@desplega.ai/agent-swarm 1.165.0 → 1.167.0

package/dist/{render-v2-tch4nefj.js → render-v2-k50j33qd.js}

@@ -16,34 +16,34 @@ import {
   slackErrorSummary,
   streamOutcomeCard,
   withStatusLead
-} from "./cli-0n4fasz0.js";
+} from "./cli-c8r99akr.js";
 import"./cli-q51yprfq.js";
 import"./cli-3er6gcsn.js";
-import"./cli-cvk6yzw5.js";
 import"./cli-yatxqynm.js";
 import"./cli-bd957dgb.js";
 import"./cli-pzxba7gw.js";
-import"./cli-qdv8kgz7.js";
-import"./cli-9s3h836g.js";
+import"./cli-mkdsy1nq.js";
 import"./cli-3qhyh31j.js";
-import"./cli-3a4m1aws.js";
+import"./cli-xvdgasgy.js";
+import"./cli-mxvnnv5q.js";
 import"./cli-7mm2r1kp.js";
 import"./cli-g5erf0zt.js";
 import"./cli-dmtrxqhg.js";
-import"./cli-tadfgd0t.js";
-import"./cli-ywybs5as.js";
-import"./cli-gd4favx9.js";
 import"./cli-agamgm0p.js";
 import"./cli-5c2j5yvx.js";
 import"./cli-1a2j50m0.js";
+import"./cli-tadfgd0t.js";
+import"./cli-ywybs5as.js";
 import"./cli-f9w1semm.js";
+import"./cli-a35hzdve.js";
+import"./cli-gd4favx9.js";
 import"./cli-ej6gbxfb.js";
-import"./cli-zsh093hk.js";
+import"./cli-014vns2y.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-1kzfvd1z.js";
+import"./cli-ymmc1zxg.js";
 import"./cli-zf8jjwex.js";
-import"./cli-h1spv8v4.js";
+import"./cli-wt7ccy4r.js";
 import"./cli-bc05qbss.js";
 export {
   _noteOutcomeDeliveryFailureForTests,

package/dist/{runtime-v2t1r79e.js → runtime-h9ha1mq6.js}

@@ -5,10 +5,10 @@ import {
   McpSignInCancelledError,
   createDefaultTransport,
   signInMcpServer
-} from "./cli-x3x0qwky.js";
-import"./cli-krqm5f11.js";
-import"./cli-8ssjez7e.js";
-import"./cli-cwxhbf43.js";
+} from "./cli-bxqez1p0.js";
+import"./cli-xezn9nkh.js";
+import"./cli-rhy7z1rp.js";
+import"./cli-5t5my0h8.js";
 import"./cli-5bfdm1ah.js";
 import"./cli-0m7wct0d.js";
 import"./cli-2x0e561b.js";

package/dist/{setup-rcm303ns.js → setup-4syh0pd2.js}

@@ -4,7 +4,7 @@ import {
   createDefaultMcpJson,
   createDefaultSettingsLocal,
   createHooksConfig
-} from "./cli-9866bd07.js";
+} from "./cli-6vfz44sr.js";
 import {
   require_jsx_dev_runtime
 } from "./cli-t3p77qk1.js";
@@ -21,7 +21,7 @@ import {
 } from "./cli-fkqhbg8g.js";
 import"./cli-0xqde53b.js";
 import"./cli-pqetb83f.js";
-import"./cli-1kzfvd1z.js";
+import"./cli-ymmc1zxg.js";
 import {
   __toESM
 } from "./cli-bc05qbss.js";

package/dist/{typesafe-system-one-datfr82p.js → typesafe-system-one-e988vty7.js}

@@ -1,12 +1,14 @@
 import {
-  classifySystemOne,
+  classifySystemOne
+} from "./cli-nkqjj42q.js";
+import {
   isRecord
-} from "./cli-gvcgmx69.js";
-import"./cli-qbksc292.js";
+} from "./cli-q1vnz8wv.js";
+import"./cli-zy39d433.js";
 import"./cli-6map995v.js";
 import"./cli-7kyk9jr3.js";
-import"./cli-nexwh8zg.js";
-import"./cli-bzr0ftht.js";
+import"./cli-g7k7zbcz.js";
+import"./cli-wnb9b2g3.js";
 import"./cli-bc05qbss.js";
 
 // node_modules/@earendil-works/pi-ai/dist/api/typesafe-system-one.js

package/dist/{virtual-modules-wm8mxdxx.js → virtual-modules-ftr9kwe8.js}

@@ -1,15 +1,15 @@
 import {
   exports_dist,
   exports_dist1 as exports_dist3
-} from "./cli-nvvfd8bq.js";
-import"./cli-4mevd1hf.js";
-import"./cli-qvfk83fy.js";
-import"./cli-krqm5f11.js";
-import"./cli-8ssjez7e.js";
-import"./cli-6zcfw0x7.js";
+} from "./cli-jbzbr36n.js";
+import"./cli-s9y81s7j.js";
+import"./cli-13xwcqvj.js";
+import"./cli-xezn9nkh.js";
+import"./cli-rhy7z1rp.js";
+import"./cli-y195hv1a.js";
 import {
   exports_dist as exports_dist2
-} from "./cli-cwxhbf43.js";
+} from "./cli-5t5my0h8.js";
 import"./cli-5bfdm1ah.js";
 import"./cli-0m7wct0d.js";
 import"./cli-7nxes1hs.js";
@@ -18,7 +18,7 @@ import {
   exports_compat,
   exports_compile,
   exports_value
-} from "./cli-pkke6geq.js";
+} from "./cli-km4x66j0.js";
 import {
   exports_build
 } from "./cli-rb9m6rpe.js";
@@ -28,11 +28,11 @@ import"./cli-ydt3zkwv.js";
 import"./cli-3er6gcsn.js";
 import"./cli-0xqde53b.js";
 import"./cli-pqetb83f.js";
-import"./cli-b0f70z24.js";
-import"./cli-nexwh8zg.js";
+import"./cli-mn8qkd8v.js";
+import"./cli-g7k7zbcz.js";
 import"./cli-btbzvq95.js";
 import"./cli-1m2e086m.js";
-import"./cli-bzr0ftht.js";
+import"./cli-wnb9b2g3.js";
 import"./cli-bc05qbss.js";
 
 // node_modules/@earendil-works/pi-ai/dist/oauth.js

package/dist/{work-objects-ctg7t70w.js → work-objects-jcdbg8rr.js}

@@ -1,31 +1,27 @@
 import {
   isUserAllowed
-} from "./cli-90v942q1.js";
-import"./cli-8gpbwy09.js";
-import"./cli-j0pdrmwg.js";
-import"./cli-50eg13rj.js";
-import"./cli-x7afk5wm.js";
-import"./cli-420bdgw0.js";
+} from "./cli-6qxmjpem.js";
+import"./cli-1yrcfa5s.js";
+import"./cli-y0kjpfm9.js";
+import"./cli-wydz3feg.js";
+import"./cli-xvc3q9br.js";
+import"./cli-mv2520nm.js";
 import"./cli-w0bwte75.js";
 import"./cli-re8z5p8p.js";
-import"./cli-k6xx3pve.js";
-import"./cli-e7t4snpa.js";
-import"./cli-nfygw434.js";
-import"./cli-xtgtyafv.js";
+import"./cli-tx2zvn23.js";
+import"./cli-p8rt8spp.js";
+import"./cli-v1pwxreq.js";
+import"./cli-577bxkf6.js";
 import"./cli-epan13p1.js";
 import"./cli-f14fvzag.js";
+import"./cli-7mhy3ths.js";
+import"./cli-v1w7pbd8.js";
 import"./cli-zt3w1cn1.js";
-import"./cli-xb3c6aat.js";
-import"./cli-ftry7975.js";
-import"./cli-3dpj7atn.js";
-import"./cli-2x0e561b.js";
-import"./cli-pkke6geq.js";
+import"./cli-km4x66j0.js";
 import"./cli-rb9m6rpe.js";
+import"./cli-2x0e561b.js";
+import"./cli-kw0jcfje.js";
 import"./cli-mzfth0bp.js";
-import"./cli-jqt9hrnz.js";
-import"./cli-yhmwmv0g.js";
-import"./cli-wfajtmf7.js";
-import"./cli-a87b04k8.js";
 import"./cli-fad8m16k.js";
 import"./cli-bsakbbkm.js";
 import"./cli-zxg80zs9.js";
@@ -34,49 +30,49 @@ import"./cli-ydt3zkwv.js";
 import {
   getTaskUrl,
   slackTaskOutput
-} from "./cli-0n4fasz0.js";
+} from "./cli-c8r99akr.js";
 import"./cli-q51yprfq.js";
 import"./cli-3er6gcsn.js";
-import"./cli-cvk6yzw5.js";
 import"./cli-yatxqynm.js";
-import"./cli-b0f70z24.js";
-import"./cli-nexwh8zg.js";
+import"./cli-mn8qkd8v.js";
+import"./cli-g7k7zbcz.js";
 import"./cli-btbzvq95.js";
 import"./cli-1m2e086m.js";
-import"./cli-bzr0ftht.js";
+import"./cli-wnb9b2g3.js";
 import"./cli-bd957dgb.js";
 import"./cli-pzxba7gw.js";
-import"./cli-xnzrzets.js";
+import"./cli-ypgba1a8.js";
 import"./cli-rfphkzh5.js";
 import {
   getAgentById,
   getTaskById,
-  init_db
-} from "./cli-qdv8kgz7.js";
-import"./cli-9s3h836g.js";
+  init_db1 as init_db
+} from "./cli-mkdsy1nq.js";
 import"./cli-3qhyh31j.js";
-import"./cli-3a4m1aws.js";
+import"./cli-xvdgasgy.js";
+import"./cli-mxvnnv5q.js";
 import"./cli-7mm2r1kp.js";
 import"./cli-g5erf0zt.js";
 import"./cli-dmtrxqhg.js";
-import"./cli-tadfgd0t.js";
-import"./cli-ywybs5as.js";
-import"./cli-gd4favx9.js";
 import"./cli-agamgm0p.js";
 import"./cli-5c2j5yvx.js";
 import"./cli-1a2j50m0.js";
+import"./cli-tadfgd0t.js";
+import"./cli-ywybs5as.js";
 import"./cli-f9w1semm.js";
+import"./cli-a35hzdve.js";
+import"./cli-gd4favx9.js";
 import {
   init_env_flag,
   isEnvFlagEnabled
 } from "./cli-ej6gbxfb.js";
-import"./cli-zsh093hk.js";
+import"./cli-014vns2y.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-1kzfvd1z.js";
-import"./cli-hpryr6em.js";
+import"./cli-ymmc1zxg.js";
+import"./cli-mb75wpxf.js";
 import"./cli-zf8jjwex.js";
-import"./cli-h1spv8v4.js";
+import"./cli-wt7ccy4r.js";
 import"./cli-bc05qbss.js";
 
 // src/slack/work-objects.ts

package/dist/{worker-5dp0xm55.js → worker-x8j8c9sx.js}

@@ -1,105 +1,101 @@
 import {
   runAgent
-} from "./cli-bns5c8k9.js";
+} from "./cli-cf2vgn9d.js";
 import"./cli-9q3wt23f.js";
-import"./cli-9xb89xca.js";
-import"./cli-amwhs8h2.js";
-import"./cli-5anb0ev3.js";
-import"./cli-28smfvbn.js";
-import"./cli-59jn5twa.js";
-import"./cli-hsxj0yar.js";
-import"./cli-mmzwwptd.js";
-import"./cli-zn2v3t8v.js";
-import"./cli-gh5yqzpe.js";
-import"./cli-pjxnr1jn.js";
+import"./cli-6bpvv8h4.js";
+import"./cli-ykt8f7va.js";
+import"./cli-cexctgn5.js";
 import"./cli-9k7mqz00.js";
+import"./cli-m7vmeepg.js";
+import"./cli-tc5zec7v.js";
+import"./cli-hsxj0yar.js";
+import"./cli-hf5s9pgf.js";
+import"./cli-jvmtxqtc.js";
 import"./cli-gt4hxb8p.js";
-import"./cli-n9ehc28t.js";
-import"./cli-bdv39kgj.js";
-import"./cli-zvckv750.js";
+import"./cli-pkj1w46r.js";
+import"./cli-ty4bzkqr.js";
+import"./cli-5bfdm1ah.js";
+import"./cli-efnd2kce.js";
+import"./cli-zp67qg5x.js";
+import"./cli-bqjfjex4.js";
+import"./cli-mxry91sa.js";
+import"./cli-z1dqhc9y.js";
+import"./cli-69egj654.js";
 import"./cli-v6vv7dy8.js";
 import"./cli-q2j38vre.js";
-import"./cli-zm7njwzd.js";
-import"./cli-ptcz1cqy.js";
-import"./cli-32bca7nr.js";
-import"./cli-5b2fjjzh.js";
+import"./cli-r7eeddkq.js";
 import"./cli-hp1n6zq3.js";
 import"./cli-tng3131n.js";
-import"./cli-5bfdm1ah.js";
-import"./cli-efnd2kce.js";
-import"./cli-fw6vdcq5.js";
-import"./cli-bqjfjex4.js";
+import"./cli-zm7njwzd.js";
+import"./cli-ptcz1cqy.js";
+import"./cli-7avy4v8w.js";
 import"./cli-eree7rnv.js";
 import"./cli-2pdaysab.js";
-import"./cli-ttbsse3f.js";
-import"./cli-ma3zvh39.js";
+import"./cli-tmhsxhb8.js";
+import"./cli-5qkcdv8c.js";
 import"./cli-dpvkp2et.js";
 import {
   getEnabledCapabilities
-} from "./cli-50eg13rj.js";
-import"./cli-x7afk5wm.js";
-import"./cli-420bdgw0.js";
+} from "./cli-wydz3feg.js";
+import"./cli-xvc3q9br.js";
+import"./cli-mv2520nm.js";
 import"./cli-w0bwte75.js";
 import"./cli-re8z5p8p.js";
-import"./cli-k6xx3pve.js";
-import"./cli-e7t4snpa.js";
-import"./cli-nfygw434.js";
-import"./cli-xtgtyafv.js";
+import"./cli-tx2zvn23.js";
+import"./cli-p8rt8spp.js";
+import"./cli-v1pwxreq.js";
+import"./cli-577bxkf6.js";
 import"./cli-epan13p1.js";
 import"./cli-f14fvzag.js";
+import"./cli-7mhy3ths.js";
+import"./cli-v1w7pbd8.js";
 import"./cli-zt3w1cn1.js";
-import"./cli-xb3c6aat.js";
-import"./cli-ftry7975.js";
-import"./cli-3dpj7atn.js";
-import"./cli-2x0e561b.js";
-import"./cli-pkke6geq.js";
+import"./cli-km4x66j0.js";
 import"./cli-rb9m6rpe.js";
+import"./cli-2x0e561b.js";
+import"./cli-kw0jcfje.js";
 import"./cli-mzfth0bp.js";
-import"./cli-jqt9hrnz.js";
-import"./cli-yhmwmv0g.js";
-import"./cli-wfajtmf7.js";
-import"./cli-a87b04k8.js";
 import"./cli-fad8m16k.js";
 import"./cli-bsakbbkm.js";
 import"./cli-zxg80zs9.js";
 import"./cli-51tf7ac3.js";
 import"./cli-ydt3zkwv.js";
-import"./cli-0n4fasz0.js";
+import"./cli-c8r99akr.js";
 import"./cli-q51yprfq.js";
 import"./cli-3er6gcsn.js";
-import"./cli-cvk6yzw5.js";
 import"./cli-yatxqynm.js";
-import"./cli-b0f70z24.js";
-import"./cli-nexwh8zg.js";
+import"./cli-mn8qkd8v.js";
+import"./cli-g7k7zbcz.js";
 import"./cli-btbzvq95.js";
 import"./cli-1m2e086m.js";
-import"./cli-bzr0ftht.js";
+import"./cli-wnb9b2g3.js";
 import"./cli-bd957dgb.js";
 import"./cli-pzxba7gw.js";
-import"./cli-xnzrzets.js";
+import"./cli-ypgba1a8.js";
 import"./cli-rfphkzh5.js";
-import"./cli-qdv8kgz7.js";
-import"./cli-9s3h836g.js";
+import"./cli-mkdsy1nq.js";
 import"./cli-3qhyh31j.js";
-import"./cli-3a4m1aws.js";
+import"./cli-xvdgasgy.js";
+import"./cli-mxvnnv5q.js";
 import"./cli-7mm2r1kp.js";
 import"./cli-g5erf0zt.js";
 import"./cli-dmtrxqhg.js";
-import"./cli-tadfgd0t.js";
-import"./cli-ywybs5as.js";
-import"./cli-gd4favx9.js";
 import"./cli-agamgm0p.js";
 import"./cli-5c2j5yvx.js";
 import"./cli-1a2j50m0.js";
+import"./cli-tadfgd0t.js";
+import"./cli-ywybs5as.js";
 import"./cli-f9w1semm.js";
+import"./cli-a35hzdve.js";
+import"./cli-gd4favx9.js";
 import"./cli-ej6gbxfb.js";
-import"./cli-zsh093hk.js";
+import"./cli-014vns2y.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-1kzfvd1z.js";
-import"./cli-hpryr6em.js";
+import"./cli-ymmc1zxg.js";
+import"./cli-mb75wpxf.js";
 import"./cli-zf8jjwex.js";
-import"./cli-h1spv8v4.js";
+import"./cli-wt7ccy4r.js";
 import"./cli-knd276ed.js";
 import"./cli-bc05qbss.js";
 

package/dist/{x-v3yw66zs.js → x-ma4gnfgy.js}

@@ -3,11 +3,11 @@ import {
   executeComposioRequest,
   formatComposioResultForCli,
   parseComposioArgs
-} from "./cli-x7afk5wm.js";
+} from "./cli-xvc3q9br.js";
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-h1spv8v4.js";
+} from "./cli-wt7ccy4r.js";
 import"./cli-bc05qbss.js";
 
 // src/commands/x.ts

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "1.165.0",
+    "version": "1.167.0",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [
@@ -755,6 +755,8 @@
             "type": "string",
             "enum": [
               "opencode",
+              "gemini",
+              "copilot",
               "custom"
             ]
           },
@@ -9638,7 +9640,7 @@
             }
           },
           "400": {
-            "description": "Invalid or disallowed SQL",
+            "description": "Invalid or disallowed SQL, including queries that read credential tables",
             "content": {
               "application/json": {
                 "schema": {
@@ -10286,6 +10288,7 @@
                         "enum": [
                           "opencode",
                           "gemini",
+                          "copilot",
                           "custom"
                         ]
                       },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "1.165.0",
+  "version": "1.167.0",
   "description": "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
   "keywords": [
     "agent-swarm.dev",
@@ -95,6 +95,8 @@
     "check:extension-schema": "bun scripts/build-extension-manifest-schema.ts --check",
     "build:extension-catalog": "bun scripts/build-extension-catalog.ts",
     "check:extension-catalog": "bun scripts/build-extension-catalog.ts --check",
+    "build:secret-rules": "bun scripts/gen-secret-rules.ts",
+    "check:secret-rules": "bun scripts/gen-secret-rules.ts --check",
     "build:cli": "bun run scripts/build-cli.ts",
     "mono:build": "turbo run build",
     "mono:test": "turbo run test",
@@ -145,8 +147,8 @@
     "start:portless": "portless api.swarm bun --expose-gc src/http.ts",
     "inspector": "bunx @modelcontextprotocol/inspector --transport stdio bun src/stdio.ts",
     "inspector:http": "bunx @modelcontextprotocol/inspector --transport http https://api.swarm.localhost:1355/mcp",
-    "lint": "biome check src apps/evals packages/ui-e2e packages/model-routing",
-    "lint:fix": "biome check --write src apps/evals packages/ui-e2e packages/model-routing",
+    "lint": "biome check src apps/evals packages/ui-e2e packages/model-routing packages/model-catalog",
+    "lint:fix": "biome check --write src apps/evals packages/ui-e2e packages/model-routing packages/model-catalog",
     "format": "biome format --write src",
     "build:binary": "bun build ./src/cli.tsx ./src/providers/pi-binary-root/src/extensions/codemode/worker.ts --root ./src/providers/pi-binary-root --compile --bytecode --format=esm --compile-exec-argv='--expose-gc' --target=bun-linux-x64 --outfile ./dist/agent-swarm",
     "build:binary:arm64": "bun build ./src/cli.tsx ./src/providers/pi-binary-root/src/extensions/codemode/worker.ts --root ./src/providers/pi-binary-root --compile --bytecode --format=esm --compile-exec-argv='--expose-gc' --target=bun-linux-arm64 --outfile ./dist/agent-swarm",
@@ -200,20 +202,21 @@
   "dependencies": {
     "@agentclientprotocol/sdk": "1.7.0",
     "@ai-sdk/openai": "^3.0.41",
-    "@anthropic-ai/claude-agent-sdk": "0.3.292",
-    "@anthropic-ai/sdk": "^0.131.0",
+    "@anthropic-ai/claude-agent-sdk": "0.3.293",
+    "@anthropic-ai/sdk": "^0.132.1",
     "@asteasolutions/zod-to-openapi": "^8.0.0",
     "@aws-sdk/client-bedrock": "3.1048.0",
-    "@cursor/sdk": "1.0.36",
+    "@cursor/sdk": "1.0.37",
     "@desplega.ai/business-use": "^0.4.2",
     "@desplega.ai/localtunnel": "^2.2.0",
-    "@earendil-works/pi-agent-core": "^1.0.4",
-    "@earendil-works/pi-ai": "^1.0.4",
-    "@earendil-works/pi-coding-agent": "^1.0.4",
+    "@earendil-works/pi-agent-core": "^1.1.0",
+    "@earendil-works/pi-ai": "^1.1.0",
+    "@earendil-works/pi-coding-agent": "^1.1.0",
     "@inkjs/ui": "^2.0.0",
+    "@jitl/quickjs-singlefile-mjs-release-sync": "0.32.0",
     "@linear/sdk": "^77.0.0",
-    "@modelcontextprotocol/sdk": "1.29.0",
-    "@openai/codex": "0.160.1",
+    "@modelcontextprotocol/sdk": "1.31.0",
+    "@openai/codex": "0.161.0",
     "@opencode-ai/sdk": "^1.18.35",
     "@openfort/openfort-node": "^0.9.1",
     "@opentelemetry/api": "^1.9.1",
@@ -237,6 +240,7 @@
     "ink": "^6.5.1",
     "oauth4webapi": "^3.8.5",
     "openai": "^6.22.0",
+    "quickjs-emscripten-core": "0.32.0",
     "react": "19.2.3",
     "react-devtools-core": "^7.0.1",
     "sqlite-vec": "^0.1.9",

package/src/be/automation-preflight.ts

@@ -1,8 +1,10 @@
 import type { AutomationIntegrationId, ScheduledTask, Workflow } from "@/types";
 import { getSlackConfiguration, isSlackConfigured } from "../slack/config";
 import { isEnvFlagEnabled } from "../utils/env-flag";
+import { scrubSecrets } from "../utils/secret-scrubber";
 import { getDbClient } from "./db";
 import { getOAuthApp, getOAuthTokens } from "./db-queries/oauth";
+import { scrubJsonValue } from "./scrub-json";
 
 export type AutomationKind = "schedule" | "workflow";
 export type AutomationState = "running" | "needs_setup";
@@ -349,6 +351,9 @@ export async function recordSchedulePreflightFailure(
   failureReason: string,
   now: Date = new Date(),
 ): Promise<boolean> {
+  // Scrub before the same-day dedup compare: the stored message is scrubbed,
+  // so a raw reason would never match it and the dedup would stop working.
+  const message = scrubSecrets(failureReason);
   return await getDbClient().transaction(async (tx) => {
     const row = await tx.get<{ lastErrorAt: string | null; lastErrorMessage: string | null }>(
       "SELECT lastErrorAt, lastErrorMessage FROM scheduled_tasks WHERE id = ?",
@@ -356,7 +361,7 @@ export async function recordSchedulePreflightFailure(
     );
     if (!row) return false;
     if (
-      row.lastErrorMessage === failureReason &&
+      row.lastErrorMessage === message &&
       row.lastErrorAt?.slice(0, 10) === now.toISOString().slice(0, 10)
     ) {
       return false;
@@ -365,7 +370,7 @@ export async function recordSchedulePreflightFailure(
       `UPDATE scheduled_tasks
        SET lastErrorAt = ?, lastErrorMessage = ?, lastUpdatedAt = ?
        WHERE id = ?`,
-      [now.toISOString(), failureReason, now.toISOString(), scheduleId],
+      [now.toISOString(), message, now.toISOString(), scheduleId],
     );
     return true;
   });
@@ -404,8 +409,8 @@ export async function recordWorkflowPreflightFailure(input: {
         runId,
         input.workflowId,
         input.triggerType,
-        input.triggerData === undefined ? null : JSON.stringify(input.triggerData),
-        input.failureReason,
+        input.triggerData === undefined ? null : scrubJsonValue(input.triggerData),
+        scrubSecrets(input.failureReason),
         input.createdBy ?? null,
         timestamp,
         timestamp,