@desplega.ai/agent-swarm 2.7.5 → 2.7.6

package/dist/{cli-j3jvnpe8.js → cli-wp9sp1qb.js}

@@ -16,7 +16,7 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types4
-} from "./cli-7wspm5gm.js";
+} from "./cli-nhrvpaj7.js";
 import {
   resolveTemplateFromCode,
   resolveTemplateAsync,

package/dist/{cli-nmbmy64z.js → cli-xbbndvjy.js}

@@ -2,19 +2,19 @@ import {
   getKv2,
   upsertKv2,
   init_db4
-} from "./cli-1ayk1eas.js";
+} from "./cli-k2gzwsj2.js";
 import {
   resolveIdentity,
   init_identity,
   recordUnmappedIdentity,
   init_unmapped_identities
-} from "./cli-1338796d.js";
+} from "./cli-shpbx5ee.js";
 import {
   findUserByExternalId,
   findOrCreateUserByEmail,
   linkIdentity,
   init_users
-} from "./cli-bhjt02p8.js";
+} from "./cli-drr5v6av.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-vbyfwh92.js → cli-xds5f77d.js}

@@ -6,11 +6,11 @@ import {
   getResolvedConfig2,
   getAllUsers2,
   init_db4
-} from "./cli-1ayk1eas.js";
+} from "./cli-k2gzwsj2.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-8hs41zy2.js";
+} from "./cli-rmmmrjkd.js";
 import {
   scrubSecrets,
   init_secret_scrubber

package/dist/{cli-7wcyk2s5.js → cli-xnqgpshy.js}

@@ -9,7 +9,7 @@ import {
   acquireOAuthRefreshLock,
   releaseOAuthRefreshLock,
   init_oauth
-} from "./cli-1ayk1eas.js";
+} from "./cli-k2gzwsj2.js";
 import {
   generateRandomCodeVerifier,
   generateRandomState,

package/dist/{cli-rpm2sgv0.js → cli-xnrwazav.js}

@@ -1,7 +1,8 @@
 import {
   RuntimeProviderKindSchema,
+  RuntimePoolCacheSchema,
   init_types4
-} from "./cli-7wspm5gm.js";
+} from "./cli-nhrvpaj7.js";
 import {
   init_zod
 } from "./cli-k5671be5.js";
@@ -44,6 +45,7 @@ class BuiltinController {
   renew;
   pause;
   resume;
+  releaseCache;
   constructor(id, provider, target, workerApiUrl) {
     this.id = id;
     this.provider = provider;
@@ -52,6 +54,8 @@ class BuiltinController {
     this.workerApiUrl = workerApiUrl;
     if (provider.renew)
       this.renew = (handle, ttlSec) => this.call(() => provider.renew(target, handle, ttlSec));
+    if (provider.releaseCache)
+      this.releaseCache = (cache) => this.call(() => provider.releaseCache(target, cache));
     if (provider.pause)
       this.pause = (handle) => this.call(() => provider.pause(target, handle));
     if (provider.resume)
@@ -101,6 +105,7 @@ var traitsSchema = object2({
   canProvision: boolean(),
   ephemeralDisk: boolean(),
   supportsPause: boolean(),
+  persistentCache: boolean().optional(),
   maxTtlSec: number2().positive().optional(),
   maxContinuousSec: number2().positive().optional()
 });
@@ -113,10 +118,22 @@ var provisionSchema = object2({
   env: record2(string2(), string2()),
   labels: record2(string2(), string2()),
   resources: object2({ cpu: number2().positive().optional(), memoryMb: number2().positive().optional() }).optional(),
-  ttlSec: number2().positive().optional()
+  ttlSec: number2().positive().optional(),
+  cache: RuntimePoolCacheSchema.extend({
+    key: string2().regex(/^[a-zA-Z0-9][a-zA-Z0-9_.-]+$/)
+  }).optional()
 });
 var command = { type: literal2("cmd"), id: string2().min(1) };
 var ControllerCommandSchema = discriminatedUnion("op", [
+  object2({
+    ...command,
+    op: literal2("release-cache"),
+    payload: object2({
+      key: string2().regex(/^[a-zA-Z0-9][a-zA-Z0-9_.-]+$/),
+      poolId: string2().min(1),
+      ownerId: string2().min(1)
+    })
+  }),
   object2({ ...command, op: literal2("provision"), payload: provisionSchema }),
   object2({
     ...command,

package/dist/{cli-gf5hbmdr.js → cli-yjdgea32.js}

@@ -1037,7 +1037,7 @@ var require_jsonwebtoken = __commonJS(function(exports, module) {
 });
 
 // node_modules/path-to-regexp/dist/index.js
-var require_dist5 = __commonJS(function(exports) {
+var require_dist6 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.PathError = exports.TokenData = undefined;
   exports.parse = parse;
@@ -19820,7 +19820,7 @@ var require_layer = __commonJS(function(exports, module) {
    * MIT Licensed
    */
   var isPromise = require_is_promise();
-  var pathRegexp = require_dist5();
+  var pathRegexp = require_dist6();
   var debug = require_src4()("router:layer");
   var deprecate = require_depd()("router");
   var TRAILING_SLASH_REGEXP = /\/+$/;
@@ -23251,4 +23251,4 @@ var require_express = __commonJS(function(exports, module) {
   exports.urlencoded = bodyParser.urlencoded;
 });
 
-export { require_jsonwebtoken, require_dist5, require_raw_body, require_content_type, require_lib, require_vary, require_express };
+export { require_jsonwebtoken, require_dist6, require_raw_body, require_content_type, require_lib, require_vary, require_express };

package/dist/{cli-mry0qzym.js → cli-yn4kxs06.js}

@@ -13,19 +13,20 @@ import {
   init_swarm_config_guard,
   registerStoredSecret,
   init_secret_registry,
+  getSwarmConfigs2,
   upsertSwarmConfig2,
   init_db4
-} from "./cli-1ayk1eas.js";
+} from "./cli-k2gzwsj2.js";
 import {
   createRuntimeProvider,
   init_runtime_providers
-} from "./cli-xbkdm710.js";
+} from "./cli-kqdg1bsb.js";
 import {
   closeSessionTokenConnections,
   init_session_token_connections,
   insertSessionToken,
   init_users
-} from "./cli-bhjt02p8.js";
+} from "./cli-drr5v6av.js";
 import {
   RuntimeControllerCreateSchema,
   RuntimeControllerUpdateSchema,
@@ -33,7 +34,11 @@ import {
   RuntimePoolUpdateSchema,
   RuntimePoolCreateAgentSchema,
   init_types4
-} from "./cli-7wspm5gm.js";
+} from "./cli-nhrvpaj7.js";
+import {
+  poolCacheKey,
+  init_types5
+} from "./cli-0agcv1v5.js";
 import {
   scrubSecrets,
   registerVolatileSecret,
@@ -44,6 +49,79 @@ import {
   __esm
 } from "./cli-242037k3.js";
 
+// src/be/runtime-pools/cache-cleanup.ts
+async function getPoolCache(poolId) {
+  const row = await getDbClient2().get("SELECT cache, json_extract(placements, '$[0]') AS controllerId FROM runtime_pools WHERE id = ?", [poolId]);
+  if (!row?.cache)
+    return null;
+  const cache = JSON.parse(row.cache);
+  return {
+    key: cache.key ?? poolCacheKey(poolId),
+    mountPath: cache.mountPath,
+    controllerId: row.controllerId
+  };
+}
+async function queuePoolCacheRelease(pool, actor) {
+  if (!pool.cache)
+    return;
+  const owner = (await getSwarmConfigs2({ scope: "global", key: "runtime_owner_id" }))[0];
+  if (!owner)
+    return;
+  const cache = await getPoolCache(pool.id);
+  const runtimes = await getDbClient2().query(`SELECT id FROM runtime_instances WHERE pool_id = ?
+     AND (controller_id = ? OR controller_id IS NULL) AND status != 'offline'`, [pool.id, pool.placements[0]]);
+  await getDbClient2().run(`INSERT INTO runtime_cache_releases
+      (id, pool_id, controller_id, owner_id, cache_key, runtime_ids, created_by, updated_by)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT(controller_id, owner_id, cache_key) DO NOTHING`, [
+    crypto.randomUUID(),
+    pool.id,
+    pool.placements[0],
+    owner.value,
+    cache.key,
+    JSON.stringify(runtimes.map((r) => r.id)),
+    actor,
+    actor
+  ]);
+}
+async function reconcileCacheReleases(commands, signal, now) {
+  const jobs = await getDbClient2().query(`SELECT id, pool_id AS poolId, controller_id AS controllerId, owner_id AS ownerId,
+     cache_key AS key FROM runtime_cache_releases ORDER BY created_at`);
+  for (const job of jobs) {
+    if (signal.aborted)
+      return;
+    const claimed = now ?? new Date;
+    const claimedAt = claimed.toISOString();
+    const reserved = await getDbClient2().run(`UPDATE runtime_cache_releases SET state = 'deleting', updated_at = ?
+       WHERE id = ? AND (state = 'pending' OR updated_at < ?) AND NOT EXISTS (
+         SELECT 1 FROM runtime_instances WHERE status != 'offline'
+         AND id IN (SELECT value FROM json_each(runtime_cache_releases.runtime_ids))
+       )`, [claimedAt, job.id, new Date(claimed.getTime() - RELEASE_LEASE_MS).toISOString()]);
+    if (!reserved.changes)
+      continue;
+    try {
+      signal.throwIfAborted();
+      const controller = await commands(job.controllerId);
+      if (!controller.releaseCache)
+        throw new Error("Controller cannot release caches; upgrade it before cleanup");
+      await controller.releaseCache({ key: job.key, poolId: job.poolId, ownerId: job.ownerId });
+      await getDbClient2().run("DELETE FROM runtime_cache_releases WHERE id = ? AND state = 'deleting' AND updated_at = ?", [job.id, claimedAt]);
+    } catch (error) {
+      const message = scrubSecrets(String(error));
+      await getDbClient2().run(`UPDATE runtime_cache_releases SET state = 'pending', last_error = ?, updated_at = ?
+         WHERE id = ? AND state = 'deleting' AND updated_at = ?`, [message, new Date().toISOString(), job.id, claimedAt]);
+      if (!signal.aborted)
+        console.error("[runtime-pools] Cache cleanup deferred:", message);
+    }
+  }
+}
+var RELEASE_LEASE_MS;
+var init_cache_cleanup = __esm(() => {
+  init_types5();
+  init_secret_scrubber();
+  init_db4();
+  RELEASE_LEASE_MS = 5 * 60000;
+});
+
 // src/be/runtime-pools/errors.ts
 var RuntimePoolError2;
 var init_errors = __esm(() => {
@@ -114,11 +192,13 @@ function rowToController(row) {
   };
 }
 function rowToPool(row) {
+  const cache = row.cache ? JSON.parse(row.cache) : null;
   return {
     ...row,
     placements: JSON.parse(row.placements),
     env: JSON.parse(row.env),
     resources: row.resources ? JSON.parse(row.resources) : null,
+    cache: cache ? { mountPath: cache.mountPath } : null,
     enabled: row.enabled === 1
   };
 }
@@ -157,6 +237,15 @@ async function getRuntimeControllerTarget2(controller, env = process.env) {
     E2B_MAX_CONTINUOUS_SEC: env.E2B_MAX_CONTINUOUS_SEC,
     RUNTIME_WORKER_API_URL: env.RUNTIME_WORKER_API_URL,
     PUBLIC_MCP_BASE_URL: env.PUBLIC_MCP_BASE_URL,
+    ...controller.kind === "boxd" && controller.placement === "builtin" ? {
+      BOXD_ORG: env.BOXD_ORG,
+      BOXD_BASE_URL: env.BOXD_BASE_URL,
+      BOXD_SNAPSHOT: env.BOXD_SNAPSHOT,
+      BOXD_DELETE_AFTER_SEC: env.BOXD_DELETE_AFTER_SEC,
+      BOXD_START_TIMEOUT_SEC: env.BOXD_START_TIMEOUT_SEC,
+      BOXD_STATUS_TIMEOUT_SEC: env.BOXD_STATUS_TIMEOUT_SEC,
+      BOXD_TEARDOWN_TIMEOUT_SEC: env.BOXD_TEARDOWN_TIMEOUT_SEC
+    } : {},
     ...controller.config,
     ...secrets
   };
@@ -232,11 +321,18 @@ async function updateRuntimeController2(id, input, actor = null) {
     if (await tx.get("SELECT id FROM runtime_controllers WHERE name = ? AND id != ?", [data.name, id]))
       throw new RuntimePoolError2("Controller name already exists", 409);
     const pools = await listRuntimePools2();
+    const oldConfig = JSON.parse(row.config);
+    const configChanged = Object.keys(data.config).length !== Object.keys(oldConfig).length || Object.entries(data.config).some(([key, value]) => oldConfig[key] !== value);
+    const secrets = patch.secretConfig !== undefined ? controllerSecrets(row) : {};
+    const secretsChanged = Object.entries(patch.secretConfig ?? {}).some(([key, value]) => value === null ? key in secrets : secrets[key] !== value);
+    if ((data.kind !== row.kind || data.placement !== row.placement || configChanged || secretsChanged) && (pools.some((pool) => pool.cache && pool.placements.includes(id)) || await tx.get("SELECT id FROM runtime_cache_releases WHERE controller_id = ? LIMIT 1", [
+      id
+    ])))
+      throw new RuntimePoolError2("Disable pool caches and wait for cleanup before changing controller configuration or placement", 409);
     if (pools.some((pool) => pool.placements.includes(id) && pool.kind !== data.kind))
       throw new RuntimePoolError2("Pool kind must equal controller kind");
     let encrypted = row.secretConfig;
     if (patch.secretConfig !== undefined) {
-      const secrets = controllerSecrets(row);
       for (const [key, value] of Object.entries(patch.secretConfig)) {
         if (value === null)
           delete secrets[key];
@@ -268,6 +364,8 @@ async function deleteRuntimeController2(id) {
       throw new RuntimePoolError2("Controller not found", 404);
     if ((await listRuntimePools2()).some((pool) => pool.placements.includes(id)))
       throw new RuntimePoolError2("Controller has runtime pools", 409);
+    if (await tx.get("SELECT id FROM runtime_cache_releases WHERE controller_id = ? LIMIT 1", [id]))
+      throw new RuntimePoolError2("Controller has pending cache cleanup", 409);
     await revokeControllerTokens(id);
     await tx.run("DELETE FROM runtime_controllers WHERE id = ?", [id]);
   });
@@ -281,6 +379,9 @@ async function getRuntimePool2(id) {
 }
 async function validatePool(data) {
   supportedKind(data.kind);
+  if (data.cache && !(await createRuntimeProvider(data.kind)).traits.persistentCache) {
+    throw new RuntimePoolError2(`${data.kind} does not support persistent pool caches`);
+  }
   const controller = await getRuntimeController2(data.placements[0]);
   if (!controller)
     throw new RuntimePoolError2("Controller not found");
@@ -301,7 +402,7 @@ async function createRuntimePool2(input, actor = null, id = crypto.randomUUID())
     await validatePool(data);
     if (await tx.get("SELECT id FROM runtime_pools WHERE name = ? OR id = ?", [data.name, id]))
       throw new RuntimePoolError2("Pool already exists", 409);
-    await tx.run(`INSERT INTO runtime_pools (id, name, kind, placements, image, lifecycle, idle_minutes, slots_per_runtime, max_runtimes, min_runtimes, delivery, env, resources, ttl_sec, enabled, created_by, updated_by) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+    await tx.run(`INSERT INTO runtime_pools (id, name, kind, placements, image, lifecycle, idle_minutes, slots_per_runtime, max_runtimes, min_runtimes, delivery, env, resources, cache, ttl_sec, enabled, created_by, updated_by) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
       id,
       data.name,
       data.kind,
@@ -315,6 +416,7 @@ async function createRuntimePool2(input, actor = null, id = crypto.randomUUID())
       data.delivery,
       JSON.stringify(data.env),
       data.resources ? JSON.stringify(data.resources) : null,
+      data.cache ? JSON.stringify({ ...data.cache, key: poolCacheKey(id, crypto.randomUUID()) }) : null,
       data.ttlSec,
       Number(data.enabled),
       actor,
@@ -335,7 +437,13 @@ async function updateRuntimePool2(id, input, actor = null) {
     await validatePool(data);
     if (await tx.get("SELECT id FROM runtime_pools WHERE name = ? AND id != ?", [data.name, id]))
       throw new RuntimePoolError2("Pool name already exists", 409);
-    await tx.run(`UPDATE runtime_pools SET name = ?, kind = ?, placements = ?, image = ?, resolved_image = ?, lifecycle = ?, idle_minutes = ?, slots_per_runtime = ?, max_runtimes = ?, min_runtimes = ?, delivery = ?, env = ?, resources = ?, ttl_sec = ?, enabled = ?, updated_by = COALESCE(?, updated_by), updated_at = ? WHERE id = ?`, [
+    const cache = data.cache ? {
+      ...data.cache,
+      key: existing.cache && data.placements[0] === existing.placements[0] ? (await getPoolCache(id)).key : poolCacheKey(id, crypto.randomUUID())
+    } : null;
+    if (existing.cache && (!data.cache || data.placements[0] !== existing.placements[0]))
+      await queuePoolCacheRelease(existing, actor);
+    await tx.run(`UPDATE runtime_pools SET name = ?, kind = ?, placements = ?, image = ?, resolved_image = ?, lifecycle = ?, idle_minutes = ?, slots_per_runtime = ?, max_runtimes = ?, min_runtimes = ?, delivery = ?, env = ?, resources = ?, cache = ?, ttl_sec = ?, enabled = ?, updated_by = COALESCE(?, updated_by), updated_at = ? WHERE id = ?`, [
       data.name,
       data.kind,
       JSON.stringify(data.placements),
@@ -349,6 +457,7 @@ async function updateRuntimePool2(id, input, actor = null) {
       data.delivery,
       JSON.stringify(data.env),
       data.resources ? JSON.stringify(data.resources) : null,
+      cache ? JSON.stringify(cache) : null,
       data.ttlSec,
       Number(data.enabled),
       actor,
@@ -360,7 +469,8 @@ async function updateRuntimePool2(id, input, actor = null) {
 }
 async function deleteRuntimePool2(id, force = false, actor = null) {
   await getDbClient2().transaction(async (tx) => {
-    if (!await getRuntimePool2(id))
+    const pool = await getRuntimePool2(id);
+    if (!pool)
       throw new RuntimePoolError2("Pool not found", 404);
     if (await tx.get("SELECT id FROM runtime_instances WHERE pool_id = ? AND status != 'offline' LIMIT 1", [id]))
       throw new RuntimePoolError2("Pool has non-offline runtimes. Scale to zero or disable the pool and wait for teardown before deletion.", 409);
@@ -369,6 +479,7 @@ async function deleteRuntimePool2(id, force = false, actor = null) {
     if (force) {
       await tx.run("UPDATE agents SET runtime_pool_id = NULL, lastUpdatedAt = ?, updated_by = COALESCE(?, updated_by) WHERE runtime_pool_id = ?", [new Date().toISOString(), actor, id]);
     }
+    await queuePoolCacheRelease(pool, actor);
     await tx.run("DELETE FROM runtime_pools WHERE id = ?", [id]);
   });
 }
@@ -450,21 +561,23 @@ var controllerColumns = `id, name, kind, placement, config, secret_config AS sec
   status, last_seen_at AS lastSeenAt, last_error AS lastError, last_error_at AS lastErrorAt,
   created_by AS createdBy, updated_by AS updatedBy, created_at AS createdAt, updated_at AS updatedAt`, poolColumns = `id, name, kind, placements, image, lifecycle, idle_minutes AS idleMinutes,
   slots_per_runtime AS slotsPerRuntime, max_runtimes AS maxRuntimes, min_runtimes AS minRuntimes,
-  delivery, env, resources, ttl_sec AS ttlSec, resolved_image AS resolvedImage, enabled,
+  delivery, env, resources, cache, ttl_sec AS ttlSec, resolved_image AS resolvedImage, enabled,
   consecutive_failures AS consecutiveFailures, circuit_open_until AS circuitOpenUntil,
   last_error AS lastError, last_error_at AS lastErrorAt, created_by AS createdBy,
   updated_by AS updatedBy, created_at AS createdAt, updated_at AS updatedAt`;
 var init_db2 = __esm(() => {
   init_runtime_providers();
+  init_types5();
   init_types4();
   init_secret_scrubber();
   init_crypto();
   init_db4();
   init_agents();
   init_secret_registry();
+  init_cache_cleanup();
   init_errors();
   init_tokens();
   init_errors();
 });
 
-export { RuntimePoolError2, mintControllerToken, init_tokens, listRuntimeControllers2, getRuntimeController2, getRuntimeControllerTarget2, checkE2bControllerConfig2, createRuntimeController2, updateRuntimeController2, deleteRuntimeController2, listRuntimePools2, getRuntimePool2, createRuntimePool2, updateRuntimePool2, deleteRuntimePool2, bindAgentToPool2, listAgentsForPool2, getPoolForAgent2, resolvePoolDelivery2, createPoolAgent2, loadRuntimeControllerSecrets2, init_db2 };
+export { getPoolCache, reconcileCacheReleases, init_cache_cleanup, RuntimePoolError2, mintControllerToken, init_tokens, listRuntimeControllers2, getRuntimeController2, getRuntimeControllerTarget2, checkE2bControllerConfig2, createRuntimeController2, updateRuntimeController2, deleteRuntimeController2, listRuntimePools2, getRuntimePool2, createRuntimePool2, updateRuntimePool2, deleteRuntimePool2, bindAgentToPool2, listAgentsForPool2, getPoolForAgent2, resolvePoolDelivery2, createPoolAgent2, loadRuntimeControllerSecrets2, init_db2 };

package/dist/{cli-hn9hxmz9.js → cli-yx4kfngt.js}

@@ -4,7 +4,7 @@ import {
 } from "./cli-0726awxw.js";
 import {
   summarizeSession
-} from "./cli-a47xy8eq.js";
+} from "./cli-faxe6thg.js";
 import {
   getMemoryRaterNames,
   init_memory_raters,

package/dist/{cli-y24sc29k.js → cli-yy3rhsdw.js}

@@ -12,7 +12,7 @@ import {
   SteeringBlockedError,
   init_steering2,
   init_db4
-} from "./cli-1ayk1eas.js";
+} from "./cli-k2gzwsj2.js";
 import {
   isBlockExternalEnabled2,
   invalidateChannelExternality2,
@@ -20,7 +20,7 @@ import {
   shouldBlockChannel2,
   leaveExternalChannel2,
   init_external_channel
-} from "./cli-mmwm7zbf.js";
+} from "./cli-w6dt9ged.js";
 import {
   noteSlackInboundSideEffect,
   ignoreSlackInbound,
@@ -36,7 +36,7 @@ import {
   init_render_v2,
   registerTreeMessage,
   init_watcher
-} from "./cli-wvaawacd.js";
+} from "./cli-waqbxg08.js";
 import {
   workflowEventBus2,
   init_event_bus
@@ -55,15 +55,13 @@ import {
   routeMessage,
   extractTaskFromMessage,
   init_router,
-  shouldSkipLeftSlackThread,
-  init_left_threads,
   extractSlackMessageText,
   slackInboundMessageText,
   collectSlackMessageFiles,
   init_message_text,
   dispatchPre2,
   init_dispatcher
-} from "./cli-1338796d.js";
+} from "./cli-shpbx5ee.js";
 import {
   wasEventSeen,
   init_event_dedup,
@@ -74,13 +72,21 @@ import {
   getBufferMessageCount,
   instantFlush,
   init_thread_buffer
-} from "./cli-3h4nhjn8.js";
+} from "./cli-p5gp8pcx.js";
 import {
   enrichSlackUserEmail,
   resolveSlackUserId,
   rewriteSlackMentions,
   init_enrich
-} from "./cli-nmbmy64z.js";
+} from "./cli-xbbndvjy.js";
+import {
+  isSlackLeaveThreadDisabled,
+  SLACK_LEFT_THREAD_CONFIRMATION,
+  isSlackLeaveThreadCommand,
+  leaveSlackThread,
+  shouldSkipLeftSlackThread,
+  init_left_threads
+} from "./cli-gdhpcbhf.js";
 import {
   resolveTemplate,
   init_resolver
@@ -299,6 +305,22 @@ function registerMessageHandler2(app) {
         return ignoreSlackInbound("unauthorized_user");
       }
       const botMentioned = !!cachedBotUserId && !!msg.text?.includes(`<@${cachedBotUserId}>`);
+      if (msg.thread_ts && !isSlackLeaveThreadDisabled() && isSlackLeaveThreadCommand(msg.text, cachedBotUserId) && (await getMostRecentTaskInThread2(msg.channel, msg.thread_ts) !== null || await wasThreadStartedBySwarm(client, msg.channel, msg.thread_ts))) {
+        noteSlackInboundSideEffect("thread_leave");
+        await leaveSlackThread(msg.channel, msg.thread_ts, { slackUserId: msg.user });
+        console.log(`[Slack] Left thread ${msg.channel}/${msg.thread_ts}: !leave from ${msg.user}`);
+        try {
+          await client.chat.postEphemeral({
+            channel: msg.channel,
+            user: msg.user,
+            thread_ts: msg.thread_ts,
+            text: SLACK_LEFT_THREAD_CONFIRMATION
+          });
+        } catch (error) {
+          console.error("[Slack] Failed to confirm !leave:", error);
+        }
+        return;
+      }
       if (await shouldSkipLeftSlackThread(msg.channel, msg.thread_ts, botMentioned)) {
         console.log(`[Slack] Skipping message in left thread ${msg.channel}/${msg.thread_ts}`);
         return ignoreSlackInbound("thread_left");

package/dist/{cli-6s7vdcta.js → cli-zbbwez0r.js}

@@ -7,21 +7,21 @@ import {
   tierConfigKey,
   init_model_tier_keys,
   init_db4
-} from "./cli-1ayk1eas.js";
+} from "./cli-k2gzwsj2.js";
 import {
   ensureRbacSeedsSynced2,
   init_rbac_roles
-} from "./cli-8hs41zy2.js";
+} from "./cli-rmmmrjkd.js";
 import {
   seedPricingFromModelsDev,
   init_seed_pricing
-} from "./cli-xtjhfmpc.js";
+} from "./cli-c60vetmm.js";
 import {
   MODEL_TIERS,
   DEFAULT_MODEL_TIER_MAP,
   ProviderNameSchema,
   init_types4
-} from "./cli-7wspm5gm.js";
+} from "./cli-nhrvpaj7.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-z6jkx23q.js → cli-zm72anhg.js}

@@ -63,14 +63,14 @@ import {
   getStaleApprovalRequests2,
   upsertKv2,
   init_db4
-} from "./cli-1ayk1eas.js";
+} from "./cli-k2gzwsj2.js";
 import {
   listRuntimePools2,
   init_db2
-} from "./cli-mry0qzym.js";
+} from "./cli-yn4kxs06.js";
 import {
   remediateStalledRuntime
-} from "./cli-rqkxrmgw.js";
+} from "./cli-8snvgs5r.js";
 import {
   repointTrackerSyncBySwarmId,
   init_tracker,
@@ -100,13 +100,13 @@ import {
   init_approval_cancel,
   canClaim,
   init_budget_admission
-} from "./cli-1338796d.js";
+} from "./cli-shpbx5ee.js";
 import {
   runScriptWithRunCredential,
   init_run_credential,
   runSavedScriptAsAgent,
   init_run_saved
-} from "./cli-0bxqnvq9.js";
+} from "./cli-hr2e2fft.js";
 import {
   runtimeStaleThresholdMinutes,
   countActiveRuntimeInstancesForAgent,
@@ -115,7 +115,7 @@ import {
   init_multi_runtime,
   createApprovalFollowUpTask,
   init_approval_notifications
-} from "./cli-spknvxbq.js";
+} from "./cli-8bc1w0tw.js";
 import {
   isMultiRuntimeEnabled,
   init_multi_runtime2
@@ -124,13 +124,13 @@ import {
   recordIdentityEvent,
   mintToken,
   init_users
-} from "./cli-bhjt02p8.js";
+} from "./cli-drr5v6av.js";
 import {
   TERMINAL_TASK_STATUSES,
   OPEN_TASK_STATUSES,
   SUPERSEDED_WORKFLOW_TASK_REASON,
   init_types4
-} from "./cli-7wspm5gm.js";
+} from "./cli-nhrvpaj7.js";
 import {
   DEFAULT_OPENROUTER_BASE_URL,
   getOpenRouterBaseUrl,
@@ -145,7 +145,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-tqgg40ek.js";
+} from "./cli-e3r2neck.js";
 import {
   isEnvFlagEnabled,
   init_env_flag