@desplega.ai/agent-swarm 2.7.6 → 2.7.7

package/dist/{cli-71ptav7x.js → cli-ferkkrg9.js}

@@ -4,7 +4,7 @@ import {
   postClassifierRequest,
   parseClassifierUsage,
   init_classifier_shared
-} from "./cli-vpf89f34.js";
+} from "./cli-fmjd0t1y.js";
 import {
   normalizeProviderError,
   formatProviderError,

package/dist/{cli-vpf89f34.js → cli-fmjd0t1y.js}

@@ -9,8 +9,8 @@ import {
 } from "./cli-6ecv5wm5.js";
 import {
   calculateCost,
-  init_models2
-} from "./cli-1h3wcpbw.js";
+  init_models
+} from "./cli-snpj5zbj.js";
 import {
   getIdentityHeaders,
   init_identity2
@@ -103,7 +103,7 @@ function parseClassifierUsage(value, model) {
   return usage;
 }
 var init_classifier_shared = __esm(() => {
-  init_models2();
+  init_models();
   init_headers();
   init_identity2();
   init_provider_retry();

package/dist/{cli-pd7vagab.js → cli-fyt2g4wd.js}

@@ -9,7 +9,7 @@ import {
 import {
   applyOpenRouterBaseUrlOverride2,
   buildOpenAICompatibleProviderBlock2
-} from "./cli-ekwks2vs.js";
+} from "./cli-72v799xn.js";
 import {
   fetchInstalledMcpServers
 } from "./cli-bst1vp7e.js";
@@ -30,7 +30,7 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types4
-} from "./cli-nhrvpaj7.js";
+} from "./cli-n6bv12jn.js";
 import {
   resolveTemplateFromCode,
   resolveTemplateAsync,
@@ -58,7 +58,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-e3r2neck.js";
+} from "./cli-6pfd54vx.js";
 import {
   scrubSecrets,
   init_secret_scrubber

package/dist/{cli-gdhpcbhf.js → cli-g08zdaec.js}

@@ -3,7 +3,7 @@ import {
   upsertKv2,
   deleteKv2,
   init_db4
-} from "./cli-k2gzwsj2.js";
+} from "./cli-wk5yrfwd.js";
 import {
   isEnvFlagEnabled,
   init_env_flag

package/dist/{cli-ehq736cn.js → cli-g7s47cc5.js}

@@ -36,7 +36,7 @@ import {
   splitErrorToolResultImages,
   transformMessages,
   init_transform_messages
-} from "./cli-bsn8nhrq.js";
+} from "./cli-6vcp76qk.js";
 import {
   sanitizeSurrogates,
   init_sanitize_unicode
@@ -63,8 +63,8 @@ import {
   collapseSystemMessages,
   init_transcript,
   calculateCost,
-  init_models2
-} from "./cli-1h3wcpbw.js";
+  init_models
+} from "./cli-snpj5zbj.js";
 import {
   AssistantMessageEventStream,
   init_event_stream,
@@ -4819,7 +4819,7 @@ function omit2(obj, ...keys) {
 }
 
 // node_modules/@earendil-works/pi-ai/dist/api/bedrock-converse-stream.js
-init_models2();
+init_models();
 init_diagnostics();
 init_error_body();
 init_event_stream();

package/dist/{cli-svj5090z.js → cli-gz6q4eve.js}

@@ -5,7 +5,7 @@ import {
 } from "./cli-dhar9qay.js";
 import {
   runStopHookSessionSummarySubprocess
-} from "./cli-decfb6v8.js";
+} from "./cli-m0da8j35.js";
 import {
   redactRateLimitEventLine,
   SessionErrorTracker,
@@ -55,7 +55,7 @@ import {
 import {
   withFileLock,
   init_file_lock
-} from "./cli-a7v854rf.js";
+} from "./cli-tgrv9cjx.js";
 import {
   getOpenRouterAttributionHeaders,
   init_openrouter_base_url
@@ -1263,7 +1263,7 @@ class ClaudeAdapter2 {
     if (transport === "sdk" && isClaudeBridgeEffective(sourceEnv)) {
       throw new Error("CLAUDE_TRANSPORT=sdk cannot run with an effective Claude Bridge configuration. Select CLI transport or disable the bridge.");
     }
-    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-zgrz6yvc.js") : undefined;
+    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-x91kqyhm.js") : undefined;
     claudeSdk?.validateClaudeSdkAdditionalArgs([
       ...claudeBinaryArgv.slice(1),
       ...config.additionalArgs ?? []

package/dist/{cli-8snvgs5r.js → cli-je518txm.js}

@@ -4,7 +4,7 @@ import {
   CONTROLLER_COMMAND_TIMEOUT_MS,
   RuntimeHandleSchema,
   ControllerStatusResultSchema
-} from "./cli-xnrwazav.js";
+} from "./cli-3fg0bdcv.js";
 import {
   getDbClient2,
   isRuntimePoolsEnabled,
@@ -21,7 +21,7 @@ import {
   upsertSwarmConfig2,
   getResolvedConfig2,
   init_db4
-} from "./cli-k2gzwsj2.js";
+} from "./cli-wk5yrfwd.js";
 import {
   getPoolCache,
   reconcileCacheReleases,
@@ -35,7 +35,7 @@ import {
   getPoolForAgent2,
   resolvePoolDelivery2,
   init_db2
-} from "./cli-yn4kxs06.js";
+} from "./cli-ddaanqkd.js";
 import {
   workflowEventBus2,
   init_event_bus
@@ -45,7 +45,7 @@ import {
   init_worker_follow_up,
   canClaim,
   init_budget_admission
-} from "./cli-shpbx5ee.js";
+} from "./cli-ws19768n.js";
 import {
   runtimeStaleThresholdMinutes,
   getRuntimeInstanceById,
@@ -54,7 +54,7 @@ import {
   listRuntimeInstancesForAgent,
   listRuntimeInstancesForPool,
   init_multi_runtime
-} from "./cli-8bc1w0tw.js";
+} from "./cli-nmzhp1b5.js";
 import {
   isMultiRuntimeEnabled,
   init_multi_runtime2
@@ -63,11 +63,11 @@ import {
   canProvisionKind,
   createRuntimeProvider,
   init_runtime_providers
-} from "./cli-kqdg1bsb.js";
+} from "./cli-yndmfxb3.js";
 import {
   mintRuntimeToken,
   init_users
-} from "./cli-drr5v6av.js";
+} from "./cli-5jnhv72d.js";
 import {
   import_websocket,
   init_wrapper2
@@ -76,7 +76,7 @@ import {
   TERMINAL_TASK_STATUSES,
   isTerminalTaskStatus,
   init_types4
-} from "./cli-nhrvpaj7.js";
+} from "./cli-n6bv12jn.js";
 import {
   init_zod
 } from "./cli-k5671be5.js";
@@ -96,7 +96,7 @@ import {
 import {
   resolveWorkerApiUrl,
   init_worker_api_url
-} from "./cli-70r77n04.js";
+} from "./cli-xae4g51r.js";
 import {
   RUNTIME_LABELS,
   init_types5
@@ -546,7 +546,7 @@ async function recoverSessions(runtimeId, reason) {
   }
   if (!sessions.length)
     return;
-  const { remediateTaskForDeadRuntime } = await import("./heartbeat-kadyek8p.js");
+  const { remediateTaskForDeadRuntime } = await import("./heartbeat-k42svnr0.js");
   for (const session of sessions) {
     try {
       const task = await getTaskById2(session.taskId);

package/dist/{cli-rmmmrjkd.js → cli-jtjtabxe.js}

@@ -4,7 +4,7 @@ import {
   invalidateTelemetryUserRole,
   init_telemetry_identity,
   init_db4
-} from "./cli-k2gzwsj2.js";
+} from "./cli-wk5yrfwd.js";
 import {
   PermissionVerbSchema,
   init_rbac

package/dist/{cli-611a1294.js → cli-k0wwfqbg.js}

@@ -3,6 +3,10 @@ import {
   isEnvFlagEnabled,
   init_env_flag
 } from "./cli-cebvbc9t.js";
+import {
+  isDevOrTestNodeEnv,
+  init_node_env
+} from "./cli-rgeadyvq.js";
 import {
   __esm
 } from "./cli-242037k3.js";
@@ -14,6 +18,18 @@ function getConfiguredAppUrls() {
 function getAppUrl(fallback = DEFAULT_APP_URL) {
   return (getConfiguredAppUrls()[0] || fallback).replace(/\/+$/, "");
 }
+function getLocalDevAppOrigins() {
+  if (!isDevOrTestNodeEnv())
+    return [];
+  return [
+    "http://localhost:5274",
+    "http://localhost:5175",
+    "http://127.0.0.1:5274",
+    "http://127.0.0.1:5175",
+    "https://*.localhost",
+    "http://*.localhost"
+  ];
+}
 function getMcpBaseUrl() {
   const raw = process.env.MCP_BASE_URL?.trim();
   return (raw || `http://localhost:${process.env.PORT || "3013"}`).replace(/\/+$/, "");
@@ -166,8 +182,9 @@ function buildCombFileUrl(opts) {
 var MAX_PROFILE_FILE_LENGTH, DEFAULT_APP_URL = "https://app.agent-swarm.dev", DEFAULT_AGENT_FS_LIVE_URL = "https://live.agent-fs.dev", DOT_SEGMENT_RE;
 var init_constants3 = __esm(() => {
   init_env_flag();
+  init_node_env();
   MAX_PROFILE_FILE_LENGTH = 256 * 1024;
   DOT_SEGMENT_RE = /^(?:\.|%2e){1,2}$/i;
 });
 
-export { MAX_PROFILE_FILE_LENGTH, DEFAULT_APP_URL, getConfiguredAppUrls, getAppUrl, getMcpBaseUrl, getPublicMcpBaseUrl, getAgentFsLiveUrl, resolveAgentFsLinkBase, getAgentFsDefaultOrgId, getAgentFsDefaultDriveId, agentFsFileRoute, buildAgentFsLiveUrl, getCombState, isCombEnabled, isAgentFsProxyEnabled, buildCombFileUrl, init_constants3 };
+export { MAX_PROFILE_FILE_LENGTH, DEFAULT_APP_URL, getConfiguredAppUrls, getAppUrl, getLocalDevAppOrigins, getMcpBaseUrl, getPublicMcpBaseUrl, getAgentFsLiveUrl, resolveAgentFsLinkBase, getAgentFsDefaultOrgId, getAgentFsDefaultDriveId, agentFsFileRoute, buildAgentFsLiveUrl, getCombState, isCombEnabled, isAgentFsProxyEnabled, buildCombFileUrl, init_constants3 };

package/dist/{cli-es6va8jk.js → cli-k1nje3v3.js}

@@ -11,7 +11,7 @@ import {
   checkDeepSeekApiKey,
   checkOpenAICompatibleProvider,
   writeSkillsToFilesystem
-} from "./cli-bjb3z51z.js";
+} from "./cli-yyj3j5m4.js";
 import {
   renderSteeringDelivery
 } from "./cli-ftyxyspd.js";
@@ -38,35 +38,35 @@ import {
 import {
   checkAmpCredentials2,
   liveTestAmpCredentials2
-} from "./cli-nwj0ee2w.js";
+} from "./cli-k899ehvh.js";
 import {
   checkClaudeCredentials2
-} from "./cli-svj5090z.js";
+} from "./cli-gz6q4eve.js";
 import {
   checkClaudeManagedCredentials2
 } from "./cli-vfym7wmz.js";
 import {
   codexUserHome,
   checkCodexCredentials2
-} from "./cli-0qatpy8q.js";
+} from "./cli-ayayvfg4.js";
 import {
   checkCursorCredentials2
-} from "./cli-wp9sp1qb.js";
+} from "./cli-08bmz9z9.js";
 import {
   checkDevinCredentials2
 } from "./cli-srye3vdt.js";
 import {
   checkDshCredentials2
-} from "./cli-vvpx3gsx.js";
+} from "./cli-95jzxcp3.js";
 import {
   checkOpencodeCredentials2
-} from "./cli-ekwks2vs.js";
+} from "./cli-72v799xn.js";
 import {
   checkFxCredentials2
-} from "./cli-54t00gt8.js";
+} from "./cli-e46hg0xw.js";
 import {
   checkGrokCredentials2
-} from "./cli-3ypk9vk1.js";
+} from "./cli-cb2a8pna.js";
 import {
   CODEX_OAUTH_POOL_SLOTS_ENV,
   isCodexOAuthConfigKey,
@@ -86,7 +86,7 @@ import {
   init_azure_devops,
   resolveScriptsOnlyMode,
   init_scripts_only_mode
-} from "./cli-shpbx5ee.js";
+} from "./cli-ws19768n.js";
 import {
   terminateRegisteredProcessGroups,
   init_process_group
@@ -94,7 +94,7 @@ import {
 import {
   validateJsonSchema,
   init_json_schema_validator
-} from "./cli-8bc1w0tw.js";
+} from "./cli-nmzhp1b5.js";
 import {
   authJsonToCredentialSelection,
   credentialsToAuthJson,
@@ -113,7 +113,7 @@ import {
   initialize,
   ensure,
   init_business_use
-} from "./cli-waqbxg08.js";
+} from "./cli-cppkf404.js";
 import {
   mapTriggerSurface,
   init_telemetry_context,
@@ -129,7 +129,7 @@ import {
   init_vcs_repo_match,
   isApiDrainingResponse,
   init_api_drain2
-} from "./cli-k2gzwsj2.js";
+} from "./cli-wk5yrfwd.js";
 import {
   parseWorkerModelTierOverrides,
   resolveTaskModelSelection,
@@ -137,7 +137,7 @@ import {
   ProviderNameSchema,
   WorkerNudgeSchema,
   init_types4
-} from "./cli-nhrvpaj7.js";
+} from "./cli-n6bv12jn.js";
 import {
   isCodexAuthFailureReason,
   init_codex_auth_failure
@@ -148,6 +148,7 @@ import {
   generateDefaultIdentityMd2,
   generateDefaultToolsMd2,
   init_defaults,
+  init_templates4,
   getBasePrompt,
   getTaskContextPrompt,
   init_base_prompt,
@@ -157,22 +158,19 @@ import {
   buildContextPreamble,
   buildResumeContextPreamble,
   init_context_preamble,
-  contentSha256,
   prependProfileSyncRejectionBanner,
   writeIdentityBaselines,
+  bootIdentityBaselines,
   WORKSPACE_CLAUDE_MD_PATH,
   writeProfileFileFromDb,
   resolveClaudeMdPath,
   syncProfileFilesToServer,
   init_profile_sync
-} from "./cli-a7v854rf.js";
+} from "./cli-tgrv9cjx.js";
 import {
   isSteeringEnabled2,
   init_steering_enabled
 } from "./cli-4sydckyj.js";
-import {
-  init_templates4
-} from "./cli-2pnswgh8.js";
 import {
   validateRoute,
   deriveDefaultRoute,
@@ -205,7 +203,7 @@ import {
 import {
   getMcpBaseUrl,
   init_constants3
-} from "./cli-611a1294.js";
+} from "./cli-k0wwfqbg.js";
 import {
   isEnvFlagEnabled,
   init_env_flag
@@ -271,15 +269,15 @@ init_storage();
 async function createProviderAdapter(provider) {
   switch (provider) {
     case "claude": {
-      const { ClaudeAdapter } = await import("./claude-adapter-qta1f1xn.js");
+      const { ClaudeAdapter } = await import("./claude-adapter-fn287zmm.js");
       return new ClaudeAdapter;
     }
     case "pi": {
-      const { PiMonoAdapter } = await import("./pi-mono-adapter-exhkzhn2.js");
+      const { PiMonoAdapter } = await import("./pi-mono-adapter-c7v8sdec.js");
       return new PiMonoAdapter;
     }
     case "codex": {
-      const { CodexAdapter } = await import("./codex-adapter-ayd1fb6h.js");
+      const { CodexAdapter } = await import("./codex-adapter-cf2yxe9m.js");
       return new CodexAdapter;
     }
     case "claude-managed": {
@@ -291,31 +289,31 @@ async function createProviderAdapter(provider) {
       return new DevinAdapter;
     }
     case "opencode": {
-      const { OpencodeAdapter } = await import("./opencode-adapter-j25vm3rr.js");
+      const { OpencodeAdapter } = await import("./opencode-adapter-r690h1cr.js");
       return new OpencodeAdapter;
     }
     case "dsh": {
-      const { DshAdapter } = await import("./dsh-adapter-007y4ejs.js");
+      const { DshAdapter } = await import("./dsh-adapter-v8628r89.js");
       return new DshAdapter;
     }
     case "amp": {
-      const { AmpAdapter } = await import("./amp-adapter-4pg9h34q.js");
+      const { AmpAdapter } = await import("./amp-adapter-njpts0yr.js");
       return new AmpAdapter;
     }
     case "cursor": {
-      const { CursorAdapter } = await import("./cursor-adapter-9s4dwwdw.js");
+      const { CursorAdapter } = await import("./cursor-adapter-ftd81ga8.js");
       return new CursorAdapter;
     }
     case "grok": {
-      const { GrokAdapter } = await import("./grok-adapter-q0abvpaj.js");
+      const { GrokAdapter } = await import("./grok-adapter-gpjqmkcq.js");
       return new GrokAdapter;
     }
     case "fx": {
-      const { FxAdapter } = await import("./fx-adapter-fy8rr921.js");
+      const { FxAdapter } = await import("./fx-adapter-bs8wqrk5.js");
       return new FxAdapter;
     }
     case "acp": {
-      const { ACPAdapter } = await import("./acp-adapter-bp91d37f.js");
+      const { ACPAdapter } = await import("./acp-adapter-7b4vk3h5.js");
       return new ACPAdapter;
     }
     default:
@@ -1312,7 +1310,7 @@ var CREDENTIAL_PROVIDER_CHECKERS = {
   devin: (env) => checkDevinCredentials2(env),
   opencode: (env, opts) => checkOpencodeCredentials2(env, opts),
   pi: async (env, opts) => {
-    const { checkPiMonoCredentials, listPiOpencodeGoModelIds } = await import("./pi-mono-adapter-exhkzhn2.js");
+    const { checkPiMonoCredentials, listPiOpencodeGoModelIds } = await import("./pi-mono-adapter-c7v8sdec.js");
     return {
       ...await checkPiMonoCredentials(env, opts),
       opencodeGoModels: listPiOpencodeGoModelIds()
@@ -1591,7 +1589,7 @@ async function validateProviderCredentials(provider, env = process.env, presence
             latency_ms: Date.now() - startedAt
           };
         }
-        const { liveTestCursorKey } = await import("./cursor-adapter-9s4dwwdw.js");
+        const { liveTestCursorKey } = await import("./cursor-adapter-ftd81ga8.js");
         return checkEachKey("CURSOR_API_KEY", apiKey, async (member) => {
           const start = Date.now();
           const result = await liveTestCursorKey(member);
@@ -6027,17 +6025,14 @@ ${agentSetupScript}
     }
   }
   try {
-    const baselines = {};
-    if (agentSoulMd)
-      baselines.soulMd = contentSha256(agentSoulMd);
-    if (agentIdentityMd)
-      baselines.identityMd = contentSha256(agentIdentityMd);
-    if (agentToolsMd)
-      baselines.toolsMd = contentSha256(agentToolsMd);
-    if (agentHeartbeatMd)
-      baselines.heartbeatMd = contentSha256(agentHeartbeatMd);
-    if (agentClaudeMd)
-      baselines.claudeMd = contentSha256(agentClaudeMd);
+    const setupFile = Bun.file("/workspace/start-up.sh");
+    const baselines = bootIdentityBaselines({
+      soulMd: agentSoulMd,
+      identityMd: agentIdentityMd,
+      toolsMd: agentToolsMd,
+      heartbeatMd: agentHeartbeatMd,
+      claudeMd: agentClaudeMd
+    }, await setupFile.exists() ? await setupFile.text() : undefined, agentId);
     await writeIdentityBaselines(baselines);
     console.log(`[${role}] Recorded identity file baselines for session-end sync`);
   } catch {}

package/dist/{cli-p5gp8pcx.js → cli-k8196sh2.js}

@@ -11,7 +11,7 @@ import {
   init_steering2,
   createLogEntry2,
   init_db4
-} from "./cli-k2gzwsj2.js";
+} from "./cli-wk5yrfwd.js";
 import {
   ackSlackMessage,
   init_ack,
@@ -27,7 +27,7 @@ import {
   init_watcher,
   getSlackApp2,
   init_app3
-} from "./cli-waqbxg08.js";
+} from "./cli-cppkf404.js";
 import {
   TaskCreationBlockedError,
   init_errors2,
@@ -41,20 +41,20 @@ import {
   init_message_text,
   createAdditiveBuffer,
   init_additive_buffer
-} from "./cli-shpbx5ee.js";
+} from "./cli-ws19768n.js";
 import {
   resolveSlackUserId,
   rewriteSlackMentions,
   init_enrich
-} from "./cli-xbbndvjy.js";
+} from "./cli-pq73h5mz.js";
 import {
   isSlackThreadLeft,
   init_left_threads
-} from "./cli-gdhpcbhf.js";
+} from "./cli-g08zdaec.js";
 import {
   findUserByExternalId,
   init_users
-} from "./cli-drr5v6av.js";
+} from "./cli-5jnhv72d.js";
 import {
   isSteeringEnabled2,
   init_steering_enabled

package/dist/{cli-nwj0ee2w.js → cli-k899ehvh.js}

@@ -18,7 +18,7 @@ import {
   ampBillsCacheWrites,
   resolveAmpModel,
   init_amp_models
-} from "./cli-q0k1w5zd.js";
+} from "./cli-35rsp8ye.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -48,7 +48,7 @@ init_context_window();
 init_multi_runtime2();
 init_process_group();
 init_secret_scrubber();
-var AMP_PACKAGE = "@ampcode/cli@0.0.1793363705-g5c9ae5";
+var AMP_PACKAGE = "@ampcode/cli@0.0.1793450357-gd44904";
 var AMP_MCP_SERVER_NAME = "agent-swarm";
 var AMP_PLUGIN_MODE_KEY = "agent-swarm";
 var AMP_LIVE_TEST_TIMEOUT_MS = 5000;

package/dist/{cli-decfb6v8.js → cli-m0da8j35.js}

@@ -1,10 +1,10 @@
 import {
   materializeClaudeMd,
   stopClaudeMd
-} from "./cli-jm2vfpfd.js";
+} from "./cli-e5bzrn01.js";
 import {
   summarizeSession
-} from "./cli-faxe6thg.js";
+} from "./cli-qghe0h66.js";
 import {
   contextBoundNoteThreshold,
   injectClaimedContextBoundNote
@@ -28,20 +28,21 @@ import {
 import {
   contentSha256,
   readIdentityBaselines,
+  advanceIdentityBaselines,
   fetchWithSyncTimeout,
   warnProfileFileTooLarge,
   buildIndependentIdentityPayloads,
   init_profile_sync
-} from "./cli-a7v854rf.js";
+} from "./cli-tgrv9cjx.js";
 import {
   init_package,
   package_default
-} from "./cli-e3r2neck.js";
+} from "./cli-6pfd54vx.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getMcpBaseUrl,
   init_constants3
-} from "./cli-611a1294.js";
+} from "./cli-k0wwfqbg.js";
 import {
   isSessionSummarySkipped,
   init_env_flag
@@ -112,9 +113,11 @@ async function postHookProfileUpdate({
       const responseBody = await response.text();
       console.error(scrubSecrets(`[hook] ${label} profile sync failed: HTTP ${response.status}${responseBody ? ` — ${responseBody}` : ""}`));
     }
+    return response.ok;
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     console.error(scrubSecrets(`[hook] ${label} profile sync errored: ${message}`));
+    return false;
   }
 }
 async function readTaskFile() {
@@ -400,7 +403,7 @@ async function handleHook() {
   const syncIdentityFilesToServer = async (agentId, changeSource = "session_sync") => {
     if (!mcpConfig)
       return;
-    const baselines = changeSource === "session_sync" ? await readIdentityBaselines() : null;
+    const baselines = await readIdentityBaselines();
     const updates = {};
     const soulFile = Bun.file(SOUL_MD_PATH);
     if (await soulFile.exists()) {
@@ -442,14 +445,21 @@ async function handleHook() {
     }
     if (Object.keys(updates).length === 0)
       return;
-    for (const payload of buildIndependentIdentityPayloads(updates, changeSource)) {
-      await postHookProfileUpdate({
+    const synced = {};
+    for (const [field, value] of Object.entries(updates)) {
+      const [payload] = buildIndependentIdentityPayloads({ [field]: value }, changeSource);
+      if (!payload)
+        continue;
+      const ok = await postHookProfileUpdate({
         url: `${getBaseUrl()}/api/agents/${agentId}/profile`,
         headers: mcpConfig.headers,
         body: payload.body,
         label: payload.label
       });
+      if (ok)
+        synced[field] = value;
     }
+    await advanceIdentityBaselines(synced);
   };
   const syncSetupScriptToServer = async (agentId, changeSource = "session_sync") => {
     if (!mcpConfig)
@@ -476,8 +486,10 @@ async function handleHook() {
       warnProfileFileTooLarge(agentId, "setupScript", content.length, "hook");
       return;
     }
+    if ((await readIdentityBaselines())?.setupScript === contentSha256(content))
+      return;
     try {
-      await fetch(`${getBaseUrl()}/api/agents/${agentId}/profile`, {
+      const resp = await fetch(`${getBaseUrl()}/api/agents/${agentId}/profile`, {
         method: "PUT",
         headers: {
           ...mcpConfig.headers,
@@ -485,6 +497,8 @@ async function handleHook() {
         },
         body: JSON.stringify({ setupScript: content, changeSource })
       });
+      if (resp.ok)
+        await advanceIdentityBaselines({ setupScript: content });
     } catch {}
   };
   const getCancelledTasks = async () => {