botmancers 0.0.0-stage → 0.3.0

package/app/.next/server/chunks/[root-of-the-server]__0izjfmr._.js

@@ -0,0 +1,1424 @@
+module.exports=[85148,(e,t,n)=>{t.exports=e.x("better-sqlite3-90e2652d1716b047",()=>require("better-sqlite3-90e2652d1716b047"))},62294,64974,11626,35613,30098,e=>{"use strict";var t=e.i(85148),n=e.i(22734),r=e.i(14747),i=e.i(54799),a=e.i(62349),s=e.i(16979);let o=Object.freeze(["conversation","implementation","review","revision"]),d=Object.freeze(["readonly","edit"]);Object.freeze(["ui","api","wake","continuation"]);let _=Object.freeze({conversation:"readonly",implementation:"edit",review:"readonly",revision:"edit"});function E(e){return"string"==typeof e&&o.includes(e)}function u(e,t){return{ok:!1,code:e,reason:t}}function c(e){var t,n,r,i;if(!E(e.executionKind))return u("unknown_execution_kind",`Unknown execution kind ${JSON.stringify(String(e.executionKind))}.`);let a=e.executionKind,s=(t=e.entryPoint,n=a,r=e.wakeSyntax,i=!0===e.resumesWorkRequest,"ui"===t||"api"===t?"conversation"!==n?{code:"unsupported_authority",reason:`A direct message runs as a read-only conversation turn, not ${n}.`}:"direct_message_conversation":"continuation"===t?"conversation"!==n?{code:"unsupported_authority",reason:`A coordinator continuation runs as a read-only conversation turn, not ${n}.`}:"coordinator_continuation":"wake"!==t?{code:"unsupported_authority",reason:"Unknown policy entry point."}:"legacy"===r?"conversation"!==n?{code:"unsupported_authority",reason:`A legacy WAKE directive runs as a conversation turn, not ${n}.`}:"legacy_wake_conversation":"structured"!==r?{code:"unsupported_authority",reason:"Unknown Wake syntax."}:"revision"===n!==i?{code:"unsupported_authority",reason:"revision"===n?"A revision names the Work Request it resumes.":"Only a revision resumes a Work Request."}:"structured_wake");return"string"!=typeof s?u(s.code,s.reason):{ok:!0,policy:Object.freeze({policy_version:1,execution_kind:a,tool_profile:_[a],entry_point:e.entryPoint,rule:s})}}let T=new Set(["policy_version","execution_kind","tool_profile","entry_point","rule"]);function l(e){if(!e||"object"!=typeof e||Array.isArray(e))return u("malformed_policy","The execution policy snapshot is missing.");let t=Object.keys(e);if(t.length!==T.size||t.some(e=>!T.has(e)))return u("malformed_policy","The execution policy snapshot has unexpected fields.");if(1!==e.policy_version)return u("malformed_policy","Unsupported execution policy version.");if(!E(e.execution_kind))return u("unknown_execution_kind",`Unknown execution kind ${JSON.stringify(String(e.execution_kind))}.`);if(!d.includes(e.tool_profile))return u("unsupported_authority",`Unsupported tool profile ${JSON.stringify(String(e.tool_profile))}.`);if(_[e.execution_kind]!==e.tool_profile)return u("unsupported_authority",`Execution kind ${e.execution_kind} requires the ${_[e.execution_kind]} tool profile.`);let n={direct_message_conversation:{entry:["ui","api"],kinds:["conversation"]},legacy_wake_conversation:{entry:["wake"],kinds:["conversation"]},coordinator_continuation:{entry:["continuation"],kinds:["conversation"]},structured_wake:{entry:["wake"],kinds:[...o]}},r="string"==typeof e.rule?n[e.rule]:void 0;return r&&r.entry.includes(e.entry_point)?r.kinds.includes(e.execution_kind)?{ok:!0,policy:Object.freeze({...e})}:u("unsupported_authority",`Rule ${e.rule} does not grant ${e.execution_kind}.`):u("malformed_policy","The execution policy rule does not match its entry point.")}e.s(["TOOL_PROFILE_FOR_KIND",0,_,"authorizeWorkRequest",0,function(e){let t;if(!E(e.execution_kind))return u("unknown_execution_kind",`Unknown execution kind ${JSON.stringify(String(e.execution_kind))}.`);try{t="string"==typeof e.policy_snapshot?JSON.parse(e.policy_snapshot):null}catch{return u("malformed_policy","The policy snapshot is not valid JSON.")}let n=l(t&&"object"==typeof t&&!Array.isArray(t)?t.execution_policy:void 0);return n.ok?n.policy.execution_kind!==e.execution_kind||n.policy.tool_profile!==e.tool_profile?u("unsupported_authority","The Work Request authority does not match its policy snapshot."):t.tool_profile!==e.tool_profile?u("malformed_policy","The policy snapshot tool profile does not match the Work Request."):n:n},"isExecutionKind",0,E,"selectExecutionPolicy",0,c,"validateExecutionPolicy",0,l],64974);let p=Object.freeze({max_attempts:1,base_delay_ms:1e3,max_delay_ms:6e4,attempt_timeout_ms:null});function N(e){if(void 0===e||!/^\d+$/.test(e.trim()))return null;let t=Number(e.trim());return Number.isSafeInteger(t)&&t>0?t:null}function R(e=process.env){let t=N(e.BOTMANCERS_RETRY_MAX_ATTEMPTS),n=N(e.BOTMANCERS_RETRY_BASE_DELAY_MS)??p.base_delay_ms,r=N(e.BOTMANCERS_RETRY_MAX_DELAY_MS)??p.max_delay_ms,i=m({max_attempts:null===t?p.max_attempts:Math.min(t,10),base_delay_ms:n,max_delay_ms:Math.max(r,n),attempt_timeout_ms:N(e.BOTMANCERS_ATTEMPT_TIMEOUT_MS)});return{deadlineMs:N(e.BOTMANCERS_REQUEST_DEADLINE_MS),retryPolicy:i.ok?i.policy:{...p}}}function m(e){if(!e||"object"!=typeof e||Array.isArray(e))return{ok:!1,reason:"A retry policy is an object."};let t=e=>"number"==typeof e&&Number.isSafeInteger(e);if(!t(e.max_attempts)||e.max_attempts<1||e.max_attempts>10)return{ok:!1,reason:"max_attempts must be an integer from 1 to 10."};if(!t(e.base_delay_ms)||e.base_delay_ms<0)return{ok:!1,reason:"base_delay_ms must be a non-negative integer."};if(!t(e.max_delay_ms)||e.max_delay_ms<e.base_delay_ms)return{ok:!1,reason:"max_delay_ms must be an integer no smaller than base_delay_ms."};let n=e.attempt_timeout_ms??null;return null!==n&&(!t(n)||n<1)?{ok:!1,reason:"attempt_timeout_ms must be a positive integer or null."}:{ok:!0,policy:{max_attempts:e.max_attempts,base_delay_ms:e.base_delay_ms,max_delay_ms:e.max_delay_ms,attempt_timeout_ms:n}}}let L=["agent_deck_token_missing","agent_deck_unauthorized","agent_deck_forbidden"],O={unavailable:"retryable",runtime_failed:"retryable",timed_out:"retryable",launch_failed:"terminal",unsupported_authority:"terminal",result_contract:"terminal",cancelled:"terminal",session_mismatch:"manual_attention"};e.s(["attemptDeadline",0,function(e,t,n){let r=null===e.attempt_timeout_ms?null:n+e.attempt_timeout_ms;return null===r?t:null===t?r:Math.min(r,t)},"classifyFailure",0,function(e,t=null){return t&&L.includes(t)?"manual_attention":O[e??"runtime_failed"]??"terminal"},"decideRetry",0,function(e){var t;let n;if("terminal"===e.disposition)return{action:"fail",disposition:"terminal"};let r=e.attemptCount<e.policy.max_attempts;if("manual_attention"===e.disposition)return r?{action:"attention"}:{action:"fail",disposition:"terminal"};if(!r)return{action:"exhausted"};let i=e.attemptCount,a=(t=e.policy,n=Math.max(0,i-1),Math.min(t.max_delay_ms,t.base_delay_ms*2**Math.min(n,30))),s=e.now+a;return null!==e.deadlineAt&&s>=e.deadlineAt?{action:"deadline"}:{action:"retry",nextEligibleAt:s,delayMs:a,retry:i}},"requestControlDefaultsFromEnv",0,R,"storedRetryPolicy",0,function(e){if(!e)return{...p};try{let t=m(JSON.parse(e));return t.ok?t.policy:{...p}}catch{return{...p}}},"validateRetryPolicy",0,m],11626);let g=["queued","blocked","running","waiting","completed","failed","cancelled"],I=["completed","failed","cancelled"],A={queued:["running","blocked","cancelled","failed"],blocked:["queued","cancelled","failed"],running:["waiting","queued","completed","failed","cancelled"],waiting:["running","queued","cancelled","failed"],completed:[],failed:[],cancelled:[]},S=["dispatcher","ui_message","ui_continuation"];class k extends Error{code;constructor(e,t){super(t),this.code=e}}let v=I.map(e=>`'${e}'`).join(", "),f=g.map(e=>`'${e}'`).join(", "),q=[{version:1,name:"core_engine_tables",up:e=>{e.exec(`
+        CREATE TABLE work_request_transitions (
+          from_state TEXT NOT NULL,
+          to_state TEXT NOT NULL,
+          PRIMARY KEY (from_state, to_state)
+        );
+
+        CREATE TABLE work_requests (
+          id TEXT PRIMARY KEY,
+          source_conversation_id TEXT NOT NULL,
+          source_event_id TEXT NOT NULL,
+          requester_kind TEXT NOT NULL CHECK (requester_kind IN ('person', 'bot', 'service')),
+          requester_id TEXT NOT NULL,
+          target_agent_id TEXT NOT NULL,
+          intent TEXT NOT NULL,
+          execution_kind TEXT NOT NULL CHECK (execution_kind IN ('conversation', 'implementation', 'review', 'revision')),
+          tool_profile TEXT NOT NULL CHECK (tool_profile IN ('readonly', 'edit')),
+          parent_request_id TEXT,
+          root_request_id TEXT NOT NULL,
+          wake_event_id TEXT,
+          depth INTEGER NOT NULL DEFAULT 0 CHECK (depth >= 0),
+          idempotency_key TEXT NOT NULL CHECK (length(idempotency_key) > 0),
+          request_hash TEXT NOT NULL,
+          policy_snapshot TEXT NOT NULL,
+          state TEXT NOT NULL CHECK (state IN (${f})),
+          state_reason TEXT,
+          result TEXT,
+          error_code TEXT,
+          error_message TEXT,
+          version INTEGER NOT NULL DEFAULT 0,
+          legacy_agent_request_id TEXT UNIQUE,
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          terminal_at INTEGER,
+          CHECK ((state IN (${v})) = (terminal_at IS NOT NULL)),
+          FOREIGN KEY (source_conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (target_agent_id) REFERENCES bots(id),
+          FOREIGN KEY (parent_request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (root_request_id) REFERENCES work_requests(id)
+        );
+
+        CREATE UNIQUE INDEX idx_work_requests_idempotency
+          ON work_requests(requester_kind, requester_id, idempotency_key);
+        CREATE INDEX idx_work_requests_conversation
+          ON work_requests(source_conversation_id, created_at);
+        CREATE INDEX idx_work_requests_state
+          ON work_requests(state, created_at);
+        CREATE INDEX idx_work_requests_parent
+          ON work_requests(parent_request_id) WHERE parent_request_id IS NOT NULL;
+
+        CREATE TABLE session_bindings (
+          id TEXT PRIMARY KEY,
+          agent_id TEXT NOT NULL,
+          adapter TEXT NOT NULL,
+          conversation_id TEXT,
+          request_id TEXT,
+          external_session_id TEXT NOT NULL,
+          source_attempt_id TEXT,
+          created_at INTEGER NOT NULL,
+          released_at INTEGER,
+          CHECK (conversation_id IS NOT NULL OR request_id IS NOT NULL),
+          FOREIGN KEY (agent_id) REFERENCES bots(id),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (source_attempt_id) REFERENCES work_attempts(id)
+        );
+
+        CREATE UNIQUE INDEX idx_session_bindings_active
+          ON session_bindings(agent_id, adapter, IFNULL(conversation_id, ''), IFNULL(request_id, ''))
+          WHERE released_at IS NULL;
+
+        CREATE TABLE work_attempts (
+          id TEXT PRIMARY KEY,
+          request_id TEXT NOT NULL,
+          attempt_number INTEGER NOT NULL CHECK (attempt_number >= 1),
+          kind TEXT NOT NULL CHECK (kind IN ('launch', 'resume')),
+          adapter TEXT NOT NULL CHECK (length(adapter) > 0),
+          tool_profile TEXT NOT NULL CHECK (tool_profile IN ('readonly', 'edit')),
+          launch_snapshot TEXT NOT NULL,
+          launch_snapshot_hash TEXT NOT NULL,
+          resumed_session_binding_id TEXT,
+          external_run_id TEXT,
+          external_session_id TEXT,
+          outcome TEXT CHECK (outcome IN ('succeeded', 'failed', 'cancelled', 'interrupted', 'timed_out')),
+          error_category TEXT,
+          error_message TEXT,
+          artifacts TEXT NOT NULL DEFAULT '[]',
+          started_at INTEGER NOT NULL,
+          finished_at INTEGER,
+          CHECK ((outcome IS NULL) = (finished_at IS NULL)),
+          CHECK ((kind = 'resume') = (resumed_session_binding_id IS NOT NULL)),
+          UNIQUE (request_id, attempt_number),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (resumed_session_binding_id) REFERENCES session_bindings(id)
+        );
+
+        CREATE UNIQUE INDEX idx_work_attempts_open
+          ON work_attempts(request_id) WHERE finished_at IS NULL;
+
+        CREATE TABLE engine_events (
+          id TEXT PRIMARY KEY,
+          request_id TEXT NOT NULL,
+          sequence INTEGER NOT NULL CHECK (sequence >= 1),
+          attempt_id TEXT,
+          type TEXT NOT NULL CHECK (length(type) > 0),
+          data TEXT,
+          created_at INTEGER NOT NULL,
+          UNIQUE (request_id, sequence),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (attempt_id) REFERENCES work_attempts(id)
+        );
+
+        -- Foreign keys (insert/update side).
+        CREATE TRIGGER trg_work_requests_fk_insert BEFORE INSERT ON work_requests
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.source_conversation_id')
+            WHERE NOT EXISTS (SELECT 1 FROM conversations WHERE id = NEW.source_conversation_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.target_agent_id')
+            WHERE NOT EXISTS (SELECT 1 FROM bots WHERE id = NEW.target_agent_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.parent_request_id')
+            WHERE NEW.parent_request_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.parent_request_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.root_request_id')
+            WHERE NEW.root_request_id <> NEW.id
+              AND NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.root_request_id);
+        END;
+
+        -- Identity, lineage, and policy are fixed at intake.
+        CREATE TRIGGER trg_work_requests_immutable BEFORE UPDATE OF
+          id, source_conversation_id, source_event_id, requester_kind, requester_id,
+          target_agent_id, intent, execution_kind, tool_profile, parent_request_id,
+          root_request_id, wake_event_id, depth, idempotency_key, request_hash,
+          policy_snapshot, legacy_agent_request_id, created_at
+        ON work_requests
+        BEGIN
+          SELECT RAISE(ABORT, 'work_requests identity, lineage, and policy are immutable');
+        END;
+
+        CREATE TRIGGER trg_work_requests_transition BEFORE UPDATE OF state ON work_requests
+        WHEN NEW.state <> OLD.state
+        BEGIN
+          SELECT RAISE(ABORT, 'invalid work_requests state transition')
+            WHERE NOT EXISTS (
+              SELECT 1 FROM work_request_transitions WHERE from_state = OLD.state AND to_state = NEW.state
+            );
+        END;
+
+        CREATE TRIGGER trg_work_requests_terminal BEFORE UPDATE ON work_requests
+        WHEN OLD.state IN (${v})
+        BEGIN
+          SELECT RAISE(ABORT, 'terminal work_requests are immutable');
+        END;
+
+        CREATE TRIGGER trg_session_bindings_fk BEFORE INSERT ON session_bindings
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.conversation_id')
+            WHERE NEW.conversation_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM conversations WHERE id = NEW.conversation_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.request_id')
+            WHERE NEW.request_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.request_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.source_attempt_id')
+            WHERE NEW.source_attempt_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM work_attempts WHERE id = NEW.source_attempt_id);
+        END;
+
+        -- A binding's session value is opaque and never rewritten; only
+        -- release (supersession) may change.
+        CREATE TRIGGER trg_session_bindings_immutable BEFORE UPDATE OF
+          id, agent_id, adapter, conversation_id, request_id, external_session_id, source_attempt_id, created_at
+        ON session_bindings
+        BEGIN
+          SELECT RAISE(ABORT, 'session_bindings are immutable');
+        END;
+
+        CREATE TRIGGER trg_work_attempts_fk BEFORE INSERT ON work_attempts
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_attempts.request_id')
+            WHERE NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.request_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_attempts.resumed_session_binding_id')
+            WHERE NEW.resumed_session_binding_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM session_bindings WHERE id = NEW.resumed_session_binding_id);
+        END;
+
+        -- Launch snapshot and authority never change after insert.
+        CREATE TRIGGER trg_work_attempts_immutable BEFORE UPDATE OF
+          id, request_id, attempt_number, kind, adapter, tool_profile,
+          launch_snapshot, launch_snapshot_hash, resumed_session_binding_id, started_at
+        ON work_attempts
+        BEGIN
+          SELECT RAISE(ABORT, 'work_attempts launch fields are immutable');
+        END;
+
+        -- External identifiers are recorded once, never rewritten.
+        CREATE TRIGGER trg_work_attempts_external_ids BEFORE UPDATE OF external_run_id, external_session_id ON work_attempts
+        WHEN (OLD.external_run_id IS NOT NULL AND NEW.external_run_id IS NOT OLD.external_run_id)
+          OR (OLD.external_session_id IS NOT NULL AND NEW.external_session_id IS NOT OLD.external_session_id)
+        BEGIN
+          SELECT RAISE(ABORT, 'work_attempts external identifiers are set once');
+        END;
+
+        CREATE TRIGGER trg_work_attempts_finished BEFORE UPDATE ON work_attempts
+        WHEN OLD.finished_at IS NOT NULL
+        BEGIN
+          SELECT RAISE(ABORT, 'finished work_attempts are immutable');
+        END;
+
+        CREATE TRIGGER trg_engine_events_fk BEFORE INSERT ON engine_events
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: engine_events.request_id')
+            WHERE NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.request_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: engine_events.attempt_id')
+            WHERE NEW.attempt_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM work_attempts WHERE id = NEW.attempt_id AND request_id = NEW.request_id);
+        END;
+
+        CREATE TRIGGER trg_engine_events_append_only BEFORE UPDATE ON engine_events
+        BEGIN
+          SELECT RAISE(ABORT, 'engine_events are append-only');
+        END;
+      `);let t=e.prepare("INSERT INTO work_request_transitions (from_state, to_state) VALUES (?, ?)");for(let e of g)for(let n of A[e])t.run(e,n)}},{version:2,name:"core_engine_referential_integrity",up:e=>{e.exec(`
+        -- Foreign keys (delete side): RESTRICT. A referenced row cannot be
+        -- deleted while anything still points at it; deleteEngineRecords
+        -- removes dependants first, in one transaction.
+        CREATE TRIGGER trg_conversations_engine_restrict BEFORE DELETE ON conversations
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.source_conversation_id')
+            WHERE EXISTS (SELECT 1 FROM work_requests WHERE source_conversation_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.conversation_id')
+            WHERE EXISTS (SELECT 1 FROM session_bindings WHERE conversation_id = OLD.id);
+        END;
+
+        CREATE TRIGGER trg_bots_engine_restrict BEFORE DELETE ON bots
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.target_agent_id')
+            WHERE EXISTS (SELECT 1 FROM work_requests WHERE target_agent_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.agent_id')
+            WHERE EXISTS (SELECT 1 FROM session_bindings WHERE agent_id = OLD.id);
+        END;
+
+        CREATE TRIGGER trg_work_requests_restrict BEFORE DELETE ON work_requests
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.parent_request_id')
+            WHERE EXISTS (
+              SELECT 1 FROM work_requests
+              WHERE id <> OLD.id AND (parent_request_id = OLD.id OR root_request_id = OLD.id)
+            );
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_attempts.request_id')
+            WHERE EXISTS (SELECT 1 FROM work_attempts WHERE request_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: engine_events.request_id')
+            WHERE EXISTS (SELECT 1 FROM engine_events WHERE request_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.request_id')
+            WHERE EXISTS (SELECT 1 FROM session_bindings WHERE request_id = OLD.id);
+        END;
+
+        CREATE TRIGGER trg_work_attempts_restrict BEFORE DELETE ON work_attempts
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: engine_events.attempt_id')
+            WHERE EXISTS (SELECT 1 FROM engine_events WHERE attempt_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.source_attempt_id')
+            WHERE EXISTS (SELECT 1 FROM session_bindings WHERE source_attempt_id = OLD.id);
+        END;
+
+        CREATE TRIGGER trg_session_bindings_restrict BEFORE DELETE ON session_bindings
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_attempts.resumed_session_binding_id')
+            WHERE EXISTS (SELECT 1 FROM work_attempts WHERE resumed_session_binding_id = OLD.id);
+        END;
+
+        -- Session continuity: a binding belongs to one Agent and adapter in
+        -- one scope, and its source attempt must come from that scope.
+        CREATE TRIGGER trg_session_bindings_scope BEFORE INSERT ON session_bindings
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.agent_id')
+            WHERE NOT EXISTS (SELECT 1 FROM bots WHERE id = NEW.agent_id);
+          SELECT RAISE(ABORT, 'session binding does not match its work request')
+            WHERE NEW.request_id IS NOT NULL AND NOT EXISTS (
+              SELECT 1 FROM work_requests r
+              WHERE r.id = NEW.request_id AND r.target_agent_id = NEW.agent_id
+                AND (NEW.conversation_id IS NULL OR r.source_conversation_id = NEW.conversation_id)
+            );
+          SELECT RAISE(ABORT, 'session binding does not match its source attempt')
+            WHERE NEW.source_attempt_id IS NOT NULL AND NOT EXISTS (
+              SELECT 1 FROM work_attempts a JOIN work_requests r ON r.id = a.request_id
+              WHERE a.id = NEW.source_attempt_id AND a.adapter = NEW.adapter AND r.target_agent_id = NEW.agent_id
+                AND (NEW.request_id IS NULL OR a.request_id = NEW.request_id)
+                AND (NEW.conversation_id IS NULL OR r.source_conversation_id = NEW.conversation_id)
+            );
+        END;
+
+        -- A resume continues an active binding of the same Agent and
+        -- adapter, from the same conversation and request lineage.
+        CREATE TRIGGER trg_work_attempts_resume_scope BEFORE INSERT ON work_attempts
+        WHEN NEW.resumed_session_binding_id IS NOT NULL
+        BEGIN
+          SELECT RAISE(ABORT, 'resumed session binding does not match the work request')
+            WHERE NOT EXISTS (
+              SELECT 1 FROM session_bindings b
+              JOIN work_requests r ON r.id = NEW.request_id
+              LEFT JOIN work_requests br ON br.id = b.request_id
+              WHERE b.id = NEW.resumed_session_binding_id AND b.released_at IS NULL
+                AND b.agent_id = r.target_agent_id AND b.adapter = NEW.adapter
+                AND (b.conversation_id IS NULL OR b.conversation_id = r.source_conversation_id)
+                AND (b.request_id IS NULL OR br.root_request_id = r.root_request_id)
+            );
+        END;
+      `)}},{version:3,name:"core_engine_hardening",up:e=>{let t=g.flatMap(e=>A[e].map(t=>`'${e}>${t}'`)).join(", ");e.exec(`
+        -- The lifecycle allowlist lives in the trigger itself, so no data
+        -- write can widen or break it. work_request_transitions stays as a
+        -- readable copy and is locked against writes.
+        DROP TRIGGER trg_work_requests_transition;
+        CREATE TRIGGER trg_work_requests_transition BEFORE UPDATE OF state ON work_requests
+        WHEN NEW.state <> OLD.state
+        BEGIN
+          SELECT RAISE(ABORT, 'invalid work_requests state transition')
+            WHERE (OLD.state || '>' || NEW.state) NOT IN (${t});
+        END;
+
+        CREATE TRIGGER trg_work_request_transitions_insert BEFORE INSERT ON work_request_transitions
+        BEGIN
+          SELECT RAISE(ABORT, 'work_request_transitions is read-only');
+        END;
+        CREATE TRIGGER trg_work_request_transitions_update BEFORE UPDATE ON work_request_transitions
+        BEGIN
+          SELECT RAISE(ABORT, 'work_request_transitions is read-only');
+        END;
+        CREATE TRIGGER trg_work_request_transitions_delete BEFORE DELETE ON work_request_transitions
+        BEGIN
+          SELECT RAISE(ABORT, 'work_request_transitions is read-only');
+        END;
+
+        -- Engine events are never deleted one by one. Aggregate cleanup
+        -- (deleteEngineRecords) first marks the requests it removes in
+        -- engine_event_purges; only events of a marked request may go.
+        CREATE TABLE engine_event_purges (
+          request_id TEXT PRIMARY KEY
+        );
+        CREATE TRIGGER trg_engine_events_no_delete BEFORE DELETE ON engine_events
+        BEGIN
+          SELECT RAISE(ABORT, 'engine_events are append-only')
+            WHERE NOT EXISTS (SELECT 1 FROM engine_event_purges WHERE request_id = OLD.request_id);
+        END;
+
+        -- Foreign keys (parent-key update side): RESTRICT.
+        CREATE TRIGGER trg_conversations_engine_restrict_update BEFORE UPDATE OF id ON conversations
+        WHEN NEW.id IS NOT OLD.id
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.source_conversation_id')
+            WHERE EXISTS (SELECT 1 FROM work_requests WHERE source_conversation_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.conversation_id')
+            WHERE EXISTS (SELECT 1 FROM session_bindings WHERE conversation_id = OLD.id);
+        END;
+
+        CREATE TRIGGER trg_bots_engine_restrict_update BEFORE UPDATE OF id ON bots
+        WHEN NEW.id IS NOT OLD.id
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.target_agent_id')
+            WHERE EXISTS (SELECT 1 FROM work_requests WHERE target_agent_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.agent_id')
+            WHERE EXISTS (SELECT 1 FROM session_bindings WHERE agent_id = OLD.id);
+        END;
+
+        -- Attempt kind and continuity agree: only a resume names a binding.
+        -- (Fresh schemas also carry this as a CHECK.)
+        CREATE TRIGGER trg_work_attempts_kind BEFORE INSERT ON work_attempts
+        WHEN (NEW.kind = 'resume') <> (NEW.resumed_session_binding_id IS NOT NULL)
+        BEGIN
+          SELECT RAISE(ABORT, 'work_attempts kind does not match resumed_session_binding_id');
+        END;
+      `)}},{version:4,name:"engine_event_purge_authority",up:e=>{e.exec(`
+        -- Purge authority no longer lives in data: any writer could insert
+        -- an engine_event_purges row and then delete single events. The
+        -- guard now asks engine_event_purge_authorized(), a connection
+        -- function that is true only while deleteEngineRecords removes that
+        -- request whole. Connections without it cannot delete events.
+        DROP TRIGGER trg_engine_events_no_delete;
+        DROP TABLE engine_event_purges;
+        CREATE TRIGGER trg_engine_events_no_delete BEFORE DELETE ON engine_events
+        BEGIN
+          SELECT RAISE(ABORT, 'engine_events are append-only')
+            WHERE NOT engine_event_purge_authorized(OLD.request_id);
+        END;
+      `)}},{version:5,name:"conversation_intakes",up:e=>{e.exec(`
+        -- NOT-465: one row per accepted conversation message, keyed by the
+        -- requester's idempotency key. It names the source event (message)
+        -- and the Work Requests created from it, so an exact retry replays
+        -- the original identifiers whether or not any request was created.
+        CREATE TABLE conversation_intakes (
+          requester_kind TEXT NOT NULL CHECK (requester_kind IN ('person', 'bot', 'service')),
+          requester_id TEXT NOT NULL,
+          idempotency_key TEXT NOT NULL CHECK (length(idempotency_key) > 0),
+          request_hash TEXT NOT NULL,
+          surface TEXT NOT NULL CHECK (surface IN ('ui', 'api')),
+          conversation_id TEXT NOT NULL,
+          source_event_id TEXT NOT NULL,
+          work_request_ids TEXT NOT NULL DEFAULT '[]',
+          created_at INTEGER NOT NULL,
+          PRIMARY KEY (requester_kind, requester_id, idempotency_key)
+        );
+        CREATE INDEX idx_conversation_intakes_conversation ON conversation_intakes(conversation_id);
+      `)}},{version:6,name:"attempt_output",up:e=>{e.exec(`
+        -- NOT-467: the runtime output an Attempt returned, recorded with
+        -- its terminal outcome (null while open or when none was returned).
+        ALTER TABLE work_attempts ADD COLUMN output TEXT;
+      `)}},{version:7,name:"wakes",up:e=>{e.exec(`
+        -- NOT-466: one row per Wake found in an Agent reply (lib/wake-router).
+        -- Every Wake is kept, including ones whose target is missing or
+        -- whose envelope is invalid, so nothing is silently dropped. An
+        -- accepted or blocked Wake names its one Work Request. Lineage is
+        -- durable: parent/root request and root Wake, never process memory.
+        CREATE TABLE wakes (
+          id TEXT PRIMARY KEY,
+          idempotency_key TEXT NOT NULL UNIQUE CHECK (length(idempotency_key) > 0),
+          source_conversation_id TEXT NOT NULL,
+          source_event_id TEXT NOT NULL,
+          position INTEGER NOT NULL CHECK (position >= 0),
+          syntax TEXT NOT NULL CHECK (syntax IN ('structured', 'legacy')),
+          payload TEXT NOT NULL,
+          requester_agent_id TEXT NOT NULL,
+          requested_target TEXT,
+          target_agent_id TEXT,
+          target_name_snapshot TEXT,
+          execution_kind TEXT CHECK (execution_kind IN ('conversation', 'implementation', 'review', 'revision')),
+          parent_request_id TEXT,
+          root_request_id TEXT,
+          root_wake_id TEXT NOT NULL,
+          depth INTEGER NOT NULL CHECK (depth >= 0),
+          status TEXT NOT NULL CHECK (status IN ('accepted', 'blocked', 'unavailable', 'rejected')),
+          reason_code TEXT,
+          reason TEXT,
+          work_request_id TEXT UNIQUE,
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          UNIQUE (source_event_id, position),
+          CHECK ((status IN ('accepted', 'blocked')) = (work_request_id IS NOT NULL)),
+          CHECK (status = 'accepted' OR reason_code IS NOT NULL),
+          FOREIGN KEY (source_conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (work_request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (parent_request_id) REFERENCES work_requests(id)
+        );
+        CREATE INDEX idx_wakes_conversation ON wakes(source_conversation_id, created_at);
+        CREATE INDEX idx_wakes_status ON wakes(status, created_at);
+
+        CREATE TRIGGER trg_wakes_fk BEFORE INSERT ON wakes
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: wakes.source_conversation_id')
+            WHERE NOT EXISTS (SELECT 1 FROM conversations WHERE id = NEW.source_conversation_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: wakes.parent_request_id')
+            WHERE NEW.parent_request_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.parent_request_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: wakes.work_request_id')
+            WHERE NEW.work_request_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.work_request_id);
+        END;
+
+        -- Source, payload, and lineage are fixed when the Wake is recorded.
+        CREATE TRIGGER trg_wakes_immutable BEFORE UPDATE OF
+          id, idempotency_key, source_conversation_id, source_event_id, position, syntax, payload,
+          requester_agent_id, requested_target, execution_kind, parent_request_id,
+          root_wake_id, depth, created_at
+        ON wakes
+        BEGIN
+          SELECT RAISE(ABORT, 'wakes source, payload, and lineage are immutable');
+        END;
+
+        -- Recovery only moves forward: an unavailable target may resolve
+        -- or turn out unroutable (rejected), a blocked request may become
+        -- accepted. The resolved target, Work
+        -- Request, and root request (for a Wake without a parent, its own
+        -- request) are set once.
+        CREATE TRIGGER trg_wakes_recovery BEFORE UPDATE ON wakes
+        BEGIN
+          SELECT RAISE(ABORT, 'invalid wakes status change')
+            WHERE NEW.status <> OLD.status
+              AND (OLD.status || '>' || NEW.status) NOT IN ('unavailable>accepted', 'unavailable>blocked', 'unavailable>rejected', 'blocked>accepted');
+          SELECT RAISE(ABORT, 'wakes target and work request are set once')
+            WHERE (OLD.target_agent_id IS NOT NULL AND NEW.target_agent_id IS NOT OLD.target_agent_id)
+              OR (OLD.target_name_snapshot IS NOT NULL AND NEW.target_name_snapshot IS NOT OLD.target_name_snapshot)
+              OR (OLD.work_request_id IS NOT NULL AND NEW.work_request_id IS NOT OLD.work_request_id)
+              OR (OLD.root_request_id IS NOT NULL AND NEW.root_request_id IS NOT OLD.root_request_id);
+        END;
+      `)}},{version:8,name:"conversation_events",up:e=>{e.exec(`
+        -- NOT-470: typed conversation projection of Wake and Work Request
+        -- lifecycle events (lib/conversation-projection). One row per
+        -- projected part of one engine event; the id is derived from the
+        -- engine event id and part, so replay and redelivery never add a
+        -- row. text is the human-facing line, data the machine-readable
+        -- meaning. sort_at never decreases within a request, so ordering
+        -- by (sort_at, request_created_at, request_id, request_sequence,
+        -- part) keeps each request's own order while requests interleave.
+        CREATE TABLE conversation_events (
+          id TEXT PRIMARY KEY,
+          conversation_id TEXT NOT NULL,
+          engine_event_id TEXT NOT NULL,
+          part INTEGER NOT NULL CHECK (part >= 0),
+          request_id TEXT NOT NULL,
+          request_sequence INTEGER NOT NULL,
+          attempt_id TEXT,
+          wake_id TEXT,
+          kind TEXT NOT NULL CHECK (kind IN (
+            'wake_accepted', 'wake_blocked', 'request_queued', 'request_blocked', 'request_running',
+            'request_waiting', 'request_completed', 'request_failed', 'request_cancelled',
+            'question', 'result', 'artifact'
+          )),
+          state TEXT CHECK (state IN (${f})),
+          text TEXT NOT NULL,
+          data TEXT NOT NULL,
+          sort_at INTEGER NOT NULL,
+          request_created_at INTEGER NOT NULL,
+          created_at INTEGER NOT NULL,
+          UNIQUE (engine_event_id, part),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (engine_event_id) REFERENCES engine_events(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        CREATE INDEX idx_conversation_events_order
+          ON conversation_events(conversation_id, sort_at, request_created_at, request_id, request_sequence, part);
+        CREATE INDEX idx_conversation_events_request ON conversation_events(request_id);
+
+        -- Last engine event sequence the projector has read per request,
+        -- including events that project to nothing.
+        CREATE TABLE conversation_projection_cursors (
+          request_id TEXT PRIMARY KEY,
+          sequence INTEGER NOT NULL CHECK (sequence >= 0),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+
+        CREATE TRIGGER trg_conversation_events_immutable BEFORE UPDATE ON conversation_events
+        BEGIN
+          SELECT RAISE(ABORT, 'conversation_events are immutable');
+        END;
+      `)}},{version:9,name:"terminal_followups",up:e=>{e.exec(`
+        -- NOT-472: one row per canonical request that became terminal on
+        -- this schema, written in the same transaction as the terminal
+        -- transition. lib/coordinator-loop runs the follow-up (Wake
+        -- routing, coordinator continuation) and sets done_at; restart
+        -- recovery only replays rows still open. Requests that ended
+        -- before this migration get no row, so their replies are never
+        -- routed retroactively.
+        CREATE TABLE terminal_followups (
+          request_id TEXT PRIMARY KEY,
+          created_at INTEGER NOT NULL,
+          done_at INTEGER,
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        CREATE INDEX idx_terminal_followups_open ON terminal_followups(created_at) WHERE done_at IS NULL;
+      `)}},{version:10,name:"reviewed_git_finalization",up:e=>{e.exec(`
+        -- NOT-487: reviewed Git finalization through Agent Deck
+        -- (docs/design/2026-10-13-git-finalization-contract.md). Rows hold
+        -- only public Agent Deck identifiers, repository-relative paths,
+        -- digests, and modes: never file contents, host paths, or the
+        -- Agent Deck bearer.
+        --
+        -- Public baseline of a prepared edit Attempt, captured before model
+        -- work. Set once.
+        CREATE TABLE attempt_finalization_baselines (
+          attempt_id TEXT PRIMARY KEY,
+          request_id TEXT NOT NULL,
+          external_run_id TEXT NOT NULL,
+          baseline_ref TEXT NOT NULL,
+          baseline_digest TEXT NOT NULL,
+          created_at INTEGER NOT NULL,
+          FOREIGN KEY (attempt_id) REFERENCES work_attempts(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+
+        -- The ordered candidate manifest Agent Deck reported once the
+        -- prepared run was terminal: the immutable review evidence that a
+        -- finalization submits unchanged.
+        CREATE TABLE candidate_manifests (
+          id TEXT PRIMARY KEY,
+          attempt_id TEXT NOT NULL UNIQUE,
+          request_id TEXT NOT NULL,
+          conversation_id TEXT NOT NULL,
+          external_run_id TEXT NOT NULL,
+          baseline_ref TEXT NOT NULL,
+          baseline_digest TEXT NOT NULL,
+          base_commit TEXT NOT NULL,
+          manifest_digest TEXT NOT NULL,
+          files TEXT NOT NULL,
+          file_count INTEGER NOT NULL CHECK (file_count >= 0),
+          created_at INTEGER NOT NULL,
+          FOREIGN KEY (attempt_id) REFERENCES work_attempts(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id)
+        );
+
+        -- One accepted finalization decision and its outcome. The request
+        -- body is exactly what was (or will be) submitted; the idempotency
+        -- key is derived from the explicit acceptance event, implementation
+        -- Attempt, review, and manifest. Replay and restart submit the same
+        -- request, while a later acceptance can retry a terminal non-commit.
+        CREATE TABLE finalizations (
+          id TEXT PRIMARY KEY,
+          idempotency_key TEXT NOT NULL UNIQUE CHECK (length(idempotency_key) > 0),
+          conversation_id TEXT NOT NULL,
+          decision_event_id TEXT NOT NULL,
+          decision_request_id TEXT NOT NULL,
+          coordinator_agent_id TEXT NOT NULL,
+          implementation_request_id TEXT NOT NULL,
+          implementation_attempt_id TEXT NOT NULL,
+          review_request_id TEXT NOT NULL,
+          review_attempt_id TEXT NOT NULL,
+          manifest_id TEXT NOT NULL,
+          external_run_id TEXT NOT NULL,
+          request_body TEXT NOT NULL,
+          request_hash TEXT NOT NULL,
+          state TEXT NOT NULL CHECK (state IN ('preparing', 'committed', 'blocked', 'failed', 'canceled')),
+          submitted_at INTEGER,
+          reason_code TEXT,
+          reason TEXT,
+          commit_id TEXT,
+          tree_id TEXT,
+          parent_commit TEXT,
+          result_manifest_digest TEXT,
+          file_count INTEGER,
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          finished_at INTEGER,
+          CHECK ((state = 'preparing') = (finished_at IS NULL)),
+          CHECK (state <> 'committed' OR commit_id IS NOT NULL),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (implementation_request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (implementation_attempt_id) REFERENCES work_attempts(id),
+          FOREIGN KEY (review_request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (manifest_id) REFERENCES candidate_manifests(id)
+        );
+        CREATE INDEX idx_finalizations_open ON finalizations(created_at) WHERE finished_at IS NULL;
+        CREATE INDEX idx_finalizations_attempt ON finalizations(implementation_attempt_id);
+
+        CREATE TRIGGER trg_attempt_finalization_baselines_fk BEFORE INSERT ON attempt_finalization_baselines
+        BEGIN
+          SELECT RAISE(ABORT, 'attempt finalization baseline does not match its Attempt')
+            WHERE NOT EXISTS (
+              SELECT 1 FROM work_attempts
+              WHERE id = NEW.attempt_id AND request_id = NEW.request_id AND external_run_id = NEW.external_run_id
+            );
+        END;
+        CREATE TRIGGER trg_attempt_finalization_baselines_immutable BEFORE UPDATE ON attempt_finalization_baselines
+        BEGIN
+          SELECT RAISE(ABORT, 'attempt_finalization_baselines are immutable');
+        END;
+        CREATE TRIGGER trg_candidate_manifests_fk BEFORE INSERT ON candidate_manifests
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: candidate_manifests.attempt_id')
+            WHERE NOT EXISTS (
+              SELECT 1 FROM work_attempts a
+              JOIN work_requests r ON r.id = a.request_id
+              JOIN attempt_finalization_baselines b ON b.attempt_id = a.id
+              WHERE a.id = NEW.attempt_id AND a.request_id = NEW.request_id
+                AND a.external_run_id = NEW.external_run_id
+                AND r.source_conversation_id = NEW.conversation_id
+                AND b.external_run_id = NEW.external_run_id
+                AND b.baseline_ref = NEW.baseline_ref AND b.baseline_digest = NEW.baseline_digest
+            );
+        END;
+        CREATE TRIGGER trg_candidate_manifests_immutable BEFORE UPDATE ON candidate_manifests
+        BEGIN
+          SELECT RAISE(ABORT, 'candidate_manifests are immutable');
+        END;
+        CREATE TRIGGER trg_finalizations_fk BEFORE INSERT ON finalizations
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: finalizations.manifest_id')
+            WHERE NOT EXISTS (
+              SELECT 1 FROM candidate_manifests m
+              JOIN work_attempts ia ON ia.id = NEW.implementation_attempt_id
+              JOIN work_attempts ra ON ra.id = NEW.review_attempt_id
+              JOIN work_requests ir ON ir.id = NEW.implementation_request_id
+              JOIN work_requests rr ON rr.id = NEW.review_request_id
+              JOIN work_requests dr ON dr.id = NEW.decision_request_id
+              WHERE m.id = NEW.manifest_id AND m.attempt_id = ia.id AND m.request_id = ir.id
+                AND m.external_run_id = NEW.external_run_id
+                AND ia.request_id = ir.id AND ra.request_id = rr.id
+                AND ir.source_conversation_id = NEW.conversation_id
+                AND rr.source_conversation_id = NEW.conversation_id
+                AND dr.source_conversation_id = NEW.conversation_id
+                AND dr.target_agent_id = NEW.coordinator_agent_id
+            );
+        END;
+        CREATE TRIGGER trg_finalizations_immutable BEFORE UPDATE OF
+          id, idempotency_key, conversation_id, decision_event_id, decision_request_id, coordinator_agent_id,
+          implementation_request_id, implementation_attempt_id, review_request_id, review_attempt_id,
+          manifest_id, external_run_id, request_body, request_hash, created_at
+        ON finalizations
+        BEGIN
+          SELECT RAISE(ABORT, 'finalizations decision and request are immutable');
+        END;
+        CREATE TRIGGER trg_finalizations_terminal BEFORE UPDATE ON finalizations
+        WHEN OLD.finished_at IS NOT NULL
+        BEGIN
+          SELECT RAISE(ABORT, 'finished finalizations are immutable');
+        END;
+        CREATE TRIGGER trg_finalizations_submitted BEFORE UPDATE OF submitted_at ON finalizations
+        WHEN OLD.submitted_at IS NOT NULL AND NEW.submitted_at IS NOT OLD.submitted_at
+        BEGIN
+          SELECT RAISE(ABORT, 'finalizations submitted_at is set once');
+        END;
+
+        -- Conversation projection gains the finalization lifecycle kinds.
+        -- SQLite cannot widen a CHECK in place, so the table is rebuilt
+        -- with every row kept.
+        CREATE TABLE conversation_events_v10 (
+          id TEXT PRIMARY KEY,
+          conversation_id TEXT NOT NULL,
+          engine_event_id TEXT NOT NULL,
+          part INTEGER NOT NULL CHECK (part >= 0),
+          request_id TEXT NOT NULL,
+          request_sequence INTEGER NOT NULL,
+          attempt_id TEXT,
+          wake_id TEXT,
+          kind TEXT NOT NULL CHECK (kind IN (
+            'wake_accepted', 'wake_blocked', 'request_queued', 'request_blocked', 'request_running',
+            'request_waiting', 'request_completed', 'request_failed', 'request_cancelled',
+            'question', 'result', 'artifact',
+            'finalization_preparing', 'finalization_committed', 'finalization_blocked',
+            'finalization_failed', 'finalization_canceled', 'finalization_rejected'
+          )),
+          state TEXT CHECK (state IN (${f})),
+          text TEXT NOT NULL,
+          data TEXT NOT NULL,
+          sort_at INTEGER NOT NULL,
+          request_created_at INTEGER NOT NULL,
+          created_at INTEGER NOT NULL,
+          UNIQUE (engine_event_id, part),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (engine_event_id) REFERENCES engine_events(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        INSERT INTO conversation_events_v10 SELECT
+          id, conversation_id, engine_event_id, part, request_id, request_sequence, attempt_id, wake_id,
+          kind, state, text, data, sort_at, request_created_at, created_at
+        FROM conversation_events;
+        DROP TABLE conversation_events;
+        ALTER TABLE conversation_events_v10 RENAME TO conversation_events;
+        CREATE INDEX idx_conversation_events_order
+          ON conversation_events(conversation_id, sort_at, request_created_at, request_id, request_sequence, part);
+        CREATE INDEX idx_conversation_events_request ON conversation_events(request_id);
+        CREATE TRIGGER trg_conversation_events_immutable BEFORE UPDATE ON conversation_events
+        BEGIN
+          SELECT RAISE(ABORT, 'conversation_events are immutable');
+        END;
+      `)}},{version:11,name:"leased_dispatch",up:e=>{e.exec(`
+        -- NOT-469: leased dispatcher (lib/dispatcher). One row per request a
+        -- worker owns. The token is a fencing value: heartbeat, release, and
+        -- every fenced commit match it, so a worker whose lease was taken
+        -- over can no longer write. An expired row is not free: its run may
+        -- still be live, so it counts toward concurrency until a worker
+        -- takes it over and reconciles it.
+        CREATE TABLE dispatch_leases (
+          request_id TEXT PRIMARY KEY,
+          target_agent_id TEXT NOT NULL,
+          owner TEXT NOT NULL CHECK (length(owner) > 0),
+          token TEXT NOT NULL UNIQUE CHECK (length(token) > 0),
+          acquired_at INTEGER NOT NULL,
+          heartbeat_at INTEGER NOT NULL,
+          expires_at INTEGER NOT NULL,
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        CREATE INDEX idx_dispatch_leases_target ON dispatch_leases(target_agent_id);
+        CREATE INDEX idx_dispatch_leases_expiry ON dispatch_leases(expires_at);
+
+        -- Launch intent, written with the Attempt before any adapter call:
+        -- the exact start body (or null for a transport without external
+        -- runs), its idempotency key, and a non-secret fingerprint of the
+        -- launching grant. Reconciliation re-POSTs only this body, under
+        -- this key, with this grant (NOT-468 decision table A).
+        CREATE TABLE attempt_launch_intents (
+          attempt_id TEXT PRIMARY KEY,
+          request_id TEXT NOT NULL,
+          transport TEXT NOT NULL CHECK (length(transport) > 0),
+          idempotency_key TEXT,
+          body TEXT,
+          body_hash TEXT,
+          grant_fingerprint TEXT,
+          owner TEXT NOT NULL,
+          created_at INTEGER NOT NULL,
+          CHECK ((body IS NULL) = (body_hash IS NULL)),
+          CHECK (body IS NULL OR idempotency_key IS NOT NULL),
+          FOREIGN KEY (attempt_id) REFERENCES work_attempts(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        CREATE TRIGGER trg_attempt_launch_intents_fk BEFORE INSERT ON attempt_launch_intents
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: attempt_launch_intents.attempt_id')
+            WHERE NOT EXISTS (SELECT 1 FROM work_attempts WHERE id = NEW.attempt_id AND request_id = NEW.request_id);
+        END;
+        CREATE TRIGGER trg_attempt_launch_intents_immutable BEFORE UPDATE ON attempt_launch_intents
+        BEGIN
+          SELECT RAISE(ABORT, 'attempt_launch_intents are immutable');
+        END;
+
+        -- Operator-attention flag, separate from the Attempt lifecycle. While
+        -- one is open for a request the dispatcher makes no automatic
+        -- launch, re-POST, retry, or resume for it. Only an operator clears
+        -- it (cleared_at).
+        CREATE TABLE dispatch_attention (
+          id TEXT PRIMARY KEY,
+          request_id TEXT NOT NULL,
+          attempt_id TEXT,
+          reason TEXT NOT NULL CHECK (length(reason) > 0),
+          detail TEXT,
+          created_at INTEGER NOT NULL,
+          cleared_at INTEGER,
+          FOREIGN KEY (request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (attempt_id) REFERENCES work_attempts(id)
+        );
+        CREATE UNIQUE INDEX idx_dispatch_attention_open ON dispatch_attention(request_id) WHERE cleared_at IS NULL;
+      `)}},{version:12,name:"request_control",up:e=>{e.exec(`
+        -- NOT-473: cancellation, deadlines, and bounded retries
+        -- (lib/work-request-control, lib/request-policy). The deadline and
+        -- retry policy are fixed at intake; null on older rows means no
+        -- deadline and one Attempt. attempt_count counts claimed Attempts
+        -- and never decreases; a queued retry is not claimable before
+        -- next_eligible_at. The cancellation intent is recorded once.
+        ALTER TABLE work_requests ADD COLUMN deadline_at INTEGER;
+        ALTER TABLE work_requests ADD COLUMN retry_policy TEXT;
+        ALTER TABLE work_requests ADD COLUMN attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0);
+        ALTER TABLE work_requests ADD COLUMN next_eligible_at INTEGER;
+        ALTER TABLE work_requests ADD COLUMN cancel_requested_at INTEGER;
+        ALTER TABLE work_requests ADD COLUMN cancel_requested_by TEXT;
+        ALTER TABLE work_requests ADD COLUMN cancel_reason TEXT;
+        CREATE INDEX idx_work_requests_deadline ON work_requests(deadline_at) WHERE deadline_at IS NOT NULL;
+
+        CREATE TRIGGER trg_work_requests_control_immutable BEFORE UPDATE OF deadline_at, retry_policy ON work_requests
+        WHEN NEW.deadline_at IS NOT OLD.deadline_at OR NEW.retry_policy IS NOT OLD.retry_policy
+        BEGIN
+          SELECT RAISE(ABORT, 'work_requests deadline and retry policy are immutable');
+        END;
+        CREATE TRIGGER trg_work_requests_attempt_count BEFORE UPDATE OF attempt_count ON work_requests
+        WHEN NEW.attempt_count < OLD.attempt_count
+        BEGIN
+          SELECT RAISE(ABORT, 'work_requests attempt_count never decreases');
+        END;
+        CREATE TRIGGER trg_work_requests_cancel_once BEFORE UPDATE OF cancel_requested_at, cancel_requested_by, cancel_reason ON work_requests
+        WHEN OLD.cancel_requested_at IS NOT NULL AND (
+          NEW.cancel_requested_at IS NOT OLD.cancel_requested_at
+          OR NEW.cancel_requested_by IS NOT OLD.cancel_requested_by
+          OR NEW.cancel_reason IS NOT OLD.cancel_reason
+        )
+        BEGIN
+          SELECT RAISE(ABORT, 'work_requests cancellation intent is recorded once');
+        END;
+
+        -- Conversation projection gains the cancellation, timeout, and
+        -- retry kinds (rebuilt with every row kept, as in version 10).
+        CREATE TABLE conversation_events_v12 (
+          id TEXT PRIMARY KEY,
+          conversation_id TEXT NOT NULL,
+          engine_event_id TEXT NOT NULL,
+          part INTEGER NOT NULL CHECK (part >= 0),
+          request_id TEXT NOT NULL,
+          request_sequence INTEGER NOT NULL,
+          attempt_id TEXT,
+          wake_id TEXT,
+          kind TEXT NOT NULL CHECK (kind IN (
+            'wake_accepted', 'wake_blocked', 'request_queued', 'request_blocked', 'request_running',
+            'request_waiting', 'request_completed', 'request_failed', 'request_cancelled',
+            'question', 'result', 'artifact',
+            'finalization_preparing', 'finalization_committed', 'finalization_blocked',
+            'finalization_failed', 'finalization_canceled', 'finalization_rejected',
+            'request_cancel_requested', 'request_timed_out', 'request_retry_scheduled', 'request_retries_exhausted'
+          )),
+          state TEXT CHECK (state IN (${f})),
+          text TEXT NOT NULL,
+          data TEXT NOT NULL,
+          sort_at INTEGER NOT NULL,
+          request_created_at INTEGER NOT NULL,
+          created_at INTEGER NOT NULL,
+          UNIQUE (engine_event_id, part),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (engine_event_id) REFERENCES engine_events(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        INSERT INTO conversation_events_v12 SELECT
+          id, conversation_id, engine_event_id, part, request_id, request_sequence, attempt_id, wake_id,
+          kind, state, text, data, sort_at, request_created_at, created_at
+        FROM conversation_events;
+        DROP TABLE conversation_events;
+        ALTER TABLE conversation_events_v12 RENAME TO conversation_events;
+        CREATE INDEX idx_conversation_events_order
+          ON conversation_events(conversation_id, sort_at, request_created_at, request_id, request_sequence, part);
+        CREATE INDEX idx_conversation_events_request ON conversation_events(request_id);
+        CREATE TRIGGER trg_conversation_events_immutable BEFORE UPDATE ON conversation_events
+        BEGIN
+          SELECT RAISE(ABORT, 'conversation_events are immutable');
+        END;
+      `)}},{version:13,name:"wake_safety",up:e=>{e.exec(`
+        -- NOT-475: Wake safety (docs/design/2026-10-14-wake-safety-contract.md,
+        -- lib/wake-safety). Lineage columns: wake_depth counts Agent-to-Agent
+        -- hops from the root (a continuation runs at the depth of the Agent it
+        -- continues) and the root principal is whoever started the lineage.
+        -- Both are fixed at intake.
+        ALTER TABLE work_requests ADD COLUMN wake_depth INTEGER NOT NULL DEFAULT 0 CHECK (wake_depth >= 0);
+        ALTER TABLE work_requests ADD COLUMN root_principal_kind TEXT;
+        ALTER TABLE work_requests ADD COLUMN root_principal_id TEXT;
+
+        -- Owner-approved edit grants for one (caller Agent, target Agent)
+        -- pair. Never seeded; revoked once, never rewritten or reused.
+        CREATE TABLE wake_grants (
+          id TEXT PRIMARY KEY,
+          caller_agent_id TEXT NOT NULL,
+          target_agent_id TEXT NOT NULL,
+          authority TEXT NOT NULL CHECK (authority = 'edit'),
+          granted_by_kind TEXT NOT NULL,
+          granted_by_id TEXT NOT NULL,
+          source_wake_id TEXT,
+          created_at INTEGER NOT NULL,
+          revoked_at INTEGER,
+          revoked_by_kind TEXT,
+          revoked_by_id TEXT,
+          CHECK ((revoked_at IS NULL) = (revoked_by_kind IS NULL) AND (revoked_at IS NULL) = (revoked_by_id IS NULL))
+        );
+        CREATE UNIQUE INDEX idx_wake_grants_active ON wake_grants(caller_agent_id, target_agent_id, authority) WHERE revoked_at IS NULL;
+        CREATE TRIGGER trg_wake_grants_immutable BEFORE UPDATE ON wake_grants
+        BEGIN
+          SELECT RAISE(ABORT, 'wake_grants are immutable except for one revocation')
+            WHERE OLD.revoked_at IS NOT NULL
+              OR NEW.id IS NOT OLD.id OR NEW.caller_agent_id IS NOT OLD.caller_agent_id
+              OR NEW.target_agent_id IS NOT OLD.target_agent_id OR NEW.authority IS NOT OLD.authority
+              OR NEW.granted_by_kind IS NOT OLD.granted_by_kind OR NEW.granted_by_id IS NOT OLD.granted_by_id
+              OR NEW.source_wake_id IS NOT OLD.source_wake_id OR NEW.created_at IS NOT OLD.created_at;
+        END;
+
+        -- One append-only row per safety evaluation of a Work Request: the
+        -- categorized caller principal, target, decision, matched grant rule
+        -- and grant, and the policy snapshot used. A request is runnable
+        -- only while its latest decision is allowed (lib/dispatcher). A
+        -- later policy change (a revoked grant, new limits) adds rows for
+        -- later evaluations and never rewrites these.
+        CREATE TABLE wake_safety_decisions (
+          id TEXT PRIMARY KEY,
+          request_id TEXT NOT NULL,
+          sequence INTEGER NOT NULL CHECK (sequence > 0),
+          wake_id TEXT,
+          principal_type TEXT NOT NULL CHECK (principal_type IN ('human_owner', 'api_principal', 'agent_principal', 'engine')),
+          principal_kind TEXT NOT NULL,
+          principal_id TEXT NOT NULL,
+          target_agent_id TEXT NOT NULL,
+          execution_kind TEXT NOT NULL,
+          decision TEXT NOT NULL CHECK (decision IN ('allowed', 'blocked', 'denied')),
+          reason_code TEXT,
+          grant_rule TEXT,
+          grant_id TEXT,
+          policy_snapshot TEXT NOT NULL,
+          created_at INTEGER NOT NULL,
+          UNIQUE (request_id, sequence),
+          CHECK (decision <> 'allowed' OR grant_rule IS NOT NULL),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        CREATE TRIGGER trg_wake_safety_decisions_fk BEFORE INSERT ON wake_safety_decisions
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: wake_safety_decisions.request_id')
+            WHERE NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.request_id);
+        END;
+        CREATE TRIGGER trg_wake_safety_decisions_immutable BEFORE UPDATE ON wake_safety_decisions
+        BEGIN
+          SELECT RAISE(ABORT, 'wake_safety_decisions are append-only');
+        END;
+
+        -- Depth and root-budget refusals name the limit and what was seen.
+        ALTER TABLE wakes ADD COLUMN limit_value INTEGER;
+        ALTER TABLE wakes ADD COLUMN observed_value INTEGER;
+
+        -- Rejected Wakes project from the Wake row (no Work Request, no
+        -- engine event), and a stopped lineage projects as its own kind.
+        CREATE TABLE conversation_events_v13 (
+          id TEXT PRIMARY KEY,
+          conversation_id TEXT NOT NULL,
+          engine_event_id TEXT,
+          part INTEGER NOT NULL CHECK (part >= 0),
+          request_id TEXT,
+          request_sequence INTEGER NOT NULL,
+          attempt_id TEXT,
+          wake_id TEXT,
+          kind TEXT NOT NULL CHECK (kind IN (
+            'wake_accepted', 'wake_blocked', 'request_queued', 'request_blocked', 'request_running',
+            'request_waiting', 'request_completed', 'request_failed', 'request_cancelled',
+            'question', 'result', 'artifact',
+            'finalization_preparing', 'finalization_committed', 'finalization_blocked',
+            'finalization_failed', 'finalization_canceled', 'finalization_rejected',
+            'request_cancel_requested', 'request_timed_out', 'request_retry_scheduled', 'request_retries_exhausted',
+            'wake_rejected', 'lineage_stopped'
+          )),
+          state TEXT CHECK (state IN (${f})),
+          text TEXT NOT NULL,
+          data TEXT NOT NULL,
+          sort_at INTEGER NOT NULL,
+          request_created_at INTEGER NOT NULL,
+          created_at INTEGER NOT NULL,
+          UNIQUE (engine_event_id, part),
+          CHECK ((engine_event_id IS NULL) = (request_id IS NULL)),
+          CHECK (request_id IS NOT NULL OR wake_id IS NOT NULL),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (engine_event_id) REFERENCES engine_events(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        INSERT INTO conversation_events_v13 SELECT
+          id, conversation_id, engine_event_id, part, request_id, request_sequence, attempt_id, wake_id,
+          kind, state, text, data, sort_at, request_created_at, created_at
+        FROM conversation_events;
+        DROP TABLE conversation_events;
+        ALTER TABLE conversation_events_v13 RENAME TO conversation_events;
+        CREATE INDEX idx_conversation_events_order
+          ON conversation_events(conversation_id, sort_at, request_created_at, request_id, request_sequence, part);
+        CREATE INDEX idx_conversation_events_request ON conversation_events(request_id);
+        CREATE INDEX idx_conversation_events_wake ON conversation_events(wake_id);
+        CREATE TRIGGER trg_conversation_events_immutable BEFORE UPDATE ON conversation_events
+        BEGIN
+          SELECT RAISE(ABORT, 'conversation_events are immutable');
+        END;
+      `),function(e){let t=e.prepare(`
+    SELECT id, parent_request_id, root_request_id, wake_event_id, requester_kind, requester_id, policy_snapshot, state,
+      target_agent_id, execution_kind, legacy_agent_request_id, created_at
+    FROM work_requests ORDER BY created_at ASC, rowid ASC
+  `).all(),n=new Map(t.map(e=>[e.id,e])),r=e=>{try{let t=JSON.parse(e.policy_snapshot);return t&&"object"==typeof t&&!Array.isArray(t)?t:{}}catch{return{}}},a=new Map,s=e=>{let t=a.get(e.id);if(void 0!==t)return t;let r=[],i=new Set,s=e,o=!1;for(;s&&!i.has(s.id)&&s.root_request_id===e.root_request_id;){let t=a.get(s.id);if(void 0!==t){o=t;break}if(i.add(s.id),r.push(s),null===s.parent_request_id){o=s.id===e.root_request_id;break}s=n.get(s.parent_request_id)}for(let e of r)a.set(e.id,o);return o},o=new Map,d=e=>{let t=o.get(e.id);if(void 0!==t)return t;let i=0,a=e.parent_request_id?n.get(e.parent_request_id):void 0;if(a){let t=d(a),n=r(e);i=e.wake_event_id?t+1:"coordinator_continuation"===n.source&&"result"===n.continues?Math.max(t-1,0):t}return o.set(e.id,i),i},_=e.prepare("UPDATE work_requests SET wake_depth = ?, root_principal_kind = ?, root_principal_id = ? WHERE id = ?"),E=e.prepare(`
+    INSERT INTO wake_safety_decisions (
+      id, request_id, sequence, wake_id, principal_type, principal_kind, principal_id, target_agent_id, execution_kind,
+      decision, reason_code, grant_rule, grant_id, policy_snapshot, created_at
+    ) VALUES (?, ?, 1, ?, ?, ?, ?, ?, ?, 'allowed', NULL, 'pre_safety_migration', NULL, ?, ?)
+  `);for(let a of(e.exec("DROP TRIGGER trg_work_requests_terminal"),t)){let e=n.get(a.root_request_id),t=!!e&&s(a),o=t?d(a):0,u=t&&e?{kind:e.requester_kind,id:e.requester_id}:{kind:"unknown",id:"unknown"};if(_.run(o,u.kind,u.id,a.id),null===a.legacy_agent_request_id&&["queued","running","waiting"].includes(a.state)){let e=r(a),t="wake"===e.source?"agent_principal":"coordinator_continuation"===e.source?"engine":"api"===e.surface?"api_principal":"human_owner";E.run((0,i.randomUUID)(),a.id,a.wake_event_id,t,a.requester_kind,a.requester_id,a.target_agent_id,a.execution_kind,JSON.stringify({safety_version:1,migrated:!0,root_principal:u,wake_depth:o,grant_rule:"pre_safety_migration"}),a.created_at)}}e.exec(`
+    CREATE TRIGGER trg_work_requests_terminal BEFORE UPDATE ON work_requests
+    WHEN OLD.state IN (${v})
+    BEGIN
+      SELECT RAISE(ABORT, 'terminal work_requests are immutable');
+    END;
+  `)}(e),e.exec(`
+        CREATE TRIGGER trg_work_requests_safety_immutable BEFORE UPDATE OF wake_depth, root_principal_kind, root_principal_id ON work_requests
+        WHEN NEW.wake_depth IS NOT OLD.wake_depth
+          OR NEW.root_principal_kind IS NOT OLD.root_principal_kind
+          OR NEW.root_principal_id IS NOT OLD.root_principal_id
+        BEGIN
+          SELECT RAISE(ABORT, 'work_requests wake depth and root principal are immutable');
+        END;
+      `)}},{version:14,name:"retire_legacy_agent_requests",up:e=>{!function(e){let t=t=>!!e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get(t);if(!t("agent_requests"))return;let n=t("agent_request_events"),r=e.prepare(`
+    SELECT r.*, m.content AS content FROM agent_requests r
+    JOIN conversations c ON c.id = r.conversation_id
+    JOIN bots b ON b.id = r.target_bot_id
+    JOIN messages m ON m.id = r.accepted_message_id AND m.conversation_id = r.conversation_id
+    WHERE r.state IN ('completed', 'failed', 'accepted', 'dispatched')
+      AND r.principal_kind IN ('person', 'bot', 'service')
+      AND NOT EXISTS (SELECT 1 FROM work_requests w WHERE w.legacy_agent_request_id = r.id)
+    ORDER BY r.created_at ASC, r.rowid ASC
+  `).all(),a=e.prepare("SELECT 1 FROM work_requests WHERE requester_kind = ? AND requester_id = ? AND idempotency_key = ?"),s=n?e.prepare("SELECT type, data, created_at FROM agent_request_events WHERE request_id = ? ORDER BY created_at ASC, rowid ASC"):null,o=e.prepare(`
+    INSERT INTO work_requests (
+      id, source_conversation_id, source_event_id, requester_kind, requester_id, target_agent_id,
+      intent, execution_kind, tool_profile, parent_request_id, root_request_id, wake_event_id, depth,
+      idempotency_key, request_hash, policy_snapshot, state, state_reason, result, error_code, error_message,
+      version, legacy_agent_request_id, created_at, updated_at, terminal_at, root_principal_kind, root_principal_id
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, 'conversation', 'readonly', NULL, ?, NULL, 0, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?, ?, ?, ?, ?)
+  `),d=e.prepare("INSERT INTO engine_events (id, request_id, sequence, attempt_id, type, data, created_at) VALUES (?, ?, ?, NULL, ?, ?, ?)"),_=Date.now();for(let e of r){if(a.get(e.principal_kind,e.principal_id,e.idempotency_key))continue;let t=(0,i.randomUUID)(),n=y({sourceConversationId:e.conversation_id,sourceEventId:e.accepted_message_id,targetAgentId:e.target_bot_id,intent:e.content,executionKind:"conversation",toolProfile:"readonly"}),r="accepted"===e.state||"dispatched"===e.state,E=JSON.stringify({tool_profile:"readonly",source:"legacy_agent_requests",legacy_operation:e.operation,legacy_runtime:e.runtime,...r?{legacy_state:e.state}:{}}),u=r?Math.max(_,e.updated_at):e.updated_at;o.run(t,e.conversation_id,e.accepted_message_id,e.principal_kind,e.principal_id,e.target_bot_id,e.content,t,e.idempotency_key,n,E,r?"failed":e.state,r?D:null,"completed"===e.state?JSON.stringify({reply_message_id:e.reply_message_id}):null,r?D:"failed"===e.state?e.failure_code:null,r?b:"failed"===e.state?e.failure_message:null,e.id,e.created_at,u,u,e.principal_kind,e.principal_id);let c=0;for(let n of s?.all(e.id)??[])d.run((0,i.randomUUID)(),t,++c,n.type,n.data,n.created_at);r&&d.run((0,i.randomUUID)(),t,++c,"state_changed",JSON.stringify({from:"accepted"===e.state?"queued":"running",to:"failed",reason:D}),u),d.run((0,i.randomUUID)(),t,++c,"backfilled",JSON.stringify({legacy_agent_request_id:e.id}),u)}(function(e){let t=e.prepare(`
+    SELECT w.id AS request_id, r.principal_kind, r.principal_id, r.idempotency_key, r.payload_hash,
+      r.conversation_id, r.target_bot_id, r.accepted_message_id, r.created_at, m.content AS content
+    FROM work_requests w
+    JOIN agent_requests r ON r.id = w.legacy_agent_request_id
+    JOIN messages m ON m.id = r.accepted_message_id
+    WHERE r.operation = 'send_message'
+      AND NOT EXISTS (
+        SELECT 1 FROM conversation_intakes i
+        WHERE i.requester_kind = r.principal_kind AND i.requester_id = r.principal_id AND i.idempotency_key = r.idempotency_key
+      )
+  `).all(),n=e.prepare(`
+    INSERT INTO conversation_intakes (
+      requester_kind, requester_id, idempotency_key, request_hash, surface,
+      conversation_id, source_event_id, work_request_ids, created_at
+    ) VALUES (?, ?, ?, ?, 'api', ?, ?, ?, ?)
+  `);for(let e of t){let t=[e.conversation_id,null].map(t=>[e.target_bot_id,t,e.content]).find(t=>G(JSON.stringify(t))===e.payload_hash);t&&n.run(e.principal_kind,e.principal_id,e.idempotency_key,G(JSON.stringify(["api",t])),e.conversation_id,e.accepted_message_id,JSON.stringify([e.request_id]),e.created_at)}})(e),t("legacy_agent_requests_archive")?e.exec("INSERT INTO legacy_agent_requests_archive SELECT * FROM agent_requests; DROP TABLE agent_requests;"):e.exec("ALTER TABLE agent_requests RENAME TO legacy_agent_requests_archive"),n&&(t("legacy_agent_request_events_archive")?e.exec("INSERT INTO legacy_agent_request_events_archive SELECT * FROM agent_request_events; DROP TABLE agent_request_events;"):e.exec("ALTER TABLE agent_request_events RENAME TO legacy_agent_request_events_archive"))}(e)}},{version:15,name:"ui_turns_on_work_requests",up:e=>{e.exec(`
+        ALTER TABLE work_requests ADD COLUMN executor TEXT NOT NULL DEFAULT 'dispatcher'
+          CHECK (executor IN ('dispatcher', 'ui_message', 'ui_continuation'));
+        CREATE INDEX idx_work_requests_executor ON work_requests(executor, state, created_at);
+
+        -- Delegation accounting for one user message in one UI thread:
+        -- handoffs (depth), delegated turns (budget), Stop, and the
+        -- caller frames a delegate's reply returns to. One row per
+        -- (conversation, user message); a later user message starts a
+        -- fresh row.
+        CREATE TABLE delegation_chains (
+          conversation_id TEXT NOT NULL,
+          user_message_id TEXT NOT NULL,
+          handoffs INTEGER NOT NULL DEFAULT 0 CHECK (handoffs >= 0),
+          turns INTEGER NOT NULL DEFAULT 0 CHECK (turns >= 0),
+          stopped INTEGER NOT NULL DEFAULT 0 CHECK (stopped IN (0, 1)),
+          frames TEXT NOT NULL DEFAULT '[]',
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          PRIMARY KEY (conversation_id, user_message_id),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id)
+        );
+      `),function(e){let t=t=>!!e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get(t);if(!t("processing_queue"))return;let n=new Set(e.prepare("PRAGMA table_info(processing_queue)").all().map(e=>e.name)).has("work_request_id")?"q.work_request_id":"NULL",r=e.prepare(`
+    SELECT q.id, q.conversation_id, q.bot_id, q.status, ${n} AS work_request_id, q.created_at, q.started_at, q.completed_at
+    FROM processing_queue q
+    JOIN conversations c ON c.id = q.conversation_id
+    JOIN bots b ON b.id = q.bot_id
+    ORDER BY q.created_at ASC, q.rowid ASC
+  `).all(),a=e.prepare("SELECT * FROM work_requests WHERE id = ?"),s=e.prepare(`
+    UPDATE work_requests SET state = ?, state_reason = ?, version = version + 1, updated_at = ?,
+      error_code = ?, error_message = ?, terminal_at = ?, executor = 'ui_message'
+    WHERE id = ?
+  `),o=e.prepare(`
+    INSERT INTO engine_events (id, request_id, sequence, attempt_id, type, data, created_at)
+    SELECT ?, ?, COALESCE(MAX(sequence), 0) + 1, NULL, ?, ?, ? FROM engine_events WHERE request_id = ?
+  `),d=(e,t,n,r)=>o.run((0,i.randomUUID)(),e,t,JSON.stringify(n),r,e),_=e.prepare("SELECT id FROM messages WHERE conversation_id = ? AND created_at <= ? ORDER BY created_at DESC, rowid DESC LIMIT 1"),E=e.prepare(`
+    INSERT INTO work_requests (
+      id, source_conversation_id, source_event_id, requester_kind, requester_id, target_agent_id,
+      intent, execution_kind, tool_profile, parent_request_id, root_request_id, wake_event_id, depth,
+      idempotency_key, request_hash, policy_snapshot, state, version, created_at, updated_at,
+      wake_depth, root_principal_kind, root_principal_id, executor
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, 'conversation', 'readonly', NULL, ?, NULL, 0, ?, ?, ?, 'queued', 0, ?, ?, 0, ?, ?, 'ui_continuation')
+  `),u=F(!1),c=0;for(let t of r){if(t.work_request_id){let n=a.get(t.work_request_id);if(!n||"queued"!==n.state)continue;let r=t.started_at??t.created_at,i=Math.max(t.completed_at??r,r);if("pending"===t.status)e.prepare("UPDATE work_requests SET executor = 'ui_message' WHERE id = ?").run(n.id);else if("completed"===t.status||"failed"===t.status)s.run("running",null,r,null,null,null,n.id),d(n.id,"state_changed",{from:"queued",to:"running",reason:null,legacy_queue_id:t.id},r),s.run(t.status,"legacy_queue_turn",i,"failed"===t.status?"ui_turn_failed":null,"failed"===t.status?"The UI turn failed in the retired processing queue.":null,i,n.id),d(n.id,"state_changed",{from:"running",to:t.status,reason:"legacy_queue_turn",legacy_queue_id:t.id},i);else{let e=Math.max(Date.now(),r);s.run("running",null,r,null,null,null,n.id),d(n.id,"state_changed",{from:"queued",to:"running",reason:null,legacy_queue_id:t.id},r),s.run("failed",W,e,W,X,e,n.id),d(n.id,"state_changed",{from:"running",to:"failed",reason:W,error_code:W,legacy_queue_id:t.id},e)}c++;continue}if("pending"!==t.status)continue;let n=(0,i.randomUUID)(),r=_.get(t.conversation_id,t.created_at)?.id??t.conversation_id,o={source:"legacy_processing_queue",legacy_queue_id:t.id},T=y({sourceConversationId:t.conversation_id,sourceEventId:r,targetAgentId:t.bot_id,intent:"turn",executionKind:"conversation",toolProfile:"readonly",policy:{...o,execution_policy:u}});E.run(n,t.conversation_id,r,U.kind,U.id,t.bot_id,"turn",n,`legacy-queue:${t.id}`,T,JSON.stringify({...o,execution_policy:u,tool_profile:"readonly"}),t.created_at,t.created_at,U.kind,U.id),d(n,"accepted",{state:"queued",execution_kind:"conversation",tool_profile:"readonly"},t.created_at),d(n,"backfilled",{legacy_queue_id:t.id},t.created_at),c++}c+=e.prepare(`
+    UPDATE work_requests SET executor = 'ui_message'
+    WHERE state = 'queued' AND executor = 'dispatcher' AND legacy_agent_request_id IS NULL
+      AND parent_request_id IS NULL AND wake_event_id IS NULL
+      AND (
+        (json_extract(policy_snapshot, '$.source') = 'conversation_intake' AND json_extract(policy_snapshot, '$.surface') = 'ui')
+        OR EXISTS (
+          SELECT 1 FROM conversation_intakes i, json_each(i.work_request_ids) r
+          WHERE i.surface = 'ui' AND r.value = work_requests.id
+        )
+      )
+  `).run().changes,t("legacy_processing_queue_archive")?e.exec("INSERT INTO legacy_processing_queue_archive SELECT * FROM processing_queue; DROP TABLE processing_queue;"):e.exec("ALTER TABLE processing_queue RENAME TO legacy_processing_queue_archive")}(e)}}],w=new WeakMap;function h(e){let t=w.get(e);if(!t){t=new Set,w.set(e,t);let n=t;e.function("engine_event_purge_authorized",{deterministic:!1},e=>"string"==typeof e&&n.has(e)?1:0)}return t}function C(e,t={}){h(e),e.exec(`
+    CREATE TABLE IF NOT EXISTS schema_migrations (
+      version INTEGER PRIMARY KEY,
+      name TEXT NOT NULL,
+      applied_at INTEGER NOT NULL
+    );
+  `);let n=e.prepare("SELECT 1 FROM schema_migrations WHERE version = ?"),r=e.prepare("INSERT INTO schema_migrations (version, name, applied_at) VALUES (?, ?, ?)");for(let i of q){if(void 0!==t.through&&i.version>t.through)return;e.transaction(()=>{n.get(i.version)||(i.up(e),r.run(i.version,i.name,Date.now()))}).immediate()}}function y(e){return G(JSON.stringify([e.sourceConversationId,e.sourceEventId,e.targetAgentId,e.intent,e.executionKind,e.toolProfile,e.parentRequestId??null,e.wakeEventId??null,e.policy??null]))}q[q.length-1].version;let D="legacy_interrupted",b="Accepted before NOT-465 by the retired agent_requests dispatcher; it never reached a terminal state.",U=Object.freeze({kind:"service",id:"botmancers-ui-turns"});function F(e){let t=c(e?{entryPoint:"wake",executionKind:"conversation",wakeSyntax:"legacy"}:{entryPoint:"ui",executionKind:"conversation"});if(!t.ok)throw new k("invalid_input",t.reason);return t.policy}let W="ui_turn_interrupted",X="The UI turn was interrupted before it finished; it is not run again.";function x(e){return"string"==typeof e&&e.trim().length>0}function G(e){return(0,i.createHash)("sha256").update(e).digest("hex")}function M(e){return null==e?null:JSON.stringify(e)}function H(e){h(e);let t=e.prepare("SELECT * FROM work_requests WHERE id = ?"),n=e.prepare("SELECT * FROM work_requests WHERE requester_kind = ? AND requester_id = ? AND idempotency_key = ?"),r=e.prepare("SELECT * FROM work_attempts WHERE id = ?"),a=e.prepare(`
+    INSERT INTO engine_events (id, request_id, sequence, attempt_id, type, data, created_at)
+    SELECT ?, ?, COALESCE(MAX(sequence), 0) + 1, ?, ?, ?, ? FROM engine_events WHERE request_id = ?
+  `),s=e.prepare("SELECT * FROM engine_events WHERE id = ?"),o=e.prepare("SELECT * FROM session_bindings WHERE id = ?");function d(e){let n=t.get(e);if(!n)throw new k("not_found",`No work request ${e}.`);return n}function u(e){let t=r.get(e);if(!t)throw new k("not_found",`No attempt ${e}.`);return t}function c(e,t,n,r,o){let d=(0,i.randomUUID)();return a.run(d,e,r,t,M(n),o,e),s.get(d)}let T={transaction:t=>e.transaction(t).immediate(),createOrGetWorkRequest(r){if(!x(r.sourceConversationId))throw new k("invalid_input","sourceConversationId is required.");if(!x(r.sourceEventId))throw new k("invalid_input","sourceEventId is required.");if(!r.requester||!["person","bot","service"].includes(r.requester.kind)||!x(r.requester.id))throw new k("invalid_input","A requester principal is required.");if(!x(r.targetAgentId))throw new k("invalid_input","targetAgentId is required.");if("string"!=typeof r.intent)throw new k("invalid_input","intent is required.");if(!E(r.executionKind))throw new k("invalid_input","Unknown execution kind.");if(_[r.executionKind]!==r.toolProfile)throw new k("invalid_input",`Execution kind ${r.executionKind} requires the ${_[r.executionKind]} tool profile.`);if(r.policy&&Object.prototype.hasOwnProperty.call(r.policy,"execution_policy"))throw new k("invalid_input","The execution policy is passed as executionPolicy, never inside policy.");if(void 0!==r.executionPolicy){let e=l(r.executionPolicy);if(!e.ok)throw new k("invalid_input",e.reason);if(e.policy.execution_kind!==r.executionKind||e.policy.tool_profile!==r.toolProfile)throw new k("invalid_input","The execution policy does not match the requested execution kind and tool profile.")}if(!x(r.idempotencyKey))throw new k("invalid_input","idempotencyKey is required.");if(void 0!==r.executor&&!S.includes(r.executor))throw new k("invalid_input","Unknown request executor.");if(r.initialState&&"queued"!==r.initialState&&"blocked"!==r.initialState)throw new k("invalid_input","A work request starts queued or blocked.");if(void 0!==r.deadlineAt&&null!==r.deadlineAt&&!Number.isSafeInteger(r.deadlineAt))throw new k("invalid_input","deadlineAt must be an epoch millisecond integer.");if(void 0!==r.retryPolicy){let e=m(r.retryPolicy);if(!e.ok)throw new k("invalid_input",e.reason)}let a=r.executionPolicy?{...r.policy??{},execution_policy:r.executionPolicy}:r.policy,s=y({...r,policy:a});return e.transaction(()=>{let o=n.get(r.requester.kind,r.requester.id,r.idempotencyKey);if(o){if(o.request_hash!==s)throw new k("idempotency_conflict","The idempotency key was already used with a different request.");return{request:o,created:!1}}let _=r.now??Date.now(),E=(0,i.randomUUID)(),u=E,l=0,p=0,N=r.rootPrincipal??r.requester;if(r.parentRequestId){let e=t.get(r.parentRequestId);if(!e)throw new k("not_found","Parent work request not found.");u=e.root_request_id,l=e.depth+1,p=r.wakeEventId?e.wake_depth+1:e.wake_depth,N={kind:e.root_principal_kind??"unknown",id:e.root_principal_id??"unknown"}}void 0!==r.wakeDepth&&(p=r.wakeDepth);let m=r.initialState??"queued",L=JSON.stringify({...a??{},...r.safetySnapshot??{},tool_profile:r.toolProfile}),O=R(),g=r.retryPolicy??O.retryPolicy,I=void 0!==r.deadlineAt?r.deadlineAt:null===O.deadlineMs?null:_+O.deadlineMs;return e.prepare(`
+          INSERT INTO work_requests (
+            id, source_conversation_id, source_event_id, requester_kind, requester_id, target_agent_id,
+            intent, execution_kind, tool_profile, parent_request_id, root_request_id, wake_event_id, depth,
+            idempotency_key, request_hash, policy_snapshot, state, state_reason, version, created_at, updated_at,
+            deadline_at, retry_policy, wake_depth, root_principal_kind, root_principal_id, executor
+          ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?, ?, ?, ?, ?, ?, ?)
+        `).run(E,r.sourceConversationId,r.sourceEventId,r.requester.kind,r.requester.id,r.targetAgentId,r.intent,r.executionKind,r.toolProfile,r.parentRequestId??null,u,r.wakeEventId??null,l,r.idempotencyKey,s,L,m,r.stateReason??null,_,_,I,JSON.stringify(g),p,N.kind,N.id,r.executor??"dispatcher"),c(E,"accepted",{state:m,execution_kind:r.executionKind,tool_profile:r.toolProfile,deadline_at:I,retry_policy:g},null,_),r.executionPolicy&&c(E,"policy_selected",{...r.executionPolicy},null,_),"blocked"===m&&c(E,"state_changed",{from:"queued",to:"blocked",reason:r.stateReason??null},null,_),r.safety&&T.recordSafetyDecision(E,{...r.safety,now:r.safety.now??_}),{request:d(E),created:!0}}).immediate()},getWorkRequest:e=>t.get(e),recordSafetyDecision(t,n){if(!["human_owner","api_principal","agent_principal","engine"].includes(n.principalType))throw new k("invalid_input","A categorized principal is required.");if(!x(n.principal?.kind)||!x(n.principal?.id))throw new k("invalid_input","A principal is required.");if(!["allowed","blocked","denied"].includes(n.decision))throw new k("invalid_input","Unknown safety decision.");if("allowed"===n.decision&&!x(n.grantRule))throw new k("invalid_input","An allowed decision names its grant rule.");return e.transaction(()=>{let r=d(t),a=(0,i.randomUUID)();return e.prepare(`
+          INSERT INTO wake_safety_decisions (
+            id, request_id, sequence, wake_id, principal_type, principal_kind, principal_id, target_agent_id, execution_kind,
+            decision, reason_code, grant_rule, grant_id, policy_snapshot, created_at
+          ) SELECT ?, ?, COALESCE(MAX(sequence), 0) + 1, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ? FROM wake_safety_decisions WHERE request_id = ?
+        `).run(a,t,n.wakeId??null,n.principalType,n.principal.kind,n.principal.id,r.target_agent_id,r.execution_kind,n.decision,n.reasonCode??null,n.grantRule??null,n.grantId??null,JSON.stringify(n.snapshot),n.now??Date.now(),t),e.prepare("SELECT * FROM wake_safety_decisions WHERE id = ?").get(a)}).immediate()},listSafetyDecisions:t=>e.prepare("SELECT * FROM wake_safety_decisions WHERE request_id = ? ORDER BY sequence ASC").all(t),latestSafetyDecision:t=>e.prepare("SELECT * FROM wake_safety_decisions WHERE request_id = ? ORDER BY sequence DESC LIMIT 1").get(t),transitionWorkRequest(t,n){if(!A[n.from]?.includes(n.to))throw new k("invalid_transition",`Cannot move a work request from ${n.from} to ${n.to}.`);let r=I.includes(n.to);return e.transaction(()=>{let i=d(t),a=n.now??Date.now();if(1!==e.prepare(`
+          UPDATE work_requests SET
+            state = ?, state_reason = ?, version = version + 1, updated_at = ?,
+            result = ?, error_code = ?, error_message = ?, terminal_at = ?
+          WHERE id = ? AND state = ? AND (? IS NULL OR version = ?)
+        `).run(n.to,n.reason??null,a,r?M(n.result):null,r?n.errorCode??null:null,r?n.errorMessage??null:null,r?a:null,t,n.from,n.expectedVersion??null,n.expectedVersion??null).changes)throw new k("stale_state",`Work request ${t} is ${i.state} at version ${i.version}, not ${n.from}${void 0===n.expectedVersion?"":` at version ${n.expectedVersion}`}.`);return c(t,"state_changed",{...n.data??{},from:n.from,to:n.to,reason:n.reason??null,...n.errorCode?{error_code:n.errorCode}:{}},null,a),r&&null===i.legacy_agent_request_id&&"dispatcher"===i.executor&&e.prepare("INSERT OR IGNORE INTO terminal_followups (request_id, created_at) VALUES (?, ?)").run(t,a),d(t)}).immediate()},reblockWorkRequest:(t,n)=>e.transaction(()=>{let r=n.now??Date.now();if(1!==e.prepare("UPDATE work_requests SET state_reason = ?, version = version + 1, updated_at = ? WHERE id = ? AND state = 'blocked'").run(n.reason,r,t).changes)throw new k("stale_state",`Work request ${t} is not blocked.`);return c(t,n.type,n.data??{},null,r),d(t)}).immediate(),appendEvent(t,n){if(!x(n.type))throw new k("invalid_input","Event type is required.");return e.transaction(()=>{if(d(t),n.attemptId&&u(n.attemptId).request_id!==t)throw new k("invalid_input","The attempt belongs to another request.");return c(t,n.type,n.data,n.attemptId??null,n.now??Date.now())}).immediate()},listEvents:t=>e.prepare("SELECT * FROM engine_events WHERE request_id = ? ORDER BY sequence ASC").all(t),createAttempt(t,n){if("launch"!==n.kind&&"resume"!==n.kind)throw new k("invalid_input","Unknown attempt kind.");if(!x(n.adapter))throw new k("invalid_input","adapter is required.");if("resume"===n.kind&&!n.resumedSessionBindingId)throw new k("invalid_input","A resume attempt names the session binding it resumes.");if("launch"===n.kind&&n.resumedSessionBindingId)throw new k("invalid_input","A launch attempt does not resume a session binding.");let r="string"==typeof n.launchSnapshot?n.launchSnapshot:JSON.stringify(n.launchSnapshot);if("string"!=typeof r||0===r.length)throw new k("invalid_input","A launch snapshot is required.");return e.transaction(()=>{let a=d(t);if("running"!==a.state)throw new k("attempt_conflict",`Attempts start only on running requests (request is ${a.state}).`);if(n.toolProfile!==a.tool_profile)throw new k("invalid_input",`The attempt tool profile must be ${a.tool_profile}.`);if(e.prepare("SELECT id FROM work_attempts WHERE request_id = ? AND finished_at IS NULL").get(t))throw new k("attempt_conflict","The request already has an open attempt.");if(n.resumedSessionBindingId){let e=o.get(n.resumedSessionBindingId);if(!e)throw new k("not_found","Session binding not found.");if(null!==e.released_at)throw new k("session_mismatch","The session binding was released.");if(e.agent_id!==a.target_agent_id||e.adapter!==n.adapter)throw new k("session_mismatch","The session binding belongs to another Agent or adapter.");if(null!==e.conversation_id&&e.conversation_id!==a.source_conversation_id)throw new k("session_mismatch","The session binding belongs to another conversation.");if(null!==e.request_id&&d(e.request_id).root_request_id!==a.root_request_id)throw new k("session_mismatch","The session binding belongs to an unrelated work request.")}let s=n.now??Date.now(),_=(0,i.randomUUID)(),E=e.prepare("SELECT COALESCE(MAX(attempt_number), 0) + 1 AS n FROM work_attempts WHERE request_id = ?").get(t);return e.prepare(`
+          INSERT INTO work_attempts (
+            id, request_id, attempt_number, kind, adapter, tool_profile, launch_snapshot, launch_snapshot_hash,
+            resumed_session_binding_id, external_run_id, external_session_id, started_at
+          ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        `).run(_,t,E.n,n.kind,n.adapter,n.toolProfile,r,G(r),n.resumedSessionBindingId??null,n.externalRunId??null,n.externalSessionId??null,s),c(t,"attempt_started",{attempt_number:E.n,kind:n.kind,adapter:n.adapter},_,s),u(_)}).immediate()},recordAttemptExternalIds:(t,n)=>e.transaction(()=>{let r=u(t);if(null!==r.finished_at)throw new k("attempt_conflict","The attempt is already finished.");return e.prepare("UPDATE work_attempts SET external_run_id = ?, external_session_id = ? WHERE id = ?").run(void 0===n.externalRunId?r.external_run_id:n.externalRunId,void 0===n.externalSessionId?r.external_session_id:n.externalSessionId,t),u(t)}).immediate(),finishAttempt(t,n){if(!["succeeded","failed","cancelled","interrupted","timed_out"].includes(n.outcome))throw new k("invalid_input","Unknown attempt outcome.");return e.transaction(()=>{let r=u(t);if(null!==r.finished_at)throw new k("attempt_conflict","The attempt is already finished.");let i=n.now??Date.now();return e.prepare(`
+          UPDATE work_attempts SET outcome = ?, output = ?, error_category = ?, error_message = ?, artifacts = ?,
+            external_run_id = ?, external_session_id = ?, finished_at = ?
+          WHERE id = ? AND finished_at IS NULL
+        `).run(n.outcome,n.output??null,n.errorCategory??null,n.errorMessage??null,JSON.stringify(n.artifacts??[]),void 0===n.externalRunId?r.external_run_id:n.externalRunId,void 0===n.externalSessionId?r.external_session_id:n.externalSessionId,i,t),c(r.request_id,"attempt_finished",{attempt_number:r.attempt_number,outcome:n.outcome,error_category:n.errorCategory??null},t,i),u(t)}).immediate()},getAttempt:e=>r.get(e),listAttempts:t=>e.prepare("SELECT * FROM work_attempts WHERE request_id = ? ORDER BY attempt_number ASC").all(t),bindSession(t){if(!x(t.agentId))throw new k("invalid_input","agentId is required.");if(!x(t.adapter))throw new k("invalid_input","adapter is required.");if(!x(t.externalSessionId))throw new k("invalid_input","externalSessionId is required.");if(!t.conversationId&&!t.requestId)throw new k("invalid_input","A session binding is scoped to a conversation or work request.");return e.transaction(()=>{let n=t.now??Date.now();if(!e.prepare("SELECT 1 FROM bots WHERE id = ?").get(t.agentId))throw new k("not_found",`No agent ${t.agentId}.`);if(t.requestId){let e=d(t.requestId);if(e.target_agent_id!==t.agentId)throw new k("session_mismatch","The work request targets another Agent.");if(t.conversationId&&e.source_conversation_id!==t.conversationId)throw new k("session_mismatch","The work request belongs to another conversation.")}if(t.sourceAttemptId){let e=u(t.sourceAttemptId),n=d(e.request_id);if(e.adapter!==t.adapter||n.target_agent_id!==t.agentId)throw new k("session_mismatch","The source attempt ran another Agent or adapter.");if(t.requestId&&e.request_id!==t.requestId)throw new k("session_mismatch","The source attempt belongs to another work request.");if(t.conversationId&&n.source_conversation_id!==t.conversationId)throw new k("session_mismatch","The source attempt belongs to another conversation.")}e.prepare(`
+          UPDATE session_bindings SET released_at = ?
+          WHERE agent_id = ? AND adapter = ? AND IFNULL(conversation_id, '') = ? AND IFNULL(request_id, '') = ?
+            AND released_at IS NULL
+        `).run(n,t.agentId,t.adapter,t.conversationId??"",t.requestId??"");let r=(0,i.randomUUID)();return e.prepare(`
+          INSERT INTO session_bindings (id, agent_id, adapter, conversation_id, request_id, external_session_id, source_attempt_id, created_at)
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+        `).run(r,t.agentId,t.adapter,t.conversationId??null,t.requestId??null,t.externalSessionId,t.sourceAttemptId??null,n),t.requestId&&c(t.requestId,"session_bound",{binding_id:r,adapter:t.adapter},t.sourceAttemptId??null,n),o.get(r)}).immediate()},getActiveSessionBinding:t=>e.prepare(`
+        SELECT * FROM session_bindings
+        WHERE agent_id = ? AND adapter = ? AND IFNULL(conversation_id, '') = ? AND IFNULL(request_id, '') = ?
+          AND released_at IS NULL
+      `).get(t.agentId,t.adapter,t.conversationId??"",t.requestId??"")};return T}function B(e,t){let n=(t,...n)=>e.prepare(t).all(...n).map(e=>e.id),r=new Set(n(t.requests,t.arg)),i=new Set(n(t.bindings,t.arg)),a=new Set,s=(e,t)=>{let n=!1;for(let r of t)e.has(r)||(e.add(r),n=!0);return n},o=e=>JSON.stringify([...e]),d="(SELECT value FROM json_each(?))";for(;;){let e=s(r,n(`SELECT id FROM work_requests WHERE parent_request_id IN ${d} OR root_request_id IN ${d}`,o(r),o(r))),t=s(r,n(`SELECT request_id AS id FROM work_attempts WHERE id IN ${d}`,o(a))),_=s(a,n(`SELECT id FROM work_attempts WHERE request_id IN ${d} OR resumed_session_binding_id IN ${d}`,o(r),o(i))),E=s(i,n(`SELECT id FROM session_bindings WHERE request_id IN ${d} OR source_attempt_id IN ${d}`,o(r),o(a)));if(!e&&!t&&!_&&!E)break}e.prepare(`DELETE FROM conversation_events WHERE request_id IN ${d}`).run(o(r)),e.prepare(`DELETE FROM finalizations WHERE implementation_request_id IN ${d} OR review_request_id IN ${d} OR decision_request_id IN ${d}`).run(o(r),o(r),o(r)),e.prepare(`DELETE FROM candidate_manifests WHERE request_id IN ${d}`).run(o(r)),e.prepare(`DELETE FROM attempt_finalization_baselines WHERE request_id IN ${d}`).run(o(r)),e.prepare(`DELETE FROM conversation_projection_cursors WHERE request_id IN ${d}`).run(o(r)),e.prepare(`DELETE FROM wake_safety_decisions WHERE request_id IN ${d}`).run(o(r)),e.prepare(`DELETE FROM dispatch_leases WHERE request_id IN ${d}`).run(o(r)),e.prepare(`DELETE FROM attempt_launch_intents WHERE request_id IN ${d}`).run(o(r)),e.prepare(`DELETE FROM dispatch_attention WHERE request_id IN ${d}`).run(o(r));let _=h(e);for(let e of r)_.add(e);try{e.prepare(`DELETE FROM engine_events WHERE request_id IN ${d}`).run(o(r))}finally{_.clear()}for(;a.size>0||i.size>0;){let t=n(`SELECT id FROM session_bindings WHERE id IN ${d}
+         AND NOT EXISTS (SELECT 1 FROM work_attempts a WHERE a.resumed_session_binding_id = session_bindings.id)`,o(i));for(let n of t)e.prepare("DELETE FROM session_bindings WHERE id = ?").run(n),i.delete(n);let r=n(`SELECT id FROM work_attempts WHERE id IN ${d}
+         AND NOT EXISTS (SELECT 1 FROM session_bindings b WHERE b.source_attempt_id = work_attempts.id)`,o(a));for(let t of r)e.prepare("DELETE FROM work_attempts WHERE id = ?").run(t),a.delete(t);if(0===t.length&&0===r.length)throw Error("Engine records could not be removed: unexpected attempt/binding reference cycle.")}for(let t of(e.prepare(`DELETE FROM conversation_events WHERE request_id IS NULL AND wake_id IN (SELECT id FROM wakes WHERE work_request_id IN ${d} OR parent_request_id IN ${d} OR root_request_id IN ${d})`).run(o(r),o(r),o(r)),e.prepare(`DELETE FROM wakes WHERE work_request_id IN ${d} OR parent_request_id IN ${d} OR root_request_id IN ${d}`).run(o(r),o(r),o(r)),e.prepare(`DELETE FROM terminal_followups WHERE request_id IN ${d}`).run(o(r)),n(`SELECT id FROM work_requests WHERE id IN ${d} ORDER BY depth DESC`,o(r))))e.prepare("DELETE FROM work_requests WHERE id = ?").run(t)}function K(e,t){e.prepare("DELETE FROM conversation_intakes WHERE conversation_id = ?").run(t),e.prepare("DELETE FROM delegation_chains WHERE conversation_id = ?").run(t),e.prepare("DELETE FROM conversation_events WHERE conversation_id = ? AND request_id IS NULL").run(t),e.prepare("DELETE FROM wakes WHERE source_conversation_id = ?").run(t),B(e,{requests:"SELECT id FROM work_requests WHERE source_conversation_id = ?",bindings:"SELECT id FROM session_bindings WHERE conversation_id = ?",arg:t})}function Y(e,t){e.prepare(`DELETE FROM conversation_events WHERE request_id IS NULL AND wake_id IN (
+    SELECT id FROM wakes WHERE target_agent_id = ? OR (requester_agent_id = ? AND work_request_id IS NULL))`).run(t,t),e.prepare("DELETE FROM wakes WHERE target_agent_id = ? OR (requester_agent_id = ? AND work_request_id IS NULL)").run(t,t),e.prepare("DELETE FROM wake_grants WHERE caller_agent_id = ? OR target_agent_id = ?").run(t,t),B(e,{requests:"SELECT id FROM work_requests WHERE target_agent_id = ?",bindings:"SELECT id FROM session_bindings WHERE agent_id = ?",arg:t})}function P(e){if(!e)return{};try{let t=JSON.parse(e);return t&&"object"==typeof t&&!Array.isArray(t)?t:{}}catch{return{}}}function $(e){return"string"==typeof e&&e.length>0?e:null}function z(e,t){return t?`${e}: ${t}`:e}function j(e,t,n,r){let i="grant_required"===t,a=i?"needs your approval for edit work":n;return{kind:"wake_blocked",attemptId:null,text:a?`Wake blocked: ${e} — ${a}`:`Wake blocked: ${e}`,data:{...r,target_name:e,reason_code:t,reason:n,actions:i?["allow","deny"]:[]}}}e.s(["EngineStoreError",0,k,"TERMINAL_STATES",0,I,"UI_TURN_INTERRUPTED",0,W,"UI_TURN_INTERRUPTED_MESSAGE",0,X,"UI_TURN_REQUESTER",0,U,"createEngineStore",0,H,"deleteEngineRecordsForAgent",0,Y,"deleteEngineRecordsForConversation",0,K,"migrateEngineSchema",0,C,"uiTurnExecutionPolicy",0,F],35613);let J="agent_name_conflict";function V(e){return String(e??"").trim()}function Q(e){return V(e).normalize("NFC").toLowerCase().normalize("NFC")}function Z(e){return`An Agent named "${V(e)}" already exists. Agent names must be unique, ignoring case and surrounding spaces.`}class ee extends Error{code=J;requestedName;conflictingAgentId;constructor(e,t){super(Z(e)),this.name="AgentNameConflictError",this.requestedName=V(e),this.conflictingAgentId=t}}function et(e){let t=[...e].sort((e,t)=>e.created_at-t.created_at||(e.id<t.id?-1:+(e.id>t.id))),n=new Map,r=[],i=[];for(let e of t){let t=Q(e.name);if(n.has(t)){r.push(e);continue}n.set(t,e.id),e.name_key!==t&&i.push({id:e.id,name:e.name,name_key:t})}let a=[];for(let e of r){let t=Q(e.name),r=V(e.name)||"Agent",s=2;for(;n.has(Q(`${r}-${s}`));)s++;let o=`${r}-${s}`,d=Q(o);n.set(d,e.id),i.push({id:e.id,name:o,name_key:d}),a.push({bot_id:e.id,previous_name:e.name,new_name:o,name_key:t,kept_bot_id:n.get(t)})}return{updates:i,renames:a}}e.s(["AgentNameConflictError",0,ee,"agentDisplayName",0,V,"agentNameConflictBody",0,function(e,t="name"){return{error:e.message,code:J,field:t,name:e.requestedName,conflicting_agent_id:e.conflictingAgentId}},"agentNameConflictMessage",0,Z,"agentNameKey",0,Q,"planNameMigration",0,et],30098);let en=(0,e.i(52036).dbPath)();":memory:"!==en&&n.default.mkdirSync(r.default.dirname(r.default.resolve(en)),{recursive:!0});let er=new t.default(en);er.pragma("journal_mode = WAL"),er.exec(`
+  CREATE TABLE IF NOT EXISTS bots (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    title TEXT NOT NULL,
+    description TEXT NOT NULL,
+    avatar TEXT,
+    created_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS groups (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    created_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS group_members (
+    group_id TEXT NOT NULL,
+    bot_id TEXT NOT NULL,
+    PRIMARY KEY (group_id, bot_id),
+    FOREIGN KEY (group_id) REFERENCES groups(id),
+    FOREIGN KEY (bot_id) REFERENCES bots(id)
+  );
+
+  CREATE TABLE IF NOT EXISTS conversations (
+    id TEXT PRIMARY KEY,
+    type TEXT NOT NULL,
+    bot_id TEXT,
+    group_id TEXT,
+    created_at INTEGER NOT NULL,
+    FOREIGN KEY (bot_id) REFERENCES bots(id),
+    FOREIGN KEY (group_id) REFERENCES groups(id)
+  );
+
+  CREATE TABLE IF NOT EXISTS messages (
+    id TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    sender_type TEXT NOT NULL,
+    sender_id TEXT,
+    content TEXT NOT NULL,
+    created_at INTEGER NOT NULL,
+    FOREIGN KEY (conversation_id) REFERENCES conversations(id)
+  );
+
+  CREATE TABLE IF NOT EXISTS launch_snapshots (
+    id TEXT PRIMARY KEY,
+    bot_id TEXT NOT NULL,
+    created_at INTEGER NOT NULL,
+    hash TEXT NOT NULL,
+    snapshot TEXT NOT NULL,
+    FOREIGN KEY (bot_id) REFERENCES bots(id)
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_messages_conversation ON messages(conversation_id, created_at);
+  CREATE INDEX IF NOT EXISTS idx_snapshots_bot ON launch_snapshots(bot_id, created_at DESC);
+
+  CREATE TABLE IF NOT EXISTS mcp_servers (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    command TEXT NOT NULL,
+    args TEXT NOT NULL,
+    created_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS draft_actions (
+    message_id TEXT PRIMARY KEY,
+    status TEXT NOT NULL,
+    recipient TEXT,
+    acted_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS approvals (
+    conversation_id TEXT NOT NULL,
+    code TEXT NOT NULL,
+    message_id TEXT,
+    status TEXT NOT NULL DEFAULT 'pending',
+    created_at INTEGER NOT NULL,
+    resolved_at INTEGER,
+    PRIMARY KEY (conversation_id, code)
+  );
+
+  CREATE TABLE IF NOT EXISTS memories (
+    id TEXT PRIMARY KEY,
+    bot_id TEXT NOT NULL,
+    fact TEXT NOT NULL,
+    created_at INTEGER NOT NULL,
+    FOREIGN KEY (bot_id) REFERENCES bots(id)
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_memories_bot ON memories(bot_id, created_at);
+
+  CREATE TABLE IF NOT EXISTS one_shots (
+    id TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    bot_id TEXT NOT NULL,
+    due_at INTEGER NOT NULL,
+    fired INTEGER NOT NULL DEFAULT 0,
+    created_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS routines (
+    id TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    bot_id TEXT NOT NULL,
+    word TEXT NOT NULL,
+    next_due_at INTEGER NOT NULL,
+    every_ms INTEGER NOT NULL,
+    created_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS pending_questions (
+    id TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    bot_id TEXT NOT NULL,
+    question TEXT NOT NULL,
+    task_message_id TEXT,
+    task_content TEXT,
+    question_message_id TEXT,
+    answer_message_id TEXT,
+    answer TEXT,
+    status TEXT NOT NULL DEFAULT 'asked',
+    created_at INTEGER NOT NULL,
+    resolved_at INTEGER,
+    FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+    FOREIGN KEY (bot_id) REFERENCES bots(id)
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_pending_questions_conversation
+    ON pending_questions(conversation_id, status, created_at);
+
+  CREATE TABLE IF NOT EXISTS approval_requests (
+    id TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    bot_id TEXT,
+    code TEXT NOT NULL,
+    action_type TEXT,
+    action_args TEXT,
+    message_id TEXT,
+    status TEXT NOT NULL DEFAULT 'pending',
+    result TEXT,
+    created_at INTEGER NOT NULL,
+    resolved_at INTEGER,
+    FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+    FOREIGN KEY (bot_id) REFERENCES bots(id)
+  );
+
+  CREATE UNIQUE INDEX IF NOT EXISTS idx_approval_requests_conversation_code
+    ON approval_requests(conversation_id, code);
+  CREATE INDEX IF NOT EXISTS idx_approval_requests_conversation
+    ON approval_requests(conversation_id, status, created_at);
+`);let ei=["#C6F54A","#F0A05A","#E85D75","#C9A0FF","#F2E36B"],ea="9e363764-e0d5-4fff-8ebd-ccbc46ba0ba5",es="5fbe32c2-79cb-452e-9d9b-f8c9eb63b99b",eo=er.prepare("PRAGMA table_info(bots)").all();eo.some(e=>"color"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN color TEXT"),eo.some(e=>"pinned"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN pinned INTEGER NOT NULL DEFAULT 0"),eo.some(e=>"last_seen"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN last_seen INTEGER"),eo.some(e=>"unread"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN unread INTEGER NOT NULL DEFAULT 0"),eo.some(e=>"hidden"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN hidden INTEGER NOT NULL DEFAULT 0"),eo.some(e=>"source_provider"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN source_provider TEXT"),eo.some(e=>"template_id"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN template_id TEXT"),eo.some(e=>"template_url"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN template_url TEXT"),eo.some(e=>"import_schema_version"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN import_schema_version TEXT"),eo.some(e=>"import_operation_id"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN import_operation_id TEXT"),eo.some(e=>"import_timestamp"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN import_timestamp INTEGER"),eo.some(e=>"hermes_profile"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN hermes_profile TEXT"),eo.some(e=>"persistent_runtime"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN persistent_runtime TEXT NOT NULL DEFAULT 'hermes'"),eo.some(e=>"coding_runtime"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN coding_runtime TEXT"),eo.some(e=>"deck_name"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN deck_name TEXT"),eo.some(e=>"working_directory"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN working_directory TEXT"),eo.some(e=>"runtime"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN runtime TEXT"),eo.some(e=>"agent_client"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN agent_client TEXT"),eo.some(e=>"deck_id"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN deck_id TEXT"),eo.some(e=>"needs_deck_reselection"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN needs_deck_reselection INTEGER NOT NULL DEFAULT 0"),eo.some(e=>"agent"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN agent TEXT"),eo.some(e=>"needs_deck_selection"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN needs_deck_selection INTEGER NOT NULL DEFAULT 0");{let e=er.prepare("SELECT id, agent, runtime, agent_client, persistent_runtime, coding_runtime, deck_id, deck_name, working_directory, needs_deck_reselection, needs_deck_selection FROM bots WHERE agent IS NULL").all(),t=er.prepare("UPDATE bots SET agent = ?, deck_id = ?, deck_name = ?, working_directory = ?, needs_deck_selection = ? WHERE id = ?");er.transaction(e=>{for(let n of e){let e=(0,a.migrateLegacyAgentFields)(n);t.run(e.agent,e.deck_id,e.deck_name,e.working_directory,+!!e.needs_deck_selection,n.id)}})(e)}eo.some(e=>"avatar_color"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN avatar_color TEXT"),eo.some(e=>"avatar_eyes"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN avatar_eyes TEXT"),eo.some(e=>"avatar_hands"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN avatar_hands TEXT"),eo.some(e=>"avatar_accessory"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN avatar_accessory TEXT"),eo.some(e=>"name_key"===e.name)||er.exec("ALTER TABLE bots ADD COLUMN name_key TEXT"),er.exec(`
+  CREATE TABLE IF NOT EXISTS agent_name_migrations (
+    id TEXT PRIMARY KEY,
+    bot_id TEXT NOT NULL,
+    previous_name TEXT NOT NULL,
+    new_name TEXT NOT NULL,
+    name_key TEXT NOT NULL,
+    kept_bot_id TEXT NOT NULL,
+    reason TEXT NOT NULL,
+    created_at INTEGER NOT NULL
+  );
+`),er.transaction(()=>{let e=et(er.prepare("SELECT id, name, created_at, name_key FROM bots").all());if(0===e.updates.length)return;let t=er.prepare("UPDATE bots SET name_key = NULL WHERE id = ?");for(let n of e.updates)t.run(n.id);let n=er.prepare("UPDATE bots SET name = ?, name_key = ? WHERE id = ?");for(let t of e.updates)n.run(t.name,t.name_key,t.id);let r=er.prepare("INSERT INTO agent_name_migrations (id, bot_id, previous_name, new_name, name_key, kept_bot_id, reason, created_at) VALUES (?, ?, ?, ?, ?, ?, 'duplicate_name', ?)"),a=Date.now();for(let t of e.renames)r.run((0,i.randomUUID)(),t.bot_id,t.previous_name,t.new_name,t.name_key,t.kept_bot_id,a),console.warn(`[botmancers] Agent ${t.bot_id} renamed "${t.previous_name}" -> "${t.new_name}": name already used by Agent ${t.kept_bot_id}.`)})(),er.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_bots_name_key ON bots(name_key)"),er.exec(`
+  CREATE UNIQUE INDEX IF NOT EXISTS idx_bots_import_operation
+  ON bots(import_operation_id) WHERE import_operation_id IS NOT NULL
+`),er.prepare("UPDATE bots SET color = ? WHERE id = ?").run(ei[0],ea),er.prepare("UPDATE bots SET color = ? WHERE id = ?").run(ei[1],es);let ed=er.prepare("SELECT id FROM bots WHERE id NOT IN (?, ?) ORDER BY created_at ASC").all(ea,es),e_=er.prepare("UPDATE bots SET color = ? WHERE id = ?");function eE(e,t){let n=V(e),r=Q(n),i=er.prepare("SELECT id FROM bots WHERE name_key = ?").get(r);if(i&&i.id!==t)throw new ee(n,i.id);return{name:n,name_key:r}}function eu(e,t){try{return t()}catch(t){if(t instanceof Error&&/UNIQUE constraint failed: bots\.name_key/.test(t.message)){let t=er.prepare("SELECT id FROM bots WHERE name_key = ?").get(Q(e));throw new ee(e,t?.id??null)}throw t}}function ec(){return ei[er.prepare("SELECT COUNT(*) AS n FROM bots").get().n%ei.length]}ed.forEach((e,t)=>{e_.run(ei[(t+2)%ei.length],e.id)});let eT=er.prepare("PRAGMA table_info(messages)").all();eT.some(e=>"handoff_targets"===e.name)||er.exec("ALTER TABLE messages ADD COLUMN handoff_targets TEXT"),er.prepare("PRAGMA table_info(groups)").all().some(e=>"owner_bot_id"===e.name)||er.exec("ALTER TABLE groups ADD COLUMN owner_bot_id TEXT"),er.prepare("PRAGMA table_info(launch_snapshots)").all().some(e=>"transport"===e.name)||er.exec("ALTER TABLE launch_snapshots ADD COLUMN transport TEXT NOT NULL DEFAULT 'hermes-gateway'");let el=er.prepare("PRAGMA table_info(conversations)").all();el.some(e=>"origin_kind"===e.name)||er.exec("ALTER TABLE conversations ADD COLUMN origin_kind TEXT"),el.some(e=>"origin_id"===e.name)||er.exec("ALTER TABLE conversations ADD COLUMN origin_id TEXT"),eT.some(e=>"sender_kind"===e.name)||er.exec("ALTER TABLE messages ADD COLUMN sender_kind TEXT"),eT.some(e=>"request_id"===e.name)||er.exec("ALTER TABLE messages ADD COLUMN request_id TEXT"),er.exec(`
+  CREATE TABLE IF NOT EXISTS conversation_participants (
+    conversation_id TEXT NOT NULL,
+    participant_kind TEXT NOT NULL,
+    participant_id TEXT NOT NULL,
+    joined_at INTEGER NOT NULL,
+    PRIMARY KEY (conversation_id, participant_kind, participant_id),
+    FOREIGN KEY (conversation_id) REFERENCES conversations(id)
+  );
+`),C(er);let ep=H(er),eN=function(e){let t=e.prepare("SELECT * FROM work_requests WHERE id = ?"),n=e.prepare("SELECT * FROM work_attempts WHERE id = ?"),r=e.prepare("SELECT * FROM engine_events WHERE request_id = ? ORDER BY sequence ASC"),i=e.prepare("SELECT sequence FROM conversation_projection_cursors WHERE request_id = ?"),a=e.prepare(`
+    INSERT INTO conversation_projection_cursors (request_id, sequence) VALUES (?, ?)
+    ON CONFLICT (request_id) DO UPDATE SET sequence = excluded.sequence WHERE excluded.sequence > sequence
+  `),s=e.prepare(`
+    INSERT OR IGNORE INTO conversation_events (
+      id, conversation_id, engine_event_id, part, request_id, request_sequence, attempt_id, wake_id,
+      kind, state, text, data, sort_at, request_created_at, created_at
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+  `);function o(e){return e?n.get(e):void 0}function d(n){return e.transaction(()=>{let e=t.get(n);if(!e)return 0;let d=i.get(n)?.sequence??0,_=r.all(n),E=_.length>0?_[_.length-1].sequence:0;if(E<=d)return 0;let u={state:null,lastFinished:null},c=0,T=0;for(let t of _){c=Math.max(c,t.created_at);let n={...u};!function(e,t){let n=P(t.data);"accepted"===t.type&&$(n.state)&&(e.state=n.state),"state_changed"===t.type&&$(n.to)&&(e.state=n.to),"attempt_finished"===t.type&&t.attempt_id&&(e.lastFinished={attemptId:t.attempt_id,outcome:$(n.outcome)})}(u,t),t.sequence<=d||null!==e.legacy_agent_request_id||(function(e,t,n){let r=P(e.data),i=P(t.policy_snapshot),a=null!==t.wake_event_id,s=$(i.target_name_snapshot)??t.target_agent_id,d={target_agent_id:t.target_agent_id,execution_kind:t.execution_kind,tool_profile:t.tool_profile};switch(e.type){case"accepted":if("blocked"===r.state)return[];if(a)return[{kind:"wake_accepted",attemptId:null,text:`Wake accepted: ${s} (${t.execution_kind})`,data:{...d,target_name:s,requester_kind:t.requester_kind,requester_id:t.requester_id,parent_request_id:t.parent_request_id,depth:t.depth,wake_depth:t.wake_depth,grant_rule:$(i.grant_rule),grant_id:$(i.grant_id)}}];return[{kind:"request_queued",attemptId:null,text:"Queued",data:{...d,requester_kind:t.requester_kind,requester_id:t.requester_id}}];case"state_changed":{let e=$(r.to),i=$(r.from),_=$(r.reason);switch(e){case"blocked":if(a&&"queued"===i&&"blocked"===n.state){let e=function(e){if(!e)return{code:null,reason:null};let t=/^([a-z_]+): ([\s\S]*)$/.exec(e);return t?{code:t[1],reason:t[2]}:{code:null,reason:e}}(_);return[j(s,e.code,e.reason,d)]}return[{kind:"request_blocked",attemptId:null,text:z("Blocked",_),data:{from:i,reason:_}}];case"queued":if("retry_scheduled"===_){let e="number"==typeof r.attempt_count?r.attempt_count:null,t="number"==typeof r.max_attempts?r.max_attempts:null;return[{kind:"request_retry_scheduled",attemptId:n.lastFinished?.attemptId??null,text:!0===r.manual?`Retry requested${null!==e&&null!==t?` (Attempt ${e+1} of ${t})`:""}`:`Retry scheduled${null!==e&&null!==t?` (Attempt ${e+1} of ${t})`:""}${"number"==typeof r.delay_ms?` in ${r.delay_ms} ms`:""}`,data:{from:i,reason:_,manual:!0===r.manual,attempt_count:e,max_attempts:t,next_eligible_at:r.next_eligible_at??null,delay_ms:r.delay_ms??null,category:r.category??null,outcome:n.lastFinished?.outcome??null}}]}if(a&&"blocked"===i&&("grant_approved"===_||"target_available"===_))return[{kind:"wake_accepted",attemptId:null,text:`Wake accepted: ${s} (${t.execution_kind})`,data:{...d,target_name:s,requester_kind:t.requester_kind,requester_id:t.requester_id,parent_request_id:t.parent_request_id,depth:t.depth,wake_depth:t.wake_depth,reason:_,grant_rule:r.grant_rule??null,grant_id:r.grant_id??null}}];return[{kind:"request_queued",attemptId:null,text:z("Queued again",_),data:{from:i,reason:_}}];case"running":return[{kind:"request_running",attemptId:null,text:"Running",data:{phase:"dispatched",from:i}}];case"waiting":return[{kind:"request_waiting",attemptId:null,text:z("Waiting",_),data:{from:i,reason:_}}];case"completed":{let e=n.lastFinished,r=e?.outcome==="succeeded",i=[{kind:"request_completed",attemptId:e?.attemptId??null,text:r?"Completed":"Completed without a successful Attempt outcome",data:{success:r,outcome:e?.outcome??null}}];if(r&&e){let n=o(e.attemptId),r=P(t.result);i.push({kind:"result",attemptId:e.attemptId,text:n?.output??"Result recorded",data:{reply_message_id:$(r.reply_message_id),has_output:"string"==typeof n?.output}})}return i}case"failed":case"cancelled":{let a=n.lastFinished,s=t.error_code??$(r.error_code),o=t.error_message;if("failed"===e&&"timed_out"===_)return[{kind:"request_timed_out",attemptId:a?.attemptId??null,text:"Timed out: the request passed its deadline",data:{success:!1,error_code:s,reason:_,deadline_at:r.deadline_at??null,from:i,outcome:a?.outcome??null}}];if("failed"===e&&"retries_exhausted"===_)return[{kind:"request_retries_exhausted",attemptId:a?.attemptId??null,text:z(`Retries exhausted after ${r.attempt_count??"?"} of ${r.max_attempts??"?"} Attempts`,o??s),data:{success:!1,error_code:s,error_message:o,reason:_,attempt_count:r.attempt_count??null,max_attempts:r.max_attempts??null,outcome:a?.outcome??null}}];return[{kind:"failed"===e?"request_failed":"request_cancelled",attemptId:a?.attemptId??null,text:"failed"===e?z("Failed",o??s):"cancel_requested"===_?z("Cancelled",t.cancel_reason):"grant_denied"===_?"Cancelled: owner denied edit Wake":z("Cancelled",_??o),data:{success:!1,error_code:s,error_message:o,reason:_,outcome:a?.outcome??null}}]}default:return[]}}case"runtime_started":{let t=$(r.adapter);return[{kind:"request_running",attemptId:e.attempt_id,text:t?`Running on ${t}`:"Running",data:{phase:"runtime_started",adapter:t,external_run_id:$(r.external_run_id),success:!1}}]}case"wake_reblocked":return[j(s,$(r.reason_code),$(r.reason),d)];case"dispatch_deferred":return[{kind:"request_queued",attemptId:null,text:"Queued: waiting for capacity",data:{waiting_for:"capacity",limit:$(r.reason),active_global:r.active_global??null,active_target:r.active_target??null,max_global:r.max_global??null,max_per_target:r.max_per_target??null}}];case"lineage_stopped":return[{kind:"lineage_stopped",attemptId:null,text:"continuation_budget_exhausted"===r.reason?`Stopped: coordinator continuation limit ${r.limit??"?"} reached`:z("Stopped",$(r.reason)),data:r}];case"cancel_requested":{let e=$(r.reason);return[{kind:"request_cancel_requested",attemptId:null,text:z("Cancel requested",e),data:{by:$(r.by),reason:e,state:$(r.state)}}]}case"question":{let t=$(r.question)??"";return[{kind:"question",attemptId:e.attempt_id,text:t,data:{question:t}}]}case"attempt_finished":{let t=o(e.attempt_id);if(!t)return[];let n=[];try{let e=JSON.parse(t.artifacts);Array.isArray(e)&&(n=e)}catch{}return n.filter(e=>!(e&&"object"==typeof e&&"candidate_manifest"===e.kind)).map(e=>{let n=e&&"object"==typeof e?e:{ref:String(e)},r=$(n.kind)??"artifact",i=$(n.ref)??"";return{kind:"artifact",attemptId:t.id,text:`Artifact (${r}): ${i}`,data:{artifact_kind:r,ref:i,outcome:t.outcome}}})}case"candidate_manifest_recorded":{let t=$(r.manifest_digest),n="number"==typeof r.file_count?r.file_count:0;return[{kind:"artifact",attemptId:e.attempt_id,text:`Candidate manifest ${t}: ${n} ${1===n?"file":"files"} on base ${$(r.base_commit)}`,data:{artifact_kind:"candidate_manifest",ref:t,...r}}]}case"candidate_manifest_unavailable":return[{kind:"finalization_blocked",attemptId:e.attempt_id,text:z("Not finalizable",$(r.reason_code)),data:{phase:"candidate",...r}}];case"finalization_preparing":return[{kind:"finalization_preparing",attemptId:e.attempt_id,text:`Finalization preparing: manifest ${$(r.manifest_digest)} (${r.file_count??0} files), review ${$(r.review_request_id)}`,data:r}];case"finalization_retry_pending":return[{kind:"finalization_preparing",attemptId:e.attempt_id,text:z("Finalization waiting to retry",$(r.reason_code)),data:{retry:!0,...r}}];case"finalization_committed":return[{kind:"finalization_committed",attemptId:e.attempt_id,text:`Finalization committed: commit ${$(r.commit)} (tree ${$(r.tree)}, manifest ${$(r.result_manifest_digest)??$(r.manifest_digest)})`,data:{success:!0,...r}}];case"finalization_blocked":case"finalization_failed":case"finalization_canceled":{let t="finalization_blocked"===e.type?"blocked":"finalization_failed"===e.type?"failed":"canceled";return[{kind:e.type,attemptId:e.attempt_id,text:z(`Finalization ${t}`,$(r.reason_code)),data:{success:!1,...r}}]}case"finalization_rejected":return[{kind:"finalization_rejected",attemptId:null,text:z("Finalization not started",$(r.reason_code)),data:r}];default:return[]}})(t,e,n).forEach((n,r)=>{T+=s.run(`${t.id}:${r}`,e.source_conversation_id,t.id,r,e.id,t.sequence,n.attemptId,e.wake_event_id,n.kind,u.state,n.text,JSON.stringify(n.data),c,e.created_at,t.created_at).changes})}return a.run(n,E),T}).immediate()}function _(t){return e.transaction(()=>e.prepare("SELECT id FROM work_requests WHERE source_conversation_id = ? ORDER BY created_at ASC, id ASC").all(t).reduce((e,t)=>e+d(t.id),0)+function(t){let n=e.prepare(`
+      SELECT w.* FROM wakes w
+      WHERE w.source_conversation_id = ? AND w.status = 'rejected'
+        AND NOT EXISTS (SELECT 1 FROM conversation_events e WHERE e.id = 'wake:' || w.id || ':0')
+      ORDER BY w.created_at ASC, w.position ASC
+    `).all(t),r=0;for(let e of n){let t={wake_id:e.id,target_name:e.target_name_snapshot??e.requested_target,target_agent_id:e.target_agent_id,execution_kind:e.execution_kind,requester_agent_id:e.requester_agent_id,parent_request_id:e.parent_request_id,reason_code:e.reason_code,reason:e.reason,limit:e.limit_value,observed:e.observed_value,work_request_id:null};r+=s.run(`wake:${e.id}:0`,e.source_conversation_id,null,0,null,0,null,e.id,"wake_rejected",null,function(e){let t=e.target_name_snapshot??e.requested_target??"an unnamed target";switch(e.reason_code){case"untracked_lineage":return"Wake not started: its source turn is not tracked work";case"depth_exceeded":return`Wake not started: ${t} — depth limit ${e.limit_value??"?"} reached`;case"root_budget_exhausted":return`Wake not started: ${t} — this work already used ${e.observed_value??e.limit_value??"?"} Wakes`;default:return e.reason?`Wake not started: ${t} — ${e.reason}`:`Wake not started: ${t}`}}(e),JSON.stringify(t),e.updated_at,e.created_at,e.updated_at).changes}return r}(t)).immediate()}function E(t){return e.prepare(`
+      SELECT * FROM conversation_events WHERE conversation_id = ?
+      ORDER BY sort_at ASC, request_created_at ASC, COALESCE(request_id, wake_id) ASC, request_sequence ASC, part ASC
+    `).all(t)}return{projectRequest:d,projectConversation:_,projectEvent:function(e){return d(e.request_id)},listConversationEventRows:E,listConversationEvents:function(e){return _(e),E(e).map((e,t)=>({eventId:e.id,seq:t+1,kind:e.kind,requestId:e.request_id,requestSequence:e.request_sequence,attemptId:e.attempt_id,wakeId:e.wake_id,engineEventId:e.engine_event_id,state:e.state,text:e.text,data:P(e.data),createdAt:e.created_at}))}}}(er),eR={kind:"person",id:"local-owner"},em=er.prepare("INSERT OR IGNORE INTO conversation_participants (conversation_id, participant_kind, participant_id, joined_at) VALUES (?, ?, ?, ?)");function eL(e,t,n){for(let r of(er.prepare("UPDATE conversations SET origin_kind = ?, origin_id = ? WHERE id = ? AND origin_kind IS NULL").run(eR.kind,eR.id,e),em.run(e,eR.kind,eR.id,n),t))em.run(e,"bot",r,n)}er.transaction(()=>{er.exec("UPDATE messages SET sender_kind = 'person' WHERE sender_kind IS NULL AND sender_type = 'user'"),er.exec("UPDATE messages SET sender_kind = 'bot' WHERE sender_kind IS NULL AND sender_type = 'bot'");let e=er.prepare("SELECT id, type, bot_id, group_id, created_at FROM conversations WHERE origin_kind IS NULL AND type IN ('bot', 'group')").all(),t=er.prepare("SELECT bot_id FROM group_members WHERE group_id = ?");for(let n of e){let e="bot"===n.type?n.bot_id?[n.bot_id]:[]:n.group_id?t.all(n.group_id).map(e=>e.bot_id):[];eL(n.id,e,n.created_at)}})();let eO={create:(e,t)=>{let n=eE(e.name),r={id:t?.id||(0,i.randomUUID)(),...e,...n,color:ec(),created_at:t?.created_at??Date.now()};r.agent=r.agent||a.DEFAULT_AGENT,r.deck_id=r.deck_id||null,r.needs_deck_selection=!r.deck_id||r.needs_deck_selection?1:0,eu(r.name,()=>er.prepare("INSERT INTO bots (id, name, name_key, title, description, avatar, color, hermes_profile, agent, deck_id, deck_name, working_directory, needs_deck_selection, avatar_color, avatar_eyes, avatar_hands, avatar_accessory, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)").run(r.id,r.name,r.name_key,r.title,r.description,r.avatar||null,r.color,r.hermes_profile||null,r.agent,r.deck_id,r.deck_name||null,r.working_directory||null,r.needs_deck_selection,r.avatar_color||null,r.avatar_eyes||null,r.avatar_hands||null,r.avatar_accessory||null,r.created_at));let s=(0,i.randomUUID)();return er.prepare("INSERT INTO conversations (id, type, bot_id, created_at) VALUES (?, ?, ?, ?)").run(s,"bot",r.id,r.created_at),eL(s,[r.id],r.created_at),r},createFromImport:(e,t)=>{let n=eE(e.name),r={id:(0,i.randomUUID)(),...e,...n,color:ec(),created_at:Date.now(),agent:a.DEFAULT_AGENT,deck_id:null,deck_name:null,working_directory:null,needs_deck_selection:1,source_provider:t.source_provider,template_id:t.template_id,template_url:t.template_url,import_schema_version:t.import_schema_version,import_operation_id:t.import_operation_id,import_timestamp:t.import_timestamp};eu(r.name,()=>er.prepare(`INSERT INTO bots (
+        id, name, name_key, title, description, avatar, color, created_at,
+        source_provider, template_id, template_url, import_schema_version,
+        import_operation_id, import_timestamp,
+        agent, deck_id, deck_name, working_directory,
+        needs_deck_selection
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(r.id,r.name,r.name_key,r.title,r.description,r.avatar||null,r.color,r.created_at,r.source_provider,r.template_id,r.template_url,r.import_schema_version,r.import_operation_id,r.import_timestamp,r.agent,r.deck_id,r.deck_name,r.working_directory,r.needs_deck_selection));let s=(0,i.randomUUID)();return er.prepare("INSERT INTO conversations (id, type, bot_id, created_at) VALUES (?, ?, ?, ?)").run(s,"bot",r.id,r.created_at),eL(s,[r.id],r.created_at),r},getByImportOperationId:e=>er.prepare("SELECT * FROM bots WHERE import_operation_id = ?").get(e),getAll:()=>er.prepare("SELECT * FROM bots ORDER BY created_at DESC").all(),getById:e=>er.prepare("SELECT * FROM bots WHERE id = ?").get(e),setAvatar:(e,t)=>{er.prepare("UPDATE bots SET avatar = ? WHERE id = ?").run(t,e)},getByName:e=>{let t=Q(e);if(t)return er.prepare("SELECT * FROM bots WHERE name_key = ?").get(t)},updateIdentity:(e,t,n,r)=>{let i=eE(t,e);eu(i.name,()=>er.prepare("UPDATE bots SET name = ?, name_key = ?, title = ?, description = ? WHERE id = ?").run(i.name,i.name_key,n,r,e))},setPinned:(e,t)=>{er.prepare("UPDATE bots SET pinned = ? WHERE id = ?").run(+!!t,e)},setHidden:(e,t)=>{er.prepare("UPDATE bots SET hidden = ? WHERE id = ?").run(+!!t,e)},setHermesProfile:(e,t)=>{let n=t&&t.trim()?t.trim():null;er.prepare("UPDATE bots SET hermes_profile = ? WHERE id = ?").run(n,e)},updateAgentSelection:(e,t)=>{let n=eO.getById(e);if(!n)return;let r=(0,a.applyAgentUpdate)(n,t);er.prepare("UPDATE bots SET agent = ?, deck_id = ?, deck_name = ?, working_directory = ?, needs_deck_selection = ? WHERE id = ?").run(r.agent,r.deck_id,r.deck_name,r.working_directory,+!!r.needs_deck_selection,e)},updateAvatarConfig:(e,t)=>{let n=eO.getById(e);if(!n)return;let r=(e,t)=>void 0===e?t||null:e&&String(e).trim()?String(e).trim():null;er.prepare("UPDATE bots SET avatar_color = ?, avatar_eyes = ?, avatar_hands = ?, avatar_accessory = ? WHERE id = ?").run(r(t.avatar_color,n.avatar_color),r(t.avatar_eyes,n.avatar_eyes),r(t.avatar_hands,n.avatar_hands),r(t.avatar_accessory,n.avatar_accessory),e)},touchSeen:()=>{er.prepare("UPDATE bots SET last_seen = ?").run(Date.now())},markUnread:e=>{er.prepare("UPDATE bots SET unread = 1 WHERE id = ?").run(e)},markRead:e=>{er.prepare("UPDATE bots SET unread = 0 WHERE id = ?").run(e)},remove:e=>{eO.removeMany([e])},deletionPreview:e=>{var t;let n=new Set(e),r=[],i=[],a=[],o=new Set(eI());for(let t of e){let e=eO.getById(t);if(!e){i.push(t);continue}r.push({id:e.id,name:e.name}),(0,s.isChiefOfStaffName)(e.name)?a.push({id:e.id,name:e.name,reason:"chief"}):o.has(e.id)&&a.push({id:e.id,name:e.name,reason:"active"})}return{agents:r,groups:0===(t=n).size?[]:er.prepare(`SELECT DISTINCT g.id, g.name, g.owner_bot_id, g.created_at FROM groups g
+     JOIN group_members gm ON gm.group_id = g.id
+     WHERE gm.bot_id IN (${[...t].map(()=>"?").join(", ")})
+     ORDER BY g.created_at ASC, g.id ASC`).all(...t).map(e=>{let n=er.prepare(`SELECT b.id, b.name FROM bots b JOIN group_members gm ON gm.bot_id = b.id
+       WHERE gm.group_id = ? ORDER BY b.created_at ASC, b.id ASC`).all(e.id).filter(e=>!t.has(e.id));return n.length<2?{id:e.id,name:e.name,outcome:"removed",remaining:n.length,newOwner:null}:e.owner_bot_id&&t.has(e.owner_bot_id)?{id:e.id,name:e.name,outcome:"reassigned",remaining:n.length,newOwner:n[0]}:{id:e.id,name:e.name,outcome:"shrunk",remaining:n.length,newOwner:null}}),missing:i,blocked:a}},removeMany:(e,t)=>er.transaction(()=>{let n=eO.deletionPreview(e);if(n.missing.length>0||n.blocked.length>0)throw new eg(n);let r=new Set(e);for(let e of n.groups){if("removed"===e.outcome){var i=e.id;for(let e of er.prepare("SELECT id FROM conversations WHERE group_id = ?").all(i))ek(e.id);er.prepare("DELETE FROM group_members WHERE group_id = ?").run(i),er.prepare("DELETE FROM groups WHERE id = ?").run(i);continue}let t=er.prepare("SELECT id FROM conversations WHERE group_id = ?").all(e.id).map(e=>e.id);for(let n of r)for(let r of(er.prepare("DELETE FROM group_members WHERE group_id = ? AND bot_id = ?").run(e.id,n),t))er.prepare("DELETE FROM conversation_participants WHERE conversation_id = ? AND participant_kind = 'bot' AND participant_id = ?").run(r,n);e.newOwner&&er.prepare("UPDATE groups SET owner_bot_id = ? WHERE id = ?").run(e.newOwner.id,e.id)}for(let n of e){for(let e of er.prepare("SELECT id FROM conversations WHERE bot_id = ?").all(n))ek(e.id);Y(er,n),eS("bot_id",n),er.prepare("DELETE FROM launch_snapshots WHERE bot_id = ?").run(n),er.prepare("DELETE FROM group_members WHERE bot_id = ?").run(n),er.prepare("DELETE FROM conversation_participants WHERE participant_kind = 'bot' AND participant_id = ? AND conversation_id IN (SELECT id FROM conversations WHERE type = 'group')").run(n),er.prepare("DELETE FROM memories WHERE bot_id = ?").run(n),er.prepare("DELETE FROM one_shots WHERE bot_id = ?").run(n),er.prepare("DELETE FROM routines WHERE bot_id = ?").run(n),er.prepare("DELETE FROM pending_questions WHERE bot_id = ?").run(n),er.prepare("DELETE FROM approval_requests WHERE bot_id = ?").run(n),er.prepare("DELETE FROM wake_targets WHERE target_bot_id = ?").run(n),er.prepare("DELETE FROM bots WHERE id = ?").run(n),t?.onAgentDeleted?.(n)}return n})(),managementRows:()=>{let e=er.prepare("SELECT * FROM bots ORDER BY created_at DESC, id ASC").all(),t=new Set(eI()),n=new Map,r=e=>{for(let t of e)t.id&&t.at&&(n.get(t.id)??0)<t.at&&n.set(t.id,t.at)};return r(er.prepare("SELECT c.bot_id AS id, MAX(m.created_at) AS at FROM messages m JOIN conversations c ON c.id = m.conversation_id WHERE c.type = 'bot' GROUP BY c.bot_id").all()),r(er.prepare("SELECT sender_id AS id, MAX(created_at) AS at FROM messages WHERE sender_type = 'bot' AND sender_id IS NOT NULL GROUP BY sender_id").all()),e.map(e=>({bot:e,last_activity:n.get(e.id)??null,blocked:(0,s.isChiefOfStaffName)(e.name)?"chief":t.has(e.id)?"active":null}))}};class eg extends Error{preview;constructor(e){super(e.missing.length>0?"Agent not found":"Some agents cannot be deleted"),this.preview=e}}function eI(){return er.prepare(`
+    SELECT DISTINCT target_agent_id AS bot_id FROM work_requests
+    WHERE (executor <> 'dispatcher' AND state IN ('queued', 'running'))
+      OR (executor = 'dispatcher' AND state = 'running' AND json_extract(policy_snapshot, '$.surface') = 'ui')
+  `).all().map(e=>e.bot_id)}function eA(){return new Set(er.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name IN ('legacy_agent_requests_archive', 'legacy_agent_request_events_archive', 'legacy_processing_queue_archive')").all().map(e=>e.name))}function eS(e,t){eA().has("legacy_processing_queue_archive")&&er.prepare(`DELETE FROM legacy_processing_queue_archive WHERE ${e} = ?`).run(t)}function ek(e){let t;K(er,e),er.prepare("DELETE FROM draft_actions WHERE message_id IN (SELECT id FROM messages WHERE conversation_id = ?)").run(e),t=eA(),eS("conversation_id",e),t.has("legacy_agent_request_events_archive")&&t.has("legacy_agent_requests_archive")&&er.prepare("DELETE FROM legacy_agent_request_events_archive WHERE request_id IN (SELECT id FROM legacy_agent_requests_archive WHERE conversation_id = ?)").run(e),t.has("legacy_agent_requests_archive")&&er.prepare("DELETE FROM legacy_agent_requests_archive WHERE conversation_id = ?").run(e),er.prepare("DELETE FROM messages WHERE conversation_id = ?").run(e),er.prepare("DELETE FROM pending_questions WHERE conversation_id = ?").run(e),er.prepare("DELETE FROM approvals WHERE conversation_id = ?").run(e),er.prepare("DELETE FROM approval_requests WHERE conversation_id = ?").run(e),er.prepare("DELETE FROM one_shots WHERE conversation_id = ?").run(e),er.prepare("DELETE FROM routines WHERE conversation_id = ?").run(e),er.prepare("DELETE FROM wake_targets WHERE conversation_id = ?").run(e),er.prepare("DELETE FROM conversation_participants WHERE conversation_id = ?").run(e),er.prepare("DELETE FROM conversations WHERE id = ?").run(e)}let ev={getByBotId:e=>er.prepare("SELECT * FROM conversations WHERE bot_id = ?").get(e),getByGroupId:e=>er.prepare("SELECT * FROM conversations WHERE group_id = ?").get(e),getById:e=>er.prepare("SELECT * FROM conversations WHERE id = ?").get(e),getUiById:e=>er.prepare("SELECT * FROM conversations WHERE id = ? AND type != 'agent'").get(e)},ef={create:(e,t,n,r,a)=>{let s={id:(0,i.randomUUID)(),conversation_id:e,sender_type:t,sender_id:r,sender_kind:"bot"===t?"bot":eR.kind,content:n,handoff_targets:a&&a.length>0?JSON.stringify(a):null,created_at:Date.now()};if(er.prepare("INSERT INTO messages (id, conversation_id, sender_type, sender_id, sender_kind, content, handoff_targets, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)").run(s.id,s.conversation_id,s.sender_type,s.sender_id||null,s.sender_kind,s.content,s.handoff_targets||null,s.created_at),"bot"===t){r&&eO.markUnread(r);let t=er.prepare("SELECT bot_id FROM conversations WHERE id = ? AND type = ?").get(e,"bot");t?.bot_id&&t.bot_id!==r&&eO.markUnread(t.bot_id)}return s},getById:e=>er.prepare("SELECT * FROM messages WHERE id = ?").get(e),replaceContent:(e,t)=>{er.prepare("UPDATE messages SET content = ? WHERE id = ?").run(t,e)},getByConversation:e=>er.prepare("SELECT * FROM messages WHERE conversation_id = ? ORDER BY created_at ASC").all(e),getBetween:(e,t)=>{let n=ef.getById(e),r=ef.getById(t);if(!n||!r||n.conversation_id!==r.conversation_id)return null;let i=er.prepare("SELECT * FROM messages WHERE conversation_id = ? ORDER BY created_at ASC, rowid ASC").all(n.conversation_id),a=i.findIndex(t=>t.id===e),s=i.findIndex(e=>e.id===t);if(a<0||s<0)return null;let[o,d]=a<s?[a,s]:[s,a];return i.slice(o+1,d)},latestFromBot:e=>{let t=ev.getByBotId(e);for(let n of er.prepare(`SELECT content, conversation_id, created_at FROM messages
+       WHERE sender_type = 'bot' AND sender_id = ?
+       ORDER BY created_at DESC, rowid DESC
+       LIMIT 20`).all(e)){if(t&&n.conversation_id!==t.id)continue;let e=er.prepare(`SELECT content FROM messages
+         WHERE conversation_id = ? AND created_at < ?
+         ORDER BY created_at DESC, rowid DESC
+         LIMIT 1`).get(n.conversation_id,n.created_at);if(!(e&&e.content.startsWith("[From ")))return n.content}return""},priorSentenceForHandoff:e=>{if(!e.handoff_targets)return null;let t=[];try{let n=JSON.parse(e.handoff_targets);if(!Array.isArray(n))return null;t=n.map(e=>String(e))}catch{return null}let n=er.prepare(`
+      SELECT m.conversation_id AS conversation_id, c.type AS type, c.bot_id AS bot_id
+      FROM messages m
+      JOIN conversations c ON c.id = m.conversation_id
+      WHERE m.content = ? AND m.handoff_targets = ?
+      ORDER BY m.created_at ASC
+    `).all(e.content,e.handoff_targets).find(e=>"group"===e.type||!e.bot_id||!t.includes(e.bot_id)),r=n?.conversation_id||e.conversation_id,i=ef.getByConversation(r),a=[...i].reverse().find(t=>"user"===t.sender_type&&t.content===e.content&&t.handoff_targets===e.handoff_targets),s=a?a.created_at:e.created_at;for(let e=i.length-1;e>=0;e--){let t=i[e];if(a&&t.id===a.id||t.created_at>s||"bot"!==t.sender_type)continue;let n=(t.content||"").trim();if(n)return n}return null}},eq={get:(e,t)=>er.prepare("SELECT * FROM approvals WHERE conversation_id = ? AND code = ?").get(e,t),recordPending:(e,t,n)=>(er.prepare("INSERT OR IGNORE INTO approvals (conversation_id, code, message_id, status, created_at) VALUES (?, ?, ?, ?, ?)").run(e,t,n||null,"pending",Date.now()),eq.get(e,t)),resolve:(e,t,n)=>Number(er.prepare("UPDATE approvals SET status = ?, resolved_at = ? WHERE conversation_id = ? AND code = ? AND status = 'pending'").run(n,Date.now(),e,t).changes)>0},ew=20;function eh(e){let t=Q(e);if(!t)return{ok:!1,reason:"not_found",requested:String(e??"")};let n=er.prepare("SELECT id, name FROM bots WHERE name_key = ? LIMIT 2").all(t);return 0===n.length?{ok:!1,reason:"not_found",requested:e}:n.length>1?{ok:!1,reason:"ambiguous",requested:e}:{ok:!0,agentId:n[0].id,displayName:n[0].name}}er.exec(`
+  CREATE TABLE IF NOT EXISTS wake_targets (
+    id TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    source_bot_id TEXT,
+    source_message_id TEXT,
+    requested_target TEXT NOT NULL,
+    target_bot_id TEXT NOT NULL,
+    target_name_snapshot TEXT NOT NULL,
+    created_at INTEGER NOT NULL,
+    FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+    FOREIGN KEY (target_bot_id) REFERENCES bots(id)
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_wake_targets_conversation
+    ON wake_targets(conversation_id, created_at);
+  CREATE INDEX IF NOT EXISTS idx_wake_targets_target
+    ON wake_targets(target_bot_id, created_at);
+`),er.exec(`
+  CREATE TABLE IF NOT EXISTS workspace_settings (
+    key TEXT PRIMARY KEY,
+    value TEXT NOT NULL,
+    updated_at INTEGER NOT NULL
+  );
+`),e.s(["BotDeletionError",0,eg,"UI_OWNER_PRINCIPAL",0,eR,"agentNameMigrations",0,{list:()=>er.prepare("SELECT * FROM agent_name_migrations ORDER BY created_at ASC, rowid ASC").all()},"approvals",0,eq,"bots",0,eO,"conversations",0,ev,"default",0,er,"draftActions",0,{get:e=>er.prepare("SELECT * FROM draft_actions WHERE message_id = ?").get(e),record:(e,t,n)=>Number(er.prepare("INSERT OR IGNORE INTO draft_actions (message_id, status, recipient, acted_at) VALUES (?, ?, ?, ?)").run(e,t,n||null,Date.now()).changes)>0},"engine",0,ep,"groups",0,{create:(e,t,n,r)=>{let a=n&&t.includes(n)?n:t[0],s={id:(0,i.randomUUID)(),name:e,owner_bot_id:a,created_at:r?.created_at??Date.now()},o=er.prepare("INSERT INTO groups (id, name, owner_bot_id, created_at) VALUES (?, ?, ?, ?)"),d=er.prepare("INSERT INTO group_members (group_id, bot_id) VALUES (?, ?)"),_=er.prepare("INSERT INTO conversations (id, type, group_id, created_at) VALUES (?, ?, ?, ?)");return er.transaction(()=>{for(let e of(o.run(s.id,s.name,s.owner_bot_id||null,s.created_at),t))d.run(s.id,e);let e=(0,i.randomUUID)();_.run(e,"group",s.id,s.created_at),eL(e,t,s.created_at)})(),s},getAll:()=>er.prepare("SELECT * FROM groups ORDER BY created_at DESC").all(),getById:e=>er.prepare("SELECT * FROM groups WHERE id = ?").get(e),rename:(e,t)=>{er.prepare("UPDATE groups SET name = ? WHERE id = ?").run(t,e)},getMembers:e=>er.prepare(`
+      SELECT b.* FROM bots b
+      JOIN group_members gm ON b.id = gm.bot_id
+      WHERE gm.group_id = ?
+    `).all(e)},"launchSnapshots",0,{record:(e,t,n,r,i="hermes-gateway")=>{er.prepare("INSERT OR IGNORE INTO launch_snapshots (id, bot_id, created_at, hash, snapshot, transport) VALUES (?, ?, ?, ?, ?, ?)").run(e,t,Date.now(),n,r,i)},listByBot:e=>er.prepare("SELECT * FROM launch_snapshots WHERE bot_id = ? ORDER BY created_at DESC, rowid DESC").all(e)},"mcpServers",0,{create:(e,t,n)=>{let r={id:(0,i.randomUUID)(),name:e,command:t,args:JSON.stringify(n),created_at:Date.now()};return er.prepare("INSERT INTO mcp_servers (id, name, command, args, created_at) VALUES (?, ?, ?, ?, ?)").run(r.id,r.name,r.command,r.args,r.created_at),r},list:()=>er.prepare("SELECT * FROM mcp_servers ORDER BY created_at ASC").all()},"memories",0,{rememberStatement:(e,t)=>{var n;let r;if(!e||!(r=t.trim())||/[?？]\s*$/.test(r)||/^\[mcp\]/i.test(r)||/^\[tool (?:call|result)\]/i.test(r)||/^\[Handing off to\b/i.test(r)||/^\[From [^\]]+\]/i.test(r)||/^Peer handoff:/i.test(r)||/reply with exactly\b/i.test(r)||(n=r,/^(who|what|when|where|why|how|which|whose|whom)\b/i.test(n)?!/^(what|how|why|where|when|who)\s+i\b/i.test(n):!!(/^(do|does|did|can|could|would|will|should|shall|is|are|am|was|were|have|has)\s+(you|i|we|they|he|she|it|there|the|a|an|my|your|our)\b/i.test(n)||/^(tell me|please tell)\b/i.test(n))))return;let a=t.trim();er.prepare("INSERT INTO memories (id, bot_id, fact, created_at) VALUES (?, ?, ?, ?)").run((0,i.randomUUID)(),e,a,Date.now()),er.prepare(`
+      DELETE FROM memories
+      WHERE bot_id = ?
+        AND id NOT IN (
+          SELECT id FROM (
+            SELECT id FROM memories
+            WHERE bot_id = ?
+            ORDER BY created_at DESC, rowid DESC
+            LIMIT ?
+          )
+        )
+    `).run(e,e,ew)},latestFacts:(e,t=ew)=>{let n=t>0?Math.min(t,ew):ew;return er.prepare("SELECT fact FROM memories WHERE bot_id = ? ORDER BY created_at DESC, rowid DESC LIMIT ?").all(e,n).map(e=>e.fact).reverse()}},"messages",0,ef,"oneShots",0,{create:(e,t,n)=>{let r={id:(0,i.randomUUID)(),conversation_id:e,bot_id:t,due_at:n,fired:0,created_at:Date.now()};return er.prepare("INSERT INTO one_shots (id, conversation_id, bot_id, due_at, fired, created_at) VALUES (?, ?, ?, ?, 0, ?)").run(r.id,r.conversation_id,r.bot_id,r.due_at,r.created_at),r},pending:e=>er.prepare("SELECT * FROM one_shots WHERE conversation_id = ? AND fired = 0 ORDER BY due_at ASC LIMIT 1").get(e),unfired:()=>er.prepare("SELECT * FROM one_shots WHERE fired = 0 ORDER BY due_at ASC").all(),claim:e=>1===er.prepare("UPDATE one_shots SET fired = 1 WHERE id = ? AND fired = 0").run(e).changes},"projector",0,eN,"resolveWakeTarget",0,eh,"routines",0,{create:(e,t,n,r,a)=>{let s={id:(0,i.randomUUID)(),conversation_id:e,bot_id:t,word:n,next_due_at:r,every_ms:a,created_at:Date.now()};return er.prepare("INSERT INTO routines (id, conversation_id, bot_id, word, next_due_at, every_ms, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)").run(s.id,s.conversation_id,s.bot_id,s.word,s.next_due_at,s.every_ms,s.created_at),s},forConversation:e=>er.prepare("SELECT * FROM routines WHERE conversation_id = ? ORDER BY created_at ASC LIMIT 1").get(e),all:()=>er.prepare("SELECT * FROM routines ORDER BY next_due_at ASC").all(),postIfDue:(e,t)=>er.transaction(()=>{let n=er.prepare("SELECT * FROM routines WHERE id = ?").get(e);return!!n&&!(n.next_due_at>t)&&1===er.prepare("UPDATE routines SET next_due_at = next_due_at + every_ms WHERE id = ? AND next_due_at = ?").run(e,n.next_due_at).changes&&(ef.create(n.conversation_id,"bot","[routine]\n"+n.word,n.bot_id),!0)})()},"wakeTargets",0,{accept:e=>{let t=eh(e.requestedTarget);if(!t.ok)return t;let n={id:(0,i.randomUUID)(),conversation_id:e.conversationId,source_bot_id:e.sourceBotId??null,source_message_id:e.sourceMessageId??null,requested_target:e.requestedTarget,target_bot_id:t.agentId,target_name_snapshot:t.displayName,created_at:Date.now()};return er.prepare("INSERT INTO wake_targets (id, conversation_id, source_bot_id, source_message_id, requested_target, target_bot_id, target_name_snapshot, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)").run(n.id,n.conversation_id,n.source_bot_id,n.source_message_id,n.requested_target,n.target_bot_id,n.target_name_snapshot,n.created_at),{ok:!0,wake:n}},listByConversation:e=>er.prepare("SELECT * FROM wake_targets WHERE conversation_id = ? ORDER BY created_at ASC, rowid ASC").all(e)},"workspaceSettings",0,{get:e=>{let t=er.prepare("SELECT value FROM workspace_settings WHERE key = ?").get(e);return t?t.value:null},set:(e,t)=>{er.prepare("INSERT INTO workspace_settings (key, value, updated_at) VALUES (?, ?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at").run(e,t,Date.now())},clearForTests:()=>{er.prepare("DELETE FROM workspace_settings").run()}}],62294)}];
+
+//# sourceMappingURL=%5Broot-of-the-server%5D__0izjfmr._.js.map