@desplega.ai/agent-swarm 1.118.0 → 1.119.0

package/README.md

@@ -129,6 +129,7 @@ Check [our templates](https://templates.agent-swarm.dev) for a quick start.
 - **Scheduled & recurring tasks** — cron-based automation for standing work, with schedules that can target agent tasks, workflows, or catalog scripts. [Scheduling →](https://docs.agent-swarm.dev/docs/concepts/scheduling)
 - **Asset namespaces** — group tasks, workflows, schedules, pages, and mapped files under canonical shared or personal keys, with inheritance, subtree filtering, audited moves, and cross-entity discovery. [Asset namespaces →](https://docs.agent-swarm.dev/docs/guides/asset-namespaces)
 - **Durable script workflows** — launch background script runs, inspect their journals, and track them from the dashboard when a one-shot `script-run` is too small. [Guide →](https://docs.agent-swarm.dev/docs/guides/script-workflow-runs)
+- **Scripts-only MCP mode (code-mode)** — reduce the external MCP surface to eight script tools while retaining the full swarm SDK through `script-run`, cutting tool-schema context for capable coordinator models. [Guide →](https://docs.agent-swarm.dev/docs/guides/scripts-only-mode)
 - **Scripts as external APIs** — expose a saved script as a public `POST /api/x/script/<id>` endpoint with optional bearer auth, typed input validation, and per-endpoint usage tracking. [Guide →](https://docs.agent-swarm.dev/docs/guides/scripts-external-apis)
 - **Typed script API connections** — lead-managed OpenAPI, GraphQL, and MCP connections generate `ctx.api.*` / `ctx.mcp.*` clients for scripts, with credential bindings and OAuth-backed auth kept server-side. [Guide →](https://docs.agent-swarm.dev/docs/guides/script-connections)
 - **E2B-backed eval harness** — run a scenario × harness-config matrix against real swarm stacks, capture transcripts/artifacts, and grade outcomes with deterministic checks plus LLM or agentic judges. [Guide →](https://docs.agent-swarm.dev/docs/guides/evals-harness)

package/dist/{actions-fsdthmby.js → actions-cdhadphb.js}

@@ -1,7 +1,7 @@
 import {
   resolveSlackUserId
-} from "./cli-7g2e06cd.js";
-import"./cli-60z5nrne.js";
+} from "./cli-zcra7f1h.js";
+import"./cli-txxvn1zb.js";
 import {
   buildCancelledBlocks,
   getTaskLink
@@ -9,7 +9,7 @@ import {
 import"./cli-wspgs9bt.js";
 import {
   createTaskWithSiblingAwareness
-} from "./cli-m3ybbmsm.js";
+} from "./cli-qf35kzka.js";
 import"./cli-dh55d5fg.js";
 import {
   cancelTask,
@@ -19,11 +19,11 @@ import {
   init_context_key,
   init_db,
   slackContextKey
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 import"./cli-z2zcxes1.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";
-import"./cli-nh866k5t.js";
+import"./cli-9kbww4vb.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 

package/dist/{app-d48rk7pp.js → app-w2067dt3.js}

@@ -3,17 +3,17 @@ import {
   initSlackApp,
   startSlackApp,
   stopSlackApp
-} from "./cli-48qxfdv4.js";
+} from "./cli-15m4y05s.js";
 import"./cli-rkndnn90.js";
 import"./cli-b0p7rfnd.js";
 import"./cli-ma04faw5.js";
 import"./cli-wspgs9bt.js";
 import"./cli-dh55d5fg.js";
-import"./cli-f5qm42kd.js";
+import"./cli-j12px91x.js";
 import"./cli-z2zcxes1.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";
-import"./cli-nh866k5t.js";
+import"./cli-9kbww4vb.js";
 import"./cli-4j2mrzag.js";
 import"./cli-e15jhafb.js";
 import"./cli-7wmybrt5.js";

package/dist/{assistant-nqwh132h.js → assistant-cb02pb41.js}

@@ -1,25 +1,25 @@
 import {
   bufferThreadMessage,
   wasEventSeen
-} from "./cli-k01wm82x.js";
+} from "./cli-06d436hx.js";
 import {
   hasOtherUserMention
-} from "./cli-4xc1mc5x.js";
+} from "./cli-06xdf1gz.js";
 import {
   require_dist
-} from "./cli-48qxfdv4.js";
+} from "./cli-15m4y05s.js";
 import"./cli-rkndnn90.js";
 import"./cli-b0p7rfnd.js";
 import {
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-7g2e06cd.js";
-import"./cli-60z5nrne.js";
+} from "./cli-zcra7f1h.js";
+import"./cli-txxvn1zb.js";
 import"./cli-ma04faw5.js";
 import"./cli-wspgs9bt.js";
 import {
   createTaskWithSiblingAwareness
-} from "./cli-m3ybbmsm.js";
+} from "./cli-qf35kzka.js";
 import"./cli-dh55d5fg.js";
 import {
   getAgentWorkingOnThread,
@@ -30,11 +30,11 @@ import {
   init_resolver,
   resolveTemplate,
   slackContextKey
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 import"./cli-z2zcxes1.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";
-import"./cli-nh866k5t.js";
+import"./cli-9kbww4vb.js";
 import"./cli-4j2mrzag.js";
 import"./cli-e15jhafb.js";
 import"./cli-7wmybrt5.js";

package/dist/{boot-reembed-vztw3kmn.js → boot-reembed-b18pndap.js}

@@ -1,17 +1,17 @@
 import {
   embedScript,
   embeddingProvider
-} from "./cli-jzyjzstk.js";
-import"./cli-sqp2bsy0.js";
+} from "./cli-qw9seygs.js";
+import"./cli-qcm02dkk.js";
 import"./cli-q25ejbyn.js";
 import {
   getDb,
   init_db
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 import"./cli-z2zcxes1.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";
-import"./cli-nh866k5t.js";
+import"./cli-9kbww4vb.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 

package/dist/{boot-reembed-z229xeg8.js → boot-reembed-p00s3r7a.js}

@@ -3,16 +3,16 @@ import {
   getEmbeddingProvider,
   getMemoryStore,
   init_constants
-} from "./cli-sqp2bsy0.js";
+} from "./cli-qcm02dkk.js";
 import"./cli-q25ejbyn.js";
 import {
   getDb,
   init_db
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 import"./cli-z2zcxes1.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";
-import"./cli-nh866k5t.js";
+import"./cli-9kbww4vb.js";
 import"./cli-4j2mrzag.js";
 import"./cli-p9swy5t3.js";
 

package/dist/{boot-scrub-logs-yqpj4x5g.js → boot-scrub-logs-b9ym4xx3.js}

@@ -1,11 +1,11 @@
 import {
   getDb,
   init_db
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 import"./cli-z2zcxes1.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";
-import"./cli-nh866k5t.js";
+import"./cli-9kbww4vb.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-k01wm82x.js → cli-06d436hx.js}

@@ -1,20 +1,20 @@
 import {
   createAdditiveBuffer,
   extractSlackMessageText
-} from "./cli-4xc1mc5x.js";
+} from "./cli-06xdf1gz.js";
 import {
   getSlackApp,
   registerTreeMessage
-} from "./cli-48qxfdv4.js";
+} from "./cli-15m4y05s.js";
 import {
   rewriteSlackMentions
-} from "./cli-7g2e06cd.js";
+} from "./cli-zcra7f1h.js";
 import {
   buildBufferFlushBlocks
 } from "./cli-ma04faw5.js";
 import {
   createTaskWithSiblingAwareness
-} from "./cli-m3ybbmsm.js";
+} from "./cli-qf35kzka.js";
 import {
   getLatestActiveTaskInThread,
   getLeadAgent,
@@ -24,7 +24,7 @@ import {
   init_registry,
   registerTemplate,
   slackContextKey
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 
 // src/slack/event-dedup.ts
 var DEFAULT_TTL_MS = 300000;

package/dist/{cli-4xc1mc5x.js → cli-06xdf1gz.js}

@@ -3,7 +3,7 @@ import {
   getAgentWorkingOnThread,
   getAllAgents,
   init_db
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 
 // src/slack/router.ts
 init_db();

package/dist/{cli-48qxfdv4.js → cli-15m4y05s.js}

@@ -27,7 +27,7 @@ import {
   getTaskById,
   init_db,
   setSlackMessageTracking
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 import {
   require_receiver,
   require_sender,
@@ -55073,13 +55073,13 @@ async function initSlackApp() {
     socketMode: true,
     logLevel: import_bolt.LogLevel.DEBUG
   });
-  const { registerMessageHandler } = await import("./handlers-tr8hkw59.js");
-  const { registerCommandHandler } = await import("./commands-f6n33dnc.js");
-  const { registerActionHandlers } = await import("./actions-fsdthmby.js");
+  const { registerMessageHandler } = await import("./handlers-mppa5zb3.js");
+  const { registerCommandHandler } = await import("./commands-rn6frj4c.js");
+  const { registerActionHandlers } = await import("./actions-cdhadphb.js");
   registerMessageHandler(app);
   registerCommandHandler(app);
   registerActionHandlers(app);
-  const { createAssistant } = await import("./assistant-nqwh132h.js");
+  const { createAssistant } = await import("./assistant-cb02pb41.js");
   app.assistant(createAssistant());
   return app;
 }

package/dist/{cli-hy7qcdk0.js → cli-9ed8efw3.js}

@@ -18,7 +18,7 @@ import {
   init_templates1 as init_templates,
   normalizeDateRequired,
   resolveTemplate
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 
 // src/be/db-queries/tracker.ts
 init_date_utils();

package/dist/{cli-nh866k5t.js → cli-9kbww4vb.js}

@@ -7,7 +7,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@desplega.ai/agent-swarm",
-    version: "1.118.0",
+    version: "1.119.0",
     description: "Multi-agent orchestration for Claude Code, Codex, Gemini CLI, and other AI coding assistants",
     license: "MIT",
     author: "desplega.sh <contact@desplega.sh>",

package/dist/{cli-r6yjwx5h.js → cli-azvm6fss.js}

@@ -2,7 +2,7 @@ import {
   getScriptApiTypes,
   getScriptMcpTypes,
   require_typescript
-} from "./cli-g97ggbfg.js";
+} from "./cli-bx96sw2z.js";
 import {
   deleteSwarmConfigByKey,
   getAgentById,
@@ -11,7 +11,7 @@ import {
   getSwarmConfigs,
   init_db,
   upsertSwarmConfig
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{cli-g97ggbfg.js → cli-bx96sw2z.js}

@@ -3,7 +3,7 @@ import {
 } from "./cli-jkhwmmgg.js";
 import {
   embedScript
-} from "./cli-jzyjzstk.js";
+} from "./cli-qw9seygs.js";
 import {
   calculatePKCECodeChallenge,
   generateRandomCodeVerifier,
@@ -22,7 +22,7 @@ import {
   init_date_utils,
   init_db,
   normalizeDateRequired
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 import {
   init_zod
 } from "./cli-bw80ck94.js";

package/dist/{cli-yqc51axp.js → cli-chs2zh28.js}

@@ -4,15 +4,15 @@ import {
   handleScheduleTrigger,
   runScript,
   startWorkflowExecution
-} from "./cli-20zj8pm5.js";
+} from "./cli-jy7w6z37.js";
 import {
   getScript,
   getScriptApiConnectionDescriptors,
   getScriptMcpConnectionDescriptors
-} from "./cli-g97ggbfg.js";
+} from "./cli-bx96sw2z.js";
 import {
   createTaskWithSiblingAwareness
-} from "./cli-m3ybbmsm.js";
+} from "./cli-qf35kzka.js";
 import {
   getDb,
   getDueScheduledTasks,
@@ -24,7 +24,7 @@ import {
   scheduleContextKey,
   telemetry,
   updateScheduledTask
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 import {
   __commonJS,
   __require,

package/dist/{cli-xck0rrm4.js → cli-dqxwy0td.js}

@@ -8,7 +8,7 @@ import {
   init_date_utils,
   init_db,
   normalizeDateRequired
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 
 // src/be/db-queries/oauth.ts
 init_date_utils();

package/dist/{cli-gwyaqc05.js → cli-h1gg78hv.js}

@@ -10,14 +10,14 @@ import {
 } from "./cli-ftyf58xj.js";
 import {
   startPricingRefreshLoop
-} from "./cli-4j0y68we.js";
+} from "./cli-mxennm5t.js";
 import {
   seedPricingFromModelsDev
-} from "./cli-8j4fe76y.js";
+} from "./cli-vfq38b3e.js";
 import {
   ensureRbacSeedsSynced,
   getUserGrant
-} from "./cli-er0djds9.js";
+} from "./cli-hyn69s0c.js";
 import {
   can,
   decideAdmission,
@@ -37,7 +37,7 @@ import {
   repointTrackerSyncBySwarmId,
   updateTrackerSync,
   updateTrackerSyncSwarmId
-} from "./cli-hy7qcdk0.js";
+} from "./cli-9ed8efw3.js";
 import {
   ZodFirstPartyTypeKind,
   objectType
@@ -47,7 +47,7 @@ import {
   ensure,
   require_dist,
   runScheduleNow
-} from "./cli-yqc51axp.js";
+} from "./cli-chs2zh28.js";
 import {
   TriggerSchemaError,
   applyDefinitionPatch,
@@ -61,7 +61,7 @@ import {
   startWorkflowExecution,
   validateDefinition,
   validateJsonSchema
-} from "./cli-20zj8pm5.js";
+} from "./cli-jy7w6z37.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
@@ -81,7 +81,7 @@ import {
   setScriptConnectionEnabled,
   upsertCredentialBinding,
   upsertScriptConnection
-} from "./cli-g97ggbfg.js";
+} from "./cli-bx96sw2z.js";
 import {
   CANDIDATE_SET_MULTIPLIER,
   computeScore,
@@ -93,7 +93,7 @@ import {
   isGraphExpansionEnabled,
   rerank,
   rowToCandidate
-} from "./cli-sqp2bsy0.js";
+} from "./cli-qcm02dkk.js";
 import {
   buildAuthorizationUrl,
   ensureToken,
@@ -101,17 +101,17 @@ import {
   getOAuthApp,
   getOAuthTokens,
   upsertOAuthApp
-} from "./cli-xck0rrm4.js";
+} from "./cli-dqxwy0td.js";
 import {
   createAdditiveBuffer,
   extractSlackMessageText,
   parseSlackTs
-} from "./cli-4xc1mc5x.js";
+} from "./cli-06xdf1gz.js";
 import {
   getSlackApp,
   startSlackApp,
   stopSlackApp
-} from "./cli-48qxfdv4.js";
+} from "./cli-15m4y05s.js";
 import {
   findOrCreateUserByEmail,
   findUserByExternalId,
@@ -127,13 +127,13 @@ import {
   resolveIdentityByEmail,
   resolveUserByToken,
   unlinkIdentity
-} from "./cli-60z5nrne.js";
+} from "./cli-txxvn1zb.js";
 import {
   markdownToSlack
 } from "./cli-ma04faw5.js";
 import {
   createTaskWithSiblingAwareness
-} from "./cli-m3ybbmsm.js";
+} from "./cli-qf35kzka.js";
 import {
   getAppUrl,
   getMcpBaseUrl,
@@ -377,7 +377,7 @@ import {
   upsertService,
   upsertSwarmConfig,
   validateConfigValue
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 import {
   init_zod
 } from "./cli-bw80ck94.js";
@@ -422,7 +422,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-nh866k5t.js";
+} from "./cli-9kbww4vb.js";
 import {
   init_secret_scrubber,
   refreshSecretScrubberCache,
@@ -19710,7 +19710,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
     return;
   initialized2 = true;
   try {
-    const impl = await import("./otel-impl-93kctmj7.js");
+    const impl = await import("./otel-impl-3e0t0kga.js");
     await impl.boot(serviceRole);
     realWithSpan = impl.withSpan;
     realStartSpan = impl.startSpan;
@@ -34997,7 +34997,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-d48rk7pp.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-w2067dt3.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -35066,7 +35066,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDb: getDb2 } = await import("./db-h2rfvs2w.js");
+  const { getDb: getDb2 } = await import("./db-kmemzvqt.js");
   const db = getDb2();
   const txn = db.transaction(() => {
     const row = db.query("SELECT metadata FROM oauth_apps WHERE provider = 'jira'").get();
@@ -112237,6 +112237,15 @@ var registerUpdateWorkflowTool = (server) => {
     }
   });
 };
+// src/utils/scripts-only-mode.ts
+function resolveScriptsOnlyMode(opts) {
+  if (opts.env)
+    return opts.env === "true";
+  if (opts.configValue)
+    return opts.configValue === "true";
+  return false;
+}
+
 // src/server.ts
 var DEFAULT_CAPABILITIES = "core,task-pool,profiles,services,scheduling,memory,workflows,pages,metrics,kv";
 var CAPABILITIES = new Set((process.env.CAPABILITIES || DEFAULT_CAPABILITIES).split(",").map((s) => s.trim()));
@@ -112246,7 +112255,10 @@ function hasCapability(cap) {
 function getEnabledCapabilities() {
   return Array.from(CAPABILITIES);
 }
-function createServer() {
+function isScriptsOnlyMcp() {
+  return resolveScriptsOnlyMode({ env: process.env.SCRIPTS_ONLY_MCP });
+}
+function createServer(opts = {}) {
   initDb(process.env.DATABASE_PATH);
   seedPricingFromModelsDev();
   startPricingRefreshLoop();
@@ -112267,6 +112279,15 @@ function createServer() {
       logging: {}
     }
   });
+  if (opts.scriptsOnly ?? isScriptsOnlyMcp()) {
+    registerScriptSearchTool(server);
+    registerScriptRunTool(server);
+    registerScriptUpsertTool(server);
+    registerScriptDeleteTool(server);
+    registerScriptQueryTypesTool(server);
+    registerScriptRunsTools(server);
+    return server;
+  }
   registerJoinSwarmTool(server);
   registerPollTaskTool(server);
   registerGetSwarmTool(server);
@@ -112548,4 +112569,4 @@ function writeSkillsToFilesystem(entries, harnessType = "all", home) {
   return { synced, removed, errors };
 }
 
-export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, userCtx, isPollTracingEnabled, initOtel, withSpan, startSpan, withSpanContext, withRemoteContext, injectTraceContext, recordSessionCost, createToolRegistrar, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, setCorsHeaders, parseQueryParams, getPathSegments, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, describeRequestRoute, route, assertSelectOnlyQuery, executeReadOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, resolveTaskAuditUserId, resolveHttpAuditUserId, snapshotPage, assertOAuthProviderIsNotReserved, assertOAuthAppUrlsSafe, scopedResourceScopeIdSchema, resolveScopedResourceId, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, storeLinks, refreshLinks, canReadMemory, getLinksForMemory, recordRetrievals, expandCandidatesWithGraph, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, sendTaskOutputSchema, sendTaskHandler, parseSkillContent, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, isInboxAllowed, isSenderAllowed, handleMessageReceived, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, canClaim, emitBudgetRefusalSideEffects, taskActionInputSchema, taskActionOutputSchema, taskActionHandler, hasCapability, getEnabledCapabilities, createServer, writeSkillsToFilesystem };
+export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, userCtx, isPollTracingEnabled, initOtel, withSpan, startSpan, withSpanContext, withRemoteContext, injectTraceContext, recordSessionCost, createToolRegistrar, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, setCorsHeaders, parseQueryParams, getPathSegments, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, describeRequestRoute, route, assertSelectOnlyQuery, executeReadOnlyQuery, handleDbQuery, snapshotMetric, AssetKeyAuthorizationError, authorizeAssetKeyWrite, resolveTaskAuditUserId, resolveHttpAuditUserId, snapshotPage, assertOAuthProviderIsNotReserved, assertOAuthAppUrlsSafe, scopedResourceScopeIdSchema, resolveScopedResourceId, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, storeLinks, refreshLinks, canReadMemory, getLinksForMemory, recordRetrievals, expandCandidatesWithGraph, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, sendTaskOutputSchema, sendTaskHandler, parseSkillContent, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, isInboxAllowed, isSenderAllowed, handleMessageReceived, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, canClaim, emitBudgetRefusalSideEffects, taskActionInputSchema, taskActionOutputSchema, taskActionHandler, resolveScriptsOnlyMode, hasCapability, getEnabledCapabilities, createServer, writeSkillsToFilesystem };

package/dist/{cli-er0djds9.js → cli-hyn69s0c.js}

@@ -4,7 +4,7 @@ import {
 import {
   getDb,
   init_db
-} from "./cli-f5qm42kd.js";
+} from "./cli-j12px91x.js";
 
 // src/be/rbac-roles.ts
 init_db();

package/dist/{cli-f5qm42kd.js → cli-j12px91x.js}

@@ -26,7 +26,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-nh866k5t.js";
+} from "./cli-9kbww4vb.js";
 import {
   init_secret_scrubber,
   scrubSecrets
@@ -3098,6 +3098,58 @@ The 5 script tools (\`script-search\`, \`script-run\`, \`script-upsert\`, \`scri
     variables: [],
     category: "system"
   });
+  registerTemplate({
+    eventType: "system.agent.scripts_only_mode",
+    header: "",
+    defaultBody: `
+## Code-Mode: script tools ONLY
+
+This swarm runs in **scripts-only mode**. The ONLY swarm MCP tools available are the script tools: \`script-search\`, \`script-run\`, \`script-upsert\`, \`script-delete\`, \`script-query-types\`, \`launch-script-run\`, \`get-script-run\`, \`list-script-runs\` (your harness may expose them under a prefix, e.g. \`mcp__agent-swarm__script-run\` — use the exact registered tool id). They are already loaded. Named tools like \`store-progress\`, \`send-task\`, \`post-message\`, \`memory-search\` do NOT exist here — do not search for them.
+
+**Script entry signature (memorize — args FIRST, ctx SECOND):**
+
+\`\`\`ts
+export default async function (args: any, ctx: any) { /* ... */ }
+\`\`\`
+
+The full SDK is \`ctx.swarm.*\` — task lifecycle (\`task_get\`, \`task_send\`, \`task_storeProgress\`, \`task_action\`, \`task_list\`), messaging (\`message_post\`, \`message_read\`), Slack (\`slack_reply\`, \`slack_post\`, \`slack_read\`), memory, kv, swarm info (\`swarm_get\`, \`agent_info\`), and more. Responses are usually wrapped — prefer \`res?.data ?? res\`.
+
+**Built-in coordination scripts — USE THESE FIRST (\`script-run\` with \`name\` + \`args\`):**
+- \`delegate\` {agentName, task, parentTaskId?} → subtask for an agent by name; returns {taskId}
+- \`wait-for-task\` {taskId} → waits up to ~25s for a terminal state; returns {done, status, output}; while done=false call it again
+- \`get-child-outputs\` {parentTaskId} → all children with status+output
+- \`complete-task\` {taskId, output} → THE way to finish your assigned task
+- \`report-progress\` {taskId, note} → progress update
+- \`swarm-overview\` {} → agents + task counts
+
+Rules of the road:
+- Prefer a built-in script over inline source; write inline TypeScript only for logic no built-in covers. Check \`script-search\` first, and \`script-query-types\` for the live \`swarm-sdk.d.ts\` before authoring anything non-trivial.
+- \`taskId\` is NOT ambient inside scripts — pass it explicitly via \`args\`.
+- Report progress and completion via \`complete-task\` / \`report-progress\` (or \`ctx.swarm.task_storeProgress\` inline). This is how you update, complete, or fail your task — there is no other way.
+- Scripts are killed after ~30s and stdout is capped at 1 MB. Never sleep/loop longer than ~25s inside one script — chain \`wait-for-task\` calls instead.
+- Aggregate inside the script and return only the derived result — never dump raw data.
+- Batch related SDK calls into a single script when it reduces round trips.
+`,
+    variables: [],
+    category: "system"
+  });
+  registerTemplate({
+    eventType: "system.agent.scripts_only_mode.slack",
+    header: "",
+    defaultBody: `
+#### Slack Thread Updates (scripts-only)
+
+This task originated from Slack (channel: \`{{slackChannelId}}\`). You MUST keep the originating Slack thread informed — named Slack tools are not exposed in scripts-only mode, so reply via \`script-run\` with inline source calling \`ctx.swarm.slack_reply({ taskId, message })\` (your taskId carries the thread context):
+- **On start**: post a brief note that you picked up the task
+- **On completion**: post a summary of the result
+- **On failure**: post what went wrong so the requester knows immediately
+`,
+    variables: [
+      { name: "slackChannelId", description: "The Slack channel ID for the originating thread" },
+      { name: "slackThreadTs", description: "The Slack thread timestamp" }
+    ],
+    category: "system"
+  });
   registerTemplate({
     eventType: "system.agent.context_mode",
     header: "",
@@ -3133,6 +3185,8 @@ See the \`swarm-scripts\` skill for the full catalog, signatures, and usage patt
 
 **At task start when you only need memory:** Run \`smart-recall\` with 2-4 search angles from the task description.
 
+**For multi-agent fan-out:** \`delegate\` (subtask to an agent by name), \`wait-for-task\` (bounded wait for a child's result), \`get-child-outputs\` (aggregate all children) — each replaces a get-swarm/send-task/poll chain.
+
 **For any other repetitive multi-tool pattern:** Call \`script-search\` with a natural-language description. If a script exists, use it.
 
 Script tools are deferred — load via \`ToolSearch("select:script-search,script-run")\` before first use.