@rei-standard/amsg-server 3.0.0 → 3.1.0-next.1

package/dist/{chunk-RL7V7VSS.mjs → chunk-EIM3PKFY.mjs}

@@ -147,14 +147,33 @@ import {
 // src/server/lib/encryption.js
 var base64ToBytes = base64UrlToBytes;
 var TAG_LENGTH_BYTES = 16;
+var AES_KEY_CACHE_MAX = 128;
+var aesKeyCache = /* @__PURE__ */ new Map();
 function importAesKey(hexKey, usage) {
-  return globalThis.crypto.subtle.importKey(
-    "raw",
-    hexToBytes(hexKey),
-    { name: "AES-GCM" },
-    false,
-    [usage]
-  );
+  const cacheKey = `${usage}:${hexKey}`;
+  const cached = aesKeyCache.get(cacheKey);
+  if (cached) return cached;
+  let promise;
+  try {
+    promise = globalThis.crypto.subtle.importKey(
+      "raw",
+      hexToBytes(hexKey),
+      { name: "AES-GCM" },
+      false,
+      [usage]
+    ).catch((err6) => {
+      aesKeyCache.delete(cacheKey);
+      throw err6;
+    });
+  } catch (err6) {
+    return Promise.reject(err6);
+  }
+  if (aesKeyCache.size >= AES_KEY_CACHE_MAX) {
+    const oldest = aesKeyCache.keys().next().value;
+    if (oldest !== void 0) aesKeyCache.delete(oldest);
+  }
+  aesKeyCache.set(cacheKey, promise);
+  return promise;
 }
 async function aesGcmSeal(hexKey, iv, plaintextBytes) {
   const key = await importAesKey(hexKey, "encrypt");
@@ -428,6 +447,9 @@ function taskPayloadByteLength(serializedPayload) {
   return taskPayloadEncoder.encode(serializedPayload).length;
 }
 function validateScheduleMessagePayload(payload) {
+  if (payload.taskInput != null && (typeof payload.taskInput !== "object" || Array.isArray(payload.taskInput))) {
+    return { valid: false, errorCode: "INVALID_TASK_INPUT", errorMessage: "taskInput must be an object or null" };
+  }
   if (!payload.contactName || typeof payload.contactName !== "string") {
     return { valid: false, errorCode: "INVALID_PARAMETERS", errorMessage: "\u7F3A\u5C11\u5FC5\u9700\u53C2\u6570\u6216\u53C2\u6570\u683C\u5F0F\u9519\u8BEF", details: { missingFields: ["contactName"] } };
   }
@@ -982,6 +1004,40 @@ function createWebCryptoWebPush(vapid = {}, { ttl = SCHEDULED_DEFAULT_TTL } = {}
   };
 }
 
+// src/server/lib/attachments.js
+var ATTACHMENT_NAMESPACE = "amsg:attachments";
+var ATTACHMENT_RETENTION_DAYS = 30;
+var MAX_ATTACHMENT_TTL_MS = ATTACHMENT_RETENTION_DAYS * 24 * 60 * 60 * 1e3;
+function createAttachmentStore({ task, occurrenceMs, writeState, now }) {
+  return async function storeAttachment(value, { ttlMs = MAX_ATTACHMENT_TTL_MS, owner, kind = "attachment", ownerGeneration } = {}) {
+    if (typeof value !== "string") throw new TypeError("storeAttachment value must be a serialized string");
+    if (!Number.isSafeInteger(ttlMs) || ttlMs <= 0 || ttlMs > MAX_ATTACHMENT_TTL_MS) {
+      throw new RangeError("storeAttachment ttlMs must be between 1 millisecond and 30 days");
+    }
+    if (typeof task.uuid !== "string" || !task.uuid || !Number.isFinite(occurrenceMs)) {
+      throw new TypeError("storeAttachment requires a task UUID and a valid occurrence");
+    }
+    const at = now();
+    const ref = { version: (
+      /** @type {1} */
+      1
+    ), namespace: ATTACHMENT_NAMESPACE, key: randomUUID(), taskUuid: task.uuid, occurrenceMs, expiresAt: at + ttlMs };
+    let result;
+    try {
+      result = await writeState(ATTACHMENT_NAMESPACE, [{ key: ref.key, value: JSON.stringify({ ...ref, owner, kind, ownerGeneration, value }), updatedAt: at, owner, kind, ownerGeneration }]);
+    } catch (error) {
+      if (error?.code === "AGENTIC_STATE_WRITE_UNSUPPORTED") {
+        throw new DeploymentConfigError("ATTACHMENT_STORAGE_UNSUPPORTED: attachments require a client_state adapter (built-in support: D1)", { code: "ATTACHMENT_STORAGE_UNSUPPORTED" });
+      }
+      throw error;
+    }
+    if (result.upserted !== 1 || result.skipped !== 0) {
+      throw new Error("ATTACHMENT_WRITE_INCOMPLETE: attachment was not stored");
+    }
+    return ref;
+  };
+}
+
 // src/server/lib/agentic-fire.js
 import {
   assertValidDecision,
@@ -1192,6 +1248,7 @@ async function writeClientStateEntries({ db, userId, userKey, entries, now }) {
   let upserted = 0;
   let skipped = 0;
   let deleted = 0;
+  let unknown = 0;
   const skippedEntries = [];
   if (Array.isArray(result.outcomes) && result.outcomes.length === physicalRows.length) {
     for (let i = 0; i < rootRowIndexes.length; i++) {
@@ -1203,9 +1260,10 @@ async function writeClientStateEntries({ db, userId, userKey, entries, now }) {
         skippedEntries.push({ namespace: entry.namespace, key: entry.key });
       }
     }
+  } else if (result.upserted === physicalRows.length && result.skipped === 0) {
+    upserted = rootRowIndexes.length;
   } else {
-    upserted = result.upserted;
-    skipped = result.skipped;
+    unknown = rootRowIndexes.length;
   }
   const cleanupOutcomes = Array.isArray(result.cleanupOutcomes) && result.cleanupOutcomes.length === cleanups.length ? result.cleanupOutcomes : null;
   for (const { cleanupIndex, entry } of deletions) {
@@ -1216,22 +1274,26 @@ async function writeClientStateEntries({ db, userId, userKey, entries, now }) {
       deleted++;
     }
   }
-  return { upserted, skipped, deleted, skippedEntries };
+  return { upserted, skipped, deleted, skippedEntries, ...unknown > 0 ? { unknown } : {} };
 }
 
 // src/server/lib/state-accessors.js
 function createStateAccessors({ db, userId, userKey, maxStateValueBytes, now }) {
   const nowFn = typeof now === "function" ? now : Date.now;
   const valueCeiling = Number.isInteger(maxStateValueBytes) && maxStateValueBytes > 0 ? maxStateValueBytes : DEFAULT_MAX_STATE_VALUE_BYTES;
-  const readState = async (namespace) => {
+  const readState = async (namespace, { key } = {}) => {
     if (typeof namespace !== "string" || !namespace.trim()) {
       throw new TypeError("readState(namespace) requires a non-empty string");
     }
+    if (key !== void 0 && (typeof key !== "string" || !key.trim() || key.length > MAX_KEY_CHARS || INTERNAL_STATE_CHAR_RE.test(key))) {
+      throw new TypeError(`readState key must be a non-empty string of at most ${MAX_KEY_CHARS} characters without control characters`);
+    }
     if (!db || typeof db.getClientState !== "function") return [];
-    const rows = await db.getClientState(userId, namespace);
+    const rows = await db.getClientState(userId, namespace, key === void 0 ? void 0 : { key });
     return resolveClientStateEntries(
-      rows,
-      () => db.getClientState(userId, chunkNamespaceFor(namespace)),
+      // 老适配器可能忽略第三个参数，仍在解密前过滤根行，保持返回契约。
+      key === void 0 ? rows : rows.filter((row) => row.key === key),
+      () => db.getClientState(userId, chunkNamespaceFor(namespace), key === void 0 ? void 0 : { keyPrefix: chunkKeyPrefixFor(key) }),
       (value) => decryptFromStorage(value, userKey)
     );
   };
@@ -1287,6 +1349,9 @@ function createStateAccessors({ db, userId, userKey, maxStateValueBytes, now })
         namespace,
         key: entry.key,
         value: entry.value,
+        owner: entry.owner,
+        kind: entry.kind,
+        ownerGeneration: entry.ownerGeneration,
         updatedAt: entry.updatedAt ?? at,
         ...entry.version !== void 0 ? { version: entry.version } : {}
       };
@@ -1618,7 +1683,7 @@ function projectTask(row, decryptedPayload, options = {}) {
     // 凭据引用只是名字（cred_id），本体在 llm_credentials 表里，凭据字段本身
     // 照旧被白名单挡在外面。
     credRefs: payload.credRefs ?? null,
-    // 整份 metadata 只在单条查询里给（见上面的 includeMetadata）。
+    // 整份 metadata 由 includeMetadata 控制，单条查询与 hook 回执会带。
     ...options.includeMetadata ? { metadata: payload.metadata ?? null } : {},
     // 上一次没发出去的原因。reason 'stale' 表示错过触发时刻太久被判定不再补
     // 发；其余是投递失败的错误信息。没有记录 → null。
@@ -1709,6 +1774,9 @@ function normalizeBeforeFireResult(result) {
     return { messages: result };
   }
   if (result && typeof result === "object" && Array.isArray(result.messages)) {
+    if (result.allowedToolNames !== void 0 && (!Array.isArray(result.allowedToolNames) || result.allowedToolNames.some((name) => typeof name !== "string" || !name.trim()))) {
+      throw markPermanent(new TypeError("allowedToolNames must be an array of non-empty strings"), "AGENTIC_BAD_BEFORE_FIRE");
+    }
     return {
       messages: result.messages,
       maxToolIterations: result.maxToolIterations,
@@ -1717,7 +1785,8 @@ function normalizeBeforeFireResult(result) {
       // 用真值。真正决定请求体带不带 tools 的规则住在 llm.js 的
       // buildAiRequestBody（那边有测试钉着），这层只是不把空数组往下传。
       tools: Array.isArray(result.tools) && result.tools.length > 0 ? result.tools : void 0,
-      toolChoice: result.toolChoice
+      toolChoice: result.toolChoice,
+      allowedToolNames: result.allowedToolNames === void 0 ? void 0 : new Set(result.allowedToolNames)
     };
   }
   throw markPermanent(new TypeError(BAD_BEFORE_FIRE_MESSAGE), "AGENTIC_BAD_BEFORE_FIRE");
@@ -1769,6 +1838,8 @@ async function runAgenticFire({ task, decryptedPayload, userKey, ctx }) {
   const sessionId = task.id != null ? `sess_task_${task.id}${occurrenceSuffix(task)}` : `sess_${randomUUID()}`;
   const messageIdBase = task.id != null ? `msg_task_${task.id}${occurrenceSuffix(task)}` : `msg_${randomUUID()}`;
   const occurrenceMs = occurrenceMsOf(task);
+  const storeAttachment = createAttachmentStore({ task, occurrenceMs, writeState, now: nowFn });
+  const storeSettledAttachment = createAttachmentStore({ task, occurrenceMs, writeState: writeSettledState, now: nowFn });
   const { emitResult } = createResultEmitter({
     db: ctx.db,
     task,
@@ -1791,17 +1862,37 @@ async function runAgenticFire({ task, decryptedPayload, userKey, ctx }) {
       const row = await ctx.db.getTaskByUuid(uuid, task.user_id);
       if (!row) return null;
       const payload = JSON.parse(await decryptFromStorage(row.encrypted_payload, userKey));
-      return projectTask(row, payload);
+      return projectTask(row, payload, { includeMetadata: true });
     } catch (error) {
       console.warn("[amsg-server] scheduleTask: \u8BFB\u53D6\u649E\u8F66\u4EFB\u52A1\u5931\u8D25\uFF08\u5DF2\u5FFD\u7565\uFF09:", error && error.message);
       return null;
     }
   }
+  const listTasks = async (options = {}) => {
+    throwIfCancelled();
+    const { status = "pending", limit = 100, offset = 0, includeMetadata = true } = options;
+    if (!["pending", "sent", "failed", "all"].includes(status) || !Number.isInteger(limit) || limit < 1 || limit > 100 || !Number.isInteger(offset) || offset < 0) {
+      throw new TypeError("listTasks requires a valid status, limit 1-100, and non-negative offset");
+    }
+    if (typeof ctx.db?.listTasks !== "function") {
+      throw new DeploymentConfigError("AGENTIC_TASK_VIEW_UNSUPPORTED: adapter has no listTasks", { code: "AGENTIC_TASK_VIEW_UNSUPPORTED" });
+    }
+    const { tasks, total } = await ctx.db.listTasks(task.user_id, { status, limit, offset });
+    const projected = await Promise.all(tasks.map(async (row) => projectTask(
+      row,
+      JSON.parse(await decryptFromStorage(row.encrypted_payload, userKey)),
+      { includeMetadata }
+    )));
+    return { tasks: projected, pagination: { total, limit, offset, hasMore: offset + tasks.length < total } };
+  };
   const scheduleTask = async (options) => {
     throwIfCancelled();
     if (!options || typeof options !== "object" || Array.isArray(options)) {
       throw new TypeError("scheduleTask(options) \u9700\u8981\u4E00\u4E2A\u5BF9\u8C61\uFF0C\u81F3\u5C11\u5305\u542B { firstSendTime }");
     }
+    if (options.taskInput != null && (typeof options.taskInput !== "object" || Array.isArray(options.taskInput))) {
+      throw new TypeError("scheduleTask: taskInput must be an object or null");
+    }
     if (typeof options.firstSendTime !== "string" || !options.firstSendTime.trim()) {
       throw new RangeError("scheduleTask: firstSendTime \u5FC5\u586B\uFF0C\u4E14\u5FC5\u987B\u662F ISO 8601 \u5B57\u7B26\u4E32");
     }
@@ -1896,7 +1987,8 @@ async function runAgenticFire({ task, decryptedPayload, userKey, ctx }) {
       // 与凭据同列的投递配置：中转的非标准参数（thinking 之类）跟着任务走，
       // 自排的后续任务不该突然掉档。
       llmExtraBody: decryptedPayload.llmExtraBody ?? null,
-      metadata
+      metadata,
+      taskInput: options.taskInput ?? null
     };
     const serializedTaskData = JSON.stringify(fullTaskData);
     const sizeError = validateTaskPayloadSize(serializedTaskData);
@@ -1950,7 +2042,8 @@ async function runAgenticFire({ task, decryptedPayload, userKey, ctx }) {
       created: true,
       id: created.id ?? null,
       uuid: created.uuid ?? uuid,
-      nextSendAt: created.next_send_at ?? nextSendAt
+      nextSendAt: created.next_send_at ?? nextSendAt,
+      task: projectTask({ status: "pending", next_send_at: nextSendAt, ...created }, fullTaskData, { includeMetadata: true })
     };
   };
   const cancelTask = async (uuid) => {
@@ -2018,7 +2111,11 @@ async function runAgenticFire({ task, decryptedPayload, userKey, ctx }) {
       const stillPending = await ctx.db.getTaskByUuid(uuid, task.user_id);
       return { renewed: false, reason: stillPending ? "in_flight" : "not_found" };
     }
-    return { renewed: true, uuid, nextSendAt: nextSendAtIso };
+    return { renewed: true, uuid, nextSendAt: nextSendAtIso, task: projectTask(
+      { ...row, next_send_at: nextSendAtIso, retry_count: 0 },
+      payload,
+      { includeMetadata: true }
+    ) };
   };
   const resolveLlmCredential2 = async (credId) => {
     if (typeof credId !== "string" || !credId.trim()) {
@@ -2035,7 +2132,9 @@ async function runAgenticFire({ task, decryptedPayload, userKey, ctx }) {
     readState,
     writeState,
     emitResult,
+    storeAttachment,
     scheduleTask,
+    listTasks,
     cancelTask,
     renewTask,
     resolveLlmCredential: resolveLlmCredential2,
@@ -2068,8 +2167,10 @@ async function runAgenticFire({ task, decryptedPayload, userKey, ctx }) {
       readState,
       writeState,
       emitResult,
+      storeAttachment,
       scratch,
       scheduleTask,
+      listTasks,
       cancelTask,
       renewTask,
       resolveLlmCredential: resolveLlmCredential2,
@@ -2128,7 +2229,8 @@ async function runAgenticFire({ task, decryptedPayload, userKey, ctx }) {
       scratch,
       readState,
       writeState: writeSettledState,
-      emitResult
+      emitResult,
+      storeAttachment: storeSettledAttachment
     });
   }
 }
@@ -2143,8 +2245,10 @@ async function runFireChain({
   readState,
   writeState,
   emitResult,
+  storeAttachment,
   scratch,
   scheduleTask,
+  listTasks,
   cancelTask,
   renewTask,
   resolveLlmCredential: resolveLlmCredential2,
@@ -2243,15 +2347,35 @@ async function runFireChain({
       readState,
       writeState,
       emitResult,
+      storeAttachment,
       scheduleTask,
+      listTasks,
       cancelTask,
       renewTask,
       resolveLlmCredential: resolveLlmCredential2
     });
     const decision = await hooks.onLLMOutput(sessionCtx);
     ctx.throwIfCancelled();
+    const rawCalls = decision?.decision === "tool-request" ? extractToolCallsFromDecision(decision) : [];
+    const validId = (call) => typeof call?.id === "string" && call.id.trim().length > 0;
+    const nativeCalls = Array.isArray(assistantMessage.tool_calls) ? assistantMessage.tool_calls : [];
+    const usedIds = new Set([...rawCalls, ...nativeCalls].filter(validId).map((call) => call.id));
+    const malformedIds = /* @__PURE__ */ new Set();
+    const toolCalls = rawCalls.map((call, index) => {
+      let id = validId(call) ? call.id : `call_${iteration + 1}_${index + 1}`;
+      if (!validId(call)) {
+        while (usedIds.has(id)) id += "_";
+        usedIds.add(id);
+      }
+      if (typeof call?.function?.name !== "string" || !call.function.name.trim()) {
+        malformedIds.add(id);
+        return { id, type: "function", function: { name: "invalid_tool_call", arguments: "{}" } };
+      }
+      return { ...call, id };
+    });
+    const validationDecision = decision?.decision === "tool-request" && Array.isArray(decision.toolCalls) && decision.toolCalls.length > 0 ? { ...decision, toolCalls } : decision;
     try {
-      assertValidDecision(decision, { inlineToolCalls: true });
+      assertValidDecision(validationDecision, { inlineToolCalls: true });
     } catch (error) {
       throw markPermanent(error, "AGENTIC_BAD_DECISION");
     }
@@ -2282,14 +2406,19 @@ async function runFireChain({
       });
       return { handled: true, result: { success: true, messagesSent, status: "finished", iterations: iteration + 1 } };
     }
-    const toolCalls = extractToolCallsFromDecision(decision);
     if (toolCalls.length === 0) {
       throw taggedRetryableError(
         "AGENTIC_EMPTY_TOOL_REQUEST: tool-request decision carried no toolCalls (neither decision.toolCalls nor pushPayloads[].toolCalls)",
         "AGENTIC_EMPTY_TOOL_REQUEST"
       );
     }
-    if (typeof hooks.executeToolCalls !== "function") {
+    const permittedCalls = toolCalls.filter((call) => !malformedIds.has(call.id) && (normalized.allowedToolNames === void 0 || normalized.allowedToolNames.has(call.function.name)));
+    const deniedResults = toolCalls.filter((call) => !permittedCalls.includes(call)).map((call) => ({
+      role: "tool",
+      tool_call_id: call.id,
+      content: JSON.stringify({ error: malformedIds.has(call.id) ? { code: "INVALID_TOOL_CALL", message: "Tool call requires a function name" } : { code: "TOOL_NOT_ALLOWED", message: "Tool execution is not allowed for this fire" } })
+    }));
+    if (permittedCalls.length > 0 && typeof hooks.executeToolCalls !== "function") {
       throw new DeploymentConfigError(
         "AGENTIC_CONFIG_ERROR: onLLMOutput returned tool-request but hooks.executeToolCalls is not configured",
         { code: "AGENTIC_CONFIG_ERROR" }
@@ -2301,7 +2430,7 @@ async function runFireChain({
     let toolResults;
     try {
       ctx.throwIfCancelled();
-      toolResults = await hooks.executeToolCalls(toolCalls, sessionCtx);
+      toolResults = permittedCalls.length > 0 ? await hooks.executeToolCalls(permittedCalls, sessionCtx) : [];
       ctx.throwIfCancelled();
       if (!Array.isArray(toolResults)) {
         throw new TypeError('executeToolCalls must resolve to an array of { tool_call_id, role: "tool", content }');
@@ -2309,16 +2438,17 @@ async function runFireChain({
     } catch (error) {
       ctx.throwIfCancelled();
       if (isTaskCancelledError(error)) throw error;
-      toolResults = toolCalls.map((toolCall) => ({
+      toolResults = permittedCalls.map((toolCall) => ({
         tool_call_id: toolCall && typeof toolCall === "object" && typeof toolCall.id === "string" ? toolCall.id : "",
         role: "tool",
         content: `Tool execution failed: ${error?.message ?? String(error)}`
       }));
     }
-    const nativeCalls = Array.isArray(assistantMessage.tool_calls) ? assistantMessage.tool_calls : [];
-    const nativeIds = new Set(nativeCalls.map((tc) => tc && tc.id));
-    const synthesized = toolCalls.filter((tc) => !nativeIds.has(tc && tc.id));
-    const assistantWithTools = synthesized.length === 0 ? assistantMessage : { ...assistantMessage, tool_calls: [...nativeCalls, ...synthesized] };
+    toolResults = [...toolResults, ...deniedResults];
+    const declared = nativeCalls.filter(validId).map((call) => toolCalls.find((item) => item.id === call.id) || call);
+    const nativeIds = new Set(declared.map((call) => call.id));
+    const synthesized = toolCalls.filter((call) => !nativeIds.has(call.id));
+    const assistantWithTools = { ...assistantMessage, tool_calls: [...declared, ...synthesized] };
     messages = [...messages.slice(0, -1), assistantWithTools, ...toolResults];
   }
   throw taggedRetryableError(
@@ -3392,6 +3522,9 @@ function createScheduleMessageHandler(ctx) {
       owner: payload.owner,
       kind: payload.kind,
       ownerGeneration: payload.ownerGeneration,
+      // Input is persisted with the task in the same create/supersede transaction.
+      // Shared credentials remain references and continue to resolve at fire time.
+      taskInput: payload.taskInput ?? null,
       metadata: payload.metadata || {}
     };
     const serializedTaskData = JSON.stringify(fullTaskData);
@@ -3599,7 +3732,7 @@ async function runScheduledTick(ctx) {
 }
 async function cleanupExpiredClientState(ctx) {
   if (typeof ctx.db.cleanupClientState !== "function") return;
-  const targets = planClientStateCleanup(ctx.clientStateTtl, Date.now());
+  const targets = planClientStateCleanup({ [ATTACHMENT_NAMESPACE]: ATTACHMENT_RETENTION_DAYS, ...ctx.clientStateTtl }, Date.now());
   if (targets.length === 0) return;
   try {
     await ctx.db.cleanupClientState(targets);
@@ -4259,6 +4392,9 @@ function createUpdateMessageHandler(ctx) {
     if (!isPlainObject(updates)) {
       return { status: 400, body: { success: false, error: { code: "INVALID_UPDATE_DATA", message: "\u66F4\u65B0\u6570\u636E\u683C\u5F0F\u9519\u8BEF" } } };
     }
+    if (Object.prototype.hasOwnProperty.call(updates, "taskInput")) {
+      return { status: 400, body: { success: false, error: { code: "INVALID_UPDATE_DATA", message: "taskInput \u53EA\u80FD\u5728\u521B\u5EFA\u6216\u66FF\u6362\u4EFB\u52A1\u65F6\u8BBE\u7F6E", details: { invalidFields: ["taskInput"] } } } };
+    }
     if (updates.nextSendAt && !isValidISO8601(updates.nextSendAt)) {
       return { status: 400, body: { success: false, error: { code: "INVALID_UPDATE_DATA", message: "\u66F4\u65B0\u6570\u636E\u683C\u5F0F\u9519\u8BEF", details: { invalidFields: ["nextSendAt"] } } } };
     }
@@ -5334,12 +5470,37 @@ var D1Adapter = class {
     const row = await this._db.prepare("SELECT encrypted_value FROM cloud_resource_metadata WHERE user_id=? AND resource_key=?").bind(userId, resourceKey).first();
     return row?.encrypted_value ?? null;
   }
+  async getOutboxPayload(userId, messageId) {
+    const row = await this._db.prepare(
+      "SELECT payload FROM message_outbox WHERE user_id = ? AND message_id = ? LIMIT 1"
+    ).bind(userId, messageId).first();
+    return row?.payload ?? null;
+  }
   async listCloudResourceRows(userId) {
-    const tables = { task: "scheduled_messages", state: "client_state", credential: "llm_credentials", outbox: "message_outbox", subscription: "push_subscriptions", metadata: "cloud_resource_metadata" };
+    const queries = {
+      task: "SELECT * FROM scheduled_messages WHERE user_id = ?",
+      state: `SELECT user_id, namespace, key,
+        CASE WHEN LENGTH(value) <= 1024 THEN value ELSE NULL END AS value,
+        LENGTH(CAST(value AS BLOB)) AS byte_size,
+        substr(value, 1, 128) AS value_prefix,
+        CASE WHEN LENGTH(value) > 128 THEN substr(value, -64) ELSE '' END AS value_suffix,
+        updated_at
+        FROM client_state WHERE user_id = ?`,
+      credential: "SELECT * FROM llm_credentials WHERE user_id = ?",
+      outbox: `SELECT id, user_id, message_id, task_uuid, session_id, message_index, total_messages,
+        CASE WHEN LENGTH(payload) <= 1024 THEN payload ELSE NULL END AS payload,
+        LENGTH(CAST(payload AS BLOB)) AS byte_size,
+        substr(payload, 1, 128) AS payload_prefix,
+        CASE WHEN LENGTH(payload) > 128 THEN substr(payload, -64) ELSE '' END AS payload_suffix,
+        created_at, delivered_at, acked_at
+        FROM message_outbox WHERE user_id = ?`,
+      subscription: "SELECT * FROM push_subscriptions WHERE user_id = ?",
+      metadata: "SELECT * FROM cloud_resource_metadata WHERE user_id = ?"
+    };
     const result = { gaps: [] };
-    await Promise.all(Object.entries(tables).map(async ([type, table]) => {
+    await Promise.all(Object.entries(queries).map(async ([type, sql]) => {
       try {
-        const response = await this._db.prepare(`SELECT * FROM ${table} WHERE user_id = ?`).bind(userId).all();
+        const response = await this._db.prepare(sql).bind(userId).all();
         result[type] = response.results || [];
       } catch {
         result[type] = [];
@@ -5404,7 +5565,10 @@ var D1Adapter = class {
     if (idempotencyKey) {
       return this._cloudRecord(await this._db.prepare(`SELECT * FROM cloud_data_records WHERE user_id=? AND kind=? AND idempotency_key=?`).bind(userId, kind, idempotencyKey).first());
     }
-    return this.getCloudDataRecord(userId, kind, id);
+    if (createOnly) {
+      return this.getCloudDataRecord(userId, kind, id);
+    }
+    return { id, userId, kind, data, updatedAt: now };
   }
   async getCloudDataRecord(userId, kind, id) {
     return this._cloudRecord(await this._db.prepare("SELECT * FROM cloud_data_records WHERE user_id=? AND kind=? AND id=?").bind(userId, kind, id).first());
@@ -5613,6 +5777,29 @@ var D1Adapter = class {
     const row = await this._db.prepare(`SELECT ${condition.sql} AS valid`).bind(...condition.args).first();
     return !!row?.valid;
   }
+  _rowSnapshotMatch(spec, row) {
+    const clauses = [];
+    const args = [];
+    for (const column of spec.columns) {
+      if (!Object.hasOwn(row, column)) continue;
+      if ((column === "value" || column === "payload") && row[column] === null && typeof row.byte_size === "number") {
+        clauses.push(
+          `LENGTH(CAST(${column} AS BLOB)) IS ?`,
+          `substr(${column}, 1, 128) IS ?`,
+          `(CASE WHEN LENGTH(${column}) > 128 THEN substr(${column}, -64) ELSE '' END) IS ?`
+        );
+        args.push(
+          row.byte_size,
+          row[`${column}_prefix`] ?? null,
+          row[`${column}_suffix`] ?? ""
+        );
+      } else {
+        clauses.push(`${column} IS ?`);
+        args.push(row[column]);
+      }
+    }
+    return { predicate: clauses.join(" AND "), values: args };
+  }
   /** Delete only the exact physical snapshot; no untrusted SQL identifiers. */
   async deleteCloudResourceRows(userId, locators, { operationId, leaseToken } = {}) {
     const specs = {
@@ -5660,9 +5847,7 @@ var D1Adapter = class {
         ).bind(userId, namespace, key, "amsg-chunks" + namespace, key + "", key + " ", identities));
       }
       for (const row of locator.rows) {
-        const columns = spec.columns.filter((column) => Object.hasOwn(row, column));
-        const predicate = columns.map((column) => `${column} IS ?`).join(" AND ");
-        const values = columns.map((column) => row[column]);
+        const { predicate, values } = this._rowSnapshotMatch(spec, row);
         const identity = spec.keys.map((column) => `${column} IS ?`).join(" AND ");
         statements.push(this._db.prepare(
           `INSERT INTO cloud_guard_assertions (allowed)
@@ -5671,8 +5856,8 @@ var D1Adapter = class {
         ).bind(...spec.keys.map((column) => row[column]), ...values));
       }
       for (const row of locator.rows) {
-        const columns = spec.columns.filter((column) => Object.hasOwn(row, column));
-        statements.push(this._db.prepare(`DELETE FROM ${spec.table} WHERE ${columns.map((column) => `${column} IS ?`).join(" AND ")}`).bind(...columns.map((column) => row[column])));
+        const { predicate, values } = this._rowSnapshotMatch(spec, row);
+        statements.push(this._db.prepare(`DELETE FROM ${spec.table} WHERE ${predicate}`).bind(...values));
       }
       if (locator.metadataKey) statements.push(this._db.prepare("DELETE FROM cloud_resource_metadata WHERE user_id=? AND resource_key=?").bind(userId, locator.metadataKey));
       try {
@@ -6175,24 +6360,33 @@ var D1Adapter = class {
     return result;
   }
   /**
-   * All entries of one namespace (values still encrypted).
+   * Entries of one namespace (values still encrypted); optional exact/prefix selection.
    *
    * @param {string} userId
    * @param {string} namespace
    * @returns {Promise<Array<{ namespace: string, key: string, value: string, updated_at: number }>>}
    */
-  async getClientState(userId, namespace) {
+  async getClientState(userId, namespace, options = {}) {
+    const params = [userId, namespace];
+    let selector = "";
+    if (options.key !== void 0) {
+      selector = " AND key = ?";
+      params.push(options.key);
+    } else if (options.keyPrefix !== void 0) {
+      selector = " AND key >= ? AND key < ?";
+      params.push(options.keyPrefix, prefixRangeEnd(options.keyPrefix));
+    }
     const res = await this._db.prepare(
       `SELECT namespace, key, value, updated_at
        FROM client_state
-       WHERE user_id = ? AND namespace = ?
+       WHERE user_id = ? AND namespace = ?${selector}
        ORDER BY key ASC`
-    ).bind(userId, namespace).all();
+    ).bind(...params).all();
     return res.results || [];
   }
   /**
    * 例行清理：把指定命名空间下太久没更新的条目删掉（run-tick 每跳顺手调，
-   * 宿主配了 `clientStateTtl` 才会调）。
+   * 附件默认保留 30 天，宿主 `clientStateTtl` 可覆盖或配置其他命名空间）。
    *
    * 不限用户——「这个命名空间只留最近 N 天」是命名空间级的约定，单用户部署
    * 下也就是这一个用户的行。指令由 lib/client-state-store.js 的
@@ -6924,8 +7118,9 @@ function createClientStateHandler(ctx) {
     if (typeof db.upsertClientState !== "function") {
       return err3(501, "CLIENT_STATE_NOT_SUPPORTED", "\u5F53\u524D\u6570\u636E\u5E93\u9002\u914D\u5668\u4E0D\u652F\u6301 client_state");
     }
-    const { upserted, skipped, deleted, skippedEntries } = await writeClientStateEntries({ db, userId, userKey, entries: accepted });
+    const { upserted, skipped, deleted, skippedEntries, unknown } = await writeClientStateEntries({ db, userId, userKey, entries: accepted });
     const data = { upserted, skipped };
+    if (unknown > 0) data.unknown = unknown;
     if (deleted > 0) data.deleted = deleted;
     if (skippedEntries.length > 0) data.skippedEntries = skippedEntries;
     if (rejected.length > 0) data.rejected = rejected;
@@ -6938,7 +7133,12 @@ function createClientStateHandler(ctx) {
     const gate = requireUserId(headers);
     if (gate.error) return gate.error;
     const { userId } = gate;
-    const namespace = new URL(url, "https://dummy").searchParams.get("namespace") || "";
+    const query = new URL(url, "https://dummy").searchParams;
+    const namespace = query.get("namespace") || "";
+    const key = query.get("key");
+    if (key !== null && (!key.trim() || key.length > MAX_KEY_CHARS || INTERNAL_STATE_CHAR_RE.test(key))) {
+      return err3(400, "INVALID_STATE_KEY", "key must be non-empty, at most 256 characters, without control characters");
+    }
     if (!namespace.trim()) return err3(400, "NAMESPACE_REQUIRED", "\u5FC5\u987B\u63D0\u4F9B namespace \u67E5\u8BE2\u53C2\u6570");
     if (INTERNAL_STATE_CHAR_RE.test(namespace)) {
       return err3(400, "INVALID_STATE_NAMESPACE", "namespace \u4E0D\u80FD\u5305\u542B\u63A7\u5236\u5B57\u7B26\uFF08\\u0000-\\u001f \u4E3A\u5E93\u5185\u90E8\u4FDD\u7559\uFF09");
@@ -6947,10 +7147,10 @@ function createClientStateHandler(ctx) {
       return err3(501, "CLIENT_STATE_NOT_SUPPORTED", "\u5F53\u524D\u6570\u636E\u5E93\u9002\u914D\u5668\u4E0D\u652F\u6301 client_state");
     }
     const userKey = await deriveUserEncryptionKey(userId, masterKey);
-    const rows = await db.getClientState(userId, namespace);
+    const rows = await db.getClientState(userId, namespace, key === null ? void 0 : { key });
     const decrypted = await resolveClientStateEntries(
-      rows,
-      () => db.getClientState(userId, chunkNamespaceFor(namespace)),
+      key === null ? rows : rows.filter((row) => row.key === key),
+      () => db.getClientState(userId, chunkNamespaceFor(namespace), key === null ? void 0 : { keyPrefix: chunkKeyPrefixFor(key) }),
       (value) => decryptFromStorage(value, userKey)
     );
     const encryptedResponse = await encryptPayload({ namespace, entries: decrypted }, userKey);
@@ -7028,7 +7228,7 @@ function createClientStateNamespacesHandler(ctx) {
 }
 
 // src/server/lib/version.js
-var SERVER_VERSION = true ? "3.0.0" : "0.0.0-dev";
+var SERVER_VERSION = true ? "3.1.0-next.1" : "0.0.0-dev";
 
 // src/server/handlers/capabilities.js
 var SERVER_FEATURES = Object.freeze([
@@ -7144,7 +7344,12 @@ var SERVER_FEATURES = Object.freeze([
   "max-generation-retries",
   // onBeforeFire 认 { defer: { afterMs } }：这次不生成，过一会儿再来问（不占重试
   // 次数）；onFireSettled 的 status 多一种 'deferred'，带 retryAfter。
-  "before-fire-defer"
+  "before-fire-defer",
+  "task-input",
+  "client-state-key",
+  "agentic-list-tasks",
+  "agentic-tool-allowlist",
+  "attachments"
 ]);
 function createCapabilitiesHandler(ctx) {
   async function GET(url, headers) {
@@ -7191,6 +7396,39 @@ function objectOrText(value) {
     return value;
   }
 }
+function utf8ByteLength(text) {
+  if (typeof text !== "string" || text.length === 0) return 0;
+  return /[^\x00-\x7f]/.test(text) ? encoder.encode(text).length : text.length;
+}
+function rowByteSize(row) {
+  if (typeof row.byte_size === "number") return row.byte_size;
+  return utf8ByteLength(
+    String(
+      row.value ?? row.encrypted_payload ?? row.encrypted_value ?? row.payload ?? row.subscription ?? ""
+    )
+  );
+}
+var STORAGE_PREFIX_RE = /^[0-9a-f]{32}:[0-9a-f]{24,32}:[0-9a-f]*$/i;
+var HEX_RE = /^[0-9a-f]*$/i;
+function isValidStorageCiphertext(fullText, prefix, suffix, byteSize) {
+  if (typeof fullText === "string") {
+    if (!STORAGE_PREFIX_RE.test(fullText)) return false;
+    const secondColon = fullText.indexOf(":", 33);
+    return secondColon > 32 && (fullText.length - secondColon - 1) % 2 === 0;
+  }
+  if (typeof prefix === "string" && typeof byteSize === "number") {
+    if (!STORAGE_PREFIX_RE.test(prefix)) return false;
+    if (typeof suffix === "string" && !HEX_RE.test(suffix)) return false;
+    const secondColon = prefix.indexOf(":", 33);
+    return secondColon > 32 && (byteSize - secondColon - 1) % 2 === 0;
+  }
+  return false;
+}
+function hasCompleteStoredMetadata(stored) {
+  return Boolean(
+    stored && safeOwner(stored.owner) !== null && typeof stored.kind === "string" && stored.kind.length > 0
+  );
+}
 async function buildCloudDataInventory({
   db,
   userId,
@@ -7203,6 +7441,20 @@ async function buildCloudDataInventory({
   const metadata = new Map(
     (raw.metadata || []).map((row) => [row.resource_key, row.encrypted_value])
   );
+  const readStoredMetadata = async (metadataKey) => {
+    const encryptedMetadata = metadata.get(metadataKey) || null;
+    if (!encryptedMetadata) {
+      return { encryptedMetadata: null, stored: null, unreadable: false };
+    }
+    try {
+      const stored = JSON.parse(
+        await decryptFromStorage(encryptedMetadata, userKey)
+      );
+      return { encryptedMetadata, stored, unreadable: false };
+    } catch {
+      return { encryptedMetadata, stored: null, unreadable: true };
+    }
+  };
   const taskPayloads = /* @__PURE__ */ new Map();
   const taskByUuid = /* @__PURE__ */ new Map();
   for (const row of raw.task || []) {
@@ -7227,23 +7479,19 @@ async function buildCloudDataInventory({
     status = null,
     namespace,
     key,
-    credId
+    credId,
+    metadataInfo
   }) => {
     const metadataKey = JSON.stringify([type, ...identity]);
     const id = await cloudDataHash(JSON.stringify([userId, metadataKey]));
-    let stored = null;
-    const encryptedMetadata = metadata.get(metadataKey);
-    if (encryptedMetadata) {
-      try {
-        stored = JSON.parse(
-          await decryptFromStorage(encryptedMetadata, userKey)
-        );
-      } catch {
-        unreadable = true;
-      }
-    }
+    const {
+      encryptedMetadata,
+      stored,
+      unreadable: metadataUnreadable
+    } = metadataInfo ?? await readStoredMetadata(metadataKey);
+    if (metadataUnreadable) unreadable = true;
     let resolved = null;
-    if (resolveOwner) {
+    if (resolveOwner && !hasCompleteStoredMetadata(stored)) {
       try {
         resolved = await resolveOwner({
           type,
@@ -7266,14 +7514,7 @@ async function buildCloudDataInventory({
     const owner = safeOwner(stored?.owner) || safeOwner(payload?.__cloudOwnerGuard?.owner) || safeOwner(payload?.metadata?.cloudOwner) || safeOwner(payload?.metadata?.owner) || safeOwner(payload?.owner) || safeOwner(task?.__cloudOwnerGuard?.owner) || safeOwner(task?.metadata?.cloudOwner) || safeOwner(task?.metadata?.owner) || safeOwner(task?.owner) || safeOwner(resolved?.owner);
     const kind = stored?.kind ?? payload?.metadata?.kind ?? payload?.kind ?? resolved?.kind ?? null;
     const times = rows.map((row) => timestamp(row.updated_at ?? row.created_at)).filter((time) => time !== null);
-    const byteSize = rows.reduce(
-      (sum, row) => sum + encoder.encode(
-        String(
-          row.value ?? row.encrypted_payload ?? row.encrypted_value ?? row.payload ?? row.subscription ?? ""
-        )
-      ).length,
-      0
-    );
+    const byteSize = rows.reduce((sum, row) => sum + rowByteSize(row), 0);
     const label = type === "state" ? `${namespace}/${key}` : type === "credential" ? credId : type === "task" ? rows[0].uuid || `task row ${rows[0].id}` : type === "outbox" ? rows[0].message_id : "Web Push subscription";
     entries.push({
       resource: {
@@ -7328,22 +7569,75 @@ async function buildCloudDataInventory({
     const slices = chunks.get(group) || [];
     chunks.delete(group);
     const rows = [row, ...slices.sort((a, b) => a.key.localeCompare(b.key))];
-    let value, unreadable = false;
+    const metadataKey = JSON.stringify(["state", row.namespace, row.key]);
+    const metadataInfo = await readStoredMetadata(metadataKey);
+    const skipFullDecrypt = !metadataInfo.unreadable && hasCompleteStoredMetadata(metadataInfo.stored);
+    let value, unreadable = metadataInfo.unreadable;
     try {
-      const count = parseChunkedRootCount(row.value);
-      if (count === null) value = await decryptFromStorage(row.value, userKey);
-      else {
+      const rootMarker = row.value ?? row.value_prefix ?? "";
+      const count = parseChunkedRootCount(rootMarker);
+      if (count === null) {
+        if (typeof row.value === "string" && (!skipFullDecrypt || row.value.length <= 1024)) {
+          value = await decryptFromStorage(row.value, userKey);
+        } else if (skipFullDecrypt) {
+          if (!isValidStorageCiphertext(
+            row.value,
+            row.value_prefix,
+            row.value_suffix,
+            row.byte_size
+          )) {
+            throw new Error("Invalid state ciphertext");
+          }
+        } else {
+          const fetched = typeof db.getClientState === "function" ? await db.getClientState(userId, row.namespace, { key: row.key }) : [];
+          const rawValue = fetched?.[0]?.value;
+          if (typeof rawValue !== "string") {
+            throw new Error("Missing state value");
+          }
+          value = await decryptFromStorage(rawValue, userKey);
+        }
+      } else {
         if (count > slices.length) throw new Error("Missing state chunks");
-        const parts = [];
+        const sliceByKey = new Map(
+          slices.map((candidate) => [candidate.key, candidate])
+        );
+        const orderedSlices = [];
         for (let i = 0; i < count; i++) {
-          const slice = slices.find(
-            (candidate) => candidate.key === chunkKeyFor(row.key, i)
-          );
+          const slice = sliceByKey.get(chunkKeyFor(row.key, i));
           if (!slice || slice.updated_at !== row.updated_at)
             throw new Error("Mismatched state chunks");
-          parts.push(await decryptFromStorage(slice.value, userKey));
+          if (!isValidStorageCiphertext(
+            slice.value,
+            slice.value_prefix,
+            slice.value_suffix,
+            slice.byte_size
+          )) {
+            throw new Error("Corrupt state chunk");
+          }
+          orderedSlices.push(slice);
+        }
+        if (!skipFullDecrypt) {
+          let fetchedByKey = null;
+          if (orderedSlices.some((slice) => typeof slice.value !== "string")) {
+            const fetchedSlices = typeof db.getClientState === "function" ? await db.getClientState(
+              userId,
+              CHUNK_NAMESPACE_PREFIX + row.namespace,
+              { keyPrefix: `${row.key}` }
+            ) : [];
+            fetchedByKey = new Map(
+              fetchedSlices.map((candidate) => [candidate.key, candidate.value])
+            );
+          }
+          const parts = [];
+          for (const slice of orderedSlices) {
+            const rawSliceValue = typeof slice.value === "string" ? slice.value : fetchedByKey?.get(slice.key);
+            if (typeof rawSliceValue !== "string") {
+              throw new Error("Missing state chunk value");
+            }
+            parts.push(await decryptFromStorage(rawSliceValue, userKey));
+          }
+          value = parts.join("");
         }
-        value = parts.join("");
       }
     } catch {
       unreadable = true;
@@ -7356,7 +7650,8 @@ async function buildCloudDataInventory({
       rows,
       value,
       unreadable,
-      status: null
+      status: null,
+      metadataInfo
     });
   }
   for (const [group, rows] of chunks) {
@@ -7380,9 +7675,29 @@ async function buildCloudDataInventory({
     });
   }
   for (const row of raw.outbox || []) {
-    let payload, unreadable = false;
+    const metadataKey = JSON.stringify(["outbox", row.message_id]);
+    const metadataInfo = await readStoredMetadata(metadataKey);
+    const skipFullDecrypt = !metadataInfo.unreadable && hasCompleteStoredMetadata(metadataInfo.stored);
+    let payload, unreadable = metadataInfo.unreadable;
     try {
-      payload = objectOrText(await decryptFromStorage(row.payload, userKey));
+      if (typeof row.payload === "string" && (!skipFullDecrypt || row.payload.length <= 1024)) {
+        payload = objectOrText(await decryptFromStorage(row.payload, userKey));
+      } else if (skipFullDecrypt) {
+        if (!isValidStorageCiphertext(
+          row.payload,
+          row.payload_prefix,
+          row.payload_suffix,
+          row.byte_size
+        )) {
+          throw new Error("Invalid outbox ciphertext");
+        }
+      } else {
+        const rawPayload = typeof db.getOutboxPayload === "function" ? await db.getOutboxPayload(userId, row.message_id) : null;
+        if (typeof rawPayload !== "string") {
+          throw new Error("Missing outbox payload");
+        }
+        payload = objectOrText(await decryptFromStorage(rawPayload, userKey));
+      }
     } catch {
       unreadable = true;
     }
@@ -7393,7 +7708,8 @@ async function buildCloudDataInventory({
       payload,
       task: taskByUuid.get(row.task_uuid),
       unreadable,
-      status: row.acked_at != null ? "acked" : row.delivered_at != null ? "delivered" : "pending"
+      status: row.acked_at != null ? "acked" : row.delivered_at != null ? "delivered" : "pending",
+      metadataInfo
     });
   }
   for (const row of raw.subscription || []) {
@@ -7516,10 +7832,12 @@ async function makeCleanupPlan(ctx, db, userId, key, input) {
       "\u4E91\u7AEF\u6E05\u5355\u4E0D\u5B8C\u6574\uFF0C\u6682\u4E0D\u80FD\u751F\u6210\u6E05\u7406\u8BA1\u5212",
       409
     );
+  const resourceIdSet = resourceIds ? new Set(resourceIds) : null;
+  const typeSet = types ? new Set(types) : null;
   const entries = inventory.entries.filter(
-    (e) => (!owner || ownerEquals(e.resource.owner, owner)) && (!resourceIds || resourceIds.includes(e.resource.id)) && (!types || types.includes(e.resource.type))
+    (e) => (!owner || ownerEquals(e.resource.owner, owner)) && (!resourceIdSet || resourceIdSet.has(e.resource.id)) && (!typeSet || typeSet.has(e.resource.type))
   );
-  if (resourceIds && new Set(resourceIds).size !== entries.length)
+  if (resourceIdSet && resourceIdSet.size !== entries.length)
     throw cloudError(
       "CLOUD_RESOURCE_NOT_FOUND",
       "\u90E8\u5206\u9009\u4E2D\u8D44\u6E90\u4E0D\u5B58\u5728\u6216\u4E0D\u5C5E\u4E8E\u5F53\u524D\u8303\u56F4",
@@ -7677,6 +7995,7 @@ async function advanceCleanup(ctx, db, userId, key, operation) {
     if (operation.status === "completed" || operation.status === "failed")
       return operation;
     operation.status = "running";
+    let retirementInventory = null;
     if (operation.mode === "retire-owner") {
       if (operation.fencedGeneration == null) {
         const state = await db.setCloudOwnerActive(
@@ -7704,6 +8023,7 @@ async function advanceCleanup(ctx, db, userId, key, operation) {
           "\u65E0\u6CD5\u786E\u8BA4\u5F85\u6E05\u7406\u8D44\u6E90",
           503
         );
+      retirementInventory = inventory;
       const known = new Set(operation.knownResourceIds || []);
       operation.knownResourceVersions ||= {};
       operation.entries = inventory.entries.filter((entry) => {
@@ -7730,7 +8050,7 @@ async function advanceCleanup(ctx, db, userId, key, operation) {
         ).length;
       await save(db, userId, key, "operation", operation, { leaseToken });
     }
-    const beforeBatch = await cloudInventory(ctx, db, userId, key);
+    const beforeBatch = retirementInventory ?? await cloudInventory(ctx, db, userId, key);
     if (!beforeBatch.complete)
       throw cloudError("CLOUD_INVENTORY_INCOMPLETE", "\u65E0\u6CD5\u786E\u8BA4\u5F85\u6E05\u7406\u8D44\u6E90", 503);
     const currentById = new Map(
@@ -7768,7 +8088,6 @@ async function advanceCleanup(ctx, db, userId, key, operation) {
       delete entry.locator;
       operation.cursor++;
       operation.updatedAt = Date.now();
-      await save(db, userId, key, "operation", operation, { leaseToken });
     }
     await renewLease();
     const current = await cloudInventory(ctx, db, userId, key);
@@ -7779,8 +8098,9 @@ async function advanceCleanup(ctx, db, userId, key, operation) {
         503
       );
     const selected = new Set(operation.entries.map((e) => e.resource.id));
+    const knownIds = new Set(operation.knownResourceIds || []);
     const remaining = current.entries.filter(
-      (e) => operation.mode === "retire-owner" ? ownerEquals(e.resource.owner, operation.owner) || (operation.knownResourceIds || []).includes(e.resource.id) : selected.has(e.resource.id)
+      (e) => operation.mode === "retire-owner" ? ownerEquals(e.resource.owner, operation.owner) || knownIds.has(e.resource.id) : selected.has(e.resource.id)
     );
     for (const count of operation.counts)
       count.remaining = remaining.filter(
@@ -8718,6 +9038,7 @@ export {
   timingSafeEqualBytes,
   deriveUserEncryptionKey,
   decryptPayload,
+  encryptPayload,
   encryptForStorage,
   decryptFromStorage,
   CRED_ID_MAX_LENGTH,