stageflow 0.36.0 → 0.40.0

package/dist/operatorAgent/profiles/agentAuthorPlaybook.js

@@ -0,0 +1,29 @@
+export const AGENT_AUTHOR_PLAYBOOK = `You are the Stageflow Agent author. You draft one sealed project agent with the operator. You are not a task runner, and you do not write files.
+
+## How you talk
+- Short turns, plain words, present tense. One to four sentences.
+- Do not narrate tool names. Say what changed in the config.
+- The config panel shows the draft. The operator can edit it directly; your next patch builds on what they changed.
+
+## Tools
+- read_project_file and list_project_files are read-only. Use them when the operator points at the project, an existing agent file, or AGENTS.md.
+- list_mcp_servers names the servers in .mcp.json. Only grant MCP servers that exist there; if the operator wants one that isn't there, say so.
+- update_agent_draft applies a patch to the draft immediately. Call it as soon as you know enough. Do not wait for Keep. If it reports issues, fix them with another patch.
+- Never use bash, write, or edit. Save is the operator's button, not a tool.
+
+## The draft (agents/<id>.agent.yaml schema)
+- id (snake_case, starts with a letter; derived from name when omitted), name, description, greeting, instructions (required).
+- model: { backend: pi | claude, id?: "provider/model", thinking: low | medium | high }. Leave id out to use the project default unless they name one, and say so.
+- tools: { builtin: [read | write | shell] (whole groups), builtin_tools: [read | grep | find | ls | write | edit | bash] (single tools), stageflow: { groups: [...], tools: [...] }, mcp: { <server>: [tool names] or ["*"] }, skills: [names], browser: bool }.
+- approvals: { ask_first: [tool ids], approvers: { operators: bool, channel_ids: [] }, timeout_minutes, on_timeout: skip | deny }.
+  Tool ids: builtin names (read, grep, find, ls, write, edit, bash), "<server>.<tool>" for MCP, "agent:<id>" for sub-agents. ask_first may only name granted tools.
+- sub_agents: [agent ids], observability: { capture: off | metadata | full }, limits: { session_minutes, max_turns, cost_usd | null, long_context: summarize | truncate }, guardrails: { block_patterns: [JavaScript regex] }, schedule: { cron, timezone?, message? }.
+
+## Defaults
+- A new agent saves disabled and starts sealed: read only. Write and shell stay off unless the job needs them.
+- Anything that sends, posts, writes, merges or deletes goes in approvals.ask_first.
+- Capture stays metadata unless they ask for full content.
+
+## After an edit
+- One sentence on what the agent will do now. Mention any assumption or open question. Do not paste YAML unless they ask.
+`;

package/dist/operatorAgent/profiles/workshopAuthor.js

@@ -1,4 +1,5 @@
 import { parse as parseYaml } from "yaml";
+import { peekDefaultModel } from "../../models/catalog.js";
 import { validateDraftPackage, } from "../../config/draftPackage.js";
 import { createFilesystemDocsRetriever, } from "../docsRetrieval.js";
 import { readDraftFromContext, workshopDraftContextAdapter, WORKSHOP_AUTHOR_GREETING, } from "../draftContext.js";
@@ -8,7 +9,6 @@ import { buildCreateStageDraft, buildCreateTaskDraft, createSaveTool, createWork
 export const WORKSHOP_AUTHOR_PROFILE_ID = "workshop-author";
 export { WORKSHOP_AUTHOR_PLAYBOOK };
 export { WORKSHOP_AUTHOR_TOOL_NAMES, WORKSHOP_FORBIDDEN_AGENT_TOOLS, buildCreateStageDraft, buildCreateTaskDraft, buildEditStageDraft, buildEditTaskDraft, buildCreatePipelineDraft, buildEditPipelineDraft, createSaveTool, createWorkshopAuthorMutatingTools, } from "./workshopAuthorTools.js";
-const DEFAULT_MODEL = "anthropic/claude-sonnet-4-5";
 const REQUIRED_IO = {
     io: {
         input: { schema: { type: "object" } },
@@ -56,7 +56,7 @@ export function buildStageAddProposal(draft, userText) {
                     body: {
                         id: stageId,
                         system_prompt: `Stage for: ${userText.trim() || "workshop draft"}`,
-                        model: DEFAULT_MODEL,
+                        model: peekDefaultModel(),
                         ...REQUIRED_IO,
                     },
                 },

package/dist/operatorAgent/profiles/workshopAuthorTools.js

@@ -1,4 +1,5 @@
 import path from "node:path";
+import { peekDefaultModel } from "../../models/catalog.js";
 import { parse as parseYaml } from "yaml";
 import { CatalogPathError, resolveDefaultWriteRoot, } from "../../config/catalogRelativePath.js";
 import { defaultWorkshopPackageDirectory } from "../../config/ensureCatalogScanRoot.js";
@@ -33,7 +34,6 @@ export const WORKSHOP_AUTHOR_TOOL_NAMES = [
     "retrieve_docs",
 ];
 export const WORKSHOP_FORBIDDEN_AGENT_TOOLS = ["bash", "write", "edit"];
-const DEFAULT_MODEL = "anthropic/claude-sonnet-4-5";
 const REQUIRED_IO = {
     io: {
         input: { schema: { type: "object" } },
@@ -193,7 +193,7 @@ export function buildCreateStageDraft(draft, args) {
         system_prompt: stringArg(args, "system_prompt") ??
             stringArg(args, "systemPrompt") ??
             `Stage for: ${stringArg(args, "summary") ?? stageId}`,
-        model: stringArg(args, "model") ?? DEFAULT_MODEL,
+        model: stringArg(args, "model") ?? peekDefaultModel(),
         ...REQUIRED_IO,
         ...(bodyFromArgs ?? {}),
     };
@@ -265,7 +265,7 @@ export function buildEditStageDraft(draft, args) {
         ...(existingArt?.body ?? {
             id: stageId,
             system_prompt: `Stage ${stageId}`,
-            model: DEFAULT_MODEL,
+            model: peekDefaultModel(),
             ...REQUIRED_IO,
         }),
         ...patch,

package/dist/operatorAgent/proposals.d.ts

@@ -21,6 +21,7 @@ export type UndoMutationResult = {
     notice?: string;
 };
 export declare function draftFingerprint(draft: DraftPackage): string;
+export declare function operatorContextFingerprint(context: unknown): string;
 export declare function formatArtifact(value: unknown): string;
 export declare function diffDraftPackages(before: DraftPackage, after: DraftPackage): ProposalArtifactDiff[];
 export declare function affectedStageIds(before: DraftPackage, after: DraftPackage): string[];

package/dist/operatorAgent/proposals.js

@@ -1,8 +1,14 @@
+import { isAgentAuthorContext } from "./agentAuthorContext.js";
 import { readDraftFromContext } from "./draftContext.js";
 const UNDO_CONFLICT_NOTICE = "Undo blocked: the draft changed after this mutation. Ask the agent to reverse the change instead of rejecting.";
 export function draftFingerprint(draft) {
     return JSON.stringify(draft);
 }
+export function operatorContextFingerprint(context) {
+    if (isAgentAuthorContext(context))
+        return JSON.stringify(context.draft);
+    return draftFingerprint(readDraftFromContext(context));
+}
 export function formatArtifact(value) {
     return JSON.stringify(value, null, 2);
 }
@@ -117,6 +123,21 @@ export function affectedStageIds(before, after) {
     return [...ids];
 }
 export function enrichProposal(proposal, currentContext) {
+    if (isAgentAuthorContext(proposal.nextContext) ||
+        isAgentAuthorContext(currentContext) ||
+        isAgentAuthorContext(proposal.baseContext)) {
+        const base = isAgentAuthorContext(proposal.baseContext)
+            ? proposal.baseContext
+            : currentContext;
+        return {
+            ...proposal,
+            baseContext: base,
+            baseFingerprint: proposal.baseFingerprint ?? operatorContextFingerprint(base),
+            appliedFingerprint: proposal.appliedFingerprint ?? operatorContextFingerprint(proposal.nextContext),
+            artifacts: proposal.artifacts ?? [],
+            affectedStageIds: proposal.affectedStageIds ?? [],
+        };
+    }
     const baseDraft = readDraftFromContext(proposal.baseContext ?? currentContext);
     const nextDraft = readDraftFromContext(proposal.nextContext);
     const baseContext = proposal.baseContext ??
@@ -132,11 +153,11 @@ export function enrichProposal(proposal, currentContext) {
 }
 /** True when the live draft no longer matches the post-apply fingerprint. */
 export function isMutationConflict(mutation, currentContext) {
-    const current = draftFingerprint(readDraftFromContext(currentContext));
+    const current = operatorContextFingerprint(currentContext);
     if (mutation.appliedFingerprint) {
         return mutation.appliedFingerprint !== current;
     }
-    const next = draftFingerprint(readDraftFromContext(mutation.nextContext));
+    const next = operatorContextFingerprint(mutation.nextContext);
     return next !== current;
 }
 export const UNDO_MUTATION_CONFLICT_NOTICE = UNDO_CONFLICT_NOTICE;

package/dist/package-meta.d.ts

@@ -1,3 +1,3 @@
 export declare const PACKAGE_NAME = "stageflow";
-export declare const PACKAGE_VERSION = "0.36.0";
+export declare const PACKAGE_VERSION = "0.40.0";
 export declare const BUILD_SHA: string;

package/dist/package-meta.js

@@ -1,3 +1,3 @@
 export const PACKAGE_NAME = "stageflow";
-export const PACKAGE_VERSION = "0.36.0";
+export const PACKAGE_VERSION = "0.40.0";
 export const BUILD_SHA = process.env.STAGEFLOW_BUILD_SHA ?? "unknown";

package/dist/preflight/pipelinePreflight.js

@@ -115,6 +115,7 @@ export async function checkStageMcpResolution(loaded, options) {
                 allowlist,
                 env: stageEnv,
                 stageId: stage.id,
+                scope: { kind: "stage", secrets: (stage.secrets ?? []).map((d) => d.name) },
             });
             for (const server of allowlist) {
                 items.push({

package/dist/runstore/createStore.d.ts

@@ -40,3 +40,5 @@ export declare function createRunStoreWithConnection(config: RunStoreConfig): {
  */
 export declare function createRunStore(config: RunStoreConfig): RunStore;
 export type { RunStore };
+/** The SQLite connection behind a RunStore, when it has one (tests may inject a fake store). */
+export declare function sqliteConnectionFromStore(store: RunStore): Database.Database | undefined;

package/dist/runstore/createStore.js

@@ -89,3 +89,11 @@ export function createRunStoreWithConnection(config) {
 export function createRunStore(config) {
     return createRunStoreWithConnection(config).store;
 }
+/** The SQLite connection behind a RunStore, when it has one (tests may inject a fake store). */
+export function sqliteConnectionFromStore(store) {
+    const connection = store.connection;
+    if (connection !== null && typeof connection?.prepare === "function") {
+        return connection;
+    }
+    return undefined;
+}

package/dist/runstore/overviewSummary.d.ts

@@ -0,0 +1,56 @@
+import type { RunStatus } from "./port.js";
+export declare const OVERVIEW_RANGES: readonly ["24h", "7d", "30d"];
+export type OverviewRange = (typeof OVERVIEW_RANGES)[number];
+export declare function isOverviewRange(value: string): value is OverviewRange;
+export declare function overviewWindowMs(range: OverviewRange): number;
+/** One run, as much as the overview needs; no stages. */
+export type OverviewRunRow = {
+    run_id: string;
+    pipeline_id: string;
+    status: RunStatus;
+    created_at: string;
+    finished_at?: string;
+    cost_usd?: number;
+};
+export type OverviewTotals = {
+    runs: number;
+    succeeded: number;
+    failed: number;
+    cancelled: number;
+    in_flight: number;
+    /** succeeded + failed. Cancelled runs are neither a success nor a failure. */
+    finished: number;
+    success_rate: number | null;
+    cost_usd: number;
+};
+export type OverviewBucket = {
+    start: string;
+    succeeded: number;
+    failed: number;
+    cancelled: number;
+};
+export type OverviewPipeline = {
+    pipeline_id: string;
+    runs: number;
+    succeeded: number;
+    failed: number;
+    cancelled: number;
+    success_rate: number | null;
+    median_duration_ms: number | null;
+    cost_usd: number;
+    last_run_at: string;
+};
+export type OverviewSummary = {
+    range: OverviewRange;
+    generated_at: string;
+    since: string;
+    totals: OverviewTotals;
+    previous: OverviewTotals;
+    buckets: OverviewBucket[];
+    pipelines: OverviewPipeline[];
+};
+/**
+ * Rows must cover `[now - 2 * window, now]` by `created_at`; the older half feeds `previous`.
+ * Buckets are rolling segments ending at `now`, so they need no time zone.
+ */
+export declare function buildOverview(rows: readonly OverviewRunRow[], range: OverviewRange, now?: Date): OverviewSummary;

package/dist/runstore/overviewSummary.js

@@ -0,0 +1,134 @@
+export const OVERVIEW_RANGES = ["24h", "7d", "30d"];
+export function isOverviewRange(value) {
+    return OVERVIEW_RANGES.includes(value);
+}
+const HOUR_MS = 3_600_000;
+const RANGE_SHAPE = {
+    "24h": { windowMs: 24 * HOUR_MS, bucketMs: 3 * HOUR_MS },
+    "7d": { windowMs: 7 * 24 * HOUR_MS, bucketMs: 24 * HOUR_MS },
+    "30d": { windowMs: 30 * 24 * HOUR_MS, bucketMs: 3 * 24 * HOUR_MS },
+};
+export function overviewWindowMs(range) {
+    return RANGE_SHAPE[range].windowMs;
+}
+function emptyTotals() {
+    return {
+        runs: 0,
+        succeeded: 0,
+        failed: 0,
+        cancelled: 0,
+        in_flight: 0,
+        finished: 0,
+        success_rate: null,
+        cost_usd: 0,
+    };
+}
+function tally(rows) {
+    const totals = emptyTotals();
+    for (const row of rows) {
+        totals.runs += 1;
+        if (row.status === "succeeded")
+            totals.succeeded += 1;
+        else if (row.status === "failed")
+            totals.failed += 1;
+        else if (row.status === "cancelled")
+            totals.cancelled += 1;
+        else
+            totals.in_flight += 1;
+        totals.cost_usd += row.cost_usd ?? 0;
+    }
+    totals.finished = totals.succeeded + totals.failed;
+    totals.success_rate = totals.finished > 0 ? totals.succeeded / totals.finished : null;
+    totals.cost_usd = roundCost(totals.cost_usd);
+    return totals;
+}
+function roundCost(value) {
+    return Math.round(value * 10_000) / 10_000;
+}
+function median(values) {
+    if (values.length === 0)
+        return null;
+    const sorted = [...values].sort((a, b) => a - b);
+    const mid = Math.floor(sorted.length / 2);
+    return sorted.length % 2 === 1 ? sorted[mid] : Math.round((sorted[mid - 1] + sorted[mid]) / 2);
+}
+function durationMs(row) {
+    if (row.status !== "succeeded" && row.status !== "failed")
+        return null;
+    if (!row.finished_at)
+        return null;
+    const ms = Date.parse(row.finished_at) - Date.parse(row.created_at);
+    return Number.isFinite(ms) && ms >= 0 ? ms : null;
+}
+/**
+ * Rows must cover `[now - 2 * window, now]` by `created_at`; the older half feeds `previous`.
+ * Buckets are rolling segments ending at `now`, so they need no time zone.
+ */
+export function buildOverview(rows, range, now = new Date()) {
+    const { windowMs, bucketMs } = RANGE_SHAPE[range];
+    const nowMs = now.getTime();
+    const sinceMs = nowMs - windowMs;
+    const previousSinceMs = sinceMs - windowMs;
+    const current = [];
+    const previous = [];
+    for (const row of rows) {
+        const created = Date.parse(row.created_at);
+        if (!Number.isFinite(created))
+            continue;
+        if (created >= sinceMs && created <= nowMs)
+            current.push(row);
+        else if (created >= previousSinceMs && created < sinceMs)
+            previous.push(row);
+    }
+    const bucketCount = windowMs / bucketMs;
+    const buckets = Array.from({ length: bucketCount }, (_, i) => ({
+        start: new Date(sinceMs + i * bucketMs).toISOString(),
+        succeeded: 0,
+        failed: 0,
+        cancelled: 0,
+    }));
+    for (const row of current) {
+        const index = Math.min(bucketCount - 1, Math.floor((Date.parse(row.created_at) - sinceMs) / bucketMs));
+        const bucket = buckets[index];
+        if (row.status === "succeeded")
+            bucket.succeeded += 1;
+        else if (row.status === "failed")
+            bucket.failed += 1;
+        else if (row.status === "cancelled")
+            bucket.cancelled += 1;
+    }
+    const byPipeline = new Map();
+    for (const row of current) {
+        const list = byPipeline.get(row.pipeline_id);
+        if (list)
+            list.push(row);
+        else
+            byPipeline.set(row.pipeline_id, [row]);
+    }
+    const pipelines = [...byPipeline.entries()]
+        .map(([pipeline_id, list]) => {
+        const totals = tally(list);
+        const durations = list.map(durationMs).filter((ms) => ms !== null);
+        return {
+            pipeline_id,
+            runs: totals.runs,
+            succeeded: totals.succeeded,
+            failed: totals.failed,
+            cancelled: totals.cancelled,
+            success_rate: totals.success_rate,
+            median_duration_ms: median(durations),
+            cost_usd: totals.cost_usd,
+            last_run_at: list.reduce((latest, row) => (row.created_at > latest ? row.created_at : latest), list[0].created_at),
+        };
+    })
+        .sort((a, b) => b.runs - a.runs || a.pipeline_id.localeCompare(b.pipeline_id));
+    return {
+        range,
+        generated_at: now.toISOString(),
+        since: new Date(sinceMs).toISOString(),
+        totals: tally(current),
+        previous: tally(previous),
+        buckets,
+        pipelines,
+    };
+}

package/dist/runstore/port.d.ts

@@ -7,6 +7,7 @@ import type { FeedbackLoopConfig, InlinePipelineDefinition, ResolvedPipelineDag
 import type { CompletionCheck } from "../types/completion.js";
 import type { StageGateKind } from "../types/stage.js";
 import type { StageUsage } from "../types/usage.js";
+import type { OverviewRunRow } from "./overviewSummary.js";
 export type { ConfigOriginRecord };
 export type RunStatus = "created" | "queued" | "running" | "succeeded" | "failed" | "cancelled";
 export type RunPipelineDagSnapshot = ResolvedPipelineDag & {
@@ -463,6 +464,8 @@ export interface RunStore {
     }): Promise<void>;
     listStageEvents(runId: string, stageId: string, attempt?: number): Promise<StageLogEvent[]>;
     listRuns(filter?: ListRunsFilter): Promise<RunSummary[]>;
+    /** One light row per run created at or after `since` (ISO), newest first, with summed stage cost. No stages are loaded. */
+    listRunOverviewRows(since: string): Promise<OverviewRunRow[]>;
     /** Idempotent upsert; returns the realpath/resolve-normalized absolute key. */
     ensureProject(absPath: string): Promise<string>;
     /** Absolute roots from the durable projects registry. */

package/dist/runstore/sqlite/SqliteRunStore.d.ts

@@ -2,6 +2,7 @@ import Database from "better-sqlite3";
 import type { StageEnvelope } from "../../types/envelope.js";
 import type { StageLogLine } from "../../agent/activity.js";
 import { type CreateFeedbackLoopInput, type CreateFeedbackReplayInput, type CreateFeedbackReplayStagePassInput, type CreateForkGenerationInput, type CreateRunInput, type CreatedRun, type FeedbackLoopPatch, type FeedbackLoopRecord, type FeedbackLoopState, type FeedbackReplayPatch, type FeedbackReplayRecord, type FeedbackReplayStagePassPatch, type FeedbackReplayStagePassRecord, type ForkGenerationPatch, type ForkGenerationRecord, type ListRunsFilter, type RunDetail, type RunMeta, type RunPipelineDagSnapshot, type RunStatus, type RunStore, type RunSummary, type StageExecution, type StageExecutionPatch, type StageLogEvent, type TriggerRecord, type UpsertTriggerInput, type VerificationCheckResult, type VerificationCheckResultPatch, type ConfigOriginRecord } from "../port.js";
+import type { OverviewRunRow } from "../overviewSummary.js";
 import { type RunSubmissionRecord } from "../submission.js";
 type SqliteRunStoreOpenerMode = "assert" | "migrate";
 export declare class SqliteRunStore implements RunStore {
@@ -76,6 +77,7 @@ export declare class SqliteRunStore implements RunStore {
     private updateStageStatusDenorm;
     listStageEvents(runId: string, stageId: string, attempt?: number): Promise<StageLogEvent[]>;
     listRuns(filter?: ListRunsFilter): Promise<RunSummary[]>;
+    listRunOverviewRows(since: string): Promise<OverviewRunRow[]>;
     ensureProject(absPath: string): Promise<string>;
     listRegisteredProjects(): Promise<string[]>;
     upsertTrigger(input: UpsertTriggerInput): Promise<TriggerRecord>;

package/dist/runstore/sqlite/SqliteRunStore.js

@@ -870,6 +870,24 @@ export class SqliteRunStore {
         }
         return summaries;
     }
+    async listRunOverviewRows(since) {
+        await this.ready();
+        const rows = this.db
+            .prepare(`SELECT r.run_id, r.pipeline_id, r.status, r.created_at, r.finished_at,
+                (SELECT SUM(e.cost_usd) FROM stage_executions e WHERE e.run_id = r.run_id) AS cost_usd
+         FROM runs r
+         WHERE r.created_at >= ?
+         ORDER BY r.created_at DESC`)
+            .all(since);
+        return rows.map((row) => ({
+            run_id: row.run_id,
+            pipeline_id: row.pipeline_id,
+            status: row.status,
+            created_at: row.created_at,
+            ...(row.finished_at != null ? { finished_at: row.finished_at } : {}),
+            ...(row.cost_usd != null ? { cost_usd: row.cost_usd } : {}),
+        }));
+    }
     async ensureProject(absPath) {
         await this.ready();
         const resolved = path.resolve(absPath);

package/dist/runstore/sqlite/migrations/013-agents.d.ts

@@ -0,0 +1,12 @@
+import type Database from "better-sqlite3";
+/**
+ * Project agents: revisions, sessions, transcript, approvals, turns, spans.
+ * Read and written only by `AgentStore` (src/agents/store.ts); kept out of the
+ * run/stage-shaped RunStore port. `project_key` scopes rows to one project root.
+ */
+export declare const MIGRATION_013: {
+    version: number;
+    name: string;
+    minStageflowVersion: string;
+    up(db: Database.Database): void;
+};

package/dist/runstore/sqlite/migrations/013-agents.js

@@ -0,0 +1,156 @@
+import { PACKAGE_VERSION } from "../../../package-meta.js";
+/**
+ * Project agents: revisions, sessions, transcript, approvals, turns, spans.
+ * Read and written only by `AgentStore` (src/agents/store.ts); kept out of the
+ * run/stage-shaped RunStore port. `project_key` scopes rows to one project root.
+ */
+export const MIGRATION_013 = {
+    version: 13,
+    name: "013_agents",
+    minStageflowVersion: PACKAGE_VERSION,
+    up(db) {
+        db.exec(`
+CREATE TABLE agent_definitions (
+  project_key TEXT NOT NULL,
+  agent_id TEXT NOT NULL,
+  current_revision INTEGER NOT NULL,
+  archived INTEGER NOT NULL DEFAULT 0,
+  file_hash TEXT,
+  issues_json TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (project_key, agent_id)
+);
+
+CREATE TABLE agent_revisions (
+  project_key TEXT NOT NULL,
+  agent_id TEXT NOT NULL,
+  revision INTEGER NOT NULL,
+  definition_json TEXT NOT NULL,
+  yaml_text TEXT NOT NULL,
+  source TEXT NOT NULL CHECK (source IN ('console', 'file', 'author', 'restore', 'api')),
+  author TEXT,
+  summary TEXT,
+  restored_from INTEGER,
+  created_at TEXT NOT NULL,
+  PRIMARY KEY (project_key, agent_id, revision)
+);
+
+CREATE TABLE agent_sessions (
+  session_id TEXT PRIMARY KEY NOT NULL,
+  project_key TEXT NOT NULL,
+  agent_id TEXT NOT NULL,
+  revision INTEGER NOT NULL,
+  backend TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('open', 'running', 'waiting', 'held', 'closed')),
+  source TEXT NOT NULL,
+  source_ref TEXT,
+  thread_key TEXT,
+  title TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE INDEX agent_sessions_agent_updated ON agent_sessions (project_key, agent_id, updated_at DESC);
+CREATE UNIQUE INDEX agent_sessions_thread ON agent_sessions (project_key, agent_id, thread_key)
+  WHERE thread_key IS NOT NULL;
+
+CREATE TABLE agent_messages (
+  message_id TEXT PRIMARY KEY NOT NULL,
+  session_id TEXT NOT NULL REFERENCES agent_sessions (session_id) ON DELETE CASCADE,
+  seq INTEGER NOT NULL,
+  turn_id TEXT,
+  role TEXT NOT NULL CHECK (role IN ('user', 'assistant')),
+  author TEXT,
+  text TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (session_id, seq)
+);
+
+CREATE TABLE agent_turns (
+  turn_id TEXT PRIMARY KEY NOT NULL,
+  session_id TEXT NOT NULL REFERENCES agent_sessions (session_id) ON DELETE CASCADE,
+  seq INTEGER NOT NULL,
+  revision INTEGER NOT NULL,
+  trace_id TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('running', 'waiting', 'succeeded', 'failed', 'cancelled')),
+  error_code TEXT,
+  input_tokens INTEGER,
+  output_tokens INTEGER,
+  cost_usd REAL,
+  started_at TEXT NOT NULL,
+  ended_at TEXT,
+  UNIQUE (session_id, seq)
+);
+
+CREATE TABLE agent_spans (
+  span_id TEXT PRIMARY KEY NOT NULL,
+  turn_id TEXT NOT NULL REFERENCES agent_turns (turn_id) ON DELETE CASCADE,
+  parent_span_id TEXT,
+  name TEXT NOT NULL,
+  kind TEXT NOT NULL,
+  status TEXT NOT NULL,
+  started_at TEXT NOT NULL,
+  ended_at TEXT,
+  duration_ms INTEGER,
+  input_tokens INTEGER,
+  output_tokens INTEGER,
+  attributes_json TEXT NOT NULL DEFAULT '{}',
+  input_text TEXT,
+  output_text TEXT
+);
+CREATE INDEX agent_spans_turn ON agent_spans (turn_id, started_at);
+
+CREATE TABLE agent_eval_scores (
+  turn_id TEXT NOT NULL REFERENCES agent_turns (turn_id) ON DELETE CASCADE,
+  metric TEXT NOT NULL,
+  score REAL NOT NULL,
+  recorded_at TEXT NOT NULL,
+  PRIMARY KEY (turn_id, metric)
+);
+
+CREATE TABLE agent_approvals (
+  approval_id TEXT PRIMARY KEY NOT NULL,
+  session_id TEXT NOT NULL REFERENCES agent_sessions (session_id) ON DELETE CASCADE,
+  turn_id TEXT,
+  tool TEXT NOT NULL,
+  payload_json TEXT NOT NULL,
+  payload_hash TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('pending', 'approved', 'denied', 'expired')),
+  created_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL,
+  decided_at TEXT,
+  actor_json TEXT
+);
+CREATE UNIQUE INDEX agent_approvals_one_pending ON agent_approvals (session_id) WHERE status = 'pending';
+
+CREATE TABLE agent_executed_payloads (
+  session_id TEXT NOT NULL REFERENCES agent_sessions (session_id) ON DELETE CASCADE,
+  payload_hash TEXT NOT NULL,
+  executed_at TEXT NOT NULL,
+  PRIMARY KEY (session_id, payload_hash)
+);
+
+CREATE TABLE agent_outbound_sends (
+  session_id TEXT NOT NULL REFERENCES agent_sessions (session_id) ON DELETE CASCADE,
+  operation_key TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('submitted', 'unknown')),
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (session_id, operation_key)
+);
+
+CREATE TABLE agent_inbound_events (
+  project_key TEXT NOT NULL,
+  dedupe_key TEXT NOT NULL,
+  received_at TEXT NOT NULL,
+  PRIMARY KEY (project_key, dedupe_key)
+);
+
+CREATE TABLE agent_schedules (
+  project_key TEXT NOT NULL,
+  agent_id TEXT NOT NULL,
+  next_run_at TEXT NOT NULL,
+  PRIMARY KEY (project_key, agent_id)
+);
+`);
+    },
+};

package/dist/runstore/sqlite/migrations/014-agent-deliveries.d.ts

@@ -0,0 +1,11 @@
+import type Database from "better-sqlite3";
+/**
+ * Replies to people on a channel (AgentMail, iMessage): one row per turn that has to reach someone, with how
+ * the send went, so a failed reply can be retried or resent and a reply of unknown outcome is never duplicated.
+ */
+export declare const MIGRATION_014: {
+    version: number;
+    name: string;
+    minStageflowVersion: string;
+    up(db: Database.Database): void;
+};

package/dist/runstore/sqlite/migrations/014-agent-deliveries.js

@@ -0,0 +1,32 @@
+import { PACKAGE_VERSION } from "../../../package-meta.js";
+/**
+ * Replies to people on a channel (AgentMail, iMessage): one row per turn that has to reach someone, with how
+ * the send went, so a failed reply can be retried or resent and a reply of unknown outcome is never duplicated.
+ */
+export const MIGRATION_014 = {
+    version: 14,
+    name: "014_agent_deliveries",
+    minStageflowVersion: PACKAGE_VERSION,
+    up(db) {
+        db.exec(`
+CREATE TABLE agent_deliveries (
+  turn_id TEXT PRIMARY KEY REFERENCES agent_turns (turn_id) ON DELETE CASCADE,
+  session_id TEXT NOT NULL REFERENCES agent_sessions (session_id) ON DELETE CASCADE,
+  connection_id TEXT NOT NULL,
+  provider TEXT NOT NULL,
+  reply_to TEXT NOT NULL,
+  text TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('pending', 'sending', 'delivered', 'failed', 'unknown')),
+  attempts INTEGER NOT NULL DEFAULT 0,
+  error_code TEXT,
+  error_message TEXT,
+  retryable INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+CREATE INDEX agent_deliveries_due ON agent_deliveries (state, next_attempt_at);
+CREATE INDEX agent_deliveries_session ON agent_deliveries (session_id);
+`);
+    },
+};