@desplega.ai/agent-swarm 2.4.0 → 2.4.1

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Swarm API",
-    "version": "2.4.0",
+    "version": "2.4.1",
     "description": "Multi-agent orchestration API for Claude Code, Codex, and Gemini CLI. Enables task distribution, agent communication, and service discovery.\n\nMCP tools are documented separately in [MCP.md](./MCP.md)."
   },
   "servers": [
@@ -613,6 +613,9 @@
           "bedrock": {
             "$ref": "#/components/schemas/AgentBedrockStatus"
           },
+          "opencodeGo": {
+            "$ref": "#/components/schemas/AgentOpencodeGoStatus"
+          },
           "acp": {
             "$ref": "#/components/schemas/AgentAcpStatus"
           }
@@ -766,6 +769,28 @@
           "ready"
         ]
       },
+      "AgentOpencodeGoStatus": {
+        "type": [
+          "object",
+          "null"
+        ],
+        "properties": {
+          "probedAt": {
+            "type": "number"
+          },
+          "models": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "default": []
+          }
+        },
+        "default": null,
+        "required": [
+          "probedAt"
+        ]
+      },
       "AgentAcpStatus": {
         "type": [
           "object",
@@ -15336,7 +15361,7 @@
     "/api/used-by": {
       "post": {
         "summary": "Grant or revoke the 'used by' logo consent",
-        "description": "Records whether agent-swarm.dev may show this organization's logo as a company that uses Agent Swarm. Sends the organization name and website to the telemetry proxy, where a person approves each logo by hand. An explicit admin action, so it is not gated by the telemetry opt-out.",
+        "description": "Records consent to show the organization's logo on agent-swarm.dev. A grant requires a valid contact email. It sends organization identity, contact details, and an optional quote to the proxy for manual review. This explicit admin action works when telemetry is off. A revoke clears the stored contact details and quote.",
         "tags": [
           "Telemetry"
         ],
@@ -15353,6 +15378,26 @@
                 "properties": {
                   "granted": {
                     "type": "boolean"
+                  },
+                  "contactEmail": {
+                    "type": "string",
+                    "maxLength": 320,
+                    "format": "email"
+                  },
+                  "contactFunction": {
+                    "type": "string",
+                    "enum": [
+                      "engineer",
+                      "eng_lead",
+                      "founder",
+                      "product",
+                      "ops",
+                      "other"
+                    ]
+                  },
+                  "quote": {
+                    "type": "string",
+                    "maxLength": 280
                   }
                 },
                 "required": [
@@ -15386,7 +15431,7 @@
             }
           },
           "400": {
-            "description": "Organization name or website is not set (a revoke falls back to the identity of the last grant)",
+            "description": "Invalid contact details, or missing organization name or website",
             "content": {
               "application/json": {
                 "schema": {
@@ -15431,7 +15476,7 @@
     "/api/ranking": {
       "get": {
         "summary": "Public ranking state",
-        "description": "Whether this install can join the public agent-swarm.dev ranking (telemetry on, organization name and website set), whether it is opted in, and its stored listing. The listing carries the private ranking claim, so only a config admin can read it.",
+        "description": "Whether this install can join the public agent-swarm.dev ranking (telemetry on, organization name and website set), whether it is opted in, and its stored listing. Only a config admin can read it.",
         "tags": [
           "Telemetry"
         ],
@@ -15491,9 +15536,6 @@
                             1
                           ]
                         },
-                        "claim": {
-                          "type": "string"
-                        },
                         "name": {
                           "type": "string"
                         },
@@ -15535,7 +15577,6 @@
                       },
                       "required": [
                         "v",
-                        "claim",
                         "name",
                         "domain",
                         "category",
@@ -15548,18 +15589,6 @@
                     "listingMatchesDomain": {
                       "type": "boolean"
                     },
-                    "fileJson": {
-                      "type": [
-                        "string",
-                        "null"
-                      ]
-                    },
-                    "prUrl": {
-                      "type": [
-                        "string",
-                        "null"
-                      ]
-                    },
                     "verifyUrl": {
                       "type": [
                         "string",
@@ -15576,8 +15605,6 @@
                     "domain",
                     "listing",
                     "listingMatchesDomain",
-                    "fileJson",
-                    "prUrl",
                     "verifyUrl"
                   ]
                 }
@@ -15610,7 +15637,7 @@
     "/api/ranking/opt-in": {
       "post": {
         "summary": "Opt this install into the public ranking",
-        "description": "Builds the telemetry_ranking listing from the organization name and website plus the chosen category, stores it, turns PUBLIC_RANKING_ENABLED on and sends ranking.opted_in. The install is ranked only after a ranking PR with the returned file is merged into desplega-ai/agent-swarm.",
+        "description": "Builds the telemetry_ranking listing from the organization name and website plus the chosen category, stores it, turns PUBLIC_RANKING_ENABLED on and sends ranking.opted_in. That is the whole opt-in: the install shows on agent-swarm.dev/ranking at the next hourly refresh.",
         "tags": [
           "Telemetry"
         ],
@@ -15673,9 +15700,6 @@
                     "domain": {
                       "type": "string"
                     },
-                    "claim": {
-                      "type": "string"
-                    },
                     "listing": {
                       "type": "object",
                       "properties": {
@@ -15685,9 +15709,6 @@
                             1
                           ]
                         },
-                        "claim": {
-                          "type": "string"
-                        },
                         "name": {
                           "type": "string"
                         },
@@ -15729,7 +15750,6 @@
                       },
                       "required": [
                         "v",
-                        "claim",
                         "name",
                         "domain",
                         "category",
@@ -15739,22 +15759,13 @@
                         "updatedAt"
                       ]
                     },
-                    "fileJson": {
-                      "type": "string"
-                    },
-                    "prUrl": {
-                      "type": "string"
-                    },
                     "verifyUrl": {
                       "type": "string"
                     }
                   },
                   "required": [
                     "domain",
-                    "claim",
                     "listing",
-                    "fileJson",
-                    "prUrl",
                     "verifyUrl"
                   ]
                 }
@@ -15807,7 +15818,7 @@
     "/api/ranking/opt-out": {
       "post": {
         "summary": "Leave the public ranking",
-        "description": "Turns PUBLIC_RANKING_ENABLED off and sends ranking.opted_out, so workers stop sending ranking.usage. Returns the GitHub page that deletes the ranking entry.",
+        "description": "Turns PUBLIC_RANKING_ENABLED off and sends ranking.opted_out, so workers stop sending ranking.usage. The install leaves agent-swarm.dev/ranking at the next hourly refresh.",
         "tags": [
           "Telemetry"
         ],
@@ -15829,17 +15840,10 @@
                       "enum": [
                         false
                       ]
-                    },
-                    "leaveUrl": {
-                      "type": [
-                        "string",
-                        "null"
-                      ]
                     }
                   },
                   "required": [
-                    "enabled",
-                    "leaveUrl"
+                    "enabled"
                   ]
                 }
               }
@@ -54216,7 +54220,8 @@
                     "type": "string",
                     "enum": [
                       "banner",
-                      "settings"
+                      "settings",
+                      "benchmark"
                     ],
                     "default": "banner"
                   }
@@ -55323,7 +55328,7 @@
     "/api/fleet-benchmark": {
       "get": {
         "summary": "Compare this swarm with similar swarms",
-        "description": "Places this swarm's tasks per week and task success rate (last 30 days) in the fleet percentiles published by the telemetry proxy, against swarms with the same agent count when enough exist. Needs telemetry on and an organization name; otherwise `state` says what is missing and the proxy is not called. `unavailable` also covers an install whose first event the proxy saw cannot be established locally (until 30 days after the first accepted event). The fleet numbers are cached for a day.",
+        "description": "Compares local task volume and success rate with fleet percentiles over the last 30 days. Comparisons require telemetry, an organization name, and a known proxy ingest date. A website, team size, and use case enable full comparisons with peer filters. The response includes the proxy's peer group when available. With telemetry off, it returns local DB counts without a proxy request. The fleet cache key includes the peer filters.",
         "tags": [
           "Telemetry"
         ],
@@ -55350,6 +55355,41 @@
                         "unavailable"
                       ]
                     },
+                    "level": {
+                      "type": "string",
+                      "enum": [
+                        "basic",
+                        "full"
+                      ]
+                    },
+                    "peerGroup": {
+                      "type": [
+                        "object",
+                        "null"
+                      ],
+                      "properties": {
+                        "teamSize": {
+                          "type": [
+                            "string",
+                            "null"
+                          ]
+                        },
+                        "useCase": {
+                          "type": [
+                            "string",
+                            "null"
+                          ]
+                        },
+                        "orgs": {
+                          "type": "integer"
+                        }
+                      },
+                      "required": [
+                        "teamSize",
+                        "useCase",
+                        "orgs"
+                      ]
+                    },
                     "local": {
                       "type": [
                         "object",
@@ -55455,6 +55495,8 @@
                   },
                   "required": [
                     "state",
+                    "level",
+                    "peerGroup",
                     "local",
                     "minFinishedTasks",
                     "generatedAt",
@@ -55744,7 +55786,8 @@
                     "minLength": 1
                   },
                   "email": {
-                    "type": "string"
+                    "type": "string",
+                    "format": "email"
                   },
                   "role": {
                     "type": "string"
@@ -56524,7 +56567,11 @@
                     "minLength": 1
                   },
                   "email": {
-                    "type": "string"
+                    "type": [
+                      "string",
+                      "null"
+                    ],
+                    "format": "email"
                   },
                   "role": {
                     "type": "string"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@desplega.ai/agent-swarm",
-  "version": "2.4.0",
+  "version": "2.4.1",
   "description": "agent-swarm.dev — an open-source operating system for AI work: a lead agent breaks goals into tasks, routes them to specialized workers such as Claude Code or Codex, runs each worker in an isolated container, and preserves shared memory, tools, schedules, and review gates so delegated work compounds across sessions.",
   "keywords": [
     "agent-swarm.dev",
@@ -200,7 +200,7 @@
   "dependencies": {
     "@agentclientprotocol/sdk": "1.9.0",
     "@ai-sdk/openai": "^3.0.41",
-    "@anthropic-ai/claude-agent-sdk": "0.3.302",
+    "@anthropic-ai/claude-agent-sdk": "0.3.303",
     "@anthropic-ai/sdk": "^0.135.0",
     "@asteasolutions/zod-to-openapi": "^8.0.0",
     "@aws-sdk/client-bedrock": "3.1048.0",

package/src/apps/action-runner.ts

@@ -0,0 +1,146 @@
+import { normalizeAssetKey } from "../assets/key";
+import { getLeadAgent } from "../be/db";
+import { getScriptById } from "../be/scripts/db";
+import { getSavedScriptOwnerAgentId, runSavedScriptAsAgent } from "../be/scripts/run-saved";
+import { resolveTemplate } from "../prompts/resolver";
+import { createTaskWithSiblingAwareness } from "../tasks/sibling-awareness";
+import { scrubObject } from "../utils/secret-scrubber";
+import type { AppActionCaller } from "./action-caller";
+import type { AppRecord } from "./store";
+import { runAppSync } from "./sync";
+
+/**
+ * One `error` string for a sync result, or undefined when every pass succeeded.
+ * Each failed pair is named so a multi-pair sync says which one broke; the pass
+ * list in `result.passes` carries the rest.
+ */
+function syncPassError(sync: Awaited<ReturnType<typeof runAppSync>>): string | undefined {
+  const failed = sync.passes.filter((pass) => pass.error !== undefined);
+  if (failed.length === 0) return undefined;
+  return failed.map((pass) => `${pass.model}.${pass.source}: ${pass.error}`).join("; ");
+}
+
+export async function runAppAction({
+  app,
+  name,
+  input = {},
+  caller,
+  actor,
+}: {
+  app: AppRecord;
+  name: string;
+  input?: Record<string, unknown>;
+  caller: AppActionCaller;
+  actor: string;
+}) {
+  const actions = app.definition.actions;
+  if (!actions || !Object.hasOwn(actions, name)) {
+    return { status: 404 as const, body: { error: "app action not found" } };
+  }
+
+  const action = actions[name]!;
+
+  if (action.kind === "script") {
+    const script = await getScriptById(action.scriptId);
+    if (!script) {
+      return {
+        status: 400 as const,
+        body: {
+          error: "invalid app action",
+          issues: [
+            {
+              path: `actions.${name}.scriptId`,
+              message: `script "${action.scriptId}" no longer exists`,
+            },
+          ],
+        },
+      };
+    }
+
+    // Script actions use the owner's bindings. Definition validation checks
+    // which scripts an agent can wire into an app.
+    const runAsAgentId = getSavedScriptOwnerAgentId(script);
+    if (!runAsAgentId) {
+      return {
+        status: 400 as const,
+        body: { error: "agentId is required: this script has no owning agent to run as" },
+      };
+    }
+
+    const output = await runSavedScriptAsAgent({
+      script,
+      input: { ...action.args, ...input, app: { id: app.id }, caller },
+      agentId: runAsAgentId,
+    });
+    const ok = output.exitCode === 0 && !output.error && !output.runtimeError;
+    const error = ok
+      ? undefined
+      : output.runtimeError
+        ? `${output.runtimeError.name}: ${output.runtimeError.message}`
+        : (output.error ?? `Script exited with code ${output.exitCode}`);
+    return {
+      status: 200 as const,
+      body: scrubObject({
+        ok,
+        result: output.result,
+        stdout: output.stdout,
+        ...(error === undefined ? {} : { error }),
+        durationMs: output.durationMs,
+      }),
+    };
+  }
+
+  if (action.kind === "sync") {
+    const startedAt = Date.now();
+    const sync = await runAppSync({
+      appId: app.id,
+      ...(action.model === undefined ? {} : { model: action.model }),
+      ...(action.source === undefined ? {} : { source: action.source }),
+      invokedBy: actor,
+    });
+    const durationMs = Date.now() - startedAt;
+    if (sync.issues && sync.issues.length > 0) {
+      return { status: 400 as const, body: { error: "invalid sync action", issues: sync.issues } };
+    }
+    // Deliberately the SCRIPT-action response shape, minus `taskId`:
+    // app-surface.tsx branches on `taskId` first, so omitting it gives the
+    // dashboard running -> ok/error + refetchAll() with zero UI changes.
+    const error = syncPassError(sync);
+    return {
+      status: 200 as const,
+      body: scrubObject({
+        ok: sync.ok,
+        result: { passes: sync.passes },
+        ...(error === undefined ? {} : { error }),
+        durationMs,
+      }),
+    };
+  }
+
+  const lead = action.agentId ? null : await getLeadAgent();
+  const taskPrompt = resolveTemplate("task.app.action", {
+    prompt: action.prompt,
+    app_id: app.id,
+    action_name: name,
+    input_json: JSON.stringify(input),
+    caller_json: JSON.stringify(caller),
+  });
+  const task = await createTaskWithSiblingAwareness(
+    taskPrompt.text,
+    {
+      source: "api",
+      agentId: action.agentId ?? lead?.id,
+      routingReason: action.agentId ? "human_pinned" : lead ? "skill" : undefined,
+      routingSource: action.agentId || lead ? "engine_default" : undefined,
+      // App-spawned tasks group under the app's asset namespace so a
+      // swarm-tasks source can pull them back via config.assetKey.
+      key: normalizeAssetKey(`shared/app:${app.id}/action:${name}/`),
+      ...(actor.startsWith("user:") ? { requestedByUserId: actor.slice("user:".length) } : {}),
+    },
+    { origin: "app" },
+  );
+  return {
+    status: 200 as const,
+    body: { ok: true as const, taskId: task.id, status: task.status },
+  };
+}

package/src/apps/row-store.ts

@@ -109,7 +109,7 @@ function indexKeys(model: string, definition: ModelDef, row: AppRow): string[] {
   return keys;
 }
 
-function validValue(column: ColumnDef, value: unknown): boolean {
+export function validValue(column: ColumnDef, value: unknown): boolean {
   if (value === null) return column.required !== true;
   if (column.kind === "string") return typeof value === "string";
   if (column.kind === "number") return typeof value === "number" && Number.isFinite(value);
@@ -526,18 +526,20 @@ export async function rebuildAppColumnIndexUnlocked(
   }
 }
 
+/** `matches` re-checks the row under the lock; a row that no longer matches is kept. */
 export function deleteAppRow(
   appId: string,
   model: string,
   _definition: ModelDef,
   rowId: string,
+  matches?: (row: AppRow) => boolean,
 ): Promise<boolean> {
   return withMutationLock(appId, model, async () => {
     const currentDefinition = await currentModelDefinition(appId, model);
     if (!currentDefinition) return false;
     const namespace = appsNamespace(appId);
     const row = await getAppRow(appId, model, rowId);
-    if (!row) return false;
+    if (!row || (matches && !matches(row))) return false;
     for (const key of indexKeys(model, currentDefinition, row)) await deleteKv(namespace, key);
     await deleteKv(namespace, rowKey(model, rowId));
     return true;

package/src/apps/script-types.ts

@@ -206,7 +206,7 @@ function renderApp(app: AppRecord, namespace: string): string {
 export namespace ${namespace} {
 ${renderedModels.map((model) => model.source).join("\n\n")}
 
-  /** Declared actions. Invocation is REST-only: POST /api/apps/<id>/actions/<name>. */
+  /** Scripts can write rows. Declared actions are callable through REST or MCP only. */
   export type ActionName = ${actionType};
 
   /** Script action arguments include server-stamped app and caller context. */

package/src/be/db.ts

@@ -10,7 +10,7 @@ import {
 import { realtimeBus } from "../realtime/bus";
 import { slackChannelFromContextKey } from "../tasks/slack-routing";
 import { _resolveIntegrationType, emitIntegrationConnected, telemetry } from "../telemetry";
-import { scheduleOrgDomainRecompute } from "../telemetry-identity";
+import { invalidateTelemetryUserRole, scheduleOrgDomainRecompute } from "../telemetry-identity";
 import {
   emitTaskTelemetry,
   type TaskTelemetryEvent,
@@ -12354,7 +12354,7 @@ export async function updateUser(
   id: string,
   data: Partial<{
     name: string;
-    email: string;
+    email: string | null;
     role: string;
     notes: string;
     emailAliases: string[];
@@ -12419,7 +12419,12 @@ export async function updateUser(
     `UPDATE users SET ${sets.join(", ")} WHERE id = ? RETURNING *`,
     params,
   );
-  if (row) getDbClient().afterCommit(scheduleOrgDomainRecompute);
+  if (row) {
+    getDbClient().afterCommit(() => {
+      invalidateTelemetryUserRole(id);
+      scheduleOrgDomainRecompute();
+    });
+  }
   return row ? rowToUser(row) : null;
 }
 
@@ -12556,7 +12561,12 @@ export async function deleteUser(id: string, replacementUserId?: string): Promis
     await reclassifyTaskHumanFree(reclassifySeedIds);
 
     const result = await tx.run("DELETE FROM users WHERE id = ?", [id]);
-    if (result.changes > 0) getDbClient().afterCommit(scheduleOrgDomainRecompute);
+    if (result.changes > 0) {
+      getDbClient().afterCommit(() => {
+        invalidateTelemetryUserRole(id);
+        scheduleOrgDomainRecompute();
+      });
+    }
     return result.changes > 0;
   });
 }

package/src/be/fleet-benchmark-stats.ts

@@ -5,15 +5,20 @@
  * registered agent count (the same count `org.snapshot` reports as
  * `agents_total`).
  *
- * Null when that start is unknown: no accepted event is recorded yet, or the
- * earliest one is inside the window.
+ * Comparisons require a known ingest start. With telemetry off, callers can
+ * use the local 30-day window without an ingest anchor.
  */
-import { fleetCountStart, type LocalFleetStats } from "../fleet-benchmark";
+import { FLEET_WINDOW_DAYS, fleetCountStart, type LocalFleetStats } from "../fleet-benchmark";
 import { getDbClient } from "./db/runtime";
 import { getTelemetryIngestAnchor } from "./telemetry-ingest-anchor";
 
-export async function getLocalFleetStats(now = new Date()): Promise<LocalFleetStats | null> {
-  const start = fleetCountStart(await getTelemetryIngestAnchor(), now);
+export async function getLocalFleetStats(
+  now = new Date(),
+  { requireIngestAnchor = true } = {},
+): Promise<LocalFleetStats | null> {
+  const start = requireIngestAnchor
+    ? fleetCountStart(await getTelemetryIngestAnchor(), now)
+    : new Date(now.getTime() - FLEET_WINDOW_DAYS * 86_400_000);
   if (!start) return null;
   const since = start.toISOString();
   const client = getDbClient();

package/src/be/models-catalog.ts

@@ -27,6 +27,10 @@ export const CATALOG_PROVIDER_IDS = [
   "openai",
   "amazon-bedrock",
   "opencode",
+  // OpenCode Go is opencode's first-party subscription provider, a sibling of
+  // its Zen section (`opencode`). models.dev lists it, so projecting it gives
+  // `opencode-go/<model>` ids their context window and reasoning facts.
+  "opencode-go",
   ...openAICompatibleProviderIds(),
 ] as const;
 

package/src/be/onboarding.ts

@@ -498,6 +498,12 @@ function deriveState(
   if (state.steps.connect.status !== "done") {
     changed = completeStep(state, "connect", "api_key", true, events) || changed;
   }
+  // A name saved anywhere (setup, the org-name popup, Settings, the API) names
+  // the swarm. The old setup default "Your Swarm" does not count.
+  const orgName = process.env.SWARM_ORG_NAME?.trim();
+  if (state.steps.name.status !== "done" && orgName && orgName !== "Your Swarm") {
+    changed = completeStep(state, "name", "custom_name", true, events) || changed;
+  }
   if (
     state.steps.ai.status !== "done" &&
     signals.providers.some((entry) => entry.state === "verified")

package/src/be/scripts/typecheck.ts

@@ -419,6 +419,19 @@ export interface SwarmSdk {
     query: string;
     params?: Record<string, string | number | boolean>;
   }): Promise<unknown>;
+  app_rows_list(args: {
+    appId: string;
+    model: string;
+    equals?: Record<string, string | number | boolean>;
+    sort?: \`\${string}:asc\` | \`\${string}:desc\`;
+    limit?: number;
+  }): Promise<unknown>;
+  app_row_get(args: { appId: string; model: string; rowId: string }): Promise<unknown>;
+  app_row_create(args: { appId: string; model: string; values: Record<string, unknown> }): Promise<unknown>;
+  app_rows_create(args: { appId: string; model: string; rows: Record<string, unknown>[] }): Promise<unknown>;
+  app_row_patch(args: { appId: string; model: string; rowId: string; values: Record<string, unknown> }): Promise<unknown>;
+  app_row_delete(args: { appId: string; model: string; rowId: string }): Promise<unknown>;
+  app_rows_delete(args: { appId: string; model: string; equals: Record<string, string | number | boolean>; limit?: number }): Promise<unknown>;
   app_rollback(args: {
     appId: string;
     version: number;