@desplega.ai/agent-swarm 2.7.2 → 2.7.3

package/dist/{cli-rs59z1qx.js → cli-07pcqwaj.js}

@@ -2,7 +2,7 @@ import {
   isGrokOpenRouterModel,
   grokTargetProfile,
   ACPAdapter2
-} from "./cli-hq9hd4hp.js";
+} from "./cli-xz6qjdqj.js";
 import {
   getOpenRouterBaseUrl,
   getOpenRouterAttributionHeaders,

package/dist/{cli-6vq3ymqm.js → cli-0tkm519n.js}

@@ -4,7 +4,7 @@ import {
   claimKv2,
   deleteKv2,
   init_db3
-} from "./cli-txr0z97c.js";
+} from "./cli-wmhajw68.js";
 import {
   isEnvFlagEnabled,
   init_env_flag

package/dist/{cli-s7cm1927.js → cli-0xzbk52h.js}

@@ -11,16 +11,16 @@ import {
   init_active_sessions,
   getSteeringMessageById2,
   init_db3
-} from "./cli-txr0z97c.js";
+} from "./cli-wmhajw68.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-jmcf8cnz.js";
+} from "./cli-ja369zab.js";
 import {
   findUserById,
   findUserByExternalId,
   init_users
-} from "./cli-9jn9cj0q.js";
+} from "./cli-v9jk2k63.js";
 import {
   isRbacEnabled,
   can,
@@ -519,7 +519,7 @@ function route(def) {
       try {
         const rawBody = def.body ? await parseBody(req, def.maxBodyBytes) : undefined;
         if (def.session && "bodyTaskIds" in def.session) {
-          const { bodySessionDenial } = await import("./session-access-s4tv0az8.js");
+          const { bodySessionDenial } = await import("./session-access-4yc9htrg.js");
           const denial = await bodySessionDenial(req, def.session.bodyTaskIds(rawBody));
           if (denial) {
             jsonError(res, denial, 403);

package/dist/{cli-g0zc1b40.js → cli-0zae6bs6.js}

@@ -22,7 +22,7 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types2
-} from "./cli-e1p7dqe1.js";
+} from "./cli-4aydmmdy.js";
 import {
   getOpenRouterBaseUrl,
   getOpenRouterAttributionHeaders,
@@ -68,7 +68,7 @@ function addDshStepUsage(acc, step) {
 // src/providers/dsh-adapter.ts
 init_openrouter_base_url();
 init_secret_scrubber();
-var DSH_PACKAGE = "@deepseek-ai/dsh@0.2.1-rc.4";
+var DSH_PACKAGE = "@deepseek-ai/dsh@0.2.2-alpha.2";
 function checkDshCredentials2(env) {
   return env.DEEPSEEK_API_KEY?.trim() || env.OPENROUTER_API_KEY?.trim() ? { ready: true, missing: [], satisfiedBy: "env" } : {
     ready: false,

package/dist/{cli-p8yrsmfn.js → cli-10kjx0dm.js}

@@ -1,7 +1,7 @@
 import {
   getDb2,
   init_db3
-} from "./cli-txr0z97c.js";
+} from "./cli-wmhajw68.js";
 import {
   openAICompatibleProviderIds,
   withRegistryCatalogSections,

package/dist/{cli-7xsq63pe.js → cli-157ykn37.js}

@@ -10,17 +10,17 @@ import {
   init_steering,
   createLogEntry2,
   init_db3
-} from "./cli-txr0z97c.js";
+} from "./cli-wmhajw68.js";
 import {
   ackSlackMessage,
   buildBufferFlushBlocks,
   getAgentDisplayName,
-  getAgentEmoji,
+  getAgentSlackIcon,
   isSlackRenderV2Enabled2,
   ensureSlackThreadTree2,
   registerTreeMessage,
   getSlackApp2
-} from "./cli-9jfty8px.js";
+} from "./cli-ktcdczth.js";
 import {
   createAdditiveBuffer,
   TaskCreationBlockedError,
@@ -30,15 +30,15 @@ import {
   createSlackTaskWithFiles,
   notifySlackFileFailures,
   extractSlackMessageText
-} from "./cli-qy0z3mfj.js";
+} from "./cli-9vttw9nz.js";
 import {
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-942pp3bc.js";
+} from "./cli-54ax65rn.js";
 import {
   findUserByExternalId,
   init_users
-} from "./cli-9jn9cj0q.js";
+} from "./cli-v9jk2k63.js";
 import {
   isSteeringEnabled2,
   init_steering_enabled
@@ -53,7 +53,8 @@ import {
 } from "./cli-242037k3.js";
 
 // src/slack/event-dedup.ts
-var DEFAULT_TTL_MS = 300000;
+var EVENT_DEDUP_TTL_MS = 25 * 60 * 60 * 1000;
+var DEFAULT_TTL_MS = EVENT_DEDUP_TTL_MS;
 var CLEANUP_INTERVAL_MS = 60000;
 function createCache(ttlMs) {
   return {
@@ -274,7 +275,7 @@ ${combinedText}`;
               text: formatSlackSteeringAck(steering.result),
               unfurl_links: false,
               unfurl_media: false,
-              ...agent ? { username: getAgentDisplayName(agent), icon_emoji: getAgentEmoji(agent) } : {}
+              ...agent ? { username: getAgentDisplayName(agent), ...getAgentSlackIcon(agent) } : {}
             });
           } catch (error) {
             console.error("[Slack] Failed to post steering feedback:", error);
@@ -347,7 +348,7 @@ ${description}` : description;
           text: fallbackText,
           unfurl_links: false,
           unfurl_media: false,
-          ...lead ? { username: getAgentDisplayName(lead), icon_emoji: getAgentEmoji(lead) } : {},
+          ...lead ? { username: getAgentDisplayName(lead), ...getAgentSlackIcon(lead) } : {},
           blocks
         });
         if (result.ts && task) {

package/dist/{cli-vjcj9k2p.js → cli-2h0rfmqk.js}

@@ -13,7 +13,7 @@ import {
   claudeMdLineageOf,
   planClaudeMdSync,
   init_profile_sync
-} from "./cli-0wx63vvw.js";
+} from "./cli-9km88w11.js";
 import {
   scrubSecrets,
   init_secret_scrubber

package/dist/{cli-9wasax9f.js → cli-35nzvqaf.js}

@@ -1,7 +1,7 @@
 import {
   init_package,
   package_default
-} from "./cli-atpfk4yd.js";
+} from "./cli-7cwrwb5x.js";
 
 // src/commands/shared/client-config.ts
 init_package();

package/dist/{cli-e1p7dqe1.js → cli-4aydmmdy.js}

@@ -6,6 +6,7 @@ import {
   exports_iso,
   string2,
   uuid,
+  url,
   number2,
   boolean,
   _null,
@@ -23,7 +24,7 @@ import {
 import {
   MAX_PROFILE_FILE_LENGTH,
   init_constants2
-} from "./cli-3cywb44q.js";
+} from "./cli-77eq8txs.js";
 import {
   __esm
 } from "./cli-242037k3.js";
@@ -1650,7 +1651,7 @@ function checkExtensionInstallSource(body, ctx) {
     ctx.addIssue({ code: "custom", path: ["files"], message: "files is required with manifest" });
   }
 }
-var AssetKeySchema, AssetEntityTypeSchema, AssetProviderRefSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, RoutingReasonSchema, RoutingSourceSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SessionShareAccessSchema, SessionAccessSchema, SessionOwnerSchema, SessionSharesSchema, SessionSharesUpdateSchema, SteerModeSchema, SteeringStatusSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, TaskAttachmentKindSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY = "_agentSwarmGeneratedBy", attachmentCapabilitiesSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, RbacRoleSchema, UserRbacRolesSchema, UserCommsPrefsSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentCredStatusKeyResultSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AgentOpencodeGoStatusSchema, AcpSessionConfigSelectValueSchema, AcpSessionConfigSelectGroupSchema, AcpSessionConfigOptionSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, REPO_GUIDELINES_MAX_ENTRIES = 50, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeInstanceStatusSchema, RuntimeProviderKindSchema, DeliveryModeSchema, PoolLifecycleSchema, RuntimeResourcesSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, SUPERSEDED_WORKFLOW_TASK_REASON = "superseded_workflow_task", ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, WebhookVerificationSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WorkflowRunStepSlimSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptExecutorNameSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionNameSchema, SemverSchema, ExtensionBundlePathSchema, ExtensionAssetNameSchema, ExtensionScriptAssetSchema, ExtensionScheduleAssetSchema, ExtensionWorkflowAssetSchema, ExtensionSkillAssetSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionStatusSchema, ExtensionSchema, ExtensionFileSchema, ExtensionVersionSchema, ExtensionRunSchema, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
+var AssetKeySchema, AssetEntityTypeSchema, AssetProviderRefSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, OPEN_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, RoutingReasonSchema, RoutingSourceSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SessionShareAccessSchema, SessionAccessSchema, SessionOwnerSchema, SessionSharesSchema, SessionSharesUpdateSchema, SteerModeSchema, SteeringStatusSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, TaskAttachmentKindSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY = "_agentSwarmGeneratedBy", attachmentCapabilitiesSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, RbacRoleSchema, UserRbacRolesSchema, UserCommsPrefsSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSlackIconSchema, AgentSchema, AgentCredStatusKeyResultSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AgentOpencodeGoStatusSchema, AcpSessionConfigSelectValueSchema, AcpSessionConfigSelectGroupSchema, AcpSessionConfigOptionSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, REPO_GUIDELINES_MAX_ENTRIES = 50, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeInstanceStatusSchema, RuntimeProviderKindSchema, DeliveryModeSchema, PoolLifecycleSchema, RuntimeResourcesSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, SUPERSEDED_WORKFLOW_TASK_REASON = "superseded_workflow_task", ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, WebhookVerificationSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WorkflowRunStepSlimSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptExecutorNameSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionNameSchema, SemverSchema, ExtensionBundlePathSchema, ExtensionAssetNameSchema, ExtensionScriptAssetSchema, ExtensionScheduleAssetSchema, ExtensionWorkflowAssetSchema, ExtensionSkillAssetSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionStatusSchema, ExtensionSchema, ExtensionFileSchema, ExtensionVersionSchema, ExtensionRunSchema, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
 var init_types2 = __esm(() => {
   init_key();
   init_bundle_path();
@@ -1795,6 +1796,7 @@ var init_types2 = __esm(() => {
     "superseded"
   ]);
   TERMINAL_TASK_STATUSES = ["completed", "failed", "cancelled", "superseded"];
+  OPEN_TASK_STATUSES = AgentTaskStatusSchema.options.filter((status) => !isTerminalTaskStatus(status));
   InboxMessageStatusSchema = _enum2([
     "unread",
     "processing",
@@ -2241,6 +2243,24 @@ var init_types2 = __esm(() => {
       color: string2().regex(/^#[0-9a-fA-F]{6}$/).optional()
     })
   ]);
+  AgentSlackIconSchema = discriminatedUnion("type", [
+    object2({
+      type: literal2("emoji"),
+      emoji: string2().max(102).regex(/^:[a-z0-9_+'-]+:$/)
+    }),
+    object2({
+      type: literal2("url"),
+      url: url({ protocol: /^https$/ }).max(2048).refine((value) => {
+        try {
+          const parsed = new URL(value);
+          return !parsed.username && !parsed.password;
+        } catch {
+          return false;
+        }
+      }, "URL must be valid and contain no credentials")
+    }),
+    object2({ type: literal2("app") })
+  ]).openapi("AgentSlackIcon");
   AgentSchema = object2({
     id: string2(),
     name: string2().min(1),
@@ -2266,6 +2286,7 @@ var init_types2 = __esm(() => {
     credentialMissing: array2(string2()).nullable().optional(),
     credStatus: lazy(() => AgentCredStatusSchema).nullable().optional(),
     avatar: lazy(() => AgentAvatarSchema).nullable().optional(),
+    slackIcon: lazy(() => AgentSlackIconSchema).nullable().optional(),
     createdAt: exports_iso.datetime(),
     lastUpdatedAt: exports_iso.datetime()
   }).openapi("Agent");
@@ -3688,4 +3709,4 @@ var init_types2 = __esm(() => {
   }).openapi("KvEntry");
 });
 
-export { ASSET_KEY_MAX_LENGTH, normalizeAssetKey, defaultAssetKey, keyPrefixRange, SESSION_LEAF_KINDS, sessionGroupKey, parseAssetKey, isCanonicalAssetKey, canWriteAssetKey, init_key, isSafeBundlePath, init_bundle_path, $OpenAPIRegistry, $OpenApiGeneratorV31, init_dist, init_zod_openapi, AssetKeySchema, AssetEntityTypeSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, DEFAULT_MODEL_TIER_MAP, parseModelTier, splitLegacyModelAlias, parseWorkerModelTierOverrides, resolveTaskModelSelection, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, isTerminalTaskStatus, AgentTaskSourceSchema, RoutingReasonSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SessionAccessSchema, SessionOwnerSchema, SessionSharesSchema, SessionSharesUpdateSchema, SteerModeSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, RbacRoleSchema, UserRbacRolesSchema, UserCommsPrefsSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentLatestModelSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, VersionableFieldSchema, ChannelTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeProviderKindSchema, DeliveryModeSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, SUPERSEDED_WORKFLOW_TASK_REASON, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSchema, PageVersionSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepSchema, WorkflowRunStepSlimSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptExecutorNameSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionSchema, ExtensionVersionSchema, ExtensionRunSchema, checkExtensionInstallSource, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types2 };
+export { ASSET_KEY_MAX_LENGTH, normalizeAssetKey, defaultAssetKey, keyPrefixRange, SESSION_LEAF_KINDS, sessionGroupKey, parseAssetKey, isCanonicalAssetKey, canWriteAssetKey, init_key, isSafeBundlePath, init_bundle_path, $OpenAPIRegistry, $OpenApiGeneratorV31, init_dist, init_zod_openapi, AssetKeySchema, AssetEntityTypeSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, DEFAULT_MODEL_TIER_MAP, parseModelTier, splitLegacyModelAlias, parseWorkerModelTierOverrides, resolveTaskModelSelection, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, isTerminalTaskStatus, OPEN_TASK_STATUSES, AgentTaskSourceSchema, RoutingReasonSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SessionAccessSchema, SessionOwnerSchema, SessionSharesSchema, SessionSharesUpdateSchema, SteerModeSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, RbacRoleSchema, UserRbacRolesSchema, UserCommsPrefsSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSlackIconSchema, AgentSchema, AgentLatestModelSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, VersionableFieldSchema, ChannelTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeProviderKindSchema, DeliveryModeSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, SUPERSEDED_WORKFLOW_TASK_REASON, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSchema, PageVersionSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepSchema, WorkflowRunStepSlimSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptExecutorNameSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionSchema, ExtensionVersionSchema, ExtensionRunSchema, checkExtensionInstallSource, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types2 };

package/dist/{cli-942pp3bc.js → cli-54ax65rn.js}

@@ -2,17 +2,17 @@ import {
   getKv2,
   upsertKv2,
   init_db3
-} from "./cli-txr0z97c.js";
+} from "./cli-wmhajw68.js";
 import {
   resolveIdentity,
   recordUnmappedIdentity
-} from "./cli-qy0z3mfj.js";
+} from "./cli-9vttw9nz.js";
 import {
   findUserByExternalId,
   findOrCreateUserByEmail,
   linkIdentity,
   init_users
-} from "./cli-9jn9cj0q.js";
+} from "./cli-v9jk2k63.js";
 
 // src/slack/enrich.ts
 init_db3();

package/dist/{cli-10cp92df.js → cli-5ke7gxwr.js}

@@ -41,11 +41,11 @@ import {
   getResolvedConfig2,
   getMcpServerById2,
   init_db3
-} from "./cli-txr0z97c.js";
+} from "./cli-wmhajw68.js";
 import {
   oauthAppRowToProviderConfig,
   ensureAuthorizationTokenOrThrow
-} from "./cli-t3npd8hm.js";
+} from "./cli-ghfhn1qc.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -62,7 +62,7 @@ import {
   mintScriptRunToken,
   revokeSessionToken,
   init_users
-} from "./cli-9jn9cj0q.js";
+} from "./cli-v9jk2k63.js";
 import {
   isInvalidClientError,
   publicEndpointSsrfOptions,
@@ -70,11 +70,11 @@ import {
   refreshMcpToken,
   computeExpiresAt,
   init_mcp_wrapper
-} from "./cli-2cj8fqv1.js";
+} from "./cli-kjcdzea8.js";
 import {
   defaultAssetKey,
   init_key
-} from "./cli-e1p7dqe1.js";
+} from "./cli-4aydmmdy.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -95,7 +95,7 @@ import {
 import {
   getMcpBaseUrl,
   init_constants2
-} from "./cli-3cywb44q.js";
+} from "./cli-77eq8txs.js";
 import {
   isEnvFlagEnabled,
   init_env_flag

package/dist/{cli-femw4q81.js → cli-6151a7dr.js}

@@ -4,12 +4,12 @@ import {
 import {
   publicEndpointSsrfOptions,
   init_mcp_wrapper
-} from "./cli-2cj8fqv1.js";
+} from "./cli-kjcdzea8.js";
 import {
   normalizeOrgWebsite,
   init_org_website,
   assertUrlSafe
-} from "./cli-txr0z97c.js";
+} from "./cli-wmhajw68.js";
 import {
   getRouteProvider,
   createScopedFetch,

package/dist/{cli-3cywb44q.js → cli-77eq8txs.js}

@@ -1,4 +1,5 @@
 import {
+  parseEnvFlag,
   isEnvFlagEnabled,
   init_env_flag
 } from "./cli-cebvbc9t.js";
@@ -68,9 +69,90 @@ function buildAgentFsLiveUrl(opts) {
   const route = agentFsFileRoute(opts);
   return route ? `${getAgentFsLiveUrl()}/file/~/${route}` : null;
 }
-function isCombEnabled() {
+function isPrivateIpv4(a, b) {
+  return a === 10 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 169 && b === 254;
+}
+function parseIpv6(addr) {
+  if (addr.includes("."))
+    return null;
+  const halves = addr.split("::");
+  if (halves.length > 2)
+    return null;
+  const toGroups = (part) => {
+    if (!part)
+      return [];
+    const groups = part.split(":").map((g) => /^[0-9a-f]{1,4}$/.test(g) ? Number.parseInt(g, 16) : Number.NaN);
+    return groups.some(Number.isNaN) ? null : groups;
+  };
+  const head = toGroups(halves[0] ?? "");
+  const tail = toGroups(halves[1] ?? "");
+  if (!head || !tail)
+    return null;
+  if (halves.length === 1)
+    return head.length === 8 ? head : null;
+  const missing = 8 - head.length - tail.length;
+  return missing < 1 ? null : [...head, ...new Array(missing).fill(0), ...tail];
+}
+function isBrowserReachableUrl(value) {
+  let host;
+  try {
+    host = new URL(value).hostname.toLowerCase().replace(/\.$/, "");
+  } catch {
+    return false;
+  }
+  if (!host)
+    return false;
+  if (host === "localhost" || host.endsWith(".localhost"))
+    return true;
+  if (host.startsWith("[")) {
+    const parsed = parseIpv6(host.slice(1, -1));
+    if (!parsed)
+      return false;
+    const g = (i) => parsed[i] ?? 0;
+    if (parsed.slice(0, 7).every((x) => x === 0) && g(7) === 1)
+      return true;
+    if (parsed.every((x) => x === 0) || (g(0) & 65280) === 65280)
+      return false;
+    if ((g(0) & 65024) === 64512 || (g(0) & 65472) === 65152)
+      return false;
+    if (parsed.slice(0, 5).every((x) => x === 0) && g(5) === 65535) {
+      const a = g(6) >> 8;
+      return a === 127 || !isPrivateIpv4(a, g(6) & 255);
+    }
+    return true;
+  }
+  const octets = host.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+  if (octets) {
+    const [a, b] = [Number(octets[1]), Number(octets[2])];
+    return a === 127 || !isPrivateIpv4(a, b);
+  }
+  if (!host.includes("."))
+    return false;
+  return !(host.endsWith(".internal") || host.endsWith(".svc") || host.endsWith(".cluster.local"));
+}
+function getCombState() {
   const apiUrl = process.env.AGENT_FS_API_URL?.trim().replace(/\/+$/, "");
-  return isEnvFlagEnabled("COMB_ENABLED", false) && Boolean(apiUrl);
+  const raw = process.env.COMB_ENABLED;
+  const explicit = parseEnvFlag(raw, true) === parseEnvFlag(raw, false);
+  if (explicit && !isEnvFlagEnabled("COMB_ENABLED", false)) {
+    return { enabled: false, explicit, reason: "COMB_ENABLED is false." };
+  }
+  if (!apiUrl)
+    return { enabled: false, explicit, reason: "AGENT_FS_API_URL is not set." };
+  if (explicit)
+    return { enabled: true, explicit, reason: null };
+  if (process.env.AGENT_FS_PUBLIC_URL?.trim())
+    return { enabled: true, explicit, reason: null };
+  const proxy = isAgentFsProxyEnabled();
+  const browserUrl = proxy ? getPublicMcpBaseUrl() : apiUrl;
+  return isBrowserReachableUrl(browserUrl) ? { enabled: true, explicit, reason: null } : {
+    enabled: false,
+    explicit,
+    reason: proxy ? `AGENT_FS_PROXY is on, but the API address ${browserUrl} is not reachable from a browser. Set PUBLIC_MCP_BASE_URL to the public API URL, or set COMB_ENABLED=true to force Files on.` : `AGENT_FS_API_URL (${apiUrl}) is not reachable from a browser. Set AGENT_FS_PUBLIC_URL or AGENT_FS_PROXY=true, or set COMB_ENABLED=true to force Files on.`
+  };
+}
+function isCombEnabled() {
+  return getCombState().enabled;
 }
 function isAgentFsProxyEnabled() {
   return isEnvFlagEnabled("AGENT_FS_PROXY", false);
@@ -88,4 +170,4 @@ var init_constants2 = __esm(() => {
   DOT_SEGMENT_RE = /^(?:\.|%2e){1,2}$/i;
 });
 
-export { MAX_PROFILE_FILE_LENGTH, DEFAULT_APP_URL, getConfiguredAppUrls, getAppUrl, getMcpBaseUrl, getPublicMcpBaseUrl, getAgentFsLiveUrl, resolveAgentFsLinkBase, getAgentFsDefaultOrgId, getAgentFsDefaultDriveId, agentFsFileRoute, buildAgentFsLiveUrl, isCombEnabled, isAgentFsProxyEnabled, buildCombFileUrl, init_constants2 };
+export { MAX_PROFILE_FILE_LENGTH, DEFAULT_APP_URL, getConfiguredAppUrls, getAppUrl, getMcpBaseUrl, getPublicMcpBaseUrl, getAgentFsLiveUrl, resolveAgentFsLinkBase, getAgentFsDefaultOrgId, getAgentFsDefaultDriveId, agentFsFileRoute, buildAgentFsLiveUrl, getCombState, isCombEnabled, isAgentFsProxyEnabled, buildCombFileUrl, init_constants2 };

package/dist/{cli-atpfk4yd.js → cli-7cwrwb5x.js}

@@ -7,7 +7,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@desplega.ai/agent-swarm",
-    version: "2.7.2",
+    version: "2.7.3",
     description: "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
     keywords: [
       "agent-swarm.dev",
@@ -210,7 +210,7 @@ var init_package = __esm(() => {
     dependencies: {
       "@agentclientprotocol/sdk": "2.0.2",
       "@ai-sdk/openai": "^3.0.41",
-      "@anthropic-ai/claude-agent-sdk": "0.3.311",
+      "@anthropic-ai/claude-agent-sdk": "0.3.312",
       "@anthropic-ai/sdk": "^1.3.0",
       "@asteasolutions/zod-to-openapi": "^8.0.0",
       "@aws-sdk/client-bedrock": "3.1048.0",
@@ -218,8 +218,8 @@ var init_package = __esm(() => {
       "@chat-adapter/slack": "4.41.1",
       "@chat-adapter/teams": "4.41.1",
       "@chat-adapter/telegram": "4.41.1",
-      "@cursor/sdk": "1.1.0",
-      "@desplega.ai/agent-fs-just-bash": "0.18.11",
+      "@cursor/sdk": "1.2.0",
+      "@desplega.ai/agent-fs-just-bash": "0.18.12",
       "@desplega.ai/business-use": "^0.4.2",
       "@earendil-works/pi-agent-core": "^1.4.0",
       "@earendil-works/pi-ai": "^1.4.0",
@@ -228,7 +228,7 @@ var init_package = __esm(() => {
       "@jitl/quickjs-singlefile-mjs-release-sync": "0.32.0",
       "@linear/sdk": "^77.0.0",
       "@modelcontextprotocol/sdk": "1.32.1",
-      "@openai/codex": "0.164.0",
+      "@openai/codex": "0.165.0",
       "@openfort/openfort-node": "^0.9.1",
       "@opentelemetry/api": "^1.9.1",
       "@opentelemetry/api-logs": "^0.218.0",