@desplega.ai/agent-swarm 2.5.4 → 2.7.0

package/dist/{cli-277c31dw.js → cli-6mgdba42.js}

@@ -1,10 +1,34 @@
+import {
+  publicEndpointSsrfOptions
+} from "./cli-j9bpmykh.js";
 import {
   getMemoryRaterNames
 } from "./cli-3h26v7yj.js";
 import {
   normalizeOrgWebsite,
-  init_org_website
-} from "./cli-jb30dzvk.js";
+  init_org_website,
+  assertUrlSafe
+} from "./cli-48gxjmcz.js";
+import {
+  getRouteProvider,
+  createScopedFetch,
+  deriveDefaultRoute,
+  init_src
+} from "./cli-gt4h8cxw.js";
+import {
+  getOpenRouterBaseUrl,
+  getOpenRouterAttributionHeaders,
+  init_openrouter_base_url
+} from "./cli-dfyv0jdy.js";
+import {
+  scrubSecrets,
+  init_secret_scrubber
+} from "./cli-708wdy32.js";
+import {
+  providerBaseUrl,
+  providerForKeyVar,
+  init_src2
+} from "./cli-gxee0bqa.js";
 
 // src/utils/lead-monitor-channels.ts
 function isLeadChannelMonitoringEnabled(env = process.env) {
@@ -117,6 +141,204 @@ function isUnknownModelError(text, modelId) {
   });
 }
 
+// src/utils/provider-key-probes.ts
+init_src2();
+init_src();
+init_openrouter_base_url();
+init_secret_scrubber();
+var LIVE_TEST_TIMEOUT_MS = 5000;
+function scrubProbeBody(body, init) {
+  const headers = new Headers(init.headers);
+  const apiKey = headers.get("x-api-key") ?? headers.get("authorization")?.replace(/^Bearer\s+/i, "");
+  return scrubSecrets(apiKey ? body.replaceAll(apiKey, "[REDACTED]") : body);
+}
+async function timedFetch(url, init, options = {}) {
+  const controller = new AbortController;
+  const timer = setTimeout(() => controller.abort(), LIVE_TEST_TIMEOUT_MS);
+  const start = Date.now();
+  try {
+    if (options.publicEndpoint)
+      assertUrlSafe(url, publicEndpointSsrfOptions());
+    const res = await fetch(url, {
+      ...init,
+      ...options.publicEndpoint ? { redirect: "manual" } : {},
+      signal: controller.signal
+    });
+    let bodyText = "";
+    try {
+      bodyText = scrubProbeBody(await res.text(), init);
+    } catch {}
+    return {
+      ok: res.ok,
+      status: res.status,
+      bodyText,
+      latency_ms: Date.now() - start
+    };
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function checkAnthropicApiKey(apiKey, options = {}) {
+  const r = await timedFetch("https://api.anthropic.com/v1/models", {
+    method: "GET",
+    headers: { "x-api-key": apiKey, "anthropic-version": "2023-06-01" }
+  }, options);
+  if (r.ok)
+    return { ok: true, latency_ms: r.latency_ms };
+  return {
+    ok: false,
+    error: scrubSecrets(`HTTP ${r.status}: ${r.bodyText.slice(0, 200)}`),
+    httpStatus: r.status,
+    latency_ms: r.latency_ms
+  };
+}
+async function checkOpenAiApiKey(apiKey, options = {}) {
+  const r = await timedFetch("https://api.openai.com/v1/models", {
+    method: "GET",
+    headers: { Authorization: `Bearer ${apiKey}` }
+  }, options);
+  if (r.ok)
+    return { ok: true, latency_ms: r.latency_ms };
+  return {
+    ok: false,
+    error: scrubSecrets(`HTTP ${r.status}: ${r.bodyText.slice(0, 200)}`),
+    httpStatus: r.status,
+    latency_ms: r.latency_ms
+  };
+}
+async function checkXaiApiKey(apiKey, options = {}) {
+  const r = await timedFetch("https://api.x.ai/v1/models", {
+    method: "GET",
+    headers: { Authorization: `Bearer ${apiKey}` }
+  }, options);
+  if (r.ok)
+    return { ok: true, latency_ms: r.latency_ms };
+  return {
+    ok: false,
+    error: scrubSecrets(`HTTP ${r.status}: ${r.bodyText.slice(0, 200)}`),
+    httpStatus: r.status,
+    latency_ms: r.latency_ms
+  };
+}
+async function checkBearerGet(url, init, options = {}) {
+  const r = await timedFetch(url, { method: "GET", ...init }, options);
+  if (r.ok)
+    return { ok: true, latency_ms: r.latency_ms };
+  return {
+    ok: false,
+    error: scrubSecrets(`HTTP ${r.status}: ${r.bodyText.slice(0, 200)}`),
+    httpStatus: r.status,
+    latency_ms: r.latency_ms
+  };
+}
+async function checkOpenRouter(apiKey, options = {}) {
+  const base = getOpenRouterBaseUrl(options.env);
+  const get = (url) => checkBearerGet(url, {
+    headers: {
+      ...getOpenRouterAttributionHeaders(url, options.env),
+      Authorization: `Bearer ${apiKey}`
+    }
+  }, options);
+  const keyResult = await get(`${base}/key`);
+  if (keyResult.httpStatus === 404 || keyResult.httpStatus === 405)
+    return get(`${base}/models`);
+  return keyResult;
+}
+function checkDeepSeekApiKey(apiKey, options = {}) {
+  return checkBearerGet("https://api.deepseek.com/models", {
+    headers: { Authorization: `Bearer ${apiKey}` }
+  }, options);
+}
+async function checkOpenAICompatibleProvider(provider, apiKey, baseUrl = provider.baseUrl, options = {}) {
+  const r = await timedFetch(`${baseUrl.replace(/\/+$/, "")}/models`, {
+    method: "GET",
+    headers: { Authorization: `Bearer ${apiKey}` }
+  }, options);
+  if (r.ok)
+    return { ok: true, latency_ms: r.latency_ms };
+  return {
+    ok: false,
+    error: scrubSecrets(`HTTP ${r.status}: ${r.bodyText.slice(0, 200)}`),
+    httpStatus: r.status,
+    latency_ms: r.latency_ms
+  };
+}
+async function checkRoute(route, env) {
+  const startedAt = Date.now();
+  const provider = getRouteProvider(route.provider);
+  const baseUrl = route.baseUrl ?? provider?.defaultBaseUrl;
+  if (!provider?.validate || !baseUrl)
+    return { ok: true, skipped: true, latency_ms: 0 };
+  const publicFetch = async (url, init) => {
+    assertUrlSafe(String(url), publicEndpointSsrfOptions());
+    const res = await fetch(url, init);
+    if (res.ok || !res.body)
+      return res;
+    return new Response(scrubProbeBody(await res.text(), init ?? {}), {
+      status: res.status,
+      statusText: res.statusText,
+      headers: res.headers
+    });
+  };
+  const result = await provider.validate({
+    route,
+    env,
+    signal: AbortSignal.timeout(LIVE_TEST_TIMEOUT_MS),
+    fetch: createScopedFetch(baseUrl, publicFetch)
+  });
+  const latency_ms = Date.now() - startedAt;
+  if (result.status === "verified")
+    return { ok: true, latency_ms };
+  return {
+    ok: result.status === "configured",
+    ...result.status === "configured" ? { skipped: true } : { httpStatus: result.httpStatus },
+    error: scrubSecrets(result.reason),
+    latency_ms
+  };
+}
+async function checkProviderPoolKey(keyType, apiKey, env = process.env) {
+  const startedAt = Date.now();
+  const options = { env, publicEndpoint: true };
+  try {
+    switch (keyType) {
+      case "ANTHROPIC_API_KEY": {
+        const keyEnv = { ...env, ANTHROPIC_API_KEY: apiKey };
+        const route = deriveDefaultRoute("claude", keyEnv);
+        if (route?.provider === "anthropic-gateway" && "secretKey" in route.auth && route.auth.secretKey === "ANTHROPIC_API_KEY") {
+          return await checkRoute(route, keyEnv);
+        }
+        return await checkAnthropicApiKey(apiKey, options);
+      }
+      case "OPENAI_API_KEY":
+        return await checkOpenAiApiKey(apiKey, options);
+      case "OPENROUTER_API_KEY":
+        return await checkOpenRouter(apiKey, options);
+      case "DEEPSEEK_API_KEY":
+        return await checkDeepSeekApiKey(apiKey, options);
+      case "XAI_API_KEY":
+        return await checkXaiApiKey(apiKey, options);
+      case "CLAUDE_CODE_OAUTH_TOKEN": {
+        const tokenEnv = { CLAUDE_CODE_OAUTH_TOKEN: apiKey };
+        return await checkRoute(deriveDefaultRoute("claude", tokenEnv), tokenEnv);
+      }
+      default: {
+        const provider = providerForKeyVar(keyType);
+        if (provider) {
+          return await checkOpenAICompatibleProvider(provider, apiKey, providerBaseUrl(provider, env), options);
+        }
+        return { ok: true, skipped: true, latency_ms: 0 };
+      }
+    }
+  } catch (err) {
+    const raw = err instanceof Error ? err.message : String(err);
+    return {
+      ok: false,
+      error: scrubSecrets(raw.split(apiKey).join("[REDACTED]")) || "Unknown error",
+      latency_ms: Date.now() - startedAt
+    };
+  }
+}
+
 // src/utils/skill-fs-writer.ts
 import { existsSync, mkdirSync, readdirSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
@@ -256,4 +478,4 @@ function writeSkillsToFilesystem(entries, harnessType = "all", home) {
   return { synced, removed, errors };
 }
 
-export { isLeadChannelMonitoringEnabled, ORG_IDENTITY_KEYS, orgIdentityStatus, SIMILARITY_THRESHOLD, memoryRelevance, renderMemoriesPrompt, isUnknownModelError, writeSkillsToFilesystem };
+export { isLeadChannelMonitoringEnabled, ORG_IDENTITY_KEYS, orgIdentityStatus, SIMILARITY_THRESHOLD, memoryRelevance, renderMemoriesPrompt, isUnknownModelError, timedFetch, checkAnthropicApiKey, checkOpenAiApiKey, checkXaiApiKey, checkOpenRouter, checkDeepSeekApiKey, checkOpenAICompatibleProvider, checkProviderPoolKey, writeSkillsToFilesystem };

package/dist/{cli-19202kew.js → cli-6srv653c.js}

@@ -15,17 +15,17 @@ import {
   init_secret_registry,
   upsertSwarmConfig2,
   init_db3
-} from "./cli-jb30dzvk.js";
+} from "./cli-48gxjmcz.js";
 import {
   createRuntimeProvider,
   init_runtime_providers
-} from "./cli-dew6x255.js";
+} from "./cli-39aet655.js";
 import {
   closeSessionTokenConnections,
   init_session_token_connections,
   insertSessionToken,
   init_users
-} from "./cli-6a1xg1p7.js";
+} from "./cli-a89zdqz9.js";
 import {
   RuntimeControllerCreateSchema,
   RuntimeControllerUpdateSchema,
@@ -33,13 +33,13 @@ import {
   RuntimePoolUpdateSchema,
   RuntimePoolCreateAgentSchema,
   init_types
-} from "./cli-mz9afxxf.js";
+} from "./cli-9pshx6rd.js";
 import {
   scrubSecrets,
   registerVolatileSecret,
   unregisterVolatileSecret,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-n4c8e3s5.js → cli-708wdy32.js}

@@ -1,7 +1,7 @@
 import {
   openAICompatibleKeyVars,
   init_src2
-} from "./cli-nwyw3zhg.js";
+} from "./cli-gxee0bqa.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-pasyvjmm.js → cli-737pyqxr.js}

@@ -3,7 +3,7 @@ import {
   scrubObject,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 
 // src/x/composio.ts
 init_secret_scrubber();

package/dist/{cli-6x9ma5w5.js → cli-803188pb.js}

@@ -1,7 +1,7 @@
 import {
   withRegistryCatalogSections,
   init_src2
-} from "./cli-nwyw3zhg.js";
+} from "./cli-gxee0bqa.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-hh5we352.js → cli-86ehn4s5.js}

@@ -1,7 +1,7 @@
 import {
   contextBoundNoteThreshold,
   createContextBoundNote
-} from "./cli-2655k16q.js";
+} from "./cli-sjctjr48.js";
 import {
   swarmRuntimeInstanceId
 } from "./cli-e8xyjvfc.js";
@@ -22,10 +22,10 @@ import {
   autoIndexMemoryFile,
   fetchConcurrentContext,
   summarizeTranscript
-} from "./cli-c952c7ac.js";
+} from "./cli-e1595bgx.js";
 import {
   applyReasoningEffort
-} from "./cli-bn0rewsy.js";
+} from "./cli-c081bj3b.js";
 import {
   fetchInstalledMcpServers
 } from "./cli-bst1vp7e.js";
@@ -34,13 +34,13 @@ import {
   getContextWindowSize,
   clampContextPercent,
   init_context_window
-} from "./cli-0shx9j93.js";
+} from "./cli-pfk92eqz.js";
 import {
   splitCredentialPool,
   openAICompatibleKeyLabels,
   validateOpencodeCredentials,
   init_credentials
-} from "./cli-zw88zjba.js";
+} from "./cli-gt4h8cxw.js";
 import {
   DEFAULT_OPENROUTER_BASE_URL,
   getOpenRouterBaseUrl,
@@ -56,7 +56,7 @@ import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   openAICompatibleProviders,
   providerKeyVars,
@@ -67,7 +67,7 @@ import {
   openAICompatibleProvider,
   providerForKeyVar,
   init_src2
-} from "./cli-nwyw3zhg.js";
+} from "./cli-gxee0bqa.js";
 
 // src/providers/opencode-adapter.ts
 init_src2();

package/dist/{cli-9s05422w.js → cli-8mbc9za9.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-mz9afxxf.js";
+} from "./cli-9pshx6rd.js";
 
 // src/utils/amp-models.ts
 init_types();

package/dist/{cli-ff1tm9n9.js → cli-8wmj18cz.js}

@@ -4,7 +4,7 @@ import {
   invalidateTelemetryUserRole,
   init_telemetry_identity,
   init_db3
-} from "./cli-jb30dzvk.js";
+} from "./cli-48gxjmcz.js";
 import {
   PermissionVerbSchema,
   init_rbac

package/dist/{cli-1r5ad7j5.js → cli-9gsm2rzp.js}

@@ -4,7 +4,7 @@ import {
   CONTROLLER_COMMAND_TIMEOUT_MS,
   RuntimeHandleSchema,
   ControllerStatusResultSchema
-} from "./cli-6n8axjv1.js";
+} from "./cli-qj442fws.js";
 import {
   getDbClient2,
   isRuntimePoolsEnabled,
@@ -21,11 +21,11 @@ import {
   upsertSwarmConfig2,
   getResolvedConfig2,
   init_db3
-} from "./cli-jb30dzvk.js";
+} from "./cli-48gxjmcz.js";
 import {
   createWorkerTaskFollowUp,
   canClaim
-} from "./cli-asq5ydm4.js";
+} from "./cli-6a9qfa8b.js";
 import {
   getRuntimeController2,
   getRuntimeControllerTarget2,
@@ -36,7 +36,7 @@ import {
   getPoolForAgent2,
   resolvePoolDelivery2,
   init_db
-} from "./cli-19202kew.js";
+} from "./cli-6srv653c.js";
 import {
   runtimeStaleThresholdMinutes,
   getRuntimeInstanceById,
@@ -44,14 +44,14 @@ import {
   markRuntimeTerminated,
   listRuntimeInstancesForAgent,
   listRuntimeInstancesForPool
-} from "./cli-gbfxp48k.js";
+} from "./cli-j0ppywdr.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-e8xyjvfc.js";
 import {
   workflowEventBus2,
   init_event_bus
-} from "./cli-dabehxhp.js";
+} from "./cli-kt907da6.js";
 import {
   import_websocket
 } from "./cli-b2mz5mjc.js";
@@ -59,16 +59,16 @@ import {
   canProvisionKind,
   createRuntimeProvider,
   init_runtime_providers
-} from "./cli-dew6x255.js";
+} from "./cli-39aet655.js";
 import {
   mintRuntimeToken,
   init_users
-} from "./cli-6a1xg1p7.js";
+} from "./cli-a89zdqz9.js";
 import {
   TERMINAL_TASK_STATUSES,
   isTerminalTaskStatus,
   init_types
-} from "./cli-mz9afxxf.js";
+} from "./cli-9pshx6rd.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -88,7 +88,7 @@ import {
 import {
   buildImageTemplate,
   init_dispatch
-} from "./cli-nzfnt2gs.js";
+} from "./cli-tf1n0r0b.js";
 import {
   RUNTIME_LABELS,
   init_types2
@@ -97,7 +97,7 @@ import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 
 // src/be/runtime-pools/supervisor.ts
 init_runtime_providers();
@@ -524,7 +524,7 @@ async function recoverSessions(runtimeId, reason) {
   }
   if (!sessions.length)
     return;
-  const { remediateTaskForDeadRuntime } = await import("./heartbeat-w3mntghj.js");
+  const { remediateTaskForDeadRuntime } = await import("./heartbeat-psfvcgwp.js");
   for (const session of sessions) {
     try {
       const task = await getTaskById2(session.taskId);

package/dist/{cli-mz9afxxf.js → cli-9pshx6rd.js}

@@ -1650,7 +1650,7 @@ function checkExtensionInstallSource(body, ctx) {
     ctx.addIssue({ code: "custom", path: ["files"], message: "files is required with manifest" });
   }
 }
-var AssetKeySchema, AssetEntityTypeSchema, AssetProviderRefSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, RoutingReasonSchema, RoutingSourceSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SessionShareAccessSchema, SessionAccessSchema, SessionOwnerSchema, SessionSharesSchema, SessionSharesUpdateSchema, SteerModeSchema, SteeringStatusSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, TaskAttachmentKindSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY = "_agentSwarmGeneratedBy", attachmentCapabilitiesSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, RbacRoleSchema, UserRbacRolesSchema, UserCommsPrefsSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AgentOpencodeGoStatusSchema, AcpSessionConfigSelectValueSchema, AcpSessionConfigSelectGroupSchema, AcpSessionConfigOptionSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, REPO_GUIDELINES_MAX_ENTRIES = 50, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeInstanceStatusSchema, RuntimeProviderKindSchema, DeliveryModeSchema, PoolLifecycleSchema, RuntimeResourcesSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, SUPERSEDED_WORKFLOW_TASK_REASON = "superseded_workflow_task", ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, WebhookVerificationSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionNameSchema, SemverSchema, ExtensionBundlePathSchema, ExtensionAssetNameSchema, ExtensionScriptAssetSchema, ExtensionScheduleAssetSchema, ExtensionWorkflowAssetSchema, ExtensionSkillAssetSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionStatusSchema, ExtensionSchema, ExtensionFileSchema, ExtensionVersionSchema, ExtensionRunSchema, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
+var AssetKeySchema, AssetEntityTypeSchema, AssetProviderRefSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, RoutingReasonSchema, RoutingSourceSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SessionShareAccessSchema, SessionAccessSchema, SessionOwnerSchema, SessionSharesSchema, SessionSharesUpdateSchema, SteerModeSchema, SteeringStatusSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, TaskAttachmentKindSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY = "_agentSwarmGeneratedBy", attachmentCapabilitiesSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, RbacRoleSchema, UserRbacRolesSchema, UserCommsPrefsSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentCredStatusKeyResultSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AgentOpencodeGoStatusSchema, AcpSessionConfigSelectValueSchema, AcpSessionConfigSelectGroupSchema, AcpSessionConfigOptionSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, REPO_GUIDELINES_MAX_ENTRIES = 50, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeInstanceStatusSchema, RuntimeProviderKindSchema, DeliveryModeSchema, PoolLifecycleSchema, RuntimeResourcesSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, SUPERSEDED_WORKFLOW_TASK_REASON = "superseded_workflow_task", ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, WebhookVerificationSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WorkflowRunStepSlimSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptExecutorNameSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionNameSchema, SemverSchema, ExtensionBundlePathSchema, ExtensionAssetNameSchema, ExtensionScriptAssetSchema, ExtensionScheduleAssetSchema, ExtensionWorkflowAssetSchema, ExtensionSkillAssetSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionStatusSchema, ExtensionSchema, ExtensionFileSchema, ExtensionVersionSchema, ExtensionRunSchema, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
 var init_types = __esm(() => {
   init_key();
   init_bundle_path();
@@ -2269,11 +2269,22 @@ var init_types = __esm(() => {
     createdAt: exports_iso.datetime(),
     lastUpdatedAt: exports_iso.datetime()
   }).openapi("Agent");
+  AgentCredStatusKeyResultSchema = object2({
+    keyType: string2(),
+    index: number2(),
+    suffix: string2(),
+    ok: boolean(),
+    error: string2().optional(),
+    httpStatus: number2().optional(),
+    latency_ms: number2()
+  }).openapi("AgentCredStatusKeyResult");
   AgentCredStatusLiveTestSchema = object2({
     ok: boolean(),
     error: string2().nullable().default(null),
     latency_ms: number2(),
-    testedAt: number2()
+    testedAt: number2(),
+    warning: string2().optional(),
+    keys: array2(AgentCredStatusKeyResultSchema).optional()
   }).openapi("AgentCredStatusLiveTest");
   AgentLatestModelSchema = object2({
     model: string2().min(1),
@@ -3241,6 +3252,7 @@ var init_types = __esm(() => {
     diagnostics: string2().optional(),
     nextPort: string2().optional()
   }).openapi("WorkflowRunStep");
+  WorkflowRunStepSlimSchema = WorkflowRunStepSchema.omit({ input: true }).openapi("WorkflowRunStepSlim");
   WaitModeSchema = _enum2(["time", "event"]);
   WaitStateStatusSchema = _enum2(["pending", "fired", "timeout"]);
   WaitStateRowSchema = object2({
@@ -3290,6 +3302,7 @@ var init_types = __esm(() => {
   }).openapi("PromptTemplateHistory");
   ScriptScopeSchema = _enum2(["global", "agent"]);
   ScriptFsModeSchema = _enum2(["none", "workspace-rw"]);
+  ScriptExecutorNameSchema = _enum2(["native", "quickjs"]);
   ScriptRecordSchema = object2({
     id: string2(),
     name: string2(),
@@ -3305,6 +3318,7 @@ var init_types = __esm(() => {
     isScratch: boolean(),
     typeChecked: boolean(),
     fsMode: ScriptFsModeSchema,
+    executor: ScriptExecutorNameSchema.nullable().default(null),
     createdByAgentId: string2().nullable(),
     createdAt: string2(),
     updatedAt: string2()
@@ -3674,4 +3688,4 @@ var init_types = __esm(() => {
   }).openapi("KvEntry");
 });
 
-export { ASSET_KEY_MAX_LENGTH, normalizeAssetKey, defaultAssetKey, keyPrefixRange, SESSION_LEAF_KINDS, sessionGroupKey, parseAssetKey, isCanonicalAssetKey, canWriteAssetKey, init_key, isSafeBundlePath, init_bundle_path, $OpenAPIRegistry, $OpenApiGeneratorV31, init_dist, init_zod_openapi, AssetKeySchema, AssetEntityTypeSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, DEFAULT_MODEL_TIER_MAP, parseModelTier, splitLegacyModelAlias, parseWorkerModelTierOverrides, resolveTaskModelSelection, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, isTerminalTaskStatus, AgentTaskSourceSchema, RoutingReasonSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SessionAccessSchema, SessionOwnerSchema, SessionSharesSchema, SessionSharesUpdateSchema, SteerModeSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, RbacRoleSchema, UserRbacRolesSchema, UserCommsPrefsSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentLatestModelSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, VersionableFieldSchema, ChannelTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeProviderKindSchema, DeliveryModeSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, SUPERSEDED_WORKFLOW_TASK_REASON, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSchema, PageVersionSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionSchema, ExtensionVersionSchema, ExtensionRunSchema, checkExtensionInstallSource, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types };
+export { ASSET_KEY_MAX_LENGTH, normalizeAssetKey, defaultAssetKey, keyPrefixRange, SESSION_LEAF_KINDS, sessionGroupKey, parseAssetKey, isCanonicalAssetKey, canWriteAssetKey, init_key, isSafeBundlePath, init_bundle_path, $OpenAPIRegistry, $OpenApiGeneratorV31, init_dist, init_zod_openapi, AssetKeySchema, AssetEntityTypeSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, DEFAULT_MODEL_TIER_MAP, parseModelTier, splitLegacyModelAlias, parseWorkerModelTierOverrides, resolveTaskModelSelection, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, isTerminalTaskStatus, AgentTaskSourceSchema, RoutingReasonSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SessionAccessSchema, SessionOwnerSchema, SessionSharesSchema, SessionSharesUpdateSchema, SteerModeSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, RbacRoleSchema, UserRbacRolesSchema, UserCommsPrefsSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentLatestModelSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, VersionableFieldSchema, ChannelTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeProviderKindSchema, DeliveryModeSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, SUPERSEDED_WORKFLOW_TASK_REASON, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSchema, PageVersionSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepSchema, WorkflowRunStepSlimSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptExecutorNameSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionSchema, ExtensionVersionSchema, ExtensionRunSchema, checkExtensionInstallSource, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types };

package/dist/{cli-s682zgqz.js → cli-a6ds2epe.js}

@@ -1,7 +1,7 @@
 import {
   init_package,
   package_default
-} from "./cli-xtrz6bzs.js";
+} from "./cli-ptfq202x.js";
 
 // src/commands/shared/client-config.ts
 init_package();

package/dist/{cli-6a1xg1p7.js → cli-a89zdqz9.js}

@@ -5,12 +5,12 @@ import {
   validateRuntimeTokenTtlHours,
   init_swarm_config_guard,
   init_db3
-} from "./cli-jb30dzvk.js";
+} from "./cli-48gxjmcz.js";
 import {
   registerVolatileSecret,
   unregisterVolatileSecret,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-03vpq45j.js → cli-ay40dnj3.js}

@@ -9,7 +9,7 @@ import {
   loadMcpConfig,
   addMcpServerConfig,
   removeMcpServerConfig
-} from "./cli-x77gen2p.js";
+} from "./cli-2y7v133v.js";
 import {
   McpOAuthCredentialStore2,
   McpSignInCancelledError2,
@@ -17,7 +17,7 @@ import {
   McpServerLog2,
   createDefaultTransport2,
   McpServerConnection2
-} from "./cli-cz5nmdxt.js";
+} from "./cli-m5e802r7.js";
 
 // node_modules/@earendil-works/pi-coding-agent/dist/extensions/mcp/cli.js
 import { existsSync } from "node:fs";

package/dist/{cli-tsma7p8v.js → cli-aypd09nf.js}

@@ -9,12 +9,12 @@ import {
   acquireOAuthRefreshLock,
   releaseOAuthRefreshLock,
   init_oauth
-} from "./cli-jb30dzvk.js";
+} from "./cli-48gxjmcz.js";
 import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 
 // node_modules/oauth4webapi/build/index.js
 var USER_AGENT;

package/dist/{cli-ethgy7ha.js → cli-b3yzyc57.js}

@@ -6,11 +6,11 @@ import {
   getResolvedConfig2,
   getAllUsers2,
   init_db3
-} from "./cli-jb30dzvk.js";
+} from "./cli-48gxjmcz.js";
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 
 // src/be/seed/agent-fs-provision.ts
 init_secret_scrubber();

package/dist/{cli-bn0rewsy.js → cli-c081bj3b.js}

@@ -2,7 +2,7 @@ import {
   runtimeCatalogSection,
   runtimeCatalogModel,
   init_runtime_model_catalog
-} from "./cli-6x9ma5w5.js";
+} from "./cli-803188pb.js";
 import {
   dshCatalogRef,
   grokCatalogRef,
@@ -10,7 +10,7 @@ import {
   reasoningLevelsFor,
   claudeCatalogModelId,
   init_src2
-} from "./cli-nwyw3zhg.js";
+} from "./cli-gxee0bqa.js";
 
 // src/providers/reasoning-effort.ts
 init_src2();