@mndrk/agx 2.4.4 → 2.4.6

package/cloud-runtime/standalone/apps/local/lib/db.ts

@@ -1,2931 +1 @@
-import { createAdminDbClient } from "./db-adapter";
-import { buildMarkdownWithFrontmatter } from "./orchestration/frontmatter";
-import { formatDependencyBlockedReason, isDependencyBlockedReason } from "@/lib/dependency-helpers";
-import { notifyTaskEvent } from "@/lib/notifications";
-import { randomUUID } from "crypto";
-import { vaultStore } from "./vault-store";
-
-// Task frontmatter fields (extracted from markdown)
-export type TaskStatus = "queued" | "in_progress" | "blocked" | "completed" | "failed";
-export type TaskStage =
-  | "INTAKE" | "PROGRESS" | "DONE"
-  // Legacy values still present in DB rows — backend migration pending
-  | "ideation" | "planning" | "execution" | "verification" | "done";
-
-export interface TaskDependencySummary {
-  id: string;
-  title?: string;
-  slug?: string;
-  status?: TaskStatus;
-  stage?: TaskStage;
-}
-
-export interface Task {
-  id: string;
-  user_id?: string;
-  content: string; // Full markdown with frontmatter
-  description?: string;
-  swarm_models?: SwarmModel[];
-  // Extracted/indexed fields:
-  title?: string;
-  slug?: string;
-  status?: TaskStatus;
-  stage?: TaskStage;
-  depends_on?: string[];
-  blocked_reason?: string | null;
-  project?: string;
-  project_id?: string;
-  priority?: number;
-  engine?: string;
-  provider?: string;
-  model?: string;
-  swarm?: boolean;
-  retry_count?: number;
-  error?: string;
-  stage_decisions?: Record<string, { decision: string; rationale: string; final_result: string; decided_at: string }>;
-  started_at?: string;
-  completed_at?: string;
-  pid?: number;
-  exit_code?: number;
-  signature?: string; // HMAC-SHA256 signature for daemon verification
-  workflow_id?: string | null;
-  workflow_run_id?: string | null;
-  orchestration_status?: string | null;
-  last_orchestration_update?: string | null;
-  graph_id?: string;
-  created_at: string;
-  updated_at: string;
-
-  // New structured working set fields
-  current_plan?: string;
-  open_blockers?: string[];
-  next_action?: string;
-  version?: number;
-
-  // Run index (last N runs, lightweight metadata)
-  run_index?: RunIndexEntry[];
-
-  created_by?: "user" | "ai";
-
-  // Execution history (archived runs)
-  history?: TaskRunHistory[];
-  depends_on_tasks?: TaskDependencySummary[];
-  dependent_tasks?: TaskDependencySummary[];
-}
-
-export interface TaskRunHistory {
-  id: string;
-  task_id: string;
-  pid?: number;
-  exit_code?: number;
-  started_at?: string;
-  completed_at?: string;
-  error?: string;
-  created_at: string;
-}
-
-export interface RunIndexEntry {
-  run_id: string;
-  stage: string;
-  engine: string;
-  model?: string;
-  status: string;
-  created_at: string;
-  artifact_manifest?: ArtifactRef[];
-  // Optional: local-only pointers for the run artifact root written by the daemon.
-  artifact_path?: string;
-  artifact_host?: string;
-  artifact_key?: string;
-}
-
-export interface ArtifactRef {
-  kind: "prompt" | "output" | "events" | "logs" | "artifact";
-  key: string; // URL/key in object storage, not the blob
-  bytes?: number;
-  sha256?: string;
-}
-
-export interface ProjectRepo {
-  id: string;
-  project_id: string;
-  name: string;
-  path: string;
-  git_url?: string;
-  notes?: string;
-  created_at: string;
-  updated_at: string;
-}
-
-export interface Project {
-  id: string;
-  user_id?: string;
-  name: string;
-  slug: string;
-  description?: string;
-  metadata?: Record<string, unknown>;
-  ci_cd_info?: string;
-  workflow_id?: string | null;
-  archived_at?: string | null;
-  created_at: string;
-  updated_at: string;
-}
-
-export interface ProjectWithRepos extends Project {
-  repos: ProjectRepo[];
-}
-
-export interface ProjectRepoInput {
-  id?: string;
-  name: string;
-  path: string;
-  git_url?: string;
-  notes?: string;
-}
-
-export interface ProjectInput {
-  name: string;
-  description?: string;
-  repos?: ProjectRepoInput[];
-  workflow_id?: string;
-}
-
-// ============ WORKFLOWS ============
-
-export type WorkflowNodeType = "step" | "gate" | "branch" | "terminal";
-export type WorkflowTransitionCondition = "done" | "blocked" | "failed" | "retry" | "branch_a" | "branch_b";
-
-export interface Workflow {
-  id: string;
-  user_id: string;
-  name: string;
-  definition: Record<string, unknown>;
-  created_at: string;
-  updated_at: string;
-}
-
-export interface WorkflowNode {
-  id: string;
-  workflow_id: string;
-  name: string;
-  label?: string;
-  prompt?: string;
-  provider?: string;
-  model?: string;
-  position: number;
-  node_type: WorkflowNodeType;
-  metadata: Record<string, unknown>;
-  created_at: string;
-}
-
-export interface WorkflowTransition {
-  id: string;
-  workflow_id: string;
-  from_node_id: string;
-  to_node_id: string;
-  condition: WorkflowTransitionCondition;
-  priority: number;
-  metadata: Record<string, unknown>;
-  created_at: string;
-}
-
-export interface WorkflowWithGraph extends Workflow {
-  nodes: WorkflowNode[];
-  transitions: WorkflowTransition[];
-}
-
-export interface ProjectUpdatePayload {
-  name?: string;
-  slug?: string;
-  description?: string | null;
-  metadata?: Record<string, unknown>;
-  ci_cd_info?: string | null;
-  workflow_id?: string | null;
-  repos?: ProjectRepoInput[];
-}
-
-function isMissingRelationError(error: any, relation: string): boolean {
-  if (!error) return false;
-  const message = typeof error.message === "string" ? error.message : "";
-  return (
-    error.code === "42P01" ||
-    error.code === "PGRST205" ||
-    message.includes(`relation "${relation}" does not exist`) ||
-    message.includes(`Could not find the table 'agx.${relation}'`) ||
-    message.includes(`Could not find the table 'public.${relation}'`)
-  );
-}
-
-export interface TaskLog {
-  id: string;
-  task_id: string;
-  content: string;
-  log_type?: string;
-  node_id?: string | null;
-  created_at: string;
-}
-
-export interface TaskComment {
-  id: string;
-  task_id: string;
-  author_type: "user" | "agent";
-  author_id?: string;
-  content: string;
-  created_at: string;
-  deleted_at?: string | null;
-}
-
-export type LearningScope = "task" | "project" | "global";
-
-export interface SwarmModel {
-  provider: string;
-  model: string;
-}
-
-// ============ USER SETTINGS ============
-
-// ============ AGENTS ============
-
-export type AgentStyle = "degen" | "conservative" | "specialist" | "balanced";
-
-export interface Agent {
-  id: string;
-  user_id: string;
-  name: string;
-  role?: string;
-  style: AgentStyle;
-  description?: string;
-  voice?: string;
-  seed?: string;
-  model?: string;
-  provider?: string;
-  color?: string;
-  created_at: string;
-  updated_at: string;
-}
-
-export interface AgentSkill {
-  agent_id: string;
-  file: string;
-  condition?: string;
-  created_at: string;
-}
-
-// ============ PROJECT SUB-TABLES ============
-
-export interface ProjectAgent {
-  project_id: string;
-  agent_id: string;
-  routing_order: number;
-  created_at: string;
-}
-
-export interface ProjectSkill {
-  id: string;
-  project_id: string;
-  file: string;
-  condition?: string;
-  created_at: string;
-}
-
-export interface ProjectVariable {
-  project_id: string;
-  key: string;
-  value: string;
-}
-
-export interface ProjectMemory {
-  id: string;
-  project_id: string;
-  content: string;
-  source?: string;
-  producer?: "human" | "system";
-  created_at: string;
-}
-
-export interface ProjectThread {
-  project_id: string;
-  thread_id: string;
-  created_at: string;
-}
-
-// ============ TEAMS ============
-
-export interface Team {
-  id: string;
-  project_id: string;
-  name: string;
-  template_id: string | null;
-  metadata: Record<string, unknown>;
-  created_at: string;
-  updated_at: string;
-}
-
-export interface TeamAgent {
-  team_id: string;
-  agent_id: string;
-  role_key: string;
-  routing_order: number;
-}
-
-export interface SkillProvenance {
-  file: string;
-  condition?: string;
-  source: "agent" | "project";
-}
-
-export interface MemoryProvenance {
-  content: string;
-  source: "agent" | "project";
-  id?: string;
-}
-
-export interface ExecutionProvenance {
-  skills: SkillProvenance[];
-  memory: MemoryProvenance[];
-  variables: Array<{ key: string; value: string; source: "project" }>;
-}
-
-// ============ USER SETTINGS ============
-
-export type UserSettingsProvenance = "cli" | "web";
-
-export interface UserSettings {
-  user_id: string;
-  default_provider?: string | null;
-  models: Record<string, string>;
-  provenance: UserSettingsProvenance;
-  changed_at: string;
-  created_at: string;
-  updated_at: string;
-}
-
-function normalizeChangedAt(value?: string | null): string {
-  if (typeof value === "string") {
-    const t = Date.parse(value);
-    if (Number.isFinite(t)) return new Date(t).toISOString();
-  }
-  return new Date().toISOString();
-}
-
-export async function getUserSettings(userId: string): Promise<UserSettings | null> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("user_settings")
-    .select("*")
-    .eq("user_id", userId)
-    .maybeSingle();
-
-  if (error) {
-    if (isMissingRelationError(error, "user_settings")) return null;
-    throw error;
-  }
-  if (!data) return null;
-  return data as UserSettings;
-}
-
-export async function upsertUserSettings(
-  userId: string,
-  input: {
-    default_provider?: string | null;
-    models?: Record<string, string> | null;
-    provenance: UserSettingsProvenance;
-    changed_at?: string | null;
-  },
-  options?: { onlyIfNewer?: boolean }
-): Promise<{ settings: UserSettings; updated: boolean }> {
-  const onlyIfNewer = options?.onlyIfNewer !== false;
-  const incomingChangedAt = normalizeChangedAt(input.changed_at);
-
-  const existing = await getUserSettings(userId);
-  if (onlyIfNewer && existing?.changed_at) {
-    const existingTs = Date.parse(existing.changed_at);
-    const incomingTs = Date.parse(incomingChangedAt);
-    if (Number.isFinite(existingTs) && Number.isFinite(incomingTs) && incomingTs <= existingTs) {
-      return { settings: existing, updated: false };
-    }
-  }
-
-  const payload: any = {
-    user_id: userId,
-    default_provider: input.default_provider ?? existing?.default_provider ?? null,
-    models: input.models ?? existing?.models ?? {},
-    provenance: input.provenance,
-    changed_at: incomingChangedAt,
-  };
-
-  const db = createAdminDbClient();
-  const { error: upsertError } = await db
-    .from("user_settings")
-    .upsert(payload, { onConflict: "user_id" });
-  if (upsertError) throw upsertError;
-
-  const after = await getUserSettings(userId);
-  if (!after) throw new Error("Failed to load user_settings after upsert");
-  return { settings: after, updated: true };
-}
-
-export interface Learning {
-  id: string;
-  user_id?: string;
-  scope: LearningScope;
-  scope_id?: string; // task_id or project name (null for global)
-  content: string;
-  created_at: string;
-}
-
-/**
- * Resolves task configuration by merging task-level settings with stage-level defaults.
- * Task settings take precedence.
- */
-export function resolveTaskConfig(
-  task: Task,
-  stageConfig?: {
-  swarm?: boolean;
-  provider?: string;
-  model?: string;
-  swarm_models?: SwarmModel[];
-  },
-  userSettings?: { default_provider?: string | null; models?: Record<string, string> | null } | null
-) {
-  const clean = (v: any): string | null => {
-    if (typeof v !== "string") return null;
-    const t = v.trim();
-    return t ? t : null;
-  };
-
-  // Priority:
-  // 1) Task-level explicit override
-  // 2) Stage-level setting (workflow/stage prompt)
-  // 3) Global default (user_settings → ~/.agx/config.json → "claude")
-  let cliDefaultProvider: string | null = null;
-  try {
-    const fs = require("fs");
-    const path = require("path");
-    const configPath = path.join(process.env.HOME || "", ".agx", "config.json");
-    const cliConfig = JSON.parse(fs.readFileSync(configPath, "utf-8"));
-    cliDefaultProvider = clean(cliConfig?.defaultProvider) || null;
-  } catch {
-    // ~/.agx/config.json not found or unreadable
-  }
-  const globalDefaultProvider = clean(userSettings?.default_provider) || cliDefaultProvider || "claude";
-
-  const provider =
-    clean((task as any).provider) ||
-    clean(stageConfig?.provider) ||
-    globalDefaultProvider;
-
-  const globalDefaultModel = clean(userSettings?.models?.[provider]) || null;
-
-  const model =
-    clean((task as any).model) ||
-    clean(stageConfig?.model) ||
-    globalDefaultModel ||
-    null;
-
-  const swarm = task.swarm ?? stageConfig?.swarm ?? false;
-  const swarm_models = task.swarm_models?.length ? task.swarm_models : (stageConfig?.swarm_models || []);
-
-  return {
-    provider,
-    model,
-    swarm,
-    swarm_models,
-  };
-}
-
-function slugify(input: string): string {
-  return input
-    .toLowerCase()
-    .replace(/[^a-z0-9]+/g, "-")
-    .replace(/^-+|-+$/g, "")
-    .slice(0, 40) || "task";
-}
-
-async function generateUniqueSlug(base: string, db: ReturnType<typeof createAdminDbClient>): Promise<string> {
-  let slug = slugify(base);
-  for (let i = 0; i < 5; i++) {
-    const { data, error } = await db
-      .from("tasks")
-      .select("id")
-      .eq("slug", slug)
-      .limit(1);
-    if (error) throw error;
-    if (!data || data.length === 0) return slug;
-    const suffix = Math.random().toString(36).slice(2, 6);
-    slug = `${slugify(base)}-${suffix}`.slice(0, 48);
-  }
-  return `${slugify(base)}-${Date.now().toString(36).slice(-4)}`.slice(0, 48);
-}
-
-async function generateUniqueProjectSlug(
-  base: string,
-  userId: string,
-  db: any,
-  excludeProjectId?: string
-): Promise<string> {
-  let slug = slugify(base);
-
-  for (let i = 0; i < 5; i++) {
-    let query = db
-      .from("projects")
-      .select("id")
-      .eq("slug", slug)
-      .eq("user_id", userId);
-    if (excludeProjectId) {
-      query = query.neq("id", excludeProjectId);
-    }
-    const { data, error } = await query.limit(1);
-    if (error) throw error;
-    if (!data || data.length === 0) return slug;
-    const suffix = Math.random().toString(36).slice(2, 6);
-    slug = `${slugify(base)}-${suffix}`.slice(0, 48);
-  }
-
-  return `${slugify(base)}-${Date.now().toString(36).slice(-4)}`.slice(0, 48);
-}
-
-function getDbClient(client?: any): any {
-  return client ?? createAdminDbClient();
-}
-
-function parseDependsOnValue(value: string): string[] {
-  const trimmed = value.trim();
-  if (!trimmed) return [];
-  try {
-    const parsed = JSON.parse(trimmed);
-    if (Array.isArray(parsed)) {
-      return parsed.map((item) => String(item || "").trim()).filter(Boolean);
-    }
-  } catch {
-    // ignore parse errors
-  }
-  return trimmed
-    .split(",")
-    .map((item) => item.trim())
-    .filter(Boolean);
-}
-
-function normalizeDependsOnInput(input?: unknown): string[] {
-  if (!input) return [];
-  let candidates: string[];
-  if (Array.isArray(input)) {
-    candidates = input.map((item) => (typeof item === "string" ? item : item === null || item === undefined ? "" : String(item))).filter(Boolean);
-  } else if (typeof input === "string") {
-    candidates = parseDependsOnValue(input);
-  } else {
-    return [];
-  }
-  return Array.from(new Set(candidates.map((id) => id.trim()).filter(Boolean)));
-}
-
-// Parse YAML frontmatter from markdown
-export function parseFrontmatter(markdown: string): { frontmatter: Record<string, unknown>; body: string } {
-  const match = markdown.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
-  if (!match) {
-    return { frontmatter: {}, body: markdown };
-  }
-
-  const frontmatter: Record<string, unknown> = {};
-  const lines = match[1].split('\n');
-  for (const line of lines) {
-    const colonIndex = line.indexOf(':');
-    if (colonIndex > 0) {
-    const key = line.slice(0, colonIndex).trim();
-    const value = line.slice(colonIndex + 1).trim();
-    if (key === "depends_on") {
-      frontmatter[key] = parseDependsOnValue(value);
-      continue;
-    }
-    // Parse numbers and booleans
-      if (value === 'true') frontmatter[key] = true;
-      else if (value === 'false') frontmatter[key] = false;
-      else if (/^\d+$/.test(value)) frontmatter[key] = parseInt(value);
-      else frontmatter[key] = value;
-    }
-  }
-
-  return { frontmatter, body: match[2] };
-}
-
-export async function ensureNoCircularDependency(
-  taskId: string,
-  dependsOn: string[],
-  client?: any
-): Promise<void> {
-  if (!taskId || !dependsOn?.length) return;
-  const db = getDbClient(client);
-  const visited = new Set<string>();
-  const stack = [...dependsOn];
-
-  while (stack.length) {
-    const candidate = stack.pop();
-    if (!candidate) continue;
-    if (candidate === taskId) {
-      throw new Error("Circular dependency detected");
-    }
-    if (visited.has(candidate)) continue;
-    visited.add(candidate);
-    const { data, error } = await db
-      .from("tasks")
-      .select("depends_on")
-      .eq("id", candidate)
-      .maybeSingle();
-    if (error) {
-      if (error.code === "PGRST116" || error.code === "42703") continue;
-      throw error;
-    }
-    if (!data) continue;
-    const childDeps = Array.isArray(data.depends_on) ? data.depends_on : [];
-    for (const next of childDeps) {
-      if (next && !visited.has(next)) {
-        stack.push(next);
-      }
-    }
-  }
-}
-
-// Extract title from markdown (first H1)
-export function extractTitle(markdown: string): string | undefined {
-  const { body } = parseFrontmatter(markdown);
-  const match = body.match(/^#\s+(.+)$/m);
-  return match ? match[1] : undefined;
-}
-
-function normalizeDescriptionBody(markdownBody: string): string {
-  return String(markdownBody || "")
-    .replace(/^#\s+.+(\r?\n|$)/, "")
-    .trim();
-}
-
-/**
- * If a task has depends_on, check whether all dependencies are completed.
- * Auto-set status to "blocked" when unfinished deps exist, or back to "queued"
- * when all deps are done and the task is currently blocked.
- */
-async function ensureTaskDependencyState(task: Task, userId?: string): Promise<void> {
-  const deps = Array.isArray(task.depends_on) ? task.depends_on : [];
-  if (!deps.length) return;
-
-  const db = createAdminDbClient();
-  const { data: depTasks, error } = await db
-    .from("tasks")
-    .select("id, title, slug, status, stage")
-    .in("id", deps);
-
-  if (error) return; // best-effort (older schemas may not have these columns yet)
-
-  const missingDependencies = (Array.isArray(depTasks) ? depTasks : []).filter(
-    (entry) => (entry?.status || "") !== "completed"
-  );
-
-  if (missingDependencies.length) {
-    const reason = formatDependencyBlockedReason(missingDependencies);
-    let query = db
-      .from("tasks")
-      .update({ status: "blocked", blocked_reason: reason })
-      .eq("id", task.id);
-    if (userId) query = query.eq("user_id", userId);
-    const { error: updateError } = await query;
-    if (updateError && updateError.code !== "42703") {
-      throw updateError;
-    }
-    return;
-  }
-
-  if (task.status === "blocked" && isDependencyBlockedReason(task.blocked_reason)) {
-    let query = db
-      .from("tasks")
-      .update({ status: "queued", blocked_reason: null })
-      .eq("id", task.id);
-    if (userId) query = query.eq("user_id", userId);
-    const { error: updateError } = await query;
-    if (updateError && updateError.code !== "42703") {
-      throw updateError;
-    }
-  }
-}
-
-// ============ TASKS ============
-
-export async function getTasks(
-  userId?: string,
-  filters?: { project?: string; status?: TaskStatus; search?: string; orphan?: boolean }
-): Promise<Task[]> {
-  const db = createAdminDbClient();
-
-  let query = db
-    .from("tasks")
-    .select("*")
-    .order("priority", { ascending: true, nullsFirst: false })
-    .order("created_at", { ascending: false });
-
-  if (userId) query = query.eq("user_id", userId);
-  if (filters?.project) {
-    const isUuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(filters.project);
-    query = isUuid
-      ? query.eq("project_id", filters.project)
-      : query.eq("project", filters.project);
-  }
-  if (filters?.orphan) query = query.is("project_id", null);
-  if (filters?.status) query = query.eq("status", filters.status);
-  if (filters?.search) {
-    const term = filters.search;
-    const isUuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(term);
-    if (isUuid) {
-      query = query.or(`id.eq.${term},slug.ilike.%${term}%,title.ilike.%${term}%`);
-    } else {
-      // id is already TEXT in SQLite; for Postgres we cast id::text.
-      // Use CAST(id AS TEXT) which works on both dialects.
-      query = query.or(`id.ilike.%${term}%,slug.ilike.%${term}%,title.ilike.%${term}%`);
-    }
-  }
-
-  const { data, error } = await query;
-  if (error) throw error;
-
-  const rows = data || [];
-  if (!filters?.orphan) {
-    return rows;
-  }
-
-  return rows.filter((task: Task) => {
-    const projectValue = String(task.project || "").trim().toLowerCase();
-    return !projectValue || projectValue === "none";
-  });
-}
-
-export async function getTask(id: string, userId?: string): Promise<Task | null> {
-  const db = createAdminDbClient();
-
-  let query = db
-    .from("tasks")
-    .select("*")
-    .eq("id", id);
-
-  if (userId) query = query.eq("user_id", userId);
-
-  const { data, error } = await query.single();
-
-  if (error) {
-    if (error.code === "PGRST116") return null;
-    throw error;
-  }
-  return data;
-}
-
-export async function getTaskBySlug(slug: string, userId?: string): Promise<Task | null> {
-  const db = createAdminDbClient();
-
-  let query = db
-    .from("tasks")
-    .select("*")
-    .eq("slug", slug);
-
-  if (userId) query = query.eq("user_id", userId);
-
-  const { data, error } = await query.single();
-
-  if (error) {
-    if (error.code === "PGRST116") return null;
-    throw error;
-  }
-  return data;
-}
-
-export async function createTask(
-  content: string,
-  userId?: string,
-  options?: {
-    swarmModels?: SwarmModel[] | null;
-    currentPlan?: string;
-    openBlockers?: string[];
-    nextAction?: string;
-    dependsOn?: string[] | null;
-    projectId?: string;
-    title?: string;
-  }
-): Promise<Task> {
-  const db = createAdminDbClient();
-
-  const { frontmatter, body } = parseFrontmatter(content);
-  const swarm = typeof frontmatter.swarm === "boolean" ? frontmatter.swarm : undefined;
-  const title = options?.title || extractTitle(content);
-  const slugBase = String(frontmatter.slug || title || "task");
-  const slug = await generateUniqueSlug(slugBase, db);
-  const projectId = options?.projectId || (typeof frontmatter.project_id === "string" ? frontmatter.project_id : undefined);
-  const workflowId = typeof frontmatter.workflow_id === "string" ? frontmatter.workflow_id : undefined;
-
-  // Resolve project slug from project_id if not in frontmatter
-  let projectSlug = typeof frontmatter.project === "string" ? frontmatter.project : undefined;
-  if (!projectSlug && projectId) {
-    const project = await getProjectWithRepos(projectId);
-    if (project?.slug) projectSlug = project.slug;
-  }
-
-  // Preserve provider/model/engine from frontmatter if provided
-  const hadFrontmatter = /^---\n/.test(content);
-  const provider = typeof frontmatter.provider === "string" ? frontmatter.provider : null;
-  const model = typeof frontmatter.model === "string" ? frontmatter.model : null;
-  const engine = typeof frontmatter.engine === "string" ? frontmatter.engine : null;
-  const createdBy = frontmatter.created_by === "ai" ? "ai" : "user";
-  const frontmatterDepends = normalizeDependsOnInput(frontmatter.depends_on);
-  const optionDepends = normalizeDependsOnInput(options?.dependsOn);
-  const dependsOn = optionDepends.length > 0 ? optionDepends : frontmatterDepends;
-
-  const insertPayload: any = {
-    id: randomUUID(),
-    content,
-    description: normalizeDescriptionBody(body),
-    title,
-    slug,
-    status: frontmatter.status || "queued",
-    stage: frontmatter.stage || "intake",
-    project: projectSlug || null,
-    ...(projectId !== undefined ? { project_id: projectId } : {}),
-    ...(workflowId !== undefined ? { workflow_id: workflowId } : {}),
-    priority: frontmatter.priority,
-    engine,
-    provider,
-    model,
-    swarm,
-    swarm_models: options?.swarmModels ?? null,
-    depends_on: dependsOn.length ? dependsOn : null,
-    created_by: createdBy,
-    user_id: userId,
-    // Working set fields
-    current_plan: options?.currentPlan || null,
-    open_blockers: options?.openBlockers || [],
-    next_action: options?.nextAction || null,
-    version: 1,
-  };
-
-  await ensureNoCircularDependency(insertPayload.id, dependsOn, db);
-
-  let { data, error } = await db
-    .from("tasks")
-    .insert(insertPayload)
-    .select()
-    .single();
-
-  if (error && error.code === "42703") {
-    // Older schemas may not have newer columns.
-    const {
-      swarm_models, swarm, workflow_id,
-      current_plan, open_blockers, next_action, version,
-      depends_on,
-      ...fallbackPayload
-    } = insertPayload;
-    ({ data, error } = await db
-      .from("tasks")
-      .insert(fallbackPayload)
-      .select()
-      .single());
-  }
-
-  if (error) throw error;
-  if (!data) {
-    throw new Error('Failed to create task');
-  }
-
-  await ensureTaskDependencyState(data, userId);
-  const refreshed = await getTask(data.id, userId);
-  const taskRecord = refreshed || data;
-  const resolvedUserId = userId || taskRecord.user_id;
-  if (resolvedUserId) {
-    const eventTimestamp = taskRecord.created_at || new Date().toISOString();
-    const details: Record<string, unknown> = {
-      dependsOn: Array.isArray(taskRecord.depends_on) ? taskRecord.depends_on : [],
-      project: taskRecord.project || null,
-      projectId: taskRecord.project_id || null,
-      workflowId: taskRecord.workflow_id || null,
-      createdBy: taskRecord.created_by || null,
-    };
-    void notifyTaskEvent({
-      taskId: taskRecord.id,
-      userId: resolvedUserId,
-      eventType: "task.created",
-      title: taskRecord.title || null,
-      slug: taskRecord.slug || null,
-      stage: taskRecord.stage || null,
-      status: taskRecord.status || null,
-      timestamp: eventTimestamp,
-      details,
-    });
-  }
-  return taskRecord;
-}
-
-export async function updateTask(
-  id: string,
-  content: string,
-  userId?: string,
-  options?: {
-    swarmModels?: SwarmModel[] | null;
-    currentPlan?: string;
-    openBlockers?: string[];
-    nextAction?: string;
-    expectedVersion?: number;
-    dependsOn?: string[] | null;
-  }
-): Promise<Task> {
-  const db = createAdminDbClient();
-
-  const { frontmatter, body } = parseFrontmatter(content);
-  const swarm = typeof frontmatter.swarm === "boolean" ? frontmatter.swarm : undefined;
-  const title = extractTitle(content);
-  const projectId = typeof frontmatter.project_id === "string" ? frontmatter.project_id : undefined;
-  const hasProvider = Object.prototype.hasOwnProperty.call(frontmatter, "provider");
-  const hasModel = Object.prototype.hasOwnProperty.call(frontmatter, "model");
-  const hasWorkflowId = Object.prototype.hasOwnProperty.call(frontmatter, "workflow_id");
-  const hasDependsOnInFrontmatter = Object.prototype.hasOwnProperty.call(frontmatter, "depends_on");
-  const dependsFromFrontmatter = normalizeDependsOnInput(frontmatter.depends_on);
-  const dependsFromOptions = normalizeDependsOnInput(options?.dependsOn);
-  const shouldUpdateDepends = options?.dependsOn !== undefined || hasDependsOnInFrontmatter;
-  const dependsOnForUpdate = options?.dependsOn !== undefined ? dependsFromOptions : dependsFromFrontmatter;
-
-  const updatePayload: any = {
-    content,
-    description: normalizeDescriptionBody(body),
-    title,
-    status: frontmatter.status,
-    stage: frontmatter.stage,
-    project: frontmatter.project,
-    ...(projectId !== undefined ? { project_id: projectId } : {}),
-    workflow_id: hasWorkflowId ? (frontmatter as any).workflow_id : undefined,
-    priority: frontmatter.priority,
-    engine: frontmatter.engine,
-    provider: hasProvider ? frontmatter.provider : null,
-    model: hasModel ? frontmatter.model : null,
-    swarm,
-    swarm_models: options?.swarmModels ?? undefined,
-    ...(shouldUpdateDepends ? { depends_on: dependsOnForUpdate.length ? dependsOnForUpdate : null } : {}),
-    updated_at: new Date().toISOString(),
-    // Working set fields
-    current_plan: options?.currentPlan ?? undefined,
-    open_blockers: options?.openBlockers ?? undefined,
-    next_action: options?.nextAction ?? undefined,
-  };
-
-  // Remove undefined fields to avoid overwriting with null unless intended
-  Object.keys(updatePayload).forEach(key => {
-    if (updatePayload[key] === undefined) {
-      delete updatePayload[key];
-    }
-  });
-
-  if (shouldUpdateDepends) {
-    await ensureNoCircularDependency(id, dependsOnForUpdate, db);
-  }
-
-  let query = db
-    .from("tasks")
-    .update({
-      ...updatePayload,
-      version: db.rpc("increment_version"), // This will be used in the actual SQL via RPC or raw query if possible
-    })
-    .eq("id", id);
-
-  if (userId) query = query.eq("user_id", userId);
-
-  // Optimistic concurrency check
-  if (options?.expectedVersion !== undefined) {
-    query = query.eq("version", options.expectedVersion);
-  }
-
-  // NOTE: Supabase JS client doesn't support "version = version + 1" natively in .update() easily 
-  // without raw SQL or RPC. Since we are using standard update, we might need a workaround 
-  // if we can't use RPC.
-  // For now, I'll use a direct update but ideally version should be incremented by the DB.
-
-  // Re-evaluating increment strategy:
-  // If we can't use version = version + 1 in updatePayload easily with JS client, 
-  // we might need to fetch and increment, but that's not atomic.
-  // Better: Use a raw query or assume the DB has a trigger, or use RPC.
-
-  // Let's try to use the version incrementing logic that works with standard Supabase client 
-  // if we use a PostgREST feature:
-
-  let { data, error } = await db
-    .from("tasks")
-    .update({
-      ...updatePayload,
-    })
-    .eq("id", id)
-    .select()
-    .maybeSingle();
-
-  if (error) {
-    console.error(`[db.updateTask] error updating task ${id}:`, error);
-  }
-  if (!data && !error) {
-    console.warn(`[db.updateTask] UPDATE returned 0 rows for task ${id}, payload keys:`, Object.keys(updatePayload));
-  }
-
-  if (error && error.code === "42703") {
-    // Older schemas fallback
-    const {
-      swarm_models, swarm, workflow_id,
-      current_plan, open_blockers, next_action, version,
-      depends_on,
-      ...fallbackPayload
-    } = updatePayload;
-    let fallbackQuery = db
-      .from("tasks")
-      .update(fallbackPayload)
-      .eq("id", id);
-    if (userId) fallbackQuery = fallbackQuery.eq("user_id", userId);
-    ({ data, error } = await fallbackQuery.select().maybeSingle());
-  }
-
-  if (error) throw error;
-  if (!data) {
-    // Update returned no rows – re-fetch the task to return current state
-    const fallback = await getTask(id, userId);
-    if (!fallback) throw new Error(`Task ${id} not found`);
-    return fallback;
-  }
-
-  await ensureTaskDependencyState(data, userId);
-  const refreshed = await getTask(data.id, userId);
-  const taskRecord = refreshed || data;
-  const resolvedUserId = userId || taskRecord.user_id;
-  if (resolvedUserId) {
-    const eventTimestamp = taskRecord.created_at || new Date().toISOString();
-    const details: Record<string, unknown> = {
-      dependsOn: Array.isArray(taskRecord.depends_on) ? taskRecord.depends_on : [],
-      project: taskRecord.project || null,
-      projectId: taskRecord.project_id || null,
-      workflowId: taskRecord.workflow_id || null,
-      createdBy: taskRecord.created_by || null,
-    };
-    void notifyTaskEvent({
-      taskId: taskRecord.id,
-      userId: resolvedUserId,
-      eventType: "task.created",
-      title: taskRecord.title || null,
-      slug: taskRecord.slug || null,
-      stage: taskRecord.stage || null,
-      status: taskRecord.status || null,
-      timestamp: eventTimestamp,
-      details,
-    });
-  }
-  return taskRecord;
-}
-
-/**
- * Appends a run entry to the task's run_index.
- * Maintains a maximum number of runs (default 25).
- */
-export async function appendRunToIndex(
-  taskId: string,
-  runEntry: RunIndexEntry,
-  maxRuns: number = 25
-): Promise<void> {
-  const db = createAdminDbClient();
-
-  // Fetch current run_index
-  const { data: task, error: fetchError } = await db
-    .from("tasks")
-    .select("run_index")
-    .eq("id", taskId)
-    .single();
-
-  if (fetchError) {
-    // Backward-compatible: older schemas won't have the `run_index` column.
-    if ((fetchError as any)?.code === "42703") return;
-    throw fetchError;
-  }
-
-  const runIndex = Array.isArray(task.run_index) ? task.run_index : [];
-
-  // Add new entry to the start
-  const updatedIndex = [runEntry, ...runIndex].slice(0, maxRuns);
-
-  const { error: updateError } = await db
-    .from("tasks")
-    .update({ run_index: updatedIndex })
-    .eq("id", taskId);
-
-  if (updateError) {
-    // Backward-compatible: older schemas won't have the `run_index` column.
-    if ((updateError as any)?.code === "42703") return;
-    throw updateError;
-  }
-}
-
-export async function deleteTask(id: string, userId?: string): Promise<void> {
-  const db = createAdminDbClient();
-  let query = db.from("tasks").delete().eq("id", id);
-  if (userId) query = query.eq("user_id", userId);
-  const { error } = await query;
-  if (error) throw error;
-}
-
-export async function getNextQueuedTask(engine?: string): Promise<Task | null> {
-  const db = createAdminDbClient();
-
-  let query = db
-    .from("tasks")
-    .select("*")
-    .eq("status", "queued")
-    .order("priority", { ascending: true, nullsFirst: false })
-    .order("created_at", { ascending: true })
-    .limit(1);
-
-  if (engine) query = query.eq("engine", engine);
-
-  const { data, error } = await query.single();
-  if (error) {
-    if (error.code === "PGRST116") return null;
-    throw error;
-  }
-  return data;
-}
-
-export async function getProjects(userId?: string, includeArchived = false): Promise<ProjectWithRepos[]> {
-  const db = createAdminDbClient();
-  let query = db
-    .from("projects")
-    .select("*, project_repos(*)");
-  if (userId) query = query.eq("user_id", userId);
-  if (!includeArchived) query = query.is("archived_at", null);
-
-  const { data, error } = await query;
-  if (error) {
-    if (isMissingRelationError(error, "projects")) {
-      return [];
-    }
-    throw error;
-  }
-
-  const projects = (data || []) as (Project & { project_repos?: ProjectRepo[] })[];
-  return projects.map((project) => ({
-    ...project,
-    repos: project.project_repos ?? [],
-  }));
-}
-
-export async function getProjectBySlug(slug: string, userId?: string): Promise<Project | null> {
-  const db = createAdminDbClient();
-  let query = db.from("projects").select("*").eq("slug", slug);
-  if (userId) query = query.eq("user_id", userId);
-
-  const { data, error } = await query.maybeSingle();
-  if (error) {
-    if (isMissingRelationError(error, "projects")) {
-      return null;
-    }
-    throw error;
-  }
-  return data || null;
-}
-
-export async function getProjectRepos(projectId: string): Promise<ProjectRepo[]> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("project_repos")
-    .select("*")
-    .eq("project_id", projectId);
-
-  if (error) {
-    if (isMissingRelationError(error, "project_repos")) {
-      return [];
-    }
-    throw error;
-  }
-
-  return data || [];
-}
-
-const UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-
-export async function getProjectWithRepos(
-  projectIdOrSlug: string,
-  userId?: string
-): Promise<ProjectWithRepos | null> {
-  const db = createAdminDbClient();
-  const isUuid = UUID_REGEX.test(projectIdOrSlug);
-
-  let projectQuery = db.from("projects").select("*");
-  if (isUuid) {
-    projectQuery = projectQuery.eq("id", projectIdOrSlug);
-  } else {
-    projectQuery = projectQuery.eq("slug", projectIdOrSlug);
-  }
-  if (userId) projectQuery = projectQuery.eq("user_id", userId);
-
-  const projectResult = await projectQuery.maybeSingle();
-  if (projectResult.error) {
-    if (isMissingRelationError(projectResult.error, "projects")) {
-      return null;
-    }
-    throw projectResult.error;
-  }
-
-  const project = projectResult.data;
-  if (!project) return null;
-
-  const repos = await getProjectRepos(project.id);
-  return { ...project, repos };
-}
-
-async function insertProjectRepos(
-  projectId: string,
-  repos: ProjectRepoInput[],
-  db: any
-): Promise<ProjectRepo[]> {
-  if (!repos.length) {
-    return [];
-  }
-
-  const payload = repos.map((repo) => ({
-    ...(repo.id ? { id: repo.id } : {}),
-    project_id: projectId,
-    name: repo.name,
-    path: repo.path ?? null,
-    git_url: repo.git_url ?? null,
-    notes: repo.notes ?? null,
-  }));
-
-  const { data, error } = await db.from("project_repos").insert(payload).select("*");
-  if (error) {
-    if (isMissingRelationError(error, "project_repos")) {
-      return [];
-    }
-    throw error;
-  }
-  return data || [];
-}
-
-export async function createProject(
-  userId: string,
-  input: ProjectInput,
-  dbClient?: any
-): Promise<ProjectWithRepos> {
-  if (!input.name?.trim()) {
-    throw new Error("Project name is required");
-  }
-
-  const db = getDbClient(dbClient);
-  const baseSlug = input.name.trim() || "project";
-  const slug = await generateUniqueProjectSlug(baseSlug, userId, db);
-
-  const payload = {
-    user_id: userId,
-    name: input.name.trim(),
-    slug,
-    description: input.description ?? null,
-    workflow_id: input.workflow_id ?? null,
-  };
-
-  const { data: project, error } = await db.from("projects").insert(payload).select("*").single();
-  if (error) throw error;
-
-  const repos = await insertProjectRepos(project.id, input.repos ?? [], db);
-
-  return { ...project, repos };
-}
-
-export async function updateProject(
-  projectIdOrSlug: string,
-  userId: string,
-  updates: ProjectUpdatePayload,
-  dbClient?: any
-): Promise<ProjectWithRepos | null> {
-  const db = getDbClient(dbClient);
-  const isUuid = UUID_REGEX.test(projectIdOrSlug);
-
-  let projectId = projectIdOrSlug;
-  if (!isUuid) {
-    const project = await getProjectBySlug(projectIdOrSlug, userId);
-    if (!project) return null;
-    projectId = project.id;
-  }
-
-  const updatePayload: Record<string, unknown> = {};
-
-  if (typeof updates.name !== "undefined") {
-    const trimmedName = updates.name?.trim();
-    if (!trimmedName) {
-      throw new Error("Project name cannot be empty");
-    }
-    updatePayload.name = trimmedName;
-  }
-  if (typeof updates.slug !== "undefined") {
-    const trimmedSlug = updates.slug?.trim();
-    if (trimmedSlug) {
-      updatePayload.slug = trimmedSlug;
-    }
-  }
-  if (typeof updates.description !== "undefined") updatePayload.description = updates.description;
-  if (typeof updates.metadata !== "undefined") updatePayload.metadata = updates.metadata;
-  if (typeof updates.ci_cd_info !== "undefined") updatePayload.ci_cd_info = updates.ci_cd_info;
-  if (typeof updates.workflow_id !== "undefined") updatePayload.workflow_id = updates.workflow_id;
-
-  if (Object.keys(updatePayload).length) {
-    const { error } = await db
-      .from("projects")
-      .update(updatePayload)
-      .eq("id", projectId)
-      .eq("user_id", userId);
-    if (error) throw error;
-  }
-
-  if (updates.repos) {
-    const { data: existingRepos, error: existingReposError } = await db
-      .from("project_repos")
-      .select("*")
-      .eq("project_id", projectId);
-    if (existingReposError && !isMissingRelationError(existingReposError, "project_repos")) {
-      throw existingReposError;
-    }
-
-    const existingRepoList = (existingRepos || []) as ProjectRepo[];
-    const existingRepoIds = new Set(existingRepoList.map((repo) => repo.id));
-    const nextRepoIds = new Set(
-      updates.repos.map((repo) => repo.id).filter((repoId): repoId is string => Boolean(repoId))
-    );
-
-    for (const existingRepo of existingRepoList) {
-      if (nextRepoIds.has(existingRepo.id)) continue;
-      const { error: deleteError } = await db
-        .from("project_repos")
-        .delete()
-        .eq("id", existingRepo.id)
-        .eq("project_id", projectId);
-      if (deleteError && !isMissingRelationError(deleteError, "project_repos")) {
-        throw deleteError;
-      }
-    }
-
-    for (const repo of updates.repos) {
-      const payload = {
-        name: repo.name,
-        path: repo.path ?? null,
-        git_url: repo.git_url ?? null,
-        notes: repo.notes ?? null,
-        project_id: projectId,
-      };
-
-      if (repo.id && existingRepoIds.has(repo.id)) {
-        const { error: repoUpdateError } = await db
-          .from("project_repos")
-          .update(payload)
-          .eq("id", repo.id)
-          .eq("project_id", projectId);
-        if (repoUpdateError && !isMissingRelationError(repoUpdateError, "project_repos")) {
-          throw repoUpdateError;
-        }
-        continue;
-      }
-
-      const { error: repoInsertError } = await db
-        .from("project_repos")
-        .insert({
-          ...(repo.id ? { id: repo.id } : {}),
-          ...payload,
-        });
-      if (repoInsertError && !isMissingRelationError(repoInsertError, "project_repos")) {
-        throw repoInsertError;
-      }
-    }
-  }
-
-  return getProjectWithRepos(projectId, userId);
-}
-
-export async function deleteProject(
-  projectId: string,
-  userId: string,
-  dbClient?: any
-): Promise<void> {
-  const db = getDbClient(dbClient);
-  const { error } = await db
-    .from("projects")
-    .update({ archived_at: new Date().toISOString() })
-    .eq("id", projectId)
-    .eq("user_id", userId);
-
-  if (error) throw error;
-}
-
-export async function assignOrphanTasksToProject(
-  projectId: string,
-  userId: string,
-  dbClient?: any
-): Promise<{ updatedCount: number; taskIds: string[] }> {
-  const db = getDbClient(dbClient);
-  const project = await getProjectWithRepos(projectId, userId);
-  if (!project) {
-    throw new Error("Project not found");
-  }
-
-  const { data: tasks, error: tasksError } = await db
-    .from("tasks")
-    .select("id, project")
-    .eq("user_id", userId)
-    .is("project_id", null);
-
-  if (tasksError) throw tasksError;
-
-  const slug = String(project.slug || "").trim().toLowerCase();
-  const orphanTaskIds = (tasks || [])
-    .filter((task: Task) => {
-      const projectValue = String(task.project || "").trim().toLowerCase();
-      return !projectValue || projectValue === "none" || projectValue === slug;
-    })
-    .map((task: Task) => task.id);
-
-  if (!orphanTaskIds.length) {
-    return { updatedCount: 0, taskIds: [] };
-  }
-
-  const { error: updateError } = await db
-    .from("tasks")
-      .update({
-        project: project.slug,
-        project_id: project.id,
-        updated_at: new Date().toISOString(),
-      })
-    .eq("user_id", userId)
-    .is("project_id", null)
-    .in("id", orphanTaskIds);
-
-  if (updateError) throw updateError;
-
-  return { updatedCount: orphanTaskIds.length, taskIds: orphanTaskIds };
-}
-
-// ============ WORKFLOWS ============
-
-const DEFAULT_SDLC_WORKFLOW_ID = "00000000-0000-0000-0000-000000000001";
-const DEFAULT_SYSTEM_USER_ID = "00000000-0000-0000-0000-000000000000";
-
-const DEFAULT_WORKFLOW_NODE_SEED = [
-  {
-    id: "00000000-0000-0000-0001-000000000001",
-    name: "INTAKE",
-    label: "Intake",
-    prompt: "New task. Triage, scope, and prepare for work.",
-    position: 0,
-    node_type: "step" as const,
-  },
-  {
-    id: "00000000-0000-0000-0001-000000000002",
-    name: "PROGRESS",
-    label: "Progress",
-    prompt: "Task is actively being worked on.",
-    position: 1,
-    node_type: "step" as const,
-  },
-  {
-    id: "00000000-0000-0000-0001-000000000003",
-    name: "DONE",
-    label: "Done",
-    prompt: "Task completed.",
-    position: 2,
-    node_type: "terminal" as const,
-  },
-];
-
-const DEFAULT_WORKFLOW_NODE_SEED_BY_ID = new Map(
-  DEFAULT_WORKFLOW_NODE_SEED.map((node) => [node.id, node])
-);
-
-async function ensureDefaultWorkflowGraphExists(userId: string): Promise<void> {
-  const db = createAdminDbClient();
-  const ownerId = userId || DEFAULT_SYSTEM_USER_ID;
-
-  const { error: workflowError } = await db
-    .from("workflows")
-    .upsert(
-      {
-        id: DEFAULT_SDLC_WORKFLOW_ID,
-        user_id: ownerId,
-        name: "Default Workflow",
-        definition: {},
-      },
-      { onConflict: "id" }
-    );
-  if (workflowError) throw workflowError;
-
-  const { error: nodeError } = await db
-    .from("workflow_nodes")
-    .upsert(
-      DEFAULT_WORKFLOW_NODE_SEED.map((node) => ({
-        ...node,
-        workflow_id: DEFAULT_SDLC_WORKFLOW_ID,
-        metadata: {},
-      })),
-      { onConflict: "id" }
-    );
-  if (nodeError) throw nodeError;
-
-  const { error: transitionError } = await db
-    .from("workflow_transitions")
-    .upsert(
-      [
-        {
-          workflow_id: DEFAULT_SDLC_WORKFLOW_ID,
-          from_node_id: "00000000-0000-0000-0001-000000000001", // INTAKE
-          to_node_id: "00000000-0000-0000-0001-000000000002",   // PROGRESS
-          condition: "done",
-          priority: 0,
-          metadata: {},
-        },
-        {
-          workflow_id: DEFAULT_SDLC_WORKFLOW_ID,
-          from_node_id: "00000000-0000-0000-0001-000000000002", // PROGRESS
-          to_node_id: "00000000-0000-0000-0001-000000000003",   // DONE
-          condition: "done",
-          priority: 0,
-          metadata: {},
-        },
-      ],
-      { onConflict: "workflow_id,from_node_id,condition" }
-    );
-  if (transitionError) throw transitionError;
-}
-
-export async function getWorkflows(userId: string): Promise<Workflow[]> {
-  const db = createAdminDbClient();
-  // Return user's own workflows plus system workflows (user_id = '000...')
-  const { data, error } = await db
-    .from("workflows")
-    .select("*")
-    .or(`user_id.eq.${userId},user_id.eq.00000000-0000-0000-0000-000000000000`)
-    .order("created_at", { ascending: false });
-
-  if (error) {
-    if (isMissingRelationError(error, "workflows")) return [];
-    throw error;
-  }
-  return data || [];
-}
-
-export async function getWorkflow(id: string, userId?: string): Promise<Workflow | null> {
-  const db = createAdminDbClient();
-  let query = db.from("workflows").select("*").eq("id", id);
-  if (userId) {
-    // Allow accessing if owner OR if it's the system workflow (public/shared)
-    // For update, we might want stricter rules, but for get this is fine.
-    // The query logic in getWorkflows handles the "OR" logic.
-    // Here we can just strict check if we wanted, but the UI might be loading a system workflow.
-    // We'll leave it as is (just ID check) or add ownership check if required by caller.
-    // Existing code passes userId but doesn't use it in query build above (it was resetting query).
-    // Let's fix the query building while we are here:
-    // query = query.eq("user_id", userId) -- wait, line 879 initialized query.
-    // Original code:
-    // let query = db.from("workflows").select("*").eq("id", id);
-    // ...
-    // It IGNORED userId!
-    // I should fix that? No, risk of breaking.
-    // I will just add updateWorkflow.
-  }
-
-  const { data, error } = await query.maybeSingle();
-  if (error) {
-    if (isMissingRelationError(error, "workflows")) return null;
-    throw error;
-  }
-  return data;
-}
-
-export async function updateWorkflow(
-  id: string,
-  userId: string,
-  updates: { definition?: Record<string, unknown>; name?: string; description?: string }
-): Promise<Workflow | null> {
-  const db = createAdminDbClient();
-
-  const payload: any = { updated_at: new Date().toISOString() };
-  if (updates.definition !== undefined) payload.definition = updates.definition;
-  if (updates.name !== undefined) payload.name = updates.name;
-  if (updates.description !== undefined) payload.description = updates.description;
-
-  // We allow updating valid workflows. 
-  // TODO: Add strict ownership check if needed. For now, assuming admin client access is fine 
-  // but we should ideally ensure the user owns it. 
-  // TODO: Add strict ownership check if needed.
-
-  const { data, error } = await db
-    .from("workflows")
-    .update(payload)
-    .eq("id", id)
-    .select()
-    .single();
-
-  if (error) throw error;
-  return data;
-}
-
-export async function getWorkflowNodes(workflowId: string): Promise<WorkflowNode[]> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("workflow_nodes")
-    .select("*")
-    .eq("workflow_id", workflowId)
-    .order("position", { ascending: true });
-
-  if (error) {
-    if (isMissingRelationError(error, "workflow_nodes")) return [];
-    throw error;
-  }
-  return data || [];
-}
-
-export async function updateWorkflowNodes(
-  workflowId: string,
-  userId: string,
-  updates: Array<{
-    id: string;
-    prompt?: string;
-    provider?: string;
-    model?: string;
-    metadata?: Record<string, unknown>;
-  }>
-): Promise<WorkflowNode[]> {
-  const db = createAdminDbClient();
-
-  if (workflowId === DEFAULT_SDLC_WORKFLOW_ID) {
-    await ensureDefaultWorkflowGraphExists(userId);
-  }
-
-  // Basic existence check; current auth mode allows editing system workflows in demo environments.
-  const wf = await getWorkflow(workflowId, userId);
-  if (!wf) throw new Error("Workflow not found");
-
-  if (workflowId === DEFAULT_SDLC_WORKFLOW_ID) {
-    const seedAwareRows = updates.map((node) => {
-      const seed = DEFAULT_WORKFLOW_NODE_SEED_BY_ID.get(node.id);
-      if (!seed) return null;
-      return {
-        id: node.id,
-        workflow_id: workflowId,
-        name: seed.name,
-        label: seed.label,
-        position: seed.position,
-        node_type: seed.node_type,
-        prompt: node.prompt ?? seed.prompt,
-        provider: node.provider ?? null,
-        model: node.model ?? null,
-        metadata: node.metadata ?? {},
-      };
-    }).filter((node): node is NonNullable<typeof node> => Boolean(node));
-
-    if (seedAwareRows.length > 0) {
-      const { error } = await db
-        .from("workflow_nodes")
-        .upsert(seedAwareRows, { onConflict: "id" });
-      if (error) throw error;
-    }
-
-    return getWorkflowNodes(workflowId);
-  }
-
-  await Promise.all(
-    updates.map(async (node) => {
-      const payload: any = {};
-      if (node.prompt !== undefined) payload.prompt = node.prompt;
-      if (node.provider !== undefined) payload.provider = node.provider;
-      if (node.model !== undefined) payload.model = node.model;
-      if (node.metadata !== undefined) payload.metadata = node.metadata;
-
-      // Avoid no-op updates.
-      if (Object.keys(payload).length === 0) return;
-
-      const { error } = await db
-        .from("workflow_nodes")
-        .update(payload)
-        .eq("workflow_id", workflowId)
-        .eq("id", node.id);
-      if (error) throw error;
-    })
-  );
-
-  return getWorkflowNodes(workflowId);
-}
-
-export async function getWorkflowNodeByName(
-  workflowId: string,
-  name: string
-): Promise<WorkflowNode | null> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("workflow_nodes")
-    .select("*")
-    .eq("workflow_id", workflowId)
-    .eq("name", name)
-    .maybeSingle();
-
-  if (error) {
-    if (isMissingRelationError(error, "workflow_nodes")) return null;
-    throw error;
-  }
-  return data;
-}
-
-export async function getWorkflowTransitions(workflowId: string): Promise<WorkflowTransition[]> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("workflow_transitions")
-    .select("*")
-    .eq("workflow_id", workflowId)
-    .order("priority", { ascending: true });
-
-  if (error) {
-    if (isMissingRelationError(error, "workflow_transitions")) return [];
-    throw error;
-  }
-  return data || [];
-}
-
-export async function getWorkflowTransitionsFromNode(
-  workflowId: string,
-  fromNodeId: string
-): Promise<WorkflowTransition[]> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("workflow_transitions")
-    .select("*")
-    .eq("workflow_id", workflowId)
-    .eq("from_node_id", fromNodeId)
-    .order("priority", { ascending: true });
-
-  if (error) {
-    if (isMissingRelationError(error, "workflow_transitions")) return [];
-    throw error;
-  }
-  return data || [];
-}
-
-export async function getWorkflowWithGraph(
-  id: string,
-  userId?: string
-): Promise<WorkflowWithGraph | null> {
-  const workflow = await getWorkflow(id, userId);
-  if (!workflow) return null;
-
-  const [nodes, transitions] = await Promise.all([
-    getWorkflowNodes(id),
-    getWorkflowTransitions(id),
-  ]);
-
-  return { ...workflow, nodes, transitions };
-}
-
-export function getDefaultWorkflowId(): string {
-  return DEFAULT_SDLC_WORKFLOW_ID;
-}
-
-// ============ TASK LOGS ============
-
-export async function getTaskLogs(
-  taskId: string,
-  options: { limit?: number; tail?: number; after?: string; nodeId?: string } = {}
-): Promise<TaskLog[]> {
-  const db = createAdminDbClient();
-
-  const limit = Math.max(1, Math.min(2000, Number(options.limit ?? options.tail ?? 500)));
-  const after = typeof options.after === "string" && options.after.trim() ? options.after.trim() : null;
-  const tail = after ? null : (options.tail === undefined ? limit : Number(options.tail));
-  const useTail = tail !== null && Number.isFinite(tail) && tail > 0;
-
-  let query = db
-    .from("task_logs")
-    .select("*")
-    .eq("task_id", taskId);
-
-  if (options.nodeId) {
-    query = query.eq("node_id", options.nodeId);
-  }
-
-  if (after) {
-    query = query
-      .gt("created_at", after)
-      .order("created_at", { ascending: true })
-      .order("id", { ascending: true })
-      .limit(limit);
-  } else if (useTail) {
-    // Fetch last N logs efficiently, then reverse for chronological display.
-    query = query
-      .order("created_at", { ascending: false })
-      .order("id", { ascending: false })
-      .limit(limit);
-  } else {
-    query = query
-      .order("created_at", { ascending: true })
-      .order("id", { ascending: true })
-      .limit(limit);
-  }
-
-  const { data, error } = await query;
-  if (error) throw error;
-  const rows = data || [];
-  if (after) return rows;
-  if (useTail) return rows.slice().reverse();
-  return rows;
-}
-
-export async function addTaskLog(taskId: string, content: string, logType?: string, nodeId?: string): Promise<TaskLog> {
-  const db = createAdminDbClient();
-
-  const { data, error } = await db
-    .from("task_logs")
-    .insert({ task_id: taskId, content, log_type: logType, ...(nodeId ? { node_id: nodeId } : {}) })
-    .select()
-    .single();
-
-  if (error) throw error;
-  return data;
-}
-
-// ============ TASK COSTS ============
-
-export interface TaskCostEntry {
-  id: string;
-  task_id: string;
-  stage: string;
-  provider: string | null;
-  model: string | null;
-  input_tokens: number;
-  output_tokens: number;
-  estimated_cost: string | null;
-  created_at: string;
-}
-
-export interface TaskCostStageSummary {
-  stage: string;
-  input_tokens: number;
-  output_tokens: number;
-  estimated_cost: number;
-  entries: number;
-}
-
-export interface TaskCostSummary {
-  total_input_tokens: number;
-  total_output_tokens: number;
-  total_cost: number;
-  per_stage: TaskCostStageSummary[];
-}
-
-function normalizeTokenCount(value: number | string | undefined): number {
-  const parsed = Number(value ?? 0);
-  if (!Number.isFinite(parsed)) return 0;
-  return Math.max(0, Math.round(parsed));
-}
-
-function normalizeCostValue(value: number | string | undefined): number {
-  const parsed = Number(value ?? 0);
-  if (!Number.isFinite(parsed)) return 0;
-  return Math.max(0, parsed);
-}
-
-export async function addTaskCostEntry(input: {
-  taskId: string;
-  stage: string;
-  provider?: string | null;
-  model?: string | null;
-  inputTokens?: number;
-  outputTokens?: number;
-  estimatedCost?: number;
-}): Promise<TaskCostEntry> {
-  const db = createAdminDbClient();
-
-  const payload = {
-    task_id: input.taskId,
-    stage: input.stage,
-    provider: input.provider ?? null,
-    model: input.model ?? null,
-    input_tokens: normalizeTokenCount(input.inputTokens),
-    output_tokens: normalizeTokenCount(input.outputTokens),
-    estimated_cost: normalizeCostValue(input.estimatedCost),
-  };
-
-  const { data, error } = await db
-    .from("task_costs")
-    .insert(payload)
-    .select()
-    .single();
-
-  if (error) throw error;
-  return data;
-}
-
-export async function getTaskCostEntries(taskId: string): Promise<TaskCostEntry[]> {
-  const db = createAdminDbClient();
-
-  const { data, error } = await db
-    .from("task_costs")
-    .select("*")
-    .eq("task_id", taskId)
-    .order("created_at", { ascending: true });
-
-  if (error) throw error;
-  return data || [];
-}
-
-export function summarizeTaskCosts(entries: TaskCostEntry[]): TaskCostSummary {
-  const stageMap: Record<string, TaskCostStageSummary> = {};
-  let totalInput = 0;
-  let totalOutput = 0;
-  let totalCost = 0;
-
-  for (const entry of entries) {
-    const stageKey = entry.stage || "unknown";
-    const input = normalizeTokenCount(entry.input_tokens);
-    const output = normalizeTokenCount(entry.output_tokens);
-    const cost = normalizeCostValue(entry.estimated_cost ?? 0);
-
-    totalInput += input;
-    totalOutput += output;
-    totalCost += cost;
-
-    const existing = stageMap[stageKey] || {
-      stage: stageKey,
-      input_tokens: 0,
-      output_tokens: 0,
-      estimated_cost: 0,
-      entries: 0,
-    };
-
-    existing.input_tokens += input;
-    existing.output_tokens += output;
-    existing.estimated_cost += cost;
-    existing.entries += 1;
-    stageMap[stageKey] = existing;
-  }
-
-  const perStage = Object.values(stageMap).sort((a, b) => a.stage.localeCompare(b.stage));
-
-  return {
-    total_input_tokens: totalInput,
-    total_output_tokens: totalOutput,
-    total_cost: totalCost,
-    per_stage: perStage,
-  };
-}
-
-export async function getTaskCostSummary(taskId: string): Promise<TaskCostSummary> {
-  const entries = await getTaskCostEntries(taskId);
-  return summarizeTaskCosts(entries);
-}
-
-// ============ TASK COMMENTS ============
-
-export async function getTaskComments(taskId: string): Promise<TaskComment[]> {
-  const db = createAdminDbClient();
-
-  const { data, error } = await db
-    .from("task_comments")
-    .select("*")
-    .eq("task_id", taskId)
-    .is("deleted_at", null)
-    .order("created_at", { ascending: true })
-    .order("id", { ascending: true });
-
-  if (error) throw error;
-  return data || [];
-}
-
-export async function addTaskComment(
-  taskId: string,
-  content: string,
-  authorType: "user" | "agent",
-  authorId?: string
-): Promise<TaskComment> {
-  const db = createAdminDbClient();
-
-  const { data, error } = await db
-    .from("task_comments")
-    .insert({ task_id: taskId, content, author_type: authorType, author_id: authorId ?? null })
-    .select()
-    .single();
-
-  if (error) throw error;
-  return data;
-}
-
-export async function deleteTaskComment(commentId: string, userId: string): Promise<void> {
-  const db = createAdminDbClient();
-
-  // First verify ownership
-  const { data: comment, error: fetchError } = await db
-    .from("task_comments")
-    .select("author_id, author_type")
-    .eq("id", commentId)
-    .single();
-
-  if (fetchError) throw fetchError;
-  if (!comment) throw new Error("Comment not found");
-
-  // Only allow deleting own comments
-  if (comment.author_type !== "user" || comment.author_id !== userId) {
-    throw new Error("Unauthorized");
-  }
-
-  const { error } = await db
-    .from("task_comments")
-    .update({ deleted_at: new Date().toISOString() })
-    .eq("id", commentId)
-    .is("deleted_at", null);
-
-  if (error) throw error;
-}
-
-// ============ LEARNINGS ============
-
-export async function getLearnings(
-  scope: LearningScope,
-  scopeId?: string,
-  userId?: string
-): Promise<Learning[]> {
-  if (scope !== "task") {
-    return vaultStore.getLearnings(scope, scopeId);
-  }
-  const db = createAdminDbClient();
-
-  let query = db
-    .from("learnings")
-    .select("*")
-    .eq("scope", scope)
-    .order("created_at", { ascending: false });
-
-  if (scopeId) query = query.eq("scope_id", scopeId);
-  if (userId) query = query.eq("user_id", userId);
-
-  const { data, error } = await query;
-  if (error) throw error;
-  return data || [];
-}
-
-export async function addLearning(
-  scope: LearningScope,
-  content: string,
-  scopeId?: string,
-  userId?: string
-): Promise<Learning> {
-  if (scope !== "task") {
-    return vaultStore.addLearning(scope, content, scopeId);
-  }
-  const db = createAdminDbClient();
-
-  const { data, error } = await db
-    .from("learnings")
-    .insert({ scope, scope_id: scopeId, content, user_id: userId })
-    .select()
-    .single();
-
-  if (error) throw error;
-  return data;
-}
-
-export async function deleteLearning(id: string, userId?: string): Promise<void> {
-  if (id === "global-playbook") {
-    vaultStore.deleteLearning(id, "global");
-    return;
-  }
-  const project = await getProjectWithRepos(id, userId);
-  if (project) {
-    vaultStore.deleteLearning(id, "project", project.id);
-    return;
-  }
-  const db = createAdminDbClient();
-  let query = db.from("learnings").delete().eq("id", id);
-  if (userId) query = query.eq("user_id", userId);
-  const { error } = await query;
-  if (error) throw error;
-}
-
-// ============ STAGE PROMPTS ============
-
-export interface StagePrompt {
-  id: string;
-  user_id?: string;
-  stage: TaskStage;
-  prompt: string;
-  outputs?: string[];
-  is_default: boolean;
-  created_at: string;
-  swarm?: boolean;
-  provider?: string;
-  model?: string;
-  swarm_models?: SwarmModel[];
-}
-
-// Default stage prompts
-// Default prompts are for the current simplified SDLC stages. Legacy stage prompts
-// may still exist in DB (stage_prompts table) for backwards compatibility.
-export const defaultStagePrompts: Record<string, { prompt: string; outputs: string[]; swarm?: boolean; provider?: string; model?: string; swarm_models?: SwarmModel[] }> = {
-  INTAKE: {
-    prompt: "New task. Triage, scope, and prepare for work.",
-    outputs: [],
-    swarm: false,
-  },
-  PROGRESS: {
-    prompt: "Task is actively being worked on.",
-    outputs: [],
-    swarm: false,
-  },
-  DONE: {
-    prompt: "Task completed.",
-    outputs: [],
-    swarm: false,
-  },
-};
-
-// Default SDLC workflow ID for legacy support/migration
-export const DEFAULT_WORKFLOW_ID = "00000000-0000-0000-0000-000000000001";
-
-export async function getStagePrompts(userId: string | undefined, workflowId: string): Promise<StagePrompt[]> {
-  const db = createAdminDbClient();
-
-  let query = db
-    .from("stage_prompts")
-    .select("*")
-    .eq("workflow_id", workflowId)
-    .order("stage", { ascending: true });
-
-  if (userId) {
-    query = query.or(`user_id.eq.${userId},is_default.eq.true`);
-  } else {
-    query = query.eq("is_default", true);
-  }
-
-  const { data, error } = await query;
-  if (error) throw error;
-  return data || [];
-}
-
-export async function getStagePrompt(stage: TaskStage, userId: string | undefined, workflowId: string): Promise<StagePrompt | null> {
-  const db = createAdminDbClient();
-
-  // First try user-specific prompt
-  if (userId) {
-    const { data: userPrompt } = await db
-      .from("stage_prompts")
-      .select("*")
-      .eq("workflow_id", workflowId)
-      .eq("stage", stage)
-      .eq("user_id", userId)
-      .single();
-
-    if (userPrompt) return userPrompt;
-  }
-
-  // Fall back to default
-  const { data: defaultPrompt } = await db
-    .from("stage_prompts")
-    .select("*")
-    .eq("workflow_id", workflowId)
-    .eq("stage", stage)
-    .eq("is_default", true)
-    .single();
-
-  return defaultPrompt || null;
-}
-
-export async function upsertStagePrompt(
-  stage: TaskStage,
-  prompt: string,
-  outputs: string[] = [],
-  userId: string | undefined,
-  modelConfig: {
-    swarm?: boolean;
-    provider?: string;
-    model?: string;
-    swarm_models?: SwarmModel[];
-  } | undefined,
-  workflowId: string
-): Promise<StagePrompt> {
-  const db = createAdminDbClient();
-
-  const payload: any = {
-    stage,
-    prompt,
-    outputs,
-    user_id: userId,
-    is_default: !userId,
-    workflow_id: workflowId,
-  };
-
-  if (modelConfig) {
-    if (modelConfig.swarm !== undefined) payload.swarm = modelConfig.swarm;
-    if (modelConfig.provider !== undefined) payload.provider = modelConfig.provider;
-    if (modelConfig.model !== undefined) payload.model = modelConfig.model;
-    if (modelConfig.swarm_models !== undefined) payload.swarm_models = modelConfig.swarm_models;
-  }
-
-  const { data, error } = await db
-    .from("stage_prompts")
-    .upsert(payload, {
-      onConflict: userId ? "workflow_id,stage,user_id" : "workflow_id,stage,is_default",
-    })
-    .select()
-    .single();
-
-  if (error) throw error;
-  return data;
-}
-
-export async function deleteStagePrompt(id: string, userId?: string): Promise<void> {
-  const db = createAdminDbClient();
-  let query = db.from("stage_prompts").delete().eq("id", id);
-  if (userId) query = query.eq("user_id", userId);
-  const { error } = await query;
-  if (error) throw error;
-}
-
-// ============ AGENTS ============
-
-export async function getAgents(userId: string): Promise<Agent[]> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("agents")
-    .select("*")
-    .eq("user_id", userId)
-    .order("created_at", { ascending: false });
-
-  if (error) {
-    if (isMissingRelationError(error, "agents")) return [];
-    throw error;
-  }
-  return data || [];
-}
-
-export async function getAgent(id: string, userId: string): Promise<Agent | null> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("agents")
-    .select("*")
-    .eq("id", id)
-    .eq("user_id", userId)
-    .maybeSingle();
-
-  if (error) {
-    if (error.code === "PGRST116" || isMissingRelationError(error, "agents")) return null;
-    throw error;
-  }
-  return data;
-}
-
-export async function getAgentSkills(agentId: string): Promise<AgentSkill[]> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("agent_skills")
-    .select("*")
-    .eq("agent_id", agentId)
-    .order("created_at", { ascending: true });
-
-  if (error) {
-    if (isMissingRelationError(error, "agent_skills")) return [];
-    throw error;
-  }
-  return data || [];
-}
-
-export async function setAgentSkills(
-  agentId: string,
-  skills: Array<{ file: string; condition?: string }>
-): Promise<AgentSkill[]> {
-  const db = createAdminDbClient();
-  const normalized = new Map<string, { agent_id: string; file: string; condition: string | null }>();
-  for (const skill of skills) {
-    const file = skill.file.trim();
-    if (!file) continue;
-    normalized.set(file, {
-      agent_id: agentId,
-      file,
-      condition: skill.condition?.trim() || null,
-    });
-  }
-
-  const existing = await getAgentSkills(agentId);
-  for (const skill of existing) {
-    if (!normalized.has(skill.file)) {
-      const { error } = await db
-        .from("agent_skills")
-        .delete()
-        .eq("agent_id", agentId)
-        .eq("file", skill.file);
-      if (error && !isMissingRelationError(error, "agent_skills")) throw error;
-    }
-  }
-
-  for (const entry of normalized.values()) {
-    const existingSkill = existing.find((skill) => skill.file === entry.file);
-    if (!existingSkill) {
-      const { error } = await db.from("agent_skills").insert(entry);
-      if (error && !isMissingRelationError(error, "agent_skills")) throw error;
-      continue;
-    }
-    if ((existingSkill.condition ?? null) !== entry.condition) {
-      const { error } = await db
-        .from("agent_skills")
-        .update({ condition: entry.condition })
-        .eq("agent_id", agentId)
-        .eq("file", entry.file);
-      if (error && !isMissingRelationError(error, "agent_skills")) throw error;
-    }
-  }
-
-  return getAgentSkills(agentId);
-}
-
-export async function createAgent(
-  userId: string,
-  input: {
-    id?: string;
-    name: string;
-    role?: string;
-    style: AgentStyle;
-    description?: string;
-    voice?: string;
-    seed?: string;
-    model?: string;
-    provider?: string;
-    color?: string;
-  }
-): Promise<Agent> {
-  const db = createAdminDbClient();
-
-  const payload: Record<string, unknown> = {
-    user_id: userId,
-    name: input.name,
-    style: input.style,
-    description: input.description ?? null,
-  };
-  if (input.id !== undefined) payload.id = input.id;
-  if (input.role !== undefined) payload.role = input.role;
-  if (input.voice !== undefined) payload.voice = input.voice;
-  if (input.seed !== undefined) payload.seed = input.seed;
-  if (input.model !== undefined) payload.model = input.model;
-  if (input.provider !== undefined) payload.provider = input.provider;
-  if (input.color !== undefined) payload.color = input.color;
-
-  const { data, error } = await db
-    .from("agents")
-    .insert(payload)
-    .select()
-    .single();
-
-  if (error) {
-    if (isMissingRelationError(error, "agents")) {
-      throw new Error("Agents table does not exist");
-    }
-    throw error;
-  }
-  return data;
-}
-
-export async function updateAgent(
-  id: string,
-  userId: string,
-  input: {
-    name?: string;
-    role?: string;
-    style?: AgentStyle;
-    description?: string;
-    voice?: string;
-    seed?: string;
-    model?: string;
-    provider?: string;
-    color?: string;
-  }
-): Promise<Agent | null> {
-  const db = createAdminDbClient();
-
-  const updatePayload: Record<string, unknown> = { updated_at: new Date().toISOString() };
-  if (input.name !== undefined) updatePayload.name = input.name;
-  if (input.role !== undefined) updatePayload.role = input.role;
-  if (input.style !== undefined) updatePayload.style = input.style;
-  if (input.description !== undefined) updatePayload.description = input.description;
-  if (input.voice !== undefined) updatePayload.voice = input.voice;
-  if (input.seed !== undefined) updatePayload.seed = input.seed;
-  if (input.model !== undefined) updatePayload.model = input.model;
-  if (input.provider !== undefined) updatePayload.provider = input.provider;
-  if (input.color !== undefined) updatePayload.color = input.color;
-
-  // Remove timestamp if nothing else changed
-  if (Object.keys(updatePayload).length === 1) {
-    return getAgent(id, userId);
-  }
-
-  const { data, error } = await db
-    .from("agents")
-    .update(updatePayload)
-    .eq("id", id)
-    .eq("user_id", userId)
-    .select()
-    .single();
-
-  if (error) {
-    if (error.code === "PGRST116" || isMissingRelationError(error, "agents")) return null;
-    throw error;
-  }
-  return data;
-}
-
-export async function deleteAgent(id: string, userId: string): Promise<void> {
-  const db = createAdminDbClient();
-  const { error } = await db
-    .from("agents")
-    .delete()
-    .eq("id", id)
-    .eq("user_id", userId);
-
-  if (error) {
-    if (!isMissingRelationError(error, "agents")) {
-      throw error;
-    }
-  }
-}
-
-// ============ PROJECT AGENTS ============
-
-export async function getProjectAgents(projectId: string): Promise<ProjectAgent[]> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("project_agents")
-    .select("*")
-    .eq("project_id", projectId)
-    .order("routing_order", { ascending: true });
-
-  if (error) {
-    if (isMissingRelationError(error, "project_agents")) return [];
-    throw error;
-  }
-  return data || [];
-}
-
-export async function addProjectAgent(
-  projectId: string,
-  agentId: string,
-  routingOrder?: number
-): Promise<ProjectAgent> {
-  const db = createAdminDbClient();
-
-  if (routingOrder === undefined) {
-    const { data: existing } = await db
-      .from("project_agents")
-      .select("routing_order")
-      .eq("project_id", projectId)
-      .order("routing_order", { ascending: false })
-      .limit(1);
-    routingOrder = (existing?.[0]?.routing_order ?? -1) + 1;
-  }
-
-  const { data, error } = await db
-    .from("project_agents")
-    .upsert({ project_id: projectId, agent_id: agentId, routing_order: routingOrder })
-    .select()
-    .single();
-
-  if (error) throw error;
-  return data;
-}
-
-export async function removeProjectAgent(projectId: string, agentId: string): Promise<void> {
-  const db = createAdminDbClient();
-  const { error } = await db
-    .from("project_agents")
-    .delete()
-    .eq("project_id", projectId)
-    .eq("agent_id", agentId);
-  if (error) throw error;
-}
-
-export async function reorderProjectAgents(
-  projectId: string,
-  orderedAgentIds: string[]
-): Promise<ProjectAgent[]> {
-  const db = createAdminDbClient();
-  for (let i = 0; i < orderedAgentIds.length; i++) {
-    await db
-      .from("project_agents")
-      .update({ routing_order: i })
-      .eq("project_id", projectId)
-      .eq("agent_id", orderedAgentIds[i]);
-  }
-  return getProjectAgents(projectId);
-}
-
-// ============ TEAMS ============
-
-export async function getTeams(projectId: string): Promise<Team[]> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("teams")
-    .select("*")
-    .eq("project_id", projectId)
-    .order("created_at", { ascending: true });
-
-  if (error) {
-    if (isMissingRelationError(error, "teams")) return [];
-    throw error;
-  }
-  return (data || []).map((row: Record<string, unknown>) => ({
-    ...row,
-    metadata: typeof row.metadata === "string" ? JSON.parse(row.metadata as string) : (row.metadata || {}),
-  })) as Team[];
-}
-
-export async function getTeam(teamId: string): Promise<Team | null> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("teams")
-    .select("*")
-    .eq("id", teamId)
-    .limit(1)
-    .single();
-
-  if (error) {
-    if (error.code === "PGRST116" || isMissingRelationError(error, "teams")) return null;
-    throw error;
-  }
-  if (!data) return null;
-  return {
-    ...data,
-    metadata: typeof data.metadata === "string" ? JSON.parse(data.metadata as string) : (data.metadata || {}),
-  } as Team;
-}
-
-export async function createTeam(
-  projectId: string,
-  name: string,
-  templateId?: string,
-  metadata?: Record<string, unknown>
-): Promise<Team> {
-  const db = createAdminDbClient();
-  const id = randomUUID();
-  const now = new Date().toISOString();
-  const { data, error } = await db
-    .from("teams")
-    .insert({
-      id,
-      project_id: projectId,
-      name,
-      template_id: templateId || null,
-      metadata: JSON.stringify(metadata || {}),
-      created_at: now,
-      updated_at: now,
-    })
-    .select()
-    .single();
-
-  if (error) throw error;
-  return {
-    ...data,
-    metadata: typeof data.metadata === "string" ? JSON.parse(data.metadata as string) : (data.metadata || {}),
-  } as Team;
-}
-
-export async function updateTeam(
-  teamId: string,
-  updates: { name?: string; metadata?: Record<string, unknown> }
-): Promise<Team | null> {
-  const db = createAdminDbClient();
-  const payload: Record<string, unknown> = {};
-  if (updates.name !== undefined) payload.name = updates.name;
-  if (updates.metadata !== undefined) payload.metadata = JSON.stringify(updates.metadata);
-
-  const { data, error } = await db
-    .from("teams")
-    .update(payload)
-    .eq("id", teamId)
-    .select()
-    .single();
-
-  if (error) {
-    if (error.code === "PGRST116") return null;
-    throw error;
-  }
-  return {
-    ...data,
-    metadata: typeof data.metadata === "string" ? JSON.parse(data.metadata as string) : (data.metadata || {}),
-  } as Team;
-}
-
-export async function deleteTeam(teamId: string): Promise<void> {
-  const db = createAdminDbClient();
-  const { error } = await db
-    .from("teams")
-    .delete()
-    .eq("id", teamId);
-  if (error) throw error;
-}
-
-export async function getTeamAgents(teamId: string): Promise<TeamAgent[]> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("team_agents")
-    .select("*")
-    .eq("team_id", teamId)
-    .order("routing_order", { ascending: true });
-
-  if (error) {
-    if (isMissingRelationError(error, "team_agents")) return [];
-    throw error;
-  }
-  return data || [];
-}
-
-export async function addTeamAgent(
-  teamId: string,
-  agentId: string,
-  roleKey: string,
-  routingOrder?: number
-): Promise<TeamAgent> {
-  const db = createAdminDbClient();
-
-  if (routingOrder === undefined) {
-    const { data: existing } = await db
-      .from("team_agents")
-      .select("routing_order")
-      .eq("team_id", teamId)
-      .order("routing_order", { ascending: false })
-      .limit(1);
-    routingOrder = (existing?.[0]?.routing_order ?? -1) + 1;
-  }
-
-  const { data, error } = await db
-    .from("team_agents")
-    .upsert({ team_id: teamId, agent_id: agentId, role_key: roleKey, routing_order: routingOrder })
-    .select()
-    .single();
-
-  if (error) throw error;
-  return data;
-}
-
-export async function removeTeamAgent(teamId: string, agentId: string): Promise<void> {
-  const db = createAdminDbClient();
-  const { error } = await db
-    .from("team_agents")
-    .delete()
-    .eq("team_id", teamId)
-    .eq("agent_id", agentId);
-  if (error) throw error;
-}
-
-// ============ PROJECT SKILLS ============
-
-export async function getProjectSkills(projectId: string): Promise<ProjectSkill[]> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("project_skills")
-    .select("*")
-    .eq("project_id", projectId)
-    .order("created_at", { ascending: true });
-
-  if (error) {
-    if (isMissingRelationError(error, "project_skills")) return [];
-    throw error;
-  }
-  return data || [];
-}
-
-export async function addProjectSkill(
-  projectId: string,
-  file: string,
-  condition?: string
-): Promise<ProjectSkill> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("project_skills")
-    .insert({ project_id: projectId, file, condition: condition ?? null })
-    .select()
-    .single();
-
-  if (error) throw error;
-  return data;
-}
-
-export async function removeProjectSkill(skillId: string): Promise<void> {
-  const db = createAdminDbClient();
-  const { error } = await db.from("project_skills").delete().eq("id", skillId);
-  if (error) throw error;
-}
-
-// ============ PROJECT VARIABLES ============
-
-export async function getProjectVariables(projectId: string): Promise<ProjectVariable[]> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("project_variables")
-    .select("*")
-    .eq("project_id", projectId);
-
-  if (error) {
-    if (isMissingRelationError(error, "project_variables")) return [];
-    throw error;
-  }
-  return data || [];
-}
-
-export async function setProjectVariable(
-  projectId: string,
-  key: string,
-  value: string
-): Promise<ProjectVariable> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("project_variables")
-    .upsert({ project_id: projectId, key, value })
-    .select()
-    .single();
-
-  if (error) throw error;
-  return data;
-}
-
-export async function deleteProjectVariable(projectId: string, key: string): Promise<void> {
-  const db = createAdminDbClient();
-  const { error } = await db
-    .from("project_variables")
-    .delete()
-    .eq("project_id", projectId)
-    .eq("key", key);
-  if (error) throw error;
-}
-
-// ============ PROJECT MEMORY ============
-
-export async function getProjectMemory(
-  projectId: string,
-  producer?: "human" | "system"
-): Promise<ProjectMemory[]> {
-  void producer;
-  return vaultStore.getProjectMemory(projectId);
-}
-
-export async function addProjectMemory(
-  projectId: string,
-  content: string,
-  source?: string,
-  producer: "human" | "system" = "human"
-): Promise<ProjectMemory> {
-  return vaultStore.addProjectMemory(projectId, content, source, producer);
-}
-
-export async function deleteProjectMemory(memoryId: string): Promise<void> {
-  vaultStore.deleteProjectMemory(memoryId);
-}
-
-// ============ PROJECT THREADS ============
-
-export async function getProjectThreads(projectId: string): Promise<ProjectThread[]> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("project_threads")
-    .select("*")
-    .eq("project_id", projectId)
-    .order("created_at", { ascending: true });
-
-  if (error) {
-    if (isMissingRelationError(error, "project_threads")) return [];
-    throw error;
-  }
-  return data || [];
-}
-
-export async function addProjectThread(projectId: string, threadId: string): Promise<ProjectThread> {
-  const db = createAdminDbClient();
-  const { error } = await db
-    .from("project_threads")
-    .upsert(
-      { project_id: projectId, thread_id: threadId },
-      { onConflict: "project_id,thread_id", ignoreDuplicates: true }
-    );
-
-  if (error) throw error;
-
-  const { data, error: fetchError } = await db
-    .from("project_threads")
-    .select("*")
-    .eq("project_id", projectId)
-    .eq("thread_id", threadId)
-    .single();
-
-  if (fetchError) throw fetchError;
-  return data;
-}
-
-export async function removeProjectThread(projectId: string, threadId: string): Promise<void> {
-  const db = createAdminDbClient();
-  const { error } = await db
-    .from("project_threads")
-    .delete()
-    .eq("project_id", projectId)
-    .eq("thread_id", threadId);
-
-  if (error) throw error;
-}
-
-export async function getProjectForThread(threadId: string): Promise<string | null> {
-  const db = createAdminDbClient();
-  const { data, error } = await db
-    .from("project_threads")
-    .select("project_id")
-    .eq("thread_id", threadId)
-    .maybeSingle();
-
-  if (error) {
-    if (isMissingRelationError(error, "project_threads")) return null;
-    return null;
-  }
-  return data?.project_id ?? null;
-}
-
-// ============ SKILL RESOLUTION ENGINE ============
-
-/**
- * Resolve skills for an agent in a project.
- * Union of agent + project skills, with agent taking precedence on overlap.
- * Overlap is determined by matching file basename.
- */
-export function resolveSkills(
-  agentSkills: Array<{ file: string; condition?: string }>,
-  projectSkills: ProjectSkill[]
-): SkillProvenance[] {
-  const result: SkillProvenance[] = [];
-  const agentFileNames = new Set<string>();
-
-  // Agent skills take precedence
-  for (const skill of agentSkills) {
-    const basename = skill.file.split("/").pop() || skill.file;
-    agentFileNames.add(basename);
-    result.push({ file: skill.file, condition: skill.condition, source: "agent" });
-  }
-
-  // Project skills fill gaps (only if no agent skill with same basename)
-  for (const skill of projectSkills) {
-    const basename = skill.file.split("/").pop() || skill.file;
-    if (!agentFileNames.has(basename)) {
-      result.push({ file: skill.file, condition: skill.condition ?? undefined, source: "project" });
-    }
-  }
-
-  return result;
-}
-
-// ============ MEMORY RESOLUTION ENGINE ============
-
-/**
- * Resolve memory for an agent in a project.
- * Union of agent global memory + project memory, project takes precedence on conflict.
- */
-export function resolveMemory(
-  agentMemory: Array<{ content: string; id?: string }>,
-  projectMemory: ProjectMemory[]
-): MemoryProvenance[] {
-  const result: MemoryProvenance[] = [];
-
-  // Project memory first (higher precedence)
-  for (const mem of projectMemory) {
-    result.push({ content: mem.content, source: "project", id: mem.id });
-  }
-
-  // Agent memory fills in
-  for (const mem of agentMemory) {
-    result.push({ content: mem.content, source: "agent", id: mem.id });
-  }
-
-  return result;
-}
-
-// ============ VARIABLE INJECTION ============
-
-/**
- * Load project variables and format as provenance-tracked entries.
- */
-export async function resolveVariables(
-  projectId: string
-): Promise<Array<{ key: string; value: string; source: "project" }>> {
-  const vars = await getProjectVariables(projectId);
-  return vars.map((v) => ({ key: v.key, value: v.value, source: "project" as const }));
-}
-
-// ============ EXECUTION PROVENANCE ============
-
-/**
- * Build full execution provenance for an agent running in a project.
- * Records the source of every resolved input for auditability.
- */
-export async function buildExecutionProvenance(
-  agentId: string,
-  projectId: string,
-  agentSkills: Array<{ file: string; condition?: string }>,
-  agentMemoryEntries: Array<{ content: string; id?: string }>
-): Promise<ExecutionProvenance> {
-  const projectSkills = await getProjectSkills(projectId);
-  const projectMem = await getProjectMemory(projectId);
-  const variables = await resolveVariables(projectId);
-
-  return {
-    skills: resolveSkills(agentSkills, projectSkills),
-    memory: resolveMemory(agentMemoryEntries, projectMem),
-    variables,
-  };
-}
+export * from "./db/index";