@desplega.ai/agent-swarm 1.172.0 → 1.173.0

package/dist/{cli-k46r9hmk.js → cli-94b48jhk.js}

@@ -15,7 +15,7 @@ import {
 } from "./cli-zm7njwzd.js";
 import {
   summarizeSession
-} from "./cli-cf69s3ew.js";
+} from "./cli-nwrdx840.js";
 import {
   resolveCodexPrompt
 } from "./cli-ptcz1cqy.js";
@@ -61,7 +61,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-esnpehf5.js";
+} from "./cli-5er5gjbm.js";
 import {
   init_env_flag,
   isEnvFlagEnabled

package/dist/{cli-gp1rtyvk.js → cli-9xf7fdtp.js}

@@ -1,14 +1,14 @@
 import {
   buildModelsDevSeedRows,
   loadModelsDevCache
-} from "./cli-r8smj8b8.js";
+} from "./cli-jpc4r224.js";
 import {
   createLogEntry,
   getActivePricingRow,
   getDbClient,
   init_db1 as init_db,
   insertPricingRow
-} from "./cli-tgpfnm6r.js";
+} from "./cli-fmhj1ehj.js";
 import {
   init_runtime_model_catalog,
   setRuntimeModelCatalog

package/dist/{cli-qsztpfry.js → cli-anzdk0z4.js}

@@ -6,7 +6,7 @@ import {
   getDb,
   getDbClient,
   init_db1 as init_db
-} from "./cli-tgpfnm6r.js";
+} from "./cli-fmhj1ehj.js";
 import {
   init_env_flag,
   isEnvFlagEnabled

package/dist/{cli-cceskcvt.js → cli-b07hr3bt.js}

@@ -5413,7 +5413,7 @@ function amazonBedrockProvider() {
 }
 
 // node_modules/@earendil-works/pi-ai/dist/api/openai-completions.lazy.js
-var openAICompletionsApi = () => lazyApi(() => import("./openai-completions-s88xm3ns.js"));
+var openAICompletionsApi = () => lazyApi(() => import("./openai-completions-5d4jpakc.js"));
 
 // node_modules/@earendil-works/pi-ai/dist/auth/helpers.js
 function envApiKeyAuth(name, envVars) {
@@ -5469,7 +5469,7 @@ function antLingProvider() {
 }
 
 // node_modules/@earendil-works/pi-ai/dist/api/anthropic-messages.lazy.js
-var anthropicMessagesApi = () => lazyApi(() => import("./anthropic-messages-8ee2f22q.js"));
+var anthropicMessagesApi = () => lazyApi(() => import("./anthropic-messages-r6czkjv1.js"));
 
 // node_modules/@earendil-works/pi-ai/dist/auth/oauth/load.js
 var __rewriteRelativeImportExtension = function(path, preserveJsx) {
@@ -5604,7 +5604,7 @@ function anthropicProvider() {
 }
 
 // node_modules/@earendil-works/pi-ai/dist/api/azure-openai-responses.lazy.js
-var azureOpenAIResponsesApi = () => lazyApi(() => import("./azure-openai-responses-ap1gwxgr.js"));
+var azureOpenAIResponsesApi = () => lazyApi(() => import("./azure-openai-responses-ygfreq4t.js"));
 
 // node_modules/@earendil-works/pi-ai/dist/providers/azure.js
 function resolveAzureModel(model, options) {
@@ -5666,7 +5666,7 @@ function cerebrasProvider() {
 }
 
 // node_modules/@earendil-works/pi-ai/dist/api/openai-responses.lazy.js
-var openAIResponsesApi = () => lazyApi(() => import("./openai-responses-7xd2f2e2.js"));
+var openAIResponsesApi = () => lazyApi(() => import("./openai-responses-krb51f59.js"));
 
 // node_modules/@earendil-works/pi-ai/dist/providers/cloudflare-auth.js
 var CLOUDFLARE_API_KEY = "CLOUDFLARE_API_KEY";
@@ -5870,7 +5870,7 @@ function githubCopilotProvider() {
 }
 
 // node_modules/@earendil-works/pi-ai/dist/api/google-generative-ai.lazy.js
-var googleGenerativeAIApi = () => lazyApi(() => import("./google-generative-ai-7pavrbv7.js"));
+var googleGenerativeAIApi = () => lazyApi(() => import("./google-generative-ai-szdxbpqg.js"));
 
 // node_modules/@earendil-works/pi-ai/dist/providers/google.js
 function googleProvider() {
@@ -5885,7 +5885,7 @@ function googleProvider() {
 }
 
 // node_modules/@earendil-works/pi-ai/dist/api/google-vertex.lazy.js
-var googleVertexApi = () => lazyApi(() => import("./google-vertex-3f1jk41f.js"));
+var googleVertexApi = () => lazyApi(() => import("./google-vertex-qzw3p36d.js"));
 
 // node_modules/@earendil-works/pi-ai/dist/providers/google-vertex.js
 var VERTEX_ADC_PATH = "~/.config/gcloud/application_default_credentials.json";
@@ -6142,7 +6142,7 @@ function openaiProvider() {
 }
 
 // node_modules/@earendil-works/pi-ai/dist/api/openai-codex-responses.lazy.js
-var openAICodexResponsesApi = () => lazyApi(() => import("./openai-codex-responses-33qhkkdy.js"));
+var openAICodexResponsesApi = () => lazyApi(() => import("./openai-codex-responses-3bk0grnr.js"));
 
 // node_modules/@earendil-works/pi-ai/dist/providers/openai-codex.js
 function openaiCodexProvider() {
@@ -6360,7 +6360,7 @@ function qwenTokenPlanIndividualProvider() {
 }
 
 // node_modules/@earendil-works/pi-ai/dist/api/pi-messages.lazy.js
-var piMessagesApi = () => lazyApi(() => import("./pi-messages-xszk613n.js"));
+var piMessagesApi = () => lazyApi(() => import("./pi-messages-x9gzynm1.js"));
 
 // node_modules/@earendil-works/pi-ai/dist/providers/radius-config.js
 var DEFAULT_RADIUS_GATEWAY = "https://radius.pi.dev";

package/dist/{cli-c2pq2rjb.js → cli-bv2etw2y.js}

@@ -1,6 +1,6 @@
 import {
   applyOpenRouterBaseUrlOverride
-} from "./cli-j1pmc07z.js";
+} from "./cli-saqyage0.js";
 import {
   ACP_TARGET_IDS,
   getAcpTargetCatalogEntry,
@@ -45,7 +45,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-esnpehf5.js";
+} from "./cli-5er5gjbm.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-hwwvy36w.js → cli-c3rk1v0x.js}

@@ -1,18 +1,18 @@
 import {
   recordUnmappedIdentity,
   resolveIdentity
-} from "./cli-ztrv9y21.js";
+} from "./cli-rfz2ve55.js";
 import {
   findOrCreateUserByEmail,
   findUserByExternalId,
   init_users,
   linkIdentity
-} from "./cli-e0a9sk00.js";
+} from "./cli-3nxdmjrc.js";
 import {
   getKv,
   init_db1 as init_db,
   upsertKv
-} from "./cli-tgpfnm6r.js";
+} from "./cli-fmhj1ehj.js";
 
 // src/slack/enrich.ts
 init_db();

package/dist/{cli-tgpfnm6r.js → cli-fmhj1ehj.js}

@@ -36,7 +36,7 @@ import {
   init_profile_sync,
   matchesDefaultClaudeMd,
   matchesDefaultIdentityMd
-} from "./cli-nyhb1r6x.js";
+} from "./cli-r4fqfpwf.js";
 import {
   init_steering_enabled,
   isSteeringEnabled
@@ -94,10 +94,14 @@ import {
   string,
   union
 } from "./cli-w5e1d1vv.js";
+import {
+  getNodeEnv,
+  init_node_env
+} from "./cli-p0sg24zp.js";
 import {
   init_package,
   package_default
-} from "./cli-esnpehf5.js";
+} from "./cli-5er5gjbm.js";
 import {
   init_bus,
   realtimeBus
@@ -8327,6 +8331,14 @@ function azureDevOpsContextKey(input) {
   }
   return ["task", "trackers", "azure-devops", repositoryId, "pr", pullRequestId].join(SEPARATOR);
 }
+function azureDevOpsWorkItemContextKey(input) {
+  const organization = assertSafePart(input.organization, "organization");
+  const workItemId = assertSafePart(input.workItemId, "workItemId");
+  if (!/^\d+$/.test(workItemId)) {
+    throw new Error(`context-key: azure-devops "workItemId" must be a positive integer (got ${JSON.stringify(workItemId)})`);
+  }
+  return ["task", "trackers", "azure-devops", organization, "workitem", workItemId].join(SEPARATOR);
+}
 function linearContextKey(input) {
   const issueIdentifier = assertSafePart(input.issueIdentifier, "issueIdentifier");
   return ["task", "trackers", "linear", issueIdentifier].join(SEPARATOR);
@@ -8432,10 +8444,21 @@ function parseContextKey(key) {
         };
       }
       if (subFamily === "azure-devops") {
-        if (parts.length !== 6 || parts[4] !== "pr") {
+        if (parts.length !== 6 || parts[4] !== "pr" && parts[4] !== "workitem") {
           throw new Error(`context-key: malformed azure-devops key: ${JSON.stringify(key)}`);
         }
         const idStr = parts[5];
+        if (parts[4] === "workitem") {
+          const workItemId = Number.parseInt(idStr, 10);
+          if (!/^\d+$/.test(idStr) || !Number.isFinite(workItemId)) {
+            throw new Error(`context-key: malformed azure-devops workItemId "${idStr}": ${JSON.stringify(key)}`);
+          }
+          return {
+            family: "trackers",
+            subFamily: "azure-devops",
+            parts: { organization: parts[3], kind: "workitem", workItemId }
+          };
+        }
         const pullRequestId = Number.parseInt(idStr, 10);
         if (!Number.isFinite(pullRequestId)) {
           throw new Error(`context-key: malformed azure-devops pullRequestId "${idStr}": ${JSON.stringify(key)}`);
@@ -10463,8 +10486,8 @@ function getTelemetryEnvironment() {
   const explicit = process.env.DESPLEGA_TELEMETRY_ENV?.trim();
   if (explicit)
     return explicit;
-  if (false)
-    ;
+  if (getNodeEnv() === "test")
+    return "test";
   return "production";
 }
 function track(options) {
@@ -10557,6 +10580,7 @@ var init_telemetry = __esm(() => {
   init_config();
   init_telemetry_context();
   init_env_flag();
+  init_node_env();
   init_org_website();
   init_request_auth_context();
   CLOUD_HOST_EXACT = new Set([
@@ -12370,7 +12394,7 @@ var init_runtime = __esm(() => {
 // src/telemetry-identity.ts
 async function loadUserRole(userId) {
   try {
-    const { getUserGrant } = await import("./rbac-roles-q5gb5e8v.js");
+    const { getUserGrant } = await import("./rbac-roles-eszdg6pm.js");
     const grant = await getUserGrant(userId);
     const role = grant.grantsAll ? "admin" : "member";
     if (roleCache.size >= ROLE_CACHE_LIMIT) {
@@ -15297,6 +15321,7 @@ var init_swarm_config_guard = __esm(() => {
       "SLACK_DISABLE",
       "SLACK_RENDER_V2",
       "SLACK_RENDER_V2_DELEGATION",
+      "SLACK_BLOCK_EXTERNAL_CHANNELS",
       "GITHUB_DISABLE",
       "GITLAB_DISABLE",
       "AZURE_DEVOPS_DISABLE",
@@ -16580,7 +16605,7 @@ async function loadSecretRegistry() {
     result.failed += 1;
   }
   try {
-    const { loadRuntimeControllerSecrets } = await import("./db-hkqvrdcb.js");
+    const { loadRuntimeControllerSecrets } = await import("./db-yyhqqrbf.js");
     const loaded = await loadRuntimeControllerSecrets();
     result.runtimeController = loaded.count;
     result.failed += loaded.failed;
@@ -17582,15 +17607,30 @@ async function getSlackOutcomeMessage(taskId) {
   return row ? rowToSlackMessage(row) : null;
 }
 async function getResolvableDeferralOutcomes(limit2 = 50) {
-  const rows = await getDbClient().query(`SELECT card.*, wake.id AS wake_task_id
-       FROM slack_messages card
-       JOIN agent_tasks deferred ON deferred.id = card.task_id
-       JOIN agent_tasks wake ON wake.parentTaskId = deferred.id AND wake.taskType = 'deferred'
+  const rows = await getDbClient().query(`WITH RECURSIVE chain(card_id, task_id) AS (
+         SELECT card.id, deferred.id FROM slack_messages card
+         JOIN agent_tasks deferred ON deferred.id = card.task_id
+         WHERE card.kind = 'outcome' AND deferred.deferredAt IS NOT NULL
+           AND card.deferral_resolved_at IS NULL AND card.finalized_at IS NOT NULL
+           AND card.ts NOT LIKE 'pending:%'
+         UNION
+         SELECT chain.card_id, wake.id FROM chain
+         JOIN agent_tasks parent ON parent.id = chain.task_id AND parent.deferredAt IS NOT NULL
+         JOIN agent_tasks wake ON wake.parentTaskId = parent.id AND wake.taskType = 'deferred'
+       )
+       SELECT card.*, wake.id AS wake_task_id
+       FROM chain
+       JOIN slack_messages card ON card.id = chain.card_id
+       JOIN agent_tasks wake ON wake.id = chain.task_id AND wake.id != card.task_id
        WHERE card.kind = 'outcome'
          AND card.finalized_at IS NOT NULL
          AND card.deferral_resolved_at IS NULL
          AND card.ts NOT LIKE 'pending:%'
-         AND deferred.deferredAt IS NOT NULL
+         AND NOT EXISTS (
+           SELECT 1 FROM agent_tasks child
+           WHERE child.parentTaskId = wake.id AND child.taskType = 'deferred'
+         )
+         AND (wake.deferredAt IS NULL OR wake.finishedAt > card.updated_at)
          AND wake.status IN ('completed', 'failed', 'cancelled')
        ORDER BY wake.finishedAt ASC
        LIMIT ?`, [limit2]);
@@ -26151,4 +26191,4 @@ function getMemoryStore() {
 var embeddingProvider2 = null, memoryStore = null;
 var init_memory = () => {};
 
-export { slackContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, azureDevOpsContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, init_catalog, catalog_default, mapTriggerSurface, init_telemetry_context, TELEMETRY_PROXY_ORIGIN, normalizeOrgWebsite, orgLogoUrl, isFilledOrgLogoUrl, init_org_website, beginRequestAuthScope, setRequestAuth, getRequestAuth, getCurrentRequestAuth, runWithoutRequestAuth, getCurrentRequestUserId, init_request_auth_context, setTelemetryIngestObserver, isTelemetryEnabled, _resolveIntegrationType, _resolveIntegrationProvider, initTelemetry, setTelemetryRoleResolver, isTelemetryReady, track, trackRelayed, telemetry, emitIntegrationConnected, init_telemetry, auditAssetKeys, init_asset_key_audit, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, init_credential_broker, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, isInTransaction, init_db_client, breaksJsonValidity, scrubJsonValue, init_scrub_json, sealJson, init_sealed_json, getPromptTemplateDefaultDrift, init_default_drift, init_templates2 as init_templates, init_templates3 as init_templates1, isSqliteVecAvailable, resolveSqliteVecExtensionPath, __resetSqliteVecExtensionPathCacheForTests, initDb, getDb, closeDb, getDbClient, init_runtime, cachedUserRole, configureOrgDomainPersistence, recomputeOrgDomain, scheduleOrgDomainRecompute, init_telemetry_identity, resolveTriggerSurface, emitTaskTelemetry, init_telemetry_trigger, CODEX_AUTH_WATCH_NAMESPACE, codexAuthBenchMarkerKey, isCodexAuthFailureReason, init_codex_auth_failure, MASKED_SECRET_VALUE, init_config_secrets, HeartbeatExpiryError, init_heartbeat_expiry, isRuntimePoolsEnabled, init_runtime_pools_flag, normalizeDate, normalizeDateRequired, init_date_utils, rowToAgent, updateAgentCredentialState, updateAgentCredentialMissing, createAgent, getAgentById, EXTENSION_AGENT_ROLE, NOT_EXTENSION_AGENT_SQL, isExtensionAgent, extensionAgentAssignmentError, ReservedAgentRoleError, reservedRoleViolation, ExtensionAgentAssignmentError, getAllAgents, getAgentStatusCounts, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, isPoolAffinityEnforcementEnabled, buildRoutingAffinityFromAgent, isAgentEligibleForTask, getAgentDailyTaskCounts, init_agents, listApprovalRequestSummaries, getPendingApprovalVoteState, recordApprovalVotes, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, setHumanFreeQueueListener, drainHumanFreeReclassifyQueue, init_human_free, rowToAgentTask, getTaskById, getChildTasks, hasNonTerminalResumeChild, getSupersededTasksWithoutResume, getSupersededTasksWithUnsettledDependents, hasNonTerminalRerouteDecisionChild, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getPendingSlackRelayTasks, markSlackRelayAttempted, markSlackRelayDelivered, markFinalizedSlackRelaysDelivered, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getSlackTasksMissingTree, getInProgressTasksByContextKey, isLinearTrackerContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getLatestScriptRunStepTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getLatestLeadTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, init_read, onTaskStarted, init_task_lifecycle_events, channelTopic, addWorkerSubscription, removeWorkerSubscription, listSubscribedWorkerAgents, init_channels, publishWorkerNudge, init_worker_nudges, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, updateTaskClaudeSessionId, recordTaskProviderIfUnset, updateTaskTitle, completeTask, failTask, overwriteTerminalTaskResultText, cancelTask, supersedeTask, settleSupersededTaskDependents, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, getChildWorkflowRunId, getWorkflowRunParent, getWorkflowRunLineage, getSettledChildRunParentSteps, init_workflow_runs, resolveQuickJSPoolSize, init_quickjs_pool_config, SLACK_REACTION_DEFAULTS, SLACK_REACTION_CONFIG_KEYS, reactionName, init_reaction_shortcode, API_DRAINING_HEADER, API_DRAIN_MAX_MS_LIMIT, isApiDrainingResponse, init_api_drain, parseEnabledTools, init_enabled_tools, parseTaskToolManifest, selectTaskTools, init_task_tool_manifest, tierConfigKey, init_model_tier_keys, isInternalConfigKey, internalConfigKeyError, isReservedConfigKey, reservedKeyError, MAX_DB_RETENTION_DAYS, DB_RETENTION_TUNING_BOUNDS, validateRuntimeTokenTtlHours, validateControllerTokenTtlDays, validateControllerGraceSec, validateConfigValue, init_swarm_config_guard, getDefaultAuthorizationIdForProvider, getOAuthApp, getOAuthAppById, getOAuthAppIdByProvider, createOAuthApp, updateOAuthAppById, upsertOAuthApp, listAuthorizationsForApp, getAuthorizationById, upsertAuthorization, updateAuthorizationTokens, updateAuthorizationIdentity, deleteAuthorizationById, deleteAuthorizationsForApp, createOAuthPending, consumeOAuthPending, gcOAuthPending, markAuthorizationRefreshFailed, getOAuthTokens, listAuthorizationSweepRows, listKeepAliveAuthorizations, deleteOAuthTokens, acquireOAuthRefreshLock, releaseOAuthRefreshLock, init_oauth, OpenAI, init_openai, CANDIDATE_SET_MULTIPLIER, isGraphExpansionEnabled, EMBEDDING_DIMENSIONS, init_constants, LONGTERM_ROOT, MEMORY_KEY_PATTERN, MEMORY_KEY_PATTERN_MESSAGE, MEMORY_KEY_MAX_LENGTH, isLongtermKey, longtermKeyError, isConsolidatedKey, consolidatedKeyMessage, resolveStoreKey, init_key_paths, computeScore, rerank, init_reranker, rowToCandidate, init_sqlite_store, getEmbeddingProvider, resetEmbeddingProvider, getMemoryStore, init_memory, embeddingProvider, embedScript, searchScripts, reembedAllScripts, init_embeddings2 as init_embeddings, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, touchScratchScriptLastUsed, restoreScratchScriptLastUsedIfUnchanged, createScriptApi, listScriptApisForScript, getScriptApiById, getScriptApiSecret, updateScriptApi, rotateScriptApiSecret, deleteScriptApi, recordScriptApiUsage, init_db, oauthSecretName, registerStoredSecret, loadSecretRegistry, init_secret_registry, SteeringRequestError, isSteeringEnabled2 as isSteeringEnabled, getTaskSteeringFields, getTaskSteeringFieldsForTasks, promotePendingSteeringForTask, markSteeringUndeliverable, requestSteering, init_steering, WorkflowReplayStateError, init_workflow_replay, SESSION_ACTIVITY_REFRESH_MIN_INTERVAL_MS, refreshActiveSessionOnActivity, recordKeySeatMismatch, getScriptRunExecutionArgs, getSlackRenderV2ActivatedAt, ensureSlackRenderV2Activation, getSlackDelegationActivatedAt, ensureSlackDelegationActivation, isPendingSlackMessage, isSettledSlackMessage, recordSlackMessage, reserveSlackMessage, bindSlackMessageTimestamp, updateSlackMessageRecord, markSlackTreeRendered, deleteSlackMessageRecord, getSlackTreeMessage, getSlackTreeMessageByThread, getSlackOutcomeMessage, getResolvableDeferralOutcomes, markSlackDeferralResolved, noteSlackOutcomeDeliveryFailure, abandonSlackOutcomeDelivery, getSlackTreeMessages, getSlackMessageByChannelTs, getSlackTasksInThread, listSlackThreadsAwaitingHuman, isSlackThreadAwaitingHuman, markTaskSlackReplySent, setSlackMessageTracking, updateTaskVcs, insertTaskAttachment, recordTaskPullRequestAttachments, getAssetKeyMappingByProvider, upsertAssetKeyMapping, getAssetKeyMapping, listAssetSummaries, moveAssetKey, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, createSteeringMessage, getSteeringMessagesForTask, getSteeringMessageById, getPendingSteeringForTask, getPendingSteeringForAgent, markSteeringDelivered, markSteeringHandled, markSteeringPromoted, cancelPendingSteeringForTask, hasPendingSteering, getAgentWithTasks, getAllAgentsWithTasks, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdAndEventType, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, promoteDraftTask, refreshDraftTaskLease, promoteAbandonedDraftTasks, releaseStaleReviewingTasks, releaseStaleOfferedTasksForOfflineAgents, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, getUnassignedTaskIdsForAgent, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, UNATTRIBUTED_USER_ID, getSessionCostSummary, getAttributionByPerson, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, emitBuiltInIntegrationConnectedOnce, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getStaleUnassignedAffinityTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, countWorkflowRuns, listWorkflowRunsPage, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, detachTaskFromWorkflowRunStep, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, getCurrentStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createAppVersion, getAppVersions, getAppVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, cancelApprovalRequestById, cancelPendingApprovalRequestsForRun, listCancelledApprovalRequestsForRun, listCancelledApprovalRequestsForStep, claimApprovalCancellationNotification, completeApprovalCancellationNotificationClaim, releaseApprovalCancellationNotificationClaim, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, getStaleApprovalRequests, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, emitMcpServerConnectedTelemetry, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, setApiKeyPlan, markKeyRateLimited, recordKeyAuthFailure, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listFavorites, listUserFavorites, getFavoriteItemIdSet, setFavorite, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getReadyAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, sweepExpiredKv, sweepExpiredKvPrefix, upsertKv, claimKv, deleteKv, KvTypeCollisionError, incrKv, kvPrefixUpperBound, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, updateScriptRunIfNotTerminal, updateScriptRunIfRunning, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db2 as init_db1 };
+export { slackContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, azureDevOpsContextKey, azureDevOpsWorkItemContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, init_catalog, catalog_default, mapTriggerSurface, init_telemetry_context, TELEMETRY_PROXY_ORIGIN, normalizeOrgWebsite, orgLogoUrl, isFilledOrgLogoUrl, init_org_website, beginRequestAuthScope, setRequestAuth, getRequestAuth, getCurrentRequestAuth, runWithoutRequestAuth, getCurrentRequestUserId, init_request_auth_context, setTelemetryIngestObserver, isTelemetryEnabled, _resolveIntegrationType, _resolveIntegrationProvider, initTelemetry, setTelemetryRoleResolver, isTelemetryReady, track, trackRelayed, telemetry, emitIntegrationConnected, init_telemetry, auditAssetKeys, init_asset_key_audit, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, init_credential_broker, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, isInTransaction, init_db_client, breaksJsonValidity, scrubJsonValue, init_scrub_json, sealJson, init_sealed_json, getPromptTemplateDefaultDrift, init_default_drift, init_templates2 as init_templates, init_templates3 as init_templates1, isSqliteVecAvailable, resolveSqliteVecExtensionPath, __resetSqliteVecExtensionPathCacheForTests, initDb, getDb, closeDb, getDbClient, init_runtime, cachedUserRole, configureOrgDomainPersistence, recomputeOrgDomain, scheduleOrgDomainRecompute, init_telemetry_identity, resolveTriggerSurface, emitTaskTelemetry, init_telemetry_trigger, CODEX_AUTH_WATCH_NAMESPACE, codexAuthBenchMarkerKey, isCodexAuthFailureReason, init_codex_auth_failure, MASKED_SECRET_VALUE, init_config_secrets, HeartbeatExpiryError, init_heartbeat_expiry, isRuntimePoolsEnabled, init_runtime_pools_flag, normalizeDate, normalizeDateRequired, init_date_utils, rowToAgent, updateAgentCredentialState, updateAgentCredentialMissing, createAgent, getAgentById, EXTENSION_AGENT_ROLE, NOT_EXTENSION_AGENT_SQL, isExtensionAgent, extensionAgentAssignmentError, ReservedAgentRoleError, reservedRoleViolation, ExtensionAgentAssignmentError, getAllAgents, getAgentStatusCounts, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, isPoolAffinityEnforcementEnabled, buildRoutingAffinityFromAgent, isAgentEligibleForTask, getAgentDailyTaskCounts, init_agents, listApprovalRequestSummaries, getPendingApprovalVoteState, recordApprovalVotes, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, setHumanFreeQueueListener, drainHumanFreeReclassifyQueue, init_human_free, rowToAgentTask, getTaskById, getChildTasks, hasNonTerminalResumeChild, getSupersededTasksWithoutResume, getSupersededTasksWithUnsettledDependents, hasNonTerminalRerouteDecisionChild, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getPendingSlackRelayTasks, markSlackRelayAttempted, markSlackRelayDelivered, markFinalizedSlackRelaysDelivered, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getSlackTasksMissingTree, getInProgressTasksByContextKey, isLinearTrackerContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getLatestScriptRunStepTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getLatestLeadTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, init_read, onTaskStarted, init_task_lifecycle_events, channelTopic, addWorkerSubscription, removeWorkerSubscription, listSubscribedWorkerAgents, init_channels, publishWorkerNudge, init_worker_nudges, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, updateTaskClaudeSessionId, recordTaskProviderIfUnset, updateTaskTitle, completeTask, failTask, overwriteTerminalTaskResultText, cancelTask, supersedeTask, settleSupersededTaskDependents, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, getChildWorkflowRunId, getWorkflowRunParent, getWorkflowRunLineage, getSettledChildRunParentSteps, init_workflow_runs, resolveQuickJSPoolSize, init_quickjs_pool_config, SLACK_REACTION_DEFAULTS, SLACK_REACTION_CONFIG_KEYS, reactionName, init_reaction_shortcode, API_DRAINING_HEADER, API_DRAIN_MAX_MS_LIMIT, isApiDrainingResponse, init_api_drain, parseEnabledTools, init_enabled_tools, parseTaskToolManifest, selectTaskTools, init_task_tool_manifest, tierConfigKey, init_model_tier_keys, isInternalConfigKey, internalConfigKeyError, isReservedConfigKey, reservedKeyError, MAX_DB_RETENTION_DAYS, DB_RETENTION_TUNING_BOUNDS, validateRuntimeTokenTtlHours, validateControllerTokenTtlDays, validateControllerGraceSec, validateConfigValue, init_swarm_config_guard, getDefaultAuthorizationIdForProvider, getOAuthApp, getOAuthAppById, getOAuthAppIdByProvider, createOAuthApp, updateOAuthAppById, upsertOAuthApp, listAuthorizationsForApp, getAuthorizationById, upsertAuthorization, updateAuthorizationTokens, updateAuthorizationIdentity, deleteAuthorizationById, deleteAuthorizationsForApp, createOAuthPending, consumeOAuthPending, gcOAuthPending, markAuthorizationRefreshFailed, getOAuthTokens, listAuthorizationSweepRows, listKeepAliveAuthorizations, deleteOAuthTokens, acquireOAuthRefreshLock, releaseOAuthRefreshLock, init_oauth, OpenAI, init_openai, CANDIDATE_SET_MULTIPLIER, isGraphExpansionEnabled, EMBEDDING_DIMENSIONS, init_constants, LONGTERM_ROOT, MEMORY_KEY_PATTERN, MEMORY_KEY_PATTERN_MESSAGE, MEMORY_KEY_MAX_LENGTH, isLongtermKey, longtermKeyError, isConsolidatedKey, consolidatedKeyMessage, resolveStoreKey, init_key_paths, computeScore, rerank, init_reranker, rowToCandidate, init_sqlite_store, getEmbeddingProvider, resetEmbeddingProvider, getMemoryStore, init_memory, embeddingProvider, embedScript, searchScripts, reembedAllScripts, init_embeddings2 as init_embeddings, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, touchScratchScriptLastUsed, restoreScratchScriptLastUsedIfUnchanged, createScriptApi, listScriptApisForScript, getScriptApiById, getScriptApiSecret, updateScriptApi, rotateScriptApiSecret, deleteScriptApi, recordScriptApiUsage, init_db, oauthSecretName, registerStoredSecret, loadSecretRegistry, init_secret_registry, SteeringRequestError, isSteeringEnabled2 as isSteeringEnabled, getTaskSteeringFields, getTaskSteeringFieldsForTasks, promotePendingSteeringForTask, markSteeringUndeliverable, requestSteering, init_steering, WorkflowReplayStateError, init_workflow_replay, SESSION_ACTIVITY_REFRESH_MIN_INTERVAL_MS, refreshActiveSessionOnActivity, recordKeySeatMismatch, getScriptRunExecutionArgs, getSlackRenderV2ActivatedAt, ensureSlackRenderV2Activation, getSlackDelegationActivatedAt, ensureSlackDelegationActivation, isPendingSlackMessage, isSettledSlackMessage, recordSlackMessage, reserveSlackMessage, bindSlackMessageTimestamp, updateSlackMessageRecord, markSlackTreeRendered, deleteSlackMessageRecord, getSlackTreeMessage, getSlackTreeMessageByThread, getSlackOutcomeMessage, getResolvableDeferralOutcomes, markSlackDeferralResolved, noteSlackOutcomeDeliveryFailure, abandonSlackOutcomeDelivery, getSlackTreeMessages, getSlackMessageByChannelTs, getSlackTasksInThread, listSlackThreadsAwaitingHuman, isSlackThreadAwaitingHuman, markTaskSlackReplySent, setSlackMessageTracking, updateTaskVcs, insertTaskAttachment, recordTaskPullRequestAttachments, getAssetKeyMappingByProvider, upsertAssetKeyMapping, getAssetKeyMapping, listAssetSummaries, moveAssetKey, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, createSteeringMessage, getSteeringMessagesForTask, getSteeringMessageById, getPendingSteeringForTask, getPendingSteeringForAgent, markSteeringDelivered, markSteeringHandled, markSteeringPromoted, cancelPendingSteeringForTask, hasPendingSteering, getAgentWithTasks, getAllAgentsWithTasks, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdAndEventType, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, promoteDraftTask, refreshDraftTaskLease, promoteAbandonedDraftTasks, releaseStaleReviewingTasks, releaseStaleOfferedTasksForOfflineAgents, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, getUnassignedTaskIdsForAgent, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, UNATTRIBUTED_USER_ID, getSessionCostSummary, getAttributionByPerson, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, emitBuiltInIntegrationConnectedOnce, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getStaleUnassignedAffinityTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, countWorkflowRuns, listWorkflowRunsPage, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, detachTaskFromWorkflowRunStep, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, getCurrentStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createAppVersion, getAppVersions, getAppVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, cancelApprovalRequestById, cancelPendingApprovalRequestsForRun, listCancelledApprovalRequestsForRun, listCancelledApprovalRequestsForStep, claimApprovalCancellationNotification, completeApprovalCancellationNotificationClaim, releaseApprovalCancellationNotificationClaim, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, getStaleApprovalRequests, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, emitMcpServerConnectedTelemetry, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, setApiKeyPlan, markKeyRateLimited, recordKeyAuthFailure, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listFavorites, listUserFavorites, getFavoriteItemIdSet, setFavorite, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getReadyAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, sweepExpiredKv, sweepExpiredKvPrefix, upsertKv, claimKv, deleteKv, KvTypeCollisionError, incrKv, kvPrefixUpperBound, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, updateScriptRunIfNotTerminal, updateScriptRunIfRunning, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db2 as init_db1 };

package/dist/{cli-r8smj8b8.js → cli-jpc4r224.js}

@@ -1,7 +1,7 @@
 import {
   getDb,
   init_db1 as init_db
-} from "./cli-tgpfnm6r.js";
+} from "./cli-fmhj1ehj.js";
 
 // src/be/seed-pricing.ts
 init_db();

package/dist/{cli-4nz8p1p5.js → cli-m89t9jdf.js}

@@ -234,7 +234,7 @@ import {
   streamSimple,
   typesafeSystemOneApi,
   validateToolArguments
-} from "./cli-cceskcvt.js";
+} from "./cli-b07hr3bt.js";
 import {
   exports_typebox,
   isRetryableAssistantError,
@@ -248,12 +248,12 @@ import {
 import {
   require_semver
 } from "./cli-3er6gcsn.js";
-import {
-  getProviderEnvValue
-} from "./cli-btbzvq95.js";
 import {
   parseStreamingJson
 } from "./cli-1m2e086m.js";
+import {
+  getProviderEnvValue
+} from "./cli-btbzvq95.js";
 import {
   ModelsError,
   assertChatModel,
@@ -32864,7 +32864,7 @@ function getCreateJiti() {
 }
 var virtualModulesPromise;
 function getVirtualModules() {
-  virtualModulesPromise ??= import("./virtual-modules-b3ga2m65.js").then((module) => module.VIRTUAL_MODULES);
+  virtualModulesPromise ??= import("./virtual-modules-rtmt494q.js").then((module) => module.VIRTUAL_MODULES);
   return virtualModulesPromise;
 }
 var _aliases = null;

package/dist/{cli-bf7485pm.js → cli-na2pxe4f.js}

@@ -1,6 +1,6 @@
 import {
   summarizeSession
-} from "./cli-cf69s3ew.js";
+} from "./cli-nwrdx840.js";
 import {
   checkToolLoop,
   clearToolHistory

package/dist/{cli-prrt9fa0.js → cli-ne7smj1b.js}

@@ -14,7 +14,7 @@ import {
   listRuntimeInstancesForPool,
   markRuntimeTerminated,
   runtimeStaleThresholdMinutes
-} from "./cli-ztrv9y21.js";
+} from "./cli-rfz2ve55.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-re8z5p8p.js";
@@ -30,7 +30,7 @@ import {
   listRuntimePools,
   mintRuntimeToken,
   resolvePoolDelivery
-} from "./cli-e0a9sk00.js";
+} from "./cli-3nxdmjrc.js";
 import {
   canProvisionKind,
   createRuntimeProvider,
@@ -55,7 +55,7 @@ import {
   upsertSwarmConfig,
   validateConfigValue,
   validateControllerGraceSec
-} from "./cli-tgpfnm6r.js";
+} from "./cli-fmhj1ehj.js";
 import {
   TERMINAL_TASK_STATUSES,
   init_types,
@@ -1204,7 +1204,7 @@ async function recoverSessions(runtimeId, reason) {
   }
   if (!sessions2.length)
     return;
-  const { remediateTaskForDeadRuntime } = await import("./heartbeat-3k31q4g2.js");
+  const { remediateTaskForDeadRuntime } = await import("./heartbeat-bm4qkn8d.js");
   for (const session of sessions2) {
     try {
       const task = await getTaskById(session.taskId);

package/dist/{cli-cf69s3ew.js → cli-nwrdx840.js}

@@ -6,11 +6,11 @@ import {
 import {
   parseModelStr,
   resolveCredential
-} from "./cli-xczpdp9e.js";
+} from "./cli-6thk4jz3.js";
 import {
   complete,
   getBuiltinModel
-} from "./cli-cceskcvt.js";
+} from "./cli-b07hr3bt.js";
 import {
   exports_typebox
 } from "./cli-h6vtvt5c.js";

package/dist/cli-p0sg24zp.js

@@ -0,0 +1,16 @@
+import {
+  __esm
+} from "./cli-bc05qbss.js";
+
+// src/utils/node-env.ts
+function getNodeEnv() {
+  return process.env[NODE_ENV_KEY];
+}
+function isDevOrTestNodeEnv() {
+  const env = getNodeEnv();
+  return env === "development" || env === "test";
+}
+var NODE_ENV_KEY = "NODE_ENV";
+var init_node_env = () => {};
+
+export { getNodeEnv, isDevOrTestNodeEnv, init_node_env };

package/dist/{cli-gj81e47t.js → cli-phcqp1b9.js}

@@ -6,7 +6,7 @@ import {
   getSwarmConfigs,
   init_db1 as init_db,
   upsertSwarmConfig
-} from "./cli-tgpfnm6r.js";
+} from "./cli-fmhj1ehj.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-5rv1j9ga.js → cli-qm1448f9.js}

@@ -5,12 +5,12 @@ import {
   instantFlush,
   requestSlackThreadSteering,
   wasEventSeen
-} from "./cli-1hgat6pa.js";
+} from "./cli-rfs4vddv.js";
 import {
   enrichSlackUserEmail,
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-hwwvy36w.js";
+} from "./cli-c3rk1v0x.js";
 import {
   TaskCreationBlockedError,
   broadcastMatches,
@@ -23,7 +23,7 @@ import {
   hasOtherUserMention,
   notifySlackFileFailures,
   routeMessage
-} from "./cli-ztrv9y21.js";
+} from "./cli-rfz2ve55.js";
 import {
   ackSlackMessage,
   buildTreeBlocks,
@@ -34,7 +34,14 @@ import {
   noteSlackInboundSideEffect,
   registerTreeMessage,
   reportSlackInboundFailure
-} from "./cli-9xsmdpdt.js";
+} from "./cli-tcc4wd5d.js";
+import {
+  getChannelBlockReason,
+  invalidateChannelExternality,
+  isBlockExternalEnabled,
+  leaveExternalChannel,
+  shouldBlockChannel
+} from "./cli-v3zhnxsb.js";
 import {
   getAgentById,
   getAgentWorkingOnThread,
@@ -47,7 +54,7 @@ import {
   isExtensionAgent,
   reactionName,
   slackContextKey
-} from "./cli-tgpfnm6r.js";
+} from "./cli-fmhj1ehj.js";
 import {
   init_resolver,
   resolveTemplate
@@ -292,6 +299,10 @@ function registerMessageHandler(app) {
       if (!isAdmittedSlackDelivery() && isMessageProcessed(messageKey)) {
         return ignoreSlackInbound("duplicate_message");
       }
+      if (await shouldBlockChannel(client, msg.channel, body.is_ext_shared_channel)) {
+        console.log(`[Slack] Ignoring message in external channel ${msg.channel}`);
+        return ignoreSlackInbound("external_channel");
+      }
       if (!await isUserAllowed(client, msg.user)) {
         console.log(`[Slack] Ignoring message from unauthorized user ${msg.user}`);
         return ignoreSlackInbound("unauthorized_user");
@@ -669,6 +680,41 @@ ${taskDescription}`;
   app.event("app_mention", async ({ event }) => {
     console.log(`[Slack] App mentioned in channel ${event.channel}`);
   });
+  app.event("member_joined_channel", async ({ event, client }) => {
+    if (!isBlockExternalEnabled())
+      return ignoreSlackInbound("external_block_disabled");
+    if (!cachedBotUserId) {
+      try {
+        const authResult = await client.auth.test();
+        cachedBotUserId = authResult.user_id;
+        cachedBotId = authResult.bot_id ?? null;
+      } catch (error) {
+        console.error("[Slack] Failed to cache bot user ID:", error);
+      }
+    }
+    if (!cachedBotUserId || event.user !== cachedBotUserId) {
+      return ignoreSlackInbound("member_joined_not_bot");
+    }
+    invalidateChannelExternality(event.channel);
+    if (await getChannelBlockReason(client, event.channel) !== "external") {
+      return ignoreSlackInbound("member_joined_internal");
+    }
+    await leaveExternalChannel(client, event.channel, "joined");
+  });
+  app.event("channel_shared", async ({ event, client }) => {
+    if (!isBlockExternalEnabled())
+      return ignoreSlackInbound("external_block_disabled");
+    invalidateChannelExternality(event.channel);
+    if (await getChannelBlockReason(client, event.channel) !== "external") {
+      return ignoreSlackInbound("channel_shared_internal");
+    }
+    await leaveExternalChannel(client, event.channel, "shared");
+  });
+  app.event("channel_unshared", async ({ event }) => {
+    if (!isBlockExternalEnabled())
+      return ignoreSlackInbound("external_block_disabled");
+    invalidateChannelExternality(event.channel);
+  });
 }
 
 export { checkUserAccess, isUserAllowed, isBotMessage, resetSlackHandlerCachesForTesting, isSwarmThreadRoot, registerMessageHandler };

package/dist/{cli-8hzfb6xz.js → cli-r0byd61h.js}

@@ -1,6 +1,6 @@
 import {
   remediateStalledRuntime
-} from "./cli-prrt9fa0.js";
+} from "./cli-ne7smj1b.js";
 import {
   REBOOT_RETRY_PIN_TAG,
   agentsWithLiveRuntime,
@@ -25,22 +25,22 @@ import {
   repointTrackerSyncBySwarmId,
   resolveLeadOnlyRecoveryAssignment,
   runtimeStaleThresholdMinutes
-} from "./cli-ztrv9y21.js";
+} from "./cli-rfz2ve55.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-re8z5p8p.js";
 import {
   runSavedScriptAsAgent
-} from "./cli-j6kpj9az.js";
+} from "./cli-7a93cv8c.js";
 import {
   createApprovalFollowUpTask
-} from "./cli-aspcaef3.js";
+} from "./cli-6r2f7edk.js";
 import {
   init_db as init_db2,
   init_users,
   listRuntimePools,
   mintToken
-} from "./cli-e0a9sk00.js";
+} from "./cli-3nxdmjrc.js";
 import {
   MAX_EMPTY_POLLS,
   assignUnassignedTaskPending,
@@ -98,7 +98,7 @@ import {
   settleSupersededTaskDependents,
   supersedeTask,
   updateAgentStatus
-} from "./cli-tgpfnm6r.js";
+} from "./cli-fmhj1ehj.js";
 import {
   TERMINAL_TASK_STATUSES,
   init_types
@@ -112,7 +112,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-esnpehf5.js";
+} from "./cli-5er5gjbm.js";
 import {
   init_event_bus,
   workflowEventBus