botmancers 0.4.2 → 0.6.1

package/app/.next/server/chunks/lib_db_ts_1ttuckb._.js

@@ -0,0 +1,1951 @@
+module.exports=[62294,18966,64974,11626,40596,28420,35613,30098,e=>{"use strict";let t;var n=e.i(85148),i=e.i(22734),r=e.i(14747),s=e.i(54799),a=e.i(62349);let o=["direct","agent_deck"],_=["read_only","workspace_write"],d=["workspaces","sessions","all_provider_sessions"],E="This computer",u={mode:"read_only",allow_new_sessions:!0,allow_resume_with_edits:!1},c="Runtime connection is required. Pick the runtime this Agent uses.",l="Runtime connection not found.",T="Launch profile is required. Choose direct or agent_deck.",p="Invalid launch profile. Expected direct or agent_deck.",N="A direct launch profile does not use Agent Deck. Remove deck_id or choose agent_deck.",R="working_directory is an Agent Deck setting. Use default_workspace for a direct launch profile.",m="Session scope is required. Select workspaces, select sessions, or explicitly choose all_provider_sessions.",L="A session scope selects workspaces or sessions, not both.",g="Workspaces must be absolute paths (or start with ~/).",O="Launch policy is required. Choose read_only or workspace_write.",I=`Provider is required. Expected one of ${a.AGENTS.join("|")}.`;function A(e){return"string"==typeof e&&o.includes(e)}function S(e){return"string"==typeof e&&d.includes(e)}function k(e){return"string"==typeof e&&_.includes(e)}function f(e){return null==e?null:String(e).trim()||null}function v(e){return`rc-local-${e}`}function h(e){return`${a.AGENT_LABELS[e]} on ${E.toLowerCase()}`}function w(e){return e.startsWith("/")||"~"===e||e.startsWith("~/")}function C(e){return e.length>1?e.replace(/\/+$/,""):e}function q(e,t){let n=C(e),i=C(t);return n===i||i.startsWith("/"===n?"/":`${n}/`)}function y(e){if(null==e)return[];if(!Array.isArray(e))return null;let t=[];for(let n of e){if("string"!=typeof n)return null;let e=n.trim();e&&!t.includes(e)&&t.push(e)}return t}function b(e){let t=e.session_scope_kind;if(!S(t))return null;let n=[];if(e.session_scope_items)try{let t=y(JSON.parse(e.session_scope_items));if(null===t)return null;n=t}catch{return null}return"all_provider_sessions"===t?0===n.length?{kind:t,workspaces:[],sessions:[]}:null:0===n.length?null:"workspaces"===t?{kind:t,workspaces:n,sessions:[]}:{kind:t,workspaces:[],sessions:n}}function D(e){return!0===e||1===e||"1"===e}function U(e){return k(e.policy_mode)?{mode:e.policy_mode,allow_new_sessions:D(e.allow_new_sessions),allow_resume_with_edits:D(e.allow_resume_with_edits)}:null}function F(e){return A(e.launch_profile)?e.launch_profile:null}function W(e){var t;return{runtime_connection_id:e.runtime_connection_id,launch_profile:e.launch_profile,deck_id:"agent_deck"===e.launch_profile?e.deck_id:null,working_directory:"agent_deck"===e.launch_profile?e.working_directory:null,session_scope_kind:e.session_scope.kind,session_scope_items:JSON.stringify("workspaces"===(t=e.session_scope).kind?t.workspaces:"sessions"===t.kind?t.sessions:[]),default_workspace:e.default_workspace,policy_mode:e.policy.mode,allow_new_sessions:+!!e.policy.allow_new_sessions,allow_resume_with_edits:+!!e.policy.allow_resume_with_edits,home_session_id:e.home_session_id,needs_deck_selection:0}}function X(e){let t="hermes";try{t=(0,a.normalizeAgent)(e.agent)??"hermes"}catch{t="hermes"}let n=f(e.deck_id),i=D(e.needs_deck_selection),r=f(e.working_directory)??`~/.botmancers/${e.id}`;return{runtime_connection_id:v(t),provider:t,launch_profile:n&&!i?"agent_deck":null,session_scope_kind:"workspaces",session_scope_items:JSON.stringify([r]),policy_mode:u.mode,allow_new_sessions:+!!u.allow_new_sessions,allow_resume_with_edits:+!!u.allow_resume_with_edits}}let x=["runtime_connection_id","launch_profile","session_scope","default_workspace","policy","home_session_id"];function G(e){return x.some(t=>void 0!==e[t])}function H(e,t){if(null==e||"object"!=typeof e||Array.isArray(e)||void 0===e.kind||null===e.kind||""===e.kind)return t.push(m),null;if(!S(e.kind))return t.push("Invalid session scope kind. Expected workspaces, sessions, or all_provider_sessions."),null;let n=y(e.workspaces),i=y(e.sessions);if(null===n||null===i)return t.push("session_scope.workspaces and session_scope.sessions must be lists of strings."),null;let r=e.kind;return"all_provider_sessions"===r?n.length>0||i.length>0?(t.push("all_provider_sessions takes no workspace or session list."),null):{kind:r,workspaces:[],sessions:[]}:n.length>0&&i.length>0?(t.push(L),null):"workspaces"===r?i.length>0?(t.push(L),null):0===n.length?(t.push("Select at least one workspace. An empty scope is never unrestricted."),null):n.every(w)?{kind:r,workspaces:n,sessions:[]}:(t.push(g),null):n.length>0?(t.push(L),null):0===i.length?(t.push("Select at least one session. An empty scope is never unrestricted."),null):{kind:r,workspaces:[],sessions:i}}function B(e,t){if(null==e||"object"!=typeof e||Array.isArray(e)||void 0===e.mode||null===e.mode||""===e.mode)return t.push(O),null;if(!k(e.mode))return t.push("Invalid policy mode. Expected read_only or workspace_write."),null;let n=[];for(let i of["allow_new_sessions","allow_resume_with_edits"]){let r=e[i];if(void 0===r)n.push(!1);else{if("boolean"!=typeof r)return t.push("Policy flags allow_new_sessions and allow_resume_with_edits must be true or false."),null;n.push(r)}}let i={mode:e.mode,allow_new_sessions:n[0],allow_resume_with_edits:n[1]};return i.allow_resume_with_edits&&"workspace_write"!==i.mode?(t.push("allow_resume_with_edits requires the workspace_write policy mode."),null):i}function M(e,t){if(null==e)return null;if("string"!=typeof e)return t.push(g),null;let n=e.trim();return n?w(n)?n:(t.push(g),null):null}function K(e,t,n,i){"agent_deck"!==e.launch_profile||e.deck_id||i.push(a.DECK_REQUIRED_ERROR);let r=e.session_scope;"sessions"!==r.kind||r.sessions.every(e=>n.sessionBelongsTo(t,e))||i.push("A selected session does not belong to this Agent."),e.default_workspace&&"workspaces"===r.kind&&!r.workspaces.some(t=>q(t,e.default_workspace))&&i.push("default_workspace must be inside one of the selected workspaces."),e.home_session_id&&(n.sessionBelongsTo(t,e.home_session_id)?"sessions"!==r.kind||r.sessions.includes(e.home_session_id)||i.push("home_session_id must be one of the selected sessions."):i.push("home_session_id must be one of this Agent’s own sessions."))}function Y(e,t,n){let i=f(e.runtime_connection_id);if(!i)return n.push(c),null;let r=t.getConnection(i);return r?void 0!==e.agent&&null!==e.agent&&String(e.agent).trim()&&String(e.agent).trim()!==r.provider?(n.push("agent does not match the runtime connection provider."),null):r:(n.push(l),null)}function P(e,t){try{return(0,a.parseRequestDeckId)(e)}catch(e){return t.push(e instanceof Error?e.message:String(e)),null}}function $(e){return!G(e)&&void 0!==e.deck_id}function z(e){return{runtime_connection_id:f(e.runtime_connection_id),launch_profile:F(e),deck_id:f(e.deck_id),working_directory:f(e.working_directory),session_scope:b(e),default_workspace:f(e.default_workspace),policy:U(e),home_session_id:f(e.home_session_id)}}function j(e,t){let n=z(e);return{runtime_connection_id:n.runtime_connection_id,runtime_connection:t?{id:t.id,provider:t.provider,label:t.label,host:t.host}:null,launch_profile:n.launch_profile,needs_launch_profile:null===n.launch_profile,session_scope:n.session_scope,default_workspace:n.default_workspace,policy:n.policy,home_session_id:n.home_session_id}}e.s(["LOCAL_HOST",0,E,"hasRegistrationUpdate",0,G,"isLegacyCreate",0,$,"localConnectionId",0,v,"localConnectionLabel",0,h,"migrateRegistration",0,X,"readStoredPolicy",0,U,"readStoredScope",0,b,"registrationColumns",0,W,"serializeRegistration",0,j,"storedLaunchProfile",0,F,"validateConnectionInput",0,function(e){let t=[],n=null;try{(n=(0,a.normalizeAgent)(e.provider))||t.push(I)}catch(e){t.push(e instanceof Error?e.message:String(e))}let i=f(e.label);i?i.length>80&&t.push("Connection name must be 80 characters or fewer."):t.push("Connection name is required.");let r=f(e.host)??E;for(let n of(r.length>80&&t.push("Host must be 80 characters or fewer."),["token","api_key","apiKey","credentials","password","secret"]))void 0!==e[n]&&t.push("Runtime credentials stay with the runtime; a connection stores no secrets.");return!(t.length>0)&&n&&i?{errors:t,fields:{provider:n,label:i,host:r}}:{errors:[...new Set(t)],fields:null}},"validateCreateRegistration",0,function(e,t){let n=[];if($(e)){let i="hermes";try{i=(0,a.normalizeAgent)(e.agent)??"hermes"}catch(e){n.push(e instanceof Error?e.message:String(e))}let r=P(e.deck_id,n);r||0!==n.length||n.push(a.DECK_REQUIRED_ERROR);let s=f(e.working_directory);return n.length>0?{errors:n,registration:null,provider:null}:{errors:n,provider:i,registration:{runtime_connection_id:t.localConnectionFor(i),launch_profile:"agent_deck",deck_id:r,working_directory:s,session_scope:{kind:"workspaces",workspaces:s?[s]:[],sessions:[]},default_workspace:null,policy:{...u},home_session_id:null}}}let i=Y(e,t,n),r=null;void 0===e.launch_profile||null===e.launch_profile||""===e.launch_profile?n.push(T):A(e.launch_profile)?r=e.launch_profile:n.push(p);let s=null,o=null;"direct"===r?(f(e.deck_id)&&n.push(N),f(e.working_directory)&&n.push(R)):"agent_deck"===r&&(s=P(e.deck_id,n),o=f(e.working_directory));let _=H(e.session_scope,n),d=M(e.default_workspace,n),E=B(e.policy,n),c=f(e.home_session_id);if(!i||!r||!_||!E||n.length>0)return{errors:n,registration:null,provider:null};let l={runtime_connection_id:i.id,launch_profile:r,deck_id:s,working_directory:o,session_scope:_,default_workspace:d,policy:E,home_session_id:c};return K(l,null,t,n),n.length>0?{errors:n,registration:null,provider:null}:{errors:n,registration:l,provider:i.provider}},"validateUpdateRegistration",0,function(e,t,n,i){let r=[],s=z(t),o=null;if(void 0!==n.runtime_connection_id)o=Y(n,i,r);else if(void 0!==n.agent)try{let e=(0,a.normalizeAgent)(n.agent);if(e){let t=s.runtime_connection_id?i.getConnection(s.runtime_connection_id):void 0;o=t&&t.provider===e?t:i.getConnection(i.localConnectionFor(e))??null}else r.push(`Agent is required. Expected one of ${a.AGENTS.join("|")}.`)}catch(e){r.push(e instanceof Error?e.message:String(e))}else s.runtime_connection_id?(o=i.getConnection(s.runtime_connection_id)??null)||r.push(l):r.push(c);let _=s.launch_profile;void 0!==n.launch_profile?A(n.launch_profile)?_=n.launch_profile:(r.push(null===n.launch_profile||""===n.launch_profile?T:p),_=null):void 0!==n.deck_id&&"direct"!==_&&(_="agent_deck");let d=s.deck_id,E=s.working_directory;"direct"===_?(void 0!==n.deck_id&&f(n.deck_id)&&r.push(N),void 0!==n.working_directory&&f(n.working_directory)&&r.push(R),d=null,E=null):"agent_deck"===_?(void 0!==n.deck_id?d=P(n.deck_id,r):("agent_deck"!==s.launch_profile||D(t.needs_deck_selection))&&(d=null),void 0!==n.working_directory&&(E=f(n.working_directory))):0===r.length&&r.push(T);let u=void 0!==n.session_scope?H(n.session_scope,r):s.session_scope;void 0!==n.session_scope||u||r.push(m);let L=void 0!==n.default_workspace?M(n.default_workspace,r):s.default_workspace,g=void 0!==n.policy?B(n.policy,r):s.policy;void 0!==n.policy||g||r.push(O);let I=void 0!==n.home_session_id?f(n.home_session_id):s.home_session_id;if(!o||!_||!u||!g||r.length>0)return{errors:r,registration:null,provider:null};let S={runtime_connection_id:o.id,launch_profile:_,deck_id:"agent_deck"===_?d:null,working_directory:"agent_deck"===_?E:null,session_scope:u,default_workspace:L,policy:g,home_session_id:I};return K(S,e,i,r),r.length>0?{errors:r,registration:null,provider:null}:{errors:r,registration:S,provider:o.provider}},"workspaceContains",0,q],18966);var J=e.i(16979);let Q=Object.freeze(["conversation","implementation","review","revision"]),V=Object.freeze(["readonly","edit"]);Object.freeze(["ui","api","wake","continuation","exchange"]);let Z=Object.freeze({conversation:"readonly",implementation:"edit",review:"readonly",revision:"edit"});function ee(e){return"string"==typeof e&&Q.includes(e)}function et(e,t){return{ok:!1,code:e,reason:t}}function en(e){var t,n,i,r;if(!ee(e.executionKind))return et("unknown_execution_kind",`Unknown execution kind ${JSON.stringify(String(e.executionKind))}.`);let s=e.executionKind,a=(t=e.entryPoint,n=s,i=e.wakeSyntax,r=!0===e.resumesWorkRequest,"ui"===t||"api"===t?"conversation"!==n?{code:"unsupported_authority",reason:`A direct message runs as a read-only conversation turn, not ${n}.`}:"direct_message_conversation":"continuation"===t?"conversation"!==n?{code:"unsupported_authority",reason:`A coordinator continuation runs as a read-only conversation turn, not ${n}.`}:"coordinator_continuation":"exchange"===t?"conversation"!==n?{code:"unsupported_authority",reason:`A session exchange runs as a read-only conversation turn, not ${n}.`}:"session_exchange_conversation":"wake"!==t?{code:"unsupported_authority",reason:"Unknown policy entry point."}:"legacy"===i?"conversation"!==n?{code:"unsupported_authority",reason:`A legacy WAKE directive runs as a conversation turn, not ${n}.`}:"legacy_wake_conversation":"structured"!==i?{code:"unsupported_authority",reason:"Unknown Wake syntax."}:"revision"===n!==r?{code:"unsupported_authority",reason:"revision"===n?"A revision names the Work Request it resumes.":"Only a revision resumes a Work Request."}:"structured_wake");return"string"!=typeof a?et(a.code,a.reason):{ok:!0,policy:Object.freeze({policy_version:1,execution_kind:s,tool_profile:Z[s],entry_point:e.entryPoint,rule:a})}}let ei=new Set(["policy_version","execution_kind","tool_profile","entry_point","rule"]);function er(e){if(!e||"object"!=typeof e||Array.isArray(e))return et("malformed_policy","The execution policy snapshot is missing.");let t=Object.keys(e);if(t.length!==ei.size||t.some(e=>!ei.has(e)))return et("malformed_policy","The execution policy snapshot has unexpected fields.");if(1!==e.policy_version)return et("malformed_policy","Unsupported execution policy version.");if(!ee(e.execution_kind))return et("unknown_execution_kind",`Unknown execution kind ${JSON.stringify(String(e.execution_kind))}.`);if(!V.includes(e.tool_profile))return et("unsupported_authority",`Unsupported tool profile ${JSON.stringify(String(e.tool_profile))}.`);if(Z[e.execution_kind]!==e.tool_profile)return et("unsupported_authority",`Execution kind ${e.execution_kind} requires the ${Z[e.execution_kind]} tool profile.`);let n={direct_message_conversation:{entry:["ui","api"],kinds:["conversation"]},legacy_wake_conversation:{entry:["wake"],kinds:["conversation"]},coordinator_continuation:{entry:["continuation"],kinds:["conversation"]},session_exchange_conversation:{entry:["exchange"],kinds:["conversation"]},structured_wake:{entry:["wake"],kinds:[...Q]}},i="string"==typeof e.rule?n[e.rule]:void 0;return i&&i.entry.includes(e.entry_point)?i.kinds.includes(e.execution_kind)?{ok:!0,policy:Object.freeze({...e})}:et("unsupported_authority",`Rule ${e.rule} does not grant ${e.execution_kind}.`):et("malformed_policy","The execution policy rule does not match its entry point.")}e.s(["TOOL_PROFILE_FOR_KIND",0,Z,"authorizeWorkRequest",0,function(e){let t;if(!ee(e.execution_kind))return et("unknown_execution_kind",`Unknown execution kind ${JSON.stringify(String(e.execution_kind))}.`);try{t="string"==typeof e.policy_snapshot?JSON.parse(e.policy_snapshot):null}catch{return et("malformed_policy","The policy snapshot is not valid JSON.")}let n=er(t&&"object"==typeof t&&!Array.isArray(t)?t.execution_policy:void 0);return n.ok?n.policy.execution_kind!==e.execution_kind||n.policy.tool_profile!==e.tool_profile?et("unsupported_authority","The Work Request authority does not match its policy snapshot."):t.tool_profile!==e.tool_profile?et("malformed_policy","The policy snapshot tool profile does not match the Work Request."):n:n},"isExecutionKind",0,ee,"selectExecutionPolicy",0,en,"validateExecutionPolicy",0,er],64974);let es=Object.freeze({max_attempts:1,base_delay_ms:1e3,max_delay_ms:6e4,attempt_timeout_ms:null});function ea(e){if(void 0===e||!/^\d+$/.test(e.trim()))return null;let t=Number(e.trim());return Number.isSafeInteger(t)&&t>0?t:null}function eo(e=process.env){let t=ea(e.BOTMANCERS_RETRY_MAX_ATTEMPTS),n=ea(e.BOTMANCERS_RETRY_BASE_DELAY_MS)??es.base_delay_ms,i=ea(e.BOTMANCERS_RETRY_MAX_DELAY_MS)??es.max_delay_ms,r=e_({max_attempts:null===t?es.max_attempts:Math.min(t,10),base_delay_ms:n,max_delay_ms:Math.max(i,n),attempt_timeout_ms:ea(e.BOTMANCERS_ATTEMPT_TIMEOUT_MS)});return{deadlineMs:ea(e.BOTMANCERS_REQUEST_DEADLINE_MS),retryPolicy:r.ok?r.policy:{...es}}}function e_(e){if(!e||"object"!=typeof e||Array.isArray(e))return{ok:!1,reason:"A retry policy is an object."};let t=e=>"number"==typeof e&&Number.isSafeInteger(e);if(!t(e.max_attempts)||e.max_attempts<1||e.max_attempts>10)return{ok:!1,reason:"max_attempts must be an integer from 1 to 10."};if(!t(e.base_delay_ms)||e.base_delay_ms<0)return{ok:!1,reason:"base_delay_ms must be a non-negative integer."};if(!t(e.max_delay_ms)||e.max_delay_ms<e.base_delay_ms)return{ok:!1,reason:"max_delay_ms must be an integer no smaller than base_delay_ms."};let n=e.attempt_timeout_ms??null;return null!==n&&(!t(n)||n<1)?{ok:!1,reason:"attempt_timeout_ms must be a positive integer or null."}:{ok:!0,policy:{max_attempts:e.max_attempts,base_delay_ms:e.base_delay_ms,max_delay_ms:e.max_delay_ms,attempt_timeout_ms:n}}}let ed=["agent_deck_token_missing","agent_deck_unauthorized","agent_deck_forbidden"],eE={unavailable:"retryable",runtime_failed:"retryable",timed_out:"retryable",launch_failed:"terminal",unsupported_authority:"terminal",result_contract:"terminal",cancelled:"terminal",session_mismatch:"manual_attention"};e.s(["DEFAULT_RETRY_POLICY",0,es,"attemptDeadline",0,function(e,t,n){let i=null===e.attempt_timeout_ms?null:n+e.attempt_timeout_ms;return null===i?t:null===t?i:Math.min(i,t)},"classifyFailure",0,function(e,t=null){return t&&ed.includes(t)?"manual_attention":eE[e??"runtime_failed"]??"terminal"},"decideRetry",0,function(e){var t;let n;if("terminal"===e.disposition)return{action:"fail",disposition:"terminal"};let i=e.attemptCount<e.policy.max_attempts;if("manual_attention"===e.disposition)return i?{action:"attention"}:{action:"fail",disposition:"terminal"};if(!i)return{action:"exhausted"};let r=e.attemptCount,s=(t=e.policy,n=Math.max(0,r-1),Math.min(t.max_delay_ms,t.base_delay_ms*2**Math.min(n,30))),a=e.now+s;return null!==e.deadlineAt&&a>=e.deadlineAt?{action:"deadline"}:{action:"retry",nextEligibleAt:a,delayMs:s,retry:r}},"requestControlDefaultsFromEnv",0,eo,"storedRetryPolicy",0,function(e){if(!e)return{...es};try{let t=e_(JSON.parse(e));return t.ok?t.policy:{...es}}catch{return{...es}}},"validateRetryPolicy",0,e_],11626);let eu={cached_input_tokens:"cached_input_tokens",cachedInputTokens:"cached_input_tokens",cache_read_input_tokens:"cache_read_input_tokens",cacheReadInputTokens:"cache_read_input_tokens",cacheReadTokens:"cache_read_input_tokens",cache_creation_input_tokens:"cache_creation_input_tokens",cacheCreationInputTokens:"cache_creation_input_tokens",cacheWriteTokens:"cache_creation_input_tokens",reasoning_output_tokens:"reasoning_output_tokens",reasoningOutputTokens:"reasoning_output_tokens",reasoningTokens:"reasoning_output_tokens"};function ec(e){return null===e||"object"!=typeof e||Array.isArray(e)?null:e}function el(e){return"number"==typeof e&&Number.isInteger(e)&&e>=0&&e<=Number.MAX_SAFE_INTEGER?e:null}function eT(e){return"number"==typeof e&&Number.isFinite(e)&&e>=0&&e<1e9?e:null}function ep(e,t,n){for(let i of t)if(i in e){let t=n(e[i]);if(null!==t)return t}return null}function eN(e,t,n){let i=e?ep(e,["input_tokens","inputTokens"],el):null,r=e?ep(e,["output_tokens","outputTokens"],el):null;return null===i&&null===r&&null===t?null:{input_tokens:i,output_tokens:r,cost_usd:t,source:n,breakdown:e?function(e){let t={};for(let[n,i]of Object.entries(eu)){let r=el(e[n]);null!==r&&void 0===t[i]&&(t[i]=r)}return Object.keys(t).length>0?t:null}(e):null}}function eR(e){let t=ec(e);if(!t)return null;let n="string"==typeof t.type?t.type:null,i=ec(t.usage);if("turn.completed"===n)return eN(i,null,"codex.turn_completed");if("result"===n)return eN(i,ep(t,["total_cost_usd","totalCostUsd","cost_usd","costUsd"],eT),"result");if(null===n||"usage"===n){let e=i??t,n=ep(e,["cost_usd","costUsd","total_cost_usd","totalCostUsd"],eT)??(i?ep(t,["cost_usd","costUsd","total_cost_usd","totalCostUsd"],eT):null);return eN(e,n,"normalized")}return null}function em(e,t){return null===e?t:null===t?e:e+t}function eL(e){let t=ec(e);if(!t)return null;let n="codex.turn_completed"===t.source||"result"===t.source||"normalized"===t.source?t.source:"normalized",i=el(t.input_tokens),r=el(t.output_tokens),s=eT(t.cost_usd);if(null===i&&null===r&&null===s)return null;let a=ec(t.breakdown),o={};if(a)for(let e of new Set(Object.values(eu))){let t=el(a[e]);null!==t&&(o[e]=t)}return{input_tokens:i,output_tokens:r,cost_usd:s,source:n,breakdown:Object.keys(o).length>0?o:null}}function eg(e){let t=t=>{var n,i;let r=null,s=0;for(let n of e){let e=n[t];null!=e&&(s++,r=(r??0)+e)}return null!==r&&"cost_usd"===t&&(r=Math.round(1e6*r)/1e6),{sum:r,known:s,total:e.length,quality:(n=s,0===(i=e.length)||0===n?"unavailable":n===i?"complete":"partial")}};return{input_tokens:t("input_tokens"),output_tokens:t("output_tokens"),cost_usd:t("cost_usd")}}function eO(e){return!!e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'usage_samples'").get()}function eI(e,t,n,i){if(!eO(e))return;let r=eL(i.usage),a=i.now??Date.now();e.prepare(`
+    INSERT INTO usage_samples (
+      id, sample_key, agent_id, attempt_id, session_ref, turn_id, provider, source,
+      input_tokens, output_tokens, cost_usd, breakdown, observed_at, created_at, updated_at
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    ON CONFLICT(sample_key) DO UPDATE SET
+      input_tokens = COALESCE(usage_samples.input_tokens, excluded.input_tokens),
+      output_tokens = COALESCE(usage_samples.output_tokens, excluded.output_tokens),
+      cost_usd = COALESCE(usage_samples.cost_usd, excluded.cost_usd),
+      breakdown = COALESCE(usage_samples.breakdown, excluded.breakdown),
+      source = CASE WHEN usage_samples.source = 'none' THEN excluded.source ELSE usage_samples.source END,
+      updated_at = CASE
+        WHEN (usage_samples.input_tokens IS NULL AND excluded.input_tokens IS NOT NULL)
+          OR (usage_samples.output_tokens IS NULL AND excluded.output_tokens IS NOT NULL)
+          OR (usage_samples.cost_usd IS NULL AND excluded.cost_usd IS NOT NULL)
+        THEN excluded.updated_at ELSE usage_samples.updated_at END
+  `).run((0,s.randomUUID)(),t,i.agentId,n.attemptId,n.sessionRef,n.turnId,String(i.provider).slice(0,100),r?.source??"none",r?.input_tokens??null,r?.output_tokens??null,r?.cost_usd??null,r?.breakdown?JSON.stringify(r.breakdown):null,i.observedAt,a,a)}function eA(e,t,n){eI(e,`attempt:${t}`,{attemptId:t,sessionRef:null,turnId:null},n)}function eS(e,t,n){if(!eO(e))return[];let i=null===n?"":"AND b.id = ?",r=null===n?"":"AND s.session_ref = ?";return e.prepare(`
+    SELECT b.id AS ref, 'attempt' AS kind, a.attempt_number, a.kind AS turn_kind, s.provider, s.source,
+      s.input_tokens, s.output_tokens, s.cost_usd, s.observed_at, s.sample_key
+    FROM session_bindings b
+    JOIN work_attempts a ON a.id = b.source_attempt_id
+    JOIN usage_samples s ON s.attempt_id = a.id
+    WHERE b.agent_id = ? ${i}
+    UNION ALL
+    SELECT b.id AS ref, 'attempt' AS kind, a.attempt_number, a.kind AS turn_kind, s.provider, s.source,
+      s.input_tokens, s.output_tokens, s.cost_usd, s.observed_at, s.sample_key
+    FROM session_bindings b
+    JOIN work_attempts a ON a.resumed_session_binding_id = b.id AND a.id IS NOT b.source_attempt_id
+    JOIN usage_samples s ON s.attempt_id = a.id
+    WHERE b.agent_id = ? ${i}
+    UNION ALL
+    SELECT s.session_ref AS ref, 'turn' AS kind, NULL AS attempt_number, t.kind AS turn_kind, s.provider, s.source,
+      s.input_tokens, s.output_tokens, s.cost_usd, s.observed_at, s.sample_key
+    FROM usage_samples s
+    LEFT JOIN provider_session_turns t ON t.id = s.turn_id
+    WHERE s.agent_id = ? AND s.turn_id IS NOT NULL ${r}
+    ORDER BY observed_at ASC, sample_key ASC
+  `).all(...null===n?[t,t,t]:[t,n,t,n,t,n])}function ek(e){return{kind:e.kind,attempt_number:e.attempt_number,turn_kind:e.turn_kind,provider:e.provider,source:e.source,input_tokens:e.input_tokens,output_tokens:e.output_tokens,cost_usd:e.cost_usd,observed_at:e.observed_at}}e.s(["aggregateUsage",0,eg,"normalizeUsage",0,eL,"usageFromEvent",0,eR,"usageFromEvents",0,function(e){if(!e)return null;let t=null,n=null,i=null,r=new Set;for(let s of e){let e=ec(s),a=e&&("number"==typeof e.seq||"string"==typeof e.id)?`${e.type}:${e.seq??e.id}`:null;if(a){if(r.has(a))continue;r.add(a)}let o=eR(s);o&&("result"===o.source?t=o:"codex.turn_completed"===o.source?n=null===n?o:{input_tokens:em(n.input_tokens,o.input_tokens),output_tokens:em(n.output_tokens,o.output_tokens),cost_usd:null,source:"codex.turn_completed",breakdown:function(e,t){if(!e)return t;if(!t)return e;let n={...e};for(let[e,i]of Object.entries(t))n[e]=(n[e]??0)+i;return n}(n.breakdown,o.breakdown)}:i=o)}return t??n??i}],40596),e.s(["agentSessionUsage",0,function(e,t){let n=new Map;for(let i of eS(e,t,null)){let e=n.get(i.ref)??[];e.push(i),n.set(i.ref,e)}return new Map([...n].map(([e,t])=>[e,eg(t)]))},"emptyUsage",0,function(){return eg([])},"recordAttemptUsageSample",0,eA,"recordTurnUsageSample",0,function(e,t,n,i){eI(e,`turn:${t}`,{attemptId:null,sessionRef:n,turnId:t},i)},"sessionUsageSamples",0,function(e,t,n){let i=eS(e,t,n);return{usage:eg(i),samples:i.map(ek)}}],28420);let ef=["queued","extracting","delivering","completed","failed","cancelled"],ev=["completed","failed","cancelled"],eh={queued:["extracting","failed","cancelled"],extracting:["delivering","completed","failed","cancelled"],delivering:["completed","failed","cancelled"],completed:[],failed:[],cancelled:[]},ew=Object.freeze({instructionChars:4e3,packetChars:16e3,packetObjectiveChars:2e3,packetListItems:20,packetItemChars:500,answerChars:16e3,replyChars:16e3,extractionOutputChars:32e3,promptChars:24e3}),eC=["queued","blocked","running","waiting","completed","failed","cancelled"],eq=["completed","failed","cancelled"],ey={queued:["running","blocked","cancelled","failed"],blocked:["queued","cancelled","failed"],running:["waiting","queued","completed","failed","cancelled"],waiting:["running","queued","cancelled","failed"],completed:[],failed:[],cancelled:[]},eb=["dispatcher","ui_message","ui_continuation"];class eD extends Error{code;constructor(e,t){super(t),this.code=e}}let eU=eq.map(e=>`'${e}'`).join(", "),eF=eC.map(e=>`'${e}'`).join(", "),eW=[{version:1,name:"core_engine_tables",up:e=>{e.exec(`
+        CREATE TABLE work_request_transitions (
+          from_state TEXT NOT NULL,
+          to_state TEXT NOT NULL,
+          PRIMARY KEY (from_state, to_state)
+        );
+
+        CREATE TABLE work_requests (
+          id TEXT PRIMARY KEY,
+          source_conversation_id TEXT NOT NULL,
+          source_event_id TEXT NOT NULL,
+          requester_kind TEXT NOT NULL CHECK (requester_kind IN ('person', 'bot', 'service')),
+          requester_id TEXT NOT NULL,
+          target_agent_id TEXT NOT NULL,
+          intent TEXT NOT NULL,
+          execution_kind TEXT NOT NULL CHECK (execution_kind IN ('conversation', 'implementation', 'review', 'revision')),
+          tool_profile TEXT NOT NULL CHECK (tool_profile IN ('readonly', 'edit')),
+          parent_request_id TEXT,
+          root_request_id TEXT NOT NULL,
+          wake_event_id TEXT,
+          depth INTEGER NOT NULL DEFAULT 0 CHECK (depth >= 0),
+          idempotency_key TEXT NOT NULL CHECK (length(idempotency_key) > 0),
+          request_hash TEXT NOT NULL,
+          policy_snapshot TEXT NOT NULL,
+          state TEXT NOT NULL CHECK (state IN (${eF})),
+          state_reason TEXT,
+          result TEXT,
+          error_code TEXT,
+          error_message TEXT,
+          version INTEGER NOT NULL DEFAULT 0,
+          legacy_agent_request_id TEXT UNIQUE,
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          terminal_at INTEGER,
+          CHECK ((state IN (${eU})) = (terminal_at IS NOT NULL)),
+          FOREIGN KEY (source_conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (target_agent_id) REFERENCES bots(id),
+          FOREIGN KEY (parent_request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (root_request_id) REFERENCES work_requests(id)
+        );
+
+        CREATE UNIQUE INDEX idx_work_requests_idempotency
+          ON work_requests(requester_kind, requester_id, idempotency_key);
+        CREATE INDEX idx_work_requests_conversation
+          ON work_requests(source_conversation_id, created_at);
+        CREATE INDEX idx_work_requests_state
+          ON work_requests(state, created_at);
+        CREATE INDEX idx_work_requests_parent
+          ON work_requests(parent_request_id) WHERE parent_request_id IS NOT NULL;
+
+        CREATE TABLE session_bindings (
+          id TEXT PRIMARY KEY,
+          agent_id TEXT NOT NULL,
+          adapter TEXT NOT NULL,
+          conversation_id TEXT,
+          request_id TEXT,
+          external_session_id TEXT NOT NULL,
+          source_attempt_id TEXT,
+          created_at INTEGER NOT NULL,
+          released_at INTEGER,
+          CHECK (conversation_id IS NOT NULL OR request_id IS NOT NULL),
+          FOREIGN KEY (agent_id) REFERENCES bots(id),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (source_attempt_id) REFERENCES work_attempts(id)
+        );
+
+        CREATE UNIQUE INDEX idx_session_bindings_active
+          ON session_bindings(agent_id, adapter, IFNULL(conversation_id, ''), IFNULL(request_id, ''))
+          WHERE released_at IS NULL;
+
+        CREATE TABLE work_attempts (
+          id TEXT PRIMARY KEY,
+          request_id TEXT NOT NULL,
+          attempt_number INTEGER NOT NULL CHECK (attempt_number >= 1),
+          kind TEXT NOT NULL CHECK (kind IN ('launch', 'resume')),
+          adapter TEXT NOT NULL CHECK (length(adapter) > 0),
+          tool_profile TEXT NOT NULL CHECK (tool_profile IN ('readonly', 'edit')),
+          launch_snapshot TEXT NOT NULL,
+          launch_snapshot_hash TEXT NOT NULL,
+          resumed_session_binding_id TEXT,
+          external_run_id TEXT,
+          external_session_id TEXT,
+          outcome TEXT CHECK (outcome IN ('succeeded', 'failed', 'cancelled', 'interrupted', 'timed_out')),
+          error_category TEXT,
+          error_message TEXT,
+          artifacts TEXT NOT NULL DEFAULT '[]',
+          started_at INTEGER NOT NULL,
+          finished_at INTEGER,
+          CHECK ((outcome IS NULL) = (finished_at IS NULL)),
+          CHECK ((kind = 'resume') = (resumed_session_binding_id IS NOT NULL)),
+          UNIQUE (request_id, attempt_number),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (resumed_session_binding_id) REFERENCES session_bindings(id)
+        );
+
+        CREATE UNIQUE INDEX idx_work_attempts_open
+          ON work_attempts(request_id) WHERE finished_at IS NULL;
+
+        CREATE TABLE engine_events (
+          id TEXT PRIMARY KEY,
+          request_id TEXT NOT NULL,
+          sequence INTEGER NOT NULL CHECK (sequence >= 1),
+          attempt_id TEXT,
+          type TEXT NOT NULL CHECK (length(type) > 0),
+          data TEXT,
+          created_at INTEGER NOT NULL,
+          UNIQUE (request_id, sequence),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (attempt_id) REFERENCES work_attempts(id)
+        );
+
+        -- Foreign keys (insert/update side).
+        CREATE TRIGGER trg_work_requests_fk_insert BEFORE INSERT ON work_requests
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.source_conversation_id')
+            WHERE NOT EXISTS (SELECT 1 FROM conversations WHERE id = NEW.source_conversation_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.target_agent_id')
+            WHERE NOT EXISTS (SELECT 1 FROM bots WHERE id = NEW.target_agent_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.parent_request_id')
+            WHERE NEW.parent_request_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.parent_request_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.root_request_id')
+            WHERE NEW.root_request_id <> NEW.id
+              AND NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.root_request_id);
+        END;
+
+        -- Identity, lineage, and policy are fixed at intake.
+        CREATE TRIGGER trg_work_requests_immutable BEFORE UPDATE OF
+          id, source_conversation_id, source_event_id, requester_kind, requester_id,
+          target_agent_id, intent, execution_kind, tool_profile, parent_request_id,
+          root_request_id, wake_event_id, depth, idempotency_key, request_hash,
+          policy_snapshot, legacy_agent_request_id, created_at
+        ON work_requests
+        BEGIN
+          SELECT RAISE(ABORT, 'work_requests identity, lineage, and policy are immutable');
+        END;
+
+        CREATE TRIGGER trg_work_requests_transition BEFORE UPDATE OF state ON work_requests
+        WHEN NEW.state <> OLD.state
+        BEGIN
+          SELECT RAISE(ABORT, 'invalid work_requests state transition')
+            WHERE NOT EXISTS (
+              SELECT 1 FROM work_request_transitions WHERE from_state = OLD.state AND to_state = NEW.state
+            );
+        END;
+
+        CREATE TRIGGER trg_work_requests_terminal BEFORE UPDATE ON work_requests
+        WHEN OLD.state IN (${eU})
+        BEGIN
+          SELECT RAISE(ABORT, 'terminal work_requests are immutable');
+        END;
+
+        CREATE TRIGGER trg_session_bindings_fk BEFORE INSERT ON session_bindings
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.conversation_id')
+            WHERE NEW.conversation_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM conversations WHERE id = NEW.conversation_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.request_id')
+            WHERE NEW.request_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.request_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.source_attempt_id')
+            WHERE NEW.source_attempt_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM work_attempts WHERE id = NEW.source_attempt_id);
+        END;
+
+        -- A binding's session value is opaque and never rewritten; only
+        -- release (supersession) may change.
+        CREATE TRIGGER trg_session_bindings_immutable BEFORE UPDATE OF
+          id, agent_id, adapter, conversation_id, request_id, external_session_id, source_attempt_id, created_at
+        ON session_bindings
+        BEGIN
+          SELECT RAISE(ABORT, 'session_bindings are immutable');
+        END;
+
+        CREATE TRIGGER trg_work_attempts_fk BEFORE INSERT ON work_attempts
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_attempts.request_id')
+            WHERE NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.request_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_attempts.resumed_session_binding_id')
+            WHERE NEW.resumed_session_binding_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM session_bindings WHERE id = NEW.resumed_session_binding_id);
+        END;
+
+        -- Launch snapshot and authority never change after insert.
+        CREATE TRIGGER trg_work_attempts_immutable BEFORE UPDATE OF
+          id, request_id, attempt_number, kind, adapter, tool_profile,
+          launch_snapshot, launch_snapshot_hash, resumed_session_binding_id, started_at
+        ON work_attempts
+        BEGIN
+          SELECT RAISE(ABORT, 'work_attempts launch fields are immutable');
+        END;
+
+        -- External identifiers are recorded once, never rewritten.
+        CREATE TRIGGER trg_work_attempts_external_ids BEFORE UPDATE OF external_run_id, external_session_id ON work_attempts
+        WHEN (OLD.external_run_id IS NOT NULL AND NEW.external_run_id IS NOT OLD.external_run_id)
+          OR (OLD.external_session_id IS NOT NULL AND NEW.external_session_id IS NOT OLD.external_session_id)
+        BEGIN
+          SELECT RAISE(ABORT, 'work_attempts external identifiers are set once');
+        END;
+
+        CREATE TRIGGER trg_work_attempts_finished BEFORE UPDATE ON work_attempts
+        WHEN OLD.finished_at IS NOT NULL
+        BEGIN
+          SELECT RAISE(ABORT, 'finished work_attempts are immutable');
+        END;
+
+        CREATE TRIGGER trg_engine_events_fk BEFORE INSERT ON engine_events
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: engine_events.request_id')
+            WHERE NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.request_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: engine_events.attempt_id')
+            WHERE NEW.attempt_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM work_attempts WHERE id = NEW.attempt_id AND request_id = NEW.request_id);
+        END;
+
+        CREATE TRIGGER trg_engine_events_append_only BEFORE UPDATE ON engine_events
+        BEGIN
+          SELECT RAISE(ABORT, 'engine_events are append-only');
+        END;
+      `);let t=e.prepare("INSERT INTO work_request_transitions (from_state, to_state) VALUES (?, ?)");for(let e of eC)for(let n of ey[e])t.run(e,n)}},{version:2,name:"core_engine_referential_integrity",up:e=>{e.exec(`
+        -- Foreign keys (delete side): RESTRICT. A referenced row cannot be
+        -- deleted while anything still points at it; deleteEngineRecords
+        -- removes dependants first, in one transaction.
+        CREATE TRIGGER trg_conversations_engine_restrict BEFORE DELETE ON conversations
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.source_conversation_id')
+            WHERE EXISTS (SELECT 1 FROM work_requests WHERE source_conversation_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.conversation_id')
+            WHERE EXISTS (SELECT 1 FROM session_bindings WHERE conversation_id = OLD.id);
+        END;
+
+        CREATE TRIGGER trg_bots_engine_restrict BEFORE DELETE ON bots
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.target_agent_id')
+            WHERE EXISTS (SELECT 1 FROM work_requests WHERE target_agent_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.agent_id')
+            WHERE EXISTS (SELECT 1 FROM session_bindings WHERE agent_id = OLD.id);
+        END;
+
+        CREATE TRIGGER trg_work_requests_restrict BEFORE DELETE ON work_requests
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.parent_request_id')
+            WHERE EXISTS (
+              SELECT 1 FROM work_requests
+              WHERE id <> OLD.id AND (parent_request_id = OLD.id OR root_request_id = OLD.id)
+            );
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_attempts.request_id')
+            WHERE EXISTS (SELECT 1 FROM work_attempts WHERE request_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: engine_events.request_id')
+            WHERE EXISTS (SELECT 1 FROM engine_events WHERE request_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.request_id')
+            WHERE EXISTS (SELECT 1 FROM session_bindings WHERE request_id = OLD.id);
+        END;
+
+        CREATE TRIGGER trg_work_attempts_restrict BEFORE DELETE ON work_attempts
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: engine_events.attempt_id')
+            WHERE EXISTS (SELECT 1 FROM engine_events WHERE attempt_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.source_attempt_id')
+            WHERE EXISTS (SELECT 1 FROM session_bindings WHERE source_attempt_id = OLD.id);
+        END;
+
+        CREATE TRIGGER trg_session_bindings_restrict BEFORE DELETE ON session_bindings
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_attempts.resumed_session_binding_id')
+            WHERE EXISTS (SELECT 1 FROM work_attempts WHERE resumed_session_binding_id = OLD.id);
+        END;
+
+        -- Session continuity: a binding belongs to one Agent and adapter in
+        -- one scope, and its source attempt must come from that scope.
+        CREATE TRIGGER trg_session_bindings_scope BEFORE INSERT ON session_bindings
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.agent_id')
+            WHERE NOT EXISTS (SELECT 1 FROM bots WHERE id = NEW.agent_id);
+          SELECT RAISE(ABORT, 'session binding does not match its work request')
+            WHERE NEW.request_id IS NOT NULL AND NOT EXISTS (
+              SELECT 1 FROM work_requests r
+              WHERE r.id = NEW.request_id AND r.target_agent_id = NEW.agent_id
+                AND (NEW.conversation_id IS NULL OR r.source_conversation_id = NEW.conversation_id)
+            );
+          SELECT RAISE(ABORT, 'session binding does not match its source attempt')
+            WHERE NEW.source_attempt_id IS NOT NULL AND NOT EXISTS (
+              SELECT 1 FROM work_attempts a JOIN work_requests r ON r.id = a.request_id
+              WHERE a.id = NEW.source_attempt_id AND a.adapter = NEW.adapter AND r.target_agent_id = NEW.agent_id
+                AND (NEW.request_id IS NULL OR a.request_id = NEW.request_id)
+                AND (NEW.conversation_id IS NULL OR r.source_conversation_id = NEW.conversation_id)
+            );
+        END;
+
+        -- A resume continues an active binding of the same Agent and
+        -- adapter, from the same conversation and request lineage.
+        CREATE TRIGGER trg_work_attempts_resume_scope BEFORE INSERT ON work_attempts
+        WHEN NEW.resumed_session_binding_id IS NOT NULL
+        BEGIN
+          SELECT RAISE(ABORT, 'resumed session binding does not match the work request')
+            WHERE NOT EXISTS (
+              SELECT 1 FROM session_bindings b
+              JOIN work_requests r ON r.id = NEW.request_id
+              LEFT JOIN work_requests br ON br.id = b.request_id
+              WHERE b.id = NEW.resumed_session_binding_id AND b.released_at IS NULL
+                AND b.agent_id = r.target_agent_id AND b.adapter = NEW.adapter
+                AND (b.conversation_id IS NULL OR b.conversation_id = r.source_conversation_id)
+                AND (b.request_id IS NULL OR br.root_request_id = r.root_request_id)
+            );
+        END;
+      `)}},{version:3,name:"core_engine_hardening",up:e=>{let t=eC.flatMap(e=>ey[e].map(t=>`'${e}>${t}'`)).join(", ");e.exec(`
+        -- The lifecycle allowlist lives in the trigger itself, so no data
+        -- write can widen or break it. work_request_transitions stays as a
+        -- readable copy and is locked against writes.
+        DROP TRIGGER trg_work_requests_transition;
+        CREATE TRIGGER trg_work_requests_transition BEFORE UPDATE OF state ON work_requests
+        WHEN NEW.state <> OLD.state
+        BEGIN
+          SELECT RAISE(ABORT, 'invalid work_requests state transition')
+            WHERE (OLD.state || '>' || NEW.state) NOT IN (${t});
+        END;
+
+        CREATE TRIGGER trg_work_request_transitions_insert BEFORE INSERT ON work_request_transitions
+        BEGIN
+          SELECT RAISE(ABORT, 'work_request_transitions is read-only');
+        END;
+        CREATE TRIGGER trg_work_request_transitions_update BEFORE UPDATE ON work_request_transitions
+        BEGIN
+          SELECT RAISE(ABORT, 'work_request_transitions is read-only');
+        END;
+        CREATE TRIGGER trg_work_request_transitions_delete BEFORE DELETE ON work_request_transitions
+        BEGIN
+          SELECT RAISE(ABORT, 'work_request_transitions is read-only');
+        END;
+
+        -- Engine events are never deleted one by one. Aggregate cleanup
+        -- (deleteEngineRecords) first marks the requests it removes in
+        -- engine_event_purges; only events of a marked request may go.
+        CREATE TABLE engine_event_purges (
+          request_id TEXT PRIMARY KEY
+        );
+        CREATE TRIGGER trg_engine_events_no_delete BEFORE DELETE ON engine_events
+        BEGIN
+          SELECT RAISE(ABORT, 'engine_events are append-only')
+            WHERE NOT EXISTS (SELECT 1 FROM engine_event_purges WHERE request_id = OLD.request_id);
+        END;
+
+        -- Foreign keys (parent-key update side): RESTRICT.
+        CREATE TRIGGER trg_conversations_engine_restrict_update BEFORE UPDATE OF id ON conversations
+        WHEN NEW.id IS NOT OLD.id
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.source_conversation_id')
+            WHERE EXISTS (SELECT 1 FROM work_requests WHERE source_conversation_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.conversation_id')
+            WHERE EXISTS (SELECT 1 FROM session_bindings WHERE conversation_id = OLD.id);
+        END;
+
+        CREATE TRIGGER trg_bots_engine_restrict_update BEFORE UPDATE OF id ON bots
+        WHEN NEW.id IS NOT OLD.id
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: work_requests.target_agent_id')
+            WHERE EXISTS (SELECT 1 FROM work_requests WHERE target_agent_id = OLD.id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_bindings.agent_id')
+            WHERE EXISTS (SELECT 1 FROM session_bindings WHERE agent_id = OLD.id);
+        END;
+
+        -- Attempt kind and continuity agree: only a resume names a binding.
+        -- (Fresh schemas also carry this as a CHECK.)
+        CREATE TRIGGER trg_work_attempts_kind BEFORE INSERT ON work_attempts
+        WHEN (NEW.kind = 'resume') <> (NEW.resumed_session_binding_id IS NOT NULL)
+        BEGIN
+          SELECT RAISE(ABORT, 'work_attempts kind does not match resumed_session_binding_id');
+        END;
+      `)}},{version:4,name:"engine_event_purge_authority",up:e=>{e.exec(`
+        -- Purge authority no longer lives in data: any writer could insert
+        -- an engine_event_purges row and then delete single events. The
+        -- guard now asks engine_event_purge_authorized(), a connection
+        -- function that is true only while deleteEngineRecords removes that
+        -- request whole. Connections without it cannot delete events.
+        DROP TRIGGER trg_engine_events_no_delete;
+        DROP TABLE engine_event_purges;
+        CREATE TRIGGER trg_engine_events_no_delete BEFORE DELETE ON engine_events
+        BEGIN
+          SELECT RAISE(ABORT, 'engine_events are append-only')
+            WHERE NOT engine_event_purge_authorized(OLD.request_id);
+        END;
+      `)}},{version:5,name:"conversation_intakes",up:e=>{e.exec(`
+        -- NOT-465: one row per accepted conversation message, keyed by the
+        -- requester's idempotency key. It names the source event (message)
+        -- and the Work Requests created from it, so an exact retry replays
+        -- the original identifiers whether or not any request was created.
+        CREATE TABLE conversation_intakes (
+          requester_kind TEXT NOT NULL CHECK (requester_kind IN ('person', 'bot', 'service')),
+          requester_id TEXT NOT NULL,
+          idempotency_key TEXT NOT NULL CHECK (length(idempotency_key) > 0),
+          request_hash TEXT NOT NULL,
+          surface TEXT NOT NULL CHECK (surface IN ('ui', 'api')),
+          conversation_id TEXT NOT NULL,
+          source_event_id TEXT NOT NULL,
+          work_request_ids TEXT NOT NULL DEFAULT '[]',
+          created_at INTEGER NOT NULL,
+          PRIMARY KEY (requester_kind, requester_id, idempotency_key)
+        );
+        CREATE INDEX idx_conversation_intakes_conversation ON conversation_intakes(conversation_id);
+      `)}},{version:6,name:"attempt_output",up:e=>{e.exec(`
+        -- NOT-467: the runtime output an Attempt returned, recorded with
+        -- its terminal outcome (null while open or when none was returned).
+        ALTER TABLE work_attempts ADD COLUMN output TEXT;
+      `)}},{version:7,name:"wakes",up:e=>{e.exec(`
+        -- NOT-466: one row per Wake found in an Agent reply (lib/wake-router).
+        -- Every Wake is kept, including ones whose target is missing or
+        -- whose envelope is invalid, so nothing is silently dropped. An
+        -- accepted or blocked Wake names its one Work Request. Lineage is
+        -- durable: parent/root request and root Wake, never process memory.
+        CREATE TABLE wakes (
+          id TEXT PRIMARY KEY,
+          idempotency_key TEXT NOT NULL UNIQUE CHECK (length(idempotency_key) > 0),
+          source_conversation_id TEXT NOT NULL,
+          source_event_id TEXT NOT NULL,
+          position INTEGER NOT NULL CHECK (position >= 0),
+          syntax TEXT NOT NULL CHECK (syntax IN ('structured', 'legacy')),
+          payload TEXT NOT NULL,
+          requester_agent_id TEXT NOT NULL,
+          requested_target TEXT,
+          target_agent_id TEXT,
+          target_name_snapshot TEXT,
+          execution_kind TEXT CHECK (execution_kind IN ('conversation', 'implementation', 'review', 'revision')),
+          parent_request_id TEXT,
+          root_request_id TEXT,
+          root_wake_id TEXT NOT NULL,
+          depth INTEGER NOT NULL CHECK (depth >= 0),
+          status TEXT NOT NULL CHECK (status IN ('accepted', 'blocked', 'unavailable', 'rejected')),
+          reason_code TEXT,
+          reason TEXT,
+          work_request_id TEXT UNIQUE,
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          UNIQUE (source_event_id, position),
+          CHECK ((status IN ('accepted', 'blocked')) = (work_request_id IS NOT NULL)),
+          CHECK (status = 'accepted' OR reason_code IS NOT NULL),
+          FOREIGN KEY (source_conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (work_request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (parent_request_id) REFERENCES work_requests(id)
+        );
+        CREATE INDEX idx_wakes_conversation ON wakes(source_conversation_id, created_at);
+        CREATE INDEX idx_wakes_status ON wakes(status, created_at);
+
+        CREATE TRIGGER trg_wakes_fk BEFORE INSERT ON wakes
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: wakes.source_conversation_id')
+            WHERE NOT EXISTS (SELECT 1 FROM conversations WHERE id = NEW.source_conversation_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: wakes.parent_request_id')
+            WHERE NEW.parent_request_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.parent_request_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: wakes.work_request_id')
+            WHERE NEW.work_request_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.work_request_id);
+        END;
+
+        -- Source, payload, and lineage are fixed when the Wake is recorded.
+        CREATE TRIGGER trg_wakes_immutable BEFORE UPDATE OF
+          id, idempotency_key, source_conversation_id, source_event_id, position, syntax, payload,
+          requester_agent_id, requested_target, execution_kind, parent_request_id,
+          root_wake_id, depth, created_at
+        ON wakes
+        BEGIN
+          SELECT RAISE(ABORT, 'wakes source, payload, and lineage are immutable');
+        END;
+
+        -- Recovery only moves forward: an unavailable target may resolve
+        -- or turn out unroutable (rejected), a blocked request may become
+        -- accepted. The resolved target, Work
+        -- Request, and root request (for a Wake without a parent, its own
+        -- request) are set once.
+        CREATE TRIGGER trg_wakes_recovery BEFORE UPDATE ON wakes
+        BEGIN
+          SELECT RAISE(ABORT, 'invalid wakes status change')
+            WHERE NEW.status <> OLD.status
+              AND (OLD.status || '>' || NEW.status) NOT IN ('unavailable>accepted', 'unavailable>blocked', 'unavailable>rejected', 'blocked>accepted');
+          SELECT RAISE(ABORT, 'wakes target and work request are set once')
+            WHERE (OLD.target_agent_id IS NOT NULL AND NEW.target_agent_id IS NOT OLD.target_agent_id)
+              OR (OLD.target_name_snapshot IS NOT NULL AND NEW.target_name_snapshot IS NOT OLD.target_name_snapshot)
+              OR (OLD.work_request_id IS NOT NULL AND NEW.work_request_id IS NOT OLD.work_request_id)
+              OR (OLD.root_request_id IS NOT NULL AND NEW.root_request_id IS NOT OLD.root_request_id);
+        END;
+      `)}},{version:8,name:"conversation_events",up:e=>{e.exec(`
+        -- NOT-470: typed conversation projection of Wake and Work Request
+        -- lifecycle events (lib/conversation-projection). One row per
+        -- projected part of one engine event; the id is derived from the
+        -- engine event id and part, so replay and redelivery never add a
+        -- row. text is the human-facing line, data the machine-readable
+        -- meaning. sort_at never decreases within a request, so ordering
+        -- by (sort_at, request_created_at, request_id, request_sequence,
+        -- part) keeps each request's own order while requests interleave.
+        CREATE TABLE conversation_events (
+          id TEXT PRIMARY KEY,
+          conversation_id TEXT NOT NULL,
+          engine_event_id TEXT NOT NULL,
+          part INTEGER NOT NULL CHECK (part >= 0),
+          request_id TEXT NOT NULL,
+          request_sequence INTEGER NOT NULL,
+          attempt_id TEXT,
+          wake_id TEXT,
+          kind TEXT NOT NULL CHECK (kind IN (
+            'wake_accepted', 'wake_blocked', 'request_queued', 'request_blocked', 'request_running',
+            'request_waiting', 'request_completed', 'request_failed', 'request_cancelled',
+            'question', 'result', 'artifact'
+          )),
+          state TEXT CHECK (state IN (${eF})),
+          text TEXT NOT NULL,
+          data TEXT NOT NULL,
+          sort_at INTEGER NOT NULL,
+          request_created_at INTEGER NOT NULL,
+          created_at INTEGER NOT NULL,
+          UNIQUE (engine_event_id, part),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (engine_event_id) REFERENCES engine_events(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        CREATE INDEX idx_conversation_events_order
+          ON conversation_events(conversation_id, sort_at, request_created_at, request_id, request_sequence, part);
+        CREATE INDEX idx_conversation_events_request ON conversation_events(request_id);
+
+        -- Last engine event sequence the projector has read per request,
+        -- including events that project to nothing.
+        CREATE TABLE conversation_projection_cursors (
+          request_id TEXT PRIMARY KEY,
+          sequence INTEGER NOT NULL CHECK (sequence >= 0),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+
+        CREATE TRIGGER trg_conversation_events_immutable BEFORE UPDATE ON conversation_events
+        BEGIN
+          SELECT RAISE(ABORT, 'conversation_events are immutable');
+        END;
+      `)}},{version:9,name:"terminal_followups",up:e=>{e.exec(`
+        -- NOT-472: one row per canonical request that became terminal on
+        -- this schema, written in the same transaction as the terminal
+        -- transition. lib/coordinator-loop runs the follow-up (Wake
+        -- routing, coordinator continuation) and sets done_at; restart
+        -- recovery only replays rows still open. Requests that ended
+        -- before this migration get no row, so their replies are never
+        -- routed retroactively.
+        CREATE TABLE terminal_followups (
+          request_id TEXT PRIMARY KEY,
+          created_at INTEGER NOT NULL,
+          done_at INTEGER,
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        CREATE INDEX idx_terminal_followups_open ON terminal_followups(created_at) WHERE done_at IS NULL;
+      `)}},{version:10,name:"reviewed_git_finalization",up:e=>{e.exec(`
+        -- NOT-487: reviewed Git finalization through Agent Deck
+        -- (docs/design/2026-10-13-git-finalization-contract.md). Rows hold
+        -- only public Agent Deck identifiers, repository-relative paths,
+        -- digests, and modes: never file contents, host paths, or the
+        -- Agent Deck bearer.
+        --
+        -- Public baseline of a prepared edit Attempt, captured before model
+        -- work. Set once.
+        CREATE TABLE attempt_finalization_baselines (
+          attempt_id TEXT PRIMARY KEY,
+          request_id TEXT NOT NULL,
+          external_run_id TEXT NOT NULL,
+          baseline_ref TEXT NOT NULL,
+          baseline_digest TEXT NOT NULL,
+          created_at INTEGER NOT NULL,
+          FOREIGN KEY (attempt_id) REFERENCES work_attempts(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+
+        -- The ordered candidate manifest Agent Deck reported once the
+        -- prepared run was terminal: the immutable review evidence that a
+        -- finalization submits unchanged.
+        CREATE TABLE candidate_manifests (
+          id TEXT PRIMARY KEY,
+          attempt_id TEXT NOT NULL UNIQUE,
+          request_id TEXT NOT NULL,
+          conversation_id TEXT NOT NULL,
+          external_run_id TEXT NOT NULL,
+          baseline_ref TEXT NOT NULL,
+          baseline_digest TEXT NOT NULL,
+          base_commit TEXT NOT NULL,
+          manifest_digest TEXT NOT NULL,
+          files TEXT NOT NULL,
+          file_count INTEGER NOT NULL CHECK (file_count >= 0),
+          created_at INTEGER NOT NULL,
+          FOREIGN KEY (attempt_id) REFERENCES work_attempts(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id)
+        );
+
+        -- One accepted finalization decision and its outcome. The request
+        -- body is exactly what was (or will be) submitted; the idempotency
+        -- key is derived from the explicit acceptance event, implementation
+        -- Attempt, review, and manifest. Replay and restart submit the same
+        -- request, while a later acceptance can retry a terminal non-commit.
+        CREATE TABLE finalizations (
+          id TEXT PRIMARY KEY,
+          idempotency_key TEXT NOT NULL UNIQUE CHECK (length(idempotency_key) > 0),
+          conversation_id TEXT NOT NULL,
+          decision_event_id TEXT NOT NULL,
+          decision_request_id TEXT NOT NULL,
+          coordinator_agent_id TEXT NOT NULL,
+          implementation_request_id TEXT NOT NULL,
+          implementation_attempt_id TEXT NOT NULL,
+          review_request_id TEXT NOT NULL,
+          review_attempt_id TEXT NOT NULL,
+          manifest_id TEXT NOT NULL,
+          external_run_id TEXT NOT NULL,
+          request_body TEXT NOT NULL,
+          request_hash TEXT NOT NULL,
+          state TEXT NOT NULL CHECK (state IN ('preparing', 'committed', 'blocked', 'failed', 'canceled')),
+          submitted_at INTEGER,
+          reason_code TEXT,
+          reason TEXT,
+          commit_id TEXT,
+          tree_id TEXT,
+          parent_commit TEXT,
+          result_manifest_digest TEXT,
+          file_count INTEGER,
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          finished_at INTEGER,
+          CHECK ((state = 'preparing') = (finished_at IS NULL)),
+          CHECK (state <> 'committed' OR commit_id IS NOT NULL),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (implementation_request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (implementation_attempt_id) REFERENCES work_attempts(id),
+          FOREIGN KEY (review_request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (manifest_id) REFERENCES candidate_manifests(id)
+        );
+        CREATE INDEX idx_finalizations_open ON finalizations(created_at) WHERE finished_at IS NULL;
+        CREATE INDEX idx_finalizations_attempt ON finalizations(implementation_attempt_id);
+
+        CREATE TRIGGER trg_attempt_finalization_baselines_fk BEFORE INSERT ON attempt_finalization_baselines
+        BEGIN
+          SELECT RAISE(ABORT, 'attempt finalization baseline does not match its Attempt')
+            WHERE NOT EXISTS (
+              SELECT 1 FROM work_attempts
+              WHERE id = NEW.attempt_id AND request_id = NEW.request_id AND external_run_id = NEW.external_run_id
+            );
+        END;
+        CREATE TRIGGER trg_attempt_finalization_baselines_immutable BEFORE UPDATE ON attempt_finalization_baselines
+        BEGIN
+          SELECT RAISE(ABORT, 'attempt_finalization_baselines are immutable');
+        END;
+        CREATE TRIGGER trg_candidate_manifests_fk BEFORE INSERT ON candidate_manifests
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: candidate_manifests.attempt_id')
+            WHERE NOT EXISTS (
+              SELECT 1 FROM work_attempts a
+              JOIN work_requests r ON r.id = a.request_id
+              JOIN attempt_finalization_baselines b ON b.attempt_id = a.id
+              WHERE a.id = NEW.attempt_id AND a.request_id = NEW.request_id
+                AND a.external_run_id = NEW.external_run_id
+                AND r.source_conversation_id = NEW.conversation_id
+                AND b.external_run_id = NEW.external_run_id
+                AND b.baseline_ref = NEW.baseline_ref AND b.baseline_digest = NEW.baseline_digest
+            );
+        END;
+        CREATE TRIGGER trg_candidate_manifests_immutable BEFORE UPDATE ON candidate_manifests
+        BEGIN
+          SELECT RAISE(ABORT, 'candidate_manifests are immutable');
+        END;
+        CREATE TRIGGER trg_finalizations_fk BEFORE INSERT ON finalizations
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: finalizations.manifest_id')
+            WHERE NOT EXISTS (
+              SELECT 1 FROM candidate_manifests m
+              JOIN work_attempts ia ON ia.id = NEW.implementation_attempt_id
+              JOIN work_attempts ra ON ra.id = NEW.review_attempt_id
+              JOIN work_requests ir ON ir.id = NEW.implementation_request_id
+              JOIN work_requests rr ON rr.id = NEW.review_request_id
+              JOIN work_requests dr ON dr.id = NEW.decision_request_id
+              WHERE m.id = NEW.manifest_id AND m.attempt_id = ia.id AND m.request_id = ir.id
+                AND m.external_run_id = NEW.external_run_id
+                AND ia.request_id = ir.id AND ra.request_id = rr.id
+                AND ir.source_conversation_id = NEW.conversation_id
+                AND rr.source_conversation_id = NEW.conversation_id
+                AND dr.source_conversation_id = NEW.conversation_id
+                AND dr.target_agent_id = NEW.coordinator_agent_id
+            );
+        END;
+        CREATE TRIGGER trg_finalizations_immutable BEFORE UPDATE OF
+          id, idempotency_key, conversation_id, decision_event_id, decision_request_id, coordinator_agent_id,
+          implementation_request_id, implementation_attempt_id, review_request_id, review_attempt_id,
+          manifest_id, external_run_id, request_body, request_hash, created_at
+        ON finalizations
+        BEGIN
+          SELECT RAISE(ABORT, 'finalizations decision and request are immutable');
+        END;
+        CREATE TRIGGER trg_finalizations_terminal BEFORE UPDATE ON finalizations
+        WHEN OLD.finished_at IS NOT NULL
+        BEGIN
+          SELECT RAISE(ABORT, 'finished finalizations are immutable');
+        END;
+        CREATE TRIGGER trg_finalizations_submitted BEFORE UPDATE OF submitted_at ON finalizations
+        WHEN OLD.submitted_at IS NOT NULL AND NEW.submitted_at IS NOT OLD.submitted_at
+        BEGIN
+          SELECT RAISE(ABORT, 'finalizations submitted_at is set once');
+        END;
+
+        -- Conversation projection gains the finalization lifecycle kinds.
+        -- SQLite cannot widen a CHECK in place, so the table is rebuilt
+        -- with every row kept.
+        CREATE TABLE conversation_events_v10 (
+          id TEXT PRIMARY KEY,
+          conversation_id TEXT NOT NULL,
+          engine_event_id TEXT NOT NULL,
+          part INTEGER NOT NULL CHECK (part >= 0),
+          request_id TEXT NOT NULL,
+          request_sequence INTEGER NOT NULL,
+          attempt_id TEXT,
+          wake_id TEXT,
+          kind TEXT NOT NULL CHECK (kind IN (
+            'wake_accepted', 'wake_blocked', 'request_queued', 'request_blocked', 'request_running',
+            'request_waiting', 'request_completed', 'request_failed', 'request_cancelled',
+            'question', 'result', 'artifact',
+            'finalization_preparing', 'finalization_committed', 'finalization_blocked',
+            'finalization_failed', 'finalization_canceled', 'finalization_rejected'
+          )),
+          state TEXT CHECK (state IN (${eF})),
+          text TEXT NOT NULL,
+          data TEXT NOT NULL,
+          sort_at INTEGER NOT NULL,
+          request_created_at INTEGER NOT NULL,
+          created_at INTEGER NOT NULL,
+          UNIQUE (engine_event_id, part),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (engine_event_id) REFERENCES engine_events(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        INSERT INTO conversation_events_v10 SELECT
+          id, conversation_id, engine_event_id, part, request_id, request_sequence, attempt_id, wake_id,
+          kind, state, text, data, sort_at, request_created_at, created_at
+        FROM conversation_events;
+        DROP TABLE conversation_events;
+        ALTER TABLE conversation_events_v10 RENAME TO conversation_events;
+        CREATE INDEX idx_conversation_events_order
+          ON conversation_events(conversation_id, sort_at, request_created_at, request_id, request_sequence, part);
+        CREATE INDEX idx_conversation_events_request ON conversation_events(request_id);
+        CREATE TRIGGER trg_conversation_events_immutable BEFORE UPDATE ON conversation_events
+        BEGIN
+          SELECT RAISE(ABORT, 'conversation_events are immutable');
+        END;
+      `)}},{version:11,name:"leased_dispatch",up:e=>{e.exec(`
+        -- NOT-469: leased dispatcher (lib/dispatcher). One row per request a
+        -- worker owns. The token is a fencing value: heartbeat, release, and
+        -- every fenced commit match it, so a worker whose lease was taken
+        -- over can no longer write. An expired row is not free: its run may
+        -- still be live, so it counts toward concurrency until a worker
+        -- takes it over and reconciles it.
+        CREATE TABLE dispatch_leases (
+          request_id TEXT PRIMARY KEY,
+          target_agent_id TEXT NOT NULL,
+          owner TEXT NOT NULL CHECK (length(owner) > 0),
+          token TEXT NOT NULL UNIQUE CHECK (length(token) > 0),
+          acquired_at INTEGER NOT NULL,
+          heartbeat_at INTEGER NOT NULL,
+          expires_at INTEGER NOT NULL,
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        CREATE INDEX idx_dispatch_leases_target ON dispatch_leases(target_agent_id);
+        CREATE INDEX idx_dispatch_leases_expiry ON dispatch_leases(expires_at);
+
+        -- Launch intent, written with the Attempt before any adapter call:
+        -- the exact start body (or null for a transport without external
+        -- runs), its idempotency key, and a non-secret fingerprint of the
+        -- launching grant. Reconciliation re-POSTs only this body, under
+        -- this key, with this grant (NOT-468 decision table A).
+        CREATE TABLE attempt_launch_intents (
+          attempt_id TEXT PRIMARY KEY,
+          request_id TEXT NOT NULL,
+          transport TEXT NOT NULL CHECK (length(transport) > 0),
+          idempotency_key TEXT,
+          body TEXT,
+          body_hash TEXT,
+          grant_fingerprint TEXT,
+          owner TEXT NOT NULL,
+          created_at INTEGER NOT NULL,
+          CHECK ((body IS NULL) = (body_hash IS NULL)),
+          CHECK (body IS NULL OR idempotency_key IS NOT NULL),
+          FOREIGN KEY (attempt_id) REFERENCES work_attempts(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        CREATE TRIGGER trg_attempt_launch_intents_fk BEFORE INSERT ON attempt_launch_intents
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: attempt_launch_intents.attempt_id')
+            WHERE NOT EXISTS (SELECT 1 FROM work_attempts WHERE id = NEW.attempt_id AND request_id = NEW.request_id);
+        END;
+        CREATE TRIGGER trg_attempt_launch_intents_immutable BEFORE UPDATE ON attempt_launch_intents
+        BEGIN
+          SELECT RAISE(ABORT, 'attempt_launch_intents are immutable');
+        END;
+
+        -- Operator-attention flag, separate from the Attempt lifecycle. While
+        -- one is open for a request the dispatcher makes no automatic
+        -- launch, re-POST, retry, or resume for it. Only an operator clears
+        -- it (cleared_at).
+        CREATE TABLE dispatch_attention (
+          id TEXT PRIMARY KEY,
+          request_id TEXT NOT NULL,
+          attempt_id TEXT,
+          reason TEXT NOT NULL CHECK (length(reason) > 0),
+          detail TEXT,
+          created_at INTEGER NOT NULL,
+          cleared_at INTEGER,
+          FOREIGN KEY (request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (attempt_id) REFERENCES work_attempts(id)
+        );
+        CREATE UNIQUE INDEX idx_dispatch_attention_open ON dispatch_attention(request_id) WHERE cleared_at IS NULL;
+      `)}},{version:12,name:"request_control",up:e=>{e.exec(`
+        -- NOT-473: cancellation, deadlines, and bounded retries
+        -- (lib/work-request-control, lib/request-policy). The deadline and
+        -- retry policy are fixed at intake; null on older rows means no
+        -- deadline and one Attempt. attempt_count counts claimed Attempts
+        -- and never decreases; a queued retry is not claimable before
+        -- next_eligible_at. The cancellation intent is recorded once.
+        ALTER TABLE work_requests ADD COLUMN deadline_at INTEGER;
+        ALTER TABLE work_requests ADD COLUMN retry_policy TEXT;
+        ALTER TABLE work_requests ADD COLUMN attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0);
+        ALTER TABLE work_requests ADD COLUMN next_eligible_at INTEGER;
+        ALTER TABLE work_requests ADD COLUMN cancel_requested_at INTEGER;
+        ALTER TABLE work_requests ADD COLUMN cancel_requested_by TEXT;
+        ALTER TABLE work_requests ADD COLUMN cancel_reason TEXT;
+        CREATE INDEX idx_work_requests_deadline ON work_requests(deadline_at) WHERE deadline_at IS NOT NULL;
+
+        CREATE TRIGGER trg_work_requests_control_immutable BEFORE UPDATE OF deadline_at, retry_policy ON work_requests
+        WHEN NEW.deadline_at IS NOT OLD.deadline_at OR NEW.retry_policy IS NOT OLD.retry_policy
+        BEGIN
+          SELECT RAISE(ABORT, 'work_requests deadline and retry policy are immutable');
+        END;
+        CREATE TRIGGER trg_work_requests_attempt_count BEFORE UPDATE OF attempt_count ON work_requests
+        WHEN NEW.attempt_count < OLD.attempt_count
+        BEGIN
+          SELECT RAISE(ABORT, 'work_requests attempt_count never decreases');
+        END;
+        CREATE TRIGGER trg_work_requests_cancel_once BEFORE UPDATE OF cancel_requested_at, cancel_requested_by, cancel_reason ON work_requests
+        WHEN OLD.cancel_requested_at IS NOT NULL AND (
+          NEW.cancel_requested_at IS NOT OLD.cancel_requested_at
+          OR NEW.cancel_requested_by IS NOT OLD.cancel_requested_by
+          OR NEW.cancel_reason IS NOT OLD.cancel_reason
+        )
+        BEGIN
+          SELECT RAISE(ABORT, 'work_requests cancellation intent is recorded once');
+        END;
+
+        -- Conversation projection gains the cancellation, timeout, and
+        -- retry kinds (rebuilt with every row kept, as in version 10).
+        CREATE TABLE conversation_events_v12 (
+          id TEXT PRIMARY KEY,
+          conversation_id TEXT NOT NULL,
+          engine_event_id TEXT NOT NULL,
+          part INTEGER NOT NULL CHECK (part >= 0),
+          request_id TEXT NOT NULL,
+          request_sequence INTEGER NOT NULL,
+          attempt_id TEXT,
+          wake_id TEXT,
+          kind TEXT NOT NULL CHECK (kind IN (
+            'wake_accepted', 'wake_blocked', 'request_queued', 'request_blocked', 'request_running',
+            'request_waiting', 'request_completed', 'request_failed', 'request_cancelled',
+            'question', 'result', 'artifact',
+            'finalization_preparing', 'finalization_committed', 'finalization_blocked',
+            'finalization_failed', 'finalization_canceled', 'finalization_rejected',
+            'request_cancel_requested', 'request_timed_out', 'request_retry_scheduled', 'request_retries_exhausted'
+          )),
+          state TEXT CHECK (state IN (${eF})),
+          text TEXT NOT NULL,
+          data TEXT NOT NULL,
+          sort_at INTEGER NOT NULL,
+          request_created_at INTEGER NOT NULL,
+          created_at INTEGER NOT NULL,
+          UNIQUE (engine_event_id, part),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (engine_event_id) REFERENCES engine_events(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        INSERT INTO conversation_events_v12 SELECT
+          id, conversation_id, engine_event_id, part, request_id, request_sequence, attempt_id, wake_id,
+          kind, state, text, data, sort_at, request_created_at, created_at
+        FROM conversation_events;
+        DROP TABLE conversation_events;
+        ALTER TABLE conversation_events_v12 RENAME TO conversation_events;
+        CREATE INDEX idx_conversation_events_order
+          ON conversation_events(conversation_id, sort_at, request_created_at, request_id, request_sequence, part);
+        CREATE INDEX idx_conversation_events_request ON conversation_events(request_id);
+        CREATE TRIGGER trg_conversation_events_immutable BEFORE UPDATE ON conversation_events
+        BEGIN
+          SELECT RAISE(ABORT, 'conversation_events are immutable');
+        END;
+      `)}},{version:13,name:"wake_safety",up:e=>{e.exec(`
+        -- NOT-475: Wake safety (docs/design/2026-10-14-wake-safety-contract.md,
+        -- lib/wake-safety). Lineage columns: wake_depth counts Agent-to-Agent
+        -- hops from the root (a continuation runs at the depth of the Agent it
+        -- continues) and the root principal is whoever started the lineage.
+        -- Both are fixed at intake.
+        ALTER TABLE work_requests ADD COLUMN wake_depth INTEGER NOT NULL DEFAULT 0 CHECK (wake_depth >= 0);
+        ALTER TABLE work_requests ADD COLUMN root_principal_kind TEXT;
+        ALTER TABLE work_requests ADD COLUMN root_principal_id TEXT;
+
+        -- Owner-approved edit grants for one (caller Agent, target Agent)
+        -- pair. Never seeded; revoked once, never rewritten or reused.
+        CREATE TABLE wake_grants (
+          id TEXT PRIMARY KEY,
+          caller_agent_id TEXT NOT NULL,
+          target_agent_id TEXT NOT NULL,
+          authority TEXT NOT NULL CHECK (authority = 'edit'),
+          granted_by_kind TEXT NOT NULL,
+          granted_by_id TEXT NOT NULL,
+          source_wake_id TEXT,
+          created_at INTEGER NOT NULL,
+          revoked_at INTEGER,
+          revoked_by_kind TEXT,
+          revoked_by_id TEXT,
+          CHECK ((revoked_at IS NULL) = (revoked_by_kind IS NULL) AND (revoked_at IS NULL) = (revoked_by_id IS NULL))
+        );
+        CREATE UNIQUE INDEX idx_wake_grants_active ON wake_grants(caller_agent_id, target_agent_id, authority) WHERE revoked_at IS NULL;
+        CREATE TRIGGER trg_wake_grants_immutable BEFORE UPDATE ON wake_grants
+        BEGIN
+          SELECT RAISE(ABORT, 'wake_grants are immutable except for one revocation')
+            WHERE OLD.revoked_at IS NOT NULL
+              OR NEW.id IS NOT OLD.id OR NEW.caller_agent_id IS NOT OLD.caller_agent_id
+              OR NEW.target_agent_id IS NOT OLD.target_agent_id OR NEW.authority IS NOT OLD.authority
+              OR NEW.granted_by_kind IS NOT OLD.granted_by_kind OR NEW.granted_by_id IS NOT OLD.granted_by_id
+              OR NEW.source_wake_id IS NOT OLD.source_wake_id OR NEW.created_at IS NOT OLD.created_at;
+        END;
+
+        -- One append-only row per safety evaluation of a Work Request: the
+        -- categorized caller principal, target, decision, matched grant rule
+        -- and grant, and the policy snapshot used. A request is runnable
+        -- only while its latest decision is allowed (lib/dispatcher). A
+        -- later policy change (a revoked grant, new limits) adds rows for
+        -- later evaluations and never rewrites these.
+        CREATE TABLE wake_safety_decisions (
+          id TEXT PRIMARY KEY,
+          request_id TEXT NOT NULL,
+          sequence INTEGER NOT NULL CHECK (sequence > 0),
+          wake_id TEXT,
+          principal_type TEXT NOT NULL CHECK (principal_type IN ('human_owner', 'api_principal', 'agent_principal', 'engine')),
+          principal_kind TEXT NOT NULL,
+          principal_id TEXT NOT NULL,
+          target_agent_id TEXT NOT NULL,
+          execution_kind TEXT NOT NULL,
+          decision TEXT NOT NULL CHECK (decision IN ('allowed', 'blocked', 'denied')),
+          reason_code TEXT,
+          grant_rule TEXT,
+          grant_id TEXT,
+          policy_snapshot TEXT NOT NULL,
+          created_at INTEGER NOT NULL,
+          UNIQUE (request_id, sequence),
+          CHECK (decision <> 'allowed' OR grant_rule IS NOT NULL),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        CREATE TRIGGER trg_wake_safety_decisions_fk BEFORE INSERT ON wake_safety_decisions
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: wake_safety_decisions.request_id')
+            WHERE NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.request_id);
+        END;
+        CREATE TRIGGER trg_wake_safety_decisions_immutable BEFORE UPDATE ON wake_safety_decisions
+        BEGIN
+          SELECT RAISE(ABORT, 'wake_safety_decisions are append-only');
+        END;
+
+        -- Depth and root-budget refusals name the limit and what was seen.
+        ALTER TABLE wakes ADD COLUMN limit_value INTEGER;
+        ALTER TABLE wakes ADD COLUMN observed_value INTEGER;
+
+        -- Rejected Wakes project from the Wake row (no Work Request, no
+        -- engine event), and a stopped lineage projects as its own kind.
+        CREATE TABLE conversation_events_v13 (
+          id TEXT PRIMARY KEY,
+          conversation_id TEXT NOT NULL,
+          engine_event_id TEXT,
+          part INTEGER NOT NULL CHECK (part >= 0),
+          request_id TEXT,
+          request_sequence INTEGER NOT NULL,
+          attempt_id TEXT,
+          wake_id TEXT,
+          kind TEXT NOT NULL CHECK (kind IN (
+            'wake_accepted', 'wake_blocked', 'request_queued', 'request_blocked', 'request_running',
+            'request_waiting', 'request_completed', 'request_failed', 'request_cancelled',
+            'question', 'result', 'artifact',
+            'finalization_preparing', 'finalization_committed', 'finalization_blocked',
+            'finalization_failed', 'finalization_canceled', 'finalization_rejected',
+            'request_cancel_requested', 'request_timed_out', 'request_retry_scheduled', 'request_retries_exhausted',
+            'wake_rejected', 'lineage_stopped'
+          )),
+          state TEXT CHECK (state IN (${eF})),
+          text TEXT NOT NULL,
+          data TEXT NOT NULL,
+          sort_at INTEGER NOT NULL,
+          request_created_at INTEGER NOT NULL,
+          created_at INTEGER NOT NULL,
+          UNIQUE (engine_event_id, part),
+          CHECK ((engine_event_id IS NULL) = (request_id IS NULL)),
+          CHECK (request_id IS NOT NULL OR wake_id IS NOT NULL),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (engine_event_id) REFERENCES engine_events(id),
+          FOREIGN KEY (request_id) REFERENCES work_requests(id)
+        );
+        INSERT INTO conversation_events_v13 SELECT
+          id, conversation_id, engine_event_id, part, request_id, request_sequence, attempt_id, wake_id,
+          kind, state, text, data, sort_at, request_created_at, created_at
+        FROM conversation_events;
+        DROP TABLE conversation_events;
+        ALTER TABLE conversation_events_v13 RENAME TO conversation_events;
+        CREATE INDEX idx_conversation_events_order
+          ON conversation_events(conversation_id, sort_at, request_created_at, request_id, request_sequence, part);
+        CREATE INDEX idx_conversation_events_request ON conversation_events(request_id);
+        CREATE INDEX idx_conversation_events_wake ON conversation_events(wake_id);
+        CREATE TRIGGER trg_conversation_events_immutable BEFORE UPDATE ON conversation_events
+        BEGIN
+          SELECT RAISE(ABORT, 'conversation_events are immutable');
+        END;
+      `),function(e){let t=e.prepare(`
+    SELECT id, parent_request_id, root_request_id, wake_event_id, requester_kind, requester_id, policy_snapshot, state,
+      target_agent_id, execution_kind, legacy_agent_request_id, created_at
+    FROM work_requests ORDER BY created_at ASC, rowid ASC
+  `).all(),n=new Map(t.map(e=>[e.id,e])),i=e=>{try{let t=JSON.parse(e.policy_snapshot);return t&&"object"==typeof t&&!Array.isArray(t)?t:{}}catch{return{}}},r=new Map,a=e=>{let t=r.get(e.id);if(void 0!==t)return t;let i=[],s=new Set,a=e,o=!1;for(;a&&!s.has(a.id)&&a.root_request_id===e.root_request_id;){let t=r.get(a.id);if(void 0!==t){o=t;break}if(s.add(a.id),i.push(a),null===a.parent_request_id){o=a.id===e.root_request_id;break}a=n.get(a.parent_request_id)}for(let e of i)r.set(e.id,o);return o},o=new Map,_=e=>{let t=o.get(e.id);if(void 0!==t)return t;let r=0,s=e.parent_request_id?n.get(e.parent_request_id):void 0;if(s){let t=_(s),n=i(e);r=e.wake_event_id?t+1:"coordinator_continuation"===n.source&&"result"===n.continues?Math.max(t-1,0):t}return o.set(e.id,r),r},d=e.prepare("UPDATE work_requests SET wake_depth = ?, root_principal_kind = ?, root_principal_id = ? WHERE id = ?"),E=e.prepare(`
+    INSERT INTO wake_safety_decisions (
+      id, request_id, sequence, wake_id, principal_type, principal_kind, principal_id, target_agent_id, execution_kind,
+      decision, reason_code, grant_rule, grant_id, policy_snapshot, created_at
+    ) VALUES (?, ?, 1, ?, ?, ?, ?, ?, ?, 'allowed', NULL, 'pre_safety_migration', NULL, ?, ?)
+  `);for(let r of(e.exec("DROP TRIGGER trg_work_requests_terminal"),t)){let e=n.get(r.root_request_id),t=!!e&&a(r),o=t?_(r):0,u=t&&e?{kind:e.requester_kind,id:e.requester_id}:{kind:"unknown",id:"unknown"};if(d.run(o,u.kind,u.id,r.id),null===r.legacy_agent_request_id&&["queued","running","waiting"].includes(r.state)){let e=i(r),t="wake"===e.source?"agent_principal":"coordinator_continuation"===e.source?"engine":"api"===e.surface?"api_principal":"human_owner";E.run((0,s.randomUUID)(),r.id,r.wake_event_id,t,r.requester_kind,r.requester_id,r.target_agent_id,r.execution_kind,JSON.stringify({safety_version:1,migrated:!0,root_principal:u,wake_depth:o,grant_rule:"pre_safety_migration"}),r.created_at)}}e.exec(`
+    CREATE TRIGGER trg_work_requests_terminal BEFORE UPDATE ON work_requests
+    WHEN OLD.state IN (${eU})
+    BEGIN
+      SELECT RAISE(ABORT, 'terminal work_requests are immutable');
+    END;
+  `)}(e),e.exec(`
+        CREATE TRIGGER trg_work_requests_safety_immutable BEFORE UPDATE OF wake_depth, root_principal_kind, root_principal_id ON work_requests
+        WHEN NEW.wake_depth IS NOT OLD.wake_depth
+          OR NEW.root_principal_kind IS NOT OLD.root_principal_kind
+          OR NEW.root_principal_id IS NOT OLD.root_principal_id
+        BEGIN
+          SELECT RAISE(ABORT, 'work_requests wake depth and root principal are immutable');
+        END;
+      `)}},{version:14,name:"retire_legacy_agent_requests",up:e=>{!function(e){let t=t=>!!e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get(t);if(!t("agent_requests"))return;let n=t("agent_request_events"),i=e.prepare(`
+    SELECT r.*, m.content AS content FROM agent_requests r
+    JOIN conversations c ON c.id = r.conversation_id
+    JOIN bots b ON b.id = r.target_bot_id
+    JOIN messages m ON m.id = r.accepted_message_id AND m.conversation_id = r.conversation_id
+    WHERE r.state IN ('completed', 'failed', 'accepted', 'dispatched')
+      AND r.principal_kind IN ('person', 'bot', 'service')
+      AND NOT EXISTS (SELECT 1 FROM work_requests w WHERE w.legacy_agent_request_id = r.id)
+    ORDER BY r.created_at ASC, r.rowid ASC
+  `).all(),r=e.prepare("SELECT 1 FROM work_requests WHERE requester_kind = ? AND requester_id = ? AND idempotency_key = ?"),a=n?e.prepare("SELECT type, data, created_at FROM agent_request_events WHERE request_id = ? ORDER BY created_at ASC, rowid ASC"):null,o=e.prepare(`
+    INSERT INTO work_requests (
+      id, source_conversation_id, source_event_id, requester_kind, requester_id, target_agent_id,
+      intent, execution_kind, tool_profile, parent_request_id, root_request_id, wake_event_id, depth,
+      idempotency_key, request_hash, policy_snapshot, state, state_reason, result, error_code, error_message,
+      version, legacy_agent_request_id, created_at, updated_at, terminal_at, root_principal_kind, root_principal_id
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, 'conversation', 'readonly', NULL, ?, NULL, 0, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?, ?, ?, ?, ?)
+  `),_=e.prepare("INSERT INTO engine_events (id, request_id, sequence, attempt_id, type, data, created_at) VALUES (?, ?, ?, NULL, ?, ?, ?)"),d=Date.now();for(let e of i){if(r.get(e.principal_kind,e.principal_id,e.idempotency_key))continue;let t=(0,s.randomUUID)(),n=eB({sourceConversationId:e.conversation_id,sourceEventId:e.accepted_message_id,targetAgentId:e.target_bot_id,intent:e.content,executionKind:"conversation",toolProfile:"readonly"}),i="accepted"===e.state||"dispatched"===e.state,E=JSON.stringify({tool_profile:"readonly",source:"legacy_agent_requests",legacy_operation:e.operation,legacy_runtime:e.runtime,...i?{legacy_state:e.state}:{}}),u=i?Math.max(d,e.updated_at):e.updated_at;o.run(t,e.conversation_id,e.accepted_message_id,e.principal_kind,e.principal_id,e.target_bot_id,e.content,t,e.idempotency_key,n,E,i?"failed":e.state,i?eM:null,"completed"===e.state?JSON.stringify({reply_message_id:e.reply_message_id}):null,i?eM:"failed"===e.state?e.failure_code:null,i?eK:"failed"===e.state?e.failure_message:null,e.id,e.created_at,u,u,e.principal_kind,e.principal_id);let c=0;for(let n of a?.all(e.id)??[])_.run((0,s.randomUUID)(),t,++c,n.type,n.data,n.created_at);i&&_.run((0,s.randomUUID)(),t,++c,"state_changed",JSON.stringify({from:"accepted"===e.state?"queued":"running",to:"failed",reason:eM}),u),_.run((0,s.randomUUID)(),t,++c,"backfilled",JSON.stringify({legacy_agent_request_id:e.id}),u)}(function(e){let t=e.prepare(`
+    SELECT w.id AS request_id, r.principal_kind, r.principal_id, r.idempotency_key, r.payload_hash,
+      r.conversation_id, r.target_bot_id, r.accepted_message_id, r.created_at, m.content AS content
+    FROM work_requests w
+    JOIN agent_requests r ON r.id = w.legacy_agent_request_id
+    JOIN messages m ON m.id = r.accepted_message_id
+    WHERE r.operation = 'send_message'
+      AND NOT EXISTS (
+        SELECT 1 FROM conversation_intakes i
+        WHERE i.requester_kind = r.principal_kind AND i.requester_id = r.principal_id AND i.idempotency_key = r.idempotency_key
+      )
+  `).all(),n=e.prepare(`
+    INSERT INTO conversation_intakes (
+      requester_kind, requester_id, idempotency_key, request_hash, surface,
+      conversation_id, source_event_id, work_request_ids, created_at
+    ) VALUES (?, ?, ?, ?, 'api', ?, ?, ?, ?)
+  `);for(let e of t){let t=[e.conversation_id,null].map(t=>[e.target_bot_id,t,e.content]).find(t=>eJ(JSON.stringify(t))===e.payload_hash);t&&n.run(e.principal_kind,e.principal_id,e.idempotency_key,eJ(JSON.stringify(["api",t])),e.conversation_id,e.accepted_message_id,JSON.stringify([e.request_id]),e.created_at)}})(e),t("legacy_agent_requests_archive")?e.exec("INSERT INTO legacy_agent_requests_archive SELECT * FROM agent_requests; DROP TABLE agent_requests;"):e.exec("ALTER TABLE agent_requests RENAME TO legacy_agent_requests_archive"),n&&(t("legacy_agent_request_events_archive")?e.exec("INSERT INTO legacy_agent_request_events_archive SELECT * FROM agent_request_events; DROP TABLE agent_request_events;"):e.exec("ALTER TABLE agent_request_events RENAME TO legacy_agent_request_events_archive"))}(e)}},{version:15,name:"ui_turns_on_work_requests",up:e=>{e.exec(`
+        ALTER TABLE work_requests ADD COLUMN executor TEXT NOT NULL DEFAULT 'dispatcher'
+          CHECK (executor IN ('dispatcher', 'ui_message', 'ui_continuation'));
+        CREATE INDEX idx_work_requests_executor ON work_requests(executor, state, created_at);
+
+        -- Delegation accounting for one user message in one UI thread:
+        -- handoffs (depth), delegated turns (budget), Stop, and the
+        -- caller frames a delegate's reply returns to. One row per
+        -- (conversation, user message); a later user message starts a
+        -- fresh row.
+        CREATE TABLE delegation_chains (
+          conversation_id TEXT NOT NULL,
+          user_message_id TEXT NOT NULL,
+          handoffs INTEGER NOT NULL DEFAULT 0 CHECK (handoffs >= 0),
+          turns INTEGER NOT NULL DEFAULT 0 CHECK (turns >= 0),
+          stopped INTEGER NOT NULL DEFAULT 0 CHECK (stopped IN (0, 1)),
+          frames TEXT NOT NULL DEFAULT '[]',
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          PRIMARY KEY (conversation_id, user_message_id),
+          FOREIGN KEY (conversation_id) REFERENCES conversations(id)
+        );
+      `),function(e){let t=t=>!!e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get(t);if(!t("processing_queue"))return;let n=new Set(e.prepare("PRAGMA table_info(processing_queue)").all().map(e=>e.name)).has("work_request_id")?"q.work_request_id":"NULL",i=e.prepare(`
+    SELECT q.id, q.conversation_id, q.bot_id, q.status, ${n} AS work_request_id, q.created_at, q.started_at, q.completed_at
+    FROM processing_queue q
+    JOIN conversations c ON c.id = q.conversation_id
+    JOIN bots b ON b.id = q.bot_id
+    ORDER BY q.created_at ASC, q.rowid ASC
+  `).all(),r=e.prepare("SELECT * FROM work_requests WHERE id = ?"),a=e.prepare(`
+    UPDATE work_requests SET state = ?, state_reason = ?, version = version + 1, updated_at = ?,
+      error_code = ?, error_message = ?, terminal_at = ?, executor = 'ui_message'
+    WHERE id = ?
+  `),o=e.prepare(`
+    INSERT INTO engine_events (id, request_id, sequence, attempt_id, type, data, created_at)
+    SELECT ?, ?, COALESCE(MAX(sequence), 0) + 1, NULL, ?, ?, ? FROM engine_events WHERE request_id = ?
+  `),_=(e,t,n,i)=>o.run((0,s.randomUUID)(),e,t,JSON.stringify(n),i,e),d=e.prepare("SELECT id FROM messages WHERE conversation_id = ? AND created_at <= ? ORDER BY created_at DESC, rowid DESC LIMIT 1"),E=e.prepare(`
+    INSERT INTO work_requests (
+      id, source_conversation_id, source_event_id, requester_kind, requester_id, target_agent_id,
+      intent, execution_kind, tool_profile, parent_request_id, root_request_id, wake_event_id, depth,
+      idempotency_key, request_hash, policy_snapshot, state, version, created_at, updated_at,
+      wake_depth, root_principal_kind, root_principal_id, executor
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, 'conversation', 'readonly', NULL, ?, NULL, 0, ?, ?, ?, 'queued', 0, ?, ?, 0, ?, ?, 'ui_continuation')
+  `),u=eP(!1),c=0;for(let t of i){if(t.work_request_id){let n=r.get(t.work_request_id);if(!n||"queued"!==n.state)continue;let i=t.started_at??t.created_at,s=Math.max(t.completed_at??i,i);if("pending"===t.status)e.prepare("UPDATE work_requests SET executor = 'ui_message' WHERE id = ?").run(n.id);else if("completed"===t.status||"failed"===t.status)a.run("running",null,i,null,null,null,n.id),_(n.id,"state_changed",{from:"queued",to:"running",reason:null,legacy_queue_id:t.id},i),a.run(t.status,"legacy_queue_turn",s,"failed"===t.status?"ui_turn_failed":null,"failed"===t.status?"The UI turn failed in the retired processing queue.":null,s,n.id),_(n.id,"state_changed",{from:"running",to:t.status,reason:"legacy_queue_turn",legacy_queue_id:t.id},s);else{let e=Math.max(Date.now(),i);a.run("running",null,i,null,null,null,n.id),_(n.id,"state_changed",{from:"queued",to:"running",reason:null,legacy_queue_id:t.id},i),a.run("failed",e$,e,e$,ez,e,n.id),_(n.id,"state_changed",{from:"running",to:"failed",reason:e$,error_code:e$,legacy_queue_id:t.id},e)}c++;continue}if("pending"!==t.status)continue;let n=(0,s.randomUUID)(),i=d.get(t.conversation_id,t.created_at)?.id??t.conversation_id,o={source:"legacy_processing_queue",legacy_queue_id:t.id},l=eB({sourceConversationId:t.conversation_id,sourceEventId:i,targetAgentId:t.bot_id,intent:"turn",executionKind:"conversation",toolProfile:"readonly",policy:{...o,execution_policy:u}});E.run(n,t.conversation_id,i,eY.kind,eY.id,t.bot_id,"turn",n,`legacy-queue:${t.id}`,l,JSON.stringify({...o,execution_policy:u,tool_profile:"readonly"}),t.created_at,t.created_at,eY.kind,eY.id),_(n,"accepted",{state:"queued",execution_kind:"conversation",tool_profile:"readonly"},t.created_at),_(n,"backfilled",{legacy_queue_id:t.id},t.created_at),c++}c+=e.prepare(`
+    UPDATE work_requests SET executor = 'ui_message'
+    WHERE state = 'queued' AND executor = 'dispatcher' AND legacy_agent_request_id IS NULL
+      AND parent_request_id IS NULL AND wake_event_id IS NULL
+      AND (
+        (json_extract(policy_snapshot, '$.source') = 'conversation_intake' AND json_extract(policy_snapshot, '$.surface') = 'ui')
+        OR EXISTS (
+          SELECT 1 FROM conversation_intakes i, json_each(i.work_request_ids) r
+          WHERE i.surface = 'ui' AND r.value = work_requests.id
+        )
+      )
+  `).run().changes,t("legacy_processing_queue_archive")?e.exec("INSERT INTO legacy_processing_queue_archive SELECT * FROM processing_queue; DROP TABLE processing_queue;"):e.exec("ALTER TABLE processing_queue RENAME TO legacy_processing_queue_archive")}(e)}},{version:16,name:"session_exchanges",up:e=>{let t=ef.flatMap(e=>eh[e].map(t=>`'${e}>${t}'`)).join(", "),n=ef.map(e=>`'${e}'`).join(", "),i=ev.map(e=>`'${e}'`).join(", ");e.exec(`
+        -- One row per owner-requested exchange against one selected Session
+        -- Binding. It names Botmancers rows only (binding, Work Requests,
+        -- Attempts, messages): never a provider session id or credential.
+        -- Hop Work Requests run through the dispatcher; the exchange state
+        -- advances from their durable outcome.
+        CREATE TABLE session_exchanges (
+          id TEXT PRIMARY KEY,
+          requester_kind TEXT NOT NULL CHECK (requester_kind IN ('person', 'bot', 'service')),
+          requester_id TEXT NOT NULL,
+          idempotency_key TEXT NOT NULL CHECK (length(idempotency_key) > 0),
+          request_hash TEXT NOT NULL,
+          mode TEXT NOT NULL CHECK (mode IN ('ask', 'continue')),
+          origin_conversation_id TEXT NOT NULL,
+          source_agent_id TEXT NOT NULL,
+          source_binding_id TEXT NOT NULL,
+          destination_agent_id TEXT,
+          destination_conversation_id TEXT,
+          destination_binding_id TEXT,
+          instruction TEXT NOT NULL CHECK (length(instruction) BETWEEN 1 AND ${ew.instructionChars}),
+          state TEXT NOT NULL CHECK (state IN (${n})),
+          source_request_id TEXT,
+          source_attempt_id TEXT,
+          destination_request_id TEXT,
+          destination_attempt_id TEXT,
+          answer_message_id TEXT,
+          packet TEXT CHECK (packet IS NULL OR length(packet) <= ${ew.packetChars}),
+          failure_code TEXT,
+          failure_message TEXT,
+          cancel_requested_at INTEGER,
+          cancel_requested_by TEXT,
+          cancel_reason TEXT,
+          version INTEGER NOT NULL DEFAULT 0,
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          terminal_at INTEGER,
+          UNIQUE (requester_kind, requester_id, idempotency_key),
+          CHECK ((state IN (${i})) = (terminal_at IS NOT NULL)),
+          CHECK (state <> 'failed' OR failure_code IS NOT NULL),
+          CHECK ((mode = 'continue') = (destination_agent_id IS NOT NULL AND destination_conversation_id IS NOT NULL)),
+          CHECK (destination_agent_id IS NULL OR destination_agent_id <> source_agent_id),
+          CHECK (mode = 'continue' OR (packet IS NULL AND destination_request_id IS NULL AND destination_binding_id IS NULL)),
+          CHECK (mode = 'ask' OR answer_message_id IS NULL),
+          CHECK (state = 'queued' OR state = 'failed' OR state = 'cancelled' OR source_request_id IS NOT NULL),
+          CHECK (state <> 'delivering' OR (packet IS NOT NULL AND destination_request_id IS NOT NULL)),
+          FOREIGN KEY (origin_conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (source_agent_id) REFERENCES bots(id),
+          FOREIGN KEY (source_binding_id) REFERENCES session_bindings(id),
+          FOREIGN KEY (destination_agent_id) REFERENCES bots(id),
+          FOREIGN KEY (destination_conversation_id) REFERENCES conversations(id),
+          FOREIGN KEY (destination_binding_id) REFERENCES session_bindings(id),
+          FOREIGN KEY (source_request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (source_attempt_id) REFERENCES work_attempts(id),
+          FOREIGN KEY (destination_request_id) REFERENCES work_requests(id),
+          FOREIGN KEY (destination_attempt_id) REFERENCES work_attempts(id),
+          FOREIGN KEY (answer_message_id) REFERENCES messages(id)
+        );
+        CREATE INDEX idx_session_exchanges_open ON session_exchanges(created_at) WHERE terminal_at IS NULL;
+        CREATE INDEX idx_session_exchanges_binding ON session_exchanges(source_binding_id);
+        CREATE UNIQUE INDEX idx_session_exchanges_source_request ON session_exchanges(source_request_id) WHERE source_request_id IS NOT NULL;
+        CREATE UNIQUE INDEX idx_session_exchanges_destination_request ON session_exchanges(destination_request_id) WHERE destination_request_id IS NOT NULL;
+
+        CREATE TABLE session_exchange_events (
+          id TEXT PRIMARY KEY,
+          exchange_id TEXT NOT NULL,
+          sequence INTEGER NOT NULL CHECK (sequence >= 1),
+          type TEXT NOT NULL CHECK (length(type) > 0),
+          data TEXT,
+          created_at INTEGER NOT NULL,
+          UNIQUE (exchange_id, sequence),
+          FOREIGN KEY (exchange_id) REFERENCES session_exchanges(id)
+        );
+
+        CREATE TRIGGER trg_session_exchanges_fk BEFORE INSERT ON session_exchanges
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.origin_conversation_id')
+            WHERE NOT EXISTS (SELECT 1 FROM conversations WHERE id = NEW.origin_conversation_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.source_agent_id')
+            WHERE NOT EXISTS (SELECT 1 FROM bots WHERE id = NEW.source_agent_id);
+          SELECT RAISE(ABORT, 'session exchange source binding does not belong to its source agent')
+            WHERE NOT EXISTS (SELECT 1 FROM session_bindings WHERE id = NEW.source_binding_id AND agent_id = NEW.source_agent_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.destination_agent_id')
+            WHERE NEW.destination_agent_id IS NOT NULL AND NOT EXISTS (SELECT 1 FROM bots WHERE id = NEW.destination_agent_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.destination_conversation_id')
+            WHERE NEW.destination_conversation_id IS NOT NULL AND NOT EXISTS (SELECT 1 FROM conversations WHERE id = NEW.destination_conversation_id);
+          SELECT RAISE(ABORT, 'a session exchange starts queued')
+            WHERE NEW.state <> 'queued';
+        END;
+
+        -- Identity, target, and instruction are fixed at creation.
+        CREATE TRIGGER trg_session_exchanges_immutable BEFORE UPDATE OF
+          id, requester_kind, requester_id, idempotency_key, request_hash, mode, origin_conversation_id,
+          source_agent_id, source_binding_id, destination_agent_id, destination_conversation_id, instruction, created_at
+        ON session_exchanges
+        BEGIN
+          SELECT RAISE(ABORT, 'session_exchanges identity and target are immutable');
+        END;
+
+        CREATE TRIGGER trg_session_exchanges_transition BEFORE UPDATE OF state ON session_exchanges
+        WHEN NEW.state <> OLD.state
+        BEGIN
+          SELECT RAISE(ABORT, 'invalid session_exchanges state transition')
+            WHERE (OLD.state || '>' || NEW.state) NOT IN (${t})
+              OR (OLD.mode = 'ask' AND NEW.state = 'delivering')
+              OR (OLD.mode = 'continue' AND OLD.state = 'extracting' AND NEW.state = 'completed');
+        END;
+
+        CREATE TRIGGER trg_session_exchanges_terminal BEFORE UPDATE ON session_exchanges
+        WHEN OLD.state IN (${i})
+        BEGIN
+          SELECT RAISE(ABORT, 'terminal session_exchanges are immutable');
+        END;
+
+        -- Causal references, the packet, and the cancellation intent are
+        -- recorded once; a set reference must name an existing row.
+        CREATE TRIGGER trg_session_exchanges_set_once BEFORE UPDATE ON session_exchanges
+        BEGIN
+          SELECT RAISE(ABORT, 'session_exchanges references are set once')
+            WHERE (OLD.source_request_id IS NOT NULL AND NEW.source_request_id IS NOT OLD.source_request_id)
+              OR (OLD.source_attempt_id IS NOT NULL AND NEW.source_attempt_id IS NOT OLD.source_attempt_id)
+              OR (OLD.destination_request_id IS NOT NULL AND NEW.destination_request_id IS NOT OLD.destination_request_id)
+              OR (OLD.destination_attempt_id IS NOT NULL AND NEW.destination_attempt_id IS NOT OLD.destination_attempt_id)
+              OR (OLD.destination_binding_id IS NOT NULL AND NEW.destination_binding_id IS NOT OLD.destination_binding_id)
+              OR (OLD.answer_message_id IS NOT NULL AND NEW.answer_message_id IS NOT OLD.answer_message_id)
+              OR (OLD.packet IS NOT NULL AND NEW.packet IS NOT OLD.packet)
+              OR (OLD.cancel_requested_at IS NOT NULL AND (NEW.cancel_requested_at IS NOT OLD.cancel_requested_at
+                OR NEW.cancel_requested_by IS NOT OLD.cancel_requested_by OR NEW.cancel_reason IS NOT OLD.cancel_reason));
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.source_request_id')
+            WHERE NEW.source_request_id IS NOT NULL AND NOT EXISTS (SELECT 1 FROM work_requests WHERE id = NEW.source_request_id AND target_agent_id = NEW.source_agent_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.source_attempt_id')
+            WHERE NEW.source_attempt_id IS NOT NULL AND NOT EXISTS (SELECT 1 FROM work_attempts WHERE id = NEW.source_attempt_id AND request_id = NEW.source_request_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.destination_request_id')
+            WHERE NEW.destination_request_id IS NOT NULL AND NOT EXISTS (
+              SELECT 1 FROM work_requests WHERE id = NEW.destination_request_id AND target_agent_id = NEW.destination_agent_id
+                AND source_conversation_id = NEW.destination_conversation_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.destination_attempt_id')
+            WHERE NEW.destination_attempt_id IS NOT NULL AND NOT EXISTS (SELECT 1 FROM work_attempts WHERE id = NEW.destination_attempt_id AND request_id = NEW.destination_request_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.destination_binding_id')
+            WHERE NEW.destination_binding_id IS NOT NULL AND NOT EXISTS (
+              SELECT 1 FROM session_bindings WHERE id = NEW.destination_binding_id AND agent_id = NEW.destination_agent_id
+                AND request_id = NEW.destination_request_id AND id <> NEW.source_binding_id);
+          -- The answer is the source Agent's message in the origin
+          -- conversation, produced by the source hop request.
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.answer_message_id')
+            WHERE NEW.answer_message_id IS NOT NULL AND NOT EXISTS (
+              SELECT 1 FROM messages WHERE id = NEW.answer_message_id AND conversation_id = NEW.origin_conversation_id
+                AND sender_type = 'bot' AND sender_id = NEW.source_agent_id
+                AND NEW.source_request_id IS NOT NULL AND request_id = NEW.source_request_id);
+        END;
+
+        CREATE TRIGGER trg_session_exchange_events_fk BEFORE INSERT ON session_exchange_events
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchange_events.exchange_id')
+            WHERE NOT EXISTS (SELECT 1 FROM session_exchanges WHERE id = NEW.exchange_id);
+        END;
+        CREATE TRIGGER trg_session_exchange_events_append_only BEFORE UPDATE ON session_exchange_events
+        BEGIN
+          SELECT RAISE(ABORT, 'session_exchange_events are append-only');
+        END;
+        -- Removed only with their exchange, by the aggregate cleanup
+        -- (deleteSessionExchanges), under the same purge authority as
+        -- engine events.
+        CREATE TRIGGER trg_session_exchange_events_no_delete BEFORE DELETE ON session_exchange_events
+        BEGIN
+          SELECT RAISE(ABORT, 'session_exchange_events are append-only')
+            WHERE NOT engine_event_purge_authorized(OLD.exchange_id);
+        END;
+        CREATE TRIGGER trg_session_exchanges_restrict BEFORE DELETE ON session_exchanges
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchange_events.exchange_id')
+            WHERE EXISTS (SELECT 1 FROM session_exchange_events WHERE exchange_id = OLD.id);
+        END;
+
+        -- Foreign keys (delete side): RESTRICT, as for the engine tables.
+        CREATE TRIGGER trg_conversations_exchange_restrict BEFORE DELETE ON conversations
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.conversation')
+            WHERE EXISTS (SELECT 1 FROM session_exchanges WHERE origin_conversation_id = OLD.id OR destination_conversation_id = OLD.id);
+        END;
+        CREATE TRIGGER trg_bots_exchange_restrict BEFORE DELETE ON bots
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.agent')
+            WHERE EXISTS (SELECT 1 FROM session_exchanges WHERE source_agent_id = OLD.id OR destination_agent_id = OLD.id);
+        END;
+        CREATE TRIGGER trg_session_bindings_exchange_restrict BEFORE DELETE ON session_bindings
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.binding')
+            WHERE EXISTS (SELECT 1 FROM session_exchanges WHERE source_binding_id = OLD.id OR destination_binding_id = OLD.id);
+        END;
+        CREATE TRIGGER trg_work_requests_exchange_restrict BEFORE DELETE ON work_requests
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.request')
+            WHERE EXISTS (SELECT 1 FROM session_exchanges WHERE source_request_id = OLD.id OR destination_request_id = OLD.id);
+        END;
+        CREATE TRIGGER trg_messages_exchange_restrict BEFORE DELETE ON messages
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.answer_message_id')
+            WHERE EXISTS (SELECT 1 FROM session_exchanges WHERE answer_message_id = OLD.id);
+        END;
+        CREATE TRIGGER trg_work_attempts_exchange_restrict BEFORE DELETE ON work_attempts
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: session_exchanges.attempt')
+            WHERE EXISTS (SELECT 1 FROM session_exchanges WHERE source_attempt_id = OLD.id OR destination_attempt_id = OLD.id);
+        END;
+      `)}},{version:17,name:"provider_sessions",up:e=>{var t;e.exec(`
+        -- One row per native runtime session Botmancers knows, under a
+        -- stable Botmancers reference (id). provider_session_id is private:
+        -- only the owner-only local debug disclosure ever returns it. A row
+        -- linked to a Session Binding uses the binding's id as its id.
+        -- availability/lifecycle/resumable/busy are independent provider
+        -- facts; resumable NULL means the provider was never asked.
+        CREATE TABLE provider_sessions (
+          id TEXT PRIMARY KEY,
+          agent_id TEXT NOT NULL,
+          runtime_connection_id TEXT NOT NULL,
+          provider_kind TEXT NOT NULL,
+          provider_session_id TEXT NOT NULL,
+          binding_id TEXT UNIQUE,
+          origin TEXT NOT NULL CHECK (origin IN ('binding', 'discovered', 'started')),
+          title TEXT,
+          workspace TEXT,
+          provider_created_at INTEGER,
+          provider_updated_at INTEGER,
+          availability TEXT NOT NULL DEFAULT 'available' CHECK (availability IN ('available', 'missing')),
+          lifecycle TEXT NOT NULL DEFAULT 'open' CHECK (lifecycle IN ('open', 'archived')),
+          resumable INTEGER CHECK (resumable IS NULL OR resumable IN (0, 1)),
+          busy INTEGER NOT NULL DEFAULT 0 CHECK (busy IN (0, 1)),
+          capabilities TEXT,
+          last_synced_at INTEGER,
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          CHECK (origin <> 'binding' OR binding_id = id),
+          FOREIGN KEY (agent_id) REFERENCES bots(id),
+          FOREIGN KEY (binding_id) REFERENCES session_bindings(id)
+        );
+        -- Repeated discovery is idempotent: at most one unlinked row per
+        -- (Agent, connection, provider session). The same provider id on
+        -- another connection or Agent is another session.
+        CREATE UNIQUE INDEX idx_provider_sessions_native
+          ON provider_sessions(agent_id, runtime_connection_id, provider_session_id) WHERE binding_id IS NULL;
+        CREATE INDEX idx_provider_sessions_lookup
+          ON provider_sessions(agent_id, runtime_connection_id, provider_session_id);
+
+        -- One row per provider turn Botmancers started (start or send),
+        -- keyed by the requester's idempotency key. provider_turn_id is
+        -- private.
+        CREATE TABLE provider_session_turns (
+          id TEXT PRIMARY KEY,
+          session_ref TEXT NOT NULL,
+          agent_id TEXT NOT NULL,
+          kind TEXT NOT NULL CHECK (kind IN ('start', 'send')),
+          authority TEXT NOT NULL CHECK (authority IN ('read_only', 'workspace_write')),
+          requester_kind TEXT NOT NULL,
+          requester_id TEXT NOT NULL,
+          idempotency_key TEXT NOT NULL,
+          request_hash TEXT NOT NULL,
+          provider_turn_id TEXT NOT NULL,
+          state TEXT NOT NULL CHECK (state IN ('running', 'completed', 'failed', 'cancelled')),
+          output TEXT,
+          failure_code TEXT,
+          correlation TEXT NOT NULL,
+          created_at INTEGER NOT NULL,
+          finished_at INTEGER,
+          UNIQUE (agent_id, requester_kind, requester_id, idempotency_key),
+          FOREIGN KEY (session_ref) REFERENCES provider_sessions(id)
+        );
+        CREATE INDEX idx_provider_session_turns_session ON provider_session_turns(session_ref, created_at);
+
+        -- Append-only audit of registry syncs and provider turns. Names
+        -- Botmancers rows only, never a provider id.
+        CREATE TABLE provider_session_events (
+          id TEXT PRIMARY KEY,
+          agent_id TEXT NOT NULL,
+          session_ref TEXT,
+          turn_id TEXT,
+          type TEXT NOT NULL,
+          detail TEXT NOT NULL,
+          created_at INTEGER NOT NULL
+        );
+        CREATE INDEX idx_provider_session_events_agent ON provider_session_events(agent_id, created_at);
+
+        CREATE TRIGGER trg_provider_sessions_fk BEFORE INSERT ON provider_sessions
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: provider_sessions.agent_id')
+            WHERE NOT EXISTS (SELECT 1 FROM bots WHERE id = NEW.agent_id);
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: provider_sessions.binding_id')
+            WHERE NEW.binding_id IS NOT NULL
+              AND NOT EXISTS (SELECT 1 FROM session_bindings WHERE id = NEW.binding_id AND agent_id = NEW.agent_id);
+        END;
+        CREATE TRIGGER trg_provider_sessions_identity BEFORE UPDATE OF
+          id, agent_id, runtime_connection_id, provider_kind, provider_session_id, origin, created_at
+        ON provider_sessions
+        BEGIN
+          SELECT RAISE(ABORT, 'provider_sessions identity is immutable');
+        END;
+        CREATE TRIGGER trg_provider_session_turns_fk BEFORE INSERT ON provider_session_turns
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: provider_session_turns.session_ref')
+            WHERE NOT EXISTS (SELECT 1 FROM provider_sessions WHERE id = NEW.session_ref AND agent_id = NEW.agent_id);
+        END;
+        CREATE TRIGGER trg_provider_session_events_append_only BEFORE UPDATE ON provider_session_events
+        BEGIN
+          SELECT RAISE(ABORT, 'provider_session_events are append-only');
+        END;
+        -- Delete side: the Agent and binding delete paths
+        -- (deleteEngineRecordsForAgent / deleteEngineRecords) remove or
+        -- unlink registry rows first; the catalog joins bots, so a raw
+        -- delete never surfaces an orphan.
+        CREATE TRIGGER trg_provider_sessions_restrict BEFORE DELETE ON provider_sessions
+        BEGIN
+          SELECT RAISE(ABORT, 'FOREIGN KEY constraint failed: provider_session_turns.session_ref')
+            WHERE EXISTS (SELECT 1 FROM provider_session_turns WHERE session_ref = OLD.id);
+        END;
+      `),(t=e).prepare(`
+    INSERT INTO provider_sessions (
+      id, agent_id, runtime_connection_id, provider_kind, provider_session_id, binding_id, origin,
+      availability, lifecycle, resumable, busy, created_at, updated_at
+    )
+    SELECT b.id, b.agent_id, ${eX(t)}, b.adapter, b.external_session_id, b.id, 'binding',
+      'available', 'open', NULL, 0, b.created_at, COALESCE(b.released_at, b.created_at)
+    FROM session_bindings b
+    JOIN bots bot ON bot.id = b.agent_id
+    WHERE NOT EXISTS (SELECT 1 FROM provider_sessions p WHERE p.binding_id = b.id)
+    ORDER BY b.created_at ASC, b.id ASC
+  `).run()}},{version:18,name:"usage_samples",up:e=>{e.exec(`
+        -- One row per Attempt or provider turn that reached a runtime,
+        -- keyed by sample_key (attempt:<id> or turn:<id>), so a replayed
+        -- terminal result, a reconciled Attempt after a restart, or a late
+        -- result never adds a second row. Each metric is nullable: NULL is
+        -- not reported, 0 is an explicit provider zero. breakdown holds
+        -- whitelisted numeric counters only. Pre-existing Attempts get no
+        -- row: their usage was never reported.
+        CREATE TABLE usage_samples (
+          id TEXT PRIMARY KEY,
+          sample_key TEXT NOT NULL UNIQUE,
+          agent_id TEXT NOT NULL,
+          attempt_id TEXT,
+          session_ref TEXT,
+          turn_id TEXT,
+          provider TEXT NOT NULL,
+          source TEXT NOT NULL CHECK (source IN ('codex.turn_completed', 'result', 'normalized', 'none')),
+          input_tokens INTEGER CHECK (input_tokens IS NULL OR input_tokens >= 0),
+          output_tokens INTEGER CHECK (output_tokens IS NULL OR output_tokens >= 0),
+          cost_usd REAL CHECK (cost_usd IS NULL OR cost_usd >= 0),
+          breakdown TEXT,
+          observed_at INTEGER NOT NULL,
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          CHECK (attempt_id IS NOT NULL OR turn_id IS NOT NULL)
+        );
+        CREATE INDEX idx_usage_samples_attempt ON usage_samples(attempt_id);
+        CREATE INDEX idx_usage_samples_session ON usage_samples(session_ref);
+        CREATE INDEX idx_usage_samples_agent ON usage_samples(agent_id);
+      `)}},{version:19,name:"provider_turn_usage",up:e=>{e.exec(`
+        ALTER TABLE provider_session_turns ADD COLUMN input_tokens INTEGER;
+        ALTER TABLE provider_session_turns ADD COLUMN output_tokens INTEGER;
+        ALTER TABLE provider_session_turns ADD COLUMN total_cost_usd REAL;
+      `)}},{version:20,name:"session_pins",up:e=>{e.exec(`
+        -- One row per pin. session_ref never changes after insert: a switch
+        -- detaches this pin and creates another. action/authority record
+        -- what the caller asked for (ask = read_only, resume =
+        -- workspace_write after explicit approval); resolution how the
+        -- session was chosen (exact, or for a registered-Agent message the
+        -- home session, the newest eligible one, or a newly started one).
+        CREATE TABLE session_pins (
+          id TEXT PRIMARY KEY,
+          requester_kind TEXT NOT NULL CHECK (requester_kind IN ('person', 'bot', 'service')),
+          requester_id TEXT NOT NULL,
+          idempotency_key TEXT NOT NULL,
+          request_hash TEXT NOT NULL,
+          agent_id TEXT NOT NULL,
+          session_ref TEXT NOT NULL,
+          action TEXT NOT NULL CHECK (action IN ('ask', 'resume')),
+          authority TEXT NOT NULL CHECK (authority IN ('read_only', 'workspace_write')),
+          resolution TEXT NOT NULL CHECK (resolution IN ('exact', 'home', 'newest', 'started')),
+          route TEXT NOT NULL CHECK (route IN ('provider', 'engine')),
+          conversation_id TEXT NOT NULL,
+          approved_at INTEGER,
+          state TEXT NOT NULL CHECK (state IN ('attached', 'detached')),
+          detach_reason TEXT CHECK (detach_reason IS NULL OR detach_reason IN ('detached', 'switched')),
+          replaced_by TEXT,
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          detached_at INTEGER,
+          CHECK (authority = CASE action WHEN 'ask' THEN 'read_only' ELSE 'workspace_write' END),
+          CHECK (action = 'ask' OR approved_at IS NOT NULL),
+          CHECK ((state = 'attached') = (detached_at IS NULL)),
+          UNIQUE (requester_kind, requester_id, idempotency_key)
+        );
+        CREATE INDEX idx_session_pins_session ON session_pins(session_ref);
+        CREATE INDEX idx_session_pins_agent ON session_pins(agent_id);
+        CREATE TRIGGER trg_session_pins_identity BEFORE UPDATE OF
+          id, requester_kind, requester_id, idempotency_key, request_hash, agent_id, session_ref, action, authority, resolution, route, created_at
+        ON session_pins
+        BEGIN
+          SELECT RAISE(ABORT, 'session_pins identity is immutable');
+        END;
+
+        -- One row per turn sent through a pin, in order. Exactly one of
+        -- exchange_id (engine route: an Ask exchange on the binding) and
+        -- provider_turn_ref (provider route) is set.
+        CREATE TABLE session_pin_turns (
+          id TEXT PRIMARY KEY,
+          pin_id TEXT NOT NULL,
+          seq INTEGER NOT NULL,
+          requester_kind TEXT NOT NULL,
+          requester_id TEXT NOT NULL,
+          idempotency_key TEXT NOT NULL,
+          request_hash TEXT NOT NULL,
+          content TEXT NOT NULL,
+          exchange_id TEXT,
+          provider_turn_ref TEXT,
+          question_message_id TEXT,
+          answer_message_id TEXT,
+          created_at INTEGER NOT NULL,
+          CHECK ((exchange_id IS NULL) <> (provider_turn_ref IS NULL)),
+          UNIQUE (pin_id, seq),
+          UNIQUE (requester_kind, requester_id, idempotency_key),
+          FOREIGN KEY (pin_id) REFERENCES session_pins(id)
+        );
+
+        -- Append-only audit of every pin decision: created (with the
+        -- resolution), turn sent, turn refused (with the stable code; the
+        -- target never changes), detached, switched.
+        CREATE TABLE session_pin_events (
+          id TEXT PRIMARY KEY,
+          pin_id TEXT NOT NULL,
+          sequence INTEGER NOT NULL,
+          type TEXT NOT NULL,
+          data TEXT NOT NULL,
+          created_at INTEGER NOT NULL,
+          UNIQUE (pin_id, sequence)
+        );
+        CREATE TRIGGER trg_session_pin_events_append_only BEFORE UPDATE ON session_pin_events
+        BEGIN
+          SELECT RAISE(ABORT, 'session_pin_events are append-only');
+        END;
+      `)}}];function eX(e){return e.prepare("PRAGMA table_info(bots)").all().some(e=>"runtime_connection_id"===e.name)?"COALESCE(bot.runtime_connection_id, 'rc-local-' || b.adapter)":"'rc-local-' || b.adapter"}let ex=new WeakMap;function eG(e){let t=ex.get(e);if(!t){t=new Set,ex.set(e,t);let n=t;e.function("engine_event_purge_authorized",{deterministic:!1},e=>"string"==typeof e&&n.has(e)?1:0)}return t}function eH(e,t={}){eG(e),e.exec(`
+    CREATE TABLE IF NOT EXISTS schema_migrations (
+      version INTEGER PRIMARY KEY,
+      name TEXT NOT NULL,
+      applied_at INTEGER NOT NULL
+    );
+  `);let n=e.prepare("SELECT 1 FROM schema_migrations WHERE version = ?"),i=e.prepare("INSERT INTO schema_migrations (version, name, applied_at) VALUES (?, ?, ?)");for(let r of eW){if(void 0!==t.through&&r.version>t.through)return;e.transaction(()=>{n.get(r.version)||(r.up(e),i.run(r.version,r.name,Date.now()))}).immediate()}}function eB(e){return eJ(JSON.stringify([e.sourceConversationId,e.sourceEventId,e.targetAgentId,e.intent,e.executionKind,e.toolProfile,e.parentRequestId??null,e.wakeEventId??null,e.policy??null]))}eW[eW.length-1].version;let eM="legacy_interrupted",eK="Accepted before NOT-465 by the retired agent_requests dispatcher; it never reached a terminal state.",eY=Object.freeze({kind:"service",id:"botmancers-ui-turns"});function eP(e){let t=en(e?{entryPoint:"wake",executionKind:"conversation",wakeSyntax:"legacy"}:{entryPoint:"ui",executionKind:"conversation"});if(!t.ok)throw new eD("invalid_input",t.reason);return t.policy}let e$="ui_turn_interrupted",ez="The UI turn was interrupted before it finished; it is not run again.";function ej(e){return"string"==typeof e&&e.trim().length>0}function eJ(e){return(0,s.createHash)("sha256").update(e).digest("hex")}function eQ(e){return null==e?null:JSON.stringify(e)}function eV(e){eG(e);let t=e.prepare("SELECT * FROM work_requests WHERE id = ?"),n=e.prepare("SELECT * FROM work_requests WHERE requester_kind = ? AND requester_id = ? AND idempotency_key = ?"),i=e.prepare("SELECT * FROM work_attempts WHERE id = ?"),r=e.prepare(`
+    INSERT INTO engine_events (id, request_id, sequence, attempt_id, type, data, created_at)
+    SELECT ?, ?, COALESCE(MAX(sequence), 0) + 1, ?, ?, ?, ? FROM engine_events WHERE request_id = ?
+  `),a=e.prepare("SELECT * FROM engine_events WHERE id = ?"),o=e.prepare("SELECT * FROM session_bindings WHERE id = ?");function _(e){let n=t.get(e);if(!n)throw new eD("not_found",`No work request ${e}.`);return n}function d(e){let t=i.get(e);if(!t)throw new eD("not_found",`No attempt ${e}.`);return t}function E(e,t,n,i,o){let _=(0,s.randomUUID)();return r.run(_,e,i,t,eQ(n),o,e),a.get(_)}let u={transaction:t=>e.transaction(t).immediate(),createOrGetWorkRequest(i){if(!ej(i.sourceConversationId))throw new eD("invalid_input","sourceConversationId is required.");if(!ej(i.sourceEventId))throw new eD("invalid_input","sourceEventId is required.");if(!i.requester||!["person","bot","service"].includes(i.requester.kind)||!ej(i.requester.id))throw new eD("invalid_input","A requester principal is required.");if(!ej(i.targetAgentId))throw new eD("invalid_input","targetAgentId is required.");if("string"!=typeof i.intent)throw new eD("invalid_input","intent is required.");if(!ee(i.executionKind))throw new eD("invalid_input","Unknown execution kind.");if(Z[i.executionKind]!==i.toolProfile)throw new eD("invalid_input",`Execution kind ${i.executionKind} requires the ${Z[i.executionKind]} tool profile.`);if(i.policy&&Object.prototype.hasOwnProperty.call(i.policy,"execution_policy"))throw new eD("invalid_input","The execution policy is passed as executionPolicy, never inside policy.");if(void 0!==i.executionPolicy){let e=er(i.executionPolicy);if(!e.ok)throw new eD("invalid_input",e.reason);if(e.policy.execution_kind!==i.executionKind||e.policy.tool_profile!==i.toolProfile)throw new eD("invalid_input","The execution policy does not match the requested execution kind and tool profile.")}if(!ej(i.idempotencyKey))throw new eD("invalid_input","idempotencyKey is required.");if(void 0!==i.executor&&!eb.includes(i.executor))throw new eD("invalid_input","Unknown request executor.");if(i.initialState&&"queued"!==i.initialState&&"blocked"!==i.initialState)throw new eD("invalid_input","A work request starts queued or blocked.");if(void 0!==i.deadlineAt&&null!==i.deadlineAt&&!Number.isSafeInteger(i.deadlineAt))throw new eD("invalid_input","deadlineAt must be an epoch millisecond integer.");if(void 0!==i.retryPolicy){let e=e_(i.retryPolicy);if(!e.ok)throw new eD("invalid_input",e.reason)}let r=i.executionPolicy?{...i.policy??{},execution_policy:i.executionPolicy}:i.policy,a=eB({...i,policy:r});return e.transaction(()=>{let o=n.get(i.requester.kind,i.requester.id,i.idempotencyKey);if(o){if(o.request_hash!==a)throw new eD("idempotency_conflict","The idempotency key was already used with a different request.");return{request:o,created:!1}}let d=i.now??Date.now(),c=(0,s.randomUUID)(),l=c,T=0,p=0,N=i.rootPrincipal??i.requester;if(i.parentRequestId){let e=t.get(i.parentRequestId);if(!e)throw new eD("not_found","Parent work request not found.");l=e.root_request_id,T=e.depth+1,p=i.wakeEventId?e.wake_depth+1:e.wake_depth,N={kind:e.root_principal_kind??"unknown",id:e.root_principal_id??"unknown"}}void 0!==i.wakeDepth&&(p=i.wakeDepth);let R=i.initialState??"queued",m=JSON.stringify({...r??{},...i.safetySnapshot??{},tool_profile:i.toolProfile}),L=eo(),g=i.retryPolicy??L.retryPolicy,O=void 0!==i.deadlineAt?i.deadlineAt:null===L.deadlineMs?null:d+L.deadlineMs;return e.prepare(`
+          INSERT INTO work_requests (
+            id, source_conversation_id, source_event_id, requester_kind, requester_id, target_agent_id,
+            intent, execution_kind, tool_profile, parent_request_id, root_request_id, wake_event_id, depth,
+            idempotency_key, request_hash, policy_snapshot, state, state_reason, version, created_at, updated_at,
+            deadline_at, retry_policy, wake_depth, root_principal_kind, root_principal_id, executor
+          ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?, ?, ?, ?, ?, ?, ?)
+        `).run(c,i.sourceConversationId,i.sourceEventId,i.requester.kind,i.requester.id,i.targetAgentId,i.intent,i.executionKind,i.toolProfile,i.parentRequestId??null,l,i.wakeEventId??null,T,i.idempotencyKey,a,m,R,i.stateReason??null,d,d,O,JSON.stringify(g),p,N.kind,N.id,i.executor??"dispatcher"),E(c,"accepted",{state:R,execution_kind:i.executionKind,tool_profile:i.toolProfile,deadline_at:O,retry_policy:g},null,d),i.executionPolicy&&E(c,"policy_selected",{...i.executionPolicy},null,d),"blocked"===R&&E(c,"state_changed",{from:"queued",to:"blocked",reason:i.stateReason??null},null,d),i.safety&&u.recordSafetyDecision(c,{...i.safety,now:i.safety.now??d}),{request:_(c),created:!0}}).immediate()},getWorkRequest:e=>t.get(e),recordSafetyDecision(t,n){if(!["human_owner","api_principal","agent_principal","engine"].includes(n.principalType))throw new eD("invalid_input","A categorized principal is required.");if(!ej(n.principal?.kind)||!ej(n.principal?.id))throw new eD("invalid_input","A principal is required.");if(!["allowed","blocked","denied"].includes(n.decision))throw new eD("invalid_input","Unknown safety decision.");if("allowed"===n.decision&&!ej(n.grantRule))throw new eD("invalid_input","An allowed decision names its grant rule.");return e.transaction(()=>{let i=_(t),r=(0,s.randomUUID)();return e.prepare(`
+          INSERT INTO wake_safety_decisions (
+            id, request_id, sequence, wake_id, principal_type, principal_kind, principal_id, target_agent_id, execution_kind,
+            decision, reason_code, grant_rule, grant_id, policy_snapshot, created_at
+          ) SELECT ?, ?, COALESCE(MAX(sequence), 0) + 1, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ? FROM wake_safety_decisions WHERE request_id = ?
+        `).run(r,t,n.wakeId??null,n.principalType,n.principal.kind,n.principal.id,i.target_agent_id,i.execution_kind,n.decision,n.reasonCode??null,n.grantRule??null,n.grantId??null,JSON.stringify(n.snapshot),n.now??Date.now(),t),e.prepare("SELECT * FROM wake_safety_decisions WHERE id = ?").get(r)}).immediate()},listSafetyDecisions:t=>e.prepare("SELECT * FROM wake_safety_decisions WHERE request_id = ? ORDER BY sequence ASC").all(t),latestSafetyDecision:t=>e.prepare("SELECT * FROM wake_safety_decisions WHERE request_id = ? ORDER BY sequence DESC LIMIT 1").get(t),transitionWorkRequest(t,n){if(!ey[n.from]?.includes(n.to))throw new eD("invalid_transition",`Cannot move a work request from ${n.from} to ${n.to}.`);let i=eq.includes(n.to);return e.transaction(()=>{let r=_(t),s=n.now??Date.now();if(1!==e.prepare(`
+          UPDATE work_requests SET
+            state = ?, state_reason = ?, version = version + 1, updated_at = ?,
+            result = ?, error_code = ?, error_message = ?, terminal_at = ?
+          WHERE id = ? AND state = ? AND (? IS NULL OR version = ?)
+        `).run(n.to,n.reason??null,s,i?eQ(n.result):null,i?n.errorCode??null:null,i?n.errorMessage??null:null,i?s:null,t,n.from,n.expectedVersion??null,n.expectedVersion??null).changes)throw new eD("stale_state",`Work request ${t} is ${r.state} at version ${r.version}, not ${n.from}${void 0===n.expectedVersion?"":` at version ${n.expectedVersion}`}.`);return E(t,"state_changed",{...n.data??{},from:n.from,to:n.to,reason:n.reason??null,...n.errorCode?{error_code:n.errorCode}:{}},null,s),i&&null===r.legacy_agent_request_id&&"dispatcher"===r.executor&&e.prepare("INSERT OR IGNORE INTO terminal_followups (request_id, created_at) VALUES (?, ?)").run(t,s),_(t)}).immediate()},reblockWorkRequest:(t,n)=>e.transaction(()=>{let i=n.now??Date.now();if(1!==e.prepare("UPDATE work_requests SET state_reason = ?, version = version + 1, updated_at = ? WHERE id = ? AND state = 'blocked'").run(n.reason,i,t).changes)throw new eD("stale_state",`Work request ${t} is not blocked.`);return E(t,n.type,n.data??{},null,i),_(t)}).immediate(),appendEvent(t,n){if(!ej(n.type))throw new eD("invalid_input","Event type is required.");return e.transaction(()=>{if(_(t),n.attemptId&&d(n.attemptId).request_id!==t)throw new eD("invalid_input","The attempt belongs to another request.");return E(t,n.type,n.data,n.attemptId??null,n.now??Date.now())}).immediate()},listEvents:t=>e.prepare("SELECT * FROM engine_events WHERE request_id = ? ORDER BY sequence ASC").all(t),createAttempt(t,n){if("launch"!==n.kind&&"resume"!==n.kind)throw new eD("invalid_input","Unknown attempt kind.");if(!ej(n.adapter))throw new eD("invalid_input","adapter is required.");if("resume"===n.kind&&!n.resumedSessionBindingId)throw new eD("invalid_input","A resume attempt names the session binding it resumes.");if("launch"===n.kind&&n.resumedSessionBindingId)throw new eD("invalid_input","A launch attempt does not resume a session binding.");let i="string"==typeof n.launchSnapshot?n.launchSnapshot:JSON.stringify(n.launchSnapshot);if("string"!=typeof i||0===i.length)throw new eD("invalid_input","A launch snapshot is required.");return e.transaction(()=>{let r=_(t);if("running"!==r.state)throw new eD("attempt_conflict",`Attempts start only on running requests (request is ${r.state}).`);if(n.toolProfile!==r.tool_profile)throw new eD("invalid_input",`The attempt tool profile must be ${r.tool_profile}.`);if(e.prepare("SELECT id FROM work_attempts WHERE request_id = ? AND finished_at IS NULL").get(t))throw new eD("attempt_conflict","The request already has an open attempt.");if(n.resumedSessionBindingId){let e=o.get(n.resumedSessionBindingId);if(!e)throw new eD("not_found","Session binding not found.");if(null!==e.released_at)throw new eD("session_mismatch","The session binding was released.");if(e.agent_id!==r.target_agent_id||e.adapter!==n.adapter)throw new eD("session_mismatch","The session binding belongs to another Agent or adapter.");if(null!==e.conversation_id&&e.conversation_id!==r.source_conversation_id)throw new eD("session_mismatch","The session binding belongs to another conversation.");if(null!==e.request_id&&_(e.request_id).root_request_id!==r.root_request_id)throw new eD("session_mismatch","The session binding belongs to an unrelated work request.")}let a=n.now??Date.now(),u=(0,s.randomUUID)(),c=e.prepare("SELECT COALESCE(MAX(attempt_number), 0) + 1 AS n FROM work_attempts WHERE request_id = ?").get(t);return e.prepare(`
+          INSERT INTO work_attempts (
+            id, request_id, attempt_number, kind, adapter, tool_profile, launch_snapshot, launch_snapshot_hash,
+            resumed_session_binding_id, external_run_id, external_session_id, started_at
+          ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        `).run(u,t,c.n,n.kind,n.adapter,n.toolProfile,i,eJ(i),n.resumedSessionBindingId??null,n.externalRunId??null,n.externalSessionId??null,a),E(t,"attempt_started",{attempt_number:c.n,kind:n.kind,adapter:n.adapter},u,a),d(u)}).immediate()},recordAttemptExternalIds:(t,n)=>e.transaction(()=>{let i=d(t);if(null!==i.finished_at)throw new eD("attempt_conflict","The attempt is already finished.");return e.prepare("UPDATE work_attempts SET external_run_id = ?, external_session_id = ? WHERE id = ?").run(void 0===n.externalRunId?i.external_run_id:n.externalRunId,void 0===n.externalSessionId?i.external_session_id:n.externalSessionId,t),d(t)}).immediate(),finishAttempt(t,n){if(!["succeeded","failed","cancelled","interrupted","timed_out"].includes(n.outcome))throw new eD("invalid_input","Unknown attempt outcome.");return e.transaction(()=>{let i=d(t);if(null!==i.finished_at)throw new eD("attempt_conflict","The attempt is already finished.");let r=n.now??Date.now();return e.prepare(`
+          UPDATE work_attempts SET outcome = ?, output = ?, error_category = ?, error_message = ?, artifacts = ?,
+            external_run_id = ?, external_session_id = ?, finished_at = ?
+          WHERE id = ? AND finished_at IS NULL
+        `).run(n.outcome,n.output??null,n.errorCategory??null,n.errorMessage??null,JSON.stringify(n.artifacts??[]),void 0===n.externalRunId?i.external_run_id:n.externalRunId,void 0===n.externalSessionId?i.external_session_id:n.externalSessionId,r,t),E(i.request_id,"attempt_finished",{attempt_number:i.attempt_number,outcome:n.outcome,error_category:n.errorCategory??null},t,r),d(t)}).immediate()},recordAttemptUsage(t,n){let i=d(t);eA(e,t,{agentId:_(i.request_id).target_agent_id,provider:i.adapter,usage:n.usage,observedAt:n.observedAt,now:n.now})},getAttempt:e=>i.get(e),listAttempts:t=>e.prepare("SELECT * FROM work_attempts WHERE request_id = ? ORDER BY attempt_number ASC").all(t),bindSession(t){if(!ej(t.agentId))throw new eD("invalid_input","agentId is required.");if(!ej(t.adapter))throw new eD("invalid_input","adapter is required.");if(!ej(t.externalSessionId))throw new eD("invalid_input","externalSessionId is required.");if(!t.conversationId&&!t.requestId)throw new eD("invalid_input","A session binding is scoped to a conversation or work request.");return e.transaction(()=>{let n=t.now??Date.now();if(!e.prepare("SELECT 1 FROM bots WHERE id = ?").get(t.agentId))throw new eD("not_found",`No agent ${t.agentId}.`);if(t.requestId){let e=_(t.requestId);if(e.target_agent_id!==t.agentId)throw new eD("session_mismatch","The work request targets another Agent.");if(t.conversationId&&e.source_conversation_id!==t.conversationId)throw new eD("session_mismatch","The work request belongs to another conversation.")}if(t.sourceAttemptId){let e=d(t.sourceAttemptId),n=_(e.request_id);if(e.adapter!==t.adapter||n.target_agent_id!==t.agentId)throw new eD("session_mismatch","The source attempt ran another Agent or adapter.");if(t.requestId&&e.request_id!==t.requestId)throw new eD("session_mismatch","The source attempt belongs to another work request.");if(t.conversationId&&n.source_conversation_id!==t.conversationId)throw new eD("session_mismatch","The source attempt belongs to another conversation.")}e.prepare(`
+          UPDATE session_bindings SET released_at = ?
+          WHERE agent_id = ? AND adapter = ? AND IFNULL(conversation_id, '') = ? AND IFNULL(request_id, '') = ?
+            AND released_at IS NULL
+        `).run(n,t.agentId,t.adapter,t.conversationId??"",t.requestId??"");let i=(0,s.randomUUID)();return e.prepare(`
+          INSERT INTO session_bindings (id, agent_id, adapter, conversation_id, request_id, external_session_id, source_attempt_id, created_at)
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+        `).run(i,t.agentId,t.adapter,t.conversationId??null,t.requestId??null,t.externalSessionId,t.sourceAttemptId??null,n),e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'provider_sessions'").get()&&e.prepare(`
+      INSERT INTO provider_sessions (
+        id, agent_id, runtime_connection_id, provider_kind, provider_session_id, binding_id, origin,
+        availability, lifecycle, resumable, busy, created_at, updated_at
+      )
+      SELECT b.id, b.agent_id, ${eX(e)}, b.adapter, b.external_session_id, b.id, 'binding',
+        'available', 'open', NULL, 0, b.created_at, b.created_at
+      FROM session_bindings b JOIN bots bot ON bot.id = b.agent_id
+      WHERE b.id = ?
+    `).run(i),t.requestId&&E(t.requestId,"session_bound",{binding_id:i,adapter:t.adapter},t.sourceAttemptId??null,n),o.get(i)}).immediate()},getActiveSessionBinding:t=>e.prepare(`
+        SELECT * FROM session_bindings
+        WHERE agent_id = ? AND adapter = ? AND IFNULL(conversation_id, '') = ? AND IFNULL(request_id, '') = ?
+          AND released_at IS NULL
+      `).get(t.agentId,t.adapter,t.conversationId??"",t.requestId??"")};return u}function eZ(e,t){let n=(t,...n)=>e.prepare(t).all(...n).map(e=>e.id),i=new Set(n(t.requests,t.arg)),r=new Set,s=new Set(n(t.bindings,t.arg)),a=new Set,o=(e,t)=>{let n=!1;for(let i of t)e.has(i)||(e.add(i),n=!0);return n},_=e=>JSON.stringify([...e]),d="(SELECT value FROM json_each(?))";for(;;){let e=o(r,n(`SELECT id FROM session_exchanges WHERE (${t.exchanges})
+         OR source_request_id IN ${d} OR destination_request_id IN ${d} OR source_attempt_id IN ${d}
+         OR destination_attempt_id IN ${d} OR source_binding_id IN ${d} OR destination_binding_id IN ${d}`,t.arg,t.arg,_(i),_(i),_(a),_(a),_(s),_(s))),E=o(i,n(`SELECT source_request_id AS id FROM session_exchanges WHERE id IN ${d} AND source_request_id IS NOT NULL
+       UNION SELECT destination_request_id AS id FROM session_exchanges WHERE id IN ${d} AND destination_request_id IS NOT NULL`,_(r),_(r))),u=o(i,n(`SELECT id FROM work_requests WHERE parent_request_id IN ${d} OR root_request_id IN ${d}`,_(i),_(i))),c=o(i,n(`SELECT request_id AS id FROM work_attempts WHERE id IN ${d}`,_(a))),l=o(a,n(`SELECT id FROM work_attempts WHERE request_id IN ${d} OR resumed_session_binding_id IN ${d}`,_(i),_(s))),T=o(s,n(`SELECT id FROM session_bindings WHERE request_id IN ${d} OR source_attempt_id IN ${d}`,_(i),_(a)));if(!e&&!E&&!u&&!c&&!l&&!T)break}(function(e,t,...n){let i=e.prepare(`SELECT id FROM session_exchanges WHERE ${t}`).all(...n).map(e=>e.id);if(0===i.length)return;let r=eG(e);for(let e of i)r.add(e);try{e.prepare("DELETE FROM session_exchange_events WHERE exchange_id IN (SELECT value FROM json_each(?))").run(JSON.stringify(i))}finally{r.clear()}e.prepare("DELETE FROM session_exchanges WHERE id IN (SELECT value FROM json_each(?))").run(JSON.stringify(i))})(e,`id IN ${d}`,_(r)),e.prepare(`DELETE FROM conversation_events WHERE request_id IN ${d}`).run(_(i)),e.prepare(`DELETE FROM finalizations WHERE implementation_request_id IN ${d} OR review_request_id IN ${d} OR decision_request_id IN ${d}`).run(_(i),_(i),_(i)),e.prepare(`DELETE FROM candidate_manifests WHERE request_id IN ${d}`).run(_(i)),e.prepare(`DELETE FROM attempt_finalization_baselines WHERE request_id IN ${d}`).run(_(i)),e.prepare(`DELETE FROM conversation_projection_cursors WHERE request_id IN ${d}`).run(_(i)),e.prepare(`DELETE FROM wake_safety_decisions WHERE request_id IN ${d}`).run(_(i)),e.prepare(`DELETE FROM dispatch_leases WHERE request_id IN ${d}`).run(_(i)),e.prepare(`DELETE FROM attempt_launch_intents WHERE request_id IN ${d}`).run(_(i)),e.prepare(`DELETE FROM dispatch_attention WHERE request_id IN ${d}`).run(_(i));let E=eG(e);for(let e of i)E.add(e);try{e.prepare(`DELETE FROM engine_events WHERE request_id IN ${d}`).run(_(i))}finally{E.clear()}for(e0(e,`origin = 'binding' AND binding_id IN ${d}`,_(s)),e.prepare(`UPDATE provider_sessions SET binding_id = NULL WHERE binding_id IN ${d}`).run(_(s)),e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'usage_samples'").get()&&e.prepare(`DELETE FROM usage_samples WHERE attempt_id IN ${d}`).run(_(a));a.size>0||s.size>0;){let t=n(`SELECT id FROM session_bindings WHERE id IN ${d}
+         AND NOT EXISTS (SELECT 1 FROM work_attempts a WHERE a.resumed_session_binding_id = session_bindings.id)`,_(s));for(let n of t)e.prepare("DELETE FROM session_bindings WHERE id = ?").run(n),s.delete(n);let i=n(`SELECT id FROM work_attempts WHERE id IN ${d}
+         AND NOT EXISTS (SELECT 1 FROM session_bindings b WHERE b.source_attempt_id = work_attempts.id)`,_(a));for(let t of i)e.prepare("DELETE FROM work_attempts WHERE id = ?").run(t),a.delete(t);if(0===t.length&&0===i.length)throw Error("Engine records could not be removed: unexpected attempt/binding reference cycle.")}for(let t of(e.prepare(`DELETE FROM conversation_events WHERE request_id IS NULL AND wake_id IN (SELECT id FROM wakes WHERE work_request_id IN ${d} OR parent_request_id IN ${d} OR root_request_id IN ${d})`).run(_(i),_(i),_(i)),e.prepare(`DELETE FROM wakes WHERE work_request_id IN ${d} OR parent_request_id IN ${d} OR root_request_id IN ${d}`).run(_(i),_(i),_(i)),e.prepare(`DELETE FROM terminal_followups WHERE request_id IN ${d}`).run(_(i)),n(`SELECT id FROM work_requests WHERE id IN ${d} ORDER BY depth DESC`,_(i))))e.prepare("DELETE FROM work_requests WHERE id = ?").run(t)}function e0(e,t,...n){if(!e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'provider_sessions'").get())return;let i=JSON.stringify(e.prepare(`SELECT id FROM provider_sessions WHERE ${t}`).all(...n).map(e=>e.id));e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'usage_samples'").get()&&e.prepare("DELETE FROM usage_samples WHERE session_ref IN (SELECT value FROM json_each(?))").run(i),e.prepare("DELETE FROM provider_session_events WHERE session_ref IN (SELECT value FROM json_each(?))").run(i),e.prepare("DELETE FROM provider_session_turns WHERE session_ref IN (SELECT value FROM json_each(?))").run(i),e.prepare("DELETE FROM provider_sessions WHERE id IN (SELECT value FROM json_each(?))").run(i)}function e1(e,t,...n){if(!e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'session_pins'").get())return;let i=JSON.stringify(e.prepare(`SELECT id FROM session_pins WHERE ${t}`).all(...n).map(e=>e.id));e.prepare("DELETE FROM session_pin_events WHERE pin_id IN (SELECT value FROM json_each(?))").run(i),e.prepare("DELETE FROM session_pin_turns WHERE pin_id IN (SELECT value FROM json_each(?))").run(i),e.prepare("DELETE FROM session_pins WHERE id IN (SELECT value FROM json_each(?))").run(i)}function e2(e,t){e.prepare("DELETE FROM conversation_intakes WHERE conversation_id = ?").run(t),e.prepare("DELETE FROM delegation_chains WHERE conversation_id = ?").run(t),e.prepare("DELETE FROM conversation_events WHERE conversation_id = ? AND request_id IS NULL").run(t),e.prepare("DELETE FROM wakes WHERE source_conversation_id = ?").run(t),e1(e,"conversation_id = ?",t),eZ(e,{requests:"SELECT id FROM work_requests WHERE source_conversation_id = ?",bindings:"SELECT id FROM session_bindings WHERE conversation_id = ?",exchanges:"origin_conversation_id = ? OR destination_conversation_id = ?",arg:t})}function e6(e,t){e.prepare(`DELETE FROM conversation_events WHERE request_id IS NULL AND wake_id IN (
+    SELECT id FROM wakes WHERE target_agent_id = ? OR (requester_agent_id = ? AND work_request_id IS NULL))`).run(t,t),e.prepare("DELETE FROM wakes WHERE target_agent_id = ? OR (requester_agent_id = ? AND work_request_id IS NULL)").run(t,t),e.prepare("DELETE FROM wake_grants WHERE caller_agent_id = ? OR target_agent_id = ?").run(t,t),e1(e,"agent_id = ?",t),e0(e,"agent_id = ?",t),e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'usage_samples'").get()&&e.prepare("DELETE FROM usage_samples WHERE agent_id = ?").run(t),e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'provider_session_events'").get()&&e.prepare("DELETE FROM provider_session_events WHERE agent_id = ?").run(t),eZ(e,{requests:"SELECT id FROM work_requests WHERE target_agent_id = ?",bindings:"SELECT id FROM session_bindings WHERE agent_id = ?",exchanges:"source_agent_id = ? OR destination_agent_id = ?",arg:t})}function e4(e){if(!e)return{};try{let t=JSON.parse(e);return t&&"object"==typeof t&&!Array.isArray(t)?t:{}}catch{return{}}}function e3(e){return"string"==typeof e&&e.length>0?e:null}function e9(e,t){return t?`${e}: ${t}`:e}function e5(e,t,n,i){let r="grant_required"===t,s=r?"needs your approval for edit work":n;return{kind:"wake_blocked",attemptId:null,text:s?`Wake blocked: ${e} — ${s}`:`Wake blocked: ${e}`,data:{...i,target_name:e,reason_code:t,reason:n,actions:r?["allow","deny"]:[]}}}e.s(["EXCHANGE_LIMITS",0,ew,"EXCHANGE_STATES",0,ef,"EXCHANGE_TERMINAL_STATES",0,ev,"EXCHANGE_TRANSITIONS",0,eh,"EngineStoreError",0,eD,"TERMINAL_STATES",0,eq,"UI_TURN_INTERRUPTED",0,e$,"UI_TURN_INTERRUPTED_MESSAGE",0,ez,"UI_TURN_REQUESTER",0,eY,"createEngineStore",0,eV,"deleteEngineRecordsForAgent",0,e6,"deleteEngineRecordsForConversation",0,e2,"migrateEngineSchema",0,eH,"uiTurnExecutionPolicy",0,eP],35613);let e8=/^[A-Za-z0-9][A-Za-z0-9._:@-]{0,127}$/,e7=/^[a-z][a-z0-9_.:-]{0,63}$/;function te(e){return null==e||""===e?null:e8.test(e)?e:"[invalid]"}function tt(e,t){return e&&e7.test(e)?e:t}let tn="agent_name_conflict";function ti(e){return String(e??"").trim()}function tr(e){return ti(e).normalize("NFC").toLowerCase().normalize("NFC")}function ts(e){return`An Agent named "${ti(e)}" already exists. Agent names must be unique, ignoring case and surrounding spaces.`}class ta extends Error{code=tn;requestedName;conflictingAgentId;constructor(e,t){super(ts(e)),this.name="AgentNameConflictError",this.requestedName=ti(e),this.conflictingAgentId=t}}function to(e){let t=[...e].sort((e,t)=>e.created_at-t.created_at||(e.id<t.id?-1:+(e.id>t.id))),n=new Map,i=[],r=[];for(let e of t){let t=tr(e.name);if(n.has(t)){i.push(e);continue}n.set(t,e.id),e.name_key!==t&&r.push({id:e.id,name:e.name,name_key:t})}let s=[];for(let e of i){let t=tr(e.name),i=ti(e.name)||"Agent",a=2;for(;n.has(tr(`${i}-${a}`));)a++;let o=`${i}-${a}`,_=tr(o);n.set(_,e.id),r.push({id:e.id,name:o,name_key:_}),s.push({bot_id:e.id,previous_name:e.name,new_name:o,name_key:t,kept_bot_id:n.get(t)})}return{updates:r,renames:s}}e.s(["AgentNameConflictError",0,ta,"agentDisplayName",0,ti,"agentNameConflictBody",0,function(e,t="name"){return{error:e.message,code:tn,field:t,name:e.requestedName,conflicting_agent_id:e.conflictingAgentId}},"agentNameConflictMessage",0,ts,"agentNameKey",0,tr,"planNameMigration",0,to],30098);let t_=(0,e.i(52036).dbPath)();":memory:"!==t_&&i.default.mkdirSync(r.default.dirname(r.default.resolve(t_)),{recursive:!0});let td=new n.default(t_);td.pragma("journal_mode = WAL"),td.exec(`
+  CREATE TABLE IF NOT EXISTS bots (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    title TEXT NOT NULL,
+    description TEXT NOT NULL,
+    avatar TEXT,
+    created_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS groups (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    created_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS group_members (
+    group_id TEXT NOT NULL,
+    bot_id TEXT NOT NULL,
+    PRIMARY KEY (group_id, bot_id),
+    FOREIGN KEY (group_id) REFERENCES groups(id),
+    FOREIGN KEY (bot_id) REFERENCES bots(id)
+  );
+
+  CREATE TABLE IF NOT EXISTS conversations (
+    id TEXT PRIMARY KEY,
+    type TEXT NOT NULL,
+    bot_id TEXT,
+    group_id TEXT,
+    created_at INTEGER NOT NULL,
+    FOREIGN KEY (bot_id) REFERENCES bots(id),
+    FOREIGN KEY (group_id) REFERENCES groups(id)
+  );
+
+  CREATE TABLE IF NOT EXISTS messages (
+    id TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    sender_type TEXT NOT NULL,
+    sender_id TEXT,
+    content TEXT NOT NULL,
+    created_at INTEGER NOT NULL,
+    FOREIGN KEY (conversation_id) REFERENCES conversations(id)
+  );
+
+  CREATE TABLE IF NOT EXISTS launch_snapshots (
+    id TEXT PRIMARY KEY,
+    bot_id TEXT NOT NULL,
+    created_at INTEGER NOT NULL,
+    hash TEXT NOT NULL,
+    snapshot TEXT NOT NULL,
+    FOREIGN KEY (bot_id) REFERENCES bots(id)
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_messages_conversation ON messages(conversation_id, created_at);
+  CREATE INDEX IF NOT EXISTS idx_snapshots_bot ON launch_snapshots(bot_id, created_at DESC);
+
+  CREATE TABLE IF NOT EXISTS mcp_servers (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    command TEXT NOT NULL,
+    args TEXT NOT NULL,
+    created_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS draft_actions (
+    message_id TEXT PRIMARY KEY,
+    status TEXT NOT NULL,
+    recipient TEXT,
+    acted_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS approvals (
+    conversation_id TEXT NOT NULL,
+    code TEXT NOT NULL,
+    message_id TEXT,
+    status TEXT NOT NULL DEFAULT 'pending',
+    created_at INTEGER NOT NULL,
+    resolved_at INTEGER,
+    PRIMARY KEY (conversation_id, code)
+  );
+
+  CREATE TABLE IF NOT EXISTS memories (
+    id TEXT PRIMARY KEY,
+    bot_id TEXT NOT NULL,
+    fact TEXT NOT NULL,
+    created_at INTEGER NOT NULL,
+    FOREIGN KEY (bot_id) REFERENCES bots(id)
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_memories_bot ON memories(bot_id, created_at);
+
+  CREATE TABLE IF NOT EXISTS one_shots (
+    id TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    bot_id TEXT NOT NULL,
+    due_at INTEGER NOT NULL,
+    fired INTEGER NOT NULL DEFAULT 0,
+    created_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS routines (
+    id TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    bot_id TEXT NOT NULL,
+    word TEXT NOT NULL,
+    next_due_at INTEGER NOT NULL,
+    every_ms INTEGER NOT NULL,
+    created_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS pending_questions (
+    id TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    bot_id TEXT NOT NULL,
+    question TEXT NOT NULL,
+    task_message_id TEXT,
+    task_content TEXT,
+    question_message_id TEXT,
+    answer_message_id TEXT,
+    answer TEXT,
+    status TEXT NOT NULL DEFAULT 'asked',
+    created_at INTEGER NOT NULL,
+    resolved_at INTEGER,
+    FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+    FOREIGN KEY (bot_id) REFERENCES bots(id)
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_pending_questions_conversation
+    ON pending_questions(conversation_id, status, created_at);
+
+  CREATE TABLE IF NOT EXISTS approval_requests (
+    id TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    bot_id TEXT,
+    code TEXT NOT NULL,
+    action_type TEXT,
+    action_args TEXT,
+    message_id TEXT,
+    status TEXT NOT NULL DEFAULT 'pending',
+    result TEXT,
+    created_at INTEGER NOT NULL,
+    resolved_at INTEGER,
+    FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+    FOREIGN KEY (bot_id) REFERENCES bots(id)
+  );
+
+  CREATE UNIQUE INDEX IF NOT EXISTS idx_approval_requests_conversation_code
+    ON approval_requests(conversation_id, code);
+  CREATE INDEX IF NOT EXISTS idx_approval_requests_conversation
+    ON approval_requests(conversation_id, status, created_at);
+`);let tE=["#C6F54A","#F0A05A","#E85D75","#C9A0FF","#F2E36B"],tu="9e363764-e0d5-4fff-8ebd-ccbc46ba0ba5",tc="5fbe32c2-79cb-452e-9d9b-f8c9eb63b99b",tl=td.prepare("PRAGMA table_info(bots)").all();tl.some(e=>"color"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN color TEXT"),tl.some(e=>"pinned"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN pinned INTEGER NOT NULL DEFAULT 0"),tl.some(e=>"last_seen"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN last_seen INTEGER"),tl.some(e=>"unread"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN unread INTEGER NOT NULL DEFAULT 0"),tl.some(e=>"hidden"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN hidden INTEGER NOT NULL DEFAULT 0"),tl.some(e=>"source_provider"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN source_provider TEXT"),tl.some(e=>"template_id"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN template_id TEXT"),tl.some(e=>"template_url"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN template_url TEXT"),tl.some(e=>"import_schema_version"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN import_schema_version TEXT"),tl.some(e=>"import_operation_id"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN import_operation_id TEXT"),tl.some(e=>"import_timestamp"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN import_timestamp INTEGER"),tl.some(e=>"hermes_profile"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN hermes_profile TEXT"),tl.some(e=>"persistent_runtime"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN persistent_runtime TEXT NOT NULL DEFAULT 'hermes'"),tl.some(e=>"coding_runtime"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN coding_runtime TEXT"),tl.some(e=>"deck_name"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN deck_name TEXT"),tl.some(e=>"working_directory"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN working_directory TEXT"),tl.some(e=>"runtime"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN runtime TEXT"),tl.some(e=>"agent_client"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN agent_client TEXT"),tl.some(e=>"deck_id"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN deck_id TEXT"),tl.some(e=>"needs_deck_reselection"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN needs_deck_reselection INTEGER NOT NULL DEFAULT 0"),tl.some(e=>"agent"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN agent TEXT"),tl.some(e=>"needs_deck_selection"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN needs_deck_selection INTEGER NOT NULL DEFAULT 0");{let e=td.prepare("SELECT id, agent, runtime, agent_client, persistent_runtime, coding_runtime, deck_id, deck_name, working_directory, needs_deck_reselection, needs_deck_selection FROM bots WHERE agent IS NULL").all(),t=td.prepare("UPDATE bots SET agent = ?, deck_id = ?, deck_name = ?, working_directory = ?, needs_deck_selection = ? WHERE id = ?");td.transaction(e=>{for(let n of e){let e=(0,a.migrateLegacyAgentFields)(n);t.run(e.agent,e.deck_id,e.deck_name,e.working_directory,+!!e.needs_deck_selection,n.id)}})(e)}for(let[e,t]of(tl.some(e=>"avatar_color"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN avatar_color TEXT"),tl.some(e=>"avatar_eyes"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN avatar_eyes TEXT"),tl.some(e=>"avatar_hands"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN avatar_hands TEXT"),tl.some(e=>"avatar_accessory"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN avatar_accessory TEXT"),td.exec(`
+  CREATE TABLE IF NOT EXISTS runtime_connections (
+    id TEXT PRIMARY KEY,
+    provider TEXT NOT NULL,
+    label TEXT NOT NULL,
+    host TEXT NOT NULL,
+    created_at INTEGER NOT NULL
+  );
+`),[["runtime_connection_id","TEXT"],["launch_profile","TEXT"],["session_scope_kind","TEXT"],["session_scope_items","TEXT"],["default_workspace","TEXT"],["policy_mode","TEXT"],["allow_new_sessions","INTEGER"],["allow_resume_with_edits","INTEGER"],["home_session_id","TEXT"]]))tl.some(t=>t.name===e)||td.exec(`ALTER TABLE bots ADD COLUMN ${e} ${t}`);function tT(e,t=Date.now()){let n=v(e);return td.prepare("INSERT OR IGNORE INTO runtime_connections (id, provider, label, host, created_at) VALUES (?, ?, ?, ?, ?)").run(n,e,h(e),E,t),n}for(let e of a.AGENTS)tT(e,0);td.transaction(()=>{let e=td.prepare("SELECT id, agent, deck_id, working_directory, needs_deck_selection, created_at FROM bots WHERE runtime_connection_id IS NULL").all(),t=td.prepare(`UPDATE bots SET runtime_connection_id = ?, launch_profile = ?, session_scope_kind = ?, session_scope_items = ?,
+       policy_mode = ?, allow_new_sessions = ?, allow_resume_with_edits = ? WHERE id = ?`);for(let n of e){let e=X(n);tT(e.provider,n.created_at),t.run(e.runtime_connection_id,e.launch_profile,e.session_scope_kind,e.session_scope_items,e.policy_mode,e.allow_new_sessions,e.allow_resume_with_edits,n.id)}})(),tl.some(e=>"name_key"===e.name)||td.exec("ALTER TABLE bots ADD COLUMN name_key TEXT"),td.exec(`
+  CREATE TABLE IF NOT EXISTS agent_name_migrations (
+    id TEXT PRIMARY KEY,
+    bot_id TEXT NOT NULL,
+    previous_name TEXT NOT NULL,
+    new_name TEXT NOT NULL,
+    name_key TEXT NOT NULL,
+    kept_bot_id TEXT NOT NULL,
+    reason TEXT NOT NULL,
+    created_at INTEGER NOT NULL
+  );
+`),td.transaction(()=>{let e=to(td.prepare("SELECT id, name, created_at, name_key FROM bots").all());if(0===e.updates.length)return;let t=td.prepare("UPDATE bots SET name_key = NULL WHERE id = ?");for(let n of e.updates)t.run(n.id);let n=td.prepare("UPDATE bots SET name = ?, name_key = ? WHERE id = ?");for(let t of e.updates)n.run(t.name,t.name_key,t.id);let i=td.prepare("INSERT INTO agent_name_migrations (id, bot_id, previous_name, new_name, name_key, kept_bot_id, reason, created_at) VALUES (?, ?, ?, ?, ?, ?, 'duplicate_name', ?)"),r=Date.now();for(let t of e.renames)i.run((0,s.randomUUID)(),t.bot_id,t.previous_name,t.new_name,t.name_key,t.kept_bot_id,r),console.warn(`[botmancers] Agent ${t.bot_id} renamed "${t.previous_name}" -> "${t.new_name}": name already used by Agent ${t.kept_bot_id}.`)})(),td.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_bots_name_key ON bots(name_key)"),td.exec(`
+  CREATE UNIQUE INDEX IF NOT EXISTS idx_bots_import_operation
+  ON bots(import_operation_id) WHERE import_operation_id IS NOT NULL
+`),td.prepare("UPDATE bots SET color = ? WHERE id = ?").run(tE[0],tu),td.prepare("UPDATE bots SET color = ? WHERE id = ?").run(tE[1],tc);let tp=td.prepare("SELECT id FROM bots WHERE id NOT IN (?, ?) ORDER BY created_at ASC").all(tu,tc),tN=td.prepare("UPDATE bots SET color = ? WHERE id = ?");function tR(e,t){let n=ti(e),i=tr(n),r=td.prepare("SELECT id FROM bots WHERE name_key = ?").get(i);if(r&&r.id!==t)throw new ta(n,r.id);return{name:n,name_key:i}}function tm(e,t){try{return t()}catch(t){if(t instanceof Error&&/UNIQUE constraint failed: bots\.name_key/.test(t.message)){let t=td.prepare("SELECT id FROM bots WHERE name_key = ?").get(tr(e));throw new ta(e,t?.id??null)}throw t}}function tL(){return tE[td.prepare("SELECT COUNT(*) AS n FROM bots").get().n%tE.length]}tp.forEach((e,t)=>{tN.run(tE[(t+2)%tE.length],e.id)});let tg=td.prepare("PRAGMA table_info(messages)").all();tg.some(e=>"handoff_targets"===e.name)||td.exec("ALTER TABLE messages ADD COLUMN handoff_targets TEXT"),td.prepare("PRAGMA table_info(groups)").all().some(e=>"owner_bot_id"===e.name)||td.exec("ALTER TABLE groups ADD COLUMN owner_bot_id TEXT"),td.prepare("PRAGMA table_info(launch_snapshots)").all().some(e=>"transport"===e.name)||td.exec("ALTER TABLE launch_snapshots ADD COLUMN transport TEXT NOT NULL DEFAULT 'hermes-gateway'");let tO=td.prepare("PRAGMA table_info(conversations)").all();tO.some(e=>"origin_kind"===e.name)||td.exec("ALTER TABLE conversations ADD COLUMN origin_kind TEXT"),tO.some(e=>"origin_id"===e.name)||td.exec("ALTER TABLE conversations ADD COLUMN origin_id TEXT"),tg.some(e=>"sender_kind"===e.name)||td.exec("ALTER TABLE messages ADD COLUMN sender_kind TEXT"),tg.some(e=>"request_id"===e.name)||td.exec("ALTER TABLE messages ADD COLUMN request_id TEXT"),td.exec(`
+  CREATE TABLE IF NOT EXISTS conversation_participants (
+    conversation_id TEXT NOT NULL,
+    participant_kind TEXT NOT NULL,
+    participant_id TEXT NOT NULL,
+    joined_at INTEGER NOT NULL,
+    PRIMARY KEY (conversation_id, participant_kind, participant_id),
+    FOREIGN KEY (conversation_id) REFERENCES conversations(id)
+  );
+`),eH(td);let tI=eV(td),tA=function(e){let t=e.prepare("SELECT * FROM work_requests WHERE id = ?"),n=e.prepare("SELECT * FROM work_attempts WHERE id = ?"),i=e.prepare("SELECT * FROM engine_events WHERE request_id = ? ORDER BY sequence ASC"),r=e.prepare("SELECT sequence FROM conversation_projection_cursors WHERE request_id = ?"),s=e.prepare(`
+    INSERT INTO conversation_projection_cursors (request_id, sequence) VALUES (?, ?)
+    ON CONFLICT (request_id) DO UPDATE SET sequence = excluded.sequence WHERE excluded.sequence > sequence
+  `),a=e.prepare(`
+    INSERT OR IGNORE INTO conversation_events (
+      id, conversation_id, engine_event_id, part, request_id, request_sequence, attempt_id, wake_id,
+      kind, state, text, data, sort_at, request_created_at, created_at
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+  `);function o(e){return e?n.get(e):void 0}function _(n){return e.transaction(()=>{let e=t.get(n);if(!e)return 0;let _=r.get(n)?.sequence??0,d=i.all(n),E=d.length>0?d[d.length-1].sequence:0;if(E<=_)return 0;let u={state:null,lastFinished:null},c=0,l=0;for(let t of d){c=Math.max(c,t.created_at);let n={...u};!function(e,t){let n=e4(t.data);"accepted"===t.type&&e3(n.state)&&(e.state=n.state),"state_changed"===t.type&&e3(n.to)&&(e.state=n.to),"attempt_finished"===t.type&&t.attempt_id&&(e.lastFinished={attemptId:t.attempt_id,outcome:e3(n.outcome)})}(u,t),t.sequence<=_||null!==e.legacy_agent_request_id||(function(e,t,n){let i=e4(e.data),r=e4(t.policy_snapshot),s=null!==t.wake_event_id,a=e3(r.target_name_snapshot)??t.target_agent_id,_={target_agent_id:t.target_agent_id,execution_kind:t.execution_kind,tool_profile:t.tool_profile};switch(e.type){case"accepted":if("blocked"===i.state)return[];if(s)return[{kind:"wake_accepted",attemptId:null,text:`Wake accepted: ${a} (${t.execution_kind})`,data:{..._,target_name:a,requester_kind:t.requester_kind,requester_id:t.requester_id,parent_request_id:t.parent_request_id,depth:t.depth,wake_depth:t.wake_depth,grant_rule:e3(r.grant_rule),grant_id:e3(r.grant_id)}}];return[{kind:"request_queued",attemptId:null,text:"Queued",data:{..._,requester_kind:t.requester_kind,requester_id:t.requester_id}}];case"state_changed":{let e=e3(i.to),r=e3(i.from),d=e3(i.reason);switch(e){case"blocked":if(s&&"queued"===r&&"blocked"===n.state){let e=function(e){if(!e)return{code:null,reason:null};let t=/^([a-z_]+): ([\s\S]*)$/.exec(e);return t?{code:t[1],reason:t[2]}:{code:null,reason:e}}(d);return[e5(a,e.code,e.reason,_)]}return[{kind:"request_blocked",attemptId:null,text:e9("Blocked",d),data:{from:r,reason:d}}];case"queued":if("retry_scheduled"===d){let e="number"==typeof i.attempt_count?i.attempt_count:null,t="number"==typeof i.max_attempts?i.max_attempts:null;return[{kind:"request_retry_scheduled",attemptId:n.lastFinished?.attemptId??null,text:!0===i.manual?`Retry requested${null!==e&&null!==t?` (Attempt ${e+1} of ${t})`:""}`:`Retry scheduled${null!==e&&null!==t?` (Attempt ${e+1} of ${t})`:""}${"number"==typeof i.delay_ms?` in ${i.delay_ms} ms`:""}`,data:{from:r,reason:d,manual:!0===i.manual,attempt_count:e,max_attempts:t,next_eligible_at:i.next_eligible_at??null,delay_ms:i.delay_ms??null,category:i.category??null,outcome:n.lastFinished?.outcome??null}}]}if(s&&"blocked"===r&&("grant_approved"===d||"target_available"===d))return[{kind:"wake_accepted",attemptId:null,text:`Wake accepted: ${a} (${t.execution_kind})`,data:{..._,target_name:a,requester_kind:t.requester_kind,requester_id:t.requester_id,parent_request_id:t.parent_request_id,depth:t.depth,wake_depth:t.wake_depth,reason:d,grant_rule:i.grant_rule??null,grant_id:i.grant_id??null}}];return[{kind:"request_queued",attemptId:null,text:e9("Queued again",d),data:{from:r,reason:d}}];case"running":return[{kind:"request_running",attemptId:null,text:"Running",data:{phase:"dispatched",from:r}}];case"waiting":return[{kind:"request_waiting",attemptId:null,text:e9("Waiting",d),data:{from:r,reason:d}}];case"completed":{let e=n.lastFinished,i=e?.outcome==="succeeded",r=[{kind:"request_completed",attemptId:e?.attemptId??null,text:i?"Completed":"Completed without a successful Attempt outcome",data:{success:i,outcome:e?.outcome??null}}];if(i&&e){let n=o(e.attemptId),i=e4(t.result);r.push({kind:"result",attemptId:e.attemptId,text:n?.output??"Result recorded",data:{reply_message_id:e3(i.reply_message_id),has_output:"string"==typeof n?.output}})}return r}case"failed":case"cancelled":{let s=n.lastFinished,a=t.error_code??e3(i.error_code),o=t.error_message;if("failed"===e&&"timed_out"===d)return[{kind:"request_timed_out",attemptId:s?.attemptId??null,text:"Timed out: the request passed its deadline",data:{success:!1,error_code:a,reason:d,deadline_at:i.deadline_at??null,from:r,outcome:s?.outcome??null}}];if("failed"===e&&"retries_exhausted"===d)return[{kind:"request_retries_exhausted",attemptId:s?.attemptId??null,text:e9(`Retries exhausted after ${i.attempt_count??"?"} of ${i.max_attempts??"?"} Attempts`,o??a),data:{success:!1,error_code:a,error_message:o,reason:d,attempt_count:i.attempt_count??null,max_attempts:i.max_attempts??null,outcome:s?.outcome??null}}];return[{kind:"failed"===e?"request_failed":"request_cancelled",attemptId:s?.attemptId??null,text:"failed"===e?e9("Failed",o??a):"cancel_requested"===d?e9("Cancelled",t.cancel_reason):"grant_denied"===d?"Cancelled: owner denied edit Wake":e9("Cancelled",d??o),data:{success:!1,error_code:a,error_message:o,reason:d,outcome:s?.outcome??null}}]}default:return[]}}case"runtime_started":{let t=e3(i.adapter);return[{kind:"request_running",attemptId:e.attempt_id,text:t?`Running on ${t}`:"Running",data:{phase:"runtime_started",adapter:t,external_run_id:e3(i.external_run_id),success:!1}}]}case"wake_reblocked":return[e5(a,e3(i.reason_code),e3(i.reason),_)];case"dispatch_deferred":return[{kind:"request_queued",attemptId:null,text:"Queued: waiting for capacity",data:{waiting_for:"capacity",limit:e3(i.reason),active_global:i.active_global??null,active_target:i.active_target??null,max_global:i.max_global??null,max_per_target:i.max_per_target??null}}];case"lineage_stopped":return[{kind:"lineage_stopped",attemptId:null,text:"continuation_budget_exhausted"===i.reason?`Stopped: coordinator continuation limit ${i.limit??"?"} reached`:e9("Stopped",e3(i.reason)),data:i}];case"cancel_requested":{let e=e3(i.reason);return[{kind:"request_cancel_requested",attemptId:null,text:e9("Cancel requested",e),data:{by:e3(i.by),reason:e,state:e3(i.state)}}]}case"question":{let t=e3(i.question)??"";return[{kind:"question",attemptId:e.attempt_id,text:t,data:{question:t}}]}case"attempt_finished":{let t=o(e.attempt_id);if(!t)return[];let n=[];try{let e=JSON.parse(t.artifacts);Array.isArray(e)&&(n=e)}catch{}return n.filter(e=>!(e&&"object"==typeof e&&"candidate_manifest"===e.kind)).map(e=>{let n=e&&"object"==typeof e?e:{ref:String(e)},i=e3(n.kind)??"artifact",r=e3(n.ref)??"";return{kind:"artifact",attemptId:t.id,text:`Artifact (${i}): ${r}`,data:{artifact_kind:i,ref:r,outcome:t.outcome}}})}case"candidate_manifest_recorded":{let t=e3(i.manifest_digest),n="number"==typeof i.file_count?i.file_count:0;return[{kind:"artifact",attemptId:e.attempt_id,text:`Candidate manifest ${t}: ${n} ${1===n?"file":"files"} on base ${e3(i.base_commit)}`,data:{artifact_kind:"candidate_manifest",ref:t,...i}}]}case"candidate_manifest_unavailable":return[{kind:"finalization_blocked",attemptId:e.attempt_id,text:e9("Not finalizable",e3(i.reason_code)),data:{phase:"candidate",...i}}];case"finalization_preparing":return[{kind:"finalization_preparing",attemptId:e.attempt_id,text:`Finalization preparing: manifest ${e3(i.manifest_digest)} (${i.file_count??0} files), review ${e3(i.review_request_id)}`,data:i}];case"finalization_retry_pending":return[{kind:"finalization_preparing",attemptId:e.attempt_id,text:e9("Finalization waiting to retry",e3(i.reason_code)),data:{retry:!0,...i}}];case"finalization_committed":return[{kind:"finalization_committed",attemptId:e.attempt_id,text:`Finalization committed: commit ${e3(i.commit)} (tree ${e3(i.tree)}, manifest ${e3(i.result_manifest_digest)??e3(i.manifest_digest)})`,data:{success:!0,...i}}];case"finalization_blocked":case"finalization_failed":case"finalization_canceled":{let t="finalization_blocked"===e.type?"blocked":"finalization_failed"===e.type?"failed":"canceled";return[{kind:e.type,attemptId:e.attempt_id,text:e9(`Finalization ${t}`,e3(i.reason_code)),data:{success:!1,...i}}]}case"finalization_rejected":return[{kind:"finalization_rejected",attemptId:null,text:e9("Finalization not started",e3(i.reason_code)),data:i}];default:return[]}})(t,e,n).forEach((n,i)=>{l+=a.run(`${t.id}:${i}`,e.source_conversation_id,t.id,i,e.id,t.sequence,n.attemptId,e.wake_event_id,n.kind,u.state,n.text,JSON.stringify(n.data),c,e.created_at,t.created_at).changes})}return s.run(n,E),l}).immediate()}function d(t){return e.transaction(()=>e.prepare("SELECT id FROM work_requests WHERE source_conversation_id = ? ORDER BY created_at ASC, id ASC").all(t).reduce((e,t)=>e+_(t.id),0)+function(t){let n=e.prepare(`
+      SELECT w.* FROM wakes w
+      WHERE w.source_conversation_id = ? AND w.status = 'rejected'
+        AND NOT EXISTS (SELECT 1 FROM conversation_events e WHERE e.id = 'wake:' || w.id || ':0')
+      ORDER BY w.created_at ASC, w.position ASC
+    `).all(t),i=0;for(let e of n){let t={wake_id:e.id,target_name:e.target_name_snapshot??e.requested_target,target_agent_id:e.target_agent_id,execution_kind:e.execution_kind,requester_agent_id:e.requester_agent_id,parent_request_id:e.parent_request_id,reason_code:e.reason_code,reason:e.reason,limit:e.limit_value,observed:e.observed_value,work_request_id:null};i+=a.run(`wake:${e.id}:0`,e.source_conversation_id,null,0,null,0,null,e.id,"wake_rejected",null,function(e){let t=e.target_name_snapshot??e.requested_target??"an unnamed target";switch(e.reason_code){case"untracked_lineage":return"Wake not started: its source turn is not tracked work";case"depth_exceeded":return`Wake not started: ${t} — depth limit ${e.limit_value??"?"} reached`;case"root_budget_exhausted":return`Wake not started: ${t} — this work already used ${e.observed_value??e.limit_value??"?"} Wakes`;default:return e.reason?`Wake not started: ${t} — ${e.reason}`:`Wake not started: ${t}`}}(e),JSON.stringify(t),e.updated_at,e.created_at,e.updated_at).changes}return i}(t)).immediate()}function E(t){return e.prepare(`
+      SELECT * FROM conversation_events WHERE conversation_id = ?
+      ORDER BY sort_at ASC, request_created_at ASC, COALESCE(request_id, wake_id) ASC, request_sequence ASC, part ASC
+    `).all(t)}return{projectRequest:_,projectConversation:d,projectEvent:function(e){return _(e.request_id)},listConversationEventRows:E,listConversationEvents:function(e){return d(e),E(e).map((e,t)=>({eventId:e.id,seq:t+1,kind:e.kind,requestId:e.request_id,requestSequence:e.request_sequence,attemptId:e.attempt_id,wakeId:e.wake_id,engineEventId:e.engine_event_id,state:e.state,text:e.text,data:e4(e.data),createdAt:e.created_at}))}}}(td),tS=(td.exec(`
+    CREATE TABLE IF NOT EXISTS service_audit_events (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      at INTEGER NOT NULL,
+      principal TEXT NOT NULL CHECK (length(principal) BETWEEN 1 AND 200),
+      operation TEXT NOT NULL CHECK (length(operation) BETWEEN 1 AND 64),
+      capability TEXT NOT NULL CHECK (length(capability) BETWEEN 1 AND 64),
+      target_kind TEXT NOT NULL CHECK (target_kind IN ('grants', 'agent', 'session', 'conversation', 'exchange', 'request')),
+      target_ref TEXT CHECK (target_ref IS NULL OR length(target_ref) <= 128),
+      agent_id TEXT CHECK (agent_id IS NULL OR length(agent_id) <= 128),
+      outcome TEXT NOT NULL CHECK (outcome IN ('allowed', 'denied', 'rejected', 'error')),
+      code TEXT CHECK (code IS NULL OR length(code) <= 64)
+    );
+    CREATE INDEX IF NOT EXISTS idx_service_audit_principal ON service_audit_events(principal, id);
+    CREATE TRIGGER IF NOT EXISTS trg_service_audit_no_update BEFORE UPDATE ON service_audit_events
+    BEGIN
+      SELECT RAISE(ABORT, 'service_audit_events are append-only');
+    END;
+    CREATE TRIGGER IF NOT EXISTS trg_service_audit_no_delete BEFORE DELETE ON service_audit_events
+    BEGIN
+      SELECT RAISE(ABORT, 'service_audit_events are append-only');
+    END;
+  `),t=td.prepare(`
+    INSERT INTO service_audit_events (at, principal, operation, capability, target_kind, target_ref, agent_id, outcome, code)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+  `),{append(e){let n=`${e.principal.kind}:${te(e.principal.id)??"[invalid]"}`;t.run(e.at??Date.now(),n.slice(0,200),tt(e.operation,"unknown"),tt(e.capability,"none"),e.targetKind,te(e.targetRef),te(e.agentId),e.outcome,e.code?tt(e.code,"unknown"):null)},list(e={}){let t=Math.min(Math.max(1,e.limit??50),500);return e.principal?td.prepare("SELECT * FROM service_audit_events WHERE principal = ? ORDER BY id DESC LIMIT ?").all(e.principal,t):td.prepare("SELECT * FROM service_audit_events ORDER BY id DESC LIMIT ?").all(t)}}),tk={kind:"person",id:"local-owner"},tf=td.prepare("INSERT OR IGNORE INTO conversation_participants (conversation_id, participant_kind, participant_id, joined_at) VALUES (?, ?, ?, ?)");function tv(e,t,n){for(let i of(td.prepare("UPDATE conversations SET origin_kind = ?, origin_id = ? WHERE id = ? AND origin_kind IS NULL").run(tk.kind,tk.id,e),tf.run(e,tk.kind,tk.id,n),t))tf.run(e,"bot",i,n)}td.transaction(()=>{td.exec("UPDATE messages SET sender_kind = 'person' WHERE sender_kind IS NULL AND sender_type = 'user'"),td.exec("UPDATE messages SET sender_kind = 'bot' WHERE sender_kind IS NULL AND sender_type = 'bot'");let e=td.prepare("SELECT id, type, bot_id, group_id, created_at FROM conversations WHERE origin_kind IS NULL AND type IN ('bot', 'group')").all(),t=td.prepare("SELECT bot_id FROM group_members WHERE group_id = ?");for(let n of e){let e="bot"===n.type?n.bot_id?[n.bot_id]:[]:n.group_id?t.all(n.group_id).map(e=>e.bot_id):[];tv(n.id,e,n.created_at)}})();let th={getAll:()=>td.prepare("SELECT * FROM runtime_connections ORDER BY created_at ASC, id ASC").all(),getById:e=>{let t=td.prepare("SELECT * FROM runtime_connections WHERE id = ?").get(e);return t&&a.AGENTS.includes(t.provider)?t:void 0},create:e=>{let t={id:`rc-${(0,s.randomUUID)()}`,...e,created_at:Date.now()};return td.prepare("INSERT INTO runtime_connections (id, provider, label, host, created_at) VALUES (?, ?, ?, ?, ?)").run(t.id,t.provider,t.label,t.host,t.created_at),t},ensureLocal:e=>tT(e),agentCount:e=>td.prepare("SELECT COUNT(*) AS n FROM bots WHERE runtime_connection_id = ?").get(e).n},tw=["session_scope_kind","session_scope_items","policy_mode","allow_new_sessions","allow_resume_with_edits"],tC={create:(e,t)=>{let n=tR(e.name),i={id:t?.id||(0,s.randomUUID)(),...e,...n,color:tL(),created_at:t?.created_at??Date.now()};i.agent=i.agent||a.DEFAULT_AGENT,i.deck_id=i.deck_id||null,i.needs_deck_selection=!i.deck_id||i.needs_deck_selection?1:0;let r=X({...i,needs_deck_selection:i.needs_deck_selection});i.runtime_connection_id||(i.runtime_connection_id=tT(r.provider,i.created_at)),void 0===i.launch_profile&&(i.launch_profile=r.launch_profile),"direct"===i.launch_profile&&(i.deck_id=null,i.working_directory=null,i.needs_deck_selection=0),i.session_scope_kind||(i.session_scope_kind=r.session_scope_kind,i.session_scope_items=r.session_scope_items),i.policy_mode||(i.policy_mode=r.policy_mode,i.allow_new_sessions=r.allow_new_sessions,i.allow_resume_with_edits=r.allow_resume_with_edits),tm(i.name,()=>td.prepare(`INSERT INTO bots (id, name, name_key, title, description, avatar, color, hermes_profile, agent, deck_id, deck_name, working_directory, needs_deck_selection,
+        runtime_connection_id, launch_profile, session_scope_kind, session_scope_items, default_workspace, policy_mode, allow_new_sessions, allow_resume_with_edits, home_session_id,
+        avatar_color, avatar_eyes, avatar_hands, avatar_accessory, created_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(i.id,i.name,i.name_key,i.title,i.description,i.avatar||null,i.color,i.hermes_profile||null,i.agent,i.deck_id,i.deck_name||null,i.working_directory||null,i.needs_deck_selection,i.runtime_connection_id,i.launch_profile??null,i.session_scope_kind,i.session_scope_items??"[]",i.default_workspace||null,i.policy_mode,+!!i.allow_new_sessions,+!!i.allow_resume_with_edits,null,i.avatar_color||null,i.avatar_eyes||null,i.avatar_hands||null,i.avatar_accessory||null,i.created_at));let o=(0,s.randomUUID)();return td.prepare("INSERT INTO conversations (id, type, bot_id, created_at) VALUES (?, ?, ?, ?)").run(o,"bot",i.id,i.created_at),tv(o,[i.id],i.created_at),i},createFromImport:(e,t)=>{let n=tR(e.name),i={id:(0,s.randomUUID)(),...e,...n,color:tL(),created_at:Date.now(),agent:a.DEFAULT_AGENT,deck_id:null,deck_name:null,working_directory:null,needs_deck_selection:1,source_provider:t.source_provider,template_id:t.template_id,template_url:t.template_url,import_schema_version:t.import_schema_version,import_operation_id:t.import_operation_id,import_timestamp:t.import_timestamp},r=X(i);Object.assign(i,{runtime_connection_id:tT(r.provider,i.created_at),launch_profile:null,session_scope_kind:r.session_scope_kind,session_scope_items:r.session_scope_items,policy_mode:r.policy_mode,allow_new_sessions:r.allow_new_sessions,allow_resume_with_edits:r.allow_resume_with_edits}),tm(i.name,()=>td.prepare(`INSERT INTO bots (
+        id, name, name_key, title, description, avatar, color, created_at,
+        source_provider, template_id, template_url, import_schema_version,
+        import_operation_id, import_timestamp,
+        agent, deck_id, deck_name, working_directory,
+        needs_deck_selection,
+        runtime_connection_id, launch_profile, session_scope_kind, session_scope_items,
+        policy_mode, allow_new_sessions, allow_resume_with_edits
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(i.id,i.name,i.name_key,i.title,i.description,i.avatar||null,i.color,i.created_at,i.source_provider,i.template_id,i.template_url,i.import_schema_version,i.import_operation_id,i.import_timestamp,i.agent,i.deck_id,i.deck_name,i.working_directory,i.needs_deck_selection,i.runtime_connection_id,i.launch_profile,i.session_scope_kind,i.session_scope_items,i.policy_mode,i.allow_new_sessions,i.allow_resume_with_edits));let o=(0,s.randomUUID)();return td.prepare("INSERT INTO conversations (id, type, bot_id, created_at) VALUES (?, ?, ?, ?)").run(o,"bot",i.id,i.created_at),tv(o,[i.id],i.created_at),i},getByImportOperationId:e=>td.prepare("SELECT * FROM bots WHERE import_operation_id = ?").get(e),getAll:()=>td.prepare("SELECT * FROM bots ORDER BY created_at DESC").all(),getById:e=>td.prepare("SELECT * FROM bots WHERE id = ?").get(e),setAvatar:(e,t)=>{td.prepare("UPDATE bots SET avatar = ? WHERE id = ?").run(t,e)},getByName:e=>{let t=tr(e);if(t)return td.prepare("SELECT * FROM bots WHERE name_key = ?").get(t)},updateIdentity:(e,t,n,i)=>{let r=tR(t,e);tm(r.name,()=>td.prepare("UPDATE bots SET name = ?, name_key = ?, title = ?, description = ? WHERE id = ?").run(r.name,r.name_key,n,i,e))},setPinned:(e,t)=>{td.prepare("UPDATE bots SET pinned = ? WHERE id = ?").run(+!!t,e)},setHidden:(e,t)=>{td.prepare("UPDATE bots SET hidden = ? WHERE id = ?").run(+!!t,e)},setHermesProfile:(e,t)=>{let n=t&&t.trim()?t.trim():null;td.prepare("UPDATE bots SET hermes_profile = ? WHERE id = ?").run(n,e)},updateRegistration:(e,t,n)=>{let i=tC.getById(e);if(!i)return;let r=W(n),s="agent_deck"===n.launch_profile&&n.deck_id?null:i.deck_name??null;td.prepare(`UPDATE bots SET agent = ?, deck_name = ?, runtime_connection_id = ?, launch_profile = ?, deck_id = ?, working_directory = ?,
+         session_scope_kind = ?, session_scope_items = ?, default_workspace = ?, policy_mode = ?, allow_new_sessions = ?,
+         allow_resume_with_edits = ?, home_session_id = ?, needs_deck_selection = ? WHERE id = ?`).run(t,s,r.runtime_connection_id,r.launch_profile,r.deck_id,r.working_directory,r.session_scope_kind,r.session_scope_items,r.default_workspace,r.policy_mode,r.allow_new_sessions,r.allow_resume_with_edits,r.home_session_id,r.needs_deck_selection,e)},updateAgentSelection:(e,t)=>{let n=tC.getById(e);if(!n)return;let i=(0,a.applyAgentUpdate)(n,t),r=void 0!==t.deck_id?"agent_deck":n.launch_profile??null,s=n.runtime_connection_id?th.getById(n.runtime_connection_id):void 0,o=s&&s.provider===i.agent?s.id:tT(i.agent);td.prepare("UPDATE bots SET agent = ?, deck_id = ?, deck_name = ?, working_directory = ?, needs_deck_selection = ?, launch_profile = ?, runtime_connection_id = ? WHERE id = ?").run(i.agent,"direct"===r?null:i.deck_id,i.deck_name,"direct"===r?null:i.working_directory,"direct"===r?0:+!!i.needs_deck_selection,r,o,e)},updateAvatarConfig:(e,t)=>{let n=tC.getById(e);if(!n)return;let i=(e,t)=>void 0===e?t||null:e&&String(e).trim()?String(e).trim():null;td.prepare("UPDATE bots SET avatar_color = ?, avatar_eyes = ?, avatar_hands = ?, avatar_accessory = ? WHERE id = ?").run(i(t.avatar_color,n.avatar_color),i(t.avatar_eyes,n.avatar_eyes),i(t.avatar_hands,n.avatar_hands),i(t.avatar_accessory,n.avatar_accessory),e)},touchSeen:()=>{td.prepare("UPDATE bots SET last_seen = ?").run(Date.now())},markUnread:e=>{td.prepare("UPDATE bots SET unread = 1 WHERE id = ?").run(e)},markRead:e=>{td.prepare("UPDATE bots SET unread = 0 WHERE id = ?").run(e)},remove:e=>{tC.removeMany([e])},deletionPreview:e=>{var t;let n=new Set(e),i=[],r=[],s=[],a=new Set(ty());for(let t of e){let e=tC.getById(t);if(!e){r.push(t);continue}i.push({id:e.id,name:e.name}),(0,J.isChiefOfStaffName)(e.name)?s.push({id:e.id,name:e.name,reason:"chief"}):a.has(e.id)&&s.push({id:e.id,name:e.name,reason:"active"})}return{agents:i,groups:0===(t=n).size?[]:td.prepare(`SELECT DISTINCT g.id, g.name, g.owner_bot_id, g.created_at FROM groups g
+     JOIN group_members gm ON gm.group_id = g.id
+     WHERE gm.bot_id IN (${[...t].map(()=>"?").join(", ")})
+     ORDER BY g.created_at ASC, g.id ASC`).all(...t).map(e=>{let n=td.prepare(`SELECT b.id, b.name FROM bots b JOIN group_members gm ON gm.bot_id = b.id
+       WHERE gm.group_id = ? ORDER BY b.created_at ASC, b.id ASC`).all(e.id).filter(e=>!t.has(e.id));return n.length<2?{id:e.id,name:e.name,outcome:"removed",remaining:n.length,newOwner:null}:e.owner_bot_id&&t.has(e.owner_bot_id)?{id:e.id,name:e.name,outcome:"reassigned",remaining:n.length,newOwner:n[0]}:{id:e.id,name:e.name,outcome:"shrunk",remaining:n.length,newOwner:null}}),missing:r,blocked:s}},removeMany:(e,t)=>td.transaction(()=>{let n=tC.deletionPreview(e);if(n.missing.length>0||n.blocked.length>0)throw new tq(n);let i=new Set(e);for(let e of n.groups){if("removed"===e.outcome){var r=e.id;for(let e of td.prepare("SELECT id FROM conversations WHERE group_id = ?").all(r))tU(e.id);td.prepare("DELETE FROM group_members WHERE group_id = ?").run(r),td.prepare("DELETE FROM groups WHERE id = ?").run(r);continue}let t=td.prepare("SELECT id FROM conversations WHERE group_id = ?").all(e.id).map(e=>e.id);for(let n of i)for(let i of(td.prepare("DELETE FROM group_members WHERE group_id = ? AND bot_id = ?").run(e.id,n),t))td.prepare("DELETE FROM conversation_participants WHERE conversation_id = ? AND participant_kind = 'bot' AND participant_id = ?").run(i,n);e.newOwner&&td.prepare("UPDATE groups SET owner_bot_id = ? WHERE id = ?").run(e.newOwner.id,e.id)}for(let n of e){for(let e of td.prepare("SELECT id FROM conversations WHERE bot_id = ?").all(n))tU(e.id);e6(td,n),tD("bot_id",n),td.prepare("DELETE FROM launch_snapshots WHERE bot_id = ?").run(n),td.prepare("DELETE FROM group_members WHERE bot_id = ?").run(n),td.prepare("DELETE FROM conversation_participants WHERE participant_kind = 'bot' AND participant_id = ? AND conversation_id IN (SELECT id FROM conversations WHERE type = 'group')").run(n),td.prepare("DELETE FROM memories WHERE bot_id = ?").run(n),td.prepare("DELETE FROM one_shots WHERE bot_id = ?").run(n),td.prepare("DELETE FROM routines WHERE bot_id = ?").run(n),td.prepare("DELETE FROM pending_questions WHERE bot_id = ?").run(n),td.prepare("DELETE FROM approval_requests WHERE bot_id = ?").run(n),td.prepare("DELETE FROM wake_targets WHERE target_bot_id = ?").run(n),td.prepare("DELETE FROM bots WHERE id = ?").run(n),t?.onAgentDeleted?.(n)}return n})(),managementRows:()=>{let e=td.prepare("SELECT * FROM bots ORDER BY created_at DESC, id ASC").all(),t=new Set(ty()),n=new Map,i=e=>{for(let t of e)t.id&&t.at&&(n.get(t.id)??0)<t.at&&n.set(t.id,t.at)};return i(td.prepare("SELECT c.bot_id AS id, MAX(m.created_at) AS at FROM messages m JOIN conversations c ON c.id = m.conversation_id WHERE c.type = 'bot' GROUP BY c.bot_id").all()),i(td.prepare("SELECT sender_id AS id, MAX(created_at) AS at FROM messages WHERE sender_type = 'bot' AND sender_id IS NOT NULL GROUP BY sender_id").all()),e.map(e=>({bot:e,last_activity:n.get(e.id)??null,blocked:(0,J.isChiefOfStaffName)(e.name)?"chief":t.has(e.id)?"active":null}))}};class tq extends Error{preview;constructor(e){super(e.missing.length>0?"Agent not found":"Some agents cannot be deleted"),this.preview=e}}function ty(){return td.prepare(`
+    SELECT DISTINCT target_agent_id AS bot_id FROM work_requests
+    WHERE (executor <> 'dispatcher' AND state IN ('queued', 'running'))
+      OR (executor = 'dispatcher' AND state = 'running' AND json_extract(policy_snapshot, '$.surface') = 'ui')
+  `).all().map(e=>e.bot_id)}function tb(){return new Set(td.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name IN ('legacy_agent_requests_archive', 'legacy_agent_request_events_archive', 'legacy_processing_queue_archive')").all().map(e=>e.name))}function tD(e,t){tb().has("legacy_processing_queue_archive")&&td.prepare(`DELETE FROM legacy_processing_queue_archive WHERE ${e} = ?`).run(t)}function tU(e){let t;e2(td,e),td.prepare("DELETE FROM draft_actions WHERE message_id IN (SELECT id FROM messages WHERE conversation_id = ?)").run(e),t=tb(),tD("conversation_id",e),t.has("legacy_agent_request_events_archive")&&t.has("legacy_agent_requests_archive")&&td.prepare("DELETE FROM legacy_agent_request_events_archive WHERE request_id IN (SELECT id FROM legacy_agent_requests_archive WHERE conversation_id = ?)").run(e),t.has("legacy_agent_requests_archive")&&td.prepare("DELETE FROM legacy_agent_requests_archive WHERE conversation_id = ?").run(e),td.prepare("DELETE FROM messages WHERE conversation_id = ?").run(e),td.prepare("DELETE FROM pending_questions WHERE conversation_id = ?").run(e),td.prepare("DELETE FROM approvals WHERE conversation_id = ?").run(e),td.prepare("DELETE FROM approval_requests WHERE conversation_id = ?").run(e),td.prepare("DELETE FROM one_shots WHERE conversation_id = ?").run(e),td.prepare("DELETE FROM routines WHERE conversation_id = ?").run(e),td.prepare("DELETE FROM wake_targets WHERE conversation_id = ?").run(e),td.prepare("DELETE FROM conversation_participants WHERE conversation_id = ?").run(e),td.prepare("DELETE FROM conversations WHERE id = ?").run(e)}let tF={getByBotId:e=>td.prepare("SELECT * FROM conversations WHERE bot_id = ?").get(e),getByGroupId:e=>td.prepare("SELECT * FROM conversations WHERE group_id = ?").get(e),getById:e=>td.prepare("SELECT * FROM conversations WHERE id = ?").get(e),getUiById:e=>td.prepare("SELECT * FROM conversations WHERE id = ? AND type != 'agent'").get(e)},tW={create:(e,t,n,i,r)=>{let a={id:(0,s.randomUUID)(),conversation_id:e,sender_type:t,sender_id:i,sender_kind:"bot"===t?"bot":tk.kind,content:n,handoff_targets:r&&r.length>0?JSON.stringify(r):null,created_at:Date.now()};if(td.prepare("INSERT INTO messages (id, conversation_id, sender_type, sender_id, sender_kind, content, handoff_targets, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)").run(a.id,a.conversation_id,a.sender_type,a.sender_id||null,a.sender_kind,a.content,a.handoff_targets||null,a.created_at),"bot"===t){i&&tC.markUnread(i);let t=td.prepare("SELECT bot_id FROM conversations WHERE id = ? AND type = ?").get(e,"bot");t?.bot_id&&t.bot_id!==i&&tC.markUnread(t.bot_id)}return a},getById:e=>td.prepare("SELECT * FROM messages WHERE id = ?").get(e),replaceContent:(e,t)=>{td.prepare("UPDATE messages SET content = ? WHERE id = ?").run(t,e)},getByConversation:e=>td.prepare("SELECT * FROM messages WHERE conversation_id = ? ORDER BY created_at ASC").all(e),getBetween:(e,t)=>{let n=tW.getById(e),i=tW.getById(t);if(!n||!i||n.conversation_id!==i.conversation_id)return null;let r=td.prepare("SELECT * FROM messages WHERE conversation_id = ? ORDER BY created_at ASC, rowid ASC").all(n.conversation_id),s=r.findIndex(t=>t.id===e),a=r.findIndex(e=>e.id===t);if(s<0||a<0)return null;let[o,_]=s<a?[s,a]:[a,s];return r.slice(o+1,_)},latestFromBot:e=>{let t=tF.getByBotId(e);for(let n of td.prepare(`SELECT content, conversation_id, created_at FROM messages
+       WHERE sender_type = 'bot' AND sender_id = ?
+       ORDER BY created_at DESC, rowid DESC
+       LIMIT 20`).all(e)){if(t&&n.conversation_id!==t.id)continue;let e=td.prepare(`SELECT content FROM messages
+         WHERE conversation_id = ? AND created_at < ?
+         ORDER BY created_at DESC, rowid DESC
+         LIMIT 1`).get(n.conversation_id,n.created_at);if(!(e&&e.content.startsWith("[From ")))return n.content}return""},priorSentenceForHandoff:e=>{if(!e.handoff_targets)return null;let t=[];try{let n=JSON.parse(e.handoff_targets);if(!Array.isArray(n))return null;t=n.map(e=>String(e))}catch{return null}let n=td.prepare(`
+      SELECT m.conversation_id AS conversation_id, c.type AS type, c.bot_id AS bot_id
+      FROM messages m
+      JOIN conversations c ON c.id = m.conversation_id
+      WHERE m.content = ? AND m.handoff_targets = ?
+      ORDER BY m.created_at ASC
+    `).all(e.content,e.handoff_targets).find(e=>"group"===e.type||!e.bot_id||!t.includes(e.bot_id)),i=n?.conversation_id||e.conversation_id,r=tW.getByConversation(i),s=[...r].reverse().find(t=>"user"===t.sender_type&&t.content===e.content&&t.handoff_targets===e.handoff_targets),a=s?s.created_at:e.created_at;for(let e=r.length-1;e>=0;e--){let t=r[e];if(s&&t.id===s.id||t.created_at>a||"bot"!==t.sender_type)continue;let n=(t.content||"").trim();if(n)return n}return null}},tX={get:(e,t)=>td.prepare("SELECT * FROM approvals WHERE conversation_id = ? AND code = ?").get(e,t),recordPending:(e,t,n)=>(td.prepare("INSERT OR IGNORE INTO approvals (conversation_id, code, message_id, status, created_at) VALUES (?, ?, ?, ?, ?)").run(e,t,n||null,"pending",Date.now()),tX.get(e,t)),resolve:(e,t,n)=>Number(td.prepare("UPDATE approvals SET status = ?, resolved_at = ? WHERE conversation_id = ? AND code = ? AND status = 'pending'").run(n,Date.now(),e,t).changes)>0},tx=20;function tG(e){let t=tr(e);if(!t)return{ok:!1,reason:"not_found",requested:String(e??"")};let n=td.prepare("SELECT id, name FROM bots WHERE name_key = ? LIMIT 2").all(t);return 0===n.length?{ok:!1,reason:"not_found",requested:e}:n.length>1?{ok:!1,reason:"ambiguous",requested:e}:{ok:!0,agentId:n[0].id,displayName:n[0].name}}td.exec(`
+  CREATE TABLE IF NOT EXISTS wake_targets (
+    id TEXT PRIMARY KEY,
+    conversation_id TEXT NOT NULL,
+    source_bot_id TEXT,
+    source_message_id TEXT,
+    requested_target TEXT NOT NULL,
+    target_bot_id TEXT NOT NULL,
+    target_name_snapshot TEXT NOT NULL,
+    created_at INTEGER NOT NULL,
+    FOREIGN KEY (conversation_id) REFERENCES conversations(id),
+    FOREIGN KEY (target_bot_id) REFERENCES bots(id)
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_wake_targets_conversation
+    ON wake_targets(conversation_id, created_at);
+  CREATE INDEX IF NOT EXISTS idx_wake_targets_target
+    ON wake_targets(target_bot_id, created_at);
+`),td.exec(`
+  CREATE TABLE IF NOT EXISTS workspace_settings (
+    key TEXT PRIMARY KEY,
+    value TEXT NOT NULL,
+    updated_at INTEGER NOT NULL
+  );
+`),e.s(["BotDeletionError",0,tq,"UI_OWNER_PRINCIPAL",0,tk,"agentNameMigrations",0,{list:()=>td.prepare("SELECT * FROM agent_name_migrations ORDER BY created_at ASC, rowid ASC").all()},"approvals",0,tX,"bots",0,tC,"conversations",0,tF,"default",0,td,"draftActions",0,{get:e=>td.prepare("SELECT * FROM draft_actions WHERE message_id = ?").get(e),record:(e,t,n)=>Number(td.prepare("INSERT OR IGNORE INTO draft_actions (message_id, status, recipient, acted_at) VALUES (?, ?, ?, ?)").run(e,t,n||null,Date.now()).changes)>0},"engine",0,tI,"groups",0,{create:(e,t,n,i)=>{let r=n&&t.includes(n)?n:t[0],a={id:(0,s.randomUUID)(),name:e,owner_bot_id:r,created_at:i?.created_at??Date.now()},o=td.prepare("INSERT INTO groups (id, name, owner_bot_id, created_at) VALUES (?, ?, ?, ?)"),_=td.prepare("INSERT INTO group_members (group_id, bot_id) VALUES (?, ?)"),d=td.prepare("INSERT INTO conversations (id, type, group_id, created_at) VALUES (?, ?, ?, ?)");return td.transaction(()=>{for(let e of(o.run(a.id,a.name,a.owner_bot_id||null,a.created_at),t))_.run(a.id,e);let e=(0,s.randomUUID)();d.run(e,"group",a.id,a.created_at),tv(e,t,a.created_at)})(),a},getAll:()=>td.prepare("SELECT * FROM groups ORDER BY created_at DESC").all(),getById:e=>td.prepare("SELECT * FROM groups WHERE id = ?").get(e),rename:(e,t)=>{td.prepare("UPDATE groups SET name = ? WHERE id = ?").run(t,e)},getMembers:e=>td.prepare(`
+      SELECT b.* FROM bots b
+      JOIN group_members gm ON b.id = gm.bot_id
+      WHERE gm.group_id = ?
+    `).all(e)},"launchSnapshots",0,{record:(e,t,n,i,r="hermes-gateway")=>{td.prepare("INSERT OR IGNORE INTO launch_snapshots (id, bot_id, created_at, hash, snapshot, transport) VALUES (?, ?, ?, ?, ?, ?)").run(e,t,Date.now(),n,i,r)},listByBot:e=>td.prepare("SELECT * FROM launch_snapshots WHERE bot_id = ? ORDER BY created_at DESC, rowid DESC").all(e)},"mcpServers",0,{create:(e,t,n)=>{let i={id:(0,s.randomUUID)(),name:e,command:t,args:JSON.stringify(n),created_at:Date.now()};return td.prepare("INSERT INTO mcp_servers (id, name, command, args, created_at) VALUES (?, ?, ?, ?, ?)").run(i.id,i.name,i.command,i.args,i.created_at),i},list:()=>td.prepare("SELECT * FROM mcp_servers ORDER BY created_at ASC").all()},"memories",0,{rememberStatement:(e,t)=>{var n;let i;if(!e||!(i=t.trim())||/[?？]\s*$/.test(i)||/^\[mcp\]/i.test(i)||/^\[tool (?:call|result)\]/i.test(i)||/^\[Handing off to\b/i.test(i)||/^\[From [^\]]+\]/i.test(i)||/^Peer handoff:/i.test(i)||/reply with exactly\b/i.test(i)||(n=i,/^(who|what|when|where|why|how|which|whose|whom)\b/i.test(n)?!/^(what|how|why|where|when|who)\s+i\b/i.test(n):!!(/^(do|does|did|can|could|would|will|should|shall|is|are|am|was|were|have|has)\s+(you|i|we|they|he|she|it|there|the|a|an|my|your|our)\b/i.test(n)||/^(tell me|please tell)\b/i.test(n))))return;let r=t.trim();td.prepare("INSERT INTO memories (id, bot_id, fact, created_at) VALUES (?, ?, ?, ?)").run((0,s.randomUUID)(),e,r,Date.now()),td.prepare(`
+      DELETE FROM memories
+      WHERE bot_id = ?
+        AND id NOT IN (
+          SELECT id FROM (
+            SELECT id FROM memories
+            WHERE bot_id = ?
+            ORDER BY created_at DESC, rowid DESC
+            LIMIT ?
+          )
+        )
+    `).run(e,e,tx)},latestFacts:(e,t=tx)=>{let n=t>0?Math.min(t,tx):tx;return td.prepare("SELECT fact FROM memories WHERE bot_id = ? ORDER BY created_at DESC, rowid DESC LIMIT ?").all(e,n).map(e=>e.fact).reverse()}},"messages",0,tW,"oneShots",0,{create:(e,t,n)=>{let i={id:(0,s.randomUUID)(),conversation_id:e,bot_id:t,due_at:n,fired:0,created_at:Date.now()};return td.prepare("INSERT INTO one_shots (id, conversation_id, bot_id, due_at, fired, created_at) VALUES (?, ?, ?, ?, 0, ?)").run(i.id,i.conversation_id,i.bot_id,i.due_at,i.created_at),i},pending:e=>td.prepare("SELECT * FROM one_shots WHERE conversation_id = ? AND fired = 0 ORDER BY due_at ASC LIMIT 1").get(e),unfired:()=>td.prepare("SELECT * FROM one_shots WHERE fired = 0 ORDER BY due_at ASC").all(),claim:e=>1===td.prepare("UPDATE one_shots SET fired = 1 WHERE id = ? AND fired = 0").run(e).changes},"projector",0,tA,"registrationContext",0,{getConnection:e=>th.getById(e),localConnectionFor:e=>tT(e),sessionBelongsTo:function(e,t){return!!e&&(!!td.prepare("SELECT 1 FROM session_bindings WHERE id = ? AND agent_id = ?").get(t,e)||!!td.prepare("SELECT 1 FROM provider_sessions WHERE id = ? AND agent_id = ?").get(t,e))}},"resolveWakeTarget",0,tG,"routines",0,{create:(e,t,n,i,r)=>{let a={id:(0,s.randomUUID)(),conversation_id:e,bot_id:t,word:n,next_due_at:i,every_ms:r,created_at:Date.now()};return td.prepare("INSERT INTO routines (id, conversation_id, bot_id, word, next_due_at, every_ms, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)").run(a.id,a.conversation_id,a.bot_id,a.word,a.next_due_at,a.every_ms,a.created_at),a},forConversation:e=>td.prepare("SELECT * FROM routines WHERE conversation_id = ? ORDER BY created_at ASC LIMIT 1").get(e),all:()=>td.prepare("SELECT * FROM routines ORDER BY next_due_at ASC").all(),postIfDue:(e,t)=>td.transaction(()=>{let n=td.prepare("SELECT * FROM routines WHERE id = ?").get(e);return!!n&&!(n.next_due_at>t)&&1===td.prepare("UPDATE routines SET next_due_at = next_due_at + every_ms WHERE id = ? AND next_due_at = ?").run(e,n.next_due_at).changes&&(tW.create(n.conversation_id,"bot","[routine]\n"+n.word,n.bot_id),!0)})()},"runtimeConnections",0,th,"serializeAgent",0,function(e){let t=(0,a.serializeBot)(e);for(let e of tw)delete t[e];let n=e.runtime_connection_id?th.getById(e.runtime_connection_id):void 0;return{...t,...j(e,n),launch_profile:F(e)}},"serviceAudit",0,tS,"wakeTargets",0,{accept:e=>{let t=tG(e.requestedTarget);if(!t.ok)return t;let n={id:(0,s.randomUUID)(),conversation_id:e.conversationId,source_bot_id:e.sourceBotId??null,source_message_id:e.sourceMessageId??null,requested_target:e.requestedTarget,target_bot_id:t.agentId,target_name_snapshot:t.displayName,created_at:Date.now()};return td.prepare("INSERT INTO wake_targets (id, conversation_id, source_bot_id, source_message_id, requested_target, target_bot_id, target_name_snapshot, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)").run(n.id,n.conversation_id,n.source_bot_id,n.source_message_id,n.requested_target,n.target_bot_id,n.target_name_snapshot,n.created_at),{ok:!0,wake:n}},listByConversation:e=>td.prepare("SELECT * FROM wake_targets WHERE conversation_id = ? ORDER BY created_at ASC, rowid ASC").all(e)},"workspaceSettings",0,{get:e=>{let t=td.prepare("SELECT value FROM workspace_settings WHERE key = ?").get(e);return t?t.value:null},set:(e,t)=>{td.prepare("INSERT INTO workspace_settings (key, value, updated_at) VALUES (?, ?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value, updated_at = excluded.updated_at").run(e,t,Date.now())},clearForTests:()=>{td.prepare("DELETE FROM workspace_settings").run()}}],62294)}];
+
+//# sourceMappingURL=lib_db_ts_1ttuckb._.js.map