@desplega.ai/agent-swarm 1.119.0 → 1.119.2

package/dist/{http-wv092d70.js → http-kbavqgsx.js}

@@ -1,3 +1,7 @@
+import {
+  BROWSER_SDK_JS,
+  SWARM_UI_JS
+} from "./cli-ppwm8c6e.js";
 import {
   AssetKeyAuthorizationError,
   BODY_TOO_LARGE,
@@ -126,12 +130,11 @@ import {
   withRemoteContext,
   withSpanContext,
   writeSkillsToFilesystem
-} from "./cli-h1gg78hv.js";
+} from "./cli-5ne5v3gy.js";
 import"./cli-1z7048dy.js";
 import {
-  BROWSER_SDK_JS,
-  SWARM_UI_JS
-} from "./cli-ppwm8c6e.js";
+  Anthropic
+} from "./cli-gz9sbyk3.js";
 import {
   REFERENCES_SOURCE_MAX_LENGTH,
   sanitizeReferencesSource
@@ -141,19 +144,23 @@ import {
   getValidCodexOAuth,
   loadAllCodexOAuthSlots
 } from "./cli-tk9vyqzh.js";
-import {
-  Anthropic
-} from "./cli-gz9sbyk3.js";
 import {
   reasoningCapability
 } from "./cli-e61fs2hp.js";
-import"./cli-mxennm5t.js";
+import {
+  calculateNextRun,
+  dispatchScheduleTarget,
+  ensure,
+  initialize,
+  require_dist
+} from "./cli-vxesz4hy.js";
+import"./cli-g617qdzb.js";
 import {
   normalizeModelKey
-} from "./cli-vfq38b3e.js";
+} from "./cli-xem4ndhx.js";
 import {
   getUserGrant
-} from "./cli-hyn69s0c.js";
+} from "./cli-bcev4a56.js";
 import {
   can,
   clearAuditSink,
@@ -165,27 +172,20 @@ import {
   ensureAgentFsCredentialsForAgent,
   extractArgsJsonSchema,
   extractScriptSignature,
+  inviteEmailToSharedOrg,
   scriptSdkTypesWithGeneratedApis,
   scriptStdlibTypesWithGeneratedApis,
   typecheckScript
-} from "./cli-azvm6fss.js";
+} from "./cli-22xdkf0e.js";
 import {
   checkHeartbeatChecklist,
   runHeartbeatSweep,
   stopHeartbeat
-} from "./cli-q7eev82n.js";
+} from "./cli-vvty0cfn.js";
 import {
   createResumeFollowUp,
   createWorkerTaskFollowUp
-} from "./cli-9ed8efw3.js";
-import"./cli-fad8m16k.js";
-import {
-  calculateNextRun,
-  dispatchScheduleTarget,
-  ensure,
-  initialize,
-  require_dist
-} from "./cli-chs2zh28.js";
+} from "./cli-0qhghy2e.js";
 import {
   RawLlmConfigSchema,
   TriggerSchemaError,
@@ -207,10 +207,22 @@ import {
   validateDefinition,
   validateJsonSchema,
   verifyHmacSignature
-} from "./cli-jy7w6z37.js";
+} from "./cli-wen3f7km.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
+import {
+  acquireOAuthRefreshLock,
+  buildAuthorizationUrl,
+  deleteOAuthTokens,
+  ensureTokenOrThrow,
+  exchangeCode,
+  forceRefreshTokenOrThrow,
+  getOAuthApp,
+  getOAuthTokens,
+  releaseOAuthRefreshLock,
+  upsertOAuthApp
+} from "./cli-kb6wj6mf.js";
 import {
   CredentialBindingSchema,
   applyMcpOAuthRefresh,
@@ -259,11 +271,11 @@ import {
   upsertMcpOAuthToken,
   upsertScriptByName,
   upsertScriptConnection
-} from "./cli-bx96sw2z.js";
+} from "./cli-befewsnp.js";
 import"./cli-jkhwmmgg.js";
 import {
   searchScripts
-} from "./cli-qw9seygs.js";
+} from "./cli-cbz05wnr.js";
 import {
   CANDIDATE_SET_MULTIPLIER,
   getEmbeddingProvider,
@@ -271,27 +283,21 @@ import {
   init_constants,
   init_reranker,
   rerank
-} from "./cli-qcm02dkk.js";
+} from "./cli-ed4s7b1n.js";
 import"./cli-q25ejbyn.js";
-import {
-  acquireOAuthRefreshLock,
-  buildAuthorizationUrl,
-  deleteOAuthTokens,
-  ensureTokenOrThrow,
-  exchangeCode,
-  forceRefreshTokenOrThrow,
-  getOAuthApp,
-  getOAuthTokens,
-  releaseOAuthRefreshLock,
-  upsertOAuthApp
-} from "./cli-dqxwy0td.js";
 import"./cli-0pygq9r1.js";
-import"./cli-06xdf1gz.js";
+import"./cli-fad8m16k.js";
+import {
+  FilesError,
+  getFileStorageProvider,
+  normalizeFilesError
+} from "./cli-95kferzh.js";
+import"./cli-62c45z8p.js";
 import {
   getSlackApp,
   startSlackApp,
   stopSlackApp
-} from "./cli-15m4y05s.js";
+} from "./cli-6h60nrdw.js";
 import"./cli-rkndnn90.js";
 import"./cli-b0p7rfnd.js";
 import {
@@ -311,12 +317,12 @@ import {
   resolveUserByToken,
   revokeToken,
   unlinkIdentity
-} from "./cli-txxvn1zb.js";
-import"./cli-ma04faw5.js";
-import"./cli-wspgs9bt.js";
+} from "./cli-qfp2c1qs.js";
 import {
   createTaskWithSiblingAwareness
-} from "./cli-qf35kzka.js";
+} from "./cli-2pv9mf2n.js";
+import"./cli-ma04faw5.js";
+import"./cli-wspgs9bt.js";
 import {
   getAppUrl,
   getConfiguredAppUrls,
@@ -635,7 +641,7 @@ import {
   upsertSwarmConfig,
   validateConfigValue,
   withFavoriteFlags
-} from "./cli-j12px91x.js";
+} from "./cli-jkkjjdyn.js";
 import"./cli-z2zcxes1.js";
 import {
   init_zod
@@ -650,7 +656,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-9kbww4vb.js";
+} from "./cli-cjdjcx1h.js";
 import {
   init_secret_scrubber,
   registerVolatileSecret,
@@ -664,16 +670,16 @@ import {
 } from "./cli-9aryf9tv.js";
 import {
   bedrockProviderModule
-} from "./cli-6b4wwmm8.js";
+} from "./cli-0qy7bk86.js";
 import"./cli-cwy5hqbq.js";
 import"./cli-jvv0g8bh.js";
 import {
   setBedrockProviderModule
 } from "./cli-xw7p4wkq.js";
 import"./cli-hv2fndhm.js";
-import"./cli-pscrc6tw.js";
 import"./cli-zyxs93y9.js";
 import"./cli-4wgngmwv.js";
+import"./cli-pscrc6tw.js";
 import"./cli-bsyka9ta.js";
 import"./cli-vapyk8sw.js";
 import"./cli-y2apkfe2.js";
@@ -3860,440 +3866,6 @@ async function handleFavorites(req, res, pathSegments, queryParams, myAgentId) {
 init_zod();
 init_db();
 import { createHash as createHash2 } from "node:crypto";
-
-// src/fs/provider.ts
-class FilesError extends Error {
-  code;
-  status;
-  cause;
-  constructor(code, message, opts = {}) {
-    super(message);
-    this.name = "FilesError";
-    this.code = code;
-    this.status = opts.status;
-    this.cause = opts.cause;
-  }
-}
-function providerPath(scope) {
-  if (scope.key !== undefined && scope.key !== null && scope.key !== "") {
-    return normalizeStoredKey(scope.key);
-  }
-  const safeName = normalizeName(scope.name);
-  return `tasks/${encodeURIComponent(scope.taskId)}/${safeName}`;
-}
-function normalizeStoredKey(key) {
-  const trimmed = key.trim().replace(/^\/+/, "");
-  if (!trimmed || trimmed.includes("\x00")) {
-    throw new FilesError("Provider", "Stored file key must be a non-empty path");
-  }
-  if (trimmed.split("/").some((part) => part === "..")) {
-    throw new FilesError("Provider", "Stored file key must not contain parent path segments");
-  }
-  return trimmed;
-}
-function normalizeName(name) {
-  const trimmed = name.trim().replace(/^\/+/, "");
-  if (!trimmed || trimmed === "." || trimmed.includes("\x00")) {
-    throw new FilesError("Provider", "File name must be a non-empty relative path");
-  }
-  const parts = trimmed.split("/");
-  if (parts.some((part) => !part || part === "." || part === "..")) {
-    throw new FilesError("Provider", "File name must not contain empty or parent path segments");
-  }
-  return parts.map(encodeURIComponent).join("/");
-}
-function fileObjectFromHeaders(providerId, scope, headers2, overrides = {}) {
-  const sizeHeader = headers2.get("content-length");
-  return {
-    providerId,
-    key: providerPath(scope),
-    taskId: scope.taskId,
-    name: scope.name,
-    contentType: headers2.get("content-type") ?? undefined,
-    sizeBytes: sizeHeader ? Number(sizeHeader) : undefined,
-    etag: headers2.get("etag") ?? undefined,
-    sha256: headers2.get("x-agent-fs-content-hash") ?? undefined,
-    version: headers2.get("x-agent-fs-version") ?? undefined,
-    ...overrides
-  };
-}
-function normalizeFilesError(error) {
-  if (error instanceof FilesError) {
-    return error;
-  }
-  return new FilesError("Provider", error instanceof Error ? error.message : "File provider error", {
-    cause: error
-  });
-}
-
-// src/fs/agent-fs-provider.ts
-class AgentFsProvider {
-  id = "agent-fs";
-  capabilities = {
-    signedUrl: { supported: true, maxExpiresIn: 3600 },
-    search: true,
-    comments: true,
-    versioning: true
-  };
-  apiUrl;
-  apiKey;
-  orgId;
-  driveId;
-  fetchImpl;
-  constructor(options = {}) {
-    this.apiUrl = stripTrailingSlash(options.apiUrl ?? process.env.AGENT_FS_API_URL ?? "");
-    this.apiKey = options.apiKey ?? process.env.API_AGENT_FS_API_KEY ?? process.env.AGENT_FS_API_KEY ?? "";
-    this.orgId = options.orgId ?? process.env.AGENT_FS_DEFAULT_ORG_ID ?? process.env.AGENT_FS_SHARED_ORG_ID ?? "";
-    this.driveId = options.driveId ?? process.env.AGENT_FS_DEFAULT_DRIVE_ID ?? "";
-    this.fetchImpl = options.fetchImpl ?? globalThis.fetch;
-    if (!this.apiUrl || !this.apiKey || !this.orgId || !this.driveId) {
-      throw new FilesError("Provider", "AGENT_FS_API_URL, API_AGENT_FS_API_KEY or AGENT_FS_API_KEY, AGENT_FS_DEFAULT_ORG_ID, and AGENT_FS_DEFAULT_DRIVE_ID are required for the agent-fs provider");
-    }
-  }
-  async upload(scope, body, options = {}) {
-    const headers2 = new Headers(this.authHeaders());
-    if (options.contentType) {
-      headers2.set("content-type", options.contentType);
-    }
-    if (options.ifNoneMatch) {
-      headers2.set("if-none-match", options.ifNoneMatch);
-    }
-    if (options.ifMatch) {
-      headers2.set("if-match", options.ifMatch);
-    }
-    if (options.message) {
-      headers2.set("x-agent-fs-message", options.message);
-    }
-    const response = await this.fetchRaw(scope, { method: "PUT", headers: headers2, body });
-    const parsed = await response.json().catch(() => ({}));
-    return fileObjectFromHeaders(this.id, scope, response.headers, {
-      key: parsed.path ?? providerPath(scope),
-      version: parsed.version === undefined ? response.headers.get("x-agent-fs-version") ?? undefined : String(parsed.version),
-      sha256: parsed.contentHash ?? response.headers.get("x-agent-fs-content-hash") ?? undefined,
-      metadata: { deduped: parsed.deduped }
-    });
-  }
-  async download(scope) {
-    return this.fetchRaw(scope, { method: "GET", headers: this.authHeaders() });
-  }
-  async head(scope) {
-    const response = await this.download(scope);
-    await response.body?.cancel();
-    return fileObjectFromHeaders(this.id, scope, response.headers);
-  }
-  async exists(scope) {
-    try {
-      await this.head(scope);
-      return true;
-    } catch (error) {
-      if (error instanceof FilesError && error.code === "NotFound") {
-        return false;
-      }
-      throw error;
-    }
-  }
-  async delete(scope) {
-    await this.ops({ op: "rm", path: providerPath(scope) }, scope);
-  }
-  async copy(source, destination) {
-    await this.ops({ op: "cp", path: providerPath(source), dest: providerPath(destination) });
-    return this.head(destination);
-  }
-  async move(source, destination) {
-    await this.ops({ op: "mv", path: providerPath(source), dest: providerPath(destination) });
-    return this.head(destination);
-  }
-  async list(options) {
-    const prefix = `tasks/${encodeURIComponent(options.taskId)}/${options.prefix ?? ""}`;
-    const result = await this.ops({ op: "ls", path: prefix });
-    const resultRecord = asRecord(result);
-    const entries = Array.isArray(result) ? result : Array.isArray(resultRecord?.entries) ? resultRecord.entries : [];
-    return entries.slice(0, options.limit).map((entry) => {
-      const key = String(entry.path ?? entry.name ?? "");
-      const name = key.startsWith(`tasks/${encodeURIComponent(options.taskId)}/`) ? key.slice(`tasks/${encodeURIComponent(options.taskId)}/`.length) : key;
-      return {
-        providerId: this.id,
-        key,
-        taskId: options.taskId,
-        name: decodeURIComponent(name),
-        contentType: typeof entry.mimeType === "string" ? entry.mimeType : undefined,
-        sizeBytes: typeof entry.size === "number" ? entry.size : undefined,
-        version: entry.version === undefined ? undefined : String(entry.version)
-      };
-    });
-  }
-  async* listAll(options) {
-    for (const item of await this.list(options)) {
-      yield item;
-    }
-  }
-  async url(scope, options = {}) {
-    const expiresIn = Math.min(options.expiresIn ?? 3600, this.capabilities.signedUrl.maxExpiresIn);
-    const result = await this.ops({ op: "signed-url", path: providerPath(scope), expiresIn }, scope);
-    if (typeof result === "string") {
-      return result;
-    }
-    const resultRecord = asRecord(result);
-    if (typeof resultRecord?.url === "string") {
-      return resultRecord.url;
-    }
-    throw new FilesError("Provider", "agent-fs signed-url op did not return a URL");
-  }
-  async signedUploadUrl() {
-    throw new FilesError("ReadOnly", "agent-fs does not support signed upload URLs");
-  }
-  async search(query) {
-    const result = await this.ops({
-      op: "search",
-      query: query.query,
-      path: `tasks/${encodeURIComponent(query.taskId)}`,
-      limit: query.limit
-    });
-    return Array.isArray(result) ? result : [];
-  }
-  async addComment(input) {
-    return await this.ops({
-      op: "comment-add",
-      path: providerPath(input),
-      body: input.body,
-      range: input.range
-    });
-  }
-  async listComments(scope) {
-    const result = await this.ops({ op: "comment-list", path: providerPath(scope) });
-    return Array.isArray(result) ? result : [];
-  }
-  async listVersions(scope) {
-    const result = await this.ops({ op: "log", path: providerPath(scope) });
-    return Array.isArray(result) ? result : [];
-  }
-  async restoreVersion(scope) {
-    return await this.ops({
-      op: "revert",
-      path: providerPath(scope),
-      version: scope.version
-    });
-  }
-  async fetchRaw(scope, init) {
-    const response = await this.fetchImpl(this.rawUrl(scope), init);
-    if (!response.ok) {
-      throw await responseToFilesError(response);
-    }
-    return response;
-  }
-  async ops(body, scope) {
-    const response = await this.fetchImpl(`${this.apiUrl}/orgs/${encodeURIComponent(this.orgFor(scope))}/ops`, {
-      method: "POST",
-      headers: {
-        ...this.authHeaders(),
-        "content-type": "application/json"
-      },
-      body: JSON.stringify({ driveId: this.driveFor(scope), ...body })
-    });
-    if (!response.ok) {
-      throw await responseToFilesError(response);
-    }
-    return response.json().catch(() => null);
-  }
-  rawUrl(scope) {
-    return `${this.apiUrl}/orgs/${encodeURIComponent(this.orgFor(scope))}/drives/${encodeURIComponent(this.driveFor(scope))}/files/${providerPath(scope)}/raw`;
-  }
-  orgFor(scope) {
-    return scope?.orgId?.trim() || this.orgId;
-  }
-  driveFor(scope) {
-    return scope?.driveId?.trim() || this.driveId;
-  }
-  authHeaders() {
-    return { authorization: `Bearer ${this.apiKey}` };
-  }
-}
-function asRecord(value) {
-  return value && typeof value === "object" ? value : null;
-}
-async function responseToFilesError(response) {
-  const text = await response.text().catch(() => "");
-  const message = text || `File provider returned HTTP ${response.status}`;
-  if (response.status === 401 || response.status === 403) {
-    return new FilesError("Unauthorized", message, { status: response.status });
-  }
-  if (response.status === 404) {
-    return new FilesError("NotFound", message, { status: response.status });
-  }
-  if (response.status === 409 || response.status === 412) {
-    return new FilesError("Conflict", message, { status: response.status });
-  }
-  return new FilesError("Provider", message, { status: response.status });
-}
-function stripTrailingSlash(value) {
-  return value.replace(/\/+$/, "");
-}
-
-// src/fs/local-fs-provider.ts
-import { mkdir as mkdir2, readdir, rm as rm2, stat } from "node:fs/promises";
-import { dirname, join, relative, sep } from "node:path";
-var DEFAULT_ROOT_DIR = "./data/fs";
-
-class LocalFsProvider {
-  id = "local-fs";
-  capabilities = {
-    signedUrl: { supported: false }
-  };
-  rootDir;
-  constructor(options = {}) {
-    this.rootDir = options.rootDir ?? process.env.AGENT_FS_LOCAL_DIR ?? DEFAULT_ROOT_DIR;
-  }
-  async upload(scope, body, options = {}) {
-    const target = this.localPath(scope);
-    await mkdir2(dirname(target), { recursive: true });
-    if (options.ifNoneMatch === "*" && await this.exists(scope)) {
-      throw new FilesError("Conflict", "File already exists");
-    }
-    await Bun.write(target, await new Response(body).arrayBuffer());
-    if (options.contentType) {
-      await Bun.write(this.metaPath(target), JSON.stringify({ contentType: options.contentType }));
-    }
-    return this.head(scope);
-  }
-  async download(scope) {
-    const target = this.localPath(scope);
-    if (!await this.exists(scope)) {
-      throw new FilesError("NotFound", "File not found");
-    }
-    return new Response(Bun.file(target));
-  }
-  async head(scope) {
-    const target = this.localPath(scope);
-    try {
-      const info = await stat(target);
-      const storedContentType = await this.readStoredContentType(target);
-      return {
-        providerId: this.id,
-        key: providerPath(scope),
-        taskId: scope.taskId,
-        name: scope.name,
-        contentType: storedContentType ?? Bun.file(target).type ?? undefined,
-        sizeBytes: info.size,
-        updatedAt: info.mtime.toISOString()
-      };
-    } catch (error) {
-      if (error.code === "ENOENT") {
-        throw new FilesError("NotFound", "File not found", { cause: error });
-      }
-      throw new FilesError("Provider", "Unable to read file metadata", { cause: error });
-    }
-  }
-  async exists(scope) {
-    try {
-      await stat(this.localPath(scope));
-      return true;
-    } catch (error) {
-      if (error.code === "ENOENT") {
-        return false;
-      }
-      throw new FilesError("Provider", "Unable to check file existence", { cause: error });
-    }
-  }
-  async delete(scope) {
-    const target = this.localPath(scope);
-    await rm2(target, { force: true });
-    await rm2(this.metaPath(target), { force: true });
-  }
-  async copy(source, destination) {
-    const sourceHead = await this.head(source);
-    const response = await this.download(source);
-    await this.upload(destination, await response.arrayBuffer(), {
-      contentType: sourceHead.contentType
-    });
-    return this.head(destination);
-  }
-  async move(source, destination) {
-    const copied = await this.copy(source, destination);
-    await this.delete(source);
-    return copied;
-  }
-  async list(options) {
-    const taskRoot = join(this.rootDir, "tasks", encodeURIComponent(options.taskId));
-    const files = [];
-    await this.walk(taskRoot, async (path) => {
-      const rel = relative(taskRoot, path).split(sep).join("/");
-      const name = decodePath(rel);
-      if (options.prefix && !name.startsWith(options.prefix)) {
-        return;
-      }
-      files.push(await this.head({ taskId: options.taskId, name }));
-    });
-    return typeof options.limit === "number" ? files.slice(0, options.limit) : files;
-  }
-  async* listAll(options) {
-    for (const item of await this.list(options)) {
-      yield item;
-    }
-  }
-  async url(scope) {
-    return `/api/fs/tasks/${encodeURIComponent(scope.taskId)}/files/${encodeURIComponent(scope.name)}/raw`;
-  }
-  async signedUploadUrl() {
-    throw new FilesError("ReadOnly", "local-fs does not support signed upload URLs");
-  }
-  localPath(scope) {
-    return join(this.rootDir, providerPath(scope));
-  }
-  metaPath(target) {
-    return `${target}.meta.json`;
-  }
-  async readStoredContentType(target) {
-    try {
-      const metaFile = Bun.file(this.metaPath(target));
-      if (!await metaFile.exists()) {
-        return;
-      }
-      const meta = await metaFile.json();
-      return typeof meta?.contentType === "string" ? meta.contentType : undefined;
-    } catch {
-      return;
-    }
-  }
-  async walk(dir, visit) {
-    let entries;
-    try {
-      entries = await readdir(dir, { withFileTypes: true });
-    } catch (error) {
-      if (error.code === "ENOENT") {
-        return;
-      }
-      throw new FilesError("Provider", "Unable to list files", { cause: error });
-    }
-    for (const entry of entries) {
-      const path = join(dir, entry.name);
-      if (entry.isDirectory()) {
-        await this.walk(path, visit);
-      } else if (entry.isFile() && !entry.name.endsWith(".meta.json")) {
-        await visit(path);
-      }
-    }
-  }
-}
-function decodePath(path) {
-  return path.split("/").map((part) => decodeURIComponent(part)).join("/");
-}
-
-// src/fs/registry.ts
-var memoizedProvider = null;
-function getFileStorageProvider() {
-  if (!memoizedProvider) {
-    memoizedProvider = selectProvider();
-  }
-  return memoizedProvider;
-}
-function selectProvider() {
-  if (process.env.AGENT_FS_API_URL && (process.env.API_AGENT_FS_API_KEY || process.env.AGENT_FS_API_KEY)) {
-    return new AgentFsProvider;
-  }
-  return new LocalFsProvider;
-}
-
-// src/http/fs.ts
 init_request_auth_context();
 init_secret_scrubber();
 var MAX_UPLOAD_BYTES = 50 * 1024 * 1024;
@@ -4334,6 +3906,27 @@ var ensureAgentCredentialsRoute = route({
   },
   auth: { apiKey: true, agentId: true }
 });
+var inviteMemberRoute = route({
+  method: "post",
+  path: "/api/fs/members/invite",
+  pattern: ["api", "fs", "members", "invite"],
+  summary: "Invite an external member into the agent-fs shared org",
+  description: "The API server performs the invite with its own bootstrap credentials (which are API-only and never served over HTTP), provisioning the shared org/drive first when needed. Intended for the cloud control plane's Connect-to-Drive flow. No keys are returned; the invitee obtains their own key via agent-fs registration.",
+  tags: ["FS"],
+  body: exports_external.object({
+    email: exports_external.email(),
+    role: exports_external.enum(["viewer", "editor", "admin"]).default("editor")
+  }),
+  responses: {
+    200: { description: "Invite state ({ orgId, invited })" },
+    400: { description: "Invalid body" },
+    500: { description: "Provisioning or invite failed" }
+  },
+  auth: { apiKey: true },
+  rbac: {
+    ungated: "Tenant API key is the org-owner credential; the invite runs under the API server's own bootstrap identity, no per-agent principal applies."
+  }
+});
 var listTaskFilesRoute = route({
   method: "get",
   path: "/api/fs/tasks/{taskId}/files",
@@ -4439,6 +4032,19 @@ async function handleFs(req, res, pathSegments, queryParams, myAgentId) {
     }
     return true;
   }
+  if (inviteMemberRoute.match(req.method, pathSegments)) {
+    const parsed = await inviteMemberRoute.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    try {
+      const result = await inviteEmailToSharedOrg(parsed.body.email, parsed.body.role);
+      json(res, result);
+    } catch (error) {
+      const message = scrubSecrets(error instanceof Error ? error.message : String(error));
+      jsonError(res, `Failed to invite member to agent-fs shared org: ${message}`, 500);
+    }
+    return true;
+  }
   if (downloadTaskFileRoute.match(req.method, pathSegments)) {
     const parsed = await downloadTaskFileRoute.parse(req, res, pathSegments, queryParams);
     if (!parsed)
@@ -20689,14 +20295,14 @@ async function shutdown() {
     sessionsProcessed: getServerSessionsProcessed()
   });
   if (hasCapability("scheduling")) {
-    const { stopScheduler } = await import("./index-bc90csfq.js");
+    const { stopScheduler } = await import("./index-a2wmwh7d.js");
     stopScheduler();
   }
   stopHeartbeat();
   stopScriptRunSupervisor();
   await stopSlackApp();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { stopOAuthKeepalive } = await import("./keepalive-yjx8f7cq.js");
+    const { stopOAuthKeepalive } = await import("./keepalive-t3hw5tb4.js");
     await stopOAuthKeepalive();
   }
   stopMcpOAuthPendingGc();
@@ -20753,15 +20359,15 @@ try {
   throw err;
 }
 try {
-  const { seedPricingFromModelsDev } = await import("./seed-pricing-76xbxghj.js");
+  const { seedPricingFromModelsDev } = await import("./seed-pricing-vetpp3cy.js");
   seedPricingFromModelsDev();
-  const { startPricingRefreshLoop } = await import("./pricing-refresh-0dvbj3rq.js");
+  const { startPricingRefreshLoop } = await import("./pricing-refresh-0n50xvtx.js");
   startPricingRefreshLoop();
 } catch (err) {
   console.error("[startup] Failed to seed pricing rows:", err);
 }
 try {
-  const { ensureRbacSeedsSynced } = await import("./rbac-roles-1q4v9s52.js");
+  const { ensureRbacSeedsSynced } = await import("./rbac-roles-2m5b327a.js");
   ensureRbacSeedsSynced();
 } catch (err) {
   console.error("[startup] Failed to sync RBAC seed rows:", err);
@@ -20769,7 +20375,7 @@ try {
     throw err;
 }
 try {
-  const { runAllSeeders } = await import("./index-q1x8ttq6.js");
+  const { runAllSeeders } = await import("./index-1dcn9zk6.js");
   await runAllSeeders({ scriptEmbeddingMode: "skip" });
 } catch (err) {
   console.error("[startup] Failed to seed built-in entities:", err);
@@ -20805,35 +20411,35 @@ httpServer.listen(port, async () => {
   initWorkflows();
   startScriptRunSupervisor(getMcpBaseUrl());
   if (hasCapability("scheduling")) {
-    const { startScheduler } = await import("./index-bc90csfq.js");
-    const { getExecutorRegistry: getExecutorRegistry2 } = await import("./index-n6xq6x5d.js");
+    const { startScheduler } = await import("./index-a2wmwh7d.js");
+    const { getExecutorRegistry: getExecutorRegistry2 } = await import("./index-fjcjdmv1.js");
     const intervalMs = Number(process.env.SCHEDULER_INTERVAL_MS) || 1e4;
     startScheduler(getExecutorRegistry2(), intervalMs, {
       runId: globalState.__runId
     });
   }
   if (process.env.HEARTBEAT_DISABLE !== "true") {
-    const { startHeartbeat } = await import("./index-adgr531h.js");
+    const { startHeartbeat } = await import("./index-dnajx229.js");
     const heartbeatMs = Number(process.env.HEARTBEAT_INTERVAL_MS) || 90000;
     startHeartbeat(heartbeatMs);
   }
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { startOAuthKeepalive } = await import("./keepalive-yjx8f7cq.js");
+    const { startOAuthKeepalive } = await import("./keepalive-t3hw5tb4.js");
     startOAuthKeepalive();
   }
   if (process.env.OAUTH_REFRESH_SWEEP_DISABLE !== "true") {
-    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-s2jrst63.js");
+    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-41nw0tkp.js");
     startOAuthRefreshSweep();
   }
   startMcpOAuthPendingGc();
   startMemoryGc();
-  import("./boot-reembed-p00s3r7a.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+  import("./boot-reembed-knw7ta83.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
     console.error("[boot-reembed] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-reembed-b18pndap.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+  import("./boot-reembed-fk1zawyh.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
     console.error("[boot-reembed-scripts] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-scrub-logs-b9ym4xx3.js").then(({ runBootScrubLogs }) => runBootScrubLogs()).catch((err) => {
+  import("./boot-scrub-logs-rqq0drek.js").then(({ runBootScrubLogs }) => runBootScrubLogs()).catch((err) => {
     console.error("[boot-scrub-logs] startup scrub failed (non-fatal):", err);
   });
 }).on("error", (err) => {