@desplega.ai/agent-swarm 1.151.0 → 1.152.0

package/dist/{onboard-drskd386.js → onboard-fv7ezvwx.js}

@@ -3,7 +3,7 @@ import {
   createDefaultMcpJson,
   createDefaultSettingsLocal,
   createHooksConfig
-} from "./cli-f1wky6zp.js";
+} from "./cli-wp7cejrg.js";
 import {
   require_jsx_dev_runtime
 } from "./cli-s2qjdd6z.js";
@@ -13,7 +13,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-zkxymas5.js";
+} from "./cli-jh9txj4n.js";
 import {
   Box_default,
   Select,

package/dist/{otel-impl-943c96er.js → otel-impl-6vbb568y.js}

@@ -4,7 +4,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-zkxymas5.js";
+} from "./cli-jh9txj4n.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{pricing-refresh-mx51az05.js → pricing-refresh-nmm949an.js}

@@ -2,9 +2,9 @@ import {
   PRICING_REFRESH_INTERVAL_MS,
   refreshPricingFromModelsDev,
   startPricingRefreshLoop
-} from "./cli-g69fdc9g.js";
-import"./cli-0qb1z6s2.js";
-import"./cli-s14agm5s.js";
+} from "./cli-5bqt4gwa.js";
+import"./cli-zdcdh02m.js";
+import"./cli-gacq5hg8.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -12,7 +12,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-jh9txj4n.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{rbac-roles-wcmrg6sv.js → rbac-roles-0fz5qryx.js}

@@ -7,9 +7,9 @@ import {
   getUserGrant,
   listUserRoles,
   runRbacCliCommand
-} from "./cli-7tgcstn2.js";
-import"./cli-gbfwcd3k.js";
-import"./cli-s14agm5s.js";
+} from "./cli-t6axtdcg.js";
+import"./cli-zfzznn7c.js";
+import"./cli-gacq5hg8.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -17,7 +17,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-jh9txj4n.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{rbac-roles-78baecqd.js → rbac-roles-xtp05syf.js}

@@ -1,11 +1,11 @@
 import {
   PermissionVerbSchema
-} from "./cli-gbfwcd3k.js";
+} from "./cli-zfzznn7c.js";
 import {
   getDb,
   getDbClient,
   init_db
-} from "./cli-s14agm5s.js";
+} from "./cli-gacq5hg8.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -16,7 +16,7 @@ import {
 } from "./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-jh9txj4n.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{render-v2-8zjntgf5.js → render-v2-fpb8whme.js}

@@ -9,11 +9,11 @@ import {
   processSlackRenderV2,
   renderThreadTree,
   streamOutcomeCard
-} from "./cli-r2q6pevn.js";
+} from "./cli-cwvey7n1.js";
 import"./cli-q51yprfq.js";
 import"./cli-yatxqynm.js";
 import"./cli-2658f6at.js";
-import"./cli-s14agm5s.js";
+import"./cli-gacq5hg8.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -21,7 +21,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-jh9txj4n.js";
 import"./cli-r2ap2czm.js";
 import"./cli-pzxba7gw.js";
 import"./cli-zf8jjwex.js";

package/dist/{seed-pricing-jqjs6cws.js → seed-pricing-zwa8bs3t.js}

@@ -2,8 +2,8 @@ import {
   buildModelsDevSeedRows,
   buildPricingSeedRows,
   seedPricingFromModelsDev
-} from "./cli-0qb1z6s2.js";
-import"./cli-s14agm5s.js";
+} from "./cli-zdcdh02m.js";
+import"./cli-gacq5hg8.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -11,7 +11,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-jh9txj4n.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{setup-4pks0vfk.js → setup-3ybwbdpd.js}

@@ -4,14 +4,14 @@ import {
   createDefaultMcpJson,
   createDefaultSettingsLocal,
   createHooksConfig
-} from "./cli-f1wky6zp.js";
+} from "./cli-wp7cejrg.js";
 import {
   require_jsx_dev_runtime
 } from "./cli-s2qjdd6z.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
-import"./cli-zkxymas5.js";
+import"./cli-jh9txj4n.js";
 import {
   Box_default,
   Spinner,

package/dist/{work-objects-wangt792.js → work-objects-rmayxcx7.js}

@@ -1,33 +1,34 @@
 import {
   isUserAllowed
-} from "./cli-gjyvhmmh.js";
-import"./cli-a1z3h107.js";
-import"./cli-czjtgfys.js";
-import"./cli-5tpgq60f.js";
+} from "./cli-5p007m2q.js";
+import"./cli-4fqn2vpg.js";
+import"./cli-awb59f08.js";
+import"./cli-72vksk1n.js";
 import"./cli-0z2v4nhw.js";
 import"./cli-4wppfkcm.js";
 import"./cli-e7d20cty.js";
 import"./cli-re8z5p8p.js";
 import"./cli-3dpj7atn.js";
-import"./cli-g69fdc9g.js";
-import"./cli-7tgcstn2.js";
-import"./cli-gbfwcd3k.js";
-import"./cli-sjaae6ff.js";
+import"./cli-5bqt4gwa.js";
+import"./cli-t6axtdcg.js";
+import"./cli-zfzznn7c.js";
+import"./cli-p2hx1pxm.js";
 import"./cli-epan13p1.js";
 import"./cli-y89t4nca.js";
 import"./cli-f14fvzag.js";
 import"./cli-fad8m16k.js";
-import"./cli-j9xczhaq.js";
-import"./cli-0qb1z6s2.js";
+import"./cli-cs9z1hw3.js";
+import"./cli-zdcdh02m.js";
 import"./cli-bsakbbkm.js";
-import"./cli-q88st9aj.js";
+import"./cli-nd5s3m4y.js";
 import"./cli-51tf7ac3.js";
 import {
-  getTaskUrl
-} from "./cli-r2q6pevn.js";
+  getTaskUrl,
+  slackTaskOutput
+} from "./cli-cwvey7n1.js";
 import"./cli-q51yprfq.js";
 import"./cli-yatxqynm.js";
-import"./cli-ppm4975n.js";
+import"./cli-evgy5w3y.js";
 import"./cli-fm4ytsdk.js";
 import"./cli-aehm1rbq.js";
 import"./cli-2658f6at.js";
@@ -36,7 +37,7 @@ import {
   getAgentById,
   getTaskById,
   init_db
-} from "./cli-s14agm5s.js";
+} from "./cli-gacq5hg8.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -47,7 +48,7 @@ import {
 } from "./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-jh9txj4n.js";
 import"./cli-r2ap2czm.js";
 import"./cli-pzxba7gw.js";
 import"./cli-f7kvq46p.js";
@@ -86,7 +87,7 @@ async function getDetails(event, client) {
   if (task.slackChannelId !== event.channel)
     return { error: { status: "restricted" } };
   const agent = task.agentId ? await getAgentById(task.agentId) : null;
-  const result = task.output || task.failureReason || task.progress;
+  const result = slackTaskOutput(task) || task.failureReason || task.progress;
   return {
     metadata: {
       entity_type: "slack#/entities/task",

package/dist/{worker-p2mr422x.js → worker-rng4jhnh.js}

@@ -1,16 +1,16 @@
 import {
   runAgent
-} from "./cli-2tbvf1z1.js";
+} from "./cli-t1mykkng.js";
 import"./cli-pgj4a5fb.js";
 import"./cli-kj76p1ez.js";
 import"./cli-9b13ggd1.js";
 import"./cli-d3p82erb.js";
-import"./cli-3v9xhjcn.js";
-import"./cli-frcta2w4.js";
+import"./cli-8fy9dmpv.js";
+import"./cli-f1f9n77e.js";
 import"./cli-wbyk465z.js";
 import"./cli-tng3131n.js";
 import"./cli-5bfdm1ah.js";
-import"./cli-vwm416m6.js";
+import"./cli-87hdfyde.js";
 import"./cli-hsxj0yar.js";
 import"./cli-r94z9p1z.js";
 import"./cli-b5b30yzk.js";
@@ -25,34 +25,34 @@ import"./cli-eree7rnv.js";
 import"./cli-4yc5d8fk.js";
 import {
   getEnabledCapabilities
-} from "./cli-5tpgq60f.js";
+} from "./cli-72vksk1n.js";
 import"./cli-0z2v4nhw.js";
 import"./cli-4wppfkcm.js";
 import"./cli-e7d20cty.js";
 import"./cli-re8z5p8p.js";
 import"./cli-3dpj7atn.js";
-import"./cli-g69fdc9g.js";
-import"./cli-7tgcstn2.js";
-import"./cli-gbfwcd3k.js";
-import"./cli-sjaae6ff.js";
+import"./cli-5bqt4gwa.js";
+import"./cli-t6axtdcg.js";
+import"./cli-zfzznn7c.js";
+import"./cli-p2hx1pxm.js";
 import"./cli-epan13p1.js";
 import"./cli-y89t4nca.js";
 import"./cli-f14fvzag.js";
 import"./cli-fad8m16k.js";
-import"./cli-j9xczhaq.js";
-import"./cli-0qb1z6s2.js";
+import"./cli-cs9z1hw3.js";
+import"./cli-zdcdh02m.js";
 import"./cli-bsakbbkm.js";
-import"./cli-q88st9aj.js";
+import"./cli-nd5s3m4y.js";
 import"./cli-51tf7ac3.js";
-import"./cli-r2q6pevn.js";
+import"./cli-cwvey7n1.js";
 import"./cli-q51yprfq.js";
 import"./cli-yatxqynm.js";
-import"./cli-ppm4975n.js";
+import"./cli-evgy5w3y.js";
 import"./cli-fm4ytsdk.js";
 import"./cli-aehm1rbq.js";
 import"./cli-2658f6at.js";
 import"./cli-jsp14b6c.js";
-import"./cli-s14agm5s.js";
+import"./cli-gacq5hg8.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -60,7 +60,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-jh9txj4n.js";
 import"./cli-r2ap2czm.js";
 import"./cli-pzxba7gw.js";
 import"./cli-f7kvq46p.js";

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "1.151.0",
+    "version": "1.152.0",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [
@@ -16466,7 +16466,7 @@
       "post": {
         "operationId": "extensions_enable",
         "summary": "Enable an extension",
-        "description": "Loads and enables an extension. This route is operator-only.",
+        "description": "Loads and enables an extension. Available to leads, operators, and dashboard users.",
         "tags": [
           "Extensions"
         ],
@@ -16542,7 +16542,7 @@
       "post": {
         "operationId": "extensions_disable",
         "summary": "Disable an extension",
-        "description": "Unloads and disables an extension. This route is operator-only.",
+        "description": "Unloads and disables an extension. Available to leads, operators, and dashboard users.",
         "tags": [
           "Extensions"
         ],
@@ -16608,7 +16608,7 @@
       "post": {
         "operationId": "extensions_activate_version",
         "summary": "Activate an extension version",
-        "description": "Activates a stored version. This route is operator-only.",
+        "description": "Activates a stored version. Available to leads, operators, and dashboard users.",
         "tags": [
           "Extensions"
         ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "1.151.0",
+  "version": "1.152.0",
   "description": "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
   "keywords": [
     "agent-swarm.dev",

package/src/be/db.ts

@@ -6154,7 +6154,7 @@ export async function getInjectableGlobalConfigs(): Promise<SwarmConfig[]> {
   const rows = await getDbClient().query<SwarmConfigRow>(
     `SELECT * FROM swarm_config
        WHERE scope = 'global'
-         AND UPPER(key) NOT IN ('API_KEY', 'SECRETS_ENCRYPTION_KEY', 'CORS_ALLOW_ANY_ORIGIN')
+         AND UPPER(key) NOT IN ('API_KEY', 'SECRETS_ENCRYPTION_KEY', 'CORS_ALLOW_ANY_ORIGIN', 'EXTENSION_ALLOW_LEAD_ACTIVATION')
        ORDER BY key ASC`,
   );
   return rows.map(rowToSwarmConfig);

package/src/be/scripts/typecheck.ts

@@ -318,6 +318,10 @@ export interface SwarmSdk {
   // --- write: extensions ---
   extension_install(args: { manifest: Record<string, unknown>; files: Record<string, string>; priority?: number; config?: Record<string, unknown> }): Promise<unknown>;
   extension_list(args?: { enabledOnly?: boolean }): Promise<unknown>;
+  extension_delete(args: { id: string }): Promise<unknown>;
+  extension_enable(args: { id: string }): Promise<unknown>;
+  extension_disable(args: { id: string }): Promise<unknown>;
+  extension_activate_version(args: { id: string; version: number }): Promise<unknown>;
 
   // --- write: repos ---
   repo_update(args: Record<string, unknown>): Promise<unknown>;

package/src/be/swarm-config-guard.ts

@@ -18,7 +18,13 @@ import { parseTaskToolManifest } from "../utils/task-tool-manifest";
  * Matching is case-insensitive so `api_key`, `Api_Key`, etc. are all
  * rejected at every write path (DB helpers, HTTP routes, MCP tools).
  */
-const RESERVED_KEYS = new Set(["API_KEY", "SECRETS_ENCRYPTION_KEY", "CORS_ALLOW_ANY_ORIGIN"]);
+// Lead activation is also deployment-only: leads can write ordinary global config.
+const RESERVED_KEYS = new Set([
+  "API_KEY",
+  "SECRETS_ENCRYPTION_KEY",
+  "CORS_ALLOW_ANY_ORIGIN",
+  "EXTENSION_ALLOW_LEAD_ACTIVATION",
+]);
 
 export function isReservedConfigKey(key: string): boolean {
   return RESERVED_KEYS.has(key.toUpperCase());

package/src/extensions/lifecycle.ts

@@ -3,6 +3,7 @@ import {
   getExtensionById,
   getExtensionFiles,
   getExtensionVersion,
+  insertExtensionRun,
   listExtensions,
   pruneExtensionRuns,
   setExtensionState,
@@ -95,14 +96,33 @@ async function removeRegistered(id: string): Promise<void> {
   if (previous) await previous.dispose();
 }
 
+// Record the request before importing code, including attempts whose load fails.
+async function recordLifecycleRequest(
+  record: Extension,
+  operation: string,
+  agentId: string | undefined,
+  version = record.activeVersion,
+): Promise<void> {
+  if (!agentId) return;
+  await insertExtensionRun({
+    extensionId: record.id,
+    version,
+    event: `lifecycle.${operation}.requested`,
+    action: "continue",
+    agentId,
+    subject: record.name,
+  });
+}
+
 export async function enableExtension(
   id: string,
-  opts: { by?: string | null } = {},
+  opts: { by?: string | null; agentId?: string } = {},
 ): Promise<Extension> {
   initExtensionPostBridge();
   let record = await getExtensionById(id);
   if (!record) throw new ExtensionLifecycleError("Extension not found", 404);
 
+  await recordLifecycleRequest(record, "enable", opts.agentId);
   const agentId = await ensureExtensionAgent(record.name);
   const identified = await setExtensionState(id, { agentId, updatedBy: opts.by });
   if (!identified) throw new ExtensionLifecycleError("Extension not found", 404);
@@ -133,10 +153,11 @@ export async function enableExtension(
 
 export async function disableExtension(
   id: string,
-  opts: { by?: string | null } = {},
+  opts: { by?: string | null; agentId?: string } = {},
 ): Promise<Extension> {
   const record = await getExtensionById(id);
   if (!record) throw new ExtensionLifecycleError("Extension not found", 404);
+  await recordLifecycleRequest(record, "disable", opts.agentId);
   await removeRegistered(id);
   attemptedFingerprints.delete(id);
   await deactivateExtensionAgent(record.name);
@@ -152,7 +173,7 @@ export async function disableExtension(
 export async function activateVersion(
   id: string,
   version: number,
-  opts: { by?: string | null } = {},
+  opts: { by?: string | null; agentId?: string } = {},
 ): Promise<Extension> {
   const current = await getExtensionById(id);
   if (!current) throw new ExtensionLifecycleError("Extension not found", 404);
@@ -160,6 +181,7 @@ export async function activateVersion(
     throw new ExtensionLifecycleError(`Extension version ${version} was not found`, 404);
   }
 
+  await recordLifecycleRequest(current, "activate-version", opts.agentId, version);
   const wasEnabled = current.enabled;
   if (wasEnabled) await disableExtension(id, opts);
   const activated = await activateExtensionVersionSnapshot(id, version, opts.by);
@@ -170,7 +192,7 @@ export async function activateVersion(
 
 export async function reloadExtension(
   id: string,
-  opts: { by?: string | null } = {},
+  opts: { by?: string | null; agentId?: string } = {},
 ): Promise<Extension> {
   const record = await getExtensionById(id);
   if (!record) throw new ExtensionLifecycleError("Extension not found", 404);

package/src/http/extensions.ts

@@ -197,7 +197,8 @@ const enableRoute = route({
   pattern: ["api", "extensions", null, "enable"],
   operationId: "extensions_enable",
   summary: "Enable an extension",
-  description: "Loads and enables an extension. This route is operator-only.",
+  description:
+    "Loads and enables an extension. Available to leads, operators, and dashboard users.",
   tags: ["Extensions"],
   params: idParamsSchema,
   responses: {
@@ -215,7 +216,8 @@ const disableRoute = route({
   pattern: ["api", "extensions", null, "disable"],
   operationId: "extensions_disable",
   summary: "Disable an extension",
-  description: "Unloads and disables an extension. This route is operator-only.",
+  description:
+    "Unloads and disables an extension. Available to leads, operators, and dashboard users.",
   tags: ["Extensions"],
   params: idParamsSchema,
   responses: {
@@ -232,7 +234,7 @@ const activateVersionRoute = route({
   pattern: ["api", "extensions", null, "activate-version"],
   operationId: "extensions_activate_version",
   summary: "Activate an extension version",
-  description: "Activates a stored version. This route is operator-only.",
+  description: "Activates a stored version. Available to leads, operators, and dashboard users.",
   tags: ["Extensions"],
   params: idParamsSchema,
   body: z.object({ version: z.number().int().min(1) }).strict(),
@@ -501,6 +503,7 @@ export async function handleExtensions(
     try {
       const extension = await enableExtension(parsed.params.id, {
         by: await resolveHttpAuditUserId(req, writerAgentId),
+        agentId: writerAgentId,
       });
       enableRoute.respond(res, 200, { extension: redactExtension(extension) });
     } catch (error) {
@@ -518,6 +521,7 @@ export async function handleExtensions(
     try {
       const extension = await disableExtension(parsed.params.id, {
         by: await resolveHttpAuditUserId(req, writerAgentId),
+        agentId: writerAgentId,
       });
       disableRoute.respond(res, 200, { extension: redactExtension(extension) });
     } catch (error) {
@@ -535,6 +539,7 @@ export async function handleExtensions(
     try {
       const extension = await activateVersion(parsed.params.id, parsed.body.version, {
         by: await resolveHttpAuditUserId(req, writerAgentId),
+        agentId: writerAgentId,
       });
       activateVersionRoute.respond(res, 200, { extension: redactExtension(extension) });
     } catch (error) {

package/src/rbac/legacy-policy.ts

@@ -11,6 +11,7 @@
  * `PermissionVerb` (enforced via `satisfies`).
  */
 
+import { isEnvFlagEnabled } from "../utils/env-flag";
 import { hasLeadEquivalence } from "./elevated-agents";
 import type { PermissionVerb } from "./permissions";
 import type { RbacPrincipal, RbacResource } from "./types";
@@ -55,6 +56,17 @@ const leadOrOperatorOrUser: LegacyRule = {
     principal.kind === "operator" || principal.kind === "user" || actsAsLead(principal),
 };
 
+// Deployment-only: agents cannot reset this through swarm_config.
+const extensionActivation: LegacyRule = {
+  name: "extension-activation",
+  denyReason:
+    "requires operator/user authentication, or a lead with EXTENSION_ALLOW_LEAD_ACTIVATION enabled",
+  evaluate: (principal) =>
+    principal.kind === "operator" ||
+    principal.kind === "user" ||
+    (actsAsLead(principal) && isEnvFlagEnabled("EXTENSION_ALLOW_LEAD_ACTIVATION", true)),
+};
+
 const leadOrTaskCreator: LegacyRule = {
   name: "lead-or-task-creator",
   denyReason: "requires lead agent or task creator",
@@ -231,5 +243,5 @@ export const LEGACY_POLICY = {
   "script.api.rotate": leadOnly,
   "script.api.delete": leadOnly,
   "extension.write": leadOrOperatorOrUser,
-  "extension.activate": operatorOrUser,
+  "extension.activate": extensionActivation,
 } as const satisfies Record<PermissionVerb, LegacyRule>;

package/src/scripts-runtime/sdk-allowlist.ts

@@ -57,6 +57,10 @@ export const SDK_TOOL_NAME_MAP = {
   script_listRuns: "list-script-runs",
 
   // ── extensions ──
+  extension_delete: "extension-delete",
+  extension_enable: "extension-enable",
+  extension_disable: "extension-disable",
+  extension_activate_version: "extension-activate-version",
   extension_install: "extension-install",
   extension_list: "extension-list",
 

package/src/scripts-runtime/types/stdlib.d.ts

@@ -525,6 +525,10 @@ declare module "swarm-sdk" {
       config?: Record<string, unknown>;
     }): Promise<unknown>;
     extension_list(args?: { enabledOnly?: boolean }): Promise<unknown>;
+    extension_delete(args: { id: string }): Promise<unknown>;
+    extension_enable(args: { id: string }): Promise<unknown>;
+    extension_disable(args: { id: string }): Promise<unknown>;
+    extension_activate_version(args: { id: string; version: number }): Promise<unknown>;
 
     // --- write: repos ---
     repo_update(args: Record<string, unknown>): Promise<unknown>;

package/src/scripts-runtime/types/swarm-sdk.d.ts

@@ -507,6 +507,10 @@ declare module "swarm-sdk" {
       config?: Record<string, unknown>;
     }): Promise<unknown>;
     extension_list(args?: { enabledOnly?: boolean }): Promise<unknown>;
+    extension_delete(args: { id: string }): Promise<unknown>;
+    extension_enable(args: { id: string }): Promise<unknown>;
+    extension_disable(args: { id: string }): Promise<unknown>;
+    extension_activate_version(args: { id: string; version: number }): Promise<unknown>;
 
     // --- write: repos ---
     repo_update(args: Record<string, unknown>): Promise<unknown>;

package/src/server.ts

@@ -30,6 +30,10 @@ import { registerDbQueryTool } from "./tools/db-query";
 import { registerDeferTaskTool } from "./tools/defer-task";
 import { registerDeleteChannelTool } from "./tools/delete-channel";
 import { registerDeletePageTool } from "./tools/delete-page";
+import { registerExtensionActivateVersionTool } from "./tools/extension-activate-version";
+import { registerExtensionDeleteTool } from "./tools/extension-delete";
+import { registerExtensionDisableTool } from "./tools/extension-disable";
+import { registerExtensionEnableTool } from "./tools/extension-enable";
 import { registerExtensionInstallTool } from "./tools/extension-install";
 import { registerExtensionListTool } from "./tools/extension-list";
 import { registerGetMetricsTool } from "./tools/get-metrics";
@@ -340,6 +344,10 @@ export async function createServer(
     registerScriptSearchTool(server);
     registerScriptRunTool(server);
     registerScriptUpsertTool(server);
+    registerExtensionDeleteTool(server);
+    registerExtensionEnableTool(server);
+    registerExtensionDisableTool(server);
+    registerExtensionActivateVersionTool(server);
     registerExtensionInstallTool(server);
     registerExtensionListTool(server);
     registerScriptDeleteTool(server);
@@ -402,6 +410,10 @@ export async function createServer(
     registerScriptApisTool(server);
     registerScriptRunTool(server);
     registerScriptUpsertTool(server);
+    registerExtensionDeleteTool(server);
+    registerExtensionEnableTool(server);
+    registerExtensionDisableTool(server);
+    registerExtensionActivateVersionTool(server);
     registerExtensionInstallTool(server);
     registerExtensionListTool(server);
     registerScriptDeleteTool(server);