@desplega.ai/agent-swarm 1.111.0 → 1.113.0

package/dist/{cli-dza5039b.js → cli-4xyj9jtq.js}

@@ -14,13 +14,13 @@ import {
   getOAuthApp,
   getOAuthTokens,
   upsertOAuthApp
-} from "./cli-3cm8ar1c.js";
+} from "./cli-bgef578c.js";
 import {
   startPricingRefreshLoop
-} from "./cli-ee3fkebs.js";
+} from "./cli-36ymmpmp.js";
 import {
   seedPricingFromModelsDev
-} from "./cli-6tfm5fr1.js";
+} from "./cli-tbw13sx8.js";
 import {
   createTrackerAgentMapping,
   createTrackerSync,
@@ -35,7 +35,7 @@ import {
   repointTrackerSyncBySwarmId,
   updateTrackerSync,
   updateTrackerSyncSwarmId
-} from "./cli-gchg43wt.js";
+} from "./cli-r5g6ngtn.js";
 import {
   ZodFirstPartyTypeKind,
   objectType
@@ -45,7 +45,7 @@ import {
   ensure,
   require_dist,
   runScheduleNow
-} from "./cli-r3y5chyg.js";
+} from "./cli-gtkqc144.js";
 import {
   TriggerSchemaError,
   applyDefinitionPatch,
@@ -57,7 +57,7 @@ import {
   startWorkflowExecution,
   validateDefinition,
   validateJsonSchema
-} from "./cli-1aqc46he.js";
+} from "./cli-z46pnksz.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
@@ -73,7 +73,7 @@ import {
   setScriptConnectionEnabled,
   upsertCredentialBinding,
   upsertScriptConnection
-} from "./cli-4f6vw5vy.js";
+} from "./cli-qwgtacd6.js";
 import {
   CANDIDATE_SET_MULTIPLIER,
   computeScore,
@@ -85,16 +85,17 @@ import {
   isGraphExpansionEnabled,
   rerank,
   rowToCandidate
-} from "./cli-0d5xddf1.js";
+} from "./cli-f3qa069v.js";
 import {
   createAdditiveBuffer,
-  extractSlackMessageText
-} from "./cli-xqzvygxp.js";
+  extractSlackMessageText,
+  parseSlackTs
+} from "./cli-bgvskydy.js";
 import {
   getSlackApp,
   startSlackApp,
   stopSlackApp
-} from "./cli-f1f82qgv.js";
+} from "./cli-trmapn9k.js";
 import {
   findOrCreateUserByEmail,
   findUserByEmail,
@@ -106,7 +107,7 @@ import {
   recordIdentityEvent,
   resolveUserByToken,
   unlinkIdentity
-} from "./cli-0d404x64.js";
+} from "./cli-h3k622d0.js";
 import {
   markdownToSlack
 } from "./cli-6xd0bvf8.js";
@@ -117,7 +118,7 @@ import {
   createTaskWithSiblingAwareness,
   githubContextKey,
   linearContextKey
-} from "./cli-aqr96mny.js";
+} from "./cli-y4ycrnjc.js";
 import {
   getAppUrl,
   getMcpBaseUrl,
@@ -346,7 +347,7 @@ import {
   upsertService,
   upsertSwarmConfig,
   validateConfigValue
-} from "./cli-4ke1amr9.js";
+} from "./cli-ncfgsqbd.js";
 import {
   init_zod
 } from "./cli-q21d49ac.js";
@@ -390,7 +391,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-kavm2cv5.js";
+} from "./cli-c3frqf65.js";
 import {
   init_secret_scrubber,
   refreshSecretScrubberCache,
@@ -19612,6 +19613,300 @@ function registerGithubTaskReactions() {
 init_zod();
 init_db();
 
+// src/rbac/legacy-policy.ts
+var leadOnly = {
+  name: "lead-only",
+  denyReason: "requires lead agent",
+  evaluate: (principal) => principal.kind === "agent" && principal.isLead
+};
+var leadOrTaskCreator = {
+  name: "lead-or-task-creator",
+  denyReason: "requires lead agent or task creator",
+  evaluate: (principal, resource) => {
+    if (principal.kind !== "agent")
+      return false;
+    if (principal.isLead)
+      return true;
+    return resource?.kind === "task" && resource.creatorAgentId != null && resource.creatorAgentId === principal.agentId;
+  }
+};
+var leadOrResourceOwner = {
+  name: "lead-or-resource-owner",
+  denyReason: "requires lead agent or resource owner",
+  evaluate: (principal, resource) => {
+    if (principal.kind !== "agent")
+      return false;
+    if (principal.isLead)
+      return true;
+    return resource?.kind === "owned" && resource.ownerAgentId != null && resource.ownerAgentId === principal.agentId;
+  }
+};
+var leadOrOwnNamespace = {
+  name: "lead-or-own-namespace",
+  denyReason: "requires lead agent or your own task:agent: namespace",
+  evaluate: (principal, resource) => {
+    if (principal.kind !== "agent")
+      return false;
+    if (principal.isLead)
+      return true;
+    return principal.agentId !== "" && resource?.kind === "kv-namespace" && resource.namespace === `task:agent:${principal.agentId}`;
+  }
+};
+var requesterOwnsTask = {
+  name: "requester-owns-task",
+  denyReason: "not the task requester",
+  evaluate: (principal, resource) => {
+    if (principal.kind !== "user")
+      return true;
+    return resource?.kind === "task" && resource.requestedByUserId === principal.userId;
+  }
+};
+var memoryOwnerOrLeadSwarm = {
+  name: "memory-owner-or-lead-swarm",
+  denyReason: "requires memory owner, or lead agent for swarm-scoped memories",
+  evaluate: (principal, resource) => {
+    if (principal.kind !== "agent" || resource?.kind !== "owned")
+      return false;
+    if (resource.ownerAgentId != null && resource.ownerAgentId === principal.agentId)
+      return true;
+    return principal.isLead && resource.scope === "swarm";
+  }
+};
+var taskFsMutate = {
+  name: "operator-or-user-or-lead-or-task-owner",
+  denyReason: "requires operator, user, lead agent, task assignee, or task creator",
+  evaluate: (principal, resource) => {
+    if (principal.kind === "operator" || principal.kind === "user")
+      return true;
+    if (principal.isLead)
+      return true;
+    if (resource?.kind !== "task")
+      return false;
+    return resource.agentId != null && resource.agentId === principal.agentId || resource.creatorAgentId != null && resource.creatorAgentId === principal.agentId;
+  }
+};
+var LEGACY_POLICY = {
+  "user.manage": leadOnly,
+  "agent.profile.update.any": leadOnly,
+  "agent.context.read.any": leadOnly,
+  "task.cancel.any": leadOrTaskCreator,
+  "task.read.own": requesterOwnsTask,
+  "task.cancel.own": requesterOwnsTask,
+  "task.action.own": requesterOwnsTask,
+  "task.fs.mutate": taskFsMutate,
+  "memory.learning.inject": leadOnly,
+  "memory.delete.any": memoryOwnerOrLeadSwarm,
+  "channel.delete": leadOnly,
+  "integration.kapso.manage": leadOnly,
+  "integration.slack.post": leadOnly,
+  "integration.slack.read": leadOnly,
+  "integration.slack.thread.start": leadOnly,
+  "integration.slack.upload": leadOnly,
+  "integration.slack.delete": leadOnly,
+  "integration.slack.update": leadOnly,
+  "credential-binding.manage": leadOnly,
+  "script-connection.manage": leadOnly,
+  "config.credential-bindings.write": leadOnly,
+  "config.write.any": leadOnly,
+  "config.delete.any": leadOnly,
+  "config.read.secrets": leadOnly,
+  "skill.create.swarm": leadOnly,
+  "skill.install.any": leadOnly,
+  "skill.install.global": leadOnly,
+  "skill.uninstall.any": leadOnly,
+  "skill.update.any": leadOrResourceOwner,
+  "skill.promote.swarm": leadOnly,
+  "skill.delete.any": leadOrResourceOwner,
+  "mcp-server.create.swarm": leadOnly,
+  "mcp-server.install.any": leadOnly,
+  "mcp-server.uninstall.any": leadOnly,
+  "mcp-server.delete.any": leadOrResourceOwner,
+  "mcp-server.update.any": leadOrResourceOwner,
+  "kv.write.any": leadOrOwnNamespace,
+  "script.global.write": leadOnly,
+  "script.global.delete": leadOnly
+};
+
+// src/rbac/can.ts
+var auditSink = null;
+function setAuditSink(fn) {
+  auditSink = fn;
+}
+function clearAuditSink() {
+  auditSink = null;
+}
+function can(check) {
+  const rule = LEGACY_POLICY[check.verb];
+  const decision = rule.evaluate(check.principal, check.resource) ? { allow: true } : { allow: false, reason: rule.denyReason, missing: check.verb };
+  if (auditSink) {
+    try {
+      auditSink(check, decision);
+    } catch {}
+  }
+  return decision;
+}
+// src/rbac/permissions.ts
+init_zod();
+var PERMISSIONS = {
+  "user.manage": {
+    description: "Create, update, or deactivate user profiles.",
+    namespace: "user"
+  },
+  "agent.profile.update.any": {
+    description: "Update another agent's profile.",
+    namespace: "agent"
+  },
+  "agent.context.read.any": {
+    description: "View or diff another agent's context history.",
+    namespace: "agent"
+  },
+  "task.cancel.any": {
+    description: "Cancel any task (beyond tasks the caller created).",
+    namespace: "task"
+  },
+  "task.read.own": {
+    description: "Read details of a task the principal requested.",
+    namespace: "task"
+  },
+  "task.cancel.own": {
+    description: "Cancel a task the principal requested.",
+    namespace: "task"
+  },
+  "task.action.own": {
+    description: "Run actions (follow-up, retry, ...) on a task the principal requested.",
+    namespace: "task"
+  },
+  "task.fs.mutate": {
+    description: "Mutate a task's filesystem artifacts and attachments.",
+    namespace: "task"
+  },
+  "memory.learning.inject": {
+    description: "Inject a learning into another agent's memory.",
+    namespace: "memory"
+  },
+  "memory.delete.any": {
+    description: "Delete a memory entry (own entries, or swarm-scoped entries as lead).",
+    namespace: "memory"
+  },
+  "channel.delete": {
+    description: "Delete a Slack channel.",
+    namespace: "channel"
+  },
+  "integration.kapso.manage": {
+    description: "Register or unregister a Kapso inbound number.",
+    namespace: "integration"
+  },
+  "integration.slack.post": {
+    description: "Post to a direct Slack channel.",
+    namespace: "integration"
+  },
+  "integration.slack.read": {
+    description: "Read a direct Slack channel.",
+    namespace: "integration"
+  },
+  "integration.slack.thread.start": {
+    description: "Start a thread in a direct Slack channel.",
+    namespace: "integration"
+  },
+  "integration.slack.upload": {
+    description: "Upload a file to a direct Slack channel.",
+    namespace: "integration"
+  },
+  "integration.slack.delete": {
+    description: "Delete a Slack message.",
+    namespace: "integration"
+  },
+  "integration.slack.update": {
+    description: "Update (edit) a Slack message.",
+    namespace: "integration"
+  },
+  "credential-binding.manage": {
+    description: "Manage script credential bindings.",
+    namespace: "credential-binding"
+  },
+  "script-connection.manage": {
+    description: "Manage script connections.",
+    namespace: "script-connection"
+  },
+  "config.credential-bindings.write": {
+    description: "Write the SCRIPT_CREDENTIAL_BINDINGS swarm-config key.",
+    namespace: "config"
+  },
+  "config.write.any": {
+    description: "Write any swarm-config key.",
+    namespace: "config"
+  },
+  "config.delete.any": {
+    description: "Delete any swarm-config entry.",
+    namespace: "config"
+  },
+  "config.read.secrets": {
+    description: "Read unmasked secret config values.",
+    namespace: "config"
+  },
+  "skill.create.swarm": {
+    description: "Create a swarm-scoped skill.",
+    namespace: "skill"
+  },
+  "skill.install.any": {
+    description: "Install a skill for another agent.",
+    namespace: "skill"
+  },
+  "skill.install.global": {
+    description: "Install a remote/global skill.",
+    namespace: "skill"
+  },
+  "skill.uninstall.any": {
+    description: "Uninstall a skill for another agent.",
+    namespace: "skill"
+  },
+  "skill.update.any": {
+    description: "Update a skill the caller does not own.",
+    namespace: "skill"
+  },
+  "skill.promote.swarm": {
+    description: "Promote a skill to swarm scope (skill-approval path).",
+    namespace: "skill"
+  },
+  "skill.delete.any": {
+    description: "Delete a skill the caller does not own.",
+    namespace: "skill"
+  },
+  "mcp-server.create.swarm": {
+    description: "Create a swarm- or global-scoped MCP server.",
+    namespace: "mcp-server"
+  },
+  "mcp-server.install.any": {
+    description: "Install an MCP server for another agent.",
+    namespace: "mcp-server"
+  },
+  "mcp-server.uninstall.any": {
+    description: "Uninstall an MCP server for another agent.",
+    namespace: "mcp-server"
+  },
+  "mcp-server.delete.any": {
+    description: "Delete an MCP server the caller does not own.",
+    namespace: "mcp-server"
+  },
+  "mcp-server.update.any": {
+    description: "Update an MCP server the caller does not own.",
+    namespace: "mcp-server"
+  },
+  "kv.write.any": {
+    description: "Write another agent's task:agent: KV namespace.",
+    namespace: "kv"
+  },
+  "script.global.write": {
+    description: "Create or update a global-scope script.",
+    namespace: "script"
+  },
+  "script.global.delete": {
+    description: "Delete a global-scope script.",
+    namespace: "script"
+  }
+};
+var PERMISSION_VERBS = Object.keys(PERMISSIONS);
+var PermissionVerbSchema = _enum(PERMISSION_VERBS);
 // src/tools/task-tool-ctx.ts
 function ownerCtx(info) {
   return {
@@ -19629,8 +19924,14 @@ function userCtx(user, sessionId) {
     sessionId
   };
 }
-function assertOwnsTask(ctx, task) {
-  if (ctx.kind === "owner" || task.requestedByUserId === ctx.userId) {
+function assertOwnsTask(ctx, task, verb = "task.read.own") {
+  const decision = can({
+    principal: ctx.kind === "owner" ? ctx.agentId ? { kind: "agent", agentId: ctx.agentId, isLead: false } : { kind: "operator" } : { kind: "user", userId: ctx.userId },
+    verb,
+    resource: { kind: "task", taskId: task.id, requestedByUserId: task.requestedByUserId },
+    source: "mcp"
+  });
+  if (decision.allow) {
     return null;
   }
   const message = `Forbidden: this task is not yours (task ${task.id}).`;
@@ -19672,7 +19973,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
     return;
   initialized2 = true;
   try {
-    const impl = await import("./otel-impl-sgqvcw0f.js");
+    const impl = await import("./otel-impl-b86qseaa.js");
     await impl.boot(serviceRole);
     realWithSpan = impl.withSpan;
     realStartSpan = impl.startSpan;
@@ -19852,8 +20153,17 @@ async function cancelTaskHandler(ctx, { taskId, reason }) {
           message: `Task "${taskId}" not found.`
         };
       }
-      const canCancel = callerAgent.isLead || existingTask2.creatorAgentId === ownerAgentId;
-      if (!canCancel) {
+      const decision = can({
+        principal: { kind: "agent", agentId: callerAgent.id, isLead: callerAgent.isLead },
+        verb: "task.cancel.any",
+        resource: {
+          kind: "task",
+          taskId: existingTask2.id,
+          creatorAgentId: existingTask2.creatorAgentId
+        },
+        source: "mcp"
+      });
+      if (!decision.allow) {
         return {
           success: false,
           message: "Only the lead or task creator can cancel tasks."
@@ -19882,7 +20192,7 @@ async function cancelTaskHandler(ctx, { taskId, reason }) {
         message: `Task "${taskId}" not found.`
       };
     }
-    const ownershipError = assertOwnsTask(ctx, existingTask);
+    const ownershipError = assertOwnsTask(ctx, existingTask, "task.cancel.own");
     if (ownershipError)
       return ownershipError;
     const cancelled = cancelTask(taskId, reason);
@@ -19999,7 +20309,17 @@ var registerContextDiffTool = (server) => {
     }
     if (version.agentId !== requestInfo.agentId) {
       const callerAgent = getAgentById(requestInfo.agentId);
-      if (!callerAgent?.isLead) {
+      const decision = can({
+        principal: {
+          kind: "agent",
+          agentId: requestInfo.agentId,
+          isLead: callerAgent?.isLead ?? false
+        },
+        verb: "agent.context.read.any",
+        resource: { kind: "agent", agentId: version.agentId },
+        source: "mcp"
+      });
+      if (!decision.allow) {
         return {
           content: [
             {
@@ -20125,7 +20445,17 @@ var registerContextHistoryTool = (server) => {
     }
     if (targetAgentId !== requestInfo.agentId) {
       const callerAgent = getAgentById(requestInfo.agentId);
-      if (!callerAgent?.isLead) {
+      const decision = can({
+        principal: {
+          kind: "agent",
+          agentId: requestInfo.agentId,
+          isLead: callerAgent?.isLead ?? false
+        },
+        verb: "agent.context.read.any",
+        resource: { kind: "agent", agentId: targetAgentId },
+        source: "mcp"
+      });
+      if (!decision.allow) {
         return {
           content: [
             {
@@ -20953,7 +21283,17 @@ var registerCredentialBindingsTool = (server) => {
       };
     }
     const agent = getAgentById(requestInfo.agentId);
-    if (!agent?.isLead) {
+    const decision = can({
+      principal: {
+        kind: "agent",
+        agentId: requestInfo.agentId,
+        isLead: agent?.isLead ?? false
+      },
+      verb: "credential-binding.manage",
+      resource: { kind: "none" },
+      source: "mcp"
+    });
+    if (!decision.allow) {
       return {
         content: [{ type: "text", text: "Only the lead can manage credential bindings." }],
         structuredContent: {
@@ -21210,7 +21550,17 @@ var registerDeleteChannelTool = (server) => {
       };
     }
     const callingAgent = getAgentById(requestInfo.agentId);
-    if (!callingAgent?.isLead) {
+    const decision = can({
+      principal: {
+        kind: "agent",
+        agentId: requestInfo.agentId,
+        isLead: callingAgent?.isLead ?? false
+      },
+      verb: "channel.delete",
+      resource: { kind: "none" },
+      source: "mcp"
+    });
+    if (!decision.allow) {
       return {
         content: [
           { type: "text", text: "Not authorized. Only the lead agent can delete channels." }
@@ -21389,7 +21739,7 @@ async function getTaskDetailsHandler(ctx, { taskId }) {
       }
     };
   }
-  const ownershipError = assertOwnsTask(ctx, task);
+  const ownershipError = assertOwnsTask(ctx, task, "task.read.own");
   if (ownershipError)
     return ownershipError;
   const logs = getLogsByTaskIdChronological(taskId);
@@ -21592,7 +21942,17 @@ var registerInjectLearningTool = (server) => {
       };
     }
     const callerAgent = getAgentById(requestInfo.agentId);
-    if (!callerAgent || !callerAgent.isLead) {
+    const decision = can({
+      principal: {
+        kind: "agent",
+        agentId: requestInfo.agentId,
+        isLead: callerAgent?.isLead ?? false
+      },
+      verb: "memory.learning.inject",
+      resource: { kind: "agent", agentId: targetAgentId },
+      source: "mcp"
+    });
+    if (!decision.allow) {
       return {
         content: [{ type: "text", text: "Only the lead agent can inject learnings." }],
         structuredContent: {
@@ -21771,6 +22131,28 @@ init_zod();
 init_db();
 init_types();
 
+// src/tools/kv/kv-write-auth.ts
+init_db();
+function kvWriteAuthError(namespace, info) {
+  if (namespace.startsWith("task:page:")) {
+    return "task:page:* writes require a page-proxy request, not an MCP call";
+  }
+  if (namespace.startsWith("task:agent:")) {
+    const ownNamespace = info.agentId != null && namespace === `task:agent:${info.agentId}`;
+    const agent = !ownNamespace && info.agentId ? getAgentById(info.agentId) : null;
+    const allowed = info.agentId != null && can({
+      principal: { kind: "agent", agentId: info.agentId, isLead: agent?.isLead ?? false },
+      verb: "kv.write.any",
+      resource: { kind: "kv-namespace", namespace },
+      source: "mcp"
+    }).allow;
+    if (!allowed) {
+      return "writes to another agent's namespace require lead";
+    }
+  }
+  return null;
+}
+
 // src/tools/kv/resolve-namespace.ts
 init_db();
 function resolveNamespace(explicit, info) {
@@ -21799,23 +22181,6 @@ function resolveNamespace(explicit, info) {
 }
 
 // src/tools/kv/kv-delete.ts
-function authError(namespace, info) {
-  if (namespace.startsWith("task:page:")) {
-    return "task:page:* writes require a page-proxy request, not an MCP call";
-  }
-  if (namespace.startsWith("task:agent:")) {
-    const target = namespace.slice("task:agent:".length);
-    if (info.agentId && target === info.agentId)
-      return null;
-    if (info.agentId) {
-      const agent = getAgentById(info.agentId);
-      if (agent?.isLead)
-        return null;
-    }
-    return "writes to another agent's namespace require lead";
-  }
-  return null;
-}
 var registerKvDeleteTool = (server) => {
   createToolRegistrar(server)("kv-delete", {
     title: "KV Delete",
@@ -21844,7 +22209,7 @@ var registerKvDeleteTool = (server) => {
         }
       };
     }
-    const authErr = authError(resolved.namespace, { agentId: requestInfo.agentId });
+    const authErr = kvWriteAuthError(resolved.namespace, { agentId: requestInfo.agentId });
     if (authErr) {
       return {
         content: [{ type: "text", text: authErr }],
@@ -21928,23 +22293,6 @@ var registerKvGetTool = (server) => {
 init_zod();
 init_db();
 init_types();
-function authError2(namespace, info) {
-  if (namespace.startsWith("task:page:")) {
-    return "task:page:* writes require a page-proxy request, not an MCP call";
-  }
-  if (namespace.startsWith("task:agent:")) {
-    const target = namespace.slice("task:agent:".length);
-    if (info.agentId && target === info.agentId)
-      return null;
-    if (info.agentId) {
-      const agent = getAgentById(info.agentId);
-      if (agent?.isLead)
-        return null;
-    }
-    return "writes to another agent's namespace require lead";
-  }
-  return null;
-}
 var registerKvIncrTool = (server) => {
   createToolRegistrar(server)("kv-incr", {
     title: "KV Incr",
@@ -21974,7 +22322,7 @@ var registerKvIncrTool = (server) => {
         }
       };
     }
-    const authErr = authError2(resolved.namespace, { agentId: requestInfo.agentId });
+    const authErr = kvWriteAuthError(resolved.namespace, { agentId: requestInfo.agentId });
     if (authErr) {
       return {
         content: [{ type: "text", text: authErr }],
@@ -22095,23 +22443,6 @@ init_zod();
 init_db();
 init_types();
 var MAX_KV_BODY_BYTES = 2 * 1024 * 1024;
-function authError3(namespace, info) {
-  if (namespace.startsWith("task:page:")) {
-    return "task:page:* writes require a page-proxy request, not an MCP call";
-  }
-  if (namespace.startsWith("task:agent:")) {
-    const target = namespace.slice("task:agent:".length);
-    if (info.agentId && target === info.agentId)
-      return null;
-    if (info.agentId) {
-      const agent = getAgentById(info.agentId);
-      if (agent?.isLead)
-        return null;
-    }
-    return "writes to another agent's namespace require lead";
-  }
-  return null;
-}
 var registerKvSetTool = (server) => {
   createToolRegistrar(server)("kv-set", {
     title: "KV Set",
@@ -22143,7 +22474,7 @@ var registerKvSetTool = (server) => {
         }
       };
     }
-    const authErr = authError3(resolved.namespace, { agentId: requestInfo.agentId });
+    const authErr = kvWriteAuthError(resolved.namespace, { agentId: requestInfo.agentId });
     if (authErr) {
       return {
         content: [{ type: "text", text: authErr }],
@@ -22412,7 +22743,17 @@ var registerManageUserTool = (server) => {
     inputSchema: InputSchema
   }, async (input, requestInfo) => {
     const callerAgent = requestInfo.agentId ? getAgentById(requestInfo.agentId) : null;
-    if (!callerAgent?.isLead) {
+    const decision = can({
+      principal: {
+        kind: "agent",
+        agentId: requestInfo.agentId ?? "",
+        isLead: callerAgent?.isLead ?? false
+      },
+      verb: "user.manage",
+      resource: { kind: "none" },
+      source: "mcp"
+    });
+    if (!decision.allow || !callerAgent) {
       return {
         content: [
           { type: "text", text: "Only the lead agent can manage user profiles." }
@@ -22634,7 +22975,17 @@ var registerMcpServerCreateTool = (server) => {
       const scope = args.scope ?? "agent";
       if (scope === "swarm" || scope === "global") {
         const agent = getAgentById(requestInfo.agentId);
-        if (!agent?.isLead) {
+        const decision = can({
+          principal: {
+            kind: "agent",
+            agentId: requestInfo.agentId,
+            isLead: agent?.isLead ?? false
+          },
+          verb: "mcp-server.create.swarm",
+          resource: { kind: "none" },
+          source: "mcp"
+        });
+        if (!decision.allow) {
           return {
             content: [
               {
@@ -22722,7 +23073,17 @@ var registerMcpServerDeleteTool = (server) => {
       };
     }
     const agent = getAgentById(requestInfo.agentId);
-    if (existing.ownerAgentId !== requestInfo.agentId && !agent?.isLead) {
+    const decision = can({
+      principal: {
+        kind: "agent",
+        agentId: requestInfo.agentId,
+        isLead: agent?.isLead ?? false
+      },
+      verb: "mcp-server.delete.any",
+      resource: { kind: "owned", ownerAgentId: existing.ownerAgentId },
+      source: "mcp"
+    });
+    if (!decision.allow) {
       return {
         content: [
           { type: "text", text: "Only the owning agent or lead can delete this MCP server." }
@@ -22841,7 +23202,17 @@ var registerMcpServerInstallTool = (server) => {
     const targetAgentId = args.agentId ?? requestInfo.agentId;
     if (targetAgentId !== requestInfo.agentId) {
       const agent = getAgentById(requestInfo.agentId);
-      if (!agent?.isLead) {
+      const decision = can({
+        principal: {
+          kind: "agent",
+          agentId: requestInfo.agentId,
+          isLead: agent?.isLead ?? false
+        },
+        verb: "mcp-server.install.any",
+        resource: { kind: "agent", agentId: targetAgentId },
+        source: "mcp"
+      });
+      if (!decision.allow) {
         return {
           content: [
             {
@@ -22987,7 +23358,17 @@ var registerMcpServerUninstallTool = (server) => {
     const targetAgentId = args.agentId ?? requestInfo.agentId;
     if (targetAgentId !== requestInfo.agentId) {
       const agent = getAgentById(requestInfo.agentId);
-      if (!agent?.isLead) {
+      const decision = can({
+        principal: {
+          kind: "agent",
+          agentId: requestInfo.agentId,
+          isLead: agent?.isLead ?? false
+        },
+        verb: "mcp-server.uninstall.any",
+        resource: { kind: "agent", agentId: targetAgentId },
+        source: "mcp"
+      });
+      if (!decision.allow) {
         return {
           content: [
             {
@@ -23067,7 +23448,17 @@ var registerMcpServerUpdateTool = (server) => {
         };
       }
       const agent = getAgentById(requestInfo.agentId);
-      if (existing.ownerAgentId !== requestInfo.agentId && !agent?.isLead) {
+      const decision = can({
+        principal: {
+          kind: "agent",
+          agentId: requestInfo.agentId,
+          isLead: agent?.isLead ?? false
+        },
+        verb: "mcp-server.update.any",
+        resource: { kind: "owned", ownerAgentId: existing.ownerAgentId },
+        source: "mcp"
+      });
+      if (!decision.allow) {
         return {
           content: [
             { type: "text", text: "Only the owning agent or lead can update this MCP server." }
@@ -23179,10 +23570,18 @@ var registerMemoryDeleteTool = (server) => {
         }
       };
     }
-    const isOwner = memory.agentId === requestInfo.agentId;
     const agent = getAgentById(requestInfo.agentId);
-    const isLeadDeletingSwarm = agent?.isLead && memory.scope === "swarm";
-    if (!isOwner && !isLeadDeletingSwarm) {
+    const decision = can({
+      principal: {
+        kind: "agent",
+        agentId: requestInfo.agentId,
+        isLead: agent?.isLead ?? false
+      },
+      verb: "memory.delete.any",
+      resource: { kind: "owned", ownerAgentId: memory.agentId, scope: memory.scope },
+      source: "mcp"
+    });
+    if (!decision.allow) {
       return {
         content: [{ type: "text", text: "You don't have permission to delete this memory." }],
         structuredContent: {
@@ -25411,7 +25810,17 @@ var registerRegisterKapsoNumberTool = (server) => {
   }, async ({ phoneNumberId, agentId, workflowId, name }, requestInfo) => {
     try {
       const callerAgent = requestInfo.agentId ? getAgentById(requestInfo.agentId) : null;
-      if (!callerAgent?.isLead) {
+      const decision = can({
+        principal: {
+          kind: "agent",
+          agentId: requestInfo.agentId ?? "",
+          isLead: callerAgent?.isLead ?? false
+        },
+        verb: "integration.kapso.manage",
+        resource: { kind: "none" },
+        source: "mcp"
+      });
+      if (!decision.allow) {
         const msg = "Permission denied. Only the lead can register a Kapso number.";
         return {
           content: [{ type: "text", text: msg }],
@@ -25489,7 +25898,17 @@ var registerUnregisterKapsoNumberTool = (server) => {
   }, async ({ phoneNumberId }, requestInfo) => {
     try {
       const callerAgent = requestInfo.agentId ? getAgentById(requestInfo.agentId) : null;
-      if (!callerAgent?.isLead) {
+      const decision = can({
+        principal: {
+          kind: "agent",
+          agentId: requestInfo.agentId ?? "",
+          isLead: callerAgent?.isLead ?? false
+        },
+        verb: "integration.kapso.manage",
+        resource: { kind: "none" },
+        source: "mcp"
+      });
+      if (!decision.allow) {
         const msg = "Permission denied. Only the lead can unregister a Kapso number.";
         return {
           content: [{ type: "text", text: msg }],
@@ -25917,7 +26336,7 @@ init_types();
 var createScheduleInputSchema = object({
   name: string().min(1).max(100).describe("Unique name for the schedule (e.g., 'daily-cleanup')"),
   taskTemplate: string().min(1).optional().describe("The task description that will be created each time. Required when targetType is 'agent-task' (the default)."),
-  targetType: ScheduledTaskTargetTypeSchema.default("agent-task").optional().describe("Execution target: 'agent-task' (default, creates an agent task from taskTemplate), " + "'workflow' (directly triggers a workflow run, no agent in the loop), or " + "'script' (directly runs a catalog script, no agent in the loop)."),
+  targetType: ScheduledTaskTargetTypeSchema.default("agent-task").optional().describe("Execution target. Use 'workflow' + workflowId when the schedule only starts a workflow; " + "use 'script' + scriptName/scriptArgs when it only runs a catalog script; " + "use 'agent-task' only when a reasoning agent genuinely needs to be in the loop. " + "Do not create an agent-task whose taskTemplate just tells an agent to trigger a workflow or script."),
   workflowId: string().uuid().optional().describe("Workflow ID to trigger. Required when targetType is 'workflow'."),
   scriptName: string().optional().describe("Catalog script name (global scope). Required when targetType is 'script'."),
   scriptArgs: record(string(), unknown()).optional().describe("JSON args passed to the script. Used when targetType is 'script'."),
@@ -26493,6 +26912,8 @@ var registerListSchedulesTool = (server) => {
       name: string().optional().describe("Filter by name (partial match)"),
       scheduleType: _enum(["recurring", "one_time"]).optional().describe("Filter by schedule type"),
       hideCompleted: boolean().default(true).optional().describe("Hide completed one-time schedules (default: true)"),
+      consecutiveErrorsMin: number().int().min(0).optional().describe("Only return schedules with at least this many consecutive errors."),
+      lastRunStatus: _enum(["failed", "succeeded"]).optional().describe("Filter by derived last run status. `failed` means consecutiveErrors > 0; `succeeded` means lastRunAt is set and consecutiveErrors is 0."),
       includeFull: boolean().optional().describe("Return the full `taskTemplate` instead of a short `taskTemplatePreview`. Default false.")
     }),
     outputSchema: object({
@@ -26516,13 +26937,24 @@ var registerListSchedulesTool = (server) => {
         nextRunAt: string().optional(),
         createdByAgentId: string().optional(),
         timezone: string(),
+        consecutiveErrors: number().optional(),
+        lastErrorAt: string().optional(),
+        lastErrorMessage: string().optional(),
         scheduleType: string(),
         createdAt: string(),
         lastUpdatedAt: string()
       })),
       count: number()
     })
-  }, async ({ enabled: enabled2, name, scheduleType, hideCompleted, includeFull }, requestInfo, _meta) => {
+  }, async ({
+    enabled: enabled2,
+    name,
+    scheduleType,
+    hideCompleted,
+    consecutiveErrorsMin,
+    lastRunStatus,
+    includeFull
+  }, requestInfo, _meta) => {
     if (!requestInfo.agentId) {
       return {
         content: [{ type: "text", text: 'Agent ID not found. Set the "X-Agent-ID" header.' }],
@@ -26535,7 +26967,14 @@ var registerListSchedulesTool = (server) => {
       };
     }
     try {
-      const filters = { enabled: enabled2, name, scheduleType, hideCompleted };
+      const filters = {
+        enabled: enabled2,
+        name,
+        scheduleType,
+        hideCompleted,
+        consecutiveErrorsMin,
+        lastRunStatus
+      };
       const schedules = includeFull ? getScheduledTasks(filters) : getScheduledTasks(filters, { slim: true });
       const count = schedules.length;
       const statusSummary = count === 0 ? "No schedules found." : `Found ${count} schedule${count === 1 ? "" : "s"}.`;
@@ -26579,106 +27018,7 @@ ${scheduleList}`
     }
   });
 };
-// src/tools/schedules/run-schedule-now.ts
-init_zod();
-init_db();
-var registerRunScheduleNowTool = (server) => {
-  createToolRegistrar(server)("run-schedule-now", {
-    title: "Run Schedule Now",
-    annotations: { destructiveHint: false },
-    description: "Immediately execute a scheduled task, creating a task right away. Does not affect the regular schedule timing.",
-    inputSchema: object({
-      scheduleId: string().uuid().optional().describe("Schedule ID to run"),
-      name: string().optional().describe("Schedule name to run (alternative to ID)")
-    }),
-    outputSchema: object({
-      yourAgentId: string().uuid().optional(),
-      success: boolean(),
-      message: string(),
-      schedule: object({
-        id: string(),
-        name: string(),
-        nextRunAt: string().optional()
-      }).optional()
-    })
-  }, async ({ scheduleId, name }, requestInfo, _meta) => {
-    if (!requestInfo.agentId) {
-      return {
-        content: [{ type: "text", text: 'Agent ID not found. Set the "X-Agent-ID" header.' }],
-        structuredContent: {
-          success: false,
-          message: 'Agent ID not found. Set the "X-Agent-ID" header.'
-        }
-      };
-    }
-    if (!scheduleId && !name) {
-      return {
-        content: [{ type: "text", text: "Either scheduleId or name must be provided." }],
-        structuredContent: {
-          success: false,
-          message: "Either scheduleId or name must be provided."
-        }
-      };
-    }
-    const schedule = scheduleId ? getScheduledTaskById(scheduleId) : name ? getScheduledTaskByName(name) : null;
-    if (!schedule) {
-      return {
-        content: [{ type: "text", text: "Schedule not found." }],
-        structuredContent: {
-          success: false,
-          message: "Schedule not found."
-        }
-      };
-    }
-    if (!schedule.enabled) {
-      return {
-        content: [
-          {
-            type: "text",
-            text: `Schedule "${schedule.name}" is disabled. Enable it first or use it as a template.`
-          }
-        ],
-        structuredContent: {
-          success: false,
-          message: `Schedule "${schedule.name}" is disabled.`
-        }
-      };
-    }
-    try {
-      await runScheduleNow(schedule.id);
-      const updated = getScheduledTaskById(schedule.id);
-      return {
-        content: [
-          {
-            type: "text",
-            text: `Executed schedule "${schedule.name}". Task created. Next regular run: ${updated?.nextRunAt || "not scheduled"}`
-          }
-        ],
-        structuredContent: {
-          yourAgentId: requestInfo.agentId,
-          success: true,
-          message: `Executed schedule "${schedule.name}".`,
-          schedule: updated ? {
-            id: updated.id,
-            name: updated.name,
-            nextRunAt: updated.nextRunAt
-          } : undefined
-        }
-      };
-    } catch (error) {
-      const message = error instanceof Error ? error.message : "Unknown error";
-      return {
-        content: [{ type: "text", text: `Failed to run schedule: ${message}` }],
-        structuredContent: {
-          yourAgentId: requestInfo.agentId,
-          success: false,
-          message: `Failed to run schedule: ${message}`
-        }
-      };
-    }
-  });
-};
-// src/tools/schedules/update-schedule.ts
+// src/tools/schedules/patch-schedule.ts
 init_zod();
 var import_cron_parser2 = __toESM(require_dist(), 1);
 init_db();
@@ -26697,11 +27037,11 @@ function validateRecurringTiming(merged) {
   return null;
 }
 
-// src/tools/schedules/update-schedule.ts
+// src/tools/schedules/patch-schedule.ts
 init_types();
-var updateScheduleInputSchema = object({
-  scheduleId: string().uuid().optional().describe("Schedule ID to update"),
-  name: string().optional().describe("Schedule name to update (alternative to ID)"),
+var patchScheduleInputSchema = object({
+  scheduleId: string().uuid().optional().describe("Schedule ID to patch"),
+  name: string().optional().describe("Schedule name to patch (alternative to ID)"),
   newName: string().min(1).max(100).optional().describe("New name for the schedule"),
   taskTemplate: string().min(1).optional().describe("New task template"),
   targetType: ScheduledTaskTargetTypeSchema.optional().describe("Change the execution target: 'agent-task', 'workflow', or 'script'."),
@@ -26720,12 +27060,12 @@ var updateScheduleInputSchema = object({
   model: string().trim().min(1).nullable().optional().describe("Concrete model override for tasks created by this schedule. Set to null to clear."),
   modelTier: ModelTierSchema.nullable().optional().describe("Portable model tier for tasks created by this schedule. Set to null to clear.")
 });
-var registerUpdateScheduleTool = (server) => {
-  createToolRegistrar(server)("update-schedule", {
-    title: "Update Scheduled Task",
+var registerPatchScheduleTool = (server) => {
+  createToolRegistrar(server)("patch-schedule", {
+    title: "Patch Scheduled Task",
     annotations: { idempotentHint: true },
-    description: "Update an existing scheduled task. Any registered agent can update schedules.",
-    inputSchema: updateScheduleInputSchema,
+    description: "Patch an existing scheduled task by shallow-merging provided fields over the current row. Any registered agent can patch schedules.",
+    inputSchema: patchScheduleInputSchema,
     outputSchema: object({
       yourAgentId: string().uuid().optional(),
       success: boolean(),
@@ -26837,6 +27177,429 @@ var registerUpdateScheduleTool = (server) => {
         };
       }
     }
+    if (targetAgentId) {
+      const agent = getAgentById(targetAgentId);
+      if (!agent) {
+        return {
+          content: [{ type: "text", text: `Target agent not found: ${targetAgentId}` }],
+          structuredContent: {
+            success: false,
+            message: `Target agent not found: ${targetAgentId}`
+          }
+        };
+      }
+    }
+    if (newName && newName !== schedule.name) {
+      const existing = getScheduledTaskByName(newName);
+      if (existing) {
+        return {
+          content: [{ type: "text", text: `Schedule with name "${newName}" already exists.` }],
+          structuredContent: {
+            success: false,
+            message: `Schedule with name "${newName}" already exists.`
+          }
+        };
+      }
+    }
+    const mergedTargetType = targetType ?? schedule.targetType;
+    const mergedTaskTemplate = taskTemplate !== undefined ? taskTemplate : schedule.taskTemplate;
+    const mergedWorkflowId = workflowId !== undefined ? workflowId : schedule.workflowId;
+    const mergedScriptName = scriptName !== undefined ? scriptName : schedule.scriptName;
+    if (mergedTargetType === "agent-task" && !mergedTaskTemplate) {
+      const message = "taskTemplate is required when targetType is 'agent-task'.";
+      return {
+        content: [{ type: "text", text: message }],
+        structuredContent: { success: false, message }
+      };
+    }
+    if (mergedTargetType === "workflow") {
+      if (!mergedWorkflowId) {
+        const message = "workflowId is required when targetType is 'workflow'.";
+        return {
+          content: [{ type: "text", text: message }],
+          structuredContent: { success: false, message }
+        };
+      }
+      if (!getWorkflow(mergedWorkflowId)) {
+        const message = `Workflow not found: ${mergedWorkflowId}`;
+        return {
+          content: [{ type: "text", text: message }],
+          structuredContent: { success: false, message }
+        };
+      }
+    }
+    if (mergedTargetType === "script") {
+      if (!mergedScriptName) {
+        const message = "scriptName is required when targetType is 'script'.";
+        return {
+          content: [{ type: "text", text: message }],
+          structuredContent: { success: false, message }
+        };
+      }
+      if (!getScript({ name: mergedScriptName, scope: "global" })) {
+        const message = `Script not found: ${mergedScriptName}`;
+        return {
+          content: [{ type: "text", text: message }],
+          structuredContent: { success: false, message }
+        };
+      }
+    }
+    try {
+      const updateData = {};
+      if (newName !== undefined)
+        updateData.name = newName;
+      if (taskTemplate !== undefined)
+        updateData.taskTemplate = taskTemplate;
+      if (targetType !== undefined)
+        updateData.targetType = targetType;
+      if (workflowId !== undefined)
+        updateData.workflowId = workflowId;
+      if (scriptName !== undefined)
+        updateData.scriptName = scriptName;
+      if (scriptArgs !== undefined)
+        updateData.scriptArgs = scriptArgs;
+      if (cronExpression !== undefined)
+        updateData.cronExpression = cronExpression;
+      if (intervalMs !== undefined)
+        updateData.intervalMs = intervalMs;
+      if (description !== undefined)
+        updateData.description = description;
+      if (taskType !== undefined)
+        updateData.taskType = taskType;
+      if (tags !== undefined)
+        updateData.tags = tags;
+      if (priority !== undefined)
+        updateData.priority = priority;
+      if (targetAgentId !== undefined)
+        updateData.targetAgentId = targetAgentId;
+      if (timezone !== undefined)
+        updateData.timezone = timezone;
+      if (enabled2 !== undefined)
+        updateData.enabled = enabled2;
+      if (model !== undefined || modelTier !== undefined) {
+        const normalizedModel = splitLegacyModelAlias({ model, modelTier });
+        if (model !== undefined)
+          updateData.model = normalizedModel.model ?? null;
+        if (modelTier !== undefined || normalizedModel.modelTier) {
+          updateData.modelTier = normalizedModel.modelTier ?? null;
+        }
+      }
+      if (schedule.scheduleType === "one_time") {
+        if (enabled2 === false) {
+          updateData.nextRunAt = null;
+        }
+      } else {
+        const timing = mergeScheduleTiming({
+          cronExpression: schedule.cronExpression ?? null,
+          intervalMs: schedule.intervalMs ?? null
+        }, { cronExpression, intervalMs });
+        const timingError = validateRecurringTiming(timing);
+        if (timingError) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: "At least one of intervalMs or cronExpression must be set for recurring schedules."
+              }
+            ],
+            structuredContent: {
+              success: false,
+              message: "At least one of intervalMs or cronExpression must be set for recurring schedules."
+            }
+          };
+        }
+        const needsNextRunRecalc = cronExpression !== undefined || intervalMs !== undefined || timezone !== undefined || enabled2 === true && !schedule.enabled;
+        if (needsNextRunRecalc && enabled2 !== false) {
+          const mergedTimezone = timezone !== undefined ? timezone : schedule.timezone;
+          updateData.nextRunAt = calculateNextRun({
+            cronExpression: timing.mergedCron,
+            intervalMs: timing.mergedInterval,
+            timezone: mergedTimezone
+          }, new Date);
+        } else if (enabled2 === false) {
+          updateData.nextRunAt = null;
+        }
+      }
+      const updatedBy = resolveTaskAuditUserId(requestInfo.sourceTaskId, requestInfo.agentId) ?? undefined;
+      const updated = updateScheduledTask(schedule.id, { ...updateData, updatedBy });
+      if (!updated) {
+        return {
+          content: [{ type: "text", text: "Failed to update schedule." }],
+          structuredContent: {
+            success: false,
+            message: "Failed to update schedule."
+          }
+        };
+      }
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Patched schedule "${updated.name}". Next run: ${updated.nextRunAt || "disabled"}`
+          }
+        ],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: true,
+          message: `Patched schedule "${updated.name}".`,
+          schedule: updated
+        }
+      };
+    } catch (error) {
+      const message = error instanceof Error ? error.message : "Unknown error";
+      return {
+        content: [{ type: "text", text: `Failed to update schedule: ${message}` }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: false,
+          message: `Failed to update schedule: ${message}`
+        }
+      };
+    }
+  });
+};
+// src/tools/schedules/run-schedule-now.ts
+init_zod();
+init_db();
+var registerRunScheduleNowTool = (server) => {
+  createToolRegistrar(server)("run-schedule-now", {
+    title: "Run Schedule Now",
+    annotations: { destructiveHint: false },
+    description: "Immediately execute a scheduled task, creating a task right away. Does not affect the regular schedule timing.",
+    inputSchema: object({
+      scheduleId: string().uuid().optional().describe("Schedule ID to run"),
+      name: string().optional().describe("Schedule name to run (alternative to ID)")
+    }),
+    outputSchema: object({
+      yourAgentId: string().uuid().optional(),
+      success: boolean(),
+      message: string(),
+      schedule: object({
+        id: string(),
+        name: string(),
+        nextRunAt: string().optional()
+      }).optional()
+    })
+  }, async ({ scheduleId, name }, requestInfo, _meta) => {
+    if (!requestInfo.agentId) {
+      return {
+        content: [{ type: "text", text: 'Agent ID not found. Set the "X-Agent-ID" header.' }],
+        structuredContent: {
+          success: false,
+          message: 'Agent ID not found. Set the "X-Agent-ID" header.'
+        }
+      };
+    }
+    if (!scheduleId && !name) {
+      return {
+        content: [{ type: "text", text: "Either scheduleId or name must be provided." }],
+        structuredContent: {
+          success: false,
+          message: "Either scheduleId or name must be provided."
+        }
+      };
+    }
+    const schedule = scheduleId ? getScheduledTaskById(scheduleId) : name ? getScheduledTaskByName(name) : null;
+    if (!schedule) {
+      return {
+        content: [{ type: "text", text: "Schedule not found." }],
+        structuredContent: {
+          success: false,
+          message: "Schedule not found."
+        }
+      };
+    }
+    if (!schedule.enabled) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Schedule "${schedule.name}" is disabled. Enable it first or use it as a template.`
+          }
+        ],
+        structuredContent: {
+          success: false,
+          message: `Schedule "${schedule.name}" is disabled.`
+        }
+      };
+    }
+    try {
+      await runScheduleNow(schedule.id);
+      const updated = getScheduledTaskById(schedule.id);
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Executed schedule "${schedule.name}". Task created. Next regular run: ${updated?.nextRunAt || "not scheduled"}`
+          }
+        ],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: true,
+          message: `Executed schedule "${schedule.name}".`,
+          schedule: updated ? {
+            id: updated.id,
+            name: updated.name,
+            nextRunAt: updated.nextRunAt
+          } : undefined
+        }
+      };
+    } catch (error) {
+      const message = error instanceof Error ? error.message : "Unknown error";
+      return {
+        content: [{ type: "text", text: `Failed to run schedule: ${message}` }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: false,
+          message: `Failed to run schedule: ${message}`
+        }
+      };
+    }
+  });
+};
+// src/tools/schedules/update-schedule.ts
+init_zod();
+var import_cron_parser3 = __toESM(require_dist(), 1);
+init_db();
+init_types();
+var updateScheduleInputSchema = object({
+  scheduleId: string().uuid().optional().describe("Schedule ID to update"),
+  name: string().optional().describe("Schedule name to update (alternative to ID)"),
+  newName: string().min(1).max(100).optional().describe("New name for the schedule"),
+  taskTemplate: string().min(1).optional().describe("New task template"),
+  targetType: ScheduledTaskTargetTypeSchema.optional().describe("Change the execution target: 'agent-task', 'workflow', or 'script'."),
+  workflowId: string().uuid().nullable().optional().describe("New workflow ID (required when targetType is 'workflow'; null to clear)"),
+  scriptName: string().nullable().optional().describe("New catalog script name (required when targetType is 'script'; null to clear)"),
+  scriptArgs: record(string(), unknown()).nullable().optional().describe("New JSON args for the script target (null to clear)"),
+  cronExpression: string().nullable().optional().describe("New cron expression (null to clear)"),
+  intervalMs: number().int().positive().nullable().optional().describe("New interval in milliseconds (null to clear)"),
+  description: string().optional().describe("New description"),
+  taskType: string().max(50).optional().describe("New task type"),
+  tags: array(string()).optional().describe("New tags"),
+  priority: number().int().min(0).max(100).optional().describe("New priority"),
+  targetAgentId: string().uuid().nullable().optional().describe("New target agent ID"),
+  timezone: string().optional().describe("New timezone"),
+  enabled: boolean().optional().describe("Enable or disable the schedule"),
+  model: string().trim().min(1).nullable().optional().describe("Concrete model override for tasks created by this schedule. Set to null to clear."),
+  modelTier: ModelTierSchema.nullable().optional().describe("Portable model tier for tasks created by this schedule. Set to null to clear.")
+});
+var registerUpdateScheduleTool = (server) => {
+  createToolRegistrar(server)("update-schedule", {
+    title: "Update Scheduled Task",
+    annotations: { idempotentHint: true },
+    description: "Update an existing scheduled task. Any registered agent can update schedules.",
+    inputSchema: updateScheduleInputSchema,
+    outputSchema: object({
+      yourAgentId: string().uuid().optional(),
+      success: boolean(),
+      message: string(),
+      schedule: object({
+        id: string(),
+        name: string(),
+        description: string().optional(),
+        cronExpression: string().optional(),
+        intervalMs: number().optional(),
+        taskTemplate: string().optional(),
+        taskType: string().optional(),
+        tags: array(string()),
+        priority: number(),
+        targetAgentId: string().optional(),
+        enabled: boolean(),
+        lastRunAt: string().optional(),
+        nextRunAt: string().optional(),
+        createdByAgentId: string().optional(),
+        timezone: string(),
+        model: string().optional(),
+        modelTier: ModelTierSchema.optional(),
+        scheduleType: string(),
+        targetType: ScheduledTaskTargetTypeSchema.optional(),
+        workflowId: string().optional(),
+        scriptName: string().optional(),
+        scriptArgs: record(string(), unknown()).optional(),
+        createdAt: string(),
+        lastUpdatedAt: string()
+      }).optional()
+    })
+  }, async ({
+    scheduleId,
+    name,
+    newName,
+    taskTemplate,
+    targetType,
+    workflowId,
+    scriptName,
+    scriptArgs,
+    cronExpression,
+    intervalMs,
+    description,
+    taskType,
+    tags,
+    priority,
+    targetAgentId,
+    timezone,
+    enabled: enabled2,
+    model,
+    modelTier
+  }, requestInfo, _meta) => {
+    if (!requestInfo.agentId) {
+      return {
+        content: [{ type: "text", text: 'Agent ID not found. Set the "X-Agent-ID" header.' }],
+        structuredContent: {
+          success: false,
+          message: 'Agent ID not found. Set the "X-Agent-ID" header.'
+        }
+      };
+    }
+    const schedule = scheduleId ? getScheduledTaskById(scheduleId) : name ? getScheduledTaskByName(name) : null;
+    if (!schedule) {
+      return {
+        content: [{ type: "text", text: "Schedule not found." }],
+        structuredContent: {
+          success: false,
+          message: "Schedule not found."
+        }
+      };
+    }
+    const caller = getAgentById(requestInfo.agentId);
+    if (!caller) {
+      return {
+        content: [{ type: "text", text: "Agent not found." }],
+        structuredContent: {
+          success: false,
+          message: "Agent not found."
+        }
+      };
+    }
+    if (schedule.scheduleType === "one_time" && !schedule.enabled && schedule.lastRunAt) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: `One-time schedule "${schedule.name}" has already executed. Create a new one instead.`
+          }
+        ],
+        structuredContent: {
+          success: false,
+          message: `One-time schedule "${schedule.name}" has already executed. Create a new one instead.`
+        }
+      };
+    }
+    if (cronExpression) {
+      try {
+        import_cron_parser3.CronExpressionParser.parse(cronExpression, {
+          tz: timezone || schedule.timezone || "UTC"
+        });
+      } catch (err) {
+        const message = err instanceof Error ? err.message : "Invalid cron expression";
+        return {
+          content: [{ type: "text", text: `Invalid cron expression: ${message}` }],
+          structuredContent: {
+            success: false,
+            message: `Invalid cron expression: ${message}`
+          }
+        };
+      }
+    }
     if (targetAgentId && targetAgentId !== null) {
       const agent = getAgentById(targetAgentId);
       if (!agent) {
@@ -26946,7 +27709,7 @@ var registerUpdateScheduleTool = (server) => {
       }
       if (schedule.scheduleType === "one_time") {
         if (enabled2 === false) {
-          updateData.nextRunAt = undefined;
+          updateData.nextRunAt = null;
         }
       } else {
         const timing = mergeScheduleTiming({
@@ -26977,7 +27740,7 @@ var registerUpdateScheduleTool = (server) => {
             timezone: mergedTimezone
           }, new Date);
         } else if (enabled2 === false) {
-          updateData.nextRunAt = undefined;
+          updateData.nextRunAt = null;
         }
       }
       const updatedBy = resolveTaskAuditUserId(requestInfo.sourceTaskId, requestInfo.agentId) ?? undefined;
@@ -27256,7 +28019,17 @@ var registerScriptConnectionsTool = (server) => {
       };
     }
     const agent = getAgentById(requestInfo.agentId);
-    if (!agent?.isLead) {
+    const decision = can({
+      principal: {
+        kind: "agent",
+        agentId: requestInfo.agentId,
+        isLead: agent?.isLead ?? false
+      },
+      verb: "script-connection.manage",
+      resource: { kind: "none" },
+      source: "mcp"
+    });
+    if (!decision.allow) {
       return {
         content: [{ type: "text", text: "Only the lead can manage script connections." }],
         structuredContent: {
@@ -27982,7 +28755,17 @@ var registerSkillCreateTool = (server) => {
       const parsed = parseSkillContent(args.content);
       if (args.scope === "swarm") {
         const agent = getAgentById(requestInfo.agentId);
-        if (!agent?.isLead) {
+        const decision = can({
+          principal: {
+            kind: "agent",
+            agentId: requestInfo.agentId,
+            isLead: agent?.isLead ?? false
+          },
+          verb: "skill.create.swarm",
+          resource: { kind: "none" },
+          source: "mcp"
+        });
+        if (!decision.allow) {
           return {
             content: [
               {
@@ -28072,7 +28855,17 @@ var registerSkillDeleteTool = (server) => {
       };
     }
     const agent = getAgentById(requestInfo.agentId);
-    if (existing.ownerAgentId !== requestInfo.agentId && !agent?.isLead) {
+    const decision = can({
+      principal: {
+        kind: "agent",
+        agentId: requestInfo.agentId,
+        isLead: agent?.isLead ?? false
+      },
+      verb: "skill.delete.any",
+      resource: { kind: "owned", ownerAgentId: existing.ownerAgentId },
+      source: "mcp"
+    });
+    if (!decision.allow) {
       return {
         content: [{ type: "text", text: "Only the owning agent or lead can delete this skill." }],
         structuredContent: {
@@ -28267,7 +29060,17 @@ var registerSkillInstallTool = (server) => {
     const targetAgentId = args.agentId ?? requestInfo.agentId;
     if (targetAgentId !== requestInfo.agentId) {
       const agent = getAgentById(requestInfo.agentId);
-      if (!agent?.isLead) {
+      const decision = can({
+        principal: {
+          kind: "agent",
+          agentId: requestInfo.agentId,
+          isLead: agent?.isLead ?? false
+        },
+        verb: "skill.install.any",
+        resource: { kind: "agent", agentId: targetAgentId },
+        source: "mcp"
+      });
+      if (!decision.allow) {
         return {
           content: [{ type: "text", text: "Only leads can install skills for other agents." }],
           structuredContent: {
@@ -28353,7 +29156,17 @@ var registerSkillInstallRemoteTool = (server) => {
       };
     }
     const agent = getAgentById(requestInfo.agentId);
-    if (!agent?.isLead) {
+    const decision = can({
+      principal: {
+        kind: "agent",
+        agentId: requestInfo.agentId,
+        isLead: agent?.isLead ?? false
+      },
+      verb: "skill.install.global",
+      resource: { kind: "none" },
+      source: "mcp"
+    });
+    if (!decision.allow) {
       return {
         content: [{ type: "text", text: "Only lead agents can install remote skills." }],
         structuredContent: {
@@ -28777,7 +29590,17 @@ var registerSkillUninstallTool = (server) => {
     const targetAgentId = args.agentId ?? requestInfo.agentId;
     if (targetAgentId !== requestInfo.agentId) {
       const agent = getAgentById(requestInfo.agentId);
-      if (!agent?.isLead) {
+      const decision = can({
+        principal: {
+          kind: "agent",
+          agentId: requestInfo.agentId,
+          isLead: agent?.isLead ?? false
+        },
+        verb: "skill.uninstall.any",
+        resource: { kind: "agent", agentId: targetAgentId },
+        source: "mcp"
+      });
+      if (!decision.allow) {
         return {
           content: [{ type: "text", text: "Only leads can uninstall skills for other agents." }],
           structuredContent: {
@@ -28852,7 +29675,17 @@ var registerSkillUpdateTool = (server) => {
         };
       }
       const agent = getAgentById(requestInfo.agentId);
-      if (existing.ownerAgentId !== requestInfo.agentId && !agent?.isLead) {
+      const updateDecision = can({
+        principal: {
+          kind: "agent",
+          agentId: requestInfo.agentId,
+          isLead: agent?.isLead ?? false
+        },
+        verb: "skill.update.any",
+        resource: { kind: "owned", ownerAgentId: existing.ownerAgentId },
+        source: "mcp"
+      });
+      if (!updateDecision.allow) {
         return {
           content: [
             { type: "text", text: "Only the owning agent or lead can update this skill." }
@@ -28892,7 +29725,16 @@ var registerSkillUpdateTool = (server) => {
         updates.isEnabled = args.isEnabled;
       }
       if (args.scope !== undefined && args.scope !== existing.scope) {
-        if (args.scope === "swarm" && !agent?.isLead) {
+        if (args.scope === "swarm" && !can({
+          principal: {
+            kind: "agent",
+            agentId: requestInfo.agentId,
+            isLead: agent?.isLead ?? false
+          },
+          verb: "skill.promote.swarm",
+          resource: { kind: "owned", ownerAgentId: existing.ownerAgentId },
+          source: "mcp"
+        }).allow) {
           return {
             content: [
               {
@@ -28942,6 +29784,93 @@ var registerSkillUpdateTool = (server) => {
     }
   });
 };
+// src/tools/slack-delete.ts
+init_zod();
+init_db();
+var registerSlackDeleteTool = (server) => {
+  createToolRegistrar(server)("slack-delete", {
+    title: "Delete a Slack message",
+    description: "Deletes a Slack message that THIS bot authored (e.g. a message previously posted via `slack-post`/`slack-reply`). Cannot delete messages authored by humans or other apps. Requires lead privileges.",
+    annotations: { openWorldHint: true, destructiveHint: true },
+    inputSchema: object({
+      channelId: string().min(1).describe("The Slack channel ID the message is in."),
+      messageTs: string().min(1).describe("Timestamp of the message to delete. Accepts the dotted form (1783411554.596189), the 'p' deep-link form (p1783411554596189), or a full Slack permalink URL.")
+    }),
+    outputSchema: object({
+      success: boolean(),
+      message: string()
+    })
+  }, async ({ channelId, messageTs }, requestInfo, _meta) => {
+    if (!requestInfo.agentId) {
+      return {
+        content: [{ type: "text", text: "Agent ID not found." }],
+        structuredContent: { success: false, message: "Agent ID not found." }
+      };
+    }
+    const agent = getAgentById(requestInfo.agentId);
+    if (!agent) {
+      return {
+        content: [{ type: "text", text: "Agent not found." }],
+        structuredContent: { success: false, message: "Agent not found." }
+      };
+    }
+    const decision = can({
+      principal: { kind: "agent", agentId: agent.id, isLead: agent.isLead },
+      verb: "integration.slack.delete",
+      resource: { kind: "none" },
+      source: "mcp"
+    });
+    if (!decision.allow) {
+      return {
+        content: [{ type: "text", text: "Deleting Slack messages requires lead privileges." }],
+        structuredContent: {
+          success: false,
+          message: "Deleting Slack messages requires lead privileges."
+        }
+      };
+    }
+    const app = getSlackApp();
+    if (!app) {
+      return {
+        content: [{ type: "text", text: "Slack not configured." }],
+        structuredContent: { success: false, message: "Slack not configured." }
+      };
+    }
+    try {
+      const ts = parseSlackTs(messageTs);
+      await app.client.chat.delete({ channel: channelId, ts });
+      return {
+        content: [{ type: "text", text: "Message deleted successfully." }],
+        structuredContent: { success: true, message: "Message deleted successfully." }
+      };
+    } catch (error) {
+      const errorCode = error?.data?.error;
+      const errorMsg = error instanceof Error ? error.message : String(error);
+      let message;
+      switch (errorCode) {
+        case "message_not_found":
+          message = "No message found at that timestamp in this channel.";
+          break;
+        case "cant_delete_message":
+          message = "Cannot delete this message — the bot can only delete messages it authored.";
+          break;
+        case "channel_not_found":
+          message = "Channel not found or the bot has no access.";
+          break;
+        case "not_in_channel":
+          message = "The bot is not in that channel.";
+          break;
+        default:
+          message = `Failed to delete message: ${errorMsg}`;
+      }
+      return {
+        content: [{ type: "text", text: message }],
+        structuredContent: { success: false, message }
+      };
+    }
+  });
+};
+
 // src/tools/slack-download-file.ts
 init_zod();
 init_db();
@@ -29415,7 +30344,13 @@ var registerSlackPostTool = (server) => {
         structuredContent: { success: false, message: "Agent not found." }
       };
     }
-    if (!agent.isLead) {
+    const decision = can({
+      principal: { kind: "agent", agentId: agent.id, isLead: agent.isLead },
+      verb: "integration.slack.post",
+      resource: { kind: "none" },
+      source: "mcp"
+    });
+    if (!decision.allow) {
       return {
         content: [{ type: "text", text: "Posting to Slack channels requires lead privileges." }],
         structuredContent: {
@@ -29575,7 +30510,13 @@ var registerSlackReadTool = (server) => {
       slackChannelId = task.slackChannelId;
       slackThreadTs = task.slackThreadTs;
     } else if (channelId) {
-      if (!agent.isLead) {
+      const decision = can({
+        principal: { kind: "agent", agentId: agent.id, isLead: agent.isLead },
+        verb: "integration.slack.read",
+        resource: { kind: "none" },
+        source: "mcp"
+      });
+      if (!decision.allow) {
         return {
           content: [{ type: "text", text: "Direct channel access requires lead privileges." }],
           structuredContent: {
@@ -29755,7 +30696,8 @@ var registerSlackReplyTool = (server) => {
     }),
     outputSchema: object({
       success: boolean(),
-      message: string()
+      message: string(),
+      messageTs: string().optional()
     })
   }, async ({ inboxMessageId, taskId, message }, requestInfo, _meta) => {
     if (!requestInfo.agentId) {
@@ -29827,7 +30769,7 @@ var registerSlackReplyTool = (server) => {
     }
     try {
       const slackMessage = markdownToSlack(message);
-      await withAutoJoin(app.client, slackChannelId, () => app.client.chat.postMessage({
+      const result = await withAutoJoin(app.client, slackChannelId, () => app.client.chat.postMessage({
         channel: slackChannelId,
         thread_ts: slackThreadTs,
         text: slackMessage,
@@ -29843,13 +30785,19 @@ var registerSlackReplyTool = (server) => {
           }
         ]
       }));
+      const messageTs = result.ts;
       if (taskId) {
         markTaskSlackReplySent(taskId);
         console.log(`[Slack] Marked slackReplySent=1 for task ${taskId}`);
       }
       return {
-        content: [{ type: "text", text: "Reply sent successfully." }],
-        structuredContent: { success: true, message: "Reply sent successfully." }
+        content: [
+          {
+            type: "text",
+            text: `Reply sent successfully.${messageTs ? ` Message timestamp: ${messageTs}` : ""}`
+          }
+        ],
+        structuredContent: { success: true, message: "Reply sent successfully.", messageTs }
       };
     } catch (error) {
       return {
@@ -29876,7 +30824,8 @@ var registerSlackStartThreadTool = (server) => {
       success: boolean(),
       message: string(),
       channelId: string().optional(),
-      ts: string().optional()
+      ts: string().optional(),
+      messageTs: string().optional()
     })
   }, async ({ channelId, message }, requestInfo, _meta) => {
     if (!requestInfo.agentId) {
@@ -29892,7 +30841,13 @@ var registerSlackStartThreadTool = (server) => {
         structuredContent: { success: false, message: "Agent not found." }
       };
     }
-    if (!agent.isLead) {
+    const decision = can({
+      principal: { kind: "agent", agentId: agent.id, isLead: agent.isLead },
+      verb: "integration.slack.thread.start",
+      resource: { kind: "none" },
+      source: "mcp"
+    });
+    if (!decision.allow) {
       return {
         content: [{ type: "text", text: "Posting to Slack channels requires lead privileges." }],
         structuredContent: {
@@ -29953,7 +30908,8 @@ var registerSlackStartThreadTool = (server) => {
           success: true,
           message: "Thread started successfully.",
           channelId: resolvedChannelId,
-          ts
+          ts,
+          messageTs: ts
         }
       };
     } catch (error) {
@@ -29966,6 +30922,116 @@ var registerSlackStartThreadTool = (server) => {
   });
 };
 
+// src/tools/slack-update.ts
+init_zod();
+init_db();
+var registerSlackUpdateTool = (server) => {
+  createToolRegistrar(server)("slack-update", {
+    title: "Edit a Slack message",
+    description: "Edits (in place) the text of a Slack message that THIS bot authored — use it to post corrections to your own messages. Cannot edit messages authored by humans or other apps. Note: editing may reset the message's display name/icon to the app default (Slack's chat.update cannot set the crown persona). Requires lead privileges.",
+    annotations: { openWorldHint: true },
+    inputSchema: object({
+      channelId: string().min(1).describe("The Slack channel ID the message is in."),
+      messageTs: string().min(1).describe("Timestamp of the message to edit (dotted, 'p' deep-link, or full permalink URL)."),
+      message: string().min(1).max(4000).describe("The new message content.")
+    }),
+    outputSchema: object({
+      success: boolean(),
+      message: string(),
+      messageTs: string().optional()
+    })
+  }, async ({ channelId, messageTs, message }, requestInfo, _meta) => {
+    if (!requestInfo.agentId) {
+      return {
+        content: [{ type: "text", text: "Agent ID not found." }],
+        structuredContent: { success: false, message: "Agent ID not found." }
+      };
+    }
+    const agent = getAgentById(requestInfo.agentId);
+    if (!agent) {
+      return {
+        content: [{ type: "text", text: "Agent not found." }],
+        structuredContent: { success: false, message: "Agent not found." }
+      };
+    }
+    const decision = can({
+      principal: { kind: "agent", agentId: agent.id, isLead: agent.isLead },
+      verb: "integration.slack.update",
+      resource: { kind: "none" },
+      source: "mcp"
+    });
+    if (!decision.allow) {
+      return {
+        content: [{ type: "text", text: "Editing Slack messages requires lead privileges." }],
+        structuredContent: {
+          success: false,
+          message: "Editing Slack messages requires lead privileges."
+        }
+      };
+    }
+    const app = getSlackApp();
+    if (!app) {
+      return {
+        content: [{ type: "text", text: "Slack not configured." }],
+        structuredContent: { success: false, message: "Slack not configured." }
+      };
+    }
+    try {
+      const ts = parseSlackTs(messageTs);
+      const slackMessage = markdownToSlack(message);
+      const result = await app.client.chat.update({
+        channel: channelId,
+        ts,
+        text: slackMessage,
+        blocks: [
+          {
+            type: "section",
+            text: {
+              type: "mrkdwn",
+              text: slackMessage
+            }
+          }
+        ]
+      });
+      return {
+        content: [{ type: "text", text: "Message updated successfully." }],
+        structuredContent: {
+          success: true,
+          message: "Message updated successfully.",
+          messageTs: result.ts
+        }
+      };
+    } catch (error) {
+      const errorCode = error?.data?.error;
+      const errorMsg = error instanceof Error ? error.message : String(error);
+      let message2;
+      switch (errorCode) {
+        case "message_not_found":
+          message2 = "No message found at that timestamp in this channel.";
+          break;
+        case "cant_update_message":
+          message2 = "Cannot edit this message — the bot can only edit messages it authored.";
+          break;
+        case "edit_window_closed":
+          message2 = "The edit window for this message has closed.";
+          break;
+        case "channel_not_found":
+          message2 = "Channel not found or the bot has no access.";
+          break;
+        case "not_in_channel":
+          message2 = "The bot is not in that channel.";
+          break;
+        default:
+          message2 = `Failed to update message: ${errorMsg}`;
+      }
+      return {
+        content: [{ type: "text", text: message2 }],
+        structuredContent: { success: false, message: message2 }
+      };
+    }
+  });
+};
+
 // src/tools/slack-upload-file.ts
 init_zod();
 init_db();
@@ -30087,7 +31153,13 @@ var registerSlackUploadFileTool = (server) => {
       slackChannelId = task.slackChannelId;
       slackThreadTs = resolveTaskUploadThreadTs(task);
     } else if (channelId) {
-      if (!agent.isLead) {
+      const decision = can({
+        principal: { kind: "agent", agentId: agent.id, isLead: agent.isLead },
+        verb: "integration.slack.upload",
+        resource: { kind: "none" },
+        source: "mcp"
+      });
+      if (!decision.allow) {
         return {
           content: [{ type: "text", text: "Direct channel access requires lead privileges." }],
           structuredContent: {
@@ -32308,24 +33380,25 @@ function parseNextPageLink(linkHeader) {
   const match = linkHeader.match(/<([^>]+)>;\s*rel="next"/);
   return match ? match[1] ?? null : null;
 }
-async function fetchReviewComments(repo, prNumber, reviewId, installationId) {
-  const token = await getInstallationToken(installationId);
-  if (!token) {
-    return [];
-  }
-  const headers = {
+var REVIEW_COMMENTS_EMPTY_RETRY_DELAYS_MS = [1500, 3000, 3000];
+var defaultReviewCommentsRetryDelay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var reviewCommentsRetryDelay = defaultReviewCommentsRetryDelay;
+function buildReviewCommentsHeaders(token) {
+  return {
     Accept: "application/vnd.github+json",
     Authorization: `Bearer ${token}`,
     "X-GitHub-Api-Version": "2022-11-28"
   };
+}
+async function fetchPaginatedReviewComments(initialUrl, headers) {
   const allComments = [];
-  let url = `https://api.github.com/repos/${repo}/pulls/${prNumber}/reviews/${reviewId}/comments?per_page=100`;
+  let url = initialUrl;
   try {
     while (url) {
       const response = await fetch(url, { headers });
       if (!response.ok) {
         console.error(`[GitHub] Failed to fetch review inline comments: ${response.status}`);
-        return allComments;
+        return { comments: allComments, degraded: true };
       }
       const page = await response.json();
       if (Array.isArray(page)) {
@@ -32333,11 +33406,66 @@ async function fetchReviewComments(repo, prNumber, reviewId, installationId) {
       }
       url = parseNextPageLink(response.headers.get("link"));
     }
-    return allComments;
+    return { comments: allComments, degraded: false };
   } catch (error) {
     console.error("[GitHub] Error fetching review inline comments:", error);
-    return allComments;
+    return { comments: allComments, degraded: true };
+  }
+}
+async function fetchReviewScopedComments(repo, prNumber, reviewId, headers) {
+  const url = `https://api.github.com/repos/${repo}/pulls/${prNumber}/reviews/${reviewId}/comments?per_page=100`;
+  let result = await fetchPaginatedReviewComments(url, headers);
+  if (result.degraded || result.comments.length > 0) {
+    return result;
   }
+  for (const delayMs of REVIEW_COMMENTS_EMPTY_RETRY_DELAYS_MS) {
+    await reviewCommentsRetryDelay(delayMs);
+    result = await fetchPaginatedReviewComments(url, headers);
+    if (result.degraded || result.comments.length > 0) {
+      return result;
+    }
+  }
+  return result;
+}
+async function fetchPrLevelReviewComments(repo, prNumber, reviewId, headers) {
+  const url = `https://api.github.com/repos/${repo}/pulls/${prNumber}/comments?per_page=100`;
+  const result = await fetchPaginatedReviewComments(url, headers);
+  return {
+    comments: result.comments.filter((comment) => comment.pull_request_review_id === reviewId),
+    degraded: result.degraded
+  };
+}
+function dedupeReviewComments(comments) {
+  const byId = new Map;
+  for (const comment of comments) {
+    if (!byId.has(comment.id)) {
+      byId.set(comment.id, comment);
+    }
+  }
+  return [...byId.values()];
+}
+async function fetchReviewComments(repo, prNumber, reviewId, installationId) {
+  const token = await getInstallationToken(installationId);
+  if (!token) {
+    return { comments: [], degraded: true };
+  }
+  const headers = buildReviewCommentsHeaders(token);
+  const scopedResult = await fetchReviewScopedComments(repo, prNumber, reviewId, headers);
+  if (!scopedResult.degraded && scopedResult.comments.length > 0) {
+    return scopedResult;
+  }
+  const fallbackResult = await fetchPrLevelReviewComments(repo, prNumber, reviewId, headers);
+  const mergedComments = dedupeReviewComments([
+    ...scopedResult.comments,
+    ...fallbackResult.comments
+  ]);
+  if (fallbackResult.comments.length > 0) {
+    return { comments: mergedComments, degraded: false };
+  }
+  return {
+    comments: mergedComments,
+    degraded: scopedResult.degraded || fallbackResult.degraded
+  };
 }
 function buildInlineCommentsSection(comments) {
   if (comments.length === 0)
@@ -32359,6 +33487,14 @@ ${items.join(`
 
 `)}`;
 }
+function buildInlineCommentsDegradedSection(repo, prNumber) {
+  return `
+
+## ⚠️ Inline comments could NOT be auto-fetched
+The automatic inline-comment fetch failed or was unverifiable while the reviewer submitted this review. Inline comments ARE the change requests. BEFORE scoping or dispatching this task you MUST fetch them yourself:
+\`gh api "repos/${repo}/pulls/${prNumber}/comments?per_page=100" --jq '.[] | {id,path,line,body}'\`
+Reply to and resolve EVERY unresolved inline thread. Do NOT dispatch off the review body alone.`;
+}
 async function handlePullRequestReview(event) {
   const { action, review, pull_request: pr, repository, sender, installation } = event;
   const requestedByUserId = resolveGitHubSender(sender.login, "pull_request_review", `Review on PR #${pr.number}: ${review.state}`);
@@ -32369,8 +33505,8 @@ async function handlePullRequestReview(event) {
   if (isDuplicate2(eventKey)) {
     return { created: false };
   }
-  const inlineComments = installation?.id ? await fetchReviewComments(repository.full_name, pr.number, review.id, installation.id) : [];
-  if (review.state === "commented" && !review.body && inlineComments.length === 0) {
+  const { comments: inlineComments, degraded } = installation?.id ? await fetchReviewComments(repository.full_name, pr.number, review.id, installation.id) : { comments: [], degraded: true };
+  if (review.state === "commented" && !review.body && inlineComments.length === 0 && !degraded) {
     return { created: false };
   }
   const existingTask = findTaskByVcs(repository.full_name, pr.number);
@@ -32384,13 +33520,13 @@ async function handlePullRequestReview(event) {
 
 Review Comment:
 ${review.body}` : "";
-  const inlineCommentsSection = buildInlineCommentsSection(inlineComments);
+  const inlineCommentsSection = buildInlineCommentsSection(inlineComments) + (degraded ? buildInlineCommentsDegradedSection(repository.full_name, pr.number) : "");
   const relatedTaskSection = existingTask ? `Related task: ${existingTask.id}
 \uD83D\uDD00 Consider routing to the same agent working on the related task.
 ` : "";
   const hasInlineComments = inlineComments.length > 0;
   const baseReviewSuggestion = review.state === "approved" ? "\uD83D\uDCA1 Suggested: Merge the PR or wait for additional reviews" : review.state === "changes_requested" ? "\uD83D\uDCA1 Suggested: Address the requested changes and update the PR" : "\uD83D\uDCA1 Suggested: Review the feedback and respond if needed";
-  const reviewSuggestions = hasInlineComments ? `${baseReviewSuggestion}
+  const reviewSuggestions = hasInlineComments || degraded ? `${baseReviewSuggestion}
 \uD83D\uDCAC Address EVERY inline comment. After pushing fixes, reply to and resolve each inline review thread on GitHub so the reviewer sees visible confirmation.` : baseReviewSuggestion;
   const result = resolveTemplate("github.pull_request.review_submitted", {
     review_emoji: emoji,
@@ -33171,7 +34307,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-va5mr9yw.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-es4nzc71.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -33240,7 +34376,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDb: getDb2 } = await import("./db-mjqc8hj6.js");
+  const { getDb: getDb2 } = await import("./db-bbgahh4z.js");
   const db = getDb2();
   const txn = db.transaction(() => {
     const row = db.query("SELECT metadata FROM oauth_apps WHERE provider = 'jira'").get();
@@ -107689,6 +108825,28 @@ var registerDeleteConfigTool = (server) => {
         }
       };
     }
+    const agent = getAgentById(requestInfo.agentId);
+    const decision = can({
+      principal: {
+        kind: "agent",
+        agentId: requestInfo.agentId,
+        isLead: agent?.isLead ?? false
+      },
+      verb: "config.delete.any",
+      resource: { kind: "none" },
+      source: "mcp"
+    });
+    if (!decision.allow) {
+      const message = "Deleting swarm config requires the lead agent.";
+      return {
+        content: [{ type: "text", text: message }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: false,
+          message
+        }
+      };
+    }
     try {
       const existing = getSwarmConfigLookupById(id);
       if (!existing) {
@@ -107781,8 +108939,27 @@ var registerGetConfigTool = (server) => {
       if (key) {
         configs = configs.filter((c) => c.key === key);
       }
-      const result = includeSecrets ? configs : maskSecrets(configs);
+      let effectiveIncludeSecrets = includeSecrets ?? false;
+      let secretsNote = "";
       if (includeSecrets) {
+        const agent = getAgentById(requestInfo.agentId);
+        const decision = can({
+          principal: {
+            kind: "agent",
+            agentId: requestInfo.agentId,
+            isLead: agent?.isLead ?? false
+          },
+          verb: "config.read.secrets",
+          resource: { kind: "none" },
+          source: "mcp"
+        });
+        if (!decision.allow) {
+          effectiveIncludeSecrets = false;
+          secretsNote = " (secret values masked: reading unmasked secrets requires the lead agent)";
+        }
+      }
+      const result = effectiveIncludeSecrets ? configs : maskSecrets(configs);
+      if (effectiveIncludeSecrets) {
         for (const c of result) {
           if (c.isSecret && c.value) {
             registerVolatileSecret(c.value, `config:${c.key}`);
@@ -107790,7 +108967,7 @@ var registerGetConfigTool = (server) => {
         }
       }
       const count = result.length;
-      const configList = count === 0 ? "No configs found." : result.map((c) => `- ${c.key}=${c.isSecret && !includeSecrets ? "********" : c.value} (scope: ${c.scope}${c.scopeId ? `, scopeId: ${c.scopeId}` : ""})`).join(`
+      const configList = count === 0 ? "No configs found." : result.map((c) => `- ${c.key}=${c.isSecret && !effectiveIncludeSecrets ? "********" : c.value} (scope: ${c.scope}${c.scopeId ? `, scopeId: ${c.scopeId}` : ""})`).join(`
 `);
       return {
         content: [
@@ -107798,13 +108975,13 @@ var registerGetConfigTool = (server) => {
             type: "text",
             text: count === 0 ? "No configs found." : `Found ${count} config(s):
 
-${configList}`
+${configList}${secretsNote}`
           }
         ],
         structuredContent: {
           yourAgentId: requestInfo.agentId,
           success: true,
-          message: count === 0 ? "No configs found." : `Found ${count} config(s).`,
+          message: count === 0 ? "No configs found." : `Found ${count} config(s).${secretsNote}`,
           configs: result,
           count
         }
@@ -107865,8 +109042,27 @@ var registerListConfigTool = (server) => {
         scopeId,
         key
       });
-      const result = includeSecrets ? configs : maskSecrets(configs);
+      let effectiveIncludeSecrets = includeSecrets ?? false;
+      let secretsNote = "";
       if (includeSecrets) {
+        const agent = getAgentById(requestInfo.agentId);
+        const decision = can({
+          principal: {
+            kind: "agent",
+            agentId: requestInfo.agentId,
+            isLead: agent?.isLead ?? false
+          },
+          verb: "config.read.secrets",
+          resource: { kind: "none" },
+          source: "mcp"
+        });
+        if (!decision.allow) {
+          effectiveIncludeSecrets = false;
+          secretsNote = " (secret values masked: reading unmasked secrets requires the lead agent)";
+        }
+      }
+      const result = effectiveIncludeSecrets ? configs : maskSecrets(configs);
+      if (effectiveIncludeSecrets) {
         for (const c of result) {
           if (c.isSecret && c.value) {
             registerVolatileSecret(c.value, `config:${c.key}`);
@@ -107874,7 +109070,7 @@ var registerListConfigTool = (server) => {
         }
       }
       const count = result.length;
-      const configList = count === 0 ? "No configs found." : result.map((c) => `- [${c.scope}${c.scopeId ? `:${c.scopeId}` : ""}] ${c.key}=${c.isSecret && !includeSecrets ? "********" : c.value}${c.description ? ` — ${c.description}` : ""}`).join(`
+      const configList = count === 0 ? "No configs found." : result.map((c) => `- [${c.scope}${c.scopeId ? `:${c.scopeId}` : ""}] ${c.key}=${c.isSecret && !effectiveIncludeSecrets ? "********" : c.value}${c.description ? ` — ${c.description}` : ""}`).join(`
 `);
       return {
         content: [
@@ -107882,13 +109078,13 @@ var registerListConfigTool = (server) => {
             type: "text",
             text: count === 0 ? "No configs found." : `Found ${count} config(s):
 
-${configList}`
+${configList}${secretsNote}`
           }
         ],
         structuredContent: {
           yourAgentId: requestInfo.agentId,
           success: true,
-          message: count === 0 ? "No configs found." : `Found ${count} config(s).`,
+          message: count === 0 ? "No configs found." : `Found ${count} config(s).${secretsNote}`,
           configs: result,
           count
         }
@@ -107972,7 +109168,17 @@ var registerSetConfigTool = (server) => {
       }
       if (key.toUpperCase() === CREDENTIAL_BINDINGS_CONFIG_KEY) {
         const agent = getAgentById(requestInfo.agentId);
-        if (!agent?.isLead) {
+        const decision = can({
+          principal: {
+            kind: "agent",
+            agentId: requestInfo.agentId,
+            isLead: agent?.isLead ?? false
+          },
+          verb: "config.credential-bindings.write",
+          resource: { kind: "none" },
+          source: "mcp"
+        });
+        if (!decision.allow) {
           const message = "Only the lead can manage SCRIPT_CREDENTIAL_BINDINGS. Use the credential-bindings tool.";
           return {
             content: [{ type: "text", text: message }],
@@ -107983,6 +109189,29 @@ var registerSetConfigTool = (server) => {
             }
           };
         }
+      } else {
+        const agent = getAgentById(requestInfo.agentId);
+        const decision = can({
+          principal: {
+            kind: "agent",
+            agentId: requestInfo.agentId,
+            isLead: agent?.isLead ?? false
+          },
+          verb: "config.write.any",
+          resource: { kind: "none" },
+          source: "mcp"
+        });
+        if (!decision.allow) {
+          const message = "Writing swarm config requires the lead agent.";
+          return {
+            content: [{ type: "text", text: message }],
+            structuredContent: {
+              yourAgentId: requestInfo.agentId,
+              success: false,
+              message
+            }
+          };
+        }
       }
       const validationError = validateConfigValue(key, value);
       if (validationError) {
@@ -108336,7 +109565,7 @@ async function taskActionHandler(ctx, input) {
       if (!existingTask) {
         return { success: false, message: `Task "${taskId}" not found.` };
       }
-      const ownershipError = assertOwnsTask(ctx, existingTask);
+      const ownershipError = assertOwnsTask(ctx, existingTask, "task.action.own");
       if (ownershipError)
         return ownershipError;
       if (action === "to_backlog") {
@@ -109072,7 +110301,13 @@ var registerUpdateProfileTool = (server) => {
           }
         };
       }
-      if (!callingAgent.isLead) {
+      const decision = can({
+        principal: { kind: "agent", agentId: callingAgent.id, isLead: callingAgent.isLead },
+        verb: "agent.profile.update.any",
+        resource: { kind: "agent", agentId: targetAgentId },
+        source: "mcp"
+      });
+      if (!decision.allow) {
         return {
           content: [
             {
@@ -109758,6 +110993,7 @@ var registerListWorkflowRunsTool = (server) => {
 // src/tools/workflows/list-workflows.ts
 init_zod();
 init_db();
+init_types();
 var registerListWorkflowsTool = (server) => {
   createToolRegistrar(server)("list-workflows", {
     title: "List Workflows",
@@ -109765,6 +111001,8 @@ var registerListWorkflowsTool = (server) => {
     description: "List all automation workflows, optionally filtered by enabled status. Returns SLIM rows WITHOUT the full `definition` (DAG) — each row carries a `nodeCount` instead. To inspect or patch a workflow's nodes/triggers, call `get-workflow` by id, or pass `includeFull: true` here.",
     inputSchema: exports_external.object({
       enabled: exports_external.boolean().optional().describe("Filter by enabled status (omit to return all)"),
+      consecutiveErrorsMin: exports_external.number().int().min(0).optional().describe("Only return workflows with at least this many latest consecutive failed runs."),
+      lastRunStatus: WorkflowRunStatusSchema.optional().describe("Only return workflows whose latest run has this status."),
       includeFull: exports_external.boolean().optional().describe("Return the full workflow `definition` + trigger config instead of slim rows. Default false — prefer `get-workflow` to fetch a single workflow in full.")
     }),
     outputSchema: exports_external.object({
@@ -109772,9 +111010,9 @@ var registerListWorkflowsTool = (server) => {
       message: exports_external.string(),
       workflows: exports_external.array(exports_external.unknown())
     })
-  }, async ({ enabled: enabled2, includeFull }) => {
+  }, async ({ enabled: enabled2, consecutiveErrorsMin, lastRunStatus, includeFull }) => {
     try {
-      const filters = enabled2 !== undefined ? { enabled: enabled2 } : undefined;
+      const filters = { enabled: enabled2, consecutiveErrorsMin, lastRunStatus };
       const workflows = includeFull ? listWorkflows(filters) : listWorkflows(filters, { slim: true });
       return {
         content: [{ type: "text", text: `Found ${workflows.length} workflow(s).` }],
@@ -110292,6 +111530,8 @@ function createServer() {
   registerSlackListChannelsTool(server);
   registerSlackUploadFileTool(server);
   registerSlackDownloadFileTool(server);
+  registerSlackDeleteTool(server);
+  registerSlackUpdateTool(server);
   registerRegisterAgentmailInboxTool(server);
   registerRegisterKapsoNumberTool(server);
   registerUnregisterKapsoNumberTool(server);
@@ -110322,6 +111562,7 @@ function createServer() {
     registerListSchedulesTool(server);
     registerCreateScheduleTool(server);
     registerUpdateScheduleTool(server);
+    registerPatchScheduleTool(server);
     registerDeleteScheduleTool(server);
     registerRunScheduleNowTool(server);
   }
@@ -110527,4 +111768,4 @@ function writeSkillsToFilesystem(entries, harnessType = "all", home) {
   return { synced, removed, errors };
 }
 
-export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, userCtx, isPollTracingEnabled, initOtel, withSpan, startSpan, withSpanContext, withRemoteContext, injectTraceContext, recordSessionCost, createToolRegistrar, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, setCorsHeaders, parseQueryParams, getPathSegments, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, describeRequestRoute, route, assertSelectOnlyQuery, executeReadOnlyQuery, handleDbQuery, snapshotMetric, snapshotPage, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, storeLinks, refreshLinks, canReadMemory, getLinksForMemory, recordRetrievals, expandCandidatesWithGraph, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, resolveHttpAuditUserId, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, sendTaskOutputSchema, sendTaskHandler, parseSkillContent, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, isInboxAllowed, isSenderAllowed, handleMessageReceived, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, canClaim, emitBudgetRefusalSideEffects, taskActionInputSchema, taskActionOutputSchema, taskActionHandler, hasCapability, getEnabledCapabilities, createServer, writeSkillsToFilesystem };
+export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, setAuditSink, clearAuditSink, can, userCtx, isPollTracingEnabled, initOtel, withSpan, startSpan, withSpanContext, withRemoteContext, injectTraceContext, recordSessionCost, createToolRegistrar, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, setCorsHeaders, parseQueryParams, getPathSegments, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, describeRequestRoute, route, assertSelectOnlyQuery, executeReadOnlyQuery, handleDbQuery, snapshotMetric, snapshotPage, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, storeLinks, refreshLinks, canReadMemory, getLinksForMemory, recordRetrievals, expandCandidatesWithGraph, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, resolveHttpAuditUserId, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, sendTaskOutputSchema, sendTaskHandler, parseSkillContent, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, isInboxAllowed, isSenderAllowed, handleMessageReceived, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, canClaim, emitBudgetRefusalSideEffects, taskActionInputSchema, taskActionOutputSchema, taskActionHandler, hasCapability, getEnabledCapabilities, createServer, writeSkillsToFilesystem };