@desplega.ai/agent-swarm 1.131.0 → 1.133.1

package/dist/{cli-nm5gtp1x.js → cli-2a75z9c5.js}

@@ -1,3 +1,6 @@
+import {
+  isMultiRuntimeEnabled
+} from "./cli-pzq5rjym.js";
 import {
   taskAttachmentDisplayUrl
 } from "./cli-t930g0xh.js";
@@ -9,20 +12,206 @@ import {
   getDb,
   getDependentTasks,
   getLeadAgent,
+  getSwarmConfigs,
   getTaskAttachments,
   getTaskById,
   hasNonTerminalRerouteDecisionChild,
   init_date_utils,
   init_db,
-  init_templates1 as init_templates,
-  normalizeDateRequired
-} from "./cli-a4jzdpa3.js";
+  init_templates,
+  normalizeDateRequired,
+  updateAgentMaxTasks,
+  updateAgentStatus,
+  upsertSwarmConfig
+} from "./cli-zfbf3srj.js";
 import {
-  init_env_flag,
   init_resolver,
-  isEnvFlagEnabled,
   resolveTemplate
-} from "./cli-xpxde7rm.js";
+} from "./cli-qes8ef67.js";
+import {
+  init_env_flag,
+  isEnvFlagEnabled
+} from "./cli-qys3rhhz.js";
+
+// src/be/multi-runtime.ts
+init_db();
+var AGENT_MAX_TASKS_CONFIG_KEY = "AGENT_MAX_TASKS";
+function parseAgentMaxTasksValue(raw) {
+  const str = raw.trim();
+  if (!/^\d+$/.test(str))
+    return null;
+  const value = Number(str);
+  return value >= 1 && value <= 100 ? value : null;
+}
+function defaultMaxTasksForAgent(agent) {
+  return agent.isLead ? 2 : 1;
+}
+function getAgentMaxTasksConfig(agentId) {
+  return getSwarmConfigs({ scope: "agent", scopeId: agentId, key: AGENT_MAX_TASKS_CONFIG_KEY })[0] ?? null;
+}
+function reconcileAgentMaxTasksPolicy(agentId) {
+  const agent = getAgentById(agentId);
+  if (!agent)
+    return;
+  const existing = getAgentMaxTasksConfig(agentId);
+  if (existing) {
+    const authoritative = parseAgentMaxTasksValue(existing.value);
+    if (authoritative !== null && authoritative !== (agent.maxTasks ?? 1)) {
+      updateAgentMaxTasks(agentId, authoritative);
+    }
+    return;
+  }
+  upsertSwarmConfig({
+    scope: "agent",
+    scopeId: agentId,
+    key: AGENT_MAX_TASKS_CONFIG_KEY,
+    value: String(agent.maxTasks ?? defaultMaxTasksForAgent(agent)),
+    description: "Logical agent max-tasks policy (seeded from agents.maxTasks)"
+  });
+}
+function resetAgentMaxTasksMirror(agentId) {
+  const agent = getAgentById(agentId);
+  if (!agent)
+    return;
+  updateAgentMaxTasks(agentId, defaultMaxTasksForAgent(agent));
+}
+function upsertSwarmConfigWithPolicyMirror(data) {
+  const scopeId = data.scope === "agent" ? data.scopeId : null;
+  if (!scopeId || data.key !== AGENT_MAX_TASKS_CONFIG_KEY) {
+    return upsertSwarmConfig(data);
+  }
+  return getDb().transaction(() => {
+    const row = upsertSwarmConfig(data);
+    const value = parseAgentMaxTasksValue(data.value);
+    if (value !== null)
+      updateAgentMaxTasks(scopeId, value);
+    return row;
+  })();
+}
+function rowToRuntimeInstance(row) {
+  let metadata = null;
+  if (row.metadata) {
+    try {
+      metadata = JSON.parse(row.metadata);
+    } catch {
+      metadata = null;
+    }
+  }
+  return {
+    id: row.id,
+    agentId: row.agent_id,
+    status: row.status,
+    reportedSlots: row.reported_slots,
+    credentialReady: row.credential_ready === null ? null : row.credential_ready === 1,
+    metadata,
+    lastSeenAt: row.last_seen_at,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at
+  };
+}
+function runtimeStaleThresholdMinutes() {
+  return Number(process.env.RUNTIME_STALE_THRESHOLD_MIN) || 5;
+}
+function runtimeLivenessCutoff() {
+  return new Date(Date.now() - runtimeStaleThresholdMinutes() * 60 * 1000).toISOString();
+}
+function upsertRuntimeInstance(instance) {
+  const metadataJson = instance.metadata ? JSON.stringify(instance.metadata) : null;
+  const row = getDb().prepare(`INSERT INTO runtime_instances (id, agent_id, status, reported_slots, metadata)
+       VALUES (?, ?, 'active', ?, ?)
+       ON CONFLICT(id) DO UPDATE SET
+         status = 'active',
+         reported_slots = excluded.reported_slots,
+         metadata = COALESCE(excluded.metadata, runtime_instances.metadata),
+         last_seen_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now'),
+         updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+       WHERE runtime_instances.agent_id = excluded.agent_id
+       RETURNING *`).get(instance.id, instance.agentId, instance.reportedSlots, metadataJson);
+  return row ? rowToRuntimeInstance(row) : null;
+}
+function getRuntimeInstanceById(id) {
+  const row = getDb().prepare("SELECT * FROM runtime_instances WHERE id = ?").get(id);
+  return row ? rowToRuntimeInstance(row) : null;
+}
+function touchRuntimeInstance(id, agentId) {
+  const result = getDb().prepare(`UPDATE runtime_instances
+       SET last_seen_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now'),
+           updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+       WHERE id = ? AND agent_id = ? AND status = 'active' AND last_seen_at >= ?`).run(id, agentId, runtimeLivenessCutoff());
+  return result.changes > 0;
+}
+function markRuntimeInstanceOffline(id, agentId) {
+  const row = getDb().prepare(`UPDATE runtime_instances
+       SET status = 'offline', updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+       WHERE id = ? AND agent_id = ? RETURNING *`).get(id, agentId);
+  return row ? rowToRuntimeInstance(row) : null;
+}
+function countActiveRuntimeInstancesForAgent(agentId) {
+  const result = getDb().prepare(`SELECT COUNT(*) as count FROM runtime_instances
+       WHERE agent_id = ? AND status = 'active' AND last_seen_at >= ?`).get(agentId, runtimeLivenessCutoff());
+  return result?.count ?? 0;
+}
+function listRuntimeInstancesForAgent(agentId) {
+  const rows = getDb().prepare(`SELECT *, (status = 'active' AND last_seen_at >= ?) AS is_live
+       FROM runtime_instances
+       WHERE agent_id = ?
+       ORDER BY created_at ASC, id ASC`).all(runtimeLivenessCutoff(), agentId);
+  return rows.map((row) => ({ ...rowToRuntimeInstance(row), isLive: row.is_live === 1 }));
+}
+function setRuntimeCredentialReady(id, agentId, ready) {
+  const result = getDb().prepare(`UPDATE runtime_instances
+       SET credential_ready = ?, updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+       WHERE id = ? AND agent_id = ? AND status = 'active' AND last_seen_at >= ?`).run(ready ? 1 : 0, id, agentId, runtimeLivenessCutoff());
+  return result.changes > 0;
+}
+function hasReadyLiveRuntime(agentId) {
+  const row = getDb().prepare(`SELECT COUNT(*) c FROM runtime_instances
+       WHERE agent_id = ? AND status = 'active' AND last_seen_at >= ?
+         AND (credential_ready IS NULL OR credential_ready = 1)`).get(agentId, runtimeLivenessCutoff());
+  return (row?.c ?? 0) > 0;
+}
+function reconcileAgentStatusFromRuntimes(agentId) {
+  const agent = getAgentById(agentId);
+  if (!agent)
+    return;
+  if (countActiveRuntimeInstancesForAgent(agentId) === 0) {
+    if (agent.status !== "offline")
+      updateAgentStatus(agentId, "offline");
+    return;
+  }
+  if (!hasReadyLiveRuntime(agentId)) {
+    if (agent.status !== "waiting_for_credentials") {
+      updateAgentStatus(agentId, "waiting_for_credentials");
+    }
+    return;
+  }
+  const next = getActiveTaskCount(agentId) > 0 ? "busy" : "idle";
+  if (agent.status !== next)
+    updateAgentStatus(agentId, next);
+}
+function agentsWithLiveRuntime() {
+  const rows = getDb().prepare(`SELECT DISTINCT agent_id FROM runtime_instances
+       WHERE status = 'active' AND last_seen_at >= ?`).all(runtimeLivenessCutoff());
+  return new Set(rows.map((r) => r.agent_id));
+}
+function expireStaleRuntimeInstances() {
+  if (!isMultiRuntimeEnabled()) {
+    return { expired: 0, agentsOffline: 0, pruned: 0 };
+  }
+  return getDb().transaction(() => {
+    const cutoff = runtimeLivenessCutoff();
+    const stale = getDb().prepare(`SELECT id, agent_id FROM runtime_instances
+         WHERE status = 'active' AND last_seen_at < ?`).all(cutoff);
+    const pruned = getDb().prepare("DELETE FROM runtime_instances WHERE last_seen_at < ?").run(cutoff).changes;
+    let agentsOffline = 0;
+    for (const agentId of new Set(stale.map((r) => r.agent_id))) {
+      reconcileAgentStatusFromRuntimes(agentId);
+      if (getAgentById(agentId)?.status === "offline")
+        agentsOffline++;
+    }
+    return { expired: stale.length, agentsOffline, pruned };
+  })();
+}
 
 // src/be/db-queries/tracker.ts
 init_date_utils();
@@ -387,4 +576,4 @@ function createPoolStarvationDecisionTask(args) {
   return { kind: "created", task: created };
 }
 
-export { getTrackerSync, getTrackerSyncByExternalId, createTrackerSyncIfAbsent, updateTrackerSyncSwarmId, repointTrackerSyncBySwarmId, createTrackerSync, updateTrackerSync, deleteTrackerSync, hasTrackerDelivery, markTrackerDelivery, getAllTrackerSyncs, createTrackerAgentMapping, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, getResumeGeneration, getNextResumeGeneration, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask };
+export { AGENT_MAX_TASKS_CONFIG_KEY, reconcileAgentMaxTasksPolicy, resetAgentMaxTasksMirror, upsertSwarmConfigWithPolicyMirror, runtimeStaleThresholdMinutes, upsertRuntimeInstance, getRuntimeInstanceById, touchRuntimeInstance, markRuntimeInstanceOffline, countActiveRuntimeInstancesForAgent, listRuntimeInstancesForAgent, setRuntimeCredentialReady, reconcileAgentStatusFromRuntimes, agentsWithLiveRuntime, expireStaleRuntimeInstances, getTrackerSync, getTrackerSyncByExternalId, createTrackerSyncIfAbsent, updateTrackerSyncSwarmId, repointTrackerSyncBySwarmId, createTrackerSync, updateTrackerSync, deleteTrackerSync, hasTrackerDelivery, markTrackerDelivery, getAllTrackerSyncs, createTrackerAgentMapping, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, getResumeGeneration, getNextResumeGeneration, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask };

package/dist/{cli-fywms69x.js → cli-2t30rj0d.js}

@@ -1,7 +1,7 @@
 import {
   init_package,
   package_default
-} from "./cli-72q8m8gk.js";
+} from "./cli-9nfc2es8.js";
 
 // src/commands/shared/client-config.ts
 init_package();

package/dist/{cli-cvgjwnh1.js → cli-3c3tdgab.js}

@@ -37,15 +37,15 @@ import {
   setSlackMessageTracking,
   slackContextKey,
   updateSlackMessageRecord
-} from "./cli-a4jzdpa3.js";
-import {
-  init_env_flag,
-  isEnvFlagEnabled
-} from "./cli-xpxde7rm.js";
+} from "./cli-zfbf3srj.js";
 import {
   getAppUrl,
   init_constants
 } from "./cli-x23me2mg.js";
+import {
+  init_env_flag,
+  isEnvFlagEnabled
+} from "./cli-qys3rhhz.js";
 import {
   require_receiver,
   require_sender,
@@ -55420,13 +55420,13 @@ async function initSlackApp() {
     socketMode: true,
     logLevel: import_bolt.LogLevel.DEBUG
   });
-  const { registerMessageHandler } = await import("./handlers-fkr6swat.js");
-  const { registerCommandHandler } = await import("./commands-c3nrc5hg.js");
-  const { registerActionHandlers } = await import("./actions-w53mbns9.js");
+  const { registerMessageHandler } = await import("./handlers-akazedvr.js");
+  const { registerCommandHandler } = await import("./commands-e23s1bff.js");
+  const { registerActionHandlers } = await import("./actions-cskpayd7.js");
   registerMessageHandler(app);
   registerCommandHandler(app);
   registerActionHandlers(app);
-  const { createAssistant } = await import("./assistant-bp65m6f3.js");
+  const { createAssistant } = await import("./assistant-b4exebdw.js");
   app.assistant(createAssistant());
   return app;
 }
@@ -55435,7 +55435,7 @@ async function startSlackApp() {
     await initSlackApp();
   }
   if (app) {
-    const { isSlackRenderV2Enabled: isSlackRenderV2Enabled2 } = await import("./render-v2-xm457ng1.js");
+    const { isSlackRenderV2Enabled: isSlackRenderV2Enabled2 } = await import("./render-v2-p61ppjey.js");
     if (isSlackRenderV2Enabled2())
       ensureSlackRenderV2Activation();
     await app.start();

package/dist/{cli-pm6xbh84.js → cli-3zzxa9jz.js}

@@ -1,12 +1,12 @@
-import {
-  McpHttpClient
-} from "./cli-epan13p1.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
+import {
+  McpHttpClient
+} from "./cli-epan13p1.js";
 import {
   embedScript
-} from "./cli-qv61hp37.js";
+} from "./cli-rch80c76.js";
 import {
   calculatePKCECodeChallenge,
   ensureAuthorizationTokenOrThrow,
@@ -18,7 +18,7 @@ import {
   oauthAppRowToProviderConfig,
   updateAuthorizationTokens,
   upsertAuthorization
-} from "./cli-g6b8x1h8.js";
+} from "./cli-g854s2dw.js";
 import {
   CredentialBroker,
   DEFAULT_CREDENTIAL_BINDINGS,
@@ -38,14 +38,14 @@ import {
   normalizeDateRequired,
   placeholderForConfigKey,
   upsertSwarmConfig
-} from "./cli-a4jzdpa3.js";
+} from "./cli-zfbf3srj.js";
 import {
   init_env_flag,
   isEnvFlagEnabled
-} from "./cli-xpxde7rm.js";
+} from "./cli-qys3rhhz.js";
 import {
   init_zod
-} from "./cli-zsspvvm2.js";
+} from "./cli-w1mp9jy7.js";
 import {
   init_secret_scrubber,
   refreshSecretScrubberCache,
@@ -55,7 +55,7 @@ import {
 } from "./cli-4j2mrzag.js";
 import {
   exports_external
-} from "./cli-5dsbcjjw.js";
+} from "./cli-jqwnqx9m.js";
 import {
   __commonJS,
   __require,
@@ -171126,7 +171126,8 @@ async function upsertScriptByName(args) {
     const argsJsonSchema2 = args.argsJsonSchema !== undefined ? args.argsJsonSchema : existing.argsJsonSchema;
     const trackedMetadataChanged = args.description !== existing.description || args.intent !== existing.intent || args.signatureJson !== existing.signatureJson || argsJsonSchema2 !== existing.argsJsonSchema;
     const promotedFromScratch = existing.isScratch && !isScratch2;
-    if (fsMode2 !== existing.fsMode || isScratch2 !== existing.isScratch || typeChecked2 !== existing.typeChecked || trackedMetadataChanged) {
+    const refreshScratchLastUsed = existing.scope === "agent" && existing.name.startsWith("scratch-") && existing.isScratch && isScratch2;
+    if (fsMode2 !== existing.fsMode || isScratch2 !== existing.isScratch || typeChecked2 !== existing.typeChecked || trackedMetadataChanged || refreshScratchLastUsed) {
       const row = getDb().prepare(`UPDATE scripts
           SET description = ?, intent = ?, signatureJson = ?, argsJsonSchema = ?,
             isScratch = ?, typeChecked = ?, fsMode = ?, updatedAt = ?, updated_by = ?
@@ -171235,6 +171236,15 @@ function deleteScript(args) {
   const result = getDb().run("DELETE FROM scripts WHERE id = ?", [existing.id]);
   return result.changes > 0;
 }
+function touchScratchScriptLastUsed(id, at = new Date().toISOString()) {
+  const result = getDb().prepare(`UPDATE scripts SET updatedAt = ?
+       WHERE id = ? AND scope = 'agent' AND isScratch = 1 AND name GLOB 'scratch-*'`).run(at, id);
+  return result.changes > 0 ? at : null;
+}
+function restoreScratchScriptLastUsedIfUnchanged(id, priorUpdatedAt, expectedUpdatedAt) {
+  return getDb().prepare(`UPDATE scripts SET updatedAt = ?
+         WHERE id = ? AND scope = 'agent' AND isScratch = 1 AND name GLOB 'scratch-*' AND updatedAt = ?`).run(priorUpdatedAt, id, expectedUpdatedAt).changes > 0;
+}
 var SCRIPT_API_ID_LEN = 12;
 function rowToScriptApi(row) {
   return {
@@ -171350,6 +171360,9 @@ async function buildEgressSecrets() {
   return await broker.resolveBindings({});
 }
 
+// src/scripts-runtime/executors/native.ts
+import { fileURLToPath } from "node:url";
+
 // src/utils/sandboxed-process.ts
 var DEFAULT_SANDBOX_LIMITS = {
   virtualMemoryMb: 512,
@@ -171359,23 +171372,39 @@ var DEFAULT_SANDBOX_LIMITS = {
   maxFdCount: 64
 };
 var BUN_SANDBOX_VIRTUAL_MEMORY_MB = 4096;
+var JAVASCRIPT_RUNTIME_SANDBOX_MAX_PROCS = 512;
+var JAVASCRIPT_RUNTIMES = new Set(["bun", "bunx", "node", "nodejs", "npx"]);
+var SHELL_RUNTIMES = new Set(["bash", "dash", "sh"]);
+function commandBasename(command) {
+  return command.slice(command.lastIndexOf("/") + 1);
+}
+function usesInterpreterSandboxProfile(innerCommand) {
+  const runtime = commandBasename(innerCommand[0] ?? "");
+  return JAVASCRIPT_RUNTIMES.has(runtime) || SHELL_RUNTIMES.has(runtime);
+}
 function shellQuote(value) {
   return `'${value.replaceAll("'", "'\\''")}'`;
 }
 function buildSandboxedCommand(innerCommand, env, limits = DEFAULT_SANDBOX_LIMITS) {
   if (process.platform === "win32")
     return [...innerCommand];
-  const virtualMemoryMb = innerCommand[0] === "bun" ? Math.max(limits.virtualMemoryMb, BUN_SANDBOX_VIRTUAL_MEMORY_MB) : limits.virtualMemoryMb;
+  const usesInterpreterProfile = usesInterpreterSandboxProfile(innerCommand);
+  const virtualMemoryMb = usesInterpreterProfile ? Math.max(limits.virtualMemoryMb, BUN_SANDBOX_VIRTUAL_MEMORY_MB) : limits.virtualMemoryMb;
+  const maxProcs = usesInterpreterProfile ? Math.max(limits.maxProcs, JAVASCRIPT_RUNTIME_SANDBOX_MAX_PROCS) : limits.maxProcs;
   const ulimits = [
     `ulimit -v ${Math.floor(virtualMemoryMb * 1024)} 2>/dev/null || true`,
     `ulimit -t ${limits.cpuTimeSec} 2>/dev/null || true`,
-    `ulimit -u ${limits.maxProcs} 2>/dev/null || true`,
+    `ulimit -u ${maxProcs} 2>/dev/null || true`,
     `ulimit -f ${limits.maxFileKb} 2>/dev/null || true`,
     `ulimit -n ${limits.maxFdCount} 2>/dev/null || true`
   ].join("; ");
   const envAssignments = Object.entries(env).map(([key, value]) => `${key}=${shellQuote(value)}`).join(" ");
   const quotedInner = innerCommand.map(shellQuote).join(" ");
-  return ["sh", "-c", `${ulimits}; exec env -i ${envAssignments} ${quotedInner}`];
+  return [
+    usesInterpreterProfile ? "bash" : "sh",
+    "-c",
+    `${ulimits}; exec env -i ${envAssignments} ${quotedInner}`
+  ];
 }
 function sandboxSpawnEnv(env) {
   return process.platform === "win32" ? { ...env } : { PATH: env.PATH ?? "" };
@@ -171508,7 +171537,7 @@ class NativeScriptExecutor {
     const sourceFile = `${tmpdir}/source.ts`;
     const resultFile = `${tmpdir}/result.json`;
     const errorFile = `${tmpdir}/error.json`;
-    const harnessPath = process.env.SCRIPT_RUNTIME_DIR ? `${process.env.SCRIPT_RUNTIME_DIR}/eval-harness.bundle.js` : new URL("../eval-harness.ts", import.meta.url).pathname;
+    const harnessPath = process.env.SCRIPT_RUNTIME_DIR ? `${process.env.SCRIPT_RUNTIME_DIR}/eval-harness.bundle.js` : fileURLToPath(new URL("../eval-harness.ts", import.meta.url));
     const controller = new AbortController;
     let timedOut = false;
     let killed = input.signal?.aborted ?? false;
@@ -171698,7 +171727,8 @@ async function buildConfigPayload(input) {
       mcpBaseUrl: {
         value: input.mcpBaseUrl ?? process.env.MCP_BASE_URL ?? "http://localhost:3013",
         isSecret: false
-      }
+      },
+      ...input.runtimeInstanceId ? { runtimeInstanceId: { value: input.runtimeInstanceId, isSecret: false } } : {}
     },
     user: input.userConfig ?? {},
     egressSecrets: input.egressSecrets ?? await buildEgressSecrets(),
@@ -171822,4 +171852,4 @@ async function buildScriptCredentialBindings(input) {
   return (await buildScriptCredentialBindingsWithFailures(input)).egressSecrets;
 }
 
-export { MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, isInvalidClientError, assertUrlSafe, publicEndpointSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, listVendoredOpenapiEntries, ConnectionAuthInputSchema, connectionAuthSummary, listRelationalCredentialBindings, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, getScriptConnectionById, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, createScriptApi, listScriptApisForScript, getScriptApiById, getScriptApiSecret, updateScriptApi, rotateScriptApiSecret, deleteScriptApi, recordScriptApiUsage, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, require_typescript, validateScriptImports, runScript, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildScriptCredentialBindings };
+export { MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, isInvalidClientError, assertUrlSafe, publicEndpointSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, listVendoredOpenapiEntries, ConnectionAuthInputSchema, connectionAuthSummary, listRelationalCredentialBindings, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, getScriptConnectionById, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, touchScratchScriptLastUsed, restoreScratchScriptLastUsedIfUnchanged, createScriptApi, listScriptApisForScript, getScriptApiById, getScriptApiSecret, updateScriptApi, rotateScriptApiSecret, deleteScriptApi, recordScriptApiUsage, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, require_typescript, validateScriptImports, runScript, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildScriptCredentialBindings };

package/dist/{cli-cdeg08wx.js → cli-4k6233gc.js}

@@ -3,7 +3,7 @@ import {
   getAgentById,
   getInProgressTasksByContextKey,
   init_db
-} from "./cli-a4jzdpa3.js";
+} from "./cli-zfbf3srj.js";
 
 // src/tasks/sibling-awareness.ts
 init_db();

package/dist/{cli-t55yw3a1.js → cli-5p2tz05r.js}

@@ -1,14 +1,14 @@
 import {
   buildModelsDevSeedRows,
   loadModelsDevCache
-} from "./cli-t1xze5qh.js";
+} from "./cli-13w2hwkh.js";
 import {
   createLogEntry,
   getActivePricingRow,
   getDb,
   init_db,
   insertPricingRow
-} from "./cli-a4jzdpa3.js";
+} from "./cli-zfbf3srj.js";
 import {
   init_secret_scrubber,
   scrubSecrets