@desplega.ai/agent-swarm 2.7.5 → 2.7.7

package/dist/{cli-mry0qzym.js → cli-ddaanqkd.js}

@@ -13,19 +13,20 @@ import {
   init_swarm_config_guard,
   registerStoredSecret,
   init_secret_registry,
+  getSwarmConfigs2,
   upsertSwarmConfig2,
   init_db4
-} from "./cli-1ayk1eas.js";
+} from "./cli-wk5yrfwd.js";
 import {
   createRuntimeProvider,
   init_runtime_providers
-} from "./cli-xbkdm710.js";
+} from "./cli-yndmfxb3.js";
 import {
   closeSessionTokenConnections,
   init_session_token_connections,
   insertSessionToken,
   init_users
-} from "./cli-bhjt02p8.js";
+} from "./cli-5jnhv72d.js";
 import {
   RuntimeControllerCreateSchema,
   RuntimeControllerUpdateSchema,
@@ -33,7 +34,11 @@ import {
   RuntimePoolUpdateSchema,
   RuntimePoolCreateAgentSchema,
   init_types4
-} from "./cli-7wspm5gm.js";
+} from "./cli-n6bv12jn.js";
+import {
+  poolCacheKey,
+  init_types5
+} from "./cli-0agcv1v5.js";
 import {
   scrubSecrets,
   registerVolatileSecret,
@@ -44,6 +49,79 @@ import {
   __esm
 } from "./cli-242037k3.js";
 
+// src/be/runtime-pools/cache-cleanup.ts
+async function getPoolCache(poolId) {
+  const row = await getDbClient2().get("SELECT cache, json_extract(placements, '$[0]') AS controllerId FROM runtime_pools WHERE id = ?", [poolId]);
+  if (!row?.cache)
+    return null;
+  const cache = JSON.parse(row.cache);
+  return {
+    key: cache.key ?? poolCacheKey(poolId),
+    mountPath: cache.mountPath,
+    controllerId: row.controllerId
+  };
+}
+async function queuePoolCacheRelease(pool, actor) {
+  if (!pool.cache)
+    return;
+  const owner = (await getSwarmConfigs2({ scope: "global", key: "runtime_owner_id" }))[0];
+  if (!owner)
+    return;
+  const cache = await getPoolCache(pool.id);
+  const runtimes = await getDbClient2().query(`SELECT id FROM runtime_instances WHERE pool_id = ?
+     AND (controller_id = ? OR controller_id IS NULL) AND status != 'offline'`, [pool.id, pool.placements[0]]);
+  await getDbClient2().run(`INSERT INTO runtime_cache_releases
+      (id, pool_id, controller_id, owner_id, cache_key, runtime_ids, created_by, updated_by)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?) ON CONFLICT(controller_id, owner_id, cache_key) DO NOTHING`, [
+    crypto.randomUUID(),
+    pool.id,
+    pool.placements[0],
+    owner.value,
+    cache.key,
+    JSON.stringify(runtimes.map((r) => r.id)),
+    actor,
+    actor
+  ]);
+}
+async function reconcileCacheReleases(commands, signal, now) {
+  const jobs = await getDbClient2().query(`SELECT id, pool_id AS poolId, controller_id AS controllerId, owner_id AS ownerId,
+     cache_key AS key FROM runtime_cache_releases ORDER BY created_at`);
+  for (const job of jobs) {
+    if (signal.aborted)
+      return;
+    const claimed = now ?? new Date;
+    const claimedAt = claimed.toISOString();
+    const reserved = await getDbClient2().run(`UPDATE runtime_cache_releases SET state = 'deleting', updated_at = ?
+       WHERE id = ? AND (state = 'pending' OR updated_at < ?) AND NOT EXISTS (
+         SELECT 1 FROM runtime_instances WHERE status != 'offline'
+         AND id IN (SELECT value FROM json_each(runtime_cache_releases.runtime_ids))
+       )`, [claimedAt, job.id, new Date(claimed.getTime() - RELEASE_LEASE_MS).toISOString()]);
+    if (!reserved.changes)
+      continue;
+    try {
+      signal.throwIfAborted();
+      const controller = await commands(job.controllerId);
+      if (!controller.releaseCache)
+        throw new Error("Controller cannot release caches; upgrade it before cleanup");
+      await controller.releaseCache({ key: job.key, poolId: job.poolId, ownerId: job.ownerId });
+      await getDbClient2().run("DELETE FROM runtime_cache_releases WHERE id = ? AND state = 'deleting' AND updated_at = ?", [job.id, claimedAt]);
+    } catch (error) {
+      const message = scrubSecrets(String(error));
+      await getDbClient2().run(`UPDATE runtime_cache_releases SET state = 'pending', last_error = ?, updated_at = ?
+         WHERE id = ? AND state = 'deleting' AND updated_at = ?`, [message, new Date().toISOString(), job.id, claimedAt]);
+      if (!signal.aborted)
+        console.error("[runtime-pools] Cache cleanup deferred:", message);
+    }
+  }
+}
+var RELEASE_LEASE_MS;
+var init_cache_cleanup = __esm(() => {
+  init_types5();
+  init_secret_scrubber();
+  init_db4();
+  RELEASE_LEASE_MS = 5 * 60000;
+});
+
 // src/be/runtime-pools/errors.ts
 var RuntimePoolError2;
 var init_errors = __esm(() => {
@@ -114,11 +192,13 @@ function rowToController(row) {
   };
 }
 function rowToPool(row) {
+  const cache = row.cache ? JSON.parse(row.cache) : null;
   return {
     ...row,
     placements: JSON.parse(row.placements),
     env: JSON.parse(row.env),
     resources: row.resources ? JSON.parse(row.resources) : null,
+    cache: cache ? { mountPath: cache.mountPath } : null,
     enabled: row.enabled === 1
   };
 }
@@ -157,6 +237,15 @@ async function getRuntimeControllerTarget2(controller, env = process.env) {
     E2B_MAX_CONTINUOUS_SEC: env.E2B_MAX_CONTINUOUS_SEC,
     RUNTIME_WORKER_API_URL: env.RUNTIME_WORKER_API_URL,
     PUBLIC_MCP_BASE_URL: env.PUBLIC_MCP_BASE_URL,
+    ...controller.kind === "boxd" && controller.placement === "builtin" ? {
+      BOXD_ORG: env.BOXD_ORG,
+      BOXD_BASE_URL: env.BOXD_BASE_URL,
+      BOXD_SNAPSHOT: env.BOXD_SNAPSHOT,
+      BOXD_DELETE_AFTER_SEC: env.BOXD_DELETE_AFTER_SEC,
+      BOXD_START_TIMEOUT_SEC: env.BOXD_START_TIMEOUT_SEC,
+      BOXD_STATUS_TIMEOUT_SEC: env.BOXD_STATUS_TIMEOUT_SEC,
+      BOXD_TEARDOWN_TIMEOUT_SEC: env.BOXD_TEARDOWN_TIMEOUT_SEC
+    } : {},
     ...controller.config,
     ...secrets
   };
@@ -232,11 +321,18 @@ async function updateRuntimeController2(id, input, actor = null) {
     if (await tx.get("SELECT id FROM runtime_controllers WHERE name = ? AND id != ?", [data.name, id]))
       throw new RuntimePoolError2("Controller name already exists", 409);
     const pools = await listRuntimePools2();
+    const oldConfig = JSON.parse(row.config);
+    const configChanged = Object.keys(data.config).length !== Object.keys(oldConfig).length || Object.entries(data.config).some(([key, value]) => oldConfig[key] !== value);
+    const secrets = patch.secretConfig !== undefined ? controllerSecrets(row) : {};
+    const secretsChanged = Object.entries(patch.secretConfig ?? {}).some(([key, value]) => value === null ? key in secrets : secrets[key] !== value);
+    if ((data.kind !== row.kind || data.placement !== row.placement || configChanged || secretsChanged) && (pools.some((pool) => pool.cache && pool.placements.includes(id)) || await tx.get("SELECT id FROM runtime_cache_releases WHERE controller_id = ? LIMIT 1", [
+      id
+    ])))
+      throw new RuntimePoolError2("Disable pool caches and wait for cleanup before changing controller configuration or placement", 409);
     if (pools.some((pool) => pool.placements.includes(id) && pool.kind !== data.kind))
       throw new RuntimePoolError2("Pool kind must equal controller kind");
     let encrypted = row.secretConfig;
     if (patch.secretConfig !== undefined) {
-      const secrets = controllerSecrets(row);
       for (const [key, value] of Object.entries(patch.secretConfig)) {
         if (value === null)
           delete secrets[key];
@@ -268,6 +364,8 @@ async function deleteRuntimeController2(id) {
       throw new RuntimePoolError2("Controller not found", 404);
     if ((await listRuntimePools2()).some((pool) => pool.placements.includes(id)))
       throw new RuntimePoolError2("Controller has runtime pools", 409);
+    if (await tx.get("SELECT id FROM runtime_cache_releases WHERE controller_id = ? LIMIT 1", [id]))
+      throw new RuntimePoolError2("Controller has pending cache cleanup", 409);
     await revokeControllerTokens(id);
     await tx.run("DELETE FROM runtime_controllers WHERE id = ?", [id]);
   });
@@ -281,6 +379,9 @@ async function getRuntimePool2(id) {
 }
 async function validatePool(data) {
   supportedKind(data.kind);
+  if (data.cache && !(await createRuntimeProvider(data.kind)).traits.persistentCache) {
+    throw new RuntimePoolError2(`${data.kind} does not support persistent pool caches`);
+  }
   const controller = await getRuntimeController2(data.placements[0]);
   if (!controller)
     throw new RuntimePoolError2("Controller not found");
@@ -301,7 +402,7 @@ async function createRuntimePool2(input, actor = null, id = crypto.randomUUID())
     await validatePool(data);
     if (await tx.get("SELECT id FROM runtime_pools WHERE name = ? OR id = ?", [data.name, id]))
       throw new RuntimePoolError2("Pool already exists", 409);
-    await tx.run(`INSERT INTO runtime_pools (id, name, kind, placements, image, lifecycle, idle_minutes, slots_per_runtime, max_runtimes, min_runtimes, delivery, env, resources, ttl_sec, enabled, created_by, updated_by) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+    await tx.run(`INSERT INTO runtime_pools (id, name, kind, placements, image, lifecycle, idle_minutes, slots_per_runtime, max_runtimes, min_runtimes, delivery, env, resources, cache, ttl_sec, enabled, created_by, updated_by) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
       id,
       data.name,
       data.kind,
@@ -315,6 +416,7 @@ async function createRuntimePool2(input, actor = null, id = crypto.randomUUID())
       data.delivery,
       JSON.stringify(data.env),
       data.resources ? JSON.stringify(data.resources) : null,
+      data.cache ? JSON.stringify({ ...data.cache, key: poolCacheKey(id, crypto.randomUUID()) }) : null,
       data.ttlSec,
       Number(data.enabled),
       actor,
@@ -335,7 +437,13 @@ async function updateRuntimePool2(id, input, actor = null) {
     await validatePool(data);
     if (await tx.get("SELECT id FROM runtime_pools WHERE name = ? AND id != ?", [data.name, id]))
       throw new RuntimePoolError2("Pool name already exists", 409);
-    await tx.run(`UPDATE runtime_pools SET name = ?, kind = ?, placements = ?, image = ?, resolved_image = ?, lifecycle = ?, idle_minutes = ?, slots_per_runtime = ?, max_runtimes = ?, min_runtimes = ?, delivery = ?, env = ?, resources = ?, ttl_sec = ?, enabled = ?, updated_by = COALESCE(?, updated_by), updated_at = ? WHERE id = ?`, [
+    const cache = data.cache ? {
+      ...data.cache,
+      key: existing.cache && data.placements[0] === existing.placements[0] ? (await getPoolCache(id)).key : poolCacheKey(id, crypto.randomUUID())
+    } : null;
+    if (existing.cache && (!data.cache || data.placements[0] !== existing.placements[0]))
+      await queuePoolCacheRelease(existing, actor);
+    await tx.run(`UPDATE runtime_pools SET name = ?, kind = ?, placements = ?, image = ?, resolved_image = ?, lifecycle = ?, idle_minutes = ?, slots_per_runtime = ?, max_runtimes = ?, min_runtimes = ?, delivery = ?, env = ?, resources = ?, cache = ?, ttl_sec = ?, enabled = ?, updated_by = COALESCE(?, updated_by), updated_at = ? WHERE id = ?`, [
       data.name,
       data.kind,
       JSON.stringify(data.placements),
@@ -349,6 +457,7 @@ async function updateRuntimePool2(id, input, actor = null) {
       data.delivery,
       JSON.stringify(data.env),
       data.resources ? JSON.stringify(data.resources) : null,
+      cache ? JSON.stringify(cache) : null,
       data.ttlSec,
       Number(data.enabled),
       actor,
@@ -360,7 +469,8 @@ async function updateRuntimePool2(id, input, actor = null) {
 }
 async function deleteRuntimePool2(id, force = false, actor = null) {
   await getDbClient2().transaction(async (tx) => {
-    if (!await getRuntimePool2(id))
+    const pool = await getRuntimePool2(id);
+    if (!pool)
       throw new RuntimePoolError2("Pool not found", 404);
     if (await tx.get("SELECT id FROM runtime_instances WHERE pool_id = ? AND status != 'offline' LIMIT 1", [id]))
       throw new RuntimePoolError2("Pool has non-offline runtimes. Scale to zero or disable the pool and wait for teardown before deletion.", 409);
@@ -369,6 +479,7 @@ async function deleteRuntimePool2(id, force = false, actor = null) {
     if (force) {
       await tx.run("UPDATE agents SET runtime_pool_id = NULL, lastUpdatedAt = ?, updated_by = COALESCE(?, updated_by) WHERE runtime_pool_id = ?", [new Date().toISOString(), actor, id]);
     }
+    await queuePoolCacheRelease(pool, actor);
     await tx.run("DELETE FROM runtime_pools WHERE id = ?", [id]);
   });
 }
@@ -450,21 +561,23 @@ var controllerColumns = `id, name, kind, placement, config, secret_config AS sec
   status, last_seen_at AS lastSeenAt, last_error AS lastError, last_error_at AS lastErrorAt,
   created_by AS createdBy, updated_by AS updatedBy, created_at AS createdAt, updated_at AS updatedAt`, poolColumns = `id, name, kind, placements, image, lifecycle, idle_minutes AS idleMinutes,
   slots_per_runtime AS slotsPerRuntime, max_runtimes AS maxRuntimes, min_runtimes AS minRuntimes,
-  delivery, env, resources, ttl_sec AS ttlSec, resolved_image AS resolvedImage, enabled,
+  delivery, env, resources, cache, ttl_sec AS ttlSec, resolved_image AS resolvedImage, enabled,
   consecutive_failures AS consecutiveFailures, circuit_open_until AS circuitOpenUntil,
   last_error AS lastError, last_error_at AS lastErrorAt, created_by AS createdBy,
   updated_by AS updatedBy, created_at AS createdAt, updated_at AS updatedAt`;
 var init_db2 = __esm(() => {
   init_runtime_providers();
+  init_types5();
   init_types4();
   init_secret_scrubber();
   init_crypto();
   init_db4();
   init_agents();
   init_secret_registry();
+  init_cache_cleanup();
   init_errors();
   init_tokens();
   init_errors();
 });
 
-export { RuntimePoolError2, mintControllerToken, init_tokens, listRuntimeControllers2, getRuntimeController2, getRuntimeControllerTarget2, checkE2bControllerConfig2, createRuntimeController2, updateRuntimeController2, deleteRuntimeController2, listRuntimePools2, getRuntimePool2, createRuntimePool2, updateRuntimePool2, deleteRuntimePool2, bindAgentToPool2, listAgentsForPool2, getPoolForAgent2, resolvePoolDelivery2, createPoolAgent2, loadRuntimeControllerSecrets2, init_db2 };
+export { getPoolCache, reconcileCacheReleases, init_cache_cleanup, RuntimePoolError2, mintControllerToken, init_tokens, listRuntimeControllers2, getRuntimeController2, getRuntimeControllerTarget2, checkE2bControllerConfig2, createRuntimeController2, updateRuntimeController2, deleteRuntimeController2, listRuntimePools2, getRuntimePool2, createRuntimePool2, updateRuntimePool2, deleteRuntimePool2, bindAgentToPool2, listAgentsForPool2, getPoolForAgent2, resolvePoolDelivery2, createPoolAgent2, loadRuntimeControllerSecrets2, init_db2 };

package/dist/{cli-0gey5fzy.js → cli-e0kmphd6.js}

@@ -9,7 +9,7 @@ import {
   loadMcpConfig,
   addMcpServerConfig,
   removeMcpServerConfig
-} from "./cli-vqypxzh4.js";
+} from "./cli-6g0hb4cp.js";
 import {
   McpOAuthCredentialStore2,
   McpSignInCancelledError2,
@@ -17,7 +17,7 @@ import {
   McpServerLog2,
   createDefaultTransport2,
   McpServerConnection2
-} from "./cli-fqzx7gwa.js";
+} from "./cli-5zx699j9.js";
 
 // node_modules/@earendil-works/pi-coding-agent/dist/extensions/mcp/cli.js
 import { existsSync } from "node:fs";

package/dist/{cli-zh3fp8v2.js → cli-e46hg0xw.js}

@@ -4,7 +4,7 @@ import {
   fxSessionExists,
   fxTargetProfile,
   ACPAdapter2
-} from "./cli-rm6hqj3z.js";
+} from "./cli-fyt2g4wd.js";
 import {
   getKnownContextWindowSize,
   init_context_window

package/dist/{cli-jm2vfpfd.js → cli-e5bzrn01.js}

@@ -13,7 +13,7 @@ import {
   claudeMdLineageOf,
   planClaudeMdSync,
   init_profile_sync
-} from "./cli-a7v854rf.js";
+} from "./cli-tgrv9cjx.js";
 import {
   scrubSecrets,
   init_secret_scrubber