@desplega.ai/agent-swarm 1.167.0 → 1.168.0

package/dist/{cli-ypgba1a8.js → cli-0jngabtb.js}

@@ -6,7 +6,7 @@ import {
   getDb,
   getDbClient,
   init_db1 as init_db
-} from "./cli-mkdsy1nq.js";
+} from "./cli-74ez9b66.js";
 import {
   init_env_flag,
   isEnvFlagEnabled

package/dist/{cli-tx2zvn23.js → cli-43jg9xdw.js}

@@ -1,14 +1,14 @@
 import {
   seedPricingFromModelsDev
-} from "./cli-v1pwxreq.js";
+} from "./cli-ewhwpyrb.js";
 import {
   ensureRbacSeedsSynced,
   init_rbac_roles
-} from "./cli-ypgba1a8.js";
+} from "./cli-0jngabtb.js";
 import {
   getDb,
   init_db1 as init_db
-} from "./cli-mkdsy1nq.js";
+} from "./cli-74ez9b66.js";
 
 // src/be/boot-seeds.ts
 init_db();

package/dist/{cli-6qxmjpem.js → cli-47zfzshm.js}

@@ -5,12 +5,12 @@ import {
   instantFlush,
   requestSlackThreadSteering,
   wasEventSeen
-} from "./cli-1yrcfa5s.js";
+} from "./cli-svah6b6w.js";
 import {
   enrichSlackUserEmail,
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-y0kjpfm9.js";
+} from "./cli-ytmmyj7f.js";
 import {
   TaskCreationBlockedError,
   broadcastMatches,
@@ -23,14 +23,14 @@ import {
   hasOtherUserMention,
   notifySlackFileFailures,
   routeMessage
-} from "./cli-wydz3feg.js";
+} from "./cli-ee0402n1.js";
 import {
   ackSlackMessage,
   buildTreeBlocks,
   ensureSlackThreadTree,
   isSlackRenderV2Enabled,
   registerTreeMessage
-} from "./cli-c8r99akr.js";
+} from "./cli-j05x7pnb.js";
 import {
   getAgentById,
   getAgentWorkingOnThread,
@@ -43,7 +43,7 @@ import {
   isExtensionAgent,
   reactionName,
   slackContextKey
-} from "./cli-mkdsy1nq.js";
+} from "./cli-74ez9b66.js";
 import {
   init_resolver,
   resolveTemplate

package/dist/{cli-mkdsy1nq.js → cli-74ez9b66.js}

@@ -103,7 +103,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-ymmc1zxg.js";
+} from "./cli-ng1pmdx6.js";
 import {
   init_bus,
   realtimeBus
@@ -12118,7 +12118,7 @@ var init_runtime = __esm(() => {
 // src/telemetry-identity.ts
 async function loadUserRole(userId) {
   try {
-    const { getUserGrant } = await import("./rbac-roles-axv4d74x.js");
+    const { getUserGrant } = await import("./rbac-roles-97w370qj.js");
     const grant = await getUserGrant(userId);
     const role = grant.grantsAll ? "admin" : "member";
     if (roleCache.size >= ROLE_CACHE_LIMIT) {
@@ -14790,6 +14790,7 @@ var init_swarm_config_guard = __esm(() => {
       return `Invalid HARNESS_PROVIDER value (must be one of: ${ProviderNameSchema.options.join(", ")})`;
     },
     ...enumValidator("CLAUDE_TRANSPORT", ["cli", "sdk"]),
+    ...enumValidator("SCRIPT_EXECUTOR", ["native", "quickjs"]),
     ...enumValidator("MODEL_WINDOW_EXHAUSTED_POLICY", ["fail", "fallback"]),
     CODEX_CREDITS_EXHAUSTED_COOLDOWN_MS: (value) => {
       const str2 = String(value).trim();

package/dist/{cli-ykt8f7va.js → cli-9q0bh411.js}

@@ -2,7 +2,7 @@ import {
   ACPAdapter,
   grokTargetProfile,
   isGrokOpenRouterModel
-} from "./cli-cexctgn5.js";
+} from "./cli-aj1e0h0d.js";
 import {
   getOpenRouterAttributionHeaders,
   getOpenRouterBaseUrl,

package/dist/{cli-p8rt8spp.js → cli-9q24yyvs.js}

@@ -1,14 +1,14 @@
 import {
   buildModelsDevSeedRows,
   loadModelsDevCache
-} from "./cli-v1pwxreq.js";
+} from "./cli-ewhwpyrb.js";
 import {
   createLogEntry,
   getActivePricingRow,
   getDbClient,
   init_db1 as init_db,
   insertPricingRow
-} from "./cli-mkdsy1nq.js";
+} from "./cli-74ez9b66.js";
 import {
   init_runtime_model_catalog,
   setRuntimeModelCatalog

package/dist/{cli-cexctgn5.js → cli-aj1e0h0d.js}

@@ -44,7 +44,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-ymmc1zxg.js";
+} from "./cli-ng1pmdx6.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-z1dqhc9y.js → cli-bcspch6h.js}

@@ -38,7 +38,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-ymmc1zxg.js";
+} from "./cli-ng1pmdx6.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-wydz3feg.js → cli-ee0402n1.js}

@@ -20,7 +20,7 @@ import {
 import {
   ensurePricingSeeded,
   ensureRbacSeeded
-} from "./cli-tx2zvn23.js";
+} from "./cli-43jg9xdw.js";
 import {
   buildCatalogEntries,
   getCatalogGeneration,
@@ -30,10 +30,10 @@ import {
   requestModelCatalogRefresh,
   startPricingRefreshLoop,
   upsertModelCatalogOverlay
-} from "./cli-p8rt8spp.js";
+} from "./cli-9q24yyvs.js";
 import {
   loadModelsDevCache
-} from "./cli-v1pwxreq.js";
+} from "./cli-ewhwpyrb.js";
 import {
   AppDefinitionSchema,
   AppElementsSchema,
@@ -64,6 +64,7 @@ import {
   decodeAppDefinition,
   definitionNodeIds,
   deleteApp,
+  deleteScriptConnection,
   disableCredentialBinding,
   extractArgsJsonSchema,
   extractScriptSignature,
@@ -106,7 +107,7 @@ import {
   validateDefinition,
   validateScriptImports,
   writeBareImportShim
-} from "./cli-577bxkf6.js";
+} from "./cli-g6gx2dn1.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
@@ -121,7 +122,7 @@ import {
   ensureToken,
   ensureTokenOrThrow,
   onAuthorizationRefreshed
-} from "./cli-kw0jcfje.js";
+} from "./cli-fhj4y16f.js";
 import {
   AgentFsProvider,
   getFileStorageProvider,
@@ -156,11 +157,11 @@ import {
   taskCitationWarnings,
   upsertTaskCitations,
   withSpan
-} from "./cli-c8r99akr.js";
+} from "./cli-j05x7pnb.js";
 import {
   getUserGrant,
   init_rbac_roles
-} from "./cli-ypgba1a8.js";
+} from "./cli-0jngabtb.js";
 import {
   can,
   decideAdmission,
@@ -431,6 +432,7 @@ import {
   promoteDraftTask,
   reassociateSessionLogs,
   recordBudgetRefusalNotification,
+  recordInlineScriptRun,
   recordSlackMessage,
   refreshDraftTaskLease,
   rejectTask,
@@ -488,7 +490,7 @@ import {
   upsertSwarmConfig,
   validateConfigValue,
   workflowContextKey
-} from "./cli-mkdsy1nq.js";
+} from "./cli-74ez9b66.js";
 import {
   $OpenAPIRegistry,
   $OpenApiGeneratorV31,
@@ -652,7 +654,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-ymmc1zxg.js";
+} from "./cli-ng1pmdx6.js";
 import {
   init_event_bus,
   workflowEventBus
@@ -14392,7 +14394,7 @@ async function notifyAutomationPreflightFailure(preflight) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-nctetn1e.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-ffes2kyf.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Automation Preflight] Slack not available, cannot send notification");
@@ -18074,6 +18076,7 @@ var import_cron_parser = __toESM(require_dist2(), 1);
 init_db2();
 init_db();
 init_telemetry();
+init_secret_scrubber();
 
 // src/scheduler/deferred-task-waits.ts
 init_db2();
@@ -18500,18 +18503,64 @@ async function executeScheduleScript(schedule) {
     throw new Error(`Script '${schedule.scriptName}' not found`);
   }
   const agentId = schedule.createdByAgentId ?? "schedule";
-  const output = await runScript({
-    source: script.source,
-    args: schedule.scriptArgs ?? {},
-    fsMode: "none",
+  const args = schedule.scriptArgs ?? {};
+  const record2 = {
     agentId,
-    egressSecrets: await buildScriptCredentialBindings({ agentId }),
-    apiConnections: getScriptApiConnectionDescriptors({ agentId }),
-    mcpConnections: getScriptMcpConnectionDescriptors({ agentId }),
-    timeoutMs: 60000
-  });
+    scriptName: schedule.scriptName,
+    source: `// Scheduled run of '${script.name}' v${script.version} (global, contentHash ${script.contentHash}) by schedule '${schedule.name}'.
+// Full source: script_versions row for this version.
+`,
+    args,
+    startedAt: new Date().toISOString()
+  };
+  let output;
+  try {
+    output = await runScript({
+      source: script.source,
+      args,
+      fsMode: "none",
+      agentId,
+      egressSecrets: await buildScriptCredentialBindings({ agentId }),
+      apiConnections: getScriptApiConnectionDescriptors({ agentId }),
+      mcpConnections: getScriptMcpConnectionDescriptors({ agentId }),
+      timeoutMs: 60000
+    });
+  } catch (err) {
+    await recordScheduleScriptRun({
+      ...record2,
+      status: "failed",
+      error: err instanceof Error ? err.message : String(err)
+    });
+    throw err;
+  }
   if (output.exitCode !== 0 || output.error) {
-    throw new Error(output.stderr || `Script '${schedule.scriptName}' exited with code ${output.exitCode}${output.error ? ` (${output.error})` : ""}`);
+    const message = output.stderr || `Script '${schedule.scriptName}' exited with code ${output.exitCode}${output.error ? ` (${output.error})` : ""}`;
+    await recordScheduleScriptRun({
+      ...record2,
+      status: "failed",
+      output: output.result,
+      error: message
+    });
+    throw new Error(message);
+  }
+  await recordScheduleScriptRun({ ...record2, status: "completed", output: output.result });
+}
+async function recordScheduleScriptRun(run) {
+  try {
+    await recordInlineScriptRun({
+      id: crypto.randomUUID(),
+      agentId: run.agentId,
+      scriptName: run.scriptName,
+      source: run.source,
+      args: scrubObject(run.args),
+      status: run.status,
+      output: scrubObject(run.output),
+      error: run.error === undefined ? undefined : scrubSecrets(run.error),
+      startedAt: run.startedAt,
+      finishedAt: new Date().toISOString()
+    });
+  } catch (err) {
+    console.warn(`[scheduler] could not record script run for '${run.scriptName}': ${scrubSecrets(err instanceof Error ? err.message : String(err))}`);
   }
 }
 
@@ -29180,7 +29229,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-nctetn1e.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-ffes2kyf.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -29251,7 +29300,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDbClient: getDbClient2 } = await import("./db-qg3myn53.js");
+  const { getDbClient: getDbClient2 } = await import("./db-1t0bj3pc.js");
   await getDbClient2().transaction(async (tx) => {
     const row = await tx.get("SELECT metadata FROM oauth_apps WHERE provider = 'jira'");
     if (!row) {
@@ -103056,7 +103105,7 @@ async function reloadGlobalConfigsAndIntegrations() {
   return runWithoutRequestAuth(() => reloadGlobalConfigsAndIntegrationsInner());
 }
 async function reloadGlobalConfigsAndIntegrationsInner() {
-  const { getEmbeddingProvider: getEmbeddingProvider2, resetEmbeddingProvider } = await import("./index-2t9kesn1.js");
+  const { getEmbeddingProvider: getEmbeddingProvider2, resetEmbeddingProvider } = await import("./index-gr69c43q.js");
   const wasEmbeddingsConfigured = getEmbeddingProvider2().isConfigured();
   const updated = await loadGlobalConfigsIntoEnv(true);
   await stopSlackApp();
@@ -103069,10 +103118,10 @@ async function reloadGlobalConfigsAndIntegrationsInner() {
     integrations.push("embeddings");
   }
   if (!wasEmbeddingsConfigured && isEmbeddingsConfigured) {
-    import("./boot-reembed-fmp5ww69.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+    import("./boot-reembed-jvfadhsk.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
       console.error("[config-reload] memory backfill failed (non-fatal):", err);
     });
-    import("./boot-reembed-1ze5853n.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+    import("./boot-reembed-20q3nzvg.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
       console.error("[config-reload] script backfill failed (non-fatal):", err);
     });
   }
@@ -104190,7 +104239,7 @@ function setPreloadedTools(server, names) {
 async function applyPreToolCall(name, args, requestInfo, inputSchema) {
   if (requestInfo.callOrigin !== "mcp")
     return { args };
-  const dispatcher = await import("./dispatcher-7vnwj9qw.js");
+  const dispatcher = await import("./dispatcher-k1fhavcf.js");
   const result = await dispatcher.dispatchPre("pre.tool.call", { tool: name, args, requestInfo }, inputSchema ? {
     validateModify: async (data) => {
       const schema = normalizeObjectSchema(inputSchema) ?? inputSchema;
@@ -125161,8 +125210,16 @@ init_zod();
 init_db2();
 init_rbac();
 var scriptConnectionsInputSchema = object({
-  action: _enum(["list", "upsert-openapi", "upsert-mcp", "upsert-graphql", "refresh", "disable"]).describe("List, create/update, refresh, or disable a script connection."),
-  id: string().uuid().optional().describe("Existing connection ID for update, refresh, or disable."),
+  action: _enum([
+    "list",
+    "upsert-openapi",
+    "upsert-mcp",
+    "upsert-graphql",
+    "refresh",
+    "disable",
+    "delete"
+  ]).describe("List, create/update, refresh, disable, or delete a script connection. delete is permanent: it removes the connection, its managed credential binding, and any inline secret it owns."),
+  id: string().uuid().optional().describe("Existing connection ID for update, refresh, disable, or delete."),
   slug: string().min(1).max(80).optional().describe("Stable script namespace slug exposed under ctx.api or ctx.mcp."),
   displayName: string().max(160).optional().describe("Human-readable connection name."),
   scope: _enum(["global", "agent", "repo"]).optional().describe("Connection visibility scope."),
@@ -125251,6 +125308,26 @@ var registerScriptConnectionsTool = (server) => {
         data: { yourAgentId: requestInfo.agentId, connections: connections2 }
       });
     }
+    if (args2.action === "delete") {
+      if (!args2.id) {
+        return toolErr("id is required for delete.", {
+          data: {
+            yourAgentId: requestInfo.agentId,
+            connections: listScriptConnections({ includeDisabled: true, allScopes: true })
+          }
+        });
+      }
+      const deleted = await deleteScriptConnection(args2.id);
+      const connections2 = listScriptConnections({ includeDisabled: true, allScopes: true });
+      if (!deleted) {
+        return toolErr(`Script connection ${args2.id} not found.`, {
+          data: { yourAgentId: requestInfo.agentId, connections: connections2 }
+        });
+      }
+      return toolOk(`Script connection ${deleted.slug} deleted.`, {
+        data: { yourAgentId: requestInfo.agentId, connections: connections2 }
+      });
+    }
     if (args2.action === "refresh") {
       if (!args2.id) {
         return toolErr("id is required for refresh.", {
@@ -125946,7 +126023,7 @@ async function sendTaskHandler(ctx, {
       data: { yourAgentId: creatorAgentId }
     });
   }
-  if (ctx.kind === "owner" && requestedAgentId === ctx.agentId) {
+  if (ctx.kind === "owner" && requestedAgentId === ctx.agentId && ctx.requestInfo?.callOrigin !== "script-sdk") {
     return toolErr("Cannot send a task to yourself, are you drunk?", {
       data: { yourAgentId: ctx.agentId }
     });
@@ -134610,7 +134687,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp: getSlackApp2 } = await import("./app-nctetn1e.js");
+        const { getSlackApp: getSlackApp2 } = await import("./app-ffes2kyf.js");
         const app = getSlackApp2();
         if (!app) {
           return {

package/dist/{cli-ty4bzkqr.js → cli-ew0c3a1j.js}

@@ -36,7 +36,7 @@ import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 init_secret_scrubber();
-var AMP_PACKAGE = "@ampcode/cli@0.0.1791460855-g1f688c";
+var AMP_PACKAGE = "@ampcode/cli@0.0.1791547250-gb79b2a";
 var AMP_MCP_SERVER_NAME = "agent-swarm";
 var AMP_PLUGIN_MODE_KEY = "agent-swarm";
 var AMP_LIVE_TEST_TIMEOUT_MS = 5000;

package/dist/{cli-v1pwxreq.js → cli-ewhwpyrb.js}

@@ -1,7 +1,7 @@
 import {
   getDb,
   init_db1 as init_db
-} from "./cli-mkdsy1nq.js";
+} from "./cli-74ez9b66.js";
 
 // src/be/seed-pricing.ts
 init_db();

package/dist/{cli-kw0jcfje.js → cli-fhj4y16f.js}

@@ -9,7 +9,7 @@ import {
   markAuthorizationRefreshFailed,
   releaseOAuthRefreshLock,
   updateAuthorizationTokens
-} from "./cli-mkdsy1nq.js";
+} from "./cli-74ez9b66.js";
 import {
   init_secret_scrubber,
   registerVolatileSecret,

package/dist/{cli-m7vmeepg.js → cli-fqq06kkb.js}

@@ -64,7 +64,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-ymmc1zxg.js";
+} from "./cli-ng1pmdx6.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-577bxkf6.js → cli-g6gx2dn1.js}

@@ -19,10 +19,10 @@ import {
   generateRandomCodeVerifier,
   generateRandomState,
   oauthAppRowToProviderConfig
-} from "./cli-kw0jcfje.js";
+} from "./cli-fhj4y16f.js";
 import {
   getSlackApp
-} from "./cli-c8r99akr.js";
+} from "./cli-j05x7pnb.js";
 import {
   CredentialBroker,
   DEFAULT_CREDENTIAL_BINDINGS,
@@ -59,7 +59,7 @@ import {
   updateAuthorizationTokens,
   upsertAuthorization,
   upsertSwarmConfig
-} from "./cli-mkdsy1nq.js";
+} from "./cli-74ez9b66.js";
 import {
   TERMINAL_TASK_STATUSES,
   defaultAssetKey,
@@ -175597,7 +175597,7 @@ class HumanInTheLoopExecutor extends BaseExecutor {
       }
       if (notification.channel === "slack") {
         try {
-          const { getSlackApp: getSlackApp2 } = await import("./app-nctetn1e.js");
+          const { getSlackApp: getSlackApp2 } = await import("./app-ffes2kyf.js");
           const slackApp = getSlackApp2();
           if (!slackApp) {
             console.warn("[HITL] Slack not initialized — cannot send notification");
@@ -179515,6 +179515,31 @@ async function setScriptConnectionEnabled(id, enabled, userId) {
      WHERE id = ? RETURNING *`, [enabled ? 1 : 0, new Date().toISOString(), userId ?? null, id]);
   return row ? connectionFromRow(row) : null;
 }
+async function deleteScriptConnection(id) {
+  const deleted = await getDbClient().transaction(async (tx) => {
+    await tx.run("PRAGMA defer_foreign_keys = ON");
+    const row = await tx.get("SELECT * FROM script_connections WHERE id = ?", [
+      id
+    ]);
+    if (!row)
+      return null;
+    const connection = connectionFromRow(row);
+    await deleteManagedBindingForConnection(id);
+    await tx.run("DELETE FROM script_connections WHERE id = ?", [id]);
+    const secretKey = derivedInlineSecretKey(connection);
+    if (secretKey) {
+      await deleteManagedConnectionSecret({
+        scope: connection.scope,
+        scopeId: connection.scopeId,
+        key: secretKey
+      });
+    }
+    return connection;
+  });
+  if (deleted && derivedInlineSecretKey(deleted))
+    refreshSecretScrubberCache();
+  return deleted;
+}
 function getScriptApiConnectionDescriptors(context = {}) {
   return listScriptConnections(context).filter((connection) => connection.kind === "openapi" || connection.kind === "graphql").map((connection) => {
     if (!connection.generatedRuntimeJson)
@@ -180200,7 +180225,7 @@ var EXECUTORS = {
   quickjs: () => new QuickJSScriptExecutor
 };
 function getScriptExecutor(name = process.env.SCRIPT_EXECUTOR ?? "native") {
-  const factory = EXECUTORS[name];
+  const factory = EXECUTORS[name.trim()];
   if (!factory) {
     throw new Error(`Unknown SCRIPT_EXECUTOR: ${name}. Available: ${Object.keys(EXECUTORS).join(", ")}`);
   }
@@ -184927,4 +184952,4 @@ void _scriptMain;
   });
 }
 
-export { require_dist, isInvalidClientError, assertUrlSafe, publicEndpointSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, listVendoredOpenapiEntries, ConnectionAuthInputSchema, connectionAuthSummary, listRelationalCredentialBindings, getCredentialBindingById, findCredentialBindingByIdentity, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, listScriptConnectionsAsync, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildScriptCredentialBindings, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, writeBareImportShim, MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, require_typescript, checkImportAllowlist, validateScriptImports, runScript, BaseExecutor, postApprovalCancellationUpdates, createApprovalFollowUpTask, HumanInTheLoopExecutor, resolveWorkflowLlmConfig, SYSTEM_ONE_DECISION_NODE_TYPE, systemOneRetryViolations, systemOneUnresolvedError, SystemOneDecisionExecutor, getNextTargets, generateEdges, findEntryNodes, resolveValidationPort, getSuccessors, definitionNodeIds, validateDefinition, applyDefinitionPatch, extractScriptSignature, extractArgsJsonSchema, getSavedScriptOwnerAgentId, runSavedScriptAsAgent, resolveSyncRunAs, AppNameSchema, ColumnKindSchema, isIso8601Date, SYSTEM_COLUMN_KINDS, SORTABLE_SYSTEM_DATE_COLUMNS, AppElementsSchema, AppDefinitionSchema, collectScriptReferences, parseAppDefinition, applyAppDefinitionPatch, upgradeAppDefinition, decodeAppDefinition, appDefinitionNeedsRepair, createApp, getApp, listApps, listAppRecords, updateApp, deleteApp, getScriptAppTypes, SCRIPT_SDK_TYPES, scriptSdkTypesWithGeneratedApis, SCRIPT_STDLIB_MODULE_TYPES, scriptStdlibTypesWithGeneratedApis, typecheckWithAmbient, typecheckScript };
+export { require_dist, isInvalidClientError, assertUrlSafe, publicEndpointSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, listVendoredOpenapiEntries, ConnectionAuthInputSchema, connectionAuthSummary, listRelationalCredentialBindings, getCredentialBindingById, findCredentialBindingByIdentity, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, listScriptConnectionsAsync, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, deleteScriptConnection, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildScriptCredentialBindings, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, writeBareImportShim, MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, require_typescript, checkImportAllowlist, validateScriptImports, runScript, BaseExecutor, postApprovalCancellationUpdates, createApprovalFollowUpTask, HumanInTheLoopExecutor, resolveWorkflowLlmConfig, SYSTEM_ONE_DECISION_NODE_TYPE, systemOneRetryViolations, systemOneUnresolvedError, SystemOneDecisionExecutor, getNextTargets, generateEdges, findEntryNodes, resolveValidationPort, getSuccessors, definitionNodeIds, validateDefinition, applyDefinitionPatch, extractScriptSignature, extractArgsJsonSchema, getSavedScriptOwnerAgentId, runSavedScriptAsAgent, resolveSyncRunAs, AppNameSchema, ColumnKindSchema, isIso8601Date, SYSTEM_COLUMN_KINDS, SORTABLE_SYSTEM_DATE_COLUMNS, AppElementsSchema, AppDefinitionSchema, collectScriptReferences, parseAppDefinition, applyAppDefinitionPatch, upgradeAppDefinition, decodeAppDefinition, appDefinitionNeedsRepair, createApp, getApp, listApps, listAppRecords, updateApp, deleteApp, getScriptAppTypes, SCRIPT_SDK_TYPES, scriptSdkTypesWithGeneratedApis, SCRIPT_STDLIB_MODULE_TYPES, scriptStdlibTypesWithGeneratedApis, typecheckWithAmbient, typecheckScript };

package/dist/{cli-c8r99akr.js → cli-j05x7pnb.js}

@@ -69,7 +69,7 @@ import {
   setSlackMessageTracking,
   slackContextKey,
   updateSlackMessageRecord
-} from "./cli-mkdsy1nq.js";
+} from "./cli-74ez9b66.js";
 import {
   init_types,
   isTerminalTaskStatus
@@ -52915,7 +52915,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
     return;
   initialized = true;
   try {
-    const impl = await import("./otel-impl-ghh4dyf8.js");
+    const impl = await import("./otel-impl-hhm64r6m.js");
     await impl.boot(serviceRole, {
       exportConsoleLogs: serviceRole === "api" && isApiLogExportEnabled()
     });
@@ -54410,15 +54410,15 @@ async function initSlackApp() {
     ...clientOptions ? { clientOptions } : {}
   });
   initialized2 = true;
-  const { registerMessageHandler } = await import("./handlers-2qtkpncr.js");
-  const { registerCommandHandler } = await import("./commands-h6zaaxym.js");
-  const { registerActionHandlers } = await import("./actions-fq2zrwtf.js");
-  const { registerWorkObjectHandlers } = await import("./work-objects-jcdbg8rr.js");
+  const { registerMessageHandler } = await import("./handlers-59ywqwzh.js");
+  const { registerCommandHandler } = await import("./commands-q4mfhn51.js");
+  const { registerActionHandlers } = await import("./actions-7jg840nr.js");
+  const { registerWorkObjectHandlers } = await import("./work-objects-mxf2c842.js");
   registerMessageHandler(app);
   registerCommandHandler(app);
   registerActionHandlers(app);
   registerWorkObjectHandlers(app);
-  const { createAssistant } = await import("./assistant-0aq8gjvj.js");
+  const { createAssistant } = await import("./assistant-fhm5smyz.js");
   app.assistant(createAssistant());
   return app;
 }
@@ -54427,7 +54427,7 @@ async function startSlackApp() {
     await initSlackApp();
   }
   if (app) {
-    const { isSlackRenderV2Enabled: isSlackRenderV2Enabled2 } = await import("./render-v2-k50j33qd.js");
+    const { isSlackRenderV2Enabled: isSlackRenderV2Enabled2 } = await import("./render-v2-n4v66bj3.js");
     if (isSlackRenderV2Enabled2())
       await ensureSlackRenderV2Activation();
     await app.start();

package/dist/{cli-c2tpw9ck.js → cli-jb931ba2.js}

@@ -6,7 +6,7 @@ import {
   getSwarmConfigs,
   init_db1 as init_db,
   upsertSwarmConfig
-} from "./cli-mkdsy1nq.js";
+} from "./cli-74ez9b66.js";
 import {
   init_secret_scrubber,
   scrubSecrets