@desplega.ai/agent-swarm 1.135.1 → 1.135.2

package/dist/{cli-ysehve35.js → cli-1857msnd.js}

@@ -1,7 +1,7 @@
 import {
   getDb,
   init_db
-} from "./cli-q46hkq2p.js";
+} from "./cli-qxn3g3yx.js";
 
 // src/be/seed-pricing.ts
 init_db();

package/dist/{cli-x0mnesvr.js → cli-1dfatkzm.js}

@@ -3,7 +3,7 @@ import {
   getAgentWorkingOnThread,
   getAllAgents,
   init_db
-} from "./cli-q46hkq2p.js";
+} from "./cli-qxn3g3yx.js";
 import {
   init_env_flag,
   isEnvFlagEnabled

package/dist/{cli-mgnrknyg.js → cli-1z01xdqh.js}

@@ -1,6 +1,6 @@
 import {
   summarizeSession
-} from "./cli-y37pxs1m.js";
+} from "./cli-a1zrc2g6.js";
 import {
   checkToolLoop,
   clearToolHistory
@@ -27,14 +27,14 @@ import {
   getMcpBaseUrl,
   init_constants
 } from "./cli-a1rrkrb4.js";
-import {
-  init_package,
-  package_default
-} from "./cli-j6fpcrdk.js";
 import {
   init_secret_scrubber,
   scrubSecrets
 } from "./cli-mkq1rk7b.js";
+import {
+  init_package,
+  package_default
+} from "./cli-4dakdn30.js";
 
 // src/hooks/hook.ts
 init_package();

package/dist/{cli-vew6xw8p.js → cli-3f0tnh34.js}

@@ -28,7 +28,7 @@ import {
   updateTrackerSync,
   updateTrackerSyncSwarmId,
   upsertSwarmConfigWithPolicyMirror
-} from "./cli-t46mkxd2.js";
+} from "./cli-6290n4yz.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-qh4sqfws.js";
@@ -37,17 +37,17 @@ import {
   ensure,
   require_dist,
   runScheduleNow
-} from "./cli-7vk1ztap.js";
+} from "./cli-r5vwg1ma.js";
 import {
   startPricingRefreshLoop
-} from "./cli-3ad3q6j0.js";
+} from "./cli-cm4z7w7w.js";
 import {
   seedPricingFromModelsDev
-} from "./cli-ysehve35.js";
+} from "./cli-1857msnd.js";
 import {
   ensureRbacSeedsSynced,
   getUserGrant
-} from "./cli-5vmvkwey.js";
+} from "./cli-cv2vjg2y.js";
 import {
   can,
   decideAdmission,
@@ -74,7 +74,7 @@ import {
   runSavedScriptAsAgent,
   updateApp,
   upgradeAppDefinition
-} from "./cli-47d0y52n.js";
+} from "./cli-6bz2hzvw.js";
 import {
   TriggerSchemaError,
   applyDefinitionPatch,
@@ -88,7 +88,7 @@ import {
   startWorkflowExecution,
   validateDefinition,
   validateJsonSchema
-} from "./cli-pbatxkne.js";
+} from "./cli-5a5nrq3g.js";
 import {
   ConnectionAuthInputSchema,
   SCRIPT_LONG_TIMEOUT_HINT_MS,
@@ -107,7 +107,7 @@ import {
   setScriptConnectionEnabled,
   upsertCredentialBinding,
   upsertScriptConnection
-} from "./cli-0rgbgtft.js";
+} from "./cli-fmha74ga.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
@@ -122,7 +122,7 @@ import {
   isGraphExpansionEnabled,
   rerank,
   rowToCandidate
-} from "./cli-zg86g3q8.js";
+} from "./cli-4rdjdddh.js";
 import {
   buildAuthorizationUrl,
   createOAuthApp,
@@ -137,7 +137,7 @@ import {
   listAuthorizationsForApp,
   onAuthorizationRefreshed,
   upsertOAuthApp
-} from "./cli-h8htvhk5.js";
+} from "./cli-ey09krp2.js";
 import {
   ZodFirstPartyTypeKind,
   objectType
@@ -149,7 +149,7 @@ import {
   createAdditiveBuffer,
   extractSlackMessageText,
   parseSlackTs
-} from "./cli-x0mnesvr.js";
+} from "./cli-1dfatkzm.js";
 import {
   findOrCreateUserByEmail,
   findUserByExternalId,
@@ -165,10 +165,10 @@ import {
   resolveIdentityByEmail,
   resolveUserByToken,
   unlinkIdentity
-} from "./cli-41wfr4tp.js";
+} from "./cli-yw2z5kj9.js";
 import {
   createTaskWithSiblingAwareness
-} from "./cli-z3h9zvty.js";
+} from "./cli-w0ygcv43.js";
 import {
   getAgentDisplayName,
   getAgentEmoji,
@@ -177,7 +177,7 @@ import {
   markdownToSlack,
   startSlackApp,
   stopSlackApp
-} from "./cli-6ewfzrgz.js";
+} from "./cli-j3xnd5b4.js";
 import {
   $OpenAPIRegistry,
   $OpenApiGeneratorV31,
@@ -422,7 +422,7 @@ import {
   upsertPromptTemplate,
   upsertService,
   validateConfigValue
-} from "./cli-q46hkq2p.js";
+} from "./cli-qxn3g3yx.js";
 import {
   generateDefaultClaudeMd,
   generateDefaultIdentityMd,
@@ -454,10 +454,6 @@ import {
   exports_zod,
   init_zod
 } from "./cli-s35981d0.js";
-import {
-  init_package,
-  package_default
-} from "./cli-j6fpcrdk.js";
 import {
   init_secret_scrubber,
   refreshSecretScrubberCache,
@@ -465,6 +461,10 @@ import {
   scrubObject,
   scrubSecrets
 } from "./cli-mkq1rk7b.js";
+import {
+  init_package,
+  package_default
+} from "./cli-4dakdn30.js";
 import {
   $ZodObject,
   $ZodType,
@@ -22956,7 +22956,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-bsbct708.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-vygnfvrh.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -23027,7 +23027,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDbClient: getDbClient2 } = await import("./db-q436srrz.js");
+  const { getDbClient: getDbClient2 } = await import("./db-8fqeheve.js");
   await getDbClient2().transaction(async (tx) => {
     const row = await tx.get("SELECT metadata FROM oauth_apps WHERE provider = 'jira'");
     if (!row) {
@@ -96654,7 +96654,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
     return;
   initialized6 = true;
   try {
-    const impl = await import("./otel-impl-7y3szdz5.js");
+    const impl = await import("./otel-impl-d2p84k6e.js");
     await impl.boot(serviceRole);
     realWithSpan = impl.withSpan;
     realStartSpan = impl.startSpan;
@@ -102084,11 +102084,18 @@ function assertSelectOnlyQuery(sql) {
   }
 }
 async function executeReadOnlyQueryGated(sql, params = [], budgetMs, maxRows) {
+  let result;
   if (isDbQueryBoundedEnabled()) {
-    return executeReadOnlyQueryBounded(sql, params, budgetMs, maxRows);
+    result = await executeReadOnlyQueryBounded(sql, params, budgetMs, maxRows);
+  } else {
+    warnDbQueryBoundedDisabledOnce();
+    result = executeReadOnlyQuery(sql, params, maxRows);
   }
-  warnDbQueryBoundedDisabledOnce();
-  return executeReadOnlyQuery(sql, params, maxRows);
+  return {
+    ...result,
+    truncated: maxRows !== undefined && result.total > maxRows,
+    rowLimit: maxRows ?? null
+  };
 }
 var dbQueryRoute = route({
   method: "post",
@@ -102104,7 +102111,9 @@ var dbQueryRoute = route({
         columns: exports_external.array(exports_external.string()),
         rows: exports_external.array(exports_external.array(exports_external.any())),
         elapsed: exports_external.number(),
-        total: exports_external.number()
+        total: exports_external.number(),
+        truncated: exports_external.boolean(),
+        rowLimit: exports_external.number().nullable()
       })
     },
     400: { description: "Invalid or disallowed SQL" },
@@ -102122,7 +102131,7 @@ async function handleDbQuery(req, res, pathSegments, queryParams) {
     return true;
   try {
     const result = await executeReadOnlyQueryGated(resolveDbQuerySql(parsed.body), parsed.body.params, getDbQueryHttpBudgetMs(), getDbQueryHttpMaxRows());
-    json(res, result);
+    dbQueryRoute.respond(res, 200, result);
   } catch (err) {
     if (err instanceof DbQueryConcurrencyCapError) {
       res.setHeader("Retry-After", "1");
@@ -102986,7 +102995,8 @@ var registerDbQueryTool = (server) => {
       rows: array(array(any())).optional(),
       elapsed: number().optional(),
       total: number().optional(),
-      truncated: boolean().optional()
+      truncated: boolean().optional(),
+      rowLimit: number().optional()
     })
   }, async (input, _requestInfo, _meta) => {
     try {
@@ -102994,20 +103004,19 @@ var registerDbQueryTool = (server) => {
       const params = input.params ?? [];
       const maxRows = getDbQueryMcpMaxRows();
       const result = await executeReadOnlyQueryGated(sql, params, getDbQueryMcpBudgetMs(), maxRows);
-      const truncated = result.total > maxRows;
       const header = result.columns.join(" | ");
       const separator = result.columns.map(() => "---").join(" | ");
       const dataRows = result.rows.map((row) => row.map((v) => String(v ?? "NULL")).join(" | "));
       const table = [header, separator, ...dataRows].join(`
 `);
-      const suffix = truncated ? `
-(Showing ${maxRows} of ${result.total} rows)` : "";
+      const suffix = result.truncated ? `
+(Showing ${result.rowLimit} of ${result.total} rows)` : "";
       const details = `${table}${suffix}
 
 ${result.total} rows in ${result.elapsed}ms`;
       return toolOk(`${result.total} row(s) in ${result.elapsed}ms`, {
         details,
-        data: { ...result, truncated }
+        data: { ...result }
       });
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);

package/dist/{cli-j6fpcrdk.js → cli-4dakdn30.js}

@@ -7,7 +7,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@desplega.ai/agent-swarm",
-    version: "1.135.1",
+    version: "1.135.2",
     description: "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
     keywords: [
       "agent-swarm.dev",
@@ -178,14 +178,14 @@ var init_package = __esm(() => {
       "@aws-sdk/client-bedrock": "3.1048.0",
       "@desplega.ai/business-use": "^0.4.2",
       "@desplega.ai/localtunnel": "^2.2.0",
-      "@earendil-works/pi-agent-core": "^0.84.2",
-      "@earendil-works/pi-ai": "^0.84.2",
-      "@earendil-works/pi-coding-agent": "^0.84.2",
+      "@earendil-works/pi-agent-core": "^0.84.3",
+      "@earendil-works/pi-ai": "^0.84.3",
+      "@earendil-works/pi-coding-agent": "^0.84.3",
       "@inkjs/ui": "^2.0.0",
       "@linear/sdk": "^77.0.0",
       "@modelcontextprotocol/sdk": "^1.25.1",
-      "@openai/codex-sdk": "^0.149.0",
-      "@opencode-ai/sdk": "^1.18.21",
+      "@openai/codex-sdk": "^0.149.1",
+      "@opencode-ai/sdk": "^1.18.23",
       "@openfort/openfort-node": "^0.9.1",
       "@opentelemetry/api": "^1.9.1",
       "@opentelemetry/exporter-metrics-otlp-http": "^0.218.0",

package/dist/{cli-zg86g3q8.js → cli-4rdjdddh.js}

@@ -11,7 +11,7 @@ import {
   getDbClient,
   init_db,
   isSqliteVecAvailable
-} from "./cli-q46hkq2p.js";
+} from "./cli-qxn3g3yx.js";
 import {
   __esm,
   __export,

package/dist/{cli-pbatxkne.js → cli-5a5nrq3g.js}

@@ -18,10 +18,10 @@ import {
   sandboxSpawnEnv,
   snapshotCapped,
   touchScratchScriptLastUsed
-} from "./cli-0rgbgtft.js";
+} from "./cli-fmha74ga.js";
 import {
   withSiblingAwareness
-} from "./cli-z3h9zvty.js";
+} from "./cli-w0ygcv43.js";
 import {
   FollowUpConfigSchema,
   ModelTierSchema,
@@ -67,7 +67,7 @@ import {
   updateWorkflowRun,
   updateWorkflowRunStep,
   workflowContextKey
-} from "./cli-q46hkq2p.js";
+} from "./cli-qxn3g3yx.js";
 import {
   deepInterpolate,
   findInterpolationTokens,
@@ -3194,7 +3194,7 @@ class HumanInTheLoopExecutor extends BaseExecutor {
       }
       if (notification.channel === "slack") {
         try {
-          const { getSlackApp } = await import("./app-bsbct708.js");
+          const { getSlackApp } = await import("./app-vygnfvrh.js");
           const slackApp = getSlackApp();
           if (!slackApp) {
             console.warn("[HITL] Slack not initialized — cannot send notification");
@@ -3310,7 +3310,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp } = await import("./app-bsbct708.js");
+        const { getSlackApp } = await import("./app-vygnfvrh.js");
         const app = getSlackApp();
         if (!app) {
           return {

package/dist/{cli-t46mkxd2.js → cli-6290n4yz.js}

@@ -23,7 +23,7 @@ import {
   updateAgentMaxTasks,
   updateAgentStatus,
   upsertSwarmConfig
-} from "./cli-q46hkq2p.js";
+} from "./cli-qxn3g3yx.js";
 import {
   init_resolver,
   resolveTemplate

package/dist/{cli-47d0y52n.js → cli-6bz2hzvw.js}

@@ -7,14 +7,14 @@ import {
   restoreScratchScriptLastUsedIfUnchanged,
   runScript,
   touchScratchScriptLastUsed
-} from "./cli-0rgbgtft.js";
+} from "./cli-fmha74ga.js";
 import {
   defaultAssetKey,
   getDbClient,
   getLeadAgent,
   init_db,
   init_key
-} from "./cli-q46hkq2p.js";
+} from "./cli-qxn3g3yx.js";
 import {
   init_zod
 } from "./cli-s35981d0.js";

package/dist/{cli-96sytm77.js → cli-6mmwmy45.js}

@@ -4,10 +4,16 @@ import {
 import {
   resolveCodexPrompt
 } from "./cli-r94z9p1z.js";
+import {
+  readPkgVersion
+} from "./cli-f64gdfxc.js";
 import {
   SessionErrorTracker,
   buildOtelTraceparentEnv
 } from "./cli-a3pkfpqs.js";
+import {
+  summarizeSession
+} from "./cli-a1zrc2g6.js";
 import {
   CTX_MODE_NUDGE_EVERY
 } from "./cli-zm7njwzd.js";
@@ -16,12 +22,6 @@ import {
   clampContextPercent,
   computeContextUsedUnified
 } from "./cli-cw70hymf.js";
-import {
-  readPkgVersion
-} from "./cli-f64gdfxc.js";
-import {
-  summarizeSession
-} from "./cli-y37pxs1m.js";
 import {
   buildRatingsFromLlm,
   fetchRetrievalsForTask,
@@ -116,6 +116,7 @@ var Thread = class {
       threadId: this._id,
       images,
       model: options?.model,
+      threadSource: options?.threadSource,
       sandboxMode: options?.sandboxMode,
       workingDirectory: options?.workingDirectory,
       skipGitRepoCheck: options?.skipGitRepoCheck,
@@ -238,6 +239,9 @@ var CodexExec = class {
     if (args.model) {
       commandArgs.push("--model", args.model);
     }
+    if (args.threadSource !== undefined && !args.threadId) {
+      commandArgs.push("--thread-source", args.threadSource);
+    }
     if (args.sandboxMode) {
       commandArgs.push("--sandbox", args.sandboxMode);
     }

package/dist/{cli-gkfzvf7n.js → cli-7ccy0h4r.js}

@@ -4,12 +4,12 @@ import {
   linkIdentity,
   recordUnmappedIdentity,
   resolveIdentity
-} from "./cli-41wfr4tp.js";
+} from "./cli-yw2z5kj9.js";
 import {
   getKv,
   init_db,
   upsertKv
-} from "./cli-q46hkq2p.js";
+} from "./cli-qxn3g3yx.js";
 
 // src/slack/enrich.ts
 init_db();

package/dist/{cli-17e3ydca.js → cli-83razmqg.js}

@@ -1,12 +1,12 @@
 import {
   SYSTEM_COLUMN_KINDS,
   listAppRecords
-} from "./cli-47d0y52n.js";
+} from "./cli-6bz2hzvw.js";
 import {
   getScriptApiTypes,
   getScriptMcpTypes,
   require_typescript
-} from "./cli-0rgbgtft.js";
+} from "./cli-fmha74ga.js";
 import {
   deleteSwarmConfigByKey,
   getAgentById,
@@ -15,7 +15,7 @@ import {
   getSwarmConfigs,
   init_db,
   upsertSwarmConfig
-} from "./cli-q46hkq2p.js";
+} from "./cli-qxn3g3yx.js";
 import {
   init_secret_scrubber,
   scrubSecrets
@@ -28,7 +28,7 @@ import {
 // src/be/seed/agent-fs-provision.ts
 init_secret_scrubber();
 init_db();
-import { createHash } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 var KIND = "agent-fs-provision";
 var ITEM_KEY = "shared-org-drive";
 var PROVISION_VERSION = 1;
@@ -37,6 +37,14 @@ var DRIVE_NAME = "shared";
 var PROVISION_HASH_KEY = "AGENT_FS_PROVISION_HASH";
 var API_KEY_CONFIG = "API_AGENT_FS_API_KEY";
 var LEGACY_SHARED_KEY_CONFIG = "AGENT_FS_API_KEY";
+
+class AgentFsRequestError extends Error {
+  status;
+  constructor(message, status) {
+    super(message);
+    this.status = status;
+  }
+}
 var AGENT_FS_REQUEST_TIMEOUT_MS = 1e4;
 var fetchImpl = globalThis.fetch;
 var agentFsProvisionSeeder = {
@@ -169,12 +177,24 @@ async function ensureAgentFsCredentialsForAgent(agentId) {
     };
   }
   const shared = await ensureAgentFsSharedProvisioning({ apiUrl });
-  const email = await resolveAgentEmail(agentId);
-  const registered = await agentFsRequest(apiUrl, "/auth/register", {
-    method: "POST",
-    body: { email },
-    allowConflict: false
-  });
+  let email = await resolveAgentEmail(agentId);
+  let registered;
+  try {
+    registered = await agentFsRequest(apiUrl, "/auth/register", {
+      method: "POST",
+      body: { email },
+      allowConflict: false
+    });
+  } catch (error) {
+    if (!(error instanceof AgentFsRequestError) || error.status !== 409)
+      throw error;
+    email = recoveryAgentEmail(email);
+    registered = await agentFsRequest(apiUrl, "/auth/register", {
+      method: "POST",
+      body: { email },
+      allowConflict: false
+    });
+  }
   const apiKey = registered.apiKey ?? "";
   if (!apiKey)
     throw new Error(`agent-fs registration did not return an apiKey for ${agentId}`);
@@ -279,7 +299,7 @@ async function agentFsRequest(apiUrl, path, options = {}) {
   });
   if (!response.ok && !(options.allowConflict && response.status === 409)) {
     const text = await response.text().catch(() => "");
-    throw new Error(`agent-fs ${options.method ?? "GET"} ${path} failed: HTTP ${response.status}${text ? ` ${text}` : ""}`);
+    throw new AgentFsRequestError(`agent-fs ${options.method ?? "GET"} ${path} failed: HTTP ${response.status}${text ? ` ${text}` : ""}`, response.status);
   }
   return await response.json().catch(() => ({}));
 }
@@ -333,6 +353,12 @@ async function resolveAgentEmail(agentId) {
   const domain = process.env.AGENT_FS_EMAIL_DOMAIN || "swarm.local";
   return `${agentId}@${domain}`;
 }
+function recoveryAgentEmail(email) {
+  const separator = email.lastIndexOf("@");
+  const localPart = separator === -1 ? email : email.slice(0, separator);
+  const domain = separator === -1 ? "swarm.local" : email.slice(separator + 1);
+  return `${localPart}+recovery-${randomUUID()}@${domain}`;
+}
 function slugEmailPart(value) {
   return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48) || "swarm";
 }

package/dist/{cli-pnqdak88.js → cli-8f4h27gm.js}

@@ -1,6 +1,6 @@
 import {
   runStopHookSessionSummarySubprocess
-} from "./cli-mgnrknyg.js";
+} from "./cli-1z01xdqh.js";
 import {
   SessionErrorTracker,
   buildOtelTraceparentEnv,

package/dist/{cli-vtz6yj3v.js → cli-9phjbffs.js}

@@ -11,7 +11,7 @@ import {
   resolveGrammarConstrainedSampling,
   resolveJsonSchemaStrictSampling,
   transformMessages
-} from "./cli-xmyqv00z.js";
+} from "./cli-j8dggbcr.js";
 import {
   sanitizeSurrogates
 } from "./cli-y2apkfe2.js";