@desplega.ai/agent-swarm 2.2.0 → 2.4.0

package/dist/cli-8cxkw1f5.js

@@ -0,0 +1,382 @@
+import {
+  getDbClient2,
+  scheduleOrgDomainRecompute,
+  init_telemetry_identity,
+  validateRuntimeTokenTtlHours,
+  init_swarm_config_guard,
+  init_db3
+} from "./cli-rg7ntypm.js";
+import {
+  unregisterVolatileSecret,
+  init_secret_scrubber
+} from "./cli-4mkvwgzr.js";
+import {
+  __esm
+} from "./cli-242037k3.js";
+
+// src/utils/session-token-connections.ts
+function registerSessionTokenConnection(tokenId, close) {
+  let callbacks = connections.get(tokenId);
+  if (!callbacks) {
+    callbacks = new Set;
+    connections.set(tokenId, callbacks);
+  }
+  callbacks.add(close);
+  return () => {
+    callbacks.delete(close);
+    if (callbacks.size === 0)
+      connections.delete(tokenId);
+  };
+}
+function closeSessionTokenConnections(tokenIds) {
+  for (const tokenId of tokenIds) {
+    for (const close of connections.get(tokenId) ?? [])
+      close();
+  }
+}
+var connections;
+var init_session_token_connections = __esm(() => {
+  connections = new Map;
+});
+
+// src/be/users.ts
+import { createHash, randomBytes, randomUUID } from "node:crypto";
+function actorString(actor) {
+  return `${actor.kind}:${actor.id}`;
+}
+function rowToUser(row) {
+  return {
+    id: row.id,
+    name: row.name,
+    email: row.email ?? undefined,
+    role: row.role ?? undefined,
+    notes: row.notes ?? undefined,
+    emailAliases: row.emailAliases ? JSON.parse(row.emailAliases) : [],
+    preferredChannel: row.preferredChannel ?? "slack",
+    timezone: row.timezone ?? undefined,
+    metadata: row.metadata ? JSON.parse(row.metadata) : undefined,
+    dailyBudgetUsd: row.dailyBudgetUsd ?? null,
+    status: row.status ?? "active",
+    createdAt: row.createdAt,
+    lastUpdatedAt: row.lastUpdatedAt
+  };
+}
+async function findUserById(id) {
+  const row = await getDbClient2().get("SELECT * FROM users WHERE id = ?", [id]);
+  return row ? rowToUser(row) : null;
+}
+async function findUserByExternalId(kind, externalId) {
+  const row = await getDbClient2().get(`SELECT u.* FROM users u
+       INNER JOIN user_external_ids x ON x.userId = u.id
+       WHERE x.kind = ? AND x.externalId = ?`, [kind, externalId]);
+  return row ? rowToUser(row) : null;
+}
+async function findUserByEmail(email) {
+  const lower = email.toLowerCase();
+  const db = getDbClient2();
+  const primary = await db.get("SELECT * FROM users WHERE LOWER(email) = LOWER(?)", [
+    email
+  ]);
+  if (primary)
+    return rowToUser(primary);
+  const aliasRows = await db.query("SELECT * FROM users WHERE emailAliases IS NOT NULL AND emailAliases != '[]'");
+  for (const r of aliasRows) {
+    const aliases = r.emailAliases ? JSON.parse(r.emailAliases) : [];
+    if (aliases.some((a) => a.toLowerCase() === lower)) {
+      return rowToUser(r);
+    }
+  }
+  return null;
+}
+async function findUsersByName(name) {
+  const trimmed = name.trim();
+  if (!trimmed)
+    return [];
+  const client = getDbClient2();
+  const exact = await client.query("SELECT * FROM users WHERE LOWER(name) = LOWER(?)", [
+    trimmed
+  ]);
+  if (exact.length > 0)
+    return exact.map(rowToUser);
+  const firstToken = trimmed.split(/\s+/)[0] ?? trimmed;
+  const prefixed = await client.query("SELECT * FROM users WHERE LOWER(name) LIKE LOWER(?) || '%'", [firstToken]);
+  return prefixed.map(rowToUser);
+}
+async function getUserIdentities(userId) {
+  return getDbClient2().query("SELECT kind, externalId FROM user_external_ids WHERE userId = ? ORDER BY kind, externalId", [userId]);
+}
+function rowToEvent(row) {
+  return {
+    id: row.id,
+    userId: row.userId,
+    eventType: row.eventType,
+    actor: row.actor,
+    before: row.beforeJson == null ? null : JSON.parse(row.beforeJson),
+    after: row.afterJson == null ? null : JSON.parse(row.afterJson),
+    createdAt: row.createdAt
+  };
+}
+async function listUserEvents(userId, opts = {}) {
+  const limit = Math.max(1, Math.min(opts.limit ?? 50, 200));
+  const before = opts.before;
+  const client = getDbClient2();
+  if (before) {
+    const rows = await client.query(`SELECT id, userId, eventType, actor, beforeJson, afterJson, createdAt
+           FROM user_identity_events
+          WHERE userId = ? AND createdAt < ?
+          ORDER BY createdAt DESC, rowid DESC
+          LIMIT ?`, [userId, before, limit]);
+    return rows.map(rowToEvent);
+  }
+  const rows = await client.query(`SELECT id, userId, eventType, actor, beforeJson, afterJson, createdAt
+         FROM user_identity_events
+        WHERE userId = ?
+        ORDER BY createdAt DESC, rowid DESC
+        LIMIT ?`, [userId, limit]);
+  return rows.map(rowToEvent);
+}
+async function listUserTokens(userId) {
+  return getDbClient2().query(`SELECT id, userId, label, tokenPreview, createdAt, lastUsedAt, revokedAt
+         FROM user_tokens
+        WHERE userId = ?
+        ORDER BY createdAt DESC`, [userId]);
+}
+async function recordIdentityEvent(userId, eventType, actor, before, after) {
+  await getDbClient2().run(`INSERT INTO user_identity_events (id, userId, eventType, actor, beforeJson, afterJson, createdAt)
+       VALUES (?, ?, ?, ?, ?, ?, ?)`, [
+    randomUUID().replace(/-/g, ""),
+    userId,
+    eventType,
+    actorString(actor),
+    before == null ? null : JSON.stringify(before),
+    after == null ? null : JSON.stringify(after),
+    new Date().toISOString()
+  ]);
+}
+async function findOrCreateUserByEmail(email, hints, actor) {
+  const existing = await findUserByEmail(email);
+  if (existing) {
+    await recordIdentityEvent(existing.id, "auto_merge", actor, null, { email, hints });
+    return { user: existing, created: false };
+  }
+  const id = randomUUID().replace(/-/g, "");
+  const now = new Date().toISOString();
+  const name = hints.name?.trim() || email.split("@")[0] || email;
+  const created = await getDbClient2().transaction(async (tx) => {
+    await tx.run(`INSERT INTO users (id, name, email, role, notes, emailAliases, preferredChannel, timezone, createdAt, lastUpdatedAt, status)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'active')`, [
+      id,
+      name,
+      email,
+      hints.role ?? null,
+      hints.notes ?? null,
+      "[]",
+      hints.preferredChannel ?? "slack",
+      null,
+      now,
+      now
+    ]);
+    const row = await tx.get("SELECT * FROM users WHERE id = ?", [id]);
+    if (!row)
+      throw new Error("Failed to create user");
+    await recordIdentityEvent(id, "identity_added", actor, null, { email, name });
+    return rowToUser(row);
+  });
+  getDbClient2().afterCommit(scheduleOrgDomainRecompute);
+  return { user: created, created: true };
+}
+async function linkIdentity(userId, kind, externalId, actor) {
+  await getDbClient2().transaction(async (tx) => {
+    await tx.run("INSERT INTO user_external_ids (userId, kind, externalId) VALUES (?, ?, ?)", [
+      userId,
+      kind,
+      externalId
+    ]);
+    await recordIdentityEvent(userId, "identity_added", actor, null, { kind, externalId });
+  });
+}
+async function unlinkIdentity(userId, kind, externalId, actor) {
+  await getDbClient2().transaction(async (tx) => {
+    await tx.run("DELETE FROM user_external_ids WHERE userId = ? AND kind = ? AND externalId = ?", [
+      userId,
+      kind,
+      externalId
+    ]);
+    await recordIdentityEvent(userId, "identity_removed", actor, { kind, externalId }, null);
+  });
+}
+function base62(bytes) {
+  const alphabet = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
+  let out = "";
+  for (const b of bytes) {
+    out += alphabet[b % 62];
+  }
+  return out;
+}
+function sha256Hex(input) {
+  return createHash("sha256").update(input).digest("hex");
+}
+async function mintToken(userId, label, actor, options = {}) {
+  const plaintext = `${TOKEN_PREFIX}${base62(randomBytes(24))}`;
+  const tokenId = randomUUID().replace(/-/g, "");
+  const hash = sha256Hex(plaintext);
+  const preview = plaintext.slice(-4);
+  const now = new Date().toISOString();
+  await getDbClient2().transaction(async (tx) => {
+    await tx.run(`INSERT INTO user_tokens (id, userId, label, tokenHash, tokenPreview, createdAt)
+       VALUES (?, ?, ?, ?, ?, ?)`, [tokenId, userId, label, hash, preview, now]);
+    await recordIdentityEvent(userId, "token_minted", actor, null, {
+      tokenId,
+      label,
+      preview,
+      ...options.source ? { source: options.source } : {}
+    });
+  });
+  return { tokenId, plaintext };
+}
+async function revokeToken(tokenId, actor) {
+  await getDbClient2().transaction(async (tx) => {
+    const row = await tx.get("SELECT userId, label, tokenPreview FROM user_tokens WHERE id = ?", [tokenId]);
+    if (!row) {
+      throw new Error(`Token not found: ${tokenId}`);
+    }
+    await tx.run("UPDATE user_tokens SET revokedAt = ? WHERE id = ?", [
+      new Date().toISOString(),
+      tokenId
+    ]);
+    await recordIdentityEvent(row.userId, "token_revoked", actor, { tokenId, label: row.label, preview: row.tokenPreview }, null);
+  });
+}
+async function resolveUserByToken(plaintext) {
+  const hash = sha256Hex(plaintext);
+  const client = getDbClient2();
+  const row = await client.get("SELECT id, userId, revokedAt FROM user_tokens WHERE tokenHash = ?", [hash]);
+  if (!row || row.revokedAt !== null)
+    return null;
+  try {
+    await client.run("UPDATE user_tokens SET lastUsedAt = ? WHERE id = ?", [
+      new Date().toISOString(),
+      row.id
+    ]);
+  } catch {}
+  return findUserById(row.userId);
+}
+async function mintSessionToken(agentId, taskId, ttlMs, parent) {
+  if (parent) {
+    return await getDbClient2().transaction(async (client) => {
+      const row = await client.get(`SELECT expiresAt FROM session_tokens WHERE id = ? AND agentId = ? AND runtimeId = ?
+         AND revokedAt IS NULL AND expiresAt > ?`, [parent.tokenId, agentId, parent.runtimeId, new Date().toISOString()]);
+      if (!row)
+        throw new InvalidRuntimeTokenError;
+      return await insertSessionToken(agentId, taskId, null, ttlMs, parent.runtimeId, row.expiresAt);
+    });
+  }
+  return await insertSessionToken(agentId, taskId, null, ttlMs);
+}
+function runtimeTokenTtlMs() {
+  const hours = process.env.RUNTIME_TOKEN_TTL_HOURS ?? "168";
+  return (validateRuntimeTokenTtlHours(hours) === null ? Number(hours) : 168) * 60 * 60 * 1000;
+}
+async function mintRuntimeToken(agentId, runtimeId, ttlMs = runtimeTokenTtlMs()) {
+  return await insertSessionToken(agentId, null, runtimeId, ttlMs);
+}
+async function insertSessionToken(agentId, taskId, runtimeId, ttlMs, parentRuntimeId = null, expiresAtCeiling, controllerId = null) {
+  const plaintext = `${SESSION_TOKEN_PREFIX}${base62(randomBytes(24))}`;
+  const tokenId = randomUUID().replace(/-/g, "");
+  const hash = sha256Hex(plaintext);
+  const preview = plaintext.slice(-4);
+  const now = new Date;
+  const expiresAt = new Date(Math.min(now.getTime() + ttlMs, expiresAtCeiling ? Date.parse(expiresAtCeiling) : Infinity)).toISOString();
+  await getDbClient2().run(`INSERT INTO session_tokens
+     (id, tokenHash, tokenPreview, agentId, taskId, runtimeId, parentRuntimeId, expiresAt, createdAt, controllerId)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+    tokenId,
+    hash,
+    preview,
+    agentId,
+    taskId,
+    runtimeId,
+    parentRuntimeId,
+    expiresAt,
+    now.toISOString(),
+    controllerId
+  ]);
+  return { tokenId, plaintext };
+}
+async function revokeSessionToken(tokenId) {
+  await getDbClient2().transaction(async (client) => {
+    const row = await client.get("SELECT runtimeId FROM session_tokens WHERE id = ?", [tokenId]);
+    if (row?.runtimeId) {
+      await revokeRuntimeTokensForRuntime(row.runtimeId);
+    } else {
+      await client.run("UPDATE session_tokens SET revokedAt = ? WHERE id = ? AND revokedAt IS NULL", [new Date().toISOString(), tokenId]);
+      getDbClient2().afterCommit(() => closeSessionTokenConnections([tokenId]));
+    }
+  });
+}
+async function revokeRuntimeTokensForRuntime(runtimeId) {
+  await getDbClient2().transaction(async (client) => {
+    const rows = await client.query("SELECT id FROM session_tokens WHERE runtimeId = ? OR parentRuntimeId = ?", [runtimeId, runtimeId]);
+    await client.run(`UPDATE session_tokens SET revokedAt = ?
+       WHERE (runtimeId = ? OR parentRuntimeId = ?) AND revokedAt IS NULL`, [new Date().toISOString(), runtimeId, runtimeId]);
+    getDbClient2().afterCommit(() => {
+      unregisterVolatileSecret(`runtime:${runtimeId}`);
+      closeSessionTokenConnections(rows.map((row) => row.id));
+    });
+  });
+}
+async function resolveSessionToken(plaintext, options = {}) {
+  if (!plaintext.startsWith(SESSION_TOKEN_PREFIX))
+    return null;
+  const hash = sha256Hex(plaintext);
+  const client = getDbClient2();
+  const row = await client.get(`SELECT s.id, s.agentId, s.taskId, s.runtimeId, s.controllerId, s.expiresAt, s.revokedAt,
+     c.placement FROM session_tokens s LEFT JOIN runtime_controllers c ON c.id = s.controllerId
+     WHERE s.tokenHash = ?`, [hash]);
+  if (!row || row.revokedAt !== null)
+    return null;
+  if (new Date(row.expiresAt) <= new Date)
+    return null;
+  if (row.controllerId !== null) {
+    return row.placement === "remote" ? {
+      kind: "controller",
+      controllerId: row.controllerId,
+      tokenId: row.id,
+      expiresAt: row.expiresAt
+    } : null;
+  }
+  if (options.touch !== false) {
+    try {
+      await client.run("UPDATE session_tokens SET lastUsedAt = ? WHERE id = ?", [
+        new Date().toISOString(),
+        row.id
+      ]);
+    } catch {}
+  }
+  return {
+    kind: "agent",
+    tokenId: row.id,
+    agentId: row.agentId,
+    taskId: row.taskId,
+    runtimeId: row.runtimeId,
+    expiresAt: row.expiresAt
+  };
+}
+function fingerprintApiKey(rawKey) {
+  return `op:${sha256Hex(rawKey).slice(0, 16)}`;
+}
+var TOKEN_PREFIX = "aswt_", SESSION_TOKEN_PREFIX = "aseph_", InvalidRuntimeTokenError;
+var init_users = __esm(() => {
+  init_telemetry_identity();
+  init_secret_scrubber();
+  init_session_token_connections();
+  init_db3();
+  init_swarm_config_guard();
+  InvalidRuntimeTokenError = class InvalidRuntimeTokenError extends Error {
+    constructor() {
+      super("Runtime token is no longer valid");
+    }
+  };
+});
+
+export { registerSessionTokenConnection, closeSessionTokenConnections, init_session_token_connections, findUserById, findUserByExternalId, findUserByEmail, findUsersByName, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, InvalidRuntimeTokenError, mintSessionToken, mintRuntimeToken, insertSessionToken, revokeSessionToken, revokeRuntimeTokensForRuntime, resolveSessionToken, fingerprintApiKey, init_users };

package/dist/{cli-xhgtay7w.js → cli-8rwvksbc.js}

@@ -14,13 +14,13 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-ksrphveb.js";
+} from "./cli-a1esmmee.js";
 import {
   resolveTemplateFromCode,
   resolveTemplateAsync,
   init_resolver,
   init_session_templates
-} from "./cli-w7z94e6c.js";
+} from "./cli-tx00c0h6.js";
 import {
   parseEnvFlag,
   init_env_flag

package/dist/{cli-e09hj50q.js → cli-8wkb09q5.js}

@@ -21,7 +21,7 @@ import {
 } from "./cli-242037k3.js";
 
 // node_modules/@slack/logger/dist/index.js
-var require_dist6 = __commonJS(function(exports) {
+var require_dist5 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.ConsoleLogger = exports.LogLevel = undefined;
   var LogLevel;
@@ -305,8 +305,8 @@ var require_logger = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.LogLevel = undefined;
   exports.getLogger = getLogger;
-  var logger_1 = require_dist6();
-  var logger_2 = require_dist6();
+  var logger_1 = require_dist5();
+  var logger_2 = require_dist5();
   Object.defineProperty(exports, "LogLevel", { enumerable: true, get: function() {
     return logger_2.LogLevel;
   } });
@@ -3887,7 +3887,7 @@ var require_priority_queue = __commonJS(function(exports) {
 });
 
 // node_modules/p-queue/dist/index.js
-var require_dist7 = __commonJS(function(exports) {
+var require_dist6 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   var EventEmitter = require_eventemitter32();
   var p_timeout_1 = require_p_timeout();
@@ -4956,7 +4956,7 @@ var require_views = __commonJS(function(exports) {
 });
 
 // node_modules/@slack/types/dist/index.js
-var require_dist8 = __commonJS(function(exports) {
+var require_dist7 = __commonJS(function(exports) {
   var __createBinding = exports && exports.__createBinding || (Object.create ? function(o, m, k, k2) {
     if (k2 === undefined)
       k2 = k;
@@ -5496,7 +5496,7 @@ var require_methods = __commonJS(function(exports) {
     }
   }
   exports.Methods = Methods;
-  __exportStar(require_dist8(), exports);
+  __exportStar(require_dist7(), exports);
 });
 
 // node_modules/@slack/web-api/dist/WebClient.js
@@ -5665,7 +5665,7 @@ var require_WebClient = __commonJS(function(exports) {
   var form_data_1 = __importDefault(require_form_data());
   var is_electron_1 = __importDefault(require_is_electron());
   var is_stream_1 = __importDefault(require_is_stream());
-  var p_queue_1 = __importDefault(require_dist7());
+  var p_queue_1 = __importDefault(require_dist6());
   var p_retry_1 = __importStar(require_p_retry());
   var chat_stream_1 = require_chat_stream();
   var errors_1 = require_errors();
@@ -6193,7 +6193,7 @@ var require_WebClient = __commonJS(function(exports) {
 });
 
 // node_modules/@slack/web-api/dist/index.js
-var require_dist9 = __commonJS(function(exports) {
+var require_dist8 = __commonJS(function(exports) {
   var __createBinding = exports && exports.__createBinding || (Object.create ? function(o, m, k, k2) {
     if (k2 === undefined)
       k2 = k;
@@ -6295,7 +6295,7 @@ var require_errors2 = __commonJS(function(exports) {
 var require_logger2 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.LogLevel = undefined;
-  var logger_1 = require_dist6();
+  var logger_1 = require_dist5();
   Object.defineProperty(exports, "LogLevel", { enumerable: true, get: function() {
     return logger_1.LogLevel;
   } });
@@ -6714,7 +6714,7 @@ var require_SocketModeClient = __commonJS(function(exports) {
   };
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.SocketModeClient = undefined;
-  var web_api_1 = require_dist9();
+  var web_api_1 = require_dist8();
   var eventemitter3_1 = require_eventemitter3();
   var package_json_1 = __importDefault(require_package2());
   var errors_1 = require_errors2();
@@ -6982,4 +6982,4 @@ var require_src2 = __commonJS(function(exports) {
   } });
 });
 
-export { require_dist6, require_axios, require_is_electron, require_is_stream, require_dist7, require_eventemitter3, require_dist8, require_dist9, require_src2 };
+export { require_dist5, require_axios, require_is_electron, require_is_stream, require_dist6, require_eventemitter3, require_dist7, require_dist8, require_src2 };

package/dist/{cli-ksrphveb.js → cli-a1esmmee.js}

@@ -1637,7 +1637,7 @@ function checkExtensionInstallSource(body, ctx) {
     ctx.addIssue({ code: "custom", path: ["files"], message: "files is required with manifest" });
   }
 }
-var AssetKeySchema, AssetEntityTypeSchema, AssetProviderRefSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, RoutingReasonSchema, RoutingSourceSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SteerModeSchema, SteeringStatusSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, TaskAttachmentKindSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY = "_agentSwarmGeneratedBy", attachmentCapabilitiesSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, UserCommsPrefsSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AcpSessionConfigSelectValueSchema, AcpSessionConfigSelectGroupSchema, AcpSessionConfigOptionSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, REPO_GUIDELINES_MAX_ENTRIES = 50, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeInstanceStatusSchema, RuntimeProviderKindSchema, DeliveryModeSchema, PoolLifecycleSchema, RuntimeResourcesSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, WebhookVerificationSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionNameSchema, SemverSchema, ExtensionBundlePathSchema, ExtensionAssetNameSchema, ExtensionScriptAssetSchema, ExtensionScheduleAssetSchema, ExtensionWorkflowAssetSchema, ExtensionSkillAssetSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionStatusSchema, ExtensionSchema, ExtensionFileSchema, ExtensionVersionSchema, ExtensionRunSchema, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
+var AssetKeySchema, AssetEntityTypeSchema, AssetProviderRefSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, RoutingReasonSchema, RoutingSourceSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SessionShareAccessSchema, SessionAccessSchema, SessionOwnerSchema, SessionSharesSchema, SessionSharesUpdateSchema, SteerModeSchema, SteeringStatusSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, TaskAttachmentKindSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY = "_agentSwarmGeneratedBy", attachmentCapabilitiesSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, UserCommsPrefsSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AcpSessionConfigSelectValueSchema, AcpSessionConfigSelectGroupSchema, AcpSessionConfigOptionSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, REPO_GUIDELINES_MAX_ENTRIES = 50, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeInstanceStatusSchema, RuntimeProviderKindSchema, DeliveryModeSchema, PoolLifecycleSchema, RuntimeResourcesSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, WebhookVerificationSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionNameSchema, SemverSchema, ExtensionBundlePathSchema, ExtensionAssetNameSchema, ExtensionScriptAssetSchema, ExtensionScheduleAssetSchema, ExtensionWorkflowAssetSchema, ExtensionSkillAssetSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionStatusSchema, ExtensionSchema, ExtensionFileSchema, ExtensionVersionSchema, ExtensionRunSchema, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
 var init_types = __esm(() => {
   init_key();
   init_bundle_path();
@@ -1855,6 +1855,17 @@ var init_types = __esm(() => {
     createdAt: string2(),
     lastUpdatedAt: string2()
   });
+  SessionShareAccessSchema = _enum2(["read", "write"]);
+  SessionAccessSchema = _enum2(["owner", "write", "read"]);
+  SessionOwnerSchema = object2({ id: string2(), name: string2() }).openapi("SessionOwner");
+  SessionSharesSchema = object2({
+    everyone: _enum2(["none", "read", "write"]),
+    users: array2(object2({ userId: string2(), access: SessionShareAccessSchema, createdAt: string2() }))
+  }).openapi("SessionShares");
+  SessionSharesUpdateSchema = object2({
+    everyone: _enum2(["none", "read", "write"]),
+    users: array2(object2({ userId: string2().min(1), access: SessionShareAccessSchema })).max(500)
+  });
   SteerModeSchema = _enum2(["steer", "queue"]);
   SteeringStatusSchema = _enum2([
     "pending",
@@ -2170,6 +2181,7 @@ var init_types = __esm(() => {
     dismissedAt: string2().optional(),
     doneAt: string2().optional(),
     readAt: string2().optional(),
+    lastReadAt: string2().optional(),
     createdAt: string2(),
     lastUpdatedAt: string2()
   }).openapi("InboxItemState");
@@ -3631,4 +3643,4 @@ var init_types = __esm(() => {
   }).openapi("KvEntry");
 });
 
-export { normalizeAssetKey, defaultAssetKey, parseAssetKey, isCanonicalAssetKey, canWriteAssetKey, init_key, isSafeBundlePath, init_bundle_path, $OpenAPIRegistry, $OpenApiGeneratorV31, init_dist, init_zod_openapi, AssetKeySchema, AssetEntityTypeSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, DEFAULT_MODEL_TIER_MAP, parseModelTier, splitLegacyModelAlias, parseWorkerModelTierOverrides, resolveTaskModelSelection, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, isTerminalTaskStatus, AgentTaskSourceSchema, RoutingReasonSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SteerModeSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, UserCommsPrefsSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentLatestModelSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, VersionableFieldSchema, ChannelTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeProviderKindSchema, DeliveryModeSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSchema, PageVersionSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionSchema, ExtensionVersionSchema, ExtensionRunSchema, checkExtensionInstallSource, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types };
+export { normalizeAssetKey, defaultAssetKey, parseAssetKey, isCanonicalAssetKey, canWriteAssetKey, init_key, isSafeBundlePath, init_bundle_path, $OpenAPIRegistry, $OpenApiGeneratorV31, init_dist, init_zod_openapi, AssetKeySchema, AssetEntityTypeSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, DEFAULT_MODEL_TIER_MAP, parseModelTier, splitLegacyModelAlias, parseWorkerModelTierOverrides, resolveTaskModelSelection, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, isTerminalTaskStatus, AgentTaskSourceSchema, RoutingReasonSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SessionAccessSchema, SessionOwnerSchema, SessionSharesSchema, SessionSharesUpdateSchema, SteerModeSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, UserCommsPrefsSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentLatestModelSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, VersionableFieldSchema, ChannelTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeProviderKindSchema, DeliveryModeSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSchema, PageVersionSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionSchema, ExtensionVersionSchema, ExtensionRunSchema, checkExtensionInstallSource, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types };

package/dist/{cli-xnp2vkx7.js → cli-avmqhatn.js}

@@ -10,7 +10,7 @@ import {
   getMostRecentTaskInThread2,
   reactionName,
   init_db3
-} from "./cli-4c7k75rq.js";
+} from "./cli-rg7ntypm.js";
 import {
   TaskCreationBlockedError,
   buildEffectiveText,
@@ -23,7 +23,7 @@ import {
   extractTaskFromMessage,
   extractSlackMessageText,
   dispatchPre2
-} from "./cli-bddxamg7.js";
+} from "./cli-x719j3vs.js";
 import {
   noteSlackInboundSideEffect,
   ignoreSlackInbound,
@@ -34,14 +34,14 @@ import {
   isSlackRenderV2Enabled2,
   ensureSlackThreadTree2,
   registerTreeMessage
-} from "./cli-tba8fxf9.js";
+} from "./cli-4fhyq711.js";
 import {
   isBlockExternalEnabled2,
   invalidateChannelExternality2,
   getChannelBlockReason2,
   shouldBlockChannel2,
   leaveExternalChannel2
-} from "./cli-ztcxv5nv.js";
+} from "./cli-xfe63zx3.js";
 import {
   workflowEventBus2,
   init_event_bus
@@ -50,7 +50,7 @@ import {
   enrichSlackUserEmail,
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-5ks6x36q.js";
+} from "./cli-x1p5dhq2.js";
 import {
   wasEventSeen,
   requestSlackThreadSteering,
@@ -58,11 +58,11 @@ import {
   bufferThreadMessage,
   getBufferMessageCount,
   instantFlush
-} from "./cli-8c1m9mhy.js";
+} from "./cli-1cevz46c.js";
 import {
   resolveTemplate,
   init_resolver
-} from "./cli-w7z94e6c.js";
+} from "./cli-tx00c0h6.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";

package/dist/{cli-xx13gqf3.js → cli-b80a1100.js}

@@ -9,7 +9,7 @@ import {
   acquireOAuthRefreshLock,
   releaseOAuthRefreshLock,
   init_oauth
-} from "./cli-4c7k75rq.js";
+} from "./cli-rg7ntypm.js";
 import {
   scrubSecrets,
   registerVolatileSecret,

package/dist/{cli-z1hh99j0.js → cli-bfc3k1x5.js}

@@ -19,7 +19,7 @@ import {
 } from "./cli-vjfpshn3.js";
 import {
   summarizeSession
-} from "./cli-etvn5ej2.js";
+} from "./cli-sppc0cmw.js";
 import {
   swarmRuntimeInstanceId
 } from "./cli-7a91w22y.js";
@@ -52,7 +52,7 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-ksrphveb.js";
+} from "./cli-a1esmmee.js";
 import {
   runtimeCatalogModel,
   init_runtime_model_catalog
@@ -60,7 +60,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-2jm992rm.js";
+} from "./cli-mz1ezzzh.js";
 import {
   isEnvFlagEnabled,
   init_env_flag