@desplega.ai/agent-swarm 1.165.0 → 1.166.0

package/dist/{work-objects-ctg7t70w.js → work-objects-3nh4ymzb.js}

@@ -1,31 +1,28 @@
 import {
   isUserAllowed
-} from "./cli-90v942q1.js";
-import"./cli-8gpbwy09.js";
-import"./cli-j0pdrmwg.js";
-import"./cli-50eg13rj.js";
-import"./cli-x7afk5wm.js";
-import"./cli-420bdgw0.js";
+} from "./cli-cpfmqz3n.js";
+import"./cli-dw2q9f7g.js";
+import"./cli-x7kpr72a.js";
+import"./cli-df56tqdw.js";
+import"./cli-xvc3q9br.js";
+import"./cli-mv2520nm.js";
 import"./cli-w0bwte75.js";
 import"./cli-re8z5p8p.js";
-import"./cli-k6xx3pve.js";
-import"./cli-e7t4snpa.js";
-import"./cli-nfygw434.js";
-import"./cli-xtgtyafv.js";
+import"./cli-0nhdwxd5.js";
+import"./cli-rggdq8wq.js";
+import"./cli-ysnyhws9.js";
+import"./cli-jvj6a0cv.js";
 import"./cli-epan13p1.js";
 import"./cli-f14fvzag.js";
 import"./cli-zt3w1cn1.js";
-import"./cli-xb3c6aat.js";
-import"./cli-ftry7975.js";
+import"./cli-f2n17zhp.js";
+import"./cli-feh3dkah.js";
 import"./cli-3dpj7atn.js";
 import"./cli-2x0e561b.js";
 import"./cli-pkke6geq.js";
 import"./cli-rb9m6rpe.js";
 import"./cli-mzfth0bp.js";
-import"./cli-jqt9hrnz.js";
-import"./cli-yhmwmv0g.js";
-import"./cli-wfajtmf7.js";
-import"./cli-a87b04k8.js";
+import"./cli-j2jbr8af.js";
 import"./cli-fad8m16k.js";
 import"./cli-bsakbbkm.js";
 import"./cli-zxg80zs9.js";
@@ -34,10 +31,9 @@ import"./cli-ydt3zkwv.js";
 import {
   getTaskUrl,
   slackTaskOutput
-} from "./cli-0n4fasz0.js";
+} from "./cli-ecknp7p1.js";
 import"./cli-q51yprfq.js";
 import"./cli-3er6gcsn.js";
-import"./cli-cvk6yzw5.js";
 import"./cli-yatxqynm.js";
 import"./cli-b0f70z24.js";
 import"./cli-nexwh8zg.js";
@@ -46,16 +42,16 @@ import"./cli-1m2e086m.js";
 import"./cli-bzr0ftht.js";
 import"./cli-bd957dgb.js";
 import"./cli-pzxba7gw.js";
-import"./cli-xnzrzets.js";
+import"./cli-8kgvmkak.js";
 import"./cli-rfphkzh5.js";
 import {
   getAgentById,
   getTaskById,
-  init_db
-} from "./cli-qdv8kgz7.js";
-import"./cli-9s3h836g.js";
+  init_db1 as init_db
+} from "./cli-yshaazs1.js";
+import"./cli-xvdgasgy.js";
 import"./cli-3qhyh31j.js";
-import"./cli-3a4m1aws.js";
+import"./cli-jhm6hzjn.js";
 import"./cli-7mm2r1kp.js";
 import"./cli-g5erf0zt.js";
 import"./cli-dmtrxqhg.js";
@@ -73,10 +69,10 @@ import {
 import"./cli-zsh093hk.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-1kzfvd1z.js";
-import"./cli-hpryr6em.js";
+import"./cli-4r1sjfc4.js";
+import"./cli-mb75wpxf.js";
 import"./cli-zf8jjwex.js";
-import"./cli-h1spv8v4.js";
+import"./cli-wt7ccy4r.js";
 import"./cli-bc05qbss.js";
 
 // src/slack/work-objects.ts

package/dist/{worker-5dp0xm55.js → worker-qa9fkz5s.js}

@@ -1,73 +1,69 @@
 import {
   runAgent
-} from "./cli-bns5c8k9.js";
+} from "./cli-vzc73wet.js";
 import"./cli-9q3wt23f.js";
-import"./cli-9xb89xca.js";
-import"./cli-amwhs8h2.js";
-import"./cli-5anb0ev3.js";
-import"./cli-28smfvbn.js";
-import"./cli-59jn5twa.js";
+import"./cli-68r1j4sg.js";
+import"./cli-fn697bnt.js";
+import"./cli-3qn4r334.js";
+import"./cli-8t229cmr.js";
+import"./cli-h3x613ze.js";
 import"./cli-hsxj0yar.js";
-import"./cli-mmzwwptd.js";
-import"./cli-zn2v3t8v.js";
-import"./cli-gh5yqzpe.js";
-import"./cli-pjxnr1jn.js";
+import"./cli-hf5s9pgf.js";
+import"./cli-3ddybbbx.js";
+import"./cli-v2a8x45d.js";
+import"./cli-mwegs4af.js";
 import"./cli-9k7mqz00.js";
 import"./cli-gt4hxb8p.js";
-import"./cli-n9ehc28t.js";
-import"./cli-bdv39kgj.js";
-import"./cli-zvckv750.js";
+import"./cli-0qjcsxgz.js";
+import"./cli-rsy933yz.js";
+import"./cli-y59h2pk9.js";
 import"./cli-v6vv7dy8.js";
 import"./cli-q2j38vre.js";
 import"./cli-zm7njwzd.js";
 import"./cli-ptcz1cqy.js";
 import"./cli-32bca7nr.js";
-import"./cli-5b2fjjzh.js";
+import"./cli-p4ztb80h.js";
 import"./cli-hp1n6zq3.js";
 import"./cli-tng3131n.js";
 import"./cli-5bfdm1ah.js";
 import"./cli-efnd2kce.js";
-import"./cli-fw6vdcq5.js";
+import"./cli-zp67qg5x.js";
 import"./cli-bqjfjex4.js";
 import"./cli-eree7rnv.js";
 import"./cli-2pdaysab.js";
 import"./cli-ttbsse3f.js";
-import"./cli-ma3zvh39.js";
+import"./cli-zy7vwsne.js";
 import"./cli-dpvkp2et.js";
 import {
   getEnabledCapabilities
-} from "./cli-50eg13rj.js";
-import"./cli-x7afk5wm.js";
-import"./cli-420bdgw0.js";
+} from "./cli-df56tqdw.js";
+import"./cli-xvc3q9br.js";
+import"./cli-mv2520nm.js";
 import"./cli-w0bwte75.js";
 import"./cli-re8z5p8p.js";
-import"./cli-k6xx3pve.js";
-import"./cli-e7t4snpa.js";
-import"./cli-nfygw434.js";
-import"./cli-xtgtyafv.js";
+import"./cli-0nhdwxd5.js";
+import"./cli-rggdq8wq.js";
+import"./cli-ysnyhws9.js";
+import"./cli-jvj6a0cv.js";
 import"./cli-epan13p1.js";
 import"./cli-f14fvzag.js";
 import"./cli-zt3w1cn1.js";
-import"./cli-xb3c6aat.js";
-import"./cli-ftry7975.js";
+import"./cli-f2n17zhp.js";
+import"./cli-feh3dkah.js";
 import"./cli-3dpj7atn.js";
 import"./cli-2x0e561b.js";
 import"./cli-pkke6geq.js";
 import"./cli-rb9m6rpe.js";
 import"./cli-mzfth0bp.js";
-import"./cli-jqt9hrnz.js";
-import"./cli-yhmwmv0g.js";
-import"./cli-wfajtmf7.js";
-import"./cli-a87b04k8.js";
+import"./cli-j2jbr8af.js";
 import"./cli-fad8m16k.js";
 import"./cli-bsakbbkm.js";
 import"./cli-zxg80zs9.js";
 import"./cli-51tf7ac3.js";
 import"./cli-ydt3zkwv.js";
-import"./cli-0n4fasz0.js";
+import"./cli-ecknp7p1.js";
 import"./cli-q51yprfq.js";
 import"./cli-3er6gcsn.js";
-import"./cli-cvk6yzw5.js";
 import"./cli-yatxqynm.js";
 import"./cli-b0f70z24.js";
 import"./cli-nexwh8zg.js";
@@ -76,12 +72,12 @@ import"./cli-1m2e086m.js";
 import"./cli-bzr0ftht.js";
 import"./cli-bd957dgb.js";
 import"./cli-pzxba7gw.js";
-import"./cli-xnzrzets.js";
+import"./cli-8kgvmkak.js";
 import"./cli-rfphkzh5.js";
-import"./cli-qdv8kgz7.js";
-import"./cli-9s3h836g.js";
+import"./cli-yshaazs1.js";
+import"./cli-xvdgasgy.js";
 import"./cli-3qhyh31j.js";
-import"./cli-3a4m1aws.js";
+import"./cli-jhm6hzjn.js";
 import"./cli-7mm2r1kp.js";
 import"./cli-g5erf0zt.js";
 import"./cli-dmtrxqhg.js";
@@ -96,10 +92,10 @@ import"./cli-ej6gbxfb.js";
 import"./cli-zsh093hk.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-1kzfvd1z.js";
-import"./cli-hpryr6em.js";
+import"./cli-4r1sjfc4.js";
+import"./cli-mb75wpxf.js";
 import"./cli-zf8jjwex.js";
-import"./cli-h1spv8v4.js";
+import"./cli-wt7ccy4r.js";
 import"./cli-knd276ed.js";
 import"./cli-bc05qbss.js";
 

package/dist/{x-v3yw66zs.js → x-ma4gnfgy.js}

@@ -3,11 +3,11 @@ import {
   executeComposioRequest,
   formatComposioResultForCli,
   parseComposioArgs
-} from "./cli-x7afk5wm.js";
+} from "./cli-xvc3q9br.js";
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-h1spv8v4.js";
+} from "./cli-wt7ccy4r.js";
 import"./cli-bc05qbss.js";
 
 // src/commands/x.ts

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "1.165.0",
+    "version": "1.166.0",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [
@@ -755,6 +755,8 @@
             "type": "string",
             "enum": [
               "opencode",
+              "gemini",
+              "copilot",
               "custom"
             ]
           },
@@ -9638,7 +9640,7 @@
             }
           },
           "400": {
-            "description": "Invalid or disallowed SQL",
+            "description": "Invalid or disallowed SQL, including queries that read credential tables",
             "content": {
               "application/json": {
                 "schema": {
@@ -10286,6 +10288,7 @@
                         "enum": [
                           "opencode",
                           "gemini",
+                          "copilot",
                           "custom"
                         ]
                       },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "1.165.0",
+  "version": "1.166.0",
   "description": "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
   "keywords": [
     "agent-swarm.dev",
@@ -95,6 +95,8 @@
     "check:extension-schema": "bun scripts/build-extension-manifest-schema.ts --check",
     "build:extension-catalog": "bun scripts/build-extension-catalog.ts",
     "check:extension-catalog": "bun scripts/build-extension-catalog.ts --check",
+    "build:secret-rules": "bun scripts/gen-secret-rules.ts",
+    "check:secret-rules": "bun scripts/gen-secret-rules.ts --check",
     "build:cli": "bun run scripts/build-cli.ts",
     "mono:build": "turbo run build",
     "mono:test": "turbo run test",
@@ -200,20 +202,21 @@
   "dependencies": {
     "@agentclientprotocol/sdk": "1.7.0",
     "@ai-sdk/openai": "^3.0.41",
-    "@anthropic-ai/claude-agent-sdk": "0.3.292",
-    "@anthropic-ai/sdk": "^0.131.0",
+    "@anthropic-ai/claude-agent-sdk": "0.3.293",
+    "@anthropic-ai/sdk": "^0.132.0",
     "@asteasolutions/zod-to-openapi": "^8.0.0",
     "@aws-sdk/client-bedrock": "3.1048.0",
-    "@cursor/sdk": "1.0.36",
+    "@cursor/sdk": "1.0.37",
     "@desplega.ai/business-use": "^0.4.2",
     "@desplega.ai/localtunnel": "^2.2.0",
     "@earendil-works/pi-agent-core": "^1.0.4",
     "@earendil-works/pi-ai": "^1.0.4",
     "@earendil-works/pi-coding-agent": "^1.0.4",
     "@inkjs/ui": "^2.0.0",
+    "@jitl/quickjs-singlefile-mjs-release-sync": "0.32.0",
     "@linear/sdk": "^77.0.0",
     "@modelcontextprotocol/sdk": "1.29.0",
-    "@openai/codex": "0.160.1",
+    "@openai/codex": "0.161.0",
     "@opencode-ai/sdk": "^1.18.35",
     "@openfort/openfort-node": "^0.9.1",
     "@opentelemetry/api": "^1.9.1",
@@ -237,6 +240,7 @@
     "ink": "^6.5.1",
     "oauth4webapi": "^3.8.5",
     "openai": "^6.22.0",
+    "quickjs-emscripten-core": "0.32.0",
     "react": "19.2.3",
     "react-devtools-core": "^7.0.1",
     "sqlite-vec": "^0.1.9",

package/src/be/automation-preflight.ts

@@ -1,8 +1,10 @@
 import type { AutomationIntegrationId, ScheduledTask, Workflow } from "@/types";
 import { getSlackConfiguration, isSlackConfigured } from "../slack/config";
 import { isEnvFlagEnabled } from "../utils/env-flag";
+import { scrubSecrets } from "../utils/secret-scrubber";
 import { getDbClient } from "./db";
 import { getOAuthApp, getOAuthTokens } from "./db-queries/oauth";
+import { scrubJsonValue } from "./scrub-json";
 
 export type AutomationKind = "schedule" | "workflow";
 export type AutomationState = "running" | "needs_setup";
@@ -349,6 +351,9 @@ export async function recordSchedulePreflightFailure(
   failureReason: string,
   now: Date = new Date(),
 ): Promise<boolean> {
+  // Scrub before the same-day dedup compare: the stored message is scrubbed,
+  // so a raw reason would never match it and the dedup would stop working.
+  const message = scrubSecrets(failureReason);
   return await getDbClient().transaction(async (tx) => {
     const row = await tx.get<{ lastErrorAt: string | null; lastErrorMessage: string | null }>(
       "SELECT lastErrorAt, lastErrorMessage FROM scheduled_tasks WHERE id = ?",
@@ -356,7 +361,7 @@ export async function recordSchedulePreflightFailure(
     );
     if (!row) return false;
     if (
-      row.lastErrorMessage === failureReason &&
+      row.lastErrorMessage === message &&
       row.lastErrorAt?.slice(0, 10) === now.toISOString().slice(0, 10)
     ) {
       return false;
@@ -365,7 +370,7 @@ export async function recordSchedulePreflightFailure(
       `UPDATE scheduled_tasks
        SET lastErrorAt = ?, lastErrorMessage = ?, lastUpdatedAt = ?
        WHERE id = ?`,
-      [now.toISOString(), failureReason, now.toISOString(), scheduleId],
+      [now.toISOString(), message, now.toISOString(), scheduleId],
     );
     return true;
   });
@@ -404,8 +409,8 @@ export async function recordWorkflowPreflightFailure(input: {
         runId,
         input.workflowId,
         input.triggerType,
-        input.triggerData === undefined ? null : JSON.stringify(input.triggerData),
-        input.failureReason,
+        input.triggerData === undefined ? null : scrubJsonValue(input.triggerData),
+        scrubSecrets(input.failureReason),
         input.createdBy ?? null,
         timestamp,
         timestamp,

package/src/be/boot-scrub-sweep.ts

@@ -0,0 +1,302 @@
+/**
+ * Versioned boot retro-sweep: re-scrub stored free-text columns whenever the
+ * redaction rules change.
+ *
+ * Rows written before a scrubber rule existed keep the secret it would now
+ * catch. This sweep re-runs `scrubSecrets` over every target column once per
+ * `SCRUBBER_RULES_VERSION` and redacts matching rows IN PLACE (irreversible;
+ * a redaction, not a deletion). The done marker is
+ * `seed_state(kind='maintenance', key='boot-scrub-v<N>')`, so bumping the
+ * version re-runs it on the next boot.
+ *
+ * Restart-safe: each target keeps an id cursor in seed_state
+ * (`boot-scrub-v<N>:<table>:cursor`), saved in the same transaction as the
+ * batch's writes, so a restart resumes after the last committed batch.
+ *
+ * Non-blocking: the regexes run OUTSIDE the write lock. Each batch is read,
+ * scrubbed in JS, and only the changed rows plus the cursor go into one short
+ * transaction. Every UPDATE is compare-and-set on the value that was read, so
+ * a row a concurrent writer moved in between is skipped, never clobbered. The
+ * loop yields between batches so /health and probes stay responsive.
+ *
+ * Replay state: `workflow_run_steps.output` and `workflow_runs.context` are
+ * also replayed by resume and recovery. A row written before the sealed
+ * `*_replay` columns existed has only the plain value, so before redacting it
+ * the sweep seals the original into the empty replay column (same CAS write).
+ *
+ * Logs counts only, never content.
+ */
+
+import { contentSha256 } from "@/commands/profile-sync";
+import { SCRUBBER_RULES_VERSION, scrubSecrets } from "../utils/secret-scrubber";
+import { getDbClient } from "./db";
+import type { DbExecutor, DbParam } from "./db-client";
+import { getMemoryStore } from "./memory";
+import type { MemoryScrubFields } from "./memory/types";
+import { breaksJsonValidity } from "./scrub-json";
+import { sealJson } from "./sealed-json";
+
+const DEFAULT_BATCH_SIZE = 200;
+
+/** Yield to the event loop so probes can respond. */
+const yieldTick = () => new Promise<void>((r) => setTimeout(r, 5));
+
+type SweepTarget = {
+  table: string;
+  columns: string[];
+  /** Recompute `hashColumn = sha256(sourceColumn)` when the source changes. */
+  hash?: { column: string; of: string };
+  /** Route writes through the memory store (FTS sync + embedding reset). */
+  memory?: boolean;
+  /**
+   * `column -> sealed replay column`. When the sweep redacts `column` and the
+   * replay column is NULL, it seals the original there first.
+   */
+  replay?: Record<string, string>;
+};
+
+/** Swept in this order. Every table has a TEXT `id` primary key. */
+export const BOOT_SCRUB_TARGETS: readonly SweepTarget[] = [
+  { table: "session_logs", columns: ["content"] },
+  { table: "agent_tasks", columns: ["task", "output", "failureReason", "progress"] },
+  { table: "agent_memory", columns: ["name", "content", "summary"], memory: true },
+  {
+    table: "agent_memory_version",
+    columns: ["content"],
+    hash: { column: "contentHash", of: "content" },
+  },
+  { table: "events", columns: ["data"] },
+  {
+    table: "workflow_run_steps",
+    columns: ["input", "output", "error", "diagnostics"],
+    replay: { output: "output_replay" },
+  },
+  {
+    table: "workflow_runs",
+    columns: ["triggerData", "context", "error"],
+    replay: { context: "context_replay" },
+  },
+];
+
+export type BootScrubTableStats = {
+  table: string;
+  scanned: number;
+  changed: number;
+  skippedInvalidJson: number;
+};
+
+export type BootScrubSweepOptions = {
+  /** Rules version to key on. Defaults to `SCRUBBER_RULES_VERSION` (tests inject). */
+  version?: number;
+  batchSize?: number;
+  /** Scrub function. Defaults to `scrubSecrets` (tests inject to force edge cases). */
+  scrub?: (text: string) => string;
+  /**
+   * Test hook, called after each batch commits with the ids it scanned. A
+   * throw aborts the run with the cursor already saved.
+   */
+  afterBatch?: (info: { table: string; ids: string[] }) => void | Promise<void>;
+  /** Re-embed redacted memory rows after the sweep. Default true. */
+  reembed?: boolean;
+};
+
+export function bootScrubDoneKey(version: number): string {
+  return `boot-scrub-v${version}`;
+}
+
+export function bootScrubCursorKey(version: number, table: string): string {
+  return `boot-scrub-v${version}:${table}:cursor`;
+}
+
+/**
+ * Run the sweep for the current rules version. Returns per-table stats, or
+ * null when this version was already swept.
+ */
+export async function runBootScrubSweep(
+  opts: BootScrubSweepOptions = {},
+): Promise<BootScrubTableStats[] | null> {
+  const version = opts.version ?? SCRUBBER_RULES_VERSION;
+  const doneKey = bootScrubDoneKey(version);
+  const done = await getDbClient().get<{ key: string }>(
+    "SELECT key FROM seed_state WHERE kind = 'maintenance' AND key = ?",
+    [doneKey],
+  );
+  if (done) return null;
+
+  const tag = `boot-scrub-v${version}`;
+  console.log(`[${tag}] starting`);
+
+  const stats: BootScrubTableStats[] = [];
+  for (const target of BOOT_SCRUB_TARGETS) {
+    const tableStats = await sweepTarget(target, version, opts);
+    stats.push(tableStats);
+    console.log(
+      `${tag}: ${target.table} scanned=${tableStats.scanned} changed=${tableStats.changed} skipped_invalid_json=${tableStats.skippedInvalidJson}`,
+    );
+  }
+
+  await getDbClient().transaction(async (tx) => {
+    await tx.run(
+      `INSERT INTO seed_state (kind, key, seededHash, seededAt)
+       VALUES ('maintenance', ?, 'done', datetime('now'))
+       ON CONFLICT (kind, key) DO UPDATE SET seededHash = 'done', seededAt = datetime('now')`,
+      [doneKey],
+    );
+    await tx.run("DELETE FROM seed_state WHERE kind = 'maintenance' AND key LIKE ? ESCAPE '!'", [
+      `${doneKey.replace(/[!%_]/g, "!$&")}:%:cursor`,
+    ]);
+  });
+  console.log(`[${tag}] complete`);
+
+  const memoryChanged = stats.find((s) => s.table === "agent_memory")?.changed ?? 0;
+  if (memoryChanged > 0 && opts.reembed !== false) {
+    // Redacted memory rows lost their embedding; regenerate from scrubbed text.
+    const { runBootReembed } = await import("./memory/boot-reembed");
+    await runBootReembed();
+  }
+
+  return stats;
+}
+
+async function sweepTarget(
+  target: SweepTarget,
+  version: number,
+  opts: BootScrubSweepOptions,
+): Promise<BootScrubTableStats> {
+  const client = getDbClient();
+  const scrub = opts.scrub ?? scrubSecrets;
+  const batchSize = opts.batchSize ?? DEFAULT_BATCH_SIZE;
+  const cursorKey = bootScrubCursorKey(version, target.table);
+  const stats: BootScrubTableStats = {
+    table: target.table,
+    scanned: 0,
+    changed: 0,
+    skippedInvalidJson: 0,
+  };
+
+  let cursor =
+    (
+      await client.get<{ seededHash: string }>(
+        "SELECT seededHash FROM seed_state WHERE kind = 'maintenance' AND key = ?",
+        [cursorKey],
+      )
+    )?.seededHash ?? "";
+
+  const selectCols = [
+    "id",
+    ...target.columns,
+    ...(target.hash && !target.columns.includes(target.hash.column) ? [target.hash.column] : []),
+    ...Object.values(target.replay ?? {}),
+  ];
+
+  for (;;) {
+    const rows = await client.query<Record<string, string | null>>(
+      `SELECT ${selectCols.join(", ")} FROM ${target.table}
+       WHERE id > ? ORDER BY id ASC LIMIT ?`,
+      [cursor, batchSize],
+    );
+    if (rows.length === 0) break;
+
+    // Scrub outside the transaction: regexes never run under the write lock.
+    const pending: {
+      id: string;
+      before: Record<string, string | null>;
+      after: Record<string, string | null>;
+    }[] = [];
+    for (const row of rows) {
+      const after: Record<string, string | null> = {};
+      let differs = false;
+      let breaksJson = false;
+      for (const col of target.columns) {
+        const value = row[col];
+        if (typeof value !== "string" || value.length === 0) {
+          after[col] = value ?? null;
+          continue;
+        }
+        const cleaned = scrub(value);
+        after[col] = cleaned;
+        if (cleaned !== value) {
+          differs = true;
+          if (breaksJsonValidity(value, cleaned)) breaksJson = true;
+        }
+      }
+      if (!differs) continue;
+      if (breaksJson) {
+        stats.skippedInvalidJson++;
+        continue;
+      }
+      for (const [col, replayCol] of Object.entries(target.replay ?? {})) {
+        const value = row[col];
+        if (after[col] === value || typeof value !== "string" || row[replayCol] != null) continue;
+        try {
+          after[replayCol] = sealJson(JSON.parse(value));
+        } catch {
+          // Not JSON, so nothing replays it.
+        }
+      }
+      pending.push({ id: row.id as string, before: row, after });
+    }
+
+    const batchLastId = rows[rows.length - 1]!.id as string;
+    await client.transaction(async (tx) => {
+      for (const { id, before, after } of pending) {
+        const wrote = target.memory
+          ? await rewriteMemoryRow(id, before, after)
+          : await rewriteRow(tx, target, id, before, after);
+        if (wrote) stats.changed++;
+      }
+      await tx.run(
+        `INSERT INTO seed_state (kind, key, seededHash, seededAt)
+         VALUES ('maintenance', ?, ?, datetime('now'))
+         ON CONFLICT (kind, key) DO UPDATE SET seededHash = excluded.seededHash, seededAt = datetime('now')`,
+        [cursorKey, batchLastId],
+      );
+    });
+
+    stats.scanned += rows.length;
+    cursor = batchLastId;
+    await opts.afterBatch?.({ table: target.table, ids: rows.map((r) => r.id as string) });
+    await yieldTick();
+  }
+
+  return stats;
+}
+
+async function rewriteRow(
+  tx: DbExecutor,
+  target: SweepTarget,
+  id: string,
+  before: Record<string, string | null>,
+  after: Record<string, string | null>,
+): Promise<boolean> {
+  const changedCols = target.columns.filter((c) => after[c] !== before[c]);
+  // Replay columns the sweep fills: only while still NULL (guarded below).
+  const sealedCols = Object.values(target.replay ?? {}).filter((c) => after[c] !== undefined);
+  const sets = [...changedCols, ...sealedCols].map((c) => `${c} = ?`);
+  const params: DbParam[] = [...changedCols, ...sealedCols].map((c) => after[c] ?? null);
+  if (target.hash && changedCols.includes(target.hash.of)) {
+    sets.push(`${target.hash.column} = ?`);
+    params.push(contentSha256(after[target.hash.of] ?? ""));
+  }
+  // Compare-and-set on every changed column.
+  const guards = [...changedCols.map((c) => `${c} IS ?`), ...sealedCols.map((c) => `${c} IS NULL`)];
+  params.push(id, ...changedCols.map((c) => before[c] ?? null));
+  const result = await tx.run(
+    `UPDATE ${target.table} SET ${sets.join(", ")} WHERE id = ? AND ${guards.join(" AND ")}`,
+    params,
+  );
+  return result.changes > 0;
+}
+
+async function rewriteMemoryRow(
+  id: string,
+  before: Record<string, string | null>,
+  after: Record<string, string | null>,
+): Promise<boolean> {
+  const pick = (r: Record<string, string | null>): MemoryScrubFields => ({
+    name: r.name ?? "",
+    content: r.content ?? "",
+    summary: r.summary ?? null,
+  });
+  return getMemoryStore().rewriteForScrub(id, pick(before), pick(after));
+}