@desplega.ai/agent-swarm 2.6.0 → 2.7.0

package/dist/{cli-3fwqy71j.js → cli-j0ppywdr.js}

@@ -17,6 +17,7 @@ import {
   getWorkflowRunStatus,
   getChildWorkflowRunId,
   isParentStepAttemptCurrent,
+  emitRunFinished,
   createForeachChildSteps,
   init_workflow_runs,
   isApiOnlyConfigKey,
@@ -55,30 +56,30 @@ import {
   releaseApprovalCancellationNotificationClaim2,
   updateApprovalRequestNotifications2,
   init_db3
-} from "./cli-g8ka5j4j.js";
+} from "./cli-48gxjmcz.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-e8xyjvfc.js";
 import {
   getSlackApp2
-} from "./cli-g20jjwt4.js";
+} from "./cli-m30k9777.js";
 import {
   externalChannelToolError2,
   isBlockExternalEnabled2,
   getChannelBlockReason2
-} from "./cli-gnsb1zxa.js";
+} from "./cli-s09j9vp5.js";
 import {
   DEFAULT_MODEL,
   resolveCredential
-} from "./cli-v49fkghp.js";
+} from "./cli-1m9x8dr5.js";
 import {
   revokeRuntimeTokensForRuntime,
   init_users
-} from "./cli-esakngh8.js";
+} from "./cli-a89zdqz9.js";
 import {
   TERMINAL_TASK_STATUSES,
   init_types
-} from "./cli-4rf0f5vg.js";
+} from "./cli-9pshx6rd.js";
 import {
   getSlackConfiguration,
   isSlackConfigured,
@@ -87,7 +88,7 @@ import {
 import {
   selectCredential,
   init_credentials
-} from "./cli-1tem6ns9.js";
+} from "./cli-gt4h8cxw.js";
 import {
   DEFAULT_OPENROUTER_BASE_URL,
   getOpenRouterBaseUrl,
@@ -99,7 +100,7 @@ import {
   init_template,
   resolveTemplate,
   init_resolver
-} from "./cli-dqygeeh5.js";
+} from "./cli-f1e0ptjj.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -149,7 +150,7 @@ async function notifyAutomationPreflightFailure(preflight) {
     return;
   }
   try {
-    const { getSlackApp } = await import("./app-k8a5cgpp.js");
+    const { getSlackApp } = await import("./app-mwx1d5a9.js");
     const app = getSlackApp();
     if (!app) {
       console.warn("[Automation Preflight] Slack not available, cannot send notification");
@@ -176,6 +177,7 @@ init_config();
 init_env_flag();
 init_secret_scrubber();
 init_db3();
+init_workflow_runs();
 init_oauth();
 init_scrub_json();
 var NEEDS_SETUP_PREFIX = "needs_setup:";
@@ -438,6 +440,7 @@ async function recordWorkflowPreflightFailure(input) {
       timestamp,
       timestamp
     ]);
+    emitRunFinished(runId, input.workflowId, "failed");
     return {
       runId,
       recorded: await isFirstWorkflowPreflightFailureToday(input.workflowId, runId, now)
@@ -3812,6 +3815,18 @@ function resolveNodeTimeoutMs(node) {
     return config.timeout;
   return DEFAULT_NODE_TIMEOUT_MS;
 }
+function startStepDeadline(timeoutMs) {
+  const controller = new AbortController;
+  let timer;
+  const expired = new Promise((_, reject) => {
+    timer = setTimeout(() => {
+      const error = new Error(`Step timed out after ${timeoutMs}ms`);
+      reject(error);
+      controller.abort(error);
+    }, timeoutMs);
+  });
+  return { signal: controller.signal, expired, clear: () => clearTimeout(timer) };
+}
 
 // src/workflows/readiness.ts
 async function findWorkflowReadinessProblems(definition, registry) {
@@ -4011,8 +4026,9 @@ async function startWorkflowExecution2(workflow, triggerData, registry, options
     if (initial.status)
       return runId;
     const walk = walkGraph(workflow.definition, runId, initial.context, findEntryNodes(workflow.definition), registry, workflow.id, getSecretInputKeys(workflow.input), options);
-    if (options.parentStepId) {
-      walk.catch((err) => console.error(`[workflows] Child workflow run ${runId} failed:`, err));
+    if (options.parentStepId || options.detach) {
+      const kind = options.parentStepId ? "Child" : "Detached";
+      walk.catch((err) => console.error(`[workflows] ${kind} workflow run ${runId} failed:`, err));
       return runId;
     }
     await walk;
@@ -4487,17 +4503,17 @@ async function runClaimedStep(def, runId, ctx, node, registry, existingStep, ste
     requestedByUserId: options.requestedByUserId,
     inputCtx: interpolationCtx
   };
-  const timeoutMs = resolveNodeTimeoutMs(node);
+  const deadline = startStepDeadline(resolveNodeTimeoutMs(node));
   let result;
   try {
     result = await Promise.race([
       executor.run({
         config: interpolatedConfig,
         context: executionCtx,
-        meta
+        meta: { ...meta, signal: deadline.signal }
       }),
-      timeoutPromise(timeoutMs)
-    ]);
+      deadline.expired
+    ]).finally(deadline.clear);
   } catch (err) {
     const errorMsg = err instanceof Error ? err.message : String(err);
     const retryPolicy = node.retry || executor.retryPolicy;
@@ -4536,7 +4552,7 @@ async function runClaimedStep(def, runId, ctx, node, registry, existingStep, ste
     }
     const waiting = await checkpointStepWaiting(runId, stepId, ctx);
     if (waiting && result.waitFor === "workflow.child.finished") {
-      const { resumeFromChildRun } = await import("./resume-8ayf37g5.js");
+      const { resumeFromChildRun } = await import("./resume-1bmvjbf3.js");
       await resumeFromChildRun(stepId, registry);
     }
     return { outcome: waiting ? "waiting" : "completed", successors: [] };
@@ -4741,11 +4757,6 @@ function scriptBodyInterpolationError(nodeId, tokens) {
   const renderedTokens = [...new Set(tokens)].map((token) => `{{${token}}}`).join(", ");
   return `Script body interpolation failed for node "${nodeId}": unresolved or disallowed token(s): ${renderedTokens}. Executable source may interpolate only input, workflow, swarm, or run values. Pass dynamic trigger or upstream values through config.args and read them from argv.`;
 }
-function timeoutPromise(ms) {
-  return new Promise((_, reject) => {
-    setTimeout(() => reject(new Error(`Step timed out after ${ms}ms`)), ms);
-  });
-}
 
 // src/workflows/executors/foreach.ts
 init_zod();
@@ -4998,7 +5009,7 @@ async function runForeachDrive(runId, parentNodeId, registry) {
     if (drive.successors.length > 0) {
       await walkGraph(workflow.definition, runId, ctx, drive.successors, registry, workflow.id, getSecretInputKeys(workflow.input));
     } else {
-      const { finalizeOrWait } = await import("./resume-8ayf37g5.js");
+      const { finalizeOrWait } = await import("./resume-1bmvjbf3.js");
       await finalizeOrWait(runId);
     }
     return drive;
@@ -5114,25 +5125,21 @@ async function startChild(input) {
     }
   }
   const executor = registry.get(bodyType);
-  const timeoutMs = resolveNodeTimeoutMs({ type: bodyType, config });
-  let timer;
+  const deadline = startStepDeadline(resolveNodeTimeoutMs({ type: bodyType, config }));
   let result;
   try {
     result = await Promise.race([
       executor.run({
         config,
         context: { ...ctx, ...bodyCtx },
-        meta: { ...meta, stepId: child.id, nodeId: child.nodeId }
+        meta: { ...meta, stepId: child.id, nodeId: child.nodeId, signal: deadline.signal }
       }),
-      new Promise((_, reject) => {
-        timer = setTimeout(() => reject(new Error(`Step timed out after ${timeoutMs}ms`)), timeoutMs);
-      })
+      deadline.expired
     ]);
   } catch (err) {
     return { status: "failed", error: err instanceof Error ? err.message : String(err) };
   } finally {
-    if (timer)
-      clearTimeout(timer);
+    deadline.clear();
   }
   if (result.status === "failed") {
     return {
@@ -5145,7 +5152,7 @@ async function startChild(input) {
     const parked = await getDbClient2().get("UPDATE workflow_run_steps SET status = 'waiting' WHERE id = ? AND status = 'running' RETURNING id", [child.id]);
     if (parked && result.waitFor === "workflow.child.finished") {
       ownedChildren.delete(child.id);
-      const { resumeFromChildRun } = await import("./resume-8ayf37g5.js");
+      const { resumeFromChildRun } = await import("./resume-1bmvjbf3.js");
       await resumeFromChildRun(child.id, registry);
     }
     return null;

package/dist/{cli-5rj83bam.js → cli-j3y0x2n4.js}

@@ -1,6 +1,6 @@
 import {
   renderSteeringDelivery
-} from "./cli-sxgtf5fw.js";
+} from "./cli-07q03xm2.js";
 import {
   authJsonToCredentialSelection,
   credentialsToAuthJson,
@@ -27,7 +27,7 @@ import {
   checkDeepSeekApiKey,
   checkOpenAICompatibleProvider,
   writeSkillsToFilesystem
-} from "./cli-n7asmce6.js";
+} from "./cli-6mgdba42.js";
 import {
   isPollTracingEnabled,
   initOtel,
@@ -37,7 +37,7 @@ import {
   injectTraceContext2,
   initialize,
   ensure
-} from "./cli-g20jjwt4.js";
+} from "./cli-m30k9777.js";
 import {
   MAX_RATE_LIMIT_RESET_MS,
   isRateLimitMessage,
@@ -45,7 +45,7 @@ import {
   CODEX_CREDITS_EXHAUSTED_COOLDOWN_MS,
   resolveCodexCreditsExhaustedCooldownMs,
   parseRateLimitResetTime
-} from "./cli-7enjwya9.js";
+} from "./cli-vz78s5wm.js";
 import {
   terminateRegisteredProcessGroups
 } from "./cli-3ggwdtb0.js";
@@ -55,7 +55,7 @@ import {
   canonicalAzureDevOpsRepoUrl,
   parseAzureDevOpsRepoUrl,
   resolveScriptsOnlyMode
-} from "./cli-4hxrf0p4.js";
+} from "./cli-6a9qfa8b.js";
 import {
   ACP_TARGET_IDS,
   isAcpTarget
@@ -63,32 +63,32 @@ import {
 import {
   checkAmpCredentials2,
   liveTestAmpCredentials2
-} from "./cli-m5a9m0ak.js";
+} from "./cli-kv7sbc2c.js";
 import {
   checkClaudeCredentials2
-} from "./cli-k21gx5ht.js";
+} from "./cli-1hhbzkbb.js";
 import {
   checkClaudeManagedCredentials2
-} from "./cli-ffvsj2qw.js";
+} from "./cli-yd2nreqw.js";
 import {
   codexUserHome,
   checkCodexCredentials2
-} from "./cli-ca6banwz.js";
+} from "./cli-ymjpkxgn.js";
 import {
   checkCursorCredentials2
-} from "./cli-cz37jqss.js";
+} from "./cli-h5jeg46p.js";
 import {
   checkDevinCredentials2
 } from "./cli-39rrw8yp.js";
 import {
   checkDshCredentials2
-} from "./cli-az25fn5f.js";
+} from "./cli-gsfk58nw.js";
 import {
   checkOpencodeCredentials2
-} from "./cli-9abdgn5t.js";
+} from "./cli-86ehn4s5.js";
 import {
   checkGrokCredentials2
-} from "./cli-m70bajzr.js";
+} from "./cli-f12mr20z.js";
 import {
   getContextWindowSize,
   init_context_window
@@ -101,7 +101,7 @@ import {
 } from "./cli-j4bwnpkm.js";
 import {
   validateJsonSchema
-} from "./cli-3fwqy71j.js";
+} from "./cli-j0ppywdr.js";
 import {
   mapTriggerSurface,
   init_telemetry_context,
@@ -119,7 +119,7 @@ import {
   init_vcs_repo_match,
   isApiDrainingResponse,
   init_api_drain
-} from "./cli-g8ka5j4j.js";
+} from "./cli-48gxjmcz.js";
 import {
   parseWorkerModelTierOverrides,
   resolveTaskModelSelection,
@@ -127,7 +127,7 @@ import {
   ProviderNameSchema,
   WorkerNudgeSchema,
   init_types
-} from "./cli-4rf0f5vg.js";
+} from "./cli-9pshx6rd.js";
 import {
   generateDefaultClaudeMd2,
   generateDefaultSoulMd2,
@@ -151,14 +151,14 @@ import {
   resolveClaudeMdPath,
   syncProfileFilesToServer,
   init_profile_sync
-} from "./cli-hfeb68z4.js";
+} from "./cli-x37r7qwf.js";
 import {
   isSteeringEnabled2,
   init_steering_enabled
 } from "./cli-4sydckyj.js";
 import {
   init_templates3
-} from "./cli-j6rktc91.js";
+} from "./cli-v6shg7na.js";
 import {
   validateRoute,
   deriveDefaultRoute,
@@ -175,14 +175,14 @@ import {
   CLAUDE_CREDENTIALS_HINT,
   resolveCredentialPools,
   init_credentials
-} from "./cli-1tem6ns9.js";
+} from "./cli-gt4h8cxw.js";
 import {
   interpolate,
   init_template,
   configureHttpResolver,
   resolveTemplateAsync,
   init_resolver
-} from "./cli-dqygeeh5.js";
+} from "./cli-f1e0ptjj.js";
 import {
   runtimeHarnessSections,
   refreshRuntimeModelCatalog,
@@ -248,19 +248,19 @@ async function materializeCodexAuthJson(_slot, creds, deps = {}) {
 async function createProviderAdapter(provider) {
   switch (provider) {
     case "claude": {
-      const { ClaudeAdapter } = await import("./claude-adapter-nys1kjxa.js");
+      const { ClaudeAdapter } = await import("./claude-adapter-wqt4hfkq.js");
       return new ClaudeAdapter;
     }
     case "pi": {
-      const { PiMonoAdapter } = await import("./pi-mono-adapter-mymbwhj0.js");
+      const { PiMonoAdapter } = await import("./pi-mono-adapter-qn6qbga1.js");
       return new PiMonoAdapter;
     }
     case "codex": {
-      const { CodexAdapter } = await import("./codex-adapter-d95q4qsn.js");
+      const { CodexAdapter } = await import("./codex-adapter-zk59x2zh.js");
       return new CodexAdapter;
     }
     case "claude-managed": {
-      const { ClaudeManagedAdapter } = await import("./claude-managed-adapter-55207973.js");
+      const { ClaudeManagedAdapter } = await import("./claude-managed-adapter-6fjqtr2z.js");
       return new ClaudeManagedAdapter;
     }
     case "devin": {
@@ -268,27 +268,27 @@ async function createProviderAdapter(provider) {
       return new DevinAdapter;
     }
     case "opencode": {
-      const { OpencodeAdapter } = await import("./opencode-adapter-esv3k9yn.js");
+      const { OpencodeAdapter } = await import("./opencode-adapter-26b2frdf.js");
       return new OpencodeAdapter;
     }
     case "dsh": {
-      const { DshAdapter } = await import("./dsh-adapter-d4pdpb3r.js");
+      const { DshAdapter } = await import("./dsh-adapter-46wawff9.js");
       return new DshAdapter;
     }
     case "amp": {
-      const { AmpAdapter } = await import("./amp-adapter-en0jy6hs.js");
+      const { AmpAdapter } = await import("./amp-adapter-sxqqvmdk.js");
       return new AmpAdapter;
     }
     case "cursor": {
-      const { CursorAdapter } = await import("./cursor-adapter-4mr4jgkw.js");
+      const { CursorAdapter } = await import("./cursor-adapter-yss3pg7t.js");
       return new CursorAdapter;
     }
     case "grok": {
-      const { GrokAdapter } = await import("./grok-adapter-t08b9ntm.js");
+      const { GrokAdapter } = await import("./grok-adapter-ag4wks2a.js");
       return new GrokAdapter;
     }
     case "acp": {
-      const { ACPAdapter } = await import("./acp-adapter-dgfakfpw.js");
+      const { ACPAdapter } = await import("./acp-adapter-ma1js5n7.js");
       return new ACPAdapter;
     }
     default:
@@ -1231,6 +1231,7 @@ init_secret_scrubber();
 init_src2();
 init_src();
 init_credentials();
+init_env_flag();
 init_secret_scrubber();
 function isBedrockMode(env) {
   const mode = env.BEDROCK_AUTH_MODE?.toLowerCase();
@@ -1273,7 +1274,7 @@ var CREDENTIAL_PROVIDER_CHECKERS = {
   devin: (env) => checkDevinCredentials2(env),
   opencode: (env, opts) => checkOpencodeCredentials2(env, opts),
   pi: async (env, opts) => {
-    const { checkPiMonoCredentials, listPiOpencodeGoModelIds } = await import("./pi-mono-adapter-mymbwhj0.js");
+    const { checkPiMonoCredentials, listPiOpencodeGoModelIds } = await import("./pi-mono-adapter-qn6qbga1.js");
     return {
       ...await checkPiMonoCredentials(env, opts),
       opencodeGoModels: listPiOpencodeGoModelIds()
@@ -1552,7 +1553,7 @@ async function validateProviderCredentials(provider, env = process.env, presence
             latency_ms: Date.now() - startedAt
           };
         }
-        const { liveTestCursorKey } = await import("./cursor-adapter-4mr4jgkw.js");
+        const { liveTestCursorKey } = await import("./cursor-adapter-yss3pg7t.js");
         return checkEachKey("CURSOR_API_KEY", apiKey, async (member) => {
           const start = Date.now();
           const result = await liveTestCursorKey(member);
@@ -1587,7 +1588,7 @@ async function validateProviderCredentials(provider, env = process.env, presence
   }
 }
 function isCredCheckDisabled(env) {
-  return env.CRED_CHECK_DISABLE === "1";
+  return isEnvFlagEnabled("CRED_CHECK_DISABLE", false, env);
 }
 async function buildCredStatusReport(provider, env, opts = {}, kind) {
   const presence = await checkProviderCredentials(provider, env, opts);

package/dist/{cli-3gfvmzht.js → cli-j9bpmykh.js}

@@ -40,14 +40,14 @@ import {
   getResolvedConfig2,
   getMcpServerById2,
   init_db3
-} from "./cli-g8ka5j4j.js";
+} from "./cli-48gxjmcz.js";
 import {
   generateRandomCodeVerifier,
   generateRandomState,
   calculatePKCECodeChallenge,
   oauthAppRowToProviderConfig,
   ensureAuthorizationTokenOrThrow
-} from "./cli-kf4jree9.js";
+} from "./cli-aypd09nf.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -60,11 +60,11 @@ import {
   mintScriptRunToken,
   revokeSessionToken,
   init_users
-} from "./cli-esakngh8.js";
+} from "./cli-a89zdqz9.js";
 import {
   defaultAssetKey,
   init_key
-} from "./cli-4rf0f5vg.js";
+} from "./cli-9pshx6rd.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -177950,21 +177950,18 @@ class NativeScriptExecutor {
     let killed = input.signal?.aborted ?? false;
     let removeAbortListener;
     let proc;
+    const killedOutput = () => ({
+      result: undefined,
+      stdout: "",
+      stderr: "",
+      truncated: { stdout: false, stderr: false },
+      durationMs: Date.now() - start,
+      exitCode: 1,
+      error: "killed"
+    });
     try {
-      if (killed) {
-        return {
-          result: undefined,
-          stdout: "",
-          stderr: "",
-          truncated: { stdout: false, stderr: false },
-          durationMs: Date.now() - start,
-          exitCode: 1,
-          error: "killed"
-        };
-      }
-      await Bun.write(argsFile, JSON.stringify(input.args ?? null));
-      await Bun.write(sourceFile, input.source);
-      await writeBareImportShims(tmpdir);
+      if (killed)
+        return killedOutput();
       const onExternalAbort = () => {
         killed = true;
         if (proc)
@@ -177972,6 +177969,11 @@ class NativeScriptExecutor {
       };
       input.signal?.addEventListener("abort", onExternalAbort, { once: true });
       removeAbortListener = () => input.signal?.removeEventListener("abort", onExternalAbort);
+      await Bun.write(argsFile, JSON.stringify(input.args ?? null));
+      await Bun.write(sourceFile, input.source);
+      await writeBareImportShims(tmpdir);
+      if (killed)
+        return killedOutput();
       const timeout = setTimeout(() => {
         timedOut = true;
         if (proc)
@@ -177988,7 +177990,8 @@ class NativeScriptExecutor {
         SWARM_SCRIPT_SOURCE_FILE: sourceFile,
         SWARM_SCRIPT_RESULT_FILE: resultFile,
         SWARM_SCRIPT_ERROR_FILE: errorFile,
-        SWARM_SCRIPT_STARTED_FILE: startedFile
+        SWARM_SCRIPT_STARTED_FILE: startedFile,
+        ...input.hostValidatedArgs ? { SWARM_SCRIPT_HOST_VALIDATED_ARGS: "1" } : {}
       };
       proc = registerProcessGroup(Bun.spawn(harnessCommand(harnessPath, input, harnessEnv), {
         env: sandboxSpawnEnv(harnessEnv),
@@ -178145,6 +178148,10 @@ class QuickJSScriptExecutor {
       pool.discard(slot);
       return emptyOutput("executor_error", `quickjs worker failed to start: ${error instanceof Error ? error.message : String(error)}`);
     }
+    if (input.signal?.aborted) {
+      pool.release(slot);
+      return emptyOutput("killed");
+    }
     const id = ++requestSeq;
     const start = performance.now();
     return await new Promise((resolve) => {
@@ -178186,6 +178193,7 @@ class QuickJSScriptExecutor {
         job: {
           source: input.source,
           args: input.args,
+          ...input.hostValidatedArgs ? { hostValidatedArgs: true } : {},
           configPayload: input.configPayload,
           resources: input.resources,
           network: input.network
@@ -178200,6 +178208,17 @@ var EXECUTORS = {
   native: () => new NativeScriptExecutor,
   quickjs: () => new QuickJSScriptExecutor
 };
+function getDeploymentScriptExecutorName(env = process.env) {
+  return (env.SCRIPT_EXECUTOR ?? "native").trim();
+}
+function isExecutorAllowedByDeployment(requested, env = process.env) {
+  if (!requested)
+    return true;
+  if (getDeploymentScriptExecutorName(env) === "quickjs" && requested.trim() === "native") {
+    return false;
+  }
+  return true;
+}
 function getScriptExecutor(name = process.env.SCRIPT_EXECUTOR ?? "native") {
   const factory = EXECUTORS[name.trim()];
   if (!factory) {
@@ -178207,6 +178226,13 @@ function getScriptExecutor(name = process.env.SCRIPT_EXECUTOR ?? "native") {
   }
   return factory();
 }
+function resolveScriptExecutor(requested, env = process.env) {
+  if (!isExecutorAllowedByDeployment(requested, env)) {
+    throw new Error('Executor "native" is not permitted when deployment SCRIPT_EXECUTOR="quickjs"');
+  }
+  const effective = requested ?? env.SCRIPT_EXECUTOR ?? "native";
+  return getScriptExecutor(effective);
+}
 
 // src/scripts-runtime/executors/types.ts
 var MIN_SCRIPT_WALL_CLOCK_MS = 1000;
@@ -178222,6 +178248,9 @@ var DEFAULT_SCRIPT_RESOURCES = {
   maxStdoutBytes: 1048576
 };
 
+// src/scripts-runtime/host-validated-args.ts
+var HOST_VALIDATED_ARGS = Symbol("swarm.hostValidatedArgs");
+
 // src/scripts-runtime/import-allowlist.ts
 var import_typescript = __toESM(require_typescript2(), 1);
 var SCRIPT_ALLOWED_BARE_IMPORTS = ["swarm-sdk", "stdlib", "zod", "zod/mini"];
@@ -178365,6 +178394,17 @@ async function runScript(input) {
       error: "executor_error"
     };
   }
+  if (!isExecutorAllowedByDeployment(input.executor)) {
+    return {
+      result: undefined,
+      stdout: "",
+      stderr: 'Executor "native" is not permitted when deployment SCRIPT_EXECUTOR="quickjs"',
+      truncated: { stdout: false, stderr: false },
+      durationMs: 0,
+      exitCode: 1,
+      error: "executor_error"
+    };
+  }
   const runSecrets = createValueScrubber(Object.entries(input.userConfig ?? {}).filter(([, entry]) => entry.isSecret).map(([key, entry]) => ({ value: entry.value, name: `config:${key}` })));
   const imports = validateScriptImports(input.source);
   if (!imports.ok) {
@@ -178387,18 +178427,19 @@ async function runScript(input) {
   const executorInput = {
     source: input.source,
     args: input.args ?? null,
+    ...input[HOST_VALIDATED_ARGS] === true ? { hostValidatedArgs: true } : {},
     configPayload,
     resources,
     fsMode: input.fsMode ?? "none",
     network: scriptEgressPolicy(),
     signal: input.signal
   };
-  let output = await getScriptExecutor().run(executorInput);
+  let output = await resolveScriptExecutor(input.executor).run(executorInput);
   for (const delayMs of CAPACITY_EXCEEDED_RETRY_DELAYS_MS) {
     if (output.error !== "capacity_exceeded" || input.signal?.aborted)
       break;
     await Bun.sleep(delayMs);
-    output = await getScriptExecutor().run(executorInput);
+    output = await resolveScriptExecutor(input.executor).run(executorInput);
   }
   return {
     ...output,
@@ -178571,6 +178612,7 @@ async function runSavedScriptAsAgent(args, deps = {}) {
     source: args.script.source,
     args: args.input,
     fsMode: args.script.fsMode,
+    executor: args.script.executor,
     agentId: args.agentId,
     egressSecrets: credentials.egressSecrets,
     failedBindings: credentials.failedBindings,
@@ -184019,6 +184061,7 @@ var SCRIPT_SDK_TYPES = `
 export type JsonValue = null | boolean | number | string | JsonValue[] | { [key: string]: JsonValue };
 export type ScriptScope = "agent" | "global";
 export type ScriptFsMode = "none" | "workspace-rw";
+export type ScriptExecutorName = "native" | "quickjs";
 export type ScriptApiRawOptions = { raw: true };
 export type ScriptApiDefaultOptions = { raw?: false };
 export type RoutingReason = "skill" | "continuity" | "overflow" | "human_pinned" | "reroute_fault";
@@ -184210,7 +184253,7 @@ export interface SwarmSdk {
   schedule_list(args?: { enabled?: boolean; name?: string; scheduleType?: "recurring" | "one_time"; targetType?: "agent-task" | "workflow" | "script"; workflowId?: string; scriptName?: string; hideCompleted?: boolean; consecutiveErrorsMin?: number; lastRunStatus?: "failed" | "succeeded"; includeFull?: boolean }): Promise<unknown>;
   // --- scripts ---
   script_search(args: { query?: string; scope?: ScriptScope; limit?: number }): Promise<unknown>;
-  script_run(args: { name?: string; source?: string; args?: unknown; intent?: string; scope?: ScriptScope; fsMode?: ScriptFsMode; idempotencyKey?: string }): Promise<unknown>;
+  script_run(args: { name?: string; source?: string; args?: unknown; intent?: string; scope?: ScriptScope; fsMode?: ScriptFsMode; executor?: ScriptExecutorName | null; idempotencyKey?: string }): Promise<unknown>;
   // --- swarm / agent ---
   swarm_get(args?: { includeFull?: boolean }): Promise<unknown>;
   agent_info(args?: Record<string, unknown>): Promise<unknown>;
@@ -184327,7 +184370,12 @@ export interface SwarmSdk {
   workflow_patch(args: Record<string, unknown>): Promise<unknown>;
   workflow_patchNode(args: Record<string, unknown>): Promise<unknown>;
   workflow_delete(args: { id: string }): Promise<unknown>;
-  workflow_trigger(args: { id: string; triggerData?: Record<string, unknown> }): Promise<unknown>;
+  workflow_trigger(args: {
+    id: string;
+    triggerData?: Record<string, unknown>;
+    wait?: boolean;
+    idempotencyKey?: string;
+  }): Promise<unknown>;
   workflow_retryRun(args: { id: string }): Promise<unknown>;
   workflow_cancelRun(args: { id: string }): Promise<unknown>;
 
@@ -184337,7 +184385,7 @@ export interface SwarmSdk {
   prompt_preview(args: Record<string, unknown>): Promise<unknown>;
 
   // --- write: scripts ---
-  script_upsert(args: { name: string; source: string; description?: string; intent?: string; scope?: ScriptScope; fsMode?: ScriptFsMode }): Promise<unknown>;
+  script_upsert(args: { name: string; source: string; description?: string; intent?: string; scope?: ScriptScope; fsMode?: ScriptFsMode; executor?: ScriptExecutorName | null }): Promise<unknown>;
   script_delete(args: { name: string; scope?: ScriptScope }): Promise<unknown>;
   script_queryTypes(args: { name: string; scope?: ScriptScope }): Promise<unknown>;
   script_launchRun(args: { source: string; args?: unknown; idempotencyKey?: string; scriptName?: string; requestedByUserId?: string }): Promise<unknown>;
@@ -185178,4 +185226,4 @@ function parseSkillContent(content) {
   };
 }
 
-export { require_dist2, isInvalidClientError, publicEndpointSsrfOptions, mcpOAuthSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, resolveSqlDsn, runReadOnlyQuery, listVendoredOpenapiEntries, ConnectionAuthInputSchema, SqlDsnInputSchema, connectionAuthSummary, listRelationalCredentialBindings, getCredentialBindingById, findCredentialBindingByIdentity, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, listScriptConnectionsAsync, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, deleteScriptConnection, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, writeBareImportShim, MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, require_typescript2, checkImportAllowlist, validateScriptImports, runScriptWithRunCredential, extractScriptSignature, extractArgsJsonSchema, getSavedScriptOwnerAgentId, runSavedScriptAsAgent, checkQuickJSCompat, quickJSCompatWarnings, resolveSyncRunAs, AppNameSchema, ScalarColumnKindSchema, isIso8601Date, jsonColumnSizeLabel, jsonColumnValueIssue, isValidColumnValue, SYSTEM_COLUMN_KINDS, SORTABLE_SYSTEM_DATE_COLUMNS, AppElementsSchema, AppDefinitionSchema, collectScriptReferences, scriptCompatWarnings, parseAppDefinition, applyAppDefinitionPatch, upgradeAppDefinition, decodeAppDefinition, appDefinitionNeedsRepair, createApp, getApp, listApps, listAppRecords, updateApp, deleteApp, getScriptAppTypes, SCRIPT_SDK_TYPES, scriptSdkTypesWithGeneratedApis, SCRIPT_STDLIB_MODULE_TYPES, scriptStdlibTypesWithGeneratedApis, typecheckWithAmbient, typecheckScript, parseSkillContent };
+export { require_dist2, isInvalidClientError, publicEndpointSsrfOptions, mcpOAuthSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, resolveSqlDsn, runReadOnlyQuery, listVendoredOpenapiEntries, ConnectionAuthInputSchema, SqlDsnInputSchema, connectionAuthSummary, listRelationalCredentialBindings, getCredentialBindingById, findCredentialBindingByIdentity, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, listScriptConnectionsAsync, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, deleteScriptConnection, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, writeBareImportShim, isExecutorAllowedByDeployment, MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, HOST_VALIDATED_ARGS, require_typescript2, checkImportAllowlist, validateScriptImports, runScriptWithRunCredential, extractScriptSignature, extractArgsJsonSchema, getSavedScriptOwnerAgentId, runSavedScriptAsAgent, checkQuickJSCompat, quickJSCompatWarnings, resolveSyncRunAs, AppNameSchema, ScalarColumnKindSchema, isIso8601Date, jsonColumnSizeLabel, jsonColumnValueIssue, isValidColumnValue, SYSTEM_COLUMN_KINDS, SORTABLE_SYSTEM_DATE_COLUMNS, AppElementsSchema, AppDefinitionSchema, collectScriptReferences, scriptCompatWarnings, parseAppDefinition, applyAppDefinitionPatch, upgradeAppDefinition, decodeAppDefinition, appDefinitionNeedsRepair, createApp, getApp, listApps, listAppRecords, updateApp, deleteApp, getScriptAppTypes, SCRIPT_SDK_TYPES, scriptSdkTypesWithGeneratedApis, SCRIPT_STDLIB_MODULE_TYPES, scriptStdlibTypesWithGeneratedApis, typecheckWithAmbient, typecheckScript, parseSkillContent };