@desplega.ai/agent-swarm 1.165.0 → 1.166.0

package/dist/{cli-k6xx3pve.js → cli-0nhdwxd5.js}

@@ -1,14 +1,14 @@
 import {
   seedPricingFromModelsDev
-} from "./cli-nfygw434.js";
+} from "./cli-ysnyhws9.js";
 import {
   ensureRbacSeedsSynced,
   init_rbac_roles
-} from "./cli-xnzrzets.js";
+} from "./cli-8kgvmkak.js";
 import {
   getDb,
-  init_db
-} from "./cli-qdv8kgz7.js";
+  init_db1 as init_db
+} from "./cli-yshaazs1.js";
 
 // src/be/boot-seeds.ts
 init_db();

package/dist/{cli-n9ehc28t.js → cli-0qjcsxgz.js}

@@ -1,6 +1,6 @@
 import {
   runStopHookSessionSummarySubprocess
-} from "./cli-bdv39kgj.js";
+} from "./cli-rsy933yz.js";
 import {
   buildOtelTraceparentEnv,
   isHarnessOtelEnabled
@@ -44,7 +44,7 @@ import {
 import {
   init_file_lock,
   withFileLock
-} from "./cli-wfajtmf7.js";
+} from "./cli-jhm6hzjn.js";
 import {
   CLAUDE_CREDENTIALS_HINT,
   init_credentials,
@@ -63,7 +63,7 @@ import {
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-h1spv8v4.js";
+} from "./cli-wt7ccy4r.js";
 import {
   require_src
 } from "./cli-knd276ed.js";
@@ -1026,7 +1026,7 @@ class ClaudeAdapter {
     if (transport === "sdk" && isClaudeBridgeEffective(sourceEnv)) {
       throw new Error("CLAUDE_TRANSPORT=sdk cannot run with an effective Claude Bridge configuration. Select CLI transport or disable the bridge.");
     }
-    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-9re1g7r2.js") : undefined;
+    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-kkbxtw5q.js") : undefined;
     claudeSdk?.validateClaudeSdkAdditionalArgs([
       ...claudeBinaryArgv.slice(1),
       ...config.additionalArgs ?? []

package/dist/{cli-zn2v3t8v.js → cli-3ddybbbx.js}

@@ -35,7 +35,7 @@ import {
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-h1spv8v4.js";
+} from "./cli-wt7ccy4r.js";
 import {
   __toESM
 } from "./cli-bc05qbss.js";

package/dist/{cli-5anb0ev3.js → cli-3qn4r334.js}

@@ -6,9 +6,10 @@ import {
   fetchInstalledMcpServers
 } from "./cli-tng3131n.js";
 import {
+  ACP_TARGET_IDS,
   getAcpTargetCatalogEntry,
   isAcpTarget
-} from "./cli-fw6vdcq5.js";
+} from "./cli-zp67qg5x.js";
 import {
   applyReasoningEffort
 } from "./cli-ttbsse3f.js";
@@ -40,11 +41,11 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-1kzfvd1z.js";
+} from "./cli-4r1sjfc4.js";
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-h1spv8v4.js";
+} from "./cli-wt7ccy4r.js";
 
 // node_modules/@agentclientprotocol/sdk/dist/schema/index.js
 var AGENT_METHODS = {
@@ -4728,7 +4729,7 @@ function translateAcpSessionNotification(notification) {
 
 // src/providers/acp-targets.ts
 init_src();
-import { mkdtemp } from "node:fs/promises";
+import { mkdir, mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 class AcpTargetResolutionError extends Error {
@@ -4904,6 +4905,46 @@ var geminiTargetProfile = {
     geminiSystemPromptPaths.set(config, path);
   }
 };
+function copilotInstructionsDir(config) {
+  const key = new Bun.CryptoHasher("sha256").update(`${config.agentId}:${config.taskId}:${config.cwd}`).digest("hex").slice(0, 16);
+  return join(tmpdir(), "agent-swarm-copilot-instructions", key);
+}
+var COPILOT_INSTRUCTIONS_FILE = join(".github", "instructions", "agent-swarm.instructions.md");
+var copilotTargetProfile = {
+  target: "copilot",
+  command() {
+    const entry = getAcpTargetCatalogEntry("copilot");
+    return [entry.command, ...entry.args ?? []];
+  },
+  env(config) {
+    const env = baseTargetEnv(config);
+    const entry = getAcpTargetCatalogEntry("copilot");
+    copyEnvKeys(config, env, entry.envKeys);
+    if (config.model.trim())
+      env.COPILOT_MODEL = config.model.trim();
+    env.COPILOT_AUTO_UPDATE = "false";
+    const operatorDirs = readEnv(config, "COPILOT_CUSTOM_INSTRUCTIONS_DIRS")?.trim();
+    env.COPILOT_CUSTOM_INSTRUCTIONS_DIRS = [copilotInstructionsDir(config), operatorDirs].filter(Boolean).join(",");
+    return env;
+  },
+  configuredOptions,
+  async writeSystemPromptArtifact(config) {
+    const dir = copilotInstructionsDir(config);
+    await rm(dir, { recursive: true, force: true });
+    if (!config.systemPrompt)
+      return;
+    await mkdir(join(dir, ".github", "instructions"), { recursive: true });
+    await Bun.write(join(dir, COPILOT_INSTRUCTIONS_FILE), `---
+applyTo: "**"
+---
+
+${config.systemPrompt}
+`);
+  },
+  async cleanupSystemPromptArtifact(config) {
+    await rm(copilotInstructionsDir(config), { recursive: true, force: true });
+  }
+};
 var GROK_ISOLATION_ENV = {
   GROK_DISABLE_AUTOUPDATER: "1",
   GROK_TELEMETRY_ENABLED: "0",
@@ -5067,13 +5108,15 @@ var grokTargetProfile = {
 function resolveAcpTarget(config) {
   const target = readEnv(config, "ACP_TARGET") ?? "custom";
   if (!isAcpTarget(target)) {
-    throw new AcpTargetResolutionError(`Unsupported ACP target "${target}". Supported targets: opencode, gemini, custom.`);
+    throw new AcpTargetResolutionError(`Unsupported ACP target "${target}". Supported targets: ${ACP_TARGET_IDS.join(", ")}.`);
   }
   switch (target) {
     case "opencode":
       return opencodeTargetProfile;
     case "gemini":
       return geminiTargetProfile;
+    case "copilot":
+      return copilotTargetProfile;
     case "custom":
       return customTargetProfile;
   }
@@ -5402,15 +5445,27 @@ class ACPAdapter {
   async createSession(config) {
     const target = this.options.target ?? resolveAcpTarget(config);
     await target.writeSystemPromptArtifact(config);
-    const command = target.command(config);
-    const proc = registerProcessGroup(Bun.spawn(command, {
-      cwd: config.cwd,
-      detached: detachedProcessGroup,
-      env: target.env(config),
-      stdin: "pipe",
-      stdout: "pipe",
-      stderr: "pipe"
-    }));
+    const cleanupArtifact = async () => {
+      try {
+        await target.cleanupSystemPromptArtifact?.(config);
+      } catch (err) {
+        console.warn(`\x1B[33m[acp]\x1B[0m System prompt cleanup failed: ${formatError(err)}`);
+      }
+    };
+    let proc;
+    try {
+      proc = registerProcessGroup(Bun.spawn(target.command(config), {
+        cwd: config.cwd,
+        detached: detachedProcessGroup,
+        env: target.env(config),
+        stdin: "pipe",
+        stdout: "pipe",
+        stderr: "pipe"
+      }));
+    } catch (err) {
+      await cleanupArtifact();
+      throw err;
+    }
     let session = null;
     const preSessionEvents = [];
     const client2 = new SwarmAcpClient((event) => {
@@ -5455,12 +5510,14 @@ class ACPAdapter {
       }, ephemeralToken.tokenId);
       for (const event of preSessionEvents)
         session.emitFromAcp(event);
+      session.waitForCompletion().finally(cleanupArtifact);
       return session;
     } catch (err) {
       if (ephemeralToken && !session) {
         revokeAcpSessionToken(config.apiUrl, config.apiKey, ephemeralToken.tokenId);
       }
       await terminateProcessGroup(proc.pid);
+      await cleanupArtifact();
       throw new Error(`ACP target failed during startup: ${describeTargetError(target, scrubSecrets(formatError(err)))}`);
     }
   }

package/dist/{cli-1kzfvd1z.js → cli-4r1sjfc4.js}

@@ -7,7 +7,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@desplega.ai/agent-swarm",
-    version: "1.165.0",
+    version: "1.166.0",
     description: "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
     keywords: [
       "agent-swarm.dev",
@@ -102,6 +102,8 @@ var init_package = __esm(() => {
       "check:extension-schema": "bun scripts/build-extension-manifest-schema.ts --check",
       "build:extension-catalog": "bun scripts/build-extension-catalog.ts",
       "check:extension-catalog": "bun scripts/build-extension-catalog.ts --check",
+      "build:secret-rules": "bun scripts/gen-secret-rules.ts",
+      "check:secret-rules": "bun scripts/gen-secret-rules.ts --check",
       "build:cli": "bun run scripts/build-cli.ts",
       "mono:build": "turbo run build",
       "mono:test": "turbo run test",
@@ -207,20 +209,21 @@ var init_package = __esm(() => {
     dependencies: {
       "@agentclientprotocol/sdk": "1.7.0",
       "@ai-sdk/openai": "^3.0.41",
-      "@anthropic-ai/claude-agent-sdk": "0.3.292",
-      "@anthropic-ai/sdk": "^0.131.0",
+      "@anthropic-ai/claude-agent-sdk": "0.3.293",
+      "@anthropic-ai/sdk": "^0.132.0",
       "@asteasolutions/zod-to-openapi": "^8.0.0",
       "@aws-sdk/client-bedrock": "3.1048.0",
-      "@cursor/sdk": "1.0.36",
+      "@cursor/sdk": "1.0.37",
       "@desplega.ai/business-use": "^0.4.2",
       "@desplega.ai/localtunnel": "^2.2.0",
       "@earendil-works/pi-agent-core": "^1.0.4",
       "@earendil-works/pi-ai": "^1.0.4",
       "@earendil-works/pi-coding-agent": "^1.0.4",
       "@inkjs/ui": "^2.0.0",
+      "@jitl/quickjs-singlefile-mjs-release-sync": "0.32.0",
       "@linear/sdk": "^77.0.0",
       "@modelcontextprotocol/sdk": "1.29.0",
-      "@openai/codex": "0.160.1",
+      "@openai/codex": "0.161.0",
       "@opencode-ai/sdk": "^1.18.35",
       "@openfort/openfort-node": "^0.9.1",
       "@opentelemetry/api": "^1.9.1",
@@ -244,6 +247,7 @@ var init_package = __esm(() => {
       ink: "^6.5.1",
       oauth4webapi: "^3.8.5",
       openai: "^6.22.0",
+      "quickjs-emscripten-core": "0.32.0",
       react: "19.2.3",
       "react-devtools-core": "^7.0.1",
       "sqlite-vec": "^0.1.9",

package/dist/{cli-ba66wyhy.js → cli-66zh26sp.js}

@@ -18,13 +18,13 @@ import {
   recoverIncompleteRuns,
   repointTrackerSyncBySwarmId,
   resolveLeadOnlyRecoveryAssignment
-} from "./cli-50eg13rj.js";
+} from "./cli-df56tqdw.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-re8z5p8p.js";
 import {
   createApprovalFollowUpTask
-} from "./cli-xtgtyafv.js";
+} from "./cli-jvj6a0cv.js";
 import {
   MAX_EMPTY_POLLS,
   assignUnassignedTaskPending,
@@ -61,7 +61,7 @@ import {
   getUnassignedPoolTasks,
   hasNonTerminalResumeChild,
   hasPendingSteering,
-  init_db,
+  init_db1 as init_db,
   init_steering,
   isAgentEligibleForTask,
   isPoolAffinityEnforcementEnabled,
@@ -75,11 +75,11 @@ import {
   settleSupersededTaskDependents,
   supersedeTask,
   updateAgentStatus
-} from "./cli-qdv8kgz7.js";
+} from "./cli-yshaazs1.js";
 import {
   TERMINAL_TASK_STATUSES,
   init_types
-} from "./cli-9s3h836g.js";
+} from "./cli-xvdgasgy.js";
 import {
   init_registry,
   init_resolver,
@@ -93,7 +93,7 @@ import {
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-h1spv8v4.js";
+} from "./cli-wt7ccy4r.js";
 
 // src/be/approval-sweeps.ts
 init_db();

package/dist/{cli-9xb89xca.js → cli-68r1j4sg.js}

@@ -14,7 +14,7 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-9s3h836g.js";
+} from "./cli-xvdgasgy.js";
 import {
   init_session_templates
 } from "./cli-g5erf0zt.js";
@@ -35,7 +35,7 @@ import {
   init_secret_scrubber,
   registerVolatileSecret,
   scrubSecrets
-} from "./cli-h1spv8v4.js";
+} from "./cli-wt7ccy4r.js";
 import {
   __require
 } from "./cli-bc05qbss.js";
@@ -50,7 +50,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 init_env_flag();
 init_secret_scrubber();
-var CURSOR_SDK_VERSION = "1.0.36";
+var CURSOR_SDK_VERSION = "1.0.37";
 var CURSOR_MCP_SERVER_NAME = "agent-swarm";
 var NATIVE_SYSTEM_PROMPT_ENV = "CURSOR_NATIVE_SYSTEM_PROMPT";
 var FIRST_MESSAGE_TEMPLATE = "system.agent.cursor.first_message";
@@ -58,7 +58,7 @@ function checkCursorCredentials(env) {
   return env.CURSOR_API_KEY?.trim() ? { ready: true, missing: [], satisfiedBy: "env" } : { ready: false, missing: ["CURSOR_API_KEY"], hint: "Set CURSOR_API_KEY for cursor." };
 }
 async function liveTestCursorKey(apiKey) {
-  const { Cursor } = await import("./index-fdk1t4d6.js");
+  const { Cursor } = await import("./index-n0rxa4ca.js");
   try {
     await Cursor.me({ apiKey });
     return { ok: true };
@@ -78,7 +78,7 @@ async function listCursorModels(apiKey) {
   if (modelListCache?.key === apiKey && Date.now() - modelListCache.at < MODEL_LIST_TTL_MS) {
     return modelListCache.models;
   }
-  const { Cursor } = await import("./index-fdk1t4d6.js");
+  const { Cursor } = await import("./index-n0rxa4ca.js");
   const models = await Cursor.models.list({ apiKey });
   modelListCache = { key: apiKey, at: Date.now(), models };
   return models;
@@ -452,7 +452,7 @@ class CursorAdapter {
     if (!apiKey)
       throw new Error("cursor requires CURSOR_API_KEY");
     registerVolatileSecret(apiKey, "CURSOR_API_KEY");
-    const { Agent, JsonlLocalAgentStore } = await import("./index-fdk1t4d6.js");
+    const { Agent, JsonlLocalAgentStore } = await import("./index-n0rxa4ca.js");
     const modelId = config.model || DEFAULT_MODEL_TIER_MAP.cursor.regular;
     const effort = applyReasoningEffort("cursor", modelId, config.reasoningEffort);
     const requested = effort.kind === "cursor-effort" ? effort.reasoningEffort : undefined;

package/dist/{cli-xnzrzets.js → cli-8kgvmkak.js}

@@ -5,8 +5,8 @@ import {
 import {
   getDb,
   getDbClient,
-  init_db
-} from "./cli-qdv8kgz7.js";
+  init_db1 as init_db
+} from "./cli-yshaazs1.js";
 import {
   init_env_flag,
   isEnvFlagEnabled

package/dist/{cli-28smfvbn.js → cli-8t229cmr.js}

@@ -20,7 +20,7 @@ import {
 } from "./cli-32bca7nr.js";
 import {
   summarizeSession
-} from "./cli-5b2fjjzh.js";
+} from "./cli-p4ztb80h.js";
 import {
   hasCodexOAuthPoolSlots
 } from "./cli-bqjfjex4.js";
@@ -51,11 +51,11 @@ import {
   CodexOAuthRefreshError,
   credentialsToAuthJson,
   getValidCodexOAuth
-} from "./cli-ftry7975.js";
+} from "./cli-feh3dkah.js";
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-9s3h836g.js";
+} from "./cli-xvdgasgy.js";
 import {
   init_runtime_model_catalog,
   init_src,
@@ -64,11 +64,11 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-1kzfvd1z.js";
+} from "./cli-4r1sjfc4.js";
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-h1spv8v4.js";
+} from "./cli-wt7ccy4r.js";
 import {
   __require
 } from "./cli-bc05qbss.js";

package/dist/{cli-9866bd07.js → cli-aqcey741.js}

@@ -1,7 +1,7 @@
 import {
   init_package,
   package_default
-} from "./cli-1kzfvd1z.js";
+} from "./cli-4r1sjfc4.js";
 
 // src/commands/shared/client-config.ts
 init_package();

package/dist/{cli-90v942q1.js → cli-cpfmqz3n.js}

@@ -5,12 +5,12 @@ import {
   instantFlush,
   requestSlackThreadSteering,
   wasEventSeen
-} from "./cli-8gpbwy09.js";
+} from "./cli-dw2q9f7g.js";
 import {
   enrichSlackUserEmail,
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-j0pdrmwg.js";
+} from "./cli-x7kpr72a.js";
 import {
   TaskCreationBlockedError,
   broadcastMatches,
@@ -23,14 +23,14 @@ import {
   hasOtherUserMention,
   notifySlackFileFailures,
   routeMessage
-} from "./cli-50eg13rj.js";
+} from "./cli-df56tqdw.js";
 import {
   ackSlackMessage,
   buildTreeBlocks,
   ensureSlackThreadTree,
   isSlackRenderV2Enabled,
   registerTreeMessage
-} from "./cli-0n4fasz0.js";
+} from "./cli-ecknp7p1.js";
 import {
   getAgentById,
   getAgentWorkingOnThread,
@@ -39,11 +39,11 @@ import {
   getMostRecentTaskInThread,
   getTasksByAgentId,
   init_context_key,
-  init_db,
+  init_db1 as init_db,
   isExtensionAgent,
   reactionName,
   slackContextKey
-} from "./cli-qdv8kgz7.js";
+} from "./cli-yshaazs1.js";
 import {
   init_resolver,
   resolveTemplate
@@ -61,11 +61,11 @@ import {
 import {
   init_event_bus,
   workflowEventBus
-} from "./cli-hpryr6em.js";
+} from "./cli-mb75wpxf.js";
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-h1spv8v4.js";
+} from "./cli-wt7ccy4r.js";
 import {
   __callDispose,
   __using