@desplega.ai/agent-swarm 2.5.3 → 2.6.0

package/dist/{cli-aecdcr77.js → cli-4hxrf0p4.js}

@@ -17,6 +17,8 @@ import {
   agentContextKey,
   pageContextKey,
   init_context_key,
+  sessionSourceKey,
+  init_source_key,
   checkSlackRoutingCoherence,
   init_slack_routing,
   beginRequestAuthScope,
@@ -111,6 +113,11 @@ import {
   cancelTask2,
   getRecentlyCancelledTasksForAgent2,
   updateTaskProgress2,
+  getWorkflowRunSummary,
+  getWorkflowRunStepsSlimByRunId,
+  getRunLineageBlock,
+  getWorkflowRunStatus,
+  disarmWorkflowTreeRetries,
   getRunningSubWorkflowSteps,
   getSettledChildRunParentSteps,
   init_workflow_runs,
@@ -284,7 +291,6 @@ import {
   getApprovalRequestById2,
   resolveApprovalRequest2,
   cancelApprovalRequestById2,
-  listCancelledApprovalRequestsForRun2,
   getStuckApprovalRuns2,
   getDueWaitStates2,
   getStuckWaitRuns2,
@@ -337,19 +343,19 @@ import {
   recordInlineScriptRun2,
   exports_db,
   init_db3
-} from "./cli-kxawjrxg.js";
+} from "./cli-g8ka5j4j.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-99xgw26r.js";
+} from "./cli-a2rr0fmg.js";
 import {
   ensurePricingSeeded2,
   ensureRbacSeeded2,
   ensureModelProfilesSeeded2
-} from "./cli-210xd1f4.js";
+} from "./cli-03gg9pd1.js";
 import {
   loadModelsDevCache
-} from "./cli-fsdprwrg.js";
+} from "./cli-5sckpqcx.js";
 import {
   buildCatalogEntries,
   listModelCatalog,
@@ -359,12 +365,16 @@ import {
   loadModelsCatalog,
   requestModelCatalogRefresh2,
   startPricingRefreshLoop2
-} from "./cli-n45mr7zh.js";
+} from "./cli-aj8djyqt.js";
 import {
   ampPinProviderError,
   ampPinCatalogError,
   ampModelError
-} from "./cli-9s05422w.js";
+} from "./cli-bqztfyve.js";
+import {
+  workflowEventBus2,
+  init_event_bus
+} from "./cli-kt907da6.js";
 import {
   notifyAutomationPreflightFailure,
   isNeedsSetupFailure,
@@ -421,6 +431,7 @@ import {
   isForeachChildOwned,
   parkAndDriveForeach,
   runForeachDrive,
+  resolveForeachParent,
   stepFailureMode,
   generateEdges,
   resolveValidationPort,
@@ -428,7 +439,7 @@ import {
   definitionNodeIds,
   validateDefinition,
   applyDefinitionPatch
-} from "./cli-jjznk3f7.js";
+} from "./cli-3fwqy71j.js";
 import {
   require_dist2,
   publicEndpointSsrfOptions,
@@ -488,14 +499,14 @@ import {
   deleteApp,
   typecheckScript,
   parseSkillContent
-} from "./cli-p9rafdrb.js";
+} from "./cli-3gfvmzht.js";
 import {
   buildAuthorizationUrl,
   onAuthorizationRefreshed,
   ensureAuthorizationTokenOrThrow,
   ensureToken,
   ensureTokenOrThrow
-} from "./cli-egjggehm.js";
+} from "./cli-kf4jree9.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -529,18 +540,14 @@ import {
   getSlackApp2,
   startSlackApp2,
   stopSlackApp2
-} from "./cli-ce0ak9ms.js";
+} from "./cli-g20jjwt4.js";
 import {
   slackCode,
   slackMissingScopeMessage,
   withAutoJoin,
   externalChannelToolError2,
   getChannelBlockReason2
-} from "./cli-s53vp709.js";
-import {
-  workflowEventBus2,
-  init_event_bus
-} from "./cli-dabehxhp.js";
+} from "./cli-gnsb1zxa.js";
 import {
   shapeApprovalResolution,
   SubWorkflowExecutor,
@@ -554,11 +561,12 @@ import {
   retryFailedRun2,
   cancelWorkflowRunRows2,
   cancelWorkflowRun2,
+  postTreeApprovalCancellations2,
   resumeWaitState2,
   recoverResolvedWaitState2,
   resumeFromChildRun2,
   initWaitBusSubscriptions2
-} from "./cli-e2ar4bp1.js";
+} from "./cli-3aqd4jaa.js";
 import {
   duplicateGuardedQueryKey,
   parseQueryParams,
@@ -585,7 +593,7 @@ import {
   isPublicRoute,
   findRoute,
   route
-} from "./cli-1fc85mvt.js";
+} from "./cli-art7c1zh.js";
 import {
   FilesError,
   providerPath,
@@ -596,7 +604,7 @@ import {
 import {
   getRuntimePool2,
   init_db
-} from "./cli-vwn81jbs.js";
+} from "./cli-gf95q3bm.js";
 import {
   getMemoryRaterNames,
   REFERENCES_SOURCE_MAX_LENGTH,
@@ -607,7 +615,7 @@ import {
   COMPOSIO_HTTP_METHODS,
   executeComposioRequest,
   composioArgsFromParts
-} from "./cli-pasyvjmm.js";
+} from "./cli-737pyqxr.js";
 import {
   require_fast_deep_equal
 } from "./cli-bhp11egn.js";
@@ -621,7 +629,7 @@ import {
 import {
   canProvisionKind,
   init_runtime_providers
-} from "./cli-p859hcc8.js";
+} from "./cli-39aet655.js";
 import {
   findUserById,
   findUserByExternalId,
@@ -636,7 +644,7 @@ import {
   resolveSessionToken,
   fingerprintApiKey,
   init_users
-} from "./cli-e8jyq7d8.js";
+} from "./cli-esakngh8.js";
 import {
   isRbacEnabled,
   decideAdmission,
@@ -648,6 +656,7 @@ import {
 } from "./cli-4rvr7zfx.js";
 import {
   normalizeAssetKey,
+  sessionGroupKey,
   parseAssetKey,
   canWriteAssetKey,
   init_key,
@@ -705,7 +714,7 @@ import {
   KvNamespaceSchema,
   KvKeySchema,
   init_types
-} from "./cli-mz9afxxf.js";
+} from "./cli-4rf0f5vg.js";
 import {
   generateDefaultClaudeMd2,
   generateDefaultSoulMd2,
@@ -714,15 +723,19 @@ import {
   taskAttachmentFetchCommand,
   taskAttachmentDisplayUrl,
   init_task_attachment_links
-} from "./cli-gpv60278.js";
+} from "./cli-hfeb68z4.js";
+import {
+  isSteeringEnabled2,
+  init_steering_enabled
+} from "./cli-4sydckyj.js";
 import {
   getSlackConfiguration,
   init_config
 } from "./cli-qeaq3j6t.js";
 import {
-  isSteeringEnabled2,
-  init_steering_enabled
-} from "./cli-4sydckyj.js";
+  selectCredential,
+  init_credentials
+} from "./cli-1tem6ns9.js";
 import {
   findInterpolationTokens,
   interpolate,
@@ -732,7 +745,7 @@ import {
   init_registry,
   resolveTemplate,
   init_resolver
-} from "./cli-tx00c0h6.js";
+} from "./cli-dqygeeh5.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -774,7 +787,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-y561h5a9.js";
+} from "./cli-nn6vx2mq.js";
 import {
   realtimeBus,
   init_bus
@@ -808,7 +821,7 @@ import {
   registerVolatileSecret,
   registerSensitiveKeyName,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   isAlias,
   parseAlias,
@@ -822,7 +835,7 @@ import {
   openAICompatibleProviderIds,
   claudeCatalogModelId,
   init_src2
-} from "./cli-nwyw3zhg.js";
+} from "./cli-gxee0bqa.js";
 import {
   __toESM,
   __commonJS,
@@ -20082,6 +20095,7 @@ async function poolHarnessModelError(model) {
 // src/extensions/apply-task-create.ts
 init_types();
 init_secret_scrubber();
+init_event_bus();
 
 // src/extensions/dispatcher.ts
 init_db_client();
@@ -20247,6 +20261,8 @@ async function completeIfSettled(runId, ctx) {
     const run = await getWorkflowRun2(runId);
     if (run?.status !== "running")
       return false;
+    if (await getRunLineageBlock(runId))
+      return false;
     const steps = await getWorkflowRunStepsByRunId2(runId);
     if (retryPendingNodeIds(steps).size > 0)
       return false;
@@ -20439,6 +20455,7 @@ async function getRunIdsByStatus(status) {
 }
 // src/workflows/retry-poller.ts
 init_db3();
+init_workflow_runs();
 var pollerTimeout = null;
 function startRetryPoller(registry, intervalMs = 5000) {
   if (pollerTimeout !== null)
@@ -20455,6 +20472,14 @@ function startRetryPoller(registry, intervalMs = 5000) {
           const workflow = await getWorkflow2(run.workflowId);
           if (!workflow)
             continue;
+          const foreachParent = resolveForeachParent(workflow.definition, step.nodeId);
+          if (foreachParent) {
+            if (!await claimRetry(run.id, step.id, { requeueForeachChild: true }))
+              continue;
+            console.log(`[workflows] Retrying foreach item ${step.nodeId} (attempt ${step.retryCount}) for run ${step.runId}`);
+            await runForeachDrive(run.id, foreachParent.id, registry);
+            continue;
+          }
           const node = workflow.definition.nodes.find((n) => n.id === step.nodeId);
           if (!node)
             continue;
@@ -20512,7 +20537,7 @@ function startRetryPoller(registry, intervalMs = 5000) {
               if (!waiting)
                 continue;
               if (result.waitFor === "workflow.child.finished") {
-                const { resumeFromChildRun } = await import("./resume-2dvq348g.js");
+                const { resumeFromChildRun } = await import("./resume-8ayf37g5.js");
                 await resumeFromChildRun(step.id, registry);
               }
             } else {
@@ -20571,13 +20596,23 @@ function startRetryPoller(registry, intervalMs = 5000) {
   }
   pollerTimeout = setTimeout(poll, intervalMs);
 }
-async function claimRetry(runId, stepId) {
+async function claimRetry(runId, stepId, options = {}) {
   return getDbClient2().transaction(async () => {
     const run = await getWorkflowRun2(runId);
     if (!run || !RETRYABLE_RUN_STATUSES.has(run.status))
       return false;
+    if (await getRunLineageBlock(runId)) {
+      await disarmWorkflowTreeRetries([runId], new Date().toISOString());
+      return false;
+    }
+    if (options.requeueForeachChild && run.status === "failed") {
+      await getDbClient2().run(`UPDATE workflow_run_steps SET nextRetryAt = NULL, finishedAt = ?
+          WHERE id = ? AND runId = ? AND status = 'failed' AND nextRetryAt IS NOT NULL`, [new Date().toISOString(), stepId, runId]);
+      return false;
+    }
+    const set = options.requeueForeachChild ? "status = 'pending', nextRetryAt = NULL, error = NULL" : "status = 'running', nextRetryAt = NULL";
     const claimed = await getDbClient2().get(`UPDATE workflow_run_steps
-          SET status = 'running', nextRetryAt = NULL
+          SET ${set}
         WHERE id = ? AND runId = ? AND status = 'failed' AND nextRetryAt IS NOT NULL
         RETURNING id`, [stepId, runId]);
     if (!claimed)
@@ -20593,6 +20628,8 @@ async function completeRunIfSettled(runId, ctx) {
     const run = await getWorkflowRun2(runId);
     if (!run || run.status !== "running" && run.status !== "waiting")
       return;
+    if (await getRunLineageBlock(runId))
+      return;
     const steps = await getWorkflowRunStepsByRunId2(runId);
     const live = steps.some((s) => s.status === "running" || s.status === "waiting" || s.status === "failed" && s.nextRetryAt != null);
     if (live)
@@ -21183,7 +21220,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp } = await import("./app-ag29n14f.js");
+        const { getSlackApp } = await import("./app-k8a5cgpp.js");
         const app = getSlackApp();
         if (!app) {
           return {
@@ -24567,7 +24604,7 @@ function setPreloadedTools(server, names) {
 async function applyPreToolCall(name, args, requestInfo, inputSchema) {
   if (requestInfo.callOrigin !== "mcp")
     return { args };
-  const dispatcher = await import("./dispatcher-nwf9ss0q.js");
+  const dispatcher = await import("./dispatcher-pv5h77vf.js");
   const result = await dispatcher.dispatchPre("pre.tool.call", { tool: name, args, requestInfo }, inputSchema ? {
     validateModify: async (data) => {
       const schema = normalizeObjectSchema(inputSchema) ?? inputSchema;
@@ -25179,7 +25216,13 @@ function bridgeRequestFor(name, args) {
       const id = typeof body.id === "string" ? body.id : undefined;
       if (!id)
         throw new Error("workflow_getRun requires string `id`");
-      return { method: "GET", path: `/api/workflow-runs/${encodeURIComponent(id)}` };
+      if (body.fields !== undefined && body.fields !== "full" && body.fields !== "slim") {
+        throw new Error('workflow_getRun `fields` must be "full" or "slim"');
+      }
+      return {
+        method: "GET",
+        path: appendQuery(`/api/workflow-runs/${encodeURIComponent(id)}`, { fields: body.fields })
+      };
     }
     case "workflow_delete": {
       const id = typeof body.id === "string" ? body.id : undefined;
@@ -25602,6 +25645,10 @@ var onTaskCreated = observed("task.created", async (data) => {
   if (task)
     await dispatchPost2("post.task.created", { task }, { skipExtensionId: extensionIdForAgent2(task.creatorAgentId) });
 });
+var onTaskBlocked = observed("task.create_blocked", async (data) => {
+  const { skipExtensionId, ...event } = data;
+  await dispatchPost2("post.task.blocked", event, { skipExtensionId });
+});
 var onTaskCompleted = observed("task.completed", async (data) => {
   const task = await taskFrom(data);
   if (!task)
@@ -25829,6 +25876,7 @@ function initExtensionPostBridge() {
     return;
   subscribed = true;
   workflowEventBus2.on("task.created", onTaskCreated);
+  workflowEventBus2.on("task.create_blocked", onTaskBlocked);
   workflowEventBus2.on("task.completed", onTaskCompleted);
   workflowEventBus2.on("task.failed", onTaskFailed);
   workflowEventBus2.on("task.cancelled", onTaskCancelled);
@@ -25849,6 +25897,7 @@ function teardownExtensionPostBridge() {
     return;
   subscribed = false;
   workflowEventBus2.off("task.created", onTaskCreated);
+  workflowEventBus2.off("task.create_blocked", onTaskBlocked);
   workflowEventBus2.off("task.completed", onTaskCompleted);
   workflowEventBus2.off("task.failed", onTaskFailed);
   workflowEventBus2.off("task.cancelled", onTaskCancelled);
@@ -26384,6 +26433,10 @@ function runContext2(event, payload) {
       agentId = requestAgent ?? stringField(payload, "options", "agentId");
       subject = `${stringField(payload, "origin") ?? "?"}: ${snippet(field(payload, "description"))}`;
       break;
+    case "post.task.blocked":
+      agentId = stringField(payload, "requester", "agentId");
+      subject = `${stringField(payload, "origin") ?? "?"}: ${stringField(payload, "extension", "name") ?? "?"}`;
+      break;
     case "pre.task.followUp":
       agentId = stringField(payload, "workerAgentId");
       subject = `task ${stringField(payload, "completedTask", "id") ?? "?"} ${stringField(payload, "status") ?? ""}`.trim();
@@ -26665,16 +26718,55 @@ var MODIFIABLE_OPTION_KEY_SET = new Set(MODIFIABLE_OPTION_KEYS);
 function warnDroppedKey(extensionName, key) {
   console.warn(scrubSecrets(`[extensions] pre.task.create ignored disallowed key "${key}" from extension "${extensionName}"`));
 }
+function scrubFields(fields) {
+  return Object.fromEntries(Object.entries(fields).filter(([, value]) => value !== undefined).map(([key, value]) => [key, typeof value === "string" ? scrubSecrets(value) : value]));
+}
 async function applyPreTaskCreate(args) {
   const creatingExtensionId = extensionIdForAgent2(args.requestInfo?.agentId);
   const creatingExtension = creatingExtensionId ? listRegistered2().find((loaded) => loaded.record.id === creatingExtensionId) : undefined;
   const origin = creatingExtension ? `extension:${creatingExtension.record.name}` : args.origin;
+  const blocked = (reason, extension) => {
+    const { options, requestInfo } = args;
+    const event = {
+      extension,
+      reason: scrubSecrets(reason),
+      origin,
+      source: options.source,
+      requester: scrubFields({
+        userId: options.requestedByUserId,
+        agentId: requestInfo?.agentId ?? options.creatorAgentId,
+        slackUserId: options.slackUserId
+      }),
+      context: scrubFields({
+        contextKey: options.contextKey ?? requestInfo?.contextKey,
+        scheduleId: options.scheduleId,
+        workflowRunId: options.workflowRunId,
+        workflowRunStepId: options.workflowRunStepId,
+        parentTaskId: options.parentTaskId,
+        vcsRepo: options.vcsRepo,
+        vcsNumber: options.vcsNumber,
+        slackChannelId: options.slackChannelId,
+        slackThreadTs: options.slackThreadTs
+      }),
+      description: scrubSecrets(args.description).slice(0, 500)
+    };
+    try {
+      workflowEventBus2.emit("task.create_blocked", {
+        ...event,
+        skipExtensionId: creatingExtensionId
+      });
+    } catch (error) {
+      console.error("[extensions] task.create_blocked event not emitted:", scrubSecrets(error instanceof Error ? error.message : String(error)));
+    }
+    return { kind: "blocked", reason: event.reason, extension };
+  };
   let modelEditor;
   const result = await dispatchPre2("pre.task.create", {
     description: args.description,
     options: args.options,
     origin,
-    requestInfo: args.requestInfo
+    requestInfo: args.requestInfo,
+    ...args.slack ? { slack: args.slack } : {}
   }, {
     skipExtensionId: creatingExtensionId,
     transformModify: ({ data, currentPayload, extension }) => {
@@ -26703,11 +26795,7 @@ async function applyPreTaskCreate(args) {
     }
   });
   if (result.action === "block") {
-    return {
-      kind: "blocked",
-      reason: result.reason,
-      extension: result.extension
-    };
+    return blocked(result.reason, result.extension);
   }
   if (result.action === "continue") {
     return { kind: "proceed", description: args.description, options: args.options };
@@ -26721,11 +26809,7 @@ async function applyPreTaskCreate(args) {
       agentId: options.agentId
     });
     if (modelError) {
-      return {
-        kind: "blocked",
-        reason: `pre.task.create rewrite from extension "${modelEditor.name}" is invalid: ${modelError}`,
-        extension: modelEditor
-      };
+      return blocked(`pre.task.create rewrite from extension "${modelEditor.name}" is invalid: ${modelError}`, modelEditor);
     }
   }
   return {
@@ -26888,7 +26972,8 @@ async function prepareTaskWithSiblingAwareness(description, options, args = {})
     description,
     options,
     origin: args.origin ?? "rest",
-    allowCustomModel: args.allowCustomModel
+    allowCustomModel: args.allowCustomModel,
+    slack: args.slack
   });
   if (preCreate.kind === "blocked") {
     throw new TaskCreationBlockedError(preCreate.reason, preCreate.extension);
@@ -32254,8 +32339,31 @@ function resetDiscordGatewayHealth() {
 
 // src/integrations/chat-sdk/inbound.ts
 init_zod();
+init_key();
+init_source_key();
 init_db3();
 
+// src/be/db/session-labels.ts
+init_db3();
+var NAMESPACE = "session-labels";
+async function getSessionLabels(keys) {
+  if (keys.length === 0)
+    return {};
+  const rows = await getDbClient2().query(`SELECT key, value FROM kv_entries
+     WHERE namespace = ? AND key IN (${keys.map(() => "?").join(", ")})
+       AND (expires_at IS NULL OR expires_at > ?)`, [NAMESPACE, ...keys, Date.now()]);
+  return Object.fromEntries(rows.map((row) => [row.key, row.value]));
+}
+async function rememberSessionLabel(key, label, ttlMs) {
+  await upsertKv2({
+    namespace: NAMESPACE,
+    key,
+    value: label,
+    valueType: "string",
+    expiresAt: ttlMs === undefined ? null : Date.now() + ttlMs
+  });
+}
+
 // src/be/unmapped-identities.ts
 init_db3();
 var TTL_MS = 30 * 24 * 60 * 60 * 1000;
@@ -32359,6 +32467,7 @@ function backingProviderId(attachment) {
 }
 
 // src/utils/transcription.ts
+init_credentials();
 init_secret_scrubber();
 var TRANSCRIPTION_TIMEOUT_MS = 60000;
 var TRANSCRIPTION_API_KEY_ENV = "TRANSCRIPTION_API_KEY";
@@ -32421,7 +32530,8 @@ function resolveTranscriptionConfig() {
   const candidates = pinned ? AUTO_DETECT_ORDER.filter((name) => name === pinned) : AUTO_DETECT_ORDER;
   for (const name of candidates) {
     const { keyEnv } = PROVIDERS[name];
-    const apiKey = envValue(keyEnv);
+    const value = envValue(keyEnv);
+    const apiKey = value ? selectCredential(value, undefined, keyEnv).selected : undefined;
     if (apiKey)
       return { provider: name, apiKey, keyEnv, source: "auto" };
   }
@@ -33503,6 +33613,16 @@ async function targetFromExtension(target) {
     }
   }
 }
+function chatSourceLabel(adapter, item) {
+  if (adapter !== "telegram" && adapter !== "discord")
+    return;
+  const { facts } = item;
+  if (facts.chatType === "dm" || item.isDirectMessage)
+    return facts.from ? `DM · ${facts.from}` : undefined;
+  if (adapter === "telegram" && (facts.chatType === "group" || facts.chatType === "supergroup"))
+    return facts.title || undefined;
+  return;
+}
 async function flushChatThread(threadId, items, immediate) {
   let __stack = [];
   try {
@@ -33620,6 +33740,7 @@ ${combined}` : combined;
     const latestActive = await getLatestActiveTaskByContextKey2(contextKey, "chat");
     const dependsOn = !immediate && latestActive ? [latestActive.id] : undefined;
     let created = 0;
+    let sourceKey = null;
     for (const match of target.matches) {
       const options = {
         agentId: match.agent?.id ?? null,
@@ -33640,6 +33761,7 @@ ${combined}` : combined;
       };
       try {
         const { task, unattached } = await createChatTaskWithFiles(description, options, inbound);
+        sourceKey ??= sessionSourceKey(task);
         created++;
         console.log(`[chat-sdk] ${threadId}: task ${task.id} for ${match.agent ? `agent ${match.agent.id}` : "no agent (queued)"} (${match.matchedText}, dependsOn: ${dependsOn?.join(", ") ?? "none"}${unattached.length ? `, ${unattached.length} file(s) not attached` : ""})`);
       } catch (error) {
@@ -33650,6 +33772,12 @@ ${combined}` : combined;
         }
       }
     }
+    const label = chatSourceLabel(adapter, requester);
+    if (sourceKey && label) {
+      await rememberSessionLabel(sessionGroupKey(sourceKey), label).catch(() => {
+        console.warn("[chat-sdk] Could not save a session source label");
+      });
+    }
     if (created > 0) {
       await rememberChatThreadRequester(threadId, requester.userId);
       await subscribe(thread);
@@ -34958,7 +35086,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp } = await import("./app-ag29n14f.js");
+    const { getSlackApp } = await import("./app-k8a5cgpp.js");
     const app = getSlackApp();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -35029,7 +35157,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDbClient } = await import("./db-24ck09xy.js");
+  const { getDbClient } = await import("./db-w36wwb5g.js");
   await getDbClient().transaction(async (tx) => {
     const row = await tx.get("SELECT metadata FROM oauth_apps WHERE provider = 'jira'");
     if (!row) {
@@ -108382,6 +108510,10 @@ var SCALAR_HTML = `<!DOCTYPE html>
 
 // src/http/core.ts
 var injectedEnvOriginals = new Map;
+function getDeploymentEnvValue(key) {
+  const tracked = injectedEnvOriginals.get(key);
+  return tracked && process.env[key] === tracked.injected ? tracked.original : process.env[key];
+}
 async function loadGlobalConfigsIntoEnv(override = false) {
   const globalConfigs = await getInjectableGlobalConfigs2();
   const updated = [];
@@ -108424,7 +108556,7 @@ async function reloadGlobalConfigsAndIntegrations() {
   return runWithoutRequestAuth(() => reloadGlobalConfigsAndIntegrationsInner());
 }
 async function reloadGlobalConfigsAndIntegrationsInner() {
-  const { getEmbeddingProvider, resetEmbeddingProvider } = await import("./index-1r8wfpzs.js");
+  const { getEmbeddingProvider, resetEmbeddingProvider } = await import("./index-g6k9tctj.js");
   const wasEmbeddingsConfigured = getEmbeddingProvider().isConfigured();
   const updated = await loadGlobalConfigsIntoEnv(true);
   await syncTelemetryEnabled("settings").catch((err) => {
@@ -108440,10 +108572,10 @@ async function reloadGlobalConfigsAndIntegrationsInner() {
     integrations.push("embeddings");
   }
   if (!wasEmbeddingsConfigured && isEmbeddingsConfigured) {
-    import("./boot-reembed-5b3d2eea.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+    import("./boot-reembed-f4nn561n.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
       console.error("[config-reload] memory backfill failed (non-fatal):", err);
     });
-    import("./boot-reembed-jsmfrpzf.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+    import("./boot-reembed-6c1sjfnr.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
       console.error("[config-reload] script backfill failed (non-fatal):", err);
     });
   }
@@ -113453,6 +113585,7 @@ init_db3();
 
 // src/workflows/approval-cancel.ts
 init_db3();
+init_workflow_runs();
 init_rbac();
 var LIVE_RUN_STATUSES = new Set(["running", "waiting"]);
 async function cancelApprovalRequest(input) {
@@ -113527,19 +113660,23 @@ async function cancelApprovalRequestAndRun(id, data) {
     if (!request)
       return null;
     let runCancelled = false;
+    let treeRunIds = [];
     const runId = request.workflowRunId;
     if (runId) {
-      const run = await getWorkflowRun2(runId);
-      if (run && LIVE_RUN_STATUSES.has(run.status)) {
-        runCancelled = await cancelWorkflowRunRows2(runId, data.reason);
+      const status = await getWorkflowRunStatus(runId);
+      if (status && LIVE_RUN_STATUSES.has(status)) {
+        const result = await cancelWorkflowRunRows2(runId, data.reason);
+        runCancelled = result.cancelled;
+        treeRunIds = result.runIds;
       }
     }
     const slackReason = data.slackReason ?? data.reason;
     client.afterCommit(async () => {
       await postApprovalCancellationUpdates([request], slackReason);
-      if (runCancelled && runId) {
-        const others = (await listCancelledApprovalRequestsForRun2(runId)).filter((row) => row.id !== request.id);
-        await postApprovalCancellationUpdates(others, data.reason);
+      if (runCancelled) {
+        await postTreeApprovalCancellations2(treeRunIds, data.reason, {
+          exceptRequestId: request.id
+        });
       }
     });
     return { request, runCancelled };
@@ -118111,6 +118248,7 @@ var getTasksInputSchema = object2({
   tags: array2(string2()).optional().describe("Filter by any matching tag."),
   search: string2().optional().describe("Search in task description."),
   scheduleId: string2().uuid().optional().describe("Filter by schedule ID to find tasks created by a specific schedule."),
+  workflowRunId: string2().uuid().optional().describe("Filter by workflow run ID to find the tasks of a single run."),
   key: AssetKeySchema.optional().describe("Filter by exact logical namespace."),
   keyPrefix: AssetKeySchema.optional().describe("Filter by namespace subtree."),
   includeHeartbeat: boolean().optional().describe("Include heartbeat/system tasks in results (excluded by default)."),
@@ -118155,6 +118293,7 @@ async function getTasksHandler(ctx, {
   tags,
   search,
   scheduleId,
+  workflowRunId,
   key,
   keyPrefix,
   includeHeartbeat,
@@ -118172,6 +118311,7 @@ async function getTasksHandler(ctx, {
     tags,
     search,
     scheduleId,
+    workflowRunId,
     key,
     keyPrefix,
     includeHeartbeat,
@@ -118214,6 +118354,8 @@ async function getTasksHandler(ctx, {
     filters.push(`search='${search}'`);
   if (scheduleId)
     filters.push(`scheduleId='${scheduleId}'`);
+  if (workflowRunId)
+    filters.push(`workflowRunId='${workflowRunId}'`);
   if (key)
     filters.push(`key='${key}'`);
   if (keyPrefix)
@@ -118430,11 +118572,19 @@ var RESERVED_FAMILIES = new Map([
   ["comb", "namespace is reserved for Comb; use POST /api/comb/review-batches"],
   ["heartbeat-checklist", "namespace is reserved for heartbeat checklist receipts"],
   ["worker", "namespace is reserved for worker nudges"],
-  ["slack-external-alert", "namespace is reserved for Slack external channel alerts"]
+  ["slack-external-alert", "namespace is reserved for Slack external channel alerts"],
+  [
+    "session-labels",
+    "namespace is reserved for session source labels; GET /api/session-tree returns them"
+  ]
 ]);
+var PRIVATE_FAMILIES = new Set(["session-labels"]);
 function reservedNamespaceError(namespace) {
   return RESERVED_FAMILIES.get(namespace.split(":", 1)[0] ?? "") ?? null;
 }
+function privateNamespaceError(namespace) {
+  return PRIVATE_FAMILIES.has(namespace.split(":", 1)[0] ?? "") ? reservedNamespaceError(namespace) : null;
+}
 function reservedRoomKeyError(key) {
   return key.startsWith("_room/") ? "room snapshot keys are reserved; use the room endpoints" : null;
 }
@@ -118539,7 +118689,7 @@ init_types();
 
 // src/tools/kv/kv-read-auth.ts
 function kvReadAuthError(namespace, info) {
-  return mcpOverflowAuthError(namespace, info.agentId);
+  return privateNamespaceError(namespace) ?? mcpOverflowAuthError(namespace, info.agentId);
 }
 
 // src/tools/kv/kv-get.ts
@@ -133076,13 +133226,14 @@ async function downloadSlackFile(file, token, path) {
     return `download failed (${errorText2(error)})`;
   }
 }
-async function createSlackTaskWithFiles(description, options, inbound) {
+async function createSlackTaskWithFiles(description, options, inbound, slack) {
   noteSlackInboundSideEffect("task_created");
+  const context = { origin: "slack", slack };
   if (inbound.fetched.length === 0) {
-    const task = await createTaskWithSiblingAwareness(description, options, { origin: "slack" });
+    const task = await createTaskWithSiblingAwareness(description, options, context);
     return { task, unattached: inbound.failed };
   }
-  const task = await createTaskWithSiblingAwareness(description, { ...options, status: "draft" }, { origin: "slack" });
+  const task = await createTaskWithSiblingAwareness(description, { ...options, status: "draft" }, context);
   const unattached = [...inbound.failed];
   const lease = setInterval(() => {
     refreshDraftTaskLease2(task.id).catch((error) => console.warn(`[Slack] could not renew the draft lease of task ${task.id}: ${errorText2(error)}`));
@@ -135374,7 +135525,7 @@ async function emitBudgetRefusalSideEffects(ctx, inserted) {
       console.warn(`[budget-refusal-notify] Failed to create follow-up task for budget refusal (task=${ctx.task.id.slice(0, 8)}): ${err}`);
     }
   }
-  import("./event-bus-3z78ep5n.js").then(({ workflowEventBus }) => {
+  import("./event-bus-pghg8hqy.js").then(({ workflowEventBus }) => {
     workflowEventBus.emit("task.budget_refused", {
       taskId: ctx.task.id,
       agentId: ctx.agentId,
@@ -135406,7 +135557,7 @@ var TaskActionSchema = _enum2([
 var taskActionInputSchema = object2({
   action: TaskActionSchema.describe("The action to perform: 'create' creates an unassigned task, 'claim' takes a task from pool, 'release' returns task to pool, 'accept' accepts offered task, 'reject' declines offered task, 'to_backlog' moves task to backlog, 'from_backlog' moves task from backlog to pool."),
   task: string2().min(1).optional().describe("Task description (required for 'create')."),
-  key: AssetKeySchema.optional().describe("Logical namespace for a created task. Defaults to a shared/task:<id>/ resource key."),
+  key: AssetKeySchema.optional().describe("Logical namespace for a created task. Default: the Slack or chat source key of the task (for example shared/slack/<channel>/thread:<ts>/), else shared/task:<id>/."),
   taskType: string2().max(50).optional().describe("Task type (e.g., 'bug', 'feature')."),
   tags: array2(string2()).optional().describe("Tags for filtering (e.g., ['urgent', 'frontend'])."),
   priority: number2().int().min(0).max(100).optional().describe("Priority 0-100, default 50."),
@@ -136360,7 +136511,7 @@ var registerCancelWorkflowRunTool = (server) => {
   createToolRegistrar(server)("cancel-workflow-run", {
     title: "Cancel Workflow Run",
     annotations: { destructiveHint: true },
-    description: "Cancel a running or waiting workflow run. Cancels all non-terminal steps and their associated tasks.",
+    description: "Cancel a running or waiting workflow run and every child run below it. Cancels their non-terminal steps, tasks, pending approvals and queued retries in one transaction; finished child runs keep their status. Repeating the cancel on a cancelled run finishes any child runs still open.",
     inputSchema: object2({
       runId: string2().uuid().describe("Workflow run ID to cancel"),
       reason: string2().optional().describe("Optional reason for cancellation")
@@ -136560,6 +136711,7 @@ var registerGetWorkflowTool = (server) => {
 // src/tools/workflows/get-workflow-run.ts
 init_zod();
 init_db3();
+init_workflow_runs();
 var STEP_VALUE_CAP = 400;
 function stepValuePreview(value) {
   if (value === undefined || value === null)
@@ -136591,19 +136743,21 @@ var registerGetWorkflowRunTool = (server) => {
     annotations: { destructiveHint: false },
     description: "Get details of a workflow run by ID, including all steps and their statuses.",
     inputSchema: object2({
-      id: string2().uuid().describe("Workflow run ID")
+      id: string2().uuid().describe("Workflow run ID"),
+      fields: _enum2(["full", "slim"]).optional().describe("`slim` omits run.context and each step's input (a context snapshot per step, large in runs with loops). Outputs, errors and retry fields stay. Default: full.")
     }),
     outputSchema: swarmToolOutputSchema({
       run: unknown().optional(),
       steps: array2(unknown()).optional()
     })
-  }, async ({ id }) => {
+  }, async ({ id, fields }) => {
     try {
-      const run = await getWorkflowRun2(id, "display");
+      const slim = fields === "slim";
+      const run = slim ? await getWorkflowRunSummary(id) : await getWorkflowRun2(id, "display");
       if (!run) {
         return toolErr(`Workflow run not found: ${id}`, { data: { steps: [] } });
       }
-      const steps = await getWorkflowRunStepsByRunId2(id, "display");
+      const steps = slim ? await getWorkflowRunStepsSlimByRunId(id) : await getWorkflowRunStepsByRunId2(id, "display");
       return toolOk(`Run ${id} status: ${run.status}.`, {
         details: renderSteps(steps),
         data: { run, steps }
@@ -137472,4 +137626,4 @@ async function createServer(opts = {}) {
   return server;
 }
 
-export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, resolveIdentity, renderIdentity, createAdditiveBuffer, taskModelPin, resumedTaskModelSelection, listHarnessModelSupport, recordHarnessModelSupport, agentRanModel, getAgentHarnessCliVersion, setAgentHarnessCliVersion, sanitizeModelTierOverrides, parseModelTierOverridesHeader, setAgentModelTierOverrides, previewModelTiers, recordClaimModelResolution, harnessModelErrorFor, poolTaskRunsOnHarness, explicitModelError, explicitModelErrorForAgent, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, scopeFromAttachment, backingProviderId, transcribeAudioNotes, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, isRuntimePoolWakeable, isAgentReachable, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, recoverIncompleteRuns, handleWebhookTrigger, verifyHmacSignature, WebhookError, snapshotAndUpdateWorkflow, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry2, initWorkflows2, dispatchScheduleTarget, calculateNextRun2, startScheduler2, stopScheduler2, runScheduleNow2, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, hasKvViewArgs, resolveKvView, toolErr, createToolRegistrar, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError2, isRegistered2, isExtensionAgentId2, getExtensionBridgeToken2, resolveBridgeCallOrigin2, extensionIdForAgent2, runContext2, registerLoaded2, unregister2, listRegistered2, dispatchPre2, dispatchPost2, stripSiblingBlock, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, isAzureDevOpsEnabled, initAzureDevOps, verifyAzureDevOpsWebhook, repointTrackerSyncBySwarmId, isAzureDevOpsUrl, canonicalAzureDevOpsRepoUrl, parseAzureDevOpsRepoUrl, createdPullRequestOf, commentedPayloadOf, handlePullRequestCreated, handlePullRequestCommented, handleWorkItemCreated, handleWorkItemUpdated, handleWorkItemCommented, handleWorkItemDeleted, handleWorkItemRestored, initAzureDevOpsOutbound, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, getTelemetryIngestAnchor, initApiTelemetry, syncTelemetryEnabled, isBitbucketEnabled, initBitbucket, verifyBitbucketWebhook, isDuplicateDelivery, markDeliveryProcessed, pullRequestEventOf, pullRequestCommentEventOf, handlePullRequestCreated2, handlePullRequestCommentCreated, handlePullRequestClosed, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2, handleNote, handlePipeline, isChatSdkEnabled, getChatSdkConfig, errorMessage, resolveAdapterApiUrl, trackBackground, TelegramBotApiError, callTelegramBotApi, isTrustedTeamsServiceUrl, isChatSdkStopping, startChatSdk, getChatInstance, isChatAdapterConfigured, getChatSdkHealth, stopChatSdk, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, isCookieSafePageId, extractPageSession, extractLegacyPageSession, extractAndVerifyCookie, pageSessionSetCookies, resolveHttpRequestAuth, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, MCP_MAX_TOOL_INPUT_ELEMENTS, MCP_MAX_REQUEST_BODY_BYTES, userCtx, requestPrincipal, agentFirstPrincipal, rejectGuest, handleApps, cancelApprovalRequest, cancelApprovalRequestAndRun, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, getPageEditCounter, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, MemoryKeyError, refreshLinks, indexMemoryContent, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, inheritedModelSelection, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, reservedRoomKeyError, updateMcpServerChecked, updateTouchesStdioExecution, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, isApiDraining, drainApi, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, changesAllowMerge, updateSwarmRepoChecked, getCombConfig, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, sessionAccessTopic, sessionPresenceRoot, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, MEMORY_KEYS_DEFAULT_PREFIX, MEMORY_KEYS_MAX_LIMIT, estimateTokens, posteriorMean, listMemoryKeys, checkChunkIntegrity, getMemoryChunks, getPosteriorsByIds, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, workflowModelErrors, patchWorkflowDefinition, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };
+export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, resolveIdentity, renderIdentity, createAdditiveBuffer, taskModelPin, resumedTaskModelSelection, listHarnessModelSupport, recordHarnessModelSupport, agentRanModel, getAgentHarnessCliVersion, setAgentHarnessCliVersion, sanitizeModelTierOverrides, parseModelTierOverridesHeader, setAgentModelTierOverrides, previewModelTiers, recordClaimModelResolution, harnessModelErrorFor, poolTaskRunsOnHarness, explicitModelError, explicitModelErrorForAgent, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, scopeFromAttachment, backingProviderId, transcribeAudioNotes, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, isRuntimePoolWakeable, isAgentReachable, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, recoverIncompleteRuns, handleWebhookTrigger, verifyHmacSignature, WebhookError, snapshotAndUpdateWorkflow, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry2, initWorkflows2, dispatchScheduleTarget, calculateNextRun2, startScheduler2, stopScheduler2, runScheduleNow2, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, hasKvViewArgs, resolveKvView, toolErr, createToolRegistrar, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError2, isRegistered2, isExtensionAgentId2, getExtensionBridgeToken2, resolveBridgeCallOrigin2, extensionIdForAgent2, runContext2, registerLoaded2, unregister2, listRegistered2, dispatchPre2, dispatchPost2, stripSiblingBlock, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, isAzureDevOpsEnabled, initAzureDevOps, verifyAzureDevOpsWebhook, repointTrackerSyncBySwarmId, isAzureDevOpsUrl, canonicalAzureDevOpsRepoUrl, parseAzureDevOpsRepoUrl, createdPullRequestOf, commentedPayloadOf, handlePullRequestCreated, handlePullRequestCommented, handleWorkItemCreated, handleWorkItemUpdated, handleWorkItemCommented, handleWorkItemDeleted, handleWorkItemRestored, initAzureDevOpsOutbound, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, getTelemetryIngestAnchor, initApiTelemetry, syncTelemetryEnabled, isBitbucketEnabled, initBitbucket, verifyBitbucketWebhook, isDuplicateDelivery, markDeliveryProcessed, pullRequestEventOf, pullRequestCommentEventOf, handlePullRequestCreated2, handlePullRequestCommentCreated, handlePullRequestClosed, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2, handleNote, handlePipeline, isChatSdkEnabled, getChatSdkConfig, errorMessage, resolveAdapterApiUrl, trackBackground, TelegramBotApiError, callTelegramBotApi, isTrustedTeamsServiceUrl, getSessionLabels, rememberSessionLabel, isChatSdkStopping, startChatSdk, getChatInstance, isChatAdapterConfigured, getChatSdkHealth, stopChatSdk, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, isCookieSafePageId, extractPageSession, extractLegacyPageSession, extractAndVerifyCookie, pageSessionSetCookies, resolveHttpRequestAuth, getDeploymentEnvValue, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, MCP_MAX_TOOL_INPUT_ELEMENTS, MCP_MAX_REQUEST_BODY_BYTES, userCtx, requestPrincipal, agentFirstPrincipal, rejectGuest, handleApps, cancelApprovalRequest, cancelApprovalRequestAndRun, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, getPageEditCounter, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, MemoryKeyError, refreshLinks, indexMemoryContent, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, inheritedModelSelection, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, privateNamespaceError, reservedRoomKeyError, updateMcpServerChecked, updateTouchesStdioExecution, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, isApiDraining, drainApi, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, changesAllowMerge, updateSwarmRepoChecked, getCombConfig, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, sessionAccessTopic, sessionPresenceRoot, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, MEMORY_KEYS_DEFAULT_PREFIX, MEMORY_KEYS_MAX_LIMIT, estimateTokens, posteriorMean, listMemoryKeys, checkChunkIntegrity, getMemoryChunks, getPosteriorsByIds, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, workflowModelErrors, patchWorkflowDefinition, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };