@desplega.ai/agent-swarm 1.172.0 → 1.173.0

package/dist/{cli-g4f5pj26.js → cli-0a7mm3zp.js}

@@ -1,6 +1,6 @@
 import {
   runStopHookSessionSummarySubprocess
-} from "./cli-g6t9texm.js";
+} from "./cli-wrh08zjd.js";
 import {
   buildOtelTraceparentEnv,
   isHarnessOtelEnabled
@@ -47,7 +47,7 @@ import {
 import {
   init_file_lock,
   withFileLock
-} from "./cli-nyhb1r6x.js";
+} from "./cli-r4fqfpwf.js";
 import {
   CLAUDE_CREDENTIALS_HINT,
   init_credentials,
@@ -94,7 +94,7 @@ import {
   writeFile
 } from "node:fs/promises";
 import { homedir } from "node:os";
-import { dirname, join, resolve } from "node:path";
+import { dirname, join, resolve as resolve2 } from "node:path";
 import { promisify } from "node:util";
 init_credentials();
 init_env_flag();
@@ -167,6 +167,76 @@ class ClaudeBackgroundKeepalive {
   }
 }
 
+// src/providers/claude-flag-settings.ts
+init_secret_scrubber();
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+var WORKSPACE_CLAUDE_MD_EXCLUDE = "/workspace/CLAUDE.md";
+function claudeFlagSettings() {
+  return { claudeMdExcludes: [WORKSPACE_CLAUDE_MD_EXCLUDE] };
+}
+var SETTINGS_FLAG = "--settings";
+
+class ClaudeSettingsConfigError extends Error {
+  constructor(detail) {
+    super(scrubSecrets(`Invalid caller --settings: ${detail}. Refusing to start Claude without the caller's settings.`));
+    this.name = "ClaudeSettingsConfigError";
+  }
+}
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseCallerSettings(value, cwd) {
+  const inline = value.trimStart().startsWith("{");
+  const source = inline ? "inline JSON" : `file ${resolve(cwd, value)}`;
+  let parsed;
+  try {
+    parsed = JSON.parse(inline ? value : readFileSync(resolve(cwd, value), "utf8"));
+  } catch (err) {
+    const code = err.code;
+    throw new ClaudeSettingsConfigError(`${source} ${inline || !code ? "is not valid JSON" : `cannot be read (${code})`}`);
+  }
+  if (!isPlainObject(parsed)) {
+    throw new ClaudeSettingsConfigError(`${source} is not a JSON object`);
+  }
+  return parsed;
+}
+function mergeClaudeSettingsArgs(argLists, cwd) {
+  const merged = {};
+  const excludes = new Set;
+  const absorb = (value) => {
+    if (!value)
+      throw new ClaudeSettingsConfigError("--settings has no value");
+    const parsed = parseCallerSettings(value, cwd);
+    Object.assign(merged, parsed);
+    if (Array.isArray(parsed.claudeMdExcludes)) {
+      for (const entry of parsed.claudeMdExcludes) {
+        if (typeof entry === "string")
+          excludes.add(entry);
+      }
+    }
+  };
+  const stripped = argLists.map((args) => {
+    const passthrough = [];
+    for (let i = 0;i < args.length; i++) {
+      const arg = args[i] ?? "";
+      if (arg === SETTINGS_FLAG) {
+        const value = args[i + 1];
+        absorb(value?.startsWith("-") ? undefined : value);
+        i++;
+      } else if (arg.startsWith(`${SETTINGS_FLAG}=`)) {
+        absorb(arg.slice(SETTINGS_FLAG.length + 1));
+      } else {
+        passthrough.push(arg);
+      }
+    }
+    return passthrough;
+  });
+  for (const entry of claudeFlagSettings().claudeMdExcludes)
+    excludes.add(entry);
+  return { argLists: stripped, settings: { ...merged, claudeMdExcludes: [...excludes] } };
+}
+
 // src/providers/claude-session-events.ts
 init_secret_scrubber();
 function finiteNumber(value) {
@@ -593,7 +663,7 @@ async function resolveClaudeTrustDirs(cwd) {
         "core.worktree"
       ]).then((r) => r.stdout.trim(), () => "");
       if (configured)
-        main = resolve(path, configured);
+        main = resolve2(path, configured);
       main = await realpath(main);
       if (await stat(join(main, ".git")).then(() => true, () => false)) {
         if (!dirs.includes(main))
@@ -782,6 +852,7 @@ class ClaudeSession {
   harnessVariantMeta;
   queueSteeringSupported;
   runSessionSummary;
+  flagSettings;
   proc;
   stdinWriter;
   listeners = [];
@@ -797,7 +868,7 @@ class ClaudeSession {
   transcript;
   backgroundKeepalive;
   deliverSteering;
-  constructor(config, model, taskFilePath, taskFileKey, sessionMcpConfig = null, claudeBinaryArgv = ["claude"], systemPromptFile = null, harnessVariant, harnessVariantMeta, queueSteeringSupported = false, runSessionSummary = runStopHookSessionSummarySubprocess) {
+  constructor(config, model, taskFilePath, taskFileKey, sessionMcpConfig = null, claudeBinaryArgv = ["claude"], systemPromptFile = null, harnessVariant, harnessVariantMeta, queueSteeringSupported = false, runSessionSummary = runStopHookSessionSummarySubprocess, flagSettings = claudeFlagSettings()) {
     this.config = config;
     this.model = model;
     this.sessionMcpConfig = sessionMcpConfig;
@@ -806,6 +877,7 @@ class ClaudeSession {
     this.harnessVariantMeta = harnessVariantMeta;
     this.queueSteeringSupported = queueSteeringSupported;
     this.runSessionSummary = runSessionSummary;
+    this.flagSettings = flagSettings;
     this.taskFileKey = taskFileKey;
     this.contextWindowSize = getContextWindowSize(model);
     this.systemPromptFile = systemPromptFile;
@@ -885,7 +957,9 @@ class ClaudeSession {
       "--dangerously-skip-permissions",
       "--allow-dangerously-skip-permissions",
       "--permission-mode",
-      "bypassPermissions"
+      "bypassPermissions",
+      "--settings",
+      JSON.stringify(this.flagSettings)
     ];
     if (this.queueSteeringSupported) {
       cmd.push("--input-format", "stream-json");
@@ -1116,7 +1190,7 @@ class ClaudeAdapter {
     if (transport === "sdk" && isClaudeBridgeEffective(sourceEnv)) {
       throw new Error("CLAUDE_TRANSPORT=sdk cannot run with an effective Claude Bridge configuration. Select CLI transport or disable the bridge.");
     }
-    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-gsfsh662.js") : undefined;
+    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-4whxere4.js") : undefined;
     claudeSdk?.validateClaudeSdkAdditionalArgs([
       ...claudeBinaryArgv.slice(1),
       ...config.additionalArgs ?? []
@@ -1125,7 +1199,14 @@ class ClaudeAdapter {
       console.warn(`\x1B[33m[claude]\x1B[0m SWARM_USE_CLAUDE_BRIDGE is set but no CLAUDE_CODE_OAUTH_TOKEN is present — falling back to stock 'claude'. claude-bridge requires a subscription/OAuth token (it forwards only the OAuth token to claude and strips ANTHROPIC_*); API-key billing is identical headless vs interactive, so the bridge isn't needed.`);
     }
     const isLegacyBridgeCompat = isLegacyClaudeBridgeCompatBinary(claudeBinaryRaw);
-    const effectiveClaudeBinaryArgv = useClaudeBridge ? withClaudeBridgeAuthArgs(claudeBinaryArgv, sourceEnv) : claudeBinaryArgv;
+    const [claudeExecutable = "claude", ...claudePrefixArgs] = useClaudeBridge ? withClaudeBridgeAuthArgs(claudeBinaryArgv, sourceEnv) : claudeBinaryArgv;
+    const {
+      argLists: [prefixArgs = [], additionalArgs = []],
+      settings: flagSettings
+    } = mergeClaudeSettingsArgs([claudePrefixArgs, config.additionalArgs ?? []], config.cwd);
+    const effectiveClaudeBinaryArgv = [claudeExecutable, ...prefixArgs];
+    sessionConfig.additionalArgs = additionalArgs;
+    const flagSettingsArgs = ["--settings", JSON.stringify(flagSettings)];
     const isInteractiveTmuxClaude = isLegacyBridgeCompat || useClaudeBridge;
     const configuredClaudeBinaryRaw = resolveClaudeBinary(sourceEnv);
     if (isLegacyClaudeBridgeCompatBinary(configuredClaudeBinaryRaw)) {
@@ -1170,7 +1251,7 @@ class ClaudeAdapter {
     const queueSteeringOverride = resolveClaudeQueueSteeringOverride(sourceEnv);
     let harnessVersion;
     try {
-      const probe = registerProcessGroup(Bun.spawn([...effectiveClaudeBinaryArgv, "--version"], {
+      const probe = registerProcessGroup(Bun.spawn([...effectiveClaudeBinaryArgv, ...flagSettingsArgs, "--version"], {
         detached: detachedProcessGroup,
         env: sourceEnv,
         stdin: "ignore",
@@ -1206,6 +1287,7 @@ ${stderr}`.trim();
         taskFileKey,
         sessionMcpConfig,
         claudeBinaryArgv: effectiveClaudeBinaryArgv,
+        settings: flagSettings,
         systemPromptFile,
         harnessVariant,
         harnessVariantMeta,
@@ -1213,7 +1295,7 @@ ${stderr}`.trim();
         runSessionSummary: this.runSessionSummary
       });
     }
-    return new ClaudeSession(sessionConfig, model, taskFilePath, taskFileKey, sessionMcpConfig, effectiveClaudeBinaryArgv, systemPromptFile, harnessVariant, harnessVariantMeta, queueSteeringSupported, this.runSessionSummary);
+    return new ClaudeSession(sessionConfig, model, taskFilePath, taskFileKey, sessionMcpConfig, effectiveClaudeBinaryArgv, systemPromptFile, harnessVariant, harnessVariantMeta, queueSteeringSupported, this.runSessionSummary, flagSettings);
   }
   async canResume(_sessionId) {
     return true;

package/dist/{cli-pj6x9qce.js → cli-0kxf81jj.js}

@@ -13,7 +13,7 @@ import {
   parseClaudeMdPendingRecord,
   planClaudeMdSync,
   withFileLock
-} from "./cli-nyhb1r6x.js";
+} from "./cli-r4fqfpwf.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-kb4ehzx5.js → cli-1w0vj3gw.js}

@@ -8,7 +8,7 @@ import {
   resolveValidationPort,
   systemOneRetryViolations,
   systemOneUnresolvedError
-} from "./cli-aspcaef3.js";
+} from "./cli-6r2f7edk.js";
 import {
   WorkflowReplayStateError,
   cancelPendingApprovalRequestsForRun,
@@ -51,7 +51,7 @@ import {
   telemetry,
   updateWorkflowRun,
   updateWorkflowRunStep
-} from "./cli-tgpfnm6r.js";
+} from "./cli-fmhj1ehj.js";
 import {
   RetryPolicySchema,
   init_types
@@ -317,7 +317,7 @@ async function notifyAutomationPreflightFailure(preflight) {
     return;
   }
   try {
-    const { getSlackApp } = await import("./app-wmf0m843.js");
+    const { getSlackApp } = await import("./app-km9qnv2f.js");
     const app = getSlackApp();
     if (!app) {
       console.warn("[Automation Preflight] Slack not available, cannot send notification");
@@ -1458,7 +1458,7 @@ async function runClaimedStep(def, runId, ctx, node, registry, existingStep, ste
   if ("async" in result && result.async) {
     const waiting = await checkpointStepWaiting(runId, stepId, ctx);
     if (waiting && result.waitFor === "workflow.child.finished") {
-      const { resumeFromChildRun } = await import("./resume-gw4a2c6v.js");
+      const { resumeFromChildRun } = await import("./resume-42stcaz0.js");
       await resumeFromChildRun(stepId, registry);
     }
     return { outcome: waiting ? "waiting" : "completed", successors: [] };

package/dist/{cli-e0a9sk00.js → cli-3nxdmjrc.js}

@@ -22,7 +22,7 @@ import {
   upsertSwarmConfig,
   validateControllerTokenTtlDays,
   validateRuntimeTokenTtlHours
-} from "./cli-tgpfnm6r.js";
+} from "./cli-fmhj1ehj.js";
 import {
   RuntimeControllerCreateSchema,
   RuntimeControllerUpdateSchema,

package/dist/{cli-6jb2rf77.js → cli-42qhyvwx.js}

@@ -1,14 +1,14 @@
 import {
   seedPricingFromModelsDev
-} from "./cli-r8smj8b8.js";
+} from "./cli-jpc4r224.js";
 import {
   ensureRbacSeedsSynced,
   init_rbac_roles
-} from "./cli-qsztpfry.js";
+} from "./cli-anzdk0z4.js";
 import {
   getDb,
   init_db1 as init_db
-} from "./cli-tgpfnm6r.js";
+} from "./cli-fmhj1ehj.js";
 
 // src/be/boot-seeds.ts
 init_db();

package/dist/{cli-esnpehf5.js → cli-5er5gjbm.js}

@@ -7,7 +7,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@desplega.ai/agent-swarm",
-    version: "1.172.0",
+    version: "1.173.0",
     description: "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
     keywords: [
       "agent-swarm.dev",
@@ -191,8 +191,8 @@ var init_package = __esm(() => {
       "@desplega/model-catalog": "workspace:*",
       "@desplega/model-routing": "workspace:*",
       "@faker-js/faker": "^10.4.0",
-      "@opencode/plugin": "2.0.28",
-      "@opencode/sdk": "2.0.28",
+      "@opencode/plugin": "2.0.29",
+      "@opencode/sdk": "2.0.29",
       "@oxlint/plugins": "1.78.0",
       "@types/bun": "latest",
       "@typescript/native-preview": "7.0.0-dev.20260707.2",
@@ -212,7 +212,7 @@ var init_package = __esm(() => {
     dependencies: {
       "@agentclientprotocol/sdk": "1.8.0",
       "@ai-sdk/openai": "^3.0.41",
-      "@anthropic-ai/claude-agent-sdk": "0.3.296",
+      "@anthropic-ai/claude-agent-sdk": "0.3.299",
       "@anthropic-ai/sdk": "^0.133.0",
       "@asteasolutions/zod-to-openapi": "^8.0.0",
       "@aws-sdk/client-bedrock": "3.1048.0",

package/dist/{cli-04emfe2q.js → cli-5wpw4rab.js}

@@ -36,7 +36,7 @@ import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 init_secret_scrubber();
-var AMP_PACKAGE = "@ampcode/cli@0.0.1791878731-g2f7fd0";
+var AMP_PACKAGE = "@ampcode/cli@0.0.1791979242-g144271";
 var AMP_MCP_SERVER_NAME = "agent-swarm";
 var AMP_PLUGIN_MODE_KEY = "agent-swarm";
 var AMP_LIVE_TEST_TIMEOUT_MS = 5000;

package/dist/{cli-aspcaef3.js → cli-6r2f7edk.js}

@@ -1,10 +1,10 @@
 import {
   DEFAULT_MODEL,
   resolveCredential
-} from "./cli-xczpdp9e.js";
+} from "./cli-6thk4jz3.js";
 import {
   getSlackApp
-} from "./cli-9xsmdpdt.js";
+} from "./cli-tcc4wd5d.js";
 import {
   claimApprovalCancellationNotification,
   completeApprovalCancellationNotificationClaim,
@@ -12,7 +12,7 @@ import {
   getTaskById,
   init_db1 as init_db,
   releaseApprovalCancellationNotificationClaim
-} from "./cli-tgpfnm6r.js";
+} from "./cli-fmhj1ehj.js";
 import {
   TERMINAL_TASK_STATUSES,
   init_types
@@ -433,7 +433,7 @@ class HumanInTheLoopExecutor extends BaseExecutor {
       }
       if (notification.channel === "slack") {
         try {
-          const { getSlackApp: getSlackApp2 } = await import("./app-wmf0m843.js");
+          const { getSlackApp: getSlackApp2 } = await import("./app-km9qnv2f.js");
           const slackApp = getSlackApp2();
           if (!slackApp) {
             console.warn("[HITL] Slack not initialized — cannot send notification");

package/dist/{cli-xczpdp9e.js → cli-6thk4jz3.js}

@@ -7,7 +7,7 @@ import {
   builtinModels,
   normalizeRadiusGatewayUrl,
   registerBundledOAuthFlowLoaders
-} from "./cli-cceskcvt.js";
+} from "./cli-b07hr3bt.js";
 import {
   oauthErrorHtml,
   oauthSuccessHtml