agent-working-memory 0.11.0 → 0.12.3

package/dist/coordination/routes.js

@@ -36,8 +36,12 @@ function createChannelMetrics() {
  */
 function sessionTokenOk(db, agentId, req) {
     const provided = req.headers['x-session-token'];
-    if (!provided)
-        return true;
+    if (!provided) {
+        // D2 (2026-07-30): AWM_COORD_REQUIRE_TOKENS=1 closes the omit-the-header
+        // bypass. Default stays backward-compatible (registered workers that never
+        // send tokens keep working); the network perimeter is the bind+API-key gate.
+        return process.env.AWM_COORD_REQUIRE_TOKENS !== '1';
+    }
     const row = db.prepare(`SELECT session_token FROM coord_agents WHERE id = ?`).get(agentId);
     if (!row || !row.session_token)
         return true; // not found or no token stored — backward compat
@@ -128,15 +132,15 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
                 coordLog(`${name} reconnected (reusing UUID ${existing.id.slice(0, 8)})`);
             // Auto-register channel session if channelUrl provided
             if (channelUrl) {
-                db.prepare(`
-          INSERT INTO coord_channel_sessions (agent_id, channel_id, connected_at, status)
-          VALUES (?, ?, datetime('now'), 'connected')
-          ON CONFLICT(agent_id) DO UPDATE SET
-            channel_id = excluded.channel_id,
-            connected_at = datetime('now'),
-            status = 'connected',
-            push_count = 0,
-            last_push_at = NULL
+                db.prepare(`
+          INSERT INTO coord_channel_sessions (agent_id, channel_id, connected_at, status)
+          VALUES (?, ?, datetime('now'), 'connected')
+          ON CONFLICT(agent_id) DO UPDATE SET
+            channel_id = excluded.channel_id,
+            connected_at = datetime('now'),
+            status = 'connected',
+            push_count = 0,
+            last_push_at = NULL
         `).run(existing.id, channelUrl);
                 coordLog(`channel auto-registered: ${name} (${existing.id.slice(0, 8)}) → ${channelUrl}`);
             }
@@ -150,15 +154,15 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         db.prepare(`INSERT INTO coord_events (agent_id, event_type, detail) VALUES (?, 'registered', ?)`).run(id, `${name} joined as ${role ?? 'worker'}${workspace ? ' [' + workspace + ']' : ''}${capabilities ? ' [' + capabilities.join(', ') + ']' : ''}`);
         // Auto-register channel session if channelUrl provided
         if (channelUrl) {
-            db.prepare(`
-        INSERT INTO coord_channel_sessions (agent_id, channel_id, connected_at, status)
-        VALUES (?, ?, datetime('now'), 'connected')
-        ON CONFLICT(agent_id) DO UPDATE SET
-          channel_id = excluded.channel_id,
-          connected_at = datetime('now'),
-          status = 'connected',
-          push_count = 0,
-          last_push_at = NULL
+            db.prepare(`
+        INSERT INTO coord_channel_sessions (agent_id, channel_id, connected_at, status)
+        VALUES (?, ?, datetime('now'), 'connected')
+        ON CONFLICT(agent_id) DO UPDATE SET
+          channel_id = excluded.channel_id,
+          connected_at = datetime('now'),
+          status = 'connected',
+          push_count = 0,
+          last_push_at = NULL
       `).run(id, channelUrl);
             coordLog(`channel auto-registered: ${name} (${id.slice(0, 8)}) → ${channelUrl}`);
         }
@@ -266,25 +270,25 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         }
         // Auto-register channel session if channelUrl provided
         if (channelUrl) {
-            db.prepare(`
-        INSERT INTO coord_channel_sessions (agent_id, channel_id, connected_at, status)
-        VALUES (?, ?, datetime('now'), 'connected')
-        ON CONFLICT(agent_id) DO UPDATE SET
-          channel_id = excluded.channel_id,
-          connected_at = datetime('now'),
-          status = 'connected',
-          push_count = 0,
-          last_push_at = NULL
+            db.prepare(`
+        INSERT INTO coord_channel_sessions (agent_id, channel_id, connected_at, status)
+        VALUES (?, ?, datetime('now'), 'connected')
+        ON CONFLICT(agent_id) DO UPDATE SET
+          channel_id = excluded.channel_id,
+          connected_at = datetime('now'),
+          status = 'connected',
+          push_count = 0,
+          last_push_at = NULL
       `).run(agentId, channelUrl);
             coordLog(`channel auto-registered via /next: ${name} (${agentId.slice(0, 8)}) → ${channelUrl}`);
         }
         // Step 2: Get active commands
         const activeCommands = workspace
-            ? db.prepare(`SELECT id, command, reason, issued_by, issued_at, workspace
-           FROM coord_commands WHERE cleared_at IS NULL AND (workspace = ? OR workspace IS NULL)
+            ? db.prepare(`SELECT id, command, reason, issued_by, issued_at, workspace
+           FROM coord_commands WHERE cleared_at IS NULL AND (workspace = ? OR workspace IS NULL)
            ORDER BY issued_at DESC`).all(workspace)
-            : db.prepare(`SELECT id, command, reason, issued_by, issued_at, workspace
-           FROM coord_commands WHERE cleared_at IS NULL
+            : db.prepare(`SELECT id, command, reason, issued_by, issued_at, workspace
+           FROM coord_commands WHERE cleared_at IS NULL
            ORDER BY issued_at DESC`).all();
         // Step 3: Get or auto-claim assignment
         let assignment = db.prepare(`SELECT * FROM coord_assignments WHERE agent_id = ? AND status IN ('assigned', 'in_progress') ORDER BY created_at DESC LIMIT 1`).get(agentId);
@@ -336,9 +340,9 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         // Read current agent status after all mutations
         const agentRow = db.prepare(`SELECT status FROM coord_agents WHERE id = ?`).get(agentId);
         // Deliver queued mailbox messages (persistent messages that survived disconnects/restarts)
-        const mailbox = db.prepare(`SELECT id, message, source, created_at FROM coord_mailbox
-       WHERE worker_name = ? AND delivered_at IS NULL
-       AND (workspace = ? OR workspace IS NULL)
+        const mailbox = db.prepare(`SELECT id, message, source, created_at FROM coord_mailbox
+       WHERE worker_name = ? AND delivered_at IS NULL
+       AND (workspace = ? OR workspace IS NULL)
        ORDER BY created_at ASC LIMIT 10`).all(name, workspace ?? null);
         if (mailbox.length > 0) {
             const ids = mailbox.map(m => m.id);
@@ -664,13 +668,13 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         }
         const where = conditions.length > 0 ? `WHERE ${conditions.join(' AND ')}` : '';
         const total = db.prepare(`SELECT COUNT(*) AS count FROM coord_assignments a ${where}`).get(...params).count;
-        const assignments = db.prepare(`SELECT a.*, g.name AS agent_name,
-              CASE WHEN a.blocked_by IS NOT NULL AND a.blocked_by NOT IN (SELECT id FROM coord_assignments WHERE status = 'completed')
-                   THEN 1 ELSE 0 END AS is_blocked
-       FROM coord_assignments a
-       LEFT JOIN coord_agents g ON a.agent_id = g.id
-       ${where}
-       ORDER BY a.priority DESC, a.created_at DESC
+        const assignments = db.prepare(`SELECT a.*, g.name AS agent_name,
+              CASE WHEN a.blocked_by IS NOT NULL AND a.blocked_by NOT IN (SELECT id FROM coord_assignments WHERE status = 'completed')
+                   THEN 1 ELSE 0 END AS is_blocked
+       FROM coord_assignments a
+       LEFT JOIN coord_agents g ON a.agent_id = g.id
+       ${where}
+       ORDER BY a.priority DESC, a.created_at DESC
        LIMIT ? OFFSET ?`).all(...params, q.limit, q.offset);
         return reply.send({ assignments, total });
     });
@@ -809,8 +813,8 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         return reply.send({ ok: true });
     });
     app.get('/locks', async (_req, reply) => {
-        const locks = db.prepare(`SELECT l.file_path, l.agent_id, a.name AS agent_name, l.locked_at, l.reason
-       FROM coord_locks l JOIN coord_agents a ON l.agent_id = a.id
+        const locks = db.prepare(`SELECT l.file_path, l.agent_id, a.name AS agent_name, l.locked_at, l.reason
+       FROM coord_locks l JOIN coord_agents a ON l.agent_id = a.id
        ORDER BY l.locked_at DESC LIMIT 200`).all();
         return reply.send({ locks });
     });
@@ -841,11 +845,11 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
     app.get('/command', async (req, reply) => {
         const workspace = req.query.workspace;
         const active = workspace
-            ? db.prepare(`SELECT id, command, reason, issued_by, issued_at, workspace
-           FROM coord_commands WHERE cleared_at IS NULL AND (workspace = ? OR workspace IS NULL)
+            ? db.prepare(`SELECT id, command, reason, issued_by, issued_at, workspace
+           FROM coord_commands WHERE cleared_at IS NULL AND (workspace = ? OR workspace IS NULL)
            ORDER BY issued_at DESC`).all(workspace)
-            : db.prepare(`SELECT id, command, reason, issued_by, issued_at, workspace
-           FROM coord_commands WHERE cleared_at IS NULL
+            : db.prepare(`SELECT id, command, reason, issued_by, issued_at, workspace
+           FROM coord_commands WHERE cleared_at IS NULL
            ORDER BY issued_at DESC`).all();
         if (active.length === 0) {
             return reply.send({ active: false, commands: [] });
@@ -875,11 +879,11 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         const q = commandWaitQuerySchema.safeParse(req.query);
         const { status: targetStatus, workspace } = q.success ? q.data : { status: 'idle', workspace: undefined };
         const agents = workspace
-            ? db.prepare(`SELECT id, name, role, status, current_task, last_seen
-           FROM coord_agents WHERE status NOT IN ('dead') AND workspace = ?
+            ? db.prepare(`SELECT id, name, role, status, current_task, last_seen
+           FROM coord_agents WHERE status NOT IN ('dead') AND workspace = ?
            ORDER BY name`).all(workspace)
-            : db.prepare(`SELECT id, name, role, status, current_task, last_seen
-           FROM coord_agents WHERE status NOT IN ('dead')
+            : db.prepare(`SELECT id, name, role, status, current_task, last_seen
+           FROM coord_agents WHERE status NOT IN ('dead')
            ORDER BY name`).all();
         const ready = agents.filter(a => a.status === targetStatus || a.role === 'orchestrator' || a.role === 'coordinator');
         const notReady = agents.filter(a => a.status !== targetStatus && a.role !== 'orchestrator' && a.role !== 'coordinator');
@@ -898,7 +902,7 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         const { agentId, category, severity, filePath, lineNumber, description, suggestion } = parsed.data;
         if (!sessionTokenOk(db, agentId, req))
             return reply.code(403).send({ error: 'invalid session token' });
-        db.prepare(`INSERT INTO coord_findings (agent_id, category, severity, file_path, line_number, description, suggestion)
+        db.prepare(`INSERT INTO coord_findings (agent_id, category, severity, file_path, line_number, description, suggestion)
        VALUES (?, ?, ?, ?, ?, ?, ?)`).run(agentId, category, severity ?? 'info', filePath ?? null, lineNumber ?? null, description, suggestion ?? null);
         db.prepare(`INSERT INTO coord_events (agent_id, event_type, detail) VALUES (?, 'finding', ?)`).run(agentId, `[${severity ?? 'info'}] ${category}: ${description.slice(0, 100)}`);
         return reply.code(201).send({ ok: true });
@@ -906,12 +910,12 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
     app.get('/findings', async (req, reply) => {
         const q = findingsQuerySchema.safeParse(req.query);
         const { category, severity, status, limit } = q.success ? q.data : { category: undefined, severity: undefined, status: undefined, limit: 50 };
-        let sql = `
-      SELECT f.id, f.category, f.severity, f.file_path, f.line_number,
-             f.description, f.suggestion, f.status, f.created_at,
-             a.name AS agent_name
-      FROM coord_findings f JOIN coord_agents a ON f.agent_id = a.id
-      WHERE 1=1
+        let sql = `
+      SELECT f.id, f.category, f.severity, f.file_path, f.line_number,
+             f.description, f.suggestion, f.status, f.created_at,
+             a.name AS agent_name
+      FROM coord_findings f JOIN coord_agents a ON f.agent_id = a.id
+      WHERE 1=1
     `;
         const params = [];
         if (category) {
@@ -926,9 +930,9 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
             sql += ` AND f.status = ?`;
             params.push(status);
         }
-        sql += ` ORDER BY
-      CASE f.severity WHEN 'critical' THEN 0 WHEN 'error' THEN 1 WHEN 'warn' THEN 2 ELSE 3 END,
-      f.created_at DESC
+        sql += ` ORDER BY
+      CASE f.severity WHEN 'critical' THEN 0 WHEN 'error' THEN 1 WHEN 'warn' THEN 2 ELSE 3 END,
+      f.created_at DESC
       LIMIT ?`;
         params.push(limit);
         const findings = db.prepare(sql).all(...params);
@@ -978,10 +982,10 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
     app.get('/decisions', async (req, reply) => {
         const q = decisionsQuerySchema.safeParse(req.query);
         const { since_id, assignment_id, workspace, limit } = q.success ? q.data : { since_id: 0, assignment_id: undefined, workspace: undefined, limit: 20 };
-        let sql = `
-      SELECT d.id, d.author_id, a.name AS author_name, d.assignment_id, d.tags, d.summary, d.created_at
-      FROM coord_decisions d JOIN coord_agents a ON d.author_id = a.id
-      WHERE d.id > ?
+        let sql = `
+      SELECT d.id, d.author_id, a.name AS author_name, d.assignment_id, d.tags, d.summary, d.created_at
+      FROM coord_decisions d JOIN coord_agents a ON d.author_id = a.id
+      WHERE d.id > ?
     `;
         const params = [since_id];
         if (assignment_id) {
@@ -1011,30 +1015,30 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
     });
     // ─── Status ─────────────────────────────────────────────────────
     app.get('/status', async (_req, reply) => {
-        const agents = db.prepare(`SELECT id, name, role, status, current_task, last_seen,
-              ROUND((julianday('now') - julianday(last_seen)) * 86400) AS seconds_since_seen
-       FROM coord_agents WHERE status != 'dead'
+        const agents = db.prepare(`SELECT id, name, role, status, current_task, last_seen,
+              ROUND((julianday('now') - julianday(last_seen)) * 86400) AS seconds_since_seen
+       FROM coord_agents WHERE status != 'dead'
        ORDER BY role, name LIMIT 200`).all();
-        const assignments = db.prepare(`SELECT a.id, a.task, a.description, a.status, a.agent_id, ag.name AS agent_name,
-              a.created_at, a.started_at, a.completed_at
-       FROM coord_assignments a LEFT JOIN coord_agents ag ON a.agent_id = ag.id
-       WHERE a.status NOT IN ('completed', 'failed')
+        const assignments = db.prepare(`SELECT a.id, a.task, a.description, a.status, a.agent_id, ag.name AS agent_name,
+              a.created_at, a.started_at, a.completed_at
+       FROM coord_assignments a LEFT JOIN coord_agents ag ON a.agent_id = ag.id
+       WHERE a.status NOT IN ('completed', 'failed')
        ORDER BY a.created_at LIMIT 200`).all();
-        const locks = db.prepare(`SELECT l.file_path, l.agent_id, a.name AS agent_name, l.locked_at, l.reason
+        const locks = db.prepare(`SELECT l.file_path, l.agent_id, a.name AS agent_name, l.locked_at, l.reason
        FROM coord_locks l JOIN coord_agents a ON l.agent_id = a.id LIMIT 200`).all();
-        const stats = db.prepare(`SELECT
-         (SELECT COUNT(*) FROM coord_agents WHERE status != 'dead') AS alive_agents,
-         (SELECT COUNT(*) FROM coord_agents WHERE status = 'working') AS busy_agents,
-         (SELECT COUNT(*) FROM coord_assignments WHERE status = 'pending') AS pending_tasks,
-         (SELECT COUNT(*) FROM coord_assignments WHERE status IN ('assigned', 'in_progress')) AS active_tasks,
-         (SELECT COUNT(*) FROM coord_locks) AS active_locks,
-         (SELECT COUNT(*) FROM coord_findings WHERE status = 'open') AS open_findings,
+        const stats = db.prepare(`SELECT
+         (SELECT COUNT(*) FROM coord_agents WHERE status != 'dead') AS alive_agents,
+         (SELECT COUNT(*) FROM coord_agents WHERE status = 'working') AS busy_agents,
+         (SELECT COUNT(*) FROM coord_assignments WHERE status = 'pending') AS pending_tasks,
+         (SELECT COUNT(*) FROM coord_assignments WHERE status IN ('assigned', 'in_progress')) AS active_tasks,
+         (SELECT COUNT(*) FROM coord_locks) AS active_locks,
+         (SELECT COUNT(*) FROM coord_findings WHERE status = 'open') AS open_findings,
          (SELECT COUNT(*) FROM coord_findings WHERE status = 'open' AND severity IN ('critical', 'error')) AS urgent_findings`).get();
-        const recentFindings = db.prepare(`SELECT f.id, f.category, f.severity, f.file_path, f.description, a.name AS agent_name, f.created_at
-       FROM coord_findings f JOIN coord_agents a ON f.agent_id = a.id
-       WHERE f.status = 'open'
-       ORDER BY CASE f.severity WHEN 'critical' THEN 0 WHEN 'error' THEN 1 WHEN 'warn' THEN 2 ELSE 3 END,
-                f.created_at DESC
+        const recentFindings = db.prepare(`SELECT f.id, f.category, f.severity, f.file_path, f.description, a.name AS agent_name, f.created_at
+       FROM coord_findings f JOIN coord_agents a ON f.agent_id = a.id
+       WHERE f.status = 'open'
+       ORDER BY CASE f.severity WHEN 'critical' THEN 0 WHEN 'error' THEN 1 WHEN 'warn' THEN 2 ELSE 3 END,
+                f.created_at DESC
        LIMIT 10`).all();
         return reply.send({ agents, assignments, locks, stats, recentFindings });
     });
@@ -1049,19 +1053,19 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         // spawns. Channel sessions get probed every 60s (coordination/index.ts:111),
         // so a stale channel-server.js gets status='disconnected' within 60-120s.
         let workers = workspace
-            ? db.prepare(`SELECT a.id, a.name, a.role, a.status, a.current_task, a.capabilities, a.workspace, a.last_seen,
-                  ROUND((julianday('now') - julianday(a.last_seen)) * 86400) AS seconds_since_seen,
-                  cs.status AS channel_status, cs.last_push_at AS channel_last_push
-           FROM coord_agents a
-           LEFT JOIN coord_channel_sessions cs ON cs.agent_id = a.id
-           WHERE a.status != 'dead' AND a.role NOT IN ('orchestrator', 'coordinator') AND a.workspace = ?
+            ? db.prepare(`SELECT a.id, a.name, a.role, a.status, a.current_task, a.capabilities, a.workspace, a.last_seen,
+                  ROUND((julianday('now') - julianday(a.last_seen)) * 86400) AS seconds_since_seen,
+                  cs.status AS channel_status, cs.last_push_at AS channel_last_push
+           FROM coord_agents a
+           LEFT JOIN coord_channel_sessions cs ON cs.agent_id = a.id
+           WHERE a.status != 'dead' AND a.role NOT IN ('orchestrator', 'coordinator') AND a.workspace = ?
            ORDER BY a.name LIMIT 200`).all(workspace)
-            : db.prepare(`SELECT a.id, a.name, a.role, a.status, a.current_task, a.capabilities, a.workspace, a.last_seen,
-                  ROUND((julianday('now') - julianday(a.last_seen)) * 86400) AS seconds_since_seen,
-                  cs.status AS channel_status, cs.last_push_at AS channel_last_push
-           FROM coord_agents a
-           LEFT JOIN coord_channel_sessions cs ON cs.agent_id = a.id
-           WHERE a.status != 'dead' AND a.role NOT IN ('orchestrator', 'coordinator')
+            : db.prepare(`SELECT a.id, a.name, a.role, a.status, a.current_task, a.capabilities, a.workspace, a.last_seen,
+                  ROUND((julianday('now') - julianday(a.last_seen)) * 86400) AS seconds_since_seen,
+                  cs.status AS channel_status, cs.last_push_at AS channel_last_push
+           FROM coord_agents a
+           LEFT JOIN coord_channel_sessions cs ON cs.agent_id = a.id
+           WHERE a.status != 'dead' AND a.role NOT IN ('orchestrator', 'coordinator')
            ORDER BY a.name LIMIT 200`).all();
         if (capability) {
             workers = workers.filter(w => {
@@ -1126,9 +1130,9 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         }
         const where = conditions.length > 0 ? `WHERE ${conditions.join(' AND ')}` : '';
         params.push(limit);
-        const events = db.prepare(`SELECT e.id, e.agent_id, a.name AS agent_name, e.event_type, e.detail, e.created_at
-       FROM coord_events e LEFT JOIN coord_agents a ON e.agent_id = a.id
-       ${where}
+        const events = db.prepare(`SELECT e.id, e.agent_id, a.name AS agent_name, e.event_type, e.detail, e.created_at
+       FROM coord_events e LEFT JOIN coord_agents a ON e.agent_id = a.id
+       ${where}
        ORDER BY e.id ASC LIMIT ?`).all(...params);
         const last_id = events.length > 0 ? events[events.length - 1].id : since_id;
         return reply.send({ events, last_id });
@@ -1156,8 +1160,8 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         if (!params.success)
             return reply.code(400).send({ error: params.error.issues[0].message });
         const { id } = params.data;
-        const agent = db.prepare(`SELECT id, name, role, status, current_task, pid, capabilities, workspace, metadata, last_seen, started_at,
-              ROUND((julianday('now') - julianday(last_seen)) * 86400) AS seconds_since_seen
+        const agent = db.prepare(`SELECT id, name, role, status, current_task, pid, capabilities, workspace, metadata, last_seen, started_at,
+              ROUND((julianday('now') - julianday(last_seen)) * 86400) AS seconds_since_seen
        FROM coord_agents WHERE id = ?`).get(id);
         if (!agent)
             return reply.code(404).send({ error: 'agent not found' });
@@ -1177,7 +1181,7 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         if (agent.status === 'dead')
             return reply.send({ ok: true, action: 'already_dead', agent_name: agent.name });
         // Fail active assignments
-        const failedAssignments = db.prepare(`UPDATE coord_assignments SET status = 'failed', result = 'agent killed by coordinator', completed_at = datetime('now')
+        const failedAssignments = db.prepare(`UPDATE coord_assignments SET status = 'failed', result = 'agent killed by coordinator', completed_at = datetime('now')
        WHERE agent_id = ? AND status IN ('assigned', 'in_progress')`).run(id);
         if (failedAssignments.changes > 0) {
             db.prepare(`INSERT INTO coord_events (agent_id, event_type, detail) VALUES (?, 'assignment_failed', ?)`).run(id, `killed: failed ${failedAssignments.changes} active assignment(s)`);
@@ -1210,49 +1214,49 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         }
         const where = conditions.length > 0 ? `WHERE ${conditions.join(' AND ')}` : '';
         params.push(limit);
-        const timeline = db.prepare(`SELECT e.created_at AS timestamp, a.name AS agent_name, e.event_type, e.detail,
-              t.task AS assignment_task
-       FROM coord_events e
-       LEFT JOIN coord_agents a ON e.agent_id = a.id
-       LEFT JOIN coord_assignments t ON a.current_task = t.id
-       ${where}
-       ORDER BY e.created_at DESC, e.id DESC
+        const timeline = db.prepare(`SELECT e.created_at AS timestamp, a.name AS agent_name, e.event_type, e.detail,
+              t.task AS assignment_task
+       FROM coord_events e
+       LEFT JOIN coord_agents a ON e.agent_id = a.id
+       LEFT JOIN coord_assignments t ON a.current_task = t.id
+       ${where}
+       ORDER BY e.created_at DESC, e.id DESC
        LIMIT ?`).all(...params);
         return reply.send({ timeline });
     });
     // ─── Stats ──────────────────────────────────────────────────────
     app.get('/stats', async (_req, reply) => {
-        const workers = db.prepare(`
-      SELECT
-        COUNT(*)                                    AS total,
-        SUM(CASE WHEN status != 'dead' THEN 1 ELSE 0 END)  AS alive,
-        SUM(CASE WHEN status = 'idle' THEN 1 ELSE 0 END)   AS idle,
-        SUM(CASE WHEN status = 'working' THEN 1 ELSE 0 END) AS working
-      FROM coord_agents
+        const workers = db.prepare(`
+      SELECT
+        COUNT(*)                                    AS total,
+        SUM(CASE WHEN status != 'dead' THEN 1 ELSE 0 END)  AS alive,
+        SUM(CASE WHEN status = 'idle' THEN 1 ELSE 0 END)   AS idle,
+        SUM(CASE WHEN status = 'working' THEN 1 ELSE 0 END) AS working
+      FROM coord_agents
     `).get();
-        const tasks = db.prepare(`
-      SELECT
-        COUNT(*)                                         AS total_assigned,
-        SUM(CASE WHEN status = 'completed' THEN 1 ELSE 0 END) AS completed,
-        SUM(CASE WHEN status = 'failed' THEN 1 ELSE 0 END)    AS failed,
-        SUM(CASE WHEN status = 'pending' THEN 1 ELSE 0 END)   AS pending,
-        AVG(CASE
-          WHEN status = 'completed' AND started_at IS NOT NULL AND completed_at IS NOT NULL
-          THEN ROUND((julianday(completed_at) - julianday(started_at)) * 86400)
-          ELSE NULL
-        END) AS avg_completion_seconds
-      FROM coord_assignments
+        const tasks = db.prepare(`
+      SELECT
+        COUNT(*)                                         AS total_assigned,
+        SUM(CASE WHEN status = 'completed' THEN 1 ELSE 0 END) AS completed,
+        SUM(CASE WHEN status = 'failed' THEN 1 ELSE 0 END)    AS failed,
+        SUM(CASE WHEN status = 'pending' THEN 1 ELSE 0 END)   AS pending,
+        AVG(CASE
+          WHEN status = 'completed' AND started_at IS NOT NULL AND completed_at IS NOT NULL
+          THEN ROUND((julianday(completed_at) - julianday(started_at)) * 86400)
+          ELSE NULL
+        END) AS avg_completion_seconds
+      FROM coord_assignments
     `).get();
-        const decisions = db.prepare(`
-      SELECT
-        COALESCE(COUNT(*), 0)                                                              AS total,
-        COALESCE(SUM(CASE WHEN created_at >= datetime('now', '-1 hour') THEN 1 ELSE 0 END), 0) AS last_hour
-      FROM coord_decisions
+        const decisions = db.prepare(`
+      SELECT
+        COALESCE(COUNT(*), 0)                                                              AS total,
+        COALESCE(SUM(CASE WHEN created_at >= datetime('now', '-1 hour') THEN 1 ELSE 0 END), 0) AS last_hour
+      FROM coord_decisions
     `).get();
         // Uptime = seconds since the earliest non-dead agent started
-        const uptime = db.prepare(`
-      SELECT ROUND((julianday('now') - julianday(MIN(started_at))) * 86400) AS uptime_seconds
-      FROM coord_agents WHERE status != 'dead'
+        const uptime = db.prepare(`
+      SELECT ROUND((julianday('now') - julianday(MIN(started_at))) * 86400) AS uptime_seconds
+      FROM coord_agents WHERE status != 'dead'
     `).get();
         return reply.send({
             workers,
@@ -1327,11 +1331,11 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         const dbHealthy = store ? store.integrityCheck().ok : true;
         const agents = db.prepare(`SELECT COUNT(*) AS alive FROM coord_agents WHERE status != 'dead'`).get();
         const staleThreshold = 300;
-        const staleCount = db.prepare(`SELECT COUNT(*) AS c FROM coord_agents
-       WHERE status != 'dead'
+        const staleCount = db.prepare(`SELECT COUNT(*) AS c FROM coord_agents
+       WHERE status != 'dead'
          AND (julianday('now') - julianday(last_seen)) * 86400 > ?`).get(staleThreshold).c;
         const pending = db.prepare(`SELECT COUNT(*) AS c FROM coord_assignments WHERE status IN ('pending', 'assigned', 'in_progress')`).get().c;
-        const uptimeRow = db.prepare(`SELECT ROUND((julianday('now') - julianday(MIN(started_at))) * 86400) AS s
+        const uptimeRow = db.prepare(`SELECT ROUND((julianday('now') - julianday(MIN(started_at))) * 86400) AS s
        FROM coord_agents WHERE status != 'dead'`).get();
         // WAL file size and autocheckpoint setting
         let walSizeBytes = null;
@@ -1370,15 +1374,15 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         const agent = db.prepare('SELECT id FROM coord_agents WHERE id = ?').get(agentId);
         if (!agent)
             return reply.status(404).send({ error: 'Agent not found' });
-        db.prepare(`
-      INSERT INTO coord_channel_sessions (agent_id, channel_id, connected_at, status)
-      VALUES (?, ?, datetime('now'), 'connected')
-      ON CONFLICT(agent_id) DO UPDATE SET
-        channel_id = excluded.channel_id,
-        connected_at = datetime('now'),
-        status = 'connected',
-        push_count = 0,
-        last_push_at = NULL
+        db.prepare(`
+      INSERT INTO coord_channel_sessions (agent_id, channel_id, connected_at, status)
+      VALUES (?, ?, datetime('now'), 'connected')
+      ON CONFLICT(agent_id) DO UPDATE SET
+        channel_id = excluded.channel_id,
+        connected_at = datetime('now'),
+        status = 'connected',
+        push_count = 0,
+        last_push_at = NULL
     `).run(agentId, channelId);
         db.prepare(`INSERT INTO coord_events (agent_id, event_type, detail) VALUES (?, 'channel_register', ?)`).run(agentId, JSON.stringify({ channelId }));
         coordLog(`channel/register: ${agentId} → ${channelId}`);
@@ -1443,9 +1447,9 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
         let { agentId } = parsed.data;
         // Role-based addressing — resolve to a concrete agentId
         if (!agentId && parsed.data.role && parsed.data.workspace) {
-            const resolved = db.prepare(`SELECT id FROM coord_agents
-         WHERE role = ? AND workspace = ? AND status != 'dead'
-         ORDER BY last_seen DESC
+            const resolved = db.prepare(`SELECT id FROM coord_agents
+         WHERE role = ? AND workspace = ? AND status != 'dead'
+         ORDER BY last_seen DESC
          LIMIT 1`).get(parsed.data.role, parsed.data.workspace);
             if (!resolved) {
                 return reply.status(404).send({
@@ -1491,21 +1495,21 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
     });
     /** GET /channel/sessions — List all active channel sessions with agent names. */
     app.get('/channel/sessions', async (_request, reply) => {
-        const sessions = db.prepare(`
-      SELECT cs.agent_id, a.name AS agent_name, cs.channel_id,
-             cs.connected_at, cs.last_push_at, cs.push_count, cs.status
-      FROM coord_channel_sessions cs
-      JOIN coord_agents a ON a.id = cs.agent_id
-      WHERE cs.status = 'connected'
-      ORDER BY cs.connected_at DESC
+        const sessions = db.prepare(`
+      SELECT cs.agent_id, a.name AS agent_name, cs.channel_id,
+             cs.connected_at, cs.last_push_at, cs.push_count, cs.status
+      FROM coord_channel_sessions cs
+      JOIN coord_agents a ON a.id = cs.agent_id
+      WHERE cs.status = 'connected'
+      ORDER BY cs.connected_at DESC
     `).all();
         return reply.send({ sessions });
     });
     /** POST /channel/probe — Probe all connected channel sessions, mark dead ones as disconnected. */
     app.post('/channel/probe', async (_request, reply) => {
-        const sessions = db.prepare(`SELECT cs.agent_id, a.name AS agent_name, cs.channel_id
-       FROM coord_channel_sessions cs
-       JOIN coord_agents a ON a.id = cs.agent_id
+        const sessions = db.prepare(`SELECT cs.agent_id, a.name AS agent_name, cs.channel_id
+       FROM coord_channel_sessions cs
+       JOIN coord_agents a ON a.id = cs.agent_id
        WHERE cs.status = 'connected'`).all();
         const results = [];
         for (const session of sessions) {
@@ -1549,12 +1553,12 @@ export function registerCoordinationRoutes(app, db, store, eventBus) {
      *   }
      */
     app.get('/telemetry/channels', async (_request, reply) => {
-        const perAgent = db.prepare(`
-      SELECT a.name AS agent_name, cs.push_count, cs.last_push_at, cs.status,
-             cs.connected_at
-      FROM coord_channel_sessions cs
-      JOIN coord_agents a ON a.id = cs.agent_id
-      ORDER BY cs.push_count DESC, cs.connected_at DESC
+        const perAgent = db.prepare(`
+      SELECT a.name AS agent_name, cs.push_count, cs.last_push_at, cs.status,
+             cs.connected_at
+      FROM coord_channel_sessions cs
+      JOIN coord_agents a ON a.id = cs.agent_id
+      ORDER BY cs.push_count DESC, cs.connected_at DESC
     `).all();
         const deliveryRate = channelMetrics.attempts > 0
             ? channelMetrics.delivered / channelMetrics.attempts