agor-live 0.11.1 → 0.11.3

package/dist/cli/commands/config/index.js

@@ -1,5 +1,6 @@
 // src/commands/config/index.ts
 import { getConfigPath, getDefaultConfig, loadConfig } from "@agor/core/config";
+import { getDatabaseUrl } from "@agor/core/db";
 import { Command } from "@oclif/core";
 import chalk from "chalk";
 var ConfigIndex = class extends Command {
@@ -38,6 +39,21 @@ var ConfigIndex = class extends Command {
           }
         }
       }
+      const databaseUrl = getDatabaseUrl();
+      const dialect = process.env.AGOR_DB_DIALECT === "postgresql" ? "postgresql" : "sqlite";
+      this.log(chalk.bold("\nDatabase Settings:"));
+      this.log(`  dialect:       ${chalk.gray(dialect)}`);
+      if (dialect === "postgresql") {
+        const maskedUrl = databaseUrl.replace(/:([^:@]+)@/, ":****@");
+        this.log(`  connection:    ${chalk.gray(maskedUrl)}`);
+      } else {
+        this.log(`  database file: ${chalk.gray(databaseUrl)}`);
+      }
+      this.log(
+        chalk.dim(
+          "  (Configure via AGOR_DB_DIALECT, DATABASE_URL, or AGOR_DB_PATH environment variables)"
+        )
+      );
       const daemonConfig = { ...defaults.daemon, ...config.daemon };
       if (daemonConfig) {
         this.log(chalk.bold("\nDaemon Settings:"));

package/dist/cli/commands/init.js

@@ -67,7 +67,7 @@ var Init = class _Init extends Command {
   async getDbStats(dbPath) {
     try {
       const { createDatabase: createDatabase2, select, sessions, tasks, messages, repos } = await import("@agor/core/db");
-      const db = createDatabase2({ url: `file:${dbPath}` });
+      const db = createDatabase2({ url: `file:${dbPath}`, dialect: "sqlite" });
       const sessionRows = await select(db).from(sessions).all();
       const taskRows = await select(db).from(tasks).all();
       const messageRows = await select(db).from(messages).all();
@@ -251,7 +251,7 @@ var Init = class _Init extends Command {
     }
     this.log("");
     this.log("\u{1F4BE} Setting up database...");
-    const db = createDatabase({ url: `file:${dbPath}` });
+    const db = createDatabase({ url: `file:${dbPath}`, dialect: "sqlite" });
     await runMigrations(db);
     this.log(`${chalk.green("   \u2713")} Created ${dbPath}`);
     this.log("");
@@ -265,7 +265,7 @@ var Init = class _Init extends Command {
       await setConfigValue("daemon.allowAnonymous", false);
       this.log(`${chalk.green("   \u2713")} Enabled authentication (multiplayer mode)`);
       try {
-        const db2 = createDatabase({ url: `file:${dbPath}` });
+        const db2 = createDatabase({ url: `file:${dbPath}`, dialect: "sqlite" });
         const defaultEmail = "admin@agor.live";
         const defaultPassword = "admin";
         await createUser(db2, {
@@ -404,7 +404,7 @@ var Init = class _Init extends Command {
         }
       }
     ]);
-    const db = createDatabase({ url: `file:${dbPath}` });
+    const db = createDatabase({ url: `file:${dbPath}`, dialect: "sqlite" });
     const _user = await createUser(db, {
       email,
       password,

package/dist/core/claude/index.cjs

@@ -110,8 +110,8 @@ var init_schema_postgres = __esm({
           // Cascade delete sessions when worktree is deleted
         }),
         // Scheduler tracking (materialized for deduplication and retention cleanup)
-        scheduled_run_at: (0, import_pg_core.integer)("scheduled_run_at"),
-        // Unix timestamp (ms) - authoritative run ID
+        scheduled_run_at: (0, import_pg_core.bigint)("scheduled_run_at", { mode: "number" }),
+        // Unix timestamp (ms) - authoritative run ID - bigint to support dates beyond 2038
         scheduled_from_worktree: t.bool("scheduled_from_worktree").notNull().default(false),
         // UI state (materialized for efficient highlighting queries)
         ready_for_prompt: t.bool("ready_for_prompt").notNull().default(false),
@@ -286,10 +286,10 @@ var init_schema_postgres = __esm({
         schedule_enabled: t.bool("schedule_enabled").notNull().default(false),
         schedule_cron: (0, import_pg_core.text)("schedule_cron"),
         // Cron expression (e.g., "0 9 * * 1-5")
-        schedule_last_triggered_at: (0, import_pg_core.integer)("schedule_last_triggered_at"),
-        // Unix timestamp (ms)
-        schedule_next_run_at: (0, import_pg_core.integer)("schedule_next_run_at"),
-        // Unix timestamp (ms)
+        schedule_last_triggered_at: (0, import_pg_core.bigint)("schedule_last_triggered_at", { mode: "number" }),
+        // Unix timestamp (ms) - bigint to support dates beyond 2038
+        schedule_next_run_at: (0, import_pg_core.bigint)("schedule_next_run_at", { mode: "number" }),
+        // Unix timestamp (ms) - bigint to support dates beyond 2038
         // UI state (materialized for efficient highlighting queries)
         needs_attention: t.bool("needs_attention").notNull().default(true),
         // Default true for new worktrees

package/dist/core/claude/index.js

@@ -47,6 +47,7 @@ __export(schema_postgres_exports, {
 });
 import { sql } from "drizzle-orm";
 import {
+  bigint,
   boolean,
   index,
   integer,
@@ -99,8 +100,8 @@ var init_schema_postgres = __esm({
           // Cascade delete sessions when worktree is deleted
         }),
         // Scheduler tracking (materialized for deduplication and retention cleanup)
-        scheduled_run_at: integer("scheduled_run_at"),
-        // Unix timestamp (ms) - authoritative run ID
+        scheduled_run_at: bigint("scheduled_run_at", { mode: "number" }),
+        // Unix timestamp (ms) - authoritative run ID - bigint to support dates beyond 2038
         scheduled_from_worktree: t.bool("scheduled_from_worktree").notNull().default(false),
         // UI state (materialized for efficient highlighting queries)
         ready_for_prompt: t.bool("ready_for_prompt").notNull().default(false),
@@ -275,10 +276,10 @@ var init_schema_postgres = __esm({
         schedule_enabled: t.bool("schedule_enabled").notNull().default(false),
         schedule_cron: text("schedule_cron"),
         // Cron expression (e.g., "0 9 * * 1-5")
-        schedule_last_triggered_at: integer("schedule_last_triggered_at"),
-        // Unix timestamp (ms)
-        schedule_next_run_at: integer("schedule_next_run_at"),
-        // Unix timestamp (ms)
+        schedule_last_triggered_at: bigint("schedule_last_triggered_at", { mode: "number" }),
+        // Unix timestamp (ms) - bigint to support dates beyond 2038
+        schedule_next_run_at: bigint("schedule_next_run_at", { mode: "number" }),
+        // Unix timestamp (ms) - bigint to support dates beyond 2038
         // UI state (materialized for efficient highlighting queries)
         needs_attention: t.bool("needs_attention").notNull().default(true),
         // Default true for new worktrees

package/dist/core/{client-DuwBpnZS.d.ts → client-BOMc8S1H.d.ts}

@@ -221,7 +221,7 @@ declare const sessions$1: drizzle_orm_pg_core.PgTableWithColumns<{
             name: "scheduled_run_at";
             tableName: "sessions";
             dataType: "number";
-            columnType: "PgInteger";
+            columnType: "PgBigInt53";
             data: number;
             driverParam: string | number;
             notNull: false;
@@ -673,7 +673,7 @@ declare const messages$1: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "messages";
             dataType: "string";
             columnType: "PgText";
-            data: "user" | "assistant" | "system" | "file-history-snapshot" | "permission_request";
+            data: "system" | "user" | "assistant" | "file-history-snapshot" | "permission_request";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -690,7 +690,7 @@ declare const messages$1: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "messages";
             dataType: "string";
             columnType: "PgText";
-            data: "user" | "assistant" | "system";
+            data: "system" | "user" | "assistant";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -1473,7 +1473,7 @@ declare const worktrees$1: drizzle_orm_pg_core.PgTableWithColumns<{
             name: "schedule_last_triggered_at";
             tableName: "worktrees";
             dataType: "number";
-            columnType: "PgInteger";
+            columnType: "PgBigInt53";
             data: number;
             driverParam: string | number;
             notNull: false;
@@ -1490,7 +1490,7 @@ declare const worktrees$1: drizzle_orm_pg_core.PgTableWithColumns<{
             name: "schedule_next_run_at";
             tableName: "worktrees";
             dataType: "number";
-            columnType: "PgInteger";
+            columnType: "PgBigInt53";
             data: number;
             driverParam: string | number;
             notNull: false;
@@ -2252,7 +2252,7 @@ declare const mcpServers$1: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "mcp_servers";
             dataType: "string";
             columnType: "PgText";
-            data: "session" | "global";
+            data: "global" | "session";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -3677,7 +3677,7 @@ declare const messages: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             tableName: "messages";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "user" | "assistant" | "system" | "file-history-snapshot" | "permission_request";
+            data: "system" | "user" | "assistant" | "file-history-snapshot" | "permission_request";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -3696,7 +3696,7 @@ declare const messages: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             tableName: "messages";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "user" | "assistant" | "system";
+            data: "system" | "user" | "assistant";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -5320,7 +5320,7 @@ declare const mcpServers: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             tableName: "mcp_servers";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "session" | "global";
+            data: "global" | "session";
             driverParam: string;
             notNull: true;
             hasDefault: false;

package/dist/core/{client-rXuir36R.d.cts → client-fIC5YbDo.d.cts}

@@ -221,7 +221,7 @@ declare const sessions$1: drizzle_orm_pg_core.PgTableWithColumns<{
             name: "scheduled_run_at";
             tableName: "sessions";
             dataType: "number";
-            columnType: "PgInteger";
+            columnType: "PgBigInt53";
             data: number;
             driverParam: string | number;
             notNull: false;
@@ -673,7 +673,7 @@ declare const messages$1: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "messages";
             dataType: "string";
             columnType: "PgText";
-            data: "user" | "assistant" | "system" | "file-history-snapshot" | "permission_request";
+            data: "system" | "user" | "assistant" | "file-history-snapshot" | "permission_request";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -690,7 +690,7 @@ declare const messages$1: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "messages";
             dataType: "string";
             columnType: "PgText";
-            data: "user" | "assistant" | "system";
+            data: "system" | "user" | "assistant";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -1473,7 +1473,7 @@ declare const worktrees$1: drizzle_orm_pg_core.PgTableWithColumns<{
             name: "schedule_last_triggered_at";
             tableName: "worktrees";
             dataType: "number";
-            columnType: "PgInteger";
+            columnType: "PgBigInt53";
             data: number;
             driverParam: string | number;
             notNull: false;
@@ -1490,7 +1490,7 @@ declare const worktrees$1: drizzle_orm_pg_core.PgTableWithColumns<{
             name: "schedule_next_run_at";
             tableName: "worktrees";
             dataType: "number";
-            columnType: "PgInteger";
+            columnType: "PgBigInt53";
             data: number;
             driverParam: string | number;
             notNull: false;
@@ -2252,7 +2252,7 @@ declare const mcpServers$1: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "mcp_servers";
             dataType: "string";
             columnType: "PgText";
-            data: "session" | "global";
+            data: "global" | "session";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -3677,7 +3677,7 @@ declare const messages: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             tableName: "messages";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "user" | "assistant" | "system" | "file-history-snapshot" | "permission_request";
+            data: "system" | "user" | "assistant" | "file-history-snapshot" | "permission_request";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -3696,7 +3696,7 @@ declare const messages: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             tableName: "messages";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "user" | "assistant" | "system";
+            data: "system" | "user" | "assistant";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -5320,7 +5320,7 @@ declare const mcpServers: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             tableName: "mcp_servers";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "session" | "global";
+            data: "global" | "session";
             driverParam: string;
             notNull: true;
             hasDefault: false;

package/dist/core/config/index.cjs

@@ -187,8 +187,8 @@ var init_schema_postgres = __esm({
           // Cascade delete sessions when worktree is deleted
         }),
         // Scheduler tracking (materialized for deduplication and retention cleanup)
-        scheduled_run_at: (0, import_pg_core.integer)("scheduled_run_at"),
-        // Unix timestamp (ms) - authoritative run ID
+        scheduled_run_at: (0, import_pg_core.bigint)("scheduled_run_at", { mode: "number" }),
+        // Unix timestamp (ms) - authoritative run ID - bigint to support dates beyond 2038
         scheduled_from_worktree: t.bool("scheduled_from_worktree").notNull().default(false),
         // UI state (materialized for efficient highlighting queries)
         ready_for_prompt: t.bool("ready_for_prompt").notNull().default(false),
@@ -363,10 +363,10 @@ var init_schema_postgres = __esm({
         schedule_enabled: t.bool("schedule_enabled").notNull().default(false),
         schedule_cron: (0, import_pg_core.text)("schedule_cron"),
         // Cron expression (e.g., "0 9 * * 1-5")
-        schedule_last_triggered_at: (0, import_pg_core.integer)("schedule_last_triggered_at"),
-        // Unix timestamp (ms)
-        schedule_next_run_at: (0, import_pg_core.integer)("schedule_next_run_at"),
-        // Unix timestamp (ms)
+        schedule_last_triggered_at: (0, import_pg_core.bigint)("schedule_last_triggered_at", { mode: "number" }),
+        // Unix timestamp (ms) - bigint to support dates beyond 2038
+        schedule_next_run_at: (0, import_pg_core.bigint)("schedule_next_run_at", { mode: "number" }),
+        // Unix timestamp (ms) - bigint to support dates beyond 2038
         // UI state (materialized for efficient highlighting queries)
         needs_attention: t.bool("needs_attention").notNull().default(true),
         // Default true for new worktrees
@@ -1844,11 +1844,17 @@ function resolveSystemEnvironment() {
   return { ...process.env };
 }
 var AGOR_USER_ENV_KEYS_VAR = "AGOR_USER_ENV_KEYS";
-async function createUserProcessEnvironment(userId, db, additionalEnv) {
+async function createUserProcessEnvironment(userId, db, additionalEnv, forImpersonation = false) {
   const env = { ...process.env };
   for (const internalVar of AGOR_INTERNAL_ENV_VARS) {
     delete env[internalVar];
   }
+  const USER_IDENTITY_VARS = ["HOME", "USER", "LOGNAME", "SHELL"];
+  if (forImpersonation) {
+    for (const identityVar of USER_IDENTITY_VARS) {
+      delete env[identityVar];
+    }
+  }
   const userEnvKeys = [];
   if (userId && db) {
     const userEnv = await resolveUserEnvironment(userId, db);

package/dist/core/config/index.d.cts

@@ -1,7 +1,7 @@
 import { h as RepoEnvironmentConfig } from '../worktree-hZImhblR.cjs';
 export { c as ensureCodexHome, e as expandHomePath, g as getAgorHome, a as getConfigPath, d as getConfigValue, k as getCredential, h as getDaemonUrl, m as getDaemonUser, q as getDataHome, x as getDataHomeAsync, b as getDefaultConfig, t as getReposDir, y as getReposDirAsync, w as getWorktreePath, v as getWorktreesDir, z as getWorktreesDirAsync, i as initConfig, p as isUnixImpersonationEnabled, o as isWorktreeRbacEnabled, l as loadConfig, j as loadConfigSync, n as requireDaemonUser, r as resolveCodexHome, s as saveConfig, f as setConfigValue, u as unsetConfigValue } from '../config-manager-tIFWlS73.cjs';
 export { DAEMON, DATABASE, ENVIRONMENT, GIT, PAGINATION, RepoReference, RepoReferenceOption, SESSION, WEBSOCKET, extractSlugFromUrl, formatRepoReference, getDefaultRepoReference, getGroupedRepoReferenceOptions, getRepoReferenceOptions, isValidGitUrl, isValidSlug, parseRepoReference, resolveRepoReference } from './browser.cjs';
-import { d as Database } from '../client-rXuir36R.cjs';
+import { d as Database } from '../client-fIC5YbDo.cjs';
 import { b as UserID } from '../id-BwPJtWxW.cjs';
 export { f as AgorCodexSettings, j as AgorConfig, i as AgorCredentials, b as AgorDaemonSettings, e as AgorDatabaseSettings, A as AgorDefaults, a as AgorDisplaySettings, g as AgorExecutionSettings, d as AgorOpenCodeSettings, h as AgorPathSettings, c as AgorUISettings, k as ConfigKey, C as CredentialKey, U as UnknownJson } from '../types-eb2uYaBV.cjs';
 import 'drizzle-orm/libsql';
@@ -137,13 +137,15 @@ declare const AGOR_USER_ENV_KEYS_VAR = "AGOR_USER_ENV_KEYS";
  * This function:
  * 1. Starts with system environment (process.env)
  * 2. Filters out Agor-internal variables (NODE_ENV, AGOR_*, etc.)
- * 3. Resolves and merges user-specific encrypted environment variables
- * 4. Optionally merges additional environment variables
- * 5. Sets AGOR_USER_ENV_KEYS with comma-separated list of user-defined var keys
+ * 3. Optionally filters out user-identity vars (HOME/USER/LOGNAME/SHELL) for impersonation
+ * 4. Resolves and merges user-specific encrypted environment variables
+ * 5. Optionally merges additional environment variables
+ * 6. Sets AGOR_USER_ENV_KEYS with comma-separated list of user-defined var keys
  *
  * @param userId - User ID to resolve environment for (optional)
  * @param db - Database instance (required if userId provided)
  * @param additionalEnv - Additional env vars to merge (optional, highest priority)
+ * @param forImpersonation - If true, strips HOME/USER/LOGNAME/SHELL so sudo -u can set them (default: false)
  * @returns Clean environment object ready for child process spawning
  *
  * @example
@@ -152,6 +154,11 @@ declare const AGOR_USER_ENV_KEYS_VAR = "AGOR_USER_ENV_KEYS";
  * spawn(command, { cwd, shell: true, env });
  *
  * @example
+ * // For user impersonation (strips HOME/USER/LOGNAME/SHELL)
+ * const env = await createUserProcessEnvironment(worktree.created_by, db, undefined, true);
+ * buildSpawnArgs(command, [], { asUser: 'alice', env });
+ *
+ * @example
  * // For worktree environment with custom NODE_ENV
  * const env = await createUserProcessEnvironment(worktree.created_by, db, {
  *   NODE_ENV: 'development',
@@ -162,7 +169,7 @@ declare const AGOR_USER_ENV_KEYS_VAR = "AGOR_USER_ENV_KEYS";
  * const env = await createUserProcessEnvironment();
  * spawn(command, { env });
  */
-declare function createUserProcessEnvironment(userId?: UserID, db?: Database, additionalEnv?: Record<string, string>): Promise<Record<string, string>>;
+declare function createUserProcessEnvironment(userId?: UserID, db?: Database, additionalEnv?: Record<string, string>, forImpersonation?: boolean): Promise<Record<string, string>>;
 
 /**
  * Validation constraints for environment variables

package/dist/core/config/index.d.ts

@@ -1,7 +1,7 @@
 import { h as RepoEnvironmentConfig } from '../worktree-BR7Inm0-.js';
 export { c as ensureCodexHome, e as expandHomePath, g as getAgorHome, a as getConfigPath, d as getConfigValue, k as getCredential, h as getDaemonUrl, m as getDaemonUser, q as getDataHome, x as getDataHomeAsync, b as getDefaultConfig, t as getReposDir, y as getReposDirAsync, w as getWorktreePath, v as getWorktreesDir, z as getWorktreesDirAsync, i as initConfig, p as isUnixImpersonationEnabled, o as isWorktreeRbacEnabled, l as loadConfig, j as loadConfigSync, n as requireDaemonUser, r as resolveCodexHome, s as saveConfig, f as setConfigValue, u as unsetConfigValue } from '../config-manager-CAIQUOj8.js';
 export { DAEMON, DATABASE, ENVIRONMENT, GIT, PAGINATION, RepoReference, RepoReferenceOption, SESSION, WEBSOCKET, extractSlugFromUrl, formatRepoReference, getDefaultRepoReference, getGroupedRepoReferenceOptions, getRepoReferenceOptions, isValidGitUrl, isValidSlug, parseRepoReference, resolveRepoReference } from './browser.js';
-import { d as Database } from '../client-DuwBpnZS.js';
+import { d as Database } from '../client-BOMc8S1H.js';
 import { b as UserID } from '../id-BwPJtWxW.js';
 export { f as AgorCodexSettings, j as AgorConfig, i as AgorCredentials, b as AgorDaemonSettings, e as AgorDatabaseSettings, A as AgorDefaults, a as AgorDisplaySettings, g as AgorExecutionSettings, d as AgorOpenCodeSettings, h as AgorPathSettings, c as AgorUISettings, k as ConfigKey, C as CredentialKey, U as UnknownJson } from '../types-eb2uYaBV.js';
 import 'drizzle-orm/libsql';
@@ -137,13 +137,15 @@ declare const AGOR_USER_ENV_KEYS_VAR = "AGOR_USER_ENV_KEYS";
  * This function:
  * 1. Starts with system environment (process.env)
  * 2. Filters out Agor-internal variables (NODE_ENV, AGOR_*, etc.)
- * 3. Resolves and merges user-specific encrypted environment variables
- * 4. Optionally merges additional environment variables
- * 5. Sets AGOR_USER_ENV_KEYS with comma-separated list of user-defined var keys
+ * 3. Optionally filters out user-identity vars (HOME/USER/LOGNAME/SHELL) for impersonation
+ * 4. Resolves and merges user-specific encrypted environment variables
+ * 5. Optionally merges additional environment variables
+ * 6. Sets AGOR_USER_ENV_KEYS with comma-separated list of user-defined var keys
  *
  * @param userId - User ID to resolve environment for (optional)
  * @param db - Database instance (required if userId provided)
  * @param additionalEnv - Additional env vars to merge (optional, highest priority)
+ * @param forImpersonation - If true, strips HOME/USER/LOGNAME/SHELL so sudo -u can set them (default: false)
  * @returns Clean environment object ready for child process spawning
  *
  * @example
@@ -152,6 +154,11 @@ declare const AGOR_USER_ENV_KEYS_VAR = "AGOR_USER_ENV_KEYS";
  * spawn(command, { cwd, shell: true, env });
  *
  * @example
+ * // For user impersonation (strips HOME/USER/LOGNAME/SHELL)
+ * const env = await createUserProcessEnvironment(worktree.created_by, db, undefined, true);
+ * buildSpawnArgs(command, [], { asUser: 'alice', env });
+ *
+ * @example
  * // For worktree environment with custom NODE_ENV
  * const env = await createUserProcessEnvironment(worktree.created_by, db, {
  *   NODE_ENV: 'development',
@@ -162,7 +169,7 @@ declare const AGOR_USER_ENV_KEYS_VAR = "AGOR_USER_ENV_KEYS";
  * const env = await createUserProcessEnvironment();
  * spawn(command, { env });
  */
-declare function createUserProcessEnvironment(userId?: UserID, db?: Database, additionalEnv?: Record<string, string>): Promise<Record<string, string>>;
+declare function createUserProcessEnvironment(userId?: UserID, db?: Database, additionalEnv?: Record<string, string>, forImpersonation?: boolean): Promise<Record<string, string>>;
 
 /**
  * Validation constraints for environment variables

package/dist/core/config/index.js

@@ -124,6 +124,7 @@ __export(schema_postgres_exports, {
 });
 import { sql as sql2 } from "drizzle-orm";
 import {
+  bigint,
   boolean,
   index,
   integer,
@@ -176,8 +177,8 @@ var init_schema_postgres = __esm({
           // Cascade delete sessions when worktree is deleted
         }),
         // Scheduler tracking (materialized for deduplication and retention cleanup)
-        scheduled_run_at: integer("scheduled_run_at"),
-        // Unix timestamp (ms) - authoritative run ID
+        scheduled_run_at: bigint("scheduled_run_at", { mode: "number" }),
+        // Unix timestamp (ms) - authoritative run ID - bigint to support dates beyond 2038
         scheduled_from_worktree: t.bool("scheduled_from_worktree").notNull().default(false),
         // UI state (materialized for efficient highlighting queries)
         ready_for_prompt: t.bool("ready_for_prompt").notNull().default(false),
@@ -352,10 +353,10 @@ var init_schema_postgres = __esm({
         schedule_enabled: t.bool("schedule_enabled").notNull().default(false),
         schedule_cron: text("schedule_cron"),
         // Cron expression (e.g., "0 9 * * 1-5")
-        schedule_last_triggered_at: integer("schedule_last_triggered_at"),
-        // Unix timestamp (ms)
-        schedule_next_run_at: integer("schedule_next_run_at"),
-        // Unix timestamp (ms)
+        schedule_last_triggered_at: bigint("schedule_last_triggered_at", { mode: "number" }),
+        // Unix timestamp (ms) - bigint to support dates beyond 2038
+        schedule_next_run_at: bigint("schedule_next_run_at", { mode: "number" }),
+        // Unix timestamp (ms) - bigint to support dates beyond 2038
         // UI state (materialized for efficient highlighting queries)
         needs_attention: t.bool("needs_attention").notNull().default(true),
         // Default true for new worktrees
@@ -1766,11 +1767,17 @@ function resolveSystemEnvironment() {
   return { ...process.env };
 }
 var AGOR_USER_ENV_KEYS_VAR = "AGOR_USER_ENV_KEYS";
-async function createUserProcessEnvironment(userId, db, additionalEnv) {
+async function createUserProcessEnvironment(userId, db, additionalEnv, forImpersonation = false) {
   const env = { ...process.env };
   for (const internalVar of AGOR_INTERNAL_ENV_VARS) {
     delete env[internalVar];
   }
+  const USER_IDENTITY_VARS = ["HOME", "USER", "LOGNAME", "SHELL"];
+  if (forImpersonation) {
+    for (const identityVar of USER_IDENTITY_VARS) {
+      delete env[identityVar];
+    }
+  }
   const userEnvKeys = [];
   if (userId && db) {
     const userEnv = await resolveUserEnvironment(userId, db);

package/dist/core/db/index.cjs

@@ -264,8 +264,8 @@ var init_schema_postgres = __esm({
           // Cascade delete sessions when worktree is deleted
         }),
         // Scheduler tracking (materialized for deduplication and retention cleanup)
-        scheduled_run_at: (0, import_pg_core.integer)("scheduled_run_at"),
-        // Unix timestamp (ms) - authoritative run ID
+        scheduled_run_at: (0, import_pg_core.bigint)("scheduled_run_at", { mode: "number" }),
+        // Unix timestamp (ms) - authoritative run ID - bigint to support dates beyond 2038
         scheduled_from_worktree: t.bool("scheduled_from_worktree").notNull().default(false),
         // UI state (materialized for efficient highlighting queries)
         ready_for_prompt: t.bool("ready_for_prompt").notNull().default(false),
@@ -440,10 +440,10 @@ var init_schema_postgres = __esm({
         schedule_enabled: t.bool("schedule_enabled").notNull().default(false),
         schedule_cron: (0, import_pg_core.text)("schedule_cron"),
         // Cron expression (e.g., "0 9 * * 1-5")
-        schedule_last_triggered_at: (0, import_pg_core.integer)("schedule_last_triggered_at"),
-        // Unix timestamp (ms)
-        schedule_next_run_at: (0, import_pg_core.integer)("schedule_next_run_at"),
-        // Unix timestamp (ms)
+        schedule_last_triggered_at: (0, import_pg_core.bigint)("schedule_last_triggered_at", { mode: "number" }),
+        // Unix timestamp (ms) - bigint to support dates beyond 2038
+        schedule_next_run_at: (0, import_pg_core.bigint)("schedule_next_run_at", { mode: "number" }),
+        // Unix timestamp (ms) - bigint to support dates beyond 2038
         // UI state (materialized for efficient highlighting queries)
         needs_attention: t.bool("needs_attention").notNull().default(true),
         // Default true for new worktrees
@@ -1574,14 +1574,17 @@ function createDatabase(config) {
 }
 function createPostgresDatabase(config) {
   try {
-    const sql10 = (0, import_postgres.default)(config.url, {
+    const options = {
       max: config.pool?.max || 10,
       idle_timeout: config.pool?.idleTimeout || 30,
-      ssl: config.ssl,
       // Disable prepared statements - they can cause issues with DDL statements like CREATE SCHEMA
       // and with Drizzle's migration system
       prepare: false
-    });
+    };
+    if (config.ssl !== void 0) {
+      options.ssl = config.ssl;
+    }
+    const sql10 = (0, import_postgres.default)(config.url, options);
     return (0, import_postgres_js.drizzle)(sql10, { schema: schema_postgres_exports });
   } catch (error) {
     throw new DatabaseConnectionError(

package/dist/core/db/index.d.cts

@@ -1,8 +1,8 @@
 import { SQL } from 'drizzle-orm';
 export { SQL, and, asc, desc, eq, inArray, like, or, sql } from 'drizzle-orm';
 import bcryptjs from 'bcryptjs';
-import { d as Database, w as sqliteSchema, x as postgresSchema } from '../client-rXuir36R.cjs';
-export { v as BoardCommentInsert, u as BoardCommentRow, k as BoardInsert, t as BoardObjectInsert, s as BoardObjectRow, B as BoardRow, e as DEFAULT_DB_PATH, a as DatabaseConnectionError, D as DbConfig, p as MCPServerInsert, o as MCPServerRow, j as MessageInsert, M as MessageRow, l as RepoInsert, R as RepoRow, h as SessionInsert, r as SessionMCPServerInsert, q as SessionMCPServerRow, S as SessionRow, i as TaskInsert, T as TaskRow, n as UserInsert, U as UserRow, m as WorktreeInsert, W as WorktreeRow, c as createDatabase, b as createDatabaseAsync, f as createLocalDatabase, g as getDatabaseUrl } from '../client-rXuir36R.cjs';
+import { d as Database, w as sqliteSchema, x as postgresSchema } from '../client-fIC5YbDo.cjs';
+export { v as BoardCommentInsert, u as BoardCommentRow, k as BoardInsert, t as BoardObjectInsert, s as BoardObjectRow, B as BoardRow, e as DEFAULT_DB_PATH, a as DatabaseConnectionError, D as DbConfig, p as MCPServerInsert, o as MCPServerRow, j as MessageInsert, M as MessageRow, l as RepoInsert, R as RepoRow, h as SessionInsert, r as SessionMCPServerInsert, q as SessionMCPServerRow, S as SessionRow, i as TaskInsert, T as TaskRow, n as UserInsert, U as UserRow, m as WorktreeInsert, W as WorktreeRow, c as createDatabase, b as createDatabaseAsync, f as createLocalDatabase, g as getDatabaseUrl } from '../client-fIC5YbDo.cjs';
 import { LibSQLDatabase } from 'drizzle-orm/libsql';
 import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
 import { PgTable } from 'drizzle-orm/pg-core';
@@ -1714,7 +1714,7 @@ declare const sessions: drizzle_orm_pg_core.PgTableWithColumns<{
             name: "scheduled_run_at";
             tableName: "sessions";
             dataType: "number";
-            columnType: "PgInteger";
+            columnType: "PgBigInt53";
             data: number;
             driverParam: string | number;
             notNull: false;
@@ -2732,7 +2732,7 @@ declare const messages: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "messages";
             dataType: "string";
             columnType: "PgText";
-            data: "user" | "assistant" | "system" | "file-history-snapshot" | "permission_request";
+            data: "system" | "user" | "assistant" | "file-history-snapshot" | "permission_request";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -2749,7 +2749,7 @@ declare const messages: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "messages";
             dataType: "string";
             columnType: "PgText";
-            data: "user" | "assistant" | "system";
+            data: "system" | "user" | "assistant";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -2975,7 +2975,7 @@ declare const messages: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "messages";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "user" | "assistant" | "system" | "file-history-snapshot" | "permission_request";
+            data: "system" | "user" | "assistant" | "file-history-snapshot" | "permission_request";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -2994,7 +2994,7 @@ declare const messages: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "messages";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "user" | "assistant" | "system";
+            data: "system" | "user" | "assistant";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -4080,7 +4080,7 @@ declare const worktrees: drizzle_orm_pg_core.PgTableWithColumns<{
             name: "schedule_last_triggered_at";
             tableName: "worktrees";
             dataType: "number";
-            columnType: "PgInteger";
+            columnType: "PgBigInt53";
             data: number;
             driverParam: string | number;
             notNull: false;
@@ -4097,7 +4097,7 @@ declare const worktrees: drizzle_orm_pg_core.PgTableWithColumns<{
             name: "schedule_next_run_at";
             tableName: "worktrees";
             dataType: "number";
-            columnType: "PgInteger";
+            columnType: "PgBigInt53";
             data: number;
             driverParam: string | number;
             notNull: false;
@@ -5865,7 +5865,7 @@ declare const mcpServers: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "mcp_servers";
             dataType: "string";
             columnType: "PgText";
-            data: "session" | "global";
+            data: "global" | "session";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -6137,7 +6137,7 @@ declare const mcpServers: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "mcp_servers";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "session" | "global";
+            data: "global" | "session";
             driverParam: string;
             notNull: true;
             hasDefault: false;