@desplega.ai/agent-swarm 1.119.3 → 1.119.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (61) hide show
  1. package/dist/{actions-kd321p1j.js → actions-cvcf510b.js} +5 -5
  2. package/dist/{app-p1gqacgd.js → app-05ksvyna.js} +3 -3
  3. package/dist/{assistant-6w0zb089.js → assistant-wqr7nmqv.js} +8 -8
  4. package/dist/{boot-reembed-zktmj8zt.js → boot-reembed-dx3zweeh.js} +4 -4
  5. package/dist/{boot-reembed-7gy85nnp.js → boot-reembed-v0q84hej.js} +3 -3
  6. package/dist/{boot-scrub-logs-d8n8pcgr.js → boot-scrub-logs-3am4xegg.js} +2 -2
  7. package/dist/{cli-gzng1fst.js → cli-0y66mw72.js} +9 -7
  8. package/dist/{cli-527y7yzc.js → cli-1c5zhw9z.js} +3 -3
  9. package/dist/{cli-eb3s7zwh.js → cli-4xtzqzv4.js} +18 -18
  10. package/dist/{cli-yzxg93ma.js → cli-67e8g7bj.js} +4 -4
  11. package/dist/{cli-td2x0s9b.js → cli-758zm6xy.js} +1 -1
  12. package/dist/{cli-y82m27mq.js → cli-7mvmqemc.js} +1 -1
  13. package/dist/{cli-6expbmb3.js → cli-8jjrc3ww.js} +1 -1
  14. package/dist/{cli-p4yn675m.js → cli-bzjncaf6.js} +1 -1
  15. package/dist/{cli-8y1kmyn7.js → cli-chfh8r6f.js} +2 -2
  16. package/dist/{cli-3sew4a9j.js → cli-cs5g429e.js} +1 -1
  17. package/dist/{cli-j5da6jb2.js → cli-fhmhjjh4.js} +17 -29
  18. package/dist/{cli-e5hdn9nx.js → cli-h1bffz9b.js} +1 -1
  19. package/dist/{cli-9y4z25ke.js → cli-jfc1jm13.js} +1 -1
  20. package/dist/{cli-emgzr4ja.js → cli-k0x0fvh5.js} +5 -5
  21. package/dist/{cli-xgefj1nz.js → cli-kmtp1rg9.js} +2 -2
  22. package/dist/{cli-7yfmb4ne.js → cli-pc276yqz.js} +1 -1
  23. package/dist/{cli-j6n9at34.js → cli-pyagab0x.js} +2 -2
  24. package/dist/{cli-g5a31r9y.js → cli-qe43w9a5.js} +2 -2
  25. package/dist/{cli-z612d1nc.js → cli-qfp17rw8.js} +1 -1
  26. package/dist/{cli-9aqtt1dn.js → cli-rk6fkhkk.js} +5 -5
  27. package/dist/{cli-j2vpt4hd.js → cli-ttb3pty1.js} +4 -4
  28. package/dist/{cli-cx30v78p.js → cli-zm2jjaq6.js} +1 -1
  29. package/dist/{cli-get7n46a.js → cli-zrxpz200.js} +1 -1
  30. package/dist/cli.js +9 -9
  31. package/dist/{commands-14gkjns3.js → commands-3ke60h4e.js} +2 -2
  32. package/dist/{db-c9wx8pbf.js → db-a1e1nj43.js} +2 -2
  33. package/dist/{handlers-m9jxp50r.js → handlers-d86a4ypy.js} +8 -8
  34. package/dist/{hook-mm8mj3cp.js → hook-teegt6h5.js} +1 -1
  35. package/dist/{http-hhmh7m51.js → http-64jvxqnz.js} +33 -33
  36. package/dist/{index-vmcp507g.js → index-a95n0ay5.js} +8 -8
  37. package/dist/{index-basky7qw.js → index-bndzxk11.js} +10 -10
  38. package/dist/{index-9h6qre5v.js → index-hb9j1aqr.js} +6 -6
  39. package/dist/{index-ep25fyer.js → index-z39ch6n5.js} +9 -9
  40. package/dist/{keepalive-70mwsyhb.js → keepalive-ab1qpqrm.js} +4 -4
  41. package/dist/{lead-pshn5w58.js → lead-852gtrsa.js} +18 -18
  42. package/dist/{maintenance-rbjav7ey.js → maintenance-fke93wqq.js} +4 -4
  43. package/dist/{oauth-refresh-sweep-dfbd7yw0.js → oauth-refresh-sweep-a139pm5w.js} +3 -3
  44. package/dist/{onboard-g8911158.js → onboard-vcd22m9e.js} +2 -2
  45. package/dist/{otel-impl-qw4pakj6.js → otel-impl-88egk5hc.js} +1 -1
  46. package/dist/{pricing-refresh-7ra0g3az.js → pricing-refresh-bbg7s7qs.js} +4 -4
  47. package/dist/{rbac-roles-ksnmkjzf.js → rbac-roles-e169ndy2.js} +2 -2
  48. package/dist/{rbac-roles-s0esm5k6.js → rbac-roles-kc9t08gp.js} +3 -3
  49. package/dist/{seed-pricing-jd8zj8k7.js → seed-pricing-3zhtw483.js} +3 -3
  50. package/dist/{setup-z2s4vqf3.js → setup-6m99ne8y.js} +2 -2
  51. package/dist/{worker-xse3rpzd.js → worker-pwg46aav.js} +18 -18
  52. package/openapi.json +1 -1
  53. package/package.json +1 -1
  54. package/src/be/script-credential-broker.ts +12 -26
  55. package/src/scripts-runtime/credential-broker/broker.ts +15 -4
  56. package/src/scripts-runtime/credential-broker/index.ts +1 -0
  57. package/src/scripts-runtime/credential-broker/types.ts +1 -0
  58. package/src/scripts-runtime/egress-secrets.ts +2 -2
  59. package/src/scripts-runtime/loader.ts +3 -3
  60. package/src/tests/credential-broker.test.ts +130 -3
  61. package/src/tests/scripts-runtime-secret-egress.test.ts +4 -4
@@ -1,10 +1,10 @@
1
1
  import {
2
2
  resolveSlackUserId
3
- } from "./cli-j6n9at34.js";
4
- import"./cli-3sew4a9j.js";
3
+ } from "./cli-pyagab0x.js";
4
+ import"./cli-cs5g429e.js";
5
5
  import {
6
6
  createTaskWithSiblingAwareness
7
- } from "./cli-td2x0s9b.js";
7
+ } from "./cli-758zm6xy.js";
8
8
  import {
9
9
  buildCancelledBlocks,
10
10
  getTaskLink
@@ -19,11 +19,11 @@ import {
19
19
  init_context_key,
20
20
  init_db,
21
21
  slackContextKey
22
- } from "./cli-y82m27mq.js";
22
+ } from "./cli-7mvmqemc.js";
23
23
  import"./cli-z2zcxes1.js";
24
24
  import"./cli-bw80ck94.js";
25
25
  import"./cli-xz9aq0rf.js";
26
- import"./cli-cx30v78p.js";
26
+ import"./cli-zm2jjaq6.js";
27
27
  import"./cli-4j2mrzag.js";
28
28
  import"./cli-p9swy5t3.js";
29
29
 
@@ -3,17 +3,17 @@ import {
3
3
  initSlackApp,
4
4
  startSlackApp,
5
5
  stopSlackApp
6
- } from "./cli-emgzr4ja.js";
6
+ } from "./cli-k0x0fvh5.js";
7
7
  import"./cli-rkndnn90.js";
8
8
  import"./cli-b0p7rfnd.js";
9
9
  import"./cli-ma04faw5.js";
10
10
  import"./cli-wspgs9bt.js";
11
11
  import"./cli-dh55d5fg.js";
12
- import"./cli-y82m27mq.js";
12
+ import"./cli-7mvmqemc.js";
13
13
  import"./cli-z2zcxes1.js";
14
14
  import"./cli-bw80ck94.js";
15
15
  import"./cli-xz9aq0rf.js";
16
- import"./cli-cx30v78p.js";
16
+ import"./cli-zm2jjaq6.js";
17
17
  import"./cli-4j2mrzag.js";
18
18
  import"./cli-e15jhafb.js";
19
19
  import"./cli-7wmybrt5.js";
@@ -1,23 +1,23 @@
1
1
  import {
2
2
  bufferThreadMessage,
3
3
  wasEventSeen
4
- } from "./cli-9aqtt1dn.js";
4
+ } from "./cli-rk6fkhkk.js";
5
5
  import {
6
6
  hasOtherUserMention
7
- } from "./cli-9y4z25ke.js";
7
+ } from "./cli-jfc1jm13.js";
8
8
  import {
9
9
  require_dist
10
- } from "./cli-emgzr4ja.js";
10
+ } from "./cli-k0x0fvh5.js";
11
11
  import"./cli-rkndnn90.js";
12
12
  import"./cli-b0p7rfnd.js";
13
13
  import {
14
14
  resolveSlackUserId,
15
15
  rewriteSlackMentions
16
- } from "./cli-j6n9at34.js";
17
- import"./cli-3sew4a9j.js";
16
+ } from "./cli-pyagab0x.js";
17
+ import"./cli-cs5g429e.js";
18
18
  import {
19
19
  createTaskWithSiblingAwareness
20
- } from "./cli-td2x0s9b.js";
20
+ } from "./cli-758zm6xy.js";
21
21
  import"./cli-ma04faw5.js";
22
22
  import"./cli-wspgs9bt.js";
23
23
  import"./cli-dh55d5fg.js";
@@ -30,11 +30,11 @@ import {
30
30
  init_resolver,
31
31
  resolveTemplate,
32
32
  slackContextKey
33
- } from "./cli-y82m27mq.js";
33
+ } from "./cli-7mvmqemc.js";
34
34
  import"./cli-z2zcxes1.js";
35
35
  import"./cli-bw80ck94.js";
36
36
  import"./cli-xz9aq0rf.js";
37
- import"./cli-cx30v78p.js";
37
+ import"./cli-zm2jjaq6.js";
38
38
  import"./cli-4j2mrzag.js";
39
39
  import"./cli-e15jhafb.js";
40
40
  import"./cli-7wmybrt5.js";
@@ -1,17 +1,17 @@
1
1
  import {
2
2
  embedScript,
3
3
  embeddingProvider
4
- } from "./cli-xgefj1nz.js";
5
- import"./cli-6expbmb3.js";
4
+ } from "./cli-kmtp1rg9.js";
5
+ import"./cli-8jjrc3ww.js";
6
6
  import"./cli-q25ejbyn.js";
7
7
  import {
8
8
  getDb,
9
9
  init_db
10
- } from "./cli-y82m27mq.js";
10
+ } from "./cli-7mvmqemc.js";
11
11
  import"./cli-z2zcxes1.js";
12
12
  import"./cli-bw80ck94.js";
13
13
  import"./cli-xz9aq0rf.js";
14
- import"./cli-cx30v78p.js";
14
+ import"./cli-zm2jjaq6.js";
15
15
  import"./cli-4j2mrzag.js";
16
16
  import"./cli-p9swy5t3.js";
17
17
 
@@ -3,16 +3,16 @@ import {
3
3
  getEmbeddingProvider,
4
4
  getMemoryStore,
5
5
  init_constants
6
- } from "./cli-6expbmb3.js";
6
+ } from "./cli-8jjrc3ww.js";
7
7
  import"./cli-q25ejbyn.js";
8
8
  import {
9
9
  getDb,
10
10
  init_db
11
- } from "./cli-y82m27mq.js";
11
+ } from "./cli-7mvmqemc.js";
12
12
  import"./cli-z2zcxes1.js";
13
13
  import"./cli-bw80ck94.js";
14
14
  import"./cli-xz9aq0rf.js";
15
- import"./cli-cx30v78p.js";
15
+ import"./cli-zm2jjaq6.js";
16
16
  import"./cli-4j2mrzag.js";
17
17
  import"./cli-p9swy5t3.js";
18
18
 
@@ -1,11 +1,11 @@
1
1
  import {
2
2
  getDb,
3
3
  init_db
4
- } from "./cli-y82m27mq.js";
4
+ } from "./cli-7mvmqemc.js";
5
5
  import"./cli-z2zcxes1.js";
6
6
  import"./cli-bw80ck94.js";
7
7
  import"./cli-xz9aq0rf.js";
8
- import"./cli-cx30v78p.js";
8
+ import"./cli-zm2jjaq6.js";
9
9
  import {
10
10
  init_secret_scrubber,
11
11
  scrubSecrets
@@ -3,7 +3,7 @@ import {
3
3
  } from "./cli-jkhwmmgg.js";
4
4
  import {
5
5
  embedScript
6
- } from "./cli-xgefj1nz.js";
6
+ } from "./cli-kmtp1rg9.js";
7
7
  import {
8
8
  calculatePKCECodeChallenge,
9
9
  generateRandomCodeVerifier,
@@ -22,7 +22,7 @@ import {
22
22
  init_date_utils,
23
23
  init_db,
24
24
  normalizeDateRequired
25
- } from "./cli-y82m27mq.js";
25
+ } from "./cli-7mvmqemc.js";
26
26
  import {
27
27
  init_zod
28
28
  } from "./cli-bw80ck94.js";
@@ -169081,14 +169081,16 @@ function bindingHasPlaceholder(binding) {
169081
169081
 
169082
169082
  class CredentialBroker {
169083
169083
  store;
169084
- resolveCredential;
169084
+ resolveConfigCredential;
169085
169085
  defaults;
169086
- constructor(store, resolveCredential, defaults = []) {
169086
+ resolveOAuthCredential;
169087
+ constructor(store, resolveConfigCredential, defaults = [], resolveOAuthCredential) {
169087
169088
  this.store = store;
169088
- this.resolveCredential = resolveCredential;
169089
+ this.resolveConfigCredential = resolveConfigCredential;
169089
169090
  this.defaults = defaults;
169091
+ this.resolveOAuthCredential = resolveOAuthCredential;
169090
169092
  }
169091
- resolveBindings(context) {
169093
+ async resolveBindings(context) {
169092
169094
  const merged = [...this.defaults, ...this.store.listActiveBindings(context)];
169093
169095
  const resolved = [];
169094
169096
  const seen = new Set;
@@ -169097,7 +169099,7 @@ class CredentialBroker {
169097
169099
  continue;
169098
169100
  if (!bindingHasPlaceholder(binding))
169099
169101
  continue;
169100
- const value = this.resolveCredential(binding.configKey);
169102
+ const value = binding.authKind === "oauth" ? binding.oauthProvider ? await this.resolveOAuthCredential?.(binding.oauthProvider) : undefined : this.resolveConfigCredential(binding.configKey);
169101
169103
  if (!value)
169102
169104
  continue;
169103
169105
  const dedupeKey = [
@@ -7,11 +7,11 @@ import {
7
7
  getPinCandidateAgent,
8
8
  getResumeGeneration,
9
9
  repointTrackerSyncBySwarmId
10
- } from "./cli-z612d1nc.js";
10
+ } from "./cli-qfp17rw8.js";
11
11
  import {
12
12
  getExecutorRegistry,
13
13
  recoverIncompleteRuns
14
- } from "./cli-j5da6jb2.js";
14
+ } from "./cli-fhmhjjh4.js";
15
15
  import {
16
16
  MAX_EMPTY_POLLS,
17
17
  assignUnassignedTaskPending,
@@ -51,7 +51,7 @@ import {
51
51
  resolveTemplate,
52
52
  supersedeTask,
53
53
  updateAgentStatus
54
- } from "./cli-y82m27mq.js";
54
+ } from "./cli-7mvmqemc.js";
55
55
 
56
56
  // src/heartbeat/heartbeat.ts
57
57
  init_db();
@@ -13,17 +13,17 @@ import {
13
13
  ensure,
14
14
  require_dist,
15
15
  runScheduleNow
16
- } from "./cli-yzxg93ma.js";
16
+ } from "./cli-67e8g7bj.js";
17
17
  import {
18
18
  startPricingRefreshLoop
19
- } from "./cli-8y1kmyn7.js";
19
+ } from "./cli-chfh8r6f.js";
20
20
  import {
21
21
  seedPricingFromModelsDev
22
- } from "./cli-e5hdn9nx.js";
22
+ } from "./cli-h1bffz9b.js";
23
23
  import {
24
24
  ensureRbacSeedsSynced,
25
25
  getUserGrant
26
- } from "./cli-7yfmb4ne.js";
26
+ } from "./cli-pc276yqz.js";
27
27
  import {
28
28
  can,
29
29
  decideAdmission,
@@ -43,7 +43,7 @@ import {
43
43
  repointTrackerSyncBySwarmId,
44
44
  updateTrackerSync,
45
45
  updateTrackerSyncSwarmId
46
- } from "./cli-z612d1nc.js";
46
+ } from "./cli-qfp17rw8.js";
47
47
  import {
48
48
  TriggerSchemaError,
49
49
  applyDefinitionPatch,
@@ -57,7 +57,7 @@ import {
57
57
  startWorkflowExecution,
58
58
  validateDefinition,
59
59
  validateJsonSchema
60
- } from "./cli-j5da6jb2.js";
60
+ } from "./cli-fhmhjjh4.js";
61
61
  import {
62
62
  getApiKey
63
63
  } from "./cli-f14fvzag.js";
@@ -68,7 +68,7 @@ import {
68
68
  getOAuthApp,
69
69
  getOAuthTokens,
70
70
  upsertOAuthApp
71
- } from "./cli-p4yn675m.js";
71
+ } from "./cli-bzjncaf6.js";
72
72
  import {
73
73
  CREDENTIAL_BINDINGS_CONFIG_KEY,
74
74
  CredentialBindingSchema,
@@ -85,7 +85,7 @@ import {
85
85
  setScriptConnectionEnabled,
86
86
  upsertCredentialBinding,
87
87
  upsertScriptConnection
88
- } from "./cli-gzng1fst.js";
88
+ } from "./cli-0y66mw72.js";
89
89
  import {
90
90
  CANDIDATE_SET_MULTIPLIER,
91
91
  computeScore,
@@ -97,7 +97,7 @@ import {
97
97
  isGraphExpansionEnabled,
98
98
  rerank,
99
99
  rowToCandidate
100
- } from "./cli-6expbmb3.js";
100
+ } from "./cli-8jjrc3ww.js";
101
101
  import {
102
102
  ZodFirstPartyTypeKind,
103
103
  objectType
@@ -106,12 +106,12 @@ import {
106
106
  createAdditiveBuffer,
107
107
  extractSlackMessageText,
108
108
  parseSlackTs
109
- } from "./cli-9y4z25ke.js";
109
+ } from "./cli-jfc1jm13.js";
110
110
  import {
111
111
  getSlackApp,
112
112
  startSlackApp,
113
113
  stopSlackApp
114
- } from "./cli-emgzr4ja.js";
114
+ } from "./cli-k0x0fvh5.js";
115
115
  import {
116
116
  findOrCreateUserByEmail,
117
117
  findUserByExternalId,
@@ -127,10 +127,10 @@ import {
127
127
  resolveIdentityByEmail,
128
128
  resolveUserByToken,
129
129
  unlinkIdentity
130
- } from "./cli-3sew4a9j.js";
130
+ } from "./cli-cs5g429e.js";
131
131
  import {
132
132
  createTaskWithSiblingAwareness
133
- } from "./cli-td2x0s9b.js";
133
+ } from "./cli-758zm6xy.js";
134
134
  import {
135
135
  markdownToSlack
136
136
  } from "./cli-ma04faw5.js";
@@ -377,7 +377,7 @@ import {
377
377
  upsertService,
378
378
  upsertSwarmConfig,
379
379
  validateConfigValue
380
- } from "./cli-y82m27mq.js";
380
+ } from "./cli-7mvmqemc.js";
381
381
  import {
382
382
  init_zod
383
383
  } from "./cli-bw80ck94.js";
@@ -422,7 +422,7 @@ import {
422
422
  import {
423
423
  init_package,
424
424
  package_default
425
- } from "./cli-cx30v78p.js";
425
+ } from "./cli-zm2jjaq6.js";
426
426
  import {
427
427
  init_secret_scrubber,
428
428
  refreshSecretScrubberCache,
@@ -19710,7 +19710,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
19710
19710
  return;
19711
19711
  initialized2 = true;
19712
19712
  try {
19713
- const impl = await import("./otel-impl-qw4pakj6.js");
19713
+ const impl = await import("./otel-impl-88egk5hc.js");
19714
19714
  await impl.boot(serviceRole);
19715
19715
  realWithSpan = impl.withSpan;
19716
19716
  realStartSpan = impl.startSpan;
@@ -34997,7 +34997,7 @@ async function notifySlack(text) {
34997
34997
  return;
34998
34998
  }
34999
34999
  try {
35000
- const { getSlackApp: getSlackApp2 } = await import("./app-p1gqacgd.js");
35000
+ const { getSlackApp: getSlackApp2 } = await import("./app-05ksvyna.js");
35001
35001
  const app = getSlackApp2();
35002
35002
  if (!app) {
35003
35003
  console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -35066,7 +35066,7 @@ async function deleteJiraWebhook(webhookId) {
35066
35066
  console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
35067
35067
  }
35068
35068
  async function overwriteWebhookIds(next) {
35069
- const { getDb: getDb2 } = await import("./db-c9wx8pbf.js");
35069
+ const { getDb: getDb2 } = await import("./db-a1e1nj43.js");
35070
35070
  const db = getDb2();
35071
35071
  const txn = db.transaction(() => {
35072
35072
  const row = db.query("SELECT metadata FROM oauth_apps WHERE provider = 'jira'").get();
@@ -4,15 +4,15 @@ import {
4
4
  handleScheduleTrigger,
5
5
  runScript,
6
6
  startWorkflowExecution
7
- } from "./cli-j5da6jb2.js";
7
+ } from "./cli-fhmhjjh4.js";
8
8
  import {
9
9
  getScript,
10
10
  getScriptApiConnectionDescriptors,
11
11
  getScriptMcpConnectionDescriptors
12
- } from "./cli-gzng1fst.js";
12
+ } from "./cli-0y66mw72.js";
13
13
  import {
14
14
  createTaskWithSiblingAwareness
15
- } from "./cli-td2x0s9b.js";
15
+ } from "./cli-758zm6xy.js";
16
16
  import {
17
17
  getDb,
18
18
  getDueScheduledTasks,
@@ -24,7 +24,7 @@ import {
24
24
  scheduleContextKey,
25
25
  telemetry,
26
26
  updateScheduledTask
27
- } from "./cli-y82m27mq.js";
27
+ } from "./cli-7mvmqemc.js";
28
28
  import {
29
29
  __commonJS,
30
30
  __require,
@@ -3,7 +3,7 @@ import {
3
3
  getAgentById,
4
4
  getInProgressTasksByContextKey,
5
5
  init_db
6
- } from "./cli-y82m27mq.js";
6
+ } from "./cli-7mvmqemc.js";
7
7
 
8
8
  // src/tasks/sibling-awareness.ts
9
9
  init_db();
@@ -26,7 +26,7 @@ import {
26
26
  import {
27
27
  init_package,
28
28
  package_default
29
- } from "./cli-cx30v78p.js";
29
+ } from "./cli-zm2jjaq6.js";
30
30
  import {
31
31
  init_secret_scrubber,
32
32
  scrubSecrets
@@ -6,7 +6,7 @@ import {
6
6
  getDb,
7
7
  init_db,
8
8
  isSqliteVecAvailable
9
- } from "./cli-y82m27mq.js";
9
+ } from "./cli-7mvmqemc.js";
10
10
  import {
11
11
  __esm,
12
12
  __export,
@@ -8,7 +8,7 @@ import {
8
8
  init_date_utils,
9
9
  init_db,
10
10
  normalizeDateRequired
11
- } from "./cli-y82m27mq.js";
11
+ } from "./cli-7mvmqemc.js";
12
12
 
13
13
  // src/be/db-queries/oauth.ts
14
14
  init_date_utils();
@@ -1,13 +1,13 @@
1
1
  import {
2
2
  buildModelsDevSeedRows
3
- } from "./cli-e5hdn9nx.js";
3
+ } from "./cli-h1bffz9b.js";
4
4
  import {
5
5
  createLogEntry,
6
6
  getActivePricingRow,
7
7
  getDb,
8
8
  init_db,
9
9
  insertPricingRow
10
- } from "./cli-y82m27mq.js";
10
+ } from "./cli-7mvmqemc.js";
11
11
  import {
12
12
  init_secret_scrubber,
13
13
  scrubSecrets
@@ -4,7 +4,7 @@ import {
4
4
  incrKv,
5
5
  init_db,
6
6
  upsertKv
7
- } from "./cli-y82m27mq.js";
7
+ } from "./cli-7mvmqemc.js";
8
8
 
9
9
  // src/be/users.ts
10
10
  init_db();
@@ -7,7 +7,7 @@ import {
7
7
  getOAuthTokens,
8
8
  isTokenExpiringSoon,
9
9
  oauthAppRowToProviderConfig
10
- } from "./cli-p4yn675m.js";
10
+ } from "./cli-bzjncaf6.js";
11
11
  import {
12
12
  CredentialBroker,
13
13
  DEFAULT_CREDENTIAL_BINDINGS,
@@ -18,10 +18,10 @@ import {
18
18
  getScriptVersion,
19
19
  listRelationalCredentialBindings,
20
20
  validateScriptImports
21
- } from "./cli-gzng1fst.js";
21
+ } from "./cli-0y66mw72.js";
22
22
  import {
23
23
  withSiblingAwareness
24
- } from "./cli-td2x0s9b.js";
24
+ } from "./cli-758zm6xy.js";
25
25
  import {
26
26
  getAppUrl
27
27
  } from "./cli-dh55d5fg.js";
@@ -72,7 +72,7 @@ import {
72
72
  updateWorkflowRun,
73
73
  updateWorkflowRunStep,
74
74
  workflowContextKey
75
- } from "./cli-y82m27mq.js";
75
+ } from "./cli-7mvmqemc.js";
76
76
  import {
77
77
  init_zod
78
78
  } from "./cli-bw80ck94.js";
@@ -2617,7 +2617,7 @@ class HumanInTheLoopExecutor extends BaseExecutor {
2617
2617
  }
2618
2618
  if (notification.channel === "slack") {
2619
2619
  try {
2620
- const { getSlackApp } = await import("./app-p1gqacgd.js");
2620
+ const { getSlackApp } = await import("./app-05ksvyna.js");
2621
2621
  const slackApp = getSlackApp();
2622
2622
  if (!slackApp) {
2623
2623
  console.warn("[HITL] Slack not initialized — cannot send notification");
@@ -2731,7 +2731,7 @@ class NotifyExecutor extends BaseExecutor {
2731
2731
  }
2732
2732
  }
2733
2733
  case "slack": {
2734
- const { getSlackApp } = await import("./app-p1gqacgd.js");
2734
+ const { getSlackApp } = await import("./app-05ksvyna.js");
2735
2735
  const app = getSlackApp();
2736
2736
  if (!app) {
2737
2737
  return {
@@ -3066,28 +3066,16 @@ class RelationalCredentialBindingStore extends SwarmConfigCredentialBindingStore
3066
3066
  async function buildScriptCredentialBindings(input) {
3067
3067
  const resolvedConfigs = getResolvedConfig(input.agentId, input.repoId);
3068
3068
  const configMap = new Map(resolvedConfigs.map((config) => [config.key, config.value]));
3069
- const relationalBindings = listRelationalCredentialBindings(input);
3070
- for (const binding of relationalBindings) {
3071
- if (binding.authKind !== "oauth")
3072
- continue;
3073
- configMap.set(binding.configKey, "");
3074
- if (!binding.oauthProvider)
3075
- continue;
3076
- let accessToken;
3069
+ const broker = new CredentialBroker(new RelationalCredentialBindingStore((filters) => getSwarmConfigs(filters)), (configKey) => configMap.get(configKey) ?? process.env[configKey], DEFAULT_CREDENTIAL_BINDINGS, async (provider) => {
3077
3070
  try {
3078
- accessToken = await resolveOAuthBindingToken(binding.oauthProvider);
3071
+ return await resolveOAuthBindingToken(provider);
3079
3072
  } catch (err) {
3080
3073
  const message = err instanceof Error ? err.message : String(err);
3081
- console.warn(`[script-credential-broker] skipping OAuth binding ${binding.configKey}: token refresh for provider ${binding.oauthProvider} failed: ${scrubSecrets(message)}`);
3082
- continue;
3074
+ console.warn(`[script-credential-broker] skipping OAuth provider ${provider}: ${scrubSecrets(message)}`);
3075
+ return;
3083
3076
  }
3084
- if (!accessToken)
3085
- continue;
3086
- configMap.set(binding.configKey, accessToken);
3087
- registerVolatileSecret(accessToken, binding.configKey);
3088
- }
3089
- const broker = new CredentialBroker(new RelationalCredentialBindingStore((filters) => getSwarmConfigs(filters)), (configKey) => configMap.get(configKey) ?? process.env[configKey], DEFAULT_CREDENTIAL_BINDINGS);
3090
- const bindings = broker.resolveBindings({ agentId: input.agentId, repoId: input.repoId });
3077
+ });
3078
+ const bindings = await broker.resolveBindings({ agentId: input.agentId, repoId: input.repoId });
3091
3079
  for (const binding of bindings) {
3092
3080
  registerVolatileSecret(binding.value, binding.configKey);
3093
3081
  }
@@ -3109,9 +3097,9 @@ var DEFAULT_SCRIPT_RESOURCES = {
3109
3097
  init_secret_scrubber();
3110
3098
 
3111
3099
  // src/scripts-runtime/egress-secrets.ts
3112
- function buildEgressSecrets() {
3100
+ async function buildEgressSecrets() {
3113
3101
  const broker = new CredentialBroker({ listActiveBindings: () => [] }, (configKey) => process.env[configKey], DEFAULT_CREDENTIAL_BINDINGS);
3114
- return broker.resolveBindings({});
3102
+ return await broker.resolveBindings({});
3115
3103
  }
3116
3104
 
3117
3105
  // src/scripts-runtime/executors/native.ts
@@ -3345,7 +3333,7 @@ function getScriptExecutor(name = process.env.SCRIPT_EXECUTOR ?? "native") {
3345
3333
  }
3346
3334
 
3347
3335
  // src/scripts-runtime/loader.ts
3348
- function buildConfigPayload(input) {
3336
+ async function buildConfigPayload(input) {
3349
3337
  const apiKey = getApiKey();
3350
3338
  if (!apiKey)
3351
3339
  throw new Error("Swarm API key is required to run scripts");
@@ -3359,7 +3347,7 @@ function buildConfigPayload(input) {
3359
3347
  }
3360
3348
  },
3361
3349
  user: input.userConfig ?? {},
3362
- egressSecrets: input.egressSecrets ?? buildEgressSecrets(),
3350
+ egressSecrets: input.egressSecrets ?? await buildEgressSecrets(),
3363
3351
  apiConnections: input.apiConnections ?? [],
3364
3352
  mcpConnections: input.mcpConnections ?? []
3365
3353
  };
@@ -3396,7 +3384,7 @@ async function runScript(input) {
3396
3384
  const output = await getScriptExecutor().run({
3397
3385
  source: input.source,
3398
3386
  args: input.args ?? null,
3399
- configPayload: buildConfigPayload(input),
3387
+ configPayload: await buildConfigPayload(input),
3400
3388
  resources,
3401
3389
  fsMode: input.fsMode ?? "none",
3402
3390
  network: "open",
@@ -1,7 +1,7 @@
1
1
  import {
2
2
  getDb,
3
3
  init_db
4
- } from "./cli-y82m27mq.js";
4
+ } from "./cli-7mvmqemc.js";
5
5
 
6
6
  // src/be/seed-pricing.ts
7
7
  init_db();
@@ -3,7 +3,7 @@ import {
3
3
  getAgentWorkingOnThread,
4
4
  getAllAgents,
5
5
  init_db
6
- } from "./cli-y82m27mq.js";
6
+ } from "./cli-7mvmqemc.js";
7
7
 
8
8
  // src/slack/router.ts
9
9
  init_db();
@@ -27,7 +27,7 @@ import {
27
27
  getTaskById,
28
28
  init_db,
29
29
  setSlackMessageTracking
30
- } from "./cli-y82m27mq.js";
30
+ } from "./cli-7mvmqemc.js";
31
31
  import {
32
32
  require_receiver,
33
33
  require_sender,
@@ -55073,13 +55073,13 @@ async function initSlackApp() {
55073
55073
  socketMode: true,
55074
55074
  logLevel: import_bolt.LogLevel.DEBUG
55075
55075
  });
55076
- const { registerMessageHandler } = await import("./handlers-m9jxp50r.js");
55077
- const { registerCommandHandler } = await import("./commands-14gkjns3.js");
55078
- const { registerActionHandlers } = await import("./actions-kd321p1j.js");
55076
+ const { registerMessageHandler } = await import("./handlers-d86a4ypy.js");
55077
+ const { registerCommandHandler } = await import("./commands-3ke60h4e.js");
55078
+ const { registerActionHandlers } = await import("./actions-cvcf510b.js");
55079
55079
  registerMessageHandler(app);
55080
55080
  registerCommandHandler(app);
55081
55081
  registerActionHandlers(app);
55082
- const { createAssistant } = await import("./assistant-6w0zb089.js");
55082
+ const { createAssistant } = await import("./assistant-wqr7nmqv.js");
55083
55083
  app.assistant(createAssistant());
55084
55084
  return app;
55085
55085
  }
@@ -4,11 +4,11 @@ import {
4
4
  getEmbeddingProvider,
5
5
  init_embedding,
6
6
  serializeEmbedding
7
- } from "./cli-6expbmb3.js";
7
+ } from "./cli-8jjrc3ww.js";
8
8
  import {
9
9
  getDb,
10
10
  init_db
11
- } from "./cli-y82m27mq.js";
11
+ } from "./cli-7mvmqemc.js";
12
12
  import {
13
13
  init_secret_scrubber,
14
14
  scrubSecrets
@@ -4,7 +4,7 @@ import {
4
4
  import {
5
5
  getDb,
6
6
  init_db
7
- } from "./cli-y82m27mq.js";
7
+ } from "./cli-7mvmqemc.js";
8
8
 
9
9
  // src/be/rbac-roles.ts
10
10
  init_db();
@@ -4,12 +4,12 @@ import {
4
4
  linkIdentity,
5
5
  recordUnmappedIdentity,
6
6
  resolveIdentity
7
- } from "./cli-3sew4a9j.js";
7
+ } from "./cli-cs5g429e.js";
8
8
  import {
9
9
  getKv,
10
10
  init_db,
11
11
  upsertKv
12
- } from "./cli-y82m27mq.js";
12
+ } from "./cli-7mvmqemc.js";
13
13
 
14
14
  // src/slack/enrich.ts
15
15
  init_db();