@desplega.ai/agent-swarm 2.7.2 → 2.7.3

package/src/tests/fixtures/onboard/full-all.compose.yml.txt

@@ -36,7 +36,7 @@ services:
       - GITHUB_DISABLE=false
 
     ports:
-      - "3999:3013"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3999:3013"
 
     volumes:
       - swarm_data:/app/data
@@ -89,7 +89,7 @@ services:
       - SENTRY_ORG=${SENTRY_ORG}
 
     ports:
-      - "3201:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3201:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -138,7 +138,7 @@ services:
       - SENTRY_ORG=${SENTRY_ORG}
 
     ports:
-      - "3202:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3202:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -187,7 +187,7 @@ services:
       - SENTRY_ORG=${SENTRY_ORG}
 
     ports:
-      - "3203:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3203:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -236,7 +236,7 @@ services:
       - SENTRY_ORG=${SENTRY_ORG}
 
     ports:
-      - "3204:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3204:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -285,7 +285,7 @@ services:
       - SENTRY_ORG=${SENTRY_ORG}
 
     ports:
-      - "3205:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3205:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -334,7 +334,7 @@ services:
       - SENTRY_ORG=${SENTRY_ORG}
 
     ports:
-      - "3206:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3206:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -383,7 +383,7 @@ services:
       - SENTRY_ORG=${SENTRY_ORG}
 
     ports:
-      - "3207:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3207:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -432,7 +432,7 @@ services:
       - SENTRY_ORG=${SENTRY_ORG}
 
     ports:
-      - "3208:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3208:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -481,7 +481,7 @@ services:
       - SENTRY_ORG=${SENTRY_ORG}
 
     ports:
-      - "3209:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3209:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -530,7 +530,7 @@ services:
       - SENTRY_ORG=${SENTRY_ORG}
 
     ports:
-      - "3210:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3210:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -579,7 +579,7 @@ services:
       - SENTRY_ORG=${SENTRY_ORG}
 
     ports:
-      - "3211:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3211:3000"
 
     volumes:
       - swarm_logs:/logs

package/src/tests/fixtures/onboard/full.compose.yml.txt

@@ -32,7 +32,7 @@ services:
       - APP_URL=https://app.agent-swarm.dev
 
     ports:
-      - "3013:3013"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3013:3013"
 
     volumes:
       - swarm_data:/app/data
@@ -73,7 +73,7 @@ services:
       - MAX_CONCURRENT_TASKS=2
 
     ports:
-      - "3201:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3201:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -109,7 +109,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3202:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3202:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -145,7 +145,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3203:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3203:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -181,7 +181,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3204:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3204:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -217,7 +217,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3205:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3205:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -253,7 +253,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3206:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3206:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -289,7 +289,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3207:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3207:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -325,7 +325,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3208:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3208:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -361,7 +361,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3209:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3209:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -397,7 +397,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3210:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3210:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -433,7 +433,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3211:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3211:3000"
 
     volumes:
       - swarm_logs:/logs

package/src/tests/fixtures/onboard/research.compose.yml.txt

@@ -32,7 +32,7 @@ services:
       - APP_URL=https://app.agent-swarm.dev
 
     ports:
-      - "3013:3013"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3013:3013"
 
     volumes:
       - swarm_data:/app/data
@@ -73,7 +73,7 @@ services:
       - MAX_CONCURRENT_TASKS=2
 
     ports:
-      - "3201:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3201:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -109,7 +109,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3202:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3202:3000"
 
     volumes:
       - swarm_logs:/logs
@@ -145,7 +145,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3203:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3203:3000"
 
     volumes:
       - swarm_logs:/logs

package/src/tests/fixtures/onboard/solo.compose.yml.txt

@@ -32,7 +32,7 @@ services:
       - APP_URL=https://app.agent-swarm.dev
 
     ports:
-      - "3013:3013"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3013:3013"
 
     volumes:
       - swarm_data:/app/data
@@ -73,7 +73,7 @@ services:
       - MAX_CONCURRENT_TASKS=1
 
     ports:
-      - "3201:3000"
+      - "${AGENT_SWARM_BIND_ADDRESS:+${AGENT_SWARM_BIND_ADDRESS:-}:}3201:3000"
 
     volumes:
       - swarm_logs:/logs

package/src/tests/heartbeat-expiry.test.ts

@@ -8,10 +8,11 @@ import {
   initDb,
   updateAgentProfile,
 } from "../be/db";
-import { handleAgentsRest } from "../http/agents";
+import { handleAgentRegister, handleAgentsRest } from "../http/agents";
 import { getPathSegments, parseQueryParams } from "../http/utils";
 import { HeartbeatExpiryError, validateHeartbeatExpiry } from "../utils/heartbeat-expiry";
 import { listenOnFreePort } from "./test-net";
+import { CHILD_PROCESS_TEST_BUDGET_MS, expectChildOk, runChild } from "./test-proc";
 
 const section = (...lines: string[]) => `## Tracked Items\n${lines.join("\n")}\n`;
 
@@ -143,33 +144,158 @@ describe("profile persistence heartbeat gate", () => {
       await getDbClient().query("SELECT * FROM context_versions WHERE agentId = ?", [agentId]),
     ).toEqual(versionsBefore);
   });
-  test("HTTP returns 400 with the offending line", async () => {
-    const server = createServer(async (req, res) => {
+  test.each(["saved", "HTTP 400", "network failure"] as const)(
+    "first-boot runner handles profile %s and continues initializing",
+    async (outcome) => {
+      const leadId = crypto.randomUUID();
+      const secret = "profile-save-test-credential-value";
+      expect(await getAgentById(leadId)).toBeFalsy();
+      const templateFile = (name: string) =>
+        Bun.file(new URL(`../../templates/official/lead/${name}`, import.meta.url)).text();
+      const template = {
+        config: await Bun.file(
+          new URL("../../templates/official/lead/config.json", import.meta.url),
+        ).json(),
+        files: {
+          soulMd: await templateFile("SOUL.md"),
+          identityMd: await templateFile("IDENTITY.md"),
+          claudeMd: await templateFile("CLAUDE.md"),
+          toolsMd: "",
+          setupScript: "",
+          heartbeatMd:
+            outcome === "HTTP 400"
+              ? section("- New undated HTTP item")
+              : await templateFile("HEARTBEAT.md"),
+        },
+      };
+      let profileBefore: Awaited<ReturnType<typeof getAgentById>>;
+      const profileStatuses: number[] = [];
+      const server = createServer(async (req, res) => {
+        try {
+          const path = new URL(req.url ?? "/", "http://localhost").pathname;
+          const json = (data: unknown) => {
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify(data));
+          };
+          if (path === "/api/templates/official/lead") return json(template);
+          if (path === "/api/config/resolved") return json({ configs: [] });
+          if (path === "/api/fs/agent-credentials") return json({ enabled: false });
+          if (path.startsWith("/api/active-sessions/")) return json({ recovered: 0 });
+          if (path === "/me") {
+            profileBefore = await getAgentById(leadId);
+            return json(profileBefore);
+          }
+          if (path === `/api/agents/${leadId}/profile` && req.method === "PUT") {
+            res.once("finish", () => profileStatuses.push(res.statusCode));
+          }
+          if (path === `/api/agents/${leadId}/mcp-servers`) return json({ servers: [] });
+          if (await handleAgentRegister(req, res, getPathSegments(req.url ?? "/"), leadId)) return;
+          if (
+            await handleAgentsRest(
+              req,
+              res,
+              getPathSegments(req.url ?? "/"),
+              parseQueryParams(req.url ?? "/"),
+              leadId,
+            )
+          )
+            return;
+          res.writeHead(404).end();
+        } catch {
+          res.writeHead(500).end();
+        }
+      });
+      const port = await listenOnFreePort(server);
+      const dir = `${process.env.TMPDIR ?? "/tmp"}/runner-profile-boot-${leadId}`;
+      await Bun.$`mkdir -p ${dir}`.quiet();
       try {
-        await handleAgentsRest(
-          req,
-          res,
-          getPathSegments(req.url ?? "/"),
-          parseQueryParams(req.url ?? "/"),
-          agentId,
+        await Bun.write(
+          `${dir}/boot.ts`,
+          `
+        import { mock } from "bun:test";
+        const fs = { ...await import("node:fs/promises") };
+        // A fresh template cache, without touching the host's /workspace.
+        const isolated = (fn) => (...args) => {
+          if (String(args[0]).startsWith("/workspace")) throw new Error("No fixture workspace");
+          return fn(...args);
+        };
+        mock.module("node:fs/promises", () => ({
+          ...fs, stat: isolated(fs.stat), mkdir: isolated(fs.mkdir),
+        }));
+        const request = globalThis.fetch;
+        globalThis.fetch = Object.assign(async (...args) => {
+          const path = new URL(args[0] instanceof Request ? args[0].url : args[0]).pathname;
+          if (${JSON.stringify(outcome)} === "network failure" && path === "/api/agents/${leadId}/profile") {
+            throw new TypeError("fetch failed: " + process.env.AGENT_SWARM_API_KEY);
+          }
+          const response = await request(...args);
+          // This request follows profile initialization and precedes workspace writes.
+          if (new URL(response.url).pathname === "/api/agents/${leadId}/mcp-servers") {
+            console.log("Boot identity phase completed");
+            process.exit(0);
+          }
+          return response;
+        }, { preconnect: request.preconnect });
+        const { runAgent } = await import(${JSON.stringify(new URL("../commands/runner.ts", import.meta.url).pathname)});
+        await runAgent({ role: "lead", defaultPrompt: "/start-leader", metadataType: "lead_metadata" },
+          { logsDir: ${JSON.stringify(`${dir}/logs`)} });
+      `,
+        );
+        const child = expectChildOk(
+          await runChild([process.execPath, `${dir}/boot.ts`], {
+            cwd: dir,
+            env: {
+              ...process.env,
+              AGENT_ID: leadId,
+              AGENT_NAME: "Fresh lead",
+              AGENT_SWARM_API_KEY: secret,
+              MCP_BASE_URL: `http://localhost:${port}`,
+              TEMPLATE_ID: "official/lead",
+              TEMPLATE_REGISTRY_URL: `http://localhost:${port}`,
+              HARNESS_PROVIDER: "claude",
+              CRED_CHECK_DISABLE: "1",
+              ANONYMIZED_TELEMETRY: "false",
+              BUSINESS_USE_API_KEY: "",
+              OTEL_SDK_DISABLED: "true",
+              DESPLEGA_TELEMETRY_ENV: "test",
+              HOME: dir,
+              PATH: dir,
+            },
+          }),
+          "first-boot lead runner",
         );
-      } catch {
-        res.writeHead(500).end();
+        expect(child.stdout).toContain("Boot identity phase completed");
+        const saved = await getAgentById(leadId);
+        expect(saved).toBeTruthy();
+        expect(child.stdout + child.stderr).not.toContain(secret);
+        if (outcome === "saved") {
+          expect(profileStatuses).toEqual([200]);
+          expect(saved?.soulMd).toContain("# SOUL.md — Fresh lead");
+          expect(saved?.identityMd).toContain("# IDENTITY.md — Fresh lead");
+          expect(saved?.claudeMd).toBeTruthy();
+          expect(saved?.toolsMd).toBeTruthy();
+          expect(saved?.heartbeatMd).toBe(template.files.heartbeatMd);
+          expect(child.stdout).toContain("[lead] Generated and saved default identity templates");
+        } else {
+          expect(saved).toEqual(profileBefore);
+          expect(child.stdout).not.toContain("Generated and saved default identity templates");
+          expect(child.stderr).toContain("Could not save generated templates to server");
+          if (outcome === "HTTP 400") {
+            expect(profileStatuses).toEqual([400]);
+            expect(child.stderr).toContain("HTTP 400");
+            expect(child.stderr).toContain("New undated HTTP item");
+          } else {
+            expect(profileStatuses).toEqual([]);
+            expect(child.stderr).toContain("fetch failed");
+          }
+        }
+      } finally {
+        await new Promise<void>((resolve) => server.close(() => resolve()));
+        await Bun.$`rm -rf ${dir}`.quiet();
       }
-    });
-    const port = await listenOnFreePort(server);
-    try {
-      const response = await fetch(`http://localhost:${port}/api/agents/${agentId}/profile`, {
-        method: "PUT",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ heartbeatMd: section("- New undated HTTP item") }),
-      });
-      expect(response.status).toBe(400);
-      expect((await response.json()).error).toContain("New undated HTTP item");
-    } finally {
-      await new Promise<void>((resolve) => server.close(() => resolve()));
-    }
-  });
+    },
+    CHILD_PROCESS_TEST_BUDGET_MS,
+  );
   test("persists edits, dated additions, pin durables, and deletions", async () => {
     const next = section("- **Legacy:** Revised", "- Dated DELETE on 09-30", "📌 Durable");
     expect((await updateAgentProfile(agentId, { heartbeatMd: next }))?.heartbeatMd).toBe(next);

package/src/tests/http-api-integration.test.ts

@@ -308,6 +308,37 @@ describe("Agents", () => {
     expect(rejected.status).toBe(400);
   });
 
+  test("PUT /api/agents/:id/profile — sets, validates and resets slackIcon", async () => {
+    const path = `/api/agents/${ids.workerAgent}/profile`;
+    const owl = { type: "url", url: "https://example.com/owl.png" };
+    const set = await put(path, { body: { slackIcon: owl } });
+    expect(set.status).toBe(200);
+    expect(set.body.slackIcon).toEqual(owl);
+
+    for (const slackIcon of [
+      { type: "emoji", emoji: "owl" },
+      { type: "url", url: "http://example.com/owl.png" },
+      { type: "url", url: "https://user:pass@example.com/owl.png" },
+      { type: "url", url: "https://" },
+    ]) {
+      expect((await put(path, { body: { slackIcon } })).status).toBe(400);
+    }
+
+    const app = await put(path, { body: { slackIcon: { type: "app" } } });
+    expect(app.status).toBe(200);
+    expect(app.body.slackIcon).toEqual({ type: "app" });
+
+    const reset = await put(path, { body: { slackIcon: null } });
+    expect(reset.status).toBe(200);
+    expect(reset.body.slackIcon).toBeNull();
+  });
+
+  test("GET /api/integrations/slack/app-icon — null with Slack off", async () => {
+    const { status, body } = await get("/api/integrations/slack/app-icon");
+    expect(status).toBe(200);
+    expect(body).toEqual({ imageUrl: null });
+  });
+
   test("PUT /api/agents/:id/profile — persists structured filesystem sync rejections", async () => {
     const current = "s".repeat(SOUL_MD_MAX_CHARS);
     const accepted = await put(`/api/agents/${ids.workerAgent}/profile`, {

package/src/tests/human-free-reclassify.test.ts

@@ -625,6 +625,9 @@ describe("human-free flag stays correct when a classifying input changes", () =>
     const third = await task("cycle third", { parentTaskId: second });
     // Nothing in the product writes a cycle, but the rule (a UNION over ids)
     // is defined on one, so the reclassification must stay total on it.
+    // Product code never rewrites parentTaskId, and migration 253 guards it;
+    // this cycle fixture needs the guard off.
+    await getDbClient().run("DROP TRIGGER IF EXISTS session_task_parent_immutable");
     await getDbClient().run("UPDATE agent_tasks SET parentTaskId = ? WHERE id = ?", [third, first]);
     await getDbClient().run("UPDATE agent_tasks SET tags = ? WHERE id = ?", [
       JSON.stringify(["heartbeat"]),
@@ -642,6 +645,9 @@ describe("human-free flag stays correct when a classifying input changes", () =>
   test("a parent cycle longer than one batch stops re-queuing itself", async () => {
     const ring: string[] = [await task("ring 0")];
     for (let i = 1; i < 6; i++) ring.push(await task(`ring ${i}`, { parentTaskId: ring[i - 1] }));
+    // Product code never rewrites parentTaskId, and migration 253 guards it;
+    // this cycle fixture needs the guard off.
+    await getDbClient().run("DROP TRIGGER IF EXISTS session_task_parent_immutable");
     await getDbClient().run("UPDATE agent_tasks SET parentTaskId = ? WHERE id = ?", [
       ring[5],
       ring[0],