@desplega.ai/agent-swarm 1.151.0 → 1.152.1

package/src/extensions/lifecycle.ts

@@ -3,6 +3,7 @@ import {
   getExtensionById,
   getExtensionFiles,
   getExtensionVersion,
+  insertExtensionRun,
   listExtensions,
   pruneExtensionRuns,
   setExtensionState,
@@ -95,14 +96,33 @@ async function removeRegistered(id: string): Promise<void> {
   if (previous) await previous.dispose();
 }
 
+// Record the request before importing code, including attempts whose load fails.
+async function recordLifecycleRequest(
+  record: Extension,
+  operation: string,
+  agentId: string | undefined,
+  version = record.activeVersion,
+): Promise<void> {
+  if (!agentId) return;
+  await insertExtensionRun({
+    extensionId: record.id,
+    version,
+    event: `lifecycle.${operation}.requested`,
+    action: "continue",
+    agentId,
+    subject: record.name,
+  });
+}
+
 export async function enableExtension(
   id: string,
-  opts: { by?: string | null } = {},
+  opts: { by?: string | null; agentId?: string } = {},
 ): Promise<Extension> {
   initExtensionPostBridge();
   let record = await getExtensionById(id);
   if (!record) throw new ExtensionLifecycleError("Extension not found", 404);
 
+  await recordLifecycleRequest(record, "enable", opts.agentId);
   const agentId = await ensureExtensionAgent(record.name);
   const identified = await setExtensionState(id, { agentId, updatedBy: opts.by });
   if (!identified) throw new ExtensionLifecycleError("Extension not found", 404);
@@ -133,10 +153,11 @@ export async function enableExtension(
 
 export async function disableExtension(
   id: string,
-  opts: { by?: string | null } = {},
+  opts: { by?: string | null; agentId?: string } = {},
 ): Promise<Extension> {
   const record = await getExtensionById(id);
   if (!record) throw new ExtensionLifecycleError("Extension not found", 404);
+  await recordLifecycleRequest(record, "disable", opts.agentId);
   await removeRegistered(id);
   attemptedFingerprints.delete(id);
   await deactivateExtensionAgent(record.name);
@@ -152,7 +173,7 @@ export async function disableExtension(
 export async function activateVersion(
   id: string,
   version: number,
-  opts: { by?: string | null } = {},
+  opts: { by?: string | null; agentId?: string } = {},
 ): Promise<Extension> {
   const current = await getExtensionById(id);
   if (!current) throw new ExtensionLifecycleError("Extension not found", 404);
@@ -160,6 +181,7 @@ export async function activateVersion(
     throw new ExtensionLifecycleError(`Extension version ${version} was not found`, 404);
   }
 
+  await recordLifecycleRequest(current, "activate-version", opts.agentId, version);
   const wasEnabled = current.enabled;
   if (wasEnabled) await disableExtension(id, opts);
   const activated = await activateExtensionVersionSnapshot(id, version, opts.by);
@@ -170,7 +192,7 @@ export async function activateVersion(
 
 export async function reloadExtension(
   id: string,
-  opts: { by?: string | null } = {},
+  opts: { by?: string | null; agentId?: string } = {},
 ): Promise<Extension> {
   const record = await getExtensionById(id);
   if (!record) throw new ExtensionLifecycleError("Extension not found", 404);

package/src/http/extensions.ts

@@ -197,7 +197,8 @@ const enableRoute = route({
   pattern: ["api", "extensions", null, "enable"],
   operationId: "extensions_enable",
   summary: "Enable an extension",
-  description: "Loads and enables an extension. This route is operator-only.",
+  description:
+    "Loads and enables an extension. Available to leads, operators, and dashboard users.",
   tags: ["Extensions"],
   params: idParamsSchema,
   responses: {
@@ -215,7 +216,8 @@ const disableRoute = route({
   pattern: ["api", "extensions", null, "disable"],
   operationId: "extensions_disable",
   summary: "Disable an extension",
-  description: "Unloads and disables an extension. This route is operator-only.",
+  description:
+    "Unloads and disables an extension. Available to leads, operators, and dashboard users.",
   tags: ["Extensions"],
   params: idParamsSchema,
   responses: {
@@ -232,7 +234,7 @@ const activateVersionRoute = route({
   pattern: ["api", "extensions", null, "activate-version"],
   operationId: "extensions_activate_version",
   summary: "Activate an extension version",
-  description: "Activates a stored version. This route is operator-only.",
+  description: "Activates a stored version. Available to leads, operators, and dashboard users.",
   tags: ["Extensions"],
   params: idParamsSchema,
   body: z.object({ version: z.number().int().min(1) }).strict(),
@@ -501,6 +503,7 @@ export async function handleExtensions(
     try {
       const extension = await enableExtension(parsed.params.id, {
         by: await resolveHttpAuditUserId(req, writerAgentId),
+        agentId: writerAgentId,
       });
       enableRoute.respond(res, 200, { extension: redactExtension(extension) });
     } catch (error) {
@@ -518,6 +521,7 @@ export async function handleExtensions(
     try {
       const extension = await disableExtension(parsed.params.id, {
         by: await resolveHttpAuditUserId(req, writerAgentId),
+        agentId: writerAgentId,
       });
       disableRoute.respond(res, 200, { extension: redactExtension(extension) });
     } catch (error) {
@@ -535,6 +539,7 @@ export async function handleExtensions(
     try {
       const extension = await activateVersion(parsed.params.id, parsed.body.version, {
         by: await resolveHttpAuditUserId(req, writerAgentId),
+        agentId: writerAgentId,
       });
       activateVersionRoute.respond(res, 200, { extension: redactExtension(extension) });
     } catch (error) {

package/src/http/webhooks.ts

@@ -8,6 +8,7 @@ import {
   isSenderAllowed,
   verifyAgentMailWebhook,
 } from "../agentmail";
+import { archiveInboundMessage } from "../agentmail/inbound-archive";
 import type {
   CheckRunEvent,
   CheckSuiteEvent,
@@ -109,7 +110,7 @@ const agentmailWebhook = route({
   responses: {
     200: { description: "Event received", schema: z.object({ received: z.literal(true) }) },
     401: { description: "Invalid signature" },
-    503: { description: "AgentMail integration not configured" },
+    503: { description: "AgentMail integration not configured or inbound archive unavailable" },
   },
 });
 
@@ -486,11 +487,18 @@ export async function handleWebhooks(
       return true;
     }
 
-    // Return 200 immediately — Svix best practice to avoid retries.
-    // Processing happens asynchronously below; dedup is handled in handlers.ts.
-    agentmailWebhook.respond(res, 200, { received: true });
-
     const payload = verified as AgentMailWebhookPayload;
+    try {
+      await archiveInboundMessage(payload);
+    } catch (err) {
+      console.error("[AgentMail] Inbound archive failed; requesting webhook retry", err);
+      res.writeHead(503, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Inbound archive unavailable" }));
+      return true;
+    }
+    // Only acknowledge received events after durable capture. Task routing below
+    // remains independent: rejected senders and routing failures stay discoverable.
+    agentmailWebhook.respond(res, 200, { received: true });
 
     if (
       payload.message &&

package/src/rbac/legacy-policy.ts

@@ -11,6 +11,7 @@
  * `PermissionVerb` (enforced via `satisfies`).
  */
 
+import { isEnvFlagEnabled } from "../utils/env-flag";
 import { hasLeadEquivalence } from "./elevated-agents";
 import type { PermissionVerb } from "./permissions";
 import type { RbacPrincipal, RbacResource } from "./types";
@@ -55,6 +56,17 @@ const leadOrOperatorOrUser: LegacyRule = {
     principal.kind === "operator" || principal.kind === "user" || actsAsLead(principal),
 };
 
+// Deployment-only: agents cannot reset this through swarm_config.
+const extensionActivation: LegacyRule = {
+  name: "extension-activation",
+  denyReason:
+    "requires operator/user authentication, or a lead with EXTENSION_ALLOW_LEAD_ACTIVATION enabled",
+  evaluate: (principal) =>
+    principal.kind === "operator" ||
+    principal.kind === "user" ||
+    (actsAsLead(principal) && isEnvFlagEnabled("EXTENSION_ALLOW_LEAD_ACTIVATION", true)),
+};
+
 const leadOrTaskCreator: LegacyRule = {
   name: "lead-or-task-creator",
   denyReason: "requires lead agent or task creator",
@@ -231,5 +243,5 @@ export const LEGACY_POLICY = {
   "script.api.rotate": leadOnly,
   "script.api.delete": leadOnly,
   "extension.write": leadOrOperatorOrUser,
-  "extension.activate": operatorOrUser,
+  "extension.activate": extensionActivation,
 } as const satisfies Record<PermissionVerb, LegacyRule>;

package/src/scripts-runtime/sdk-allowlist.ts

@@ -57,6 +57,10 @@ export const SDK_TOOL_NAME_MAP = {
   script_listRuns: "list-script-runs",
 
   // ── extensions ──
+  extension_delete: "extension-delete",
+  extension_enable: "extension-enable",
+  extension_disable: "extension-disable",
+  extension_activate_version: "extension-activate-version",
   extension_install: "extension-install",
   extension_list: "extension-list",
 

package/src/scripts-runtime/types/stdlib.d.ts

@@ -525,6 +525,10 @@ declare module "swarm-sdk" {
       config?: Record<string, unknown>;
     }): Promise<unknown>;
     extension_list(args?: { enabledOnly?: boolean }): Promise<unknown>;
+    extension_delete(args: { id: string }): Promise<unknown>;
+    extension_enable(args: { id: string }): Promise<unknown>;
+    extension_disable(args: { id: string }): Promise<unknown>;
+    extension_activate_version(args: { id: string; version: number }): Promise<unknown>;
 
     // --- write: repos ---
     repo_update(args: Record<string, unknown>): Promise<unknown>;

package/src/scripts-runtime/types/swarm-sdk.d.ts

@@ -507,6 +507,10 @@ declare module "swarm-sdk" {
       config?: Record<string, unknown>;
     }): Promise<unknown>;
     extension_list(args?: { enabledOnly?: boolean }): Promise<unknown>;
+    extension_delete(args: { id: string }): Promise<unknown>;
+    extension_enable(args: { id: string }): Promise<unknown>;
+    extension_disable(args: { id: string }): Promise<unknown>;
+    extension_activate_version(args: { id: string; version: number }): Promise<unknown>;
 
     // --- write: repos ---
     repo_update(args: Record<string, unknown>): Promise<unknown>;

package/src/server.ts

@@ -30,6 +30,10 @@ import { registerDbQueryTool } from "./tools/db-query";
 import { registerDeferTaskTool } from "./tools/defer-task";
 import { registerDeleteChannelTool } from "./tools/delete-channel";
 import { registerDeletePageTool } from "./tools/delete-page";
+import { registerExtensionActivateVersionTool } from "./tools/extension-activate-version";
+import { registerExtensionDeleteTool } from "./tools/extension-delete";
+import { registerExtensionDisableTool } from "./tools/extension-disable";
+import { registerExtensionEnableTool } from "./tools/extension-enable";
 import { registerExtensionInstallTool } from "./tools/extension-install";
 import { registerExtensionListTool } from "./tools/extension-list";
 import { registerGetMetricsTool } from "./tools/get-metrics";
@@ -340,6 +344,10 @@ export async function createServer(
     registerScriptSearchTool(server);
     registerScriptRunTool(server);
     registerScriptUpsertTool(server);
+    registerExtensionDeleteTool(server);
+    registerExtensionEnableTool(server);
+    registerExtensionDisableTool(server);
+    registerExtensionActivateVersionTool(server);
     registerExtensionInstallTool(server);
     registerExtensionListTool(server);
     registerScriptDeleteTool(server);
@@ -402,6 +410,10 @@ export async function createServer(
     registerScriptApisTool(server);
     registerScriptRunTool(server);
     registerScriptUpsertTool(server);
+    registerExtensionDeleteTool(server);
+    registerExtensionEnableTool(server);
+    registerExtensionDisableTool(server);
+    registerExtensionActivateVersionTool(server);
     registerExtensionInstallTool(server);
     registerExtensionListTool(server);
     registerScriptDeleteTool(server);

package/src/slack/render-v2.ts

@@ -44,6 +44,7 @@ import {
 import { buildAskClosure, type ClosureState, closureState } from "./closure";
 import { reactionName, type SlackReactionEvent } from "./reaction-shortcode";
 import { getAgentDisplayName, getAgentEmoji } from "./responses";
+import { isSlackEtaOnlyNotice, slackTaskOutput } from "./task-output";
 
 const TREE_UPDATE_DEBOUNCE_MS = 500;
 const TREE_UPDATE_MIN_INTERVAL_MS = 3_000;
@@ -757,7 +758,7 @@ async function outcomeContent(task: AgentTask, slackReplySent: boolean): Promise
       : "Agent";
     return `✅ ${agentName} completed`;
   }
-  return `✅\n\n${outcomeText(task.output, "Task completed.")}`;
+  return `✅\n\n${outcomeText(slackTaskOutput(task), "Task completed.")}`;
 }
 
 async function agentDisplayNameFor(task: AgentTask): Promise<string> {
@@ -786,7 +787,7 @@ export async function childOutcomeContent(
   if (slackReplySent && !task.tags?.includes("deferred")) {
     return `↳ ✅ ${agentName} completed`;
   }
-  return `↳ ✅ ${agentName} — result\n\n${outcomeText(task.output, "Task completed.")}`;
+  return `↳ ✅ ${agentName} — result\n\n${outcomeText(slackTaskOutput(task), "Task completed.")}`;
 }
 
 // A deferred wake continues a human conversation even though the scheduler
@@ -808,6 +809,7 @@ function isSlackContinuation(task: AgentTask): boolean {
  */
 function isChildCardCandidate(task: AgentTask, delegationActivatedAt: string): boolean {
   return (
+    !isSlackEtaOnlyNotice(task) &&
     task.source !== "slack" &&
     !isSlackContinuation(task) &&
     !!task.slackChannelId &&
@@ -821,6 +823,7 @@ function isChildCardCandidate(task: AgentTask, delegationActivatedAt: string): b
 
 function taskNeedsDirectOutcome(task: AgentTask, activatedAt: string): boolean {
   return (
+    !isSlackEtaOnlyNotice(task) &&
     ((task.source === "slack" && isAskOutcomeStatus(task.status)) ||
       (isSlackContinuation(task) && isOutcomeStatus(task.status))) &&
     task.createdAt >= activatedAt
@@ -839,7 +842,7 @@ async function conclusionResultsLines(closure: AgentTask[]): Promise<string[]> {
   const lines: string[] = [];
   for (const member of closure) {
     if (member.taskType === "follow-up" || member.taskType === "reroute-decision") continue;
-    if (!isOutcomeStatus(member.status)) continue;
+    if (!isOutcomeStatus(member.status) || isSlackEtaOnlyNotice(member)) continue;
     const glyph = await taskStateGlyph(member, new Date());
     const agentName = await agentDisplayNameFor(member);
     const card = await getSlackOutcomeMessage(member.id);
@@ -847,7 +850,10 @@ async function conclusionResultsLines(closure: AgentTask[]): Promise<string[]> {
       lines.push(`↳ ${glyph} ${agentName} — ${card.permalink}`);
       continue;
     }
-    const raw = outcomeText(member.status === "failed" ? member.failureReason : member.output, "");
+    const raw = outcomeText(
+      member.status === "failed" ? member.failureReason : slackTaskOutput(member),
+      "",
+    );
     const digest =
       raw.length > CONCLUSION_DIGEST_LENGTH
         ? `${raw.slice(0, CONCLUSION_DIGEST_LENGTH).trimEnd()}…`

package/src/slack/responses.ts

@@ -15,6 +15,7 @@ import {
   markdownToSlack,
   splitSlackSectionText,
 } from "./blocks";
+import { isSlackEtaOnlyNotice, slackTaskOutput } from "./task-output";
 
 // Re-export for backward compatibility
 export { markdownToSlack } from "./blocks";
@@ -56,7 +57,7 @@ export function shouldPostInlineCompletionOutput(task: AgentTask): boolean {
   if (!task.slackChannelId || !task.slackThreadTs) return false;
   if (task.slackReplySent) return false;
 
-  const output = task.output?.trim();
+  const output = slackTaskOutput(task)?.trim();
   return !!output && isTreeOutputTruncated(markdownToSlack(output));
 }
 
@@ -85,7 +86,7 @@ export async function sendInlineTaskOutput(task: AgentTask): Promise<boolean> {
   const chunks = formatInlineCompletionOutputChunks({
     agentName: agent.name,
     taskId: task.id,
-    output: task.output,
+    output: slackTaskOutput(task) ?? "",
   });
 
   try {
@@ -115,6 +116,7 @@ export async function sendInlineTaskOutput(task: AgentTask): Promise<boolean> {
  * Send a task completion message to Slack with the agent's persona.
  */
 export async function sendTaskResponse(task: AgentTask): Promise<boolean> {
+  if (isSlackEtaOnlyNotice(task)) return true;
   const app = getSlackApp();
   if (!app || !task.slackChannelId || !task.slackThreadTs) {
     return false;
@@ -136,7 +138,7 @@ export async function sendTaskResponse(task: AgentTask): Promise<boolean> {
 
   try {
     if (task.status === "completed") {
-      const output = task.output || "Task completed.";
+      const output = slackTaskOutput(task) || "Task completed.";
       const slackOutput = markdownToSlack(output);
       const attachmentsBlock = formatAttachmentsBlockForSlack(await getTaskAttachments(task.id));
       const body = slackOutput + attachmentsBlock;
@@ -285,6 +287,7 @@ export async function updateToFinal(
   task: AgentTask,
   messageTs: string,
 ): Promise<SlackUpdateResult> {
+  if (isSlackEtaOnlyNotice(task)) return "ok";
   const app = getSlackApp();
   if (!app || !task.slackChannelId || !task.agentId) return "failed";
 
@@ -297,7 +300,7 @@ export async function updateToFinal(
   let completionBlockBatches: unknown[][] | undefined;
 
   if (task.status === "completed") {
-    const output = task.output || "Task completed.";
+    const output = slackTaskOutput(task) || "Task completed.";
     const slackOutput = markdownToSlack(output);
     const attachmentsBlock = formatAttachmentsBlockForSlack(await getTaskAttachments(task.id));
     const body = slackOutput + attachmentsBlock;

package/src/slack/task-output.ts

@@ -0,0 +1,21 @@
+import type { AgentTask } from "../types";
+
+/** Keep the stored deferral ETA for task details, but omit it from Slack. */
+export function slackTaskOutput(
+  task: Pick<AgentTask, "output" | "tags" | "outputSchema" | "status">,
+): string | undefined {
+  const output = task.output ?? undefined;
+  if (task.status !== "completed" || task.outputSchema || !task.tags?.includes("deferred")) {
+    return output;
+  }
+  // Only match the engine-authored line from defer-task, not continuation results.
+  const notice = output?.match(/^Deferred until [^\n]+? \([^\n]+?\) -> (.*)$/);
+  if (!notice) return output;
+  const pending = notice[1]?.trim();
+  return pending ? `Pending: ${pending}` : "";
+}
+
+/** An ETA-only notice has no useful content left to post. */
+export function isSlackEtaOnlyNotice(task: AgentTask): boolean {
+  return !!task.output && slackTaskOutput(task) === "";
+}

package/src/slack/watcher.ts

@@ -28,6 +28,7 @@ import {
   updateToFinal,
   updateTreeMessage,
 } from "./responses";
+import { slackTaskOutput } from "./task-output";
 
 let watcherInterval: ReturnType<typeof setInterval> | null = null;
 let isProcessing = false;
@@ -169,7 +170,7 @@ export async function buildTreeNodes(tree: TreeMessageState): Promise<TreeNode[]
           progress: child.progress ?? undefined,
           duration: childDuration,
           slackReplySent: child.slackReplySent,
-          output: child.output ?? undefined,
+          output: slackTaskOutput(child),
           failureReason: child.failureReason ?? undefined,
           attachments: childAttachments,
           steered: childSteered,
@@ -192,7 +193,7 @@ export async function buildTreeNodes(tree: TreeMessageState): Promise<TreeNode[]
       progress: task.progress ?? undefined,
       duration,
       slackReplySent: task.slackReplySent,
-      output: task.output ?? undefined,
+      output: slackTaskOutput(task),
       failureReason: task.failureReason ?? undefined,
       attachments: rootAttachments,
       steered: rootSteered,

package/src/slack/work-objects.ts

@@ -4,6 +4,7 @@ import { getAgentById, getTaskById } from "../be/db";
 import { isEnvFlagEnabled } from "../utils/env-flag";
 import { getTaskUrl } from "./blocks";
 import { isUserAllowed } from "./handlers";
+import { slackTaskOutput } from "./task-output";
 
 type DetailsEvent = SlackEventMiddlewareArgs<"entity_details_requested">["event"];
 type Details = Omit<EntityPresentDetailsArguments, "trigger_id" | "token">;
@@ -36,7 +37,7 @@ async function getDetails(event: DetailsEvent, client: WebClient): Promise<Detai
   if (task.slackChannelId !== event.channel) return { error: { status: "restricted" } };
 
   const agent = task.agentId ? await getAgentById(task.agentId) : null;
-  const result = task.output || task.failureReason || task.progress;
+  const result = slackTaskOutput(task) || task.failureReason || task.progress;
   return {
     metadata: {
       entity_type: "slack#/entities/task",