@desplega.ai/agent-swarm 1.131.1 → 1.134.0

package/dist/{cli-3ty0t082.js → cli-43x36mty.js}

@@ -1,6 +1,9 @@
+import {
+  isMultiRuntimeEnabled
+} from "./cli-qh4sqfws.js";
 import {
   taskAttachmentDisplayUrl
-} from "./cli-t930g0xh.js";
+} from "./cli-5tnr64pm.js";
 import {
   buildRoutingAffinityFromAgent,
   createTaskExtended,
@@ -9,20 +12,206 @@ import {
   getDb,
   getDependentTasks,
   getLeadAgent,
+  getSwarmConfigs,
   getTaskAttachments,
   getTaskById,
   hasNonTerminalRerouteDecisionChild,
   init_date_utils,
   init_db,
-  init_templates1 as init_templates,
-  normalizeDateRequired
-} from "./cli-50vbt00w.js";
+  init_templates,
+  normalizeDateRequired,
+  updateAgentMaxTasks,
+  updateAgentStatus,
+  upsertSwarmConfig
+} from "./cli-m07313tr.js";
 import {
-  init_env_flag,
   init_resolver,
-  isEnvFlagEnabled,
   resolveTemplate
-} from "./cli-xpxde7rm.js";
+} from "./cli-2wv4kj0e.js";
+import {
+  init_env_flag,
+  isEnvFlagEnabled
+} from "./cli-nanaxrz6.js";
+
+// src/be/multi-runtime.ts
+init_db();
+var AGENT_MAX_TASKS_CONFIG_KEY = "AGENT_MAX_TASKS";
+function parseAgentMaxTasksValue(raw) {
+  const str = raw.trim();
+  if (!/^\d+$/.test(str))
+    return null;
+  const value = Number(str);
+  return value >= 1 && value <= 100 ? value : null;
+}
+function defaultMaxTasksForAgent(agent) {
+  return agent.isLead ? 2 : 1;
+}
+function getAgentMaxTasksConfig(agentId) {
+  return getSwarmConfigs({ scope: "agent", scopeId: agentId, key: AGENT_MAX_TASKS_CONFIG_KEY })[0] ?? null;
+}
+function reconcileAgentMaxTasksPolicy(agentId) {
+  const agent = getAgentById(agentId);
+  if (!agent)
+    return;
+  const existing = getAgentMaxTasksConfig(agentId);
+  if (existing) {
+    const authoritative = parseAgentMaxTasksValue(existing.value);
+    if (authoritative !== null && authoritative !== (agent.maxTasks ?? 1)) {
+      updateAgentMaxTasks(agentId, authoritative);
+    }
+    return;
+  }
+  upsertSwarmConfig({
+    scope: "agent",
+    scopeId: agentId,
+    key: AGENT_MAX_TASKS_CONFIG_KEY,
+    value: String(agent.maxTasks ?? defaultMaxTasksForAgent(agent)),
+    description: "Logical agent max-tasks policy (seeded from agents.maxTasks)"
+  });
+}
+function resetAgentMaxTasksMirror(agentId) {
+  const agent = getAgentById(agentId);
+  if (!agent)
+    return;
+  updateAgentMaxTasks(agentId, defaultMaxTasksForAgent(agent));
+}
+function upsertSwarmConfigWithPolicyMirror(data) {
+  const scopeId = data.scope === "agent" ? data.scopeId : null;
+  if (!scopeId || data.key !== AGENT_MAX_TASKS_CONFIG_KEY) {
+    return upsertSwarmConfig(data);
+  }
+  return getDb().transaction(() => {
+    const row = upsertSwarmConfig(data);
+    const value = parseAgentMaxTasksValue(data.value);
+    if (value !== null)
+      updateAgentMaxTasks(scopeId, value);
+    return row;
+  })();
+}
+function rowToRuntimeInstance(row) {
+  let metadata = null;
+  if (row.metadata) {
+    try {
+      metadata = JSON.parse(row.metadata);
+    } catch {
+      metadata = null;
+    }
+  }
+  return {
+    id: row.id,
+    agentId: row.agent_id,
+    status: row.status,
+    reportedSlots: row.reported_slots,
+    credentialReady: row.credential_ready === null ? null : row.credential_ready === 1,
+    metadata,
+    lastSeenAt: row.last_seen_at,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at
+  };
+}
+function runtimeStaleThresholdMinutes() {
+  return Number(process.env.RUNTIME_STALE_THRESHOLD_MIN) || 5;
+}
+function runtimeLivenessCutoff() {
+  return new Date(Date.now() - runtimeStaleThresholdMinutes() * 60 * 1000).toISOString();
+}
+function upsertRuntimeInstance(instance) {
+  const metadataJson = instance.metadata ? JSON.stringify(instance.metadata) : null;
+  const row = getDb().prepare(`INSERT INTO runtime_instances (id, agent_id, status, reported_slots, metadata)
+       VALUES (?, ?, 'active', ?, ?)
+       ON CONFLICT(id) DO UPDATE SET
+         status = 'active',
+         reported_slots = excluded.reported_slots,
+         metadata = COALESCE(excluded.metadata, runtime_instances.metadata),
+         last_seen_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now'),
+         updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+       WHERE runtime_instances.agent_id = excluded.agent_id
+       RETURNING *`).get(instance.id, instance.agentId, instance.reportedSlots, metadataJson);
+  return row ? rowToRuntimeInstance(row) : null;
+}
+function getRuntimeInstanceById(id) {
+  const row = getDb().prepare("SELECT * FROM runtime_instances WHERE id = ?").get(id);
+  return row ? rowToRuntimeInstance(row) : null;
+}
+function touchRuntimeInstance(id, agentId) {
+  const result = getDb().prepare(`UPDATE runtime_instances
+       SET last_seen_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now'),
+           updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+       WHERE id = ? AND agent_id = ? AND status = 'active' AND last_seen_at >= ?`).run(id, agentId, runtimeLivenessCutoff());
+  return result.changes > 0;
+}
+function markRuntimeInstanceOffline(id, agentId) {
+  const row = getDb().prepare(`UPDATE runtime_instances
+       SET status = 'offline', updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+       WHERE id = ? AND agent_id = ? RETURNING *`).get(id, agentId);
+  return row ? rowToRuntimeInstance(row) : null;
+}
+function countActiveRuntimeInstancesForAgent(agentId) {
+  const result = getDb().prepare(`SELECT COUNT(*) as count FROM runtime_instances
+       WHERE agent_id = ? AND status = 'active' AND last_seen_at >= ?`).get(agentId, runtimeLivenessCutoff());
+  return result?.count ?? 0;
+}
+function listRuntimeInstancesForAgent(agentId) {
+  const rows = getDb().prepare(`SELECT *, (status = 'active' AND last_seen_at >= ?) AS is_live
+       FROM runtime_instances
+       WHERE agent_id = ?
+       ORDER BY created_at ASC, id ASC`).all(runtimeLivenessCutoff(), agentId);
+  return rows.map((row) => ({ ...rowToRuntimeInstance(row), isLive: row.is_live === 1 }));
+}
+function setRuntimeCredentialReady(id, agentId, ready) {
+  const result = getDb().prepare(`UPDATE runtime_instances
+       SET credential_ready = ?, updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+       WHERE id = ? AND agent_id = ? AND status = 'active' AND last_seen_at >= ?`).run(ready ? 1 : 0, id, agentId, runtimeLivenessCutoff());
+  return result.changes > 0;
+}
+function hasReadyLiveRuntime(agentId) {
+  const row = getDb().prepare(`SELECT COUNT(*) c FROM runtime_instances
+       WHERE agent_id = ? AND status = 'active' AND last_seen_at >= ?
+         AND (credential_ready IS NULL OR credential_ready = 1)`).get(agentId, runtimeLivenessCutoff());
+  return (row?.c ?? 0) > 0;
+}
+function reconcileAgentStatusFromRuntimes(agentId) {
+  const agent = getAgentById(agentId);
+  if (!agent)
+    return;
+  if (countActiveRuntimeInstancesForAgent(agentId) === 0) {
+    if (agent.status !== "offline")
+      updateAgentStatus(agentId, "offline");
+    return;
+  }
+  if (!hasReadyLiveRuntime(agentId)) {
+    if (agent.status !== "waiting_for_credentials") {
+      updateAgentStatus(agentId, "waiting_for_credentials");
+    }
+    return;
+  }
+  const next = getActiveTaskCount(agentId) > 0 ? "busy" : "idle";
+  if (agent.status !== next)
+    updateAgentStatus(agentId, next);
+}
+function agentsWithLiveRuntime() {
+  const rows = getDb().prepare(`SELECT DISTINCT agent_id FROM runtime_instances
+       WHERE status = 'active' AND last_seen_at >= ?`).all(runtimeLivenessCutoff());
+  return new Set(rows.map((r) => r.agent_id));
+}
+function expireStaleRuntimeInstances() {
+  if (!isMultiRuntimeEnabled()) {
+    return { expired: 0, agentsOffline: 0, pruned: 0 };
+  }
+  return getDb().transaction(() => {
+    const cutoff = runtimeLivenessCutoff();
+    const stale = getDb().prepare(`SELECT id, agent_id FROM runtime_instances
+         WHERE status = 'active' AND last_seen_at < ?`).all(cutoff);
+    const pruned = getDb().prepare("DELETE FROM runtime_instances WHERE last_seen_at < ?").run(cutoff).changes;
+    let agentsOffline = 0;
+    for (const agentId of new Set(stale.map((r) => r.agent_id))) {
+      reconcileAgentStatusFromRuntimes(agentId);
+      if (getAgentById(agentId)?.status === "offline")
+        agentsOffline++;
+    }
+    return { expired: stale.length, agentsOffline, pruned };
+  })();
+}
 
 // src/be/db-queries/tracker.ts
 init_date_utils();
@@ -387,4 +576,4 @@ function createPoolStarvationDecisionTask(args) {
   return { kind: "created", task: created };
 }
 
-export { getTrackerSync, getTrackerSyncByExternalId, createTrackerSyncIfAbsent, updateTrackerSyncSwarmId, repointTrackerSyncBySwarmId, createTrackerSync, updateTrackerSync, deleteTrackerSync, hasTrackerDelivery, markTrackerDelivery, getAllTrackerSyncs, createTrackerAgentMapping, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, getResumeGeneration, getNextResumeGeneration, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask };
+export { AGENT_MAX_TASKS_CONFIG_KEY, reconcileAgentMaxTasksPolicy, resetAgentMaxTasksMirror, upsertSwarmConfigWithPolicyMirror, runtimeStaleThresholdMinutes, upsertRuntimeInstance, getRuntimeInstanceById, touchRuntimeInstance, markRuntimeInstanceOffline, countActiveRuntimeInstancesForAgent, listRuntimeInstancesForAgent, setRuntimeCredentialReady, reconcileAgentStatusFromRuntimes, agentsWithLiveRuntime, expireStaleRuntimeInstances, getTrackerSync, getTrackerSyncByExternalId, createTrackerSyncIfAbsent, updateTrackerSyncSwarmId, repointTrackerSyncBySwarmId, createTrackerSync, updateTrackerSync, deleteTrackerSync, hasTrackerDelivery, markTrackerDelivery, getAllTrackerSyncs, createTrackerAgentMapping, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, getResumeGeneration, getNextResumeGeneration, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask };

package/dist/{cli-ycrnynpw.js → cli-480nehnh.js}

@@ -2,21 +2,22 @@ import {
   getExecutorRegistry,
   handleScheduleTrigger,
   startWorkflowExecution
-} from "./cli-jbcva0xj.js";
+} from "./cli-mrammd8c.js";
 import {
   buildScriptCredentialBindings,
   getScript,
   getScriptApiConnectionDescriptors,
   getScriptMcpConnectionDescriptors,
   runScript
-} from "./cli-6dp3ydxa.js";
+} from "./cli-e07exmsb.js";
 import {
   createTaskWithSiblingAwareness
-} from "./cli-2f07m0xr.js";
+} from "./cli-wf86d5t7.js";
 import {
   getDb,
   getDueScheduledTasks,
   getScheduledTaskById,
+  getUserById,
   getWorkflow,
   init_context_key,
   init_db,
@@ -24,20 +25,20 @@ import {
   scheduleContextKey,
   telemetry,
   updateScheduledTask
-} from "./cli-50vbt00w.js";
+} from "./cli-m07313tr.js";
 import {
   __commonJS,
   __require,
   __toESM
-} from "./cli-p9swy5t3.js";
+} from "./cli-pq2ee5ja.js";
 
 // node_modules/cron-parser/dist/fields/types.js
-var require_types = __commonJS((exports) => {
+var require_types = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
 });
 
 // node_modules/cron-parser/dist/fields/CronField.js
-var require_CronField = __commonJS((exports) => {
+var require_CronField = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CronField = undefined;
 
@@ -142,7 +143,7 @@ var require_CronField = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/fields/CronDayOfMonth.js
-var require_CronDayOfMonth = __commonJS((exports) => {
+var require_CronDayOfMonth = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CronDayOfMonth = undefined;
   var CronField_1 = require_CronField();
@@ -175,7 +176,7 @@ var require_CronDayOfMonth = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/fields/CronDayOfWeek.js
-var require_CronDayOfWeek = __commonJS((exports) => {
+var require_CronDayOfWeek = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CronDayOfWeek = undefined;
   var CronField_1 = require_CronField();
@@ -211,7 +212,7 @@ var require_CronDayOfWeek = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/fields/CronHour.js
-var require_CronHour = __commonJS((exports) => {
+var require_CronHour = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CronHour = undefined;
   var CronField_1 = require_CronField();
@@ -241,7 +242,7 @@ var require_CronHour = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/fields/CronMinute.js
-var require_CronMinute = __commonJS((exports) => {
+var require_CronMinute = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CronMinute = undefined;
   var CronField_1 = require_CronField();
@@ -271,7 +272,7 @@ var require_CronMinute = __commonJS((exports) => {
 });
 
 // node_modules/luxon/build/node/luxon.js
-var require_luxon = __commonJS((exports) => {
+var require_luxon = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
 
   class LuxonError extends Error {
@@ -5139,7 +5140,7 @@ var require_luxon = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/CronDate.js
-var require_CronDate = __commonJS((exports) => {
+var require_CronDate = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CronDate = exports.DAYS_IN_MONTH = exports.DateMathOp = exports.TimeUnit = undefined;
   var luxon_1 = require_luxon();
@@ -5406,7 +5407,7 @@ var require_CronDate = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/fields/CronMonth.js
-var require_CronMonth = __commonJS((exports) => {
+var require_CronMonth = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CronMonth = undefined;
   var CronDate_1 = require_CronDate();
@@ -5440,7 +5441,7 @@ var require_CronMonth = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/fields/CronSecond.js
-var require_CronSecond = __commonJS((exports) => {
+var require_CronSecond = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CronSecond = undefined;
   var CronField_1 = require_CronField();
@@ -5470,7 +5471,7 @@ var require_CronSecond = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/fields/index.js
-var require_fields = __commonJS((exports) => {
+var require_fields = __commonJS(function(exports) {
   var __createBinding = exports && exports.__createBinding || (Object.create ? function(o, m, k, k2) {
     if (k2 === undefined)
       k2 = k;
@@ -5503,7 +5504,7 @@ var require_fields = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/CronFieldCollection.js
-var require_CronFieldCollection = __commonJS((exports) => {
+var require_CronFieldCollection = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CronFieldCollection = undefined;
   var fields_1 = require_fields();
@@ -5723,7 +5724,7 @@ var require_CronFieldCollection = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/CronExpression.js
-var require_CronExpression = __commonJS((exports) => {
+var require_CronExpression = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CronExpression = exports.LOOPS_LIMIT_EXCEEDED_ERROR_MESSAGE = exports.TIME_SPAN_OUT_OF_BOUNDS_ERROR_MESSAGE = undefined;
   var CronDate_1 = require_CronDate();
@@ -5961,7 +5962,7 @@ var require_CronExpression = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/utils/random.js
-var require_random = __commonJS((exports) => {
+var require_random = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.seededRandom = seededRandom;
   function xfnv1a(str) {
@@ -5987,7 +5988,7 @@ var require_random = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/CronExpressionParser.js
-var require_CronExpressionParser = __commonJS((exports) => {
+var require_CronExpressionParser = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.CronExpressionParser = exports.DayOfWeek = exports.Months = exports.CronUnit = exports.PredefinedExpressions = undefined;
   var CronFieldCollection_1 = require_CronFieldCollection();
@@ -6254,7 +6255,7 @@ var require_CronExpressionParser = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/CronFileParser.js
-var require_CronFileParser = __commonJS((exports) => {
+var require_CronFileParser = __commonJS(function(exports) {
   var __createBinding = exports && exports.__createBinding || (Object.create ? function(o, m, k, k2) {
     if (k2 === undefined)
       k2 = k;
@@ -6354,7 +6355,7 @@ var require_CronFileParser = __commonJS((exports) => {
 });
 
 // node_modules/cron-parser/dist/index.js
-var require_dist = __commonJS((exports) => {
+var require_dist = __commonJS(function(exports) {
   var __createBinding = exports && exports.__createBinding || (Object.create ? function(o, m, k, k2) {
     if (k2 === undefined)
       k2 = k;
@@ -6902,7 +6903,13 @@ async function executeScheduleScript(schedule) {
     throw new Error(output.stderr || `Script '${schedule.scriptName}' exited with code ${output.exitCode}${output.error ? ` (${output.error})` : ""}`);
   }
 }
+function withoutDeletedRequester(schedule) {
+  if (!schedule.createdBy || getUserById(schedule.createdBy))
+    return schedule;
+  return { ...schedule, createdBy: undefined };
+}
 async function dispatchScheduleTarget(schedule, extraTags = []) {
+  schedule = withoutDeletedRequester(schedule);
   switch (schedule.targetType) {
     case "workflow": {
       if (!schedule.workflowId) {

package/dist/{cli-0258203w.js → cli-492e7ap5.js}

@@ -1,19 +1,122 @@
+import {
+  IDENTITY_FIELD_BUDGETS,
+  init_identity_field_budget,
+  init_templates
+} from "./cli-34w2584r.js";
+import {
+  init_resolver,
+  resolveTemplateAsync
+} from "./cli-2wv4kj0e.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   init_constants
-} from "./cli-x23me2mg.js";
+} from "./cli-a1rrkrb4.js";
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-4j2mrzag.js";
+} from "./cli-mkq1rk7b.js";
 import {
   __esm
-} from "./cli-p9swy5t3.js";
+} from "./cli-pq2ee5ja.js";
 
 // src/commands/profile-sync.ts
 function contentSha256(content) {
   return new Bun.CryptoHasher("sha256").update(content).digest("hex");
 }
+async function renderProfileSyncRejectionBanner(event) {
+  const data = event.data;
+  const field = data?.field;
+  const diskSize = data?.diskSize;
+  const dbSize = data?.dbSize;
+  const budget = data?.budget;
+  const delta = data?.delta;
+  if (typeof field !== "string" || !(field in PROFILE_FIELD_DETAILS) || typeof diskSize !== "number" || typeof dbSize !== "number" || typeof budget !== "number" || typeof delta !== "number") {
+    return null;
+  }
+  const details = PROFILE_FIELD_DETAILS[field];
+  const result = await resolveTemplateAsync("task.profile_sync_rejection", {
+    timestamp: event.createdAt,
+    field_label: details.label,
+    disk_size: diskSize,
+    db_size: dbSize,
+    budget,
+    delta: delta >= 0 ? `+${delta}` : String(delta),
+    event_id: event.id,
+    recovery_guidance: details.recoveryGuidance
+  });
+  return result.skipped ? null : result.text;
+}
+async function fetchProfileSyncRejectionBanner(config, fetchImpl = fetch, readFile = readFileIfExists) {
+  try {
+    const responses = await Promise.all(Object.keys(IDENTITY_FIELD_BUDGETS).map(async (field) => {
+      const fetchLatestEvent = async (event) => {
+        const query = new URLSearchParams({
+          event,
+          agentId: config.agentId,
+          dataField: field,
+          limit: "1"
+        });
+        const response = await fetchImpl(`${config.apiUrl}/api/events?${query}`, {
+          headers: {
+            Authorization: `Bearer ${config.apiKey}`,
+            "X-Agent-ID": config.agentId
+          }
+        });
+        if (!response.ok)
+          return null;
+        const payload = await response.json();
+        return payload.events?.[0] ?? null;
+      };
+      const [rejection, reconciliation] = await Promise.all([
+        fetchLatestEvent("system.profile_sync_rejected"),
+        fetchLatestEvent("system.profile_sync_reconciled")
+      ]);
+      return { rejection, reconciliation };
+    }));
+    const latestEvents = responses.flatMap(({ rejection, reconciliation }) => rejection ? [{ rejection, reconciliation }] : []);
+    if (latestEvents.length === 0)
+      return "";
+    let profile = null;
+    const profileResponse = await fetchImpl(`${config.apiUrl}/me`, {
+      headers: {
+        Authorization: `Bearer ${config.apiKey}`,
+        "X-Agent-ID": config.agentId
+      }
+    });
+    if (profileResponse.ok) {
+      profile = await profileResponse.json();
+    }
+    let disk = null;
+    if (config.claudeMdPath) {
+      disk = {
+        soulMd: await readFile(SOUL_MD_PATH),
+        identityMd: await readFile(IDENTITY_MD_PATH),
+        claudeMd: await readFile(config.claudeMdPath),
+        toolsMd: await readFile(TOOLS_MD_PATH)
+      };
+    }
+    const unresolved = latestEvents.flatMap(({ rejection, reconciliation }) => {
+      if (reconciliation && reconciliation.createdAt > rejection.createdAt)
+        return [];
+      const event = rejection;
+      const field = event.data?.field;
+      const rejectedDbHash = event.data?.dbHash;
+      const currentValue = typeof field === "string" ? profile?.[field] : undefined;
+      const diskValue = typeof field === "string" ? disk?.[field] : undefined;
+      if (typeof currentValue === "string" && diskValue === currentValue)
+        return [];
+      return !(typeof rejectedDbHash === "string" && typeof currentValue === "string" && contentSha256(currentValue) !== rejectedDbHash) ? [event] : [];
+    });
+    const banners = await Promise.all(unresolved.map(renderProfileSyncRejectionBanner));
+    return banners.filter((banner) => banner !== null).join("");
+  } catch {
+    return "";
+  }
+}
+async function prependProfileSyncRejectionBanner(prompt, config, fetchImpl = fetch, readFile = readFileIfExists) {
+  const banner = await fetchProfileSyncRejectionBanner(config, fetchImpl, readFile);
+  return banner ? { prompt: banner + prompt, injected: true } : { prompt, injected: false };
+}
 async function writeIdentityBaselines(baselines) {
   await Bun.write(IDENTITY_BASELINES_PATH, JSON.stringify(baselines));
 }
@@ -47,6 +150,12 @@ function resolveClaudeMdPath(completedProviders) {
   const anyNonClaude = completedProviders.some((p) => p !== "claude");
   return anyNonClaude ? WORKSPACE_CLAUDE_MD_PATH : CLAUDE_MD_PATH;
 }
+function buildIndependentIdentityPayloads(updates, changeSource) {
+  return Object.entries(updates).map(([field, value]) => ({
+    label: `identity.${field}`,
+    body: { [field]: value, changeSource }
+  }));
+}
 function extractSetupScriptContent(raw, agentId = "unknown") {
   if (!raw.trim())
     return null;
@@ -70,9 +179,7 @@ function buildIdentityPayload(files, baselines, agentId = "unknown") {
   const updates = {};
   if (files.soulMd !== undefined) {
     const content = files.soulMd;
-    if (baselines?.soulMd && contentSha256(content) === baselines.soulMd) {} else if (content.length > MAX_PROFILE_FILE_LENGTH) {
-      warnProfileFileTooLarge(agentId, "soulMd", content.length);
-    } else if (content.trim()) {
+    if (baselines?.soulMd && contentSha256(content) === baselines.soulMd) {} else if (content.trim()) {
       if (content.length < IDENTITY_FILE_MIN_LENGTH) {
         console.error(`[profile-sync] Skipping SOUL.md sync: content too short (${content.length} chars, minimum ${IDENTITY_FILE_MIN_LENGTH}). This prevents accidental profile corruption.`);
       } else {
@@ -82,9 +189,7 @@ function buildIdentityPayload(files, baselines, agentId = "unknown") {
   }
   if (files.identityMd !== undefined) {
     const content = files.identityMd;
-    if (baselines?.identityMd && contentSha256(content) === baselines.identityMd) {} else if (content.length > MAX_PROFILE_FILE_LENGTH) {
-      warnProfileFileTooLarge(agentId, "identityMd", content.length);
-    } else if (content.trim()) {
+    if (baselines?.identityMd && contentSha256(content) === baselines.identityMd) {} else if (content.trim()) {
       if (content.length < IDENTITY_FILE_MIN_LENGTH) {
         console.error(`[profile-sync] Skipping IDENTITY.md sync: content too short (${content.length} chars, minimum ${IDENTITY_FILE_MIN_LENGTH}). This prevents accidental profile corruption.`);
       } else {
@@ -94,9 +199,7 @@ function buildIdentityPayload(files, baselines, agentId = "unknown") {
   }
   if (files.toolsMd !== undefined) {
     const content = files.toolsMd;
-    if (baselines?.toolsMd && contentSha256(content) === baselines.toolsMd) {} else if (content.length > MAX_PROFILE_FILE_LENGTH) {
-      warnProfileFileTooLarge(agentId, "toolsMd", content.length);
-    } else if (content.trim()) {
+    if (baselines?.toolsMd && contentSha256(content) === baselines.toolsMd) {} else if (content.trim()) {
       updates.toolsMd = content;
     }
   }
@@ -130,15 +233,11 @@ async function collectProfilePayloads(fields, changeSource, readFile = readFileI
       toolsMd: await readFile(TOOLS_MD_PATH),
       heartbeatMd: await readFile(HEARTBEAT_MD_PATH)
     }, baselines, agentId);
-    if (Object.keys(updates).length > 0) {
-      payloads.push({ label: "identity", body: { ...updates, changeSource } });
-    }
+    payloads.push(...buildIndependentIdentityPayloads(updates, changeSource));
   }
   if (fields.includes("claude")) {
     const raw = await readFile(claudeMdPath);
-    if (raw && raw.length > MAX_PROFILE_FILE_LENGTH) {
-      warnProfileFileTooLarge(agentId, "claudeMd", raw.length);
-    } else if (raw?.trim()) {
+    if (raw?.trim()) {
       if (baselines?.claudeMd && contentSha256(raw) === baselines.claudeMd) {} else {
         payloads.push({ label: "claude", body: { claudeMd: raw, changeSource } });
       }
@@ -187,11 +286,32 @@ async function syncProfileFilesToServer(opts) {
     await postProfileUpdate(opts, payload);
   }
 }
-var SOUL_MD_PATH = "/workspace/SOUL.md", IDENTITY_MD_PATH = "/workspace/IDENTITY.md", TOOLS_MD_PATH = "/workspace/TOOLS.md", HEARTBEAT_MD_PATH = "/workspace/HEARTBEAT.md", SETUP_SCRIPT_PATH = "/workspace/start-up.sh", IDENTITY_BASELINES_PATH = "/tmp/identity-baselines.json", CLAUDE_MD_PATH, WORKSPACE_CLAUDE_MD_PATH = "/workspace/CLAUDE.md", IDENTITY_FILE_MIN_LENGTH = 500, SETUP_MARKER_START = "# === Agent-managed setup (from DB) ===", SETUP_MARKER_END = "# === End agent-managed setup ===";
+var SOUL_MD_PATH = "/workspace/SOUL.md", IDENTITY_MD_PATH = "/workspace/IDENTITY.md", TOOLS_MD_PATH = "/workspace/TOOLS.md", HEARTBEAT_MD_PATH = "/workspace/HEARTBEAT.md", SETUP_SCRIPT_PATH = "/workspace/start-up.sh", IDENTITY_BASELINES_PATH = "/tmp/identity-baselines.json", PROFILE_FIELD_DETAILS, CLAUDE_MD_PATH, WORKSPACE_CLAUDE_MD_PATH = "/workspace/CLAUDE.md", IDENTITY_FILE_MIN_LENGTH = 500, SETUP_MARKER_START = "# === Agent-managed setup (from DB) ===", SETUP_MARKER_END = "# === End agent-managed setup ===";
 var init_profile_sync = __esm(() => {
+  init_resolver();
   init_constants();
+  init_identity_field_budget();
   init_secret_scrubber();
+  init_templates();
+  PROFILE_FIELD_DETAILS = {
+    soulMd: {
+      label: `soulMd (${SOUL_MD_PATH})`,
+      recoveryGuidance: `Inspect and shrink the live ${SOUL_MD_PATH} first, moving durable tail content into memory. After a worker restart, use ${SOUL_MD_PATH}.pre-boot-<timestamp>.bak as the fallback copy of the rejected content.`
+    },
+    identityMd: {
+      label: `identityMd (${IDENTITY_MD_PATH})`,
+      recoveryGuidance: `Inspect and shrink the live ${IDENTITY_MD_PATH} first, moving durable tail content into memory. After a worker restart, use ${IDENTITY_MD_PATH}.pre-boot-<timestamp>.bak as the fallback copy of the rejected content.`
+    },
+    claudeMd: {
+      label: "claudeMd (/workspace/CLAUDE.md for non-Claude harnesses; ~/.claude/CLAUDE.md for Claude)",
+      recoveryGuidance: "Inspect and shrink the live CLAUDE.md source first, moving durable tail content into memory. After a worker restart, non-Claude harnesses can use /workspace/CLAUDE.md.pre-boot-<timestamp>.bak as the fallback copy; Claude's native ~/.claude/CLAUDE.md source is not archived by that boot step."
+    },
+    toolsMd: {
+      label: `toolsMd (${TOOLS_MD_PATH})`,
+      recoveryGuidance: `Inspect and shrink the live ${TOOLS_MD_PATH} first, moving durable tail content into memory. After a worker restart, use ${TOOLS_MD_PATH}.pre-boot-<timestamp>.bak as the fallback copy of the rejected content.`
+    }
+  };
   CLAUDE_MD_PATH = `${process.env.HOME}/.claude/CLAUDE.md`;
 });
 
-export { contentSha256, writeIdentityBaselines, readIdentityBaselines, warnProfileFileTooLarge, writeProfileFileFromDb, resolveClaudeMdPath, syncProfileFilesToServer, init_profile_sync };
+export { contentSha256, prependProfileSyncRejectionBanner, writeIdentityBaselines, readIdentityBaselines, warnProfileFileTooLarge, writeProfileFileFromDb, resolveClaudeMdPath, buildIndependentIdentityPayloads, syncProfileFilesToServer, init_profile_sync };

package/dist/{cli-3fj60etf.js → cli-497b685t.js}

@@ -1,13 +1,13 @@
 import {
   __esm,
   __export
-} from "./cli-p9swy5t3.js";
+} from "./cli-pq2ee5ja.js";
 
 // node_modules/supports-color/index.js
 var exports_supports_color = {};
 __export(exports_supports_color, {
-  default: () => supports_color_default,
-  createSupportsColor: () => createSupportsColor
+  createSupportsColor: () => createSupportsColor,
+  default: () => supports_color_default
 });
 import process from "node:process";
 import os from "node:os";

package/dist/{cli-pxfxkx5m.js → cli-4bap00k0.js}

@@ -1,7 +1,7 @@
 import {
   init_package,
   package_default
-} from "./cli-ccf9vy7q.js";
+} from "./cli-jmvk6et8.js";
 
 // src/commands/shared/client-config.ts
 init_package();