@desplega.ai/agent-swarm 1.157.0 → 1.158.0

package/src/tests/db-task-read-contract.test.ts

@@ -41,6 +41,7 @@ const baseFacade = `type:AgentMailInboxMapping
 type:ApiKeyStatus
 type:AppVersion
 type:ApprovalRequest
+type:ApprovalRequestSummary
 type:AssetSummaryFilters
 type:AttributionByPersonRow
 type:AvailableKeyIndicesResult
@@ -64,6 +65,7 @@ type:InboxSummary
 type:InsertPricingRowInput
 type:InsertTaskAttachmentInput
 type:KeyCostSummary
+type:KvJsonFieldEquals
 type:McpServerFilters
 type:McpServerInsert
 type:MentionPreview
@@ -113,6 +115,7 @@ value:autoEncryptLegacyPlaintextSecrets
 value:backfillSupersedeTaskResumeTaskId
 value:bindSlackMessageTimestamp
 value:buildRoutingAffinityFromAgent
+value:cancelApprovalRequestById
 value:cancelPendingApprovalRequestsForRun
 value:cancelPendingSteeringForTask
 value:cancelTask
@@ -223,6 +226,7 @@ value:getActiveSessions
 value:getActiveTaskCount
 value:getAgentById
 value:getAgentCurrentTask
+value:getAgentDailyTaskCounts
 value:getAgentHarnessProviders
 value:getAgentMailInboxMapping
 value:getAgentMailInboxMappingsByAgent
@@ -265,6 +269,7 @@ value:getContextSnapshotsByTaskId
 value:getContextSummaryByTaskId
 value:getContextVersion
 value:getContextVersionHistory
+value:getCurrentStepForNode
 value:getDailySpendForAgent
 value:getDailySpendForUser
 value:getDailySpendGlobal
@@ -370,6 +375,7 @@ value:getSlackTasksMissingTree
 value:getSlackTreeMessage
 value:getSlackTreeMessageByThread
 value:getSlackTreeMessages
+value:getStaleApprovalRequests
 value:getStalePinnedResumes
 value:getStaleUnassignedAffinityTasks
 value:getStalledInProgressTasks
@@ -380,6 +386,7 @@ value:getStepCountForNode
 value:getStuckApprovalRuns
 value:getStuckWaitRuns
 value:getStuckWorkflowRuns
+value:getSupersededTasksWithoutResume
 value:getSwarmConfigById
 value:getSwarmConfigLookupById
 value:getSwarmConfigs
@@ -436,9 +443,11 @@ value:isPendingSlackMessage
 value:isPoolAffinityEnforcementEnabled
 value:isSettledSlackMessage
 value:isSqliteVecAvailable
+value:kvPrefixUpperBound
 value:listAgentsWithCredStatusByProvider
 value:listAllMetrics
 value:listAllPages
+value:listApprovalRequestSummaries
 value:listApprovalRequests
 value:listAssetSummaries
 value:listCancelledApprovalRequestsForRun
@@ -595,6 +604,7 @@ value:getMostRecentTaskInThread
 value:getPendingSlackRelayTasks
 value:getRecentlyFinishedWorkerTasks
 value:getSlackTasksMissingTree
+value:getSupersededTasksWithoutResume
 value:getTaskById
 value:getTaskStats
 value:getTasksByAgentId

package/src/tests/db-task-write-contract.test.ts

@@ -42,6 +42,7 @@ const baseFacade = `type:AgentMailInboxMapping
 type:ApiKeyStatus
 type:AppVersion
 type:ApprovalRequest
+type:ApprovalRequestSummary
 type:AssetSummaryFilters
 type:AttributionByPersonRow
 type:AvailableKeyIndicesResult
@@ -65,6 +66,7 @@ type:InboxSummary
 type:InsertPricingRowInput
 type:InsertTaskAttachmentInput
 type:KeyCostSummary
+type:KvJsonFieldEquals
 type:McpServerFilters
 type:McpServerInsert
 type:MentionPreview
@@ -114,6 +116,7 @@ value:autoEncryptLegacyPlaintextSecrets
 value:backfillSupersedeTaskResumeTaskId
 value:bindSlackMessageTimestamp
 value:buildRoutingAffinityFromAgent
+value:cancelApprovalRequestById
 value:cancelPendingApprovalRequestsForRun
 value:cancelPendingSteeringForTask
 value:cancelTask
@@ -224,6 +227,7 @@ value:getActiveSessions
 value:getActiveTaskCount
 value:getAgentById
 value:getAgentCurrentTask
+value:getAgentDailyTaskCounts
 value:getAgentHarnessProviders
 value:getAgentMailInboxMapping
 value:getAgentMailInboxMappingsByAgent
@@ -266,6 +270,7 @@ value:getContextSnapshotsByTaskId
 value:getContextSummaryByTaskId
 value:getContextVersion
 value:getContextVersionHistory
+value:getCurrentStepForNode
 value:getDailySpendForAgent
 value:getDailySpendForUser
 value:getDailySpendGlobal
@@ -371,6 +376,7 @@ value:getSlackTasksMissingTree
 value:getSlackTreeMessage
 value:getSlackTreeMessageByThread
 value:getSlackTreeMessages
+value:getStaleApprovalRequests
 value:getStalePinnedResumes
 value:getStaleUnassignedAffinityTasks
 value:getStalledInProgressTasks
@@ -381,6 +387,7 @@ value:getStepCountForNode
 value:getStuckApprovalRuns
 value:getStuckWaitRuns
 value:getStuckWorkflowRuns
+value:getSupersededTasksWithoutResume
 value:getSwarmConfigById
 value:getSwarmConfigLookupById
 value:getSwarmConfigs
@@ -437,9 +444,11 @@ value:isPendingSlackMessage
 value:isPoolAffinityEnforcementEnabled
 value:isSettledSlackMessage
 value:isSqliteVecAvailable
+value:kvPrefixUpperBound
 value:listAgentsWithCredStatusByProvider
 value:listAllMetrics
 value:listAllPages
+value:listApprovalRequestSummaries
 value:listApprovalRequests
 value:listAssetSummaries
 value:listCancelledApprovalRequestsForRun

package/src/tests/docs-index-footprint.test.js

@@ -78,7 +78,7 @@ describe("docs API index footprint", () => {
     expect(tasks).toContain('"path":"/api/task-templates","method":"get"');
   });
 
-  test("OpenAPI and generated pages keep all 381 operations", async () => {
+  test("OpenAPI and generated pages keep all 383 operations", async () => {
     const spec = await Bun.file(resolve(repoRoot, "openapi.json")).json();
     const operationKeys = [];
     const tags = new Set();
@@ -103,8 +103,8 @@ describe("docs API index footprint", () => {
     expect(spec.paths["/api/agents/{id}/runtime"]?.get).toBeDefined();
 
     const generatedKeys = await generatedOperationKeys();
-    expect(operationKeys).toHaveLength(381);
-    expect(generatedKeys).toHaveLength(381);
+    expect(operationKeys).toHaveLength(383);
+    expect(generatedKeys).toHaveLength(383);
     expect(new Set(generatedKeys)).toEqual(new Set(operationKeys));
   });
 

package/src/tests/events-http.test.ts

@@ -1,6 +1,7 @@
 import { afterAll, beforeAll, describe, expect, test } from "bun:test";
 import { unlink } from "node:fs/promises";
 import type { Subprocess } from "bun";
+import { fetchProfileSyncRejectionBanner } from "../commands/profile-sync";
 import { getFreePort, SERVER_BOOT_HOOK_TIMEOUT_MS } from "./test-net";
 
 let TEST_PORT = 0;
@@ -270,6 +271,108 @@ describe("GET /api/events", () => {
   });
 });
 
+describe("GET /api/events — latestPerDataField", () => {
+  const AGENT = "profile-sync-latest-agent";
+  const ids: Record<string, string> = {};
+
+  beforeAll(async () => {
+    const seed: [string, string, string][] = [
+      ["tools-old", "system.profile_sync_rejected", "toolsMd"],
+      ["claude-rejected", "system.profile_sync_rejected", "claudeMd"],
+      ["soul-reconciled", "system.profile_sync_reconciled", "soulMd"],
+      ["tools-new", "system.profile_sync_rejected", "toolsMd"],
+      ["claude-reconciled", "system.profile_sync_reconciled", "claudeMd"],
+      ["soul-rejected", "system.profile_sync_rejected", "soulMd"],
+    ];
+    for (const [key, event, field] of seed) {
+      const { body } = await post("/api/events", {
+        category: "system",
+        event,
+        status: event.endsWith("rejected") ? "error" : "ok",
+        source: "api",
+        agentId: AGENT,
+        data: { field, diskSize: 30_000, dbSize: 19_000, budget: 20_000, delta: 11_000 },
+      });
+      ids[key] = (body.event as { id: string }).id;
+      // createdAt has millisecond precision: keep the seed strictly ordered.
+      await Bun.sleep(5);
+    }
+    await post("/api/events", {
+      category: "system",
+      event: "system.profile_sync_conflict",
+      source: "api",
+      agentId: AGENT,
+      data: { field: "toolsMd" },
+    });
+  });
+
+  test("returns the newest event per (event, data.field) and confirms the mode", async () => {
+    const { status, body } = await get(
+      `/api/events?events=system.profile_sync_rejected,system.profile_sync_reconciled&dataFields=soulMd,claudeMd,toolsMd,identityMd&agentId=${AGENT}&latestPerDataField=true`,
+    );
+    expect(status).toBe(200);
+    expect(body.latestPerDataField).toBe(true);
+    const returned = (body.events as { id: string }[]).map((event) => event.id);
+    expect(returned).toEqual([
+      ids["soul-rejected"],
+      ids["claude-reconciled"],
+      ids["tools-new"],
+      ids["soul-reconciled"],
+      ids["claude-rejected"],
+    ]);
+  });
+
+  test("a single-event request keeps today's response shape", async () => {
+    const { status, body } = await get(
+      `/api/events?event=system.profile_sync_rejected&agentId=${AGENT}&dataField=toolsMd&limit=1`,
+    );
+    expect(status).toBe(200);
+    expect(Object.keys(body)).toEqual(["events"]);
+    expect((body.events as { id: string }[]).map((event) => event.id)).toEqual([ids["tools-new"]]);
+  });
+
+  test("rejects an unknown name in events", async () => {
+    const { status } = await get("/api/events?events=system.profile_sync_rejected,not.an.event");
+    expect(status).toBe(400);
+  });
+
+  test("rejects latestPerDataField without dataFields", async () => {
+    const { status } = await get(
+      "/api/events?events=system.profile_sync_rejected&latestPerDataField=true",
+    );
+    expect(status).toBe(400);
+  });
+
+  test("the profile-sync banner is identical through one batched call and 8 lookups", async () => {
+    const config = { apiUrl: BASE, apiKey: TEST_API_KEY, agentId: AGENT };
+    const eventRequests: string[] = [];
+    const recording = (async (input: string | URL | Request, init?: RequestInit) => {
+      const url = new URL(String(input));
+      if (url.pathname === "/api/events") eventRequests.push(url.search);
+      return fetch(input, init);
+    }) as typeof fetch;
+    // Simulates an API that predates latestPerDataField: drop the confirmation.
+    const legacy = (async (input: string | URL | Request, init?: RequestInit) => {
+      const response = await recording(input, init);
+      if (!new URL(String(input)).searchParams.has("latestPerDataField")) return response;
+      const { latestPerDataField: _dropped, ...rest } = await response.json();
+      return new Response(JSON.stringify(rest), { status: response.status });
+    }) as typeof fetch;
+
+    const batched = await fetchProfileSyncRejectionBanner(config, recording);
+    const batchedCalls = eventRequests.length;
+    eventRequests.length = 0;
+    const perField = await fetchProfileSyncRejectionBanner(config, legacy);
+
+    expect(batchedCalls).toBe(1);
+    expect(eventRequests).toHaveLength(9);
+    expect(batched).toContain(ids["tools-new"] ?? "missing");
+    expect(batched).toContain(ids["soul-rejected"] ?? "missing");
+    expect(batched).not.toContain(ids["claude-rejected"] ?? "missing");
+    expect(batched).toBe(perField);
+  });
+});
+
 describe("GET /api/events/counts", () => {
   test("returns counts grouped by event name", async () => {
     const { status, body } = await get("/api/events/counts");

package/src/tests/extensions-catalog.test.ts

@@ -32,23 +32,28 @@ afterEach(async () => {
 });
 
 describe("predefined extension catalog", () => {
-  test("every bundled entry passes the manifest schema and bundle validation", async () => {
-    const catalog = getExtensionCatalog();
-    expect(Object.keys(catalog).sort()).toEqual([
-      "notify-on-complete",
-      "require-ticket-ref",
-      "require-verification-note",
-      "task-digest",
-    ]);
-    for (const [name, entry] of Object.entries(catalog)) {
-      expect(entry.manifest.name).toBe(name);
-      expect(ExtensionManifestSchema.safeParse(entry.manifest).success).toBe(true);
-      const result = await validateBundle({ manifest: entry.manifest, files: entry.files });
-      expect(result).toMatchObject({ ok: true });
-    }
-    expect(getCatalogEntry("task-digest")?.manifestFile).toBe("manifest.yaml");
-    expect(getCatalogEntry("toString")).toBeNull();
-  });
+  test(
+    "every bundled entry passes the manifest schema and bundle validation",
+    async () => {
+      const catalog = getExtensionCatalog();
+      expect(Object.keys(catalog).sort()).toEqual([
+        "github-sender-allowlist",
+        "notify-on-complete",
+        "require-ticket-ref",
+        "require-verification-note",
+        "task-digest",
+      ]);
+      for (const [name, entry] of Object.entries(catalog)) {
+        expect(entry.manifest.name).toBe(name);
+        expect(ExtensionManifestSchema.safeParse(entry.manifest).success).toBe(true);
+        const result = await validateBundle({ manifest: entry.manifest, files: entry.files });
+        expect(result).toMatchObject({ ok: true });
+      }
+      expect(getCatalogEntry("task-digest")?.manifestFile).toBe("manifest.yaml");
+      expect(getCatalogEntry("toString")).toBeNull();
+    },
+    { timeout: 15_000 },
+  );
 
   test("the generator reads YAML and JSON templates and their referenced files", async () => {
     const dir = await templatesDir({

package/src/tests/extensions-pre-task.test.ts

@@ -20,6 +20,7 @@ import {
 import * as dbClient from "../be/db-client";
 import type { InstallExtensionArgs as ExtensionInstallBody } from "../be/extensions/db";
 import { installExtension, listExtensionRuns } from "../be/extensions/db";
+import { getCatalogEntry } from "../extensions/catalog";
 import { disableExtension, enableExtension, stopExtensionRuntime } from "../extensions/lifecycle";
 import { handleTasks } from "../http/tasks";
 import { dispatchScheduleTarget } from "../scheduler/scheduler";
@@ -168,6 +169,112 @@ describe("extension task boundaries", () => {
     expect(retried.status).toBe(201);
   });
 
+  test("GitHub sender allowlist separates internal and external senders", async () => {
+    const template = getCatalogEntry("github-sender-allowlist");
+    if (!template) throw new Error("github-sender-allowlist is missing from the catalog");
+    const installed = await installExtension({
+      manifest: template.manifest,
+      files: template.files,
+      config: {
+        internal: ["tarasyarema", "harlequinetcie"],
+        external: ["fuvidani", "capchase-bot"],
+        reviewBots: ["review-bot"],
+      },
+    });
+    await enableExtension(installed.extension.id);
+
+    const createFromGitHub = (
+      description: string,
+      vcsAuthor: string,
+      taskType: string,
+      vcsUrl: string,
+      source: "github" | "api" = "github",
+    ) =>
+      createTaskWithSiblingAwareness(
+        description,
+        { source, vcsAuthor, taskType, vcsUrl },
+        { origin: "webhook" },
+      );
+
+    await createFromGitHub(
+      "internal sender issue",
+      "HARLEQUINETCIE",
+      "github-issue",
+      "https://github.com/acme/project/issues/1",
+    );
+    await createFromGitHub(
+      "internal sender review",
+      "tarasyarema",
+      "github-review",
+      "https://github.com/acme/project/pull/2",
+    );
+    await createFromGitHub(
+      "external sender PR comment",
+      "FuViDaNi",
+      "github-comment",
+      "https://github.com/acme/project/pull/2",
+    );
+    await createFromGitHub(
+      "external sender PR assignment",
+      "capchase-bot",
+      "github-pr",
+      "https://github.com/acme/project/pull/3",
+    );
+    await createFromGitHub(
+      "external sender PR review",
+      "fuvidani",
+      "github-review",
+      "https://github.com/acme/project/pull/4",
+    );
+
+    await expect(
+      createFromGitHub(
+        "external sender issue comment",
+        "fuvidani",
+        "github-comment",
+        "https://github.com/acme/project/issues/5",
+      ),
+    ).rejects.toThrow('GitHub sender "fuvidani" is blocked: external senders are allowed only');
+    await expect(
+      createFromGitHub(
+        "unknown sender issue",
+        "unknown-user",
+        "github-issue",
+        "https://github.com/acme/project/issues/6",
+      ),
+    ).rejects.toThrow('GitHub sender "unknown-user" is blocked: sender is not on the internal');
+
+    await expect(
+      createFromGitHub(
+        "unknown sender review",
+        "unknown-user",
+        "github-review",
+        "https://github.com/acme/project/pull/7",
+      ),
+    ).rejects.toThrow('GitHub sender "unknown-user" is blocked: sender is not on the internal');
+    await createFromGitHub(
+      "review bot review",
+      "REVIEW-BOT",
+      "github-review",
+      "https://github.com/acme/project/pull/8",
+    );
+    await expect(
+      createFromGitHub(
+        "review bot PR comment",
+        "review-bot",
+        "github-comment",
+        "https://github.com/acme/project/pull/9",
+      ),
+    ).rejects.toThrow('GitHub sender "review-bot" is blocked: review bots are allowed only');
+    await createFromGitHub(
+      "non-GitHub source",
+      "unknown-user",
+      "github-issue",
+      "https://github.com/acme/project/issues/10",
+      "api",
+    );
+  });
+
   test("scheduler and workflow executor provide their task creation origins", async () => {
     const extension = await installSource(
       "record-task-origin",

package/src/tests/fixtures/kibo-blocks-definition.json.txt

@@ -0,0 +1,105 @@
+{
+  "models": {
+    "deal": {
+      "columns": {
+        "title": { "kind": "string", "required": true },
+        "stage": { "kind": "enum", "enum": ["lead", "qualified", "won", "lost"], "default": "lead" },
+        "owner": { "kind": "string" },
+        "value": { "kind": "number" },
+        "closeDate": { "kind": "date" }
+      }
+    }
+  },
+  "queries": {
+    "deals": { "model": "deal", "sort": { "column": "createdAt", "dir": "desc" } },
+    "dealById": { "model": "deal", "filter": { "id": { "$param": "deal" } } }
+  },
+  "pages": {
+    "main": {
+      "params": { "deal": { "kind": "string" } },
+      "root": "root",
+      "elements": {
+        "root": {
+          "type": "Stack",
+          "props": { "gap": "lg" },
+          "children": ["board", "calendars", "activity", "dealDrawer"]
+        },
+        "board": {
+          "type": "Kanban",
+          "props": {
+            "data": { "$state": "/queries/deals/data" },
+            "loading": { "$state": "/queries/deals/loading" },
+            "columnField": "stage",
+            "columns": ["lead", "qualified", { "id": "won", "label": "Won" }, { "id": "lost", "label": "Lost" }],
+            "titleField": "title",
+            "cardFields": [
+              { "key": "owner", "label": "Owner" },
+              { "key": "value", "label": "Value", "kind": "number" }
+            ],
+            "onMove": [
+              {
+                "action": "app.mutate",
+                "params": {
+                  "model": "deal",
+                  "op": "update",
+                  "rowId": { "$row": "id" },
+                  "values": { "stage": { "$row": "stage" } }
+                }
+              }
+            ],
+            "onCardClick": [
+              { "action": "app.navigate", "params": { "page": "main", "params": { "deal": { "$row": "id" } } } }
+            ]
+          }
+        },
+        "calendars": { "type": "Grid", "props": { "columns": 2 }, "children": ["closeCalendar", "createdCalendar"] },
+        "closeCalendar": {
+          "type": "Calendar",
+          "props": {
+            "data": { "$state": "/queries/deals/data" },
+            "startField": "closeDate",
+            "titleField": "title",
+            "onSelect": [
+              { "action": "app.navigate", "params": { "page": "main", "params": { "deal": { "$row": "id" } } } }
+            ]
+          }
+        },
+        "createdCalendar": {
+          "type": "Calendar",
+          "props": {
+            "data": { "$state": "/queries/deals/data" },
+            "startField": "createdAt",
+            "endField": "closeDate",
+            "titleField": "title"
+          }
+        },
+        "activity": {
+          "type": "ContributionGraph",
+          "props": {
+            "data": { "$state": "/queries/deals/data" },
+            "dateField": "createdAt",
+            "countField": "value",
+            "days": 180
+          }
+        },
+        "dealDrawer": {
+          "type": "Drawer",
+          "props": { "param": "deal", "title": "Deal" },
+          "children": ["dealDetail"]
+        },
+        "dealDetail": {
+          "type": "DetailList",
+          "props": {
+            "data": { "$state": "/queries/dealById/data/0" },
+            "fields": [
+              { "key": "title" },
+              { "key": "stage", "kind": "badge" },
+              { "key": "closeDate", "kind": "date" }
+            ]
+          }
+        }
+      }
+    }
+  },
+  "defaultPage": "main"
+}