funolio-agent 0.17.8 → 1.0.3

package/dist/local-data.js

@@ -49,6 +49,8 @@ exports.listProviderConnections = listProviderConnections;
 exports.getProviderConnection = getProviderConnection;
 exports.findProviderConnection = findProviderConnection;
 exports.updateProviderConnection = updateProviderConnection;
+exports.normalizeCliProviderConnections = normalizeCliProviderConnections;
+exports.pruneUnsupportedProviderConnections = pruneUnsupportedProviderConnections;
 exports.upsertOauthProviderConnection = upsertOauthProviderConnection;
 exports.deleteProviderConnection = deleteProviderConnection;
 exports.deleteAgentProfile = deleteAgentProfile;
@@ -82,6 +84,7 @@ exports.upsertMemoryFact = upsertMemoryFact;
 exports.searchMemoryFacts = searchMemoryFacts;
 exports.listMemoryFacts = listMemoryFacts;
 exports.deleteMemoryFact = deleteMemoryFact;
+exports.getUserProfileFacts = getUserProfileFacts;
 exports.upsertEntity = upsertEntity;
 exports.getEntityGraph = getEntityGraph;
 exports.upsertEntityRelationship = upsertEntityRelationship;
@@ -111,6 +114,8 @@ exports.getEffectiveOrchestrationPolicy = getEffectiveOrchestrationPolicy;
 exports.getPendingOrchestrationPolicy = getPendingOrchestrationPolicy;
 exports.setPendingOrchestrationPolicy = setPendingOrchestrationPolicy;
 exports.clearPendingOrchestrationPolicy = clearPendingOrchestrationPolicy;
+exports.getPolicyDetectionEventForMessage = getPolicyDetectionEventForMessage;
+exports.recordPolicyDetectionEvent = recordPolicyDetectionEvent;
 exports.getOrchestrationCheckpoint = getOrchestrationCheckpoint;
 exports.setOrchestrationCheckpoint = setOrchestrationCheckpoint;
 exports.clearOrchestrationCheckpoint = clearOrchestrationCheckpoint;
@@ -124,12 +129,18 @@ exports.addTodoTask = addTodoTask;
 exports.editTodoTask = editTodoTask;
 exports.checkTodoTask = checkTodoTask;
 exports.completeTodoTaskByUser = completeTodoTaskByUser;
+exports.listTodoArtifactsForTask = listTodoArtifactsForTask;
+exports.completeTodoTaskByWorker = completeTodoTaskByWorker;
+exports.blockTodoTaskByWorker = blockTodoTaskByWorker;
 exports.deleteTodoTask = deleteTodoTask;
 exports.reorderTodoTask = reorderTodoTask;
 exports.listTodoAudit = listTodoAudit;
 exports.moveNullTodoTasksToUnassigned = moveNullTodoTasksToUnassigned;
 exports.getLatestActiveTodoForConversation = getLatestActiveTodoForConversation;
+exports.getNextActiveTodoForConversation = getNextActiveTodoForConversation;
+exports.listCompletedTodoTasksForConversation = listCompletedTodoTasksForConversation;
 exports.createProject = createProject;
+exports.upsertProject = upsertProject;
 exports.getProject = getProject;
 exports.getUnassignedProject = getUnassignedProject;
 exports.ensureUnassignedProject = ensureUnassignedProject;
@@ -197,6 +208,7 @@ exports.resetDerivedData = resetDerivedData;
 const local_db_1 = require("./local-db");
 const memory_text_1 = require("./memory-text");
 const memory_extraction_1 = require("./memory-extraction");
+const orchestrator_blocked_prompt_1 = require("./orchestration/orchestrator-blocked-prompt");
 const crypto = __importStar(require("crypto"));
 const default_tool_profile_1 = require("./default-tool-profile");
 let _db = null;
@@ -418,6 +430,8 @@ function setOrchestratorBot(botId) {
     transaction();
     return db.prepare('SELECT * FROM agent_profile WHERE id = ?').get(botId);
 }
+const CLI_PROVIDER_IDS = new Set(['claude-cli', 'codex-cli']);
+const SUPPORTED_PROVIDER_ACCESS_MODES = new Set(['api', 'cli']);
 function createProviderConnection(p) {
     const db = getDb();
     const id = newId();
@@ -481,7 +495,93 @@ function updateProviderConnection(id, fields) {
     db.prepare(`UPDATE provider_connection SET ${sets.join(', ')} WHERE id = ?`).run(...vals);
     return db.prepare('SELECT * FROM provider_connection WHERE id = ?').get(id);
 }
+function normalizeCliProviderConnections() {
+    const db = getDb();
+    const rows = db.prepare(`SELECT * FROM provider_connection WHERE provider_id IN ('claude-cli', 'codex-cli')`).all();
+    const updatedIds = [];
+    const tx = db.transaction(() => {
+        for (const row of rows) {
+            const needsNormalization = row.access_mode !== 'cli'
+                || row.auth_type !== 'cli'
+                || !!row.api_key_enc
+                || !!row.oauth_token
+                || !!row.oauth_refresh_token
+                || row.oauth_expires_at != null;
+            if (!needsNormalization)
+                continue;
+            db.prepare(`
+        UPDATE provider_connection
+        SET access_mode = 'cli',
+            auth_type = 'cli',
+            api_key_enc = NULL,
+            oauth_token = NULL,
+            oauth_refresh_token = NULL,
+            oauth_expires_at = NULL,
+            updated_at = datetime('now')
+        WHERE id = ?
+      `).run(row.id);
+            updatedIds.push(row.id);
+        }
+    });
+    tx();
+    return { updatedIds };
+}
+function pruneUnsupportedProviderConnections() {
+    const db = getDb();
+    const rows = listProviderConnections().filter((row) => !SUPPORTED_PROVIDER_ACCESS_MODES.has(row.access_mode));
+    if (rows.length === 0)
+        return { deletedIds: [], skippedIds: [] };
+    const referencedByBots = new Set(db.prepare(`SELECT provider_connection_id
+         FROM agent_profile
+         WHERE provider_connection_id IS NOT NULL`).all().map((row) => row.provider_connection_id));
+    const clerkConfig = getJsonSetting('clerk.config');
+    const protectedIds = new Set([
+        ...referencedByBots,
+        ...(clerkConfig?.providerConnectionId ? [clerkConfig.providerConnectionId] : []),
+    ]);
+    const deletedIds = [];
+    const skippedIds = [];
+    const tx = db.transaction(() => {
+        for (const row of rows) {
+            if (protectedIds.has(row.id)) {
+                skippedIds.push(row.id);
+                continue;
+            }
+            db.prepare('DELETE FROM provider_connection WHERE id = ?').run(row.id);
+            deletedIds.push(row.id);
+        }
+    });
+    tx();
+    return { deletedIds, skippedIds };
+}
 function upsertOauthProviderConnection(input) {
+    if (CLI_PROVIDER_IDS.has(input.providerId)) {
+        const existing = findProviderConnection(input.providerId, 'cli')
+            || listProviderConnections().find((row) => row.provider_id === input.providerId);
+        if (existing) {
+            return updateProviderConnection(existing.id, {
+                accessMode: 'cli',
+                authType: 'cli',
+                apiKeyEnc: null,
+                oauthToken: null,
+                oauthRefreshToken: null,
+                oauthExpiresAt: null,
+                ...(input.defaultModel !== undefined ? { defaultModel: input.defaultModel } : {}),
+                ...(input.label !== undefined ? { label: input.label ?? undefined } : {}),
+                status: 'configured',
+                lastError: null,
+            });
+        }
+        return createProviderConnection({
+            providerId: input.providerId,
+            accessMode: 'cli',
+            authType: 'cli',
+            ...(input.label !== undefined ? { label: input.label ?? undefined } : {}),
+            ...(input.defaultModel !== undefined ? { defaultModel: input.defaultModel ?? undefined } : {}),
+            status: 'configured',
+            lastError: undefined,
+        });
+    }
     const existing = findProviderConnection(input.providerId, 'oauth')
         || listProviderConnections().find((row) => row.provider_id === input.providerId && row.auth_type === 'oauth');
     if (existing) {
@@ -1098,6 +1198,20 @@ function listMemoryFacts(opts) {
 function deleteMemoryFact(id) {
     return getDb().prepare('DELETE FROM memory_fact WHERE id = ?').run(id).changes > 0;
 }
+/**
+ * Get user-profile facts (person entities) for injection into the system prompt.
+ * Returns high-confidence facts about people (address, preferences, etc.)
+ * limited to ~500 tokens worth of content.
+ */
+function getUserProfileFacts(agentId, limit = 15) {
+    const db = getDb();
+    return db.prepare(`
+    SELECT * FROM memory_fact
+    WHERE agent_id = ? AND entity_type = 'person'
+    ORDER BY confidence DESC, updated_at DESC
+    LIMIT ?
+  `).all(agentId, limit);
+}
 function upsertEntity(agentId, name, type) {
     const db = getDb();
     const existing = db.prepare('SELECT * FROM entity WHERE agent_id = ? AND name = ?').get(agentId, name);
@@ -1521,6 +1635,29 @@ function setPendingOrchestrationPolicy(entry) {
 function clearPendingOrchestrationPolicy(conversationId) {
     return getDb().prepare('DELETE FROM pending_orchestration_policy WHERE conversation_id = ?').run(conversationId).changes > 0;
 }
+function getPolicyDetectionEventForMessage(messageId) {
+    return getDb().prepare('SELECT * FROM policy_detection_event WHERE message_id = ?').get(messageId);
+}
+function recordPolicyDetectionEvent(entry) {
+    const db = getDb();
+    const existing = getPolicyDetectionEventForMessage(entry.messageId);
+    const id = existing?.id || newId();
+    db.prepare(`
+    INSERT INTO policy_detection_event (
+      id, conversation_id, message_id, detection_source, detected_by_code,
+      signal_json, status, scope, summary_text, policy_json, created_at
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, datetime('now'))
+    ON CONFLICT(message_id) DO UPDATE SET
+      detection_source = excluded.detection_source,
+      detected_by_code = excluded.detected_by_code,
+      signal_json = excluded.signal_json,
+      status = excluded.status,
+      scope = excluded.scope,
+      summary_text = excluded.summary_text,
+      policy_json = excluded.policy_json
+  `).run(id, entry.conversationId, entry.messageId, entry.source, entry.detectedByCode ? 1 : 0, entry.matchedSignals?.length ? JSON.stringify(entry.matchedSignals) : null, entry.status, entry.scope ?? null, entry.summaryText ?? null, entry.policy ? JSON.stringify(entry.policy) : null);
+    return getPolicyDetectionEventForMessage(entry.messageId);
+}
 function getOrchestrationCheckpoint(conversationId) {
     const row = getDb().prepare('SELECT * FROM orchestration_checkpoint WHERE conversation_id = ?').get(conversationId);
     if (!row)
@@ -1620,6 +1757,19 @@ function parseJsonStatus(raw) {
         return {};
     }
 }
+function parseJsonNumberArray(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        if (!Array.isArray(parsed))
+            return [];
+        return parsed
+            .map((value) => Number(value))
+            .filter((value) => Number.isFinite(value) && value > 0);
+    }
+    catch {
+        return [];
+    }
+}
 function normalizeParticipants(input) {
     const seen = new Set();
     const out = [];
@@ -1642,11 +1792,27 @@ function normalizeTodoRow(row, state) {
         conversation_id: row.conversation_id ? String(row.conversation_id) : null,
         origin: row.origin ? String(row.origin) : null,
         created_by_bot_id: row.created_by_bot_id ? String(row.created_by_bot_id) : null,
+        owner_bot_id: row.owner_bot_id ? String(row.owner_bot_id) : null,
+        owner_name: row.owner_name ? String(row.owner_name) : null,
+        task_type: row.task_type ? String(row.task_type) : null,
+        profile_name: row.profile_name ? String(row.profile_name) : null,
+        next_worker_bot_id: row.next_worker_bot_id ? String(row.next_worker_bot_id) : null,
+        next_worker_name: row.next_worker_name ? String(row.next_worker_name) : null,
+        next_worker_role: row.next_worker_role ? String(row.next_worker_role) : null,
         title: String(row.title || ''),
         details: String(row.details || ''),
+        task_prompt: row.task_prompt ? String(row.task_prompt) : null,
+        handoff_prompt: row.handoff_prompt ? String(row.handoff_prompt) : null,
+        output_summary: row.output_summary ? String(row.output_summary) : null,
+        blocker_summary: row.blocker_summary ? String(row.blocker_summary) : null,
+        blocker_checked: row.blocker_checked ? String(row.blocker_checked) : null,
+        blocker_question: row.blocker_question ? String(row.blocker_question) : null,
+        artifact_ids: parseJsonNumberArray(String(row.artifact_ids_json || '[]')),
+        internal_only: Number(row.internal_only || 0),
         participants: parseJsonArray(String(row.participants || '[]')),
         status: parseJsonStatus(String(row.status || '{}')),
         created_order: Number(row.created_order || 0),
+        position: Number(row.created_order || 0),
         state,
         created_at: String(row.created_at || ''),
         completed_at: row.completed_at ? String(row.completed_at) : null,
@@ -1658,6 +1824,47 @@ function normalizeTodoRow(row, state) {
 function isUserName(name) {
     return name.trim().toLowerCase() === 'user';
 }
+function roleClassToTaskType(roleClass) {
+    const normalized = String(roleClass || '').trim().toLowerCase();
+    if (!normalized)
+        return null;
+    if (normalized === 'code' || normalized === 'coding' || normalized === 'developer')
+        return 'coding';
+    if (normalized === 'qa' || normalized === 'review')
+        return 'qa';
+    if (normalized === 'research' || normalized === 'brainstorm' || normalized === 'planning' || normalized === 'plan')
+        return 'research';
+    if (normalized === 'verify' || normalized === 'verification')
+        return 'verify';
+    if (normalized === 'deploy' || normalized === 'deployment')
+        return 'deploy';
+    return normalized;
+}
+function resolveAgentByName(name) {
+    const normalized = String(name || '').trim().toLowerCase();
+    if (!normalized)
+        return undefined;
+    return listAgentProfiles().find((agent) => agent.name.trim().toLowerCase() === normalized);
+}
+function inferTaskTypeForAgent(agent, requested) {
+    const explicit = String(requested || '').trim();
+    if (explicit)
+        return explicit;
+    return roleClassToTaskType(agent?.role_class) || roleClassToTaskType(agent?.role_label) || null;
+}
+function normalizeArtifactRow(row) {
+    return {
+        id: Number(row.id),
+        project_id: row.project_id ? String(row.project_id) : null,
+        conversation_id: row.conversation_id ? String(row.conversation_id) : null,
+        artifact_type: String(row.artifact_type || 'reference'),
+        label: row.label ? String(row.label) : null,
+        path_or_ref: String(row.path_or_ref || ''),
+        metadata_json: row.metadata_json ? String(row.metadata_json) : null,
+        created_by_bot_id: row.created_by_bot_id ? String(row.created_by_bot_id) : null,
+        created_at: String(row.created_at || ''),
+    };
+}
 function resolveAssignedParticipant(participants, requested) {
     const want = requested.trim().toLowerCase();
     const found = participants.find((p) => p.trim().toLowerCase() === want);
@@ -1691,16 +1898,142 @@ function moveActiveTaskToCompletedTx(db, taskId, actor, reason) {
     const completedAt = now();
     db.prepare(`
     INSERT INTO todo_completed (
-      id, project_id, conversation_id, title, details, participants, status, created_order,
-      success_criteria, origin, created_by_bot_id, created_at, completed_at, last_updated, version
-    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-  `).run(row.id, row.project_id ?? null, row.conversation_id ?? null, row.title, row.details, row.participants, row.status, row.created_order, row.success_criteria ?? null, row.origin ?? 'user', row.created_by_bot_id ?? null, row.created_at, completedAt, completedAt, row.version);
+      id, project_id, conversation_id, origin, created_by_bot_id, owner_bot_id, owner_name,
+      task_type, profile_name, next_worker_bot_id, next_worker_name, next_worker_role,
+      title, details, task_prompt, handoff_prompt, output_summary, blocker_summary, blocker_checked, blocker_question, artifact_ids_json,
+      success_criteria, internal_only, participants, status, created_order,
+      created_at, completed_at, last_updated, version
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+  `).run(row.id, row.project_id ?? null, row.conversation_id ?? null, row.origin ?? 'user', row.created_by_bot_id ?? null, row.owner_bot_id ?? null, row.owner_name ?? null, row.task_type ?? null, row.profile_name ?? 'Programming', row.next_worker_bot_id ?? null, row.next_worker_name ?? null, row.next_worker_role ?? null, row.title, row.details, row.task_prompt ?? null, row.handoff_prompt ?? null, row.output_summary ?? null, row.blocker_summary ?? null, row.blocker_checked ?? null, row.blocker_question ?? null, row.artifact_ids_json ?? '[]', row.success_criteria ?? null, Number(row.internal_only || 0), row.participants, row.status, row.created_order, row.created_at, completedAt, completedAt, row.version);
     db.prepare('DELETE FROM todo_active WHERE id = ?').run(taskId);
-    normalizeTodoOrderTx(db, row.project_id ? String(row.project_id) : null);
     logTodoAuditTx(db, taskId, 'completed', 'complete', actor, { reason });
     const completed = db.prepare('SELECT * FROM todo_completed WHERE id = ?').get(taskId);
     return normalizeTodoRow(completed, 'completed');
 }
+function determineInsertPositionTx(db, projectId, insertAfterTaskId) {
+    if (insertAfterTaskId) {
+        const row = db.prepare(`
+      SELECT created_order, project_id
+      FROM todo_active
+      WHERE id = ?
+      UNION ALL
+      SELECT created_order, project_id
+      FROM todo_completed
+      WHERE id = ?
+      LIMIT 1
+    `).get(insertAfterTaskId, insertAfterTaskId);
+        if (!row)
+            throw new Error(`Task ${insertAfterTaskId} not found`);
+        const normalizedProjectId = projectId ?? null;
+        if ((row.project_id ?? null) !== normalizedProjectId) {
+            throw new Error('Inserted task must stay within the same project scope');
+        }
+        const targetPosition = Number(row.created_order || 0) + 1;
+        if (normalizedProjectId) {
+            db.prepare('UPDATE todo_active SET created_order = created_order + 1, last_updated = datetime(\'now\'), version = version + 1 WHERE project_id = ? AND created_order >= ?')
+                .run(normalizedProjectId, targetPosition);
+        }
+        else {
+            db.prepare('UPDATE todo_active SET created_order = created_order + 1, last_updated = datetime(\'now\'), version = version + 1 WHERE project_id IS NULL AND created_order >= ?')
+                .run(targetPosition);
+        }
+        return targetPosition;
+    }
+    const maxOrder = projectId
+        ? db.prepare('SELECT COALESCE(MAX(created_order), 0) as n FROM todo_active WHERE project_id = ?').get(projectId)
+        : db.prepare('SELECT COALESCE(MAX(created_order), 0) as n FROM todo_active WHERE project_id IS NULL').get();
+    return Number(maxOrder.n) + 1;
+}
+function resolveOrchestratorName() {
+    return getOrchestratorBot()?.name || null;
+}
+function resolveAllowedWorkerNamesForInsertion(currentTask) {
+    const allowed = new Set();
+    if (currentTask.next_worker_name)
+        allowed.add(currentTask.next_worker_name.trim().toLowerCase());
+    const orchestratorName = resolveOrchestratorName();
+    if (orchestratorName)
+        allowed.add(orchestratorName.trim().toLowerCase());
+    const db = getDb();
+    const previous = currentTask.project_id
+        ? db.prepare(`
+      SELECT owner_name, created_order, internal_only
+      FROM (
+        SELECT owner_name, created_order, internal_only FROM todo_active WHERE project_id = ?
+        UNION ALL
+        SELECT owner_name, created_order, internal_only FROM todo_completed WHERE project_id = ?
+      )
+      WHERE created_order < ? AND COALESCE(internal_only, 0) = 0 AND owner_name IS NOT NULL
+      ORDER BY created_order DESC
+      LIMIT 1
+    `).get(currentTask.project_id, currentTask.project_id, currentTask.position)
+        : db.prepare(`
+      SELECT owner_name, created_order, internal_only
+      FROM (
+        SELECT owner_name, created_order, internal_only FROM todo_active WHERE project_id IS NULL
+        UNION ALL
+        SELECT owner_name, created_order, internal_only FROM todo_completed WHERE project_id IS NULL
+      )
+      WHERE created_order < ? AND COALESCE(internal_only, 0) = 0 AND owner_name IS NOT NULL
+      ORDER BY created_order DESC
+      LIMIT 1
+    `).get(currentTask.position);
+    if (previous?.owner_name)
+        allowed.add(previous.owner_name.trim().toLowerCase());
+    return Array.from(allowed);
+}
+function normalizeArtifactInput(ref) {
+    if (typeof ref === 'string') {
+        const trimmed = ref.trim();
+        return {
+            pathOrRef: trimmed,
+            artifactType: /\.[a-z0-9]+$/i.test(trimmed) || /[\\/]/.test(trimmed) ? 'file' : 'reference',
+            label: trimmed.split(/[\\/]/).filter(Boolean).pop() || trimmed,
+        };
+    }
+    return {
+        artifactType: String(ref.artifactType || 'reference'),
+        label: ref.label ? String(ref.label) : undefined,
+        pathOrRef: String(ref.pathOrRef || '').trim(),
+        metadata: ref.metadata ?? null,
+    };
+}
+function resolveArtifactRowsTx(db, refs, context) {
+    const rows = [];
+    for (const raw of refs) {
+        const normalized = normalizeArtifactInput(raw);
+        if (!normalized.pathOrRef)
+            continue;
+        const existing = db.prepare(`
+      SELECT * FROM todo_artifact
+      WHERE project_id IS ? AND conversation_id IS ? AND artifact_type = ? AND path_or_ref = ?
+      ORDER BY id DESC
+      LIMIT 1
+    `).get(context.projectId ?? null, context.conversationId ?? null, normalized.artifactType || 'reference', normalized.pathOrRef);
+        if (existing) {
+            rows.push(normalizeArtifactRow(existing));
+            continue;
+        }
+        const result = db.prepare(`
+      INSERT INTO todo_artifact (
+        project_id, conversation_id, artifact_type, label, path_or_ref, metadata_json, created_by_bot_id, created_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(context.projectId ?? null, context.conversationId ?? null, normalized.artifactType || 'reference', normalized.label ?? null, normalized.pathOrRef, normalized.metadata ? JSON.stringify(normalized.metadata) : null, context.createdByBotId ?? null, now());
+        const created = db.prepare('SELECT * FROM todo_artifact WHERE id = ?').get(Number(result.lastInsertRowid));
+        rows.push(normalizeArtifactRow(created));
+    }
+    return rows;
+}
+function loadArtifactRowsByIdsTx(db, artifactIds) {
+    const normalized = artifactIds
+        .map((value) => Number(value))
+        .filter((value) => Number.isFinite(value) && value > 0);
+    if (normalized.length === 0)
+        return [];
+    const placeholders = normalized.map(() => '?').join(', ');
+    const rows = db.prepare(`SELECT * FROM todo_artifact WHERE id IN (${placeholders}) ORDER BY id ASC`).all(...normalized);
+    return rows.map((row) => normalizeArtifactRow(row));
+}
 function getTodoStatusMarker(projectId) {
     const row = projectId
         ? getDb().prepare('SELECT COUNT(*) as n FROM todo_active WHERE project_id = ?').get(projectId)
@@ -1735,13 +2068,24 @@ function listAllTodoTasks(opts) {
     };
 }
 function addTodoTask(params) {
-    const db = getDb();
     const title = String(params.title || '').trim();
     const details = String(params.details || '').trim();
     const participants = normalizeParticipants(params.participants || []);
     const successCriteria = params.successCriteria?.trim() || null;
     const origin = params.actor.actorType;
     const createdByBotId = params.actor.actorId?.trim() || null;
+    const ownerBotId = params.ownerBotId?.trim() || null;
+    const ownerName = params.ownerName?.trim() || null;
+    const taskType = params.taskType?.trim() || null;
+    const profileName = params.profileName?.trim() || 'Programming';
+    const nextWorkerBotId = params.nextWorkerBotId?.trim() || null;
+    const nextWorkerName = params.nextWorkerName?.trim() || null;
+    const nextWorkerRole = params.nextWorkerRole?.trim() || null;
+    const taskPrompt = params.taskPrompt?.trim() || null;
+    const handoffPrompt = params.handoffPrompt?.trim() || null;
+    const outputSummary = params.outputSummary?.trim() || null;
+    const artifactIdsJson = JSON.stringify((params.artifactIds || []).filter((id) => Number.isFinite(id) && id > 0));
+    const internalOnly = params.internalOnly ? 1 : 0;
     if (!title)
         throw new Error('Title is required');
     if (countWords(title) > TODO_TITLE_WORD_LIMIT)
@@ -1756,21 +2100,61 @@ function addTodoTask(params) {
         if (!successCriteria)
             throw new Error('Orchestrator TODOs must include success criteria');
     }
-    const tx = db.transaction(() => {
-        const maxOrder = params.projectId
-            ? db.prepare('SELECT COALESCE(MAX(created_order), 0) as n FROM todo_active WHERE project_id = ?').get(params.projectId)
-            : db.prepare('SELECT COALESCE(MAX(created_order), 0) as n FROM todo_active WHERE project_id IS NULL').get();
-        const createdOrder = Number(maxOrder.n) + 1;
+    const db = getDb();
+    const tx = db.transaction(() => insertTodoTaskTx(db, {
+        ...params,
+        title,
+        details,
+        participants,
+        successCriteria: successCriteria || undefined,
+        ownerBotId,
+        ownerName,
+        taskType,
+        profileName,
+        nextWorkerBotId,
+        nextWorkerName,
+        nextWorkerRole,
+        taskPrompt,
+        handoffPrompt,
+        outputSummary,
+        artifactIds: JSON.parse(artifactIdsJson),
+        internalOnly: Boolean(internalOnly),
+    }));
+    return tx();
+}
+function insertTodoTaskTx(db, params) {
+    const title = String(params.title || '').trim();
+    const details = String(params.details || '').trim();
+    const participants = normalizeParticipants(params.participants || []);
+    const successCriteria = params.successCriteria?.trim() || null;
+    const origin = params.actor.actorType;
+    const createdByBotId = params.actor.actorId?.trim() || null;
+    const ownerBotId = params.ownerBotId?.trim() || null;
+    const ownerName = params.ownerName?.trim() || null;
+    const taskType = params.taskType?.trim() || null;
+    const profileName = params.profileName?.trim() || 'Programming';
+    const nextWorkerBotId = params.nextWorkerBotId?.trim() || null;
+    const nextWorkerName = params.nextWorkerName?.trim() || null;
+    const nextWorkerRole = params.nextWorkerRole?.trim() || null;
+    const taskPrompt = params.taskPrompt?.trim() || null;
+    const handoffPrompt = params.handoffPrompt?.trim() || null;
+    const outputSummary = params.outputSummary?.trim() || null;
+    const artifactIdsJson = JSON.stringify((params.artifactIds || []).filter((id) => Number.isFinite(id) && id > 0));
+    const internalOnly = params.internalOnly ? 1 : 0;
+    {
+        const createdOrder = determineInsertPositionTx(db, params.projectId, params.insertAfterTaskId);
         const status = {};
         for (const p of participants)
             status[p] = false;
         const result = db.prepare(`
       INSERT INTO todo_active (
-        project_id, conversation_id, origin, created_by_bot_id, title, details,
-        participants, status, created_order, success_criteria, created_at, last_updated, version
+        project_id, conversation_id, origin, created_by_bot_id, owner_bot_id, owner_name,
+        task_type, profile_name, next_worker_bot_id, next_worker_name, next_worker_role,
+        title, details, task_prompt, handoff_prompt, output_summary, artifact_ids_json,
+        success_criteria, internal_only, participants, status, created_order, created_at, last_updated, version
       )
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1)
-    `).run(params.projectId ?? null, params.conversationId ?? null, origin, createdByBotId, title, details, JSON.stringify(participants), JSON.stringify(status), createdOrder, successCriteria, now(), now());
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1)
+    `).run(params.projectId ?? null, params.conversationId ?? null, origin, createdByBotId, ownerBotId, ownerName, taskType, profileName, nextWorkerBotId, nextWorkerName, nextWorkerRole, title, details, taskPrompt, handoffPrompt, outputSummary, artifactIdsJson, successCriteria, internalOnly, JSON.stringify(participants), JSON.stringify(status), createdOrder, now(), now());
         const id = Number(result.lastInsertRowid);
         logTodoAuditTx(db, id, 'active', 'add', params.actor, {
             title,
@@ -1779,11 +2163,19 @@ function addTodoTask(params) {
             conversationId: params.conversationId ?? null,
             origin,
             createdByBotId,
+            ownerBotId,
+            ownerName,
+            taskType,
+            profileName,
+            nextWorkerBotId,
+            nextWorkerName,
+            nextWorkerRole,
+            insertAfterTaskId: params.insertAfterTaskId ?? null,
+            internalOnly,
         });
         const row = db.prepare('SELECT * FROM todo_active WHERE id = ?').get(id);
         return normalizeTodoRow(row, 'active');
-    });
-    return tx();
+    }
 }
 function editTodoTask(taskId, params) {
     const db = getDb();
@@ -1919,6 +2311,289 @@ function completeTodoTaskByUser(taskId, params) {
     });
     return tx();
 }
+function listTodoArtifactsForTask(taskId, state = 'active') {
+    const task = getTodoTask(taskId, state);
+    if (!task || task.artifact_ids.length === 0)
+        return [];
+    const placeholders = task.artifact_ids.map(() => '?').join(', ');
+    const rows = getDb().prepare(`SELECT * FROM todo_artifact WHERE id IN (${placeholders}) ORDER BY id ASC`).all(...task.artifact_ids);
+    return rows.map((row) => normalizeArtifactRow(row));
+}
+function completeTodoTaskByWorker(taskId, params) {
+    if (params.actor.actorType !== 'llm' && params.actor.actorType !== 'orchestrator') {
+        throw new Error('Only worker LLMs or orchestrator can complete workflow TODOs');
+    }
+    const db = getDb();
+    const tx = db.transaction(() => {
+        const row = db.prepare('SELECT * FROM todo_active WHERE id = ?').get(taskId);
+        if (!row)
+            throw new Error(`Task ${taskId} not found`);
+        if (params.expectedVersion !== undefined && Number(row.version) !== Number(params.expectedVersion)) {
+            throw new Error('Conflict: task version changed');
+        }
+        if (params.expectedLastUpdated !== undefined && String(row.last_updated) !== String(params.expectedLastUpdated)) {
+            throw new Error('Conflict: task was updated by another actor');
+        }
+        const currentTask = normalizeTodoRow(row, 'active');
+        const actorName = String(params.actor.actorId || '').trim();
+        const actorBot = resolveAgentByName(actorName);
+        const isAssignedWorker = Boolean(actorName &&
+            currentTask.owner_name &&
+            actorName.toLowerCase() === currentTask.owner_name.toLowerCase());
+        const isOrchestratorActor = params.actor.actorType === 'orchestrator';
+        if (!isAssignedWorker && !isOrchestratorActor) {
+            throw new Error(`Actor "${actorName || 'unknown'}" is not the owner of task ${taskId}`);
+        }
+        const existingArtifactRows = loadArtifactRowsByIdsTx(db, currentTask.artifact_ids);
+        const newArtifactRows = resolveArtifactRowsTx(db, params.artifactRefs || [], {
+            projectId: currentTask.project_id,
+            conversationId: currentTask.conversation_id,
+            createdByBotId: actorBot?.id || currentTask.owner_bot_id || currentTask.created_by_bot_id,
+        });
+        const artifactRowsById = new Map();
+        for (const item of [...existingArtifactRows, ...newArtifactRows])
+            artifactRowsById.set(item.id, item);
+        const artifactRows = Array.from(artifactRowsById.values()).sort((a, b) => a.id - b.id);
+        const artifactIds = artifactRows.map((item) => item.id);
+        const outputSummary = params.outputSummary?.trim() || currentTask.output_summary || null;
+        const handoffPrompt = params.handoffPrompt?.trim() || currentTask.handoff_prompt || null;
+        db.prepare(`
+      UPDATE todo_active
+      SET output_summary = ?,
+          handoff_prompt = ?,
+          artifact_ids_json = ?,
+          last_updated = ?,
+          version = version + 1
+      WHERE id = ?
+    `).run(outputSummary, handoffPrompt, JSON.stringify(artifactIds), now(), taskId);
+        logTodoAuditTx(db, taskId, 'active', 'worker_complete', params.actor, {
+            outputSummary,
+            artifactIds,
+            inserted: Boolean(params.insertTask),
+        });
+        const completedTask = moveActiveTaskToCompletedTx(db, taskId, params.actor, 'all_llms_complete');
+        let insertedTask;
+        let handedOffTask;
+        let returnedToOrchestrator = false;
+        if (params.insertTask) {
+            const allowedTargets = resolveAllowedWorkerNamesForInsertion(completedTask);
+            const requestedWorkerName = String(params.insertTask.nextWorker || '').trim();
+            if (!requestedWorkerName) {
+                throw new Error('Inserted worker task requires a next worker');
+            }
+            if (!allowedTargets.includes(requestedWorkerName.toLowerCase())) {
+                throw new Error(`Next worker "${requestedWorkerName}" is not allowed from this task`);
+            }
+            const targetWorker = resolveAgentByName(requestedWorkerName);
+            const orchestratorName = resolveOrchestratorName();
+            if (!targetWorker && (!orchestratorName || requestedWorkerName.toLowerCase() !== orchestratorName.toLowerCase())) {
+                throw new Error(`Unknown next worker "${requestedWorkerName}"`);
+            }
+            if (orchestratorName && requestedWorkerName.toLowerCase() === orchestratorName.toLowerCase()) {
+                returnedToOrchestrator = true;
+                logTodoAuditTx(db, taskId, 'completed', 'return_to_orchestrator', params.actor, {
+                    handoffPrompt: params.insertTask.prompt,
+                    title: params.insertTask.title,
+                });
+            }
+            else {
+                const participants = targetWorker?.name ? [targetWorker.name] : [requestedWorkerName];
+                insertedTask = insertTodoTaskTx(db, {
+                    projectId: completedTask.project_id,
+                    conversationId: completedTask.conversation_id,
+                    title: params.insertTask.title,
+                    details: params.insertTask.details || params.insertTask.prompt,
+                    participants,
+                    successCriteria: params.insertTask.successCriteria || undefined,
+                    ownerBotId: targetWorker?.id || null,
+                    ownerName: targetWorker?.name || requestedWorkerName,
+                    taskType: inferTaskTypeForAgent(targetWorker, params.insertTask.taskType),
+                    profileName: completedTask.profile_name || 'Programming',
+                    nextWorkerBotId: currentTask.owner_bot_id,
+                    nextWorkerName: currentTask.owner_name,
+                    nextWorkerRole: actorBot?.role_label || actorBot?.role_class || null,
+                    taskPrompt: params.insertTask.prompt,
+                    artifactIds,
+                    insertAfterTaskId: completedTask.id,
+                    actor: params.actor,
+                });
+                logTodoAuditTx(db, insertedTask.id, 'active', 'worker_insert', params.actor, {
+                    insertedAfterTaskId: completedTask.id,
+                    requestedWorkerName,
+                });
+            }
+        }
+        else {
+            const nextWorkerName = completedTask.next_worker_name?.trim();
+            if (nextWorkerName) {
+                const nextRow = completedTask.next_worker_bot_id
+                    ? db.prepare(`
+              SELECT * FROM todo_active
+              WHERE conversation_id = ?
+                AND id <> ?
+                AND owner_bot_id = ?
+                AND created_order > ?
+                AND COALESCE(internal_only, 0) = 0
+              ORDER BY created_order ASC, id ASC
+              LIMIT 1
+            `).get(completedTask.conversation_id, completedTask.id, completedTask.next_worker_bot_id, completedTask.created_order)
+                    : db.prepare(`
+              SELECT * FROM todo_active
+              WHERE conversation_id = ?
+                AND id <> ?
+                AND LOWER(COALESCE(owner_name, '')) = LOWER(?)
+                AND created_order > ?
+                AND COALESCE(internal_only, 0) = 0
+              ORDER BY created_order ASC, id ASC
+              LIMIT 1
+            `).get(completedTask.conversation_id, completedTask.id, nextWorkerName, completedTask.created_order);
+                if (nextRow) {
+                    const nextTask = normalizeTodoRow(nextRow, 'active');
+                    const handoffText = handoffPrompt?.trim()
+                        || outputSummary?.trim()
+                        || `Continue from the completed work summary: ${completedTask.title}`;
+                    const existingPrompt = nextTask.task_prompt?.trim() || nextTask.details || nextTask.title;
+                    const mergedArtifactIds = Array.from(new Set([...(nextTask.artifact_ids || []), ...artifactIds]));
+                    const nextPrompt = [
+                        'PREVIOUS WORKER HANDOFF',
+                        handoffText,
+                        '',
+                        'ORIGINAL ASSIGNED TODO',
+                        existingPrompt,
+                    ].join('\n');
+                    db.prepare(`
+            UPDATE todo_active
+            SET task_prompt = ?,
+                artifact_ids_json = ?,
+                last_updated = ?,
+                version = version + 1
+            WHERE id = ?
+          `).run(nextPrompt, JSON.stringify(mergedArtifactIds), now(), nextTask.id);
+                    handedOffTask = normalizeTodoRow(db.prepare('SELECT * FROM todo_active WHERE id = ?').get(nextTask.id), 'active');
+                    logTodoAuditTx(db, nextTask.id, 'active', 'edit', params.actor, {
+                        previousTaskId: completedTask.id,
+                        receivedHandoff: true,
+                    });
+                }
+                else {
+                    returnedToOrchestrator = true;
+                    logTodoAuditTx(db, taskId, 'completed', 'return_to_orchestrator', params.actor, {
+                        handoffPrompt,
+                        missingQueuedNextWorker: nextWorkerName,
+                    });
+                }
+            }
+            else {
+                returnedToOrchestrator = true;
+                logTodoAuditTx(db, taskId, 'completed', 'return_to_orchestrator', params.actor, {
+                    handoffPrompt,
+                });
+            }
+        }
+        return {
+            completedTask,
+            insertedTask,
+            handedOffTask,
+            artifacts: artifactRows,
+            returnedToOrchestrator,
+        };
+    });
+    return tx();
+}
+function blockTodoTaskByWorker(taskId, params) {
+    if (params.actor.actorType !== 'llm' && params.actor.actorType !== 'orchestrator') {
+        throw new Error('Only worker LLMs or orchestrator can block workflow TODOs');
+    }
+    const blockerSummary = String(params.blockerSummary || '').trim();
+    const checkedContext = String(params.checkedContext || '').trim();
+    const userQuestion = String(params.userQuestion || '').trim();
+    if (!blockerSummary)
+        throw new Error('Blocked worker task requires blockerSummary');
+    if (!checkedContext)
+        throw new Error('Blocked worker task requires checkedContext');
+    if (!userQuestion)
+        throw new Error('Blocked worker task requires userQuestion');
+    const db = getDb();
+    const tx = db.transaction(() => {
+        const row = db.prepare('SELECT * FROM todo_active WHERE id = ?').get(taskId);
+        if (!row)
+            throw new Error(`Task ${taskId} not found`);
+        if (params.expectedVersion !== undefined && Number(row.version) !== Number(params.expectedVersion)) {
+            throw new Error('Conflict: task version changed');
+        }
+        if (params.expectedLastUpdated !== undefined && String(row.last_updated) !== String(params.expectedLastUpdated)) {
+            throw new Error('Conflict: task was updated by another actor');
+        }
+        const currentTask = normalizeTodoRow(row, 'active');
+        const actorName = String(params.actor.actorId || '').trim();
+        const actorBot = resolveAgentByName(actorName);
+        const isAssignedWorker = Boolean(actorName &&
+            currentTask.owner_name &&
+            actorName.toLowerCase() === currentTask.owner_name.toLowerCase());
+        const isOrchestratorActor = params.actor.actorType === 'orchestrator';
+        if (!isAssignedWorker && !isOrchestratorActor) {
+            throw new Error(`Actor "${actorName || 'unknown'}" is not the owner of task ${taskId}`);
+        }
+        const existingArtifactRows = loadArtifactRowsByIdsTx(db, currentTask.artifact_ids);
+        const newArtifactRows = resolveArtifactRowsTx(db, params.artifactRefs || [], {
+            projectId: currentTask.project_id,
+            conversationId: currentTask.conversation_id,
+            createdByBotId: actorBot?.id || currentTask.owner_bot_id || currentTask.created_by_bot_id,
+        });
+        const artifactRowsById = new Map();
+        for (const item of [...existingArtifactRows, ...newArtifactRows])
+            artifactRowsById.set(item.id, item);
+        const artifactRows = Array.from(artifactRowsById.values()).sort((a, b) => a.id - b.id);
+        const artifactIds = artifactRows.map((item) => item.id);
+        db.prepare(`
+      UPDATE todo_active
+      SET blocker_summary = ?,
+          blocker_checked = ?,
+          blocker_question = ?,
+          artifact_ids_json = ?,
+          last_updated = ?,
+          version = version + 1
+      WHERE id = ?
+    `).run(blockerSummary, checkedContext, userQuestion, JSON.stringify(artifactIds), now(), taskId);
+        logTodoAuditTx(db, taskId, 'active', 'worker_blocked', params.actor, {
+            blockerSummary,
+            checkedContext,
+            userQuestion,
+            artifactIds,
+        });
+        logTodoAuditTx(db, taskId, 'active', 'return_to_orchestrator', params.actor, {
+            blocked: true,
+            blockerSummary,
+            userQuestion,
+        });
+        const blockedTask = normalizeTodoRow(db.prepare('SELECT * FROM todo_active WHERE id = ?').get(taskId), 'active');
+        const orchestratorBot = getOrchestratorBot();
+        const ownerRole = String(actorBot?.role_label || actorBot?.role_class || currentTask.task_type || 'general').trim() || 'general';
+        const effectivePolicy = getEffectiveOrchestrationPolicy(currentTask.project_id || undefined);
+        const orchestratorPrompt = (0, orchestrator_blocked_prompt_1.buildBlockedWorkerOrchestratorPrompt)({
+            orchestratorName: orchestratorBot?.name || 'Orchestrator',
+            workerName: blockedTask.owner_name || actorName || 'Worker',
+            workerRole: ownerRole,
+            taskTitle: blockedTask.title,
+            taskPrompt: blockedTask.task_prompt || blockedTask.details || '(not set)',
+            projectId: blockedTask.project_id,
+            projectName: blockedTask.project_id ? getProject(blockedTask.project_id)?.name || null : null,
+            workspacePath: blockedTask.project_id ? getProject(blockedTask.project_id)?.folder || null : null,
+            effectivePolicy,
+            artifactRefs: artifactRows.map((item) => item.path_or_ref),
+            blockerSummary,
+            checkedContext,
+            userQuestion,
+        });
+        return {
+            blockedTask,
+            artifacts: artifactRows,
+            returnedToOrchestrator: true,
+            orchestratorPrompt,
+        };
+    });
+    return tx();
+}
 function deleteTodoTask(taskId, params) {
     if (params.actor.actorType !== 'user' && params.actor.actorType !== 'orchestrator')
         throw new Error('Only user or orchestrator can delete tasks');
@@ -1999,6 +2674,16 @@ function getLatestActiveTodoForConversation(conversationId) {
         return undefined;
     return normalizeTodoRow(row, 'active');
 }
+function getNextActiveTodoForConversation(conversationId) {
+    const row = getDb().prepare('SELECT * FROM todo_active WHERE conversation_id = ? AND COALESCE(internal_only, 0) = 0 ORDER BY created_order ASC, id ASC LIMIT 1').get(conversationId);
+    if (!row)
+        return undefined;
+    return normalizeTodoRow(row, 'active');
+}
+function listCompletedTodoTasksForConversation(conversationId) {
+    const rows = getDb().prepare('SELECT * FROM todo_completed WHERE conversation_id = ? AND COALESCE(internal_only, 0) = 0 ORDER BY created_order ASC, id ASC').all(conversationId);
+    return rows.map((row) => normalizeTodoRow(row, 'completed'));
+}
 exports.UNASSIGNED_PROJECT_NAME = 'unassigned';
 function createProject(p) {
     const db = getDb();
@@ -2008,6 +2693,14 @@ function createProject(p) {
         .run(id, p.name, p.description ?? null, p.folder ?? null, p.operatingPrompt ?? null, ts, ts);
     return db.prepare('SELECT * FROM project WHERE id = ?').get(id);
 }
+function upsertProject(project) {
+    const db = getDb();
+    db.prepare(`
+    INSERT INTO project (id, name, folder, description, created_at, updated_at, archived, sort_order)
+    VALUES (?, ?, ?, ?, datetime('now'), datetime('now'), 0, 0)
+    ON CONFLICT(id) DO UPDATE SET name=excluded.name, folder=excluded.folder, description=excluded.description, updated_at=datetime('now')
+  `).run(project.id, project.name, project.folder || null, project.description || null);
+}
 function getProject(id) {
     const db = getDb();
     const row = db.prepare('SELECT * FROM project WHERE id = ?').get(id);
@@ -2088,7 +2781,7 @@ function getProjectOverview(projectId) {
         label: connection.label || null,
         status: connection.status,
         defaultModel: connection.default_model || null,
-        hasSecret: Boolean(connection.api_key_enc || connection.oauth_token),
+        hasSecret: connection.access_mode === 'cli' || Boolean(connection.api_key_enc),
     }));
     const userPolicy = getUserOrchestrationPolicy() || null;
     const projectPolicyOverride = getProjectOrchestrationPolicyOverride(projectId) || null;