@desplega.ai/agent-swarm 1.110.0 → 1.111.0

package/README.md

@@ -123,7 +123,7 @@ Check [our templates](https://templates.agent-swarm.dev) for a quick start.
 
 - **Lead/worker orchestration in Docker** — isolated dev environments, priority queues, pause/resume across deploys. [Architecture →](https://docs.agent-swarm.dev/docs/architecture/overview)
 - **Compounding memory & persistent identity** — agents remember past sessions and evolve their own persona, expertise, and notes. [Memory →](https://docs.agent-swarm.dev/docs/architecture/memory) · [Agents →](https://docs.agent-swarm.dev/docs/architecture/agents)
-- **Hybrid memory recall + in-place edits** — memory retrieval can blend vector and full-text ranking, and agents can correct an existing memory without losing its ID or history. [Memory →](https://docs.agent-swarm.dev/docs/architecture/memory) · [MCP tools →](https://docs.agent-swarm.dev/docs/reference/mcp-tools#memory-tools)
+- **Hybrid + graph-linked memory recall** — memory retrieval can blend vector and full-text ranking, expand through linked memories, surface usefulness readouts, and let agents correct an existing memory without losing its ID or history. [Memory →](https://docs.agent-swarm.dev/docs/architecture/memory) · [MCP tools →](https://docs.agent-swarm.dev/docs/reference/mcp-tools#memory-tools)
 - **Multi-channel inputs** — Slack, GitHub, GitLab, email, WhatsApp, Linear, Jira, and the HTTP API all create tasks. [Integrations](#integrations)
 - **Workflow engine with Human-in-the-Loop** — DAG-based automation with approval gates, retries, and structured I/O. [Workflows →](https://docs.agent-swarm.dev/docs/concepts/workflows)
 - **Scheduled & recurring tasks** — cron-based automation for standing work, with schedules that can target agent tasks, workflows, or catalog scripts. [Scheduling →](https://docs.agent-swarm.dev/docs/concepts/scheduling)

package/dist/{actions-837ktebk.js → actions-a4crgvtd.js}

@@ -1,8 +1,8 @@
 import {
   resolveSlackUserId
-} from "./cli-8s0swp2t.js";
-import"./cli-dhph6q98.js";
-import"./cli-gb7dqnna.js";
+} from "./cli-jrmjxsnk.js";
+import"./cli-2b0ew5v8.js";
+import"./cli-0d404x64.js";
 import {
   buildCancelledBlocks,
   getTaskLink
@@ -11,7 +11,7 @@ import"./cli-wspgs9bt.js";
 import {
   createTaskWithSiblingAwareness,
   slackContextKey
-} from "./cli-8ps5wsk9.js";
+} from "./cli-aqr96mny.js";
 import"./cli-dh55d5fg.js";
 import {
   cancelTask,
@@ -19,11 +19,11 @@ import {
   getLeadAgent,
   getTaskById,
   init_db
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 import"./cli-z2zcxes1.js";
 import"./cli-q21d49ac.js";
 import"./cli-anrj584m.js";
-import"./cli-kg9v8h1w.js";
+import"./cli-kavm2cv5.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 

package/dist/{app-85h97pg2.js → app-va5mr9yw.js}

@@ -3,17 +3,17 @@ import {
   initSlackApp,
   startSlackApp,
   stopSlackApp
-} from "./cli-4trfcacj.js";
+} from "./cli-f1f82qgv.js";
 import"./cli-rkndnn90.js";
 import"./cli-b0p7rfnd.js";
 import"./cli-6xd0bvf8.js";
 import"./cli-wspgs9bt.js";
 import"./cli-dh55d5fg.js";
-import"./cli-d8vmtyyr.js";
+import"./cli-4ke1amr9.js";
 import"./cli-z2zcxes1.js";
 import"./cli-q21d49ac.js";
 import"./cli-anrj584m.js";
-import"./cli-kg9v8h1w.js";
+import"./cli-kavm2cv5.js";
 import"./cli-4j2mrzag.js";
 import"./cli-e15jhafb.js";
 import"./cli-7wmybrt5.js";

package/dist/{assistant-yhrta0c5.js → assistant-0jm4vy8r.js}

@@ -1,26 +1,26 @@
 import {
   bufferThreadMessage,
   wasEventSeen
-} from "./cli-r19ttke3.js";
+} from "./cli-y7v6e7yr.js";
 import {
   hasOtherUserMention
-} from "./cli-g44ffxk5.js";
+} from "./cli-xqzvygxp.js";
 import {
   require_dist
-} from "./cli-4trfcacj.js";
+} from "./cli-f1f82qgv.js";
 import"./cli-rkndnn90.js";
 import"./cli-b0p7rfnd.js";
 import {
   resolveSlackUserId
-} from "./cli-8s0swp2t.js";
-import"./cli-dhph6q98.js";
-import"./cli-gb7dqnna.js";
+} from "./cli-jrmjxsnk.js";
+import"./cli-2b0ew5v8.js";
+import"./cli-0d404x64.js";
 import"./cli-6xd0bvf8.js";
 import"./cli-wspgs9bt.js";
 import {
   createTaskWithSiblingAwareness,
   slackContextKey
-} from "./cli-8ps5wsk9.js";
+} from "./cli-aqr96mny.js";
 import"./cli-dh55d5fg.js";
 import {
   getAgentWorkingOnThread,
@@ -29,11 +29,11 @@ import {
   init_db,
   init_resolver,
   resolveTemplate
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 import"./cli-z2zcxes1.js";
 import"./cli-q21d49ac.js";
 import"./cli-anrj584m.js";
-import"./cli-kg9v8h1w.js";
+import"./cli-kavm2cv5.js";
 import"./cli-4j2mrzag.js";
 import"./cli-e15jhafb.js";
 import"./cli-7wmybrt5.js";

package/dist/{boot-reembed-8xmfv2pq.js → boot-reembed-0t815mmm.js}

@@ -3,16 +3,16 @@ import {
   getEmbeddingProvider,
   getMemoryStore,
   init_constants
-} from "./cli-5kav4x1a.js";
+} from "./cli-0d5xddf1.js";
 import"./cli-q25ejbyn.js";
 import {
   getDb,
   init_db
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 import"./cli-z2zcxes1.js";
 import"./cli-q21d49ac.js";
 import"./cli-anrj584m.js";
-import"./cli-kg9v8h1w.js";
+import"./cli-kavm2cv5.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 

package/dist/{boot-reembed-5sd1t9r4.js → boot-reembed-50zzk97q.js}

@@ -1,17 +1,17 @@
 import {
   embedScript,
   embeddingProvider
-} from "./cli-dy01kwxk.js";
-import"./cli-5kav4x1a.js";
+} from "./cli-h3vhr1gj.js";
+import"./cli-0d5xddf1.js";
 import"./cli-q25ejbyn.js";
 import {
   getDb,
   init_db
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 import"./cli-z2zcxes1.js";
 import"./cli-q21d49ac.js";
 import"./cli-anrj584m.js";
-import"./cli-kg9v8h1w.js";
+import"./cli-kavm2cv5.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 

package/dist/{boot-scrub-logs-fdw8wbtq.js → boot-scrub-logs-r99nbmxh.js}

@@ -1,11 +1,11 @@
 import {
   getDb,
   init_db
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 import"./cli-z2zcxes1.js";
 import"./cli-q21d49ac.js";
 import"./cli-anrj584m.js";
-import"./cli-kg9v8h1w.js";
+import"./cli-kavm2cv5.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{claude-managed-setup-yhbcx0bz.js → claude-managed-setup-cm05wtek.js}

@@ -1,4 +1,4 @@
-import"./cli-amncg1dq.js";
+import"./cli-tk9vyqzh.js";
 import {
   Anthropic,
   BadRequestError,

package/dist/{cli-gb7dqnna.js → cli-0d404x64.js}

@@ -1,7 +1,7 @@
 import {
   getDb,
   init_db
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 
 // src/be/users.ts
 init_db();

package/dist/{cli-5kav4x1a.js → cli-0d5xddf1.js}

@@ -6,7 +6,7 @@ import {
   getDb,
   init_db,
   isSqliteVecAvailable
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 import {
   __esm,
   __export,
@@ -25,6 +25,10 @@ function isHybridSearchEnabled() {
   const val = process.env.MEMORY_HYBRID_SEARCH ?? "0";
   return val === "1" || val.toLowerCase() === "true";
 }
+function isGraphExpansionEnabled() {
+  const val = process.env.MEMORY_GRAPH_EXPANSION ?? "0";
+  return val === "1" || val.toLowerCase() === "true";
+}
 var TTL_DEFAULTS, GLOBAL_HALF_LIFE_OVERRIDE, GLOBAL_HALF_LIFE, RECENCY_DECAY_HALF_LIFE, RECENCY_DECAY_HALF_LIFE_DAYS, SOURCE_QUALITY_MULTIPLIER, MIN_SIMILARITY, ACCESS_BOOST_MAX_MULTIPLIER, ACCESS_BOOST_RECENCY_WINDOW_HOURS, CANDIDATE_SET_MULTIPLIER, EMBEDDING_DIMENSIONS, DEFAULT_EMBEDDING_MODEL = "openai/text-embedding-3-small", PROTECTED_SOURCES;
 var init_constants = __esm(() => {
   TTL_DEFAULTS = {
@@ -6599,6 +6603,7 @@ var init_reranker = __esm(() => {
 // src/be/memory/providers/sqlite-store.ts
 var exports_sqlite_store = {};
 __export(exports_sqlite_store, {
+  rowToCandidate: () => rowToCandidate,
   computeRrfScore: () => computeRrfScore,
   applyEditMode: () => applyEditMode,
   SqliteMemoryStore: () => SqliteMemoryStore
@@ -7362,4 +7367,4 @@ function getMemoryStore() {
   return memoryStore;
 }
 
-export { CANDIDATE_SET_MULTIPLIER, EMBEDDING_DIMENSIONS, init_constants, cosineSimilarity, serializeEmbedding, deserializeEmbedding, init_embedding, rerank, init_reranker, getEmbeddingProvider, getMemoryStore };
+export { CANDIDATE_SET_MULTIPLIER, isGraphExpansionEnabled, EMBEDDING_DIMENSIONS, init_constants, cosineSimilarity, serializeEmbedding, deserializeEmbedding, init_embedding, computeScore, rerank, init_reranker, rowToCandidate, init_sqlite_store, getEmbeddingProvider, getMemoryStore };

package/dist/{cli-3t97r3y1.js → cli-1aqc46he.js}

@@ -9,11 +9,11 @@ import {
   getScriptVersion,
   listRelationalCredentialBindings,
   validateScriptImports
-} from "./cli-2h86bsfe.js";
+} from "./cli-4f6vw5vy.js";
 import {
   withSiblingAwareness,
   workflowContextKey
-} from "./cli-8ps5wsk9.js";
+} from "./cli-aqr96mny.js";
 import {
   getAppUrl
 } from "./cli-dh55d5fg.js";
@@ -62,7 +62,7 @@ import {
   telemetry,
   updateWorkflowRun,
   updateWorkflowRunStep
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 import {
   init_zod
 } from "./cli-q21d49ac.js";
@@ -2515,7 +2515,7 @@ class HumanInTheLoopExecutor extends BaseExecutor {
       }
       if (notification.channel === "slack") {
         try {
-          const { getSlackApp } = await import("./app-85h97pg2.js");
+          const { getSlackApp } = await import("./app-va5mr9yw.js");
           const slackApp = getSlackApp();
           if (!slackApp) {
             console.warn("[HITL] Slack not initialized — cannot send notification");
@@ -2629,7 +2629,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp } = await import("./app-85h97pg2.js");
+        const { getSlackApp } = await import("./app-va5mr9yw.js");
         const app = getSlackApp();
         if (!app) {
           return {

package/dist/{cli-dhph6q98.js → cli-2b0ew5v8.js}

@@ -3,7 +3,7 @@ import {
   incrKv,
   init_db,
   upsertKv
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 
 // src/be/unmapped-identities.ts
 init_db();

package/dist/{cli-6ttdv68b.js → cli-3cm8ar1c.js}

@@ -3,7 +3,7 @@ import {
   init_date_utils,
   init_db,
   normalizeDateRequired
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 
 // src/be/db-queries/oauth.ts
 init_date_utils();

package/dist/{cli-2h86bsfe.js → cli-4f6vw5vy.js}

@@ -1,6 +1,6 @@
 import {
   embedScript
-} from "./cli-dy01kwxk.js";
+} from "./cli-h3vhr1gj.js";
 import {
   computeContentHash,
   decryptSecret,
@@ -10,7 +10,7 @@ import {
   getSwarmConfigs,
   init_crypto,
   init_db
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 import {
   init_zod
 } from "./cli-q21d49ac.js";

package/dist/{cli-d8vmtyyr.js → cli-4ke1amr9.js}

@@ -25,7 +25,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-kg9v8h1w.js";
+} from "./cli-kavm2cv5.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-3baz70yp.js → cli-6tfm5fr1.js}

@@ -1,7 +1,7 @@
 import {
   getDb,
   init_db
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 
 // src/be/seed-pricing.ts
 init_db();

package/dist/{cli-m3enfr8q.js → cli-6wscj9z0.js}

@@ -1,7 +1,3 @@
-import {
-  getValidCodexOAuth,
-  persistCodexOAuth
-} from "./cli-amncg1dq.js";
 import {
   appendAssistantMessageDiagnostic,
   cleanupSessionResources,
@@ -15,6 +11,10 @@ import {
   SummaryWithRatingsSchema,
   buildSummaryWithRatingsPrompt
 } from "./cli-dcfyyh3t.js";
+import {
+  getValidCodexOAuth,
+  persistCodexOAuth
+} from "./cli-tk9vyqzh.js";
 import {
   init_zod
 } from "./cli-q21d49ac.js";

package/dist/{cli-0pzg1f8z.js → cli-8j1h9627.js}

@@ -1,11 +1,6 @@
 import {
-  authJsonToCredentialSelection,
-  checkCodexCredentials,
-  credentialsToAuthJson
-} from "./cli-w6zp4qcx.js";
-import {
-  loadAllCodexOAuthSlots
-} from "./cli-amncg1dq.js";
+  checkCodexCredentials
+} from "./cli-ceewqajw.js";
 import {
   checkClaudeManagedCredentials
 } from "./cli-2r7s8jhp.js";
@@ -23,7 +18,12 @@ import {
   withSpan,
   withSpanContext,
   writeSkillsToFilesystem
-} from "./cli-kna0r84e.js";
+} from "./cli-dza5039b.js";
+import {
+  authJsonToCredentialSelection,
+  credentialsToAuthJson,
+  loadAllCodexOAuthSlots
+} from "./cli-tk9vyqzh.js";
 import {
   checkClaudeCredentials
 } from "./cli-2fc97xm5.js";
@@ -40,10 +40,10 @@ import {
 import {
   ensure,
   initialize
-} from "./cli-zw3cmjh6.js";
+} from "./cli-r3y5chyg.js";
 import {
   validateJsonSchema
-} from "./cli-3t97r3y1.js";
+} from "./cli-1aqc46he.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
@@ -79,7 +79,7 @@ import {
   resolveTaskModelSelection,
   resolveTemplateAsync,
   telemetry
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 import {
   init_credentials,
   resolveCredentialPools
@@ -445,11 +445,11 @@ async function createProviderAdapter(provider) {
       return new ClaudeAdapter;
     }
     case "pi": {
-      const { PiMonoAdapter } = await import("./pi-mono-adapter-ayr3akk8.js");
+      const { PiMonoAdapter } = await import("./pi-mono-adapter-kxjxpfgy.js");
       return new PiMonoAdapter;
     }
     case "codex": {
-      const { CodexAdapter } = await import("./codex-adapter-ebs12jef.js");
+      const { CodexAdapter } = await import("./codex-adapter-5cmy858w.js");
       return new CodexAdapter;
     }
     case "claude-managed": {
@@ -1109,7 +1109,7 @@ async function checkProviderCredentials(provider, env, opts) {
     case "opencode":
       return checkOpencodeCredentials(env, opts);
     case "pi": {
-      const { checkPiMonoCredentials } = await import("./pi-mono-adapter-ayr3akk8.js");
+      const { checkPiMonoCredentials } = await import("./pi-mono-adapter-kxjxpfgy.js");
       return checkPiMonoCredentials(env, opts);
     }
     default:

package/dist/{cli-8ps5wsk9.js → cli-aqr96mny.js}

@@ -3,7 +3,7 @@ import {
   getAgentById,
   getInProgressTasksByContextKey,
   init_db
-} from "./cli-d8vmtyyr.js";
+} from "./cli-4ke1amr9.js";
 
 // src/tasks/context-key.ts
 var SEPARATOR = ":";

package/dist/{cli-w6zp4qcx.js → cli-ceewqajw.js}

@@ -1,10 +1,6 @@
 import {
   summarizeSession
-} from "./cli-m3enfr8q.js";
-import {
-  extractChatgptUserId,
-  getValidCodexOAuth
-} from "./cli-amncg1dq.js";
+} from "./cli-6wscj9z0.js";
 import {
   createSwarmEventHandler
 } from "./cli-07er7wrs.js";
@@ -19,6 +15,11 @@ import {
   fetchRetrievalsForTask,
   postRatings
 } from "./cli-dcfyyh3t.js";
+import {
+  CodexOAuthRefreshError,
+  credentialsToAuthJson,
+  getValidCodexOAuth
+} from "./cli-tk9vyqzh.js";
 import {
   SessionErrorTracker,
   buildOtelTraceparentEnv
@@ -687,37 +688,6 @@ function computeCodexCostUsd(model, inputTokens, cachedInputTokens, outputTokens
   return inputCost + cachedCost + outputCost;
 }
 
-// src/providers/codex-oauth/auth-json.ts
-function authJsonToCredentialSelection(auth, slot = 0, total = 1) {
-  const userId = extractChatgptUserId(auth.tokens.access_token);
-  const suffixSource = userId ?? auth.tokens.account_id;
-  if (!userId) {
-    console.warn("[codex-oauth] No chatgpt_user_id in JWT — falling back to account_id for keySuffix derivation. " + "If two slots share an account, their suffixes will collide.");
-  }
-  return {
-    selected: auth.tokens.account_id,
-    index: slot,
-    total,
-    keySuffix: suffixSource.slice(-5),
-    keyType: "CODEX_OAUTH",
-    isRateLimitFallback: false
-  };
-}
-function credentialsToAuthJson(creds, opts = {}) {
-  const includeRefreshToken = opts.includeRefreshToken ?? true;
-  return {
-    auth_mode: "chatgpt",
-    OPENAI_API_KEY: null,
-    tokens: {
-      id_token: creds.access,
-      access_token: creds.access,
-      refresh_token: includeRefreshToken ? creds.refresh : "",
-      account_id: creds.accountId
-    },
-    last_refresh: new Date(creds.expires).toISOString()
-  };
-}
-
 // src/providers/codex-swarm-events.ts
 function createCodexSwarmEventHandler(opts) {
   return createSwarmEventHandler({
@@ -778,7 +748,23 @@ async function resolveCodexAuthMode(config, emit, deps = {}) {
   const slot = config.codexSlot ?? 0;
   const isPoolSlot = config.codexSlot !== undefined;
   if (config.apiUrl && config.apiKey && (currentMode !== "chatgpt" || isPoolSlot)) {
-    const oauthCreds = await getValidCodexOAuth(config.apiUrl, config.apiKey, slot);
+    let oauthCreds = null;
+    try {
+      oauthCreds = await getValidCodexOAuth(config.apiUrl, config.apiKey, slot);
+    } catch (err) {
+      if (isPoolSlot) {
+        throw new Error(buildPoolRevalidationFailureReason(err, slot));
+      }
+      const message = err instanceof Error ? err.message : String(err);
+      emit({
+        type: "raw_stderr",
+        content: `[codex] OAuth revalidation failed (non-fatal, non-pool auth): ${message}
+`
+      });
+    }
+    if (!oauthCreds && isPoolSlot) {
+      throw new Error(`[auth-error] Codex pool slot ${slot} revalidation failed: no credentials found in config store — the slot may have just been quarantined; re-run codex-login for this slot if this persists.`);
+    }
     if (oauthCreds) {
       try {
         const authJson = credentialsToAuthJson(oauthCreds, {
@@ -805,6 +791,16 @@ async function resolveCodexAuthMode(config, emit, deps = {}) {
   }
   return currentMode;
 }
+function buildPoolRevalidationFailureReason(err, slot) {
+  if (err instanceof CodexOAuthRefreshError) {
+    if (err.reason === "lock_timeout") {
+      return `[auth-error] Codex pool slot ${slot} [...${err.keySuffix}] revalidation failed: timed out waiting for the refresh lock — transient, will retry on next task.`;
+    }
+    return `[auth-error] Codex pool slot ${slot} [...${err.keySuffix}] revalidation failed: refresh rejected (${err.status ?? "unknown status"} ${err.body ?? ""}) — credential likely revoked; re-run codex-login for this slot.`;
+  }
+  const message = err instanceof Error ? err.message : String(err);
+  return `[auth-error] Codex pool slot ${slot} revalidation failed: ${message}`;
+}
 async function buildCodexConfig(config, model, emit) {
   const mcpServers = {};
   mcpServers["agent-swarm"] = {
@@ -1260,7 +1256,9 @@ class CodexSession {
       "invalid_api_key",
       "missing api key",
       "no api key",
-      "authentication failed"
+      "authentication failed",
+      "failed to refresh token",
+      "invalid 'refresh_token'"
     ];
     if (authPatterns.some((p) => normalized.includes(p))) {
       return {
@@ -1697,4 +1695,4 @@ class CodexAdapter {
   }
 }
 
-export { authJsonToCredentialSelection, credentialsToAuthJson, checkCodexCredentials, resolveCodexAuthMode, buildCodexConfig, CodexSession, createInProcessCodexSession, resolveCodexRunnerArgv, CodexAdapter };
+export { checkCodexCredentials, resolveCodexAuthMode, buildCodexConfig, CodexSession, createInProcessCodexSession, resolveCodexRunnerArgv, CodexAdapter };