pilotswarm 0.5.38 → 0.5.40

package/mcp/dist/src/tools/agent-packages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-packages.d.ts","sourceRoot":"","sources":["../../../src/tools/agent-packages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,QAwJ9E"}
+{"version":3,"file":"agent-packages.d.ts","sourceRoot":"","sources":["../../../src/tools/agent-packages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,QAkL9E"}

package/mcp/dist/src/tools/agent-packages.js

@@ -32,14 +32,16 @@ export function registerAgentPackageTools(server, ctx) {
             name: z.string().min(1).describe("Package name"),
             include_tree: z.boolean().optional().describe("Also return the file tree of the active (or given) version"),
             semver: z.string().optional().describe("Version for the tree (default: active)"),
+            scope: z.enum(["shared", "user"]).optional().describe("Which same-named copy (scope shadowing): default walks your copy, then shared"),
         },
-    }, withToolErrors(async ({ name, include_tree, semver }) => {
-        const detail = await ops.getAgentPackage({ name });
+    }, withToolErrors(async ({ name, include_tree, semver, scope }) => {
+        const sel = scope ? { scope } : {};
+        const detail = await ops.getAgentPackage({ name, ...sel });
         if (!detail)
             return errorResult(`package "${name}" not found or not visible to you`, { name });
         const result = { package: detail };
         if (include_tree) {
-            result.tree = await ops.getAgentPackageTree({ name, ...(semver ? { semver } : {}) });
+            result.tree = await ops.getAgentPackageTree({ name, ...(semver ? { semver } : {}), ...sel });
         }
         return jsonResult(result);
     }));
@@ -50,9 +52,10 @@ export function registerAgentPackageTools(server, ctx) {
             name: z.string().min(1).describe("Package name"),
             file_path: z.string().min(1).describe("File path inside the package (e.g. agents/triager.agent.md)"),
             semver: z.string().optional().describe("Version (default: active)"),
+            scope: z.enum(["shared", "user"]).optional().describe("Which same-named copy (scope shadowing)"),
         },
-    }, withToolErrors(async ({ name, file_path, semver }) => {
-        const file = await ops.getAgentPackageFile({ name, filePath: file_path, ...(semver ? { semver } : {}) });
+    }, withToolErrors(async ({ name, file_path, semver, scope }) => {
+        const file = await ops.getAgentPackageFile({ name, filePath: file_path, ...(semver ? { semver } : {}), ...(scope ? { scope } : {}) });
         return jsonResult(file);
     }));
     if (ctx.agentMgmt !== "full")
@@ -89,16 +92,31 @@ export function registerAgentPackageTools(server, ctx) {
         await ops.setAgentPackageScope({ name, scope });
         return jsonResult({ ok: true, name, scope });
     }));
+    server.registerTool("republish_agent_package_version", {
+        title: "Republish Agent Package Version Across Scopes",
+        description: "Publish an existing version's exact bytes into the same-named package in the other scope. "
+            + "THE update path for an already-published shared package: promote can only move a row to an "
+            + "unused name, this adds a version to the existing one. Creator or admin.",
+        inputSchema: {
+            name: z.string().min(1),
+            semver: z.string().optional().describe("Source version (default: the source copy's active version)"),
+            target_scope: z.enum(["shared", "user"]).describe("Destination scope; the source is the same-named package in the other scope"),
+        },
+    }, withToolErrors(async ({ name, semver, target_scope }) => {
+        const outcome = await ops.republishAgentPackageVersion({ name, ...(semver ? { semver } : {}), targetScope: target_scope });
+        return jsonResult(outcome);
+    }));
     server.registerTool("pin_agent_package_version", {
         title: "Pin Agent Package Version",
         description: "Point the package at a published version (rollback/roll-forward). The fleet converges on the next epoch poll. Creator or admin.",
         inputSchema: {
             name: z.string().min(1),
             semver: z.string().min(1),
+            scope: z.enum(["shared", "user"]).optional().describe("Which same-named copy to pin (scope shadowing): default walks your copy, then shared"),
         },
-    }, withToolErrors(async ({ name, semver }) => {
-        await ops.pinAgentPackageVersion({ name, semver });
-        return jsonResult({ ok: true, name, active: semver });
+    }, withToolErrors(async ({ name, semver, scope }) => {
+        await ops.pinAgentPackageVersion({ name, semver, ...(scope ? { scope } : {}) });
+        return jsonResult({ ok: true, name, active: semver, ...(scope ? { scope } : {}) });
     }));
     server.registerTool("set_agent_package_enabled", {
         title: "Enable / Disable Agent Package",
@@ -106,10 +124,11 @@ export function registerAgentPackageTools(server, ctx) {
         inputSchema: {
             name: z.string().min(1),
             enabled: z.boolean(),
+            scope: z.enum(["shared", "user"]).optional().describe("Which same-named copy (scope shadowing): default walks your copy, then shared"),
         },
-    }, withToolErrors(async ({ name, enabled }) => {
-        await ops.setAgentPackageEnabled({ name, enabled });
-        return jsonResult({ ok: true, name, enabled });
+    }, withToolErrors(async ({ name, enabled, scope }) => {
+        await ops.setAgentPackageEnabled({ name, enabled, ...(scope ? { scope } : {}) });
+        return jsonResult({ ok: true, name, enabled, ...(scope ? { scope } : {}) });
     }));
     server.registerTool("delete_agent_package", {
         title: "Delete Agent Package",
@@ -117,10 +136,11 @@ export function registerAgentPackageTools(server, ctx) {
         inputSchema: {
             name: z.string().min(1),
             confirm: z.literal(true).describe("Must be true — acknowledges the deletion is permanent"),
+            scope: z.enum(["shared", "user"]).optional().describe("Which same-named copy to delete (scope shadowing). Strongly recommended when both copies exist."),
         },
-    }, withToolErrors(async ({ name }) => {
-        await ops.deleteAgentPackage({ name });
-        return jsonResult({ ok: true, deleted: name });
+    }, withToolErrors(async ({ name, scope }) => {
+        await ops.deleteAgentPackage({ name, ...(scope ? { scope } : {}) });
+        return jsonResult({ ok: true, deleted: name, ...(scope ? { scope } : {}) });
     }));
 }
 //# sourceMappingURL=agent-packages.js.map

package/mcp/dist/src/tools/agent-packages.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-packages.js","sourceRoot":"","sources":["../../../src/tools/agent-packages.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAE7E;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAiB,EAAE,GAAkB;IAC3E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IAEpB,MAAM,CAAC,YAAY,CACf,qBAAqB,EACrB;QACI,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACP,yFAAyF;cACvF,4FAA4F;cAC5F,yCAAyC;QAC/C,WAAW,EAAE,EAAE;KAClB,EACD,cAAc,CAAC,KAAK,IAAI,EAAE;QACtB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC/C,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,mBAAmB,EACnB;QACI,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,oGAAoG;QACjH,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;YAC3G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;SACnF;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,YAAY,IAAI,mCAAmC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,MAAM,MAAM,GAA4B,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC5D,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,wBAAwB,EACxB;QACI,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,oIAAoI;QACjJ,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6DAA6D,CAAC;YACpG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;SACtE;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzG,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC,CACL,CAAC;IAEF,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO;IAErC,MAAM,CAAC,YAAY,CACf,oBAAoB,EACpB;QACI,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACP,yFAAyF;cACvF,4FAA4F;cAC5F,yFAAyF;cACzF,yFAAyF;cACzF,mDAAmD;QACzD,WAAW,EAAE;YACT,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;gBACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;aAC7B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mDAAmD,CAAC;YACxE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;SACrF;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC;YACzC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAA2C,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YACtH,KAAK,EAAE,KAAK,IAAI,MAAM;SACzB,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,yBAAyB,EACzB;QACI,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,4HAA4H;QACzI,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;SACpC;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,MAAM,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,2BAA2B,EAC3B;QACI,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,iIAAiI;QAC9I,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SAC5B;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACtC,MAAM,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,2BAA2B,EAC3B;QACI,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,+JAA+J;QAC5K,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;SACvB;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QACvC,MAAM,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,sBAAsB,EACtB;QACI,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,gKAAgK;QAC7K,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;SAC7F;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QAC9B,MAAM,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CACL,CAAC;AACN,CAAC"}
+{"version":3,"file":"agent-packages.js","sourceRoot":"","sources":["../../../src/tools/agent-packages.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAE7E;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAiB,EAAE,GAAkB;IAC3E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IAEpB,MAAM,CAAC,YAAY,CACf,qBAAqB,EACrB;QACI,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EACP,yFAAyF;cACvF,4FAA4F;cAC5F,yCAAyC;QAC/C,WAAW,EAAE,EAAE;KAClB,EACD,cAAc,CAAC,KAAK,IAAI,EAAE;QACtB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC/C,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,mBAAmB,EACnB;QACI,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,oGAAoG;QACjH,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;YAC3G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YAChF,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+EAA+E,CAAC;SACzI;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM;YAAE,OAAO,WAAW,CAAC,YAAY,IAAI,mCAAmC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,MAAM,MAAM,GAA4B,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC5D,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,wBAAwB,EACxB;QACI,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,oIAAoI;QACjJ,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6DAA6D,CAAC;YACpG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YACnE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;SACnG;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QACxD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACtI,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC,CACL,CAAC;IAEF,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO;IAErC,MAAM,CAAC,YAAY,CACf,oBAAoB,EACpB;QACI,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACP,yFAAyF;cACvF,4FAA4F;cAC5F,yFAAyF;cACzF,yFAAyF;cACzF,mDAAmD;QACzD,WAAW,EAAE;YACT,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;gBACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;aAC7B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mDAAmD,CAAC;YACxE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;SACrF;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC;YACzC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAA2C,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YACtH,KAAK,EAAE,KAAK,IAAI,MAAM;SACzB,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,yBAAyB,EACzB;QACI,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,4HAA4H;QACzI,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;SACpC;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,MAAM,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,iCAAiC,EACjC;QACI,KAAK,EAAE,+CAA+C;QACtD,WAAW,EACP,4FAA4F;cAC1F,6FAA6F;cAC7F,yEAAyE;QAC/E,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;YACpG,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,4EAA4E,CAAC;SAClI;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE;QACpD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3H,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,2BAA2B,EAC3B;QACI,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,iIAAiI;QAC9I,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sFAAsF,CAAC;SAChJ;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QAC7C,MAAM,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChF,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,2BAA2B,EAC3B;QACI,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,+JAA+J;QAC5K,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;YACpB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+EAA+E,CAAC;SACzI;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;QAC9C,MAAM,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACjF,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACf,sBAAsB,EACtB;QACI,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,gKAAgK;QAC7K,WAAW,EAAE;YACT,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;YAC1F,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iGAAiG,CAAC;SAC3J;KACJ,EACD,cAAc,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,MAAM,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CACL,CAAC;AACN,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pilotswarm",
-    "version": "0.5.38",
+    "version": "0.5.40",
     "description": "PilotSwarm application package: terminal UI, browser portal + Web API server, and MCP server — one install, three bins.",
     "type": "module",
     "license": "MIT",
@@ -81,7 +81,7 @@
         "ink": "^6.8.0",
         "jose": "^6.2.2",
         "mermaid": "^11.16.0",
-        "pilotswarm-sdk": "0.5.38",
+        "pilotswarm-sdk": "0.5.40",
         "react": "^19.2.4",
         "react-dom": "^19.2.4",
         "ws": "^8.18.2"

package/tui/src/node-sdk-transport.js

@@ -19,6 +19,7 @@ import {
     ATTACHMENTS_MAX_TOTAL_BYTES,
     PgSessionCatalog,
     publishAgentPackageDir,
+    publishPackedAgentPackage,
     deleteAgentPackageEverywhere,
     fetchAgentPackageTarGz,
     readAgentPackageTarGz,
@@ -780,7 +781,13 @@ export class NodeSdkTransport {
     }
 
     _requirePrincipal(owner, isAdmin) {
-        if (owner) return { provider: owner.provider, subject: owner.subject };
+        // Shape-checked, not just truthy: the portal runtime always passes a
+        // real principal here, but a caller that skips the owner/isAdmin args
+        // (direct-mode TUI) must fail closed with this clear error — never
+        // flow a garbage object into the registry as an identity.
+        if (owner && typeof owner.provider === "string" && typeof owner.subject === "string") {
+            return { provider: owner.provider, subject: owner.subject };
+        }
         if (isAdmin) return null;   // anonymous deployments: admin-equivalent
         const err = new Error("agent-package operations require an authenticated principal");
         err.code = "FORBIDDEN";
@@ -821,10 +828,36 @@ export class NodeSdkTransport {
         return ctx.catalog.listAgentPackages(this._requirePrincipal(owner, isAdmin), Boolean(isAdmin));
     }
 
-    async getAgentPackage(name, owner, isAdmin) {
+    /**
+     * Normalize wire selector params ({scope, ownerProvider, ownerSubject})
+     * into the catalog's AgentPackageSelector — which same-named copy an op
+     * means. Authorization is NOT decided here: the registry procs re-check
+     * ownership against the RESOLVED row, so a non-admin naming someone
+     * else's copy still gets FORBIDDEN/invisible from the database.
+     */
+    _packageSelector(selector, isAdmin = false) {
+        if (!selector || typeof selector !== "object") return null;
+        const scope = selector.scope === "shared" || selector.scope === "user" ? selector.scope : null;
+        const provider = typeof selector.ownerProvider === "string" && selector.ownerProvider.trim() ? selector.ownerProvider.trim() : null;
+        const subject = typeof selector.ownerSubject === "string" && selector.ownerSubject.trim() ? selector.ownerSubject.trim() : null;
+        // The owner override targets ANOTHER user's copy, which only an admin
+        // may do. For a non-admin it is dropped, NOT honored-then-denied:
+        // resolving a foreign package and letting the proc answer FORBIDDEN vs
+        // NOT_FOUND would be an existence oracle. Dropped, a non-admin's
+        // selector falls back to own-then-shared resolution, which can only
+        // ever reach their own or shared packages.
+        const owner = isAdmin && provider && subject ? { provider, subject } : null;
+        if (!scope && !owner) return null;
+        return {
+            ...(scope ? { scope } : {}),
+            ...(owner ? { owner } : {}),
+        };
+    }
+
+    async getAgentPackage(name, owner, isAdmin, selector = null) {
         const ctx = await this._agentPackagesContext();
         if (!ctx) return null;
-        return ctx.catalog.getAgentPackage(name, this._requirePrincipal(owner, isAdmin), Boolean(isAdmin));
+        return ctx.catalog.getAgentPackage(name, this._requirePrincipal(owner, isAdmin), Boolean(isAdmin), this._packageSelector(selector, Boolean(isAdmin)));
     }
 
 
@@ -843,38 +876,100 @@ export class NodeSdkTransport {
         return ctx.catalog.listWorkers();
     }
 
-    async setAgentPackageScope(name, scope, owner, isAdmin) {
+    async setAgentPackageScope(name, scope, owner, isAdmin, selector = null) {
         const ctx = await this._agentPackagesContext();
         if (!ctx) throw new Error("agent packages are not available on this deployment");
-        await this._mapAgentPackageErrors(() => ctx.catalog.setAgentPackageScope(name, scope === "shared" ? "shared" : "user",
-            this._requirePrincipal(owner, isAdmin), Boolean(isAdmin)));
+        const targetScope = scope === "shared" ? "shared" : "user";
+        const ownerOverride = this._packageSelector(selector, Boolean(isAdmin))?.owner ?? null;
+        // The SOURCE copy is implied by the direction, but the two directions
+        // need different selectors — and passing an explicit scope selector
+        // DISABLES the SQL admin/NULL-owner fallback (it fires only when the
+        // selector scope is NULL), so name-only is used wherever it resolves
+        // correctly:
+        //   demote (target user): must move the globally-unique SHARED copy,
+        //     so select scope 'shared' explicitly — the shared row is unique,
+        //     no owner fallback is needed to find it.
+        //   promote (target shared): ordinary own-copy-then-shared resolution
+        //     already lands on the caller's own USER copy, and keeping the
+        //     selector NULL preserves the admin/NULL-owner fallback for
+        //     packages minted without an owner. An admin acting on ANOTHER
+        //     user's copy passes that owner explicitly.
+        let sourceSelector = null;
+        if (targetScope === "user") {
+            sourceSelector = { scope: "shared", ...(ownerOverride ? { owner: ownerOverride } : {}) };
+        } else if (ownerOverride) {
+            sourceSelector = { scope: "user", owner: ownerOverride };
+        }
+        await this._mapAgentPackageErrors(() => ctx.catalog.setAgentPackageScope(name, targetScope,
+            this._requirePrincipal(owner, isAdmin), Boolean(isAdmin), sourceSelector));
         return { ok: true };
     }
 
-    async setAgentPackageEnabled(name, enabled, owner, isAdmin) {
+    async setAgentPackageEnabled(name, enabled, owner, isAdmin, selector = null) {
         const ctx = await this._agentPackagesContext();
         if (!ctx) throw new Error("agent packages are not available on this deployment");
         await this._mapAgentPackageErrors(() => ctx.catalog.setAgentPackageEnabled(name, Boolean(enabled),
-            this._requirePrincipal(owner, isAdmin), Boolean(isAdmin)));
+            this._requirePrincipal(owner, isAdmin), Boolean(isAdmin), this._packageSelector(selector, Boolean(isAdmin))));
         return { ok: true };
     }
 
-    async pinAgentPackageVersion(name, semver, owner, isAdmin) {
+    async pinAgentPackageVersion(name, semver, owner, isAdmin, selector = null) {
         const ctx = await this._agentPackagesContext();
         if (!ctx) throw new Error("agent packages are not available on this deployment");
         await this._mapAgentPackageErrors(() => ctx.catalog.pinAgentPackageVersion(name, String(semver || ""),
-            this._requirePrincipal(owner, isAdmin), Boolean(isAdmin)));
+            this._requirePrincipal(owner, isAdmin), Boolean(isAdmin), this._packageSelector(selector, Boolean(isAdmin))));
         return { ok: true };
     }
 
-    async deleteAgentPackage(name, owner, isAdmin) {
+    async deleteAgentPackage(name, owner, isAdmin, selector = null) {
         const ctx = await this._agentPackagesContext();
         if (!ctx) throw new Error("agent packages are not available on this deployment");
-        await this._mapAgentPackageErrors(() => deleteAgentPackageEverywhere(ctx, name, this._requirePrincipal(owner, isAdmin), Boolean(isAdmin)));
+        await this._mapAgentPackageErrors(() => deleteAgentPackageEverywhere(ctx, name, this._requirePrincipal(owner, isAdmin), Boolean(isAdmin), this._packageSelector(selector, Boolean(isAdmin))));
         this._agentPkgTarCache?.clear?.();
         return { ok: true };
     }
 
+    /**
+     * Publish an existing version's exact bytes into the same-named package
+     * in the OTHER scope. This is the "update the shared package from my
+     * tested user copy" path the console's promote button cannot express —
+     * promote MOVES a row and refuses when the shared name already exists;
+     * this adds a version to it instead.
+     */
+    async republishAgentPackageVersion(name, semver, targetScope, owner, isAdmin) {
+        const ctx = await this._agentPackagesContext();
+        if (!ctx) throw new Error("agent packages are not available on this deployment");
+        const principal = this._requirePrincipal(owner, isAdmin);
+        const target = targetScope === "shared" ? "shared" : "user";
+        const sourceScope = target === "shared" ? "user" : "shared";
+        return await this._mapAgentPackageErrors(async () => {
+            const detail = await ctx.catalog.getAgentPackage(name, principal, Boolean(isAdmin), { scope: sourceScope });
+            if (!detail) {
+                const err = new Error(`AGENT_PACKAGE_NOT_FOUND: no ${sourceScope}-scope package named "${name}" to republish from`);
+                throw err;
+            }
+            const wanted = String(semver || "").trim();
+            const version = wanted
+                ? detail.versions.find((v) => v.semver === wanted)
+                : detail.versions.find((v) => v.versionId === detail.activeVersionId) ?? detail.versions[0];
+            if (!version) {
+                throw new Error(`AGENT_PACKAGE_VERSION_NOT_FOUND: ${name}@${wanted || "(active)"} is not a published ${sourceScope} version`);
+            }
+            const targz = await fetchAgentPackageTarGz(ctx.artifactStore, version.artifactFilename, version.sha256);
+            const outcome = await publishPackedAgentPackage(ctx, {
+                manifest: version.manifest,
+                targz,
+                sha256: version.sha256,
+                scope: target,
+                owner: principal,
+                createdBy: `${this._createdByLabel(owner)} (republish of ${sourceScope} ${name}@${version.semver})`,
+                isAdmin: Boolean(isAdmin),
+            });
+            const { manifest: _m, ...summary } = outcome;
+            return summary;
+        });
+    }
+
     /** Inline-files upload → the one publish pipeline. ≤ 2 MB decoded. */
     async uploadAgentPackage(files, scope, owner, isAdmin) {
         const ctx = await this._agentPackagesContext();
@@ -943,10 +1038,10 @@ export class NodeSdkTransport {
 
     // ── Agent packages: workspace viewer (tree + file preview) ──
 
-    async _agentPackageEntries(name, semver, owner, isAdmin) {
+    async _agentPackageEntries(name, semver, owner, isAdmin, selector = null) {
         const ctx = await this._agentPackagesContext();
         if (!ctx) throw new Error("agent packages are not available on this deployment");
-        const detail = await ctx.catalog.getAgentPackage(name, this._requirePrincipal(owner, isAdmin), Boolean(isAdmin));
+        const detail = await ctx.catalog.getAgentPackage(name, this._requirePrincipal(owner, isAdmin), Boolean(isAdmin), this._packageSelector(selector, Boolean(isAdmin)));
         if (!detail) throw Object.assign(new Error(`package "${name}" not found`), { code: "NOT_FOUND" });
         const version = semver
             ? detail.versions.find((v) => v.semver === semver)
@@ -975,8 +1070,8 @@ export class NodeSdkTransport {
         return { entries, version };
     }
 
-    async getAgentPackageTree(name, semver, owner, isAdmin) {
-        const { entries, version } = await this._agentPackageEntries(name, semver, owner, isAdmin);
+    async getAgentPackageTree(name, semver, owner, isAdmin, selector = null) {
+        const { entries, version } = await this._agentPackageEntries(name, semver, owner, isAdmin, selector);
         const dirs = new Set();
         const files = [];
         for (const entry of entries) {
@@ -994,8 +1089,8 @@ export class NodeSdkTransport {
         };
     }
 
-    async getAgentPackageFile(name, semver, filePath, owner, isAdmin) {
-        const { entries, version } = await this._agentPackageEntries(name, semver, owner, isAdmin);
+    async getAgentPackageFile(name, semver, filePath, owner, isAdmin, selector = null) {
+        const { entries, version } = await this._agentPackageEntries(name, semver, owner, isAdmin, selector);
         const rel = String(filePath || "");
         const entry = entries.find((candidate) => candidate.name === rel);
         if (!entry) throw Object.assign(new Error(`"${rel}" is not in ${name}@${version.semver}`), { code: "NOT_FOUND" });
@@ -2016,6 +2111,31 @@ export class NodeSdkTransport {
         return this.mgmt.getSessionEventsBefore(sessionId, beforeSeq, limit, eventTypes);
     }
 
+    async getCanvasLive(sessionId) {
+        if (typeof this.mgmt.getCanvasLive !== "function") return [];
+        return this.mgmt.getCanvasLive(sessionId);
+    }
+
+    async getCanvasShareLink(sessionId, slot) {
+        if (typeof this.mgmt.getCanvasShareLink !== "function") return { exists: false };
+        return this.mgmt.getCanvasShareLink(sessionId, slot);
+    }
+
+    async resetCanvasShareLink(sessionId, slot, createdBy) {
+        if (typeof this.mgmt.resetCanvasShareLink !== "function") throw new Error("canvas share links unavailable");
+        return this.mgmt.resetCanvasShareLink(sessionId, slot, createdBy);
+    }
+
+    async resolveCanvasShareTokenHash(tokenHash) {
+        if (typeof this.mgmt.resolveCanvasShareTokenHash !== "function") return null;
+        return this.mgmt.resolveCanvasShareTokenHash(tokenHash);
+    }
+
+    async removeCanvasShareLink(sessionId, slot) {
+        if (typeof this.mgmt.removeCanvasShareLink !== "function") return { removed: false };
+        return this.mgmt.removeCanvasShareLink(sessionId, slot);
+    }
+
     emitLogEntry(entry) {
         if (!this._logBatch) this._logBatch = [];
         this._logBatch.push(entry);