@desplega.ai/agent-swarm 1.158.0 → 1.159.0

package/dist/{http-2eqa8t24.js → http-akc3wy3m.js}

@@ -7,12 +7,18 @@ import {
 } from "./cli-dgnj0zcc.js";
 import {
   SIMILARITY_THRESHOLD,
+  isUnknownModelError,
   memoryRelevance,
   writeSkillsToFilesystem
-} from "./cli-q67y4wzm.js";
+} from "./cli-phsaj4xq.js";
 import {
   Anthropic
 } from "./cli-j490egb5.js";
+import {
+  checkHeartbeatChecklist,
+  runHeartbeatSweep,
+  stopHeartbeat
+} from "./cli-20035trh.js";
 import {
   isClaudeBridgeEffective,
   resolveClaudeTransport
@@ -22,16 +28,11 @@ import {
 } from "./cli-npssxgaz.js";
 import {
   reasoningCapability
-} from "./cli-h967nb6r.js";
+} from "./cli-ca2w7zv7.js";
 import {
   ensureAgentFsCredentialsForAgent,
   inviteEmailToSharedOrg
-} from "./cli-xhaeg2nc.js";
-import {
-  checkHeartbeatChecklist,
-  runHeartbeatSweep,
-  stopHeartbeat
-} from "./cli-rqz8qbw7.js";
+} from "./cli-mzkqpxee.js";
 import {
   AGENT_MAX_TASKS_CONFIG_KEY,
   ALL_CAPABILITIES,
@@ -58,6 +59,7 @@ import {
   TriggerSchemaError,
   WebhookError,
   activateVersion,
+  agentRanModel,
   agentWithCapacity,
   allowedCredentialRedirect,
   applyRating,
@@ -80,7 +82,6 @@ import {
   checkOutputSchemaShape,
   clearJiraMetadata,
   closeRooms,
-  createApprovalFollowUpTask,
   createEvent,
   createEventsBatch,
   createResumeFollowUp,
@@ -103,10 +104,13 @@ import {
   executeRawLlm,
   executeReadOnlyQuery,
   expandCandidatesWithGraph,
+  explicitModelError,
+  explicitModelErrorForAgent,
   extractAndVerifyCookie,
   findUserById,
   fingerprintApiKey,
   flushAuditBuffer,
+  getAgentHarnessCliVersion,
   getAutomationSetupStates,
   getEnabledCapabilities,
   getEventCountsFiltered,
@@ -185,6 +189,7 @@ import {
   listExtensionRuns,
   listExtensionVersions,
   listExtensions,
+  listHarnessModelSupport,
   listOAuthPresetIds,
   listOAuthPresets,
   listRuntimeInstancesForAgent,
@@ -201,13 +206,17 @@ import {
   mintToken,
   parseBody,
   parseCookieHeader,
+  parseModelTierOverridesHeader,
   parseQueryParams,
   parseSkillContent,
   patchWorkflowDefinition,
   preflightAutomation,
+  previewModelTiers,
   readScriptSdkJsonResponse,
   reconcileAgentMaxTasksPolicy,
   reconcileAgentStatusFromRuntimes,
+  recordClaimModelResolution,
+  recordHarnessModelSupport,
   recordIdentityEvent,
   recordMemoryAccesses,
   recordRetrievals,
@@ -244,11 +253,14 @@ import {
   runtimeInstanceHeader,
   runtimeStaleThresholdMinutes,
   safeRequestUrlForLog,
+  sanitizeModelTierOverrides,
   scheduleIntegrationsReload,
   scopedResourceScopeIdSchema,
   sendKapsoReaction,
   sendTaskHandler,
   sendTaskOutputSchema,
+  setAgentHarnessCliVersion,
+  setAgentModelTierOverrides,
   setCorsHeaders,
   setExtensionLoopbackBaseUrl,
   setRuntimeCredentialReady,
@@ -287,32 +299,25 @@ import {
   verifyHmacSignature,
   verifyWebhookSignature,
   warnIfCorsAllowsAnyOrigin,
-  wireHttpSpanLifecycle
-} from "./cli-ftfvggzx.js";
+  wireHttpSpanLifecycle,
+  workflowSaveWarnings
+} from "./cli-79aq9cgb.js";
 import"./cli-0z2v4nhw.js";
 import {
   REFERENCES_SOURCE_MAX_LENGTH,
   sanitizeReferencesSource
-} from "./cli-tt9k8r35.js";
-import {
-  CLIENT_ID,
-  MAX_CODEX_OAUTH_SLOT,
-  _fetchHolder,
-  codexOAuthKeyForSlot,
-  deriveCodexKeySuffix,
-  exchangeAuthorizationCode as exchangeAuthorizationCode2,
-  getAccountId,
-  getValidCodexOAuth,
-  loadAllCodexOAuthSlots
-} from "./cli-vhjwh6cz.js";
+} from "./cli-cpvsaqsw.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-re8z5p8p.js";
-import"./cli-3dpj7atn.js";
-import"./cli-aw1jwp1r.js";
+import {
+  FilesError,
+  getFileStorageProvider,
+  normalizeFilesError
+} from "./cli-jsp14b6c.js";
 import {
   getUserGrant
-} from "./cli-aky8tctm.js";
+} from "./cli-z9x0sh1t.js";
 import {
   LEGACY_RULES,
   can,
@@ -320,13 +325,17 @@ import {
   decideToolAdmission,
   isRbacEnabled,
   setAuditSink
-} from "./cli-g8djp6qe.js";
+} from "./cli-9yg65c1j.js";
 import {
-  getModelsCatalog
-} from "./cli-ws6rqycm.js";
+  deleteModelCatalogOverlay,
+  loadModelsCatalog,
+  requestModelCatalogRefresh,
+  upsertModelCatalogOverlay
+} from "./cli-cygyqj3b.js";
+import"./cli-m4excttz.js";
 import {
   normalizeModelKey
-} from "./cli-wscdvcqz.js";
+} from "./cli-0n2e4x49.js";
 import {
   ConnectionAuthInputSchema,
   MAX_SCRIPT_WALL_CLOCK_MS,
@@ -347,6 +356,7 @@ import {
   connectionAuthInputFromFlat,
   connectionAuthSummary,
   consumeMcpOAuthPending,
+  createApprovalFollowUpTask,
   createScriptApi,
   definitionNodeIds,
   deleteMcpOAuthToken,
@@ -418,7 +428,7 @@ import {
   upsertScriptByName,
   upsertScriptConnection,
   validateDefinition
-} from "./cli-fgqxwrpv.js";
+} from "./cli-fjtp3463.js";
 import"./cli-epan13p1.js";
 import {
   detachedProcessGroup,
@@ -430,9 +440,25 @@ import {
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
+import"./cli-rfezr056.js";
+import {
+  CLIENT_ID,
+  MAX_CODEX_OAUTH_SLOT,
+  _fetchHolder,
+  codexOAuthKeyForSlot,
+  deriveCodexKeySuffix,
+  exchangeAuthorizationCode as exchangeAuthorizationCode2,
+  getAccountId,
+  getValidCodexOAuth,
+  loadAllCodexOAuthSlots
+} from "./cli-vhjwh6cz.js";
+import"./cli-3dpj7atn.js";
+import"./cli-gzyh0j0g.js";
+import"./cli-rb9m6rpe.js";
+import"./cli-rykfmgwg.js";
 import {
   searchScripts
-} from "./cli-987hg0aa.js";
+} from "./cli-vwbbaecp.js";
 import {
   acquireOAuthRefreshLock,
   buildAuthorizationUrl,
@@ -456,29 +482,22 @@ import {
   updateAuthorizationIdentity,
   updateOAuthAppById,
   upsertAuthorization
-} from "./cli-53sz8gkz.js";
-import {
-  FilesError,
-  getFileStorageProvider,
-  normalizeFilesError
-} from "./cli-jsp14b6c.js";
+} from "./cli-qv4jv8bx.js";
+import"./cli-fad8m16k.js";
 import {
   CANDIDATE_SET_MULTIPLIER,
   EMBEDDING_DIMENSIONS,
+  OpenAI,
   getEmbeddingProvider,
   getMemoryStore,
   init_constants as init_constants2,
+  init_openai,
   init_reranker,
   rerank
-} from "./cli-65hjmev5.js";
-import"./cli-xberxa1r.js";
+} from "./cli-kc3dp84d.js";
+import"./cli-10ym38qc.js";
 import"./cli-bsakbbkm.js";
-import"./cli-fad8m16k.js";
 import"./cli-51tf7ac3.js";
-import {
-  OpenAI,
-  init_openai
-} from "./cli-aehm1rbq.js";
 import {
   TaskCitationSchema,
   ensure,
@@ -498,7 +517,7 @@ import {
   withRemoteContext,
   withSpan,
   withSpanContext
-} from "./cli-j57qkrpq.js";
+} from "./cli-wgjx0q33.js";
 import"./cli-q51yprfq.js";
 import"./cli-3er6gcsn.js";
 import"./cli-2658f6at.js";
@@ -576,6 +595,7 @@ import {
   deleteTaskAttachment,
   deleteUser,
   deleteWorkflow,
+  drainHumanFreeReclassifyQueue,
   emitBuiltInIntegrationConnectedOnce,
   emitIntegrationConnected,
   emitMcpServerConnectedTelemetry,
@@ -589,6 +609,7 @@ import {
   getAgentHarnessProviders,
   getAgentMcpServers,
   getAgentSkills,
+  getAgentStatusCounts,
   getAgentWithTasks,
   getAllAgents,
   getAllAgentsWithTasks,
@@ -677,7 +698,6 @@ import {
   getTaskSteeringFieldsForTasks,
   getTasksCount,
   getUnassignedTaskIdsForAgent,
-  getUsageDataVersion,
   getUserById,
   getWorkflow,
   getWorkflowRun,
@@ -699,6 +719,7 @@ import {
   init_db,
   init_default_drift,
   init_heartbeat_expiry,
+  init_human_free,
   init_request_auth_context,
   init_steering,
   init_swarm_config_guard,
@@ -764,7 +785,9 @@ import {
   setApiKeyName,
   setApiKeyPlan,
   setFavorite,
+  setHumanFreeQueueListener,
   setRequestAuth,
+  settleSupersededTaskDependents,
   startTask,
   supersedeTask,
   sweepExpiredKv,
@@ -808,7 +831,7 @@ import {
   upsertSwarmConfig,
   validateConfigValue,
   withFavoriteFlags
-} from "./cli-47m6dkd3.js";
+} from "./cli-g9df2m37.js";
 import {
   ActiveSessionSchema,
   AgentAcpStatusSchema,
@@ -858,6 +881,7 @@ import {
   KvKeySchema,
   KvNamespaceSchema,
   KvValueTypeSchema,
+  MODEL_TIERS,
   McpAuthMethodSchema,
   McpServerSchema,
   McpServerWithInstallInfoSchema,
@@ -934,12 +958,16 @@ import {
   isSafeBundlePath,
   isTerminalTaskStatus,
   splitLegacyModelAlias
-} from "./cli-4198qc9v.js";
+} from "./cli-e4xnc0qp.js";
 import {
   IDENTITY_FIELD_BUDGETS,
   IdentityFieldBudgetError,
   init_identity_field_budget
-} from "./cli-3gmcwfyx.js";
+} from "./cli-ardpzhjm.js";
+import {
+  getSlackConfiguration,
+  init_config
+} from "./cli-n7h1kqpf.js";
 import {
   getAllTemplateDefinitions,
   getTemplateDefinition,
@@ -950,8 +978,7 @@ import {
   interpolate,
   isSteeringEnabled,
   resolveTemplate
-} from "./cli-ggm92wcn.js";
-import"./cli-19jenss3.js";
+} from "./cli-rgjprct3.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getAppUrl,
@@ -960,26 +987,27 @@ import {
   getPublicMcpBaseUrl,
   init_constants
 } from "./cli-dv6cdjs2.js";
-import {
-  getSlackConfiguration,
-  init_config
-} from "./cli-n7h1kqpf.js";
-import {
-  MODEL_SCOPED_WINDOWS,
-  activeModelBlocks,
-  init_model_rate_limit_windows
-} from "./cli-de1396j2.js";
 import {
   SUBSCRIPTION_PLANS,
   SUBSCRIPTION_PLANS_CHECKED_AT,
   init_subscription_plans,
   isSubscriptionPlanId
 } from "./cli-cqt19wg6.js";
+import"./cli-19jenss3.js";
+import {
+  MODEL_SCOPED_WINDOWS,
+  activeModelBlocks,
+  init_model_rate_limit_windows
+} from "./cli-de1396j2.js";
 import {
   init_env_flag,
   isEnvFlagEnabled,
   parseEnvFlag
 } from "./cli-ej6gbxfb.js";
+import {
+  init_src,
+  isAlias
+} from "./cli-7zttzetj.js";
 import {
   exports_zod,
   init_zod
@@ -996,7 +1024,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-c07r9a2m.js";
+} from "./cli-48527fpw.js";
 import {
   init_secret_scrubber,
   registerVolatileSecret,
@@ -1005,20 +1033,20 @@ import {
 } from "./cli-r2ap2czm.js";
 import {
   bedrockProviderModule
-} from "./cli-h38x0qhg.js";
+} from "./cli-kdnehe0t.js";
 import"./cli-yn0a417a.js";
 import"./cli-cgj4hc12.js";
 import"./cli-txgcknmy.js";
 import"./cli-6map995v.js";
-import"./cli-k0g1sjzm.js";
+import"./cli-31nkw3g3.js";
 import"./cli-y2apkfe2.js";
-import"./cli-vapyk8sw.js";
+import"./cli-7kyk9jr3.js";
 import {
   setBedrockProviderModule
-} from "./cli-5b6b62tz.js";
+} from "./cli-13hw4z91.js";
 import"./cli-btbzvq95.js";
 import"./cli-1m2e086m.js";
-import"./cli-mcnhgnn1.js";
+import"./cli-ykk5jaax.js";
 import"./cli-bzr0ftht.js";
 import"./cli-bd957dgb.js";
 import {
@@ -1509,6 +1537,62 @@ async function stopDbRetention() {
   await retentionTickPromise;
 }
 
+// src/be/human-free-drain.ts
+init_human_free();
+var YIELD_MS2 = 25;
+var IDLE_INTERVAL_MS = 60000;
+var running = false;
+var idleTimer = null;
+var passTimer = null;
+function scheduleIdle() {
+  if (!running)
+    return;
+  if (idleTimer)
+    clearTimeout(idleTimer);
+  idleTimer = setTimeout(() => schedulePass(0), IDLE_INTERVAL_MS);
+  idleTimer.unref?.();
+}
+function schedulePass(delayMs) {
+  if (!running || passTimer)
+    return;
+  passTimer = setTimeout(() => {
+    passTimer = null;
+    runPass();
+  }, delayMs);
+  passTimer.unref?.();
+}
+async function runPass() {
+  if (!running)
+    return;
+  try {
+    const { batches, remaining } = await drainHumanFreeReclassifyQueue({ maxBatches: 1 });
+    if (batches > 0 && remaining > 0) {
+      schedulePass(YIELD_MS2);
+      return;
+    }
+  } catch (err) {
+    console.error("[human-free-drain] batch failed, retrying later:", err instanceof Error ? err.message : String(err));
+  }
+  scheduleIdle();
+}
+function startHumanFreeDrain() {
+  if (running)
+    return;
+  running = true;
+  setHumanFreeQueueListener(() => schedulePass(0));
+  schedulePass(0);
+}
+function stopHumanFreeDrain() {
+  running = false;
+  setHumanFreeQueueListener(undefined);
+  if (idleTimer)
+    clearTimeout(idleTimer);
+  if (passTimer)
+    clearTimeout(passTimer);
+  idleTimer = null;
+  passTimer = null;
+}
+
 // src/be/scripts/retention.ts
 init_db();
 var SCRATCH_RETENTION_DAYS = 14;
@@ -3326,6 +3410,7 @@ async function handleActiveSessions(req, res, pathSegments, queryParams, myAgent
 }
 
 // src/http/agents.ts
+init_src();
 init_zod();
 init_db();
 init_telemetry();
@@ -3378,7 +3463,9 @@ var registerAgent = route({
     maxTasks: exports_external.number().int().optional(),
     provider: ProviderNameSchema.optional(),
     harness_provider: ProviderNameSchema.optional(),
-    runtimeInstanceId: exports_external.string().min(1).optional()
+    runtimeInstanceId: exports_external.string().min(1).optional(),
+    modelTierOverrides: exports_external.record(exports_external.string(), exports_external.record(exports_external.string(), exports_external.string())).optional(),
+    harnessCliVersion: exports_external.string().max(64).optional()
   }),
   responses: {
     200: {
@@ -3458,7 +3545,7 @@ var updateAgentRuntimeRoute = route({
   path: "/api/agents/{id}/runtime",
   pattern: ["api", "agents", null, "runtime"],
   summary: "Update an agent's runtime harness and default model",
-  description: "Updates `agents.harness_provider` and agent-scoped runtime config. The settings apply to future provider sessions. For `model`, `reasoning_effort`, and `claude.transport`: omit the field to leave it unchanged, send `null` to clear the corresponding override, or send a value to set it.",
+  description: "Updates `agents.harness_provider` and agent-scoped runtime config. The settings apply to future provider sessions. For `model`, `reasoning_effort`, and `claude.transport`: omit the field to leave it unchanged, send `null` to clear the corresponding override, or send a value to set it. A `model` the model catalog does not list is a 400 unless `allow_custom_model` is true. A `latest:` alias is not accepted here (aliases resolve for a task's model and for `MODEL_TIER_*` values); `reasoning_effort` must be one the harness and model support.",
   tags: ["Agents"],
   params: exports_external.object({ id: exports_external.string() }),
   query: exports_external.object({ repoId: exports_external.string().optional() }),
@@ -3809,6 +3896,12 @@ async function handleAgentRegister(req, res, pathSegments, myAgentId) {
       }
       return { agent, created: true };
     });
+    if (parsed.body.harnessCliVersion !== undefined) {
+      await setAgentHarnessCliVersion(agentId, parsed.body.harnessCliVersion.trim() || null);
+    }
+    if (parsed.body.modelTierOverrides) {
+      await setAgentModelTierOverrides(agentId, sanitizeModelTierOverrides(parsed.body.modelTierOverrides));
+    }
     telemetry.agent("registered", {
       role: parsed.body.role,
       capabilities: parsed.body.capabilities ?? [],
@@ -4114,6 +4207,21 @@ async function handleAgentsRest(req, res, pathSegments, queryParams, _myAgentId)
         return true;
       }
     }
+    if (typeof model === "string" && isAlias(model)) {
+      jsonError(res, `A latest: alias cannot be an agent's default model ("${model}"). Set the alias on a task, or as a MODEL_TIER_<PROVIDER>_<TIER> value.`, 400);
+      return true;
+    }
+    if (typeof model === "string") {
+      const modelError = await explicitModelError({
+        model,
+        allowCustomModel: allow_custom_model,
+        harnessProvider: harness_provider
+      });
+      if (modelError) {
+        jsonError(res, modelError, 400);
+        return true;
+      }
+    }
     let agent;
     try {
       agent = await getDbClient().transaction(async () => {
@@ -4373,22 +4481,50 @@ init_subscription_plans();
 
 // src/http/usage-cache.ts
 var USAGE_CACHE_TTL_MS = 30000;
+var USAGE_CACHE_MAX_STALE_MS = 120000;
 var MAX_ENTRIES = 100;
 var entries = new Map;
-async function cachedUsageReport(key, load) {
-  const now = Date.now();
+var loading = new Map;
+var generation = 0;
+function load(key, loader) {
+  const running2 = loading.get(key);
+  if (running2)
+    return running2;
+  const startedIn = generation;
+  const promise = Promise.resolve().then(loader).then((value) => {
+    if (startedIn === generation) {
+      entries.delete(key);
+      if (entries.size >= MAX_ENTRIES)
+        entries.delete(entries.keys().next().value);
+      entries.set(key, { fetchedAt: Date.now(), value });
+    }
+    return value;
+  }).finally(() => {
+    if (loading.get(key) === promise)
+      loading.delete(key);
+  });
+  loading.set(key, promise);
+  return promise;
+}
+async function cachedUsageReport(key, loader) {
   const hit = entries.get(key);
-  if (hit && hit.expiresAt > now)
-    return hit.value;
-  const value = await load();
-  entries.delete(key);
-  if (entries.size >= MAX_ENTRIES)
-    entries.delete(entries.keys().next().value);
-  entries.set(key, { expiresAt: now + USAGE_CACHE_TTL_MS, value });
-  return value;
+  if (hit) {
+    const age = Date.now() - hit.fetchedAt;
+    if (age < USAGE_CACHE_TTL_MS)
+      return hit.value;
+    if (age < USAGE_CACHE_MAX_STALE_MS) {
+      load(key, loader).catch((error) => {
+        console.error(`[usage-cache] background refresh failed for ${key.split(":")[0]}:`, error);
+      });
+      return hit.value;
+    }
+  }
+  return load(key, loader);
 }
 function clearUsageCache() {
+  generation++;
   entries.clear();
+  loading.clear();
 }
 
 // src/http/api-keys.ts
@@ -7671,6 +7807,9 @@ declare module "swarm-extension" {
     model?: string | undefined;
     modelTier?: "smol" | "regular" | "smart" | "ultra" | undefined;
     effort?: "off" | "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+    resolvedModel?: string | undefined;
+    modelSource?: string | undefined;
+    modelAlias?: string | undefined;
     scheduleId?: string | undefined;
     workflowRunId?: string | null | undefined;
     workflowRunStepId?: string | null | undefined;
@@ -15173,11 +15312,21 @@ async function handleMetrics(req, res, pathSegments, queryParams, myAgentId) {
 
 // src/http/models-catalog.ts
 init_zod();
+init_db();
+init_types();
+init_request_auth_context();
 var CatalogModelSchema = exports_external.object({
   id: exports_external.string(),
   name: exports_external.string().optional(),
-  cost: exports_external.object({ input: exports_external.number().optional(), output: exports_external.number().optional() }).optional(),
+  cost: exports_external.object({
+    input: exports_external.number().optional(),
+    output: exports_external.number().optional(),
+    cache_read: exports_external.number().optional(),
+    cache_write: exports_external.number().optional()
+  }).optional(),
   limit: exports_external.object({ context: exports_external.number().optional() }).optional(),
+  release_date: exports_external.string().optional(),
+  status: exports_external.string().optional(),
   reasoning: exports_external.boolean().optional(),
   reasoning_options: exports_external.array(exports_external.object({ type: exports_external.string(), values: exports_external.array(exports_external.string()).optional() })).optional()
 });
@@ -15186,6 +15335,55 @@ var CatalogProviderSchema = exports_external.object({
   name: exports_external.string().optional(),
   models: exports_external.record(exports_external.string(), CatalogModelSchema)
 });
+var ReasoningOptionSchema = exports_external.object({
+  type: exports_external.string(),
+  values: exports_external.array(exports_external.string()).optional()
+});
+var OverlayPricingSchema = exports_external.object({
+  input: exports_external.number().nonnegative().optional(),
+  output: exports_external.number().nonnegative().optional(),
+  cache_read: exports_external.number().nonnegative().optional(),
+  cache_write: exports_external.number().nonnegative().optional()
+});
+var ModelCatalogRefreshResultSchema = exports_external.object({
+  status: exports_external.enum(["updated", "not-modified", "skipped-fresh", "skipped-cooldown", "error"]),
+  models: exports_external.number(),
+  added: exports_external.array(exports_external.string()),
+  checkedAt: exports_external.number().nullable(),
+  retryAfterMs: exports_external.number().optional(),
+  error: exports_external.string().optional()
+});
+var ModelCatalogOverlayBodySchema = exports_external.object({
+  provider: exports_external.string().min(1),
+  modelId: exports_external.string().min(1),
+  name: exports_external.string().optional(),
+  family: exports_external.string().optional(),
+  releaseDate: exports_external.string().optional(),
+  contextWindow: exports_external.number().int().positive().optional(),
+  maxOutput: exports_external.number().int().positive().optional(),
+  reasoning: exports_external.boolean().optional(),
+  reasoningOptions: exports_external.array(ReasoningOptionSchema).optional(),
+  pricing: OverlayPricingSchema.optional(),
+  status: exports_external.string().optional(),
+  reason: exports_external.string().min(1),
+  verifiedBy: exports_external.string().optional(),
+  expiresWhenUpstreamMatches: exports_external.boolean().optional()
+});
+var OverlayEntrySchema = ModelCatalogOverlayBodySchema.extend({
+  name: exports_external.string().nullish(),
+  family: exports_external.string().nullish(),
+  releaseDate: exports_external.string().nullish(),
+  contextWindow: exports_external.number().nullish(),
+  maxOutput: exports_external.number().nullish(),
+  reasoning: exports_external.boolean().nullish(),
+  reasoningOptions: exports_external.array(ReasoningOptionSchema).nullish(),
+  pricing: OverlayPricingSchema.nullish(),
+  status: exports_external.string().nullish(),
+  verifiedBy: exports_external.string().nullish(),
+  expiresWhenUpstreamMatches: exports_external.boolean(),
+  createdAt: exports_external.number(),
+  updatedAt: exports_external.number()
+});
 var getCatalog = route({
   method: "get",
   path: "/api/models-catalog",
@@ -15204,12 +15402,218 @@ var getCatalog = route({
     }
   }
 });
+var ModelTierPreviewSchema = exports_external.object({
+  provider: ProviderNameSchema,
+  tier: exports_external.enum(MODEL_TIERS),
+  key: exports_external.string(),
+  defaultValue: exports_external.string(),
+  configured: exports_external.string().nullable(),
+  source: exports_external.enum(["tier-config", "tier-default"]),
+  resolvedModel: exports_external.string().nullable(),
+  alias: exports_external.string().nullable()
+});
+var getTiers = route({
+  method: "get",
+  path: "/api/models-catalog/tiers",
+  pattern: ["api", "models-catalog", "tiers"],
+  summary: "Preview what each model tier resolves to per harness provider",
+  description: "One row per provider and tier: the built-in default, the `MODEL_TIER_<PROVIDER>_<TIER>` value stored in swarm config (if any), which layer wins, and the concrete model it resolves to against the current catalog (`latest:` aliases resolved with the same soak and auto-upgrade rules as claim time, without recording a resolution). Ignores per-worker `MODEL_TIER_*` overrides and per-task models.",
+  tags: ["Pricing"],
+  responses: {
+    200: {
+      description: "Tier previews",
+      schema: exports_external.object({ tiers: exports_external.array(ModelTierPreviewSchema) })
+    }
+  }
+});
+var refreshCatalog = route({
+  method: "post",
+  path: "/api/models-catalog/refresh",
+  pattern: ["api", "models-catalog", "refresh"],
+  summary: "Refresh the model catalog from models.dev",
+  description: "Unforced calls skip the network when the last models.dev check is younger than 4h (`skipped-fresh`). `force: true` always fetches, still conditional on the stored ETag (`not-modified` on 304), but a forced call within a minute of the previous one returns `skipped-cooldown` with `retryAfterMs`. Concurrent refreshes share one fetch. Lead agent or operator only. `added` lists provider/modelId keys new since the previous fetch.",
+  tags: ["Pricing"],
+  rbac: { permission: "models.catalog.write" },
+  body: exports_external.object({ force: exports_external.boolean().optional() }),
+  responses: {
+    200: { description: "Refresh outcome", schema: ModelCatalogRefreshResultSchema },
+    403: { description: "Forbidden" }
+  }
+});
+var upsertOverlay = route({
+  method: "put",
+  path: "/api/models-catalog/overlay",
+  pattern: ["api", "models-catalog", "overlay"],
+  summary: "Upsert one model-catalog overlay row",
+  description: "Overlay facts win per non-null field over the models.dev row; overlay-only models are served too. Overlay prices fill pricing-table gaps (never override an active price). With `expiresWhenUpstreamMatches` (default true) the row is deleted once upstream matches every non-null fact.",
+  tags: ["Pricing"],
+  rbac: { permission: "models.catalog.write" },
+  body: ModelCatalogOverlayBodySchema,
+  responses: {
+    200: { description: "Overlay row upserted", schema: OverlayEntrySchema },
+    403: { description: "Forbidden" }
+  }
+});
+var deleteOverlay = route({
+  method: "delete",
+  path: "/api/models-catalog/overlay",
+  pattern: ["api", "models-catalog", "overlay"],
+  summary: "Delete one model-catalog overlay row",
+  tags: ["Pricing"],
+  rbac: { permission: "models.catalog.write" },
+  body: exports_external.object({ provider: exports_external.string().min(1), modelId: exports_external.string().min(1) }),
+  responses: {
+    200: { description: "Overlay row deleted", schema: exports_external.object({ deleted: exports_external.boolean() }) },
+    403: { description: "Forbidden" }
+  }
+});
+var HarnessSupportRowSchema = exports_external.object({
+  harness: exports_external.string(),
+  cliVersion: exports_external.string(),
+  modelId: exports_external.string(),
+  status: exports_external.enum(["ok", "unsupported", "unknown"]),
+  checkedAt: exports_external.number(),
+  error: exports_external.string().nullable()
+});
+var listHarnessSupport = route({
+  method: "get",
+  path: "/api/models-catalog/harness-support",
+  pattern: ["api", "models-catalog", "harness-support"],
+  summary: "List harness CLI model support rows",
+  description: "Whether a catalog model runs on a given `claude` / `codex` CLI version, as recorded by workers after a model's first run. No row means unknown (allowed at claim).",
+  tags: ["Pricing"],
+  query: exports_external.object({ harness: exports_external.string().optional(), cliVersion: exports_external.string().optional() }),
+  responses: {
+    200: {
+      description: "Support rows, newest first",
+      schema: exports_external.object({ rows: exports_external.array(HarnessSupportRowSchema) })
+    }
+  }
+});
+var recordHarnessSupport = route({
+  method: "put",
+  path: "/api/models-catalog/harness-support",
+  pattern: ["api", "models-catalog", "harness-support"],
+  summary: "Record whether a harness CLI version accepts a model",
+  description: "Written by workers: `ok` after a model's first successful run, `unsupported` when the CLI rejects the model id. Claim-time resolution falls back (alias/tier) or fails fast (explicit model) on `unsupported`.",
+  tags: ["Pricing"],
+  rbac: { permission: "models.harness-support.write" },
+  body: exports_external.object({
+    harness: exports_external.string().min(1).max(32),
+    cliVersion: exports_external.string().min(1).max(64),
+    modelId: exports_external.string().min(1).max(200),
+    status: exports_external.enum(["ok", "unsupported", "unknown"]),
+    error: exports_external.string().max(4000).optional()
+  }),
+  responses: {
+    200: { description: "Support row upserted", schema: HarnessSupportRowSchema },
+    403: { description: "Forbidden" }
+  }
+});
+async function ensureCatalogWriter(req, res, verb = "models.catalog.write") {
+  const auth = getRequestAuth(req);
+  const header2 = req.headers["x-agent-id"];
+  const agentId = auth?.kind === "agent" ? auth.agentId : Array.isArray(header2) ? header2[0] : header2;
+  let principal;
+  if (auth?.kind === "user") {
+    principal = { kind: "user", userId: auth.userId };
+  } else if (agentId) {
+    const agent = await getAgentById(agentId);
+    principal = { kind: "agent", agentId, isLead: agent?.isLead ?? false };
+  } else if (auth?.kind === "operator") {
+    principal = { kind: "operator" };
+  } else {
+    principal = { kind: "agent", agentId: "", isLead: false };
+  }
+  const decision = can({
+    principal,
+    verb,
+    resource: { kind: "none" },
+    source: "http"
+  });
+  if (!decision.allow) {
+    jsonError(res, verb === "models.catalog.write" ? "Writing the model catalog requires the lead agent or an operator" : "Recording harness model support requires a registered agent or an operator", 403);
+    return null;
+  }
+  return {
+    userId: auth?.kind === "user" ? auth.userId : null,
+    agentId: principal.kind === "agent" && principal.agentId ? principal.agentId : null
+  };
+}
+async function callerOwnsSupportRow(agentId, body) {
+  const agent = await getAgentById(agentId);
+  if (!agent || agent.harnessProvider !== body.harness)
+    return false;
+  return await getAgentHarnessCliVersion(agentId) === body.cliVersion;
+}
 async function handleModelsCatalog(req, res, pathSegments, queryParams) {
   if (getCatalog.match(req.method, pathSegments)) {
     const parsed = await getCatalog.parse(req, res, pathSegments, queryParams);
     if (!parsed)
       return true;
-    json(res, getModelsCatalog());
+    getCatalog.respond(res, 200, await loadModelsCatalog());
+    return true;
+  }
+  if (getTiers.match(req.method, pathSegments)) {
+    const parsed = await getTiers.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    getTiers.respond(res, 200, { tiers: await previewModelTiers() });
+    return true;
+  }
+  if (refreshCatalog.match(req.method, pathSegments)) {
+    const parsed = await refreshCatalog.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    if (!await ensureCatalogWriter(req, res))
+      return true;
+    refreshCatalog.respond(res, 200, await requestModelCatalogRefresh({ force: parsed.body.force }));
+    return true;
+  }
+  if (upsertOverlay.match(req.method, pathSegments)) {
+    const parsed = await upsertOverlay.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    const writer = await ensureCatalogWriter(req, res);
+    if (!writer)
+      return true;
+    const entry = await upsertModelCatalogOverlay(parsed.body, { userId: writer.userId });
+    upsertOverlay.respond(res, 200, entry);
+    return true;
+  }
+  if (deleteOverlay.match(req.method, pathSegments)) {
+    const parsed = await deleteOverlay.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    if (!await ensureCatalogWriter(req, res))
+      return true;
+    const deleted = await deleteModelCatalogOverlay(parsed.body.provider, parsed.body.modelId);
+    deleteOverlay.respond(res, 200, { deleted });
+    return true;
+  }
+  if (listHarnessSupport.match(req.method, pathSegments)) {
+    const parsed = await listHarnessSupport.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    listHarnessSupport.respond(res, 200, { rows: await listHarnessModelSupport(parsed.query) });
+    return true;
+  }
+  if (recordHarnessSupport.match(req.method, pathSegments)) {
+    const parsed = await recordHarnessSupport.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    const writer = await ensureCatalogWriter(req, res, "models.harness-support.write");
+    if (!writer)
+      return true;
+    if (writer.agentId && !await callerOwnsSupportRow(writer.agentId, parsed.body)) {
+      jsonError(res, "Harness support can only be recorded for the calling agent's own harness and registered CLI version", 403);
+      return true;
+    }
+    if (writer.agentId && parsed.body.status === "unsupported" && !(isUnknownModelError(parsed.body.error, parsed.body.modelId) && await agentRanModel(writer.agentId, parsed.body.modelId))) {
+      jsonError(res, "An unsupported report needs a model the calling agent ran and the CLI's model-rejection error", 403);
+      return true;
+    }
+    recordHarnessSupport.respond(res, 200, await recordHarnessModelSupport(parsed.body));
     return true;
   }
   return false;
@@ -17868,7 +18272,9 @@ var pollTriggers = route({
   summary: "Poll for triggers (tasks, mentions)",
   tags: ["Poll"],
   auth: { apiKey: true, agentId: true },
-  headers: runtimeInstanceHeader("poll for work"),
+  headers: runtimeInstanceHeader("poll for work").extend({
+    "X-Model-Tier-Overrides": exports_external.string().optional().describe("URL-encoded JSON {provider: {tier: model}} of the worker's MODEL_TIER_* env overrides. " + "Stored on the agent row and applied at claim time (modelSource=worker-env).")
+  }),
   responses: {
     200: { description: "Trigger data or null", schema: pollResponseSchema },
     400: { description: "Missing X-Agent-ID" },
@@ -17905,6 +18311,14 @@ async function attachmentsForTrigger(taskId) {
     sizeBytes: a.sizeBytes
   }));
 }
+async function claimModelFields(task, agent) {
+  try {
+    return await recordClaimModelResolution(task, agent);
+  } catch (error) {
+    console.warn(`[/api/poll] model resolution failed for task ${task.id}:`, error);
+    return {};
+  }
+}
 var commitCursorsRoute = route({
   method: "post",
   path: "/api/channel-activity/commit-cursors",
@@ -17928,6 +18342,7 @@ var commitCursorsRoute = route({
 });
 async function handlePoll(req, res, pathSegments, queryParams, myAgentId) {
   const runtimeInstanceId = ((h) => Array.isArray(h) ? h[0] : h)(req.headers["x-runtime-instance-id"]);
+  const modelTierOverrides = parseModelTierOverridesHeader(((h) => Array.isArray(h) ? h[0] : h)(req.headers["x-model-tier-overrides"]));
   if (commitCursorsRoute.match(req.method, pathSegments)) {
     const parsed = await commitCursorsRoute.parse(req, res, pathSegments, queryParams);
     if (!parsed)
@@ -17955,6 +18370,9 @@ async function handlePoll(req, res, pathSegments, queryParams, myAgentId) {
         if (!agent) {
           return { error: "Agent not found", status: 404 };
         }
+        if (modelTierOverrides) {
+          await setAgentModelTierOverrides(agent.id, modelTierOverrides);
+        }
         if (isExtensionAgent(agent)) {
           return { trigger: null };
         }
@@ -18052,6 +18470,7 @@ async function handlePoll(req, res, pathSegments, queryParams, myAgentId) {
                 taskId: pendingTask.id,
                 task: {
                   ...pendingTask,
+                  ...await claimModelFields(pendingTask, agent),
                   status: "in_progress",
                   attachments: await attachmentsForTrigger(pendingTask.id)
                 },
@@ -18136,7 +18555,11 @@ async function handlePoll(req, res, pathSegments, queryParams, myAgentId) {
                   trigger: {
                     type: "task_assigned",
                     taskId: claimed.id,
-                    task: { ...claimed, attachments: await attachmentsForTrigger(claimed.id) },
+                    task: {
+                      ...claimed,
+                      ...await claimModelFields(claimed, agent),
+                      attachments: await attachmentsForTrigger(claimed.id)
+                    },
                     ...claimedRequestedBy && { requestedBy: claimedRequestedBy }
                   }
                 };
@@ -19298,6 +19721,7 @@ var scheduleUpdateBodySchema = exports_external.object({
   timezone: exports_external.string().optional(),
   model: exports_external.string().nullable().optional(),
   modelTier: ModelTierSchema.nullable().optional(),
+  allowCustomModel: exports_external.boolean().optional(),
   nextRunAt: exports_external.string().nullable().optional(),
   targetType: ScheduledTaskTargetTypeSchema.optional(),
   workflowId: exports_external.string().uuid().nullable().optional(),
@@ -19338,6 +19762,7 @@ var createSchedule = route({
     timezone: exports_external.string().optional(),
     model: exports_external.string().optional(),
     modelTier: ModelTierSchema.optional(),
+    allowCustomModel: exports_external.boolean().optional(),
     scheduleType: exports_external.enum(["recurring", "one_time"]).optional(),
     targetType: ScheduledTaskTargetTypeSchema.optional(),
     workflowId: exports_external.string().uuid().optional(),
@@ -19575,6 +20000,15 @@ async function handleSchedules(req, res, pathSegments, queryParams, myAgentId) {
         return true;
       }
     }
+    const modelError = await explicitModelErrorForAgent({
+      model: splitLegacyModelAlias({ model: body.model, modelTier: body.modelTier }).model,
+      allowCustomModel: body.allowCustomModel,
+      agentId: body.targetAgentId
+    });
+    if (modelError) {
+      jsonError(res, modelError, 400);
+      return true;
+    }
     try {
       const trustedUserId = await resolveHttpAuditUserId(req, myAgentId);
       let key;
@@ -19703,22 +20137,35 @@ async function handleSchedules(req, res, pathSegments, queryParams, myAgentId) {
         throw error;
       }
     }
+    const allowCustomModel = parsed.body.allowCustomModel;
+    delete body.allowCustomModel;
+    const existing = await getScheduledTaskById(parsed.params.id);
+    if (!existing) {
+      jsonError(res, "Schedule not found", 404);
+      return true;
+    }
     if (parsed.body.model !== undefined || parsed.body.modelTier !== undefined) {
       const normalizedModel = splitLegacyModelAlias({
         model: parsed.body.model,
         modelTier: parsed.body.modelTier
       });
+      if (normalizedModel.model !== existing.model) {
+        const modelError = await explicitModelErrorForAgent({
+          model: normalizedModel.model,
+          allowCustomModel,
+          agentId: parsed.body.targetAgentId ?? existing.targetAgentId
+        });
+        if (modelError) {
+          jsonError(res, modelError, 400);
+          return true;
+        }
+      }
       if (parsed.body.model !== undefined)
         body.model = normalizedModel.model ?? null;
       if (parsed.body.modelTier !== undefined || normalizedModel.modelTier) {
         body.modelTier = normalizedModel.modelTier ?? null;
       }
     }
-    const existing = await getScheduledTaskById(parsed.params.id);
-    if (!existing) {
-      jsonError(res, "Schedule not found", 404);
-      return true;
-    }
     if (existing.scheduleType === "one_time" && !existing.enabled && existing.lastRunAt) {
       jsonError(res, "One-time schedule has already executed. Create a new one instead.", 400);
       return true;
@@ -23752,8 +24199,7 @@ async function handleSessionData(req, res, pathSegments, queryParams, _myAgentId
       userId: parsed.query.userId || undefined,
       groupBy: parsed.query.groupBy || "both"
     };
-    const version = await getUsageDataVersion();
-    const summary = await cachedUsageReport(`summary:${version}:${JSON.stringify(opts)}`, () => getSessionCostSummary(opts));
+    const summary = await cachedUsageReport(`summary:${JSON.stringify(opts)}`, () => getSessionCostSummary(opts));
     getSessionCostSummaryRoute.respond(res, 200, summary);
     return true;
   }
@@ -23770,8 +24216,7 @@ async function handleSessionData(req, res, pathSegments, queryParams, _myAgentId
       startDate: parsed.query.startDate || undefined,
       endDate: parsed.query.endDate || undefined
     };
-    const version = await getUsageDataVersion();
-    const rows = await cachedUsageReport(`attribution:${version}:${JSON.stringify(opts)}`, () => getAttributionByPerson(opts));
+    const rows = await cachedUsageReport(`attribution:${JSON.stringify(opts)}`, () => getAttributionByPerson(opts));
     getAttributionByPersonRoute.respond(res, 200, { rows });
     return true;
   }
@@ -24804,6 +25249,7 @@ init_zod();
 init_db();
 init_steering();
 init_types();
+init_env_flag();
 var AgentCountsSchema = exports_external.object({
   total: exports_external.number(),
   idle: exports_external.number(),
@@ -24825,7 +25271,8 @@ var DashboardStatsSchema = exports_external.object({
   agents: AgentCountsSchema,
   tasks: TaskCountsSchema,
   steeringEnabled: exports_external.boolean(),
-  multiRuntimeEnabled: exports_external.boolean()
+  multiRuntimeEnabled: exports_external.boolean(),
+  devMode: exports_external.boolean()
 });
 var RetentionTableStatsSchema = exports_external.object({
   at: exports_external.string(),
@@ -24990,15 +25437,10 @@ async function handleStats(req, res, pathSegments, queryParams, myAgentId) {
     return true;
   }
   if (getStats.match(req.method, pathSegments)) {
-    const agents = await getAllAgents();
+    const agents = await getAgentStatusCounts();
     const taskStats = await getTaskStats();
     const stats = {
-      agents: {
-        total: agents.length,
-        idle: agents.filter((a) => a.status === "idle").length,
-        busy: agents.filter((a) => a.status === "busy").length,
-        offline: agents.filter((a) => a.status === "offline").length
-      },
+      agents,
       tasks: {
         total: taskStats.total,
         unassigned: taskStats.unassigned,
@@ -25011,6 +25453,7 @@ async function handleStats(req, res, pathSegments, queryParams, myAgentId) {
         failed: taskStats.failed
       },
       steeringEnabled: isSteeringEnabled2(),
+      devMode: isEnvFlagEnabled("SWARM_DEV_MODE", false),
       multiRuntimeEnabled: isMultiRuntimeEnabled()
     };
     getStats.respond(res, 200, stats);
@@ -25129,6 +25572,9 @@ var AgentTaskSummarySchema2 = AgentTaskSchema.pick({
   scheduleId: true,
   model: true,
   modelTier: true,
+  resolvedModel: true,
+  modelSource: true,
+  modelAlias: true,
   effort: true,
   provider: true,
   requestedByUserId: true,
@@ -25256,6 +25702,7 @@ var createTask = route({
     requestedByUserId: exports_external.string().optional(),
     model: exports_external.string().optional(),
     modelTier: ModelTierSchema.optional(),
+    allowCustomModel: exports_external.boolean().optional(),
     effort: ReasoningEffortSchema.optional(),
     draft: exports_external.boolean().optional()
   }).superRefine((body, ctx) => {
@@ -25269,7 +25716,9 @@ var createTask = route({
   }),
   responses: {
     201: { description: "Task created", schema: AgentTaskSchema },
-    400: { description: "Validation error, or agentId/offeredTo targets an extension identity" },
+    400: {
+      description: "Validation error, an unknown `model` (set `allowCustomModel` to store a custom id), or agentId/offeredTo targets an extension identity"
+    },
     422: {
       description: "Task creation blocked by an extension",
       schema: exports_external.object({
@@ -25746,6 +26195,15 @@ async function handleTasks(req, res, pathSegments, queryParams, myAgentId) {
       if (lead)
         defaultAgentId = lead.id;
     }
+    const modelError = await explicitModelErrorForAgent({
+      model: splitLegacyModelAlias({ model: parsed.body.model, modelTier: parsed.body.modelTier }).model,
+      allowCustomModel: parsed.body.allowCustomModel,
+      agentId: defaultAgentId
+    });
+    if (modelError) {
+      jsonError(res, modelError, 400);
+      return true;
+    }
     const parentTask = parsed.body.parentTaskId ? await getTaskById(parsed.body.parentTaskId) : null;
     let assetKey;
     try {
@@ -26423,6 +26881,7 @@ async function handleTasks(req, res, pathSegments, queryParams, myAgentId) {
       reason: parsed.body.reason
     });
     if (followUp.kind !== "created") {
+      await settleSupersededTaskDependents(parsed.params.id, null);
       console.warn(`[Supersede] Task ${parsed.params.id.slice(0, 8)} superseded but resume creation skipped (${followUp.kind === "skipped" ? followUp.reason : followUp.kind})`);
       supersedeTaskRoute.respond(res, 200, {
         success: true,
@@ -28691,6 +29150,9 @@ init_zod();
 init_db();
 init_types();
 var WorkflowWithFavoriteSchema = WorkflowSchema.extend({ favorite: exports_external.boolean() });
+var WorkflowSaveResponseSchema = WorkflowSchema.extend({
+  warnings: exports_external.array(exports_external.string()).optional()
+});
 var WorkflowSummarySchema = WorkflowSchema.omit({
   definition: true,
   triggers: true,
@@ -28716,6 +29178,10 @@ var WorkflowRunPageSchema = exports_external.object({
   })
 });
 var SuccessResponseSchema = exports_external.object({ success: exports_external.literal(true) });
+async function withSaveWarnings(workflow) {
+  const warnings = await workflowSaveWarnings(workflow.definition, getExecutorRegistry());
+  return warnings.length > 0 ? { ...workflow, warnings } : workflow;
+}
 var listWorkflowsRoute = route({
   method: "get",
   path: "/api/workflows",
@@ -28760,7 +29226,7 @@ var createWorkflowRoute = route({
     vcsRepo: exports_external.string().min(1).optional()
   }),
   responses: {
-    201: { description: "Workflow created", schema: WorkflowSchema },
+    201: { description: "Workflow created", schema: WorkflowSaveResponseSchema },
     400: { description: "Invalid definition" }
   }
 });
@@ -28806,7 +29272,10 @@ var updateWorkflowRoute = route({
     enabled: exports_external.boolean().optional()
   }),
   responses: {
-    200: { description: "Workflow updated (version snapshot created)", schema: WorkflowSchema },
+    200: {
+      description: "Workflow updated (version snapshot created)",
+      schema: WorkflowSaveResponseSchema
+    },
     400: { description: "Invalid definition" },
     404: { description: "Workflow not found" }
   }
@@ -28820,7 +29289,10 @@ var patchWorkflowRoute = route({
   params: exports_external.object({ id: exports_external.string() }),
   body: WorkflowPatchSchema.extend({ key: AssetKeySchema.optional() }),
   responses: {
-    200: { description: "Workflow patched (version snapshot created)", schema: WorkflowSchema },
+    200: {
+      description: "Workflow patched (version snapshot created)",
+      schema: WorkflowSaveResponseSchema
+    },
     400: { description: "Invalid patch or resulting definition" },
     404: { description: "Workflow not found" }
   }
@@ -28834,7 +29306,10 @@ var patchWorkflowNodeRoute = route({
   params: exports_external.object({ id: exports_external.string(), nodeId: exports_external.string() }),
   body: WorkflowNodePatchSchema,
   responses: {
-    200: { description: "Node patched (version snapshot created)", schema: WorkflowSchema },
+    200: {
+      description: "Node patched (version snapshot created)",
+      schema: WorkflowSaveResponseSchema
+    },
     400: { description: "Invalid patch or resulting definition" },
     404: { description: "Workflow or node not found" }
   }
@@ -29142,7 +29617,7 @@ async function handleWorkflows(req, res, pathSegments, queryParams, myAgentId) {
       createdByAgentId: myAgentId ?? undefined,
       createdBy: await resolveHttpAuditUserId(req, myAgentId) ?? undefined
     }, "api");
-    createWorkflowRoute.respond(res, 201, workflow);
+    createWorkflowRoute.respond(res, 201, await withSaveWarnings(workflow));
     return true;
   }
   if (getWorkflowRoute.match(req.method, pathSegments)) {
@@ -29187,7 +29662,7 @@ async function handleWorkflows(req, res, pathSegments, queryParams, myAgentId) {
       jsonError(res, result.reason === "patch" ? result.errors.join("; ") : `Invalid definition: ${result.errors.join("; ")}`, 400);
       return true;
     }
-    patchWorkflowNodeRoute.respond(res, 200, result.workflow);
+    patchWorkflowNodeRoute.respond(res, 200, await withSaveWarnings(result.workflow));
     return true;
   }
   if (patchWorkflowRoute.match(req.method, pathSegments)) {
@@ -29238,7 +29713,7 @@ async function handleWorkflows(req, res, pathSegments, queryParams, myAgentId) {
       jsonError(res, result.reason === "patch" ? result.errors.join("; ") : `Invalid definition: ${result.errors.join("; ")}`, 400);
       return true;
     }
-    patchWorkflowRoute.respond(res, 200, result.workflow);
+    patchWorkflowRoute.respond(res, 200, await withSaveWarnings(result.workflow));
     return true;
   }
   if (updateWorkflowRoute.match(req.method, pathSegments)) {
@@ -29297,7 +29772,7 @@ async function handleWorkflows(req, res, pathSegments, queryParams, myAgentId) {
       res.end();
       return true;
     }
-    updateWorkflowRoute.respond(res, 200, workflow);
+    updateWorkflowRoute.respond(res, 200, await withSaveWarnings(workflow));
     return true;
   }
   if (deleteWorkflowRoute.match(req.method, pathSegments)) {
@@ -29850,7 +30325,7 @@ async function shutdown() {
     sessionsProcessed: getServerSessionsProcessed()
   });
   if (hasCapability("scheduling")) {
-    const { stopScheduler } = await import("./index-chgdkq36.js");
+    const { stopScheduler } = await import("./index-cd151qkq.js");
     stopScheduler();
   }
   stopHeartbeat();
@@ -29858,12 +30333,13 @@ async function shutdown() {
   await stopScriptRunSupervisor();
   await stopSlackApp();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { stopOAuthKeepalive } = await import("./keepalive-vtkf5n99.js");
+    const { stopOAuthKeepalive } = await import("./keepalive-8p9rpvz5.js");
     await stopOAuthKeepalive();
   }
   stopOAuthPendingGc();
   stopMemoryGc();
   await stopDbRetention();
+  stopHumanFreeDrain();
   stopScratchScriptGc();
   await stopExtensionRuntime();
   stopAuditGc();
@@ -29926,15 +30402,15 @@ try {
   console.warn("[startup] CAPABILITIES upgrade seed failed (non-fatal):", err);
 }
 try {
-  const { ensurePricingSeeded } = await import("./boot-seeds-s3q01xj3.js");
+  const { ensurePricingSeeded } = await import("./boot-seeds-h7c32hvm.js");
   ensurePricingSeeded();
-  const { startPricingRefreshLoop } = await import("./pricing-refresh-v1cbr9te.js");
+  const { startPricingRefreshLoop } = await import("./pricing-refresh-0v77385v.js");
   startPricingRefreshLoop();
 } catch (err) {
   console.error("[startup] Failed to seed pricing rows:", err);
 }
 try {
-  const { ensureRbacSeeded } = await import("./boot-seeds-s3q01xj3.js");
+  const { ensureRbacSeeded } = await import("./boot-seeds-h7c32hvm.js");
   ensureRbacSeeded();
 } catch (err) {
   console.error("[startup] Failed to sync RBAC seed rows:", err);
@@ -29942,7 +30418,7 @@ try {
     throw err;
 }
 try {
-  const { runAllSeeders } = await import("./index-a3vn96n8.js");
+  const { runAllSeeders } = await import("./index-5sz16ksh.js");
   await runAllSeeders({ scriptEmbeddingMode: "skip" });
 } catch (err) {
   console.error("[startup] Failed to seed built-in entities:", err);
@@ -29996,36 +30472,37 @@ httpServer.listen(port, async () => {
   await initWorkflows();
   await startScriptRunSupervisor(getMcpBaseUrl());
   if (hasCapability("scheduling")) {
-    const { startScheduler } = await import("./index-chgdkq36.js");
-    const { getExecutorRegistry: getExecutorRegistry2 } = await import("./index-1yks3qcr.js");
+    const { startScheduler } = await import("./index-cd151qkq.js");
+    const { getExecutorRegistry: getExecutorRegistry2 } = await import("./index-ttpbhnjg.js");
     const intervalMs = Number(process.env.SCHEDULER_INTERVAL_MS) || 1e4;
     startScheduler(getExecutorRegistry2(), intervalMs, {
       runId: globalState.__runId
     });
   }
   if (!isEnvFlagEnabled("HEARTBEAT_DISABLE", false)) {
-    const { startHeartbeat } = await import("./index-x71bvq0p.js");
+    const { startHeartbeat } = await import("./index-k661dzzr.js");
     const heartbeatMs = Number(process.env.HEARTBEAT_INTERVAL_MS) || 90000;
     startHeartbeat(heartbeatMs);
   }
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { startOAuthKeepalive } = await import("./keepalive-vtkf5n99.js");
+    const { startOAuthKeepalive } = await import("./keepalive-8p9rpvz5.js");
     startOAuthKeepalive();
   }
   if (process.env.OAUTH_REFRESH_SWEEP_DISABLE !== "true") {
-    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-qp3dzmdp.js");
+    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-cwcq1ctx.js");
     startOAuthRefreshSweep();
   }
   startOAuthPendingGc();
   await startMemoryGc();
   await startDbRetention();
-  import("./boot-reembed-se8zmdcp.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+  startHumanFreeDrain();
+  import("./boot-reembed-48d2qpkt.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
     console.error("[boot-reembed] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-reembed-g5ckg9yb.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+  import("./boot-reembed-w0bryhkr.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
     console.error("[boot-reembed-scripts] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-scrub-logs-wfxqan61.js").then(({ runBootScrubLogs }) => runBootScrubLogs()).catch((err) => {
+  import("./boot-scrub-logs-t65wbrn7.js").then(({ runBootScrubLogs }) => runBootScrubLogs()).catch((err) => {
     console.error("[boot-scrub-logs] startup scrub failed (non-fatal):", err);
   });
 }).on("error", (err) => {