@desplega.ai/agent-swarm 2.5.1 → 2.5.3

package/dist/{cli-mq7kg1b1.js → cli-p9rafdrb.js}

@@ -14,6 +14,7 @@ import {
   getDbClient2,
   normalizeDateRequired,
   init_date_utils,
+  getAgentById2,
   getLeadAgent2,
   resolveQuickJSPoolSize,
   init_quickjs_pool_config,
@@ -39,14 +40,14 @@ import {
   getResolvedConfig2,
   getMcpServerById2,
   init_db3
-} from "./cli-q9pzwxvk.js";
+} from "./cli-kxawjrxg.js";
 import {
   generateRandomCodeVerifier,
   generateRandomState,
   calculatePKCECodeChallenge,
   oauthAppRowToProviderConfig,
   ensureAuthorizationTokenOrThrow
-} from "./cli-rngde2jv.js";
+} from "./cli-egjggehm.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -55,10 +56,15 @@ import {
 import {
   McpHttpClient
 } from "./cli-s8d0dmcx.js";
+import {
+  mintScriptRunToken,
+  revokeSessionToken,
+  init_users
+} from "./cli-e8jyq7d8.js";
 import {
   defaultAssetKey,
   init_key
-} from "./cli-rh5smt8t.js";
+} from "./cli-mz9afxxf.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -178326,7 +178332,7 @@ function scriptEgressPolicy(env = process.env) {
   };
 }
 async function buildConfigPayload(input) {
-  const apiKey = getApiKey();
+  const apiKey = input.apiKey ?? getApiKey();
   if (!apiKey)
     throw new Error("Swarm API key is required to run scripts");
   return {
@@ -178403,6 +178409,35 @@ async function runScript(input) {
   };
 }
 
+// src/be/scripts/run-credential.ts
+init_db3();
+init_users();
+var SCRIPT_RUN_TOKEN_TTL_MS = 15 * 60 * 1000;
+async function acquireScriptApiCredential(agentId) {
+  if (!await getAgentById2(agentId)) {
+    return { apiKey: undefined, release: async () => {} };
+  }
+  const token = await mintScriptRunToken(agentId, SCRIPT_RUN_TOKEN_TTL_MS);
+  let released = false;
+  return {
+    apiKey: token.plaintext,
+    release: async () => {
+      if (released)
+        return;
+      released = true;
+      await revokeSessionToken(token.tokenId);
+    }
+  };
+}
+async function runScriptWithRunCredential(input) {
+  const credential = await acquireScriptApiCredential(input.agentId);
+  try {
+    return await runScript({ ...input, apiKey: credential.apiKey });
+  } finally {
+    await credential.release();
+  }
+}
+
 // src/scripts-runtime/extract-signature.ts
 var import_typescript2 = __toESM(require_typescript2(), 1);
 var FALLBACK_SIGNATURE = {
@@ -178532,7 +178567,7 @@ async function runSavedScriptAsAgent(args, deps = {}) {
     durationMs: 0,
     exitCode: 1,
     error: "killed"
-  } : await runScript({
+  } : await runScriptWithRunCredential({
     source: args.script.source,
     args: args.input,
     fsMode: args.script.fsMode,
@@ -185143,4 +185178,4 @@ function parseSkillContent(content) {
   };
 }
 
-export { require_dist2, isInvalidClientError, publicEndpointSsrfOptions, mcpOAuthSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, resolveSqlDsn, runReadOnlyQuery, listVendoredOpenapiEntries, ConnectionAuthInputSchema, SqlDsnInputSchema, connectionAuthSummary, listRelationalCredentialBindings, getCredentialBindingById, findCredentialBindingByIdentity, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, listScriptConnectionsAsync, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, deleteScriptConnection, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, writeBareImportShim, MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, require_typescript2, checkImportAllowlist, validateScriptImports, runScript, extractScriptSignature, extractArgsJsonSchema, getSavedScriptOwnerAgentId, runSavedScriptAsAgent, checkQuickJSCompat, quickJSCompatWarnings, resolveSyncRunAs, AppNameSchema, ScalarColumnKindSchema, isIso8601Date, jsonColumnSizeLabel, jsonColumnValueIssue, isValidColumnValue, SYSTEM_COLUMN_KINDS, SORTABLE_SYSTEM_DATE_COLUMNS, AppElementsSchema, AppDefinitionSchema, collectScriptReferences, scriptCompatWarnings, parseAppDefinition, applyAppDefinitionPatch, upgradeAppDefinition, decodeAppDefinition, appDefinitionNeedsRepair, createApp, getApp, listApps, listAppRecords, updateApp, deleteApp, getScriptAppTypes, SCRIPT_SDK_TYPES, scriptSdkTypesWithGeneratedApis, SCRIPT_STDLIB_MODULE_TYPES, scriptStdlibTypesWithGeneratedApis, typecheckWithAmbient, typecheckScript, parseSkillContent };
+export { require_dist2, isInvalidClientError, publicEndpointSsrfOptions, mcpOAuthSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, resolveSqlDsn, runReadOnlyQuery, listVendoredOpenapiEntries, ConnectionAuthInputSchema, SqlDsnInputSchema, connectionAuthSummary, listRelationalCredentialBindings, getCredentialBindingById, findCredentialBindingByIdentity, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, listScriptConnectionsAsync, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, deleteScriptConnection, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, writeBareImportShim, MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, require_typescript2, checkImportAllowlist, validateScriptImports, runScriptWithRunCredential, extractScriptSignature, extractArgsJsonSchema, getSavedScriptOwnerAgentId, runSavedScriptAsAgent, checkQuickJSCompat, quickJSCompatWarnings, resolveSyncRunAs, AppNameSchema, ScalarColumnKindSchema, isIso8601Date, jsonColumnSizeLabel, jsonColumnValueIssue, isValidColumnValue, SYSTEM_COLUMN_KINDS, SORTABLE_SYSTEM_DATE_COLUMNS, AppElementsSchema, AppDefinitionSchema, collectScriptReferences, scriptCompatWarnings, parseAppDefinition, applyAppDefinitionPatch, upgradeAppDefinition, decodeAppDefinition, appDefinitionNeedsRepair, createApp, getApp, listApps, listAppRecords, updateApp, deleteApp, getScriptAppTypes, SCRIPT_SDK_TYPES, scriptSdkTypesWithGeneratedApis, SCRIPT_STDLIB_MODULE_TYPES, scriptStdlibTypesWithGeneratedApis, typecheckWithAmbient, typecheckScript, parseSkillContent };

package/dist/{cli-cah5detr.js → cli-qgf8emrn.js}

@@ -10,7 +10,7 @@ import {
   init_steering,
   createLogEntry2,
   init_db3
-} from "./cli-q9pzwxvk.js";
+} from "./cli-kxawjrxg.js";
 import {
   ackSlackMessage,
   buildBufferFlushBlocks,
@@ -20,7 +20,7 @@ import {
   ensureSlackThreadTree2,
   registerTreeMessage,
   getSlackApp2
-} from "./cli-e9btqw4y.js";
+} from "./cli-ce0ak9ms.js";
 import {
   createAdditiveBuffer,
   TaskCreationBlockedError,
@@ -30,15 +30,15 @@ import {
   createSlackTaskWithFiles,
   notifySlackFileFailures,
   extractSlackMessageText
-} from "./cli-kcsd1ez8.js";
+} from "./cli-aecdcr77.js";
 import {
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-sn1vbtg2.js";
+} from "./cli-25j01dpj.js";
 import {
   findUserByExternalId,
   init_users
-} from "./cli-gwcf52gz.js";
+} from "./cli-e8jyq7d8.js";
 import {
   isSteeringEnabled2,
   init_steering_enabled

package/dist/{cli-2wba1ac9.js → cli-qzme5949.js}

@@ -20,7 +20,7 @@ import {
   renderMemoriesPrompt,
   isUnknownModelError,
   writeSkillsToFilesystem
-} from "./cli-cwyafhw1.js";
+} from "./cli-hcpj2xqz.js";
 import {
   isPollTracingEnabled,
   initOtel,
@@ -30,7 +30,7 @@ import {
   injectTraceContext2,
   initialize,
   ensure
-} from "./cli-e9btqw4y.js";
+} from "./cli-ce0ak9ms.js";
 import {
   getContextWindowSize
 } from "./cli-a5ebc95n.js";
@@ -51,7 +51,7 @@ import {
   canonicalAzureDevOpsRepoUrl,
   parseAzureDevOpsRepoUrl,
   resolveScriptsOnlyMode
-} from "./cli-kcsd1ez8.js";
+} from "./cli-aecdcr77.js";
 import {
   ACP_TARGET_IDS,
   isAcpTarget
@@ -59,32 +59,32 @@ import {
 import {
   checkAmpCredentials2,
   liveTestAmpCredentials2
-} from "./cli-fes51ya2.js";
+} from "./cli-p0rzjkya.js";
 import {
   checkClaudeCredentials2
-} from "./cli-qfjm4gvt.js";
+} from "./cli-ewm3pwbq.js";
 import {
   checkClaudeManagedCredentials2
-} from "./cli-n6kmqngw.js";
+} from "./cli-35gtk1p6.js";
 import {
   codexUserHome,
   checkCodexCredentials2
-} from "./cli-znvq0k3t.js";
+} from "./cli-s49hpn37.js";
 import {
   checkCursorCredentials2
-} from "./cli-j1eghqfm.js";
+} from "./cli-hhxjnjzs.js";
 import {
   checkDevinCredentials2
 } from "./cli-g1cw7xtt.js";
 import {
   checkDshCredentials2
-} from "./cli-z63a269p.js";
+} from "./cli-40jsnrjm.js";
 import {
   checkOpencodeCredentials2
-} from "./cli-stxdrqs2.js";
+} from "./cli-avdvgcay.js";
 import {
   checkGrokCredentials2
-} from "./cli-3ee5z0q0.js";
+} from "./cli-fzcn3d87.js";
 import {
   CODEX_OAUTH_POOL_SLOTS_ENV,
   isCodexOAuthConfigKey,
@@ -93,7 +93,7 @@ import {
 } from "./cli-j4bwnpkm.js";
 import {
   validateJsonSchema
-} from "./cli-pyy4c9ch.js";
+} from "./cli-jjznk3f7.js";
 import {
   mapTriggerSurface,
   init_telemetry_context,
@@ -111,7 +111,7 @@ import {
   init_vcs_repo_match,
   isApiDrainingResponse,
   init_api_drain
-} from "./cli-q9pzwxvk.js";
+} from "./cli-kxawjrxg.js";
 import {
   parseWorkerModelTierOverrides,
   resolveTaskModelSelection,
@@ -119,7 +119,7 @@ import {
   ProviderNameSchema,
   WorkerNudgeSchema,
   init_types
-} from "./cli-rh5smt8t.js";
+} from "./cli-mz9afxxf.js";
 import {
   generateDefaultClaudeMd2,
   generateDefaultSoulMd2,
@@ -246,19 +246,19 @@ async function materializeCodexAuthJson(_slot, creds, deps = {}) {
 async function createProviderAdapter(provider) {
   switch (provider) {
     case "claude": {
-      const { ClaudeAdapter } = await import("./claude-adapter-2f8b85df.js");
+      const { ClaudeAdapter } = await import("./claude-adapter-hswdnm3t.js");
       return new ClaudeAdapter;
     }
     case "pi": {
-      const { PiMonoAdapter } = await import("./pi-mono-adapter-tzps8f38.js");
+      const { PiMonoAdapter } = await import("./pi-mono-adapter-tqsge1ay.js");
       return new PiMonoAdapter;
     }
     case "codex": {
-      const { CodexAdapter } = await import("./codex-adapter-p4ptwar5.js");
+      const { CodexAdapter } = await import("./codex-adapter-n8ka66vf.js");
       return new CodexAdapter;
     }
     case "claude-managed": {
-      const { ClaudeManagedAdapter } = await import("./claude-managed-adapter-gt6pa35d.js");
+      const { ClaudeManagedAdapter } = await import("./claude-managed-adapter-cvbzj1h6.js");
       return new ClaudeManagedAdapter;
     }
     case "devin": {
@@ -266,27 +266,27 @@ async function createProviderAdapter(provider) {
       return new DevinAdapter;
     }
     case "opencode": {
-      const { OpencodeAdapter } = await import("./opencode-adapter-e56086m1.js");
+      const { OpencodeAdapter } = await import("./opencode-adapter-9tppvxar.js");
       return new OpencodeAdapter;
     }
     case "dsh": {
-      const { DshAdapter } = await import("./dsh-adapter-tvhc4k2d.js");
+      const { DshAdapter } = await import("./dsh-adapter-kpdnhjst.js");
       return new DshAdapter;
     }
     case "amp": {
-      const { AmpAdapter } = await import("./amp-adapter-z4qvhacj.js");
+      const { AmpAdapter } = await import("./amp-adapter-speb906t.js");
       return new AmpAdapter;
     }
     case "cursor": {
-      const { CursorAdapter } = await import("./cursor-adapter-yq5xgfcg.js");
+      const { CursorAdapter } = await import("./cursor-adapter-swr2k95y.js");
       return new CursorAdapter;
     }
     case "grok": {
-      const { GrokAdapter } = await import("./grok-adapter-39aha52t.js");
+      const { GrokAdapter } = await import("./grok-adapter-qtjz0whk.js");
       return new GrokAdapter;
     }
     case "acp": {
-      const { ACPAdapter } = await import("./acp-adapter-7g6bpwbk.js");
+      const { ACPAdapter } = await import("./acp-adapter-gr2fcyyj.js");
       return new ACPAdapter;
     }
     default:
@@ -1267,7 +1267,7 @@ var CREDENTIAL_PROVIDER_CHECKERS = {
   devin: (env) => checkDevinCredentials2(env),
   opencode: (env, opts) => checkOpencodeCredentials2(env, opts),
   pi: async (env, opts) => {
-    const { checkPiMonoCredentials, listPiOpencodeGoModelIds } = await import("./pi-mono-adapter-tzps8f38.js");
+    const { checkPiMonoCredentials, listPiOpencodeGoModelIds } = await import("./pi-mono-adapter-tqsge1ay.js");
     return {
       ...await checkPiMonoCredentials(env, opts),
       opencodeGoModels: listPiOpencodeGoModelIds()
@@ -1539,7 +1539,7 @@ async function validateProviderCredentials(provider, env = process.env, presence
             latency_ms: Date.now() - startedAt
           };
         }
-        const { liveTestCursorKey } = await import("./cursor-adapter-yq5xgfcg.js");
+        const { liveTestCursorKey } = await import("./cursor-adapter-swr2k95y.js");
         const result = await liveTestCursorKey(apiKey);
         return result.ok ? { ok: true, latency_ms: Date.now() - startedAt } : { ok: false, error: result.error, latency_ms: Date.now() - startedAt };
       }

package/dist/{cli-znvq0k3t.js → cli-s49hpn37.js}

@@ -52,7 +52,7 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-rh5smt8t.js";
+} from "./cli-mz9afxxf.js";
 import {
   runtimeCatalogModel,
   init_runtime_model_catalog
@@ -60,7 +60,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-22rmcjkg.js";
+} from "./cli-y561h5a9.js";
 import {
   isEnvFlagEnabled,
   isSessionSummarySkipped,

package/dist/{cli-xc65x52q.js → cli-s53vp709.js}

@@ -4,7 +4,7 @@ import {
   claimKv2,
   deleteKv2,
   init_db3
-} from "./cli-q9pzwxvk.js";
+} from "./cli-kxawjrxg.js";
 import {
   isEnvFlagEnabled,
   init_env_flag

package/dist/{cli-0jy85zz4.js → cli-svrj71pg.js}

@@ -4,7 +4,7 @@ import {
   CONTROLLER_COMMAND_TIMEOUT_MS,
   RuntimeHandleSchema,
   ControllerStatusResultSchema
-} from "./cli-xd4eqtr2.js";
+} from "./cli-6n8axjv1.js";
 import {
   getDbClient2,
   isRuntimePoolsEnabled,
@@ -21,17 +21,11 @@ import {
   upsertSwarmConfig2,
   getResolvedConfig2,
   init_db3
-} from "./cli-q9pzwxvk.js";
+} from "./cli-kxawjrxg.js";
 import {
-  runtimeStaleThresholdMinutes,
-  getRuntimeInstanceById,
-  insertProvisioningRuntime,
-  markRuntimeTerminated,
-  listRuntimeInstancesForAgent,
-  listRuntimeInstancesForPool,
   createWorkerTaskFollowUp,
   canClaim
-} from "./cli-kcsd1ez8.js";
+} from "./cli-aecdcr77.js";
 import {
   getRuntimeController2,
   getRuntimeControllerTarget2,
@@ -42,14 +36,22 @@ import {
   getPoolForAgent2,
   resolvePoolDelivery2,
   init_db
-} from "./cli-1dp1zj04.js";
+} from "./cli-vwn81jbs.js";
 import {
-  workflowEventBus2,
-  init_event_bus
-} from "./cli-dabehxhp.js";
+  runtimeStaleThresholdMinutes,
+  getRuntimeInstanceById,
+  insertProvisioningRuntime,
+  markRuntimeTerminated,
+  listRuntimeInstancesForAgent,
+  listRuntimeInstancesForPool
+} from "./cli-jjznk3f7.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-e8xyjvfc.js";
+import {
+  workflowEventBus2,
+  init_event_bus
+} from "./cli-dabehxhp.js";
 import {
   import_websocket
 } from "./cli-b2mz5mjc.js";
@@ -61,12 +63,12 @@ import {
 import {
   mintRuntimeToken,
   init_users
-} from "./cli-gwcf52gz.js";
+} from "./cli-e8jyq7d8.js";
 import {
   TERMINAL_TASK_STATUSES,
   isTerminalTaskStatus,
   init_types
-} from "./cli-rh5smt8t.js";
+} from "./cli-mz9afxxf.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -522,7 +524,7 @@ async function recoverSessions(runtimeId, reason) {
   }
   if (!sessions.length)
     return;
-  const { remediateTaskForDeadRuntime } = await import("./heartbeat-jfe9zfjr.js");
+  const { remediateTaskForDeadRuntime } = await import("./heartbeat-vtesda5d.js");
   for (const session of sessions) {
     try {
       const task = await getTaskById2(session.taskId);

package/dist/{cli-1dp1zj04.js → cli-vwn81jbs.js}

@@ -15,7 +15,7 @@ import {
   init_secret_registry,
   upsertSwarmConfig2,
   init_db3
-} from "./cli-q9pzwxvk.js";
+} from "./cli-kxawjrxg.js";
 import {
   createRuntimeProvider,
   init_runtime_providers
@@ -25,7 +25,7 @@ import {
   init_session_token_connections,
   insertSessionToken,
   init_users
-} from "./cli-gwcf52gz.js";
+} from "./cli-e8jyq7d8.js";
 import {
   RuntimeControllerCreateSchema,
   RuntimeControllerUpdateSchema,
@@ -33,7 +33,7 @@ import {
   RuntimePoolUpdateSchema,
   RuntimePoolCreateAgentSchema,
   init_types
-} from "./cli-rh5smt8t.js";
+} from "./cli-mz9afxxf.js";
 import {
   scrubSecrets,
   registerVolatileSecret,

package/dist/{cli-ajqhxtnz.js → cli-w1zwctj2.js}

@@ -31,7 +31,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-22rmcjkg.js";
+} from "./cli-y561h5a9.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getMcpBaseUrl,

package/dist/{cli-22rmcjkg.js → cli-y561h5a9.js}

@@ -7,7 +7,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@desplega.ai/agent-swarm",
-    version: "2.5.1",
+    version: "2.5.3",
     description: "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
     keywords: [
       "agent-swarm.dev",
@@ -120,6 +120,7 @@ var init_package = __esm(() => {
       "tsc:check": "bun check",
       "tsc:check:tsc": "bun tsc --noEmit",
       "check:db-boundary": "bash scripts/check-db-boundary.sh",
+      "check:codex-default-model": "bash scripts/check-codex-default-model.sh",
       "check:test-spawn-sync": "bash scripts/check-test-spawn-sync.sh",
       "check:dep-graph": "depcruise src packages/model-routing --config .dependency-cruiser.cjs",
       "check:api-key-boundary": "bash scripts/check-api-key-boundary.sh",
@@ -186,8 +187,8 @@ var init_package = __esm(() => {
       "@desplega/model-catalog": "workspace:*",
       "@desplega/model-routing": "workspace:*",
       "@faker-js/faker": "^10.4.0",
-      "@opencode/plugin": "2.1.3",
-      "@opencode/sdk": "2.1.3",
+      "@opencode/plugin": "2.1.4",
+      "@opencode/sdk": "2.1.4",
       "@oxlint/plugins": "1.78.0",
       "@types/bun": "latest",
       "dependency-cruiser": "^18.0.0",
@@ -207,8 +208,8 @@ var init_package = __esm(() => {
     dependencies: {
       "@agentclientprotocol/sdk": "2.0.1",
       "@ai-sdk/openai": "^3.0.41",
-      "@anthropic-ai/claude-agent-sdk": "0.3.308",
-      "@anthropic-ai/sdk": "^1.1.0",
+      "@anthropic-ai/claude-agent-sdk": "0.3.309",
+      "@anthropic-ai/sdk": "^1.2.0",
       "@asteasolutions/zod-to-openapi": "^8.0.0",
       "@aws-sdk/client-bedrock": "3.1048.0",
       "@chat-adapter/discord": "4.41.1",
@@ -225,7 +226,7 @@ var init_package = __esm(() => {
       "@jitl/quickjs-singlefile-mjs-release-sync": "0.32.0",
       "@linear/sdk": "^77.0.0",
       "@modelcontextprotocol/sdk": "1.32.1",
-      "@openai/codex": "0.163.0",
+      "@openai/codex": "0.164.0",
       "@openfort/openfort-node": "^0.9.1",
       "@opentelemetry/api": "^1.9.1",
       "@opentelemetry/api-logs": "^0.218.0",

package/dist/{cli-2jg61wab.js → cli-z21whrrg.js}

@@ -66,7 +66,7 @@ import {
   getStaleApprovalRequests2,
   upsertKv2,
   init_db3
-} from "./cli-q9pzwxvk.js";
+} from "./cli-kxawjrxg.js";
 import {
   poolTaskRunsOnHarness,
   isRuntimePoolWakeable,
@@ -76,10 +76,6 @@ import {
   extensionIdForAgent2,
   dispatchPre2,
   repointTrackerSyncBySwarmId,
-  runtimeStaleThresholdMinutes,
-  countActiveRuntimeInstancesForAgent,
-  agentsWithLiveRuntime,
-  expireStaleRuntimeInstances,
   cancelApprovalRequestAndRun,
   REBOOT_RETRY_PIN_TAG,
   getPinCandidateAgent,
@@ -91,29 +87,33 @@ import {
   createRerouteDecisionTask,
   createPoolStarvationDecisionTask,
   canClaim
-} from "./cli-kcsd1ez8.js";
+} from "./cli-aecdcr77.js";
+import {
+  runtimeStaleThresholdMinutes,
+  countActiveRuntimeInstancesForAgent,
+  agentsWithLiveRuntime,
+  expireStaleRuntimeInstances,
+  createApprovalFollowUpTask
+} from "./cli-jjznk3f7.js";
 import {
   listRuntimePools2,
   init_db
-} from "./cli-1dp1zj04.js";
-import {
-  createApprovalFollowUpTask
-} from "./cli-pyy4c9ch.js";
+} from "./cli-vwn81jbs.js";
 import {
   remediateStalledRuntime
-} from "./cli-0jy85zz4.js";
+} from "./cli-svrj71pg.js";
 import {
   runSavedScriptAsAgent
-} from "./cli-mq7kg1b1.js";
+} from "./cli-p9rafdrb.js";
 import {
   mintToken,
   init_users
-} from "./cli-gwcf52gz.js";
+} from "./cli-e8jyq7d8.js";
 import {
   TERMINAL_TASK_STATUSES,
   SUPERSEDED_WORKFLOW_TASK_REASON,
   init_types
-} from "./cli-rh5smt8t.js";
+} from "./cli-mz9afxxf.js";
 import {
   registerTemplate,
   init_registry,
@@ -128,7 +128,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-22rmcjkg.js";
+} from "./cli-y561h5a9.js";
 import {
   isEnvFlagEnabled,
   init_env_flag