@desplega.ai/agent-swarm 2.3.0 → 2.4.1

package/README.md

@@ -118,6 +118,7 @@ AgentMail archives verified inbound deliveries before acknowledging them and ret
 - [Getting started](https://docs.agent-swarm.dev/docs/getting-started) · [Architecture](https://docs.agent-swarm.dev/docs/architecture/overview) · [Playbooks](https://docs.agent-swarm.dev/docs/playbooks) · [CLI](https://docs.agent-swarm.dev/docs/reference/cli) · [API reference](https://docs.agent-swarm.dev/docs/api-reference)
 - [Orchestration patterns](./docs/orchestration-patterns.md) — Five patterns for delegating, fanning out, gating on humans, retrying, and persisting multi-step agent work
 - [Agent templates](https://templates.agent-swarm.dev)
+- [Public ranking](https://docs.agent-swarm.dev/docs/reference/telemetry#public-ranking): opt in with **Get ranked** (Settings → Configuration → Branding) to rank your install by tokens used on [agent-swarm.dev/ranking](https://agent-swarm.dev/ranking). It shows at the next hourly refresh. Token totals are public and exact; telemetry, the organization name and website must be set.
 - Help: [contact@desplega.sh](mailto:contact@desplega.sh) · [Discord](https://discord.gg/KZgfyyDVZa)
 
 ## Contributing

package/dist/{acp-adapter-v85a2bqy.js → acp-adapter-zvzr538d.js}

@@ -1,21 +1,21 @@
 import {
   ACPAdapter2
-} from "./cli-a17tzmn0.js";
-import"./cli-rc3r0bnh.js";
-import"./cli-9td5ss65.js";
-import"./cli-a49vpbf3.js";
+} from "./cli-3tnpj2bh.js";
+import"./cli-xbzvet96.js";
+import"./cli-zfg9enh9.js";
 import"./cli-4bd1rck6.js";
 import"./cli-jc1g9ndz.js";
-import"./cli-etvn5ej2.js";
-import"./cli-jhp7w1fy.js";
+import"./cli-a5ebc95n.js";
+import"./cli-pnp2j5zg.js";
 import"./cli-0726awxw.js";
-import"./cli-p22zdvnt.js";
+import"./cli-5kqnemen.js";
+import"./cli-bn0rewsy.js";
 import"./cli-v1sjhn52.js";
 import"./cli-3h26v7yj.js";
 import"./cli-7a91w22y.js";
 import"./cli-3ggwdtb0.js";
-import"./cli-8cvvytad.js";
-import"./cli-vjfpshn3.js";
+import"./cli-8nyhf7za.js";
+import"./cli-ejs3m1sx.js";
 import"./cli-13p25grh.js";
 import"./cli-0adyhvq2.js";
 import"./cli-445c1vp7.js";

package/dist/{actions-zgcxfspj.js → actions-jhtqdw69.js}

@@ -6,16 +6,16 @@ import {
   getTaskById2,
   cancelTask2,
   init_db3
-} from "./cli-re4wkbzx.js";
-import"./cli-fhvqt2fp.js";
-import"./cli-qrwp40st.js";
-import"./cli-kqypty34.js";
+} from "./cli-rqqsfz30.js";
+import"./cli-sv5gb0yb.js";
+import"./cli-3p8fqcnh.js";
+import"./cli-k9z4zd4p.js";
 import {
   createTaskWithSiblingAwareness
-} from "./cli-8qsx817b.js";
-import"./cli-jhmjwqcg.js";
-import"./cli-65q70v2v.js";
-import"./cli-g6p7c2my.js";
+} from "./cli-kr2pmfqx.js";
+import"./cli-kmqgmcnb.js";
+import"./cli-0bh477zn.js";
+import"./cli-sjyetj21.js";
 import"./cli-3ggwdtb0.js";
 import {
   noteSlackInboundSideEffect,
@@ -26,30 +26,32 @@ import {
   getAgentEmoji,
   isSlackRenderV2Enabled2,
   ensureSlackThreadTree2
-} from "./cli-dxwh4j32.js";
+} from "./cli-vy0fay6k.js";
 import {
   EXTERNAL_CHANNEL_BLOCKED_REPLY2,
   shouldBlockChannel2
-} from "./cli-9e9kjqsj.js";
-import"./cli-q1812jbw.js";
-import"./cli-8cvvytad.js";
+} from "./cli-mfe7f7b5.js";
+import"./cli-tbhwrxpt.js";
+import"./cli-8nyhf7za.js";
 import"./cli-kvzgak7c.js";
 import"./cli-445c1vp7.js";
-import"./cli-vjfpshn3.js";
-import"./cli-ptkpaqfy.js";
+import"./cli-ejs3m1sx.js";
+import"./cli-wt645v7q.js";
 import"./cli-qz93y3x5.js";
-import"./cli-6vcyw6v7.js";
-import"./cli-xgn4rwyv.js";
+import"./cli-nx462e4v.js";
+import"./cli-s48yvzb8.js";
 import"./cli-7a91w22y.js";
 import"./cli-qje9k2nh.js";
-import"./cli-hz64bcnj.js";
+import"./cli-bn5kevnf.js";
+import"./cli-z071fb95.js";
 import"./cli-3h26v7yj.js";
-import"./cli-rdr166ht.js";
+import"./cli-smvcw9z5.js";
 import {
   resolveSlackUserId
-} from "./cli-y3dvz6ge.js";
+} from "./cli-3r448dqn.js";
 import"./cli-13p25grh.js";
 import"./cli-0adyhvq2.js";
+import"./cli-fz9kewbh.js";
 
 // src/slack/actions.ts
 init_db3();

package/dist/{amp-adapter-jw9xfz42.js → amp-adapter-bd84rhs2.js}

@@ -2,11 +2,11 @@ import {
   checkAmpCredentials2,
   liveTestAmpCredentials2,
   AmpAdapter2
-} from "./cli-6p7ddg72.js";
+} from "./cli-xftrvxag.js";
 import"./cli-jc1g9ndz.js";
-import"./cli-jhp7w1fy.js";
-import"./cli-p22zdvnt.js";
-import"./cli-fhvqt2fp.js";
+import"./cli-a5ebc95n.js";
+import"./cli-bn0rewsy.js";
+import"./cli-sv5gb0yb.js";
 import"./cli-7a91w22y.js";
 import"./cli-3ggwdtb0.js";
 export {

package/dist/{app-4e1s4675.js → app-kreq1gwg.js}

@@ -3,9 +3,9 @@ import {
   initSlackApp2,
   startSlackApp2,
   stopSlackApp2
-} from "./cli-dxwh4j32.js";
-import"./cli-9e9kjqsj.js";
-import"./cli-re4wkbzx.js";
+} from "./cli-vy0fay6k.js";
+import"./cli-mfe7f7b5.js";
+import"./cli-rqqsfz30.js";
 export {
   getSlackApp2 as getSlackApp,
   initSlackApp2 as initSlackApp,

package/dist/{assistant-v238n9dk.js → assistant-3k22sbsq.js}

@@ -6,7 +6,7 @@ import {
   getMostRecentTaskInThread2,
   reactionName,
   init_db3
-} from "./cli-re4wkbzx.js";
+} from "./cli-rqqsfz30.js";
 import {
   require_dist4,
   noteSlackInboundSideEffect,
@@ -17,53 +17,55 @@ import {
   markSlackSessionProcessing,
   isSlackRenderV2Enabled2,
   ensureSlackThreadTree2
-} from "./cli-dxwh4j32.js";
+} from "./cli-vy0fay6k.js";
 import {
   shouldBlockChannel2
-} from "./cli-9e9kjqsj.js";
+} from "./cli-mfe7f7b5.js";
 import {
   buildEffectiveText,
   fetchSlackFiles,
   createSlackTaskWithFiles,
   notifySlackFileFailures,
   hasOtherUserMention
-} from "./cli-8qsx817b.js";
+} from "./cli-kr2pmfqx.js";
 import {
   resolveSlackUserId,
   rewriteSlackMentions
-} from "./cli-y3dvz6ge.js";
+} from "./cli-3r448dqn.js";
 import {
   wasEventSeen,
   bufferThreadMessage,
   getBufferMessageCount
-} from "./cli-30m5q8mc.js";
+} from "./cli-3kh4kpqy.js";
 import"./cli-qje9k2nh.js";
-import"./cli-fhvqt2fp.js";
-import"./cli-qrwp40st.js";
-import"./cli-kqypty34.js";
-import"./cli-jhmjwqcg.js";
-import"./cli-65q70v2v.js";
-import"./cli-g6p7c2my.js";
+import"./cli-sv5gb0yb.js";
+import"./cli-3p8fqcnh.js";
+import"./cli-k9z4zd4p.js";
+import"./cli-kmqgmcnb.js";
+import"./cli-0bh477zn.js";
+import"./cli-sjyetj21.js";
 import"./cli-3ggwdtb0.js";
-import"./cli-q1812jbw.js";
-import"./cli-8cvvytad.js";
+import"./cli-tbhwrxpt.js";
+import"./cli-8nyhf7za.js";
 import"./cli-kvzgak7c.js";
 import"./cli-445c1vp7.js";
-import"./cli-vjfpshn3.js";
-import"./cli-ptkpaqfy.js";
+import"./cli-ejs3m1sx.js";
+import"./cli-wt645v7q.js";
 import"./cli-qz93y3x5.js";
-import"./cli-6vcyw6v7.js";
-import"./cli-xgn4rwyv.js";
+import"./cli-nx462e4v.js";
+import"./cli-s48yvzb8.js";
 import"./cli-7a91w22y.js";
-import"./cli-hz64bcnj.js";
+import"./cli-bn5kevnf.js";
+import"./cli-z071fb95.js";
 import"./cli-3h26v7yj.js";
-import"./cli-rdr166ht.js";
+import"./cli-smvcw9z5.js";
 import"./cli-13p25grh.js";
 import"./cli-0adyhvq2.js";
+import"./cli-fz9kewbh.js";
 import {
   resolveTemplate,
   init_resolver
-} from "./cli-w7z94e6c.js";
+} from "./cli-tx00c0h6.js";
 import {
   isEnvFlagEnabled,
   init_env_flag

package/dist/{boot-reembed-p666cw5n.js → boot-reembed-e53x6b9v.js}

@@ -6,7 +6,7 @@ import {
   getMemoryStore2,
   init_memory,
   init_db3
-} from "./cli-re4wkbzx.js";
+} from "./cli-rqqsfz30.js";
 
 // src/be/memory/boot-reembed.ts
 init_db3();

package/dist/{boot-reembed-w6pm64j4.js → boot-reembed-f6z923ny.js}

@@ -4,7 +4,7 @@ import {
   embedScript,
   init_embeddings,
   init_db3
-} from "./cli-re4wkbzx.js";
+} from "./cli-rqqsfz30.js";
 
 // src/be/scripts/boot-reembed.ts
 init_db3();

package/dist/{boot-scrub-sweep-jcyjagn3.js → boot-scrub-sweep-0538vsb7.js}

@@ -7,16 +7,16 @@ import {
   getMemoryStore2,
   init_memory,
   init_db3
-} from "./cli-re4wkbzx.js";
+} from "./cli-rqqsfz30.js";
 import {
   contentSha256,
   init_profile_sync
-} from "./cli-cby329ny.js";
+} from "./cli-x5mq1fyq.js";
 import {
   SCRUBBER_RULES_VERSION,
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 
 // src/be/boot-scrub-sweep.ts
 init_profile_sync();
@@ -79,7 +79,7 @@ async function runBootScrubSweep(opts = {}) {
   console.log(`[${tag}] complete`);
   const memoryChanged = stats.find((s) => s.table === "agent_memory")?.changed ?? 0;
   if (memoryChanged > 0 && opts.reembed !== false) {
-    const { runBootReembed } = await import("./boot-reembed-p666cw5n.js");
+    const { runBootReembed } = await import("./boot-reembed-e53x6b9v.js");
     await runBootReembed();
   }
   return stats;

package/dist/{boot-seeds-gbedmamp.js → boot-seeds-6wxqkfk2.js}

@@ -2,10 +2,10 @@ import {
   ensurePricingSeeded2,
   ensureRbacSeeded2,
   ensureModelProfilesSeeded2
-} from "./cli-xgn4rwyv.js";
-import"./cli-qrwp40st.js";
-import"./cli-6vcyw6v7.js";
-import"./cli-re4wkbzx.js";
+} from "./cli-s48yvzb8.js";
+import"./cli-3p8fqcnh.js";
+import"./cli-nx462e4v.js";
+import"./cli-rqqsfz30.js";
 export {
   ensureModelProfilesSeeded2 as ensureModelProfilesSeeded,
   ensurePricingSeeded2 as ensurePricingSeeded,

package/dist/{claude-adapter-q7wspzt8.js → claude-adapter-gfts5044.js}

@@ -4,23 +4,23 @@ import {
   buildClaudeSessionEnvironment2,
   runClaudeSessionSummary2,
   ClaudeAdapter2
-} from "./cli-hn3pftj2.js";
-import"./cli-1v8w782f.js";
-import"./cli-k28p6xh7.js";
-import"./cli-c5sbmw1v.js";
+} from "./cli-gf0kfg81.js";
+import"./cli-z1ew8vbq.js";
+import"./cli-7225gwj7.js";
+import"./cli-d82btycs.js";
 import"./cli-vbhgkw9h.js";
 import"./cli-4bd1rck6.js";
 import"./cli-jc1g9ndz.js";
-import"./cli-etvn5ej2.js";
-import"./cli-jhp7w1fy.js";
+import"./cli-a5ebc95n.js";
+import"./cli-pnp2j5zg.js";
 import"./cli-0726awxw.js";
 import"./cli-gx4rm0qx.js";
-import"./cli-p22zdvnt.js";
+import"./cli-bn0rewsy.js";
 import"./cli-3h26v7yj.js";
 import"./cli-7a91w22y.js";
 import"./cli-3ggwdtb0.js";
-import"./cli-8cvvytad.js";
-import"./cli-vjfpshn3.js";
+import"./cli-8nyhf7za.js";
+import"./cli-ejs3m1sx.js";
 import"./cli-13p25grh.js";
 import"./cli-0adyhvq2.js";
 import"./cli-445c1vp7.js";

package/dist/{claude-managed-adapter-n7ahjyx6.js → claude-managed-adapter-h2y889ge.js}

@@ -1,12 +1,12 @@
 import {
   checkClaudeManagedCredentials2,
   ClaudeManagedAdapter2
-} from "./cli-j0v75y13.js";
+} from "./cli-a0kcty51.js";
 import"./cli-4zsenjhy.js";
 import"./cli-kr5tjjtz.js";
-import"./cli-er83cjbn.js";
-import"./cli-jhp7w1fy.js";
+import"./cli-a5ebc95n.js";
 import"./cli-0726awxw.js";
+import"./cli-er83cjbn.js";
 export {
   ClaudeManagedAdapter2 as ClaudeManagedAdapter,
   checkClaudeManagedCredentials2 as checkClaudeManagedCredentials

package/dist/{claude-managed-setup-wza784fb.js → claude-managed-setup-h00hsgtz.js}

@@ -2,7 +2,7 @@ import {
   toFile,
   Anthropic
 } from "./cli-er83cjbn.js";
-import"./cli-vjfpshn3.js";
+import"./cli-ejs3m1sx.js";
 import {
   buildSkillContent
 } from "./cli-691vz9mk.js";
@@ -12,7 +12,7 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-yv0vgscc.js";
+} from "./cli-fpmsqq59.js";
 import {
   getApiKey,
   init_api_key

package/dist/{claude-sdk-session-yf400ptr.js → claude-sdk-session-56besmfz.js}

@@ -1,6 +1,6 @@
 import {
   getContextWindowSize
-} from "./cli-jhp7w1fy.js";
+} from "./cli-a5ebc95n.js";
 import {
   redactRateLimitEvent,
   SessionErrorTracker,
@@ -14,15 +14,15 @@ import {
   terminateProcessGroup
 } from "./cli-3ggwdtb0.js";
 import"./cli-3h26v7yj.js";
-import"./cli-k28p6xh7.js";
+import"./cli-7225gwj7.js";
 import"./cli-445c1vp7.js";
-import"./cli-8cvvytad.js";
+import"./cli-8nyhf7za.js";
 import"./cli-kvzgak7c.js";
-import"./cli-vjfpshn3.js";
-import"./cli-etvn5ej2.js";
-import"./cli-c5sbmw1v.js";
+import"./cli-ejs3m1sx.js";
+import"./cli-pnp2j5zg.js";
+import"./cli-d82btycs.js";
 import"./cli-0726awxw.js";
-import"./cli-1v8w782f.js";
+import"./cli-z1ew8vbq.js";
 import"./cli-7a91w22y.js";
 import {
   ClaudeBackgroundKeepalive,
@@ -30,17 +30,17 @@ import {
   cleanupTaskFile2,
   buildClaudeSessionEnvironment2,
   runClaudeSessionSummary2
-} from "./cli-hn3pftj2.js";
+} from "./cli-gf0kfg81.js";
 import"./cli-jc1g9ndz.js";
 import"./cli-4bd1rck6.js";
 import"./cli-vbhgkw9h.js";
-import"./cli-p22zdvnt.js";
+import"./cli-bn0rewsy.js";
 import"./cli-13p25grh.js";
 import"./cli-0adyhvq2.js";
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 
 // src/providers/claude-sdk-session.ts
 import { EventEmitter } from "node:events";
@@ -29346,7 +29346,7 @@ class cy {
       try {
         if (await this.sdkMcpServers.get(p)?.connection, n)
           return;
-        let m = await this.handleMcpControlRequest(p, { server_name: p, message: { jsonrpc: "2.0", id: ly + "initialize", method: "initialize", params: { protocolVersion: Y4, capabilities: V4, clientInfo: { ...q4, version: "0.3.302" } } } }, f);
+        let m = await this.handleMcpControlRequest(p, { server_name: p, message: { jsonrpc: "2.0", id: ly + "initialize", method: "initialize", params: { protocolVersion: Y4, capabilities: V4, clientInfo: { ...q4, version: "0.3.303" } } } }, f);
         if (n)
           return;
         if (!("result" in m)) {
@@ -30634,7 +30634,7 @@ function Zx(e, t) {
     p = s.prompt, g = s.snapshot;
   else if (s.type === "preset")
     f = s.append, m = s.excludeDynamicSections, g = s.snapshot;
-  process.env.CLAUDE_AGENT_SDK_VERSION = "0.3.302";
+  process.env.CLAUDE_AGENT_SDK_VERSION = "0.3.303";
   let { abortController: _ = kp(), additionalDirectories: S = [], projectConfigRoot: y, agent: b, agents: E, allowedTools: C = [], betas: A, canUseTool: w, continue: L, cwd: U, debug: F, debugFile: ue, disallowedTools: O = [], tools: T, env: v, executable: D = nl() ? "bun" : "node", executableArgs: K = [], extraArgs: X = {}, fallbackModel: pe, enableFileCheckpointing: H, toolConfig: W, forkSession: Ot, hooks: ln, includeHookEvents: mt, includePartialMessages: Dt, forwardSubagentText: wt, verbatimPrompts: Zt = false, onElicitation: Je, onUserDialog: he, supportedDialogKinds: Yt, perTaskStopAffordance: cn, rapidFollowupPreempt: ts, workspaceTrust: ga, persistSession: ns, sessionStore: wn, sessionStoreFlush: my, thinking: qe, effort: _r, maxThinkingTokens: Bn, maxTurns: Si, maxBudgetUsd: ha, taskBudget: $p, mcpServers: _a, model: zp, outputFormat: Qx, permissionMode: eJ, allowDangerouslySkipPermissions: tJ = false, permissionPromptToolName: nJ, permissionPrompts: rJ, plugins: Hp, pluginDelivery: gy = "argv", getOAuthToken: ev, getHostAuthToken: tv, workload: nv, resume: rv, resumeSessionAt: oJ, resumeDropsTurn: sJ, sessionId: iJ, skills: ov, stderr: aJ, strictMcpConfig: lJ } = d, sv = eJ;
   if (wn && ns === false)
     throw Error("sessionStore cannot be used with persistSession: false -- the storage adapter requires local writes to mirror from. Use CLAUDE_CONFIG_DIR=/tmp for ephemeral local writes with external mirroring.");
@@ -30660,7 +30660,7 @@ function Zx(e, t) {
   if (!Ct.CLAUDE_CODE_ENTRYPOINT)
     Ct.CLAUDE_CODE_ENTRYPOINT = "sdk-ts";
   if (!Ct.CLAUDE_AGENT_SDK_VERSION)
-    Ct.CLAUDE_AGENT_SDK_VERSION = "0.3.302";
+    Ct.CLAUDE_AGENT_SDK_VERSION = "0.3.303";
   if (H)
     Ct.CLAUDE_CODE_ENABLE_SDK_FILE_CHECKPOINTING = "true";
   if (!Object.keys(Ct).some((Jt) => Jt.toUpperCase() === "CLAUDE_CODE_SDK_READS_SESSION_STATE"))

package/dist/{cli-65q70v2v.js → cli-0bh477zn.js}

@@ -38,14 +38,14 @@ import {
   getResolvedConfig2,
   getMcpServerById2,
   init_db3
-} from "./cli-re4wkbzx.js";
+} from "./cli-rqqsfz30.js";
 import {
   generateRandomCodeVerifier,
   generateRandomState,
   calculatePKCECodeChallenge,
   oauthAppRowToProviderConfig,
   ensureAuthorizationTokenOrThrow
-} from "./cli-g6p7c2my.js";
+} from "./cli-sjyetj21.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -57,7 +57,7 @@ import {
 import {
   defaultAssetKey,
   init_key
-} from "./cli-yv0vgscc.js";
+} from "./cli-fpmsqq59.js";
 import {
   init_zod
 } from "./cli-4chz1hye.js";
@@ -98,7 +98,7 @@ import {
   refreshSecretScrubberCache,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 import {
   __toESM,
   __commonJS,
@@ -183434,6 +183434,13 @@ var APP_TYPES_PREAMBLE = `// ── Swarm Apps: generated per-app types (source:
 // Rows are the app's declared columns plus the 5 system columns. Query
 // overloads narrow only when appId AND query are string literals.
 
+export type AppActionCaller = {
+  kind: "user" | "agent" | "operator" | "guest";
+  id: string | null;
+  name?: string;
+  pageId?: string;
+};
+
 export interface SwarmAppQueryResult<Row> {
   success: boolean;
   status: number;
@@ -183553,7 +183560,7 @@ function renderQuery(app, namespace, queryName, query, modelInterfaceName) {
   }): Promise<SwarmAppQueryResult<${namespace}.${modelInterfaceName}>>;`;
 }
 function renderApp(app, namespace) {
-  const modelNames = new Set(["ActionName"]);
+  const modelNames = new Set(["ActionName", "ActionArgs", "AppActionCaller"]);
   const renderedModels = Object.entries(app.definition.models).map(([modelName, model]) => renderModel(modelName, model, modelNames));
   const modelInterfaces = new Map(Object.keys(app.definition.models).map((modelName, index) => [
     modelName,
@@ -183569,8 +183576,15 @@ ${renderedModels.map((model) => model.source).join(`
 
 `)}
 
-  /** Declared actions. Invocation is REST-only: POST /api/apps/<id>/actions/<name>. */
+  /** Scripts can write rows. Declared actions are callable through REST or MCP only. */
   export type ActionName = ${actionType};
+
+  /** Script action arguments include server-stamped app and caller context. */
+  export interface ActionArgs {
+    app: { id: ${JSON.stringify(app.id)} };
+    caller: AppActionCaller;
+    [key: string]: unknown;
+  }
 }
 
 export interface SwarmSdk {
@@ -184033,6 +184047,19 @@ export interface SwarmSdk {
     query: string;
     params?: Record<string, string | number | boolean>;
   }): Promise<unknown>;
+  app_rows_list(args: {
+    appId: string;
+    model: string;
+    equals?: Record<string, string | number | boolean>;
+    sort?: \`\${string}:asc\` | \`\${string}:desc\`;
+    limit?: number;
+  }): Promise<unknown>;
+  app_row_get(args: { appId: string; model: string; rowId: string }): Promise<unknown>;
+  app_row_create(args: { appId: string; model: string; values: Record<string, unknown> }): Promise<unknown>;
+  app_rows_create(args: { appId: string; model: string; rows: Record<string, unknown>[] }): Promise<unknown>;
+  app_row_patch(args: { appId: string; model: string; rowId: string; values: Record<string, unknown> }): Promise<unknown>;
+  app_row_delete(args: { appId: string; model: string; rowId: string }): Promise<unknown>;
+  app_rows_delete(args: { appId: string; model: string; equals: Record<string, string | number | boolean>; limit?: number }): Promise<unknown>;
   app_rollback(args: {
     appId: string;
     version: number;

package/dist/{cli-4ync7m60.js → cli-0ebey9hg.js}

@@ -1,7 +1,7 @@
 import {
   registerTemplate,
   init_registry
-} from "./cli-w7z94e6c.js";
+} from "./cli-tx00c0h6.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-665j3feb.js → cli-0xk505e8.js}

@@ -2,7 +2,7 @@ import {
   resolveTemplateAsync,
   init_resolver,
   init_session_templates
-} from "./cli-w7z94e6c.js";
+} from "./cli-tx00c0h6.js";
 
 // src/prompts/steering-delivery.ts
 init_session_templates();

package/dist/{cli-7gh7020n.js → cli-1dmcq2eh.js}

@@ -2,7 +2,7 @@ import {
   DEFAULT_E2B_API_BASE,
   redactWithEnv,
   init_env
-} from "./cli-3avfh5az.js";
+} from "./cli-pemywhfq.js";
 import {
   __toESM,
   __esm

package/dist/{cli-gzvb3d4a.js → cli-1jx0srjt.js}

@@ -1037,7 +1037,7 @@ var require_jsonwebtoken = __commonJS(function(exports, module) {
 });
 
 // node_modules/path-to-regexp/dist/index.js
-var require_dist5 = __commonJS(function(exports) {
+var require_dist9 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.PathError = exports.TokenData = undefined;
   exports.parse = parse;
@@ -19820,7 +19820,7 @@ var require_layer = __commonJS(function(exports, module) {
    * MIT Licensed
    */
   var isPromise = require_is_promise();
-  var pathRegexp = require_dist5();
+  var pathRegexp = require_dist9();
   var debug = require_src3()("router:layer");
   var deprecate = require_depd()("router");
   var TRAILING_SLASH_REGEXP = /\/+$/;
@@ -23251,4 +23251,4 @@ var require_express = __commonJS(function(exports, module) {
   exports.urlencoded = bodyParser.urlencoded;
 });
 
-export { require_jsonwebtoken, require_dist5, require_raw_body, require_content_type, require_lib, require_vary, require_express };
+export { require_jsonwebtoken, require_dist9, require_raw_body, require_content_type, require_lib, require_vary, require_express };

package/dist/{cli-zj4d6afs.js → cli-1pa3rz69.js}

@@ -13,6 +13,9 @@ import {
 } from "./cli-242037k3.js";
 
 // src/rbac/admission.ts
+function grantedVerb(rbac, grant) {
+  return [rbac.permission, ...rbac.alsoAdmits ?? []].find((verb) => grant.verbs.has(verb));
+}
 function isRbacEnabled() {
   return isEnvFlagEnabled("RBAC_ENABLED", true);
 }
@@ -21,10 +24,11 @@ function decideAdmission(input) {
     return { allow: true };
   }
   if (input.rbac && "permission" in input.rbac) {
-    const verb = input.rbac.permission;
-    if (input.grant.verbs.has(verb)) {
-      return { allow: true, verb };
+    const granted = grantedVerb(input.rbac, input.grant);
+    if (granted) {
+      return { allow: true, verb: granted };
     }
+    const verb = input.rbac.permission;
     return { allow: false, reason: `admission: missing permission '${verb}'`, verb };
   }
   const method = input.method.toUpperCase();
@@ -38,10 +42,11 @@ function decideToolAdmission(input) {
     return { allow: true };
   }
   if (input.rbac && "permission" in input.rbac) {
-    const verb = input.rbac.permission;
-    if (input.grant.verbs.has(verb)) {
-      return { allow: true, verb };
+    const granted = grantedVerb(input.rbac, input.grant);
+    if (granted) {
+      return { allow: true, verb: granted };
     }
+    const verb = input.rbac.permission;
     return { allow: false, reason: `admission: missing permission '${verb}'`, verb };
   }
   if (input.readOnly) {
@@ -248,6 +253,8 @@ var init_legacy_policy = __esm(() => {
     "task.action.own": requesterOwnsTask,
     "task.fs.mutate": taskFsMutate,
     "task.parent.attach": taskFsMutate,
+    "session.share": operatorOrUser,
+    "session.presence": operatorOrUser,
     "task.progress.write": taskProgressWrite,
     "favorite.write.own": anyAuthenticated,
     "memory.learning.inject": leadOnly,
@@ -414,6 +421,14 @@ var init_permissions = __esm(() => {
       description: "Write a task's progress, status, or output (its assignee, a lead, a human, or anyone while unassigned).",
       namespace: "task"
     },
+    "session.share": {
+      description: "Change who can view or edit a session the principal owns (the owner check runs in the handler).",
+      namespace: "task"
+    },
+    "session.presence": {
+      description: "Join the presence room of a session the principal can view.",
+      namespace: "task"
+    },
     "favorite.write.own": {
       description: "Set a favorite the caller owns.",
       namespace: "favorite"