@desplega.ai/agent-swarm 1.102.0 → 1.104.0

package/dist/{cli-zk4gn40w.js → cli-54h5daha.js}

@@ -2,10 +2,14 @@ import {
   getApiKey
 } from "./cli-f14fvzag.js";
 import {
+  CredentialBroker,
+  DEFAULT_CREDENTIAL_BINDINGS,
+  SwarmConfigCredentialBindingStore,
   getScript,
   getScriptVersion,
+  listRelationalCredentialBindings,
   validateScriptImports
-} from "./cli-qbc6mncp.js";
+} from "./cli-v1syqkcb.js";
 import {
   checkpointStep,
   checkpointStepFailure,
@@ -15,14 +19,14 @@ import {
   interpolateNodeConfig,
   runStepValidation,
   walkGraph
-} from "./cli-t2jk33ta.js";
+} from "./cli-zghef0em.js";
 import {
   getAppUrl
 } from "./cli-dh55d5fg.js";
 import {
   withSiblingAwareness,
   workflowContextKey
-} from "./cli-r68m8arr.js";
+} from "./cli-e7bwjntj.js";
 import {
   FollowUpConfigSchema,
   ModelTierSchema,
@@ -34,10 +38,12 @@ import {
   getDueWaitStates,
   getPendingEventWaitNames,
   getPendingWaitsByEvent,
+  getResolvedConfig,
   getRetryableSteps,
   getStuckApprovalRuns,
   getStuckWaitRuns,
   getStuckWorkflowRuns,
+  getSwarmConfigs,
   getTaskByWorkflowRunStepId,
   getWaitStateById,
   getWorkflow,
@@ -46,8 +52,6 @@ import {
   getWorkflowRunStepsByRunId,
   getWorkflowVersions,
   init_db,
-  init_model_tiers,
-  init_template,
   init_types,
   interpolate,
   resolveApprovalRequest,
@@ -55,7 +59,7 @@ import {
   splitLegacyModelAlias,
   updateWorkflowRun,
   updateWorkflowRunStep
-} from "./cli-d0t4854c.js";
+} from "./cli-0jw6j755.js";
 import {
   init_zod
 } from "./cli-q21d49ac.js";
@@ -64,6 +68,7 @@ import {
 } from "./cli-anrj584m.js";
 import {
   init_secret_scrubber,
+  registerVolatileSecret,
   scrubObject,
   scrubSecrets
 } from "./cli-3pp1362w.js";
@@ -1014,10 +1019,6 @@ function stopRetryPoller() {
     pollerTimeout = null;
   }
 }
-
-// src/workflows/index.ts
-init_template();
-
 // src/workflows/templates.ts
 function validateTemplateVariables(template, provided) {
   const missing = [];
@@ -1141,7 +1142,6 @@ init_zod();
 
 // src/workflows/executors/agent-task.ts
 init_zod();
-init_model_tiers();
 init_types();
 var AgentTaskConfigSchema = exports_external.object({
   template: exports_external.string(),
@@ -1428,7 +1428,7 @@ class HumanInTheLoopExecutor extends BaseExecutor {
       }
       if (notification.channel === "slack") {
         try {
-          const { getSlackApp } = await import("./app-tnq1pz27.js");
+          const { getSlackApp } = await import("./app-dr8hwx7z.js");
           const slackApp = getSlackApp();
           if (!slackApp) {
             console.warn("[HITL] Slack not initialized — cannot send notification");
@@ -1542,7 +1542,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp } = await import("./app-tnq1pz27.js");
+        const { getSlackApp } = await import("./app-dr8hwx7z.js");
         const app = getSlackApp();
         if (!app) {
           return {
@@ -1836,6 +1836,28 @@ class ScriptExecutor extends BaseExecutor {
 // src/workflows/executors/swarm-script.ts
 init_zod();
 
+// src/be/script-credential-broker.ts
+init_secret_scrubber();
+init_db();
+class RelationalCredentialBindingStore extends SwarmConfigCredentialBindingStore {
+  listActiveBindings(context) {
+    const relational = listRelationalCredentialBindings(context);
+    if (relational.length > 0)
+      return relational;
+    return super.listActiveBindings(context);
+  }
+}
+function buildScriptCredentialBindings(input) {
+  const resolvedConfigs = getResolvedConfig(input.agentId, input.repoId);
+  const configMap = new Map(resolvedConfigs.map((config) => [config.key, config.value]));
+  const broker = new CredentialBroker(new RelationalCredentialBindingStore((filters) => getSwarmConfigs(filters)), (configKey) => configMap.get(configKey) ?? process.env[configKey], DEFAULT_CREDENTIAL_BINDINGS);
+  const bindings = broker.resolveBindings({ agentId: input.agentId, repoId: input.repoId });
+  for (const binding of bindings) {
+    registerVolatileSecret(binding.value, binding.configKey);
+  }
+  return bindings;
+}
+
 // src/scripts-runtime/executors/types.ts
 var DEFAULT_SCRIPT_RESOURCES = {
   memoryMb: 512,
@@ -1851,22 +1873,9 @@ var DEFAULT_SCRIPT_RESOURCES = {
 init_secret_scrubber();
 
 // src/scripts-runtime/egress-secrets.ts
-var EGRESS_ALLOWLIST = {
-  GITHUB_TOKEN: ["api.github.com"]
-};
 function buildEgressSecrets() {
-  const entries = [];
-  for (const [envKey, hosts] of Object.entries(EGRESS_ALLOWLIST)) {
-    const value = process.env[envKey];
-    if (!value)
-      continue;
-    entries.push({
-      placeholder: `[REDACTED:${envKey}]`,
-      hosts,
-      value
-    });
-  }
-  return entries;
+  const broker = new CredentialBroker({ listActiveBindings: () => [] }, (configKey) => process.env[configKey], DEFAULT_CREDENTIAL_BINDINGS);
+  return broker.resolveBindings({});
 }
 
 // src/scripts-runtime/executors/native.ts
@@ -2114,7 +2123,8 @@ function buildConfigPayload(input) {
       }
     },
     user: input.userConfig ?? {},
-    egressSecrets: buildEgressSecrets()
+    egressSecrets: input.egressSecrets ?? buildEgressSecrets(),
+    apiConnections: input.apiConnections ?? []
   };
 }
 async function runScript(input) {
@@ -2210,6 +2220,7 @@ class SwarmScriptExecutor extends BaseExecutor {
       args: config.args,
       fsMode: "none",
       agentId: agentId ?? "workflow",
+      egressSecrets: buildScriptCredentialBindings({ agentId: agentId ?? undefined }),
       timeoutMs: config.timeoutMs
     });
     const workflowOutput = {
@@ -2545,7 +2556,6 @@ function createExecutorRegistry(deps) {
 }
 
 // src/workflows/index.ts
-init_template();
 var _registry = null;
 function getExecutorRegistry() {
   if (!_registry) {
@@ -2568,4 +2578,4 @@ function initWorkflows() {
   initWaitBusSubscriptions(_registry);
 }
 
-export { setupWorkflowResumeListener, retryFailedRun, cancelWorkflowRun, resumeWaitState, initWaitBusSubscriptions, subscribeWaitToBus, recoverIncompleteRuns, startRetryPoller, stopRetryPoller, validateTemplateVariables, instantiateTemplate, snapshotWorkflow, startWaitPoller, stopWaitPoller, RawLlmConfigSchema, executeRawLlm, runScript, getExecutorRegistry, initWorkflows };
+export { setupWorkflowResumeListener, retryFailedRun, cancelWorkflowRun, resumeWaitState, initWaitBusSubscriptions, subscribeWaitToBus, recoverIncompleteRuns, startRetryPoller, stopRetryPoller, validateTemplateVariables, instantiateTemplate, snapshotWorkflow, startWaitPoller, stopWaitPoller, RawLlmConfigSchema, executeRawLlm, buildScriptCredentialBindings, runScript, getExecutorRegistry, initWorkflows };

package/dist/{cli-2aaa9mqr.js → cli-5pf0b84v.js}

@@ -4,11 +4,11 @@ import {
   getEmbeddingProvider,
   init_embedding,
   serializeEmbedding
-} from "./cli-k81y1cjb.js";
+} from "./cli-p4cj4vhc.js";
 import {
   getDb,
   init_db
-} from "./cli-d0t4854c.js";
+} from "./cli-0jw6j755.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-stqqf5kh.js → cli-7v4y3hyd.js}

@@ -1,7 +1,7 @@
 import {
   getDb,
   init_db
-} from "./cli-d0t4854c.js";
+} from "./cli-0jw6j755.js";
 
 // src/be/seed-pricing.ts
 init_db();

package/dist/{cli-7xdq3jg3.js → cli-92fqyjcv.js}

@@ -1,6 +1,6 @@
 import {
   checkToolLoop
-} from "./cli-g5px3d7x.js";
+} from "./cli-2957pqpj.js";
 
 // src/providers/swarm-events-shared.ts
 var CANCELLATION_THROTTLE_MS = 500;

package/dist/{cli-g861fwjp.js → cli-d4z1csms.js}

@@ -4,11 +4,11 @@ import {
   getNextResumeGeneration,
   getResumeGeneration,
   repointTrackerSyncBySwarmId
-} from "./cli-k1ghyj8b.js";
+} from "./cli-s42f54ja.js";
 import {
   getExecutorRegistry,
   recoverIncompleteRuns
-} from "./cli-zk4gn40w.js";
+} from "./cli-54h5daha.js";
 import {
   assignUnassignedTaskPending,
   backfillSupersedeTaskResumeTaskId,
@@ -43,7 +43,7 @@ import {
   resolveTemplate,
   supersedeTask,
   updateAgentStatus
-} from "./cli-d0t4854c.js";
+} from "./cli-0jw6j755.js";
 
 // src/heartbeat/heartbeat.ts
 init_db();
@@ -347,6 +347,18 @@ function remediateCrashedWorkerTask(findings, task, opts) {
   if (remaining === 0)
     updateAgentStatus(task.agentId, "idle");
 }
+function getBootEpochMs() {
+  const gs = globalThis;
+  const runId = gs.__runId;
+  if (!runId || typeof runId !== "string")
+    return null;
+  const match = runId.match(/^run_(\d+)$/);
+  if (!match)
+    return null;
+  const epoch = Number(match[1]);
+  return Number.isFinite(epoch) ? epoch : null;
+}
+var BOOT_EPOCH_SKEW_MS = 5000;
 async function runRebootSweep() {
   if (isSweeping) {
     console.log("[Heartbeat] Reboot sweep skipped — another sweep is running");
@@ -361,14 +373,27 @@ async function runRebootSweep() {
       return;
     }
     const reason = "Auto-failed by reboot sweep: worker session not found after server restart";
+    const bootEpoch = getBootEpochMs();
+    if (bootEpoch === null) {
+      console.warn("[Heartbeat] Reboot sweep: could not parse boot epoch from __runId — falling back to legacy session-exists check");
+    }
     for (const task of allInProgress) {
       if (!task.agentId) {
         console.warn(`[Heartbeat] Reboot sweep: skipping task ${task.id} — in_progress with no agentId`);
         continue;
       }
       const session = getActiveSessionForTask(task.id);
+      if (session) {
+        if (bootEpoch === null) {
+          continue;
+        }
+        const sessionLastSeen = new Date(session.lastHeartbeatAt).getTime();
+        if (sessionLastSeen >= bootEpoch - BOOT_EPOCH_SKEW_MS) {
+          continue;
+        }
+      }
       if (session)
-        continue;
+        deleteActiveSession(task.id);
       const failed = failTask(task.id, reason);
       if (!failed)
         continue;
@@ -850,4 +875,4 @@ function stopHeartbeatChecklist() {
     console.log("[Heartbeat] Checklist stopped");
   }
 }
-export { runRebootSweep, getRebootAffectedTasks, checkHeartbeatChecklist, runHeartbeatSweep, startHeartbeat, stopHeartbeat };
+export { getBootEpochMs, runRebootSweep, getRebootAffectedTasks, checkHeartbeatChecklist, runHeartbeatSweep, startHeartbeat, stopHeartbeat };

package/dist/{cli-r68m8arr.js → cli-e7bwjntj.js}

@@ -3,7 +3,7 @@ import {
   getAgentById,
   getInProgressTasksByContextKey,
   init_db
-} from "./cli-d0t4854c.js";
+} from "./cli-0jw6j755.js";
 
 // src/tasks/context-key.ts
 var SEPARATOR = ":";

package/dist/{cli-q6jzg6wj.js → cli-etvgz5x8.js}

@@ -1,20 +1,18 @@
 import {
-  createAdditiveBuffer
-} from "./cli-zctkpdmd.js";
-import {
+  createAdditiveBuffer,
   extractSlackMessageText
-} from "./cli-2deg0cen.js";
+} from "./cli-nzc0h54v.js";
 import {
   getSlackApp,
   registerTreeMessage
-} from "./cli-sygq3fhn.js";
+} from "./cli-zaxksbgj.js";
 import {
   buildBufferFlushBlocks
 } from "./cli-z92pkwzn.js";
 import {
   createTaskWithSiblingAwareness,
   slackContextKey
-} from "./cli-r68m8arr.js";
+} from "./cli-e7bwjntj.js";
 import {
   getLatestActiveTaskInThread,
   getLeadAgent,
@@ -22,7 +20,7 @@ import {
   init_db,
   init_registry,
   registerTemplate
-} from "./cli-d0t4854c.js";
+} from "./cli-0jw6j755.js";
 
 // src/slack/event-dedup.ts
 var DEFAULT_TTL_MS = 300000;

package/dist/{cli-9qascwj7.js → cli-gj2n2ec1.js}

@@ -3,7 +3,7 @@ import {
   incrKv,
   init_db,
   upsertKv
-} from "./cli-d0t4854c.js";
+} from "./cli-0jw6j755.js";
 
 // src/be/unmapped-identities.ts
 init_db();

package/dist/{cli-axtg1zaa.js → cli-khe4x17a.js}

@@ -7,7 +7,7 @@ import {
 } from "./cli-4wmnp8q3.js";
 import {
   createSwarmEventHandler
-} from "./cli-7xdq3jg3.js";
+} from "./cli-92fqyjcv.js";
 import {
   resolveCodexPrompt
 } from "./cli-r94z9p1z.js";

package/dist/{cli-zctkpdmd.js → cli-nzc0h54v.js}

@@ -3,7 +3,7 @@ import {
   getAgentWorkingOnThread,
   getAllAgents,
   init_db
-} from "./cli-d0t4854c.js";
+} from "./cli-0jw6j755.js";
 
 // src/slack/router.ts
 init_db();
@@ -63,6 +63,125 @@ function extractTaskFromMessage(text, botUserId) {
   return text.replace(new RegExp(`<@${botUserId}>`, "g"), "").replace(/swarm#[a-f0-9-]{36}/gi, "").replace(/swarm#all/gi, "").trim();
 }
 
+// src/slack/message-text.ts
+function collectRichTextParts(node, parts) {
+  if (node == null || typeof node !== "object")
+    return;
+  const n = node;
+  if (n.type === "text" && n.text) {
+    parts.push(n.text);
+  }
+  if (Array.isArray(n.elements)) {
+    for (const child of n.elements) {
+      collectRichTextParts(child, parts);
+    }
+  }
+}
+function extractSlackMessageText(msg) {
+  const topText = msg.text?.trim() ?? "";
+  const attachmentParts = [];
+  if (Array.isArray(msg.attachments) && msg.attachments.length > 0) {
+    for (const raw of msg.attachments) {
+      if (raw == null || typeof raw !== "object")
+        continue;
+      const a = raw;
+      const attParts = [];
+      const titleText = a.title_link && a.title ? `<${a.title_link}|${a.title}>` : a.title;
+      const seenPrimary = new Set;
+      for (const part of [a.pretext, titleText, a.text, a.fallback]) {
+        const s = part?.trim();
+        if (s && !seenPrimary.has(s)) {
+          seenPrimary.add(s);
+          attParts.push(s);
+        }
+      }
+      if (Array.isArray(a.fields)) {
+        for (const field of a.fields) {
+          if (field == null || typeof field !== "object")
+            continue;
+          const f = field;
+          if (f.title && f.value)
+            attParts.push(`${f.title}: ${f.value}`);
+          else if (f.title)
+            attParts.push(f.title);
+          else if (f.value)
+            attParts.push(f.value);
+        }
+      }
+      if (Array.isArray(a.actions)) {
+        for (const action of a.actions) {
+          if (action == null || typeof action !== "object")
+            continue;
+          const act = action;
+          if (act.url) {
+            attParts.push(act.text ? `<${act.url}|${act.text}>` : act.url);
+          }
+        }
+      }
+      if (attParts.length > 0)
+        attachmentParts.push(attParts.join(`
+`));
+    }
+  }
+  const blockParts = [];
+  if (Array.isArray(msg.blocks) && msg.blocks.length > 0) {
+    for (const rawBlock of msg.blocks) {
+      if (rawBlock == null || typeof rawBlock !== "object")
+        continue;
+      const block = rawBlock;
+      if (block.type === "section") {
+        if (block.text?.text)
+          blockParts.push(block.text.text);
+        if (Array.isArray(block.fields)) {
+          for (const field of block.fields) {
+            if (field != null && typeof field === "object" && field.text) {
+              blockParts.push(field.text);
+            }
+          }
+        }
+      } else if (block.type === "rich_text" && Array.isArray(block.elements)) {
+        for (const el of block.elements) {
+          collectRichTextParts(el, blockParts);
+        }
+      } else if (block.type === "header") {
+        if (block.text?.text)
+          blockParts.push(block.text.text);
+      } else if (block.type === "context" && Array.isArray(block.elements)) {
+        for (const el of block.elements) {
+          if (el == null || typeof el !== "object")
+            continue;
+          const e = el;
+          if (e.text)
+            blockParts.push(e.text);
+        }
+      } else if (block.type === "actions" && Array.isArray(block.elements)) {
+        for (const el of block.elements) {
+          if (el == null || typeof el !== "object")
+            continue;
+          const e = el;
+          const label = e.text?.text;
+          const url = e.url;
+          if (label && url)
+            blockParts.push(`<${url}|${label}>`);
+          else if (label)
+            blockParts.push(label);
+          else if (url)
+            blockParts.push(url);
+        }
+      }
+    }
+  }
+  const bodyText = [...attachmentParts, ...blockParts].filter(Boolean).join(`
+`);
+  const bodyLines = new Set(bodyText.split(`
+`).map((l) => l.trim()).filter(Boolean));
+  if (topText && !bodyLines.has(topText)) {
+    return bodyText ? `${topText}
+${bodyText}` : topText;
+  }
+  return bodyText || topText;
+}
+
 // src/tasks/additive-buffer.ts
 function createAdditiveBuffer(options) {
   const { timeoutMs, onFlush, label } = options;
@@ -133,4 +252,4 @@ function createAdditiveBuffer(options) {
   };
 }
 
-export { hasOtherUserMention, routeMessage, extractTaskFromMessage, createAdditiveBuffer };
+export { hasOtherUserMention, routeMessage, extractTaskFromMessage, extractSlackMessageText, createAdditiveBuffer };