pilotswarm 0.5.38 → 0.5.39

package/mcp/dist/src/tools/agent-packages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-packages.d.ts","sourceRoot":"","sources":["../../../src/tools/agent-packages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,QAwJ9E"}
+{"version":3,"file":"agent-packages.d.ts","sourceRoot":"","sources":["../../../src/tools/agent-packages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,QAkL9E"}

package/mcp/dist/src/tools/agent-packages.js

@@ -32,14 +32,16 @@ export function registerAgentPackageTools(server, ctx) {
             name: z.string().min(1).describe("Package name"),
             include_tree: z.boolean().optional().describe("Also return the file tree of the active (or given) version"),
             semver: z.string().optional().describe("Version for the tree (default: active)"),
+            scope: z.enum(["shared", "user"]).optional().describe("Which same-named copy (scope shadowing): default walks your copy, then shared"),
         },
-    }, withToolErrors(async ({ name, include_tree, semver }) => {
-        const detail = await ops.getAgentPackage({ name });
+    }, withToolErrors(async ({ name, include_tree, semver, scope }) => {
+        const sel = scope ? { scope } : {};
+        const detail = await ops.getAgentPackage({ name, ...sel });
         if (!detail)
             return errorResult(`package "${name}" not found or not visible to you`, { name });
         const result = { package: detail };
         if (include_tree) {
-            result.tree = await ops.getAgentPackageTree({ name, ...(semver ? { semver } : {}) });
+            result.tree = await ops.getAgentPackageTree({ name, ...(semver ? { semver } : {}), ...sel });
         }
         return jsonResult(result);
     }));
@@ -50,9 +52,10 @@ export function registerAgentPackageTools(server, ctx) {
             name: z.string().min(1).describe("Package name"),
             file_path: z.string().min(1).describe("File path inside the package (e.g. agents/triager.agent.md)"),
             semver: z.string().optional().describe("Version (default: active)"),
+            scope: z.enum(["shared", "user"]).optional().describe("Which same-named copy (scope shadowing)"),
         },
-    }, withToolErrors(async ({ name, file_path, semver }) => {
-        const file = await ops.getAgentPackageFile({ name, filePath: file_path, ...(semver ? { semver } : {}) });
+    }, withToolErrors(async ({ name, file_path, semver, scope }) => {
+        const file = await ops.getAgentPackageFile({ name, filePath: file_path, ...(semver ? { semver } : {}), ...(scope ? { scope } : {}) });
         return jsonResult(file);
     }));
     if (ctx.agentMgmt !== "full")
@@ -89,16 +92,31 @@ export function registerAgentPackageTools(server, ctx) {
         await ops.setAgentPackageScope({ name, scope });
         return jsonResult({ ok: true, name, scope });
     }));
+    server.registerTool("republish_agent_package_version", {
+        title: "Republish Agent Package Version Across Scopes",
+        description: "Publish an existing version's exact bytes into the same-named package in the other scope. "
+            + "THE update path for an already-published shared package: promote can only move a row to an "
+            + "unused name, this adds a version to the existing one. Creator or admin.",
+        inputSchema: {
+            name: z.string().min(1),
+            semver: z.string().optional().describe("Source version (default: the source copy's active version)"),
+            target_scope: z.enum(["shared", "user"]).describe("Destination scope; the source is the same-named package in the other scope"),
+        },
+    }, withToolErrors(async ({ name, semver, target_scope }) => {
+        const outcome = await ops.republishAgentPackageVersion({ name, ...(semver ? { semver } : {}), targetScope: target_scope });
+        return jsonResult(outcome);
+    }));
     server.registerTool("pin_agent_package_version", {
         title: "Pin Agent Package Version",
         description: "Point the package at a published version (rollback/roll-forward). The fleet converges on the next epoch poll. Creator or admin.",
         inputSchema: {
             name: z.string().min(1),
             semver: z.string().min(1),
+            scope: z.enum(["shared", "user"]).optional().describe("Which same-named copy to pin (scope shadowing): default walks your copy, then shared"),
         },
-    }, withToolErrors(async ({ name, semver }) => {
-        await ops.pinAgentPackageVersion({ name, semver });
-        return jsonResult({ ok: true, name, active: semver });
+    }, withToolErrors(async ({ name, semver, scope }) => {
+        await ops.pinAgentPackageVersion({ name, semver, ...(scope ? { scope } : {}) });
+        return jsonResult({ ok: true, name, active: semver, ...(scope ? { scope } : {}) });
     }));
     server.registerTool("set_agent_package_enabled", {
         title: "Enable / Disable Agent Package",
@@ -106,10 +124,11 @@ export function registerAgentPackageTools(server, ctx) {
         inputSchema: {
             name: z.string().min(1),
             enabled: z.boolean(),
+            scope: z.enum(["shared", "user"]).optional().describe("Which same-named copy (scope shadowing): default walks your copy, then shared"),
         },
-    }, withToolErrors(async ({ name, enabled }) => {
-        await ops.setAgentPackageEnabled({ name, enabled });
-        return jsonResult({ ok: true, name, enabled });
+    }, withToolErrors(async ({ name, enabled, scope }) => {
+        await ops.setAgentPackageEnabled({ name, enabled, ...(scope ? { scope } : {}) });
+        return jsonResult({ ok: true, name, enabled, ...(scope ? { scope } : {}) });
     }));
     server.registerTool("delete_agent_package", {
         title: "Delete Agent Package",
@@ -117,10 +136,11 @@ export function registerAgentPackageTools(server, ctx) {
         inputSchema: {
             name: z.string().min(1),
             confirm: z.literal(true).describe("Must be true — acknowledges the deletion is permanent"),
+            scope: z.enum(["shared", "user"]).optional().describe("Which same-named copy to delete (scope shadowing). Strongly recommended when both copies exist."),
         },
-    }, withToolErrors(async ({ name }) => {
-        await ops.deleteAgentPackage({ name });
-        return jsonResult({ ok: true, deleted: name });
+    }, withToolErrors(async ({ name, scope }) => {
+        await ops.deleteAgentPackage({ name, ...(scope ? { scope } : {}) });
+        return jsonResult({ ok: true, deleted: name, ...(scope ? { scope } : {}) });
     }));
 }
 //# sourceMappingURL=agent-packages.js.map

package/mcp/dist/src/tools/agent-packages.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-packages.js","sourceRoot":"","sources":["../../../src/tools/agent-packages.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAE7E;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAiB,EAAE,GAAkB;IAC3E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IAEpB,MAAM,CAAC,YAAY,CACf,qBAAqB,EACrB;QACI,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACP,yFAAyF;cACvF,4FAA4F;cAC5F,yCAAyC;QAC/C,WAAW,EAAE,EAAE;KAClB,EACD,cAAc,CAAC,KAAK,IAAI,EAAE;QACtB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC/C,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,mBAAmB,EACnB;QACI,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,oGAAoG;QACjH,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;YAC3G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;SACnF;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,YAAY,IAAI,mCAAmC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,MAAM,MAAM,GAA4B,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC5D,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,wBAAwB,EACxB;QACI,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,oIAAoI;QACjJ,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6DAA6D,CAAC;YACpG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;SACtE;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzG,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC,CACL,CAAC;IAEF,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO;IAErC,MAAM,CAAC,YAAY,CACf,oBAAoB,EACpB;QACI,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACP,yFAAyF;cACvF,4FAA4F;cAC5F,yFAAyF;cACzF,yFAAyF;cACzF,mDAAmD;QACzD,WAAW,EAAE;YACT,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;gBACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;aAC7B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mDAAmD,CAAC;YACxE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;SACrF;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC;YACzC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAA2C,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YACtH,KAAK,EAAE,KAAK,IAAI,MAAM;SACzB,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,yBAAyB,EACzB;QACI,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,4HAA4H;QACzI,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;SACpC;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,MAAM,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,2BAA2B,EAC3B;QACI,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,iIAAiI;QAC9I,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SAC5B;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACtC,MAAM,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,2BAA2B,EAC3B;QACI,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,+JAA+J;QAC5K,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;SACvB;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QACvC,MAAM,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,sBAAsB,EACtB;QACI,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,gKAAgK;QAC7K,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;SAC7F;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QAC9B,MAAM,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CACL,CAAC;AACN,CAAC"}
+{"version":3,"file":"agent-packages.js","sourceRoot":"","sources":["../../../src/tools/agent-packages.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAE7E;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAiB,EAAE,GAAkB;IAC3E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IAEpB,MAAM,CAAC,YAAY,CACf,qBAAqB,EACrB;QACI,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACP,yFAAyF;cACvF,4FAA4F;cAC5F,yCAAyC;QAC/C,WAAW,EAAE,EAAE;KAClB,EACD,cAAc,CAAC,KAAK,IAAI,EAAE;QACtB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC/C,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,mBAAmB,EACnB;QACI,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,oGAAoG;QACjH,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;YAC3G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YAChF,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+EAA+E,CAAC;SACzI;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,YAAY,IAAI,mCAAmC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,MAAM,MAAM,GAA4B,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC5D,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,wBAAwB,EACxB;QACI,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,oIAAoI;QACjJ,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6DAA6D,CAAC;YACpG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YACnE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;SACnG;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QACxD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACtI,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC,CACL,CAAC;IAEF,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO;IAErC,MAAM,CAAC,YAAY,CACf,oBAAoB,EACpB;QACI,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACP,yFAAyF;cACvF,4FAA4F;cAC5F,yFAAyF;cACzF,yFAAyF;cACzF,mDAAmD;QACzD,WAAW,EAAE;YACT,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;gBACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;aAC7B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mDAAmD,CAAC;YACxE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;SACrF;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC;YACzC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAA2C,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YACtH,KAAK,EAAE,KAAK,IAAI,MAAM;SACzB,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,yBAAyB,EACzB;QACI,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,4HAA4H;QACzI,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;SACpC;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,MAAM,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,iCAAiC,EACjC;QACI,KAAK,EAAE,+CAA+C;QACtD,WAAW,EACP,4FAA4F;cAC1F,6FAA6F;cAC7F,yEAAyE;QAC/E,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;YACpG,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,4EAA4E,CAAC;SAClI;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE;QACpD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3H,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,2BAA2B,EAC3B;QACI,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,iIAAiI;QAC9I,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sFAAsF,CAAC;SAChJ;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QAC7C,MAAM,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChF,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,2BAA2B,EAC3B;QACI,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,+JAA+J;QAC5K,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;YACpB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+EAA+E,CAAC;SACzI;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;QAC9C,MAAM,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACjF,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,sBAAsB,EACtB;QACI,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,gKAAgK;QAC7K,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;YAC1F,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iGAAiG,CAAC;SAC3J;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,MAAM,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CACL,CAAC;AACN,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pilotswarm",
-    "version": "0.5.38",
+    "version": "0.5.39",
     "description": "PilotSwarm application package: terminal UI, browser portal + Web API server, and MCP server — one install, three bins.",
     "type": "module",
     "license": "MIT",
@@ -81,7 +81,7 @@
         "ink": "^6.8.0",
         "jose": "^6.2.2",
         "mermaid": "^11.16.0",
-        "pilotswarm-sdk": "0.5.38",
+        "pilotswarm-sdk": "0.5.39",
         "react": "^19.2.4",
         "react-dom": "^19.2.4",
         "ws": "^8.18.2"

package/tui/src/node-sdk-transport.js

@@ -19,6 +19,7 @@ import {
     ATTACHMENTS_MAX_TOTAL_BYTES,
     PgSessionCatalog,
     publishAgentPackageDir,
+    publishPackedAgentPackage,
     deleteAgentPackageEverywhere,
     fetchAgentPackageTarGz,
     readAgentPackageTarGz,
@@ -780,7 +781,13 @@ export class NodeSdkTransport {
     }
 
     _requirePrincipal(owner, isAdmin) {
-        if (owner) return { provider: owner.provider, subject: owner.subject };
+        // Shape-checked, not just truthy: the portal runtime always passes a
+        // real principal here, but a caller that skips the owner/isAdmin args
+        // (direct-mode TUI) must fail closed with this clear error — never
+        // flow a garbage object into the registry as an identity.
+        if (owner && typeof owner.provider === "string" && typeof owner.subject === "string") {
+            return { provider: owner.provider, subject: owner.subject };
+        }
         if (isAdmin) return null;   // anonymous deployments: admin-equivalent
         const err = new Error("agent-package operations require an authenticated principal");
         err.code = "FORBIDDEN";
@@ -821,10 +828,36 @@ export class NodeSdkTransport {
         return ctx.catalog.listAgentPackages(this._requirePrincipal(owner, isAdmin), Boolean(isAdmin));
     }
 
-    async getAgentPackage(name, owner, isAdmin) {
+    /**
+     * Normalize wire selector params ({scope, ownerProvider, ownerSubject})
+     * into the catalog's AgentPackageSelector — which same-named copy an op
+     * means. Authorization is NOT decided here: the registry procs re-check
+     * ownership against the RESOLVED row, so a non-admin naming someone
+     * else's copy still gets FORBIDDEN/invisible from the database.
+     */
+    _packageSelector(selector, isAdmin = false) {
+        if (!selector || typeof selector !== "object") return null;
+        const scope = selector.scope === "shared" || selector.scope === "user" ? selector.scope : null;
+        const provider = typeof selector.ownerProvider === "string" && selector.ownerProvider.trim() ? selector.ownerProvider.trim() : null;
+        const subject = typeof selector.ownerSubject === "string" && selector.ownerSubject.trim() ? selector.ownerSubject.trim() : null;
+        // The owner override targets ANOTHER user's copy, which only an admin
+        // may do. For a non-admin it is dropped, NOT honored-then-denied:
+        // resolving a foreign package and letting the proc answer FORBIDDEN vs
+        // NOT_FOUND would be an existence oracle. Dropped, a non-admin's
+        // selector falls back to own-then-shared resolution, which can only
+        // ever reach their own or shared packages.
+        const owner = isAdmin && provider && subject ? { provider, subject } : null;
+        if (!scope && !owner) return null;
+        return {
+            ...(scope ? { scope } : {}),
+            ...(owner ? { owner } : {}),
+        };
+    }
+
+    async getAgentPackage(name, owner, isAdmin, selector = null) {
         const ctx = await this._agentPackagesContext();
         if (!ctx) return null;
-        return ctx.catalog.getAgentPackage(name, this._requirePrincipal(owner, isAdmin), Boolean(isAdmin));
+        return ctx.catalog.getAgentPackage(name, this._requirePrincipal(owner, isAdmin), Boolean(isAdmin), this._packageSelector(selector, Boolean(isAdmin)));
     }
 
 
@@ -843,38 +876,100 @@ export class NodeSdkTransport {
         return ctx.catalog.listWorkers();
     }
 
-    async setAgentPackageScope(name, scope, owner, isAdmin) {
+    async setAgentPackageScope(name, scope, owner, isAdmin, selector = null) {
         const ctx = await this._agentPackagesContext();
         if (!ctx) throw new Error("agent packages are not available on this deployment");
-        await this._mapAgentPackageErrors(() => ctx.catalog.setAgentPackageScope(name, scope === "shared" ? "shared" : "user",
-            this._requirePrincipal(owner, isAdmin), Boolean(isAdmin)));
+        const targetScope = scope === "shared" ? "shared" : "user";
+        const ownerOverride = this._packageSelector(selector, Boolean(isAdmin))?.owner ?? null;
+        // The SOURCE copy is implied by the direction, but the two directions
+        // need different selectors — and passing an explicit scope selector
+        // DISABLES the SQL admin/NULL-owner fallback (it fires only when the
+        // selector scope is NULL), so name-only is used wherever it resolves
+        // correctly:
+        //   demote (target user): must move the globally-unique SHARED copy,
+        //     so select scope 'shared' explicitly — the shared row is unique,
+        //     no owner fallback is needed to find it.
+        //   promote (target shared): ordinary own-copy-then-shared resolution
+        //     already lands on the caller's own USER copy, and keeping the
+        //     selector NULL preserves the admin/NULL-owner fallback for
+        //     packages minted without an owner. An admin acting on ANOTHER
+        //     user's copy passes that owner explicitly.
+        let sourceSelector = null;
+        if (targetScope === "user") {
+            sourceSelector = { scope: "shared", ...(ownerOverride ? { owner: ownerOverride } : {}) };
+        } else if (ownerOverride) {
+            sourceSelector = { scope: "user", owner: ownerOverride };
+        }
+        await this._mapAgentPackageErrors(() => ctx.catalog.setAgentPackageScope(name, targetScope,
+            this._requirePrincipal(owner, isAdmin), Boolean(isAdmin), sourceSelector));
         return { ok: true };
     }
 
-    async setAgentPackageEnabled(name, enabled, owner, isAdmin) {
+    async setAgentPackageEnabled(name, enabled, owner, isAdmin, selector = null) {
         const ctx = await this._agentPackagesContext();
         if (!ctx) throw new Error("agent packages are not available on this deployment");
         await this._mapAgentPackageErrors(() => ctx.catalog.setAgentPackageEnabled(name, Boolean(enabled),
-            this._requirePrincipal(owner, isAdmin), Boolean(isAdmin)));
+            this._requirePrincipal(owner, isAdmin), Boolean(isAdmin), this._packageSelector(selector, Boolean(isAdmin))));
         return { ok: true };
     }
 
-    async pinAgentPackageVersion(name, semver, owner, isAdmin) {
+    async pinAgentPackageVersion(name, semver, owner, isAdmin, selector = null) {
         const ctx = await this._agentPackagesContext();
         if (!ctx) throw new Error("agent packages are not available on this deployment");
         await this._mapAgentPackageErrors(() => ctx.catalog.pinAgentPackageVersion(name, String(semver || ""),
-            this._requirePrincipal(owner, isAdmin), Boolean(isAdmin)));
+            this._requirePrincipal(owner, isAdmin), Boolean(isAdmin), this._packageSelector(selector, Boolean(isAdmin))));
         return { ok: true };
     }
 
-    async deleteAgentPackage(name, owner, isAdmin) {
+    async deleteAgentPackage(name, owner, isAdmin, selector = null) {
         const ctx = await this._agentPackagesContext();
         if (!ctx) throw new Error("agent packages are not available on this deployment");
-        await this._mapAgentPackageErrors(() => deleteAgentPackageEverywhere(ctx, name, this._requirePrincipal(owner, isAdmin), Boolean(isAdmin)));
+        await this._mapAgentPackageErrors(() => deleteAgentPackageEverywhere(ctx, name, this._requirePrincipal(owner, isAdmin), Boolean(isAdmin), this._packageSelector(selector, Boolean(isAdmin))));
         this._agentPkgTarCache?.clear?.();
         return { ok: true };
     }
 
+    /**
+     * Publish an existing version's exact bytes into the same-named package
+     * in the OTHER scope. This is the "update the shared package from my
+     * tested user copy" path the console's promote button cannot express —
+     * promote MOVES a row and refuses when the shared name already exists;
+     * this adds a version to it instead.
+     */
+    async republishAgentPackageVersion(name, semver, targetScope, owner, isAdmin) {
+        const ctx = await this._agentPackagesContext();
+        if (!ctx) throw new Error("agent packages are not available on this deployment");
+        const principal = this._requirePrincipal(owner, isAdmin);
+        const target = targetScope === "shared" ? "shared" : "user";
+        const sourceScope = target === "shared" ? "user" : "shared";
+        return await this._mapAgentPackageErrors(async () => {
+            const detail = await ctx.catalog.getAgentPackage(name, principal, Boolean(isAdmin), { scope: sourceScope });
+            if (!detail) {
+                const err = new Error(`AGENT_PACKAGE_NOT_FOUND: no ${sourceScope}-scope package named "${name}" to republish from`);
+                throw err;
+            }
+            const wanted = String(semver || "").trim();
+            const version = wanted
+                ? detail.versions.find((v) => v.semver === wanted)
+                : detail.versions.find((v) => v.versionId === detail.activeVersionId) ?? detail.versions[0];
+            if (!version) {
+                throw new Error(`AGENT_PACKAGE_VERSION_NOT_FOUND: ${name}@${wanted || "(active)"} is not a published ${sourceScope} version`);
+            }
+            const targz = await fetchAgentPackageTarGz(ctx.artifactStore, version.artifactFilename, version.sha256);
+            const outcome = await publishPackedAgentPackage(ctx, {
+                manifest: version.manifest,
+                targz,
+                sha256: version.sha256,
+                scope: target,
+                owner: principal,
+                createdBy: `${this._createdByLabel(owner)} (republish of ${sourceScope} ${name}@${version.semver})`,
+                isAdmin: Boolean(isAdmin),
+            });
+            const { manifest: _m, ...summary } = outcome;
+            return summary;
+        });
+    }
+
     /** Inline-files upload → the one publish pipeline. ≤ 2 MB decoded. */
     async uploadAgentPackage(files, scope, owner, isAdmin) {
         const ctx = await this._agentPackagesContext();
@@ -943,10 +1038,10 @@ export class NodeSdkTransport {
 
     // ── Agent packages: workspace viewer (tree + file preview) ──
 
-    async _agentPackageEntries(name, semver, owner, isAdmin) {
+    async _agentPackageEntries(name, semver, owner, isAdmin, selector = null) {
         const ctx = await this._agentPackagesContext();
         if (!ctx) throw new Error("agent packages are not available on this deployment");
-        const detail = await ctx.catalog.getAgentPackage(name, this._requirePrincipal(owner, isAdmin), Boolean(isAdmin));
+        const detail = await ctx.catalog.getAgentPackage(name, this._requirePrincipal(owner, isAdmin), Boolean(isAdmin), this._packageSelector(selector, Boolean(isAdmin)));
         if (!detail) throw Object.assign(new Error(`package "${name}" not found`), { code: "NOT_FOUND" });
         const version = semver
             ? detail.versions.find((v) => v.semver === semver)
@@ -975,8 +1070,8 @@ export class NodeSdkTransport {
         return { entries, version };
     }
 
-    async getAgentPackageTree(name, semver, owner, isAdmin) {
-        const { entries, version } = await this._agentPackageEntries(name, semver, owner, isAdmin);
+    async getAgentPackageTree(name, semver, owner, isAdmin, selector = null) {
+        const { entries, version } = await this._agentPackageEntries(name, semver, owner, isAdmin, selector);
         const dirs = new Set();
         const files = [];
         for (const entry of entries) {
@@ -994,8 +1089,8 @@ export class NodeSdkTransport {
         };
     }
 
-    async getAgentPackageFile(name, semver, filePath, owner, isAdmin) {
-        const { entries, version } = await this._agentPackageEntries(name, semver, owner, isAdmin);
+    async getAgentPackageFile(name, semver, filePath, owner, isAdmin, selector = null) {
+        const { entries, version } = await this._agentPackageEntries(name, semver, owner, isAdmin, selector);
         const rel = String(filePath || "");
         const entry = entries.find((candidate) => candidate.name === rel);
         if (!entry) throw Object.assign(new Error(`"${rel}" is not in ${name}@${version.semver}`), { code: "NOT_FOUND" });

package/ui/core/src/controller.js

@@ -51,6 +51,22 @@ import {
 import { findArtifactEntry } from "./state.js";
 import { getTheme, listThemes } from "./themes/index.js";
 
+/**
+ * The copy selector for a package LIST row: which same-named copy it is.
+ * Scope shadowing means one name can be a shared package AND a user copy at
+ * once; the row's scope (+ owner, for admins looking at someone else's user
+ * copy) is what disambiguates every read and action on it.
+ */
+export function packageRowSelector(row) {
+    if (!row) return null;
+    return {
+        ...(row.scope === "shared" || row.scope === "user" ? { scope: row.scope } : {}),
+        ...(row.scope === "user" && row.owner?.provider && row.owner?.subject
+            ? { owner: { provider: row.owner.provider, subject: row.owner.subject } }
+            : {}),
+    };
+}
+
 const ORCHESTRATION_STATS_REFRESH_MS = 20_000;
 const SESSION_STATS_REFRESH_MS = 20_000;
 const FLEET_STATS_REFRESH_MS = 30_000;
@@ -3062,27 +3078,39 @@ export class PilotSwarmUiController {
         }
     }
 
-    /** Select a package: loads its detail and workspace tree. */
-    async selectAdminPackage(name) {
-        this.dispatch({ type: "admin/packages/select", name });
+    /**
+     * Select a package: loads its detail and workspace tree.
+     *
+     * `selector` = { scope, owner? } from the clicked ROW. One name can be
+     * two packages at once (scope shadowing: a shared copy plus a user
+     * copy), and without the selector every read here resolved "own copy
+     * first" — both rows showed the same history, and actions could land on
+     * the copy the user was not looking at.
+     */
+    async selectAdminPackage(name, selector = null) {
+        this.dispatch({ type: "admin/packages/select", name, selector });
         if (!name) return;
+        // Selection token minted by the reducer just now; every response from
+        // this selection carries it so a slow response for another COPY of
+        // the same name (scope shadowing) can never land on this one.
+        const seq = this.getState().admin?.packages?.selectionSeq ?? 0;
         await Promise.all([
             (async () => {
                 try {
-                    const detail = await this.transport.getAgentPackage(name);
+                    const detail = await this.transport.getAgentPackage(name, selector);
                     if (!detail) throw new Error(`package "${name}" not found`);
-                    this.dispatch({ type: "admin/packages/detail/loaded", name, detail });
+                    this.dispatch({ type: "admin/packages/detail/loaded", name, seq, detail });
                 } catch (error) {
-                    this.dispatch({ type: "admin/packages/detail/loadFailed", name, error: error?.message || String(error) });
+                    this.dispatch({ type: "admin/packages/detail/loadFailed", name, seq, error: error?.message || String(error) });
                 }
             })(),
             (async () => {
                 try {
-                    const tree = await this.transport.getAgentPackageTree(name);
+                    const tree = await this.transport.getAgentPackageTree(name, null, selector);
                     // A slower tree for a PREVIOUS selection must not clobber
                     // the current package's workspace (stale-response race).
-                    if (this.getState().admin?.packages?.selectedName !== name) return;
-                    this.dispatch({ type: "admin/packages/tree/loaded", name, tree });
+                    if ((this.getState().admin?.packages?.selectionSeq ?? 0) !== seq) return;
+                    this.dispatch({ type: "admin/packages/tree/loaded", name, seq, tree });
                     // The package's own CHANGELOG, when it ships one. Loaded
                     // alongside the tree rather than on demand because it is
                     // the first thing a reviewer wants: what changed, why, and
@@ -3091,11 +3119,12 @@ export class PilotSwarmUiController {
                     if (hasChangelog && typeof this.transport.getAgentPackageFile === "function") {
                         void (async () => {
                             try {
-                                const file = await this.transport.getAgentPackageFile(name, null, "CHANGELOG.md");
-                                if (this.getState().admin?.packages?.selectedName !== name) return;
+                                const file = await this.transport.getAgentPackageFile(name, null, "CHANGELOG.md", selector);
+                                if ((this.getState().admin?.packages?.selectionSeq ?? 0) !== seq) return;
                                 this.dispatch({
                                     type: "admin/packages/changelog/loaded",
                                     name,
+                                    seq,
                                     content: typeof file === "string" ? file : (file?.content ?? file?.text ?? ""),
                                 });
                             } catch {
@@ -3104,13 +3133,13 @@ export class PilotSwarmUiController {
                             }
                         })();
                     } else {
-                        this.dispatch({ type: "admin/packages/changelog/loaded", name, content: null });
+                        this.dispatch({ type: "admin/packages/changelog/loaded", name, seq, content: null });
                     }
                     // Default preview: plugin.json (always present in a valid package).
                     const first = tree?.files?.find((f) => f.path === "plugin.json") ?? tree?.files?.[0];
                     if (first) void this.selectAdminPackageFile(first.path);
                 } catch (error) {
-                    this.dispatch({ type: "admin/packages/tree/loadFailed", name, error: error?.message || String(error) });
+                    this.dispatch({ type: "admin/packages/tree/loadFailed", name, seq, error: error?.message || String(error) });
                 }
             })(),
         ]);
@@ -3121,14 +3150,22 @@ export class PilotSwarmUiController {
         const pkgs = this.getState().admin?.packages;
         if (!pkgs?.list?.length) return;
         // Same shared→user projection the settings tree renders, so j/k walks
-        // the list in VISUAL order regardless of transport ordering.
-        const names = [
+        // the list in VISUAL order regardless of transport ordering. Rows are
+        // COPIES, not names: a shadowed name appears once per scope.
+        const rows = [
             ...pkgs.list.filter((p) => p.scope === "shared"),
             ...pkgs.list.filter((p) => p.scope !== "shared"),
-        ].map((p) => p.name);
-        const index = names.indexOf(pkgs.selectedName);
-        const next = names[Math.min(names.length - 1, Math.max(0, (index < 0 ? (delta > 0 ? -1 : 0) : index) + delta))];
-        if (next && next !== pkgs.selectedName) await this.selectAdminPackage(next);
+        ];
+        const keyOf = (row) => `${row.name}\u0001${row.scope ?? ""}\u0001${row.owner?.subject ?? ""}`;
+        const selectedKey = pkgs.selectedName
+            ? `${pkgs.selectedName}\u0001${pkgs.selectedSelector?.scope ?? ""}\u0001${pkgs.selectedSelector?.owner?.subject ?? ""}`
+            : null;
+        let index = rows.findIndex((row) => keyOf(row) === selectedKey);
+        if (index < 0) index = rows.findIndex((row) => row.name === pkgs.selectedName);
+        const next = rows[Math.min(rows.length - 1, Math.max(0, (index < 0 ? (delta > 0 ? -1 : 0) : index) + delta))];
+        if (next && (next.name !== pkgs.selectedName || keyOf(next) !== selectedKey)) {
+            await this.selectAdminPackage(next.name, packageRowSelector(next));
+        }
     }
 
     toggleAdminPackageDir(dir) {
@@ -3139,12 +3176,17 @@ export class PilotSwarmUiController {
         const pkgs = this.getState().admin?.packages;
         const name = pkgs?.selectedName;
         if (!name || !filePath) return;
+        // Tag the preview with the current selection token so a slow file for
+        // one copy can't render under another copy of the same name (their
+        // file paths are identical — both ship plugin.json).
+        const seq = pkgs?.selectionSeq ?? 0;
+        const selector = pkgs?.selectedSelector ?? null;
         this.dispatch({ type: "admin/packages/file/loading", path: filePath });
         try {
-            const file = await this.transport.getAgentPackageFile(name, null, filePath);
-            this.dispatch({ type: "admin/packages/file/loaded", file });
+            const file = await this.transport.getAgentPackageFile(name, null, filePath, selector);
+            this.dispatch({ type: "admin/packages/file/loaded", seq, file });
         } catch (error) {
-            this.dispatch({ type: "admin/packages/file/loadFailed", path: filePath, error: error?.message || String(error) });
+            this.dispatch({ type: "admin/packages/file/loadFailed", seq, path: filePath, error: error?.message || String(error) });
         }
     }
 
@@ -3157,32 +3199,53 @@ export class PilotSwarmUiController {
     async runAdminPackageAction(kind, arg = null) {
         const pkgs = this.getState().admin?.packages;
         const name = pkgs?.selectedName;
+        const selector = pkgs?.selectedSelector ?? null;
         if (!name) return;
         this.dispatch({ type: "admin/packages/action/pending", action: kind });
         try {
             switch (kind) {
                 case "promote":
-                    await this.transport.setAgentPackageScope(name, "shared");
+                    await this.transport.setAgentPackageScope(name, "shared", selector);
                     break;
                 case "demote":
-                    await this.transport.setAgentPackageScope(name, "user");
+                    await this.transport.setAgentPackageScope(name, "user", selector);
+                    break;
+                // Publish the selected copy's version (arg, default active)
+                // into the same-named package in the OTHER scope. THE update
+                // path when the shared name already exists — promote can only
+                // move a row to an unused name.
+                case "republish":
+                    await this.transport.republishAgentPackageVersion(
+                        name, arg, selector?.scope === "shared" ? "user" : "shared",
+                    );
                     break;
                 case "pin":
-                    await this.transport.pinAgentPackageVersion(name, arg);
+                    await this.transport.pinAgentPackageVersion(name, arg, selector);
                     break;
                 case "enable":
                 case "disable":
-                    await this.transport.setAgentPackageEnabled(name, kind === "enable");
+                    await this.transport.setAgentPackageEnabled(name, kind === "enable", selector);
                     break;
                 case "delete":
-                    await this.transport.deleteAgentPackage(name);
+                    await this.transport.deleteAgentPackage(name, selector);
                     break;
                 default:
                     throw new Error(`unknown package action: ${kind}`);
             }
             this.dispatch({ type: "admin/packages/action/done" });
             await this.refreshAdminAgentPackages();
-            if (kind !== "delete") await this.selectAdminPackage(name);
+            // Re-select the copy that still exists. promote/demote MOVE the row
+            // to the other scope, so the pre-action selector now points at a
+            // copy that is gone — re-selecting it would error the pane with
+            // "package not found". Every other action leaves the copy in place.
+            if (kind !== "delete") {
+                const nextSelector = kind === "promote"
+                    ? { scope: "shared", ...(selector?.owner ? { owner: selector.owner } : {}) }
+                    : kind === "demote"
+                        ? { scope: "user", ...(selector?.owner ? { owner: selector.owner } : {}) }
+                        : selector;
+                await this.selectAdminPackage(name, nextSelector);
+            }
         } catch (error) {
             this.dispatch({ type: "admin/packages/action/failed", error: error?.message || String(error) });
         }
@@ -7225,7 +7288,14 @@ export class PilotSwarmUiController {
     }
 
     setFocus(focusRegion) {
-        this.dispatch({ type: "ui/focus", focusRegion: normalizeFocusRegion(focusRegion, this.getCurrentLayout()) });
+        // Carry the raw request alongside the normalized region: on a phone a
+        // workspace region (sessions/chat) normalizes to inspector, and the
+        // mobile follow-focus effect must not read that as "open diagnostics".
+        this.dispatch({
+            type: "ui/focus",
+            focusRegion: normalizeFocusRegion(focusRegion, this.getCurrentLayout()),
+            requestedFocusRegion: focusRegion,
+        });
     }
 
     focusNext() {

package/ui/core/src/layout.js

@@ -57,6 +57,16 @@ export function getMaxSessionPaneHeight(totalHeight, bodyHeight) {
     return Math.max(MIN_SESSION_PANE_HEIGHT, Math.min(maxByChatMinimum, maxByWindow));
 }
 
+export function getDiagnosticsSplitAdjustBounds(columnHeight, dividerHeight) {
+    const height = Math.max(0, Number(columnHeight) || 0);
+    const divider = clamp(Math.max(0, Number(dividerHeight) || 0), 0, height);
+    const minAdjust = -(height / 2);
+    return {
+        minAdjust,
+        maxAdjust: Math.max(minAdjust, (height / 2) - divider),
+    };
+}
+
 export function computeLegacyLayout(viewport, paneAdjust = 0, promptRows = 1, sessionPaneAdjust = 0, activityPaneAdjust = 0, fullscreenPane = null) {
     const safeViewport = normalizeViewport(viewport);
     const totalWidth = safeViewport.width;