@desplega.ai/agent-swarm 1.123.1 → 1.124.0

package/dist/{rbac-roles-xcbab18x.js → rbac-roles-5e72bbpk.js}

@@ -1,12 +1,12 @@
 import {
   PermissionVerbSchema
-} from "./cli-0pmkqg1d.js";
+} from "./cli-y43n987v.js";
 import {
   getDb,
   init_db
-} from "./cli-x2hk4m81.js";
+} from "./cli-3z4q09tn.js";
 import"./cli-z2zcxes1.js";
-import"./cli-zvbxe7pf.js";
+import"./cli-p0zgv8pj.js";
 import"./cli-4j2mrzag.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";

package/dist/{rbac-roles-r3j4z9vs.js → rbac-roles-gqxdp8st.js}

@@ -7,11 +7,11 @@ import {
   getUserGrant,
   listUserRoles,
   runRbacCliCommand
-} from "./cli-k3yfwe8g.js";
-import"./cli-0pmkqg1d.js";
-import"./cli-x2hk4m81.js";
+} from "./cli-zxb72ctk.js";
+import"./cli-y43n987v.js";
+import"./cli-3z4q09tn.js";
 import"./cli-z2zcxes1.js";
-import"./cli-zvbxe7pf.js";
+import"./cli-p0zgv8pj.js";
 import"./cli-4j2mrzag.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";

package/dist/{seed-pricing-bd669a7j.js → seed-pricing-bg42d7h2.js}

@@ -1,10 +1,10 @@
 import {
   buildModelsDevSeedRows,
   seedPricingFromModelsDev
-} from "./cli-7qvpf14x.js";
-import"./cli-x2hk4m81.js";
+} from "./cli-gzjsamwc.js";
+import"./cli-3z4q09tn.js";
 import"./cli-z2zcxes1.js";
-import"./cli-zvbxe7pf.js";
+import"./cli-p0zgv8pj.js";
 import"./cli-4j2mrzag.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";

package/dist/{setup-pg03xran.js → setup-nzk3kbbq.js}

@@ -4,14 +4,14 @@ import {
   createDefaultMcpJson,
   createDefaultSettingsLocal,
   createHooksConfig
-} from "./cli-mntyk3cr.js";
+} from "./cli-perb20ma.js";
 import {
   require_jsx_dev_runtime
 } from "./cli-wx82tw1k.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
-import"./cli-zvbxe7pf.js";
+import"./cli-p0zgv8pj.js";
 import {
   Box_default,
   Spinner,

package/dist/{worker-q5n4qwvq.js → worker-0p1jdzkm.js}

@@ -1,6 +1,6 @@
 import {
   runAgent
-} from "./cli-qrnhnhma.js";
+} from "./cli-ykthjw29.js";
 import"./cli-exfs8aym.js";
 import"./cli-jj1arm18.js";
 import"./cli-07er7wrs.js";
@@ -14,7 +14,7 @@ import"./cli-d6n0thxw.js";
 import"./cli-v1mwc5v2.js";
 import {
   getEnabledCapabilities
-} from "./cli-hgkf9zmd.js";
+} from "./cli-x268say8.js";
 import"./cli-1z7048dy.js";
 import"./cli-gz9sbyk3.js";
 import"./cli-ftyf58xj.js";
@@ -25,36 +25,36 @@ import"./cli-tng3131n.js";
 import"./cli-zm7njwzd.js";
 import"./cli-cw70hymf.js";
 import"./cli-e61fs2hp.js";
-import"./cli-256kb8p5.js";
-import"./cli-7rk0bbfr.js";
-import"./cli-7qvpf14x.js";
-import"./cli-k3yfwe8g.js";
-import"./cli-0pmkqg1d.js";
-import"./cli-kqgkfpz7.js";
-import"./cli-2e5t0yjj.js";
+import"./cli-2yr6edr7.js";
+import"./cli-qf7acvyr.js";
+import"./cli-gzjsamwc.js";
+import"./cli-zxb72ctk.js";
+import"./cli-y43n987v.js";
+import"./cli-gkvf8d83.js";
+import"./cli-kk58tg33.js";
 import"./cli-f14fvzag.js";
 import"./cli-3dpj7atn.js";
-import"./cli-333x50bh.js";
-import"./cli-sj43m5z0.js";
+import"./cli-h89g0qrd.js";
+import"./cli-wn3m6q54.js";
 import"./cli-jkhwmmgg.js";
-import"./cli-ca32n52j.js";
-import"./cli-1kv5sydm.js";
+import"./cli-mmk5vagg.js";
+import"./cli-p0ec4vv6.js";
 import"./cli-q25ejbyn.js";
-import"./cli-mb3gz7qr.js";
+import"./cli-mcez7z4p.js";
 import"./cli-fad8m16k.js";
 import"./cli-7zd05xb4.js";
-import"./cli-82eq5zf5.js";
-import"./cli-xv09zc8e.js";
-import"./cli-1cah98w1.js";
-import"./cli-r07fhvsk.js";
+import"./cli-92bqgbgy.js";
+import"./cli-0925phzv.js";
+import"./cli-qwsagsmg.js";
+import"./cli-dq2ssyf0.js";
 import"./cli-rkndnn90.js";
 import"./cli-b0p7rfnd.js";
 import"./cli-5ncdb7ff.js";
 import"./cli-wspgs9bt.js";
 import"./cli-dh55d5fg.js";
-import"./cli-x2hk4m81.js";
+import"./cli-3z4q09tn.js";
 import"./cli-z2zcxes1.js";
-import"./cli-zvbxe7pf.js";
+import"./cli-p0zgv8pj.js";
 import"./cli-4j2mrzag.js";
 import"./cli-bw80ck94.js";
 import"./cli-xz9aq0rf.js";

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "1.123.1",
+    "version": "1.124.0",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [
@@ -19728,6 +19728,28 @@
             "required": false,
             "name": "status",
             "in": "query"
+          },
+          {
+            "schema": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 100
+            },
+            "required": false,
+            "name": "limit",
+            "in": "query"
+          },
+          {
+            "schema": {
+              "type": [
+                "integer",
+                "null"
+              ],
+              "minimum": 0
+            },
+            "required": false,
+            "name": "offset",
+            "in": "query"
           }
         ],
         "responses": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "1.123.1",
+  "version": "1.124.0",
   "description": "Multi-agent orchestration for Claude Code, Codex, Gemini CLI, and other AI coding assistants",
   "license": "MIT",
   "author": "desplega.sh <contact@desplega.sh>",

package/src/be/db.ts

@@ -8679,15 +8679,92 @@ export function updateWorkflowRun(
   return run;
 }
 
-export function listWorkflowRuns(workflowId: string): WorkflowRun[] {
+export type WorkflowRunListOptions = {
+  status?: WorkflowRunStatus;
+  limit?: number;
+  offset?: number;
+};
+
+export type WorkflowRunPage = {
+  runs: WorkflowRun[];
+  page: {
+    limit: number;
+    offset: number;
+    total: number;
+    hasMore: boolean;
+    nextOffset?: number;
+  };
+};
+
+export function listWorkflowRuns(
+  workflowId: string,
+  options: WorkflowRunListOptions = {},
+): WorkflowRun[] {
+  const conditions = ["workflowId = ?"];
+  const params: Array<string | number> = [workflowId];
+  if (options.status) {
+    conditions.push("status = ?");
+    params.push(options.status);
+  }
+
+  let pagination = "";
+  if (options.limit !== undefined) {
+    pagination = " LIMIT ? OFFSET ?";
+    params.push(options.limit, options.offset ?? 0);
+  } else if (options.offset !== undefined) {
+    pagination = " LIMIT -1 OFFSET ?";
+    params.push(options.offset);
+  }
+
   return getDb()
-    .prepare<WorkflowRunRow, [string]>(
-      "SELECT * FROM workflow_runs WHERE workflowId = ? ORDER BY startedAt DESC",
+    .prepare<WorkflowRunRow, Array<string | number>>(
+      `SELECT * FROM workflow_runs
+       WHERE ${conditions.join(" AND ")}
+       ORDER BY startedAt DESC, id DESC${pagination}`,
     )
-    .all(workflowId)
+    .all(...params)
     .map(rowToWorkflowRun);
 }
 
+export function countWorkflowRuns(
+  workflowId: string,
+  options: Pick<WorkflowRunListOptions, "status"> = {},
+): number {
+  const conditions = ["workflowId = ?"];
+  const params: string[] = [workflowId];
+  if (options.status) {
+    conditions.push("status = ?");
+    params.push(options.status);
+  }
+  const row = getDb()
+    .prepare<{ count: number }, string[]>(
+      `SELECT COUNT(*) AS count FROM workflow_runs WHERE ${conditions.join(" AND ")}`,
+    )
+    .get(...params);
+  return row?.count ?? 0;
+}
+
+export function listWorkflowRunsPage(
+  workflowId: string,
+  options: Required<Pick<WorkflowRunListOptions, "limit" | "offset">> &
+    Pick<WorkflowRunListOptions, "status">,
+): WorkflowRunPage {
+  const runs = listWorkflowRuns(workflowId, options);
+  const total = countWorkflowRuns(workflowId, { status: options.status });
+  const nextOffset = options.offset + runs.length;
+  const hasMore = nextOffset < total;
+  return {
+    runs,
+    page: {
+      limit: options.limit,
+      offset: options.offset,
+      total,
+      hasMore,
+      ...(hasMore ? { nextOffset } : {}),
+    },
+  };
+}
+
 // ============================================================================
 // Workflow Run Step CRUD
 // ============================================================================

package/src/be/scripts/typecheck.ts

@@ -106,7 +106,7 @@ export interface SwarmSdk {
   // --- workflows ---
   workflow_list(args?: { enabled?: boolean; includeFull?: boolean; consecutiveErrorsMin?: number; lastRunStatus?: "running" | "waiting" | "completed" | "failed" | "skipped" | "cancelled" }): Promise<unknown>;
   workflow_get(args: { id: string }): Promise<unknown>;
-  workflow_listRuns(args: { workflowId: string; status?: "running" | "waiting" | "completed" | "failed" | "skipped" | "cancelled" }): Promise<unknown>;
+  workflow_listRuns(args: { workflowId: string; status?: "running" | "waiting" | "completed" | "failed" | "skipped" | "cancelled"; limit?: number; offset?: number }): Promise<unknown>;
   workflow_getRun(args: { id: string }): Promise<unknown>;
   // --- prompt templates ---
   prompt_list(args?: { eventType?: string; scope?: "global" | "agent" | "repo"; scopeId?: string; isDefault?: boolean }): Promise<unknown>;
@@ -299,6 +299,8 @@ export interface ScriptContext {
  * A swarm script's default export. \`args\` comes FIRST, \`ctx\` second — never swap them.
  *
  * @example
+ * import type { ScriptContext } from "swarm-sdk";
+ *
  * export default async function (args: { name: string }, ctx: ScriptContext) {
  *   await ctx.logger.log(\`hello \${args.name}\`);
  *   return { ok: true };
@@ -887,15 +889,17 @@ void _scriptMain;
 
   if (diagnostics.length === 0) return { ok: true };
 
-  const formatted = ts.formatDiagnosticsWithColorAndContext(diagnostics, {
+  const formatHost: ts.FormatDiagnosticsHost = {
     getCanonicalFileName: (fileName) => fileName,
     getCurrentDirectory: () => "/virtual",
     getNewLine: () => "\n",
-  });
+  };
 
   return {
     ok: false,
-    diagnostics: formatted.split("\n\n").filter(Boolean),
+    diagnostics: diagnostics.map((diagnostic) =>
+      ts.formatDiagnosticsWithColorAndContext([diagnostic], formatHost).trimEnd(),
+    ),
     structured: diagnostics.map(toStructured),
   };
 }

package/src/be/seed-scripts/catalog/task-context-gathering.ts

@@ -81,7 +81,7 @@ export default async function taskContextGathering(args: any, ctx: any) {
   memories.sort((a: any, b: any) => b.compositeScore - a.compositeScore);
 
   return {
-    task: slimTask(taskPayload?.task),
+    task: slimTask(taskPayload),
     requestedBy: taskPayload?.requestedBy,
     attachments: taskPayload?.attachments ?? [],
     queriesRun: queries.length,

package/src/http/workflows.ts

@@ -11,6 +11,7 @@ import {
   getWorkflowVersion,
   getWorkflowVersions,
   listWorkflowRuns,
+  listWorkflowRunsPage,
   listWorkflows,
   updateWorkflow,
   withFavoriteFlags,
@@ -209,6 +210,8 @@ const listWorkflowRunsRoute = route({
   params: z.object({ id: z.string() }),
   query: z.object({
     status: WorkflowRunStatusSchema.optional(),
+    limit: z.coerce.number().int().min(1).max(100).optional(),
+    offset: z.coerce.number().int().min(0).optional(),
   }),
   responses: {
     200: { description: "Workflow run list" },
@@ -754,11 +757,20 @@ export async function handleWorkflows(
   if (listWorkflowRunsRoute.match(req.method, pathSegments)) {
     const parsed = await listWorkflowRunsRoute.parse(req, res, pathSegments, queryParams);
     if (!parsed) return true;
-    let runs = listWorkflowRuns(parsed.params.id);
-    // Apply optional status filter
-    if (parsed.query?.status) {
-      runs = runs.filter((r) => r.status === parsed.query.status);
+    const paginationRequested =
+      parsed.query?.limit !== undefined || parsed.query?.offset !== undefined;
+    if (paginationRequested) {
+      const page = listWorkflowRunsPage(parsed.params.id, {
+        status: parsed.query?.status,
+        limit: parsed.query?.limit ?? 20,
+        offset: parsed.query?.offset ?? 0,
+      });
+      json(res, page);
+      return true;
     }
+    // Preserve the pre-pagination response for the UI when limit/offset are
+    // omitted: a bare array containing every matching run.
+    const runs = listWorkflowRuns(parsed.params.id, { status: parsed.query?.status });
     json(res, runs);
     return true;
   }

package/src/prompts/session-templates.ts

@@ -450,20 +450,23 @@ registerTemplate({
   defaultBody: `
 ### Script Authoring Contract (read BEFORE writing any script)
 
-**Entry point — \`args\` FIRST, \`ctx\` SECOND.** A one-parameter \`function (ctx)\` still typechecks, but at runtime that parameter receives \`args\`, so every \`ctx.*\` access throws. This is the single most common cause of failed script runs.
+**Entry point — \`args\` FIRST, \`ctx\` SECOND.** A one-parameter \`function (ctx)\` can execute through \`script-run\`, but at runtime that parameter receives \`args\`, so every \`ctx.*\` access throws. \`script-upsert\` also rejects an untyped parameter under strict typechecking. This is the single most common cause of failed script runs.
 
 \`\`\`ts
+import type { ScriptContext } from "swarm-sdk";
 import * as z from "zod";
 
 export const argsSchema = z.object({ taskId: z.string(), limit: z.number().optional() });
 
-export default async function (args: z.infer<typeof argsSchema>, ctx) {
+export default async function (args: z.infer<typeof argsSchema>, ctx: ScriptContext) {
   const res = await ctx.swarm.task_get({ taskId: args.taskId });
-  const task = res?.data ?? res;
+  const task = ((res as { data?: unknown }).data ?? res) as { title?: string };
   return { title: task?.title };
 }
 \`\`\`
 
+**Typechecking:** inline source passed to \`script-run\` executes without a compile-time typecheck. \`script-upsert\` typechecks before saving, so import \`ScriptContext\` from \`"swarm-sdk"\` as shown above to make inline code promotion-safe. Use \`script-query-types\` for the authoritative SDK and stdlib declarations.
+
 **What \`ctx\` actually holds for inline/named scripts (\`script-run\` / \`script-upsert\`) — nothing else:**
 - \`ctx.swarm.*\` — the swarm SDK: \`task_get\`, \`task_send\`, \`task_storeProgress\`, \`task_action\`, \`task_list\`, \`message_post\`, \`message_read\`, \`slack_reply\`, \`memory_search\`, \`kv_get\`/\`kv_set\`/\`kv_del\`/\`kv_incr\`/\`kv_list\`, \`swarm_get\`, \`agent_info\`, and more. Responses are usually wrapped — prefer \`res?.data ?? res\`.
 - \`ctx.swarm.config\` — \`apiKey\`, \`agentId\`, \`mcpBaseUrl\`, plus \`ctx.swarm.config.get("KEY")\` for user values. All are \`Redacted\` wrappers: they stringify to \`<redacted>\`, and you must never unwrap them into a return value, log line, or request body you build by hand.

package/src/scripts-runtime/swarm-sdk.ts

@@ -270,10 +270,20 @@ function bridgeRequestFor(name: string, args: unknown): BridgeRequest | null {
     case "workflow_listRuns": {
       const wfId = typeof body.workflowId === "string" ? body.workflowId : undefined;
       if (!wfId) throw new Error("workflow_listRuns requires string `workflowId`");
+      const limit = body.limit === undefined ? 20 : body.limit;
+      const offset = body.offset === undefined ? 0 : body.offset;
+      if (!Number.isInteger(limit) || (limit as number) < 1 || (limit as number) > 100) {
+        throw new Error("workflow_listRuns `limit` must be an integer between 1 and 100");
+      }
+      if (!Number.isInteger(offset) || (offset as number) < 0) {
+        throw new Error("workflow_listRuns `offset` must be a non-negative integer");
+      }
       return {
         method: "GET",
         path: appendQuery(`/api/workflows/${encodeURIComponent(wfId)}/runs`, {
           status: body.status,
+          limit,
+          offset,
         }),
       };
     }

package/src/scripts-runtime/types/stdlib.d.ts

@@ -182,6 +182,8 @@ declare module "swarm-sdk" {
     workflow_listRuns(args: {
       workflowId: string;
       status?: "running" | "waiting" | "completed" | "failed" | "skipped" | "cancelled";
+      limit?: number;
+      offset?: number;
     }): Promise<unknown>;
     workflow_getRun(args: { id: string }): Promise<unknown>;
     // --- prompt templates ---
@@ -442,6 +444,8 @@ declare module "swarm-sdk" {
    * A swarm script's default export. `args` comes FIRST, `ctx` second — never swap them.
    *
    * @example
+   * import type { ScriptContext } from "swarm-sdk";
+   *
    * export default async function (args: { name: string }, ctx: ScriptContext) {
    *   await ctx.logger.log(`hello ${args.name}`);
    *   return { ok: true };

package/src/scripts-runtime/types/swarm-sdk.d.ts

@@ -164,6 +164,8 @@ declare module "swarm-sdk" {
     workflow_listRuns(args: {
       workflowId: string;
       status?: "running" | "waiting" | "completed" | "failed" | "skipped" | "cancelled";
+      limit?: number;
+      offset?: number;
     }): Promise<unknown>;
     workflow_getRun(args: { id: string }): Promise<unknown>;
     // --- prompt templates ---
@@ -424,6 +426,8 @@ declare module "swarm-sdk" {
    * A swarm script's default export. `args` comes FIRST, `ctx` second — never swap them.
    *
    * @example
+   * import type { ScriptContext } from "swarm-sdk";
+   *
    * export default async function (args: { name: string }, ctx: ScriptContext) {
    *   await ctx.logger.log(`hello ${args.name}`);
    *   return { ok: true };

package/src/telemetry.ts

@@ -218,16 +218,19 @@ export async function initTelemetry(
     const existing = await getConfig("telemetry_installation_id");
     if (existing) {
       installationId = existing;
-      // Backfill for installs that minted an ID before `telemetry_installed_at`
-      // existed. This reflects the upgrade date, not the true original install
-      // date, but it's the earliest timestamp we can attribute with certainty
-      // — only api-server (generateIfMissing) backfills, same authority rule
-      // as the installation ID itself.
+      // A pre-existing installation ID with no stored anchor means this
+      // install predates `telemetry_installed_at` tracking. Do NOT mint
+      // now() as a stand-in "install date" here — that back-fills a date
+      // that's wrong by however long the install has actually existed
+      // (seen: 110 days on our own production install after a routine
+      // upgrade). Leave installedAt null so the field is omitted from the
+      // payload: absence unambiguously means "pre-existing install, anchor
+      // unknown", and consumers can fall back to min(occurred_at) per
+      // installation_id in ClickHouse for the real anchor. Only a
+      // genuinely new installationId (the branch below) mints one.
       const existingInstalledAt = await getConfig("telemetry_installed_at");
       if (existingInstalledAt) {
         installedAt = existingInstalledAt;
-      } else if (generateIfMissing) {
-        await tryPersistInstalledAt(setConfig);
       }
     } else if (generateIfMissing) {
       const candidateId = `install_${randomUUID().replace(/-/g, "").slice(0, 16)}`;

package/src/tests/mcp-tools.test.ts

@@ -48,9 +48,9 @@ describe("script MCP tools", () => {
       "script-search":
         "Semantic search over swarm-shared TypeScript scripts (catalog persisted in the agent-swarm DB; callable from agents and workflows). For ephemeral throwaway TS on your local machine, use code-mode instead.",
       "script-run":
-        "Run a named swarm-shared script (callable across agents and from workflow `swarm-script` nodes), OR inline source (auto-saved as scratch to the catalog). Use for swarm-visible, durable scripts. For local-only throwaway TS, use code-mode `run`.",
+        "Run a named swarm-shared script (callable across agents and from workflow `swarm-script` nodes), OR inline source (auto-saved as scratch to the catalog). Inline source executes without the `script-upsert` compile-time typecheck. Use for swarm-visible, durable scripts. For local-only throwaway TS, use code-mode `run`.",
       "script-upsert":
-        "Persist a TypeScript script to the swarm catalog under your agent scope (or global if you're a lead). Other agents and workflow nodes will be able to find and run it. For local-only scripts, use code-mode `save`.",
+        'Typecheck and persist a TypeScript script to the swarm catalog under your agent scope (or global if you\'re a lead). Import `ScriptContext` from "swarm-sdk" for a real context type. Other agents and workflow nodes will be able to find and run it. For local-only scripts, use code-mode `save`.',
       "script-delete":
         "Remove a swarm-shared script from the catalog. Versions table preserves history.",
       "script-query-types":

package/src/tests/prompt-template-session.test.ts

@@ -220,8 +220,15 @@ describe("Session templates — individual resolution", () => {
     const result = resolveTemplate("system.agent.script_authoring_contract", {});
     expect(result.skipped).toBe(false);
     expect(result.text).toContain("`args` FIRST, `ctx` SECOND");
+    expect(result.text).toContain('import type { ScriptContext } from "swarm-sdk"');
     expect(result.text).toContain("export default async function (args");
+    expect(result.text).toContain("ctx: ScriptContext");
     expect(result.text).toContain("export const argsSchema");
+    expect(result.text).toContain(
+      "inline source passed to `script-run` executes without a compile-time typecheck",
+    );
+    expect(result.text).toContain("`script-upsert` typechecks before saving");
+    expect(result.text).toContain("`script-query-types`");
     expect(result.text).toContain("ctx.swarm.config");
     expect(result.text).toContain("ctx.api.<slug>");
     expect(result.text).toContain("ctx.stdlib");

package/src/tests/scripts-mcp-e2e.test.ts

@@ -9,6 +9,7 @@ import { handleCore } from "../http/core";
 import { handleScriptRuns } from "../http/script-runs";
 import { handleScripts } from "../http/scripts";
 import { getPathSegments, parseQueryParams } from "../http/utils";
+import { getTemplateDefinition } from "../prompts/registry";
 import { registerScriptDeleteTool } from "../tools/script-delete";
 import { registerScriptRunTool } from "../tools/script-run";
 import { registerScriptRunsTools } from "../tools/script-runs";
@@ -16,6 +17,8 @@ import { registerScriptSearchTool } from "../tools/script-search";
 import { registerScriptUpsertTool } from "../tools/script-upsert";
 import { refreshSecretScrubberCache } from "../utils/secret-scrubber";
 
+import "../prompts/session-templates";
+
 const TEST_DB_PATH = "./test-scripts-mcp-e2e.sqlite";
 const API_KEY = "test-scripts-mcp-key-1234567890";
 
@@ -207,6 +210,27 @@ beforeEach(() => {
 });
 
 describe("script_ MCP HTTP proxy tools", () => {
+  test("upserts the canonical script authoring contract example verbatim", async () => {
+    const tools = buildToolServer();
+    const contract = getTemplateDefinition("system.agent.script_authoring_contract");
+    const source = contract?.defaultBody.match(/```ts\n([\s\S]*?)\n```/)?.[1];
+    expect(source).toBeTruthy();
+
+    const upsert = (await tools.upsert.handler(
+      {
+        name: "canonical-authoring-contract",
+        source,
+        description: "Canonical authoring contract fixture",
+        intent: "verify documented source typechecks",
+      },
+      meta(workerId),
+    )) as StructuredResult<{ name: string }>;
+
+    expect(upsert.isError).toBeFalsy();
+    expect(upsert.structuredContent.success).toBe(true);
+    expect(upsert.structuredContent.data?.name).toBe("canonical-authoring-contract");
+  });
+
   test("exercise script-upsert -> script-search -> script-run -> script-delete", async () => {
     const tools = buildToolServer();
     const source = `export default async (args: { value: number }) => ({ result: args.value * 7 });`;
@@ -462,8 +486,33 @@ describe("script_ MCP HTTP proxy tools", () => {
     // summarizes ... details carries the payload the model actually needs").
     expect(bad.isError).toBe(true);
     expect(bad.structuredContent.success).toBe(false);
-    expect(bad.structuredContent.message).toContain("Typecheck failed:");
+    expect(bad.structuredContent.message).toMatch(/^Typecheck failed:/);
+    expect(bad.structuredContent.message).not.toContain("(+1 more)");
     expect(bad.structuredContent.details).toBeTruthy();
-    expect(bad.content[0]?.text).toContain("Typecheck failed:");
+    expect(bad.content[0]?.text).toContain(bad.structuredContent.message);
+  });
+
+  test("reports only remaining typecheck diagnostics in the summary", async () => {
+    const tools = buildToolServer();
+    const bad = (await tools.upsert.handler(
+      {
+        name: "two-type-errors",
+        source: `
+          export default async () => {
+            const count: number = "one";
+            const enabled: boolean = 1;
+            return { count, enabled };
+          };
+        `,
+        description: "Two diagnostic fixture",
+        intent: "verify diagnostic summary cardinality",
+      },
+      meta(workerId),
+    )) as StructuredResult<{ diagnostics: string[] }>;
+
+    expect(bad.isError).toBe(true);
+    expect(bad.structuredContent.success).toBe(false);
+    expect(bad.structuredContent.message).toMatch(/\(\+1 more\)$/);
+    expect(bad.structuredContent.message).not.toContain("(+2 more)");
   });
 });

package/src/tests/scripts-typecheck.test.ts

@@ -123,6 +123,23 @@ describe("typecheckScript", () => {
     expect(d.message).toContain("number");
   });
 
+  test("returns exactly one formatted entry per compiler diagnostic", () => {
+    const result = typecheckScript(`
+      export default async () => {
+        const count: number = "one";
+        const enabled: boolean = 1;
+        return { count, enabled };
+      };
+    `);
+    expect(result.ok).toBe(false);
+    if (result.ok) return;
+
+    expect(result.structured).toHaveLength(2);
+    expect(result.diagnostics).toHaveLength(result.structured.length);
+    expect(result.diagnostics[0]).toContain("Type 'string' is not assignable to type 'number'");
+    expect(result.diagnostics[1]).toContain("Type 'number' is not assignable to type 'boolean'");
+  });
+
   test("captures the offending identifier on TS2304 (Cannot find name)", () => {
     const result = typecheckScript(`
       export default async () => {