@desplega.ai/agent-swarm 2.5.1 → 2.5.2

package/dist/{http-d5b44f1r.js → http-z8xy72gp.js}

@@ -301,7 +301,7 @@ import {
   hasCapability,
   getEnabledCapabilities,
   createServer
-} from "./cli-kcsd1ez8.js";
+} from "./cli-h5d22pfs.js";
 import {
   chatThreadOfContextKey,
   agentContextKey,
@@ -424,6 +424,7 @@ import {
   init_session_moves,
   getSessionReadState,
   getSessionTree,
+  triageSessionList,
   init_session_tree,
   setHumanFreeQueueListener,
   drainHumanFreeReclassifyQueue,
@@ -750,31 +751,39 @@ import {
   countScriptRunJournalSteps2,
   countScriptRunJournalAgentTaskSteps2,
   init_db3
-} from "./cli-q9pzwxvk.js";
+} from "./cli-csh8fnbg.js";
 import {
+  PRIMARY_ROLE_NAMES2,
   getUserGrant2,
+  listUserRoles2,
+  listRbacRoles2,
+  InvalidRoleSetError2,
+  LastAdminError2,
+  assertNotLastAdmin2,
+  setUserRoles2,
   init_rbac_roles
-} from "./cli-z2dv25mf.js";
-import"./cli-v2g93k4v.js";
+} from "./cli-86zpfje5.js";
+import"./cli-3e9vs93g.js";
 import {
   normalizeModelKey
-} from "./cli-9mm5ade4.js";
+} from "./cli-bpbcpd8b.js";
 import {
   upsertModelCatalogOverlay,
   deleteModelCatalogOverlay,
   loadModelsCatalog,
   requestModelCatalogRefresh2
-} from "./cli-mz2ygeyq.js";
+} from "./cli-0vgy5wfw.js";
 import {
   AMP_ESTIMATE_MODELS,
   ampBillsCacheWrites,
   resolveAmpModel
-} from "./cli-jpxsrxcb.js";
+} from "./cli-xw9q173h.js";
 import {
   automationIntegrationFixUrl,
   preflightAutomation,
   getAutomationSetupStates,
   listEnabledAutomationPreflightInputs,
+  dispatchApprovalNotifications,
   createApprovalFollowUpTask,
   validateJsonSchema,
   workflowSaveWarnings,
@@ -783,7 +792,7 @@ import {
   generateEdges,
   definitionNodeIds,
   validateDefinition
-} from "./cli-pyy4c9ch.js";
+} from "./cli-j3dwd4kz.js";
 import {
   require_dist2,
   isInvalidClientError,
@@ -847,7 +856,7 @@ import {
   MAX_SCRIPT_WALL_CLOCK_MS,
   require_typescript2,
   checkImportAllowlist,
-  runScript,
+  runScriptWithRunCredential,
   extractScriptSignature,
   extractArgsJsonSchema,
   checkQuickJSCompat,
@@ -863,14 +872,14 @@ import {
   typecheckWithAmbient,
   typecheckScript,
   parseSkillContent
-} from "./cli-mq7kg1b1.js";
+} from "./cli-e91vshb1.js";
 import {
   buildAuthorizationUrl,
   exchangeAuthorizationCode,
   oauthAppRowToProviderConfig,
   forceRefreshAuthorizationOrThrow,
   forceRefreshTokenOrThrow
-} from "./cli-rngde2jv.js";
+} from "./cli-6y43v79h.js";
 import {
   signalProcessGroup,
   detachedProcessGroup,
@@ -898,8 +907,8 @@ import {
   getSlackApp2,
   startSlackApp2,
   stopSlackApp2
-} from "./cli-e9btqw4y.js";
-import"./cli-xc65x52q.js";
+} from "./cli-15xd0j7w.js";
+import"./cli-b63d08rs.js";
 import"./cli-qqzmjxkf.js";
 import {
   _fetchHolder,
@@ -919,7 +928,7 @@ import {
 import {
   retryFailedRun2,
   cancelWorkflowRun2
-} from "./cli-nj12tn2c.js";
+} from "./cli-y3dzwyy3.js";
 import {
   duplicateGuardedQueryKey,
   warnIfCorsAllowsAnyOrigin,
@@ -964,7 +973,7 @@ import {
   bodyListTask,
   describeRequestRoute,
   route
-} from "./cli-y3zyaee5.js";
+} from "./cli-d172svcw.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-e8xyjvfc.js";
@@ -995,7 +1004,7 @@ import {
   resolvePoolDelivery2,
   createPoolAgent2,
   init_db
-} from "./cli-1dp1zj04.js";
+} from "./cli-4qkg9968.js";
 import {
   RATING_MODEL_MAX_LENGTH,
   REFERENCES_SOURCE_MAX_LENGTH,
@@ -1011,8 +1020,8 @@ import {
   checkHeartbeatChecklist2,
   runHeartbeatSweep2,
   stopHeartbeat2
-} from "./cli-2jg61wab.js";
-import"./cli-xd4eqtr2.js";
+} from "./cli-n2918sed.js";
+import"./cli-ydg6ep51.js";
 import {
   import_websocket,
   import_websocket_server
@@ -1021,7 +1030,7 @@ import {
   runtimeSupervisorStatus,
   startRuntimeSupervisor,
   stopRuntimeSupervisor
-} from "./cli-0jy85zz4.js";
+} from "./cli-cyfgxnvb.js";
 import"./cli-ns59dc6r.js";
 import {
   ACP_TARGET_IDS
@@ -1041,11 +1050,11 @@ import {
   memoryRelevance,
   isUnknownModelError,
   writeSkillsToFilesystem
-} from "./cli-cwyafhw1.js";
+} from "./cli-wadzapwb.js";
 import {
   inviteEmailToSharedOrg,
   ensureAgentFsCredentialsForAgent
-} from "./cli-r9fy0ddc.js";
+} from "./cli-fgn7yg5r.js";
 import {
   Anthropic
 } from "./cli-3qv8naq8.js";
@@ -1084,7 +1093,7 @@ import {
   revokeAgentTokens,
   fingerprintApiKey,
   init_users
-} from "./cli-gwcf52gz.js";
+} from "./cli-b6tnjdvx.js";
 import"./cli-v41kn3cd.js";
 import"./cli-wgtk7xxr.js";
 import"./cli-1f0gp9vz.js";
@@ -1099,7 +1108,7 @@ import {
   clearAuditSink,
   can,
   init_rbac
-} from "./cli-ba8ne1es.js";
+} from "./cli-4rvr7zfx.js";
 import {
   ASSET_KEY_MAX_LENGTH,
   normalizeAssetKey,
@@ -1136,6 +1145,8 @@ import {
   AgentTaskSchema,
   TaskAttachmentSchema,
   UserSchema,
+  RbacRoleSchema,
+  UserRbacRolesSchema,
   UserCommsPrefsSchema,
   InboxItemTypeSchema,
   InboxItemStatusSchema,
@@ -1246,7 +1257,7 @@ import {
   KvKeySchema,
   KvEntrySchema,
   init_types
-} from "./cli-rh5smt8t.js";
+} from "./cli-mntxtkhn.js";
 import {
   IDENTITY_FIELD_BUDGETS,
   IdentityFieldBudgetError,
@@ -1319,7 +1330,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-22rmcjkg.js";
+} from "./cli-kcnwn85g.js";
 import {
   realtimeBus,
   init_bus
@@ -5989,6 +6000,7 @@ init_db3();
 init_users();
 init_rbac();
 init_request_auth_context();
+init_secret_scrubber();
 init_event_bus();
 var QuestionSchema = object2({
   id: string2(),
@@ -6154,14 +6166,15 @@ var createRoute = route({
     notifications: array2(object2({
       channel: _enum2(["slack", "email"]),
       target: string2()
-    })).optional()
+    })).optional().describe("Where to announce the request. A Slack target (channel or user ID) gets a card with the title, the questions and a link to the dashboard page that answers it. Slack targets need a lead agent caller (403 otherwise). Email is not supported yet and is skipped.")
   }),
   responses: {
     201: {
       description: "Approval request created",
       schema: object2({ approvalRequest: ApprovalRequestSchema })
     },
-    400: { description: "Validation error" }
+    400: { description: "Validation error" },
+    403: { description: "Slack notifications require a lead agent" }
   },
   auth: { apiKey: true }
 });
@@ -6375,7 +6388,7 @@ async function handleApprovalRequests(req, res, pathSegments, queryParams) {
     const parsed = await cancelRoute.parse(req, res, pathSegments, queryParams);
     if (!parsed)
       return true;
-    const { principal, resolvedBy } = await approvalCancelPrincipal(req);
+    const { principal, resolvedBy } = await approvalCallerPrincipal(req);
     const result = await cancelApprovalRequest({
       id: parsed.params.id,
       reason: parsed.body.reason,
@@ -6411,6 +6424,14 @@ async function handleApprovalRequests(req, res, pathSegments, queryParams) {
     const parsed = await createRoute.parse(req, res, pathSegments, queryParams);
     if (!parsed)
       return true;
+    if (parsed.body.notifications?.some((notification) => notification.channel === "slack")) {
+      const { principal } = await approvalCallerPrincipal(req);
+      const decision = can({ principal, verb: "integration.slack.post", source: "http" });
+      if (!decision.allow) {
+        jsonError(res, SLACK_NOTIFICATION_REFUSED, 403);
+        return true;
+      }
+    }
     const id = crypto.randomUUID();
     const auth = getRequestAuth(req);
     const rawCallerAgentId = req.headers["x-agent-id"];
@@ -6428,6 +6449,18 @@ async function handleApprovalRequests(req, res, pathSegments, queryParams) {
       notificationChannels: parsed.body.notifications,
       createdBy
     });
+    const notifications = parsed.body.notifications;
+    if (notifications?.length && request.status === "pending") {
+      dispatchApprovalNotifications({
+        requestId: request.id,
+        title: request.title,
+        questions: parsed.body.questions,
+        timeoutSeconds: parsed.body.timeoutSeconds,
+        notifications
+      }).catch((err) => {
+        console.error("[approval-requests] Unexpected error dispatching notifications:", scrubSecrets(err instanceof Error ? err.message : String(err)));
+      });
+    }
     createRoute.respond(res, 201, {
       approvalRequest: await toApprovalRequestResponse(request)
     });
@@ -6456,7 +6489,8 @@ async function handleApprovalRequests(req, res, pathSegments, queryParams) {
   }
   return false;
 }
-async function approvalCancelPrincipal(req) {
+var SLACK_NOTIFICATION_REFUSED = "Slack notifications require lead privileges (integration.slack.post). Create the request without them, or ask the lead to post the link.";
+async function approvalCallerPrincipal(req) {
   const auth = getRequestAuth(req);
   if (auth?.kind === "user") {
     return { principal: { kind: "user", userId: auth.userId }, resolvedBy: auth.userId };
@@ -28497,6 +28531,7 @@ init_zod();
 var import_cron_parser = __toESM(require_dist2(), 1);
 init_db3();
 init_db2();
+init_rbac();
 init_types();
 var scheduleUpdateBodySchema = object2({
   key: AssetKeySchema.optional(),
@@ -28649,6 +28684,7 @@ var updateSchedule = route({
   responses: {
     200: { description: "Schedule updated", schema: ScheduledTaskSchema.nullable() },
     400: { description: "Validation error" },
+    403: { description: "Deferral owned by another agent" },
     404: { description: "Schedule not found" },
     409: { description: "Duplicate name" }
   }
@@ -28665,6 +28701,7 @@ var patchSchedule = route({
   responses: {
     200: { description: "Schedule patched", schema: ScheduledTaskSchema.nullable() },
     400: { description: "Validation error" },
+    403: { description: "Deferral owned by another agent" },
     404: { description: "Schedule not found" },
     409: { description: "Duplicate name" }
   },
@@ -28936,6 +28973,18 @@ async function handleSchedules(req, res, pathSegments, queryParams, myAgentId) {
       jsonError(res, "Schedule not found", 404);
       return true;
     }
+    if (existing.taskType === "deferred") {
+      const principal = await agentFirstPrincipal(req, myAgentId);
+      if (principal.kind === "agent" && !can({
+        principal,
+        verb: "schedule.deferral.update.any",
+        resource: { kind: "owned", ownerAgentId: existing.createdByAgentId },
+        source: "http"
+      }).allow) {
+        jsonError(res, `Schedule "${existing.name}" defers another agent's task. Only that agent or a lead can change it.`, 403);
+        return true;
+      }
+    }
     const agentChanged = parsed.body.targetAgentId !== undefined && parsed.body.targetAgentId !== existing.targetAgentId;
     if (parsed.body.model !== undefined || parsed.body.modelTier !== undefined) {
       const normalizedModel = splitLegacyModelAlias({
@@ -32377,7 +32426,7 @@ async function handleScripts(req, res, pathSegments, queryParams, agentId) {
     const startedAt = new Date().toISOString();
     const runStartTouch = namedScript?.isScratch ? await touchScratchScriptLastUsed(namedScript.id) : null;
     const credentials = await buildScriptCredentialBindingsWithFailures({ agentId: agent.id });
-    const output = await runScript({
+    const output = await runScriptWithRunCredential({
       source,
       args: parsed.body.args,
       fsMode,
@@ -33344,7 +33393,8 @@ var SessionTreeResponseSchema = object2({
   inbox: SessionSectionCountsSchema,
   later: SessionSectionCountsSchema,
   done: SessionSectionCountsSchema,
-  noGroup: SessionSectionCountsSchema
+  noGroup: SessionSectionCountsSchema,
+  sources: array2(object2({ source: string2(), total: number2().int() })).describe("Each root source in this view with its session count, hidden sources included.")
 });
 var SessionApprovalSchema = object2({
   id: string2(),
@@ -33603,6 +33653,8 @@ async function handleAgentTokens(req, res, pathSegments, queryParams) {
   revokeAgentTokenRoute.respond(res, 200, { revoked: await revokeAgentTokens(parsed.params.id) });
   return true;
 }
+var SessionShowSchema = _enum2(["mine", "all"]).optional().describe("Sessions v2 view, for a user viewer with tree scope. mine (default): roots the user started from a human channel (not workflow, schedule, or system) plus sessions shared with the user. all: every tree session. Lists only: access is unchanged.");
+var SessionHideSourceSchema = string2().refine((value) => value.split(",").length <= 32, "hideSource takes at most 32 sources.").optional().transform((value) => value?.split(",").map((source) => source.trim()).filter(Boolean)).describe("Comma-separated root sources to leave out (the sessions v2 source filter), e.g. `slack,chat`.");
 var listSessions = route({
   method: "get",
   path: "/api/sessions",
@@ -33624,7 +33676,9 @@ var listSessions = route({
     status: _enum2(["running", "failed", "needs"]).optional(),
     withUserId: string2().min(1).optional(),
     fields: _enum2(["full", "slim"]).optional(),
-    scope: _enum2(["mine", "shared", "tree"]).optional().describe("mine: owned sessions. shared: sessions shared with me. tree: Sessions that GET /api/session-tree counts: mine plus shared with me, no ownerless roots. A bypass actor sees every root with tree scope.")
+    scope: _enum2(["mine", "shared", "tree"]).optional().describe("mine: owned sessions. shared: sessions shared with me. tree: Sessions that GET /api/session-tree counts: mine plus shared with me, no ownerless roots. A bypass actor sees every root with tree scope."),
+    show: SessionShowSchema,
+    hideSource: SessionHideSourceSchema
   }),
   responses: {
     200: {
@@ -33646,12 +33700,41 @@ var sessionTree = route({
   pattern: ["api", "session-tree"],
   summary: "Get session groups and triage counts",
   tags: ["Sessions"],
+  query: object2({ show: SessionShowSchema, hideSource: SessionHideSourceSchema }),
   responses: {
     200: { description: "Visible groups and section counts", schema: SessionTreeResponseSchema },
     401: { description: "Unauthorized" }
   },
   auth: { apiKey: true }
 });
+var triageSessionListRoute = route({
+  method: "post",
+  path: "/api/session-triage",
+  pattern: ["api", "session-triage"],
+  summary: "Triage every session of one sidebar list",
+  description: "The bulk bar's 'Select all N': Done, back to the Inbox, read, or unread for every session that one sessions v2 list shows the caller (the `GET /api/sessions?scope=tree` filters). Needs a picked user.",
+  tags: ["Sessions"],
+  body: object2({
+    action: _enum2(["done", "inbox", "read", "unread"]),
+    triage: _enum2(["inbox", "later", "done"]).optional(),
+    noGroup: boolean().optional(),
+    groupKey: SessionKeyFilterSchema.optional(),
+    show: SessionShowSchema,
+    hideSource: array2(string2().min(1)).max(32).optional()
+  }).refine((body) => [body.triage, body.noGroup, body.groupKey].filter(Boolean).length === 1, {
+    message: "Name exactly one list: triage, noGroup, or groupKey"
+  }),
+  responses: {
+    200: {
+      description: "The number of sessions written",
+      schema: object2({ updated: number2().int() })
+    },
+    400: { description: "Validation error, or no picked user" },
+    401: { description: "Unauthorized" }
+  },
+  auth: { apiKey: true },
+  rbac: { ungated: "per-user inbox UI state, same posture as PATCH /api/inbox-state" }
+});
 var SESSION_MOVE_LIMIT = 200;
 var SESSION_MOVE_OWNER_ONLY = "Only the session owner can move this group";
 var SESSION_MOVE_UNAVAILABLE = "Session not found or not accessible";
@@ -33905,6 +33988,7 @@ async function handleSessions(req, res, pathSegments, queryParams, myAgentId) {
     }
     const filterOpts = {
       source: sources,
+      hideSource: parsed.query.hideSource,
       q: parsed.query.q,
       requestedByUserId: parsed.query.requestedByUserId,
       contextKeyPrefix: parsed.query.contextKeyPrefix,
@@ -33916,6 +34000,7 @@ async function handleSessions(req, res, pathSegments, queryParams, myAgentId) {
       withUserId: parsed.query.withUserId,
       now: new Date().toISOString(),
       tree: parsed.query.scope === "tree",
+      mine: parsed.query.scope === "tree" && parsed.query.show !== "all",
       ...actor.kind === "user" ? {
         viewer: {
           userId: actor.userId,
@@ -33942,7 +34027,25 @@ async function handleSessions(req, res, pathSegments, queryParams, myAgentId) {
     const parsed = await sessionTree.parse(req, res, pathSegments, queryParams);
     if (!parsed)
       return true;
-    sessionTree.respond(res, 200, await getSessionTree(await resolveSessionActor2(req, myAgentId)));
+    const actor = await resolveSessionActor2(req, myAgentId);
+    sessionTree.respond(res, 200, await getSessionTree(actor, undefined, {
+      mine: parsed.query.show !== "all",
+      hideSource: parsed.query.hideSource
+    }));
+    return true;
+  }
+  if (triageSessionListRoute.match(req.method, pathSegments)) {
+    const parsed = await triageSessionListRoute.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    const actor = await resolveSessionActor2(req, myAgentId);
+    if (actor.kind !== "user" || !actor.userId) {
+      jsonError(res, "Pick a user to triage sessions", 400);
+      return true;
+    }
+    const { action, show, ...list } = parsed.body;
+    const updated = await triageSessionList(actor.userId, { ...list, mine: show !== "all" }, action);
+    triageSessionListRoute.respond(res, 200, { updated });
     return true;
   }
   if (moveSessions.match(req.method, pathSegments)) {
@@ -36527,9 +36630,182 @@ async function handleTrackers(req, res, pathSegments) {
   return await handleLinearTracker(req, res, pathSegments);
 }
 
+// src/http/user-roles.ts
+init_zod();
+init_db3();
+init_rbac_roles();
+init_users();
+init_rbac();
+init_types();
+init_request_auth_context();
+
+// src/http/operator-actor.ts
+init_users();
+init_api_key();
+init_request_auth_context();
+function extractBearer2(req) {
+  const raw = req.headers.authorization;
+  const header = Array.isArray(raw) ? raw[0] : raw;
+  if (!header || !header.startsWith("Bearer "))
+    return null;
+  return header.slice(7);
+}
+function getOperatorActor(req, res) {
+  const auth = getRequestAuth(req);
+  if (auth?.kind === "user") {
+    return { kind: "user", id: auth.userId };
+  }
+  if (auth?.kind === "operator") {
+    return { kind: "operator", id: auth.fingerprint };
+  }
+  if (auth?.kind === "guest") {
+    jsonError(res, "Forbidden", 403);
+    return null;
+  }
+  const rawKey = extractBearer2(req);
+  const swarmKey = getApiKey();
+  if (!swarmKey) {
+    return { kind: "operator", id: fingerprintApiKey("") };
+  }
+  if (!rawKey || rawKey !== swarmKey) {
+    jsonError(res, "Unauthorized", 401);
+    return null;
+  }
+  return { kind: "operator", id: fingerprintApiKey(rawKey) };
+}
+
+// src/http/user-roles.ts
+var listRolesRoute = route({
+  method: "get",
+  path: "/api/rbac/roles",
+  pattern: ["api", "rbac", "roles"],
+  operationId: "rbac_listRoles",
+  summary: "List RBAC roles with their verbs",
+  tags: ["Users"],
+  responses: {
+    200: { description: "Role catalog", schema: object2({ roles: array2(RbacRoleSchema) }) }
+  }
+});
+var getUserRolesRoute = route({
+  method: "get",
+  path: "/api/users/{id}/roles",
+  pattern: ["api", "users", null, "roles"],
+  operationId: "users_getRbacRoles",
+  summary: "Get a user's RBAC roles",
+  tags: ["Users"],
+  params: object2({ id: string2().min(1) }),
+  responses: {
+    200: { description: "The user's roles", schema: UserRbacRolesSchema },
+    404: { description: "User not found" }
+  }
+});
+var setUserRolesRoute = route({
+  method: "put",
+  path: "/api/users/{id}/roles",
+  pattern: ["api", "users", null, "roles"],
+  operationId: "users_setRbacRoles",
+  summary: "Set a user's RBAC roles",
+  description: `Replaces the user's roles. The set holds exactly one of ${PRIMARY_ROLE_NAMES2.join(", ")} plus any extra roles. Demoting a user below admin removes the ability to answer approval requests, even when the user is listed as an approver. Fails with 409 when it would leave no active admin.`,
+  tags: ["Users"],
+  params: object2({ id: string2().min(1) }),
+  body: object2({ roles: array2(string2().min(1)).min(1) }).strict(),
+  responses: {
+    200: { description: "The user's roles after the change", schema: UserRbacRolesSchema },
+    400: { description: "Invalid role set" },
+    403: { description: "Not allowed to change roles" },
+    404: { description: "User not found" },
+    409: { description: "Would leave no active admin" }
+  },
+  rbac: { permission: "user.role.manage" }
+});
+async function composeRoles(userId) {
+  const [catalog, held] = await Promise.all([listRbacRoles2(), listUserRoles2(userId)]);
+  const names = new Set(held.map((role) => role.name));
+  return { userId, roles: catalog.filter((role) => names.has(role.name)) };
+}
+async function ensureRoleManager(req, res) {
+  if (rejectGuest(req, res))
+    return false;
+  const auth = getRequestAuth(req);
+  if (auth?.kind !== "operator" && auth?.kind !== "user") {
+    jsonError(res, "Role changes require operator or user credentials", 403);
+    return false;
+  }
+  const header = req.headers["x-agent-id"];
+  const decision = can({
+    principal: await agentFirstPrincipal(req, Array.isArray(header) ? header[0] : header),
+    verb: "user.role.manage",
+    resource: { kind: "none" },
+    source: "http"
+  });
+  if (!decision.allow) {
+    jsonError(res, decision.reason, 403);
+    return false;
+  }
+  if (auth.kind === "user" && isRbacEnabled() && !(await getUserGrant2(auth.userId)).grantsAll) {
+    jsonError(res, "Role changes require a grant-all role", 403);
+    return false;
+  }
+  return true;
+}
+async function handleUserRoles(req, res, pathSegments, queryParams) {
+  if (listRolesRoute.match(req.method, pathSegments)) {
+    if (rejectGuest(req, res))
+      return true;
+    listRolesRoute.respond(res, 200, { roles: await listRbacRoles2() });
+    return true;
+  }
+  if (getUserRolesRoute.match(req.method, pathSegments)) {
+    if (rejectGuest(req, res))
+      return true;
+    const parsed = await getUserRolesRoute.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    if (!await getUserById2(parsed.params.id)) {
+      jsonError(res, "User not found", 404);
+      return true;
+    }
+    getUserRolesRoute.respond(res, 200, await composeRoles(parsed.params.id));
+    return true;
+  }
+  if (setUserRolesRoute.match(req.method, pathSegments)) {
+    const parsed = await setUserRolesRoute.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    if (!await ensureRoleManager(req, res))
+      return true;
+    const actor = getOperatorActor(req, res);
+    if (!actor)
+      return true;
+    const userId = parsed.params.id;
+    if (!await getUserById2(userId)) {
+      jsonError(res, "User not found", 404);
+      return true;
+    }
+    try {
+      const { before, after } = await setUserRoles2(userId, parsed.body.roles, actor.kind === "user" ? actor.id : null);
+      await recordIdentityEvent(userId, "profile_changed", actor, { rbacRoles: before }, { rbacRoles: after });
+    } catch (err) {
+      if (err instanceof LastAdminError2) {
+        jsonError(res, "last_admin", 409);
+        return true;
+      }
+      if (err instanceof InvalidRoleSetError2) {
+        jsonError(res, err.message, 400);
+        return true;
+      }
+      throw err;
+    }
+    setUserRolesRoute.respond(res, 200, await composeRoles(userId));
+    return true;
+  }
+  return false;
+}
+
 // src/http/users.ts
 init_zod();
 init_db3();
+init_rbac_roles();
 init_users();
 init_types();
 init_request_auth_context();
@@ -36600,41 +36876,6 @@ function createIpRateLimiter(options) {
   };
 }
 
-// src/http/operator-actor.ts
-init_users();
-init_api_key();
-init_request_auth_context();
-function extractBearer2(req) {
-  const raw = req.headers.authorization;
-  const header = Array.isArray(raw) ? raw[0] : raw;
-  if (!header || !header.startsWith("Bearer "))
-    return null;
-  return header.slice(7);
-}
-function getOperatorActor(req, res) {
-  const auth = getRequestAuth(req);
-  if (auth?.kind === "user") {
-    return { kind: "user", id: auth.userId };
-  }
-  if (auth?.kind === "operator") {
-    return { kind: "operator", id: auth.fingerprint };
-  }
-  if (auth?.kind === "guest") {
-    jsonError(res, "Forbidden", 403);
-    return null;
-  }
-  const rawKey = extractBearer2(req);
-  const swarmKey = getApiKey();
-  if (!swarmKey) {
-    return { kind: "operator", id: fingerprintApiKey("") };
-  }
-  if (!rawKey || rawKey !== swarmKey) {
-    jsonError(res, "Unauthorized", 401);
-    return null;
-  }
-  return { kind: "operator", id: fingerprintApiKey(rawKey) };
-}
-
 // src/http/users.ts
 async function composeUser(userId, recentEventLimit = 5) {
   const user = await getUserById2(userId);
@@ -36990,7 +37231,8 @@ var mergeUsersRoute = route({
     },
     400: { description: "Validation error (e.g. target == source)" },
     401: { description: "Unauthorized" },
-    404: { description: "Target or source user not found" }
+    404: { description: "Target or source user not found" },
+    409: { description: "Source is the last active admin (last_admin)" }
   },
   auth: { apiKey: true }
 });
@@ -37472,6 +37714,7 @@ async function handleUsers(req, res, pathSegments, queryParams) {
             await recordIdentityEvent(targetId, "email_added", actor, null, { email: alias });
           }
         }
+        await assertNotLastAdmin2(sourceId);
         await deleteUser2(sourceId, targetId);
         const targetAfter = await composeUser(targetId);
         await recordIdentityEvent(targetId, "manual_merge", actor, targetBefore, {
@@ -37486,6 +37729,10 @@ async function handleUsers(req, res, pathSegments, queryParams) {
       });
       mergeUsersRoute.respond(res, 200, { user: mergedUser });
     } catch (err) {
+      if (err instanceof LastAdminError2) {
+        jsonError(res, "last_admin", 409);
+        return true;
+      }
       jsonError(res, err instanceof Error ? err.message : "Failed to merge users", 500);
     }
     return true;
@@ -39619,7 +39866,7 @@ async function handleX(req, res, pathSegments) {
   const credentials = await buildScriptCredentialBindingsWithFailures({
     agentId: endpoint.agentId
   });
-  const output = await runScript({
+  const output = await runScriptWithRunCredential({
     source: script.source,
     args: args ?? null,
     fsMode: "none",
@@ -39833,6 +40080,7 @@ var httpServer = createHttpServer(async (req, res) => {
         () => handleRuntimePools(req, res, pathSegments, queryParams, myAgentId),
         () => handleExtensions(req, res, pathSegments, queryParams, myAgentId),
         () => handleFavorites(req, res, pathSegments, queryParams, myAgentId),
+        () => handleUserRoles(req, res, pathSegments, queryParams),
         () => handleUsers(req, res, pathSegments, queryParams),
         () => handleSessions(req, res, pathSegments, queryParams, myAgentId),
         () => handleInboxState(req, res, pathSegments, queryParams),
@@ -39870,7 +40118,7 @@ var httpServer = createHttpServer(async (req, res) => {
   });
 });
 var detachRealtime = attachRealtimeTransport(httpServer);
-var { attachControllerTransport } = await import("./controllers-connect-6dkm71tg.js");
+var { attachControllerTransport } = await import("./controllers-connect-jzx7t4bn.js");
 var detachControllers = attachControllerTransport(httpServer);
 var stopWorkerNudges = startWorkerNudgeListener();
 var stopRoomDeletion = realtimeBus.subscribe("room:namespace-deleted", (namespace) => {
@@ -39899,7 +40147,7 @@ async function shutdown() {
     sessionsProcessed: getServerSessionsProcessed()
   });
   if (hasCapability("scheduling")) {
-    const { stopScheduler } = await import("./index-d2qeem97.js");
+    const { stopScheduler } = await import("./index-1cscynkb.js");
     stopScheduler();
   }
   stopHeartbeat2();
@@ -39911,7 +40159,7 @@ async function shutdown() {
   await stopSlackApp2();
   await stopChatSdk();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { stopOAuthKeepalive } = await import("./keepalive-wsby1btq.js");
+    const { stopOAuthKeepalive } = await import("./keepalive-a9srcphj.js");
     await stopOAuthKeepalive();
   }
   stopOAuthPendingGc();
@@ -39991,21 +40239,21 @@ try {
   console.warn("[startup] CAPABILITIES upgrade seed failed (non-fatal):", err);
 }
 try {
-  const { ensurePricingSeeded } = await import("./boot-seeds-9jqwnegq.js");
+  const { ensurePricingSeeded } = await import("./boot-seeds-0n82qc7q.js");
   ensurePricingSeeded();
-  const { startPricingRefreshLoop } = await import("./pricing-refresh-pva04zee.js");
+  const { startPricingRefreshLoop } = await import("./pricing-refresh-t27anv4z.js");
   startPricingRefreshLoop();
 } catch (err) {
   console.error("[startup] Failed to seed pricing rows:", err);
 }
 try {
-  const { ensureModelProfilesSeeded } = await import("./boot-seeds-9jqwnegq.js");
+  const { ensureModelProfilesSeeded } = await import("./boot-seeds-0n82qc7q.js");
   await ensureModelProfilesSeeded();
 } catch (err) {
   console.error("[startup] Failed to seed model profiles:", err);
 }
 try {
-  const { ensureRbacSeeded } = await import("./boot-seeds-9jqwnegq.js");
+  const { ensureRbacSeeded } = await import("./boot-seeds-0n82qc7q.js");
   ensureRbacSeeded();
 } catch (err) {
   console.error("[startup] Failed to sync RBAC seed rows:", err);
@@ -40013,7 +40261,7 @@ try {
     throw err;
 }
 try {
-  const { runAllSeeders } = await import("./index-nq8hhv28.js");
+  const { runAllSeeders } = await import("./index-06qkmcx6.js");
   await runAllSeeders({ scriptEmbeddingMode: "skip" });
 } catch (err) {
   console.error("[startup] Failed to seed built-in entities:", err);
@@ -40076,39 +40324,39 @@ httpServer.listen(port, async () => {
   await initWorkflows2();
   await startScriptRunSupervisor(getMcpBaseUrl());
   if (hasCapability("scheduling")) {
-    const { startScheduler } = await import("./index-d2qeem97.js");
-    const { getExecutorRegistry } = await import("./index-4q3vj1yr.js");
+    const { startScheduler } = await import("./index-1cscynkb.js");
+    const { getExecutorRegistry } = await import("./index-r70q0xjx.js");
     const intervalMs = Number(process.env.SCHEDULER_INTERVAL_MS) || 1e4;
     startScheduler(getExecutorRegistry(), intervalMs, {
       runId: globalState.__runId
     });
   }
   if (!isEnvFlagEnabled("HEARTBEAT_DISABLE", false)) {
-    const { startHeartbeat } = await import("./index-mj46rk9k.js");
+    const { startHeartbeat } = await import("./index-s193j5fh.js");
     const heartbeatMs = Number(process.env.HEARTBEAT_INTERVAL_MS) || 90000;
     startHeartbeat(heartbeatMs);
   }
   startPoolRouting();
   startRuntimeSupervisor();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { startOAuthKeepalive } = await import("./keepalive-wsby1btq.js");
+    const { startOAuthKeepalive } = await import("./keepalive-a9srcphj.js");
     startOAuthKeepalive();
   }
   if (process.env.OAUTH_REFRESH_SWEEP_DISABLE !== "true") {
-    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-d6sqn5np.js");
+    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-b65jcyw2.js");
     startOAuthRefreshSweep();
   }
   startOAuthPendingGc();
   await startMemoryGc();
   await startDbRetention();
   startHumanFreeDrain();
-  import("./boot-reembed-r8rhf9h8.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+  import("./boot-reembed-r3e808ky.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
     console.error("[boot-reembed] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-reembed-vwcj2y5d.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+  import("./boot-reembed-tgrfy27t.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
     console.error("[boot-reembed-scripts] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-scrub-sweep-fr9q36ne.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
+  import("./boot-scrub-sweep-masdwxkm.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
     console.error("[boot-scrub-sweep] startup scrub failed (non-fatal):", err);
   });
 }).on("error", (err) => {