@desplega.ai/agent-swarm 2.4.3 → 2.4.5

package/dist/{cli-1012xb7j.js → cli-9yqgm9nd.js}

@@ -20,7 +20,7 @@ import {
   renderMemoriesPrompt,
   isUnknownModelError,
   writeSkillsToFilesystem
-} from "./cli-6aen3ezb.js";
+} from "./cli-v8fjakwf.js";
 import {
   isPollTracingEnabled,
   initOtel,
@@ -30,7 +30,7 @@ import {
   injectTraceContext2,
   initialize,
   ensure
-} from "./cli-tkf4x6ha.js";
+} from "./cli-37j04k05.js";
 import {
   getContextWindowSize
 } from "./cli-a5ebc95n.js";
@@ -51,7 +51,7 @@ import {
   canonicalAzureDevOpsRepoUrl,
   parseAzureDevOpsRepoUrl,
   resolveScriptsOnlyMode
-} from "./cli-kgnkyabk.js";
+} from "./cli-n72rg53p.js";
 import {
   ACP_TARGET_IDS,
   isAcpTarget
@@ -59,32 +59,32 @@ import {
 import {
   checkAmpCredentials2,
   liveTestAmpCredentials2
-} from "./cli-1ma335fz.js";
+} from "./cli-ftc1g5tj.js";
 import {
   checkClaudeCredentials2
-} from "./cli-h0mgxann.js";
+} from "./cli-z7d29rw9.js";
 import {
   checkClaudeManagedCredentials2
-} from "./cli-a0kcty51.js";
+} from "./cli-f01h25yt.js";
 import {
   codexUserHome,
   checkCodexCredentials2
-} from "./cli-zvbb4n0e.js";
+} from "./cli-tw4p90jb.js";
 import {
   checkCursorCredentials2
-} from "./cli-58vwn100.js";
+} from "./cli-g35m2xwm.js";
 import {
   checkDevinCredentials2
 } from "./cli-s95dknxh.js";
 import {
   checkDshCredentials2
-} from "./cli-wk28hzqn.js";
+} from "./cli-qwhy2qma.js";
 import {
   checkOpencodeCredentials2
 } from "./cli-36ckw0wx.js";
 import {
   checkGrokCredentials2
-} from "./cli-aypbg9r2.js";
+} from "./cli-cxxe61f6.js";
 import {
   CODEX_OAUTH_POOL_SLOTS_ENV,
   isCodexOAuthConfigKey,
@@ -93,7 +93,7 @@ import {
 } from "./cli-j4bwnpkm.js";
 import {
   validateJsonSchema
-} from "./cli-0dxxwfkt.js";
+} from "./cli-9hstj09h.js";
 import {
   mapTriggerSurface,
   init_telemetry_context,
@@ -111,7 +111,7 @@ import {
   init_vcs_repo_match,
   isApiDrainingResponse,
   init_api_drain
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   parseWorkerModelTierOverrides,
   resolveTaskModelSelection,
@@ -119,7 +119,7 @@ import {
   ProviderNameSchema,
   WorkerNudgeSchema,
   init_types
-} from "./cli-836ehxmt.js";
+} from "./cli-eww120g8.js";
 import {
   generateDefaultClaudeMd2,
   generateDefaultSoulMd2,
@@ -246,7 +246,7 @@ async function materializeCodexAuthJson(_slot, creds, deps = {}) {
 async function createProviderAdapter(provider) {
   switch (provider) {
     case "claude": {
-      const { ClaudeAdapter } = await import("./claude-adapter-rp0jtnwr.js");
+      const { ClaudeAdapter } = await import("./claude-adapter-m7q0a085.js");
       return new ClaudeAdapter;
     }
     case "pi": {
@@ -254,11 +254,11 @@ async function createProviderAdapter(provider) {
       return new PiMonoAdapter;
     }
     case "codex": {
-      const { CodexAdapter } = await import("./codex-adapter-2zrmab9b.js");
+      const { CodexAdapter } = await import("./codex-adapter-tn6k5mkg.js");
       return new CodexAdapter;
     }
     case "claude-managed": {
-      const { ClaudeManagedAdapter } = await import("./claude-managed-adapter-h2y889ge.js");
+      const { ClaudeManagedAdapter } = await import("./claude-managed-adapter-5ptb6tzs.js");
       return new ClaudeManagedAdapter;
     }
     case "devin": {
@@ -270,23 +270,23 @@ async function createProviderAdapter(provider) {
       return new OpencodeAdapter;
     }
     case "dsh": {
-      const { DshAdapter } = await import("./dsh-adapter-64dhw0j7.js");
+      const { DshAdapter } = await import("./dsh-adapter-3mmszc1x.js");
       return new DshAdapter;
     }
     case "amp": {
-      const { AmpAdapter } = await import("./amp-adapter-af84rx1d.js");
+      const { AmpAdapter } = await import("./amp-adapter-wb67m95z.js");
       return new AmpAdapter;
     }
     case "cursor": {
-      const { CursorAdapter } = await import("./cursor-adapter-mgaprq0j.js");
+      const { CursorAdapter } = await import("./cursor-adapter-mjv79e4z.js");
       return new CursorAdapter;
     }
     case "grok": {
-      const { GrokAdapter } = await import("./grok-adapter-h21jv594.js");
+      const { GrokAdapter } = await import("./grok-adapter-tfrq7tg1.js");
       return new GrokAdapter;
     }
     case "acp": {
-      const { ACPAdapter } = await import("./acp-adapter-1885dpr7.js");
+      const { ACPAdapter } = await import("./acp-adapter-2wdkktv6.js");
       return new ACPAdapter;
     }
     default:
@@ -1477,7 +1477,7 @@ async function validateProviderCredentials(provider, env = process.env, presence
             latency_ms: Date.now() - startedAt
           };
         }
-        const { liveTestCursorKey } = await import("./cursor-adapter-mgaprq0j.js");
+        const { liveTestCursorKey } = await import("./cursor-adapter-mjv79e4z.js");
         const result = await liveTestCursorKey(apiKey);
         return result.ok ? { ok: true, latency_ms: Date.now() - startedAt } : { ok: false, error: result.error, latency_ms: Date.now() - startedAt };
       }

package/dist/{cli-pygdsgh8.js → cli-a92r1127.js}

@@ -9,7 +9,7 @@ import {
   acquireOAuthRefreshLock,
   releaseOAuthRefreshLock,
   init_oauth
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   scrubSecrets,
   registerVolatileSecret,

package/dist/{cli-8vverzf7.js → cli-ba8ne1es.js}

@@ -320,6 +320,7 @@ var init_legacy_policy = __esm(() => {
     "runtime_pool.write": operatorOrUser,
     "runtime_pool.bind": leadOrOperatorOrUser,
     "runtime_controller.write": operatorOrUser,
+    "agent.token.manage": operatorOrUser,
     "extension.write": extensionWrite,
     "extension.activate": extensionActivation,
     "extension.install.inline": leadOrOperatorOrUser
@@ -369,6 +370,10 @@ var init_permissions = __esm(() => {
       description: "View or diff another agent's context history.",
       namespace: "agent"
     },
+    "agent.token.manage": {
+      description: "Mint, rotate, or revoke an agent-bound worker token.",
+      namespace: "agent"
+    },
     "task.cancel.any": {
       description: "Cancel any task (beyond tasks the caller created).",
       namespace: "task"

package/dist/{cli-bxrqvpg5.js → cli-be2161h1.js}

@@ -10,7 +10,7 @@ import {
   init_steering,
   createLogEntry2,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   ackSlackMessage,
   buildBufferFlushBlocks,
@@ -20,7 +20,7 @@ import {
   ensureSlackThreadTree2,
   registerTreeMessage,
   getSlackApp2
-} from "./cli-tkf4x6ha.js";
+} from "./cli-37j04k05.js";
 import {
   createAdditiveBuffer,
   TaskCreationBlockedError,
@@ -30,15 +30,15 @@ import {
   createSlackTaskWithFiles,
   notifySlackFileFailures,
   extractSlackMessageText
-} from "./cli-kgnkyabk.js";
+} from "./cli-n72rg53p.js";
 import {
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-4yef8ghv.js";
+} from "./cli-fv5hepyy.js";
 import {
   findUserByExternalId,
   init_users
-} from "./cli-sds5zzs8.js";
+} from "./cli-1f3qzw6y.js";
 import {
   isSteeringEnabled2,
   init_steering_enabled
@@ -230,14 +230,14 @@ async function slackFlush(items, key, immediate) {
     console.log(`[Slack] Flushing buffer: ${key} (${items.length} messages, immediate=${immediate})`);
     const app = getSlackApp2();
     const files = items.flatMap((item) => item.files ?? []);
-    const inbound = __using(__stack, app ? await fetchSlackFiles(app.client, files) : {
+    const inbound = __using(__stack, app ? await fetchSlackFiles(app.client, files, { transcribe: true }) : {
       files,
       fetched: [],
       failed: bufferedFileFailures(files),
       async[Symbol.asyncDispose]() {}
     }, 1);
     const resolvedFiles = new Map(inbound.files.map((file) => [file.id, file]));
-    const combinedText = await rewriteSlackMentions(items.map((item) => buildEffectiveText(item.text, item.files?.map((file) => resolvedFiles.get(file.id) ?? file), inbound.failed)).join(`
+    const combinedText = await rewriteSlackMentions(items.map((item) => buildEffectiveText(item.text, item.files?.map((file) => resolvedFiles.get(file.id) ?? file), inbound.failed, inbound.notes)).join(`
 ---
 `), botUserId);
     const description = `[Thread follow-up — ${items.length} message(s) buffered]

package/dist/{cli-npfe9t1s.js → cli-bnes4z6b.js}

@@ -4,11 +4,11 @@ import {
   getActivePricingRow2,
   insertPricingRow2,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   loadModelsDevCache,
   buildModelsDevSeedRows
-} from "./cli-vq9gqarq.js";
+} from "./cli-dk44dxec.js";
 import {
   setRuntimeModelCatalog,
   init_runtime_model_catalog

package/dist/{cli-aypbg9r2.js → cli-cxxe61f6.js}

@@ -2,7 +2,7 @@ import {
   isGrokOpenRouterModel,
   grokTargetProfile,
   ACPAdapter2
-} from "./cli-038fga5k.js";
+} from "./cli-v0yrfmdh.js";
 import {
   getOpenRouterBaseUrl,
   getOpenRouterAttributionHeaders,

package/dist/{cli-vq9gqarq.js → cli-dk44dxec.js}

@@ -1,7 +1,7 @@
 import {
   getDb2,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   openAICompatibleProviderIds,
   withRegistryCatalogSections,

package/dist/{cli-836ehxmt.js → cli-eww120g8.js}

@@ -2057,6 +2057,7 @@ var init_types = __esm(() => {
     sourceTaskId: string2().optional(),
     outputSchema: record2(string2(), unknown()).optional(),
     inheritParentOutputSchema: boolean().optional(),
+    inheritParentRequester: boolean().optional(),
     inheritParentRoutingAffinity: boolean().optional(),
     inheritParentFollowUpConfig: boolean().optional(),
     followUpConfig: FollowUpConfigSchema.optional(),
@@ -2833,9 +2834,9 @@ var init_types = __esm(() => {
   }).openapi("SwarmScriptNodeConfig");
   WorkflowNodeSchema = object2({
     id: string2().describe("Unique node identifier, used in 'next' and 'inputs' mappings"),
-    type: string2().describe("Executor type: 'agent-task', 'script', 'swarm-script', 'raw-llm', 'system-one-decision', 'validate', 'property-match'"),
+    type: string2().describe("Executor type: 'agent-task', 'script', 'swarm-script', 'raw-llm', 'system-one-decision', 'system-one-extraction', 'validate', 'property-match'"),
     label: string2().optional().describe("Human-readable label for UI display"),
-    config: record2(string2(), unknown()).describe("Executor-specific config. For agent-task: { template, outputSchema?, agentId?, routingReason?, routingNote?, tags?, priority?, dir?, vcsRepo?, model? }; configured agentId defaults routingReason to human_pinned. " + "For script: { runtime, script, args?, timeout? }. " + "For swarm-script: { scriptName, scope?, pinHash?, args?, fsMode?, timeoutMs? (1000-300000) }. " + "For system-one-decision (typed decisions, Jev by default): { provider? ('typesafe' default | 'openrouter' | 'laya'; a literal, never a {{token}}), state, questions: { <id>: { type: 'noul'|'choice'|'score', instructions, criteria? } }, returns: { <id>: { type } }, model? (provider-specific; unset = the provider's default, and laya has none so it sends no model and picks its own checkpoint), timeoutMs?, maxRetries? (0-3), humanReview? { band: { min, max } (0-1, inclusive), approvers: { users?, roles?, policy }, title?, timeout?, notifications? } }; each provider needs its own global secret (TYPESAFE_API_KEY, OPENROUTER_API_KEY, or LAYA_API_KEY; laya also needs the global config LAYA_URL), and a save warns and a run fails before any node executes when one is missing; system-one-decision nodes must not set retry or validation.retry. With humanReview, an answer whose confidence is inside the band waits for a person (human-in-the-loop approval), and next must map ports { approved, rejected?, timeout? }. " + "Agent-task templates and ordinary config values support {{interpolation}} from the node's inputs context, including trigger and declared upstream aliases. " + "SECURITY: executable source for script/swarm-script nodes does not interpolate trigger.* or upstream node outputs; only input/workflow/swarm/run values are allowed in inline script source, and named swarm-script source is not workflow-interpolated. " + 'Pass dynamic values through config.args instead (inline script receives them as argv, with runtime: "bash" running bash -c <script> ...args so args[0] is $0 and args[1] is $1; swarm-script receives its args object). ' + "NOTE: config.outputSchema on agent-task nodes validates the AGENT's raw JSON output, " + "while node-level outputSchema validates the EXECUTOR's return value ({taskId, taskOutput})."),
+    config: record2(string2(), unknown()).describe("Executor-specific config. For agent-task: { template, outputSchema?, agentId?, routingReason?, routingNote?, tags?, priority?, dir?, vcsRepo?, model? }; configured agentId defaults routingReason to human_pinned. " + "For script: { runtime, script, args?, timeout? }. " + "For swarm-script: { scriptName, scope?, pinHash?, args?, fsMode?, timeoutMs? (1000-300000) }. " + "For system-one-decision (typed decisions, Jev by default): { provider? ('typesafe' default | 'openrouter' | 'laya'; a literal, never a {{token}}), state, questions: { <id>: { type: 'noul'|'choice'|'score', instructions, criteria? } }, returns: { <id>: { type } }, model? (provider-specific; unset = the provider's default, and laya has none so it sends no model and picks its own checkpoint), timeoutMs?, maxRetries? (0-3), humanReview? { band: { min, max } (0-1, inclusive), approvers: { users?, roles?, policy }, title?, timeout?, notifications? } }; each provider needs its own global secret (TYPESAFE_API_KEY, OPENROUTER_API_KEY, or LAYA_API_KEY; laya also needs the global config LAYA_URL), and a save warns and a run fails before any node executes when one is missing; system-one-decision nodes must not set retry or validation.retry. With humanReview, an answer whose confidence is inside the band waits for a person (human-in-the-loop approval), and next must map ports { approved, rejected?, timeout? }. " + "For system-one-extraction (typed extraction, Cloudflare Clairic by default): { provider? ('cloudflare'; a literal), state (text to read; may be empty when images are sent), fields: { <id>: { type: 'text'|'number'|'date'|'time'|'datetime'|'duration'|'list'|'estimate'|'forecast', instructions?, ...type options (number: unit?, integer?, decimals?; duration: unit? (seconds..years), integer?, decimals?; list: items ('text'|'number'|'date'); estimate: min, max, step?, scale?, unit?; forecast: min, max, horizon?, interval?, scale?, unit?; text/number/date/time/datetime/duration: null_threshold?) } }, images? (max 4 base64 data: URLs or { content_type, base64 }), referenceDate? (YYYY-MM-DD), model?, timeoutMs?, maxRetries? (0-3) }; output answers.<id> carries value (null when the input does not say), guess, p_null, confidence, span/spans, and for estimate/forecast median/p10/p90. Needs the global secret CLOUDFLARE_API_TOKEN (or CLOUDFLARE_API_KEY) and the global config CLOUDFLARE_ACCOUNT_ID; must not set retry or validation.retry. " + "Agent-task templates and ordinary config values support {{interpolation}} from the node's inputs context, including trigger and declared upstream aliases. " + "SECURITY: executable source for script/swarm-script nodes does not interpolate trigger.* or upstream node outputs; only input/workflow/swarm/run values are allowed in inline script source, and named swarm-script source is not workflow-interpolated. " + 'Pass dynamic values through config.args instead (inline script receives them as argv, with runtime: "bash" running bash -c <script> ...args so args[0] is $0 and args[1] is $1; swarm-script receives its args object). ' + "NOTE: config.outputSchema on agent-task nodes validates the AGENT's raw JSON output, " + "while node-level outputSchema validates the EXECUTOR's return value ({taskId, taskOutput})."),
     next: union2([string2(), array2(string2()), record2(string2(), string2())]).optional().describe("Next node(s): string for simple chaining, string[] for fan-out to parallel nodes, or record for port-based routing ({pass: 'a', fail: 'b'})"),
     validation: StepValidationConfigSchema.optional(),
     retry: RetryPolicySchema.optional(),

package/dist/{cli-a0kcty51.js → cli-f01h25yt.js}

@@ -1,6 +1,6 @@
 import {
   Anthropic
-} from "./cli-er83cjbn.js";
+} from "./cli-k8g16gz3.js";
 import {
   checkToolLoop
 } from "./cli-0726awxw.js";

package/dist/{cli-mzkwkbdy.js → cli-f0g3pgvf.js}

@@ -1,7 +1,7 @@
 import {
   RuntimeProviderKindSchema,
   init_types
-} from "./cli-836ehxmt.js";
+} from "./cli-eww120g8.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";

package/dist/{cli-1ma335fz.js → cli-ftc1g5tj.js}

@@ -1,7 +1,7 @@
 import {
   ampBillsCacheWrites,
   resolveAmpModel
-} from "./cli-1eszr343.js";
+} from "./cli-qfxc84gh.js";
 import {
   CONTEXT_FORMULA,
   computeContextUsedUnified,
@@ -36,7 +36,7 @@ import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 init_secret_scrubber();
-var AMP_PACKAGE = "@ampcode/cli@0.0.1792470027-g8c393d";
+var AMP_PACKAGE = "@ampcode/cli@0.0.1792584044-g15483c";
 var AMP_MCP_SERVER_NAME = "agent-swarm";
 var AMP_PLUGIN_MODE_KEY = "agent-swarm";
 var AMP_LIVE_TEST_TIMEOUT_MS = 5000;

package/dist/{cli-4yef8ghv.js → cli-fv5hepyy.js}

@@ -2,17 +2,17 @@ import {
   getKv2,
   upsertKv2,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   resolveIdentity,
   recordUnmappedIdentity
-} from "./cli-kgnkyabk.js";
+} from "./cli-n72rg53p.js";
 import {
   findUserByExternalId,
   findOrCreateUserByEmail,
   linkIdentity,
   init_users
-} from "./cli-sds5zzs8.js";
+} from "./cli-1f3qzw6y.js";
 
 // src/slack/enrich.ts
 init_db3();

package/dist/{cli-58vwn100.js → cli-g35m2xwm.js}

@@ -14,7 +14,7 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-836ehxmt.js";
+} from "./cli-eww120g8.js";
 import {
   resolveTemplateFromCode,
   resolveTemplateAsync,
@@ -52,7 +52,7 @@ function checkCursorCredentials2(env) {
   return env.CURSOR_API_KEY?.trim() ? { ready: true, missing: [], satisfiedBy: "env" } : { ready: false, missing: ["CURSOR_API_KEY"], hint: "Set CURSOR_API_KEY for cursor." };
 }
 async function liveTestCursorKey2(apiKey) {
-  const { Cursor } = await import("./index-c4ykd0f1.js");
+  const { Cursor } = await import("./index-dr94zbnh.js");
   try {
     await Cursor.me({ apiKey });
     return { ok: true };
@@ -72,7 +72,7 @@ async function listCursorModels(apiKey) {
   if (modelListCache?.key === apiKey && Date.now() - modelListCache.at < MODEL_LIST_TTL_MS) {
     return modelListCache.models;
   }
-  const { Cursor } = await import("./index-c4ykd0f1.js");
+  const { Cursor } = await import("./index-dr94zbnh.js");
   const models = await Cursor.models.list({ apiKey });
   modelListCache = { key: apiKey, at: Date.now(), models };
   return models;
@@ -446,7 +446,7 @@ class CursorAdapter2 {
     if (!apiKey)
       throw new Error("cursor requires CURSOR_API_KEY");
     registerVolatileSecret(apiKey, "CURSOR_API_KEY");
-    const { Agent, JsonlLocalAgentStore } = await import("./index-c4ykd0f1.js");
+    const { Agent, JsonlLocalAgentStore } = await import("./index-dr94zbnh.js");
     const modelId = config.model || DEFAULT_MODEL_TIER_MAP.cursor.regular;
     const effort = applyReasoningEffort("cursor", modelId, config.reasoningEffort);
     const requested = effort.kind === "cursor-effort" ? effort.reasoningEffort : undefined;

package/dist/{cli-qje9k2nh.js → cli-g9ypd5en.js}

@@ -23,11 +23,21 @@ function normalizeStoredKey(key) {
   if (!trimmed || trimmed.includes("\x00")) {
     throw new FilesError("Provider", "Stored file key must be a non-empty path");
   }
-  if (trimmed.split("/").some((part) => part === "..")) {
+  if (trimmed.split("/").some(isParentSegment)) {
     throw new FilesError("Provider", "Stored file key must not contain parent path segments");
   }
   return trimmed;
 }
+function isParentSegment(part) {
+  if (part === "..")
+    return true;
+  try {
+    const decoded = decodeURIComponent(part);
+    return decoded === ".." || decoded.includes("/");
+  } catch {
+    return false;
+  }
+}
 function normalizeName(name) {
   const trimmed = name.trim().replace(/^\/+/, "");
   if (!trimmed || trimmed === "." || trimmed.includes("\x00")) {
@@ -518,4 +528,4 @@ function selectProvider() {
 function resetFileStorageProvider2() {
   memoizedProvider = null;
 }
-export { FilesError, providerPath, normalizeFilesError, agentFsRequestTimeoutMs, AgentFsProvider, getFileStorageProvider2, resetFileStorageProvider2 };
+export { FilesError, providerPath, normalizeStoredKey, normalizeFilesError, agentFsRequestTimeoutMs, AgentFsProvider, getFileStorageProvider2, resetFileStorageProvider2 };

package/dist/{cli-gx0j2khs.js → cli-j99azg3g.js}

@@ -15,7 +15,7 @@ import {
   init_secret_registry,
   upsertSwarmConfig2,
   init_db3
-} from "./cli-vcgscaan.js";
+} from "./cli-wt0jf9hm.js";
 import {
   createRuntimeProvider,
   init_runtime_providers
@@ -25,7 +25,7 @@ import {
   init_session_token_connections,
   insertSessionToken,
   init_users
-} from "./cli-sds5zzs8.js";
+} from "./cli-1f3qzw6y.js";
 import {
   RuntimeControllerCreateSchema,
   RuntimeControllerUpdateSchema,
@@ -33,7 +33,7 @@ import {
   RuntimePoolUpdateSchema,
   RuntimePoolCreateAgentSchema,
   init_types
-} from "./cli-836ehxmt.js";
+} from "./cli-eww120g8.js";
 import {
   scrubSecrets,
   registerVolatileSecret,