@desplega.ai/agent-swarm 2.4.3 → 2.4.5

package/dist/{cli-6eyncg0y.js → cli-018r4jq6.js}

@@ -9,20 +9,21 @@ import {
   init_active_sessions,
   getSteeringMessageById2,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-qp2m4btv.js";
+} from "./cli-kpw04va0.js";
 import {
   findUserById,
   findUserByExternalId,
   init_users
-} from "./cli-sds5zzs8.js";
+} from "./cli-1f3qzw6y.js";
 import {
   isRbacEnabled,
+  can,
   init_rbac
-} from "./cli-8vverzf7.js";
+} from "./cli-ba8ne1es.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -502,7 +503,7 @@ function route(def) {
       try {
         const rawBody = def.body ? await parseBody(req, def.maxBodyBytes) : undefined;
         if (def.session && "bodyTaskIds" in def.session) {
-          const { bodySessionDenial } = await import("./session-access-2zg285a1.js");
+          const { bodySessionDenial } = await import("./session-access-s2mttxpw.js");
           const denial = await bodySessionDenial(req, def.session.bodyTaskIds(rawBody));
           if (denial) {
             jsonError(res, denial, 403);
@@ -770,6 +771,33 @@ function readableByFor2(actor) {
   return actor.kind === "user" ? { userId: actor.userId } : undefined;
 }
 var SESSION_WRITE_DENIED2 = "You can't write in this session. Ask the owner to share it with edit access.";
+async function hasSessionWrite(req, myAgentId, taskId) {
+  const access = await sessionAccessFor2(await resolveSessionActor2(req, myAgentId), taskId);
+  return hasSessionAccess(access, "write");
+}
+async function denyParentAttach2(req, res, myAgentId, parentTask, principal) {
+  const attach = can({
+    principal,
+    verb: "task.parent.attach",
+    resource: {
+      kind: "task",
+      taskId: parentTask.id,
+      requestedByUserId: parentTask.requestedByUserId,
+      creatorAgentId: parentTask.creatorAgentId,
+      agentId: parentTask.agentId
+    },
+    source: "http"
+  });
+  if (!attach.allow) {
+    jsonError(res, `You don't have context for parent task ${parentTask.id}.`, 403);
+    return true;
+  }
+  if (!await hasSessionWrite(req, myAgentId, parentTask.id)) {
+    jsonError(res, SESSION_WRITE_DENIED2, 403);
+    return true;
+  }
+  return false;
+}
 async function denialFor(actor, taskId, needed) {
   if (actor.kind === "bypass")
     return null;
@@ -845,4 +873,4 @@ async function userAgentIdentityDenial2(req, def, pathSegments) {
   return USER_AGENT_HEADER_DENIED;
 }
 
-export { duplicateGuardedQueryKey, warnIfCorsAllowsAnyOrigin, isOriginAllowedForCredentials, allowedCredentialRedirect, setCorsHeaders, parseQueryParams, getPathSegments, wireHttpSpanLifecycle, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, writeUnhandledError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, hasSessionAccess, getSessionRoot, sessionAccessForRoot, listActiveSessionShares, toSessionSharesState, setSessionShares, resolveTaskAuditUserId, resolveHttpAuditUserId, dashboardUserIdHeader, resolveHttpFavoriteOwner, resolveSessionActor2, sessionAccessFor2, SESSION_READ_DENIED2, canReadSession2, readableByFor2, SESSION_WRITE_DENIED2, pathSessionDenial2, bodySessionDenial2, userAgentIdentityDenial2, runtimeInstanceHeader, bodyTask, bodyListTask, routeRegistry, isPublicRoute, findRoute, describeRequestRoute, route };
+export { duplicateGuardedQueryKey, warnIfCorsAllowsAnyOrigin, isOriginAllowedForCredentials, allowedCredentialRedirect, setCorsHeaders, parseQueryParams, getPathSegments, wireHttpSpanLifecycle, safeRequestUrlForLog, agentWithCapacity, RequestBodyTooLargeError, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, writeUnhandledError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, hasSessionAccess, getSessionRoot, sessionAccessForRoot, listActiveSessionShares, toSessionSharesState, setSessionShares, resolveTaskAuditUserId, resolveHttpAuditUserId, dashboardUserIdHeader, resolveHttpFavoriteOwner, resolveSessionActor2, sessionAccessFor2, SESSION_READ_DENIED2, canReadSession2, readableByFor2, SESSION_WRITE_DENIED2, denyParentAttach2, pathSessionDenial2, bodySessionDenial2, userAgentIdentityDenial2, runtimeInstanceHeader, bodyTask, bodyListTask, routeRegistry, isPublicRoute, findRoute, describeRequestRoute, route };

package/dist/{cli-sds5zzs8.js → cli-1f3qzw6y.js}

@@ -5,8 +5,9 @@ import {
   validateRuntimeTokenTtlHours,
   init_swarm_config_guard,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
+  registerVolatileSecret,
   unregisterVolatileSecret,
   init_secret_scrubber
 } from "./cli-xf234ws8.js";
@@ -264,11 +265,12 @@ async function resolveUserByToken(plaintext) {
 async function mintSessionToken(agentId, taskId, ttlMs, parent) {
   if (parent) {
     return await getDbClient2().transaction(async (client) => {
-      const row = await client.get(`SELECT expiresAt FROM session_tokens WHERE id = ? AND agentId = ? AND runtimeId = ?
-         AND revokedAt IS NULL AND expiresAt > ?`, [parent.tokenId, agentId, parent.runtimeId, new Date().toISOString()]);
+      const row = await client.get(parent.runtimeId ? `SELECT expiresAt FROM session_tokens WHERE id = ? AND agentId = ? AND runtimeId = ?
+             AND revokedAt IS NULL AND expiresAt > ?` : `SELECT expiresAt FROM session_tokens WHERE id = ? AND agentId = ? AND ${AGENT_TOKEN_BINDING}
+             AND revokedAt IS NULL AND expiresAt > ?`, parent.runtimeId ? [parent.tokenId, agentId, parent.runtimeId, new Date().toISOString()] : [parent.tokenId, agentId, new Date().toISOString()]);
       if (!row)
         throw new InvalidRuntimeTokenError;
-      return await insertSessionToken(agentId, taskId, null, ttlMs, parent.runtimeId, row.expiresAt);
+      return await insertSessionToken(agentId, taskId, null, ttlMs, parent.runtimeId, row.expiresAt, null, parent.runtimeId ? null : parent.tokenId);
     });
   }
   return await insertSessionToken(agentId, taskId, null, ttlMs);
@@ -280,7 +282,7 @@ function runtimeTokenTtlMs() {
 async function mintRuntimeToken(agentId, runtimeId, ttlMs = runtimeTokenTtlMs()) {
   return await insertSessionToken(agentId, null, runtimeId, ttlMs);
 }
-async function insertSessionToken(agentId, taskId, runtimeId, ttlMs, parentRuntimeId = null, expiresAtCeiling, controllerId = null) {
+async function insertSessionToken(agentId, taskId, runtimeId, ttlMs, parentRuntimeId = null, expiresAtCeiling, controllerId = null, parentTokenId = null) {
   const plaintext = `${SESSION_TOKEN_PREFIX}${base62(randomBytes(24))}`;
   const tokenId = randomUUID().replace(/-/g, "");
   const hash = sha256Hex(plaintext);
@@ -288,8 +290,8 @@ async function insertSessionToken(agentId, taskId, runtimeId, ttlMs, parentRunti
   const now = new Date;
   const expiresAt = new Date(Math.min(now.getTime() + ttlMs, expiresAtCeiling ? Date.parse(expiresAtCeiling) : Infinity)).toISOString();
   await getDbClient2().run(`INSERT INTO session_tokens
-     (id, tokenHash, tokenPreview, agentId, taskId, runtimeId, parentRuntimeId, expiresAt, createdAt, controllerId)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+     (id, tokenHash, tokenPreview, agentId, taskId, runtimeId, parentRuntimeId, expiresAt, createdAt, controllerId, parentTokenId)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     tokenId,
     hash,
     preview,
@@ -299,7 +301,8 @@ async function insertSessionToken(agentId, taskId, runtimeId, ttlMs, parentRunti
     parentRuntimeId,
     expiresAt,
     now.toISOString(),
-    controllerId
+    controllerId,
+    parentTokenId
   ]);
   return { tokenId, plaintext };
 }
@@ -309,11 +312,24 @@ async function revokeSessionToken(tokenId) {
     if (row?.runtimeId) {
       await revokeRuntimeTokensForRuntime(row.runtimeId);
     } else {
-      await client.run("UPDATE session_tokens SET revokedAt = ? WHERE id = ? AND revokedAt IS NULL", [new Date().toISOString(), tokenId]);
-      getDbClient2().afterCommit(() => closeSessionTokenConnections([tokenId]));
+      await revokeTokensWithChildren(client, [tokenId]);
     }
   });
 }
+async function revokeTokensWithChildren(client, tokenIds) {
+  if (tokenIds.length === 0)
+    return;
+  const placeholders = tokenIds.map(() => "?").join(", ");
+  const children = await client.query(`SELECT id FROM session_tokens WHERE parentTokenId IN (${placeholders})`, tokenIds);
+  const ids = [...tokenIds, ...children.map((row) => row.id)];
+  await client.run(`UPDATE session_tokens SET revokedAt = ?
+     WHERE id IN (${ids.map(() => "?").join(", ")}) AND revokedAt IS NULL`, [new Date().toISOString(), ...ids]);
+  getDbClient2().afterCommit(() => {
+    for (const id of tokenIds)
+      unregisterVolatileSecret(`agent-token:${id}`);
+    closeSessionTokenConnections(ids);
+  });
+}
 async function revokeRuntimeTokensForRuntime(runtimeId) {
   await getDbClient2().transaction(async (client) => {
     const rows = await client.query("SELECT id FROM session_tokens WHERE runtimeId = ? OR parentRuntimeId = ?", [runtimeId, runtimeId]);
@@ -325,6 +341,50 @@ async function revokeRuntimeTokensForRuntime(runtimeId) {
     });
   });
 }
+function storedExpiry(ttlMs) {
+  return ttlMs === null ? AGENT_TOKEN_NO_EXPIRY : new Date(Date.now() + ttlMs).toISOString();
+}
+function publicExpiry(expiresAt) {
+  return expiresAt === AGENT_TOKEN_NO_EXPIRY ? null : expiresAt;
+}
+async function activeAgentTokenIds(client, agentId) {
+  const rows = await client.query(`SELECT id FROM session_tokens WHERE agentId = ? AND ${AGENT_TOKEN_BINDING}
+     AND revokedAt IS NULL AND expiresAt > ?`, [agentId, new Date().toISOString()]);
+  return rows.map((row) => row.id);
+}
+async function insertAgentToken(agentId, ttlMs) {
+  const expiresAt = storedExpiry(ttlMs);
+  const token = await insertSessionToken(agentId, null, null, Number.MAX_SAFE_INTEGER, null, expiresAt);
+  getDbClient2().afterCommit(() => registerVolatileSecret(token.plaintext, `agent-token:${token.tokenId}`));
+  return { ...token, expiresAt: publicExpiry(expiresAt) };
+}
+async function mintAgentToken(agentId, ttlMs = AGENT_TOKEN_DEFAULT_TTL_MS) {
+  return await getDbClient2().transaction(async (client) => {
+    if ((await activeAgentTokenIds(client, agentId)).length > 0) {
+      throw new AgentTokenExistsError;
+    }
+    return await insertAgentToken(agentId, ttlMs);
+  });
+}
+async function rotateAgentToken(agentId, graceMs, ttlMs = AGENT_TOKEN_DEFAULT_TTL_MS) {
+  return await getDbClient2().transaction(async (client) => {
+    const previous = await activeAgentTokenIds(client, agentId);
+    if (previous.length === 0)
+      return null;
+    const previousExpiresAt = new Date(Date.now() + graceMs).toISOString();
+    const placeholders = previous.map(() => "?").join(", ");
+    await client.run(`UPDATE session_tokens SET expiresAt = ?
+       WHERE (id IN (${placeholders}) OR parentTokenId IN (${placeholders})) AND expiresAt > ?`, [previousExpiresAt, ...previous, ...previous, previousExpiresAt]);
+    return { ...await insertAgentToken(agentId, ttlMs), previousExpiresAt };
+  });
+}
+async function revokeAgentTokens(agentId) {
+  return await getDbClient2().transaction(async (client) => {
+    const ids = await activeAgentTokenIds(client, agentId);
+    await revokeTokensWithChildren(client, ids);
+    return ids.length;
+  });
+}
 async function resolveSessionToken(plaintext, options = {}) {
   if (!plaintext.startsWith(SESSION_TOKEN_PREFIX))
     return null;
@@ -356,6 +416,7 @@ async function resolveSessionToken(plaintext, options = {}) {
   return {
     kind: "agent",
     tokenId: row.id,
+    tokenKind: row.taskId !== null ? "task" : row.runtimeId !== null ? "runtime" : "agent",
     agentId: row.agentId,
     taskId: row.taskId,
     runtimeId: row.runtimeId,
@@ -365,7 +426,7 @@ async function resolveSessionToken(plaintext, options = {}) {
 function fingerprintApiKey(rawKey) {
   return `op:${sha256Hex(rawKey).slice(0, 16)}`;
 }
-var TOKEN_PREFIX = "aswt_", SESSION_TOKEN_PREFIX = "aseph_", InvalidRuntimeTokenError;
+var TOKEN_PREFIX = "aswt_", SESSION_TOKEN_PREFIX = "aseph_", InvalidRuntimeTokenError, AGENT_TOKEN_BINDING = "taskId IS NULL AND runtimeId IS NULL AND controllerId IS NULL AND parentRuntimeId IS NULL", AGENT_TOKEN_NO_EXPIRY = "9999-12-31T23:59:59.999Z", AGENT_TOKEN_DEFAULT_TTL_MS = null, AgentTokenExistsError;
 var init_users = __esm(() => {
   init_telemetry_identity();
   init_secret_scrubber();
@@ -377,6 +438,11 @@ var init_users = __esm(() => {
       super("Runtime token is no longer valid");
     }
   };
+  AgentTokenExistsError = class AgentTokenExistsError extends Error {
+    constructor() {
+      super("Agent already has an active token; rotate or revoke it");
+    }
+  };
 });
 
-export { registerSessionTokenConnection, closeSessionTokenConnections, init_session_token_connections, findUserById, findUserByExternalId, findUserByEmail, findUsersByName, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, InvalidRuntimeTokenError, mintSessionToken, mintRuntimeToken, insertSessionToken, revokeSessionToken, revokeRuntimeTokensForRuntime, resolveSessionToken, fingerprintApiKey, init_users };
+export { registerSessionTokenConnection, closeSessionTokenConnections, init_session_token_connections, findUserById, findUserByExternalId, findUserByEmail, findUsersByName, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, InvalidRuntimeTokenError, mintSessionToken, mintRuntimeToken, insertSessionToken, revokeSessionToken, revokeRuntimeTokensForRuntime, AgentTokenExistsError, mintAgentToken, rotateAgentToken, revokeAgentTokens, resolveSessionToken, fingerprintApiKey, init_users };

package/dist/{cli-f0p0f6ja.js → cli-1sp861s4.js}

@@ -4,7 +4,7 @@ import {
   CONTROLLER_COMMAND_TIMEOUT_MS,
   RuntimeHandleSchema,
   ControllerStatusResultSchema
-} from "./cli-mzkwkbdy.js";
+} from "./cli-f0g3pgvf.js";
 import {
   getDbClient2,
   isRuntimePoolsEnabled,
@@ -21,7 +21,7 @@ import {
   upsertSwarmConfig2,
   getResolvedConfig2,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   runtimeStaleThresholdMinutes,
   getRuntimeInstanceById,
@@ -31,7 +31,7 @@ import {
   listRuntimeInstancesForPool,
   createWorkerTaskFollowUp,
   canClaim
-} from "./cli-kgnkyabk.js";
+} from "./cli-n72rg53p.js";
 import {
   getRuntimeController2,
   getRuntimeControllerTarget2,
@@ -42,7 +42,7 @@ import {
   getPoolForAgent2,
   resolvePoolDelivery2,
   init_db
-} from "./cli-gx0j2khs.js";
+} from "./cli-j99azg3g.js";
 import {
   workflowEventBus2,
   init_event_bus
@@ -61,12 +61,12 @@ import {
 import {
   mintRuntimeToken,
   init_users
-} from "./cli-sds5zzs8.js";
+} from "./cli-1f3qzw6y.js";
 import {
   TERMINAL_TASK_STATUSES,
   isTerminalTaskStatus,
   init_types
-} from "./cli-836ehxmt.js";
+} from "./cli-eww120g8.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -522,7 +522,7 @@ async function recoverSessions(runtimeId, reason) {
   }
   if (!sessions.length)
     return;
-  const { remediateTaskForDeadRuntime } = await import("./heartbeat-zzfksckz.js");
+  const { remediateTaskForDeadRuntime } = await import("./heartbeat-dyg4npkp.js");
   for (const session of sessions) {
     try {
       const task = await getTaskById2(session.taskId);

package/dist/{cli-dm8p2dpf.js → cli-1syn2xy1.js}

@@ -10,7 +10,7 @@ import {
   getMostRecentTaskInThread2,
   reactionName,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   TaskCreationBlockedError,
   buildEffectiveText,
@@ -23,7 +23,7 @@ import {
   extractTaskFromMessage,
   extractSlackMessageText,
   dispatchPre2
-} from "./cli-kgnkyabk.js";
+} from "./cli-n72rg53p.js";
 import {
   noteSlackInboundSideEffect,
   ignoreSlackInbound,
@@ -34,14 +34,14 @@ import {
   isSlackRenderV2Enabled2,
   ensureSlackThreadTree2,
   registerTreeMessage
-} from "./cli-tkf4x6ha.js";
+} from "./cli-37j04k05.js";
 import {
   isBlockExternalEnabled2,
   invalidateChannelExternality2,
   getChannelBlockReason2,
   shouldBlockChannel2,
   leaveExternalChannel2
-} from "./cli-v87dr6e3.js";
+} from "./cli-3a45zcgm.js";
 import {
   workflowEventBus2,
   init_event_bus
@@ -50,7 +50,7 @@ import {
   enrichSlackUserEmail,
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-4yef8ghv.js";
+} from "./cli-fv5hepyy.js";
 import {
   wasEventSeen,
   requestSlackThreadSteering,
@@ -58,7 +58,7 @@ import {
   bufferThreadMessage,
   getBufferMessageCount,
   instantFlush
-} from "./cli-bxrqvpg5.js";
+} from "./cli-be2161h1.js";
 import {
   resolveTemplate,
   init_resolver
@@ -400,8 +400,8 @@ function registerMessageHandler2(app) {
             }
             return ignoreSlackInbound("rate_limited");
           }
-          const inbound = __using(__stack, await fetchSlackFiles(client, msg.files), 1);
-          const taskText = buildEffectiveText(msg.text, inbound.files, inbound.failed);
+          const inbound = __using(__stack, await fetchSlackFiles(client, msg.files, { transcribe: true }), 1);
+          const taskText = buildEffectiveText(msg.text, inbound.files, inbound.failed, inbound.notes);
           const taskDescription = isImplicitMention ? taskText : extractTaskFromMessage(taskText, botUserId);
           if (!taskDescription) {
             if (!isImplicitMention && !isSlackRenderV2Enabled2()) {
@@ -465,8 +465,8 @@ ${taskDescription}`;
         }
         return ignoreSlackInbound("rate_limited");
       }
-      const inbound = __using(__stack2, await fetchSlackFiles(client, msg.files), 1);
-      const taskDescription = extractTaskFromMessage(buildEffectiveText(msg.text, inbound.files, inbound.failed), botUserId);
+      const inbound = __using(__stack2, await fetchSlackFiles(client, msg.files, { transcribe: true }), 1);
+      const taskDescription = extractTaskFromMessage(buildEffectiveText(msg.text, inbound.files, inbound.failed, inbound.notes), botUserId);
       if (!taskDescription) {
         if (!isSlackRenderV2Enabled2()) {
           await say({

package/dist/{cli-tkf4x6ha.js → cli-37j04k05.js}

@@ -47,10 +47,10 @@ import {
   checkDependencies2,
   emitBuiltInIntegrationConnectedOnce2,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   getChannelBlockReason2
-} from "./cli-v87dr6e3.js";
+} from "./cli-3a45zcgm.js";
 import {
   require_dist5,
   require_axios,
@@ -67,7 +67,7 @@ import {
 import {
   isTerminalTaskStatus,
   init_types
-} from "./cli-836ehxmt.js";
+} from "./cli-eww120g8.js";
 import {
   taskAttachmentDisplayUrl,
   init_task_attachment_links
@@ -6235,7 +6235,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
     return;
   initialized = true;
   try {
-    const impl = await import("./otel-impl-e6mn0z13.js");
+    const impl = await import("./otel-impl-trjpkfb7.js");
     await impl.boot(serviceRole, {
       exportConsoleLogs: serviceRole === "api" && isApiLogExportEnabled()
     });
@@ -10080,17 +10080,17 @@ async function initSlackApp2() {
   });
   initialized2 = true;
   app.use(slackInboundOutcomeMiddleware());
-  const { registerMessageHandler } = await import("./handlers-2qjw434w.js");
-  const { registerCommandHandler } = await import("./commands-hd574th6.js");
-  const { registerActionHandlers } = await import("./actions-pn76n32q.js");
-  const { registerWorkObjectHandlers } = await import("./work-objects-9fr0fgtn.js");
+  const { registerMessageHandler } = await import("./handlers-7gw64dxw.js");
+  const { registerCommandHandler } = await import("./commands-t7rz9146.js");
+  const { registerActionHandlers } = await import("./actions-c40ebcm4.js");
+  const { registerWorkObjectHandlers } = await import("./work-objects-rvhckdkp.js");
   registerMessageHandler(app);
   registerCommandHandler(app);
   registerActionHandlers(app);
   registerWorkObjectHandlers(app);
-  const { createAssistant } = await import("./assistant-sc2tf825.js");
+  const { createAssistant } = await import("./assistant-sj1njh23.js");
   app.assistant(createAssistant());
-  const { isBlockExternalEnabled, scanExternalChannelsOnBoot } = await import("./external-channel-x01t7ke6.js");
+  const { isBlockExternalEnabled, scanExternalChannelsOnBoot } = await import("./external-channel-35k6tkv8.js");
   if (isBlockExternalEnabled()) {
     scanExternalChannelsOnBoot(app.client).catch((error) => {
       console.error("[Slack] External channel boot scan failed:", error);
@@ -10103,7 +10103,7 @@ async function startSlackApp2() {
     await initSlackApp2();
   }
   if (app) {
-    const { isSlackRenderV2Enabled } = await import("./render-v2-g0306nh1.js");
+    const { isSlackRenderV2Enabled } = await import("./render-v2-rr3p2atg.js");
     if (isSlackRenderV2Enabled())
       await ensureSlackRenderV2Activation2();
     await app.start();

package/dist/{cli-v87dr6e3.js → cli-3a45zcgm.js}

@@ -4,7 +4,7 @@ import {
   claimKv2,
   deleteKv2,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   isEnvFlagEnabled,
   init_env_flag

package/dist/{cli-1n9gdg56.js → cli-43x64hv3.js}

@@ -7,20 +7,20 @@ import {
   tierConfigKey,
   init_model_tier_keys,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   ensureRbacSeedsSynced2,
   init_rbac_roles
-} from "./cli-qp2m4btv.js";
+} from "./cli-kpw04va0.js";
 import {
   seedPricingFromModelsDev
-} from "./cli-vq9gqarq.js";
+} from "./cli-dk44dxec.js";
 import {
   MODEL_TIERS,
   DEFAULT_MODEL_TIER_MAP,
   ProviderNameSchema,
   init_types
-} from "./cli-836ehxmt.js";
+} from "./cli-eww120g8.js";
 
 // src/be/boot-seeds.ts
 init_db3();

package/dist/{cli-p0qerd2r.js → cli-4zfqgjc5.js}

@@ -6,7 +6,7 @@ import {
   getResolvedConfig2,
   getAllUsers2,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   scrubSecrets,
   init_secret_scrubber
@@ -122,7 +122,7 @@ async function ensureAgentFsSharedProvisioning(options) {
     await upsertSwarmConfig2({ scope: "global", key, value, isSecret: false, description });
   }
   process.env.AGENT_FS_API_URL = apiUrl;
-  const { resetFileStorageProvider } = await import("./registry-rxw10xzg.js");
+  const { resetFileStorageProvider } = await import("./registry-ajhexe44.js");
   resetFileStorageProvider();
   return { apiUrl, apiKey, orgId, driveId, authHeaders };
 }

package/dist/{cli-aa3tb29r.js → cli-7c9qs530.js}

@@ -31,7 +31,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-1xsraagq.js";
+} from "./cli-94gwyg7m.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getMcpBaseUrl,

package/dist/{cli-9qtjfd60.js → cli-848hxdwj.js}

@@ -320,7 +320,7 @@ var formatRequestDetails = (details) => {
   if (details.headers) {
     details.headers = Object.fromEntries((details.headers instanceof Headers ? [...details.headers] : Object.entries(details.headers)).map(([name, value]) => [
       name,
-      name.toLowerCase() === "authorization" || name.toLowerCase() === "proxy-authorization" || name.toLowerCase() === "api-key" || name.toLowerCase() === "x-api-key" || name.toLowerCase() === "cookie" || name.toLowerCase() === "set-cookie" ? "***" : value
+      name.toLowerCase() === "authorization" || name.toLowerCase() === "proxy-authorization" || name.toLowerCase() === "api-key" || name.toLowerCase() === "x-api-key" || name.toLowerCase() === "x-amz-security-token" || name.toLowerCase() === "cookie" || name.toLowerCase() === "set-cookie" ? "***" : value
     ]));
   }
   if ("retryOfRequestLogID" in details) {

package/dist/{cli-1xsraagq.js → cli-94gwyg7m.js}

@@ -7,7 +7,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@desplega.ai/agent-swarm",
-    version: "2.4.3",
+    version: "2.4.5",
     description: "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
     keywords: [
       "agent-swarm.dev",
@@ -186,8 +186,8 @@ var init_package = __esm(() => {
       "@desplega/model-catalog": "workspace:*",
       "@desplega/model-routing": "workspace:*",
       "@faker-js/faker": "^10.4.0",
-      "@opencode/plugin": "2.0.32",
-      "@opencode/sdk": "2.0.32",
+      "@opencode/plugin": "2.1.2",
+      "@opencode/sdk": "2.1.2",
       "@oxlint/plugins": "1.78.0",
       "@types/bun": "latest",
       "dependency-cruiser": "^18.0.0",
@@ -205,17 +205,17 @@ var init_package = __esm(() => {
       bun: ">=1.3.12"
     },
     dependencies: {
-      "@agentclientprotocol/sdk": "1.9.0",
+      "@agentclientprotocol/sdk": "2.0.0",
       "@ai-sdk/openai": "^3.0.41",
-      "@anthropic-ai/claude-agent-sdk": "0.3.304",
-      "@anthropic-ai/sdk": "^0.135.0",
+      "@anthropic-ai/claude-agent-sdk": "0.3.306",
+      "@anthropic-ai/sdk": "^0.137.0",
       "@asteasolutions/zod-to-openapi": "^8.0.0",
       "@aws-sdk/client-bedrock": "3.1048.0",
       "@chat-adapter/discord": "4.41.1",
       "@chat-adapter/slack": "4.41.1",
       "@chat-adapter/teams": "4.41.1",
       "@chat-adapter/telegram": "4.41.1",
-      "@cursor/sdk": "1.0.38",
+      "@cursor/sdk": "1.0.40",
       "@desplega.ai/agent-fs-just-bash": "0.18.5",
       "@desplega.ai/business-use": "^0.4.2",
       "@earendil-works/pi-agent-core": "^1.3.0",
@@ -224,7 +224,7 @@ var init_package = __esm(() => {
       "@inkjs/ui": "^2.0.0",
       "@jitl/quickjs-singlefile-mjs-release-sync": "0.32.0",
       "@linear/sdk": "^77.0.0",
-      "@modelcontextprotocol/sdk": "1.31.0",
+      "@modelcontextprotocol/sdk": "1.32.1",
       "@openai/codex": "0.163.0",
       "@openfort/openfort-node": "^0.9.1",
       "@opentelemetry/api": "^1.9.1",

package/dist/{cli-0dxxwfkt.js → cli-9hstj09h.js}

@@ -39,18 +39,18 @@ import {
   getPendingWaitsByEvent2,
   resolveWaitState2,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   BaseExecutor,
   postApprovalCancellationUpdates,
-  SYSTEM_ONE_DECISION_NODE_TYPE,
+  isSystemOneNodeType,
   systemOneRetryViolations,
   systemOneUnresolvedError,
   getNextTargets,
   findEntryNodes,
   resolveValidationPort,
   getSuccessors
-} from "./cli-s9rr4gr2.js";
+} from "./cli-xpa64rek.js";
 import {
   workflowEventBus2,
   init_event_bus
@@ -59,7 +59,7 @@ import {
   RetryPolicySchema,
   SUPERSEDED_WORKFLOW_TASK_REASON,
   init_types
-} from "./cli-836ehxmt.js";
+} from "./cli-eww120g8.js";
 import {
   getSlackConfiguration,
   isSlackConfigured,
@@ -107,7 +107,7 @@ async function notifyAutomationPreflightFailure(preflight) {
     return;
   }
   try {
-    const { getSlackApp } = await import("./app-6sv8mhzm.js");
+    const { getSlackApp } = await import("./app-353vre8g.js");
     const app = getSlackApp();
     if (!app) {
       console.warn("[Automation Preflight] Slack not available, cannot send notification");
@@ -1380,7 +1380,7 @@ async function runClaimedStep(def, runId, ctx, node, registry, existingStep, ste
     return { outcome: "failed", successors: [] };
   }
   if (strictUnresolved && strictUnresolved.length > 0) {
-    await checkpointStepFailure(runId, stepId, systemOneUnresolvedError(node.id, strictUnresolved), 0);
+    await checkpointStepFailure(runId, stepId, systemOneUnresolvedError(node.id, strictUnresolved, node.type), 0);
     return { outcome: "failed", successors: [] };
   }
   if (unresolved.length > 0) {
@@ -1435,7 +1435,7 @@ async function runClaimedStep(def, runId, ctx, node, registry, existingStep, ste
   if ("async" in result && result.async) {
     const waiting = await checkpointStepWaiting(runId, stepId, ctx);
     if (waiting && result.waitFor === "workflow.child.finished") {
-      const { resumeFromChildRun } = await import("./resume-v315hnq6.js");
+      const { resumeFromChildRun } = await import("./resume-2efkf1s1.js");
       await resumeFromChildRun(stepId, registry);
     }
     return { outcome: waiting ? "waiting" : "completed", successors: [] };
@@ -1549,15 +1549,18 @@ function buildScriptBodyCtx(node, interpolationCtx) {
   }
   return safe;
 }
+var SYSTEM_ONE_DATA_FIELDS = new Set(["state", "questions", "fields", "images"]);
 function interpolateNodeConfig(node, interpolationCtx) {
-  if (node.type === SYSTEM_ONE_DECISION_NODE_TYPE) {
-    const { state, questions, ...rest } = node.config;
-    const restResult = deepInterpolate(rest, interpolationCtx);
+  if (isSystemOneNodeType(node.type)) {
+    const rest = {};
     const dynamic = {};
-    if (Object.hasOwn(node.config, "state"))
-      dynamic.state = state;
-    if (Object.hasOwn(node.config, "questions"))
-      dynamic.questions = questions;
+    for (const [key, value] of Object.entries(node.config)) {
+      if (SYSTEM_ONE_DATA_FIELDS.has(key))
+        dynamic[key] = value;
+      else
+        rest[key] = value;
+    }
+    const restResult = deepInterpolate(rest, interpolationCtx);
     const dynamicResult = deepInterpolate(dynamic, interpolationCtx, { preserveRawTokens: true });
     const unresolved = [...restResult.unresolved, ...dynamicResult.unresolved];
     return {