@desplega.ai/agent-swarm 2.5.4 → 2.7.0

package/dist/{cli-7p4jxgtt.js → cli-j9bpmykh.js}

@@ -40,14 +40,14 @@ import {
   getResolvedConfig2,
   getMcpServerById2,
   init_db3
-} from "./cli-jb30dzvk.js";
+} from "./cli-48gxjmcz.js";
 import {
   generateRandomCodeVerifier,
   generateRandomState,
   calculatePKCECodeChallenge,
   oauthAppRowToProviderConfig,
   ensureAuthorizationTokenOrThrow
-} from "./cli-tsma7p8v.js";
+} from "./cli-aypd09nf.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -60,11 +60,11 @@ import {
   mintScriptRunToken,
   revokeSessionToken,
   init_users
-} from "./cli-6a1xg1p7.js";
+} from "./cli-a89zdqz9.js";
 import {
   defaultAssetKey,
   init_key
-} from "./cli-mz9afxxf.js";
+} from "./cli-9pshx6rd.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -105,7 +105,7 @@ import {
   refreshSecretScrubberCache,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   __toESM,
   __commonJS,
@@ -177950,21 +177950,18 @@ class NativeScriptExecutor {
     let killed = input.signal?.aborted ?? false;
     let removeAbortListener;
     let proc;
+    const killedOutput = () => ({
+      result: undefined,
+      stdout: "",
+      stderr: "",
+      truncated: { stdout: false, stderr: false },
+      durationMs: Date.now() - start,
+      exitCode: 1,
+      error: "killed"
+    });
     try {
-      if (killed) {
-        return {
-          result: undefined,
-          stdout: "",
-          stderr: "",
-          truncated: { stdout: false, stderr: false },
-          durationMs: Date.now() - start,
-          exitCode: 1,
-          error: "killed"
-        };
-      }
-      await Bun.write(argsFile, JSON.stringify(input.args ?? null));
-      await Bun.write(sourceFile, input.source);
-      await writeBareImportShims(tmpdir);
+      if (killed)
+        return killedOutput();
       const onExternalAbort = () => {
         killed = true;
         if (proc)
@@ -177972,6 +177969,11 @@ class NativeScriptExecutor {
       };
       input.signal?.addEventListener("abort", onExternalAbort, { once: true });
       removeAbortListener = () => input.signal?.removeEventListener("abort", onExternalAbort);
+      await Bun.write(argsFile, JSON.stringify(input.args ?? null));
+      await Bun.write(sourceFile, input.source);
+      await writeBareImportShims(tmpdir);
+      if (killed)
+        return killedOutput();
       const timeout = setTimeout(() => {
         timedOut = true;
         if (proc)
@@ -177988,7 +177990,8 @@ class NativeScriptExecutor {
         SWARM_SCRIPT_SOURCE_FILE: sourceFile,
         SWARM_SCRIPT_RESULT_FILE: resultFile,
         SWARM_SCRIPT_ERROR_FILE: errorFile,
-        SWARM_SCRIPT_STARTED_FILE: startedFile
+        SWARM_SCRIPT_STARTED_FILE: startedFile,
+        ...input.hostValidatedArgs ? { SWARM_SCRIPT_HOST_VALIDATED_ARGS: "1" } : {}
       };
       proc = registerProcessGroup(Bun.spawn(harnessCommand(harnessPath, input, harnessEnv), {
         env: sandboxSpawnEnv(harnessEnv),
@@ -178145,6 +178148,10 @@ class QuickJSScriptExecutor {
       pool.discard(slot);
       return emptyOutput("executor_error", `quickjs worker failed to start: ${error instanceof Error ? error.message : String(error)}`);
     }
+    if (input.signal?.aborted) {
+      pool.release(slot);
+      return emptyOutput("killed");
+    }
     const id = ++requestSeq;
     const start = performance.now();
     return await new Promise((resolve) => {
@@ -178186,6 +178193,7 @@ class QuickJSScriptExecutor {
         job: {
           source: input.source,
           args: input.args,
+          ...input.hostValidatedArgs ? { hostValidatedArgs: true } : {},
           configPayload: input.configPayload,
           resources: input.resources,
           network: input.network
@@ -178200,6 +178208,17 @@ var EXECUTORS = {
   native: () => new NativeScriptExecutor,
   quickjs: () => new QuickJSScriptExecutor
 };
+function getDeploymentScriptExecutorName(env = process.env) {
+  return (env.SCRIPT_EXECUTOR ?? "native").trim();
+}
+function isExecutorAllowedByDeployment(requested, env = process.env) {
+  if (!requested)
+    return true;
+  if (getDeploymentScriptExecutorName(env) === "quickjs" && requested.trim() === "native") {
+    return false;
+  }
+  return true;
+}
 function getScriptExecutor(name = process.env.SCRIPT_EXECUTOR ?? "native") {
   const factory = EXECUTORS[name.trim()];
   if (!factory) {
@@ -178207,6 +178226,13 @@ function getScriptExecutor(name = process.env.SCRIPT_EXECUTOR ?? "native") {
   }
   return factory();
 }
+function resolveScriptExecutor(requested, env = process.env) {
+  if (!isExecutorAllowedByDeployment(requested, env)) {
+    throw new Error('Executor "native" is not permitted when deployment SCRIPT_EXECUTOR="quickjs"');
+  }
+  const effective = requested ?? env.SCRIPT_EXECUTOR ?? "native";
+  return getScriptExecutor(effective);
+}
 
 // src/scripts-runtime/executors/types.ts
 var MIN_SCRIPT_WALL_CLOCK_MS = 1000;
@@ -178222,6 +178248,9 @@ var DEFAULT_SCRIPT_RESOURCES = {
   maxStdoutBytes: 1048576
 };
 
+// src/scripts-runtime/host-validated-args.ts
+var HOST_VALIDATED_ARGS = Symbol("swarm.hostValidatedArgs");
+
 // src/scripts-runtime/import-allowlist.ts
 var import_typescript = __toESM(require_typescript2(), 1);
 var SCRIPT_ALLOWED_BARE_IMPORTS = ["swarm-sdk", "stdlib", "zod", "zod/mini"];
@@ -178365,6 +178394,17 @@ async function runScript(input) {
       error: "executor_error"
     };
   }
+  if (!isExecutorAllowedByDeployment(input.executor)) {
+    return {
+      result: undefined,
+      stdout: "",
+      stderr: 'Executor "native" is not permitted when deployment SCRIPT_EXECUTOR="quickjs"',
+      truncated: { stdout: false, stderr: false },
+      durationMs: 0,
+      exitCode: 1,
+      error: "executor_error"
+    };
+  }
   const runSecrets = createValueScrubber(Object.entries(input.userConfig ?? {}).filter(([, entry]) => entry.isSecret).map(([key, entry]) => ({ value: entry.value, name: `config:${key}` })));
   const imports = validateScriptImports(input.source);
   if (!imports.ok) {
@@ -178387,18 +178427,19 @@ async function runScript(input) {
   const executorInput = {
     source: input.source,
     args: input.args ?? null,
+    ...input[HOST_VALIDATED_ARGS] === true ? { hostValidatedArgs: true } : {},
     configPayload,
     resources,
     fsMode: input.fsMode ?? "none",
     network: scriptEgressPolicy(),
     signal: input.signal
   };
-  let output = await getScriptExecutor().run(executorInput);
+  let output = await resolveScriptExecutor(input.executor).run(executorInput);
   for (const delayMs of CAPACITY_EXCEEDED_RETRY_DELAYS_MS) {
     if (output.error !== "capacity_exceeded" || input.signal?.aborted)
       break;
     await Bun.sleep(delayMs);
-    output = await getScriptExecutor().run(executorInput);
+    output = await resolveScriptExecutor(input.executor).run(executorInput);
   }
   return {
     ...output,
@@ -178571,6 +178612,7 @@ async function runSavedScriptAsAgent(args, deps = {}) {
     source: args.script.source,
     args: args.input,
     fsMode: args.script.fsMode,
+    executor: args.script.executor,
     agentId: args.agentId,
     egressSecrets: credentials.egressSecrets,
     failedBindings: credentials.failedBindings,
@@ -184019,6 +184061,7 @@ var SCRIPT_SDK_TYPES = `
 export type JsonValue = null | boolean | number | string | JsonValue[] | { [key: string]: JsonValue };
 export type ScriptScope = "agent" | "global";
 export type ScriptFsMode = "none" | "workspace-rw";
+export type ScriptExecutorName = "native" | "quickjs";
 export type ScriptApiRawOptions = { raw: true };
 export type ScriptApiDefaultOptions = { raw?: false };
 export type RoutingReason = "skill" | "continuity" | "overflow" | "human_pinned" | "reroute_fault";
@@ -184210,7 +184253,7 @@ export interface SwarmSdk {
   schedule_list(args?: { enabled?: boolean; name?: string; scheduleType?: "recurring" | "one_time"; targetType?: "agent-task" | "workflow" | "script"; workflowId?: string; scriptName?: string; hideCompleted?: boolean; consecutiveErrorsMin?: number; lastRunStatus?: "failed" | "succeeded"; includeFull?: boolean }): Promise<unknown>;
   // --- scripts ---
   script_search(args: { query?: string; scope?: ScriptScope; limit?: number }): Promise<unknown>;
-  script_run(args: { name?: string; source?: string; args?: unknown; intent?: string; scope?: ScriptScope; fsMode?: ScriptFsMode; idempotencyKey?: string }): Promise<unknown>;
+  script_run(args: { name?: string; source?: string; args?: unknown; intent?: string; scope?: ScriptScope; fsMode?: ScriptFsMode; executor?: ScriptExecutorName | null; idempotencyKey?: string }): Promise<unknown>;
   // --- swarm / agent ---
   swarm_get(args?: { includeFull?: boolean }): Promise<unknown>;
   agent_info(args?: Record<string, unknown>): Promise<unknown>;
@@ -184236,7 +184279,7 @@ export interface SwarmSdk {
   workflow_list(args?: { enabled?: boolean; includeFull?: boolean; consecutiveErrorsMin?: number; lastRunStatus?: "running" | "waiting" | "completed" | "failed" | "skipped" | "cancelled" }): Promise<unknown>;
   workflow_get(args: { id: string }): Promise<unknown>;
   workflow_listRuns(args: { workflowId: string; status?: "running" | "waiting" | "completed" | "failed" | "skipped" | "cancelled"; limit?: number; offset?: number }): Promise<unknown>;
-  workflow_getRun(args: { id: string }): Promise<unknown>;
+  workflow_getRun(args: { id: string; fields?: "full" | "slim" }): Promise<unknown>;
   // --- prompt templates ---
   prompt_list(args?: { eventType?: string; scope?: "global" | "agent" | "repo"; scopeId?: string; isDefault?: boolean }): Promise<unknown>;
   prompt_get(args: { id: string }): Promise<unknown>;
@@ -184327,7 +184370,12 @@ export interface SwarmSdk {
   workflow_patch(args: Record<string, unknown>): Promise<unknown>;
   workflow_patchNode(args: Record<string, unknown>): Promise<unknown>;
   workflow_delete(args: { id: string }): Promise<unknown>;
-  workflow_trigger(args: { id: string; triggerData?: Record<string, unknown> }): Promise<unknown>;
+  workflow_trigger(args: {
+    id: string;
+    triggerData?: Record<string, unknown>;
+    wait?: boolean;
+    idempotencyKey?: string;
+  }): Promise<unknown>;
   workflow_retryRun(args: { id: string }): Promise<unknown>;
   workflow_cancelRun(args: { id: string }): Promise<unknown>;
 
@@ -184337,7 +184385,7 @@ export interface SwarmSdk {
   prompt_preview(args: Record<string, unknown>): Promise<unknown>;
 
   // --- write: scripts ---
-  script_upsert(args: { name: string; source: string; description?: string; intent?: string; scope?: ScriptScope; fsMode?: ScriptFsMode }): Promise<unknown>;
+  script_upsert(args: { name: string; source: string; description?: string; intent?: string; scope?: ScriptScope; fsMode?: ScriptFsMode; executor?: ScriptExecutorName | null }): Promise<unknown>;
   script_delete(args: { name: string; scope?: ScriptScope }): Promise<unknown>;
   script_queryTypes(args: { name: string; scope?: ScriptScope }): Promise<unknown>;
   script_launchRun(args: { source: string; args?: unknown; idempotencyKey?: string; scriptName?: string; requestedByUserId?: string }): Promise<unknown>;
@@ -185178,4 +185226,4 @@ function parseSkillContent(content) {
   };
 }
 
-export { require_dist2, isInvalidClientError, publicEndpointSsrfOptions, mcpOAuthSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, resolveSqlDsn, runReadOnlyQuery, listVendoredOpenapiEntries, ConnectionAuthInputSchema, SqlDsnInputSchema, connectionAuthSummary, listRelationalCredentialBindings, getCredentialBindingById, findCredentialBindingByIdentity, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, listScriptConnectionsAsync, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, deleteScriptConnection, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, writeBareImportShim, MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, require_typescript2, checkImportAllowlist, validateScriptImports, runScriptWithRunCredential, extractScriptSignature, extractArgsJsonSchema, getSavedScriptOwnerAgentId, runSavedScriptAsAgent, checkQuickJSCompat, quickJSCompatWarnings, resolveSyncRunAs, AppNameSchema, ScalarColumnKindSchema, isIso8601Date, jsonColumnSizeLabel, jsonColumnValueIssue, isValidColumnValue, SYSTEM_COLUMN_KINDS, SORTABLE_SYSTEM_DATE_COLUMNS, AppElementsSchema, AppDefinitionSchema, collectScriptReferences, scriptCompatWarnings, parseAppDefinition, applyAppDefinitionPatch, upgradeAppDefinition, decodeAppDefinition, appDefinitionNeedsRepair, createApp, getApp, listApps, listAppRecords, updateApp, deleteApp, getScriptAppTypes, SCRIPT_SDK_TYPES, scriptSdkTypesWithGeneratedApis, SCRIPT_STDLIB_MODULE_TYPES, scriptStdlibTypesWithGeneratedApis, typecheckWithAmbient, typecheckScript, parseSkillContent };
+export { require_dist2, isInvalidClientError, publicEndpointSsrfOptions, mcpOAuthSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, resolveSqlDsn, runReadOnlyQuery, listVendoredOpenapiEntries, ConnectionAuthInputSchema, SqlDsnInputSchema, connectionAuthSummary, listRelationalCredentialBindings, getCredentialBindingById, findCredentialBindingByIdentity, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, listScriptConnectionsAsync, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, deleteScriptConnection, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, writeBareImportShim, isExecutorAllowedByDeployment, MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, HOST_VALIDATED_ARGS, require_typescript2, checkImportAllowlist, validateScriptImports, runScriptWithRunCredential, extractScriptSignature, extractArgsJsonSchema, getSavedScriptOwnerAgentId, runSavedScriptAsAgent, checkQuickJSCompat, quickJSCompatWarnings, resolveSyncRunAs, AppNameSchema, ScalarColumnKindSchema, isIso8601Date, jsonColumnSizeLabel, jsonColumnValueIssue, isValidColumnValue, SYSTEM_COLUMN_KINDS, SORTABLE_SYSTEM_DATE_COLUMNS, AppElementsSchema, AppDefinitionSchema, collectScriptReferences, scriptCompatWarnings, parseAppDefinition, applyAppDefinitionPatch, upgradeAppDefinition, decodeAppDefinition, appDefinitionNeedsRepair, createApp, getApp, listApps, listAppRecords, updateApp, deleteApp, getScriptAppTypes, SCRIPT_SDK_TYPES, scriptSdkTypesWithGeneratedApis, SCRIPT_STDLIB_MODULE_TYPES, scriptStdlibTypesWithGeneratedApis, typecheckWithAmbient, typecheckScript, parseSkillContent };

package/dist/{cli-dabehxhp.js → cli-kt907da6.js}

@@ -6,7 +6,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-wx2nj19m.js → cli-kv7sbc2c.js}

@@ -1,11 +1,11 @@
 import {
   contextBoundNoteThreshold,
   createContextBoundNote
-} from "./cli-2655k16q.js";
+} from "./cli-sjctjr48.js";
 import {
   ampBillsCacheWrites,
   resolveAmpModel
-} from "./cli-9s05422w.js";
+} from "./cli-8mbc9za9.js";
 import {
   swarmRuntimeInstanceId
 } from "./cli-e8xyjvfc.js";
@@ -22,18 +22,18 @@ import {
 } from "./cli-jc1g9ndz.js";
 import {
   applyReasoningEffort
-} from "./cli-bn0rewsy.js";
+} from "./cli-c081bj3b.js";
 import {
   CONTEXT_FORMULA,
   computeContextUsedUnified,
   clampContextPercent,
   init_context_window
-} from "./cli-0shx9j93.js";
+} from "./cli-pfk92eqz.js";
 import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 
 // src/providers/amp-adapter.ts
 import { existsSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
@@ -42,7 +42,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 init_context_window();
 init_secret_scrubber();
-var AMP_PACKAGE = "@ampcode/cli@0.0.1792844927-g360c96";
+var AMP_PACKAGE = "@ampcode/cli@0.0.1793025586-g9211b5";
 var AMP_MCP_SERVER_NAME = "agent-swarm";
 var AMP_PLUGIN_MODE_KEY = "agent-swarm";
 var AMP_LIVE_TEST_TIMEOUT_MS = 5000;

package/dist/{cli-abs8ndtr.js → cli-m30k9777.js}

@@ -47,10 +47,10 @@ import {
   checkDependencies2,
   emitBuiltInIntegrationConnectedOnce2,
   init_db3
-} from "./cli-jb30dzvk.js";
+} from "./cli-48gxjmcz.js";
 import {
   getChannelBlockReason2
-} from "./cli-eftzyh9y.js";
+} from "./cli-s09j9vp5.js";
 import {
   require_dist5,
   require_axios,
@@ -67,11 +67,11 @@ import {
 import {
   isTerminalTaskStatus,
   init_types
-} from "./cli-mz9afxxf.js";
+} from "./cli-9pshx6rd.js";
 import {
   taskAttachmentDisplayUrl,
   init_task_attachment_links
-} from "./cli-e42vss7b.js";
+} from "./cli-x37r7qwf.js";
 import {
   getSlackConfiguration,
   init_config
@@ -102,7 +102,7 @@ import {
   scrubSecrets,
   scrubObject,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   __toESM,
   __commonJS,
@@ -6240,7 +6240,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
     return;
   initialized = true;
   try {
-    const impl = await import("./otel-impl-v6cc0zve.js");
+    const impl = await import("./otel-impl-f9tgr8yw.js");
     await impl.boot(serviceRole, {
       exportConsoleLogs: serviceRole === "api" && isApiLogExportEnabled()
     });
@@ -8240,7 +8240,7 @@ function retryDelayMs(error, attempt) {
   const seconds = candidate.retryAfter ?? candidate.data?.retry_after ?? 2 ** attempt;
   return Math.min(Math.max(seconds * 1000, 0), MAX_RETRY_DELAY_MS);
 }
-async function callSlackWithRetry(client, method, payload) {
+async function callSlackWithRetry2(client, method, payload) {
   for (let attempt = 0;; attempt++) {
     try {
       return await client.apiCall(method, payload);
@@ -8526,7 +8526,7 @@ function treeBlocks(text) {
   }));
 }
 async function resolvePermalink(client, channelId, ts) {
-  const result = await callSlackWithRetry(client, "chat.getPermalink", {
+  const result = await callSlackWithRetry2(client, "chat.getPermalink", {
     channel: channelId,
     message_ts: ts
   });
@@ -8551,7 +8551,7 @@ async function findReservedSlackMessage(client, reservation, outcomeMarker) {
   let cursor;
   const oldest = Math.max(0, new Date(reservation.createdAt).getTime() / 1000 - 5);
   do {
-    const response = await callSlackWithRetry(client, "conversations.replies", {
+    const response = await callSlackWithRetry2(client, "conversations.replies", {
       channel: reservation.channelId,
       ts: reservation.threadTs,
       include_all_metadata: true,
@@ -8613,7 +8613,7 @@ async function createThreadTree(task) {
   const reconciled = reserved.created ? undefined : await findReservedSlackMessage(app.client, reservation);
   let remote = reconciled;
   if (!remote) {
-    remote = await callSlackWithRetry(app.client, "chat.postMessage", {
+    remote = await callSlackWithRetry2(app.client, "chat.postMessage", {
       channel: task.slackChannelId,
       thread_ts: task.slackThreadTs,
       text,
@@ -8631,7 +8631,7 @@ async function createThreadTree(task) {
     throw new Error("Slack did not return a timestamp for the thread tree");
   }
   if (reconciled) {
-    await callSlackWithRetry(app.client, "chat.update", {
+    await callSlackWithRetry2(app.client, "chat.update", {
       channel: task.slackChannelId,
       ts: remote.ts,
       text,
@@ -8745,7 +8745,7 @@ async function updateThreadTree(tree, bypassThrottle = false, statusBudget) {
       return "throttled";
     }
     try {
-      await callSlackWithRetry(app.client, "chat.update", {
+      await callSlackWithRetry2(app.client, "chat.update", {
         channel: current.channelId,
         ts: current.ts,
         text,
@@ -8988,7 +8988,7 @@ function isStreamAlreadyStopped(error) {
 async function slackTeamId(client) {
   if (cachedTeamId)
     return cachedTeamId;
-  const auth = await callSlackWithRetry(client, "auth.test", {});
+  const auth = await callSlackWithRetry2(client, "auth.test", {});
   const teamId = auth.team_id;
   if (typeof teamId === "string" && teamId)
     cachedTeamId = teamId;
@@ -9073,10 +9073,10 @@ async function streamOutcomeCard(task, tree, options) {
     let started = reconciled;
     if (!started) {
       try {
-        started = await callSlackWithRetry(app.client, "chat.startStream", startPayload);
+        started = await callSlackWithRetry2(app.client, "chat.startStream", startPayload);
       } catch (error) {
         console.error(`[Slack] chat.startStream failed for task ${task.id}; falling back to chat.postMessage:`, error);
-        started = await callSlackWithRetry(app.client, "chat.postMessage", {
+        started = await callSlackWithRetry2(app.client, "chat.postMessage", {
           channel: task.slackChannelId,
           thread_ts: task.slackThreadTs,
           text: presentation,
@@ -9099,7 +9099,7 @@ async function streamOutcomeCard(task, tree, options) {
   }
   if (!deliveredViaFallback) {
     try {
-      await callSlackWithRetry(app.client, "chat.stopStream", {
+      await callSlackWithRetry2(app.client, "chat.stopStream", {
         channel: task.slackChannelId,
         ts: outcome.ts,
         blocks: captions
@@ -9109,7 +9109,7 @@ async function streamOutcomeCard(task, tree, options) {
         throw error;
     }
     if (!streamedFreshContent) {
-      await callSlackWithRetry(app.client, "chat.update", {
+      await callSlackWithRetry2(app.client, "chat.update", {
         channel: task.slackChannelId,
         ts: outcome.ts,
         text: presentation,
@@ -9191,7 +9191,7 @@ async function refreshResolvedDeferralCards() {
       if (!wake)
         continue;
       const content = await resolvedDeferralContent(wake);
-      await callSlackWithRetry(app.client, "chat.update", {
+      await callSlackWithRetry2(app.client, "chat.update", {
         channel: card.channelId,
         ts: card.ts,
         ...content
@@ -10085,17 +10085,17 @@ async function initSlackApp2() {
   });
   initialized2 = true;
   app.use(slackInboundOutcomeMiddleware());
-  const { registerMessageHandler } = await import("./handlers-wy1dr6ja.js");
-  const { registerCommandHandler } = await import("./commands-9849dkj6.js");
-  const { registerActionHandlers } = await import("./actions-92mepq03.js");
-  const { registerWorkObjectHandlers } = await import("./work-objects-kfahhjsq.js");
+  const { registerMessageHandler } = await import("./handlers-tzmevqb5.js");
+  const { registerCommandHandler } = await import("./commands-68et1qv2.js");
+  const { registerActionHandlers } = await import("./actions-1vhmtvg9.js");
+  const { registerWorkObjectHandlers } = await import("./work-objects-ggnghpgf.js");
   registerMessageHandler(app);
   registerCommandHandler(app);
   registerActionHandlers(app);
   registerWorkObjectHandlers(app);
-  const { createAssistant } = await import("./assistant-zyr5kz47.js");
+  const { createAssistant } = await import("./assistant-yx1p6g82.js");
   app.assistant(createAssistant());
-  const { isBlockExternalEnabled, scanExternalChannelsOnBoot } = await import("./external-channel-e2s028da.js");
+  const { isBlockExternalEnabled, scanExternalChannelsOnBoot } = await import("./external-channel-xbmxcg09.js");
   if (isBlockExternalEnabled()) {
     scanExternalChannelsOnBoot(app.client).catch((error) => {
       console.error("[Slack] External channel boot scan failed:", error);
@@ -10108,7 +10108,7 @@ async function startSlackApp2() {
     await initSlackApp2();
   }
   if (app) {
-    const { isSlackRenderV2Enabled } = await import("./render-v2-pjwxvnkw.js");
+    const { isSlackRenderV2Enabled } = await import("./render-v2-yfvdfr0x.js");
     if (isSlackRenderV2Enabled())
       await ensureSlackRenderV2Activation2();
     await app.start();
@@ -10131,4 +10131,4 @@ async function stopSlackApp2() {
   initialized2 = false;
 }
 
-export { require_dist4, getSlackConnectionState, noteSlackInboundSideEffect, ignoreSlackInbound, reportSlackInboundFailure, isAdmittedSlackDelivery, getSlackInboundDiagnostics, terminalReactionEvent, isPollTracingEnabled, initOtel, withSpan2, startSpan2, withSpanContext2, withRemoteContext2, injectTraceContext2, recordSessionCost2, recordDbRetentionSweep2, recordDbRetentionStatement2, slackTaskOutput, ackSlackMessage, getTaskLink, getTaskUrl, markdownToSlack, buildMrkdwnSectionBlocks, buildCaptionBlock, buildCancelledBlocks, buildBufferFlushBlocks, buildTreeBlocks, taskCitationIssues, stripInvalidTaskCitations, taskCitationSourceGroups, renderTaskCitations, taskCitationWarnings, MAX_TASK_CITATIONS, CitationInputSchema, TaskCitationSchema, upsertTaskCitations, getTaskCitations, getTaskCitationsForTasks, hasTaskCitationCheckRefusal, initialize, ensure, getAgentDisplayName, getAgentEmoji, markSlackSessionProcessing, isSlackRenderV2Enabled2, ensureSlackThreadTree2, processSlackRenderV22, registerTreeMessage, getSlackApp2, initSlackApp2, startSlackApp2, stopSlackApp2 };
+export { require_dist4, getSlackConnectionState, noteSlackInboundSideEffect, ignoreSlackInbound, reportSlackInboundFailure, isAdmittedSlackDelivery, getSlackInboundDiagnostics, terminalReactionEvent, isPollTracingEnabled, initOtel, withSpan2, startSpan2, withSpanContext2, withRemoteContext2, injectTraceContext2, recordSessionCost2, recordDbRetentionSweep2, recordDbRetentionStatement2, slackTaskOutput, ackSlackMessage, getTaskLink, getTaskUrl, markdownToSlack, buildMrkdwnSectionBlocks, buildCaptionBlock, buildCancelledBlocks, buildBufferFlushBlocks, buildTreeBlocks, taskCitationIssues, stripInvalidTaskCitations, taskCitationSourceGroups, renderTaskCitations, taskCitationWarnings, MAX_TASK_CITATIONS, CitationInputSchema, TaskCitationSchema, upsertTaskCitations, getTaskCitations, getTaskCitationsForTasks, hasTaskCitationCheckRefusal, initialize, ensure, getAgentDisplayName, getAgentEmoji, markSlackSessionProcessing, isSlackRenderV2Enabled2, callSlackWithRetry2, ensureSlackThreadTree2, slackErrorCode2, processSlackRenderV22, registerTreeMessage, getSlackApp2, initSlackApp2, startSlackApp2, stopSlackApp2 };

package/dist/{cli-cz5nmdxt.js → cli-m5e802r7.js}

@@ -8,11 +8,11 @@ import {
   resolveConfigValueOrThrow,
   resolveHeadersOrThrow,
   FileAuthStorageBackend
-} from "./cli-x77gen2p.js";
+} from "./cli-2y7v133v.js";
 import {
   oauthSuccessHtml,
   oauthErrorHtml
-} from "./cli-qqzmjxkf.js";
+} from "./cli-1m9x8dr5.js";
 import {
   __toESM
 } from "./cli-242037k3.js";

package/dist/{cli-0shx9j93.js → cli-pfk92eqz.js}

@@ -2,11 +2,11 @@ import {
   runtimeCatalogSection,
   runtimeCatalogModel,
   init_runtime_model_catalog
-} from "./cli-6x9ma5w5.js";
+} from "./cli-803188pb.js";
 import {
   buildClaudeShortnameMap,
   init_src2
-} from "./cli-nwyw3zhg.js";
+} from "./cli-gxee0bqa.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-xtrz6bzs.js → cli-ptfq202x.js}

@@ -7,7 +7,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@desplega.ai/agent-swarm",
-    version: "2.5.4",
+    version: "2.7.0",
     description: "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
     keywords: [
       "agent-swarm.dev",
@@ -87,6 +87,8 @@ var init_package = __esm(() => {
       "sync:ai-toolbox-skills": "bun scripts/sync-ai-toolbox-skills.ts",
       "check:ai-toolbox-skills": "bun scripts/sync-ai-toolbox-skills.ts --check",
       "check:skill-sources": "bun scripts/check-skill-sources.ts",
+      "build:docs-index": "bun scripts/build-docs-index.ts",
+      "check:docs-index": "bun scripts/build-docs-index.ts --check",
       "check:operator-skill": "bun scripts/check-operator-skill.ts",
       "sync:telemetry-contract": "bun scripts/sync-telemetry-contract.ts",
       "check:telemetry-contract": "bun scripts/sync-telemetry-contract.ts --check",
@@ -192,7 +194,7 @@ var init_package = __esm(() => {
       "@oxlint/plugins": "1.78.0",
       "@types/bun": "latest",
       "dependency-cruiser": "^18.0.0",
-      "happy-dom": "^20.14.5",
+      "happy-dom": "^21.0.4",
       konsistent: "1.0.0-beta.1",
       "openapi-typescript": "^7",
       oxlint: "1.78.0",
@@ -217,7 +219,7 @@ var init_package = __esm(() => {
       "@chat-adapter/teams": "4.41.1",
       "@chat-adapter/telegram": "4.41.1",
       "@cursor/sdk": "1.0.40",
-      "@desplega.ai/agent-fs-just-bash": "0.18.5",
+      "@desplega.ai/agent-fs-just-bash": "0.18.9",
       "@desplega.ai/business-use": "^0.4.2",
       "@earendil-works/pi-agent-core": "^1.4.0",
       "@earendil-works/pi-ai": "^1.4.0",

package/dist/{cli-6n8axjv1.js → cli-qj442fws.js}

@@ -1,7 +1,7 @@
 import {
   RuntimeProviderKindSchema,
   init_types
-} from "./cli-mz9afxxf.js";
+} from "./cli-9pshx6rd.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -21,7 +21,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 
 // src/runtime-providers/controller.ts
 init_secret_scrubber();

package/dist/{cli-c61mbdds.js → cli-rd5m70gj.js}

@@ -7,20 +7,20 @@ import {
   tierConfigKey,
   init_model_tier_keys,
   init_db3
-} from "./cli-jb30dzvk.js";
+} from "./cli-48gxjmcz.js";
 import {
   ensureRbacSeedsSynced2,
   init_rbac_roles
-} from "./cli-ff1tm9n9.js";
+} from "./cli-8wmj18cz.js";
 import {
   seedPricingFromModelsDev
-} from "./cli-sbwsxvtd.js";
+} from "./cli-d20qvpr2.js";
 import {
   MODEL_TIERS,
   DEFAULT_MODEL_TIER_MAP,
   ProviderNameSchema,
   init_types
-} from "./cli-mz9afxxf.js";
+} from "./cli-9pshx6rd.js";
 
 // src/be/boot-seeds.ts
 init_db3();

package/dist/{cli-eftzyh9y.js → cli-s09j9vp5.js}

@@ -4,7 +4,7 @@ import {
   claimKv2,
   deleteKv2,
   init_db3
-} from "./cli-jb30dzvk.js";
+} from "./cli-48gxjmcz.js";
 import {
   isEnvFlagEnabled,
   init_env_flag
@@ -12,7 +12,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 
 // src/slack/external-channel.ts
 init_db3();