@desplega.ai/agent-swarm 2.4.0 → 2.4.2

package/dist/{cli-nrrg0fvy.js → cli-h38rjv87.js}

@@ -19,6 +19,7 @@ import {
   init_quickjs_pool_config,
   isApiOnlyConfigKey,
   isInternalConfigKey,
+  APPS_JSON_COLUMN_MAX_BYTES_BOUNDS,
   init_swarm_config_guard,
   getOAuthApp,
   getOAuthAppById,
@@ -38,14 +39,14 @@ import {
   getResolvedConfig2,
   getMcpServerById2,
   init_db3
-} from "./cli-rg7ntypm.js";
+} from "./cli-d3qqdy4c.js";
 import {
   generateRandomCodeVerifier,
   generateRandomState,
   calculatePKCECodeChallenge,
   oauthAppRowToProviderConfig,
   ensureAuthorizationTokenOrThrow
-} from "./cli-b80a1100.js";
+} from "./cli-s6vr7r2d.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -57,7 +58,7 @@ import {
 import {
   defaultAssetKey,
   init_key
-} from "./cli-a1esmmee.js";
+} from "./cli-fpmsqq59.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -98,7 +99,7 @@ import {
   refreshSecretScrubberCache,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 import {
   __toESM,
   __commonJS,
@@ -178553,6 +178554,9 @@ async function runSavedScriptAsAgent(args, deps = {}) {
   return output;
 }
 
+// src/apps/definition.ts
+init_swarm_config_guard();
+
 // src/scripts-runtime/quickjs-compat.ts
 var import_typescript3 = __toESM(require_typescript2(), 1);
 var UNSUPPORTED_GLOBALS = new Set([
@@ -180098,7 +180102,7 @@ var catalog_generated_default = {
       }
     },
     Table: {
-      description: 'Data table. Bind `data`/`loading`/`error` to a named query (`/queries/<name>/...`). `rowActions` chains receive `{ "$row": "<col>" }` (or `{ "$row": "" }` for the whole row) and `{ "$rowIndex": true }`. Destructive row actions always confirm via a dialog; override the copy with `confirm: { title, description, confirmLabel }`. `search` (case-insensitive substring across every listed column) and `filters` (per-column equality, `null`/`""` disables one; an array means "one of", which is what a multiple `Chips` writes, and an empty array disables it) narrow the polled rows client-side — bind them to a `SearchInput` / `Select` via `/ui/<id>/value`, or pin a constant (e.g. `"filters": { "pinned": true }`). Columns take `pinned: "left"|"right"` to survive horizontal scroll; `pagination` pages large row sets (auto past 200 rows); `density: "compact"` tightens row height. Column kinds: `status` (lifecycle values like pending/in_progress/completed/failed get the dashboard status icon, anything else a `tones` pill), `user` / `agent` (avatar + name), `relative` (smart time with the exact time on hover), `duration` (ms → 1m 23s), `progress` (bar, `max` default 100), `copy` (value + copy button), `switch` (runs the column\'s `onChange` chain with `$row` set to the new value; read-only without it), `link` (http(s) URL, opens in a new tab). Columns also take `align`, `truncate: "middle"` (ids, paths), a header `icon` and `tooltip` (a row field shown on hover). `onRowClick` runs a chain with `$row` when a row is clicked — pair it with `app.navigate` + a Drawer and bind `selectedId` to the drawer param to highlight the open row. `rowId` names the id field (default `id`). Below 768px the table renders as a phone list (`mobile: "list"`, fields picked by `mobileFields: { title, subtitle?, meta?, status? }`); `mobile: "scroll"` keeps the grid. `emptyState: { icon?, title, body? }` replaces the empty message. Row actions take `icon` and `placement: "menu"` (collected into a More menu).',
+      description: 'Data table. Bind `data`/`loading`/`error` to a named query (`/queries/<name>/...`). `rowActions` chains receive `{ "$row": "<col>" }` (or `{ "$row": "" }` for the whole row) and `{ "$rowIndex": true }`. Destructive row actions always confirm via a dialog; override the copy with `confirm: { title, description, confirmLabel }`. `search` (case-insensitive substring across every listed column) and `filters` (per-column equality, `null`/`""` disables one; an array means "one of", which is what a multiple `Chips` writes, and an empty array disables it) narrow the polled rows client-side — bind them to a `SearchInput` / `Select` via `/ui/<id>/value`, or pin a constant (e.g. `"filters": { "pinned": true }`). Columns take `pinned: "left"|"right"` to survive horizontal scroll; `pagination` pages large row sets (auto past 200 rows); `density: "compact"` tightens row height. Column kinds: `status` (lifecycle values like pending/in_progress/completed/failed get the dashboard status icon, anything else a `tones` pill), `user` / `agent` (avatar + name), `relative` (smart time with the exact time on hover), `duration` (ms → 1m 23s), `progress` (bar, `max` default 100), `copy` (value + copy button), `switch` (runs the column\'s `onChange` chain with `$row` set to the new value; read-only without it), `link` (http(s) URL, opens in a new tab), `json` (compact single-line `JSON.stringify` preview, truncated). Columns also take `align`, `truncate: "middle"` (ids, paths), a header `icon` and `tooltip` (a row field shown on hover). `onRowClick` runs a chain with `$row` when a row is clicked — pair it with `app.navigate` + a Drawer and bind `selectedId` to the drawer param to highlight the open row. `rowId` names the id field (default `id`). Below 768px the table renders as a phone list (`mobile: "list"`, fields picked by `mobileFields: { title, subtitle?, meta?, status? }`); `mobile: "scroll"` keeps the grid. `emptyState: { icon?, title, body? }` replaces the empty message. Row actions take `icon` and `placement: "menu"` (collected into a More menu).',
       props: {
         $schema: "http://json-schema.org/draft-07/schema#",
         type: "object",
@@ -180142,7 +180146,8 @@ var catalog_generated_default = {
                     "progress",
                     "copy",
                     "switch",
-                    "link"
+                    "link",
+                    "json"
                   ]
                 },
                 tones: {
@@ -182525,11 +182530,55 @@ async function resolveSyncRunAs(script) {
 var AppNameSchema = string2().regex(/^[a-z][a-zA-Z0-9_]{0,39}$/, {
   message: "must start with a lowercase letter and contain only letters, numbers, or underscores"
 });
-var ColumnKindSchema = _enum2(["string", "number", "boolean", "date", "enum"]);
+var ColumnKindSchema = _enum2(["string", "number", "boolean", "date", "enum", "json"]);
+var ScalarColumnKindSchema = ColumnKindSchema.exclude(["json"]);
 var ISO_8601_PREFIX = /^\d{4}-\d{2}-\d{2}(?:T.*)?$/;
 function isIso8601Date(value) {
   return ISO_8601_PREFIX.test(value) && !Number.isNaN(Date.parse(value));
 }
+var DEFAULT_JSON_COLUMN_MAX_BYTES = 256 * 1024;
+function jsonColumnMaxBytes(env = process.env) {
+  const raw = env.APPS_JSON_COLUMN_MAX_BYTES?.trim();
+  if (!raw || !/^\d+$/.test(raw))
+    return DEFAULT_JSON_COLUMN_MAX_BYTES;
+  const value = Number(raw);
+  const { min, max } = APPS_JSON_COLUMN_MAX_BYTES_BOUNDS;
+  return Number.isSafeInteger(value) && value >= min && value <= max ? value : DEFAULT_JSON_COLUMN_MAX_BYTES;
+}
+function jsonColumnSizeLabel(bytes = jsonColumnMaxBytes()) {
+  return bytes % 1024 === 0 ? `${bytes / 1024}KB` : `${bytes} bytes`;
+}
+function jsonColumnValueIssue(value) {
+  let nonFinite = false;
+  let serialized;
+  try {
+    serialized = JSON.stringify(value, (_key, entry) => {
+      if (typeof entry === "number" && !Number.isFinite(entry))
+        nonFinite = true;
+      return entry;
+    });
+  } catch {
+    return "unserializable";
+  }
+  if (serialized === undefined)
+    return "unserializable";
+  if (nonFinite)
+    return "non-finite";
+  return Buffer.byteLength(serialized, "utf8") > jsonColumnMaxBytes() ? "oversized" : null;
+}
+function isValidColumnValue(column, value) {
+  if (column.kind === "string")
+    return typeof value === "string";
+  if (column.kind === "number")
+    return typeof value === "number" && Number.isFinite(value);
+  if (column.kind === "boolean")
+    return typeof value === "boolean";
+  if (column.kind === "date")
+    return typeof value === "string" && isIso8601Date(value);
+  if (column.kind === "json")
+    return jsonColumnValueIssue(value) === null;
+  return typeof value === "string" && Boolean(column.enum?.includes(value));
+}
 var SourceTransformSchema = _enum2(["slug", "lower", "upper", "cents", "date-parse"]);
 var TRANSFORM_COLUMN_KIND = {
   slug: "string",
@@ -182548,10 +182597,19 @@ var ColumnDefSchema = object2({
   required: boolean().optional(),
   enum: array2(string2()).optional(),
   index: boolean().optional(),
-  default: union2([string2(), number2(), boolean()]).optional(),
+  default: union2([
+    string2(),
+    number2(),
+    boolean(),
+    record2(string2(), unknown()),
+    array2(unknown())
+  ]).optional(),
   hidden: boolean().optional(),
   source: ColumnSourceBindingSchema.optional()
 }).superRefine((column, ctx) => {
+  if (column.kind === "json" && column.index) {
+    ctx.addIssue({ code: "custom", path: ["index"], message: "json columns cannot be indexed" });
+  }
   if (column.kind === "enum") {
     if (!column.enum || column.enum.length === 0) {
       ctx.addIssue({ code: "custom", path: ["enum"], message: "enum values are required" });
@@ -182569,6 +182627,23 @@ var ColumnDefSchema = object2({
   }
   if (column.default === undefined)
     return;
+  if (column.kind === "json") {
+    const issue = jsonColumnValueIssue(column.default);
+    if (issue === "unserializable") {
+      ctx.addIssue({
+        code: "custom",
+        path: ["default"],
+        message: "json column default must be JSON-serializable"
+      });
+    } else if (issue === "non-finite") {
+      ctx.addIssue({
+        code: "custom",
+        path: ["default"],
+        message: "json column default contains a non-finite number"
+      });
+    }
+    return;
+  }
   const valid = column.kind === "string" && typeof column.default === "string" || column.kind === "number" && typeof column.default === "number" && Number.isFinite(column.default) || column.kind === "boolean" && typeof column.default === "boolean" || column.kind === "date" && typeof column.default === "string" && isIso8601Date(column.default) || column.kind === "enum" && typeof column.default === "string" && Boolean(column.enum?.includes(column.default));
   if (!valid) {
     ctx.addIssue({
@@ -182579,7 +182654,7 @@ var ColumnDefSchema = object2({
   }
 });
 var UserConfigFieldSchema = object2({
-  kind: ColumnKindSchema,
+  kind: ScalarColumnKindSchema,
   default: union2([string2(), number2(), boolean()]).optional(),
   enum: array2(string2()).optional(),
   label: string2().optional(),
@@ -182699,7 +182774,7 @@ var AppPageSchema = object2({
   params: record2(AppNameSchema, AppPageParamSchema).optional()
 }).strict();
 var ElementPropDefSchema = object2({
-  kind: ColumnKindSchema,
+  kind: ScalarColumnKindSchema,
   required: boolean().optional(),
   enum: array2(string2()).min(1).optional(),
   default: union2([string2(), number2(), boolean()]).optional()
@@ -182821,6 +182896,14 @@ var AppDefinitionSchema = object2({
         });
         continue;
       }
+      if (columnDefinition.kind === "json") {
+        ctx.addIssue({
+          code: "custom",
+          path: ["queries", queryName, "filter", column],
+          message: "json columns cannot be filtered"
+        });
+        continue;
+      }
       if (typeof value === "object")
         continue;
       const valid = columnDefinition.kind === "string" && typeof value === "string" || columnDefinition.kind === "number" && typeof value === "number" && Number.isFinite(value) || columnDefinition.kind === "boolean" && typeof value === "boolean" || columnDefinition.kind === "date" && typeof value === "string" && isIso8601Date(value) || columnDefinition.kind === "enum" && typeof value === "string" && Boolean(columnDefinition.enum?.includes(value));
@@ -182839,6 +182922,12 @@ var AppDefinitionSchema = object2({
         path: ["queries", queryName, "sort", "column"],
         message: `unknown or hidden column "${sortColumn}"`
       });
+    } else if (sortColumn && model.columns[sortColumn]?.kind === "json") {
+      ctx.addIssue({
+        code: "custom",
+        path: ["queries", queryName, "sort", "column"],
+        message: "json columns cannot be sorted"
+      });
     }
   }
 });
@@ -183085,6 +183174,22 @@ function syncActionIssues(name, action, models) {
   }
   return [{ path: `actions.${name}`, message: "no model declares a source to sync" }];
 }
+function jsonColumnDefaultSizeIssues(definition) {
+  const issues = [];
+  for (const [modelName, model] of Object.entries(definition.models)) {
+    for (const [columnName, column] of Object.entries(model.columns)) {
+      if (column.kind !== "json" || column.default === undefined)
+        continue;
+      if (jsonColumnValueIssue(column.default) === "oversized") {
+        issues.push({
+          path: `models.${modelName}.columns.${columnName}.default`,
+          message: `json column default exceeds the ${jsonColumnSizeLabel()} size limit`
+        });
+      }
+    }
+  }
+  return issues;
+}
 async function parseAppDefinition(input, elementContext = {}) {
   if (isMergePatchObject(input) && Object.hasOwn(input, "page")) {
     return {
@@ -183116,6 +183221,7 @@ async function parseAppDefinition(input, elementContext = {}) {
   if (!parsed.success)
     return { success: false, issues: appDefinitionIssues(parsed.error) };
   const issues = [
+    ...jsonColumnDefaultSizeIssues(parsed.data),
     ...Object.keys(parsed.data.pages).flatMap((pageName) => validatePage(parsed.data, catalog_generated_default, pageName)),
     ...crossPageDefinitionIssues(parsed.data, catalog_generated_default),
     ...await elementDefinitionIssues(parsed.data, catalog_generated_default, elementContext)
@@ -183478,6 +183584,8 @@ function commentSafe(value) {
   return value.replace(/[\r\n\u2028\u2029]+/g, " ").replace(/\*\//g, "").trim().slice(0, 80);
 }
 function tsTypeForColumn(column) {
+  if (column.kind === "json")
+    return "unknown";
   if (column.kind !== "enum")
     return column.kind === "date" ? "string" : column.kind;
   return column.enum?.map((value) => JSON.stringify(value)).join(" | ") || "string";
@@ -183576,7 +183684,7 @@ ${renderedModels.map((model) => model.source).join(`
 
 `)}
 
-  /** Declared actions. Invocation is REST-only: POST /api/apps/<id>/actions/<name>. */
+  /** Scripts can write rows. Declared actions are callable through REST or MCP only. */
   export type ActionName = ${actionType};
 
   /** Script action arguments include server-stamped app and caller context. */
@@ -184047,6 +184155,19 @@ export interface SwarmSdk {
     query: string;
     params?: Record<string, string | number | boolean>;
   }): Promise<unknown>;
+  app_rows_list(args: {
+    appId: string;
+    model: string;
+    equals?: Record<string, string | number | boolean>;
+    sort?: \`\${string}:asc\` | \`\${string}:desc\`;
+    limit?: number;
+  }): Promise<unknown>;
+  app_row_get(args: { appId: string; model: string; rowId: string }): Promise<unknown>;
+  app_row_create(args: { appId: string; model: string; values: Record<string, unknown> }): Promise<unknown>;
+  app_rows_create(args: { appId: string; model: string; rows: Record<string, unknown>[] }): Promise<unknown>;
+  app_row_patch(args: { appId: string; model: string; rowId: string; values: Record<string, unknown> }): Promise<unknown>;
+  app_row_delete(args: { appId: string; model: string; rowId: string }): Promise<unknown>;
+  app_rows_delete(args: { appId: string; model: string; equals: Record<string, string | number | boolean>; limit?: number }): Promise<unknown>;
   app_rollback(args: {
     appId: string;
     version: number;
@@ -184805,4 +184926,4 @@ function parseSkillContent(content) {
   };
 }
 
-export { require_dist2, isInvalidClientError, publicEndpointSsrfOptions, mcpOAuthSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, resolveSqlDsn, runReadOnlyQuery, listVendoredOpenapiEntries, ConnectionAuthInputSchema, SqlDsnInputSchema, connectionAuthSummary, listRelationalCredentialBindings, getCredentialBindingById, findCredentialBindingByIdentity, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, listScriptConnectionsAsync, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, deleteScriptConnection, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, writeBareImportShim, MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, require_typescript2, checkImportAllowlist, validateScriptImports, runScript, extractScriptSignature, extractArgsJsonSchema, getSavedScriptOwnerAgentId, runSavedScriptAsAgent, checkQuickJSCompat, quickJSCompatWarnings, resolveSyncRunAs, AppNameSchema, ColumnKindSchema, isIso8601Date, SYSTEM_COLUMN_KINDS, SORTABLE_SYSTEM_DATE_COLUMNS, AppElementsSchema, AppDefinitionSchema, collectScriptReferences, scriptCompatWarnings, parseAppDefinition, applyAppDefinitionPatch, upgradeAppDefinition, decodeAppDefinition, appDefinitionNeedsRepair, createApp, getApp, listApps, listAppRecords, updateApp, deleteApp, getScriptAppTypes, SCRIPT_SDK_TYPES, scriptSdkTypesWithGeneratedApis, SCRIPT_STDLIB_MODULE_TYPES, scriptStdlibTypesWithGeneratedApis, typecheckWithAmbient, typecheckScript, parseSkillContent };
+export { require_dist2, isInvalidClientError, publicEndpointSsrfOptions, mcpOAuthSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, resolveSqlDsn, runReadOnlyQuery, listVendoredOpenapiEntries, ConnectionAuthInputSchema, SqlDsnInputSchema, connectionAuthSummary, listRelationalCredentialBindings, getCredentialBindingById, findCredentialBindingByIdentity, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, listScriptConnectionsAsync, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, deleteScriptConnection, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, writeBareImportShim, MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, require_typescript2, checkImportAllowlist, validateScriptImports, runScript, extractScriptSignature, extractArgsJsonSchema, getSavedScriptOwnerAgentId, runSavedScriptAsAgent, checkQuickJSCompat, quickJSCompatWarnings, resolveSyncRunAs, AppNameSchema, ScalarColumnKindSchema, isIso8601Date, jsonColumnSizeLabel, jsonColumnValueIssue, isValidColumnValue, SYSTEM_COLUMN_KINDS, SORTABLE_SYSTEM_DATE_COLUMNS, AppElementsSchema, AppDefinitionSchema, collectScriptReferences, scriptCompatWarnings, parseAppDefinition, applyAppDefinitionPatch, upgradeAppDefinition, decodeAppDefinition, appDefinitionNeedsRepair, createApp, getApp, listApps, listAppRecords, updateApp, deleteApp, getScriptAppTypes, SCRIPT_SDK_TYPES, scriptSdkTypesWithGeneratedApis, SCRIPT_STDLIB_MODULE_TYPES, scriptStdlibTypesWithGeneratedApis, typecheckWithAmbient, typecheckScript, parseSkillContent };

package/dist/{cli-tg9ksbn8.js → cli-h93c9vb3.js}

@@ -1,12 +1,12 @@
 import {
   getDb2,
   init_db3
-} from "./cli-rg7ntypm.js";
+} from "./cli-d3qqdy4c.js";
 import {
   openAICompatibleProviderIds,
   withRegistryCatalogSections,
   init_src2
-} from "./cli-x3en6ct3.js";
+} from "./cli-nwyw3zhg.js";
 
 // src/be/seed-pricing.ts
 init_src2();

package/dist/{cli-eqgfs202.js → cli-hqhzg1qq.js}

@@ -1,7 +1,7 @@
 import {
   RuntimeProviderKindSchema,
   init_types
-} from "./cli-a1esmmee.js";
+} from "./cli-fpmsqq59.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -21,7 +21,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 
 // src/runtime-providers/controller.ts
 init_secret_scrubber();

package/dist/{cli-bhwa8rzc.js → cli-hyfw2j1e.js}

@@ -4,7 +4,7 @@ import {
 import {
   workflowEventBus2,
   init_event_bus
-} from "./cli-ptkpaqfy.js";
+} from "./cli-wt645v7q.js";
 import {
   getDbClient2,
   isRuntimePoolsEnabled,
@@ -66,7 +66,7 @@ import {
   getStaleApprovalRequests2,
   upsertKv2,
   init_db3
-} from "./cli-rg7ntypm.js";
+} from "./cli-d3qqdy4c.js";
 import {
   poolTaskRunsOnHarness,
   isRuntimePoolWakeable,
@@ -91,28 +91,29 @@ import {
   createRerouteDecisionTask,
   createPoolStarvationDecisionTask,
   canClaim
-} from "./cli-x719j3vs.js";
+} from "./cli-5rk36sjf.js";
 import {
   listRuntimePools2,
   init_db
-} from "./cli-6ftrrwm1.js";
+} from "./cli-n85dqg6d.js";
 import {
   createApprovalFollowUpTask
-} from "./cli-tj4j2ts4.js";
+} from "./cli-02qm7src.js";
 import {
   remediateStalledRuntime
-} from "./cli-rsd7ga7v.js";
+} from "./cli-8zwe9mpk.js";
 import {
   runSavedScriptAsAgent
-} from "./cli-nrrg0fvy.js";
+} from "./cli-h38rjv87.js";
 import {
   mintToken,
   init_users
-} from "./cli-8cxkw1f5.js";
+} from "./cli-nmqdc2t3.js";
 import {
   TERMINAL_TASK_STATUSES,
+  SUPERSEDED_WORKFLOW_TASK_REASON,
   init_types
-} from "./cli-a1esmmee.js";
+} from "./cli-fpmsqq59.js";
 import {
   registerTemplate,
   init_registry,
@@ -127,7 +128,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-mz1ezzzh.js";
+} from "./cli-shvfedvm.js";
 import {
   isEnvFlagEnabled,
   init_env_flag
@@ -135,7 +136,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 
 // src/be/runtime-pools/routing.ts
 init_runtime_pools_flag();
@@ -850,7 +851,7 @@ function isRemediationAction(value) {
 }
 function decideRemediation(task, facts) {
   if (task.workflowRunStepId != null) {
-    return { action: "fail", reason: "superseded_workflow_task" };
+    return { action: "fail", reason: SUPERSEDED_WORKFLOW_TASK_REASON };
   }
   if (facts.skipAutoResume || facts.alreadyResumed) {
     return { action: "fail", reason: facts.legacyFailReason };

package/dist/{cli-3wjs22x3.js → cli-j4rqdf2n.js}

@@ -9,7 +9,7 @@ import {
   loadMcpConfig,
   addMcpServerConfig,
   removeMcpServerConfig
-} from "./cli-p1m2b6gc.js";
+} from "./cli-d2mb5s8a.js";
 import {
   McpOAuthCredentialStore2,
   McpSignInCancelledError2,
@@ -17,7 +17,7 @@ import {
   McpServerLog2,
   createDefaultTransport2,
   McpServerConnection2
-} from "./cli-f3nx1h8z.js";
+} from "./cli-wxbn3yfx.js";
 
 // node_modules/@earendil-works/pi-coding-agent/dist/extensions/mcp/cli.js
 import { existsSync } from "node:fs";

package/dist/{cli-6ftrrwm1.js → cli-n85dqg6d.js}

@@ -15,17 +15,17 @@ import {
   init_secret_registry,
   upsertSwarmConfig2,
   init_db3
-} from "./cli-rg7ntypm.js";
+} from "./cli-d3qqdy4c.js";
 import {
   createRuntimeProvider,
   init_runtime_providers
-} from "./cli-wk8ccrz6.js";
+} from "./cli-pw7v69vp.js";
 import {
   closeSessionTokenConnections,
   init_session_token_connections,
   insertSessionToken,
   init_users
-} from "./cli-8cxkw1f5.js";
+} from "./cli-nmqdc2t3.js";
 import {
   RuntimeControllerCreateSchema,
   RuntimeControllerUpdateSchema,
@@ -33,13 +33,13 @@ import {
   RuntimePoolUpdateSchema,
   RuntimePoolCreateAgentSchema,
   init_types
-} from "./cli-a1esmmee.js";
+} from "./cli-fpmsqq59.js";
 import {
   scrubSecrets,
   registerVolatileSecret,
   unregisterVolatileSecret,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-8cxkw1f5.js → cli-nmqdc2t3.js}

@@ -5,11 +5,11 @@ import {
   validateRuntimeTokenTtlHours,
   init_swarm_config_guard,
   init_db3
-} from "./cli-rg7ntypm.js";
+} from "./cli-d3qqdy4c.js";
 import {
   unregisterVolatileSecret,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-4fhyq711.js → cli-nn47d7e8.js}

@@ -47,10 +47,10 @@ import {
   checkDependencies2,
   emitBuiltInIntegrationConnectedOnce2,
   init_db3
-} from "./cli-rg7ntypm.js";
+} from "./cli-d3qqdy4c.js";
 import {
   getChannelBlockReason2
-} from "./cli-xfe63zx3.js";
+} from "./cli-pkht5hap.js";
 import {
   require_dist5,
   require_axios,
@@ -67,11 +67,11 @@ import {
 import {
   isTerminalTaskStatus,
   init_types
-} from "./cli-a1esmmee.js";
+} from "./cli-fpmsqq59.js";
 import {
   taskAttachmentDisplayUrl,
   init_task_attachment_links
-} from "./cli-wyrr38xm.js";
+} from "./cli-x5mq1fyq.js";
 import {
   getSlackConfiguration,
   init_config
@@ -102,7 +102,7 @@ import {
   scrubSecrets,
   scrubObject,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 import {
   __toESM,
   __commonJS,
@@ -6235,7 +6235,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
     return;
   initialized = true;
   try {
-    const impl = await import("./otel-impl-hckw4wt1.js");
+    const impl = await import("./otel-impl-fzc57kcq.js");
     await impl.boot(serviceRole, {
       exportConsoleLogs: serviceRole === "api" && isApiLogExportEnabled()
     });
@@ -10080,17 +10080,17 @@ async function initSlackApp2() {
   });
   initialized2 = true;
   app.use(slackInboundOutcomeMiddleware());
-  const { registerMessageHandler } = await import("./handlers-zbs90bny.js");
-  const { registerCommandHandler } = await import("./commands-psqhkttb.js");
-  const { registerActionHandlers } = await import("./actions-vget6r1k.js");
-  const { registerWorkObjectHandlers } = await import("./work-objects-jem2fre0.js");
+  const { registerMessageHandler } = await import("./handlers-dkcarkd0.js");
+  const { registerCommandHandler } = await import("./commands-edmdwa4x.js");
+  const { registerActionHandlers } = await import("./actions-51nc1gny.js");
+  const { registerWorkObjectHandlers } = await import("./work-objects-61w08fwr.js");
   registerMessageHandler(app);
   registerCommandHandler(app);
   registerActionHandlers(app);
   registerWorkObjectHandlers(app);
-  const { createAssistant } = await import("./assistant-h0gv97mv.js");
+  const { createAssistant } = await import("./assistant-wv1gz3mt.js");
   app.assistant(createAssistant());
-  const { isBlockExternalEnabled, scanExternalChannelsOnBoot } = await import("./external-channel-a5dsmxn4.js");
+  const { isBlockExternalEnabled, scanExternalChannelsOnBoot } = await import("./external-channel-zhvt95n3.js");
   if (isBlockExternalEnabled()) {
     scanExternalChannelsOnBoot(app.client).catch((error) => {
       console.error("[Slack] External channel boot scan failed:", error);
@@ -10103,7 +10103,7 @@ async function startSlackApp2() {
     await initSlackApp2();
   }
   if (app) {
-    const { isSlackRenderV2Enabled } = await import("./render-v2-7nqgvk2q.js");
+    const { isSlackRenderV2Enabled } = await import("./render-v2-vb527jwn.js");
     if (isSlackRenderV2Enabled())
       await ensureSlackRenderV2Activation2();
     await app.start();

package/dist/{cli-x3en6ct3.js → cli-nwyw3zhg.js}

@@ -710,7 +710,7 @@ function applyHarnessOverrides(harness, modelId, facts, levels) {
       result = ["off", ...result];
     if (!direct)
       result = result.filter((l) => l !== "off");
-  } else if (harness !== "codex" && harness !== "cursor") {
+  } else if (harness !== "codex" && harness !== "cursor" && harness !== "opencode" && harness !== "pi") {
     result = result.filter((l) => l !== "max");
   }
   if (harness === "codex") {

package/dist/{cli-3avfh5az.js → cli-pemywhfq.js}

@@ -6,12 +6,12 @@ import {
   isSensitiveKey,
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 import {
   openAICompatibleKeyVars,
   openAICompatibleBaseUrlVars,
   init_src2
-} from "./cli-x3en6ct3.js";
+} from "./cli-nwyw3zhg.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-xfe63zx3.js → cli-pkht5hap.js}

@@ -4,7 +4,7 @@ import {
   claimKv2,
   deleteKv2,
   init_db3
-} from "./cli-rg7ntypm.js";
+} from "./cli-d3qqdy4c.js";
 import {
   isEnvFlagEnabled,
   init_env_flag
@@ -12,7 +12,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 
 // src/slack/external-channel.ts
 init_db3();

package/dist/{cli-sppc0cmw.js → cli-pnp2j5zg.js}

@@ -8,7 +8,7 @@ import {
   complete,
   parseModelStr,
   resolveCredential
-} from "./cli-bn26xbcs.js";
+} from "./cli-8nyhf7za.js";
 import {
   SummaryWithRatingsSchema,
   BASE_SUMMARIZE_PROMPT,
@@ -29,7 +29,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 
 // src/utils/internal-ai/complete-structured.ts
 init_zod();

package/dist/{cli-wk8ccrz6.js → cli-pw7v69vp.js}

@@ -13,11 +13,11 @@ async function createRuntimeProvider(kind, target = {}) {
       return new StaticRuntimeProvider;
     }
     case "docker": {
-      const { DockerRuntimeProvider } = await import("./docker-njavd3fb.js");
+      const { DockerRuntimeProvider } = await import("./docker-fkgtr75t.js");
       return new DockerRuntimeProvider;
     }
     case "e2b": {
-      const { E2BRuntimeProvider } = await import("./e2b-5r6a5jeb.js");
+      const { E2BRuntimeProvider } = await import("./e2b-7am6tmq6.js");
       return new E2BRuntimeProvider(target);
     }
     case "k8s":