@desplega.ai/agent-swarm 1.102.0 → 1.104.0

package/dist/{cli-vgck9mqq.js → cli-23zk7xqy.js}

@@ -1,20 +1,14 @@
-import {
-  contentSha256,
-  resolveClaudeMdPath,
-  syncProfileFilesToServer,
-  writeIdentityBaselines
-} from "./cli-wjyyv518.js";
 import {
   authJsonToCredentialSelection,
   checkCodexCredentials,
   credentialsToAuthJson
-} from "./cli-axtg1zaa.js";
+} from "./cli-khe4x17a.js";
 import {
   loadAllCodexOAuthSlots
 } from "./cli-4wmnp8q3.js";
 import {
   checkClaudeManagedCredentials
-} from "./cli-s8jw5bmg.js";
+} from "./cli-yp2krx5r.js";
 import {
   checkDevinCredentials
 } from "./cli-tyfxrrdd.js";
@@ -29,7 +23,7 @@ import {
   withSpan,
   withSpanContext,
   writeSkillsToFilesystem
-} from "./cli-tsz1q7gk.js";
+} from "./cli-qvzgncd8.js";
 import {
   checkClaudeCredentials
 } from "./cli-p04j6hjv.js";
@@ -46,13 +40,20 @@ import {
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
+import {
+  contentSha256,
+  init_profile_sync,
+  resolveClaudeMdPath,
+  syncProfileFilesToServer,
+  writeIdentityBaselines
+} from "./cli-3j01d33e.js";
 import {
   ensure,
   initialize
-} from "./cli-ap4md0gc.js";
+} from "./cli-y9p3e94h.js";
 import {
   validateJsonSchema
-} from "./cli-t2jk33ta.js";
+} from "./cli-zghef0em.js";
 import {
   getMcpBaseUrl
 } from "./cli-dh55d5fg.js";
@@ -65,7 +66,6 @@ import {
   generateDefaultToolsMd,
   initTelemetry,
   init_defaults,
-  init_model_tiers,
   init_resolver,
   init_session_templates,
   init_telemetry,
@@ -76,7 +76,7 @@ import {
   resolveTaskModelSelection,
   resolveTemplateAsync,
   telemetry
-} from "./cli-d0t4854c.js";
+} from "./cli-0jw6j755.js";
 import {
   init_credentials,
   resolveCredentialPools
@@ -92,7 +92,6 @@ import {
 // src/commands/runner.ts
 import { existsSync, statSync } from "node:fs";
 import { mkdir, readFile, stat, writeFile } from "node:fs/promises";
-init_model_tiers();
 
 // src/prompts/base-prompt.ts
 init_resolver();
@@ -441,15 +440,15 @@ async function createProviderAdapter(provider) {
       return new ClaudeAdapter;
     }
     case "pi": {
-      const { PiMonoAdapter } = await import("./pi-mono-adapter-hf8sw7hs.js");
+      const { PiMonoAdapter } = await import("./pi-mono-adapter-zf7dt1wg.js");
       return new PiMonoAdapter;
     }
     case "codex": {
-      const { CodexAdapter } = await import("./codex-adapter-wf119mnw.js");
+      const { CodexAdapter } = await import("./codex-adapter-w0xharsg.js");
       return new CodexAdapter;
     }
     case "claude-managed": {
-      const { ClaudeManagedAdapter } = await import("./claude-managed-adapter-g07dbz3b.js");
+      const { ClaudeManagedAdapter } = await import("./claude-managed-adapter-z29hjgzz.js");
       return new ClaudeManagedAdapter;
     }
     case "devin": {
@@ -467,6 +466,7 @@ async function createProviderAdapter(provider) {
 
 // src/commands/runner.ts
 init_telemetry();
+init_types();
 
 // src/utils/budget-backoff.ts
 var BUDGET_BACKOFF_CAP_MS = 5 * 60 * 1000;
@@ -802,6 +802,9 @@ async function refreshSkillsIfChanged(ctx, lastHashRef, homeOverride) {
   return { changed: true, summary };
 }
 
+// src/commands/runner.ts
+init_template();
+
 // src/vcs/index.ts
 function detectVcsProvider(url) {
   if (url.includes("gitlab.com") || url.includes("gitlab."))
@@ -811,9 +814,6 @@ function detectVcsProvider(url) {
   return null;
 }
 
-// src/commands/runner.ts
-init_template();
-
 // src/commands/context-preamble.ts
 init_secret_scrubber();
 var CONTEXT_PREAMBLE_MAX_TOKENS = Number(process.env.CONTEXT_PREAMBLE_MAX_TOKENS || "2000");
@@ -1108,7 +1108,7 @@ async function checkProviderCredentials(provider, env, opts) {
     case "opencode":
       return checkOpencodeCredentials(env, opts);
     case "pi": {
-      const { checkPiMonoCredentials } = await import("./pi-mono-adapter-hf8sw7hs.js");
+      const { checkPiMonoCredentials } = await import("./pi-mono-adapter-zf7dt1wg.js");
       return checkPiMonoCredentials(env, opts);
     }
     default:
@@ -1464,6 +1464,9 @@ async function awaitCredentials(opts) {
   return status;
 }
 
+// src/commands/runner.ts
+init_profile_sync();
+
 // src/commands/resume-session.ts
 var RESUME_DEPRECATED_REASON = "native resume deprecated — using context preamble";
 function resolveResumeSession(_currentProvider, candidates) {
@@ -1540,7 +1543,7 @@ async function readClaudeMd(clonePath, role) {
 }
 async function listSwarmAutostashes(clonePath, role) {
   try {
-    const result = await Bun.$`cd ${clonePath} && git stash list --format=%gd%x09%s`.quiet();
+    const result = await Bun.$`env -u GIT_DIR -u GIT_WORK_TREE -u GIT_INDEX_FILE -u GIT_PREFIX git -C ${clonePath} stash list --format=%gd%x09%s`.quiet();
     return result.text().split(`
 `).map((line) => line.trim()).filter((line) => line.includes("swarm-autostash")).flatMap((line) => {
       const [ref, ...messageParts] = line.split("\t");
@@ -1555,14 +1558,14 @@ async function listSwarmAutostashes(clonePath, role) {
 }
 async function refreshExistingRepoForTask(repoConfig, role) {
   const { name, clonePath, defaultBranch } = repoConfig;
-  const statusResult = await Bun.$`cd ${clonePath} && git status --porcelain`.quiet();
+  const statusResult = await Bun.$`env -u GIT_DIR -u GIT_WORK_TREE -u GIT_INDEX_FILE -u GIT_PREFIX git -C ${clonePath} status --porcelain`.quiet();
   const statusOutput = statusResult.text().trim();
   let stashMessage = null;
   if (statusOutput !== "") {
     stashMessage = `swarm-autostash ${defaultBranch} ${new Date().toISOString()}`;
     try {
       console.log(`[${role}] Auto-stashing pending work in ${name}: ${stashMessage}`);
-      await Bun.$`cd ${clonePath} && git stash push --include-untracked -m ${stashMessage}`.quiet();
+      await Bun.$`env -u GIT_DIR -u GIT_WORK_TREE -u GIT_INDEX_FILE -u GIT_PREFIX git -C ${clonePath} stash push --include-untracked -m ${stashMessage}`.quiet();
       console.log(`[${role}] Auto-stashed pending work in ${name}`);
     } catch (err) {
       const errorMsg = scrubSecrets(err.message);
@@ -1574,20 +1577,38 @@ async function refreshExistingRepoForTask(repoConfig, role) {
     console.log(`[${role}] Refreshing ${name} from origin/${defaultBranch}...`);
     const fetchSpec = `${defaultBranch}:refs/remotes/origin/${defaultBranch}`;
     const remoteRef = `refs/remotes/origin/${defaultBranch}`;
-    await Bun.$`cd ${clonePath} && git fetch origin ${fetchSpec}`.quiet();
-    await Bun.$`cd ${clonePath} && git merge --no-edit --no-stat ${remoteRef}`.quiet();
+    await Bun.$`env -u GIT_DIR -u GIT_WORK_TREE -u GIT_INDEX_FILE -u GIT_PREFIX git -C ${clonePath} fetch origin ${fetchSpec}`.quiet();
+    await Bun.$`env -u GIT_DIR -u GIT_WORK_TREE -u GIT_INDEX_FILE -u GIT_PREFIX git -C ${clonePath} merge --no-edit --no-stat ${remoteRef}`.quiet();
     console.log(`[${role}] Refreshed ${name}`);
     return null;
   } catch (err) {
     const errorMsg = scrubSecrets(err.message);
     console.warn(`[${role}] Could not refresh ${name}: ${errorMsg}`);
     try {
-      await Bun.$`cd ${clonePath} && git merge --abort`.quiet();
+      await Bun.$`env -u GIT_DIR -u GIT_WORK_TREE -u GIT_INDEX_FILE -u GIT_PREFIX git -C ${clonePath} merge --abort`.quiet();
     } catch {}
     const stashNote = stashMessage ? ` Pending work was preserved in git stash "${stashMessage}".` : "";
     return `The repo "${name}" at ${clonePath} could not be refreshed from origin/${defaultBranch}: ${errorMsg}.${stashNote}`;
   }
 }
+function getInstallRepoHooksScriptPath() {
+  const imagePath = "/usr/local/bin/install-repo-hooks.sh";
+  if (existsSync(imagePath))
+    return imagePath;
+  return `${process.cwd()}/scripts/install-repo-hooks.sh`;
+}
+async function installRepoHooksForTask(repoConfig, role) {
+  if (repoConfig.hooks?.enabled !== true)
+    return;
+  try {
+    const scriptPath = getInstallRepoHooksScriptPath();
+    await Bun.$`bash ${scriptPath} ${repoConfig.clonePath} ${repoConfig.name}`;
+    console.log(`[${role}] Installed git hooks for ${repoConfig.name}`);
+  } catch (err) {
+    const errorMsg = scrubSecrets(err.message);
+    console.warn(`[${role}] Could not install git hooks for ${repoConfig.name}: ${errorMsg}`);
+  }
+}
 async function ensureRepoForTask(repoConfig, role) {
   const { url, name, clonePath, defaultBranch } = repoConfig;
   try {
@@ -1611,6 +1632,7 @@ async function ensureRepoForTask(repoConfig, role) {
       console.log(`[${role}] Repo ${name} already cloned at ${clonePath}`);
       warning = await refreshExistingRepoForTask({ name, clonePath, defaultBranch }, role);
     }
+    await installRepoHooksForTask(repoConfig, role);
     const claudeMd = await readClaudeMd(clonePath, role);
     const autoStashes = await listSwarmAutostashes(clonePath, role);
     return { clonePath, claudeMd, warning, autoStashes };
@@ -2359,7 +2381,11 @@ function setupShutdownHandlers(role, apiConfig, getRunnerState) {
       }
     }
     if (apiConfig) {
-      telemetry.session("ended", { agentId: apiConfig.agentId });
+      telemetry.session("ended", {
+        agentId: apiConfig.agentId,
+        durationMs: state ? Date.now() - state.startedAt : undefined,
+        tasksProcessed: state?.tasksProcessed ?? 0
+      });
       await closeAgent(apiConfig, role);
     }
     await savePm2State(role);
@@ -3023,6 +3049,18 @@ function providerEventAttributes(event) {
       return {};
   }
 }
+function normalizeSessionErrorCategory(category) {
+  switch (category) {
+    case "rate_limit":
+    case "api_error":
+    case "context_overflow":
+    case "timeout":
+    case "provider_error":
+      return category;
+    default:
+      return "unknown";
+  }
+}
 function implicitCloseActiveToolSpans(activeToolSpans, now = Date.now()) {
   let closed = 0;
   for (const [toolCallId, active] of activeToolSpans) {
@@ -3151,6 +3189,9 @@ async function spawnProviderProcess(adapter, opts, logDir, isYolo) {
   const eventFlushTimer = setInterval(flushEvents, EVENT_FLUSH_INTERVAL_MS);
   const sessionStartTime = Date.now();
   let providerSessionId = session.sessionId;
+  let pendingHarnessVariant;
+  let pendingHarnessVariantMeta;
+  let runningTaskForSessionInit;
   const activeToolSpans = new Map;
   if (providerSessionId) {
     sessionSpan.setAttribute("agentswarm.provider.session_id", providerSessionId);
@@ -3159,11 +3200,34 @@ async function spawnProviderProcess(adapter, opts, logDir, isYolo) {
   let lastContextPostTime = 0;
   const CONTEXT_THROTTLE_MS = 30000;
   let cumulativeProgressOutputTokens = 0;
+  function bufferSessionLogLine(content) {
+    if (!shouldStream)
+      return;
+    logBuffer.lines.push(content);
+    const shouldFlush = logBuffer.lines.length >= LOG_BUFFER_SIZE || Date.now() - logBuffer.lastFlush >= LOG_FLUSH_INTERVAL_MS;
+    if (shouldFlush) {
+      flushLogBuffer(logBuffer, {
+        apiUrl: opts.apiUrl,
+        apiKey: opts.apiKey,
+        agentId: opts.agentId,
+        sessionId: opts.runnerSessionId,
+        iteration: opts.iteration,
+        taskId: effectiveTaskId,
+        cli: adapter.name
+      }).catch(() => {});
+    }
+  }
   session.onEvent((event) => withSpanContext(sessionSpan, () => {
     sessionSpan.addEvent(`provider.${event.type}`, providerEventAttributes(event));
     switch (event.type) {
       case "session_init":
         providerSessionId = event.sessionId;
+        pendingHarnessVariant = event.harnessVariant;
+        pendingHarnessVariantMeta = event.harnessVariantMeta;
+        if (runningTaskForSessionInit) {
+          runningTaskForSessionInit.harnessVariant = event.harnessVariant;
+          runningTaskForSessionInit.harnessVariantMeta = event.harnessVariantMeta;
+        }
         sessionSpan.setAttributes({
           "agentswarm.provider.session_id": providerSessionId,
           "agentswarm.provider.name": event.provider,
@@ -3350,6 +3414,11 @@ async function spawnProviderProcess(adapter, opts, logDir, isYolo) {
         break;
       }
       case "compaction": {
+        telemetry.compaction("triggered", {
+          compactTrigger: event.compactTrigger,
+          preCompactTokens: event.preCompactTokens,
+          contextTotalTokens: event.contextTotalTokens
+        });
         fetch(`${opts.apiUrl}/api/tasks/${realTaskId}/context`, {
           method: "POST",
           headers: {
@@ -3369,24 +3438,15 @@ async function spawnProviderProcess(adapter, opts, logDir, isYolo) {
       }
       case "raw_log":
         prettyPrintLine(event.content, opts.role);
-        if (shouldStream) {
-          logBuffer.lines.push(event.content);
-          const shouldFlush = logBuffer.lines.length >= LOG_BUFFER_SIZE || Date.now() - logBuffer.lastFlush >= LOG_FLUSH_INTERVAL_MS;
-          if (shouldFlush) {
-            flushLogBuffer(logBuffer, {
-              apiUrl: opts.apiUrl,
-              apiKey: opts.apiKey,
-              agentId: opts.agentId,
-              sessionId: opts.runnerSessionId,
-              iteration: opts.iteration,
-              taskId: effectiveTaskId,
-              cli: adapter.name
-            }).catch(() => {});
-          }
-        }
+        bufferSessionLogLine(event.content);
         break;
       case "raw_stderr":
         prettyPrintStderr(event.content, opts.role);
+        bufferSessionLogLine(JSON.stringify({
+          type: "stderr",
+          content: event.content,
+          timestamp: new Date().toISOString()
+        }));
         break;
       case "progress": {
         if (effectiveTaskId && opts.apiUrl) {
@@ -3454,6 +3514,21 @@ async function spawnProviderProcess(adapter, opts, logDir, isYolo) {
         "gen_ai.usage.output_tokens": result.cost.outputTokens ?? 0,
         "agentswarm.cost.total_usd": result.cost.totalCostUsd ?? 0
       });
+      telemetry.session("cost", {
+        agentId: opts.agentId,
+        model: result.cost.model,
+        provider: result.cost.provider ?? opts.harnessProvider,
+        inputTokens: result.cost.inputTokens ?? 0,
+        outputTokens: result.cost.outputTokens ?? 0,
+        cacheReadTokens: result.cost.cacheReadTokens,
+        cacheWriteTokens: result.cost.cacheWriteTokens,
+        reasoningOutputTokens: result.cost.reasoningOutputTokens,
+        thinkingTokens: result.cost.thinkingTokens,
+        totalCostUsd: result.cost.totalCostUsd,
+        durationMs: result.cost.durationMs,
+        numTurns: result.cost.numTurns,
+        isError: result.cost.isError
+      });
       try {
         await saveCostData({ ...result.cost, taskId: realTaskId, sessionId: opts.runnerSessionId }, opts.apiUrl, opts.apiKey);
       } catch (err) {
@@ -3530,8 +3605,16 @@ async function spawnProviderProcess(adapter, opts, logDir, isYolo) {
     result: null,
     credentialInfo,
     harnessProvider: opts.harnessProvider,
-    hasLocalEnvironment: adapter.traits.hasLocalEnvironment
+    hasLocalEnvironment: adapter.traits.hasLocalEnvironment,
+    model: model || undefined
   };
+  runningTaskForSessionInit = runningTask;
+  if (pendingHarnessVariant !== undefined) {
+    runningTask.harnessVariant = pendingHarnessVariant;
+  }
+  if (pendingHarnessVariantMeta !== undefined) {
+    runningTask.harnessVariantMeta = pendingHarnessVariantMeta;
+  }
   promise.then((r) => {
     runningTask.result = r;
   }).catch(() => {
@@ -3552,7 +3635,11 @@ async function checkCompletedProcesses(state, role, apiConfig, cancelledSignaled
         workingDir: task.workingDir,
         credentialInfo: task.credentialInfo,
         harnessProvider: task.harnessProvider,
-        hasLocalEnvironment: task.hasLocalEnvironment
+        hasLocalEnvironment: task.hasLocalEnvironment,
+        harnessVariant: task.harnessVariant,
+        harnessVariantMeta: task.harnessVariantMeta,
+        model: task.model,
+        durationMs: Date.now() - task.startTime.getTime()
       });
     }
   }
@@ -3562,7 +3649,11 @@ async function checkCompletedProcesses(state, role, apiConfig, cancelledSignaled
     cursorUpdates,
     workingDir,
     credentialInfo,
-    harnessProvider
+    harnessProvider,
+    harnessVariant,
+    harnessVariantMeta,
+    model,
+    durationMs
   } of completedTasks) {
     state.activeTasks.delete(taskId);
     vcsDetectedTasks.delete(taskId);
@@ -3625,6 +3716,28 @@ async function checkCompletedProcesses(state, role, apiConfig, cancelledSignaled
       const bridgeFailureDiagnostics = bridgeDiagnostics?.paneTail != null ? `Claude bridge final tmux pane tail (${bridgeDiagnostics.artifactPath}):
 ${bridgeDiagnostics.paneTail}` : undefined;
       await ensureTaskFinished(apiConfig, role, taskId, result.exitCode, failureReason, result.output, harnessProvider, bridgeFailureDiagnostics);
+      telemetry.taskEvent("session_completed", {
+        taskId,
+        agentId: apiConfig.agentId,
+        provider: result.cost?.provider ?? harnessProvider,
+        model: result.cost?.model ?? model,
+        harnessVariant,
+        harnessVersion: typeof harnessVariantMeta?.version === "string" || typeof harnessVariantMeta?.version === "number" ? String(harnessVariantMeta.version) : undefined,
+        exitCode: result.exitCode,
+        isError: result.exitCode !== 0,
+        durationMs
+      });
+      if (result.exitCode !== 0 || result.isError) {
+        telemetry.session("failure", {
+          agentId: apiConfig.agentId,
+          errorCategory: normalizeSessionErrorCategory(result.errorCategory),
+          provider: result.cost?.provider ?? harnessProvider,
+          model: result.cost?.model ?? model,
+          durationMs: result.cost?.durationMs ?? durationMs,
+          wasRateLimited: result.rateLimitResetAt != null
+        });
+      }
+      state.tasksProcessed += 1;
       if (result.exitCode === 0 && credentialInfo) {
         reportKeyClearRateLimit(apiConfig.apiUrl, apiConfig.apiKey, credentialInfo.keyType, credentialInfo.keySuffix).catch(() => {});
       }
@@ -3733,10 +3846,12 @@ async function runAgent(config, opts) {
   const swarmUrl = process.env.SWARM_URL || "localhost";
   const apiKey = getApiKey();
   let bootProvider;
+  let bootModel = process.env.MODEL_OVERRIDE || "";
   let bootCooldownMs = resolveCodexCreditsExhaustedCooldownMs(undefined);
   try {
     const bootEnv = await fetchResolvedEnv(apiUrl, apiKey, agentId);
     bootProvider = bootEnv.resolvedProvider;
+    bootModel = bootEnv.env.MODEL_OVERRIDE || bootModel;
     bootCooldownMs = resolveCodexCreditsExhaustedCooldownMs(bootEnv.env.CODEX_CREDITS_EXHAUSTED_COOLDOWN_MS);
   } catch (err) {
     console.warn(`[runner] fetchResolvedEnv failed at boot, falling back to env for provider and the default cooldown: ${err}`);
@@ -3780,7 +3895,12 @@ async function runAgent(config, opts) {
       } catch {}
     });
   }
-  telemetry.session("started", { agentId });
+  telemetry.session("started", {
+    agentId,
+    harnessProvider: bootProvider,
+    model: bootModel || undefined,
+    role
+  });
   let capabilities = config.capabilities;
   let agentSoulMd;
   let agentIdentityMd;
@@ -3889,6 +4009,8 @@ ${additionalSystemPrompt}` : basePrompt;
   const state = {
     activeTasks: new Map,
     maxConcurrent,
+    startedAt: Date.now(),
+    tasksProcessed: 0,
     harnessProvider: bootProvider,
     codexCreditsExhaustedCooldownMs: bootCooldownMs
   };
@@ -4309,7 +4431,7 @@ ${additionalSystemPrompt}` : basePrompt;
           const effectiveConfig = repoConfig ?? {
             url: task.vcsRepo,
             name: task.vcsRepo.split("/").pop() || task.vcsRepo,
-            clonePath: `/workspace/repos/${task.vcsRepo.split("/").pop() || task.vcsRepo}`,
+            clonePath: `/workspace/personal/repos/${task.vcsRepo.split("/").pop() || task.vcsRepo}`,
             defaultBranch: "main"
           };
           const repoContext = await ensureRepoForTask(effectiveConfig, role);
@@ -4537,7 +4659,7 @@ ${additionalSystemPrompt}` : basePrompt;
           const effectiveConfig = repoConfig ?? {
             url: taskVcsRepo,
             name: taskVcsRepo.split("/").pop() || taskVcsRepo,
-            clonePath: `/workspace/repos/${taskVcsRepo.split("/").pop() || taskVcsRepo}`,
+            clonePath: `/workspace/personal/repos/${taskVcsRepo.split("/").pop() || taskVcsRepo}`,
             defaultBranch: "main"
           };
           const repoResult = await ensureRepoForTask(effectiveConfig, role);

package/dist/{cli-g5px3d7x.js → cli-2957pqpj.js}

@@ -3,6 +3,7 @@ var HISTORY_DIR = "/tmp/agent-swarm-tool-history";
 var MAX_HISTORY = 30;
 var REPEAT_WARNING_THRESHOLD = 8;
 var REPEAT_CRITICAL_THRESHOLD = 15;
+var LOW_CARDINALITY_FILE_CHANGE_CRITICAL_THRESHOLD = 24;
 var PINGPONG_WARNING_THRESHOLD = 6;
 var PINGPONG_CRITICAL_THRESHOLD = 12;
 function hashArgs(args) {
@@ -15,6 +16,27 @@ function hashArgs(args) {
   }
   return hash.toString(36);
 }
+function isCodexFileChangeArgs(toolName, toolInput) {
+  if (toolName !== "Edit" && toolName !== "Write" && toolName !== "Delete") {
+    return false;
+  }
+  const topLevelKeys = Object.keys(toolInput);
+  if (topLevelKeys.length !== 1 || topLevelKeys[0] !== "changes") {
+    return false;
+  }
+  const changes = toolInput.changes;
+  if (!Array.isArray(changes) || changes.length === 0) {
+    return false;
+  }
+  return changes.every((change) => {
+    if (!change || typeof change !== "object" || Array.isArray(change)) {
+      return false;
+    }
+    const entry = change;
+    const keys = Object.keys(entry).sort();
+    return keys.length === 2 && keys[0] === "kind" && keys[1] === "path" && typeof entry.path === "string" && (entry.kind === "add" || entry.kind === "update" || entry.kind === "delete");
+  });
+}
 async function loadHistory(sessionKey) {
   try {
     const file = Bun.file(`${HISTORY_DIR}/${sessionKey}.json`);
@@ -39,13 +61,14 @@ async function checkToolLoop(sessionKey, toolName, toolInput) {
     return { blocked: false };
   }
   const key = `${toolName}:${argsHash}`;
+  const repeatCriticalThreshold = isCodexFileChangeArgs(toolName, toolInput) ? LOW_CARDINALITY_FILE_CHANGE_CRITICAL_THRESHOLD : REPEAT_CRITICAL_THRESHOLD;
   let repeatCount = 0;
   for (const record of history) {
     if (`${record.toolName}:${record.argsHash}` === key) {
       repeatCount++;
     }
   }
-  if (repeatCount >= REPEAT_CRITICAL_THRESHOLD) {
+  if (repeatCount >= repeatCriticalThreshold) {
     return {
       blocked: true,
       severity: "critical",

package/dist/{cli-zmf7refz.js → cli-2g9jf9ek.js}

@@ -3,7 +3,7 @@ import {
   init_date_utils,
   init_db,
   normalizeDateRequired
-} from "./cli-d0t4854c.js";
+} from "./cli-0jw6j755.js";
 
 // src/be/db-queries/oauth.ts
 init_date_utils();

package/dist/{cli-mhj07xbq.js → cli-2hap19dv.js}

@@ -1,16 +1,16 @@
 import {
   recordUnmappedIdentity
-} from "./cli-9qascwj7.js";
+} from "./cli-gj2n2ec1.js";
 import {
   findOrCreateUserByEmail,
   findUserByExternalId,
   linkIdentity
-} from "./cli-5bqa41fd.js";
+} from "./cli-yvektv79.js";
 import {
   getKv,
   init_db,
   upsertKv
-} from "./cli-d0t4854c.js";
+} from "./cli-0jw6j755.js";
 
 // src/slack/enrich.ts
 init_db();

package/dist/{cli-wjyyv518.js → cli-3j01d33e.js}

@@ -2,15 +2,11 @@ import {
   init_secret_scrubber,
   scrubSecrets
 } from "./cli-3pp1362w.js";
+import {
+  __esm
+} from "./cli-p9swy5t3.js";
 
 // src/commands/profile-sync.ts
-init_secret_scrubber();
-var SOUL_MD_PATH = "/workspace/SOUL.md";
-var IDENTITY_MD_PATH = "/workspace/IDENTITY.md";
-var TOOLS_MD_PATH = "/workspace/TOOLS.md";
-var HEARTBEAT_MD_PATH = "/workspace/HEARTBEAT.md";
-var SETUP_SCRIPT_PATH = "/workspace/start-up.sh";
-var IDENTITY_BASELINES_PATH = "/tmp/identity-baselines.json";
 function contentSha256(content) {
   return new Bun.CryptoHasher("sha256").update(content).digest("hex");
 }
@@ -27,12 +23,6 @@ async function readIdentityBaselines(readFile = readFileIfExists) {
     return null;
   }
 }
-var CLAUDE_MD_PATH = `${process.env.HOME}/.claude/CLAUDE.md`;
-var WORKSPACE_CLAUDE_MD_PATH = "/workspace/CLAUDE.md";
-var IDENTITY_FILE_MIN_LENGTH = 500;
-var MAX_FILE_LENGTH = 65536;
-var SETUP_MARKER_START = "# === Agent-managed setup (from DB) ===";
-var SETUP_MARKER_END = "# === End agent-managed setup ===";
 function resolveClaudeMdPath(completedProviders) {
   const anyNonClaude = completedProviders.some((p) => p !== "claude");
   return anyNonClaude ? WORKSPACE_CLAUDE_MD_PATH : CLAUDE_MD_PATH;
@@ -163,5 +153,10 @@ async function syncProfileFilesToServer(opts) {
     await postProfileUpdate(opts, payload);
   }
 }
+var SOUL_MD_PATH = "/workspace/SOUL.md", IDENTITY_MD_PATH = "/workspace/IDENTITY.md", TOOLS_MD_PATH = "/workspace/TOOLS.md", HEARTBEAT_MD_PATH = "/workspace/HEARTBEAT.md", SETUP_SCRIPT_PATH = "/workspace/start-up.sh", IDENTITY_BASELINES_PATH = "/tmp/identity-baselines.json", CLAUDE_MD_PATH, WORKSPACE_CLAUDE_MD_PATH = "/workspace/CLAUDE.md", IDENTITY_FILE_MIN_LENGTH = 500, MAX_FILE_LENGTH = 65536, SETUP_MARKER_START = "# === Agent-managed setup (from DB) ===", SETUP_MARKER_END = "# === End agent-managed setup ===";
+var init_profile_sync = __esm(() => {
+  init_secret_scrubber();
+  CLAUDE_MD_PATH = `${process.env.HOME}/.claude/CLAUDE.md`;
+});
 
-export { contentSha256, writeIdentityBaselines, readIdentityBaselines, resolveClaudeMdPath, syncProfileFilesToServer };
+export { contentSha256, writeIdentityBaselines, readIdentityBaselines, resolveClaudeMdPath, syncProfileFilesToServer, init_profile_sync };