@desplega.ai/agent-swarm 1.85.0 → 1.87.0

package/src/commands/provider-credentials.ts

@@ -23,7 +23,6 @@ import { checkClaudeManagedCredentials } from "../providers/claude-managed-adapt
 import { checkCodexCredentials } from "../providers/codex-adapter";
 import { checkDevinCredentials } from "../providers/devin-adapter";
 import { checkOpencodeCredentials } from "../providers/opencode-adapter";
-import { checkPiMonoCredentials } from "../providers/pi-mono-adapter";
 import type { CredCheckOptions, CredStatus } from "../providers/types";
 import type { AgentCredStatus, AgentLatestModel, ProviderName } from "../types";
 import { scrubSecrets } from "../utils/secret-scrubber";
@@ -55,12 +54,16 @@ export const REQUIRED_CRED_VARS_BY_PROVIDER: Record<SupportedProvider, readonly
 /**
  * Run the predicate for `provider`. Unknown providers throw — call sites
  * should treat that as a configuration bug, not a user-correctable state.
+ *
+ * The `pi` case uses a dynamic import so `@earendil-works/pi-coding-agent`
+ * (which has module-level side effects that crash in the Bun compiled
+ * binary) is only loaded when the pi provider is actually selected.
  */
-export function checkProviderCredentials(
+export async function checkProviderCredentials(
   provider: string,
   env: Record<string, string | undefined>,
   opts?: CredCheckOptions,
-): CredStatus {
+): Promise<CredStatus> {
   switch (provider) {
     case "claude":
       return checkClaudeCredentials(env);
@@ -72,8 +75,10 @@ export function checkProviderCredentials(
       return checkDevinCredentials(env);
     case "opencode":
       return checkOpencodeCredentials(env, opts);
-    case "pi":
+    case "pi": {
+      const { checkPiMonoCredentials } = await import("../providers/pi-mono-adapter");
       return checkPiMonoCredentials(env, opts);
+    }
     default:
       throw new Error(
         `checkProviderCredentials: unknown provider "${provider}". Supported: claude, claude-managed, codex, devin, opencode, pi.`,
@@ -386,7 +391,7 @@ export async function buildCredStatusReport(
   opts: CredCheckOptions = {},
   kind: AgentCredStatus["reportKind"],
 ): Promise<AgentCredStatus> {
-  const presence = checkProviderCredentials(provider, env, opts);
+  const presence = await checkProviderCredentials(provider, env, opts);
   let liveTest: AgentCredStatus["liveTest"] = null;
   if (presence.ready) {
     const live = await validateProviderCredentials(provider);

package/src/commands/resume-session.ts

@@ -1,5 +1,21 @@
 import type { ProviderName } from "../types";
 
+/**
+ * # Native session resume is deprecated.
+ *
+ * Follow-up continuity is delivered via the context preamble built by
+ * `buildContextPreamble` in `src/commands/context-preamble.ts`. The preamble
+ * is bounded, deterministic, and survives worker-container restarts — the
+ * failure modes that native resume could not handle.
+ *
+ * `resolveResumeSession` is preserved as an observability shim: it accepts
+ * the same candidate shape the runner already builds and returns every
+ * non-empty candidate in `skipped` with a deprecation reason. The result's
+ * `resumeSessionId` is always `undefined` — adapters spawn fresh sessions.
+ *
+ * Refs: thoughts/taras/plans/2026-05-28-deprecate-native-resume.md
+ */
+
 export type ResumeSessionSource = "task" | "parent";
 
 export interface ResumeSessionCandidate {
@@ -18,33 +34,28 @@ export interface ResumeSessionSkip {
 }
 
 export interface ResumeSessionResolution {
+  /**
+   * @deprecated Always `undefined`. Native session resume was removed in the
+   * 2026-05-28 deprecation. See module docstring + context-preamble.ts.
+   */
   resumeSessionId?: string;
   source?: ResumeSessionSource;
   provider?: ProviderName;
   skipped: ResumeSessionSkip[];
 }
 
-const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-
-const RESUMABLE_PROVIDERS = new Set<ProviderName>(["claude", "claude-managed", "codex"]);
-
-export function isClaudeCliSessionId(sessionId: string): boolean {
-  return UUID_RE.test(sessionId);
-}
-
-function normalizeStoredProvider(candidate: ResumeSessionCandidate): ProviderName | undefined {
-  if (candidate.provider === "claude" && candidate.providerMeta?.managed === true) {
-    return "claude-managed";
-  }
-  return candidate.provider;
-}
-
-function providerSupportsResume(provider: ProviderName): boolean {
-  return RESUMABLE_PROVIDERS.has(provider);
-}
+export const RESUME_DEPRECATED_REASON = "native resume deprecated — using context preamble";
 
+/**
+ * Observability shim. Records the candidates that *would* have been resume
+ * targets in the old world; never asks the adapter to resume.
+ *
+ * `_currentProvider` is kept for call-site compatibility with the runner
+ * (both call sites already pass `state.harnessProvider`); the value is
+ * intentionally unused.
+ */
 export function resolveResumeSession(
-  currentProvider: ProviderName,
+  _currentProvider: ProviderName,
   candidates: ResumeSessionCandidate[],
 ): ResumeSessionResolution {
   const skipped: ResumeSessionSkip[] = [];
@@ -52,66 +63,12 @@ export function resolveResumeSession(
   for (const candidate of candidates) {
     const sessionId = candidate.sessionId?.trim();
     if (!sessionId) continue;
-
-    const storedProvider = normalizeStoredProvider(candidate);
-
-    if (!storedProvider) {
-      if (currentProvider === "claude" && isClaudeCliSessionId(sessionId)) {
-        return {
-          resumeSessionId: sessionId,
-          source: candidate.source,
-          provider: "claude",
-          skipped,
-        };
-      }
-
-      skipped.push({
-        source: candidate.source,
-        sessionId,
-        reason:
-          currentProvider === "claude"
-            ? "legacy Claude resume requires a UUID session id"
-            : "stored session provider is unknown",
-      });
-      continue;
-    }
-
-    if (storedProvider !== currentProvider) {
-      skipped.push({
-        source: candidate.source,
-        sessionId,
-        provider: storedProvider,
-        reason: `stored session provider ${storedProvider} does not match current provider ${currentProvider}`,
-      });
-      continue;
-    }
-
-    if (!providerSupportsResume(currentProvider)) {
-      skipped.push({
-        source: candidate.source,
-        sessionId,
-        provider: storedProvider,
-        reason: `provider ${currentProvider} does not support runner resume`,
-      });
-      continue;
-    }
-
-    if (currentProvider === "claude" && !isClaudeCliSessionId(sessionId)) {
-      skipped.push({
-        source: candidate.source,
-        sessionId,
-        provider: storedProvider,
-        reason: "Claude CLI --resume requires a UUID session id",
-      });
-      continue;
-    }
-
-    return {
-      resumeSessionId: sessionId,
+    skipped.push({
       source: candidate.source,
-      provider: storedProvider,
-      skipped,
-    };
+      sessionId,
+      provider: candidate.provider,
+      reason: RESUME_DEPRECATED_REASON,
+    });
   }
 
   return { skipped };

package/src/commands/runner.ts

@@ -50,7 +50,7 @@ import { refreshSkillsIfChanged } from "../utils/skills-refresh.ts";
 import { detectVcsProvider } from "../vcs/index.ts";
 import { validateJsonSchema } from "../workflows/json-schema-validator.ts";
 import { interpolate } from "../workflows/template.ts";
-import { buildContextPreamble } from "./context-preamble.ts";
+import { buildContextPreamble, buildResumeContextPreamble } from "./context-preamble.ts";
 import { awaitCredentials, BootMaxWaitExceededError, EX_CONFIG } from "./credential-wait.ts";
 import {
   buildCredStatusReport,
@@ -1011,6 +1011,84 @@ async function reportKeyRateLimit(
   }
 }
 
+/**
+ * Supersede a task via the API (for graceful shutdown / context-limit /
+ * operator-triggered). Returns `{ ok: true, resumeTaskId }` on success.
+ * On 5xx / network failure returns `{ ok: false }` so the caller can fall
+ * back to the legacy `pauseTaskViaAPI` (handles partial-deploy windows where
+ * the API is older than the worker).
+ */
+async function supersedeTaskViaAPI(
+  config: ApiConfig,
+  role: string,
+  taskId: string,
+  reason: "graceful_shutdown" | "context_limits" | "manual_supersede",
+): Promise<{ ok: true; resumeTaskId: string | null; kind: string } | { ok: false }> {
+  const headers: Record<string, string> = {
+    "X-Agent-ID": config.agentId,
+    "Content-Type": "application/json",
+  };
+  if (config.apiKey) {
+    headers.Authorization = `Bearer ${config.apiKey}`;
+  }
+
+  try {
+    const response = await fetch(`${config.apiUrl}/api/tasks/${taskId}/supersede`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify({ reason }),
+    });
+
+    if (response.ok) {
+      const body = (await response.json().catch(() => null)) as {
+        resumeTaskId?: string | null;
+        kind?: string;
+      } | null;
+      const resumeTaskId = body?.resumeTaskId ?? null;
+      const kind = body?.kind ?? "resumed";
+      console.log(
+        `[${role}] Task ${taskId.slice(0, 8)} superseded (kind=${kind}, resume=${
+          resumeTaskId ? resumeTaskId.slice(0, 8) : "none"
+        })`,
+      );
+      return { ok: true, resumeTaskId, kind };
+    }
+
+    // 404 / 405 — the route doesn't exist on this API server. Happens during
+    // partial deploys (new worker rolled out before new API). Fall back to
+    // legacy pause so the task isn't left orphaned in_progress until heartbeat
+    // recovery picks it up minutes later.
+    if (response.status === 404 || response.status === 405) {
+      console.warn(
+        `[${role}] Supersede route missing for task ${taskId.slice(0, 8)} (${response.status}); falling back to pause`,
+      );
+      return { ok: false };
+    }
+
+    // Other 4xx → deliberate rejection from a current API (bad request,
+    // idempotent no-op, forbidden, conflict). Do NOT fall back to legacy
+    // pause — the API actively rejected the supersede, retrying via pause
+    // would be wrong.
+    if (response.status >= 400 && response.status < 500) {
+      const error = await response.text();
+      console.warn(
+        `[${role}] Supersede rejected for task ${taskId.slice(0, 8)}: ${response.status} ${error}`,
+      );
+      return { ok: true, resumeTaskId: null, kind: "rejected" };
+    }
+
+    // 5xx → fall through to legacy pause.
+    const error = await response.text();
+    console.warn(
+      `[${role}] Supersede failed for task ${taskId.slice(0, 8)}: ${response.status} ${error}`,
+    );
+    return { ok: false };
+  } catch (err) {
+    console.warn(`[${role}] Error superseding task ${taskId.slice(0, 8)}: ${err}`);
+    return { ok: false };
+  }
+}
+
 /**
  * Pause a task via the API (for graceful shutdown).
  * Unlike marking as failed, paused tasks can be resumed after container restart.
@@ -1181,21 +1259,35 @@ function setupShutdownHandlers(
         }
       }
 
-      // Force kill remaining tasks and mark them as paused (for graceful resume after restart)
+      // Force kill remaining tasks and supersede them so a fresh "resume"
+      // follow-up can pick up the work on any worker. Fallback chain:
+      //   1. supersedeTaskViaAPI (primary)
+      //   2. pauseTaskViaAPI (legacy — preserves graceful behavior during
+      //      partial-deploy windows where the API server is older than the
+      //      worker)
+      //   3. ensureTaskFinished (mark as failed — last resort)
       if (state.activeTasks.size > 0) {
         console.log(
-          `[${role}] Pausing ${state.activeTasks.size} remaining task(s) for resume after restart...`,
+          `[${role}] Superseding ${state.activeTasks.size} remaining task(s) for resume after restart...`,
         );
         for (const [taskId, task] of state.activeTasks) {
-          console.log(`[${role}] Pausing task ${taskId.slice(0, 8)}`);
+          console.log(`[${role}] Superseding task ${taskId.slice(0, 8)}`);
           task.session.abort().catch(() => {});
-          // Mark as paused for graceful resume (instead of failed)
           if (apiConfig) {
+            const supersede = await supersedeTaskViaAPI(
+              apiConfig,
+              role,
+              taskId,
+              "graceful_shutdown",
+            );
+            if (supersede.ok) {
+              continue;
+            }
+            // 5xx / network failure → try legacy pause for partial-deploy windows.
             const paused = await pauseTaskViaAPI(apiConfig, role, taskId);
             if (!paused) {
-              // Fallback to marking as failed if pause fails
               console.warn(
-                `[${role}] Failed to pause task ${taskId.slice(0, 8)}, marking as failed instead`,
+                `[${role}] Both supersede and pause failed for task ${taskId.slice(0, 8)}, marking as failed instead`,
               );
               await ensureTaskFinished(
                 apiConfig,
@@ -2182,7 +2274,7 @@ export function implicitCloseActiveToolSpans(
 }
 
 async function spawnProviderProcess(
-  adapter: ReturnType<typeof createProviderAdapter>,
+  adapter: Awaited<ReturnType<typeof createProviderAdapter>>,
   opts: {
     prompt: string;
     logFile: string;
@@ -3121,7 +3213,7 @@ export async function runAgent(config: RunnerConfig, opts: RunnerOptions) {
   // Create provider adapter using the resolved value. `let` so the poll-loop
   // reconciliation block (Section 4) can swap it live when an operator changes
   // HARNESS_PROVIDER in swarm_config — call sites read the current binding.
-  let adapter = createProviderAdapter(bootProvider);
+  let adapter = await createProviderAdapter(bootProvider);
 
   // Configure HTTP-based template resolution (workers resolve via API, not local DB)
   if (apiKey) {
@@ -3368,7 +3460,7 @@ export async function runAgent(config: RunnerConfig, opts: RunnerOptions) {
       const previous = state.harnessProvider;
       console.log(`[${role}] [harness] Reconciling adapter: ${previous} → ${resolvedProvider}`);
       try {
-        adapter = createProviderAdapter(resolvedProvider);
+        adapter = await createProviderAdapter(resolvedProvider);
         state.harnessProvider = resolvedProvider;
         basePrompt = await buildSystemPrompt();
         resolvedSystemPrompt = additionalSystemPrompt
@@ -3754,7 +3846,15 @@ export async function runAgent(config: RunnerConfig, opts: RunnerOptions) {
   }
 
   // ========== Resume paused tasks with PRIORITY ==========
-  // Check for paused tasks from previous shutdown and resume them before normal polling
+  // LEGACY SAFETY NET — kept for tasks that were paused by older worker
+  // builds during partial-deploy windows (when the API server already
+  // accepted /pause but the new worker has rolled out /supersede). New
+  // graceful-shutdown writes go through the supersede path (see
+  // supersedeTaskViaAPI + the SIGTERM handler) and create a fresh
+  // "resume" follow-up task instead of mutating the original. Cleanup of
+  // this entire block is tracked in the "Legacy paused-task cleanup"
+  // follow-up plan — remove once no new `paused` tasks have been created
+  // for one full quarter.
   try {
     console.log(`[${role}] Checking for paused tasks to resume...`);
     const pausedTasks = await getPausedTasksFromAPI(apiConfig);
@@ -3909,7 +4009,10 @@ export async function runAgent(config: RunnerConfig, opts: RunnerOptions) {
               logFile,
               systemPrompt: resolvedSystemPrompt,
               additionalArgs: opts.additionalArgs,
-              resumeSessionId: resumeResolution.resumeSessionId,
+              // Native resume deprecated: always undefined. Follow-up continuity flows through
+              // the context preamble injected above (see context-preamble.ts).
+              // resumeResolution is still computed for observability via logResumeResolution.
+              resumeSessionId: undefined,
               role,
               apiUrl,
               apiKey,
@@ -4177,13 +4280,20 @@ export async function runAgent(config: RunnerConfig, opts: RunnerOptions) {
         // Universal context preamble: inject for all providers when task is a follow-up.
         // Gives non-resumable providers (opencode/pi/devin) prior-task context; also
         // acts as a bounded safety net for resumable ones (claude/codex).
-        const taskObj = trigger.task as { parentTaskId?: string } | undefined;
+        // For taskType="resume" (created by supersedeTaskViaAPI), use the
+        // larger resume preamble that includes a session-log tool-call summary.
+        const taskObj = trigger.task as { parentTaskId?: string; taskType?: string } | undefined;
         if (taskObj?.parentTaskId && apiUrl) {
-          const contextPreamble = await buildContextPreamble(apiUrl, apiKey, taskObj.parentTaskId);
+          const isResumeTask = taskObj.taskType === "resume";
+          const contextPreamble = isResumeTask
+            ? await buildResumeContextPreamble(apiUrl, apiKey, taskObj.parentTaskId)
+            : await buildContextPreamble(apiUrl, apiKey, taskObj.parentTaskId);
           if (contextPreamble) {
             triggerPrompt = contextPreamble + triggerPrompt;
             console.log(
-              `[${role}] Injected context preamble for follow-up task (parent: ${taskObj.parentTaskId.slice(0, 8)})`,
+              `[${role}] Injected ${isResumeTask ? "resume" : "context"} preamble for ${
+                isResumeTask ? "resume" : "follow-up"
+              } task (parent: ${taskObj.parentTaskId.slice(0, 8)})`,
             );
           }
         }
@@ -4207,7 +4317,9 @@ export async function runAgent(config: RunnerConfig, opts: RunnerOptions) {
               },
             ]);
             logResumeResolution(role, resumeResolution);
-            resumeSessionId = resumeResolution.resumeSessionId;
+            // Native resume deprecated: keep `resumeSessionId` undefined so a fresh
+            // session is spawned. Follow-up continuity flows via the context preamble
+            // injected above (see context-preamble.ts).
           } else {
             console.log(`[${role}] Child task — parent session ID not found, starting fresh`);
           }