@growthub/cli 0.14.0 → 0.14.2

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/lib/sandbox-serverless-flow.js

@@ -70,6 +70,7 @@ function deriveSandboxServerlessState(input = {}) {
 
   const locality = clean(row.runLocality).toLowerCase() === "serverless" ? "serverless" : "local";
   const isServerless = locality === "serverless";
+  const browserAccess = ["true", "1", "on", "yes"].includes(clean(row.browserAccess).toLowerCase());
   const adapterId = clean(row.adapter);
   const adapterChosen = Boolean(adapterId);
 
@@ -162,8 +163,8 @@ function deriveSandboxServerlessState(input = {}) {
     label: isServerless ? "Run on the scheduler" : "Run locally",
     status: "optional",
     description: isServerless
-      ? "Once the scheduler, auth, and store are ready, run delegates to the serverless scheduler."
-      : "Run this workflow in-process.",
+      ? `Once the scheduler, auth, and store are ready, run delegates to the serverless scheduler.${browserAccess ? " Browser access travels with the run in the growthub-sandbox-run-v1 envelope (sandbox.browserAccess), so the remote handler grants the same capability as a local run." : ""}`
+      : `Run this workflow in-process.${browserAccess ? (adapterId === "local-intelligence" ? " Browser access is executed by the local-intelligence browser bridge." : " Browser access is engaged through the selected agent host's first-party browser integration.") : ""}`,
     action: inline({ id: "run-sandbox", label: "Run" }),
   });
 
@@ -192,6 +193,7 @@ function deriveSandboxServerlessState(input = {}) {
     version: 1,
     locality,
     isServerless,
+    browserAccess,
     adapterChosen,
     schedulerLinked,
     schedulerHealthy,

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/lib/workspace-data-model.js

@@ -881,6 +881,7 @@ const OBJECT_TYPE_PRESETS = {
       "envRefs",
       "networkAllow",
       "allowList",
+      "browserAccess",
       "instructions",
       "command",
       "timeoutMs",

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/lib/workspace-helper.js

@@ -40,6 +40,12 @@ const WORKSPACE_HELPER_PROPOSAL_TYPES = [
   // Server-file lane (AWaC: NOT a config PATCH field). Routed in helper/apply to
   // the confined, gated resolver write — never through writeWorkspaceConfig.
   "resolver.create",
+  // Swarm lane — governed sandbox-environment rows in the EXISTING dataModel
+  // patch field. Apply normalizes the intent payload into an agent-swarm-v1
+  // graph via buildDefaultAgentSwarmGraph; execution stays behind sandbox-run.
+  "swarm.run.propose",
+  "swarm.workflow.save",
+  "swarm.run.resume",
 ];
 
 const PROPOSAL_TYPE_TO_PATCH_FIELD = {
@@ -56,6 +62,10 @@ const PROPOSAL_TYPE_TO_PATCH_FIELD = {
   // Sentinel — resolver.create writes a server file, not a config field. It is
   // explicitly excluded from the PATCH allowlist and handled by its own lane.
   "resolver.create": "server-file",
+  // Swarm rows are dataModel rows. No new PATCH field is introduced.
+  "swarm.run.propose": "dataModel",
+  "swarm.workflow.save": "dataModel",
+  "swarm.run.resume": "dataModel",
 };
 
 const KNOWN_WIDGET_KINDS = ["chart", "view", "iframe", "rich-text"];
@@ -77,6 +87,8 @@ const INTENT_DESCRIPTIONS = {
     "Inspect the workspace snapshot for broken references, missing bindings, empty objects, or incomplete views. Propose the minimum changes needed to repair each issue.",
   explain:
     "Return a clear explanation of what one or more workspace objects, widgets, or configurations do. Use the explain.object proposal type — payload is { explanation: string }.",
+  swarm:
+    "Propose a governed agent swarm via swarm.run.propose. You are propose-only: do not execute, do not store credentials. Describe the swarm objective, agent roles, task prompts, tools, maxConcurrency, and outcomeCriteria as an intent payload — the server normalizes it into the governed agent-swarm-v1 graph and execution happens only through sandbox-run after the user applies the proposal.",
 };
 
 /**
@@ -91,6 +103,10 @@ const INTENT_DESCRIPTIONS = {
  * `create_object` when the prompt mentions both "object" and "API".
  */
 const INTENT_HEURISTIC_PATTERNS = [
+  { intent: "swarm", patterns: [
+    /\b(swarm|sub-?agents?|multi-?agent|agent\s+team|orchestrat(e|or|ion))\b/i,
+    /\b(run|launch|spawn|dispatch)\b.*\b(agents?|workers?)\b.*\b(parallel|swarm|workflow)\b/i,
+  ]},
   { intent: "register_api", patterns: [
     /\b(api|endpoint|webhook|integration|connector|oauth|bearer\s+token|auth\s+header)\b/i,
     /\b(register|connect|wire|hook\s*up)\b.*\b(api|endpoint|webhook|service|integration)\b/i,
@@ -202,6 +218,13 @@ function buildStableSystemPrompt(intent) {
     "- Reset invalid axis, filter, group, and sort settings when source changes.",
     "- Mark recomputed values as unsaved unless PATCH succeeds.",
     "",
+    "## When proposing agent swarms (swarm.run.propose)",
+    "- You may propose swarm.run.propose. You are propose-only. Do not execute. Do not store credentials.",
+    "- Describe the swarm objective, agent roles, tasks, tools, maxConcurrency, and outcomeCriteria.",
+    "- The server will normalize this into the governed agent-swarm graph; execution happens only through sandbox-run after apply.",
+    "- payload shape: { name, description?, objective, agents: [{ id?, role, description?, taskPrompt, tools?, required?, maxTokens?, timeoutMs? }], maxConcurrency?, outcomeCriteria?, runLocality?, agentHost?, adapter? }",
+    "- adapter, when set, must be local-agent-host or local-intelligence.",
+    "",
     "## Valid proposal types and their target patch field",
     WORKSPACE_HELPER_PROPOSAL_TYPES.map(
       (t) => `  ${t} → ${PROPOSAL_TYPE_TO_PATCH_FIELD[t]}`

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/lib/workspace-metadata-store.js

@@ -545,8 +545,8 @@ function deriveWorkspaceWorkflowMetadataItems(workspaceConfig, objectItems) {
       const graphEdges = Array.isArray(graph?.edges) ? graph.edges : [];
       const workflowMetadataId = stableId("workflow", objectId, rowName);
       const sandboxMetadataId = stableId("sandbox", objectId, rowName);
-      const agentHost = safeString(row.agentHost).trim();
-      const adapter = safeString(row.adapter).trim();
+        const rowAgentHost = safeString(row.agentHost).trim();
+        const rowAdapter = safeString(row.adapter).trim();
       const inputSchema = graphNodes.length ? discoverRunInputSchema(graph) : { requiresInput: false, fields: [] };
       const inputFields = Array.isArray(inputSchema?.fields) ? inputSchema.fields : [];
 
@@ -560,8 +560,8 @@ function deriveWorkspaceWorkflowMetadataItems(workspaceConfig, objectItems) {
         lifecycleStatus: safeString(row.lifecycleStatus).trim() || "draft",
         version: safeString(row.version).trim() || "1",
         sandboxMetadataId,
-        agentHost,
-        adapter,
+        agentHost: rowAgentHost,
+        adapter: rowAdapter,
         runLocality: safeString(row.runLocality).trim(),
         nodeCount: graphNodes.length,
         edgeCount: graphEdges.length,
@@ -578,6 +578,8 @@ function deriveWorkspaceWorkflowMetadataItems(workspaceConfig, objectItems) {
         const sourceType = safeString(config.sourceType).trim();
         const sourceId = safeString(config.sourceId).trim();
         const integrationId = safeString(config.integrationId).trim();
+        const nodeAgentHost = safeString(config.agentHost || rowAgentHost).trim();
+        const nodeAdapter = safeString(config.adapter || rowAdapter).trim();
         const filterClauses = collectFilterClauses({ op: config.filterMode, clauses: config.filters });
         const writesObjectId = safeString(config.writeObjectId || config.targetObjectId).trim();
         const readsObjectId = sourceId || safeString(config.objectId).trim();
@@ -603,8 +605,8 @@ function deriveWorkspaceWorkflowMetadataItems(workspaceConfig, objectItems) {
           inputFieldCount: inputs.length,
           inputFieldIds: inputs.map((field) => field.id),
           sandboxMetadataId,
-          agentHost,
-          adapter,
+          agentHost: nodeAgentHost,
+          adapter: nodeAdapter,
           permissions: nodeType === "api-registry-call" ? ["integration:read"] : []
         });
       }

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/lib/workspace-schema.js

@@ -1044,6 +1044,12 @@ function validateSandboxEnvironmentRow(row, path, errors) {
   if (row.allowList !== undefined && typeof row.allowList !== "string" && !Array.isArray(row.allowList)) {
     errors.push(`${path}.allowList must be a comma-separated string or array of hostnames`);
   }
+  if (row.browserAccess !== undefined) {
+    const value = String(row.browserAccess).trim().toLowerCase();
+    if (!["", "true", "false", "0", "1", "on", "off"].includes(value)) {
+      errors.push(`${path}.browserAccess must coerce to a boolean (true/false/on/off)`);
+    }
+  }
   if (row.instructions !== undefined && typeof row.instructions !== "string") {
     errors.push(`${path}.instructions must be a string`);
   }