@desplega.ai/agent-swarm 1.165.0 → 1.167.0

package/dist/{cli-krqm5f11.js → cli-xezn9nkh.js}

@@ -7,7 +7,7 @@ import {
   replaceTabs,
   truncateMiddle,
   writeOutputFile
-} from "./cli-8ssjez7e.js";
+} from "./cli-rhy7z1rp.js";
 import {
   Container,
   Spacer,
@@ -17,7 +17,7 @@ import {
   keyHint,
   normalizePath,
   stripBom
-} from "./cli-cwxhbf43.js";
+} from "./cli-5t5my0h8.js";
 import {
   require_cross_spawn
 } from "./cli-5bfdm1ah.js";
@@ -2647,6 +2647,7 @@ class StreamableHttpTransport extends TransportEvents {
   sessionIdValue;
   protocolVersion;
   getStreamStarted = false;
+  lastToken;
   constructor(options) {
     super();
     this.options = Object.freeze({ ...options, headers: options.headers ? { ...options.headers } : undefined });
@@ -2705,16 +2706,14 @@ class StreamableHttpTransport extends TransportEvents {
     this.closed = true;
     this.controller.abort();
     if (this.started && this.sessionIdValue) {
-      const controller = new AbortController;
-      const timeout = setTimeout(() => controller.abort(), 1000);
       try {
-        const { headers } = await this.headers();
-        await this.fetch(this.url, { method: "DELETE", headers, signal: controller.signal }).then(discard).catch(() => {
-          return;
+        const response = await this.fetch(this.url, {
+          method: "DELETE",
+          headers: this.buildHeaders({}, this.lastToken),
+          signal: AbortSignal.timeout(1000)
         });
-      } catch {} finally {
-        clearTimeout(timeout);
-      }
+        await discard(response);
+      } catch {}
     }
     this.emitClose();
   }
@@ -2738,6 +2737,11 @@ class StreamableHttpTransport extends TransportEvents {
     }
   }
   async headers(extra = {}) {
+    const token = await this.options.authProvider?.token();
+    this.lastToken = token;
+    return { headers: this.buildHeaders(extra, token), ...token ? { token } : {} };
+  }
+  buildHeaders(extra, token) {
     const headers = new Headers(this.options.headers);
     for (const [name, value] of Object.entries(extra))
       headers.set(name, value);
@@ -2745,10 +2749,9 @@ class StreamableHttpTransport extends TransportEvents {
       headers.set("Mcp-Session-Id", this.sessionIdValue);
     if (this.protocolVersion)
       headers.set("MCP-Protocol-Version", this.protocolVersion);
-    const token = await this.options.authProvider?.token();
     if (token)
       headers.set("Authorization", `Bearer ${token}`);
-    return { headers, ...token ? { token } : {} };
+    return headers;
   }
   captureSession(response) {
     const sessionId = response.headers.get("mcp-session-id");
@@ -3829,4 +3832,4 @@ function readStoredCredential(providerId, authPath = join(getAgentDir(), "auth.j
   }
 }
 
-export { createToolNameMatcher, LIST_MCP_RESOURCES_TOOL, LIST_MCP_RESOURCE_TEMPLATES_TOOL, READ_MCP_RESOURCE_TOOL, isMcpToolName, mcpNamespace, getMcpToolExposure, validateMcpServerConfig, McpServerRegistry, getConfigValueEnvVarNames, isCommandConfigValue, isConfigValueConfigured, resolveConfigValueOrThrow, resolveHeadersOrThrow, require_proper_lockfile, operationSignal, raceWithAbortSignal, FileAuthStorageBackend, ReadOnlyAuthStorage, AuthStorage, readStoredCredential, JSON_RPC_ERROR_CODES, McpError, isObject, LATEST_PROTOCOL_VERSION, McpClient, StdioTransport, McpHttpError, McpAuthRequiredError, McpSessionExpiredError, StreamableHttpTransport, createMcpToolName, createMcpToolDefinition, createMcpToolRenderers, isMcpAppResource, createMcpResourceToolDefinitions };
+export { require_proper_lockfile, createToolNameMatcher, LIST_MCP_RESOURCES_TOOL, LIST_MCP_RESOURCE_TEMPLATES_TOOL, READ_MCP_RESOURCE_TOOL, isMcpToolName, mcpNamespace, getMcpToolExposure, validateMcpServerConfig, McpServerRegistry, getConfigValueEnvVarNames, isCommandConfigValue, isConfigValueConfigured, resolveConfigValueOrThrow, resolveHeadersOrThrow, operationSignal, raceWithAbortSignal, FileAuthStorageBackend, ReadOnlyAuthStorage, AuthStorage, readStoredCredential, JSON_RPC_ERROR_CODES, McpError, isObject, LATEST_PROTOCOL_VERSION, McpClient, StdioTransport, McpHttpError, McpAuthRequiredError, McpSessionExpiredError, StreamableHttpTransport, createMcpToolName, createMcpToolDefinition, createMcpToolRenderers, isMcpAppResource, createMcpResourceToolDefinitions };

package/dist/{cli-8kt0bmgx.js → cli-xf713zz0.js}

@@ -1,7 +1,7 @@
 import {
   clampThinkingLevel,
   getSystemMessageText
-} from "./cli-nexwh8zg.js";
+} from "./cli-g7k7zbcz.js";
 
 // node_modules/@earendil-works/pi-ai/dist/api/constrained-sampling.js
 class UnsupportedStrictJsonSchemaError extends Error {
@@ -227,7 +227,7 @@ function createGrammarToolInputProperties(tools, supportsOpenAIGrammarTools) {
 }
 
 // node_modules/@earendil-works/pi-ai/dist/utils/estimate.js
-var CHARS_PER_TOKEN = 4;
+var CHARS_PER_TOKEN = 3.5;
 var ESTIMATED_IMAGE_CHARS = 4800;
 function calculateContextTokens(usage) {
   return usage.totalTokens || usage.input + usage.output + usage.cacheRead + usage.cacheWrite;

package/dist/{cli-x7afk5wm.js → cli-xvc3q9br.js}

@@ -3,7 +3,7 @@ import {
   registerVolatileSecret,
   scrubObject,
   scrubSecrets
-} from "./cli-h1spv8v4.js";
+} from "./cli-wt7ccy4r.js";
 
 // src/x/composio.ts
 init_secret_scrubber();

package/dist/{cli-9s3h836g.js → cli-xvdgasgy.js}

@@ -2243,7 +2243,7 @@ var init_types = __esm(() => {
     })
   ]);
   AgentAcpStatusSchema = exports_zod.object({
-    target: exports_zod.enum(["opencode", "custom"]),
+    target: exports_zod.enum(["opencode", "gemini", "copilot", "custom"]),
     configOptions: exports_zod.array(AcpSessionConfigOptionSchema),
     reportedAt: exports_zod.number()
   }).openapi("AgentAcpStatus");

package/dist/{cli-j0pdrmwg.js → cli-y0kjpfm9.js}

@@ -4,12 +4,12 @@ import {
   linkIdentity,
   recordUnmappedIdentity,
   resolveIdentity
-} from "./cli-50eg13rj.js";
+} from "./cli-wydz3feg.js";
 import {
   getKv,
-  init_db,
+  init_db1 as init_db,
   upsertKv
-} from "./cli-qdv8kgz7.js";
+} from "./cli-mkdsy1nq.js";
 
 // src/slack/enrich.ts
 init_db();

package/dist/{cli-6zcfw0x7.js → cli-y195hv1a.js}

@@ -1,6 +1,6 @@
 import {
   theme
-} from "./cli-cwxhbf43.js";
+} from "./cli-5t5my0h8.js";
 
 // node_modules/@earendil-works/pi-coding-agent/dist/modes/interactive/components/armin.js
 var ARMIN_WIDTH = 31;

package/dist/{cli-amwhs8h2.js → cli-ykt8f7va.js}

@@ -2,25 +2,28 @@ import {
   ACPAdapter,
   grokTargetProfile,
   isGrokOpenRouterModel
-} from "./cli-5anb0ev3.js";
+} from "./cli-cexctgn5.js";
 import {
-  getOpenRouterBaseUrl
-} from "./cli-3dpj7atn.js";
+  getOpenRouterAttributionHeaders,
+  getOpenRouterBaseUrl,
+  init_openrouter_base_url
+} from "./cli-a35hzdve.js";
 import {
   init_src,
   normalizeGrokModel
-} from "./cli-zsh093hk.js";
+} from "./cli-014vns2y.js";
 import {
   init_secret_scrubber,
   registerVolatileSecret
-} from "./cli-h1spv8v4.js";
+} from "./cli-wt7ccy4r.js";
 
 // src/providers/grok-adapter.ts
 init_src();
+init_openrouter_base_url();
+init_secret_scrubber();
 import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-init_secret_scrubber();
 function checkGrokCredentials(env) {
   return env.XAI_API_KEY?.trim() || env.OPENROUTER_API_KEY?.trim() ? { ready: true, missing: [], satisfiedBy: "env" } : {
     ready: false,
@@ -43,13 +46,22 @@ function grokOpenRouterModel(model, env) {
   const id = model.trim();
   if (!isGrokOpenRouterModel(id))
     return null;
+  const baseUrl = getOpenRouterBaseUrl(env);
   return {
     id,
     model: id.slice("openrouter/".length),
-    baseUrl: getOpenRouterBaseUrl(env),
-    envKey: "OPENROUTER_API_KEY"
+    baseUrl,
+    envKey: "OPENROUTER_API_KEY",
+    headers: getOpenRouterAttributionHeaders(baseUrl, env)
   };
 }
+function tomlInlineTable(key, entries) {
+  const pairs = Object.entries(entries ?? {});
+  if (pairs.length === 0)
+    return [];
+  const body = pairs.map(([k, v]) => `${JSON.stringify(k)} = ${JSON.stringify(v)}`).join(", ");
+  return [`${key} = { ${body} }`];
+}
 function buildGrokConfigToml(disabledPlugins, customModel = null) {
   const list = disabledPlugins.map((name) => JSON.stringify(name)).join(", ");
   const modelBlock = customModel ? [
@@ -58,7 +70,8 @@ function buildGrokConfigToml(disabledPlugins, customModel = null) {
     `model = ${JSON.stringify(customModel.model)}`,
     `base_url = ${JSON.stringify(customModel.baseUrl)}`,
     `env_key = ${JSON.stringify(customModel.envKey)}`,
-    `api_backend = "chat_completions"`
+    `api_backend = "chat_completions"`,
+    ...tomlInlineTable("extra_headers", customModel.headers)
   ] : [];
   return [
     "[cli]",

package/dist/{cli-1kzfvd1z.js → cli-ymmc1zxg.js}

@@ -7,7 +7,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@desplega.ai/agent-swarm",
-    version: "1.165.0",
+    version: "1.167.0",
     description: "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
     keywords: [
       "agent-swarm.dev",
@@ -102,6 +102,8 @@ var init_package = __esm(() => {
       "check:extension-schema": "bun scripts/build-extension-manifest-schema.ts --check",
       "build:extension-catalog": "bun scripts/build-extension-catalog.ts",
       "check:extension-catalog": "bun scripts/build-extension-catalog.ts --check",
+      "build:secret-rules": "bun scripts/gen-secret-rules.ts",
+      "check:secret-rules": "bun scripts/gen-secret-rules.ts --check",
       "build:cli": "bun run scripts/build-cli.ts",
       "mono:build": "turbo run build",
       "mono:test": "turbo run test",
@@ -152,8 +154,8 @@ var init_package = __esm(() => {
       "start:portless": "portless api.swarm bun --expose-gc src/http.ts",
       inspector: "bunx @modelcontextprotocol/inspector --transport stdio bun src/stdio.ts",
       "inspector:http": "bunx @modelcontextprotocol/inspector --transport http https://api.swarm.localhost:1355/mcp",
-      lint: "biome check src apps/evals packages/ui-e2e packages/model-routing",
-      "lint:fix": "biome check --write src apps/evals packages/ui-e2e packages/model-routing",
+      lint: "biome check src apps/evals packages/ui-e2e packages/model-routing packages/model-catalog",
+      "lint:fix": "biome check --write src apps/evals packages/ui-e2e packages/model-routing packages/model-catalog",
       format: "biome format --write src",
       "build:binary": "bun build ./src/cli.tsx ./src/providers/pi-binary-root/src/extensions/codemode/worker.ts --root ./src/providers/pi-binary-root --compile --bytecode --format=esm --compile-exec-argv='--expose-gc' --target=bun-linux-x64 --outfile ./dist/agent-swarm",
       "build:binary:arm64": "bun build ./src/cli.tsx ./src/providers/pi-binary-root/src/extensions/codemode/worker.ts --root ./src/providers/pi-binary-root --compile --bytecode --format=esm --compile-exec-argv='--expose-gc' --target=bun-linux-arm64 --outfile ./dist/agent-swarm",
@@ -207,20 +209,21 @@ var init_package = __esm(() => {
     dependencies: {
       "@agentclientprotocol/sdk": "1.7.0",
       "@ai-sdk/openai": "^3.0.41",
-      "@anthropic-ai/claude-agent-sdk": "0.3.292",
-      "@anthropic-ai/sdk": "^0.131.0",
+      "@anthropic-ai/claude-agent-sdk": "0.3.293",
+      "@anthropic-ai/sdk": "^0.132.1",
       "@asteasolutions/zod-to-openapi": "^8.0.0",
       "@aws-sdk/client-bedrock": "3.1048.0",
-      "@cursor/sdk": "1.0.36",
+      "@cursor/sdk": "1.0.37",
       "@desplega.ai/business-use": "^0.4.2",
       "@desplega.ai/localtunnel": "^2.2.0",
-      "@earendil-works/pi-agent-core": "^1.0.4",
-      "@earendil-works/pi-ai": "^1.0.4",
-      "@earendil-works/pi-coding-agent": "^1.0.4",
+      "@earendil-works/pi-agent-core": "^1.1.0",
+      "@earendil-works/pi-ai": "^1.1.0",
+      "@earendil-works/pi-coding-agent": "^1.1.0",
       "@inkjs/ui": "^2.0.0",
+      "@jitl/quickjs-singlefile-mjs-release-sync": "0.32.0",
       "@linear/sdk": "^77.0.0",
-      "@modelcontextprotocol/sdk": "1.29.0",
-      "@openai/codex": "0.160.1",
+      "@modelcontextprotocol/sdk": "1.31.0",
+      "@openai/codex": "0.161.0",
       "@opencode-ai/sdk": "^1.18.35",
       "@openfort/openfort-node": "^0.9.1",
       "@opentelemetry/api": "^1.9.1",
@@ -244,6 +247,7 @@ var init_package = __esm(() => {
       ink: "^6.5.1",
       oauth4webapi: "^3.8.5",
       openai: "^6.22.0",
+      "quickjs-emscripten-core": "0.32.0",
       react: "19.2.3",
       "react-devtools-core": "^7.0.1",
       "sqlite-vec": "^0.1.9",

package/dist/{cli-xnzrzets.js → cli-ypgba1a8.js}

@@ -5,8 +5,8 @@ import {
 import {
   getDb,
   getDbClient,
-  init_db
-} from "./cli-qdv8kgz7.js";
+  init_db1 as init_db
+} from "./cli-mkdsy1nq.js";
 import {
   init_env_flag,
   isEnvFlagEnabled

package/dist/{cli-bdv39kgj.js → cli-z1dqhc9y.js}

@@ -1,13 +1,13 @@
 import {
   materializeClaudeMd,
   stopClaudeMd
-} from "./cli-zvckv750.js";
+} from "./cli-69egj654.js";
 import {
   guardGhPrBody
 } from "./cli-v6vv7dy8.js";
 import {
   summarizeSession
-} from "./cli-5b2fjjzh.js";
+} from "./cli-r7eeddkq.js";
 import {
   checkToolLoop,
   clearToolHistory
@@ -29,7 +29,7 @@ import {
   init_profile_sync,
   readIdentityBaselines,
   warnProfileFileTooLarge
-} from "./cli-wfajtmf7.js";
+} from "./cli-mxvnnv5q.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getMcpBaseUrl,
@@ -38,11 +38,11 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-1kzfvd1z.js";
+} from "./cli-ymmc1zxg.js";
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-h1spv8v4.js";
+} from "./cli-wt7ccy4r.js";
 
 // src/hooks/hook.ts
 init_package();
@@ -511,9 +511,18 @@ async function handleHook() {
     }
   };
   const outputBlockResponse = (reason) => {
+    const response = msg.hook_event_name === "PreToolUse" ? {
+      hookSpecificOutput: {
+        hookEventName: "PreToolUse",
+        permissionDecision: "deny",
+        permissionDecisionReason: reason
+      }
+    } : { decision: "block", reason };
+    console.log(JSON.stringify(response));
+  };
+  const outputToolContext = (hookEventName, additionalContext) => {
     const response = {
-      decision: "block",
-      reason
+      hookSpecificOutput: { hookEventName, additionalContext }
     };
     console.log(JSON.stringify(response));
   };
@@ -597,7 +606,13 @@ async function handleHook() {
   };
   await ping();
   const agentInfo = await getAgentInfo();
-  if (agentInfo) {
+  if (msg.hook_event_name === "UserPromptSubmit" && agentInfo && !agentInfo.isLead && agentInfo.status === "busy") {
+    if (await checkAndBlockIfCancelled(true)) {
+      return;
+    }
+  }
+  const isToolEvent = msg.hook_event_name === "PreToolUse" || msg.hook_event_name === "PostToolUse";
+  if (agentInfo && !isToolEvent) {
     console.log(`You are registered as ${agentInfo.isLead ? "lead" : "worker"} agent "${agentInfo.name}" (ID: ${agentInfo.id}, status: ${agentInfo.status}).`);
     if (agentInfo.inbox) {
       const tray = formatSystemTray(agentInfo.inbox);
@@ -606,7 +621,7 @@ async function handleHook() {
       }
     }
   } else if (shouldShowRegistrationNudge({
-    agentInfoPresent: false,
+    agentInfoPresent: Boolean(agentInfo),
     eventType: msg.hook_event_name,
     hasAgentIdHeader: hasAgentIdHeader()
   })) {
@@ -715,6 +730,7 @@ You do not have a pre-defined agent ID, you will receive one when you join the s
           return;
         }
       }
+      let loopWarning;
       if (agentInfo && !agentInfo.isLead && agentInfo.status === "busy") {
         const loopTaskFile = await readTaskFile();
         if (loopTaskFile?.taskId && msg.tool_name && msg.tool_input) {
@@ -724,7 +740,7 @@ You do not have a pre-defined agent ID, you will receive one when you join the s
             return;
           }
           if (loopResult.severity === "warning" && loopResult.reason) {
-            console.log(`Warning: ${loopResult.reason}`);
+            loopWarning = `Warning: ${loopResult.reason}`;
           }
         }
       }
@@ -735,6 +751,9 @@ You do not have a pre-defined agent ID, you will receive one when you join the s
           return;
         }
       }
+      if (loopWarning) {
+        outputToolContext("PreToolUse", loopWarning);
+      }
       break;
     }
     case "PostToolUse":
@@ -752,7 +771,7 @@ You do not have a pre-defined agent ID, you will receive one when you join the s
           method: "PUT",
           headers: mcpConfig.headers
         }).catch((e) => {
-          console.debug("Failed to update agent activity timestamp:", e);
+          console.error("Failed to update agent activity timestamp:", e);
         });
       }
       if (agentInfo) {
@@ -797,19 +816,11 @@ You do not have a pre-defined agent ID, you will receive one when you join the s
         if (agentInfo.isLead) {
           if (msg.tool_name?.endsWith("send-task")) {
             const maybeTaskId = msg.tool_response?.task?.id;
-            console.log(`Task sent successfully.${maybeTaskId ? ` Task ID: ${maybeTaskId}.` : ""} Monitor progress using the get-task-details tool periodically.`);
+            outputToolContext("PostToolUse", `Task sent successfully.${maybeTaskId ? ` Task ID: ${maybeTaskId}.` : ""} Monitor progress using the get-task-details tool periodically.`);
           }
         }
       }
       break;
-    case "UserPromptSubmit": {
-      if (agentInfo && !agentInfo.isLead && agentInfo.status === "busy") {
-        if (await checkAndBlockIfCancelled(true)) {
-          return;
-        }
-      }
-      break;
-    }
     case "Stop":
       try {
         const pm2ListOutput = await Bun.$`pm2 jlist 2>/dev/null || echo "[]"`.text();

package/dist/{cli-fw6vdcq5.js → cli-zp67qg5x.js}

@@ -1,5 +1,5 @@
 // src/providers/acp-target-catalog.ts
-var ACP_TARGET_IDS = ["opencode", "gemini", "custom"];
+var ACP_TARGET_IDS = ["opencode", "gemini", "copilot", "custom"];
 var ACP_TARGET_CATALOG = [
   {
     id: "opencode",
@@ -41,6 +41,39 @@ var ACP_TARGET_CATALOG = [
     ],
     knobs: [{ id: "model", label: "Model", category: "model" }]
   },
+  {
+    id: "copilot",
+    label: "GitHub Copilot CLI",
+    description: "GitHub Copilot CLI's ACP server, launched with `copilot --acp`. Uses a Copilot-entitled COPILOT_GITHUB_TOKEN, or a BYOK provider via COPILOT_PROVIDER_*.",
+    command: "copilot",
+    args: ["--acp"],
+    envKeys: [
+      "COPILOT_GITHUB_TOKEN",
+      "COPILOT_GH_HOST",
+      "GH_HOST",
+      "COPILOT_HOME",
+      "COPILOT_MODEL",
+      "COPILOT_AUTO_TIER",
+      "COPILOT_OFFLINE",
+      "COPILOT_PROVIDER_BASE_URL",
+      "COPILOT_PROVIDER_TYPE",
+      "COPILOT_PROVIDER_API_KEY",
+      "COPILOT_PROVIDER_API_KEY_COMMAND",
+      "COPILOT_PROVIDER_BEARER_TOKEN",
+      "COPILOT_PROVIDER_WIRE_API",
+      "COPILOT_PROVIDER_TRANSPORT",
+      "COPILOT_PROVIDER_AZURE_API_VERSION",
+      "COPILOT_PROVIDER_MODEL_ID",
+      "COPILOT_PROVIDER_WIRE_MODEL",
+      "COPILOT_PROVIDER_MAX_PROMPT_TOKENS",
+      "COPILOT_PROVIDER_MAX_OUTPUT_TOKENS",
+      "COPILOT_PROVIDER_HEADERS",
+      "HTTP_PROXY",
+      "HTTPS_PROXY",
+      "NO_PROXY"
+    ],
+    knobs: [{ id: "model", label: "Model", category: "model" }]
+  },
   {
     id: "custom",
     label: "Custom",

package/dist/{cli-qbksc292.js → cli-zy39d433.js}

@@ -72,6 +72,8 @@ async function retryProviderRequest(request, options = {}) {
         throw createAbortError();
       if (retriesRemaining <= 0 || !isProviderError(error) || !isRetryableProviderError(error))
         throw error;
+      if (error.status !== undefined && options.noRetryStatuses?.includes(error.status))
+        throw error;
       const retryIndex = maxRetries - retriesRemaining;
       retriesRemaining--;
       await abortableSleep(getRetryDelayMs(error, retryIndex, options.maxRetryDelayMs), options.signal);