 +116022,7 @@ History: ${history.length} version(s)`,
 };
 // src/tools/prompt-templates/list.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var promptTemplateOutputShape2 = looseObject({
   id: string().optional(),
@@ -115584,7 +116127,7 @@ Unresolved variables: ${unresolved.join(", ")}` : ""}`,
 };
 // src/tools/prompt-templates/set.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var promptTemplateOutputShape3 = looseObject({
   id: string().optional(),
@@ -115651,7 +116194,7 @@ var registerSetPromptTemplateTool = (server) => {
 };
 // src/tools/read-messages.ts
 init_zod();
-init_db();
+init_db2();
 var ChannelMessageOutputSchema = looseObject({
   id: string().optional(),
   channelId: string().optional(),
@@ -115776,7 +116319,7 @@ var registerReadMessagesTool = (server) => {
 
 // src/tools/register-agentmail-inbox.ts
 init_zod();
-init_db();
+init_db2();
 var registerRegisterAgentmailInboxTool = (server) => {
   createToolRegistrar(server)("register-agentmail-inbox", {
     title: "Register AgentMail Inbox",
@@ -115849,9 +116392,10 @@ ${mappings.map((m) => `  - ${m.inboxId} (${m.inboxEmail ?? "no email"})`).join(`
 
 // src/tools/register-kapso-number.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/integrations/kapso/client.ts
+init_secret_scrubber();
 var SESSION_WINDOW_ERROR_CODES = new Set([131047, 131051, 470]);
 function extractMetaError(raw) {
   if (raw && typeof raw === "object" && "error" in raw) {
@@ -115885,7 +116429,7 @@ async function sendKapsoText(params) {
     recipient_type: "individual",
     to: params.to,
     type: "text",
-    text: { preview_url: params.previewUrl ?? false, body: params.body }
+    text: { preview_url: params.previewUrl ?? false, body: scrubSecrets(params.body) }
   };
   if (params.contextMessageId) {
     payload.context = { message_id: params.contextMessageId };
@@ -116021,7 +116565,7 @@ async function registerKapsoWebhook(params) {
 }
 
 // src/integrations/kapso/config.ts
-init_db();
+init_db2();
 var KAPSO_NUMBERS_NAMESPACE = "integrations:kapso:numbers";
 var KAPSO_DEDUPE_NAMESPACE = "integrations:kapso:dedupe";
 var KAPSO_DEDUPE_TTL_MS = 24 * 60 * 60 * 1000;
@@ -116203,7 +116747,7 @@ var registerUnregisterKapsoNumberTool = (server) => {
 
 // src/tools/register-service.ts
 init_zod();
-init_db();
+init_db2();
 import path2 from "node:path";
 init_types();
 var serviceOutputShape = looseObject({
@@ -116334,7 +116878,7 @@ var registerRegisterServiceTool = (server) => {
 
 // src/tools/repos/get-repos.ts
 init_zod();
-init_db();
+init_db2();
 var swarmRepoOutputShape = looseObject({
   id: string().optional(),
   url: string().optional(),
@@ -116378,10 +116922,10 @@ var registerGetReposTool = (server) => {
 };
 // src/tools/repos/update-repo.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/be/repo-checked-update.ts
-init_db();
+init_db2();
 
 // src/be/repo-merge-policy.ts
 function changesAllowMerge(current, incoming) {
@@ -116473,7 +117017,7 @@ var registerUpdateRepoTool = (server) => {
 };
 // src/tools/request-human-input.ts
 init_zod();
-init_db();
+init_db2();
 init_constants();
 var QuestionSchema = object({
   id: string().describe("Unique ID for the question (used as key in responses)"),
@@ -116634,7 +117178,7 @@ var registerResolveUserTool = (server) => {
 init_zod();
 
 // src/realtime/auth.ts
-init_db();
+init_db2();
 init_rbac_roles();
 
 // src/comb/config.ts
@@ -122496,7 +123040,7 @@ var removeAwarenessStates = (awareness, clients, origin) => {
 };
 
 // src/realtime/rooms.ts
-init_db();
+init_db2();
 init_secret_scrubber();
 init_bus();
 var ROOM_KEY_PREFIX = "_room/";
@@ -123063,6 +123607,7 @@ var registerRoomDecodeTool = (server) => {
 // src/tools/schedules/create-schedule.ts
 init_zod();
 var import_cron_parser2 = __toESM(require_dist2(), 1);
+init_db2();
 init_db();
 init_types();
 var createScheduleInputSchema = object({
@@ -123146,7 +123691,7 @@ var registerCreateScheduleTool = (server) => {
     priority,
     targetAgentId,
     timezone,
-    enabled: enabled2,
+    enabled,
     model,
     modelTier,
     allowCustomModel
@@ -123227,7 +123772,7 @@ var registerCreateScheduleTool = (server) => {
       return toolErr(modelError);
     try {
       let nextRunAt;
-      if (enabled2 === false) {
+      if (enabled === false) {
         nextRunAt = undefined;
       } else if (isOneTime) {
         nextRunAt = delayMs ? new Date(Date.now() + delayMs).toISOString() : runAt;
@@ -123257,7 +123802,7 @@ var registerCreateScheduleTool = (server) => {
         priority,
         targetAgentId,
         timezone,
-        enabled: enabled2,
+        enabled,
         nextRunAt,
         createdByAgentId: requestInfo.agentId,
         model: normalizedModel.model,
@@ -123279,13 +123824,15 @@ var registerCreateScheduleTool = (server) => {
 };
 // src/tools/schedules/delete-schedule.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/be/events.ts
-init_db();
+init_secret_scrubber();
+init_db2();
+init_scrub_json();
 
 // src/be/memory/key-browser.ts
-init_db();
+init_db2();
 var MEMORY_KEYS_DEFAULT_PREFIX = "/longterm/";
 var MEMORY_KEYS_MAX_LIMIT = 2000;
 function estimateTokens(chars) {
@@ -123518,6 +124065,13 @@ function rowToSwarmEvent(row) {
 var INSERT_EVENT_SQL = `INSERT INTO events (id, category, event, status, source, agentId, taskId,
        sessionId, parentEventId, numericValue, durationMs, data, createdAt)
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))`;
+function serializeEventData(data) {
+  const raw = JSON.stringify(data);
+  const scrubbed = scrubSecrets(raw);
+  if (!breaksJsonValidity(raw, scrubbed))
+    return scrubbed;
+  return JSON.stringify(scrubObject(data));
+}
 async function insertEvent(db, id2, input) {
   await db.run(INSERT_EVENT_SQL, [
     id2,
@@ -123531,7 +124085,7 @@ async function insertEvent(db, id2, input) {
     input.parentEventId ?? null,
     input.numericValue ?? null,
     input.durationMs ?? null,
-    input.data ? JSON.stringify(input.data) : null
+    input.data ? serializeEventData(input.data) : null
   ]);
   await recordSkillInvocation(db, input, id2);
 }
@@ -123740,7 +124294,7 @@ var registerDeleteScheduleTool = (server) => {
 };
 // src/tools/schedules/list-schedules.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var scheduleRowShape = {
   id: string().optional(),
@@ -123790,7 +124344,7 @@ var registerListSchedulesTool = (server) => {
       count: number().optional()
     })
   }, async ({
-    enabled: enabled2,
+    enabled,
     name,
     key,
     keyPrefix,
@@ -123807,7 +124361,7 @@ var registerListSchedulesTool = (server) => {
     }
     try {
       const filters = {
-        enabled: enabled2,
+        enabled,
         name,
         key,
         keyPrefix,
@@ -123842,7 +124396,7 @@ var registerListSchedulesTool = (server) => {
 // src/tools/schedules/patch-schedule.ts
 init_zod();
 var import_cron_parser3 = __toESM(require_dist2(), 1);
-init_db();
+init_db2();
 
 // src/be/schedules/validate.ts
 function mergeScheduleTiming(existing, patch) {
@@ -123859,6 +124413,7 @@ function validateRecurringTiming(merged) {
 }
 
 // src/tools/schedules/patch-schedule.ts
+init_db();
 init_types();
 var patchScheduleInputSchema = object({
   key: AssetKeySchema.optional().describe("Move to a logical namespace."),
@@ -123939,7 +124494,7 @@ var registerPatchScheduleTool = (server) => {
     priority,
     targetAgentId,
     timezone,
-    enabled: enabled2,
+    enabled,
     model,
     modelTier,
     allowCustomModel
@@ -124036,8 +124591,8 @@ var registerPatchScheduleTool = (server) => {
         updateData.targetAgentId = targetAgentId;
       if (timezone !== undefined)
         updateData.timezone = timezone;
-      if (enabled2 !== undefined)
-        updateData.enabled = enabled2;
+      if (enabled !== undefined)
+        updateData.enabled = enabled;
       const agentChanged = targetAgentId !== undefined && targetAgentId !== schedule.targetAgentId;
       if (model !== undefined || modelTier !== undefined) {
         const normalizedModel = splitLegacyModelAlias({ model, modelTier });
@@ -124065,7 +124620,7 @@ var registerPatchScheduleTool = (server) => {
           return toolErr(modelError);
       }
       if (schedule.scheduleType === "one_time") {
-        if (enabled2 === false) {
+        if (enabled === false) {
           updateData.nextRunAt = null;
         }
       } else {
@@ -124077,15 +124632,15 @@ var registerPatchScheduleTool = (server) => {
         if (timingError) {
           return toolErr("At least one of intervalMs or cronExpression must be set for recurring schedules.");
         }
-        const needsNextRunRecalc = cronExpression !== undefined || intervalMs !== undefined || timezone !== undefined || enabled2 === true && !schedule.enabled;
-        if (needsNextRunRecalc && enabled2 !== false) {
+        const needsNextRunRecalc = cronExpression !== undefined || intervalMs !== undefined || timezone !== undefined || enabled === true && !schedule.enabled;
+        if (needsNextRunRecalc && enabled !== false) {
           const mergedTimezone = timezone !== undefined ? timezone : schedule.timezone;
           updateData.nextRunAt = calculateNextRun({
             cronExpression: timing.mergedCron,
             intervalMs: timing.mergedInterval,
             timezone: mergedTimezone
           }, new Date);
-        } else if (enabled2 === false) {
+        } else if (enabled === false) {
           updateData.nextRunAt = null;
         }
       }
@@ -124109,7 +124664,7 @@ var registerPatchScheduleTool = (server) => {
 };
 // src/tools/schedules/run-schedule-now.ts
 init_zod();
-init_db();
+init_db2();
 var registerRunScheduleNowTool = (server) => {
   createToolRegistrar(server)("run-schedule-now", {
     title: "Run Schedule Now",
@@ -124168,6 +124723,7 @@ var registerRunScheduleNowTool = (server) => {
 // src/tools/schedules/update-schedule.ts
 init_zod();
 var import_cron_parser4 = __toESM(require_dist2(), 1);
+init_db2();
 init_db();
 init_types();
 var updateScheduleInputSchema = object({
@@ -124249,7 +124805,7 @@ var registerUpdateScheduleTool = (server) => {
     priority,
     targetAgentId,
     timezone,
-    enabled: enabled2,
+    enabled,
     model,
     modelTier,
     allowCustomModel
@@ -124346,8 +124902,8 @@ var registerUpdateScheduleTool = (server) => {
         updateData.targetAgentId = targetAgentId;
       if (timezone !== undefined)
         updateData.timezone = timezone;
-      if (enabled2 !== undefined)
-        updateData.enabled = enabled2;
+      if (enabled !== undefined)
+        updateData.enabled = enabled;
       const agentChanged = targetAgentId !== undefined && targetAgentId !== schedule.targetAgentId;
       if (model !== undefined || modelTier !== undefined) {
         const normalizedModel = splitLegacyModelAlias({ model, modelTier });
@@ -124375,7 +124931,7 @@ var registerUpdateScheduleTool = (server) => {
           return toolErr(modelError);
       }
       if (schedule.scheduleType === "one_time") {
-        if (enabled2 === false) {
+        if (enabled === false) {
           updateData.nextRunAt = null;
         }
       } else {
@@ -124387,15 +124943,15 @@ var registerUpdateScheduleTool = (server) => {
         if (timingError) {
           return toolErr("At least one of intervalMs or cronExpression must be set for recurring schedules.");
         }
-        const needsNextRunRecalc = cronExpression !== undefined || intervalMs !== undefined || timezone !== undefined || enabled2 === true && !schedule.enabled;
-        if (needsNextRunRecalc && enabled2 !== false) {
+        const needsNextRunRecalc = cronExpression !== undefined || intervalMs !== undefined || timezone !== undefined || enabled === true && !schedule.enabled;
+        if (needsNextRunRecalc && enabled !== false) {
           const mergedTimezone = timezone !== undefined ? timezone : schedule.timezone;
           updateData.nextRunAt = calculateNextRun({
             cronExpression: timing.mergedCron,
             intervalMs: timing.mergedInterval,
             timezone: mergedTimezone
           }, new Date);
-        } else if (enabled2 === false) {
+        } else if (enabled === false) {
           updateData.nextRunAt = null;
         }
       }
@@ -124419,7 +124975,7 @@ var registerUpdateScheduleTool = (server) => {
 };
 // src/tools/script-apis.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 init_secret_scrubber();
 var scriptApisInputSchema = object({
@@ -124592,7 +125148,7 @@ var registerScriptApisTool = (server) => {
 
 // src/tools/script-connections/tool.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var scriptConnectionsInputSchema = object({
   action: _enum(["list", "upsert-openapi", "upsert-mcp", "upsert-graphql", "refresh", "disable"]).describe("List, create/update, refresh, or disable a script connection."),
@@ -125168,12 +125724,12 @@ var registerScriptUpsertTool = (server) => {
 
 // src/tools/send-task.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 init_slack_routing();
 
 // src/tools/task-dedup.ts
-init_db();
+init_db2();
 function jaccardSimilarity(a, b) {
   const tokenize = (s) => new Set(s.toLowerCase().replace(/[^\w\s]/g, " ").split(/\s+/).filter((w) => w.length > 0));
   const wordsA = tokenize(a);
@@ -125334,10 +125890,22 @@ async function sendTaskHandler(ctx, {
   followUpConfig,
   outputSchema
 }) {
-  if (agentId !== undefined && routingReason === undefined) {
+  const userLead = ctx.kind === "user" ? await getLeadAgent() : null;
+  if (ctx.kind === "user" && (!userLead || userLead.status === "offline")) {
+    return toolErr("No online Lead is available. Start or register a Lead before sending a task.");
+  }
+  const requestedAgentId = ctx.kind === "user" ? userLead.id : agentId;
+  const requestedRoutingReason = ctx.kind === "user" ? "skill" : routingReason;
+  const requestedRoutingNote = ctx.kind === "user" ? "User MCP ingress assigns new work to the Lead for delegation." : routingNote;
+  const requestedOfferMode = ctx.kind === "user" ? false : offerMode;
+  const requestedLeadOnly = ctx.kind === "user" ? false : leadOnly;
+  const requestedCapabilities = ctx.kind === "user" ? undefined : requiredCapabilities;
+  const requestedAllowDuplicate = ctx.kind === "user" ? false : allowDuplicate;
+  const requestedOverrideSlackContext = ctx.kind === "user" ? false : overrideSlackContext;
+  if (requestedAgentId !== undefined && requestedRoutingReason === undefined) {
     return toolErr("routingReason is required when agentId is supplied.");
   }
-  if (agentId !== undefined && (routingNote?.trim().length ?? 0) < 10) {
+  if (requestedAgentId !== undefined && (requestedRoutingNote?.trim().length ?? 0) < 10) {
     return toolErr("routingNote is required when agentId is supplied (at least 10 characters after trim).");
   }
   if (ctx.kind === "owner" && !ctx.agentId) {
@@ -125368,7 +125936,7 @@ async function sendTaskHandler(ctx, {
       data: { yourAgentId: creatorAgentId }
     });
   }
-  if (ctx.kind === "owner" && agentId === ctx.agentId) {
+  if (ctx.kind === "owner" && requestedAgentId === ctx.agentId) {
     return toolErr("Cannot send a task to yourself, are you drunk?", {
       data: { yourAgentId: ctx.agentId }
     });
@@ -125382,8 +125950,8 @@ async function sendTaskHandler(ctx, {
       data: { yourAgentId: creatorAgentId }
     });
   }
-  const effectiveLeadOnly = leadOnly || effectiveParentTask?.routingAffinity?.leadOnly === true;
-  if (!overrideSlackContext) {
+  const effectiveLeadOnly = ctx.kind === "user" ? false : requestedLeadOnly || effectiveParentTask?.routingAffinity?.leadOnly === true;
+  if (!requestedOverrideSlackContext) {
     const inheritedContextKey = effectiveParentTask?.contextKey;
     const routingCheck = checkSlackRoutingCoherence({
       explicit: { channelId: slackChannelId, threadTs: slackThreadTs, userId: slackUserId },
@@ -125406,8 +125974,8 @@ async function sendTaskHandler(ctx, {
     const message = error instanceof AssetKeyAuthorizationError ? error.message : error instanceof Error ? error.message : String(error);
     return toolErr(message, { data: { yourAgentId: creatorAgentId } });
   }
-  let effectiveAgentId = agentId;
-  if (effectiveParentTaskId && !agentId) {
+  let effectiveAgentId = requestedAgentId;
+  if (effectiveParentTaskId && !requestedAgentId) {
     if (effectiveParentTask?.agentId) {
       effectiveAgentId = effectiveParentTask.agentId;
     }
@@ -125419,13 +125987,13 @@ async function sendTaskHandler(ctx, {
   });
   if (modelError)
     return toolErr(modelError, { data: { yourAgentId: creatorAgentId } });
-  const effectiveRoutingReason = agentId !== undefined ? routingReason : effectiveAgentId ? "continuity" : undefined;
-  const effectiveRoutingNote = effectiveRoutingReason ? routingNote : undefined;
-  const effectiveRoutingSource = agentId !== undefined ? "declared" : effectiveAgentId ? "engine_default" : undefined;
+  const effectiveRoutingReason = requestedAgentId !== undefined ? requestedRoutingReason : effectiveAgentId ? "continuity" : undefined;
+  const effectiveRoutingNote = effectiveRoutingReason ? requestedRoutingNote : undefined;
+  const effectiveRoutingSource = ctx.kind === "user" ? "engine_default" : requestedAgentId !== undefined ? "declared" : effectiveAgentId ? "engine_default" : undefined;
   const requestedTaskOptions = {
     key: assetKey,
-    agentId: offerMode ? undefined : effectiveAgentId,
-    offeredTo: offerMode ? effectiveAgentId : undefined,
+    agentId: requestedOfferMode ? undefined : effectiveAgentId,
+    offeredTo: requestedOfferMode ? effectiveAgentId : undefined,
     creatorAgentId,
     requestedByUserId,
     source: "mcp",
@@ -125443,14 +126011,14 @@ async function sendTaskHandler(ctx, {
     slackChannelId,
     slackThreadTs,
     slackUserId,
-    overrideSlackContext,
+    overrideSlackContext: requestedOverrideSlackContext,
     followUpConfig,
     inheritParentFollowUpConfig: taskType === "resume",
     outputSchema,
     routingReason: effectiveRoutingReason,
     routingSource: effectiveRoutingSource,
     routingNote: effectiveRoutingNote,
-    routingAffinity: effectiveLeadOnly || requiredCapabilities?.length ? { leadOnly: effectiveLeadOnly, capabilities: requiredCapabilities ?? [] } : undefined
+    routingAffinity: effectiveLeadOnly || requestedCapabilities?.length ? { leadOnly: effectiveLeadOnly, capabilities: requestedCapabilities ?? [] } : undefined
   };
   const preCreate = await applyPreTaskCreate({
     description: task,
@@ -125467,6 +126035,9 @@ async function sendTaskHandler(ctx, {
   }
   const taskDescription = preCreate.description;
   const taskOptions = preCreate.options;
+  if (ctx.kind === "user" && (taskOptions.agentId !== userLead.id || taskOptions.offeredTo !== undefined)) {
+    return toolErr("A pre.task.create extension cannot change the user task's Lead assignment.");
+  }
   const evaluateDedupGuards = async () => {
     const existingTrackerWork = await findExistingLinearTrackerContextWork(effectiveParentTask?.contextKey, effectiveParentTask?.id);
     if (existingTrackerWork) {
@@ -125474,7 +126045,7 @@ async function sendTaskHandler(ctx, {
       console.log(`[send-task] ${msg}`);
       return { ok: false, message: msg, task: existingTrackerWork.task };
     }
-    if (!allowDuplicate && creatorAgentId) {
+    if (!requestedAllowDuplicate && creatorAgentId) {
       const duplicate = await findDuplicateTask({
         taskDescription,
         creatorAgentId: taskOptions.creatorAgentId ?? creatorAgentId,
@@ -125541,6 +126112,12 @@ async function sendTaskHandler(ctx, {
         message: `Agent with ID "${targetAgentId}" not found.`
       };
     }
+    if (ctx.kind === "user" && (!agent.isLead || agent.status === "offline")) {
+      return {
+        success: false,
+        message: "The Lead is no longer online. No task was created."
+      };
+    }
     if (isExtensionAgent(agent)) {
       return { success: false, message: extensionAgentAssignmentError(agent) };
     }
@@ -125550,7 +126127,7 @@ async function sendTaskHandler(ctx, {
         message: `Lead-only task requires a Lead agent; "${agent.name}" is not a Lead.`
       };
     }
-    if (!taskOptions.offeredTo && !await hasCapacity(targetAgentId)) {
+    if (ctx.kind !== "user" && !taskOptions.offeredTo && !await hasCapacity(targetAgentId)) {
       const activeCount = await getActiveTaskCount(targetAgentId);
       return {
         success: false,
@@ -125601,7 +126178,7 @@ var registerSendTaskTool = (server) => {
 
 // src/tools/skills/skill-create.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSkillCreateTool = (server) => {
   createToolRegistrar(server)("skill-create", {
@@ -125670,7 +126247,7 @@ var registerSkillCreateTool = (server) => {
 };
 // src/tools/skills/skill-delete.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var SYSTEM_DEFAULT_SKILL_LOCKED_MESSAGE = "This skill is system-managed and cannot be edited from the UI; it is re-seeded on each start. Fork it under a new name to customize.";
 var registerSkillDeleteTool = (server) => {
@@ -125720,7 +126297,7 @@ var registerSkillDeleteTool = (server) => {
 };
 // src/tools/skills/skill-get.ts
 init_zod();
-init_db();
+init_db2();
 var registerSkillGetTool = (server) => {
   createToolRegistrar(server)("skill-get", {
     title: "Get Skill",
@@ -125759,7 +126336,7 @@ ${skill.content}`,
 };
 // src/tools/skills/skill-get-file.ts
 init_zod();
-init_db();
+init_db2();
 var registerSkillGetFileTool = (server) => {
   createToolRegistrar(server)("skill-get-file", {
     title: "Get Skill File",
@@ -125798,7 +126375,7 @@ ${file.content}`,
 };
 // src/tools/skills/skill-install.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSkillInstallTool = (server) => {
   createToolRegistrar(server)("skill-install", {
@@ -125857,7 +126434,7 @@ var registerSkillInstallTool = (server) => {
 };
 // src/tools/skills/skill-install-remote.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSkillInstallRemoteTool = (server) => {
   createToolRegistrar(server)("skill-install-remote", {
@@ -125955,7 +126532,7 @@ var registerSkillInstallRemoteTool = (server) => {
 };
 // src/tools/skills/skill-list.ts
 init_zod();
-init_db();
+init_db2();
 function renderSkillList(skills) {
   if (skills.length === 0)
     return;
@@ -126005,7 +126582,7 @@ var registerSkillListTool = (server) => {
 };
 // src/tools/skills/skill-publish.ts
 init_zod();
-init_db();
+init_db2();
 var registerSkillPublishTool = (server) => {
   createToolRegistrar(server)("skill-publish", {
     title: "Publish Skill",
@@ -126077,7 +126654,7 @@ To reject: close this task with a rejection reason.`;
 };
 // src/tools/skills/skill-search.ts
 init_zod();
-init_db();
+init_db2();
 function renderSkillList2(skills) {
   if (skills.length === 0)
     return;
@@ -126112,7 +126689,7 @@ var registerSkillSearchTool = (server) => {
 };
 // src/tools/skills/skill-sync-remote.ts
 init_zod();
-init_db();
+init_db2();
 function contentHash(content) {
   const hash = new Bun.CryptoHasher("sha256").update(content).digest("hex");
   return hash;
@@ -126204,7 +126781,7 @@ var registerSkillSyncRemoteTool = (server) => {
 };
 // src/tools/skills/skill-uninstall.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSkillUninstallTool = (server) => {
   createToolRegistrar(server)("skill-uninstall", {
@@ -126248,7 +126825,7 @@ var registerSkillUninstallTool = (server) => {
 };
 // src/tools/skills/skill-update.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var SYSTEM_DEFAULT_SKILL_LOCKED_MESSAGE2 = "This skill is system-managed and cannot be edited from the UI; it is re-seeded on each start. Fork it under a new name to customize.";
 var registerSkillUpdateTool = (server) => {
@@ -126352,7 +126929,7 @@ var registerSkillUpdateTool = (server) => {
 };
 // src/tools/slack-archive-channel.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 
 // src/slack/channel-join.ts
@@ -126530,7 +127107,7 @@ var registerSlackArchiveChannelTool = (server) => {
 
 // src/tools/slack-create-channel.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSlackCreateChannelTool = (server) => {
   createToolRegistrar(server)("slack-create-channel", {
@@ -126586,7 +127163,7 @@ var registerSlackCreateChannelTool = (server) => {
 
 // src/tools/slack-delete.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 
 // src/slack/message-text.ts
@@ -126804,17 +127381,17 @@ var registerSlackDeleteTool = (server) => {
 
 // src/tools/slack-download-file.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/slack/inbound-files.ts
-init_db();
+init_db2();
 import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
 import { join as join2 } from "node:path";
 
 // src/be/task-attachment-store.ts
 init_secret_scrubber();
-init_db();
+init_db2();
 var MAX_TASK_ATTACHMENT_BYTES = 50 * 1024 * 1024;
 async function recordTaskAttachmentUpload(input) {
   const { provider, scope, uploaded, contentType } = input;
@@ -127281,7 +127858,7 @@ ${fetchCommand}`,
 
 // src/tools/slack-invite-to-channel.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSlackInviteToChannelTool = (server) => {
   createToolRegistrar(server)("slack-invite-to-channel", {
@@ -127336,7 +127913,7 @@ var registerSlackInviteToChannelTool = (server) => {
 
 // src/tools/slack-list-channels.ts
 init_zod();
-init_db();
+init_db2();
 var SlackChannelSchema = looseObject({
   id: string().optional(),
   name: string().optional(),
@@ -127431,7 +128008,7 @@ var registerSlackListChannelsTool = (server) => {
 
 // src/tools/slack-post.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSlackPostTool = (server) => {
   createToolRegistrar(server)("slack-post", {
@@ -127535,7 +128112,7 @@ var registerSlackPostTool = (server) => {
 
 // src/tools/slack-read.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var AUTO_DOWNLOAD_DIR = "/app/shared/downloads/slack";
 var SlackFileSchema = looseObject({
@@ -127765,7 +128342,7 @@ ${fileList}`;
 
 // src/tools/slack-reply.ts
 init_zod();
-init_db();
+init_db2();
 var registerSlackReplyTool = (server) => {
   createToolRegistrar(server)("slack-reply", {
     title: "Reply to Slack thread",
@@ -127905,7 +128482,7 @@ var registerSlackReplyTool = (server) => {
 
 // src/tools/slack-start-thread.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSlackStartThreadTool = (server) => {
   createToolRegistrar(server)("slack-start-thread", {
@@ -127994,7 +128571,7 @@ var registerSlackStartThreadTool = (server) => {
 
 // src/tools/slack-update.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSlackUpdateTool = (server) => {
   createToolRegistrar(server)("slack-update", {
@@ -128081,7 +128658,7 @@ var registerSlackUpdateTool = (server) => {
 
 // src/tools/slack-upload-file.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var WORKSPACE_DIR = "/workspace";
 function resolveTaskUploadThreadTs(task) {
@@ -128273,7 +128850,7 @@ ${triedPathsList}
 
 // src/tools/steer-task.ts
 init_zod();
-init_db();
+init_db2();
 init_steering();
 init_rbac();
 init_types();
@@ -128370,7 +128947,7 @@ var registerSteerTaskTool = (server) => {
 
 // src/tools/store-progress.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 init_types();
 init_secret_scrubber();
@@ -128728,7 +129305,7 @@ This check refuses once per task; the next completion is accepted and unfixed ci
 
 // src/tools/swarm-config/delete-config.ts
 init_zod();
-init_db();
+init_db2();
 init_swarm_config_guard();
 init_rbac();
 var registerDeleteConfigTool = (server) => {
@@ -128800,7 +129377,7 @@ var registerDeleteConfigTool = (server) => {
 };
 // src/tools/swarm-config/get-config.ts
 init_zod();
-init_db();
+init_db2();
 init_swarm_config_guard();
 init_rbac();
 init_types();
@@ -128891,7 +129468,7 @@ var registerGetConfigTool = (server) => {
 };
 // src/tools/swarm-config/list-config.ts
 init_zod();
-init_db();
+init_db2();
 init_swarm_config_guard();
 init_rbac();
 init_types();
@@ -128982,7 +129559,7 @@ var registerListConfigTool = (server) => {
 };
 // src/tools/swarm-config/set-config.ts
 init_zod();
-init_db();
+init_db2();
 init_swarm_config_guard();
 init_rbac();
 init_types();
@@ -129160,7 +129737,7 @@ init_zod();
 
 // src/be/budget-admission.ts
 init_env_flag();
-init_db();
+init_db2();
 var killSwitchWarned = false;
 function dateUtcFrom(now) {
   return now.toISOString().slice(0, 10);
@@ -129226,7 +129803,7 @@ async function canClaim(agentId, nowUtc, requestedByUserId) {
 // src/be/budget-refusal-notify.ts
 init_resolver();
 init_secret_scrubber();
-init_db();
+init_db2();
 function formatSpendSummary(ctx) {
   const fmt = (n) => n === undefined ? "?" : `$${n.toFixed(2)}`;
   if (ctx.cause === "agent") {
@@ -129277,7 +129854,7 @@ async function emitBudgetRefusalSideEffects(ctx, inserted) {
       console.warn(`[budget-refusal-notify] Failed to create follow-up task for budget refusal (task=${ctx.task.id.slice(0, 8)}): ${err}`);
     }
   }
-  import("./event-bus-z7v2t26e.js").then(({ workflowEventBus: workflowEventBus2 }) => {
+  import("./event-bus-vnfthafg.js").then(({ workflowEventBus: workflowEventBus2 }) => {
     workflowEventBus2.emit("task.budget_refused", {
       taskId: ctx.task.id,
       agentId: ctx.agentId,
@@ -129294,7 +129871,7 @@ async function emitBudgetRefusalSideEffects(ctx, inserted) {
 }
 
 // src/tools/task-action.ts
-init_db();
+init_db2();
 init_types();
 var TaskActionSchema = _enum([
   "create",
@@ -129833,6 +130410,7 @@ var registerTrackerMapAgentTool = (server) => {
 };
 // src/tools/tracker/tracker-status.ts
 init_zod();
+init_oauth();
 var registerTrackerStatusTool = (server) => {
   createToolRegistrar(server)("tracker-status", {
     title: "Tracker Status",
@@ -129919,7 +130497,7 @@ var registerTrackerUnlinkTool = (server) => {
 };
 // src/tools/unregister-service.ts
 init_zod();
-init_db();
+init_db2();
 var registerUnregisterServiceTool = (server) => {
   createToolRegistrar(server)("unregister-service", {
     title: "Unregister Service",
@@ -129974,7 +130552,7 @@ var registerUnregisterServiceTool = (server) => {
 
 // src/tools/update-profile.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 import { mkdtemp as mkdtemp2, rm as rm2 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
@@ -130225,7 +130803,7 @@ ${setupScript}
 
 // src/tools/update-service-status.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var serviceOutputShape2 = looseObject({
   id: string().optional(),
@@ -130395,7 +130973,7 @@ var registerCancelWorkflowRunTool = (server) => {
 };
 // src/tools/workflows/create-workflow.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 
 // src/workflows/model-validation.ts
@@ -130522,7 +131100,7 @@ var registerCreateWorkflowTool = (server) => {
 };
 // src/tools/workflows/delete-workflow.ts
 init_zod();
-init_db();
+init_db2();
 var registerDeleteWorkflowTool = (server) => {
   createToolRegistrar(server)("delete-workflow", {
     title: "Delete Workflow",
@@ -130546,7 +131124,7 @@ var registerDeleteWorkflowTool = (server) => {
 };
 // src/tools/workflows/get-workflow.ts
 init_zod();
-init_db();
+init_db2();
 var registerGetWorkflowTool = (server) => {
   createToolRegistrar(server)("get-workflow", {
     title: "Get Workflow",
@@ -130577,7 +131155,7 @@ var registerGetWorkflowTool = (server) => {
 };
 // src/tools/workflows/get-workflow-run.ts
 init_zod();
-init_db();
+init_db2();
 var STEP_VALUE_CAP = 400;
 function stepValuePreview(value) {
   if (value === undefined || value === null)
@@ -130617,11 +131195,11 @@ var registerGetWorkflowRunTool = (server) => {
     })
   }, async ({ id: id2 }) => {
     try {
-      const run = await getWorkflowRun(id2);
+      const run = await getWorkflowRun(id2, "display");
       if (!run) {
         return toolErr(`Workflow run not found: ${id2}`, { data: { steps: [] } });
       }
-      const steps = await getWorkflowRunStepsByRunId(id2);
+      const steps = await getWorkflowRunStepsByRunId(id2, "display");
       return toolOk(`Run ${id2} status: ${run.status}.`, {
         details: renderSteps(steps),
         data: { run, steps }
@@ -130633,7 +131211,7 @@ var registerGetWorkflowRunTool = (server) => {
 };
 // src/tools/workflows/list-workflow-runs.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var DEFAULT_RUN_LIMIT = 20;
 var TRIGGER_DATA_SUMMARY_CAP = 400;
@@ -130717,7 +131295,7 @@ var registerListWorkflowRunsTool = (server) => {
 };
 // src/tools/workflows/list-workflows.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var registerListWorkflowsTool = (server) => {
   createToolRegistrar(server)("list-workflows", {
@@ -130735,9 +131313,9 @@ var registerListWorkflowsTool = (server) => {
     outputSchema: swarmToolOutputSchema({
       workflows: exports_external.array(exports_external.unknown()).optional()
     })
-  }, async ({ enabled: enabled2, key, keyPrefix, consecutiveErrorsMin, lastRunStatus, includeFull }) => {
+  }, async ({ enabled, key, keyPrefix, consecutiveErrorsMin, lastRunStatus, includeFull }) => {
     try {
-      const filters = { enabled: enabled2, key, keyPrefix, consecutiveErrorsMin, lastRunStatus };
+      const filters = { enabled, key, keyPrefix, consecutiveErrorsMin, lastRunStatus };
       const workflows = includeFull ? await listWorkflows(filters) : await listWorkflows(filters, { slim: true });
       return toolOk(`Found ${workflows.length} workflow(s).`, { data: { workflows } });
     } catch (err) {
@@ -130750,7 +131328,7 @@ init_zod();
 init_types();
 
 // src/workflows/patch-definition.ts
-init_db();
+init_db2();
 async function patchWorkflowDefinition(options) {
   const { id: id2, patch, registry, snapshotAgentId, snapshotOptional, updates } = options;
   return await getDbClient().transaction(async () => {
@@ -130958,7 +131536,7 @@ var registerRetryWorkflowRunTool = (server) => {
 };
 // src/tools/workflows/trigger-workflow.ts
 init_zod();
-init_db();
+init_db2();
 var registerTriggerWorkflowTool = (server) => {
   createToolRegistrar(server)("trigger-workflow", {
     title: "Trigger Workflow",
@@ -131025,7 +131603,7 @@ ${bulleted}${schemaBlock}`,
 };
 // src/tools/workflows/update-workflow.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var registerUpdateWorkflowTool = (server) => {
   createToolRegistrar(server)("update-workflow", {
@@ -131062,7 +131640,7 @@ var registerUpdateWorkflowTool = (server) => {
     input,
     dir,
     vcsRepo,
-    enabled: enabled2,
+    enabled,
     triggerSchema
   }, requestInfo) => {
     try {
@@ -131094,7 +131672,7 @@ var registerUpdateWorkflowTool = (server) => {
         input: input === null ? null : input,
         dir: dir === null ? null : dir,
         vcsRepo: vcsRepo === null ? null : vcsRepo,
-        enabled: enabled2,
+        enabled,
         triggerSchema: triggerSchema === null ? null : triggerSchema,
         updatedBy
       }, { changedByAgentId: requestInfo.agentId });
@@ -131914,8 +132492,17 @@ function bridgeRequestFor(name, args2) {
       };
     }
     case "kv_get":
-    case "kv_getOrNull":
-      return { method: "GET", path: kvPath(body) };
+    case "kv_getOrNull": {
+      const view = new URLSearchParams;
+      if (typeof body.path === "string")
+        view.set("path", body.path);
+      if (typeof body.offset === "number")
+        view.set("offset", String(body.offset));
+      if (typeof body.limit === "number")
+        view.set("limit", String(body.limit));
+      const qs = view.toString();
+      return { method: "GET", path: qs ? `${kvPath(body)}?${qs}` : kvPath(body) };
+    }
     case "kv_set":
       return {
         method: "PUT",
@@ -132307,12 +132894,12 @@ function createSwarmSdk(config) {
 init_secret_scrubber();
 
 // src/extensions/lifecycle.ts
-init_db();
+init_db2();
 init_types();
 init_secret_scrubber();
 
 // src/extensions/identity.ts
-init_db();
+init_db2();
 function extensionAgentName(name) {
   return `ext:${name}`;
 }
@@ -132490,7 +133077,7 @@ async function loadExtension(input) {
 }
 
 // src/extensions/post-bridge.ts
-init_db();
+init_db2();
 init_secret_scrubber();
 init_event_bus();
 var subscribed3 = false;
@@ -132831,7 +133418,7 @@ async function enableExtension(id2, opts = {}) {
   registerLoaded(loaded);
   try {
     await setAssetsEnabled(id2, true, opts.by);
-    const enabled2 = await setExtensionState(id2, {
+    const enabled = await setExtensionState(id2, {
       enabled: true,
       status: "enabled",
       consecutiveFailures: 0,
@@ -132839,11 +133426,11 @@ async function enableExtension(id2, opts = {}) {
       agentId,
       updatedBy: opts.by
     });
-    if (!enabled2)
+    if (!enabled)
       throw new ExtensionLifecycleError("Extension not found", 404);
-    loaded.record = enabled2;
-    attemptedFingerprints.set(id2, extensionFingerprint(enabled2));
-    return enabled2;
+    loaded.record = enabled;
+    attemptedFingerprints.set(id2, extensionFingerprint(enabled));
+    return enabled;
   } catch (error) {
     await removeRegistered(id2);
     throw error;
@@ -133933,6 +134520,7 @@ function normalizeExistingTaskOutput(output) {
 
 // src/workflows/executors/notify.ts
 init_zod();
+init_secret_scrubber();
 var NotifyConfigSchema = exports_external.object({
   channel: exports_external.enum(["swarm", "slack", "email"]),
   target: exports_external.string().optional(),
@@ -133950,7 +134538,7 @@ class NotifyExecutor extends BaseExecutor {
   configSchema = NotifyConfigSchema;
   outputSchema = NotifyOutputSchema;
   async execute(config, context, _meta) {
-    const message = this.deps.interpolate(config.template, context);
+    const message = scrubSecrets(this.deps.interpolate(config.template, context));
     switch (config.channel) {
       case "swarm": {
         if (!config.target) {
@@ -133973,7 +134561,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp: getSlackApp2 } = await import("./app-w2d26h4f.js");
+        const { getSlackApp: getSlackApp2 } = await import("./app-43vrdmv8.js");
         const app = getSlackApp2();
         if (!app) {
           return {
@@ -134040,7 +134628,7 @@ class PropertyMatchExecutor extends BaseExecutor {
   outputSchema = PropertyMatchOutputSchema;
   async execute(config, context, _meta) {
     const results = config.conditions.map((cond) => {
-      const actual = resolvePath(context, cond.field);
+      const actual = resolvePath2(context, cond.field);
       const passed2 = evaluateCondition(cond.op, actual, cond.value);
       return { field: cond.field, op: cond.op, expected: cond.value, actual, passed: passed2 };
     });
@@ -134052,7 +134640,7 @@ class PropertyMatchExecutor extends BaseExecutor {
     };
   }
 }
-function resolvePath(obj, path3) {
+function resolvePath2(obj, path3) {
   const keys2 = path3.split(".");
   let current = obj;
   for (const key of keys2) {
@@ -134326,6 +134914,7 @@ class ScriptExecutor extends BaseExecutor {
 
 // src/workflows/executors/swarm-script.ts
 init_zod();
+init_db();
 init_constants();
 init_template();
 var SWARM_SCRIPT_DEFAULT_TIMEOUT_MS = DEFAULT_SCRIPT_RESOURCES.wallClockMs;
@@ -134778,4 +135367,4 @@ async function initWorkflows() {
   logOpenWebhookTriggers();
 }
 
-export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, findUserById, findUserByExternalId, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, mintSessionToken, revokeSessionToken, fingerprintApiKey, resolveIdentity, renderIdentity, createAdditiveBuffer, listHarnessModelSupport, recordHarnessModelSupport, agentRanModel, getAgentHarnessCliVersion, setAgentHarnessCliVersion, sanitizeModelTierOverrides, parseModelTierOverridesHeader, setAgentModelTierOverrides, previewModelTiers, recordClaimModelResolution, harnessModelErrorFor, poolTaskRunsOnHarness, explicitModelError, explicitModelErrorForAgent, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, automationIntegrationFixUrl, preflightAutomation, getAutomationSetupStates, listEnabledAutomationPreflightInputs, validateJsonSchema, workflowSaveWarnings, TriggerSchemaError, startWorkflowExecution, setupWorkflowResumeListener, retryFailedRun, cancelWorkflowRun, resumeWaitState, initWaitBusSubscriptions, subscribeWaitToBus, recoverIncompleteRuns, startRetryPoller, stopRetryPoller, validateTemplateVariables, instantiateTemplate, handleWebhookTrigger, logOpenWebhookTriggers, handleEventTrigger, handleScheduleTrigger, verifyHmacSignature, WebhookError, snapshotWorkflow, snapshotAndUpdateWorkflow, startWaitPoller, stopWaitPoller, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry, initWorkflows, dispatchScheduleTarget, calculateNextRun, startScheduler, stopScheduler, runScheduleNow, parseSkillContent, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, toolErr, createToolRegistrar, warnIfCorsAllowsAnyOrigin, isOriginAllowedForCredentials, allowedCredentialRedirect, setCorsHeaders, parseQueryParams, getPathSegments, wireHttpSpanLifecycle, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, writeUnhandledError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, runtimeInstanceHeader, describeRequestRoute, route, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError, isRegistered, isExtensionAgentId, getExtensionBridgeToken, resolveBridgeCallOrigin, extensionIdForAgent, runContext, registerLoaded, unregister, listRegistered, dispatchPre, dispatchPost, stripSiblingBlock, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, isAzureDevOpsEnabled, initAzureDevOps, verifyAzureDevOpsWebhook, isAzureDevOpsUrl, canonicalAzureDevOpsRepoUrl, parseAzureDevOpsRepoUrl, createdPullRequestOf, commentedPayloadOf, handlePullRequestCreated, handlePullRequestCommented, AGENT_MAX_TASKS_CONFIG_KEY, reconcileAgentMaxTasksPolicy, resetAgentMaxTasksMirror, upsertSwarmConfigWithPolicyMirror, runtimeStaleThresholdMinutes, upsertRuntimeInstance, getRuntimeInstanceById, touchRuntimeInstance, countActiveRuntimeInstancesForAgent, listRuntimeInstancesForAgent, setRuntimeCredentialReady, reconcileAgentStatusFromRuntimes, agentsWithLiveRuntime, expireStaleRuntimeInstances, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2 as handleIssue1, handleNote, handlePipeline, repointTrackerSyncBySwarmId, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, parseCookieHeader, extractAndVerifyCookie, issuePageSessionCookie, resolveHttpRequestAuth, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, userCtx, resolveTaskAuditUserId, resolveHttpAuditUserId, resolveHttpFavoriteOwner, handleApps, cancelApprovalRequest, cancelApprovalRequestAndRun, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, reservedRoomKeyError, updateMcpServerChecked, updateTouchesStdioExecution, MemoryKeyError, refreshLinks, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, indexMemoryContent, isApiDraining, drainApi, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, changesAllowMerge, updateSwarmRepoChecked, getCombConfig, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, MEMORY_KEYS_DEFAULT_PREFIX, MEMORY_KEYS_MAX_LIMIT, estimateTokens, posteriorMean, listMemoryKeys, checkChunkIntegrity, getMemoryChunks, getPosteriorsByIds, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, taskActionInputSchema, taskActionOutputSchema, taskActionHandler, workflowModelErrors, patchWorkflowDefinition, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };
+export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, findUserById, findUserByExternalId, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, mintSessionToken, revokeSessionToken, fingerprintApiKey, resolveIdentity, renderIdentity, createAdditiveBuffer, listHarnessModelSupport, recordHarnessModelSupport, agentRanModel, getAgentHarnessCliVersion, setAgentHarnessCliVersion, sanitizeModelTierOverrides, parseModelTierOverridesHeader, setAgentModelTierOverrides, previewModelTiers, recordClaimModelResolution, harnessModelErrorFor, poolTaskRunsOnHarness, explicitModelError, explicitModelErrorForAgent, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, automationIntegrationFixUrl, preflightAutomation, getAutomationSetupStates, listEnabledAutomationPreflightInputs, validateJsonSchema, workflowSaveWarnings, TriggerSchemaError, startWorkflowExecution, setupWorkflowResumeListener, retryFailedRun, cancelWorkflowRun, resumeWaitState, initWaitBusSubscriptions, subscribeWaitToBus, recoverIncompleteRuns, startRetryPoller, stopRetryPoller, validateTemplateVariables, instantiateTemplate, handleWebhookTrigger, logOpenWebhookTriggers, handleEventTrigger, handleScheduleTrigger, verifyHmacSignature, WebhookError, snapshotWorkflow, snapshotAndUpdateWorkflow, startWaitPoller, stopWaitPoller, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry, initWorkflows, dispatchScheduleTarget, calculateNextRun, startScheduler, stopScheduler, runScheduleNow, parseSkillContent, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, hasKvViewArgs, resolveKvView, toolErr, createToolRegistrar, warnIfCorsAllowsAnyOrigin, isOriginAllowedForCredentials, allowedCredentialRedirect, setCorsHeaders, parseQueryParams, getPathSegments, wireHttpSpanLifecycle, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, writeUnhandledError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, runtimeInstanceHeader, describeRequestRoute, route, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError, isRegistered, isExtensionAgentId, getExtensionBridgeToken, resolveBridgeCallOrigin, extensionIdForAgent, runContext, registerLoaded, unregister, listRegistered, dispatchPre, dispatchPost, stripSiblingBlock, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, isAzureDevOpsEnabled, initAzureDevOps, verifyAzureDevOpsWebhook, isAzureDevOpsUrl, canonicalAzureDevOpsRepoUrl, parseAzureDevOpsRepoUrl, createdPullRequestOf, commentedPayloadOf, handlePullRequestCreated, handlePullRequestCommented, AGENT_MAX_TASKS_CONFIG_KEY, reconcileAgentMaxTasksPolicy, resetAgentMaxTasksMirror, upsertSwarmConfigWithPolicyMirror, runtimeStaleThresholdMinutes, upsertRuntimeInstance, getRuntimeInstanceById, touchRuntimeInstance, countActiveRuntimeInstancesForAgent, listRuntimeInstancesForAgent, setRuntimeCredentialReady, reconcileAgentStatusFromRuntimes, agentsWithLiveRuntime, expireStaleRuntimeInstances, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2 as handleIssue1, handleNote, handlePipeline, repointTrackerSyncBySwarmId, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, parseCookieHeader, extractAndVerifyCookie, issuePageSessionCookie, resolveHttpRequestAuth, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, userCtx, resolveTaskAuditUserId, resolveHttpAuditUserId, resolveHttpFavoriteOwner, handleApps, cancelApprovalRequest, cancelApprovalRequestAndRun, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, reservedRoomKeyError, updateMcpServerChecked, updateTouchesStdioExecution, MemoryKeyError, refreshLinks, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, indexMemoryContent, isApiDraining, drainApi, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, changesAllowMerge, updateSwarmRepoChecked, getCombConfig, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, MEMORY_KEYS_DEFAULT_PREFIX, MEMORY_KEYS_MAX_LIMIT, estimateTokens, posteriorMean, listMemoryKeys, checkChunkIntegrity, getMemoryChunks, getPosteriorsByIds, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, workflowModelErrors, patchWorkflowDefinition, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };