@desplega.ai/agent-swarm 2.7.4 → 2.7.6

package/dist/{cli-5hjced2v.js → cli-wp9sp1qb.js}

@@ -3,12 +3,12 @@ import {
 } from "./cli-jc1g9ndz.js";
 import {
   applyReasoningEffort
-} from "./cli-vqgnyh76.js";
+} from "./cli-98rw5dt5.js";
 import {
   getContextWindowSize,
   clampContextPercent,
   init_context_window
-} from "./cli-rtk9g7av.js";
+} from "./cli-73jzwksr.js";
 import {
   swarmRuntimeInstanceId,
   init_multi_runtime2
@@ -16,13 +16,13 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types4
-} from "./cli-41z8xwj0.js";
+} from "./cli-nhrvpaj7.js";
 import {
   resolveTemplateFromCode,
   resolveTemplateAsync,
   init_resolver,
   init_session_templates
-} from "./cli-j4kw3rsx.js";
+} from "./cli-cm5yqn35.js";
 import {
   parseEnvFlag,
   init_env_flag
@@ -31,11 +31,11 @@ import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   cursorCatalogRef,
   init_src2
-} from "./cli-4r12t6w6.js";
+} from "./cli-5c4hjzne.js";
 
 // src/providers/cursor-adapter.ts
 init_src2();

package/dist/{cli-eny54typ.js → cli-wx3rhnm0.js}

@@ -6,7 +6,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-s0exq74r.js → cli-xbbndvjy.js}

@@ -2,19 +2,19 @@ import {
   getKv2,
   upsertKv2,
   init_db4
-} from "./cli-1s1dqn1j.js";
+} from "./cli-k2gzwsj2.js";
 import {
   resolveIdentity,
   init_identity,
   recordUnmappedIdentity,
   init_unmapped_identities
-} from "./cli-1yekbyqm.js";
+} from "./cli-shpbx5ee.js";
 import {
   findUserByExternalId,
   findOrCreateUserByEmail,
   linkIdentity,
   init_users
-} from "./cli-8yy525ad.js";
+} from "./cli-drr5v6av.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-f255yaqn.js → cli-xds5f77d.js}

@@ -6,15 +6,15 @@ import {
   getResolvedConfig2,
   getAllUsers2,
   init_db4
-} from "./cli-1s1dqn1j.js";
+} from "./cli-k2gzwsj2.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-bq2pcphn.js";
+} from "./cli-rmmmrjkd.js";
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 
 // src/be/seed/agent-fs-provision.ts
 init_secret_scrubber();

package/dist/{cli-0sbkss7h.js → cli-xnqgpshy.js}

@@ -9,7 +9,7 @@ import {
   acquireOAuthRefreshLock,
   releaseOAuthRefreshLock,
   init_oauth
-} from "./cli-1s1dqn1j.js";
+} from "./cli-k2gzwsj2.js";
 import {
   generateRandomCodeVerifier,
   generateRandomState,
@@ -20,7 +20,7 @@ import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-0fgr1w9b.js → cli-xnrwazav.js}

@@ -1,7 +1,8 @@
 import {
   RuntimeProviderKindSchema,
+  RuntimePoolCacheSchema,
   init_types4
-} from "./cli-41z8xwj0.js";
+} from "./cli-nhrvpaj7.js";
 import {
   init_zod
 } from "./cli-k5671be5.js";
@@ -21,7 +22,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 
 // src/runtime-providers/controller.ts
 init_secret_scrubber();
@@ -44,6 +45,7 @@ class BuiltinController {
   renew;
   pause;
   resume;
+  releaseCache;
   constructor(id, provider, target, workerApiUrl) {
     this.id = id;
     this.provider = provider;
@@ -52,6 +54,8 @@ class BuiltinController {
     this.workerApiUrl = workerApiUrl;
     if (provider.renew)
       this.renew = (handle, ttlSec) => this.call(() => provider.renew(target, handle, ttlSec));
+    if (provider.releaseCache)
+      this.releaseCache = (cache) => this.call(() => provider.releaseCache(target, cache));
     if (provider.pause)
       this.pause = (handle) => this.call(() => provider.pause(target, handle));
     if (provider.resume)
@@ -101,6 +105,7 @@ var traitsSchema = object2({
   canProvision: boolean(),
   ephemeralDisk: boolean(),
   supportsPause: boolean(),
+  persistentCache: boolean().optional(),
   maxTtlSec: number2().positive().optional(),
   maxContinuousSec: number2().positive().optional()
 });
@@ -113,10 +118,22 @@ var provisionSchema = object2({
   env: record2(string2(), string2()),
   labels: record2(string2(), string2()),
   resources: object2({ cpu: number2().positive().optional(), memoryMb: number2().positive().optional() }).optional(),
-  ttlSec: number2().positive().optional()
+  ttlSec: number2().positive().optional(),
+  cache: RuntimePoolCacheSchema.extend({
+    key: string2().regex(/^[a-zA-Z0-9][a-zA-Z0-9_.-]+$/)
+  }).optional()
 });
 var command = { type: literal2("cmd"), id: string2().min(1) };
 var ControllerCommandSchema = discriminatedUnion("op", [
+  object2({
+    ...command,
+    op: literal2("release-cache"),
+    payload: object2({
+      key: string2().regex(/^[a-zA-Z0-9][a-zA-Z0-9_.-]+$/),
+      poolId: string2().min(1),
+      ownerId: string2().min(1)
+    })
+  }),
   object2({ ...command, op: literal2("provision"), payload: provisionSchema }),
   object2({
     ...command,

package/dist/{cli-gf5hbmdr.js → cli-yjdgea32.js}

@@ -1037,7 +1037,7 @@ var require_jsonwebtoken = __commonJS(function(exports, module) {
 });
 
 // node_modules/path-to-regexp/dist/index.js
-var require_dist5 = __commonJS(function(exports) {
+var require_dist6 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.PathError = exports.TokenData = undefined;
   exports.parse = parse;
@@ -19820,7 +19820,7 @@ var require_layer = __commonJS(function(exports, module) {
    * MIT Licensed
    */
   var isPromise = require_is_promise();
-  var pathRegexp = require_dist5();
+  var pathRegexp = require_dist6();
   var debug = require_src4()("router:layer");
   var deprecate = require_depd()("router");
   var TRAILING_SLASH_REGEXP = /\/+$/;
@@ -23251,4 +23251,4 @@ var require_express = __commonJS(function(exports, module) {
   exports.urlencoded = bodyParser.urlencoded;
 });
 
-export { require_jsonwebtoken, require_dist5, require_raw_body, require_content_type, require_lib, require_vary, require_express };
+export { require_jsonwebtoken, require_dist6, require_raw_body, require_content_type, require_lib, require_vary, require_express };

package/dist/{cli-cq1pf336.js → cli-yn4kxs06.js}

@@ -13,19 +13,20 @@ import {
   init_swarm_config_guard,
   registerStoredSecret,
   init_secret_registry,
+  getSwarmConfigs2,
   upsertSwarmConfig2,
   init_db4
-} from "./cli-1s1dqn1j.js";
+} from "./cli-k2gzwsj2.js";
 import {
   createRuntimeProvider,
   init_runtime_providers
-} from "./cli-b1afgtj3.js";
+} from "./cli-kqdg1bsb.js";
 import {
   closeSessionTokenConnections,
   init_session_token_connections,
   insertSessionToken,
   init_users
-} from "./cli-8yy525ad.js";
+} from "./cli-drr5v6av.js";
 import {
   RuntimeControllerCreateSchema,
   RuntimeControllerUpdateSchema,
@@ -33,17 +34,94 @@ import {
   RuntimePoolUpdateSchema,
   RuntimePoolCreateAgentSchema,
   init_types4
-} from "./cli-41z8xwj0.js";
+} from "./cli-nhrvpaj7.js";
+import {
+  poolCacheKey,
+  init_types5
+} from "./cli-0agcv1v5.js";
 import {
   scrubSecrets,
   registerVolatileSecret,
   unregisterVolatileSecret,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   __esm
 } from "./cli-242037k3.js";
 
+// src/be/runtime-pools/cache-cleanup.ts
+async function getPoolCache(poolId) {
+  const row = await getDbClient2().get("SELECT cache, json_extract(placements, '$[0]') AS controllerId FROM runtime_pools WHERE id = ?", [poolId]);
+  if (!row?.cache)
+    return null;
+  const cache = JSON.parse(row.cache);
+  return {
+    key: cache.key ?? poolCacheKey(poolId),
+    mountPath: cache.mountPath,
+    controllerId: row.controllerId
+  };
+}
+async function queuePoolCacheRelease(pool, actor) {
+  if (!pool.cache)
+    return;
+  const owner = (await getSwarmConfigs2({ scope: "global", key: "runtime_owner_id" }))[0];
+  if (!owner)
+    return;
+  const cache = await getPoolCache(pool.id);
+  const runtimes = await getDbClient2().query(`SELECT id FROM runtime_instances WHERE pool_id = ?
+     AND (controller_id = ? OR controller_id IS NULL) AND status != 'offline'`, [pool.id, pool.placements[0]]);
+  await getDbClient2().run(`INSERT INTO runtime_cache_releases
+      (id, pool_id, controller_id, owner_id, cache_key, runtime_ids, created_by, updated_by)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT(controller_id, owner_id, cache_key) DO NOTHING`, [
+    crypto.randomUUID(),
+    pool.id,
+    pool.placements[0],
+    owner.value,
+    cache.key,
+    JSON.stringify(runtimes.map((r) => r.id)),
+    actor,
+    actor
+  ]);
+}
+async function reconcileCacheReleases(commands, signal, now) {
+  const jobs = await getDbClient2().query(`SELECT id, pool_id AS poolId, controller_id AS controllerId, owner_id AS ownerId,
+     cache_key AS key FROM runtime_cache_releases ORDER BY created_at`);
+  for (const job of jobs) {
+    if (signal.aborted)
+      return;
+    const claimed = now ?? new Date;
+    const claimedAt = claimed.toISOString();
+    const reserved = await getDbClient2().run(`UPDATE runtime_cache_releases SET state = 'deleting', updated_at = ?
+       WHERE id = ? AND (state = 'pending' OR updated_at < ?) AND NOT EXISTS (
+         SELECT 1 FROM runtime_instances WHERE status != 'offline'
+         AND id IN (SELECT value FROM json_each(runtime_cache_releases.runtime_ids))
+       )`, [claimedAt, job.id, new Date(claimed.getTime() - RELEASE_LEASE_MS).toISOString()]);
+    if (!reserved.changes)
+      continue;
+    try {
+      signal.throwIfAborted();
+      const controller = await commands(job.controllerId);
+      if (!controller.releaseCache)
+        throw new Error("Controller cannot release caches; upgrade it before cleanup");
+      await controller.releaseCache({ key: job.key, poolId: job.poolId, ownerId: job.ownerId });
+      await getDbClient2().run("DELETE FROM runtime_cache_releases WHERE id = ? AND state = 'deleting' AND updated_at = ?", [job.id, claimedAt]);
+    } catch (error) {
+      const message = scrubSecrets(String(error));
+      await getDbClient2().run(`UPDATE runtime_cache_releases SET state = 'pending', last_error = ?, updated_at = ?
+         WHERE id = ? AND state = 'deleting' AND updated_at = ?`, [message, new Date().toISOString(), job.id, claimedAt]);
+      if (!signal.aborted)
+        console.error("[runtime-pools] Cache cleanup deferred:", message);
+    }
+  }
+}
+var RELEASE_LEASE_MS;
+var init_cache_cleanup = __esm(() => {
+  init_types5();
+  init_secret_scrubber();
+  init_db4();
+  RELEASE_LEASE_MS = 5 * 60000;
+});
+
 // src/be/runtime-pools/errors.ts
 var RuntimePoolError2;
 var init_errors = __esm(() => {
@@ -114,11 +192,13 @@ function rowToController(row) {
   };
 }
 function rowToPool(row) {
+  const cache = row.cache ? JSON.parse(row.cache) : null;
   return {
     ...row,
     placements: JSON.parse(row.placements),
     env: JSON.parse(row.env),
     resources: row.resources ? JSON.parse(row.resources) : null,
+    cache: cache ? { mountPath: cache.mountPath } : null,
     enabled: row.enabled === 1
   };
 }
@@ -157,6 +237,15 @@ async function getRuntimeControllerTarget2(controller, env = process.env) {
     E2B_MAX_CONTINUOUS_SEC: env.E2B_MAX_CONTINUOUS_SEC,
     RUNTIME_WORKER_API_URL: env.RUNTIME_WORKER_API_URL,
     PUBLIC_MCP_BASE_URL: env.PUBLIC_MCP_BASE_URL,
+    ...controller.kind === "boxd" && controller.placement === "builtin" ? {
+      BOXD_ORG: env.BOXD_ORG,
+      BOXD_BASE_URL: env.BOXD_BASE_URL,
+      BOXD_SNAPSHOT: env.BOXD_SNAPSHOT,
+      BOXD_DELETE_AFTER_SEC: env.BOXD_DELETE_AFTER_SEC,
+      BOXD_START_TIMEOUT_SEC: env.BOXD_START_TIMEOUT_SEC,
+      BOXD_STATUS_TIMEOUT_SEC: env.BOXD_STATUS_TIMEOUT_SEC,
+      BOXD_TEARDOWN_TIMEOUT_SEC: env.BOXD_TEARDOWN_TIMEOUT_SEC
+    } : {},
     ...controller.config,
     ...secrets
   };
@@ -232,11 +321,18 @@ async function updateRuntimeController2(id, input, actor = null) {
     if (await tx.get("SELECT id FROM runtime_controllers WHERE name = ? AND id != ?", [data.name, id]))
       throw new RuntimePoolError2("Controller name already exists", 409);
     const pools = await listRuntimePools2();
+    const oldConfig = JSON.parse(row.config);
+    const configChanged = Object.keys(data.config).length !== Object.keys(oldConfig).length || Object.entries(data.config).some(([key, value]) => oldConfig[key] !== value);
+    const secrets = patch.secretConfig !== undefined ? controllerSecrets(row) : {};
+    const secretsChanged = Object.entries(patch.secretConfig ?? {}).some(([key, value]) => value === null ? key in secrets : secrets[key] !== value);
+    if ((data.kind !== row.kind || data.placement !== row.placement || configChanged || secretsChanged) && (pools.some((pool) => pool.cache && pool.placements.includes(id)) || await tx.get("SELECT id FROM runtime_cache_releases WHERE controller_id = ? LIMIT 1", [
+      id
+    ])))
+      throw new RuntimePoolError2("Disable pool caches and wait for cleanup before changing controller configuration or placement", 409);
     if (pools.some((pool) => pool.placements.includes(id) && pool.kind !== data.kind))
       throw new RuntimePoolError2("Pool kind must equal controller kind");
     let encrypted = row.secretConfig;
     if (patch.secretConfig !== undefined) {
-      const secrets = controllerSecrets(row);
       for (const [key, value] of Object.entries(patch.secretConfig)) {
         if (value === null)
           delete secrets[key];
@@ -268,6 +364,8 @@ async function deleteRuntimeController2(id) {
       throw new RuntimePoolError2("Controller not found", 404);
     if ((await listRuntimePools2()).some((pool) => pool.placements.includes(id)))
       throw new RuntimePoolError2("Controller has runtime pools", 409);
+    if (await tx.get("SELECT id FROM runtime_cache_releases WHERE controller_id = ? LIMIT 1", [id]))
+      throw new RuntimePoolError2("Controller has pending cache cleanup", 409);
     await revokeControllerTokens(id);
     await tx.run("DELETE FROM runtime_controllers WHERE id = ?", [id]);
   });
@@ -281,6 +379,9 @@ async function getRuntimePool2(id) {
 }
 async function validatePool(data) {
   supportedKind(data.kind);
+  if (data.cache && !(await createRuntimeProvider(data.kind)).traits.persistentCache) {
+    throw new RuntimePoolError2(`${data.kind} does not support persistent pool caches`);
+  }
   const controller = await getRuntimeController2(data.placements[0]);
   if (!controller)
     throw new RuntimePoolError2("Controller not found");
@@ -301,7 +402,7 @@ async function createRuntimePool2(input, actor = null, id = crypto.randomUUID())
     await validatePool(data);
     if (await tx.get("SELECT id FROM runtime_pools WHERE name = ? OR id = ?", [data.name, id]))
       throw new RuntimePoolError2("Pool already exists", 409);
-    await tx.run(`INSERT INTO runtime_pools (id, name, kind, placements, image, lifecycle, idle_minutes, slots_per_runtime, max_runtimes, min_runtimes, delivery, env, resources, ttl_sec, enabled, created_by, updated_by) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+    await tx.run(`INSERT INTO runtime_pools (id, name, kind, placements, image, lifecycle, idle_minutes, slots_per_runtime, max_runtimes, min_runtimes, delivery, env, resources, cache, ttl_sec, enabled, created_by, updated_by) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
       id,
       data.name,
       data.kind,
@@ -315,6 +416,7 @@ async function createRuntimePool2(input, actor = null, id = crypto.randomUUID())
       data.delivery,
       JSON.stringify(data.env),
       data.resources ? JSON.stringify(data.resources) : null,
+      data.cache ? JSON.stringify({ ...data.cache, key: poolCacheKey(id, crypto.randomUUID()) }) : null,
       data.ttlSec,
       Number(data.enabled),
       actor,
@@ -335,7 +437,13 @@ async function updateRuntimePool2(id, input, actor = null) {
     await validatePool(data);
     if (await tx.get("SELECT id FROM runtime_pools WHERE name = ? AND id != ?", [data.name, id]))
       throw new RuntimePoolError2("Pool name already exists", 409);
-    await tx.run(`UPDATE runtime_pools SET name = ?, kind = ?, placements = ?, image = ?, resolved_image = ?, lifecycle = ?, idle_minutes = ?, slots_per_runtime = ?, max_runtimes = ?, min_runtimes = ?, delivery = ?, env = ?, resources = ?, ttl_sec = ?, enabled = ?, updated_by = COALESCE(?, updated_by), updated_at = ? WHERE id = ?`, [
+    const cache = data.cache ? {
+      ...data.cache,
+      key: existing.cache && data.placements[0] === existing.placements[0] ? (await getPoolCache(id)).key : poolCacheKey(id, crypto.randomUUID())
+    } : null;
+    if (existing.cache && (!data.cache || data.placements[0] !== existing.placements[0]))
+      await queuePoolCacheRelease(existing, actor);
+    await tx.run(`UPDATE runtime_pools SET name = ?, kind = ?, placements = ?, image = ?, resolved_image = ?, lifecycle = ?, idle_minutes = ?, slots_per_runtime = ?, max_runtimes = ?, min_runtimes = ?, delivery = ?, env = ?, resources = ?, cache = ?, ttl_sec = ?, enabled = ?, updated_by = COALESCE(?, updated_by), updated_at = ? WHERE id = ?`, [
       data.name,
       data.kind,
       JSON.stringify(data.placements),
@@ -349,6 +457,7 @@ async function updateRuntimePool2(id, input, actor = null) {
       data.delivery,
       JSON.stringify(data.env),
       data.resources ? JSON.stringify(data.resources) : null,
+      cache ? JSON.stringify(cache) : null,
       data.ttlSec,
       Number(data.enabled),
       actor,
@@ -360,7 +469,8 @@ async function updateRuntimePool2(id, input, actor = null) {
 }
 async function deleteRuntimePool2(id, force = false, actor = null) {
   await getDbClient2().transaction(async (tx) => {
-    if (!await getRuntimePool2(id))
+    const pool = await getRuntimePool2(id);
+    if (!pool)
       throw new RuntimePoolError2("Pool not found", 404);
     if (await tx.get("SELECT id FROM runtime_instances WHERE pool_id = ? AND status != 'offline' LIMIT 1", [id]))
       throw new RuntimePoolError2("Pool has non-offline runtimes. Scale to zero or disable the pool and wait for teardown before deletion.", 409);
@@ -369,6 +479,7 @@ async function deleteRuntimePool2(id, force = false, actor = null) {
     if (force) {
       await tx.run("UPDATE agents SET runtime_pool_id = NULL, lastUpdatedAt = ?, updated_by = COALESCE(?, updated_by) WHERE runtime_pool_id = ?", [new Date().toISOString(), actor, id]);
     }
+    await queuePoolCacheRelease(pool, actor);
     await tx.run("DELETE FROM runtime_pools WHERE id = ?", [id]);
   });
 }
@@ -450,21 +561,23 @@ var controllerColumns = `id, name, kind, placement, config, secret_config AS sec
   status, last_seen_at AS lastSeenAt, last_error AS lastError, last_error_at AS lastErrorAt,
   created_by AS createdBy, updated_by AS updatedBy, created_at AS createdAt, updated_at AS updatedAt`, poolColumns = `id, name, kind, placements, image, lifecycle, idle_minutes AS idleMinutes,
   slots_per_runtime AS slotsPerRuntime, max_runtimes AS maxRuntimes, min_runtimes AS minRuntimes,
-  delivery, env, resources, ttl_sec AS ttlSec, resolved_image AS resolvedImage, enabled,
+  delivery, env, resources, cache, ttl_sec AS ttlSec, resolved_image AS resolvedImage, enabled,
   consecutive_failures AS consecutiveFailures, circuit_open_until AS circuitOpenUntil,
   last_error AS lastError, last_error_at AS lastErrorAt, created_by AS createdBy,
   updated_by AS updatedBy, created_at AS createdAt, updated_at AS updatedAt`;
 var init_db2 = __esm(() => {
   init_runtime_providers();
+  init_types5();
   init_types4();
   init_secret_scrubber();
   init_crypto();
   init_db4();
   init_agents();
   init_secret_registry();
+  init_cache_cleanup();
   init_errors();
   init_tokens();
   init_errors();
 });
 
-export { RuntimePoolError2, mintControllerToken, init_tokens, listRuntimeControllers2, getRuntimeController2, getRuntimeControllerTarget2, checkE2bControllerConfig2, createRuntimeController2, updateRuntimeController2, deleteRuntimeController2, listRuntimePools2, getRuntimePool2, createRuntimePool2, updateRuntimePool2, deleteRuntimePool2, bindAgentToPool2, listAgentsForPool2, getPoolForAgent2, resolvePoolDelivery2, createPoolAgent2, loadRuntimeControllerSecrets2, init_db2 };
+export { getPoolCache, reconcileCacheReleases, init_cache_cleanup, RuntimePoolError2, mintControllerToken, init_tokens, listRuntimeControllers2, getRuntimeController2, getRuntimeControllerTarget2, checkE2bControllerConfig2, createRuntimeController2, updateRuntimeController2, deleteRuntimeController2, listRuntimePools2, getRuntimePool2, createRuntimePool2, updateRuntimePool2, deleteRuntimePool2, bindAgentToPool2, listAgentsForPool2, getPoolForAgent2, resolvePoolDelivery2, createPoolAgent2, loadRuntimeControllerSecrets2, init_db2 };

package/dist/{cli-224epwwf.js → cli-yx4kfngt.js}

@@ -4,7 +4,7 @@ import {
 } from "./cli-0726awxw.js";
 import {
   summarizeSession
-} from "./cli-j4kt1mpb.js";
+} from "./cli-faxe6thg.js";
 import {
   getMemoryRaterNames,
   init_memory_raters,
@@ -22,7 +22,7 @@ import {
   resolveTemplateAsync,
   init_resolver,
   init_session_templates
-} from "./cli-j4kw3rsx.js";
+} from "./cli-cm5yqn35.js";
 import {
   isSessionSummarySkipped,
   init_env_flag
@@ -30,7 +30,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 
 // src/prompts/goal-reminder.ts
 init_session_templates();

package/dist/{cli-eqx6k993.js → cli-yy3rhsdw.js}

@@ -9,8 +9,10 @@ import {
   getAgentWorkingOnThread2,
   getMostRecentTaskInThread2,
   reactionName,
+  SteeringBlockedError,
+  init_steering2,
   init_db4
-} from "./cli-1s1dqn1j.js";
+} from "./cli-k2gzwsj2.js";
 import {
   isBlockExternalEnabled2,
   invalidateChannelExternality2,
@@ -18,7 +20,7 @@ import {
   shouldBlockChannel2,
   leaveExternalChannel2,
   init_external_channel
-} from "./cli-a1fhj4n9.js";
+} from "./cli-w6dt9ged.js";
 import {
   noteSlackInboundSideEffect,
   ignoreSlackInbound,
@@ -34,11 +36,11 @@ import {
   init_render_v2,
   registerTreeMessage,
   init_watcher
-} from "./cli-1gm8jcyr.js";
+} from "./cli-waqbxg08.js";
 import {
   workflowEventBus2,
   init_event_bus
-} from "./cli-eny54typ.js";
+} from "./cli-wx3rhnm0.js";
 import {
   TaskCreationBlockedError,
   init_errors2,
@@ -59,7 +61,7 @@ import {
   init_message_text,
   dispatchPre2,
   init_dispatcher
-} from "./cli-1yekbyqm.js";
+} from "./cli-shpbx5ee.js";
 import {
   wasEventSeen,
   init_event_dedup,
@@ -70,17 +72,25 @@ import {
   getBufferMessageCount,
   instantFlush,
   init_thread_buffer
-} from "./cli-kvtc7aez.js";
+} from "./cli-p5gp8pcx.js";
 import {
   enrichSlackUserEmail,
   resolveSlackUserId,
   rewriteSlackMentions,
   init_enrich
-} from "./cli-s0exq74r.js";
+} from "./cli-xbbndvjy.js";
+import {
+  isSlackLeaveThreadDisabled,
+  SLACK_LEFT_THREAD_CONFIRMATION,
+  isSlackLeaveThreadCommand,
+  leaveSlackThread,
+  shouldSkipLeftSlackThread,
+  init_left_threads
+} from "./cli-gdhpcbhf.js";
 import {
   resolveTemplate,
   init_resolver
-} from "./cli-j4kw3rsx.js";
+} from "./cli-cm5yqn35.js";
 import {
   init_zod
 } from "./cli-k5671be5.js";
@@ -97,7 +107,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   __esm,
   __using,
@@ -294,6 +304,27 @@ function registerMessageHandler2(app) {
         console.log(`[Slack] Ignoring message from unauthorized user ${msg.user}`);
         return ignoreSlackInbound("unauthorized_user");
       }
+      const botMentioned = !!cachedBotUserId && !!msg.text?.includes(`<@${cachedBotUserId}>`);
+      if (msg.thread_ts && !isSlackLeaveThreadDisabled() && isSlackLeaveThreadCommand(msg.text, cachedBotUserId) && (await getMostRecentTaskInThread2(msg.channel, msg.thread_ts) !== null || await wasThreadStartedBySwarm(client, msg.channel, msg.thread_ts))) {
+        noteSlackInboundSideEffect("thread_leave");
+        await leaveSlackThread(msg.channel, msg.thread_ts, { slackUserId: msg.user });
+        console.log(`[Slack] Left thread ${msg.channel}/${msg.thread_ts}: !leave from ${msg.user}`);
+        try {
+          await client.chat.postEphemeral({
+            channel: msg.channel,
+            user: msg.user,
+            thread_ts: msg.thread_ts,
+            text: SLACK_LEFT_THREAD_CONFIRMATION
+          });
+        } catch (error) {
+          console.error("[Slack] Failed to confirm !leave:", error);
+        }
+        return;
+      }
+      if (await shouldSkipLeftSlackThread(msg.channel, msg.thread_ts, botMentioned)) {
+        console.log(`[Slack] Skipping message in left thread ${msg.channel}/${msg.thread_ts}`);
+        return ignoreSlackInbound("thread_left");
+      }
       const requestedByUserId = await resolveSlackUserId(client, msg.user, {
         sampleEventType: "message",
         sampleContext: msg.text ?? ""
@@ -314,7 +345,6 @@ function registerMessageHandler2(app) {
         return reportSlackInboundFailure("bot_user_unavailable");
       }
       const botUserId = cachedBotUserId;
-      const botMentioned = !!msg.text?.includes(`<@${botUserId}>`);
       const isAssistantThread = !!msg.assistant_thread;
       const isImplicitMention = isAssistantThread && !botMentioned && !isAddressedToOtherUser(effectiveText, botUserId);
       const additiveSlack = isEnvFlagEnabled("ADDITIVE_SLACK", false);
@@ -520,7 +550,8 @@ ${taskDescription}`;
               threadTs,
               message: taskDescription,
               messageTimestamps: [msg.ts],
-              requestedByUserId
+              requestedByUserId,
+              slackUserId: msg.user
             }) : null;
             if (steering) {
               await ackSlackMessage(client, msg.channel, msg.ts, reactionName("steered"), "steered");
@@ -573,12 +604,13 @@ ${taskDescription}`;
             results.assigned.push({ agentName: agent.name, taskId: task.id });
           }
         } catch (error) {
-          if (!(error instanceof TaskCreationBlockedError)) {
+          const blocked = error instanceof TaskCreationBlockedError || error instanceof SteeringBlockedError;
+          if (!blocked) {
             reportSlackInboundFailure("task_creation_error");
           }
           results.failed.push({
             agentName: agent.name,
-            reason: error instanceof TaskCreationBlockedError ? error.reason : "error"
+            reason: blocked ? error.reason : "error"
           });
         }
       }
@@ -711,6 +743,7 @@ var SlackRouteModifySchema, allowedEmailDomains, allowedUserIds, envUserFilterCo
 var init_handlers = __esm(() => {
   init_zod();
   init_db4();
+  init_steering2();
   init_dispatcher();
   init_resolver();
   init_context_key();
@@ -727,6 +760,7 @@ var init_handlers = __esm(() => {
   init_templates();
   init_env_flag();
   init_external_channel();
+  init_left_threads();
   init_message_text();
   init_render_v2();
   init_steering();