@desplega.ai/agent-swarm 1.152.2 → 1.154.0

package/dist/{http-xbyx8k5j.js → http-20jesakk.js}

@@ -8,17 +8,22 @@ import {
 import {
   SIMILARITY_THRESHOLD,
   writeSkillsToFilesystem
-} from "./cli-pf9q3696.js";
+} from "./cli-927erqqt.js";
 import {
   Anthropic
 } from "./cli-j490egb5.js";
+import {
+  checkHeartbeatChecklist,
+  runHeartbeatSweep,
+  stopHeartbeat
+} from "./cli-e3229na9.js";
 import {
   isClaudeBridgeEffective,
   resolveClaudeTransport
 } from "./cli-eree7rnv.js";
 import {
   reasoningCapability
-} from "./cli-4yc5d8fk.js";
+} from "./cli-avkd6mqv.js";
 import {
   SCRIPT_SDK_TYPES,
   SCRIPT_STDLIB_MODULE_TYPES,
@@ -31,12 +36,7 @@ import {
   scriptStdlibTypesWithGeneratedApis,
   typecheckScript,
   typecheckWithAmbient
-} from "./cli-wpv5rgg2.js";
-import {
-  checkHeartbeatChecklist,
-  runHeartbeatSweep,
-  stopHeartbeat
-} from "./cli-gphgnvpf.js";
+} from "./cli-abp3g4ax.js";
 import {
   AGENT_MAX_TASKS_CONFIG_KEY,
   ALL_CAPABILITIES,
@@ -46,6 +46,7 @@ import {
   ExplicitSelfDuplicateError,
   ExtensionConfigError,
   ExtensionLifecycleError,
+  ExtensionOwnershipError,
   JSONRPCMessageSchema,
   MAX_TASK_ATTACHMENT_BYTES,
   McpServer,
@@ -285,12 +286,12 @@ import {
   verifyWebhookSignature,
   warnIfCorsAllowsAnyOrigin,
   wireHttpSpanLifecycle
-} from "./cli-z3wkng35.js";
+} from "./cli-6r3cgpk2.js";
 import"./cli-0z2v4nhw.js";
 import {
   REFERENCES_SOURCE_MAX_LENGTH,
   sanitizeReferencesSource
-} from "./cli-4wppfkcm.js";
+} from "./cli-3bkz2p7j.js";
 import {
   deriveCodexKeySuffix,
   getValidCodexOAuth,
@@ -300,19 +301,24 @@ import {
   isMultiRuntimeEnabled
 } from "./cli-re8z5p8p.js";
 import"./cli-3dpj7atn.js";
+import"./cli-8sea27q4.js";
 import {
   getModelsCatalog
-} from "./cli-b9dd0h3k.js";
+} from "./cli-stwsmd6k.js";
+import {
+  normalizeModelKey
+} from "./cli-e0pg4zeh.js";
 import {
   getUserGrant
-} from "./cli-r84ctdxn.js";
+} from "./cli-e31ehqwy.js";
 import {
+  LEGACY_RULES,
   can,
   clearAuditSink,
   decideToolAdmission,
   isRbacEnabled,
   setAuditSink
-} from "./cli-zfzznn7c.js";
+} from "./cli-ytxs7mn1.js";
 import {
   ConnectionAuthInputSchema,
   MAX_SCRIPT_WALL_CLOCK_MS,
@@ -395,7 +401,7 @@ import {
   upsertScriptByName,
   upsertScriptConnection,
   validateDefinition
-} from "./cli-fmy65jdn.js";
+} from "./cli-pf1v8xhb.js";
 import"./cli-epan13p1.js";
 import {
   detachedProcessGroup,
@@ -407,7 +413,6 @@ import {
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
-import"./cli-fad8m16k.js";
 import {
   acquireOAuthRefreshLock,
   buildAuthorizationUrl,
@@ -431,14 +436,27 @@ import {
   updateAuthorizationIdentity,
   updateOAuthAppById,
   upsertAuthorization
-} from "./cli-56h18ng2.js";
-import {
-  normalizeModelKey
-} from "./cli-2nnd56zt.js";
+} from "./cli-n62atwh9.js";
 import"./cli-bsakbbkm.js";
+import"./cli-fad8m16k.js";
+import {
+  FilesError,
+  getFileStorageProvider,
+  normalizeFilesError
+} from "./cli-jsp14b6c.js";
 import {
   searchScripts
-} from "./cli-gpqcs935.js";
+} from "./cli-e3cyf59d.js";
+import {
+  CANDIDATE_SET_MULTIPLIER,
+  getEmbeddingProvider,
+  getMemoryStore,
+  init_constants as init_constants2,
+  init_reranker,
+  rerank
+} from "./cli-hws0vn86.js";
+import"./cli-g2h29qar.js";
+import"./cli-aehm1rbq.js";
 import"./cli-51tf7ac3.js";
 import {
   ensure,
@@ -455,149 +473,22 @@ import {
   withRemoteContext,
   withSpan,
   withSpanContext
-} from "./cli-qn042eh7.js";
+} from "./cli-c1v10xb2.js";
 import"./cli-q51yprfq.js";
+import"./cli-3er6gcsn.js";
 import"./cli-yatxqynm.js";
-import {
-  CANDIDATE_SET_MULTIPLIER,
-  getEmbeddingProvider,
-  getMemoryStore,
-  init_constants as init_constants2,
-  init_reranker,
-  rerank
-} from "./cli-jew3jda5.js";
-import"./cli-fm4ytsdk.js";
-import"./cli-aehm1rbq.js";
 import"./cli-2658f6at.js";
 import {
-  FilesError,
-  getFileStorageProvider,
-  normalizeFilesError
-} from "./cli-jsp14b6c.js";
-import {
-  ActiveSessionSchema,
-  AgentAcpStatusSchema,
-  AgentAvatarSchema,
-  AgentCredStatusSchema,
-  AgentLatestModelSchema,
-  AgentLogSchema,
-  AgentMcpServerSchema,
-  AgentMemorySchema,
-  AgentMemoryScopeSchema,
-  AgentMemorySourceSchema,
-  AgentSchema,
-  AgentSkillSchema,
-  AgentStatusSchema,
-  AgentTaskSchema,
-  AgentTaskSourceSchema,
-  AgentTaskStatusSchema,
-  AgentWithTasksSchema,
-  AssetEntityTypeSchema,
-  AssetKeyMappingSchema,
-  AssetKeySchema,
-  AssetSummarySchema,
-  AutomationIntegrationIdSchema,
-  BudgetRefusalNotificationSchema,
-  BudgetRefusedTriggerSchema,
-  BudgetSchema,
-  BudgetScopeSchema,
-  ContextFormulaSchema,
-  ContextSnapshotEventTypeSchema,
-  ContextSnapshotSchema,
-  CooldownConfigSchema,
   CredentialBindingSchema,
   DB_RETENTION_TUNING_BOUNDS,
-  EventCategorySchema,
-  EventNameSchema,
-  EventSourceSchema,
-  EventStatusSchema,
-  ExtensionInstallBodySchema,
-  ExtensionManifestSchema,
-  ExtensionRunSchema,
-  ExtensionSchema,
-  ExtensionVersionSchema,
-  FavoriteItemTypeSchema,
+  EXTENSION_AGENT_ROLE,
+  ExtensionAgentAssignmentError,
   HeartbeatExpiryError,
-  InboxItemStateSchema,
-  InboxItemStatusSchema,
-  InboxItemTypeSchema,
-  InputValueSchema,
-  KvEntrySchema,
-  KvKeySchema,
-  KvNamespaceSchema,
   KvTypeCollisionError,
-  KvValueTypeSchema,
   MAX_DB_RETENTION_DAYS,
-  McpAuthMethodSchema,
-  McpServerSchema,
-  McpServerWithInstallInfoSchema,
-  MetricDefinitionSchema,
-  MetricSchema,
-  MetricVersionSchema,
-  MetricWidgetSchema,
-  ModelTierSchema,
-  OnUnsupportedSchema,
-  PageAuthModeSchema,
-  PageContentTypeSchema,
-  PageSchema,
-  PageVersionSchema,
-  PricingProviderSchema,
-  PricingRowSchema,
-  PricingTokenClassSchema,
-  PromptTemplateHistorySchema,
-  PromptTemplateSchema,
-  ProviderNameSchema,
-  ReasoningEffortSchema,
-  RepoGuidelinesInputSchema,
-  RepoHooksSchema,
-  ResumeReasonSchema,
-  RoutingReasonSchema,
-  RuntimeInstanceSchema,
-  ScheduledTaskSchema,
-  ScheduledTaskTargetTypeSchema,
-  ScriptApiAuthModeSchema,
-  ScriptApiRecordSchema,
-  ScriptFsModeSchema,
-  ScriptRecordSchema,
-  ScriptRunJournalEntrySchema,
-  ScriptRunListItemSchema,
-  ScriptRunSchema,
-  ScriptRunStatusSchema,
-  ScriptScopeSchema,
-  ScriptVersionRecordSchema,
-  ServiceSchema,
-  SessionCostModelBreakdownSchema,
-  SessionCostSchema,
-  SessionLogSchema,
-  SkillFileSchema,
-  SkillSchema,
-  SkillWithInstallInfoSchema,
-  SteerModeSchema,
-  SteerResultSchema,
-  SteeringMessageSchema,
+  NOT_EXTENSION_AGENT_SQL,
+  ReservedAgentRoleError,
   SteeringRequestError,
-  SteeringSourceSchema,
-  SwarmConfigSchema,
-  SwarmEventSchema,
-  SwarmRepoSchema,
-  TERMINAL_SCRIPT_RUN_STATUSES,
-  TaskAttachmentSchema,
-  TaskTemplateKindSchema,
-  TaskTemplateSchema,
-  TriggerConfigSchema,
-  UserCommsPrefsSchema,
-  UserFavoriteSchema,
-  UserSchema,
-  VersionableFieldSchema,
-  WorkflowDefinitionSchema,
-  WorkflowEdgeSchema,
-  WorkflowNodePatchSchema,
-  WorkflowPatchSchema,
-  WorkflowRunSchema,
-  WorkflowRunStatusSchema,
-  WorkflowRunStepSchema,
-  WorkflowSchema,
-  WorkflowVersionSchema,
   _resolveIntegrationProvider,
   _resolveIntegrationType,
   agentContextKey,
@@ -662,6 +553,7 @@ import {
   emitBuiltInIntegrationConnectedOnce,
   emitIntegrationConnected,
   emitMcpServerConnectedTelemetry,
+  extensionAgentAssignmentError,
   failTask,
   getActivePricingRow,
   getActiveSessions,
@@ -768,7 +660,6 @@ import {
   incrementPageViewCount,
   initTelemetry,
   init_asset_key_audit,
-  init_bundle_path,
   init_context_key,
   init_credential_broker,
   init_date_utils,
@@ -781,15 +672,13 @@ import {
   init_task_tool_manifest,
   init_telemetry,
   init_templates,
-  init_types,
   insertActiveSession,
   insertPricingRow,
   installMcpServer,
   installSkill,
+  isExtensionAgent,
   isReservedConfigKey,
-  isSafeBundlePath,
   isSteeringEnabled as isSteeringEnabled2,
-  isTerminalTaskStatus,
   listAgentsWithCredStatusByProvider,
   listAllMetrics,
   listAllPages,
@@ -840,7 +729,6 @@ import {
   setApiKeyName,
   setFavorite,
   setRequestAuth,
-  splitLegacyModelAlias,
   startTask,
   supersedeTask,
   sweepExpiredKv,
@@ -884,12 +772,136 @@ import {
   upsertSwarmConfig,
   validateConfigValue,
   withFavoriteFlags
-} from "./cli-zvgj5zg8.js";
+} from "./cli-ge67p080.js";
+import {
+  ActiveSessionSchema,
+  AgentAcpStatusSchema,
+  AgentAvatarSchema,
+  AgentCredStatusSchema,
+  AgentLatestModelSchema,
+  AgentLogSchema,
+  AgentMcpServerSchema,
+  AgentMemorySchema,
+  AgentMemoryScopeSchema,
+  AgentMemorySourceSchema,
+  AgentSchema,
+  AgentSkillSchema,
+  AgentStatusSchema,
+  AgentTaskSchema,
+  AgentTaskSourceSchema,
+  AgentTaskStatusSchema,
+  AgentWithTasksSchema,
+  AssetEntityTypeSchema,
+  AssetKeyMappingSchema,
+  AssetKeySchema,
+  AssetSummarySchema,
+  AutomationIntegrationIdSchema,
+  BudgetRefusalNotificationSchema,
+  BudgetRefusedTriggerSchema,
+  BudgetSchema,
+  BudgetScopeSchema,
+  ContextFormulaSchema,
+  ContextSnapshotEventTypeSchema,
+  ContextSnapshotSchema,
+  CooldownConfigSchema,
+  EventCategorySchema,
+  EventNameSchema,
+  EventSourceSchema,
+  EventStatusSchema,
+  ExtensionInstallBodySchema,
+  ExtensionManifestSchema,
+  ExtensionRunSchema,
+  ExtensionSchema,
+  ExtensionVersionSchema,
+  FavoriteItemTypeSchema,
+  InboxItemStateSchema,
+  InboxItemStatusSchema,
+  InboxItemTypeSchema,
+  InputValueSchema,
+  KvEntrySchema,
+  KvKeySchema,
+  KvNamespaceSchema,
+  KvValueTypeSchema,
+  McpAuthMethodSchema,
+  McpServerSchema,
+  McpServerWithInstallInfoSchema,
+  MetricDefinitionSchema,
+  MetricSchema,
+  MetricVersionSchema,
+  MetricWidgetSchema,
+  ModelTierSchema,
+  OnUnsupportedSchema,
+  PageAuthModeSchema,
+  PageContentTypeSchema,
+  PageSchema,
+  PageVersionSchema,
+  PricingProviderSchema,
+  PricingRowSchema,
+  PricingTokenClassSchema,
+  PromptTemplateHistorySchema,
+  PromptTemplateSchema,
+  ProviderNameSchema,
+  ReasoningEffortSchema,
+  RepoGuidelinesInputSchema,
+  RepoHooksSchema,
+  ResumeReasonSchema,
+  RoutingReasonSchema,
+  RuntimeInstanceSchema,
+  ScheduledTaskSchema,
+  ScheduledTaskTargetTypeSchema,
+  ScriptApiAuthModeSchema,
+  ScriptApiRecordSchema,
+  ScriptFsModeSchema,
+  ScriptRecordSchema,
+  ScriptRunJournalEntrySchema,
+  ScriptRunListItemSchema,
+  ScriptRunSchema,
+  ScriptRunStatusSchema,
+  ScriptScopeSchema,
+  ScriptVersionRecordSchema,
+  ServiceSchema,
+  SessionCostModelBreakdownSchema,
+  SessionCostSchema,
+  SessionLogSchema,
+  SkillFileSchema,
+  SkillSchema,
+  SkillWithInstallInfoSchema,
+  SteerModeSchema,
+  SteerResultSchema,
+  SteeringMessageSchema,
+  SteeringSourceSchema,
+  SwarmConfigSchema,
+  SwarmEventSchema,
+  SwarmRepoSchema,
+  TERMINAL_SCRIPT_RUN_STATUSES,
+  TaskAttachmentSchema,
+  TaskTemplateKindSchema,
+  TaskTemplateSchema,
+  TriggerConfigSchema,
+  UserCommsPrefsSchema,
+  UserFavoriteSchema,
+  UserSchema,
+  VersionableFieldSchema,
+  WorkflowDefinitionSchema,
+  WorkflowEdgeSchema,
+  WorkflowNodePatchSchema,
+  WorkflowPatchSchema,
+  WorkflowRunSchema,
+  WorkflowRunStatusSchema,
+  WorkflowRunStepSchema,
+  WorkflowSchema,
+  WorkflowVersionSchema,
+  init_bundle_path,
+  init_types,
+  isSafeBundlePath,
+  isTerminalTaskStatus,
+  splitLegacyModelAlias
+} from "./cli-4k7jazkq.js";
 import {
   IDENTITY_FIELD_BUDGETS,
   IdentityFieldBudgetError,
   init_identity_field_budget
-} from "./cli-ht5rs63n.js";
+} from "./cli-0e31nm4n.js";
 import {
   getAllTemplateDefinitions,
   getTemplateDefinition,
@@ -900,7 +912,8 @@ import {
   interpolate,
   isSteeringEnabled,
   resolveTemplate
-} from "./cli-z61ykvam.js";
+} from "./cli-wg04s9kr.js";
+import"./cli-v4en75c5.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getAppUrl,
@@ -909,7 +922,10 @@ import {
   getPublicMcpBaseUrl,
   init_constants
 } from "./cli-dv6cdjs2.js";
-import"./cli-c2mk1kgf.js";
+import {
+  getSlackConfiguration,
+  init_config
+} from "./cli-n7h1kqpf.js";
 import {
   init_env_flag,
   isEnvFlagEnabled,
@@ -930,13 +946,31 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-zvkq5csn.js";
+} from "./cli-myaxtgh8.js";
 import {
   init_secret_scrubber,
   registerVolatileSecret,
   scrubObject,
   scrubSecrets
 } from "./cli-r2ap2czm.js";
+import {
+  bedrockProviderModule
+} from "./cli-h38x0qhg.js";
+import"./cli-yn0a417a.js";
+import"./cli-cgj4hc12.js";
+import"./cli-txgcknmy.js";
+import"./cli-6map995v.js";
+import"./cli-k0g1sjzm.js";
+import"./cli-y2apkfe2.js";
+import"./cli-vapyk8sw.js";
+import {
+  setBedrockProviderModule
+} from "./cli-5b6b62tz.js";
+import"./cli-btbzvq95.js";
+import"./cli-1m2e086m.js";
+import"./cli-mcnhgnn1.js";
+import"./cli-bzr0ftht.js";
+import"./cli-bd957dgb.js";
 import {
   import_websocket,
   import_websocket_server
@@ -950,31 +984,6 @@ import {
   init_bus,
   realtimeBus
 } from "./cli-zf8jjwex.js";
-import {
-  bedrockProviderModule
-} from "./cli-y6x0gqtg.js";
-import"./cli-cg4vnyh4.js";
-import"./cli-txgcknmy.js";
-import"./cli-6map995v.js";
-import"./cli-j8dggbcr.js";
-import"./cli-y2apkfe2.js";
-import"./cli-vapyk8sw.js";
-import"./cli-pdz9qde4.js";
-import {
-  setBedrockProviderModule
-} from "./cli-c4eeb5q2.js";
-import"./cli-rgvp6r2x.js";
-import"./cli-btbzvq95.js";
-import"./cli-1m2e086m.js";
-import"./cli-8wrympd7.js";
-import"./cli-bd957dgb.js";
-import"./cli-jyetr64j.js";
-import"./cli-w1d1bgkk.js";
-import"./cli-qghpvca2.js";
-import"./cli-55qrx3q8.js";
-import"./cli-rembwgt8.js";
-import"./cli-tcvj7j2r.js";
-import"./cli-qa66qaf0.js";
 import {
   __require,
   __toESM
@@ -3350,7 +3359,7 @@ var setAgentHarnessProviderRoute = route({
     404: { description: "Agent not found" }
   }
 });
-var LocalHarnessProviderSchema = exports_external.enum(["claude", "codex", "pi", "opencode", "acp"]);
+var LocalHarnessProviderSchema = exports_external.enum(["claude", "codex", "pi", "opencode", "acp", "dsh"]);
 var AcpRuntimeConfigSchema = exports_external.object({
   target: exports_external.enum(ACP_TARGET_IDS),
   command: exports_external.string().trim().min(1).nullable().optional(),
@@ -3466,7 +3475,7 @@ var listAgents = route({
   path: "/api/agents",
   pattern: ["api", "agents"],
   summary: "List all agents",
-  description: "Returns agents WITHOUT the six identity-markdown blobs (`claudeMd`/`soulMd`/`identityMd`/`toolsMd`/`heartbeatMd`/`setupScript`) by default — they bloat the list by ~16 KB/agent and the overview never renders them. Pass `fields=full` to restore them, or fetch a single agent via `GET /api/agents/{id}`.",
+  description: "Returns agents WITHOUT the six identity-markdown blobs (`claudeMd`/`soulMd`/`identityMd`/`toolsMd`/`heartbeatMd`/`setupScript`) by default — they bloat the list by ~16 KB/agent and the overview never renders them. Pass `fields=full` to restore them, or fetch a single agent via `GET /api/agents/{id}`. Extension identities (`ext:<name>`, role `extension`) are never listed; they are API principals, not workers.",
   tags: ["Agents"],
   query: exports_external.object({
     include: exports_external.enum(["tasks"]).optional(),
@@ -3661,6 +3670,10 @@ async function handleAgentRegister(req, res, pathSegments, myAgentId) {
     const parsed = await registerAgent.parse(req, res, pathSegments, new URLSearchParams);
     if (!parsed)
       return true;
+    if (parsed.body.role === EXTENSION_AGENT_ROLE) {
+      jsonError(res, `Role "${EXTENSION_AGENT_ROLE}" is reserved for extension identities.`, 400);
+      return true;
+    }
     const agentId = myAgentId || crypto.randomUUID();
     const multiRuntime = isMultiRuntimeEnabled();
     if (multiRuntime && parsed.body.runtimeInstanceId) {
@@ -3869,7 +3882,7 @@ async function handleAgentsRest(req, res, pathSegments, queryParams, _myAgentId)
         onConflict: (conflict) => conflicts.push(conflict)
       });
     } catch (error) {
-      if (error instanceof HeartbeatExpiryError) {
+      if (error instanceof HeartbeatExpiryError || error instanceof ReservedAgentRoleError) {
         jsonError(res, error.message, 400);
         return true;
       }
@@ -4007,7 +4020,7 @@ async function handleAgentsRest(req, res, pathSegments, queryParams, _myAgentId)
         scopeId: parsed.params.id,
         key: "MODEL_OVERRIDE"
       }))[0]?.value ?? "";
-      const allowedLevels = harness_provider === "acp" ? [] : reasoningCapability(harness_provider, modelForValidation ?? "").levels;
+      const allowedLevels = harness_provider === "acp" || harness_provider === "dsh" ? [] : reasoningCapability(harness_provider, modelForValidation ?? "").levels;
       if (!allowedLevels.includes(reasoning_effort)) {
         json(res, {
           error: "Unsupported reasoning_effort for this harness/model",
@@ -5533,7 +5546,7 @@ init_request_auth_context();
 init_secret_scrubber();
 var MAX_ENV_PRESENCE_KEYS = 200;
 var SECRETS_FORCE_MASK_NOTE = " (secret values masked: reading unmasked secrets requires the lead agent)";
-var API_ONLY_CONFIG_KEYS = new Set(["API_AGENT_FS_API_KEY"]);
+var API_ONLY_CONFIG_KEYS = new Set(["API_AGENT_FS_API_KEY", "SLACK_SIGNING_SECRET"]);
 function stripApiOnlyKeys(configs) {
   return configs.filter((config) => !API_ONLY_CONFIG_KEYS.has(config.key));
 }
@@ -6888,6 +6901,7 @@ var installRoute = route({
   pattern: ["api", "extensions", "install"],
   operationId: "extensions_install",
   summary: "Validate and install an extension bundle",
+  description: "Any authenticated agent can install a disabled draft owned by its agent ID. Workers can update only their own bundles; activation remains lead/operator-only.",
   tags: ["Extensions"],
   body: ExtensionInstallBodySchema,
   responses: {
@@ -6991,6 +7005,7 @@ var patchRoute = route({
   pattern: ["api", "extensions", null],
   operationId: "extensions_update",
   summary: "Update extension priority, config, or description",
+  description: "Workers may edit their own disabled extensions. Leads, operators, and dashboard users retain access to all extensions.",
   tags: ["Extensions"],
   params: idParamsSchema,
   body: exports_external.object({
@@ -7012,6 +7027,7 @@ var deleteRoute = route({
   pattern: ["api", "extensions", null],
   operationId: "extensions_delete",
   summary: "Uninstall a disabled extension",
+  description: "Workers may uninstall their own disabled extensions. Leads, operators, and dashboard users retain access to all extensions.",
   tags: ["Extensions"],
   params: idParamsSchema,
   responses: {
@@ -7121,16 +7137,19 @@ async function extensionPrincipal(req, callerAgentId) {
     return { kind: "user", userId: auth.userId };
   return { kind: "agent", agentId: "", isLead: false };
 }
-async function requirePermission(req, res, callerAgentId, verb) {
+function ownerOnlyAgentId(principal) {
+  return principal.kind === "agent" && !LEGACY_RULES["lead-or-operator-or-user"].evaluate(principal, undefined) ? principal.agentId : undefined;
+}
+async function requirePermission(req, res, callerAgentId, verb, resource = { kind: "none" }) {
   const principal = await extensionPrincipal(req, callerAgentId);
-  const decision = can({ principal, verb, resource: { kind: "none" }, source: "http" });
+  const decision = can({ principal, verb, resource, source: "http" });
   if (decision.allow)
     return principal;
   jsonError(res, `Forbidden: ${decision.reason}`, 403);
   return null;
 }
 function respondLifecycleError(res, error) {
-  const status = error instanceof ExtensionConfigError ? 400 : error instanceof ExtensionLifecycleError ? error.status : 500;
+  const status = error instanceof ExtensionOwnershipError ? 403 : error instanceof ExtensionConfigError ? 400 : error instanceof ExtensionLifecycleError ? error.status : 500;
   jsonError(res, scrubSecrets(error instanceof Error ? error.message : String(error)), status);
 }
 async function handleExtensions(req, res, pathSegments, queryParams, agentId) {
@@ -7138,7 +7157,12 @@ async function handleExtensions(req, res, pathSegments, queryParams, agentId) {
     const parsed = await installRoute.parse(req, res, pathSegments, queryParams);
     if (!parsed)
       return true;
-    const principal = await requirePermission(req, res, agentId, "extension.write");
+    const existing = await getExtensionByName(parsed.body.manifest.name);
+    const principal = await requirePermission(req, res, agentId, "extension.write", {
+      kind: "extension",
+      extensionId: existing?.id,
+      createdByAgentId: existing?.createdByAgentId
+    });
     if (!principal)
       return true;
     const validation = await validateBundle(parsed.body);
@@ -7146,19 +7170,28 @@ async function handleExtensions(req, res, pathSegments, queryParams, agentId) {
       json(res, { error: "extension_validation_failed", diagnostics: validation.diagnostics }, 400);
       return true;
     }
-    const existing = await getExtensionByName(validation.manifest.name);
     const writerAgentId = principal.kind === "agent" ? principal.agentId : undefined;
     const updatedBy = await resolveHttpAuditUserId(req, writerAgentId);
     const shouldActivate = principal.kind !== "agent" && existing?.enabled === true;
-    const result = await installExtension({
-      manifest: validation.manifest,
-      files: parsed.body.files,
-      priority: parsed.body.priority,
-      config: parsed.body.config,
-      agentId: writerAgentId,
-      createdBy: updatedBy,
-      activate: shouldActivate
-    });
+    const ownerOnly = ownerOnlyAgentId(principal);
+    let result;
+    try {
+      result = await installExtension({
+        manifest: validation.manifest,
+        files: parsed.body.files,
+        priority: parsed.body.priority,
+        config: parsed.body.config,
+        agentId: writerAgentId,
+        createdBy: updatedBy,
+        activate: shouldActivate,
+        ownerOnly
+      });
+    } catch (error) {
+      if (!(error instanceof ExtensionOwnershipError))
+        throw error;
+      jsonError(res, error.message, 403);
+      return true;
+    }
     let extension = result.extension;
     if (shouldActivate) {
       try {
@@ -7236,17 +7269,36 @@ async function handleExtensions(req, res, pathSegments, queryParams, agentId) {
     const parsed = await patchRoute.parse(req, res, pathSegments, queryParams);
     if (!parsed)
       return true;
-    const principal = await requirePermission(req, res, agentId, "extension.write");
+    const stored = await getExtensionById(parsed.params.id);
+    if (!stored) {
+      jsonError(res, "Extension not found", 404);
+      return true;
+    }
+    const principal = await requirePermission(req, res, agentId, "extension.write", {
+      kind: "extension",
+      extensionId: stored.id,
+      createdByAgentId: stored.createdByAgentId
+    });
     if (!principal)
       return true;
     const writerAgentId = principal.kind === "agent" ? principal.agentId : undefined;
-    const stored = parsed.body.config ? await getExtensionById(parsed.params.id) : null;
-    const config = parsed.body.config && stored ? preserveRedactedConfigValues(parsed.body.config, stored.configJson) : parsed.body.config;
-    let extension = await updateExtensionMeta(parsed.params.id, {
-      ...parsed.body,
-      ...config === undefined ? {} : { config },
-      updatedBy: await resolveHttpAuditUserId(req, writerAgentId)
-    });
+    const ownerOnly = ownerOnlyAgentId(principal);
+    if (stored.enabled && ownerOnly && !await requirePermission(req, res, agentId, "extension.activate")) {
+      return true;
+    }
+    const config = parsed.body.config ? preserveRedactedConfigValues(parsed.body.config, stored.configJson) : parsed.body.config;
+    let extension;
+    try {
+      extension = await updateExtensionMeta(parsed.params.id, {
+        ...parsed.body,
+        ...config === undefined ? {} : { config },
+        updatedBy: await resolveHttpAuditUserId(req, writerAgentId),
+        ownerOnly
+      });
+    } catch (error) {
+      respondLifecycleError(res, error);
+      return true;
+    }
     if (!extension) {
       jsonError(res, "Extension not found", 404);
       return true;
@@ -7266,19 +7318,29 @@ async function handleExtensions(req, res, pathSegments, queryParams, agentId) {
     const parsed = await deleteRoute.parse(req, res, pathSegments, queryParams);
     if (!parsed)
       return true;
-    const principal = await requirePermission(req, res, agentId, "extension.write");
-    if (!principal)
-      return true;
-    const extension = await getExtensionById(parsed.params.id);
-    if (!extension) {
+    const stored = await getExtensionById(parsed.params.id);
+    if (!stored) {
       jsonError(res, "Extension not found", 404);
       return true;
     }
+    const principal = await requirePermission(req, res, agentId, "extension.write", {
+      kind: "extension",
+      extensionId: stored.id,
+      createdByAgentId: stored.createdByAgentId
+    });
+    if (!principal)
+      return true;
+    const extension = stored;
     if (extension.enabled) {
       jsonError(res, "Disable the extension before uninstalling it", 409);
       return true;
     }
-    await deleteExtension(extension.id);
+    try {
+      await deleteExtension(extension.id, ownerOnlyAgentId(principal));
+    } catch (error) {
+      respondLifecycleError(res, error);
+      return true;
+    }
     deleteRoute.respond(res, 200, { deleted: true });
     return true;
   }
@@ -15171,6 +15233,9 @@ async function handlePoll(req, res, pathSegments, queryParams, myAgentId) {
         if (!agent) {
           return { error: "Agent not found", status: 404 };
         }
+        if (isExtensionAgent(agent)) {
+          return { trigger: null };
+        }
         if (isMultiRuntimeEnabled() && !(runtimeInstanceId && await touchRuntimeInstance(runtimeInstanceId, agent.id))) {
           return { trigger: null };
         }
@@ -16758,6 +16823,10 @@ async function handleSchedules(req, res, pathSegments, queryParams, myAgentId) {
         jsonError(res, "Target agent not found", 400);
         return true;
       }
+      if (isExtensionAgent(agent)) {
+        jsonError(res, extensionAgentAssignmentError(agent), 400);
+        return true;
+      }
     }
     const targetType = body.targetType ?? "agent-task";
     if (targetType === "agent-task" && !body.taskTemplate) {
@@ -16956,6 +17025,10 @@ async function handleSchedules(req, res, pathSegments, queryParams, myAgentId) {
         jsonError(res, "Target agent not found", 400);
         return true;
       }
+      if (isExtensionAgent(agent)) {
+        jsonError(res, extensionAgentAssignmentError(agent), 400);
+        return true;
+      }
     }
     const mergedTargetType = parsed.body.targetType ?? existing.targetType;
     const mergedTaskTemplate = parsed.body.taskTemplate !== undefined ? parsed.body.taskTemplate : existing.taskTemplate;
@@ -19607,24 +19680,32 @@ async function handleScriptRuns(req, res, pathSegments, queryParams, agentId) {
     const contextKey = `script-run:${run.id}:${parsed.body.stepKey}`;
     let task = await getLatestScriptRunStepTaskByContextKey(contextKey);
     if (!task) {
-      task = await createTaskExtended(parsed.body.template ?? parsed.body.task ?? parsed.body.stepKey, {
-        agentId: parsed.body.agentId,
-        routingReason: parsed.body.routingReason ?? (parsed.body.agentId ? "human_pinned" : undefined),
-        routingNote: parsed.body.routingNote,
-        routingSource: parsed.body.routingReason ? "declared" : parsed.body.agentId ? "engine_default" : undefined,
-        tags: parsed.body.tags,
-        priority: parsed.body.priority,
-        offeredTo: parsed.body.offerMode ? parsed.body.agentId : undefined,
-        taskType: "script-run-step",
-        source: "mcp",
-        dir: parsed.body.dir,
-        vcsRepo: parsed.body.vcsRepo,
-        model: parsed.body.model,
-        parentTaskId: parsed.body.parentTaskId,
-        requestedByUserId: parsed.body.requestedByUserId ?? run.requestedByUserId,
-        outputSchema: parsed.body.outputSchema,
-        contextKey
-      });
+      try {
+        task = await createTaskExtended(parsed.body.template ?? parsed.body.task ?? parsed.body.stepKey, {
+          agentId: parsed.body.agentId,
+          routingReason: parsed.body.routingReason ?? (parsed.body.agentId ? "human_pinned" : undefined),
+          routingNote: parsed.body.routingNote,
+          routingSource: parsed.body.routingReason ? "declared" : parsed.body.agentId ? "engine_default" : undefined,
+          tags: parsed.body.tags,
+          priority: parsed.body.priority,
+          offeredTo: parsed.body.offerMode ? parsed.body.agentId : undefined,
+          taskType: "script-run-step",
+          source: "mcp",
+          dir: parsed.body.dir,
+          vcsRepo: parsed.body.vcsRepo,
+          model: parsed.body.model,
+          parentTaskId: parsed.body.parentTaskId,
+          requestedByUserId: parsed.body.requestedByUserId ?? run.requestedByUserId,
+          outputSchema: parsed.body.outputSchema,
+          contextKey
+        });
+      } catch (error) {
+        if (error instanceof ExtensionAgentAssignmentError) {
+          jsonError(res, error.message, 400);
+          return true;
+        }
+        throw error;
+      }
     }
     const deadline = Date.now() + 30000;
     while (Date.now() < deadline) {
@@ -22226,6 +22307,7 @@ async function handleStats(req, res, pathSegments, queryParams, myAgentId) {
 // src/http/status.ts
 init_zod();
 init_db();
+init_config();
 init_types();
 var SetupMilestoneStateSchema = exports_external.enum(["unverified", "configured", "verified"]);
 var SetupMilestoneIdSchema = exports_external.enum([
@@ -22442,21 +22524,31 @@ function embeddingsMilestone() {
   };
 }
 function slackMilestone(state) {
-  const disable = process.env.SLACK_DISABLE;
-  const disabled = disable === "true" || disable === "1";
+  const config = getSlackConfiguration();
   if (state === "unverified") {
+    let hint;
+    if (config.disabled) {
+      hint = "Slack is explicitly disabled (SLACK_DISABLE=true).";
+    } else if (!config.mode) {
+      hint = "Invalid SLACK_MODE. Use socket or http.";
+    } else if (config.mode === "http" && config.missingCredentials.length === 0) {
+      hint = "HTTP credentials are configured, but HTTP ingress is unavailable until the receiver is installed.";
+    } else {
+      hint = `Set ${config.missingCredentials.join(" + ")} for Slack ${config.mode} mode.`;
+    }
     return {
       id: "slack",
-      label: "Slack connected",
+      label: "Slack configured",
       state: "unverified",
-      hint: disabled ? "Slack is explicitly disabled (SLACK_DISABLE=true)." : "Set SLACK_BOT_TOKEN + SLACK_APP_TOKEN to connect Slack.",
+      hint,
       action_url: automationIntegrationFixUrl("slack")
     };
   }
   return {
     id: "slack",
-    label: "Slack connected",
-    state: "verified",
+    label: "Slack configured",
+    state: "configured",
+    hint: config.mode === "http" ? "HTTP credentials are configured, but HTTP ingress is unavailable until the receiver is installed." : "Socket Mode credentials are configured; a live connection has not been verified.",
     action_url: automationIntegrationFixUrl("slack")
   };
 }
@@ -22541,7 +22633,7 @@ function agentfsMilestone(state) {
   };
 }
 async function workersMilestone() {
-  const totalRow = await getDbClient().get(`SELECT COUNT(*) AS count FROM agents`);
+  const totalRow = await getDbClient().get(`SELECT COUNT(*) AS count FROM agents WHERE ${NOT_EXTENSION_AGENT_SQL}`);
   const totalAgents = totalRow?.count ?? 0;
   const { leads_alive, workers_alive } = await getLiveAgentCounts(5);
   if (leads_alive > 0 && workers_alive > 0) {
@@ -22909,7 +23001,7 @@ var createTask = route({
   }),
   responses: {
     201: { description: "Task created", schema: AgentTaskSchema },
-    400: { description: "Validation error" },
+    400: { description: "Validation error, or agentId/offeredTo targets an extension identity" },
     422: {
       description: "Task creation blocked by an extension",
       schema: exports_external.object({
@@ -23442,6 +23534,10 @@ async function handleTasks(req, res, pathSegments, queryParams, myAgentId) {
         createTask.respond(res, 422, { error: error.reason, extension: error.extension });
         return true;
       }
+      if (error instanceof ExtensionAgentAssignmentError) {
+        jsonError(res, error.message, 400);
+        return true;
+      }
       console.error("[HTTP] Failed to create task:", error);
       jsonError(res, "Failed to create task", 500);
     }
@@ -27466,7 +27562,7 @@ async function shutdown() {
     sessionsProcessed: getServerSessionsProcessed()
   });
   if (hasCapability("scheduling")) {
-    const { stopScheduler } = await import("./index-rnyahfn5.js");
+    const { stopScheduler } = await import("./index-9n5z2492.js");
     stopScheduler();
   }
   stopHeartbeat();
@@ -27474,7 +27570,7 @@ async function shutdown() {
   await stopScriptRunSupervisor();
   await stopSlackApp();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { stopOAuthKeepalive } = await import("./keepalive-s3xpr7sw.js");
+    const { stopOAuthKeepalive } = await import("./keepalive-pwxvxd2c.js");
     await stopOAuthKeepalive();
   }
   stopOAuthPendingGc();
@@ -27542,15 +27638,15 @@ try {
   console.warn("[startup] CAPABILITIES upgrade seed failed (non-fatal):", err);
 }
 try {
-  const { seedPricingFromModelsDev } = await import("./seed-pricing-hf889enh.js");
+  const { seedPricingFromModelsDev } = await import("./seed-pricing-650wbr1n.js");
   seedPricingFromModelsDev();
-  const { startPricingRefreshLoop } = await import("./pricing-refresh-hb3691fd.js");
+  const { startPricingRefreshLoop } = await import("./pricing-refresh-52g2ywrw.js");
   startPricingRefreshLoop();
 } catch (err) {
   console.error("[startup] Failed to seed pricing rows:", err);
 }
 try {
-  const { ensureRbacSeedsSynced } = await import("./rbac-roles-jh280k9g.js");
+  const { ensureRbacSeedsSynced } = await import("./rbac-roles-hbf0xa52.js");
   ensureRbacSeedsSynced();
 } catch (err) {
   console.error("[startup] Failed to sync RBAC seed rows:", err);
@@ -27558,7 +27654,7 @@ try {
     throw err;
 }
 try {
-  const { runAllSeeders } = await import("./index-tfsdxyv6.js");
+  const { runAllSeeders } = await import("./index-j5wrf1yw.js");
   await runAllSeeders({ scriptEmbeddingMode: "skip" });
 } catch (err) {
   console.error("[startup] Failed to seed built-in entities:", err);
@@ -27612,36 +27708,36 @@ httpServer.listen(port, async () => {
   await initWorkflows();
   await startScriptRunSupervisor(getMcpBaseUrl());
   if (hasCapability("scheduling")) {
-    const { startScheduler } = await import("./index-rnyahfn5.js");
-    const { getExecutorRegistry: getExecutorRegistry2 } = await import("./index-jsw3aynb.js");
+    const { startScheduler } = await import("./index-9n5z2492.js");
+    const { getExecutorRegistry: getExecutorRegistry2 } = await import("./index-6artrehg.js");
     const intervalMs = Number(process.env.SCHEDULER_INTERVAL_MS) || 1e4;
     startScheduler(getExecutorRegistry2(), intervalMs, {
       runId: globalState.__runId
     });
   }
   if (!isEnvFlagEnabled("HEARTBEAT_DISABLE", false)) {
-    const { startHeartbeat } = await import("./index-sgk50mbg.js");
+    const { startHeartbeat } = await import("./index-m2xqpz5r.js");
     const heartbeatMs = Number(process.env.HEARTBEAT_INTERVAL_MS) || 90000;
     startHeartbeat(heartbeatMs);
   }
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { startOAuthKeepalive } = await import("./keepalive-s3xpr7sw.js");
+    const { startOAuthKeepalive } = await import("./keepalive-pwxvxd2c.js");
     startOAuthKeepalive();
   }
   if (process.env.OAUTH_REFRESH_SWEEP_DISABLE !== "true") {
-    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-q0t3bxre.js");
+    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-6v4bd737.js");
     startOAuthRefreshSweep();
   }
   startOAuthPendingGc();
   await startMemoryGc();
   await startDbRetention();
-  import("./boot-reembed-je26h5y7.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+  import("./boot-reembed-22hd3jjn.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
     console.error("[boot-reembed] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-reembed-1qmybsd4.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+  import("./boot-reembed-qe168424.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
     console.error("[boot-reembed-scripts] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-scrub-logs-gte3h1mm.js").then(({ runBootScrubLogs }) => runBootScrubLogs()).catch((err) => {
+  import("./boot-scrub-logs-pkdpsrjd.js").then(({ runBootScrubLogs }) => runBootScrubLogs()).catch((err) => {
     console.error("[boot-scrub-logs] startup scrub failed (non-fatal):", err);
   });
 }).on("error", (err) => {