@desplega.ai/agent-swarm 2.4.4 → 2.5.0

package/dist/{cli-1ephgwnq.js → cli-fes51ya2.js}

@@ -1,7 +1,7 @@
 import {
   ampBillsCacheWrites,
   resolveAmpModel
-} from "./cli-2zqpkvtt.js";
+} from "./cli-jpxsrxcb.js";
 import {
   CONTEXT_FORMULA,
   computeContextUsedUnified,
@@ -28,7 +28,7 @@ import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-xf234ws8.js";
+} from "./cli-n4c8e3s5.js";
 
 // src/providers/amp-adapter.ts
 import { existsSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
@@ -36,7 +36,7 @@ import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 init_secret_scrubber();
-var AMP_PACKAGE = "@ampcode/cli@0.0.1792506219-g025e7e";
+var AMP_PACKAGE = "@ampcode/cli@0.0.1792670445-ge8d5b3";
 var AMP_MCP_SERVER_NAME = "agent-swarm";
 var AMP_PLUGIN_MODE_KEY = "agent-swarm";
 var AMP_LIVE_TEST_TIMEOUT_MS = 5000;

package/dist/{cli-1d70crsy.js → cli-ftmq4nvk.js}

@@ -4,7 +4,7 @@ import {
   claimKv2,
   deleteKv2,
   init_db3
-} from "./cli-p20r8w42.js";
+} from "./cli-fcc5qe3f.js";
 import {
   isEnvFlagEnabled,
   init_env_flag
@@ -12,7 +12,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-xf234ws8.js";
+} from "./cli-n4c8e3s5.js";
 
 // src/slack/external-channel.ts
 init_db3();

package/dist/{cli-qkhc5aqy.js → cli-fy1jyyym.js}

@@ -47,10 +47,10 @@ import {
   checkDependencies2,
   emitBuiltInIntegrationConnectedOnce2,
   init_db3
-} from "./cli-p20r8w42.js";
+} from "./cli-fcc5qe3f.js";
 import {
   getChannelBlockReason2
-} from "./cli-1d70crsy.js";
+} from "./cli-ftmq4nvk.js";
 import {
   require_dist5,
   require_axios,
@@ -67,11 +67,11 @@ import {
 import {
   isTerminalTaskStatus,
   init_types
-} from "./cli-nc35pxb7.js";
+} from "./cli-rh5smt8t.js";
 import {
   taskAttachmentDisplayUrl,
   init_task_attachment_links
-} from "./cli-74c1wpm0.js";
+} from "./cli-gpv60278.js";
 import {
   getSlackConfiguration,
   init_config
@@ -102,7 +102,7 @@ import {
   scrubSecrets,
   scrubObject,
   init_secret_scrubber
-} from "./cli-xf234ws8.js";
+} from "./cli-n4c8e3s5.js";
 import {
   __toESM,
   __commonJS,
@@ -6235,7 +6235,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
     return;
   initialized = true;
   try {
-    const impl = await import("./otel-impl-w3fbhpn0.js");
+    const impl = await import("./otel-impl-h9yyza47.js");
     await impl.boot(serviceRole, {
       exportConsoleLogs: serviceRole === "api" && isApiLogExportEnabled()
     });
@@ -10080,17 +10080,17 @@ async function initSlackApp2() {
   });
   initialized2 = true;
   app.use(slackInboundOutcomeMiddleware());
-  const { registerMessageHandler } = await import("./handlers-0pvee9nw.js");
-  const { registerCommandHandler } = await import("./commands-pcymaeg9.js");
-  const { registerActionHandlers } = await import("./actions-j6ywh6x5.js");
-  const { registerWorkObjectHandlers } = await import("./work-objects-8b86mgjp.js");
+  const { registerMessageHandler } = await import("./handlers-c9ajzhbn.js");
+  const { registerCommandHandler } = await import("./commands-ew83nj70.js");
+  const { registerActionHandlers } = await import("./actions-8p2kze8j.js");
+  const { registerWorkObjectHandlers } = await import("./work-objects-7mg6216g.js");
   registerMessageHandler(app);
   registerCommandHandler(app);
   registerActionHandlers(app);
   registerWorkObjectHandlers(app);
-  const { createAssistant } = await import("./assistant-ftta1zjf.js");
+  const { createAssistant } = await import("./assistant-jedd3ktm.js");
   app.assistant(createAssistant());
-  const { isBlockExternalEnabled, scanExternalChannelsOnBoot } = await import("./external-channel-8njj4h3b.js");
+  const { isBlockExternalEnabled, scanExternalChannelsOnBoot } = await import("./external-channel-e9nw24zv.js");
   if (isBlockExternalEnabled()) {
     scanExternalChannelsOnBoot(app.client).catch((error) => {
       console.error("[Slack] External channel boot scan failed:", error);
@@ -10103,7 +10103,7 @@ async function startSlackApp2() {
     await initSlackApp2();
   }
   if (app) {
-    const { isSlackRenderV2Enabled } = await import("./render-v2-n16n0phe.js");
+    const { isSlackRenderV2Enabled } = await import("./render-v2-cfsh13z3.js");
     if (isSlackRenderV2Enabled())
       await ensureSlackRenderV2Activation2();
     await app.start();

package/dist/{cli-s95dknxh.js → cli-g1cw7xtt.js}

@@ -1,7 +1,7 @@
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-xf234ws8.js";
+} from "./cli-n4c8e3s5.js";
 
 // src/providers/devin-adapter.ts
 init_secret_scrubber();

package/dist/{cli-qje9k2nh.js → cli-g9ypd5en.js}

@@ -23,11 +23,21 @@ function normalizeStoredKey(key) {
   if (!trimmed || trimmed.includes("\x00")) {
     throw new FilesError("Provider", "Stored file key must be a non-empty path");
   }
-  if (trimmed.split("/").some((part) => part === "..")) {
+  if (trimmed.split("/").some(isParentSegment)) {
     throw new FilesError("Provider", "Stored file key must not contain parent path segments");
   }
   return trimmed;
 }
+function isParentSegment(part) {
+  if (part === "..")
+    return true;
+  try {
+    const decoded = decodeURIComponent(part);
+    return decoded === ".." || decoded.includes("/");
+  } catch {
+    return false;
+  }
+}
 function normalizeName(name) {
   const trimmed = name.trim().replace(/^\/+/, "");
   if (!trimmed || trimmed === "." || trimmed.includes("\x00")) {
@@ -518,4 +528,4 @@ function selectProvider() {
 function resetFileStorageProvider2() {
   memoizedProvider = null;
 }
-export { FilesError, providerPath, normalizeFilesError, agentFsRequestTimeoutMs, AgentFsProvider, getFileStorageProvider2, resetFileStorageProvider2 };
+export { FilesError, providerPath, normalizeStoredKey, normalizeFilesError, agentFsRequestTimeoutMs, AgentFsProvider, getFileStorageProvider2, resetFileStorageProvider2 };

package/dist/{cli-74c1wpm0.js → cli-gpv60278.js}

@@ -24,7 +24,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-xf234ws8.js";
+} from "./cli-n4c8e3s5.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-pemywhfq.js → cli-ha9rmwgq.js}

@@ -6,7 +6,7 @@ import {
   isSensitiveKey,
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-xf234ws8.js";
+} from "./cli-n4c8e3s5.js";
 import {
   openAICompatibleKeyVars,
   openAICompatibleBaseUrlVars,
@@ -173,6 +173,7 @@ var init_env = __esm(() => {
     "GITLAB_TOKEN",
     "AZURE_DEVOPS_TOKEN",
     "AZURE_DEVOPS_ORG_URL",
+    "BITBUCKET_TOKEN",
     "LINEAR_API_KEY",
     "SLACK_BOT_TOKEN",
     "SLACK_SIGNING_SECRET",

package/dist/{cli-bnz0r3kc.js → cli-j1eghqfm.js}

@@ -14,7 +14,7 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-nc35pxb7.js";
+} from "./cli-rh5smt8t.js";
 import {
   resolveTemplateFromCode,
   resolveTemplateAsync,
@@ -29,7 +29,7 @@ import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-xf234ws8.js";
+} from "./cli-n4c8e3s5.js";
 import {
   cursorCatalogRef,
   init_src2
@@ -52,7 +52,7 @@ function checkCursorCredentials2(env) {
   return env.CURSOR_API_KEY?.trim() ? { ready: true, missing: [], satisfiedBy: "env" } : { ready: false, missing: ["CURSOR_API_KEY"], hint: "Set CURSOR_API_KEY for cursor." };
 }
 async function liveTestCursorKey2(apiKey) {
-  const { Cursor } = await import("./index-c4ykd0f1.js");
+  const { Cursor } = await import("./index-dr94zbnh.js");
   try {
     await Cursor.me({ apiKey });
     return { ok: true };
@@ -72,7 +72,7 @@ async function listCursorModels(apiKey) {
   if (modelListCache?.key === apiKey && Date.now() - modelListCache.at < MODEL_LIST_TTL_MS) {
     return modelListCache.models;
   }
-  const { Cursor } = await import("./index-c4ykd0f1.js");
+  const { Cursor } = await import("./index-dr94zbnh.js");
   const models = await Cursor.models.list({ apiKey });
   modelListCache = { key: apiKey, at: Date.now(), models };
   return models;
@@ -446,7 +446,7 @@ class CursorAdapter2 {
     if (!apiKey)
       throw new Error("cursor requires CURSOR_API_KEY");
     registerVolatileSecret(apiKey, "CURSOR_API_KEY");
-    const { Agent, JsonlLocalAgentStore } = await import("./index-c4ykd0f1.js");
+    const { Agent, JsonlLocalAgentStore } = await import("./index-dr94zbnh.js");
     const modelId = config.model || DEFAULT_MODEL_TIER_MAP.cursor.regular;
     const effort = applyReasoningEffort("cursor", modelId, config.reasoningEffort);
     const requested = effort.kind === "cursor-effort" ? effort.reasoningEffort : undefined;

package/dist/{cli-2zqpkvtt.js → cli-jpxsrxcb.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-nc35pxb7.js";
+} from "./cli-rh5smt8t.js";
 
 // src/utils/amp-models.ts
 init_types();

package/dist/{cli-ejs3m1sx.js → cli-kxpfx2xr.js}

@@ -5,7 +5,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-xf234ws8.js";
+} from "./cli-n4c8e3s5.js";
 
 // src/providers/codex-oauth/auth-json.ts
 init_subscription_plans();

package/dist/{cli-37yb7307.js → cli-mbfj11fq.js}

@@ -1,7 +1,7 @@
 import {
   init_package,
   package_default
-} from "./cli-pccfmtb5.js";
+} from "./cli-179xcyky.js";
 
 // src/commands/shared/client-config.ts
 init_package();

package/dist/{cli-pnp2j5zg.js → cli-mmhj8vd7.js}

@@ -8,7 +8,7 @@ import {
   complete,
   parseModelStr,
   resolveCredential
-} from "./cli-8nyhf7za.js";
+} from "./cli-qqzmjxkf.js";
 import {
   SummaryWithRatingsSchema,
   BASE_SUMMARIZE_PROMPT,
@@ -29,7 +29,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-xf234ws8.js";
+} from "./cli-n4c8e3s5.js";
 
 // src/utils/internal-ai/complete-structured.ts
 init_zod();

package/dist/{cli-xf234ws8.js → cli-n4c8e3s5.js}

@@ -2543,6 +2543,8 @@ var init_secret_scrubber = __esm(() => {
     "GITLAB_TOKEN",
     "AZURE_DEVOPS_TOKEN",
     "AZURE_DEVOPS_EXT_PAT",
+    "BITBUCKET_TOKEN",
+    "BITBUCKET_WEBHOOK_SECRET",
     "CLAUDE_CODE_OAUTH_TOKEN",
     "ANTHROPIC_API_KEY",
     "OPENAI_API_KEY",

package/dist/{cli-a0kcty51.js → cli-n6kmqngw.js}

@@ -1,6 +1,6 @@
 import {
   Anthropic
-} from "./cli-er83cjbn.js";
+} from "./cli-3qv8naq8.js";
 import {
   checkToolLoop
 } from "./cli-0726awxw.js";
@@ -23,7 +23,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-xf234ws8.js";
+} from "./cli-n4c8e3s5.js";
 import {
   init_src2
 } from "./cli-nwyw3zhg.js";

package/dist/{cli-te6b5wvg.js → cli-nnvjb17s.js}

@@ -18,7 +18,7 @@ import {
 import {
   applyOpenRouterBaseUrlOverride2,
   buildOpenAICompatibleProviderBlock2
-} from "./cli-36ckw0wx.js";
+} from "./cli-stxdrqs2.js";
 import {
   fetchInstalledMcpServers
 } from "./cli-bst1vp7e.js";
@@ -43,11 +43,11 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-pccfmtb5.js";
+} from "./cli-179xcyky.js";
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-xf234ws8.js";
+} from "./cli-n4c8e3s5.js";
 import {
   normalizeGrokModel,
   baseUrlOverride,

package/dist/{cli-1dmcq2eh.js → cli-nzfnt2gs.js}

@@ -2,7 +2,7 @@ import {
   DEFAULT_E2B_API_BASE,
   redactWithEnv,
   init_env
-} from "./cli-pemywhfq.js";
+} from "./cli-ha9rmwgq.js";
 import {
   __toESM,
   __esm

package/dist/{cli-625tb7aq.js → cli-p859hcc8.js}

@@ -13,11 +13,11 @@ async function createRuntimeProvider(kind, target = {}) {
       return new StaticRuntimeProvider;
     }
     case "docker": {
-      const { DockerRuntimeProvider } = await import("./docker-fkgtr75t.js");
+      const { DockerRuntimeProvider } = await import("./docker-nfy2gc8t.js");
       return new DockerRuntimeProvider;
     }
     case "e2b": {
-      const { E2BRuntimeProvider } = await import("./e2b-zn0b4w5w.js");
+      const { E2BRuntimeProvider } = await import("./e2b-cjtf8k1z.js");
       return new E2BRuntimeProvider(target);
     }
     case "k8s":

package/dist/{cli-smvcw9z5.js → cli-pasyvjmm.js}

@@ -3,7 +3,7 @@ import {
   scrubObject,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-xf234ws8.js";
+} from "./cli-n4c8e3s5.js";
 
 // src/x/composio.ts
 init_secret_scrubber();

package/dist/cli-pkaqk57w.js

@@ -0,0 +1,128 @@
+// node_modules/@earendil-works/pi-ai/dist/utils/version.js
+var PI_AI_VERSION = "1.4.0";
+
+// node_modules/@earendil-works/pi-ai/dist/utils/identity.js
+var PI_ATTRIBUTION = { name: "pi", url: "https://pi.dev", categories: ["cli-agent"] };
+var NVIDIA_NIM_HOST = "integrate.api.nvidia.com";
+var OPENCODE_HOST = "opencode.ai";
+function mergeClientIdentity(...sources) {
+  let merged;
+  for (const source of sources) {
+    if (!source)
+      continue;
+    merged = { ...merged };
+    if (source.userAgent !== undefined)
+      merged.userAgent = source.userAgent;
+    if (source.attribution !== undefined)
+      merged.attribution = source.attribution;
+    if (source.version !== undefined)
+      merged.version = source.version;
+  }
+  return merged;
+}
+function getClientVersion(identity) {
+  return identity?.version ?? PI_AI_VERSION;
+}
+function runtimeDescription() {
+  if (typeof process === "undefined")
+    return;
+  const versions = process.versions;
+  if (versions?.bun)
+    return `bun/${versions.bun}`;
+  if (versions?.node)
+    return `node/${process.version}`;
+  return;
+}
+function formatUserAgent(identity) {
+  const mode = identity?.userAgent ?? "detailed";
+  if (typeof mode === "object")
+    return mode.custom;
+  if (mode === "short")
+    return "pi";
+  const product = `pi/${getClientVersion(identity)}`;
+  const runtime = runtimeDescription();
+  return runtime ? `${product} (${process.platform}; ${runtime}; ${process.arch})` : `${product} (browser)`;
+}
+function matchesHost(baseUrl, expectedHost) {
+  try {
+    return new URL(baseUrl).hostname === expectedHost;
+  } catch {
+    return false;
+  }
+}
+function isOpenRouter(target) {
+  return target.provider === "openrouter" || target.baseUrl.includes("openrouter.ai");
+}
+function isNvidiaNim(target) {
+  return target.provider === "nvidia" || matchesHost(target.baseUrl, NVIDIA_NIM_HOST);
+}
+function isOpenCode(target) {
+  return target.provider === "opencode" || target.provider === "opencode-go" || matchesHost(target.baseUrl, OPENCODE_HOST);
+}
+function getAttributionHeaders(target, identity) {
+  const attribution = identity?.attribution;
+  if (!attribution)
+    return {};
+  const { name, url, categories } = attribution;
+  if (isOpenRouter(target)) {
+    return {
+      "HTTP-Referer": url,
+      "X-OpenRouter-Title": name,
+      ...categories === undefined || categories.length === 0 ? {} : { "X-OpenRouter-Categories": categories.join(",") }
+    };
+  }
+  if (isNvidiaNim(target))
+    return { "X-BILLING-INVOKE-ORIGIN": name.charAt(0).toUpperCase() + name.slice(1) };
+  if (isOpenCode(target))
+    return { "x-opencode-client": name };
+  return {};
+}
+function getOpenCodeSessionHeaders(target, sessionId) {
+  return sessionId && isOpenCode(target) ? { "x-opencode-session": sessionId } : undefined;
+}
+function getIdentityHeaders(target, identity) {
+  return { "User-Agent": formatUserAgent(identity), ...getAttributionHeaders(target, identity) };
+}
+function isMutableModels(models) {
+  return "setProvider" in models && "deleteProvider" in models && "clearProviders" in models;
+}
+function withClientIdentity(models, identity) {
+  const withIdentity = (options) => ({ ...options, identity: mergeClientIdentity(identity, options?.identity) });
+  const wrapped = {
+    getProviders: () => models.getProviders(),
+    getProvider: (id) => models.getProvider(id),
+    getModels: (provider) => models.getModels(provider),
+    getModel: (provider, id) => models.getModel(provider, id),
+    getModelsOfType: (type, provider) => models.getModelsOfType(type, provider),
+    getModelOfType: (type, provider, id) => models.getModelOfType(type, provider, id),
+    getAllModels: (provider) => models.getAllModels(provider),
+    refresh: (options) => models.refresh(options),
+    checkAuth: (providerId, options) => models.checkAuth(providerId, options),
+    getAvailable: (providerId, options) => models.getAvailable(providerId, options),
+    getAvailableOfType: (type, providerId, options) => models.getAvailableOfType(type, providerId, options),
+    getAllAvailable: (providerId, options) => models.getAllAvailable(providerId, options),
+    getAuth: models.getAuth.bind(models),
+    login: (providerId, type, interaction, options) => models.login(providerId, type, interaction, options),
+    logout: (providerId, options) => models.logout(providerId, options),
+    stream: (model, context, options) => models.stream(model, context, withIdentity(options)),
+    complete: (model, context, options) => models.complete(model, context, withIdentity(options)),
+    streamSimple: (model, context, options) => models.streamSimple(model, context, withIdentity(options)),
+    completeSimple: (model, context, options) => models.completeSimple(model, context, withIdentity(options)),
+    streamDeferred: (model, handle, options) => models.streamDeferred(model, handle, withIdentity(options)),
+    fetchDeferred: (model, handle, options) => models.fetchDeferred(model, handle, withIdentity(options)),
+    cancelDeferred: (model, handle, options) => models.cancelDeferred(model, handle, withIdentity(options)),
+    generateImages: (model, context, options) => models.generateImages(model, context, withIdentity(options)),
+    classify: (model, context, options) => models.classify(model, context, withIdentity(options))
+  };
+  if (!isMutableModels(models))
+    return wrapped;
+  const mutable = {
+    ...wrapped,
+    setProvider: (provider) => models.setProvider(provider),
+    deleteProvider: (id) => models.deleteProvider(id),
+    clearProviders: () => models.clearProviders()
+  };
+  return mutable;
+}
+
+export { PI_AI_VERSION, PI_ATTRIBUTION, mergeClientIdentity, getClientVersion, formatUserAgent, getAttributionHeaders, getOpenCodeSessionHeaders, getIdentityHeaders, withClientIdentity };