@desplega.ai/agent-swarm 2.5.4 → 2.7.0

package/dist/{cli-asq5ydm4.js → cli-6a9qfa8b.js}

@@ -17,6 +17,8 @@ import {
   agentContextKey,
   pageContextKey,
   init_context_key,
+  sessionSourceKey,
+  init_source_key,
   checkSlackRoutingCoherence,
   init_slack_routing,
   beginRequestAuthScope,
@@ -111,6 +113,13 @@ import {
   cancelTask2,
   getRecentlyCancelledTasksForAgent2,
   updateTaskProgress2,
+  IdempotencyKeyTakenError,
+  workflowRequestFingerprint,
+  findAcceptedWorkflowOperation,
+  recordAcceptedWorkflowOperation,
+  init_workflow_idempotency,
+  getWorkflowRunSummary,
+  getWorkflowRunStepsSlimByRunId,
   getRunLineageBlock,
   getWorkflowRunStatus,
   disarmWorkflowTreeRetries,
@@ -339,19 +348,19 @@ import {
   recordInlineScriptRun2,
   exports_db,
   init_db3
-} from "./cli-jb30dzvk.js";
+} from "./cli-48gxjmcz.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-ff1tm9n9.js";
+} from "./cli-8wmj18cz.js";
 import {
   ensurePricingSeeded2,
   ensureRbacSeeded2,
   ensureModelProfilesSeeded2
-} from "./cli-c61mbdds.js";
+} from "./cli-rd5m70gj.js";
 import {
   loadModelsDevCache
-} from "./cli-sbwsxvtd.js";
+} from "./cli-d20qvpr2.js";
 import {
   buildCatalogEntries,
   listModelCatalog,
@@ -361,16 +370,16 @@ import {
   loadModelsCatalog,
   requestModelCatalogRefresh2,
   startPricingRefreshLoop2
-} from "./cli-bvpgr9ny.js";
+} from "./cli-60sty27p.js";
 import {
   ampPinProviderError,
   ampPinCatalogError,
   ampModelError
-} from "./cli-9s05422w.js";
+} from "./cli-8mbc9za9.js";
 import {
   workflowEventBus2,
   init_event_bus
-} from "./cli-dabehxhp.js";
+} from "./cli-kt907da6.js";
 import {
   notifyAutomationPreflightFailure,
   isNeedsSetupFailure,
@@ -435,7 +444,7 @@ import {
   definitionNodeIds,
   validateDefinition,
   applyDefinitionPatch
-} from "./cli-gbfxp48k.js";
+} from "./cli-j0ppywdr.js";
 import {
   require_dist2,
   publicEndpointSsrfOptions,
@@ -495,14 +504,14 @@ import {
   deleteApp,
   typecheckScript,
   parseSkillContent
-} from "./cli-7p4jxgtt.js";
+} from "./cli-j9bpmykh.js";
 import {
   buildAuthorizationUrl,
   onAuthorizationRefreshed,
   ensureAuthorizationTokenOrThrow,
   ensureToken,
   ensureTokenOrThrow
-} from "./cli-tsma7p8v.js";
+} from "./cli-aypd09nf.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -536,14 +545,14 @@ import {
   getSlackApp2,
   startSlackApp2,
   stopSlackApp2
-} from "./cli-abs8ndtr.js";
+} from "./cli-m30k9777.js";
 import {
   slackCode,
   slackMissingScopeMessage,
   withAutoJoin,
   externalChannelToolError2,
   getChannelBlockReason2
-} from "./cli-eftzyh9y.js";
+} from "./cli-s09j9vp5.js";
 import {
   shapeApprovalResolution,
   SubWorkflowExecutor,
@@ -562,7 +571,7 @@ import {
   recoverResolvedWaitState2,
   resumeFromChildRun2,
   initWaitBusSubscriptions2
-} from "./cli-x0f2v69c.js";
+} from "./cli-twctnkng.js";
 import {
   duplicateGuardedQueryKey,
   parseQueryParams,
@@ -589,7 +598,7 @@ import {
   isPublicRoute,
   findRoute,
   route
-} from "./cli-gwhjmh8g.js";
+} from "./cli-wqr7cea4.js";
 import {
   FilesError,
   providerPath,
@@ -600,7 +609,7 @@ import {
 import {
   getRuntimePool2,
   init_db
-} from "./cli-19202kew.js";
+} from "./cli-6srv653c.js";
 import {
   getMemoryRaterNames,
   REFERENCES_SOURCE_MAX_LENGTH,
@@ -611,7 +620,7 @@ import {
   COMPOSIO_HTTP_METHODS,
   executeComposioRequest,
   composioArgsFromParts
-} from "./cli-pasyvjmm.js";
+} from "./cli-737pyqxr.js";
 import {
   require_fast_deep_equal
 } from "./cli-bhp11egn.js";
@@ -625,7 +634,7 @@ import {
 import {
   canProvisionKind,
   init_runtime_providers
-} from "./cli-dew6x255.js";
+} from "./cli-39aet655.js";
 import {
   findUserById,
   findUserByExternalId,
@@ -640,7 +649,7 @@ import {
   resolveSessionToken,
   fingerprintApiKey,
   init_users
-} from "./cli-6a1xg1p7.js";
+} from "./cli-a89zdqz9.js";
 import {
   isRbacEnabled,
   decideAdmission,
@@ -652,6 +661,7 @@ import {
 } from "./cli-4rvr7zfx.js";
 import {
   normalizeAssetKey,
+  sessionGroupKey,
   parseAssetKey,
   canWriteAssetKey,
   init_key,
@@ -709,7 +719,7 @@ import {
   KvNamespaceSchema,
   KvKeySchema,
   init_types
-} from "./cli-mz9afxxf.js";
+} from "./cli-9pshx6rd.js";
 import {
   generateDefaultClaudeMd2,
   generateDefaultSoulMd2,
@@ -717,16 +727,22 @@ import {
   init_defaults,
   taskAttachmentFetchCommand,
   taskAttachmentDisplayUrl,
-  init_task_attachment_links
-} from "./cli-e42vss7b.js";
+  init_task_attachment_links,
+  contentSha256,
+  init_profile_sync
+} from "./cli-x37r7qwf.js";
+import {
+  isSteeringEnabled2,
+  init_steering_enabled
+} from "./cli-4sydckyj.js";
 import {
   getSlackConfiguration,
   init_config
 } from "./cli-qeaq3j6t.js";
 import {
-  isSteeringEnabled2,
-  init_steering_enabled
-} from "./cli-4sydckyj.js";
+  selectCredential,
+  init_credentials
+} from "./cli-gt4h8cxw.js";
 import {
   findInterpolationTokens,
   interpolate,
@@ -736,7 +752,7 @@ import {
   init_registry,
   resolveTemplate,
   init_resolver
-} from "./cli-dqygeeh5.js";
+} from "./cli-f1e0ptjj.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -778,7 +794,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-xtrz6bzs.js";
+} from "./cli-ptfq202x.js";
 import {
   realtimeBus,
   init_bus
@@ -812,7 +828,7 @@ import {
   registerVolatileSecret,
   registerSensitiveKeyName,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   isAlias,
   parseAlias,
@@ -826,7 +842,7 @@ import {
   openAICompatibleProviderIds,
   claudeCatalogModelId,
   init_src2
-} from "./cli-nwyw3zhg.js";
+} from "./cli-gxee0bqa.js";
 import {
   __toESM,
   __commonJS,
@@ -20528,7 +20544,7 @@ function startRetryPoller(registry, intervalMs = 5000) {
               if (!waiting)
                 continue;
               if (result.waitFor === "workflow.child.finished") {
-                const { resumeFromChildRun } = await import("./resume-frdtgfa0.js");
+                const { resumeFromChildRun } = await import("./resume-1bmvjbf3.js");
                 await resumeFromChildRun(step.id, registry);
               }
             } else {
@@ -21211,7 +21227,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp } = await import("./app-ctn8gsgx.js");
+        const { getSlackApp } = await import("./app-mwx1d5a9.js");
         const app = getSlackApp();
         if (!app) {
           return {
@@ -21634,6 +21650,7 @@ class SwarmScriptExecutor extends BaseExecutor {
       source: resolved.source,
       args: config.args,
       fsMode: "none",
+      executor: resolved.script.executor,
       agentId: agentId ?? "workflow",
       mcpBaseUrl: getMcpBaseUrl(),
       egressSecrets: credentials.egressSecrets,
@@ -21642,7 +21659,8 @@ class SwarmScriptExecutor extends BaseExecutor {
       agentFs: credentials.agentFs,
       apiConnections: getScriptApiConnectionDescriptors({ agentId: agentId ?? undefined }),
       mcpConnections: getScriptMcpConnectionDescriptors({ agentId: agentId ?? undefined }),
-      timeoutMs: config.timeoutMs
+      timeoutMs: config.timeoutMs,
+      signal: meta.signal
     });
     if (output.exitCode === 0 && !output.error && !output.runtimeError) {
       await touchScratchScriptLastUsed(resolved.script.id);
@@ -22324,6 +22342,7 @@ async function executeScheduleScript(schedule) {
       source: script.source,
       args,
       fsMode: "none",
+      executor: script.executor,
       agentId,
       egressSecrets: credentials.egressSecrets,
       userConfig: credentials.userConfig,
@@ -24595,7 +24614,7 @@ function setPreloadedTools(server, names) {
 async function applyPreToolCall(name, args, requestInfo, inputSchema) {
   if (requestInfo.callOrigin !== "mcp")
     return { args };
-  const dispatcher = await import("./dispatcher-7b8e4z2j.js");
+  const dispatcher = await import("./dispatcher-hayexmkr.js");
   const result = await dispatcher.dispatchPre("pre.tool.call", { tool: name, args, requestInfo }, inputSchema ? {
     validateModify: async (data) => {
       const schema = normalizeObjectSchema(inputSchema) ?? inputSchema;
@@ -25207,7 +25226,13 @@ function bridgeRequestFor(name, args) {
       const id = typeof body.id === "string" ? body.id : undefined;
       if (!id)
         throw new Error("workflow_getRun requires string `id`");
-      return { method: "GET", path: `/api/workflow-runs/${encodeURIComponent(id)}` };
+      if (body.fields !== undefined && body.fields !== "full" && body.fields !== "slim") {
+        throw new Error('workflow_getRun `fields` must be "full" or "slim"');
+      }
+      return {
+        method: "GET",
+        path: appendQuery(`/api/workflow-runs/${encodeURIComponent(id)}`, { fields: body.fields })
+      };
     }
     case "workflow_delete": {
       const id = typeof body.id === "string" ? body.id : undefined;
@@ -25248,10 +25273,12 @@ function bridgeRequestFor(name, args) {
       const id = typeof body.id === "string" ? body.id : undefined;
       if (!id)
         throw new Error("workflow_trigger requires string `id`");
+      const path = `/api/workflows/${encodeURIComponent(id)}/trigger`;
       return {
         method: "POST",
-        path: `/api/workflows/${encodeURIComponent(id)}/trigger`,
-        body: body.triggerData ?? {}
+        path: body.wait === false ? `${path}?wait=false` : path,
+        body: body.triggerData ?? {},
+        ...typeof body.idempotencyKey === "string" ? { headers: { "Idempotency-Key": body.idempotencyKey } } : {}
       };
     }
     case "workflow_retryRun": {
@@ -25364,7 +25391,7 @@ async function callBridgeApi(name, args, config, options = {}) {
   }
   const res = await fetch(`${baseUrl}${request.path}`, {
     method: request.method,
-    headers: headers(config),
+    headers: { ...headers(config), ...request.headers },
     body: request.body === undefined ? undefined : JSON.stringify(request.body)
   });
   const data = await readScriptSdkJsonResponse(res, `ctx.swarm.${name}`);
@@ -26750,7 +26777,8 @@ async function applyPreTaskCreate(args) {
     description: args.description,
     options: args.options,
     origin,
-    requestInfo: args.requestInfo
+    requestInfo: args.requestInfo,
+    ...args.slack ? { slack: args.slack } : {}
   }, {
     skipExtensionId: creatingExtensionId,
     transformModify: ({ data, currentPayload, extension }) => {
@@ -26956,7 +26984,8 @@ async function prepareTaskWithSiblingAwareness(description, options, args = {})
     description,
     options,
     origin: args.origin ?? "rest",
-    allowCustomModel: args.allowCustomModel
+    allowCustomModel: args.allowCustomModel,
+    slack: args.slack
   });
   if (preCreate.kind === "blocked") {
     throw new TaskCreationBlockedError(preCreate.reason, preCreate.extension);
@@ -32322,8 +32351,31 @@ function resetDiscordGatewayHealth() {
 
 // src/integrations/chat-sdk/inbound.ts
 init_zod();
+init_key();
+init_source_key();
 init_db3();
 
+// src/be/db/session-labels.ts
+init_db3();
+var NAMESPACE = "session-labels";
+async function getSessionLabels(keys) {
+  if (keys.length === 0)
+    return {};
+  const rows = await getDbClient2().query(`SELECT key, value FROM kv_entries
+     WHERE namespace = ? AND key IN (${keys.map(() => "?").join(", ")})
+       AND (expires_at IS NULL OR expires_at > ?)`, [NAMESPACE, ...keys, Date.now()]);
+  return Object.fromEntries(rows.map((row) => [row.key, row.value]));
+}
+async function rememberSessionLabel(key, label, ttlMs) {
+  await upsertKv2({
+    namespace: NAMESPACE,
+    key,
+    value: label,
+    valueType: "string",
+    expiresAt: ttlMs === undefined ? null : Date.now() + ttlMs
+  });
+}
+
 // src/be/unmapped-identities.ts
 init_db3();
 var TTL_MS = 30 * 24 * 60 * 60 * 1000;
@@ -32427,6 +32479,7 @@ function backingProviderId(attachment) {
 }
 
 // src/utils/transcription.ts
+init_credentials();
 init_secret_scrubber();
 var TRANSCRIPTION_TIMEOUT_MS = 60000;
 var TRANSCRIPTION_API_KEY_ENV = "TRANSCRIPTION_API_KEY";
@@ -32489,7 +32542,8 @@ function resolveTranscriptionConfig() {
   const candidates = pinned ? AUTO_DETECT_ORDER.filter((name) => name === pinned) : AUTO_DETECT_ORDER;
   for (const name of candidates) {
     const { keyEnv } = PROVIDERS[name];
-    const apiKey = envValue(keyEnv);
+    const value = envValue(keyEnv);
+    const apiKey = value ? selectCredential(value, undefined, keyEnv).selected : undefined;
     if (apiKey)
       return { provider: name, apiKey, keyEnv, source: "auto" };
   }
@@ -33571,6 +33625,16 @@ async function targetFromExtension(target) {
     }
   }
 }
+function chatSourceLabel(adapter, item) {
+  if (adapter !== "telegram" && adapter !== "discord")
+    return;
+  const { facts } = item;
+  if (facts.chatType === "dm" || item.isDirectMessage)
+    return facts.from ? `DM · ${facts.from}` : undefined;
+  if (adapter === "telegram" && (facts.chatType === "group" || facts.chatType === "supergroup"))
+    return facts.title || undefined;
+  return;
+}
 async function flushChatThread(threadId, items, immediate) {
   let __stack = [];
   try {
@@ -33688,6 +33752,7 @@ ${combined}` : combined;
     const latestActive = await getLatestActiveTaskByContextKey2(contextKey, "chat");
     const dependsOn = !immediate && latestActive ? [latestActive.id] : undefined;
     let created = 0;
+    let sourceKey = null;
     for (const match of target.matches) {
       const options = {
         agentId: match.agent?.id ?? null,
@@ -33708,6 +33773,7 @@ ${combined}` : combined;
       };
       try {
         const { task, unattached } = await createChatTaskWithFiles(description, options, inbound);
+        sourceKey ??= sessionSourceKey(task);
         created++;
         console.log(`[chat-sdk] ${threadId}: task ${task.id} for ${match.agent ? `agent ${match.agent.id}` : "no agent (queued)"} (${match.matchedText}, dependsOn: ${dependsOn?.join(", ") ?? "none"}${unattached.length ? `, ${unattached.length} file(s) not attached` : ""})`);
       } catch (error) {
@@ -33718,6 +33784,12 @@ ${combined}` : combined;
         }
       }
     }
+    const label = chatSourceLabel(adapter, requester);
+    if (sourceKey && label) {
+      await rememberSessionLabel(sessionGroupKey(sourceKey), label).catch(() => {
+        console.warn("[chat-sdk] Could not save a session source label");
+      });
+    }
     if (created > 0) {
       await rememberChatThreadRequester(threadId, requester.userId);
       await subscribe(thread);
@@ -35026,7 +35098,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp } = await import("./app-ctn8gsgx.js");
+    const { getSlackApp } = await import("./app-mwx1d5a9.js");
     const app = getSlackApp();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -35097,7 +35169,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDbClient } = await import("./db-w759qmx0.js");
+  const { getDbClient } = await import("./db-28gjyvxj.js");
   await getDbClient().transaction(async (tx) => {
     const row = await tx.get("SELECT metadata FROM oauth_apps WHERE provider = 'jira'");
     if (!row) {
@@ -108450,6 +108522,10 @@ var SCALAR_HTML = `<!DOCTYPE html>
 
 // src/http/core.ts
 var injectedEnvOriginals = new Map;
+function getDeploymentEnvValue(key) {
+  const tracked = injectedEnvOriginals.get(key);
+  return tracked && process.env[key] === tracked.injected ? tracked.original : process.env[key];
+}
 async function loadGlobalConfigsIntoEnv(override = false) {
   const globalConfigs = await getInjectableGlobalConfigs2();
   const updated = [];
@@ -108492,7 +108568,7 @@ async function reloadGlobalConfigsAndIntegrations() {
   return runWithoutRequestAuth(() => reloadGlobalConfigsAndIntegrationsInner());
 }
 async function reloadGlobalConfigsAndIntegrationsInner() {
-  const { getEmbeddingProvider, resetEmbeddingProvider } = await import("./index-3n8m9ea2.js");
+  const { getEmbeddingProvider, resetEmbeddingProvider } = await import("./index-q52f47pe.js");
   const wasEmbeddingsConfigured = getEmbeddingProvider().isConfigured();
   const updated = await loadGlobalConfigsIntoEnv(true);
   await syncTelemetryEnabled("settings").catch((err) => {
@@ -108508,10 +108584,10 @@ async function reloadGlobalConfigsAndIntegrationsInner() {
     integrations.push("embeddings");
   }
   if (!wasEmbeddingsConfigured && isEmbeddingsConfigured) {
-    import("./boot-reembed-w75maga2.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+    import("./boot-reembed-5h37a2c2.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
       console.error("[config-reload] memory backfill failed (non-fatal):", err);
     });
-    import("./boot-reembed-dwzfttdr.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+    import("./boot-reembed-7h78vmvv.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
       console.error("[config-reload] script backfill failed (non-fatal):", err);
     });
   }
@@ -117619,6 +117695,7 @@ var SCRIPT_TRANSPORT_ERROR = "script_* tools require HTTP MCP transport — agen
 var scriptNameSchema = string2().min(1).max(200);
 var scriptScopeSchema = _enum2(["agent", "global"]);
 var scriptFsModeSchema = _enum2(["none", "workspace-rw"]);
+var scriptExecutorSchema = _enum2(["native", "quickjs"]);
 var scriptToolOutputSchema = swarmToolOutputSchema({
   status: number2().optional(),
   data: unknown().optional()
@@ -118184,6 +118261,7 @@ var getTasksInputSchema = object2({
   tags: array2(string2()).optional().describe("Filter by any matching tag."),
   search: string2().optional().describe("Search in task description."),
   scheduleId: string2().uuid().optional().describe("Filter by schedule ID to find tasks created by a specific schedule."),
+  workflowRunId: string2().uuid().optional().describe("Filter by workflow run ID to find the tasks of a single run."),
   key: AssetKeySchema.optional().describe("Filter by exact logical namespace."),
   keyPrefix: AssetKeySchema.optional().describe("Filter by namespace subtree."),
   includeHeartbeat: boolean().optional().describe("Include heartbeat/system tasks in results (excluded by default)."),
@@ -118228,6 +118306,7 @@ async function getTasksHandler(ctx, {
   tags,
   search,
   scheduleId,
+  workflowRunId,
   key,
   keyPrefix,
   includeHeartbeat,
@@ -118245,6 +118324,7 @@ async function getTasksHandler(ctx, {
     tags,
     search,
     scheduleId,
+    workflowRunId,
     key,
     keyPrefix,
     includeHeartbeat,
@@ -118287,6 +118367,8 @@ async function getTasksHandler(ctx, {
     filters.push(`search='${search}'`);
   if (scheduleId)
     filters.push(`scheduleId='${scheduleId}'`);
+  if (workflowRunId)
+    filters.push(`workflowRunId='${workflowRunId}'`);
   if (key)
     filters.push(`key='${key}'`);
   if (keyPrefix)
@@ -118503,11 +118585,19 @@ var RESERVED_FAMILIES = new Map([
   ["comb", "namespace is reserved for Comb; use POST /api/comb/review-batches"],
   ["heartbeat-checklist", "namespace is reserved for heartbeat checklist receipts"],
   ["worker", "namespace is reserved for worker nudges"],
-  ["slack-external-alert", "namespace is reserved for Slack external channel alerts"]
+  ["slack-external-alert", "namespace is reserved for Slack external channel alerts"],
+  [
+    "session-labels",
+    "namespace is reserved for session source labels; GET /api/session-tree returns them"
+  ]
 ]);
+var PRIVATE_FAMILIES = new Set(["session-labels"]);
 function reservedNamespaceError(namespace) {
   return RESERVED_FAMILIES.get(namespace.split(":", 1)[0] ?? "") ?? null;
 }
+function privateNamespaceError(namespace) {
+  return PRIVATE_FAMILIES.has(namespace.split(":", 1)[0] ?? "") ? reservedNamespaceError(namespace) : null;
+}
 function reservedRoomKeyError(key) {
   return key.startsWith("_room/") ? "room snapshot keys are reserved; use the room endpoints" : null;
 }
@@ -118612,7 +118702,7 @@ init_types();
 
 // src/tools/kv/kv-read-auth.ts
 function kvReadAuthError(namespace, info) {
-  return mcpOverflowAuthError(namespace, info.agentId);
+  return privateNamespaceError(namespace) ?? mcpOverflowAuthError(namespace, info.agentId);
 }
 
 // src/tools/kv/kv-get.ts
@@ -131020,6 +131110,7 @@ var registerScriptRunTool = (server) => {
       intent: string2().default("").describe("Why this script is being run."),
       scope: scriptScopeSchema.optional().describe("Optional scope for named script resolution."),
       fsMode: scriptFsModeSchema.default("none").describe("Filesystem mode. v1 supports none only."),
+      executor: scriptExecutorSchema.nullable().optional().describe('Optional executor override ("native" or "quickjs"). When omitted, named scripts use their saved executor or SCRIPT_EXECUTOR.'),
       idempotencyKey: string2().max(200).optional().describe("When set, output is auto-persisted to kv under script:executions/{key}. Re-running with the same key overwrites. Queryable via kv-get.")
     }),
     outputSchema: scriptToolOutputSchema
@@ -131225,7 +131316,8 @@ var registerScriptUpsertTool = (server) => {
       description: string2().default("").describe("Human-readable script description."),
       intent: string2().default("").describe("Why this script exists."),
       scope: scriptScopeSchema.default("agent").describe("Persist under agent or global scope."),
-      fsMode: scriptFsModeSchema.default("none").describe("Filesystem mode. v1 supports none only.")
+      fsMode: scriptFsModeSchema.default("none").describe("Filesystem mode. v1 supports none only."),
+      executor: scriptExecutorSchema.nullable().optional().describe('Optional per-script executor override ("native" or "quickjs"). Null or omitted inherits SCRIPT_EXECUTOR.')
     }),
     outputSchema: scriptToolOutputSchema
   }, async (args, requestInfo) => proxyScriptsApi({
@@ -133149,13 +133241,14 @@ async function downloadSlackFile(file, token, path) {
     return `download failed (${errorText2(error)})`;
   }
 }
-async function createSlackTaskWithFiles(description, options, inbound) {
+async function createSlackTaskWithFiles(description, options, inbound, slack) {
   noteSlackInboundSideEffect("task_created");
+  const context = { origin: "slack", slack };
   if (inbound.fetched.length === 0) {
-    const task = await createTaskWithSiblingAwareness(description, options, { origin: "slack" });
+    const task = await createTaskWithSiblingAwareness(description, options, context);
     return { task, unattached: inbound.failed };
   }
-  const task = await createTaskWithSiblingAwareness(description, { ...options, status: "draft" }, { origin: "slack" });
+  const task = await createTaskWithSiblingAwareness(description, { ...options, status: "draft" }, context);
   const unattached = [...inbound.failed];
   const lease = setInterval(() => {
     refreshDraftTaskLease2(task.id).catch((error) => console.warn(`[Slack] could not renew the draft lease of task ${task.id}: ${errorText2(error)}`));
@@ -134476,6 +134569,94 @@ var registerSteerTaskTool = (server) => {
 // src/tools/store-progress.ts
 init_zod();
 init_db3();
+
+// src/be/memory/task-learning.ts
+init_db3();
+init_profile_sync();
+init_secret_scrubber();
+var LEARNING_MAX_CHARS = 2000;
+var LEARNING_MAX_TAGS = 5;
+var LEARNINGS_ROOT = "/learnings";
+var SEGMENT_MAX_CHARS = 60;
+var KEY_ATTEMPTS = 4;
+function toKebab(value, maxChars = SEGMENT_MAX_CHARS) {
+  return value.normalize("NFKD").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+/, "").slice(0, maxChars).replace(/-+$/, "");
+}
+function resolveLearningWorkstream(explicit, vcsRepo) {
+  const fromExplicit = explicit ? toKebab(explicit) : "";
+  if (fromExplicit)
+    return fromExplicit;
+  const repoName = vcsRepo?.trim().replace(/\/+$/, "").split("/").pop()?.replace(/\.git$/, "");
+  const fromRepo = repoName ? toKebab(repoName) : "";
+  return fromRepo || "general";
+}
+async function storeTaskLearning(params) {
+  const { agentId, isLead, task } = params;
+  const input = typeof params.learning === "string" ? { text: params.learning } : params.learning;
+  const text = scrubSecrets(input.text).trim();
+  if (!text)
+    return { status: "failed", error: "learning text is empty" };
+  if (text.length > LEARNING_MAX_CHARS) {
+    return {
+      status: "failed",
+      error: `learning text is over ~500 tokens (${LEARNING_MAX_CHARS} characters); shorten it`
+    };
+  }
+  const tags = [
+    ...new Set((input.tags ?? []).map((tag) => toKebab(scrubSecrets(tag))).filter(Boolean))
+  ].filter((tag) => tag !== "learning");
+  if (tags.length > LEARNING_MAX_TAGS) {
+    return { status: "failed", error: `learning takes at most ${LEARNING_MAX_TAGS} tags` };
+  }
+  const workstream = resolveLearningWorkstream(input.workstream === undefined ? undefined : scrubSecrets(input.workstream), task.vcsRepo === undefined ? undefined : scrubSecrets(task.vcsRepo));
+  try {
+    return await getDbClient2().transaction(() => insertLearning({ agentId, isLead, taskId: task.id, text, tags, workstream }));
+  } catch (err) {
+    return {
+      status: "failed",
+      error: scrubSecrets(err instanceof Error ? err.message : String(err))
+    };
+  }
+}
+async function insertLearning(params) {
+  const { agentId, isLead, taskId, text, tags, workstream } = params;
+  const contentHash = contentSha256(text);
+  const replay = await getDbClient2().get(`SELECT id, key FROM agent_memory
+     WHERE sourceTaskId = ? AND contentHash = ? AND key LIKE '${LEARNINGS_ROOT}/%'
+     LIMIT 1`, [taskId, contentHash]);
+  if (replay)
+    return { status: "replayed", memoryId: replay.id, key: replay.key };
+  const title = text.split(/\r?\n/, 1)[0].trim().slice(0, 200);
+  const baseKey = `${LEARNINGS_ROOT}/${workstream}/${toKebab(title) || "learning"}`;
+  for (let attempt = 0;attempt < KEY_ATTEMPTS; attempt++) {
+    const key = attempt === 0 ? baseKey : `${baseKey}-${crypto.randomUUID().slice(0, 6)}`;
+    const taken = await getDbClient2().get("SELECT id FROM agent_memory WHERE scope = 'swarm' AND key = ? LIMIT 1", [key]);
+    if (taken)
+      continue;
+    try {
+      const result = await indexMemoryContent({
+        agentId,
+        content: text,
+        name: title,
+        scope: "swarm",
+        source: "manual",
+        sourceTaskId: taskId,
+        tags: ["learning", ...tags],
+        intent: "store-progress learning",
+        key,
+        writer: { principal: { kind: "agent", agentId, isLead }, source: "mcp" }
+      });
+      return { status: "stored", memoryId: result.memoryIds[0], key, workstream };
+    } catch (err) {
+      if (/UNIQUE constraint failed/i.test(err.message))
+        continue;
+      throw err;
+    }
+  }
+  return { status: "failed", error: `no free key under ${baseKey}` };
+}
+
+// src/tools/store-progress.ts
 init_rbac();
 init_types();
 init_secret_scrubber();
@@ -134504,8 +134685,22 @@ var storeProgressOutputSchema = swarmToolOutputSchema({
   yourAgentId: string2().optional(),
   wasNoOp: boolean().optional().describe("True when the call was a no-op because the task was already in a terminal state (completed/failed/cancelled). First-call-wins."),
   wasForcedOverwrite: boolean().optional().describe("True when force: true replaced output and/or failureReason on an already-terminal task without replaying completion side effects."),
-  blockedWaitingElapsedMs: number2().optional().describe("Present only when this progress text reads as blocked-waiting: milliseconds since the task's prior update. Drives the store-progress nudge toward defer-task.")
-});
+  blockedWaitingElapsedMs: number2().optional().describe("Present only when this progress text reads as blocked-waiting: milliseconds since the task's prior update. Drives the store-progress nudge toward defer-task."),
+  learning: looseObject({
+    status: string2().optional(),
+    key: string2().optional(),
+    memoryId: string2().optional(),
+    workstream: string2().optional(),
+    error: string2().optional()
+  }).optional().describe("Present when the call carried a learning: stored, replayed (same text already stored for this task), or failed with error.")
+});
+function learningSentence(result) {
+  if (result.status === "stored")
+    return `Learning stored at ${result.key}.`;
+  if (result.status === "replayed")
+    return `Learning already stored at ${result.key}; skipped.`;
+  return `Learning not stored: ${result.error}.`;
+}
 var registerStoreProgressTool = (server) => {
   createToolRegistrar(server)("store-progress", {
     title: "Store task progress",
@@ -134519,6 +134714,14 @@ var registerStoreProgressTool = (server) => {
       failureReason: string2().optional().describe("The reason for failure (used when failing)."),
       attachments: array2(AttachmentInputSchema).max(20).optional().describe("Pointer-based artifacts produced by this step — agent-fs path, URL, shared-fs path, or swarm Page. No inline file data; upload to agent-fs first and attach by path. Agent-fs pointers are verified before task state changes, using the explicit org/drive pair or the registering agent's configured defaults. May be sent on any call (progress or completion) and accumulates across calls; duplicates are de-duped by sha256 (when present) or by (kind, pointer, name)."),
       citations: array2(CitationInputSchema).max(MAX_TASK_CITATIONS).catch([]).optional().describe('Claim sources, upserted by index across calls. Use only for factual claims the reader cannot already see in the thread or task tree, 1-2 sources; none on delegation, routing, acks, or status replies. Reference each one in output with [citation:N], or set general: true for a source that backs the whole answer (it renders under "General sources"). ref per kind: task = task UUID; memory = memory UUID (optional quote must appear verbatim in it); github = owner/repo#N, owner/repo@<sha>, or a github.com pull, issues, or commit URL; slack = permalink or channel/ts; agent-fs = file path; page = page id; script-run = script run id; url = http(s) URL. The first completing call is refused, and the task stays in progress, if a marker has no entry, a citation fails validation, or a non-general citation is unreferenced; the response lists each problem. After one refusal, completion proceeds and those markers and sources are dropped from rendered output. At most 50 citations per call/task, refs up to 2048 characters, labels up to 200. Invalid or oversized batches are ignored; existing indices can still be updated at capacity.'),
+      learning: union2([
+        string2(),
+        object2({
+          text: string2(),
+          workstream: string2().optional(),
+          tags: array2(string2()).optional()
+        })
+      ]).optional().describe(`A lesson to keep. Add one only when it would change how the next agent works: a gotcha, a dead end, a pattern that worked. Not a progress line. Stored as a swarm memory at /learnings/<workstream>/<slug>, tagged "learning" and tied to this task. The first line of text is the title. At most ~500 tokens and ${LEARNING_MAX_TAGS} kebab tags. workstream defaults to the task's repo name, else "general". Send it on or before the completing call: a call on a finished task stores nothing. A failed learning write is reported in the result and never blocks the progress update.`),
       persistMemory: boolean().optional().describe("Opt in to task_completion memory persistence for automatic/recurring tasks. Manual tasks are persisted by default; scheduled, system, heartbeat/boot-triage, monitor, and digest tasks are skipped unless this is true."),
       force: boolean().optional().describe("On an already-terminal task, overwrite explicitly provided output and/or failureReason text while preserving status and finishedAt and without replaying events, memory writes, follow-up creation, business-use ensure, or capacity updates. Differing terminal text is otherwise discarded and reported as a failure.")
     }),
@@ -134531,6 +134734,7 @@ var registerStoreProgressTool = (server) => {
     failureReason,
     attachments,
     citations,
+    learning,
     persistMemory,
     force
   }, requestInfo, _meta) => {
@@ -134624,6 +134828,7 @@ var registerStoreProgressTool = (server) => {
         return toolErr(`${verificationError} No attachment was registered and task state was unchanged.`);
       }
     }
+    let learningWrite;
     const result = await getDbClient2().transaction(async () => {
       const agent = await getAgentById2(requestInfo.agentId ?? "");
       if (!agent) {
@@ -134690,6 +134895,21 @@ var registerStoreProgressTool = (server) => {
       if (citations?.length && existingTask.agentId === agent.id) {
         await upsertTaskCitations(taskId, citations);
       }
+      if (learning && isTerminal) {
+        learningWrite = Promise.resolve({
+          status: "failed",
+          error: "the task is already finished; use memory-store"
+        });
+      } else if (learning) {
+        learningWrite = new Promise((resolve) => {
+          getDbClient2().afterCommit(() => storeTaskLearning({
+            agentId: agent.id,
+            isLead: agent.isLead === true,
+            task: existingTask,
+            learning
+          }).then(resolve, (err) => resolve({ status: "failed", error: scrubSecrets(String(err)) })));
+        });
+      }
       const terminalResultGuard = await guardTerminalTaskResultWrite(existingTask, {
         status,
         output,
@@ -134812,7 +135032,9 @@ This check refuses once per task; the next completion is accepted and unfixed ci
         persistMemory
       });
     }
-    const { success, message } = result;
+    const learningResult = await learningWrite;
+    const { success } = result;
+    const message = learningResult ? `${result.message} ${learningSentence(learningResult)}` : result.message;
     const task = result.task ? {
       id: result.task.id,
       status: result.task.status,
@@ -134823,7 +135045,8 @@ This check refuses once per task; the next completion is accepted and unfixed ci
       ...task ? { task } : {},
       ..."wasNoOp" in result && result.wasNoOp ? { wasNoOp: true } : {},
       ..."wasForcedOverwrite" in result && result.wasForcedOverwrite ? { wasForcedOverwrite: true } : {},
-      ..."blockedWaitingElapsedMs" in result && typeof result.blockedWaitingElapsedMs === "number" ? { blockedWaitingElapsedMs: result.blockedWaitingElapsedMs } : {}
+      ..."blockedWaitingElapsedMs" in result && typeof result.blockedWaitingElapsedMs === "number" ? { blockedWaitingElapsedMs: result.blockedWaitingElapsedMs } : {},
+      ...learningResult ? { learning: learningResult } : {}
     };
     const warnings = success && status === "completed" ? taskCitationWarnings(result.task?.output ?? output ?? "", await getTaskCitations(taskId)) : [];
     return success ? toolOk(message, { data, details: warnings.length ? warnings.join(`
@@ -135447,7 +135670,7 @@ async function emitBudgetRefusalSideEffects(ctx, inserted) {
       console.warn(`[budget-refusal-notify] Failed to create follow-up task for budget refusal (task=${ctx.task.id.slice(0, 8)}): ${err}`);
     }
   }
-  import("./event-bus-3z78ep5n.js").then(({ workflowEventBus }) => {
+  import("./event-bus-pghg8hqy.js").then(({ workflowEventBus }) => {
     workflowEventBus.emit("task.budget_refused", {
       taskId: ctx.task.id,
       agentId: ctx.agentId,
@@ -135479,7 +135702,7 @@ var TaskActionSchema = _enum2([
 var taskActionInputSchema = object2({
   action: TaskActionSchema.describe("The action to perform: 'create' creates an unassigned task, 'claim' takes a task from pool, 'release' returns task to pool, 'accept' accepts offered task, 'reject' declines offered task, 'to_backlog' moves task to backlog, 'from_backlog' moves task from backlog to pool."),
   task: string2().min(1).optional().describe("Task description (required for 'create')."),
-  key: AssetKeySchema.optional().describe("Logical namespace for a created task. Defaults to a shared/task:<id>/ resource key."),
+  key: AssetKeySchema.optional().describe("Logical namespace for a created task. Default: the Slack or chat source key of the task (for example shared/slack/<channel>/thread:<ts>/), else shared/task:<id>/."),
   taskType: string2().max(50).optional().describe("Task type (e.g., 'bug', 'feature')."),
   tags: array2(string2()).optional().describe("Tags for filtering (e.g., ['urgent', 'frontend'])."),
   priority: number2().int().min(0).max(100).optional().describe("Priority 0-100, default 50."),
@@ -136633,6 +136856,7 @@ var registerGetWorkflowTool = (server) => {
 // src/tools/workflows/get-workflow-run.ts
 init_zod();
 init_db3();
+init_workflow_runs();
 var STEP_VALUE_CAP = 400;
 function stepValuePreview(value) {
   if (value === undefined || value === null)
@@ -136664,19 +136888,21 @@ var registerGetWorkflowRunTool = (server) => {
     annotations: { destructiveHint: false },
     description: "Get details of a workflow run by ID, including all steps and their statuses.",
     inputSchema: object2({
-      id: string2().uuid().describe("Workflow run ID")
+      id: string2().uuid().describe("Workflow run ID"),
+      fields: _enum2(["full", "slim"]).optional().describe("`slim` omits run.context and each step's input (a context snapshot per step, large in runs with loops). Outputs, errors and retry fields stay. Default: full.")
     }),
     outputSchema: swarmToolOutputSchema({
       run: unknown().optional(),
       steps: array2(unknown()).optional()
     })
-  }, async ({ id }) => {
+  }, async ({ id, fields }) => {
     try {
-      const run = await getWorkflowRun2(id, "display");
+      const slim = fields === "slim";
+      const run = slim ? await getWorkflowRunSummary(id) : await getWorkflowRun2(id, "display");
       if (!run) {
         return toolErr(`Workflow run not found: ${id}`, { data: { steps: [] } });
       }
-      const steps = await getWorkflowRunStepsByRunId2(id, "display");
+      const steps = slim ? await getWorkflowRunStepsSlimByRunId(id) : await getWorkflowRunStepsByRunId2(id, "display");
       return toolOk(`Run ${id} status: ${run.status}.`, {
         details: renderSteps(steps),
         data: { run, steps }
@@ -137014,6 +137240,82 @@ var registerRetryWorkflowRunTool = (server) => {
 // src/tools/workflows/trigger-workflow.ts
 init_zod();
 init_db3();
+init_workflow_idempotency();
+
+// src/http/idempotency-key.ts
+init_zod();
+init_workflow_idempotency();
+init_request_auth_context();
+var IDEMPOTENCY_KEY_PATTERN = /^[\x21-\x7E]{1,255}$/;
+var IDEMPOTENT_REPLAYED_HEADER = "Idempotent-Replayed";
+var idempotencyKeyHeader = (accepted) => object2({
+  "Idempotency-Key": string2().regex(IDEMPOTENCY_KEY_PATTERN).optional().describe("Optional client-generated key, 1-255 visible ASCII characters (a UUID works). " + `The first request the server accepts under a key ${accepted}; a retry with the same key ` + "and an equivalent body gets that request's status and body back (with " + `\`${IDEMPOTENT_REPLAYED_HEADER}: true\`) and changes nothing. The key is scoped to the ` + "caller's identity and this operation; it is not a credential. The same key with a " + "different body is a 409. A request rejected before it is accepted (validation, auth, " + "not found, disabled) does not use up the key. Accepted keys do not expire.")
+});
+function idempotencyPrincipal(req, myAgentId) {
+  const auth = getRequestAuth(req);
+  switch (auth?.kind) {
+    case "user":
+      return `user:${auth.userId}`;
+    case "agent":
+      return `agent:${auth.agentId}`;
+    case "controller":
+      return `controller:${auth.controllerId}`;
+    case "guest":
+      return null;
+    default:
+      return myAgentId ? `agent:${myAgentId}` : "operator";
+  }
+}
+function readIdempotencyKey(req, res, myAgentId) {
+  const raw = req.headers["idempotency-key"];
+  if (raw === undefined)
+    return;
+  const key = Array.isArray(raw) ? raw.join(", ") : raw;
+  if (!IDEMPOTENCY_KEY_PATTERN.test(key)) {
+    jsonError(res, "Idempotency-Key must be 1-255 visible ASCII characters", 400);
+    return null;
+  }
+  const principal = idempotencyPrincipal(req, myAgentId);
+  if (!principal) {
+    jsonError(res, "Idempotency-Key needs an identified caller", 400);
+    return null;
+  }
+  return { principal, key };
+}
+async function replayAcceptedOperation(res, claim, send) {
+  const accepted = await findAcceptedWorkflowOperation(claim);
+  if (!accepted)
+    return false;
+  if (accepted.fingerprint !== claim.fingerprint) {
+    jsonError(res, "Idempotency-Key was already used for a different request", 409);
+  } else if (accepted.resourceDeletedAt !== null) {
+    jsonError(res, "The workflow this Idempotency-Key created or triggered was deleted; send a new key to start over", 410);
+  } else {
+    res.setHeader(IDEMPOTENT_REPLAYED_HEADER, "true");
+    send(accepted.body);
+  }
+  return true;
+}
+
+// src/tools/workflows/trigger-workflow.ts
+async function replayAcceptedTrigger(claim) {
+  const accepted = await findAcceptedWorkflowOperation(claim);
+  if (!accepted)
+    return null;
+  if (accepted.fingerprint !== claim.fingerprint) {
+    return toolErr("idempotencyKey was already used to trigger this workflow with other data.", {
+      data: { idempotencyConflict: true }
+    });
+  }
+  if (accepted.resourceDeletedAt !== null) {
+    return toolErr("The workflow this idempotencyKey triggered was deleted; send a new key to start over.");
+  }
+  const { runId, skipped } = accepted.body;
+  return toolOk("Run already accepted under this idempotencyKey; nothing new was started.", {
+    details: `Replayed the run accepted under this idempotencyKey — run ID: ${runId}.`,
+    data: { runId, skipped, replayed: true }
+  });
+}
 var registerTriggerWorkflowTool = (server) => {
   createToolRegistrar(server)("trigger-workflow", {
     title: "Trigger Workflow",
@@ -137021,16 +137323,35 @@ var registerTriggerWorkflowTool = (server) => {
     description: "Manually trigger a workflow execution, optionally passing trigger data as context. Respects cooldown configuration. " + "If the workflow has a triggerSchema, the payload is validated first; on failure, the response includes structured validationErrors plus the workflow's triggerSchema for self-correction.",
     inputSchema: object2({
       id: string2().uuid().describe("Workflow ID to trigger"),
-      triggerData: record2(string2(), unknown()).optional().describe("Optional data to pass as trigger context to the workflow")
+      triggerData: record2(string2(), unknown()).optional().describe("Optional data to pass as trigger context to the workflow"),
+      wait: boolean().optional().describe("Default true: return after the run's instant steps ran, when it finishes or parks at its first async step. " + "false: return as soon as the run is created and walk it in the background. Use false from a script or step that only needs the runId."),
+      idempotencyKey: string2().regex(IDEMPOTENCY_KEY_PATTERN).optional().describe("Optional, 1-255 visible ASCII characters, scoped to the calling agent and this workflow. " + "The first trigger accepted under a key starts one run; the key is recorded in the run's own transaction and never expires. " + "A retry with the same key and triggerData starts nothing and returns that run (replayed: true), even if the earlier call was killed before it saw the answer. " + "The same key with other triggerData is an error with idempotencyConflict: true.")
     }),
     outputSchema: swarmToolOutputSchema({
       runId: string2().optional(),
       skipped: boolean().optional(),
+      replayed: boolean().optional(),
+      idempotencyConflict: boolean().optional(),
       validationErrors: array2(string2()).optional(),
       triggerSchema: record2(string2(), unknown()).optional()
     })
-  }, async ({ id, triggerData }, requestInfo) => {
+  }, async ({ id, triggerData, wait, idempotencyKey }, requestInfo) => {
     try {
+      if (idempotencyKey !== undefined && !requestInfo.agentId) {
+        return toolErr("idempotencyKey needs an identified caller (X-Agent-ID).");
+      }
+      const claim = idempotencyKey === undefined ? undefined : {
+        principal: `agent:${requestInfo.agentId}`,
+        key: idempotencyKey,
+        operation: "workflow.trigger",
+        targetId: id,
+        fingerprint: workflowRequestFingerprint("workflow.trigger", triggerData ?? {})
+      };
+      if (claim) {
+        const replayed = await replayAcceptedTrigger(claim);
+        if (replayed)
+          return replayed;
+      }
       const workflow = await getWorkflow2(id);
       if (!workflow) {
         return toolErr(`Workflow not found: ${id}`);
@@ -137038,12 +137359,33 @@ var registerTriggerWorkflowTool = (server) => {
       if (!workflow.enabled) {
         return toolErr(`Workflow "${workflow.name}" is disabled.`);
       }
-      const runId = await startWorkflowExecution2(workflow, triggerData ?? {}, getExecutorRegistry2(), {
-        triggerType: "manual",
-        requestedByUserId: await resolveTaskAuditUserId(requestInfo.sourceTaskId, requestInfo.agentId) ?? undefined
-      });
-      const run = await getWorkflowRun2(runId);
-      const skipped = run?.status === "skipped";
+      let accepted;
+      let runId;
+      try {
+        runId = await startWorkflowExecution2(workflow, triggerData ?? {}, getExecutorRegistry2(), {
+          triggerType: "manual",
+          requestedByUserId: await resolveTaskAuditUserId(requestInfo.sourceTaskId, requestInfo.agentId) ?? undefined,
+          detach: wait === false,
+          accept: claim ? async (run) => {
+            const response = { runId: run.runId, skipped: run.skipped };
+            await recordAcceptedWorkflowOperation(claim, {
+              workflowId: workflow.id,
+              runId: run.runId,
+              status: 201,
+              body: response
+            });
+            accepted = response;
+          } : undefined
+        });
+      } catch (err) {
+        if (claim && err instanceof IdempotencyKeyTakenError) {
+          const replayed = await replayAcceptedTrigger(claim);
+          if (replayed)
+            return replayed;
+        }
+        throw err;
+      }
+      const skipped = accepted ? accepted.skipped : (await getWorkflowRun2(runId))?.status === "skipped";
       if (skipped) {
         return toolOk(`Workflow "${workflow.name}" skipped (cooldown).`, {
           details: `Workflow "${workflow.name}" skipped (cooldown active) — run ID: ${runId}.`,
@@ -137545,4 +137887,4 @@ async function createServer(opts = {}) {
   return server;
 }
 
-export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, resolveIdentity, renderIdentity, createAdditiveBuffer, taskModelPin, resumedTaskModelSelection, listHarnessModelSupport, recordHarnessModelSupport, agentRanModel, getAgentHarnessCliVersion, setAgentHarnessCliVersion, sanitizeModelTierOverrides, parseModelTierOverridesHeader, setAgentModelTierOverrides, previewModelTiers, recordClaimModelResolution, harnessModelErrorFor, poolTaskRunsOnHarness, explicitModelError, explicitModelErrorForAgent, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, scopeFromAttachment, backingProviderId, transcribeAudioNotes, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, isRuntimePoolWakeable, isAgentReachable, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, recoverIncompleteRuns, handleWebhookTrigger, verifyHmacSignature, WebhookError, snapshotAndUpdateWorkflow, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry2, initWorkflows2, dispatchScheduleTarget, calculateNextRun2, startScheduler2, stopScheduler2, runScheduleNow2, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, hasKvViewArgs, resolveKvView, toolErr, createToolRegistrar, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError2, isRegistered2, isExtensionAgentId2, getExtensionBridgeToken2, resolveBridgeCallOrigin2, extensionIdForAgent2, runContext2, registerLoaded2, unregister2, listRegistered2, dispatchPre2, dispatchPost2, stripSiblingBlock, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, isAzureDevOpsEnabled, initAzureDevOps, verifyAzureDevOpsWebhook, repointTrackerSyncBySwarmId, isAzureDevOpsUrl, canonicalAzureDevOpsRepoUrl, parseAzureDevOpsRepoUrl, createdPullRequestOf, commentedPayloadOf, handlePullRequestCreated, handlePullRequestCommented, handleWorkItemCreated, handleWorkItemUpdated, handleWorkItemCommented, handleWorkItemDeleted, handleWorkItemRestored, initAzureDevOpsOutbound, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, getTelemetryIngestAnchor, initApiTelemetry, syncTelemetryEnabled, isBitbucketEnabled, initBitbucket, verifyBitbucketWebhook, isDuplicateDelivery, markDeliveryProcessed, pullRequestEventOf, pullRequestCommentEventOf, handlePullRequestCreated2, handlePullRequestCommentCreated, handlePullRequestClosed, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2, handleNote, handlePipeline, isChatSdkEnabled, getChatSdkConfig, errorMessage, resolveAdapterApiUrl, trackBackground, TelegramBotApiError, callTelegramBotApi, isTrustedTeamsServiceUrl, isChatSdkStopping, startChatSdk, getChatInstance, isChatAdapterConfigured, getChatSdkHealth, stopChatSdk, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, isCookieSafePageId, extractPageSession, extractLegacyPageSession, extractAndVerifyCookie, pageSessionSetCookies, resolveHttpRequestAuth, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, MCP_MAX_TOOL_INPUT_ELEMENTS, MCP_MAX_REQUEST_BODY_BYTES, userCtx, requestPrincipal, agentFirstPrincipal, rejectGuest, handleApps, cancelApprovalRequest, cancelApprovalRequestAndRun, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, getPageEditCounter, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, MemoryKeyError, refreshLinks, indexMemoryContent, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, inheritedModelSelection, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, reservedRoomKeyError, updateMcpServerChecked, updateTouchesStdioExecution, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, isApiDraining, drainApi, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, changesAllowMerge, updateSwarmRepoChecked, getCombConfig, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, sessionAccessTopic, sessionPresenceRoot, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, MEMORY_KEYS_DEFAULT_PREFIX, MEMORY_KEYS_MAX_LIMIT, estimateTokens, posteriorMean, listMemoryKeys, checkChunkIntegrity, getMemoryChunks, getPosteriorsByIds, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, workflowModelErrors, patchWorkflowDefinition, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };
+export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, resolveIdentity, renderIdentity, createAdditiveBuffer, taskModelPin, resumedTaskModelSelection, listHarnessModelSupport, recordHarnessModelSupport, agentRanModel, getAgentHarnessCliVersion, setAgentHarnessCliVersion, sanitizeModelTierOverrides, parseModelTierOverridesHeader, setAgentModelTierOverrides, previewModelTiers, recordClaimModelResolution, harnessModelErrorFor, poolTaskRunsOnHarness, explicitModelError, explicitModelErrorForAgent, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, scopeFromAttachment, backingProviderId, transcribeAudioNotes, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, isRuntimePoolWakeable, isAgentReachable, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, recoverIncompleteRuns, handleWebhookTrigger, verifyHmacSignature, WebhookError, snapshotAndUpdateWorkflow, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry2, initWorkflows2, dispatchScheduleTarget, calculateNextRun2, startScheduler2, stopScheduler2, runScheduleNow2, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, hasKvViewArgs, resolveKvView, toolErr, createToolRegistrar, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError2, isRegistered2, isExtensionAgentId2, getExtensionBridgeToken2, resolveBridgeCallOrigin2, extensionIdForAgent2, runContext2, registerLoaded2, unregister2, listRegistered2, dispatchPre2, dispatchPost2, stripSiblingBlock, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, isAzureDevOpsEnabled, initAzureDevOps, verifyAzureDevOpsWebhook, repointTrackerSyncBySwarmId, isAzureDevOpsUrl, canonicalAzureDevOpsRepoUrl, parseAzureDevOpsRepoUrl, createdPullRequestOf, commentedPayloadOf, handlePullRequestCreated, handlePullRequestCommented, handleWorkItemCreated, handleWorkItemUpdated, handleWorkItemCommented, handleWorkItemDeleted, handleWorkItemRestored, initAzureDevOpsOutbound, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, getTelemetryIngestAnchor, initApiTelemetry, syncTelemetryEnabled, isBitbucketEnabled, initBitbucket, verifyBitbucketWebhook, isDuplicateDelivery, markDeliveryProcessed, pullRequestEventOf, pullRequestCommentEventOf, handlePullRequestCreated2, handlePullRequestCommentCreated, handlePullRequestClosed, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2, handleNote, handlePipeline, isChatSdkEnabled, getChatSdkConfig, errorMessage, resolveAdapterApiUrl, trackBackground, TelegramBotApiError, callTelegramBotApi, isTrustedTeamsServiceUrl, getSessionLabels, rememberSessionLabel, isChatSdkStopping, startChatSdk, getChatInstance, isChatAdapterConfigured, getChatSdkHealth, stopChatSdk, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, isCookieSafePageId, extractPageSession, extractLegacyPageSession, extractAndVerifyCookie, pageSessionSetCookies, resolveHttpRequestAuth, getDeploymentEnvValue, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, MCP_MAX_TOOL_INPUT_ELEMENTS, MCP_MAX_REQUEST_BODY_BYTES, userCtx, requestPrincipal, agentFirstPrincipal, rejectGuest, handleApps, cancelApprovalRequest, cancelApprovalRequestAndRun, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, getPageEditCounter, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, MemoryKeyError, refreshLinks, indexMemoryContent, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, inheritedModelSelection, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, privateNamespaceError, reservedRoomKeyError, updateMcpServerChecked, updateTouchesStdioExecution, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, isApiDraining, drainApi, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, changesAllowMerge, updateSwarmRepoChecked, getCombConfig, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, sessionAccessTopic, sessionPresenceRoot, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, MEMORY_KEYS_DEFAULT_PREFIX, MEMORY_KEYS_MAX_LIMIT, estimateTokens, posteriorMean, listMemoryKeys, checkChunkIntegrity, getMemoryChunks, getPosteriorsByIds, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, workflowModelErrors, patchWorkflowDefinition, idempotencyKeyHeader, readIdempotencyKey, replayAcceptedOperation, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };