@desplega.ai/agent-swarm 1.119.6 → 1.121.0

package/src/tools/script-connections/tool.ts

@@ -2,15 +2,15 @@ import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import * as z from "zod";
 import { getAgentById } from "@/be/db";
 import {
+  ConnectionAuthInputSchema,
+  connectionAuthInputFromFlat,
   getScriptConnectionById,
   listScriptConnections,
   refreshScriptConnection,
   setScriptConnectionEnabled,
-  upsertCredentialBinding,
   upsertScriptConnection,
 } from "@/be/script-connections";
 import { can } from "@/rbac";
-import { placeholderForConfigKey } from "@/scripts-runtime/credential-broker";
 import { createToolRegistrar } from "@/tools/utils";
 import { resolveScopedResourceId, scopedResourceScopeIdSchema } from "@/utils/scoped-resource";
 
@@ -51,24 +51,29 @@ const scriptConnectionsInputSchema = z.object({
     .nullable()
     .optional()
     .describe("Existing credential binding ID to attach to the connection."),
+  auth: ConnectionAuthInputSchema.optional().describe(
+    "Inline connection auth. type=bearer|header|query with an inline `secret` (stored encrypted under a derived key) or a shared `configKey`; type=oauth with an `authorizationId`; type=none clears auth. Auto-manages the connection's credential binding.",
+  ),
   configKey: z
     .string()
     .min(1)
     .max(255)
     .optional()
-    .describe(
-      "Config key used to create a credential binding when credentialBindingId is omitted.",
-    ),
+    .describe("Deprecated flat alias for auth: config key for a derived credential binding."),
   headerTemplate: z
     .string()
     .min(1)
     .optional()
-    .describe("Header template containing the config-key placeholder."),
+    .describe(
+      "Deprecated flat alias for auth: header template containing the config-key placeholder.",
+    ),
   queryTemplate: z
     .string()
     .min(1)
     .optional()
-    .describe("Query parameter template containing the config-key placeholder."),
+    .describe(
+      "Deprecated flat alias for auth: query parameter template containing the config-key placeholder.",
+    ),
   openapiSpecUrl: z
     .string()
     .url()
@@ -78,6 +83,12 @@ const scriptConnectionsInputSchema = z.object({
     .string()
     .optional()
     .describe("Inline OpenAPI JSON for upsert-openapi. Mutually exclusive with openapiSpecUrl."),
+  specSource: z
+    .object({ kind: z.literal("vendored"), slug: z.string().regex(/^[a-z0-9][a-z0-9-]*$/) })
+    .optional()
+    .describe(
+      "Vendored OpenAPI source. Mutually exclusive with openapiSpecUrl and openapiSpecJson.",
+    ),
   enabled: z.boolean().optional().describe("Whether the connection is enabled."),
 });
 
@@ -91,6 +102,14 @@ const scriptConnectionsOutputSchema = z.object({
 type ScriptConnectionsArgs = z.infer<typeof scriptConnectionsInputSchema>;
 type ExistingConnection = NonNullable<ReturnType<typeof getScriptConnectionById>>;
 
+function baseUrlProvenanceText(connection: {
+  slug: string;
+  baseUrlSource: string;
+  baseUrlMismatch?: { specUrl: string; effectiveUrl: string };
+}): string {
+  return `${connection.slug}: baseUrlSource=${connection.baseUrlSource}${connection.baseUrlMismatch ? `, baseUrlMismatch=${JSON.stringify(connection.baseUrlMismatch)}` : ""}`;
+}
+
 function resolveConnectionScope(
   args: ScriptConnectionsArgs,
   existing: ExistingConnection | null,
@@ -164,8 +183,16 @@ export const registerScriptConnectionsTool = (server: McpServer) => {
 
       if (args.action === "list") {
         const connections = listScriptConnections({ includeDisabled: true, allScopes: true });
+        const provenanceLines = connections
+          .filter((connection) => connection.kind === "openapi" || connection.baseUrl !== null)
+          .map(baseUrlProvenanceText);
         return {
-          content: [{ type: "text", text: `Found ${connections.length} script connection(s).` }],
+          content: [
+            {
+              type: "text",
+              text: `Found ${connections.length} script connection(s).${provenanceLines.length ? `\n${provenanceLines.join("\n")}` : ""}`,
+            },
+          ],
           structuredContent: {
             yourAgentId: requestInfo.agentId,
             success: true,
@@ -226,7 +253,12 @@ export const registerScriptConnectionsTool = (server: McpServer) => {
           };
         }
         return {
-          content: [{ type: "text", text: `Script connection ${refreshed.slug} refreshed.` }],
+          content: [
+            {
+              type: "text",
+              text: `Script connection ${refreshed.slug} refreshed (${baseUrlProvenanceText(refreshed)}).`,
+            },
+          ],
           structuredContent: {
             yourAgentId: requestInfo.agentId,
             success: !refreshed.generationError,
@@ -292,23 +324,6 @@ export const registerScriptConnectionsTool = (server: McpServer) => {
           };
         }
 
-        let credentialBindingId = args.credentialBindingId ?? null;
-        if (!credentialBindingId && args.configKey) {
-          const placeholder = placeholderForConfigKey(args.configKey);
-          const bindingScope = args.scope ?? "global";
-          const binding = upsertCredentialBinding({
-            configKey: args.configKey,
-            allowedHosts: args.allowedHosts,
-            headerTemplate:
-              args.headerTemplate ??
-              (args.queryTemplate ? undefined : `Authorization: Bearer ${placeholder}`),
-            queryTemplate: args.queryTemplate,
-            scope: bindingScope,
-            scopeId: resolveScopedResourceId(bindingScope, args.scopeId, "bindings"),
-          });
-          credentialBindingId = binding.id;
-        }
-
         const existing = args.id ? getScriptConnectionById(args.id) : null;
         const { scope, scopeId } = resolveConnectionScope(args, existing);
         const connection = await upsertScriptConnection({
@@ -320,7 +335,14 @@ export const registerScriptConnectionsTool = (server: McpServer) => {
           scopeId,
           baseUrl: args.baseUrl,
           allowedHosts: args.allowedHosts,
-          credentialBindingId,
+          auth: connectionAuthInputFromFlat({
+            auth: args.auth,
+            configKey: args.configKey,
+            headerTemplate: args.headerTemplate,
+            queryTemplate: args.queryTemplate,
+            allowedHosts: args.allowedHosts,
+          }),
+          credentialBindingId: args.credentialBindingId ?? undefined,
           enabled: resolveConnectionEnabled(args, existing),
         });
 
@@ -338,56 +360,40 @@ export const registerScriptConnectionsTool = (server: McpServer) => {
         };
       }
 
-      if (!args.slug || !args.baseUrl || (!args.openapiSpecJson && !args.openapiSpecUrl)) {
+      if (!args.slug || (!args.openapiSpecJson && !args.openapiSpecUrl && !args.specSource)) {
         return {
           content: [
             {
               type: "text",
-              text: "slug, baseUrl, and either openapiSpecJson or openapiSpecUrl are required.",
+              text: "slug and exactly one OpenAPI spec source (openapiSpecJson, openapiSpecUrl, or specSource) are required.",
             },
           ],
           structuredContent: {
             yourAgentId: requestInfo.agentId,
             success: false,
-            message: "slug, baseUrl, and either openapiSpecJson or openapiSpecUrl are required.",
+            message:
+              "slug and exactly one OpenAPI spec source (openapiSpecJson, openapiSpecUrl, or specSource) are required.",
             connections: listScriptConnections({ includeDisabled: true, allScopes: true }),
           },
         };
       }
-      if (args.openapiSpecJson && args.openapiSpecUrl) {
+      if ([args.openapiSpecJson, args.openapiSpecUrl, args.specSource].filter(Boolean).length > 1) {
         return {
           content: [
             {
               type: "text",
-              text: "Provide either openapiSpecJson or openapiSpecUrl, not both.",
+              text: "Provide exactly one OpenAPI spec source.",
             },
           ],
           structuredContent: {
             yourAgentId: requestInfo.agentId,
             success: false,
-            message: "Provide either openapiSpecJson or openapiSpecUrl, not both.",
+            message: "Provide exactly one OpenAPI spec source.",
             connections: listScriptConnections({ includeDisabled: true, allScopes: true }),
           },
         };
       }
 
-      let credentialBindingId = args.credentialBindingId ?? null;
-      if (!credentialBindingId && args.configKey) {
-        const placeholder = placeholderForConfigKey(args.configKey);
-        const bindingScope = args.scope ?? "global";
-        const binding = upsertCredentialBinding({
-          configKey: args.configKey,
-          allowedHosts: args.allowedHosts ?? [new URL(args.baseUrl).hostname],
-          headerTemplate:
-            args.headerTemplate ??
-            (args.queryTemplate ? undefined : `Authorization: Bearer ${placeholder}`),
-          queryTemplate: args.queryTemplate,
-          scope: bindingScope,
-          scopeId: resolveScopedResourceId(bindingScope, args.scopeId, "bindings"),
-        });
-        credentialBindingId = binding.id;
-      }
-
       const existing = args.id ? getScriptConnectionById(args.id) : null;
       const { scope, scopeId } = resolveConnectionScope(args, existing);
       const connection = await upsertScriptConnection({
@@ -398,8 +404,17 @@ export const registerScriptConnectionsTool = (server: McpServer) => {
         scope,
         scopeId,
         baseUrl: args.baseUrl,
-        allowedHosts: args.allowedHosts ?? [new URL(args.baseUrl).hostname],
-        credentialBindingId,
+        allowedHosts: args.allowedHosts,
+        auth: connectionAuthInputFromFlat({
+          auth: args.auth,
+          configKey: args.configKey,
+          headerTemplate: args.headerTemplate,
+          queryTemplate: args.queryTemplate,
+          allowedHosts: args.allowedHosts,
+        }),
+        credentialBindingId: args.credentialBindingId ?? undefined,
+        openapiSpecSourceKind: args.specSource ? "vendored" : undefined,
+        openapiSpecSource: args.specSource?.slug,
         openapiSpecUrl: args.openapiSpecUrl,
         openapiSpecJson: args.openapiSpecJson,
         enabled: resolveConnectionEnabled(args, existing),
@@ -407,7 +422,12 @@ export const registerScriptConnectionsTool = (server: McpServer) => {
 
       const connections = listScriptConnections({ includeDisabled: true, allScopes: true });
       return {
-        content: [{ type: "text", text: `Script connection ${connection.slug} saved.` }],
+        content: [
+          {
+            type: "text",
+            text: `Script connection ${connection.slug} saved (${baseUrlProvenanceText(connection)}).`,
+          },
+        ],
         structuredContent: {
           yourAgentId: requestInfo.agentId,
           success: !connection.generationError,

package/src/tools/swarm-config/set-config.ts

@@ -8,7 +8,6 @@ import {
 } from "@/be/swarm-config-guard";
 import { scheduleIntegrationsReload } from "@/http/core";
 import { can } from "@/rbac";
-import { CREDENTIAL_BINDINGS_CONFIG_KEY } from "@/scripts-runtime/credential-broker";
 import { createToolRegistrar } from "@/tools/utils";
 import { SwarmConfigSchema, SwarmConfigScopeSchema } from "@/types";
 
@@ -96,56 +95,31 @@ export const registerSetConfigTool = (server: McpServer) => {
           };
         }
 
-        if (key.toUpperCase() === CREDENTIAL_BINDINGS_CONFIG_KEY) {
-          const agent = getAgentById(requestInfo.agentId);
-          const decision = can({
-            principal: {
-              kind: "agent",
-              agentId: requestInfo.agentId,
-              isLead: agent?.isLead ?? false,
-            },
-            verb: "config.credential-bindings.write",
-            resource: { kind: "none" },
-            source: "mcp",
-          });
-          if (!decision.allow) {
-            const message =
-              "Only the lead can manage SCRIPT_CREDENTIAL_BINDINGS. Use the credential-bindings tool.";
-            return {
-              content: [{ type: "text", text: message }],
-              structuredContent: {
-                yourAgentId: requestInfo.agentId,
-                success: false,
-                message,
-              },
-            };
-          }
-        } else {
-          // Every other swarm-config key is lead-gated (DES-445 follow-up):
-          // previously ANY agent could write arbitrary config (incl. secret
-          // values), routing around the credential-bindings gate above.
-          const agent = getAgentById(requestInfo.agentId);
-          const decision = can({
-            principal: {
-              kind: "agent",
-              agentId: requestInfo.agentId,
-              isLead: agent?.isLead ?? false,
+        // Every swarm-config write is lead-gated (DES-445 follow-up): previously
+        // ANY agent could write arbitrary config (incl. secret values). The
+        // legacy SCRIPT_CREDENTIAL_BINDINGS blob is retired, so there is no
+        // special-cased key here anymore.
+        const agent = getAgentById(requestInfo.agentId);
+        const decision = can({
+          principal: {
+            kind: "agent",
+            agentId: requestInfo.agentId,
+            isLead: agent?.isLead ?? false,
+          },
+          verb: "config.write.any",
+          resource: { kind: "none" },
+          source: "mcp",
+        });
+        if (!decision.allow) {
+          const message = "Writing swarm config requires the lead agent.";
+          return {
+            content: [{ type: "text", text: message }],
+            structuredContent: {
+              yourAgentId: requestInfo.agentId,
+              success: false,
+              message,
             },
-            verb: "config.write.any",
-            resource: { kind: "none" },
-            source: "mcp",
-          });
-          if (!decision.allow) {
-            const message = "Writing swarm config requires the lead agent.";
-            return {
-              content: [{ type: "text", text: message }],
-              structuredContent: {
-                yourAgentId: requestInfo.agentId,
-                success: false,
-                message,
-              },
-            };
-          }
+          };
         }
 
         const validationError = validateConfigValue(key, value);

package/src/tools/update-profile.ts

@@ -6,7 +6,7 @@ import * as z from "zod";
 import { getAgentById, updateAgentName, updateAgentProfile } from "@/be/db";
 import { can } from "@/rbac";
 import { createToolRegistrar } from "@/tools/utils";
-import { type Agent, AgentSchema } from "@/types";
+import { type Agent, AgentAvatarSchema, AgentSchema } from "@/types";
 
 async function validateSetupScriptSyntax(setupScript: string): Promise<string | null> {
   const proc = Bun.spawn(["bash", "-n", "-c", setupScript], {
@@ -121,6 +121,11 @@ export const registerUpdateProfileTool = (server: McpServer) => {
           .describe(
             "Heartbeat checklist content (HEARTBEAT.md). Checked periodically — add standing orders for the lead to review. Synced to /workspace/HEARTBEAT.md.",
           ),
+        avatar: AgentAvatarSchema.nullable()
+          .optional()
+          .describe(
+            "Custom avatar: { type: 'lucide', icon: '<kebab-case-lucide-name>', color?: '#RRGGBB' }. Pass null to reset to the default deterministic icon/color.",
+          ),
       }),
       outputSchema: z.object({
         yourAgentId: z.string().uuid().optional(),
@@ -142,6 +147,7 @@ export const registerUpdateProfileTool = (server: McpServer) => {
         setupScript,
         toolsMd,
         heartbeatMd,
+        avatar,
       },
       requestInfo,
       _meta,
@@ -221,20 +227,21 @@ export const registerUpdateProfileTool = (server: McpServer) => {
         identityMd === undefined &&
         setupScript === undefined &&
         toolsMd === undefined &&
-        heartbeatMd === undefined
+        heartbeatMd === undefined &&
+        avatar === undefined
       ) {
         return {
           content: [
             {
               type: "text",
-              text: "At least one field (name, description, role, capabilities, claudeMd, soulMd, identityMd, setupScript, toolsMd, or heartbeatMd) must be provided.",
+              text: "At least one field (name, description, role, capabilities, claudeMd, soulMd, identityMd, setupScript, toolsMd, heartbeatMd, or avatar) must be provided.",
             },
           ],
           structuredContent: {
             yourAgentId: requestInfo.agentId,
             success: false,
             message:
-              "At least one field (name, description, role, capabilities, claudeMd, soulMd, identityMd, setupScript, toolsMd, or heartbeatMd) must be provided.",
+              "At least one field (name, description, role, capabilities, claudeMd, soulMd, identityMd, setupScript, toolsMd, heartbeatMd, or avatar) must be provided.",
           },
         };
       }
@@ -273,7 +280,8 @@ export const registerUpdateProfileTool = (server: McpServer) => {
           }
         }
 
-        // Update profile fields if provided
+        // Update profile fields if provided. `avatar` is spread in only when
+        // present so `null` (reset) stays distinguishable from "not provided".
         agent = updateAgentProfile(
           targetAgentId,
           {
@@ -286,6 +294,7 @@ export const registerUpdateProfileTool = (server: McpServer) => {
             setupScript,
             toolsMd,
             heartbeatMd,
+            ...(avatar !== undefined ? { avatar } : {}),
           },
           {
             changeSource: isUpdatingSelf ? "self_edit" : "lead_coaching",
@@ -381,6 +390,7 @@ export const registerUpdateProfileTool = (server: McpServer) => {
         if (setupScript !== undefined) updatedFields.push("setupScript");
         if (toolsMd !== undefined) updatedFields.push("toolsMd");
         if (heartbeatMd !== undefined) updatedFields.push("heartbeatMd");
+        if (avatar !== undefined) updatedFields.push("avatar");
 
         const targetLabel = isUpdatingSelf ? "own" : `agent ${targetAgentId}`;
         return {

package/src/tracker/types.ts

@@ -3,12 +3,23 @@ export type TrackerProvider = "linear" | "jira"; // extend as providers are adde
 export interface OAuthApp {
   id: string;
   provider: string;
+  displayName: string | null;
   clientId: string;
   clientSecret: string;
+  clientSecretEncrypted: boolean;
   authorizeUrl: string;
   tokenUrl: string;
+  revocationUrl: string | null;
+  userinfoUrl: string | null;
   redirectUri: string;
   scopes: string;
+  scopeSeparator: string;
+  tokenAuthStyle: "body" | "basic";
+  tokenBodyFormat: "form" | "json";
+  requiresRefreshTokenRotation: boolean;
+  extraParamsJson: string | null;
+  source: "manual" | "dcr" | "curated-prefill";
+  mcpServerId: string | null;
   metadata: string; // JSON string
   createdAt: string;
   updatedAt: string;
@@ -21,6 +32,7 @@ export interface OAuthTokens {
   refreshToken: string | null;
   expiresAt: string;
   scope: string | null;
+  tokenVersion: number;
   createdAt: string;
   updatedAt: string;
 }

package/src/types.ts

@@ -371,6 +371,7 @@ export const AgentTaskSchema = z.object({
   agentId: z.uuid().nullable(), // Nullable for unassigned tasks
   creatorAgentId: z.uuid().optional(), // Who created this task (optional for Slack/API)
   task: z.string().min(1),
+  title: z.string().optional(), // Human-facing display title override (e.g. session rename); falls back to `task` when unset
   status: AgentTaskStatusSchema,
   source: AgentTaskSourceSchema.default("mcp"),
 
@@ -725,6 +726,25 @@ export type TaskTemplate = z.infer<typeof TaskTemplateSchema>;
 
 export const AgentStatusSchema = z.enum(["idle", "busy", "offline", "waiting_for_credentials"]);
 
+// Discriminated union so future avatar types (emoji, image, ...) can be added
+// with zero migrations — just a new zod branch + a UI renderer branch. Server
+// validates shape only; the UI owns the curated icon catalog and deterministic
+// fallback, so an unrecognized/hand-set icon name can never break rendering.
+export const AgentAvatarSchema = z.discriminatedUnion("type", [
+  z.object({
+    type: z.literal("lucide"),
+    icon: z
+      .string()
+      .regex(/^[a-z0-9-]+$/)
+      .max(64),
+    color: z
+      .string()
+      .regex(/^#[0-9a-fA-F]{6}$/)
+      .optional(),
+  }),
+]);
+export type AgentAvatar = z.infer<typeof AgentAvatarSchema>;
+
 export const AgentSchema = z.object({
   id: z.uuid(),
   name: z.string().min(1),
@@ -784,6 +804,14 @@ export const AgentSchema = z.object({
     .nullable()
     .optional(),
 
+  // Custom avatar (icon + color). Null/missing = fall back to the
+  // deterministic hash-derived icon and color (see apps/ui/src/lib/agent-icon.ts
+  // and agent-color.ts). Migration 119 adds the column.
+  avatar: z
+    .lazy(() => AgentAvatarSchema)
+    .nullable()
+    .optional(),
+
   createdAt: z.iso.datetime().default(() => new Date().toISOString()),
   lastUpdatedAt: z.iso.datetime().default(() => new Date().toISOString()),
 });
@@ -1767,6 +1795,7 @@ export type AgentTaskSummary = Pick<
   | "agentId"
   | "creatorAgentId"
   | "task"
+  | "title"
   | "status"
   | "source"
   | "taskType"

package/src/utils/context-window.ts

@@ -27,6 +27,7 @@ export const CONTEXT_FORMULA = "input-cache-output" as const;
 
 const CONTEXT_WINDOW_DEFAULTS: Record<string, number> = {
   // Anthropic Fable / Mythos tier
+  "claude-opus-5": 1_000_000,
   "claude-fable-5": 1_000_000,
   "claude-mythos-5": 1_000_000,
   "claude-sonnet-5": 1_000_000,

package/src/workflows/executors/swarm-script.ts

@@ -3,7 +3,7 @@ import {
   getScriptApiConnectionDescriptors,
   getScriptMcpConnectionDescriptors,
 } from "../../be/script-connections";
-import { buildScriptCredentialBindings } from "../../be/script-credential-broker";
+import { buildScriptCredentialBindingsWithFailures } from "../../be/script-credential-broker";
 import { getScript, getScriptVersion } from "../../be/scripts/db";
 import { DEFAULT_SCRIPT_RESOURCES } from "../../scripts-runtime/executors/types";
 import { runScript } from "../../scripts-runtime/loader";
@@ -72,12 +72,16 @@ export class SwarmScriptExecutor extends BaseExecutor<
       return { status: "failed", error: resolved.error };
     }
 
+    const credentials = await buildScriptCredentialBindingsWithFailures({
+      agentId: agentId ?? undefined,
+    });
     const output = await runScript({
       source: resolved.source,
       args: config.args,
       fsMode: "none",
       agentId: agentId ?? "workflow",
-      egressSecrets: await buildScriptCredentialBindings({ agentId: agentId ?? undefined }),
+      egressSecrets: credentials.egressSecrets,
+      failedBindings: credentials.failedBindings,
       apiConnections: getScriptApiConnectionDescriptors({ agentId: agentId ?? undefined }),
       mcpConnections: getScriptMcpConnectionDescriptors({ agentId: agentId ?? undefined }),
       timeoutMs: config.timeoutMs,

package/vendored-openapi/README.md

@@ -0,0 +1,22 @@
+# Vendored OpenAPI specs
+
+This directory is reviewed source, not a runtime download cache. `manifest.json` defines the
+blessed catalog entries and their allowlisted `METHOD /path` operations. Each JSON file contains
+only that operation subset, its real parameters/request bodies/responses, and the transitive
+closure of locally referenced schemas needed by generated script clients.
+
+Run `bun run refresh:vendored-openapi` to retrieve directly trim-compatible pinned upstream
+documents, re-trim them, print which files changed, and update manifest checksums. It stages every
+change before writing so a failed fetch cannot leave a partial refresh. Machine sources are pinned
+by both their upstream version and raw-document SHA-256. `operator-review` entries are canonicalized
+and checksummed locally but are never fetched. For those entries, `specSourceUrl` is an
+operator-reference URL documenting provenance; it is not asserted to be a directly fetchable
+OpenAPI document. Run `bun run check:vendored-openapi` offline in CI; it rejects non-canonical
+trims, unknown operations, unsafe filenames, inconsistent provenance metadata, and hash drift.
+
+Provenance: GitHub and Slack are pinned to upstream Git commits. Jira is pinned to the raw SHA-256
+of Atlassian's Cloud v3 document because its published URL is mutable. Gmail is an
+operator-reviewed OpenAPI façade based on Google's v1 Discovery model. Linear publishes a GraphQL
+endpoint rather than an OpenAPI document, so `linear.json` is an operator-reviewed façade for the
+documented `POST /graphql` issue query/mutation shapes. Both façades must remain narrow and be
+reviewed when their reference APIs change.