@desplega.ai/agent-swarm 1.112.0 → 1.114.0

package/dist/cli-7rgh0w0k.js

@@ -0,0 +1,262 @@
+import {
+  PermissionVerbSchema
+} from "./cli-0kgcv878.js";
+import {
+  getDb,
+  init_db
+} from "./cli-jzwtn8rm.js";
+
+// src/be/rbac-roles.ts
+init_db();
+var DEFAULT_ROLE_ID = "rbac-role-admin";
+var BUILTIN_ROLES = [
+  {
+    id: DEFAULT_ROLE_ID,
+    name: "admin",
+    description: "Full access including verb-less routes (legacy-equivalent default).",
+    isBuiltin: true,
+    grantsAll: true,
+    verbs: []
+  },
+  {
+    id: "rbac-role-requester",
+    name: "requester",
+    description: "Own-task lifecycle: what legacy policy grants user principals.",
+    isBuiltin: true,
+    grantsAll: false,
+    verbs: ["task.read.own", "task.cancel.own", "task.action.own", "task.fs.mutate"]
+  }
+];
+var CREATE_USER_DEFAULT_ROLE_TRIGGER_SQL = `
+CREATE TRIGGER IF NOT EXISTS trg_users_default_role
+AFTER INSERT ON users
+BEGIN
+  INSERT OR IGNORE INTO principal_roles (principalType, principalId, roleId)
+  SELECT 'user', NEW.id, 'rbac-role-admin'
+  WHERE EXISTS (SELECT 1 FROM roles WHERE id = 'rbac-role-admin');
+END;
+`;
+function roleRowToUserRole(row) {
+  return {
+    id: row.id,
+    name: row.name,
+    description: row.description,
+    isBuiltin: row.isBuiltin === 1,
+    grantsAll: row.grantsAll === 1,
+    createdAt: row.createdAt
+  };
+}
+function requireRoleId(roleName) {
+  const row = getDb().prepare("SELECT id FROM roles WHERE name = ?").get(roleName);
+  if (!row) {
+    throw new Error(`Unknown RBAC role: ${roleName}`);
+  }
+  return row.id;
+}
+function validateBuiltinVerb(roleName, verb) {
+  const parsed = PermissionVerbSchema.safeParse(verb);
+  if (!parsed.success) {
+    throw new Error(`Invalid RBAC permission verb "${verb}" in built-in role "${roleName}"`);
+  }
+  return parsed.data;
+}
+function validatedBuiltinVerbSets() {
+  const byRoleId = new Map;
+  for (const role of BUILTIN_ROLES) {
+    const verbs = new Set;
+    for (const verb of role.verbs) {
+      verbs.add(validateBuiltinVerb(role.name, verb));
+    }
+    byRoleId.set(role.id, verbs);
+  }
+  return byRoleId;
+}
+var loggedInvalidGrantVerbs = new Set;
+function parseDatabaseGrantVerb(roleId, verb) {
+  const parsed = PermissionVerbSchema.safeParse(verb);
+  if (parsed.success) {
+    return parsed.data;
+  }
+  const logKey = `${roleId}:${verb}`;
+  if (!loggedInvalidGrantVerbs.has(logKey)) {
+    loggedInvalidGrantVerbs.add(logKey);
+    console.error(`[rbac] Ignoring invalid role_permissions verb "${verb}" for roleId="${roleId}". ` + "Invalid RBAC verbs grant nothing; remove or repair the row.");
+  }
+  return null;
+}
+function getUserGrant(userId) {
+  const rows = getDb().prepare(`SELECT r.id AS roleId, r.grantsAll, rp.verb
+       FROM principal_roles pr
+       JOIN roles r ON r.id = pr.roleId
+       LEFT JOIN role_permissions rp ON rp.roleId = r.id
+       WHERE pr.principalType = 'user' AND pr.principalId = ?
+       ORDER BY r.grantsAll DESC`).all(userId);
+  if (rows.length === 0) {
+    return { grantsAll: false, verbs: new Set };
+  }
+  const verbs = new Set;
+  for (const row of rows) {
+    if (row.grantsAll === 1) {
+      return { grantsAll: true, verbs: new Set };
+    }
+    if (row.verb) {
+      const verb = parseDatabaseGrantVerb(row.roleId, row.verb);
+      if (verb) {
+        verbs.add(verb);
+      }
+    }
+  }
+  return { grantsAll: false, verbs };
+}
+function attachRole(userId, roleName) {
+  const db = getDb();
+  db.transaction(() => {
+    const roleId = requireRoleId(roleName);
+    db.prepare(`INSERT OR IGNORE INTO principal_roles (principalType, principalId, roleId)
+       VALUES ('user', ?, ?)`).run(userId, roleId);
+  })();
+}
+function detachRole(userId, roleName) {
+  const db = getDb();
+  db.transaction(() => {
+    const roleId = requireRoleId(roleName);
+    db.prepare(`DELETE FROM principal_roles
+       WHERE principalType = 'user' AND principalId = ? AND roleId = ?`).run(userId, roleId);
+  })();
+}
+function listUserRoles(userId) {
+  return getDb().prepare(`SELECT r.id, r.name, r.description, r.isBuiltin, r.grantsAll, r.createdAt
+       FROM principal_roles pr
+       JOIN roles r ON r.id = pr.roleId
+       WHERE pr.principalType = 'user' AND pr.principalId = ?
+       ORDER BY r.name`).all(userId).map(roleRowToUserRole);
+}
+function ensureRbacSeedsSynced(opts) {
+  const db = getDb();
+  const desiredVerbsByRoleId = validatedBuiltinVerbSets();
+  const insertRole = db.prepare(`INSERT OR IGNORE INTO roles (id, name, description, isBuiltin, grantsAll)
+     VALUES (?, ?, ?, 1, ?)`);
+  const updateRole = db.prepare(`UPDATE roles
+     SET name = ?, description = ?, isBuiltin = 1, grantsAll = ?, lastUpdatedAt = CURRENT_TIMESTAMP
+     WHERE id = ?
+       AND (
+         name <> ?
+         OR COALESCE(description, '') <> COALESCE(?, '')
+         OR isBuiltin <> 1
+         OR grantsAll <> ?
+       )`);
+  const selectRoleById = db.prepare("SELECT id, name FROM roles WHERE id = ?");
+  const selectRoleByName = db.prepare("SELECT id, name FROM roles WHERE name = ?");
+  const selectRolePermissions = db.prepare("SELECT verb FROM role_permissions WHERE roleId = ?");
+  const deleteRolePermission = db.prepare("DELETE FROM role_permissions WHERE roleId = ? AND verb = ?");
+  const insertRolePermission = db.prepare("INSERT OR IGNORE INTO role_permissions (roleId, verb) VALUES (?, ?)");
+  const backfillDefaultRoleForZeroRoleUsers = db.prepare(`INSERT OR IGNORE INTO principal_roles (principalType, principalId, roleId)
+     SELECT 'user', u.id, ?
+     FROM users u
+     WHERE NOT EXISTS (
+       SELECT 1
+       FROM principal_roles pr
+       WHERE pr.principalType = 'user'
+         AND pr.principalId = u.id
+     )`);
+  const stats = {
+    rolesInserted: 0,
+    rolesUpdated: 0,
+    permissionsInserted: 0,
+    permissionsDeleted: 0,
+    usersBackfilled: 0
+  };
+  db.transaction(() => {
+    for (const role of BUILTIN_ROLES) {
+      const grantsAll = role.grantsAll ? 1 : 0;
+      const insertResult = insertRole.run(role.id, role.name, role.description, grantsAll);
+      stats.rolesInserted += insertResult.changes;
+      if (insertResult.changes === 0) {
+        const updateResult = updateRole.run(role.name, role.description, grantsAll, role.id, role.name, role.description, grantsAll);
+        stats.rolesUpdated += updateResult.changes;
+      }
+    }
+    for (const role of BUILTIN_ROLES) {
+      const row = selectRoleById.get(role.id);
+      if (row) {
+        continue;
+      }
+      const colliding = selectRoleByName.get(role.name);
+      if (colliding) {
+        throw new Error(`RBAC built-in role "${role.name}" (${role.id}) is missing because role ` + `"${colliding.name}" (${colliding.id}) already uses that name. ` + "Rename or remove the conflicting role, then rerun `rbac bootstrap`.");
+      }
+      throw new Error(`RBAC built-in role "${role.name}" (${role.id}) is missing after seed sync. ` + "Rerun `rbac bootstrap`; if it still fails, inspect the roles table.");
+    }
+    for (const role of BUILTIN_ROLES) {
+      const desiredVerbs = desiredVerbsByRoleId.get(role.id) ?? new Set;
+      const existingRows = selectRolePermissions.all(role.id);
+      for (const row of existingRows) {
+        if (!desiredVerbs.has(row.verb)) {
+          stats.permissionsDeleted += deleteRolePermission.run(role.id, row.verb).changes;
+        }
+      }
+      for (const verb of desiredVerbs) {
+        stats.permissionsInserted += insertRolePermission.run(role.id, verb).changes;
+      }
+    }
+    db.run(CREATE_USER_DEFAULT_ROLE_TRIGGER_SQL);
+    stats.usersBackfilled += backfillDefaultRoleForZeroRoleUsers.run(DEFAULT_ROLE_ID).changes;
+  })();
+  if (!opts?.quiet) {
+    console.log(`[rbac] seed sync: roles inserted=${stats.rolesInserted}, updated=${stats.rolesUpdated}; permissions inserted=${stats.permissionsInserted}, deleted=${stats.permissionsDeleted}; trigger=ensured; users backfilled=${stats.usersBackfilled}`);
+  }
+  return stats;
+}
+function describeRbacFlag() {
+  const raw = process.env.RBAC_ENABLED;
+  if (raw === undefined)
+    return "unset (off)";
+  return `${raw} (${raw === "true" ? "on" : "off"})`;
+}
+function printRolesTable(rows) {
+  const tableRows = rows.map((row) => [
+    row.name,
+    row.isBuiltin === 1 ? "yes" : "no",
+    row.grantsAll === 1 ? "yes" : "no",
+    String(row.verbCount),
+    String(row.attachedUserCount)
+  ]);
+  const headers = ["name", "builtin", "grantsAll", "verbs", "attachedUsers"];
+  const widths = headers.map((header, column) => Math.max(header.length, ...tableRows.map((row) => row[column]?.length ?? 0)));
+  const format = (row) => row.map((cell, column) => cell.padEnd(widths[column] ?? cell.length)).join("  ");
+  console.log("Roles:");
+  console.log(format(headers));
+  console.log(format(widths.map((width) => "-".repeat(width))));
+  for (const row of tableRows) {
+    console.log(format(row));
+  }
+}
+function getRbacRoleSummary() {
+  return getDb().prepare(`SELECT
+         r.name,
+         r.isBuiltin,
+         r.grantsAll,
+         COUNT(DISTINCT rp.verb) AS verbCount,
+         COUNT(DISTINCT CASE WHEN pr.principalType = 'user' THEN pr.principalId END)
+           AS attachedUserCount
+       FROM roles r
+       LEFT JOIN role_permissions rp ON rp.roleId = r.id
+       LEFT JOIN principal_roles pr ON pr.roleId = r.id
+       GROUP BY r.id, r.name, r.isBuiltin, r.grantsAll
+       ORDER BY r.isBuiltin DESC, r.name`).all();
+}
+async function runRbacCliCommand(args) {
+  const subcommand = args[0];
+  if (args.length !== 1 || subcommand !== "bootstrap") {
+    throw new Error(`Unknown RBAC command: ${args.join(" ") || "(none)"}`);
+  }
+  const stats = ensureRbacSeedsSynced({ quiet: true });
+  const roles = getRbacRoleSummary();
+  console.log("RBAC bootstrap complete");
+  console.log(`RBAC_ENABLED: ${describeRbacFlag()}`);
+  console.log(`Users backfilled this run: ${stats.usersBackfilled}`);
+  console.log("");
+  printRolesTable(roles);
+}
+
+export { DEFAULT_ROLE_ID, BUILTIN_ROLES, getUserGrant, attachRole, detachRole, listUserRoles, ensureRbacSeedsSynced, runRbacCliCommand };

package/dist/{cli-9cy6nc5m.js → cli-8fjwym53.js}

@@ -4,7 +4,7 @@ import {
 import {
   safeParseAsync1 as safeParseAsync,
   toJSONSchema
-} from "./cli-anrj584m.js";
+} from "./cli-xz9aq0rf.js";
 
 // node_modules/@ai-sdk/provider/dist/index.mjs
 var marker = "vercel.ai.error";

package/dist/{cli-tg0f2wmz.js → cli-a6tzw6vq.js}

@@ -6,14 +6,23 @@ import {
   DEFAULT_CREDENTIAL_BINDINGS,
   SwarmConfigCredentialBindingStore,
   getScript,
+  getScriptApiConnectionDescriptors,
+  getScriptMcpConnectionDescriptors,
   getScriptVersion,
   listRelationalCredentialBindings,
   validateScriptImports
-} from "./cli-3r5y6ayj.js";
+} from "./cli-pnfyyp6h.js";
+import {
+  ensureTokenOrThrow,
+  getOAuthApp,
+  getOAuthTokens,
+  isTokenExpiringSoon,
+  oauthAppRowToProviderConfig
+} from "./cli-49j095n9.js";
 import {
   withSiblingAwareness,
   workflowContextKey
-} from "./cli-0c3n0eba.js";
+} from "./cli-312v3c41.js";
 import {
   getAppUrl
 } from "./cli-dh55d5fg.js";
@@ -62,13 +71,13 @@ import {
   telemetry,
   updateWorkflowRun,
   updateWorkflowRunStep
-} from "./cli-951w7c79.js";
+} from "./cli-jzwtn8rm.js";
 import {
   init_zod
-} from "./cli-q21d49ac.js";
+} from "./cli-bw80ck94.js";
 import {
   exports_external
-} from "./cli-anrj584m.js";
+} from "./cli-xz9aq0rf.js";
 import {
   init_secret_scrubber,
   isSensitiveKey,
@@ -2083,6 +2092,51 @@ function resolveHmacSecret(raw) {
   }
   return raw;
 }
+function verifyWebhookRequest(trigger, rawBody, headers) {
+  if (!trigger.hmacSecret) {
+    if (trigger.verification) {
+      throw new WebhookError("Webhook trigger has `verification` configured but no `hmacSecret`; refusing to accept unverified requests", 500);
+    }
+    return;
+  }
+  const secret = resolveHmacSecret(trigger.hmacSecret);
+  const verification = trigger.verification;
+  if (!verification) {
+    const hmacHeader = trigger.hmacHeader || DEFAULT_HMAC_HEADER;
+    const signature2 = resolveSignature(headers, hmacHeader);
+    if (!signature2) {
+      throw new WebhookError("Missing signature", 401);
+    }
+    if (!verifyHmacSignature(secret, rawBody, signature2)) {
+      throw new WebhookError("Invalid signature", 401);
+    }
+    return;
+  }
+  const header = verification.header || DEFAULT_HMAC_HEADER;
+  const signature = getHeader(headers, header);
+  if (!signature) {
+    throw new WebhookError("Missing signature", 401);
+  }
+  let isValid = false;
+  switch (verification.format) {
+    case "hmac-sha256":
+      isValid = verifyHmacSignature(secret, rawBody, signature);
+      break;
+    case "timestamped-hmac-sha256":
+      isValid = verifyTimestampedHmacSignature(secret, rawBody, signature, {
+        timestampKey: verification.timestampKey,
+        signatureKey: verification.signatureKey,
+        toleranceSeconds: verification.toleranceSeconds
+      });
+      break;
+    case "token-equality":
+      isValid = verifyTokenEquality(secret, signature);
+      break;
+  }
+  if (!isValid) {
+    throw new WebhookError("Invalid signature", 401);
+  }
+}
 async function handleWebhookTrigger(workflowId, payload, headers, registry) {
   const workflow = getWorkflow(workflowId);
   if (!workflow) {
@@ -2092,17 +2146,8 @@ async function handleWebhookTrigger(workflowId, payload, headers, registry) {
     throw new WebhookError("Workflow is disabled", 400);
   }
   const webhookTrigger = workflow.triggers.find((t) => t.type === "webhook");
-  if (webhookTrigger && webhookTrigger.type === "webhook" && webhookTrigger.hmacSecret) {
-    const hmacHeader = webhookTrigger.hmacHeader || DEFAULT_HMAC_HEADER;
-    const signature = resolveSignature(headers, hmacHeader);
-    if (!signature) {
-      throw new WebhookError("Missing signature", 401);
-    }
-    const secret = resolveHmacSecret(webhookTrigger.hmacSecret);
-    const isValid = verifyHmacSignature(secret, typeof payload === "string" ? payload : JSON.stringify(payload), signature);
-    if (!isValid) {
-      throw new WebhookError("Invalid signature", 401);
-    }
+  if (webhookTrigger && webhookTrigger.type === "webhook" && (webhookTrigger.hmacSecret || webhookTrigger.verification)) {
+    verifyWebhookRequest(webhookTrigger, typeof payload === "string" ? payload : JSON.stringify(payload), headers);
   }
   const triggerData = parseTriggerPayload(payload);
   const runId = await startWorkflowExecution(workflow, triggerData, registry, {
@@ -2149,6 +2194,57 @@ function verifyHmacSignature(secret, body, providedSignature) {
     return false;
   }
 }
+function verifyTimestampedHmacSignature(secret, body, headerValue, opts = {}, nowMs = Date.now()) {
+  const timestampKey = opts.timestampKey ?? "t";
+  const signatureKey = opts.signatureKey ?? "v1";
+  const toleranceSeconds = opts.toleranceSeconds ?? 300;
+  const parsed = parseSignatureHeader(headerValue);
+  const timestampValue = parsed.get(timestampKey)?.[0];
+  const signatures = parsed.get(signatureKey) ?? [];
+  if (!timestampValue || signatures.length === 0 || !/^\d+$/.test(timestampValue)) {
+    return false;
+  }
+  const timestampSeconds = Number(timestampValue);
+  if (!Number.isSafeInteger(timestampSeconds)) {
+    return false;
+  }
+  const ageSeconds = Math.abs(nowMs / 1000 - timestampSeconds);
+  if (ageSeconds > toleranceSeconds) {
+    return false;
+  }
+  const hmac = crypto2.createHmac("sha256", secret);
+  hmac.update(`${timestampValue}.${body}`);
+  const expectedHex = hmac.digest("hex");
+  const expected = Buffer.from(expectedHex, "hex");
+  return signatures.some((signature) => timingSafeEqualHex(signature, expected));
+}
+function verifyTokenEquality(secret, providedToken) {
+  const secretDigest = crypto2.createHash("sha256").update(secret).digest();
+  const providedDigest = crypto2.createHash("sha256").update(providedToken).digest();
+  return crypto2.timingSafeEqual(providedDigest, secretDigest);
+}
+function parseSignatureHeader(headerValue) {
+  const parsed = new Map;
+  for (const part of headerValue.split(",")) {
+    const trimmed = part.trim();
+    const separatorIndex = trimmed.indexOf("=");
+    if (separatorIndex <= 0)
+      continue;
+    const key = trimmed.slice(0, separatorIndex).trim();
+    const value = trimmed.slice(separatorIndex + 1).trim();
+    const values = parsed.get(key) ?? [];
+    values.push(value);
+    parsed.set(key, values);
+  }
+  return parsed;
+}
+function timingSafeEqualHex(providedHex, expected) {
+  try {
+    return crypto2.timingSafeEqual(Buffer.from(providedHex, "hex"), expected);
+  } catch {
+    return false;
+  }
+}
 
 class WebhookError extends Error {
   statusCode;
@@ -2487,7 +2583,8 @@ class HumanInTheLoopExecutor extends BaseExecutor {
       workflowRunId: meta.runId,
       workflowRunStepId: meta.stepId,
       timeoutSeconds: config.timeout?.seconds,
-      notificationChannels: config.notifications
+      notificationChannels: config.notifications,
+      createdBy: meta.requestedByUserId
     });
     if (config.notifications?.length) {
       this.dispatchNotifications(requestId, config, db).catch((err) => {
@@ -2515,7 +2612,7 @@ class HumanInTheLoopExecutor extends BaseExecutor {
       }
       if (notification.channel === "slack") {
         try {
-          const { getSlackApp } = await import("./app-b05sgm02.js");
+          const { getSlackApp } = await import("./app-bhwdxmvp.js");
           const slackApp = getSlackApp();
           if (!slackApp) {
             console.warn("[HITL] Slack not initialized — cannot send notification");
@@ -2629,7 +2726,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp } = await import("./app-b05sgm02.js");
+        const { getSlackApp } = await import("./app-bhwdxmvp.js");
         const app = getSlackApp();
         if (!app) {
           return {
@@ -2752,14 +2849,14 @@ var RawLlmOutputSchema = exports_external.object({
 async function executeRawLlm(config) {
   const modelName = config.model ?? "google/gemini-3-flash-preview";
   try {
-    const { createOpenAI } = await import("./index-wz1ea15p.js");
+    const { createOpenAI } = await import("./index-2dgfj9av.js");
     const openrouter = createOpenAI({
       baseURL: "https://openrouter.ai/api/v1",
       apiKey: process.env.OPENROUTER_API_KEY
     });
     const model = openrouter(modelName);
     if (config.schema) {
-      const { generateObject, jsonSchema } = await import("./index-ykvs43z4.js");
+      const { generateObject, jsonSchema } = await import("./index-t2snazez.js");
       const { object } = await generateObject({
         model,
         schema: jsonSchema(config.schema),
@@ -2773,7 +2870,7 @@ async function executeRawLlm(config) {
         output: { result: object, model: modelName }
       };
     }
-    const { generateText } = await import("./index-ykvs43z4.js");
+    const { generateText } = await import("./index-t2snazez.js");
     const { text } = await generateText({
       model,
       prompt: config.prompt
@@ -2926,6 +3023,33 @@ init_zod();
 // src/be/script-credential-broker.ts
 init_secret_scrubber();
 init_db();
+
+// src/be/oauth-credential-bindings.ts
+var OAUTH_BINDING_REFRESH_BUFFER_MS = 5 * 60 * 1000;
+function getOAuthProviderConfig(provider) {
+  const app = getOAuthApp(provider);
+  return app ? oauthAppRowToProviderConfig(app) : null;
+}
+function getOAuthBindingTokenStatus(provider) {
+  if (!getOAuthApp(provider))
+    return "missing";
+  if (!getOAuthTokens(provider))
+    return "missing";
+  return isTokenExpiringSoon(provider, OAUTH_BINDING_REFRESH_BUFFER_MS) ? "expiring" : "ok";
+}
+async function resolveOAuthBindingToken(provider) {
+  if (!getOAuthApp(provider))
+    return;
+  const initialTokens = getOAuthTokens(provider);
+  if (!initialTokens)
+    return;
+  if (isTokenExpiringSoon(provider, OAUTH_BINDING_REFRESH_BUFFER_MS)) {
+    await ensureTokenOrThrow(provider, OAUTH_BINDING_REFRESH_BUFFER_MS);
+  }
+  return getOAuthTokens(provider)?.accessToken;
+}
+
+// src/be/script-credential-broker.ts
 class RelationalCredentialBindingStore extends SwarmConfigCredentialBindingStore {
   listActiveBindings(context) {
     const relational = listRelationalCredentialBindings(context);
@@ -2934,9 +3058,29 @@ class RelationalCredentialBindingStore extends SwarmConfigCredentialBindingStore
     return super.listActiveBindings(context);
   }
 }
-function buildScriptCredentialBindings(input) {
+async function buildScriptCredentialBindings(input) {
   const resolvedConfigs = getResolvedConfig(input.agentId, input.repoId);
   const configMap = new Map(resolvedConfigs.map((config) => [config.key, config.value]));
+  const relationalBindings = listRelationalCredentialBindings(input);
+  for (const binding of relationalBindings) {
+    if (binding.authKind !== "oauth")
+      continue;
+    configMap.set(binding.configKey, "");
+    if (!binding.oauthProvider)
+      continue;
+    let accessToken;
+    try {
+      accessToken = await resolveOAuthBindingToken(binding.oauthProvider);
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      console.warn(`[script-credential-broker] skipping OAuth binding ${binding.configKey}: token refresh for provider ${binding.oauthProvider} failed: ${scrubSecrets(message)}`);
+      continue;
+    }
+    if (!accessToken)
+      continue;
+    configMap.set(binding.configKey, accessToken);
+    registerVolatileSecret(accessToken, binding.configKey);
+  }
   const broker = new CredentialBroker(new RelationalCredentialBindingStore((filters) => getSwarmConfigs(filters)), (configKey) => configMap.get(configKey) ?? process.env[configKey], DEFAULT_CREDENTIAL_BINDINGS);
   const bindings = broker.resolveBindings({ agentId: input.agentId, repoId: input.repoId });
   for (const binding of bindings) {
@@ -3211,7 +3355,8 @@ function buildConfigPayload(input) {
     },
     user: input.userConfig ?? {},
     egressSecrets: input.egressSecrets ?? buildEgressSecrets(),
-    apiConnections: input.apiConnections ?? []
+    apiConnections: input.apiConnections ?? [],
+    mcpConnections: input.mcpConnections ?? []
   };
 }
 async function runScript(input) {
@@ -3307,7 +3452,9 @@ class SwarmScriptExecutor extends BaseExecutor {
       args: config.args,
       fsMode: "none",
       agentId: agentId ?? "workflow",
-      egressSecrets: buildScriptCredentialBindings({ agentId: agentId ?? undefined }),
+      egressSecrets: await buildScriptCredentialBindings({ agentId: agentId ?? undefined }),
+      apiConnections: getScriptApiConnectionDescriptors({ agentId: agentId ?? undefined }),
+      mcpConnections: getScriptMcpConnectionDescriptors({ agentId: agentId ?? undefined }),
       timeoutMs: config.timeoutMs
     });
     const workflowOutput = {
@@ -3462,8 +3609,8 @@ class ValidateExecutor extends BaseExecutor {
     const interpolatedPrompt = this.deps.interpolate(prompt, context);
     const outputStr = typeof targetOutput === "string" ? targetOutput : JSON.stringify(targetOutput);
     try {
-      const { createOpenAI } = await import("./index-wz1ea15p.js");
-      const { generateObject, jsonSchema } = await import("./index-ykvs43z4.js");
+      const { createOpenAI } = await import("./index-2dgfj9av.js");
+      const { generateObject, jsonSchema } = await import("./index-t2snazez.js");
       const openrouter = createOpenAI({
         baseURL: "https://openrouter.ai/api/v1",
         apiKey: process.env.OPENROUTER_API_KEY
@@ -3665,4 +3812,4 @@ function initWorkflows() {
   initWaitBusSubscriptions(_registry);
 }
 
-export { buildScriptCredentialBindings, runScript, generateEdges, findEntryNodes, getSuccessors, validateDefinition, applyDefinitionPatch, validateJsonSchema, TriggerSchemaError, startWorkflowExecution, setupWorkflowResumeListener, retryFailedRun, cancelWorkflowRun, resumeWaitState, initWaitBusSubscriptions, subscribeWaitToBus, recoverIncompleteRuns, startRetryPoller, stopRetryPoller, validateTemplateVariables, instantiateTemplate, handleWebhookTrigger, handleScheduleTrigger, verifyHmacSignature, WebhookError, snapshotWorkflow, startWaitPoller, stopWaitPoller, RawLlmConfigSchema, executeRawLlm, getExecutorRegistry, initWorkflows };
+export { getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindings, runScript, generateEdges, findEntryNodes, getSuccessors, validateDefinition, applyDefinitionPatch, validateJsonSchema, TriggerSchemaError, startWorkflowExecution, setupWorkflowResumeListener, retryFailedRun, cancelWorkflowRun, resumeWaitState, initWaitBusSubscriptions, subscribeWaitToBus, recoverIncompleteRuns, startRetryPoller, stopRetryPoller, validateTemplateVariables, instantiateTemplate, handleWebhookTrigger, handleScheduleTrigger, verifyHmacSignature, WebhookError, snapshotWorkflow, startWaitPoller, stopWaitPoller, RawLlmConfigSchema, executeRawLlm, getExecutorRegistry, initWorkflows };

package/dist/{cli-q21d49ac.js → cli-bw80ck94.js}

@@ -1,6 +1,6 @@
 import {
   init_external
-} from "./cli-anrj584m.js";
+} from "./cli-xz9aq0rf.js";
 import {
   __esm
 } from "./cli-p9swy5t3.js";

package/dist/{cli-709t753c.js → cli-byjcad11.js}

@@ -6,7 +6,7 @@ import {
   getDb,
   init_db,
   isSqliteVecAvailable
-} from "./cli-951w7c79.js";
+} from "./cli-jzwtn8rm.js";
 import {
   __esm,
   __export,
@@ -6740,7 +6740,7 @@ class SqliteMemoryStore {
     }
   }
   deleteFtsRows(ids) {
-    if (ids.length === 0 || !this.ftsInitialized && !this.getFtsTableSchema())
+    if (ids.length === 0 || !this.getFtsTableSchema())
       return;
     const db = getDb();
     const placeholders = ids.map(() => "?").join(",");