@desplega.ai/agent-swarm 2.5.3 → 2.5.4

package/dist/{cli-ce0ak9ms.js → cli-abs8ndtr.js}

@@ -47,10 +47,10 @@ import {
   checkDependencies2,
   emitBuiltInIntegrationConnectedOnce2,
   init_db3
-} from "./cli-kxawjrxg.js";
+} from "./cli-jb30dzvk.js";
 import {
   getChannelBlockReason2
-} from "./cli-s53vp709.js";
+} from "./cli-eftzyh9y.js";
 import {
   require_dist5,
   require_axios,
@@ -71,7 +71,7 @@ import {
 import {
   taskAttachmentDisplayUrl,
   init_task_attachment_links
-} from "./cli-gpv60278.js";
+} from "./cli-e42vss7b.js";
 import {
   getSlackConfiguration,
   init_config
@@ -6240,7 +6240,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
     return;
   initialized = true;
   try {
-    const impl = await import("./otel-impl-f36byzbd.js");
+    const impl = await import("./otel-impl-v6cc0zve.js");
     await impl.boot(serviceRole, {
       exportConsoleLogs: serviceRole === "api" && isApiLogExportEnabled()
     });
@@ -10085,17 +10085,17 @@ async function initSlackApp2() {
   });
   initialized2 = true;
   app.use(slackInboundOutcomeMiddleware());
-  const { registerMessageHandler } = await import("./handlers-19xr6dnz.js");
-  const { registerCommandHandler } = await import("./commands-t04rt2pc.js");
-  const { registerActionHandlers } = await import("./actions-wv766ghf.js");
-  const { registerWorkObjectHandlers } = await import("./work-objects-xz1a5rqk.js");
+  const { registerMessageHandler } = await import("./handlers-wy1dr6ja.js");
+  const { registerCommandHandler } = await import("./commands-9849dkj6.js");
+  const { registerActionHandlers } = await import("./actions-92mepq03.js");
+  const { registerWorkObjectHandlers } = await import("./work-objects-kfahhjsq.js");
   registerMessageHandler(app);
   registerCommandHandler(app);
   registerActionHandlers(app);
   registerWorkObjectHandlers(app);
-  const { createAssistant } = await import("./assistant-3x8bz3eg.js");
+  const { createAssistant } = await import("./assistant-zyr5kz47.js");
   app.assistant(createAssistant());
-  const { isBlockExternalEnabled, scanExternalChannelsOnBoot } = await import("./external-channel-j1e2p34p.js");
+  const { isBlockExternalEnabled, scanExternalChannelsOnBoot } = await import("./external-channel-e2s028da.js");
   if (isBlockExternalEnabled()) {
     scanExternalChannelsOnBoot(app.client).catch((error) => {
       console.error("[Slack] External channel boot scan failed:", error);
@@ -10108,7 +10108,7 @@ async function startSlackApp2() {
     await initSlackApp2();
   }
   if (app) {
-    const { isSlackRenderV2Enabled } = await import("./render-v2-hgytz8nn.js");
+    const { isSlackRenderV2Enabled } = await import("./render-v2-pjwxvnkw.js");
     if (isSlackRenderV2Enabled())
       await ensureSlackRenderV2Activation2();
     await app.start();

package/dist/{cli-aecdcr77.js → cli-asq5ydm4.js}

@@ -111,6 +111,9 @@ import {
   cancelTask2,
   getRecentlyCancelledTasksForAgent2,
   updateTaskProgress2,
+  getRunLineageBlock,
+  getWorkflowRunStatus,
+  disarmWorkflowTreeRetries,
   getRunningSubWorkflowSteps,
   getSettledChildRunParentSteps,
   init_workflow_runs,
@@ -284,7 +287,6 @@ import {
   getApprovalRequestById2,
   resolveApprovalRequest2,
   cancelApprovalRequestById2,
-  listCancelledApprovalRequestsForRun2,
   getStuckApprovalRuns2,
   getDueWaitStates2,
   getStuckWaitRuns2,
@@ -337,19 +339,19 @@ import {
   recordInlineScriptRun2,
   exports_db,
   init_db3
-} from "./cli-kxawjrxg.js";
+} from "./cli-jb30dzvk.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-99xgw26r.js";
+} from "./cli-ff1tm9n9.js";
 import {
   ensurePricingSeeded2,
   ensureRbacSeeded2,
   ensureModelProfilesSeeded2
-} from "./cli-210xd1f4.js";
+} from "./cli-c61mbdds.js";
 import {
   loadModelsDevCache
-} from "./cli-fsdprwrg.js";
+} from "./cli-sbwsxvtd.js";
 import {
   buildCatalogEntries,
   listModelCatalog,
@@ -359,12 +361,16 @@ import {
   loadModelsCatalog,
   requestModelCatalogRefresh2,
   startPricingRefreshLoop2
-} from "./cli-n45mr7zh.js";
+} from "./cli-bvpgr9ny.js";
 import {
   ampPinProviderError,
   ampPinCatalogError,
   ampModelError
 } from "./cli-9s05422w.js";
+import {
+  workflowEventBus2,
+  init_event_bus
+} from "./cli-dabehxhp.js";
 import {
   notifyAutomationPreflightFailure,
   isNeedsSetupFailure,
@@ -421,6 +427,7 @@ import {
   isForeachChildOwned,
   parkAndDriveForeach,
   runForeachDrive,
+  resolveForeachParent,
   stepFailureMode,
   generateEdges,
   resolveValidationPort,
@@ -428,7 +435,7 @@ import {
   definitionNodeIds,
   validateDefinition,
   applyDefinitionPatch
-} from "./cli-jjznk3f7.js";
+} from "./cli-gbfxp48k.js";
 import {
   require_dist2,
   publicEndpointSsrfOptions,
@@ -488,14 +495,14 @@ import {
   deleteApp,
   typecheckScript,
   parseSkillContent
-} from "./cli-p9rafdrb.js";
+} from "./cli-7p4jxgtt.js";
 import {
   buildAuthorizationUrl,
   onAuthorizationRefreshed,
   ensureAuthorizationTokenOrThrow,
   ensureToken,
   ensureTokenOrThrow
-} from "./cli-egjggehm.js";
+} from "./cli-tsma7p8v.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -529,18 +536,14 @@ import {
   getSlackApp2,
   startSlackApp2,
   stopSlackApp2
-} from "./cli-ce0ak9ms.js";
+} from "./cli-abs8ndtr.js";
 import {
   slackCode,
   slackMissingScopeMessage,
   withAutoJoin,
   externalChannelToolError2,
   getChannelBlockReason2
-} from "./cli-s53vp709.js";
-import {
-  workflowEventBus2,
-  init_event_bus
-} from "./cli-dabehxhp.js";
+} from "./cli-eftzyh9y.js";
 import {
   shapeApprovalResolution,
   SubWorkflowExecutor,
@@ -554,11 +557,12 @@ import {
   retryFailedRun2,
   cancelWorkflowRunRows2,
   cancelWorkflowRun2,
+  postTreeApprovalCancellations2,
   resumeWaitState2,
   recoverResolvedWaitState2,
   resumeFromChildRun2,
   initWaitBusSubscriptions2
-} from "./cli-e2ar4bp1.js";
+} from "./cli-x0f2v69c.js";
 import {
   duplicateGuardedQueryKey,
   parseQueryParams,
@@ -585,7 +589,7 @@ import {
   isPublicRoute,
   findRoute,
   route
-} from "./cli-1fc85mvt.js";
+} from "./cli-gwhjmh8g.js";
 import {
   FilesError,
   providerPath,
@@ -596,7 +600,7 @@ import {
 import {
   getRuntimePool2,
   init_db
-} from "./cli-vwn81jbs.js";
+} from "./cli-19202kew.js";
 import {
   getMemoryRaterNames,
   REFERENCES_SOURCE_MAX_LENGTH,
@@ -621,7 +625,7 @@ import {
 import {
   canProvisionKind,
   init_runtime_providers
-} from "./cli-p859hcc8.js";
+} from "./cli-dew6x255.js";
 import {
   findUserById,
   findUserByExternalId,
@@ -636,7 +640,7 @@ import {
   resolveSessionToken,
   fingerprintApiKey,
   init_users
-} from "./cli-e8jyq7d8.js";
+} from "./cli-6a1xg1p7.js";
 import {
   isRbacEnabled,
   decideAdmission,
@@ -714,7 +718,7 @@ import {
   taskAttachmentFetchCommand,
   taskAttachmentDisplayUrl,
   init_task_attachment_links
-} from "./cli-gpv60278.js";
+} from "./cli-e42vss7b.js";
 import {
   getSlackConfiguration,
   init_config
@@ -732,7 +736,7 @@ import {
   init_registry,
   resolveTemplate,
   init_resolver
-} from "./cli-tx00c0h6.js";
+} from "./cli-dqygeeh5.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -774,7 +778,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-y561h5a9.js";
+} from "./cli-xtrz6bzs.js";
 import {
   realtimeBus,
   init_bus
@@ -20082,6 +20086,7 @@ async function poolHarnessModelError(model) {
 // src/extensions/apply-task-create.ts
 init_types();
 init_secret_scrubber();
+init_event_bus();
 
 // src/extensions/dispatcher.ts
 init_db_client();
@@ -20247,6 +20252,8 @@ async function completeIfSettled(runId, ctx) {
     const run = await getWorkflowRun2(runId);
     if (run?.status !== "running")
       return false;
+    if (await getRunLineageBlock(runId))
+      return false;
     const steps = await getWorkflowRunStepsByRunId2(runId);
     if (retryPendingNodeIds(steps).size > 0)
       return false;
@@ -20439,6 +20446,7 @@ async function getRunIdsByStatus(status) {
 }
 // src/workflows/retry-poller.ts
 init_db3();
+init_workflow_runs();
 var pollerTimeout = null;
 function startRetryPoller(registry, intervalMs = 5000) {
   if (pollerTimeout !== null)
@@ -20455,6 +20463,14 @@ function startRetryPoller(registry, intervalMs = 5000) {
           const workflow = await getWorkflow2(run.workflowId);
           if (!workflow)
             continue;
+          const foreachParent = resolveForeachParent(workflow.definition, step.nodeId);
+          if (foreachParent) {
+            if (!await claimRetry(run.id, step.id, { requeueForeachChild: true }))
+              continue;
+            console.log(`[workflows] Retrying foreach item ${step.nodeId} (attempt ${step.retryCount}) for run ${step.runId}`);
+            await runForeachDrive(run.id, foreachParent.id, registry);
+            continue;
+          }
           const node = workflow.definition.nodes.find((n) => n.id === step.nodeId);
           if (!node)
             continue;
@@ -20512,7 +20528,7 @@ function startRetryPoller(registry, intervalMs = 5000) {
               if (!waiting)
                 continue;
               if (result.waitFor === "workflow.child.finished") {
-                const { resumeFromChildRun } = await import("./resume-2dvq348g.js");
+                const { resumeFromChildRun } = await import("./resume-frdtgfa0.js");
                 await resumeFromChildRun(step.id, registry);
               }
             } else {
@@ -20571,13 +20587,23 @@ function startRetryPoller(registry, intervalMs = 5000) {
   }
   pollerTimeout = setTimeout(poll, intervalMs);
 }
-async function claimRetry(runId, stepId) {
+async function claimRetry(runId, stepId, options = {}) {
   return getDbClient2().transaction(async () => {
     const run = await getWorkflowRun2(runId);
     if (!run || !RETRYABLE_RUN_STATUSES.has(run.status))
       return false;
+    if (await getRunLineageBlock(runId)) {
+      await disarmWorkflowTreeRetries([runId], new Date().toISOString());
+      return false;
+    }
+    if (options.requeueForeachChild && run.status === "failed") {
+      await getDbClient2().run(`UPDATE workflow_run_steps SET nextRetryAt = NULL, finishedAt = ?
+          WHERE id = ? AND runId = ? AND status = 'failed' AND nextRetryAt IS NOT NULL`, [new Date().toISOString(), stepId, runId]);
+      return false;
+    }
+    const set = options.requeueForeachChild ? "status = 'pending', nextRetryAt = NULL, error = NULL" : "status = 'running', nextRetryAt = NULL";
     const claimed = await getDbClient2().get(`UPDATE workflow_run_steps
-          SET status = 'running', nextRetryAt = NULL
+          SET ${set}
         WHERE id = ? AND runId = ? AND status = 'failed' AND nextRetryAt IS NOT NULL
         RETURNING id`, [stepId, runId]);
     if (!claimed)
@@ -20593,6 +20619,8 @@ async function completeRunIfSettled(runId, ctx) {
     const run = await getWorkflowRun2(runId);
     if (!run || run.status !== "running" && run.status !== "waiting")
       return;
+    if (await getRunLineageBlock(runId))
+      return;
     const steps = await getWorkflowRunStepsByRunId2(runId);
     const live = steps.some((s) => s.status === "running" || s.status === "waiting" || s.status === "failed" && s.nextRetryAt != null);
     if (live)
@@ -21183,7 +21211,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp } = await import("./app-ag29n14f.js");
+        const { getSlackApp } = await import("./app-ctn8gsgx.js");
         const app = getSlackApp();
         if (!app) {
           return {
@@ -24567,7 +24595,7 @@ function setPreloadedTools(server, names) {
 async function applyPreToolCall(name, args, requestInfo, inputSchema) {
   if (requestInfo.callOrigin !== "mcp")
     return { args };
-  const dispatcher = await import("./dispatcher-nwf9ss0q.js");
+  const dispatcher = await import("./dispatcher-7b8e4z2j.js");
   const result = await dispatcher.dispatchPre("pre.tool.call", { tool: name, args, requestInfo }, inputSchema ? {
     validateModify: async (data) => {
       const schema = normalizeObjectSchema(inputSchema) ?? inputSchema;
@@ -25602,6 +25630,10 @@ var onTaskCreated = observed("task.created", async (data) => {
   if (task)
     await dispatchPost2("post.task.created", { task }, { skipExtensionId: extensionIdForAgent2(task.creatorAgentId) });
 });
+var onTaskBlocked = observed("task.create_blocked", async (data) => {
+  const { skipExtensionId, ...event } = data;
+  await dispatchPost2("post.task.blocked", event, { skipExtensionId });
+});
 var onTaskCompleted = observed("task.completed", async (data) => {
   const task = await taskFrom(data);
   if (!task)
@@ -25829,6 +25861,7 @@ function initExtensionPostBridge() {
     return;
   subscribed = true;
   workflowEventBus2.on("task.created", onTaskCreated);
+  workflowEventBus2.on("task.create_blocked", onTaskBlocked);
   workflowEventBus2.on("task.completed", onTaskCompleted);
   workflowEventBus2.on("task.failed", onTaskFailed);
   workflowEventBus2.on("task.cancelled", onTaskCancelled);
@@ -25849,6 +25882,7 @@ function teardownExtensionPostBridge() {
     return;
   subscribed = false;
   workflowEventBus2.off("task.created", onTaskCreated);
+  workflowEventBus2.off("task.create_blocked", onTaskBlocked);
   workflowEventBus2.off("task.completed", onTaskCompleted);
   workflowEventBus2.off("task.failed", onTaskFailed);
   workflowEventBus2.off("task.cancelled", onTaskCancelled);
@@ -26384,6 +26418,10 @@ function runContext2(event, payload) {
       agentId = requestAgent ?? stringField(payload, "options", "agentId");
       subject = `${stringField(payload, "origin") ?? "?"}: ${snippet(field(payload, "description"))}`;
       break;
+    case "post.task.blocked":
+      agentId = stringField(payload, "requester", "agentId");
+      subject = `${stringField(payload, "origin") ?? "?"}: ${stringField(payload, "extension", "name") ?? "?"}`;
+      break;
     case "pre.task.followUp":
       agentId = stringField(payload, "workerAgentId");
       subject = `task ${stringField(payload, "completedTask", "id") ?? "?"} ${stringField(payload, "status") ?? ""}`.trim();
@@ -26665,10 +26703,48 @@ var MODIFIABLE_OPTION_KEY_SET = new Set(MODIFIABLE_OPTION_KEYS);
 function warnDroppedKey(extensionName, key) {
   console.warn(scrubSecrets(`[extensions] pre.task.create ignored disallowed key "${key}" from extension "${extensionName}"`));
 }
+function scrubFields(fields) {
+  return Object.fromEntries(Object.entries(fields).filter(([, value]) => value !== undefined).map(([key, value]) => [key, typeof value === "string" ? scrubSecrets(value) : value]));
+}
 async function applyPreTaskCreate(args) {
   const creatingExtensionId = extensionIdForAgent2(args.requestInfo?.agentId);
   const creatingExtension = creatingExtensionId ? listRegistered2().find((loaded) => loaded.record.id === creatingExtensionId) : undefined;
   const origin = creatingExtension ? `extension:${creatingExtension.record.name}` : args.origin;
+  const blocked = (reason, extension) => {
+    const { options, requestInfo } = args;
+    const event = {
+      extension,
+      reason: scrubSecrets(reason),
+      origin,
+      source: options.source,
+      requester: scrubFields({
+        userId: options.requestedByUserId,
+        agentId: requestInfo?.agentId ?? options.creatorAgentId,
+        slackUserId: options.slackUserId
+      }),
+      context: scrubFields({
+        contextKey: options.contextKey ?? requestInfo?.contextKey,
+        scheduleId: options.scheduleId,
+        workflowRunId: options.workflowRunId,
+        workflowRunStepId: options.workflowRunStepId,
+        parentTaskId: options.parentTaskId,
+        vcsRepo: options.vcsRepo,
+        vcsNumber: options.vcsNumber,
+        slackChannelId: options.slackChannelId,
+        slackThreadTs: options.slackThreadTs
+      }),
+      description: scrubSecrets(args.description).slice(0, 500)
+    };
+    try {
+      workflowEventBus2.emit("task.create_blocked", {
+        ...event,
+        skipExtensionId: creatingExtensionId
+      });
+    } catch (error) {
+      console.error("[extensions] task.create_blocked event not emitted:", scrubSecrets(error instanceof Error ? error.message : String(error)));
+    }
+    return { kind: "blocked", reason: event.reason, extension };
+  };
   let modelEditor;
   const result = await dispatchPre2("pre.task.create", {
     description: args.description,
@@ -26703,11 +26779,7 @@ async function applyPreTaskCreate(args) {
     }
   });
   if (result.action === "block") {
-    return {
-      kind: "blocked",
-      reason: result.reason,
-      extension: result.extension
-    };
+    return blocked(result.reason, result.extension);
   }
   if (result.action === "continue") {
     return { kind: "proceed", description: args.description, options: args.options };
@@ -26721,11 +26793,7 @@ async function applyPreTaskCreate(args) {
       agentId: options.agentId
     });
     if (modelError) {
-      return {
-        kind: "blocked",
-        reason: `pre.task.create rewrite from extension "${modelEditor.name}" is invalid: ${modelError}`,
-        extension: modelEditor
-      };
+      return blocked(`pre.task.create rewrite from extension "${modelEditor.name}" is invalid: ${modelError}`, modelEditor);
     }
   }
   return {
@@ -34958,7 +35026,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp } = await import("./app-ag29n14f.js");
+    const { getSlackApp } = await import("./app-ctn8gsgx.js");
     const app = getSlackApp();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -35029,7 +35097,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDbClient } = await import("./db-24ck09xy.js");
+  const { getDbClient } = await import("./db-w759qmx0.js");
   await getDbClient().transaction(async (tx) => {
     const row = await tx.get("SELECT metadata FROM oauth_apps WHERE provider = 'jira'");
     if (!row) {
@@ -108424,7 +108492,7 @@ async function reloadGlobalConfigsAndIntegrations() {
   return runWithoutRequestAuth(() => reloadGlobalConfigsAndIntegrationsInner());
 }
 async function reloadGlobalConfigsAndIntegrationsInner() {
-  const { getEmbeddingProvider, resetEmbeddingProvider } = await import("./index-1r8wfpzs.js");
+  const { getEmbeddingProvider, resetEmbeddingProvider } = await import("./index-3n8m9ea2.js");
   const wasEmbeddingsConfigured = getEmbeddingProvider().isConfigured();
   const updated = await loadGlobalConfigsIntoEnv(true);
   await syncTelemetryEnabled("settings").catch((err) => {
@@ -108440,10 +108508,10 @@ async function reloadGlobalConfigsAndIntegrationsInner() {
     integrations.push("embeddings");
   }
   if (!wasEmbeddingsConfigured && isEmbeddingsConfigured) {
-    import("./boot-reembed-5b3d2eea.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+    import("./boot-reembed-w75maga2.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
       console.error("[config-reload] memory backfill failed (non-fatal):", err);
     });
-    import("./boot-reembed-jsmfrpzf.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+    import("./boot-reembed-dwzfttdr.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
       console.error("[config-reload] script backfill failed (non-fatal):", err);
     });
   }
@@ -113453,6 +113521,7 @@ init_db3();
 
 // src/workflows/approval-cancel.ts
 init_db3();
+init_workflow_runs();
 init_rbac();
 var LIVE_RUN_STATUSES = new Set(["running", "waiting"]);
 async function cancelApprovalRequest(input) {
@@ -113527,19 +113596,23 @@ async function cancelApprovalRequestAndRun(id, data) {
     if (!request)
       return null;
     let runCancelled = false;
+    let treeRunIds = [];
     const runId = request.workflowRunId;
     if (runId) {
-      const run = await getWorkflowRun2(runId);
-      if (run && LIVE_RUN_STATUSES.has(run.status)) {
-        runCancelled = await cancelWorkflowRunRows2(runId, data.reason);
+      const status = await getWorkflowRunStatus(runId);
+      if (status && LIVE_RUN_STATUSES.has(status)) {
+        const result = await cancelWorkflowRunRows2(runId, data.reason);
+        runCancelled = result.cancelled;
+        treeRunIds = result.runIds;
       }
     }
     const slackReason = data.slackReason ?? data.reason;
     client.afterCommit(async () => {
       await postApprovalCancellationUpdates([request], slackReason);
-      if (runCancelled && runId) {
-        const others = (await listCancelledApprovalRequestsForRun2(runId)).filter((row) => row.id !== request.id);
-        await postApprovalCancellationUpdates(others, data.reason);
+      if (runCancelled) {
+        await postTreeApprovalCancellations2(treeRunIds, data.reason, {
+          exceptRequestId: request.id
+        });
       }
     });
     return { request, runCancelled };
@@ -136360,7 +136433,7 @@ var registerCancelWorkflowRunTool = (server) => {
   createToolRegistrar(server)("cancel-workflow-run", {
     title: "Cancel Workflow Run",
     annotations: { destructiveHint: true },
-    description: "Cancel a running or waiting workflow run. Cancels all non-terminal steps and their associated tasks.",
+    description: "Cancel a running or waiting workflow run and every child run below it. Cancels their non-terminal steps, tasks, pending approvals and queued retries in one transaction; finished child runs keep their status. Repeating the cancel on a cancelled run finishes any child runs still open.",
     inputSchema: object2({
       runId: string2().uuid().describe("Workflow run ID to cancel"),
       reason: string2().optional().describe("Optional reason for cancellation")

package/dist/{cli-n45mr7zh.js → cli-bvpgr9ny.js}

@@ -4,11 +4,11 @@ import {
   getActivePricingRow2,
   insertPricingRow2,
   init_db3
-} from "./cli-kxawjrxg.js";
+} from "./cli-jb30dzvk.js";
 import {
   loadModelsDevCache,
   buildModelsDevSeedRows
-} from "./cli-fsdprwrg.js";
+} from "./cli-sbwsxvtd.js";
 import {
   setRuntimeModelCatalog,
   init_runtime_model_catalog

package/dist/{cli-210xd1f4.js → cli-c61mbdds.js}

@@ -7,14 +7,14 @@ import {
   tierConfigKey,
   init_model_tier_keys,
   init_db3
-} from "./cli-kxawjrxg.js";
+} from "./cli-jb30dzvk.js";
 import {
   ensureRbacSeedsSynced2,
   init_rbac_roles
-} from "./cli-99xgw26r.js";
+} from "./cli-ff1tm9n9.js";
 import {
   seedPricingFromModelsDev
-} from "./cli-fsdprwrg.js";
+} from "./cli-sbwsxvtd.js";
 import {
   MODEL_TIERS,
   DEFAULT_MODEL_TIER_MAP,

package/dist/{cli-e5bxnjps.js → cli-c952c7ac.js}

@@ -11,16 +11,16 @@ import {
 import {
   summarizeSession
 } from "./cli-mmhj8vd7.js";
+import {
+  getOpenRouterAttributionHeaders,
+  init_openrouter_base_url
+} from "./cli-dfyv0jdy.js";
 import {
   resolveTemplateFromCode,
   resolveTemplateAsync,
   init_resolver,
   init_session_templates
-} from "./cli-tx00c0h6.js";
-import {
-  getOpenRouterAttributionHeaders,
-  init_openrouter_base_url
-} from "./cli-dfyv0jdy.js";
+} from "./cli-dqygeeh5.js";
 import {
   isSessionSummarySkipped,
   init_env_flag

package/dist/{cli-p859hcc8.js → cli-dew6x255.js}

@@ -13,7 +13,7 @@ async function createRuntimeProvider(kind, target = {}) {
       return new StaticRuntimeProvider;
     }
     case "docker": {
-      const { DockerRuntimeProvider } = await import("./docker-nfy2gc8t.js");
+      const { DockerRuntimeProvider } = await import("./docker-s84hjs91.js");
       return new DockerRuntimeProvider;
     }
     case "e2b": {

package/dist/{cli-tx00c0h6.js → cli-dqygeeh5.js}

@@ -385,7 +385,7 @@ agent-fs is the shared drive between agents and people. Documents (reports, dige
 Pages: only for polished artifacts shared with a wider audience or explicitly requested; see \`pages\` skill.
 A tool a person will use, with data and actions: build an app. See the \`apps\` skill.
 Link env: \`APP_URL\` for pages, \`MCP_BASE_URL\` for the API, \`AGENT_FS_LIVE_URL\` for files. Report missing variables.
-For a file anyone outside the swarm opens, use an \`agent-fs share-create\` link; \`AGENT_FS_LIVE_URL\` links are for signed-in teammates.
+Give people the live app link \`\${AGENT_FS_LIVE_URL}/file/~/<org>/<drive>/<path>\`. Make an \`agent-fs share-create\` link only when the requester asks for one or the reader has no agent-fs login.
 `,
     variables: [],
     category: "system"
@@ -482,6 +482,22 @@ Task: {{task}}{{progressLine}}
     ],
     category: "system"
   });
+  registerTemplate({
+    eventType: "system.agent.context.bound_note",
+    header: "",
+    defaultBody: "Context is {{contextTokens}} tokens{{contextShare}}. Keep this task bounded: finish the current step, store-progress, and complete or defer instead of starting new exploration.",
+    variables: [
+      {
+        name: "contextTokens",
+        description: "Prompt size of the latest request (input + cache read + cache write tokens)"
+      },
+      {
+        name: "contextShare",
+        description: `How full the model's context window is, e.g. " (21% of the 1,000,000-token window)". Empty when the window is unknown`
+      }
+    ],
+    category: "system"
+  });
   registerTemplate({
     eventType: "system.agent.cursor.first_message",
     header: "",

package/dist/{cli-gpv60278.js → cli-e42vss7b.js}

@@ -8,12 +8,12 @@ import {
 } from "./cli-4sydckyj.js";
 import {
   init_templates3
-} from "./cli-0ebey9hg.js";
+} from "./cli-j6rktc91.js";
 import {
   resolveTemplateAsync,
   init_resolver,
   init_session_templates
-} from "./cli-tx00c0h6.js";
+} from "./cli-dqygeeh5.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getAppUrl,

package/dist/{cli-s53vp709.js → cli-eftzyh9y.js}

@@ -4,7 +4,7 @@ import {
   claimKv2,
   deleteKv2,
   init_db3
-} from "./cli-kxawjrxg.js";
+} from "./cli-jb30dzvk.js";
 import {
   isEnvFlagEnabled,
   init_env_flag

package/dist/{cli-3ngdk5te.js → cli-ethgy7ha.js}

@@ -6,7 +6,7 @@ import {
   getResolvedConfig2,
   getAllUsers2,
   init_db3
-} from "./cli-kxawjrxg.js";
+} from "./cli-jb30dzvk.js";
 import {
   scrubSecrets,
   init_secret_scrubber