@desplega.ai/agent-swarm 1.165.0 → 1.167.0

package/dist/{cli-50eg13rj.js → cli-wydz3feg.js}

@@ -2,12 +2,12 @@ import {
   COMPOSIO_HTTP_METHODS,
   composioArgsFromParts,
   executeComposioRequest
-} from "./cli-x7afk5wm.js";
+} from "./cli-xvc3q9br.js";
 import {
   ampModelError,
   ampPinCatalogError,
   ampPinProviderError
-} from "./cli-420bdgw0.js";
+} from "./cli-mv2520nm.js";
 import {
   LlmRater,
   REFERENCES_SOURCE_MAX_LENGTH,
@@ -20,7 +20,7 @@ import {
 import {
   ensurePricingSeeded,
   ensureRbacSeeded
-} from "./cli-k6xx3pve.js";
+} from "./cli-tx2zvn23.js";
 import {
   buildCatalogEntries,
   getCatalogGeneration,
@@ -30,10 +30,10 @@ import {
   requestModelCatalogRefresh,
   startPricingRefreshLoop,
   upsertModelCatalogOverlay
-} from "./cli-e7t4snpa.js";
+} from "./cli-p8rt8spp.js";
 import {
   loadModelsDevCache
-} from "./cli-nfygw434.js";
+} from "./cli-v1pwxreq.js";
 import {
   AppDefinitionSchema,
   AppElementsSchema,
@@ -64,7 +64,6 @@ import {
   decodeAppDefinition,
   definitionNodeIds,
   deleteApp,
-  deleteScript,
   disableCredentialBinding,
   extractArgsJsonSchema,
   extractScriptSignature,
@@ -75,12 +74,9 @@ import {
   getOAuthBindingTokenStatus,
   getOAuthProviderConfig,
   getSavedScriptOwnerAgentId,
-  getScript,
   getScriptApiConnectionDescriptors,
-  getScriptById,
   getScriptConnectionById,
   getScriptMcpConnectionDescriptors,
-  getScriptVersion,
   getSuccessors,
   isIso8601Date,
   listApps,
@@ -95,7 +91,6 @@ import {
   resolveSyncRunAs,
   resolveValidationPort,
   resolveWorkflowLlmConfig,
-  restoreScratchScriptLastUsedIfUnchanged,
   runSavedScriptAsAgent,
   runScript,
   sandboxSpawnEnv,
@@ -103,17 +98,15 @@ import {
   snapshotCapped,
   systemOneRetryViolations,
   systemOneUnresolvedError,
-  touchScratchScriptLastUsed,
   typecheckScript,
   updateApp,
   upgradeAppDefinition,
   upsertCredentialBinding,
-  upsertScriptByName,
   upsertScriptConnection,
   validateDefinition,
   validateScriptImports,
   writeBareImportShim
-} from "./cli-xtgtyafv.js";
+} from "./cli-577bxkf6.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
@@ -122,51 +115,18 @@ import {
   registerProcessGroup,
   terminateProcessGroup
 } from "./cli-zt3w1cn1.js";
-import {
-  AgentFsProvider,
-  getFileStorageProvider,
-  providerPath
-} from "./cli-mzfth0bp.js";
-import {
-  embedScript
-} from "./cli-jqt9hrnz.js";
-import {
-  CANDIDATE_SET_MULTIPLIER,
-  LONGTERM_ROOT,
-  MEMORY_KEY_MAX_LENGTH,
-  MEMORY_KEY_PATTERN,
-  MEMORY_KEY_PATTERN_MESSAGE,
-  computeScore,
-  consolidatedKeyMessage,
-  getEmbeddingProvider,
-  getMemoryStore,
-  init_constants as init_constants2,
-  init_key_paths,
-  init_reranker,
-  init_sqlite_store,
-  isConsolidatedKey,
-  isGraphExpansionEnabled,
-  isLongtermKey,
-  longtermKeyError,
-  rerank,
-  resolveStoreKey,
-  rowToCandidate
-} from "./cli-yhmwmv0g.js";
 import {
   buildAuthorizationUrl,
-  createOAuthApp,
   ensureAuthorizationTokenOrThrow,
   ensureToken,
   ensureTokenOrThrow,
-  getAuthorizationById,
-  getOAuthApp,
-  getOAuthAppById,
-  getOAuthAppIdByProvider,
-  getOAuthTokens,
-  listAuthorizationsForApp,
-  onAuthorizationRefreshed,
-  upsertOAuthApp
-} from "./cli-a87b04k8.js";
+  onAuthorizationRefreshed
+} from "./cli-kw0jcfje.js";
+import {
+  AgentFsProvider,
+  getFileStorageProvider,
+  providerPath
+} from "./cli-mzfth0bp.js";
 import {
   ZodFirstPartyTypeKind,
   objectType
@@ -196,16 +156,11 @@ import {
   taskCitationWarnings,
   upsertTaskCitations,
   withSpan
-} from "./cli-0n4fasz0.js";
-import {
-  init_task_attachment_links,
-  taskAttachmentDisplayUrl,
-  taskAttachmentFetchCommand
-} from "./cli-cvk6yzw5.js";
+} from "./cli-c8r99akr.js";
 import {
   getUserGrant,
   init_rbac_roles
-} from "./cli-xnzrzets.js";
+} from "./cli-ypgba1a8.js";
 import {
   can,
   decideAdmission,
@@ -217,16 +172,23 @@ import {
 } from "./cli-rfphkzh5.js";
 import {
   API_DRAIN_MAX_MS_LIMIT,
+  CANDIDATE_SET_MULTIPLIER,
   CredentialBindingSchema,
   EXTENSION_AGENT_ROLE,
   KvTypeCollisionError,
+  LONGTERM_ROOT,
   MAX_EMPTY_POLLS,
+  MEMORY_KEY_MAX_LENGTH,
+  MEMORY_KEY_PATTERN,
+  MEMORY_KEY_PATTERN_MESSAGE,
   SteeringRequestError,
+  WorkflowReplayStateError,
   acceptTask,
   agentContextKey,
   agentmailContextKey,
   azureDevOpsContextKey,
   beginRequestAuthScope,
+  breaksJsonValidity,
   buildJiraContextKey,
   buildRoutingAffinityFromAgent,
   cancelApprovalRequestById,
@@ -238,6 +200,8 @@ import {
   claimTask,
   completeTask,
   computeContentHash,
+  computeScore,
+  consolidatedKeyMessage,
   countKv,
   createAgent,
   createAgentMailInboxMapping,
@@ -248,6 +212,7 @@ import {
   createMcpServer,
   createMetric,
   createMetricVersion,
+  createOAuthApp,
   createPage,
   createPageVersion,
   createScheduledTask,
@@ -265,6 +230,7 @@ import {
   deletePage,
   deletePromptTemplate,
   deleteScheduledTask,
+  deleteScript,
   deleteService,
   deleteSkill,
   deleteSkillFile,
@@ -272,6 +238,7 @@ import {
   deleteUser,
   deleteWorkflow,
   detachTaskFromWorkflowRunStep,
+  embedScript,
   emitMcpServerConnectedTelemetry,
   exports_db,
   extensionAgentAssignmentError,
@@ -299,6 +266,7 @@ import {
   getAppVersion,
   getAppVersions,
   getApprovalRequestById,
+  getAuthorizationById,
   getBudget,
   getChannelById,
   getChannelByName,
@@ -315,6 +283,7 @@ import {
   getDependentTasks,
   getDueScheduledTasks,
   getDueWaitStates,
+  getEmbeddingProvider,
   getInProgressTasksByContextKey,
   getInboxMessageById,
   getInboxSummary,
@@ -328,10 +297,15 @@ import {
   getLogsByTaskIdChronological,
   getMcpServerById,
   getMcpServerByName,
+  getMemoryStore,
   getMentionsForAgent,
   getMetric,
   getMetricBySlug,
   getMetricVersions,
+  getOAuthApp,
+  getOAuthAppById,
+  getOAuthAppIdByProvider,
+  getOAuthTokens,
   getOfferedTasksForAgent,
   getPage,
   getPageBySlug,
@@ -349,6 +323,9 @@ import {
   getScheduledTaskById,
   getScheduledTaskByName,
   getScheduledTasks,
+  getScript,
+  getScriptById,
+  getScriptVersion,
   getServiceByAgentAndName,
   getServiceById,
   getSessionLogsByTaskId,
@@ -389,39 +366,55 @@ import {
   incrementEmptyPollCount,
   initDb,
   init_api_drain,
+  init_constants as init_constants2,
   init_context_key,
   init_credential_broker,
   init_date_utils,
   init_db,
+  init_db1 as init_db2,
   init_db_client,
+  init_embeddings,
+  init_enabled_tools,
+  init_key_paths,
+  init_memory,
   init_model_tier_keys,
+  init_oauth,
   init_request_auth_context,
+  init_reranker,
+  init_scrub_json,
   init_slack_routing,
+  init_sqlite_store,
   init_steering,
   init_swarm_config_guard,
   init_task_lifecycle_events,
   init_telemetry,
   init_telemetry_identity,
   init_templates1 as init_templates,
+  init_workflow_replay,
   insertTaskAttachment,
   installMcpServer,
   installSkill,
   internalConfigKeyError,
   isAgentEligibleForTask,
+  isConsolidatedKey,
   isExtensionAgent,
+  isGraphExpansionEnabled,
   isInTransaction,
   isInternalConfigKey,
   isLinearTrackerContextKey,
+  isLongtermKey,
   isReservedConfigKey,
   isSteeringEnabled,
   kvPrefixUpperBound,
   linearContextKey,
+  listAuthorizationsForApp,
   listCancelledApprovalRequestsForRun,
   listKv,
   listMcpServers,
   listSkills,
   listWorkflowRunsPage,
   listWorkflows,
+  longtermKeyError,
   markInboxMessageResponded,
   markSteeringHandled,
   markTaskSlackReplySent,
@@ -432,6 +425,7 @@ import {
   onTaskStarted,
   overwriteTerminalTaskResultText,
   pageContextKey,
+  parseEnabledTools,
   placeholderForConfigKey,
   postMessage,
   promoteDraftTask,
@@ -443,14 +437,19 @@ import {
   releaseMentionProcessing,
   releaseTask,
   requestSteering,
+  rerank,
   reservedKeyError,
   resetEmptyPollCount,
   resolveApprovalRequest,
   resolveSqliteVecExtensionPath,
+  resolveStoreKey,
   resolveWaitState,
+  restoreScratchScriptLastUsedIfUnchanged,
+  rowToCandidate,
   runWithoutRequestAuth,
   scheduleContextKey,
   scheduleOrgDomainRecompute,
+  scrubJsonValue,
   searchSkills,
   setBudgetRefusalFollowUpTaskId,
   setRequestAuth,
@@ -459,6 +458,7 @@ import {
   sweepExpiredKvPrefix,
   telemetry,
   tierConfigKey,
+  touchScratchScriptLastUsed,
   uninstallMcpServer,
   uninstallSkill,
   updateAgentMaxTasks,
@@ -480,13 +480,15 @@ import {
   updateWorkflowRun,
   updateWorkflowRunStep,
   upsertKv,
+  upsertOAuthApp,
   upsertPromptTemplate,
+  upsertScriptByName,
   upsertService,
   upsertSkillFiles,
   upsertSwarmConfig,
   validateConfigValue,
   workflowContextKey
-} from "./cli-qdv8kgz7.js";
+} from "./cli-mkdsy1nq.js";
 import {
   $OpenAPIRegistry,
   $OpenApiGeneratorV31,
@@ -546,18 +548,32 @@ import {
   parseAssetKey,
   parseModelTier,
   splitLegacyModelAlias
-} from "./cli-9s3h836g.js";
+} from "./cli-xvdgasgy.js";
 import {
   generateDefaultClaudeMd,
   generateDefaultIdentityMd,
   generateDefaultSoulMd,
-  init_defaults
-} from "./cli-3a4m1aws.js";
+  init_defaults,
+  init_task_attachment_links,
+  taskAttachmentDisplayUrl,
+  taskAttachmentFetchCommand
+} from "./cli-mxvnnv5q.js";
 import {
   getSlackConfiguration,
   init_config,
   isSlackConfigured
 } from "./cli-dmtrxqhg.js";
+import {
+  deepInterpolate,
+  findInterpolationTokens,
+  getTemplateDefinition,
+  init_registry,
+  init_resolver,
+  init_template,
+  interpolate,
+  registerTemplate,
+  resolveTemplate
+} from "./cli-5c2j5yvx.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getAgentFsDefaultDriveId,
@@ -570,17 +586,6 @@ import {
   init_constants,
   isCombEnabled
 } from "./cli-gd4favx9.js";
-import {
-  deepInterpolate,
-  findInterpolationTokens,
-  getTemplateDefinition,
-  init_registry,
-  init_resolver,
-  init_template,
-  interpolate,
-  registerTemplate,
-  resolveTemplate
-} from "./cli-5c2j5yvx.js";
 import {
   init_env_flag,
   isEnvFlagEnabled,
@@ -598,7 +603,7 @@ import {
   modelFamilyKey,
   parseAlias,
   resolveAlias
-} from "./cli-zsh093hk.js";
+} from "./cli-014vns2y.js";
 import {
   exports_zod,
   init_zod
@@ -647,11 +652,11 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-1kzfvd1z.js";
+} from "./cli-ymmc1zxg.js";
 import {
   init_event_bus,
   workflowEventBus
-} from "./cli-hpryr6em.js";
+} from "./cli-mb75wpxf.js";
 import {
   init_bus,
   realtimeBus
@@ -664,7 +669,7 @@ import {
   registerVolatileSecret,
   scrubObject,
   scrubSecrets
-} from "./cli-h1spv8v4.js";
+} from "./cli-wt7ccy4r.js";
 import {
   __callDispose,
   __commonJS,
@@ -14387,7 +14392,7 @@ async function notifyAutomationPreflightFailure(preflight) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-75hm5cfa.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-nctetn1e.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Automation Preflight] Slack not available, cannot send notification");
@@ -14412,7 +14417,10 @@ Fix setup: ${getAppUrl()}${preflight.fixUrl}`),
 // src/be/automation-preflight.ts
 init_config();
 init_env_flag();
-init_db();
+init_secret_scrubber();
+init_db2();
+init_oauth();
+init_scrub_json();
 var NEEDS_SETUP_PREFIX = "needs_setup:";
 function hasValue(value) {
   if (value == null)
@@ -14623,16 +14631,17 @@ function utcDayBounds(now) {
   return { start: start.toISOString(), end: new Date(start.getTime() + 86400000).toISOString() };
 }
 async function recordSchedulePreflightFailure(scheduleId, failureReason, now = new Date) {
+  const message = scrubSecrets(failureReason);
   return await getDbClient().transaction(async (tx) => {
     const row = await tx.get("SELECT lastErrorAt, lastErrorMessage FROM scheduled_tasks WHERE id = ?", [scheduleId]);
     if (!row)
       return false;
-    if (row.lastErrorMessage === failureReason && row.lastErrorAt?.slice(0, 10) === now.toISOString().slice(0, 10)) {
+    if (row.lastErrorMessage === message && row.lastErrorAt?.slice(0, 10) === now.toISOString().slice(0, 10)) {
       return false;
     }
     await tx.run(`UPDATE scheduled_tasks
        SET lastErrorAt = ?, lastErrorMessage = ?, lastUpdatedAt = ?
-       WHERE id = ?`, [now.toISOString(), failureReason, now.toISOString(), scheduleId]);
+       WHERE id = ?`, [now.toISOString(), message, now.toISOString(), scheduleId]);
     return true;
   });
 }
@@ -14656,8 +14665,8 @@ async function recordWorkflowPreflightFailure(input) {
       runId,
       input.workflowId,
       input.triggerType,
-      input.triggerData === undefined ? null : JSON.stringify(input.triggerData),
-      input.failureReason,
+      input.triggerData === undefined ? null : scrubJsonValue(input.triggerData),
+      scrubSecrets(input.failureReason),
       input.createdBy ?? null,
       timestamp,
       timestamp,
@@ -14668,11 +14677,12 @@ async function recordWorkflowPreflightFailure(input) {
 }
 
 // src/workflows/engine.ts
-init_db();
+init_db2();
+init_workflow_replay();
 init_telemetry();
 
 // src/workflows/checkpoint.ts
-init_db();
+init_db2();
 async function checkpointStep(runId, stepId, nodeId, result, ctx) {
   await getDbClient().transaction(async () => {
     await updateWorkflowRunStep(stepId, {
@@ -14759,10 +14769,10 @@ function calculateBackoff(policy, attempt) {
 }
 
 // src/workflows/completed-step-routing.ts
-init_db();
+init_db2();
 
 // src/workflows/foreach-join.ts
-init_db();
+init_db2();
 var FOREACH_TERMINAL_STEP_STATUSES = new Set([
   "completed",
   "failed",
@@ -14859,7 +14869,7 @@ async function loadCompletedStepRouting(def, runId, completedNodeIds) {
 }
 
 // src/workflows/cooldown.ts
-init_db();
+init_db2();
 function cooldownToMs(cooldown) {
   let ms = 0;
   if (cooldown.hours)
@@ -14889,7 +14899,7 @@ async function shouldSkipCooldown(workflowId, cooldown) {
 }
 
 // src/workflows/input.ts
-init_db();
+init_db2();
 init_secret_scrubber();
 async function resolveInputs(input) {
   const resolved = {};
@@ -15297,6 +15307,22 @@ async function startWorkflowExecution(workflow, triggerData, registry, options =
 }
 var activeWalks = new Map;
 var executingSteps = new Set;
+async function failRunOnUnreadableReplay(runId, err, stepId) {
+  if (!(err instanceof WorkflowReplayStateError))
+    return false;
+  const finishedAt = new Date().toISOString();
+  console.error(`[workflow] ${err.message}`);
+  if (stepId) {
+    await updateWorkflowRunStep(stepId, {
+      status: "failed",
+      error: err.message,
+      finishedAt,
+      nextRetryAt: null
+    });
+  }
+  await updateWorkflowRun(runId, { status: "failed", error: err.message, finishedAt });
+  return true;
+}
 function isWorkflowRunActive(runId) {
   return activeWalks.has(runId);
 }
@@ -15318,6 +15344,9 @@ async function walkGraph(def, runId, ctx, startNodes, registry, workflowId, secr
   const release = holdWorkflowRun(runId);
   try {
     await walkGraphOwned(def, runId, ctx, startNodes, registry, workflowId, secretKeys, options);
+  } catch (err) {
+    if (!await failRunOnUnreadableReplay(runId, err))
+      throw err;
   } finally {
     release();
   }
@@ -15373,10 +15402,10 @@ async function walkGraphOwned(def, runId, ctx, startNodes, registry, workflowId,
       });
       return;
     }
-    const results = await Promise.all(pendingNodes.map((node) => executeStep(def, runId, ctx, node, registry, workflowId, secretKeys, options).catch((_err) => ({
-      outcome: "failed",
-      successors: []
-    }))));
+    const results = await Promise.all(pendingNodes.map((node) => executeStep(def, runId, ctx, node, registry, workflowId, secretKeys, options).catch(async (err) => {
+      await failRunOnUnreadableReplay(runId, err);
+      return { outcome: "failed", successors: [] };
+    })));
     const nextBatch = new Map;
     let hasWaiting = false;
     for (let i = 0;i < results.length; i++) {
@@ -15590,6 +15619,11 @@ async function executeStep(def, runId, ctx, node, registry, workflowId, secretKe
   }
   try {
     return await runClaimedStep(def, runId, ctx, node, registry, dedup.existingStep, dedup.stepId, workflowId, options);
+  } catch (err) {
+    if (await failRunOnUnreadableReplay(runId, err, dedup.stepId)) {
+      return { outcome: "failed", successors: [] };
+    }
+    throw err;
   } finally {
     executingSteps.delete(dedup.stepId);
   }
@@ -15877,7 +15911,7 @@ function timeoutPromise(ms) {
 init_event_bus();
 
 // src/workflows/recovery.ts
-init_db();
+init_db2();
 
 // src/workflows/approval-resolution.ts
 function shapeApprovalResolution(registry, definition, nodeId, parkedOutput, approval) {
@@ -15901,7 +15935,7 @@ function shapeApprovalResolution(registry, definition, nodeId, parkedOutput, app
 var FAILED_TASK_OUTPUT_PREFIX = "[FAILED:";
 
 // src/workflows/resume.ts
-init_db();
+init_db2();
 init_secret_scrubber();
 init_event_bus();
 
@@ -16182,7 +16216,7 @@ function computeNextPort(mode, status) {
 }
 
 // src/workflows/task-step-routing.ts
-init_db();
+init_db2();
 init_types();
 async function isTaskBoundToStep(taskId, stepId) {
   const task = await getTaskById(taskId);
@@ -16336,7 +16370,18 @@ function setupWorkflowResumeListener(eventBus, registry) {
     eventBus.off("approval.resolved", onApprovalResolved);
   };
 }
+async function failClosedOnUnreadableReplay(runId, stepId, resume) {
+  try {
+    await resume();
+  } catch (err) {
+    if (!await failRunOnUnreadableReplay(runId, err, stepId))
+      throw err;
+  }
+}
 async function resumeFromTaskCompletion(event, registry) {
+  await failClosedOnUnreadableReplay(event.workflowRunId, event.workflowRunStepId, () => resumeFromTaskCompletionUnguarded(event, registry));
+}
+async function resumeFromTaskCompletionUnguarded(event, registry) {
   const run = await getWorkflowRun(event.workflowRunId);
   if (!run || run.status !== "waiting" && run.status !== "running")
     return;
@@ -16391,6 +16436,9 @@ async function finalizeOrWait(runId) {
   });
 }
 async function handleTaskFailure(event, reason, registry, options) {
+  await failClosedOnUnreadableReplay(event.workflowRunId, event.workflowRunStepId, () => handleTaskFailureUnguarded(event, reason, registry, options));
+}
+async function handleTaskFailureUnguarded(event, reason, registry, options) {
   const run = await getWorkflowRun(event.workflowRunId);
   if (!run || run.status !== "waiting" && run.status !== "running")
     return;
@@ -16533,6 +16581,9 @@ async function cancelWorkflowRun(runId, reason) {
   await postApprovalCancellationUpdates(cancelledApprovals, applied ? cancelReason : latestRun?.error ?? cancelReason);
 }
 async function resumeFromApprovalResolution(event, registry) {
+  await failClosedOnUnreadableReplay(event.workflowRunId, event.workflowRunStepId, () => resumeFromApprovalResolutionUnguarded(event, registry));
+}
+async function resumeFromApprovalResolutionUnguarded(event, registry) {
   const run = await getWorkflowRun(event.workflowRunId);
   if (!run || run.status !== "waiting" && run.status !== "running")
     return;
@@ -16542,11 +16593,11 @@ async function resumeFromApprovalResolution(event, registry) {
   const workflow = await getWorkflow(run.workflowId);
   if (!workflow)
     return;
-  const ctx = run.context ?? {};
   if (event.status === "cancelled") {
     console.warn(`[workflows] approval ${event.requestId} is cancelled; step ${event.workflowRunStepId} stays waiting for the run cancel path`);
     return;
   }
+  const ctx = run.context ?? {};
   const { output: stepOutput, nextPort } = shapeApprovalResolution(registry, workflow.definition, step.nodeId, step.output, { requestId: event.requestId, status: event.status, responses: event.responses });
   const routing = await checkpointPortStepAndResolveSuccessors(workflow.definition, run.id, step.id, step.nodeId, stepOutput, nextPort, ctx);
   if (!routing.claimed)
@@ -16565,6 +16616,9 @@ async function resumeWaitState(waitId, status, payload, registry) {
   if (!result.updated || !result.row)
     return;
   const waitRow = result.row;
+  await failClosedOnUnreadableReplay(waitRow.workflowRunId, waitRow.workflowRunStepId, () => resumeClaimedWait(waitRow, status, cappedPayload, registry));
+}
+async function resumeClaimedWait(waitRow, status, cappedPayload, registry) {
   const run = await getWorkflowRun(waitRow.workflowRunId);
   if (!run || run.status !== "waiting" && run.status !== "running")
     return;
@@ -16749,6 +16803,8 @@ async function recoverRunningRuns(registry) {
       }
       recovered++;
     } catch (err) {
+      if (await failRunOnUnreadableReplay(runId, err))
+        continue;
       console.error(`[workflows] Failed to recover running run ${runId}:`, err);
     }
   }
@@ -16834,6 +16890,8 @@ async function recoverWaitingRuns(registry) {
       }
       recovered++;
     } catch (err) {
+      if (await failRunOnUnreadableReplay(stuck.runId, err))
+        continue;
       console.error(`[workflows] Failed to recover waiting run ${stuck.runId}:`, err);
     }
   }
@@ -16888,6 +16946,8 @@ async function recoverApprovalWaitingRuns(registry) {
       }
       recovered++;
     } catch (err) {
+      if (await failRunOnUnreadableReplay(stuck.runId, err))
+        continue;
       console.error(`[workflows] Failed to recover approval-waiting run ${stuck.runId}:`, err);
     }
   }
@@ -16911,6 +16971,8 @@ async function recoverWaitStates(registry) {
       await resumeWaitState(stuck.waitId, resumeStatus, payload, registry);
       recovered++;
     } catch (err) {
+      if (await failRunOnUnreadableReplay(stuck.runId, err))
+        continue;
       console.error(`[workflows] Failed to recover wait-state ${stuck.waitId}:`, err);
     }
   }
@@ -16928,7 +16990,7 @@ async function getRunIdsByStatus(status) {
   return rows.map((r) => r.id);
 }
 // src/workflows/retry-poller.ts
-init_db();
+init_db2();
 var pollerTimeout = null;
 function startRetryPoller(registry, intervalMs = 5000) {
   if (pollerTimeout !== null)
@@ -17017,11 +17079,15 @@ function startRetryPoller(registry, intervalMs = 5000) {
               }
             }
           } catch (err) {
+            if (await failRunOnUnreadableReplay(run.id, err, step.id))
+              continue;
             const errorMsg = err instanceof Error ? err.message : String(err);
             const retryPolicy = node.retry || executor.retryPolicy;
             await checkpointStepFailure(run.id, step.id, errorMsg, step.retryCount, retryPolicy);
           }
         } catch (err) {
+          if (await failRunOnUnreadableReplay(step.runId, err, step.id))
+            continue;
           console.error(`[workflows] Retry failed for step ${step.id}:`, err);
         } finally {
           release?.();
@@ -17129,7 +17195,7 @@ function replaceStringPlaceholders(template, variables) {
   });
 }
 // src/workflows/triggers.ts
-init_db();
+init_db2();
 import crypto2 from "node:crypto";
 var DEFAULT_HMAC_HEADER = "X-Hub-Signature-256";
 var FALLBACK_HMAC_HEADERS = ["x-hub-signature-256", "x-signature", "x-webhook-signature"];
@@ -17397,7 +17463,7 @@ class WebhookError extends Error {
   }
 }
 // src/workflows/version.ts
-init_db();
+init_db2();
 async function snapshotWorkflow(workflowId, changedByAgentId) {
   const workflow = await getWorkflow(workflowId);
   if (!workflow) {
@@ -17443,7 +17509,7 @@ async function snapshotAndUpdateWorkflow(workflowId, updates, opts = {}) {
   });
 }
 // src/workflows/wait-poller.ts
-init_db();
+init_db2();
 var pollerTimeout2 = null;
 function startWaitPoller(registry, intervalMs = 5000) {
   if (pollerTimeout2 !== null)
@@ -17474,7 +17540,7 @@ function stopWaitPoller() {
 }
 
 // src/workflows/index.ts
-init_db();
+init_db2();
 init_secret_scrubber();
 init_event_bus();
 
@@ -17486,18 +17552,18 @@ init_zod();
 
 // src/be/model-validation.ts
 init_src();
-init_db();
+init_db2();
 
 // src/be/model-tier-resolution.ts
 init_src();
 init_zod();
 init_types();
-init_db();
+init_db2();
 
 // src/be/harness-model-support.ts
 init_src();
 init_secret_scrubber();
-init_db();
+init_db2();
 var CLI_PINNED_HARNESSES = new Set(["claude", "codex"]);
 async function getHarnessModelSupport(harness, cliVersion, modelId) {
   const row = await getDbClient().get("SELECT status FROM harness_model_support WHERE harness = ? AND cliVersion = ? AND modelId = ?", [harness, cliVersion, modelId]);
@@ -18005,19 +18071,20 @@ ${issues.join(`
 
 // src/scheduler/scheduler.ts
 var import_cron_parser = __toESM(require_dist2(), 1);
+init_db2();
 init_db();
 init_telemetry();
 
 // src/scheduler/deferred-task-waits.ts
-init_db();
+init_db2();
 init_event_bus();
 
 // src/scheduler/schedule-task.ts
-init_db();
+init_db2();
 init_context_key();
 
 // src/tasks/sibling-awareness.ts
-init_db();
+init_db2();
 
 // src/tasks/errors.ts
 class TaskCreationBlockedError extends Error {
@@ -18777,7 +18844,9 @@ async function runScheduleNow(scheduleId) {
 }
 
 // src/be/extensions/assets.ts
+init_db2();
 init_db();
+init_embeddings();
 
 // src/be/skill-parser.ts
 function parseSkillContent(content) {
@@ -19436,7 +19505,7 @@ async function removeAssets(extensionId) {
 }
 
 // src/be/extensions/db.ts
-init_db();
+init_db2();
 
 class ExtensionOwnershipError extends Error {
 }
@@ -19904,17 +19973,34 @@ function normalizeObjectSchema(schema) {
   }
   return;
 }
+function getDotPath(path) {
+  if (path.length === 0) {
+    return "object root";
+  }
+  return path.reduce((acc, seg, index) => {
+    if (index === 0) {
+      return String(seg);
+    }
+    if (typeof seg === "number") {
+      return `${acc}[${seg}]`;
+    }
+    return `${acc}.${seg}`;
+  }, "");
+}
 function getParseErrorMessage(error) {
   if (error && typeof error === "object") {
+    if ("issues" in error && Array.isArray(error.issues) && error.issues.length > 0) {
+      return error.issues.map((i) => {
+        if (!i.path?.length) {
+          return i.message;
+        }
+        return `${i.message} at ${getDotPath(i.path)}`;
+      }).join(`
+`);
+    }
     if ("message" in error && typeof error.message === "string") {
       return error.message;
     }
-    if ("issues" in error && Array.isArray(error.issues) && error.issues.length > 0) {
-      const firstIssue = error.issues[0];
-      if (firstIssue && typeof firstIssue === "object" && "message" in firstIssue) {
-        return String(firstIssue.message);
-      }
-    }
     try {
       return JSON.stringify(error);
     } catch {
@@ -23139,16 +23225,7 @@ class Server extends Protocol {
     if (!methodSchema) {
       throw new Error("Schema is missing a method literal");
     }
-    let methodValue;
-    if (isZ4Schema(methodSchema)) {
-      const v4Schema = methodSchema;
-      const v4Def = v4Schema._zod?.def;
-      methodValue = v4Def?.value ?? v4Schema.value;
-    } else {
-      const v3Schema = methodSchema;
-      const legacyDef = v3Schema._def;
-      methodValue = legacyDef?.value ?? v3Schema.value;
-    }
+    const methodValue = getLiteralValue(methodSchema);
     if (typeof methodValue !== "string") {
       throw new Error("Schema method literal must be a string");
     }
@@ -24241,7 +24318,7 @@ var EMPTY_COMPLETION_RESULT = {
 
 // src/server.ts
 init_package();
-init_db();
+init_db2();
 init_steering();
 
 // src/github/task-reactions.ts
@@ -24593,11 +24670,11 @@ function verifyAgentMailWebhook(rawBody, headers) {
   }
 }
 // src/agentmail/handlers.ts
-init_db();
+init_db2();
 
 // src/be/users.ts
 init_telemetry_identity();
-init_db();
+init_db2();
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 function actorString(actor) {
   return `${actor.kind}:${actor.id}`;
@@ -25514,7 +25591,7 @@ async function likeAzureDevOpsComment(ref, threadId, commentId) {
   }
 }
 // src/azure-devops/handlers.ts
-init_db();
+init_db2();
 init_resolver();
 init_context_key();
 
@@ -25908,10 +25985,10 @@ _Note: There's an active task (${existingTask.id}) for this PR #${pr.pullRequest
   return { created: true, taskId: task.id };
 }
 // src/http/core.ts
-init_db();
+init_db2();
 
 // src/be/multi-runtime.ts
-init_db();
+init_db2();
 var AGENT_MAX_TASKS_CONFIG_KEY = "AGENT_MAX_TASKS";
 function parseAgentMaxTasksValue(raw) {
   const str = raw.trim();
@@ -26094,7 +26171,7 @@ async function expireStaleRuntimeInstances() {
 
 // src/be/rbac-audit.ts
 init_env_flag();
-init_db();
+init_db2();
 import { AsyncLocalStorage } from "node:async_hooks";
 var FLUSH_INTERVAL_MS = 2000;
 var FLUSH_MAX_ROWS = 200;
@@ -26279,7 +26356,7 @@ function stopAuditGc() {
 // src/http/core.ts
 init_rbac_roles();
 // src/github/handlers.ts
-init_db();
+init_db2();
 init_resolver();
 init_context_key();
 
@@ -27629,7 +27706,7 @@ function resetGitLab() {
   gitlabUrl = "https://gitlab.com";
 }
 // src/gitlab/handlers.ts
-init_db();
+init_db2();
 init_resolver();
 init_context_key();
 
@@ -28232,12 +28309,13 @@ function extractMentions(adf) {
   return ids;
 }
 // src/jira/app.ts
+init_oauth();
 init_constants();
 init_env_flag();
 
 // src/be/db-queries/tracker.ts
 init_date_utils();
-init_db();
+init_db2();
 function normalizeTrackerSync(row) {
   return {
     ...row,
@@ -28381,8 +28459,12 @@ async function createTrackerAgentMapping(data) {
 init_secret_scrubber();
 init_event_bus();
 
+// src/jira/client.ts
+init_oauth();
+
 // src/jira/metadata.ts
-init_db();
+init_db2();
+init_oauth();
 async function getJiraMetadata() {
   const app = await getOAuthApp("jira");
   if (!app)
@@ -28675,10 +28757,11 @@ Original issue: {{issue_key}} — {{issue_summary}}`,
 });
 
 // src/jira/sync.ts
-init_db();
+init_db2();
+init_oauth();
 
 // src/be/unmapped-identities.ts
-init_db();
+init_db2();
 var TTL_MS = 30 * 24 * 60 * 60 * 1000;
 function namespace(kind) {
   return `integration:unmapped:${kind}`;
@@ -29097,7 +29180,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-75hm5cfa.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-nctetn1e.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -29168,7 +29251,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDbClient: getDbClient2 } = await import("./db-f4ans0jj.js");
+  const { getDbClient: getDbClient2 } = await import("./db-qg3myn53.js");
   await getDbClient2().transaction(async (tx) => {
     const row = await tx.get("SELECT metadata FROM oauth_apps WHERE provider = 'jira'");
     if (!row) {
@@ -29408,6 +29491,7 @@ async function dispatchAndRecord(event, body, deliveryId) {
   }
 }
 // src/linear/app.ts
+init_oauth();
 init_constants();
 init_env_flag();
 
@@ -100886,6 +100970,7 @@ var LinearClient = class extends LinearSdk {
 };
 
 // src/linear/client.ts
+init_oauth();
 var linearClient = null;
 async function getLinearClient() {
   const tokens = await getOAuthTokens("linear");
@@ -100905,7 +100990,8 @@ init_secret_scrubber();
 init_event_bus();
 
 // src/linear/sync.ts
-init_db();
+init_db2();
+init_oauth();
 init_resolver();
 init_context_key();
 init_types();
@@ -102055,7 +102141,7 @@ async function getFileInfo(client, fileId) {
   }
 }
 // src/slack/router.ts
-init_db();
+init_db2();
 init_env_flag();
 function hasOtherUserMention(text, botUserId) {
   const mentions = text.match(/<@([A-Z0-9]+)>/g) ?? [];
@@ -102120,7 +102206,7 @@ init_request_auth_context();
 init_secret_scrubber();
 
 // src/http/auth.ts
-init_db();
+init_db2();
 
 // src/utils/page-session.ts
 import { createHmac, randomBytes as randomBytes2, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
@@ -102366,7 +102452,7 @@ init_zod();
 init_secret_scrubber();
 
 // src/http/utils.ts
-init_db();
+init_db2();
 init_env_flag();
 init_secret_scrubber();
 var DEFAULT_ALLOWED_ORIGINS = [
@@ -102970,7 +103056,7 @@ async function reloadGlobalConfigsAndIntegrations() {
   return runWithoutRequestAuth(() => reloadGlobalConfigsAndIntegrationsInner());
 }
 async function reloadGlobalConfigsAndIntegrationsInner() {
-  const { getEmbeddingProvider: getEmbeddingProvider2, resetEmbeddingProvider } = await import("./index-056j5kzn.js");
+  const { getEmbeddingProvider: getEmbeddingProvider2, resetEmbeddingProvider } = await import("./index-2t9kesn1.js");
   const wasEmbeddingsConfigured = getEmbeddingProvider2().isConfigured();
   const updated = await loadGlobalConfigsIntoEnv(true);
   await stopSlackApp();
@@ -102983,10 +103069,10 @@ async function reloadGlobalConfigsAndIntegrationsInner() {
     integrations.push("embeddings");
   }
   if (!wasEmbeddingsConfigured && isEmbeddingsConfigured) {
-    import("./boot-reembed-2ex2mcsh.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+    import("./boot-reembed-fmp5ww69.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
       console.error("[config-reload] memory backfill failed (non-fatal):", err);
     });
-    import("./boot-reembed-z158xq32.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+    import("./boot-reembed-1ze5853n.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
       console.error("[config-reload] script backfill failed (non-fatal):", err);
     });
   }
@@ -103317,14 +103403,14 @@ init_config();
 
 // src/tools/accept-steer.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/tools/task-tool-ctx.ts
 init_rbac();
 
 // src/tools/utils.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/kv-overflow.ts
 var MCP_OVERFLOW_NAMESPACE = "mcp:overflow";
@@ -104104,7 +104190,7 @@ function setPreloadedTools(server, names) {
 async function applyPreToolCall(name, args, requestInfo, inputSchema) {
   if (requestInfo.callOrigin !== "mcp")
     return { args };
-  const dispatcher = await import("./dispatcher-pk182apd.js");
+  const dispatcher = await import("./dispatcher-7vnwj9qw.js");
   const result = await dispatcher.dispatchPre("pre.tool.call", { tool: name, args, requestInfo }, inputSchema ? {
     validateModify: async (data) => {
       const schema = normalizeObjectSchema(inputSchema) ?? inputSchema;
@@ -104318,15 +104404,15 @@ var registerAcceptSteerTool = (server) => {
 init_zod();
 
 // src/apps/version.ts
-init_db();
+init_db2();
 
 // src/apps/schema-migrate.ts
 init_zod();
-init_db();
+init_db2();
 init_secret_scrubber();
 
 // src/apps/row-store.ts
-init_db();
+init_db2();
 init_db_client();
 class AppRowValidationError extends Error {
   issues;
@@ -104705,6 +104791,7 @@ function purgeAppRows(appId2, models, afterPurge) {
 
 // src/apps/sync.ts
 init_zod();
+init_db2();
 init_db();
 init_types();
 init_secret_scrubber();
@@ -106115,12 +106202,12 @@ async function rollbackApp(input) {
 }
 
 // src/tools/app-diff.ts
-init_db();
+init_db2();
 init_rbac();
 
 // src/tools/context-diff.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 import { tmpdir } from "node:os";
 import { join } from "node:path";
@@ -106302,13 +106389,13 @@ var registerAppDiffTool = (server) => {
 
 // src/tools/app-get.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/http/apps.ts
 init_zod();
 
 // src/apps/user-config.ts
-init_db();
+init_db2();
 var USER_CONFIG_THEME_KEY = "$theme";
 var RESERVED_KEY_PATTERNS = {
   [USER_CONFIG_THEME_KEY]: /^[a-z][a-z0-9-]{0,39}$/
@@ -106390,6 +106477,7 @@ async function upsertAppUserConfigValues(appId2, scope, values) {
 
 // src/http/apps.ts
 init_key();
+init_db2();
 init_db();
 init_resolver();
 init_rbac();
@@ -106399,7 +106487,7 @@ init_secret_scrubber();
 
 // src/be/audit-user.ts
 init_request_auth_context();
-init_db();
+init_db2();
 async function resolveTaskAuditUserId(sourceTaskId, callerAgentId) {
   if (!callerAgentId)
     return null;
@@ -107950,7 +108038,7 @@ var registerAppQueryTool = (server) => {
 
 // src/tools/app-history.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 function escapeTableCell2(value) {
   return String(value ?? "—").replaceAll("\\", "\\\\").replaceAll("|", "\\|").replace(/\r\n|\r|\n/g, "<br>");
@@ -108055,7 +108143,7 @@ var registerAppListTool = (server) => {
 
 // src/tools/app-patch.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerAppPatchTool = (server) => {
   createToolRegistrar(server)("app-patch", {
@@ -108176,7 +108264,7 @@ var registerAppPatchTool = (server) => {
 };
 // src/tools/app-rollback.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerAppRollbackTool = (server) => {
   createToolRegistrar(server)("app-rollback", {
@@ -108256,7 +108344,7 @@ var registerAppRollbackTool = (server) => {
 
 // src/tools/app-sync.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 function cell(value) {
   return String(value ?? "—").replaceAll("\\", "\\\\").replaceAll("|", "\\|").replace(/\r\n|\r|\n/g, "<br>");
@@ -108343,7 +108431,7 @@ var registerAppSyncTool = (server) => {
 
 // src/tools/app-upsert.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerAppUpsertTool = (server) => {
   createToolRegistrar(server)("app-upsert", {
@@ -108487,10 +108575,10 @@ var registerAppUpsertTool = (server) => {
 
 // src/tools/cancel-approval-request.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/workflows/approval-cancel.ts
-init_db();
+init_db2();
 init_rbac();
 var LIVE_RUN_STATUSES = new Set(["running", "waiting"]);
 async function cancelApprovalRequest(input) {
@@ -108630,12 +108718,12 @@ var registerCancelApprovalRequestTool = (server) => {
 
 // src/tools/cancel-task.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 
 // src/tools/get-task-details.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 
 // src/utils/requester-comms.ts
@@ -108948,7 +109036,7 @@ var registerCancelTaskTool = (server) => {
 
 // src/tools/context-history.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerContextHistoryTool = (server) => {
   createToolRegistrar(server)("context-history", {
@@ -109024,7 +109112,7 @@ var registerContextHistoryTool = (server) => {
 
 // src/tools/create-channel.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var ChannelOutputSchema = looseObject({
   id: string().optional(),
@@ -109081,16 +109169,17 @@ var registerCreateChannelTool = (server) => {
 
 // src/tools/create-metric.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/http/db-query.ts
 init_zod();
+init_secret_scrubber();
 
 // src/http/db-query-bounded.ts
-init_db();
+init_db2();
 
 // src/http/db-query-shared.ts
-init_db();
+init_db2();
 init_env_flag();
 import { Database } from "bun:sqlite";
 class DbQueryTimeoutError extends Error {
@@ -109115,19 +109204,91 @@ function assertSingleStatement(sql) {
     throw new Error("Only one SQL statement is allowed");
   }
 }
-function executeReadOnlyQuery(sql, params = [], maxRows) {
-  assertSingleStatement(sql);
+var DB_QUERY_DENIED_TABLES = new Set([
+  "oauth_authorizations",
+  "oauth_apps",
+  "oauth_pending",
+  "user_tokens",
+  "session_tokens",
+  "script_apis",
+  "codex_oauth_device_flows"
+]);
+
+class DbQueryDeniedTableError extends Error {
+  tables;
+  constructor(tables) {
+    super(`db-query cannot read ${tables.join(", ")}: ${tables.length === 1 ? "this table holds" : "these tables hold"} credentials. ` + "Use the dedicated OAuth, token or config tools instead.");
+    this.tables = tables;
+    this.name = "DbQueryDeniedTableError";
+  }
+}
+var CURSOR_OPEN_OPCODES = new Set(["OpenRead", "ReopenIdx", "OpenWrite"]);
+function openReadOnlyReader() {
   const database = getDb();
   const reader = !database.filename || database.filename === ":memory:" ? Database.deserialize(database.serialize(), { readonly: true }) : new Database(database.filename, { readonly: true });
+  const vecExtensionPath = resolveSqliteVecExtensionPath();
+  if (vecExtensionPath) {
+    try {
+      reader.loadExtension(vecExtensionPath);
+    } catch {}
+  }
+  return reader;
+}
+function assertNoDeniedTables(sql, reader) {
+  const statement = stripTrailingSemicolon(sql);
+  if (/^explain\b/i.test(stripLeadingComments(statement)))
+    return;
+  const db = reader ?? openReadOnlyReader();
   try {
     let __stack = [];
     try {
-      const vecExtensionPath = resolveSqliteVecExtensionPath();
-      if (vecExtensionPath) {
-        try {
-          reader.loadExtension(vecExtensionPath);
-        } catch {}
+      const rootPages = new Map;
+      for (const row of db.query("SELECT rootpage, tbl_name FROM main.sqlite_master WHERE rootpage > 0").all()) {
+        rootPages.set(row.rootpage, row.tbl_name.toLowerCase());
+      }
+      const program = __using(__stack, db.prepare(`EXPLAIN ${statement}`), 0);
+      const denied = new Set;
+      for (const op of program.all()) {
+        if (!CURSOR_OPEN_OPCODES.has(op.opcode) || op.p3 !== 0)
+          continue;
+        const table = rootPages.get(op.p2);
+        if (table && DB_QUERY_DENIED_TABLES.has(table))
+          denied.add(table);
       }
+      if (denied.size > 0)
+        throw new DbQueryDeniedTableError([...denied].sort());
+    } catch (_catch) {
+      var _err = _catch, _hasErr = 1;
+    } finally {
+      __callDispose(__stack, _err, _hasErr);
+    }
+  } finally {
+    if (!reader)
+      db.close();
+  }
+}
+function stripLeadingComments(sql) {
+  let rest = sql.trimStart();
+  for (;; ) {
+    if (rest.startsWith("--")) {
+      const end = rest.indexOf(`
+`);
+      rest = end === -1 ? "" : rest.slice(end + 1).trimStart();
+    } else if (rest.startsWith("/*")) {
+      const end = rest.indexOf("*/");
+      rest = end === -1 ? "" : rest.slice(end + 2).trimStart();
+    } else {
+      return rest;
+    }
+  }
+}
+function executeReadOnlyQuery(sql, params = [], maxRows) {
+  assertSingleStatement(sql);
+  const reader = openReadOnlyReader();
+  try {
+    let __stack = [];
+    try {
+      assertNoDeniedTables(sql, reader);
       const stmt = __using(__stack, reader.prepare(sql), 0);
       if (stmt.columnNames.length === 0) {
         throw new Error("Only read-only queries are allowed");
@@ -109276,6 +109437,7 @@ function releaseBoundedQuerySlot() {
 }
 async function executeReadOnlyQueryBounded(sql, params = [], budgetMs, maxRows) {
   assertSingleStatement(sql);
+  assertNoDeniedTables(sql);
   acquireBoundedQuerySlot();
   try {
     return await runBoundedQueryChild(sql, params, budgetMs, maxRows);
@@ -109399,7 +109561,9 @@ var dbQueryRoute = route({
         rowLimit: exports_external.number().nullable()
       })
     },
-    400: { description: "Invalid or disallowed SQL" },
+    400: {
+      description: "Invalid or disallowed SQL, including queries that read credential tables"
+    },
     408: { description: "Query exceeded its wall-clock budget and was terminated" },
     429: { description: "Too many concurrent bounded db-query executions; retry shortly" }
   },
@@ -109414,7 +109578,7 @@ async function handleDbQuery(req, res, pathSegments, queryParams) {
     return true;
   try {
     const result = await executeReadOnlyQueryGated(resolveDbQuerySql(parsed.body), parsed.body.params, getDbQueryHttpBudgetMs(), getDbQueryHttpMaxRows());
-    dbQueryRoute.respond(res, 200, result);
+    dbQueryRoute.respond(res, 200, scrubObject(result));
   } catch (err) {
     if (err instanceof DbQueryConcurrencyCapError) {
       res.setHeader("Retry-After", "1");
@@ -109432,7 +109596,7 @@ async function handleDbQuery(req, res, pathSegments, queryParams) {
 }
 
 // src/metrics/version.ts
-init_db();
+init_db2();
 async function snapshotMetric(metricId, changedByAgentId) {
   const metric = await getMetric(metricId);
   if (!metric) {
@@ -109582,10 +109746,10 @@ async function authorizeAssetKeyWrite(input, trustedUserId) {
 }
 
 // src/tools/create-page.ts
-init_db();
+init_db2();
 
 // src/pages/version.ts
-init_db();
+init_db2();
 async function snapshotPage(pageId, changedByAgentId) {
   const page = await getPage(pageId);
   if (!page) {
@@ -109745,7 +109909,8 @@ var registerCreatePageTool = (server) => {
 
 // src/tools/credential-bindings/tool.ts
 init_zod();
-init_db();
+init_db2();
+init_oauth();
 
 // src/oauth/app-validation.ts
 function assertOAuthAppUrlsSafe(input) {
@@ -110300,7 +110465,7 @@ var DbQueryToolInputSchema = object({
 var registerDbQueryTool = (server) => {
   createToolRegistrar(server)("db-query", {
     title: "Execute database query",
-    description: "Execute a read-only SQL query against the swarm database (SQLite). Available to all authenticated agents — be aware results may include secrets (oauth_tokens, configs). Runs in a short-lived child process with a wall-clock budget by default (fails gracefully with a timeout or a 429-style concurrency error rather than freezing); results capped at a default row count (operator-configurable via `DB_QUERY_MCP_MAX_ROWS`) regardless of how many the query matched. See the sql parameter's description for which tables are unsafe to read whole, and the db-query-guidance skill for config knobs.",
+    description: "Execute a read-only SQL query against the swarm database (SQLite). Available to all authenticated agents. Queries that read credential tables (OAuth authorizations, apps and pending flows, user and session tokens, script API bearers, Codex device-login state) are rejected, and secret-shaped values in results are redacted. Runs in a short-lived child process with a wall-clock budget by default (fails gracefully with a timeout or a 429-style concurrency error rather than freezing); results capped at a default row count (operator-configurable via `DB_QUERY_MCP_MAX_ROWS`) regardless of how many the query matched. See the sql parameter's description for which tables are unsafe to read whole, and the db-query-guidance skill for config knobs.",
     annotations: { readOnlyHint: true },
     inputSchema: DbQueryToolInputSchema,
     outputSchema: swarmToolOutputSchema({
@@ -110340,13 +110505,14 @@ ${result.total} rows in ${result.elapsed}ms`;
 
 // src/tools/defer-task.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/tasks/task-terminal-effects.ts
-init_db();
+init_db2();
+init_memory();
 
 // src/be/memory/raters/retrieval.ts
-init_db();
+init_db2();
 function dedupeMemoryDocumentIds(memories) {
   const documents = new Map;
   for (const memory of memories) {
@@ -110497,7 +110663,7 @@ function getRaterWeightMultiplier(name) {
 }
 
 // src/be/memory/raters/store.ts
-init_db();
+init_db2();
 class ExplicitSelfDuplicateError extends Error {
   event;
   constructor(message, event) {
@@ -110698,7 +110864,7 @@ var shouldPersistTaskCompletionMemory = shouldPersistAutomaticTaskMemory;
 
 // src/tasks/worker-follow-up.ts
 init_zod();
-init_db();
+init_db2();
 init_resolver();
 init_types();
 init_env_flag();
@@ -111162,7 +111328,7 @@ ${taskContent}`,
 }
 
 // src/tasks/terminal-result-guard.ts
-init_db();
+init_db2();
 init_types();
 init_secret_scrubber();
 function getTaskOutputValidationError(outputSchema, output) {
@@ -111519,7 +111685,7 @@ Deferred until ${nextRunAt} (schedule ${schedule.id}). Pending: ${note}${checksB
 
 // src/tools/delete-channel.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var GENERAL_CHANNEL_ID = "00000000-0000-4000-8000-000000000001";
 var registerDeleteChannelTool = (server) => {
@@ -111597,7 +111763,7 @@ var registerDeleteChannelTool = (server) => {
 
 // src/tools/delete-page.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var DeletedPageSchema = looseObject({
   id: string().optional(),
@@ -112122,7 +112288,7 @@ var registerExtensionListTool = (server) => {
 
 // src/tools/get-metrics.ts
 init_zod();
-init_db();
+init_db2();
 var CountByStatusSchema = record(string(), number());
 var registerGetMetricsTool = (server) => {
   createToolRegistrar(server)("get-metrics", {
@@ -112165,7 +112331,7 @@ var registerGetMetricsTool = (server) => {
 
 // src/tools/get-swarm.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var agentOutputShape = looseObject({
   id: string().optional(),
@@ -112218,7 +112384,7 @@ var registerGetSwarmTool = (server) => {
 
 // src/tools/get-tasks.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var TaskSummarySchema = looseObject({
   id: string().optional(),
@@ -112376,7 +112542,8 @@ var registerGetTasksTool = (server) => {
 
 // src/tools/inject-learning.ts
 init_zod();
-init_db();
+init_db2();
+init_memory();
 init_rbac();
 var LearningCategoryEnum = _enum([
   "mistake-pattern",
@@ -112433,7 +112600,7 @@ ${learning}`;
     });
     try {
       const provider = getEmbeddingProvider();
-      const embedding = await provider.embed(content);
+      const embedding = await provider.embed(memory.content);
       if (embedding) {
         await store.updateEmbedding(memory.id, embedding, provider.name);
       }
@@ -112447,7 +112614,7 @@ ${learning}`;
 
 // src/tools/join-swarm.ts
 init_zod();
-init_db();
+init_db2();
 init_defaults();
 init_types();
 var agentOutputShape2 = looseObject({
@@ -112553,11 +112720,11 @@ var registerJoinSwarmTool = (server) => {
 
 // src/tools/kv/kv-delete.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 
 // src/tools/kv/kv-write-auth.ts
-init_db();
+init_db2();
 
 // src/kv-reserved-namespaces.ts
 var RESERVED_FAMILIES = new Map([
@@ -112605,7 +112772,7 @@ async function kvWriteAuthError(namespace2, info, key) {
 }
 
 // src/tools/kv/resolve-namespace.ts
-init_db();
+init_db2();
 init_context_key();
 async function resolveNamespace(explicit, info) {
   if (explicit && explicit.length > 0) {
@@ -112666,7 +112833,7 @@ var registerKvDeleteTool = (server) => {
 };
 // src/tools/kv/kv-get.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 
 // src/tools/kv/kv-read-auth.ts
@@ -112798,7 +112965,7 @@ var registerKvGetTool = (server) => {
 };
 // src/tools/kv/kv-incr.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var kvEntryOutputSchema2 = looseObject({
   namespace: string().optional(),
@@ -112855,7 +113022,7 @@ var registerKvIncrTool = (server) => {
 };
 // src/tools/kv/kv-list.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var MAX_KV_LIST_LIMIT = 1000;
 var kvEntryOutputSchema3 = looseObject({
@@ -112925,7 +113092,7 @@ var registerKvListTool = (server) => {
 };
 // src/tools/kv/kv-set.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var MAX_KV_BODY_BYTES = 2 * 1024 * 1024;
 var kvEntryOutputSchema4 = looseObject({
@@ -113026,7 +113193,7 @@ var registerKvSetTool = (server) => {
 };
 // src/tools/list-channels.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var ChannelOutputSchema2 = looseObject({
   id: string().optional(),
@@ -113060,7 +113227,7 @@ var registerListChannelsTool = (server) => {
 
 // src/tools/list-services.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var serviceWithAgentNameOutputShape = looseObject({
   id: string().optional(),
@@ -113138,7 +113305,7 @@ var registerListServicesTool = (server) => {
 
 // src/tools/manage-user.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var userOutputShape = looseObject({
   id: string().optional(),
@@ -113353,7 +113520,7 @@ var registerManageUserTool = (server) => {
 
 // src/tools/mcp-servers/mcp-server-create.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerMcpServerCreateTool = (server) => {
   createToolRegistrar(server)("mcp-server-create", {
@@ -113458,7 +113625,7 @@ var registerMcpServerCreateTool = (server) => {
 };
 // src/tools/mcp-servers/mcp-server-delete.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerMcpServerDeleteTool = (server) => {
   createToolRegistrar(server)("mcp-server-delete", {
@@ -113503,7 +113670,7 @@ var registerMcpServerDeleteTool = (server) => {
 };
 // src/tools/mcp-servers/mcp-server-get.ts
 init_zod();
-init_db();
+init_db2();
 var registerMcpServerGetTool = (server) => {
   createToolRegistrar(server)("mcp-server-get", {
     title: "Get MCP Server",
@@ -113540,7 +113707,7 @@ var registerMcpServerGetTool = (server) => {
 };
 // src/tools/mcp-servers/mcp-server-install.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerMcpServerInstallTool = (server) => {
   createToolRegistrar(server)("mcp-server-install", {
@@ -113598,7 +113765,7 @@ var registerMcpServerInstallTool = (server) => {
 };
 // src/tools/mcp-servers/mcp-server-list.ts
 init_zod();
-init_db();
+init_db2();
 function renderServerLines(servers) {
   if (servers.length === 0)
     return;
@@ -113647,7 +113814,7 @@ var registerMcpServerListTool = (server) => {
 };
 // src/tools/mcp-servers/mcp-server-uninstall.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerMcpServerUninstallTool = (server) => {
   createToolRegistrar(server)("mcp-server-uninstall", {
@@ -113691,10 +113858,10 @@ var registerMcpServerUninstallTool = (server) => {
 };
 // src/tools/mcp-servers/mcp-server-update.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/be/mcp-server-checked-update.ts
-init_db();
+init_db2();
 async function updateMcpServerChecked(id, updates, check) {
   return await getDbClient().transaction(async () => {
     const existing = await getMcpServerById(id);
@@ -113817,7 +113984,8 @@ var registerMcpServerUpdateTool = (server) => {
 };
 // src/tools/memory-delete.ts
 init_zod();
-init_db();
+init_db2();
+init_memory();
 init_rbac();
 var registerMemoryDeleteTool = (server) => {
   createToolRegistrar(server)("memory-delete", {
@@ -113863,7 +114031,8 @@ var registerMemoryDeleteTool = (server) => {
 
 // src/tools/memory-edit.ts
 init_zod();
-init_db();
+init_db2();
+init_memory();
 
 // src/be/memory/key-guard.ts
 init_rbac();
@@ -113913,7 +114082,7 @@ function assertKeyWritable(key, origin, writer) {
 init_key_paths();
 
 // src/be/memory/link-resolver.ts
-init_db();
+init_db2();
 init_constants();
 var WIKILINK_RE = /\[\[([^\]]+)\]\]/g;
 var PR_HASH_RE = /(?:^|[\s(])#(\d{1,5})(?=[\s,.)!?]|$)/gm;
@@ -114270,7 +114439,8 @@ var registerMemoryEditTool = (server) => {
 
 // src/tools/memory-get.ts
 init_zod();
-init_db();
+init_db2();
+init_memory();
 
 // src/be/memory/access.ts
 function canReadMemory(memory, agentId) {
@@ -114278,7 +114448,7 @@ function canReadMemory(memory, agentId) {
 }
 
 // src/be/memory/links-store.ts
-init_db();
+init_db2();
 function redactedTargetId(sourceText) {
   const wikilink = /^\[\[(.+)\]\]$/.exec(sourceText ?? "");
   return wikilink?.[1] ?? "";
@@ -114568,11 +114738,12 @@ var registerMemoryRateTool = (server) => {
 
 // src/tools/memory-search.ts
 init_zod();
-init_db();
+init_db2();
+init_memory();
 init_constants2();
 
 // src/be/memory/graph-expansion.ts
-init_db();
+init_db2();
 init_constants2();
 init_sqlite_store();
 init_reranker();
@@ -114818,7 +114989,7 @@ var registerMemorySearchTool = (server) => {
 
 // src/tools/memory-store.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/be/chunking.ts
 var MAX_CHUNK_SIZE = 2000;
@@ -114968,6 +115139,7 @@ function addOverlap(chunks, _originalText) {
 }
 
 // src/be/memory/index-content.ts
+init_memory();
 init_secret_scrubber();
 async function indexMemoryContent(params) {
   const { agentId, content, name, scope, source, sourceTaskId, sourcePath, tags } = params;
@@ -115000,7 +115172,7 @@ async function indexMemoryContent(params) {
         intent: "re-index memory source path",
         changedByAgentId: agentId
       });
-      const embedding = await provider.embed(contentChunks[0].content);
+      const embedding = await provider.embed(result.memory.content);
       if (embedding)
         await store.updateEmbedding(result.memory.id, embedding, provider.name);
       try {
@@ -115040,7 +115212,7 @@ async function indexMemoryContent(params) {
   }
   (async () => {
     try {
-      const embeddings = await provider.embedBatch(contentChunks.map((c) => c.content));
+      const embeddings = await provider.embedBatch(memories.map((m) => m.content));
       for (let i = 0;i < embeddings.length; i++) {
         if (embeddings[i]) {
           await store.updateEmbedding(memories[i].id, embeddings[i], provider.name);
@@ -115132,7 +115304,7 @@ var registerMemoryStoreTool = (server) => {
 
 // src/tools/model-catalog/index.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 async function denyUnlessCatalogWriter(agentId) {
   const agent = await getAgentById(agentId);
@@ -115233,7 +115405,7 @@ var registerModelCatalogOverlayUpsertTool = (server) => {
 
 // src/tools/my-agent-info.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var agentOutputShape3 = looseObject({
   id: string().optional(),
@@ -115288,6 +115460,7 @@ var registerMyAgentInfoTool = (server) => {
 
 // src/tools/oauth-access-token.ts
 init_zod();
+init_oauth();
 init_secret_scrubber();
 function assertTokenUsable(provider, expiresAt, minValidityMs) {
   const expiresAtMs = Date.parse(expiresAt);
@@ -115411,7 +115584,7 @@ init_zod();
 // src/be/api-drain.ts
 init_api_drain();
 init_secret_scrubber();
-init_db();
+init_db2();
 var DEFAULT_API_DRAIN_MAX_MS = 0;
 var DRAIN_CHECK_INTERVAL_MS = 500;
 var LIVE_WORKER_WINDOW_MS = 30000;
@@ -115509,7 +115682,7 @@ function describe2(err) {
 }
 
 // src/tools/poll-task.ts
-init_db();
+init_db2();
 var DEFAULT_POLL_INTERVAL_MS = 2000;
 var MAX_POLL_DURATION_MS = 1 * 60 * 1000;
 var registerPollTaskTool = (server) => {
@@ -115677,7 +115850,7 @@ var registerPollTaskTool = (server) => {
 
 // src/tools/post-message.ts
 init_zod();
-init_db();
+init_db2();
 var PostedMessageSchema = looseObject({
   id: string().optional(),
   channelId: string().optional(),
@@ -115736,7 +115909,7 @@ var registerPostMessageTool = (server) => {
 
 // src/tools/prompt-templates/delete.ts
 init_zod();
-init_db();
+init_db2();
 var registerDeletePromptTemplateTool = (server) => {
   createToolRegistrar(server)("delete-prompt-template", {
     title: "Delete Prompt Template",
@@ -115779,7 +115952,7 @@ var registerDeletePromptTemplateTool = (server) => {
 };
 // src/tools/prompt-templates/get.ts
 init_zod();
-init_db();
+init_db2();
 init_registry();
 var promptTemplateOutputShape = looseObject({
   id: string().optional(),
@@ -115859,7 +116032,7 @@ History: ${history.length} version(s)`,
 };
 // src/tools/prompt-templates/list.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var promptTemplateOutputShape2 = looseObject({
   id: string().optional(),
@@ -115964,7 +116137,7 @@ Unresolved variables: ${unresolved.join(", ")}` : ""}`,
 };
 // src/tools/prompt-templates/set.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var promptTemplateOutputShape3 = looseObject({
   id: string().optional(),
@@ -116031,7 +116204,7 @@ var registerSetPromptTemplateTool = (server) => {
 };
 // src/tools/read-messages.ts
 init_zod();
-init_db();
+init_db2();
 var ChannelMessageOutputSchema = looseObject({
   id: string().optional(),
   channelId: string().optional(),
@@ -116156,7 +116329,7 @@ var registerReadMessagesTool = (server) => {
 
 // src/tools/register-agentmail-inbox.ts
 init_zod();
-init_db();
+init_db2();
 var registerRegisterAgentmailInboxTool = (server) => {
   createToolRegistrar(server)("register-agentmail-inbox", {
     title: "Register AgentMail Inbox",
@@ -116229,7 +116402,7 @@ ${mappings.map((m) => `  - ${m.inboxId} (${m.inboxEmail ?? "no email"})`).join(`
 
 // src/tools/register-kapso-number.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/integrations/kapso/client.ts
 init_secret_scrubber();
@@ -116402,7 +116575,7 @@ async function registerKapsoWebhook(params) {
 }
 
 // src/integrations/kapso/config.ts
-init_db();
+init_db2();
 var KAPSO_NUMBERS_NAMESPACE = "integrations:kapso:numbers";
 var KAPSO_DEDUPE_NAMESPACE = "integrations:kapso:dedupe";
 var KAPSO_DEDUPE_TTL_MS = 24 * 60 * 60 * 1000;
@@ -116584,7 +116757,7 @@ var registerUnregisterKapsoNumberTool = (server) => {
 
 // src/tools/register-service.ts
 init_zod();
-init_db();
+init_db2();
 import path2 from "node:path";
 init_types();
 var serviceOutputShape = looseObject({
@@ -116715,7 +116888,7 @@ var registerRegisterServiceTool = (server) => {
 
 // src/tools/repos/get-repos.ts
 init_zod();
-init_db();
+init_db2();
 var swarmRepoOutputShape = looseObject({
   id: string().optional(),
   url: string().optional(),
@@ -116759,10 +116932,10 @@ var registerGetReposTool = (server) => {
 };
 // src/tools/repos/update-repo.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/be/repo-checked-update.ts
-init_db();
+init_db2();
 
 // src/be/repo-merge-policy.ts
 function changesAllowMerge(current, incoming) {
@@ -116854,14 +117027,14 @@ var registerUpdateRepoTool = (server) => {
 };
 // src/tools/request-human-input.ts
 init_zod();
-init_db();
+init_db2();
 init_constants();
 var QuestionSchema = object({
   id: string().describe("Unique ID for the question (used as key in responses)"),
   type: _enum(["approval", "text", "single-select", "multi-select", "boolean"]).describe("Question type"),
   label: string().describe("The question text displayed to the user"),
   required: boolean().optional().describe("Whether this question is required (default: true)"),
-  description: string().optional().describe("Optional help text"),
+  description: string().optional().describe("Optional help text, rendered as markdown (code fences, images)"),
   placeholder: string().optional().describe("Placeholder text (for text type)"),
   multiline: boolean().optional().describe("Use textarea instead of input (for text type)"),
   options: array(object({
@@ -116877,7 +117050,7 @@ var registerRequestHumanInputTool = (server) => {
   createToolRegistrar(server)("request-human-input", {
     title: "Request human input",
     annotations: { destructiveHint: false },
-    description: "Create an approval request and return at once with the request id and URL. The answer arrives later as a hitl-follow-up task. " + "Supports multiple question types: approval (yes/no), text, single-select, " + "multi-select, and boolean. Returns the request ID and URL for the human to respond.",
+    description: "Create an approval request and return at once with the request id and URL. The answer arrives later as a hitl-follow-up task. " + "Supports multiple question types: approval (yes/no), text, single-select, " + "multi-select, and boolean. Returns the request ID and URL for the human to respond. " + "The dashboard renders each label and description as markdown: put long content in description, fence code with a language, and put an image URL alone on its own line to show it. " + "No Slack message is sent; share the URL yourself.",
     inputSchema: object({
       title: string().min(1).describe("Title of the approval request"),
       questions: array(QuestionSchema).min(1).describe("Questions to ask the human"),
@@ -117015,7 +117188,7 @@ var registerResolveUserTool = (server) => {
 init_zod();
 
 // src/realtime/auth.ts
-init_db();
+init_db2();
 init_rbac_roles();
 
 // src/comb/config.ts
@@ -122877,7 +123050,7 @@ var removeAwarenessStates = (awareness, clients, origin) => {
 };
 
 // src/realtime/rooms.ts
-init_db();
+init_db2();
 init_secret_scrubber();
 init_bus();
 var ROOM_KEY_PREFIX = "_room/";
@@ -123444,6 +123617,7 @@ var registerRoomDecodeTool = (server) => {
 // src/tools/schedules/create-schedule.ts
 init_zod();
 var import_cron_parser2 = __toESM(require_dist2(), 1);
+init_db2();
 init_db();
 init_types();
 var createScheduleInputSchema = object({
@@ -123660,13 +123834,15 @@ var registerCreateScheduleTool = (server) => {
 };
 // src/tools/schedules/delete-schedule.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/be/events.ts
-init_db();
+init_secret_scrubber();
+init_db2();
+init_scrub_json();
 
 // src/be/memory/key-browser.ts
-init_db();
+init_db2();
 var MEMORY_KEYS_DEFAULT_PREFIX = "/longterm/";
 var MEMORY_KEYS_MAX_LIMIT = 2000;
 function estimateTokens(chars) {
@@ -123899,6 +124075,13 @@ function rowToSwarmEvent(row) {
 var INSERT_EVENT_SQL = `INSERT INTO events (id, category, event, status, source, agentId, taskId,
        sessionId, parentEventId, numericValue, durationMs, data, createdAt)
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))`;
+function serializeEventData(data) {
+  const raw = JSON.stringify(data);
+  const scrubbed = scrubSecrets(raw);
+  if (!breaksJsonValidity(raw, scrubbed))
+    return scrubbed;
+  return JSON.stringify(scrubObject(data));
+}
 async function insertEvent(db, id2, input) {
   await db.run(INSERT_EVENT_SQL, [
     id2,
@@ -123912,7 +124095,7 @@ async function insertEvent(db, id2, input) {
     input.parentEventId ?? null,
     input.numericValue ?? null,
     input.durationMs ?? null,
-    input.data ? JSON.stringify(input.data) : null
+    input.data ? serializeEventData(input.data) : null
   ]);
   await recordSkillInvocation(db, input, id2);
 }
@@ -124121,7 +124304,7 @@ var registerDeleteScheduleTool = (server) => {
 };
 // src/tools/schedules/list-schedules.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var scheduleRowShape = {
   id: string().optional(),
@@ -124223,7 +124406,7 @@ var registerListSchedulesTool = (server) => {
 // src/tools/schedules/patch-schedule.ts
 init_zod();
 var import_cron_parser3 = __toESM(require_dist2(), 1);
-init_db();
+init_db2();
 
 // src/be/schedules/validate.ts
 function mergeScheduleTiming(existing, patch) {
@@ -124240,6 +124423,7 @@ function validateRecurringTiming(merged) {
 }
 
 // src/tools/schedules/patch-schedule.ts
+init_db();
 init_types();
 var patchScheduleInputSchema = object({
   key: AssetKeySchema.optional().describe("Move to a logical namespace."),
@@ -124490,7 +124674,7 @@ var registerPatchScheduleTool = (server) => {
 };
 // src/tools/schedules/run-schedule-now.ts
 init_zod();
-init_db();
+init_db2();
 var registerRunScheduleNowTool = (server) => {
   createToolRegistrar(server)("run-schedule-now", {
     title: "Run Schedule Now",
@@ -124549,6 +124733,7 @@ var registerRunScheduleNowTool = (server) => {
 // src/tools/schedules/update-schedule.ts
 init_zod();
 var import_cron_parser4 = __toESM(require_dist2(), 1);
+init_db2();
 init_db();
 init_types();
 var updateScheduleInputSchema = object({
@@ -124800,7 +124985,7 @@ var registerUpdateScheduleTool = (server) => {
 };
 // src/tools/script-apis.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 init_secret_scrubber();
 var scriptApisInputSchema = object({
@@ -124973,7 +125158,7 @@ var registerScriptApisTool = (server) => {
 
 // src/tools/script-connections/tool.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var scriptConnectionsInputSchema = object({
   action: _enum(["list", "upsert-openapi", "upsert-mcp", "upsert-graphql", "refresh", "disable"]).describe("List, create/update, refresh, or disable a script connection."),
@@ -125549,12 +125734,12 @@ var registerScriptUpsertTool = (server) => {
 
 // src/tools/send-task.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 init_slack_routing();
 
 // src/tools/task-dedup.ts
-init_db();
+init_db2();
 function jaccardSimilarity(a, b) {
   const tokenize = (s) => new Set(s.toLowerCase().replace(/[^\w\s]/g, " ").split(/\s+/).filter((w) => w.length > 0));
   const wordsA = tokenize(a);
@@ -126003,7 +126188,7 @@ var registerSendTaskTool = (server) => {
 
 // src/tools/skills/skill-create.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSkillCreateTool = (server) => {
   createToolRegistrar(server)("skill-create", {
@@ -126072,7 +126257,7 @@ var registerSkillCreateTool = (server) => {
 };
 // src/tools/skills/skill-delete.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var SYSTEM_DEFAULT_SKILL_LOCKED_MESSAGE = "This skill is system-managed and cannot be edited from the UI; it is re-seeded on each start. Fork it under a new name to customize.";
 var registerSkillDeleteTool = (server) => {
@@ -126122,7 +126307,7 @@ var registerSkillDeleteTool = (server) => {
 };
 // src/tools/skills/skill-get.ts
 init_zod();
-init_db();
+init_db2();
 var registerSkillGetTool = (server) => {
   createToolRegistrar(server)("skill-get", {
     title: "Get Skill",
@@ -126161,7 +126346,7 @@ ${skill.content}`,
 };
 // src/tools/skills/skill-get-file.ts
 init_zod();
-init_db();
+init_db2();
 var registerSkillGetFileTool = (server) => {
   createToolRegistrar(server)("skill-get-file", {
     title: "Get Skill File",
@@ -126200,7 +126385,7 @@ ${file.content}`,
 };
 // src/tools/skills/skill-install.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSkillInstallTool = (server) => {
   createToolRegistrar(server)("skill-install", {
@@ -126259,7 +126444,7 @@ var registerSkillInstallTool = (server) => {
 };
 // src/tools/skills/skill-install-remote.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSkillInstallRemoteTool = (server) => {
   createToolRegistrar(server)("skill-install-remote", {
@@ -126357,7 +126542,7 @@ var registerSkillInstallRemoteTool = (server) => {
 };
 // src/tools/skills/skill-list.ts
 init_zod();
-init_db();
+init_db2();
 function renderSkillList(skills) {
   if (skills.length === 0)
     return;
@@ -126407,7 +126592,7 @@ var registerSkillListTool = (server) => {
 };
 // src/tools/skills/skill-publish.ts
 init_zod();
-init_db();
+init_db2();
 var registerSkillPublishTool = (server) => {
   createToolRegistrar(server)("skill-publish", {
     title: "Publish Skill",
@@ -126479,7 +126664,7 @@ To reject: close this task with a rejection reason.`;
 };
 // src/tools/skills/skill-search.ts
 init_zod();
-init_db();
+init_db2();
 function renderSkillList2(skills) {
   if (skills.length === 0)
     return;
@@ -126514,7 +126699,7 @@ var registerSkillSearchTool = (server) => {
 };
 // src/tools/skills/skill-sync-remote.ts
 init_zod();
-init_db();
+init_db2();
 function contentHash(content) {
   const hash = new Bun.CryptoHasher("sha256").update(content).digest("hex");
   return hash;
@@ -126606,7 +126791,7 @@ var registerSkillSyncRemoteTool = (server) => {
 };
 // src/tools/skills/skill-uninstall.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSkillUninstallTool = (server) => {
   createToolRegistrar(server)("skill-uninstall", {
@@ -126650,7 +126835,7 @@ var registerSkillUninstallTool = (server) => {
 };
 // src/tools/skills/skill-update.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var SYSTEM_DEFAULT_SKILL_LOCKED_MESSAGE2 = "This skill is system-managed and cannot be edited from the UI; it is re-seeded on each start. Fork it under a new name to customize.";
 var registerSkillUpdateTool = (server) => {
@@ -126754,7 +126939,7 @@ var registerSkillUpdateTool = (server) => {
 };
 // src/tools/slack-archive-channel.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 
 // src/slack/channel-join.ts
@@ -126932,7 +127117,7 @@ var registerSlackArchiveChannelTool = (server) => {
 
 // src/tools/slack-create-channel.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSlackCreateChannelTool = (server) => {
   createToolRegistrar(server)("slack-create-channel", {
@@ -126988,7 +127173,7 @@ var registerSlackCreateChannelTool = (server) => {
 
 // src/tools/slack-delete.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 
 // src/slack/message-text.ts
@@ -127206,17 +127391,17 @@ var registerSlackDeleteTool = (server) => {
 
 // src/tools/slack-download-file.ts
 init_zod();
-init_db();
+init_db2();
 
 // src/slack/inbound-files.ts
-init_db();
+init_db2();
 import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
 import { join as join2 } from "node:path";
 
 // src/be/task-attachment-store.ts
 init_secret_scrubber();
-init_db();
+init_db2();
 var MAX_TASK_ATTACHMENT_BYTES = 50 * 1024 * 1024;
 async function recordTaskAttachmentUpload(input) {
   const { provider, scope, uploaded, contentType } = input;
@@ -127683,7 +127868,7 @@ ${fetchCommand}`,
 
 // src/tools/slack-invite-to-channel.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSlackInviteToChannelTool = (server) => {
   createToolRegistrar(server)("slack-invite-to-channel", {
@@ -127738,7 +127923,7 @@ var registerSlackInviteToChannelTool = (server) => {
 
 // src/tools/slack-list-channels.ts
 init_zod();
-init_db();
+init_db2();
 var SlackChannelSchema = looseObject({
   id: string().optional(),
   name: string().optional(),
@@ -127833,7 +128018,7 @@ var registerSlackListChannelsTool = (server) => {
 
 // src/tools/slack-post.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSlackPostTool = (server) => {
   createToolRegistrar(server)("slack-post", {
@@ -127937,7 +128122,7 @@ var registerSlackPostTool = (server) => {
 
 // src/tools/slack-read.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var AUTO_DOWNLOAD_DIR = "/app/shared/downloads/slack";
 var SlackFileSchema = looseObject({
@@ -128167,7 +128352,7 @@ ${fileList}`;
 
 // src/tools/slack-reply.ts
 init_zod();
-init_db();
+init_db2();
 var registerSlackReplyTool = (server) => {
   createToolRegistrar(server)("slack-reply", {
     title: "Reply to Slack thread",
@@ -128307,7 +128492,7 @@ var registerSlackReplyTool = (server) => {
 
 // src/tools/slack-start-thread.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSlackStartThreadTool = (server) => {
   createToolRegistrar(server)("slack-start-thread", {
@@ -128396,7 +128581,7 @@ var registerSlackStartThreadTool = (server) => {
 
 // src/tools/slack-update.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var registerSlackUpdateTool = (server) => {
   createToolRegistrar(server)("slack-update", {
@@ -128483,7 +128668,7 @@ var registerSlackUpdateTool = (server) => {
 
 // src/tools/slack-upload-file.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 var WORKSPACE_DIR = "/workspace";
 function resolveTaskUploadThreadTs(task) {
@@ -128675,7 +128860,7 @@ ${triedPathsList}
 
 // src/tools/steer-task.ts
 init_zod();
-init_db();
+init_db2();
 init_steering();
 init_rbac();
 init_types();
@@ -128772,7 +128957,7 @@ var registerSteerTaskTool = (server) => {
 
 // src/tools/store-progress.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 init_types();
 init_secret_scrubber();
@@ -129130,7 +129315,7 @@ This check refuses once per task; the next completion is accepted and unfixed ci
 
 // src/tools/swarm-config/delete-config.ts
 init_zod();
-init_db();
+init_db2();
 init_swarm_config_guard();
 init_rbac();
 var registerDeleteConfigTool = (server) => {
@@ -129202,7 +129387,7 @@ var registerDeleteConfigTool = (server) => {
 };
 // src/tools/swarm-config/get-config.ts
 init_zod();
-init_db();
+init_db2();
 init_swarm_config_guard();
 init_rbac();
 init_types();
@@ -129293,7 +129478,7 @@ var registerGetConfigTool = (server) => {
 };
 // src/tools/swarm-config/list-config.ts
 init_zod();
-init_db();
+init_db2();
 init_swarm_config_guard();
 init_rbac();
 init_types();
@@ -129384,7 +129569,7 @@ var registerListConfigTool = (server) => {
 };
 // src/tools/swarm-config/set-config.ts
 init_zod();
-init_db();
+init_db2();
 init_swarm_config_guard();
 init_rbac();
 init_types();
@@ -129562,7 +129747,7 @@ init_zod();
 
 // src/be/budget-admission.ts
 init_env_flag();
-init_db();
+init_db2();
 var killSwitchWarned = false;
 function dateUtcFrom(now) {
   return now.toISOString().slice(0, 10);
@@ -129628,7 +129813,7 @@ async function canClaim(agentId, nowUtc, requestedByUserId) {
 // src/be/budget-refusal-notify.ts
 init_resolver();
 init_secret_scrubber();
-init_db();
+init_db2();
 function formatSpendSummary(ctx) {
   const fmt = (n) => n === undefined ? "?" : `$${n.toFixed(2)}`;
   if (ctx.cause === "agent") {
@@ -129679,7 +129864,7 @@ async function emitBudgetRefusalSideEffects(ctx, inserted) {
       console.warn(`[budget-refusal-notify] Failed to create follow-up task for budget refusal (task=${ctx.task.id.slice(0, 8)}): ${err}`);
     }
   }
-  import("./event-bus-w7ac4n3c.js").then(({ workflowEventBus: workflowEventBus2 }) => {
+  import("./event-bus-vnfthafg.js").then(({ workflowEventBus: workflowEventBus2 }) => {
     workflowEventBus2.emit("task.budget_refused", {
       taskId: ctx.task.id,
       agentId: ctx.agentId,
@@ -129696,7 +129881,7 @@ async function emitBudgetRefusalSideEffects(ctx, inserted) {
 }
 
 // src/tools/task-action.ts
-init_db();
+init_db2();
 init_types();
 var TaskActionSchema = _enum([
   "create",
@@ -130235,6 +130420,7 @@ var registerTrackerMapAgentTool = (server) => {
 };
 // src/tools/tracker/tracker-status.ts
 init_zod();
+init_oauth();
 var registerTrackerStatusTool = (server) => {
   createToolRegistrar(server)("tracker-status", {
     title: "Tracker Status",
@@ -130321,7 +130507,7 @@ var registerTrackerUnlinkTool = (server) => {
 };
 // src/tools/unregister-service.ts
 init_zod();
-init_db();
+init_db2();
 var registerUnregisterServiceTool = (server) => {
   createToolRegistrar(server)("unregister-service", {
     title: "Unregister Service",
@@ -130376,7 +130562,7 @@ var registerUnregisterServiceTool = (server) => {
 
 // src/tools/update-profile.ts
 init_zod();
-init_db();
+init_db2();
 init_rbac();
 import { mkdtemp as mkdtemp2, rm as rm2 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
@@ -130627,7 +130813,7 @@ ${setupScript}
 
 // src/tools/update-service-status.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var serviceOutputShape2 = looseObject({
   id: string().optional(),
@@ -130797,7 +130983,7 @@ var registerCancelWorkflowRunTool = (server) => {
 };
 // src/tools/workflows/create-workflow.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 
 // src/workflows/model-validation.ts
@@ -130924,7 +131110,7 @@ var registerCreateWorkflowTool = (server) => {
 };
 // src/tools/workflows/delete-workflow.ts
 init_zod();
-init_db();
+init_db2();
 var registerDeleteWorkflowTool = (server) => {
   createToolRegistrar(server)("delete-workflow", {
     title: "Delete Workflow",
@@ -130948,7 +131134,7 @@ var registerDeleteWorkflowTool = (server) => {
 };
 // src/tools/workflows/get-workflow.ts
 init_zod();
-init_db();
+init_db2();
 var registerGetWorkflowTool = (server) => {
   createToolRegistrar(server)("get-workflow", {
     title: "Get Workflow",
@@ -130979,7 +131165,7 @@ var registerGetWorkflowTool = (server) => {
 };
 // src/tools/workflows/get-workflow-run.ts
 init_zod();
-init_db();
+init_db2();
 var STEP_VALUE_CAP = 400;
 function stepValuePreview(value) {
   if (value === undefined || value === null)
@@ -131019,11 +131205,11 @@ var registerGetWorkflowRunTool = (server) => {
     })
   }, async ({ id: id2 }) => {
     try {
-      const run = await getWorkflowRun(id2);
+      const run = await getWorkflowRun(id2, "display");
       if (!run) {
         return toolErr(`Workflow run not found: ${id2}`, { data: { steps: [] } });
       }
-      const steps = await getWorkflowRunStepsByRunId(id2);
+      const steps = await getWorkflowRunStepsByRunId(id2, "display");
       return toolOk(`Run ${id2} status: ${run.status}.`, {
         details: renderSteps(steps),
         data: { run, steps }
@@ -131035,7 +131221,7 @@ var registerGetWorkflowRunTool = (server) => {
 };
 // src/tools/workflows/list-workflow-runs.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var DEFAULT_RUN_LIMIT = 20;
 var TRIGGER_DATA_SUMMARY_CAP = 400;
@@ -131119,7 +131305,7 @@ var registerListWorkflowRunsTool = (server) => {
 };
 // src/tools/workflows/list-workflows.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var registerListWorkflowsTool = (server) => {
   createToolRegistrar(server)("list-workflows", {
@@ -131152,7 +131338,7 @@ init_zod();
 init_types();
 
 // src/workflows/patch-definition.ts
-init_db();
+init_db2();
 async function patchWorkflowDefinition(options) {
   const { id: id2, patch, registry, snapshotAgentId, snapshotOptional, updates } = options;
   return await getDbClient().transaction(async () => {
@@ -131360,7 +131546,7 @@ var registerRetryWorkflowRunTool = (server) => {
 };
 // src/tools/workflows/trigger-workflow.ts
 init_zod();
-init_db();
+init_db2();
 var registerTriggerWorkflowTool = (server) => {
   createToolRegistrar(server)("trigger-workflow", {
     title: "Trigger Workflow",
@@ -131427,7 +131613,7 @@ ${bulleted}${schemaBlock}`,
 };
 // src/tools/workflows/update-workflow.ts
 init_zod();
-init_db();
+init_db2();
 init_types();
 var registerUpdateWorkflowTool = (server) => {
   createToolRegistrar(server)("update-workflow", {
@@ -131519,6 +131705,9 @@ var registerUpdateWorkflowTool = (server) => {
     }
   });
 };
+// src/server.ts
+init_enabled_tools();
+
 // src/utils/scripts-only-mode.ts
 init_env_flag();
 function resolveScriptsOnlyMode(opts) {
@@ -131583,9 +131772,43 @@ function getEnabledCapabilities() {
 function isScriptsOnlyMcp() {
   return resolveScriptsOnlyMode({ env: process.env.SCRIPTS_ONLY_MCP });
 }
+var loggedToolAllowlistWarnings = new Set;
+function warnToolAllowlistOnce(message) {
+  if (loggedToolAllowlistWarnings.has(message))
+    return;
+  loggedToolAllowlistWarnings.add(message);
+  console.warn(message);
+}
+function resolveToolAllowlist(value) {
+  if (value === undefined)
+    return;
+  try {
+    const tools = parseEnabledTools(value);
+    if (!tools) {
+      warnToolAllowlistOnce("[MCP] SWARM_ENABLED_TOOLS is set but lists no tools; ignoring it");
+    }
+    return tools;
+  } catch {
+    warnToolAllowlistOnce("[MCP] Invalid SWARM_ENABLED_TOOLS; ignoring it");
+    return;
+  }
+}
+function applyToolAllowlist(server, allowlist) {
+  const tools = server._registeredTools;
+  const allowed = new Set(allowlist);
+  for (const [name, tool] of Object.entries(tools)) {
+    if (!allowed.has(name))
+      tool.remove();
+  }
+  const unknown3 = allowlist.filter((name) => !Object.hasOwn(tools, name));
+  if (unknown3.length > 0) {
+    warnToolAllowlistOnce(`[MCP] SWARM_ENABLED_TOOLS names unknown tools, ignoring them: ${unknown3.join(", ")}`);
+  }
+}
 async function createServer(opts = {}) {
   await loadGlobalConfigsIntoEnv(true);
-  const hasCapability2 = (cap) => opts.fullSurface === true || getCapabilities().has(cap);
+  const toolAllowlist = opts.fullSurface === true ? undefined : resolveToolAllowlist(opts.enabledTools ?? process.env.SWARM_ENABLED_TOOLS);
+  const hasCapability2 = (cap) => opts.fullSurface === true || toolAllowlist !== undefined || getCapabilities().has(cap);
   initDb(process.env.DATABASE_PATH);
   ensurePricingSeeded();
   startPricingRefreshLoop();
@@ -131609,7 +131832,7 @@ async function createServer(opts = {}) {
   });
   if (opts.preloadedTools?.length)
     setPreloadedTools(server, opts.preloadedTools);
-  if (opts.scriptsOnly ?? isScriptsOnlyMcp()) {
+  if (toolAllowlist === undefined && (opts.scriptsOnly ?? isScriptsOnlyMcp())) {
     registerScriptSearchTool(server);
     registerScriptRunTool(server);
     registerScriptUpsertTool(server);
@@ -131820,6 +132043,8 @@ async function createServer(opts = {}) {
     registerListServicesTool(server);
     registerUpdateServiceStatusTool(server);
   }
+  if (toolAllowlist)
+    applyToolAllowlist(server, toolAllowlist);
   return server;
 }
 
@@ -132718,12 +132943,12 @@ function createSwarmSdk(config) {
 init_secret_scrubber();
 
 // src/extensions/lifecycle.ts
-init_db();
+init_db2();
 init_types();
 init_secret_scrubber();
 
 // src/extensions/identity.ts
-init_db();
+init_db2();
 function extensionAgentName(name) {
   return `ext:${name}`;
 }
@@ -132901,7 +133126,7 @@ async function loadExtension(input) {
 }
 
 // src/extensions/post-bridge.ts
-init_db();
+init_db2();
 init_secret_scrubber();
 init_event_bus();
 var subscribed3 = false;
@@ -134385,7 +134610,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp: getSlackApp2 } = await import("./app-75hm5cfa.js");
+        const { getSlackApp: getSlackApp2 } = await import("./app-nctetn1e.js");
         const app = getSlackApp2();
         if (!app) {
           return {
@@ -134515,7 +134740,8 @@ async function executeRawLlm(config) {
     modelName = llmConfig.model;
     const provider = createOpenAI({
       baseURL: llmConfig.baseURL,
-      apiKey: llmConfig.apiKey
+      apiKey: llmConfig.apiKey,
+      headers: llmConfig.headers
     });
     const model = provider(llmConfig.model);
     if (config.schema) {
@@ -134738,6 +134964,7 @@ class ScriptExecutor extends BaseExecutor {
 
 // src/workflows/executors/swarm-script.ts
 init_zod();
+init_db();
 init_constants();
 init_template();
 var SWARM_SCRIPT_DEFAULT_TIMEOUT_MS = DEFAULT_SCRIPT_RESOURCES.wallClockMs;
@@ -134975,7 +135202,8 @@ class ValidateExecutor extends BaseExecutor {
       const llmConfig = await resolveWorkflowLlmConfig();
       const provider = createOpenAI({
         baseURL: llmConfig.baseURL,
-        apiKey: llmConfig.apiKey
+        apiKey: llmConfig.apiKey,
+        headers: llmConfig.headers
       });
       const { object: object4 } = await generateObject({
         model: provider(llmConfig.model),