@desplega.ai/agent-swarm 1.111.0 → 1.113.0

package/dist/{http-gs6fk9sg.js → http-2xz43gz3.js}

@@ -8,11 +8,13 @@ import {
   agentWithCapacity,
   applyRating,
   assertSelectOnlyQuery,
+  can,
   canClaim,
   canReadMemory,
   cancelTaskHandler,
   cancelTaskInputSchema,
   cancelTaskOutputSchema,
+  clearAuditSink,
   clearJiraMetadata,
   createEvent,
   createEventsBatch,
@@ -93,6 +95,7 @@ import {
   sendKapsoReaction,
   sendTaskHandler,
   sendTaskOutputSchema,
+  setAuditSink,
   setCorsHeaders,
   shouldPersistAutomaticTaskMemory,
   snapshotMetric,
@@ -111,7 +114,7 @@ import {
   withRemoteContext,
   withSpanContext,
   writeSkillsToFilesystem
-} from "./cli-dza5039b.js";
+} from "./cli-4xyj9jtq.js";
 import {
   BROWSER_SDK_JS,
   SWARM_UI_JS
@@ -144,11 +147,11 @@ import {
   getOAuthApp,
   getOAuthTokens,
   releaseOAuthRefreshLock
-} from "./cli-3cm8ar1c.js";
-import"./cli-ee3fkebs.js";
+} from "./cli-bgef578c.js";
+import"./cli-36ymmpmp.js";
 import {
   normalizeModelKey
-} from "./cli-6tfm5fr1.js";
+} from "./cli-tbw13sx8.js";
 import {
   SCRIPT_STDLIB_TYPES,
   ensureAgentFsCredentialsForAgent,
@@ -156,16 +159,16 @@ import {
   extractScriptSignature,
   scriptSdkTypesWithGeneratedApis,
   typecheckScript
-} from "./cli-fdnpymsv.js";
+} from "./cli-hsetkkd3.js";
 import {
   checkHeartbeatChecklist,
   runHeartbeatSweep,
   stopHeartbeat
-} from "./cli-t8m00q3b.js";
+} from "./cli-bnzbn8j8.js";
 import {
   createResumeFollowUp,
   createWorkerTaskFollowUp
-} from "./cli-gchg43wt.js";
+} from "./cli-r5g6ngtn.js";
 import"./cli-fad8m16k.js";
 import {
   calculateNextRun,
@@ -173,7 +176,7 @@ import {
   ensure,
   initialize,
   require_dist
-} from "./cli-r3y5chyg.js";
+} from "./cli-gtkqc144.js";
 import {
   RawLlmConfigSchema,
   TriggerSchemaError,
@@ -193,7 +196,7 @@ import {
   validateDefinition,
   validateJsonSchema,
   verifyHmacSignature
-} from "./cli-1aqc46he.js";
+} from "./cli-z46pnksz.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
@@ -214,10 +217,10 @@ import {
   rotateScriptApiSecret,
   updateScriptApi,
   upsertScriptByName
-} from "./cli-4f6vw5vy.js";
+} from "./cli-qwgtacd6.js";
 import {
   searchScripts
-} from "./cli-h3vhr1gj.js";
+} from "./cli-30bbaveh.js";
 import {
   CANDIDATE_SET_MULTIPLIER,
   getEmbeddingProvider,
@@ -225,19 +228,19 @@ import {
   init_constants,
   init_reranker,
   rerank
-} from "./cli-0d5xddf1.js";
+} from "./cli-f3qa069v.js";
 import"./cli-q25ejbyn.js";
-import"./cli-xqzvygxp.js";
+import"./cli-bgvskydy.js";
 import {
   getSlackApp,
   startSlackApp,
   stopSlackApp
-} from "./cli-f1f82qgv.js";
+} from "./cli-trmapn9k.js";
 import"./cli-rkndnn90.js";
 import"./cli-b0p7rfnd.js";
 import {
   recordUnmappedIdentity
-} from "./cli-2b0ew5v8.js";
+} from "./cli-c9mtm09b.js";
 import {
   findOrCreateUserByEmail,
   findUserByExternalId,
@@ -251,7 +254,7 @@ import {
   resolveUserByToken,
   revokeToken,
   unlinkIdentity
-} from "./cli-0d404x64.js";
+} from "./cli-h3k622d0.js";
 import"./cli-6xd0bvf8.js";
 import"./cli-wspgs9bt.js";
 import {
@@ -259,7 +262,7 @@ import {
   createTaskWithSiblingAwareness,
   gitlabContextKey,
   pageContextKey
-} from "./cli-aqr96mny.js";
+} from "./cli-y4ycrnjc.js";
 import {
   getAppUrl,
   getConfiguredAppUrls,
@@ -571,7 +574,7 @@ import {
   upsertSwarmConfig,
   validateConfigValue,
   withFavoriteFlags
-} from "./cli-4ke1amr9.js";
+} from "./cli-ncfgsqbd.js";
 import"./cli-z2zcxes1.js";
 import {
   init_zod
@@ -586,7 +589,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-kavm2cv5.js";
+} from "./cli-c3frqf65.js";
 import {
   init_secret_scrubber,
   registerVolatileSecret,
@@ -636,6 +639,146 @@ import {
 } from "node:http";
 init_db();
 
+// src/be/rbac-audit.ts
+init_db();
+var FLUSH_INTERVAL_MS = 2000;
+var FLUSH_MAX_ROWS = 200;
+var AUDIT_GC_INTERVAL_MS = 24 * 60 * 60 * 1000;
+var DEFAULT_RETENTION_DAYS = 30;
+var buffer = [];
+var flushTimer = null;
+var auditGcTimer = null;
+var thresholdFlushScheduled = false;
+function isAuditDisabled() {
+  return process.env.RBAC_AUDIT_DISABLED === "true";
+}
+function principalIdOf(principal) {
+  switch (principal.kind) {
+    case "agent":
+      return principal.agentId;
+    case "user":
+      return principal.userId;
+    case "operator":
+      return null;
+  }
+}
+function resourceIdOf(resource) {
+  if (!resource)
+    return null;
+  switch (resource.kind) {
+    case "task":
+      return resource.taskId;
+    case "agent":
+      return resource.agentId;
+    case "kv-namespace":
+      return resource.namespace;
+    case "owned":
+      return resource.ownerAgentId ?? null;
+    case "none":
+      return null;
+  }
+}
+function toRow(check, decision) {
+  return {
+    principalType: check.principal.kind,
+    principalId: principalIdOf(check.principal),
+    originatorUserId: null,
+    verb: check.verb,
+    resourceType: check.resource?.kind ?? null,
+    resourceId: resourceIdOf(check.resource),
+    decision: decision.allow ? "allow" : "deny",
+    reason: decision.allow ? null : decision.reason,
+    source: check.source
+  };
+}
+function enqueueAuditRow(check, decision) {
+  if (isAuditDisabled())
+    return;
+  try {
+    buffer.push(toRow(check, decision));
+    if (buffer.length >= FLUSH_MAX_ROWS && !thresholdFlushScheduled) {
+      thresholdFlushScheduled = true;
+      const t = setTimeout(() => {
+        thresholdFlushScheduled = false;
+        flushAuditBuffer();
+      }, 0);
+      if (typeof t.unref === "function")
+        t.unref();
+    }
+  } catch (err) {
+    console.warn("[rbac-audit] enqueue failed, dropping row:", err.message);
+  }
+}
+function flushAuditBuffer() {
+  if (buffer.length === 0)
+    return;
+  const rows = buffer;
+  buffer = [];
+  try {
+    const db = getDb();
+    const stmt = db.prepare(`INSERT INTO permission_audit
+         (principalType, principalId, originatorUserId, verb, resourceType, resourceId, decision, reason, source)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`);
+    const insertAll = db.transaction((batch) => {
+      for (const r of batch) {
+        stmt.run(r.principalType, r.principalId, r.originatorUserId, r.verb, r.resourceType, r.resourceId, r.decision, r.reason, r.source);
+      }
+    });
+    insertAll(rows);
+  } catch (err) {
+    console.warn(`[rbac-audit] flush failed, dropping ${rows.length} row(s):`, err.message);
+  }
+}
+function flushIntervalMs() {
+  const v = Number(process.env.RBAC_AUDIT_FLUSH_MS);
+  return Number.isFinite(v) && v > 0 ? v : FLUSH_INTERVAL_MS;
+}
+function startAuditWriter(intervalMs = flushIntervalMs()) {
+  if (flushTimer)
+    return;
+  flushTimer = setInterval(() => flushAuditBuffer(), intervalMs);
+  if (typeof flushTimer?.unref === "function")
+    flushTimer.unref();
+}
+function stopAuditWriter() {
+  if (flushTimer) {
+    clearInterval(flushTimer);
+    flushTimer = null;
+  }
+}
+function purgeExpiredAuditRows() {
+  try {
+    const days = Number(process.env.RBAC_AUDIT_RETENTION_DAYS) || DEFAULT_RETENTION_DAYS;
+    const result = getDb().prepare("DELETE FROM permission_audit WHERE ts < datetime('now', ?)").run(`-${days} days`);
+    return result.changes;
+  } catch (err) {
+    console.warn("[rbac-audit] retention purge failed:", err.message);
+    return 0;
+  }
+}
+function startAuditGc(intervalMs = AUDIT_GC_INTERVAL_MS) {
+  if (auditGcTimer)
+    return;
+  const purged = purgeExpiredAuditRows();
+  if (purged > 0) {
+    console.log(`[rbac-audit] Initial retention purge removed ${purged} audit row(s)`);
+  }
+  auditGcTimer = setInterval(() => {
+    const n = purgeExpiredAuditRows();
+    if (n > 0) {
+      console.log(`[rbac-audit] Retention purge removed ${n} audit row(s)`);
+    }
+  }, intervalMs);
+  if (typeof auditGcTimer?.unref === "function")
+    auditGcTimer.unref();
+}
+function stopAuditGc() {
+  if (auditGcTimer) {
+    clearInterval(auditGcTimer);
+    auditGcTimer = null;
+  }
+}
+
 // src/gitlab/auth.ts
 var initialized = false;
 var webhookSecret = null;
@@ -2845,12 +2988,35 @@ async function handleCodexOAuthKeepWarm(req, res, pathSegments) {
 init_zod();
 init_db();
 init_swarm_config_guard();
+init_request_auth_context();
 init_secret_scrubber();
 var MAX_ENV_PRESENCE_KEYS = 200;
 var API_ONLY_CONFIG_KEYS = new Set(["API_AGENT_FS_API_KEY"]);
 function stripApiOnlyKeys(configs) {
   return configs.filter((config) => !API_ONLY_CONFIG_KEYS.has(config.key));
 }
+function singleHeader(req, name) {
+  const raw = req.headers[name];
+  return Array.isArray(raw) ? raw[0] : raw;
+}
+function ensureConfigAdmin(req, res, verb) {
+  const auth = getRequestAuth(req);
+  if (auth?.kind === "operator" || auth?.kind === "user")
+    return true;
+  const agentId = singleHeader(req, "x-agent-id");
+  const agent = agentId ? getAgentById(agentId) : undefined;
+  const decision = can({
+    principal: { kind: "agent", agentId: agentId ?? "", isLead: agent?.isLead ?? false },
+    verb,
+    resource: { kind: "none" },
+    source: "http"
+  });
+  if (!decision.allow) {
+    jsonError(res, verb === "config.write.any" ? "Writing swarm config requires the lead agent" : "Deleting swarm config requires the lead agent", 403);
+    return false;
+  }
+  return true;
+}
 var getResolvedConfigRoute = route({
   method: "get",
   path: "/api/config/resolved",
@@ -2928,6 +3094,7 @@ var upsertConfig = route({
   pattern: ["api", "config"],
   summary: "Create or update a config entry (reserved env-only keys are rejected). Global-scope writes auto-trigger an integrations reload (debounced ~250ms) so Slack/GitHub/Linear/Jira/AgentMail pick up new credentials without an explicit /api/config/reload call.",
   tags: ["Config"],
+  rbac: { permission: "config.write.any" },
   body: exports_external.object({
     scope: exports_external.enum(["global", "agent", "repo"]),
     scopeId: exports_external.string().nullish(),
@@ -2948,6 +3115,7 @@ var deleteConfig = route({
   pattern: ["api", "config", null],
   summary: "Delete a config entry by ID (including legacy reserved rows for cleanup). Global-scope deletes auto-trigger an integrations reload.",
   tags: ["Config"],
+  rbac: { permission: "config.delete.any" },
   params: exports_external.object({ id: exports_external.string() }),
   responses: {
     200: { description: "Config deleted" },
@@ -3041,6 +3209,8 @@ async function handleConfig(req, res, pathSegments, queryParams) {
     const parsed = await upsertConfig.parse(req, res, pathSegments, queryParams);
     if (!parsed)
       return true;
+    if (!ensureConfigAdmin(req, res, "config.write.any"))
+      return true;
     const { scope, scopeId, key, value, isSecret, envPath, description } = parsed.body;
     if (scope === "global" && scopeId) {
       jsonError(res, "Global scope must not have scopeId", 400);
@@ -3084,6 +3254,8 @@ async function handleConfig(req, res, pathSegments, queryParams) {
     const parsed = await deleteConfig.parse(req, res, pathSegments, queryParams);
     if (!parsed)
       return true;
+    if (!ensureConfigAdmin(req, res, "config.delete.any"))
+      return true;
     const existing = getSwarmConfigLookupById(parsed.params.id);
     if (!existing) {
       jsonError(res, "Config not found", 404);
@@ -3420,6 +3592,7 @@ var putFavorite = route({
   pattern: ["api", "favorites"],
   summary: "Set favorite state for an item",
   tags: ["Favorites"],
+  rbac: { ungated: "self-scoped to the authenticated user; no cross-principal access" },
   body: exports_external.object({
     itemType: FavoriteItemTypeSchema,
     itemId: exports_external.string().min(1),
@@ -3985,7 +4158,8 @@ var uploadTaskFileRoute = route({
     404: { description: "Task not found" },
     413: { description: "Upload exceeds 50 MiB" }
   },
-  auth: { apiKey: true, agentId: true }
+  auth: { apiKey: true, agentId: true },
+  rbac: { permission: "task.fs.mutate" }
 });
 var getTaskFileRoute = route({
   method: "get",
@@ -4038,7 +4212,8 @@ var deleteTaskFileRoute = route({
     403: { description: "Caller cannot mutate this task" },
     404: { description: "Task or attachment not found" }
   },
-  auth: { apiKey: true, agentId: true }
+  auth: { apiKey: true, agentId: true },
+  rbac: { permission: "task.fs.mutate" }
 });
 async function handleFs(req, res, pathSegments, queryParams, myAgentId) {
   if (ensureAgentCredentialsRoute.match(req.method, pathSegments)) {
@@ -4138,7 +4313,7 @@ async function sendUpload(req, res, taskId, query, agentId) {
     return true;
   }
   const provider = getFileStorageProvider();
-  const contentType = singleHeader(req, "content-type") ?? "application/octet-stream";
+  const contentType = singleHeader2(req, "content-type") ?? "application/octet-stream";
   const scope = { taskId, name: query.name };
   let uploaded;
   try {
@@ -4273,31 +4448,39 @@ function findAttachment(taskId, attachmentId, res) {
   return attachment;
 }
 function canMutateTask(task, myAgentId, req) {
+  const resource = {
+    kind: "task",
+    taskId: task.id,
+    agentId: task.agentId,
+    creatorAgentId: task.creatorAgentId
+  };
   const auth = getRequestAuth(req);
-  if (auth?.kind === "operator")
-    return true;
-  if (auth?.kind === "user")
-    return true;
-  if (!myAgentId)
-    return false;
-  const agent = getAgentById(myAgentId);
-  if (agent?.isLead)
-    return true;
-  return task.agentId === myAgentId || task.creatorAgentId === myAgentId;
+  let principal;
+  if (auth?.kind === "operator") {
+    principal = { kind: "operator" };
+  } else if (auth?.kind === "user") {
+    principal = { kind: "user", userId: auth.userId };
+  } else {
+    if (!myAgentId)
+      return false;
+    const agent = getAgentById(myAgentId);
+    principal = { kind: "agent", agentId: myAgentId, isLead: agent?.isLead ?? false };
+  }
+  return can({ principal, verb: "task.fs.mutate", resource, source: "http" }).allow;
 }
 async function readRawBody(req, maxBytes) {
   const chunks = [];
   let total = 0;
   for await (const chunk of req) {
-    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-    total += buffer.byteLength;
+    const buffer2 = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+    total += buffer2.byteLength;
     if (total > maxBytes)
       return BODY_TOO_LARGE;
-    chunks.push(buffer);
+    chunks.push(buffer2);
   }
   return Buffer.concat(chunks);
 }
-function singleHeader(req, name) {
+function singleHeader2(req, name) {
   const raw = req.headers[name];
   return Array.isArray(raw) ? raw[0] : raw;
 }
@@ -4589,7 +4772,8 @@ var putKvHeader = route({
   tags: ["KV"],
   params: exports_external.object({ key: KvKeySchema }),
   body: kvSetBodySchema,
-  responses: RESPONSES_PUT
+  responses: RESPONSES_PUT,
+  rbac: { permission: "kv.write.any" }
 });
 var deleteKvHeader = route({
   method: "delete",
@@ -4603,7 +4787,8 @@ var deleteKvHeader = route({
     404: { description: "KV entry not found" },
     403: { description: "Caller may not write this namespace" },
     400: { description: "Validation error or unresolvable namespace" }
-  }
+  },
+  rbac: { permission: "kv.write.any" }
 });
 var incrKvHeader = route({
   method: "post",
@@ -4613,7 +4798,8 @@ var incrKvHeader = route({
   tags: ["KV"],
   params: exports_external.object({ key: KvKeySchema }),
   body: kvIncrBodySchema,
-  responses: RESPONSES_PUT
+  responses: RESPONSES_PUT,
+  rbac: { permission: "kv.write.any" }
 });
 var listKvHeader = route({
   method: "get",
@@ -4641,7 +4827,8 @@ var putKvExplicit = route({
   tags: ["KV"],
   params: exports_external.object({ namespace: KvNamespaceSchema, key: KvKeySchema }),
   body: kvSetBodySchema,
-  responses: RESPONSES_PUT
+  responses: RESPONSES_PUT,
+  rbac: { permission: "kv.write.any" }
 });
 var deleteKvExplicit = route({
   method: "delete",
@@ -4654,7 +4841,8 @@ var deleteKvExplicit = route({
     204: { description: "KV entry deleted" },
     404: { description: "KV entry not found" },
     403: { description: "Caller may not write this namespace" }
-  }
+  },
+  rbac: { permission: "kv.write.any" }
 });
 var incrKvExplicit = route({
   method: "post",
@@ -4664,7 +4852,8 @@ var incrKvExplicit = route({
   tags: ["KV"],
   params: exports_external.object({ namespace: KvNamespaceSchema, key: KvKeySchema }),
   body: kvIncrBodySchema,
-  responses: RESPONSES_PUT
+  responses: RESPONSES_PUT,
+  rbac: { permission: "kv.write.any" }
 });
 var listKvExplicit = route({
   method: "get",
@@ -4690,14 +4879,14 @@ function decodeKvSegment(res, raw, label) {
   }
   return decoded;
 }
-function singleHeader2(req, name) {
+function singleHeader3(req, name) {
   const raw = req.headers[name];
   if (raw === undefined)
     return;
   return Array.isArray(raw) ? raw[0] : raw;
 }
 function resolveNamespaceFromHeaders(req) {
-  const pageId = singleHeader2(req, "x-page-id");
+  const pageId = singleHeader3(req, "x-page-id");
   if (pageId) {
     try {
       return pageContextKey({ pageId });
@@ -4705,7 +4894,7 @@ function resolveNamespaceFromHeaders(req) {
       return null;
     }
   }
-  const sourceTaskId = singleHeader2(req, "x-source-task-id");
+  const sourceTaskId = singleHeader3(req, "x-source-task-id");
   if (sourceTaskId) {
     const task = getTaskById(sourceTaskId);
     if (task?.contextKey)
@@ -4716,7 +4905,7 @@ function resolveNamespaceFromHeaders(req) {
       } catch {}
     }
   }
-  const agentId = singleHeader2(req, "x-agent-id");
+  const agentId = singleHeader3(req, "x-agent-id");
   if (agentId) {
     try {
       return agentContextKey({ agentId });
@@ -4727,8 +4916,8 @@ function resolveNamespaceFromHeaders(req) {
   return null;
 }
 function buildAuthCtx(req) {
-  const callerAgentId = singleHeader2(req, "x-agent-id");
-  const pageId = singleHeader2(req, "x-page-id");
+  const callerAgentId = singleHeader3(req, "x-agent-id");
+  const pageId = singleHeader3(req, "x-page-id");
   let isLead = false;
   if (callerAgentId) {
     const agent = getAgentById(callerAgentId);
@@ -4744,12 +4933,16 @@ function authorizeWrite(namespace, ctx) {
     return null;
   }
   if (namespace.startsWith("task:agent:")) {
-    const target = namespace.slice("task:agent:".length);
-    if (ctx.callerAgentId && target === ctx.callerAgentId)
-      return null;
-    if (ctx.isLead)
-      return null;
-    return { status: 403, message: "writes to another agent's namespace require lead" };
+    const allowed = ctx.callerAgentId != null && can({
+      principal: { kind: "agent", agentId: ctx.callerAgentId, isLead: ctx.isLead },
+      verb: "kv.write.any",
+      resource: { kind: "kv-namespace", namespace },
+      source: "http"
+    }).allow;
+    if (!allowed) {
+      return { status: 403, message: "writes to another agent's namespace require lead" };
+    }
+    return null;
   }
   return null;
 }
@@ -4789,7 +4982,7 @@ function encodeValueOrError(res, value, valueType) {
   }
 }
 async function handleKv(req, res, pathSegments, queryParams) {
-  const hasPageHeader = singleHeader2(req, "x-page-id") !== undefined;
+  const hasPageHeader = singleHeader3(req, "x-page-id") !== undefined;
   if (hasPageHeader && pathSegments[0] === "api" && pathSegments[1] === "kv" && pathSegments[2] === "_") {
     pathSegments = [pathSegments[0], pathSegments[1], ...pathSegments.slice(4)];
   }
@@ -6286,6 +6479,7 @@ var SDK_TOOL_NAME_MAP = {
   schedule_list: "list-schedules",
   schedule_create: "create-schedule",
   schedule_update: "update-schedule",
+  schedule_patch: "patch-schedule",
   schedule_delete: "delete-schedule",
   schedule_runNow: "run-schedule-now",
   script_search: "script-search",
@@ -6314,6 +6508,8 @@ var SDK_TOOL_NAME_MAP = {
   slack_startThread: "slack-start-thread",
   slack_uploadFile: "slack-upload-file",
   slack_downloadFile: "slack-download-file",
+  slack_delete: "slack-delete",
+  slack_update: "slack-update",
   message_read: "read-messages",
   message_post: "post-message",
   profile_update: "update-profile",
@@ -11865,6 +12061,26 @@ init_zod();
 var import_cron_parser = __toESM(require_dist(), 1);
 init_db();
 init_types();
+var scheduleUpdateBodySchema = exports_external.object({
+  name: exports_external.string().optional(),
+  description: exports_external.string().optional(),
+  cronExpression: exports_external.string().nullable().optional(),
+  intervalMs: exports_external.number().int().positive().nullable().optional(),
+  taskTemplate: exports_external.string().optional(),
+  taskType: exports_external.string().optional(),
+  tags: exports_external.array(exports_external.string()).optional(),
+  priority: exports_external.number().int().optional(),
+  targetAgentId: exports_external.string().uuid().nullable().optional(),
+  enabled: exports_external.boolean().optional(),
+  timezone: exports_external.string().optional(),
+  model: exports_external.string().nullable().optional(),
+  modelTier: ModelTierSchema.nullable().optional(),
+  nextRunAt: exports_external.string().nullable().optional(),
+  targetType: ScheduledTaskTargetTypeSchema.optional(),
+  workflowId: exports_external.string().uuid().nullable().optional(),
+  scriptName: exports_external.string().nullable().optional(),
+  scriptArgs: exports_external.record(exports_external.string(), exports_external.unknown()).nullable().optional()
+});
 var createSchedule = route({
   method: "post",
   path: "/api/schedules",
@@ -11927,6 +12143,8 @@ var listSchedules = route({
     workflowId: exports_external.string().uuid().optional(),
     scriptName: exports_external.string().optional(),
     hideCompleted: exports_external.enum(["true", "false"]).optional().transform((v) => v === undefined ? undefined : v === "true"),
+    consecutiveErrorsMin: exports_external.coerce.number().int().min(0).optional(),
+    lastRunStatus: exports_external.enum(["failed", "succeeded"]).optional(),
     fields: exports_external.enum(["full", "slim"]).optional()
   }),
   responses: {
@@ -11952,26 +12170,7 @@ var updateSchedule = route({
   summary: "Update a schedule",
   tags: ["Schedules"],
   params: exports_external.object({ id: exports_external.string() }),
-  body: exports_external.object({
-    name: exports_external.string().optional(),
-    description: exports_external.string().optional(),
-    cronExpression: exports_external.string().nullable().optional(),
-    intervalMs: exports_external.number().int().positive().nullable().optional(),
-    taskTemplate: exports_external.string().optional(),
-    taskType: exports_external.string().optional(),
-    tags: exports_external.array(exports_external.string()).optional(),
-    priority: exports_external.number().int().optional(),
-    targetAgentId: exports_external.string().uuid().optional(),
-    enabled: exports_external.boolean().optional(),
-    timezone: exports_external.string().optional(),
-    model: exports_external.string().optional(),
-    modelTier: ModelTierSchema.nullable().optional(),
-    nextRunAt: exports_external.string().nullable().optional(),
-    targetType: ScheduledTaskTargetTypeSchema.optional(),
-    workflowId: exports_external.string().uuid().nullable().optional(),
-    scriptName: exports_external.string().nullable().optional(),
-    scriptArgs: exports_external.record(exports_external.string(), exports_external.unknown()).nullable().optional()
-  }),
+  body: scheduleUpdateBodySchema,
   responses: {
     200: { description: "Schedule updated" },
     400: { description: "Validation error" },
@@ -11979,6 +12178,25 @@ var updateSchedule = route({
     409: { description: "Duplicate name" }
   }
 });
+var patchSchedule = route({
+  method: "patch",
+  path: "/api/schedules/{id}",
+  pattern: ["api", "schedules", null],
+  summary: "Patch a schedule",
+  description: "Partially updates a schedule by shallow-merging provided fields over the existing row.",
+  tags: ["Schedules"],
+  params: exports_external.object({ id: exports_external.string() }),
+  body: scheduleUpdateBodySchema,
+  responses: {
+    200: { description: "Schedule patched" },
+    400: { description: "Validation error" },
+    404: { description: "Schedule not found" },
+    409: { description: "Duplicate name" }
+  },
+  rbac: {
+    ungated: "matches existing schedule update/delete posture: bearer-authenticated agents may manage schedules"
+  }
+});
 var deleteSchedule = route({
   method: "delete",
   path: "/api/schedules/{id}",
@@ -12003,7 +12221,9 @@ async function handleSchedules(req, res, pathSegments, queryParams, myAgentId) {
       targetType: parsed.query.targetType,
       workflowId: parsed.query.workflowId,
       scriptName: parsed.query.scriptName,
-      hideCompleted: parsed.query.hideCompleted
+      hideCompleted: parsed.query.hideCompleted,
+      consecutiveErrorsMin: parsed.query.consecutiveErrorsMin,
+      lastRunStatus: parsed.query.lastRunStatus
     };
     const schedules = parsed.query.fields === "full" ? getScheduledTasks(filters) : getScheduledTasks(filters, { slim: true });
     const userId = resolveHttpAuditUserId(req, myAgentId);
@@ -12178,8 +12398,9 @@ async function handleSchedules(req, res, pathSegments, queryParams, myAgentId) {
     json(res, decorated ?? schedule);
     return true;
   }
-  if (updateSchedule.match(req.method, pathSegments)) {
-    const parsed = await updateSchedule.parse(req, res, pathSegments, queryParams);
+  if (updateSchedule.match(req.method, pathSegments) || patchSchedule.match(req.method, pathSegments)) {
+    const routeHandle = updateSchedule.match(req.method, pathSegments) ? updateSchedule : patchSchedule;
+    const parsed = await routeHandle.parse(req, res, pathSegments, queryParams);
     if (!parsed)
       return true;
     const body = parsed.body;
@@ -12886,7 +13107,8 @@ var upsertRoute2 = route({
     200: { description: "Script upserted" },
     400: { description: "Validation or typecheck failure" },
     403: { description: "Global write requires lead agent" }
-  }
+  },
+  rbac: { permission: "script.global.write" }
 });
 var runRoute = route({
   method: "post",
@@ -12931,7 +13153,8 @@ var deleteRoute = route({
     200: { description: "Delete result" },
     400: { description: "Validation error" },
     403: { description: "Global delete requires lead agent" }
-  }
+  },
+  rbac: { permission: "script.global.delete" }
 });
 var typesRoute = route({
   method: "get",
@@ -13149,6 +13372,18 @@ async function handleScripts(req, res, pathSegments, queryParams, agentId) {
     const agent = requireAgent2(res, agentId);
     if (!agent)
       return true;
+    if (parsed.body.scope === "global") {
+      const decision = can({
+        principal: { kind: "agent", agentId: agent.id, isLead: agent.isLead },
+        verb: "script.global.write",
+        resource: { kind: "owned", scope: "global" },
+        source: "http"
+      });
+      if (!decision.allow) {
+        jsonError(res, "Global write requires lead agent", 403);
+        return true;
+      }
+    }
     const typecheck = typecheckScript(parsed.body.source, { agentId: agent.id });
     if (!typecheck.ok) {
       json(res, {
@@ -13404,6 +13639,18 @@ async function handleScripts(req, res, pathSegments, queryParams, agentId) {
     const agent = requireAgent2(res, agentId);
     if (!agent)
       return true;
+    if (parsed.query.scope === "global") {
+      const decision = can({
+        principal: { kind: "agent", agentId: agent.id, isLead: agent.isLead },
+        verb: "script.global.delete",
+        resource: { kind: "owned", scope: "global" },
+        source: "http"
+      });
+      if (!decision.allow) {
+        jsonError(res, "Global delete requires lead agent", 403);
+        return true;
+      }
+    }
     const deleted = deleteScript({
       name: parsed.params.name,
       scope: parsed.query.scope,
@@ -18024,6 +18271,9 @@ var listWorkflowsRoute = route({
   description: "Returns workflows WITHOUT the heavy `definition` (the full DAG) by default — the list view only needs a `nodeCount`, which is included. Pass `fields=full` to restore `definition` + trigger config. Fetch the full workflow via `GET /api/workflows/{id}`.",
   tags: ["Workflows"],
   query: exports_external.object({
+    enabled: exports_external.enum(["true", "false"]).optional().transform((v) => v === undefined ? undefined : v === "true"),
+    consecutiveErrorsMin: exports_external.coerce.number().int().min(0).optional(),
+    lastRunStatus: WorkflowRunStatusSchema.optional(),
     fields: exports_external.enum(["full", "slim"]).optional()
   }),
   responses: {
@@ -18340,10 +18590,15 @@ async function handleWorkflows(req, res, pathSegments, queryParams, myAgentId) {
     if (!parsed)
       return true;
     const userId = resolveHttpAuditUserId(req, myAgentId);
+    const filters = {
+      enabled: parsed.query.enabled,
+      consecutiveErrorsMin: parsed.query.consecutiveErrorsMin,
+      lastRunStatus: parsed.query.lastRunStatus
+    };
     if (parsed.query.fields === "full") {
-      json(res, withFavoriteFlags(listWorkflows(), { userId, itemType: "workflow" }));
+      json(res, withFavoriteFlags(listWorkflows(filters), { userId, itemType: "workflow" }));
     } else {
-      json(res, withFavoriteFlags(listWorkflows(undefined, { slim: true }), {
+      json(res, withFavoriteFlags(listWorkflows(filters, { slim: true }), {
         userId,
         itemType: "workflow"
       }));
@@ -19025,18 +19280,22 @@ async function shutdown() {
     sessionsProcessed: getServerSessionsProcessed()
   });
   if (hasCapability("scheduling")) {
-    const { stopScheduler } = await import("./index-20mf9wvc.js");
+    const { stopScheduler } = await import("./index-0gzmqj4k.js");
     stopScheduler();
   }
   stopHeartbeat();
   stopScriptRunSupervisor();
   await stopSlackApp();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { stopOAuthKeepalive } = await import("./keepalive-3gvnbxaj.js");
+    const { stopOAuthKeepalive } = await import("./keepalive-62gfj91d.js");
     await stopOAuthKeepalive();
   }
   stopMcpOAuthPendingGc();
   stopMemoryGc();
+  stopAuditGc();
+  stopAuditWriter();
+  flushAuditBuffer();
+  clearAuditSink();
   if (globalState.__apiGcInterval) {
     clearInterval(globalState.__apiGcInterval);
     delete globalState.__apiGcInterval;
@@ -19085,19 +19344,22 @@ try {
   throw err;
 }
 try {
-  const { seedPricingFromModelsDev } = await import("./seed-pricing-7yfaf123.js");
+  const { seedPricingFromModelsDev } = await import("./seed-pricing-1r1y1xkq.js");
   seedPricingFromModelsDev();
-  const { startPricingRefreshLoop } = await import("./pricing-refresh-rat240yg.js");
+  const { startPricingRefreshLoop } = await import("./pricing-refresh-cgtkffpa.js");
   startPricingRefreshLoop();
 } catch (err) {
   console.error("[startup] Failed to seed pricing rows:", err);
 }
 try {
-  const { runAllSeeders } = await import("./index-6zpajd9e.js");
+  const { runAllSeeders } = await import("./index-vfedgdw6.js");
   await runAllSeeders({ scriptEmbeddingMode: "skip" });
 } catch (err) {
   console.error("[startup] Failed to seed built-in entities:", err);
 }
+setAuditSink(enqueueAuditRow);
+startAuditWriter();
+startAuditGc();
 initialize();
 await initOtel("api");
 httpServer.listen(port, async () => {
@@ -19126,31 +19388,31 @@ httpServer.listen(port, async () => {
   initWorkflows();
   startScriptRunSupervisor(getMcpBaseUrl());
   if (hasCapability("scheduling")) {
-    const { startScheduler } = await import("./index-20mf9wvc.js");
-    const { getExecutorRegistry: getExecutorRegistry2 } = await import("./index-w15fk28m.js");
+    const { startScheduler } = await import("./index-0gzmqj4k.js");
+    const { getExecutorRegistry: getExecutorRegistry2 } = await import("./index-5ghxn8s6.js");
     const intervalMs = Number(process.env.SCHEDULER_INTERVAL_MS) || 1e4;
     startScheduler(getExecutorRegistry2(), intervalMs, {
       runId: globalState.__runId
     });
   }
   if (process.env.HEARTBEAT_DISABLE !== "true") {
-    const { startHeartbeat } = await import("./index-744yvc8x.js");
+    const { startHeartbeat } = await import("./index-nhat35em.js");
     const heartbeatMs = Number(process.env.HEARTBEAT_INTERVAL_MS) || 90000;
     startHeartbeat(heartbeatMs);
   }
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { startOAuthKeepalive } = await import("./keepalive-3gvnbxaj.js");
+    const { startOAuthKeepalive } = await import("./keepalive-62gfj91d.js");
     startOAuthKeepalive();
   }
   startMcpOAuthPendingGc();
   startMemoryGc();
-  import("./boot-reembed-0t815mmm.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+  import("./boot-reembed-p0ny05t8.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
     console.error("[boot-reembed] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-reembed-50zzk97q.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+  import("./boot-reembed-69agkhv6.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
     console.error("[boot-reembed-scripts] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-scrub-logs-r99nbmxh.js").then(({ runBootScrubLogs }) => runBootScrubLogs()).catch((err) => {
+  import("./boot-scrub-logs-yybrkmvr.js").then(({ runBootScrubLogs }) => runBootScrubLogs()).catch((err) => {
     console.error("[boot-scrub-logs] startup scrub failed (non-fatal):", err);
   });
 }).on("error", (err) => {