@desplega.ai/agent-swarm 2.5.1 → 2.5.3

package/dist/{cli-kcsd1ez8.js → cli-aecdcr77.js}

@@ -111,6 +111,7 @@ import {
   cancelTask2,
   getRecentlyCancelledTasksForAgent2,
   updateTaskProgress2,
+  getRunningSubWorkflowSteps,
   getSettledChildRunParentSteps,
   init_workflow_runs,
   CHAT_SDK_ADAPTER_NAMES,
@@ -336,19 +337,19 @@ import {
   recordInlineScriptRun2,
   exports_db,
   init_db3
-} from "./cli-q9pzwxvk.js";
+} from "./cli-kxawjrxg.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-z2dv25mf.js";
+} from "./cli-99xgw26r.js";
 import {
   ensurePricingSeeded2,
   ensureRbacSeeded2,
   ensureModelProfilesSeeded2
-} from "./cli-v2g93k4v.js";
+} from "./cli-210xd1f4.js";
 import {
   loadModelsDevCache
-} from "./cli-9mm5ade4.js";
+} from "./cli-fsdprwrg.js";
 import {
   buildCatalogEntries,
   listModelCatalog,
@@ -358,12 +359,12 @@ import {
   loadModelsCatalog,
   requestModelCatalogRefresh2,
   startPricingRefreshLoop2
-} from "./cli-mz2ygeyq.js";
+} from "./cli-n45mr7zh.js";
 import {
   ampPinProviderError,
   ampPinCatalogError,
   ampModelError
-} from "./cli-jpxsrxcb.js";
+} from "./cli-9s05422w.js";
 import {
   notifyAutomationPreflightFailure,
   isNeedsSetupFailure,
@@ -373,6 +374,17 @@ import {
   schedulePreflightInput,
   recordSchedulePreflightFailure,
   BaseExecutor,
+  AGENT_MAX_TASKS_CONFIG_KEY,
+  resetAgentMaxTasksMirror,
+  upsertSwarmConfigWithPolicyMirror,
+  getRuntimeInstanceById,
+  markRuntimeTerminated,
+  touchRuntimeInstance,
+  markRuntimeInstanceOffline,
+  reconcileAgentStatusFromRuntimes,
+  ConfigQuestionSettingsSchema,
+  normalizeApprovalQuestions,
+  resolveSlackConversationId,
   postApprovalCancellationUpdates,
   createApprovalFollowUpTask,
   HumanInTheLoopExecutor,
@@ -399,6 +411,7 @@ import {
   startWorkflowExecution2,
   failRunOnUnreadableReplay,
   isWorkflowRunActive,
+  isStepExecuting,
   holdWorkflowRun,
   walkGraph,
   findReadyNodes,
@@ -415,7 +428,7 @@ import {
   definitionNodeIds,
   validateDefinition,
   applyDefinitionPatch
-} from "./cli-pyy4c9ch.js";
+} from "./cli-jjznk3f7.js";
 import {
   require_dist2,
   publicEndpointSsrfOptions,
@@ -446,7 +459,7 @@ import {
   MAX_SCRIPT_WALL_CLOCK_MS,
   DEFAULT_SCRIPT_RESOURCES,
   validateScriptImports,
-  runScript,
+  runScriptWithRunCredential,
   extractScriptSignature,
   extractArgsJsonSchema,
   getSavedScriptOwnerAgentId,
@@ -475,21 +488,25 @@ import {
   deleteApp,
   typecheckScript,
   parseSkillContent
-} from "./cli-mq7kg1b1.js";
+} from "./cli-p9rafdrb.js";
 import {
   buildAuthorizationUrl,
   onAuthorizationRefreshed,
   ensureAuthorizationTokenOrThrow,
   ensureToken,
   ensureTokenOrThrow
-} from "./cli-rngde2jv.js";
+} from "./cli-egjggehm.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
   terminateProcessGroup
 } from "./cli-3ggwdtb0.js";
+import {
+  isMultiRuntimeEnabled
+} from "./cli-e8xyjvfc.js";
 import {
   noteSlackInboundSideEffect,
+  terminalReactionEvent,
   withSpan2,
   getTaskLink,
   getTaskUrl,
@@ -512,14 +529,14 @@ import {
   getSlackApp2,
   startSlackApp2,
   stopSlackApp2
-} from "./cli-e9btqw4y.js";
+} from "./cli-ce0ak9ms.js";
 import {
   slackCode,
   slackMissingScopeMessage,
   withAutoJoin,
   externalChannelToolError2,
   getChannelBlockReason2
-} from "./cli-xc65x52q.js";
+} from "./cli-s53vp709.js";
 import {
   workflowEventBus2,
   init_event_bus
@@ -541,7 +558,7 @@ import {
   recoverResolvedWaitState2,
   resumeFromChildRun2,
   initWaitBusSubscriptions2
-} from "./cli-nj12tn2c.js";
+} from "./cli-e2ar4bp1.js";
 import {
   duplicateGuardedQueryKey,
   parseQueryParams,
@@ -568,10 +585,7 @@ import {
   isPublicRoute,
   findRoute,
   route
-} from "./cli-y3zyaee5.js";
-import {
-  isMultiRuntimeEnabled
-} from "./cli-e8xyjvfc.js";
+} from "./cli-1fc85mvt.js";
 import {
   FilesError,
   providerPath,
@@ -582,7 +596,7 @@ import {
 import {
   getRuntimePool2,
   init_db
-} from "./cli-1dp1zj04.js";
+} from "./cli-vwn81jbs.js";
 import {
   getMemoryRaterNames,
   REFERENCES_SOURCE_MAX_LENGTH,
@@ -619,11 +633,10 @@ import {
   linkIdentity,
   unlinkIdentity,
   resolveUserByToken,
-  revokeRuntimeTokensForRuntime,
   resolveSessionToken,
   fingerprintApiKey,
   init_users
-} from "./cli-gwcf52gz.js";
+} from "./cli-e8jyq7d8.js";
 import {
   isRbacEnabled,
   decideAdmission,
@@ -632,7 +645,7 @@ import {
   init_elevated_agents,
   can,
   init_rbac
-} from "./cli-ba8ne1es.js";
+} from "./cli-4rvr7zfx.js";
 import {
   normalizeAssetKey,
   parseAssetKey,
@@ -692,7 +705,7 @@ import {
   KvNamespaceSchema,
   KvKeySchema,
   init_types
-} from "./cli-rh5smt8t.js";
+} from "./cli-mz9afxxf.js";
 import {
   generateDefaultClaudeMd2,
   generateDefaultSoulMd2,
@@ -761,7 +774,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-22rmcjkg.js";
+} from "./cli-y561h5a9.js";
 import {
   realtimeBus,
   init_bus
@@ -20138,6 +20151,7 @@ async function recoverIncompleteRuns(registry) {
     }
   }
   recovered += await recoverForeachFanouts(registry);
+  recovered += await recoverOrphanedSubWorkflowSteps(registry);
   if (recovered > 0) {
     console.log(`[workflows] Recovered ${recovered} incomplete run(s)`);
   }
@@ -20153,6 +20167,10 @@ async function recoverRunningRuns(registry) {
       const run = await getWorkflowRun2(runId);
       if (!run || run.status !== "running")
         continue;
+      if (run.parentStepId && run.context === undefined) {
+        await failRunningRun(runId, "Child workflow run lost its initial context in a restart");
+        continue;
+      }
       const workflow = await getWorkflow2(run.workflowId);
       if (!workflow)
         continue;
@@ -20179,6 +20197,43 @@ async function recoverRunningRuns(registry) {
   }
   return recovered;
 }
+async function failRunningRun(runId, error) {
+  await getDbClient2().transaction(async () => {
+    const run = await getWorkflowRun2(runId);
+    if (run?.status !== "running")
+      return;
+    await updateWorkflowRun2(runId, {
+      status: "failed",
+      error,
+      finishedAt: new Date().toISOString()
+    });
+  });
+}
+async function recoverOrphanedSubWorkflowSteps(registry) {
+  let recovered = 0;
+  for (const row of await getRunningSubWorkflowSteps()) {
+    try {
+      if (isWorkflowRunActive(row.runId) || isStepExecuting(row.stepId))
+        continue;
+      const run = await getWorkflowRun2(row.runId);
+      if (!run || run.status !== "running" && run.status !== "waiting")
+        continue;
+      const workflow = await getWorkflow2(run.workflowId);
+      const node = workflow?.definition.nodes.find((n) => n.id === row.nodeId);
+      if (!workflow || !node)
+        continue;
+      if (isWorkflowRunActive(row.runId))
+        continue;
+      await walkGraph(workflow.definition, row.runId, run.context ?? {}, [node], registry, workflow.id, getSecretInputKeys(workflow.input));
+      recovered++;
+    } catch (err) {
+      if (await failRunOnUnreadableReplay(row.runId, err))
+        continue;
+      console.error(`[workflows] Failed to recover sub-workflow step ${row.stepId}:`, err);
+    }
+  }
+  return recovered;
+}
 function retryPendingNodeIds(steps) {
   const nodeIds = new Set;
   for (const step of steps) {
@@ -20407,6 +20462,7 @@ function startRetryPoller(registry, intervalMs = 5000) {
           release = holdWorkflowRun(run.id);
           if (!await claimRetry(run.id, step.id))
             continue;
+          const fence = { retryCount: step.retryCount };
           const {
             ctx,
             inputCtx,
@@ -20414,7 +20470,7 @@ function startRetryPoller(registry, intervalMs = 5000) {
             scriptBodyUnresolved
           } = await rebuildNodeExecutionInput(workflow.definition, run, node, registry);
           if (scriptBodyUnresolved && scriptBodyUnresolved.length > 0) {
-            await checkpointStepFailure(run.id, step.id, scriptBodyInterpolationError(node.id, scriptBodyUnresolved), step.retryCount);
+            await checkpointStepFailure(run.id, step.id, scriptBodyInterpolationError(node.id, scriptBodyUnresolved), step.retryCount, undefined, { fence });
             continue;
           }
           const executor = registry.get(node.type);
@@ -20434,8 +20490,8 @@ function startRetryPoller(registry, intervalMs = 5000) {
               meta
             });
             if (result.status === "failed") {
-              const retryPolicy = node.retry || executor.retryPolicy;
-              await checkpointStepFailure(run.id, step.id, result.error || "Retry failed", step.retryCount, retryPolicy);
+              const retryPolicy = result.retryable === false ? undefined : node.retry || executor.retryPolicy;
+              await checkpointStepFailure(run.id, step.id, result.error || "Retry failed", step.retryCount, retryPolicy, { fence, output: result.output });
             } else if ("async" in result && result.async && result.waitFor === FOREACH_ITEMS_WAIT_FOR) {
               const drive = await parkAndDriveForeach({
                 runId: run.id,
@@ -20455,12 +20511,16 @@ function startRetryPoller(registry, intervalMs = 5000) {
               const waiting = await checkpointStepWaiting(run.id, step.id, ctx);
               if (!waiting)
                 continue;
+              if (result.waitFor === "workflow.child.finished") {
+                const { resumeFromChildRun } = await import("./resume-2dvq348g.js");
+                await resumeFromChildRun(step.id, registry);
+              }
             } else {
               let validationPassed;
               if (node.validation) {
                 const validationResult = await runStepValidation(registry, node, result.output, ctx, meta);
                 if (validationResult.outcome === "halt") {
-                  await checkpointStepFailure(run.id, step.id, "Validation failed (mustPass)", step.retryCount);
+                  await checkpointStepFailure(run.id, step.id, "Validation failed (mustPass)", step.retryCount, undefined, { fence });
                   continue;
                 }
                 if (validationResult.outcome === "retry") {
@@ -20470,13 +20530,15 @@ function startRetryPoller(registry, intervalMs = 5000) {
                     ctx[historyKey] = [...existing, validationResult.retryContext];
                   }
                   const retryPolicy = node.validation.retry || node.retry;
-                  await checkpointStepFailure(run.id, step.id, "Validation failed, retrying", step.retryCount, retryPolicy);
+                  await checkpointStepFailure(run.id, step.id, "Validation failed, retrying", step.retryCount, retryPolicy, { fence });
                   continue;
                 }
                 validationPassed = validationResult.passed;
               }
               result.nextPort = resolveValidationPort(node.next, result.nextPort, validationPassed);
-              await checkpointStep(run.id, step.id, step.nodeId, result, ctx);
+              if (!await checkpointStep(run.id, step.id, step.nodeId, result, ctx, { fence })) {
+                continue;
+              }
               const port = result.nextPort || "default";
               const successors = getSuccessors(workflow.definition, step.nodeId, port);
               if (successors.length > 0) {
@@ -20490,7 +20552,9 @@ function startRetryPoller(registry, intervalMs = 5000) {
               continue;
             const errorMsg = err instanceof Error ? err.message : String(err);
             const retryPolicy = node.retry || executor.retryPolicy;
-            await checkpointStepFailure(run.id, step.id, errorMsg, step.retryCount, retryPolicy);
+            await checkpointStepFailure(run.id, step.id, errorMsg, step.retryCount, retryPolicy, {
+              fence
+            });
           }
         } catch (err) {
           if (await failRunOnUnreadableReplay(step.runId, err, step.id))
@@ -21119,7 +21183,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp } = await import("./app-nndcvftq.js");
+        const { getSlackApp } = await import("./app-ag29n14f.js");
         const app = getSlackApp();
         if (!app) {
           return {
@@ -21245,7 +21309,7 @@ var RawLlmOutputSchema = object2({
 async function executeRawLlm(config) {
   let modelName = config.model ?? "google/gemini-3-flash-preview";
   try {
-    const { createOpenAI } = await import("./index-6srwvd5b.js");
+    const { createOpenAI } = await import("./index-p4xfz37z.js");
     const llmConfig = await resolveWorkflowLlmConfig(config.model);
     modelName = llmConfig.model;
     const provider = createOpenAI({
@@ -21255,7 +21319,7 @@ async function executeRawLlm(config) {
     });
     const model = provider(llmConfig.model);
     if (config.schema) {
-      const { generateObject, jsonSchema } = await import("./index-cbxkmfc5.js");
+      const { generateObject, jsonSchema } = await import("./index-9pn1pfkf.js");
       const { object } = await generateObject({
         model,
         schema: jsonSchema(config.schema),
@@ -21269,7 +21333,7 @@ async function executeRawLlm(config) {
         output: { result: object, model: modelName }
       };
     }
-    const { generateText } = await import("./index-cbxkmfc5.js");
+    const { generateText } = await import("./index-9pn1pfkf.js");
     const { text } = await generateText({
       model,
       prompt: config.prompt
@@ -21538,7 +21602,7 @@ class SwarmScriptExecutor extends BaseExecutor {
     const credentials = await buildScriptCredentialBindingsWithFailures({
       agentId: agentId ?? undefined
     });
-    const output = await runScript({
+    const output = await runScriptWithRunCredential({
       source: resolved.source,
       args: config.args,
       fsMode: "none",
@@ -21709,8 +21773,8 @@ class ValidateExecutor extends BaseExecutor {
     const interpolatedPrompt = this.deps.interpolate(prompt, context);
     const outputStr = typeof targetOutput === "string" ? targetOutput : JSON.stringify(targetOutput);
     try {
-      const { createOpenAI } = await import("./index-6srwvd5b.js");
-      const { generateObject, jsonSchema } = await import("./index-cbxkmfc5.js");
+      const { createOpenAI } = await import("./index-p4xfz37z.js");
+      const { generateObject, jsonSchema } = await import("./index-9pn1pfkf.js");
       const llmConfig = await resolveWorkflowLlmConfig();
       const provider = createOpenAI({
         baseURL: llmConfig.baseURL,
@@ -21950,6 +22014,27 @@ init_event_bus();
 init_db3();
 init_steering();
 init_context_key();
+async function answersInChat(task) {
+  if (task.source === "chat")
+    return true;
+  if (task.source === "system" && task.taskType === "follow-up")
+    return true;
+  if (task.source === "schedule" && task.taskType === "deferred")
+    return true;
+  if (task.source === "system" && task.taskType === "resume" && task.agentId) {
+    return (await getAgentById2(task.agentId))?.isLead === true;
+  }
+  return false;
+}
+async function scheduleTaskContextKey(schedule) {
+  if (schedule.taskType === "deferred" && schedule.parentTaskId) {
+    const parent = await getTaskById2(schedule.parentTaskId);
+    if (parent?.contextKey && chatThreadOfContextKey(parent.contextKey) && parent.agentId && schedule.targetAgentId === parent.agentId && schedule.createdByAgentId === parent.agentId && await answersInChat(parent)) {
+      return parent.contextKey;
+    }
+  }
+  return scheduleContextKey({ scheduleId: schedule.id });
+}
 async function prepareStandaloneScheduleTask(schedule, extraTags = []) {
   if (!schedule.taskTemplate) {
     throw new Error(`Schedule "${schedule.name}" has no taskTemplate (targetType=agent-task)`);
@@ -21968,7 +22053,7 @@ async function prepareStandaloneScheduleTask(schedule, extraTags = []) {
     scheduleId: schedule.id,
     source: "schedule",
     requestedByUserId: schedule.createdBy,
-    contextKey: scheduleContextKey({ scheduleId: schedule.id }),
+    contextKey: await scheduleTaskContextKey(schedule),
     parentTaskId: schedule.parentTaskId,
     inheritParentFollowUpConfig: schedule.taskType === "deferred" && !!schedule.parentTaskId
   }, { origin: "schedule" });
@@ -22207,7 +22292,7 @@ async function executeScheduleScript(schedule) {
   let output;
   try {
     const credentials = await buildScriptCredentialBindingsWithFailures({ agentId });
-    output = await runScript({
+    output = await runScriptWithRunCredential({
       source: script.source,
       args,
       fsMode: "none",
@@ -24482,7 +24567,7 @@ function setPreloadedTools(server, names) {
 async function applyPreToolCall(name, args, requestInfo, inputSchema) {
   if (requestInfo.callOrigin !== "mcp")
     return { args };
-  const dispatcher = await import("./dispatcher-606ydx5v.js");
+  const dispatcher = await import("./dispatcher-nwf9ss0q.js");
   const result = await dispatcher.dispatchPre("pre.tool.call", { tool: name, args, requestInfo }, inputSchema ? {
     validateModify: async (data) => {
       const schema = normalizeObjectSchema(inputSchema) ?? inputSchema;
@@ -28587,240 +28672,6 @@ function teardownAzureDevOpsOutbound() {
 // src/http/core.ts
 init_db3();
 
-// src/be/multi-runtime.ts
-init_secret_scrubber();
-init_db3();
-init_users();
-var AGENT_MAX_TASKS_CONFIG_KEY = "AGENT_MAX_TASKS";
-function parseAgentMaxTasksValue(raw) {
-  const str = raw.trim();
-  if (!/^\d+$/.test(str))
-    return null;
-  const value = Number(str);
-  return value >= 1 && value <= 100 ? value : null;
-}
-function defaultMaxTasksForAgent(agent) {
-  return agent.isLead ? 2 : 1;
-}
-async function getAgentMaxTasksConfig(agentId) {
-  return (await getSwarmConfigs2({ scope: "agent", scopeId: agentId, key: AGENT_MAX_TASKS_CONFIG_KEY }))[0] ?? null;
-}
-async function reconcileAgentMaxTasksPolicy(agentId) {
-  const agent = await getAgentById2(agentId);
-  if (!agent)
-    return;
-  const existing = await getAgentMaxTasksConfig(agentId);
-  if (existing) {
-    const authoritative = parseAgentMaxTasksValue(existing.value);
-    if (authoritative !== null && authoritative !== (agent.maxTasks ?? 1)) {
-      await updateAgentMaxTasks2(agentId, authoritative);
-    }
-    return;
-  }
-  await upsertSwarmConfig2({
-    scope: "agent",
-    scopeId: agentId,
-    key: AGENT_MAX_TASKS_CONFIG_KEY,
-    value: String(agent.maxTasks ?? defaultMaxTasksForAgent(agent)),
-    description: "Logical agent max-tasks policy (seeded from agents.maxTasks)"
-  });
-}
-async function resetAgentMaxTasksMirror(agentId) {
-  const agent = await getAgentById2(agentId);
-  if (!agent)
-    return;
-  await updateAgentMaxTasks2(agentId, defaultMaxTasksForAgent(agent));
-}
-async function upsertSwarmConfigWithPolicyMirror(data) {
-  const scopeId = data.scope === "agent" ? data.scopeId : null;
-  if (!scopeId || data.key !== AGENT_MAX_TASKS_CONFIG_KEY) {
-    return upsertSwarmConfig2(data);
-  }
-  return await getDbClient2().transaction(async () => {
-    const row = await upsertSwarmConfig2(data);
-    const value = parseAgentMaxTasksValue(data.value);
-    if (value !== null)
-      await updateAgentMaxTasks2(scopeId, value);
-    return row;
-  });
-}
-function rowToRuntimeInstance(row) {
-  let metadata = null;
-  if (row.metadata) {
-    try {
-      metadata = JSON.parse(row.metadata);
-    } catch {
-      metadata = null;
-    }
-  }
-  return {
-    id: row.id,
-    agentId: row.agent_id,
-    poolId: row.pool_id ?? null,
-    controllerId: row.controller_id ?? null,
-    externalHandle: row.external_handle ? JSON.parse(row.external_handle) : null,
-    provisionAttempts: row.provision_attempts ?? 0,
-    provisionError: row.provision_error ?? null,
-    provisionRequestedAt: row.provision_requested_at ?? null,
-    draining: row.draining === 1,
-    idleSince: row.idle_since ?? null,
-    leaseExpiresAt: row.lease_expires_at ?? null,
-    taskId: row.task_id ?? null,
-    status: row.status,
-    reportedSlots: row.reported_slots,
-    credentialReady: row.credential_ready === null ? null : row.credential_ready === 1,
-    metadata,
-    lastSeenAt: row.last_seen_at,
-    createdAt: row.created_at,
-    updatedAt: row.updated_at
-  };
-}
-function runtimeStaleThresholdMinutes() {
-  return Number(process.env.RUNTIME_STALE_THRESHOLD_MIN) || 5;
-}
-function runtimeLivenessCutoff() {
-  return new Date(Date.now() - runtimeStaleThresholdMinutes() * 60 * 1000).toISOString();
-}
-async function upsertRuntimeInstance(instance) {
-  const metadataJson = instance.metadata ? JSON.stringify(instance.metadata) : null;
-  const row = await getDbClient2().transaction(async (tx) => {
-    const provisioning = await tx.get("SELECT id FROM runtime_instances WHERE id = ? AND status = 'provisioning' AND agent_id = ?", [instance.id, instance.agentId]);
-    const row = await tx.get(`INSERT INTO runtime_instances (id, agent_id, status, reported_slots, metadata)
-     VALUES (?, ?, 'active', ?, ?)
-     ON CONFLICT(id) DO UPDATE SET
-       status = 'active',
-       reported_slots = excluded.reported_slots,
-       metadata = COALESCE(excluded.metadata, runtime_instances.metadata),
-       last_seen_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now'),
-       updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
-     WHERE runtime_instances.agent_id = excluded.agent_id
-     RETURNING *`, [instance.id, instance.agentId, instance.reportedSlots, metadataJson]);
-    if (row?.pool_id && provisioning) {
-      await tx.run("UPDATE agents SET runtime_provision_attempts = 0, runtime_provision_retry_at = NULL WHERE id = ?", [row.agent_id]);
-      await tx.run("UPDATE runtime_pools SET consecutive_failures = 0, circuit_open_until = NULL WHERE id = ?", [row.pool_id]);
-    }
-    return row;
-  });
-  return row ? rowToRuntimeInstance(row) : null;
-}
-async function getRuntimeInstanceById(id) {
-  const row = await getDbClient2().get("SELECT * FROM runtime_instances WHERE id = ?", [id]);
-  return row ? rowToRuntimeInstance(row) : null;
-}
-async function insertProvisioningRuntime(instance) {
-  const row = await getDbClient2().get(`INSERT INTO runtime_instances (id, agent_id, pool_id, controller_id, status,
-       reported_slots, provision_requested_at)
-     VALUES (?, ?, ?, ?, 'provisioning', ?, ?) RETURNING *`, [
-    instance.id,
-    instance.agentId,
-    instance.poolId,
-    instance.controllerId,
-    instance.reportedSlots ?? 1,
-    new Date().toISOString()
-  ]);
-  return rowToRuntimeInstance(row);
-}
-async function markRuntimeTerminated(id, reason) {
-  await getDbClient2().transaction(async () => {
-    const runtime = await getRuntimeInstanceById(id);
-    if (!runtime)
-      return;
-    await markRuntimeInstanceOffline(id, runtime.agentId);
-    if (runtime.status === "provisioning") {
-      await getDbClient2().run("UPDATE runtime_instances SET provision_error = ? WHERE id = ?", [
-        scrubSecrets(reason),
-        id
-      ]);
-    }
-    await reconcileAgentStatusFromRuntimes(runtime.agentId);
-    await revokeRuntimeTokensForRuntime(id);
-  });
-}
-async function touchRuntimeInstance(id, agentId) {
-  const result = await getDbClient2().run(`UPDATE runtime_instances
-     SET last_seen_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now'),
-         updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
-     WHERE id = ? AND agent_id = ? AND status = 'active' AND last_seen_at >= ?`, [id, agentId, runtimeLivenessCutoff()]);
-  return result.changes > 0;
-}
-async function markRuntimeInstanceOffline(id, agentId) {
-  const row = await getDbClient2().get(`UPDATE runtime_instances
-     SET status = 'offline', updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
-     WHERE id = ? AND agent_id = ? RETURNING *`, [id, agentId]);
-  return row ? rowToRuntimeInstance(row) : null;
-}
-async function countActiveRuntimeInstancesForAgent(agentId) {
-  const result = await getDbClient2().get(`SELECT COUNT(*) as count FROM runtime_instances
-     WHERE agent_id = ? AND status = 'active' AND last_seen_at >= ?`, [agentId, runtimeLivenessCutoff()]);
-  return result?.count ?? 0;
-}
-async function listRuntimeInstancesForAgent(agentId) {
-  const rows = await getDbClient2().query(`SELECT *, (status = 'active' AND last_seen_at >= ?) AS is_live
-     FROM runtime_instances
-     WHERE agent_id = ?
-     ORDER BY created_at ASC, id ASC`, [runtimeLivenessCutoff(), agentId]);
-  return rows.map((row) => ({ ...rowToRuntimeInstance(row), isLive: row.is_live === 1 }));
-}
-async function setRuntimeCredentialReady(id, agentId, ready) {
-  const result = await getDbClient2().run(`UPDATE runtime_instances
-     SET credential_ready = ?, updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
-     WHERE id = ? AND agent_id = ? AND status = 'active' AND last_seen_at >= ?`, [ready ? 1 : 0, id, agentId, runtimeLivenessCutoff()]);
-  return result.changes > 0;
-}
-async function hasReadyLiveRuntime(agentId) {
-  const row = await getDbClient2().get(`SELECT COUNT(*) c FROM runtime_instances
-     WHERE agent_id = ? AND status = 'active' AND last_seen_at >= ?
-       AND (credential_ready IS NULL OR credential_ready = 1)`, [agentId, runtimeLivenessCutoff()]);
-  return (row?.c ?? 0) > 0;
-}
-async function reconcileAgentStatusFromRuntimes(agentId) {
-  await getDbClient2().transaction(async () => {
-    const agent = await getAgentById2(agentId);
-    if (!agent)
-      return;
-    if (await countActiveRuntimeInstancesForAgent(agentId) === 0) {
-      if (agent.status !== "offline")
-        await updateAgentStatus2(agentId, "offline");
-      return;
-    }
-    if (!await hasReadyLiveRuntime(agentId)) {
-      if (agent.status !== "waiting_for_credentials") {
-        await updateAgentStatus2(agentId, "waiting_for_credentials");
-      }
-      return;
-    }
-    const next = await getActiveTaskCount2(agentId) > 0 ? "busy" : "idle";
-    if (agent.status !== next)
-      await updateAgentStatus2(agentId, next);
-  });
-}
-async function agentsWithLiveRuntime() {
-  const rows = await getDbClient2().query(`SELECT DISTINCT agent_id FROM runtime_instances
-     WHERE status = 'active' AND last_seen_at >= ?`, [runtimeLivenessCutoff()]);
-  return new Set(rows.map((r) => r.agent_id));
-}
-async function expireStaleRuntimeInstances() {
-  if (!isMultiRuntimeEnabled()) {
-    return { expired: 0, agentsOffline: 0, pruned: 0 };
-  }
-  return await getDbClient2().transaction(async (tx) => {
-    const cutoff = runtimeLivenessCutoff();
-    const stale = await tx.query(`SELECT id, agent_id FROM runtime_instances
-       WHERE status = 'active' AND last_seen_at < ? AND pool_id IS NULL`, [cutoff]);
-    const pruned = (await tx.run("DELETE FROM runtime_instances WHERE last_seen_at < ? AND status != 'provisioning' AND (pool_id IS NULL OR status = 'offline')", [cutoff])).changes;
-    let agentsOffline = 0;
-    for (const agentId of new Set(stale.map((r) => r.agent_id))) {
-      await reconcileAgentStatusFromRuntimes(agentId);
-      if ((await getAgentById2(agentId))?.status === "offline")
-        agentsOffline++;
-    }
-    return { expired: stale.length, agentsOffline, pruned };
-  });
-}
-async function listRuntimeInstancesForPool(poolId) {
-  return (await getDbClient2().query("SELECT * FROM runtime_instances WHERE pool_id = ? ORDER BY created_at", [poolId])).map(rowToRuntimeInstance);
-}
-
 // src/be/rbac-audit.ts
 init_env_flag();
 init_db3();
@@ -32175,6 +32026,14 @@ function helpText() {
   return ["Commands:", ...CHAT_COMMANDS.map((c) => `/${c.command}: ${c.description}`)].join(`
 `);
 }
+function welcomeText() {
+  return [
+    "Hi! Send a message here (in a group, mention me) and the swarm picks it up. Each answer arrives as a reply to your message.",
+    "",
+    helpText()
+  ].join(`
+`);
+}
 function shortId(task) {
   return task.id.slice(0, 8);
 }
@@ -32220,6 +32079,8 @@ async function runChatCommand(command, threadId, requestedBy) {
   const name = command.replace(/^\//, "").toLowerCase();
   if (name === "help")
     return helpText();
+  if (name === "start")
+    return welcomeText();
   if (!CHAT_COMMANDS.some((c) => c.command === name)) {
     return `Unknown command /${name}.
 ${helpText()}`;
@@ -32931,12 +32792,13 @@ function escapeTelegramHashLines(markdown) {
   }).join(`
 `);
 }
-async function postChunks(adapter, target, text) {
+async function postChunks(adapter, target, parts, replyFirst) {
   const messageIds = [];
   let threadId;
-  for (const chunk of splitChatMessage(text, chatMessageLimit(adapter))) {
-    const markdown = adapter === "telegram" ? escapeTelegramHashLines(chunk) : chunk;
-    const sent = await target.post({ markdown });
+  const limit = chatMessageLimit(adapter);
+  for (const chunk of parts.flatMap((part) => splitChatMessage(part, limit))) {
+    const message = { markdown: adapter === "telegram" ? escapeTelegramHashLines(chunk) : chunk };
+    const sent = replyFirst && messageIds.length === 0 ? await replyFirst(message) : await target.post(message);
     messageIds.push(sent.id);
     threadId ??= sent.threadId;
   }
@@ -33066,13 +32928,17 @@ async function postChatMessage(args) {
   const chat = getChatInstance(args.adapter);
   if (!chat)
     throw new ChatAdapterUnavailableError(args.adapter);
-  const text = scrubSecrets(args.text);
+  const parts = (typeof args.text === "string" ? [args.text] : args.text).map(scrubSecrets);
+  const text = parts.join(`
+
+`);
   let result;
   let target;
   if (args.threadId) {
     const thread = chat.thread(args.threadId);
     target = thread;
-    const sent = await postChunks(args.adapter, thread, text);
+    const replyTo = args.replyToMessageId;
+    const sent = await postChunks(args.adapter, thread, parts, replyTo && thread.adapter.reply ? (message) => thread.reply(replyTo, message) : undefined);
     result = {
       adapter: args.adapter,
       threadId: thread.id,
@@ -33083,7 +32949,7 @@ async function postChatMessage(args) {
   } else if (args.channelId) {
     const channel = chat.channel(args.channelId);
     target = channel;
-    const sent = await postChunks(args.adapter, channel, text);
+    const sent = await postChunks(args.adapter, channel, parts);
     result = {
       adapter: args.adapter,
       threadId: sent.threadId ?? channel.id,
@@ -33100,7 +32966,7 @@ async function postChatMessage(args) {
     result.unsentFiles = sent.unsent;
     if (sent.unsent.length > 0) {
       const note = formatUnsentFilesNote(sent.unsent);
-      const noted = await postChunks(args.adapter, target, scrubSecrets(note));
+      const noted = await postChunks(args.adapter, target, [scrubSecrets(note)]);
       result.messageIds.push(...noted.messageIds);
     }
   }
@@ -33115,6 +32981,10 @@ async function postChatMessage(args) {
   return result;
 }
 
+// src/integrations/chat-sdk/reactions.ts
+init_db3();
+init_secret_scrubber();
+
 // src/integrations/chat-sdk/router.ts
 init_db3();
 
@@ -33242,6 +33112,63 @@ async function routeChatMessage(text, ctx) {
   return null;
 }
 
+// src/integrations/chat-sdk/reactions.ts
+var TELEGRAM_REACTIONS = {
+  accepted: "\uD83D\uDC40",
+  buffered: "\uD83D\uDC40",
+  now: "⚡",
+  steered: "✍",
+  completed: "\uD83D\uDC4D",
+  failed: "\uD83D\uDC4E"
+};
+var CHAT_REACTIONS = {
+  telegram: TELEGRAM_REACTIONS
+};
+function chatAdapterReacts(adapter) {
+  return adapter in CHAT_REACTIONS;
+}
+async function setChatMessageReaction(adapter, threadId, messageId, event) {
+  const emoji = CHAT_REACTIONS[adapter]?.[event];
+  if (!emoji)
+    return;
+  try {
+    const target = getChatInstance(adapter)?.getAdapter(adapter);
+    if (!target)
+      return;
+    assertTrustedChatTarget(threadId);
+    await target.addReaction(threadId, messageId, emoji);
+  } catch (error) {
+    console.warn(scrubSecrets(`[chat-sdk] Could not set the ${event} reaction on ${messageId} in ${threadId}: ${errorMessage(error)}`));
+  }
+}
+async function clearChatMessageReactions(adapter, threadId, messageIds) {
+  if (!chatAdapterReacts(adapter) || messageIds.length === 0)
+    return;
+  const target = getChatInstance(adapter)?.getAdapter(adapter);
+  if (!target)
+    return;
+  for (const messageId of messageIds) {
+    try {
+      await target.removeReaction(threadId, messageId, TELEGRAM_REACTIONS.accepted);
+    } catch (error) {
+      console.warn(scrubSecrets(`[chat-sdk] Could not clear the reaction on ${messageId} in ${threadId}: ${errorMessage(error)}`));
+    }
+  }
+}
+var CHAT_CHANNEL_SETTINGS_NAMESPACE = "integrations:chat:channel-settings";
+async function wantsChatTextAck(adapter, channelId) {
+  if (!chatAdapterReacts(adapter))
+    return true;
+  try {
+    const row = await getKv2(CHAT_CHANNEL_SETTINGS_NAMESPACE, chatChannelKey(adapter, channelId));
+    const settings = row?.value;
+    return typeof settings === "object" && settings !== null && settings.textAcks === true;
+  } catch (error) {
+    console.warn(`[chat-sdk] Could not read the channel settings: ${errorMessage(error)}`);
+    return false;
+  }
+}
+
 // src/integrations/chat-sdk/steering.ts
 init_db3();
 init_steering();
@@ -33435,9 +33362,12 @@ async function handleChatInbound(thread, message, kind) {
     });
     if (steering) {
       console.log(`[chat-sdk] ${adapter} message steered task ${steering.task.id} (${steering.result.outcome})`);
+      await setChatMessageReaction(adapter, thread.id, message.id, "steered");
+      if (!await wantsChatTextAck(adapter, thread.channelId))
+        return;
       try {
         const ack = formatChatSteeringAck(steering.result);
-        const sent = await thread.post({ markdown: ack });
+        const sent = thread.adapter.reply ? await thread.reply(message, { markdown: ack }) : await thread.post({ markdown: ack });
         emitChatMessageSent({
           adapter,
           channelId: thread.channelId,
@@ -33454,6 +33384,7 @@ async function handleChatInbound(thread, message, kind) {
     }
   }
   if (text || attachments.length > 0) {
+    const acknowledge = kind !== "subscribed" || isDirectMessage || mentioned || facts.replyToBot;
     bufferChatMessage(thread.id, {
       messageId: message.id,
       channelId: thread.channelId,
@@ -33463,11 +33394,14 @@ async function handleChatInbound(thread, message, kind) {
       botMentioned: mentioned || facts.replyToBot,
       isDirectMessage,
       addressed,
+      reacted: acknowledge && chatAdapterReacts(adapter),
       facts,
       attachments
     });
-    if (kind !== "subscribed")
+    if (acknowledge) {
       startTypingKeepalive(adapter, thread.id);
+      await setChatMessageReaction(adapter, thread.id, message.id, immediate ? "now" : "accepted");
+    }
   }
   if (immediate)
     await instantFlushChat(thread.id);
@@ -33585,6 +33519,8 @@ async function flushChatThread(threadId, items, immediate) {
     const isDirectMessage = items.some((item) => item.isDirectMessage);
     const requester = items.find((item) => item.addressed !== "none") ?? first;
     const otherSenders = new Set(items.map((item) => item.userId)).size - 1;
+    const answered = items.at(-1) ?? first;
+    const reacted = items.filter((item) => item.reacted).map((item) => item.messageId);
     const resetAt = await getChatThreadResetAt(threadId);
     const previousTask = await getLatestTaskByContextKey2(contextKey);
     const mostRecentTask = previousTask && resetAt && new Date(previousTask.createdAt).getTime() <= resetAt.getTime() ? null : previousTask;
@@ -33610,6 +33546,7 @@ async function flushChatThread(threadId, items, immediate) {
     if (routeResult.action === "block") {
       console.info(`[chat-sdk] Extension blocked routing for ${threadId}:`, scrubSecrets(routeResult.reason));
       stopTypingKeepalive(threadId);
+      await clearChatMessageReactions(adapter, threadId, reacted);
       return;
     }
     let target = null;
@@ -33625,10 +33562,12 @@ async function flushChatThread(threadId, items, immediate) {
     if (!target) {
       console.log(`[chat-sdk] ${threadId}: message not addressed to the swarm, ignored`);
       stopTypingKeepalive(threadId);
+      await clearChatMessageReactions(adapter, threadId, reacted);
       return;
     }
     if (target.kind === "workflow") {
       stopTypingKeepalive(threadId);
+      await clearChatMessageReactions(adapter, threadId, reacted);
       try {
         const { runId } = await handleWebhookTrigger(target.workflowId, {
           adapter,
@@ -33695,7 +33634,9 @@ ${combined}` : combined;
         requestedByUserId,
         parentTaskId: mostRecentTask?.id,
         inheritParentRequester: false,
-        inheritParentOutputSchema: false
+        inheritParentOutputSchema: false,
+        mentionMessageId: answered.messageId,
+        mentionChannelId: first.channelId
       };
       try {
         const { task, unattached } = await createChatTaskWithFiles(description, options, inbound);
@@ -33713,8 +33654,12 @@ ${combined}` : combined;
       await rememberChatThreadRequester(threadId, requester.userId);
       await subscribe(thread);
       startTypingKeepalive(adapter, threadId);
+      await clearChatMessageReactions(adapter, threadId, reacted.filter((id) => id !== answered.messageId));
+      if (!answered.reacted)
+        await setChatMessageReaction(adapter, threadId, answered.messageId, "accepted");
     } else {
       stopTypingKeepalive(threadId);
+      await clearChatMessageReactions(adapter, threadId, reacted);
     }
   } catch (_catch) {
     var _err = _catch, _hasErr = 1;
@@ -33880,18 +33825,56 @@ async function taskOutputChatFiles(taskId) {
 var RELAY_GIVE_UP_AFTER_MS = 24 * 60 * 60 * 1000;
 var SWEEP_EVERY_N_TICKS = 20;
 var EARLY_TICK_DEBOUNCE_MS = 250;
-function formatChatRelayText(task) {
+function formatChatTaskTag(task, agentName) {
+  return agentName ? `#${shortId(task)} · ${agentName}` : `#${shortId(task)}`;
+}
+function relayHeadAndBody(task, agentName) {
+  const tag = formatChatTaskTag(task, agentName);
   const body = (task.output || task.failureReason || "").trim();
   if (task.status === "failed")
-    return body ? `**Task failed.**
-
-${body}` : "**Task failed.**";
-  if (task.status === "cancelled") {
-    return body ? `**Task cancelled.**
+    return { head: `${tag}
+**Task failed.**`, body };
+  if (task.status === "cancelled")
+    return { head: `${tag}
+**Task cancelled.**`, body };
+  return { head: tag, body: body || "Task completed." };
+}
+function formatChatRelayText(task, agentName) {
+  const { head, body } = relayHeadAndBody(task, agentName);
+  return body ? `${head}
 
-${body}` : "**Task cancelled.**";
+${body}` : head;
+}
+var TELEGRAM_FOLD_CHARS = 1000;
+var FOLD_LEAD_MAX_CHARS = 280;
+var FOLD_MARKUP_CHARS = 80;
+function formatChatRelayMessages(task, adapter, agentName) {
+  const { head, body } = relayHeadAndBody(task, agentName);
+  if (adapter !== "telegram" || body.length <= TELEGRAM_FOLD_CHARS) {
+    return [formatChatRelayText(task, agentName)];
   }
-  return body || "Task completed.";
+  const breakAt = body.indexOf(`
+
+`);
+  const lead = breakAt > 0 && breakAt <= FOLD_LEAD_MAX_CHARS ? body.slice(0, breakAt) : "";
+  const rest = lead ? body.slice(breakAt).trim() : body;
+  const top = lead ? `${head}
+
+${lead}` : head;
+  const room = chatMessageLimit(adapter) - top.length - FOLD_MARKUP_CHARS;
+  const pieces = splitChatMessage(rest, room);
+  return pieces.map((piece, index) => {
+    const label = lead ? "Rest of the answer" : "Full answer";
+    const summary = pieces.length > 1 ? `${label} (${index + 1}/${pieces.length})` : label;
+    const block = `<details><summary>${summary}</summary>
+
+${piece}
+
+</details>`;
+    return index === 0 ? `${top}
+
+${block}` : block;
+  });
 }
 async function processPendingChatRelays(now = Date.now(), signal) {
   const retired = await giveUpStaleChatRelays2(now, RELAY_GIVE_UP_AFTER_MS);
@@ -33922,16 +33905,21 @@ async function processPendingChatRelays(now = Date.now(), signal) {
     if (!await markChatRelayAttempted2(task.id, now))
       continue;
     try {
+      const agent = task.agentId ? await getAgentById2(task.agentId) : null;
       await postChatMessage({
         adapter: target.adapter,
         threadId: target.threadId,
-        text: formatChatRelayText(task),
+        text: formatChatRelayMessages(task, target.adapter, agent?.name),
         taskId: task.id,
-        files: await taskOutputChatFiles(task.id)
+        files: await taskOutputChatFiles(task.id),
+        replyToMessageId: task.mentionMessageId
       });
       stopTypingKeepalive(target.threadId);
       await markChatRelayDelivered2(task.id, now);
       console.log(`[chat-sdk] Relayed ${task.status} task ${task.id} to ${target.adapter}`);
+      if (task.mentionMessageId) {
+        await setChatMessageReaction(target.adapter, target.threadId, task.mentionMessageId, terminalReactionEvent(task.status));
+      }
     } catch (error) {
       const message = errorMessage(error);
       await recordChatRelayError2(task.id, message, now);
@@ -34970,7 +34958,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp } = await import("./app-nndcvftq.js");
+    const { getSlackApp } = await import("./app-ag29n14f.js");
     const app = getSlackApp();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -35041,7 +35029,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDbClient } = await import("./db-88wcymxt.js");
+  const { getDbClient } = await import("./db-24ck09xy.js");
   await getDbClient().transaction(async (tx) => {
     const row = await tx.get("SELECT metadata FROM oauth_apps WHERE provider = 'jira'");
     if (!row) {
@@ -108436,7 +108424,7 @@ async function reloadGlobalConfigsAndIntegrations() {
   return runWithoutRequestAuth(() => reloadGlobalConfigsAndIntegrationsInner());
 }
 async function reloadGlobalConfigsAndIntegrationsInner() {
-  const { getEmbeddingProvider, resetEmbeddingProvider } = await import("./index-5en23s5z.js");
+  const { getEmbeddingProvider, resetEmbeddingProvider } = await import("./index-1r8wfpzs.js");
   const wasEmbeddingsConfigured = getEmbeddingProvider().isConfigured();
   const updated = await loadGlobalConfigsIntoEnv(true);
   await syncTelemetryEnabled("settings").catch((err) => {
@@ -108452,10 +108440,10 @@ async function reloadGlobalConfigsAndIntegrationsInner() {
     integrations.push("embeddings");
   }
   if (!wasEmbeddingsConfigured && isEmbeddingsConfigured) {
-    import("./boot-reembed-r8rhf9h8.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+    import("./boot-reembed-5b3d2eea.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
       console.error("[config-reload] memory backfill failed (non-fatal):", err);
     });
-    import("./boot-reembed-vwcj2y5d.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+    import("./boot-reembed-jsmfrpzf.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
       console.error("[config-reload] script backfill failed (non-fatal):", err);
     });
   }
@@ -114166,7 +114154,8 @@ var registerChatReplyTool = (server) => {
         threadId: thread.threadId,
         text,
         taskId: task.id,
-        files: resolved.files
+        files: resolved.files,
+        replyToMessageId: task.mentionMessageId
       });
       return toolOk(`Posted to ${thread.adapter} thread ${sent.threadId}.${unsentFilesSummary(sent.unsentFiles)}`, {
         data: {
@@ -116538,6 +116527,7 @@ init_resolver();
 init_types();
 init_env_flag();
 init_task_attachment_links();
+init_context_key();
 init_templates2();
 var TaskFollowUpModifySchema = CreateTaskOptionsSchema.pick({
   agentId: true,
@@ -116725,6 +116715,7 @@ ${depLines.join(`
     taskType: "follow-up",
     priority: changes.priority,
     parentTaskId: task.id,
+    contextKey: await deferredWorkChatContextKey(task),
     slackChannelId: task.slackChannelId,
     slackThreadTs: task.slackThreadTs,
     slackUserId: task.slackUserId,
@@ -116732,6 +116723,23 @@ ${depLines.join(`
     inheritParentOutputSchema: false
   }, { origin: "followUp" });
 }
+var MAX_CONTINUATION_HOPS = 32;
+async function deferredWorkChatContextKey(task) {
+  if (chatThreadOfContextKey(task.contextKey))
+    return;
+  const seen = new Set;
+  let current = task;
+  while (current && !seen.has(current.id) && seen.size < MAX_CONTINUATION_HOPS) {
+    if (chatThreadOfContextKey(current.contextKey))
+      return current.contextKey;
+    const continuation = current.source === "schedule" && current.taskType === "deferred" || current.source === "system" && current.taskType === "resume";
+    if (!continuation || !current.parentTaskId)
+      return;
+    seen.add(current.id);
+    current = await getTaskById2(current.parentTaskId);
+  }
+  return;
+}
 async function createResumeFollowUp(args) {
   const parent = await getTaskById2(args.parentId);
   if (!parent)
@@ -122179,8 +122187,8 @@ init_db3();
 init_constants2();
 var QuestionSchema = object2({
   id: string2().describe("Unique ID for the question (used as key in responses)"),
-  type: _enum2(["approval", "text", "single-select", "multi-select", "boolean"]).describe("Question type"),
-  label: string2().describe("The question text displayed to the user"),
+  type: _enum2(["approval", "text", "single-select", "multi-select", "boolean", "config"]).describe("Question type"),
+  label: string2().optional().describe("The question text displayed to the user (required except for config, which defaults to the key)"),
   required: boolean().optional().describe("Whether this question is required (default: true)"),
   description: string2().optional().describe("Optional help text, rendered as markdown (code fences, images)"),
   placeholder: string2().optional().describe("Placeholder text (for text type)"),
@@ -122192,13 +122200,14 @@ var QuestionSchema = object2({
   })).optional().describe("Options (for single-select/multi-select types)"),
   minSelections: number2().int().min(0).optional().describe("Min selections (for multi-select)"),
   maxSelections: number2().int().min(1).optional().describe("Max selections (for multi-select)"),
-  defaultValue: boolean().optional().describe("Default value (for boolean type)")
+  defaultValue: boolean().optional().describe("Default value (for boolean type)"),
+  config: ConfigQuestionSettingsSchema.optional().describe("Settings for a config question: the key and scope to set, plus options or defaultValue for non-secret keys")
 });
 var registerRequestHumanInputTool = (server) => {
   createToolRegistrar(server)("request-human-input", {
     title: "Request human input",
     annotations: { destructiveHint: false },
-    description: "Create an approval request and return at once with the request id and URL. The answer arrives later as a hitl-follow-up task. " + "Supports multiple question types: approval (yes/no), text, single-select, " + "multi-select, and boolean. Returns the request ID and URL for the human to respond. " + "The dashboard renders each label and description as markdown: put long content in description, fence code with a language, and put an image URL alone on its own line to show it. " + "No Slack message is sent; share the URL yourself.",
+    description: "Create an approval request and return at once with the request id and URL. The answer arrives later as a hitl-follow-up task. " + "Supports multiple question types: approval (yes/no), text, single-select, " + "multi-select, boolean, and config. Returns the request ID and URL for the human to respond. " + "config asks a person to set one swarm config key on the dashboard; secrets are stored encrypted and you receive only {key, scope, isSecret, status, updatedAt}, never the value. " + "The dashboard renders each label and description as markdown: put long content in description, fence code with a language, and put an image URL alone on its own line to show it. " + "No Slack message is sent; share the URL yourself.",
     inputSchema: object2({
       title: string2().min(1).describe("Title of the approval request"),
       questions: array2(QuestionSchema).min(1).describe("Questions to ask the human"),
@@ -122221,12 +122230,20 @@ var registerRequestHumanInputTool = (server) => {
         sourceTaskId = currentTask.id;
       }
     }
+    const approvers = { policy: "any" };
+    const normalized = await normalizeApprovalQuestions(questions, {
+      approvers,
+      callerAgentId: requestInfo.agentId
+    });
+    if (!normalized.ok) {
+      return toolErr(normalized.error, { data: { yourAgentId: requestInfo.agentId } });
+    }
     const id = crypto.randomUUID();
     const request = await createApprovalRequest2({
       id,
       title,
-      questions,
-      approvers: { policy: "any" },
+      questions: normalized.questions,
+      approvers,
       sourceTaskId: sourceTaskId ?? undefined,
       timeoutSeconds,
       createdBy: await resolveTaskAuditUserId(sourceTaskId, requestInfo.agentId) ?? undefined
@@ -129793,6 +129810,7 @@ function validateRecurringTiming(merged) {
 
 // src/tools/schedules/patch-schedule.ts
 init_db2();
+init_rbac();
 init_types();
 var patchScheduleInputSchema = object2({
   key: AssetKeySchema.optional().describe("Move to a logical namespace."),
@@ -129889,6 +129907,14 @@ var registerPatchScheduleTool = (server) => {
     if (!caller) {
       return toolErr("Agent not found.");
     }
+    if (schedule.taskType === "deferred" && !can({
+      principal: { kind: "agent", agentId: caller.id, isLead: caller.isLead },
+      verb: "schedule.deferral.update.any",
+      resource: { kind: "owned", ownerAgentId: schedule.createdByAgentId },
+      source: "mcp"
+    }).allow) {
+      return toolErr(`Schedule "${schedule.name}" defers another agent's task. Only that agent or a lead can change it.`);
+    }
     if (schedule.scheduleType === "one_time" && !schedule.enabled && schedule.lastRunAt) {
       return toolErr(`One-time schedule "${schedule.name}" has already executed. Create a new one instead.`);
     }
@@ -130104,6 +130130,7 @@ init_zod();
 var import_cron_parser4 = __toESM(require_dist2(), 1);
 init_db3();
 init_db2();
+init_rbac();
 init_types();
 var updateScheduleInputSchema = object2({
   key: AssetKeySchema.optional().describe("Move to a logical namespace."),
@@ -130200,6 +130227,14 @@ var registerUpdateScheduleTool = (server) => {
     if (!caller) {
       return toolErr("Agent not found.");
     }
+    if (schedule.taskType === "deferred" && !can({
+      principal: { kind: "agent", agentId: caller.id, isLead: caller.isLead },
+      verb: "schedule.deferral.update.any",
+      resource: { kind: "owned", ownerAgentId: schedule.createdByAgentId },
+      source: "mcp"
+    }).allow) {
+      return toolErr(`Schedule "${schedule.name}" defers another agent's task. Only that agent or a lead can change it.`);
+    }
     if (schedule.scheduleType === "one_time" && !schedule.enabled && schedule.lastRunAt) {
       return toolErr(`One-time schedule "${schedule.name}" has already executed. Create a new one instead.`);
     }
@@ -133414,23 +133449,6 @@ var registerSlackListChannelsTool = (server) => {
 init_zod();
 init_db3();
 init_rbac();
-
-// src/slack/dm.ts
-function isSlackUserId(id) {
-  return /^[UW][A-Z0-9]+$/.test(id);
-}
-async function resolveSlackConversationId(client, channelId) {
-  if (!isSlackUserId(channelId))
-    return channelId;
-  const result = await client.conversations.open({ users: channelId });
-  const dmId = result.channel?.id;
-  if (!dmId) {
-    throw new Error(`conversations.open returned no DM channel for user ${channelId}`);
-  }
-  return dmId;
-}
-
-// src/tools/slack-post.ts
 var registerSlackPostTool = (server) => {
   createToolRegistrar(server)("slack-post", {
     title: "Post message to Slack channel",
@@ -137454,4 +137472,4 @@ async function createServer(opts = {}) {
   return server;
 }
 
-export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, resolveIdentity, renderIdentity, createAdditiveBuffer, taskModelPin, resumedTaskModelSelection, listHarnessModelSupport, recordHarnessModelSupport, agentRanModel, getAgentHarnessCliVersion, setAgentHarnessCliVersion, sanitizeModelTierOverrides, parseModelTierOverridesHeader, setAgentModelTierOverrides, previewModelTiers, recordClaimModelResolution, harnessModelErrorFor, poolTaskRunsOnHarness, explicitModelError, explicitModelErrorForAgent, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, scopeFromAttachment, backingProviderId, transcribeAudioNotes, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, isRuntimePoolWakeable, isAgentReachable, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, recoverIncompleteRuns, handleWebhookTrigger, verifyHmacSignature, WebhookError, snapshotAndUpdateWorkflow, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry2, initWorkflows2, dispatchScheduleTarget, calculateNextRun2, startScheduler2, stopScheduler2, runScheduleNow2, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, hasKvViewArgs, resolveKvView, toolErr, createToolRegistrar, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError2, isRegistered2, isExtensionAgentId2, getExtensionBridgeToken2, resolveBridgeCallOrigin2, extensionIdForAgent2, runContext2, registerLoaded2, unregister2, listRegistered2, dispatchPre2, dispatchPost2, stripSiblingBlock, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, isAzureDevOpsEnabled, initAzureDevOps, verifyAzureDevOpsWebhook, repointTrackerSyncBySwarmId, isAzureDevOpsUrl, canonicalAzureDevOpsRepoUrl, parseAzureDevOpsRepoUrl, createdPullRequestOf, commentedPayloadOf, handlePullRequestCreated, handlePullRequestCommented, handleWorkItemCreated, handleWorkItemUpdated, handleWorkItemCommented, handleWorkItemDeleted, handleWorkItemRestored, initAzureDevOpsOutbound, AGENT_MAX_TASKS_CONFIG_KEY, reconcileAgentMaxTasksPolicy, resetAgentMaxTasksMirror, upsertSwarmConfigWithPolicyMirror, runtimeStaleThresholdMinutes, upsertRuntimeInstance, getRuntimeInstanceById, insertProvisioningRuntime, markRuntimeTerminated, touchRuntimeInstance, countActiveRuntimeInstancesForAgent, listRuntimeInstancesForAgent, setRuntimeCredentialReady, reconcileAgentStatusFromRuntimes, agentsWithLiveRuntime, expireStaleRuntimeInstances, listRuntimeInstancesForPool, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, getTelemetryIngestAnchor, initApiTelemetry, syncTelemetryEnabled, isBitbucketEnabled, initBitbucket, verifyBitbucketWebhook, isDuplicateDelivery, markDeliveryProcessed, pullRequestEventOf, pullRequestCommentEventOf, handlePullRequestCreated2, handlePullRequestCommentCreated, handlePullRequestClosed, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2, handleNote, handlePipeline, isChatSdkEnabled, getChatSdkConfig, errorMessage, resolveAdapterApiUrl, trackBackground, TelegramBotApiError, callTelegramBotApi, isTrustedTeamsServiceUrl, isChatSdkStopping, startChatSdk, getChatInstance, isChatAdapterConfigured, getChatSdkHealth, stopChatSdk, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, isCookieSafePageId, extractPageSession, extractLegacyPageSession, extractAndVerifyCookie, pageSessionSetCookies, resolveHttpRequestAuth, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, MCP_MAX_TOOL_INPUT_ELEMENTS, MCP_MAX_REQUEST_BODY_BYTES, userCtx, requestPrincipal, agentFirstPrincipal, rejectGuest, handleApps, cancelApprovalRequest, cancelApprovalRequestAndRun, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, getPageEditCounter, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, MemoryKeyError, refreshLinks, indexMemoryContent, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, inheritedModelSelection, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, reservedRoomKeyError, updateMcpServerChecked, updateTouchesStdioExecution, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, isApiDraining, drainApi, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, changesAllowMerge, updateSwarmRepoChecked, getCombConfig, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, sessionAccessTopic, sessionPresenceRoot, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, MEMORY_KEYS_DEFAULT_PREFIX, MEMORY_KEYS_MAX_LIMIT, estimateTokens, posteriorMean, listMemoryKeys, checkChunkIntegrity, getMemoryChunks, getPosteriorsByIds, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, workflowModelErrors, patchWorkflowDefinition, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };
+export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, resolveIdentity, renderIdentity, createAdditiveBuffer, taskModelPin, resumedTaskModelSelection, listHarnessModelSupport, recordHarnessModelSupport, agentRanModel, getAgentHarnessCliVersion, setAgentHarnessCliVersion, sanitizeModelTierOverrides, parseModelTierOverridesHeader, setAgentModelTierOverrides, previewModelTiers, recordClaimModelResolution, harnessModelErrorFor, poolTaskRunsOnHarness, explicitModelError, explicitModelErrorForAgent, referencedBundlePaths, skillDirs, TaskCreationBlockedError, recordUnmappedIdentity, MAX_TASK_ATTACHMENT_BYTES, recordTaskAttachmentUpload, scopeFromAttachment, backingProviderId, transcribeAudioNotes, buildEffectiveText, bufferedFileFailures, fetchSlackFiles, createSlackTaskWithFiles, notifySlackFileFailures, isRuntimePoolWakeable, isAgentReachable, hasOtherUserMention, broadcastMatches, routeMessage, extractTaskFromMessage, extractSlackMessageText, recoverIncompleteRuns, handleWebhookTrigger, verifyHmacSignature, WebhookError, snapshotAndUpdateWorkflow, RawLlmConfigSchema, RawLlmOutputSchema, executeRawLlm, getExecutorRegistry2, initWorkflows2, dispatchScheduleTarget, calculateNextRun2, startScheduler2, stopScheduler2, runScheduleNow2, ExtensionAssetConflictError, ExtensionOwnershipError, getExtensionFiles, getExtensionById, getExtensionByName, listExtensions, listExtensionVersions, updateExtensionMeta, listExtensionRuns, SDK_ALLOWLIST, mcpToolNameForSdkMethod, mcpOverflowAuthError, hasKvViewArgs, resolveKvView, toolErr, createToolRegistrar, handleMcpBridge, Redacted, SCRIPT_SDK_RESPONSE_LIMIT_BYTES, readScriptSdkJsonResponse, ExtensionConfigError, ExtensionLifecycleError, setExtensionLoopbackBaseUrl, enableExtension, disableExtension, activateVersion, ExtensionAssetsInvalidError, installExtensionWithAssets, uninstallExtension, reloadExtension, loadEnabledExtensions, stopExtensionRuntime, ExtensionAbortedError2, isRegistered2, isExtensionAgentId2, getExtensionBridgeToken2, resolveBridgeCallOrigin2, extensionIdForAgent2, runContext2, registerLoaded2, unregister2, listRegistered2, dispatchPre2, dispatchPost2, stripSiblingBlock, createTaskWithSiblingAwareness, isInboxAllowed, isSenderAllowed, handleMessageReceived, isAzureDevOpsEnabled, initAzureDevOps, verifyAzureDevOpsWebhook, repointTrackerSyncBySwarmId, isAzureDevOpsUrl, canonicalAzureDevOpsRepoUrl, parseAzureDevOpsRepoUrl, createdPullRequestOf, commentedPayloadOf, handlePullRequestCreated, handlePullRequestCommented, handleWorkItemCreated, handleWorkItemUpdated, handleWorkItemCommented, handleWorkItemDeleted, handleWorkItemRestored, initAzureDevOpsOutbound, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, getTelemetryIngestAnchor, initApiTelemetry, syncTelemetryEnabled, isBitbucketEnabled, initBitbucket, verifyBitbucketWebhook, isDuplicateDelivery, markDeliveryProcessed, pullRequestEventOf, pullRequestCommentEventOf, handlePullRequestCreated2, handlePullRequestCommentCreated, handlePullRequestClosed, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, isGitLabEnabled, initGitLab, verifyGitLabWebhook, handleMergeRequest, handleIssue2, handleNote, handlePipeline, isChatSdkEnabled, getChatSdkConfig, errorMessage, resolveAdapterApiUrl, trackBackground, TelegramBotApiError, callTelegramBotApi, isTrustedTeamsServiceUrl, isChatSdkStopping, startChatSdk, getChatInstance, isChatAdapterConfigured, getChatSdkHealth, stopChatSdk, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, isCookieSafePageId, extractPageSession, extractLegacyPageSession, extractAndVerifyCookie, pageSessionSetCookies, resolveHttpRequestAuth, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, MCP_MAX_TOOL_INPUT_ELEMENTS, MCP_MAX_REQUEST_BODY_BYTES, userCtx, requestPrincipal, agentFirstPrincipal, rejectGuest, handleApps, cancelApprovalRequest, cancelApprovalRequestAndRun, getUserCommsPrefs, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, executeReadOnlyQuery, assertSelectOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, getPageEditCounter, snapshotPage, assertOAuthAppUrlsSafe, assertOAuthEgressUrlSafe, listOAuthPresets, listOAuthPresetIds, getOAuthPreset, hydrateOAuthAppFromPreset, scopedResourceScopeIdSchema, resolveScopedResourceId, MemoryKeyError, refreshLinks, indexMemoryContent, dedupeMemoryDocumentIds, recordMemoryAccesses, recordRetrievals, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, REBOOT_RETRY_PIN_TAG, getPinCandidateAgent, resolveLeadOnlyRecoveryAssignment, getResumeGeneration, getNextResumeGeneration, inheritedModelSelection, createWorkerTaskFollowUp, createResumeFollowUp, createRerouteDecisionTask, createPoolStarvationDecisionTask, guardTerminalTaskResultWrite, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, reservedNamespaceError, reservedRoomKeyError, updateMcpServerChecked, updateTouchesStdioExecution, canReadMemory, getLinksForMemory, expandCandidatesWithGraph, isApiDraining, drainApi, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, changesAllowMerge, updateSwarmRepoChecked, getCombConfig, resolveRoomNamespace, roomRequestInfo, authorizeRoomNamespace, sessionAccessTopic, sessionPresenceRoot, RoomOperationSchema, removeAwarenessStates, roomTopic, decodeRoomSnapshot, roomView, getRoom, changeRoom, applyRoomUpdate, resetRoom, sweepRooms, closeRooms, removeNamespaceRooms, MEMORY_KEYS_DEFAULT_PREFIX, MEMORY_KEYS_MAX_LIMIT, estimateTokens, posteriorMean, listMemoryKeys, checkChunkIntegrity, getMemoryChunks, getPosteriorsByIds, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, checkOutputSchemaShape, sendTaskOutputSchema, sendTaskHandler, steerTaskUserInputSchema, steerTaskOutputSchema, steerTaskHandler, canClaim, emitBudgetRefusalSideEffects, workflowModelErrors, patchWorkflowDefinition, resolveScriptsOnlyMode, ALL_CAPABILITIES, hasCapability, getEnabledCapabilities, createServer };