@desplega.ai/agent-swarm 2.5.3 → 2.5.4

package/dist/{oauth-refresh-sweep-q2c3bnvm.js → oauth-refresh-sweep-vjnnandw.js}

@@ -2,10 +2,10 @@ import {
   getAuthorizationById,
   listAuthorizationSweepRows,
   init_oauth
-} from "./cli-kxawjrxg.js";
+} from "./cli-jb30dzvk.js";
 import {
   forceRefreshAuthorizationOrThrow
-} from "./cli-egjggehm.js";
+} from "./cli-tsma7p8v.js";
 import {
   scrubSecrets,
   init_secret_scrubber

package/dist/{onboard-w4yd7s8t.js → onboard-sfmpe4np.js}

@@ -16,7 +16,7 @@ import {
   createDefaultSettingsLocal,
   createDefaultMcpJson,
   createHooksConfig
-} from "./cli-502eqv93.js";
+} from "./cli-s682zgqz.js";
 import {
   getSlackConfiguration,
   isSlackConfigured,
@@ -25,7 +25,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-y561h5a9.js";
+} from "./cli-xtrz6bzs.js";
 import {
   getApiKey,
   init_api_key

package/dist/{opencode-adapter-9tppvxar.js → opencode-adapter-jmpst4q4.js}

@@ -3,13 +3,13 @@ import {
   applyOpenRouterBaseUrlOverride2,
   buildOpenAICompatibleProviderBlock2,
   OpencodeAdapter2
-} from "./cli-avdvgcay.js";
-import"./cli-e5bxnjps.js";
+} from "./cli-hh5we352.js";
+import"./cli-c952c7ac.js";
 import"./cli-4bd1rck6.js";
 import"./cli-jc1g9ndz.js";
-import"./cli-a5ebc95n.js";
 import"./cli-mmhj8vd7.js";
 import"./cli-0726awxw.js";
+import"./cli-2655k16q.js";
 import"./cli-bn0rewsy.js";
 import"./cli-3h26v7yj.js";
 import"./cli-qqzmjxkf.js";

package/dist/{otel-impl-f36byzbd.js → otel-impl-v6cc0zve.js}

@@ -14,7 +14,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-y561h5a9.js";
+} from "./cli-xtrz6bzs.js";
 import {
   scrubSecrets,
   init_secret_scrubber

package/dist/{pi-mono-adapter-tqsge1ay.js → pi-mono-adapter-fk8fkcf6.js}

@@ -20,6 +20,10 @@ import {
   getBuiltinModels
 } from "./cli-qqzmjxkf.js";
 import"./cli-kvzgak7c.js";
+import {
+  contextBoundNoteThreshold,
+  createContextBoundNote
+} from "./cli-2655k16q.js";
 import {
   swarmRuntimeInstanceId
 } from "./cli-e8xyjvfc.js";
@@ -30,7 +34,7 @@ import"./cli-3h26v7yj.js";
 import"./cli-0726awxw.js";
 import {
   createSwarmHooksExtension
-} from "./cli-e5bxnjps.js";
+} from "./cli-c952c7ac.js";
 import"./cli-kxpfx2xr.js";
 import"./cli-mmhj8vd7.js";
 import {
@@ -54,16 +58,16 @@ import {
 } from "./cli-2dfbv8qr.js";
 import {
   init_templates3
-} from "./cli-0ebey9hg.js";
-import {
-  resolveTemplateAsync,
-  init_resolver
-} from "./cli-tx00c0h6.js";
+} from "./cli-j6rktc91.js";
 import {
   DEFAULT_OPENROUTER_BASE_URL,
   getOpenRouterBaseUrl,
   init_openrouter_base_url
 } from "./cli-dfyv0jdy.js";
+import {
+  resolveTemplateAsync,
+  init_resolver
+} from "./cli-dqygeeh5.js";
 import {
   snapshotCatalogRows,
   init_runtime_model_catalog
@@ -585,6 +589,14 @@ function extractPiAssistantText(message) {
 function safeLabel(value) {
   return typeof value === "string" && /^[A-Za-z0-9_-]{1,32}$/.test(value) ? value : "other";
 }
+function requestContextTokens(message) {
+  const usage = message?.usage;
+  if (typeof usage?.input !== "number")
+    return;
+  const cacheRead = typeof usage.cacheRead === "number" ? usage.cacheRead : 0;
+  const cacheWrite = typeof usage.cacheWrite === "number" ? usage.cacheWrite : 0;
+  return usage.input + cacheRead + cacheWrite;
+}
 function describeAssistantTurn(message) {
   const msg = message ?? {};
   const blocks = Array.isArray(msg.content) ? msg.content : [];
@@ -640,6 +652,8 @@ class PiMonoSession {
   emptyTurnReprompted = false;
   abortRequested = false;
   disposeModels;
+  observeContextBound;
+  toolTurnOpen = false;
   constructor(agentSession, config, createdSymlink, appliedReasoningEffort = null, disposeModels = async () => {}) {
     this.agentSession = agentSession;
     this.disposeModels = disposeModels;
@@ -649,6 +663,12 @@ class PiMonoSession {
     this.logFileHandle = Bun.file(config.logFile).writer();
     this._sessionId = agentSession.sessionId;
     this.sessionStartedAt = Date.now();
+    this.observeContextBound = createContextBoundNote({
+      threshold: contextBoundNoteThreshold(config.env ?? process.env),
+      model: () => this.reportedModel(),
+      canDeliver: () => this.toolTurnOpen && !this.sessionEnded && !this.abortRequested,
+      inject: (note) => this.deliverSteering({ mode: "steer", text: note })
+    });
     const piVersion = readPkgVersion("@earendil-works/pi-coding-agent");
     this.emit({
       type: "session_init",
@@ -690,6 +710,10 @@ class PiMonoSession {
             break;
           }
           this.terminalError = null;
+          if (turn.hasToolCall) {
+            this.toolTurnOpen = true;
+            this.observeContextBound(requestContextTokens(event.message));
+          }
           if (!turn.hasText && !turn.hasToolCall) {
             const tokens = turn.outputTokens === undefined ? "" : `, outputTokens=${turn.outputTokens}`;
             this.emit({
@@ -736,6 +760,9 @@ class PiMonoSession {
         }
         break;
       }
+      case "turn_end":
+        this.toolTurnOpen = false;
+        break;
       case "tool_execution_start": {
         const status = event.args?.status;
         if (event.toolName.endsWith("store-progress") && typeof status === "string" && TERMINAL_STORE_PROGRESS_STATUSES.has(status)) {

package/dist/{pricing-refresh-xvak5p4v.js → pricing-refresh-fsk1e1zc.js}

@@ -1,9 +1,9 @@
 import {
   requestModelCatalogRefresh2,
   startPricingRefreshLoop2
-} from "./cli-n45mr7zh.js";
-import"./cli-fsdprwrg.js";
-import"./cli-kxawjrxg.js";
+} from "./cli-bvpgr9ny.js";
+import"./cli-sbwsxvtd.js";
+import"./cli-jb30dzvk.js";
 export {
   requestModelCatalogRefresh2 as requestModelCatalogRefresh,
   startPricingRefreshLoop2 as startPricingRefreshLoop

package/dist/{rbac-roles-gfn30fb8.js → rbac-roles-prmkdnkw.js}

@@ -9,8 +9,8 @@ import {
   setUserRoles2,
   ensureRbacSeedsSynced2,
   init_rbac_roles
-} from "./cli-99xgw26r.js";
-import"./cli-kxawjrxg.js";
+} from "./cli-ff1tm9n9.js";
+import"./cli-jb30dzvk.js";
 init_rbac_roles();
 
 export {

package/dist/{rbac-roles-682k2mt5.js → rbac-roles-zxmxqa39.js}

@@ -3,7 +3,7 @@ import {
   getDbClient2,
   init_telemetry_identity,
   init_db3
-} from "./cli-kxawjrxg.js";
+} from "./cli-jb30dzvk.js";
 import {
   PermissionVerbSchema,
   init_rbac

package/dist/{render-v2-hgytz8nn.js → render-v2-pjwxvnkw.js}

@@ -2,9 +2,9 @@ import {
   isSlackRenderV2Enabled2,
   ensureSlackThreadTree2,
   processSlackRenderV22
-} from "./cli-ce0ak9ms.js";
-import"./cli-s53vp709.js";
-import"./cli-kxawjrxg.js";
+} from "./cli-abs8ndtr.js";
+import"./cli-eftzyh9y.js";
+import"./cli-jb30dzvk.js";
 export {
   ensureSlackThreadTree2 as ensureSlackThreadTree,
   isSlackRenderV2Enabled2 as isSlackRenderV2Enabled,

package/dist/{resume-2dvq348g.js → resume-frdtgfa0.js}

@@ -4,32 +4,34 @@ import {
   retryFailedRun2,
   cancelWorkflowRunRows2,
   cancelWorkflowRun2,
+  postTreeApprovalCancellations2,
   resumeWaitState2,
   recoverResolvedWaitState2,
   resumeFromChildRun2,
   initWaitBusSubscriptions2,
   subscribeWaitToBus2
-} from "./cli-e2ar4bp1.js";
-import"./cli-jjznk3f7.js";
+} from "./cli-x0f2v69c.js";
+import"./cli-gbfxp48k.js";
 import"./cli-qqzmjxkf.js";
 import"./cli-kxpfx2xr.js";
 import"./cli-e8xyjvfc.js";
 import"./cli-13p25grh.js";
 import"./cli-0adyhvq2.js";
-import"./cli-ce0ak9ms.js";
-import"./cli-s53vp709.js";
-import"./cli-e8jyq7d8.js";
+import"./cli-abs8ndtr.js";
+import"./cli-eftzyh9y.js";
+import"./cli-6a1xg1p7.js";
 import"./cli-rycdaj0a.js";
 import"./cli-445c1vp7.js";
 import"./cli-kvzgak7c.js";
 import"./cli-2nf3b08t.js";
-import"./cli-kxawjrxg.js";
+import"./cli-jb30dzvk.js";
 import"./cli-dabehxhp.js";
 export {
   cancelWorkflowRun2 as cancelWorkflowRun,
   cancelWorkflowRunRows2 as cancelWorkflowRunRows,
   finalizeOrWait2 as finalizeOrWait,
   initWaitBusSubscriptions2 as initWaitBusSubscriptions,
+  postTreeApprovalCancellations2 as postTreeApprovalCancellations,
   recoverResolvedWaitState2 as recoverResolvedWaitState,
   resumeFromChildRun2 as resumeFromChildRun,
   resumeWaitState2 as resumeWaitState,

package/dist/{session-access-7f21ekq9.js → session-access-fpez4y5q.js}

@@ -10,10 +10,10 @@ import {
   pathSessionDenial2,
   bodySessionDenial2,
   userAgentIdentityDenial2
-} from "./cli-1fc85mvt.js";
-import"./cli-e8jyq7d8.js";
-import"./cli-99xgw26r.js";
-import"./cli-kxawjrxg.js";
+} from "./cli-gwhjmh8g.js";
+import"./cli-6a1xg1p7.js";
+import"./cli-ff1tm9n9.js";
+import"./cli-jb30dzvk.js";
 export {
   SESSION_READ_DENIED2 as SESSION_READ_DENIED,
   SESSION_WRITE_DENIED2 as SESSION_WRITE_DENIED,

package/dist/{setup-epffxtbk.js → setup-mq6m3m8q.js}

@@ -15,7 +15,7 @@ import {
   createDefaultSettingsLocal,
   createDefaultMcpJson,
   createHooksConfig
-} from "./cli-502eqv93.js";
+} from "./cli-s682zgqz.js";
 import {
   getApiKey,
   init_api_key

package/dist/{work-objects-xz1a5rqk.js → work-objects-kfahhjsq.js}

@@ -2,18 +2,18 @@ import {
   getAgentById2,
   getTaskById2,
   init_db3
-} from "./cli-kxawjrxg.js";
+} from "./cli-jb30dzvk.js";
 import {
   slackTaskOutput,
   getTaskUrl
-} from "./cli-ce0ak9ms.js";
+} from "./cli-abs8ndtr.js";
 import {
   shouldBlockChannel2
-} from "./cli-s53vp709.js";
-import"./cli-aecdcr77.js";
-import"./cli-jjznk3f7.js";
-import"./cli-p9rafdrb.js";
-import"./cli-egjggehm.js";
+} from "./cli-eftzyh9y.js";
+import"./cli-asq5ydm4.js";
+import"./cli-gbfxp48k.js";
+import"./cli-7p4jxgtt.js";
+import"./cli-tsma7p8v.js";
 import"./cli-3ggwdtb0.js";
 import"./cli-e8xyjvfc.js";
 import"./cli-qqzmjxkf.js";
@@ -22,26 +22,26 @@ import"./cli-kvzgak7c.js";
 import"./cli-445c1vp7.js";
 import"./cli-kxpfx2xr.js";
 import"./cli-dabehxhp.js";
-import"./cli-e2ar4bp1.js";
+import"./cli-x0f2v69c.js";
 import"./cli-9s05422w.js";
-import"./cli-fsdprwrg.js";
-import"./cli-n45mr7zh.js";
+import"./cli-sbwsxvtd.js";
+import"./cli-bvpgr9ny.js";
 import"./cli-qz93y3x5.js";
-import"./cli-99xgw26r.js";
-import"./cli-210xd1f4.js";
+import"./cli-ff1tm9n9.js";
+import"./cli-c61mbdds.js";
 import"./cli-g9ypd5en.js";
-import"./cli-vwn81jbs.js";
-import"./cli-1fc85mvt.js";
+import"./cli-19202kew.js";
+import"./cli-gwhjmh8g.js";
 import"./cli-3h26v7yj.js";
 import"./cli-pasyvjmm.js";
-import"./cli-25j01dpj.js";
-import"./cli-qgf8emrn.js";
+import"./cli-jbnn4vxb.js";
+import"./cli-wghjkr0e.js";
 import {
   isUserAllowed2
-} from "./cli-gpsz7g88.js";
+} from "./cli-xzfq4at3.js";
 import"./cli-13p25grh.js";
 import"./cli-0adyhvq2.js";
-import"./cli-e8jyq7d8.js";
+import"./cli-6a1xg1p7.js";
 import"./cli-rycdaj0a.js";
 import {
   isEnvFlagEnabled,

package/dist/{worker-42t8emjt.js → worker-v5e5rxj3.js}

@@ -1,67 +1,67 @@
 import"./cli-qz93y3x5.js";
 import {
   getEnabledCapabilities
-} from "./cli-aecdcr77.js";
-import"./cli-kxawjrxg.js";
-import"./cli-99xgw26r.js";
-import"./cli-210xd1f4.js";
-import"./cli-fsdprwrg.js";
-import"./cli-n45mr7zh.js";
+} from "./cli-asq5ydm4.js";
+import"./cli-jb30dzvk.js";
+import"./cli-ff1tm9n9.js";
+import"./cli-c61mbdds.js";
+import"./cli-sbwsxvtd.js";
+import"./cli-bvpgr9ny.js";
 import"./cli-9s05422w.js";
-import"./cli-jjznk3f7.js";
-import"./cli-p9rafdrb.js";
-import"./cli-egjggehm.js";
+import"./cli-dabehxhp.js";
+import"./cli-gbfxp48k.js";
+import"./cli-7p4jxgtt.js";
+import"./cli-tsma7p8v.js";
 import"./cli-3ggwdtb0.js";
 import"./cli-e8xyjvfc.js";
-import"./cli-ce0ak9ms.js";
-import"./cli-s53vp709.js";
+import"./cli-abs8ndtr.js";
+import"./cli-eftzyh9y.js";
 import"./cli-qqzmjxkf.js";
 import"./cli-2nf3b08t.js";
 import"./cli-kvzgak7c.js";
 import"./cli-445c1vp7.js";
 import"./cli-kxpfx2xr.js";
-import"./cli-dabehxhp.js";
-import"./cli-e2ar4bp1.js";
-import"./cli-1fc85mvt.js";
+import"./cli-x0f2v69c.js";
+import"./cli-gwhjmh8g.js";
 import"./cli-g9ypd5en.js";
-import"./cli-vwn81jbs.js";
+import"./cli-19202kew.js";
 import"./cli-3h26v7yj.js";
 import"./cli-pasyvjmm.js";
-import"./cli-0xk505e8.js";
+import"./cli-sxgtf5fw.js";
 import"./cli-bn0rewsy.js";
 import"./cli-77cd6gy8.js";
-import"./cli-hcpj2xqz.js";
+import"./cli-277c31dw.js";
 import {
   runAgent
-} from "./cli-qzme5949.js";
-import"./cli-a5ebc95n.js";
+} from "./cli-k4tjsdx9.js";
 import"./cli-gx4rm0qx.js";
 import"./cli-5kqnemen.js";
+import"./cli-2655k16q.js";
 import"./cli-jc1g9ndz.js";
-import"./cli-p0rzjkya.js";
-import"./cli-ta8bd7th.js";
+import"./cli-wx2nj19m.js";
+import"./cli-pzatvw94.js";
 import"./cli-mmhj8vd7.js";
 import"./cli-d82btycs.js";
 import"./cli-0726awxw.js";
-import"./cli-w1zwctj2.js";
-import"./cli-ewm3pwbq.js";
+import"./cli-9j129brq.js";
+import"./cli-g9vd9ece.js";
 import"./cli-4bd1rck6.js";
 import"./cli-vbhgkw9h.js";
-import"./cli-p6zs9h4y.js";
-import"./cli-35gtk1p6.js";
+import"./cli-rr7zx19j.js";
+import"./cli-4b2z6n0m.js";
 import"./cli-kr5tjjtz.js";
-import"./cli-s49hpn37.js";
-import"./cli-hhxjnjzs.js";
+import"./cli-64mh9mf3.js";
+import"./cli-25n3mv5d.js";
 import"./cli-g1cw7xtt.js";
-import"./cli-40jsnrjm.js";
-import"./cli-8s5wx3nz.js";
-import"./cli-e5bxnjps.js";
-import"./cli-avdvgcay.js";
-import"./cli-fzcn3d87.js";
+import"./cli-5bnsc0e1.js";
+import"./cli-m4ecdxvz.js";
+import"./cli-c952c7ac.js";
+import"./cli-hh5we352.js";
+import"./cli-621ce7kw.js";
 import"./cli-4zsenjhy.js";
 import"./cli-13p25grh.js";
 import"./cli-0adyhvq2.js";
-import"./cli-e8jyq7d8.js";
+import"./cli-6a1xg1p7.js";
 import"./cli-rycdaj0a.js";
 
 // src/commands/worker.ts

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "2.5.3",
+    "version": "2.5.4",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [
@@ -61334,6 +61334,19 @@
             "bearerAuth": []
           }
         ],
+        "parameters": [
+          {
+            "schema": {
+              "type": "string",
+              "pattern": "^[\\x21-\\x7E]{1,255}$",
+              "description": "Optional client-generated key, 1-255 visible ASCII characters (a UUID works). The first request the server accepts under a key creates one workflow; a retry with the same key and an equivalent body gets that request's status and body back (with `Idempotent-Replayed: true`) and changes nothing. The key is scoped to the caller's identity and this operation; it is not a credential. The same key with a different body is a 409. A request rejected before it is accepted (validation, auth, not found, disabled) does not use up the key. Accepted keys do not expire."
+            },
+            "required": false,
+            "description": "Optional client-generated key, 1-255 visible ASCII characters (a UUID works). The first request the server accepts under a key creates one workflow; a retry with the same key and an equivalent body gets that request's status and body back (with `Idempotent-Replayed: true`) and changes nothing. The key is scoped to the caller's identity and this operation; it is not a credential. The same key with a different body is a 409. A request rejected before it is accepted (validation, auth, not found, disabled) does not use up the key. Accepted keys do not expire.",
+            "name": "Idempotency-Key",
+            "in": "header"
+          }
+        ],
         "requestBody": {
           "content": {
             "application/json": {
@@ -61635,7 +61648,27 @@
             }
           },
           "400": {
-            "description": "Invalid definition",
+            "description": "Invalid definition, or a malformed Idempotency-Key",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "409": {
+            "description": "Idempotency-Key was already used for a different request",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "410": {
+            "description": "The workflow created under this Idempotency-Key was deleted",
             "content": {
               "application/json": {
                 "schema": {
@@ -62341,6 +62374,7 @@
     "/api/workflows/{id}/trigger": {
       "post": {
         "summary": "Trigger a workflow execution",
+        "description": "With an `Idempotency-Key`, a retry returns the accepted run's `runId` and `skipped` without starting, resuming or waiting for anything, even after the workflow was disabled or edited and whatever state the run is in now.",
         "tags": [
           "Workflows"
         ],
@@ -62357,6 +62391,17 @@
             "required": true,
             "name": "id",
             "in": "path"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "pattern": "^[\\x21-\\x7E]{1,255}$",
+              "description": "Optional client-generated key, 1-255 visible ASCII characters (a UUID works). The first request the server accepts under a key starts one run; a retry with the same key and an equivalent body gets that request's status and body back (with `Idempotent-Replayed: true`) and changes nothing. The key is scoped to the caller's identity and this operation; it is not a credential. The same key with a different body is a 409. A request rejected before it is accepted (validation, auth, not found, disabled) does not use up the key. Accepted keys do not expire."
+            },
+            "required": false,
+            "description": "Optional client-generated key, 1-255 visible ASCII characters (a UUID works). The first request the server accepts under a key starts one run; a retry with the same key and an equivalent body gets that request's status and body back (with `Idempotent-Replayed: true`) and changes nothing. The key is scoped to the caller's identity and this operation; it is not a credential. The same key with a different body is a 409. A request rejected before it is accepted (validation, auth, not found, disabled) does not use up the key. Accepted keys do not expire.",
+            "name": "Idempotency-Key",
+            "in": "header"
           }
         ],
         "responses": {
@@ -62383,7 +62428,7 @@
             }
           },
           "400": {
-            "description": "Workflow is disabled",
+            "description": "Workflow is disabled, or a malformed Idempotency-Key",
             "content": {
               "application/json": {
                 "schema": {
@@ -62411,6 +62456,26 @@
                 }
               }
             }
+          },
+          "409": {
+            "description": "Idempotency-Key was already used for a different request",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "410": {
+            "description": "The workflow triggered under this Idempotency-Key was deleted",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
           }
         }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "2.5.3",
+  "version": "2.5.4",
   "description": "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
   "keywords": [
     "agent-swarm.dev",
@@ -54,7 +54,7 @@
   "config": {
     "name": "agent-swarm"
   },
-  "packageManager": "bun@1.4.3",
+  "packageManager": "bun@1.4.4",
   "workspaces": [
     "apps/ui",
     "apps/templates-ui",
@@ -199,10 +199,10 @@
     "bun": ">=1.3.12"
   },
   "dependencies": {
-    "@agentclientprotocol/sdk": "2.0.1",
+    "@agentclientprotocol/sdk": "2.0.2",
     "@ai-sdk/openai": "^3.0.41",
-    "@anthropic-ai/claude-agent-sdk": "0.3.309",
-    "@anthropic-ai/sdk": "^1.2.0",
+    "@anthropic-ai/claude-agent-sdk": "0.3.310",
+    "@anthropic-ai/sdk": "^1.3.0",
     "@asteasolutions/zod-to-openapi": "^8.0.0",
     "@aws-sdk/client-bedrock": "3.1048.0",
     "@chat-adapter/discord": "4.41.1",

package/plugin/commands/create-pr.md

@@ -31,8 +31,8 @@ You should be working in a repository cloned to `/workspace/personal/<repo-name>
    - **Show the change, do not narrate it.** Aim for about 250 prose words; code blocks, mermaid, tables and `<details>` do not count. No file-by-file changelog: that belongs in your task output.
    - **Review map**: build it from `git diff --stat <base>...HEAD`. One row per area, biggest risk first, with `(+N/-M)`, a depth (🔍 deep, 👀 skim, ⏭ skip for tests and generated files) and what could break.
    - **Change outline**: 1 or 2 views of the shape of the change. Pseudocode with `+`/`-` lines for logic, mermaid for flow, a tree with paths on the nodes for structure.
-   - **Swarm provenance** (when you run in the swarm): fill it from your task context. Link the task (`$APP_URL/tasks/<taskId>`) and its tree (`$APP_URL/sessions/<rootTaskId>`), the Slack permalink of the ask if the task came from Slack, any workflow run, and the plan or research as an `agent-fs share-create` link plus its durable `live.agent-fs.dev` path. These auth-gated links go in this section only.
-   - **Media**: images and mp4s as GitHub user attachments (`github-attach` skill), docs as `agent-fs share-create` links. Never a presigned agent-fs URL for docs or videos.
+   - **Swarm provenance** (when you run in the swarm): fill it from your task context. Link the task (`$APP_URL/tasks/<taskId>`) and its tree (`$APP_URL/sessions/<rootTaskId>`), the Slack permalink of the ask if the task came from Slack, any workflow run, and the plan or research as its agent-fs live app link (`${AGENT_FS_LIVE_URL}/file/~/<org>/<drive>/<path>`). These auth-gated links go in this section only.
+   - **Media**: images and mp4s as GitHub user attachments (`github-attach` skill), docs as the agent-fs live app link under Swarm provenance (an `agent-fs share-create` link only when the requester asks for one or a reader has no agent-fs login). Never a presigned agent-fs URL for docs or videos.
 6. **Create the PR/MR** using `gh pr create` or `glab mr create`. `gh pr create --body` does not apply the repo template, so write the filled description to a file and pass it with `--body-file <file>`.
 7. **Check CI status** — After creating the PR, wait ~30 seconds, then check CI with `gh pr checks <pr-number>` (GitHub) or `glab mr view --json pipelines` (GitLab). If any check is failing, investigate the failure, fix it, push the fix, and re-check. Repeat until CI is green.
 8. **Report** the PR/MR URL and CI status.

package/plugin/pi-skills/create-pr/SKILL.md

@@ -31,8 +31,8 @@ You should be working in a repository cloned to `/workspace/personal/<repo-name>
    - **Show the change, do not narrate it.** Aim for about 250 prose words; code blocks, mermaid, tables and `<details>` do not count. No file-by-file changelog: that belongs in your task output.
    - **Review map**: build it from `git diff --stat <base>...HEAD`. One row per area, biggest risk first, with `(+N/-M)`, a depth (🔍 deep, 👀 skim, ⏭ skip for tests and generated files) and what could break.
    - **Change outline**: 1 or 2 views of the shape of the change. Pseudocode with `+`/`-` lines for logic, mermaid for flow, a tree with paths on the nodes for structure.
-   - **Swarm provenance** (when you run in the swarm): fill it from your task context. Link the task (`$APP_URL/tasks/<taskId>`) and its tree (`$APP_URL/sessions/<rootTaskId>`), the Slack permalink of the ask if the task came from Slack, any workflow run, and the plan or research as an `agent-fs share-create` link plus its durable `live.agent-fs.dev` path. These auth-gated links go in this section only.
-   - **Media**: images and mp4s as GitHub user attachments (`github-attach` skill), docs as `agent-fs share-create` links. Never a presigned agent-fs URL for docs or videos.
+   - **Swarm provenance** (when you run in the swarm): fill it from your task context. Link the task (`$APP_URL/tasks/<taskId>`) and its tree (`$APP_URL/sessions/<rootTaskId>`), the Slack permalink of the ask if the task came from Slack, any workflow run, and the plan or research as its agent-fs live app link (`${AGENT_FS_LIVE_URL}/file/~/<org>/<drive>/<path>`). These auth-gated links go in this section only.
+   - **Media**: images and mp4s as GitHub user attachments (`github-attach` skill), docs as the agent-fs live app link under Swarm provenance (an `agent-fs share-create` link only when the requester asks for one or a reader has no agent-fs login). Never a presigned agent-fs URL for docs or videos.
 6. **Create the PR/MR** using `gh pr create` or `glab mr create`. `gh pr create --body` does not apply the repo template, so write the filled description to a file and pass it with `--body-file <file>`.
 7. **Check CI status** — After creating the PR, wait ~30 seconds, then check CI with `gh pr checks <pr-number>` (GitHub) or `glab mr view --json pipelines` (GitLab). If any check is failing, investigate the failure, fix it, push the fix, and re-check. Repeat until CI is green.
 8. **Report** the PR/MR URL and CI status.