@desplega.ai/agent-swarm 1.158.0 → 1.159.0

package/dist/{cli-ftfvggzx.js → cli-79aq9cgb.js}

@@ -4,46 +4,60 @@ import {
   executeComposioRequest
 } from "./cli-0z2v4nhw.js";
 import {
-  DEFAULT_MODEL,
   LlmRater,
   REFERENCES_SOURCE_MAX_LENGTH,
   getMemoryRaterNames,
-  resolveCredential,
   sanitizeReferencesSource
-} from "./cli-tt9k8r35.js";
+} from "./cli-cpvsaqsw.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-re8z5p8p.js";
 import {
-  getOpenRouterBaseUrl
-} from "./cli-3dpj7atn.js";
+  AgentFsProvider,
+  getFileStorageProvider,
+  providerPath
+} from "./cli-jsp14b6c.js";
 import {
   ensurePricingSeeded,
   ensureRbacSeeded,
   getUserGrant
-} from "./cli-aky8tctm.js";
+} from "./cli-z9x0sh1t.js";
 import {
   can,
   decideAdmission,
   grantLeadEquivalence,
   isRbacEnabled,
   revokeLeadEquivalence
-} from "./cli-g8djp6qe.js";
+} from "./cli-9yg65c1j.js";
 import {
-  startPricingRefreshLoop
-} from "./cli-ws6rqycm.js";
+  buildCatalogEntries,
+  getCatalogGeneration,
+  listModelCatalog,
+  listModelCatalogOverlay,
+  loadModelsCatalog,
+  requestModelCatalogRefresh,
+  startPricingRefreshLoop,
+  upsertModelCatalogOverlay
+} from "./cli-cygyqj3b.js";
+import {
+  loadModelsDevCache
+} from "./cli-0n2e4x49.js";
 import {
   AppDefinitionSchema,
   AppElementsSchema,
   AppNameSchema,
+  BaseExecutor,
   ColumnKindSchema,
   ConnectionAuthInputSchema,
   DEFAULT_SCRIPT_RESOURCES,
+  HumanInTheLoopExecutor,
   MAX_SCRIPT_WALL_CLOCK_MS,
   MIN_SCRIPT_WALL_CLOCK_MS,
   SCRIPT_LONG_TIMEOUT_HINT_MS,
   SORTABLE_SYSTEM_DATE_COLUMNS,
   SYSTEM_COLUMN_KINDS,
+  SYSTEM_ONE_DECISION_NODE_TYPE,
+  SystemOneDecisionExecutor,
   appDefinitionNeedsRepair,
   applyAppDefinitionPatch,
   applyDefinitionPatch,
@@ -53,6 +67,7 @@ import {
   buildScriptCredentialBindingsWithFailures,
   connectionAuthInputFromFlat,
   createApp,
+  createApprovalFollowUpTask,
   createCappedStreamState,
   decodeAppDefinition,
   definitionNodeIds,
@@ -80,18 +95,22 @@ import {
   listRelationalCredentialBindings,
   listScriptConnections,
   parseAppDefinition,
+  postApprovalCancellationUpdates,
   publicEndpointSsrfOptions,
   readStreamCapped,
   refreshScriptConnection,
   require_dist as require_dist2,
   resolveSyncRunAs,
   resolveValidationPort,
+  resolveWorkflowLlmConfig,
   restoreScratchScriptLastUsedIfUnchanged,
   runSavedScriptAsAgent,
   runScript,
   sandboxSpawnEnv,
   setScriptConnectionEnabled,
   snapshotCapped,
+  systemOneRetryViolations,
+  systemOneUnresolvedError,
   touchScratchScriptLastUsed,
   typecheckScript,
   updateApp,
@@ -102,7 +121,7 @@ import {
   validateDefinition,
   validateScriptImports,
   writeBareImportShim
-} from "./cli-fgqxwrpv.js";
+} from "./cli-fjtp3463.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -113,7 +132,7 @@ import {
 } from "./cli-f14fvzag.js";
 import {
   embedScript
-} from "./cli-987hg0aa.js";
+} from "./cli-vwbbaecp.js";
 import {
   buildAuthorizationUrl,
   createOAuthApp,
@@ -128,12 +147,11 @@ import {
   listAuthorizationsForApp,
   onAuthorizationRefreshed,
   upsertOAuthApp
-} from "./cli-53sz8gkz.js";
+} from "./cli-qv4jv8bx.js";
 import {
-  AgentFsProvider,
-  getFileStorageProvider,
-  providerPath
-} from "./cli-jsp14b6c.js";
+  ZodFirstPartyTypeKind,
+  objectType
+} from "./cli-fad8m16k.js";
 import {
   CANDIDATE_SET_MULTIPLIER,
   computeScore,
@@ -145,11 +163,7 @@ import {
   isGraphExpansionEnabled,
   rerank,
   rowToCandidate
-} from "./cli-65hjmev5.js";
-import {
-  ZodFirstPartyTypeKind,
-  objectType
-} from "./cli-fad8m16k.js";
+} from "./cli-kc3dp84d.js";
 import {
   require_dist
 } from "./cli-51tf7ac3.js";
@@ -175,7 +189,7 @@ import {
   taskCitationWarnings,
   upsertTaskCitations,
   withSpan
-} from "./cli-j57qkrpq.js";
+} from "./cli-wgjx0q33.js";
 import {
   init_task_attachment_links,
   taskAttachmentDisplayUrl,
@@ -198,10 +212,8 @@ import {
   cancelTask,
   checkDependencies,
   checkSlackRoutingCoherence,
-  claimApprovalCancellationNotification,
   claimKv,
   claimTask,
-  completeApprovalCancellationNotificationClaim,
   completeTask,
   computeContentHash,
   countKv,
@@ -357,6 +369,7 @@ import {
   init_date_utils,
   init_db,
   init_db_client,
+  init_model_tier_keys,
   init_request_auth_context,
   init_slack_routing,
   init_steering,
@@ -400,7 +413,6 @@ import {
   recordSlackMessage,
   refreshDraftTaskLease,
   rejectTask,
-  releaseApprovalCancellationNotificationClaim,
   releaseMentionProcessing,
   releaseTask,
   requestSteering,
@@ -418,6 +430,7 @@ import {
   startTask,
   sweepExpiredKvPrefix,
   telemetry,
+  tierConfigKey,
   uninstallMcpServer,
   uninstallSkill,
   updateAgentMaxTasks,
@@ -445,7 +458,7 @@ import {
   upsertSwarmConfig,
   validateConfigValue,
   workflowContextKey
-} from "./cli-47m6dkd3.js";
+} from "./cli-g9df2m37.js";
 import {
   $OpenAPIRegistry,
   $OpenApiGeneratorV31,
@@ -460,6 +473,7 @@ import {
   ChannelTypeSchema,
   CooldownConfigSchema,
   CreateTaskOptionsSchema,
+  DEFAULT_MODEL_TIER_MAP,
   ExtensionManifestSchema,
   ExtensionWorkflowFileSchema,
   FollowUpConfigSchema,
@@ -467,6 +481,7 @@ import {
   KvKeySchema,
   KvNamespaceSchema,
   KvValueTypeSchema,
+  MODEL_TIERS,
   MetricDefinitionSchema,
   ModelTierSchema,
   OnUnsupportedSchema,
@@ -485,7 +500,6 @@ import {
   SteerModeSchema,
   SteerOutcomeSchema,
   SwarmConfigScopeSchema,
-  TERMINAL_TASK_STATUSES,
   TriggerConfigSchema,
   WorkflowDefinitionSchema,
   WorkflowNodePatchSchema,
@@ -500,14 +514,20 @@ import {
   isTerminalTaskStatus,
   normalizeAssetKey,
   parseAssetKey,
+  parseModelTier,
   splitLegacyModelAlias
-} from "./cli-4198qc9v.js";
+} from "./cli-e4xnc0qp.js";
 import {
   generateDefaultClaudeMd,
   generateDefaultIdentityMd,
   generateDefaultSoulMd,
   init_defaults
-} from "./cli-3gmcwfyx.js";
+} from "./cli-ardpzhjm.js";
+import {
+  getSlackConfiguration,
+  init_config,
+  isSlackConfigured
+} from "./cli-n7h1kqpf.js";
 import {
   deepInterpolate,
   findInterpolationTokens,
@@ -518,7 +538,7 @@ import {
   interpolate,
   registerTemplate,
   resolveTemplate
-} from "./cli-ggm92wcn.js";
+} from "./cli-rgjprct3.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getAppUrl,
@@ -526,16 +546,22 @@ import {
   getPublicMcpBaseUrl,
   init_constants
 } from "./cli-dv6cdjs2.js";
-import {
-  getSlackConfiguration,
-  init_config,
-  isSlackConfigured
-} from "./cli-n7h1kqpf.js";
 import {
   init_env_flag,
   isEnvFlagEnabled,
   parseEnvFlag
 } from "./cli-ej6gbxfb.js";
+import {
+  buildClaudeShortnameMap,
+  claudeCatalogModelId,
+  harnessCatalogSection,
+  harnessModelIds,
+  init_src,
+  isAlias,
+  modelFamilyKey,
+  parseAlias,
+  resolveAlias
+} from "./cli-7zttzetj.js";
 import {
   exports_zod,
   init_zod
@@ -584,7 +610,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-c07r9a2m.js";
+} from "./cli-48527fpw.js";
 import {
   init_secret_scrubber,
   isSensitiveKey,
@@ -14323,7 +14349,7 @@ async function notifyAutomationPreflightFailure(preflight) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-g26wdcz6.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-y1b9srva.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Automation Preflight] Slack not available, cannot send notification");
@@ -15011,6 +15037,52 @@ function getMaxWorkflowStepsPerRun() {
   return Number(process.env.WORKFLOW_MAX_STEPS_PER_RUN) || DEFAULT_MAX_STEPS_PER_RUN;
 }
 
+// src/workflows/readiness.ts
+async function findWorkflowReadinessProblems(definition, registry) {
+  const nodesByType = new Map;
+  for (const node of definition.nodes) {
+    if (!registry.has(node.type))
+      continue;
+    const group = nodesByType.get(node.type) ?? [];
+    group.push({ id: node.id, config: node.config });
+    nodesByType.set(node.type, group);
+  }
+  const problems = [];
+  for (const [type, nodes] of nodesByType) {
+    try {
+      for (const problem of await registry.get(type).checkReadiness(nodes)) {
+        problems.push({ type, ...problem });
+      }
+    } catch {
+      problems.push({
+        type,
+        nodeIds: nodes.map((node) => node.id),
+        message: `Could not check whether "${type}" nodes are ready to run`
+      });
+    }
+  }
+  return problems;
+}
+function describeNodes(problem) {
+  const noun = problem.nodeIds.length === 1 ? "node" : "nodes";
+  return `${problem.type} ${noun} ${problem.nodeIds.map((id) => `"${id}"`).join(", ")}`;
+}
+function formatReadinessWarning(problem) {
+  return `${problem.message} Affects ${describeNodes(problem)}. Runs of this workflow fail before any node executes until this is fixed.`;
+}
+function formatReadinessProblems(problems) {
+  return problems.map((problem) => `${problem.message} Needed by ${describeNodes(problem)}.`).join(" ");
+}
+function formatReadinessRunError(problems) {
+  return `Run not started, no node executed: ${formatReadinessProblems(problems)}`;
+}
+async function workflowSaveWarnings(definition, registry) {
+  return (await findWorkflowReadinessProblems(definition, registry)).map(formatReadinessWarning);
+}
+function withSaveWarnings(text, warnings) {
+  return warnings.length === 0 ? text : `${text} ${warnings.map((warning) => `Warning: ${warning}`).join(" ")}`;
+}
+
 // src/workflows/template.ts
 init_template();
 
@@ -15153,6 +15225,15 @@ async function startWorkflowExecution(workflow, triggerData, registry, options =
     nodeCount: workflow.definition.nodes.length,
     triggerType: options.triggerType ?? "manual"
   });
+  const notReady = await findWorkflowReadinessProblems(workflow.definition, registry);
+  if (notReady.length > 0) {
+    await updateWorkflowRun(runId, {
+      status: "failed",
+      error: formatReadinessRunError(notReady),
+      finishedAt: new Date().toISOString()
+    });
+    return runId;
+  }
   const ctx = { trigger: triggerData };
   if (options.requestedByUserId) {
     ctx.swarm = { requestedByUserId: options.requestedByUserId };
@@ -15479,6 +15560,11 @@ async function executeStep(def, runId, ctx, node, registry, workflowId, secretKe
 }
 async function runClaimedStep(def, runId, ctx, node, registry, existingStep, stepId, workflowId, options = {}) {
   const executor = registry.get(node.type);
+  const systemOneRetryProblems = systemOneRetryViolations(node);
+  if (systemOneRetryProblems.length > 0) {
+    await checkpointStepFailure(runId, stepId, systemOneRetryProblems.join("; "), 0);
+    return { outcome: "failed", successors: [] };
+  }
   const interpolationCtx = buildNodeInterpolationCtx(node, ctx);
   if (node.inputSchema) {
     const inputErrors = validateJsonSchema(node.inputSchema, interpolationCtx);
@@ -15491,7 +15577,8 @@ async function runClaimedStep(def, runId, ctx, node, registry, existingStep, ste
   const {
     value: interpolatedValue,
     unresolved,
-    scriptBodyUnresolved
+    scriptBodyUnresolved,
+    strictUnresolved
   } = interpolateNodeConfig(node, interpolationCtx);
   const interpolatedConfig = interpolatedValue;
   const executionCtx = { ...ctx, ...interpolationCtx };
@@ -15500,6 +15587,10 @@ async function runClaimedStep(def, runId, ctx, node, registry, existingStep, ste
     await checkpointStepFailure(runId, stepId, errorMsg, 0);
     return { outcome: "failed", successors: [] };
   }
+  if (strictUnresolved && strictUnresolved.length > 0) {
+    await checkpointStepFailure(runId, stepId, systemOneUnresolvedError(node.id, strictUnresolved), 0);
+    return { outcome: "failed", successors: [] };
+  }
   if (unresolved.length > 0) {
     console.warn(`[workflow] Step ${node.id}: unresolved interpolation tokens: ${unresolved.join(", ")}`);
     await updateWorkflowRunStep(stepId, {
@@ -15663,6 +15754,25 @@ function buildScriptBodyCtx(node, interpolationCtx) {
   return safe;
 }
 function interpolateNodeConfig(node, interpolationCtx) {
+  if (node.type === SYSTEM_ONE_DECISION_NODE_TYPE) {
+    const { state, questions, ...rest } = node.config;
+    const restResult = deepInterpolate(rest, interpolationCtx);
+    const dynamic = {};
+    if (Object.hasOwn(node.config, "state"))
+      dynamic.state = state;
+    if (Object.hasOwn(node.config, "questions"))
+      dynamic.questions = questions;
+    const dynamicResult = deepInterpolate(dynamic, interpolationCtx, { preserveRawTokens: true });
+    const unresolved = [...restResult.unresolved, ...dynamicResult.unresolved];
+    return {
+      value: {
+        ...restResult.value,
+        ...dynamicResult.value
+      },
+      unresolved,
+      strictUnresolved: unresolved
+    };
+  }
   if (node.type === "foreach" && Object.hasOwn(node.config, "over")) {
     const { over, body, ...configWithoutOverAndBody } = node.config;
     const configResult2 = deepInterpolate(configWithoutOverAndBody, interpolationCtx);
@@ -15733,106 +15843,30 @@ init_event_bus();
 // src/workflows/recovery.ts
 init_db();
 
+// src/workflows/approval-resolution.ts
+function shapeApprovalResolution(registry, definition, nodeId, parkedOutput, approval) {
+  const node = definition.nodes.find((candidate) => candidate.id === nodeId);
+  if (node && registry.has(node.type)) {
+    const shaped = registry.get(node.type).resolveApproval(parkedOutput, approval);
+    if (shaped)
+      return shaped;
+  }
+  return {
+    output: {
+      requestId: approval.requestId,
+      status: approval.status,
+      responses: approval.responses
+    },
+    nextPort: approval.status === "timeout" ? "timeout" : approval.status === "rejected" ? "rejected" : "approved"
+  };
+}
+
 // src/workflows/constants.ts
 var FAILED_TASK_OUTPUT_PREFIX = "[FAILED:";
 
 // src/workflows/resume.ts
 init_db();
 init_secret_scrubber();
-
-// src/workflows/approval-notifications.ts
-init_db();
-init_resolver();
-init_types();
-init_secret_scrubber();
-async function postApprovalCancellationUpdates(approvals, reason, client = getSlackApp()?.client) {
-  if (!client)
-    return;
-  const text = `This approval is no longer actionable: ${reason}`;
-  for (const approval of approvals) {
-    const channels = approval.notificationChannels;
-    const slackThreads = (channels ?? []).filter((notification) => notification.channel === "slack" && notification.messageTs);
-    if (slackThreads.length === 0)
-      continue;
-    for (const notification of slackThreads) {
-      if (notification.channel !== "slack" || !notification.messageTs)
-        continue;
-      const notificationKey = `${notification.target}:${notification.messageTs}`;
-      const claim = await claimApprovalCancellationNotification(approval.id, notificationKey);
-      if (!claim)
-        continue;
-      try {
-        await client.chat.postMessage({
-          channel: notification.target,
-          thread_ts: notification.messageTs,
-          text,
-          unfurl_links: false,
-          unfurl_media: false
-        });
-        await completeApprovalCancellationNotificationClaim(approval.id, notificationKey, claim.leaseToken);
-      } catch (error) {
-        await releaseApprovalCancellationNotificationClaim(approval.id, notificationKey, claim.leaseToken);
-        console.error(`[HITL] Failed to post cancellation update for approval ${approval.id}:`, scrubSecrets(error instanceof Error ? error.message : String(error)));
-      }
-    }
-  }
-}
-async function createApprovalFollowUpTask(request, templateEventType) {
-  if (request.workflowRunId || !request.sourceTaskId)
-    return false;
-  const sourceTask = await getTaskById(request.sourceTaskId);
-  if (!sourceTask)
-    return false;
-  if (templateEventType === "hitl.timeout" && TERMINAL_TASK_STATUSES.includes(sourceTask.status)) {
-    return false;
-  }
-  const { text: taskText } = templateEventType === "hitl.follow_up" ? resolveTemplate("hitl.follow_up", {
-    request_id: request.id,
-    title: request.title,
-    status: request.status,
-    responses: formatResponses(request.questions, request.responses ?? {})
-  }) : resolveTemplate("hitl.timeout", {
-    request_id: request.id,
-    title: request.title,
-    expires_at: request.expiresAt ?? "",
-    reason: request.resolutionReason ?? ""
-  });
-  await createTaskExtended(taskText, {
-    agentId: sourceTask.agentId,
-    routingReason: sourceTask.agentId ? "continuity" : undefined,
-    routingSource: sourceTask.agentId ? "engine_default" : undefined,
-    parentTaskId: request.sourceTaskId,
-    source: "system",
-    taskType: "hitl-follow-up",
-    tags: ["hitl", "follow-up"],
-    slackChannelId: sourceTask.slackChannelId ?? undefined,
-    slackThreadTs: sourceTask.slackThreadTs ?? undefined,
-    slackUserId: sourceTask.slackUserId ?? undefined
-  });
-  return true;
-}
-function formatResponses(questions, responses) {
-  return questions.map((q) => {
-    const answer = responses[q.id];
-    let answerText;
-    if (answer == null) {
-      answerText = "(no answer)";
-    } else if (q.type === "approval") {
-      const a = answer;
-      answerText = a.approved ? "Approved" : "Rejected";
-      if (a.comment)
-        answerText += ` — ${a.comment}`;
-    } else if (typeof answer === "object") {
-      answerText = JSON.stringify(answer);
-    } else {
-      answerText = String(answer);
-    }
-    return `- ${q.label}: ${answerText}`;
-  }).join(`
-`);
-}
-
-// src/workflows/resume.ts
 init_event_bus();
 
 // src/workflows/executors/wait.ts
@@ -16014,43 +16048,6 @@ async function matchesFilter(payload, filter) {
   return false;
 }
 
-// src/workflows/executors/base.ts
-class BaseExecutor {
-  deps;
-  retryPolicy;
-  constructor(deps) {
-    this.deps = deps;
-  }
-  async run(input) {
-    const configResult = this.configSchema.safeParse(input.config);
-    if (!configResult.success) {
-      return {
-        status: "failed",
-        error: `Input validation failed: ${configResult.error.message}`
-      };
-    }
-    let result;
-    try {
-      result = await this.execute(configResult.data, input.context, input.meta);
-    } catch (err) {
-      return {
-        status: "failed",
-        error: `Executor threw: ${err instanceof Error ? err.message : String(err)}`
-      };
-    }
-    if (result.status === "success" && result.output !== undefined) {
-      const outputResult = this.outputSchema.safeParse(result.output);
-      if (!outputResult.success) {
-        return {
-          status: "failed",
-          error: `Output validation failed: ${outputResult.error.message}`
-        };
-      }
-    }
-    return result;
-  }
-}
-
 // src/workflows/executors/wait.ts
 var WaitConfigSchema = exports_external.discriminatedUnion("mode", [
   exports_external.object({
@@ -16379,6 +16376,10 @@ async function retryFailedRun(runId, registry) {
   if (!failedStep)
     throw new Error("No failed step found");
   const completedNodeIds = new Set(await getCompletedStepNodeIds(runId));
+  const notReady = await findWorkflowReadinessProblems({ nodes: workflow.definition.nodes.filter((node) => !completedNodeIds.has(node.id)) }, registry);
+  if (notReady.length > 0) {
+    throw new Error(`Retry not started, run left failed: ${formatReadinessProblems(notReady)}`);
+  }
   const { activeEdges } = await loadCompletedStepRouting(workflow.definition, runId, completedNodeIds);
   const foreachParent = resolveForeachParent(workflow.definition, failedStep.nodeId);
   const failedNode = foreachParent ?? workflow.definition.nodes.find((n) => n.id === failedStep.nodeId);
@@ -16469,12 +16470,7 @@ async function resumeFromApprovalResolution(event, registry) {
     console.warn(`[workflows] approval ${event.requestId} is cancelled; step ${event.workflowRunStepId} stays waiting for the run cancel path`);
     return;
   }
-  const nextPort = event.status === "timeout" ? "timeout" : event.status === "rejected" ? "rejected" : "approved";
-  const stepOutput = {
-    requestId: event.requestId,
-    status: event.status,
-    responses: event.responses
-  };
+  const { output: stepOutput, nextPort } = shapeApprovalResolution(registry, workflow.definition, step.nodeId, step.output, { requestId: event.requestId, status: event.status, responses: event.responses });
   const routing = await checkpointPortStepAndResolveSuccessors(workflow.definition, run.id, step.id, step.nodeId, stepOutput, nextPort, ctx);
   if (!routing.claimed)
     return;
@@ -16788,12 +16784,11 @@ async function recoverApprovalWaitingRuns(registry) {
         if (approvalStatus !== "approved" && approvalStatus !== "rejected" && approvalStatus !== "timeout") {
           return null;
         }
-        const nextPort = approvalStatus === "timeout" ? "timeout" : approvalStatus === "rejected" ? "rejected" : "approved";
-        const stepOutput = {
+        const { output: stepOutput, nextPort } = shapeApprovalResolution(registry, workflow.definition, stuck.nodeId, (await getWorkflowRunStep(stuck.stepId))?.output, {
           requestId: stuck.approvalId,
           status: approvalStatus,
           responses: approval?.responses ?? null
-        };
+        });
         return await checkpointPortStepAndResolveSuccessors(workflow.definition, stuck.runId, stuck.stepId, stuck.nodeId, stepOutput, nextPort, ctx);
       });
       if (!routing?.claimed)
@@ -17355,6 +17350,400 @@ init_zod();
 // src/workflows/executors/agent-task.ts
 init_zod();
 
+// src/be/model-validation.ts
+init_src();
+init_db();
+
+// src/be/model-tier-resolution.ts
+init_src();
+init_zod();
+init_types();
+init_db();
+
+// src/be/harness-model-support.ts
+init_src();
+init_secret_scrubber();
+init_db();
+var CLI_PINNED_HARNESSES = new Set(["claude", "codex"]);
+async function getHarnessModelSupport(harness, cliVersion, modelId) {
+  const row = await getDbClient().get("SELECT status FROM harness_model_support WHERE harness = ? AND cliVersion = ? AND modelId = ?", [harness, cliVersion, modelId]);
+  return row?.status ?? "unknown";
+}
+async function listHarnessModelSupport(filter) {
+  const where = [];
+  const params = [];
+  if (filter?.harness) {
+    where.push("harness = ?");
+    params.push(filter.harness);
+  }
+  if (filter?.cliVersion) {
+    where.push("cliVersion = ?");
+    params.push(filter.cliVersion);
+  }
+  return await getDbClient().query(`SELECT harness, cliVersion, modelId, status, checkedAt, error FROM harness_model_support${where.length > 0 ? ` WHERE ${where.join(" AND ")}` : ""} ORDER BY checkedAt DESC`, params);
+}
+async function recordHarnessModelSupport(input) {
+  const checkedAt = input.now ?? Date.now();
+  const error = input.error ? scrubSecrets(input.error).slice(0, 2000) : null;
+  await getDbClient().run(`INSERT INTO harness_model_support (harness, cliVersion, modelId, status, checkedAt, error)
+     VALUES (?, ?, ?, ?, ?, ?)
+     ON CONFLICT (harness, cliVersion, modelId) DO UPDATE SET
+       status = CASE WHEN excluded.status = 'unknown' THEN harness_model_support.status ELSE excluded.status END,
+       checkedAt = excluded.checkedAt,
+       error = excluded.error`, [input.harness, input.cliVersion, input.modelId, input.status, checkedAt, error]);
+  const row = await getDbClient().get("SELECT harness, cliVersion, modelId, status, checkedAt, error FROM harness_model_support WHERE harness = ? AND cliVersion = ? AND modelId = ?", [input.harness, input.cliVersion, input.modelId]);
+  if (!row)
+    throw new Error("harness_model_support upsert returned no row");
+  return row;
+}
+async function agentRanModel(agentId, modelId) {
+  const row = await getDbClient().get(`SELECT id FROM agent_tasks
+     WHERE agentId = ? AND (resolvedModel = ? OR (resolvedModel IS NULL AND model = ?))
+     LIMIT 1`, [agentId, modelId, modelId]);
+  return row !== null && row !== undefined;
+}
+async function getAgentHarnessCliVersion(agentId) {
+  const row = await getDbClient().get("SELECT harnessCliVersion FROM agents WHERE id = ?", [agentId]);
+  return row?.harnessCliVersion ?? null;
+}
+async function setAgentHarnessCliVersion(agentId, cliVersion) {
+  await getDbClient().run("UPDATE agents SET harnessCliVersion = ? WHERE id = ? AND harnessCliVersion IS NOT ?", [cliVersion, agentId, cliVersion]);
+}
+function unsupportedModelMessage(harness, cliVersion, model) {
+  return `Model "${model}" is not supported by the ${harness} CLI ${cliVersion} on this worker. A CLI bump is needed before tasks can pin it.`;
+}
+async function fallbackForUnsupportedModel(harness, cliVersion, model, catalogSection) {
+  if (!harnessCatalogSection(harness))
+    return null;
+  const family = modelFamilyKey(harness === "claude" ? claudeCatalogModelId(model, catalogSection) : model);
+  const rejected = new Set((await listHarnessModelSupport({ harness, cliVersion })).filter((r) => r.status === "unsupported").map((r) => r.modelId));
+  for (const id of harnessModelIds(harness, catalogSection)) {
+    if (id === model || rejected.has(id))
+      continue;
+    if (modelFamilyKey(id) === family)
+      return id;
+  }
+  return null;
+}
+var noticed = new Set;
+function noticeCliUnsupported(harness, cliVersion, model, fallback) {
+  const key = `${harness}|${cliVersion}|${model}`;
+  if (noticed.has(key))
+    return;
+  noticed.add(key);
+  console.warn(`[model-tiers] ${model} is unsupported on ${harness} CLI ${cliVersion}; tier/alias tasks fall back to ${fallback} until the CLI is bumped`);
+}
+
+// src/be/model-tier-resolution.ts
+init_model_tier_keys();
+init_model_tier_keys();
+var DEFAULT_MODEL_LATEST_SOAK_DAYS = 2;
+var OverridesSchema = exports_external.record(exports_external.string(), exports_external.record(exports_external.string(), exports_external.string()));
+function sanitizeModelTierOverrides(raw) {
+  const parsed = OverridesSchema.safeParse(raw);
+  if (!parsed.success)
+    return {};
+  const result = {};
+  for (const [provider, tiers] of Object.entries(parsed.data)) {
+    if (!ProviderNameSchema.safeParse(provider).success)
+      continue;
+    const clean = {};
+    for (const [tier, value] of Object.entries(tiers)) {
+      const t = parseModelTier(tier);
+      const v = value.trim();
+      if (t && t === tier && v && v.length <= 200 && !/\s/.test(v))
+        clean[t] = v;
+    }
+    if (Object.keys(clean).length > 0)
+      result[provider] = clean;
+  }
+  return result;
+}
+function parseModelTierOverridesHeader(header) {
+  if (header === null || header === undefined || header === "")
+    return;
+  try {
+    return sanitizeModelTierOverrides(JSON.parse(decodeURIComponent(header)));
+  } catch {
+    return;
+  }
+}
+async function getAgentModelTierOverrides(agentId) {
+  const row = await getDbClient().get("SELECT modelTierOverrides FROM agents WHERE id = ?", [agentId]);
+  if (!row?.modelTierOverrides)
+    return {};
+  try {
+    return sanitizeModelTierOverrides(JSON.parse(row.modelTierOverrides));
+  } catch {
+    return {};
+  }
+}
+async function setAgentModelTierOverrides(agentId, overrides) {
+  const next = Object.keys(overrides).length > 0 ? JSON.stringify(overrides) : null;
+  await getDbClient().run("UPDATE agents SET modelTierOverrides = ? WHERE id = ? AND modelTierOverrides IS NOT ?", [next, agentId, next]);
+}
+var CATALOG_TTL_MS = 30000;
+var cachedCatalog = null;
+function mergeFacts(base, overlay) {
+  const merged = { ...base };
+  for (const [key, value] of Object.entries(overlay)) {
+    if (value !== null && value !== undefined) {
+      merged[key] = value;
+    }
+  }
+  return merged;
+}
+async function loadResolutionCatalog() {
+  const now = Date.now();
+  const generation = getCatalogGeneration();
+  if (cachedCatalog && cachedCatalog.generation === generation && now - cachedCatalog.at < CATALOG_TTL_MS) {
+    return cachedCatalog;
+  }
+  let entries = await listModelCatalog();
+  if (entries.length === 0) {
+    const snapshot = loadModelsDevCache();
+    entries = snapshot ? buildCatalogEntries(snapshot, 0) : [];
+  }
+  const facts = new Map;
+  for (const entry of entries) {
+    facts.set(`${entry.provider}/${entry.modelId}`, {
+      provider: entry.provider,
+      modelId: entry.modelId,
+      facts: entry
+    });
+  }
+  for (const overlay of await listModelCatalogOverlay()) {
+    const key = `${overlay.provider}/${overlay.modelId}`;
+    const existing = facts.get(key);
+    facts.set(key, {
+      provider: overlay.provider,
+      modelId: overlay.modelId,
+      facts: existing ? mergeFacts(existing.facts, overlay) : overlay
+    });
+  }
+  const catalog = {};
+  const priced = new Set;
+  for (const { provider, modelId, facts: f } of facts.values()) {
+    catalog[provider] ??= { id: provider, name: provider, models: {} };
+    const model = {
+      ...f.name ? { name: f.name } : {},
+      ...f.releaseDate ? { release_date: f.releaseDate } : {},
+      ...f.contextWindow ? { limit: { context: f.contextWindow } } : {},
+      ...f.pricing ? { cost: f.pricing } : {}
+    };
+    catalog[provider].models[modelId] = model;
+    const p = f.pricing;
+    if (p && (typeof p.input === "number" || typeof p.output === "number")) {
+      priced.add(`${provider}/${modelId}`);
+    }
+  }
+  cachedCatalog = { at: now, generation, catalog, priced };
+  return cachedCatalog;
+}
+function soakDays() {
+  const raw = process.env.MODEL_LATEST_SOAK_DAYS?.trim();
+  if (!raw)
+    return DEFAULT_MODEL_LATEST_SOAK_DAYS;
+  const n = Number(raw);
+  return Number.isInteger(n) && n >= 0 ? n : DEFAULT_MODEL_LATEST_SOAK_DAYS;
+}
+function autoUpgradeEnabled() {
+  const raw = process.env.MODEL_AUTO_UPGRADE?.trim().toLowerCase();
+  return !(raw === "false" || raw === "0");
+}
+async function lastAliasResolution(alias) {
+  const row = await getDbClient().get("SELECT newModel FROM model_alias_resolutions WHERE alias = ? ORDER BY id DESC LIMIT 1", [alias]);
+  return row?.newModel ?? null;
+}
+async function resolveLatestAlias(alias, now = new Date, opts = {}) {
+  const parsed = parseAlias(alias);
+  if (!parsed)
+    return null;
+  const key = alias.trim().toLowerCase();
+  const previous = await lastAliasResolution(key);
+  if (previous && !autoUpgradeEnabled())
+    return previous;
+  const { catalog, priced } = await loadResolutionCatalog();
+  const section = parsed.kind;
+  const resolved = resolveAlias(key, catalog, {
+    soakDays: soakDays(),
+    now,
+    isSupported: (id) => priced.has(`${section}/${id}`)
+  });
+  if (!resolved)
+    return null;
+  if (resolved !== previous && opts.record !== false) {
+    await getDbClient().run("INSERT INTO model_alias_resolutions (alias, previousModel, newModel, changedAt) VALUES (?, ?, ?, ?)", [key, previous, resolved, now.getTime()]);
+    getDbClient().afterCommit(() => {
+      console.info(`[model-tiers] alias ${key} now resolves to ${resolved}${previous ? ` (was ${previous})` : ""}`);
+    });
+  }
+  return resolved;
+}
+function taskModelCandidates(input) {
+  const candidates = [];
+  const model = input.model?.trim();
+  if (model)
+    candidates.push({ value: model, source: "model" });
+  const tier = parseModelTier(input.modelTier);
+  const provider = input.harnessProvider;
+  if (tier && provider) {
+    const worker = input.workerOverrides?.[provider]?.[tier]?.trim();
+    if (worker)
+      candidates.push({ value: worker, source: "worker-env" });
+    const env = input.env ?? process.env;
+    const configured = env[tierConfigKey(provider, tier)]?.trim();
+    if (configured)
+      candidates.push({ value: configured, source: "tier-config" });
+    const fallback = DEFAULT_MODEL_TIER_MAP[provider]?.[tier];
+    if (fallback)
+      candidates.push({ value: fallback, source: "tier-default" });
+  }
+  return candidates;
+}
+async function resolveTaskModel(input) {
+  for (const candidate of taskModelCandidates(input)) {
+    if (!isAlias(candidate.value)) {
+      return { resolvedModel: candidate.value, modelSource: candidate.source, modelAlias: null };
+    }
+    const resolved = await resolveLatestAlias(candidate.value, input.now, {
+      record: input.record
+    });
+    if (resolved) {
+      return {
+        resolvedModel: resolved,
+        modelSource: candidate.source,
+        modelAlias: candidate.value.trim().toLowerCase()
+      };
+    }
+    console.warn(`[model-tiers] ${candidate.source} alias ${candidate.value} resolved to nothing; trying next layer`);
+  }
+  return null;
+}
+async function previewModelTiers(opts = {}) {
+  const env = opts.env ?? process.env;
+  const rows = [];
+  for (const provider of ProviderNameSchema.options) {
+    if (MODEL_TIERS.every((tier) => !DEFAULT_MODEL_TIER_MAP[provider][tier]))
+      continue;
+    for (const tier of MODEL_TIERS) {
+      const key = tierConfigKey(provider, tier);
+      const configured = env[key]?.trim() || null;
+      const resolution = await resolveTaskModel({
+        modelTier: tier,
+        harnessProvider: provider,
+        env,
+        now: opts.now,
+        record: false
+      });
+      rows.push({
+        provider,
+        tier,
+        key,
+        defaultValue: DEFAULT_MODEL_TIER_MAP[provider][tier],
+        configured,
+        source: resolution?.modelSource === "tier-config" ? "tier-config" : "tier-default",
+        resolvedModel: resolution?.resolvedModel ?? null,
+        alias: resolution?.modelAlias ?? null
+      });
+    }
+  }
+  return rows;
+}
+async function applyCliSupport(resolution, harness, cliVersion) {
+  if (!harness || !cliVersion || !CLI_PINNED_HARNESSES.has(harness))
+    return resolution;
+  const status = await getHarnessModelSupport(harness, cliVersion, resolution.resolvedModel);
+  if (status !== "unsupported")
+    return resolution;
+  if (resolution.modelSource === "model" && !resolution.modelAlias) {
+    return { unsupported: unsupportedModelMessage(harness, cliVersion, resolution.resolvedModel) };
+  }
+  const section = harnessCatalogSection(harness);
+  const { catalog, priced } = await loadResolutionCatalog();
+  const candidates = Object.fromEntries(Object.entries(section && catalog[section]?.models || {}).filter(([id]) => priced.has(`${section}/${id}`)));
+  const fallback = await fallbackForUnsupportedModel(harness, cliVersion, resolution.resolvedModel, candidates);
+  if (!fallback)
+    return resolution;
+  noticeCliUnsupported(harness, cliVersion, resolution.resolvedModel, fallback);
+  return { ...resolution, resolvedModel: fallback, modelSource: "fallback:cli-unsupported" };
+}
+async function recordClaimModelResolution(task, agent) {
+  const harnessProvider = agent.harnessProvider ?? agent.provider ?? null;
+  const resolved = await resolveTaskModel({
+    model: task.model,
+    modelTier: task.modelTier,
+    harnessProvider,
+    workerOverrides: await getAgentModelTierOverrides(agent.id)
+  });
+  if (!resolved)
+    return {};
+  const checked = await applyCliSupport(resolved, harnessProvider, await getAgentHarnessCliVersion(agent.id));
+  if ("unsupported" in checked) {
+    return { modelUnsupported: checked.unsupported };
+  }
+  const resolution = checked;
+  await getDbClient().run("UPDATE agent_tasks SET resolvedModel = ?, modelSource = ?, modelAlias = ? WHERE id = ?", [resolution.resolvedModel, resolution.modelSource, resolution.modelAlias, task.id]);
+  return resolution.modelAlias ? resolution : { resolvedModel: resolution.resolvedModel, modelSource: resolution.modelSource };
+}
+
+// src/be/model-validation.ts
+var FREE_FORM_HARNESSES = new Set(["acp", "devin", "dsh"]);
+var CONTEXT_SUFFIX_RE = /\[1m\]$/i;
+var BEDROCK_REGION_PREFIX_RE = /^(?:us|eu|apac|global|us-gov)\./;
+function hasModel(catalog, provider, modelId) {
+  const models = catalog[provider]?.models;
+  return Boolean(models && Object.hasOwn(models, modelId));
+}
+function isKnownCatalogModel(model, catalog) {
+  const id = model.trim().replace(CONTEXT_SUFFIX_RE, "");
+  if (!id)
+    return false;
+  const slash = id.indexOf("/");
+  if (slash > 0) {
+    const provider = id.slice(0, slash);
+    const rest = id.slice(slash + 1);
+    if (hasModel(catalog, provider, rest))
+      return true;
+    if (provider === "amazon-bedrock") {
+      return hasModel(catalog, provider, rest.replace(BEDROCK_REGION_PREFIX_RE, ""));
+    }
+  }
+  for (const provider of Object.keys(catalog)) {
+    if (hasModel(catalog, provider, id))
+      return true;
+  }
+  const anthropic = catalog.anthropic?.models;
+  return Object.hasOwn(buildClaudeShortnameMap(anthropic), id);
+}
+async function explicitModelError(check) {
+  const model = check.model?.trim();
+  if (!model || check.allowCustomModel)
+    return null;
+  if (check.harnessProvider && FREE_FORM_HARNESSES.has(check.harnessProvider))
+    return null;
+  if (isAlias(model)) {
+    if (!parseAlias(model)) {
+      return `Invalid model alias "${model}". Use latest:<provider>/<family>[@stable|@any], e.g. latest:anthropic/opus.`;
+    }
+    const resolved = await resolveLatestAlias(model, new Date, { record: false });
+    return resolved ? null : `Model alias "${model}" matches no model in the catalog. Check the provider and family, or use a concrete model id.`;
+  }
+  const { providers } = await loadModelsCatalog();
+  const catalog = providers;
+  if (Object.keys(catalog).length === 0)
+    return null;
+  if (isKnownCatalogModel(model, catalog))
+    return null;
+  return `Unknown model "${model}": it is not in the model catalog. Use a catalog model id, a Claude CLI shortname (opus, sonnet, haiku, fable), a latest:<provider>/<family> alias, or modelTier. To run a custom model id anyway, set allowCustomModel: true (allow_custom_model on the agent runtime).`;
+}
+async function explicitModelErrorForAgent(check) {
+  if (!check.model?.trim() || check.allowCustomModel)
+    return null;
+  const agent = check.agentId ? await getAgentById(check.agentId) : null;
+  return explicitModelError({ ...check, harnessProvider: agent?.harnessProvider ?? null });
+}
+
 // src/extensions/apply-task-create.ts
 init_types();
 init_secret_scrubber();
@@ -27992,7 +28381,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-g26wdcz6.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-y1b9srva.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -28063,7 +28452,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDbClient: getDbClient2 } = await import("./db-03v9kzr2.js");
+  const { getDbClient: getDbClient2 } = await import("./db-s3znhvbn.js");
   await getDbClient2().transaction(async (tx) => {
     const row = await tx.get("SELECT metadata FROM oauth_apps WHERE provider = 'jira'");
     if (!row) {
@@ -101795,7 +102184,7 @@ async function reloadGlobalConfigsAndIntegrations() {
   return runWithoutRequestAuth(() => reloadGlobalConfigsAndIntegrationsInner());
 }
 async function reloadGlobalConfigsAndIntegrationsInner() {
-  const { getEmbeddingProvider: getEmbeddingProvider2, resetEmbeddingProvider } = await import("./index-c6zsv1bd.js");
+  const { getEmbeddingProvider: getEmbeddingProvider2, resetEmbeddingProvider } = await import("./index-bjmjh9h4.js");
   const wasEmbeddingsConfigured = getEmbeddingProvider2().isConfigured();
   const updated = await loadGlobalConfigsIntoEnv(true);
   await stopSlackApp();
@@ -101808,10 +102197,10 @@ async function reloadGlobalConfigsAndIntegrationsInner() {
     integrations.push("embeddings");
   }
   if (!wasEmbeddingsConfigured && isEmbeddingsConfigured) {
-    import("./boot-reembed-se8zmdcp.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+    import("./boot-reembed-48d2qpkt.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
       console.error("[config-reload] memory backfill failed (non-fatal):", err);
     });
-    import("./boot-reembed-g5ckg9yb.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+    import("./boot-reembed-w0bryhkr.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
       console.error("[config-reload] script backfill failed (non-fatal):", err);
     });
   }
@@ -102624,7 +103013,7 @@ function setPreloadedTools(server, names) {
 async function applyPreToolCall(name, args, requestInfo, inputSchema) {
   if (requestInfo.callOrigin !== "mcp")
     return { args };
-  const dispatcher = await import("./dispatcher-nrmg8yht.js");
+  const dispatcher = await import("./dispatcher-5xn0c7rf.js");
   const result = await dispatcher.dispatchPre("pre.tool.call", { tool: name, args, requestInfo }, inputSchema ? {
     validateModify: async (data) => {
       const schema = normalizeObjectSchema(inputSchema) ?? inputSchema;
@@ -113338,6 +113727,106 @@ var registerMemoryStoreTool = (server) => {
   });
 };
 
+// src/tools/model-catalog/index.ts
+init_zod();
+init_db();
+async function denyUnlessCatalogWriter(agentId) {
+  const agent = await getAgentById(agentId);
+  const decision = can({
+    principal: { kind: "agent", agentId, isLead: agent?.isLead ?? false },
+    verb: "models.catalog.write",
+    resource: { kind: "none" },
+    source: "mcp"
+  });
+  return decision.allow ? null : "Writing the model catalog requires the lead agent.";
+}
+var registerModelCatalogRefreshTool = (server) => {
+  createToolRegistrar(server)("model-catalog-refresh", {
+    title: "Refresh Model Catalog",
+    description: "Refresh the swarm model catalog (and pricing rows) from models.dev, like `pi update --models`. Without force, skips the network when the last check is under 4h old. A forced refresh is accepted once per minute; a second one inside that window returns `skipped-cooldown` with `retryAfterMs`. Lead agent only. Returns the status, model count, and newly added provider/modelId keys.",
+    annotations: { idempotentHint: true, openWorldHint: true },
+    inputSchema: object({
+      force: boolean().optional().describe("Fetch even if the last check is under 4h old (default false). Rate limited to one per minute.")
+    }),
+    outputSchema: swarmToolOutputSchema({
+      status: string().optional(),
+      models: number().optional(),
+      added: array(string()).optional(),
+      checkedAt: number().nullable().optional(),
+      retryAfterMs: number().optional()
+    })
+  }, async ({ force }, requestInfo) => {
+    if (!requestInfo.agentId) {
+      return toolErr('Agent ID not found. Set the "X-Agent-ID" header.');
+    }
+    const denied = await denyUnlessCatalogWriter(requestInfo.agentId);
+    if (denied)
+      return toolErr(denied);
+    const result = await requestModelCatalogRefresh({ force });
+    const data = {
+      status: result.status,
+      models: result.models,
+      added: result.added,
+      checkedAt: result.checkedAt,
+      retryAfterMs: result.retryAfterMs
+    };
+    if (result.status === "error") {
+      return toolErr(`Model catalog refresh failed: ${result.error ?? "unknown error"}`, {
+        data
+      });
+    }
+    const addedText = result.added.length > 0 ? ` Added: ${result.added.join(", ")}.` : "";
+    return toolOk(`Model catalog ${result.status}: ${result.models} model(s), ${result.added.length} new.`, {
+      details: `status=${result.status}; models=${result.models}; added=${result.added.length}.${addedText}`,
+      data
+    });
+  });
+};
+var registerModelCatalogOverlayUpsertTool = (server) => {
+  createToolRegistrar(server)("model-catalog-overlay-upsert", {
+    title: "Upsert Model Catalog Overlay",
+    description: "Add or update hand-verified facts for one model (e.g. a launch models.dev has not listed yet). Overlay fields win over models.dev; overlay prices fill pricing-table gaps so cost recompute prices the model. The row auto-expires once models.dev matches every fact you set.",
+    annotations: { idempotentHint: true },
+    inputSchema: object({
+      provider: string().min(1).describe("models.dev provider id: anthropic, openai, openrouter, amazon-bedrock, opencode."),
+      modelId: string().min(1).describe("Model id as models.dev keys it (e.g. claude-opus-5-5)."),
+      name: string().optional().describe("Display name."),
+      releaseDate: string().optional().describe("Release date, YYYY-MM-DD."),
+      contextWindow: number().int().positive().optional().describe("Context window, tokens."),
+      maxOutput: number().int().positive().optional().describe("Max output tokens."),
+      reasoningOptions: array(object({ type: string(), values: array(string()).optional() })).optional().describe("Reasoning options, models.dev shape: [{type, values?}]."),
+      pricing: object({
+        input: number().nonnegative().optional(),
+        output: number().nonnegative().optional(),
+        cache_read: number().nonnegative().optional(),
+        cache_write: number().nonnegative().optional()
+      }).optional().describe("USD per million tokens."),
+      reason: string().min(1).describe("Why this overlay exists (source of the facts)."),
+      verifiedBy: string().optional().describe("Who verified the facts (URL, person, agent).")
+    }),
+    outputSchema: swarmToolOutputSchema({
+      overlay: looseObject({}).optional()
+    })
+  }, async (input, requestInfo) => {
+    if (!requestInfo.agentId) {
+      return toolErr('Agent ID not found. Set the "X-Agent-ID" header.');
+    }
+    const denied = await denyUnlessCatalogWriter(requestInfo.agentId);
+    if (denied)
+      return toolErr(denied);
+    try {
+      const overlay = await upsertModelCatalogOverlay(input);
+      return toolOk(`Overlay for ${input.provider}/${input.modelId} saved.`, {
+        details: `Overlay for ${input.provider}/${input.modelId} saved (reason: ${input.reason}). It expires when models.dev matches every fact set.`,
+        data: { overlay }
+      });
+    } catch (error) {
+      const message = error instanceof Error ? error.message : "Unknown error";
+      return toolErr(`Failed to save overlay: ${message}`);
+    }
+  });
+};
+
 // src/tools/my-agent-info.ts
 init_zod();
 init_db();
@@ -121355,7 +121844,8 @@ var createScheduleInputSchema = object({
   timezone: string().default("UTC").optional().describe("Timezone for cron schedules"),
   enabled: boolean().default(true).optional().describe("Whether the schedule is enabled (default: true)"),
   model: string().trim().min(1).optional().describe("Concrete model override for tasks created by this schedule. Interpreted by each assignee's harness/provider and does not switch providers. Prefer modelTier for portable intent."),
-  modelTier: ModelTierSchema.optional().describe("Portable model tier for tasks created by this schedule: 'smol', 'regular', 'smart', or 'ultra'. Resolved by each assignee's harness/provider at run time.")
+  modelTier: ModelTierSchema.optional().describe("Portable model tier for tasks created by this schedule: 'smol', 'regular', 'smart', or 'ultra'. Resolved by each assignee's harness/provider at run time."),
+  allowCustomModel: boolean().optional().describe("Accept a `model` the model catalog does not list. Without it an unknown model id is rejected. Only for ids the catalog cannot know yet.")
 });
 var scheduleDataShape = {
   id: string().optional(),
@@ -121416,7 +121906,8 @@ var registerCreateScheduleTool = (server) => {
     timezone,
     enabled: enabled2,
     model,
-    modelTier
+    modelTier,
+    allowCustomModel
   }, requestInfo, _meta) => {
     if (!requestInfo.agentId) {
       return toolErr('Agent ID not found. Set the "X-Agent-ID" header.');
@@ -121484,8 +121975,15 @@ var registerCreateScheduleTool = (server) => {
         return toolErr(`Script not found: ${scriptName}`);
       }
     }
+    const normalizedModel = splitLegacyModelAlias({ model, modelTier });
+    const modelError = await explicitModelErrorForAgent({
+      model: normalizedModel.model,
+      allowCustomModel,
+      agentId: targetAgentId
+    });
+    if (modelError)
+      return toolErr(modelError);
     try {
-      const normalizedModel = splitLegacyModelAlias({ model, modelTier });
       let nextRunAt;
       if (enabled2 === false) {
         nextRunAt = undefined;
@@ -121930,7 +122428,8 @@ var patchScheduleInputSchema = object({
   timezone: string().optional().describe("New timezone"),
   enabled: boolean().optional().describe("Enable or disable the schedule"),
   model: string().trim().min(1).nullable().optional().describe("Concrete model override for tasks created by this schedule. Set to null to clear."),
-  modelTier: ModelTierSchema.nullable().optional().describe("Portable model tier for tasks created by this schedule. Set to null to clear.")
+  modelTier: ModelTierSchema.nullable().optional().describe("Portable model tier for tasks created by this schedule. Set to null to clear."),
+  allowCustomModel: boolean().optional().describe("Accept a `model` the model catalog does not list. Without it an unknown model id is rejected. Only for ids the catalog cannot know yet.")
 });
 var scheduleDataShape2 = {
   id: string().optional(),
@@ -121990,7 +122489,8 @@ var registerPatchScheduleTool = (server) => {
     timezone,
     enabled: enabled2,
     model,
-    modelTier
+    modelTier,
+    allowCustomModel
   }, requestInfo, _meta) => {
     if (!requestInfo.agentId) {
       return toolErr('Agent ID not found. Set the "X-Agent-ID" header.');
@@ -122088,6 +122588,15 @@ var registerPatchScheduleTool = (server) => {
         updateData.enabled = enabled2;
       if (model !== undefined || modelTier !== undefined) {
         const normalizedModel = splitLegacyModelAlias({ model, modelTier });
+        if (normalizedModel.model !== schedule.model) {
+          const modelError = await explicitModelErrorForAgent({
+            model: normalizedModel.model,
+            allowCustomModel,
+            agentId: targetAgentId ?? schedule.targetAgentId
+          });
+          if (modelError)
+            return toolErr(modelError);
+        }
         if (model !== undefined)
           updateData.model = normalizedModel.model ?? null;
         if (modelTier !== undefined || normalizedModel.modelTier) {
@@ -122220,7 +122729,8 @@ var updateScheduleInputSchema = object({
   timezone: string().optional().describe("New timezone"),
   enabled: boolean().optional().describe("Enable or disable the schedule"),
   model: string().trim().min(1).nullable().optional().describe("Concrete model override for tasks created by this schedule. Set to null to clear."),
-  modelTier: ModelTierSchema.nullable().optional().describe("Portable model tier for tasks created by this schedule. Set to null to clear.")
+  modelTier: ModelTierSchema.nullable().optional().describe("Portable model tier for tasks created by this schedule. Set to null to clear."),
+  allowCustomModel: boolean().optional().describe("Accept a `model` the model catalog does not list. Without it an unknown model id is rejected. Only for ids the catalog cannot know yet.")
 });
 var scheduleDataShape3 = {
   id: string().optional(),
@@ -122280,7 +122790,8 @@ var registerUpdateScheduleTool = (server) => {
     timezone,
     enabled: enabled2,
     model,
-    modelTier
+    modelTier,
+    allowCustomModel
   }, requestInfo, _meta) => {
     if (!requestInfo.agentId) {
       return toolErr('Agent ID not found. Set the "X-Agent-ID" header.');
@@ -122378,6 +122889,15 @@ var registerUpdateScheduleTool = (server) => {
         updateData.enabled = enabled2;
       if (model !== undefined || modelTier !== undefined) {
         const normalizedModel = splitLegacyModelAlias({ model, modelTier });
+        if (normalizedModel.model !== schedule.model) {
+          const modelError = await explicitModelErrorForAgent({
+            model: normalizedModel.model,
+            allowCustomModel,
+            agentId: targetAgentId ?? schedule.targetAgentId
+          });
+          if (modelError)
+            return toolErr(modelError);
+        }
         if (model !== undefined)
           updateData.model = normalizedModel.model ?? null;
         if (modelTier !== undefined || normalizedModel.modelTier) {
@@ -123255,6 +123775,7 @@ var sendTaskInputSchema = object({
   vcsRepo: string().optional().describe("VCS repo identifier (e.g., 'desplega-ai/agent-swarm' for GitHub or 'group/project' for GitLab). Links the task to a registered repo for workspace context."),
   model: string().trim().min(1).optional().describe("Concrete model override for this task, interpreted by the assignee's harness/provider. This does not switch providers. Prefer modelTier for portable intent."),
   modelTier: ModelTierSchema.optional().describe("Portable model tier for this task: 'smol', 'regular', 'smart', or 'ultra'. Resolved at claim/run time using the assignee's harness/provider. Legacy model shortnames map as haiku→smol, sonnet→regular, opus→smart, fable→ultra."),
+  allowCustomModel: boolean().optional().describe("Accept a `model` the model catalog does not list. Without it an unknown model id is rejected. Only for ids the catalog cannot know yet (a fresh launch, a private deployment)."),
   effort: ReasoningEffortSchema.optional().describe("Reasoning effort for this task: 'off', 'low', 'medium', 'high', 'xhigh', or 'max'. If omitted, the assignee's REASONING_EFFORT_OVERRIDE/default applies."),
   allowDuplicate: boolean().default(false).describe("If true, skip duplicate detection and create the task even if a similar one exists."),
   slackChannelId: string().optional().describe("Slack channel ID to post progress updates to. Use this to propagate Slack context when delegating from a Slack thread."),
@@ -123329,6 +123850,7 @@ async function sendTaskHandler(ctx, {
   vcsRepo,
   model,
   modelTier,
+  allowCustomModel,
   effort,
   allowDuplicate,
   slackChannelId,
@@ -123365,6 +123887,13 @@ async function sendTaskHandler(ctx, {
   }
   const effectiveVcsRepo = vcsRepo;
   const normalizedModel = splitLegacyModelAlias({ model, modelTier });
+  const modelError = await explicitModelErrorForAgent({
+    model: normalizedModel.model,
+    allowCustomModel,
+    agentId
+  });
+  if (modelError)
+    return toolErr(modelError, { data: { yourAgentId: creatorAgentId } });
   const effectiveParentTaskId = parentTaskId ?? sourceTaskId;
   const effectiveParentTask = effectiveParentTaskId ? await getTaskById(effectiveParentTaskId) : null;
   if (effectiveParentTask?.routingAffinityInvalid) {
@@ -124573,6 +125102,12 @@ function collectRichTextParts(node, parts) {
     }
   }
 }
+function decodeMrkdwn(text) {
+  return text.replace(/<[^<>]*>/g, "").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
+}
+function normalizeForDedupe(text) {
+  return text.replace(/:[a-z0-9_+'-]+:/gi, "").replace(/^[ \t]*(?:>|[•◦▪‣-]|\d+\.)[ \t]*/gm, "").replace(/[*_~`]/g, "").replace(/\s+/g, "");
+}
 function extractSlackMessageText(msg) {
   const topText = msg.text?.trim() ?? "";
   const attachmentParts = [];
@@ -124620,6 +125155,7 @@ function extractSlackMessageText(msg) {
     }
   }
   const blockParts = [];
+  const richTextRanges = [];
   if (Array.isArray(msg.blocks) && msg.blocks.length > 0) {
     for (const rawBlock of msg.blocks) {
       if (rawBlock == null || typeof rawBlock !== "object")
@@ -124636,9 +125172,12 @@ function extractSlackMessageText(msg) {
           }
         }
       } else if (block.type === "rich_text" && Array.isArray(block.elements)) {
+        const start = blockParts.length;
         for (const el of block.elements) {
           collectRichTextParts(el, blockParts);
         }
+        if (blockParts.length > start)
+          richTextRanges.push([start, blockParts.length]);
       } else if (block.type === "header") {
         if (block.text?.text)
           blockParts.push(block.text.text);
@@ -124667,7 +125206,21 @@ function extractSlackMessageText(msg) {
       }
     }
   }
-  const bodyText = [...attachmentParts, ...blockParts].filter(Boolean).join(`
+  let bodyBlockParts = blockParts;
+  if (topText && richTextRanges.length > 0) {
+    const richText = richTextRanges.map(([start, end]) => blockParts.slice(start, end).join(`
+`)).join(`
+`);
+    if (normalizeForDedupe(richText) === normalizeForDedupe(decodeMrkdwn(topText))) {
+      const dropped = new Set;
+      for (const [start, end] of richTextRanges) {
+        for (let i = start;i < end; i++)
+          dropped.add(i);
+      }
+      bodyBlockParts = blockParts.filter((_, i) => !dropped.has(i));
+    }
+  }
+  const bodyText = [...attachmentParts, ...bodyBlockParts].filter(Boolean).join(`
 `);
   const bodyLines = new Set(bodyText.split(`
 `).map((l) => l.trim()).filter(Boolean));
@@ -127229,6 +127782,7 @@ var taskActionInputSchema = object({
   dir: string().min(1).startsWith("/").optional().describe("Working directory (absolute path) for the agent to start in. Only used with 'create' action."),
   model: string().trim().min(1).optional().describe("Concrete model override for the created task, interpreted by the claiming worker's harness/provider. This does not switch providers. Only used with 'create' action."),
   modelTier: ModelTierSchema.optional().describe("Portable model tier for the created task: 'smol', 'regular', 'smart', or 'ultra'. Resolved when a worker claims/runs the task. Only used with 'create' action."),
+  allowCustomModel: boolean().optional().describe("Accept a `model` the model catalog does not list. Without it an unknown model id is rejected. Only used with 'create' action."),
   effort: ReasoningEffortSchema.optional().describe("Reasoning effort for the created task: 'off', 'low', 'medium', 'high', 'xhigh', or 'max'. Only used with 'create' action."),
   requiredCapabilities: array(string()).optional().describe("Capabilities required for pool routing."),
   leadOnly: boolean().default(false).describe("Structured authorization constraint: only Lead agents may claim this privileged task.")
@@ -127345,6 +127899,12 @@ async function taskActionHandler(ctx, input) {
     if (!task) {
       return taskActionResult({ success: false, message: "Task description is required for 'create' action." }, agentId);
     }
+    const modelError = await explicitModelErrorForAgent({
+      model: normalizedModel.model,
+      allowCustomModel: input.allowCustomModel
+    });
+    if (modelError)
+      return taskActionResult({ success: false, message: modelError }, agentId);
     try {
       assetKey = key ? await authorizeAssetKeyWrite(key, await resolveTaskAuditUserId(ctx.sourceTaskId, agentId)) : undefined;
     } catch (error) {
@@ -128316,7 +128876,8 @@ var registerCreateWorkflowTool = (server) => {
     }),
     outputSchema: swarmToolOutputSchema({
       yourAgentId: exports_external.string().optional(),
-      workflow: exports_external.unknown().optional()
+      workflow: exports_external.unknown().optional(),
+      warnings: exports_external.array(exports_external.string()).optional()
     })
   }, async ({
     name,
@@ -128355,11 +128916,13 @@ var registerCreateWorkflowTool = (server) => {
         createdBy
       }, "mcp");
       const longScriptTimeoutHint = findLongScriptTimeoutHint(definition.nodes);
-      return toolOk(`Created workflow "${workflow.name}".`, {
-        details: `Created workflow "${workflow.name}" (${workflow.id}).`,
+      const warnings = await workflowSaveWarnings(workflow.definition, getExecutorRegistry());
+      return toolOk(withSaveWarnings(`Created workflow "${workflow.name}".`, warnings), {
+        details: withSaveWarnings(`Created workflow "${workflow.name}" (${workflow.id}).`, warnings),
         data: {
           yourAgentId: requestInfo.agentId,
           workflow,
+          ...warnings.length > 0 ? { warnings } : {},
           ...longScriptTimeoutHint ? { longScriptTimeoutHint } : {}
         }
       });
@@ -128660,7 +129223,8 @@ var registerPatchWorkflowTool = (server) => {
       versionCreated: exports_external.number().optional(),
       nodesCreated: exports_external.number().optional(),
       nodesUpdated: exports_external.number().optional(),
-      nodesDeleted: exports_external.number().optional()
+      nodesDeleted: exports_external.number().optional(),
+      warnings: exports_external.array(exports_external.string()).optional()
     })
   }, async ({ id: id2, key, update, delete: del, create: create6, onNodeFailure, triggerSchema }, requestInfo) => {
     try {
@@ -128705,14 +129269,16 @@ var registerPatchWorkflowTool = (server) => {
       }
       const authoredFinalNodes = result.definition.nodes.filter((node) => timeoutAuthoredNodeIds.has(node.id));
       const longScriptTimeoutHint = findLongScriptTimeoutHint(authoredFinalNodes);
-      return toolOk(`Patched workflow "${workflow.name}".`, {
-        details: `Patched workflow "${workflow.name}" (${id2}). Version ${version} snapshot created.`,
+      const warnings = await workflowSaveWarnings(result.definition, getExecutorRegistry());
+      return toolOk(withSaveWarnings(`Patched workflow "${workflow.name}".`, warnings), {
+        details: withSaveWarnings(`Patched workflow "${workflow.name}" (${id2}). Version ${version} snapshot created.`, warnings),
         data: {
           workflow,
           versionCreated: version ?? undefined,
           nodesCreated: create6?.length ?? 0,
           nodesUpdated: update?.length ?? 0,
           nodesDeleted: del?.length ?? 0,
+          ...warnings.length > 0 ? { warnings } : {},
           ...longScriptTimeoutHint ? { longScriptTimeoutHint } : {}
         }
       });
@@ -128736,7 +129302,8 @@ var registerPatchWorkflowNodeTool = (server) => {
     }),
     outputSchema: swarmToolOutputSchema({
       workflow: exports_external.unknown().optional(),
-      versionCreated: exports_external.number().optional()
+      versionCreated: exports_external.number().optional(),
+      warnings: exports_external.array(exports_external.string()).optional()
     })
   }, async ({ id: id2, nodeId, ...nodeFields }, requestInfo) => {
     try {
@@ -128761,11 +129328,13 @@ var registerPatchWorkflowNodeTool = (server) => {
       const longScriptTimeoutHint = findLongScriptTimeoutHint([
         { id: nodeId, type: patchedNode?.type, config: nodeFields.config }
       ]);
-      return toolOk(`Patched node "${nodeId}" in workflow "${workflow.name}".`, {
-        details: `Patched node "${nodeId}" in workflow "${workflow.name}" (${id2}). Version ${version} snapshot created.`,
+      const warnings = await workflowSaveWarnings(result.definition, getExecutorRegistry());
+      return toolOk(withSaveWarnings(`Patched node "${nodeId}" in workflow "${workflow.name}".`, warnings), {
+        details: withSaveWarnings(`Patched node "${nodeId}" in workflow "${workflow.name}" (${id2}). Version ${version} snapshot created.`, warnings),
         data: {
           workflow,
           versionCreated: version ?? undefined,
+          ...warnings.length > 0 ? { warnings } : {},
           ...longScriptTimeoutHint ? { longScriptTimeoutHint } : {}
         }
       });
@@ -128886,7 +129455,8 @@ var registerUpdateWorkflowTool = (server) => {
     }),
     outputSchema: swarmToolOutputSchema({
       workflow: exports_external.unknown().optional(),
-      versionCreated: exports_external.number().optional()
+      versionCreated: exports_external.number().optional(),
+      warnings: exports_external.array(exports_external.string()).optional()
     })
   }, async ({
     id: id2,
@@ -128935,11 +129505,13 @@ var registerUpdateWorkflowTool = (server) => {
         return toolErr(`Workflow not found: ${id2}`);
       }
       const longScriptTimeoutHint = definition ? findLongScriptTimeoutHint(definition.nodes) : undefined;
-      return toolOk(`Updated workflow "${workflow.name}".`, {
-        details: `Updated workflow "${workflow.name}" (${id2}). Version ${version.version} snapshot created.`,
+      const warnings = await workflowSaveWarnings(workflow.definition, getExecutorRegistry());
+      return toolOk(withSaveWarnings(`Updated workflow "${workflow.name}".`, warnings), {
+        details: withSaveWarnings(`Updated workflow "${workflow.name}" (${id2}). Version ${version.version} snapshot created.`, warnings),
         data: {
           workflow,
           versionCreated: version.version,
+          ...warnings.length > 0 ? { warnings } : {},
           ...longScriptTimeoutHint ? { longScriptTimeoutHint } : {}
         }
       });
@@ -129083,6 +129655,8 @@ async function createServer(opts = {}) {
     registerListConfigTool(server);
     registerDeleteConfigTool(server);
     registerCredentialBindingsTool(server);
+    registerModelCatalogRefreshTool(server);
+    registerModelCatalogOverlayUpsertTool(server);
   }
   if (hasCapability2("scripts")) {
     registerScriptSearchTool(server);
@@ -129313,6 +129887,8 @@ var SDK_TOOL_NAME_MAP = {
   config_list: "list-config",
   config_set: "set-config",
   config_delete: "delete-config",
+  modelCatalog_refresh: "model-catalog-refresh",
+  modelCatalog_overlayUpsert: "model-catalog-overlay-upsert",
   slack_read: "slack-read",
   slack_listChannels: "slack-list-channels",
   slack_post: "slack-post",
@@ -131263,6 +131839,7 @@ var AgentTaskConfigSchema = exports_external.object({
   vcsRepo: exports_external.string().min(1).optional(),
   model: exports_external.string().min(1).optional(),
   modelTier: ModelTierSchema.optional(),
+  allowCustomModel: exports_external.boolean().optional(),
   effort: ReasoningEffortSchema.optional(),
   parentTaskId: exports_external.string().uuid().optional(),
   requestedByUserId: exports_external.string().optional(),
@@ -131312,6 +131889,13 @@ class AgentTaskExecutor extends BaseExecutor {
         effectiveKey = workflow.key;
       }
     }
+    const modelError = await explicitModelErrorForAgent({
+      model: splitLegacyModelAlias({ model: config.model, modelTier: config.modelTier }).model,
+      allowCustomModel: config.allowCustomModel,
+      agentId: config.agentId
+    });
+    if (modelError)
+      return { status: "failed", error: modelError };
     const preCreate = await applyPreTaskCreate({
       description: config.template,
       options: {
@@ -131561,340 +132145,6 @@ function normalizeExistingTaskOutput(output) {
   return output;
 }
 
-// src/workflows/executors/human-in-the-loop.ts
-init_zod();
-init_constants();
-init_secret_scrubber();
-var SelectOptionSchema = exports_external.object({
-  value: exports_external.string(),
-  label: exports_external.string(),
-  description: exports_external.string().optional()
-});
-var QuestionSchema2 = exports_external.discriminatedUnion("type", [
-  exports_external.object({
-    id: exports_external.string(),
-    type: exports_external.literal("approval"),
-    label: exports_external.string(),
-    required: exports_external.boolean().default(true),
-    description: exports_external.string().optional()
-  }),
-  exports_external.object({
-    id: exports_external.string(),
-    type: exports_external.literal("text"),
-    label: exports_external.string(),
-    required: exports_external.boolean().default(true),
-    description: exports_external.string().optional(),
-    placeholder: exports_external.string().optional(),
-    multiline: exports_external.boolean().optional()
-  }),
-  exports_external.object({
-    id: exports_external.string(),
-    type: exports_external.literal("single-select"),
-    label: exports_external.string(),
-    required: exports_external.boolean().default(true),
-    description: exports_external.string().optional(),
-    options: exports_external.array(SelectOptionSchema)
-  }),
-  exports_external.object({
-    id: exports_external.string(),
-    type: exports_external.literal("multi-select"),
-    label: exports_external.string(),
-    required: exports_external.boolean().default(true),
-    description: exports_external.string().optional(),
-    options: exports_external.array(SelectOptionSchema),
-    minSelections: exports_external.number().int().min(0).optional(),
-    maxSelections: exports_external.number().int().min(1).optional()
-  }),
-  exports_external.object({
-    id: exports_external.string(),
-    type: exports_external.literal("boolean"),
-    label: exports_external.string(),
-    required: exports_external.boolean().default(true),
-    description: exports_external.string().optional(),
-    defaultValue: exports_external.boolean().optional()
-  })
-]);
-var ApproverConfigSchema = exports_external.object({
-  users: exports_external.array(exports_external.string()).optional(),
-  roles: exports_external.array(exports_external.string()).optional(),
-  policy: exports_external.union([exports_external.literal("any"), exports_external.literal("all"), exports_external.object({ min: exports_external.number().int().min(1) })])
-});
-var NotificationConfigSchema = exports_external.object({
-  channel: exports_external.enum(["slack", "email"]),
-  target: exports_external.string()
-});
-var DYNAMIC_QUESTIONS_TOKEN_RE = /^\{\{[^}]+\}\}$/;
-var MAX_HITL_QUESTIONS = 100;
-var SLACK_SECTION_TEXT_LIMIT = 3000;
-var MAX_REPORTED_ISSUES = 5;
-var HITLConfigSchema = exports_external.object({
-  title: exports_external.string(),
-  questions: exports_external.union([
-    exports_external.array(QuestionSchema2).min(1),
-    exports_external.string().regex(DYNAMIC_QUESTIONS_TOKEN_RE, "questions must be an array or one exact {{interpolation}} token")
-  ]),
-  approvers: ApproverConfigSchema,
-  timeout: exports_external.object({
-    seconds: exports_external.number().int().min(1),
-    action: exports_external.literal("reject")
-  }).optional(),
-  notifications: exports_external.array(NotificationConfigSchema).optional()
-});
-var HITLOutputSchema = exports_external.object({
-  requestId: exports_external.string().uuid(),
-  status: exports_external.string(),
-  responses: exports_external.record(exports_external.string(), exports_external.unknown()).nullable()
-});
-function resolveHitlQuestions(value) {
-  const fail = (reason) => ({
-    ok: false,
-    error: `human-in-the-loop questions ${reason}`
-  });
-  if (typeof value === "string") {
-    return fail(value.trim() === "" ? "resolved to an empty value: the {{token}} did not resolve (check the node's inputs mapping and the upstream output)" : "resolved to a string; they must resolve to an array of question objects (use one exact {{token}} pointing at an array)");
-  }
-  if (!Array.isArray(value)) {
-    return fail(`must resolve to an array of question objects, got ${value === null ? "null" : typeof value}`);
-  }
-  if (value.length === 0) {
-    return fail("resolved to an empty array; refusing to create an approval card with no questions");
-  }
-  if (value.length > MAX_HITL_QUESTIONS) {
-    return fail(`resolved to ${value.length} questions, over the limit of ${MAX_HITL_QUESTIONS} per card; split or group them upstream`);
-  }
-  const issues = [];
-  const questions = [];
-  const seenIds = new Set;
-  value.forEach((raw, index) => {
-    const parsed = QuestionSchema2.safeParse(raw);
-    if (!parsed.success) {
-      for (const issue of parsed.error.issues) {
-        const path3 = issue.path.length > 0 ? `.${issue.path.map(String).join(".")}` : "";
-        issues.push(`[${index}]${path3}: ${issue.message}`);
-      }
-      return;
-    }
-    const question = parsed.data;
-    if (question.id.trim() === "") {
-      issues.push(`[${index}].id: must be a non-empty string`);
-    } else if (seenIds.has(question.id)) {
-      issues.push(`[${index}].id: duplicate id "${question.id}" (responses are keyed by id)`);
-    }
-    seenIds.add(question.id);
-    if ((question.type === "single-select" || question.type === "multi-select") && question.options.length === 0) {
-      issues.push(`[${index}].options: a ${question.type} question needs at least one option`);
-    }
-    questions.push(question);
-  });
-  if (issues.length > 0) {
-    const shown = issues.slice(0, MAX_REPORTED_ISSUES).join("; ");
-    const more = issues.length > MAX_REPORTED_ISSUES ? `; and ${issues.length - MAX_REPORTED_ISSUES} more issue(s)` : "";
-    return fail(`are invalid: ${shown}${more}`);
-  }
-  return { ok: true, questions };
-}
-function escapeSlackMrkdwn(text) {
-  return text.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
-}
-function buildSlackQuestionsSummary(questions, timeoutText = "") {
-  const header = `*Questions:*
-`;
-  const lines = questions.map((q) => `• ${escapeSlackMrkdwn(q.label.replace(/\s+/g, " ").trim())}`);
-  const fits = (shown, omitted) => {
-    const tail = omitted > 0 ? `
-_…and ${omitted} more. Answer all of them on the dashboard._` : "";
-    const text = `${header}${shown.join(`
-`)}${tail}${timeoutText}`;
-    return text.length <= SLACK_SECTION_TEXT_LIMIT ? text : null;
-  };
-  const full = fits(lines, 0);
-  if (full)
-    return full;
-  for (let count = lines.length - 1;count >= 0; count--) {
-    const text = fits(lines.slice(0, count), lines.length - count);
-    if (text)
-      return text;
-  }
-  return `${header}_${questions.length} questions. Answer them on the dashboard._`;
-}
-
-class HumanInTheLoopExecutor extends BaseExecutor {
-  type = "human-in-the-loop";
-  mode = "async";
-  configSchema = HITLConfigSchema;
-  outputSchema = HITLOutputSchema;
-  async run(input) {
-    const resolved = resolveHitlQuestions(input.config?.questions);
-    if (!resolved.ok)
-      return { status: "failed", error: resolved.error };
-    return super.run({ ...input, config: { ...input.config, questions: resolved.questions } });
-  }
-  async execute(config, _context, meta2) {
-    const { db } = this.deps;
-    const existing = await db.getApprovalRequestByStepId(meta2.stepId);
-    if (existing) {
-      if (existing.status !== "pending") {
-        if (existing.status === "cancelled") {
-          return {
-            status: "failed",
-            error: `Approval request was cancelled: ${existing.resolutionReason ?? "workflow run cancelled"}`
-          };
-        }
-        const nextPort = existing.status === "timeout" ? "timeout" : existing.status === "rejected" ? "rejected" : "approved";
-        return {
-          status: "success",
-          output: {
-            requestId: existing.id,
-            status: existing.status,
-            responses: existing.responses
-          },
-          nextPort
-        };
-      }
-      return {
-        status: "success",
-        async: true,
-        waitFor: "approval.resolved",
-        correlationId: existing.id
-      };
-    }
-    if (!Array.isArray(config.questions)) {
-      return { status: "failed", error: "human-in-the-loop questions did not resolve to an array" };
-    }
-    const requestId = crypto.randomUUID();
-    const created = await db.createApprovalRequest({
-      id: requestId,
-      title: config.title,
-      questions: config.questions,
-      approvers: config.approvers,
-      workflowRunId: meta2.runId,
-      workflowRunStepId: meta2.stepId,
-      timeoutSeconds: config.timeout?.seconds,
-      notificationChannels: config.notifications,
-      createdBy: meta2.requestedByUserId,
-      requireActionableWorkflow: true
-    });
-    if (created.status === "cancelled") {
-      return {
-        status: "success",
-        async: true,
-        waitFor: "approval.resolved",
-        correlationId: requestId
-      };
-    }
-    if (config.notifications?.length) {
-      this.dispatchNotifications(requestId, config, db).catch((err) => {
-        console.error("[HITL] Unexpected error dispatching notifications:", scrubSecrets(err instanceof Error ? err.message : String(err)));
-      });
-    }
-    return {
-      status: "success",
-      async: true,
-      waitFor: "approval.resolved",
-      correlationId: requestId
-    };
-  }
-  async dispatchNotifications(requestId, config, db) {
-    if (!config.notifications?.length)
-      return;
-    const approvalUrl = `${getAppUrl()}/approval-requests/${requestId}`;
-    const updatedChannels = [...config.notifications];
-    let updated = false;
-    for (let i = 0;i < config.notifications.length; i++) {
-      const notification = config.notifications[i];
-      if (notification.channel === "email") {
-        console.warn(`[HITL] Email notifications not yet supported (target: ${notification.target})`);
-        continue;
-      }
-      if (notification.channel === "slack") {
-        try {
-          const { getSlackApp: getSlackApp2 } = await import("./app-g26wdcz6.js");
-          const slackApp = getSlackApp2();
-          if (!slackApp) {
-            console.warn("[HITL] Slack not initialized — cannot send notification");
-            continue;
-          }
-          const questions = Array.isArray(config.questions) ? config.questions : [];
-          const questionsText = buildSlackQuestionsSummary(questions);
-          const timeoutCaption = config.timeout ? [
-            {
-              type: "context",
-              elements: [
-                {
-                  type: "mrkdwn",
-                  text: `⏱ Timeout: ${formatTimeout(config.timeout.seconds)} — times out if not responded`
-                }
-              ]
-            }
-          ] : [];
-          const blocks = [
-            {
-              type: "section",
-              text: {
-                type: "mrkdwn",
-                text: `\uD83D\uDD14 *Approval Required: ${config.title}*`
-              }
-            },
-            {
-              type: "section",
-              text: {
-                type: "mrkdwn",
-                text: questionsText
-              }
-            },
-            {
-              type: "actions",
-              elements: [
-                {
-                  type: "button",
-                  text: { type: "plain_text", text: "Review & Respond" },
-                  url: approvalUrl,
-                  style: "primary"
-                }
-              ]
-            },
-            ...timeoutCaption
-          ];
-          const result = await slackApp.client.chat.postMessage({
-            channel: notification.target,
-            text: `Approval Required: ${config.title} — ${approvalUrl}`,
-            unfurl_links: false,
-            unfurl_media: false,
-            blocks
-          });
-          if (result.ts) {
-            updatedChannels[i] = { ...notification, messageTs: result.ts };
-            updated = true;
-          }
-          console.log(`[HITL] Slack notification sent to ${notification.target} for request ${requestId}`);
-        } catch (err) {
-          console.error(`[HITL] Failed to send Slack notification to ${notification.target}:`, scrubSecrets(err instanceof Error ? err.message : String(err)));
-        }
-      }
-    }
-    if (updated) {
-      try {
-        await db.updateApprovalRequestNotifications(requestId, updatedChannels);
-        const latest = await db.getApprovalRequestById(requestId);
-        if (latest?.status === "cancelled") {
-          await postApprovalCancellationUpdates([latest], latest.resolutionReason ?? "Workflow run cancelled");
-        }
-      } catch (err) {
-        console.error("[HITL] Failed to update notification channels in DB:", scrubSecrets(err instanceof Error ? err.message : String(err)));
-      }
-    }
-  }
-}
-function formatTimeout(seconds) {
-  if (seconds < 60)
-    return `${seconds}s`;
-  if (seconds < 3600)
-    return `${Math.round(seconds / 60)}m`;
-  const hours = Math.floor(seconds / 3600);
-  const mins = Math.round(seconds % 3600 / 60);
-  return mins > 0 ? `${hours}h ${mins}m` : `${hours}h`;
-}
-
 // src/workflows/executors/notify.ts
 init_zod();
 var NotifyConfigSchema = exports_external.object({
@@ -131937,7 +132187,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp: getSlackApp2 } = await import("./app-g26wdcz6.js");
+        const { getSlackApp: getSlackApp2 } = await import("./app-y1b9srva.js");
         const app = getSlackApp2();
         if (!app) {
           return {
@@ -132049,26 +132299,6 @@ function evaluateCondition(op, actual, expected) {
 
 // src/workflows/executors/raw-llm.ts
 init_zod();
-
-// src/workflows/executors/workflow-llm.ts
-async function resolveWorkflowLlmConfig(requestedModel, env = process.env) {
-  const credential = await resolveCredential({ env });
-  if (!credential) {
-    throw new Error("No workflow LLM credential found. Set OPENROUTER_API_KEY or OPENAI_API_KEY.");
-  }
-  if (credential.kind !== "openrouter" && credential.kind !== "openai") {
-    throw new Error(`Workflow LLM nodes do not support the resolved ${credential.kind} credential yet. Set OPENROUTER_API_KEY or OPENAI_API_KEY.`);
-  }
-  const providerPrefix = `${credential.kind}/`;
-  const model = requestedModel ?? DEFAULT_MODEL[credential.kind];
-  return {
-    apiKey: credential.apiKey,
-    baseURL: credential.kind === "openrouter" ? getOpenRouterBaseUrl(env) : undefined,
-    model: model.startsWith(providerPrefix) ? model.slice(providerPrefix.length) : model
-  };
-}
-
-// src/workflows/executors/raw-llm.ts
 var RawLlmConfigSchema = exports_external.object({
   prompt: exports_external.string(),
   model: exports_external.string().optional(),
@@ -132091,7 +132321,7 @@ async function executeRawLlm(config) {
     });
     const model = provider(llmConfig.model);
     if (config.schema) {
-      const { generateObject, jsonSchema } = await import("./index-f24115ge.js");
+      const { generateObject, jsonSchema } = await import("./index-2wsdsnmm.js");
       const { object: object4 } = await generateObject({
         model,
         schema: jsonSchema(config.schema),
@@ -132105,7 +132335,7 @@ async function executeRawLlm(config) {
         output: { result: object4, model: modelName }
       };
     }
-    const { generateText } = await import("./index-f24115ge.js");
+    const { generateText } = await import("./index-2wsdsnmm.js");
     const { text } = await generateText({
       model,
       prompt: config.prompt
@@ -132543,7 +132773,7 @@ class ValidateExecutor extends BaseExecutor {
     const outputStr = typeof targetOutput === "string" ? targetOutput : JSON.stringify(targetOutput);
     try {
       const { createOpenAI } = await import("./index-n5t1gzfb.js");
-      const { generateObject, jsonSchema } = await import("./index-f24115ge.js");
+      const { generateObject, jsonSchema } = await import("./index-2wsdsnmm.js");
       const llmConfig = await resolveWorkflowLlmConfig();
       const provider = createOpenAI({
         baseURL: llmConfig.baseURL,
@@ -132713,6 +132943,7 @@ function createExecutorRegistry(deps) {
   registry3.register(new CodeMatchExecutor(deps));
   registry3.register(new NotifyExecutor(deps));
   registry3.register(new RawLlmExecutor(deps));
+  registry3.register(new SystemOneDecisionExecutor(deps));
   registry3.register(new ScriptExecutor(deps));
   registry3.register(new SwarmScriptExecutor(deps));
   registry3.register(new VcsExecutor(deps));
@@ -132761,4 +132992,4 @@ async function initWorkflows() {
   logOpenWebhookTriggers();
 }
 
-export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, findUserById, findUserByExternalId, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, mintSessionToken, revokeSessionToken, fingerprintApiKey, resolveIdentity, renderIdentity, createAdditiveBuffer, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, automationIntegrationFixUrl, preflightAutomation, getAutomationSetupStates, listEnabledAutomationPreflightInputs, validateJsonSchema, TriggerSchemaError, startWorkflowExecution, createApprovalFollowUpTask, setupWorkflowResumeListener, retryFailedRun, cancelWorkflowRun, resumeWaitState, initWaitBusSubscriptions, subscribeWaitToBus, recoverIncompleteRuns, startRetryPoller, stopRetryPoller, validateTemplateVariables, instantiateTemplate, handleWebhookTrigger, logOpenWebhookTriggers, handleEventTrigger, handleScheduleTrigger, verifyHmacSignature, WebhookError, snapshotWorkflow, snapshotAndUpdateWorkflow, startWaitPoller, stopWaitPoller, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry, initWorkflows, dispatchScheduleTarget, calculateNextRun, startScheduler, stopScheduler, runScheduleNow, parseSkillContent, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, toolErr, createToolRegistrar, warnIfCorsAllowsAnyOrigin, isOriginAllowedForCredentials, allowedCredentialRedirect, setCorsHeaders, parseQueryParams, getPathSegments, wireHttpSpanLifecycle, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, runtimeInstanceHeader, describeRequestRoute, route, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError, isRegistered, isExtensionAgentId, getExtensionBridgeToken, resolveBridgeCallOrigin, extensionIdForAgent, runContext, registerLoaded, unregister, listRegistered, dispatchPre, dispatchPost, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, AGENT_MAX_TASKS_CONFIG_KEY, reconcileAgentMaxTasksPolicy, resetAgentMaxTasksMirror, upsertSwarmConfigWithPolicyMirror, runtimeStaleThresholdMinutes, upsertRuntimeInstance, getRuntimeInstanceById, touchRuntimeInstance, countActiveRuntimeInstancesForAgent, listRuntimeInstancesForAgent, setRuntimeCredentialReady, reconcileAgentStatusFromRuntimes, agentsWithLiveRuntime, expireStaleRuntimeInstances, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2 as handleIssue1, handleNote, handlePipeline, repointTrackerSyncBySwarmId, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, parseCookieHeader, extractAndVerifyCookie, issuePageSessionCookie, resolveHttpRequestAuth, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, userCtx, resolveTaskAuditUserId, resolveHttpAuditUserId, resolveHttpFavoriteOwner, handleApps, cancelApprovalRequest, cancelApprovalRequestAndRun, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, reservedRoomKeyError, refreshLinks, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, indexMemoryContent, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, taskActionInputSchema, taskActionOutputSchema, taskActionHandler, patchWorkflowDefinition, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };
+export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, findUserById, findUserByExternalId, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, mintSessionToken, revokeSessionToken, fingerprintApiKey, resolveIdentity, renderIdentity, createAdditiveBuffer, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, automationIntegrationFixUrl, preflightAutomation, getAutomationSetupStates, listEnabledAutomationPreflightInputs, validateJsonSchema, workflowSaveWarnings, TriggerSchemaError, startWorkflowExecution, setupWorkflowResumeListener, retryFailedRun, cancelWorkflowRun, resumeWaitState, initWaitBusSubscriptions, subscribeWaitToBus, recoverIncompleteRuns, startRetryPoller, stopRetryPoller, validateTemplateVariables, instantiateTemplate, handleWebhookTrigger, logOpenWebhookTriggers, handleEventTrigger, handleScheduleTrigger, verifyHmacSignature, WebhookError, snapshotWorkflow, snapshotAndUpdateWorkflow, startWaitPoller, stopWaitPoller, listHarnessModelSupport, recordHarnessModelSupport, agentRanModel, getAgentHarnessCliVersion, setAgentHarnessCliVersion, sanitizeModelTierOverrides, parseModelTierOverridesHeader, setAgentModelTierOverrides, previewModelTiers, recordClaimModelResolution, explicitModelError, explicitModelErrorForAgent, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry, initWorkflows, dispatchScheduleTarget, calculateNextRun, startScheduler, stopScheduler, runScheduleNow, parseSkillContent, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, toolErr, createToolRegistrar, warnIfCorsAllowsAnyOrigin, isOriginAllowedForCredentials, allowedCredentialRedirect, setCorsHeaders, parseQueryParams, getPathSegments, wireHttpSpanLifecycle, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, runtimeInstanceHeader, describeRequestRoute, route, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError, isRegistered, isExtensionAgentId, getExtensionBridgeToken, resolveBridgeCallOrigin, extensionIdForAgent, runContext, registerLoaded, unregister, listRegistered, dispatchPre, dispatchPost, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, AGENT_MAX_TASKS_CONFIG_KEY, reconcileAgentMaxTasksPolicy, resetAgentMaxTasksMirror, upsertSwarmConfigWithPolicyMirror, runtimeStaleThresholdMinutes, upsertRuntimeInstance, getRuntimeInstanceById, touchRuntimeInstance, countActiveRuntimeInstancesForAgent, listRuntimeInstancesForAgent, setRuntimeCredentialReady, reconcileAgentStatusFromRuntimes, agentsWithLiveRuntime, expireStaleRuntimeInstances, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2 as handleIssue1, handleNote, handlePipeline, repointTrackerSyncBySwarmId, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, parseCookieHeader, extractAndVerifyCookie, issuePageSessionCookie, resolveHttpRequestAuth, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, userCtx, resolveTaskAuditUserId, resolveHttpAuditUserId, resolveHttpFavoriteOwner, handleApps, cancelApprovalRequest, cancelApprovalRequestAndRun, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, reservedRoomKeyError, refreshLinks, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, indexMemoryContent, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, taskActionInputSchema, taskActionOutputSchema, taskActionHandler, patchWorkflowDefinition, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };