@desplega.ai/agent-swarm 1.155.0 → 1.155.1

package/dist/{cli-1n7d9wac.js → cli-967j85jf.js}

@@ -11,7 +11,7 @@ import {
   getDbClient,
   init_db,
   isSqliteVecAvailable
-} from "./cli-3bh2bbga.js";
+} from "./cli-60cwjbsn.js";
 import {
   __esm,
   __export,
@@ -117,7 +117,8 @@ class OpenAIEmbeddingProvider {
       const response = await client.embeddings.create({
         model: this.model,
         input: cleaned,
-        dimensions: this.dimensions
+        dimensions: this.dimensions,
+        encoding_format: "float"
       });
       const values = response.data[0]?.embedding;
       if (!values)
@@ -151,7 +152,8 @@ class OpenAIEmbeddingProvider {
       const response = await client.embeddings.create({
         model: this.model,
         input: nonEmptyTexts,
-        dimensions: this.dimensions
+        dimensions: this.dimensions,
+        encoding_format: "float"
       });
       const results = texts.map(() => null);
       for (const item of response.data) {

package/dist/{cli-jbzfb1np.js → cli-bg3d9v8z.js}

@@ -4,11 +4,11 @@ import {
   getEmbeddingProvider,
   init_embedding,
   serializeEmbedding
-} from "./cli-1n7d9wac.js";
+} from "./cli-967j85jf.js";
 import {
   getDbClient,
   init_db
-} from "./cli-3bh2bbga.js";
+} from "./cli-60cwjbsn.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-mnmh7mj3.js → cli-czbmash2.js}

@@ -1,7 +1,7 @@
 import {
   getValidCodexOAuth,
   persistCodexOAuth
-} from "./cli-e7d20cty.js";
+} from "./cli-ntqdjgtp.js";
 import {
   GITHUB_COPILOT_MODELS,
   builtinModels,

package/dist/{cli-tj253fr8.js → cli-gwha4avb.js}

@@ -5,12 +5,12 @@ import {
   instantFlush,
   requestSlackThreadSteering,
   wasEventSeen
-} from "./cli-s7zv7xdf.js";
+} from "./cli-jmbz691m.js";
 import {
   enrichSlackUserEmail,
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-aa3m1yxe.js";
+} from "./cli-p2hxs01b.js";
 import {
   TaskCreationBlockedError,
   broadcastMatches,
@@ -23,14 +23,14 @@ import {
   hasOtherUserMention,
   notifySlackFileFailures,
   routeMessage
-} from "./cli-08rnbjhh.js";
+} from "./cli-pbsk349d.js";
 import {
   ackSlackMessage,
   buildTreeBlocks,
   ensureSlackThreadTree,
   isSlackRenderV2Enabled,
   registerTreeMessage
-} from "./cli-52r0n5f8.js";
+} from "./cli-h4jrts5n.js";
 import {
   getAgentById,
   getAgentWorkingOnThread,
@@ -43,7 +43,7 @@ import {
   isExtensionAgent,
   reactionName,
   slackContextKey
-} from "./cli-3bh2bbga.js";
+} from "./cli-60cwjbsn.js";
 import {
   init_resolver,
   resolveTemplate

package/dist/{cli-qxmjs2tx.js → cli-gy9ctpmm.js}

@@ -7,7 +7,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@desplega.ai/agent-swarm",
-    version: "1.155.0",
+    version: "1.155.1",
     description: "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
     keywords: [
       "agent-swarm.dev",

package/dist/{cli-52r0n5f8.js → cli-h4jrts5n.js}

@@ -53,7 +53,7 @@ import {
   setSlackMessageTracking,
   slackContextKey,
   updateSlackMessageRecord
-} from "./cli-3bh2bbga.js";
+} from "./cli-60cwjbsn.js";
 import {
   init_types,
   isTerminalTaskStatus
@@ -52878,7 +52878,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
     return;
   initialized = true;
   try {
-    const impl = await import("./otel-impl-vcxd9xr4.js");
+    const impl = await import("./otel-impl-fwfz8r5y.js");
     await impl.boot(serviceRole);
     realWithSpan = impl.withSpan;
     realStartSpan = impl.startSpan;
@@ -53318,17 +53318,20 @@ async function getSlackOutputAttachments(taskId) {
 }
 
 // src/slack/task-output.ts
-var LEGACY_DEFERRAL_NOTICE = /^Deferred until ([^\n(]+?) \([^\n]*?\) -> .*$/;
+var LEGACY_DEFERRAL_NOTICE = /^Deferred until [^\n(]+? \([^\n]*?\) -> .*$/;
+var WHEN = String.raw`(?:today|tomorrow|on \S+) at [^\n]+?`;
+var TIME_DEFERRAL_CARD = new RegExp(`^Checking back ${WHEN}$`);
+var EVENT_DEFERRAL_CARD = new RegExp(`^Waiting on ([^\\n]+?) — or ${WHEN} at the latest$`);
 function slackTaskOutput(task) {
   const output = task.output ?? undefined;
-  if (task.status !== "completed" || task.outputSchema || !task.tags?.includes("deferred")) {
+  if (!output || task.status !== "completed" || task.outputSchema || !task.tags?.includes("deferred")) {
     return output;
   }
-  const legacy = output?.match(LEGACY_DEFERRAL_NOTICE);
-  if (!legacy)
-    return output;
-  const eta = legacy[1]?.trim();
-  return eta ? `Checking back ${eta}` : output;
+  if (LEGACY_DEFERRAL_NOTICE.test(output) || TIME_DEFERRAL_CARD.test(output)) {
+    return "Checking back later";
+  }
+  const waitingOn = output.match(EVENT_DEFERRAL_CARD)?.[1];
+  return waitingOn ? `Waiting on ${waitingOn}` : output;
 }
 function isDeferredTask(task) {
   if (task.status !== "completed")
@@ -54277,15 +54280,15 @@ async function initSlackApp() {
     ...slackApiUrl ? { clientOptions: { slackApiUrl } } : {}
   });
   initialized2 = true;
-  const { registerMessageHandler } = await import("./handlers-1rh14gcx.js");
-  const { registerCommandHandler } = await import("./commands-b3z94mtk.js");
-  const { registerActionHandlers } = await import("./actions-fn65prvt.js");
-  const { registerWorkObjectHandlers } = await import("./work-objects-m0w74fxg.js");
+  const { registerMessageHandler } = await import("./handlers-n1p7kpt3.js");
+  const { registerCommandHandler } = await import("./commands-3ryb64pj.js");
+  const { registerActionHandlers } = await import("./actions-by3qdvvk.js");
+  const { registerWorkObjectHandlers } = await import("./work-objects-pxkkejb4.js");
   registerMessageHandler(app);
   registerCommandHandler(app);
   registerActionHandlers(app);
   registerWorkObjectHandlers(app);
-  const { createAssistant } = await import("./assistant-y3mvz5hd.js");
+  const { createAssistant } = await import("./assistant-18hve126.js");
   app.assistant(createAssistant());
   return app;
 }
@@ -54294,7 +54297,7 @@ async function startSlackApp() {
     await initSlackApp();
   }
   if (app) {
-    const { isSlackRenderV2Enabled: isSlackRenderV2Enabled2 } = await import("./render-v2-19qtasfm.js");
+    const { isSlackRenderV2Enabled: isSlackRenderV2Enabled2 } = await import("./render-v2-gzx9dkx8.js");
     if (isSlackRenderV2Enabled2())
       await ensureSlackRenderV2Activation();
     await app.start();

package/dist/{cli-1chr8hz0.js → cli-j1gcxf46.js}

@@ -1,7 +1,7 @@
 import {
   getDb,
   init_db
-} from "./cli-3bh2bbga.js";
+} from "./cli-60cwjbsn.js";
 
 // src/be/seed-pricing.ts
 init_db();

package/dist/{cli-s7zv7xdf.js → cli-jmbz691m.js}

@@ -1,7 +1,7 @@
 import {
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-aa3m1yxe.js";
+} from "./cli-p2hxs01b.js";
 import {
   bufferedFileFailures,
   buildEffectiveText,
@@ -11,7 +11,7 @@ import {
   fetchSlackFiles,
   findUserByExternalId,
   notifySlackFileFailures
-} from "./cli-08rnbjhh.js";
+} from "./cli-pbsk349d.js";
 import {
   buildBufferFlushBlocks,
   ensureSlackThreadTree,
@@ -20,7 +20,7 @@ import {
   getSlackApp,
   isSlackRenderV2Enabled,
   registerTreeMessage
-} from "./cli-52r0n5f8.js";
+} from "./cli-h4jrts5n.js";
 import {
   createLogEntry,
   getAgentById,
@@ -33,7 +33,7 @@ import {
   init_steering,
   requestSteering,
   slackContextKey
-} from "./cli-3bh2bbga.js";
+} from "./cli-60cwjbsn.js";
 import {
   init_steering_enabled,
   isSteeringEnabled

package/dist/{cli-4mwfhwwc.js → cli-k85m894w.js}

@@ -1,6 +1,6 @@
 import {
   runStopHookSessionSummarySubprocess
-} from "./cli-e2fmyxrc.js";
+} from "./cli-03jn5306.js";
 import {
   fetchInstalledMcpServers
 } from "./cli-tng3131n.js";
@@ -822,7 +822,7 @@ class ClaudeAdapter {
     if (transport === "sdk" && isClaudeBridgeEffective(sourceEnv)) {
       throw new Error("CLAUDE_TRANSPORT=sdk cannot run with an effective Claude Bridge configuration. Select CLI transport or disable the bridge.");
     }
-    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-ze81m2c1.js") : undefined;
+    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-ww42x2t2.js") : undefined;
     claudeSdk?.validateClaudeSdkAdditionalArgs([
       ...claudeBinaryArgv.slice(1),
       ...config.additionalArgs ?? []

package/dist/{cli-085v29fc.js → cli-kz0xtztz.js}

@@ -11,7 +11,7 @@ import {
 } from "./cli-f14fvzag.js";
 import {
   embedScript
-} from "./cli-jbzfb1np.js";
+} from "./cli-bg3d9v8z.js";
 import {
   calculatePKCECodeChallenge,
   ensureAuthorizationTokenOrThrow,
@@ -23,7 +23,7 @@ import {
   oauthAppRowToProviderConfig,
   updateAuthorizationTokens,
   upsertAuthorization
-} from "./cli-y6m789kb.js";
+} from "./cli-66k89bhx.js";
 import {
   CredentialBroker,
   DEFAULT_CREDENTIAL_BINDINGS,
@@ -43,7 +43,7 @@ import {
   normalizeDateRequired,
   placeholderForConfigKey,
   upsertSwarmConfig
-} from "./cli-3bh2bbga.js";
+} from "./cli-60cwjbsn.js";
 import {
   defaultAssetKey,
   init_key

package/dist/{cli-e7d20cty.js → cli-ntqdjgtp.js}

@@ -1,4 +1,10 @@
+import {
+  init_secret_scrubber,
+  scrubSecrets
+} from "./cli-r2ap2czm.js";
+
 // src/providers/codex-oauth/flow.ts
+init_secret_scrubber();
 import { randomBytes } from "node:crypto";
 import { createServer } from "node:http";
 
@@ -81,7 +87,7 @@ function decodeJwt(token) {
     return null;
   }
 }
-async function exchangeAuthorizationCode(code, verifier, redirectUri = REDIRECT_URI) {
+async function exchangeAuthorizationCode(code, verifier, redirectUri = REDIRECT_URI, signal) {
   const response = await _fetchHolder.current(TOKEN_URL, {
     method: "POST",
     headers: { "Content-Type": "application/x-www-form-urlencoded" },
@@ -91,16 +97,17 @@ async function exchangeAuthorizationCode(code, verifier, redirectUri = REDIRECT_
       code,
       code_verifier: verifier,
       redirect_uri: redirectUri
-    })
+    }),
+    signal
   });
   if (!response.ok) {
     const text = await response.text().catch(() => "");
-    console.error("[codex-oauth] code->token failed:", response.status, text);
+    console.error("[codex-oauth] code->token failed:", response.status, scrubSecrets(text));
     return { type: "failed" };
   }
   const json = await response.json();
   if (!json.access_token || !json.refresh_token || typeof json.expires_in !== "number") {
-    console.error("[codex-oauth] token response missing fields:", json);
+    console.error("[codex-oauth] token response missing fields:", Object.keys(json));
     return { type: "failed" };
   }
   return {
@@ -353,6 +360,7 @@ function credentialsToAuthJson(creds, opts = {}) {
 
 // src/providers/codex-oauth/storage.ts
 var CODEX_OAUTH_KEY_LEGACY = "codex_oauth";
+var MAX_CODEX_OAUTH_SLOT = 100;
 var REFRESH_LOCK_TTL_MS = 2 * 60 * 1000;
 var REFRESH_LOCK_WAIT_MS = 30 * 1000;
 var REFRESH_LOCK_POLL_MS = 250;
@@ -585,4 +593,4 @@ async function getValidCodexOAuth(apiUrl, apiKey, slot = 0, opts) {
   }
 }
 
-export { loginCodexOAuth, deriveCodexKeySuffix, authJsonToCredentialSelection, credentialsToAuthJson, CodexOAuthRefreshError, loadAllCodexOAuthSlots, storeCodexOAuth, persistCodexOAuth, getValidCodexOAuth };
+export { _fetchHolder, CLIENT_ID, exchangeAuthorizationCode, getAccountId, loginCodexOAuth, deriveCodexKeySuffix, authJsonToCredentialSelection, credentialsToAuthJson, MAX_CODEX_OAUTH_SLOT, CodexOAuthRefreshError, codexOAuthKeyForSlot, loadAllCodexOAuthSlots, storeCodexOAuth, persistCodexOAuth, getValidCodexOAuth };

package/dist/{cli-aa3m1yxe.js → cli-p2hxs01b.js}

@@ -4,12 +4,12 @@ import {
   linkIdentity,
   recordUnmappedIdentity,
   resolveIdentity
-} from "./cli-08rnbjhh.js";
+} from "./cli-pbsk349d.js";
 import {
   getKv,
   init_db,
   upsertKv
-} from "./cli-3bh2bbga.js";
+} from "./cli-60cwjbsn.js";
 
 // src/slack/enrich.ts
 init_db();

package/dist/{cli-08rnbjhh.js → cli-pbsk349d.js}

@@ -10,7 +10,7 @@ import {
   getMemoryRaterNames,
   resolveCredential,
   sanitizeReferencesSource
-} from "./cli-mnmh7mj3.js";
+} from "./cli-czbmash2.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-re8z5p8p.js";
@@ -19,14 +19,14 @@ import {
 } from "./cli-3dpj7atn.js";
 import {
   startPricingRefreshLoop
-} from "./cli-4jgxek08.js";
+} from "./cli-rqbvtc1v.js";
 import {
   seedPricingFromModelsDev
-} from "./cli-1chr8hz0.js";
+} from "./cli-j1gcxf46.js";
 import {
   ensureRbacSeedsSynced,
   getUserGrant
-} from "./cli-fdtv576r.js";
+} from "./cli-82w25rb4.js";
 import {
   can,
   decideAdmission,
@@ -103,7 +103,7 @@ import {
   validateDefinition,
   validateScriptImports,
   writeBareImportShim
-} from "./cli-085v29fc.js";
+} from "./cli-kz0xtztz.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -114,7 +114,7 @@ import {
 } from "./cli-f14fvzag.js";
 import {
   embedScript
-} from "./cli-jbzfb1np.js";
+} from "./cli-bg3d9v8z.js";
 import {
   buildAuthorizationUrl,
   createOAuthApp,
@@ -129,7 +129,7 @@ import {
   listAuthorizationsForApp,
   onAuthorizationRefreshed,
   upsertOAuthApp
-} from "./cli-y6m789kb.js";
+} from "./cli-66k89bhx.js";
 import {
   AgentFsProvider,
   getFileStorageProvider,
@@ -146,7 +146,7 @@ import {
   isGraphExpansionEnabled,
   rerank,
   rowToCandidate
-} from "./cli-1n7d9wac.js";
+} from "./cli-967j85jf.js";
 import {
   ZodFirstPartyTypeKind,
   objectType
@@ -176,7 +176,7 @@ import {
   taskCitationWarnings,
   upsertTaskCitations,
   withSpan
-} from "./cli-52r0n5f8.js";
+} from "./cli-h4jrts5n.js";
 import {
   init_task_attachment_links,
   taskAttachmentDisplayUrl,
@@ -364,9 +364,11 @@ import {
   insertTaskAttachment,
   installMcpServer,
   installSkill,
+  internalConfigKeyError,
   isAgentEligibleForTask,
   isExtensionAgent,
   isInTransaction,
+  isInternalConfigKey,
   isReservedConfigKey,
   isSteeringEnabled,
   linearContextKey,
@@ -439,7 +441,7 @@ import {
   upsertSwarmConfig,
   validateConfigValue,
   workflowContextKey
-} from "./cli-3bh2bbga.js";
+} from "./cli-60cwjbsn.js";
 import {
   $OpenAPIRegistry,
   $OpenApiGeneratorV31,
@@ -577,7 +579,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-qxmjs2tx.js";
+} from "./cli-gy9ctpmm.js";
 import {
   init_secret_scrubber,
   isSensitiveKey,
@@ -14316,7 +14318,7 @@ async function notifyAutomationPreflightFailure(preflight) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-xxzqxp84.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-99hz4k80.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Automation Preflight] Slack not available, cannot send notification");
@@ -27731,7 +27733,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-xxzqxp84.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-99hz4k80.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -27802,7 +27804,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDbClient: getDbClient2 } = await import("./db-v3bjpzv8.js");
+  const { getDbClient: getDbClient2 } = await import("./db-efjt4fwn.js");
   await getDbClient2().transaction(async (tx) => {
     const row = await tx.get("SELECT metadata FROM oauth_apps WHERE provider = 'jira'");
     if (!row) {
@@ -100968,8 +100970,8 @@ function getAllowedOrigins() {
     return DEFAULT_ALLOWED_ORIGINS;
   return raw.split(",").map((entry) => entry.trim()).filter(Boolean);
 }
-function isOriginAllowedForCredentials(origin) {
-  const allowed = getAllowedOrigins().some((entry) => {
+function originAllowedForCredentials(origin) {
+  return getAllowedOrigins().some((entry) => {
     if (!entry.includes("*"))
       return entry === origin;
     const pattern = /^([a-zA-Z][a-zA-Z0-9+.-]*):\/\/\*\.([a-zA-Z0-9.-]+)(:\d+)?$/.exec(entry);
@@ -100986,11 +100988,26 @@ function isOriginAllowedForCredentials(origin) {
     }
     return hostname.endsWith(`.${suffix}`);
   });
+}
+function isOriginAllowedForCredentials(origin) {
+  const allowed = originAllowedForCredentials(origin);
   if (!allowed) {
     console.warn(`[CORS] Denied credentialed origin ${scrubSecrets(JSON.stringify(origin.slice(0, 512)))}; add the trusted SPA origin to CORS_ALLOWED_ORIGINS (custom values replace hosted/dev defaults).`);
   }
   return allowed;
 }
+function allowedCredentialRedirect(raw) {
+  if (!raw)
+    return;
+  try {
+    const redirect = new URL(raw);
+    if (redirect.protocol !== "http:" && redirect.protocol !== "https:")
+      return;
+    return originAllowedForCredentials(redirect.origin) ? redirect.toString() : undefined;
+  } catch {
+    return;
+  }
+}
 function setCorsHeaders(req, res) {
   const rawOrigin = req.headers.origin;
   const origin = Array.isArray(rawOrigin) ? rawOrigin[0] : rawOrigin;
@@ -101522,7 +101539,7 @@ async function reloadGlobalConfigsAndIntegrations() {
   return runWithoutRequestAuth(() => reloadGlobalConfigsAndIntegrationsInner());
 }
 async function reloadGlobalConfigsAndIntegrationsInner() {
-  const { getEmbeddingProvider: getEmbeddingProvider2, resetEmbeddingProvider } = await import("./index-gx3qt7sy.js");
+  const { getEmbeddingProvider: getEmbeddingProvider2, resetEmbeddingProvider } = await import("./index-ayydfsax.js");
   const wasEmbeddingsConfigured = getEmbeddingProvider2().isConfigured();
   const updated = await loadGlobalConfigsIntoEnv(true);
   await stopSlackApp();
@@ -101535,10 +101552,10 @@ async function reloadGlobalConfigsAndIntegrationsInner() {
     integrations.push("embeddings");
   }
   if (!wasEmbeddingsConfigured && isEmbeddingsConfigured) {
-    import("./boot-reembed-a52cz5xy.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+    import("./boot-reembed-gv4gkq87.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
       console.error("[config-reload] memory backfill failed (non-fatal):", err);
     });
-    import("./boot-reembed-mma39mkx.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+    import("./boot-reembed-zm7dmkqt.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
       console.error("[config-reload] script backfill failed (non-fatal):", err);
     });
   }
@@ -102351,7 +102368,7 @@ function setPreloadedTools(server, names) {
 async function applyPreToolCall(name, args, requestInfo, inputSchema) {
   if (requestInfo.callOrigin !== "mcp")
     return { args };
-  const dispatcher = await import("./dispatcher-vnbkay7r.js");
+  const dispatcher = await import("./dispatcher-8vmkfxsh.js");
   const result = await dispatcher.dispatchPre("pre.tool.call", { tool: name, args, requestInfo }, inputSchema ? {
     validateModify: async (data) => {
       const schema = normalizeObjectSchema(inputSchema) ?? inputSchema;
@@ -126120,6 +126137,7 @@ This check refuses once per task; the next completion is accepted and unfixed ci
 // src/tools/swarm-config/delete-config.ts
 init_zod();
 init_db();
+init_swarm_config_guard();
 var registerDeleteConfigTool = (server) => {
   createToolRegistrar(server)("delete-config", {
     title: "Delete Config",
@@ -126158,6 +126176,11 @@ var registerDeleteConfigTool = (server) => {
           data: { yourAgentId: requestInfo.agentId }
         });
       }
+      if (isInternalConfigKey(existing.key)) {
+        return toolErr(internalConfigKeyError(existing.key).message, {
+          data: { yourAgentId: requestInfo.agentId }
+        });
+      }
       const deleted = await deleteSwarmConfig(id2);
       if (deleted && existing.scope === "agent" && existing.scopeId && existing.key === AGENT_MAX_TASKS_CONFIG_KEY) {
         await resetAgentMaxTasksMirror(existing.scopeId);
@@ -126185,6 +126208,7 @@ var registerDeleteConfigTool = (server) => {
 // src/tools/swarm-config/get-config.ts
 init_zod();
 init_db();
+init_swarm_config_guard();
 init_types();
 init_secret_scrubber();
 var configEntryShape = looseObject({
@@ -126224,6 +126248,7 @@ var registerGetConfigTool = (server) => {
     }
     try {
       let configs = await getResolvedConfig(agentId, repoId);
+      configs = configs.filter((config) => !isInternalConfigKey(config.key));
       if (key) {
         configs = configs.filter((c) => c.key === key);
       }
@@ -126273,6 +126298,7 @@ var registerGetConfigTool = (server) => {
 // src/tools/swarm-config/list-config.ts
 init_zod();
 init_db();
+init_swarm_config_guard();
 init_types();
 init_secret_scrubber();
 var configEntryShape2 = looseObject({
@@ -126311,11 +126337,11 @@ var registerListConfigTool = (server) => {
       });
     }
     try {
-      const configs = await getSwarmConfigs({
+      const configs = (await getSwarmConfigs({
         scope,
         scopeId,
         key
-      });
+      })).filter((config) => !isInternalConfigKey(config.key));
       let effectiveIncludeSecrets = includeSecrets ?? false;
       let secretsNote = "";
       if (includeSecrets) {
@@ -126410,6 +126436,11 @@ var registerSetConfigTool = (server) => {
         const message = reservedKeyError(key).message;
         return toolErr(message, { data: { yourAgentId: requestInfo.agentId } });
       }
+      if (isInternalConfigKey(key)) {
+        return toolErr(internalConfigKeyError(key).message, {
+          data: { yourAgentId: requestInfo.agentId }
+        });
+      }
       const agent = await getAgentById(requestInfo.agentId);
       const decision = can({
         principal: {
@@ -131257,7 +131288,7 @@ class HumanInTheLoopExecutor extends BaseExecutor {
       }
       if (notification.channel === "slack") {
         try {
-          const { getSlackApp: getSlackApp2 } = await import("./app-xxzqxp84.js");
+          const { getSlackApp: getSlackApp2 } = await import("./app-99hz4k80.js");
           const slackApp = getSlackApp2();
           if (!slackApp) {
             console.warn("[HITL] Slack not initialized — cannot send notification");
@@ -131386,7 +131417,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp: getSlackApp2 } = await import("./app-xxzqxp84.js");
+        const { getSlackApp: getSlackApp2 } = await import("./app-99hz4k80.js");
         const app = getSlackApp2();
         if (!app) {
           return {
@@ -132210,4 +132241,4 @@ async function initWorkflows() {
   logOpenWebhookTriggers();
 }
 
-export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, findUserById, findUserByExternalId, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, mintSessionToken, revokeSessionToken, fingerprintApiKey, resolveIdentity, renderIdentity, createAdditiveBuffer, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, automationIntegrationFixUrl, preflightAutomation, getAutomationSetupStates, listEnabledAutomationPreflightInputs, validateJsonSchema, TriggerSchemaError, startWorkflowExecution, setupWorkflowResumeListener, retryFailedRun, cancelWorkflowRun, resumeWaitState, initWaitBusSubscriptions, subscribeWaitToBus, recoverIncompleteRuns, startRetryPoller, stopRetryPoller, validateTemplateVariables, instantiateTemplate, handleWebhookTrigger, logOpenWebhookTriggers, handleEventTrigger, handleScheduleTrigger, verifyHmacSignature, WebhookError, snapshotWorkflow, snapshotAndUpdateWorkflow, startWaitPoller, stopWaitPoller, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry, initWorkflows, dispatchScheduleTarget, calculateNextRun, startScheduler, stopScheduler, runScheduleNow, parseSkillContent, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, toolErr, createToolRegistrar, warnIfCorsAllowsAnyOrigin, isOriginAllowedForCredentials, setCorsHeaders, parseQueryParams, getPathSegments, wireHttpSpanLifecycle, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, runtimeInstanceHeader, describeRequestRoute, route, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError, isRegistered, isExtensionAgentId, getExtensionBridgeToken, resolveBridgeCallOrigin, extensionIdForAgent, runContext, registerLoaded, unregister, listRegistered, dispatchPre, dispatchPost, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, AGENT_MAX_TASKS_CONFIG_KEY, reconcileAgentMaxTasksPolicy, resetAgentMaxTasksMirror, upsertSwarmConfigWithPolicyMirror, runtimeStaleThresholdMinutes, upsertRuntimeInstance, getRuntimeInstanceById, touchRuntimeInstance, countActiveRuntimeInstancesForAgent, listRuntimeInstancesForAgent, setRuntimeCredentialReady, reconcileAgentStatusFromRuntimes, agentsWithLiveRuntime, expireStaleRuntimeInstances, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2 as handleIssue1, handleNote, handlePipeline, repointTrackerSyncBySwarmId, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, parseCookieHeader, extractAndVerifyCookie, issuePageSessionCookie, resolveHttpRequestAuth, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, userCtx, resolveTaskAuditUserId, resolveHttpAuditUserId, resolveHttpFavoriteOwner, handleApps, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, reservedRoomKeyError, refreshLinks, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, indexMemoryContent, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, taskActionInputSchema, taskActionOutputSchema, taskActionHandler, patchWorkflowDefinition, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };
+export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, findUserById, findUserByExternalId, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, mintSessionToken, revokeSessionToken, fingerprintApiKey, resolveIdentity, renderIdentity, createAdditiveBuffer, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, automationIntegrationFixUrl, preflightAutomation, getAutomationSetupStates, listEnabledAutomationPreflightInputs, validateJsonSchema, TriggerSchemaError, startWorkflowExecution, setupWorkflowResumeListener, retryFailedRun, cancelWorkflowRun, resumeWaitState, initWaitBusSubscriptions, subscribeWaitToBus, recoverIncompleteRuns, startRetryPoller, stopRetryPoller, validateTemplateVariables, instantiateTemplate, handleWebhookTrigger, logOpenWebhookTriggers, handleEventTrigger, handleScheduleTrigger, verifyHmacSignature, WebhookError, snapshotWorkflow, snapshotAndUpdateWorkflow, startWaitPoller, stopWaitPoller, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry, initWorkflows, dispatchScheduleTarget, calculateNextRun, startScheduler, stopScheduler, runScheduleNow, parseSkillContent, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, toolErr, createToolRegistrar, warnIfCorsAllowsAnyOrigin, isOriginAllowedForCredentials, allowedCredentialRedirect, setCorsHeaders, parseQueryParams, getPathSegments, wireHttpSpanLifecycle, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, runtimeInstanceHeader, describeRequestRoute, route, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError, isRegistered, isExtensionAgentId, getExtensionBridgeToken, resolveBridgeCallOrigin, extensionIdForAgent, runContext, registerLoaded, unregister, listRegistered, dispatchPre, dispatchPost, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, AGENT_MAX_TASKS_CONFIG_KEY, reconcileAgentMaxTasksPolicy, resetAgentMaxTasksMirror, upsertSwarmConfigWithPolicyMirror, runtimeStaleThresholdMinutes, upsertRuntimeInstance, getRuntimeInstanceById, touchRuntimeInstance, countActiveRuntimeInstancesForAgent, listRuntimeInstancesForAgent, setRuntimeCredentialReady, reconcileAgentStatusFromRuntimes, agentsWithLiveRuntime, expireStaleRuntimeInstances, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2 as handleIssue1, handleNote, handlePipeline, repointTrackerSyncBySwarmId, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, parseCookieHeader, extractAndVerifyCookie, issuePageSessionCookie, resolveHttpRequestAuth, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, userCtx, resolveTaskAuditUserId, resolveHttpAuditUserId, resolveHttpFavoriteOwner, handleApps, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, reservedRoomKeyError, refreshLinks, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, indexMemoryContent, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, taskActionInputSchema, taskActionOutputSchema, taskActionHandler, patchWorkflowDefinition, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };

package/dist/{cli-4jgxek08.js → cli-rqbvtc1v.js}

@@ -1,14 +1,14 @@
 import {
   buildModelsDevSeedRows,
   loadModelsDevCache
-} from "./cli-1chr8hz0.js";
+} from "./cli-j1gcxf46.js";
 import {
   createLogEntry,
   getActivePricingRow,
   getDbClient,
   init_db,
   insertPricingRow
-} from "./cli-3bh2bbga.js";
+} from "./cli-60cwjbsn.js";
 import {
   init_secret_scrubber,
   scrubSecrets