@desplega.ai/agent-swarm 1.149.0 → 1.149.1

package/dist/{maintenance-6kfb2m5e.js → maintenance-8w393zf0.js}

@@ -1,11 +1,11 @@
 import {
   reembedAllScripts
-} from "./cli-2qts1hys.js";
-import"./cli-3q5ejx9p.js";
+} from "./cli-3z634pqe.js";
+import"./cli-jezx9b9c.js";
 import"./cli-zvz62chv.js";
 import"./cli-aehm1rbq.js";
 import"./cli-9d8ntetj.js";
-import"./cli-yab68w40.js";
+import"./cli-qgd4sqz5.js";
 import"./cli-08b07b4r.js";
 import"./cli-3apbzgyk.js";
 import"./cli-e29gmdmw.js";
@@ -13,7 +13,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-kjwt6hdf.js";
+import"./cli-e06a8a7y.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{oauth-refresh-sweep-1x1ac722.js → oauth-refresh-sweep-sh8xjy08.js}

@@ -2,8 +2,8 @@ import {
   forceRefreshAuthorizationOrThrow,
   getAuthorizationById,
   listAuthorizationSweepRows
-} from "./cli-9hspd3dp.js";
-import"./cli-yab68w40.js";
+} from "./cli-cd60fv6j.js";
+import"./cli-qgd4sqz5.js";
 import"./cli-08b07b4r.js";
 import"./cli-3apbzgyk.js";
 import"./cli-e29gmdmw.js";
@@ -11,7 +11,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-kjwt6hdf.js";
+import"./cli-e06a8a7y.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{onboard-dcyt1609.js → onboard-25ps29h1.js}

@@ -3,7 +3,7 @@ import {
   createDefaultMcpJson,
   createDefaultSettingsLocal,
   createHooksConfig
-} from "./cli-gjhjfeeg.js";
+} from "./cli-wby1xnnb.js";
 import {
   require_jsx_dev_runtime
 } from "./cli-s2qjdd6z.js";
@@ -13,7 +13,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-kjwt6hdf.js";
+} from "./cli-e06a8a7y.js";
 import {
   Box_default,
   Select,

package/dist/{otel-impl-tbk3e5dr.js → otel-impl-b93gxnz5.js}

@@ -4,7 +4,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-kjwt6hdf.js";
+} from "./cli-e06a8a7y.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{pricing-refresh-kaqg567e.js → pricing-refresh-5v56x7gb.js}

@@ -2,9 +2,9 @@ import {
   PRICING_REFRESH_INTERVAL_MS,
   refreshPricingFromModelsDev,
   startPricingRefreshLoop
-} from "./cli-sd5pv3b1.js";
-import"./cli-9fy6nk6g.js";
-import"./cli-yab68w40.js";
+} from "./cli-7xx10h0a.js";
+import"./cli-5m0qmvdp.js";
+import"./cli-qgd4sqz5.js";
 import"./cli-08b07b4r.js";
 import"./cli-3apbzgyk.js";
 import"./cli-e29gmdmw.js";
@@ -12,7 +12,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-kjwt6hdf.js";
+import"./cli-e06a8a7y.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{rbac-roles-cf97v1vd.js → rbac-roles-0p0s6pbj.js}

@@ -7,9 +7,9 @@ import {
   getUserGrant,
   listUserRoles,
   runRbacCliCommand
-} from "./cli-k0cr4kat.js";
+} from "./cli-6skz3rk8.js";
 import"./cli-cmp8g3sw.js";
-import"./cli-yab68w40.js";
+import"./cli-qgd4sqz5.js";
 import"./cli-08b07b4r.js";
 import"./cli-3apbzgyk.js";
 import"./cli-e29gmdmw.js";
@@ -17,7 +17,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-kjwt6hdf.js";
+import"./cli-e06a8a7y.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{rbac-roles-ammq6rd2.js → rbac-roles-x55cnezn.js}

@@ -5,7 +5,7 @@ import {
   getDb,
   getDbClient,
   init_db
-} from "./cli-yab68w40.js";
+} from "./cli-qgd4sqz5.js";
 import"./cli-08b07b4r.js";
 import"./cli-3apbzgyk.js";
 import"./cli-e29gmdmw.js";
@@ -13,7 +13,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-kjwt6hdf.js";
+import"./cli-e06a8a7y.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{render-v2-80w603vy.js → render-v2-hyd45w8b.js}

@@ -9,11 +9,11 @@ import {
   processSlackRenderV2,
   renderThreadTree,
   streamOutcomeCard
-} from "./cli-d8ftsp62.js";
+} from "./cli-3sysyjve.js";
 import"./cli-q51yprfq.js";
 import"./cli-9d8ntetj.js";
 import"./cli-yatxqynm.js";
-import"./cli-yab68w40.js";
+import"./cli-qgd4sqz5.js";
 import"./cli-08b07b4r.js";
 import"./cli-3apbzgyk.js";
 import"./cli-e29gmdmw.js";
@@ -21,7 +21,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-kjwt6hdf.js";
+import"./cli-e06a8a7y.js";
 import"./cli-r2ap2czm.js";
 import"./cli-pzxba7gw.js";
 import"./cli-zf8jjwex.js";

package/dist/{seed-pricing-zbrn83xv.js → seed-pricing-49gbgn96.js}

@@ -2,8 +2,8 @@ import {
   buildModelsDevSeedRows,
   buildPricingSeedRows,
   seedPricingFromModelsDev
-} from "./cli-9fy6nk6g.js";
-import"./cli-yab68w40.js";
+} from "./cli-5m0qmvdp.js";
+import"./cli-qgd4sqz5.js";
 import"./cli-08b07b4r.js";
 import"./cli-3apbzgyk.js";
 import"./cli-e29gmdmw.js";
@@ -11,7 +11,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-kjwt6hdf.js";
+import"./cli-e06a8a7y.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{setup-fe66kczs.js → setup-qvq64vzq.js}

@@ -4,14 +4,14 @@ import {
   createDefaultMcpJson,
   createDefaultSettingsLocal,
   createHooksConfig
-} from "./cli-gjhjfeeg.js";
+} from "./cli-wby1xnnb.js";
 import {
   require_jsx_dev_runtime
 } from "./cli-s2qjdd6z.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
-import"./cli-kjwt6hdf.js";
+import"./cli-e06a8a7y.js";
 import {
   Box_default,
   Spinner,

package/dist/{worker-qmb2d1e2.js → worker-scj60cxg.js}

@@ -1,8 +1,8 @@
 import {
   runAgent
-} from "./cli-phsxnkp6.js";
+} from "./cli-7evafqvy.js";
 import"./cli-xm87hzbw.js";
-import"./cli-e95cx1eb.js";
+import"./cli-73gq0zxn.js";
 import"./cli-6664w7y4.js";
 import"./cli-hsxj0yar.js";
 import"./cli-9b13ggd1.js";
@@ -12,11 +12,11 @@ import"./cli-r94z9p1z.js";
 import"./cli-2djtr51b.js";
 import {
   getEnabledCapabilities
-} from "./cli-yb9qhqam.js";
+} from "./cli-cv7s5zdq.js";
 import"./cli-0z2v4nhw.js";
 import"./cli-j490egb5.js";
-import"./cli-7smrsr25.js";
-import"./cli-cr12paw2.js";
+import"./cli-k351hv5k.js";
+import"./cli-tg8qj8ee.js";
 import"./cli-4wtq5jjv.js";
 import"./cli-b5b30yzk.js";
 import"./cli-jecc01cb.js";
@@ -27,40 +27,40 @@ import"./cli-s25avqg9.js";
 import"./cli-eree7rnv.js";
 import"./cli-xvkmedgn.js";
 import"./cli-4yc5d8fk.js";
-import"./cli-ygweqcn4.js";
-import"./cli-sd5pv3b1.js";
-import"./cli-9fy6nk6g.js";
-import"./cli-k0cr4kat.js";
+import"./cli-7fehefdf.js";
+import"./cli-7xx10h0a.js";
+import"./cli-5m0qmvdp.js";
+import"./cli-6skz3rk8.js";
 import"./cli-cmp8g3sw.js";
-import"./cli-19f354qr.js";
+import"./cli-hzqmgcm2.js";
 import"./cli-qgm2pfpq.js";
-import"./cli-mnmsfd1w.js";
+import"./cli-y3pq4v9g.js";
 import"./cli-07jd68a1.js";
-import"./cli-6pqcb4q0.js";
+import"./cli-ddfw1mc4.js";
 import"./cli-1ebpar1q.js";
 import"./cli-e7d20cty.js";
 import"./cli-3dpj7atn.js";
-import"./cli-aae6hz6a.js";
+import"./cli-svbrpf5q.js";
 import"./cli-epan13p1.js";
-import"./cli-2qts1hys.js";
-import"./cli-3q5ejx9p.js";
+import"./cli-3z634pqe.js";
+import"./cli-jezx9b9c.js";
 import"./cli-y89t4nca.js";
 import"./cli-f14fvzag.js";
 import"./cli-zvz62chv.js";
-import"./cli-9hspd3dp.js";
+import"./cli-cd60fv6j.js";
 import"./cli-fad8m16k.js";
 import"./cli-aehm1rbq.js";
 import"./cli-bsakbbkm.js";
 import"./cli-51tf7ac3.js";
-import"./cli-kgz4np97.js";
+import"./cli-sdzq01t9.js";
 import"./cli-jsp14b6c.js";
-import"./cli-gv88e1vf.js";
-import"./cli-q50ef8g0.js";
-import"./cli-d8ftsp62.js";
+import"./cli-j4d4f6hv.js";
+import"./cli-ayvy5kde.js";
+import"./cli-3sysyjve.js";
 import"./cli-q51yprfq.js";
 import"./cli-9d8ntetj.js";
 import"./cli-yatxqynm.js";
-import"./cli-yab68w40.js";
+import"./cli-qgd4sqz5.js";
 import"./cli-08b07b4r.js";
 import"./cli-3apbzgyk.js";
 import"./cli-e29gmdmw.js";
@@ -68,7 +68,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-kjwt6hdf.js";
+import"./cli-e06a8a7y.js";
 import"./cli-r2ap2czm.js";
 import"./cli-pzxba7gw.js";
 import"./cli-f7kvq46p.js";

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "1.149.0",
+    "version": "1.149.1",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "1.149.0",
+  "version": "1.149.1",
   "description": "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
   "keywords": [
     "agent-swarm.dev",

package/src/be/seed/automation-toggle.ts

@@ -0,0 +1,69 @@
+/**
+ * Shared "arrive enabled" policy for seeded workflows and schedules.
+ *
+ * Boot seeding always inventories every candidate automation (see
+ * {@link ./workflows-seeder} / {@link ./schedules-seeder}). Whether a freshly
+ * created item also arrives *enabled* is governed by four independent gates,
+ * all of which must pass:
+ *
+ *   1. The operator switch (`SEED_AUTOMATIONS_ENABLED`) is on.
+ *   2. The item is zero-config: no required integration (`requires`) and no
+ *      required param/placeholder. An item needing a credential or a param it
+ *      doesn't have would just fail on a stranger's cluster.
+ *   3. The template's own `config.json` explicitly opts in via
+ *      `autoEnableCandidate: true`. This is a deliberate, reviewed
+ *      declaration on each template — a new zero-config template does NOT
+ *      auto-activate just by omitting `requires`/`placeholders`; an author
+ *      has to add this field, which is a visible line in the PR that adds
+ *      the template.
+ *   4. The template's JSON payload doesn't recommend staying off (its
+ *      `enabled` field is not explicitly `false`) — a secondary safety valve
+ *      an operator or template author can still pull even on an opted-in
+ *      template.
+ *
+ * An item that fails any gate stays disabled and inventoried, exactly as
+ * before this switch existed.
+ */
+
+import type { AutomationIntegrationId } from "../../types";
+
+const SEED_AUTOMATIONS_ENABLED_ENV = "SEED_AUTOMATIONS_ENABLED";
+
+// Flip this to change the shipped default for every install path (Helm,
+// docker-compose, bare `bun run start:http`) in one place. The Helm chart's
+// `config.seedAutomationsEnabled` default should track this value.
+const SEED_AUTOMATIONS_ENABLED_DEFAULT = true;
+
+/** Gate 1: is the operator switch on? Env var wins; unset falls back to the shipped default. */
+export function isSeedAutomationsEnabled(env: NodeJS.ProcessEnv = process.env): boolean {
+  const raw = env[SEED_AUTOMATIONS_ENABLED_ENV];
+  if (raw === undefined || raw === "") return SEED_AUTOMATIONS_ENABLED_DEFAULT;
+  return raw.toLowerCase() === "true" || raw === "1";
+}
+
+/** Gate 2: no required integration and no required param/placeholder. */
+export function isZeroConfigAutomation(
+  requires: readonly AutomationIntegrationId[],
+  requiredParams: readonly string[],
+): boolean {
+  return requires.length === 0 && requiredParams.length === 0;
+}
+
+/**
+ * Combine all four gates into the `enabled` value a seeded item should be
+ * created/updated with.
+ */
+export function resolveSeededEnabled(params: {
+  requires: readonly AutomationIntegrationId[];
+  requiredParams: readonly string[];
+  autoEnableCandidate: boolean;
+  templateRecommendsEnabled: boolean;
+  env?: NodeJS.ProcessEnv;
+}): boolean {
+  return (
+    isSeedAutomationsEnabled(params.env) &&
+    isZeroConfigAutomation(params.requires, params.requiredParams) &&
+    params.autoEnableCandidate &&
+    params.templateRecommendsEnabled
+  );
+}

package/src/be/seed/schedules-seeder.ts

@@ -17,6 +17,12 @@ import dailyStatusReportConfig from "../../../templates/schedules/daily-status-r
 import dailyStatusReportContent from "../../../templates/schedules/daily-status-report/content.md" with {
   type: "text",
 };
+import dailySwarmUpdateCheckConfig from "../../../templates/schedules/daily-swarm-update-check/config.json" with {
+  type: "text",
+};
+import dailySwarmUpdateCheckContent from "../../../templates/schedules/daily-swarm-update-check/content.md" with {
+  type: "text",
+};
 import dailyWorkflowHealthAuditConfig from "../../../templates/schedules/daily-workflow-health-audit/config.json" with {
   type: "text",
 };
@@ -54,6 +60,7 @@ import {
   getScheduledTaskByName,
   updateScheduledTask,
 } from "../db";
+import { resolveSeededEnabled } from "./automation-toggle";
 import type { Seeder, SeedItem } from "./types";
 import { canonicalJson } from "./workflows-seeder";
 
@@ -64,6 +71,8 @@ type ScheduleTemplateConfig = {
   placeholders?: string[];
   requires?: AutomationIntegrationId[];
   runAllSeedersCandidate?: boolean;
+  /** Explicit, reviewed opt-in into the auto-enable policy — see ./automation-toggle. */
+  autoEnableCandidate?: boolean;
   tags?: string[];
 };
 
@@ -99,6 +108,10 @@ const BUILT_IN_SCHEDULE_SOURCES: readonly ScheduleTemplateSource[] = [
     content: asText(dailyCompoundingReflectionContent),
   },
   { config: asText(dailyStatusReportConfig), content: asText(dailyStatusReportContent) },
+  {
+    config: asText(dailySwarmUpdateCheckConfig),
+    content: asText(dailySwarmUpdateCheckContent),
+  },
   {
     config: asText(dailyWorkflowHealthAuditConfig),
     content: asText(dailyWorkflowHealthAuditContent),
@@ -134,21 +147,30 @@ function parseScheduleSource(source: ScheduleTemplateSource): SeedSchedule | nul
     .trim();
   if (!taskTemplate) throw new Error(`Schedule template ${config.name} has no task prompt`);
 
+  const requires = config.requires ?? [];
+  const requiredParams = config.placeholders ?? [];
   return {
     name: config.name,
     description: config.description,
     cronExpression: block.cron,
     timezone: block.timezone ?? "UTC",
-    // Boot seeding inventories the automation, but activation is always an
-    // explicit operator action. The template's enabled flag still documents
-    // its recommended state for manual installs.
-    enabled: false,
+    // Boot seeding always inventories the automation. Whether it also arrives
+    // enabled is gated by the operator switch (SEED_AUTOMATIONS_ENABLED), the
+    // item being zero-config (no requires/placeholders), the template's own
+    // explicit autoEnableCandidate opt-in, and the template not explicitly
+    // recommending it stay off. See ./automation-toggle.
+    enabled: resolveSeededEnabled({
+      requires,
+      requiredParams,
+      autoEnableCandidate: config.autoEnableCandidate === true,
+      templateRecommendsEnabled: block.enabled !== false,
+    }),
     taskTemplate,
     taskType: config.title,
     tags: config.tags ?? [],
     params: {},
-    requiredParams: config.placeholders ?? [],
-    requires: config.requires ?? [],
+    requiredParams,
+    requires,
   };
 }
 

package/src/be/seed/workflows-seeder.ts

@@ -56,6 +56,7 @@ import type {
 } from "../../types";
 import { validateDefinition } from "../../workflows/definition";
 import { computeContentHash, createWorkflow, listWorkflows, updateWorkflow } from "../db";
+import { resolveSeededEnabled } from "./automation-toggle";
 import type { Seeder, SeedItem } from "./types";
 
 type AutomationTemplateConfig = {
@@ -64,6 +65,8 @@ type AutomationTemplateConfig = {
   placeholders?: string[];
   requires?: AutomationIntegrationId[];
   runAllSeedersCandidate?: boolean;
+  /** Explicit, reviewed opt-in into the auto-enable policy — see ./automation-toggle. */
+  autoEnableCandidate?: boolean;
 };
 
 type WorkflowTemplatePayload = {
@@ -130,13 +133,22 @@ function parseWorkflowSource(source: WorkflowTemplateSource): SeedWorkflow | nul
   if (!match?.[1]) throw new Error(`Workflow template ${config.name} has no JSON definition`);
   const payload = JSON.parse(match[1]) as WorkflowTemplatePayload;
 
+  const requires = config.requires ?? [];
+  const requiredParams = config.placeholders ?? [];
   return {
     name: config.name,
     description: config.description,
-    // Boot seeding inventories the automation, but activation is always an
-    // explicit operator action. The template's enabled flag still documents
-    // its recommended state for manual installs.
-    enabled: false,
+    // Boot seeding always inventories the automation. Whether it also arrives
+    // enabled is gated by the operator switch (SEED_AUTOMATIONS_ENABLED), the
+    // item being zero-config (no requires/placeholders), the template's own
+    // explicit autoEnableCandidate opt-in, and the template not explicitly
+    // recommending it stay off. See ./automation-toggle.
+    enabled: resolveSeededEnabled({
+      requires,
+      requiredParams,
+      autoEnableCandidate: config.autoEnableCandidate === true,
+      templateRecommendsEnabled: payload.enabled !== false,
+    }),
     definition: {
       nodes: payload.nodes,
       onNodeFailure: payload.onNodeFailure ?? "fail",
@@ -146,8 +158,8 @@ function parseWorkflowSource(source: WorkflowTemplateSource): SeedWorkflow | nul
     input: payload.input,
     triggerSchema: payload.triggerSchema,
     params: {},
-    requiredParams: config.placeholders ?? [],
-    requires: config.requires ?? [],
+    requiredParams,
+    requires,
   };
 }
 

package/src/be/swarm-config-guard.ts

@@ -274,6 +274,7 @@ const VALIDATED_KEYS: Record<string, ConfigValidator> = {
     "ADDITIVE_SLACK",
     "SLACK_THREAD_FOLLOWUP_REQUIRE_MENTION",
     "RBAC_ENABLED",
+    "SEED_AUTOMATIONS_ENABLED",
     "RBAC_AUDIT_DISABLED",
     "BUDGET_ADMISSION_DISABLED",
     "MCP_OAUTH_ALLOW_PRIVATE_HOSTS",

package/src/tests/seed-registry.test.ts

@@ -40,7 +40,7 @@ describe("seeder registry", () => {
 
   test("the built-in catalogs expose the expected candidate counts", () => {
     expect(workflowsSeeder.items()).toHaveLength(5);
-    expect(schedulesSeeder.items()).toHaveLength(4);
+    expect(schedulesSeeder.items()).toHaveLength(5);
   });
 
   test("seeds all starter workflow and schedule rows on a fresh database", async () => {
@@ -48,7 +48,7 @@ describe("seeder registry", () => {
     const scheduleResult = await runSeeder(schedulesSeeder, { quiet: true });
 
     expect(workflowResult).toMatchObject({ created: 5, failed: [] });
-    expect(scheduleResult).toMatchObject({ created: 4, failed: [] });
+    expect(scheduleResult).toMatchObject({ created: 5, failed: [] });
     expect(await listWorkflows()).toHaveLength(5);
   });
 });