runMigrations reads SQL files from the migrations/ directory (bundled with this Lambda via CDK's bundling configuration), splits each file into indivi

stripHTML removes all HTML tags and normalizes whitespace.

stubSecret is the test-side getSecret function passed into newRouter. It returns the same 32-byte secret used by pkg/auth tests.

summarizeSingle sends messages to the LLM for summarization. If the request is too long (prompt-too-long error), it retries by dropping the oldest 20%

truncateBytes truncates a string to at most maxBytes, backing up to the nearest UTF-8 character boundary to avoid splitting multi-byte chars.

GetSkillFromWorkspace returns the (author, name) skill installed in the given workspace, or an error if not installed.

===================================================================== System scope ===================================================================

===================================================================== User scope =====================================================================

===================================================================== Workspace scope ================================================================

Handler returns an http.HandlerFunc that upgrades the request to a WebSocket, authenticates it, registers the connection on both the Bus (for Bus.Send

List returns a copy of the registry's tools.

New returns a Client that talks to baseURL (e.g. "https://api.example.com"). The default HTTP timeout is 30s for the API and 15 minutes for reply call

NewFromContext creates an Agent with an existing conversation context, used when restoring a session. contextMessages is the Agent's compressed workin

OpenBucket dispatches to a gocloud.dev/blob driver by URL scheme. Supported URLs: s3://<bucket>?region=<region> AWS S3 or any S3-compatible (Seaweed

Send writes payload to the connection identified by connID. Returns wsbus.ErrConnGone if the connection is not tracked; the caller typically responds

ToProviderMessages converts store messages to provider messages for feeding into Agent. Agent doesn't know about store types.

Token returns the current bearer token, or "" if no Login has succeeded and SetToken has not been called.

doAt is the shared HTTP roundtrip implementation. It encodes the body, attaches the bearer token, sends the request via the supplied client, and maps

doFetch performs an HTTP GET with the given User-Agent and returns the response and body. The response body is limited to maxResponseBytes.

extractDDGURL extracts the actual URL from DuckDuckGo's redirect wrapper. DuckDuckGo wraps URLs like: //duckduckgo.com/l/?uddg=<encoded_url>&rut=... I

fallbackSummary creates a crude summary when LLM summarization fails. Takes the first 10% of each message (min 200 runes) and joins with " | ".

formatFetchResult builds the final text returned to the agent.

isContextLengthError checks if an error is a context-length / prompt-too-long error. Matches against known error strings from both providers: OpenAI:

listenWS returns a Bubble Tea command that reads WebSocket messages in a goroutine and sends them to the TUI as wsEventMsg. Bubble Tea commands are fu

===================================================================== Data key cache loaders (read-only) =============================================

looksLikeHTML checks if the content starts with common HTML markers.

newGCM constructs a GCM cipher around an AES block cipher keyed with dataKey. It is shared by EncryptAESGCM and DecryptAESGCM.

pingWS sends a WebSocket ping every 5 minutes to prevent API Gateway's 10-minute idle timeout. Returns a wsPingMsg to schedule the next ping. https://

queryColumns returns all user-defined columns from information_schema, sorted by table name and column name for deterministic comparison.

queryConstraints returns all table constraints from information_schema.

queryIndexes returns all user-defined indexes from pg_indexes.

readFile reads a single file from the skill's storage directory. TODO: add a size limit (io.LimitReader) so a huge file doesn't eat all Lambda memory.

Run does the actual work and returns an exit code. Separated from main so testscript can invoke it in-process without killing the test binary.

toProviderTools converts tool.Tool (internal, contains Run function) into provider.Tool (serializable, sent to LLM). The Run function is stripped beca

untrack removes a connection. Idempotent; called on client disconnect and when Registry.Register fails after upgrade.

Memberships

Child tables (messages, members, agents) are scoped by session_id. Access control is enforced by first looking up the session with workspace_id.

Chat sends a message to a session and waits for the final reply. The reply Lambda streams intermediate state via WebSocket; Chat ignores that stream a

CreateAgent creates an agent profile and attaches it to the given workspace in a single transaction.

Connections TODO: reconsider whether a connection should be bound to a workspace. Slack/Discord style is one connection per user, with workspace_id ca

CreateSession creates a new chat session in the given workspace owned by userID and attached to one or more agents.

Users

Connections

Workspaces

FormatUserMemoryForPrompt FormatForPrompt returns the memories that agent X has recorded about user Y as a single string for injection into the system

FullName returns the "author/name" identifier for this skill.

User Passwords

User scope

InstallSkill records a skill installation in the given workspace. The metadata is snapshotted at install time so the agent doesn't need to call the re