@desplega.ai/agent-swarm 2.2.0 → 2.4.0

package/dist/{cli-4c7k75rq.js → cli-rg7ntypm.js}

@@ -22,7 +22,7 @@ import {
   VersionableFieldSchema,
   SessionCostModelBreakdownSchema,
   init_types
-} from "./cli-ksrphveb.js";
+} from "./cli-a1esmmee.js";
 import {
   generateDefaultClaudeMd2,
   generateDefaultSoulMd2,
@@ -36,7 +36,7 @@ import {
   init_identity_field_budget,
   contentSha256,
   init_profile_sync
-} from "./cli-cby329ny.js";
+} from "./cli-wyrr38xm.js";
 import {
   isSlackConfigured,
   init_config
@@ -51,7 +51,7 @@ import {
 } from "./cli-yxqag76b.js";
 import {
   init_templates3
-} from "./cli-4ync7m60.js";
+} from "./cli-0ebey9hg.js";
 import {
   registerTemplate,
   getAllTemplateDefinitions,
@@ -59,7 +59,7 @@ import {
   configureDbResolver,
   init_resolver,
   init_session_templates
-} from "./cli-w7z94e6c.js";
+} from "./cli-tx00c0h6.js";
 import {
   activeModelBlock,
   init_model_rate_limit_windows
@@ -82,8 +82,10 @@ import {
   init_zod
 } from "./cli-4chz1hye.js";
 import {
+  exports_iso,
   string2,
   uuid,
+  url,
   number2,
   boolean,
   array2,
@@ -91,8 +93,10 @@ import {
   strictObject2,
   looseObject,
   union2,
+  discriminatedUnion,
   record2,
-  _enum2
+  _enum2,
+  literal2
 } from "./cli-d9f7gzeq.js";
 import {
   getNodeEnv,
@@ -101,7 +105,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-2jm992rm.js";
+} from "./cli-mz1ezzzh.js";
 import {
   realtimeBus,
   init_bus
@@ -1865,6 +1869,75 @@ var init_catalog = __esm(() => {
           }
         }
       },
+      {
+        product: "agent-swarm",
+        event: "ranking.opted_in",
+        description: "An admin opted the install into the public ranking, or the API rebuilt its listing after an org identity change.",
+        since: "2026-10-18",
+        source: "api-server",
+        properties: {
+          listing: {
+            type: "string",
+            required: true,
+            description: "The stringified telemetry_ranking listing (contracts/telemetry/ranking/listing.v1.schema.json). The ingest also requires its name and domain to equal context.org_name and context.org_website."
+          }
+        }
+      },
+      {
+        product: "agent-swarm",
+        event: "ranking.opted_out",
+        description: "The install left the public ranking: the admin turned it off, or the org name or website was cleared or changed.",
+        since: "2026-10-18",
+        source: "api-server",
+        properties: {
+          domain: {
+            type: "string",
+            required: true,
+            description: "The listing domain that leaves the ranking: a lowercase hostname."
+          }
+        }
+      },
+      {
+        product: "agent-swarm",
+        event: "ranking.usage",
+        description: "Token usage of one session on an install opted into the public ranking. Sent next to session.cost.",
+        since: "2026-10-18",
+        source: "worker",
+        properties: {
+          totalTokens: {
+            type: "integer",
+            required: true,
+            minimum: 0,
+            description: "inputTokens + cacheReadTokens + cacheWriteTokens + outputTokens. The ranking sums this."
+          },
+          inputTokens: {
+            type: "integer",
+            required: true,
+            minimum: 0
+          },
+          outputTokens: {
+            type: "integer",
+            required: true,
+            minimum: 0
+          },
+          cacheReadTokens: {
+            type: "integer",
+            minimum: 0
+          },
+          cacheWriteTokens: {
+            type: "integer",
+            minimum: 0
+          },
+          model: {
+            type: "string",
+            description: "The session's model, the same value as session.cost.model. Usage without it, or with a value the ranking does not accept, is shown as the model unknown."
+          },
+          provider: {
+            type: "string",
+            description: "The session's provider, the same value as session.cost.provider. Missing means unknown."
+          }
+        }
+      },
       {
         product: "agent-fs",
         event: "server.started",
@@ -2385,7 +2458,7 @@ function track(options) {
 function trackRelayed(event, properties, options) {
   emit(event, properties, undefined, options.actor, options.emitter);
 }
-function emit(event, properties, metadata, actor, emitter = source) {
+function emit(event, properties, metadata, actor, emitter = source, identity) {
   if (!isTelemetryEnabled() || !installationId)
     return;
   maybeRefreshOrgIdentity();
@@ -2396,7 +2469,7 @@ function emit(event, properties, metadata, actor, emitter = source) {
     const occurredAt = new Date().toISOString();
     const sentFor = installationId;
     const isCloud = cachedIsCloud || isCloudDeployment();
-    const orgIdentity = getOrgIdentity();
+    const orgIdentity = identity ? { ...getOrgIdentity(), organization_name: identity.orgName } : getOrgIdentity();
     const userId = actor?.userId?.trim() || undefined;
     const payload = {
       schema_version: 2,
@@ -2410,7 +2483,7 @@ function emit(event, properties, metadata, actor, emitter = source) {
         orgId,
         orgName: orgIdentity.organization_name,
         orgDomain: cachedOrgDomain,
-        orgWebsite: normalizeOrgWebsite(process.env.SWARM_ORG_WEBSITE),
+        orgWebsite: identity?.orgWebsite ?? normalizeOrgWebsite(process.env.SWARM_ORG_WEBSITE),
         installationId,
         actor: userId ? { userId, role: actor?.role ?? roleResolver?.(userId) ?? null } : undefined,
         isCloud,
@@ -2559,6 +2632,9 @@ var init_telemetry = __esm(() => {
         ...secondsSinceInstall !== undefined ? { seconds_since_install: secondsSinceInstall } : {}
       }, undefined, actor);
     },
+    ranking(event, props, identity) {
+      emit(`ranking.${event}`, props, undefined, undefined, source, identity);
+    },
     org(event, props) {
       emit(`org.${event}`, props, undefined);
     },
@@ -2625,9 +2701,7 @@ function auditAssetKeys(db) {
   }
   const attachmentMappings = db.prepare(`SELECT
          a.id AS attachment_id,
-         t."key" AS task_key,
-         m.id AS mapping_id,
-         m."key" AS mapping_key
+         m.id AS mapping_id
        FROM task_attachments a
        JOIN agent_tasks t ON t.id = a.task_id
        LEFT JOIN asset_key_mappings m
@@ -2646,14 +2720,6 @@ function auditAssetKeys(db) {
         entityId: row.attachment_id,
         message: "Agent-fs attachment has no logical namespace mapping."
       });
-    } else if (row.mapping_key !== row.task_key) {
-      issues.push({
-        severity: "warning",
-        code: "provider-mapping-drift",
-        entityType: "file",
-        entityId: row.mapping_id,
-        message: "Provider mapping namespace differs from its parent task namespace."
-      });
     }
   }
   const sourcedMappings = db.prepare(`SELECT
@@ -4486,7 +4552,7 @@ var init_runtime = __esm(() => {
 // src/telemetry-identity.ts
 async function loadUserRole(userId) {
   try {
-    const { getUserGrant } = await import("./rbac-roles-9648nh00.js");
+    const { getUserGrant } = await import("./rbac-roles-vbpy21mg.js");
     const grant = await getUserGrant(userId);
     const role = grant.grantsAll ? "admin" : "member";
     if (roleCache.size >= ROLE_CACHE_LIMIT) {
@@ -5534,8 +5600,9 @@ async function hasNonTerminalRerouteDecisionChild2(parentId) {
        LIMIT 1`, [parentId]);
   return row !== undefined && row !== null;
 }
-async function getTasksByAgentId2(agentId) {
-  const rows = await getDbClient2().query("SELECT * FROM agent_tasks WHERE agentId = ? ORDER BY createdAt DESC", [agentId]);
+async function getTasksByAgentId2(agentId, readableBy) {
+  const readable = readableBy ? readableSessionCondition(readableBy.userId) : undefined;
+  const rows = await getDbClient2().query(`SELECT * FROM agent_tasks WHERE agentId = ?${readable ? ` AND ${readable.sql}` : ""} ORDER BY createdAt DESC`, [agentId, ...readable?.params ?? []]);
   return rows.map(rowToAgentTask);
 }
 async function getAgentCurrentTask2(agentId) {
@@ -5554,6 +5621,27 @@ async function findTaskByVcs2(vcsRepo, vcsNumber) {
        LIMIT 1`, [vcsRepo, vcsNumber]);
   return row ? rowToAgentTask(row) : null;
 }
+function readableSessionCondition(userId, taskIdColumn = "agent_tasks.id", opts = {}) {
+  const otherOwner = userId ? "r.requestedByUserId IS NOT NULL AND r.requestedByUserId != ?" : "r.requestedByUserId IS NOT NULL";
+  const shareMatch = userId ? "(s.userId IS NULL OR s.userId = ?)" : "s.userId IS NULL";
+  const notHidden = `${taskIdColumn} NOT IN (
+      WITH RECURSIVE hidden(id) AS (
+        SELECT r.id FROM agent_tasks r
+        WHERE (r.parentTaskId IS NULL
+            OR NOT EXISTS (SELECT 1 FROM agent_tasks p WHERE p.id = r.parentTaskId))
+          AND ${otherOwner}
+          AND NOT EXISTS (SELECT 1 FROM session_shares s
+            WHERE s.rootTaskId = r.id AND s.revokedAt IS NULL AND ${shareMatch})
+        UNION ALL
+        SELECT c.id FROM agent_tasks c JOIN hidden ON c.parentTaskId = hidden.id
+      )
+      SELECT id FROM hidden
+    )`;
+  return {
+    sql: opts.nullable ? `(${taskIdColumn} IS NULL OR ${notHidden})` : notHidden,
+    params: userId ? [userId, userId] : []
+  };
+}
 async function getAllTasks2(filters, opts) {
   const conditions = [];
   const params = [];
@@ -5633,6 +5721,11 @@ async function getAllTasks2(filters, opts) {
   if (!filters?.includeHeartbeat) {
     conditions.push(`(IFNULL(taskType, '') NOT IN ('heartbeat', 'heartbeat-checklist', 'boot-triage') AND tags NOT LIKE '%"heartbeat"%')`);
   }
+  if (filters?.readableBy) {
+    const readable = readableSessionCondition(filters.readableBy.userId);
+    conditions.push(readable.sql);
+    params.push(...readable.params);
+  }
   const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
   const limit = filters?.limit ?? 25;
   const offset = filters?.offset ?? 0;
@@ -5750,6 +5843,11 @@ async function getTasksCount2(filters) {
   if (!filters?.includeHeartbeat) {
     conditions.push(`(IFNULL(taskType, '') NOT IN ('heartbeat', 'heartbeat-checklist', 'boot-triage') AND tags NOT LIKE '%"heartbeat"%')`);
   }
+  if (filters?.readableBy) {
+    const readable = readableSessionCondition(filters.readableBy.userId);
+    conditions.push(readable.sql);
+    params.push(...readable.params);
+  }
   const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
   const query = `SELECT COUNT(*) as count FROM agent_tasks ${whereClause}`;
   const result = await getDbClient2().get(query, params);
@@ -6339,6 +6437,26 @@ var init_model_profiles = __esm(() => {
   init_read();
 });
 
+// src/be/db/session-visibility.ts
+function sessionViewerCondition(viewer) {
+  const shared = `EXISTS (SELECT 1 FROM session_shares s
+      WHERE s.rootTaskId = r.id AND s.revokedAt IS NULL AND (s.userId IS NULL OR s.userId = ?))`;
+  if (viewer.scope === "mine") {
+    return { sql: "r.requestedByUserId = ?", params: [viewer.userId] };
+  }
+  if (viewer.scope === "shared") {
+    return {
+      sql: `(r.requestedByUserId IS NOT NULL AND r.requestedByUserId IS NOT ? AND ${shared})`,
+      params: [viewer.userId, viewer.userId]
+    };
+  }
+  return {
+    sql: `(r.requestedByUserId IS NULL OR r.requestedByUserId = ? OR ${shared})`,
+    params: [viewer.userId, viewer.userId]
+  };
+}
+var init_session_visibility = () => {};
+
 // src/be/db/tasks/human-free.ts
 function humanFreeCase(parentFlag) {
   return `CASE
@@ -7178,10 +7296,11 @@ async function resumeTask2(taskId) {
   }
   return row ? rowToAgentTask(row) : null;
 }
-async function getPausedTasksForAgent2(agentId) {
+async function getPausedTasksForAgent2(agentId, readableBy) {
+  const readable = readableBy ? readableSessionCondition(readableBy.userId) : undefined;
   const rows = await getDbClient2().query(`SELECT * FROM agent_tasks
-       WHERE agentId = ? AND status = 'paused'
-       ORDER BY createdAt ASC, rowid ASC`, [agentId]);
+       WHERE agentId = ? AND status = 'paused'${readable ? ` AND ${readable.sql}` : ""}
+       ORDER BY createdAt ASC, rowid ASC`, [agentId, ...readable?.params ?? []]);
   return rows.map(rowToAgentTask);
 }
 async function getOrphanedInProgressTasksForAgent2(agentId, minAgeSeconds = 60) {
@@ -7227,13 +7346,14 @@ async function resetOrphanedInProgressTasksForAgent2(agentId, minAgeSeconds = 60
   }
   return rows.map(rowToAgentTask);
 }
-async function getRecentlyCancelledTasksForAgent2(agentId) {
+async function getRecentlyCancelledTasksForAgent2(agentId, readableBy) {
   const fiveMinutesAgo = new Date(Date.now() - 5 * 60 * 1000).toISOString();
+  const readable = readableBy ? readableSessionCondition(readableBy.userId) : undefined;
   const rows = await getDbClient2().query(`SELECT * FROM agent_tasks
        WHERE agentId = ?
        AND status = 'cancelled'
-       AND finishedAt > ?
-       ORDER BY finishedAt DESC`, [agentId, fiveMinutesAgo]);
+       AND finishedAt > ?${readable ? ` AND ${readable.sql}` : ""}
+       ORDER BY finishedAt DESC`, [agentId, fiveMinutesAgo, ...readable?.params ?? []]);
   return rows.map(rowToAgentTask);
 }
 async function deleteTask2(id) {
@@ -7506,6 +7626,108 @@ var init_schema = __esm(() => {
   };
 });
 
+// src/telemetry-contract/ranking-taxonomy.gen.ts
+var RANKING_TAXONOMY;
+var init_ranking_taxonomy_gen = __esm(() => {
+  RANKING_TAXONOMY = {
+    engineering: ["coding-agents", "qa-testing", "devops", "code-review"],
+    product: ["research", "design", "analytics"],
+    marketing: ["content", "seo", "social"],
+    support: ["customer-support", "docs"],
+    operations: ["back-office", "sales-ops", "finance"],
+    other: []
+  };
+});
+
+// src/ranking/telemetry-ranking.ts
+function inCategory(category, subcategory) {
+  if (subcategory === null)
+    return true;
+  const subs = RANKING_TAXONOMY[category];
+  return subs?.includes(subcategory) ?? false;
+}
+function parseTelemetryRanking(raw) {
+  if (new TextEncoder().encode(raw).length > TELEMETRY_RANKING_MAX_BYTES) {
+    throw new Error(`telemetry_ranking exceeds ${TELEMETRY_RANKING_MAX_BYTES} bytes`);
+  }
+  return telemetryRankingSchema.parse(JSON.parse(raw));
+}
+function readTelemetryRanking(raw) {
+  if (!raw?.trim())
+    return null;
+  try {
+    return parseTelemetryRanking(raw);
+  } catch {
+    return null;
+  }
+}
+function mintRankingClaim() {
+  const bytes = crypto.getRandomValues(new Uint8Array(16));
+  return `rk_${Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("")}`;
+}
+function buildListing(identity, form, claim, now = new Date) {
+  if (!identity.ok || !identity.name || !identity.website) {
+    throw new Error(`Org identity is missing: ${identity.missing.join(", ")}`);
+  }
+  const listing = {
+    v: 1,
+    claim,
+    name: identity.name,
+    domain: identity.website,
+    category: form.category,
+    subcategory: blankToNull(form.subcategory),
+    description: blankToNull(form.description),
+    sourceCodeUrl: blankToNull(form.sourceCodeUrl),
+    updatedAt: now.toISOString()
+  };
+  return parseTelemetryRanking(JSON.stringify(listing));
+}
+function rankingEntryFile(listing) {
+  return `${JSON.stringify({ $schema: "./schema.json", domain: listing.domain, claim: listing.claim }, null, 2)}
+`;
+}
+function rankingPrUrl(listing) {
+  const params = new URLSearchParams({
+    filename: `community/ranking/${listing.domain}.json`,
+    value: rankingEntryFile(listing),
+    message: `chore(ranking): add ${listing.domain}`
+  });
+  return `https://github.com/${RANKING_REPO}/new/main?${params.toString()}`;
+}
+function rankingLeaveUrl(domain) {
+  return `https://github.com/${RANKING_REPO}/delete/main/community/ranking/${domain}.json`;
+}
+var TELEMETRY_RANKING_KEY = "telemetry_ranking", PUBLIC_RANKING_ENABLED_KEY = "PUBLIC_RANKING_ENABLED", TELEMETRY_RANKING_MAX_BYTES = 2048, RANKING_CATEGORIES, RANKING_CLAIM_PATTERN, hostname, nullableText = (max) => string2().trim().min(1).max(max).nullable(), telemetryRankingV1, telemetryRankingSchema, rankingFormSchema, blankToNull = (value) => value?.trim() || null, RANKING_REPO = "desplega-ai/agent-swarm";
+var init_telemetry_ranking = __esm(() => {
+  init_zod();
+  init_ranking_taxonomy_gen();
+  init_org_website();
+  RANKING_CATEGORIES = Object.keys(RANKING_TAXONOMY);
+  RANKING_CLAIM_PATTERN = /^rk_[0-9a-f]{32}$/;
+  hostname = string2().refine((v) => normalizeOrgWebsite(v) === v, "bare hostname");
+  telemetryRankingV1 = strictObject2({
+    v: literal2(1),
+    claim: string2().regex(RANKING_CLAIM_PATTERN),
+    name: string2().trim().min(1).max(60),
+    domain: hostname,
+    category: _enum2(RANKING_CATEGORIES),
+    subcategory: string2().regex(/^[a-z0-9]+(-[a-z0-9]+)*$/).max(40).nullable(),
+    description: nullableText(160),
+    sourceCodeUrl: url({ protocol: /^https$/ }).max(200).nullable(),
+    updatedAt: exports_iso.datetime()
+  }).refine((l) => inCategory(l.category, l.subcategory), {
+    path: ["subcategory"],
+    message: "not in this category"
+  });
+  telemetryRankingSchema = discriminatedUnion("v", [telemetryRankingV1]);
+  rankingFormSchema = object2({
+    category: _enum2(RANKING_CATEGORIES),
+    subcategory: string2().nullable().optional(),
+    description: string2().nullable().optional(),
+    sourceCodeUrl: string2().nullable().optional()
+  });
+});
+
 // src/scripts-runtime/executors/quickjs-pool-config.ts
 function validateQuickJSPoolSize(value) {
   const error = `Invalid SCRIPT_QUICKJS_POOL_SIZE (must be an integer between 1 and ${MAX_QUICKJS_POOL_SIZE})`;
@@ -7670,7 +7892,8 @@ function isInternalConfigKey(key) {
   return INTERNAL_CONFIG_KEYS.has(key.toLowerCase());
 }
 function internalConfigKeyError(key) {
-  const owner = key.toLowerCase() === "runtime_owner_id" ? "the runtime supervisor" : "/api/onboarding";
+  const lower = key.toLowerCase();
+  const owner = lower === "runtime_owner_id" ? "the runtime supervisor" : lower === TELEMETRY_RANKING_KEY ? "/api/ranking" : "/api/onboarding";
   return new Error(`Key '${key}' is managed by ${owner}`);
 }
 function isReservedConfigKey(key) {
@@ -7779,6 +8002,7 @@ function validateExportToEnv(key, exportToEnv) {
 var TEAMS_SDK_ENV_KEYS, RESERVED_KEYS, API_ONLY_CONFIG_KEYS, INTERNAL_CONFIG_KEYS, BOOLEAN_LITERALS, MAX_DB_RETENTION_DAYS = 1e6, DB_RETENTION_TUNING_BOUNDS, validateControllerTokenTtlDays, validateControllerGraceSec, VALIDATED_KEYS;
 var init_swarm_config_guard = __esm(() => {
   init_schema();
+  init_telemetry_ranking();
   init_quickjs_pool_config();
   init_reaction_shortcode();
   init_types();
@@ -7805,7 +8029,11 @@ var init_swarm_config_guard = __esm(() => {
     "CHAT_SDK_API_URL_OVERRIDES"
   ]);
   API_ONLY_CONFIG_KEYS = new Set(["API_AGENT_FS_API_KEY", "SLACK_SIGNING_SECRET"]);
-  INTERNAL_CONFIG_KEYS = new Set(["onboarding_state", "runtime_owner_id"]);
+  INTERNAL_CONFIG_KEYS = new Set([
+    "onboarding_state",
+    "runtime_owner_id",
+    TELEMETRY_RANKING_KEY
+  ]);
   BOOLEAN_LITERALS = ["true", "false", "1", "0"];
   DB_RETENTION_TUNING_BOUNDS = {
     DB_RETENTION_TICK_BUDGET_MS: { min: 1000, max: 300000 },
@@ -7847,6 +8075,16 @@ var init_swarm_config_guard = __esm(() => {
         return "Invalid TASK_TOOL_MANIFESTS (expected JSON with taskTypes and/or schedules maps, each selecting at most 16 known swarm tools)";
       }
     },
+    [TELEMETRY_RANKING_KEY.toUpperCase()]: (value) => {
+      try {
+        if (typeof value !== "string")
+          throw new Error("Expected JSON string");
+        parseTelemetryRanking(value);
+        return null;
+      } catch {
+        return "Invalid telemetry_ranking (expected the v1 ranking listing JSON)";
+      }
+    },
     SWARM_ENABLED_TOOLS: (value) => {
       try {
         if (typeof value !== "string")
@@ -7920,6 +8158,7 @@ var init_swarm_config_guard = __esm(() => {
     },
     ...booleanValidators([
       "SWARM_USED_BY_CONSENT",
+      "PUBLIC_RANKING_ENABLED",
       "SWARM_DEV_MODE",
       "MULTI_RUNTIME_ENABLED",
       "STEERING_ENABLED",
@@ -18494,7 +18733,7 @@ async function loadSecretRegistry() {
     result.failed += 1;
   }
   try {
-    const { loadRuntimeControllerSecrets } = await import("./db-19tw9r5s.js");
+    const { loadRuntimeControllerSecrets } = await import("./db-nc1rd869.js");
     const loaded = await loadRuntimeControllerSecrets();
     result.runtimeController = loaded.count;
     result.failed += loaded.failed;
@@ -18751,6 +18990,9 @@ async function refreshActiveSessionOnActivity2(taskId, minIntervalMs = SESSION_A
   const result = await getDbClient2().run("UPDATE active_sessions SET lastHeartbeatAt = ? WHERE taskId = ? AND lastHeartbeatAt < ?", [new Date(nowMs).toISOString(), taskId, new Date(nowMs - minIntervalMs).toISOString()]);
   return result.changes > 0;
 }
+async function getActiveSessionById(id) {
+  return getDbClient2().get("SELECT * FROM active_sessions WHERE id = ?", [id]);
+}
 var SESSION_ACTIVITY_REFRESH_MIN_INTERVAL_MS2 = 30000;
 var init_active_sessions = __esm(() => {
   init_runtime();
@@ -20105,8 +20347,8 @@ async function moveAssetKey2(input) {
   const previousKey = await currentAssetKey(input.entityType, input.id);
   if (!previousKey)
     return false;
-  if (previousKey === key)
-    return true;
+  if (previousKey === key && input.entityType !== "task")
+    return {};
   if (input.entityType === "file") {
     const mapping = await getAssetKeyMapping2(input.id);
     if (mapping?.sourceEntityType === "task-attachment") {
@@ -20114,40 +20356,59 @@ async function moveAssetKey2(input) {
     }
   }
   const now = new Date().toISOString();
-  await getDbClient2().transaction(async (tx) => {
+  return getDbClient2().transaction(async (tx) => {
     switch (input.entityType) {
       case "task": {
-        const mappedFiles = await tx.query(`SELECT DISTINCT m.id, m."key" AS key
+        const root = await getTaskById2(input.id);
+        if (!root)
+          return false;
+        const tasks = [root];
+        for (const id of input.descendantTaskIds ?? []) {
+          const task = id === root.id ? null : await getTaskById2(id);
+          if (task)
+            tasks.push(task);
+        }
+        const movedTaskIds = [];
+        for (const task of tasks) {
+          if (task.key === key)
+            continue;
+          const mappedFiles = await tx.query(`SELECT DISTINCT m.id, m."key" AS key
              FROM asset_key_mappings m
              JOIN task_attachments a
                ON m.provider_id = COALESCE(NULLIF(a.provider_id, ''), 'agent-fs')
               AND m.provider_org_id = COALESCE(a.agent_fs_org_id, '')
               AND m.provider_drive_id = COALESCE(a.agent_fs_drive_id, '')
               AND m.provider_key = COALESCE(NULLIF(a.provider_key, ''), a.path)
-             WHERE a.task_id = ?`, [input.id]);
-        await tx.run('UPDATE agent_tasks SET "key" = ?, lastUpdatedAt = ?, updated_by = ? WHERE id = ?', [key, now, input.changedBy ?? null, input.id]);
-        await tx.run(`UPDATE asset_key_mappings
-           SET "key" = ?, updated_at = ?, updated_by = ?
-           WHERE EXISTS (
-             SELECT 1 FROM task_attachments a
              WHERE a.task_id = ?
-               AND asset_key_mappings.provider_id = COALESCE(NULLIF(a.provider_id, ''), 'agent-fs')
-               AND asset_key_mappings.provider_org_id = COALESCE(a.agent_fs_org_id, '')
-               AND asset_key_mappings.provider_drive_id = COALESCE(a.agent_fs_drive_id, '')
-               AND asset_key_mappings.provider_key = COALESCE(NULLIF(a.provider_key, ''), a.path)
-           )`, [key, now, input.changedBy ?? null, input.id]);
-        for (const mapping of mappedFiles) {
-          if (mapping.key === key)
-            continue;
+               AND (m.source_entity_type IS NOT 'task-attachment'
+                 OR m.source_entity_id IN (SELECT id FROM task_attachments WHERE task_id = ?))`, [task.id, task.id]);
+          await tx.run('UPDATE agent_tasks SET "key" = ?, updated_by = ? WHERE id = ?', [
+            key,
+            input.changedBy ?? null,
+            task.id
+          ]);
+          for (const mapping of mappedFiles) {
+            if (mapping.key === key)
+              continue;
+            await tx.run('UPDATE asset_key_mappings SET "key" = ?, updated_at = ?, updated_by = ? WHERE id = ?', [key, now, input.changedBy ?? null, mapping.id]);
+            await insertAssetKeyHistory({
+              entityType: "file",
+              entityId: mapping.id,
+              previousKey: mapping.key,
+              newKey: key,
+              changedBy: input.changedBy
+            });
+          }
           await insertAssetKeyHistory({
-            entityType: "file",
-            entityId: mapping.id,
-            previousKey: mapping.key,
+            entityType: "task",
+            entityId: task.id,
+            previousKey: task.key,
             newKey: key,
             changedBy: input.changedBy
           });
+          movedTaskIds.push(task.id);
         }
-        break;
+        return { movedTaskIds };
       }
       case "workflow":
         await tx.run('UPDATE workflows SET "key" = ?, lastUpdatedAt = ?, updated_by = ? WHERE id = ?', [key, now, input.changedBy ?? null, input.id]);
@@ -20189,8 +20450,8 @@ async function moveAssetKey2(input) {
       newKey: key,
       changedBy: input.changedBy
     });
+    return {};
   });
-  return true;
 }
 async function deleteTaskAttachment2(id) {
   const result = await getDbClient2().run("DELETE FROM task_attachments WHERE id = ?", [id]);
@@ -20320,11 +20581,12 @@ async function getSteeringMessageById2(id) {
 async function getPendingSteeringForTask2(taskId) {
   return await getSteeringMessagesForTask2(taskId, { status: "pending" });
 }
-async function getPendingSteeringForAgent2(agentId) {
+async function getPendingSteeringForAgent2(agentId, readableBy) {
+  const readable = readableBy ? readableSessionCondition(readableBy.userId, "t.id") : undefined;
   const rows = await getDbClient2().query(`${STEERING_MESSAGE_SELECT}
        JOIN agent_tasks t ON t.id = m.task_id
-       WHERE t.agentId = ? AND m.status = 'pending'
-       ORDER BY m.created_at ASC, m.rowid ASC`, [agentId]);
+       WHERE t.agentId = ? AND m.status = 'pending'${readable ? ` AND ${readable.sql}` : ""}
+       ORDER BY m.created_at ASC, m.rowid ASC`, [agentId, ...readable?.params ?? []]);
   return rows.map(rowToSteeringMessage);
 }
 async function markSteeringDelivered2(id, deliveredMode, expectedTaskId) {
@@ -20380,12 +20642,12 @@ async function hasPendingSteering2(taskId) {
          LIMIT 1`, [taskId]);
   return row !== null;
 }
-async function getAgentWithTasks2(id) {
+async function getAgentWithTasks2(id, readableBy) {
   return await getDbClient2().transaction(async () => {
     const agent = await getAgentById2(id);
     if (!agent)
       return null;
-    const tasks = await getTasksByAgentId2(id);
+    const tasks = await getTasksByAgentId2(id, readableBy);
     return { ...agent, tasks };
   }, { readOnly: true });
 }
@@ -20394,7 +20656,7 @@ async function getAllAgentsWithTasks2(opts) {
     const agents = await getAllAgents2({ slim: opts?.slim ?? false });
     return await Promise.all(agents.map(async (agent) => ({
       ...agent,
-      tasks: await getTasksByAgentId2(agent.id)
+      tasks: await getTasksByAgentId2(agent.id, opts?.readableBy)
     })));
   }, { readOnly: true });
 }
@@ -20427,8 +20689,9 @@ async function createLogEntry2(entry) {
     throw new Error("Failed to create log entry");
   return rowToAgentLog(row);
 }
-async function getLogsByAgentId2(agentId) {
-  const rows = await getDbClient2().query("SELECT * FROM agent_log WHERE agentId = ? ORDER BY createdAt DESC", [agentId]);
+async function getLogsByAgentId2(agentId, readableBy) {
+  const readable = readableBy ? readableSessionCondition(readableBy.userId, "agent_log.taskId", { nullable: true }) : undefined;
+  const rows = await getDbClient2().query(`SELECT * FROM agent_log WHERE agentId = ?${readable ? ` AND ${readable.sql}` : ""} ORDER BY createdAt DESC`, [agentId, ...readable?.params ?? []]);
   return rows.map(rowToAgentLog);
 }
 async function getLogsByTaskId2(taskId, limit = 200) {
@@ -20447,12 +20710,14 @@ async function getLogsByEventType2(eventType) {
   const rows = await getDbClient2().query("SELECT * FROM agent_log WHERE eventType = ? ORDER BY createdAt DESC", [eventType]);
   return rows.map(rowToAgentLog);
 }
-async function getAllLogs2(limit) {
+async function getAllLogs2(limit, readableBy) {
+  const readable = readableBy ? readableSessionCondition(readableBy.userId, "agent_log.taskId", { nullable: true }) : undefined;
+  const readableParams = readable?.params ?? [];
   if (limit) {
-    const rows = await getDbClient2().query("SELECT * FROM agent_log WHERE eventType != 'agent_status_change' ORDER BY createdAt DESC LIMIT ?", [limit]);
+    const rows = await getDbClient2().query(`SELECT * FROM agent_log WHERE eventType != 'agent_status_change'${readable ? ` AND ${readable.sql}` : ""} ORDER BY createdAt DESC LIMIT ?`, [...readableParams, limit]);
     return rows.map(rowToAgentLog);
   }
-  const rows = await getDbClient2().query("SELECT * FROM agent_log ORDER BY createdAt DESC");
+  const rows = await getDbClient2().query(`SELECT * FROM agent_log${readable ? ` WHERE ${readable.sql}` : ""} ORDER BY createdAt DESC`, readableParams);
   return rows.map(rowToAgentLog);
 }
 async function findRecentSimilarTasks2(opts) {
@@ -22327,21 +22592,24 @@ async function releaseStaleProcessingInbox2(timeoutMinutes = 30) {
      WHERE status = 'processing' AND lastUpdatedAt < ?`, [now, cutoffTime]);
   return result.changes;
 }
-async function getConcurrentContext2() {
+async function getConcurrentContext2(readableBy) {
   const client = getDbClient2();
+  const readable = readableBy ? readableSessionCondition(readableBy.userId, "t.id") : undefined;
+  const readableSql = readable ? ` AND ${readable.sql}` : "";
+  const readableParams = readable?.params ?? [];
   const processingInboxMessages = await client.query("SELECT id, content, source, slackChannelId, slackThreadTs, createdAt FROM inbox_messages WHERE status = 'processing' ORDER BY createdAt DESC");
   const fiveMinutesAgo = new Date(Date.now() - 5 * 60 * 1000).toISOString();
   const recentTaskDelegations = await client.query(`SELECT t.id, t.task, t.agentId, a.name as agentName, t.creatorAgentId, t.status, t.createdAt
        FROM agent_tasks t
        LEFT JOIN agents a ON t.agentId = a.id
        WHERE t.createdAt > ?
-         AND t.creatorAgentId IN (SELECT id FROM agents WHERE isLead = 1)
-       ORDER BY t.createdAt DESC`, [fiveMinutesAgo]);
+         AND t.creatorAgentId IN (SELECT id FROM agents WHERE isLead = 1)${readableSql}
+       ORDER BY t.createdAt DESC`, [fiveMinutesAgo, ...readableParams]);
   const activeSwarmTasks = await client.query(`SELECT t.id, t.task, t.agentId, a.name as agentName, t.status, t.createdAt, t.progress
        FROM agent_tasks t
        LEFT JOIN agents a ON t.agentId = a.id
-       WHERE t.status = 'in_progress'
-       ORDER BY t.createdAt DESC`);
+       WHERE t.status = 'in_progress'${readableSql}
+       ORDER BY t.createdAt DESC`, readableParams);
   return {
     processingInboxMessages,
     recentTaskDelegations,
@@ -23085,11 +23353,22 @@ async function deleteActiveSessionById2(id) {
   const result = await getDbClient2().run("DELETE FROM active_sessions WHERE id = ?", [id]);
   return result.changes > 0;
 }
-async function getActiveSessions2(agentId) {
+async function getActiveSessions2(agentId, readableBy) {
+  const conditions = [];
+  const params = [];
   if (agentId) {
-    return await getDbClient2().query("SELECT * FROM active_sessions WHERE agentId = ? ORDER BY startedAt DESC", [agentId]);
+    conditions.push("agentId = ?");
+    params.push(agentId);
   }
-  return await getDbClient2().query("SELECT * FROM active_sessions ORDER BY startedAt DESC");
+  if (readableBy) {
+    const readable = readableSessionCondition(readableBy.userId, "active_sessions.taskId", {
+      nullable: true
+    });
+    conditions.push(readable.sql);
+    params.push(...readable.params);
+  }
+  const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
+  return await getDbClient2().query(`SELECT * FROM active_sessions ${where} ORDER BY startedAt DESC`, params);
 }
 async function heartbeatActiveSession2(taskId) {
   const now = new Date().toISOString();
@@ -25942,6 +26221,7 @@ function rowToInboxItemState(row) {
     dismissedAt: row.dismissedAt ?? undefined,
     doneAt: row.doneAt ?? undefined,
     readAt: row.readAt ?? undefined,
+    lastReadAt: row.lastReadAt ?? undefined,
     createdAt: row.createdAt,
     lastUpdatedAt: row.lastUpdatedAt
   };
@@ -25967,14 +26247,15 @@ async function upsertInboxState2(opts) {
   const doneAt = opts.doneAt ?? (opts.status === "done" ? now : null);
   const snoozeUntil = opts.snoozeUntil ?? null;
   const readAt = opts.readAt ?? null;
-  const row = await getDbClient2().get(`INSERT INTO inbox_item_state (userId, itemType, itemId, status, snoozeUntil, dismissedAt, doneAt, readAt, createdAt, lastUpdatedAt)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+  const row = await getDbClient2().get(`INSERT INTO inbox_item_state (userId, itemType, itemId, status, snoozeUntil, dismissedAt, doneAt, readAt, lastReadAt, createdAt, lastUpdatedAt)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
        ON CONFLICT(userId, itemType, itemId) DO UPDATE SET
          status = excluded.status,
          snoozeUntil = excluded.snoozeUntil,
          dismissedAt = excluded.dismissedAt,
          doneAt = excluded.doneAt,
          readAt = COALESCE(inbox_item_state.readAt, excluded.readAt),
+         lastReadAt = CASE WHEN ? THEN excluded.lastReadAt ELSE inbox_item_state.lastReadAt END,
          lastUpdatedAt = excluded.lastUpdatedAt
        RETURNING *`, [
     opts.userId,
@@ -25985,8 +26266,10 @@ async function upsertInboxState2(opts) {
     dismissedAt,
     doneAt,
     readAt,
+    opts.lastReadAt ?? null,
     now,
-    now
+    now,
+    opts.lastReadAt !== undefined ? 1 : 0
   ]);
   if (!row)
     throw new Error("Failed to upsert inbox state");
@@ -26140,6 +26423,11 @@ async function listRecentSessions2(opts) {
     conditions.push(`r.contextKey LIKE ? ESCAPE '\\'`);
     params.push(literalPrefixPattern(opts.contextKeyPrefix));
   }
+  if (opts?.viewer) {
+    const viewer = sessionViewerCondition(opts.viewer);
+    conditions.push(viewer.sql);
+    params.push(...viewer.params);
+  }
   params.push(limit, offset);
   const rootRows = await getDbClient2().query(`WITH RECURSIVE chain(root_id, id, lastUpdatedAt, status) AS (
          SELECT r.id, r.id, r.lastUpdatedAt, r.status
@@ -26199,26 +26487,31 @@ async function countSessions2(opts) {
   const sources = opts?.source?.filter((s) => s.length > 0) ?? [];
   const q = opts?.q?.trim();
   const requestedByUserId = opts?.requestedByUserId?.trim() || undefined;
-  const conditions = ["parentTaskId IS NULL"];
+  const conditions = ["r.parentTaskId IS NULL"];
   const params = [];
   if (sources.length > 0) {
-    conditions.push(`source IN (${sources.map(() => "?").join(", ")})`);
+    conditions.push(`r.source IN (${sources.map(() => "?").join(", ")})`);
     params.push(...sources);
   }
   if (q && q.length > 0) {
-    conditions.push("(lower(task) LIKE ? OR lower(COALESCE(title, '')) LIKE ?)");
+    conditions.push("(lower(r.task) LIKE ? OR lower(COALESCE(r.title, '')) LIKE ?)");
     const like = `%${q.toLowerCase()}%`;
     params.push(like, like);
   }
   if (requestedByUserId) {
-    conditions.push("requestedByUserId = ?");
+    conditions.push("r.requestedByUserId = ?");
     params.push(requestedByUserId);
   }
   if (opts?.contextKeyPrefix) {
-    conditions.push(`contextKey LIKE ? ESCAPE '\\'`);
+    conditions.push(`r.contextKey LIKE ? ESCAPE '\\'`);
     params.push(literalPrefixPattern(opts.contextKeyPrefix));
   }
-  const row = await getDbClient2().get(`SELECT COUNT(*) AS count FROM agent_tasks WHERE ${conditions.join(" AND ")}`, params);
+  if (opts?.viewer) {
+    const viewer = sessionViewerCondition(opts.viewer);
+    conditions.push(viewer.sql);
+    params.push(...viewer.params);
+  }
+  const row = await getDbClient2().get(`SELECT COUNT(*) AS count FROM agent_tasks r WHERE ${conditions.join(" AND ")}`, params);
   return row?.count ?? 0;
 }
 function rowToBudget(row) {
@@ -26947,6 +27240,7 @@ var init_db3 = __esm(() => {
   init_context_versions();
   init_model_profiles();
   init_runtime();
+  init_session_visibility();
   init_human_free();
   init_read();
   init_write();
@@ -27019,4 +27313,4 @@ var init_db3 = __esm(() => {
   };
 });
 
-export { slackContextKey, chatSdkContextKey, chatThreadOfContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, azureDevOpsContextKey, azureDevOpsWorkItemContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, init_catalog, catalog_default, mapTriggerSurface, init_telemetry_context, TELEMETRY_PROXY_ORIGIN, normalizeOrgWebsite, orgLogoUrl, isFilledOrgLogoUrl, init_org_website, beginRequestAuthScope, setRequestAuth, getRequestAuth, getCurrentRequestAuth, runWithoutRequestAuth, getCurrentRequestUserId, init_request_auth_context, setTelemetryIngestObserver, isTelemetryEnabled, _resolveIntegrationType, _resolveIntegrationProvider, initTelemetry, setTelemetryRoleResolver, isTelemetryReady, track, trackRelayed, telemetry, emitIntegrationConnected, init_telemetry, auditAssetKeys, init_asset_key_audit, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, assertUrlSafe, parseEgressAllowlist, init_egress_guard, init_credential_broker, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, isInTransaction, init_db_client, breaksJsonValidity, scrubJsonValue, init_scrub_json, sealJson, init_sealed_json, getPromptTemplateDefaultDrift, init_default_drift, init_templates, init_templates2, isSqliteVecAvailable2, resolveSqliteVecExtensionPath2, __resetSqliteVecExtensionPathCacheForTests2, initDb2, getDb2, closeDb2, getDbClient2, init_runtime, cachedUserRole, configureOrgDomainPersistence, recomputeOrgDomain, scheduleOrgDomainRecompute, init_telemetry_identity, resolveTriggerSurface, emitTaskTelemetry, init_telemetry_trigger, CODEX_AUTH_WATCH_NAMESPACE, codexAuthBenchMarkerKey, isCodexAuthFailureReason, init_codex_auth_failure, isEnvExportRestrictedKey, init_config_env_export, MASKED_SECRET_VALUE, init_config_secrets, HeartbeatExpiryError, init_heartbeat_expiry, isRuntimePoolsEnabled, init_runtime_pools_flag, normalizeDate, normalizeDateRequired, init_date_utils, rowToAgent, updateAgentCredentialState2, updateAgentCredentialMissing2, createAgent2, getAgentById2, EXTENSION_AGENT_ROLE2, NOT_EXTENSION_AGENT_SQL2, isExtensionAgent2, extensionAgentAssignmentError2, ReservedAgentRoleError2, reservedRoleViolation2, ExtensionAgentAssignmentError2, getAllAgents2, getAgentStatusCounts2, getLeadAgent2, updateAgentStatus2, updateAgentMaxTasks2, updateAgentProvider2, setAgentHarnessProvider2, updateAgentCredStatus2, listAgentsWithCredStatusByProvider2, getAgentHarnessProviders2, updateAgentActivity2, MAX_EMPTY_POLLS2, incrementEmptyPollCount2, resetEmptyPollCount2, shouldBlockPolling2, deleteAgent2, getActiveTaskCount2, hasCapacity2, getRemainingCapacity2, updateAgentStatusFromCapacity2, isPoolAffinityEnforcementEnabled2, buildRoutingAffinityFromAgent2, isAgentEligibleForTask2, getAgentDailyTaskCounts2, init_agents, listApprovalRequestSummaries2, getPendingApprovalVoteState2, recordApprovalVotes2, computeContentHash2, createContextVersion2, getLatestContextVersion2, getContextVersion2, getContextVersionHistory2, vcsRepoName, vcsRepoUrlMatches, init_vcs_repo_match, rowToAgentTask, getTaskById2, getChildTasks2, hasNonTerminalResumeChild2, SUPERSEDED_RESUME_REPAIR_WINDOW_MS2, getSupersededTasksWithoutResume2, getSupersededTasksWithUnsettledDependents2, hasNonTerminalRerouteDecisionChild2, getTasksByAgentId2, getAgentCurrentTask2, getTasksByStatus2, findTaskByVcs2, findTaskByGitHub2, getAllTasks2, getTasksCount2, getTaskStats2, getCompletedSlackTasks2, getPendingSlackRelayTasks2, markSlackRelayAttempted2, markSlackRelayDelivered2, markFinalizedSlackRelaysDelivered2, getPendingChatRelayTasks2, giveUpStaleChatRelays2, markChatRelayAttempted2, recordChatRelayError2, markChatRelayDelivered2, markChatRelayGivenUp2, getRecentlyFinishedWorkerTasks2, markTasksNotified2, resetTasksNotified2, getInProgressSlackTasks2, getSlackTasksMissingTree2, getInProgressTasksByContextKey2, isLinearTrackerContextKey2, findExistingLinearTrackerContextWork2, getLatestTaskByContextKey2, getLatestScriptRunStepTaskByContextKey2, getAgentWorkingOnThread2, getLatestActiveTaskInThread2, getLatestLeadTaskInThread2, getAgentWorkingOnContextKey2, getLatestActiveTaskByContextKey2, getLatestLeadTaskByContextKey2, getMostRecentTaskInThread2, findCompletedTaskInThread2, findRecentCancelledTaskInThread2, init_read, MODEL_PROFILE_CONFIG_KEY, listModelProfiles, getModelProfileByName, createModelProfile, updateModelProfile, modelProfileReferences, modelProfileRefError, deleteModelProfile, getAgentDefaultProfileName, repoModelOverrideKeys, taskProfileError, init_model_profiles, setHumanFreeQueueListener, drainHumanFreeReclassifyQueue, init_human_free, onTaskStarted, init_task_lifecycle_events, channelTopic, addWorkerSubscription, removeWorkerSubscription, listSubscribedWorkerAgents, init_channels, publishWorkerNudge, init_worker_nudges, createTask2, getPendingTaskForAgent2, assignUnassignedTaskPending2, startTask2, updateTaskClaudeSessionId2, recordTaskProviderIfUnset2, updateTaskTitle2, completeTask2, failTask2, overwriteTerminalTaskResultText2, cancelTask2, supersedeTask2, settleSupersededTaskDependents2, backfillSupersedeTaskResumeTaskId2, pauseTask2, resumeTask2, getPausedTasksForAgent2, getOrphanedInProgressTasksForAgent2, resetOrphanedInProgressTasksForAgent2, getRecentlyCancelledTasksForAgent2, deleteTask2, updateTaskProgress2, getChildWorkflowRunId, getWorkflowRunParent, getWorkflowRunLineage, getSettledChildRunParentSteps, init_workflow_runs, CHAT_SDK_ADAPTER_NAMES, CHAT_SDK_ADAPTER_SCHEMAS, ChatSdkAdaptersDraftSchema, firstIssueText, isAdapterEntryEnabled, init_schema, resolveQuickJSPoolSize, init_quickjs_pool_config, SLACK_REACTION_DEFAULTS, SLACK_REACTION_CONFIG_KEYS, reactionName, completedStatusIcon, init_reaction_shortcode, API_DRAINING_HEADER, API_DRAIN_MAX_MS_LIMIT, isApiDrainingResponse, init_api_drain, parseEnabledTools, init_enabled_tools, parseTaskToolManifest, CHAT_TASK_ONLY_TOOLS, isChatSdkTask, selectTaskTools, init_task_tool_manifest, tierConfigKey, init_model_tier_keys, isApiOnlyConfigKey, isInternalConfigKey, internalConfigKeyError, isReservedConfigKey, reservedKeyError, MAX_DB_RETENTION_DAYS, DB_RETENTION_TUNING_BOUNDS, validateRuntimeTokenTtlHours, validateControllerTokenTtlDays, validateControllerGraceSec, validateConfigValue, validateExportToEnv, init_swarm_config_guard, getDefaultAuthorizationIdForProvider, getOAuthApp, getOAuthAppById, getOAuthAppIdByProvider, createOAuthApp, updateOAuthAppById, upsertOAuthApp, listAuthorizationsForApp, getAuthorizationById, upsertAuthorization, updateAuthorizationTokens, updateAuthorizationIdentity, deleteAuthorizationById, deleteAuthorizationsForApp, createOAuthPending, consumeOAuthPending, gcOAuthPending, markAuthorizationRefreshFailed, getOAuthTokens, listAuthorizationSweepRows, listKeepAliveAuthorizations, deleteOAuthTokens, acquireOAuthRefreshLock, releaseOAuthRefreshLock, init_oauth, OpenAI2, init_openai, CANDIDATE_SET_MULTIPLIER, isGraphExpansionEnabled, EMBEDDING_DIMENSIONS, init_constants, LONGTERM_ROOT, MEMORY_KEY_PATTERN, MEMORY_KEY_PATTERN_MESSAGE, MEMORY_KEY_MAX_LENGTH, isLongtermKey, longtermKeyError, isConsolidatedKey, consolidatedKeyMessage, resolveStoreKey, init_key_paths, computeScore, rerank, init_reranker, rowToCandidate, init_sqlite_store, getEmbeddingProvider2, resetEmbeddingProvider2, getMemoryStore2, init_memory, embeddingProvider, embedScript, searchScripts, reembedAllScripts, init_embeddings, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, touchScratchScriptLastUsed, restoreScratchScriptLastUsedIfUnchanged, createScriptApi, listScriptApisForScript, getScriptApiById, getScriptApiSecret, updateScriptApi, rotateScriptApiSecret, deleteScriptApi, recordScriptApiUsage, init_db2, oauthSecretName, registerStoredSecret, loadSecretRegistry, init_secret_registry, STEERING_MOVED_ERROR, SteeringRequestError, isSteeringEnabled, getTaskSteeringFields, getTaskSteeringFieldsForTasks, promotePendingSteeringForTask, markSteeringUndeliverable, carryUnhandledSteering, requestSteering, init_steering, WorkflowReplayStateError, init_workflow_replay, SESSION_ACTIVITY_REFRESH_MIN_INTERVAL_MS2, refreshActiveSessionOnActivity2, recordKeySeatMismatch2, getScriptRunExecutionArgs2, getSlackRenderV2ActivatedAt2, ensureSlackRenderV2Activation2, getSlackDelegationActivatedAt2, ensureSlackDelegationActivation2, isPendingSlackMessage2, isSettledSlackMessage2, recordSlackMessage2, reserveSlackMessage2, bindSlackMessageTimestamp2, updateSlackMessageRecord2, markSlackTreeRendered2, deleteSlackMessageRecord2, getSlackTreeMessage2, getSlackTreeMessageByThread2, getSlackOutcomeMessage2, getResolvableDeferralOutcomes2, markSlackDeferralResolved2, noteSlackOutcomeDeliveryFailure2, abandonSlackOutcomeDelivery2, getSlackTreeMessages2, getSlackMessageByChannelTs2, getSlackTasksInThread2, listSlackThreadsAwaitingHuman2, isSlackThreadAwaitingHuman2, markTaskSlackReplySent2, setSlackMessageTracking2, updateTaskVcs2, insertTaskAttachment2, recordTaskPullRequestAttachments2, getAssetKeyMappingByProvider2, upsertAssetKeyMapping2, getAssetKeyMapping2, listAssetSummaries2, moveAssetKey2, deleteTaskAttachment2, replaceTaskAttachment2, getTaskAttachments2, createSteeringMessage2, getSteeringMessagesForTask2, getSteeringMessageById2, getPendingSteeringForTask2, getPendingSteeringForAgent2, markSteeringDelivered2, markSteeringHandled2, markSteeringPromoted2, cancelPendingSteeringForTask2, hasPendingSteering2, getAgentWithTasks2, getAllAgentsWithTasks2, createLogEntry2, getLogsByAgentId2, getLogsByTaskId2, getLogsByTaskIdAndEventType2, getLogsByTaskIdChronological2, getLogsByEventType2, getAllLogs2, findRecentSimilarTasks2, createTaskExtended2, claimTask2, releaseTask2, acceptTask2, rejectTask2, moveTaskToBacklog2, moveTaskFromBacklog2, promoteDraftTask2, refreshDraftTaskLease2, promoteAbandonedDraftTasks2, releaseStaleReviewingTasks2, releaseStaleOfferedTasksForOfflineAgents2, getOfferedTasksForAgent2, claimOfferedTask2, getUnassignedTasksCount2, getUnassignedTaskIds2, getUnassignedTaskIdsForAgent2, checkDependencies2, getDependentTasks2, cascadeFailDependents2, updateAgentProfile2, updateAgentName2, createChannel2, getMessageById2, getChannelById2, getChannelByName2, getAllChannels2, deleteChannel2, postMessage2, getChannelMessages2, updateReadState2, getLastReadAt2, getUnreadMessages2, getMentionsForAgent2, getInboxSummary2, claimMentions2, releaseMentionProcessing2, releaseStaleMentionProcessing2, createService2, getServiceById2, getServiceByAgentAndName2, getServicesByAgentId2, getAllServices2, updateServiceStatus2, deleteService2, upsertService2, deleteServicesByAgentId2, createSessionLogs2, getSessionLogsByTaskId2, getSessionLogsBySession2, createSessionCost2, getSessionCostsByTaskId2, getSessionCostsByAgentId2, getAllSessionCosts2, getSessionCostsFiltered2, UNATTRIBUTED_USER_ID2, getSessionCostSummary2, getAttributionByPerson2, getDashboardCostSummary2, createInboxMessage2, getInboxMessageById2, getUnreadInboxMessages2, claimInboxMessages2, markInboxMessageRead2, markInboxMessageResponded2, markInboxMessageDelegated2, releaseStaleProcessingInbox2, getConcurrentContext2, getScheduledTasks2, getScheduledTaskById2, getScheduledTaskByName2, createScheduledTask2, updateScheduledTask2, deleteScheduledTask2, getDueScheduledTasks2, autoEncryptLegacyPlaintextSecrets2, maskSecrets2, getSwarmConfigs2, getInjectableGlobalConfigs2, getSwarmConfigById2, getSwarmConfigLookupById2, upsertSwarmConfig2, emitBuiltInIntegrationConnectedOnce2, deleteSwarmConfig2, deleteSwarmConfigByKey2, getResolvedConfig2, getSwarmRepos2, getSwarmRepoById2, getSwarmRepoByName2, getSwarmRepoByUrl2, createSwarmRepo2, updateSwarmRepo2, deleteSwarmRepo2, getAgentMailInboxMapping2, getAgentMailInboxMappingsByAgent2, getAllAgentMailInboxMappings2, createAgentMailInboxMapping2, deleteAgentMailInboxMapping2, findTaskByAgentMailThread2, insertActiveSession2, deleteActiveSession2, deleteActiveSessionById2, getActiveSessions2, heartbeatActiveSession2, cleanupStaleSessions2, cleanupAgentSessions2, updateActiveSessionProviderSessionId2, getActiveSessionForTask2, reassociateSessionLogs2, getStalledInProgressTasks2, getStalePinnedResumes2, failPendingResumeIfUnclaimed2, getIdleWorkersWithCapacity2, getUnassignedPoolTasks2, getStaleUnassignedAffinityTasks2, getRecentFailedTasks2, getRecentCompletedCount2, getRecentFailedCount2, createWorkflow2, getWorkflow2, listWorkflows2, updateWorkflow2, deleteWorkflow2, getWorkflowsByScheduleId2, createWorkflowRun2, getWorkflowRun2, updateWorkflowRun2, listWorkflowRuns2, countWorkflowRuns2, listWorkflowRunsPage2, createWorkflowRunStep2, getWorkflowRunStep2, updateWorkflowRunStep2, getWorkflowRunStepsByRunId2, getStuckWorkflowRuns2, getLastSuccessfulRun2, getLastRunStart2, getRetryableSteps2, getCompletedStepNodeIds2, getTaskByWorkflowRunStepId2, detachTaskFromWorkflowRunStep2, getStepByIdempotencyKey2, getStepCountForNode2, getLatestStepForNode2, getCurrentStepForNode2, createWorkflowVersion2, getWorkflowVersions2, getWorkflowVersion2, createAppVersion2, getAppVersions2, getAppVersion2, createPage2, getPage2, getPageBySlug2, getLatestPageBySlug2, listPagesByAgent2, listAllPages2, countAllPages2, countPagesByAgent2, updatePage2, deletePage2, incrementPageViewCount2, createPageVersion2, getPageVersions2, getPageVersion2, createMetric2, getMetric2, getMetricBySlug2, listMetricsByAgent2, listAllMetrics2, countAllMetrics2, countMetricsByAgent2, updateMetric2, deleteMetric2, createMetricVersion2, getMetricVersions2, getMetricVersion2, getPromptTemplates2, getPromptTemplateById2, upsertPromptTemplate2, deletePromptTemplate2, resetPromptTemplateToDefault2, getPromptTemplateHistory2, resolvePromptTemplate2, checkoutPromptTemplate2, getAllChannelActivityCursors2, getChannelActivityCursor2, upsertChannelActivityCursor2, createApprovalRequest2, getApprovalRequestById2, resolveApprovalRequest2, cancelApprovalRequestById2, cancelPendingApprovalRequestsForRun2, listCancelledApprovalRequestsForRun2, listCancelledApprovalRequestsForStep2, claimApprovalCancellationNotification2, completeApprovalCancellationNotificationClaim2, releaseApprovalCancellationNotificationClaim2, updateApprovalRequestNotifications2, listApprovalRequests2, getStuckApprovalRuns2, getApprovalRequestByStepId2, getExpiredPendingApprovals2, getStaleApprovalRequests2, createWaitState2, getWaitStateById2, getWaitStateByStepId2, getDueWaitStates2, getPendingEventWaitNames2, getPendingWaitsByEvent2, resolveWaitState2, getStuckWaitRuns2, SKILL_FILE_LIMITS2, normalizeSkillFilePath2, createSkill2, updateSkill2, listSkillFileManifest2, getSkillFiles2, getSkillFile2, upsertSkillFile2, upsertSkillFiles2, deleteSkillFile2, deleteSkill2, getSkillById2, getSkillByName2, listSkills2, searchSkills2, installSkill2, getSystemDefaultSkills2, installSystemDefaultSkillsForAgent2, uninstallSkill2, getAgentSkills2, toggleAgentSkill2, createMcpServer2, emitMcpServerConnectedTelemetry2, updateMcpServer2, deleteMcpServer2, getMcpServerById2, getMcpServerByName2, listMcpServers2, installMcpServer2, uninstallMcpServer2, getAgentMcpServers2, createContextSnapshot2, getContextSnapshotsByTaskId2, getContextSnapshotsBySessionId2, getContextSummaryByTaskId2, getAvailableKeyIndices2, recordKeyUsage2, setApiKeyPlan2, markKeyRateLimited2, recordKeyAuthFailure2, recordKeyRateLimitWindows2, setApiKeyName2, clearKeyRateLimit2, getKeyStatuses2, getKeyCostSummary2, getUserById2, getAllUsers2, createUser2, updateUser2, deleteUser2, listInboxState2, upsertInboxState2, listFavorites2, listUserFavorites2, getFavoriteItemIdSet2, setFavorite2, setUserFavorite2, withFavoriteFlags2, listTaskTemplates2, getRootTaskChain2, listRecentSessions2, countSessions2, getBudget2, getBudgets2, upsertBudget2, deleteBudget2, getAllPricingRows2, getPricingRows2, getActivePricingRow2, insertPricingRow2, deletePricingRow2, getDailySpendForAgent2, getDailySpendGlobal2, getDailySpendForUser2, recordBudgetRefusalNotification2, getBudgetRefusalNotification2, getRecentBudgetRefusalNotifications2, hasBudgetRefusalNotificationToday2, setBudgetRefusalFollowUpTaskId2, getLiveAgentCounts2, getReadyAgentCounts2, getInstanceActivity2, getSwarmMetrics2, hasFirstCompletedTask2, getKv2, sweepExpiredKv2, sweepExpiredKvPrefix2, upsertKv2, claimKv2, deleteKv2, KvTypeCollisionError2, incrKv2, kvPrefixUpperBound2, listKv2, countKv2, createScriptRun2, recordInlineScriptRun2, getScriptRun2, getScriptRunByIdempotencyKey2, listScriptRuns2, countScriptRuns2, countActiveScriptRuns2, updateScriptRun2, updateScriptRunIfNotTerminal2, updateScriptRunIfRunning2, getRunningScriptRuns2, getScriptRunJournalStep2, upsertScriptRunJournalStep2, listScriptRunJournalSteps2, countScriptRunJournalSteps2, countScriptRunJournalAgentTaskSteps2, exports_db, init_db3 };
+export { slackContextKey, chatSdkContextKey, chatThreadOfContextKey, agentmailContextKey, githubContextKey, gitlabContextKey, azureDevOpsContextKey, azureDevOpsWorkItemContextKey, linearContextKey, buildJiraContextKey, scheduleContextKey, workflowContextKey, agentContextKey, pageContextKey, init_context_key, checkSlackRoutingCoherence, init_slack_routing, init_catalog, catalog_default, mapTriggerSurface, init_telemetry_context, TELEMETRY_PROXY_ORIGIN, normalizeOrgWebsite, orgLogoUrl, isFilledOrgLogoUrl, init_org_website, beginRequestAuthScope, setRequestAuth, getRequestAuth, getCurrentRequestAuth, runWithoutRequestAuth, getCurrentRequestUserId, init_request_auth_context, setTelemetryIngestObserver, isTelemetryEnabled, _resolveIntegrationType, _resolveIntegrationProvider, initTelemetry, setTelemetryRoleResolver, isTelemetryReady, track, trackRelayed, telemetry, emitIntegrationConnected, init_telemetry, auditAssetKeys, init_asset_key_audit, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, assertUrlSafe, parseEgressAllowlist, init_egress_guard, init_credential_broker, encryptSecret, decryptSecret, getEncryptionKey, init_crypto, isInTransaction, init_db_client, breaksJsonValidity, scrubJsonValue, init_scrub_json, sealJson, init_sealed_json, getPromptTemplateDefaultDrift, init_default_drift, init_templates, init_templates2, isSqliteVecAvailable2, resolveSqliteVecExtensionPath2, __resetSqliteVecExtensionPathCacheForTests2, initDb2, getDb2, closeDb2, getDbClient2, init_runtime, cachedUserRole, configureOrgDomainPersistence, recomputeOrgDomain, scheduleOrgDomainRecompute, init_telemetry_identity, resolveTriggerSurface, emitTaskTelemetry, init_telemetry_trigger, CODEX_AUTH_WATCH_NAMESPACE, codexAuthBenchMarkerKey, isCodexAuthFailureReason, init_codex_auth_failure, isEnvExportRestrictedKey, init_config_env_export, MASKED_SECRET_VALUE, init_config_secrets, HeartbeatExpiryError, init_heartbeat_expiry, isRuntimePoolsEnabled, init_runtime_pools_flag, normalizeDate, normalizeDateRequired, init_date_utils, rowToAgent, updateAgentCredentialState2, updateAgentCredentialMissing2, createAgent2, getAgentById2, EXTENSION_AGENT_ROLE2, NOT_EXTENSION_AGENT_SQL2, isExtensionAgent2, extensionAgentAssignmentError2, ReservedAgentRoleError2, reservedRoleViolation2, ExtensionAgentAssignmentError2, getAllAgents2, getAgentStatusCounts2, getLeadAgent2, updateAgentStatus2, updateAgentMaxTasks2, updateAgentProvider2, setAgentHarnessProvider2, updateAgentCredStatus2, listAgentsWithCredStatusByProvider2, getAgentHarnessProviders2, updateAgentActivity2, MAX_EMPTY_POLLS2, incrementEmptyPollCount2, resetEmptyPollCount2, shouldBlockPolling2, deleteAgent2, getActiveTaskCount2, hasCapacity2, getRemainingCapacity2, updateAgentStatusFromCapacity2, isPoolAffinityEnforcementEnabled2, buildRoutingAffinityFromAgent2, isAgentEligibleForTask2, getAgentDailyTaskCounts2, init_agents, listApprovalRequestSummaries2, getPendingApprovalVoteState2, recordApprovalVotes2, computeContentHash2, createContextVersion2, getLatestContextVersion2, getContextVersion2, getContextVersionHistory2, vcsRepoName, vcsRepoUrlMatches, init_vcs_repo_match, rowToAgentTask, getTaskById2, getChildTasks2, hasNonTerminalResumeChild2, SUPERSEDED_RESUME_REPAIR_WINDOW_MS2, getSupersededTasksWithoutResume2, getSupersededTasksWithUnsettledDependents2, hasNonTerminalRerouteDecisionChild2, getTasksByAgentId2, getAgentCurrentTask2, getTasksByStatus2, findTaskByVcs2, findTaskByGitHub2, readableSessionCondition, getAllTasks2, getTasksCount2, getTaskStats2, getCompletedSlackTasks2, getPendingSlackRelayTasks2, markSlackRelayAttempted2, markSlackRelayDelivered2, markFinalizedSlackRelaysDelivered2, getPendingChatRelayTasks2, giveUpStaleChatRelays2, markChatRelayAttempted2, recordChatRelayError2, markChatRelayDelivered2, markChatRelayGivenUp2, getRecentlyFinishedWorkerTasks2, markTasksNotified2, resetTasksNotified2, getInProgressSlackTasks2, getSlackTasksMissingTree2, getInProgressTasksByContextKey2, isLinearTrackerContextKey2, findExistingLinearTrackerContextWork2, getLatestTaskByContextKey2, getLatestScriptRunStepTaskByContextKey2, getAgentWorkingOnThread2, getLatestActiveTaskInThread2, getLatestLeadTaskInThread2, getAgentWorkingOnContextKey2, getLatestActiveTaskByContextKey2, getLatestLeadTaskByContextKey2, getMostRecentTaskInThread2, findCompletedTaskInThread2, findRecentCancelledTaskInThread2, init_read, MODEL_PROFILE_CONFIG_KEY, listModelProfiles, getModelProfileByName, createModelProfile, updateModelProfile, modelProfileReferences, modelProfileRefError, deleteModelProfile, getAgentDefaultProfileName, repoModelOverrideKeys, taskProfileError, init_model_profiles, setHumanFreeQueueListener, drainHumanFreeReclassifyQueue, init_human_free, onTaskStarted, init_task_lifecycle_events, channelTopic, addWorkerSubscription, removeWorkerSubscription, listSubscribedWorkerAgents, init_channels, publishWorkerNudge, init_worker_nudges, createTask2, getPendingTaskForAgent2, assignUnassignedTaskPending2, startTask2, updateTaskClaudeSessionId2, recordTaskProviderIfUnset2, updateTaskTitle2, completeTask2, failTask2, overwriteTerminalTaskResultText2, cancelTask2, supersedeTask2, settleSupersededTaskDependents2, backfillSupersedeTaskResumeTaskId2, pauseTask2, resumeTask2, getPausedTasksForAgent2, getOrphanedInProgressTasksForAgent2, resetOrphanedInProgressTasksForAgent2, getRecentlyCancelledTasksForAgent2, deleteTask2, updateTaskProgress2, getChildWorkflowRunId, getWorkflowRunParent, getWorkflowRunLineage, getSettledChildRunParentSteps, init_workflow_runs, CHAT_SDK_ADAPTER_NAMES, CHAT_SDK_ADAPTER_SCHEMAS, ChatSdkAdaptersDraftSchema, firstIssueText, isAdapterEntryEnabled, init_schema, TELEMETRY_RANKING_KEY, PUBLIC_RANKING_ENABLED_KEY, RANKING_CATEGORIES, readTelemetryRanking, rankingFormSchema, mintRankingClaim, buildListing, rankingEntryFile, rankingPrUrl, rankingLeaveUrl, init_telemetry_ranking, resolveQuickJSPoolSize, init_quickjs_pool_config, SLACK_REACTION_DEFAULTS, SLACK_REACTION_CONFIG_KEYS, reactionName, completedStatusIcon, init_reaction_shortcode, API_DRAINING_HEADER, API_DRAIN_MAX_MS_LIMIT, isApiDrainingResponse, init_api_drain, parseEnabledTools, init_enabled_tools, parseTaskToolManifest, CHAT_TASK_ONLY_TOOLS, isChatSdkTask, selectTaskTools, init_task_tool_manifest, tierConfigKey, init_model_tier_keys, isApiOnlyConfigKey, isInternalConfigKey, internalConfigKeyError, isReservedConfigKey, reservedKeyError, MAX_DB_RETENTION_DAYS, DB_RETENTION_TUNING_BOUNDS, validateRuntimeTokenTtlHours, validateControllerTokenTtlDays, validateControllerGraceSec, validateConfigValue, validateExportToEnv, init_swarm_config_guard, getDefaultAuthorizationIdForProvider, getOAuthApp, getOAuthAppById, getOAuthAppIdByProvider, createOAuthApp, updateOAuthAppById, upsertOAuthApp, listAuthorizationsForApp, getAuthorizationById, upsertAuthorization, updateAuthorizationTokens, updateAuthorizationIdentity, deleteAuthorizationById, deleteAuthorizationsForApp, createOAuthPending, consumeOAuthPending, gcOAuthPending, markAuthorizationRefreshFailed, getOAuthTokens, listAuthorizationSweepRows, listKeepAliveAuthorizations, deleteOAuthTokens, acquireOAuthRefreshLock, releaseOAuthRefreshLock, init_oauth, OpenAI2, init_openai, CANDIDATE_SET_MULTIPLIER, isGraphExpansionEnabled, EMBEDDING_DIMENSIONS, init_constants, LONGTERM_ROOT, MEMORY_KEY_PATTERN, MEMORY_KEY_PATTERN_MESSAGE, MEMORY_KEY_MAX_LENGTH, isLongtermKey, longtermKeyError, isConsolidatedKey, consolidatedKeyMessage, resolveStoreKey, init_key_paths, computeScore, rerank, init_reranker, rowToCandidate, init_sqlite_store, getEmbeddingProvider2, resetEmbeddingProvider2, getMemoryStore2, init_memory, embeddingProvider, embedScript, searchScripts, reembedAllScripts, init_embeddings, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, touchScratchScriptLastUsed, restoreScratchScriptLastUsedIfUnchanged, createScriptApi, listScriptApisForScript, getScriptApiById, getScriptApiSecret, updateScriptApi, rotateScriptApiSecret, deleteScriptApi, recordScriptApiUsage, init_db2, oauthSecretName, registerStoredSecret, loadSecretRegistry, init_secret_registry, STEERING_MOVED_ERROR, SteeringRequestError, isSteeringEnabled, getTaskSteeringFields, getTaskSteeringFieldsForTasks, promotePendingSteeringForTask, markSteeringUndeliverable, carryUnhandledSteering, requestSteering, init_steering, WorkflowReplayStateError, init_workflow_replay, SESSION_ACTIVITY_REFRESH_MIN_INTERVAL_MS2, refreshActiveSessionOnActivity2, getActiveSessionById, init_active_sessions, recordKeySeatMismatch2, getScriptRunExecutionArgs2, getSlackRenderV2ActivatedAt2, ensureSlackRenderV2Activation2, getSlackDelegationActivatedAt2, ensureSlackDelegationActivation2, isPendingSlackMessage2, isSettledSlackMessage2, recordSlackMessage2, reserveSlackMessage2, bindSlackMessageTimestamp2, updateSlackMessageRecord2, markSlackTreeRendered2, deleteSlackMessageRecord2, getSlackTreeMessage2, getSlackTreeMessageByThread2, getSlackOutcomeMessage2, getResolvableDeferralOutcomes2, markSlackDeferralResolved2, noteSlackOutcomeDeliveryFailure2, abandonSlackOutcomeDelivery2, getSlackTreeMessages2, getSlackMessageByChannelTs2, getSlackTasksInThread2, listSlackThreadsAwaitingHuman2, isSlackThreadAwaitingHuman2, markTaskSlackReplySent2, setSlackMessageTracking2, updateTaskVcs2, insertTaskAttachment2, recordTaskPullRequestAttachments2, getAssetKeyMappingByProvider2, upsertAssetKeyMapping2, getAssetKeyMapping2, listAssetSummaries2, moveAssetKey2, deleteTaskAttachment2, replaceTaskAttachment2, getTaskAttachments2, createSteeringMessage2, getSteeringMessagesForTask2, getSteeringMessageById2, getPendingSteeringForTask2, getPendingSteeringForAgent2, markSteeringDelivered2, markSteeringHandled2, markSteeringPromoted2, cancelPendingSteeringForTask2, hasPendingSteering2, getAgentWithTasks2, getAllAgentsWithTasks2, createLogEntry2, getLogsByAgentId2, getLogsByTaskId2, getLogsByTaskIdAndEventType2, getLogsByTaskIdChronological2, getLogsByEventType2, getAllLogs2, findRecentSimilarTasks2, createTaskExtended2, claimTask2, releaseTask2, acceptTask2, rejectTask2, moveTaskToBacklog2, moveTaskFromBacklog2, promoteDraftTask2, refreshDraftTaskLease2, promoteAbandonedDraftTasks2, releaseStaleReviewingTasks2, releaseStaleOfferedTasksForOfflineAgents2, getOfferedTasksForAgent2, claimOfferedTask2, getUnassignedTasksCount2, getUnassignedTaskIds2, getUnassignedTaskIdsForAgent2, checkDependencies2, getDependentTasks2, cascadeFailDependents2, updateAgentProfile2, updateAgentName2, createChannel2, getMessageById2, getChannelById2, getChannelByName2, getAllChannels2, deleteChannel2, postMessage2, getChannelMessages2, updateReadState2, getLastReadAt2, getUnreadMessages2, getMentionsForAgent2, getInboxSummary2, claimMentions2, releaseMentionProcessing2, releaseStaleMentionProcessing2, createService2, getServiceById2, getServiceByAgentAndName2, getServicesByAgentId2, getAllServices2, updateServiceStatus2, deleteService2, upsertService2, deleteServicesByAgentId2, createSessionLogs2, getSessionLogsByTaskId2, getSessionLogsBySession2, createSessionCost2, getSessionCostsByTaskId2, getSessionCostsByAgentId2, getAllSessionCosts2, getSessionCostsFiltered2, UNATTRIBUTED_USER_ID2, getSessionCostSummary2, getAttributionByPerson2, getDashboardCostSummary2, createInboxMessage2, getInboxMessageById2, getUnreadInboxMessages2, claimInboxMessages2, markInboxMessageRead2, markInboxMessageResponded2, markInboxMessageDelegated2, releaseStaleProcessingInbox2, getConcurrentContext2, getScheduledTasks2, getScheduledTaskById2, getScheduledTaskByName2, createScheduledTask2, updateScheduledTask2, deleteScheduledTask2, getDueScheduledTasks2, autoEncryptLegacyPlaintextSecrets2, maskSecrets2, getSwarmConfigs2, getInjectableGlobalConfigs2, getSwarmConfigById2, getSwarmConfigLookupById2, upsertSwarmConfig2, emitBuiltInIntegrationConnectedOnce2, deleteSwarmConfig2, deleteSwarmConfigByKey2, getResolvedConfig2, getSwarmRepos2, getSwarmRepoById2, getSwarmRepoByName2, getSwarmRepoByUrl2, createSwarmRepo2, updateSwarmRepo2, deleteSwarmRepo2, getAgentMailInboxMapping2, getAgentMailInboxMappingsByAgent2, getAllAgentMailInboxMappings2, createAgentMailInboxMapping2, deleteAgentMailInboxMapping2, findTaskByAgentMailThread2, insertActiveSession2, deleteActiveSession2, deleteActiveSessionById2, getActiveSessions2, heartbeatActiveSession2, cleanupStaleSessions2, cleanupAgentSessions2, updateActiveSessionProviderSessionId2, getActiveSessionForTask2, reassociateSessionLogs2, getStalledInProgressTasks2, getStalePinnedResumes2, failPendingResumeIfUnclaimed2, getIdleWorkersWithCapacity2, getUnassignedPoolTasks2, getStaleUnassignedAffinityTasks2, getRecentFailedTasks2, getRecentCompletedCount2, getRecentFailedCount2, createWorkflow2, getWorkflow2, listWorkflows2, updateWorkflow2, deleteWorkflow2, getWorkflowsByScheduleId2, createWorkflowRun2, getWorkflowRun2, updateWorkflowRun2, listWorkflowRuns2, countWorkflowRuns2, listWorkflowRunsPage2, createWorkflowRunStep2, getWorkflowRunStep2, updateWorkflowRunStep2, getWorkflowRunStepsByRunId2, getStuckWorkflowRuns2, getLastSuccessfulRun2, getLastRunStart2, getRetryableSteps2, getCompletedStepNodeIds2, getTaskByWorkflowRunStepId2, detachTaskFromWorkflowRunStep2, getStepByIdempotencyKey2, getStepCountForNode2, getLatestStepForNode2, getCurrentStepForNode2, createWorkflowVersion2, getWorkflowVersions2, getWorkflowVersion2, createAppVersion2, getAppVersions2, getAppVersion2, createPage2, getPage2, getPageBySlug2, getLatestPageBySlug2, listPagesByAgent2, listAllPages2, countAllPages2, countPagesByAgent2, updatePage2, deletePage2, incrementPageViewCount2, createPageVersion2, getPageVersions2, getPageVersion2, createMetric2, getMetric2, getMetricBySlug2, listMetricsByAgent2, listAllMetrics2, countAllMetrics2, countMetricsByAgent2, updateMetric2, deleteMetric2, createMetricVersion2, getMetricVersions2, getMetricVersion2, getPromptTemplates2, getPromptTemplateById2, upsertPromptTemplate2, deletePromptTemplate2, resetPromptTemplateToDefault2, getPromptTemplateHistory2, resolvePromptTemplate2, checkoutPromptTemplate2, getAllChannelActivityCursors2, getChannelActivityCursor2, upsertChannelActivityCursor2, createApprovalRequest2, getApprovalRequestById2, resolveApprovalRequest2, cancelApprovalRequestById2, cancelPendingApprovalRequestsForRun2, listCancelledApprovalRequestsForRun2, listCancelledApprovalRequestsForStep2, claimApprovalCancellationNotification2, completeApprovalCancellationNotificationClaim2, releaseApprovalCancellationNotificationClaim2, updateApprovalRequestNotifications2, listApprovalRequests2, getStuckApprovalRuns2, getApprovalRequestByStepId2, getExpiredPendingApprovals2, getStaleApprovalRequests2, createWaitState2, getWaitStateById2, getWaitStateByStepId2, getDueWaitStates2, getPendingEventWaitNames2, getPendingWaitsByEvent2, resolveWaitState2, getStuckWaitRuns2, SKILL_FILE_LIMITS2, normalizeSkillFilePath2, createSkill2, updateSkill2, listSkillFileManifest2, getSkillFiles2, getSkillFile2, upsertSkillFile2, upsertSkillFiles2, deleteSkillFile2, deleteSkill2, getSkillById2, getSkillByName2, listSkills2, searchSkills2, installSkill2, getSystemDefaultSkills2, installSystemDefaultSkillsForAgent2, uninstallSkill2, getAgentSkills2, toggleAgentSkill2, createMcpServer2, emitMcpServerConnectedTelemetry2, updateMcpServer2, deleteMcpServer2, getMcpServerById2, getMcpServerByName2, listMcpServers2, installMcpServer2, uninstallMcpServer2, getAgentMcpServers2, createContextSnapshot2, getContextSnapshotsByTaskId2, getContextSnapshotsBySessionId2, getContextSummaryByTaskId2, getAvailableKeyIndices2, recordKeyUsage2, setApiKeyPlan2, markKeyRateLimited2, recordKeyAuthFailure2, recordKeyRateLimitWindows2, setApiKeyName2, clearKeyRateLimit2, getKeyStatuses2, getKeyCostSummary2, getUserById2, getAllUsers2, createUser2, updateUser2, deleteUser2, listInboxState2, upsertInboxState2, listFavorites2, listUserFavorites2, getFavoriteItemIdSet2, setFavorite2, setUserFavorite2, withFavoriteFlags2, listTaskTemplates2, getRootTaskChain2, listRecentSessions2, countSessions2, getBudget2, getBudgets2, upsertBudget2, deleteBudget2, getAllPricingRows2, getPricingRows2, getActivePricingRow2, insertPricingRow2, deletePricingRow2, getDailySpendForAgent2, getDailySpendGlobal2, getDailySpendForUser2, recordBudgetRefusalNotification2, getBudgetRefusalNotification2, getRecentBudgetRefusalNotifications2, hasBudgetRefusalNotificationToday2, setBudgetRefusalFollowUpTaskId2, getLiveAgentCounts2, getReadyAgentCounts2, getInstanceActivity2, getSwarmMetrics2, hasFirstCompletedTask2, getKv2, sweepExpiredKv2, sweepExpiredKvPrefix2, upsertKv2, claimKv2, deleteKv2, KvTypeCollisionError2, incrKv2, kvPrefixUpperBound2, listKv2, countKv2, createScriptRun2, recordInlineScriptRun2, getScriptRun2, getScriptRunByIdempotencyKey2, listScriptRuns2, countScriptRuns2, countActiveScriptRuns2, updateScriptRun2, updateScriptRunIfNotTerminal2, updateScriptRunIfRunning2, getRunningScriptRuns2, getScriptRunJournalStep2, upsertScriptRunJournalStep2, listScriptRunJournalSteps2, countScriptRunJournalSteps2, countScriptRunJournalAgentTaskSteps2, exports_db, init_db3 };