@desplega.ai/agent-swarm 1.114.0 → 1.116.0

package/dist/{actions-bm8vdxys.js → actions-brtj223f.js}

@@ -1,16 +1,16 @@
 import {
   resolveSlackUserId
-} from "./cli-w4wk3kx6.js";
-import"./cli-113wmegp.js";
+} from "./cli-vb7g0zgk.js";
+import"./cli-rmyjzd8s.js";
 import {
   buildCancelledBlocks,
   getTaskLink
-} from "./cli-6xd0bvf8.js";
+} from "./cli-ma04faw5.js";
 import"./cli-wspgs9bt.js";
 import {
   createTaskWithSiblingAwareness,
   slackContextKey
-} from "./cli-312v3c41.js";
+} from "./cli-n9kkkmtm.js";
 import"./cli-dh55d5fg.js";
 import {
   cancelTask,
@@ -18,11 +18,11 @@ import {
   getLeadAgent,
   getTaskById,
   init_db
-} from "./cli-jzwtn8rm.js";
+} from "./cli-k4yp6w9w.js";
 import"./cli-z2zcxes1.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";
-import"./cli-f5pzfvwb.js";
+import"./cli-qnnbe59j.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 

package/dist/{app-bhwdxmvp.js → app-00sngzz7.js}

@@ -3,17 +3,17 @@ import {
   initSlackApp,
   startSlackApp,
   stopSlackApp
-} from "./cli-hq39e630.js";
+} from "./cli-0h9yzvhe.js";
 import"./cli-rkndnn90.js";
 import"./cli-b0p7rfnd.js";
-import"./cli-6xd0bvf8.js";
+import"./cli-ma04faw5.js";
 import"./cli-wspgs9bt.js";
 import"./cli-dh55d5fg.js";
-import"./cli-jzwtn8rm.js";
+import"./cli-k4yp6w9w.js";
 import"./cli-z2zcxes1.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";
-import"./cli-f5pzfvwb.js";
+import"./cli-qnnbe59j.js";
 import"./cli-4j2mrzag.js";
 import"./cli-e15jhafb.js";
 import"./cli-7wmybrt5.js";

package/dist/{assistant-15mp2apr.js → assistant-j2ser3vg.js}

@@ -1,26 +1,26 @@
 import {
   bufferThreadMessage,
   wasEventSeen
-} from "./cli-5afkmcfj.js";
+} from "./cli-vggz87j8.js";
 import {
   hasOtherUserMention
-} from "./cli-5ktc9fd4.js";
+} from "./cli-et9ab56s.js";
 import {
   require_dist
-} from "./cli-hq39e630.js";
+} from "./cli-0h9yzvhe.js";
 import"./cli-rkndnn90.js";
 import"./cli-b0p7rfnd.js";
 import {
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-w4wk3kx6.js";
-import"./cli-113wmegp.js";
-import"./cli-6xd0bvf8.js";
+} from "./cli-vb7g0zgk.js";
+import"./cli-rmyjzd8s.js";
+import"./cli-ma04faw5.js";
 import"./cli-wspgs9bt.js";
 import {
   createTaskWithSiblingAwareness,
   slackContextKey
-} from "./cli-312v3c41.js";
+} from "./cli-n9kkkmtm.js";
 import"./cli-dh55d5fg.js";
 import {
   getAgentWorkingOnThread,
@@ -29,11 +29,11 @@ import {
   init_db,
   init_resolver,
   resolveTemplate
-} from "./cli-jzwtn8rm.js";
+} from "./cli-k4yp6w9w.js";
 import"./cli-z2zcxes1.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";
-import"./cli-f5pzfvwb.js";
+import"./cli-qnnbe59j.js";
 import"./cli-4j2mrzag.js";
 import"./cli-e15jhafb.js";
 import"./cli-7wmybrt5.js";

package/dist/{boot-reembed-b9sbk87z.js → boot-reembed-fv3r1kqg.js}

@@ -3,16 +3,16 @@ import {
   getEmbeddingProvider,
   getMemoryStore,
   init_constants
-} from "./cli-byjcad11.js";
+} from "./cli-vnvv6hvm.js";
 import"./cli-q25ejbyn.js";
 import {
   getDb,
   init_db
-} from "./cli-jzwtn8rm.js";
+} from "./cli-k4yp6w9w.js";
 import"./cli-z2zcxes1.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";
-import"./cli-f5pzfvwb.js";
+import"./cli-qnnbe59j.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 

package/dist/{boot-reembed-awr2179r.js → boot-reembed-v4n0jphx.js}

@@ -1,17 +1,17 @@
 import {
   embedScript,
   embeddingProvider
-} from "./cli-f9n2jg31.js";
-import"./cli-byjcad11.js";
+} from "./cli-5g3hx9cc.js";
+import"./cli-vnvv6hvm.js";
 import"./cli-q25ejbyn.js";
 import {
   getDb,
   init_db
-} from "./cli-jzwtn8rm.js";
+} from "./cli-k4yp6w9w.js";
 import"./cli-z2zcxes1.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";
-import"./cli-f5pzfvwb.js";
+import"./cli-qnnbe59j.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 

package/dist/{boot-scrub-logs-c1zsaw9m.js → boot-scrub-logs-72sy5z1r.js}

@@ -1,11 +1,11 @@
 import {
   getDb,
   init_db
-} from "./cli-jzwtn8rm.js";
+} from "./cli-k4yp6w9w.js";
 import"./cli-z2zcxes1.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";
-import"./cli-f5pzfvwb.js";
+import"./cli-qnnbe59j.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{claude-adapter-2k45y7p7.js → claude-adapter-3csn5bks.js}

@@ -12,12 +12,12 @@ import {
   resolveClaudeBinary,
   resolveClaudeBinaryArgv,
   resolveClaudeBridgeEnabled
-} from "./cli-ggy8c7tk.js";
+} from "./cli-mnbgv3w7.js";
 import"./cli-tng3131n.js";
 import"./cli-psrqtw2m.js";
 import"./cli-zm7njwzd.js";
 import"./cli-tghre7g6.js";
-import"./cli-tkmm5nf9.js";
+import"./cli-e61fs2hp.js";
 import"./cli-z2zcxes1.js";
 import"./cli-4j2mrzag.js";
 import"./cli-7zd05xb4.js";

package/dist/{cli-hq39e630.js → cli-0h9yzvhe.js}

@@ -14,8 +14,10 @@ import {
   buildTreeBlocks,
   formatAttachmentsBlockForSlack,
   formatDuration,
-  markdownToSlack
-} from "./cli-6xd0bvf8.js";
+  getTaskLink,
+  markdownToSlack,
+  splitSlackSectionText
+} from "./cli-ma04faw5.js";
 import {
   getAgentById,
   getChildTasks,
@@ -25,7 +27,7 @@ import {
   getTaskById,
   init_db,
   setSlackMessageTracking
-} from "./cli-jzwtn8rm.js";
+} from "./cli-k4yp6w9w.js";
 import {
   require_receiver,
   require_sender,
@@ -54212,9 +54214,89 @@ function classifySlackUpdateError(error) {
   return "failed";
 }
 var isDev = process.env.ENV === "development";
+var MIN_INLINE_OUTPUT_LENGTH = 20;
+var MAX_INLINE_OUTPUT_MESSAGE_LENGTH = 4000;
+var INLINE_OUTPUT_FALLBACKS = new Set([
+  "done",
+  "completed",
+  "complete",
+  "task completed",
+  "process completed successfully",
+  "process completed successfully (no output captured)"
+]);
 function getAgentDisplayName(agent) {
   return isDev ? `(dev) ${agent.name}` : agent.name;
 }
+function shouldPostInlineCompletionOutput(task, attachments) {
+  if (task.status !== "completed")
+    return false;
+  if (!task.slackChannelId || !task.slackThreadTs)
+    return false;
+  if (task.slackReplySent)
+    return false;
+  const output = task.output?.trim();
+  if (!output || output.length < MIN_INLINE_OUTPUT_LENGTH)
+    return false;
+  if (INLINE_OUTPUT_FALLBACKS.has(output.toLowerCase()))
+    return false;
+  return !attachments.some((attachment) => attachment.isPrimary);
+}
+function formatInlineCompletionOutputText(opts) {
+  const header = `✅ *${opts.agentName}* completed with output (${getTaskLink(opts.taskId)}):
+
+`;
+  const tail = `
+
+…(full output in task ${getTaskLink(opts.taskId)})`;
+  const slackOutput = markdownToSlack(opts.output.trim());
+  const maxBodyLength = MAX_INLINE_OUTPUT_MESSAGE_LENGTH - header.length;
+  if (slackOutput.length <= maxBodyLength) {
+    return header + slackOutput;
+  }
+  const maxTruncatedBodyLength = Math.max(0, maxBodyLength - tail.length);
+  let cut = slackOutput.lastIndexOf(`
+`, maxTruncatedBodyLength);
+  if (cut < maxTruncatedBodyLength / 2) {
+    cut = slackOutput.lastIndexOf(" ", maxTruncatedBodyLength);
+  }
+  if (cut < maxTruncatedBodyLength / 2) {
+    cut = maxTruncatedBodyLength;
+  }
+  return header + slackOutput.slice(0, cut).trimEnd() + tail;
+}
+async function sendInlineTaskOutput(task) {
+  const app = getSlackApp();
+  if (!app || !task.slackChannelId || !task.slackThreadTs || !task.agentId || !task.output) {
+    return false;
+  }
+  const agent = getAgentById(task.agentId);
+  if (!agent) {
+    console.error(`[Slack] Agent not found for task ${task.id}`);
+    return false;
+  }
+  const text = formatInlineCompletionOutputText({
+    agentName: agent.name,
+    taskId: task.id,
+    output: task.output
+  });
+  try {
+    await sendWithPersona(app.client, {
+      channel: task.slackChannelId,
+      thread_ts: task.slackThreadTs,
+      text,
+      username: getAgentDisplayName(agent),
+      icon_emoji: getAgentEmoji(agent),
+      blocks: splitSlackSectionText(text).map((chunk) => ({
+        type: "section",
+        text: { type: "mrkdwn", text: chunk }
+      }))
+    });
+    return true;
+  } catch (error) {
+    console.error(`[Slack] Failed to send inline output for task ${task.id}:`, error);
+    return false;
+  }
+}
 async function sendTaskResponse(task) {
   const app = getSlackApp();
   if (!app || !task.slackChannelId || !task.slackThreadTs) {
@@ -54904,7 +54986,8 @@ function startTaskWatcher(intervalMs = 3000) {
         if (lastSent && now2 - lastSent < MIN_SEND_INTERVAL)
           continue;
         if (taskToTree.has(task.id)) {
-          if (task.status !== "completed" || task.slackReplySent) {
+          const attachments = task.status === "completed" ? getTaskAttachments(task.id) : [];
+          if (!shouldPostInlineCompletionOutput(task, attachments)) {
             notifiedCompletions.set(task.id, now2);
             continue;
           }
@@ -54912,8 +54995,10 @@ function startTaskWatcher(intervalMs = 3000) {
           notifiedCompletions.set(task.id, now2);
           lastSendTime.set(completionKey, now2);
           try {
-            await sendTaskResponse(task);
-            console.log(`[Slack] Sent full tree-tracked completion for task ${task.id.slice(0, 8)}`);
+            const sent = await sendInlineTaskOutput(task);
+            if (!sent)
+              throw new Error("sendInlineTaskOutput returned false");
+            console.log(`[Slack] Sent inline output for tree-tracked completion ${task.id.slice(0, 8)}`);
           } catch (error) {
             notifiedCompletions.delete(task.id);
             lastSendTime.delete(completionKey);
@@ -54988,13 +55073,13 @@ async function initSlackApp() {
     socketMode: true,
     logLevel: import_bolt.LogLevel.DEBUG
   });
-  const { registerMessageHandler } = await import("./handlers-gshprvpf.js");
-  const { registerCommandHandler } = await import("./commands-zk4d6esf.js");
-  const { registerActionHandlers } = await import("./actions-bm8vdxys.js");
+  const { registerMessageHandler } = await import("./handlers-5n9gq3ek.js");
+  const { registerCommandHandler } = await import("./commands-4jt6hvc9.js");
+  const { registerActionHandlers } = await import("./actions-brtj223f.js");
   registerMessageHandler(app);
   registerCommandHandler(app);
   registerActionHandlers(app);
-  const { createAssistant } = await import("./assistant-15mp2apr.js");
+  const { createAssistant } = await import("./assistant-j2ser3vg.js");
   app.assistant(createAssistant());
   return app;
 }

package/dist/{cli-49j095n9.js → cli-0pwtr9f0.js}

@@ -8,7 +8,7 @@ import {
   init_date_utils,
   init_db,
   normalizeDateRequired
-} from "./cli-jzwtn8rm.js";
+} from "./cli-k4yp6w9w.js";
 
 // src/be/db-queries/oauth.ts
 init_date_utils();

package/dist/{cli-zmmp2r79.js → cli-2rxckty2.js}

@@ -2,7 +2,7 @@ import {
   getScriptApiTypes,
   getScriptMcpTypes,
   require_typescript
-} from "./cli-pnfyyp6h.js";
+} from "./cli-x9q6bghe.js";
 import {
   deleteSwarmConfigByKey,
   getAgentById,
@@ -11,7 +11,7 @@ import {
   getSwarmConfigs,
   init_db,
   upsertSwarmConfig
-} from "./cli-jzwtn8rm.js";
+} from "./cli-k4yp6w9w.js";
 import {
   init_secret_scrubber,
   scrubSecrets
@@ -362,6 +362,17 @@ var SCRIPT_SDK_TYPES = `
 export type JsonValue = null | boolean | number | string | JsonValue[] | { [key: string]: JsonValue };
 export type ScriptScope = "agent" | "global";
 export type ScriptFsMode = "none" | "workspace-rw";
+export type ScriptApiRawOptions = { raw: true };
+export type ScriptApiDefaultOptions = { raw?: false };
+
+export interface ScriptApiRawResult {
+  ok: boolean;
+  status: number;
+  statusText: string;
+  headers: Record<string, string>;
+  url: string;
+  response: Response;
+}
 
 export interface Redacted<T> {
   readonly __redactedBrand?: T;

package/dist/{cli-w3nq88yc.js → cli-3ys55x7x.js}

@@ -1,13 +1,13 @@
 import {
   buildModelsDevSeedRows
-} from "./cli-k6h2zkw3.js";
+} from "./cli-tw7xjzk7.js";
 import {
   createLogEntry,
   getActivePricingRow,
   getDb,
   init_db,
   insertPricingRow
-} from "./cli-jzwtn8rm.js";
+} from "./cli-k4yp6w9w.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-7rgh0w0k.js → cli-50czs4qy.js}

@@ -1,10 +1,10 @@
 import {
   PermissionVerbSchema
-} from "./cli-0kgcv878.js";
+} from "./cli-86fdnerz.js";
 import {
   getDb,
   init_db
-} from "./cli-jzwtn8rm.js";
+} from "./cli-k4yp6w9w.js";
 
 // src/be/rbac-roles.ts
 init_db();
@@ -24,7 +24,14 @@ var BUILTIN_ROLES = [
     description: "Own-task lifecycle: what legacy policy grants user principals.",
     isBuiltin: true,
     grantsAll: false,
-    verbs: ["task.read.own", "task.cancel.own", "task.action.own", "task.fs.mutate"]
+    verbs: [
+      "task.create.own",
+      "task.read.own",
+      "task.cancel.own",
+      "task.action.own",
+      "task.fs.mutate",
+      "favorite.write.own"
+    ]
   }
 ];
 var CREATE_USER_DEFAULT_ROLE_TRIGGER_SQL = `

package/dist/{cli-f9n2jg31.js → cli-5g3hx9cc.js}

@@ -4,11 +4,11 @@ import {
   getEmbeddingProvider,
   init_embedding,
   serializeEmbedding
-} from "./cli-byjcad11.js";
+} from "./cli-vnvv6hvm.js";
 import {
   getDb,
   init_db
-} from "./cli-jzwtn8rm.js";
+} from "./cli-k4yp6w9w.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-0kgcv878.js → cli-86fdnerz.js}

@@ -24,6 +24,10 @@ var PERMISSIONS = {
     description: "Cancel any task (beyond tasks the caller created).",
     namespace: "task"
   },
+  "task.create.own": {
+    description: "Create a task the caller owns.",
+    namespace: "task"
+  },
   "task.read.own": {
     description: "Read details of a task the principal requested.",
     namespace: "task"
@@ -40,6 +44,10 @@ var PERMISSIONS = {
     description: "Mutate a task's filesystem artifacts and attachments.",
     namespace: "task"
   },
+  "favorite.write.own": {
+    description: "Set a favorite the caller owns.",
+    namespace: "favorite"
+  },
   "memory.learning.inject": {
     description: "Inject a learning into another agent's memory.",
     namespace: "memory"
@@ -156,6 +164,10 @@ var PERMISSIONS = {
     description: "Update an MCP server the caller does not own.",
     namespace: "mcp-server"
   },
+  "mcp-server.read.secrets": {
+    description: "Read resolved MCP server secret env/header values.",
+    namespace: "mcp-server"
+  },
   "mcp-oauth.authorize.any": {
     description: "Start an MCP-server OAuth authorize flow for a caller-supplied user scope.",
     namespace: "mcp-oauth"
@@ -175,6 +187,30 @@ var PERMISSIONS = {
   "script.global.delete": {
     description: "Delete a global-scope script.",
     namespace: "script"
+  },
+  "script.search": {
+    description: "Search reusable scripts visible to the caller.",
+    namespace: "script"
+  },
+  "script.api.read.secrets": {
+    description: "Reveal an external script API endpoint bearer token.",
+    namespace: "script"
+  },
+  "script.api.create": {
+    description: "Expose a script as an external HTTP API endpoint.",
+    namespace: "script"
+  },
+  "script.api.update": {
+    description: "Update an external script API endpoint.",
+    namespace: "script"
+  },
+  "script.api.rotate": {
+    description: "Rotate an external script API endpoint bearer token.",
+    namespace: "script"
+  },
+  "script.api.delete": {
+    description: "Delete an external script API endpoint.",
+    namespace: "script"
   }
 };
 var PERMISSION_VERBS = Object.keys(PERMISSIONS);
@@ -201,6 +237,22 @@ function decideAdmission(input) {
   }
   return { allow: false, reason: "admission: route has no permission verb (operator-only)" };
 }
+function decideToolAdmission(input) {
+  if (input.grant.grantsAll) {
+    return { allow: true };
+  }
+  if (input.rbac && "permission" in input.rbac) {
+    const verb = input.rbac.permission;
+    if (input.grant.verbs.has(verb)) {
+      return { allow: true, verb };
+    }
+    return { allow: false, reason: `admission: missing permission '${verb}'`, verb };
+  }
+  if (input.readOnly) {
+    return { allow: true };
+  }
+  return { allow: false, reason: "admission: tool has no permission verb (operator-only)" };
+}
 // src/rbac/legacy-policy.ts
 var leadOnly = {
   name: "lead-only",
@@ -283,10 +335,12 @@ var LEGACY_POLICY = {
   "agent.profile.update.any": leadOnly,
   "agent.context.read.any": leadOnly,
   "task.cancel.any": leadOrTaskCreator,
+  "task.create.own": anyAuthenticated,
   "task.read.own": requesterOwnsTask,
   "task.cancel.own": requesterOwnsTask,
   "task.action.own": requesterOwnsTask,
   "task.fs.mutate": taskFsMutate,
+  "favorite.write.own": anyAuthenticated,
   "memory.learning.inject": leadOnly,
   "memory.delete.any": memoryOwnerOrLeadSwarm,
   "channel.delete": leadOnly,
@@ -316,11 +370,18 @@ var LEGACY_POLICY = {
   "mcp-server.uninstall.any": leadOnly,
   "mcp-server.delete.any": leadOrResourceOwner,
   "mcp-server.update.any": leadOrResourceOwner,
+  "mcp-server.read.secrets": leadOnly,
   "mcp-oauth.authorize.any": anyAuthenticated,
   "kv.write.any": leadOrOwnNamespace,
   "page.delete.any": leadOrResourceOwner,
   "script.global.write": leadOnly,
-  "script.global.delete": leadOnly
+  "script.global.delete": leadOnly,
+  "script.search": anyAuthenticated,
+  "script.api.read.secrets": leadOnly,
+  "script.api.create": leadOnly,
+  "script.api.update": leadOnly,
+  "script.api.rotate": leadOnly,
+  "script.api.delete": leadOnly
 };
 
 // src/rbac/can.ts
@@ -341,4 +402,4 @@ function can(check) {
   }
   return decision;
 }
-export { isRbacEnabled, decideAdmission, setAuditSink, clearAuditSink, can, PermissionVerbSchema };
+export { isRbacEnabled, decideAdmission, decideToolAdmission, setAuditSink, clearAuditSink, can, PermissionVerbSchema };

package/dist/{cli-a6tzw6vq.js → cli-96nd7vgs.js}

@@ -11,18 +11,18 @@ import {
   getScriptVersion,
   listRelationalCredentialBindings,
   validateScriptImports
-} from "./cli-pnfyyp6h.js";
+} from "./cli-x9q6bghe.js";
 import {
   ensureTokenOrThrow,
   getOAuthApp,
   getOAuthTokens,
   isTokenExpiringSoon,
   oauthAppRowToProviderConfig
-} from "./cli-49j095n9.js";
+} from "./cli-0pwtr9f0.js";
 import {
   withSiblingAwareness,
   workflowContextKey
-} from "./cli-312v3c41.js";
+} from "./cli-n9kkkmtm.js";
 import {
   getAppUrl
 } from "./cli-dh55d5fg.js";
@@ -71,7 +71,7 @@ import {
   telemetry,
   updateWorkflowRun,
   updateWorkflowRunStep
-} from "./cli-jzwtn8rm.js";
+} from "./cli-k4yp6w9w.js";
 import {
   init_zod
 } from "./cli-bw80ck94.js";
@@ -2612,7 +2612,7 @@ class HumanInTheLoopExecutor extends BaseExecutor {
       }
       if (notification.channel === "slack") {
         try {
-          const { getSlackApp } = await import("./app-bhwdxmvp.js");
+          const { getSlackApp } = await import("./app-00sngzz7.js");
           const slackApp = getSlackApp();
           if (!slackApp) {
             console.warn("[HITL] Slack not initialized — cannot send notification");
@@ -2726,7 +2726,7 @@ class NotifyExecutor extends BaseExecutor {
         }
       }
       case "slack": {
-        const { getSlackApp } = await import("./app-bhwdxmvp.js");
+        const { getSlackApp } = await import("./app-00sngzz7.js");
         const app = getSlackApp();
         if (!app) {
           return {