@desplega.ai/agent-swarm 1.136.0 → 1.138.0

package/dist/{cli-bnq8h7ea.js → cli-3719ggyf.js}

@@ -1,12 +1,12 @@
 import {
   McpHttpClient
 } from "./cli-epan13p1.js";
+import {
+  embedScript
+} from "./cli-005yr57a.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
-import {
-  embedScript
-} from "./cli-qckgdqmr.js";
 import {
   calculatePKCECodeChallenge,
   ensureAuthorizationTokenOrThrow,
@@ -18,7 +18,7 @@ import {
   oauthAppRowToProviderConfig,
   updateAuthorizationTokens,
   upsertAuthorization
-} from "./cli-m3z53bed.js";
+} from "./cli-b4zdc3x6.js";
 import {
   CredentialBroker,
   DEFAULT_CREDENTIAL_BINDINGS,
@@ -39,7 +39,7 @@ import {
   normalizeDateRequired,
   placeholderForConfigKey,
   upsertSwarmConfig
-} from "./cli-tmn19cdz.js";
+} from "./cli-kq9htgbr.js";
 import {
   init_env_flag,
   isEnvFlagEnabled
@@ -47,6 +47,9 @@ import {
 import {
   init_zod
 } from "./cli-s35981d0.js";
+import {
+  exports_external
+} from "./cli-pqv5gvyf.js";
 import {
   init_secret_scrubber,
   refreshSecretScrubberCache,
@@ -54,9 +57,6 @@ import {
   scrubObject,
   scrubSecrets
 } from "./cli-mkq1rk7b.js";
-import {
-  exports_external
-} from "./cli-pqv5gvyf.js";
 import {
   __commonJS,
   __require,
@@ -170054,9 +170054,16 @@ async function disableCredentialBinding(id, userId) {
   const row = await getDbClient().get(`UPDATE script_credential_bindings SET active = 0, updated_at = ?, updated_by = ? WHERE id = ? RETURNING *`, [new Date().toISOString(), userId ?? null, id]);
   return row ? bindingFromRow(row) : null;
 }
+function filterScriptConnections(rows, context) {
+  return rows.map(connectionFromRow).filter((connection) => !context?.kind || connection.kind === context.kind).filter((connection) => context?.includeDisabled || connection.enabled).filter((connection) => !context || context.allScopes === true || applies(connection.scope, connection.scopeId, context));
+}
 function listScriptConnections(context) {
   const rows = getDb().prepare("SELECT * FROM script_connections ORDER BY slug ASC").all();
-  return rows.map(connectionFromRow).filter((connection) => !context?.kind || connection.kind === context.kind).filter((connection) => context?.includeDisabled || connection.enabled).filter((connection) => !context || context.allScopes === true || applies(connection.scope, connection.scopeId, context));
+  return filterScriptConnections(rows, context);
+}
+async function listScriptConnectionsAsync(context) {
+  const rows = await getDbClient().query("SELECT * FROM script_connections ORDER BY slug ASC");
+  return filterScriptConnections(rows, context);
 }
 async function getScriptConnectionById(id) {
   const row = await getDbClient().get("SELECT * FROM script_connections WHERE id = ?", [id]);
@@ -172025,4 +172032,4 @@ async function buildScriptCredentialBindings(input) {
   return (await buildScriptCredentialBindingsWithFailures(input)).egressSecrets;
 }
 
-export { MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, isInvalidClientError, assertUrlSafe, publicEndpointSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, listVendoredOpenapiEntries, ConnectionAuthInputSchema, connectionAuthSummary, listRelationalCredentialBindings, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, touchScratchScriptLastUsed, restoreScratchScriptLastUsedIfUnchanged, createScriptApi, listScriptApisForScript, getScriptApiById, getScriptApiSecret, updateScriptApi, rotateScriptApiSecret, deleteScriptApi, recordScriptApiUsage, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, require_typescript, validateScriptImports, runScript, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildScriptCredentialBindings };
+export { MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, isInvalidClientError, assertUrlSafe, publicEndpointSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, listVendoredOpenapiEntries, ConnectionAuthInputSchema, connectionAuthSummary, listRelationalCredentialBindings, getCredentialBindingById, findCredentialBindingByIdentity, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, listScriptConnectionsAsync, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, touchScratchScriptLastUsed, restoreScratchScriptLastUsedIfUnchanged, createScriptApi, listScriptApisForScript, getScriptApiById, getScriptApiSecret, updateScriptApi, rotateScriptApiSecret, deleteScriptApi, recordScriptApiUsage, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, require_typescript, validateScriptImports, runScript, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildScriptCredentialBindings };

package/dist/cli-390sgxn5.js

@@ -0,0 +1,257 @@
+import {
+  BASE_SUMMARIZE_PROMPT,
+  SummaryWithRatingsSchema,
+  buildSummaryWithRatingsPrompt
+} from "./cli-8p37s71j.js";
+import {
+  complete,
+  exports_typebox,
+  getBuiltinModel,
+  parseModelStr,
+  resolveCredential
+} from "./cli-2ypjdmqg.js";
+import {
+  DEFAULT_OPENROUTER_BASE_URL,
+  getOpenRouterBaseUrl
+} from "./cli-3dpj7atn.js";
+import {
+  init_zod
+} from "./cli-s35981d0.js";
+import {
+  exports_external
+} from "./cli-pqv5gvyf.js";
+import {
+  init_secret_scrubber,
+  scrubSecrets
+} from "./cli-mkq1rk7b.js";
+
+// src/utils/internal-ai/complete-structured.ts
+init_zod();
+init_secret_scrubber();
+var CLAUDE_CLI_TIMEOUT_MS = 30000;
+function stripJsonFences(raw) {
+  const trimmed = raw.trim();
+  const fenced = trimmed.match(/```(?:json)?\s*\n?([\s\S]*?)\n?```/i);
+  return fenced?.[1] ? fenced[1].trim() : trimmed;
+}
+function parseJsonText(raw) {
+  try {
+    return JSON.parse(stripJsonFences(raw));
+  } catch {
+    return;
+  }
+}
+function errorMessage(err) {
+  const message = err instanceof Error ? err.message : String(err ?? "unknown error");
+  return message.replace(/\s+/g, " ");
+}
+async function defaultSpawnClaudeCli(prompt, model, signal, jsonSchema) {
+  const useClaudeBridge = ["true", "1"].includes((process.env.SWARM_USE_CLAUDE_BRIDGE ?? "").trim().toLowerCase());
+  const claudeBinaryRaw = useClaudeBridge ? "claude-bridge" : (process.env.CLAUDE_BINARY ?? "claude").trim();
+  const claudeBinaryArgv = (claudeBinaryRaw || "claude").split(/\s+/);
+  const cmd = [...claudeBinaryArgv, "-p", "--model", model, "--output-format", "json"];
+  if (jsonSchema) {
+    cmd.push("--json-schema", JSON.stringify(jsonSchema));
+  }
+  const env = { ...process.env };
+  if (!env.CLAUDE_CODE_OAUTH_TOKEN && env.AGENT_SWARM_CLAUDE_OAUTH_TOKEN) {
+    env.CLAUDE_CODE_OAUTH_TOKEN = env.AGENT_SWARM_CLAUDE_OAUTH_TOKEN;
+  }
+  env.SKIP_SESSION_SUMMARY = "1";
+  const proc = Bun.spawn({
+    cmd,
+    env,
+    stdin: "pipe",
+    stdout: "pipe",
+    stderr: "pipe"
+  });
+  const timeout = setTimeout(() => {
+    try {
+      proc.kill();
+    } catch {}
+  }, CLAUDE_CLI_TIMEOUT_MS);
+  const abortHandler = () => {
+    try {
+      proc.kill();
+    } catch {}
+  };
+  signal?.addEventListener("abort", abortHandler, { once: true });
+  try {
+    proc.stdin.write(prompt);
+    await proc.stdin.end();
+    const [stdout, stderr, exitCode] = await Promise.all([
+      new Response(proc.stdout).text(),
+      new Response(proc.stderr).text(),
+      proc.exited
+    ]);
+    if (exitCode !== 0) {
+      console.error(`internal-ai: claude -p exited ${exitCode}; stderr=${stderr.slice(0, 500)}`);
+    }
+    try {
+      const envelope = JSON.parse(stdout);
+      if (jsonSchema && envelope.structured_output !== undefined) {
+        return JSON.stringify(envelope.structured_output);
+      }
+      return envelope.result ?? stdout;
+    } catch {
+      return stdout;
+    }
+  } finally {
+    clearTimeout(timeout);
+    signal?.removeEventListener("abort", abortHandler);
+  }
+}
+async function completeStructured(opts) {
+  const retries = opts.retries ?? 3;
+  const callerTag = opts.callerTag ?? "<unset>";
+  let cred;
+  if (opts._credentialOverride) {
+    cred = opts._credentialOverride;
+  } else {
+    const resolver = opts._resolveCredential ?? resolveCredential;
+    cred = await resolver({
+      env: opts.env ?? process.env,
+      apiUrl: opts.apiUrl,
+      apiKey: opts.apiKey,
+      callerTag: opts.callerTag
+    });
+  }
+  if (!cred) {
+    return null;
+  }
+  console.log(`internal-ai: kind=${cred.kind} callerTag=${callerTag}`);
+  if (cred.kind === "claude-cli") {
+    const spawn = opts._spawnClaudeCli ?? defaultSpawnClaudeCli;
+    const jsonSchema = exports_external.toJSONSchema(opts.zodSchema);
+    const schemaStr = JSON.stringify(jsonSchema);
+    const claudeUserPrompt = `${opts.userPrompt}
+
+Respond with ONLY a JSON object (no prose, no code fences) matching this schema:
+${schemaStr}`;
+    let lastErr2 = null;
+    for (let attempt = 0;attempt < retries; attempt++) {
+      try {
+        const raw = await spawn(`${opts.systemPrompt}
+
+${claudeUserPrompt}`, cred.modelDefault, opts.signal, jsonSchema);
+        let parsedJson;
+        try {
+          parsedJson = JSON.parse(stripJsonFences(raw));
+        } catch (err) {
+          lastErr2 = err;
+          continue;
+        }
+        const validated = opts.zodSchema.safeParse(parsedJson);
+        if (validated.success) {
+          return validated.data;
+        }
+        lastErr2 = validated.error;
+      } catch (err) {
+        lastErr2 = err;
+      }
+    }
+    console.error(scrubSecrets(`internal-ai: structured output failed after ${retries} retries (callerTag=${callerTag} kind=${cred.kind}): ${errorMessage(lastErr2)}`));
+    return null;
+  }
+  const [provider, modelId] = parseModelStr(cred.modelDefault);
+  let model;
+  try {
+    model = getBuiltinModel(provider, modelId);
+  } catch (err) {
+    console.error(`internal-ai: getModel(${provider}, ${modelId}) threw (callerTag=${callerTag})`, err);
+    return null;
+  }
+  const openRouterBaseUrl = getOpenRouterBaseUrl(opts.env ?? process.env);
+  if (provider === "openrouter" && openRouterBaseUrl !== DEFAULT_OPENROUTER_BASE_URL) {
+    model = { ...model, baseUrl: openRouterBaseUrl };
+  }
+  const completeFn = opts._complete ?? complete;
+  const toolChoice = model.api === "anthropic-messages" ? { type: "tool", name: opts.toolName } : "required";
+  let userPrompt = opts.userPrompt;
+  let lastErr = null;
+  for (let attempt = 0;attempt < retries; attempt++) {
+    try {
+      const msg = await completeFn(model, {
+        systemPrompt: opts.systemPrompt,
+        messages: [{ role: "user", content: userPrompt, timestamp: Date.now() }],
+        tools: [
+          {
+            name: opts.toolName,
+            description: opts.toolDescription,
+            parameters: opts.toolSchema
+          }
+        ]
+      }, { apiKey: cred.apiKey, signal: opts.signal, toolChoice });
+      const toolCall = msg.content.find((c) => c.type === "toolCall" && c.name === opts.toolName);
+      if (!toolCall) {
+        const assistantText = msg.content.filter((content) => content.type === "text").map((content) => content.text).join(`
+`);
+        if (assistantText) {
+          const parsedText = parseJsonText(assistantText);
+          if (parsedText !== undefined) {
+            const validatedText = opts.zodSchema.safeParse(parsedText);
+            if (validatedText.success) {
+              return validatedText.data;
+            }
+          }
+        }
+        userPrompt = `${userPrompt}
+
+You did not call the ${opts.toolName} tool. You MUST call it with the requested arguments.`;
+        lastErr = new Error("no tool call in response");
+        continue;
+      }
+      const validated = opts.zodSchema.safeParse(toolCall.arguments);
+      if (validated.success) {
+        return validated.data;
+      }
+      userPrompt = `${userPrompt}
+
+The ${opts.toolName} arguments did not validate: ${validated.error.message}. Please retry with correct arguments.`;
+      lastErr = validated.error;
+    } catch (err) {
+      lastErr = err;
+    }
+  }
+  console.error(scrubSecrets(`internal-ai: structured output failed after ${retries} retries (callerTag=${callerTag} kind=${cred.kind}): ${errorMessage(lastErr)}`));
+  return null;
+}
+
+// src/utils/internal-ai/summarize-session.ts
+var summaryToolSchema = exports_typebox.Object({
+  summary: exports_typebox.String(),
+  ratings: exports_typebox.Array(exports_typebox.Object({
+    id: exports_typebox.String({ minLength: 1 }),
+    score: exports_typebox.Number({ minimum: 0, maximum: 1 }),
+    reasoning: exports_typebox.String({ minLength: 1, maxLength: 500 }),
+    referencesSource: exports_typebox.Optional(exports_typebox.String({ minLength: 1, maxLength: 512 }))
+  }))
+});
+async function summarizeSession(opts) {
+  if (opts.transcript.length <= 100)
+    return null;
+  const taskLine = opts.taskContext.prompt ? `
+Task: ${opts.taskContext.prompt}` : "";
+  const basePrompt = `${BASE_SUMMARIZE_PROMPT}${taskLine}
+
+Transcript:
+${opts.transcript}`;
+  const userPrompt = buildSummaryWithRatingsPrompt(basePrompt, opts.retrievals);
+  const runner = opts._completeStructured ?? completeStructured;
+  return await runner({
+    zodSchema: SummaryWithRatingsSchema,
+    toolSchema: summaryToolSchema,
+    toolName: "record_session_summary",
+    toolDescription: "Record the high-value learnings extracted from this session, plus per-memory ratings of any retrievals.",
+    systemPrompt: "You are an expert at extracting durable, generalizable learnings from agent sessions.",
+    userPrompt,
+    callerTag: `session-summary:${opts.harness}`,
+    apiUrl: opts.apiUrl,
+    apiKey: opts.apiKey,
+    env: opts.env,
+    signal: opts.signal,
+    retries: 3,
+    ...opts._credentialOverride ? { _credentialOverride: opts._credentialOverride } : {}
+  });
+}
+export { summarizeSession };

package/dist/{cli-z6e8eqrm.js → cli-47esr8ht.js}

@@ -1,14 +1,14 @@
 import {
   buildModelsDevSeedRows,
   loadModelsDevCache
-} from "./cli-tee8w7tq.js";
+} from "./cli-s6t1qv67.js";
 import {
   createLogEntry,
   getActivePricingRow,
   getDbClient,
   init_db,
   insertPricingRow
-} from "./cli-tmn19cdz.js";
+} from "./cli-kq9htgbr.js";
 import {
   init_secret_scrubber,
   scrubSecrets