@desplega.ai/agent-swarm 1.151.0 → 1.152.1

package/dist/{lead-xbfr7fvt.js → lead-pf8nvxt8.js}

@@ -1,16 +1,16 @@
 import {
   runAgent
-} from "./cli-2tbvf1z1.js";
+} from "./cli-ftdjz1mk.js";
 import"./cli-pgj4a5fb.js";
 import"./cli-kj76p1ez.js";
 import"./cli-9b13ggd1.js";
 import"./cli-d3p82erb.js";
-import"./cli-3v9xhjcn.js";
-import"./cli-frcta2w4.js";
+import"./cli-sakxd2rg.js";
+import"./cli-sqmh7jj1.js";
 import"./cli-wbyk465z.js";
 import"./cli-tng3131n.js";
 import"./cli-5bfdm1ah.js";
-import"./cli-vwm416m6.js";
+import"./cli-v9sk4dzw.js";
 import"./cli-hsxj0yar.js";
 import"./cli-r94z9p1z.js";
 import"./cli-b5b30yzk.js";
@@ -25,34 +25,34 @@ import"./cli-eree7rnv.js";
 import"./cli-4yc5d8fk.js";
 import {
   getEnabledCapabilities
-} from "./cli-5tpgq60f.js";
+} from "./cli-72tgtzr1.js";
 import"./cli-0z2v4nhw.js";
 import"./cli-4wppfkcm.js";
 import"./cli-e7d20cty.js";
 import"./cli-re8z5p8p.js";
 import"./cli-3dpj7atn.js";
-import"./cli-g69fdc9g.js";
-import"./cli-7tgcstn2.js";
-import"./cli-gbfwcd3k.js";
-import"./cli-sjaae6ff.js";
+import"./cli-kf8qp2vf.js";
+import"./cli-jytf5mw9.js";
+import"./cli-zfzznn7c.js";
+import"./cli-dsyg66vt.js";
 import"./cli-epan13p1.js";
 import"./cli-y89t4nca.js";
 import"./cli-f14fvzag.js";
 import"./cli-fad8m16k.js";
-import"./cli-j9xczhaq.js";
-import"./cli-0qb1z6s2.js";
+import"./cli-vbk025fm.js";
+import"./cli-7bwaerjt.js";
 import"./cli-bsakbbkm.js";
-import"./cli-q88st9aj.js";
+import"./cli-gxf2ebyz.js";
 import"./cli-51tf7ac3.js";
-import"./cli-r2q6pevn.js";
+import"./cli-wfve107r.js";
 import"./cli-q51yprfq.js";
 import"./cli-yatxqynm.js";
-import"./cli-ppm4975n.js";
+import"./cli-jtvs5m8q.js";
 import"./cli-fm4ytsdk.js";
 import"./cli-aehm1rbq.js";
 import"./cli-2658f6at.js";
 import"./cli-jsp14b6c.js";
-import"./cli-s14agm5s.js";
+import"./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -60,7 +60,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-pzxba7gw.js";
 import"./cli-f7kvq46p.js";

package/dist/{maintenance-qma55qvw.js → maintenance-jk4q0wgg.js}

@@ -1,11 +1,11 @@
 import {
   reembedAllScripts
-} from "./cli-q88st9aj.js";
-import"./cli-ppm4975n.js";
+} from "./cli-gxf2ebyz.js";
+import"./cli-jtvs5m8q.js";
 import"./cli-fm4ytsdk.js";
 import"./cli-aehm1rbq.js";
 import"./cli-2658f6at.js";
-import"./cli-s14agm5s.js";
+import"./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -13,7 +13,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{oauth-refresh-sweep-3s04c6qw.js → oauth-refresh-sweep-6207x9sj.js}

@@ -2,8 +2,8 @@ import {
   forceRefreshAuthorizationOrThrow,
   getAuthorizationById,
   listAuthorizationSweepRows
-} from "./cli-j9xczhaq.js";
-import"./cli-s14agm5s.js";
+} from "./cli-vbk025fm.js";
+import"./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -11,7 +11,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-gfez0qmk.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{onboard-drskd386.js → onboard-b0csgm0q.js}

@@ -3,7 +3,7 @@ import {
   createDefaultMcpJson,
   createDefaultSettingsLocal,
   createHooksConfig
-} from "./cli-f1wky6zp.js";
+} from "./cli-3g61md6v.js";
 import {
   require_jsx_dev_runtime
 } from "./cli-s2qjdd6z.js";
@@ -13,7 +13,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-zkxymas5.js";
+} from "./cli-gfez0qmk.js";
 import {
   Box_default,
   Select,

package/dist/{otel-impl-943c96er.js → otel-impl-b6rfehth.js}

@@ -4,7 +4,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-zkxymas5.js";
+} from "./cli-gfez0qmk.js";
 import {
   init_secret_scrubber,
   scrubSecrets

package/dist/{pricing-refresh-mx51az05.js → pricing-refresh-4e201wtd.js}

@@ -2,9 +2,9 @@ import {
   PRICING_REFRESH_INTERVAL_MS,
   refreshPricingFromModelsDev,
   startPricingRefreshLoop
-} from "./cli-g69fdc9g.js";
-import"./cli-0qb1z6s2.js";
-import"./cli-s14agm5s.js";
+} from "./cli-kf8qp2vf.js";
+import"./cli-7bwaerjt.js";
+import"./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -12,7 +12,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{rbac-roles-wcmrg6sv.js → rbac-roles-mkc5n5qa.js}

@@ -7,9 +7,9 @@ import {
   getUserGrant,
   listUserRoles,
   runRbacCliCommand
-} from "./cli-7tgcstn2.js";
-import"./cli-gbfwcd3k.js";
-import"./cli-s14agm5s.js";
+} from "./cli-jytf5mw9.js";
+import"./cli-zfzznn7c.js";
+import"./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -17,7 +17,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{rbac-roles-78baecqd.js → rbac-roles-zp6e4geh.js}

@@ -1,11 +1,11 @@
 import {
   PermissionVerbSchema
-} from "./cli-gbfwcd3k.js";
+} from "./cli-zfzznn7c.js";
 import {
   getDb,
   getDbClient,
   init_db
-} from "./cli-s14agm5s.js";
+} from "./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -16,7 +16,7 @@ import {
 } from "./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{render-v2-8zjntgf5.js → render-v2-4fazz9tf.js}

@@ -9,11 +9,11 @@ import {
   processSlackRenderV2,
   renderThreadTree,
   streamOutcomeCard
-} from "./cli-r2q6pevn.js";
+} from "./cli-wfve107r.js";
 import"./cli-q51yprfq.js";
 import"./cli-yatxqynm.js";
 import"./cli-2658f6at.js";
-import"./cli-s14agm5s.js";
+import"./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -21,7 +21,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-pzxba7gw.js";
 import"./cli-zf8jjwex.js";

package/dist/{seed-pricing-jqjs6cws.js → seed-pricing-thxpn9vn.js}

@@ -2,8 +2,8 @@ import {
   buildModelsDevSeedRows,
   buildPricingSeedRows,
   seedPricingFromModelsDev
-} from "./cli-0qb1z6s2.js";
-import"./cli-s14agm5s.js";
+} from "./cli-7bwaerjt.js";
+import"./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -11,7 +11,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-zf8jjwex.js";
 import"./cli-bc05qbss.js";

package/dist/{setup-4pks0vfk.js → setup-wb0z8cat.js}

@@ -4,14 +4,14 @@ import {
   createDefaultMcpJson,
   createDefaultSettingsLocal,
   createHooksConfig
-} from "./cli-f1wky6zp.js";
+} from "./cli-3g61md6v.js";
 import {
   require_jsx_dev_runtime
 } from "./cli-s2qjdd6z.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
-import"./cli-zkxymas5.js";
+import"./cli-gfez0qmk.js";
 import {
   Box_default,
   Spinner,

package/dist/{work-objects-wangt792.js → work-objects-h3498kwe.js}

@@ -1,33 +1,34 @@
 import {
   isUserAllowed
-} from "./cli-gjyvhmmh.js";
-import"./cli-a1z3h107.js";
-import"./cli-czjtgfys.js";
-import"./cli-5tpgq60f.js";
+} from "./cli-ng4q6a9t.js";
+import"./cli-3pft2z6r.js";
+import"./cli-b4dyetqt.js";
+import"./cli-72tgtzr1.js";
 import"./cli-0z2v4nhw.js";
 import"./cli-4wppfkcm.js";
 import"./cli-e7d20cty.js";
 import"./cli-re8z5p8p.js";
 import"./cli-3dpj7atn.js";
-import"./cli-g69fdc9g.js";
-import"./cli-7tgcstn2.js";
-import"./cli-gbfwcd3k.js";
-import"./cli-sjaae6ff.js";
+import"./cli-kf8qp2vf.js";
+import"./cli-jytf5mw9.js";
+import"./cli-zfzznn7c.js";
+import"./cli-dsyg66vt.js";
 import"./cli-epan13p1.js";
 import"./cli-y89t4nca.js";
 import"./cli-f14fvzag.js";
 import"./cli-fad8m16k.js";
-import"./cli-j9xczhaq.js";
-import"./cli-0qb1z6s2.js";
+import"./cli-vbk025fm.js";
+import"./cli-7bwaerjt.js";
 import"./cli-bsakbbkm.js";
-import"./cli-q88st9aj.js";
+import"./cli-gxf2ebyz.js";
 import"./cli-51tf7ac3.js";
 import {
-  getTaskUrl
-} from "./cli-r2q6pevn.js";
+  getTaskUrl,
+  slackTaskOutput
+} from "./cli-wfve107r.js";
 import"./cli-q51yprfq.js";
 import"./cli-yatxqynm.js";
-import"./cli-ppm4975n.js";
+import"./cli-jtvs5m8q.js";
 import"./cli-fm4ytsdk.js";
 import"./cli-aehm1rbq.js";
 import"./cli-2658f6at.js";
@@ -36,7 +37,7 @@ import {
   getAgentById,
   getTaskById,
   init_db
-} from "./cli-s14agm5s.js";
+} from "./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -47,7 +48,7 @@ import {
 } from "./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-pzxba7gw.js";
 import"./cli-f7kvq46p.js";
@@ -86,7 +87,7 @@ async function getDetails(event, client) {
   if (task.slackChannelId !== event.channel)
     return { error: { status: "restricted" } };
   const agent = task.agentId ? await getAgentById(task.agentId) : null;
-  const result = task.output || task.failureReason || task.progress;
+  const result = slackTaskOutput(task) || task.failureReason || task.progress;
   return {
     metadata: {
       entity_type: "slack#/entities/task",

package/dist/{worker-p2mr422x.js → worker-2m2tzxp3.js}

@@ -1,16 +1,16 @@
 import {
   runAgent
-} from "./cli-2tbvf1z1.js";
+} from "./cli-ftdjz1mk.js";
 import"./cli-pgj4a5fb.js";
 import"./cli-kj76p1ez.js";
 import"./cli-9b13ggd1.js";
 import"./cli-d3p82erb.js";
-import"./cli-3v9xhjcn.js";
-import"./cli-frcta2w4.js";
+import"./cli-sakxd2rg.js";
+import"./cli-sqmh7jj1.js";
 import"./cli-wbyk465z.js";
 import"./cli-tng3131n.js";
 import"./cli-5bfdm1ah.js";
-import"./cli-vwm416m6.js";
+import"./cli-v9sk4dzw.js";
 import"./cli-hsxj0yar.js";
 import"./cli-r94z9p1z.js";
 import"./cli-b5b30yzk.js";
@@ -25,34 +25,34 @@ import"./cli-eree7rnv.js";
 import"./cli-4yc5d8fk.js";
 import {
   getEnabledCapabilities
-} from "./cli-5tpgq60f.js";
+} from "./cli-72tgtzr1.js";
 import"./cli-0z2v4nhw.js";
 import"./cli-4wppfkcm.js";
 import"./cli-e7d20cty.js";
 import"./cli-re8z5p8p.js";
 import"./cli-3dpj7atn.js";
-import"./cli-g69fdc9g.js";
-import"./cli-7tgcstn2.js";
-import"./cli-gbfwcd3k.js";
-import"./cli-sjaae6ff.js";
+import"./cli-kf8qp2vf.js";
+import"./cli-jytf5mw9.js";
+import"./cli-zfzznn7c.js";
+import"./cli-dsyg66vt.js";
 import"./cli-epan13p1.js";
 import"./cli-y89t4nca.js";
 import"./cli-f14fvzag.js";
 import"./cli-fad8m16k.js";
-import"./cli-j9xczhaq.js";
-import"./cli-0qb1z6s2.js";
+import"./cli-vbk025fm.js";
+import"./cli-7bwaerjt.js";
 import"./cli-bsakbbkm.js";
-import"./cli-q88st9aj.js";
+import"./cli-gxf2ebyz.js";
 import"./cli-51tf7ac3.js";
-import"./cli-r2q6pevn.js";
+import"./cli-wfve107r.js";
 import"./cli-q51yprfq.js";
 import"./cli-yatxqynm.js";
-import"./cli-ppm4975n.js";
+import"./cli-jtvs5m8q.js";
 import"./cli-fm4ytsdk.js";
 import"./cli-aehm1rbq.js";
 import"./cli-2658f6at.js";
 import"./cli-jsp14b6c.js";
-import"./cli-s14agm5s.js";
+import"./cli-bdt7w021.js";
 import"./cli-ht5rs63n.js";
 import"./cli-z61ykvam.js";
 import"./cli-dv6cdjs2.js";
@@ -60,7 +60,7 @@ import"./cli-c2mk1kgf.js";
 import"./cli-ej6gbxfb.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-zkxymas5.js";
+import"./cli-gfez0qmk.js";
 import"./cli-r2ap2czm.js";
 import"./cli-pzxba7gw.js";
 import"./cli-f7kvq46p.js";

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "1.151.0",
+    "version": "1.152.1",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [
@@ -16466,7 +16466,7 @@
       "post": {
         "operationId": "extensions_enable",
         "summary": "Enable an extension",
-        "description": "Loads and enables an extension. This route is operator-only.",
+        "description": "Loads and enables an extension. Available to leads, operators, and dashboard users.",
         "tags": [
           "Extensions"
         ],
@@ -16542,7 +16542,7 @@
       "post": {
         "operationId": "extensions_disable",
         "summary": "Disable an extension",
-        "description": "Unloads and disables an extension. This route is operator-only.",
+        "description": "Unloads and disables an extension. Available to leads, operators, and dashboard users.",
         "tags": [
           "Extensions"
         ],
@@ -16608,7 +16608,7 @@
       "post": {
         "operationId": "extensions_activate_version",
         "summary": "Activate an extension version",
-        "description": "Activates a stored version. This route is operator-only.",
+        "description": "Activates a stored version. Available to leads, operators, and dashboard users.",
         "tags": [
           "Extensions"
         ],
@@ -46581,7 +46581,7 @@
             }
           },
           "503": {
-            "description": "AgentMail integration not configured",
+            "description": "AgentMail integration not configured or inbound archive unavailable",
             "content": {
               "application/json": {
                 "schema": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "1.151.0",
+  "version": "1.152.1",
   "description": "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
   "keywords": [
     "agent-swarm.dev",

package/src/agentmail/inbound-archive.ts

@@ -0,0 +1,71 @@
+import { createHash } from "node:crypto";
+import { claimKv, sweepExpiredKv } from "../be/db";
+import { scrubSecrets } from "../utils/secret-scrubber";
+import type { AgentMailWebhookPayload } from "./types";
+
+export const INBOUND_ARCHIVE_NAMESPACE = "agentmail-inbound";
+export const INBOUND_ARCHIVE_TTL_MS = 30 * 24 * 60 * 60 * 1000;
+const text = (value: unknown, limit: number) =>
+  typeof value === "string" ? scrubSecrets(value).slice(0, limit) : "";
+
+export const inboundArchiveKey = (inboxId: string, messageId: string) =>
+  createHash("sha256")
+    .update(JSON.stringify([inboxId, messageId]))
+    .digest("hex");
+
+/** Persist verified deliveries before ACK, independent of task-routing filters.
+ * One minimized entry per message for 30 days from capture. Live retries preserve
+ * the first delivery and its expiry; a replay after expiry starts a new window.
+ * This is a delivery archive, not proof of historical completeness.
+ */
+export async function archiveInboundMessage(payload: AgentMailWebhookPayload): Promise<void> {
+  if (
+    ![
+      "message.received",
+      "message.received.unauthenticated",
+      "message.received.blocked",
+      "message.received.spam",
+    ].includes(payload.event_type)
+  )
+    return;
+  const message = payload.message;
+  if (!message?.inbox_id || !message.message_id || !message.thread_id) {
+    throw new Error("Inbound webhook missing inbox, message or thread ID");
+  }
+  const now = Date.now();
+  // Remove expired payloads on traffic as well as the KV point-read lazy sweep.
+  await sweepExpiredKv(INBOUND_ARCHIVE_NAMESPACE, now);
+  const minimized = {
+    event_type: payload.event_type,
+    message: {
+      inbox_id: message.inbox_id,
+      message_id: message.message_id,
+      thread_id: message.thread_id,
+      from_: text(Array.isArray(message.from_) ? message.from_.join(", ") : message.from_, 1500),
+      reply_to: Array.isArray(message.reply_to)
+        ? message.reply_to.slice(0, 20).map((value) => text(value, 1500))
+        : undefined,
+      subject: text(message.subject, 300),
+      text: text(message.text, 16000),
+      html: text(message.html, 16000),
+      timestamp: text(message.timestamp || message.created_at, 100),
+      labels: Array.isArray(message.labels)
+        ? message.labels.filter((label) => label === "unauthenticated")
+        : [],
+      attachments: Array.isArray(message.attachments)
+        ? message.attachments.map((attachment) => ({
+            filename: text(attachment.filename, 1500),
+            content_type: text(attachment.content_type, 200),
+            size: typeof attachment.size === "number" ? attachment.size : null,
+          }))
+        : undefined,
+    },
+  };
+  await claimKv({
+    namespace: INBOUND_ARCHIVE_NAMESPACE,
+    key: inboundArchiveKey(message.inbox_id, message.message_id),
+    value: { version: 1, capturedAt: new Date(now).toISOString(), payload: minimized },
+    expiresAt: now + INBOUND_ARCHIVE_TTL_MS,
+    valueType: "json",
+  });
+}

package/src/agentmail/types.ts

@@ -44,6 +44,8 @@ export interface AgentMailWebhookPayload {
 export type AgentMailEventType =
   | "message.received"
   | "message.received.unauthenticated"
+  | "message.received.blocked"
+  | "message.received.spam"
   | "message.sent"
   | "message.delivered"
   | "message.bounced"

package/src/be/db.ts

@@ -6154,7 +6154,7 @@ export async function getInjectableGlobalConfigs(): Promise<SwarmConfig[]> {
   const rows = await getDbClient().query<SwarmConfigRow>(
     `SELECT * FROM swarm_config
        WHERE scope = 'global'
-         AND UPPER(key) NOT IN ('API_KEY', 'SECRETS_ENCRYPTION_KEY', 'CORS_ALLOW_ANY_ORIGIN')
+         AND UPPER(key) NOT IN ('API_KEY', 'SECRETS_ENCRYPTION_KEY', 'CORS_ALLOW_ANY_ORIGIN', 'EXTENSION_ALLOW_LEAD_ACTIVATION')
        ORDER BY key ASC`,
   );
   return rows.map(rowToSwarmConfig);

package/src/be/scripts/typecheck.ts

@@ -318,6 +318,10 @@ export interface SwarmSdk {
   // --- write: extensions ---
   extension_install(args: { manifest: Record<string, unknown>; files: Record<string, string>; priority?: number; config?: Record<string, unknown> }): Promise<unknown>;
   extension_list(args?: { enabledOnly?: boolean }): Promise<unknown>;
+  extension_delete(args: { id: string }): Promise<unknown>;
+  extension_enable(args: { id: string }): Promise<unknown>;
+  extension_disable(args: { id: string }): Promise<unknown>;
+  extension_activate_version(args: { id: string; version: number }): Promise<unknown>;
 
   // --- write: repos ---
   repo_update(args: Record<string, unknown>): Promise<unknown>;

package/src/be/swarm-config-guard.ts

@@ -18,7 +18,13 @@ import { parseTaskToolManifest } from "../utils/task-tool-manifest";
  * Matching is case-insensitive so `api_key`, `Api_Key`, etc. are all
  * rejected at every write path (DB helpers, HTTP routes, MCP tools).
  */
-const RESERVED_KEYS = new Set(["API_KEY", "SECRETS_ENCRYPTION_KEY", "CORS_ALLOW_ANY_ORIGIN"]);
+// Lead activation is also deployment-only: leads can write ordinary global config.
+const RESERVED_KEYS = new Set([
+  "API_KEY",
+  "SECRETS_ENCRYPTION_KEY",
+  "CORS_ALLOW_ANY_ORIGIN",
+  "EXTENSION_ALLOW_LEAD_ACTIVATION",
+]);
 
 export function isReservedConfigKey(key: string): boolean {
   return RESERVED_KEYS.has(key.toUpperCase());