@desplega.ai/agent-swarm 1.173.0 → 2.1.0

package/dist/{cli-fmhj1ehj.js → cli-y3167wt1.js}

@@ -1,7 +1,7 @@
 import {
   ALL_TOOLS,
   init_tool_config
-} from "./cli-ywm1azg9.js";
+} from "./cli-9jzdj90z.js";
 import {
   AgentAvatarSchema,
   CreateTaskOptionsSchema,
@@ -22,7 +22,7 @@ import {
   normalizeAssetKey,
   parseAssetKey,
   parseModelTier
-} from "./cli-hsem16hb.js";
+} from "./cli-pe05f8yk.js";
 import {
   IdentityFieldBudgetError,
   checkIdentityFieldBudget,
@@ -36,22 +36,22 @@ import {
   init_profile_sync,
   matchesDefaultClaudeMd,
   matchesDefaultIdentityMd
-} from "./cli-r4fqfpwf.js";
-import {
-  init_steering_enabled,
-  isSteeringEnabled
-} from "./cli-7mm2r1kp.js";
+} from "./cli-78vv7446.js";
 import {
   init_config,
   isSlackConfigured
 } from "./cli-dmtrxqhg.js";
 import {
-  init_templates
-} from "./cli-mvzyxwg3.js";
+  init_steering_enabled,
+  isSteeringEnabled
+} from "./cli-7mm2r1kp.js";
 import {
   deriveProviderFromKeyType,
   init_credentials
-} from "./cli-tadfgd0t.js";
+} from "./cli-x1r545x8.js";
+import {
+  init_templates
+} from "./cli-mvzyxwg3.js";
 import {
   configureDbResolver,
   getAllTemplateDefinitions,
@@ -75,13 +75,9 @@ import {
   init_openrouter_base_url
 } from "./cli-a35hzdve.js";
 import {
-  harnessModelMismatch,
   init_runtime_model_catalog,
-  init_src,
-  isAlias,
-  parseAlias,
   runtimeHarnessSections
-} from "./cli-014vns2y.js";
+} from "./cli-stfs0k5s.js";
 import {
   init_zod
 } from "./cli-sd0mxa3c.js";
@@ -101,7 +97,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-5er5gjbm.js";
+} from "./cli-r35rw5de.js";
 import {
   init_bus,
   realtimeBus
@@ -116,7 +112,13 @@ import {
   registerVolatileSecret,
   scrubObject,
   scrubSecrets
-} from "./cli-d161g69q.js";
+} from "./cli-shk7r5cs.js";
+import {
+  harnessModelMismatch,
+  init_src,
+  isAlias,
+  parseAlias
+} from "./cli-e3g5mbkz.js";
 import {
   __commonJS,
   __esm,
@@ -8294,6 +8296,26 @@ function slackContextKey(input) {
   const threadTs = assertSafePart(input.threadTs, "threadTs");
   return ["task", "slack", channelId, threadTs].join(SEPARATOR);
 }
+function chatSdkContextKey(threadId) {
+  const raw = typeof threadId === "string" ? threadId : "";
+  const separatorIndex = raw.indexOf(SEPARATOR);
+  if (separatorIndex <= 0 || separatorIndex === raw.length - 1) {
+    throw new Error(`context-key: chat-sdk thread id must be "<adapter>:<id>" (got ${JSON.stringify(threadId)})`);
+  }
+  const adapter = assertSafePart(raw.slice(0, separatorIndex), "adapter");
+  const rest = encodeURIComponent(raw.slice(separatorIndex + 1));
+  return ["task", "chat-sdk", adapter, rest].join(SEPARATOR);
+}
+function chatThreadOfContextKey(key) {
+  if (!key)
+    return null;
+  try {
+    const parsed = parseContextKey(key);
+    return parsed.family === "chat-sdk" ? parsed.parts : null;
+  } catch {
+    return null;
+  }
+}
 function agentmailContextKey(input) {
   const threadId = assertSafePart(input.threadId, "threadId");
   return ["task", "agentmail", threadId].join(SEPARATOR);
@@ -8388,6 +8410,19 @@ function parseContextKey(key) {
       }
       return { family: "agentmail", parts: { threadId: parts[2] } };
     }
+    case "chat-sdk": {
+      if (parts.length !== 4 || !parts[2] || !parts[3]) {
+        throw new Error(`context-key: malformed chat-sdk key: ${JSON.stringify(key)}`);
+      }
+      const adapter = parts[2];
+      let rest;
+      try {
+        rest = decodeURIComponent(parts[3]);
+      } catch {
+        throw new Error(`context-key: malformed chat-sdk key: ${JSON.stringify(key)}`);
+      }
+      return { family: "chat-sdk", parts: { adapter, threadId: `${adapter}:${rest}` } };
+    }
     case "schedule": {
       if (parts.length !== 3) {
         throw new Error(`context-key: malformed schedule key: ${JSON.stringify(key)}`);
@@ -12222,7 +12257,20 @@ function initDb(dbPath = "./agent-swarm-db.sqlite") {
   }
   db = new Database(dbPath, { create: true });
   console.log(`Database initialized at ${dbPath}`);
-  const database = db;
+  const opened = db;
+  try {
+    return bootOpenedDb(opened, dbPath, resolvePromptTemplate, autoEncryptLegacyPlaintextSecrets);
+  } catch (error2) {
+    if (db === opened) {
+      db = null;
+      try {
+        opened.close();
+      } catch {}
+    }
+    throw error2;
+  }
+}
+function bootOpenedDb(database, dbPath, resolvePromptTemplate, autoEncryptLegacyPlaintextSecrets) {
   database.run("PRAGMA journal_mode = WAL;");
   database.run("PRAGMA busy_timeout = 5000;");
   database.run("PRAGMA foreign_keys = ON;");
@@ -12244,20 +12292,20 @@ function initDb(dbPath = "./agent-swarm-db.sqlite") {
   }
   ensureAgentProfileColumns(database);
   try {
-    const taskSchemaInfo = db.prepare("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'agent_tasks'").get();
+    const taskSchemaInfo = database.prepare("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'agent_tasks'").get();
     const schemaSql = taskSchemaInfo?.sql ?? "";
     const hasStatusCheck = /status\s+TEXT\b[^,]*\bCHECK\s*\(\s*status\s+IN\s*\(/i.test(schemaSql);
     const statusAllowsCancelled = /status\s+IN\s*\([^)]*'cancelled'/i.test(schemaSql);
     const needsStatusMigration = hasStatusCheck && !statusAllowsCancelled;
     if (needsStatusMigration) {
       console.log("[Migration] Removing restrictive CHECK constraint on agent_tasks.status");
-      db.run("PRAGMA foreign_keys=off");
+      database.run("PRAGMA foreign_keys=off");
       const rebuiltSchemaSql = schemaSql.replace(/^(CREATE TABLE\s+(?:IF NOT EXISTS\s+)?)(?:"agent_tasks"|agent_tasks)/i, "$1agent_tasks_new").replace(/\s+CHECK\s*\(\s*status\s+IN\s*\([^)]*\)\s*\)/i, "");
       if (rebuiltSchemaSql === schemaSql || !/agent_tasks_new/i.test(rebuiltSchemaSql)) {
         throw new Error("Could not derive agent_tasks schema without legacy status CHECK");
       }
-      const columns = db.prepare('PRAGMA table_info("agent_tasks")').all().map((column) => `"${column.name.replaceAll('"', '""')}"`).join(", ");
-      const schemaObjects = db.prepare(`SELECT sql FROM sqlite_master
+      const columns = database.prepare('PRAGMA table_info("agent_tasks")').all().map((column) => `"${column.name.replaceAll('"', '""')}"`).join(", ");
+      const schemaObjects = database.prepare(`SELECT sql FROM sqlite_master
            WHERE tbl_name = 'agent_tasks'
              AND type IN ('index', 'trigger')
              AND sql IS NOT NULL
@@ -12271,13 +12319,13 @@ function initDb(dbPath = "./agent-swarm-db.sqlite") {
         for (const sql of schemaObjects)
           database.run(sql);
       })();
-      db.run("PRAGMA foreign_keys=on");
+      database.run("PRAGMA foreign_keys=on");
       console.log("[Migration] Successfully removed CHECK constraint on agent_tasks.status");
     }
   } catch (e) {
     console.error("[Migration] Failed to update agent_tasks CHECK constraint:", e);
     try {
-      db.run("PRAGMA foreign_keys=on");
+      database.run("PRAGMA foreign_keys=on");
     } catch (cleanupError) {
       console.error("[Migration] Failed to re-enable SQLite foreign_keys pragma:", cleanupError);
     }
@@ -12318,7 +12366,7 @@ function initDb(dbPath = "./agent-swarm-db.sqlite") {
     console.error(`[credential-bindings] FATAL: failed to migrate legacy credential binding blob: ${err.message}`);
     throw err;
   }
-  return db;
+  return database;
 }
 function getDb(path3) {
   if (!db) {
@@ -12394,7 +12442,7 @@ var init_runtime = __esm(() => {
 // src/telemetry-identity.ts
 async function loadUserRole(userId) {
   try {
-    const { getUserGrant } = await import("./rbac-roles-eszdg6pm.js");
+    const { getUserGrant } = await import("./rbac-roles-z76xv0hq.js");
     const grant = await getUserGrant(userId);
     const role = grant.grantsAll ? "admin" : "member";
     if (roleCache.size >= ROLE_CACHE_LIMIT) {
@@ -12554,6 +12602,47 @@ var init_codex_auth_failure = __esm(() => {
   ];
 });
 
+// src/utils/config-env-export.ts
+function isEnvExportRestrictedKey(key) {
+  return ENV_EXPORT_RESTRICTED_KEYS.has(key.toUpperCase()) || CONNECTION_SECRET_KEY.test(key);
+}
+function defaultExportToEnv(key) {
+  const upper = key.toUpperCase();
+  return !isEnvExportRestrictedKey(key) && !ENV_EXPORT_DEFAULT_OFF_KEYS.has(upper) && !ENV_EXPORT_DEFAULT_OFF_PREFIXES.some((prefix) => upper.startsWith(prefix));
+}
+function envExportRestrictedError(key) {
+  return `Key '${key}' is read only by the API server and can never be exported to agent env; store it with exportToEnv: false.`;
+}
+function effectiveExportToEnv(key, stored) {
+  return stored && !isEnvExportRestrictedKey(key);
+}
+var ENV_EXPORT_RESTRICTED_KEYS, ENV_EXPORT_DEFAULT_OFF_KEYS, CONNECTION_SECRET_KEY, ENV_EXPORT_DEFAULT_OFF_PREFIXES;
+var init_config_env_export = __esm(() => {
+  ENV_EXPORT_RESTRICTED_KEYS = new Set([
+    "SLACK_APP_TOKEN",
+    "SLACK_SIGNING_SECRET",
+    "GITHUB_APP_PRIVATE_KEY",
+    "GITHUB_WEBHOOK_SECRET",
+    "GITLAB_WEBHOOK_SECRET",
+    "LINEAR_CLIENT_SECRET",
+    "LINEAR_SIGNING_SECRET",
+    "JIRA_CLIENT_SECRET",
+    "JIRA_WEBHOOK_TOKEN",
+    "AZURE_DEVOPS_WEBHOOK_SECRET",
+    "AGENTMAIL_WEBHOOK_SECRET",
+    "API_AGENT_FS_API_KEY"
+  ]);
+  ENV_EXPORT_DEFAULT_OFF_KEYS = new Set([
+    "KAPSO_WEBHOOK_HMAC_SECRET",
+    "SENTRY_TEST_APP_WEBHOOK_SECRET",
+    "TELEMETRY_CH_AUTH",
+    "HACK_AGENT_FS_ADMIN_KEY",
+    "X_CLIENT_SECRET"
+  ]);
+  CONNECTION_SECRET_KEY = /^connection\..+\.secret$/;
+  ENV_EXPORT_DEFAULT_OFF_PREFIXES = ["CHAT_SDK_"];
+});
+
 // src/utils/config-secrets.ts
 var MASKED_SECRET_VALUE = "********";
 var init_config_secrets = () => {};
@@ -13145,198 +13234,24 @@ var init_context_versions = __esm(() => {
   init_runtime();
 });
 
-// src/be/db/tasks/human-free.ts
-function humanFreeCase(parentFlag) {
-  return `CASE
-        WHEN ${HUMAN_FREE_BASE_SQL} THEN 1
-        WHEN ${parentFlag} = 1 AND ${UNATTRIBUTED_SQL} THEN 1
-        ELSE 0
-      END`;
-}
-function carriesHumanFreeTag(tagsJson) {
-  const haystack = (tagsJson ?? "[]").toLowerCase();
-  return HUMAN_FREE_TAGS.some((tag) => haystack.includes(`"${tag}"`));
-}
-function tagWriteChangesHumanFree(previousTagsJson, nextTagsJson) {
-  return carriesHumanFreeTag(previousTagsJson) !== carriesHumanFreeTag(nextTagsJson);
-}
-async function classifyTaskHumanFree(input) {
-  const row = await getDbClient().get(`WITH task(taskType, tags, source, requestedByUserId, requestedByUserIdInherited, parentTaskId, workflowRunId) AS (
-        VALUES (?, ?, ?, ?, ?, ?, ?)
-      )
-      SELECT ${humanFreeCase("parent.isHumanFree")} AS humanFree
-      FROM task
-      LEFT JOIN agent_tasks parent ON parent.id = task.parentTaskId`, [
-    input.taskType ?? null,
-    input.tags ?? null,
-    input.source ?? null,
-    input.requestedByUserId ?? null,
-    input.requestedByUserIdInherited ? 1 : 0,
-    input.parentTaskId ?? null,
-    input.workflowRunId ?? null
-  ]);
-  return row?.humanFree === 1;
-}
-function setHumanFreeQueueListener(listener) {
-  queueListener = listener;
-}
-async function enqueueHumanFreeWork(taskIds, scope, hops) {
-  if (taskIds.length === 0)
-    return;
-  if (hops > HUMAN_FREE_MAX_CONTINUATION_HOPS) {
-    console.error(`[human-free] dropping ${taskIds.length} ${scope} continuation(s) past ${HUMAN_FREE_MAX_CONTINUATION_HOPS} hops; the task graph likely has a parent cycle`);
-    return;
-  }
-  await getDbClient().run(`INSERT INTO human_free_reclassify_queue (taskId, scope, afterRowid, hops)
-       SELECT value, ?, 0, ? FROM json_each(?) WHERE true
-       ON CONFLICT (taskId, scope) DO UPDATE SET
-         afterRowid = 0,
-         hops = MAX(hops, excluded.hops)`, [scope, hops, JSON.stringify(taskIds)]);
-  getDbClient().afterCommit(() => queueListener?.());
-}
-async function reclassifyBatch(seedTaskIds, batchSize, hops) {
-  const client = getDbClient();
-  const affected = (await client.query(`WITH RECURSIVE affected(id) AS (
-          SELECT value FROM json_each(?)
-
-          UNION
-
-          SELECT task.id
-          FROM affected
-          JOIN agent_tasks task ON task.parentTaskId = affected.id
-          LIMIT ?
-        )
-        SELECT id FROM affected`, [JSON.stringify(seedTaskIds), batchSize])).map((row) => row.id);
-  const result = await client.run(`WITH RECURSIVE affected(id) AS (
-        SELECT value FROM json_each(?)
-      ),
-      free(id) AS (
-        SELECT task.id
-        FROM agent_tasks task
-        LEFT JOIN agent_tasks parent ON parent.id = task.parentTaskId
-        WHERE task.id IN (SELECT id FROM affected)
-          AND (
-            ${HUMAN_FREE_BASE_SQL}
-            OR (
-              parent.isHumanFree = 1
-              AND parent.id NOT IN (SELECT id FROM affected)
-              AND ${UNATTRIBUTED_SQL}
-            )
-          )
-
-        UNION
-
-        SELECT task.id
-        FROM free
-        JOIN agent_tasks task ON task.parentTaskId = free.id
-        WHERE +task.id IN (SELECT id FROM affected)
-          AND ${UNATTRIBUTED_SQL}
-      )
-      UPDATE agent_tasks
-      SET isHumanFree = CASE WHEN id IN (SELECT id FROM free) THEN 1 ELSE 0 END
-      WHERE id IN (SELECT id FROM affected)
-        AND isHumanFree != CASE WHEN id IN (SELECT id FROM free) THEN 1 ELSE 0 END`, [JSON.stringify(affected)]);
-  if (affected.length >= batchSize) {
-    const unfinished = await client.query(`WITH batch(id) AS (
-          SELECT value FROM json_each(?)
-        )
-        SELECT batch.id
-        FROM batch
-        WHERE EXISTS (
-          SELECT 1
-          FROM agent_tasks child
-          WHERE child.parentTaskId = batch.id
-            AND child.id NOT IN (SELECT id FROM batch)
-        )`, [JSON.stringify(affected)]);
-    await enqueueHumanFreeWork(unfinished.map((row) => row.id), "children", hops);
-  }
-  return result.changes;
-}
-async function reclassifyTaskHumanFree(seedTaskIds, options = {}) {
-  const batchSize = options.batchSize ?? HUMAN_FREE_RECLASSIFY_BATCH;
-  const seeds = [...new Set(seedTaskIds)];
-  if (seeds.length === 0)
-    return 0;
-  await enqueueHumanFreeWork(seeds.slice(batchSize), "self", 1);
-  return await reclassifyBatch(seeds.slice(0, batchSize), batchSize, 1);
-}
-async function drainOneBatch(batchSize) {
-  return await getDbClient().transaction(async (tx) => {
-    const head = await tx.get("SELECT * FROM human_free_reclassify_queue ORDER BY seq LIMIT 1");
-    if (!head)
-      return null;
-    if (head.scope === "self") {
-      const rows = await tx.query("SELECT * FROM human_free_reclassify_queue WHERE scope = 'self' ORDER BY seq LIMIT ?", [batchSize]);
-      const seeds = rows.map((row) => row.taskId);
-      const hops = Math.max(...rows.map((row) => row.hops)) + 1;
-      await tx.run("DELETE FROM human_free_reclassify_queue WHERE seq IN (SELECT value FROM json_each(?))", [JSON.stringify(rows.map((row) => row.seq))]);
-      return await reclassifyBatch(seeds, batchSize, hops);
-    }
-    const page = await tx.query(`SELECT id, rowid AS position
-       FROM agent_tasks
-       WHERE parentTaskId = ? AND rowid > ?
-       ORDER BY rowid
-       LIMIT ?`, [head.taskId, head.afterRowid, batchSize]);
-    if (page.length < batchSize) {
-      await tx.run("DELETE FROM human_free_reclassify_queue WHERE seq = ?", [head.seq]);
-    } else {
-      await tx.run("UPDATE human_free_reclassify_queue SET afterRowid = ? WHERE seq = ?", [
-        page[page.length - 1]?.position ?? head.afterRowid,
-        head.seq
-      ]);
-    }
-    if (page.length === 0)
-      return 0;
-    return await reclassifyBatch(page.map((row) => row.id), batchSize, head.hops + 1);
-  });
+// src/utils/vcs-repo-match.ts
+function normalizeVcsRepo(vcsRepo) {
+  return vcsRepo.trim().replace(/\/+$/, "").replace(/\.git$/, "");
 }
-async function pendingHumanFreeReclassifications() {
-  const row = await getDbClient().get("SELECT COUNT(*) AS count FROM human_free_reclassify_queue");
-  return row?.count ?? 0;
+function vcsRepoName(vcsRepo) {
+  const requested = normalizeVcsRepo(vcsRepo);
+  return requested.split("/").pop() || requested;
 }
-async function drainHumanFreeReclassifyQueue(options = {}) {
-  const batchSize = options.batchSize ?? HUMAN_FREE_RECLASSIFY_BATCH;
-  const maxBatches = options.maxBatches ?? Number.POSITIVE_INFINITY;
-  let batches = 0;
-  let changed = 0;
-  while (batches < maxBatches) {
-    const batchChanged = await drainOneBatch(batchSize);
-    if (batchChanged === null)
-      break;
-    batches += 1;
-    changed += batchChanged;
-  }
-  return { batches, changed, remaining: await pendingHumanFreeReclassifications() };
+function vcsRepoUrlMatches(url, vcsRepo) {
+  const requested = normalizeVcsRepo(vcsRepo);
+  const normalized = normalizeVcsRepo(url);
+  if (normalized === requested)
+    return true;
+  if (requested.includes(":"))
+    return false;
+  return normalized.endsWith(`/${requested}`) || normalized.endsWith(`:${requested}`);
 }
-var HUMAN_FREE_TAGS, HUMAN_FREE_TAG_SQL, HUMAN_FREE_BASE_SQL, UNATTRIBUTED_SQL = "(task.requestedByUserId IS NULL OR task.requestedByUserIdInherited = 1)", HUMAN_FREE_RECLASSIFY_BATCH = 500, HUMAN_FREE_MAX_CONTINUATION_HOPS = 1e4, queueListener;
-var init_human_free = __esm(() => {
-  init_runtime();
-  HUMAN_FREE_TAGS = ["heartbeat"];
-  HUMAN_FREE_TAG_SQL = HUMAN_FREE_TAGS.map((tag) => `COALESCE(task.tags, '[]') LIKE '%"${tag}"%'`).join(`
-        OR `);
-  HUMAN_FREE_BASE_SQL = `(
-        COALESCE(task.taskType, '') IN ('heartbeat', 'heartbeat-checklist', 'boot-triage')
-        OR ${HUMAN_FREE_TAG_SQL}
-        OR (COALESCE(task.source, '') = 'schedule' AND task.requestedByUserId IS NULL)
-        OR (
-          task.parentTaskId IS NULL
-          AND COALESCE(task.source, '') = 'workflow'
-          AND task.requestedByUserId IS NULL
-          AND EXISTS (
-            SELECT 1
-            FROM workflow_runs run
-            WHERE run.id = task.workflowRunId
-              AND run.triggerType = 'schedule'
-              AND run.created_by IS NULL
-          )
-        )
-        OR (
-          COALESCE(task.source, '') = 'system'
-          AND parent.id IS NOT NULL
-          AND parent.requestedByUserId IS NULL
-        )
-      )`;
-});
+var init_vcs_repo_match = () => {};
 
 // src/utils/provider-metadata.ts
 function parseProviderMeta(rawProvider, rawMeta) {
@@ -13436,6 +13351,9 @@ function rowToAgentTask(row) {
     modelSource: row.modelSource ?? undefined,
     modelAlias: row.modelAlias ?? undefined,
     effort: ReasoningEffortSchema.safeParse(row.effort).success ? row.effort : undefined,
+    resolvedEffort: ReasoningEffortSchema.safeParse(row.resolvedEffort).success ? row.resolvedEffort : undefined,
+    profile: row.profile ?? undefined,
+    resolvedProfile: row.resolvedProfile ?? undefined,
     scheduleId: row.scheduleId ?? undefined,
     workflowRunId: row.workflowRunId ?? undefined,
     workflowRunStepId: row.workflowRunStepId ?? undefined,
@@ -13492,6 +13410,7 @@ function rowToAgentTaskSummary(row) {
     modelSource: row.modelSource ?? undefined,
     modelAlias: row.modelAlias ?? undefined,
     effort: ReasoningEffortSchema.safeParse(row.effort).success ? row.effort : undefined,
+    resolvedEffort: ReasoningEffortSchema.safeParse(row.resolvedEffort).success ? row.resolvedEffort : undefined,
     provider: row.provider ?? undefined,
     requestedByUserId: row.requestedByUserId ?? undefined,
     progress: row.progress ?? undefined,
@@ -13864,24 +13783,96 @@ async function markFinalizedSlackRelaysDelivered() {
        )`, [now, now]);
   return result.changes;
 }
-async function getRecentlyFinishedWorkerTasks() {
-  const rows = await getDbClient().query(`SELECT t.* FROM agent_tasks t
-       LEFT JOIN agents a ON t.agentId = a.id
-       WHERE t.status IN ('completed', 'failed')
-       AND t.finishedAt IS NOT NULL
-       AND t.notifiedAt IS NULL
-       AND (a.isLead = 0 OR a.isLead IS NULL)
-       ORDER BY t.finishedAt DESC LIMIT 50`);
-  return rows.map(rowToAgentTask);
-}
-async function markTasksNotified(taskIds) {
-  if (taskIds.length === 0)
-    return 0;
-  const now = new Date().toISOString();
-  const placeholders = taskIds.map(() => "?").join(",");
-  const result = await getDbClient().run(`UPDATE agent_tasks SET notifiedAt = ?
-     WHERE id IN (${placeholders}) AND notifiedAt IS NULL`, [now, ...taskIds]);
-  return result.changes;
+async function getPendingChatRelayTasks(now = Date.now(), limit2 = 200, adapters = []) {
+  if (adapters.length === 0)
+    return [];
+  for (const adapter of adapters) {
+    if (!/^[a-z]+$/.test(adapter))
+      throw new Error(`invalid chat adapter name: ${adapter}`);
+  }
+  const adapterFilter = adapters.map(() => "task.contextKey GLOB ?").join(" OR ");
+  const rows = await getDbClient().query(`SELECT task.*,
+            obligation.created_at AS relay_created_at,
+            obligation.last_error AS relay_last_error
+       FROM chat_relay_obligations obligation
+       JOIN agent_tasks task ON task.id = obligation.task_id
+       WHERE obligation.delivered_at IS NULL
+       AND obligation.given_up_at IS NULL
+       AND task.status IN ('completed', 'failed', 'cancelled')
+       AND (${adapterFilter})
+       AND ${CHAT_RELAY_ELIGIBLE_SQL}
+       ORDER BY obligation.last_attempt_at IS NOT NULL,
+                obligation.last_attempt_at ASC,
+                obligation.created_at ASC
+       LIMIT ?`, [
+    ...adapters.map((adapter) => `task:chat-sdk:${adapter}:*`),
+    new Date(now).toISOString(),
+    limit2
+  ]);
+  return rows.map((row) => ({
+    task: rowToAgentTask(row),
+    createdAt: row.relay_created_at,
+    lastError: row.relay_last_error
+  }));
+}
+async function giveUpStaleChatRelays(now, olderThanMs) {
+  const at = new Date(now).toISOString();
+  const cutoff = new Date(now - olderThanMs).toISOString();
+  const result = await getDbClient().run(`UPDATE chat_relay_obligations
+       SET given_up_at = ?, last_error = 'gave up: older than 24h', updated_at = ?
+       WHERE delivered_at IS NULL AND given_up_at IS NULL AND created_at < ?`, [at, at, cutoff]);
+  return result.changes;
+}
+async function markChatRelayAttempted(taskId, now = Date.now()) {
+  const at = new Date(now).toISOString();
+  const result = await getDbClient().run(`UPDATE chat_relay_obligations AS obligation
+       SET attempt_count = attempt_count + 1,
+           last_attempt_at = ?,
+           updated_at = ?
+       WHERE task_id = ?
+       AND delivered_at IS NULL
+       AND given_up_at IS NULL
+       AND ${CHAT_RELAY_ELIGIBLE_SQL}`, [at, at, taskId, at]);
+  return result.changes > 0;
+}
+async function recordChatRelayError(taskId, error2, now = Date.now()) {
+  const result = await getDbClient().run(`UPDATE chat_relay_obligations
+       SET last_error = ?, updated_at = ?
+       WHERE task_id = ? AND delivered_at IS NULL`, [scrubSecrets(error2), new Date(now).toISOString(), taskId]);
+  return result.changes > 0;
+}
+async function markChatRelayDelivered(taskId, now = Date.now()) {
+  const at = new Date(now).toISOString();
+  const result = await getDbClient().run(`UPDATE chat_relay_obligations
+       SET delivered_at = ?, updated_at = ?
+       WHERE task_id = ? AND delivered_at IS NULL`, [at, at, taskId]);
+  return result.changes > 0;
+}
+async function markChatRelayGivenUp(taskId, error2, now = Date.now()) {
+  const at = new Date(now).toISOString();
+  const result = await getDbClient().run(`UPDATE chat_relay_obligations
+       SET given_up_at = ?, last_error = ?, updated_at = ?
+       WHERE task_id = ? AND delivered_at IS NULL AND given_up_at IS NULL`, [at, scrubSecrets(error2), at, taskId]);
+  return result.changes > 0;
+}
+async function getRecentlyFinishedWorkerTasks() {
+  const rows = await getDbClient().query(`SELECT t.* FROM agent_tasks t
+       LEFT JOIN agents a ON t.agentId = a.id
+       WHERE t.status IN ('completed', 'failed')
+       AND t.finishedAt IS NOT NULL
+       AND t.notifiedAt IS NULL
+       AND (a.isLead = 0 OR a.isLead IS NULL)
+       ORDER BY t.finishedAt DESC LIMIT 50`);
+  return rows.map(rowToAgentTask);
+}
+async function markTasksNotified(taskIds) {
+  if (taskIds.length === 0)
+    return 0;
+  const now = new Date().toISOString();
+  const placeholders = taskIds.map(() => "?").join(",");
+  const result = await getDbClient().run(`UPDATE agent_tasks SET notifiedAt = ?
+     WHERE id IN (${placeholders}) AND notifiedAt IS NULL`, [now, ...taskIds]);
+  return result.changes;
 }
 async function resetTasksNotified(taskIds) {
   if (taskIds.length === 0)
@@ -14035,6 +14026,36 @@ async function getLatestLeadTaskInThread(channelId, threadTs) {
        LIMIT 1`, [channelId, threadTs]);
   return row ? rowToAgentTask(row) : null;
 }
+async function getAgentWorkingOnContextKey(contextKey, source2) {
+  const taskRow = await getDbClient().get(`SELECT agentId FROM agent_tasks
+       WHERE contextKey = ?
+       AND (? IS NULL OR source = ?)
+       ORDER BY createdAt DESC, rowid DESC
+       LIMIT 1`, [contextKey, source2 ?? null, source2 ?? null]);
+  if (taskRow?.agentId)
+    return getAgentById(taskRow.agentId);
+  return null;
+}
+async function getLatestActiveTaskByContextKey(contextKey, source2) {
+  const row = await getDbClient().get(`SELECT * FROM agent_tasks
+       WHERE contextKey = ?
+       AND (? IS NULL OR source = ?)
+       AND status IN ('in_progress', 'pending')
+       ORDER BY createdAt DESC, rowid DESC
+       LIMIT 1`, [contextKey, source2 ?? null, source2 ?? null]);
+  return row ? rowToAgentTask(row) : null;
+}
+async function getLatestLeadTaskByContextKey(contextKey, source2) {
+  const row = await getDbClient().get(`SELECT t.*
+       FROM agent_tasks t
+       JOIN agents a ON a.id = t.agentId
+       WHERE t.contextKey = ?
+         AND (? IS NULL OR t.source = ?)
+         AND a.isLead = 1
+       ORDER BY t.createdAt DESC, t.rowid DESC
+       LIMIT 1`, [contextKey, source2 ?? null, source2 ?? null]);
+  return row ? rowToAgentTask(row) : null;
+}
 async function getMostRecentTaskInThread(channelId, threadTs) {
   const row = await getDbClient().get(`SELECT * FROM agent_tasks
        WHERE slackChannelId = ?
@@ -14076,11 +14097,15 @@ async function findRecentCancelledTaskInThread(channelId, threadTs, windowMinute
        LIMIT 1`, [channelId, threadTs, since]);
   return row ? rowToAgentTask(row) : null;
 }
-var dependencies2, TASK_PREVIEW_LENGTH = 300, TASK_PREVIEW_BYTES, TASK_PREVIEW_SQL, taskPreviewDecoder, LIST_COLUMNS, NEVER_STARTED_TASK_STATUSES, findTaskByGitHub, LINEAR_TRACKER_CONTEXT_KEY_PREFIX = "task:trackers:linear:";
+var dependencies2, TASK_PREVIEW_LENGTH = 300, TASK_PREVIEW_BYTES, TASK_PREVIEW_SQL, taskPreviewDecoder, LIST_COLUMNS, SUPERSEDED_RESUME_REPAIR_WINDOW_MS, NEVER_STARTED_TASK_STATUSES, findTaskByGitHub, CHAT_RELAY_ELIGIBLE_SQL = `(obligation.last_attempt_at IS NULL
+         OR (julianday(?) - julianday(obligation.last_attempt_at)) * 86400000.0 >=
+            CASE WHEN obligation.attempt_count >= 8 THEN 600000
+                 ELSE 3000 * (1 << obligation.attempt_count) END)`, LINEAR_TRACKER_CONTEXT_KEY_PREFIX = "task:trackers:linear:";
 var init_read = __esm(() => {
   init_key();
   init_types();
   init_provider_metadata();
+  init_secret_scrubber();
   init_agents();
   init_runtime();
   TASK_PREVIEW_BYTES = 4 * (TASK_PREVIEW_LENGTH + 1);
@@ -14094,6 +14119,7 @@ var init_read = __esm(() => {
     agent_tasks.offeredTo, agent_tasks.acceptedAt, agent_tasks.parentTaskId,
     agent_tasks.scheduleId, agent_tasks.model, agent_tasks.modelTier,
     agent_tasks.resolvedModel, agent_tasks.modelSource, agent_tasks.modelAlias, agent_tasks.effort,
+    agent_tasks.resolvedEffort,
     agent_tasks.provider, agent_tasks.requestedByUserId, agent_tasks.progress,
     agent_tasks.createdAt, agent_tasks.lastUpdatedAt, agent_tasks.finishedAt,
     agent_tasks.peakContextPercent`,
@@ -14101,6 +14127,7 @@ var init_read = __esm(() => {
     agent_tasks.title, agent_tasks.status, agent_tasks.createdAt, agent_tasks.lastUpdatedAt,
     agent_tasks.finishedAt, agent_tasks.peakContextTokens`
   };
+  SUPERSEDED_RESUME_REPAIR_WINDOW_MS = 24 * 60 * 60 * 1000;
   NEVER_STARTED_TASK_STATUSES = [
     "draft",
     "backlog",
@@ -14112,6 +14139,355 @@ var init_read = __esm(() => {
   findTaskByGitHub = findTaskByVcs;
 });
 
+// src/be/db/model-profiles.ts
+function rowToModelProfile(row) {
+  return {
+    id: row.id,
+    name: row.name,
+    harness: ProviderNameSchema.parse(row.harness),
+    model: row.model,
+    effort: ReasoningEffortSchema.safeParse(row.effort).success ? row.effort : null,
+    allowCustomModel: row.allowCustomModel === 1,
+    description: row.description,
+    seededFrom: row.seededFrom,
+    createdAt: row.createdAt,
+    lastUpdatedAt: row.lastUpdatedAt
+  };
+}
+async function listModelProfiles(filter = {}) {
+  const rows = filter.harness ? await getDbClient().query("SELECT * FROM model_profiles WHERE harness = ? ORDER BY harness, name", [filter.harness]) : await getDbClient().query("SELECT * FROM model_profiles ORDER BY harness, name");
+  return rows.map(rowToModelProfile);
+}
+async function getModelProfileByName(name) {
+  const row = await getDbClient().get("SELECT * FROM model_profiles WHERE name = ?", [name.trim()]);
+  return row ? rowToModelProfile(row) : null;
+}
+async function createModelProfile(input, audit = {}) {
+  const now = new Date().toISOString();
+  const row = await getDbClient().get(`INSERT INTO model_profiles
+       (id, name, harness, model, effort, allowCustomModel, description, seededFrom, createdAt, lastUpdatedAt, created_by, updated_by)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+     ON CONFLICT(name) DO NOTHING
+     RETURNING *`, [
+    crypto.randomUUID(),
+    input.name,
+    input.harness,
+    input.model,
+    input.effort ?? null,
+    input.allowCustomModel ? 1 : 0,
+    input.description ?? null,
+    input.seededFrom ?? null,
+    now,
+    now,
+    audit.userId ?? null,
+    audit.userId ?? null
+  ]);
+  return row ? rowToModelProfile(row) : null;
+}
+async function updateModelProfile(name, patch, audit = {}) {
+  const sets = [];
+  const params = [];
+  if (patch.model !== undefined) {
+    sets.push("model = ?");
+    params.push(patch.model);
+  }
+  if (patch.effort !== undefined) {
+    sets.push("effort = ?");
+    params.push(patch.effort);
+  }
+  if (patch.allowCustomModel !== undefined) {
+    sets.push("allowCustomModel = ?");
+    params.push(patch.allowCustomModel ? 1 : 0);
+  }
+  if (patch.description !== undefined) {
+    sets.push("description = ?");
+    params.push(patch.description);
+  }
+  sets.push("lastUpdatedAt = ?", "updated_by = ?");
+  params.push(new Date().toISOString(), audit.userId ?? null);
+  const row = await getDbClient().get(`UPDATE model_profiles SET ${sets.join(", ")} WHERE name = ? RETURNING *`, [...params, name]);
+  return row ? rowToModelProfile(row) : null;
+}
+function repairWindowStart() {
+  return new Date(Date.now() - SUPERSEDED_RESUME_REPAIR_WINDOW_MS).toISOString();
+}
+async function modelProfileReferences(name) {
+  const agents = await getDbClient().query("SELECT scopeId FROM swarm_config WHERE scope = 'agent' AND key = ? AND value = ?", [MODEL_PROFILE_CONFIG_KEY, name]);
+  const tasks = await getDbClient().get(`SELECT COUNT(*) AS n FROM agent_tasks t WHERE t.profile = ? AND ${TASK_HOLDS_PROFILE_SQL}`, [name, repairWindowStart()]);
+  return { agentIds: agents.map((a) => a.scopeId), openTaskCount: tasks?.n ?? 0 };
+}
+function modelProfileRefError(error2) {
+  const message = error2 instanceof Error ? error2.message : "";
+  return message.includes("model-profile-missing:") ? "missing" : null;
+}
+async function deleteModelProfile(name) {
+  const row = await getDbClient().get(`DELETE FROM model_profiles
+      WHERE name = ?
+        AND NOT EXISTS (
+          SELECT 1 FROM agent_tasks t
+           WHERE t.profile = model_profiles.name AND ${TASK_HOLDS_PROFILE_SQL})
+        AND NOT EXISTS (
+          SELECT 1 FROM swarm_config
+           WHERE scope = 'agent' AND key = ? AND trim(value) = model_profiles.name)
+      RETURNING id`, [name, repairWindowStart(), MODEL_PROFILE_CONFIG_KEY]);
+  if (row)
+    return "deleted";
+  return await getModelProfileByName(name) ? "in-use" : "missing";
+}
+async function getAgentDefaultProfileName(agentId) {
+  const row = await getDbClient().get("SELECT value FROM swarm_config WHERE scope = 'agent' AND scopeId = ? AND key = ?", [agentId, MODEL_PROFILE_CONFIG_KEY]);
+  return row?.value.trim() || null;
+}
+async function repoModelOverrideKeys(vcsRepo, { includeSecrets = true } = {}) {
+  if (!vcsRepo?.trim())
+    return new Set;
+  const repos = await getDbClient().query("SELECT id, url FROM swarm_repos WHERE name = ? ORDER BY name ASC", [vcsRepoName(vcsRepo)]);
+  const repo = repos.find((r) => vcsRepoUrlMatches(r.url, vcsRepo));
+  if (!repo)
+    return new Set;
+  const rows = await getDbClient().query(`SELECT key FROM swarm_config
+      WHERE scope = 'repo' AND scopeId = ? AND key IN ('MODEL_OVERRIDE', 'REASONING_EFFORT_OVERRIDE')
+        ${includeSecrets ? "" : "AND isSecret = 0"}`, [repo.id]);
+  return new Set(rows.map((row) => row.key));
+}
+async function taskProfileError(check) {
+  const name = check.profile?.trim();
+  if (!name)
+    return null;
+  if (check.model?.trim() || check.modelTier?.trim()) {
+    return "Pass `profile`, or `model`/`modelTier`, not both.";
+  }
+  const profile = await getModelProfileByName(name);
+  if (!profile) {
+    return `Unknown model profile "${name}". List profiles with list-model-profiles.`;
+  }
+  if (!check.agentId)
+    return null;
+  const agent = await getDbClient().get("SELECT COALESCE(harness_provider, provider) AS harness FROM agents WHERE id = ?", [check.agentId]);
+  if (agent?.harness && agent.harness !== profile.harness) {
+    return `Model profile "${name}" runs on the ${profile.harness} harness; the target agent runs ${agent.harness}.`;
+  }
+  return null;
+}
+function effectiveOverride(row) {
+  if (!row)
+    return null;
+  return row.exportToEnv === 0 ? "\x00withheld" : row.value;
+}
+async function clearAgentModelProfileOnOverrideChange(agentId, key, before, after) {
+  if (key !== "MODEL_OVERRIDE" && key !== "REASONING_EFFORT_OVERRIDE")
+    return;
+  if (effectiveOverride(before) === effectiveOverride(after))
+    return;
+  await getDbClient().run("DELETE FROM swarm_config WHERE scope = 'agent' AND scopeId = ? AND key = ?", [agentId, MODEL_PROFILE_CONFIG_KEY]);
+}
+var MODEL_PROFILE_CONFIG_KEY = "MODEL_PROFILE", TASK_HOLDS_PROFILE_SQL = `(
+  t.status NOT IN ('completed', 'failed', 'cancelled', 'superseded')
+  OR (t.status = 'superseded'
+      AND t.workflowRunStepId IS NULL
+      AND (t.finishedAt IS NULL OR t.finishedAt > ?)
+      AND NOT EXISTS (
+        SELECT 1 FROM agent_tasks c WHERE c.parentTaskId = t.id AND c.taskType = 'resume')))`;
+var init_model_profiles = __esm(() => {
+  init_types();
+  init_vcs_repo_match();
+  init_runtime();
+  init_read();
+});
+
+// src/be/db/tasks/human-free.ts
+function humanFreeCase(parentFlag) {
+  return `CASE
+        WHEN ${HUMAN_FREE_BASE_SQL} THEN 1
+        WHEN ${parentFlag} = 1 AND ${UNATTRIBUTED_SQL} THEN 1
+        ELSE 0
+      END`;
+}
+function carriesHumanFreeTag(tagsJson) {
+  const haystack = (tagsJson ?? "[]").toLowerCase();
+  return HUMAN_FREE_TAGS.some((tag) => haystack.includes(`"${tag}"`));
+}
+function tagWriteChangesHumanFree(previousTagsJson, nextTagsJson) {
+  return carriesHumanFreeTag(previousTagsJson) !== carriesHumanFreeTag(nextTagsJson);
+}
+async function classifyTaskHumanFree(input) {
+  const row = await getDbClient().get(`WITH task(taskType, tags, source, requestedByUserId, requestedByUserIdInherited, parentTaskId, workflowRunId) AS (
+        VALUES (?, ?, ?, ?, ?, ?, ?)
+      )
+      SELECT ${humanFreeCase("parent.isHumanFree")} AS humanFree
+      FROM task
+      LEFT JOIN agent_tasks parent ON parent.id = task.parentTaskId`, [
+    input.taskType ?? null,
+    input.tags ?? null,
+    input.source ?? null,
+    input.requestedByUserId ?? null,
+    input.requestedByUserIdInherited ? 1 : 0,
+    input.parentTaskId ?? null,
+    input.workflowRunId ?? null
+  ]);
+  return row?.humanFree === 1;
+}
+function setHumanFreeQueueListener(listener) {
+  queueListener = listener;
+}
+async function enqueueHumanFreeWork(taskIds, scope, hops) {
+  if (taskIds.length === 0)
+    return;
+  if (hops > HUMAN_FREE_MAX_CONTINUATION_HOPS) {
+    console.error(`[human-free] dropping ${taskIds.length} ${scope} continuation(s) past ${HUMAN_FREE_MAX_CONTINUATION_HOPS} hops; the task graph likely has a parent cycle`);
+    return;
+  }
+  await getDbClient().run(`INSERT INTO human_free_reclassify_queue (taskId, scope, afterRowid, hops)
+       SELECT value, ?, 0, ? FROM json_each(?) WHERE true
+       ON CONFLICT (taskId, scope) DO UPDATE SET
+         afterRowid = 0,
+         hops = MAX(hops, excluded.hops)`, [scope, hops, JSON.stringify(taskIds)]);
+  getDbClient().afterCommit(() => queueListener?.());
+}
+async function reclassifyBatch(seedTaskIds, batchSize, hops) {
+  const client = getDbClient();
+  const affected = (await client.query(`WITH RECURSIVE affected(id) AS (
+          SELECT value FROM json_each(?)
+
+          UNION
+
+          SELECT task.id
+          FROM affected
+          JOIN agent_tasks task ON task.parentTaskId = affected.id
+          LIMIT ?
+        )
+        SELECT id FROM affected`, [JSON.stringify(seedTaskIds), batchSize])).map((row) => row.id);
+  const result = await client.run(`WITH RECURSIVE affected(id) AS (
+        SELECT value FROM json_each(?)
+      ),
+      free(id) AS (
+        SELECT task.id
+        FROM agent_tasks task
+        LEFT JOIN agent_tasks parent ON parent.id = task.parentTaskId
+        WHERE task.id IN (SELECT id FROM affected)
+          AND (
+            ${HUMAN_FREE_BASE_SQL}
+            OR (
+              parent.isHumanFree = 1
+              AND parent.id NOT IN (SELECT id FROM affected)
+              AND ${UNATTRIBUTED_SQL}
+            )
+          )
+
+        UNION
+
+        SELECT task.id
+        FROM free
+        JOIN agent_tasks task ON task.parentTaskId = free.id
+        WHERE +task.id IN (SELECT id FROM affected)
+          AND ${UNATTRIBUTED_SQL}
+      )
+      UPDATE agent_tasks
+      SET isHumanFree = CASE WHEN id IN (SELECT id FROM free) THEN 1 ELSE 0 END
+      WHERE id IN (SELECT id FROM affected)
+        AND isHumanFree != CASE WHEN id IN (SELECT id FROM free) THEN 1 ELSE 0 END`, [JSON.stringify(affected)]);
+  if (affected.length >= batchSize) {
+    const unfinished = await client.query(`WITH batch(id) AS (
+          SELECT value FROM json_each(?)
+        )
+        SELECT batch.id
+        FROM batch
+        WHERE EXISTS (
+          SELECT 1
+          FROM agent_tasks child
+          WHERE child.parentTaskId = batch.id
+            AND child.id NOT IN (SELECT id FROM batch)
+        )`, [JSON.stringify(affected)]);
+    await enqueueHumanFreeWork(unfinished.map((row) => row.id), "children", hops);
+  }
+  return result.changes;
+}
+async function reclassifyTaskHumanFree(seedTaskIds, options = {}) {
+  const batchSize = options.batchSize ?? HUMAN_FREE_RECLASSIFY_BATCH;
+  const seeds = [...new Set(seedTaskIds)];
+  if (seeds.length === 0)
+    return 0;
+  await enqueueHumanFreeWork(seeds.slice(batchSize), "self", 1);
+  return await reclassifyBatch(seeds.slice(0, batchSize), batchSize, 1);
+}
+async function drainOneBatch(batchSize) {
+  return await getDbClient().transaction(async (tx) => {
+    const head = await tx.get("SELECT * FROM human_free_reclassify_queue ORDER BY seq LIMIT 1");
+    if (!head)
+      return null;
+    if (head.scope === "self") {
+      const rows = await tx.query("SELECT * FROM human_free_reclassify_queue WHERE scope = 'self' ORDER BY seq LIMIT ?", [batchSize]);
+      const seeds = rows.map((row) => row.taskId);
+      const hops = Math.max(...rows.map((row) => row.hops)) + 1;
+      await tx.run("DELETE FROM human_free_reclassify_queue WHERE seq IN (SELECT value FROM json_each(?))", [JSON.stringify(rows.map((row) => row.seq))]);
+      return await reclassifyBatch(seeds, batchSize, hops);
+    }
+    const page = await tx.query(`SELECT id, rowid AS position
+       FROM agent_tasks
+       WHERE parentTaskId = ? AND rowid > ?
+       ORDER BY rowid
+       LIMIT ?`, [head.taskId, head.afterRowid, batchSize]);
+    if (page.length < batchSize) {
+      await tx.run("DELETE FROM human_free_reclassify_queue WHERE seq = ?", [head.seq]);
+    } else {
+      await tx.run("UPDATE human_free_reclassify_queue SET afterRowid = ? WHERE seq = ?", [
+        page[page.length - 1]?.position ?? head.afterRowid,
+        head.seq
+      ]);
+    }
+    if (page.length === 0)
+      return 0;
+    return await reclassifyBatch(page.map((row) => row.id), batchSize, head.hops + 1);
+  });
+}
+async function pendingHumanFreeReclassifications() {
+  const row = await getDbClient().get("SELECT COUNT(*) AS count FROM human_free_reclassify_queue");
+  return row?.count ?? 0;
+}
+async function drainHumanFreeReclassifyQueue(options = {}) {
+  const batchSize = options.batchSize ?? HUMAN_FREE_RECLASSIFY_BATCH;
+  const maxBatches = options.maxBatches ?? Number.POSITIVE_INFINITY;
+  let batches = 0;
+  let changed = 0;
+  while (batches < maxBatches) {
+    const batchChanged = await drainOneBatch(batchSize);
+    if (batchChanged === null)
+      break;
+    batches += 1;
+    changed += batchChanged;
+  }
+  return { batches, changed, remaining: await pendingHumanFreeReclassifications() };
+}
+var HUMAN_FREE_TAGS, HUMAN_FREE_TAG_SQL, HUMAN_FREE_BASE_SQL, UNATTRIBUTED_SQL = "(task.requestedByUserId IS NULL OR task.requestedByUserIdInherited = 1)", HUMAN_FREE_RECLASSIFY_BATCH = 500, HUMAN_FREE_MAX_CONTINUATION_HOPS = 1e4, queueListener;
+var init_human_free = __esm(() => {
+  init_runtime();
+  HUMAN_FREE_TAGS = ["heartbeat"];
+  HUMAN_FREE_TAG_SQL = HUMAN_FREE_TAGS.map((tag) => `COALESCE(task.tags, '[]') LIKE '%"${tag}"%'`).join(`
+        OR `);
+  HUMAN_FREE_BASE_SQL = `(
+        COALESCE(task.taskType, '') IN ('heartbeat', 'heartbeat-checklist', 'boot-triage')
+        OR ${HUMAN_FREE_TAG_SQL}
+        OR (COALESCE(task.source, '') = 'schedule' AND task.requestedByUserId IS NULL)
+        OR (
+          task.parentTaskId IS NULL
+          AND COALESCE(task.source, '') = 'workflow'
+          AND task.requestedByUserId IS NULL
+          AND EXISTS (
+            SELECT 1
+            FROM workflow_runs run
+            WHERE run.id = task.workflowRunId
+              AND run.triggerType = 'schedule'
+              AND run.created_by IS NULL
+          )
+        )
+        OR (
+          COALESCE(task.source, '') = 'system'
+          AND parent.id IS NOT NULL
+          AND parent.requestedByUserId IS NULL
+        )
+      )`;
+});
+
 // src/be/task-lifecycle-events.ts
 function onTaskStarted(handler) {
   taskStartedHandlers.push(handler);
@@ -14334,7 +14710,7 @@ async function startTask(taskId) {
   }
   return result;
 }
-async function updateTaskClaudeSessionId(taskId, claudeSessionId, provider, providerMeta, model, harnessVariant, harnessVariantMeta) {
+async function updateTaskClaudeSessionId(taskId, claudeSessionId, provider, providerMeta, model, harnessVariant, harnessVariantMeta, resolvedEffort) {
   const setClauses = ["claudeSessionId = ?", "lastUpdatedAt = ?"];
   const params = [claudeSessionId, new Date().toISOString()];
   if (provider !== undefined) {
@@ -14357,6 +14733,10 @@ async function updateTaskClaudeSessionId(taskId, claudeSessionId, provider, prov
     setClauses.push("harnessVariantMeta = ?");
     params.push(JSON.stringify(harnessVariantMeta));
   }
+  if (resolvedEffort !== undefined) {
+    setClauses.push("resolvedEffort = ?");
+    params.push(resolvedEffort);
+  }
   params.push(taskId);
   const row = await getDbClient().get(`UPDATE agent_tasks SET ${setClauses.join(", ")} WHERE id = ? RETURNING *`, params);
   return row ? rowToAgentTask(row) : null;
@@ -14430,7 +14810,7 @@ async function completeTask(id, output, options) {
       });
     } catch {}
     getDbClient().afterCommit(() => {
-      import("./event-bus-vjtv82gm.js").then(({ workflowEventBus }) => {
+      import("./event-bus-j2jdg3qb.js").then(({ workflowEventBus }) => {
         workflowEventBus.emit("task.completed", {
           taskId: id,
           output: scrubbedOutput,
@@ -14485,7 +14865,7 @@ async function failTask(id, reason, opts = {}) {
       });
     } catch {}
     getDbClient().afterCommit(() => {
-      import("./event-bus-vjtv82gm.js").then(({ workflowEventBus }) => {
+      import("./event-bus-j2jdg3qb.js").then(({ workflowEventBus }) => {
         workflowEventBus.emit("task.failed", {
           taskId: id,
           failureReason: scrubbedReason,
@@ -14567,7 +14947,7 @@ async function cancelTask(id, reason) {
       });
     } catch {}
     getDbClient().afterCommit(() => {
-      import("./event-bus-vjtv82gm.js").then(({ workflowEventBus }) => {
+      import("./event-bus-j2jdg3qb.js").then(({ workflowEventBus }) => {
         workflowEventBus.emit("task.cancelled", {
           taskId: id,
           agentId: row.agentId,
@@ -14624,7 +15004,7 @@ async function supersedeTask(id, args) {
       });
     } catch {}
     getDbClient().afterCommit(() => {
-      import("./event-bus-vjtv82gm.js").then(({ workflowEventBus }) => {
+      import("./event-bus-j2jdg3qb.js").then(({ workflowEventBus }) => {
         workflowEventBus.emit("task.superseded", {
           taskId: id,
           reason: args.reason,
@@ -14836,7 +15216,7 @@ async function updateTaskProgress(id, progress) {
       });
     } catch {}
     getDbClient().afterCommit(() => {
-      import("./event-bus-vjtv82gm.js").then(({ workflowEventBus }) => {
+      import("./event-bus-j2jdg3qb.js").then(({ workflowEventBus }) => {
         workflowEventBus.emit("task.progress", {
           taskId: id,
           progress: scrubbedProgress,
@@ -14907,7 +15287,7 @@ function emitChildRunFinished(childRunId, parentStepId, status) {
 }
 function emitAfterCommit(childRunId, parentStepId) {
   getDbClient().afterCommit(() => {
-    import("./event-bus-vjtv82gm.js").then(({ workflowEventBus }) => {
+    import("./event-bus-j2jdg3qb.js").then(({ workflowEventBus }) => {
       workflowEventBus.emit("workflow.child.finished", { childRunId, parentStepId });
     }).catch((err) => console.error("[db] workflow.child.finished event not emitted:", scrubSecrets(err instanceof Error ? err.message : String(err))));
   });
@@ -14924,6 +15304,164 @@ var init_workflow_runs = __esm(() => {
   ]);
 });
 
+// src/integrations/chat-sdk/schema.ts
+function forbiddenKeyIssues(value, ctx) {
+  for (const key of FORBIDDEN_ADAPTER_KEYS) {
+    if (key in value) {
+      ctx.addIssue({
+        code: "custom",
+        path: [key],
+        message: `${key} is not allowed in CHAT_SDK_ADAPTERS`
+      });
+    }
+  }
+}
+function adapterSchema(shape) {
+  return exports_external.looseObject({ ...shape, ...COMMON_SHAPE }).superRefine(forbiddenKeyIssues);
+}
+function draftShape(shape) {
+  return Object.fromEntries(Object.entries(shape).map(([key, field]) => [key, field.optional()]));
+}
+function discordPublicKeyIssue(value, ctx) {
+  if (typeof value.publicKey === "string" && !DISCORD_PUBLIC_KEY_PATTERN.test(value.publicKey)) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["publicKey"],
+      message: "publicKey must be 64 hex characters (the application's Ed25519 public key)"
+    });
+  }
+}
+function valueAt(input, path3) {
+  let current = input;
+  for (const key of path3) {
+    if (current === null || typeof current !== "object")
+      return;
+    current = current[key];
+  }
+  return current;
+}
+function firstIssueText(error2, prefix = "CHAT_SDK_ADAPTERS", input) {
+  const issue = error2.issues[0];
+  if (!issue)
+    return `${prefix} is invalid`;
+  const path3 = issue.path.length > 0 ? issue.path.join(".") : "(root)";
+  const missing = input !== undefined && issue.path.length > 0 && valueAt(input, issue.path) === undefined;
+  return `${prefix}.${path3}: ${missing ? "required" : issue.message}`;
+}
+function formFields(shape) {
+  return Object.keys(shape).filter((key) => key !== "enabled");
+}
+function isAdapterEntryEnabled(entry) {
+  return entry !== undefined && entry.enabled !== false;
+}
+function validateChatSdkAdaptersValue(value) {
+  if (typeof value !== "string")
+    return "CHAT_SDK_ADAPTERS must be a JSON string";
+  let parsed;
+  try {
+    parsed = JSON.parse(value);
+  } catch (error2) {
+    return `CHAT_SDK_ADAPTERS is not valid JSON: ${error2 instanceof Error ? error2.message : String(error2)}`;
+  }
+  const result = ChatSdkAdaptersDraftSchema.safeParse(parsed);
+  return result.success ? null : firstIssueText(result.error);
+}
+var CHAT_SDK_ADAPTER_NAMES, ConfigRefSchema, Str, FORBIDDEN_ADAPTER_KEYS, COMMON_SHAPE, TELEGRAM_SHAPE, SLACK_SHAPE, TelegramAdapterSchema, SlackAdapterSchema, DISCORD_PUBLIC_KEY_PATTERN, DISCORD_SHAPE, DiscordAdapterSchema, TEAMS_SHAPE, TeamsAdapterSchema, ChatSdkAdaptersSchema, CHAT_SDK_ADAPTER_SCHEMAS, ChatSdkAdaptersDraftSchema, CHAT_SDK_ADAPTER_FIELDS;
+var init_schema = __esm(() => {
+  init_zod();
+  CHAT_SDK_ADAPTER_NAMES = ["telegram", "slack", "discord", "teams"];
+  ConfigRefSchema = exports_external.strictObject({ $config: exports_external.string().min(1) });
+  Str = exports_external.union([exports_external.string().trim().min(1), ConfigRefSchema]);
+  FORBIDDEN_ADAPTER_KEYS = [
+    "apiUrl",
+    "apiBaseUrl",
+    "webhookVerifier",
+    "allowUnverifiedWebhooks"
+  ];
+  COMMON_SHAPE = {
+    userName: exports_external.string().min(1).optional(),
+    enabled: exports_external.boolean().optional()
+  };
+  TELEGRAM_SHAPE = {
+    botToken: Str,
+    secretToken: Str.optional(),
+    mode: exports_external.enum(["webhook", "polling"]).default("webhook"),
+    allowedUserIds: exports_external.array(exports_external.union([exports_external.string(), exports_external.number()])).optional()
+  };
+  SLACK_SHAPE = {
+    botToken: Str,
+    signingSecret: Str.optional(),
+    appToken: Str.optional(),
+    mode: exports_external.enum(["webhook", "socket"]).default("webhook")
+  };
+  TelegramAdapterSchema = adapterSchema(TELEGRAM_SHAPE);
+  SlackAdapterSchema = adapterSchema(SLACK_SHAPE).superRefine((value, ctx) => {
+    if (value.mode === "webhook" && value.signingSecret === undefined) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["signingSecret"],
+        message: "signingSecret is required in webhook mode"
+      });
+    }
+    if (value.mode === "socket" && value.appToken === undefined) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["appToken"],
+        message: "appToken is required in socket mode"
+      });
+    }
+  });
+  DISCORD_PUBLIC_KEY_PATTERN = /^[0-9a-fA-F]{64}$/;
+  DISCORD_SHAPE = {
+    botToken: Str,
+    publicKey: Str,
+    applicationId: Str,
+    respondToChannelIds: exports_external.array(exports_external.string()).optional(),
+    respondToGlobalMentions: exports_external.boolean().optional(),
+    mentionRoleIds: exports_external.array(exports_external.string()).optional()
+  };
+  DiscordAdapterSchema = adapterSchema(DISCORD_SHAPE).superRefine(discordPublicKeyIssue);
+  TEAMS_SHAPE = {
+    appId: Str,
+    appPassword: Str,
+    appTenantId: Str.optional(),
+    appType: exports_external.enum(["MultiTenant", "SingleTenant"]).default("MultiTenant")
+  };
+  TeamsAdapterSchema = adapterSchema(TEAMS_SHAPE).superRefine((value, ctx) => {
+    if (value.appType === "SingleTenant" && value.appTenantId === undefined) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["appTenantId"],
+        message: "appTenantId is required for a SingleTenant app"
+      });
+    }
+  });
+  ChatSdkAdaptersSchema = exports_external.strictObject({
+    telegram: TelegramAdapterSchema,
+    slack: SlackAdapterSchema,
+    discord: DiscordAdapterSchema,
+    teams: TeamsAdapterSchema
+  }).partial();
+  CHAT_SDK_ADAPTER_SCHEMAS = {
+    telegram: TelegramAdapterSchema,
+    slack: SlackAdapterSchema,
+    discord: DiscordAdapterSchema,
+    teams: TeamsAdapterSchema
+  };
+  ChatSdkAdaptersDraftSchema = exports_external.strictObject({
+    telegram: adapterSchema(draftShape(TELEGRAM_SHAPE)),
+    slack: adapterSchema(draftShape(SLACK_SHAPE)),
+    discord: adapterSchema(draftShape(DISCORD_SHAPE)).superRefine(discordPublicKeyIssue),
+    teams: adapterSchema(draftShape(TEAMS_SHAPE))
+  }).partial();
+  CHAT_SDK_ADAPTER_FIELDS = {
+    telegram: formFields(TelegramAdapterSchema.shape),
+    slack: formFields(SlackAdapterSchema.shape),
+    discord: formFields(DiscordAdapterSchema.shape),
+    teams: formFields(TeamsAdapterSchema.shape)
+  };
+});
+
 // src/scripts-runtime/executors/quickjs-pool-config.ts
 function validateQuickJSPoolSize(value) {
   const error2 = `Invalid SCRIPT_QUICKJS_POOL_SIZE (must be an integer between 1 and ${MAX_QUICKJS_POOL_SIZE})`;
@@ -14961,7 +15499,11 @@ function reactionName(event) {
   const normalized = normalizeSlackReactionShortcode(raw);
   return normalized ?? SLACK_REACTION_DEFAULTS[event];
 }
-var SLACK_REACTION_DEFAULTS, SLACK_REACTION_CONFIG_KEYS, SLACK_REACTION_SHORTCODE_PATTERN;
+function completedStatusIcon() {
+  const normalized = normalizeSlackReactionShortcode(process.env[SLACK_STATUS_ICON_COMPLETED_KEY]);
+  return normalized ? `:${normalized}:` : SLACK_STATUS_ICON_COMPLETED_DEFAULT;
+}
+var SLACK_REACTION_DEFAULTS, SLACK_REACTION_CONFIG_KEYS, SLACK_REACTION_SHORTCODE_PATTERN, SLACK_STATUS_ICON_COMPLETED_KEY = "SLACK_STATUS_ICON_COMPLETED", SLACK_STATUS_ICON_COMPLETED_DEFAULT = "✅";
 var init_reaction_shortcode = __esm(() => {
   SLACK_REACTION_DEFAULTS = {
     accepted: "eyes",
@@ -15015,20 +15557,26 @@ var init_enabled_tools = () => {};
 function parseTaskToolManifest(value) {
   return taskToolManifestSchema.parse(JSON.parse(value));
 }
+function isChatSdkTask(task) {
+  return chatThreadOfContextKey(task.contextKey) !== null;
+}
 function selectTaskTools(manifest, task) {
   const fromSchedule = task.scheduleId && Object.hasOwn(manifest.schedules ?? {}, task.scheduleId) ? manifest.schedules?.[task.scheduleId] : undefined;
   const fromType = task.taskType && Object.hasOwn(manifest.taskTypes ?? {}, task.taskType) ? manifest.taskTypes?.[task.taskType] : undefined;
-  return [...new Set(fromSchedule ?? fromType ?? [])].filter((name) => !name.startsWith("slack-") || Boolean(task.slackChannelId));
+  const chatTask = isChatSdkTask(task);
+  return [...new Set(fromSchedule ?? fromType ?? [])].filter((name) => (!name.startsWith("slack-") || Boolean(task.slackChannelId)) && (chatTask || !CHAT_TASK_ONLY_TOOLS.includes(name)));
 }
-var toolNames, taskToolManifestSchema;
+var toolNames, taskToolManifestSchema, CHAT_TASK_ONLY_TOOLS;
 var init_task_tool_manifest = __esm(() => {
   init_zod();
+  init_context_key();
   init_tool_config();
   toolNames = exports_external.array(exports_external.string().refine((name) => ALL_TOOLS.has(name), "Unknown swarm tool")).max(16);
   taskToolManifestSchema = exports_external.strictObject({
     taskTypes: exports_external.record(exports_external.string().min(1).max(50), toolNames).optional(),
     schedules: exports_external.record(exports_external.uuid(), toolNames).optional()
   });
+  CHAT_TASK_ONLY_TOOLS = ["chat-reply"];
 });
 
 // src/be/model-tier-keys.ts
@@ -15068,6 +15616,12 @@ var init_model_tier_keys = __esm(() => {
 });
 
 // src/be/swarm-config-guard.ts
+function teamsSdkEnvKeysSql() {
+  return TEAMS_SDK_ENV_KEYS.map((key) => `'${key}'`).join(", ");
+}
+function isApiOnlyConfigKey(key) {
+  return API_ONLY_CONFIG_KEYS.has(key);
+}
 function isInternalConfigKey(key) {
   return INTERNAL_CONFIG_KEYS.has(key.toLowerCase());
 }
@@ -15175,22 +15729,37 @@ function validateConfigValue(key, value) {
   const validator = VALIDATED_KEYS[key.toUpperCase()];
   return validator ? validator(value) : null;
 }
-var RESERVED_KEYS, INTERNAL_CONFIG_KEYS, BOOLEAN_LITERALS, MAX_DB_RETENTION_DAYS = 1e6, DB_RETENTION_TUNING_BOUNDS, validateControllerTokenTtlDays, validateControllerGraceSec, VALIDATED_KEYS;
+function validateExportToEnv(key, exportToEnv) {
+  return exportToEnv === true && isEnvExportRestrictedKey(key) ? envExportRestrictedError(key) : null;
+}
+var TEAMS_SDK_ENV_KEYS, RESERVED_KEYS, API_ONLY_CONFIG_KEYS, INTERNAL_CONFIG_KEYS, BOOLEAN_LITERALS, MAX_DB_RETENTION_DAYS = 1e6, DB_RETENTION_TUNING_BOUNDS, validateControllerTokenTtlDays, validateControllerGraceSec, VALIDATED_KEYS;
 var init_swarm_config_guard = __esm(() => {
+  init_schema();
   init_quickjs_pool_config();
   init_reaction_shortcode();
   init_types();
   init_api_drain();
+  init_config_env_export();
   init_enabled_tools();
   init_org_website();
   init_task_tool_manifest();
   init_model_tier_keys();
+  TEAMS_SDK_ENV_KEYS = [
+    "SERVICE_URL",
+    "TENANT_ID",
+    "CLIENT_ID",
+    "CLIENT_SECRET",
+    "MANAGED_IDENTITY_CLIENT_ID",
+    "CLOUD"
+  ];
   RESERVED_KEYS = new Set([
     "API_KEY",
     "SECRETS_ENCRYPTION_KEY",
     "CORS_ALLOW_ANY_ORIGIN",
-    "EXTENSION_ALLOW_LEAD_ACTIVATION"
+    "EXTENSION_ALLOW_LEAD_ACTIVATION",
+    "CHAT_SDK_API_URL_OVERRIDES"
   ]);
+  API_ONLY_CONFIG_KEYS = new Set(["API_AGENT_FS_API_KEY", "SLACK_SIGNING_SECRET"]);
   INTERNAL_CONFIG_KEYS = new Set(["onboarding_state", "runtime_owner_id"]);
   BOOLEAN_LITERALS = ["true", "false", "1", "0"];
   DB_RETENTION_TUNING_BOUNDS = {
@@ -15222,6 +15791,7 @@ var init_swarm_config_guard = __esm(() => {
     ], 1),
     ...integerValidators(["RUNTIME_SOCKET_GRACE_SEC"], 0),
     ...integerValidators(["RUNTIME_WAKE_GRACE_SEC", "RUNTIME_WAKE_REROUTE_SEC", "RUNTIME_ROUTING_INTERVAL_MS"], 0),
+    CHAT_SDK_ADAPTERS: validateChatSdkAdaptersValue,
     TASK_TOOL_MANIFESTS: (value) => {
       try {
         if (typeof value !== "string")
@@ -15319,6 +15889,7 @@ var init_swarm_config_guard = __esm(() => {
       "OPENROUTER_APP_ATTRIBUTION",
       "CURSOR_NATIVE_SYSTEM_PROMPT",
       "SLACK_DISABLE",
+      "CHAT_SDK_ENABLED",
       "SLACK_RENDER_V2",
       "SLACK_RENDER_V2_DELEGATION",
       "SLACK_BLOCK_EXTERNAL_CHANNELS",
@@ -15355,7 +15926,8 @@ var init_swarm_config_guard = __esm(() => {
       "SLACK_REACTION_NOW",
       "SLACK_REACTION_STEERED",
       "SLACK_REACTION_COMPLETED",
-      "SLACK_REACTION_FAILED"
+      "SLACK_REACTION_FAILED",
+      "SLACK_STATUS_ICON_COMPLETED"
     ]),
     ...integerValidators([
       "HEARTBEAT_INTERVAL_MS",
@@ -15393,6 +15965,7 @@ var init_swarm_config_guard = __esm(() => {
     ...integerValidators(["MODEL_LATEST_SOAK_DAYS"], 0),
     ...integerValidators(["APPROVAL_REQUEST_AUTO_CANCELLATION_DAYS"], 0),
     ...boundedIntegerValidators(["API_DRAIN_MAX_MS"], 0, API_DRAIN_MAX_MS_LIMIT),
+    ...boundedIntegerValidators(["CHAT_SDK_BUFFER_MS"], 1, 600000),
     ...boundedIntegerValidators(["CONTEXT_PREAMBLE_MAX_TOKENS"], 100, 20000),
     MEMORY_MIN_SIMILARITY: (value) => validateFloatRange("MEMORY_MIN_SIMILARITY", value, 0, 1, "between 0 and 1 inclusive"),
     MEMORY_ACCESS_BOOST_MAX: (value) => validateFloatRange("MEMORY_ACCESS_BOOST_MAX", value, 1, Number.POSITIVE_INFINITY, "a number >= 1")
@@ -16564,9 +17137,13 @@ function encodedForms(value) {
 function registerStoredSecret(value, name) {
   if (!value)
     return;
-  registerVolatileSecret(value, name);
-  for (const form of encodedForms(value))
-    registerVolatileSecret(form, name);
+  for (const candidate of new Set([value, value.trim()])) {
+    if (!candidate)
+      continue;
+    registerVolatileSecret(candidate, name);
+    for (const form of encodedForms(candidate))
+      registerVolatileSecret(form, name);
+  }
 }
 async function loadSecretRegistry() {
   const result = {
@@ -16605,7 +17182,7 @@ async function loadSecretRegistry() {
     result.failed += 1;
   }
   try {
-    const { loadRuntimeControllerSecrets } = await import("./db-yyhqqrbf.js");
+    const { loadRuntimeControllerSecrets } = await import("./db-ncypk9np.js");
     const loaded = await loadRuntimeControllerSecrets();
     result.runtimeController = loaded.count;
     result.failed += loaded.failed;
@@ -16900,6 +17477,7 @@ __export(exports_db, {
   ReservedAgentRoleError: () => ReservedAgentRoleError,
   SESSION_ACTIVITY_REFRESH_MIN_INTERVAL_MS: () => SESSION_ACTIVITY_REFRESH_MIN_INTERVAL_MS,
   SKILL_FILE_LIMITS: () => SKILL_FILE_LIMITS,
+  SUPERSEDED_RESUME_REPAIR_WINDOW_MS: () => SUPERSEDED_RESUME_REPAIR_WINDOW_MS,
   UNATTRIBUTED_USER_ID: () => UNATTRIBUTED_USER_ID,
   __resetSqliteVecExtensionPathCacheForTests: () => __resetSqliteVecExtensionPathCacheForTests,
   abandonSlackOutcomeDelivery: () => abandonSlackOutcomeDelivery,
@@ -17028,6 +17606,7 @@ __export(exports_db, {
   getAgentSkills: () => getAgentSkills,
   getAgentStatusCounts: () => getAgentStatusCounts,
   getAgentWithTasks: () => getAgentWithTasks,
+  getAgentWorkingOnContextKey: () => getAgentWorkingOnContextKey,
   getAgentWorkingOnThread: () => getAgentWorkingOnThread,
   getAllAgentMailInboxMappings: () => getAllAgentMailInboxMappings,
   getAllAgents: () => getAllAgents,
@@ -17089,8 +17668,10 @@ __export(exports_db, {
   getLastReadAt: () => getLastReadAt,
   getLastRunStart: () => getLastRunStart,
   getLastSuccessfulRun: () => getLastSuccessfulRun,
+  getLatestActiveTaskByContextKey: () => getLatestActiveTaskByContextKey,
   getLatestActiveTaskInThread: () => getLatestActiveTaskInThread,
   getLatestContextVersion: () => getLatestContextVersion,
+  getLatestLeadTaskByContextKey: () => getLatestLeadTaskByContextKey,
   getLatestLeadTaskInThread: () => getLatestLeadTaskInThread,
   getLatestPageBySlug: () => getLatestPageBySlug,
   getLatestScriptRunStepTaskByContextKey: () => getLatestScriptRunStepTaskByContextKey,
@@ -17120,6 +17701,7 @@ __export(exports_db, {
   getPageVersions: () => getPageVersions,
   getPausedTasksForAgent: () => getPausedTasksForAgent,
   getPendingApprovalVoteState: () => getPendingApprovalVoteState,
+  getPendingChatRelayTasks: () => getPendingChatRelayTasks,
   getPendingEventWaitNames: () => getPendingEventWaitNames,
   getPendingSlackRelayTasks: () => getPendingSlackRelayTasks,
   getPendingSteeringForAgent: () => getPendingSteeringForAgent,
@@ -17217,6 +17799,7 @@ __export(exports_db, {
   getWorkflowVersion: () => getWorkflowVersion,
   getWorkflowVersions: () => getWorkflowVersions,
   getWorkflowsByScheduleId: () => getWorkflowsByScheduleId,
+  giveUpStaleChatRelays: () => giveUpStaleChatRelays,
   hasBudgetRefusalNotificationToday: () => hasBudgetRefusalNotificationToday,
   hasCapacity: () => hasCapacity,
   hasFirstCompletedTask: () => hasFirstCompletedTask,
@@ -17268,6 +17851,9 @@ __export(exports_db, {
   listWorkflowRuns: () => listWorkflowRuns,
   listWorkflowRunsPage: () => listWorkflowRunsPage,
   listWorkflows: () => listWorkflows,
+  markChatRelayAttempted: () => markChatRelayAttempted,
+  markChatRelayDelivered: () => markChatRelayDelivered,
+  markChatRelayGivenUp: () => markChatRelayGivenUp,
   markFinalizedSlackRelaysDelivered: () => markFinalizedSlackRelaysDelivered,
   markInboxMessageDelegated: () => markInboxMessageDelegated,
   markInboxMessageRead: () => markInboxMessageRead,
@@ -17296,6 +17882,7 @@ __export(exports_db, {
   reassociateSessionLogs: () => reassociateSessionLogs,
   recordApprovalVotes: () => recordApprovalVotes,
   recordBudgetRefusalNotification: () => recordBudgetRefusalNotification,
+  recordChatRelayError: () => recordChatRelayError,
   recordInlineScriptRun: () => recordInlineScriptRun,
   recordKeyAuthFailure: () => recordKeyAuthFailure,
   recordKeyRateLimitWindows: () => recordKeyRateLimitWindows,
@@ -18796,9 +19383,9 @@ async function createTaskExtended(task, options) {
         vcsProvider, vcsRepo, vcsEventType, vcsNumber, vcsCommentId, vcsAuthor, vcsUrl,
         vcsInstallationId, vcsNodeId,
         agentmailInboxId, agentmailMessageId, agentmailThreadId,
-        mentionMessageId, mentionChannelId, dir, parentTaskId, model, modelTier, effort, scheduleId,
+        mentionMessageId, mentionChannelId, dir, parentTaskId, model, modelTier, effort, profile, scheduleId,
         workflowRunId, workflowRunStepId, outputSchema, followUpConfig, requestedByUserId, requestedByUserIdInherited, contextKey, routingAffinity, swarmVersion, createdAt, lastUpdatedAt, created_by, updated_by, isHumanFree
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`, [
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`, [
       id,
       assetKey,
       options?.agentId ?? null,
@@ -18838,6 +19425,7 @@ async function createTaskExtended(task, options) {
       options?.model ?? null,
       options?.modelTier ?? null,
       options?.effort ?? null,
+      options?.profile?.trim() || null,
       options?.scheduleId ?? null,
       options?.workflowRunId ?? null,
       options?.workflowRunStepId ?? null,
@@ -18903,7 +19491,7 @@ async function createTaskExtended(task, options) {
     priority: row.priority
   }, (task2) => task2 !== null, row.requestedByUserId);
   getDbClient().afterCommit(() => {
-    import("./event-bus-vjtv82gm.js").then(({ workflowEventBus }) => {
+    import("./event-bus-j2jdg3qb.js").then(({ workflowEventBus }) => {
       workflowEventBus.emit("task.created", {
         taskId: row.id,
         task: row.task,
@@ -18985,7 +19573,7 @@ async function releaseTask(taskId, wakeSnapshot) {
     } catch {}
     if (isRuntimePoolsEnabled() && !wakeSnapshot)
       getDbClient().afterCommit(() => {
-        import("./event-bus-vjtv82gm.js").then(({ workflowEventBus }) => workflowEventBus.emit("task.unassigned", { taskId })).catch((error2) => console.error("[db] Routing event failed:", scrubSecrets(String(error2))));
+        import("./event-bus-j2jdg3qb.js").then(({ workflowEventBus }) => workflowEventBus.emit("task.unassigned", { taskId })).catch((error2) => console.error("[db] Routing event failed:", scrubSecrets(String(error2))));
       });
   }
   return row ? rowToAgentTask(row) : null;
@@ -19055,7 +19643,7 @@ async function rejectTask(taskId, agentId, reason) {
     } catch {}
     if (isRuntimePoolsEnabled())
       getDbClient().afterCommit(() => {
-        import("./event-bus-vjtv82gm.js").then(({ workflowEventBus }) => workflowEventBus.emit("task.unassigned", { taskId })).catch((error2) => console.error("[db] Routing event failed:", scrubSecrets(String(error2))));
+        import("./event-bus-j2jdg3qb.js").then(({ workflowEventBus }) => workflowEventBus.emit("task.unassigned", { taskId })).catch((error2) => console.error("[db] Routing event failed:", scrubSecrets(String(error2))));
       });
   }
   return row ? rowToAgentTask(row) : null;
@@ -20733,7 +21321,8 @@ function rowToSwarmConfig(row) {
       description: row.description ?? null,
       createdAt: row.createdAt,
       lastUpdatedAt: row.lastUpdatedAt,
-      encrypted: isEncrypted
+      encrypted: isEncrypted,
+      exportToEnv: effectiveExportToEnv(row.key, row.exportToEnv !== 0)
     };
   }
   let value = row.value;
@@ -20755,7 +21344,8 @@ function rowToSwarmConfig(row) {
     description: row.description ?? null,
     createdAt: row.createdAt,
     lastUpdatedAt: row.lastUpdatedAt,
-    encrypted: isEncrypted
+    encrypted: isEncrypted,
+    exportToEnv: effectiveExportToEnv(row.key, row.exportToEnv !== 0)
   };
 }
 function autoEncryptLegacyPlaintextSecrets(database, dbPath, options = {}) {
@@ -20856,7 +21446,7 @@ async function getSwarmConfigs(filters) {
 async function getInjectableGlobalConfigs() {
   const rows = await getDbClient().query(`SELECT * FROM swarm_config
        WHERE scope = 'global'
-         AND UPPER(key) NOT IN ('API_KEY', 'SECRETS_ENCRYPTION_KEY', 'CORS_ALLOW_ANY_ORIGIN', 'EXTENSION_ALLOW_LEAD_ACTIVATION')
+         AND UPPER(key) NOT IN ('API_KEY', 'SECRETS_ENCRYPTION_KEY', 'CORS_ALLOW_ANY_ORIGIN', 'EXTENSION_ALLOW_LEAD_ACTIVATION', 'CHAT_SDK_API_URL_OVERRIDES', ${teamsSdkEnvKeysSql()})
        ORDER BY key ASC`);
   return rows.filter((row) => !isInternalConfigKey(row.key)).map(rowToSwarmConfig);
 }
@@ -20883,6 +21473,10 @@ async function upsertSwarmConfig(data) {
   if (isReservedConfigKey(data.key)) {
     throw reservedKeyError(data.key);
   }
+  if (data.exportToEnv === true && isEnvExportRestrictedKey(data.key)) {
+    throw new Error(envExportRestrictedError(data.key));
+  }
+  const restricted = isEnvExportRestrictedKey(data.key);
   const now = new Date().toISOString();
   const scopeId = data.scope === "global" ? null : data.scopeId ?? null;
   const isSecret = data.isSecret ? 1 : 0;
@@ -20891,15 +21485,22 @@ async function upsertSwarmConfig(data) {
   const storedValue = data.isSecret ? encryptSecret(data.value, getEncryptionKey()) : data.value;
   const encryptedFlag = data.isSecret ? 1 : 0;
   const row = await getDbClient().transaction(async () => {
-    const existing = scopeId === null ? await getDbClient().get("SELECT id FROM swarm_config WHERE scope = ? AND scopeId IS NULL AND key = ?", [data.scope, data.key]) : await getDbClient().get("SELECT id FROM swarm_config WHERE scope = ? AND scopeId = ? AND key = ?", [data.scope, scopeId, data.key]);
-    if (existing) {
-      return await getDbClient().get(`UPDATE swarm_config SET value = ?, isSecret = ?, envPath = ?, description = ?, encrypted = ?, lastUpdatedAt = ?
-         WHERE id = ? RETURNING *`, [storedValue, isSecret, envPath, description, encryptedFlag, now, existing.id]);
-    }
-    const id = crypto.randomUUID();
-    return await getDbClient().get(`INSERT INTO swarm_config (id, scope, scopeId, key, value, isSecret, envPath, description, createdAt, lastUpdatedAt, encrypted)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`, [
-      id,
+    const existing = scopeId === null ? await getDbClient().get("SELECT * FROM swarm_config WHERE scope = ? AND scopeId IS NULL AND key = ?", [data.scope, data.key]) : await getDbClient().get("SELECT * FROM swarm_config WHERE scope = ? AND scopeId = ? AND key = ?", [data.scope, scopeId, data.key]);
+    const written = existing ? await getDbClient().get(`UPDATE swarm_config SET value = ?, isSecret = ?, envPath = ?, description = ?, encrypted = ?, lastUpdatedAt = ?,
+             exportToEnv = CASE WHEN ? THEN 0 ELSE COALESCE(?, exportToEnv) END
+           WHERE id = ? RETURNING *`, [
+      storedValue,
+      isSecret,
+      envPath,
+      description,
+      encryptedFlag,
+      now,
+      restricted ? 1 : 0,
+      data.exportToEnv === undefined ? null : data.exportToEnv ? 1 : 0,
+      existing.id
+    ]) : await getDbClient().get(`INSERT INTO swarm_config (id, scope, scopeId, key, value, isSecret, envPath, description, createdAt, lastUpdatedAt, encrypted, exportToEnv)
+             VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`, [
+      crypto.randomUUID(),
       data.scope,
       scopeId,
       data.key,
@@ -20909,8 +21510,13 @@ async function upsertSwarmConfig(data) {
       description,
       now,
       now,
-      encryptedFlag
+      encryptedFlag,
+      restricted ? 0 : data.exportToEnv ?? defaultExportToEnv(data.key) ? 1 : 0
     ]);
+    if (data.scope === "agent" && scopeId) {
+      await clearAgentModelProfileOnOverrideChange(scopeId, data.key, existing, written);
+    }
+    return written;
   });
   if (!row)
     throw new Error("Failed to upsert swarm config");
@@ -20940,7 +21546,10 @@ async function emitBuiltInIntegrationConnectedOnce(provider) {
   } catch {}
 }
 async function deleteSwarmConfig(id) {
-  const row = await getDbClient().get("DELETE FROM swarm_config WHERE id = ? RETURNING scope, scopeId", [id]);
+  const row = await getDbClient().get("DELETE FROM swarm_config WHERE id = ? RETURNING *", [id]);
+  if (row?.scope === "agent" && row.scopeId) {
+    await clearAgentModelProfileOnOverrideChange(row.scopeId, row.key, row, null);
+  }
   if (row)
     getDbClient().afterCommit(() => publishWorkerConfigNudge(row.scope, row.scopeId));
   return row !== null;
@@ -24982,6 +25591,7 @@ var init_db2 = __esm(() => {
   init_telemetry_trigger();
   init_types();
   init_codex_auth_failure();
+  init_config_env_export();
   init_config_secrets();
   init_credentials();
   init_github_pull_request();
@@ -24998,6 +25608,7 @@ var init_db2 = __esm(() => {
   init_agents();
   init_approvals();
   init_context_versions();
+  init_model_profiles();
   init_runtime();
   init_human_free();
   init_read();
@@ -26191,4 +26802,4 @@ function getMemoryStore() {
 var embeddingProvider2 = null, memoryStore = null;
 var init_memory = () => {};
 
-export { slackContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, azureDevOpsContextKey, azureDevOpsWorkItemContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, init_catalog, catalog_default, mapTriggerSurface, init_telemetry_context, TELEMETRY_PROXY_ORIGIN, normalizeOrgWebsite, orgLogoUrl, isFilledOrgLogoUrl, init_org_website, beginRequestAuthScope, setRequestAuth, getRequestAuth, getCurrentRequestAuth, runWithoutRequestAuth, getCurrentRequestUserId, init_request_auth_context, setTelemetryIngestObserver, isTelemetryEnabled, _resolveIntegrationType, _resolveIntegrationProvider, initTelemetry, setTelemetryRoleResolver, isTelemetryReady, track, trackRelayed, telemetry, emitIntegrationConnected, init_telemetry, auditAssetKeys, init_asset_key_audit, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, init_credential_broker, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, isInTransaction, init_db_client, breaksJsonValidity, scrubJsonValue, init_scrub_json, sealJson, init_sealed_json, getPromptTemplateDefaultDrift, init_default_drift, init_templates2 as init_templates, init_templates3 as init_templates1, isSqliteVecAvailable, resolveSqliteVecExtensionPath, __resetSqliteVecExtensionPathCacheForTests, initDb, getDb, closeDb, getDbClient, init_runtime, cachedUserRole, configureOrgDomainPersistence, recomputeOrgDomain, scheduleOrgDomainRecompute, init_telemetry_identity, resolveTriggerSurface, emitTaskTelemetry, init_telemetry_trigger, CODEX_AUTH_WATCH_NAMESPACE, codexAuthBenchMarkerKey, isCodexAuthFailureReason, init_codex_auth_failure, MASKED_SECRET_VALUE, init_config_secrets, HeartbeatExpiryError, init_heartbeat_expiry, isRuntimePoolsEnabled, init_runtime_pools_flag, normalizeDate, normalizeDateRequired, init_date_utils, rowToAgent, updateAgentCredentialState, updateAgentCredentialMissing, createAgent, getAgentById, EXTENSION_AGENT_ROLE, NOT_EXTENSION_AGENT_SQL, isExtensionAgent, extensionAgentAssignmentError, ReservedAgentRoleError, reservedRoleViolation, ExtensionAgentAssignmentError, getAllAgents, getAgentStatusCounts, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, isPoolAffinityEnforcementEnabled, buildRoutingAffinityFromAgent, isAgentEligibleForTask, getAgentDailyTaskCounts, init_agents, listApprovalRequestSummaries, getPendingApprovalVoteState, recordApprovalVotes, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, setHumanFreeQueueListener, drainHumanFreeReclassifyQueue, init_human_free, rowToAgentTask, getTaskById, getChildTasks, hasNonTerminalResumeChild, getSupersededTasksWithoutResume, getSupersededTasksWithUnsettledDependents, hasNonTerminalRerouteDecisionChild, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getPendingSlackRelayTasks, markSlackRelayAttempted, markSlackRelayDelivered, markFinalizedSlackRelaysDelivered, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getSlackTasksMissingTree, getInProgressTasksByContextKey, isLinearTrackerContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getLatestScriptRunStepTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getLatestLeadTaskInThread, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, init_read, onTaskStarted, init_task_lifecycle_events, channelTopic, addWorkerSubscription, removeWorkerSubscription, listSubscribedWorkerAgents, init_channels, publishWorkerNudge, init_worker_nudges, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, updateTaskClaudeSessionId, recordTaskProviderIfUnset, updateTaskTitle, completeTask, failTask, overwriteTerminalTaskResultText, cancelTask, supersedeTask, settleSupersededTaskDependents, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, getChildWorkflowRunId, getWorkflowRunParent, getWorkflowRunLineage, getSettledChildRunParentSteps, init_workflow_runs, resolveQuickJSPoolSize, init_quickjs_pool_config, SLACK_REACTION_DEFAULTS, SLACK_REACTION_CONFIG_KEYS, reactionName, init_reaction_shortcode, API_DRAINING_HEADER, API_DRAIN_MAX_MS_LIMIT, isApiDrainingResponse, init_api_drain, parseEnabledTools, init_enabled_tools, parseTaskToolManifest, selectTaskTools, init_task_tool_manifest, tierConfigKey, init_model_tier_keys, isInternalConfigKey, internalConfigKeyError, isReservedConfigKey, reservedKeyError, MAX_DB_RETENTION_DAYS, DB_RETENTION_TUNING_BOUNDS, validateRuntimeTokenTtlHours, validateControllerTokenTtlDays, validateControllerGraceSec, validateConfigValue, init_swarm_config_guard, getDefaultAuthorizationIdForProvider, getOAuthApp, getOAuthAppById, getOAuthAppIdByProvider, createOAuthApp, updateOAuthAppById, upsertOAuthApp, listAuthorizationsForApp, getAuthorizationById, upsertAuthorization, updateAuthorizationTokens, updateAuthorizationIdentity, deleteAuthorizationById, deleteAuthorizationsForApp, createOAuthPending, consumeOAuthPending, gcOAuthPending, markAuthorizationRefreshFailed, getOAuthTokens, listAuthorizationSweepRows, listKeepAliveAuthorizations, deleteOAuthTokens, acquireOAuthRefreshLock, releaseOAuthRefreshLock, init_oauth, OpenAI, init_openai, CANDIDATE_SET_MULTIPLIER, isGraphExpansionEnabled, EMBEDDING_DIMENSIONS, init_constants, LONGTERM_ROOT, MEMORY_KEY_PATTERN, MEMORY_KEY_PATTERN_MESSAGE, MEMORY_KEY_MAX_LENGTH, isLongtermKey, longtermKeyError, isConsolidatedKey, consolidatedKeyMessage, resolveStoreKey, init_key_paths, computeScore, rerank, init_reranker, rowToCandidate, init_sqlite_store, getEmbeddingProvider, resetEmbeddingProvider, getMemoryStore, init_memory, embeddingProvider, embedScript, searchScripts, reembedAllScripts, init_embeddings2 as init_embeddings, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, touchScratchScriptLastUsed, restoreScratchScriptLastUsedIfUnchanged, createScriptApi, listScriptApisForScript, getScriptApiById, getScriptApiSecret, updateScriptApi, rotateScriptApiSecret, deleteScriptApi, recordScriptApiUsage, init_db, oauthSecretName, registerStoredSecret, loadSecretRegistry, init_secret_registry, SteeringRequestError, isSteeringEnabled2 as isSteeringEnabled, getTaskSteeringFields, getTaskSteeringFieldsForTasks, promotePendingSteeringForTask, markSteeringUndeliverable, requestSteering, init_steering, WorkflowReplayStateError, init_workflow_replay, SESSION_ACTIVITY_REFRESH_MIN_INTERVAL_MS, refreshActiveSessionOnActivity, recordKeySeatMismatch, getScriptRunExecutionArgs, getSlackRenderV2ActivatedAt, ensureSlackRenderV2Activation, getSlackDelegationActivatedAt, ensureSlackDelegationActivation, isPendingSlackMessage, isSettledSlackMessage, recordSlackMessage, reserveSlackMessage, bindSlackMessageTimestamp, updateSlackMessageRecord, markSlackTreeRendered, deleteSlackMessageRecord, getSlackTreeMessage, getSlackTreeMessageByThread, getSlackOutcomeMessage, getResolvableDeferralOutcomes, markSlackDeferralResolved, noteSlackOutcomeDeliveryFailure, abandonSlackOutcomeDelivery, getSlackTreeMessages, getSlackMessageByChannelTs, getSlackTasksInThread, listSlackThreadsAwaitingHuman, isSlackThreadAwaitingHuman, markTaskSlackReplySent, setSlackMessageTracking, updateTaskVcs, insertTaskAttachment, recordTaskPullRequestAttachments, getAssetKeyMappingByProvider, upsertAssetKeyMapping, getAssetKeyMapping, listAssetSummaries, moveAssetKey, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, createSteeringMessage, getSteeringMessagesForTask, getSteeringMessageById, getPendingSteeringForTask, getPendingSteeringForAgent, markSteeringDelivered, markSteeringHandled, markSteeringPromoted, cancelPendingSteeringForTask, hasPendingSteering, getAgentWithTasks, getAllAgentsWithTasks, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdAndEventType, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, promoteDraftTask, refreshDraftTaskLease, promoteAbandonedDraftTasks, releaseStaleReviewingTasks, releaseStaleOfferedTasksForOfflineAgents, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, getUnassignedTaskIdsForAgent, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, UNATTRIBUTED_USER_ID, getSessionCostSummary, getAttributionByPerson, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, emitBuiltInIntegrationConnectedOnce, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getStaleUnassignedAffinityTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, countWorkflowRuns, listWorkflowRunsPage, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, detachTaskFromWorkflowRunStep, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, getCurrentStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createAppVersion, getAppVersions, getAppVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, cancelApprovalRequestById, cancelPendingApprovalRequestsForRun, listCancelledApprovalRequestsForRun, listCancelledApprovalRequestsForStep, claimApprovalCancellationNotification, completeApprovalCancellationNotificationClaim, releaseApprovalCancellationNotificationClaim, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, getStaleApprovalRequests, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, emitMcpServerConnectedTelemetry, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, setApiKeyPlan, markKeyRateLimited, recordKeyAuthFailure, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listFavorites, listUserFavorites, getFavoriteItemIdSet, setFavorite, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getReadyAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, sweepExpiredKv, sweepExpiredKvPrefix, upsertKv, claimKv, deleteKv, KvTypeCollisionError, incrKv, kvPrefixUpperBound, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, updateScriptRunIfNotTerminal, updateScriptRunIfRunning, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db2 as init_db1 };
+export { slackContextKey, chatSdkContextKey, chatThreadOfContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, azureDevOpsContextKey, azureDevOpsWorkItemContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, init_catalog, catalog_default, mapTriggerSurface, init_telemetry_context, TELEMETRY_PROXY_ORIGIN, normalizeOrgWebsite, orgLogoUrl, isFilledOrgLogoUrl, init_org_website, beginRequestAuthScope, setRequestAuth, getRequestAuth, getCurrentRequestAuth, runWithoutRequestAuth, getCurrentRequestUserId, init_request_auth_context, setTelemetryIngestObserver, isTelemetryEnabled, _resolveIntegrationType, _resolveIntegrationProvider, initTelemetry, setTelemetryRoleResolver, isTelemetryReady, track, trackRelayed, telemetry, emitIntegrationConnected, init_telemetry, auditAssetKeys, init_asset_key_audit, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, init_credential_broker, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, isInTransaction, init_db_client, breaksJsonValidity, scrubJsonValue, init_scrub_json, sealJson, init_sealed_json, getPromptTemplateDefaultDrift, init_default_drift, init_templates2 as init_templates, init_templates3 as init_templates1, isSqliteVecAvailable, resolveSqliteVecExtensionPath, __resetSqliteVecExtensionPathCacheForTests, initDb, getDb, closeDb, getDbClient, init_runtime, cachedUserRole, configureOrgDomainPersistence, recomputeOrgDomain, scheduleOrgDomainRecompute, init_telemetry_identity, resolveTriggerSurface, emitTaskTelemetry, init_telemetry_trigger, CODEX_AUTH_WATCH_NAMESPACE, codexAuthBenchMarkerKey, isCodexAuthFailureReason, init_codex_auth_failure, isEnvExportRestrictedKey, init_config_env_export, MASKED_SECRET_VALUE, init_config_secrets, HeartbeatExpiryError, init_heartbeat_expiry, isRuntimePoolsEnabled, init_runtime_pools_flag, normalizeDate, normalizeDateRequired, init_date_utils, rowToAgent, updateAgentCredentialState, updateAgentCredentialMissing, createAgent, getAgentById, EXTENSION_AGENT_ROLE, NOT_EXTENSION_AGENT_SQL, isExtensionAgent, extensionAgentAssignmentError, ReservedAgentRoleError, reservedRoleViolation, ExtensionAgentAssignmentError, getAllAgents, getAgentStatusCounts, getLeadAgent, updateAgentStatus, updateAgentMaxTasks, updateAgentProvider, setAgentHarnessProvider, updateAgentCredStatus, listAgentsWithCredStatusByProvider, getAgentHarnessProviders, updateAgentActivity, MAX_EMPTY_POLLS, incrementEmptyPollCount, resetEmptyPollCount, shouldBlockPolling, deleteAgent, getActiveTaskCount, hasCapacity, getRemainingCapacity, updateAgentStatusFromCapacity, isPoolAffinityEnforcementEnabled, buildRoutingAffinityFromAgent, isAgentEligibleForTask, getAgentDailyTaskCounts, init_agents, listApprovalRequestSummaries, getPendingApprovalVoteState, recordApprovalVotes, computeContentHash, createContextVersion, getLatestContextVersion, getContextVersion, getContextVersionHistory, vcsRepoName, vcsRepoUrlMatches, init_vcs_repo_match, rowToAgentTask, getTaskById, getChildTasks, hasNonTerminalResumeChild, SUPERSEDED_RESUME_REPAIR_WINDOW_MS, getSupersededTasksWithoutResume, getSupersededTasksWithUnsettledDependents, hasNonTerminalRerouteDecisionChild, getTasksByAgentId, getAgentCurrentTask, getTasksByStatus, findTaskByVcs, findTaskByGitHub, getAllTasks, getTasksCount, getTaskStats, getCompletedSlackTasks, getPendingSlackRelayTasks, markSlackRelayAttempted, markSlackRelayDelivered, markFinalizedSlackRelaysDelivered, getPendingChatRelayTasks, giveUpStaleChatRelays, markChatRelayAttempted, recordChatRelayError, markChatRelayDelivered, markChatRelayGivenUp, getRecentlyFinishedWorkerTasks, markTasksNotified, resetTasksNotified, getInProgressSlackTasks, getSlackTasksMissingTree, getInProgressTasksByContextKey, isLinearTrackerContextKey, findExistingLinearTrackerContextWork, getLatestTaskByContextKey, getLatestScriptRunStepTaskByContextKey, getAgentWorkingOnThread, getLatestActiveTaskInThread, getLatestLeadTaskInThread, getAgentWorkingOnContextKey, getLatestActiveTaskByContextKey, getLatestLeadTaskByContextKey, getMostRecentTaskInThread, findCompletedTaskInThread, findRecentCancelledTaskInThread, init_read, MODEL_PROFILE_CONFIG_KEY, listModelProfiles, getModelProfileByName, createModelProfile, updateModelProfile, modelProfileReferences, modelProfileRefError, deleteModelProfile, getAgentDefaultProfileName, repoModelOverrideKeys, taskProfileError, init_model_profiles, setHumanFreeQueueListener, drainHumanFreeReclassifyQueue, init_human_free, onTaskStarted, init_task_lifecycle_events, channelTopic, addWorkerSubscription, removeWorkerSubscription, listSubscribedWorkerAgents, init_channels, publishWorkerNudge, init_worker_nudges, createTask, getPendingTaskForAgent, assignUnassignedTaskPending, startTask, updateTaskClaudeSessionId, recordTaskProviderIfUnset, updateTaskTitle, completeTask, failTask, overwriteTerminalTaskResultText, cancelTask, supersedeTask, settleSupersededTaskDependents, backfillSupersedeTaskResumeTaskId, pauseTask, resumeTask, getPausedTasksForAgent, getOrphanedInProgressTasksForAgent, resetOrphanedInProgressTasksForAgent, getRecentlyCancelledTasksForAgent, deleteTask, updateTaskProgress, getChildWorkflowRunId, getWorkflowRunParent, getWorkflowRunLineage, getSettledChildRunParentSteps, init_workflow_runs, CHAT_SDK_ADAPTER_NAMES, CHAT_SDK_ADAPTER_SCHEMAS, ChatSdkAdaptersDraftSchema, firstIssueText, isAdapterEntryEnabled, init_schema, resolveQuickJSPoolSize, init_quickjs_pool_config, SLACK_REACTION_DEFAULTS, SLACK_REACTION_CONFIG_KEYS, reactionName, completedStatusIcon, init_reaction_shortcode, API_DRAINING_HEADER, API_DRAIN_MAX_MS_LIMIT, isApiDrainingResponse, init_api_drain, parseEnabledTools, init_enabled_tools, parseTaskToolManifest, CHAT_TASK_ONLY_TOOLS, isChatSdkTask, selectTaskTools, init_task_tool_manifest, tierConfigKey, init_model_tier_keys, isApiOnlyConfigKey, isInternalConfigKey, internalConfigKeyError, isReservedConfigKey, reservedKeyError, MAX_DB_RETENTION_DAYS, DB_RETENTION_TUNING_BOUNDS, validateRuntimeTokenTtlHours, validateControllerTokenTtlDays, validateControllerGraceSec, validateConfigValue, validateExportToEnv, init_swarm_config_guard, getDefaultAuthorizationIdForProvider, getOAuthApp, getOAuthAppById, getOAuthAppIdByProvider, createOAuthApp, updateOAuthAppById, upsertOAuthApp, listAuthorizationsForApp, getAuthorizationById, upsertAuthorization, updateAuthorizationTokens, updateAuthorizationIdentity, deleteAuthorizationById, deleteAuthorizationsForApp, createOAuthPending, consumeOAuthPending, gcOAuthPending, markAuthorizationRefreshFailed, getOAuthTokens, listAuthorizationSweepRows, listKeepAliveAuthorizations, deleteOAuthTokens, acquireOAuthRefreshLock, releaseOAuthRefreshLock, init_oauth, OpenAI, init_openai, CANDIDATE_SET_MULTIPLIER, isGraphExpansionEnabled, EMBEDDING_DIMENSIONS, init_constants, LONGTERM_ROOT, MEMORY_KEY_PATTERN, MEMORY_KEY_PATTERN_MESSAGE, MEMORY_KEY_MAX_LENGTH, isLongtermKey, longtermKeyError, isConsolidatedKey, consolidatedKeyMessage, resolveStoreKey, init_key_paths, computeScore, rerank, init_reranker, rowToCandidate, init_sqlite_store, getEmbeddingProvider, resetEmbeddingProvider, getMemoryStore, init_memory, embeddingProvider, embedScript, searchScripts, reembedAllScripts, init_embeddings2 as init_embeddings, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, touchScratchScriptLastUsed, restoreScratchScriptLastUsedIfUnchanged, createScriptApi, listScriptApisForScript, getScriptApiById, getScriptApiSecret, updateScriptApi, rotateScriptApiSecret, deleteScriptApi, recordScriptApiUsage, init_db, oauthSecretName, registerStoredSecret, loadSecretRegistry, init_secret_registry, SteeringRequestError, isSteeringEnabled2 as isSteeringEnabled, getTaskSteeringFields, getTaskSteeringFieldsForTasks, promotePendingSteeringForTask, markSteeringUndeliverable, requestSteering, init_steering, WorkflowReplayStateError, init_workflow_replay, SESSION_ACTIVITY_REFRESH_MIN_INTERVAL_MS, refreshActiveSessionOnActivity, recordKeySeatMismatch, getScriptRunExecutionArgs, getSlackRenderV2ActivatedAt, ensureSlackRenderV2Activation, getSlackDelegationActivatedAt, ensureSlackDelegationActivation, isPendingSlackMessage, isSettledSlackMessage, recordSlackMessage, reserveSlackMessage, bindSlackMessageTimestamp, updateSlackMessageRecord, markSlackTreeRendered, deleteSlackMessageRecord, getSlackTreeMessage, getSlackTreeMessageByThread, getSlackOutcomeMessage, getResolvableDeferralOutcomes, markSlackDeferralResolved, noteSlackOutcomeDeliveryFailure, abandonSlackOutcomeDelivery, getSlackTreeMessages, getSlackMessageByChannelTs, getSlackTasksInThread, listSlackThreadsAwaitingHuman, isSlackThreadAwaitingHuman, markTaskSlackReplySent, setSlackMessageTracking, updateTaskVcs, insertTaskAttachment, recordTaskPullRequestAttachments, getAssetKeyMappingByProvider, upsertAssetKeyMapping, getAssetKeyMapping, listAssetSummaries, moveAssetKey, deleteTaskAttachment, replaceTaskAttachment, getTaskAttachments, createSteeringMessage, getSteeringMessagesForTask, getSteeringMessageById, getPendingSteeringForTask, getPendingSteeringForAgent, markSteeringDelivered, markSteeringHandled, markSteeringPromoted, cancelPendingSteeringForTask, hasPendingSteering, getAgentWithTasks, getAllAgentsWithTasks, createLogEntry, getLogsByAgentId, getLogsByTaskId, getLogsByTaskIdAndEventType, getLogsByTaskIdChronological, getLogsByEventType, getAllLogs, findRecentSimilarTasks, createTaskExtended, claimTask, releaseTask, acceptTask, rejectTask, moveTaskToBacklog, moveTaskFromBacklog, promoteDraftTask, refreshDraftTaskLease, promoteAbandonedDraftTasks, releaseStaleReviewingTasks, releaseStaleOfferedTasksForOfflineAgents, getOfferedTasksForAgent, claimOfferedTask, getUnassignedTasksCount, getUnassignedTaskIds, getUnassignedTaskIdsForAgent, checkDependencies, getDependentTasks, cascadeFailDependents, updateAgentProfile, updateAgentName, createChannel, getMessageById, getChannelById, getChannelByName, getAllChannels, deleteChannel, postMessage, getChannelMessages, updateReadState, getLastReadAt, getUnreadMessages, getMentionsForAgent, getInboxSummary, claimMentions, releaseMentionProcessing, releaseStaleMentionProcessing, createService, getServiceById, getServiceByAgentAndName, getServicesByAgentId, getAllServices, updateServiceStatus, deleteService, upsertService, deleteServicesByAgentId, createSessionLogs, getSessionLogsByTaskId, getSessionLogsBySession, createSessionCost, getSessionCostsByTaskId, getSessionCostsByAgentId, getAllSessionCosts, getSessionCostsFiltered, UNATTRIBUTED_USER_ID, getSessionCostSummary, getAttributionByPerson, getDashboardCostSummary, createInboxMessage, getInboxMessageById, getUnreadInboxMessages, claimInboxMessages, markInboxMessageRead, markInboxMessageResponded, markInboxMessageDelegated, releaseStaleProcessingInbox, getConcurrentContext, getScheduledTasks, getScheduledTaskById, getScheduledTaskByName, createScheduledTask, updateScheduledTask, deleteScheduledTask, getDueScheduledTasks, autoEncryptLegacyPlaintextSecrets, maskSecrets, getSwarmConfigs, getInjectableGlobalConfigs, getSwarmConfigById, getSwarmConfigLookupById, upsertSwarmConfig, emitBuiltInIntegrationConnectedOnce, deleteSwarmConfig, deleteSwarmConfigByKey, getResolvedConfig, getSwarmRepos, getSwarmRepoById, getSwarmRepoByName, getSwarmRepoByUrl, createSwarmRepo, updateSwarmRepo, deleteSwarmRepo, getAgentMailInboxMapping, getAgentMailInboxMappingsByAgent, getAllAgentMailInboxMappings, createAgentMailInboxMapping, deleteAgentMailInboxMapping, findTaskByAgentMailThread, insertActiveSession, deleteActiveSession, deleteActiveSessionById, getActiveSessions, heartbeatActiveSession, cleanupStaleSessions, cleanupAgentSessions, updateActiveSessionProviderSessionId, getActiveSessionForTask, reassociateSessionLogs, getStalledInProgressTasks, getStalePinnedResumes, failPendingResumeIfUnclaimed, getIdleWorkersWithCapacity, getUnassignedPoolTasks, getStaleUnassignedAffinityTasks, getRecentFailedTasks, getRecentCompletedCount, getRecentFailedCount, createWorkflow, getWorkflow, listWorkflows, updateWorkflow, deleteWorkflow, getWorkflowsByScheduleId, createWorkflowRun, getWorkflowRun, updateWorkflowRun, listWorkflowRuns, countWorkflowRuns, listWorkflowRunsPage, createWorkflowRunStep, getWorkflowRunStep, updateWorkflowRunStep, getWorkflowRunStepsByRunId, getStuckWorkflowRuns, getLastSuccessfulRun, getLastRunStart, getRetryableSteps, getCompletedStepNodeIds, getTaskByWorkflowRunStepId, detachTaskFromWorkflowRunStep, getStepByIdempotencyKey, getStepCountForNode, getLatestStepForNode, getCurrentStepForNode, createWorkflowVersion, getWorkflowVersions, getWorkflowVersion, createAppVersion, getAppVersions, getAppVersion, createPage, getPage, getPageBySlug, getLatestPageBySlug, listPagesByAgent, listAllPages, countAllPages, countPagesByAgent, updatePage, deletePage, incrementPageViewCount, createPageVersion, getPageVersions, getPageVersion, createMetric, getMetric, getMetricBySlug, listMetricsByAgent, listAllMetrics, countAllMetrics, countMetricsByAgent, updateMetric, deleteMetric, createMetricVersion, getMetricVersions, getMetricVersion, getPromptTemplates, getPromptTemplateById, upsertPromptTemplate, deletePromptTemplate, resetPromptTemplateToDefault, getPromptTemplateHistory, resolvePromptTemplate, checkoutPromptTemplate, getAllChannelActivityCursors, getChannelActivityCursor, upsertChannelActivityCursor, createApprovalRequest, getApprovalRequestById, resolveApprovalRequest, cancelApprovalRequestById, cancelPendingApprovalRequestsForRun, listCancelledApprovalRequestsForRun, listCancelledApprovalRequestsForStep, claimApprovalCancellationNotification, completeApprovalCancellationNotificationClaim, releaseApprovalCancellationNotificationClaim, updateApprovalRequestNotifications, listApprovalRequests, getStuckApprovalRuns, getApprovalRequestByStepId, getExpiredPendingApprovals, getStaleApprovalRequests, createWaitState, getWaitStateById, getWaitStateByStepId, getDueWaitStates, getPendingEventWaitNames, getPendingWaitsByEvent, resolveWaitState, getStuckWaitRuns, SKILL_FILE_LIMITS, normalizeSkillFilePath, createSkill, updateSkill, listSkillFileManifest, getSkillFiles, getSkillFile, upsertSkillFile, upsertSkillFiles, deleteSkillFile, deleteSkill, getSkillById, getSkillByName, listSkills, searchSkills, installSkill, getSystemDefaultSkills, installSystemDefaultSkillsForAgent, uninstallSkill, getAgentSkills, toggleAgentSkill, createMcpServer, emitMcpServerConnectedTelemetry, updateMcpServer, deleteMcpServer, getMcpServerById, getMcpServerByName, listMcpServers, installMcpServer, uninstallMcpServer, getAgentMcpServers, createContextSnapshot, getContextSnapshotsByTaskId, getContextSnapshotsBySessionId, getContextSummaryByTaskId, getAvailableKeyIndices, recordKeyUsage, setApiKeyPlan, markKeyRateLimited, recordKeyAuthFailure, recordKeyRateLimitWindows, setApiKeyName, clearKeyRateLimit, getKeyStatuses, getKeyCostSummary, getUserById, getAllUsers, createUser, updateUser, deleteUser, listInboxState, upsertInboxState, listFavorites, listUserFavorites, getFavoriteItemIdSet, setFavorite, setUserFavorite, withFavoriteFlags, listTaskTemplates, getRootTaskChain, listRecentSessions, countSessions, getBudget, getBudgets, upsertBudget, deleteBudget, getAllPricingRows, getPricingRows, getActivePricingRow, insertPricingRow, deletePricingRow, getDailySpendForAgent, getDailySpendGlobal, getDailySpendForUser, recordBudgetRefusalNotification, getBudgetRefusalNotification, getRecentBudgetRefusalNotifications, hasBudgetRefusalNotificationToday, setBudgetRefusalFollowUpTaskId, getLiveAgentCounts, getReadyAgentCounts, getInstanceActivity, getSwarmMetrics, hasFirstCompletedTask, getKv, sweepExpiredKv, sweepExpiredKvPrefix, upsertKv, claimKv, deleteKv, KvTypeCollisionError, incrKv, kvPrefixUpperBound, listKv, countKv, createScriptRun, recordInlineScriptRun, getScriptRun, getScriptRunByIdempotencyKey, listScriptRuns, countScriptRuns, countActiveScriptRuns, updateScriptRun, updateScriptRunIfNotTerminal, updateScriptRunIfRunning, getRunningScriptRuns, getScriptRunJournalStep, upsertScriptRunJournalStep, listScriptRunJournalSteps, countScriptRunJournalSteps, countScriptRunJournalAgentTaskSteps, exports_db, init_db2 as init_db1 };