@desplega.ai/agent-swarm 1.148.0 → 1.149.0

package/dist/{hook-qfwjydvn.js → hook-kq9wp0ep.js}

@@ -1,25 +1,25 @@
 import {
   handleHook
-} from "./cli-brxyat7h.js";
-import"./cli-d8brzxjb.js";
-import"./cli-rvqz34y5.js";
+} from "./cli-cr12paw2.js";
+import"./cli-4wtq5jjv.js";
+import"./cli-jecc01cb.js";
 import"./cli-hp1n6zq3.js";
 import"./cli-xvkmedgn.js";
 import"./cli-1ebpar1q.js";
 import"./cli-e7d20cty.js";
 import"./cli-3dpj7atn.js";
 import"./cli-f14fvzag.js";
-import"./cli-m9sxbkhm.js";
+import"./cli-zvz62chv.js";
 import"./cli-bsakbbkm.js";
 import"./cli-9d8ntetj.js";
-import"./cli-y6b6fb76.js";
-import"./cli-kpv03zhj.js";
+import"./cli-08b07b4r.js";
+import"./cli-3apbzgyk.js";
 import"./cli-e29gmdmw.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-anedxf1w.js";
-import"./cli-xqcq9y5e.js";
+import"./cli-kjwt6hdf.js";
+import"./cli-r2ap2czm.js";
 import"./cli-c4eeb5q2.js";
 import"./cli-btbzvq95.js";
 import"./cli-1m2e086m.js";

package/dist/{http-h6g7bv5b.js → http-hrf77v87.js}

@@ -182,8 +182,8 @@ import {
   warnIfCorsAllowsAnyOrigin,
   wireHttpSpanLifecycle,
   writeSkillsToFilesystem
-} from "./cli-p73drk6p.js";
-import"./cli-8fc8de14.js";
+} from "./cli-yb9qhqam.js";
+import"./cli-0z2v4nhw.js";
 import {
   Anthropic
 } from "./cli-j490egb5.js";
@@ -201,16 +201,16 @@ import {
 import {
   calculateNextRun,
   dispatchScheduleTarget
-} from "./cli-56y3hch2.js";
+} from "./cli-ygweqcn4.js";
 import {
   getModelsCatalog
-} from "./cli-hp2est46.js";
+} from "./cli-sd5pv3b1.js";
 import {
   normalizeModelKey
-} from "./cli-0amc6myn.js";
+} from "./cli-9fy6nk6g.js";
 import {
   getUserGrant
-} from "./cli-hzhhrt7b.js";
+} from "./cli-k0cr4kat.js";
 import {
   can,
   clearAuditSink,
@@ -227,12 +227,12 @@ import {
   scriptSdkTypesWithGeneratedApis,
   scriptStdlibTypesWithGeneratedApis,
   typecheckScript
-} from "./cli-n9grk3yd.js";
+} from "./cli-n3dz2942.js";
 import {
   collectScriptReferences,
   getApp,
   listAppRecords
-} from "./cli-tebsjpk7.js";
+} from "./cli-19f354qr.js";
 import {
   require_dist
 } from "./cli-qgm2pfpq.js";
@@ -240,7 +240,7 @@ import {
   checkHeartbeatChecklist,
   runHeartbeatSweep,
   stopHeartbeat
-} from "./cli-cdjezzc7.js";
+} from "./cli-nye12xk5.js";
 import {
   AGENT_MAX_TASKS_CONFIG_KEY,
   createResumeFollowUp,
@@ -255,7 +255,7 @@ import {
   touchRuntimeInstance,
   upsertRuntimeInstance,
   upsertSwarmConfigWithPolicyMirror
-} from "./cli-3n7cbfjn.js";
+} from "./cli-mnmsfd1w.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-07jd68a1.js";
@@ -278,7 +278,7 @@ import {
   startWorkflowExecution,
   validateJsonSchema,
   verifyHmacSignature
-} from "./cli-f8j56xv2.js";
+} from "./cli-6pqcb4q0.js";
 import"./cli-1ebpar1q.js";
 import {
   deriveCodexKeySuffix,
@@ -363,11 +363,11 @@ import {
   upsertScriptByName,
   upsertScriptConnection,
   validateDefinition
-} from "./cli-0er5m69z.js";
+} from "./cli-aae6hz6a.js";
 import"./cli-epan13p1.js";
 import {
   searchScripts
-} from "./cli-kzvhgvk3.js";
+} from "./cli-2qts1hys.js";
 import {
   CANDIDATE_SET_MULTIPLIER,
   getEmbeddingProvider,
@@ -375,7 +375,7 @@ import {
   init_constants as init_constants2,
   init_reranker,
   rerank
-} from "./cli-5khqvvnq.js";
+} from "./cli-3q5ejx9p.js";
 import {
   detachedProcessGroup,
   forceTerminateProcessGroup,
@@ -386,7 +386,7 @@ import {
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
-import"./cli-m9sxbkhm.js";
+import"./cli-zvz62chv.js";
 import {
   acquireOAuthRefreshLock,
   buildAuthorizationUrl,
@@ -410,7 +410,7 @@ import {
   updateAuthorizationIdentity,
   updateOAuthAppById,
   upsertAuthorization
-} from "./cli-dcem3pr1.js";
+} from "./cli-9hspd3dp.js";
 import"./cli-fad8m16k.js";
 import"./cli-aehm1rbq.js";
 import"./cli-bsakbbkm.js";
@@ -418,7 +418,7 @@ import"./cli-51tf7ac3.js";
 import {
   MAX_TASK_ATTACHMENT_BYTES,
   recordTaskAttachmentUpload
-} from "./cli-hz8xhefy.js";
+} from "./cli-kgz4np97.js";
 import {
   FilesError,
   getFileStorageProvider,
@@ -441,10 +441,10 @@ import {
   revokeSessionToken,
   revokeToken,
   unlinkIdentity
-} from "./cli-xqcpg1st.js";
+} from "./cli-gv88e1vf.js";
 import {
   createTaskWithSiblingAwareness
-} from "./cli-7gn7c2af.js";
+} from "./cli-q50ef8g0.js";
 import {
   ensure,
   getSlackApp,
@@ -460,7 +460,7 @@ import {
   withRemoteContext,
   withSpan,
   withSpanContext
-} from "./cli-dk3me3qs.js";
+} from "./cli-d8ftsp62.js";
 import"./cli-q51yprfq.js";
 import"./cli-9d8ntetj.js";
 import"./cli-yatxqynm.js";
@@ -536,6 +536,7 @@ import {
   RepoGuidelinesInputSchema,
   RepoHooksSchema,
   ResumeReasonSchema,
+  RoutingReasonSchema,
   RuntimeInstanceSchema,
   ScheduledTaskSchema,
   ScheduledTaskTargetTypeSchema,
@@ -760,6 +761,7 @@ import {
   init_request_auth_context,
   init_steering,
   init_swarm_config_guard,
+  init_task_tool_manifest,
   init_telemetry,
   init_templates,
   init_types,
@@ -798,6 +800,7 @@ import {
   moveAssetKey,
   normalizeDate,
   pageContextKey,
+  parseTaskToolManifest,
   pauseTask,
   placeholderForConfigKey,
   promoteDraftTask,
@@ -814,6 +817,7 @@ import {
   resolvePromptTemplate,
   resumeTask,
   searchSkills,
+  selectTaskTools,
   setAgentHarnessProvider,
   setApiKeyName,
   setFavorite,
@@ -861,12 +865,12 @@ import {
   upsertSwarmConfig,
   validateConfigValue,
   withFavoriteFlags
-} from "./cli-6s2y152y.js";
+} from "./cli-yab68w40.js";
 import {
   IDENTITY_FIELD_BUDGETS,
   IdentityFieldBudgetError,
   init_identity_field_budget
-} from "./cli-y6b6fb76.js";
+} from "./cli-08b07b4r.js";
 import {
   getAllTemplateDefinitions,
   getTemplateDefinition,
@@ -877,7 +881,7 @@ import {
   interpolate,
   isSteeringEnabled,
   resolveTemplate
-} from "./cli-kpv03zhj.js";
+} from "./cli-3apbzgyk.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getAppUrl,
@@ -889,7 +893,8 @@ import {
 import"./cli-c2mk1kgf.js";
 import {
   init_env_flag,
-  isEnvFlagEnabled
+  isEnvFlagEnabled,
+  parseEnvFlag
 } from "./cli-ej6gbxfb.js";
 import {
   init_zod
@@ -906,13 +911,13 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-anedxf1w.js";
+} from "./cli-kjwt6hdf.js";
 import {
   init_secret_scrubber,
   registerVolatileSecret,
   scrubObject,
   scrubSecrets
-} from "./cli-xqcq9y5e.js";
+} from "./cli-r2ap2czm.js";
 import {
   import_websocket,
   import_websocket_server
@@ -5073,6 +5078,7 @@ async function handleApprovalRequests(req, res, pathSegments, queryParams) {
         });
         await createTaskExtended(taskText, {
           agentId: sourceTask.agentId,
+          routingReason: sourceTask.agentId ? "continuity" : undefined,
           parentTaskId: updated.sourceTaskId,
           source: "system",
           taskType: "hitl-follow-up",
@@ -5723,10 +5729,19 @@ function singleHeader(req, name) {
   const raw = req.headers[name];
   return Array.isArray(raw) ? raw[0] : raw;
 }
-async function userMayReadSecrets(req) {
+async function requestMayReadSecrets(req) {
   const auth = getRequestAuth(req);
   if (auth?.kind === "operator")
     return true;
+  if (auth?.kind === "agent") {
+    const agent = await getAgentById(auth.agentId);
+    return can({
+      principal: { kind: "agent", agentId: auth.agentId, isLead: agent?.isLead ?? false },
+      verb: "config.read.secrets",
+      resource: { kind: "none" },
+      source: "http"
+    }).allow;
+  }
   if (auth?.kind !== "user")
     return true;
   if (!isRbacEnabled())
@@ -5735,7 +5750,7 @@ async function userMayReadSecrets(req) {
   return grant.grantsAll || grant.verbs.has("config.read.secrets");
 }
 async function resolveSecretsRead(req, includeSecrets) {
-  if (!includeSecrets || await userMayReadSecrets(req)) {
+  if (!includeSecrets || await requestMayReadSecrets(req)) {
     return { effectiveIncludeSecrets: includeSecrets, secretsNote: "" };
   }
   return { effectiveIncludeSecrets: false, secretsNote: SECRETS_FORCE_MASK_NOTE };
@@ -5744,7 +5759,7 @@ async function ensureConfigAdmin(req, res, verb) {
   const auth = getRequestAuth(req);
   if (auth?.kind === "operator" || auth?.kind === "user")
     return true;
-  const agentId = singleHeader(req, "x-agent-id");
+  const agentId = auth?.kind === "agent" ? auth.agentId : singleHeader(req, "x-agent-id");
   const agent = agentId ? await getAgentById(agentId) : undefined;
   const decision = can({
     principal: { kind: "agent", agentId: agentId ?? "", isLead: agent?.isLead ?? false },
@@ -8977,7 +8992,9 @@ class StreamableHTTPServerTransport {
 
 // src/http/mcp.ts
 init_db();
+init_env_flag();
 init_request_auth_context();
+init_task_tool_manifest();
 var DEFAULT_MCP_TRANSPORT_IDLE_TIMEOUT_MS = 2 * 60 * 60 * 1000;
 function markMcpTransportActivity(sessionActivity, sessionId, now = Date.now()) {
   if (sessionId) {
@@ -9113,8 +9130,24 @@ async function handleMcp(req, res, transports, sessionActivity = {}, sessionAgen
           delete sessionActivity[transport.sessionId];
         }
       };
-      const configValue = (await getResolvedConfig(agentId)).find((config) => config.key === "SCRIPTS_ONLY_MCP")?.value;
+      const configs = await getResolvedConfig(agentId);
+      const configValue = configs.find((config) => config.key === "SCRIPTS_ONLY_MCP")?.value;
+      const preloadEnabled = parseEnvFlag(configs.find((config) => config.key === "TASK_TOOL_PRELOAD_ENABLED")?.value ?? process.env.TASK_TOOL_PRELOAD_ENABLED, false);
+      let preloadedTools = [];
+      if (preloadEnabled) {
+        const taskId = headerValue(req.headers["x-source-task-id"]);
+        const task = taskId ? await getTaskById(taskId) : undefined;
+        if (task?.agentId === agentId) {
+          const manifestValue = configs.find((config) => config.key === "TASK_TOOL_MANIFESTS")?.value ?? process.env.TASK_TOOL_MANIFESTS ?? "{}";
+          try {
+            preloadedTools = selectTaskTools(parseTaskToolManifest(manifestValue), task);
+          } catch {
+            console.warn("[MCP] Invalid TASK_TOOL_MANIFESTS; using ordinary tool discovery");
+          }
+        }
+      }
       const server = await createServer({
+        preloadedTools,
         scriptsOnly: resolveScriptsOnlyMode({
           env: process.env.SCRIPTS_ONLY_MCP,
           configValue
@@ -18278,6 +18311,8 @@ var agentTaskBodySchema = exports_external.object({
   template: exports_external.string().optional(),
   task: exports_external.string().optional(),
   agentId: exports_external.string().optional(),
+  routingReason: RoutingReasonSchema.optional(),
+  routingNote: exports_external.string().max(200).optional(),
   tags: exports_external.array(exports_external.string()).optional(),
   priority: exports_external.number().int().min(0).max(100).optional(),
   offerMode: exports_external.boolean().optional(),
@@ -18738,6 +18773,8 @@ async function handleScriptRuns(req, res, pathSegments, queryParams, agentId) {
     if (!task) {
       task = await createTaskExtended(parsed.body.template ?? parsed.body.task ?? parsed.body.stepKey, {
         agentId: parsed.body.agentId,
+        routingReason: parsed.body.routingReason ?? (parsed.body.agentId ? "human_pinned" : undefined),
+        routingNote: parsed.body.routingNote,
         tags: parsed.body.tags,
         priority: parsed.body.priority,
         offeredTo: parsed.body.offerMode ? parsed.body.agentId : undefined,
@@ -22007,6 +22044,8 @@ var createTask = route({
   body: exports_external.object({
     task: exports_external.string().min(1),
     agentId: exports_external.string().optional(),
+    routingReason: RoutingReasonSchema.optional(),
+    routingNote: exports_external.string().max(200).optional(),
     taskType: exports_external.string().optional(),
     tags: exports_external.array(exports_external.string()).optional(),
     priority: exports_external.number().int().min(0).max(100).optional(),
@@ -22023,6 +22062,14 @@ var createTask = route({
     modelTier: ModelTierSchema.optional(),
     effort: ReasoningEffortSchema.optional(),
     draft: exports_external.boolean().optional()
+  }).superRefine((body, ctx) => {
+    if ((body.agentId !== undefined || body.offeredTo !== undefined) && !body.routingReason) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        message: "routingReason is required when agentId or offeredTo is supplied.",
+        path: ["routingReason"]
+      });
+    }
   }),
   responses: {
     201: { description: "Task created", schema: AgentTaskSchema },
@@ -22492,9 +22539,10 @@ async function handleTasks(req, res, pathSegments, queryParams, myAgentId) {
       if (lead)
         defaultAgentId = lead.id;
     }
+    const parentTask = parsed.body.parentTaskId ? await getTaskById(parsed.body.parentTaskId) : null;
     let assetKey;
     try {
-      const inheritedKey = parsed.body.parentTaskId ? (await getTaskById(parsed.body.parentTaskId))?.key : undefined;
+      const inheritedKey = parentTask?.key;
       const requestedKey = parsed.body.key ?? inheritedKey;
       assetKey = requestedKey ? await authorizeAssetKeyWrite(requestedKey, trustedUserId) : undefined;
     } catch (error) {
@@ -22508,6 +22556,8 @@ async function handleTasks(req, res, pathSegments, queryParams, myAgentId) {
       const task = await createTaskWithSiblingAwareness(parsed.body.task, {
         key: assetKey,
         agentId: defaultAgentId,
+        routingReason: parsed.body.routingReason ?? (defaultAgentId ? parentTask?.agentId === defaultAgentId ? "continuity" : "skill" : undefined),
+        routingNote: parsed.body.routingNote,
         creatorAgentId: myAgentId || undefined,
         taskType: parsed.body.taskType || undefined,
         tags: parsed.body.tags || undefined,
@@ -24780,6 +24830,7 @@ async function routeKapsoInbound(payload) {
   }
   const task = await createTaskWithSiblingAwareness(await buildTaskDescription(payload), {
     agentId: mapping.agentId ?? null,
+    routingReason: mapping.agentId ? "human_pinned" : undefined,
     source: "system",
     taskType: "kapso-inbound",
     tags: ["kapso-whatsapp", "inbound"],
@@ -26504,7 +26555,7 @@ async function shutdown() {
     sessionsProcessed: getServerSessionsProcessed()
   });
   if (hasCapability("scheduling")) {
-    const { stopScheduler } = await import("./index-antf9t4p.js");
+    const { stopScheduler } = await import("./index-8hmeg8j1.js");
     stopScheduler();
   }
   stopHeartbeat();
@@ -26512,7 +26563,7 @@ async function shutdown() {
   await stopScriptRunSupervisor();
   await stopSlackApp();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { stopOAuthKeepalive } = await import("./keepalive-c4sp7yvd.js");
+    const { stopOAuthKeepalive } = await import("./keepalive-dxc12gvg.js");
     await stopOAuthKeepalive();
   }
   stopOAuthPendingGc();
@@ -26579,15 +26630,15 @@ try {
   console.warn("[startup] CAPABILITIES upgrade seed failed (non-fatal):", err);
 }
 try {
-  const { seedPricingFromModelsDev } = await import("./seed-pricing-t6y8d0vf.js");
+  const { seedPricingFromModelsDev } = await import("./seed-pricing-zbrn83xv.js");
   seedPricingFromModelsDev();
-  const { startPricingRefreshLoop } = await import("./pricing-refresh-kqxd7w9h.js");
+  const { startPricingRefreshLoop } = await import("./pricing-refresh-kaqg567e.js");
   startPricingRefreshLoop();
 } catch (err) {
   console.error("[startup] Failed to seed pricing rows:", err);
 }
 try {
-  const { ensureRbacSeedsSynced } = await import("./rbac-roles-t3wygpth.js");
+  const { ensureRbacSeedsSynced } = await import("./rbac-roles-cf97v1vd.js");
   ensureRbacSeedsSynced();
 } catch (err) {
   console.error("[startup] Failed to sync RBAC seed rows:", err);
@@ -26595,7 +26646,7 @@ try {
     throw err;
 }
 try {
-  const { runAllSeeders } = await import("./index-47ghesbn.js");
+  const { runAllSeeders } = await import("./index-6nsbg88z.js");
   await runAllSeeders({ scriptEmbeddingMode: "skip" });
 } catch (err) {
   console.error("[startup] Failed to seed built-in entities:", err);
@@ -26636,36 +26687,36 @@ httpServer.listen(port, async () => {
   await initWorkflows();
   await startScriptRunSupervisor(getMcpBaseUrl());
   if (hasCapability("scheduling")) {
-    const { startScheduler } = await import("./index-antf9t4p.js");
-    const { getExecutorRegistry: getExecutorRegistry2 } = await import("./index-d2mytx95.js");
+    const { startScheduler } = await import("./index-8hmeg8j1.js");
+    const { getExecutorRegistry: getExecutorRegistry2 } = await import("./index-cqtebbhb.js");
     const intervalMs = Number(process.env.SCHEDULER_INTERVAL_MS) || 1e4;
     startScheduler(getExecutorRegistry2(), intervalMs, {
       runId: globalState.__runId
     });
   }
   if (!isEnvFlagEnabled("HEARTBEAT_DISABLE", false)) {
-    const { startHeartbeat } = await import("./index-0ez2aack.js");
+    const { startHeartbeat } = await import("./index-n28pw1zt.js");
     const heartbeatMs = Number(process.env.HEARTBEAT_INTERVAL_MS) || 90000;
     startHeartbeat(heartbeatMs);
   }
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { startOAuthKeepalive } = await import("./keepalive-c4sp7yvd.js");
+    const { startOAuthKeepalive } = await import("./keepalive-dxc12gvg.js");
     startOAuthKeepalive();
   }
   if (process.env.OAUTH_REFRESH_SWEEP_DISABLE !== "true") {
-    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-wtqgnh3c.js");
+    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-1x1ac722.js");
     startOAuthRefreshSweep();
   }
   startOAuthPendingGc();
   await startMemoryGc();
   await startDbRetention();
-  import("./boot-reembed-cn357y5n.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+  import("./boot-reembed-fqzxxzjh.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
     console.error("[boot-reembed] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-reembed-9rxmb26n.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+  import("./boot-reembed-wxa8ya0s.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
     console.error("[boot-reembed-scripts] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-scrub-logs-5tpp0x3y.js").then(({ runBootScrubLogs }) => runBootScrubLogs()).catch((err) => {
+  import("./boot-scrub-logs-jnyndh79.js").then(({ runBootScrubLogs }) => runBootScrubLogs()).catch((err) => {
     console.error("[boot-scrub-logs] startup scrub failed (non-fatal):", err);
   });
 }).on("error", (err) => {