@desplega.ai/agent-swarm 1.112.0 → 1.114.0

package/README.md

@@ -129,7 +129,7 @@ Check [our templates](https://templates.agent-swarm.dev) for a quick start.
 - **Scheduled & recurring tasks** — cron-based automation for standing work, with schedules that can target agent tasks, workflows, or catalog scripts. [Scheduling →](https://docs.agent-swarm.dev/docs/concepts/scheduling)
 - **Durable script workflows** — launch background script runs, inspect their journals, and track them from the dashboard when a one-shot `script-run` is too small. [Guide →](https://docs.agent-swarm.dev/docs/guides/script-workflow-runs)
 - **Scripts as external APIs** — expose a saved script as a public `POST /api/x/script/<id>` endpoint with optional bearer auth, typed input validation, and per-endpoint usage tracking. [Guide →](https://docs.agent-swarm.dev/docs/guides/scripts-external-apis)
-- **Typed script API connections** — lead-managed OpenAPI connections let scripts call approved external APIs through generated `ctx.api.*` clients while credential bindings keep raw secrets out of source and args. [Guide →](https://docs.agent-swarm.dev/docs/guides/scripts-credential-broker)
+- **Typed script API connections** — lead-managed OpenAPI, GraphQL, and MCP connections generate `ctx.api.*` / `ctx.mcp.*` clients for scripts, with credential bindings and OAuth-backed auth kept server-side. [Guide →](https://docs.agent-swarm.dev/docs/guides/script-connections)
 - **E2B-backed eval harness** — run a scenario × harness-config matrix against real swarm stacks, capture transcripts/artifacts, and grade outcomes with deterministic checks plus LLM or agentic judges. [Guide →](https://docs.agent-swarm.dev/docs/guides/evals-harness)
 - **Harness & LLM agnostic** — run with Claude Code, Claude Bridge, OpenAI Codex, pi-mono (Anthropic, OpenRouter, or Amazon Bedrock), Devin, Claude Managed Agents, raw LLMs, or opencode. Tasks, schedules, and workflow agent-task nodes can use portable `modelTier` intent (`smol`, `regular`, `smart`, `ultra`), and operators can set per-agent reasoning effort (`off` → `xhigh`) without changing task payloads. [Harness config →](https://docs.agent-swarm.dev/docs/guides/harness-configuration) · [Add a new provider →](https://docs.agent-swarm.dev/docs/guides/harness-providers)
 - **OpenTelemetry traces plus OTLP cost/token metrics** — export API + worker traces and finalized session cost/token counters through the same OTLP pipeline for dashboarding in SigNoz, Datadog, Tempo, or another compatible backend. [Observability →](https://docs.agent-swarm.dev/docs/guides/observability-opentelemetry)
@@ -137,7 +137,7 @@ Check [our templates](https://templates.agent-swarm.dev) for a quick start.
 - **Skills & MCP servers** — reusable procedural knowledge, bundled skill reference files, and per-agent MCP servers with scope cascade. [MCP tools →](https://docs.agent-swarm.dev/docs/reference/mcp-tools)
 - **External tool-router access** — the `x` command and `swarm_x` MCP tool let humans and agents execute approved third-party routes such as Composio without baking bespoke MCP servers first. [CLI →](https://docs.agent-swarm.dev/docs/reference/cli) · [Composio →](https://docs.agent-swarm.dev/docs/integrations/composio)
 - **Config-driven metrics dashboards** — define read-only SQL widgets, version them, and render them in the dashboard without shipping custom frontend code. [Metrics API →](https://docs.agent-swarm.dev/docs/api-reference/stats)
-- **DB-backed pages** — agents publish HTML or JSON pages (reports, dashboards, action specs) via the `create_page` MCP tool with public / authed / password modes, version history, view counters, diff helpers, and PDF export. [MCP tools → Pages](https://docs.agent-swarm.dev/docs/reference/mcp-tools#pages-tools)
+- **DB-backed pages** — agents publish HTML or JSON pages (reports, dashboards, action specs) via `create_page`, remove stale pages with `delete-page`, and share them with public / authed / password modes, version history, view counters, diff helpers, and PDF export. [MCP tools → Pages](https://docs.agent-swarm.dev/docs/reference/mcp-tools#pages-tools)
 - **KV store** — Redis-like namespaced key/value store with auto-scoped context (Slack thread / PR / Linear issue / page). [MCP tools → KV](https://docs.agent-swarm.dev/docs/reference/mcp-tools#kv-tools)
 - **Real-time dashboard + task attachments** — monitor agents, tasks, and inter-agent chat, create tasks with uploaded files from the sessions composer, and preview task attachments inline above session prompts. [app.agent-swarm.dev →](https://app.agent-swarm.dev)
 

package/dist/{actions-eckb4g8r.js → actions-bm8vdxys.js}

@@ -1,8 +1,7 @@
 import {
   resolveSlackUserId
-} from "./cli-30d2ct3k.js";
-import"./cli-9p0qhead.js";
-import"./cli-7xkwgkrs.js";
+} from "./cli-w4wk3kx6.js";
+import"./cli-113wmegp.js";
 import {
   buildCancelledBlocks,
   getTaskLink
@@ -11,7 +10,7 @@ import"./cli-wspgs9bt.js";
 import {
   createTaskWithSiblingAwareness,
   slackContextKey
-} from "./cli-0c3n0eba.js";
+} from "./cli-312v3c41.js";
 import"./cli-dh55d5fg.js";
 import {
   cancelTask,
@@ -19,11 +18,11 @@ import {
   getLeadAgent,
   getTaskById,
   init_db
-} from "./cli-951w7c79.js";
+} from "./cli-jzwtn8rm.js";
 import"./cli-z2zcxes1.js";
-import"./cli-q21d49ac.js";
-import"./cli-anrj584m.js";
-import"./cli-8f0dwca2.js";
+import"./cli-bw80ck94.js";
+import"./cli-xz9aq0rf.js";
+import"./cli-f5pzfvwb.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 

package/dist/{app-b05sgm02.js → app-bhwdxmvp.js}

@@ -3,17 +3,17 @@ import {
   initSlackApp,
   startSlackApp,
   stopSlackApp
-} from "./cli-hm27prrc.js";
+} from "./cli-hq39e630.js";
 import"./cli-rkndnn90.js";
 import"./cli-b0p7rfnd.js";
 import"./cli-6xd0bvf8.js";
 import"./cli-wspgs9bt.js";
 import"./cli-dh55d5fg.js";
-import"./cli-951w7c79.js";
+import"./cli-jzwtn8rm.js";
 import"./cli-z2zcxes1.js";
-import"./cli-q21d49ac.js";
-import"./cli-anrj584m.js";
-import"./cli-8f0dwca2.js";
+import"./cli-bw80ck94.js";
+import"./cli-xz9aq0rf.js";
+import"./cli-f5pzfvwb.js";
 import"./cli-4j2mrzag.js";
 import"./cli-e15jhafb.js";
 import"./cli-7wmybrt5.js";

package/dist/{assistant-7255sbyw.js → assistant-15mp2apr.js}

@@ -1,26 +1,26 @@
 import {
   bufferThreadMessage,
   wasEventSeen
-} from "./cli-h9jx5mag.js";
+} from "./cli-5afkmcfj.js";
 import {
   hasOtherUserMention
-} from "./cli-76d1vtvq.js";
+} from "./cli-5ktc9fd4.js";
 import {
   require_dist
-} from "./cli-hm27prrc.js";
+} from "./cli-hq39e630.js";
 import"./cli-rkndnn90.js";
 import"./cli-b0p7rfnd.js";
 import {
-  resolveSlackUserId
-} from "./cli-30d2ct3k.js";
-import"./cli-9p0qhead.js";
-import"./cli-7xkwgkrs.js";
+  resolveSlackUserId,
+  rewriteSlackMentions
+} from "./cli-w4wk3kx6.js";
+import"./cli-113wmegp.js";
 import"./cli-6xd0bvf8.js";
 import"./cli-wspgs9bt.js";
 import {
   createTaskWithSiblingAwareness,
   slackContextKey
-} from "./cli-0c3n0eba.js";
+} from "./cli-312v3c41.js";
 import"./cli-dh55d5fg.js";
 import {
   getAgentWorkingOnThread,
@@ -29,11 +29,11 @@ import {
   init_db,
   init_resolver,
   resolveTemplate
-} from "./cli-951w7c79.js";
+} from "./cli-jzwtn8rm.js";
 import"./cli-z2zcxes1.js";
-import"./cli-q21d49ac.js";
-import"./cli-anrj584m.js";
-import"./cli-8f0dwca2.js";
+import"./cli-bw80ck94.js";
+import"./cli-xz9aq0rf.js";
+import"./cli-f5pzfvwb.js";
 import"./cli-4j2mrzag.js";
 import"./cli-e15jhafb.js";
 import"./cli-7wmybrt5.js";
@@ -95,6 +95,7 @@ function createAssistant() {
         const channelId = message.channel;
         const messageText = msg.text || "";
         const userId = msg.user || "";
+        const renderedMessageText = rewriteSlackMentions(messageText);
         if (!cachedBotUserId) {
           try {
             const authResult = await client.auth.test();
@@ -122,7 +123,7 @@ function createAssistant() {
             return;
           }
           const latestTask = getMostRecentTaskInThread(channelId, threadTs);
-          createTaskWithSiblingAwareness(messageText, {
+          createTaskWithSiblingAwareness(renderedMessageText, {
             agentId: workingAgent.id,
             source: "slack",
             slackChannelId: channelId,
@@ -136,8 +137,8 @@ function createAssistant() {
           return;
         }
         await safeSetStatus("Processing your request...");
-        if (messageText) {
-          const title = messageText.length > 50 ? `${messageText.slice(0, 47)}...` : messageText;
+        if (renderedMessageText) {
+          const title = renderedMessageText.length > 50 ? `${renderedMessageText.slice(0, 47)}...` : renderedMessageText;
           await safeSetTitle(title);
         }
         const ctx = await getThreadContext();
@@ -146,7 +147,7 @@ function createAssistant() {
 [User is viewing channel <#${ctx.channel_id}>]` : "";
         const lead = getLeadAgent();
         if (!lead) {
-          createTaskWithSiblingAwareness(messageText + channelContext, {
+          createTaskWithSiblingAwareness(renderedMessageText + channelContext, {
             source: "slack",
             slackChannelId: channelId,
             slackThreadTs: threadTs,
@@ -158,7 +159,7 @@ function createAssistant() {
           await say(offlineResult.text);
           return;
         }
-        createTaskWithSiblingAwareness(messageText + channelContext, {
+        createTaskWithSiblingAwareness(renderedMessageText + channelContext, {
           agentId: lead.id,
           source: "slack",
           slackChannelId: channelId,

package/dist/{boot-reembed-y1bt3ttn.js → boot-reembed-awr2179r.js}

@@ -1,17 +1,17 @@
 import {
   embedScript,
   embeddingProvider
-} from "./cli-s9pj3c7z.js";
-import"./cli-709t753c.js";
+} from "./cli-f9n2jg31.js";
+import"./cli-byjcad11.js";
 import"./cli-q25ejbyn.js";
 import {
   getDb,
   init_db
-} from "./cli-951w7c79.js";
+} from "./cli-jzwtn8rm.js";
 import"./cli-z2zcxes1.js";
-import"./cli-q21d49ac.js";
-import"./cli-anrj584m.js";
-import"./cli-8f0dwca2.js";
+import"./cli-bw80ck94.js";
+import"./cli-xz9aq0rf.js";
+import"./cli-f5pzfvwb.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 

package/dist/{boot-reembed-yv7awg4y.js → boot-reembed-b9sbk87z.js}

@@ -3,16 +3,16 @@ import {
   getEmbeddingProvider,
   getMemoryStore,
   init_constants
-} from "./cli-709t753c.js";
+} from "./cli-byjcad11.js";
 import"./cli-q25ejbyn.js";
 import {
   getDb,
   init_db
-} from "./cli-951w7c79.js";
+} from "./cli-jzwtn8rm.js";
 import"./cli-z2zcxes1.js";
-import"./cli-q21d49ac.js";
-import"./cli-anrj584m.js";
-import"./cli-8f0dwca2.js";
+import"./cli-bw80ck94.js";
+import"./cli-xz9aq0rf.js";
+import"./cli-f5pzfvwb.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 

package/dist/{boot-scrub-logs-ddyaeqar.js → boot-scrub-logs-c1zsaw9m.js}

@@ -1,11 +1,11 @@
 import {
   getDb,
   init_db
-} from "./cli-951w7c79.js";
+} from "./cli-jzwtn8rm.js";
 import"./cli-z2zcxes1.js";
-import"./cli-q21d49ac.js";
-import"./cli-anrj584m.js";
-import"./cli-8f0dwca2.js";
+import"./cli-bw80ck94.js";
+import"./cli-xz9aq0rf.js";
+import"./cli-f5pzfvwb.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{claude-adapter-mma9a1yr.js → claude-adapter-2k45y7p7.js}

@@ -12,9 +12,9 @@ import {
   resolveClaudeBinary,
   resolveClaudeBinaryArgv,
   resolveClaudeBridgeEnabled
-} from "./cli-2fc97xm5.js";
-import"./cli-psrqtw2m.js";
+} from "./cli-ggy8c7tk.js";
 import"./cli-tng3131n.js";
+import"./cli-psrqtw2m.js";
 import"./cli-zm7njwzd.js";
 import"./cli-tghre7g6.js";
 import"./cli-tkmm5nf9.js";

package/dist/{claude-managed-adapter-pv2nbqy4.js → claude-managed-adapter-kysmkz89.js}

@@ -3,10 +3,10 @@ import {
   checkClaudeManagedCredentials,
   composeManagedUserMessage,
   normalizeRepoUrl
-} from "./cli-2r7s8jhp.js";
+} from "./cli-sznberje.js";
 import"./cli-07er7wrs.js";
-import"./cli-yv9dttkh.js";
 import"./cli-d6n0thxw.js";
+import"./cli-yv9dttkh.js";
 import"./cli-gz9sbyk3.js";
 import"./cli-tghre7g6.js";
 import"./cli-4j2mrzag.js";

package/dist/cli-0kgcv878.js

@@ -0,0 +1,344 @@
+import {
+  init_zod
+} from "./cli-bw80ck94.js";
+import {
+  _enum
+} from "./cli-xz9aq0rf.js";
+
+// src/rbac/permissions.ts
+init_zod();
+var PERMISSIONS = {
+  "user.manage": {
+    description: "Create, update, or deactivate user profiles.",
+    namespace: "user"
+  },
+  "agent.profile.update.any": {
+    description: "Update another agent's profile.",
+    namespace: "agent"
+  },
+  "agent.context.read.any": {
+    description: "View or diff another agent's context history.",
+    namespace: "agent"
+  },
+  "task.cancel.any": {
+    description: "Cancel any task (beyond tasks the caller created).",
+    namespace: "task"
+  },
+  "task.read.own": {
+    description: "Read details of a task the principal requested.",
+    namespace: "task"
+  },
+  "task.cancel.own": {
+    description: "Cancel a task the principal requested.",
+    namespace: "task"
+  },
+  "task.action.own": {
+    description: "Run actions (follow-up, retry, ...) on a task the principal requested.",
+    namespace: "task"
+  },
+  "task.fs.mutate": {
+    description: "Mutate a task's filesystem artifacts and attachments.",
+    namespace: "task"
+  },
+  "memory.learning.inject": {
+    description: "Inject a learning into another agent's memory.",
+    namespace: "memory"
+  },
+  "memory.delete.any": {
+    description: "Delete a memory entry (own entries, or swarm-scoped entries as lead).",
+    namespace: "memory"
+  },
+  "channel.delete": {
+    description: "Delete a Slack channel.",
+    namespace: "channel"
+  },
+  "integration.kapso.manage": {
+    description: "Register or unregister a Kapso inbound number.",
+    namespace: "integration"
+  },
+  "integration.slack.post": {
+    description: "Post to a direct Slack channel.",
+    namespace: "integration"
+  },
+  "integration.slack.read": {
+    description: "Read a direct Slack channel.",
+    namespace: "integration"
+  },
+  "integration.slack.thread.start": {
+    description: "Start a thread in a direct Slack channel.",
+    namespace: "integration"
+  },
+  "integration.slack.upload": {
+    description: "Upload a file to a direct Slack channel.",
+    namespace: "integration"
+  },
+  "integration.slack.delete": {
+    description: "Delete a Slack message.",
+    namespace: "integration"
+  },
+  "integration.slack.update": {
+    description: "Update (edit) a Slack message.",
+    namespace: "integration"
+  },
+  "credential-binding.manage": {
+    description: "Manage script credential bindings.",
+    namespace: "credential-binding"
+  },
+  "script-connection.manage": {
+    description: "Manage script connections.",
+    namespace: "script-connection"
+  },
+  "script-connection.invoke": {
+    description: "Invoke a script MCP connection through the server-side proxy.",
+    namespace: "script-connection"
+  },
+  "config.credential-bindings.write": {
+    description: "Write the SCRIPT_CREDENTIAL_BINDINGS swarm-config key.",
+    namespace: "config"
+  },
+  "config.write.any": {
+    description: "Write any swarm-config key.",
+    namespace: "config"
+  },
+  "config.delete.any": {
+    description: "Delete any swarm-config entry.",
+    namespace: "config"
+  },
+  "config.read.secrets": {
+    description: "Read unmasked secret config values.",
+    namespace: "config"
+  },
+  "skill.create.swarm": {
+    description: "Create a swarm-scoped skill.",
+    namespace: "skill"
+  },
+  "skill.install.any": {
+    description: "Install a skill for another agent.",
+    namespace: "skill"
+  },
+  "skill.install.global": {
+    description: "Install a remote/global skill.",
+    namespace: "skill"
+  },
+  "skill.uninstall.any": {
+    description: "Uninstall a skill for another agent.",
+    namespace: "skill"
+  },
+  "skill.update.any": {
+    description: "Update a skill the caller does not own.",
+    namespace: "skill"
+  },
+  "skill.promote.swarm": {
+    description: "Promote a skill to swarm scope (skill-approval path).",
+    namespace: "skill"
+  },
+  "skill.delete.any": {
+    description: "Delete a skill the caller does not own.",
+    namespace: "skill"
+  },
+  "mcp-server.create.swarm": {
+    description: "Create a swarm- or global-scoped MCP server.",
+    namespace: "mcp-server"
+  },
+  "mcp-server.install.any": {
+    description: "Install an MCP server for another agent.",
+    namespace: "mcp-server"
+  },
+  "mcp-server.uninstall.any": {
+    description: "Uninstall an MCP server for another agent.",
+    namespace: "mcp-server"
+  },
+  "mcp-server.delete.any": {
+    description: "Delete an MCP server the caller does not own.",
+    namespace: "mcp-server"
+  },
+  "mcp-server.update.any": {
+    description: "Update an MCP server the caller does not own.",
+    namespace: "mcp-server"
+  },
+  "mcp-oauth.authorize.any": {
+    description: "Start an MCP-server OAuth authorize flow for a caller-supplied user scope.",
+    namespace: "mcp-oauth"
+  },
+  "kv.write.any": {
+    description: "Write another agent's task:agent: KV namespace.",
+    namespace: "kv"
+  },
+  "page.delete.any": {
+    description: "Delete a page the caller does not own.",
+    namespace: "page"
+  },
+  "script.global.write": {
+    description: "Create or update a global-scope script.",
+    namespace: "script"
+  },
+  "script.global.delete": {
+    description: "Delete a global-scope script.",
+    namespace: "script"
+  }
+};
+var PERMISSION_VERBS = Object.keys(PERMISSIONS);
+var PermissionVerbSchema = _enum(PERMISSION_VERBS);
+
+// src/rbac/admission.ts
+function isRbacEnabled() {
+  return process.env.RBAC_ENABLED === "true";
+}
+function decideAdmission(input) {
+  if (input.grant.grantsAll) {
+    return { allow: true };
+  }
+  if (input.rbac && "permission" in input.rbac) {
+    const verb = input.rbac.permission;
+    if (input.grant.verbs.has(verb)) {
+      return { allow: true, verb };
+    }
+    return { allow: false, reason: `admission: missing permission '${verb}'`, verb };
+  }
+  const method = input.method.toUpperCase();
+  if (method === "GET" || method === "HEAD") {
+    return { allow: true };
+  }
+  return { allow: false, reason: "admission: route has no permission verb (operator-only)" };
+}
+// src/rbac/legacy-policy.ts
+var leadOnly = {
+  name: "lead-only",
+  denyReason: "requires lead agent",
+  evaluate: (principal) => principal.kind === "agent" && principal.isLead
+};
+var leadOrTaskCreator = {
+  name: "lead-or-task-creator",
+  denyReason: "requires lead agent or task creator",
+  evaluate: (principal, resource) => {
+    if (principal.kind !== "agent")
+      return false;
+    if (principal.isLead)
+      return true;
+    return resource?.kind === "task" && resource.creatorAgentId != null && resource.creatorAgentId === principal.agentId;
+  }
+};
+var leadOrResourceOwner = {
+  name: "lead-or-resource-owner",
+  denyReason: "requires lead agent or resource owner",
+  evaluate: (principal, resource) => {
+    if (principal.kind !== "agent")
+      return false;
+    if (principal.isLead)
+      return true;
+    return resource?.kind === "owned" && resource.ownerAgentId != null && resource.ownerAgentId === principal.agentId;
+  }
+};
+var leadOrOwnNamespace = {
+  name: "lead-or-own-namespace",
+  denyReason: "requires lead agent or your own task:agent: namespace",
+  evaluate: (principal, resource) => {
+    if (principal.kind !== "agent")
+      return false;
+    if (principal.isLead)
+      return true;
+    return principal.agentId !== "" && resource?.kind === "kv-namespace" && resource.namespace === `task:agent:${principal.agentId}`;
+  }
+};
+var anyAuthenticated = {
+  name: "any-authenticated",
+  denyReason: "requires an authenticated principal",
+  evaluate: () => true
+};
+var requesterOwnsTask = {
+  name: "requester-owns-task",
+  denyReason: "not the task requester",
+  evaluate: (principal, resource) => {
+    if (principal.kind !== "user")
+      return true;
+    return resource?.kind === "task" && resource.requestedByUserId === principal.userId;
+  }
+};
+var memoryOwnerOrLeadSwarm = {
+  name: "memory-owner-or-lead-swarm",
+  denyReason: "requires memory owner, or lead agent for swarm-scoped memories",
+  evaluate: (principal, resource) => {
+    if (principal.kind !== "agent" || resource?.kind !== "owned")
+      return false;
+    if (resource.ownerAgentId != null && resource.ownerAgentId === principal.agentId)
+      return true;
+    return principal.isLead && resource.scope === "swarm";
+  }
+};
+var taskFsMutate = {
+  name: "operator-or-user-or-lead-or-task-owner",
+  denyReason: "requires operator, user, lead agent, task assignee, or task creator",
+  evaluate: (principal, resource) => {
+    if (principal.kind === "operator" || principal.kind === "user")
+      return true;
+    if (principal.isLead)
+      return true;
+    if (resource?.kind !== "task")
+      return false;
+    return resource.agentId != null && resource.agentId === principal.agentId || resource.creatorAgentId != null && resource.creatorAgentId === principal.agentId;
+  }
+};
+var LEGACY_POLICY = {
+  "user.manage": leadOnly,
+  "agent.profile.update.any": leadOnly,
+  "agent.context.read.any": leadOnly,
+  "task.cancel.any": leadOrTaskCreator,
+  "task.read.own": requesterOwnsTask,
+  "task.cancel.own": requesterOwnsTask,
+  "task.action.own": requesterOwnsTask,
+  "task.fs.mutate": taskFsMutate,
+  "memory.learning.inject": leadOnly,
+  "memory.delete.any": memoryOwnerOrLeadSwarm,
+  "channel.delete": leadOnly,
+  "integration.kapso.manage": leadOnly,
+  "integration.slack.post": leadOnly,
+  "integration.slack.read": leadOnly,
+  "integration.slack.thread.start": leadOnly,
+  "integration.slack.upload": leadOnly,
+  "integration.slack.delete": leadOnly,
+  "integration.slack.update": leadOnly,
+  "credential-binding.manage": leadOnly,
+  "script-connection.manage": leadOnly,
+  "script-connection.invoke": anyAuthenticated,
+  "config.credential-bindings.write": leadOnly,
+  "config.write.any": leadOnly,
+  "config.delete.any": leadOnly,
+  "config.read.secrets": leadOnly,
+  "skill.create.swarm": leadOnly,
+  "skill.install.any": leadOnly,
+  "skill.install.global": leadOnly,
+  "skill.uninstall.any": leadOnly,
+  "skill.update.any": leadOrResourceOwner,
+  "skill.promote.swarm": leadOnly,
+  "skill.delete.any": leadOrResourceOwner,
+  "mcp-server.create.swarm": leadOnly,
+  "mcp-server.install.any": leadOnly,
+  "mcp-server.uninstall.any": leadOnly,
+  "mcp-server.delete.any": leadOrResourceOwner,
+  "mcp-server.update.any": leadOrResourceOwner,
+  "mcp-oauth.authorize.any": anyAuthenticated,
+  "kv.write.any": leadOrOwnNamespace,
+  "page.delete.any": leadOrResourceOwner,
+  "script.global.write": leadOnly,
+  "script.global.delete": leadOnly
+};
+
+// src/rbac/can.ts
+var auditSink = null;
+function setAuditSink(fn) {
+  auditSink = fn;
+}
+function clearAuditSink() {
+  auditSink = null;
+}
+function can(check) {
+  const rule = LEGACY_POLICY[check.verb];
+  const decision = rule.evaluate(check.principal, check.resource) ? { allow: true } : { allow: false, reason: rule.denyReason, missing: check.verb };
+  if (auditSink) {
+    try {
+      auditSink(check, decision);
+    } catch {}
+  }
+  return decision;
+}
+export { isRbacEnabled, decideAdmission, setAuditSink, clearAuditSink, can, PermissionVerbSchema };