@desplega.ai/agent-swarm 2.5.3 → 2.5.4

package/dist/{cli-99xgw26r.js → cli-ff1tm9n9.js}

@@ -4,7 +4,7 @@ import {
   invalidateTelemetryUserRole,
   init_telemetry_identity,
   init_db3
-} from "./cli-kxawjrxg.js";
+} from "./cli-jb30dzvk.js";
 import {
   PermissionVerbSchema,
   init_rbac

package/dist/{cli-ewm3pwbq.js → cli-g9vd9ece.js}

@@ -1,12 +1,11 @@
 import {
-  runStopHookSessionSummarySubprocess
-} from "./cli-w1zwctj2.js";
+  contextStatePath,
+  contextBoundNoteMarkerPath,
+  recordContextState
+} from "./cli-2655k16q.js";
 import {
-  CONTEXT_FORMULA,
-  getContextWindowSize,
-  computeContextUsedUnified,
-  clampContextPercent
-} from "./cli-a5ebc95n.js";
+  runStopHookSessionSummarySubprocess
+} from "./cli-9j129brq.js";
 import {
   redactRateLimitEventLine,
   SessionErrorTracker,
@@ -37,6 +36,13 @@ import {
 import {
   fetchInstalledMcpServers
 } from "./cli-bst1vp7e.js";
+import {
+  CONTEXT_FORMULA,
+  getContextWindowSize,
+  computeContextUsedUnified,
+  clampContextPercent,
+  init_context_window
+} from "./cli-0shx9j93.js";
 import {
   resolveClaudeTransport,
   isClaudeBridgeEffective
@@ -47,7 +53,7 @@ import {
 import {
   withFileLock,
   init_file_lock
-} from "./cli-gpv60278.js";
+} from "./cli-e42vss7b.js";
 import {
   CLAUDE_CREDENTIALS_HINT,
   validateClaudeCredentials,
@@ -95,6 +101,7 @@ import {
 import { homedir as homedir2 } from "node:os";
 import { dirname, join as join2, resolve as resolve2 } from "node:path";
 import { promisify } from "node:util";
+init_context_window();
 init_credentials();
 init_env_flag();
 init_file_lock();
@@ -284,6 +291,7 @@ function mergeClaudeSettingsArgs(argLists, cwd) {
 }
 
 // src/providers/claude-session-events.ts
+init_context_window();
 init_secret_scrubber();
 function finiteNumber(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : undefined;
@@ -348,6 +356,7 @@ function normalizeClaudeMessage(json, state) {
   let model;
   let contextWindowSize;
   let assistantText;
+  let requestContextTokens;
   if (json.type === "system" && json.subtype === "init" && json.session_id) {
     sessionId = json.session_id;
     model = typeof json.model === "string" ? json.model : undefined;
@@ -416,6 +425,9 @@ function normalizeClaudeMessage(json, state) {
         outputTokens: usage.output_tokens ?? 0,
         contextFormula: CONTEXT_FORMULA
       });
+      if (!json.parent_tool_use_id) {
+        requestContextTokens = (usage.input_tokens ?? 0) + (usage.cache_read_input_tokens ?? 0) + (usage.cache_creation_input_tokens ?? 0);
+      }
     }
   }
   if (json.type === "user" && Array.isArray(json.message?.content)) {
@@ -434,6 +446,7 @@ function normalizeClaudeMessage(json, state) {
     contextWindowSize,
     cost,
     assistantText,
+    requestContextTokens,
     isResult: json.type === "result"
   };
 }
@@ -475,9 +488,16 @@ async function writeTaskFile(key, data) {
   return filePath;
 }
 async function cleanupTaskFile2(key) {
-  try {
-    await unlink(getTaskFilePath(key));
-  } catch {}
+  const taskFilePath = getTaskFilePath(key);
+  for (const path of [
+    taskFilePath,
+    contextStatePath(taskFilePath),
+    contextBoundNoteMarkerPath(taskFilePath)
+  ]) {
+    try {
+      await unlink(path);
+    } catch {}
+  }
 }
 function parseClaudeBinary(raw) {
   const trimmed = (raw ?? "claude").trim();
@@ -911,6 +931,7 @@ class ClaudeSession {
   systemPromptFile;
   appliedReasoningEffort;
   lastAssistantText = "";
+  lastContextTokens;
   transcript;
   backgroundKeepalive;
   deliverSteering;
@@ -1174,6 +1195,10 @@ ${scrubSecrets(stderrOutput)}`);
         setCost(normalized.cost);
       if (normalized.assistantText)
         this.lastAssistantText = normalized.assistantText;
+      if (normalized.requestContextTokens !== undefined && normalized.requestContextTokens !== this.lastContextTokens) {
+        this.lastContextTokens = normalized.requestContextTokens;
+        recordContextState(getTaskFilePath(this.taskFileKey), normalized.requestContextTokens, this.model);
+      }
       this.transcript.push(...normalized.transcriptEntries);
       for (const event of normalized.events)
         this.emit(event);
@@ -1236,7 +1261,7 @@ class ClaudeAdapter2 {
     if (transport === "sdk" && isClaudeBridgeEffective(sourceEnv)) {
       throw new Error("CLAUDE_TRANSPORT=sdk cannot run with an effective Claude Bridge configuration. Select CLI transport or disable the bridge.");
     }
-    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-fkbyk66x.js") : undefined;
+    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-7b7whkaq.js") : undefined;
     claudeSdk?.validateClaudeSdkAdditionalArgs([
       ...claudeBinaryArgv.slice(1),
       ...config.additionalArgs ?? []

package/dist/{cli-jjznk3f7.js → cli-gbfxp48k.js}

@@ -8,7 +8,11 @@ import {
   updateAgentStatus2,
   updateAgentMaxTasks2,
   getActiveTaskCount2,
+  approvalCancellationNotificationKey,
+  init_approvals,
   getTaskById2,
+  getRunLineageBlock,
+  getWorkflowRunStatus,
   getChildWorkflowRunId,
   isParentStepAttemptCurrent,
   createForeachChildSteps,
@@ -51,18 +55,18 @@ import {
   releaseApprovalCancellationNotificationClaim2,
   updateApprovalRequestNotifications2,
   init_db3
-} from "./cli-kxawjrxg.js";
+} from "./cli-jb30dzvk.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-e8xyjvfc.js";
 import {
   getSlackApp2
-} from "./cli-ce0ak9ms.js";
+} from "./cli-abs8ndtr.js";
 import {
   externalChannelToolError2,
   isBlockExternalEnabled2,
   getChannelBlockReason2
-} from "./cli-s53vp709.js";
+} from "./cli-eftzyh9y.js";
 import {
   DEFAULT_MODEL,
   resolveCredential
@@ -70,7 +74,7 @@ import {
 import {
   revokeRuntimeTokensForRuntime,
   init_users
-} from "./cli-e8jyq7d8.js";
+} from "./cli-6a1xg1p7.js";
 import {
   TERMINAL_TASK_STATUSES,
   init_types
@@ -84,18 +88,18 @@ import {
   selectCredential,
   init_credentials
 } from "./cli-zw88zjba.js";
-import {
-  deepInterpolate,
-  init_template,
-  resolveTemplate,
-  init_resolver
-} from "./cli-tx00c0h6.js";
 import {
   DEFAULT_OPENROUTER_BASE_URL,
   getOpenRouterBaseUrl,
   getOpenRouterAttributionHeaders,
   init_openrouter_base_url
 } from "./cli-dfyv0jdy.js";
+import {
+  deepInterpolate,
+  init_template,
+  resolveTemplate,
+  init_resolver
+} from "./cli-dqygeeh5.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -145,7 +149,7 @@ async function notifyAutomationPreflightFailure(preflight) {
     return;
   }
   try {
-    const { getSlackApp } = await import("./app-ag29n14f.js");
+    const { getSlackApp } = await import("./app-ctn8gsgx.js");
     const app = getSlackApp();
     if (!app) {
       console.warn("[Automation Preflight] Slack not available, cannot send notification");
@@ -958,6 +962,7 @@ init_secret_scrubber();
 
 // src/workflows/approval-notifications.ts
 init_db3();
+init_approvals();
 init_resolver();
 
 // src/slack/dm.ts
@@ -1124,7 +1129,7 @@ async function postApprovalCancellationUpdates(approvals, reason, client = getSl
     for (const notification of slackThreads) {
       if (notification.channel !== "slack" || !notification.messageTs)
         continue;
-      const notificationKey = `${notification.target}:${notification.messageTs}`;
+      const notificationKey = approvalCancellationNotificationKey(notification.target, notification.messageTs);
       const claim = await claimApprovalCancellationNotification2(approval.id, notificationKey);
       if (!claim)
         continue;
@@ -3441,16 +3446,18 @@ class SystemOneDecisionExecutor extends BaseExecutor {
 
 // src/workflows/foreach-join.ts
 init_db3();
+init_workflow_runs();
 
 // src/workflows/checkpoint.ts
 init_db3();
+init_workflow_runs();
 async function holdsFence(runId, stepId, fence) {
   const row = await getDbClient2().get(`SELECT 1 AS found
        FROM workflow_run_steps s
        JOIN workflow_runs r ON r.id = s.runId
       WHERE s.id = ? AND s.runId = ? AND s.status = 'running' AND s.retryCount = ?
         AND r.status IN ('running', 'waiting')`, [stepId, runId, fence.retryCount]);
-  return row != null;
+  return row != null && await getRunLineageBlock(runId) == null;
 }
 async function checkpointStep(runId, stepId, nodeId, result, ctx, options = {}) {
   return getDbClient2().transaction(async () => {
@@ -3511,6 +3518,8 @@ async function checkpointStepFailure(runId, stepId, error, retryCount, retryPoli
 }
 async function checkpointStepWaiting(runId, stepId, ctx, options = {}) {
   return getDbClient2().transaction(async () => {
+    if (await getRunLineageBlock(runId))
+      return false;
     const step = await getDbClient2().get(`UPDATE workflow_run_steps
          SET status = 'waiting'
        WHERE id = ? AND runId = ? AND status = 'running'
@@ -3547,6 +3556,7 @@ function calculateBackoff(policy, attempt) {
 
 // src/workflows/foreach-driver.ts
 init_db3();
+init_workflow_runs();
 
 // src/workflows/constants.ts
 var FAILED_TASK_OUTPUT_PREFIX = "[FAILED:";
@@ -3943,12 +3953,16 @@ async function resolveRenderedWorkflowInputs(input) {
 async function startWorkflowExecution2(workflow, triggerData, registry, options = {}) {
   const preflight = preflightAutomation(workflowPreflightInput(workflow), await getAutomationSetupStates());
   if (preflight.state === "needs_setup" && !options.parentStepId) {
-    const { runId, recorded } = await recordWorkflowPreflightFailure({
-      workflowId: workflow.id,
-      triggerType: options.triggerType ?? "manual",
-      triggerData,
-      failureReason: preflight.failureReason,
-      createdBy: options.requestedByUserId
+    const { runId, recorded } = await getDbClient2().transaction(async () => {
+      const failure = await recordWorkflowPreflightFailure({
+        workflowId: workflow.id,
+        triggerType: options.triggerType ?? "manual",
+        triggerData,
+        failureReason: preflight.failureReason,
+        createdBy: options.requestedByUserId
+      });
+      await options.accept?.({ runId: failure.runId, skipped: false });
+      return failure;
     });
     if (recorded)
       await notifyAutomationPreflightFailure(preflight);
@@ -4067,6 +4081,7 @@ async function createRunWithInitialState(workflow, triggerData, options, initial
     });
     await updateWorkflowRun2(runId, initial.status ? { status: initial.status, error: initial.error, finishedAt: initial.finishedAt } : { context: initial.context });
     const preflightAlert = initial.status === "failed" && initial.preflight ? await isFirstWorkflowPreflightFailureToday(workflow.id, runId) : undefined;
+    await options.accept?.({ runId, skipped: initial.status === "skipped" });
     return { runId, created: true, preflightAlert };
   });
 }
@@ -4228,6 +4243,8 @@ async function walkGraphOwned(def, runId, ctx, startNodes, registry, workflowId,
     const run = await getWorkflowRun2(runId);
     if (!run || run.status !== "running")
       return;
+    if (await getRunLineageBlock(runId))
+      return;
     const finalSteps = await getWorkflowRunStepsByRunId2(runId);
     if (hasRunningStep(finalSteps))
       return;
@@ -4336,6 +4353,8 @@ async function executeStep(def, runId, ctx, node, registry, workflowId, secretKe
     if (!run || run.status !== "running" && run.status !== "waiting") {
       return { halted: true };
     }
+    if (await getRunLineageBlock(runId))
+      return { halted: true };
     if (node.type !== "foreach") {
       const current = await getCurrentStepForNode2(runId, node.id, getAllPredecessors(def, node.id));
       if (current && (current.status !== "running" || executingSteps.has(current.id))) {
@@ -4517,7 +4536,7 @@ async function runClaimedStep(def, runId, ctx, node, registry, existingStep, ste
     }
     const waiting = await checkpointStepWaiting(runId, stepId, ctx);
     if (waiting && result.waitFor === "workflow.child.finished") {
-      const { resumeFromChildRun } = await import("./resume-2dvq348g.js");
+      const { resumeFromChildRun } = await import("./resume-frdtgfa0.js");
       await resumeFromChildRun(stepId, registry);
     }
     return { outcome: waiting ? "waiting" : "completed", successors: [] };
@@ -4809,7 +4828,7 @@ class ForeachExecutor extends BaseExecutor {
       };
     }));
     const childSteps = (await this.deps.db.getWorkflowRunStepsByRunId(meta.runId)).filter((step) => parseSyntheticNodeId(step.nodeId)?.parentNodeId === meta.nodeId);
-    if (childSteps.every((step) => FOREACH_TERMINAL_STEP_STATUSES.has(step.status))) {
+    if (childSteps.every(isForeachChildSettled)) {
       return { status: "success", output: buildForeachAggregate(childSteps) };
     }
     return {
@@ -4979,7 +4998,7 @@ async function runForeachDrive(runId, parentNodeId, registry) {
     if (drive.successors.length > 0) {
       await walkGraph(workflow.definition, runId, ctx, drive.successors, registry, workflow.id, getSecretInputKeys(workflow.input));
     } else {
-      const { finalizeOrWait } = await import("./resume-2dvq348g.js");
+      const { finalizeOrWait } = await import("./resume-frdtgfa0.js");
       await finalizeOrWait(runId);
     }
     return drive;
@@ -5018,6 +5037,11 @@ async function claimChildren(def, runId, parentNode) {
   const claimed = [];
   try {
     await getDbClient2().transaction(async () => {
+      const status = await getWorkflowRunStatus(runId);
+      if (status !== "running" && status !== "waiting")
+        return;
+      if (await getRunLineageBlock(runId))
+        return;
       const children = latestForeachChildren(def, parentNode.id, await getWorkflowRunStepsByRunId2(runId));
       for (const child of children) {
         if (child.status === "running" && !ownedChildren.has(child.id)) {
@@ -5025,7 +5049,7 @@ async function claimChildren(def, runId, parentNode) {
           claimed.push(child);
         }
       }
-      const inFlight = children.filter((child) => child.status === "running" || child.status === "waiting").length;
+      const inFlight = children.filter((child) => child.status === "running" || child.status === "waiting" || isRetryPending(child)).length;
       let free = foreachConcurrencyCap(parentNode) - inFlight;
       for (const child of children) {
         if (free <= 0)
@@ -5121,7 +5145,7 @@ async function startChild(input) {
     const parked = await getDbClient2().get("UPDATE workflow_run_steps SET status = 'waiting' WHERE id = ? AND status = 'running' RETURNING id", [child.id]);
     if (parked && result.waitFor === "workflow.child.finished") {
       ownedChildren.delete(child.id);
-      const { resumeFromChildRun } = await import("./resume-2dvq348g.js");
+      const { resumeFromChildRun } = await import("./resume-frdtgfa0.js");
       await resumeFromChildRun(child.id, registry);
     }
     return null;
@@ -5162,6 +5186,12 @@ var FOREACH_TERMINAL_STEP_STATUSES = new Set([
   "cancelled",
   "skipped"
 ]);
+function isRetryPending(step) {
+  return step.status === "failed" && step.nextRetryAt != null;
+}
+function isForeachChildSettled(step) {
+  return FOREACH_TERMINAL_STEP_STATUSES.has(step.status) && !isRetryPending(step);
+}
 function parseSyntheticNodeId(nodeId) {
   const separatorIndex = nodeId.indexOf("#");
   if (separatorIndex <= 0 || separatorIndex === nodeId.length - 1)
@@ -5184,7 +5214,7 @@ async function joinForeach(def, runId, childStep, ctx) {
     throw new Error(`Step "${childStep.nodeId}" is not a foreach child`);
   }
   const children = latestForeachChildren(def, parent.id, await getWorkflowRunStepsByRunId2(runId));
-  if (children.some((step) => !FOREACH_TERMINAL_STEP_STATUSES.has(step.status))) {
+  if (children.some((step) => !isForeachChildSettled(step))) {
     return { joined: false, parentNodeId: parent.id, successors: [] };
   }
   const parentStep = await getLatestStepForNode2(runId, parent.id);
@@ -5274,6 +5304,8 @@ async function settleForeachChild(def, runId, childStepId, outcome, ctx, options
     });
     if (run.status !== "running" && run.status !== "waiting")
       return unclaimed;
+    if (await getRunLineageBlock(runId))
+      return unclaimed;
     if (outcome.status !== "completed" && effectiveFailurePolicy(parent, def) === "fail-fast") {
       const reason = options.runError ?? outcome.error ?? `foreach item ${current.nodeId} failed`;
       await cancelQueuedForeachChildren(def, runId, parent.id, current.nodeId);
@@ -5303,9 +5335,11 @@ async function cancelQueuedForeachChildren(def, runId, parentNodeId, failedChild
   await getDbClient2().transaction(async () => {
     const children = latestForeachChildren(def, parentNodeId, await getWorkflowRunStepsByRunId2(runId));
     for (const child of children) {
-      if (child.status !== "pending")
+      if (child.status !== "pending" && !isRetryPending(child))
         continue;
-      const row = await getDbClient2().get("UPDATE workflow_run_steps SET status = 'cancelled', error = ?, finishedAt = ? WHERE id = ? AND status = 'pending' RETURNING id", [error, finishedAt, child.id]);
+      const row = await getDbClient2().get(`UPDATE workflow_run_steps SET status = 'cancelled', error = ?, finishedAt = ?, nextRetryAt = NULL
+          WHERE id = ? AND (status = 'pending' OR (status = 'failed' AND nextRetryAt IS NOT NULL))
+          RETURNING id`, [error, finishedAt, child.id]);
       if (row)
         cancelled++;
     }
@@ -5732,4 +5766,4 @@ function applyDefinitionPatch(def, patch) {
   return { definition: patchedDef, errors };
 }
 
-export { notifyAutomationPreflightFailure, automationIntegrationFixUrl, isNeedsSetupFailure, preflightAutomation, renderAutomationTokens, getAutomationSetupStates, schedulePreflightInput, listEnabledAutomationPreflightInputs, recordSchedulePreflightFailure, BaseExecutor, AGENT_MAX_TASKS_CONFIG_KEY, reconcileAgentMaxTasksPolicy, resetAgentMaxTasksMirror, upsertSwarmConfigWithPolicyMirror, runtimeStaleThresholdMinutes, upsertRuntimeInstance, getRuntimeInstanceById, insertProvisioningRuntime, markRuntimeTerminated, touchRuntimeInstance, markRuntimeInstanceOffline, countActiveRuntimeInstancesForAgent, listRuntimeInstancesForAgent, setRuntimeCredentialReady, reconcileAgentStatusFromRuntimes, agentsWithLiveRuntime, expireStaleRuntimeInstances, listRuntimeInstancesForPool, ConfigQuestionSettingsSchema, ConfigStateSchema, readConfigState, normalizeApprovalQuestions, isConfigQuestion, parseConfigAnswer, skippedConfigResult, keptConfigResult, applyConfigAnswer, resolveSlackConversationId, dispatchApprovalNotifications, postApprovalCancellationUpdates, createApprovalFollowUpTask, HumanInTheLoopExecutor, resolveWorkflowLlmConfig, SYSTEM_ONE_PROVIDER_IDS, SystemOneExtractionExecutor, SYSTEM_ONE_DECISION_NODE_TYPE, SystemOneDecisionConfigSchema, SystemOneDecisionExecutor, checkpointStep, checkpointStepFailure, checkpointStepWaiting, FAILED_TASK_OUTPUT_PREFIX, FOREACH_ITEMS_WAIT_FOR, loadCompletedStepRouting, resolveInputValue, getSecretInputKeys, validateJsonSchema, findJsonSchemaShapeErrors, getMaxWorkflowStepsPerRun, findWorkflowReadinessProblems, formatReadinessProblems, workflowSaveWarnings, withSaveWarnings, runStepValidation, TriggerSchemaError, startWorkflowExecution2, ParentStepNotCurrentError, failRunOnUnreadableReplay, isWorkflowRunActive, isStepExecuting, holdWorkflowRun, walkGraph, hasRunningStep, findReadyNodes, scriptBodyInterpolationError, ForeachExecutor, rebuildNodeExecutionInput, isForeachChildOwned, parkAndDriveForeach, startForeachDrive, runForeachDrive, FOREACH_TERMINAL_STEP_STATUSES, parseSyntheticNodeId, resolveForeachParent, settleForeachChild, resolveStepNode, stepFailureMode, getNextTargets, generateEdges, resolveValidationPort, getSuccessors, definitionNodeIds, validateDefinition, applyDefinitionPatch };
+export { notifyAutomationPreflightFailure, automationIntegrationFixUrl, isNeedsSetupFailure, preflightAutomation, renderAutomationTokens, getAutomationSetupStates, schedulePreflightInput, listEnabledAutomationPreflightInputs, recordSchedulePreflightFailure, BaseExecutor, AGENT_MAX_TASKS_CONFIG_KEY, reconcileAgentMaxTasksPolicy, resetAgentMaxTasksMirror, upsertSwarmConfigWithPolicyMirror, runtimeStaleThresholdMinutes, upsertRuntimeInstance, getRuntimeInstanceById, insertProvisioningRuntime, markRuntimeTerminated, touchRuntimeInstance, markRuntimeInstanceOffline, countActiveRuntimeInstancesForAgent, listRuntimeInstancesForAgent, setRuntimeCredentialReady, reconcileAgentStatusFromRuntimes, agentsWithLiveRuntime, expireStaleRuntimeInstances, listRuntimeInstancesForPool, ConfigQuestionSettingsSchema, ConfigStateSchema, readConfigState, normalizeApprovalQuestions, isConfigQuestion, parseConfigAnswer, skippedConfigResult, keptConfigResult, applyConfigAnswer, resolveSlackConversationId, dispatchApprovalNotifications, postApprovalCancellationUpdates, createApprovalFollowUpTask, HumanInTheLoopExecutor, resolveWorkflowLlmConfig, SYSTEM_ONE_PROVIDER_IDS, SystemOneExtractionExecutor, SYSTEM_ONE_DECISION_NODE_TYPE, SystemOneDecisionConfigSchema, SystemOneDecisionExecutor, checkpointStep, checkpointStepFailure, checkpointStepWaiting, FAILED_TASK_OUTPUT_PREFIX, FOREACH_ITEMS_WAIT_FOR, loadCompletedStepRouting, resolveInputValue, getSecretInputKeys, validateJsonSchema, findJsonSchemaShapeErrors, getMaxWorkflowStepsPerRun, findWorkflowReadinessProblems, formatReadinessProblems, workflowSaveWarnings, withSaveWarnings, runStepValidation, TriggerSchemaError, startWorkflowExecution2, ParentStepNotCurrentError, failRunOnUnreadableReplay, isWorkflowRunActive, isStepExecuting, holdWorkflowRun, walkGraph, hasRunningStep, findReadyNodes, scriptBodyInterpolationError, ForeachExecutor, rebuildNodeExecutionInput, isForeachChildOwned, parkAndDriveForeach, startForeachDrive, runForeachDrive, FOREACH_TERMINAL_STEP_STATUSES, isRetryPending, parseSyntheticNodeId, resolveForeachParent, settleForeachChild, resolveStepNode, stepFailureMode, getNextTargets, generateEdges, resolveValidationPort, getSuccessors, definitionNodeIds, validateDefinition, applyDefinitionPatch };

package/dist/{cli-z21whrrg.js → cli-gn5af0x5.js}

@@ -66,7 +66,7 @@ import {
   getStaleApprovalRequests2,
   upsertKv2,
   init_db3
-} from "./cli-kxawjrxg.js";
+} from "./cli-jb30dzvk.js";
 import {
   poolTaskRunsOnHarness,
   isRuntimePoolWakeable,
@@ -87,48 +87,48 @@ import {
   createRerouteDecisionTask,
   createPoolStarvationDecisionTask,
   canClaim
-} from "./cli-aecdcr77.js";
+} from "./cli-asq5ydm4.js";
 import {
   runtimeStaleThresholdMinutes,
   countActiveRuntimeInstancesForAgent,
   agentsWithLiveRuntime,
   expireStaleRuntimeInstances,
   createApprovalFollowUpTask
-} from "./cli-jjznk3f7.js";
+} from "./cli-gbfxp48k.js";
 import {
   listRuntimePools2,
   init_db
-} from "./cli-vwn81jbs.js";
+} from "./cli-19202kew.js";
 import {
   remediateStalledRuntime
-} from "./cli-svrj71pg.js";
+} from "./cli-1r5ad7j5.js";
 import {
   runSavedScriptAsAgent
-} from "./cli-p9rafdrb.js";
+} from "./cli-7p4jxgtt.js";
 import {
   mintToken,
   init_users
-} from "./cli-e8jyq7d8.js";
+} from "./cli-6a1xg1p7.js";
 import {
   TERMINAL_TASK_STATUSES,
   SUPERSEDED_WORKFLOW_TASK_REASON,
   init_types
 } from "./cli-mz9afxxf.js";
-import {
-  registerTemplate,
-  init_registry,
-  resolveTemplate,
-  init_resolver
-} from "./cli-tx00c0h6.js";
 import {
   DEFAULT_OPENROUTER_BASE_URL,
   getOpenRouterBaseUrl,
   init_openrouter_base_url
 } from "./cli-dfyv0jdy.js";
+import {
+  registerTemplate,
+  init_registry,
+  resolveTemplate,
+  init_resolver
+} from "./cli-dqygeeh5.js";
 import {
   init_package,
   package_default
-} from "./cli-y561h5a9.js";
+} from "./cli-xtrz6bzs.js";
 import {
   isEnvFlagEnabled,
   init_env_flag

package/dist/{cli-1fc85mvt.js → cli-gwhjmh8g.js}

@@ -9,16 +9,16 @@ import {
   init_active_sessions,
   getSteeringMessageById2,
   init_db3
-} from "./cli-kxawjrxg.js";
+} from "./cli-jb30dzvk.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-99xgw26r.js";
+} from "./cli-ff1tm9n9.js";
 import {
   findUserById,
   findUserByExternalId,
   init_users
-} from "./cli-e8jyq7d8.js";
+} from "./cli-6a1xg1p7.js";
 import {
   isRbacEnabled,
   can,
@@ -503,7 +503,7 @@ function route(def) {
       try {
         const rawBody = def.body ? await parseBody(req, def.maxBodyBytes) : undefined;
         if (def.session && "bodyTaskIds" in def.session) {
-          const { bodySessionDenial } = await import("./session-access-7f21ekq9.js");
+          const { bodySessionDenial } = await import("./session-access-fpez4y5q.js");
           const denial = await bodySessionDenial(req, def.session.bodyTaskIds(rawBody));
           if (denial) {
             jsonError(res, denial, 403);

package/dist/{cli-avdvgcay.js → cli-hh5we352.js}

@@ -1,8 +1,7 @@
 import {
-  CONTEXT_FORMULA,
-  getContextWindowSize,
-  clampContextPercent
-} from "./cli-a5ebc95n.js";
+  contextBoundNoteThreshold,
+  createContextBoundNote
+} from "./cli-2655k16q.js";
 import {
   swarmRuntimeInstanceId
 } from "./cli-e8xyjvfc.js";
@@ -23,13 +22,19 @@ import {
   autoIndexMemoryFile,
   fetchConcurrentContext,
   summarizeTranscript
-} from "./cli-e5bxnjps.js";
+} from "./cli-c952c7ac.js";
 import {
   applyReasoningEffort
 } from "./cli-bn0rewsy.js";
 import {
   fetchInstalledMcpServers
 } from "./cli-bst1vp7e.js";
+import {
+  CONTEXT_FORMULA,
+  getContextWindowSize,
+  clampContextPercent,
+  init_context_window
+} from "./cli-0shx9j93.js";
 import {
   splitCredentialPool,
   openAICompatibleKeyLabels,
@@ -68,6 +73,7 @@ import {
 init_src2();
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
+init_context_window();
 init_credentials();
 init_env_flag();
 init_openrouter_base_url();
@@ -502,6 +508,7 @@ class OpencodeSession {
   toolNames = new Map;
   textByMessage = new Map;
   transcript = [];
+  observeContextBound;
   constructor(host, _sessionId, model, swarm, cwd, appliedReasoningEffort = null, billing) {
     this.host = host;
     this._sessionId = _sessionId;
@@ -513,6 +520,17 @@ class OpencodeSession {
     this.completionPromise = new Promise((resolve) => {
       this.completionResolve = resolve;
     });
+    this.observeContextBound = createContextBoundNote({
+      threshold: contextBoundNoteThreshold(swarm.env ?? process.env),
+      model: () => this.model,
+      canDeliver: () => !this.completed && !this.aborted,
+      inject: (note) => host.sessions.synthetic({
+        sessionID: _sessionId,
+        text: note,
+        delivery: "steer",
+        resume: false
+      })
+    });
   }
   get sessionId() {
     return this._sessionId;
@@ -624,6 +642,7 @@ class OpencodeSession {
         this.steps++;
         const t = ev.data.tokens;
         const contextUsed = t.input + t.cache.read + t.cache.write + t.output;
+        this.observeContextBound(t.input + t.cache.read + t.cache.write);
         const contextTotal = getContextWindowSize(this.model || "default");
         if (contextTotal > 0 && contextUsed > 0) {
           this.emit({

package/dist/{cli-0ebey9hg.js → cli-j6rktc91.js}

@@ -1,7 +1,7 @@
 import {
   registerTemplate,
   init_registry
-} from "./cli-tx00c0h6.js";
+} from "./cli-dqygeeh5.js";
 import {
   __esm
 } from "./cli-242037k3.js";