@desplega.ai/agent-swarm 2.5.4 → 2.6.0

package/dist/{cli-19202kew.js → cli-gf95q3bm.js}

@@ -15,17 +15,17 @@ import {
   init_secret_registry,
   upsertSwarmConfig2,
   init_db3
-} from "./cli-jb30dzvk.js";
+} from "./cli-g8ka5j4j.js";
 import {
   createRuntimeProvider,
   init_runtime_providers
-} from "./cli-dew6x255.js";
+} from "./cli-39aet655.js";
 import {
   closeSessionTokenConnections,
   init_session_token_connections,
   insertSessionToken,
   init_users
-} from "./cli-6a1xg1p7.js";
+} from "./cli-esakngh8.js";
 import {
   RuntimeControllerCreateSchema,
   RuntimeControllerUpdateSchema,
@@ -33,13 +33,13 @@ import {
   RuntimePoolUpdateSchema,
   RuntimePoolCreateAgentSchema,
   init_types
-} from "./cli-mz9afxxf.js";
+} from "./cli-4rf0f5vg.js";
 import {
   scrubSecrets,
   registerVolatileSecret,
   unregisterVolatileSecret,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-eftzyh9y.js → cli-gnsb1zxa.js}

@@ -4,7 +4,7 @@ import {
   claimKv2,
   deleteKv2,
   init_db3
-} from "./cli-jb30dzvk.js";
+} from "./cli-g8ka5j4j.js";
 import {
   isEnvFlagEnabled,
   init_env_flag
@@ -12,7 +12,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 
 // src/slack/external-channel.ts
 init_db3();

package/dist/{cli-nwyw3zhg.js → cli-gxee0bqa.js}

@@ -773,4 +773,4 @@ var init_src2 = __esm(() => {
   init_resolve_alias();
 });
 
-export { isAlias, parseAlias, resolveAlias, harnessCatalogSection, isHarnessModelJudged, normalizeGrokModel, harnessModelIds, modelFamilyKey, buildClaudeShortnameMap, harnessModelMismatch, openAICompatibleProviders, openAICompatibleProviderIds, providerKeyVars, openAICompatibleKeyVars, openAICompatibleBaseUrlVars, baseUrlOverride, ignoredBaseUrlVar, providerBaseUrl, openAICompatibleProvider, providerForModel, providerForKeyVar, providerKeyFromEnv, providerHarnessModels, withAgentChatRegistrySections, registryCatalogSections, withRegistryCatalogSections, dshCatalogRef, grokCatalogRef, cursorCatalogRef, reasoningLevelsFor, claudeCatalogModelId, init_src2 };
+export { isAlias, parseAlias, resolveAlias, harnessCatalogSection, isHarnessModelJudged, normalizeGrokModel, harnessModelIds, modelFamilyKey, buildClaudeShortnameMap, harnessModelMismatch, openAICompatibleProviders, openAICompatibleProviderIds, providerKeyVars, openAICompatibleKeyVars, baseUrlEnvVar, openAICompatibleBaseUrlVars, baseUrlOverride, ignoredBaseUrlVar, providerBaseUrl, openAICompatibleProvider, providerForModel, providerForKeyVar, providerKeyFromEnv, providerHarnessModels, withAgentChatRegistrySections, registryCatalogSections, withRegistryCatalogSections, dshCatalogRef, grokCatalogRef, cursorCatalogRef, reasoningLevelsFor, claudeCatalogModelId, init_src2 };

package/dist/{cli-e42vss7b.js → cli-hfeb68z4.js}

@@ -1,11 +1,11 @@
-import {
-  getSlackConfiguration,
-  init_config
-} from "./cli-qeaq3j6t.js";
 import {
   isSteeringEnabled2,
   init_steering_enabled
 } from "./cli-4sydckyj.js";
+import {
+  getSlackConfiguration,
+  init_config
+} from "./cli-qeaq3j6t.js";
 import {
   init_templates3
 } from "./cli-j6rktc91.js";
@@ -24,7 +24,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-g9vd9ece.js → cli-k21gx5ht.js}

@@ -2,16 +2,16 @@ import {
   contextStatePath,
   contextBoundNoteMarkerPath,
   recordContextState
-} from "./cli-2655k16q.js";
+} from "./cli-nq677csy.js";
 import {
   runStopHookSessionSummarySubprocess
-} from "./cli-9j129brq.js";
+} from "./cli-mtnj4fwa.js";
 import {
   redactRateLimitEventLine,
   SessionErrorTracker,
   trackErrorFromJson,
   parseStderrForErrors
-} from "./cli-gx4rm0qx.js";
+} from "./cli-7enjwya9.js";
 import {
   swarmRuntimeInstanceId
 } from "./cli-e8xyjvfc.js";
@@ -32,7 +32,7 @@ import {
 } from "./cli-vbhgkw9h.js";
 import {
   applyReasoningEffort
-} from "./cli-bn0rewsy.js";
+} from "./cli-c081bj3b.js";
 import {
   fetchInstalledMcpServers
 } from "./cli-bst1vp7e.js";
@@ -42,7 +42,7 @@ import {
   computeContextUsedUnified,
   clampContextPercent,
   init_context_window
-} from "./cli-0shx9j93.js";
+} from "./cli-pfk92eqz.js";
 import {
   resolveClaudeTransport,
   isClaudeBridgeEffective
@@ -53,18 +53,16 @@ import {
 import {
   withFileLock,
   init_file_lock
-} from "./cli-e42vss7b.js";
-import {
-  CLAUDE_CREDENTIALS_HINT,
-  validateClaudeCredentials,
-  init_credentials
-} from "./cli-zw88zjba.js";
+} from "./cli-hfeb68z4.js";
 import {
   routeCredentialStatus,
   deriveDefaultRoute,
   routeUnsetEnv,
-  init_src
-} from "./cli-e45e4m6b.js";
+  init_src,
+  CLAUDE_CREDENTIALS_HINT,
+  validateClaudeCredentials,
+  init_credentials
+} from "./cli-1tem6ns9.js";
 import {
   getOpenRouterAttributionHeaders,
   init_openrouter_base_url
@@ -76,7 +74,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   __toESM
 } from "./cli-242037k3.js";
@@ -1261,7 +1259,7 @@ class ClaudeAdapter2 {
     if (transport === "sdk" && isClaudeBridgeEffective(sourceEnv)) {
       throw new Error("CLAUDE_TRANSPORT=sdk cannot run with an effective Claude Bridge configuration. Select CLI transport or disable the bridge.");
     }
-    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-7b7whkaq.js") : undefined;
+    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-nw5yd8cp.js") : undefined;
     claudeSdk?.validateClaudeSdkAdditionalArgs([
       ...claudeBinaryArgv.slice(1),
       ...config.additionalArgs ?? []
@@ -1290,7 +1288,7 @@ class ClaudeAdapter2 {
     }
     if (isEnvFlagEnabled("CLAUDE_TRUST_PRESEED", true, sourceEnv)) {
       try {
-        await preseedClaudeTrustDialog(await resolveClaudeTrustDirs(config.cwd));
+        await preseedClaudeTrustDialog(await resolveClaudeTrustDirs(config.cwd), sourceEnv.HOME || undefined);
       } catch (err) {
         console.warn(`\x1B[33m[claude]\x1B[0m ${scrubSecrets(`Failed to pre-seed trust for ${config.cwd}: ${err}`)}`);
       }

package/dist/{cli-tsma7p8v.js → cli-kf4jree9.js}

@@ -9,12 +9,12 @@ import {
   acquireOAuthRefreshLock,
   releaseOAuthRefreshLock,
   init_oauth
-} from "./cli-jb30dzvk.js";
+} from "./cli-g8ka5j4j.js";
 import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 
 // node_modules/oauth4webapi/build/index.js
 var USER_AGENT;

package/dist/{cli-dabehxhp.js → cli-kt907da6.js}

@@ -6,7 +6,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-wx2nj19m.js → cli-m5a9m0ak.js}

@@ -1,11 +1,11 @@
 import {
   contextBoundNoteThreshold,
   createContextBoundNote
-} from "./cli-2655k16q.js";
+} from "./cli-nq677csy.js";
 import {
   ampBillsCacheWrites,
   resolveAmpModel
-} from "./cli-9s05422w.js";
+} from "./cli-bqztfyve.js";
 import {
   swarmRuntimeInstanceId
 } from "./cli-e8xyjvfc.js";
@@ -22,18 +22,18 @@ import {
 } from "./cli-jc1g9ndz.js";
 import {
   applyReasoningEffort
-} from "./cli-bn0rewsy.js";
+} from "./cli-c081bj3b.js";
 import {
   CONTEXT_FORMULA,
   computeContextUsedUnified,
   clampContextPercent,
   init_context_window
-} from "./cli-0shx9j93.js";
+} from "./cli-pfk92eqz.js";
 import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 
 // src/providers/amp-adapter.ts
 import { existsSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
@@ -42,7 +42,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 init_context_window();
 init_secret_scrubber();
-var AMP_PACKAGE = "@ampcode/cli@0.0.1792844927-g360c96";
+var AMP_PACKAGE = "@ampcode/cli@0.0.1792929650-g000512";
 var AMP_MCP_SERVER_NAME = "agent-swarm";
 var AMP_PLUGIN_MODE_KEY = "agent-swarm";
 var AMP_LIVE_TEST_TIMEOUT_MS = 5000;

package/dist/{cli-621ce7kw.js → cli-m70bajzr.js}

@@ -2,7 +2,7 @@ import {
   isGrokOpenRouterModel,
   grokTargetProfile,
   ACPAdapter2
-} from "./cli-m4ecdxvz.js";
+} from "./cli-zqne1qcj.js";
 import {
   getOpenRouterBaseUrl,
   getOpenRouterAttributionHeaders,
@@ -11,11 +11,11 @@ import {
 import {
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   normalizeGrokModel,
   init_src2
-} from "./cli-nwyw3zhg.js";
+} from "./cli-gxee0bqa.js";
 
 // src/providers/grok-adapter.ts
 init_src2();

package/dist/{cli-9j129brq.js → cli-mtnj4fwa.js}

@@ -8,14 +8,14 @@ import {
 import {
   materializeClaudeMd,
   stopClaudeMd
-} from "./cli-pzatvw94.js";
+} from "./cli-2sjhpsns.js";
 import {
   summarizeSession
-} from "./cli-mmhj8vd7.js";
+} from "./cli-ag2yrnt5.js";
 import {
   contextBoundNoteThreshold,
   injectClaimedContextBoundNote
-} from "./cli-2655k16q.js";
+} from "./cli-nq677csy.js";
 import {
   guardGhPrBody,
   guardGhPrRoom
@@ -31,11 +31,11 @@ import {
   warnProfileFileTooLarge,
   buildIndependentIdentityPayloads,
   init_profile_sync
-} from "./cli-e42vss7b.js";
+} from "./cli-hfeb68z4.js";
 import {
   init_package,
   package_default
-} from "./cli-xtrz6bzs.js";
+} from "./cli-nn6vx2mq.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getMcpBaseUrl,
@@ -52,7 +52,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 
 // src/hooks/hook.ts
 init_package();

package/dist/{cli-xzfq4at3.js → cli-mvjz5an3.js}

@@ -10,7 +10,7 @@ import {
   getMostRecentTaskInThread2,
   reactionName,
   init_db3
-} from "./cli-jb30dzvk.js";
+} from "./cli-g8ka5j4j.js";
 import {
   TaskCreationBlockedError,
   buildEffectiveText,
@@ -23,7 +23,7 @@ import {
   extractTaskFromMessage,
   extractSlackMessageText,
   dispatchPre2
-} from "./cli-asq5ydm4.js";
+} from "./cli-4hxrf0p4.js";
 import {
   noteSlackInboundSideEffect,
   ignoreSlackInbound,
@@ -34,23 +34,23 @@ import {
   isSlackRenderV2Enabled2,
   ensureSlackThreadTree2,
   registerTreeMessage
-} from "./cli-abs8ndtr.js";
+} from "./cli-g20jjwt4.js";
 import {
   isBlockExternalEnabled2,
   invalidateChannelExternality2,
   getChannelBlockReason2,
   shouldBlockChannel2,
   leaveExternalChannel2
-} from "./cli-eftzyh9y.js";
+} from "./cli-gnsb1zxa.js";
 import {
   workflowEventBus2,
   init_event_bus
-} from "./cli-dabehxhp.js";
+} from "./cli-kt907da6.js";
 import {
   enrichSlackUserEmail,
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-jbnn4vxb.js";
+} from "./cli-24j1jeeb.js";
 import {
   wasEventSeen,
   requestSlackThreadSteering,
@@ -58,7 +58,7 @@ import {
   bufferThreadMessage,
   getBufferMessageCount,
   instantFlush
-} from "./cli-wghjkr0e.js";
+} from "./cli-sqma6vw1.js";
 import {
   resolveTemplate,
   init_resolver
@@ -79,7 +79,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-n4c8e3s5.js";
+} from "./cli-708wdy32.js";
 import {
   __using,
   __callDispose
@@ -400,6 +400,10 @@ function registerMessageHandler2(app) {
         }
       }
       matches ??= await routeMessage(routingText, botUserId, botMentioned || isImplicitMention, routingThreadContext);
+      const slack = {
+        trigger: "mention",
+        messages: [{ ts: msg.ts, userId: msg.user, text: msg.text ?? "" }]
+      };
       if (matches.length === 0) {
         let __stack = [];
         try {
@@ -451,7 +455,7 @@ ${taskDescription}`;
             slackUserId: msg.user,
             requestedByUserId,
             contextKey: slackContextKey({ channelId: msg.channel, threadTs })
-          }, inbound);
+          }, inbound, slack);
           await ackSlackMessage(client, msg.channel, msg.ts, reactionName("accepted"), "accepted");
           await notifySlackFileFailures(client, msg.channel, threadTs, unattached);
           if (isSlackRenderV2Enabled2()) {
@@ -544,7 +548,7 @@ ${taskDescription}`;
               inheritParentOutputSchema: false,
               requestedByUserId,
               contextKey: slackContextKey({ channelId: msg.channel, threadTs })
-            }, inbound);
+            }, inbound, slack);
             const { task } = created;
             unattached.push(...created.unattached);
             await ackSlackMessage(client, msg.channel, msg.ts, reactionName("accepted"), "accepted");
@@ -562,7 +566,7 @@ ${taskDescription}`;
             slackUserId: msg.user,
             requestedByUserId,
             contextKey: slackContextKey({ channelId: msg.channel, threadTs })
-          }, inbound);
+          }, inbound, slack);
           const { task } = created;
           unattached.push(...created.unattached);
           await ackSlackMessage(client, msg.channel, msg.ts, reactionName("accepted"), "accepted");

package/dist/{cli-277c31dw.js → cli-n7asmce6.js}

@@ -1,10 +1,34 @@
+import {
+  publicEndpointSsrfOptions
+} from "./cli-3gfvmzht.js";
 import {
   getMemoryRaterNames
 } from "./cli-3h26v7yj.js";
 import {
   normalizeOrgWebsite,
-  init_org_website
-} from "./cli-jb30dzvk.js";
+  init_org_website,
+  assertUrlSafe
+} from "./cli-g8ka5j4j.js";
+import {
+  getRouteProvider,
+  createScopedFetch,
+  deriveDefaultRoute,
+  init_src
+} from "./cli-1tem6ns9.js";
+import {
+  getOpenRouterBaseUrl,
+  getOpenRouterAttributionHeaders,
+  init_openrouter_base_url
+} from "./cli-dfyv0jdy.js";
+import {
+  scrubSecrets,
+  init_secret_scrubber
+} from "./cli-708wdy32.js";
+import {
+  providerBaseUrl,
+  providerForKeyVar,
+  init_src2
+} from "./cli-gxee0bqa.js";
 
 // src/utils/lead-monitor-channels.ts
 function isLeadChannelMonitoringEnabled(env = process.env) {
@@ -117,6 +141,204 @@ function isUnknownModelError(text, modelId) {
   });
 }
 
+// src/utils/provider-key-probes.ts
+init_src2();
+init_src();
+init_openrouter_base_url();
+init_secret_scrubber();
+var LIVE_TEST_TIMEOUT_MS = 5000;
+function scrubProbeBody(body, init) {
+  const headers = new Headers(init.headers);
+  const apiKey = headers.get("x-api-key") ?? headers.get("authorization")?.replace(/^Bearer\s+/i, "");
+  return scrubSecrets(apiKey ? body.replaceAll(apiKey, "[REDACTED]") : body);
+}
+async function timedFetch(url, init, options = {}) {
+  const controller = new AbortController;
+  const timer = setTimeout(() => controller.abort(), LIVE_TEST_TIMEOUT_MS);
+  const start = Date.now();
+  try {
+    if (options.publicEndpoint)
+      assertUrlSafe(url, publicEndpointSsrfOptions());
+    const res = await fetch(url, {
+      ...init,
+      ...options.publicEndpoint ? { redirect: "manual" } : {},
+      signal: controller.signal
+    });
+    let bodyText = "";
+    try {
+      bodyText = scrubProbeBody(await res.text(), init);
+    } catch {}
+    return {
+      ok: res.ok,
+      status: res.status,
+      bodyText,
+      latency_ms: Date.now() - start
+    };
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function checkAnthropicApiKey(apiKey, options = {}) {
+  const r = await timedFetch("https://api.anthropic.com/v1/models", {
+    method: "GET",
+    headers: { "x-api-key": apiKey, "anthropic-version": "2023-06-01" }
+  }, options);
+  if (r.ok)
+    return { ok: true, latency_ms: r.latency_ms };
+  return {
+    ok: false,
+    error: scrubSecrets(`HTTP ${r.status}: ${r.bodyText.slice(0, 200)}`),
+    httpStatus: r.status,
+    latency_ms: r.latency_ms
+  };
+}
+async function checkOpenAiApiKey(apiKey, options = {}) {
+  const r = await timedFetch("https://api.openai.com/v1/models", {
+    method: "GET",
+    headers: { Authorization: `Bearer ${apiKey}` }
+  }, options);
+  if (r.ok)
+    return { ok: true, latency_ms: r.latency_ms };
+  return {
+    ok: false,
+    error: scrubSecrets(`HTTP ${r.status}: ${r.bodyText.slice(0, 200)}`),
+    httpStatus: r.status,
+    latency_ms: r.latency_ms
+  };
+}
+async function checkXaiApiKey(apiKey, options = {}) {
+  const r = await timedFetch("https://api.x.ai/v1/models", {
+    method: "GET",
+    headers: { Authorization: `Bearer ${apiKey}` }
+  }, options);
+  if (r.ok)
+    return { ok: true, latency_ms: r.latency_ms };
+  return {
+    ok: false,
+    error: scrubSecrets(`HTTP ${r.status}: ${r.bodyText.slice(0, 200)}`),
+    httpStatus: r.status,
+    latency_ms: r.latency_ms
+  };
+}
+async function checkBearerGet(url, init, options = {}) {
+  const r = await timedFetch(url, { method: "GET", ...init }, options);
+  if (r.ok)
+    return { ok: true, latency_ms: r.latency_ms };
+  return {
+    ok: false,
+    error: scrubSecrets(`HTTP ${r.status}: ${r.bodyText.slice(0, 200)}`),
+    httpStatus: r.status,
+    latency_ms: r.latency_ms
+  };
+}
+async function checkOpenRouter(apiKey, options = {}) {
+  const base = getOpenRouterBaseUrl(options.env);
+  const get = (url) => checkBearerGet(url, {
+    headers: {
+      ...getOpenRouterAttributionHeaders(url, options.env),
+      Authorization: `Bearer ${apiKey}`
+    }
+  }, options);
+  const keyResult = await get(`${base}/key`);
+  if (keyResult.httpStatus === 404 || keyResult.httpStatus === 405)
+    return get(`${base}/models`);
+  return keyResult;
+}
+function checkDeepSeekApiKey(apiKey, options = {}) {
+  return checkBearerGet("https://api.deepseek.com/models", {
+    headers: { Authorization: `Bearer ${apiKey}` }
+  }, options);
+}
+async function checkOpenAICompatibleProvider(provider, apiKey, baseUrl = provider.baseUrl, options = {}) {
+  const r = await timedFetch(`${baseUrl.replace(/\/+$/, "")}/models`, {
+    method: "GET",
+    headers: { Authorization: `Bearer ${apiKey}` }
+  }, options);
+  if (r.ok)
+    return { ok: true, latency_ms: r.latency_ms };
+  return {
+    ok: false,
+    error: scrubSecrets(`HTTP ${r.status}: ${r.bodyText.slice(0, 200)}`),
+    httpStatus: r.status,
+    latency_ms: r.latency_ms
+  };
+}
+async function checkRoute(route, env) {
+  const startedAt = Date.now();
+  const provider = getRouteProvider(route.provider);
+  const baseUrl = route.baseUrl ?? provider?.defaultBaseUrl;
+  if (!provider?.validate || !baseUrl)
+    return { ok: true, skipped: true, latency_ms: 0 };
+  const publicFetch = async (url, init) => {
+    assertUrlSafe(String(url), publicEndpointSsrfOptions());
+    const res = await fetch(url, init);
+    if (res.ok || !res.body)
+      return res;
+    return new Response(scrubProbeBody(await res.text(), init ?? {}), {
+      status: res.status,
+      statusText: res.statusText,
+      headers: res.headers
+    });
+  };
+  const result = await provider.validate({
+    route,
+    env,
+    signal: AbortSignal.timeout(LIVE_TEST_TIMEOUT_MS),
+    fetch: createScopedFetch(baseUrl, publicFetch)
+  });
+  const latency_ms = Date.now() - startedAt;
+  if (result.status === "verified")
+    return { ok: true, latency_ms };
+  return {
+    ok: result.status === "configured",
+    ...result.status === "configured" ? { skipped: true } : { httpStatus: result.httpStatus },
+    error: scrubSecrets(result.reason),
+    latency_ms
+  };
+}
+async function checkProviderPoolKey(keyType, apiKey, env = process.env) {
+  const startedAt = Date.now();
+  const options = { env, publicEndpoint: true };
+  try {
+    switch (keyType) {
+      case "ANTHROPIC_API_KEY": {
+        const keyEnv = { ...env, ANTHROPIC_API_KEY: apiKey };
+        const route = deriveDefaultRoute("claude", keyEnv);
+        if (route?.provider === "anthropic-gateway" && "secretKey" in route.auth && route.auth.secretKey === "ANTHROPIC_API_KEY") {
+          return await checkRoute(route, keyEnv);
+        }
+        return await checkAnthropicApiKey(apiKey, options);
+      }
+      case "OPENAI_API_KEY":
+        return await checkOpenAiApiKey(apiKey, options);
+      case "OPENROUTER_API_KEY":
+        return await checkOpenRouter(apiKey, options);
+      case "DEEPSEEK_API_KEY":
+        return await checkDeepSeekApiKey(apiKey, options);
+      case "XAI_API_KEY":
+        return await checkXaiApiKey(apiKey, options);
+      case "CLAUDE_CODE_OAUTH_TOKEN": {
+        const tokenEnv = { CLAUDE_CODE_OAUTH_TOKEN: apiKey };
+        return await checkRoute(deriveDefaultRoute("claude", tokenEnv), tokenEnv);
+      }
+      default: {
+        const provider = providerForKeyVar(keyType);
+        if (provider) {
+          return await checkOpenAICompatibleProvider(provider, apiKey, providerBaseUrl(provider, env), options);
+        }
+        return { ok: true, skipped: true, latency_ms: 0 };
+      }
+    }
+  } catch (err) {
+    const raw = err instanceof Error ? err.message : String(err);
+    return {
+      ok: false,
+      error: scrubSecrets(raw.split(apiKey).join("[REDACTED]")) || "Unknown error",
+      latency_ms: Date.now() - startedAt
+    };
+  }
+}
+
 // src/utils/skill-fs-writer.ts
 import { existsSync, mkdirSync, readdirSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
@@ -256,4 +478,4 @@ function writeSkillsToFilesystem(entries, harnessType = "all", home) {
   return { synced, removed, errors };
 }
 
-export { isLeadChannelMonitoringEnabled, ORG_IDENTITY_KEYS, orgIdentityStatus, SIMILARITY_THRESHOLD, memoryRelevance, renderMemoriesPrompt, isUnknownModelError, writeSkillsToFilesystem };
+export { isLeadChannelMonitoringEnabled, ORG_IDENTITY_KEYS, orgIdentityStatus, SIMILARITY_THRESHOLD, memoryRelevance, renderMemoriesPrompt, isUnknownModelError, timedFetch, checkAnthropicApiKey, checkOpenAiApiKey, checkXaiApiKey, checkOpenRouter, checkDeepSeekApiKey, checkOpenAICompatibleProvider, checkProviderPoolKey, writeSkillsToFilesystem };

package/dist/{cli-xtrz6bzs.js → cli-nn6vx2mq.js}

@@ -7,7 +7,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@desplega.ai/agent-swarm",
-    version: "2.5.4",
+    version: "2.6.0",
     description: "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
     keywords: [
       "agent-swarm.dev",

package/dist/{cli-2655k16q.js → cli-nq677csy.js}

@@ -2,7 +2,7 @@ import {
   getKnownContextWindowSize,
   clampContextPercent,
   init_context_window
-} from "./cli-0shx9j93.js";
+} from "./cli-pfk92eqz.js";
 import {
   resolveTemplateFromCode,
   resolveTemplateAsync,