@desplega.ai/agent-swarm 1.149.1 → 1.151.0

package/dist/{cli-9d8ntetj.js → cli-2658f6at.js}

@@ -2,7 +2,7 @@ import {
   buildAgentFsLiveUrl,
   getAppUrl,
   init_constants
-} from "./cli-e29gmdmw.js";
+} from "./cli-dv6cdjs2.js";
 import {
   __esm
 } from "./cli-bc05qbss.js";

package/dist/{cli-7evafqvy.js → cli-2tbvf1z1.js}

@@ -1,27 +1,22 @@
 import {
   renderSteeringDelivery
-} from "./cli-xm87hzbw.js";
-import {
-  checkCodexCredentials,
-  codexUserHome
-} from "./cli-73gq0zxn.js";
+} from "./cli-pgj4a5fb.js";
 import {
   checkClaudeManagedCredentials
-} from "./cli-6664w7y4.js";
+} from "./cli-kj76p1ez.js";
 import {
   checkDevinCredentials
 } from "./cli-9b13ggd1.js";
 import {
   checkOpencodeCredentials
-} from "./cli-5my3bjsd.js";
-import {
-  renderMemoriesPrompt,
-  resolveScriptsOnlyMode,
-  writeSkillsToFilesystem
-} from "./cli-cv7s5zdq.js";
+} from "./cli-d3p82erb.js";
 import {
   checkClaudeCredentials
-} from "./cli-k351hv5k.js";
+} from "./cli-3v9xhjcn.js";
+import {
+  checkCodexCredentials,
+  codexUserHome
+} from "./cli-vwm416m6.js";
 import {
   MAX_RATE_LIMIT_RESET_MS,
   isCodexCreditsExhaustedMessage,
@@ -33,8 +28,13 @@ import {
   getContextWindowSize
 } from "./cli-s25avqg9.js";
 import {
+  renderMemoriesPrompt,
+  writeSkillsToFilesystem
+} from "./cli-pf9q3696.js";
+import {
+  resolveScriptsOnlyMode,
   validateJsonSchema
-} from "./cli-ddfw1mc4.js";
+} from "./cli-5tpgq60f.js";
 import {
   authJsonToCredentialSelection,
   credentialsToAuthJson,
@@ -49,6 +49,16 @@ import {
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
+import {
+  ensure,
+  initOtel,
+  initialize,
+  injectTraceContext,
+  isPollTracingEnabled,
+  startSpan,
+  withSpan,
+  withSpanContext
+} from "./cli-r2q6pevn.js";
 import {
   buildContextPreamble,
   buildResumeContextPreamble,
@@ -61,21 +71,11 @@ import {
   syncProfileFilesToServer,
   writeIdentityBaselines,
   writeProfileFileFromDb
-} from "./cli-zvz62chv.js";
-import {
-  ensure,
-  initOtel,
-  initialize,
-  injectTraceContext,
-  isPollTracingEnabled,
-  startSpan,
-  withSpan,
-  withSpanContext
-} from "./cli-3sysyjve.js";
+} from "./cli-fm4ytsdk.js";
 import {
   init_task_attachment_links,
   taskAttachmentFetchCommand
-} from "./cli-9d8ntetj.js";
+} from "./cli-2658f6at.js";
 import {
   ProviderNameSchema,
   initTelemetry,
@@ -83,7 +83,7 @@ import {
   init_types,
   resolveTaskModelSelection,
   telemetry
-} from "./cli-qgd4sqz5.js";
+} from "./cli-s14agm5s.js";
 import {
   generateDefaultClaudeMd,
   generateDefaultIdentityMd,
@@ -93,7 +93,7 @@ import {
   init_base_prompt,
   init_defaults,
   init_templates
-} from "./cli-08b07b4r.js";
+} from "./cli-ht5rs63n.js";
 import {
   configureHttpResolver,
   init_resolver,
@@ -102,11 +102,11 @@ import {
   interpolate,
   isSteeringEnabled,
   resolveTemplateAsync
-} from "./cli-3apbzgyk.js";
+} from "./cli-z61ykvam.js";
 import {
   getMcpBaseUrl,
   init_constants
-} from "./cli-e29gmdmw.js";
+} from "./cli-dv6cdjs2.js";
 import {
   init_credentials,
   resolveCredentialPools
@@ -151,19 +151,19 @@ async function materializeCodexAuthJson(_slot, creds, deps = {}) {
 async function createProviderAdapter(provider) {
   switch (provider) {
     case "claude": {
-      const { ClaudeAdapter } = await import("./claude-adapter-v3rnzsdc.js");
+      const { ClaudeAdapter } = await import("./claude-adapter-wfp2gzvz.js");
       return new ClaudeAdapter;
     }
     case "pi": {
-      const { PiMonoAdapter } = await import("./pi-mono-adapter-zvshk5cj.js");
+      const { PiMonoAdapter } = await import("./pi-mono-adapter-jcqt71cg.js");
       return new PiMonoAdapter;
     }
     case "codex": {
-      const { CodexAdapter } = await import("./codex-adapter-jyw7a91z.js");
+      const { CodexAdapter } = await import("./codex-adapter-jjjk8w4m.js");
       return new CodexAdapter;
     }
     case "claude-managed": {
-      const { ClaudeManagedAdapter } = await import("./claude-managed-adapter-qvsmh6mv.js");
+      const { ClaudeManagedAdapter } = await import("./claude-managed-adapter-dsmkcrjy.js");
       return new ClaudeManagedAdapter;
     }
     case "devin": {
@@ -171,11 +171,11 @@ async function createProviderAdapter(provider) {
       return new DevinAdapter;
     }
     case "opencode": {
-      const { OpencodeAdapter } = await import("./opencode-adapter-dce4wskd.js");
+      const { OpencodeAdapter } = await import("./opencode-adapter-28axqa09.js");
       return new OpencodeAdapter;
     }
     case "acp": {
-      const { ACPAdapter } = await import("./acp-adapter-vhkzfpjg.js");
+      const { ACPAdapter } = await import("./acp-adapter-ex8hzjfc.js");
       return new ACPAdapter;
     }
     default:
@@ -588,7 +588,7 @@ var CREDENTIAL_PROVIDER_CHECKERS = {
   devin: (env) => checkDevinCredentials(env),
   opencode: (env, opts) => checkOpencodeCredentials(env, opts),
   pi: async (env, opts) => {
-    const { checkPiMonoCredentials } = await import("./pi-mono-adapter-zvshk5cj.js");
+    const { checkPiMonoCredentials } = await import("./pi-mono-adapter-jcqt71cg.js");
     return checkPiMonoCredentials(env, opts);
   },
   acp: () => ({ ready: true, missing: [], satisfiedBy: "sdk-delegated" })
@@ -832,17 +832,6 @@ async function sendCredStatusReport(apiUrl, apiKey, agentId, runtimeInstanceId,
     throw new Error(`credential-status report failed: ${res.status} ${body}`.trim());
   }
 }
-async function reportCredStatus(apiUrl, apiKey, agentId, runtimeInstanceId, credStatus) {
-  try {
-    await sendCredStatusReport(apiUrl, apiKey, agentId, runtimeInstanceId, {
-      ready: credStatus.ready,
-      missing: credStatus.missing,
-      credStatus
-    });
-  } catch (err) {
-    console.warn(`[cred-status] POST failed (non-fatal): ${err}`);
-  }
-}
 async function reportLatestModel(apiUrl, apiKey, agentId, latestModel) {
   try {
     await fetch(`${apiUrl}/api/agents/${encodeURIComponent(agentId)}/credential-status`, {
@@ -891,6 +880,43 @@ function buildLatestModelReport(opts) {
   };
 }
 
+// src/commands/credential-refresh.ts
+var CREDENTIAL_RETRY_INTERVAL_MS = 30000;
+var BEDROCK_REFRESH_INTERVAL_MS = 5 * 60 * 1000;
+async function refreshCredentialStatus(api, state, harnessProvider, env, now = Date.now()) {
+  if (isCredCheckDisabled(env) || state.inFlight)
+    return;
+  const providerChanged = state.harnessProvider !== harnessProvider;
+  const retryDue = state.ready !== true && now - state.lastRefreshAt >= CREDENTIAL_RETRY_INTERVAL_MS;
+  if (!providerChanged && !retryDue && !shouldRefreshBedrockStatus({
+    harnessProvider,
+    env,
+    lastRefreshAt: state.lastRefreshAt,
+    now,
+    intervalMs: BEDROCK_REFRESH_INTERVAL_MS
+  })) {
+    return;
+  }
+  state.harnessProvider = harnessProvider;
+  state.lastRefreshAt = now;
+  state.ready = null;
+  state.inFlight = true;
+  try {
+    const snapshot = await buildCredStatusReport(harnessProvider, { ...env }, {}, "post_task");
+    if (state.harnessProvider !== harnessProvider)
+      return;
+    await sendCredStatusReport(api.apiUrl, api.apiKey, api.agentId, api.runtimeInstanceId, {
+      ready: snapshot.ready,
+      missing: snapshot.missing,
+      credStatus: snapshot
+    });
+    if (state.harnessProvider === harnessProvider)
+      state.ready = snapshot.ready;
+  } finally {
+    state.inFlight = false;
+  }
+}
+
 // src/commands/credential-wait.ts
 var EX_CONFIG = 78;
 
@@ -3973,13 +3999,16 @@ ${additionalSystemPrompt}` : basePrompt;
   };
   const cancelledSignaled = new Set;
   const steeringDispatchState = isSteeringEnabled() ? createSteeringDispatchState() : null;
-  let cachedCredHarnessProvider = null;
+  const credentialRefreshState = {
+    harnessProvider: null,
+    ready: null,
+    lastRefreshAt: 0,
+    inFlight: false
+  };
   let lastHarnessReconcileAt = 0;
   const HARNESS_RECONCILE_INTERVAL_MS = 1e4;
   let lastServerCapsRefreshAt = 0;
   const SERVER_CAPS_REFRESH_INTERVAL_MS = 300000;
-  let lastBedrockRefreshAt = 0;
-  const BEDROCK_REFRESH_INTERVAL_MS = 5 * 60 * 1000;
   const runtimeInstanceId = crypto.randomUUID();
   process.env.SWARM_RUNTIME_INSTANCE_ID = runtimeInstanceId;
   const apiConfig = { apiUrl, apiKey, agentId, runtimeInstanceId };
@@ -4001,7 +4030,7 @@ ${additionalSystemPrompt}` : basePrompt;
 
 ${additionalSystemPrompt}` : basePrompt;
         promptRebuiltForProvider = true;
-        cachedCredHarnessProvider = null;
+        credentialRefreshState.harnessProvider = null;
         agentVisibleChanged = true;
         console.log(`[${role}] [harness] Swapped to ${resolvedProvider} (basePrompt rebuilt: ${basePrompt.length} chars)`);
       } catch (err) {
@@ -4094,7 +4123,6 @@ ${additionalSystemPrompt}` : basePrompt;
     agentId,
     alreadyProvisioned: agentFsProvisioned
   });
-  cachedCredHarnessProvider = state.harnessProvider;
   if (isCredCheckDisabled(process.env)) {
     console.log(`[${role}] CRED_CHECK_DISABLE=1, skipping credential checks`);
   } else {
@@ -4158,6 +4186,9 @@ ${additionalSystemPrompt}` : basePrompt;
         label: "credential readiness report",
         log: (line) => console.warn(`[${role}] ${line}`)
       });
+      credentialRefreshState.harnessProvider = state.harnessProvider;
+      credentialRefreshState.ready = bootCredSnapshot?.ready ?? true;
+      credentialRefreshState.lastRefreshAt = Date.now();
     } catch (error) {
       console.error(`[${role}] Failed to report credential readiness after recovery: ${error}`);
       process.exit(1);
@@ -4566,22 +4597,7 @@ ${additionalSystemPrompt}` : basePrompt;
         console.warn(`[${role}] [harness] Reconcile fetch failed (non-fatal): ${err}`);
       }
     }
-    if (!isCredCheckDisabled(process.env)) {
-      const currentHarness = state.harnessProvider;
-      if (currentHarness !== cachedCredHarnessProvider) {
-        cachedCredHarnessProvider = currentHarness;
-        buildCredStatusReport(currentHarness, process.env, {}, "post_task").then((snap) => reportCredStatus(apiUrl, apiKey, agentId, runtimeInstanceId, snap)).catch((err) => console.warn(`[${role}] cred_status post_task report failed (non-fatal): ${err}`));
-      } else if (shouldRefreshBedrockStatus({
-        harnessProvider: currentHarness,
-        env: process.env,
-        lastRefreshAt: lastBedrockRefreshAt,
-        now: Date.now(),
-        intervalMs: BEDROCK_REFRESH_INTERVAL_MS
-      })) {
-        lastBedrockRefreshAt = Date.now();
-        buildCredStatusReport(currentHarness, process.env, {}, "post_task").then((snap) => reportCredStatus(apiUrl, apiKey, agentId, runtimeInstanceId, snap)).catch((err) => console.warn(`[${role}] bedrock enumeration refresh failed (non-fatal): ${err}`));
-      }
-    }
+    refreshCredentialStatus(apiConfig, credentialRefreshState, state.harnessProvider, process.env).catch((err) => console.warn(`[${role}] cred_status post_task refresh failed (non-fatal): ${err}`));
     const now = Date.now();
     for (const [taskId, task] of state.activeTasks) {
       if (vcsDetectedTasks.has(taskId))

package/dist/{cli-k351hv5k.js → cli-3v9xhjcn.js}

@@ -1,6 +1,9 @@
 import {
   runStopHookSessionSummarySubprocess
-} from "./cli-tg8qj8ee.js";
+} from "./cli-frcta2w4.js";
+import {
+  fetchInstalledMcpServers
+} from "./cli-tng3131n.js";
 import {
   SessionErrorTracker,
   buildOtelTraceparentEnv,
@@ -8,9 +11,6 @@ import {
   parseStderrForErrors,
   trackErrorFromJson
 } from "./cli-b5b30yzk.js";
-import {
-  fetchInstalledMcpServers
-} from "./cli-tng3131n.js";
 import {
   CTX_MODE_NUDGE_EVERY
 } from "./cli-zm7njwzd.js";
@@ -29,7 +29,7 @@ import {
 } from "./cli-4yc5d8fk.js";
 import {
   swarmRuntimeInstanceId
-} from "./cli-07jd68a1.js";
+} from "./cli-re8z5p8p.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -245,6 +245,8 @@ function parseClaudeBinary(raw) {
   return trimmed.split(/\s+/);
 }
 var MIN_CLAUDE_QUEUE_STEERING_VERSION = [2, 1, 205];
+var CLAUDE_VERSION_PROBE_TIMEOUT_MS = 1000;
+var CLAUDE_VERSION_PROBE_MAX_BUFFER_BYTES = 64 * 1024;
 function resolveClaudeQueueSteeringOverride(env) {
   const raw = env.CLAUDE_QUEUE_STEERING?.trim().toLowerCase();
   if (!raw)
@@ -817,7 +819,7 @@ class ClaudeAdapter {
     if (transport === "sdk" && isClaudeBridgeEffective(sourceEnv)) {
       throw new Error("CLAUDE_TRANSPORT=sdk cannot run with an effective Claude Bridge configuration. Select CLI transport or disable the bridge.");
     }
-    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-qxrpsna1.js") : undefined;
+    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-bht9jjak.js") : undefined;
     claudeSdk?.validateClaudeSdkAdditionalArgs([
       ...claudeBinaryArgv.slice(1),
       ...config.additionalArgs ?? []
@@ -871,14 +873,24 @@ class ClaudeAdapter {
     const queueSteeringOverride = resolveClaudeQueueSteeringOverride(sourceEnv);
     let harnessVersion;
     try {
-      const result = Bun.spawnSync([...effectiveClaudeBinaryArgv, "--version"], {
+      const probe = registerProcessGroup(Bun.spawn([...effectiveClaudeBinaryArgv, "--version"], {
+        detached: detachedProcessGroup,
         env: sourceEnv,
+        stdin: "ignore",
         stdout: "pipe",
-        stderr: "pipe"
-      });
-      if (result.success) {
-        const trimmed = `${result.stdout?.toString() ?? ""}
-${result.stderr?.toString() ?? ""}`.trim();
+        stderr: "pipe",
+        timeout: CLAUDE_VERSION_PROBE_TIMEOUT_MS,
+        killSignal: "SIGKILL",
+        maxBuffer: CLAUDE_VERSION_PROBE_MAX_BUFFER_BYTES
+      }));
+      const exitCode = await probe.exited.finally(() => terminateProcessGroup(probe.pid));
+      const [stdout, stderr] = await Promise.all([
+        new Response(probe.stdout).text(),
+        new Response(probe.stderr).text()
+      ]);
+      if (exitCode === 0) {
+        const trimmed = `${stdout}
+${stderr}`.trim();
         if (trimmed) {
           harnessVersion = trimmed;
           harnessVariantMeta = { version: trimmed };