@desplega.ai/agent-swarm 2.6.0 → 2.7.1

package/dist/{cli-4hxrf0p4.js → cli-pzafyqtk.js}

@@ -113,6 +113,11 @@ import {
   cancelTask2,
   getRecentlyCancelledTasksForAgent2,
   updateTaskProgress2,
+  IdempotencyKeyTakenError,
+  workflowRequestFingerprint,
+  findAcceptedWorkflowOperation,
+  recordAcceptedWorkflowOperation,
+  init_workflow_idempotency,
   getWorkflowRunSummary,
   getWorkflowRunStepsSlimByRunId,
   getRunLineageBlock,
@@ -149,6 +154,7 @@ import {
   getAuthorizationById,
   getOAuthTokens,
   init_oauth,
+  LEARNING_DUPLICATE_MIN_SIMILARITY,
   CANDIDATE_SET_MULTIPLIER,
   isGraphExpansionEnabled,
   init_constants,
@@ -343,19 +349,19 @@ import {
   recordInlineScriptRun2,
   exports_db,
   init_db3
-} from "./cli-g8ka5j4j.js";
+} from "./cli-qvaa1gjp.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-a2rr0fmg.js";
+} from "./cli-hpkvgdad.js";
 import {
   ensurePricingSeeded2,
   ensureRbacSeeded2,
   ensureModelProfilesSeeded2
-} from "./cli-03gg9pd1.js";
+} from "./cli-typdpe8g.js";
 import {
   loadModelsDevCache
-} from "./cli-5sckpqcx.js";
+} from "./cli-2sjm3t4r.js";
 import {
   buildCatalogEntries,
   listModelCatalog,
@@ -365,12 +371,12 @@ import {
   loadModelsCatalog,
   requestModelCatalogRefresh2,
   startPricingRefreshLoop2
-} from "./cli-aj8djyqt.js";
+} from "./cli-twjnyvs8.js";
 import {
   ampPinProviderError,
   ampPinCatalogError,
   ampModelError
-} from "./cli-bqztfyve.js";
+} from "./cli-cb50g9cd.js";
 import {
   workflowEventBus2,
   init_event_bus
@@ -439,7 +445,7 @@ import {
   definitionNodeIds,
   validateDefinition,
   applyDefinitionPatch
-} from "./cli-3fwqy71j.js";
+} from "./cli-dv11pgpv.js";
 import {
   require_dist2,
   publicEndpointSsrfOptions,
@@ -499,14 +505,14 @@ import {
   deleteApp,
   typecheckScript,
   parseSkillContent
-} from "./cli-3gfvmzht.js";
+} from "./cli-kbtdftbw.js";
 import {
   buildAuthorizationUrl,
   onAuthorizationRefreshed,
   ensureAuthorizationTokenOrThrow,
   ensureToken,
   ensureTokenOrThrow
-} from "./cli-kf4jree9.js";
+} from "./cli-rm66vqdz.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -540,14 +546,14 @@ import {
   getSlackApp2,
   startSlackApp2,
   stopSlackApp2
-} from "./cli-g20jjwt4.js";
+} from "./cli-thsaq4pd.js";
 import {
   slackCode,
   slackMissingScopeMessage,
   withAutoJoin,
   externalChannelToolError2,
   getChannelBlockReason2
-} from "./cli-gnsb1zxa.js";
+} from "./cli-vhpckzvp.js";
 import {
   shapeApprovalResolution,
   SubWorkflowExecutor,
@@ -566,7 +572,7 @@ import {
   recoverResolvedWaitState2,
   resumeFromChildRun2,
   initWaitBusSubscriptions2
-} from "./cli-3aqd4jaa.js";
+} from "./cli-3v2cyqb8.js";
 import {
   duplicateGuardedQueryKey,
   parseQueryParams,
@@ -593,7 +599,7 @@ import {
   isPublicRoute,
   findRoute,
   route
-} from "./cli-art7c1zh.js";
+} from "./cli-hq2v4rr5.js";
 import {
   FilesError,
   providerPath,
@@ -604,7 +610,7 @@ import {
 import {
   getRuntimePool2,
   init_db
-} from "./cli-gf95q3bm.js";
+} from "./cli-6vwjsetx.js";
 import {
   getMemoryRaterNames,
   REFERENCES_SOURCE_MAX_LENGTH,
@@ -629,7 +635,7 @@ import {
 import {
   canProvisionKind,
   init_runtime_providers
-} from "./cli-39aet655.js";
+} from "./cli-m52t4cta.js";
 import {
   findUserById,
   findUserByExternalId,
@@ -644,7 +650,7 @@ import {
   resolveSessionToken,
   fingerprintApiKey,
   init_users
-} from "./cli-esakngh8.js";
+} from "./cli-nf6k60sn.js";
 import {
   isRbacEnabled,
   decideAdmission,
@@ -653,7 +659,7 @@ import {
   init_elevated_agents,
   can,
   init_rbac
-} from "./cli-4rvr7zfx.js";
+} from "./cli-k4awgvzm.js";
 import {
   normalizeAssetKey,
   sessionGroupKey,
@@ -714,7 +720,7 @@ import {
   KvNamespaceSchema,
   KvKeySchema,
   init_types
-} from "./cli-4rf0f5vg.js";
+} from "./cli-s504c3w7.js";
 import {
   generateDefaultClaudeMd2,
   generateDefaultSoulMd2,
@@ -722,8 +728,10 @@ import {
   init_defaults,
   taskAttachmentFetchCommand,
   taskAttachmentDisplayUrl,
-  init_task_attachment_links
-} from "./cli-hfeb68z4.js";
+  init_task_attachment_links,
+  contentSha256,
+  init_profile_sync
+} from "./cli-kj69b9tw.js";
 import {
   isSteeringEnabled2,
   init_steering_enabled
@@ -735,7 +743,7 @@ import {
 import {
   selectCredential,
   init_credentials
-} from "./cli-1tem6ns9.js";
+} from "./cli-gt4h8cxw.js";
 import {
   findInterpolationTokens,
   interpolate,
@@ -745,7 +753,7 @@ import {
   init_registry,
   resolveTemplate,
   init_resolver
-} from "./cli-dqygeeh5.js";
+} from "./cli-b41p764a.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -787,11 +795,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-nn6vx2mq.js";
-import {
-  realtimeBus,
-  init_bus
-} from "./cli-syfdvhkc.js";
+} from "./cli-swkx9jm2.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getConfiguredAppUrls,
@@ -802,13 +806,18 @@ import {
   getAgentFsDefaultOrgId,
   getAgentFsDefaultDriveId,
   isCombEnabled,
+  isAgentFsProxyEnabled,
   init_constants2
-} from "./cli-gf2850q7.js";
+} from "./cli-3cywb44q.js";
 import {
   parseEnvFlag,
   isEnvFlagEnabled,
   init_env_flag
 } from "./cli-cebvbc9t.js";
+import {
+  realtimeBus,
+  init_bus
+} from "./cli-syfdvhkc.js";
 import {
   getApiKey,
   init_api_key
@@ -20537,7 +20546,7 @@ function startRetryPoller(registry, intervalMs = 5000) {
               if (!waiting)
                 continue;
               if (result.waitFor === "workflow.child.finished") {
-                const { resumeFromChildRun } = await import("./resume-8ayf37g5.js");
+                const { resumeFromChildRun } = await import("./resume-725g9b0b.js");
                 await resumeFromChildRun(step.id, registry);
               }
             } else {
@@ -21220,7 +21229,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp } = await import("./app-k8a5cgpp.js");
+        const { getSlackApp } = await import("./app-d53yhykk.js");
         const app = getSlackApp();
         if (!app) {
           return {
@@ -21643,6 +21652,7 @@ class SwarmScriptExecutor extends BaseExecutor {
       source: resolved.source,
       args: config.args,
       fsMode: "none",
+      executor: resolved.script.executor,
       agentId: agentId ?? "workflow",
       mcpBaseUrl: getMcpBaseUrl(),
       egressSecrets: credentials.egressSecrets,
@@ -21651,7 +21661,8 @@ class SwarmScriptExecutor extends BaseExecutor {
       agentFs: credentials.agentFs,
       apiConnections: getScriptApiConnectionDescriptors({ agentId: agentId ?? undefined }),
       mcpConnections: getScriptMcpConnectionDescriptors({ agentId: agentId ?? undefined }),
-      timeoutMs: config.timeoutMs
+      timeoutMs: config.timeoutMs,
+      signal: meta.signal
     });
     if (output.exitCode === 0 && !output.error && !output.runtimeError) {
       await touchScratchScriptLastUsed(resolved.script.id);
@@ -22333,6 +22344,7 @@ async function executeScheduleScript(schedule) {
       source: script.source,
       args,
       fsMode: "none",
+      executor: script.executor,
       agentId,
       egressSecrets: credentials.egressSecrets,
       userConfig: credentials.userConfig,
@@ -24218,6 +24230,13 @@ var storeProgressBlockedWaitingNudge = (r) => {
     return;
   return `That reads as blocked-waiting, ${formatIdleDuration(ms)} since your last update — keep working if you can, and if the wait is genuinely long, defer-task is one way to resume later instead of polling.`;
 };
+var storeProgressNudge = (r) => {
+  const learning = r.data?.learning;
+  if (r.ok && learning?.status === "duplicate" && typeof learning.memoryId === "string") {
+    return `That learning repeats memory ${learning.memoryId}; if your text adds something, memory-edit that memory instead of storing a new one.`;
+  }
+  return storeProgressBlockedWaitingNudge(r);
+};
 var workflowLongScriptTimeoutNudge = (r) => {
   if (!r.ok)
     return;
@@ -24226,7 +24245,7 @@ var workflowLongScriptTimeoutNudge = (r) => {
 };
 var NUDGES = {
   "defer-task": (r) => r.ok ? "Stop working on this task now; the wake-up task will carry your note." : undefined,
-  "store-progress": storeProgressBlockedWaitingNudge,
+  "store-progress": storeProgressNudge,
   "script-run": scriptRunNudge,
   "script-upsert": scriptAuthoringNudge,
   "launch-script-run": scriptAuthoringNudge,
@@ -24604,7 +24623,7 @@ function setPreloadedTools(server, names) {
 async function applyPreToolCall(name, args, requestInfo, inputSchema) {
   if (requestInfo.callOrigin !== "mcp")
     return { args };
-  const dispatcher = await import("./dispatcher-pv5h77vf.js");
+  const dispatcher = await import("./dispatcher-8m0htjq8.js");
   const result = await dispatcher.dispatchPre("pre.tool.call", { tool: name, args, requestInfo }, inputSchema ? {
     validateModify: async (data) => {
       const schema = normalizeObjectSchema(inputSchema) ?? inputSchema;
@@ -25263,10 +25282,12 @@ function bridgeRequestFor(name, args) {
       const id = typeof body.id === "string" ? body.id : undefined;
       if (!id)
         throw new Error("workflow_trigger requires string `id`");
+      const path = `/api/workflows/${encodeURIComponent(id)}/trigger`;
       return {
         method: "POST",
-        path: `/api/workflows/${encodeURIComponent(id)}/trigger`,
-        body: body.triggerData ?? {}
+        path: body.wait === false ? `${path}?wait=false` : path,
+        body: body.triggerData ?? {},
+        ...typeof body.idempotencyKey === "string" ? { headers: { "Idempotency-Key": body.idempotencyKey } } : {}
       };
     }
     case "workflow_retryRun": {
@@ -25379,7 +25400,7 @@ async function callBridgeApi(name, args, config, options = {}) {
   }
   const res = await fetch(`${baseUrl}${request.path}`, {
     method: request.method,
-    headers: headers(config),
+    headers: { ...headers(config), ...request.headers },
     body: request.body === undefined ? undefined : JSON.stringify(request.body)
   });
   const data = await readScriptSdkJsonResponse(res, `ctx.swarm.${name}`);
@@ -31731,7 +31752,7 @@ async function loadAdapter(name, config, logger) {
       });
     }
     case "slack": {
-      const { createSlackAdapter } = await import("./index-zgvqzjsw.js");
+      const { createSlackAdapter } = await import("./index-cekzwhez.js");
       return createSlackAdapter({
         ...base,
         signingSecret: config.signingSecret ?? "",
@@ -31750,7 +31771,7 @@ async function loadAdapter(name, config, logger) {
       });
     }
     case "teams": {
-      const { createTeamsAdapter } = await import("./index-ysd45kgc.js");
+      const { createTeamsAdapter } = await import("./index-8fxt5eah.js");
       const { teamsWebhookVerifier, teamsToken } = getChatSdkTestHooks();
       return createTeamsAdapter({
         ...base,
@@ -35086,7 +35107,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp } = await import("./app-k8a5cgpp.js");
+    const { getSlackApp } = await import("./app-d53yhykk.js");
     const app = getSlackApp();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -35157,7 +35178,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDbClient } = await import("./db-w36wwb5g.js");
+  const { getDbClient } = await import("./db-dv9j7ts5.js");
   await getDbClient().transaction(async (tx) => {
     const row = await tx.get("SELECT metadata FROM oauth_apps WHERE provider = 'jira'");
     if (!row) {
@@ -108556,7 +108577,7 @@ async function reloadGlobalConfigsAndIntegrations() {
   return runWithoutRequestAuth(() => reloadGlobalConfigsAndIntegrationsInner());
 }
 async function reloadGlobalConfigsAndIntegrationsInner() {
-  const { getEmbeddingProvider, resetEmbeddingProvider } = await import("./index-g6k9tctj.js");
+  const { getEmbeddingProvider, resetEmbeddingProvider } = await import("./index-yn1yxg85.js");
   const wasEmbeddingsConfigured = getEmbeddingProvider().isConfigured();
   const updated = await loadGlobalConfigsIntoEnv(true);
   await syncTelemetryEnabled("settings").catch((err) => {
@@ -108572,10 +108593,10 @@ async function reloadGlobalConfigsAndIntegrationsInner() {
     integrations.push("embeddings");
   }
   if (!wasEmbeddingsConfigured && isEmbeddingsConfigured) {
-    import("./boot-reembed-f4nn561n.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+    import("./boot-reembed-k5y5xbj0.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
       console.error("[config-reload] memory backfill failed (non-fatal):", err);
     });
-    import("./boot-reembed-6c1sjfnr.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+    import("./boot-reembed-fxfw17m2.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
       console.error("[config-reload] script backfill failed (non-fatal):", err);
     });
   }
@@ -116251,7 +116272,7 @@ async function indexMemoryContent(params) {
         intent: "re-index memory source path",
         changedByAgentId: agentId
       });
-      const embedding = await provider.embed(result.memory.content);
+      const embedding = await provider.embed(result.memory.content, { kind: "document" });
       if (embedding)
         await store.updateEmbedding(result.memory.id, embedding, provider.name);
       try {
@@ -116292,7 +116313,7 @@ async function indexMemoryContent(params) {
   }
   (async () => {
     try {
-      const embeddings = await provider.embedBatch(memories.map((m) => m.content));
+      const embeddings = await provider.embedBatch(memories.map((m) => m.content), { kind: "document" });
       for (let i = 0;i < embeddings.length; i++) {
         if (embeddings[i]) {
           await store.updateEmbedding(memories[i].id, embeddings[i], provider.name);
@@ -117683,6 +117704,7 @@ var SCRIPT_TRANSPORT_ERROR = "script_* tools require HTTP MCP transport — agen
 var scriptNameSchema = string2().min(1).max(200);
 var scriptScopeSchema = _enum2(["agent", "global"]);
 var scriptFsModeSchema = _enum2(["none", "workspace-rw"]);
+var scriptExecutorSchema = _enum2(["native", "quickjs"]);
 var scriptToolOutputSchema = swarmToolOutputSchema({
   status: number2().optional(),
   data: unknown().optional()
@@ -118440,7 +118462,7 @@ ${learning}`;
     });
     try {
       const provider = getEmbeddingProvider2();
-      const embedding = await provider.embed(memory.content);
+      const embedding = await provider.embed(memory.content, { kind: "document" });
       if (embedding) {
         await store.updateEmbedding(memory.id, embedding, provider.name);
       }
@@ -119939,7 +119961,7 @@ var registerMemoryEditTool = (server) => {
       const contentEdited = content !== undefined || oldString !== undefined || newString !== undefined;
       if (result.changed && (newKey === undefined || contentEdited)) {
         const provider = getEmbeddingProvider2();
-        const embedding = await provider.embed(result.memory.content);
+        const embedding = await provider.embed(result.memory.content, { kind: "document" });
         if (embedding)
           await store.updateEmbedding(result.memory.id, embedding, provider.name);
         try {
@@ -120433,7 +120455,7 @@ var registerMemorySearchTool = (server) => {
     const isLead = agent?.isLead ?? false;
     const provider = getEmbeddingProvider2();
     const store = getMemoryStore2();
-    const queryEmbedding = await provider.embed(query);
+    const queryEmbedding = await provider.embed(query, { kind: "query" });
     const candidateLimit = limit * CANDIDATE_SET_MULTIPLIER;
     const candidates = await searchMemoryCandidates(store, queryEmbedding ?? new Float32Array(0), requestInfo.agentId, {
       scope,
@@ -122516,9 +122538,10 @@ function trimUrl(value) {
 }
 function getCombConfig() {
   const internalUrl = trimUrl(process.env.AGENT_FS_API_URL);
+  const browserDefault = isAgentFsProxyEnabled() && internalUrl ? `${getPublicMcpBaseUrl()}/agentfs` : internalUrl;
   return {
     enabled: isCombEnabled(),
-    apiUrl: trimUrl(process.env.AGENT_FS_PUBLIC_URL) ?? internalUrl,
+    apiUrl: trimUrl(process.env.AGENT_FS_PUBLIC_URL) ?? browserDefault,
     liveUrl: getAgentFsLiveUrl(),
     orgId: getAgentFsDefaultOrgId() ?? null,
     driveId: getAgentFsDefaultDriveId() ?? null
@@ -131097,6 +131120,7 @@ var registerScriptRunTool = (server) => {
       intent: string2().default("").describe("Why this script is being run."),
       scope: scriptScopeSchema.optional().describe("Optional scope for named script resolution."),
       fsMode: scriptFsModeSchema.default("none").describe("Filesystem mode. v1 supports none only."),
+      executor: scriptExecutorSchema.nullable().optional().describe('Optional executor override ("native" or "quickjs"). When omitted, named scripts use their saved executor or SCRIPT_EXECUTOR.'),
       idempotencyKey: string2().max(200).optional().describe("When set, output is auto-persisted to kv under script:executions/{key}. Re-running with the same key overwrites. Queryable via kv-get.")
     }),
     outputSchema: scriptToolOutputSchema
@@ -131302,7 +131326,8 @@ var registerScriptUpsertTool = (server) => {
       description: string2().default("").describe("Human-readable script description."),
       intent: string2().default("").describe("Why this script exists."),
       scope: scriptScopeSchema.default("agent").describe("Persist under agent or global scope."),
-      fsMode: scriptFsModeSchema.default("none").describe("Filesystem mode. v1 supports none only.")
+      fsMode: scriptFsModeSchema.default("none").describe("Filesystem mode. v1 supports none only."),
+      executor: scriptExecutorSchema.nullable().optional().describe('Optional per-script executor override ("native" or "quickjs"). Null or omitted inherits SCRIPT_EXECUTOR.')
     }),
     outputSchema: scriptToolOutputSchema
   }, async (args, requestInfo) => proxyScriptsApi({
@@ -134554,6 +134579,150 @@ var registerSteerTaskTool = (server) => {
 // src/tools/store-progress.ts
 init_zod();
 init_db3();
+
+// src/be/memory/task-learning.ts
+init_db3();
+init_memory();
+init_constants();
+init_profile_sync();
+init_secret_scrubber();
+var LEARNING_MAX_CHARS = 2000;
+var LEARNING_MAX_TAGS = 5;
+var LEARNINGS_ROOT = "/learnings";
+var SEGMENT_MAX_CHARS = 60;
+var KEY_ATTEMPTS = 4;
+var DUPLICATE_SEARCH_PREFIXES = [`${LEARNINGS_ROOT}/`, "/longterm/workstreams/"];
+var LEARNING_DUPLICATE_RATING_SOURCE = "learning-duplicate";
+function toKebab(value, maxChars = SEGMENT_MAX_CHARS) {
+  return value.normalize("NFKD").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+/, "").slice(0, maxChars).replace(/-+$/, "");
+}
+function resolveLearningWorkstream(explicit, vcsRepo) {
+  const fromExplicit = explicit ? toKebab(explicit) : "";
+  if (fromExplicit)
+    return fromExplicit;
+  const repoName = vcsRepo?.trim().replace(/\/+$/, "").split("/").pop()?.replace(/\.git$/, "");
+  const fromRepo = repoName ? toKebab(repoName) : "";
+  return fromRepo || "general";
+}
+async function storeTaskLearning(params) {
+  const { agentId, isLead, task } = params;
+  const input = typeof params.learning === "string" ? { text: params.learning } : params.learning;
+  const text = scrubSecrets(input.text).trim();
+  if (!text)
+    return { status: "failed", error: "learning text is empty" };
+  if (text.length > LEARNING_MAX_CHARS) {
+    return {
+      status: "failed",
+      error: `learning text is over ~500 tokens (${LEARNING_MAX_CHARS} characters); shorten it`
+    };
+  }
+  const tags = [
+    ...new Set((input.tags ?? []).map((tag) => toKebab(scrubSecrets(tag))).filter(Boolean))
+  ].filter((tag) => tag !== "learning");
+  if (tags.length > LEARNING_MAX_TAGS) {
+    return { status: "failed", error: `learning takes at most ${LEARNING_MAX_TAGS} tags` };
+  }
+  const workstream = resolveLearningWorkstream(input.workstream === undefined ? undefined : scrubSecrets(input.workstream), task.vcsRepo === undefined ? undefined : scrubSecrets(task.vcsRepo));
+  try {
+    const replay = await findReplay(task.id, contentSha256(text));
+    if (replay)
+      return replay;
+    const duplicate = await findNearDuplicate({ agentId, isLead, text });
+    if (duplicate) {
+      await rateDuplicate(duplicate, task.id);
+      return duplicate;
+    }
+    return await getDbClient2().transaction(() => insertLearning({ agentId, isLead, taskId: task.id, text, tags, workstream }));
+  } catch (err) {
+    return {
+      status: "failed",
+      error: scrubSecrets(err instanceof Error ? err.message : String(err))
+    };
+  }
+}
+async function findReplay(taskId, contentHash) {
+  const replay = await getDbClient2().get(`SELECT id, key FROM agent_memory
+     WHERE sourceTaskId = ? AND contentHash = ? AND key LIKE '${LEARNINGS_ROOT}/%'
+     LIMIT 1`, [taskId, contentHash]);
+  return replay ? { status: "replayed", memoryId: replay.id, key: replay.key } : null;
+}
+async function findNearDuplicate(params) {
+  try {
+    const embedding = await getEmbeddingProvider2().embed(params.text);
+    if (!embedding)
+      return null;
+    const store = getMemoryStore2();
+    const results = await Promise.all(DUPLICATE_SEARCH_PREFIXES.map((keyPrefix) => store.search(embedding, params.agentId, {
+      scope: "swarm",
+      isLead: params.isLead,
+      keyPrefix,
+      limit: 1
+    })));
+    const best = results.flat().filter((candidate) => candidate.key).sort((a, b) => b.similarity - a.similarity)[0];
+    if (!best || best.similarity < LEARNING_DUPLICATE_MIN_SIMILARITY)
+      return null;
+    return {
+      status: "duplicate",
+      memoryId: best.id,
+      key: best.key,
+      similarity: Math.round(best.similarity * 1000) / 1000
+    };
+  } catch (err) {
+    console.warn("[task-learning] near-duplicate check failed; storing the learning:", scrubSecrets(err instanceof Error ? err.message : String(err)));
+    return null;
+  }
+}
+async function rateDuplicate(duplicate, taskId) {
+  try {
+    await applyRating([
+      {
+        memoryId: duplicate.memoryId,
+        signal: 1,
+        weight: 1,
+        source: LEARNING_DUPLICATE_RATING_SOURCE,
+        reasoning: `store-progress learning matched at cosine ${duplicate.similarity}`
+      }
+    ], { taskId });
+  } catch (err) {
+    console.warn("[task-learning] duplicate rating failed:", scrubSecrets(err instanceof Error ? err.message : String(err)));
+  }
+}
+async function insertLearning(params) {
+  const { agentId, isLead, taskId, text, tags, workstream } = params;
+  const replay = await findReplay(taskId, contentSha256(text));
+  if (replay)
+    return replay;
+  const title = text.split(/\r?\n/, 1)[0].trim().slice(0, 200);
+  const baseKey = `${LEARNINGS_ROOT}/${workstream}/${toKebab(title) || "learning"}`;
+  for (let attempt = 0;attempt < KEY_ATTEMPTS; attempt++) {
+    const key = attempt === 0 ? baseKey : `${baseKey}-${crypto.randomUUID().slice(0, 6)}`;
+    const taken = await getDbClient2().get("SELECT id FROM agent_memory WHERE scope = 'swarm' AND key = ? LIMIT 1", [key]);
+    if (taken)
+      continue;
+    try {
+      const result = await indexMemoryContent({
+        agentId,
+        content: text,
+        name: title,
+        scope: "swarm",
+        source: "manual",
+        sourceTaskId: taskId,
+        tags: ["learning", ...tags],
+        intent: "store-progress learning",
+        key,
+        writer: { principal: { kind: "agent", agentId, isLead }, source: "mcp" }
+      });
+      return { status: "stored", memoryId: result.memoryIds[0], key, workstream };
+    } catch (err) {
+      if (/UNIQUE constraint failed/i.test(err.message))
+        continue;
+      throw err;
+    }
+  }
+  return { status: "failed", error: `no free key under ${baseKey}` };
+}
+
+// src/tools/store-progress.ts
 init_rbac();
 init_types();
 init_secret_scrubber();
@@ -134582,8 +134751,26 @@ var storeProgressOutputSchema = swarmToolOutputSchema({
   yourAgentId: string2().optional(),
   wasNoOp: boolean().optional().describe("True when the call was a no-op because the task was already in a terminal state (completed/failed/cancelled). First-call-wins."),
   wasForcedOverwrite: boolean().optional().describe("True when force: true replaced output and/or failureReason on an already-terminal task without replaying completion side effects."),
-  blockedWaitingElapsedMs: number2().optional().describe("Present only when this progress text reads as blocked-waiting: milliseconds since the task's prior update. Drives the store-progress nudge toward defer-task.")
+  blockedWaitingElapsedMs: number2().optional().describe("Present only when this progress text reads as blocked-waiting: milliseconds since the task's prior update. Drives the store-progress nudge toward defer-task."),
+  learning: looseObject({
+    status: string2().optional(),
+    key: string2().optional(),
+    memoryId: string2().optional(),
+    workstream: string2().optional(),
+    similarity: number2().optional(),
+    error: string2().optional()
+  }).optional().describe("Present when the call carried a learning: stored, replayed (same text already stored for this task), duplicate (an existing swarm memory at key/memoryId says the same; similarity is the raw cosine), or failed with error.")
 });
+function learningSentence(result) {
+  if (result.status === "stored")
+    return `Learning stored at ${result.key}.`;
+  if (result.status === "replayed")
+    return `Learning already stored at ${result.key}; skipped.`;
+  if (result.status === "duplicate") {
+    return `Learning not stored: it matches ${result.key} (similarity ${result.similarity}).`;
+  }
+  return `Learning not stored: ${result.error}.`;
+}
 var registerStoreProgressTool = (server) => {
   createToolRegistrar(server)("store-progress", {
     title: "Store task progress",
@@ -134597,6 +134784,14 @@ var registerStoreProgressTool = (server) => {
       failureReason: string2().optional().describe("The reason for failure (used when failing)."),
       attachments: array2(AttachmentInputSchema).max(20).optional().describe("Pointer-based artifacts produced by this step — agent-fs path, URL, shared-fs path, or swarm Page. No inline file data; upload to agent-fs first and attach by path. Agent-fs pointers are verified before task state changes, using the explicit org/drive pair or the registering agent's configured defaults. May be sent on any call (progress or completion) and accumulates across calls; duplicates are de-duped by sha256 (when present) or by (kind, pointer, name)."),
       citations: array2(CitationInputSchema).max(MAX_TASK_CITATIONS).catch([]).optional().describe('Claim sources, upserted by index across calls. Use only for factual claims the reader cannot already see in the thread or task tree, 1-2 sources; none on delegation, routing, acks, or status replies. Reference each one in output with [citation:N], or set general: true for a source that backs the whole answer (it renders under "General sources"). ref per kind: task = task UUID; memory = memory UUID (optional quote must appear verbatim in it); github = owner/repo#N, owner/repo@<sha>, or a github.com pull, issues, or commit URL; slack = permalink or channel/ts; agent-fs = file path; page = page id; script-run = script run id; url = http(s) URL. The first completing call is refused, and the task stays in progress, if a marker has no entry, a citation fails validation, or a non-general citation is unreferenced; the response lists each problem. After one refusal, completion proceeds and those markers and sources are dropped from rendered output. At most 50 citations per call/task, refs up to 2048 characters, labels up to 200. Invalid or oversized batches are ignored; existing indices can still be updated at capacity.'),
+      learning: union2([
+        string2(),
+        object2({
+          text: string2(),
+          workstream: string2().optional(),
+          tags: array2(string2()).optional()
+        })
+      ]).optional().describe(`A lesson to keep. Add one only when it would change how the next agent works: a gotcha, a dead end, a pattern that worked. Not a progress line. Stored as a swarm memory at /learnings/<workstream>/<slug>, tagged "learning" and tied to this task. The first line of text is the title. At most ~500 tokens and ${LEARNING_MAX_TAGS} kebab tags. workstream defaults to the task's repo name, else "general". Send it on or before the completing call: a call on a finished task stores nothing. A failed learning write is reported in the result and never blocks the progress update.`),
       persistMemory: boolean().optional().describe("Opt in to task_completion memory persistence for automatic/recurring tasks. Manual tasks are persisted by default; scheduled, system, heartbeat/boot-triage, monitor, and digest tasks are skipped unless this is true."),
       force: boolean().optional().describe("On an already-terminal task, overwrite explicitly provided output and/or failureReason text while preserving status and finishedAt and without replaying events, memory writes, follow-up creation, business-use ensure, or capacity updates. Differing terminal text is otherwise discarded and reported as a failure.")
     }),
@@ -134609,6 +134804,7 @@ var registerStoreProgressTool = (server) => {
     failureReason,
     attachments,
     citations,
+    learning,
     persistMemory,
     force
   }, requestInfo, _meta) => {
@@ -134702,6 +134898,7 @@ var registerStoreProgressTool = (server) => {
         return toolErr(`${verificationError} No attachment was registered and task state was unchanged.`);
       }
     }
+    let learningWrite;
     const result = await getDbClient2().transaction(async () => {
       const agent = await getAgentById2(requestInfo.agentId ?? "");
       if (!agent) {
@@ -134768,6 +134965,21 @@ var registerStoreProgressTool = (server) => {
       if (citations?.length && existingTask.agentId === agent.id) {
         await upsertTaskCitations(taskId, citations);
       }
+      if (learning && isTerminal) {
+        learningWrite = Promise.resolve({
+          status: "failed",
+          error: "the task is already finished; use memory-store"
+        });
+      } else if (learning) {
+        learningWrite = new Promise((resolve) => {
+          getDbClient2().afterCommit(() => storeTaskLearning({
+            agentId: agent.id,
+            isLead: agent.isLead === true,
+            task: existingTask,
+            learning
+          }).then(resolve, (err) => resolve({ status: "failed", error: scrubSecrets(String(err)) })));
+        });
+      }
       const terminalResultGuard = await guardTerminalTaskResultWrite(existingTask, {
         status,
         output,
@@ -134890,7 +135102,9 @@ This check refuses once per task; the next completion is accepted and unfixed ci
         persistMemory
       });
     }
-    const { success, message } = result;
+    const learningResult = await learningWrite;
+    const { success } = result;
+    const message = learningResult ? `${result.message} ${learningSentence(learningResult)}` : result.message;
     const task = result.task ? {
       id: result.task.id,
       status: result.task.status,
@@ -134901,7 +135115,8 @@ This check refuses once per task; the next completion is accepted and unfixed ci
       ...task ? { task } : {},
       ..."wasNoOp" in result && result.wasNoOp ? { wasNoOp: true } : {},
       ..."wasForcedOverwrite" in result && result.wasForcedOverwrite ? { wasForcedOverwrite: true } : {},
-      ..."blockedWaitingElapsedMs" in result && typeof result.blockedWaitingElapsedMs === "number" ? { blockedWaitingElapsedMs: result.blockedWaitingElapsedMs } : {}
+      ..."blockedWaitingElapsedMs" in result && typeof result.blockedWaitingElapsedMs === "number" ? { blockedWaitingElapsedMs: result.blockedWaitingElapsedMs } : {},
+      ...learningResult ? { learning: learningResult } : {}
     };
     const warnings = success && status === "completed" ? taskCitationWarnings(result.task?.output ?? output ?? "", await getTaskCitations(taskId)) : [];
     return success ? toolOk(message, { data, details: warnings.length ? warnings.join(`
@@ -137095,6 +137310,82 @@ var registerRetryWorkflowRunTool = (server) => {
 // src/tools/workflows/trigger-workflow.ts
 init_zod();
 init_db3();
+init_workflow_idempotency();
+
+// src/http/idempotency-key.ts
+init_zod();
+init_workflow_idempotency();
+init_request_auth_context();
+var IDEMPOTENCY_KEY_PATTERN = /^[\x21-\x7E]{1,255}$/;
+var IDEMPOTENT_REPLAYED_HEADER = "Idempotent-Replayed";
+var idempotencyKeyHeader = (accepted) => object2({
+  "Idempotency-Key": string2().regex(IDEMPOTENCY_KEY_PATTERN).optional().describe("Optional client-generated key, 1-255 visible ASCII characters (a UUID works). " + `The first request the server accepts under a key ${accepted}; a retry with the same key ` + "and an equivalent body gets that request's status and body back (with " + `\`${IDEMPOTENT_REPLAYED_HEADER}: true\`) and changes nothing. The key is scoped to the ` + "caller's identity and this operation; it is not a credential. The same key with a " + "different body is a 409. A request rejected before it is accepted (validation, auth, " + "not found, disabled) does not use up the key. Accepted keys do not expire.")
+});
+function idempotencyPrincipal(req, myAgentId) {
+  const auth = getRequestAuth(req);
+  switch (auth?.kind) {
+    case "user":
+      return `user:${auth.userId}`;
+    case "agent":
+      return `agent:${auth.agentId}`;
+    case "controller":
+      return `controller:${auth.controllerId}`;
+    case "guest":
+      return null;
+    default:
+      return myAgentId ? `agent:${myAgentId}` : "operator";
+  }
+}
+function readIdempotencyKey(req, res, myAgentId) {
+  const raw = req.headers["idempotency-key"];
+  if (raw === undefined)
+    return;
+  const key = Array.isArray(raw) ? raw.join(", ") : raw;
+  if (!IDEMPOTENCY_KEY_PATTERN.test(key)) {
+    jsonError(res, "Idempotency-Key must be 1-255 visible ASCII characters", 400);
+    return null;
+  }
+  const principal = idempotencyPrincipal(req, myAgentId);
+  if (!principal) {
+    jsonError(res, "Idempotency-Key needs an identified caller", 400);
+    return null;
+  }
+  return { principal, key };
+}
+async function replayAcceptedOperation(res, claim, send) {
+  const accepted = await findAcceptedWorkflowOperation(claim);
+  if (!accepted)
+    return false;
+  if (accepted.fingerprint !== claim.fingerprint) {
+    jsonError(res, "Idempotency-Key was already used for a different request", 409);
+  } else if (accepted.resourceDeletedAt !== null) {
+    jsonError(res, "The workflow this Idempotency-Key created or triggered was deleted; send a new key to start over", 410);
+  } else {
+    res.setHeader(IDEMPOTENT_REPLAYED_HEADER, "true");
+    send(accepted.body);
+  }
+  return true;
+}
+
+// src/tools/workflows/trigger-workflow.ts
+async function replayAcceptedTrigger(claim) {
+  const accepted = await findAcceptedWorkflowOperation(claim);
+  if (!accepted)
+    return null;
+  if (accepted.fingerprint !== claim.fingerprint) {
+    return toolErr("idempotencyKey was already used to trigger this workflow with other data.", {
+      data: { idempotencyConflict: true }
+    });
+  }
+  if (accepted.resourceDeletedAt !== null) {
+    return toolErr("The workflow this idempotencyKey triggered was deleted; send a new key to start over.");
+  }
+  const { runId, skipped } = accepted.body;
+  return toolOk("Run already accepted under this idempotencyKey; nothing new was started.", {
+    details: `Replayed the run accepted under this idempotencyKey — run ID: ${runId}.`,
+    data: { runId, skipped, replayed: true }
+  });
+}
 var registerTriggerWorkflowTool = (server) => {
   createToolRegistrar(server)("trigger-workflow", {
     title: "Trigger Workflow",
@@ -137102,16 +137393,35 @@ var registerTriggerWorkflowTool = (server) => {
     description: "Manually trigger a workflow execution, optionally passing trigger data as context. Respects cooldown configuration. " + "If the workflow has a triggerSchema, the payload is validated first; on failure, the response includes structured validationErrors plus the workflow's triggerSchema for self-correction.",
     inputSchema: object2({
       id: string2().uuid().describe("Workflow ID to trigger"),
-      triggerData: record2(string2(), unknown()).optional().describe("Optional data to pass as trigger context to the workflow")
+      triggerData: record2(string2(), unknown()).optional().describe("Optional data to pass as trigger context to the workflow"),
+      wait: boolean().optional().describe("Default true: return after the run's instant steps ran, when it finishes or parks at its first async step. " + "false: return as soon as the run is created and walk it in the background. Use false from a script or step that only needs the runId."),
+      idempotencyKey: string2().regex(IDEMPOTENCY_KEY_PATTERN).optional().describe("Optional, 1-255 visible ASCII characters, scoped to the calling agent and this workflow. " + "The first trigger accepted under a key starts one run; the key is recorded in the run's own transaction and never expires. " + "A retry with the same key and triggerData starts nothing and returns that run (replayed: true), even if the earlier call was killed before it saw the answer. " + "The same key with other triggerData is an error with idempotencyConflict: true.")
     }),
     outputSchema: swarmToolOutputSchema({
       runId: string2().optional(),
       skipped: boolean().optional(),
+      replayed: boolean().optional(),
+      idempotencyConflict: boolean().optional(),
       validationErrors: array2(string2()).optional(),
       triggerSchema: record2(string2(), unknown()).optional()
     })
-  }, async ({ id, triggerData }, requestInfo) => {
+  }, async ({ id, triggerData, wait, idempotencyKey }, requestInfo) => {
     try {
+      if (idempotencyKey !== undefined && !requestInfo.agentId) {
+        return toolErr("idempotencyKey needs an identified caller (X-Agent-ID).");
+      }
+      const claim = idempotencyKey === undefined ? undefined : {
+        principal: `agent:${requestInfo.agentId}`,
+        key: idempotencyKey,
+        operation: "workflow.trigger",
+        targetId: id,
+        fingerprint: workflowRequestFingerprint("workflow.trigger", triggerData ?? {})
+      };
+      if (claim) {
+        const replayed = await replayAcceptedTrigger(claim);
+        if (replayed)
+          return replayed;
+      }
       const workflow = await getWorkflow2(id);
       if (!workflow) {
         return toolErr(`Workflow not found: ${id}`);
@@ -137119,12 +137429,33 @@ var registerTriggerWorkflowTool = (server) => {
       if (!workflow.enabled) {
         return toolErr(`Workflow "${workflow.name}" is disabled.`);
       }
-      const runId = await startWorkflowExecution2(workflow, triggerData ?? {}, getExecutorRegistry2(), {
-        triggerType: "manual",
-        requestedByUserId: await resolveTaskAuditUserId(requestInfo.sourceTaskId, requestInfo.agentId) ?? undefined
-      });
-      const run = await getWorkflowRun2(runId);
-      const skipped = run?.status === "skipped";
+      let accepted;
+      let runId;
+      try {
+        runId = await startWorkflowExecution2(workflow, triggerData ?? {}, getExecutorRegistry2(), {
+          triggerType: "manual",
+          requestedByUserId: await resolveTaskAuditUserId(requestInfo.sourceTaskId, requestInfo.agentId) ?? undefined,
+          detach: wait === false,
+          accept: claim ? async (run) => {
+            const response = { runId: run.runId, skipped: run.skipped };
+            await recordAcceptedWorkflowOperation(claim, {
+              workflowId: workflow.id,
+              runId: run.runId,
+              status: 201,
+              body: response
+            });
+            accepted = response;
+          } : undefined
+        });
+      } catch (err) {
+        if (claim && err instanceof IdempotencyKeyTakenError) {
+          const replayed = await replayAcceptedTrigger(claim);
+          if (replayed)
+            return replayed;
+        }
+        throw err;
+      }
+      const skipped = accepted ? accepted.skipped : (await getWorkflowRun2(runId))?.status === "skipped";
       if (skipped) {
         return toolOk(`Workflow "${workflow.name}" skipped (cooldown).`, {
           details: `Workflow "${workflow.name}" skipped (cooldown active) — run ID: ${runId}.`,
@@ -137626,4 +137957,4 @@ async function createServer(opts = {}) {
   return server;
 }
 
-export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, resolveIdentity, renderIdentity, createAdditiveBuffer, taskModelPin, resumedTaskModelSelection, listHarnessModelSupport, recordHarnessModelSupport, agentRanModel, getAgentHarnessCliVersion, setAgentHarnessCliVersion, sanitizeModelTierOverrides, parseModelTierOverridesHeader, setAgentModelTierOverrides, previewModelTiers, recordClaimModelResolution, harnessModelErrorFor, poolTaskRunsOnHarness, explicitModelError, explicitModelErrorForAgent, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, scopeFromAttachment, backingProviderId, transcribeAudioNotes, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, isRuntimePoolWakeable, isAgentReachable, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, recoverIncompleteRuns, handleWebhookTrigger, verifyHmacSignature, WebhookError, snapshotAndUpdateWorkflow, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry2, initWorkflows2, dispatchScheduleTarget, calculateNextRun2, startScheduler2, stopScheduler2, runScheduleNow2, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, hasKvViewArgs, resolveKvView, toolErr, createToolRegistrar, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError2, isRegistered2, isExtensionAgentId2, getExtensionBridgeToken2, resolveBridgeCallOrigin2, extensionIdForAgent2, runContext2, registerLoaded2, unregister2, listRegistered2, dispatchPre2, dispatchPost2, stripSiblingBlock, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, isAzureDevOpsEnabled, initAzureDevOps, verifyAzureDevOpsWebhook, repointTrackerSyncBySwarmId, isAzureDevOpsUrl, canonicalAzureDevOpsRepoUrl, parseAzureDevOpsRepoUrl, createdPullRequestOf, commentedPayloadOf, handlePullRequestCreated, handlePullRequestCommented, handleWorkItemCreated, handleWorkItemUpdated, handleWorkItemCommented, handleWorkItemDeleted, handleWorkItemRestored, initAzureDevOpsOutbound, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, getTelemetryIngestAnchor, initApiTelemetry, syncTelemetryEnabled, isBitbucketEnabled, initBitbucket, verifyBitbucketWebhook, isDuplicateDelivery, markDeliveryProcessed, pullRequestEventOf, pullRequestCommentEventOf, handlePullRequestCreated2, handlePullRequestCommentCreated, handlePullRequestClosed, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2, handleNote, handlePipeline, isChatSdkEnabled, getChatSdkConfig, errorMessage, resolveAdapterApiUrl, trackBackground, TelegramBotApiError, callTelegramBotApi, isTrustedTeamsServiceUrl, getSessionLabels, rememberSessionLabel, isChatSdkStopping, startChatSdk, getChatInstance, isChatAdapterConfigured, getChatSdkHealth, stopChatSdk, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, isCookieSafePageId, extractPageSession, extractLegacyPageSession, extractAndVerifyCookie, pageSessionSetCookies, resolveHttpRequestAuth, getDeploymentEnvValue, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, MCP_MAX_TOOL_INPUT_ELEMENTS, MCP_MAX_REQUEST_BODY_BYTES, userCtx, requestPrincipal, agentFirstPrincipal, rejectGuest, handleApps, cancelApprovalRequest, cancelApprovalRequestAndRun, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, getPageEditCounter, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, MemoryKeyError, refreshLinks, indexMemoryContent, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, inheritedModelSelection, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, privateNamespaceError, reservedRoomKeyError, updateMcpServerChecked, updateTouchesStdioExecution, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, isApiDraining, drainApi, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, changesAllowMerge, updateSwarmRepoChecked, getCombConfig, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, sessionAccessTopic, sessionPresenceRoot, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, MEMORY_KEYS_DEFAULT_PREFIX, MEMORY_KEYS_MAX_LIMIT, estimateTokens, posteriorMean, listMemoryKeys, checkChunkIntegrity, getMemoryChunks, getPosteriorsByIds, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, workflowModelErrors, patchWorkflowDefinition, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };
+export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, resolveIdentity, renderIdentity, createAdditiveBuffer, taskModelPin, resumedTaskModelSelection, listHarnessModelSupport, recordHarnessModelSupport, agentRanModel, getAgentHarnessCliVersion, setAgentHarnessCliVersion, sanitizeModelTierOverrides, parseModelTierOverridesHeader, setAgentModelTierOverrides, previewModelTiers, recordClaimModelResolution, harnessModelErrorFor, poolTaskRunsOnHarness, explicitModelError, explicitModelErrorForAgent, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, scopeFromAttachment, backingProviderId, transcribeAudioNotes, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, isRuntimePoolWakeable, isAgentReachable, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, recoverIncompleteRuns, handleWebhookTrigger, verifyHmacSignature, WebhookError, snapshotAndUpdateWorkflow, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry2, initWorkflows2, dispatchScheduleTarget, calculateNextRun2, startScheduler2, stopScheduler2, runScheduleNow2, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, hasKvViewArgs, resolveKvView, toolErr, createToolRegistrar, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError2, isRegistered2, isExtensionAgentId2, getExtensionBridgeToken2, resolveBridgeCallOrigin2, extensionIdForAgent2, runContext2, registerLoaded2, unregister2, listRegistered2, dispatchPre2, dispatchPost2, stripSiblingBlock, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, isAzureDevOpsEnabled, initAzureDevOps, verifyAzureDevOpsWebhook, repointTrackerSyncBySwarmId, isAzureDevOpsUrl, canonicalAzureDevOpsRepoUrl, parseAzureDevOpsRepoUrl, createdPullRequestOf, commentedPayloadOf, handlePullRequestCreated, handlePullRequestCommented, handleWorkItemCreated, handleWorkItemUpdated, handleWorkItemCommented, handleWorkItemDeleted, handleWorkItemRestored, initAzureDevOpsOutbound, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, getTelemetryIngestAnchor, initApiTelemetry, syncTelemetryEnabled, isBitbucketEnabled, initBitbucket, verifyBitbucketWebhook, isDuplicateDelivery, markDeliveryProcessed, pullRequestEventOf, pullRequestCommentEventOf, handlePullRequestCreated2, handlePullRequestCommentCreated, handlePullRequestClosed, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2, handleNote, handlePipeline, isChatSdkEnabled, getChatSdkConfig, errorMessage, resolveAdapterApiUrl, trackBackground, TelegramBotApiError, callTelegramBotApi, isTrustedTeamsServiceUrl, getSessionLabels, rememberSessionLabel, isChatSdkStopping, startChatSdk, getChatInstance, isChatAdapterConfigured, getChatSdkHealth, stopChatSdk, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, isCookieSafePageId, extractPageSession, extractLegacyPageSession, extractAndVerifyCookie, pageSessionSetCookies, resolveHttpRequestAuth, getDeploymentEnvValue, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, MCP_MAX_TOOL_INPUT_ELEMENTS, MCP_MAX_REQUEST_BODY_BYTES, userCtx, requestPrincipal, agentFirstPrincipal, rejectGuest, handleApps, cancelApprovalRequest, cancelApprovalRequestAndRun, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, getPageEditCounter, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, MemoryKeyError, refreshLinks, indexMemoryContent, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, inheritedModelSelection, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, privateNamespaceError, reservedRoomKeyError, updateMcpServerChecked, updateTouchesStdioExecution, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, isApiDraining, drainApi, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, changesAllowMerge, updateSwarmRepoChecked, getCombConfig, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, sessionAccessTopic, sessionPresenceRoot, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, MEMORY_KEYS_DEFAULT_PREFIX, MEMORY_KEYS_MAX_LIMIT, estimateTokens, posteriorMean, listMemoryKeys, checkChunkIntegrity, getMemoryChunks, getPosteriorsByIds, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, workflowModelErrors, patchWorkflowDefinition, idempotencyKeyHeader, readIdempotencyKey, replayAcceptedOperation, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };