@desplega.ai/agent-swarm 2.7.2 → 2.7.3

package/src/tests/db-tasks-read.test.ts

@@ -71,7 +71,9 @@ const cases: {
     params: [],
     ids: ["a"],
   },
-  { name: "search", filters: { search: "b" }, params: ["%b%", "%b%", "%b%"], ids: ["b"] },
+  // Search terms bind in the agent_tasks_fts candidate lookup; the page and
+  // count read the few candidates by rowid, so they bind no search params.
+  { name: "search", filters: { search: "b" }, params: [], ids: ["b"] },
   {
     name: "combined ordering",
     filters: {
@@ -82,17 +84,7 @@ const cases: {
       source: ["api"],
       requestedByUserId: "requester",
     },
-    params: [
-      "pending",
-      "completed",
-      "%needle%",
-      "%needle%",
-      "%needle%",
-      "feature",
-      '%"blue"%',
-      "api",
-      "requester",
-    ],
+    params: ["pending", "completed", "feature", '%"blue"%', "api", "requester"],
     ids: ["c", "b"],
   },
   {
@@ -124,8 +116,10 @@ for (const { name, filters, params, ids, total } of cases) {
     const countSpy = spyOn(client, "get");
     try {
       expect((await db.getAllTasks(filters)).map((task) => task.id)).toEqual(ids);
-      expect(listSpy.mock.calls[0]?.[1]).toEqual(params);
-      const sql = listSpy.mock.calls[0]?.[0] ?? "";
+      // A search runs its candidate lookup first; pick the page query by shape.
+      const listCall = listSpy.mock.calls.find(([query]) => query.includes(" OFFSET "));
+      expect(listCall?.[1]).toEqual(params);
+      const sql = listCall?.[0] ?? "";
       expect(sql).toContain(`LIMIT ${filters.limit ?? 25} OFFSET ${filters.offset ?? 0}`);
       expect(sql).toContain(
         filters.orderBy === "createdAt"
@@ -133,7 +127,8 @@ for (const { name, filters, params, ids, total } of cases) {
           : "ORDER BY lastUpdatedAt DESC, priority DESC",
       );
       expect(await db.getTasksCount(filters)).toBe(total ?? ids.length);
-      expect(countSpy.mock.calls[0]?.[1]).toEqual(params);
+      const countCall = countSpy.mock.calls.find(([query]) => query.includes("COUNT"));
+      expect(countCall?.[1]).toEqual(params);
       expect((await db.getAllTasks({ ...filters, limit: 100, offset: 0 })).length).toBe(
         await db.getTasksCount(filters),
       );

package/src/tests/deploy-one-box.test.ts

@@ -0,0 +1,161 @@
+import { afterEach, beforeEach, describe, expect, test } from "bun:test";
+import { mkdir, mkdtemp, readFile, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join, resolve } from "node:path";
+import { makeDeployStubs } from "./deploy-stubs";
+import { CHILD_PROCESS_TEST_BUDGET_MS, runChild } from "./test-proc";
+
+// deploy/one-box/bootstrap.sh runs for real here, under a scratch root
+// (AGENT_SWARM_BOOTSTRAP_ROOT) with stand-ins for docker, curl, apt-get, ufw,
+// systemctl and caddy. By default it runs the repo's install.sh, whose onboard
+// step is a stand-in for the CLI release on npm before AGENT_SWARM_BIND_ADDRESS:
+// port mappings without a host address.
+
+const ROOT = resolve(import.meta.dir, "../..");
+const BOOTSTRAP = resolve(ROOT, "deploy/one-box/bootstrap.sh");
+const read = (path: string) => Bun.file(resolve(ROOT, path)).text();
+const API_KEY = "one-box-test-key";
+const HOST = "203-0-113-7.sslip.io";
+
+let dir: string;
+let root: string;
+
+beforeEach(async () => {
+  dir = await mkdtemp(join(tmpdir(), "deploy-one-box-"));
+  root = join(dir, "root");
+  for (const sub of ["etc/agent-swarm", "etc/caddy", "etc/profile.d", "var/log", "root"]) {
+    await mkdir(join(root, sub), { recursive: true });
+  }
+});
+
+afterEach(async () => {
+  await rm(dir, { recursive: true, force: true });
+});
+
+async function bootstrap(installUrl = `file://${ROOT}/install.sh`) {
+  await Bun.write(
+    join(root, "etc/agent-swarm/deploy.env"),
+    `SWARM_DOMAIN=\nAGENT_SWARM_INSTALL_URL=${installUrl}\n`,
+  );
+  const stubs = await makeDeployStubs(dir, {
+    AGENT_SWARM_BOOTSTRAP_ROOT: root,
+    FAKE_API_KEY: API_KEY,
+  });
+  const result = await runChild(["bash", BOOTSTRAP], { env: stubs.env });
+  const status = (await readFile(join(root, "var/lib/agent-swarm/deploy-status"), "utf8")).trim();
+  return { ...result, out: result.stdout + result.stderr, status, stubs };
+}
+
+describe("one-box bootstrap.sh", () => {
+  test(
+    "keeps every published port on loopback from the first docker compose up, with a CLI that ignores --bind",
+    async () => {
+      const r = await bootstrap();
+      expect(r.out).toContain(`Agent Swarm is running at https://${HOST}`);
+      expect(r.exitCode).toBe(0);
+      expect(r.status).toBe("done");
+
+      // Compose puts the stack on its own network, which daemon.json's "ip" does
+      // not cover: the first `up`, inside onboard, must find its default set.
+      expect((await r.stubs.ups())[0]).toBe("agent-swarm_default 127.0.0.1");
+      const history = await r.stubs.history();
+      expect(history.length).toBeGreaterThan(0);
+      expect(history.filter((p) => !p.startsWith("127.0.0.1:"))).toEqual([]);
+      expect(await r.stubs.ports()).toEqual([
+        "127.0.0.1:3013->3013/tcp",
+        "127.0.0.1:3201->3000/tcp",
+      ]);
+
+      expect(await readFile(join(root, "etc/caddy/Caddyfile"), "utf8")).toContain(
+        `${HOST} {\n\treverse_proxy 127.0.0.1:3013\n}`,
+      );
+      // The /setup link holds the API key: it goes to a root-only file, never stdout.
+      const link = await readFile(join(root, "root/agent-swarm-setup-link.txt"), "utf8");
+      expect(link).toContain(`/setup?apiUrl=https%3A%2F%2F${HOST}&apiKey=${API_KEY}`);
+      expect(r.out).not.toContain(API_KEY);
+    },
+    CHILD_PROCESS_TEST_BUDGET_MS,
+  );
+
+  test(
+    "stops the stack when install.sh fails after publishing a port on a public interface",
+    async () => {
+      // A stand-in install.sh: starts a stack bound to 0.0.0.0 explicitly, then fails.
+      const script = join(dir, "failing-install.sh");
+      await Bun.write(
+        script,
+        [
+          "#!/usr/bin/env bash",
+          "set -euo pipefail",
+          'dir=""',
+          'while [ $# -gt 0 ]; do case "$1" in --dir) dir="$2"; shift 2 ;; *) shift ;; esac; done',
+          'mkdir -p "$dir" && cd "$dir"',
+          `printf 'services:\\n  swarm-api:\\n    ports:\\n      - "0.0.0.0:3013:3013"\\n' >docker-compose.yml`,
+          "touch .env",
+          "docker compose --env-file .env up -d",
+          "echo 'API did not become healthy' >&2",
+          "exit 1",
+          "",
+        ].join("\n"),
+      );
+      const r = await bootstrap(`file://${script}`);
+      expect(r.exitCode).not.toBe(0);
+      expect(r.status).toBe("failed");
+      expect(await r.stubs.history()).toEqual(["0.0.0.0:3013->3013/tcp"]);
+      expect(await r.stubs.ports()).toEqual([]);
+      expect(await r.stubs.calls()).toContain("compose stop");
+      expect(r.out).toContain("stopped the stack because it published ports on a public interface");
+    },
+    CHILD_PROCESS_TEST_BUDGET_MS,
+  );
+
+  test(
+    "refuses an existing daemon.json without the loopback default before starting anything",
+    async () => {
+      await mkdir(join(root, "etc/docker"), { recursive: true });
+      await Bun.write(join(root, "etc/docker/daemon.json"), '{ "log-driver": "json-file" }\n');
+      const r = await bootstrap();
+      expect(r.exitCode).not.toBe(0);
+      expect(r.status).toBe("failed");
+      expect(r.out).toContain('without "ip": "127.0.0.1"');
+      expect(await r.stubs.history()).toEqual([]);
+    },
+    CHILD_PROCESS_TEST_BUDGET_MS,
+  );
+});
+
+interface CloudConfig {
+  write_files: { path: string; permissions?: string; content: string }[];
+  runcmd: string[][];
+}
+
+describe("one-box deploy packaging", () => {
+  test("cloud-init.yaml embeds bootstrap.sh byte for byte and runs it", async () => {
+    const yaml = await read("deploy/cloud-init.yaml");
+    expect(yaml.startsWith("#cloud-config\n")).toBe(true);
+    const config = Bun.YAML.parse(yaml) as CloudConfig;
+    const script = config.write_files.find(
+      (f) => f.path === "/usr/local/sbin/agent-swarm-bootstrap",
+    );
+    expect(script?.permissions).toBe("0700");
+    // On a mismatch, copy deploy/one-box/bootstrap.sh into the write_files entry (6-space indent).
+    expect(script?.content).toBe(await read("deploy/one-box/bootstrap.sh"));
+    expect(config.runcmd).toEqual([["/usr/local/sbin/agent-swarm-bootstrap"]]);
+
+    const settings = config.write_files.find((f) => f.path === "/etc/agent-swarm/deploy.env");
+    expect(settings?.permissions).toBe("0600");
+    expect(settings?.content).toContain("\nSWARM_DOMAIN=\n");
+  });
+
+  // Structural only: CI has no packer binary to run `packer validate`.
+  test("the DigitalOcean image runs the same bootstrap.sh on first boot", async () => {
+    const template = await read("deploy/digitalocean/agent-swarm.pkr.hcl");
+    // biome-ignore lint/suspicious/noTemplateCurlyInString: Packer HCL syntax
+    expect(template).toContain('source      = "${path.root}/../one-box/bootstrap.sh"');
+    expect(template).toContain('destination = "/opt/agent-swarm/bootstrap.sh"');
+    const onboot = await read(
+      "deploy/digitalocean/files/var/lib/cloud/scripts/per-instance/001_onboot",
+    );
+    expect(onboot).toContain("\n/opt/agent-swarm/bootstrap.sh\n");
+  });
+});

package/src/tests/deploy-stubs.ts

@@ -0,0 +1,68 @@
+import { chmod, mkdir, readFile, symlink } from "node:fs/promises";
+import { join, resolve } from "node:path";
+
+// A PATH of stand-ins (fixtures/deploy-stubs) so install.sh and
+// deploy/one-box/bootstrap.sh run for real without Docker, root or a network.
+// The fake docker records what the stack publishes; see its header.
+
+const STUBS = resolve(import.meta.dir, "fixtures/deploy-stubs");
+const NO_OPS = ["apt-get", "caddy", "systemctl", "ufw"];
+
+export interface DeployStubs {
+  /** Environment for the child: the stub PATH plus the fake docker's settings. */
+  env: Record<string, string>;
+  /** The fake docker's state directory. */
+  state: string;
+  /** Published ports of the running stack, in `docker ps` form. */
+  ports(): Promise<string[]>;
+  /** Every port the stack ever published. */
+  history(): Promise<string[]>;
+  /** Every docker invocation. */
+  calls(): Promise<string[]>;
+  /** One "<network> <default host address>" line per `docker compose up`. */
+  ups(): Promise<string[]>;
+  /** Create a project network as an earlier `up` would, with this default address ("" for none). */
+  network(name: string, hostBinding: string): Promise<void>;
+}
+
+async function lines(path: string): Promise<string[]> {
+  const text = await readFile(path, "utf8").catch(() => "");
+  return text.split("\n").filter(Boolean);
+}
+
+export async function makeDeployStubs(
+  dir: string,
+  env: Record<string, string> = {},
+): Promise<DeployStubs> {
+  const bin = join(dir, "bin");
+  const state = join(dir, "docker-state");
+  await mkdir(bin, { recursive: true });
+  await mkdir(state, { recursive: true });
+  for (const name of ["docker", "curl", "bun", "bunx"]) {
+    await symlink(join(STUBS, name), join(bin, name));
+  }
+  for (const name of NO_OPS) {
+    await Bun.write(join(bin, name), "#!/bin/sh\nexit 0\n");
+    await chmod(join(bin, name), 0o755);
+  }
+  // bootstrap.sh insists on root.
+  await Bun.write(join(bin, "id"), "#!/bin/sh\necho 0\n");
+  await chmod(join(bin, "id"), 0o755);
+
+  return {
+    env: {
+      PATH: `${bin}:/usr/bin:/bin`,
+      HOME: dir,
+      FAKE_DOCKER_STATE: state,
+      ...env,
+    },
+    state,
+    ports: () => lines(join(state, "ports")),
+    history: () => lines(join(state, "history")),
+    calls: () => lines(join(state, "calls")),
+    ups: () => lines(join(state, "ups")),
+    network: async (name, hostBinding) => {
+      await Bun.write(join(state, "networks", name), `${hostBinding}\n`);
+    },
+  };
+}

package/src/tests/docs-index-footprint.test.js

@@ -78,7 +78,7 @@ describe("docs API index footprint", () => {
     expect(tasks).toContain('"path":"/api/task-templates","method":"get"');
   });
 
-  test("OpenAPI and generated pages keep all 466 operations", async () => {
+  test("OpenAPI and generated pages keep all 467 operations", async () => {
     const spec = await Bun.file(resolve(repoRoot, "openapi.json")).json();
     const operationKeys = [];
     const tags = new Set();
@@ -103,8 +103,8 @@ describe("docs API index footprint", () => {
     expect(spec.paths["/api/agents/{id}/runtime"]?.get).toBeDefined();
 
     const generatedKeys = await generatedOperationKeys();
-    expect(operationKeys).toHaveLength(466);
-    expect(generatedKeys).toHaveLength(466);
+    expect(operationKeys).toHaveLength(467);
+    expect(generatedKeys).toHaveLength(467);
     expect(new Set(generatedKeys)).toEqual(new Set(operationKeys));
   });
 

package/src/tests/dsh-adapter.test.ts

@@ -376,7 +376,7 @@ describe("dsh harness", () => {
     await rename(join(config.cwd, "dsh"), join(config.cwd, "npx"));
     config.env = { ...config.env, DSH_BINARY: "", PATH: config.cwd };
     await expect(new DshAdapter().createSession(config)).rejects.toThrow(
-      "dsh CLI not found. Install @deepseek-ai/dsh@0.2.1-rc.4",
+      "dsh CLI not found. Install @deepseek-ai/dsh@0.2.2-alpha.2",
     );
     expect(await Bun.file(join(config.cwd, "invocation.json")).exists()).toBe(false);
   });

package/src/tests/e2e-codex-auth-chain.test.ts

@@ -288,18 +288,35 @@ describe("nightly workflow codex chain", () => {
     const run = byName(all, "Run harness leg");
     const save = byName(all, "Save Codex auth chain");
     const verify = byName(all, "Verify Codex auth chain was saved");
+    const check = byName(all, "Check for a Codex auth chain to save");
     const mark = byName(all, "Fail the codex result when the chain was not saved");
     const upload = byName(all, "Upload harness results");
     expect(all.indexOf(mark)).toBeGreaterThan(all.indexOf(verify));
     expect(all.indexOf(mark)).toBeLessThan(all.indexOf(upload));
     expect(mark.if).toBe(
-      `always() && (steps.${save.id}.outcome == 'failure' || steps.${verify.id}.outcome == 'failure')`,
+      `always() && (steps.${check.id}.outcome == 'failure' || steps.${save.id}.outcome == 'failure' || steps.${verify.id}.outcome == 'failure')`,
     );
     const resultsPath = run.run?.match(/--json (\S+)/)?.[1];
     expect(resultsPath).toBeDefined();
     expect(mark.run).toBe(`bun scripts/e2e/codex-chain-lost.ts ${resultsPath}`);
   });
 
+  // The worker image runs steps as root and the harness writes the chain mode 600. hashFiles()
+  // runs on the host as the runner user, cannot read that file, and fails the whole condition.
+  test("the save is gated by an in-container file check, never hashFiles()", async () => {
+    const all = await steps();
+    const check = byName(all, "Check for a Codex auth chain to save");
+    const save = byName(all, "Save Codex auth chain");
+    expect(all.indexOf(check)).toBeLessThan(all.indexOf(save));
+    expect(check.if).toBe(
+      "always() && matrix.provider == 'codex' && github.ref == 'refs/heads/main'",
+    );
+    expect(check.run).toContain(`[ -f ${save.with?.path} ]`);
+    expect(check.run).toContain(`echo "present=true" >> "$GITHUB_OUTPUT"`);
+    expect(save.if).toBe(`always() && steps.${check.id}.outputs.present == 'true'`);
+    for (const step of all) expect(step.if ?? "").not.toContain("hashFiles(");
+  });
+
   test("the codex leg and its secret stay on main", async () => {
     const all = await steps();
     const run = byName(all, "Run harness leg");

package/src/tests/fixtures/deploy-stubs/bun

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+# Fake bun for the deploy tests: install.sh only asks for its version.
+echo 1.3.0

package/src/tests/fixtures/deploy-stubs/bunx

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+# Fake `bunx --package @desplega.ai/agent-swarm agent-swarm onboard` for the
+# deploy tests. Like the CLI release on npm before AGENT_SWARM_BIND_ADDRESS
+# (2.7.1), it writes port mappings without a host address and starts the stack.
+# After the stack is up, FAKE_ONBOARD_FAIL=1 makes it fail and
+# FAKE_ONBOARD_FAIL=term sends SIGTERM to the installer, like a Ctrl-C.
+# FAKE_ONBOARD_API_PORT replaces the API's "3013:3013" mapping.
+set -euo pipefail
+cat >docker-compose.yml <<YAML
+services:
+  swarm-api:
+    image: ghcr.io/desplega-ai/agent-swarm:latest
+    ports:
+      - "${FAKE_ONBOARD_API_PORT:-3013:3013}"
+    volumes:
+      - swarm_data:/app/data
+  coder:
+    image: ghcr.io/desplega-ai/agent-swarm-worker:latest
+    ports:
+      - "3201:3000"
+YAML
+printf 'API_KEY=%s\nMCP_BASE_URL=http://localhost:3013\n' "${FAKE_API_KEY:-test-api-key}" >.env
+docker compose --env-file .env up -d
+case "${FAKE_ONBOARD_FAIL:-}" in
+  1) echo "onboard: health check failed" >&2; exit 1 ;;
+  term) kill -TERM "$PPID" ;;
+esac

package/src/tests/fixtures/deploy-stubs/curl

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+# Fake curl for the deploy tests: the public IP lookup, file:// downloads and
+# health checks. Anything else fails, so a test never reaches the network.
+set -euo pipefail
+out="" url=""
+while [ $# -gt 0 ]; do
+  case "$1" in
+    -o | --output) out="$2"; shift 2 ;;
+    -m | --max-time) shift 2 ;;
+    -*) shift ;;
+    *) url="$1"; shift ;;
+  esac
+done
+case "$url" in
+  https://checkip.amazonaws.com* | https://api.ipify.org* | https://ipv4.icanhazip.com*)
+    echo "${FAKE_PUBLIC_IP:-203.0.113.7}"
+    ;;
+  file://*)
+    if [ -n "$out" ] && [ "$out" != /dev/null ]; then cp "${url#file://}" "$out"; else cat "${url#file://}"; fi
+    ;;
+  */health) exit "${FAKE_HEALTH_EXIT:-0}" ;;
+  *)
+    echo "fake curl: no network in tests ($url)" >&2
+    exit 22
+    ;;
+esac

package/src/tests/fixtures/deploy-stubs/docker

@@ -0,0 +1,122 @@
+#!/usr/bin/env bash
+# Fake docker for the deploy tests (install.sh, deploy/one-box/bootstrap.sh).
+# It reads port mappings from ./docker-compose.yml and the override file the way
+# Compose and dockerd do, and keeps its state in $FAKE_DOCKER_STATE:
+#   calls     every invocation
+#   ports     published ports of the running stack, in `docker ps` form
+#   history   every port ever published, so a test can see a short-lived exposure
+#   ups       one line per `compose up`: the project network and its default address
+#   networks/ one file per network, holding its host_binding_ipv4 option
+# Like dockerd, a port without a host address goes to its network's
+# com.docker.network.bridge.host_binding_ipv4, else every interface. daemon.json
+# "ip" covers only the default bridge, never a Compose project network. Like
+# Compose before 2.31 (and any network without a config-hash label), an
+# existing network is reused with its old options.
+set -euo pipefail
+state="${FAKE_DOCKER_STATE:?FAKE_DOCKER_STATE is not set}"
+printf '%s\n' "$*" >>"$state/calls"
+mkdir -p "$state/networks"
+touch "$state/ports" "$state/history" "$state/ups"
+
+# AGENT_SWARM_BIND_ADDRESS as Compose sees it: the shell wins over .env.
+bind_address() {
+  if [ -n "${AGENT_SWARM_BIND_ADDRESS+x}" ]; then
+    printf '%s' "$AGENT_SWARM_BIND_ADDRESS"
+  elif [ -f .env ]; then
+    grep -E '^AGENT_SWARM_BIND_ADDRESS=' .env | tail -n 1 | cut -d= -f2- || true
+  fi
+}
+
+# docker-compose.yml plus the first override file Compose finds (compose-go
+# loads only one).
+compose_files() {
+  local f
+  echo docker-compose.yml
+  for f in compose.override.yml compose.override.yaml docker-compose.override.yml docker-compose.override.yaml; do
+    if [ -f "$f" ]; then
+      echo "$f"
+      return 0
+    fi
+  done
+}
+
+project_network() {
+  local p
+  p="$(printf '%s' "${COMPOSE_PROJECT_NAME:-$(basename "$PWD")}" | tr '[:upper:]' '[:lower:]' | tr -cd 'a-z0-9_-')"
+  printf '%s_default' "${p#"${p%%[a-z0-9]*}"}"
+}
+
+compose_up() {
+  # shellcheck disable=SC2016 # the literal prefix the onboard generator writes
+  local prefix='${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}'
+  local addr net dip entry a b c f files=()
+  addr="$(bind_address)"
+  while IFS= read -r f; do files+=("$f"); done < <(compose_files)
+  net="$(project_network)"
+  if [ ! -f "$state/networks/$net" ]; then
+    sed -nE 's/^ *com\.docker\.network\.bridge\.host_binding_ipv4: *"?([^"]*)"? *$/\1/p' "${files[@]}" |
+      tail -n 1 >"$state/networks/$net"
+  fi
+  dip="$(cat "$state/networks/$net")"
+  dip="${dip:-0.0.0.0}"
+  printf '%s %s\n' "$net" "$dip" >>"$state/ups"
+  awk '/^ *ports: *$/ { p = 1; next }
+    p && /^ *- / { e = $0; sub(/^ *- */, "", e); gsub(/"/, "", e); print e; next }
+    { p = 0 }' "${files[@]}" |
+    while IFS= read -r entry; do
+      if [ "${entry#"$prefix"}" != "$entry" ]; then
+        entry="${entry#"$prefix"}"
+        [ -z "$addr" ] || entry="${addr}:${entry}"
+      fi
+      IFS=: read -r a b c <<<"$entry"
+      if [ -n "$c" ]; then
+        printf '%s:%s->%s/tcp\n' "$a" "$b" "$c"
+      else
+        printf '%s:%s->%s/tcp\n' "$dip" "$a" "$b"
+      fi
+    done >"$state/ports"
+  cat "$state/ports" >>"$state/history"
+}
+
+if [ "${1:-}" = compose ]; then
+  shift
+  verb=""
+  while [ $# -gt 0 ]; do
+    case "$1" in
+      --env-file | -f | -p) shift 2 ;;
+      -*) shift ;;
+      *) verb="$1"; break ;;
+    esac
+  done
+  case "$verb" in
+    version) echo "Docker Compose version v2.30.0" ;;
+    up) compose_up ;;
+    ps) cat "$state/ports" ;;
+    stop) : >"$state/ports" ;;
+    down) : >"$state/ports"; rm -f "$state/networks/$(project_network)" ;;
+    *) ;;
+  esac
+  exit 0
+fi
+
+case "${1:-}" in
+  ps) cat "$state/ports" ;;
+  network)
+    # docker network inspect [--format <template>] <name>
+    [ "${2:-}" = inspect ] || exit 0
+    format="" name=""
+    shift 2
+    while [ $# -gt 0 ]; do
+      case "$1" in
+        --format | -f) format="$2"; shift 2 ;;
+        *) name="$1"; shift ;;
+      esac
+    done
+    if [ ! -f "$state/networks/$name" ]; then
+      echo "Error response from daemon: network $name not found" >&2
+      exit 1
+    fi
+    if [ -n "$format" ]; then cat "$state/networks/$name"; else echo "[{\"Name\": \"$name\"}]"; fi
+    ;;
+  *) ;;
+esac

package/src/tests/fixtures/onboard/content.compose.yml.txt

@@ -32,7 +32,7 @@ services:
       - APP_URL=https://app.agent-swarm.dev
 
     ports:
-      - "3013:3013"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3013:3013"
 
     volumes:
       - swarm_data:/app/data
@@ -73,7 +73,7 @@ services:
       - MAX_CONCURRENT_TASKS=2
 
     ports:
-      - "3201:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3201:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -109,7 +109,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3202:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3202:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -145,7 +145,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3203:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3203:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -181,7 +181,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3204:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3204:3000"
 
     volumes:
       - swarm_logs:/logs

package/src/tests/fixtures/onboard/dev.compose.yml.txt

@@ -32,7 +32,7 @@ services:
       - APP_URL=https://app.agent-swarm.dev
 
     ports:
-      - "3013:3013"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3013:3013"
 
     volumes:
       - swarm_data:/app/data
@@ -73,7 +73,7 @@ services:
       - MAX_CONCURRENT_TASKS=2
 
     ports:
-      - "3201:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3201:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -109,7 +109,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3202:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3202:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -145,7 +145,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3203:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3203:3000"
 
     volumes:
       - swarm_logs:/logs