@desplega.ai/agent-swarm 1.110.0 → 1.112.0

package/dist/{cli-3t97r3y1.js → cli-tg0f2wmz.js}

@@ -9,11 +9,11 @@ import {
   getScriptVersion,
   listRelationalCredentialBindings,
   validateScriptImports
-} from "./cli-2h86bsfe.js";
+} from "./cli-3r5y6ayj.js";
 import {
   withSiblingAwareness,
   workflowContextKey
-} from "./cli-8ps5wsk9.js";
+} from "./cli-0c3n0eba.js";
 import {
   getAppUrl
 } from "./cli-dh55d5fg.js";
@@ -62,7 +62,7 @@ import {
   telemetry,
   updateWorkflowRun,
   updateWorkflowRunStep
-} from "./cli-d8vmtyyr.js";
+} from "./cli-951w7c79.js";
 import {
   init_zod
 } from "./cli-q21d49ac.js";
@@ -2515,7 +2515,7 @@ class HumanInTheLoopExecutor extends BaseExecutor {
       }
       if (notification.channel === "slack") {
         try {
-          const { getSlackApp } = await import("./app-85h97pg2.js");
+          const { getSlackApp } = await import("./app-b05sgm02.js");
           const slackApp = getSlackApp();
           if (!slackApp) {
             console.warn("[HITL] Slack not initialized — cannot send notification");
@@ -2629,7 +2629,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp } = await import("./app-85h97pg2.js");
+        const { getSlackApp } = await import("./app-b05sgm02.js");
         const app = getSlackApp();
         if (!app) {
           return {

package/dist/{cli-amncg1dq.js → cli-tk9vyqzh.js}

@@ -124,7 +124,7 @@ async function refreshAccessToken(refreshToken) {
     if (!response.ok) {
       const text = await response.text().catch(() => "");
       console.error("[codex-oauth] Token refresh failed:", response.status, text);
-      return { type: "failed" };
+      return { type: "failed", status: response.status, error: text.slice(0, 300) };
     }
     const json = await response.json();
     if (!json.access_token || !json.refresh_token || typeof json.expires_in !== "number") {
@@ -317,18 +317,74 @@ async function loginCodexOAuth(callbacks) {
   }
 }
 
+// src/providers/codex-oauth/auth-json.ts
+function deriveCodexKeySuffix(accessToken, accountId) {
+  const userId = extractChatgptUserId(accessToken);
+  const suffixSource = userId ?? accountId;
+  if (!userId) {
+    console.warn("[codex-oauth] No chatgpt_user_id in JWT — falling back to account_id for keySuffix derivation. " + "If two slots share an account, their suffixes will collide.");
+  }
+  return suffixSource.slice(-5);
+}
+function authJsonToCredentialSelection(auth, slot = 0, total = 1) {
+  return {
+    selected: auth.tokens.account_id,
+    index: slot,
+    total,
+    keySuffix: deriveCodexKeySuffix(auth.tokens.access_token, auth.tokens.account_id),
+    keyType: "CODEX_OAUTH",
+    isRateLimitFallback: false
+  };
+}
+function credentialsToAuthJson(creds, opts = {}) {
+  const includeRefreshToken = opts.includeRefreshToken ?? true;
+  return {
+    auth_mode: "chatgpt",
+    OPENAI_API_KEY: null,
+    tokens: {
+      id_token: creds.access,
+      access_token: creds.access,
+      refresh_token: includeRefreshToken ? creds.refresh : "",
+      account_id: creds.accountId
+    },
+    last_refresh: new Date(creds.expires).toISOString()
+  };
+}
+
 // src/providers/codex-oauth/storage.ts
 var CODEX_OAUTH_KEY_LEGACY = "codex_oauth";
 var REFRESH_LOCK_TTL_MS = 2 * 60 * 1000;
 var REFRESH_LOCK_WAIT_MS = 30 * 1000;
 var REFRESH_LOCK_POLL_MS = 250;
-var REFRESH_SKEW_MS = 5 * 60 * 1000;
+var REFRESH_SKEW_MS = 12 * 60 * 60 * 1000;
+var ACCESS_TOKEN_TTL_MS = 10 * 24 * 60 * 60 * 1000;
 function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
 function isExpiringSoon(expires) {
   return Date.now() >= expires - REFRESH_SKEW_MS;
 }
+function isStaleByAge(expires, maxAgeMs) {
+  const issuedAt = expires - ACCESS_TOKEN_TTL_MS;
+  return Date.now() - issuedAt > maxAgeMs;
+}
+
+class CodexOAuthRefreshError extends Error {
+  slot;
+  reason;
+  keySuffix;
+  status;
+  body;
+  constructor(slot, reason, keySuffix, status, body) {
+    super(reason === "lock_timeout" ? `[codex-oauth] slot ${slot} [...${keySuffix}] timed out waiting for refresh lock` : `[codex-oauth] slot ${slot} [...${keySuffix}] refresh rejected (${status ?? "unknown status"} ${body ?? ""})`.trim());
+    this.slot = slot;
+    this.reason = reason;
+    this.keySuffix = keySuffix;
+    this.status = status;
+    this.body = body;
+    this.name = "CodexOAuthRefreshError";
+  }
+}
 async function acquireCodexRefreshLock(apiUrl, apiKey, slot) {
   const key = codexOAuthKeyForSlot(slot);
   const res = await fetch(`${apiUrl}/api/oauth/refresh-locks/${encodeURIComponent(key)}`, {
@@ -462,24 +518,25 @@ async function persistCodexOAuth(apiUrl, apiKey, creds, slot = 0) {
     console.error("[codex-oauth] persistCodexOAuth failed (non-fatal):", err);
   }
 }
-async function getValidCodexOAuth(apiUrl, apiKey, slot = 0) {
+async function getValidCodexOAuth(apiUrl, apiKey, slot = 0, opts) {
+  const needsRefresh = (c) => isExpiringSoon(c.expires) || opts?.maxAgeMs !== undefined && isStaleByAge(c.expires, opts.maxAgeMs);
   let creds = await loadCodexOAuth(apiUrl, apiKey, slot);
   if (!creds)
     return null;
-  if (!isExpiringSoon(creds.expires))
+  if (!needsRefresh(creds))
     return creds;
   const waitStartedAt = Date.now();
   for (;; ) {
     creds = await loadCodexOAuth(apiUrl, apiKey, slot);
     if (!creds)
       return null;
-    if (!isExpiringSoon(creds.expires))
+    if (!needsRefresh(creds))
       return creds;
     const owner = await acquireCodexRefreshLock(apiUrl, apiKey, slot);
     if (!owner) {
       if (Date.now() - waitStartedAt > REFRESH_LOCK_WAIT_MS) {
         console.error(`[codex-oauth] Timed out waiting for slot ${slot} refresh lock`);
-        return null;
+        throw new CodexOAuthRefreshError(slot, "lock_timeout", deriveCodexKeySuffix(creds.access, creds.accountId));
       }
       await sleep(REFRESH_LOCK_POLL_MS);
       continue;
@@ -488,13 +545,13 @@ async function getValidCodexOAuth(apiUrl, apiKey, slot = 0) {
       const lockedCreds = await loadCodexOAuth(apiUrl, apiKey, slot);
       if (!lockedCreds)
         return null;
-      if (!isExpiringSoon(lockedCreds.expires))
+      if (!needsRefresh(lockedCreds))
         return lockedCreds;
       console.log("[codex-oauth] Token expired or expiring soon, refreshing...");
       const result = await refreshAccessToken(lockedCreds.refresh);
       if (result.type !== "success") {
         console.error("[codex-oauth] Token refresh failed");
-        return null;
+        throw new CodexOAuthRefreshError(slot, "refresh_rejected", deriveCodexKeySuffix(lockedCreds.access, lockedCreds.accountId), result.status, result.error);
       }
       const refreshed = {
         access: result.access,
@@ -517,4 +574,4 @@ async function getValidCodexOAuth(apiUrl, apiKey, slot = 0) {
   }
 }
 
-export { extractChatgptUserId, loginCodexOAuth, loadAllCodexOAuthSlots, storeCodexOAuth, persistCodexOAuth, getValidCodexOAuth };
+export { loginCodexOAuth, deriveCodexKeySuffix, authJsonToCredentialSelection, credentialsToAuthJson, CodexOAuthRefreshError, loadAllCodexOAuthSlots, storeCodexOAuth, persistCodexOAuth, getValidCodexOAuth };

package/dist/{cli-cwety9qq.js → cli-tp7e60s3.js}

@@ -1,7 +1,7 @@
 import {
   getScriptApiTypes,
   require_typescript
-} from "./cli-2h86bsfe.js";
+} from "./cli-3r5y6ayj.js";
 import {
   deleteSwarmConfigByKey,
   getAgentById,
@@ -10,7 +10,7 @@ import {
   getSwarmConfigs,
   init_db,
   upsertSwarmConfig
-} from "./cli-d8vmtyyr.js";
+} from "./cli-951w7c79.js";
 import {
   init_secret_scrubber,
   scrubSecrets
@@ -468,6 +468,8 @@ export interface SwarmSdk {
   slack_startThread(args: { channelId: string; message: string }): Promise<unknown>;
   slack_uploadFile(args: Record<string, unknown>): Promise<unknown>;
   slack_downloadFile(args: { url: string }): Promise<unknown>;
+  slack_delete(args: { channelId: string; messageTs: string }): Promise<unknown>;
+  slack_update(args: { channelId: string; messageTs: string; message: string }): Promise<unknown>;
 
   // --- write: messaging (internal) ---
   message_post(args: { channel?: string; content: string; to?: string }): Promise<unknown>;

package/dist/cli.js

@@ -64,7 +64,7 @@ var import_react = __toESM(require_react(), 1);
 // package.json
 var package_default = {
   name: "@desplega.ai/agent-swarm",
-  version: "1.110.0",
+  version: "1.112.0",
   description: "Multi-agent orchestration for Claude Code, Codex, Gemini CLI, and other AI coding assistants",
   license: "MIT",
   author: "desplega.sh <contact@desplega.sh>",
@@ -645,7 +645,7 @@ function McpServer({ port, apiKey, dbPath }) {
     if (dbPath) {
       process.env.DATABASE_PATH = dbPath;
     }
-    import("./http-71964f7a.js").then(() => {
+    import("./http-xx9xptcs.js").then(() => {
       setStatus("running");
     }).catch((err) => {
       setStatus("error");
@@ -731,7 +731,7 @@ function WorkerRunner({
 }) {
   const { exit } = use_app_default();
   import_react.useEffect(() => {
-    import("./worker-jxrmzwb9.js").then(({ runWorker }) => runWorker({
+    import("./worker-40vq0pm8.js").then(({ runWorker }) => runWorker({
       prompt: prompt || undefined,
       yolo,
       systemPrompt: systemPrompt || undefined,
@@ -748,7 +748,7 @@ function WorkerRunner({
 function LeadRunner({ prompt, yolo, systemPrompt, systemPromptFile, additionalArgs }) {
   const { exit } = use_app_default();
   import_react.useEffect(() => {
-    import("./lead-twm4zp8y.js").then(({ runLead }) => runLead({
+    import("./lead-s790v7r0.js").then(({ runLead }) => runLead({
       prompt: prompt || undefined,
       yolo,
       systemPrompt: systemPrompt || undefined,
@@ -788,8 +788,8 @@ function LazyComponent({
   }
   return import_react.createElement(Component, props);
 }
-var loadOnboard = () => import("./onboard-1y1pdzt5.js").then(({ Onboard }) => Onboard);
-var loadConnect = () => import("./setup-jtw9rz9t.js").then(({ Setup }) => Setup);
+var loadOnboard = () => import("./onboard-jgqamqnw.js").then(({ Onboard }) => Onboard);
+var loadConnect = () => import("./setup-8jfzkyzv.js").then(({ Setup }) => Setup);
 function UnknownCommand({ command }) {
   const { exit } = use_app_default();
   import_react.useEffect(() => {
@@ -902,7 +902,7 @@ ${binName} docs \u2014 v${package_default.version}
   }
   process.exit(0);
 } else if (args.command === "hook") {
-  const { runHook } = await import("./hook-1b45zzz1.js");
+  const { runHook } = await import("./hook-rnkzw8vp.js");
   await runHook();
 } else if (args.command === "artifact") {
   const artifactArgs = process.argv.slice(process.argv.indexOf("artifact") + 1);
@@ -922,18 +922,18 @@ ${binName} docs \u2014 v${package_default.version}
     printHelp("scripts");
     process.exit(scriptsArgs[0] === "reembed" || args.showHelp ? 0 : 1);
   }
-  const { runScriptsMaintenanceCommand } = await import("./maintenance-1htsnyz6.js");
+  const { runScriptsMaintenanceCommand } = await import("./maintenance-420rmadb.js");
   await runScriptsMaintenanceCommand(scriptsArgs);
   console.log("Scripts re-embedded.");
 } else if (args.command === "codex-login") {
-  const { runCodexLogin } = await import("./codex-login-4sywkz6v.js");
+  const { runCodexLogin } = await import("./codex-login-0h18cy3e.js");
   const codexLoginArgs = process.argv.slice(process.argv.indexOf("codex-login") + 1);
   await runCodexLogin(codexLoginArgs);
 } else if (args.command === "codex-session-runner") {
-  const { runCodexSessionRunner } = await import("./codex-session-runner-3bx0b1hn.js");
+  const { runCodexSessionRunner } = await import("./codex-session-runner-46q8mrba.js");
   await runCodexSessionRunner();
 } else if (args.command === "claude-managed-setup") {
-  const { runClaudeManagedSetup } = await import("./claude-managed-setup-yhbcx0bz.js");
+  const { runClaudeManagedSetup } = await import("./claude-managed-setup-cm05wtek.js");
   const setupArgs = process.argv.slice(process.argv.indexOf("claude-managed-setup") + 1);
   await runClaudeManagedSetup(setupArgs);
 } else if (args.command === "e2b") {

package/dist/{codex-adapter-ebs12jef.js → codex-adapter-5cmy858w.js}

@@ -6,15 +6,15 @@ import {
   createInProcessCodexSession,
   resolveCodexAuthMode,
   resolveCodexRunnerArgv
-} from "./cli-w6zp4qcx.js";
-import"./cli-m3enfr8q.js";
-import"./cli-amncg1dq.js";
+} from "./cli-ceewqajw.js";
+import"./cli-6wscj9z0.js";
 import"./cli-07er7wrs.js";
 import"./cli-yv9dttkh.js";
 import"./cli-r94z9p1z.js";
 import"./cli-d6n0thxw.js";
 import"./cli-hx1dcevq.js";
 import"./cli-dcfyyh3t.js";
+import"./cli-tk9vyqzh.js";
 import"./cli-psrqtw2m.js";
 import"./cli-zm7njwzd.js";
 import"./cli-tghre7g6.js";

package/dist/{codex-login-4sywkz6v.js → codex-login-0h18cy3e.js}

@@ -2,7 +2,7 @@ import {
   loadAllCodexOAuthSlots,
   loginCodexOAuth,
   storeCodexOAuth
-} from "./cli-amncg1dq.js";
+} from "./cli-tk9vyqzh.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";

package/dist/{codex-session-runner-3bx0b1hn.js → codex-session-runner-46q8mrba.js}

@@ -1,14 +1,14 @@
 import {
   createInProcessCodexSession
-} from "./cli-w6zp4qcx.js";
-import"./cli-m3enfr8q.js";
-import"./cli-amncg1dq.js";
+} from "./cli-ceewqajw.js";
+import"./cli-6wscj9z0.js";
 import"./cli-07er7wrs.js";
 import"./cli-yv9dttkh.js";
 import"./cli-r94z9p1z.js";
 import"./cli-d6n0thxw.js";
 import"./cli-hx1dcevq.js";
 import"./cli-dcfyyh3t.js";
+import"./cli-tk9vyqzh.js";
 import"./cli-psrqtw2m.js";
 import"./cli-zm7njwzd.js";
 import"./cli-tghre7g6.js";

package/dist/{commands-3fh75nzv.js → commands-14g7taf4.js}

@@ -2,11 +2,11 @@ import {
   getAllAgents,
   getAllTasks,
   init_db
-} from "./cli-d8vmtyyr.js";
+} from "./cli-951w7c79.js";
 import"./cli-z2zcxes1.js";
 import"./cli-q21d49ac.js";
 import"./cli-anrj584m.js";
-import"./cli-kg9v8h1w.js";
+import"./cli-8f0dwca2.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 

package/dist/{db-kwfxkhpw.js → db-3tge4jrn.js}

@@ -385,11 +385,11 @@ import {
   upsertSkillFiles,
   upsertSwarmConfig,
   withFavoriteFlags
-} from "./cli-d8vmtyyr.js";
+} from "./cli-951w7c79.js";
 import"./cli-z2zcxes1.js";
 import"./cli-q21d49ac.js";
 import"./cli-anrj584m.js";
-import"./cli-kg9v8h1w.js";
+import"./cli-8f0dwca2.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 init_db();

package/dist/{handlers-jj8rzetb.js → handlers-sy64egg6.js}

@@ -3,24 +3,24 @@ import {
   getBufferMessageCount,
   instantFlush,
   wasEventSeen
-} from "./cli-r19ttke3.js";
+} from "./cli-h9jx5mag.js";
 import {
   extractSlackMessageText,
   extractTaskFromMessage,
   hasOtherUserMention,
   routeMessage
-} from "./cli-g44ffxk5.js";
+} from "./cli-76d1vtvq.js";
 import {
   registerTreeMessage
-} from "./cli-4trfcacj.js";
+} from "./cli-hm27prrc.js";
 import"./cli-rkndnn90.js";
 import"./cli-b0p7rfnd.js";
 import {
   enrichSlackUserEmail,
   resolveSlackUserId
-} from "./cli-8s0swp2t.js";
-import"./cli-dhph6q98.js";
-import"./cli-gb7dqnna.js";
+} from "./cli-30d2ct3k.js";
+import"./cli-9p0qhead.js";
+import"./cli-7xkwgkrs.js";
 import {
   buildTreeBlocks
 } from "./cli-6xd0bvf8.js";
@@ -28,7 +28,7 @@ import"./cli-wspgs9bt.js";
 import {
   createTaskWithSiblingAwareness,
   slackContextKey
-} from "./cli-8ps5wsk9.js";
+} from "./cli-0c3n0eba.js";
 import"./cli-dh55d5fg.js";
 import {
   getAgentById,
@@ -39,11 +39,11 @@ import {
   init_db,
   init_resolver,
   resolveTemplate
-} from "./cli-d8vmtyyr.js";
+} from "./cli-951w7c79.js";
 import"./cli-z2zcxes1.js";
 import"./cli-q21d49ac.js";
 import"./cli-anrj584m.js";
-import"./cli-kg9v8h1w.js";
+import"./cli-8f0dwca2.js";
 import"./cli-4j2mrzag.js";
 import"./cli-e15jhafb.js";
 import {

package/dist/{hook-1b45zzz1.js → hook-rnkzw8vp.js}

@@ -1,7 +1,6 @@
 import {
   summarizeSession
-} from "./cli-m3enfr8q.js";
-import"./cli-amncg1dq.js";
+} from "./cli-6wscj9z0.js";
 import {
   checkToolLoop,
   clearToolHistory
@@ -14,6 +13,7 @@ import {
   isLlmRaterEnabled,
   postRatings
 } from "./cli-dcfyyh3t.js";
+import"./cli-tk9vyqzh.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
@@ -30,7 +30,7 @@ import"./cli-anrj584m.js";
 import {
   init_package,
   package_default
-} from "./cli-kg9v8h1w.js";
+} from "./cli-8f0dwca2.js";
 import"./cli-4j2mrzag.js";
 import"./cli-xw7p4wkq.js";
 import"./cli-4wgngmwv.js";