@desplega.ai/agent-swarm 1.111.0 → 1.113.0

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "1.111.0",
+    "version": "1.113.0",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [
@@ -3468,6 +3468,100 @@
         }
       }
     },
+    "/api/favorites": {
+      "get": {
+        "summary": "List favorites for the authenticated user",
+        "tags": [
+          "Favorites"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "schema": {
+              "type": "string",
+              "enum": [
+                "page",
+                "workflow",
+                "schedule"
+              ]
+            },
+            "required": false,
+            "name": "itemType",
+            "in": "query"
+          },
+          {
+            "schema": {
+              "type": "string"
+            },
+            "required": false,
+            "name": "itemIds",
+            "in": "query"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Favorite rows and favorite item ids"
+          },
+          "401": {
+            "description": "No authenticated user context"
+          }
+        }
+      },
+      "put": {
+        "summary": "Set favorite state for an item",
+        "tags": [
+          "Favorites"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "itemType": {
+                    "type": "string",
+                    "enum": [
+                      "page",
+                      "workflow",
+                      "schedule"
+                    ]
+                  },
+                  "itemId": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "favorite": {
+                    "type": "boolean"
+                  }
+                },
+                "required": [
+                  "itemType",
+                  "itemId",
+                  "favorite"
+                ]
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Favorite state"
+          },
+          "401": {
+            "description": "No authenticated user context"
+          }
+        }
+      }
+    },
     "/api/fs/capabilities": {
       "get": {
         "summary": "Get active file-storage provider capabilities",
@@ -8881,6 +8975,30 @@
             "name": "hideCompleted",
             "in": "query"
           },
+          {
+            "schema": {
+              "type": [
+                "integer",
+                "null"
+              ],
+              "minimum": 0
+            },
+            "required": false,
+            "name": "consecutiveErrorsMin",
+            "in": "query"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "enum": [
+                "failed",
+                "succeeded"
+              ]
+            },
+            "required": false,
+            "name": "lastRunStatus",
+            "in": "query"
+          },
           {
             "schema": {
               "type": "string",
@@ -9026,7 +9144,10 @@
                     "type": "integer"
                   },
                   "targetAgentId": {
-                    "type": "string",
+                    "type": [
+                      "string",
+                      "null"
+                    ],
                     "format": "uuid"
                   },
                   "enabled": {
@@ -9036,7 +9157,10 @@
                     "type": "string"
                   },
                   "model": {
-                    "type": "string"
+                    "type": [
+                      "string",
+                      "null"
+                    ]
                   },
                   "modelTier": {
                     "type": [
@@ -9105,6 +9229,153 @@
           }
         }
       },
+      "patch": {
+        "summary": "Patch a schedule",
+        "description": "Partially updates a schedule by shallow-merging provided fields over the existing row.",
+        "tags": [
+          "Schedules"
+        ],
+        "security": [
+          {
+            "bearerAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "schema": {
+              "type": "string"
+            },
+            "required": true,
+            "name": "id",
+            "in": "path"
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "name": {
+                    "type": "string"
+                  },
+                  "description": {
+                    "type": "string"
+                  },
+                  "cronExpression": {
+                    "type": [
+                      "string",
+                      "null"
+                    ]
+                  },
+                  "intervalMs": {
+                    "type": [
+                      "integer",
+                      "null"
+                    ],
+                    "exclusiveMinimum": 0
+                  },
+                  "taskTemplate": {
+                    "type": "string"
+                  },
+                  "taskType": {
+                    "type": "string"
+                  },
+                  "tags": {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    }
+                  },
+                  "priority": {
+                    "type": "integer"
+                  },
+                  "targetAgentId": {
+                    "type": [
+                      "string",
+                      "null"
+                    ],
+                    "format": "uuid"
+                  },
+                  "enabled": {
+                    "type": "boolean"
+                  },
+                  "timezone": {
+                    "type": "string"
+                  },
+                  "model": {
+                    "type": [
+                      "string",
+                      "null"
+                    ]
+                  },
+                  "modelTier": {
+                    "type": [
+                      "string",
+                      "null"
+                    ],
+                    "enum": [
+                      "smol",
+                      "regular",
+                      "smart",
+                      "ultra",
+                      null
+                    ]
+                  },
+                  "nextRunAt": {
+                    "type": [
+                      "string",
+                      "null"
+                    ]
+                  },
+                  "targetType": {
+                    "type": "string",
+                    "enum": [
+                      "agent-task",
+                      "workflow",
+                      "script"
+                    ]
+                  },
+                  "workflowId": {
+                    "type": [
+                      "string",
+                      "null"
+                    ],
+                    "format": "uuid"
+                  },
+                  "scriptName": {
+                    "type": [
+                      "string",
+                      "null"
+                    ]
+                  },
+                  "scriptArgs": {
+                    "type": [
+                      "object",
+                      "null"
+                    ],
+                    "additionalProperties": {}
+                  }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Schedule patched"
+          },
+          "400": {
+            "description": "Validation error"
+          },
+          "404": {
+            "description": "Schedule not found"
+          },
+          "409": {
+            "description": "Duplicate name"
+          }
+        }
+      },
       "delete": {
         "summary": "Delete a schedule",
         "tags": [
@@ -15063,6 +15334,46 @@
           }
         ],
         "parameters": [
+          {
+            "schema": {
+              "type": "string",
+              "enum": [
+                "true",
+                "false"
+              ]
+            },
+            "required": false,
+            "name": "enabled",
+            "in": "query"
+          },
+          {
+            "schema": {
+              "type": [
+                "integer",
+                "null"
+              ],
+              "minimum": 0
+            },
+            "required": false,
+            "name": "consecutiveErrorsMin",
+            "in": "query"
+          },
+          {
+            "schema": {
+              "type": "string",
+              "enum": [
+                "running",
+                "waiting",
+                "completed",
+                "failed",
+                "skipped",
+                "cancelled"
+              ]
+            },
+            "required": false,
+            "name": "lastRunStatus",
+            "in": "query"
+          },
           {
             "schema": {
               "type": "string",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "1.111.0",
+  "version": "1.113.0",
   "description": "Multi-agent orchestration for Claude Code, Codex, Gemini CLI, and other AI coding assistants",
   "license": "MIT",
   "author": "desplega.sh <contact@desplega.sh>",
@@ -68,6 +68,7 @@
     "check:db-boundary": "bash scripts/check-db-boundary.sh",
     "check:dep-graph": "depcruise src plugin/opencode-plugins --config .dependency-cruiser.cjs",
     "check:api-key-boundary": "bash scripts/check-api-key-boundary.sh",
+    "check:rbac-coverage": "bun scripts/check-rbac-coverage.ts",
     "check:audit-columns": "bash scripts/check-audit-columns.sh",
     "lint:structure": "konsistent check",
     "prepare-release": "bun scripts/prepare-release.ts",
@@ -145,8 +146,8 @@
     "@inkjs/ui": "^2.0.0",
     "@linear/sdk": "^77.0.0",
     "@modelcontextprotocol/sdk": "^1.25.1",
-    "@openai/codex-sdk": "^0.142.5",
-    "@opencode-ai/sdk": "^1.17.13",
+    "@openai/codex-sdk": "^0.143.0",
+    "@opencode-ai/sdk": "^1.17.15",
     "@openfort/openfort-node": "^0.9.1",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/exporter-metrics-otlp-http": "^0.218.0",

package/src/be/db.ts

@@ -5740,6 +5740,8 @@ export interface ScheduledTaskFilters {
   targetType?: "agent-task" | "workflow" | "script";
   workflowId?: string;
   scriptName?: string;
+  consecutiveErrorsMin?: number;
+  lastRunStatus?: "failed" | "succeeded";
 }
 
 /**
@@ -5797,6 +5799,17 @@ export function getScheduledTasks(
     params.push(filters.scriptName);
   }
 
+  if (filters?.consecutiveErrorsMin !== undefined) {
+    query += " AND consecutiveErrors >= ?";
+    params.push(filters.consecutiveErrorsMin);
+  }
+
+  if (filters?.lastRunStatus === "failed") {
+    query += " AND consecutiveErrors > 0";
+  } else if (filters?.lastRunStatus === "succeeded") {
+    query += " AND lastRunAt IS NOT NULL AND consecutiveErrors = 0";
+  }
+
   if (filters?.hideCompleted !== false) {
     query += " AND NOT (scheduleType = 'one_time' AND enabled = 0)";
   }
@@ -7211,13 +7224,19 @@ function rowToWorkflowSummary(row: WorkflowRow): WorkflowSummary {
   };
 }
 
-export function listWorkflows(filters?: { enabled?: boolean }): Workflow[];
+export interface WorkflowFilters {
+  enabled?: boolean;
+  lastRunStatus?: WorkflowRunStatus;
+  consecutiveErrorsMin?: number;
+}
+
+export function listWorkflows(filters?: WorkflowFilters): Workflow[];
 export function listWorkflows(
-  filters: { enabled?: boolean } | undefined,
+  filters: WorkflowFilters | undefined,
   opts: { slim: true },
 ): WorkflowSummary[];
 export function listWorkflows(
-  filters?: { enabled?: boolean },
+  filters?: WorkflowFilters,
   opts?: { slim?: boolean },
 ): Workflow[] | WorkflowSummary[] {
   let query = "SELECT * FROM workflows WHERE 1=1";
@@ -7226,6 +7245,27 @@ export function listWorkflows(
     query += " AND enabled = ?";
     params.push(filters.enabled ? 1 : 0);
   }
+  if (filters?.lastRunStatus !== undefined) {
+    query +=
+      " AND (SELECT status FROM workflow_runs WHERE workflowId = workflows.id ORDER BY startedAt DESC LIMIT 1) = ?";
+    params.push(filters.lastRunStatus);
+  }
+  if (filters?.consecutiveErrorsMin !== undefined) {
+    query += ` AND (
+      SELECT COUNT(*)
+      FROM workflow_runs wr
+      WHERE wr.workflowId = workflows.id
+        AND wr.status = 'failed'
+        AND NOT EXISTS (
+          SELECT 1
+          FROM workflow_runs newer_non_failed
+          WHERE newer_non_failed.workflowId = wr.workflowId
+            AND newer_non_failed.status != 'failed'
+            AND newer_non_failed.startedAt > wr.startedAt
+        )
+    ) >= ?`;
+    params.push(filters.consecutiveErrorsMin);
+  }
   query += " ORDER BY lastUpdatedAt DESC";
   const rows = getDb()
     .prepare<WorkflowRow, (string | number)[]>(query)

package/src/be/memory/providers/sqlite-store.ts

@@ -234,7 +234,11 @@ export class SqliteMemoryStore implements MemoryStore {
   }
 
   private deleteFtsRows(ids: string[]): void {
-    if (ids.length === 0 || (!this.ftsInitialized && !this.getFtsTableSchema())) return;
+    // Always re-check the CURRENT db's schema instead of trusting
+    // ftsInitialized — the flag can outlive a DB swap (tests reinit the DB
+    // process-wide), and a stale `true` would make this DELETE throw
+    // "no such table: memory_fts". Mirrors the vec guard in purgeByIds.
+    if (ids.length === 0 || !this.getFtsTableSchema()) return;
     const db = getDb();
     const placeholders = ids.map(() => "?").join(",");
     db.prepare(`DELETE FROM memory_fts WHERE memory_id IN (${placeholders})`).run(...ids);

package/src/be/migrations/108_rbac_permission_audit.sql

@@ -0,0 +1,26 @@
+-- RBAC permission-audit trail (DES-445, slice 1 / increment 2).
+-- One row per can() authorization decision — allow AND deny — written by the
+-- async batched writer in src/be/rbac-audit.ts. Answers "which permission was
+-- missing, at which layer" without grepping logs. Rows are structured
+-- ids/verbs only (no payloads); retention GC purges rows older than
+-- RBAC_AUDIT_RETENTION_DAYS (default 30).
+-- originatorUserId is reserved for originating-user propagation (later
+-- increment); the slice-1 RbacCheck does not carry it yet.
+
+CREATE TABLE IF NOT EXISTS permission_audit (
+  id               TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
+  ts               TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  principalType    TEXT NOT NULL CHECK (principalType IN ('agent','user','operator')),
+  principalId      TEXT,
+  originatorUserId TEXT,
+  verb             TEXT NOT NULL,
+  resourceType     TEXT,
+  resourceId       TEXT,
+  decision         TEXT NOT NULL CHECK (decision IN ('allow','deny')),
+  reason           TEXT,
+  source           TEXT NOT NULL CHECK (source IN ('mcp','http'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_permission_audit_ts ON permission_audit(ts);
+CREATE INDEX IF NOT EXISTS idx_permission_audit_decision_ts ON permission_audit(decision, ts);
+CREATE INDEX IF NOT EXISTS idx_permission_audit_principal_ts ON permission_audit(principalId, ts);