@desplega.ai/agent-swarm 2.3.0 → 2.4.1

package/src/http/tasks.ts

@@ -37,6 +37,7 @@ import {
 } from "../be/db";
 import { modelProfileRefError, taskProfileError } from "../be/db/model-profiles";
 import { explicitModelErrorForAgent } from "../be/model-validation";
+import { hasSessionAccess, type SessionAccess } from "../be/session-shares";
 import {
   getTaskSteeringFields,
   markSteeringUndeliverable,
@@ -72,6 +73,7 @@ import {
   SteeringSourceSchema,
   SteerModeSchema,
   SteerResultSchema,
+  SUPERSEDED_WORKFLOW_TASK_REASON,
   splitLegacyModelAlias,
   TaskAttachmentSchema,
 } from "../types";
@@ -80,7 +82,15 @@ import { getRequestAuth } from "../utils/request-auth-context";
 import { scrubSecrets } from "../utils/secret-scrubber";
 import { rejectGuest } from "./request-principal";
 import { buildTaskRequestedBy, TaskRequestedBySchema } from "./requested-by";
-import { route } from "./route-def";
+import { bodyTask, route } from "./route-def";
+import {
+  canReadSession,
+  readableByFor,
+  resolveSessionActor,
+  SESSION_READ_DENIED,
+  SESSION_WRITE_DENIED,
+  sessionAccessFor,
+} from "./session-access";
 import { jsonError, parseBody } from "./utils";
 
 // ─── Response Schemas ────────────────────────────────────────────────────────
@@ -207,7 +217,7 @@ const listTasks = route({
   pattern: ["api", "tasks"],
   summary: "List tasks with filters",
   description:
-    "Returns tasks with the full `task` text replaced by a bounded `taskPreview` and completion/integration blobs dropped by default — list views only need the preview. Pass `fields=full` to restore the full `AgentTask`, or `fields=timeline` for the narrow shape the dashboard timeline draws. Fetch a single task in full via `GET /api/tasks/{id}`. `total` (the filtered row count, ignoring limit/offset) is computed only with `includeTotal=true`.",
+    "Returns tasks with the full `task` text replaced by a bounded `taskPreview` and completion/integration blobs dropped by default — list views only need the preview. Pass `fields=full` to restore the full `AgentTask`, or `fields=timeline` for the narrow shape the dashboard timeline draws. Every shape gives a user caller only tasks of sessions they can read. Fetch a single task in full via `GET /api/tasks/{id}`. `total` (the filtered row count, ignoring limit/offset) is computed only with `includeTotal=true`.",
   tags: ["Tasks"],
   query: z.object({
     /** Single status, or comma-separated list (e.g. "failed,cancelled"). */
@@ -263,6 +273,7 @@ const createTask = route({
   method: "post",
   path: "/api/tasks",
   pattern: ["api", "tasks"],
+  session: bodyTask("parentTaskId"),
   summary: "Create a new task",
   tags: ["Tasks"],
   body: z
@@ -340,6 +351,7 @@ const promoteDraftTaskRoute = route({
   method: "post",
   path: "/api/tasks/{id}/promote-draft",
   pattern: ["api", "tasks", null, "promote-draft"],
+  session: { taskParam: "id" },
   summary: "Promote a draft task out of the pre-dispatch draft state",
   description:
     "Transitions a `draft` task (#1240 — created with attachments still uploading) to its normal dispatch-eligible status: `offered` if it was offered to an agent, `pending` if it has an owning agent (the common case — UI-composer tasks default to Lead), otherwise `unassigned`. Called by the UI composer once its attachment upload batch settles, whether every file uploaded, some failed, or all failed — a draft must never be stranded by an upload error. Idempotent: calling it on a task that already left `draft` returns the current task unchanged rather than erroring, so a retried request is safe.",
@@ -357,6 +369,7 @@ const updateSession = route({
   method: "put",
   path: "/api/tasks/{id}/session",
   pattern: ["api", "tasks", null, "session"],
+  session: { taskParam: "id" },
   summary: "Update provider session ID and harness metadata for a task",
   tags: ["Tasks"],
   params: z.object({ id: z.string() }),
@@ -392,6 +405,7 @@ const cancelTaskRoute = route({
   method: "post",
   path: "/api/tasks/{id}/cancel",
   pattern: ["api", "tasks", null, "cancel"],
+  session: { taskParam: "id" },
   summary: "Cancel a pending or in-progress task",
   tags: ["Tasks"],
   params: z.object({ id: z.string() }),
@@ -407,6 +421,7 @@ const steerTaskRoute = route({
   method: "post",
   path: "/api/tasks/{id}/steer",
   pattern: ["api", "tasks", null, "steer"],
+  session: { taskParam: "id" },
   summary: "Deliver a steering message to a running task",
   tags: ["Tasks"],
   params: z.object({ id: z.string() }),
@@ -439,6 +454,7 @@ const getTaskSteeringMessagesRoute = route({
   method: "get",
   path: "/api/tasks/{id}/steering-messages",
   pattern: ["api", "tasks", null, "steering-messages"],
+  session: { taskParam: "id" },
   summary: "List steering messages for a task",
   tags: ["Tasks"],
   params: z.object({ id: z.string() }),
@@ -467,6 +483,7 @@ const markSteeringDeliveredRoute = route({
   method: "post",
   path: "/api/steering-messages/{id}/delivered",
   pattern: ["api", "steering-messages", null, "delivered"],
+  session: { steeringParam: "id" },
   summary: "Mark a steering message delivered",
   tags: ["Tasks"],
   params: z.object({ id: z.string() }),
@@ -492,6 +509,7 @@ const markSteeringHandledRoute = route({
   method: "post",
   path: "/api/steering-messages/{id}/handled",
   pattern: ["api", "steering-messages", null, "handled"],
+  session: { steeringParam: "id" },
   summary: "Mark a steering message handled",
   description:
     "Optionally accepts a JSON body `{ note?: string }` — a short acceptance note describing how the steering was incorporated, persisted as `handledNote`.",
@@ -517,6 +535,7 @@ const markSteeringUndeliverableRoute = route({
   method: "post",
   path: "/api/steering-messages/{id}/undeliverable",
   pattern: ["api", "steering-messages", null, "undeliverable"],
+  session: { steeringParam: "id" },
   summary: "Promote an undeliverable steering message",
   tags: ["Tasks"],
   params: z.object({ id: z.string() }),
@@ -542,6 +561,7 @@ const getTask = route({
   method: "get",
   path: "/api/tasks/{id}",
   pattern: ["api", "tasks", null],
+  session: { taskParam: "id" },
   summary: "Get task details with logs and attachments",
   description:
     "Returns the full `AgentTask` row decorated with `logs` (capped by `logsLimit`) and `attachments` (pointer-based artifacts stored on the task, ordered by `created_at`).",
@@ -553,6 +573,7 @@ const getTask = route({
   }),
   responses: {
     200: { description: "Task with logs and attachments", schema: GetTaskResponseSchema },
+    403: { description: "A user caller cannot read the task's session" },
     404: { description: "Task not found" },
   },
 });
@@ -561,6 +582,7 @@ const updateTaskProgressRoute = route({
   method: "post",
   path: "/api/tasks/{id}/progress",
   pattern: ["api", "tasks", null, "progress"],
+  session: { taskParam: "id" },
   summary: "Update task progress text",
   tags: ["Tasks"],
   params: z.object({ id: z.string() }),
@@ -579,6 +601,7 @@ const finishTask = route({
   method: "post",
   path: "/api/tasks/{id}/finish",
   pattern: ["api", "tasks", null, "finish"],
+  session: { taskParam: "id" },
   summary: "Mark task as completed or failed (runner endpoint)",
   tags: ["Tasks"],
   params: z.object({ id: z.string() }),
@@ -631,6 +654,7 @@ const pauseTaskRoute = route({
   method: "post",
   path: "/api/tasks/{id}/pause",
   pattern: ["api", "tasks", null, "pause"],
+  session: { taskParam: "id" },
   summary: "Pause an in-progress task",
   tags: ["Tasks"],
   params: z.object({ id: z.string() }),
@@ -646,6 +670,7 @@ const resumeTaskRoute = route({
   method: "post",
   path: "/api/tasks/{id}/resume",
   pattern: ["api", "tasks", null, "resume"],
+  session: { taskParam: "id" },
   summary: "Resume a paused task",
   tags: ["Tasks"],
   params: z.object({ id: z.string() }),
@@ -661,6 +686,7 @@ const supersedeTaskRoute = route({
   method: "post",
   path: "/api/tasks/{id}/supersede",
   pattern: ["api", "tasks", null, "supersede"],
+  session: { taskParam: "id" },
   summary: "Supersede an in-progress task (terminate + spawn resume follow-up)",
   description:
     'Marks the original task `superseded` (terminal) and creates a fresh `taskType="resume"` follow-up so a worker can pick up the work in a new provider session. Workflow-step tasks (those with `workflowRunStepId`) are carved out: the original is marked `failed` with reason `superseded_workflow_task` and no follow-up is created — the workflow engine\'s retry/failure policy applies.',
@@ -683,6 +709,7 @@ const updateTaskVcsRoute = route({
   method: "patch",
   path: "/api/tasks/{id}/vcs",
   pattern: ["api", "tasks", null, "vcs"],
+  session: { taskParam: "id" },
   summary: "Update VCS (PR/MR) info for a task",
   tags: ["Tasks"],
   params: z.object({ id: z.string() }),
@@ -704,6 +731,7 @@ const updateTaskTitleRoute = route({
   method: "patch",
   path: "/api/tasks/{id}/title",
   pattern: ["api", "tasks", null, "title"],
+  session: { taskParam: "id" },
   summary: "Set or clear a task's display title (session rename)",
   description:
     "Sets a human-facing display title override on a task. The sessions UI only reads this from root tasks (session list items), but titles on child tasks are harmless. Pass `title: null` (or an empty string) to clear the override and fall back to the task prompt.",
@@ -722,22 +750,37 @@ const updateTaskTitleRoute = route({
   },
 });
 
+/** True unless the request acts for a user who lacks write access to the task's session. */
+async function hasSessionWrite(
+  req: IncomingMessage,
+  myAgentId: string | undefined,
+  taskId: string,
+): Promise<boolean> {
+  const access = await sessionAccessFor(await resolveSessionActor(req, myAgentId), taskId);
+  return hasSessionAccess(access, "write");
+}
+
 async function canSteerTask(
   req: IncomingMessage,
   myAgentId: string | undefined,
   task: AgentTask,
+  sessionAccess: SessionAccess = "none",
 ): Promise<boolean> {
+  const auth = getRequestAuth(req);
   const resource: RbacResource = {
     kind: "task",
     taskId: task.id,
-    requestedByUserId: task.requestedByUserId,
+    // A user with a write share steers as if the session were their own; the
+    // verb gate (and any role grant) still applies. Only an actual share
+    // counts: `owner` from an ownerless root must not widen steering.
+    requestedByUserId:
+      auth?.kind === "user" && sessionAccess === "write" ? auth.userId : task.requestedByUserId,
     creatorAgentId: task.creatorAgentId,
     agentId: task.agentId,
   };
   let principal: RbacPrincipal;
   let verb: "task.steer.any" | "task.steer.own";
 
-  const auth = getRequestAuth(req);
   if (auth?.kind === "operator") {
     principal = { kind: "operator" };
     verb = "task.steer.own";
@@ -906,6 +949,9 @@ export async function handleTasks(
       if (validated.length > 0) source = validated;
     }
 
+    // Every shape carries task text, so a user sees only sessions they can
+    // read, and `total` counts the same rows.
+    const actor = await resolveSessionActor(req, myAgentId);
     const filters = {
       status,
       agentId: parsed.query.agentId || undefined,
@@ -925,6 +971,7 @@ export async function handleTasks(
       orderBy: parsed.query.orderBy,
       limit: parsed.query.limit,
       offset: parsed.query.offset,
+      readableBy: actor.kind === "user" ? { userId: actor.userId } : undefined,
     };
     // List responses default to slim (full `task` text → bounded `taskPreview`,
     // heavy blobs dropped); `?fields=full` restores the full `AgentTask`.
@@ -1013,6 +1060,11 @@ export async function handleTasks(
       jsonError(res, `You don't have context for parent task ${parentTask.id}.`, 403);
       return true;
     }
+    // A follow-up in someone else's session needs a write share.
+    if (parentTask && !(await hasSessionWrite(req, myAgentId, parentTask.id))) {
+      jsonError(res, SESSION_WRITE_DENIED, 403);
+      return true;
+    }
     // A chat-sdk contextKey binds the task to a chat thread that its assignee and creator
     // may then read and post to. An agent may only name a thread other than the parent's
     // with the lead's chat post permission.
@@ -1285,7 +1337,13 @@ export async function handleTasks(
       jsonError(res, "Task not found", 404);
       return true;
     }
-    if (!(await canSteerTask(req, myAgentId, task))) {
+    const sessionActor = await resolveSessionActor(req, myAgentId);
+    const steerAccess = await sessionAccessFor(sessionActor, task.id);
+    if (!hasSessionAccess(steerAccess, "write")) {
+      jsonError(res, SESSION_WRITE_DENIED, 403);
+      return true;
+    }
+    if (!(await canSteerTask(req, myAgentId, task, steerAccess))) {
       jsonError(res, "Forbidden: caller cannot steer this task", 403);
       return true;
     }
@@ -1338,6 +1396,10 @@ export async function handleTasks(
       jsonError(res, "Task not found", 404);
       return true;
     }
+    if (!(await canReadSession(req, myAgentId, parsed.params.id))) {
+      jsonError(res, SESSION_READ_DENIED, 403);
+      return true;
+    }
     getTaskSteeringMessagesRoute.respond(res, 200, {
       messages: await getSteeringMessagesForTask(parsed.params.id),
     });
@@ -1357,7 +1419,12 @@ export async function handleTasks(
       return true;
     }
 
+    // A user token naming an agent in X-Agent-ID still reads only its sessions.
     if (parsed.query.taskId) {
+      if (!(await canReadSession(req, myAgentId, parsed.query.taskId))) {
+        jsonError(res, SESSION_READ_DENIED, 403);
+        return true;
+      }
       const task = await getTaskById(parsed.query.taskId);
       const messages =
         task?.agentId === myAgentId ? await getPendingSteeringForTask(parsed.query.taskId) : [];
@@ -1365,8 +1432,9 @@ export async function handleTasks(
       return true;
     }
 
+    const actor = await resolveSessionActor(req, myAgentId);
     getPendingSteeringMessagesRoute.respond(res, 200, {
-      messages: await getPendingSteeringForAgent(myAgentId),
+      messages: await getPendingSteeringForAgent(myAgentId, readableByFor(actor)),
     });
     return true;
   }
@@ -1529,6 +1597,11 @@ export async function handleTasks(
       jsonError(res, "Task not found", 404);
       return true;
     }
+    const readAccess = await sessionAccessFor(await resolveSessionActor(req, myAgentId), task.id);
+    if (!hasSessionAccess(readAccess, "read")) {
+      jsonError(res, "You don't have access to this session. Ask the owner to share it.", 403);
+      return true;
+    }
 
     const logs = await getLogsByTaskId(parsed.params.id, parsed.query.logsLimit ?? 200);
     const attachments = await getTaskAttachments(parsed.params.id);
@@ -1758,7 +1831,11 @@ export async function handleTasks(
       jsonError(res, "Missing X-Agent-ID header", 400);
       return true;
     }
-    const pausedTasks = await getPausedTasksForAgent(myAgentId);
+    // A user token naming an agent in X-Agent-ID still reads only its sessions.
+    const pausedTasks = await getPausedTasksForAgent(
+      myAgentId,
+      readableByFor(await resolveSessionActor(req, myAgentId)),
+    );
     const tasks = await Promise.all(
       pausedTasks.map(async (task) => {
         const requestedBy = await buildTaskRequestedBy(task);
@@ -1938,7 +2015,7 @@ export async function handleTasks(
     // Check this BEFORE the supersede UPDATE so we don't leave a workflow
     // step in `superseded` if the engine expects `failed`.
     if (task.workflowRunStepId != null) {
-      const failed = await failTask(parsed.params.id, "superseded_workflow_task");
+      const failed = await failTask(parsed.params.id, SUPERSEDED_WORKFLOW_TASK_REASON);
       ensure({
         id: "task.workflow_step_failed_on_supersede",
         flow: "task",

package/src/http/telemetry-ui.ts

@@ -43,7 +43,7 @@ const enableTelemetry = route({
   description:
     "Stores `ANONYMIZED_TELEMETRY=true` and applies it to the running server: the install ID is minted if needed and `telemetry.enabled` is sent once, so no restart is needed.",
   tags: ["Telemetry"],
-  body: z.object({ via: z.enum(["banner", "settings"]).default("banner") }),
+  body: z.object({ via: z.enum(["banner", "settings", "benchmark"]).default("banner") }),
   responses: {
     200: {
       description: "Telemetry is on",

package/src/http/used-by.ts

@@ -1,11 +1,14 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
 import { z } from "zod";
-import { getSwarmConfigs, upsertSwarmConfig } from "../be/db";
+import { getDbClient, upsertSwarmConfig } from "../be/db";
 import { isTelemetryEnabled, trackRelayed } from "../telemetry";
+import { USER_FUNCTIONS } from "../utils/company-profile";
+import { orgIdentityStatus } from "../utils/org-identity";
 import { normalizeOrgWebsite, TELEMETRY_PROXY_ORIGIN } from "../utils/org-website";
 import { ensureConfigAdmin } from "./config";
 import { scheduleIntegrationsReload } from "./core";
 import { resolveHttpFavoriteOwner } from "./favorite-owner";
+import { globalConfig } from "./global-config";
 import { route } from "./route-def";
 import { jsonError } from "./utils";
 
@@ -15,6 +18,9 @@ const CONSENT_AT_KEY = "SWARM_USED_BY_CONSENT_AT";
 // still reaches the proxy after the name or website is changed or cleared.
 const GRANTED_NAME_KEY = "SWARM_USED_BY_ORG_NAME";
 const GRANTED_WEBSITE_KEY = "SWARM_USED_BY_ORG_WEBSITE";
+const CONTACT_EMAIL_KEY = "SWARM_USED_BY_CONTACT_EMAIL";
+const CONTACT_FUNCTION_KEY = "SWARM_USED_BY_CONTACT_FUNCTION";
+const QUOTE_KEY = "SWARM_USED_BY_QUOTE";
 const TIMEOUT_MS = 10_000;
 
 // ─── Route Definitions ───────────────────────────────────────────────────────
@@ -25,17 +31,30 @@ const usedBy = route({
   pattern: ["api", "used-by"],
   summary: "Grant or revoke the 'used by' logo consent",
   description:
-    "Records whether agent-swarm.dev may show this organization's logo as a company that uses Agent Swarm. Sends the organization name and website to the telemetry proxy, where a person approves each logo by hand. An explicit admin action, so it is not gated by the telemetry opt-out.",
+    "Records consent to show the organization's logo on agent-swarm.dev. A grant requires a valid contact email. It sends organization identity, contact details, and an optional quote to the proxy for manual review. This explicit admin action works when telemetry is off. A revoke clears the stored contact details and quote.",
   tags: ["Telemetry"],
-  body: z.object({ granted: z.boolean() }),
+  body: z
+    .object({
+      granted: z.boolean(),
+      contactEmail: z
+        .string()
+        .max(320, "Contact email must be at most 320 characters")
+        .email("Contact email must be a valid email address")
+        .optional(),
+      contactFunction: z.enum(USER_FUNCTIONS).optional(),
+      quote: z.string().max(280).optional(),
+    })
+    .refine((body) => !body.granted || body.contactEmail !== undefined, {
+      path: ["contactEmail"],
+      message: "Contact email is required when granting logo consent",
+    }),
   responses: {
     200: {
       description: "Consent recorded",
       schema: z.object({ granted: z.boolean(), changedAt: z.string() }),
     },
     400: {
-      description:
-        "Organization name or website is not set (a revoke falls back to the identity of the last grant)",
+      description: "Invalid contact details, or missing organization name or website",
     },
     401: { description: "Unauthorized" },
     403: { description: "Only a config admin can change the consent" },
@@ -46,11 +65,6 @@ const usedBy = route({
 
 // ─── Helpers ─────────────────────────────────────────────────────────────────
 
-async function globalConfig(key: string): Promise<string | undefined> {
-  const stored = (await getSwarmConfigs({ scope: "global", key }))?.[0]?.value?.trim();
-  return stored || process.env[key]?.trim() || undefined;
-}
-
 /** A proxy path next to the configured `/v1/feedback` endpoint, so a stubbed proxy gets every route. */
 export async function telemetryProxyEndpoint(path: `/v1/${string}`): Promise<string> {
   const feedback = await globalConfig("feedback_endpoint");
@@ -78,9 +92,15 @@ export async function handleUsedBy(
   if (!parsed) return true;
   if (!(await ensureConfigAdmin(req, res, "config.write.any"))) return true;
 
-  const { granted } = parsed.body;
-  const currentName = await globalConfig("SWARM_ORG_NAME");
-  const currentWebsite = normalizeOrgWebsite(await globalConfig("SWARM_ORG_WEBSITE"));
+  const { granted, contactEmail, contactFunction, quote } = parsed.body;
+  // The shared identity reader. The grant keeps its own rule (any non-empty
+  // name), so it does not apply the ranking's placeholder-name check.
+  const current = orgIdentityStatus({
+    SWARM_ORG_NAME: await globalConfig("SWARM_ORG_NAME"),
+    SWARM_ORG_WEBSITE: await globalConfig("SWARM_ORG_WEBSITE"),
+  });
+  const currentName = current.name ?? undefined;
+  const currentWebsite = current.website;
   const grantedName = granted ? undefined : await globalConfig(GRANTED_NAME_KEY);
   const grantedWebsite = granted
     ? null
@@ -108,6 +128,9 @@ export async function handleUsedBy(
         org_website: orgWebsite,
         ...(orgDomain ? { org_domain: orgDomain } : {}),
         granted,
+        ...(granted
+          ? { contact_email: contactEmail, contact_function: contactFunction, quote }
+          : {}),
         changed_at: changedAt,
       }),
       signal: AbortSignal.timeout(TIMEOUT_MS),
@@ -121,18 +144,39 @@ export async function handleUsedBy(
     return true;
   }
 
-  await upsertSwarmConfig({ scope: "global", key: CONSENT_KEY, value: String(granted) });
-  await upsertSwarmConfig({ scope: "global", key: CONSENT_AT_KEY, value: changedAt });
-  if (granted) {
-    await upsertSwarmConfig({ scope: "global", key: GRANTED_NAME_KEY, value: orgName });
-    await upsertSwarmConfig({ scope: "global", key: GRANTED_WEBSITE_KEY, value: orgWebsite });
-  }
+  await getDbClient().transaction(async () => {
+    await upsertSwarmConfig({ scope: "global", key: CONSENT_KEY, value: String(granted) });
+    await upsertSwarmConfig({ scope: "global", key: CONSENT_AT_KEY, value: changedAt });
+    if (granted) {
+      await upsertSwarmConfig({ scope: "global", key: GRANTED_NAME_KEY, value: orgName });
+      await upsertSwarmConfig({ scope: "global", key: GRANTED_WEBSITE_KEY, value: orgWebsite });
+    }
+    // Contact details stay out of agent env. The email is also a secret row,
+    // so `GET /api/config` masks it for every reader.
+    for (const [key, value, isSecret] of [
+      [CONTACT_EMAIL_KEY, contactEmail, true],
+      [CONTACT_FUNCTION_KEY, contactFunction, false],
+      [QUOTE_KEY, quote, false],
+    ] as const) {
+      await upsertSwarmConfig({
+        scope: "global",
+        key,
+        value: granted ? (value ?? "") : "",
+        isSecret,
+        exportToEnv: false,
+      });
+    }
+  });
   scheduleIntegrationsReload();
 
   const owner = await resolveHttpFavoriteOwner(req, myAgentId);
   trackRelayed(
     "used_by.consent_changed",
-    { granted },
+    {
+      granted,
+      has_quote: granted && Boolean(quote),
+      has_function: granted && Boolean(contactFunction),
+    },
     { actor: owner?.userId ? { userId: owner.userId } : undefined, emitter: "ui" },
   );
   usedBy.respond(res, 200, { granted, changedAt });

package/src/http/users.ts

@@ -205,7 +205,7 @@ const createUserRoute = route({
   tags: ["Users"],
   body: z.object({
     name: z.string().min(1),
-    email: z.string().optional(),
+    email: z.string().email("Email must be a valid email address").optional(),
     role: z.string().optional(),
     notes: z.string().optional(),
     emailAliases: z.array(z.string()).optional(),
@@ -307,7 +307,7 @@ const updateUserRoute = route({
   body: z
     .object({
       name: z.string().min(1).optional(),
-      email: z.string().optional(),
+      email: z.string().email("Email must be a valid email address").nullable().optional(),
       role: z.string().optional(),
       notes: z.string().optional(),
       emailAliases: z.array(z.string()).optional(),

package/src/prompts/session-templates.ts

@@ -555,12 +555,14 @@ registerTemplate({
   header: "",
   defaultBody: `{{prompt}}
 
-[App action] app={{app_id}} action={{action_name}} input={{input_json}}`,
+[App action] app={{app_id}} action={{action_name}} input={{input_json}}
+Caller (server-verified): {{caller_json}}`,
   variables: [
     { name: "prompt", description: "The task prompt configured on the app action" },
     { name: "app_id", description: "The app identifier" },
     { name: "action_name", description: "The invoked action name" },
     { name: "input_json", description: "The action input serialized as JSON" },
+    { name: "caller_json", description: "The server-verified action caller serialized as JSON" },
   ],
   category: "task_lifecycle",
 });

package/src/providers/amp-adapter.ts

@@ -44,7 +44,7 @@ import type {
  * default; the image installs exactly this version and the per-task settings
  * set `amp.updates.mode: "disabled"`. Bump it deliberately, with a live run.
  */
-export const AMP_PACKAGE = "@ampcode/cli@0.0.1792296040-g5ce754";
+export const AMP_PACKAGE = "@ampcode/cli@0.0.1792368068-g91990d";
 
 /** MCP server name. Amp exposes its tools as `agent_swarm` / `store_progress` (dashes become underscores). */
 const AMP_MCP_SERVER_NAME = "agent-swarm";

package/src/providers/pi-mono-adapter.ts

@@ -115,6 +115,7 @@ function modelToCredKeys(modelStr: string | undefined): string[] | null {
     if (provider === "openrouter") return ["OPENROUTER_API_KEY"];
     if (provider === "openai") return ["OPENAI_API_KEY"];
     if (provider === "google") return ["GOOGLE_API_KEY", "GEMINI_API_KEY"];
+    if (provider === "opencode-go") return ["OPENCODE_API_KEY"];
     // models.json custom providers (`writeSessionModelsJson`). The
     // runner normalizes key aliases (HELMCODE_API_NAN → NAN_API_KEY), but a
     // worker without that step (or a boot-time check) may only see the alias.
@@ -145,6 +146,19 @@ function getHarnessDrivableBedrockModels(): Array<{ id: string; name: string }>
   }
 }
 
+/**
+ * The `opencode-go` model ids this pi-ai build resolves. models.dev can list
+ * ids pi-ai does not know yet, and pi runs its default model for those, so the
+ * worker reports this list and the picker offers only these ids.
+ */
+export function listPiOpencodeGoModelIds(): string[] {
+  try {
+    return getModels("opencode-go").map((m) => m.id);
+  } catch {
+    return [];
+  }
+}
+
 /**
  * Enumerate the Bedrock models that are both invocable by this AWS account and
  * drivable by the pi-ai Converse harness, and verify the credential chain in
@@ -480,6 +494,7 @@ const PI_RUNTIME_API_KEYS: readonly (readonly [envKey: string, provider: string]
   ["OPENAI_API_KEY", "openai"],
   ["GEMINI_API_KEY", "google"],
   ["GOOGLE_API_KEY", "google"],
+  ["OPENCODE_API_KEY", "opencode-go"],
   // models.json custom providers (the registry). A runtime key beats the
   // file's `apiKey: "$NAN_API_KEY"`, which pi would otherwise read from the
   // shared process.env, where a credential pool is still the raw comma list.

package/src/providers/reasoning-effort.ts

@@ -168,7 +168,8 @@ function buildOpencodeReasoningOptions(
     // qualitative level — translate internally (see "What We're NOT Doing" in
     // the plan: no numeric budget surface for operators, only this
     // adapter-internal transport detail).
-    if (level === "max") return { reasoningEffort: level };
+    // Its Anthropic transport reads `effort` into `output_config.effort`.
+    if (level === "max") return { effort: level };
     return { thinking: { type: "enabled", budgetTokens: ANTHROPIC_BUDGET_TOKENS_BY_LEVEL[level] } };
   }
   if (providerId === "openrouter") {

package/src/providers/types.ts

@@ -320,6 +320,8 @@ export interface CredStatus {
    * string signals Bedrock mode with `AWS_REGION` unset (no region fabricated).
    */
   bedrockRegion?: string;
+  /** Pi-mono only: the `opencode-go` model ids pi-ai resolves. Undefined for other harnesses. */
+  opencodeGoModels?: string[];
 }
 
 /**