@desplega.ai/agent-swarm 2.7.4 → 2.7.6

package/dist/{cli-1yekbyqm.js → cli-shpbx5ee.js}

@@ -91,7 +91,9 @@ import {
   getAgentWorkingOnContextKey2,
   getLatestActiveTaskByContextKey2,
   getLatestLeadTaskByContextKey2,
-  findCompletedTaskInThread2,
+  findCompletedTasksInThread2,
+  findRecentFailedTaskInThread2,
+  countAgentDispatchesInThread2,
   findRecentCancelledTaskInThread2,
   init_read,
   listModelProfiles,
@@ -165,11 +167,6 @@ import {
   touchScratchScriptLastUsed,
   restoreScratchScriptLastUsedIfUnchanged,
   init_db3,
-  SteeringRequestError,
-  isSteeringEnabled,
-  carryUnhandledSteering,
-  requestSteering,
-  init_steering2,
   getWorkflowRunTriggeredByAgentId,
   getWorkflowRunSummary,
   getWorkflowRunStepsSlimByRunId,
@@ -179,6 +176,12 @@ import {
   getRunningSubWorkflowSteps,
   getSettledChildRunParentSteps,
   init_workflow_runs,
+  SteeringRequestError,
+  SteeringBlockedError,
+  isSteeringEnabled,
+  carryUnhandledSteering,
+  requestSteering,
+  init_steering2,
   getPendingTaskForAgent2,
   startTask2,
   updateTaskClaudeSessionId2,
@@ -348,17 +351,17 @@ import {
   recordInlineScriptRun2,
   exports_db,
   init_db4
-} from "./cli-1s1dqn1j.js";
+} from "./cli-k2gzwsj2.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-bq2pcphn.js";
+} from "./cli-rmmmrjkd.js";
 import {
   ensurePricingSeeded2,
   ensureRbacSeeded2,
   ensureModelProfilesSeeded2,
   init_boot_seeds
-} from "./cli-36g23z21.js";
+} from "./cli-zbbwez0r.js";
 import {
   buildCatalogEntries,
   listModelCatalog,
@@ -370,11 +373,11 @@ import {
   requestModelCatalogRefresh2,
   startPricingRefreshLoop2,
   init_pricing_refresh
-} from "./cli-wcmnan2g.js";
+} from "./cli-89knwags.js";
 import {
   workflowEventBus2,
   init_event_bus
-} from "./cli-eny54typ.js";
+} from "./cli-wx3rhnm0.js";
 import {
   slackCode,
   slackMissingScopeMessage,
@@ -383,7 +386,7 @@ import {
   externalChannelToolError2,
   getChannelBlockReason2,
   init_external_channel
-} from "./cli-a1fhj4n9.js";
+} from "./cli-w6dt9ged.js";
 import {
   noteSlackInboundSideEffect,
   init_inbound_dispatch,
@@ -418,7 +421,7 @@ import {
   startSlackApp2,
   stopSlackApp2,
   init_app3
-} from "./cli-1gm8jcyr.js";
+} from "./cli-waqbxg08.js";
 import {
   shapeApprovalResolution,
   init_approval_resolution,
@@ -442,7 +445,7 @@ import {
   resumeFromChildRun2,
   initWaitBusSubscriptions2,
   init_resume
-} from "./cli-mvckssyq.js";
+} from "./cli-m48g6p95.js";
 import {
   FilesError,
   providerPath,
@@ -456,7 +459,7 @@ import {
 import {
   getRuntimePool2,
   init_db2
-} from "./cli-cq1pf336.js";
+} from "./cli-yn4kxs06.js";
 import {
   duplicateGuardedQueryKey,
   parseQueryParams,
@@ -489,19 +492,19 @@ import {
   findRoute,
   route,
   init_route_def
-} from "./cli-7n5sbw0z.js";
+} from "./cli-4necwtsv.js";
 import {
   COMPOSIO_HTTP_METHODS,
   executeComposioRequest,
   composioArgsFromParts,
   init_composio
-} from "./cli-2qpvmmkw.js";
+} from "./cli-s0qnd4wv.js";
 import {
   ampPinProviderError,
   ampPinCatalogError,
   ampModelError,
   init_amp_models
-} from "./cli-zn15c46z.js";
+} from "./cli-q0k1w5zd.js";
 import {
   object,
   init_v4_mini
@@ -522,7 +525,7 @@ import {
 import {
   loadModelsDevCache,
   init_modelsdev_cache
-} from "./cli-mc97xy2s.js";
+} from "./cli-c60vetmm.js";
 import {
   require_dist2,
   ConnectionAuthInputSchema,
@@ -562,6 +565,8 @@ import {
   init_import_allowlist,
   runScriptWithRunCredential,
   init_run_credential,
+  seededWorkflowState,
+  init_workflows_seeder,
   extractScriptSignature,
   init_extract_signature,
   extractArgsJsonSchema,
@@ -599,7 +604,7 @@ import {
   init_typecheck,
   parseSkillContent,
   init_skill_parser
-} from "./cli-d2pzqej1.js";
+} from "./cli-hr2e2fft.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -614,7 +619,7 @@ import {
   ensureToken,
   ensureTokenOrThrow,
   init_ensure_token
-} from "./cli-0sbkss7h.js";
+} from "./cli-xnqgpshy.js";
 import {
   require_fast_deep_equal
 } from "./cli-bhp11egn.js";
@@ -709,7 +714,7 @@ import {
   validateDefinition,
   applyDefinitionPatch,
   init_definition2
-} from "./cli-pwyevs29.js";
+} from "./cli-8bc1w0tw.js";
 import {
   isMultiRuntimeEnabled,
   init_multi_runtime2
@@ -725,14 +730,20 @@ import {
 import {
   require_dist3
 } from "./cli-k28wkapa.js";
+import {
+  SLACK_LEAVE_THREAD_DISABLE,
+  isSlackLeaveThreadDisabled,
+  leaveSlackThread,
+  init_left_threads
+} from "./cli-gdhpcbhf.js";
 import {
   publicEndpointSsrfOptions,
   init_mcp_wrapper
-} from "./cli-k76tgq03.js";
+} from "./cli-hgaazk69.js";
 import {
   canProvisionKind,
   init_runtime_providers
-} from "./cli-b1afgtj3.js";
+} from "./cli-kqdg1bsb.js";
 import {
   findUserById,
   findUserByExternalId,
@@ -747,7 +758,7 @@ import {
   resolveSessionToken,
   fingerprintApiKey,
   init_users
-} from "./cli-8yy525ad.js";
+} from "./cli-drr5v6av.js";
 import {
   isRbacEnabled,
   decideAdmission,
@@ -818,7 +829,7 @@ import {
   KvNamespaceSchema,
   KvKeySchema,
   init_types4
-} from "./cli-41z8xwj0.js";
+} from "./cli-nhrvpaj7.js";
 import {
   generateDefaultClaudeMd2,
   generateDefaultSoulMd2,
@@ -829,7 +840,7 @@ import {
   init_task_attachment_links,
   contentSha256,
   init_profile_sync
-} from "./cli-ycm6180s.js";
+} from "./cli-a7v854rf.js";
 import {
   getSlackConfiguration,
   init_config4
@@ -841,7 +852,7 @@ import {
 import {
   selectCredential,
   init_credentials2
-} from "./cli-aq58fk5m.js";
+} from "./cli-g83s9ewh.js";
 import {
   findInterpolationTokens,
   interpolate,
@@ -851,7 +862,7 @@ import {
   init_registry3,
   resolveTemplate,
   init_resolver
-} from "./cli-j4kw3rsx.js";
+} from "./cli-cm5yqn35.js";
 import {
   init_zod
 } from "./cli-k5671be5.js";
@@ -890,7 +901,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-pe09p6dv.js";
+} from "./cli-e3r2neck.js";
 import {
   realtimeBus,
   init_bus
@@ -925,8 +936,9 @@ import {
   registerVolatileSecret,
   registerSensitiveKeyName,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
+  chatgptSubscriptionModelId,
   isAlias,
   parseAlias,
   resolveAlias,
@@ -939,7 +951,7 @@ import {
   openAICompatibleProviderIds,
   claudeCatalogModelId,
   init_src2
-} from "./cli-4r12t6w6.js";
+} from "./cli-5c4hjzne.js";
 import {
   __toESM,
   __commonJS,
@@ -20308,6 +20320,9 @@ function isKnownCatalogModel(model, catalog) {
   const id = model.trim().replace(CONTEXT_SUFFIX_RE, "");
   if (!id)
     return false;
+  const subscriptionId = chatgptSubscriptionModelId(id);
+  if (subscriptionId)
+    return hasModel(catalog, "openai", subscriptionId);
   const slash = id.indexOf("/");
   if (slash > 0) {
     const provider = id.slice(0, slash);
@@ -20864,7 +20879,7 @@ function startRetryPoller(registry, intervalMs = 5000) {
               if (!waiting)
                 continue;
               if (result.waitFor === "workflow.child.finished") {
-                const { resumeFromChildRun } = await import("./resume-9cd6wf6z.js");
+                const { resumeFromChildRun } = await import("./resume-wd30wx23.js");
                 await resumeFromChildRun(step.id, registry);
               }
             } else {
@@ -21577,7 +21592,7 @@ var init_notify = __esm(() => {
           }
         }
         case "slack": {
-          const { getSlackApp } = await import("./app-stvq692g.js");
+          const { getSlackApp } = await import("./app-909e97cr.js");
           const app = getSlackApp();
           if (!app) {
             return {
@@ -22886,7 +22901,7 @@ async function dispatchScheduleTarget(schedule, extraTags = []) {
       };
       const runId = await startWorkflowExecution2(workflow, triggerData, registry, {
         triggerType: "schedule",
-        triggeredByAgentId: schedule.createdByAgentId,
+        triggeredByAgentId: await scheduledWorkflowPrincipal(schedule, workflow),
         requestedByUserId: schedule.createdBy
       });
       await throwIfWorkflowNeedsSetup(schedule.id, [runId]);
@@ -22919,6 +22934,23 @@ async function dispatchScheduleTarget(schedule, extraTags = []) {
     }
   }
 }
+async function scheduledWorkflowPrincipal(schedule, workflow) {
+  if (schedule.createdByAgentId)
+    return schedule.createdByAgentId;
+  if (workflow.createdByAgentId)
+    return;
+  const seeded = await seededWorkflowState(workflow);
+  if (seeded === "unseeded")
+    return;
+  if (seeded === "edited") {
+    throw new Error(`Schedule "${schedule.name}" has no creator and the nodes or params of seeded workflow "${workflow.name}" were edited, so it will not run as the lead. Re-create the schedule as the agent it should run as.`);
+  }
+  const lead = await getLeadAgent2();
+  if (!lead) {
+    throw new Error(`Schedule "${schedule.name}" has no creator and the swarm has no lead to run its workflow as`);
+  }
+  return lead.id;
+}
 async function throwIfWorkflowNeedsSetup(scheduleId, runIds) {
   for (const runId of runIds) {
     const run = await getWorkflowRun2(runId);
@@ -23164,6 +23196,7 @@ var init_scheduler = __esm(() => {
   init_script_credential_broker();
   init_db3();
   init_run_credential();
+  init_workflows_seeder();
   init_telemetry();
   init_workflows();
   init_engine();
@@ -24240,6 +24273,7 @@ var init_sdk_allowlist = __esm(() => {
     slack_downloadFile: "slack-download-file",
     slack_delete: "slack-delete",
     slack_update: "slack-update",
+    slack_leaveThread: "slack-leave-thread",
     chat_reply: "chat-reply",
     chat_post: "chat-post",
     chat_openDm: "chat-open-dm",
@@ -24882,7 +24916,7 @@ function setPreloadedTools(server, names) {
 async function applyPreToolCall(name, args, requestInfo, inputSchema) {
   if (requestInfo.callOrigin !== "mcp")
     return { args };
-  const dispatcher = await import("./dispatcher-304q6fwa.js");
+  const dispatcher = await import("./dispatcher-tx9hd1sv.js");
   const result = await dispatcher.dispatchPre("pre.tool.call", { tool: name, args, requestInfo }, inputSchema ? {
     validateModify: async (data) => {
       const schema = normalizeObjectSchema(inputSchema) ?? inputSchema;
@@ -26946,6 +26980,10 @@ function runContext2(event, payload) {
       agentId = stringField(payload, "workerAgentId");
       subject = `task ${stringField(payload, "completedTask", "id") ?? "?"} ${stringField(payload, "status") ?? ""}`.trim();
       break;
+    case "pre.task.steer":
+      agentId = stringField(payload, "sender", "agentId");
+      subject = `${stringField(payload, "source") ?? "?"}: task ${stringField(payload, "task", "id") ?? "?"}`;
+      break;
     case "pre.slack.route":
     case "post.slack.message":
       subject = `channel ${stringField(payload, "channelId") ?? "?"}: ${snippet(field(payload, "text"), 60)}`;
@@ -32356,7 +32394,7 @@ async function loadAdapter(name, config, logger) {
       });
     }
     case "slack": {
-      const { createSlackAdapter } = await import("./index-yqhz88yy.js");
+      const { createSlackAdapter } = await import("./index-pxn30mse.js");
       return createSlackAdapter({
         ...base,
         signingSecret: config.signingSecret ?? "",
@@ -32375,7 +32413,7 @@ async function loadAdapter(name, config, logger) {
       });
     }
     case "teams": {
-      const { createTeamsAdapter } = await import("./index-5rk6rfzr.js");
+      const { createTeamsAdapter } = await import("./index-fvzke5kx.js");
       const { teamsWebhookVerifier, teamsToken } = getChatSdkTestHooks();
       return createTeamsAdapter({
         ...base,
@@ -33980,6 +34018,8 @@ async function requestChatThreadSteering(args) {
     });
     return { task, result };
   } catch (error) {
+    if (error instanceof SteeringBlockedError)
+      throw error;
     const detail = error instanceof Error ? error.message : String(error);
     const what = error instanceof SteeringRequestError ? "was refused" : "failed";
     console.warn(scrubSecrets(`[chat-sdk] Steering task ${task.id} ${what} (${detail}); creating a follow-up task`));
@@ -34141,11 +34181,21 @@ async function handleChatInbound(thread, message, kind) {
       addressed = unaddressed;
   }
   if (!immediate && attachments.length === 0 && text && !isChatThreadBuffered(thread.id)) {
-    const steering = await requestChatThreadSteering({
-      contextKey: chatSdkContextKey(thread.id),
-      message: text,
-      resolveSender: () => resolveChatSender(adapter, message.author.userId)
-    });
+    let steering;
+    try {
+      steering = await requestChatThreadSteering({
+        contextKey: chatSdkContextKey(thread.id),
+        message: text,
+        resolveSender: () => resolveChatSender(adapter, message.author.userId)
+      });
+    } catch (error) {
+      if (!(error instanceof SteeringBlockedError))
+        throw error;
+      console.info(`[chat-sdk] ${thread.id}: steering blocked: ${error.reason}`);
+      stopTypingKeepalive(thread.id);
+      await setChatMessageReaction(adapter, thread.id, message.id, "failed");
+      return;
+    }
     if (steering) {
       console.log(`[chat-sdk] ${adapter} message steered task ${steering.task.id} (${steering.result.outcome})`);
       await setChatMessageReaction(adapter, thread.id, message.id, "steered");
@@ -34488,6 +34538,7 @@ var init_inbound = __esm(() => {
   init_db4();
   init_session_labels();
   init_identity();
+  init_steering2();
   init_unmapped_identities();
   init_dispatcher();
   init_resolver();
@@ -35830,7 +35881,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp } = await import("./app-stvq692g.js");
+    const { getSlackApp } = await import("./app-909e97cr.js");
     const app = getSlackApp();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -35901,7 +35952,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDbClient } = await import("./db-rsh04kh3.js");
+  const { getDbClient } = await import("./db-9dv0g1ab.js");
   await getDbClient().transaction(async (tx) => {
     const row = await tx.get("SELECT metadata FROM oauth_apps WHERE provider = 'jira'");
     if (!row) {
@@ -109374,7 +109425,7 @@ async function reloadGlobalConfigsAndIntegrations() {
   return runWithoutRequestAuth(() => reloadGlobalConfigsAndIntegrationsInner());
 }
 async function reloadGlobalConfigsAndIntegrationsInner() {
-  const { getEmbeddingProvider, resetEmbeddingProvider } = await import("./index-qeb82z37.js");
+  const { getEmbeddingProvider, resetEmbeddingProvider } = await import("./index-vdygbq10.js");
   const wasEmbeddingsConfigured = getEmbeddingProvider().isConfigured();
   const updated = await loadGlobalConfigsIntoEnv(true);
   await syncTelemetryEnabled("settings").catch((err) => {
@@ -109390,7 +109441,7 @@ async function reloadGlobalConfigsAndIntegrationsInner() {
     integrations.push("embeddings");
   }
   if (isEmbeddingsConfigured) {
-    import("./embedding-space-s68v49ct.js").then(({ runEmbeddingMaintenance }) => runEmbeddingMaintenance({ backfill: !wasEmbeddingsConfigured })).catch((err) => {
+    import("./embedding-space-ny1e2940.js").then(({ runEmbeddingMaintenance }) => runEmbeddingMaintenance({ backfill: !wasEmbeddingsConfigured })).catch((err) => {
       console.error("[config-reload] embedding maintenance failed (non-fatal):", err);
     });
   }
@@ -119739,6 +119790,7 @@ var init_kv_reserved_namespaces = __esm(() => {
     ["heartbeat-checklist", "namespace is reserved for heartbeat checklist receipts"],
     ["worker", "namespace is reserved for worker nudges"],
     ["slack-external-alert", "namespace is reserved for Slack external channel alerts"],
+    ["slack-left-thread", "namespace is reserved for left Slack threads; use slack-leave-thread"],
     [
       "session-labels",
       "namespace is reserved for session source labels; GET /api/session-tree returns them"
@@ -132687,10 +132739,27 @@ function jaccardSimilarity(a, b) {
   const union = new Set([...wordsA, ...wordsB]).size;
   return intersection / union;
 }
+function matchSimilarTask(existing, opts) {
+  const similarity = jaccardSimilarity(existing.task, opts.taskDescription);
+  if (similarity > HIGH_SIMILARITY_THRESHOLD) {
+    return {
+      task: existing,
+      reason: `similar task description (${(similarity * 100).toFixed(0)}% match)`
+    };
+  }
+  if (opts.targetAgentId && existing.agentId === opts.targetAgentId && similarity > SAME_AGENT_SIMILARITY_THRESHOLD) {
+    return {
+      task: existing,
+      reason: `similar task to same agent (${(similarity * 100).toFixed(0)}% match)`
+    };
+  }
+  return null;
+}
 async function findDuplicateTask(opts) {
   const recentTasks = await findRecentSimilarTasks2({
     creatorAgentId: opts.creatorAgentId,
-    windowMinutes: opts.windowMinutes ?? 10
+    windowMinutes: opts.windowMinutes ?? 10,
+    limit: DEDUP_SCAN_LIMIT
   });
   for (const existing of recentTasks) {
     if (opts.slackChannelId && opts.slackThreadTs && existing.slackChannelId === opts.slackChannelId && existing.slackThreadTs === opts.slackThreadTs) {
@@ -132699,25 +132768,77 @@ async function findDuplicateTask(opts) {
         reason: `same Slack thread (${opts.slackChannelId}/${opts.slackThreadTs})`
       };
     }
-    const similarity = jaccardSimilarity(existing.task, opts.taskDescription);
-    if (similarity > HIGH_SIMILARITY_THRESHOLD) {
-      return {
-        task: existing,
-        reason: `similar task description (${(similarity * 100).toFixed(0)}% match)`
-      };
-    }
-    if (opts.targetAgentId && existing.agentId === opts.targetAgentId && similarity > SAME_AGENT_SIMILARITY_THRESHOLD) {
+    const match = matchSimilarTask(existing, opts);
+    if (match)
+      return match;
+  }
+  return null;
+}
+var HIGH_SIMILARITY_THRESHOLD = 0.8, SAME_AGENT_SIMILARITY_THRESHOLD = 0.6, DEDUP_SCAN_LIMIT = 500;
+var init_task_dedup = __esm(() => {
+  init_db4();
+});
+
+// src/tasks/follow-up-redelegation-guard.ts
+async function followUpThreadForSourceTask(sourceTaskId) {
+  if (!sourceTaskId)
+    return null;
+  const sourceTask = await getTaskById2(sourceTaskId);
+  if (sourceTask?.taskType !== "follow-up" || !sourceTask.slackChannelId || !sourceTask.slackThreadTs) {
+    return null;
+  }
+  return {
+    channelId: sourceTask.slackChannelId,
+    threadTs: sourceTask.slackThreadTs,
+    userId: sourceTask.slackUserId
+  };
+}
+async function findMatchingCompletedWork(args) {
+  let before;
+  for (;; ) {
+    const page = await findCompletedTasksInThread2(args.channelId, args.threadTs, FOLLOW_UP_SAME_WORK_WINDOW_MINUTES, FOLLOW_UP_SAME_WORK_PAGE_SIZE, before);
+    for (const existing of page) {
+      const match = matchSimilarTask(existing, args);
+      if (match)
+        return match;
+    }
+    const last = page.at(-1);
+    if (!last || page.length < FOLLOW_UP_SAME_WORK_PAGE_SIZE)
+      return null;
+    before = { lastUpdatedAt: last.lastUpdatedAt, id: last.id };
+  }
+}
+async function evaluateFollowUpRedelegation(args) {
+  const { channelId, threadTs } = args;
+  const match = await findMatchingCompletedWork(args);
+  if (match) {
+    const existing = match.task;
+    const [cancelled, failed] = await Promise.all([
+      findRecentCancelledTaskInThread2(channelId, threadTs, FOLLOW_UP_SAME_WORK_WINDOW_MINUTES),
+      findRecentFailedTaskInThread2(channelId, threadTs, FOLLOW_UP_SAME_WORK_WINDOW_MINUTES)
+    ]);
+    const completedAt = new Date(existing.lastUpdatedAt).getTime();
+    const interruptedLater = [cancelled, failed].some((t) => t && new Date(t.lastUpdatedAt).getTime() > completedAt);
+    if (!interruptedLater) {
       return {
-        task: existing,
-        reason: `similar task to same agent (${(similarity * 100).toFixed(0)}% match)`
+        rule: "same-work",
+        message: `Blocked by the follow-up re-delegation guard (same-work rule): this task matches completed task ${existing.id.slice(0, 8)} in this Slack thread (${match.reason}), so the work was already done. If it must run again, pass allowRedelegation: true.`
       };
     }
   }
+  const dispatched = await countAgentDispatchesInThread2(channelId, threadTs, args.creatorAgentId, FOLLOW_UP_DISPATCH_WINDOW_MINUTES);
+  if (dispatched >= FOLLOW_UP_DISPATCH_CAP) {
+    return {
+      rule: "loop-cap",
+      message: `Blocked by the follow-up re-delegation guard (loop-cap rule): you already dispatched ${dispatched} times into this Slack thread in the last ${FOLLOW_UP_DISPATCH_WINDOW_MINUTES / 60} hours (cap ${FOLLOW_UP_DISPATCH_CAP}; a durable script run counts once). If this is a deliberate next step and not a re-delegation loop, pass allowRedelegation: true.`
+    };
+  }
   return null;
 }
-var HIGH_SIMILARITY_THRESHOLD = 0.8, SAME_AGENT_SIMILARITY_THRESHOLD = 0.6;
-var init_task_dedup = __esm(() => {
+var FOLLOW_UP_SAME_WORK_WINDOW_MINUTES = 2880, FOLLOW_UP_DISPATCH_CAP = 10, FOLLOW_UP_DISPATCH_WINDOW_MINUTES = 360, FOLLOW_UP_SAME_WORK_PAGE_SIZE = 200;
+var init_follow_up_redelegation_guard = __esm(() => {
   init_db4();
+  init_task_dedup();
 });
 
 // src/tools/send-task.ts
@@ -132761,6 +132882,7 @@ async function sendTaskHandler(ctx, {
   effort,
   profile,
   allowDuplicate,
+  allowRedelegation,
   slackChannelId,
   slackThreadTs,
   slackUserId,
@@ -132780,6 +132902,7 @@ async function sendTaskHandler(ctx, {
   const requestedLeadOnly = ctx.kind === "user" ? false : leadOnly;
   const requestedCapabilities = ctx.kind === "user" ? undefined : requiredCapabilities;
   const requestedAllowDuplicate = ctx.kind === "user" ? false : allowDuplicate;
+  const requestedAllowRedelegation = ctx.kind === "user" ? false : allowRedelegation;
   const requestedOverrideSlackContext = ctx.kind === "user" ? false : overrideSlackContext;
   if (requestedAgentId !== undefined && requestedRoutingReason === undefined) {
     return toolErr("routingReason is required when agentId is supplied.");
@@ -132944,7 +133067,7 @@ async function sendTaskHandler(ctx, {
   if (ctx.kind === "user" && (taskOptions.agentId !== userLead.id || taskOptions.offeredTo !== undefined)) {
     return toolErr("A pre.task.create extension cannot change the user task's Lead assignment.");
   }
-  const evaluateDedupGuards = async () => {
+  const evaluateDedupGuards = async (logOverride) => {
     const existingTrackerWork = await findExistingLinearTrackerContextWork2(effectiveParentTask?.contextKey, effectiveParentTask?.id);
     if (existingTrackerWork) {
       const msg = `Skipped: Linear tracker contextKey ${effectiveParentTask?.contextKey} already has ${existingTrackerWork.reason === "active_task" ? "active task" : "linked open PR"} ${existingTrackerWork.task.id.slice(0, 8)}.`;
@@ -132964,25 +133087,24 @@ async function sendTaskHandler(ctx, {
         };
       }
     }
-    if (sourceTaskId) {
-      const sourceTask = await getTaskById2(sourceTaskId);
-      if (sourceTask?.taskType === "follow-up" && sourceTask.slackThreadTs && sourceTask.slackChannelId) {
-        const recentCompleted = await findCompletedTaskInThread2(sourceTask.slackChannelId, sourceTask.slackThreadTs, 2880);
-        if (recentCompleted) {
-          const recentCancelled = await findRecentCancelledTaskInThread2(sourceTask.slackChannelId, sourceTask.slackThreadTs, 2880);
-          const cancelledMoreRecent = recentCancelled && new Date(recentCancelled.lastUpdatedAt).getTime() > new Date(recentCompleted.lastUpdatedAt).getTime();
-          if (!cancelledMoreRecent) {
-            return {
-              ok: false,
-              message: `Blocked: re-delegation from follow-up task in a thread that already has completed work (task ${recentCompleted.id.slice(0, 8)}). The original request was already handled.`
-            };
-          }
-        }
+    const followUpThread = creatorAgentId ? await followUpThreadForSourceTask(sourceTaskId) : null;
+    if (followUpThread && creatorAgentId) {
+      const blocked = await evaluateFollowUpRedelegation({
+        ...followUpThread,
+        creatorAgentId,
+        taskDescription,
+        targetAgentId: taskOptions.agentId ?? taskOptions.offeredTo
+      });
+      if (blocked && !requestedAllowRedelegation) {
+        return { ok: false, message: blocked.message };
+      }
+      if (blocked && logOverride) {
+        console.log(`[send-task] follow-up re-delegation override: rule=${blocked.rule} creatorAgentId=${creatorAgentId} sourceTaskId=${sourceTaskId} thread=${followUpThread.channelId}/${followUpThread.threadTs}`);
       }
     }
     return null;
   };
-  const guard = await evaluateDedupGuards();
+  const guard = await evaluateDedupGuards(true);
   if (guard) {
     const guardData = {
       yourAgentId: creatorAgentId,
@@ -132991,7 +133113,7 @@ async function sendTaskHandler(ctx, {
     return guard.ok ? toolOk(guard.message, { data: guardData }) : toolErr(guard.message, { data: guardData });
   }
   const created = getDbClient2().transaction(async () => {
-    const raced = await evaluateDedupGuards();
+    const raced = await evaluateDedupGuards(false);
     if (raced)
       return { success: raced.ok, message: raced.message, task: raced.task };
     if (isLinearTrackerContextKey2(effectiveParentTask?.contextKey)) {
@@ -133096,6 +133218,7 @@ var init_send_task = __esm(() => {
   init_model_validation();
   init_apply_task_create();
   init_rbac();
+  init_follow_up_redelegation_guard();
   init_slack_routing();
   init_task_dedup();
   init_task_tool_ctx();
@@ -133125,7 +133248,8 @@ var init_send_task = __esm(() => {
     allowCustomModel: boolean().optional().describe("Accept a `model` the model catalog does not list. Without it an unknown model id is rejected. Only for ids the catalog cannot know yet (a fresh launch, a private deployment)."),
     effort: ReasoningEffortSchema.optional().describe("Reasoning effort for this task: 'off', 'low', 'medium', 'high', 'xhigh', or 'max'. If omitted, the assignee's REASONING_EFFORT_OVERRIDE/default applies."),
     profile: string2().trim().min(1).optional().describe("Model profile name (see list-model-profiles): a named harness + model + effort, applied when the task is claimed. Must run on the assignee's harness. Exclusive with model and modelTier. A set `effort` still wins over the profile's."),
-    allowDuplicate: boolean().default(false).describe("If true, skip duplicate detection and create the task even if a similar one exists."),
+    allowDuplicate: boolean().default(false).describe("If true, skip duplicate detection and create the task even if a similar one exists. Does not bypass the follow-up re-delegation guard; see allowRedelegation."),
+    allowRedelegation: boolean().default(false).describe("Only matters when you call send-task from a follow-up task in a Slack thread. Such a dispatch is blocked when it repeats a task already completed in that thread (same-work rule, unless a task there was cancelled or failed after that completion), or when you already dispatched 10 tasks into the thread in the last 6 hours (loop-cap rule). Set true to dispatch anyway; the override is logged. Use it only for deliberate re-runs or long chains, never to retry a block you have not read."),
     slackChannelId: string2().optional().describe("Slack channel ID to post progress updates to. Use this to propagate Slack context when delegating from a Slack thread."),
     slackThreadTs: string2().optional().describe("Slack thread timestamp. Required with slackChannelId for thread-level updates."),
     slackUserId: string2().optional().describe("Slack user ID of the original requester."),
@@ -135057,6 +135181,78 @@ var init_slack_invite_to_channel = __esm(() => {
   init_utils();
 });
 
+// src/tools/slack-leave-thread.ts
+var registerSlackLeaveThreadTool = (server) => {
+  createToolRegistrar(server)("slack-leave-thread", {
+    title: "Leave a Slack thread",
+    description: "Stop following a Slack thread until someone @mentions the bot there again. Messages in the thread that do not @mention the bot are then ignored, with no task and no reply. Posts nothing to Slack. Pass taskId for the thread of your Slack-originated task, or (lead only) channelId and threadTs.",
+    annotations: { openWorldHint: true, idempotentHint: true },
+    inputSchema: object2({
+      taskId: uuid().optional().describe("A task whose Slack thread to leave."),
+      channelId: string2().min(1).optional().describe("The Slack channel ID of the thread."),
+      threadTs: string2().min(1).optional().describe("Timestamp of the thread root (dotted, 'p' deep-link, or full permalink URL).")
+    }),
+    outputSchema: swarmToolOutputSchema({
+      channelId: string2().optional(),
+      threadTs: string2().optional()
+    })
+  }, async ({ taskId, channelId, threadTs }, requestInfo, _meta) => {
+    if (isSlackLeaveThreadDisabled()) {
+      return toolErr(`slack-leave-thread is disabled by ${SLACK_LEAVE_THREAD_DISABLE}.`);
+    }
+    if (!requestInfo.agentId) {
+      return toolErr("Agent ID not found.");
+    }
+    const agent = await getAgentById2(requestInfo.agentId);
+    if (!agent) {
+      return toolErr("Agent not found.");
+    }
+    const mayLeaveAnyThread = can({
+      principal: { kind: "agent", agentId: agent.id, isLead: agent.isLead },
+      verb: "integration.slack.post",
+      resource: { kind: "none" },
+      source: "mcp"
+    }).allow;
+    let slackChannelId;
+    let slackThreadTs;
+    if (taskId) {
+      if (channelId || threadTs) {
+        return toolErr("Provide either taskId or channelId and threadTs, not both.");
+      }
+      const task = await getTaskById2(taskId);
+      if (!task) {
+        return toolErr("Task not found.");
+      }
+      if (!mayLeaveAnyThread && (task.agentId !== agent.id || task.source !== "slack" || !task.slackTriggerMessageTs)) {
+        return toolErr("Only a lead or the agent assigned a Slack-originated task can leave its thread.");
+      }
+      slackChannelId = task.slackChannelId;
+      slackThreadTs = task.slackThreadTs;
+    } else if (channelId && threadTs) {
+      if (!mayLeaveAnyThread) {
+        return toolErr("Leaving a thread by channelId and threadTs requires lead privileges.");
+      }
+      slackChannelId = channelId;
+      slackThreadTs = parseSlackTs(threadTs);
+    } else {
+      return toolErr("Must provide taskId, or both channelId and threadTs.");
+    }
+    if (!slackChannelId || !slackThreadTs) {
+      return toolErr("No Slack thread context available.");
+    }
+    await leaveSlackThread(slackChannelId, slackThreadTs, { agentId: agent.id });
+    return toolOk(`Left Slack thread ${slackChannelId}/${slackThreadTs}. Messages there are ignored until someone @mentions the bot.`, { data: { channelId: slackChannelId, threadTs: slackThreadTs } });
+  });
+};
+var init_slack_leave_thread = __esm(() => {
+  init_zod();
+  init_db4();
+  init_rbac();
+  init_left_threads();
+  init_message_text();
+  init_utils();
+});
+
 // src/tools/slack-list-channels.ts
 var SlackChannelSchema, registerSlackListChannelsTool = (server) => {
   createToolRegistrar(server)("slack-list-channels", {
@@ -136116,7 +136312,7 @@ async function steerTaskHandler(ctx, { taskId, message, mode = "queue", onUnsupp
       message,
       mode,
       onUnsupported,
-      source: "mcp",
+      source: ctx.kind === "owner" && ctx.requestInfo?.callOrigin === "script-sdk" ? "script" : "mcp",
       createdByKind: ctx.kind === "owner" ? "agent" : "user",
       createdByAgentId: ctx.kind === "owner" ? ctx.agentId : undefined,
       createdByUserId: ctx.kind === "user" ? ctx.userId : undefined
@@ -136135,7 +136331,7 @@ async function steerTaskHandler(ctx, { taskId, message, mode = "queue", onUnsupp
 var steerTaskInputSchema, steerTaskUserInputSchema, steerTaskOutputSchema, registerSteerTaskTool = (server) => {
   createToolRegistrar(server)("steer-task", {
     title: "Steer Task",
-    description: 'Send a message to a task that is already running. `mode:"steer"` is honored on pi, claude-managed, codex and cursor; claude, devin, opencode and amp support queue only (amp delivery lands at the next tool result). Pass `onUnsupported:"fail"` to get an error instead of a downgrade.',
+    description: 'Send a message to a task that is already running. `mode:"steer"` is honored on pi, claude-managed, codex, cursor and fx (fx supports steer only); claude, devin, opencode and amp support queue only (amp delivery lands at the next tool result). Pass `onUnsupported:"fail"` to get an error instead of a downgrade.',
     annotations: { destructiveHint: true },
     inputSchema: steerTaskInputSchema,
     outputSchema: steerTaskOutputSchema
@@ -137371,7 +137567,7 @@ async function emitBudgetRefusalSideEffects(ctx, inserted) {
       console.warn(`[budget-refusal-notify] Failed to create follow-up task for budget refusal (task=${ctx.task.id.slice(0, 8)}): ${err}`);
     }
   }
-  import("./event-bus-dfjx2qdh.js").then(({ workflowEventBus }) => {
+  import("./event-bus-g0ka3pbw.js").then(({ workflowEventBus }) => {
     workflowEventBus.emit("task.budget_refused", {
       taskId: ctx.task.id,
       agentId: ctx.agentId,
@@ -139660,6 +139856,9 @@ async function createServer(opts = {}) {
     registerSlackDownloadFileTool(server);
     registerSlackDeleteTool(server);
     registerSlackUpdateTool(server);
+    if (opts.fullSurface === true || !isSlackLeaveThreadDisabled()) {
+      registerSlackLeaveThreadTool(server);
+    }
   }
   if (hasCapability("prompt-templates")) {
     registerListPromptTemplatesTool(server);
@@ -139717,6 +139916,7 @@ var init_server = __esm(() => {
   init_resolver();
   init_rbac();
   init_config4();
+  init_left_threads();
   init_accept_steer();
   init_app_action_run();
   init_app_diff();
@@ -139805,6 +140005,7 @@ var init_server = __esm(() => {
   init_slack_delete();
   init_slack_download_file();
   init_slack_invite_to_channel();
+  init_slack_leave_thread();
   init_slack_list_channels();
   init_slack_post();
   init_slack_read();
@@ -139871,4 +140072,4 @@ var init_server = __esm(() => {
   loggedToolAllowlistWarnings = new Set;
 });
 
-export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, init_types, McpServer, init_mcp, repointTrackerSyncBySwarmId, init_tracker, isRuntimePoolWakeable, isAgentReachable, init_reachability, referencedBundlePaths, skillDirs, init_manifest_format, TaskCreationBlockedError, init_errors2, resolveIdentity, renderIdentity, init_identity, recordUnmappedIdentity, init_unmapped_identities, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, scopeFromAttachment, backingProviderId, init_task_attachment_store, taskModelPin, resumedTaskModelSelection, init_model_pin, listHarnessModelSupport, recordHarnessModelSupport, agentRanModel, getAgentHarnessCliVersion, setAgentHarnessCliVersion, init_harness_model_support, sanitizeModelTierOverrides, parseModelTierOverridesHeader, setAgentModelTierOverrides, previewModelTiers, recordClaimModelResolution, init_model_tier_resolution, harnessModelErrorFor, poolTaskRunsOnHarness, explicitModelError, explicitModelErrorForAgent, init_model_validation, stripSiblingBlock, init_sibling_block, createTaskWithSiblingAwareness, init_sibling_awareness, transcribeAudioNotes, init_transcription, init_templates, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, init_inbound_files, isAddressedToOtherUser, broadcastMatches, routeMessage, extractTaskFromMessage, init_router, extractSlackMessageText, slackInboundMessageText, collectSlackMessageFiles, init_message_text, createAdditiveBuffer, init_additive_buffer, recoverIncompleteRuns, init_recovery, handleWebhookTrigger, verifyHmacSignature, WebhookError, init_triggers, snapshotAndUpdateWorkflow, init_version, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, init_raw_llm, getExecutorRegistry2, initWorkflows2, init_workflows, dispatchScheduleTarget, calculateNextRun2, startScheduler2, stopScheduler2, runScheduleNow2, init_scheduler, ExtensionAssetConflictError, init_assets, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, init_db, SDK_ALLOWLIST, mcpToolNameForSdkMethod, init_sdk_allowlist, MCP_OVERFLOW_NAMESPACE, mcpOverflowAuthError, init_kv_overflow, hasKvViewArgs, resolveKvView, init_kv_view, toolErr, createToolRegistrar, init_utils, handleMcpBridge, init_mcp_bridge, Redacted, init_redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, init_response_limit, ExtensionConfigError, init_loader, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, init_lifecycle, ExtensionAbortedError2, isRegistered2, isExtensionAgentId2, getExtensionBridgeToken2, resolveBridgeCallOrigin2, extensionIdForAgent2, runContext2, registerLoaded2, unregister2, listRegistered2, dispatchPre2, dispatchPost2, init_dispatcher, REBOOT_RETRY_PIN_TAG2, getPinCandidateAgent2, resolveLeadOnlyRecoveryAssignment2, getResumeGeneration2, getNextResumeGeneration2, inheritedModelSelection2, createWorkerTaskFollowUp2, createResumeFollowUp2, createRerouteDecisionTask2, createPoolStarvationDecisionTask2, init_worker_follow_up, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, isInboxAllowed, isSenderAllowed, handleMessageReceived, init_agentmail, isAzureDevOpsEnabled, initAzureDevOps, verifyAzureDevOpsWebhook, isAzureDevOpsUrl, canonicalAzureDevOpsRepoUrl, parseAzureDevOpsRepoUrl, init_azure_devops, createdPullRequestOf, commentedPayloadOf, handlePullRequestCreated, handlePullRequestCommented, handleWorkItemCreated, handleWorkItemUpdated, handleWorkItemCommented, handleWorkItemDeleted, handleWorkItemRestored, initAzureDevOpsOutbound, init_azure_devops2, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, init_rbac_audit, getTelemetryIngestAnchor, init_telemetry_ingest_anchor, initApiTelemetry, syncTelemetryEnabled, init_telemetry_enable, isBitbucketEnabled, initBitbucket, verifyBitbucketWebhook, isDuplicateDelivery, markDeliveryProcessed, pullRequestEventOf, pullRequestCommentEventOf, handlePullRequestCreated2, handlePullRequestCommentCreated, handlePullRequestClosed, init_bitbucket, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, init_github, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2, handleNote, handlePipeline, init_gitlab, isChatSdkEnabled, getChatSdkConfig, init_config, errorMessage, init_logger, resolveAdapterApiUrl, init_adapters, trackBackground, init_background, TelegramBotApiError, callTelegramBotApi, init_telegram_api, isTrustedTeamsServiceUrl, init_teams_origin, getSessionLabels, rememberSessionLabel, init_session_labels, isChatSdkStopping, startChatSdk, getChatInstance, isChatAdapterConfigured, getChatSdkHealth, stopChatSdk, init_runtime, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, init_metadata, registerJiraWebhook, deleteJiraWebhook, init_webhook_lifecycle, isJiraEnabled, initJira, init_app, handleJiraWebhook, init_webhook, init_jira, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, init_sync, isLinearEnabled, initLinear, init_app2, init_linear, init_slack, isCookieSafePageId, extractPageSession, extractLegacyPageSession, extractAndVerifyCookie, pageSessionSetCookies, init_page_session, resolveHttpRequestAuth, init_auth, getDeploymentEnvValue, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, init_core, MCP_MAX_TOOL_INPUT_ELEMENTS, MCP_MAX_REQUEST_BODY_BYTES, init_mcp_limits, userCtx, init_task_tool_ctx, requestPrincipal, agentFirstPrincipal, requireAuthKind, rejectGuest, init_request_principal, handleApps, init_apps, cancelApprovalRequest, cancelApprovalRequestAndRun, init_approval_cancel, getUserCommsPrefs, init_requester_comms, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, init_get_task_details, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, init_cancel_task, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, init_db_query, snapshotMetric, init_version2, AssetKeyAuthorizationError, authorizeAssetKeyWrite, init_asset_key_auth, getPageEditCounter, init_page_versions, snapshotPage, init_version3, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, init_app_validation, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, init_presets, scopedResourceScopeIdSchema, resolveScopedResourceId, init_scoped_resource, MemoryKeyError, init_key_guard, refreshLinks, init_link_resolver, indexMemoryContent, init_index_content, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, init_retrieval, ExplicitSelfDuplicateError, applyRating, init_store, shouldPersistAutomaticTaskMemory, init_automatic_task_gate, guardTerminalTaskResultWrite, init_terminal_result_guard, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, init_get_tasks, reservedNamespaceError, privateNamespaceError, reservedRoomKeyError, init_kv_reserved_namespaces, updateMcpServerChecked, init_mcp_server_checked_update, updateTouchesStdioExecution, init_mcp_server_stdio_gate, canReadMemory, init_access, getLinksForMemory, init_links_store, expandCandidatesWithGraph, init_graph_expansion, isApiDraining, drainApi, init_api_drain, markKapsoMessageRead, sendKapsoReaction, init_client, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, init_config2, changesAllowMerge, init_repo_merge_policy, updateSwarmRepoChecked, init_repo_checked_update, getCombConfig, init_config3, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, sessionAccessTopic, sessionPresenceRoot, init_auth2, RoomOperationSchema, init_document, removeAwarenessStates, init_awareness, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, init_rooms, init_scheduler2, MEMORY_KEYS_DEFAULT_PREFIX, MEMORY_KEYS_MAX_LIMIT, estimateTokens, posteriorMean, listMemoryKeys, checkChunkIntegrity, getMemoryChunks, getPosteriorsByIds, init_key_browser, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, init_events, mergeScheduleTiming, validateRecurringTiming, init_validate, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, init_send_task, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, init_steer_task, canClaim, init_budget_admission, emitBudgetRefusalSideEffects, init_budget_refusal_notify, workflowModelErrors, init_model_validation2, patchWorkflowDefinition, init_patch_definition, idempotencyKeyHeader, readIdempotencyKey, replayAcceptedOperation, init_idempotency_key, resolveScriptsOnlyMode, init_scripts_only_mode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer, init_server };
+export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, init_types, McpServer, init_mcp, repointTrackerSyncBySwarmId, init_tracker, isRuntimePoolWakeable, isAgentReachable, init_reachability, referencedBundlePaths, skillDirs, init_manifest_format, TaskCreationBlockedError, init_errors2, resolveIdentity, renderIdentity, init_identity, recordUnmappedIdentity, init_unmapped_identities, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, scopeFromAttachment, backingProviderId, init_task_attachment_store, taskModelPin, resumedTaskModelSelection, init_model_pin, listHarnessModelSupport, recordHarnessModelSupport, agentRanModel, getAgentHarnessCliVersion, setAgentHarnessCliVersion, init_harness_model_support, sanitizeModelTierOverrides, parseModelTierOverridesHeader, setAgentModelTierOverrides, previewModelTiers, recordClaimModelResolution, init_model_tier_resolution, harnessModelErrorFor, poolTaskRunsOnHarness, explicitModelError, explicitModelErrorForAgent, init_model_validation, stripSiblingBlock, init_sibling_block, createTaskWithSiblingAwareness, init_sibling_awareness, transcribeAudioNotes, init_transcription, init_templates, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, init_inbound_files, isAddressedToOtherUser, broadcastMatches, routeMessage, extractTaskFromMessage, init_router, extractSlackMessageText, slackInboundMessageText, collectSlackMessageFiles, init_message_text, createAdditiveBuffer, init_additive_buffer, recoverIncompleteRuns, init_recovery, handleWebhookTrigger, verifyHmacSignature, WebhookError, init_triggers, snapshotAndUpdateWorkflow, init_version, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, init_raw_llm, getExecutorRegistry2, initWorkflows2, init_workflows, dispatchScheduleTarget, calculateNextRun2, startScheduler2, stopScheduler2, runScheduleNow2, init_scheduler, ExtensionAssetConflictError, init_assets, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, init_db, SDK_ALLOWLIST, mcpToolNameForSdkMethod, init_sdk_allowlist, MCP_OVERFLOW_NAMESPACE, mcpOverflowAuthError, init_kv_overflow, hasKvViewArgs, resolveKvView, init_kv_view, toolErr, createToolRegistrar, init_utils, handleMcpBridge, init_mcp_bridge, Redacted, init_redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, init_response_limit, ExtensionConfigError, init_loader, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, init_lifecycle, ExtensionAbortedError2, isRegistered2, isExtensionAgentId2, getExtensionBridgeToken2, resolveBridgeCallOrigin2, extensionIdForAgent2, runContext2, registerLoaded2, unregister2, listRegistered2, dispatchPre2, dispatchPost2, init_dispatcher, REBOOT_RETRY_PIN_TAG2, getPinCandidateAgent2, resolveLeadOnlyRecoveryAssignment2, getResumeGeneration2, getNextResumeGeneration2, inheritedModelSelection2, createWorkerTaskFollowUp2, createResumeFollowUp2, createRerouteDecisionTask2, createPoolStarvationDecisionTask2, init_worker_follow_up, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, isInboxAllowed, isSenderAllowed, handleMessageReceived, init_agentmail, isAzureDevOpsEnabled, initAzureDevOps, verifyAzureDevOpsWebhook, isAzureDevOpsUrl, canonicalAzureDevOpsRepoUrl, parseAzureDevOpsRepoUrl, init_azure_devops, createdPullRequestOf, commentedPayloadOf, handlePullRequestCreated, handlePullRequestCommented, handleWorkItemCreated, handleWorkItemUpdated, handleWorkItemCommented, handleWorkItemDeleted, handleWorkItemRestored, initAzureDevOpsOutbound, init_azure_devops2, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, init_rbac_audit, getTelemetryIngestAnchor, init_telemetry_ingest_anchor, initApiTelemetry, syncTelemetryEnabled, init_telemetry_enable, isBitbucketEnabled, initBitbucket, verifyBitbucketWebhook, isDuplicateDelivery, markDeliveryProcessed, pullRequestEventOf, pullRequestCommentEventOf, handlePullRequestCreated2, handlePullRequestCommentCreated, handlePullRequestClosed, init_bitbucket, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, init_github, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2, handleNote, handlePipeline, init_gitlab, isChatSdkEnabled, getChatSdkConfig, init_config, errorMessage, init_logger, resolveAdapterApiUrl, init_adapters, trackBackground, init_background, TelegramBotApiError, callTelegramBotApi, init_telegram_api, isTrustedTeamsServiceUrl, init_teams_origin, getSessionLabels, rememberSessionLabel, init_session_labels, isChatSdkStopping, startChatSdk, getChatInstance, isChatAdapterConfigured, getChatSdkHealth, stopChatSdk, init_runtime, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, init_metadata, registerJiraWebhook, deleteJiraWebhook, init_webhook_lifecycle, isJiraEnabled, initJira, init_app, handleJiraWebhook, init_webhook, init_jira, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, init_sync, isLinearEnabled, initLinear, init_app2, init_linear, init_slack, isCookieSafePageId, extractPageSession, extractLegacyPageSession, extractAndVerifyCookie, pageSessionSetCookies, init_page_session, resolveHttpRequestAuth, init_auth, getDeploymentEnvValue, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, init_core, MCP_MAX_TOOL_INPUT_ELEMENTS, MCP_MAX_REQUEST_BODY_BYTES, init_mcp_limits, userCtx, init_task_tool_ctx, requestPrincipal, agentFirstPrincipal, requireAuthKind, rejectGuest, init_request_principal, handleApps, init_apps, cancelApprovalRequest, cancelApprovalRequestAndRun, init_approval_cancel, getUserCommsPrefs, init_requester_comms, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, init_get_task_details, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, init_cancel_task, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, init_db_query, snapshotMetric, init_version2, AssetKeyAuthorizationError, authorizeAssetKeyWrite, init_asset_key_auth, getPageEditCounter, init_page_versions, snapshotPage, init_version3, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, init_app_validation, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, init_presets, scopedResourceScopeIdSchema, resolveScopedResourceId, init_scoped_resource, MemoryKeyError, init_key_guard, refreshLinks, init_link_resolver, indexMemoryContent, init_index_content, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, init_retrieval, ExplicitSelfDuplicateError, applyRating, init_store, shouldPersistAutomaticTaskMemory, init_automatic_task_gate, guardTerminalTaskResultWrite, init_terminal_result_guard, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, init_get_tasks, reservedNamespaceError, privateNamespaceError, reservedRoomKeyError, init_kv_reserved_namespaces, updateMcpServerChecked, init_mcp_server_checked_update, updateTouchesStdioExecution, init_mcp_server_stdio_gate, canReadMemory, init_access, getLinksForMemory, init_links_store, expandCandidatesWithGraph, init_graph_expansion, isApiDraining, drainApi, init_api_drain, markKapsoMessageRead, sendKapsoReaction, init_client, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, init_config2, changesAllowMerge, init_repo_merge_policy, updateSwarmRepoChecked, init_repo_checked_update, getCombConfig, init_config3, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, sessionAccessTopic, sessionPresenceRoot, init_auth2, RoomOperationSchema, init_document, removeAwarenessStates, init_awareness, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, init_rooms, init_scheduler2, MEMORY_KEYS_DEFAULT_PREFIX, MEMORY_KEYS_MAX_LIMIT, estimateTokens, posteriorMean, listMemoryKeys, checkChunkIntegrity, getMemoryChunks, getPosteriorsByIds, init_key_browser, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, init_events, mergeScheduleTiming, validateRecurringTiming, init_validate, followUpThreadForSourceTask, evaluateFollowUpRedelegation, init_follow_up_redelegation_guard, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, init_send_task, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, init_steer_task, canClaim, init_budget_admission, emitBudgetRefusalSideEffects, init_budget_refusal_notify, workflowModelErrors, init_model_validation2, patchWorkflowDefinition, init_patch_definition, idempotencyKeyHeader, readIdempotencyKey, replayAcceptedOperation, init_idempotency_key, resolveScriptsOnlyMode, init_scripts_only_mode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer, init_server };