@desplega.ai/agent-swarm 2.4.2 → 2.4.4

package/dist/{cli-nmqdc2t3.js → cli-9fhkkpj5.js}

@@ -5,8 +5,9 @@ import {
   validateRuntimeTokenTtlHours,
   init_swarm_config_guard,
   init_db3
-} from "./cli-d3qqdy4c.js";
+} from "./cli-p20r8w42.js";
 import {
+  registerVolatileSecret,
   unregisterVolatileSecret,
   init_secret_scrubber
 } from "./cli-xf234ws8.js";
@@ -264,11 +265,12 @@ async function resolveUserByToken(plaintext) {
 async function mintSessionToken(agentId, taskId, ttlMs, parent) {
   if (parent) {
     return await getDbClient2().transaction(async (client) => {
-      const row = await client.get(`SELECT expiresAt FROM session_tokens WHERE id = ? AND agentId = ? AND runtimeId = ?
-         AND revokedAt IS NULL AND expiresAt > ?`, [parent.tokenId, agentId, parent.runtimeId, new Date().toISOString()]);
+      const row = await client.get(parent.runtimeId ? `SELECT expiresAt FROM session_tokens WHERE id = ? AND agentId = ? AND runtimeId = ?
+             AND revokedAt IS NULL AND expiresAt > ?` : `SELECT expiresAt FROM session_tokens WHERE id = ? AND agentId = ? AND ${AGENT_TOKEN_BINDING}
+             AND revokedAt IS NULL AND expiresAt > ?`, parent.runtimeId ? [parent.tokenId, agentId, parent.runtimeId, new Date().toISOString()] : [parent.tokenId, agentId, new Date().toISOString()]);
       if (!row)
         throw new InvalidRuntimeTokenError;
-      return await insertSessionToken(agentId, taskId, null, ttlMs, parent.runtimeId, row.expiresAt);
+      return await insertSessionToken(agentId, taskId, null, ttlMs, parent.runtimeId, row.expiresAt, null, parent.runtimeId ? null : parent.tokenId);
     });
   }
   return await insertSessionToken(agentId, taskId, null, ttlMs);
@@ -280,7 +282,7 @@ function runtimeTokenTtlMs() {
 async function mintRuntimeToken(agentId, runtimeId, ttlMs = runtimeTokenTtlMs()) {
   return await insertSessionToken(agentId, null, runtimeId, ttlMs);
 }
-async function insertSessionToken(agentId, taskId, runtimeId, ttlMs, parentRuntimeId = null, expiresAtCeiling, controllerId = null) {
+async function insertSessionToken(agentId, taskId, runtimeId, ttlMs, parentRuntimeId = null, expiresAtCeiling, controllerId = null, parentTokenId = null) {
   const plaintext = `${SESSION_TOKEN_PREFIX}${base62(randomBytes(24))}`;
   const tokenId = randomUUID().replace(/-/g, "");
   const hash = sha256Hex(plaintext);
@@ -288,8 +290,8 @@ async function insertSessionToken(agentId, taskId, runtimeId, ttlMs, parentRunti
   const now = new Date;
   const expiresAt = new Date(Math.min(now.getTime() + ttlMs, expiresAtCeiling ? Date.parse(expiresAtCeiling) : Infinity)).toISOString();
   await getDbClient2().run(`INSERT INTO session_tokens
-     (id, tokenHash, tokenPreview, agentId, taskId, runtimeId, parentRuntimeId, expiresAt, createdAt, controllerId)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+     (id, tokenHash, tokenPreview, agentId, taskId, runtimeId, parentRuntimeId, expiresAt, createdAt, controllerId, parentTokenId)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     tokenId,
     hash,
     preview,
@@ -299,7 +301,8 @@ async function insertSessionToken(agentId, taskId, runtimeId, ttlMs, parentRunti
     parentRuntimeId,
     expiresAt,
     now.toISOString(),
-    controllerId
+    controllerId,
+    parentTokenId
   ]);
   return { tokenId, plaintext };
 }
@@ -309,11 +312,24 @@ async function revokeSessionToken(tokenId) {
     if (row?.runtimeId) {
       await revokeRuntimeTokensForRuntime(row.runtimeId);
     } else {
-      await client.run("UPDATE session_tokens SET revokedAt = ? WHERE id = ? AND revokedAt IS NULL", [new Date().toISOString(), tokenId]);
-      getDbClient2().afterCommit(() => closeSessionTokenConnections([tokenId]));
+      await revokeTokensWithChildren(client, [tokenId]);
     }
   });
 }
+async function revokeTokensWithChildren(client, tokenIds) {
+  if (tokenIds.length === 0)
+    return;
+  const placeholders = tokenIds.map(() => "?").join(", ");
+  const children = await client.query(`SELECT id FROM session_tokens WHERE parentTokenId IN (${placeholders})`, tokenIds);
+  const ids = [...tokenIds, ...children.map((row) => row.id)];
+  await client.run(`UPDATE session_tokens SET revokedAt = ?
+     WHERE id IN (${ids.map(() => "?").join(", ")}) AND revokedAt IS NULL`, [new Date().toISOString(), ...ids]);
+  getDbClient2().afterCommit(() => {
+    for (const id of tokenIds)
+      unregisterVolatileSecret(`agent-token:${id}`);
+    closeSessionTokenConnections(ids);
+  });
+}
 async function revokeRuntimeTokensForRuntime(runtimeId) {
   await getDbClient2().transaction(async (client) => {
     const rows = await client.query("SELECT id FROM session_tokens WHERE runtimeId = ? OR parentRuntimeId = ?", [runtimeId, runtimeId]);
@@ -325,6 +341,50 @@ async function revokeRuntimeTokensForRuntime(runtimeId) {
     });
   });
 }
+function storedExpiry(ttlMs) {
+  return ttlMs === null ? AGENT_TOKEN_NO_EXPIRY : new Date(Date.now() + ttlMs).toISOString();
+}
+function publicExpiry(expiresAt) {
+  return expiresAt === AGENT_TOKEN_NO_EXPIRY ? null : expiresAt;
+}
+async function activeAgentTokenIds(client, agentId) {
+  const rows = await client.query(`SELECT id FROM session_tokens WHERE agentId = ? AND ${AGENT_TOKEN_BINDING}
+     AND revokedAt IS NULL AND expiresAt > ?`, [agentId, new Date().toISOString()]);
+  return rows.map((row) => row.id);
+}
+async function insertAgentToken(agentId, ttlMs) {
+  const expiresAt = storedExpiry(ttlMs);
+  const token = await insertSessionToken(agentId, null, null, Number.MAX_SAFE_INTEGER, null, expiresAt);
+  getDbClient2().afterCommit(() => registerVolatileSecret(token.plaintext, `agent-token:${token.tokenId}`));
+  return { ...token, expiresAt: publicExpiry(expiresAt) };
+}
+async function mintAgentToken(agentId, ttlMs = AGENT_TOKEN_DEFAULT_TTL_MS) {
+  return await getDbClient2().transaction(async (client) => {
+    if ((await activeAgentTokenIds(client, agentId)).length > 0) {
+      throw new AgentTokenExistsError;
+    }
+    return await insertAgentToken(agentId, ttlMs);
+  });
+}
+async function rotateAgentToken(agentId, graceMs, ttlMs = AGENT_TOKEN_DEFAULT_TTL_MS) {
+  return await getDbClient2().transaction(async (client) => {
+    const previous = await activeAgentTokenIds(client, agentId);
+    if (previous.length === 0)
+      return null;
+    const previousExpiresAt = new Date(Date.now() + graceMs).toISOString();
+    const placeholders = previous.map(() => "?").join(", ");
+    await client.run(`UPDATE session_tokens SET expiresAt = ?
+       WHERE (id IN (${placeholders}) OR parentTokenId IN (${placeholders})) AND expiresAt > ?`, [previousExpiresAt, ...previous, ...previous, previousExpiresAt]);
+    return { ...await insertAgentToken(agentId, ttlMs), previousExpiresAt };
+  });
+}
+async function revokeAgentTokens(agentId) {
+  return await getDbClient2().transaction(async (client) => {
+    const ids = await activeAgentTokenIds(client, agentId);
+    await revokeTokensWithChildren(client, ids);
+    return ids.length;
+  });
+}
 async function resolveSessionToken(plaintext, options = {}) {
   if (!plaintext.startsWith(SESSION_TOKEN_PREFIX))
     return null;
@@ -356,6 +416,7 @@ async function resolveSessionToken(plaintext, options = {}) {
   return {
     kind: "agent",
     tokenId: row.id,
+    tokenKind: row.taskId !== null ? "task" : row.runtimeId !== null ? "runtime" : "agent",
     agentId: row.agentId,
     taskId: row.taskId,
     runtimeId: row.runtimeId,
@@ -365,7 +426,7 @@ async function resolveSessionToken(plaintext, options = {}) {
 function fingerprintApiKey(rawKey) {
   return `op:${sha256Hex(rawKey).slice(0, 16)}`;
 }
-var TOKEN_PREFIX = "aswt_", SESSION_TOKEN_PREFIX = "aseph_", InvalidRuntimeTokenError;
+var TOKEN_PREFIX = "aswt_", SESSION_TOKEN_PREFIX = "aseph_", InvalidRuntimeTokenError, AGENT_TOKEN_BINDING = "taskId IS NULL AND runtimeId IS NULL AND controllerId IS NULL AND parentRuntimeId IS NULL", AGENT_TOKEN_NO_EXPIRY = "9999-12-31T23:59:59.999Z", AGENT_TOKEN_DEFAULT_TTL_MS = null, AgentTokenExistsError;
 var init_users = __esm(() => {
   init_telemetry_identity();
   init_secret_scrubber();
@@ -377,6 +438,11 @@ var init_users = __esm(() => {
       super("Runtime token is no longer valid");
     }
   };
+  AgentTokenExistsError = class AgentTokenExistsError extends Error {
+    constructor() {
+      super("Agent already has an active token; rotate or revoke it");
+    }
+  };
 });
 
-export { registerSessionTokenConnection, closeSessionTokenConnections, init_session_token_connections, findUserById, findUserByExternalId, findUserByEmail, findUsersByName, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, InvalidRuntimeTokenError, mintSessionToken, mintRuntimeToken, insertSessionToken, revokeSessionToken, revokeRuntimeTokensForRuntime, resolveSessionToken, fingerprintApiKey, init_users };
+export { registerSessionTokenConnection, closeSessionTokenConnections, init_session_token_connections, findUserById, findUserByExternalId, findUserByEmail, findUsersByName, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, InvalidRuntimeTokenError, mintSessionToken, mintRuntimeToken, insertSessionToken, revokeSessionToken, revokeRuntimeTokensForRuntime, AgentTokenExistsError, mintAgentToken, rotateAgentToken, revokeAgentTokens, resolveSessionToken, fingerprintApiKey, init_users };

package/dist/{cli-h93c9vb3.js → cli-amyhm3gj.js}

@@ -1,7 +1,7 @@
 import {
   getDb2,
   init_db3
-} from "./cli-d3qqdy4c.js";
+} from "./cli-p20r8w42.js";
 import {
   openAICompatibleProviderIds,
   withRegistryCatalogSections,

package/dist/{cli-0qvtffe9.js → cli-b8k7epj1.js}

@@ -10,7 +10,7 @@ import {
   init_steering,
   createLogEntry2,
   init_db3
-} from "./cli-d3qqdy4c.js";
+} from "./cli-p20r8w42.js";
 import {
   ackSlackMessage,
   buildBufferFlushBlocks,
@@ -20,7 +20,7 @@ import {
   ensureSlackThreadTree2,
   registerTreeMessage,
   getSlackApp2
-} from "./cli-nn47d7e8.js";
+} from "./cli-qkhc5aqy.js";
 import {
   createAdditiveBuffer,
   TaskCreationBlockedError,
@@ -30,19 +30,19 @@ import {
   createSlackTaskWithFiles,
   notifySlackFileFailures,
   extractSlackMessageText
-} from "./cli-5rk36sjf.js";
+} from "./cli-v3yr2gbg.js";
 import {
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-bcj753sq.js";
+} from "./cli-2v045xyf.js";
 import {
   findUserByExternalId,
   init_users
-} from "./cli-nmqdc2t3.js";
+} from "./cli-9fhkkpj5.js";
 import {
   isSteeringEnabled2,
   init_steering_enabled
-} from "./cli-mhywgrrz.js";
+} from "./cli-4sydckyj.js";
 import {
   scrubSecrets,
   init_secret_scrubber

package/dist/{cli-1pa3rz69.js → cli-ba8ne1es.js}

@@ -7,7 +7,7 @@ import {
 import {
   isEnvFlagEnabled,
   init_env_flag
-} from "./cli-0hyhdkdk.js";
+} from "./cli-cebvbc9t.js";
 import {
   __esm
 } from "./cli-242037k3.js";
@@ -320,6 +320,7 @@ var init_legacy_policy = __esm(() => {
     "runtime_pool.write": operatorOrUser,
     "runtime_pool.bind": leadOrOperatorOrUser,
     "runtime_controller.write": operatorOrUser,
+    "agent.token.manage": operatorOrUser,
     "extension.write": extensionWrite,
     "extension.activate": extensionActivation,
     "extension.install.inline": leadOrOperatorOrUser
@@ -369,6 +370,10 @@ var init_permissions = __esm(() => {
       description: "View or diff another agent's context history.",
       namespace: "agent"
     },
+    "agent.token.manage": {
+      description: "Mint, rotate, or revoke an agent-bound worker token.",
+      namespace: "agent"
+    },
     "task.cancel.any": {
       description: "Cancel any task (beyond tasks the caller created).",
       namespace: "task"

package/dist/{cli-g0hgtz4p.js → cli-bnz0r3kc.js}

@@ -4,7 +4,7 @@ import {
 } from "./cli-a5ebc95n.js";
 import {
   swarmRuntimeInstanceId
-} from "./cli-7a91w22y.js";
+} from "./cli-e8xyjvfc.js";
 import {
   resolveSlashSkillPrompt
 } from "./cli-jc1g9ndz.js";
@@ -14,7 +14,7 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-fpmsqq59.js";
+} from "./cli-nc35pxb7.js";
 import {
   resolveTemplateFromCode,
   resolveTemplateAsync,
@@ -24,7 +24,7 @@ import {
 import {
   parseEnvFlag,
   init_env_flag
-} from "./cli-0hyhdkdk.js";
+} from "./cli-cebvbc9t.js";
 import {
   scrubSecrets,
   registerVolatileSecret,

package/dist/{cli-0hyhdkdk.js → cli-cebvbc9t.js}

@@ -18,10 +18,13 @@ function parseEnvFlag(raw, defaultValue) {
 function isEnvFlagEnabled(key, defaultValue, env = process.env) {
   return parseEnvFlag(env[key], defaultValue);
 }
+function isSessionSummarySkipped(env = process.env) {
+  return isEnvFlagEnabled("SKIP_SESSION_SUMMARY", false, env);
+}
 var TRUTHY, FALSY;
 var init_env_flag = __esm(() => {
   TRUTHY = new Set(["true", "1"]);
   FALSY = new Set(["false", "0"]);
 });
 
-export { parseEnvFlag, isEnvFlagEnabled, init_env_flag };
+export { parseEnvFlag, isEnvFlagEnabled, isSessionSummarySkipped, init_env_flag };

package/dist/{cli-efaqv1c7.js → cli-cynvc9fj.js}

@@ -9,20 +9,21 @@ import {
   init_active_sessions,
   getSteeringMessageById2,
   init_db3
-} from "./cli-d3qqdy4c.js";
+} from "./cli-p20r8w42.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-7awf1fp8.js";
+} from "./cli-4dg55wsk.js";
 import {
   findUserById,
   findUserByExternalId,
   init_users
-} from "./cli-nmqdc2t3.js";
+} from "./cli-9fhkkpj5.js";
 import {
   isRbacEnabled,
+  can,
   init_rbac
-} from "./cli-1pa3rz69.js";
+} from "./cli-ba8ne1es.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -38,7 +39,7 @@ import {
 import {
   isEnvFlagEnabled,
   init_env_flag
-} from "./cli-0hyhdkdk.js";
+} from "./cli-cebvbc9t.js";
 import {
   scrubSecrets,
   init_secret_scrubber
@@ -502,7 +503,7 @@ function route(def) {
       try {
         const rawBody = def.body ? await parseBody(req, def.maxBodyBytes) : undefined;
         if (def.session && "bodyTaskIds" in def.session) {
-          const { bodySessionDenial } = await import("./session-access-zsp4wsp0.js");
+          const { bodySessionDenial } = await import("./session-access-cv3mq6mc.js");
           const denial = await bodySessionDenial(req, def.session.bodyTaskIds(rawBody));
           if (denial) {
             jsonError(res, denial, 403);
@@ -770,6 +771,33 @@ function readableByFor2(actor) {
   return actor.kind === "user" ? { userId: actor.userId } : undefined;
 }
 var SESSION_WRITE_DENIED2 = "You can't write in this session. Ask the owner to share it with edit access.";
+async function hasSessionWrite(req, myAgentId, taskId) {
+  const access = await sessionAccessFor2(await resolveSessionActor2(req, myAgentId), taskId);
+  return hasSessionAccess(access, "write");
+}
+async function denyParentAttach2(req, res, myAgentId, parentTask, principal) {
+  const attach = can({
+    principal,
+    verb: "task.parent.attach",
+    resource: {
+      kind: "task",
+      taskId: parentTask.id,
+      requestedByUserId: parentTask.requestedByUserId,
+      creatorAgentId: parentTask.creatorAgentId,
+      agentId: parentTask.agentId
+    },
+    source: "http"
+  });
+  if (!attach.allow) {
+    jsonError(res, `You don't have context for parent task ${parentTask.id}.`, 403);
+    return true;
+  }
+  if (!await hasSessionWrite(req, myAgentId, parentTask.id)) {
+    jsonError(res, SESSION_WRITE_DENIED2, 403);
+    return true;
+  }
+  return false;
+}
 async function denialFor(actor, taskId, needed) {
   if (actor.kind === "bypass")
     return null;
@@ -845,4 +873,4 @@ async function userAgentIdentityDenial2(req, def, pathSegments) {
   return USER_AGENT_HEADER_DENIED;
 }
 
-export { duplicateGuardedQueryKey, warnIfCorsAllowsAnyOrigin, isOriginAllowedForCredentials, allowedCredentialRedirect, setCorsHeaders, parseQueryParams, getPathSegments, wireHttpSpanLifecycle, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, writeUnhandledError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, hasSessionAccess, getSessionRoot, sessionAccessForRoot, listActiveSessionShares, toSessionSharesState, setSessionShares, resolveTaskAuditUserId, resolveHttpAuditUserId, dashboardUserIdHeader, resolveHttpFavoriteOwner, resolveSessionActor2, sessionAccessFor2, SESSION_READ_DENIED2, canReadSession2, readableByFor2, SESSION_WRITE_DENIED2, pathSessionDenial2, bodySessionDenial2, userAgentIdentityDenial2, runtimeInstanceHeader, bodyTask, bodyListTask, routeRegistry, isPublicRoute, findRoute, describeRequestRoute, route };
+export { duplicateGuardedQueryKey, warnIfCorsAllowsAnyOrigin, isOriginAllowedForCredentials, allowedCredentialRedirect, setCorsHeaders, parseQueryParams, getPathSegments, wireHttpSpanLifecycle, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, writeUnhandledError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, hasSessionAccess, getSessionRoot, sessionAccessForRoot, listActiveSessionShares, toSessionSharesState, setSessionShares, resolveTaskAuditUserId, resolveHttpAuditUserId, dashboardUserIdHeader, resolveHttpFavoriteOwner, resolveSessionActor2, sessionAccessFor2, SESSION_READ_DENIED2, canReadSession2, readableByFor2, SESSION_WRITE_DENIED2, denyParentAttach2, pathSessionDenial2, bodySessionDenial2, userAgentIdentityDenial2, runtimeInstanceHeader, bodyTask, bodyListTask, routeRegistry, isPublicRoute, findRoute, describeRequestRoute, route };

package/dist/{cli-8zwe9mpk.js → cli-dqb4n629.js}

@@ -4,7 +4,7 @@ import {
   CONTROLLER_COMMAND_TIMEOUT_MS,
   RuntimeHandleSchema,
   ControllerStatusResultSchema
-} from "./cli-hqhzg1qq.js";
+} from "./cli-82d3nkc3.js";
 import {
   getDbClient2,
   isRuntimePoolsEnabled,
@@ -21,7 +21,7 @@ import {
   upsertSwarmConfig2,
   getResolvedConfig2,
   init_db3
-} from "./cli-d3qqdy4c.js";
+} from "./cli-p20r8w42.js";
 import {
   runtimeStaleThresholdMinutes,
   getRuntimeInstanceById,
@@ -31,7 +31,7 @@ import {
   listRuntimeInstancesForPool,
   createWorkerTaskFollowUp,
   canClaim
-} from "./cli-5rk36sjf.js";
+} from "./cli-v3yr2gbg.js";
 import {
   getRuntimeController2,
   getRuntimeControllerTarget2,
@@ -42,14 +42,14 @@ import {
   getPoolForAgent2,
   resolvePoolDelivery2,
   init_db
-} from "./cli-n85dqg6d.js";
+} from "./cli-w6nadkh4.js";
 import {
   workflowEventBus2,
   init_event_bus
 } from "./cli-wt645v7q.js";
 import {
   isMultiRuntimeEnabled
-} from "./cli-7a91w22y.js";
+} from "./cli-e8xyjvfc.js";
 import {
   import_websocket
 } from "./cli-b2mz5mjc.js";
@@ -57,16 +57,16 @@ import {
   canProvisionKind,
   createRuntimeProvider,
   init_runtime_providers
-} from "./cli-pw7v69vp.js";
+} from "./cli-625tb7aq.js";
 import {
   mintRuntimeToken,
   init_users
-} from "./cli-nmqdc2t3.js";
+} from "./cli-9fhkkpj5.js";
 import {
   TERMINAL_TASK_STATUSES,
   isTerminalTaskStatus,
   init_types
-} from "./cli-fpmsqq59.js";
+} from "./cli-nc35pxb7.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -82,7 +82,7 @@ import {
 import {
   resolveWorkerApiUrl,
   init_worker_api_url
-} from "./cli-b1dfr1m4.js";
+} from "./cli-7a6p4e65.js";
 import {
   buildImageTemplate,
   init_dispatch
@@ -522,7 +522,7 @@ async function recoverSessions(runtimeId, reason) {
   }
   if (!sessions.length)
     return;
-  const { remediateTaskForDeadRuntime } = await import("./heartbeat-gz97r7ac.js");
+  const { remediateTaskForDeadRuntime } = await import("./heartbeat-wd03zhn0.js");
   for (const session of sessions) {
     try {
       const task = await getTaskById2(session.taskId);

package/dist/{cli-7a91w22y.js → cli-e8xyjvfc.js}

@@ -1,7 +1,7 @@
 import {
   parseEnvFlag,
   init_env_flag
-} from "./cli-0hyhdkdk.js";
+} from "./cli-cebvbc9t.js";
 
 // src/utils/multi-runtime.ts
 init_env_flag();

package/dist/{cli-s6vr7r2d.js → cli-esxerzg7.js}

@@ -9,7 +9,7 @@ import {
   acquireOAuthRefreshLock,
   releaseOAuthRefreshLock,
   init_oauth
-} from "./cli-d3qqdy4c.js";
+} from "./cli-p20r8w42.js";
 import {
   scrubSecrets,
   registerVolatileSecret,

package/dist/{cli-w9g4sz81.js → cli-gf2850q7.js}

@@ -1,7 +1,7 @@
 import {
   isEnvFlagEnabled,
   init_env_flag
-} from "./cli-0hyhdkdk.js";
+} from "./cli-cebvbc9t.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-10hhg0km.js → cli-gqvh8d8a.js}

@@ -10,7 +10,7 @@ import {
   getMostRecentTaskInThread2,
   reactionName,
   init_db3
-} from "./cli-d3qqdy4c.js";
+} from "./cli-p20r8w42.js";
 import {
   TaskCreationBlockedError,
   buildEffectiveText,
@@ -23,7 +23,7 @@ import {
   extractTaskFromMessage,
   extractSlackMessageText,
   dispatchPre2
-} from "./cli-5rk36sjf.js";
+} from "./cli-v3yr2gbg.js";
 import {
   noteSlackInboundSideEffect,
   ignoreSlackInbound,
@@ -34,14 +34,14 @@ import {
   isSlackRenderV2Enabled2,
   ensureSlackThreadTree2,
   registerTreeMessage
-} from "./cli-nn47d7e8.js";
+} from "./cli-qkhc5aqy.js";
 import {
   isBlockExternalEnabled2,
   invalidateChannelExternality2,
   getChannelBlockReason2,
   shouldBlockChannel2,
   leaveExternalChannel2
-} from "./cli-pkht5hap.js";
+} from "./cli-1d70crsy.js";
 import {
   workflowEventBus2,
   init_event_bus
@@ -50,7 +50,7 @@ import {
   enrichSlackUserEmail,
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-bcj753sq.js";
+} from "./cli-2v045xyf.js";
 import {
   wasEventSeen,
   requestSlackThreadSteering,
@@ -58,7 +58,7 @@ import {
   bufferThreadMessage,
   getBufferMessageCount,
   instantFlush
-} from "./cli-0qvtffe9.js";
+} from "./cli-b8k7epj1.js";
 import {
   resolveTemplate,
   init_resolver
@@ -75,7 +75,7 @@ import {
 import {
   isEnvFlagEnabled,
   init_env_flag
-} from "./cli-0hyhdkdk.js";
+} from "./cli-cebvbc9t.js";
 import {
   scrubSecrets,
   init_secret_scrubber

package/dist/{cli-t30yj95q.js → cli-hj3debgw.js}

@@ -6,7 +6,7 @@ import {
   getResolvedConfig2,
   getAllUsers2,
   init_db3
-} from "./cli-d3qqdy4c.js";
+} from "./cli-p20r8w42.js";
 import {
   scrubSecrets,
   init_secret_scrubber

package/dist/{cli-fpmsqq59.js → cli-nc35pxb7.js}

@@ -23,7 +23,7 @@ import {
 import {
   MAX_PROFILE_FILE_LENGTH,
   init_constants2
-} from "./cli-w9g4sz81.js";
+} from "./cli-gf2850q7.js";
 import {
   __esm
 } from "./cli-242037k3.js";
@@ -2833,9 +2833,9 @@ var init_types = __esm(() => {
   }).openapi("SwarmScriptNodeConfig");
   WorkflowNodeSchema = object2({
     id: string2().describe("Unique node identifier, used in 'next' and 'inputs' mappings"),
-    type: string2().describe("Executor type: 'agent-task', 'script', 'swarm-script', 'raw-llm', 'system-one-decision', 'validate', 'property-match'"),
+    type: string2().describe("Executor type: 'agent-task', 'script', 'swarm-script', 'raw-llm', 'system-one-decision', 'system-one-extraction', 'validate', 'property-match'"),
     label: string2().optional().describe("Human-readable label for UI display"),
-    config: record2(string2(), unknown()).describe("Executor-specific config. For agent-task: { template, outputSchema?, agentId?, routingReason?, routingNote?, tags?, priority?, dir?, vcsRepo?, model? }; configured agentId defaults routingReason to human_pinned. " + "For script: { runtime, script, args?, timeout? }. " + "For swarm-script: { scriptName, scope?, pinHash?, args?, fsMode?, timeoutMs? (1000-300000) }. " + "For system-one-decision (typed decisions, Jev by default): { provider? ('typesafe' default | 'openrouter' | 'laya'; a literal, never a {{token}}), state, questions: { <id>: { type: 'noul'|'choice'|'score', instructions, criteria? } }, returns: { <id>: { type } }, model? (provider-specific; unset = the provider's default, and laya has none so it sends no model and picks its own checkpoint), timeoutMs?, maxRetries? (0-3), humanReview? { band: { min, max } (0-1, inclusive), approvers: { users?, roles?, policy }, title?, timeout?, notifications? } }; each provider needs its own global secret (TYPESAFE_API_KEY, OPENROUTER_API_KEY, or LAYA_API_KEY; laya also needs the global config LAYA_URL), and a save warns and a run fails before any node executes when one is missing; system-one-decision nodes must not set retry or validation.retry. With humanReview, an answer whose confidence is inside the band waits for a person (human-in-the-loop approval), and next must map ports { approved, rejected?, timeout? }. " + "Agent-task templates and ordinary config values support {{interpolation}} from the node's inputs context, including trigger and declared upstream aliases. " + "SECURITY: executable source for script/swarm-script nodes does not interpolate trigger.* or upstream node outputs; only input/workflow/swarm/run values are allowed in inline script source, and named swarm-script source is not workflow-interpolated. " + 'Pass dynamic values through config.args instead (inline script receives them as argv, with runtime: "bash" running bash -c <script> ...args so args[0] is $0 and args[1] is $1; swarm-script receives its args object). ' + "NOTE: config.outputSchema on agent-task nodes validates the AGENT's raw JSON output, " + "while node-level outputSchema validates the EXECUTOR's return value ({taskId, taskOutput})."),
+    config: record2(string2(), unknown()).describe("Executor-specific config. For agent-task: { template, outputSchema?, agentId?, routingReason?, routingNote?, tags?, priority?, dir?, vcsRepo?, model? }; configured agentId defaults routingReason to human_pinned. " + "For script: { runtime, script, args?, timeout? }. " + "For swarm-script: { scriptName, scope?, pinHash?, args?, fsMode?, timeoutMs? (1000-300000) }. " + "For system-one-decision (typed decisions, Jev by default): { provider? ('typesafe' default | 'openrouter' | 'laya'; a literal, never a {{token}}), state, questions: { <id>: { type: 'noul'|'choice'|'score', instructions, criteria? } }, returns: { <id>: { type } }, model? (provider-specific; unset = the provider's default, and laya has none so it sends no model and picks its own checkpoint), timeoutMs?, maxRetries? (0-3), humanReview? { band: { min, max } (0-1, inclusive), approvers: { users?, roles?, policy }, title?, timeout?, notifications? } }; each provider needs its own global secret (TYPESAFE_API_KEY, OPENROUTER_API_KEY, or LAYA_API_KEY; laya also needs the global config LAYA_URL), and a save warns and a run fails before any node executes when one is missing; system-one-decision nodes must not set retry or validation.retry. With humanReview, an answer whose confidence is inside the band waits for a person (human-in-the-loop approval), and next must map ports { approved, rejected?, timeout? }. " + "For system-one-extraction (typed extraction, Cloudflare Clairic by default): { provider? ('cloudflare'; a literal), state (text to read; may be empty when images are sent), fields: { <id>: { type: 'text'|'number'|'date'|'time'|'datetime'|'duration'|'list'|'estimate'|'forecast', instructions?, ...type options (number: unit?, integer?, decimals?; duration: unit? (seconds..years), integer?, decimals?; list: items ('text'|'number'|'date'); estimate: min, max, step?, scale?, unit?; forecast: min, max, horizon?, interval?, scale?, unit?; text/number/date/time/datetime/duration: null_threshold?) } }, images? (max 4 base64 data: URLs or { content_type, base64 }), referenceDate? (YYYY-MM-DD), model?, timeoutMs?, maxRetries? (0-3) }; output answers.<id> carries value (null when the input does not say), guess, p_null, confidence, span/spans, and for estimate/forecast median/p10/p90. Needs the global secret CLOUDFLARE_API_TOKEN (or CLOUDFLARE_API_KEY) and the global config CLOUDFLARE_ACCOUNT_ID; must not set retry or validation.retry. " + "Agent-task templates and ordinary config values support {{interpolation}} from the node's inputs context, including trigger and declared upstream aliases. " + "SECURITY: executable source for script/swarm-script nodes does not interpolate trigger.* or upstream node outputs; only input/workflow/swarm/run values are allowed in inline script source, and named swarm-script source is not workflow-interpolated. " + 'Pass dynamic values through config.args instead (inline script receives them as argv, with runtime: "bash" running bash -c <script> ...args so args[0] is $0 and args[1] is $1; swarm-script receives its args object). ' + "NOTE: config.outputSchema on agent-task nodes validates the AGENT's raw JSON output, " + "while node-level outputSchema validates the EXECUTOR's return value ({taskId, taskOutput})."),
     next: union2([string2(), array2(string2()), record2(string2(), string2())]).optional().describe("Next node(s): string for simple chaining, string[] for fan-out to parallel nodes, or record for port-based routing ({pass: 'a', fail: 'b'})"),
     validation: StepValidationConfigSchema.optional(),
     retry: RetryPolicySchema.optional(),