@desplega.ai/agent-swarm 2.2.0 → 2.4.0

package/dist/{cli-h23mr2s6.js → cli-6ftrrwm1.js}

@@ -4,25 +4,28 @@ import {
   getEncryptionKey,
   init_crypto,
   getDbClient2,
-  scheduleOrgDomainRecompute,
-  init_telemetry_identity,
   rowToAgent,
   createAgent2,
   getAgentById2,
   getAllAgents2,
   init_agents,
-  validateRuntimeTokenTtlHours,
   validateControllerTokenTtlDays,
   init_swarm_config_guard,
   registerStoredSecret,
   init_secret_registry,
   upsertSwarmConfig2,
   init_db3
-} from "./cli-4c7k75rq.js";
+} from "./cli-rg7ntypm.js";
 import {
   createRuntimeProvider,
   init_runtime_providers
 } from "./cli-wk8ccrz6.js";
+import {
+  closeSessionTokenConnections,
+  init_session_token_connections,
+  insertSessionToken,
+  init_users
+} from "./cli-8cxkw1f5.js";
 import {
   RuntimeControllerCreateSchema,
   RuntimeControllerUpdateSchema,
@@ -30,7 +33,7 @@ import {
   RuntimePoolUpdateSchema,
   RuntimePoolCreateAgentSchema,
   init_types
-} from "./cli-ksrphveb.js";
+} from "./cli-a1esmmee.js";
 import {
   scrubSecrets,
   registerVolatileSecret,
@@ -41,371 +44,6 @@ import {
   __esm
 } from "./cli-242037k3.js";
 
-// src/utils/session-token-connections.ts
-function registerSessionTokenConnection(tokenId, close) {
-  let callbacks = connections.get(tokenId);
-  if (!callbacks) {
-    callbacks = new Set;
-    connections.set(tokenId, callbacks);
-  }
-  callbacks.add(close);
-  return () => {
-    callbacks.delete(close);
-    if (callbacks.size === 0)
-      connections.delete(tokenId);
-  };
-}
-function closeSessionTokenConnections(tokenIds) {
-  for (const tokenId of tokenIds) {
-    for (const close of connections.get(tokenId) ?? [])
-      close();
-  }
-}
-var connections;
-var init_session_token_connections = __esm(() => {
-  connections = new Map;
-});
-
-// src/be/users.ts
-import { createHash, randomBytes, randomUUID } from "node:crypto";
-function actorString(actor) {
-  return `${actor.kind}:${actor.id}`;
-}
-function rowToUser(row) {
-  return {
-    id: row.id,
-    name: row.name,
-    email: row.email ?? undefined,
-    role: row.role ?? undefined,
-    notes: row.notes ?? undefined,
-    emailAliases: row.emailAliases ? JSON.parse(row.emailAliases) : [],
-    preferredChannel: row.preferredChannel ?? "slack",
-    timezone: row.timezone ?? undefined,
-    metadata: row.metadata ? JSON.parse(row.metadata) : undefined,
-    dailyBudgetUsd: row.dailyBudgetUsd ?? null,
-    status: row.status ?? "active",
-    createdAt: row.createdAt,
-    lastUpdatedAt: row.lastUpdatedAt
-  };
-}
-async function findUserById(id) {
-  const row = await getDbClient2().get("SELECT * FROM users WHERE id = ?", [id]);
-  return row ? rowToUser(row) : null;
-}
-async function findUserByExternalId(kind, externalId) {
-  const row = await getDbClient2().get(`SELECT u.* FROM users u
-       INNER JOIN user_external_ids x ON x.userId = u.id
-       WHERE x.kind = ? AND x.externalId = ?`, [kind, externalId]);
-  return row ? rowToUser(row) : null;
-}
-async function findUserByEmail(email) {
-  const lower = email.toLowerCase();
-  const db = getDbClient2();
-  const primary = await db.get("SELECT * FROM users WHERE LOWER(email) = LOWER(?)", [
-    email
-  ]);
-  if (primary)
-    return rowToUser(primary);
-  const aliasRows = await db.query("SELECT * FROM users WHERE emailAliases IS NOT NULL AND emailAliases != '[]'");
-  for (const r of aliasRows) {
-    const aliases = r.emailAliases ? JSON.parse(r.emailAliases) : [];
-    if (aliases.some((a) => a.toLowerCase() === lower)) {
-      return rowToUser(r);
-    }
-  }
-  return null;
-}
-async function findUsersByName(name) {
-  const trimmed = name.trim();
-  if (!trimmed)
-    return [];
-  const client = getDbClient2();
-  const exact = await client.query("SELECT * FROM users WHERE LOWER(name) = LOWER(?)", [
-    trimmed
-  ]);
-  if (exact.length > 0)
-    return exact.map(rowToUser);
-  const firstToken = trimmed.split(/\s+/)[0] ?? trimmed;
-  const prefixed = await client.query("SELECT * FROM users WHERE LOWER(name) LIKE LOWER(?) || '%'", [firstToken]);
-  return prefixed.map(rowToUser);
-}
-async function getUserIdentities(userId) {
-  return getDbClient2().query("SELECT kind, externalId FROM user_external_ids WHERE userId = ? ORDER BY kind, externalId", [userId]);
-}
-function rowToEvent(row) {
-  return {
-    id: row.id,
-    userId: row.userId,
-    eventType: row.eventType,
-    actor: row.actor,
-    before: row.beforeJson == null ? null : JSON.parse(row.beforeJson),
-    after: row.afterJson == null ? null : JSON.parse(row.afterJson),
-    createdAt: row.createdAt
-  };
-}
-async function listUserEvents(userId, opts = {}) {
-  const limit = Math.max(1, Math.min(opts.limit ?? 50, 200));
-  const before = opts.before;
-  const client = getDbClient2();
-  if (before) {
-    const rows = await client.query(`SELECT id, userId, eventType, actor, beforeJson, afterJson, createdAt
-           FROM user_identity_events
-          WHERE userId = ? AND createdAt < ?
-          ORDER BY createdAt DESC, rowid DESC
-          LIMIT ?`, [userId, before, limit]);
-    return rows.map(rowToEvent);
-  }
-  const rows = await client.query(`SELECT id, userId, eventType, actor, beforeJson, afterJson, createdAt
-         FROM user_identity_events
-        WHERE userId = ?
-        ORDER BY createdAt DESC, rowid DESC
-        LIMIT ?`, [userId, limit]);
-  return rows.map(rowToEvent);
-}
-async function listUserTokens(userId) {
-  return getDbClient2().query(`SELECT id, userId, label, tokenPreview, createdAt, lastUsedAt, revokedAt
-         FROM user_tokens
-        WHERE userId = ?
-        ORDER BY createdAt DESC`, [userId]);
-}
-async function recordIdentityEvent(userId, eventType, actor, before, after) {
-  await getDbClient2().run(`INSERT INTO user_identity_events (id, userId, eventType, actor, beforeJson, afterJson, createdAt)
-       VALUES (?, ?, ?, ?, ?, ?, ?)`, [
-    randomUUID().replace(/-/g, ""),
-    userId,
-    eventType,
-    actorString(actor),
-    before == null ? null : JSON.stringify(before),
-    after == null ? null : JSON.stringify(after),
-    new Date().toISOString()
-  ]);
-}
-async function findOrCreateUserByEmail(email, hints, actor) {
-  const existing = await findUserByEmail(email);
-  if (existing) {
-    await recordIdentityEvent(existing.id, "auto_merge", actor, null, { email, hints });
-    return { user: existing, created: false };
-  }
-  const id = randomUUID().replace(/-/g, "");
-  const now = new Date().toISOString();
-  const name = hints.name?.trim() || email.split("@")[0] || email;
-  const created = await getDbClient2().transaction(async (tx) => {
-    await tx.run(`INSERT INTO users (id, name, email, role, notes, emailAliases, preferredChannel, timezone, createdAt, lastUpdatedAt, status)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'active')`, [
-      id,
-      name,
-      email,
-      hints.role ?? null,
-      hints.notes ?? null,
-      "[]",
-      hints.preferredChannel ?? "slack",
-      null,
-      now,
-      now
-    ]);
-    const row = await tx.get("SELECT * FROM users WHERE id = ?", [id]);
-    if (!row)
-      throw new Error("Failed to create user");
-    await recordIdentityEvent(id, "identity_added", actor, null, { email, name });
-    return rowToUser(row);
-  });
-  getDbClient2().afterCommit(scheduleOrgDomainRecompute);
-  return { user: created, created: true };
-}
-async function linkIdentity(userId, kind, externalId, actor) {
-  await getDbClient2().transaction(async (tx) => {
-    await tx.run("INSERT INTO user_external_ids (userId, kind, externalId) VALUES (?, ?, ?)", [
-      userId,
-      kind,
-      externalId
-    ]);
-    await recordIdentityEvent(userId, "identity_added", actor, null, { kind, externalId });
-  });
-}
-async function unlinkIdentity(userId, kind, externalId, actor) {
-  await getDbClient2().transaction(async (tx) => {
-    await tx.run("DELETE FROM user_external_ids WHERE userId = ? AND kind = ? AND externalId = ?", [
-      userId,
-      kind,
-      externalId
-    ]);
-    await recordIdentityEvent(userId, "identity_removed", actor, { kind, externalId }, null);
-  });
-}
-function base62(bytes) {
-  const alphabet = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
-  let out = "";
-  for (const b of bytes) {
-    out += alphabet[b % 62];
-  }
-  return out;
-}
-function sha256Hex(input) {
-  return createHash("sha256").update(input).digest("hex");
-}
-async function mintToken(userId, label, actor, options = {}) {
-  const plaintext = `${TOKEN_PREFIX}${base62(randomBytes(24))}`;
-  const tokenId = randomUUID().replace(/-/g, "");
-  const hash = sha256Hex(plaintext);
-  const preview = plaintext.slice(-4);
-  const now = new Date().toISOString();
-  await getDbClient2().transaction(async (tx) => {
-    await tx.run(`INSERT INTO user_tokens (id, userId, label, tokenHash, tokenPreview, createdAt)
-       VALUES (?, ?, ?, ?, ?, ?)`, [tokenId, userId, label, hash, preview, now]);
-    await recordIdentityEvent(userId, "token_minted", actor, null, {
-      tokenId,
-      label,
-      preview,
-      ...options.source ? { source: options.source } : {}
-    });
-  });
-  return { tokenId, plaintext };
-}
-async function revokeToken(tokenId, actor) {
-  await getDbClient2().transaction(async (tx) => {
-    const row = await tx.get("SELECT userId, label, tokenPreview FROM user_tokens WHERE id = ?", [tokenId]);
-    if (!row) {
-      throw new Error(`Token not found: ${tokenId}`);
-    }
-    await tx.run("UPDATE user_tokens SET revokedAt = ? WHERE id = ?", [
-      new Date().toISOString(),
-      tokenId
-    ]);
-    await recordIdentityEvent(row.userId, "token_revoked", actor, { tokenId, label: row.label, preview: row.tokenPreview }, null);
-  });
-}
-async function resolveUserByToken(plaintext) {
-  const hash = sha256Hex(plaintext);
-  const client = getDbClient2();
-  const row = await client.get("SELECT id, userId, revokedAt FROM user_tokens WHERE tokenHash = ?", [hash]);
-  if (!row || row.revokedAt !== null)
-    return null;
-  try {
-    await client.run("UPDATE user_tokens SET lastUsedAt = ? WHERE id = ?", [
-      new Date().toISOString(),
-      row.id
-    ]);
-  } catch {}
-  return findUserById(row.userId);
-}
-async function mintSessionToken(agentId, taskId, ttlMs, parent) {
-  if (parent) {
-    return await getDbClient2().transaction(async (client) => {
-      const row = await client.get(`SELECT expiresAt FROM session_tokens WHERE id = ? AND agentId = ? AND runtimeId = ?
-         AND revokedAt IS NULL AND expiresAt > ?`, [parent.tokenId, agentId, parent.runtimeId, new Date().toISOString()]);
-      if (!row)
-        throw new InvalidRuntimeTokenError;
-      return await insertSessionToken(agentId, taskId, null, ttlMs, parent.runtimeId, row.expiresAt);
-    });
-  }
-  return await insertSessionToken(agentId, taskId, null, ttlMs);
-}
-function runtimeTokenTtlMs() {
-  const hours = process.env.RUNTIME_TOKEN_TTL_HOURS ?? "168";
-  return (validateRuntimeTokenTtlHours(hours) === null ? Number(hours) : 168) * 60 * 60 * 1000;
-}
-async function mintRuntimeToken(agentId, runtimeId, ttlMs = runtimeTokenTtlMs()) {
-  return await insertSessionToken(agentId, null, runtimeId, ttlMs);
-}
-async function insertSessionToken(agentId, taskId, runtimeId, ttlMs, parentRuntimeId = null, expiresAtCeiling, controllerId = null) {
-  const plaintext = `${SESSION_TOKEN_PREFIX}${base62(randomBytes(24))}`;
-  const tokenId = randomUUID().replace(/-/g, "");
-  const hash = sha256Hex(plaintext);
-  const preview = plaintext.slice(-4);
-  const now = new Date;
-  const expiresAt = new Date(Math.min(now.getTime() + ttlMs, expiresAtCeiling ? Date.parse(expiresAtCeiling) : Infinity)).toISOString();
-  await getDbClient2().run(`INSERT INTO session_tokens
-     (id, tokenHash, tokenPreview, agentId, taskId, runtimeId, parentRuntimeId, expiresAt, createdAt, controllerId)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
-    tokenId,
-    hash,
-    preview,
-    agentId,
-    taskId,
-    runtimeId,
-    parentRuntimeId,
-    expiresAt,
-    now.toISOString(),
-    controllerId
-  ]);
-  return { tokenId, plaintext };
-}
-async function revokeSessionToken(tokenId) {
-  await getDbClient2().transaction(async (client) => {
-    const row = await client.get("SELECT runtimeId FROM session_tokens WHERE id = ?", [tokenId]);
-    if (row?.runtimeId) {
-      await revokeRuntimeTokensForRuntime(row.runtimeId);
-    } else {
-      await client.run("UPDATE session_tokens SET revokedAt = ? WHERE id = ? AND revokedAt IS NULL", [new Date().toISOString(), tokenId]);
-      getDbClient2().afterCommit(() => closeSessionTokenConnections([tokenId]));
-    }
-  });
-}
-async function revokeRuntimeTokensForRuntime(runtimeId) {
-  await getDbClient2().transaction(async (client) => {
-    const rows = await client.query("SELECT id FROM session_tokens WHERE runtimeId = ? OR parentRuntimeId = ?", [runtimeId, runtimeId]);
-    await client.run(`UPDATE session_tokens SET revokedAt = ?
-       WHERE (runtimeId = ? OR parentRuntimeId = ?) AND revokedAt IS NULL`, [new Date().toISOString(), runtimeId, runtimeId]);
-    getDbClient2().afterCommit(() => {
-      unregisterVolatileSecret(`runtime:${runtimeId}`);
-      closeSessionTokenConnections(rows.map((row) => row.id));
-    });
-  });
-}
-async function resolveSessionToken(plaintext, options = {}) {
-  if (!plaintext.startsWith(SESSION_TOKEN_PREFIX))
-    return null;
-  const hash = sha256Hex(plaintext);
-  const client = getDbClient2();
-  const row = await client.get(`SELECT s.id, s.agentId, s.taskId, s.runtimeId, s.controllerId, s.expiresAt, s.revokedAt,
-     c.placement FROM session_tokens s LEFT JOIN runtime_controllers c ON c.id = s.controllerId
-     WHERE s.tokenHash = ?`, [hash]);
-  if (!row || row.revokedAt !== null)
-    return null;
-  if (new Date(row.expiresAt) <= new Date)
-    return null;
-  if (row.controllerId !== null) {
-    return row.placement === "remote" ? {
-      kind: "controller",
-      controllerId: row.controllerId,
-      tokenId: row.id,
-      expiresAt: row.expiresAt
-    } : null;
-  }
-  if (options.touch !== false) {
-    try {
-      await client.run("UPDATE session_tokens SET lastUsedAt = ? WHERE id = ?", [
-        new Date().toISOString(),
-        row.id
-      ]);
-    } catch {}
-  }
-  return {
-    kind: "agent",
-    tokenId: row.id,
-    agentId: row.agentId,
-    taskId: row.taskId,
-    runtimeId: row.runtimeId,
-    expiresAt: row.expiresAt
-  };
-}
-function fingerprintApiKey(rawKey) {
-  return `op:${sha256Hex(rawKey).slice(0, 16)}`;
-}
-var TOKEN_PREFIX = "aswt_", SESSION_TOKEN_PREFIX = "aseph_", InvalidRuntimeTokenError;
-var init_users = __esm(() => {
-  init_telemetry_identity();
-  init_secret_scrubber();
-  init_session_token_connections();
-  init_db3();
-  init_swarm_config_guard();
-  InvalidRuntimeTokenError = class InvalidRuntimeTokenError extends Error {
-    constructor() {
-      super("Runtime token is no longer valid");
-    }
-  };
-});
-
 // src/be/runtime-pools/errors.ts
 var RuntimePoolError2;
 var init_errors = __esm(() => {
@@ -829,4 +467,4 @@ var init_db = __esm(() => {
   init_errors();
 });
 
-export { RuntimePoolError2, registerSessionTokenConnection, init_session_token_connections, findUserById, findUserByExternalId, findUserByEmail, findUsersByName, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, InvalidRuntimeTokenError, mintSessionToken, mintRuntimeToken, revokeSessionToken, revokeRuntimeTokensForRuntime, resolveSessionToken, fingerprintApiKey, init_users, mintControllerToken, init_tokens, listRuntimeControllers2, getRuntimeController2, getRuntimeControllerTarget2, checkE2bControllerConfig2, createRuntimeController2, updateRuntimeController2, deleteRuntimeController2, listRuntimePools2, getRuntimePool2, createRuntimePool2, updateRuntimePool2, deleteRuntimePool2, bindAgentToPool2, listAgentsForPool2, getPoolForAgent2, resolvePoolDelivery2, createPoolAgent2, loadRuntimeControllerSecrets2, init_db };
+export { RuntimePoolError2, mintControllerToken, init_tokens, listRuntimeControllers2, getRuntimeController2, getRuntimeControllerTarget2, checkE2bControllerConfig2, createRuntimeController2, updateRuntimeController2, deleteRuntimeController2, listRuntimePools2, getRuntimePool2, createRuntimePool2, updateRuntimePool2, deleteRuntimePool2, bindAgentToPool2, listAgentsForPool2, getPoolForAgent2, resolvePoolDelivery2, createPoolAgent2, loadRuntimeControllerSecrets2, init_db };

package/dist/{cli-9ac0mkg5.js → cli-8b9wvjps.js}

@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-ksrphveb.js";
+} from "./cli-a1esmmee.js";
 import {
   getOpenRouterBaseUrl,
   getOpenRouterAttributionHeaders,