@desplega.ai/agent-swarm 1.172.0 → 2.0.0

package/src/be/script-connections.ts

@@ -16,10 +16,11 @@ import {
 } from "@/scripts-runtime/credential-broker";
 import { refreshSecretScrubberCache } from "@/utils/secret-scrubber";
 import { listMcpServerTools } from "./mcp-proxy";
+import { assertPostgresDsn } from "./sql-connections";
 import { readVendoredOpenapiSpec } from "./vendored-openapi";
 
 export type ScriptConnectionScope = "global" | "agent" | "repo";
-export type ScriptConnectionKind = "raw" | "openapi" | "mcp" | "graphql";
+export type ScriptConnectionKind = "raw" | "openapi" | "mcp" | "graphql" | "sql";
 export type ScriptConnectionBaseUrlSource = "user" | "spec";
 export type ScriptConnectionAuthType = "none" | "bearer" | "header" | "query" | "oauth";
 
@@ -109,6 +110,13 @@ export const ConnectionAuthInputSchema = z.discriminatedUnion("type", [
   }),
 ]);
 
+/** Postgres DSN for a `sql` connection: an inline secret or an existing swarm_config key. */
+export const SqlDsnInputSchema = z
+  .object({ secret: authSecretSchema, configKey: authConfigKeySchema })
+  .refine((dsn) => (dsn.secret === undefined) !== (dsn.configKey === undefined), {
+    message: "Provide exactly one of `secret` or `configKey` for the SQL DSN.",
+  });
+
 export type ScriptConnectionBaseUrlMismatch = {
   specUrl: string;
   effectiveUrl: string;
@@ -1370,7 +1378,9 @@ function assertConfigKeyNotReserved(auth: ConnectionAuthInput | undefined): void
  */
 function derivedInlineSecretKey(connection: ScriptConnectionRecord | null): string | null {
   if (!connection) return null;
-  if (connection.authType === "none" || connection.authType === "oauth") return null;
+  // sql rows keep auth_type 'none' but own their DSN key in auth_config_key.
+  if (connection.authType === "oauth") return null;
+  if (connection.authType === "none" && connection.kind !== "sql") return null;
   const key = connection.authConfigKey;
   return key && DERIVED_INLINE_SECRET_KEY.test(key) ? key : null;
 }
@@ -1565,6 +1575,7 @@ export async function upsertScriptConnection(data: {
   openapiSpecEtag?: string | null;
   openapiSpecFetchedAt?: string | null;
   mcpServerId?: string | null;
+  sqlDsn?: z.infer<typeof SqlDsnInputSchema>;
   enabled?: boolean;
   agentId?: string;
   userId?: string | null;
@@ -1608,6 +1619,9 @@ export async function upsertScriptConnection(data: {
       "MCP connections resolve auth through their MCP server; `auth` is not supported.",
     );
   }
+  if (data.kind === "sql" && data.auth && data.auth.type !== "none") {
+    throw new Error("SQL connections authenticate through their DSN; `auth` is not supported.");
+  }
   // Keep the reserved derived-credential namespaces exclusive so a user-supplied
   // configKey can never collide with (or later be mistaken for) a connection's
   // own derived inline secret. Checked on user input only — reconstruction of an
@@ -1638,7 +1652,7 @@ export async function upsertScriptConnection(data: {
   // binding, e.g. raw-fetch egress) with no `auth`.
   const explicitLegacyBinding = data.auth === undefined && data.credentialBindingId !== undefined;
   const authIntent: ConnectionAuthInput =
-    data.kind === "mcp" || explicitLegacyBinding
+    data.kind === "mcp" || data.kind === "sql" || explicitLegacyBinding
       ? { type: "none" }
       : (data.auth ?? reconstructAuthFromConnection(existingConnection));
   let derived: DerivedConnectionBinding | null = null;
@@ -1795,6 +1809,26 @@ export async function upsertScriptConnection(data: {
     generatedAt = now;
   }
 
+  // The DSN key rides auth_config_key; the DSN itself never enters these artifacts.
+  let sqlDsnKey: string | null = null;
+  let sqlSecretWrite: DerivedConnectionBinding["secretWrite"] = null;
+  if (data.kind === "sql") {
+    if (data.sqlDsn?.secret !== undefined) {
+      assertPostgresDsn(data.sqlDsn.secret);
+      sqlDsnKey = `connection.${normalizedSlug}.secret`;
+      sqlSecretWrite = { scope, scopeId, key: sqlDsnKey, value: data.sqlDsn.secret };
+    } else if (data.sqlDsn?.configKey) {
+      assertConfigKeyNotReserved({ type: "bearer", configKey: data.sqlDsn.configKey });
+      sqlDsnKey = data.sqlDsn.configKey;
+    } else {
+      sqlDsnKey = existingConnection?.kind === "sql" ? existingConnection.authConfigKey : null;
+    }
+    if (!sqlDsnKey) throw new Error("SQL connections require `dsn.secret` or `dsn.configKey`.");
+    generatedRuntimeJson = JSON.stringify({ slug: normalizedSlug, kind: "sql", connectionId });
+    generatedTypes = `export interface ${pascal(normalizedSlug)}Api {\n  /** One read-only statement; pass values via params ($1, $2, ...). */\n  query<T = Record<string, JsonValue>>(sql: string, params?: JsonValue[]): Promise<{ rows: T[]; rowCount: number; truncated: boolean }>;\n}`;
+    generatedAt = now;
+  }
+
   if (data.kind !== "graphql") {
     allowedHosts =
       data.allowedHosts ?? (effectiveBaseUrl ? [new URL(effectiveBaseUrl).hostname] : []);
@@ -1808,7 +1842,8 @@ export async function upsertScriptConnection(data: {
   // metadata-only rename reconstructs the old derived key as an explicit
   // configKey and keeps referencing it, so it must NOT be deleted.
   const oldDerivedSecretKey = derivedInlineSecretKey(existingConnection);
-  const newReferencedConfigKey = derived?.configKey ?? explicitBinding?.configKey ?? null;
+  const newReferencedConfigKey =
+    derived?.configKey ?? explicitBinding?.configKey ?? sqlDsnKey ?? null;
   let supersededSecretDeleted = false;
 
   // Connection row and its auto-managed binding form a reference cycle
@@ -1822,6 +1857,7 @@ export async function upsertScriptConnection(data: {
       if (derived?.secretWrite) {
         await upsertSwarmConfig({ ...derived.secretWrite, isSecret: true });
       }
+      if (sqlSecretWrite) await upsertSwarmConfig({ ...sqlSecretWrite, isSecret: true });
 
       // Drop a superseded derived inline secret (see oldDerivedSecretKey above).
       // Skip when the connection's binding still references that same key (same
@@ -1874,6 +1910,7 @@ export async function upsertScriptConnection(data: {
             : (existingConnection?.credentialBindingId ?? null);
         authCols = NONE_AUTH_COLUMNS;
       }
+      if (sqlDsnKey) authCols = { ...NONE_AUTH_COLUMNS, authConfigKey: sqlDsnKey };
 
       const params = [
         normalizedSlug,
@@ -1951,7 +1988,9 @@ export async function upsertScriptConnection(data: {
     });
 
   const row = await writeConnectionAndBinding();
-  if (derived?.secretWrite || supersededSecretDeleted) refreshSecretScrubberCache();
+  if (derived?.secretWrite || sqlSecretWrite || supersededSecretDeleted) {
+    refreshSecretScrubberCache();
+  }
   return connectionFromRow(row);
 }
 
@@ -2117,7 +2156,7 @@ export function getScriptApiConnectionDescriptors(
   context: { agentId?: string; repoId?: string } = {},
 ): ScriptApiConnectionDescriptor[] {
   return listScriptConnections(context)
-    .filter((connection) => connection.kind === "openapi" || connection.kind === "graphql")
+    .filter((connection) => ["openapi", "graphql", "sql"].includes(connection.kind))
     .map((connection) => {
       if (!connection.generatedRuntimeJson) return null;
       try {
@@ -2145,8 +2184,8 @@ export function getScriptMcpConnectionDescriptors(
 }
 
 export function getScriptApiTypes(context: { agentId?: string; repoId?: string } = {}): string {
-  const connections = listScriptConnections(context).filter(
-    (connection) => connection.kind === "openapi" || connection.kind === "graphql",
+  const connections = listScriptConnections(context).filter((connection) =>
+    ["openapi", "graphql", "sql"].includes(connection.kind),
   );
   const blocks = connections
     .filter((connection) => connection.generatedTypes)

package/src/be/script-credential-broker.ts

@@ -11,6 +11,7 @@ import { registerVolatileSecret } from "@/utils/secret-scrubber";
 import { getResolvedConfig } from "./db";
 import { resolveOAuthBindingToken } from "./oauth-credential-bindings";
 import { listRelationalCredentialBindings } from "./script-connections";
+import { isApiOnlyConfigKey, isInternalConfigKey } from "./swarm-config-guard";
 
 // Relational-only credential binding store. The legacy SCRIPT_CREDENTIAL_BINDINGS
 // swarm-config JSON blob is retired (migrated to relational rows at boot), so
@@ -22,6 +23,32 @@ class RelationalCredentialBindingStore implements CredentialBindingStore {
   }
 }
 
+export type ScriptUserConfig = Record<string, { value: string; isSecret: boolean }>;
+
+/**
+ * The values behind `ctx.swarm.config.get(KEY)`: the invoking agent's resolved
+ * config (agent over global, plus repo when given), minus the keys the
+ * `/api/config/resolved` route never hands out. A script's own SDK bearer
+ * already reads every one of these through `ctx.swarm.config_get`, so this
+ * widens nothing; it only makes the documented accessor return them. Secret
+ * values are registered with the scrubber so they never leave in run output.
+ */
+function toScriptUserConfig(configs: Awaited<ReturnType<typeof getResolvedConfig>>) {
+  const exposed = configs.filter(
+    (config) => !isApiOnlyConfigKey(config.key) && !isInternalConfigKey(config.key),
+  );
+  for (const config of exposed) {
+    if (config.isSecret && config.value) {
+      registerVolatileSecret(config.value, `config:${config.key}`);
+    }
+  }
+  // fromEntries defines own properties, so a `__proto__` key survives
+  // (assigning it into `{}` would hit the prototype setter instead).
+  return Object.fromEntries(
+    exposed.map((config) => [config.key, { value: config.value, isSecret: config.isSecret }]),
+  ) as ScriptUserConfig;
+}
+
 /**
  * Resolve credential bindings for a script run, partitioning OAuth bindings
  * whose refresh failed into `failedBindings` (surfaced to the sandbox so the
@@ -32,8 +59,14 @@ class RelationalCredentialBindingStore implements CredentialBindingStore {
 export async function buildScriptCredentialBindingsWithFailures(input: {
   agentId?: string;
   repoId?: string;
-}): Promise<{ egressSecrets: EgressSecretEntry[]; failedBindings: FailedCredentialBinding[] }> {
+}): Promise<{
+  egressSecrets: EgressSecretEntry[];
+  failedBindings: FailedCredentialBinding[];
+  userConfig: ScriptUserConfig;
+}> {
   const resolvedConfigs = await getResolvedConfig(input.agentId, input.repoId);
+  // Before the binding loop below, so a binding's own scrubber label wins.
+  const userConfig = toScriptUserConfig(resolvedConfigs);
   const configMap = new Map(resolvedConfigs.map((config) => [config.key, config.value]));
   const broker = new CredentialBroker(
     new RelationalCredentialBindingStore(),
@@ -49,7 +82,11 @@ export async function buildScriptCredentialBindingsWithFailures(input: {
   for (const binding of resolved) {
     registerVolatileSecret(binding.value, binding.configKey);
   }
-  return { egressSecrets: resolved, failedBindings: failed };
+  return {
+    egressSecrets: resolved,
+    failedBindings: failed,
+    userConfig,
+  };
 }
 
 export async function buildScriptCredentialBindings(input: {

package/src/be/scripts/run-saved.ts

@@ -52,6 +52,7 @@ export async function runSavedScriptAsAgent(
         agentId: args.agentId,
         egressSecrets: credentials.egressSecrets,
         failedBindings: credentials.failedBindings,
+        userConfig: credentials.userConfig,
         apiConnections: getScriptApiConnectionDescriptors({ agentId: args.agentId }),
         mcpConnections: getScriptMcpConnectionDescriptors({ agentId: args.agentId }),
         ...(args.timeoutMs ? { timeoutMs: args.timeoutMs } : {}),

package/src/be/scripts/typecheck.ts

@@ -235,10 +235,10 @@ export interface SwarmSdk {
   // --- slack ---
   slack_read(args?: { inboxMessageId?: string; taskId?: string; channelId?: string; threadTs?: string; limit?: number; includeFiles?: boolean }): Promise<unknown>;
   slack_listChannels(args?: { types?: Array<"public" | "private" | "dm" | "mpim">; limit?: number }): Promise<unknown>;
+  // --- chat sdk ---
+  chat_readThread(args: { threadId: string; limit?: number }): Promise<unknown>;
   // --- messaging ---
   message_read(args?: { channel?: string; limit?: number; since?: string; unreadOnly?: boolean; mentionsOnly?: boolean; markAsRead?: boolean }): Promise<unknown>;
-  // --- services ---
-  service_list(args?: { agentId?: string; name?: string; status?: "starting" | "healthy" | "unhealthy" | "stopped"; includeOwn?: boolean }): Promise<unknown>;
   // --- context / profiles ---
   context_history(args?: { agentId?: string; field?: "soulMd" | "identityMd" | "toolsMd" | "claudeMd" | "setupScript"; limit?: number }): Promise<unknown>;
   context_diff(args: { versionId: string; compareToVersionId?: string }): Promise<unknown>;
@@ -281,7 +281,7 @@ export interface SwarmSdk {
   task_action(args: Record<string, unknown>): Promise<unknown>;
 
   // --- write: config ---
-  config_set(args: { key: string; value: unknown; scope?: "global" | "agent" | "repo"; scopeId?: string; isSecret?: boolean }): Promise<unknown>;
+  config_set(args: { key: string; value: unknown; scope?: "global" | "agent" | "repo"; scopeId?: string; isSecret?: boolean; exportToEnv?: boolean }): Promise<unknown>;
   config_delete(args: { id: string }): Promise<unknown>;
 
   // --- write: model catalog ---
@@ -311,17 +311,19 @@ export interface SwarmSdk {
   slack_delete(args: { channelId: string; messageTs: string }): Promise<unknown>;
   slack_update(args: { channelId: string; messageTs: string; message: string }): Promise<unknown>;
 
+  // --- write: chat sdk ---
+  chat_reply(args: { text: string }): Promise<unknown>;
+  chat_post(args: { adapter: "telegram" | "slack" | "discord" | "teams"; threadId?: string; channelId?: string; text: string }): Promise<unknown>;
+  chat_openDm(args: { adapter: "telegram" | "slack" | "discord" | "teams"; userId: string }): Promise<unknown>;
+  chat_registerChannel(args: { adapter: "telegram" | "slack" | "discord" | "teams"; channelId: string; agentId?: string; workflowId?: string; name?: string }): Promise<unknown>;
+  chat_unregisterChannel(args: { adapter: "telegram" | "slack" | "discord" | "teams"; channelId: string }): Promise<unknown>;
+
   // --- write: messaging (internal) ---
   message_post(args: { channel?: string; content: string; to?: string }): Promise<unknown>;
 
   // --- write: profiles ---
   profile_update(args: Record<string, unknown>): Promise<unknown>;
 
-  // --- write: services ---
-  service_register(args: Record<string, unknown>): Promise<unknown>;
-  service_unregister(args: { name: string }): Promise<unknown>;
-  service_updateStatus(args: { name: string; status: "starting" | "healthy" | "unhealthy" | "stopped" }): Promise<unknown>;
-
   // --- write: schedules ---
   schedule_create(args: Record<string, unknown>): Promise<unknown>;
   schedule_update(args: Record<string, unknown>): Promise<unknown>;

package/src/be/seed/runner.ts

@@ -22,6 +22,7 @@ export async function runSeeder(seeder: Seeder, opts?: SeederRunOptions): Promis
     updated: 0,
     skippedUnchanged: 0,
     skippedUserModified: 0,
+    retired: 0,
     failed: [],
   };
 
@@ -77,11 +78,22 @@ export async function runSeeder(seeder: Seeder, opts?: SeederRunOptions): Promis
     }
   }
 
+  if (seeder.retire) {
+    try {
+      result.retired = (await seeder.retire()).length;
+    } catch (err) {
+      result.failed.push({
+        key: "(retire)",
+        error: err instanceof Error ? err.message : String(err),
+      });
+    }
+  }
+
   if (!opts?.quiet) {
     console.log(
       `[seed:${result.kind}] created=${result.created} updated=${result.updated} ` +
         `unchanged=${result.skippedUnchanged} preserved=${result.skippedUserModified} ` +
-        `failed=${result.failed.length}`,
+        `retired=${result.retired} failed=${result.failed.length}`,
     );
     for (const f of result.failed) {
       console.error(`[seed:${result.kind}] FAILED ${f.key}: ${f.error}`);

package/src/be/seed/state-db.ts

@@ -36,3 +36,8 @@ export async function recordSeedState(
     [kind, key, seededHash, new Date().toISOString()],
   );
 }
+
+/** Forget `(kind, key)`, e.g. after the seeder retires the entity it seeded. */
+export async function deleteSeedState(kind: string, key: string): Promise<void> {
+  await getDbClient().run("DELETE FROM seed_state WHERE kind = ? AND key = ?", [kind, key]);
+}

package/src/be/seed/types.ts

@@ -53,6 +53,11 @@ export interface Seeder<TItem extends SeedItem = SeedItem> {
   upstreamHash(item: TItem): string | null | Promise<string | null>;
   /** Create or update the upstream entity so it matches the source definition. */
   apply(item: TItem, action: "create" | "update", opts?: SeederRunOptions): void | Promise<void>;
+  /**
+   * Optional: remove upstream entities for keys the source no longer ships.
+   * Must leave user-modified entities in place. Returns the removed keys.
+   */
+  retire?(): Promise<string[]>;
 }
 
 export type SeederResult = {
@@ -61,5 +66,6 @@ export type SeederResult = {
   updated: number;
   skippedUnchanged: number;
   skippedUserModified: number;
+  retired: number;
   failed: Array<{ key: string; error: string }>;
 };

package/src/be/seed-pricing.ts

@@ -19,6 +19,7 @@
  * admin route (`POST /api/pricing`) — we don't overwrite seed rows.
  */
 
+import { openAICompatibleProviderIds } from "@desplega/model-catalog";
 import type { PricingProvider, PricingTokenClass } from "../types";
 import { getDb } from "./db";
 import {
@@ -98,8 +99,9 @@ const ANTHROPIC_SHORTNAME_TO_MODELSDEV: Record<string, string> = {
 const ANTHROPIC_SHORTNAME_PRICING_FALLBACKS: Record<string, ModelsDevCostBlock> = {
   // https://platform.claude.com/docs/en/about-claude/pricing (verified 2026-09-22)
   "claude-opus-5-5": { input: 4, output: 20, cache_read: 0.2, cache_write: 5 },
-  // https://platform.claude.com/docs/en/about-claude/pricing (verified 2026-09-28)
-  "claude-sonnet-5-5": { input: 2, output: 10, cache_read: 0.2, cache_write: 2.5 },
+  // https://platform.claude.com/docs/en/about-claude/pricing (verified 2026-10-15):
+  // cache hits on Sonnet 5.5 cost 0.05x input, not the usual 0.1x.
+  "claude-sonnet-5-5": { input: 2, output: 10, cache_read: 0.1, cache_write: 2.5 },
   "claude-fable-5-1": { input: 10, output: 50, cache_read: 0.25, cache_write: 12.5 },
   "claude-mythos-5-1": { input: 10, output: 50, cache_read: 0.25, cache_write: 12.5 },
 };
@@ -367,6 +369,21 @@ export function buildModelsDevSeedRows(cache: ModelsDevCache): PricingSeedRow[]
     }
   }
 
+  // ---- OpenAI-compatible registry providers ($0 flat-rate subscriptions) --
+  // pi and opencode run these as `<provider>/<id>`. The models.dev `nan`
+  // section and the registry-synthesized `helmcode` section
+  // (`withRegistryCatalogSections`) carry cost {0, 0}, so the sessions price
+  // as `pricing-table` at $0 instead of `unpriced`. The provider prefix stays
+  // in the key: `nan/qwen3.6` and `helmcode/qwen3.6` are separate rows.
+  for (const provider of openAICompatibleProviderIds()) {
+    for (const [id, model] of Object.entries(cache[provider]?.models ?? {})) {
+      if (!model?.cost) continue;
+      const key = `${provider}/${id}`;
+      add(key, projectCostBlock("pi", key, model.cost));
+      add(key, projectCostBlock("opencode", key, model.cost));
+    }
+  }
+
   return collapseNormalizedIds(sourced);
 }
 

package/src/be/seed-scripts/catalog/ops-catalog-audit.inline.ts

@@ -38,7 +38,7 @@ const CONTRADICTORY_RE =
   /\b(do not|don't|never)\b[\s\S]{0,240}\b(always|must|required)\b|\b(always|must|required)\b[\s\S]{0,240}\b(do not|don't|never)\b/i;
 
 const CODE_REGISTRY_EVENTS =
-  "agentmail.email.followup agentmail.email.mapped_lead agentmail.email.mapped_worker agentmail.email.no_agent agentmail.email.unmapped common.command_suggestions.github_comment_issue common.command_suggestions.github_comment_pr common.command_suggestions.github_issue common.command_suggestions.github_pr common.command_suggestions.gitlab_issue common.command_suggestions.gitlab_mr common.delegation_instruction common.delegation_instruction.gitlab github.check_run.failed github.check_suite.failed github.comment.mentioned github.issue.assigned github.issue.labeled github.issue.mentioned github.pull_request.assigned github.pull_request.closed github.pull_request.labeled github.pull_request.mentioned github.pull_request.review_requested github.pull_request.review_submitted github.pull_request.synchronize github.workflow_run.failed gitlab.comment.mentioned gitlab.issue.assigned gitlab.merge_request.opened gitlab.pipeline.failed heartbeat.boot-triage heartbeat.checklist jira.issue.assigned jira.issue.commented jira.issue.followup kapso.message.received linear.issue.assigned linear.issue.followup linear.issue.reassigned slack.assistant.greeting slack.assistant.offline slack.assistant.suggested_prompts slack.message.attachment_failed slack.message.thread_context system.agent.communication system.agent.lead system.agent.memory system.agent.memory.remote system.agent.outputs system.agent.outputs.no_agent_fs system.agent.repository system.agent.role system.agent.secrets system.agent.slack system.agent.tools_skills system.agent.worker system.agent.worker.remote system.agent.workspace system.agent.workspace.remote system.session.lead system.session.lead.managed system.session.worker system.session.worker.managed system.session.worker.remote task.budget.refused task.requester.profile task.worker.completed task.worker.failed".split(
+  "agentmail.email.followup agentmail.email.mapped_lead agentmail.email.mapped_worker agentmail.email.no_agent agentmail.email.unmapped chat.message.thread_context common.command_suggestions.github_comment_issue common.command_suggestions.github_comment_pr common.command_suggestions.github_issue common.command_suggestions.github_pr common.command_suggestions.gitlab_issue common.command_suggestions.gitlab_mr common.delegation_instruction common.delegation_instruction.gitlab github.check_run.failed github.check_suite.failed github.comment.mentioned github.issue.assigned github.issue.labeled github.issue.mentioned github.pull_request.assigned github.pull_request.closed github.pull_request.labeled github.pull_request.mentioned github.pull_request.review_requested github.pull_request.review_submitted github.pull_request.synchronize github.workflow_run.failed gitlab.comment.mentioned gitlab.issue.assigned gitlab.merge_request.opened gitlab.pipeline.failed heartbeat.boot-triage heartbeat.checklist jira.issue.assigned jira.issue.commented jira.issue.followup kapso.message.received linear.issue.assigned linear.issue.followup linear.issue.reassigned slack.assistant.greeting slack.assistant.offline slack.assistant.suggested_prompts slack.message.attachment_failed slack.message.thread_context system.agent.communication system.agent.lead system.agent.memory system.agent.memory.remote system.agent.outputs system.agent.outputs.no_agent_fs system.agent.repository system.agent.role system.agent.secrets system.agent.slack system.agent.tools_skills system.agent.worker system.agent.worker.remote system.agent.workspace system.agent.workspace.remote system.session.lead system.session.lead.managed system.session.worker system.session.worker.managed system.session.worker.remote task.budget.refused task.requester.profile task.worker.completed task.worker.failed".split(
     " ",
   );
 

package/src/be/seed-scripts/catalog/ops-catalog-audit.ts

@@ -38,7 +38,7 @@ const CONTRADICTORY_RE =
   /\b(do not|don't|never)\b[\s\S]{0,240}\b(always|must|required)\b|\b(always|must|required)\b[\s\S]{0,240}\b(do not|don't|never)\b/i;
 
 const CODE_REGISTRY_EVENTS =
-  "agentmail.email.followup agentmail.email.mapped_lead agentmail.email.mapped_worker agentmail.email.no_agent agentmail.email.unmapped common.command_suggestions.github_comment_issue common.command_suggestions.github_comment_pr common.command_suggestions.github_issue common.command_suggestions.github_pr common.command_suggestions.gitlab_issue common.command_suggestions.gitlab_mr common.delegation_instruction common.delegation_instruction.gitlab github.check_run.failed github.check_suite.failed github.comment.mentioned github.issue.assigned github.issue.labeled github.issue.mentioned github.pull_request.assigned github.pull_request.closed github.pull_request.labeled github.pull_request.mentioned github.pull_request.review_requested github.pull_request.review_submitted github.pull_request.synchronize github.workflow_run.failed gitlab.comment.mentioned gitlab.issue.assigned gitlab.merge_request.opened gitlab.pipeline.failed heartbeat.boot-triage heartbeat.checklist jira.issue.assigned jira.issue.commented jira.issue.followup kapso.message.received linear.issue.assigned linear.issue.followup linear.issue.reassigned slack.assistant.greeting slack.assistant.offline slack.assistant.suggested_prompts slack.message.attachment_failed slack.message.thread_context system.agent.communication system.agent.lead system.agent.memory system.agent.memory.remote system.agent.outputs system.agent.outputs.no_agent_fs system.agent.repository system.agent.role system.agent.secrets system.agent.slack system.agent.tools_skills system.agent.worker system.agent.worker.remote system.agent.workspace system.agent.workspace.remote system.session.lead system.session.lead.managed system.session.worker system.session.worker.managed system.session.worker.remote task.budget.refused task.requester.profile task.worker.completed task.worker.failed".split(
+  "agentmail.email.followup agentmail.email.mapped_lead agentmail.email.mapped_worker agentmail.email.no_agent agentmail.email.unmapped chat.message.thread_context common.command_suggestions.github_comment_issue common.command_suggestions.github_comment_pr common.command_suggestions.github_issue common.command_suggestions.github_pr common.command_suggestions.gitlab_issue common.command_suggestions.gitlab_mr common.delegation_instruction common.delegation_instruction.gitlab github.check_run.failed github.check_suite.failed github.comment.mentioned github.issue.assigned github.issue.labeled github.issue.mentioned github.pull_request.assigned github.pull_request.closed github.pull_request.labeled github.pull_request.mentioned github.pull_request.review_requested github.pull_request.review_submitted github.pull_request.synchronize github.workflow_run.failed gitlab.comment.mentioned gitlab.issue.assigned gitlab.merge_request.opened gitlab.pipeline.failed heartbeat.boot-triage heartbeat.checklist jira.issue.assigned jira.issue.commented jira.issue.followup kapso.message.received linear.issue.assigned linear.issue.followup linear.issue.reassigned slack.assistant.greeting slack.assistant.offline slack.assistant.suggested_prompts slack.message.attachment_failed slack.message.thread_context system.agent.communication system.agent.lead system.agent.memory system.agent.memory.remote system.agent.outputs system.agent.outputs.no_agent_fs system.agent.repository system.agent.role system.agent.secrets system.agent.slack system.agent.tools_skills system.agent.worker system.agent.worker.remote system.agent.workspace system.agent.workspace.remote system.session.lead system.session.lead.managed system.session.worker system.session.worker.managed system.session.worker.remote task.budget.refused task.requester.profile task.worker.completed task.worker.failed".split(
     " ",
   );
 

package/src/be/seed-skills/bundled-files.generated.json

@@ -1,22 +1,4 @@
 {
-  "artifacts": [
-    {
-      "path": "examples/approval-flow.ts",
-      "content": "import { createArtifactServer } from \"../../src/artifact-sdk\";\nimport { Hono } from \"hono\";\n\nconst app = new Hono();\napp.get(\"/\", (c) =>\n  c.html(`\n<!DOCTYPE html>\n<html>\n<head><title>Approval Required</title></head>\n<body>\n  <h1>PR #42 — Review Required</h1>\n  <p>Agent wants to merge this PR. Please review.</p>\n  <button id=\"approve\">Approve</button>\n  <button id=\"reject\">Reject</button>\n  <script src=\"/@swarm/sdk.js\"></script>\n  <script>\n    const swarm = new SwarmSDK();\n    document.getElementById('approve').onclick = async () => {\n      await swarm.createTask({ task: 'Merge PR #42 — human approved' });\n      document.body.innerHTML = '<h1>Approved! Task created.</h1>';\n    };\n    document.getElementById('reject').onclick = async () => {\n      await swarm.createTask({ task: 'PR #42 rejected by human — needs changes' });\n      document.body.innerHTML = '<h1>Rejected. Agent notified.</h1>';\n    };\n  </script>\n</body>\n</html>\n`),\n);\n\nconst server = createArtifactServer({ name: \"approval-pr-42\", app });\nawait server.start();\nconsole.log(`Approval artifact at: ${server.url}`);\n"
-    },
-    {
-      "path": "examples/hono-dashboard.ts",
-      "content": "import { createArtifactServer } from \"../../src/artifact-sdk\";\nimport { Hono } from \"hono\";\n\nconst app = new Hono();\n\napp.get(\"/\", (c) =>\n  c.html(`\n<!DOCTYPE html>\n<html>\n<head><title>Dashboard</title></head>\n<body>\n  <h1>Agent Dashboard</h1>\n  <div id=\"agents\"></div>\n  <script src=\"/@swarm/sdk.js\"></script>\n  <script>\n    const swarm = new SwarmSDK();\n    swarm.getSwarm().then(agents => {\n      document.getElementById('agents').innerHTML =\n        '<ul>' + agents.map(a => '<li>' + a.name + ' (' + a.status + ')</li>').join('') + '</ul>';\n    });\n  </script>\n</body>\n</html>\n`),\n);\n\napp.get(\"/api/status\", (c) => c.json({ status: \"ok\", timestamp: Date.now() }));\n\nconst server = createArtifactServer({ name: \"dashboard\", app });\nawait server.start();\nconsole.log(`Dashboard live at: ${server.url}`);\n"
-    },
-    {
-      "path": "examples/multi-artifact.ts",
-      "content": "import { createArtifactServer } from \"../../src/artifact-sdk\";\nimport { Hono } from \"hono\";\n\n// Artifact 1: Status page\nconst statusApp = new Hono();\nstatusApp.get(\"/\", (c) => c.html(\"<h1>Status: All systems operational</h1>\"));\n\n// Artifact 2: Data viewer\nconst dataApp = new Hono();\ndataApp.get(\"/\", (c) => c.json({ items: [1, 2, 3], generated: new Date().toISOString() }));\n\nconst status = createArtifactServer({ name: \"status\", app: statusApp });\nconst data = createArtifactServer({ name: \"data\", app: dataApp });\n\nawait status.start();\nawait data.start();\n\nconsole.log(`Status page: ${status.url}`);\nconsole.log(`Data viewer: ${data.url}`);\nconsole.log(`Both artifacts running on different ports (${status.port}, ${data.port})`);\n"
-    },
-    {
-      "path": "examples/static-report.sh",
-      "content": "#!/bin/bash\n# Serve a static HTML report as an artifact\nARTIFACT_DIR=\"/workspace/personal/artifacts/my-report\"\nmkdir -p \"$ARTIFACT_DIR\"\n\ncat > \"$ARTIFACT_DIR/index.html\" << 'HTML'\n<!DOCTYPE html>\n<html>\n<head><title>Agent Report</title></head>\n<body>\n  <h1>Analysis Report</h1>\n  <p>Generated by agent</p>\n</body>\n</html>\nHTML\n\nagent-swarm artifact serve \"$ARTIFACT_DIR\" --name \"my-report\"\n"
-    }
-  ],
   "brainstorming": [
     {
       "path": "template.md",
@@ -77,6 +59,16 @@
       "content": "---\ndate: [ISO format]\nauthor: [Name]\ntopic: \"[Feature/Bug/Scenario being validated]\"\ntags: [qa, relevant-tags]\nstatus: [in-progress|pass|fail|blocked]\nsource_plan: [optional — path to plan that motivated this QA]\nsource_verification: [optional — path to verification report]\nrelated_pr: [optional — PR URL or number]\nenvironment: [optional — local|staging|production]\nlast_updated: [YYYY-MM-DD]\nlast_updated_by: [Name]\n---\n\n# [Feature/Scenario] — QA Report\n\n## Context\n[What is being validated and why. Link to plan, PR, or issue.]\n\n## Scope\n### In Scope\n- [What this QA covers]\n\n### Out of Scope\n- [What this QA does NOT cover]\n\n## Test Cases\n\n### TC-1: [Test Case Name]\n**Steps:**\n1. [Step 1]\n2. [Step 2]\n\n**Expected Result:** [What should happen]\n**Actual Result:** [What actually happened]\n**Status:** pass | fail | blocked | skipped\n\n### TC-2: [Test Case Name]\n[Same structure]\n\n## Edge Cases & Exploratory Testing\n- [Findings from exploratory testing]\n\n## Evidence\n\n### Screenshots\n- ![Description](path-or-url)\n\n### Videos\n- [Video: Description](url)\n\n### Logs & Output\n```\n[Relevant log output]\n```\n\n### External Links\n- [Sentry Issue](url)\n- [Grafana Dashboard](url)\n- [CI/CD Run](url)\n- [PR](url)\n\n## Issues Found\n- [ ] [Issue description — severity: critical|major|minor]\n\n## Verdict\n**Status**: PASS | FAIL | BLOCKED\n**Summary**: [1-2 sentence summary of QA outcome]\n\n## Appendix\n\n- **Plan**: `thoughts/.../plans/YYYY-MM-DD-topic.md`\n- **Verification**: `thoughts/.../plans/YYYY-MM-DD-verification-report.md`\n- **Related documents**: [links]\n- **Notes**: [follow-up QA, derail items, environment caveats]\n"
     }
   ],
+  "qa-loom": [
+    {
+      "path": "build-loom.mjs",
+      "content": "// build-loom.mjs: steps.json + raw recording -> narrated qa-loom.mp4 (+ qa-loom.ass, work/).\n// Usage: node build-loom.mjs <steps.json> <raw.webm> <outDir>   (bun works too)\n// Env: ELEVENLABS_API_KEY (required), SPEED=1.33, VOICE=21m00Tcm4TlvDq8ikWAM,\n//      MODEL=eleven_turbo_v2_5, FONT=\"DejaVu Sans\"\n// Needs: Node 18+ (global fetch, top-level await) and ffmpeg built with libass (`ass` filter).\nimport { execFileSync } from \"node:child_process\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\n\nconst [stepsPath, raw, outArg] = process.argv.slice(2);\nif (!stepsPath || !raw || !outArg) {\n  throw new Error(\"usage: node build-loom.mjs <steps.json> <raw.webm> <outDir>\");\n}\nconst out = resolve(outArg);\nconst SPEED = Number(process.env.SPEED ?? 1.33);\nconst VOICE = process.env.VOICE ?? \"21m00Tcm4TlvDq8ikWAM\";\nconst MODEL = process.env.MODEL ?? \"eleven_turbo_v2_5\";\nconst FONT = process.env.FONT ?? \"DejaVu Sans\";\nconst KEY = process.env.ELEVENLABS_API_KEY;\nif (!KEY) throw new Error(\"ELEVENLABS_API_KEY is not set\");\nmkdirSync(join(out, \"work\"), { recursive: true });\nconst W = (f) => join(out, \"work\", f);\n\n// -loglevel error keeps ffmpeg's banner and progress output out of the logs.\nconst ff = (...args) => {\n  try {\n    execFileSync(\"ffmpeg\", [\"-y\", \"-hide_banner\", \"-loglevel\", \"error\", ...args], {\n      stdio: [\"ignore\", \"ignore\", \"pipe\"],\n    });\n  } catch (e) {\n    throw new Error(`ffmpeg failed: ${String(e.stderr).slice(0, 400)}`);\n  }\n};\nconst ENC = [\n  \"-c:v\",\n  \"libx264\",\n  \"-preset\",\n  \"veryfast\",\n  \"-crf\",\n  \"23\",\n  \"-pix_fmt\",\n  \"yuv420p\",\n  \"-r\",\n  \"30\",\n  \"-video_track_timescale\",\n  \"15360\",\n];\n// Keep the aspect ratio: letterbox or pillarbox into 1920x1080, never stretch (mobile viewports).\nconst FIT =\n  \"scale=1920:1080:force_original_aspect_ratio=decrease,pad=1920:1080:(ow-iw)/2:(oh-ih)/2:color=white\";\n\nconst { steps } = JSON.parse(readFileSync(stepsPath, \"utf8\"));\nconst concat = [];\nconst cues = [];\nconst audio = [];\nlet T = 0; // running output timeline, in seconds\n\nfor (const [i, s] of steps.entries()) {\n  const visualAt = s.visualAt ?? s.start;\n  const segLen = (s.end - s.start) / SPEED;\n  const v = (visualAt - s.start) / SPEED; // voice and subtitles start when the screen renders\n\n  // 1. TTS with character timestamps, one request per step. Cached per narration text,\n  //    so a re-run after a style tweak costs no ElevenLabs characters.\n  const mp3 = W(`audio-${i + 1}.mp3`);\n  const alPath = W(`audio-${i + 1}.json`);\n  let cached = existsSync(alPath) ? JSON.parse(readFileSync(alPath, \"utf8\")) : null;\n  if (cached?.text !== s.narration) {\n    const res = await fetch(\n      `https://api.elevenlabs.io/v1/text-to-speech/${VOICE}/with-timestamps`,\n      {\n        method: \"POST\",\n        headers: { \"xi-api-key\": KEY, \"content-type\": \"application/json\" },\n        body: JSON.stringify({ text: s.narration, model_id: MODEL }),\n      },\n    );\n    if (!res.ok) throw new Error(`ElevenLabs ${res.status}: ${(await res.text()).slice(0, 200)}`);\n    const tts = await res.json();\n    // audio_base64 is large: write it straight to disk, never print it.\n    writeFileSync(mp3, Buffer.from(tts.audio_base64, \"base64\"));\n    cached = { text: s.narration, alignment: tts.alignment };\n    writeFileSync(alPath, JSON.stringify(cached));\n  }\n  const al = cached.alignment;\n  const aDur = al.character_end_times_seconds.at(-1);\n\n  // 2. Sped-up segment. Freeze the last frame when the narration outlasts it.\n  const seg = W(`seg-${i + 1}.mp4`);\n  ff(\n    \"-ss\",\n    String(s.start),\n    \"-t\",\n    String(s.end - s.start),\n    \"-i\",\n    raw,\n    \"-an\",\n    \"-vf\",\n    `setpts=(PTS-STARTPTS)/${SPEED},${FIT},fps=30`,\n    ...ENC,\n    seg,\n  );\n  concat.push(seg);\n  const need = v + aDur + 0.35;\n  let len = segLen;\n  if (need > segLen) {\n    const png = W(`last-${i + 1}.png`);\n    ff(\"-sseof\", \"-0.2\", \"-i\", seg, \"-update\", \"1\", \"-frames:v\", \"1\", png);\n    const pad = W(`pad-${i + 1}.mp4`);\n    const padLen = (need - segLen).toFixed(3);\n    ff(\"-loop\", \"1\", \"-framerate\", \"30\", \"-t\", padLen, \"-i\", png, \"-vf\", FIT, ...ENC, pad);\n    concat.push(pad);\n    len = need;\n  }\n  audio.push({ mp3, delayMs: Math.round((T + v) * 1000) });\n\n  // 3. Subtitle cues from the same alignment, so voice and subtitles cannot drift.\n  //    At most 6 words per cue, break on punctuation, merge orphans under 3 words.\n  const words = [];\n  let cur = null;\n  al.characters.forEach((ch, k) => {\n    if (/\\s/.test(ch)) {\n      if (cur) words.push(cur);\n      cur = null;\n      return;\n    }\n    if (!cur) cur = { text: \"\", t0: al.character_start_times_seconds[k] };\n    cur.text += ch;\n    cur.t1 = al.character_end_times_seconds[k];\n  });\n  if (cur) words.push(cur);\n  const groups = [];\n  let g = [];\n  for (const w of words) {\n    g.push(w);\n    if (g.length >= 6 || /[.,;:!?]$/.test(w.text)) {\n      groups.push(g);\n      g = [];\n    }\n  }\n  if (g.length) groups.push(g);\n  for (let k = groups.length - 1; k > 0; k--) {\n    if (groups[k].length < 3) {\n      groups[k - 1].push(...groups[k]);\n      groups.splice(k, 1);\n    }\n  }\n  for (const grp of groups) {\n    cues.push({\n      t0: T + v + grp[0].t0,\n      t1: T + v + grp.at(-1).t1 + 0.1,\n      text: grp.map((w) => w.text).join(\" \"),\n    });\n  }\n  T += len;\n}\n\n// 4. Concat with the concat demuxer. The concat filter in one big filtergraph can\n//    truncate the video stream.\nwriteFileSync(W(\"concat.txt\"), concat.map((f) => `file '${f}'`).join(\"\\n\"));\nff(\"-f\", \"concat\", \"-safe\", \"0\", \"-i\", W(\"concat.txt\"), \"-c\", \"copy\", W(\"video.mp4\"));\n\n// 5. ASS subtitles: one small line, bottom centre, dark box. libass ignores the\n//    BackColour alpha with BorderStyle=3, so the box is solid #303030.\nconst ts = (t) => {\n  const cs = Math.round(t * 100);\n  const h = Math.floor(cs / 360000);\n  const m = String(Math.floor(cs / 6000) % 60).padStart(2, \"0\");\n  const sec = String(Math.floor(cs / 100) % 60).padStart(2, \"0\");\n  return `${h}:${m}:${sec}.${String(cs % 100).padStart(2, \"0\")}`;\n};\nfor (let k = 0; k < cues.length - 1; k++) cues[k].t1 = Math.min(cues[k].t1, cues[k + 1].t0);\nconst dialogue = cues\n  .map((c) => `Dialogue: 0,${ts(c.t0)},${ts(c.t1)},Default,,0,0,0,,${c.text}`)\n  .join(\"\\n\");\nconst ass = `[Script Info]\nScriptType: v4.00+\nPlayResX: 1920\nPlayResY: 1080\n\n[V4+ Styles]\nFormat: Name, Fontname, Fontsize, PrimaryColour, SecondaryColour, OutlineColour, BackColour, Bold, Italic, Underline, StrikeOut, ScaleX, ScaleY, Spacing, Angle, BorderStyle, Outline, Shadow, Alignment, MarginL, MarginR, MarginV, Encoding\nStyle: Default,${FONT},38,&H00FFFFFF,&H00FFFFFF,&H303030,&H00000000,0,0,0,0,100,100,0,0,3,2,0,2,40,40,30,1\n\n[Events]\nFormat: Layer, Start, End, Style, Name, MarginL, MarginR, MarginV, Effect, Text\n${dialogue}\n`;\nconst assPath = join(out, \"qa-loom.ass\");\nwriteFileSync(assPath, ass);\n\n// 6. Mux: delay each step's audio to where its screen renders, mix, burn subtitles.\n//    normalize=0 stops amix from dividing the volume by the number of inputs.\nconst inputs = audio.flatMap((a) => [\"-i\", a.mp3]);\nconst delays = audio.map((a, k) => `[${k + 1}:a]adelay=${a.delayMs}:all=1[a${k}]`).join(\";\");\nconst labels = audio.map((_, k) => `[a${k}]`).join(\"\");\nconst mix = `${labels}amix=inputs=${audio.length}:normalize=0:duration=longest[a]`;\nff(\n  \"-i\",\n  W(\"video.mp4\"),\n  ...inputs,\n  \"-filter_complex\",\n  `${delays};${mix};[0:v]ass=${assPath}[v]`,\n  \"-map\",\n  \"[v]\",\n  \"-map\",\n  \"[a]\",\n  ...ENC,\n  \"-c:a\",\n  \"aac\",\n  \"-b:a\",\n  \"128k\",\n  \"-movflags\",\n  \"+faststart\",\n  \"-t\",\n  T.toFixed(3),\n  join(out, \"qa-loom.mp4\"),\n);\nconst chars = steps.reduce((n, s) => n + s.narration.length, 0);\nconsole.log(\n  JSON.stringify({ durationS: +T.toFixed(2), steps: steps.length, cues: cues.length, chars }),\n);\n"
+    },
+    {
+      "path": "run-qa.sh",
+      "content": "#!/usr/bin/env bash\n# run-qa.sh: record a UI QA pass with agent-browser and write steps.json.\n# Every step offset is in seconds from the moment recording starts.\n#\n# Usage: BASE_URL=http://localhost:5274 OUT=./loom bash run-qa.sh\n# Needs: agent-browser (with `record`), jq, GNU date (%N). No bc: time math runs in jq.\n#\n# Replace the two example steps with the steps that prove your change.\nset -euo pipefail\nBASE_URL=${BASE_URL:-http://localhost:5274}\nOUT=${OUT:-./loom}\nmkdir -p \"$OUT\"\nLOG=\"$OUT/steps.ndjson\"\n: >\"$LOG\"\n\nnow() { date +%s.%N; }\n# act: call right before the action fires. It marks the step start.\nact() { STEP_START=$(now); }\n# step <action> <observed> <verdict> <narration>: call AFTER the resulting screen has\n# rendered (after an `agent-browser wait <selector>`). That moment becomes visualAt.\nstep() {\n  jq -nc --arg a \"$1\" --arg o \"$2\" --arg v \"$3\" --arg n \"$4\" \\\n    --arg t0 \"$T0\" --arg s \"$STEP_START\" --arg va \"$(now)\" \\\n    '{action:$a, observed:$o, verdict:$v, narration:$n,\n      start:(($s|tonumber)-($t0|tonumber)), visualAt:(($va|tonumber)-($t0|tonumber))}' >>\"$LOG\"\n}\n\n# Log in and seed data BEFORE recording starts.\nagent-browser set viewport 1920 1080 >/dev/null\nagent-browser open \"$BASE_URL\" >/dev/null\nagent-browser wait 1500 >/dev/null\nagent-browser record start \"$OUT/raw.webm\" --cursor --fps 30 >/dev/null\nT0=$(now)\n\nact\nagent-browser reload >/dev/null\nagent-browser wait h1 >/dev/null\nstep \"Load home page\" \"Heading and nav render\" pass \"The home page loads with its heading and nav.\"\nagent-browser wait 800 >/dev/null # dwell so the viewer sees the result before the next action\n\nact\nagent-browser open \"$BASE_URL/settings\" >/dev/null\nagent-browser wait h1 >/dev/null\nstep \"Open settings\" \"Settings page renders\" pass \"The settings page opens.\"\nagent-browser wait 800 >/dev/null\n\nEND=$(jq -n --arg a \"$(now)\" --arg b \"$T0\" '($a|tonumber)-($b|tonumber)')\nagent-browser record stop >/dev/null\n\n# Each step ends where the next one starts; the last one ends at record stop.\njq -s --argjson end \"$END\" '\n  {steps: ([to_entries[] | .value + {idx: (.key + 1)}]\n    | . as $s\n    | [range(0; length) as $i\n        | $s[$i] + {end: (if $i + 1 < ($s | length) then $s[$i + 1].start else $end end)}])}\n' \"$LOG\" >\"$OUT/steps.json\"\njq -c '.steps[] | {idx, start, visualAt, end, verdict}' \"$OUT/steps.json\"\n"
+    }
+  ],
   "questioning": [
     {
       "path": "template.md",