agor-live 0.17.2 → 0.17.3

package/dist/core/db/index.d.cts

@@ -1,8 +1,8 @@
 import { SQL } from 'drizzle-orm';
 export { SQL, and, asc, desc, eq, gt, gte, inArray, like, lte, or, sql } from 'drizzle-orm';
 import bcryptjs from 'bcryptjs';
-import { j as Database, V as postgresSchema, X as sqliteSchema } from '../client-B5PyIvNc.cjs';
-export { A as ArtifactInsert, a as ArtifactRow, B as BoardCommentInsert, b as BoardCommentRow, c as BoardInsert, d as BoardObjectInsert, e as BoardObjectRow, f as BoardRow, C as CardInsert, g as CardRow, h as CardTypeInsert, i as CardTypeRow, D as DEFAULT_DB_PATH, k as DatabaseConnectionError, l as DbConfig, G as GatewayChannelInsert, m as GatewayChannelRow, M as MCPServerInsert, n as MCPServerRow, o as MessageInsert, p as MessageRow, R as RepoInsert, q as RepoRow, S as SerializedSessionInsert, r as SerializedSessionRow, s as SessionEnvSelectionInsert, t as SessionEnvSelectionRow, u as SessionInsert, v as SessionMCPServerInsert, w as SessionMCPServerRow, x as SessionRow, T as TaskInsert, y as TaskRow, z as ThreadSessionMapInsert, E as ThreadSessionMapRow, U as UserInsert, F as UserMCPOAuthTokenInsert, H as UserMCPOAuthTokenRow, I as UserRow, W as WorktreeInsert, J as WorktreeRow, K as createDatabase, L as createDatabaseAsync, N as createLocalDatabase, O as getDatabaseUrl, P as sessionsRelations, Q as worktreesRelations } from '../client-B5PyIvNc.cjs';
+import { j as Database, V as postgresSchema, X as sqliteSchema } from '../client-CemqXk0v.cjs';
+export { A as ArtifactInsert, a as ArtifactRow, B as BoardCommentInsert, b as BoardCommentRow, c as BoardInsert, d as BoardObjectInsert, e as BoardObjectRow, f as BoardRow, C as CardInsert, g as CardRow, h as CardTypeInsert, i as CardTypeRow, D as DEFAULT_DB_PATH, k as DatabaseConnectionError, l as DbConfig, G as GatewayChannelInsert, m as GatewayChannelRow, M as MCPServerInsert, n as MCPServerRow, o as MessageInsert, p as MessageRow, R as RepoInsert, q as RepoRow, S as SerializedSessionInsert, r as SerializedSessionRow, s as SessionEnvSelectionInsert, t as SessionEnvSelectionRow, u as SessionInsert, v as SessionMCPServerInsert, w as SessionMCPServerRow, x as SessionRow, T as TaskInsert, y as TaskRow, z as ThreadSessionMapInsert, E as ThreadSessionMapRow, U as UserInsert, F as UserMCPOAuthTokenInsert, H as UserMCPOAuthTokenRow, I as UserRow, W as WorktreeInsert, J as WorktreeRow, K as createDatabase, L as createDatabaseAsync, N as createLocalDatabase, O as getDatabaseUrl, P as sessionsRelations, Q as worktreesRelations } from '../client-CemqXk0v.cjs';
 import { LibSQLDatabase } from 'drizzle-orm/libsql';
 import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
 import { PgTable } from 'drizzle-orm/pg-core';
@@ -11,16 +11,16 @@ import * as drizzle_orm_sqlite_core from 'drizzle-orm/sqlite-core';
 import { SQLiteTable } from 'drizzle-orm/sqlite-core';
 import { W as WorktreeID, B as BoardID, e as UUID$1, M as MessageID, S as SessionID, T as TaskID, f as UserID } from '../id-CoIbY_uc.cjs';
 import { A as Artifact, a as ArtifactBuildStatus } from '../artifact-B2AqjUMb.cjs';
-import { B as BaseRepository } from '../session-guard-kvAx_8Fb.cjs';
-export { A as AmbiguousIdError, E as EntityNotFoundError, R as RepositoryError, S as SessionRepository, a as SessionWithLastMessage, i as isForeignKeyConstraintError, w as withSessionGuard } from '../session-guard-kvAx_8Fb.cjs';
-import { B as BoardComment } from '../board-comment-DIdOJrSF.cjs';
+import { B as BaseRepository } from '../session-guard-KHh0cnET.cjs';
+export { A as AmbiguousIdError, E as EntityNotFoundError, R as RepositoryError, S as SessionRepository, a as SessionWithLastMessage, i as isForeignKeyConstraintError, w as withSessionGuard } from '../session-guard-KHh0cnET.cjs';
+import { B as BoardComment } from '../board-comment-CCFVVN7K.cjs';
 import { b as BoardEntityObject, h as CardID, B as Board, e as BoardObject, d as BoardExportBlob, i as CardType, C as Card, k as CardWithType, j as CardTypeID } from '../board-D7SnPqp-.cjs';
-import { a as GatewayChannel, b as GatewayChannelID, T as ThreadSessionMap, e as ThreadStatus, d as ThreadSessionMapID } from '../gateway-BnOlAelY.cjs';
+import { a as GatewayChannel, b as GatewayChannelID, T as ThreadSessionMap, e as ThreadStatus, d as ThreadSessionMapID } from '../gateway-BWq4j_Ll.cjs';
 import { f as MCPServer, C as CreateMCPServerInput, U as UpdateMCPServerInput, g as MCPServerFilters, h as MCPServerID, S as SessionMCPServer } from '../mcp-DC7GLAg2.cjs';
-import { M as Message } from '../message-DinITA7a.cjs';
+import { M as Message } from '../message-CSWOsdcZ.cjs';
 import { R as Repo, b as RepoEnvironment, h as Worktree } from '../repo-Ckl-vaAk.cjs';
-import { S as SessionEnvSelection, g as User } from '../user-DkNdeFoz.cjs';
-import { T as Task } from '../task-wht1RJEL.cjs';
+import { S as SessionEnvSelection, q as User, b as AgenticToolsConfig } from '../user-CpfkcV2C.cjs';
+import { T as Task, d as TaskStatus, c as TaskMetadata } from '../task-C2Hy7H6u.cjs';
 import { c as AgenticToolName, g as CodexSandboxMode, d as CodexApprovalPolicy } from '../agentic-tool-BulhIUGb.cjs';
 import { b as SessionStatus, a as Session, P as PermissionMode, E as EffortLevel } from '../session-MNU4BQv4.cjs';
 import '../context-BpkCELpO.cjs';
@@ -1146,28 +1146,6 @@ declare class MessagesRepository {
      * Delete a single message
      */
     delete(messageId: MessageID): Promise<void>;
-    /**
-     * Create a queued message
-     * NOTE: Queued messages always store prompt as string content
-     * This ensures compatibility with prompt execution endpoint
-     *
-     * @param sessionId - Session to queue message for
-     * @param prompt - Message content (string)
-     * @param metadata - Optional metadata (e.g., is_agor_callback, source, child_session_id)
-     */
-    createQueued(sessionId: SessionID, prompt: string, metadata?: Record<string, unknown>): Promise<Message>;
-    /**
-     * Find queued messages for a session
-     */
-    findQueued(sessionId: SessionID): Promise<Message[]>;
-    /**
-     * Get next queued message
-     */
-    getNextQueued(sessionId: SessionID): Promise<Message | null>;
-    /**
-     * Delete queued message (when processing or user cancels)
-     */
-    deleteQueued(messageId: MessageID): Promise<void>;
 }
 
 /**
@@ -1466,7 +1444,12 @@ declare class TaskRepository implements BaseRepository<Task, Partial<Task>> {
     findRunning(): Promise<Task[]>;
     /**
      * Find orphaned tasks (running, stopping, awaiting permission, or awaiting input)
-     * These are tasks that were interrupted when daemon stopped
+     * These are tasks that were interrupted when daemon stopped.
+     *
+     * NOTE: QUEUED tasks are intentionally NOT considered orphans — they were
+     * never spawned, so they have no executor to recover. The startup queue
+     * drainer (see register-routes.ts processNextQueuedTask) picks them up
+     * once any session goes idle. See never-lose-prompt §C.
      */
     findOrphaned(): Promise<Task[]>;
     /**
@@ -1484,6 +1467,38 @@ declare class TaskRepository implements BaseRepository<Task, Partial<Task>> {
      * Delete task by ID
      */
     delete(id: string): Promise<void>;
+    /**
+     * Create a pending task — either CREATED (will spawn immediately) or
+     * QUEUED (will drain later) — owning the sentinel defaults that the
+     * caller would otherwise have to assemble by hand.
+     *
+     * For QUEUED tasks, `queue_position = max(queue_position) + 1` is computed
+     * inside a transaction so concurrent writers don't both observe the same
+     * max and collide. (The schema also carries a partial unique index on
+     * `(session_id, queue_position) WHERE status='queued'` as a belt-and-
+     * suspenders against transaction-isolation surprises.)
+     *
+     * Sentinel contract: while a task carries `message_range.start_index = -1`
+     * and `git_state.sha_at_start = ''`, it has not yet been pinned to real
+     * conversation/git state. spawnTaskExecutor is the sole place that
+     * overwrites these on the way to RUNNING.
+     */
+    createPending(input: {
+        session_id: SessionID;
+        full_prompt: string;
+        created_by: string;
+        status: typeof TaskStatus.CREATED | typeof TaskStatus.QUEUED;
+        metadata?: TaskMetadata;
+    }): Promise<Task>;
+    /**
+     * Find all QUEUED tasks for a session, ordered by queue_position ascending.
+     */
+    findQueued(sessionId: string): Promise<Task[]>;
+    /**
+     * Return the next QUEUED task to drain (lowest queue_position) for a session,
+     * or null if none.
+     */
+    getNextQueued(sessionId: string): Promise<Task | null>;
     /**
      * Count tasks for a session
      */
@@ -1700,7 +1715,9 @@ declare class UserMCPOAuthTokenRepository {
 /**
  * Users Repository
  *
- * Type-safe CRUD operations for users with encrypted API key management.
+ * Type-safe CRUD operations for users with encrypted per-tool credential management.
+ * Credentials live under `data.agentic_tools[toolName][envVarName]`, encrypted at rest;
+ * the public DTO (User.agentic_tools) exposes boolean presence flags only.
  */
 
 /**
@@ -1710,8 +1727,9 @@ declare class UsersRepository implements BaseRepository<User, Partial<User>> {
     private db;
     constructor(db: Database);
     /**
-     * Convert database row to User type
-     * Note: Converts encrypted API keys (strings) to boolean flags for API exposure
+     * Convert database row to User type.
+     * Converts the encrypted `agentic_tools` blob to a boolean presence DTO so
+     * decrypted credentials never leave this repository.
      */
     private rowToUser;
     /**
@@ -1756,28 +1774,37 @@ declare class UsersRepository implements BaseRepository<User, Partial<User>> {
      */
     private getRawRow;
     /**
-     * Get decrypted API key for a user and service
+     * Get the full decrypted credential bag for a single agentic tool.
      *
-     * @param userId - User ID
-     * @param service - Service name ('anthropic', 'openai', 'gemini')
-     * @returns Decrypted API key or null if not found
+     * Returns `null` when the user has no stored config for that tool.
+     * Fields that fail to decrypt are dropped from the returned object and
+     * logged — callers see "missing field" rather than a thrown error so a
+     * single corrupt value doesn't poison an entire SDK spawn.
      */
-    getApiKey(userId: string, service: 'anthropic' | 'openai' | 'gemini' | 'copilot'): Promise<string | null>;
+    getToolConfig<T extends AgenticToolName>(userId: string, tool: T): Promise<AgenticToolsConfig[T] | null>;
     /**
-     * Set encrypted API key for a user and service
+     * Get a single decrypted credential field for a tool.
      *
-     * @param userId - User ID
-     * @param service - Service name ('anthropic', 'openai', 'gemini')
-     * @param apiKey - Plaintext API key to encrypt and store
+     * Returns `null` when the field is unset OR when decryption fails (logged).
+     * Throws only on storage-layer errors, not on missing/corrupt values.
      */
-    setApiKey(userId: string, service: 'anthropic' | 'openai' | 'gemini' | 'copilot', apiKey: string): Promise<void>;
+    getToolConfigField<T extends AgenticToolName>(userId: string, tool: T, field: keyof NonNullable<AgenticToolsConfig[T]> & string): Promise<string | null>;
     /**
-     * Delete API key for a user and service
+     * Set (encrypt + persist) a single credential field for a tool.
      *
-     * @param userId - User ID
-     * @param service - Service name ('anthropic', 'openai', 'gemini')
+     * Field names are env-var-shaped (e.g. ANTHROPIC_API_KEY, ANTHROPIC_BASE_URL)
+     * and are stored encrypted regardless of whether the value is a secret —
+     * keeping the on-disk shape uniform avoids decrypt-vs-plain branching at
+     * read time. UI controls own the text-vs-password rendering distinction.
      */
-    deleteApiKey(userId: string, service: 'anthropic' | 'openai' | 'gemini' | 'copilot'): Promise<void>;
+    setToolConfigField<T extends AgenticToolName>(userId: string, tool: T, field: keyof NonNullable<AgenticToolsConfig[T]> & string, value: string): Promise<void>;
+    /**
+     * Delete a single credential field for a tool.
+     *
+     * If the tool's bucket becomes empty after the delete, the bucket itself is
+     * removed so `data.agentic_tools` doesn't accumulate empty objects.
+     */
+    deleteToolConfigField<T extends AgenticToolName>(userId: string, tool: T, field: keyof NonNullable<AgenticToolsConfig[T]> & string): Promise<void>;
 }
 
 /**
@@ -2887,14 +2914,31 @@ declare const tasks: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "tasks";
             dataType: "string";
             columnType: "PgText";
-            data: "timed_out" | "failed" | "stopped" | "running" | "stopping" | "awaiting_permission" | "awaiting_input" | "completed" | "created";
+            data: "timed_out" | "failed" | "stopped" | "running" | "stopping" | "awaiting_permission" | "awaiting_input" | "completed" | "queued" | "created";
             driverParam: string;
             notNull: true;
             hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: ["created", "running", "stopping", "awaiting_permission", "awaiting_input", "timed_out", "completed", "failed", "stopped"];
+            enumValues: ["queued", "created", "running", "stopping", "awaiting_permission", "awaiting_input", "timed_out", "completed", "failed", "stopped"];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        queue_position: drizzle_orm_pg_core.PgColumn<{
+            name: "queue_position";
+            tableName: "tasks";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
             baseColumn: never;
             identity: undefined;
             generated: undefined;
@@ -2941,7 +2985,6 @@ declare const tasks: drizzle_orm_pg_core.PgTableWithColumns<{
             dataType: "json";
             columnType: "PgJsonb";
             data: {
-                description: string;
                 full_prompt: string;
                 message_range: Task["message_range"];
                 git_state: Task["git_state"];
@@ -2955,6 +2998,7 @@ declare const tasks: drizzle_orm_pg_core.PgTableWithColumns<{
                 computed_context_window?: Task["computed_context_window"];
                 report?: Task["report"];
                 permission_request?: Task["permission_request"];
+                metadata?: Task["metadata"];
             };
             driverParam: unknown;
             notNull: true;
@@ -2968,7 +3012,6 @@ declare const tasks: drizzle_orm_pg_core.PgTableWithColumns<{
             generated: undefined;
         }, {}, {
             $type: {
-                description: string;
                 full_prompt: string;
                 message_range: Task["message_range"];
                 git_state: Task["git_state"];
@@ -2982,6 +3025,7 @@ declare const tasks: drizzle_orm_pg_core.PgTableWithColumns<{
                 computed_context_window?: Task["computed_context_window"];
                 report?: Task["report"];
                 permission_request?: Task["permission_request"];
+                metadata?: Task["metadata"];
             };
         }>;
     };
@@ -3084,20 +3128,37 @@ declare const tasks: drizzle_orm_pg_core.PgTableWithColumns<{
             tableName: "tasks";
             dataType: "string";
             columnType: "SQLiteText";
-            data: "timed_out" | "failed" | "stopped" | "running" | "stopping" | "awaiting_permission" | "awaiting_input" | "completed" | "created";
+            data: "timed_out" | "failed" | "stopped" | "running" | "stopping" | "awaiting_permission" | "awaiting_input" | "completed" | "queued" | "created";
             driverParam: string;
             notNull: true;
             hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: ["created", "running", "stopping", "awaiting_permission", "awaiting_input", "timed_out", "completed", "failed", "stopped"];
+            enumValues: ["queued", "created", "running", "stopping", "awaiting_permission", "awaiting_input", "timed_out", "completed", "failed", "stopped"];
             baseColumn: never;
             identity: undefined;
             generated: undefined;
         }, {}, {
             length: number | undefined;
         }>;
+        queue_position: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: "queue_position";
+            tableName: "tasks";
+            dataType: "number";
+            columnType: "SQLiteInteger";
+            data: number;
+            driverParam: number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         created_by: drizzle_orm_sqlite_core.SQLiteColumn<{
             name: "created_by";
             tableName: "tasks";
@@ -3142,7 +3203,6 @@ declare const tasks: drizzle_orm_pg_core.PgTableWithColumns<{
             dataType: "json";
             columnType: "SQLiteTextJson";
             data: {
-                description: string;
                 full_prompt: string;
                 message_range: Task["message_range"];
                 git_state: Task["git_state"];
@@ -3156,6 +3216,7 @@ declare const tasks: drizzle_orm_pg_core.PgTableWithColumns<{
                 computed_context_window?: Task["computed_context_window"];
                 report?: Task["report"];
                 permission_request?: Task["permission_request"];
+                metadata?: Task["metadata"];
             };
             driverParam: string;
             notNull: true;
@@ -3169,7 +3230,6 @@ declare const tasks: drizzle_orm_pg_core.PgTableWithColumns<{
             generated: undefined;
         }, {}, {
             $type: {
-                description: string;
                 full_prompt: string;
                 message_range: Task["message_range"];
                 git_state: Task["git_state"];
@@ -3183,6 +3243,7 @@ declare const tasks: drizzle_orm_pg_core.PgTableWithColumns<{
                 computed_context_window?: Task["computed_context_window"];
                 report?: Task["report"];
                 permission_request?: Task["permission_request"];
+                metadata?: Task["metadata"];
             };
         }>;
     };
@@ -3368,40 +3429,6 @@ declare const messages: drizzle_orm_pg_core.PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
-        status: drizzle_orm_pg_core.PgColumn<{
-            name: "status";
-            tableName: "messages";
-            dataType: "string";
-            columnType: "PgText";
-            data: "queued";
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: ["queued"];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        queue_position: drizzle_orm_pg_core.PgColumn<{
-            name: "queue_position";
-            tableName: "messages";
-            dataType: "number";
-            columnType: "PgInteger";
-            data: number;
-            driverParam: string | number;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
         data: drizzle_orm_pg_core.PgColumn<{
             name: string;
             tableName: "messages";
@@ -3619,42 +3646,6 @@ declare const messages: drizzle_orm_pg_core.PgTableWithColumns<{
         }, {}, {
             length: number | undefined;
         }>;
-        status: drizzle_orm_sqlite_core.SQLiteColumn<{
-            name: "status";
-            tableName: "messages";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: "queued";
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: ["queued"];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number | undefined;
-        }>;
-        queue_position: drizzle_orm_sqlite_core.SQLiteColumn<{
-            name: "queue_position";
-            tableName: "messages";
-            dataType: "number";
-            columnType: "SQLiteInteger";
-            data: number;
-            driverParam: number;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
         data: drizzle_orm_sqlite_core.SQLiteColumn<{
             name: string;
             tableName: "messages";
@@ -6085,11 +6076,24 @@ declare const users: drizzle_orm_pg_core.PgTableWithColumns<{
             data: {
                 avatar?: string;
                 preferences?: Record<string, unknown>;
-                api_keys?: {
-                    ANTHROPIC_API_KEY?: string;
-                    OPENAI_API_KEY?: string;
-                    GEMINI_API_KEY?: string;
-                    COPILOT_GITHUB_TOKEN?: string;
+                agentic_tools?: {
+                    "claude-code"?: {
+                        ANTHROPIC_API_KEY?: string;
+                        CLAUDE_CODE_OAUTH_TOKEN?: string;
+                        ANTHROPIC_AUTH_TOKEN?: string;
+                        ANTHROPIC_BASE_URL?: string;
+                    };
+                    codex?: {
+                        OPENAI_API_KEY?: string;
+                        OPENAI_BASE_URL?: string;
+                    };
+                    gemini?: {
+                        GEMINI_API_KEY?: string;
+                    };
+                    copilot?: {
+                        COPILOT_GITHUB_TOKEN?: string;
+                    };
+                    opencode?: Record<string, never>;
                 };
                 env_vars?: Record<string, string | {
                     value_encrypted: string;
@@ -6161,11 +6165,24 @@ declare const users: drizzle_orm_pg_core.PgTableWithColumns<{
             $type: {
                 avatar?: string;
                 preferences?: Record<string, unknown>;
-                api_keys?: {
-                    ANTHROPIC_API_KEY?: string;
-                    OPENAI_API_KEY?: string;
-                    GEMINI_API_KEY?: string;
-                    COPILOT_GITHUB_TOKEN?: string;
+                agentic_tools?: {
+                    "claude-code"?: {
+                        ANTHROPIC_API_KEY?: string;
+                        CLAUDE_CODE_OAUTH_TOKEN?: string;
+                        ANTHROPIC_AUTH_TOKEN?: string;
+                        ANTHROPIC_BASE_URL?: string;
+                    };
+                    codex?: {
+                        OPENAI_API_KEY?: string;
+                        OPENAI_BASE_URL?: string;
+                    };
+                    gemini?: {
+                        GEMINI_API_KEY?: string;
+                    };
+                    copilot?: {
+                        COPILOT_GITHUB_TOKEN?: string;
+                    };
+                    opencode?: Record<string, never>;
                 };
                 env_vars?: Record<string, string | {
                     value_encrypted: string;
@@ -6439,11 +6456,24 @@ declare const users: drizzle_orm_pg_core.PgTableWithColumns<{
             data: {
                 avatar?: string;
                 preferences?: Record<string, unknown>;
-                api_keys?: {
-                    ANTHROPIC_API_KEY?: string;
-                    OPENAI_API_KEY?: string;
-                    GEMINI_API_KEY?: string;
-                    COPILOT_GITHUB_TOKEN?: string;
+                agentic_tools?: {
+                    "claude-code"?: {
+                        ANTHROPIC_API_KEY?: string;
+                        CLAUDE_CODE_OAUTH_TOKEN?: string;
+                        ANTHROPIC_AUTH_TOKEN?: string;
+                        ANTHROPIC_BASE_URL?: string;
+                    };
+                    codex?: {
+                        OPENAI_API_KEY?: string;
+                        OPENAI_BASE_URL?: string;
+                    };
+                    gemini?: {
+                        GEMINI_API_KEY?: string;
+                    };
+                    copilot?: {
+                        COPILOT_GITHUB_TOKEN?: string;
+                    };
+                    opencode?: Record<string, never>;
                 };
                 env_vars?: Record<string, string | {
                     value_encrypted: string;
@@ -6515,11 +6545,24 @@ declare const users: drizzle_orm_pg_core.PgTableWithColumns<{
             $type: {
                 avatar?: string;
                 preferences?: Record<string, unknown>;
-                api_keys?: {
-                    ANTHROPIC_API_KEY?: string;
-                    OPENAI_API_KEY?: string;
-                    GEMINI_API_KEY?: string;
-                    COPILOT_GITHUB_TOKEN?: string;
+                agentic_tools?: {
+                    "claude-code"?: {
+                        ANTHROPIC_API_KEY?: string;
+                        CLAUDE_CODE_OAUTH_TOKEN?: string;
+                        ANTHROPIC_AUTH_TOKEN?: string;
+                        ANTHROPIC_BASE_URL?: string;
+                    };
+                    codex?: {
+                        OPENAI_API_KEY?: string;
+                        OPENAI_BASE_URL?: string;
+                    };
+                    gemini?: {
+                        GEMINI_API_KEY?: string;
+                    };
+                    copilot?: {
+                        COPILOT_GITHUB_TOKEN?: string;
+                    };
+                    opencode?: Record<string, never>;
                 };
                 env_vars?: Record<string, string | {
                     value_encrypted: string;