@desplega.ai/agent-swarm 2.2.0 → 2.3.0

package/dist/{handlers-t5pbabwf.js → handlers-tb3xgjnm.js}

@@ -1,35 +1,35 @@
 import {
   isUserAllowed2,
   registerMessageHandler2
-} from "./cli-xnp2vkx7.js";
-import"./cli-8c1m9mhy.js";
-import"./cli-5ks6x36q.js";
-import"./cli-bddxamg7.js";
+} from "./cli-4hmaheb6.js";
+import"./cli-30m5q8mc.js";
+import"./cli-y3dvz6ge.js";
+import"./cli-8qsx817b.js";
 import"./cli-rdr166ht.js";
-import"./cli-vmbakbq0.js";
+import"./cli-fhvqt2fp.js";
 import"./cli-qz93y3x5.js";
-import"./cli-mvsfbbgq.js";
+import"./cli-65q70v2v.js";
 import"./cli-3h26v7yj.js";
 import"./cli-7a91w22y.js";
 import"./cli-3ggwdtb0.js";
-import"./cli-xx13gqf3.js";
-import"./cli-mnry16kh.js";
-import"./cli-jhhb2v9n.js";
-import"./cli-8w65vwee.js";
+import"./cli-g6p7c2my.js";
+import"./cli-xgn4rwyv.js";
+import"./cli-kqypty34.js";
+import"./cli-qrwp40st.js";
 import"./cli-qje9k2nh.js";
-import"./cli-dw0njd9q.js";
-import"./cli-hwc4a9xm.js";
+import"./cli-jhmjwqcg.js";
+import"./cli-q1812jbw.js";
 import"./cli-8cvvytad.js";
 import"./cli-vjfpshn3.js";
 import"./cli-13p25grh.js";
 import"./cli-0adyhvq2.js";
-import"./cli-tba8fxf9.js";
-import"./cli-ztcxv5nv.js";
-import"./cli-h23mr2s6.js";
+import"./cli-dxwh4j32.js";
+import"./cli-9e9kjqsj.js";
+import"./cli-hz64bcnj.js";
 import"./cli-445c1vp7.js";
 import"./cli-kvzgak7c.js";
-import"./cli-6q7pyd3k.js";
-import"./cli-4c7k75rq.js";
+import"./cli-6vcyw6v7.js";
+import"./cli-re4wkbzx.js";
 import"./cli-ptkpaqfy.js";
 export {
   isUserAllowed2 as isUserAllowed,

package/dist/{heartbeat-2etacsqq.js → heartbeat-h1w1ktce.js}

@@ -7,36 +7,36 @@ import {
   runHeartbeatSweep2,
   startHeartbeat2,
   stopHeartbeat2
-} from "./cli-0k9rcwfy.js";
-import"./cli-z3dk189k.js";
-import"./cli-raejy0mp.js";
-import"./cli-bddxamg7.js";
+} from "./cli-ka01m5rb.js";
+import"./cli-fp4xbw07.js";
+import"./cli-d43xqzbe.js";
+import"./cli-8qsx817b.js";
 import"./cli-rdr166ht.js";
-import"./cli-vmbakbq0.js";
+import"./cli-fhvqt2fp.js";
 import"./cli-qz93y3x5.js";
-import"./cli-mvsfbbgq.js";
+import"./cli-65q70v2v.js";
 import"./cli-3h26v7yj.js";
 import"./cli-7a91w22y.js";
 import"./cli-3ggwdtb0.js";
-import"./cli-xx13gqf3.js";
-import"./cli-mnry16kh.js";
-import"./cli-jhhb2v9n.js";
-import"./cli-8w65vwee.js";
+import"./cli-g6p7c2my.js";
+import"./cli-xgn4rwyv.js";
+import"./cli-kqypty34.js";
+import"./cli-qrwp40st.js";
 import"./cli-qje9k2nh.js";
-import"./cli-dw0njd9q.js";
-import"./cli-hwc4a9xm.js";
+import"./cli-jhmjwqcg.js";
+import"./cli-q1812jbw.js";
 import"./cli-8cvvytad.js";
 import"./cli-vjfpshn3.js";
 import"./cli-13p25grh.js";
 import"./cli-0adyhvq2.js";
-import"./cli-tba8fxf9.js";
-import"./cli-ztcxv5nv.js";
-import"./cli-h23mr2s6.js";
+import"./cli-dxwh4j32.js";
+import"./cli-9e9kjqsj.js";
+import"./cli-hz64bcnj.js";
 import"./cli-445c1vp7.js";
 import"./cli-kvzgak7c.js";
 import"./cli-b2mz5mjc.js";
-import"./cli-6q7pyd3k.js";
-import"./cli-4c7k75rq.js";
+import"./cli-6vcyw6v7.js";
+import"./cli-re4wkbzx.js";
 import"./cli-ptkpaqfy.js";
 export {
   checkHeartbeatChecklist2 as checkHeartbeatChecklist,

package/dist/{hook-3kvmax6d.js → hook-ejja4bpe.js}

@@ -37,7 +37,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-2jm992rm.js";
+} from "./cli-5d1m1qca.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getMcpBaseUrl,

package/dist/{hook-mzxxs5n2.js → hook-skrbja18.js}

@@ -9,7 +9,7 @@ import"./cli-c5sbmw1v.js";
 import"./cli-0726awxw.js";
 import {
   handleHook
-} from "./cli-e5y285rg.js";
+} from "./cli-1v8w782f.js";
 import"./cli-13p25grh.js";
 import"./cli-0adyhvq2.js";
 

package/dist/{http-fn978m0g.js → http-mzh41mfj.js}

@@ -303,7 +303,7 @@ import {
   hasCapability,
   getEnabledCapabilities,
   createServer
-} from "./cli-bddxamg7.js";
+} from "./cli-8qsx817b.js";
 import {
   chatThreadOfContextKey,
   agentContextKey,
@@ -724,26 +724,26 @@ import {
   countScriptRunJournalSteps2,
   countScriptRunJournalAgentTaskSteps2,
   init_db3
-} from "./cli-4c7k75rq.js";
+} from "./cli-re4wkbzx.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-6q7pyd3k.js";
-import"./cli-mnry16kh.js";
+} from "./cli-6vcyw6v7.js";
+import"./cli-xgn4rwyv.js";
 import {
   normalizeModelKey
-} from "./cli-8w65vwee.js";
+} from "./cli-qrwp40st.js";
 import {
   upsertModelCatalogOverlay,
   deleteModelCatalogOverlay,
   loadModelsCatalog,
   requestModelCatalogRefresh2
-} from "./cli-jhhb2v9n.js";
+} from "./cli-kqypty34.js";
 import {
   AMP_ESTIMATE_MODELS,
   ampBillsCacheWrites,
   resolveAmpModel
-} from "./cli-vmbakbq0.js";
+} from "./cli-fhvqt2fp.js";
 import {
   automationIntegrationFixUrl,
   preflightAutomation,
@@ -755,7 +755,7 @@ import {
   cancelWorkflowRun2,
   TriggerSchemaError,
   startWorkflowExecution2
-} from "./cli-dw0njd9q.js";
+} from "./cli-jhmjwqcg.js";
 import {
   require_dist2,
   isInvalidClientError,
@@ -835,14 +835,14 @@ import {
   typecheckWithAmbient,
   typecheckScript,
   parseSkillContent
-} from "./cli-mvsfbbgq.js";
+} from "./cli-65q70v2v.js";
 import {
   buildAuthorizationUrl,
   exchangeAuthorizationCode,
   oauthAppRowToProviderConfig,
   forceRefreshAuthorizationOrThrow,
   forceRefreshTokenOrThrow
-} from "./cli-xx13gqf3.js";
+} from "./cli-g6p7c2my.js";
 import {
   signalProcessGroup,
   detachedProcessGroup,
@@ -870,14 +870,14 @@ import {
   getSlackApp2,
   startSlackApp2,
   stopSlackApp2
-} from "./cli-tba8fxf9.js";
-import"./cli-ztcxv5nv.js";
+} from "./cli-dxwh4j32.js";
+import"./cli-9e9kjqsj.js";
 import {
   createApprovalFollowUpTask,
   generateEdges,
   definitionNodeIds,
   validateDefinition
-} from "./cli-hwc4a9xm.js";
+} from "./cli-q1812jbw.js";
 import"./cli-8cvvytad.js";
 import {
   _fetchHolder,
@@ -942,7 +942,7 @@ import {
   resolvePoolDelivery2,
   createPoolAgent2,
   init_db
-} from "./cli-h23mr2s6.js";
+} from "./cli-hz64bcnj.js";
 import {
   RATING_MODEL_MAX_LENGTH,
   REFERENCES_SOURCE_MAX_LENGTH,
@@ -958,8 +958,8 @@ import {
   checkHeartbeatChecklist2,
   runHeartbeatSweep2,
   stopHeartbeat2
-} from "./cli-0k9rcwfy.js";
-import"./cli-raejy0mp.js";
+} from "./cli-ka01m5rb.js";
+import"./cli-d43xqzbe.js";
 import {
   import_websocket,
   import_websocket_server
@@ -968,7 +968,7 @@ import {
   runtimeSupervisorStatus,
   startRuntimeSupervisor,
   stopRuntimeSupervisor
-} from "./cli-z3dk189k.js";
+} from "./cli-fp4xbw07.js";
 import"./cli-ns59dc6r.js";
 import {
   ACP_TARGET_IDS
@@ -983,7 +983,7 @@ import {
 import {
   inviteEmailToSharedOrg,
   ensureAgentFsCredentialsForAgent
-} from "./cli-ak4c12mh.js";
+} from "./cli-yv3n83x8.js";
 import {
   Anthropic
 } from "./cli-er83cjbn.js";
@@ -1156,7 +1156,7 @@ import {
   KvKeySchema,
   KvEntrySchema,
   init_types
-} from "./cli-ksrphveb.js";
+} from "./cli-yv0vgscc.js";
 import {
   IDENTITY_FIELD_BUDGETS,
   IdentityFieldBudgetError,
@@ -1228,7 +1228,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-2jm992rm.js";
+} from "./cli-5d1m1qca.js";
 import {
   realtimeBus,
   init_bus
@@ -6522,10 +6522,14 @@ function ensureOperator(req, res) {
   return false;
 }
 var moveAssetBodySchema = object2({ key: AssetKeySchema });
+var moveGenericAssetBodySchema = moveAssetBodySchema.extend({
+  cascade: boolean().optional().describe("For tasks only, also move every descendant task recursively through parentTaskId.")
+});
 var moveAssetSuccessSchema = object2({
   entityType: AssetEntityTypeSchema,
   id: string2(),
-  key: AssetKeySchema
+  key: AssetKeySchema,
+  movedTaskIds: array2(string2()).optional()
 });
 var moveAssetResponses = {
   200: { description: "Asset namespace updated", schema: moveAssetSuccessSchema },
@@ -6564,7 +6568,7 @@ var moveAssetRoute = route({
   description: "Updates namespace metadata only. Provider-backed files keep the same provider key, org, and drive; no remote move occurs. Personal keys are labels, not a privacy guarantee.",
   tags: ["Assets"],
   params: object2({ entityType: AssetEntityTypeSchema, id: string2().min(1) }),
-  body: moveAssetBodySchema,
+  body: moveGenericAssetBodySchema,
   responses: moveAssetResponses,
   rbac: {
     ungated: "preserves each entity's current mutation posture; task moves use task.fs.mutate, app moves use app.manage, scripts preserve agent ownership/global-lead rules, file moves require operator authentication, and personal destinations require a matching trusted user"
@@ -6671,18 +6675,27 @@ async function handleAssets(req, res, pathSegments, queryParams, myAgentId) {
     const parsed = await moveAssetRoute.parse(req, res, pathSegments, queryParams);
     if (!parsed)
       return true;
+    if (parsed.body.cascade && parsed.params.entityType !== "task") {
+      jsonError(res, "Cascade is only supported for task namespace moves", 400);
+      return true;
+    }
     if (parsed.params.entityType === "file" && !ensureOperator(req, res))
       return true;
+    let descendantTaskIds;
     if (parsed.params.entityType === "task") {
       const task = await getTaskById2(parsed.params.id);
       if (!task) {
         jsonError(res, "Asset not found", 404);
         return true;
       }
-      if (!await canMutateTaskNamespace(task, myAgentId, req)) {
-        jsonError(res, "Not authorized to move this task namespace", 403);
-        return true;
+      const tasks = parsed.body.cascade ? await getRootTaskChain2(task.id) : [task];
+      for (const target of tasks) {
+        if (!await canMutateTaskNamespace(target, myAgentId, req)) {
+          jsonError(res, "Not authorized to move this task namespace", 403);
+          return true;
+        }
       }
+      descendantTaskIds = tasks.filter((target) => target.id !== task.id).map((target) => target.id);
     }
     if (parsed.params.entityType === "app") {
       if (!await getApp(parsed.params.id)) {
@@ -6712,7 +6725,8 @@ async function handleAssets(req, res, pathSegments, queryParams, myAgentId) {
         entityType: parsed.params.entityType,
         id: parsed.params.id,
         key,
-        changedBy: actor ?? undefined
+        changedBy: actor ?? undefined,
+        descendantTaskIds
       });
       if (!moved) {
         jsonError(res, "Asset not found", 404);
@@ -6721,7 +6735,8 @@ async function handleAssets(req, res, pathSegments, queryParams, myAgentId) {
       moveAssetRoute.respond(res, 200, {
         entityType: parsed.params.entityType,
         id: parsed.params.id,
-        key
+        key,
+        ...moved
       });
     } catch (error) {
       if (error instanceof AssetKeyAuthorizationError) {
@@ -13333,20 +13348,21 @@ var listState = route({
   },
   auth: { apiKey: true }
 });
+var inboxStateItemSchema = object2({
+  itemType: InboxItemTypeSchema,
+  itemId: string2().min(1),
+  status: InboxItemStatusSchema,
+  snoozeUntil: string2().datetime().optional(),
+  readAt: string2().datetime().optional(),
+  lastReadAt: string2().datetime().nullable().optional().describe("Omit to preserve the read cursor, send null to clear it, or send a timestamp to set it, including an earlier time.")
+});
 var upsertState = route({
   method: "patch",
   path: "/api/inbox-state",
   pattern: ["api", "inbox-state"],
   summary: "Upsert per-user dismiss/snooze/done state for an inbox item",
   tags: ["Inbox State"],
-  body: object2({
-    userId: string2(),
-    itemType: InboxItemTypeSchema,
-    itemId: string2().min(1),
-    status: InboxItemStatusSchema,
-    snoozeUntil: string2().datetime().optional(),
-    readAt: string2().datetime().optional()
-  }),
+  body: inboxStateItemSchema.extend({ userId: string2() }),
   responses: {
     200: {
       description: "Upserted inbox state row",
@@ -13357,6 +13373,27 @@ var upsertState = route({
   },
   auth: { apiKey: true }
 });
+var bulkUpsertState = route({
+  method: "patch",
+  path: "/api/inbox-state/bulk",
+  pattern: ["api", "inbox-state", "bulk"],
+  summary: "Upsert inbox-item state in one transaction",
+  tags: ["Inbox State"],
+  body: object2({
+    userId: string2(),
+    items: array2(inboxStateItemSchema).min(1).max(200)
+  }),
+  responses: {
+    200: {
+      description: "Upserted inbox state rows in request order",
+      schema: object2({ items: array2(InboxItemStateSchema) })
+    },
+    400: { description: "Validation error" },
+    401: { description: "Unauthorized" }
+  },
+  auth: { apiKey: true },
+  rbac: { ungated: "per-user inbox UI state, same posture as PATCH /api/inbox-state" }
+});
 async function handleInboxState(req, res, pathSegments, queryParams) {
   if (listState.match(req.method, pathSegments)) {
     const parsed = await listState.parse(req, res, pathSegments, queryParams);
@@ -13370,6 +13407,24 @@ async function handleInboxState(req, res, pathSegments, queryParams) {
     listState.respond(res, 200, { items });
     return true;
   }
+  if (bulkUpsertState.match(req.method, pathSegments)) {
+    const parsed = await bulkUpsertState.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    try {
+      const items = await getDbClient2().transaction(async () => {
+        const rows = [];
+        for (const item of parsed.body.items) {
+          rows.push(await upsertInboxState2({ ...item, userId: parsed.body.userId }));
+        }
+        return rows;
+      });
+      bulkUpsertState.respond(res, 200, { items });
+    } catch (err) {
+      jsonError(res, err instanceof Error ? err.message : "Failed to upsert inbox state", 500);
+    }
+    return true;
+  }
   if (upsertState.match(req.method, pathSegments)) {
     const parsed = await upsertState.parse(req, res, pathSegments, queryParams);
     if (!parsed)
@@ -13381,7 +13436,8 @@ async function handleInboxState(req, res, pathSegments, queryParams) {
         itemId: parsed.body.itemId,
         status: parsed.body.status,
         snoozeUntil: parsed.body.snoozeUntil,
-        readAt: parsed.body.readAt
+        readAt: parsed.body.readAt,
+        lastReadAt: parsed.body.lastReadAt
       });
       upsertState.respond(res, 200, { item });
     } catch (err) {
@@ -38341,7 +38397,7 @@ var httpServer = createHttpServer(async (req, res) => {
   });
 });
 var detachRealtime = attachRealtimeTransport(httpServer);
-var { attachControllerTransport } = await import("./controllers-connect-6yhwqv9v.js");
+var { attachControllerTransport } = await import("./controllers-connect-ymw5541d.js");
 var detachControllers = attachControllerTransport(httpServer);
 var stopWorkerNudges = startWorkerNudgeListener();
 var stopRoomDeletion = realtimeBus.subscribe("room:namespace-deleted", (namespace) => {
@@ -38370,7 +38426,7 @@ async function shutdown() {
     sessionsProcessed: getServerSessionsProcessed()
   });
   if (hasCapability("scheduling")) {
-    const { stopScheduler } = await import("./index-e4tsa1h7.js");
+    const { stopScheduler } = await import("./index-vjn3wbzf.js");
     stopScheduler();
   }
   stopHeartbeat2();
@@ -38382,7 +38438,7 @@ async function shutdown() {
   await stopSlackApp2();
   await stopChatSdk();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { stopOAuthKeepalive } = await import("./keepalive-d4nzs76x.js");
+    const { stopOAuthKeepalive } = await import("./keepalive-4djvbm2j.js");
     await stopOAuthKeepalive();
   }
   stopOAuthPendingGc();
@@ -38462,21 +38518,21 @@ try {
   console.warn("[startup] CAPABILITIES upgrade seed failed (non-fatal):", err);
 }
 try {
-  const { ensurePricingSeeded } = await import("./boot-seeds-w2hmkxn5.js");
+  const { ensurePricingSeeded } = await import("./boot-seeds-gbedmamp.js");
   ensurePricingSeeded();
-  const { startPricingRefreshLoop } = await import("./pricing-refresh-6ehwkcmp.js");
+  const { startPricingRefreshLoop } = await import("./pricing-refresh-sdcf5yaz.js");
   startPricingRefreshLoop();
 } catch (err) {
   console.error("[startup] Failed to seed pricing rows:", err);
 }
 try {
-  const { ensureModelProfilesSeeded } = await import("./boot-seeds-w2hmkxn5.js");
+  const { ensureModelProfilesSeeded } = await import("./boot-seeds-gbedmamp.js");
   await ensureModelProfilesSeeded();
 } catch (err) {
   console.error("[startup] Failed to seed model profiles:", err);
 }
 try {
-  const { ensureRbacSeeded } = await import("./boot-seeds-w2hmkxn5.js");
+  const { ensureRbacSeeded } = await import("./boot-seeds-gbedmamp.js");
   ensureRbacSeeded();
 } catch (err) {
   console.error("[startup] Failed to sync RBAC seed rows:", err);
@@ -38484,7 +38540,7 @@ try {
     throw err;
 }
 try {
-  const { runAllSeeders } = await import("./index-039x2sag.js");
+  const { runAllSeeders } = await import("./index-6rmnn89d.js");
   await runAllSeeders({ scriptEmbeddingMode: "skip" });
 } catch (err) {
   console.error("[startup] Failed to seed built-in entities:", err);
@@ -38546,39 +38602,39 @@ httpServer.listen(port, async () => {
   await initWorkflows2();
   await startScriptRunSupervisor(getMcpBaseUrl());
   if (hasCapability("scheduling")) {
-    const { startScheduler } = await import("./index-e4tsa1h7.js");
-    const { getExecutorRegistry } = await import("./index-1r8hw4vd.js");
+    const { startScheduler } = await import("./index-vjn3wbzf.js");
+    const { getExecutorRegistry } = await import("./index-xmmkyx82.js");
     const intervalMs = Number(process.env.SCHEDULER_INTERVAL_MS) || 1e4;
     startScheduler(getExecutorRegistry(), intervalMs, {
       runId: globalState.__runId
     });
   }
   if (!isEnvFlagEnabled("HEARTBEAT_DISABLE", false)) {
-    const { startHeartbeat } = await import("./index-qyjbb7br.js");
+    const { startHeartbeat } = await import("./index-nyfcdpky.js");
     const heartbeatMs = Number(process.env.HEARTBEAT_INTERVAL_MS) || 90000;
     startHeartbeat(heartbeatMs);
   }
   startPoolRouting();
   startRuntimeSupervisor();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { startOAuthKeepalive } = await import("./keepalive-d4nzs76x.js");
+    const { startOAuthKeepalive } = await import("./keepalive-4djvbm2j.js");
     startOAuthKeepalive();
   }
   if (process.env.OAUTH_REFRESH_SWEEP_DISABLE !== "true") {
-    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-3f25djq3.js");
+    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-fpd6x6rw.js");
     startOAuthRefreshSweep();
   }
   startOAuthPendingGc();
   await startMemoryGc();
   await startDbRetention();
   startHumanFreeDrain();
-  import("./boot-reembed-4kx69j3g.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+  import("./boot-reembed-p666cw5n.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
     console.error("[boot-reembed] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-reembed-db0wwgy1.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+  import("./boot-reembed-w6pm64j4.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
     console.error("[boot-reembed-scripts] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-scrub-sweep-tfv4d3mm.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
+  import("./boot-scrub-sweep-jcyjagn3.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
     console.error("[boot-scrub-sweep] startup scrub failed (non-fatal):", err);
   });
 }).on("error", (err) => {