@desplega.ai/agent-swarm 2.2.0 → 2.3.0

package/dist/{worker-4ww4hjef.js → worker-4ptnn1ge.js}

@@ -1,21 +1,21 @@
 import"./cli-qz93y3x5.js";
 import {
   getEnabledCapabilities
-} from "./cli-bddxamg7.js";
+} from "./cli-8qsx817b.js";
 import"./cli-v1sjhn52.js";
-import"./cli-4c7k75rq.js";
-import"./cli-6q7pyd3k.js";
-import"./cli-mnry16kh.js";
-import"./cli-8w65vwee.js";
-import"./cli-jhhb2v9n.js";
-import"./cli-vmbakbq0.js";
-import"./cli-dw0njd9q.js";
-import"./cli-mvsfbbgq.js";
-import"./cli-xx13gqf3.js";
+import"./cli-re4wkbzx.js";
+import"./cli-6vcyw6v7.js";
+import"./cli-xgn4rwyv.js";
+import"./cli-qrwp40st.js";
+import"./cli-kqypty34.js";
+import"./cli-fhvqt2fp.js";
+import"./cli-jhmjwqcg.js";
+import"./cli-65q70v2v.js";
+import"./cli-g6p7c2my.js";
 import"./cli-3ggwdtb0.js";
-import"./cli-tba8fxf9.js";
-import"./cli-ztcxv5nv.js";
-import"./cli-hwc4a9xm.js";
+import"./cli-dxwh4j32.js";
+import"./cli-9e9kjqsj.js";
+import"./cli-q1812jbw.js";
 import"./cli-8cvvytad.js";
 import"./cli-kvzgak7c.js";
 import"./cli-445c1vp7.js";
@@ -23,7 +23,7 @@ import"./cli-vjfpshn3.js";
 import"./cli-ptkpaqfy.js";
 import"./cli-7a91w22y.js";
 import"./cli-qje9k2nh.js";
-import"./cli-h23mr2s6.js";
+import"./cli-hz64bcnj.js";
 import"./cli-3h26v7yj.js";
 import"./cli-rdr166ht.js";
 import"./cli-665j3feb.js";
@@ -31,31 +31,31 @@ import"./cli-p22zdvnt.js";
 import"./cli-77cd6gy8.js";
 import {
   runAgent
-} from "./cli-c9vrwcpb.js";
+} from "./cli-ea7chd26.js";
 import"./cli-jhp7w1fy.js";
 import"./cli-gx4rm0qx.js";
 import"./cli-a49vpbf3.js";
 import"./cli-jc1g9ndz.js";
-import"./cli-th8krqbf.js";
+import"./cli-6p7ddg72.js";
 import"./cli-k28p6xh7.js";
 import"./cli-etvn5ej2.js";
 import"./cli-c5sbmw1v.js";
 import"./cli-0726awxw.js";
-import"./cli-e5y285rg.js";
-import"./cli-c0dpzwnx.js";
+import"./cli-1v8w782f.js";
+import"./cli-hn3pftj2.js";
 import"./cli-4bd1rck6.js";
 import"./cli-vbhgkw9h.js";
 import"./cli-er83cjbn.js";
 import"./cli-j0v75y13.js";
 import"./cli-kr5tjjtz.js";
-import"./cli-z1hh99j0.js";
-import"./cli-xhgtay7w.js";
+import"./cli-tr24eeny.js";
+import"./cli-4s1kqrqg.js";
 import"./cli-zv4vy2b0.js";
-import"./cli-9ac0mkg5.js";
-import"./cli-jrk8mj0t.js";
+import"./cli-zes4tsbb.js";
+import"./cli-a17tzmn0.js";
 import"./cli-9td5ss65.js";
 import"./cli-rc3r0bnh.js";
-import"./cli-p46xdr1m.js";
+import"./cli-0rh20bp3.js";
 import"./cli-4zsenjhy.js";
 import"./cli-4g629sgr.js";
 import"./cli-13p25grh.js";

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "2.2.0",
+    "version": "2.3.0",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [
@@ -2295,6 +2295,9 @@
           "readAt": {
             "type": "string"
           },
+          "lastReadAt": {
+            "type": "string"
+          },
           "createdAt": {
             "type": "string"
           },
@@ -14653,6 +14656,12 @@
                       "minLength": 1,
                       "maxLength": 255,
                       "description": "Non-unique asset directory namespace (for example shared/ or personal/<user-id>/drafts/). Runtime write boundaries normalize and validate the canonical form."
+                    },
+                    "movedTaskIds": {
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      }
                     }
                   },
                   "required": [
@@ -14777,6 +14786,12 @@
                       "minLength": 1,
                       "maxLength": 255,
                       "description": "Non-unique asset directory namespace (for example shared/ or personal/<user-id>/drafts/). Runtime write boundaries normalize and validate the canonical form."
+                    },
+                    "movedTaskIds": {
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      }
                     }
                   },
                   "required": [
@@ -14882,6 +14897,10 @@
                     "minLength": 1,
                     "maxLength": 255,
                     "description": "Non-unique asset directory namespace (for example shared/ or personal/<user-id>/drafts/). Runtime write boundaries normalize and validate the canonical form."
+                  },
+                  "cascade": {
+                    "type": "boolean",
+                    "description": "For tasks only, also move every descendant task recursively through parentTaskId."
                   }
                 },
                 "required": [
@@ -14919,6 +14938,12 @@
                       "minLength": 1,
                       "maxLength": 255,
                       "description": "Non-unique asset directory namespace (for example shared/ or personal/<user-id>/drafts/). Runtime write boundaries normalize and validate the canonical form."
+                    },
+                    "movedTaskIds": {
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      }
                     }
                   },
                   "required": [
@@ -20766,9 +20791,6 @@
               "schema": {
                 "type": "object",
                 "properties": {
-                  "userId": {
-                    "type": "string"
-                  },
                   "itemType": {
                     "type": "string",
                     "enum": [
@@ -20800,13 +20822,24 @@
                   "readAt": {
                     "type": "string",
                     "format": "date-time"
+                  },
+                  "lastReadAt": {
+                    "type": [
+                      "string",
+                      "null"
+                    ],
+                    "format": "date-time",
+                    "description": "Omit to preserve the read cursor, send null to clear it, or send a timestamp to set it, including an earlier time."
+                  },
+                  "userId": {
+                    "type": "string"
                   }
                 },
                 "required": [
-                  "userId",
                   "itemType",
                   "itemId",
-                  "status"
+                  "status",
+                  "userId"
                 ]
               }
             }
@@ -20854,6 +20887,135 @@
         }
       }
     },
+    "/api/inbox-state/bulk": {
+      "patch": {
+        "summary": "Upsert inbox-item state in one transaction",
+        "tags": [
+          "Inbox State"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "userId": {
+                    "type": "string"
+                  },
+                  "items": {
+                    "type": "array",
+                    "items": {
+                      "type": "object",
+                      "properties": {
+                        "itemType": {
+                          "type": "string",
+                          "enum": [
+                            "approval",
+                            "credential_missing",
+                            "broken_task",
+                            "to_read",
+                            "to_start_template",
+                            "notification"
+                          ]
+                        },
+                        "itemId": {
+                          "type": "string",
+                          "minLength": 1
+                        },
+                        "status": {
+                          "type": "string",
+                          "enum": [
+                            "open",
+                            "snoozed",
+                            "dismissed",
+                            "done"
+                          ]
+                        },
+                        "snoozeUntil": {
+                          "type": "string",
+                          "format": "date-time"
+                        },
+                        "readAt": {
+                          "type": "string",
+                          "format": "date-time"
+                        },
+                        "lastReadAt": {
+                          "type": [
+                            "string",
+                            "null"
+                          ],
+                          "format": "date-time",
+                          "description": "Omit to preserve the read cursor, send null to clear it, or send a timestamp to set it, including an earlier time."
+                        }
+                      },
+                      "required": [
+                        "itemType",
+                        "itemId",
+                        "status"
+                      ]
+                    },
+                    "minItems": 1,
+                    "maxItems": 200
+                  }
+                },
+                "required": [
+                  "userId",
+                  "items"
+                ]
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Upserted inbox state rows in request order",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "items": {
+                      "type": "array",
+                      "items": {
+                        "$ref": "#/components/schemas/InboxItemState"
+                      }
+                    }
+                  },
+                  "required": [
+                    "items"
+                  ]
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Validation error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/api/integrations/claude-managed/test": {
       "post": {
         "summary": "Test the claude-managed integration: resolves ANTHROPIC_API_KEY + MANAGED_AGENT_ID from swarm_config and calls beta.agents.retrieve.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "2.2.0",
+  "version": "2.3.0",
   "description": "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
   "keywords": [
     "agent-swarm.dev",
@@ -209,7 +209,7 @@
     "@chat-adapter/teams": "4.41.1",
     "@chat-adapter/telegram": "4.41.1",
     "@cursor/sdk": "1.0.38",
-    "@desplega.ai/agent-fs-just-bash": "0.17.0",
+    "@desplega.ai/agent-fs-just-bash": "0.18.4",
     "@desplega.ai/business-use": "^0.4.2",
     "@earendil-works/pi-agent-core": "^1.3.0",
     "@earendil-works/pi-ai": "^1.3.0",

package/src/be/asset-key-audit.ts

@@ -90,9 +90,7 @@ function auditKeyRow(
 
 type AttachmentMappingAuditRow = {
   attachment_id: string;
-  task_key: string;
   mapping_id: string | null;
-  mapping_key: string | null;
 };
 
 type MappingSourceAuditRow = {
@@ -118,9 +116,7 @@ export function auditAssetKeys(db: Database): AssetKeyAuditResult {
     .prepare<AttachmentMappingAuditRow, []>(
       `SELECT
          a.id AS attachment_id,
-         t."key" AS task_key,
-         m.id AS mapping_id,
-         m."key" AS mapping_key
+         m.id AS mapping_id
        FROM task_attachments a
        JOIN agent_tasks t ON t.id = a.task_id
        LEFT JOIN asset_key_mappings m
@@ -132,6 +128,9 @@ export function auditAssetKeys(db: Database): AssetKeyAuditResult {
          AND COALESCE(NULLIF(a.provider_key, ''), a.path) IS NOT NULL`,
     )
     .all();
+  // One file has one mapping, which follows its source attachment (checked below). Other
+  // tasks may attach the same file from any namespace, and a mapping detached from its
+  // deleted source keeps its own namespace, so neither is drift.
   for (const row of attachmentMappings) {
     if (!row.mapping_id) {
       issues.push({
@@ -141,14 +140,6 @@ export function auditAssetKeys(db: Database): AssetKeyAuditResult {
         entityId: row.attachment_id,
         message: "Agent-fs attachment has no logical namespace mapping.",
       });
-    } else if (row.mapping_key !== row.task_key) {
-      issues.push({
-        severity: "warning",
-        code: "provider-mapping-drift",
-        entityType: "file",
-        entityId: row.mapping_id,
-        message: "Provider mapping namespace differs from its parent task namespace.",
-      });
     }
   }
 

package/src/be/db.ts

@@ -1731,7 +1731,9 @@ export async function moveAssetKey(input: {
   id: string;
   key: string;
   changedBy?: string;
-}): Promise<boolean> {
+  /** Task moves only: descendant task ids the caller already authorized to move with the task. */
+  descendantTaskIds?: readonly string[];
+}): Promise<false | { movedTaskIds?: string[] }> {
   const key = normalizeAssetKey(input.key);
   // auditAssetKeys stays sync (shared with the boot audit); run it inside a
   // client transaction so this request-path read cannot observe another
@@ -1746,7 +1748,7 @@ export async function moveAssetKey(input: {
   }
   const previousKey = await currentAssetKey(input.entityType, input.id);
   if (!previousKey) return false;
-  if (previousKey === key) return true;
+  if (previousKey === key && input.entityType !== "task") return {};
   if (input.entityType === "file") {
     const mapping = await getAssetKeyMapping(input.id);
     if (mapping?.sourceEntityType === "task-attachment") {
@@ -1757,48 +1759,64 @@ export async function moveAssetKey(input: {
   }
   const now = new Date().toISOString();
 
-  await getDbClient().transaction(async (tx) => {
+  return getDbClient().transaction(async (tx) => {
     switch (input.entityType) {
       case "task": {
-        const mappedFiles = await tx.query<{ id: string; key: string }>(
-          `SELECT DISTINCT m.id, m."key" AS key
+        const root = await getTaskById(input.id);
+        if (!root) return false;
+        const tasks = [root];
+        for (const id of input.descendantTaskIds ?? []) {
+          const task = id === root.id ? null : await getTaskById(id);
+          if (task) tasks.push(task);
+        }
+        const movedTaskIds: string[] = [];
+        for (const task of tasks) {
+          if (task.key === key) continue;
+          // A file shared with another task keeps the namespace of the task whose attachment
+          // sources its mapping. Mappings with no attachment source follow any attaching task.
+          const mappedFiles = await tx.query<{ id: string; key: string }>(
+            `SELECT DISTINCT m.id, m."key" AS key
              FROM asset_key_mappings m
              JOIN task_attachments a
                ON m.provider_id = COALESCE(NULLIF(a.provider_id, ''), 'agent-fs')
               AND m.provider_org_id = COALESCE(a.agent_fs_org_id, '')
               AND m.provider_drive_id = COALESCE(a.agent_fs_drive_id, '')
               AND m.provider_key = COALESCE(NULLIF(a.provider_key, ''), a.path)
-             WHERE a.task_id = ?`,
-          [input.id],
-        );
-        await tx.run(
-          'UPDATE agent_tasks SET "key" = ?, lastUpdatedAt = ?, updated_by = ? WHERE id = ?',
-          [key, now, input.changedBy ?? null, input.id],
-        );
-        await tx.run(
-          `UPDATE asset_key_mappings
-           SET "key" = ?, updated_at = ?, updated_by = ?
-           WHERE EXISTS (
-             SELECT 1 FROM task_attachments a
              WHERE a.task_id = ?
-               AND asset_key_mappings.provider_id = COALESCE(NULLIF(a.provider_id, ''), 'agent-fs')
-               AND asset_key_mappings.provider_org_id = COALESCE(a.agent_fs_org_id, '')
-               AND asset_key_mappings.provider_drive_id = COALESCE(a.agent_fs_drive_id, '')
-               AND asset_key_mappings.provider_key = COALESCE(NULLIF(a.provider_key, ''), a.path)
-           )`,
-          [key, now, input.changedBy ?? null, input.id],
-        );
-        for (const mapping of mappedFiles) {
-          if (mapping.key === key) continue;
+               AND (m.source_entity_type IS NOT 'task-attachment'
+                 OR m.source_entity_id IN (SELECT id FROM task_attachments WHERE task_id = ?))`,
+            [task.id, task.id],
+          );
+          // The namespace is metadata, and lastUpdatedAt tracks task activity, as in updateTaskTitle.
+          await tx.run('UPDATE agent_tasks SET "key" = ?, updated_by = ? WHERE id = ?', [
+            key,
+            input.changedBy ?? null,
+            task.id,
+          ]);
+          for (const mapping of mappedFiles) {
+            if (mapping.key === key) continue;
+            await tx.run(
+              'UPDATE asset_key_mappings SET "key" = ?, updated_at = ?, updated_by = ? WHERE id = ?',
+              [key, now, input.changedBy ?? null, mapping.id],
+            );
+            await insertAssetKeyHistory({
+              entityType: "file",
+              entityId: mapping.id,
+              previousKey: mapping.key,
+              newKey: key,
+              changedBy: input.changedBy,
+            });
+          }
           await insertAssetKeyHistory({
-            entityType: "file",
-            entityId: mapping.id,
-            previousKey: mapping.key,
+            entityType: "task",
+            entityId: task.id,
+            previousKey: task.key,
             newKey: key,
             changedBy: input.changedBy,
           });
+          movedTaskIds.push(task.id);
         }
-        break;
+        return { movedTaskIds };
       }
       case "workflow":
         await tx.run(
@@ -1849,8 +1867,8 @@ export async function moveAssetKey(input: {
       newKey: key,
       changedBy: input.changedBy,
     });
+    return {};
   });
-  return true;
 }
 
 export async function deleteTaskAttachment(id: string): Promise<boolean> {
@@ -12513,6 +12531,7 @@ interface InboxItemStateRow {
   dismissedAt: string | null;
   doneAt: string | null;
   readAt: string | null;
+  lastReadAt: string | null;
   createdAt: string;
   lastUpdatedAt: string;
 }
@@ -12528,6 +12547,7 @@ function rowToInboxItemState(row: InboxItemStateRow): InboxItemState {
     dismissedAt: row.dismissedAt ?? undefined,
     doneAt: row.doneAt ?? undefined,
     readAt: row.readAt ?? undefined,
+    lastReadAt: row.lastReadAt ?? undefined,
     createdAt: row.createdAt,
     lastUpdatedAt: row.lastUpdatedAt,
   };
@@ -12568,6 +12588,7 @@ export async function upsertInboxState(opts: {
   doneAt?: string;
   /** First-viewed timestamp. Sticky: once set, later calls never clear or move it. */
   readAt?: string;
+  lastReadAt?: string | null;
 }): Promise<InboxItemState> {
   const now = new Date().toISOString();
   // Auto-derive timestamps from status when not explicitly provided.
@@ -12579,14 +12600,15 @@ export async function upsertInboxState(opts: {
   // SQLite upsert via UNIQUE(userId, itemType, itemId). readAt is sticky: the
   // first non-null value written wins on every subsequent conflict.
   const row = await getDbClient().get<InboxItemStateRow>(
-    `INSERT INTO inbox_item_state (userId, itemType, itemId, status, snoozeUntil, dismissedAt, doneAt, readAt, createdAt, lastUpdatedAt)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `INSERT INTO inbox_item_state (userId, itemType, itemId, status, snoozeUntil, dismissedAt, doneAt, readAt, lastReadAt, createdAt, lastUpdatedAt)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
        ON CONFLICT(userId, itemType, itemId) DO UPDATE SET
          status = excluded.status,
          snoozeUntil = excluded.snoozeUntil,
          dismissedAt = excluded.dismissedAt,
          doneAt = excluded.doneAt,
          readAt = COALESCE(inbox_item_state.readAt, excluded.readAt),
+         lastReadAt = CASE WHEN ? THEN excluded.lastReadAt ELSE inbox_item_state.lastReadAt END,
          lastUpdatedAt = excluded.lastUpdatedAt
        RETURNING *`,
     [
@@ -12598,8 +12620,10 @@ export async function upsertInboxState(opts: {
       dismissedAt,
       doneAt,
       readAt,
+      opts.lastReadAt ?? null,
       now,
       now,
+      opts.lastReadAt !== undefined ? 1 : 0,
     ],
   );
   if (!row) throw new Error("Failed to upsert inbox state");

package/src/be/migrations/227_inbox_item_state_last_read_at.sql

@@ -0,0 +1 @@
+ALTER TABLE inbox_item_state ADD COLUMN lastReadAt TEXT;

package/src/be/seed-scripts/catalog/heartbeat-jev-gate.ts

@@ -138,8 +138,7 @@ async function buildState(ctx: any, leadId: string, nowMs: number, timeZone: str
   // db_query_concurrency_cap on a busy swarm.
   const lead = await q("SELECT heartbeatMd FROM agents WHERE id = ?", [leadId]);
   const prev = await q(
-    `SELECT id, substr(output, 1, 400) AS output,
-            substr(task, 1, instr(task, '## Your Standing Orders')) AS status
+    `SELECT id, substr(output, 1, 400) AS output
        FROM agent_tasks
       WHERE agentId = ? AND taskType = 'heartbeat-checklist' AND status = 'completed'
       ORDER BY createdAt DESC LIMIT 1`,
@@ -163,9 +162,28 @@ async function buildState(ctx: any, leadId: string, nowMs: number, timeZone: str
     "SELECT status, COUNT(*) AS n FROM agents WHERE COALESCE(role, '') != 'extension' GROUP BY status",
   );
 
+  // Only the producer's receipt proves which full IDs the checklist actually showed.
+  // Old checklists and invalid receipts conservatively treat all current failures as new.
+  let reportedIds: unknown = [];
+  if (prev[0]?.id) {
+    try {
+      const receipt = await ctx.swarm.kv_getOrNull({
+        namespace: "heartbeat-checklist:reported-failures",
+        key: prev[0].id,
+      });
+      reportedIds = typeof receipt?.value === "string" ? JSON.parse(receipt.value) : receipt?.value;
+    } catch {
+      reportedIds = [];
+    }
+  }
+  const prevIds = new Set(
+    Array.isArray(reportedIds) && reportedIds.every((id) => typeof id === "string") ? reportedIds : [],
+  );
   const fails = parseFailures(failed.map(renderFailureLine).join("\n"));
-  const prevIds = new Set(parseFailures(String(prev[0]?.status ?? "")).map((f) => f.id));
-  const newFails = fails.filter((f) => !prevIds.has(f.id));
+  // Compare full IDs before rendering the replay's eight-character display IDs.
+  const newFails = parseFailures(
+    failed.filter((f) => !prevIds.has(f.id)).map(renderFailureLine).join("\n"),
+  );
 
   const { stamp, zone } = localStamp(nowMs, timeZone);
   const mmdd = new Date(nowMs).toISOString().slice(5, 10);