@desplega.ai/agent-swarm 1.84.1 → 1.86.0

package/README.md

@@ -124,6 +124,7 @@ Check [our templates](https://templates.agent-swarm.dev) for a quick start.
 - **Workflow engine with Human-in-the-Loop** — DAG-based automation with approval gates, retries, and structured I/O. [Workflows →](https://docs.agent-swarm.dev/docs/concepts/workflows)
 - **Scheduled & recurring tasks** — cron-based automation for standing work. [Scheduling →](https://docs.agent-swarm.dev/docs/concepts/scheduling)
 - **Harness & LLM agnostic** — run with Claude Code, OpenAI Codex, pi-mono, Devin, Claude Managed Agents, raw LLMs, or opencode. [Harness config →](https://docs.agent-swarm.dev/docs/guides/harness-configuration) · [Add a new provider →](https://docs.agent-swarm.dev/docs/guides/harness-providers)
+- **Follow-up continuity across all harnesses** — child tasks inherit bounded prior-task context even on providers without native session resume, while resumable providers still reuse prior sessions when possible. [Task lifecycle →](https://docs.agent-swarm.dev/docs/concepts/task-lifecycle)
 - **Skills & MCP servers** — reusable procedural knowledge and per-agent MCP servers with scope cascade. [MCP tools →](https://docs.agent-swarm.dev/docs/reference/mcp-tools)
 - **DB-backed pages** — agents publish HTML or JSON pages (reports, dashboards, action specs) via the `create_page` MCP tool with public / authed / password modes, version history, view counters, diff helpers, and PDF export. [MCP tools → Pages](https://docs.agent-swarm.dev/docs/reference/mcp-tools#pages-tools)
 - **KV store** — Redis-like namespaced key/value store with auto-scoped context (Slack thread / PR / Linear issue / page). [MCP tools → KV](https://docs.agent-swarm.dev/docs/reference/mcp-tools#kv-tools)

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "1.84.1",
+    "version": "1.86.0",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "1.84.1",
+  "version": "1.86.0",
   "description": "Multi-agent orchestration for Claude Code, Codex, Gemini CLI, and other AI coding assistants",
   "license": "MIT",
   "author": "desplega.sh <contact@desplega.sh>",
@@ -45,6 +45,8 @@
     "tsc:check": "bun tsc --noEmit",
     "check:db-boundary": "bash scripts/check-db-boundary.sh",
     "check:api-key-boundary": "bash scripts/check-api-key-boundary.sh",
+    "sync-chart-version": "bun scripts/sync-chart-version.ts",
+    "check-chart-version": "bun scripts/sync-chart-version.ts --check-if-package-version-changed",
     "cli": "bun src/cli.tsx",
     "hook": "bun src/hooks/hook.ts",
     "claude": "bun src/cli.tsx claude",
@@ -108,12 +110,12 @@
     "@desplega.ai/localtunnel": "^2.2.0",
     "@inkjs/ui": "^2.0.0",
     "@linear/sdk": "^77.0.0",
-    "@earendil-works/pi-agent-core": "^0.75.5",
-    "@earendil-works/pi-ai": "^0.75.5",
-    "@earendil-works/pi-coding-agent": "^0.75.5",
+    "@earendil-works/pi-agent-core": "^0.76.0",
+    "@earendil-works/pi-ai": "^0.76.0",
+    "@earendil-works/pi-coding-agent": "^0.76.0",
     "@modelcontextprotocol/sdk": "^1.25.1",
-    "@openai/codex-sdk": "^0.133.0",
-    "@opencode-ai/sdk": "^1.15.10",
+    "@openai/codex-sdk": "^0.135.0",
+    "@opencode-ai/sdk": "^1.15.12",
     "@openfort/openfort-node": "^0.9.1",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/exporter-trace-otlp-http": "^0.218.0",

package/src/be/db-queries/oauth.ts

@@ -180,3 +180,36 @@ export function isTokenExpiringSoon(provider: string, bufferMs = 5 * 60 * 1000):
   const expiresAt = new Date(tokens.expiresAt).getTime();
   return expiresAt - Date.now() < bufferMs;
 }
+
+// ── OAuth Refresh Locks ──
+
+export function acquireOAuthRefreshLock(provider: string, ttlMs: number): string | null {
+  const owner = crypto.randomUUID();
+  const now = Date.now();
+  const expiresAt = new Date(now + ttlMs).toISOString();
+  const nowIso = new Date(now).toISOString();
+
+  getDb()
+    .query(
+      `INSERT INTO oauth_refresh_locks (provider, owner, expiresAt, createdAt, updatedAt)
+       VALUES (?, ?, ?, ?, ?)
+       ON CONFLICT(provider) DO UPDATE SET
+         owner = excluded.owner,
+         expiresAt = excluded.expiresAt,
+         updatedAt = excluded.updatedAt
+       WHERE oauth_refresh_locks.expiresAt <= ?`,
+    )
+    .run(provider, owner, expiresAt, nowIso, nowIso, nowIso);
+
+  const row = getDb()
+    .query("SELECT owner FROM oauth_refresh_locks WHERE provider = ?")
+    .get(provider) as { owner: string } | null;
+
+  return row?.owner === owner ? owner : null;
+}
+
+export function releaseOAuthRefreshLock(provider: string, owner: string): void {
+  getDb()
+    .query("DELETE FROM oauth_refresh_locks WHERE provider = ? AND owner = ?")
+    .run(provider, owner);
+}

package/src/be/db.ts

@@ -1012,6 +1012,7 @@ type AgentTaskRow = {
   swarmVersion: string | null;
   provider: string | null;
   providerMeta: string | null;
+  totalCostUsd?: number | null;
 };
 
 function rowToAgentTask(row: AgentTaskRow): AgentTask {
@@ -1075,6 +1076,7 @@ function rowToAgentTask(row: AgentTaskRow): AgentTask {
     swarmVersion: row.swarmVersion ?? undefined,
     provider: (row.provider as ProviderName | null) ?? undefined,
     providerMeta: parseProviderMeta(row.provider as ProviderName | null, row.providerMeta),
+    totalCostUsd: row.totalCostUsd ?? undefined,
   };
 }
 
@@ -1110,6 +1112,7 @@ function rowToAgentTaskSummary(row: AgentTaskRow): AgentTaskSummary {
     lastUpdatedAt: t.lastUpdatedAt,
     finishedAt: t.finishedAt,
     peakContextPercent: t.peakContextPercent,
+    totalCostUsd: t.totalCostUsd,
   };
 }
 
@@ -1504,7 +1507,10 @@ export function getAllTasks(
   const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
   const limit = filters?.limit ?? 25;
   const offset = filters?.offset ?? 0;
-  const query = `SELECT * FROM agent_tasks ${whereClause} ORDER BY lastUpdatedAt DESC, priority DESC LIMIT ${limit} OFFSET ${offset}`;
+  const query = `SELECT agent_tasks.*,
+    (SELECT SUM(totalCostUsd) FROM session_costs WHERE session_costs.taskId = agent_tasks.id) AS totalCostUsd
+    FROM agent_tasks ${whereClause}
+    ORDER BY lastUpdatedAt DESC, priority DESC LIMIT ${limit} OFFSET ${offset}`;
 
   const rows = getDb()
     .prepare<AgentTaskRow, (string | AgentTaskStatus)[]>(query)
@@ -1869,6 +1875,50 @@ export function findCompletedTaskInThread(
   return row ? rowToAgentTask(row) : null;
 }
 
+/**
+ * Find the most recent CANCELLED task in a Slack thread. Used by the
+ * follow-up re-delegation guard so a cancellation (worker SIGTERM,
+ * runner-side abort, swarm-events tool-loop abort) doesn't permanently
+ * jam re-dispatch when an earlier sibling task in the same thread also
+ * completed.
+ *
+ * Matches both:
+ *   - `status = 'cancelled'` (the canonical terminal state from cancelTask)
+ *   - `status = 'failed'` with a failureReason that starts with "cancelled"
+ *     or "exit 130" or contains "cancelled" (the codex-adapter abort path
+ *     emits `failureReason: "cancelled"` and exits 130).
+ */
+export function findRecentCancelledTaskInThread(
+  channelId: string,
+  threadTs: string,
+  windowMinutes: number,
+): AgentTask | null {
+  const since = new Date(Date.now() - windowMinutes * 60 * 1000).toISOString();
+  const row = getDb()
+    .prepare<AgentTaskRow, [string, string, string]>(
+      `SELECT * FROM agent_tasks
+       WHERE slackChannelId = ?
+       AND slackThreadTs = ?
+       AND lastUpdatedAt > ?
+       AND (
+         status = 'cancelled'
+         OR (
+           status = 'failed'
+           AND failureReason IS NOT NULL
+           AND (
+             failureReason LIKE 'cancelled%'
+             OR failureReason LIKE 'exit 130%'
+             OR failureReason LIKE '%cancelled%'
+           )
+         )
+       )
+       ORDER BY lastUpdatedAt DESC
+       LIMIT 1`,
+    )
+    .get(channelId, threadTs, since);
+  return row ? rowToAgentTask(row) : null;
+}
+
 export function completeTask(id: string, output?: string): AgentTask | null {
   const oldTask = getTaskById(id);
   if (!oldTask) return null;

package/src/be/migrations/077_oauth_refresh_locks.sql

@@ -0,0 +1,8 @@
+-- Cross-process mutex for OAuth refresh-token rotation.
+CREATE TABLE IF NOT EXISTS oauth_refresh_locks (
+  provider  TEXT PRIMARY KEY,
+  owner     TEXT NOT NULL,
+  expiresAt TEXT NOT NULL,
+  createdAt TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  updatedAt TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);

package/src/be/migrations/078_backfill_gpt_5_5_pricing.sql

@@ -0,0 +1,15 @@
+-- 078_backfill_gpt_5_5_pricing.sql
+-- Backfill Codex GPT-5.5 pricing into existing databases.
+--
+-- The vendored models.dev cache already contains gpt-5.5, and fresh server
+-- boots seed it from src/be/seed-pricing.ts. Existing long-lived DBs can still
+-- be missing those rows, which makes real gpt-5.5 Codex runs land as
+-- costSource='unpriced'. Keep this migration idempotent so every environment
+-- gets the baseline Standard-tier rates.
+
+INSERT OR IGNORE INTO pricing
+  (provider, model, token_class, effective_from, price_per_million_usd, createdAt, lastUpdatedAt)
+VALUES
+  ('codex', 'gpt-5.5', 'input',        0, 5.0,  0, 0),
+  ('codex', 'gpt-5.5', 'cached_input', 0, 0.5,  0, 0),
+  ('codex', 'gpt-5.5', 'output',       0, 30.0, 0, 0);