@desplega.ai/agent-swarm 2.7.2 → 2.7.3

package/dist/{http-65ts210h.js → http-6mfh2ww9.js}

@@ -68,6 +68,7 @@ import {
   listExtensionRuns,
   SDK_ALLOWLIST,
   mcpToolNameForSdkMethod,
+  MCP_OVERFLOW_NAMESPACE,
   mcpOverflowAuthError,
   hasKvViewArgs,
   resolveKvView,
@@ -297,7 +298,7 @@ import {
   hasCapability,
   getEnabledCapabilities,
   createServer
-} from "./cli-qy0z3mfj.js";
+} from "./cli-9vttw9nz.js";
 import {
   chatThreadOfContextKey,
   agentContextKey,
@@ -405,6 +406,9 @@ import {
   recordApprovalVotes2,
   getPendingApprovalsForTasks2,
   computeContentHash2,
+  startTaskSearchBackfill,
+  stopTaskSearchBackfill,
+  init_search_index,
   getTaskById2,
   TASK_LINEAGE_LIMITS2,
   getTaskLineage2,
@@ -748,6 +752,7 @@ import {
   hasFirstCompletedTask2,
   getKv2,
   sweepExpiredKv2,
+  sweepExpiredKvPrefix2,
   upsertKv2,
   claimKv2,
   deleteKv2,
@@ -772,7 +777,7 @@ import {
   countScriptRunJournalSteps2,
   countScriptRunJournalAgentTaskSteps2,
   init_db3
-} from "./cli-txr0z97c.js";
+} from "./cli-wmhajw68.js";
 import {
   PRIMARY_ROLE_NAMES2,
   getUserGrant2,
@@ -783,22 +788,22 @@ import {
   assertNotLastAdmin2,
   setUserRoles2,
   init_rbac_roles
-} from "./cli-jmcf8cnz.js";
-import"./cli-mzgppb7q.js";
+} from "./cli-ja369zab.js";
+import"./cli-a0w50zw9.js";
 import {
   normalizeModelKey
-} from "./cli-p8yrsmfn.js";
+} from "./cli-10kjx0dm.js";
 import {
   upsertModelCatalogOverlay,
   deleteModelCatalogOverlay,
   loadModelsCatalog,
   requestModelCatalogRefresh2
-} from "./cli-e19bgatr.js";
+} from "./cli-jmk31131.js";
 import {
   AMP_ESTIMATE_MODELS,
   ampBillsCacheWrites,
   resolveAmpModel
-} from "./cli-qp6adcmw.js";
+} from "./cli-e24w2mvk.js";
 import {
   workflowEventBus2,
   init_event_bus
@@ -838,7 +843,7 @@ import {
   generateEdges,
   definitionNodeIds,
   validateDefinition
-} from "./cli-b2rhbaty.js";
+} from "./cli-pnm99spe.js";
 import {
   require_dist2,
   getMcpOAuthToken,
@@ -905,14 +910,14 @@ import {
   typecheckWithAmbient,
   typecheckScript,
   parseSkillContent
-} from "./cli-10cp92df.js";
+} from "./cli-5ke7gxwr.js";
 import {
   buildAuthorizationUrl,
   exchangeAuthorizationCode,
   oauthAppRowToProviderConfig,
   forceRefreshAuthorizationOrThrow,
   forceRefreshTokenOrThrow
-} from "./cli-t3npd8hm.js";
+} from "./cli-ghfhn1qc.js";
 import {
   signalProcessGroup,
   detachedProcessGroup,
@@ -945,8 +950,8 @@ import {
   getSlackApp2,
   startSlackApp2,
   stopSlackApp2
-} from "./cli-9jfty8px.js";
-import"./cli-6vq3ymqm.js";
+} from "./cli-ktcdczth.js";
+import"./cli-0tkm519n.js";
 import"./cli-n0ysjjtv.js";
 import {
   _fetchHolder,
@@ -964,7 +969,7 @@ import {
 import {
   retryFailedRun2,
   cancelWorkflowRun2
-} from "./cli-1xpr5992.js";
+} from "./cli-kjha1q9k.js";
 import {
   duplicateGuardedQueryKey,
   warnIfCorsAllowsAnyOrigin,
@@ -1012,14 +1017,14 @@ import {
   bodyListTask,
   describeRequestRoute,
   route
-} from "./cli-s7cm1927.js";
+} from "./cli-0xzbk52h.js";
 import {
   FilesError,
   normalizeFilesError,
   agentFsRequestTimeoutMs,
   AgentFsProvider,
   getFileStorageProvider2
-} from "./cli-g9ypd5en.js";
+} from "./cli-z52gq55b.js";
 import {
   RuntimePoolError2,
   mintControllerToken,
@@ -1040,7 +1045,7 @@ import {
   resolvePoolDelivery2,
   createPoolAgent2,
   init_db
-} from "./cli-2qbmjfta.js";
+} from "./cli-z6219sd3.js";
 import {
   RATING_MODEL_MAX_LENGTH,
   REFERENCES_SOURCE_MAX_LENGTH,
@@ -1059,8 +1064,8 @@ import {
   checkHeartbeatChecklist2,
   runHeartbeatSweep2,
   stopHeartbeat2
-} from "./cli-qa4hgda3.js";
-import"./cli-5d8wd50e.js";
+} from "./cli-vvz64zc5.js";
+import"./cli-bs0fwb23.js";
 import {
   import_websocket,
   import_websocket_server
@@ -1069,7 +1074,7 @@ import {
   runtimeSupervisorStatus,
   startRuntimeSupervisor,
   stopRuntimeSupervisor
-} from "./cli-0awbtmv2.js";
+} from "./cli-dek8hqjc.js";
 import"./cli-ns59dc6r.js";
 import {
   ACP_TARGET_IDS
@@ -1090,11 +1095,11 @@ import {
   isUnknownModelError,
   checkProviderPoolKey,
   writeSkillsToFilesystem
-} from "./cli-femw4q81.js";
+} from "./cli-6151a7dr.js";
 import {
   inviteEmailToSharedOrg,
   ensureAgentFsCredentialsForAgent
-} from "./cli-hzrmv8pg.js";
+} from "./cli-x38rmhap.js";
 import {
   Anthropic
 } from "./cli-prcyzecg.js";
@@ -1107,6 +1112,9 @@ import {
 } from "./cli-9fzgd3hg.js";
 import"./cli-13p25grh.js";
 import"./cli-0adyhvq2.js";
+import {
+  require_dist8
+} from "./cli-3k9jej0c.js";
 import {
   require_content_type
 } from "./cli-1jx0srjt.js";
@@ -1118,6 +1126,7 @@ import {
   registerSessionTokenConnection,
   init_session_token_connections,
   findUserById,
+  findUserByExternalId,
   findUserByEmail,
   getUserIdentities,
   listUserEvents,
@@ -1139,7 +1148,7 @@ import {
   revokeAgentTokens,
   fingerprintApiKey,
   init_users
-} from "./cli-9jn9cj0q.js";
+} from "./cli-v9jk2k63.js";
 import"./cli-v41kn3cd.js";
 import"./cli-wgtk7xxr.js";
 import"./cli-1f0gp9vz.js";
@@ -1172,7 +1181,7 @@ import {
   revokeMcpToken,
   computeExpiresAt,
   init_mcp_wrapper
-} from "./cli-2cj8fqv1.js";
+} from "./cli-kjcdzea8.js";
 import {
   ASSET_KEY_MAX_LENGTH,
   normalizeAssetKey,
@@ -1222,6 +1231,7 @@ import {
   TaskTemplateSchema,
   AgentStatusSchema,
   AgentAvatarSchema,
+  AgentSlackIconSchema,
   AgentSchema,
   AgentLatestModelSchema,
   AgentAcpStatusSchema,
@@ -1324,12 +1334,12 @@ import {
   KvKeySchema,
   KvEntrySchema,
   init_types2
-} from "./cli-e1p7dqe1.js";
+} from "./cli-4aydmmdy.js";
 import {
   IDENTITY_FIELD_BUDGETS,
   IdentityFieldBudgetError,
   init_identity_field_budget
-} from "./cli-0wx63vvw.js";
+} from "./cli-9km88w11.js";
 import {
   isSteeringEnabled2,
   init_steering_enabled
@@ -1390,6 +1400,7 @@ import {
   partialRecord,
   _enum2,
   literal2,
+  lazy,
   preprocess,
   ZodIssueCode,
   exports_coerce
@@ -1401,7 +1412,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-atpfk4yd.js";
+} from "./cli-7cwrwb5x.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   DEFAULT_APP_URL,
@@ -1413,7 +1424,7 @@ import {
   isCombEnabled,
   isAgentFsProxyEnabled,
   init_constants2
-} from "./cli-3cywb44q.js";
+} from "./cli-77eq8txs.js";
 import {
   parseEnvFlag,
   isEnvFlagEnabled,
@@ -1491,6 +1502,7 @@ import {
   createServer as createHttpServer
 } from "node:http";
 init_db3();
+init_search_index();
 
 // src/be/db-retention.ts
 import { AsyncLocalStorage } from "node:async_hooks";
@@ -2073,6 +2085,38 @@ function stopHumanFreeDrain() {
   passTimer = null;
 }
 
+// src/be/mcp-overflow-sweep.ts
+init_db3();
+var MCP_OVERFLOW_SWEEP_INTERVAL_MS = 10 * 60 * 1000;
+var sweepTimer = null;
+async function runMcpOverflowSweep(now = Date.now()) {
+  try {
+    const removed = await sweepExpiredKvPrefix2(MCP_OVERFLOW_NAMESPACE, now);
+    if (removed > 0) {
+      console.debug(`[mcp-overflow] Sweep removed ${removed} expired value(s)`);
+    }
+    return removed;
+  } catch (err) {
+    console.error("[mcp-overflow] Sweep failed:", err);
+    return 0;
+  }
+}
+function startMcpOverflowSweep(intervalMs = MCP_OVERFLOW_SWEEP_INTERVAL_MS) {
+  if (sweepTimer)
+    return;
+  sweepTimer = setInterval(() => {
+    runMcpOverflowSweep();
+  }, intervalMs);
+  if (typeof sweepTimer?.unref === "function")
+    sweepTimer.unref();
+}
+function stopMcpOverflowSweep() {
+  if (sweepTimer) {
+    clearInterval(sweepTimer);
+    sweepTimer = null;
+  }
+}
+
 // src/be/runtime-pools/seed.ts
 init_runtime_pools_flag();
 init_db3();
@@ -2378,7 +2422,7 @@ async function getQueueStallSnapshot(now = new Date) {
   const pickupCutoff = new Date(now.getTime() - QUEUE_STALL_THRESHOLD_MS).toISOString();
   const recentPickupCount = (await getDbClient2().get(`SELECT COUNT(*) AS count
          FROM agent_log
-         WHERE eventType IN ('task_status_change', 'task_claimed')
+         WHERE +eventType IN ('task_status_change', 'task_claimed')
            AND oldValue IN ('pending', 'unassigned')
            AND newValue = 'in_progress'
            AND createdAt >= ?`, [pickupCutoff]))?.count ?? 0;
@@ -4994,6 +5038,7 @@ var updateAgentProfileRoute = route({
     toolsMd: string2().optional(),
     heartbeatMd: string2().max(MAX_PROFILE_FILE_LENGTH).optional(),
     avatar: AgentAvatarSchema.nullable().optional(),
+    slackIcon: lazy(() => AgentSlackIconSchema).nullable().optional(),
     changeSource: string2().optional(),
     changedByAgentId: string2().optional(),
     changeReason: string2().optional(),
@@ -5319,8 +5364,8 @@ async function handleAgentsRest(req, res, pathSegments, queryParams, myAgentId)
     if (!parsed)
       return true;
     const body = parsed.body;
-    if (body.role === undefined && body.description === undefined && body.capabilities === undefined && body.claudeMd === undefined && body.soulMd === undefined && body.identityMd === undefined && body.setupScript === undefined && body.toolsMd === undefined && body.heartbeatMd === undefined && body.avatar === undefined) {
-      jsonError(res, "At least one field (role, description, capabilities, claudeMd, soulMd, identityMd, setupScript, toolsMd, heartbeatMd, or avatar) must be provided", 400);
+    if (body.role === undefined && body.description === undefined && body.capabilities === undefined && body.claudeMd === undefined && body.soulMd === undefined && body.identityMd === undefined && body.setupScript === undefined && body.toolsMd === undefined && body.heartbeatMd === undefined && body.avatar === undefined && body.slackIcon === undefined) {
+      jsonError(res, "At least one field (role, description, capabilities, claudeMd, soulMd, identityMd, setupScript, toolsMd, heartbeatMd, avatar, or slackIcon) must be provided", 400);
       return true;
     }
     const validChangeSources = ["self_edit", "lead_coaching", "api", "system", "session_sync"];
@@ -5342,7 +5387,8 @@ async function handleAgentsRest(req, res, pathSegments, queryParams, myAgentId)
         setupScript: body.setupScript,
         toolsMd: body.toolsMd,
         heartbeatMd: body.heartbeatMd,
-        ...body.avatar !== undefined ? { avatar: body.avatar } : {}
+        ...body.avatar !== undefined ? { avatar: body.avatar } : {},
+        ...body.slackIcon !== undefined ? { slackIcon: body.slackIcon } : {}
       }, versionMeta, {
         expectedHashes: body.expectedHashes,
         onConflict: (conflict) => conflicts.push(conflict)
@@ -9835,6 +9881,48 @@ function sentTaskId(thread, replies, serviceUserId) {
   return null;
 }
 
+// src/comb/requester.ts
+init_users();
+init_secret_scrubber();
+var AGENT_FS_IDENTITY_KIND = "agent-fs";
+async function commentAuthorUsers(agentFs, drive, comments, serviceUserId) {
+  const authors = [...new Set(comments.map((comment) => comment.author))].filter((author) => author && author !== serviceUserId);
+  const users = new Map;
+  const unlinked = [];
+  for (const author of authors) {
+    const user = await findUserByExternalId(AGENT_FS_IDENTITY_KIND, author);
+    if (user)
+      users.set(author, user.id);
+    else
+      unlinked.push(author);
+  }
+  if (unlinked.length === 0)
+    return users;
+  const members = await agentFs.getDriveMembers(drive).catch((error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    console.warn(scrubSecrets(`[comb] could not read the drive members: ${message}`));
+    return [];
+  });
+  for (const author of unlinked) {
+    const email = members.find((member) => member.userId === author)?.email;
+    const user = email ? await findUserByEmail(email) : null;
+    if (user)
+      users.set(author, user.id);
+  }
+  return users;
+}
+function batchRequester(comments, users) {
+  let newest = null;
+  for (const comment of comments) {
+    if (!users.has(comment.author))
+      continue;
+    if (!newest || Date.parse(comment.createdAt) > Date.parse(newest.createdAt)) {
+      newest = comment;
+    }
+  }
+  return newest ? users.get(newest.author) ?? null : null;
+}
+
 // src/comb/review-batch.ts
 init_templates();
 var REVIEW_BATCH_MAX = 50;
@@ -9892,6 +9980,7 @@ async function sendReviewBatch(input, deps = {}) {
     else
       candidates.push(read);
   }
+  const authorUsers = input.requestedByUserId || !serviceUserId || process.env.TRUST_BODY_REQUESTED_BY_USER_ID === "false" ? null : await commentAuthorUsers(agentFs, drive, candidates.map(commentOf), serviceUserId);
   const claim = crypto.randomUUID();
   const { won, lost } = await claimComments(candidates, claim);
   const repairs = [];
@@ -9907,8 +9996,9 @@ async function sendReviewBatch(input, deps = {}) {
   let taskId = null;
   let leadState = "none";
   if (won.length > 0) {
+    const requestedByUserId = input.requestedByUserId ?? (authorUsers ? batchRequester(won.map(commentOf), authorUsers) : null);
     try {
-      const text = await renderTaskText(input, won);
+      const text = await renderTaskText({ ...input, requestedByUserId }, won);
       if (text === null) {
         throw new ReviewBatchError(503, "The Comb review template is disabled", [
           ...skipped,
@@ -9924,7 +10014,7 @@ async function sendReviewBatch(input, deps = {}) {
         source: "comb",
         taskType: "comb-review",
         tags: ["comb"],
-        requestedByUserId: input.requestedByUserId ?? undefined
+        requestedByUserId: requestedByUserId ?? undefined
       }, { origin: "rest" });
       taskId = task.id;
     } catch (error) {
@@ -9980,6 +10070,9 @@ async function readComment(agentFs, drive, versionOf, id) {
   const version = comment.fileVersion ?? (comment.parentId ? undefined : await versionOf(comment));
   return { id, thread, version };
 }
+function commentOf(read) {
+  return read.thread.comment;
+}
 function skipOf({ id, thread }, serviceUserId) {
   if (!thread)
     return { id, reason: "not-found" };
@@ -15392,6 +15485,46 @@ async function registerTelegramWebhook() {
   }
   return { webhookUrl, webhookInfo: info };
 }
+
+// src/slack/app-icon.ts
+var import_web_api = __toESM(require_dist8(), 1);
+var TTL_MS = 60 * 60 * 1000;
+var REQUEST_TIMEOUT_MS = 2500;
+var cached = null;
+var inFlight2 = null;
+async function lookUp(client) {
+  const auth = await client.auth.test();
+  if (!auth.bot_id)
+    return null;
+  const info = await client.bots.info({ bot: auth.bot_id });
+  const icons = info.bot?.icons;
+  return icons?.image_72 ?? icons?.image_48 ?? icons?.image_36 ?? null;
+}
+async function getSlackAppIconUrl() {
+  const app = getSlackApp2()?.client;
+  if (!app?.token)
+    return null;
+  const key = `${app.slackApiUrl} ${app.token}`;
+  if (cached?.key === key && Date.now() - cached.at < TTL_MS)
+    return cached.url;
+  if (inFlight2?.key === key)
+    return await inFlight2.promise;
+  const client = new import_web_api.WebClient(app.token, {
+    slackApiUrl: app.slackApiUrl,
+    retryConfig: { retries: 0 },
+    rejectRateLimitedCalls: true,
+    timeout: REQUEST_TIMEOUT_MS
+  });
+  const promise = lookUp(client).then((url) => {
+    cached = { key, url, at: Date.now() };
+    return url;
+  }).catch(() => null).finally(() => {
+    if (inFlight2?.promise === promise)
+      inFlight2 = null;
+  });
+  inFlight2 = { key, promise };
+  return await promise;
+}
 // slack-manifest.json
 var slack_manifest_default = {
   display_information: {
@@ -15621,6 +15754,19 @@ var slackManifestRoute = route({
     200: { description: "Slack app manifest", schema: SlackManifestSchema }
   }
 });
+var slackAppIconRoute = route({
+  method: "get",
+  path: "/api/integrations/slack/app-icon",
+  pattern: ["api", "integrations", "slack", "app-icon"],
+  summary: "The Slack app's own avatar, shown on posts with no icon override",
+  tags: ["Integrations"],
+  responses: {
+    200: {
+      description: "`imageUrl` is null when Slack is off or the lookup fails.",
+      schema: object2({ imageUrl: string2().nullable() })
+    }
+  }
+});
 var chatSdkStatusRoute = route({
   method: "get",
   path: "/api/integrations/chat/status",
@@ -15659,6 +15805,10 @@ function createIntegrationsHandler(deps = {}) {
       slackManifestRoute.respond(res, 200, buildSlackManifest(parsed.query.name));
       return true;
     }
+    if (slackAppIconRoute.match(req.method, pathSegments)) {
+      slackAppIconRoute.respond(res, 200, { imageUrl: await getSlackAppIconUrl() });
+      return true;
+    }
     if (chatSdkStatusRoute.match(req.method, pathSegments)) {
       chatSdkStatusRoute.respond(res, 200, await getChatSdkStatus());
       return true;
@@ -22425,6 +22575,7 @@ var StatusActivitySchema = object2({
 });
 var StatusCombSchema = object2({
   enabled: boolean(),
+  reason: string2().nullable(),
   api_url: string2().nullable(),
   live_url: string2(),
   org_id: string2().nullable(),
@@ -22851,6 +23002,7 @@ function getCombStatus(serviceUserId) {
   const comb = getCombConfig();
   return {
     enabled: comb.enabled,
+    reason: comb.reason,
     api_url: comb.apiUrl,
     live_url: comb.liveUrl,
     org_id: comb.orgId,
@@ -22877,7 +23029,7 @@ var getStatus = route({
   path: "/status",
   pattern: ["status"],
   summary: "Identity + setup readiness + live activity for the swarm dashboard",
-  description: "Single source of truth consumed by the UI home page. Identity comes from SWARM_* envs; setup milestones each emit `unverified | configured | verified`; automations report `running | needs_setup` from the same runtime preflight used at dispatch; activity counts agents alive in the last 5 min, leads that can take work (status idle or busy), and tasks created in the last 24h; agent_fs reports whether AGENT_FS_API_URL is set, plus the Comb settings (COMB_ENABLED, the browser-facing agent-fs URL, the shared org and drive ids, and the agent-fs user id of the swarm service account); telemetry reports the effective ANONYMIZED_TELEMETRY opt-out state.",
+  description: "Single source of truth consumed by the UI home page. Identity comes from SWARM_* envs; setup milestones each emit `unverified | configured | verified`; automations report `running | needs_setup` from the same runtime preflight used at dispatch; activity counts agents alive in the last 5 min, leads that can take work (status idle or busy), and tasks created in the last 24h; agent_fs reports whether AGENT_FS_API_URL is set, plus the Comb settings (whether Files is on and, when off, what is missing; the browser-facing agent-fs URL, the shared org and drive ids, and the agent-fs user id of the swarm service account); telemetry reports the effective ANONYMIZED_TELEMETRY opt-out state.",
   tags: ["Status"],
   responses: {
     200: { description: "Status payload", schema: StatusResponseSchema },
@@ -23506,6 +23658,40 @@ init_types2();
 init_request_auth_context();
 init_secret_scrubber();
 
+// src/http/list-total-cache.ts
+var LIST_TOTAL_TTL_MS = 30000;
+var MAX_ENTRIES2 = 500;
+function filterKey(value) {
+  return JSON.stringify(value, (_key, v) => v && typeof v === "object" && !Array.isArray(v) ? Object.fromEntries(Object.entries(v).sort(([a], [b]) => a.localeCompare(b))) : v);
+}
+function createListTotalCache(ttlMs = LIST_TOTAL_TTL_MS) {
+  const entries = new Map;
+  return {
+    get(filters, offset, compute) {
+      const key = filterKey(filters);
+      const now = Date.now();
+      const hit = entries.get(key);
+      if (hit && hit.expiresAt > now && (offset ?? 0) > 0)
+        return hit.total;
+      if (hit)
+        entries.delete(key);
+      const total = compute();
+      entries.set(key, { expiresAt: now + ttlMs, total });
+      total.catch(() => {
+        if (entries.get(key)?.total === total)
+          entries.delete(key);
+      });
+      while (entries.size > MAX_ENTRIES2) {
+        const oldest = entries.keys().next().value;
+        if (oldest === undefined)
+          break;
+        entries.delete(oldest);
+      }
+      return total;
+    }
+  };
+}
+
 // src/http/requested-by.ts
 init_zod();
 init_db3();
@@ -23628,6 +23814,7 @@ var SupersedeTaskResponseSchema = object2({
   resumeTaskId: string2().nullable(),
   resumeTaskStatus: AgentTaskStatusSchema.optional()
 });
+var taskTotals = createListTotalCache();
 var listTasks = route({
   method: "get",
   path: "/api/tasks",
@@ -23642,7 +23829,7 @@ var listTasks = route({
     workflowRunId: string2().uuid().optional(),
     key: AssetKeySchema.optional(),
     keyPrefix: AssetKeySchema.optional(),
-    search: string2().optional(),
+    search: string2().optional().describe("Search task text and title by word or phrase, with a prefix match on the last word, or a task id by prefix. Not a substring match: '2443' does not find '12443', and '%' and '_' are not wildcards."),
     includeHeartbeat: _enum2(["true", "false"]).optional(),
     createdAfter: string2().datetime().optional(),
     createdBefore: string2().datetime().optional(),
@@ -24252,7 +24439,8 @@ async function handleTasks(req, res, pathSegments, queryParams, myAgentId) {
     };
     const tasks = parsed.query.fields === "full" ? await getAllTasks2(filters) : parsed.query.fields === "timeline" ? await getAllTasks2(filters, { fields: "timeline" }) : await getAllTasks2(filters, { slim: true });
     if (parsed.query.includeTotal === "true") {
-      const total = await getTasksCount2(filters);
+      const { limit: _limit, offset: _offset, orderBy: _orderBy, ...totalKey } = filters;
+      const total = await taskTotals.get(totalKey, filters.offset, () => getTasksCount2(filters));
       listTasks.respond(res, 200, { tasks, total });
     } else {
       listTasks.respond(res, 200, { tasks });
@@ -34830,7 +35018,7 @@ var LABEL_TTL_MS = 24 * 60 * 60 * 1000;
 var FAILURE_TTL_MS = 10 * 60 * 1000;
 var FAILURE_CACHE_MAX = 500;
 var LOOKUP_QUEUE_MAX = 50;
-var inFlight2 = new Set;
+var inFlight3 = new Set;
 var failedUntil = new Map;
 var pending = Promise.resolve();
 async function channelLabel(client, id) {
@@ -34862,21 +35050,21 @@ function warmSlackChannelLabels(groupKeys) {
     const id = CHANNEL_GROUP_KEY.exec(groupKey)?.[1];
     if (!id)
       continue;
-    if (inFlight2.has(id) || (failedUntil.get(id) ?? 0) > Date.now())
+    if (inFlight3.has(id) || (failedUntil.get(id) ?? 0) > Date.now())
       continue;
     failedUntil.delete(id);
-    if (inFlight2.size >= LOOKUP_QUEUE_MAX)
+    if (inFlight3.size >= LOOKUP_QUEUE_MAX)
       continue;
-    if (failedUntil.size + inFlight2.size >= FAILURE_CACHE_MAX) {
+    if (failedUntil.size + inFlight3.size >= FAILURE_CACHE_MAX) {
       const now = Date.now();
       for (const [failedId, until] of failedUntil) {
         if (until <= now)
           failedUntil.delete(failedId);
       }
-      if (failedUntil.size + inFlight2.size >= FAILURE_CACHE_MAX)
+      if (failedUntil.size + inFlight3.size >= FAILURE_CACHE_MAX)
         continue;
     }
-    inFlight2.add(id);
+    inFlight3.add(id);
     pending = pending.then(async () => {
       try {
         const label = await channelLabel(client, id);
@@ -34885,7 +35073,7 @@ function warmSlackChannelLabels(groupKeys) {
         failedUntil.set(id, Date.now() + FAILURE_TTL_MS);
         console.warn(`[Slack] Could not cache a session channel label: ${slackErrorCode2(error) ?? "unknown error"}`);
       } finally {
-        inFlight2.delete(id);
+        inFlight3.delete(id);
       }
     });
   }
@@ -35221,6 +35409,7 @@ async function handleAgentTokens(req, res, pathSegments, queryParams) {
 var SessionShowSchema = _enum2(["mine", "all"]).optional().describe("Sessions v2 view, for a user viewer with tree scope. mine (default): roots the user started from a human channel (not workflow, schedule, or system) plus sessions shared with the user. all: every tree session. Lists only: access is unchanged.");
 var SessionHideSourceSchema = string2().refine((value) => value.split(",").length <= 32, "hideSource takes at most 32 sources.").optional().transform((value) => value?.split(",").map((source) => source.trim()).filter(Boolean)).describe("Comma-separated root sources to leave out, e.g. `slack,chat`. Older sessions v2 clients send this; `showSource` replaces it.");
 var SessionShowSourceSchema = string2().refine((value) => value.split(",").length <= 32, "showSource takes at most 32 sources.").optional().transform((value) => value?.split(",").map((source) => source.trim()).filter(Boolean)).describe("Comma-separated root sources to keep (the sessions v2 source filter), e.g. `ui,slack`. Present and empty keeps none; omit to keep every source.");
+var sessionTotals = createListTotalCache();
 var listSessions = route({
   method: "get",
   path: "/api/sessions",
@@ -35591,7 +35780,8 @@ async function handleSessions(req, res, pathSegments, queryParams, myAgentId) {
       offset: parsed.query.offset
     };
     const sessions = parsed.query.fields === "full" ? await listRecentSessions2(baseOpts) : await listRecentSessions2({ ...baseOpts, slim: true });
-    const total = await countSessions2(filterOpts);
+    const { now: _now, ...totalKey } = filterOpts;
+    const total = await sessionTotals.get(totalKey, parsed.query.offset, () => countSessions2(filterOpts));
     listSessions.respond(res, 200, {
       sessions,
       total,
@@ -37034,6 +37224,7 @@ var OutcomeCountersSchema = object2({
   ignored: number2(),
   failed: number2(),
   uncertain: number2(),
+  ackNotReady: number2(),
   lastOutcomeAt: string2().nullable(),
   lastFailure: FailureSchema
 });
@@ -42000,7 +42191,7 @@ var httpServer = createHttpServer(async (req, res) => {
   });
 });
 var detachRealtime = attachRealtimeTransport(httpServer);
-var { attachControllerTransport } = await import("./controllers-connect-n2c4167r.js");
+var { attachControllerTransport } = await import("./controllers-connect-7m25cay2.js");
 var detachControllers = attachControllerTransport(httpServer);
 var stopWorkerNudges = startWorkerNudgeListener();
 var stopRoomDeletion = realtimeBus.subscribe("room:namespace-deleted", (namespace) => {
@@ -42029,7 +42220,7 @@ async function shutdown() {
     sessionsProcessed: getServerSessionsProcessed()
   });
   if (hasCapability("scheduling")) {
-    const { stopScheduler } = await import("./index-k3ewf1jg.js");
+    const { stopScheduler } = await import("./index-5eyn1wc5.js");
     stopScheduler();
   }
   stopHeartbeat2();
@@ -42041,13 +42232,15 @@ async function shutdown() {
   await stopSlackApp2();
   await stopChatSdk();
   if (!isEnvFlagEnabled("OAUTH_KEEPALIVE_DISABLE", false)) {
-    const { stopOAuthKeepalive } = await import("./keepalive-52k6skha.js");
+    const { stopOAuthKeepalive } = await import("./keepalive-cymckeg6.js");
     await stopOAuthKeepalive();
   }
   stopOAuthPendingGc();
+  stopMcpOverflowSweep();
   stopMemoryGc();
   await stopDbRetention();
   stopHumanFreeDrain();
+  await stopTaskSearchBackfill();
   stopScratchScriptGc();
   await stopExtensionRuntime();
   stopAuditGc();
@@ -42121,21 +42314,21 @@ try {
   console.warn("[startup] CAPABILITIES upgrade seed failed (non-fatal):", err);
 }
 try {
-  const { ensurePricingSeeded } = await import("./boot-seeds-f6j4t6k6.js");
+  const { ensurePricingSeeded } = await import("./boot-seeds-rpm8bb5r.js");
   ensurePricingSeeded();
-  const { startPricingRefreshLoop } = await import("./pricing-refresh-6wm42a51.js");
+  const { startPricingRefreshLoop } = await import("./pricing-refresh-t3nx5krn.js");
   startPricingRefreshLoop();
 } catch (err) {
   console.error("[startup] Failed to seed pricing rows:", err);
 }
 try {
-  const { ensureModelProfilesSeeded } = await import("./boot-seeds-f6j4t6k6.js");
+  const { ensureModelProfilesSeeded } = await import("./boot-seeds-rpm8bb5r.js");
   await ensureModelProfilesSeeded();
 } catch (err) {
   console.error("[startup] Failed to seed model profiles:", err);
 }
 try {
-  const { ensureRbacSeeded } = await import("./boot-seeds-f6j4t6k6.js");
+  const { ensureRbacSeeded } = await import("./boot-seeds-rpm8bb5r.js");
   ensureRbacSeeded();
 } catch (err) {
   console.error("[startup] Failed to sync RBAC seed rows:", err);
@@ -42143,7 +42336,7 @@ try {
     throw err;
 }
 try {
-  const { runAllSeeders } = await import("./index-hdfad00b.js");
+  const { runAllSeeders } = await import("./index-q5gzpjdd.js");
   await runAllSeeders({ scriptEmbeddingMode: "skip" });
 } catch (err) {
   console.error("[startup] Failed to seed built-in entities:", err);
@@ -42206,42 +42399,44 @@ httpServer.listen(port, async () => {
   await initWorkflows2();
   await startScriptRunSupervisor(getMcpBaseUrl());
   if (hasCapability("scheduling")) {
-    const { startScheduler } = await import("./index-k3ewf1jg.js");
-    const { getExecutorRegistry } = await import("./index-vp4wa3qn.js");
+    const { startScheduler } = await import("./index-5eyn1wc5.js");
+    const { getExecutorRegistry } = await import("./index-71gnebsn.js");
     const intervalMs = Number(process.env.SCHEDULER_INTERVAL_MS) || 1e4;
     startScheduler(getExecutorRegistry(), intervalMs, {
       runId: globalState.__runId
     });
   }
   if (!isEnvFlagEnabled("HEARTBEAT_DISABLE", false)) {
-    const { startHeartbeat } = await import("./index-mc30r1hs.js");
+    const { startHeartbeat } = await import("./index-z3b1vfjx.js");
     const heartbeatMs = Number(process.env.HEARTBEAT_INTERVAL_MS) || 90000;
     startHeartbeat(heartbeatMs);
   }
   startPoolRouting();
   startRuntimeSupervisor();
   if (!isEnvFlagEnabled("OAUTH_KEEPALIVE_DISABLE", false)) {
-    const { startOAuthKeepalive } = await import("./keepalive-52k6skha.js");
+    const { startOAuthKeepalive } = await import("./keepalive-cymckeg6.js");
     startOAuthKeepalive();
   }
   if (!isEnvFlagEnabled("OAUTH_REFRESH_SWEEP_DISABLE", false)) {
-    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-vddv9ky7.js");
+    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-5dztk8x6.js");
     startOAuthRefreshSweep();
   }
   startOAuthPendingGc();
+  startMcpOverflowSweep();
   await startMemoryGc();
   await startDbRetention();
   startHumanFreeDrain();
-  import("./embedding-space-ejefyep1.js").then(({ runEmbeddingMaintenance, setDeploymentEnvReader }) => {
+  startTaskSearchBackfill();
+  import("./embedding-space-rgf4aypt.js").then(({ runEmbeddingMaintenance, setDeploymentEnvReader }) => {
     setDeploymentEnvReader(getDeploymentEnvValue);
     return runEmbeddingMaintenance({ backfill: true });
   }).catch((err) => {
     console.error("[embedding-space] startup maintenance failed (non-fatal):", err);
   });
-  import("./boot-scrub-sweep-cpy4yg97.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
+  import("./boot-scrub-sweep-mxvb8dr3.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
     console.error("[boot-scrub-sweep] startup scrub failed (non-fatal):", err);
   });
-  import("./session-source-backfill-qzapz0ne.js").then(({ runSessionSourceBackfill }) => runSessionSourceBackfill()).catch((err) => {
+  import("./session-source-backfill-kr5bdjtp.js").then(({ runSessionSourceBackfill }) => runSessionSourceBackfill()).catch((err) => {
     console.error("[session-source-backfill] startup run failed (non-fatal):", err);
   });
 }).on("error", (err) => {