@desplega.ai/agent-swarm 1.166.0 → 1.167.0

package/dist/{worker-qa9fkz5s.js → worker-x8j8c9sx.js}

@@ -1,98 +1,98 @@
 import {
   runAgent
-} from "./cli-vzc73wet.js";
+} from "./cli-cf2vgn9d.js";
 import"./cli-9q3wt23f.js";
-import"./cli-68r1j4sg.js";
-import"./cli-fn697bnt.js";
-import"./cli-3qn4r334.js";
-import"./cli-8t229cmr.js";
-import"./cli-h3x613ze.js";
+import"./cli-6bpvv8h4.js";
+import"./cli-ykt8f7va.js";
+import"./cli-cexctgn5.js";
+import"./cli-9k7mqz00.js";
+import"./cli-m7vmeepg.js";
+import"./cli-tc5zec7v.js";
 import"./cli-hsxj0yar.js";
 import"./cli-hf5s9pgf.js";
-import"./cli-3ddybbbx.js";
-import"./cli-v2a8x45d.js";
-import"./cli-mwegs4af.js";
-import"./cli-9k7mqz00.js";
+import"./cli-jvmtxqtc.js";
 import"./cli-gt4hxb8p.js";
-import"./cli-0qjcsxgz.js";
-import"./cli-rsy933yz.js";
-import"./cli-y59h2pk9.js";
-import"./cli-v6vv7dy8.js";
-import"./cli-q2j38vre.js";
-import"./cli-zm7njwzd.js";
-import"./cli-ptcz1cqy.js";
-import"./cli-32bca7nr.js";
-import"./cli-p4ztb80h.js";
-import"./cli-hp1n6zq3.js";
-import"./cli-tng3131n.js";
+import"./cli-pkj1w46r.js";
+import"./cli-ty4bzkqr.js";
 import"./cli-5bfdm1ah.js";
 import"./cli-efnd2kce.js";
 import"./cli-zp67qg5x.js";
 import"./cli-bqjfjex4.js";
+import"./cli-mxry91sa.js";
+import"./cli-z1dqhc9y.js";
+import"./cli-69egj654.js";
+import"./cli-v6vv7dy8.js";
+import"./cli-q2j38vre.js";
+import"./cli-r7eeddkq.js";
+import"./cli-hp1n6zq3.js";
+import"./cli-tng3131n.js";
+import"./cli-zm7njwzd.js";
+import"./cli-ptcz1cqy.js";
+import"./cli-7avy4v8w.js";
 import"./cli-eree7rnv.js";
 import"./cli-2pdaysab.js";
-import"./cli-ttbsse3f.js";
-import"./cli-zy7vwsne.js";
+import"./cli-tmhsxhb8.js";
+import"./cli-5qkcdv8c.js";
 import"./cli-dpvkp2et.js";
 import {
   getEnabledCapabilities
-} from "./cli-df56tqdw.js";
+} from "./cli-wydz3feg.js";
 import"./cli-xvc3q9br.js";
 import"./cli-mv2520nm.js";
 import"./cli-w0bwte75.js";
 import"./cli-re8z5p8p.js";
-import"./cli-0nhdwxd5.js";
-import"./cli-rggdq8wq.js";
-import"./cli-ysnyhws9.js";
-import"./cli-jvj6a0cv.js";
+import"./cli-tx2zvn23.js";
+import"./cli-p8rt8spp.js";
+import"./cli-v1pwxreq.js";
+import"./cli-577bxkf6.js";
 import"./cli-epan13p1.js";
 import"./cli-f14fvzag.js";
+import"./cli-7mhy3ths.js";
+import"./cli-v1w7pbd8.js";
 import"./cli-zt3w1cn1.js";
-import"./cli-f2n17zhp.js";
-import"./cli-feh3dkah.js";
-import"./cli-3dpj7atn.js";
-import"./cli-2x0e561b.js";
-import"./cli-pkke6geq.js";
+import"./cli-km4x66j0.js";
 import"./cli-rb9m6rpe.js";
+import"./cli-2x0e561b.js";
+import"./cli-kw0jcfje.js";
 import"./cli-mzfth0bp.js";
-import"./cli-j2jbr8af.js";
 import"./cli-fad8m16k.js";
 import"./cli-bsakbbkm.js";
 import"./cli-zxg80zs9.js";
 import"./cli-51tf7ac3.js";
 import"./cli-ydt3zkwv.js";
-import"./cli-ecknp7p1.js";
+import"./cli-c8r99akr.js";
 import"./cli-q51yprfq.js";
 import"./cli-3er6gcsn.js";
 import"./cli-yatxqynm.js";
-import"./cli-b0f70z24.js";
-import"./cli-nexwh8zg.js";
+import"./cli-mn8qkd8v.js";
+import"./cli-g7k7zbcz.js";
 import"./cli-btbzvq95.js";
 import"./cli-1m2e086m.js";
-import"./cli-bzr0ftht.js";
+import"./cli-wnb9b2g3.js";
 import"./cli-bd957dgb.js";
 import"./cli-pzxba7gw.js";
-import"./cli-8kgvmkak.js";
+import"./cli-ypgba1a8.js";
 import"./cli-rfphkzh5.js";
-import"./cli-yshaazs1.js";
-import"./cli-xvdgasgy.js";
+import"./cli-mkdsy1nq.js";
 import"./cli-3qhyh31j.js";
-import"./cli-jhm6hzjn.js";
+import"./cli-xvdgasgy.js";
+import"./cli-mxvnnv5q.js";
 import"./cli-7mm2r1kp.js";
 import"./cli-g5erf0zt.js";
 import"./cli-dmtrxqhg.js";
-import"./cli-tadfgd0t.js";
-import"./cli-ywybs5as.js";
-import"./cli-gd4favx9.js";
 import"./cli-agamgm0p.js";
 import"./cli-5c2j5yvx.js";
 import"./cli-1a2j50m0.js";
+import"./cli-tadfgd0t.js";
+import"./cli-ywybs5as.js";
 import"./cli-f9w1semm.js";
+import"./cli-a35hzdve.js";
+import"./cli-gd4favx9.js";
 import"./cli-ej6gbxfb.js";
-import"./cli-zsh093hk.js";
+import"./cli-014vns2y.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-4r1sjfc4.js";
+import"./cli-ymmc1zxg.js";
 import"./cli-mb75wpxf.js";
 import"./cli-zf8jjwex.js";
 import"./cli-wt7ccy4r.js";

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "1.166.0",
+    "version": "1.167.0",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "1.166.0",
+  "version": "1.167.0",
   "description": "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
   "keywords": [
     "agent-swarm.dev",
@@ -147,8 +147,8 @@
     "start:portless": "portless api.swarm bun --expose-gc src/http.ts",
     "inspector": "bunx @modelcontextprotocol/inspector --transport stdio bun src/stdio.ts",
     "inspector:http": "bunx @modelcontextprotocol/inspector --transport http https://api.swarm.localhost:1355/mcp",
-    "lint": "biome check src apps/evals packages/ui-e2e packages/model-routing",
-    "lint:fix": "biome check --write src apps/evals packages/ui-e2e packages/model-routing",
+    "lint": "biome check src apps/evals packages/ui-e2e packages/model-routing packages/model-catalog",
+    "lint:fix": "biome check --write src apps/evals packages/ui-e2e packages/model-routing packages/model-catalog",
     "format": "biome format --write src",
     "build:binary": "bun build ./src/cli.tsx ./src/providers/pi-binary-root/src/extensions/codemode/worker.ts --root ./src/providers/pi-binary-root --compile --bytecode --format=esm --compile-exec-argv='--expose-gc' --target=bun-linux-x64 --outfile ./dist/agent-swarm",
     "build:binary:arm64": "bun build ./src/cli.tsx ./src/providers/pi-binary-root/src/extensions/codemode/worker.ts --root ./src/providers/pi-binary-root --compile --bytecode --format=esm --compile-exec-argv='--expose-gc' --target=bun-linux-arm64 --outfile ./dist/agent-swarm",
@@ -203,19 +203,19 @@
     "@agentclientprotocol/sdk": "1.7.0",
     "@ai-sdk/openai": "^3.0.41",
     "@anthropic-ai/claude-agent-sdk": "0.3.293",
-    "@anthropic-ai/sdk": "^0.132.0",
+    "@anthropic-ai/sdk": "^0.132.1",
     "@asteasolutions/zod-to-openapi": "^8.0.0",
     "@aws-sdk/client-bedrock": "3.1048.0",
     "@cursor/sdk": "1.0.37",
     "@desplega.ai/business-use": "^0.4.2",
     "@desplega.ai/localtunnel": "^2.2.0",
-    "@earendil-works/pi-agent-core": "^1.0.4",
-    "@earendil-works/pi-ai": "^1.0.4",
-    "@earendil-works/pi-coding-agent": "^1.0.4",
+    "@earendil-works/pi-agent-core": "^1.1.0",
+    "@earendil-works/pi-ai": "^1.1.0",
+    "@earendil-works/pi-coding-agent": "^1.1.0",
     "@inkjs/ui": "^2.0.0",
     "@jitl/quickjs-singlefile-mjs-release-sync": "0.32.0",
     "@linear/sdk": "^77.0.0",
-    "@modelcontextprotocol/sdk": "1.29.0",
+    "@modelcontextprotocol/sdk": "1.31.0",
     "@openai/codex": "0.161.0",
     "@opencode-ai/sdk": "^1.18.35",
     "@openfort/openfort-node": "^0.9.1",

package/src/be/memory/providers/openai-embedding.ts

@@ -1,4 +1,5 @@
 import OpenAI from "openai";
+import { getOpenRouterAttributionHeaders } from "../../../utils/openrouter-base-url";
 import { DEFAULT_EMBEDDING_MODEL, EMBEDDING_DIMENSIONS } from "../constants";
 import type { EmbeddingProvider } from "../types";
 
@@ -34,11 +35,15 @@ export class OpenAIEmbeddingProvider implements EmbeddingProvider {
 
   private getClient(): OpenAI | null {
     if (!this.apiKey) return null;
-    if (!this.client)
+    if (!this.client) {
+      const baseURL = process.env.EMBEDDING_API_BASE_URL; // Optional custom base URL
       this.client = new OpenAI({
-        baseURL: process.env.EMBEDDING_API_BASE_URL, // Optional custom base URL
+        baseURL,
         apiKey: this.apiKey,
+        // Only an openrouter.ai base URL gets attribution; OpenAI and gateways get none.
+        defaultHeaders: getOpenRouterAttributionHeaders(baseURL ?? ""),
       });
+    }
     return this.client;
   }
 

package/src/be/memory/raters/llm-summarizer.ts

@@ -12,7 +12,10 @@
  */
 import { z } from "zod";
 import { MEMORY_RATER_DEFAULT_MODEL } from "../../../utils/internal-ai/models";
-import { getOpenRouterBaseUrl } from "../../../utils/openrouter-base-url";
+import {
+  getOpenRouterAttributionHeaders,
+  getOpenRouterBaseUrl,
+} from "../../../utils/openrouter-base-url";
 import { type SummaryWithRatings, SummaryWithRatingsSchema } from "./llm";
 
 /**
@@ -150,11 +153,13 @@ export async function runMemoryRater(opts: RunMemoryRaterOpts): Promise<RunMemor
   const model = opts.model ?? getMemoryRaterModel();
   const responseLogCap = opts.responseLogCap ?? 200;
 
+  const url = openRouterChatCompletionsUrl();
   let res: Response;
   try {
-    res = await fetchFn(openRouterChatCompletionsUrl(), {
+    res = await fetchFn(url, {
       method: "POST",
       headers: {
+        ...getOpenRouterAttributionHeaders(url),
         "Content-Type": "application/json",
         Authorization: `Bearer ${opts.apiKey}`,
       },

package/src/be/modelsdev-cache.json

@@ -147175,6 +147175,67 @@
     "name": "Anthropic",
     "doc": "https://docs.anthropic.com/en/docs/about-claude/models",
     "models": {
+      "claude-haiku-5-5": {
+        "id": "claude-haiku-5-5",
+        "name": "Claude Haiku 5.5",
+        "description": "Fast Claude model for responsive assistance, classification, and lightweight agents",
+        "family": "claude-haiku",
+        "attachment": true,
+        "reasoning": true,
+        "reasoning_options": [
+          {
+            "type": "toggle"
+          },
+          {
+            "type": "effort",
+            "values": [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          }
+        ],
+        "tool_call": true,
+        "structured_output": true,
+        "temperature": false,
+        "knowledge": "2026-06",
+        "modalities": {
+          "input": [
+            "text",
+            "image",
+            "pdf"
+          ],
+          "output": [
+            "text"
+          ]
+        },
+        "open_weights": false,
+        "limit": {
+          "context": 1000000,
+          "output": 128000
+        },
+        "cost": {
+          "input": 0.1,
+          "output": 0.5,
+          "cache_read": 0.01,
+          "cache_write": 0.125,
+          "tiers": [
+            {
+              "input": 0.5,
+              "output": 2.5,
+              "cache_read": 0.05,
+              "cache_write": 0.625,
+              "tier": {
+                "type": "context",
+                "size": 100000
+              }
+            }
+          ]
+        },
+        "canonical_model_id": "anthropic/claude-haiku-5-5"
+      },
       "claude-sonnet-5-5": {
         "id": "claude-sonnet-5-5",
         "name": "Claude Sonnet 5.5",

package/src/be/seed-pricing.ts

@@ -183,6 +183,55 @@ function projectCostBlock(
   return rows;
 }
 
+/** A projected row plus the models.dev id it came from, before normalized ids are collapsed. */
+interface SourcedSeedRow {
+  sourceId: string;
+  row: PricingSeedRow;
+}
+
+/** Whether `candidate` beats `current` as the source of a normalized `key`. */
+function outranksSource(candidate: string, current: string, key: string): boolean {
+  const a = candidate.toLowerCase();
+  const b = current.toLowerCase();
+  if ((a === key) !== (b === key)) return a === key;
+  return a > b;
+}
+
+/**
+ * `normalizeModelKey` can fold several models.dev ids onto one key: amp strips
+ * OpenAI's dated snapshots, so `gpt-4o`, `gpt-4o-2024-05-13`, `gpt-4o-2024-08-06`
+ * and `gpt-4o-2024-11-20` all become `amp|gpt-4o`, at different prices. The
+ * refresh writes every changed row at one `effective_from`, so two prices for
+ * one (provider, model, tokenClass) hit the pricing primary key and roll back
+ * the whole batch.
+ *
+ * Rule: one source id wins per (provider, normalized model), and all its token
+ * classes come from it. The id that is already canonical (the undated alias)
+ * wins; failing that, the greatest id, i.e. the newest dated snapshot. A source
+ * id repeated across catalog sections keeps its first row per token class.
+ */
+function collapseNormalizedIds(sourced: SourcedSeedRow[]): PricingSeedRow[] {
+  const modelKey = (row: PricingSeedRow) => `${row.provider}\u0000${row.model}`;
+  const winners = new Map<string, string>();
+  for (const { sourceId, row } of sourced) {
+    const current = winners.get(modelKey(row));
+    if (current === undefined || outranksSource(sourceId, current, row.model)) {
+      winners.set(modelKey(row), sourceId);
+    }
+  }
+
+  const seen = new Set<string>();
+  const rows: PricingSeedRow[] = [];
+  for (const { sourceId, row } of sourced) {
+    if (winners.get(modelKey(row)) !== sourceId) continue;
+    const rowKey = `${modelKey(row)}\u0000${row.tokenClass}`;
+    if (seen.has(rowKey)) continue;
+    seen.add(rowKey);
+    rows.push(row);
+  }
+  return rows;
+}
+
 /**
  * Build the full set of seed rows from a loaded models.dev cache.
  *
@@ -191,7 +240,10 @@ function projectCostBlock(
  * explicit and auditable.
  */
 export function buildModelsDevSeedRows(cache: ModelsDevCache): PricingSeedRow[] {
-  const rows: PricingSeedRow[] = [];
+  const sourced: SourcedSeedRow[] = [];
+  const add = (sourceId: string, projected: PricingSeedRow[]) => {
+    for (const row of projected) sourced.push({ sourceId, row });
+  };
 
   // ---- Anthropic / claude family ----------------------------------------
   // The 'claude' provider (local-CLI adapter) reports the model id as the
@@ -202,9 +254,7 @@ export function buildModelsDevSeedRows(cache: ModelsDevCache): PricingSeedRow[]
   for (const [id, model] of Object.entries(anthropic)) {
     if (!model?.cost) continue;
     for (const provider of ["claude", "claude-managed"] as const) {
-      for (const row of projectCostBlock(provider, id, model.cost)) {
-        rows.push(row);
-      }
+      add(id, projectCostBlock(provider, id, model.cost));
     }
   }
   // Anthropic shortnames (opus/sonnet/haiku) → resolve to the current default.
@@ -214,9 +264,7 @@ export function buildModelsDevSeedRows(cache: ModelsDevCache): PricingSeedRow[]
       (cache.anthropic ? ANTHROPIC_SHORTNAME_PRICING_FALLBACKS[fullId] : undefined);
     if (!cost) continue;
     for (const provider of ["claude", "claude-managed"] as const) {
-      for (const row of projectCostBlock(provider, shortname, cost)) {
-        rows.push(row);
-      }
+      add(shortname, projectCostBlock(provider, shortname, cost));
     }
   }
   // Pi-mono uses anthropic models via OpenRouter mirrors; project those too.
@@ -225,9 +273,7 @@ export function buildModelsDevSeedRows(cache: ModelsDevCache): PricingSeedRow[]
       anthropic[fullId]?.cost ??
       (cache.anthropic ? ANTHROPIC_SHORTNAME_PRICING_FALLBACKS[fullId] : undefined);
     if (!cost) continue;
-    for (const row of projectCostBlock("pi", shortname, cost, { anthropicBilled: true })) {
-      rows.push(row);
-    }
+    add(shortname, projectCostBlock("pi", shortname, cost, { anthropicBilled: true }));
   }
 
   // ---- Amp (Anthropic, OpenAI, Google and Fireworks models by id) ---------
@@ -237,9 +283,7 @@ export function buildModelsDevSeedRows(cache: ModelsDevCache): PricingSeedRow[]
   for (const section of ["anthropic", "openai", "google", "fireworks-ai"]) {
     for (const [id, model] of Object.entries(cache[section]?.models ?? {})) {
       if (!model?.cost) continue;
-      for (const row of projectCostBlock("amp", id, model.cost)) {
-        rows.push(row);
-      }
+      add(id, projectCostBlock("amp", id, model.cost));
     }
   }
 
@@ -247,16 +291,12 @@ export function buildModelsDevSeedRows(cache: ModelsDevCache): PricingSeedRow[]
   const openai = cache.openai?.models ?? {};
   for (const [id, model] of Object.entries(openai)) {
     if (!model?.cost) continue;
-    for (const row of projectCostBlock("codex", id, model.cost)) {
-      rows.push(row);
-    }
+    add(id, projectCostBlock("codex", id, model.cost));
     // Phase 2 fix — pi-mono can route to openai models through the
     // github-copilot proxy (`github-copilot/gpt-5.4`). The lookup helper
     // strips the prefix, so we seed the bare id under `pi` too. Without this
     // every gh-copilot-backed pi run fell through to `costSource='unpriced'`.
-    for (const row of projectCostBlock("pi", id, model.cost)) {
-      rows.push(row);
-    }
+    add(id, projectCostBlock("pi", id, model.cost));
   }
 
   // ---- Cursor (bare vendor ids through Cursor's hosted inference) --------
@@ -267,27 +307,21 @@ export function buildModelsDevSeedRows(cache: ModelsDevCache): PricingSeedRow[]
   for (const vendor of ["openai", "anthropic", "google", "xai"] as const) {
     for (const [id, model] of Object.entries(cache[vendor]?.models ?? {})) {
       if (!model?.cost) continue;
-      for (const row of projectCostBlock("cursor", id, model.cost, { anthropicBilled: false })) {
-        rows.push(row);
-      }
+      add(id, projectCostBlock("cursor", id, model.cost, { anthropicBilled: false }));
     }
   }
 
   // ---- Grok CLI (bare xAI ids, billed at xAI's API rates via XAI_API_KEY) --
   for (const [id, model] of Object.entries(cache.xai?.models ?? {})) {
     if (!model?.cost) continue;
-    for (const row of projectCostBlock("grok", id, model.cost, { anthropicBilled: false })) {
-      rows.push(row);
-    }
+    add(id, projectCostBlock("grok", id, model.cost, { anthropicBilled: false }));
   }
 
   // ---- DeepSeek direct API (dsh with DEEPSEEK_API_KEY, bare ids) ---------
   const deepseek = cache.deepseek?.models ?? {};
   for (const [id, model] of Object.entries(deepseek)) {
     if (!model?.cost) continue;
-    for (const row of projectCostBlock("dsh", id, model.cost)) {
-      rows.push(row);
-    }
+    add(id, projectCostBlock("dsh", id, model.cost));
   }
 
   // ---- OpenRouter passthrough (covers gemini + every opencode-routed model)
@@ -295,48 +329,45 @@ export function buildModelsDevSeedRows(cache: ModelsDevCache): PricingSeedRow[]
   for (const [id, model] of Object.entries(openrouter)) {
     if (!model?.cost) continue;
     // opencode routes whatever model the user picks; we project them all.
-    for (const row of projectCostBlock("opencode", id, model.cost)) {
-      rows.push(row);
-    }
+    add(id, projectCostBlock("opencode", id, model.cost));
     // pi-mono also routes via OpenRouter when only OPENROUTER_API_KEY is set
     // (see src/providers/pi-mono-adapter.ts). Without this projection, pi runs
     // against non-anthropic models (e.g. deepseek/deepseek-v4-flash) fall
     // through to costSource='unpriced' even though the model is in the
     // models.dev snapshot.
-    for (const row of projectCostBlock("pi", id, model.cost, {
-      anthropicBilled: id.startsWith("anthropic/"),
-    })) {
-      rows.push(row);
-    }
+    add(
+      id,
+      projectCostBlock("pi", id, model.cost, {
+        anthropicBilled: id.startsWith("anthropic/"),
+      }),
+    );
     // dsh routes `openrouter/<id>` models (all four tier defaults) through
     // OpenRouter, so it bills at the same rates.
-    for (const row of projectCostBlock("dsh", id, model.cost, {
-      anthropicBilled: id.startsWith("anthropic/"),
-    })) {
-      rows.push(row);
-    }
+    add(
+      id,
+      projectCostBlock("dsh", id, model.cost, {
+        anthropicBilled: id.startsWith("anthropic/"),
+      }),
+    );
     // grok runs `openrouter/<id>` models as OpenAI-compatible BYOK models.
-    for (const row of projectCostBlock("grok", id, model.cost, {
-      anthropicBilled: id.startsWith("anthropic/"),
-    })) {
-      rows.push(row);
-    }
+    add(
+      id,
+      projectCostBlock("grok", id, model.cost, {
+        anthropicBilled: id.startsWith("anthropic/"),
+      }),
+    );
     // Gemini specifically: also project under the 'gemini' provider so
     // internal-ai callers that tag with provider='gemini' find a hit.
     if (id.startsWith("google/")) {
       const geminiKey = id.replace(/^google\//, "");
-      for (const row of projectCostBlock("gemini", geminiKey, model.cost)) {
-        rows.push(row);
-      }
+      add(geminiKey, projectCostBlock("gemini", geminiKey, model.cost));
       // Also store under the full openrouter id so the same row resolves
       // whether the caller passes "google/..." or the stripped name.
-      for (const row of projectCostBlock("gemini", id, model.cost)) {
-        rows.push(row);
-      }
+      add(id, projectCostBlock("gemini", id, model.cost));
     }
   }
 
-  return rows;
+  return collapseNormalizedIds(sourced);
 }
 
 /** Build the exact provider rows inserted by the boot-time pricing seeder. */

package/src/be/swarm-config-guard.ts

@@ -1,6 +1,7 @@
 import { normalizeSlackReactionShortcode } from "../slack/reaction-shortcode";
 import { ProviderNameSchema } from "../types";
 import { API_DRAIN_MAX_MS_LIMIT } from "../utils/api-drain";
+import { parseEnabledTools } from "../utils/enabled-tools";
 import { parseTaskToolManifest } from "../utils/task-tool-manifest";
 import { isTierConfigKey, validateTierConfigValue } from "./model-tier-keys";
 
@@ -212,6 +213,17 @@ const VALIDATED_KEYS: Record<string, ConfigValidator> = {
       return "Invalid TASK_TOOL_MANIFESTS (expected JSON with taskTypes and/or schedules maps, each selecting at most 16 known swarm tools)";
     }
   },
+  // MCP tool allowlist: comma-separated names or a JSON array of strings.
+  // Unknown names are accepted here and warned about at session init.
+  SWARM_ENABLED_TOOLS: (value) => {
+    try {
+      if (typeof value !== "string") throw new Error("Expected string");
+      parseEnabledTools(value);
+      return null;
+    } catch {
+      return "Invalid SWARM_ENABLED_TOOLS (expected comma-separated tool names or a JSON array of strings)";
+    }
+  },
   FEEDBACK_ENDPOINT: (value) => {
     if (typeof value !== "string") {
       return "Invalid FEEDBACK_ENDPOINT (must use HTTPS, or HTTP on a loopback host)";
@@ -304,6 +316,7 @@ const VALIDATED_KEYS: Record<string, ConfigValidator> = {
     "PI_TOOL_DEFERRAL",
     "PI_CODEMODE",
     "PI_CODEMODE_MODELS",
+    "OPENROUTER_APP_ATTRIBUTION",
     "CURSOR_NATIVE_SYSTEM_PROMPT",
     "SLACK_DISABLE",
     "SLACK_RENDER_V2",

package/src/commands/provider-credentials.ts

@@ -19,6 +19,7 @@
  */
 
 import { deriveDefaultRoute, validateRoute } from "@desplega/model-routing";
+import { ACP_TARGET_IDS, isAcpTarget } from "../providers/acp-target-catalog";
 import { checkAmpCredentials, liveTestAmpCredentials } from "../providers/amp-adapter";
 import { checkClaudeCredentials } from "../providers/claude-adapter";
 import { checkClaudeManagedCredentials } from "../providers/claude-managed-adapter";
@@ -38,7 +39,10 @@ import type {
   ReasoningEffort,
 } from "../types";
 import { CLAUDE_CREDENTIALS_HINT } from "../utils/credentials";
-import { getOpenRouterBaseUrl } from "../utils/openrouter-base-url";
+import {
+  getOpenRouterAttributionHeaders,
+  getOpenRouterBaseUrl,
+} from "../utils/openrouter-base-url";
 import { scrubSecrets } from "../utils/secret-scrubber";
 
 export type SupportedProvider =
@@ -114,7 +118,7 @@ export const REQUIRED_CRED_VARS_BY_PROVIDER: Record<SupportedProvider, readonly
   devin: ["DEVIN_API_KEY", "DEVIN_ORG_ID"],
   opencode: ["OPENROUTER_API_KEY", "ANTHROPIC_API_KEY", "OPENAI_API_KEY"],
   pi: ["ANTHROPIC_API_KEY", "OPENROUTER_API_KEY", "OPENAI_API_KEY"],
-  // The ACP target process owns its own auth, so the swarm requires nothing.
+  // The ACP target owns its auth; custom targets still need a command.
   acp: [],
   dsh: ["DEEPSEEK_API_KEY", "OPENROUTER_API_KEY"],
   amp: ["AMP_API_KEY"],
@@ -142,7 +146,25 @@ export const CREDENTIAL_PROVIDER_CHECKERS: Record<SupportedProvider, CredentialC
     const { checkPiMonoCredentials } = await import("../providers/pi-mono-adapter");
     return checkPiMonoCredentials(env, opts);
   },
-  acp: () => ({ ready: true, missing: [], satisfiedBy: "sdk-delegated" }),
+  acp: (env) => {
+    const target = env.ACP_TARGET ?? "custom";
+    if (!isAcpTarget(target)) {
+      return {
+        ready: false,
+        missing: ["ACP_TARGET"],
+        hint: `Set ACP_TARGET to one of: ${ACP_TARGET_IDS.join(", ")}.`,
+      };
+    }
+    const command = env.ACP_TARGET_COMMAND ?? env.ACP_COMMAND;
+    if (target === "custom" && !command?.trim()) {
+      return {
+        ready: false,
+        missing: ["ACP_TARGET_COMMAND"],
+        hint: "Set ACP_TARGET_COMMAND (or ACP_COMMAND) to an ACP-compatible executable, or select a preset with ACP_TARGET.",
+      };
+    }
+    return { ready: true, missing: [], satisfiedBy: "sdk-delegated" };
+  },
 };
 
 /**
@@ -288,9 +310,10 @@ async function checkXaiApiKey(apiKey: string): Promise<LiveValidationResult> {
 }
 
 async function checkOpenRouter(apiKey: string): Promise<LiveValidationResult> {
-  const r = await timedFetch(`${getOpenRouterBaseUrl()}/models`, {
+  const url = `${getOpenRouterBaseUrl()}/models`;
+  const r = await timedFetch(url, {
     method: "GET",
-    headers: { Authorization: `Bearer ${apiKey}` },
+    headers: { ...getOpenRouterAttributionHeaders(url), Authorization: `Bearer ${apiKey}` },
   });
   if (r.ok) return { ok: true, latency_ms: r.latency_ms };
   return {