@desplega.ai/agent-swarm 1.152.0 → 1.152.1

package/dist/{onboard-fv7ezvwx.js → onboard-b0csgm0q.js}

@@ -3,7 +3,7 @@ import {
   createDefaultMcpJson,
   createDefaultSettingsLocal,
   createHooksConfig
-} from "./cli-wp7cejrg.js";
+} from "./cli-3g61md6v.js";
 import {
   require_jsx_dev_runtime
 } from "./cli-s2qjdd6z.js";
@@ -13,7 +13,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-jh9txj4n.js";
+} from "./cli-gfez0qmk.js";
 import {
   Box_default,
   Select,

package/dist/{otel-impl-6vbb568y.js → otel-impl-b6rfehth.js}

@@ -4,7 +4,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-jh9txj4n.js";
+} from "./cli-gfez0qmk.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{pricing-refresh-nmm949an.js → pricing-refresh-4e201wtd.js}

@@ -2,9 +2,9 @@ import {
   PRICING_REFRESH_INTERVAL_MS,
   refreshPricingFromModelsDev,
   startPricingRefreshLoop
-} from "./cli-5bqt4gwa.js";
-import"./cli-zdcdh02m.js";
-import"./cli-gacq5hg8.js";
+} from "./cli-kf8qp2vf.js";
+import"./cli-7bwaerjt.js";
+import"./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -12,7 +12,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-jh9txj4n.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{rbac-roles-0fz5qryx.js → rbac-roles-mkc5n5qa.js}

@@ -7,9 +7,9 @@ import {
   getUserGrant,
   listUserRoles,
   runRbacCliCommand
-} from "./cli-t6axtdcg.js";
+} from "./cli-jytf5mw9.js";
 import"./cli-zfzznn7c.js";
-import"./cli-gacq5hg8.js";
+import"./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -17,7 +17,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-jh9txj4n.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{rbac-roles-xtp05syf.js → rbac-roles-zp6e4geh.js}

@@ -5,7 +5,7 @@ import {
   getDb,
   getDbClient,
   init_db
-} from "./cli-gacq5hg8.js";
+} from "./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -16,7 +16,7 @@ import {
 } from "./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-jh9txj4n.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{render-v2-fpb8whme.js → render-v2-4fazz9tf.js}

@@ -9,11 +9,11 @@ import {
   processSlackRenderV2,
   renderThreadTree,
   streamOutcomeCard
-} from "./cli-cwvey7n1.js";
+} from "./cli-wfve107r.js";
 import"./cli-q51yprfq.js";
 import"./cli-yatxqynm.js";
 import"./cli-2658f6at.js";
-import"./cli-gacq5hg8.js";
+import"./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -21,7 +21,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-jh9txj4n.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-pzxba7gw.js";
 import"./cli-zf8jjwex.js";

package/dist/{seed-pricing-zwa8bs3t.js → seed-pricing-thxpn9vn.js}

@@ -2,8 +2,8 @@ import {
   buildModelsDevSeedRows,
   buildPricingSeedRows,
   seedPricingFromModelsDev
-} from "./cli-zdcdh02m.js";
-import"./cli-gacq5hg8.js";
+} from "./cli-7bwaerjt.js";
+import"./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -11,7 +11,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-jh9txj4n.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{setup-3ybwbdpd.js → setup-wb0z8cat.js}

@@ -4,14 +4,14 @@ import {
   createDefaultMcpJson,
   createDefaultSettingsLocal,
   createHooksConfig
-} from "./cli-wp7cejrg.js";
+} from "./cli-3g61md6v.js";
 import {
   require_jsx_dev_runtime
 } from "./cli-s2qjdd6z.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
-import"./cli-jh9txj4n.js";
+import"./cli-gfez0qmk.js";
 import {
   Box_default,
   Spinner,

package/dist/{work-objects-rmayxcx7.js → work-objects-h3498kwe.js}

@@ -1,34 +1,34 @@
 import {
   isUserAllowed
-} from "./cli-5p007m2q.js";
-import"./cli-4fqn2vpg.js";
-import"./cli-awb59f08.js";
-import"./cli-72vksk1n.js";
+} from "./cli-ng4q6a9t.js";
+import"./cli-3pft2z6r.js";
+import"./cli-b4dyetqt.js";
+import"./cli-72tgtzr1.js";
 import"./cli-0z2v4nhw.js";
 import"./cli-4wppfkcm.js";
 import"./cli-e7d20cty.js";
 import"./cli-re8z5p8p.js";
 import"./cli-3dpj7atn.js";
-import"./cli-5bqt4gwa.js";
-import"./cli-t6axtdcg.js";
+import"./cli-kf8qp2vf.js";
+import"./cli-jytf5mw9.js";
 import"./cli-zfzznn7c.js";
-import"./cli-p2hx1pxm.js";
+import"./cli-dsyg66vt.js";
 import"./cli-epan13p1.js";
 import"./cli-y89t4nca.js";
 import"./cli-f14fvzag.js";
 import"./cli-fad8m16k.js";
-import"./cli-cs9z1hw3.js";
-import"./cli-zdcdh02m.js";
+import"./cli-vbk025fm.js";
+import"./cli-7bwaerjt.js";
 import"./cli-bsakbbkm.js";
-import"./cli-nd5s3m4y.js";
+import"./cli-gxf2ebyz.js";
 import"./cli-51tf7ac3.js";
 import {
   getTaskUrl,
   slackTaskOutput
-} from "./cli-cwvey7n1.js";
+} from "./cli-wfve107r.js";
 import"./cli-q51yprfq.js";
 import"./cli-yatxqynm.js";
-import"./cli-evgy5w3y.js";
+import"./cli-jtvs5m8q.js";
 import"./cli-fm4ytsdk.js";
 import"./cli-aehm1rbq.js";
 import"./cli-2658f6at.js";
@@ -37,7 +37,7 @@ import {
   getAgentById,
   getTaskById,
   init_db
-} from "./cli-gacq5hg8.js";
+} from "./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -48,7 +48,7 @@ import {
 } from "./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-jh9txj4n.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-pzxba7gw.js";
 import"./cli-f7kvq46p.js";

package/dist/{worker-rng4jhnh.js → worker-2m2tzxp3.js}

@@ -1,16 +1,16 @@
 import {
   runAgent
-} from "./cli-t1mykkng.js";
+} from "./cli-ftdjz1mk.js";
 import"./cli-pgj4a5fb.js";
 import"./cli-kj76p1ez.js";
 import"./cli-9b13ggd1.js";
 import"./cli-d3p82erb.js";
-import"./cli-8fy9dmpv.js";
-import"./cli-f1f9n77e.js";
+import"./cli-sakxd2rg.js";
+import"./cli-sqmh7jj1.js";
 import"./cli-wbyk465z.js";
 import"./cli-tng3131n.js";
 import"./cli-5bfdm1ah.js";
-import"./cli-87hdfyde.js";
+import"./cli-v9sk4dzw.js";
 import"./cli-hsxj0yar.js";
 import"./cli-r94z9p1z.js";
 import"./cli-b5b30yzk.js";
@@ -25,34 +25,34 @@ import"./cli-eree7rnv.js";
 import"./cli-4yc5d8fk.js";
 import {
   getEnabledCapabilities
-} from "./cli-72vksk1n.js";
+} from "./cli-72tgtzr1.js";
 import"./cli-0z2v4nhw.js";
 import"./cli-4wppfkcm.js";
 import"./cli-e7d20cty.js";
 import"./cli-re8z5p8p.js";
 import"./cli-3dpj7atn.js";
-import"./cli-5bqt4gwa.js";
-import"./cli-t6axtdcg.js";
+import"./cli-kf8qp2vf.js";
+import"./cli-jytf5mw9.js";
 import"./cli-zfzznn7c.js";
-import"./cli-p2hx1pxm.js";
+import"./cli-dsyg66vt.js";
 import"./cli-epan13p1.js";
 import"./cli-y89t4nca.js";
 import"./cli-f14fvzag.js";
 import"./cli-fad8m16k.js";
-import"./cli-cs9z1hw3.js";
-import"./cli-zdcdh02m.js";
+import"./cli-vbk025fm.js";
+import"./cli-7bwaerjt.js";
 import"./cli-bsakbbkm.js";
-import"./cli-nd5s3m4y.js";
+import"./cli-gxf2ebyz.js";
 import"./cli-51tf7ac3.js";
-import"./cli-cwvey7n1.js";
+import"./cli-wfve107r.js";
 import"./cli-q51yprfq.js";
 import"./cli-yatxqynm.js";
-import"./cli-evgy5w3y.js";
+import"./cli-jtvs5m8q.js";
 import"./cli-fm4ytsdk.js";
 import"./cli-aehm1rbq.js";
 import"./cli-2658f6at.js";
 import"./cli-jsp14b6c.js";
-import"./cli-gacq5hg8.js";
+import"./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -60,7 +60,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-jh9txj4n.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-pzxba7gw.js";
 import"./cli-f7kvq46p.js";

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "1.152.0",
+    "version": "1.152.1",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [
@@ -46581,7 +46581,7 @@
             }
           },
           "503": {
-            "description": "AgentMail integration not configured",
+            "description": "AgentMail integration not configured or inbound archive unavailable",
             "content": {
               "application/json": {
                 "schema": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "1.152.0",
+  "version": "1.152.1",
   "description": "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
   "keywords": [
     "agent-swarm.dev",

package/src/agentmail/inbound-archive.ts

@@ -0,0 +1,71 @@
+import { createHash } from "node:crypto";
+import { claimKv, sweepExpiredKv } from "../be/db";
+import { scrubSecrets } from "../utils/secret-scrubber";
+import type { AgentMailWebhookPayload } from "./types";
+
+export const INBOUND_ARCHIVE_NAMESPACE = "agentmail-inbound";
+export const INBOUND_ARCHIVE_TTL_MS = 30 * 24 * 60 * 60 * 1000;
+const text = (value: unknown, limit: number) =>
+  typeof value === "string" ? scrubSecrets(value).slice(0, limit) : "";
+
+export const inboundArchiveKey = (inboxId: string, messageId: string) =>
+  createHash("sha256")
+    .update(JSON.stringify([inboxId, messageId]))
+    .digest("hex");
+
+/** Persist verified deliveries before ACK, independent of task-routing filters.
+ * One minimized entry per message for 30 days from capture. Live retries preserve
+ * the first delivery and its expiry; a replay after expiry starts a new window.
+ * This is a delivery archive, not proof of historical completeness.
+ */
+export async function archiveInboundMessage(payload: AgentMailWebhookPayload): Promise<void> {
+  if (
+    ![
+      "message.received",
+      "message.received.unauthenticated",
+      "message.received.blocked",
+      "message.received.spam",
+    ].includes(payload.event_type)
+  )
+    return;
+  const message = payload.message;
+  if (!message?.inbox_id || !message.message_id || !message.thread_id) {
+    throw new Error("Inbound webhook missing inbox, message or thread ID");
+  }
+  const now = Date.now();
+  // Remove expired payloads on traffic as well as the KV point-read lazy sweep.
+  await sweepExpiredKv(INBOUND_ARCHIVE_NAMESPACE, now);
+  const minimized = {
+    event_type: payload.event_type,
+    message: {
+      inbox_id: message.inbox_id,
+      message_id: message.message_id,
+      thread_id: message.thread_id,
+      from_: text(Array.isArray(message.from_) ? message.from_.join(", ") : message.from_, 1500),
+      reply_to: Array.isArray(message.reply_to)
+        ? message.reply_to.slice(0, 20).map((value) => text(value, 1500))
+        : undefined,
+      subject: text(message.subject, 300),
+      text: text(message.text, 16000),
+      html: text(message.html, 16000),
+      timestamp: text(message.timestamp || message.created_at, 100),
+      labels: Array.isArray(message.labels)
+        ? message.labels.filter((label) => label === "unauthenticated")
+        : [],
+      attachments: Array.isArray(message.attachments)
+        ? message.attachments.map((attachment) => ({
+            filename: text(attachment.filename, 1500),
+            content_type: text(attachment.content_type, 200),
+            size: typeof attachment.size === "number" ? attachment.size : null,
+          }))
+        : undefined,
+    },
+  };
+  await claimKv({
+    namespace: INBOUND_ARCHIVE_NAMESPACE,
+    key: inboundArchiveKey(message.inbox_id, message.message_id),
+    value: { version: 1, capturedAt: new Date(now).toISOString(), payload: minimized },
+    expiresAt: now + INBOUND_ARCHIVE_TTL_MS,
+    valueType: "json",
+  });
+}

package/src/agentmail/types.ts

@@ -44,6 +44,8 @@ export interface AgentMailWebhookPayload {
 export type AgentMailEventType =
   | "message.received"
   | "message.received.unauthenticated"
+  | "message.received.blocked"
+  | "message.received.spam"
   | "message.sent"
   | "message.delivered"
   | "message.bounced"

package/src/http/webhooks.ts

@@ -8,6 +8,7 @@ import {
   isSenderAllowed,
   verifyAgentMailWebhook,
 } from "../agentmail";
+import { archiveInboundMessage } from "../agentmail/inbound-archive";
 import type {
   CheckRunEvent,
   CheckSuiteEvent,
@@ -109,7 +110,7 @@ const agentmailWebhook = route({
   responses: {
     200: { description: "Event received", schema: z.object({ received: z.literal(true) }) },
     401: { description: "Invalid signature" },
-    503: { description: "AgentMail integration not configured" },
+    503: { description: "AgentMail integration not configured or inbound archive unavailable" },
   },
 });
 
@@ -486,11 +487,18 @@ export async function handleWebhooks(
       return true;
     }
 
-    // Return 200 immediately — Svix best practice to avoid retries.
-    // Processing happens asynchronously below; dedup is handled in handlers.ts.
-    agentmailWebhook.respond(res, 200, { received: true });
-
     const payload = verified as AgentMailWebhookPayload;
+    try {
+      await archiveInboundMessage(payload);
+    } catch (err) {
+      console.error("[AgentMail] Inbound archive failed; requesting webhook retry", err);
+      res.writeHead(503, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Inbound archive unavailable" }));
+      return true;
+    }
+    // Only acknowledge received events after durable capture. Task routing below
+    // remains independent: rejected senders and routing failures stay discoverable.
+    agentmailWebhook.respond(res, 200, { received: true });
 
     if (
       payload.message &&