@desplega.ai/agent-swarm 1.135.0 → 1.135.2

package/dist/{cli-w3xch1b8.js → cli-1857msnd.js}

@@ -1,7 +1,7 @@
 import {
   getDb,
   init_db
-} from "./cli-prfghf4h.js";
+} from "./cli-qxn3g3yx.js";
 
 // src/be/seed-pricing.ts
 init_db();

package/dist/{cli-y98ry8cz.js → cli-1dfatkzm.js}

@@ -3,7 +3,7 @@ import {
   getAgentWorkingOnThread,
   getAllAgents,
   init_db
-} from "./cli-prfghf4h.js";
+} from "./cli-qxn3g3yx.js";
 import {
   init_env_flag,
   isEnvFlagEnabled

package/dist/{cli-a2brkr6h.js → cli-1z01xdqh.js}

@@ -1,6 +1,6 @@
 import {
   summarizeSession
-} from "./cli-y37pxs1m.js";
+} from "./cli-a1zrc2g6.js";
 import {
   checkToolLoop,
   clearToolHistory
@@ -27,14 +27,14 @@ import {
   getMcpBaseUrl,
   init_constants
 } from "./cli-a1rrkrb4.js";
-import {
-  init_package,
-  package_default
-} from "./cli-w4ezqgkj.js";
 import {
   init_secret_scrubber,
   scrubSecrets
 } from "./cli-mkq1rk7b.js";
+import {
+  init_package,
+  package_default
+} from "./cli-4dakdn30.js";
 
 // src/hooks/hook.ts
 init_package();

package/dist/{cli-d08xq4nz.js → cli-3f0tnh34.js}

@@ -28,7 +28,7 @@ import {
   updateTrackerSync,
   updateTrackerSyncSwarmId,
   upsertSwarmConfigWithPolicyMirror
-} from "./cli-dphm5tyw.js";
+} from "./cli-6290n4yz.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-qh4sqfws.js";
@@ -37,17 +37,17 @@ import {
   ensure,
   require_dist,
   runScheduleNow
-} from "./cli-2ecesrtw.js";
+} from "./cli-r5vwg1ma.js";
 import {
   startPricingRefreshLoop
-} from "./cli-9kekm9yz.js";
+} from "./cli-cm4z7w7w.js";
 import {
   seedPricingFromModelsDev
-} from "./cli-w3xch1b8.js";
+} from "./cli-1857msnd.js";
 import {
   ensureRbacSeedsSynced,
   getUserGrant
-} from "./cli-269pdgm4.js";
+} from "./cli-cv2vjg2y.js";
 import {
   can,
   decideAdmission,
@@ -74,7 +74,7 @@ import {
   runSavedScriptAsAgent,
   updateApp,
   upgradeAppDefinition
-} from "./cli-f2tgry1v.js";
+} from "./cli-6bz2hzvw.js";
 import {
   TriggerSchemaError,
   applyDefinitionPatch,
@@ -88,7 +88,7 @@ import {
   startWorkflowExecution,
   validateDefinition,
   validateJsonSchema
-} from "./cli-j2p3bfs3.js";
+} from "./cli-5a5nrq3g.js";
 import {
   ConnectionAuthInputSchema,
   SCRIPT_LONG_TIMEOUT_HINT_MS,
@@ -107,7 +107,7 @@ import {
   setScriptConnectionEnabled,
   upsertCredentialBinding,
   upsertScriptConnection
-} from "./cli-yd6vqt1x.js";
+} from "./cli-fmha74ga.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
@@ -122,7 +122,7 @@ import {
   isGraphExpansionEnabled,
   rerank,
   rowToCandidate
-} from "./cli-10694wk0.js";
+} from "./cli-4rdjdddh.js";
 import {
   buildAuthorizationUrl,
   createOAuthApp,
@@ -137,16 +137,19 @@ import {
   listAuthorizationsForApp,
   onAuthorizationRefreshed,
   upsertOAuthApp
-} from "./cli-3m4mkyqy.js";
+} from "./cli-ey09krp2.js";
 import {
   ZodFirstPartyTypeKind,
   objectType
 } from "./cli-fad8m16k.js";
+import {
+  AgentFsProvider
+} from "./cli-fhsz3twr.js";
 import {
   createAdditiveBuffer,
   extractSlackMessageText,
   parseSlackTs
-} from "./cli-y98ry8cz.js";
+} from "./cli-1dfatkzm.js";
 import {
   findOrCreateUserByEmail,
   findUserByExternalId,
@@ -162,10 +165,10 @@ import {
   resolveIdentityByEmail,
   resolveUserByToken,
   unlinkIdentity
-} from "./cli-v21nahej.js";
+} from "./cli-yw2z5kj9.js";
 import {
   createTaskWithSiblingAwareness
-} from "./cli-1gzz6pmf.js";
+} from "./cli-w0ygcv43.js";
 import {
   getAgentDisplayName,
   getAgentEmoji,
@@ -174,7 +177,7 @@ import {
   markdownToSlack,
   startSlackApp,
   stopSlackApp
-} from "./cli-1gvam274.js";
+} from "./cli-j3xnd5b4.js";
 import {
   $OpenAPIRegistry,
   $OpenApiGeneratorV31,
@@ -419,7 +422,7 @@ import {
   upsertPromptTemplate,
   upsertService,
   validateConfigValue
-} from "./cli-prfghf4h.js";
+} from "./cli-qxn3g3yx.js";
 import {
   generateDefaultClaudeMd,
   generateDefaultIdentityMd,
@@ -451,10 +454,6 @@ import {
   exports_zod,
   init_zod
 } from "./cli-s35981d0.js";
-import {
-  init_package,
-  package_default
-} from "./cli-w4ezqgkj.js";
 import {
   init_secret_scrubber,
   refreshSecretScrubberCache,
@@ -462,6 +461,10 @@ import {
   scrubObject,
   scrubSecrets
 } from "./cli-mkq1rk7b.js";
+import {
+  init_package,
+  package_default
+} from "./cli-4dakdn30.js";
 import {
   $ZodObject,
   $ZodType,
@@ -22953,7 +22956,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-12mwdsvg.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-vygnfvrh.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -23024,7 +23027,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDbClient: getDbClient2 } = await import("./db-g666qxpv.js");
+  const { getDbClient: getDbClient2 } = await import("./db-8fqeheve.js");
   await getDbClient2().transaction(async (tx) => {
     const row = await tx.get("SELECT metadata FROM oauth_apps WHERE provider = 'jira'");
     if (!row) {
@@ -96280,7 +96283,7 @@ async function reloadGlobalConfigsAndIntegrations() {
 }
 async function reloadGlobalConfigsAndIntegrationsInner() {
   const updated = await loadGlobalConfigsIntoEnv(true);
-  const { resetFileStorageProvider } = await import("./registry-2g6d2p3n.js");
+  const { resetFileStorageProvider } = await import("./registry-6nvn6bj0.js");
   resetFileStorageProvider();
   const integrations = [];
   resetAgentMail();
@@ -96651,7 +96654,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
     return;
   initialized6 = true;
   try {
-    const impl = await import("./otel-impl-an7gh3eh.js");
+    const impl = await import("./otel-impl-d2p84k6e.js");
     await impl.boot(serviceRole);
     realWithSpan = impl.withSpan;
     realStartSpan = impl.startSpan;
@@ -102081,11 +102084,18 @@ function assertSelectOnlyQuery(sql) {
   }
 }
 async function executeReadOnlyQueryGated(sql, params = [], budgetMs, maxRows) {
+  let result;
   if (isDbQueryBoundedEnabled()) {
-    return executeReadOnlyQueryBounded(sql, params, budgetMs, maxRows);
+    result = await executeReadOnlyQueryBounded(sql, params, budgetMs, maxRows);
+  } else {
+    warnDbQueryBoundedDisabledOnce();
+    result = executeReadOnlyQuery(sql, params, maxRows);
   }
-  warnDbQueryBoundedDisabledOnce();
-  return executeReadOnlyQuery(sql, params, maxRows);
+  return {
+    ...result,
+    truncated: maxRows !== undefined && result.total > maxRows,
+    rowLimit: maxRows ?? null
+  };
 }
 var dbQueryRoute = route({
   method: "post",
@@ -102101,7 +102111,9 @@ var dbQueryRoute = route({
         columns: exports_external.array(exports_external.string()),
         rows: exports_external.array(exports_external.array(exports_external.any())),
         elapsed: exports_external.number(),
-        total: exports_external.number()
+        total: exports_external.number(),
+        truncated: exports_external.boolean(),
+        rowLimit: exports_external.number().nullable()
       })
     },
     400: { description: "Invalid or disallowed SQL" },
@@ -102119,7 +102131,7 @@ async function handleDbQuery(req, res, pathSegments, queryParams) {
     return true;
   try {
     const result = await executeReadOnlyQueryGated(resolveDbQuerySql(parsed.body), parsed.body.params, getDbQueryHttpBudgetMs(), getDbQueryHttpMaxRows());
-    json(res, result);
+    dbQueryRoute.respond(res, 200, result);
   } catch (err) {
     if (err instanceof DbQueryConcurrencyCapError) {
       res.setHeader("Retry-After", "1");
@@ -102983,7 +102995,8 @@ var registerDbQueryTool = (server) => {
       rows: array(array(any())).optional(),
       elapsed: number().optional(),
       total: number().optional(),
-      truncated: boolean().optional()
+      truncated: boolean().optional(),
+      rowLimit: number().optional()
     })
   }, async (input, _requestInfo, _meta) => {
     try {
@@ -102991,20 +103004,19 @@ var registerDbQueryTool = (server) => {
       const params = input.params ?? [];
       const maxRows = getDbQueryMcpMaxRows();
       const result = await executeReadOnlyQueryGated(sql, params, getDbQueryMcpBudgetMs(), maxRows);
-      const truncated = result.total > maxRows;
       const header = result.columns.join(" | ");
       const separator = result.columns.map(() => "---").join(" | ");
       const dataRows = result.rows.map((row) => row.map((v) => String(v ?? "NULL")).join(" | "));
       const table = [header, separator, ...dataRows].join(`
 `);
-      const suffix = truncated ? `
-(Showing ${maxRows} of ${result.total} rows)` : "";
+      const suffix = result.truncated ? `
+(Showing ${result.rowLimit} of ${result.total} rows)` : "";
       const details = `${table}${suffix}
 
 ${result.total} rows in ${result.elapsed}ms`;
       return toolOk(`${result.total} row(s) in ${result.elapsed}ms`, {
         details,
-        data: { ...result, truncated }
+        data: { ...result }
       });
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
@@ -112427,7 +112439,7 @@ var registerStoreProgressTool = (server) => {
       status: _enum(["completed", "failed"]).optional().describe("Set to 'completed' or 'failed' to finish the task."),
       output: string().optional().describe("The task result (used when completing). For Slack-originated tasks, this is published verbatim in the thread's outcome card: provide a concrete summary scaled to what was asked, including only the outcome and any links or IDs the human needs—not process narration, a transcript, or a restatement of the brief."),
       failureReason: string().optional().describe("The reason for failure (used when failing)."),
-      attachments: array(AttachmentInputSchema).max(20).optional().describe("Pointer-based artifacts produced by this step — agent-fs path, URL, shared-fs path, or swarm Page. No inline file data; upload to agent-fs first and attach by path. May be sent on any call (progress or completion) and accumulates across calls; duplicates are de-duped by sha256 (when present) or by (kind, pointer, name)."),
+      attachments: array(AttachmentInputSchema).max(20).optional().describe("Pointer-based artifacts produced by this step — agent-fs path, URL, shared-fs path, or swarm Page. No inline file data; upload to agent-fs first and attach by path. Agent-fs pointers are verified before task state changes, using the explicit org/drive pair or the registering agent's configured defaults. May be sent on any call (progress or completion) and accumulates across calls; duplicates are de-duped by sha256 (when present) or by (kind, pointer, name)."),
       persistMemory: boolean().optional().describe("Opt in to task_completion memory persistence for automatic/recurring tasks. Manual tasks are persisted by default; scheduled, system, heartbeat/boot-triage, monitor, and digest tasks are skipped unless this is true."),
       force: boolean().optional().describe("On an already-terminal task, overwrite explicitly provided output and/or failureReason text while preserving status and finishedAt and without replaying events, memory writes, follow-up creation, business-use ensure, or capacity updates. Differing terminal text is otherwise discarded and reported as a failure.")
     }),
@@ -112436,15 +112448,59 @@ var registerStoreProgressTool = (server) => {
     if (!requestInfo.agentId) {
       return toolErr('Agent ID not found. The MCP client should define the "X-Agent-ID" header.');
     }
-    let agentFsDefaults;
-    if (attachments?.some((a) => a.kind === "agent-fs" && !a.orgId && !a.driveId)) {
+    const agentFsScopes = new Map;
+    const agentFsAttachments = attachments?.filter((a) => a.kind === "agent-fs") ?? [];
+    if (agentFsAttachments.length > 0) {
+      if (!await getAgentById(requestInfo.agentId)) {
+        return toolErr(`Agent with ID "${requestInfo.agentId}" not found in the swarm, register before storing task progress.`);
+      }
+      if (!await getTaskById(taskId)) {
+        return toolErr(`Task with ID "${taskId}" not found.`);
+      }
       const configs = await getResolvedConfig(requestInfo.agentId ?? undefined);
-      const orgId = configs.find((c) => c.key === "AGENT_FS_DEFAULT_ORG_ID")?.value;
-      const driveId = configs.find((c) => c.key === "AGENT_FS_DEFAULT_DRIVE_ID")?.value;
-      agentFsDefaults = {
-        orgId: orgId && orgId.length > 0 ? orgId : undefined,
-        driveId: driveId && driveId.length > 0 ? driveId : undefined
-      };
+      const configValue = (key) => configs.find((c) => c.key === key)?.value?.trim();
+      const defaultOrgId = configValue("AGENT_FS_DEFAULT_ORG_ID");
+      const defaultDriveId = configValue("AGENT_FS_DEFAULT_DRIVE_ID");
+      const apiUrl = configValue("AGENT_FS_API_URL") || process.env.AGENT_FS_API_URL?.trim();
+      const apiKey = configValue("AGENT_FS_API_KEY") || configValue("API_AGENT_FS_API_KEY") || process.env.AGENT_FS_API_KEY?.trim() || process.env.API_AGENT_FS_API_KEY?.trim();
+      for (const attachment of agentFsAttachments) {
+        const hasExplicitScope = Boolean(attachment.orgId || attachment.driveId);
+        const orgId = (hasExplicitScope ? attachment.orgId : defaultOrgId)?.trim();
+        const driveId = (hasExplicitScope ? attachment.driveId : defaultDriveId)?.trim();
+        if (!orgId || !driveId) {
+          return toolErr(`Agent-fs attachment "${attachment.name}" cannot be verified: both orgId and driveId must resolve from the attachment or the registering agent's config. No attachment was registered and task state was unchanged.`);
+        }
+        agentFsScopes.set(attachment, { orgId, driveId });
+      }
+      if (!apiUrl || !apiKey) {
+        return toolErr("Agent-fs attachments cannot be verified because the registering agent's agent-fs API URL or credential is unavailable. No attachment was registered and task state was unchanged.");
+      }
+      const firstScope = agentFsScopes.get(agentFsAttachments[0]);
+      if (!firstScope) {
+        return toolErr("Agent-fs attachment scope resolution failed.");
+      }
+      const provider = new AgentFsProvider({ apiUrl, apiKey, ...firstScope });
+      const verificationErrors = await Promise.all(agentFsAttachments.map(async (attachment) => {
+        const scope = agentFsScopes.get(attachment);
+        if (!scope)
+          return "Agent-fs attachment scope resolution failed.";
+        try {
+          await provider.head({
+            taskId,
+            name: attachment.name,
+            key: attachment.path,
+            ...scope
+          });
+          return;
+        } catch (error) {
+          const detail = scrubSecrets(error instanceof Error ? error.message : String(error));
+          return `Agent-fs attachment "${attachment.name}" does not resolve at orgId=${scope.orgId}, driveId=${scope.driveId}, path=${attachment.path}: ${detail}.`;
+        }
+      }));
+      const verificationError = verificationErrors.find((error) => error !== undefined);
+      if (verificationError) {
+        return toolErr(`${verificationError} No attachment was registered and task state was unchanged.`);
+      }
     }
     const result = await getDbClient().transaction(async () => {
       const agent = await getAgentById(requestInfo.agentId ?? "");
@@ -112467,9 +112523,10 @@ var registerStoreProgressTool = (server) => {
         for (const a of attachments) {
           let orgId = a.kind === "agent-fs" ? a.orgId : undefined;
           let driveId = a.kind === "agent-fs" ? a.driveId : undefined;
-          if (a.kind === "agent-fs" && !orgId && !driveId) {
-            orgId = orgId || agentFsDefaults?.orgId;
-            driveId = driveId || agentFsDefaults?.driveId;
+          if (a.kind === "agent-fs") {
+            const verifiedScope = agentFsScopes.get(a);
+            orgId = verifiedScope?.orgId;
+            driveId = verifiedScope?.driveId;
           }
           await insertTaskAttachment({
             taskId,

package/dist/{cli-w4ezqgkj.js → cli-4dakdn30.js}

@@ -7,7 +7,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@desplega.ai/agent-swarm",
-    version: "1.135.0",
+    version: "1.135.2",
     description: "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
     keywords: [
       "agent-swarm.dev",
@@ -178,14 +178,14 @@ var init_package = __esm(() => {
       "@aws-sdk/client-bedrock": "3.1048.0",
       "@desplega.ai/business-use": "^0.4.2",
       "@desplega.ai/localtunnel": "^2.2.0",
-      "@earendil-works/pi-agent-core": "^0.84.2",
-      "@earendil-works/pi-ai": "^0.84.2",
-      "@earendil-works/pi-coding-agent": "^0.84.2",
+      "@earendil-works/pi-agent-core": "^0.84.3",
+      "@earendil-works/pi-ai": "^0.84.3",
+      "@earendil-works/pi-coding-agent": "^0.84.3",
       "@inkjs/ui": "^2.0.0",
       "@linear/sdk": "^77.0.0",
       "@modelcontextprotocol/sdk": "^1.25.1",
-      "@openai/codex-sdk": "^0.148.0",
-      "@opencode-ai/sdk": "^1.18.18",
+      "@openai/codex-sdk": "^0.149.1",
+      "@opencode-ai/sdk": "^1.18.23",
       "@openfort/openfort-node": "^0.9.1",
       "@opentelemetry/api": "^1.9.1",
       "@opentelemetry/exporter-metrics-otlp-http": "^0.218.0",

package/dist/{cli-10694wk0.js → cli-4rdjdddh.js}

@@ -11,7 +11,7 @@ import {
   getDbClient,
   init_db,
   isSqliteVecAvailable
-} from "./cli-prfghf4h.js";
+} from "./cli-qxn3g3yx.js";
 import {
   __esm,
   __export,

package/dist/{cli-j2p3bfs3.js → cli-5a5nrq3g.js}

@@ -18,10 +18,10 @@ import {
   sandboxSpawnEnv,
   snapshotCapped,
   touchScratchScriptLastUsed
-} from "./cli-yd6vqt1x.js";
+} from "./cli-fmha74ga.js";
 import {
   withSiblingAwareness
-} from "./cli-1gzz6pmf.js";
+} from "./cli-w0ygcv43.js";
 import {
   FollowUpConfigSchema,
   ModelTierSchema,
@@ -67,7 +67,7 @@ import {
   updateWorkflowRun,
   updateWorkflowRunStep,
   workflowContextKey
-} from "./cli-prfghf4h.js";
+} from "./cli-qxn3g3yx.js";
 import {
   deepInterpolate,
   findInterpolationTokens,
@@ -3194,7 +3194,7 @@ class HumanInTheLoopExecutor extends BaseExecutor {
       }
       if (notification.channel === "slack") {
         try {
-          const { getSlackApp } = await import("./app-12mwdsvg.js");
+          const { getSlackApp } = await import("./app-vygnfvrh.js");
           const slackApp = getSlackApp();
           if (!slackApp) {
             console.warn("[HITL] Slack not initialized — cannot send notification");
@@ -3310,7 +3310,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp } = await import("./app-12mwdsvg.js");
+        const { getSlackApp } = await import("./app-vygnfvrh.js");
         const app = getSlackApp();
         if (!app) {
           return {

package/dist/{cli-dphm5tyw.js → cli-6290n4yz.js}

@@ -23,7 +23,7 @@ import {
   updateAgentMaxTasks,
   updateAgentStatus,
   upsertSwarmConfig
-} from "./cli-prfghf4h.js";
+} from "./cli-qxn3g3yx.js";
 import {
   init_resolver,
   resolveTemplate

package/dist/{cli-f2tgry1v.js → cli-6bz2hzvw.js}

@@ -7,14 +7,14 @@ import {
   restoreScratchScriptLastUsedIfUnchanged,
   runScript,
   touchScratchScriptLastUsed
-} from "./cli-yd6vqt1x.js";
+} from "./cli-fmha74ga.js";
 import {
   defaultAssetKey,
   getDbClient,
   getLeadAgent,
   init_db,
   init_key
-} from "./cli-prfghf4h.js";
+} from "./cli-qxn3g3yx.js";
 import {
   init_zod
 } from "./cli-s35981d0.js";

package/dist/{cli-bynsg176.js → cli-6mmwmy45.js}

@@ -4,10 +4,16 @@ import {
 import {
   resolveCodexPrompt
 } from "./cli-r94z9p1z.js";
+import {
+  readPkgVersion
+} from "./cli-f64gdfxc.js";
 import {
   SessionErrorTracker,
   buildOtelTraceparentEnv
 } from "./cli-a3pkfpqs.js";
+import {
+  summarizeSession
+} from "./cli-a1zrc2g6.js";
 import {
   CTX_MODE_NUDGE_EVERY
 } from "./cli-zm7njwzd.js";
@@ -16,12 +22,6 @@ import {
   clampContextPercent,
   computeContextUsedUnified
 } from "./cli-cw70hymf.js";
-import {
-  readPkgVersion
-} from "./cli-f64gdfxc.js";
-import {
-  summarizeSession
-} from "./cli-y37pxs1m.js";
 import {
   buildRatingsFromLlm,
   fetchRetrievalsForTask,
@@ -116,6 +116,7 @@ var Thread = class {
       threadId: this._id,
       images,
       model: options?.model,
+      threadSource: options?.threadSource,
       sandboxMode: options?.sandboxMode,
       workingDirectory: options?.workingDirectory,
       skipGitRepoCheck: options?.skipGitRepoCheck,
@@ -206,7 +207,8 @@ var CodexExec = class {
   pathDirs;
   envOverride;
   configOverrides;
-  constructor(executablePath = null, env, configOverrides) {
+  rawConfigOverrides;
+  constructor(executablePath = null, env, configOverrides, rawConfigOverrides) {
     if (executablePath) {
       this.executablePath = executablePath;
       this.pathDirs = [];
@@ -217,6 +219,7 @@ var CodexExec = class {
     }
     this.envOverride = env;
     this.configOverrides = configOverrides;
+    this.rawConfigOverrides = rawConfigOverrides;
   }
   async* run(args) {
     const commandArgs = ["exec", "--experimental-json"];
@@ -225,12 +228,20 @@ var CodexExec = class {
         commandArgs.push("--config", override);
       }
     }
+    if (this.rawConfigOverrides) {
+      for (const override of this.rawConfigOverrides) {
+        commandArgs.push("--config", override);
+      }
+    }
     if (args.baseUrl) {
       commandArgs.push("--config", `openai_base_url=${toTomlValue(args.baseUrl, "openai_base_url")}`);
     }
     if (args.model) {
       commandArgs.push("--model", args.model);
     }
+    if (args.threadSource !== undefined && !args.threadId) {
+      commandArgs.push("--thread-source", args.threadSource);
+    }
     if (args.sandboxMode) {
       commandArgs.push("--sandbox", args.sandboxMode);
     }
@@ -545,8 +556,8 @@ var Codex = class {
   exec;
   options;
   constructor(options = {}) {
-    const { codexPathOverride, env, config } = options;
-    this.exec = new CodexExec(codexPathOverride, env, config);
+    const { codexPathOverride, env, config, configOverrides } = options;
+    this.exec = new CodexExec(codexPathOverride, env, config, configOverrides);
     this.options = options;
   }
   startThread(options = {}) {

package/dist/{cli-crkvptsz.js → cli-7ccy0h4r.js}

@@ -4,12 +4,12 @@ import {
   linkIdentity,
   recordUnmappedIdentity,
   resolveIdentity
-} from "./cli-v21nahej.js";
+} from "./cli-yw2z5kj9.js";
 import {
   getKv,
   init_db,
   upsertKv
-} from "./cli-prfghf4h.js";
+} from "./cli-qxn3g3yx.js";
 
 // src/slack/enrich.ts
 init_db();