@desplega.ai/agent-swarm 2.7.4 → 2.7.6

package/dist/{cli-4r12t6w6.js → cli-5c4hjzne.js}

@@ -2,6 +2,23 @@ import {
   __esm
 } from "./cli-242037k3.js";
 
+// packages/model-catalog/src/chatgpt-subscription.ts
+function chatgptSubscriptionModelId(model) {
+  const trimmed = model?.trim() ?? "";
+  const prefix = `${CHATGPT_SUBSCRIPTION_PROVIDER}/`;
+  if (!trimmed.toLowerCase().startsWith(prefix))
+    return null;
+  const id = trimmed.slice(prefix.length);
+  return id && !id.includes("/") ? id : null;
+}
+function isChatgptSubscriptionModel(model) {
+  return chatgptSubscriptionModelId(model) !== null;
+}
+var CHATGPT_SUBSCRIPTION_PROVIDER = "openai-codex", CHATGPT_SUBSCRIPTION_HARNESSES;
+var init_chatgpt_subscription = __esm(() => {
+  CHATGPT_SUBSCRIPTION_HARNESSES = ["pi"];
+});
+
 // packages/model-catalog/src/display.ts
 var init_display = () => {};
 
@@ -153,7 +170,27 @@ function harnessCatalogSection(harness) {
   return HARNESS_CATALOG_SECTION[harness] ?? null;
 }
 function isHarnessModelJudged(harness) {
-  return !!harness && (harnessCatalogSection(harness) !== null || harness === "grok");
+  return !!harness && (harnessCatalogSection(harness) !== null || harness === "grok" || harness === "fx");
+}
+function fxModelRoute(model) {
+  const id = model.trim();
+  if (!id)
+    return { error: `An empty model has no fx route. ${FX_ROUTES_HINT}` };
+  const slash = id.indexOf("/");
+  if (slash < 0)
+    return { fxProvider: "openai", fxModel: id, keyVar: "OPENAI_API_KEY" };
+  const namespace = id.slice(0, slash).toLowerCase();
+  const rest = id.slice(slash + 1).trim();
+  if (namespace === "openrouter" && rest) {
+    return { fxProvider: "openrouter", fxModel: rest, keyVar: "OPENROUTER_API_KEY" };
+  }
+  if (namespace === "vercel" && rest) {
+    return { fxProvider: "gateway", fxModel: rest, keyVar: "AI_GATEWAY_API_KEY" };
+  }
+  const reason = FX_REJECTED_NAMESPACES[namespace];
+  return {
+    error: `Model "${id}" has no fx route${reason ? `: ${reason}` : ""}. ${FX_ROUTES_HINT}`
+  };
 }
 function normalizeGrokModel(model) {
   return model.trim().replace(XAI_PREFIX_RE, "");
@@ -228,8 +265,14 @@ function buildClaudeShortnameMap(models) {
   return out;
 }
 function harnessModelMismatch(model, harness, sections, context = {}) {
+  const subscriptionId = chatgptSubscriptionModelId(model);
+  if (harness && subscriptionId && !CHATGPT_SUBSCRIPTION_HARNESSES.includes(harness)) {
+    return subscriptionMismatchMessage(model.trim(), subscriptionId, harness, context);
+  }
   if (harness === "grok")
     return grokModelMismatch(model, sections, context);
+  if (harness === "fx")
+    return fxModelMismatch(model, sections, context);
   const section = harness ? harnessCatalogSection(harness) : null;
   if (!harness || !section)
     return null;
@@ -291,6 +334,37 @@ function grokModelMismatch(model, sections, context) {
   }
   return null;
 }
+function fxModelMismatch(model, sections, context) {
+  const id = model.trim();
+  if (!id)
+    return null;
+  const agent = context.agentId ? ` of agent "${context.agentName ?? context.agentId}" (${context.agentId})` : "";
+  const fail = (reason) => `Model "${id}" does not run on the fx harness${agent}. ${reason} Use modelTier (smol, regular, smart, ultra) for portable intent, or omit model and let the assignee resolve it.`;
+  if (isAlias(id)) {
+    const parsed = parseAlias(id);
+    if (!parsed)
+      return null;
+    return parsed.kind === "openrouter" || parsed.kind === "openai" ? null : fail(`A latest:${parsed.kind} alias resolves to an id fx cannot route. ${FX_ROUTES_HINT}`);
+  }
+  const route = fxModelRoute(id);
+  if ("error" in route)
+    return fail(route.error);
+  if (route.fxProvider !== "openai")
+    return null;
+  if (Object.hasOwn(sections.openai?.models ?? {}, id))
+    return null;
+  for (const [name, other] of Object.entries(sections)) {
+    if (name === "openai" || !other?.models)
+      continue;
+    if (Object.hasOwn(other.models, id) || name === "anthropic" && isClaudeShortname(id, other)) {
+      return fail(`A bare id runs on OpenAI (OPENAI_API_KEY), and "${id}" is in the ${name} catalog, not openai. ${FX_ROUTES_HINT}`);
+    }
+  }
+  return null;
+}
+function isClaudeShortname(id, section) {
+  return Object.hasOwn(buildClaudeShortnameMap(section.models), id);
+}
 function grokMismatchMessage(model, sections, context) {
   const agent = context.agentId ? ` of agent "${context.agentName ?? context.agentId}" (${context.agentId})` : "";
   const pool = sections.xai?.models ? [sections.xai.models] : Object.values(sections).map((section) => section?.models ?? {});
@@ -307,6 +381,11 @@ function grokMismatchMessage(model, sections, context) {
   const examples = ids.length ? ` (for example: ${ids.slice(0, MAX_EXAMPLE_IDS).join(", ")}${extra > 0 ? ` and ${extra} more` : ""})` : "";
   return `Model "${model}" does not run on the grok harness${agent}. The grok harness accepts xai catalog models${examples} and openrouter/<vendor>/<id>. Use modelTier (smol, regular, smart, ultra) for portable intent, or omit model and let the assignee resolve it.`;
 }
+function subscriptionMismatchMessage(model, bareId, harness, context) {
+  const agent = context.agentId ? ` of agent "${context.agentName ?? context.agentId}" (${context.agentId})` : "";
+  const codexHint = harness === "codex" ? ` On codex, use "${bareId}": codex runs it on the pool directly.` : "";
+  return `Model "${model}" does not run on the ${harness} harness${agent}. The ChatGPT subscription prefix (openai-codex/) is for the ${CHATGPT_SUBSCRIPTION_HARNESSES.join(" and ")} harness.${codexHint}`;
+}
 function harnessMismatchMessage(model, harness, section, own, context) {
   const agent = context.agentId ? ` of agent "${context.agentName ?? context.agentId}" (${context.agentId})` : "";
   const ids = harnessModelIds(harness, own);
@@ -314,14 +393,20 @@ function harnessMismatchMessage(model, harness, section, own, context) {
   const examples = ids.slice(0, MAX_EXAMPLE_IDS).join(", ") + (extra > 0 ? ` and ${extra} more` : "");
   return `Model "${model}" does not run on the ${harness} harness${agent}. The ${harness} harness accepts ${section} catalog models, for example: ${examples}. Use modelTier (smol, regular, smart, ultra) for portable intent, or omit model and let the assignee resolve it.`;
 }
-var HARNESS_CATALOG_SECTION, XAI_PREFIX_RE, GROK_ID_RE, DATED_ID_RE3, ISO_DATED_ID_RE, CODEX_EXCLUDED_TOKENS, CODEX_MIN_GPT_MAJOR = 5, CONTEXT_SUFFIX_RE, MAX_EXAMPLE_IDS = 8;
+var HARNESS_CATALOG_SECTION, FX_REJECTED_NAMESPACES, FX_ROUTES_HINT = "The fx harness runs openrouter/<vendor>/<id> (OPENROUTER_API_KEY), vercel/<vendor>/<id> (AI_GATEWAY_API_KEY) or a bare OpenAI id (OPENAI_API_KEY).", XAI_PREFIX_RE, GROK_ID_RE, DATED_ID_RE3, ISO_DATED_ID_RE, CODEX_EXCLUDED_TOKENS, CODEX_MIN_GPT_MAJOR = 5, CONTEXT_SUFFIX_RE, MAX_EXAMPLE_IDS = 8;
 var init_harness_models = __esm(() => {
+  init_chatgpt_subscription();
   init_resolve_alias();
   HARNESS_CATALOG_SECTION = {
     claude: "anthropic",
     "claude-managed": "anthropic",
     codex: "openai"
   };
+  FX_REJECTED_NAMESPACES = {
+    nan: "fx rejects NaN's streams (InconsistentFinishReason on its trailing usage chunk, fx 0.0.15)",
+    helmcode: "Helmcode is not verified on fx yet",
+    anthropic: "fx cannot speak the Anthropic Messages API; use openrouter/anthropic/<id> or vercel/anthropic/<id>"
+  };
   XAI_PREFIX_RE = /^xai\//i;
   GROK_ID_RE = /^grok-[^/]+$/i;
   DATED_ID_RE3 = /-\d{8}$/;
@@ -671,6 +756,12 @@ function grokCatalogRef(model) {
   }
   return { providerId: "xai", modelId: id };
 }
+function fxCatalogRef(model) {
+  const route = fxModelRoute(model);
+  if ("error" in route || route.fxProvider !== "gateway")
+    return null;
+  return { providerId: "vercel", modelId: route.fxModel };
+}
 function cursorCatalogRef(model) {
   const id = model.trim().toLowerCase();
   if (/^(gpt-|o\d)/.test(id))
@@ -713,6 +804,9 @@ function applyHarnessOverrides(harness, modelId, facts, levels) {
   } else if (harness !== "codex" && harness !== "cursor" && harness !== "opencode" && harness !== "pi") {
     result = result.filter((l) => l !== "max");
   }
+  if (harness === "fx") {
+    result = result.filter((l) => l !== "off");
+  }
   if (harness === "codex") {
     const isCodexMax = /-codex-max$/.test(modelId);
     const isCodexNonMax = /-codex$/.test(modelId) && !isCodexMax;
@@ -738,6 +832,7 @@ function claudeCatalogModelId(modelId, models) {
 }
 var REASONING_EFFORT_LEVELS, REASONING_HARNESSES, FALLBACK_LEVELS, EFFORT_VALUE_MAP;
 var init_reasoning = __esm(() => {
+  init_chatgpt_subscription();
   init_harness_models();
   REASONING_EFFORT_LEVELS = ["off", "low", "medium", "high", "xhigh", "max"];
   REASONING_HARNESSES = [
@@ -748,7 +843,8 @@ var init_reasoning = __esm(() => {
     "dsh",
     "cursor",
     "amp",
-    "grok"
+    "grok",
+    "fx"
   ];
   FALLBACK_LEVELS = ["low", "medium", "high"];
   EFFORT_VALUE_MAP = {
@@ -763,6 +859,7 @@ var init_reasoning = __esm(() => {
 
 // packages/model-catalog/src/index.ts
 var init_src2 = __esm(() => {
+  init_chatgpt_subscription();
   init_display();
   init_harness_models();
   init_merge();
@@ -773,4 +870,4 @@ var init_src2 = __esm(() => {
   init_resolve_alias();
 });
 
-export { isAlias, parseAlias, resolveAlias, harnessCatalogSection, isHarnessModelJudged, normalizeGrokModel, harnessModelIds, modelFamilyKey, buildClaudeShortnameMap, harnessModelMismatch, openAICompatibleProviders, openAICompatibleProviderIds, providerKeyVars, openAICompatibleKeyVars, baseUrlEnvVar, openAICompatibleBaseUrlVars, baseUrlOverride, ignoredBaseUrlVar, providerBaseUrl, openAICompatibleProvider, providerForModel, providerForKeyVar, providerKeyFromEnv, providerHarnessModels, withAgentChatRegistrySections, registryCatalogSections, withRegistryCatalogSections, dshCatalogRef, grokCatalogRef, cursorCatalogRef, reasoningLevelsFor, claudeCatalogModelId, init_src2 };
+export { CHATGPT_SUBSCRIPTION_PROVIDER, chatgptSubscriptionModelId, isChatgptSubscriptionModel, isAlias, parseAlias, resolveAlias, harnessCatalogSection, isHarnessModelJudged, fxModelRoute, normalizeGrokModel, harnessModelIds, modelFamilyKey, buildClaudeShortnameMap, harnessModelMismatch, openAICompatibleProviders, openAICompatibleProviderIds, providerKeyVars, openAICompatibleKeyVars, baseUrlEnvVar, openAICompatibleBaseUrlVars, baseUrlOverride, ignoredBaseUrlVar, providerBaseUrl, openAICompatibleProvider, providerForModel, providerForKeyVar, providerKeyFromEnv, providerHarnessModels, withAgentChatRegistrySections, registryCatalogSections, withRegistryCatalogSections, dshCatalogRef, grokCatalogRef, fxCatalogRef, cursorCatalogRef, reasoningLevelsFor, claudeCatalogModelId, init_src2 };

package/dist/{cli-hf6zt5m6.js → cli-69szn7w7.js}

@@ -1,5 +1,7 @@
 import {
+  __toESM,
   __commonJS,
+  __esm,
   __require
 } from "./cli-242037k3.js";
 
@@ -2886,4 +2888,18 @@ var require_websocket_server = __commonJS(function(exports, module) {
   }
 });
 
-export { require_permessage_deflate, require_receiver, require_sender, require_extension, require_websocket, require_stream, require_subprotocol, require_websocket_server };
+// node_modules/ws/wrapper.mjs
+var import_stream, import_extension, import_permessage_deflate, import_receiver, import_sender, import_subprotocol, import_websocket, import_websocket_server, wrapper_default;
+var init_wrapper2 = __esm(() => {
+  import_stream = __toESM(require_stream(), 1);
+  import_extension = __toESM(require_extension(), 1);
+  import_permessage_deflate = __toESM(require_permessage_deflate(), 1);
+  import_receiver = __toESM(require_receiver(), 1);
+  import_sender = __toESM(require_sender(), 1);
+  import_subprotocol = __toESM(require_subprotocol(), 1);
+  import_websocket = __toESM(require_websocket(), 1);
+  import_websocket_server = __toESM(require_websocket_server(), 1);
+  wrapper_default = import_websocket.default;
+});
+
+export { import_websocket, import_websocket_server, wrapper_default, init_wrapper2 };

package/dist/{cli-rtk9g7av.js → cli-73jzwksr.js}

@@ -2,11 +2,12 @@ import {
   runtimeCatalogSection,
   runtimeCatalogModel,
   init_runtime_model_catalog
-} from "./cli-a2jw6ee5.js";
+} from "./cli-1p89xny0.js";
 import {
+  chatgptSubscriptionModelId,
   buildClaudeShortnameMap,
   init_src2
-} from "./cli-4r12t6w6.js";
+} from "./cli-5c4hjzne.js";
 import {
   __esm
 } from "./cli-242037k3.js";
@@ -32,6 +33,9 @@ function getContextWindowSize(model) {
 function getKnownContextWindowSize(model) {
   if (!model)
     return;
+  const subscriptionId = chatgptSubscriptionModelId(model);
+  if (subscriptionId)
+    return catalogContext("openai", subscriptionId);
   const slash = model.indexOf("/");
   if (slash > 0) {
     const scoped = catalogContext(model.slice(0, slash), model.slice(slash + 1));

package/dist/{cli-jg0nfda6.js → cli-75gkpjvw.js}

@@ -5,7 +5,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   __esm
 } from "./cli-242037k3.js";
@@ -116,13 +116,13 @@ async function refreshAccessToken(refreshToken) {
       })
     });
     if (!response.ok) {
-      const text = await response.text().catch(() => "");
+      const text = redactTokens(await response.text().catch(() => ""), [refreshToken]);
       console.error("[codex-oauth] Token refresh failed:", response.status, text);
       return { type: "failed", status: response.status, error: text.slice(0, 300) };
     }
     const json = await response.json();
     if (!json.access_token || !json.refresh_token || typeof json.expires_in !== "number") {
-      console.error("[codex-oauth] Token refresh response missing fields:", json);
+      console.error("[codex-oauth] Token refresh response missing fields; got keys:", Object.keys(json).join(", "));
       return { type: "failed" };
     }
     return {
@@ -132,10 +132,22 @@ async function refreshAccessToken(refreshToken) {
       expires: Date.now() + json.expires_in * 1000
     };
   } catch (error) {
-    console.error("[codex-oauth] Token refresh error:", error);
+    const message = error instanceof Error ? error.message : String(error);
+    console.error("[codex-oauth] Token refresh error:", redactTokens(message, [refreshToken]));
     return { type: "failed" };
   }
 }
+function redactTokens(text, tokens) {
+  let out = text;
+  for (const token of tokens) {
+    if (!token)
+      continue;
+    const forms = new Set([token, encodeURIComponent(token), JSON.stringify(token).slice(1, -1)]);
+    for (const form of forms)
+      out = out.split(form).join("[REDACTED:codex_oauth_token]");
+  }
+  return scrubSecrets(out);
+}
 function getAccountId(accessToken) {
   const payload = decodeJwt(accessToken);
   const auth = payload?.[JWT_CLAIM_PATH];
@@ -384,6 +396,16 @@ function isStaleByAge(expires, maxAgeMs) {
   const issuedAt = expires - ACCESS_TOKEN_TTL_MS;
   return Date.now() - issuedAt > maxAgeMs;
 }
+function buildPoolRevalidationFailureReason(err, slot) {
+  if (err instanceof CodexOAuthRefreshError) {
+    if (err.reason === "lock_timeout") {
+      return `[auth-error] Codex pool slot ${slot} [...${err.keySuffix}] revalidation failed: timed out waiting for the refresh lock — transient, will retry on next task.`;
+    }
+    return `[auth-error] Codex pool slot ${slot} [...${err.keySuffix}] revalidation failed: refresh rejected (${err.status ?? "unknown status"} ${scrubSecrets(err.body ?? "")}) — credential likely revoked; re-run codex-login for this slot.`;
+  }
+  const message = scrubSecrets(err instanceof Error ? err.message : String(err));
+  return `[auth-error] Codex pool slot ${slot} revalidation failed (not a confirmed auth rejection, transient): ${message}`;
+}
 async function acquireCodexRefreshLock(apiUrl, apiKey, slot) {
   const key = codexOAuthKeyForSlot(slot);
   const res = await fetch(`${apiUrl}/api/oauth/refresh-locks/${encodeURIComponent(key)}`, {
@@ -465,22 +487,29 @@ async function loadAllCodexOAuthSlots(apiUrl, apiKey, options = {}) {
 }
 async function storeCodexOAuth(apiUrl, apiKey, creds, slot = 0) {
   const key = codexOAuthKeyForSlot(slot);
-  const res = await fetch(`${apiUrl}/api/config`, {
-    method: "PUT",
-    headers: {
-      "Content-Type": "application/json",
-      Authorization: `Bearer ${apiKey}`
-    },
-    body: JSON.stringify({
-      scope: "global",
-      key,
-      value: JSON.stringify(creds),
-      isSecret: true,
-      description: `Codex ChatGPT OAuth credentials slot ${slot} (stored by codex-login)`
-    })
-  });
+  const redact = (text) => redactTokens(text, [creds.access, creds.refresh]);
+  let res;
+  try {
+    res = await fetch(`${apiUrl}/api/config`, {
+      method: "PUT",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${apiKey}`
+      },
+      body: JSON.stringify({
+        scope: "global",
+        key,
+        value: JSON.stringify(creds),
+        isSecret: true,
+        description: `Codex ChatGPT OAuth credentials slot ${slot} (stored by codex-login)`
+      })
+    });
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    throw new Error(`Failed to store ${key} config: ${redact(message)}`);
+  }
   if (!res.ok) {
-    const text = await res.text().catch(() => "");
+    const text = redact(await res.text().catch(() => ""));
     throw new Error(`Failed to store ${key} config: HTTP ${res.status} ${text}`);
   }
 }
@@ -531,7 +560,8 @@ async function persistCodexOAuth(apiUrl, apiKey, creds, slot = 0) {
   try {
     await storeCodexOAuth(apiUrl, apiKey, creds, slot);
   } catch (err) {
-    console.error("[codex-oauth] persistCodexOAuth failed (non-fatal):", err);
+    const message = err instanceof Error ? err.message : String(err);
+    console.error("[codex-oauth] persistCodexOAuth failed (non-fatal):", redactTokens(message, [creds.access, creds.refresh]));
   }
 }
 async function getValidCodexOAuth(apiUrl, apiKey, slot = 0, opts) {
@@ -591,6 +621,7 @@ async function getValidCodexOAuth(apiUrl, apiKey, slot = 0, opts) {
 }
 var CODEX_OAUTH_KEY_LEGACY = "codex_oauth", MAX_CODEX_OAUTH_SLOT = 100, REFRESH_LOCK_TTL_MS, REFRESH_LOCK_WAIT_MS, REFRESH_LOCK_POLL_MS = 250, REFRESH_SKEW_MS, ACCESS_TOKEN_TTL_MS, CodexOAuthRefreshError;
 var init_storage = __esm(() => {
+  init_secret_scrubber();
   init_auth_json();
   init_flow();
   REFRESH_LOCK_TTL_MS = 2 * 60 * 1000;
@@ -615,4 +646,4 @@ var init_storage = __esm(() => {
   };
 });
 
-export { _fetchHolder, CLIENT_ID, decodeJwt, exchangeAuthorizationCode2, getAccountId, extractChatgptPlanType, extractChatgptUserId, loginCodexOAuth, init_flow, deriveCodexKeySuffix, authJsonToCredentialSelection, credentialsToAuthJson, init_auth_json, MAX_CODEX_OAUTH_SLOT, CodexOAuthRefreshError, codexOAuthKeyForSlot, loadAllCodexOAuthSlots, storeCodexOAuth, persistCodexOAuth, getValidCodexOAuth, init_storage };
+export { _fetchHolder, CLIENT_ID, decodeJwt, exchangeAuthorizationCode2, getAccountId, extractChatgptPlanType, extractChatgptUserId, loginCodexOAuth, init_flow, deriveCodexKeySuffix, authJsonToCredentialSelection, credentialsToAuthJson, init_auth_json, MAX_CODEX_OAUTH_SLOT, buildPoolRevalidationFailureReason, codexOAuthKeyForSlot, loadAllCodexOAuthSlots, storeCodexOAuth, persistCodexOAuth, getValidCodexOAuth, init_storage };

package/dist/{cli-wcmnan2g.js → cli-89knwags.js}

@@ -4,27 +4,27 @@ import {
   getActivePricingRow2,
   insertPricingRow2,
   init_db4
-} from "./cli-1s1dqn1j.js";
+} from "./cli-k2gzwsj2.js";
 import {
   loadModelsDevCache,
   init_modelsdev_cache,
   buildModelsDevSeedRows,
   init_seed_pricing
-} from "./cli-mc97xy2s.js";
+} from "./cli-c60vetmm.js";
 import {
   setRuntimeModelCatalog,
   init_runtime_model_catalog
-} from "./cli-a2jw6ee5.js";
+} from "./cli-1p89xny0.js";
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   openAICompatibleProviderIds,
   withAgentChatRegistrySections,
   registryCatalogSections,
   init_src2
-} from "./cli-4r12t6w6.js";
+} from "./cli-5c4hjzne.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-pwyevs29.js → cli-8bc1w0tw.js}

@@ -56,22 +56,22 @@ import {
   releaseApprovalCancellationNotificationClaim2,
   updateApprovalRequestNotifications2,
   init_db4
-} from "./cli-1s1dqn1j.js";
+} from "./cli-k2gzwsj2.js";
 import {
   externalChannelToolError2,
   isBlockExternalEnabled2,
   getChannelBlockReason2,
   init_external_channel
-} from "./cli-a1fhj4n9.js";
+} from "./cli-w6dt9ged.js";
 import {
   getSlackApp2,
   init_app3
-} from "./cli-1gm8jcyr.js";
+} from "./cli-waqbxg08.js";
 import {
   DEFAULT_MODEL,
   resolveCredential,
   init_credentials
-} from "./cli-wk9md5px.js";
+} from "./cli-436532ck.js";
 import {
   isMultiRuntimeEnabled,
   init_multi_runtime2
@@ -79,11 +79,11 @@ import {
 import {
   revokeRuntimeTokensForRuntime,
   init_users
-} from "./cli-8yy525ad.js";
+} from "./cli-drr5v6av.js";
 import {
   TERMINAL_TASK_STATUSES,
   init_types4
-} from "./cli-41z8xwj0.js";
+} from "./cli-nhrvpaj7.js";
 import {
   getSlackConfiguration,
   isSlackConfigured,
@@ -98,13 +98,13 @@ import {
 import {
   selectCredential,
   init_credentials2
-} from "./cli-aq58fk5m.js";
+} from "./cli-g83s9ewh.js";
 import {
   deepInterpolate,
   init_template2,
   resolveTemplate,
   init_resolver
-} from "./cli-j4kw3rsx.js";
+} from "./cli-cm5yqn35.js";
 import {
   init_zod
 } from "./cli-k5671be5.js";
@@ -136,13 +136,13 @@ import {
   isSensitiveKey,
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   providerKeyVars,
   providerBaseUrl,
   providerForModel,
   init_src2
-} from "./cli-4r12t6w6.js";
+} from "./cli-5c4hjzne.js";
 import {
   __esm
 } from "./cli-242037k3.js";
@@ -155,7 +155,7 @@ async function notifyAutomationPreflightFailure(preflight) {
     return;
   }
   try {
-    const { getSlackApp } = await import("./app-stvq692g.js");
+    const { getSlackApp } = await import("./app-909e97cr.js");
     const app = getSlackApp();
     if (!app) {
       console.warn("[Automation Preflight] Slack not available, cannot send notification");
@@ -3608,7 +3608,7 @@ function cooldownToMs(cooldown) {
 async function shouldSkipCooldown(workflowId, cooldown) {
   const cooldownMs = cooldownToMs(cooldown);
   const now = Date.now();
-  const lastSuccess = await getLastSuccessfulRun2(workflowId);
+  const lastSuccess = cooldown.from === "start" ? null : await getLastSuccessfulRun2(workflowId);
   if (lastSuccess?.finishedAt) {
     const lastFinished = new Date(lastSuccess.finishedAt).getTime();
     if (now - lastFinished < cooldownMs)
@@ -4014,7 +4014,7 @@ async function startWorkflowExecution2(workflow, triggerData, registry, options
   const newRunId = crypto.randomUUID();
   const release = holdWorkflowRun(newRunId);
   try {
-    const { runId, created, preflightAlert } = await createRunWithInitialState(workflow, triggerData, options, initial, newRunId);
+    const { runId, created, preflightAlert, status } = await createRunWithInitialState(workflow, triggerData, options, initial, newRunId);
     if (!created)
       return runId;
     if (initial.status === "failed" && initial.preflight) {
@@ -4022,7 +4022,7 @@ async function startWorkflowExecution2(workflow, triggerData, registry, options
         await notifyAutomationPreflightFailure(preflight);
       return runId;
     }
-    if (initial.status === "skipped")
+    if (status === "skipped")
       return runId;
     telemetry.workflow("started", {
       workflowId: workflow.id,
@@ -4085,6 +4085,7 @@ async function createRunWithInitialState(workflow, triggerData, options, initial
       if (existingId)
         return { runId: existingId, created: false };
     }
+    const state = !initial.status && workflow.cooldown && await shouldSkipCooldown(workflow.id, workflow.cooldown) ? { status: "skipped", error: "cooldown", finishedAt: new Date().toISOString() } : initial;
     await createWorkflowRun2({
       id: runId,
       workflowId: workflow.id,
@@ -4095,10 +4096,10 @@ async function createRunWithInitialState(workflow, triggerData, options, initial
       parentStepAttempt: parentStepId ? attempt : undefined,
       triggeredByAgentId: options.triggeredByAgentId
     });
-    await updateWorkflowRun2(runId, initial.status ? { status: initial.status, error: initial.error, finishedAt: initial.finishedAt } : { context: initial.context });
-    const preflightAlert = initial.status === "failed" && initial.preflight ? await isFirstWorkflowPreflightFailureToday(workflow.id, runId) : undefined;
-    await options.accept?.({ runId, skipped: initial.status === "skipped" });
-    return { runId, created: true, preflightAlert };
+    await updateWorkflowRun2(runId, state.status ? { status: state.status, error: state.error, finishedAt: state.finishedAt } : { context: state.context });
+    const preflightAlert = state.status === "failed" && state.preflight ? await isFirstWorkflowPreflightFailureToday(workflow.id, runId) : undefined;
+    await options.accept?.({ runId, skipped: state.status === "skipped" });
+    return { runId, created: true, preflightAlert, status: state.status };
   });
 }
 async function failRunOnUnreadableReplay(runId, err, stepId) {
@@ -4550,7 +4551,7 @@ async function runClaimedStep(def, runId, ctx, node, registry, existingStep, ste
     }
     const waiting = await checkpointStepWaiting(runId, stepId, ctx);
     if (waiting && result.waitFor === "workflow.child.finished") {
-      const { resumeFromChildRun } = await import("./resume-9cd6wf6z.js");
+      const { resumeFromChildRun } = await import("./resume-wd30wx23.js");
       await resumeFromChildRun(stepId, registry);
     }
     return { outcome: waiting ? "waiting" : "completed", successors: [] };
@@ -5055,7 +5056,7 @@ async function runForeachDrive(runId, parentNodeId, registry) {
     if (drive.successors.length > 0) {
       await walkGraph(workflow.definition, runId, ctx, drive.successors, registry, workflow.id, getSecretInputKeys(workflow.input));
     } else {
-      const { finalizeOrWait } = await import("./resume-9cd6wf6z.js");
+      const { finalizeOrWait } = await import("./resume-wd30wx23.js");
       await finalizeOrWait(runId);
     }
     return drive;
@@ -5198,7 +5199,7 @@ async function startChild(input) {
     const parked = await getDbClient2().get("UPDATE workflow_run_steps SET status = 'waiting' WHERE id = ? AND status = 'running' RETURNING id", [child.id]);
     if (parked && result.waitFor === "workflow.child.finished") {
       ownedChildren.delete(child.id);
-      const { resumeFromChildRun } = await import("./resume-9cd6wf6z.js");
+      const { resumeFromChildRun } = await import("./resume-wd30wx23.js");
       await resumeFromChildRun(child.id, registry);
     }
     return null;