@desplega.ai/agent-swarm 1.172.0 → 2.0.0

package/dist/cli-k3dp5tpf.js

@@ -0,0 +1,263 @@
+import {
+  claimKv,
+  deleteKv,
+  init_db1 as init_db,
+  sweepExpiredKv,
+  upsertKv
+} from "./cli-ef1hg1wv.js";
+import {
+  init_env_flag,
+  isEnvFlagEnabled
+} from "./cli-ej6gbxfb.js";
+import {
+  init_secret_scrubber,
+  scrubSecrets
+} from "./cli-p1x85d2t.js";
+
+// src/slack/external-channel.ts
+init_db();
+init_env_flag();
+init_secret_scrubber();
+
+// src/slack/channel-join.ts
+function slackErrorData(error) {
+  if (!(error instanceof Error))
+    return;
+  return error.data;
+}
+function slackCode(error) {
+  const d = slackErrorData(error);
+  return typeof d?.error === "string" ? d.error : undefined;
+}
+function slackMissingScopeMessage(error) {
+  const data = slackErrorData(error);
+  if (data?.error !== "missing_scope" || typeof data.needed !== "string")
+    return;
+  const needed = data.needed.trim();
+  if (!needed)
+    return;
+  return `Slack requires the \`${needed}\` scope. Add it to slack-manifest.json, apply the updated manifest to the Slack app, then reinstall the app to the workspace for the change to take effect.`;
+}
+async function isKnownExternalChannel(client, channelId) {
+  return await getChannelExternality(client, channelId) === "external";
+}
+async function withAutoJoin(client, channelId, fn) {
+  try {
+    return await fn();
+  } catch (error) {
+    if (slackCode(error) !== "not_in_channel")
+      throw error;
+    if (await isKnownExternalChannel(client, channelId)) {
+      throw new Error(`Cannot auto-join external channel ${channelId} — invite the bot with /invite @<bot-name> first.`);
+    }
+    try {
+      await client.conversations.join({ channel: channelId });
+    } catch (joinError) {
+      if (slackCode(joinError) === "method_not_supported_for_channel_type") {
+        throw new Error(`Cannot access private channel ${channelId} — invite the bot with /invite @<bot-name> first.`);
+      }
+      throw joinError;
+    }
+    return await fn();
+  }
+}
+
+// src/slack/external-channel.ts
+var EXTERNALITY_TTL_MS = 10 * 60 * 1000;
+var EXTERNALITY_CACHE_MAX = 500;
+var ALERT_DEDUPE_MS = 60 * 60 * 1000;
+var ALERT_SENDING_TTL_MS = 2 * 60 * 1000;
+var EXTERNAL_ALERT_KV_NAMESPACE = "slack-external-alert";
+var externalityCache = new Map;
+var channelGeneration = new Map;
+var generationCounter = 0;
+var EXTERNAL_CHANNEL_BLOCKED_REPLY = "This channel is shared with another organization. The swarm does not work here.";
+function externalChannelToolError(channelId, reason = "external") {
+  if (reason === "unverified") {
+    return `Could not verify that channel ${channelId} is internal to this organization. SLACK_BLOCK_EXTERNAL_CHANNELS blocks swarm messages there until Slack confirms it. Try again later.`;
+  }
+  return `Channel ${channelId} is shared with another organization. SLACK_BLOCK_EXTERNAL_CHANNELS blocks swarm messages there.`;
+}
+function isBlockExternalEnabled() {
+  return isEnvFlagEnabled("SLACK_BLOCK_EXTERNAL_CHANNELS", false);
+}
+function resetExternalChannelStateForTesting() {
+  externalityCache.clear();
+  channelGeneration.clear();
+}
+function setBounded(map, key, value) {
+  map.delete(key);
+  if (map.size >= EXTERNALITY_CACHE_MAX) {
+    const oldest = map.keys().next().value;
+    if (oldest !== undefined)
+      map.delete(oldest);
+  }
+  map.set(key, value);
+}
+function bumpGeneration(channelId) {
+  generationCounter += 1;
+  setBounded(channelGeneration, channelId, generationCounter);
+}
+function invalidateChannelExternality(channelId) {
+  externalityCache.delete(channelId);
+  bumpGeneration(channelId);
+}
+function recordExternalChannel(channelId) {
+  bumpGeneration(channelId);
+  setBounded(externalityCache, channelId, {
+    value: "external",
+    expiresAt: Date.now() + EXTERNALITY_TTL_MS
+  });
+}
+async function getChannelExternality(client, channelId) {
+  const cached = externalityCache.get(channelId);
+  if (cached && cached.expiresAt > Date.now())
+    return cached.value;
+  if (cached)
+    externalityCache.delete(channelId);
+  const generation = channelGeneration.get(channelId);
+  let value;
+  try {
+    const resp = await client.conversations.info({ channel: channelId });
+    const ch = resp.channel ?? {};
+    value = ch.is_ext_shared === true || ch.is_pending_ext_shared === true ? "external" : "internal";
+  } catch (error) {
+    console.warn(`[Slack] conversations.info failed for ${channelId}:`, scrubSecrets(error instanceof Error ? error.message : String(error)));
+    return "unknown";
+  }
+  if (channelGeneration.get(channelId) !== generation) {
+    const fresher = externalityCache.get(channelId);
+    if (fresher && fresher.expiresAt > Date.now())
+      return fresher.value;
+    return value === "external" ? "external" : "unknown";
+  }
+  setBounded(externalityCache, channelId, { value, expiresAt: Date.now() + EXTERNALITY_TTL_MS });
+  return value;
+}
+async function getChannelBlockReason(client, channelId, envelopeFlag) {
+  if (!isBlockExternalEnabled())
+    return null;
+  if (envelopeFlag === true) {
+    recordExternalChannel(channelId);
+    return "external";
+  }
+  const externality = await getChannelExternality(client, channelId);
+  if (externality === "external")
+    return "external";
+  if (externality === "unknown") {
+    console.warn(`[Slack] Could not tell if channel ${channelId} is external; blocking (fail closed)`);
+    return "unverified";
+  }
+  return null;
+}
+async function shouldBlockChannel(client, channelId, envelopeFlag) {
+  return await getChannelBlockReason(client, channelId, envelopeFlag) !== null;
+}
+async function postExternalChannelAlert(client, channelId, trigger, leave, scopeHint) {
+  const alertsChannel = process.env.SLACK_ALERTS_CHANNEL?.trim();
+  if (!alertsChannel) {
+    console.warn("[Slack] SLACK_ALERTS_CHANNEL not set; skipping external channel alert");
+    return;
+  }
+  const key = `${channelId}:${trigger}`;
+  if (!await reserveAlert(key))
+    return;
+  const lines = [
+    `:no_entry: Swarm bot in external Slack channel <#${channelId}> (${channelId})`,
+    `Trigger: ${trigger}`,
+    `Leave: ${leave}`,
+    ...scopeHint ? [scopeHint] : [],
+    "Inbound guard: active. The swarm creates no task from this channel."
+  ];
+  try {
+    await client.chat.postMessage({
+      channel: alertsChannel,
+      text: scrubSecrets(lines.join(`
+`)),
+      unfurl_links: false,
+      unfurl_media: false
+    });
+  } catch (error) {
+    console.error("[Slack] Failed to send external channel alert:", scrubSecrets(error instanceof Error ? error.message : String(error)));
+    await settleAlert(key, false);
+    return;
+  }
+  await settleAlert(key, true);
+}
+async function reserveAlert(key) {
+  try {
+    return await claimKv({
+      namespace: EXTERNAL_ALERT_KV_NAMESPACE,
+      key,
+      value: "sending",
+      valueType: "string",
+      expiresAt: Date.now() + ALERT_SENDING_TTL_MS
+    });
+  } catch (error) {
+    console.warn("[Slack] External channel alert dedupe unavailable:", error);
+    return true;
+  }
+}
+async function settleAlert(key, sent) {
+  try {
+    if (sent) {
+      await upsertKv({
+        namespace: EXTERNAL_ALERT_KV_NAMESPACE,
+        key,
+        value: "sent",
+        valueType: "string",
+        expiresAt: Date.now() + ALERT_DEDUPE_MS
+      });
+    } else {
+      await deleteKv(EXTERNAL_ALERT_KV_NAMESPACE, key);
+    }
+  } catch (error) {
+    console.warn("[Slack] Failed to record external channel alert state:", error);
+  }
+}
+async function leaveExternalChannel(client, channelId, reason) {
+  let leave;
+  let scopeHint;
+  try {
+    await client.conversations.leave({ channel: channelId });
+    leave = "left";
+  } catch (error) {
+    const code = slackCode(error);
+    const notInChannel = code === "not_in_channel" || error?.data?.not_in_channel === true;
+    if (notInChannel) {
+      leave = "left";
+    } else {
+      leave = `failed (${code ?? "unknown_error"})`;
+      if (code === "missing_scope")
+        scopeHint = slackMissingScopeMessage(error);
+      console.error(`[Slack] Failed to leave external channel ${channelId}: ${leave}`);
+    }
+  }
+  if (leave === "left")
+    console.log(`[Slack] Left external channel ${channelId} (${reason})`);
+  await postExternalChannelAlert(client, channelId, reason, leave, scopeHint);
+}
+async function scanExternalChannelsOnBoot(client) {
+  if (!isBlockExternalEnabled())
+    return;
+  await sweepExpiredKv(EXTERNAL_ALERT_KV_NAMESPACE).catch((error) => {
+    console.warn("[Slack] Failed to sweep expired external channel alert keys:", error);
+  });
+  let cursor;
+  do {
+    const resp = await client.users.conversations({
+      types: "public_channel,private_channel",
+      exclude_archived: true,
+      limit: 200,
+      cursor
+    });
+    for (const ch of resp.channels ?? []) {
+      if (!ch.id || !(ch.is_ext_shared === true || ch.is_pending_ext_shared === true))
+        continue;
+      await postExternalChannelAlert(client, ch.id, "boot-scan", "not attempted (report only)");
+    }
+    cursor = resp.response_metadata?.next_cursor || undefined;
+  } while (cursor);
+}
+
+export { slackCode, slackMissingScopeMessage, withAutoJoin, EXTERNAL_ALERT_KV_NAMESPACE, EXTERNAL_CHANNEL_BLOCKED_REPLY, externalChannelToolError, isBlockExternalEnabled, resetExternalChannelStateForTesting, invalidateChannelExternality, recordExternalChannel, getChannelExternality, getChannelBlockReason, shouldBlockChannel, leaveExternalChannel, scanExternalChannelsOnBoot };

package/dist/{cli-wd0hz6ah.js → cli-kbrt8gqa.js}

@@ -1,11 +1,16 @@
+import {
+  require_extend
+} from "./cli-kceah1eh.js";
 import {
   retryProviderRequest
 } from "./cli-zy39d433.js";
 import {
-  require_ecdsa_sig_formatter,
-  require_jws,
   require_p_retry
-} from "./cli-yatxqynm.js";
+} from "./cli-rhs9pz33.js";
+import {
+  require_ecdsa_sig_formatter,
+  require_jws
+} from "./cli-9ha6hs2d.js";
 import {
   getJsonSchemaToolParameters,
   resolveJsonSchemaStrictSampling,
@@ -28,93 +33,6 @@ import {
   __toESM
 } from "./cli-bc05qbss.js";
 
-// node_modules/extend/index.js
-var require_extend = __commonJS(function(exports, module) {
-  var hasOwn = Object.prototype.hasOwnProperty;
-  var toStr = Object.prototype.toString;
-  var defineProperty = Object.defineProperty;
-  var gOPD = Object.getOwnPropertyDescriptor;
-  var isArray = function isArray2(arr) {
-    if (typeof Array.isArray === "function") {
-      return Array.isArray(arr);
-    }
-    return toStr.call(arr) === "[object Array]";
-  };
-  var isPlainObject = function isPlainObject2(obj) {
-    if (!obj || toStr.call(obj) !== "[object Object]") {
-      return false;
-    }
-    var hasOwnConstructor = hasOwn.call(obj, "constructor");
-    var hasIsPrototypeOf = obj.constructor && obj.constructor.prototype && hasOwn.call(obj.constructor.prototype, "isPrototypeOf");
-    if (obj.constructor && !hasOwnConstructor && !hasIsPrototypeOf) {
-      return false;
-    }
-    var key;
-    for (key in obj) {}
-    return typeof key === "undefined" || hasOwn.call(obj, key);
-  };
-  var setProperty = function setProperty2(target, options) {
-    if (defineProperty && options.name === "__proto__") {
-      defineProperty(target, options.name, {
-        enumerable: true,
-        configurable: true,
-        value: options.newValue,
-        writable: true
-      });
-    } else {
-      target[options.name] = options.newValue;
-    }
-  };
-  var getProperty = function getProperty2(obj, name) {
-    if (name === "__proto__") {
-      if (!hasOwn.call(obj, name)) {
-        return;
-      } else if (gOPD) {
-        return gOPD(obj, name).value;
-      }
-    }
-    return obj[name];
-  };
-  module.exports = function extend() {
-    var options, name, src, copy, copyIsArray, clone;
-    var target = arguments[0];
-    var i = 1;
-    var length = arguments.length;
-    var deep = false;
-    if (typeof target === "boolean") {
-      deep = target;
-      target = arguments[1] || {};
-      i = 2;
-    }
-    if (target == null || typeof target !== "object" && typeof target !== "function") {
-      target = {};
-    }
-    for (;i < length; ++i) {
-      options = arguments[i];
-      if (options != null) {
-        for (name in options) {
-          src = getProperty(target, name);
-          copy = getProperty(options, name);
-          if (target !== copy) {
-            if (deep && copy && (isPlainObject(copy) || (copyIsArray = isArray(copy)))) {
-              if (copyIsArray) {
-                copyIsArray = false;
-                clone = src && isArray(src) ? src : [];
-              } else {
-                clone = src && isPlainObject(src) ? src : {};
-              }
-              setProperty(target, { name, newValue: extend(deep, clone, copy) });
-            } else if (typeof copy !== "undefined") {
-              setProperty(target, { name, newValue: copy });
-            }
-          }
-        }
-      }
-    }
-    return target;
-  };
-});
-
 // node_modules/gaxios/package.json
 var require_package = __commonJS(function(exports, module) {
   module.exports = {
@@ -843,7 +761,7 @@ Content-Type: ${partContentType}\r
     static #proxyAgent;
     static #fetch;
     static async#getProxyAgent() {
-      this.#proxyAgent ||= (await import("./index-9ch1n761.js").then((m)=>__toESM(m.default))).HttpsProxyAgent;
+      this.#proxyAgent ||= (await import("./index-mh85qhec.js").then((m)=>__toESM(m.default))).HttpsProxyAgent;
       return this.#proxyAgent;
     }
     static async#getFetch() {

package/dist/cli-kceah1eh.js

@@ -0,0 +1,92 @@
+import {
+  __commonJS
+} from "./cli-bc05qbss.js";
+
+// node_modules/extend/index.js
+var require_extend = __commonJS(function(exports, module) {
+  var hasOwn = Object.prototype.hasOwnProperty;
+  var toStr = Object.prototype.toString;
+  var defineProperty = Object.defineProperty;
+  var gOPD = Object.getOwnPropertyDescriptor;
+  var isArray = function isArray2(arr) {
+    if (typeof Array.isArray === "function") {
+      return Array.isArray(arr);
+    }
+    return toStr.call(arr) === "[object Array]";
+  };
+  var isPlainObject = function isPlainObject2(obj) {
+    if (!obj || toStr.call(obj) !== "[object Object]") {
+      return false;
+    }
+    var hasOwnConstructor = hasOwn.call(obj, "constructor");
+    var hasIsPrototypeOf = obj.constructor && obj.constructor.prototype && hasOwn.call(obj.constructor.prototype, "isPrototypeOf");
+    if (obj.constructor && !hasOwnConstructor && !hasIsPrototypeOf) {
+      return false;
+    }
+    var key;
+    for (key in obj) {}
+    return typeof key === "undefined" || hasOwn.call(obj, key);
+  };
+  var setProperty = function setProperty2(target, options) {
+    if (defineProperty && options.name === "__proto__") {
+      defineProperty(target, options.name, {
+        enumerable: true,
+        configurable: true,
+        value: options.newValue,
+        writable: true
+      });
+    } else {
+      target[options.name] = options.newValue;
+    }
+  };
+  var getProperty = function getProperty2(obj, name) {
+    if (name === "__proto__") {
+      if (!hasOwn.call(obj, name)) {
+        return;
+      } else if (gOPD) {
+        return gOPD(obj, name).value;
+      }
+    }
+    return obj[name];
+  };
+  module.exports = function extend() {
+    var options, name, src, copy, copyIsArray, clone;
+    var target = arguments[0];
+    var i = 1;
+    var length = arguments.length;
+    var deep = false;
+    if (typeof target === "boolean") {
+      deep = target;
+      target = arguments[1] || {};
+      i = 2;
+    }
+    if (target == null || typeof target !== "object" && typeof target !== "function") {
+      target = {};
+    }
+    for (;i < length; ++i) {
+      options = arguments[i];
+      if (options != null) {
+        for (name in options) {
+          src = getProperty(target, name);
+          copy = getProperty(options, name);
+          if (target !== copy) {
+            if (deep && copy && (isPlainObject(copy) || (copyIsArray = isArray(copy)))) {
+              if (copyIsArray) {
+                copyIsArray = false;
+                clone = src && isArray(src) ? src : [];
+              } else {
+                clone = src && isPlainObject(src) ? src : {};
+              }
+              setProperty(target, { name, newValue: extend(deep, clone, copy) });
+            } else if (typeof copy !== "undefined") {
+              setProperty(target, { name, newValue: copy });
+            }
+          }
+        }
+      }
+    }
+    return target;
+  };
+});
+
+export { require_extend };

package/dist/{cli-prrt9fa0.js → cli-ke896fcf.js}

@@ -4,7 +4,7 @@ import {
   ControllerOfflineError,
   ControllerStatusResultSchema,
   RuntimeHandleSchema
-} from "./cli-ppy4nnnh.js";
+} from "./cli-f7kr7svz.js";
 import {
   canClaim,
   createWorkerTaskFollowUp,
@@ -14,7 +14,7 @@ import {
   listRuntimeInstancesForPool,
   markRuntimeTerminated,
   runtimeStaleThresholdMinutes
-} from "./cli-ztrv9y21.js";
+} from "./cli-bzszjf2p.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-re8z5p8p.js";
@@ -30,12 +30,12 @@ import {
   listRuntimePools,
   mintRuntimeToken,
   resolvePoolDelivery
-} from "./cli-e0a9sk00.js";
+} from "./cli-eejsgvm4.js";
 import {
   canProvisionKind,
   createRuntimeProvider,
   init_runtime_providers
-} from "./cli-cd0hv9nh.js";
+} from "./cli-ra0xzggj.js";
 import {
   import_websocket
 } from "./cli-76yrvwsa.js";
@@ -55,12 +55,12 @@ import {
   upsertSwarmConfig,
   validateConfigValue,
   validateControllerGraceSec
-} from "./cli-tgpfnm6r.js";
+} from "./cli-ef1hg1wv.js";
 import {
   TERMINAL_TASK_STATUSES,
   init_types,
   isTerminalTaskStatus
-} from "./cli-hsem16hb.js";
+} from "./cli-cgtksawx.js";
 import {
   init_zod
 } from "./cli-sd0mxa3c.js";
@@ -70,7 +70,7 @@ import {
 import {
   init_event_bus,
   workflowEventBus
-} from "./cli-81r1wjyv.js";
+} from "./cli-9nfx44eh.js";
 import {
   init_bus,
   realtimeBus
@@ -82,7 +82,7 @@ import {
 import {
   buildImageTemplate,
   init_dispatch
-} from "./cli-db3m6zdt.js";
+} from "./cli-d2qr7aj4.js";
 import {
   RUNTIME_LABELS,
   init_types as init_types2
@@ -91,7 +91,7 @@ import {
   init_secret_scrubber,
   registerVolatileSecret,
   scrubSecrets
-} from "./cli-d161g69q.js";
+} from "./cli-p1x85d2t.js";
 import {
   __require
 } from "./cli-bc05qbss.js";
@@ -1204,7 +1204,7 @@ async function recoverSessions(runtimeId, reason) {
   }
   if (!sessions2.length)
     return;
-  const { remediateTaskForDeadRuntime } = await import("./heartbeat-3k31q4g2.js");
+  const { remediateTaskForDeadRuntime } = await import("./heartbeat-6dakeb61.js");
   for (const session of sessions2) {
     try {
       const task = await getTaskById(session.taskId);

package/dist/{cli-nv4zd0b9.js → cli-kt6zqg0e.js}

@@ -2,20 +2,20 @@ import {
   ACPAdapter,
   grokTargetProfile,
   isGrokOpenRouterModel
-} from "./cli-c2pq2rjb.js";
+} from "./cli-n3hzg89b.js";
 import {
   getOpenRouterAttributionHeaders,
   getOpenRouterBaseUrl,
   init_openrouter_base_url
 } from "./cli-a35hzdve.js";
-import {
-  init_src,
-  normalizeGrokModel
-} from "./cli-014vns2y.js";
 import {
   init_secret_scrubber,
   registerVolatileSecret
-} from "./cli-d161g69q.js";
+} from "./cli-p1x85d2t.js";
+import {
+  init_src,
+  normalizeGrokModel
+} from "./cli-e3g5mbkz.js";
 
 // src/providers/grok-adapter.ts
 init_src();

package/dist/{cli-g6t9texm.js → cli-m50t4309.js}

@@ -1,13 +1,13 @@
 import {
   materializeClaudeMd,
   stopClaudeMd
-} from "./cli-pj6x9qce.js";
+} from "./cli-6jyj59nb.js";
 import {
   guardGhPrBody
 } from "./cli-v6vv7dy8.js";
 import {
   summarizeSession
-} from "./cli-cf69s3ew.js";
+} from "./cli-tr4sxp68.js";
 import {
   checkToolLoop,
   clearToolHistory
@@ -26,11 +26,11 @@ import {
   init_profile_sync,
   readIdentityBaselines,
   warnProfileFileTooLarge
-} from "./cli-nyhb1r6x.js";
+} from "./cli-s2sp957d.js";
 import {
   init_package,
   package_default
-} from "./cli-esnpehf5.js";
+} from "./cli-k382tshb.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getMcpBaseUrl,
@@ -43,7 +43,7 @@ import {
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-d161g69q.js";
+} from "./cli-p1x85d2t.js";
 
 // src/hooks/hook.ts
 init_package();
@@ -825,19 +825,6 @@ You do not have a pre-defined agent ID, you will receive one when you join the s
       }
       break;
     case "Stop":
-      try {
-        const pm2ListOutput = await Bun.$`pm2 jlist 2>/dev/null || echo "[]"`.text();
-        const pm2Processes = JSON.parse(pm2ListOutput.trim());
-        const artifactProcesses = pm2Processes.filter((p) => p.name?.startsWith("artifact-"));
-        for (const proc of artifactProcesses) {
-          try {
-            await Bun.$`pm2 delete ${proc.name}`.quiet();
-          } catch {}
-        }
-      } catch {}
-      try {
-        await Bun.$`pm2 save`.quiet();
-      } catch {}
       if (agentInfo?.id) {
         try {
           await syncAndRestoreClaudeMd(agentInfo.id);