@desplega.ai/agent-swarm 1.166.0 → 1.168.0

package/dist/{worker-qa9fkz5s.js → worker-9t07z1gq.js}

@@ -1,98 +1,98 @@
 import {
   runAgent
-} from "./cli-vzc73wet.js";
+} from "./cli-rr5z1j4p.js";
 import"./cli-9q3wt23f.js";
-import"./cli-68r1j4sg.js";
-import"./cli-fn697bnt.js";
-import"./cli-3qn4r334.js";
-import"./cli-8t229cmr.js";
-import"./cli-h3x613ze.js";
+import"./cli-6bpvv8h4.js";
+import"./cli-9q0bh411.js";
+import"./cli-aj1e0h0d.js";
+import"./cli-9k7mqz00.js";
+import"./cli-fqq06kkb.js";
+import"./cli-tc5zec7v.js";
 import"./cli-hsxj0yar.js";
 import"./cli-hf5s9pgf.js";
-import"./cli-3ddybbbx.js";
-import"./cli-v2a8x45d.js";
-import"./cli-mwegs4af.js";
-import"./cli-9k7mqz00.js";
+import"./cli-jvmtxqtc.js";
 import"./cli-gt4hxb8p.js";
-import"./cli-0qjcsxgz.js";
-import"./cli-rsy933yz.js";
-import"./cli-y59h2pk9.js";
-import"./cli-v6vv7dy8.js";
-import"./cli-q2j38vre.js";
-import"./cli-zm7njwzd.js";
-import"./cli-ptcz1cqy.js";
-import"./cli-32bca7nr.js";
-import"./cli-p4ztb80h.js";
-import"./cli-hp1n6zq3.js";
-import"./cli-tng3131n.js";
+import"./cli-z48ggfyq.js";
+import"./cli-ew0c3a1j.js";
 import"./cli-5bfdm1ah.js";
 import"./cli-efnd2kce.js";
 import"./cli-zp67qg5x.js";
 import"./cli-bqjfjex4.js";
+import"./cli-nctfv2yy.js";
+import"./cli-bcspch6h.js";
+import"./cli-69egj654.js";
+import"./cli-v6vv7dy8.js";
+import"./cli-q2j38vre.js";
+import"./cli-r7eeddkq.js";
+import"./cli-hp1n6zq3.js";
+import"./cli-tng3131n.js";
+import"./cli-zm7njwzd.js";
+import"./cli-ptcz1cqy.js";
+import"./cli-7avy4v8w.js";
 import"./cli-eree7rnv.js";
 import"./cli-2pdaysab.js";
-import"./cli-ttbsse3f.js";
-import"./cli-zy7vwsne.js";
+import"./cli-tmhsxhb8.js";
+import"./cli-5qkcdv8c.js";
 import"./cli-dpvkp2et.js";
 import {
   getEnabledCapabilities
-} from "./cli-df56tqdw.js";
+} from "./cli-ee0402n1.js";
 import"./cli-xvc3q9br.js";
 import"./cli-mv2520nm.js";
 import"./cli-w0bwte75.js";
 import"./cli-re8z5p8p.js";
-import"./cli-0nhdwxd5.js";
-import"./cli-rggdq8wq.js";
-import"./cli-ysnyhws9.js";
-import"./cli-jvj6a0cv.js";
+import"./cli-43jg9xdw.js";
+import"./cli-9q24yyvs.js";
+import"./cli-ewhwpyrb.js";
+import"./cli-g6gx2dn1.js";
 import"./cli-epan13p1.js";
 import"./cli-f14fvzag.js";
+import"./cli-7mhy3ths.js";
+import"./cli-v1w7pbd8.js";
 import"./cli-zt3w1cn1.js";
-import"./cli-f2n17zhp.js";
-import"./cli-feh3dkah.js";
-import"./cli-3dpj7atn.js";
-import"./cli-2x0e561b.js";
-import"./cli-pkke6geq.js";
+import"./cli-km4x66j0.js";
 import"./cli-rb9m6rpe.js";
+import"./cli-2x0e561b.js";
+import"./cli-fhj4y16f.js";
 import"./cli-mzfth0bp.js";
-import"./cli-j2jbr8af.js";
 import"./cli-fad8m16k.js";
 import"./cli-bsakbbkm.js";
 import"./cli-zxg80zs9.js";
 import"./cli-51tf7ac3.js";
 import"./cli-ydt3zkwv.js";
-import"./cli-ecknp7p1.js";
+import"./cli-j05x7pnb.js";
 import"./cli-q51yprfq.js";
 import"./cli-3er6gcsn.js";
 import"./cli-yatxqynm.js";
-import"./cli-b0f70z24.js";
-import"./cli-nexwh8zg.js";
+import"./cli-mn8qkd8v.js";
+import"./cli-g7k7zbcz.js";
 import"./cli-btbzvq95.js";
 import"./cli-1m2e086m.js";
-import"./cli-bzr0ftht.js";
+import"./cli-wnb9b2g3.js";
 import"./cli-bd957dgb.js";
 import"./cli-pzxba7gw.js";
-import"./cli-8kgvmkak.js";
+import"./cli-0jngabtb.js";
 import"./cli-rfphkzh5.js";
-import"./cli-yshaazs1.js";
-import"./cli-xvdgasgy.js";
+import"./cli-74ez9b66.js";
 import"./cli-3qhyh31j.js";
-import"./cli-jhm6hzjn.js";
+import"./cli-xvdgasgy.js";
+import"./cli-mxvnnv5q.js";
 import"./cli-7mm2r1kp.js";
 import"./cli-g5erf0zt.js";
 import"./cli-dmtrxqhg.js";
-import"./cli-tadfgd0t.js";
-import"./cli-ywybs5as.js";
-import"./cli-gd4favx9.js";
 import"./cli-agamgm0p.js";
 import"./cli-5c2j5yvx.js";
 import"./cli-1a2j50m0.js";
+import"./cli-tadfgd0t.js";
+import"./cli-ywybs5as.js";
 import"./cli-f9w1semm.js";
+import"./cli-a35hzdve.js";
+import"./cli-gd4favx9.js";
 import"./cli-ej6gbxfb.js";
-import"./cli-zsh093hk.js";
+import"./cli-014vns2y.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-4r1sjfc4.js";
+import"./cli-ng1pmdx6.js";
 import"./cli-mb75wpxf.js";
 import"./cli-zf8jjwex.js";
 import"./cli-wt7ccy4r.js";

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "1.166.0",
+    "version": "1.168.0",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [
@@ -37248,6 +37248,77 @@
             }
           }
         }
+      },
+      "delete": {
+        "operationId": "script_connections_delete",
+        "summary": "Delete a script connection",
+        "description": "Hard-deletes the connection, its auto-managed credential binding, and any derived inline secret it owns.",
+        "tags": [
+          "Script Connections"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            },
+            "required": true,
+            "name": "id",
+            "in": "path"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Script connection deleted",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "deleted": {
+                      "type": "boolean",
+                      "enum": [
+                        true
+                      ]
+                    },
+                    "id": {
+                      "type": "string"
+                    }
+                  },
+                  "required": [
+                    "deleted",
+                    "id"
+                  ]
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Only the lead agent can manage script connections",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Script connection not found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          }
+        }
       }
     },
     "/api/script-connections/{id}/refresh": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "1.166.0",
+  "version": "1.168.0",
   "description": "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
   "keywords": [
     "agent-swarm.dev",
@@ -147,8 +147,8 @@
     "start:portless": "portless api.swarm bun --expose-gc src/http.ts",
     "inspector": "bunx @modelcontextprotocol/inspector --transport stdio bun src/stdio.ts",
     "inspector:http": "bunx @modelcontextprotocol/inspector --transport http https://api.swarm.localhost:1355/mcp",
-    "lint": "biome check src apps/evals packages/ui-e2e packages/model-routing",
-    "lint:fix": "biome check --write src apps/evals packages/ui-e2e packages/model-routing",
+    "lint": "biome check src apps/evals packages/ui-e2e packages/model-routing packages/model-catalog",
+    "lint:fix": "biome check --write src apps/evals packages/ui-e2e packages/model-routing packages/model-catalog",
     "format": "biome format --write src",
     "build:binary": "bun build ./src/cli.tsx ./src/providers/pi-binary-root/src/extensions/codemode/worker.ts --root ./src/providers/pi-binary-root --compile --bytecode --format=esm --compile-exec-argv='--expose-gc' --target=bun-linux-x64 --outfile ./dist/agent-swarm",
     "build:binary:arm64": "bun build ./src/cli.tsx ./src/providers/pi-binary-root/src/extensions/codemode/worker.ts --root ./src/providers/pi-binary-root --compile --bytecode --format=esm --compile-exec-argv='--expose-gc' --target=bun-linux-arm64 --outfile ./dist/agent-swarm",
@@ -202,21 +202,21 @@
   "dependencies": {
     "@agentclientprotocol/sdk": "1.7.0",
     "@ai-sdk/openai": "^3.0.41",
-    "@anthropic-ai/claude-agent-sdk": "0.3.293",
-    "@anthropic-ai/sdk": "^0.132.0",
+    "@anthropic-ai/claude-agent-sdk": "0.3.295",
+    "@anthropic-ai/sdk": "^0.132.1",
     "@asteasolutions/zod-to-openapi": "^8.0.0",
     "@aws-sdk/client-bedrock": "3.1048.0",
     "@cursor/sdk": "1.0.37",
     "@desplega.ai/business-use": "^0.4.2",
     "@desplega.ai/localtunnel": "^2.2.0",
-    "@earendil-works/pi-agent-core": "^1.0.4",
-    "@earendil-works/pi-ai": "^1.0.4",
-    "@earendil-works/pi-coding-agent": "^1.0.4",
+    "@earendil-works/pi-agent-core": "^1.1.0",
+    "@earendil-works/pi-ai": "^1.1.0",
+    "@earendil-works/pi-coding-agent": "^1.1.0",
     "@inkjs/ui": "^2.0.0",
     "@jitl/quickjs-singlefile-mjs-release-sync": "0.32.0",
     "@linear/sdk": "^77.0.0",
-    "@modelcontextprotocol/sdk": "1.29.0",
-    "@openai/codex": "0.161.0",
+    "@modelcontextprotocol/sdk": "1.31.0",
+    "@openai/codex": "0.162.0",
     "@opencode-ai/sdk": "^1.18.35",
     "@openfort/openfort-node": "^0.9.1",
     "@opentelemetry/api": "^1.9.1",

package/src/be/memory/providers/openai-embedding.ts

@@ -1,4 +1,5 @@
 import OpenAI from "openai";
+import { getOpenRouterAttributionHeaders } from "../../../utils/openrouter-base-url";
 import { DEFAULT_EMBEDDING_MODEL, EMBEDDING_DIMENSIONS } from "../constants";
 import type { EmbeddingProvider } from "../types";
 
@@ -34,11 +35,15 @@ export class OpenAIEmbeddingProvider implements EmbeddingProvider {
 
   private getClient(): OpenAI | null {
     if (!this.apiKey) return null;
-    if (!this.client)
+    if (!this.client) {
+      const baseURL = process.env.EMBEDDING_API_BASE_URL; // Optional custom base URL
       this.client = new OpenAI({
-        baseURL: process.env.EMBEDDING_API_BASE_URL, // Optional custom base URL
+        baseURL,
         apiKey: this.apiKey,
+        // Only an openrouter.ai base URL gets attribution; OpenAI and gateways get none.
+        defaultHeaders: getOpenRouterAttributionHeaders(baseURL ?? ""),
       });
+    }
     return this.client;
   }
 

package/src/be/memory/raters/llm-summarizer.ts

@@ -12,7 +12,10 @@
  */
 import { z } from "zod";
 import { MEMORY_RATER_DEFAULT_MODEL } from "../../../utils/internal-ai/models";
-import { getOpenRouterBaseUrl } from "../../../utils/openrouter-base-url";
+import {
+  getOpenRouterAttributionHeaders,
+  getOpenRouterBaseUrl,
+} from "../../../utils/openrouter-base-url";
 import { type SummaryWithRatings, SummaryWithRatingsSchema } from "./llm";
 
 /**
@@ -150,11 +153,13 @@ export async function runMemoryRater(opts: RunMemoryRaterOpts): Promise<RunMemor
   const model = opts.model ?? getMemoryRaterModel();
   const responseLogCap = opts.responseLogCap ?? 200;
 
+  const url = openRouterChatCompletionsUrl();
   let res: Response;
   try {
-    res = await fetchFn(openRouterChatCompletionsUrl(), {
+    res = await fetchFn(url, {
       method: "POST",
       headers: {
+        ...getOpenRouterAttributionHeaders(url),
         "Content-Type": "application/json",
         Authorization: `Bearer ${opts.apiKey}`,
       },

package/src/be/modelsdev-cache.json

@@ -147175,6 +147175,67 @@
     "name": "Anthropic",
     "doc": "https://docs.anthropic.com/en/docs/about-claude/models",
     "models": {
+      "claude-haiku-5-5": {
+        "id": "claude-haiku-5-5",
+        "name": "Claude Haiku 5.5",
+        "description": "Fast Claude model for responsive assistance, classification, and lightweight agents",
+        "family": "claude-haiku",
+        "attachment": true,
+        "reasoning": true,
+        "reasoning_options": [
+          {
+            "type": "toggle"
+          },
+          {
+            "type": "effort",
+            "values": [
+              "low",
+              "medium",
+              "high",
+              "xhigh",
+              "max"
+            ]
+          }
+        ],
+        "tool_call": true,
+        "structured_output": true,
+        "temperature": false,
+        "knowledge": "2026-06",
+        "modalities": {
+          "input": [
+            "text",
+            "image",
+            "pdf"
+          ],
+          "output": [
+            "text"
+          ]
+        },
+        "open_weights": false,
+        "limit": {
+          "context": 1000000,
+          "output": 128000
+        },
+        "cost": {
+          "input": 0.1,
+          "output": 0.5,
+          "cache_read": 0.01,
+          "cache_write": 0.125,
+          "tiers": [
+            {
+              "input": 0.5,
+              "output": 2.5,
+              "cache_read": 0.05,
+              "cache_write": 0.625,
+              "tier": {
+                "type": "context",
+                "size": 100000
+              }
+            }
+          ]
+        },
+        "canonical_model_id": "anthropic/claude-haiku-5-5"
+      },
       "claude-sonnet-5-5": {
         "id": "claude-sonnet-5-5",
         "name": "Claude Sonnet 5.5",

package/src/be/script-connections.ts

@@ -1137,8 +1137,8 @@ async function deriveConnectionBinding(
     // connection references this key, so every path that supersedes or removes
     // the connection's inline-secret auth MUST delete this swarm_config row via
     // deleteManagedConnectionSecret() (the managed binding CASCADEs, this does
-    // not). upsertScriptConnection handles supersession; a future
-    // connection-delete path must handle deletion.
+    // not). upsertScriptConnection handles supersession; deleteScriptConnection
+    // handles deletion.
     configKey = `connection.${ctx.slug}.secret`;
     secretWrite = { scope: ctx.scope, scopeId: ctx.scopeId, key: configKey, value: auth.secret };
   } else if (auth.configKey) {
@@ -1308,10 +1308,8 @@ async function deleteManagedBindingForConnection(connectionId: string): Promise<
  *   1. upsertScriptConnection, when an upsert SUPERSEDES a previously-derived
  *      inline secret (slug change, or the new auth no longer uses that derived
  *      key). Handled below.
- *   2. FUTURE connection-delete path: there is no deleteScriptConnection today
- *      (only mcp_server_id CASCADE), but any such path MUST call this for the
- *      connection's derived `connection.<slug>.secret` key (when auth_type used a
- *      derived inline secret) so the secret is not orphaned.
+ *   2. deleteScriptConnection, for the connection's derived
+ *      `connection.<slug>.secret` key (when auth used a derived inline secret).
  */
 async function deleteManagedConnectionSecret(input: {
   scope: ScriptConnectionScope;
@@ -2079,6 +2077,42 @@ export async function setScriptConnectionEnabled(
   return row ? connectionFromRow(row) : null;
 }
 
+/**
+ * Hard-delete a script connection. Returns the deleted record, or null when no
+ * connection has that id.
+ *
+ * The auto-managed credential binding CASCADEs (and is deleted explicitly too);
+ * a derived inline secret (`connection.<slug>.secret`) is deleted here because
+ * nothing CASCADEs it. Concurrent upserts read the row's `version` and update
+ * with a `version` predicate, so they fail with ScriptConnectionConflictError
+ * once the row is gone instead of resurrecting it.
+ */
+export async function deleteScriptConnection(id: string): Promise<ScriptConnectionRecord | null> {
+  const deleted = await getDbClient().transaction(
+    async (tx): Promise<ScriptConnectionRecord | null> => {
+      await tx.run("PRAGMA defer_foreign_keys = ON");
+      const row = await tx.get<ConnectionRow>("SELECT * FROM script_connections WHERE id = ?", [
+        id,
+      ]);
+      if (!row) return null;
+      const connection = connectionFromRow(row);
+      await deleteManagedBindingForConnection(id);
+      await tx.run("DELETE FROM script_connections WHERE id = ?", [id]);
+      const secretKey = derivedInlineSecretKey(connection);
+      if (secretKey) {
+        await deleteManagedConnectionSecret({
+          scope: connection.scope,
+          scopeId: connection.scopeId,
+          key: secretKey,
+        });
+      }
+      return connection;
+    },
+  );
+  if (deleted && derivedInlineSecretKey(deleted)) refreshSecretScrubberCache();
+  return deleted;
+}
+
 export function getScriptApiConnectionDescriptors(
   context: { agentId?: string; repoId?: string } = {},
 ): ScriptApiConnectionDescriptor[] {