@desplega.ai/agent-swarm 1.159.0 → 1.161.0

package/dist/{index-ttpbhnjg.js → index-1asbaj62.js}

@@ -20,58 +20,60 @@ import {
   stopWaitPoller,
   subscribeWaitToBus,
   validateTemplateVariables
-} from "./cli-79aq9cgb.js";
-import"./cli-0z2v4nhw.js";
-import"./cli-cpvsaqsw.js";
+} from "./cli-0383bp7f.js";
+import"./cli-cat6h73s.js";
+import"./cli-w0bwte75.js";
 import"./cli-re8z5p8p.js";
-import"./cli-jsp14b6c.js";
-import"./cli-z9x0sh1t.js";
-import"./cli-9yg65c1j.js";
-import"./cli-cygyqj3b.js";
-import"./cli-m4excttz.js";
-import"./cli-0n2e4x49.js";
+import"./cli-3zc55ctx.js";
 import {
   findEntryNodes,
   getSuccessors
-} from "./cli-fjtp3463.js";
+} from "./cli-1er0rhz8.js";
 import"./cli-epan13p1.js";
 import"./cli-y89t4nca.js";
 import"./cli-f14fvzag.js";
-import"./cli-rfezr056.js";
-import"./cli-vhjwh6cz.js";
+import"./cli-sqm3r5ps.js";
+import"./cli-yy6dew39.js";
 import"./cli-3dpj7atn.js";
-import"./cli-gzyh0j0g.js";
+import"./cli-2x0e561b.js";
+import"./cli-ee8bc46j.js";
 import"./cli-rb9m6rpe.js";
-import"./cli-rykfmgwg.js";
-import"./cli-vwbbaecp.js";
-import"./cli-qv4jv8bx.js";
+import"./cli-jsp14b6c.js";
+import"./cli-7119ja3w.js";
+import"./cli-hgmnf38m.js";
+import"./cli-we0q7t0e.js";
+import"./cli-tsk3nz8a.js";
+import"./cli-ecfxwnyb.js";
 import"./cli-fad8m16k.js";
-import"./cli-kc3dp84d.js";
-import"./cli-10ym38qc.js";
+import"./cli-d56tgd45.js";
+import"./cli-hn04t9db.js";
 import"./cli-bsakbbkm.js";
+import"./cli-trc24wk2.js";
 import"./cli-51tf7ac3.js";
-import"./cli-wgjx0q33.js";
+import"./cli-phfg8vy8.js";
 import"./cli-q51yprfq.js";
 import"./cli-3er6gcsn.js";
 import"./cli-2658f6at.js";
 import"./cli-yatxqynm.js";
-import"./cli-g9df2m37.js";
-import"./cli-e4xnc0qp.js";
-import"./cli-ardpzhjm.js";
-import"./cli-n7h1kqpf.js";
+import"./cli-1cz0c18q.js";
+import"./cli-3qhyh31j.js";
+import"./cli-akfj32vj.js";
+import"./cli-yrg7c73k.js";
 import {
   interpolate
-} from "./cli-rgjprct3.js";
+} from "./cli-ptr8h7kp.js";
+import"./cli-xk79303e.js";
+import"./cli-n7h1kqpf.js";
+import"./cli-ywybs5as.js";
 import"./cli-dv6cdjs2.js";
-import"./cli-cqt19wg6.js";
-import"./cli-19jenss3.js";
-import"./cli-de1396j2.js";
+import"./cli-1a2j50m0.js";
+import"./cli-f9w1semm.js";
 import"./cli-ej6gbxfb.js";
-import"./cli-7zttzetj.js";
+import"./cli-jyy6pm2f.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-48527fpw.js";
-import"./cli-r2ap2czm.js";
+import"./cli-a8c82p2t.js";
+import"./cli-nexqx4ve.js";
 import"./cli-13hw4z91.js";
 import"./cli-btbzvq95.js";
 import"./cli-1m2e086m.js";

package/dist/{index-cd151qkq.js → index-45evq4ee.js}

@@ -4,53 +4,55 @@ import {
   runScheduleNow,
   startScheduler,
   stopScheduler
-} from "./cli-79aq9cgb.js";
-import"./cli-0z2v4nhw.js";
-import"./cli-cpvsaqsw.js";
+} from "./cli-0383bp7f.js";
+import"./cli-cat6h73s.js";
+import"./cli-w0bwte75.js";
 import"./cli-re8z5p8p.js";
-import"./cli-jsp14b6c.js";
-import"./cli-z9x0sh1t.js";
-import"./cli-9yg65c1j.js";
-import"./cli-cygyqj3b.js";
-import"./cli-m4excttz.js";
-import"./cli-0n2e4x49.js";
-import"./cli-fjtp3463.js";
+import"./cli-3zc55ctx.js";
+import"./cli-1er0rhz8.js";
 import"./cli-epan13p1.js";
 import"./cli-y89t4nca.js";
 import"./cli-f14fvzag.js";
-import"./cli-rfezr056.js";
-import"./cli-vhjwh6cz.js";
+import"./cli-sqm3r5ps.js";
+import"./cli-yy6dew39.js";
 import"./cli-3dpj7atn.js";
-import"./cli-gzyh0j0g.js";
+import"./cli-2x0e561b.js";
+import"./cli-ee8bc46j.js";
 import"./cli-rb9m6rpe.js";
-import"./cli-rykfmgwg.js";
-import"./cli-vwbbaecp.js";
-import"./cli-qv4jv8bx.js";
+import"./cli-jsp14b6c.js";
+import"./cli-7119ja3w.js";
+import"./cli-hgmnf38m.js";
+import"./cli-we0q7t0e.js";
+import"./cli-tsk3nz8a.js";
+import"./cli-ecfxwnyb.js";
 import"./cli-fad8m16k.js";
-import"./cli-kc3dp84d.js";
-import"./cli-10ym38qc.js";
+import"./cli-d56tgd45.js";
+import"./cli-hn04t9db.js";
 import"./cli-bsakbbkm.js";
+import"./cli-trc24wk2.js";
 import"./cli-51tf7ac3.js";
-import"./cli-wgjx0q33.js";
+import"./cli-phfg8vy8.js";
 import"./cli-q51yprfq.js";
 import"./cli-3er6gcsn.js";
 import"./cli-2658f6at.js";
 import"./cli-yatxqynm.js";
-import"./cli-g9df2m37.js";
-import"./cli-e4xnc0qp.js";
-import"./cli-ardpzhjm.js";
+import"./cli-1cz0c18q.js";
+import"./cli-3qhyh31j.js";
+import"./cli-akfj32vj.js";
+import"./cli-yrg7c73k.js";
+import"./cli-ptr8h7kp.js";
+import"./cli-xk79303e.js";
 import"./cli-n7h1kqpf.js";
-import"./cli-rgjprct3.js";
+import"./cli-ywybs5as.js";
 import"./cli-dv6cdjs2.js";
-import"./cli-cqt19wg6.js";
-import"./cli-19jenss3.js";
-import"./cli-de1396j2.js";
+import"./cli-1a2j50m0.js";
+import"./cli-f9w1semm.js";
 import"./cli-ej6gbxfb.js";
-import"./cli-7zttzetj.js";
+import"./cli-jyy6pm2f.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-48527fpw.js";
-import"./cli-r2ap2czm.js";
+import"./cli-a8c82p2t.js";
+import"./cli-nexqx4ve.js";
 import"./cli-13hw4z91.js";
 import"./cli-btbzvq95.js";
 import"./cli-1m2e086m.js";

package/dist/{index-k661dzzr.js → index-9rxdvj6w.js}

@@ -4,54 +4,56 @@ import {
   runRebootSweep,
   startHeartbeat,
   stopHeartbeat
-} from "./cli-20035trh.js";
-import"./cli-79aq9cgb.js";
-import"./cli-0z2v4nhw.js";
-import"./cli-cpvsaqsw.js";
+} from "./cli-17xpf7cm.js";
+import"./cli-0383bp7f.js";
+import"./cli-cat6h73s.js";
+import"./cli-w0bwte75.js";
 import"./cli-re8z5p8p.js";
-import"./cli-jsp14b6c.js";
-import"./cli-z9x0sh1t.js";
-import"./cli-9yg65c1j.js";
-import"./cli-cygyqj3b.js";
-import"./cli-m4excttz.js";
-import"./cli-0n2e4x49.js";
-import"./cli-fjtp3463.js";
+import"./cli-3zc55ctx.js";
+import"./cli-1er0rhz8.js";
 import"./cli-epan13p1.js";
 import"./cli-y89t4nca.js";
 import"./cli-f14fvzag.js";
-import"./cli-rfezr056.js";
-import"./cli-vhjwh6cz.js";
+import"./cli-sqm3r5ps.js";
+import"./cli-yy6dew39.js";
 import"./cli-3dpj7atn.js";
-import"./cli-gzyh0j0g.js";
+import"./cli-2x0e561b.js";
+import"./cli-ee8bc46j.js";
 import"./cli-rb9m6rpe.js";
-import"./cli-rykfmgwg.js";
-import"./cli-vwbbaecp.js";
-import"./cli-qv4jv8bx.js";
+import"./cli-jsp14b6c.js";
+import"./cli-7119ja3w.js";
+import"./cli-hgmnf38m.js";
+import"./cli-we0q7t0e.js";
+import"./cli-tsk3nz8a.js";
+import"./cli-ecfxwnyb.js";
 import"./cli-fad8m16k.js";
-import"./cli-kc3dp84d.js";
-import"./cli-10ym38qc.js";
+import"./cli-d56tgd45.js";
+import"./cli-hn04t9db.js";
 import"./cli-bsakbbkm.js";
+import"./cli-trc24wk2.js";
 import"./cli-51tf7ac3.js";
-import"./cli-wgjx0q33.js";
+import"./cli-phfg8vy8.js";
 import"./cli-q51yprfq.js";
 import"./cli-3er6gcsn.js";
 import"./cli-2658f6at.js";
 import"./cli-yatxqynm.js";
-import"./cli-g9df2m37.js";
-import"./cli-e4xnc0qp.js";
-import"./cli-ardpzhjm.js";
+import"./cli-1cz0c18q.js";
+import"./cli-3qhyh31j.js";
+import"./cli-akfj32vj.js";
+import"./cli-yrg7c73k.js";
+import"./cli-ptr8h7kp.js";
+import"./cli-xk79303e.js";
 import"./cli-n7h1kqpf.js";
-import"./cli-rgjprct3.js";
+import"./cli-ywybs5as.js";
 import"./cli-dv6cdjs2.js";
-import"./cli-cqt19wg6.js";
-import"./cli-19jenss3.js";
-import"./cli-de1396j2.js";
+import"./cli-1a2j50m0.js";
+import"./cli-f9w1semm.js";
 import"./cli-ej6gbxfb.js";
-import"./cli-7zttzetj.js";
+import"./cli-jyy6pm2f.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-48527fpw.js";
-import"./cli-r2ap2czm.js";
+import"./cli-a8c82p2t.js";
+import"./cli-nexqx4ve.js";
 import"./cli-13hw4z91.js";
 import"./cli-btbzvq95.js";
 import"./cli-1m2e086m.js";

package/dist/index-k4nj18qs.js

@@ -0,0 +1,31 @@
+import {
+  getEmbeddingProvider,
+  getMemoryStore,
+  resetEmbeddingProvider
+} from "./cli-d56tgd45.js";
+import"./cli-hn04t9db.js";
+import"./cli-2658f6at.js";
+import"./cli-1cz0c18q.js";
+import"./cli-3qhyh31j.js";
+import"./cli-akfj32vj.js";
+import"./cli-yrg7c73k.js";
+import"./cli-ptr8h7kp.js";
+import"./cli-xk79303e.js";
+import"./cli-n7h1kqpf.js";
+import"./cli-ywybs5as.js";
+import"./cli-dv6cdjs2.js";
+import"./cli-1a2j50m0.js";
+import"./cli-f9w1semm.js";
+import"./cli-ej6gbxfb.js";
+import"./cli-jyy6pm2f.js";
+import"./cli-sd0mxa3c.js";
+import"./cli-w5e1d1vv.js";
+import"./cli-a8c82p2t.js";
+import"./cli-nexqx4ve.js";
+import"./cli-zf8jjwex.js";
+import"./cli-bc05qbss.js";
+export {
+  getEmbeddingProvider,
+  getMemoryStore,
+  resetEmbeddingProvider
+};

package/dist/{index-5sz16ksh.js → index-xmevk2b9.js}

@@ -3,7 +3,7 @@ import {
 } from "./cli-ep19k3mb.js";
 import {
   agentFsProvisionSeeder
-} from "./cli-mzkqpxee.js";
+} from "./cli-798vkbks.js";
 import {
   extractArgsJsonSchema,
   extractScriptSignature,
@@ -13,22 +13,23 @@ import {
   upsertScriptByName,
   validateDefinition,
   validateScriptImports
-} from "./cli-fjtp3463.js";
+} from "./cli-1er0rhz8.js";
 import"./cli-epan13p1.js";
 import"./cli-y89t4nca.js";
 import"./cli-f14fvzag.js";
-import"./cli-rfezr056.js";
-import"./cli-vhjwh6cz.js";
+import"./cli-sqm3r5ps.js";
+import"./cli-yy6dew39.js";
 import"./cli-3dpj7atn.js";
-import"./cli-gzyh0j0g.js";
+import"./cli-2x0e561b.js";
+import"./cli-ee8bc46j.js";
 import"./cli-rb9m6rpe.js";
-import"./cli-rykfmgwg.js";
-import"./cli-vwbbaecp.js";
-import"./cli-qv4jv8bx.js";
-import"./cli-kc3dp84d.js";
-import"./cli-10ym38qc.js";
+import"./cli-7119ja3w.js";
+import"./cli-hgmnf38m.js";
+import"./cli-d56tgd45.js";
+import"./cli-hn04t9db.js";
 import"./cli-bsakbbkm.js";
-import"./cli-wgjx0q33.js";
+import"./cli-trc24wk2.js";
+import"./cli-phfg8vy8.js";
 import"./cli-q51yprfq.js";
 import"./cli-3er6gcsn.js";
 import"./cli-2658f6at.js";
@@ -49,21 +50,23 @@ import {
   updateSkill,
   updateWorkflow,
   upsertSkillFiles
-} from "./cli-g9df2m37.js";
-import"./cli-e4xnc0qp.js";
-import"./cli-ardpzhjm.js";
+} from "./cli-1cz0c18q.js";
+import"./cli-3qhyh31j.js";
+import"./cli-akfj32vj.js";
+import"./cli-yrg7c73k.js";
+import"./cli-ptr8h7kp.js";
+import"./cli-xk79303e.js";
 import"./cli-n7h1kqpf.js";
-import"./cli-rgjprct3.js";
+import"./cli-ywybs5as.js";
 import"./cli-dv6cdjs2.js";
-import"./cli-cqt19wg6.js";
-import"./cli-19jenss3.js";
-import"./cli-de1396j2.js";
+import"./cli-1a2j50m0.js";
+import"./cli-f9w1semm.js";
 import"./cli-ej6gbxfb.js";
-import"./cli-7zttzetj.js";
+import"./cli-jyy6pm2f.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-48527fpw.js";
-import"./cli-r2ap2czm.js";
+import"./cli-a8c82p2t.js";
+import"./cli-nexqx4ve.js";
 import"./cli-13hw4z91.js";
 import"./cli-btbzvq95.js";
 import"./cli-1m2e086m.js";
@@ -5185,32 +5188,32 @@ export default async function taskFailureAudit(args: any, ctx: any) {
   const tasks: any = payload && Array.isArray(payload.tasks) ? payload.tasks : [];
 
   const failureReasons = new Map<string, string>();
-  if (groupBy === "reason") {
-    const tasksNeedingReason = tasks.filter((task: any) => !task.failureReason && task.id);
-    const taskIds = tasksNeedingReason.map((task: any) => task.id as string);
-    if (taskIds.length > 0) {
-      const placeholders = taskIds.map(() => "?").join(", ");
-      const reasonResult: any = await ctx.swarm.db_query({
-        sql: \`SELECT id, failureReason FROM agent_tasks WHERE id IN (\${placeholders})\`,
-        params: taskIds,
-      });
-      const reasonPayload: any = reasonResult?.data ?? reasonResult;
-      if (
-        reasonResult?.success === false ||
-        reasonPayload?.success === false ||
-        reasonPayload?.error
-      ) {
-        return { error: "failure reason projection failed with status " + reasonResult?.status };
-      }
-      if (reasonPayload?.truncated) {
-        return {
-          error: \`failure reason projection truncated (\${reasonPayload.rows?.length ?? 0} of \${reasonPayload.total ?? "unknown"} rows)\`,
-        };
-      }
-      for (const row of rowsToObjects(reasonResult)) {
-        if (typeof row?.id === "string" && typeof row.failureReason === "string") {
-          failureReasons.set(row.id, row.failureReason);
-        }
+  // Projected for every groupBy mode: task_list omits failureReason, and
+  // schedule/agent groups still need a populated sample.
+  const tasksNeedingReason = tasks.filter((task: any) => !task.failureReason && task.id);
+  const taskIds = tasksNeedingReason.map((task: any) => task.id as string);
+  if (taskIds.length > 0) {
+    const placeholders = taskIds.map(() => "?").join(", ");
+    const reasonResult: any = await ctx.swarm.db_query({
+      sql: \`SELECT id, failureReason FROM agent_tasks WHERE id IN (\${placeholders})\`,
+      params: taskIds,
+    });
+    const reasonPayload: any = reasonResult?.data ?? reasonResult;
+    if (
+      reasonResult?.success === false ||
+      reasonPayload?.success === false ||
+      reasonPayload?.error
+    ) {
+      return { error: "failure reason projection failed with status " + reasonResult?.status };
+    }
+    if (reasonPayload?.truncated) {
+      return {
+        error: \`failure reason projection truncated (\${reasonPayload.rows?.length ?? 0} of \${reasonPayload.total ?? "unknown"} rows)\`,
+      };
+    }
+    for (const row of rowsToObjects(reasonResult)) {
+      if (typeof row?.id === "string" && typeof row.failureReason === "string") {
+        failureReasons.set(row.id, row.failureReason);
       }
     }
   }
@@ -8546,10 +8549,10 @@ The config file lives at \`~/.agentic-learnings.json\`:
 `;
 
 // templates/skills/memory/config.json
-var config_default25 = '{\n  "kind": "skill",\n  "name": "memory",\n  "displayName": "Memory",\n  "slug": "memory",\n  "title": "Memory",\n  "description": "Remember, recall, learning, memory: how swarm memory works and how to store, search, edit, rate, and delete memories with `memory-store`, `memory-search`, `memory-get`, `memory-edit`, `memory_rate`, and `memory-delete`, plus lead promotion with `inject-learning`. Use before you store, edit, or delete a memory.",\n  "version": "1.0.0",\n  "category": "skills",\n  "placeholders": [],\n  "runAllSeedersCandidate": true,\n  "systemDefault": true,\n  "tags": ["memory", "recall", "learning"]\n}\n';
+var config_default25 = '{\n  "kind": "skill",\n  "name": "memory",\n  "displayName": "Memory",\n  "slug": "memory",\n  "title": "Memory",\n  "description": "Remember, recall, learning, memory: how swarm memory works and how to store, search, edit, rate, and delete memories with `memory-store`, `memory-search`, `memory-get`, `memory-edit`, `memory_rate`, and `memory-delete`, plus logical paths (`key`, `newKey`, `keyPrefix`, the `/longterm` roots and the lead-only ones) and lead promotion with `inject-learning`. Use before you store, edit, or delete a memory.",\n  "version": "1.1.0",\n  "category": "skills",\n  "placeholders": [],\n  "runAllSeedersCandidate": true,\n  "systemDefault": true,\n  "tags": ["memory", "recall", "learning"]\n}\n';
 
 // templates/skills/memory/content.md
-var content_default25 = '# Memory\n\nSwarm memory is a store of short texts with embeddings, searchable by meaning and by keyword. Recall is automatic: the runner puts the best matches for your task in the task message under "Relevant Past Knowledge". Everything else is a tool call.\n\n## What is stored without you\n\n| Source | When | Scope |\n|---|---|---|\n| `task_completion` | `store-progress` with status `completed` or `failed` | `agent`, or `swarm` for research tasks and tasks tagged `knowledge` or `shared` |\n| `session_summary` | your session ends | `agent` |\n| `file_index` | a file written under `/workspace/personal/memory/` or `/workspace/shared/memory/<agentId>/` on a harness with the file hook (claude, pi, opencode) | by path |\n\nAutomatic tasks (schedules, heartbeat, monitors) skip the `task_completion` write unless `store-progress` gets `persistMemory: true`.\n\nPrefer `memory-store` over memory files. It works on every harness, including the remote ones.\n\n## Tools\n\n| Tool | Use |\n|---|---|\n| `memory-store` | create a memory: `content`, `name`, `scope`, optional `tags`, `taskId`, `intent` |\n| `memory-search` | find memories: `query`, `intent` (required, why you search), `scope` (`all`, `agent`, `swarm`), `limit` |\n| `memory-get` | the full content of one memory by ID |\n| `memory-edit` | change a memory in place: mode `replace` (whole content) or `exact` (one unique substring), `intent` required |\n| `memory-delete` | remove a memory by ID |\n| `memory_rate` | mark a memory you used in this task as useful or misleading |\n| `inject-learning` | lead only: push a learning into a worker\'s memory at swarm scope |\n\nSeed scripts (`script-run` with `name` and `args`):\n\n- `task-context-gathering` `{ taskId, queries: [...] }`: the task plus a deduplicated multi-query recall in one call.\n- `smart-recall` `{ queries: [...] }`: multi-query recall without the task.\n- `memory-dedup-check` `{ text, threshold? }`: near-duplicates of a candidate memory, default threshold 0.85.\n\n## What makes a good memory\n\n- One fact per memory: a fix, a pattern, a gotcha, a preference of a person, a fact about a repo or a host.\n- The context it applies to: repo, host, tool, version.\n- The evidence: what you saw, where.\n- A searchable `name`: "Linear API rejects issue updates without teamId", not "notes".\n- Under 2,000 characters stores as one chunk. Longer content splits on headings, one memory per chunk.\n\nSkip what a tool returns on demand (paths, tool lists, task status), what the repo already records (README, CLAUDE.md, git history), and what only mattered for this one task.\n\nA memory must not contain a token, password, key, or connection string. Remove the value and keep the reference ("the Linear token lives in config key LINEAR_API_KEY").\n\n## Scope\n\n- `agent` (default): only you recall it. Your own setup, your working notes, your mistakes.\n- `swarm`: every agent recalls it. Facts about shared repos, hosts, people, and processes. Choose `swarm` when a second agent would hit the same thing.\n\n## Before you store\n\n1. Run `memory-dedup-check` with the text, or `memory-search` with one or two queries and `intent: "dedup before store"`.\n2. A near-duplicate exists: `memory-edit` it. Mode `replace` for a rewrite, mode `exact` for a one-line correction. Say why in `intent`.\n3. Nothing close exists: `memory-store`.\n\n## Triage\n\n- A memory is wrong: `memory-edit` with the correction.\n- A memory is stale and nobody needs it: `memory-delete`.\n- A recalled memory helped or misled you: `memory_rate` with `useful` true or false and a short `note`. The call needs a task context and counts once per memory per task. Ratings move the memory up or down in future searches.\n\n## Lead: promote a learning\n\nWhen a worker\'s output or failure holds a lesson other workers need, call `inject-learning` with the worker\'s `agentId`, the `learning`, and a `category`: `mistake-pattern`, `best-practice`, `codebase-knowledge`, or `preference`. It lands at swarm scope and every agent recalls it.\n';
+var content_default25 = '# Memory\n\nSwarm memory is a store of short texts with embeddings, searchable by meaning and by keyword. Recall is automatic: the runner puts the best matches for your task in the task message under "Relevant Past Knowledge". Everything else is a tool call.\n\n## What is stored without you\n\n| Source | When | Scope |\n|---|---|---|\n| `task_completion` | `store-progress` with status `completed` or `failed` | `agent`, or `swarm` for research tasks and tasks tagged `knowledge` or `shared` |\n| `session_summary` | your session ends | `agent` |\n| `file_index` | a file written under `/workspace/personal/memory/` or `/workspace/shared/memory/<agentId>/` on a harness with the file hook (claude, pi, opencode) | by path |\n\nAutomatic tasks (schedules, heartbeat, monitors) skip the `task_completion` write unless `store-progress` gets `persistMemory: true`.\n\nPrefer `memory-store` over memory files. It works on every harness, including the remote ones.\n\n## Tools\n\n| Tool | Use |\n|---|---|\n| `memory-store` | create a memory: `content`, `name`, `scope`, optional `tags`, `taskId`, `intent`, `key` (a logical path, see Logical paths) |\n| `memory-search` | find memories: `query`, `scope` (`all`, `agent`, `swarm`), `limit`, optional `intent` (why you search), `source`, `keyPrefix` (only memories whose key starts with it) |\n| `memory-get` | the full content of one memory by ID |\n| `memory-edit` | change a memory in place: mode `replace` (whole content) or `exact` (one unique substring), `intent` required. `newKey` alone moves it to another logical path |\n| `memory-delete` | remove a memory by ID |\n| `memory_rate` | mark a memory you used in this task as useful or misleading |\n| `inject-learning` | lead only: push a learning into a worker\'s memory at swarm scope |\n\nSeed scripts (`script-run` with `name` and `args`):\n\n- `task-context-gathering` `{ taskId, queries: [...] }`: the task plus a deduplicated multi-query recall in one call.\n- `smart-recall` `{ queries: [...] }`: multi-query recall without the task.\n- `memory-dedup-check` `{ text, threshold? }`: near-duplicates of a candidate memory, default threshold 0.85.\n\n## What makes a good memory\n\n- One fact per memory: a fix, a pattern, a gotcha, a preference of a person, a fact about a repo or a host.\n- The context it applies to: repo, host, tool, version.\n- The evidence: what you saw, where.\n- A searchable `name`: "Linear API rejects issue updates without teamId", not "notes".\n- Under 2,000 characters stores as one chunk. Longer content splits on headings, one memory per chunk.\n\nSkip what a tool returns on demand (paths, tool lists, task status), what the repo already records (README, CLAUDE.md, git history), and what only mattered for this one task.\n\nA memory must not contain a token, password, key, or connection string. Remove the value and keep the reference ("the Linear token lives in config key LINEAR_API_KEY").\n\n## Scope\n\n- `agent` (default): only you recall it. Your own setup, your working notes, your mistakes.\n- `swarm`: every agent recalls it. Facts about shared repos, hosts, people, and processes. Choose `swarm` when a second agent would hit the same thing.\n\n## Logical paths (`key`)\n\nEvery memory has a `key`. By default it is an auto key (`<scope>/<source>/<id>`, or the file path for `file_index`), and the memory is **inbox material**: it keeps the lifecycle of its `source` and expires. Give it a path under `/longterm` and it becomes curated memory: findable by folder, ranked higher, and kept.\n\n`name` is a title. `key` is the address. Use a key only for what should outlive the task: a durable fact, a decision, a person or customer. Leave working notes and task results without one; expiring is the right outcome for them.\n\n### The `/longterm` roots\n\nThe list is closed. A key under `/longterm` whose second segment is not in it is refused, and the error lists the roots.\n\n| Root | Holds | Rank weight | Who may write |\n|---|---|---|---|\n| `/longterm/company-story` | what the company is and does | 1.4 | lead only |\n| `/longterm/entities/people/<slug>`, `/longterm/entities/customers/<slug>` | one doc per person or customer | 1.3 | lead only |\n| `/longterm/facts/<topic>/<slug>` | a durable fact about a repo, host, tool, or process | 1.2 | any agent |\n| `/longterm/decisions/<slug>` | a decision and why | 1.1 (0.3 with the tag `superseded`) | any agent |\n| `/longterm/workstreams/<slug>` | an ongoing effort | 1.0 | any agent |\n| `/longterm/timeline/<period>/<slug>` | dated events | 0.8 | lead only |\n\nAgents and repos are not entity types: agent profiles and `get-repos` own them, so `/longterm/entities/agents/...` is refused.\n\nKey shape: lowercase letters, digits, `-`, and `.` or `_` after the first segment; segments joined by `/`; starts with `/`; no trailing `/`; at most 200 characters. A key outside `/longterm` is not root-checked but must still have this shape.\n\n### Write, move, find\n\n```\nmemory-store key="/longterm/facts/swarm-runtime/sqlite-busy-retry" scope="swarm"\n  name="SQLite BUSY_SNAPSHOT needs BEGIN IMMEDIATE" content="..."\n\nmemory-edit memoryId="<id>" newKey="/longterm/decisions/sqlite-busy-retry" intent="promote the fact to a decision"\n\nmemory-search query="busy retry" keyPrefix="/longterm/facts/swarm-runtime/"\n```\n\n- `memory-store`: one key per owner and scope. A second memory under a key you already use fails: `memory-edit` that one. If you pass no `key` and the `name` starts with `/longterm/`, the name is the key, so you set one field. An invalid name of that form is refused, never stored under an auto key.\n- `memory-edit` `newKey`: pass it alone for a pure move. Every chunk of the document moves in one step. The ID, usefulness rating, access counts, and author stay. A key that is already taken is refused. Address the memory with `memoryId`, or with `key` plus `scope`.\n- `memory-search` `keyPrefix`: a literal, case-sensitive prefix, applied before the top results are cut, not after. End a folder with `/` (`/longterm/entities/`, not `/longterm/entities`) to stay inside it.\n\n### What a `/longterm` key changes\n\n`source` stays provenance: there is no `longterm` source. The key is the tier. A memory under `/longterm` follows a `manual` memory\'s lifecycle whatever its `source`:\n\n- It never expires. Storing under a `/longterm` key sets no expiry. Moving a memory in with `newKey` clears the expiry it had, on every chunk. Moving it back out does not restore one.\n- It has no recency decay, and its source-quality multiplier is 1.5.\n- Automated cleanup skips it.\n\nA memory under any other key keeps its `source` lifecycle: `task_completion` expires after 7 days, `session_summary` after 3, `file_index` after 30, `manual` never.\n\nRanking multiplies similarity by recency decay, access boost, source quality, **path weight** (the table above, by longest matching root; any other key weighs 1.0), and usefulness. Path weight is one factor: a weak match under `/longterm/company-story` does not beat a strong match elsewhere on weight alone.\n\n### Lead-only roots\n\nOnly the lead may write or move a key under `/longterm/company-story`, `/longterm/entities`, or `/longterm/timeline`. The check is the permission `memory.write.consolidated`. It applies to a `key`, to a `newKey`, to a `/longterm/` name, and to a `sourcePath` sent to `POST /api/memory/index`, so there is no side door. A worker that tries gets an error naming the lead-only paths. A worker puts durable knowledge under `/longterm/facts` or `/longterm/decisions`, or leaves the key off, and the lead consolidates the rest.\n\n## Before you store\n\n1. Run `memory-dedup-check` with the text, or `memory-search` with one or two queries and `intent: "dedup before store"`.\n2. A near-duplicate exists: `memory-edit` it. Mode `replace` for a rewrite, mode `exact` for a one-line correction. Say why in `intent`.\n3. Nothing close exists: `memory-store`. For a keyed memory, `memory-search` with `keyPrefix` set to the folder you will write into shows what is already there.\n\n## Triage\n\n- A memory is wrong: `memory-edit` with the correction.\n- A memory is stale and nobody needs it: `memory-delete`.\n- A recalled memory helped or misled you: `memory_rate` with `useful` true or false and a short `note`. The call needs a task context and counts once per memory per task. Ratings move the memory up or down in future searches.\n\n## Lead: promote a learning\n\nWhen a worker\'s output or failure holds a lesson other workers need, call `inject-learning` with the worker\'s `agentId`, the `learning`, and a `category`: `mistake-pattern`, `best-practice`, `codebase-knowledge`, or `preference`. It lands at swarm scope and every agent recalls it. It is stored as `manual`, so it never expires, but it takes no key: it has no path weight and `keyPrefix` does not find it. To file a learning by path, `memory-store` it with a `/longterm` key, or `memory-edit` it with `newKey`.\n';
 
 // templates/skills/one-shot/config.json
 var config_default26 = `{
@@ -10616,7 +10619,7 @@ var config_default41 = `{
   "displayName": "Swarm Extensions",
   "slug": "swarm-extensions",
   "title": "Swarm Extensions",
-  "description": "Write, install, and manage swarm extensions: TypeScript hook bundles that block, modify, or observe task creation, follow-ups, Slack routing, heartbeat remediation, and tool calls. Covers catalog-only install of predefined extensions (templates/extensions, YAML or JSON manifests) and the scripts, schedules, workflows and skills they ship, the hook contract, where to fetch swarm-extension.d.ts, the extension-catalog, extension-install and extension-list tools, config schemas, and the operator enable step.",
+  "description": "Write, install, and manage swarm extensions: TypeScript hook bundles that block, modify, or observe task creation, follow-ups, Slack routing, heartbeat remediation, and tool calls. Covers installing predefined catalog extensions (templates/extensions, YAML or JSON manifests) by name and, when EXTENSION_ALLOW_INLINE_INSTALL is on, installing an inline manifest plus files as a lead, plus the scripts, schedules, workflows and skills extensions ship, the hook contract, where to fetch swarm-extension.d.ts, the extension-catalog, extension-install and extension-list tools, config schemas, and the operator enable step.",
   "version": "1.0.0",
   "category": "skills",
   "placeholders": [],
@@ -10633,15 +10636,18 @@ An extension is a trusted TypeScript hook bundle that runs inside the swarm API
 
 Do not use an extension for work that one task, one script, or one schedule can do.
 
-## Install only from the catalog
+## Two ways to install
 
-Extensions install only from the predefined catalog in the repo (\`templates/extensions/<name>/\`). Inline bundles are rejected with \`inline_install_disabled\`. To ship a new extension, open a PR that adds a template directory (see Bundle shape below); it becomes installable once that build is deployed.
+- **Catalog** (always on): a predefined extension in the repo (\`templates/extensions/<name>/\`), installed by name. Any authenticated agent can do it. To ship a catalog extension, open a PR that adds a template directory (see Bundle shape below); it becomes installable once that build is deployed.
+- **Inline** (opt-in): a \`manifest\` plus a \`files\` map in the install request, with no PR and no deploy. It is off unless an operator sets \`EXTENSION_ALLOW_INLINE_INSTALL=true\` (dashboard Settings > Configuration > Security & access, or the API environment). With the flag off the install fails with \`inline_install_disabled\`. With it on, only a lead, operator, or dashboard user may send an inline bundle; a worker gets 403 and stays catalog-only. An inline bundle runs as code in the API process once enabled, so write it as carefully as a catalog one.
+
+Both paths run the same validation and both land disabled.
 
 ## Tools
 
 \`extension-catalog\`, \`extension-install\` and \`extension-list\`. They are deferred. Load them with your harness tool search before the first call.
 
-\`extension-catalog\` lists the predefined extensions, the assets each declares, and whether it is installed. \`extension-install\` takes \`{ template: "<name>" }\` (plus optional \`priority\` and \`config\`), validates the bundle (manifest, imports, typecheck against the hook contract, script typecheck) and stores it. Any authenticated agent, including a worker, can install. Your agent is recorded as its owner in \`createdByAgentId\`; \`extension-list\` exposes that field. Always send your \`X-Agent-ID\` when using REST so ownership is attributed to you.
+\`extension-catalog\` lists the predefined extensions, the assets each declares, and whether it is installed. \`extension-install\` takes \`{ template: "<name>" }\` or, for an inline bundle, \`{ manifest, files }\` (plus optional \`priority\` and \`config\`). \`template\` and \`manifest\`/\`files\` are mutually exclusive. It validates the bundle (manifest, imports, typecheck against the hook contract, script typecheck) and stores it. Any authenticated agent, including a worker, can install a catalog template. Your agent is recorded as its owner in \`createdByAgentId\`; \`extension-list\` exposes that field. Always send your \`X-Agent-ID\` when using REST so ownership is attributed to you.
 
 Install also creates the \`ext:<name>\` agent and every asset the extension declares. Scripts are live and callable right away (scripts have no enabled state). Schedules, workflows, and skills are created disabled. A disabled workflow ignores its triggers and refuses manual triggers.
 
@@ -10651,7 +10657,7 @@ Workers may install subsequent versions only for their own extensions, and PATCH
 
 A new install is disabled and inert. A lead, operator, or dashboard user must enable it with \`extension-enable\` or \`POST /api/extensions/{id}/enable\`. Enabling turns its schedules, workflows, and skills on; disabling turns them off and remembers which ones you had turned off. Workers cannot enable, disable, or activate versions. Report the extension name and the required activation step.
 
-Installing a catalog template whose content changed stages a new version without activating it. Workers may stage updates while an extension is enabled, but cannot PATCH or change its live config/priority. Ask a lead or operator to make those changes. \`EXTENSION_ALLOW_LEAD_ACTIVATION=false\` restricts activation to operators/dashboard users.
+Installing a template or inline bundle whose content changed stages a new version without activating it. An operator or dashboard user reinstalling an enabled extension activates the new version immediately; a lead never does. Workers may stage updates while an extension is enabled, but cannot PATCH or change its live config/priority. Ask a lead or operator to make those changes. \`EXTENSION_ALLOW_LEAD_ACTIVATION=false\` restricts activation to operators/dashboard users.
 
 Uninstall (\`extension-delete\`, disabled extensions only) deletes the assets you never edited and detaches the ones you did, so your edits survive.
 
@@ -10711,6 +10717,25 @@ A workflow file holds \`name\`, optional \`description\`, \`definition\`, and op
 
 A JSON manifest carries \`"$schema": "../manifest.schema.json"\` instead. After changing a template, run \`bun run build:extension-catalog\` and commit \`src/extensions/catalog.generated.json\`.
 
+### Inline bundle
+
+An inline install sends the same manifest as a JSON object, plus every file it references in \`files\`, keyed by bundle path:
+
+\`\`\`json
+{
+  "manifest": {
+    "name": "require-ticket-ref",
+    "description": "Blocks REST and MCP tasks that do not name a ticket",
+    "version": "1.0.0",
+    "runtime": "api",
+    "assets": { "hooks": "hooks.ts" }
+  },
+  "files": { "hooks.ts": "import { block, type SwarmExtension } from \\"swarm-extension\\";\\n..." }
+}
+\`\`\`
+
+\`files\` must hold \`assets.hooks\`, each script \`file\`, each workflow \`file\`, and for each skill \`dir\` its \`SKILL.md\` plus any \`files/**\`. A file the manifest does not reference is rejected. Naming rules (\`<name>-\` prefixes, schedule scripts declared in \`assets.scripts\`) are the same as for a template. To change an inline extension, send the full bundle again under the same name; it adds a new version.
+
 Rules for \`hooks.ts\`:
 
 - Import only from \`swarm-extension\`, \`zod\`, and \`stdlib\`. Relative imports, other packages, and dynamic imports are rejected.
@@ -10774,7 +10799,8 @@ export default extension;
 - Modifying fields the event does not allow. Read the \`*Modify\` type for that event.
 - Expecting the extension to run after install. Its hooks, schedules, workflows, and skills are off until a lead or operator enables it.
 - Expecting agents to see an extension skill after enable. Install it on each agent with \`skill-install\`.
-- Sending an inline \`manifest\`/\`files\` bundle. Install takes a catalog \`template\` name only.
+- Sending an inline \`manifest\`/\`files\` bundle as a worker, or without \`EXTENSION_ALLOW_INLINE_INSTALL\` on. Workers use a catalog \`template\`; with the flag off ask an operator to turn it on, or ship a catalog template.
+- Sending both \`template\` and \`manifest\`/\`files\`. Pick one.
 - Blocking tasks from every origin. Check \`event.origin\` so schedules, workflows, and follow-ups keep working unless you mean to block them.
 `;
 
@@ -12001,6 +12027,7 @@ Afterwards, a \`warnings\` entry on \`create-workflow\` or a patch tool means th
 - The output is \`{ model, answers, usage }\`, plus \`routing: { model }\` on \`laya\` (the checkpoint that answered). Read a field as \`<node-id>.answers.<question>.<field>\`, for example \`qualification.answers.risk.confidence\`. A \`noul\` answer is only \`{ type, noul }\` and has no confidence. A \`choice\` answer has \`choice\`, \`probabilities\`, and \`confidence\`. A \`score\` answer has \`score\`, \`legend\`, \`probabilities\`, and \`confidence\`.
 - A valid low-confidence answer is a success. To have a person review the uncertain ones, set \`humanReview\` on the node (below). To route on a threshold yourself, keep it in the next node: \`property-match\` (\`gt\`, \`lt\`) or \`code-match\`, with the uncertain band routed to \`human-in-the-loop\`. Do not invent a global threshold.
 - \`humanReview: { band: { min, max }, approvers, title?, timeout?, notifications? }\` sends an answer to a person when \`min <= confidence <= max\` (0 to 1, both ends inside). It raises a \`human-in-the-loop\` approval (same approvers, timeout, notifications, \`waiting\` run state), so use the same \`approvers\` shape. \`choice\` and \`score\` are tested on their \`confidence\` (on \`laya\` that is its \`answer_confidence\`, the top probability); a \`noul\` on \`max(noul, 1 - noul)\`. Any answer in the band makes the run wait. \`next\` must then be a port map: \`approved\` (required, every accepted answer), and optionally \`rejected\` and \`timeout\`; a string or list \`next\` is refused. The output stays \`{ model, answers, usage }\` on every path, plus \`review\` (\`status\`, and per question \`confidence\`, \`inBand\`, \`decidedBy\`). A person's answer replaces the model's in \`answers\`; \`probabilities\` and \`confidence\` stay the model's.
+- On \`laya\`, ask \`choice\` questions, not \`noul\`, until a \`noul\` question is checked against known inputs. On laya-server 0.1.0 a \`noul\` sentiment question returned close to 0 even for clearly positive text, while the same judgment as a \`choice\` answered correctly. This is how the model answered, not a node rule. After a run, read \`<node-id>.routing.model\` to see which laya checkpoint answered. A complete laya workflow (manual trigger with \`{"text": "..."}\`, one \`choice\` question, a review band, and a \`property-match\` branch on \`<node-id>.answers.<question>.choice\`) is in \`docs-site/content/docs/(documentation)/concepts/workflows.mdx\`, section "Example: a laya decision end to end".
 - Do not set \`retry\` or \`validation.retry\` on a \`system-one-decision\` node. It retries connection errors, 408, 429, and 5xx itself (\`config.maxRetries\`, 0 to 3, default 2) inside \`config.timeoutMs\` (default 30000). A 401, a 422, or an answer that fails validation ends after one attempt.
 - The node reads its provider's key (\`TYPESAFE_API_KEY\`, \`OPENROUTER_API_KEY\`, or \`LAYA_API_KEY\`, and for \`laya\` the server URL \`LAYA_URL\`) server-side. The key never appears in the definition, the step output, or an error. A run whose key or \`LAYA_URL\` is missing fails before any node executes, and a 401 or 403 fails the step as \`<KEY> was rejected\`. An unresolved \`{{token}}\` fails the step before any request.
 
@@ -15078,17 +15105,18 @@ async function runSeeder(seeder, opts) {
         continue;
       }
       const state = await getSeedState(seeder.kind, item.key);
-      const pristine = state ? upstream === state.seededHash : upstream === item.contentHash;
-      if (!pristine) {
-        result.skippedUserModified += 1;
-        continue;
-      }
       if (upstream === item.contentHash) {
-        if (!state)
+        if (state?.seededHash !== item.contentHash) {
           await recordSeedState(seeder.kind, item.key, item.contentHash);
+        }
         result.skippedUnchanged += 1;
         continue;
       }
+      const pristine = state ? upstream === state.seededHash : false;
+      if (!pristine) {
+        result.skippedUserModified += 1;
+        continue;
+      }
       await seeder.apply(item, "update", opts);
       await recordSeedState(seeder.kind, item.key, item.contentHash);
       result.updated += 1;

package/dist/{keepalive-8p9rpvz5.js → keepalive-sfdz6ksp.js}

@@ -1,25 +1,27 @@
 import {
   ensureAuthorizationTokenOrThrow,
   listKeepAliveAuthorizations
-} from "./cli-qv4jv8bx.js";
-import"./cli-g9df2m37.js";
-import"./cli-e4xnc0qp.js";
-import"./cli-ardpzhjm.js";
+} from "./cli-hgmnf38m.js";
+import"./cli-1cz0c18q.js";
+import"./cli-3qhyh31j.js";
+import"./cli-akfj32vj.js";
+import"./cli-yrg7c73k.js";
+import"./cli-ptr8h7kp.js";
+import"./cli-xk79303e.js";
 import"./cli-n7h1kqpf.js";
-import"./cli-rgjprct3.js";
+import"./cli-ywybs5as.js";
 import"./cli-dv6cdjs2.js";
-import"./cli-cqt19wg6.js";
-import"./cli-19jenss3.js";
-import"./cli-de1396j2.js";
+import"./cli-1a2j50m0.js";
+import"./cli-f9w1semm.js";
 import"./cli-ej6gbxfb.js";
-import"./cli-7zttzetj.js";
+import"./cli-jyy6pm2f.js";
 import"./cli-sd0mxa3c.js";
 import"./cli-w5e1d1vv.js";
-import"./cli-48527fpw.js";
+import"./cli-a8c82p2t.js";
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-r2ap2czm.js";
+} from "./cli-nexqx4ve.js";
 import"./cli-zf8jjwex.js";
 import {
   __require
@@ -71,7 +73,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp } = await import("./app-y1b9srva.js");
+    const { getSlackApp } = await import("./app-0hdqa4k1.js");
     const app = getSlackApp();
     if (!app) {
       console.warn("[OAuth Keepalive] Slack not available, cannot send notification");