@desplega.ai/agent-swarm 2.4.0 → 2.4.1

package/dist/{http-xpmmq028.js → http-k2ejbt05.js}

@@ -280,7 +280,7 @@ import {
   hasCapability,
   getEnabledCapabilities,
   createServer
-} from "./cli-x719j3vs.js";
+} from "./cli-kr2pmfqx.js";
 import {
   chatThreadOfContextKey,
   agentContextKey,
@@ -288,6 +288,10 @@ import {
   init_context_key,
   init_catalog,
   catalog_default,
+  COMPANY_TEAM_SIZES,
+  COMPANY_USE_CASES,
+  USER_FUNCTIONS,
+  init_company_profile,
   TELEMETRY_PROXY_ORIGIN,
   normalizeOrgWebsite,
   orgLogoUrl,
@@ -302,6 +306,7 @@ import {
   _resolveIntegrationType,
   _resolveIntegrationProvider,
   setTelemetryRoleResolver,
+  setTelemetryFunctionResolver,
   isTelemetryReady,
   trackRelayed,
   telemetry,
@@ -326,6 +331,7 @@ import {
   getDbClient2,
   init_runtime,
   cachedUserRole,
+  cachedUserFunction,
   configureOrgDomainPersistence,
   recomputeOrgDomain,
   init_telemetry_identity,
@@ -422,11 +428,7 @@ import {
   RANKING_CATEGORIES,
   readTelemetryRanking,
   rankingFormSchema,
-  mintRankingClaim,
   buildListing,
-  rankingEntryFile,
-  rankingPrUrl,
-  rankingLeaveUrl,
   init_telemetry_ranking,
   API_DRAINING_HEADER,
   init_api_drain,
@@ -712,26 +714,26 @@ import {
   countScriptRunJournalSteps2,
   countScriptRunJournalAgentTaskSteps2,
   init_db3
-} from "./cli-rg7ntypm.js";
+} from "./cli-rqqsfz30.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-5s5hx57y.js";
-import"./cli-kk2r80n5.js";
+} from "./cli-nx462e4v.js";
+import"./cli-s48yvzb8.js";
 import {
   normalizeModelKey
-} from "./cli-tg9ksbn8.js";
+} from "./cli-3p8fqcnh.js";
 import {
   upsertModelCatalogOverlay,
   deleteModelCatalogOverlay,
   loadModelsCatalog,
   requestModelCatalogRefresh2
-} from "./cli-ttaz6c7m.js";
+} from "./cli-k9z4zd4p.js";
 import {
   AMP_ESTIMATE_MODELS,
   ampBillsCacheWrites,
   resolveAmpModel
-} from "./cli-2rwet3r7.js";
+} from "./cli-sv5gb0yb.js";
 import {
   automationIntegrationFixUrl,
   preflightAutomation,
@@ -743,7 +745,7 @@ import {
   cancelWorkflowRun2,
   TriggerSchemaError,
   startWorkflowExecution2
-} from "./cli-nme7wery.js";
+} from "./cli-kmqgmcnb.js";
 import {
   require_dist2,
   isInvalidClientError,
@@ -823,14 +825,14 @@ import {
   typecheckWithAmbient,
   typecheckScript,
   parseSkillContent
-} from "./cli-nrrg0fvy.js";
+} from "./cli-0bh477zn.js";
 import {
   buildAuthorizationUrl,
   exchangeAuthorizationCode,
   oauthAppRowToProviderConfig,
   forceRefreshAuthorizationOrThrow,
   forceRefreshTokenOrThrow
-} from "./cli-b80a1100.js";
+} from "./cli-sjyetj21.js";
 import {
   signalProcessGroup,
   detachedProcessGroup,
@@ -858,15 +860,15 @@ import {
   getSlackApp2,
   startSlackApp2,
   stopSlackApp2
-} from "./cli-4fhyq711.js";
-import"./cli-xfe63zx3.js";
+} from "./cli-vy0fay6k.js";
+import"./cli-mfe7f7b5.js";
 import {
   createApprovalFollowUpTask,
   generateEdges,
   definitionNodeIds,
   validateDefinition
-} from "./cli-tj4j2ts4.js";
-import"./cli-bn26xbcs.js";
+} from "./cli-tbhwrxpt.js";
+import"./cli-8nyhf7za.js";
 import {
   _fetchHolder,
   CLIENT_ID,
@@ -877,11 +879,11 @@ import {
   codexOAuthKeyForSlot,
   loadAllCodexOAuthSlots,
   getValidCodexOAuth
-} from "./cli-vjfpshn3.js";
+} from "./cli-ejs3m1sx.js";
 import {
   workflowEventBus2,
   init_event_bus
-} from "./cli-ptkpaqfy.js";
+} from "./cli-wt645v7q.js";
 import {
   duplicateGuardedQueryKey,
   warnIfCorsAllowsAnyOrigin,
@@ -923,7 +925,7 @@ import {
   bodyListTask,
   describeRequestRoute,
   route
-} from "./cli-02vhhssk.js";
+} from "./cli-z071fb95.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-7a91w22y.js";
@@ -954,13 +956,13 @@ import {
   resolvePoolDelivery2,
   createPoolAgent2,
   init_db
-} from "./cli-6ftrrwm1.js";
+} from "./cli-bn5kevnf.js";
 import {
   RATING_MODEL_MAX_LENGTH,
   REFERENCES_SOURCE_MAX_LENGTH,
   sanitizeReferencesSource
 } from "./cli-3h26v7yj.js";
-import"./cli-rdr166ht.js";
+import"./cli-smvcw9z5.js";
 import {
   startPoolRouting,
   stopPoolRouting,
@@ -970,8 +972,8 @@ import {
   checkHeartbeatChecklist2,
   runHeartbeatSweep2,
   stopHeartbeat2
-} from "./cli-bhwa8rzc.js";
-import"./cli-eqgfs202.js";
+} from "./cli-rdq7tzwm.js";
+import"./cli-hqhzg1qq.js";
 import {
   import_websocket,
   import_websocket_server
@@ -980,15 +982,15 @@ import {
   runtimeSupervisorStatus,
   startRuntimeSupervisor,
   stopRuntimeSupervisor
-} from "./cli-rsd7ga7v.js";
+} from "./cli-axh29tyr.js";
 import"./cli-ns59dc6r.js";
 import {
   ACP_TARGET_IDS
-} from "./cli-a49vpbf3.js";
+} from "./cli-5kqnemen.js";
 import {
   reasoningCapability,
   supportedReasoningLevels
-} from "./cli-p22zdvnt.js";
+} from "./cli-bn0rewsy.js";
 import {
   MAX_RATE_LIMIT_RESET_MS
 } from "./cli-gx4rm0qx.js";
@@ -1000,11 +1002,11 @@ import {
   memoryRelevance,
   isUnknownModelError,
   writeSkillsToFilesystem
-} from "./cli-wrv09v7q.js";
+} from "./cli-m2qgh5sv.js";
 import {
   inviteEmailToSharedOrg,
   ensureAgentFsCredentialsForAgent
-} from "./cli-5ff2sjyt.js";
+} from "./cli-syhq378v.js";
 import {
   Anthropic
 } from "./cli-er83cjbn.js";
@@ -1039,7 +1041,7 @@ import {
   revokeSessionToken,
   fingerprintApiKey,
   init_users
-} from "./cli-8cxkw1f5.js";
+} from "./cli-fz9kewbh.js";
 import"./cli-v41kn3cd.js";
 import"./cli-wgtk7xxr.js";
 import {
@@ -1131,6 +1133,7 @@ import {
   RuntimePoolSchema,
   RuntimePoolCreateAgentSchema,
   RuntimeInstanceSchema,
+  SUPERSEDED_WORKFLOW_TASK_REASON,
   WorkflowEdgeSchema,
   WorkflowDefinitionSchema,
   WorkflowNodePatchSchema,
@@ -1194,12 +1197,12 @@ import {
   KvKeySchema,
   KvEntrySchema,
   init_types
-} from "./cli-a1esmmee.js";
+} from "./cli-fpmsqq59.js";
 import {
   IDENTITY_FIELD_BUDGETS,
   IdentityFieldBudgetError,
   init_identity_field_budget
-} from "./cli-wyrr38xm.js";
+} from "./cli-x5mq1fyq.js";
 import {
   getSlackConfiguration,
   init_config
@@ -1267,7 +1270,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-mz1ezzzh.js";
+} from "./cli-ash6xxk7.js";
 import {
   realtimeBus,
   init_bus
@@ -1296,11 +1299,11 @@ import {
   scrubObject,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 import {
   isAlias,
   init_src2
-} from "./cli-x3en6ct3.js";
+} from "./cli-nwyw3zhg.js";
 import {
   __toESM
 } from "./cli-242037k3.js";
@@ -3891,6 +3894,7 @@ function startTelemetryTicker(deps) {
     return;
   stopTelemetryTicker();
   setTelemetryRoleResolver(cachedUserRole);
+  setTelemetryFunctionResolver(cachedUserFunction);
   const tick = async () => {
     try {
       await recomputeOrgDomain();
@@ -3921,6 +3925,7 @@ function stopTelemetryTicker() {
   tickTimer = null;
   firstTimer = null;
   setTelemetryRoleResolver(null);
+  setTelemetryFunctionResolver(null);
   configureOrgDomainPersistence(null);
 }
 
@@ -5220,6 +5225,7 @@ async function handleAgentsRest(req, res, pathSegments, queryParams, myAgentId)
         reportedAt: parsed.body.latest_model?.reportedAt ?? parsed.body.acp.reportedAt,
         reportKind: "post_task",
         bedrock: null,
+        opencodeGo: null,
         acp: null
       };
       finalAgent = await updateAgentCredStatus2(parsed.params.id, {
@@ -7400,6 +7406,10 @@ function deriveState(state, signals, funnelEvents) {
   if (state.steps.connect.status !== "done") {
     changed = completeStep(state, "connect", "api_key", true, events) || changed;
   }
+  const orgName = process.env.SWARM_ORG_NAME?.trim();
+  if (state.steps.name.status !== "done" && orgName && orgName !== "Your Swarm") {
+    changed = completeStep(state, "name", "custom_name", true, events) || changed;
+  }
   if (state.steps.ai.status !== "done" && signals.providers.some((entry) => entry.state === "verified")) {
     changed = completeStep(state, "ai", inferAiMethod(signals), true, events) || changed;
   }
@@ -7703,31 +7713,50 @@ init_telemetry_ranking();
 init_telemetry();
 init_env_flag();
 
+// src/http/global-config.ts
+init_db3();
+async function globalConfig(key) {
+  const stored = (await getSwarmConfigs2({ scope: "global", key }))?.[0]?.value;
+  return (stored ?? process.env[key])?.trim() || undefined;
+}
+
 // src/http/used-by.ts
 init_zod();
 init_db3();
 init_telemetry();
+init_company_profile();
 init_org_website();
 var CONSENT_KEY = "SWARM_USED_BY_CONSENT";
 var CONSENT_AT_KEY = "SWARM_USED_BY_CONSENT_AT";
 var GRANTED_NAME_KEY = "SWARM_USED_BY_ORG_NAME";
 var GRANTED_WEBSITE_KEY = "SWARM_USED_BY_ORG_WEBSITE";
+var CONTACT_EMAIL_KEY = "SWARM_USED_BY_CONTACT_EMAIL";
+var CONTACT_FUNCTION_KEY = "SWARM_USED_BY_CONTACT_FUNCTION";
+var QUOTE_KEY = "SWARM_USED_BY_QUOTE";
 var TIMEOUT_MS = 1e4;
 var usedBy = route({
   method: "post",
   path: "/api/used-by",
   pattern: ["api", "used-by"],
   summary: "Grant or revoke the 'used by' logo consent",
-  description: "Records whether agent-swarm.dev may show this organization's logo as a company that uses Agent Swarm. Sends the organization name and website to the telemetry proxy, where a person approves each logo by hand. An explicit admin action, so it is not gated by the telemetry opt-out.",
+  description: "Records consent to show the organization's logo on agent-swarm.dev. A grant requires a valid contact email. It sends organization identity, contact details, and an optional quote to the proxy for manual review. This explicit admin action works when telemetry is off. A revoke clears the stored contact details and quote.",
   tags: ["Telemetry"],
-  body: object2({ granted: boolean() }),
+  body: object2({
+    granted: boolean(),
+    contactEmail: string2().max(320, "Contact email must be at most 320 characters").email("Contact email must be a valid email address").optional(),
+    contactFunction: _enum2(USER_FUNCTIONS).optional(),
+    quote: string2().max(280).optional()
+  }).refine((body) => !body.granted || body.contactEmail !== undefined, {
+    path: ["contactEmail"],
+    message: "Contact email is required when granting logo consent"
+  }),
   responses: {
     200: {
       description: "Consent recorded",
       schema: object2({ granted: boolean(), changedAt: string2() })
     },
     400: {
-      description: "Organization name or website is not set (a revoke falls back to the identity of the last grant)"
+      description: "Invalid contact details, or missing organization name or website"
     },
     401: { description: "Unauthorized" },
     403: { description: "Only a config admin can change the consent" },
@@ -7735,10 +7764,6 @@ var usedBy = route({
   },
   rbac: { permission: "config.write.any" }
 });
-async function globalConfig(key) {
-  const stored = (await getSwarmConfigs2({ scope: "global", key }))?.[0]?.value?.trim();
-  return stored || process.env[key]?.trim() || undefined;
-}
 async function telemetryProxyEndpoint(path) {
   const feedback = await globalConfig("feedback_endpoint");
   if (feedback && /^https?:\/\/[^/]+\/v1\/feedback\/?$/.test(feedback)) {
@@ -7757,7 +7782,7 @@ async function handleUsedBy(req, res, pathSegments, queryParams, myAgentId) {
     return true;
   if (!await ensureConfigAdmin(req, res, "config.write.any"))
     return true;
-  const { granted } = parsed.body;
+  const { granted, contactEmail, contactFunction, quote } = parsed.body;
   const current = orgIdentityStatus({
     SWARM_ORG_NAME: await globalConfig("SWARM_ORG_NAME"),
     SWARM_ORG_WEBSITE: await globalConfig("SWARM_ORG_WEBSITE")
@@ -7784,6 +7809,7 @@ async function handleUsedBy(req, res, pathSegments, queryParams, myAgentId) {
         org_website: orgWebsite,
         ...orgDomain ? { org_domain: orgDomain } : {},
         granted,
+        ...granted ? { contact_email: contactEmail, contact_function: contactFunction, quote } : {},
         changed_at: changedAt
       }),
       signal: AbortSignal.timeout(TIMEOUT_MS)
@@ -7796,15 +7822,34 @@ async function handleUsedBy(req, res, pathSegments, queryParams, myAgentId) {
     jsonError(res, "Could not reach the telemetry proxy", 502);
     return true;
   }
-  await upsertSwarmConfig2({ scope: "global", key: CONSENT_KEY, value: String(granted) });
-  await upsertSwarmConfig2({ scope: "global", key: CONSENT_AT_KEY, value: changedAt });
-  if (granted) {
-    await upsertSwarmConfig2({ scope: "global", key: GRANTED_NAME_KEY, value: orgName });
-    await upsertSwarmConfig2({ scope: "global", key: GRANTED_WEBSITE_KEY, value: orgWebsite });
-  }
+  await getDbClient2().transaction(async () => {
+    await upsertSwarmConfig2({ scope: "global", key: CONSENT_KEY, value: String(granted) });
+    await upsertSwarmConfig2({ scope: "global", key: CONSENT_AT_KEY, value: changedAt });
+    if (granted) {
+      await upsertSwarmConfig2({ scope: "global", key: GRANTED_NAME_KEY, value: orgName });
+      await upsertSwarmConfig2({ scope: "global", key: GRANTED_WEBSITE_KEY, value: orgWebsite });
+    }
+    for (const [key, value, isSecret] of [
+      [CONTACT_EMAIL_KEY, contactEmail, true],
+      [CONTACT_FUNCTION_KEY, contactFunction, false],
+      [QUOTE_KEY, quote, false]
+    ]) {
+      await upsertSwarmConfig2({
+        scope: "global",
+        key,
+        value: granted ? value ?? "" : "",
+        isSecret,
+        exportToEnv: false
+      });
+    }
+  });
   scheduleIntegrationsReload();
   const owner = await resolveHttpFavoriteOwner(req, myAgentId);
-  trackRelayed("used_by.consent_changed", { granted }, { actor: owner?.userId ? { userId: owner.userId } : undefined, emitter: "ui" });
+  trackRelayed("used_by.consent_changed", {
+    granted,
+    has_quote: granted && Boolean(quote),
+    has_function: granted && Boolean(contactFunction)
+  }, { actor: owner?.userId ? { userId: owner.userId } : undefined, emitter: "ui" });
   usedBy.respond(res, 200, { granted, changedAt });
   return true;
 }
@@ -7812,7 +7857,6 @@ async function handleUsedBy(req, res, pathSegments, queryParams, myAgentId) {
 // src/http/ranking.ts
 var ListingSchema = object2({
   v: literal2(1),
-  claim: string2(),
   name: string2(),
   domain: string2(),
   category: _enum2(RANKING_CATEGORIES),
@@ -7830,28 +7874,22 @@ var RankingStateSchema = object2({
   domain: string2().nullable(),
   listing: ListingSchema.nullable(),
   listingMatchesDomain: boolean(),
-  fileJson: string2().nullable(),
-  prUrl: string2().nullable(),
   verifyUrl: string2().nullable()
 });
 var OptInResponseSchema = object2({
   domain: string2(),
-  claim: string2(),
   listing: ListingSchema,
-  fileJson: string2(),
-  prUrl: string2(),
   verifyUrl: string2()
 });
 var OptOutResponseSchema = object2({
-  enabled: literal2(false),
-  leaveUrl: string2().nullable()
+  enabled: literal2(false)
 });
 var getRanking = route({
   method: "get",
   path: "/api/ranking",
   pattern: ["api", "ranking"],
   summary: "Public ranking state",
-  description: "Whether this install can join the public agent-swarm.dev ranking (telemetry on, organization name and website set), whether it is opted in, and its stored listing. The listing carries the private ranking claim, so only a config admin can read it.",
+  description: "Whether this install can join the public agent-swarm.dev ranking (telemetry on, organization name and website set), whether it is opted in, and its stored listing. Only a config admin can read it.",
   tags: ["Telemetry"],
   responses: {
     200: { description: "Ranking state", schema: RankingStateSchema },
@@ -7865,7 +7903,7 @@ var optIn = route({
   path: "/api/ranking/opt-in",
   pattern: ["api", "ranking", "opt-in"],
   summary: "Opt this install into the public ranking",
-  description: "Builds the telemetry_ranking listing from the organization name and website plus the chosen category, stores it, turns PUBLIC_RANKING_ENABLED on and sends ranking.opted_in. The install is ranked only after a ranking PR with the returned file is merged into desplega-ai/agent-swarm.",
+  description: "Builds the telemetry_ranking listing from the organization name and website plus the chosen category, stores it, turns PUBLIC_RANKING_ENABLED on and sends ranking.opted_in. That is the whole opt-in: the install shows on agent-swarm.dev/ranking at the next hourly refresh.",
   tags: ["Telemetry"],
   body: rankingFormSchema,
   responses: {
@@ -7884,7 +7922,7 @@ var optOut = route({
   path: "/api/ranking/opt-out",
   pattern: ["api", "ranking", "opt-out"],
   summary: "Leave the public ranking",
-  description: "Turns PUBLIC_RANKING_ENABLED off and sends ranking.opted_out, so workers stop sending ranking.usage. Returns the GitHub page that deletes the ranking entry.",
+  description: "Turns PUBLIC_RANKING_ENABLED off and sends ranking.opted_out, so workers stop sending ranking.usage. The install leaves agent-swarm.dev/ranking at the next hourly refresh.",
   tags: ["Telemetry"],
   responses: {
     200: { description: "Opted out", schema: OptOutResponseSchema },
@@ -7913,10 +7951,14 @@ async function rankingEnabled() {
 async function telemetryReady() {
   return isTelemetryEnabled() && Boolean(await globalConfig("telemetry_installation_id"));
 }
-async function verifyUrl(listing) {
-  const params = new URLSearchParams({ domain: listing.domain, claim: listing.claim });
+async function verifyUrl(domain) {
+  const params = new URLSearchParams({ domain });
   return `${await telemetryProxyEndpoint("/v1/ranking/verify")}?${params.toString()}`;
 }
+function withoutClaim(listing) {
+  const { claim: _claim, ...rest } = listing;
+  return rest;
+}
 async function setEnabled(enabled) {
   await upsertSwarmConfig2({
     scope: "global",
@@ -7925,7 +7967,7 @@ async function setEnabled(enabled) {
   });
 }
 function emitOptedIn(listing) {
-  telemetry.ranking("opted_in", { listing: JSON.stringify(listing) }, { orgName: listing.name, orgWebsite: listing.domain });
+  telemetry.ranking("opted_in", { listing: JSON.stringify(withoutClaim(listing)) }, { orgName: listing.name, orgWebsite: listing.domain });
 }
 function emitOptedOut(domain) {
   telemetry.ranking("opted_out", { domain });
@@ -7946,11 +7988,9 @@ async function buildRankingState() {
     enabled: enabled && listingMatchesDomain,
     name: identity.name,
     domain: identity.website,
-    listing,
+    listing: listing ? withoutClaim(listing) : null,
     listingMatchesDomain,
-    fileJson: current ? rankingEntryFile(current) : null,
-    prUrl: current ? rankingPrUrl(current) : null,
-    verifyUrl: current ? await verifyUrl(current) : null
+    verifyUrl: current ? await verifyUrl(current.domain) : null
   };
 }
 async function syncRankingAfterConfigChange(key, value) {
@@ -7973,7 +8013,7 @@ async function syncRankingAfterConfigChange(key, value) {
     if (identity.name === listing.name)
       return;
     try {
-      rebuilt = buildListing(identity, listing, listing.claim);
+      rebuilt = buildListing(identity, listing);
     } catch {}
   }
   if (!rebuilt) {
@@ -8024,14 +8064,11 @@ async function handleRanking(req, res, pathSegments, queryParams) {
       });
       return true;
     }
-    const website = identity.website;
     const db = getDbClient2();
     const built = await db.transaction(async () => {
-      const stored = await storedListing();
-      const claim = stored?.domain === website ? stored.claim : mintRankingClaim();
       let listing;
       try {
-        listing = buildListing(identity, parsed.body, claim);
+        listing = buildListing(identity, parsed.body);
       } catch (error) {
         return { ok: false, error };
       }
@@ -8056,11 +8093,8 @@ async function handleRanking(req, res, pathSegments, queryParams) {
     scheduleIntegrationsReload();
     optIn.respond(res, 200, {
       domain: listing.domain,
-      claim: listing.claim,
       listing,
-      fileJson: rankingEntryFile(listing),
-      prUrl: rankingPrUrl(listing),
-      verifyUrl: await verifyUrl(listing)
+      verifyUrl: await verifyUrl(listing.domain)
     });
     return true;
   }
@@ -8075,10 +8109,7 @@ async function handleRanking(req, res, pathSegments, queryParams) {
     if (listing)
       emitOptedOut(listing.domain);
     scheduleIntegrationsReload();
-    optOut.respond(res, 200, {
-      enabled: false,
-      leaveUrl: listing ? rankingLeaveUrl(listing.domain) : null
-    });
+    optOut.respond(res, 200, { enabled: false });
     return true;
   }
   return false;
@@ -12926,7 +12957,6 @@ async function handleFavorites(req, res, pathSegments, queryParams, myAgentId) {
 
 // src/http/fleet-benchmark.ts
 init_zod();
-init_db3();
 
 // src/fleet-benchmark.ts
 var FLEET_WINDOW_DAYS = 30;
@@ -13005,8 +13035,8 @@ function round(value, decimals) {
 
 // src/be/fleet-benchmark-stats.ts
 init_runtime();
-async function getLocalFleetStats(now = new Date) {
-  const start = fleetCountStart(await getTelemetryIngestAnchor(), now);
+async function getLocalFleetStats(now = new Date, { requireIngestAnchor = true } = {}) {
+  const start = requireIngestAnchor ? fleetCountStart(await getTelemetryIngestAnchor(), now) : new Date(now.getTime() - FLEET_WINDOW_DAYS * 86400000);
   if (!start)
     return null;
   const since = start.toISOString();
@@ -13027,6 +13057,8 @@ async function getLocalFleetStats(now = new Date) {
 
 // src/http/fleet-benchmark.ts
 init_telemetry();
+init_company_profile();
+init_org_website();
 var FLEET_TTL_MS = 24 * 60 * 60 * 1000;
 var FLEET_FAILURE_TTL_MS = 60 * 60 * 1000;
 var LOCAL_TTL_MS = 10 * 60 * 1000;
@@ -13040,6 +13072,12 @@ var FleetStateSchema = _enum2([
 ]);
 var FleetBenchmarkResponseSchema = object2({
   state: FleetStateSchema,
+  level: _enum2(["basic", "full"]),
+  peerGroup: object2({
+    teamSize: string2().nullable(),
+    useCase: string2().nullable(),
+    orgs: number2().int()
+  }).nullable(),
   local: object2({
     tasksPerWeek: number2(),
     taskSuccessRate: number2().nullable(),
@@ -13063,7 +13101,7 @@ var fleetBenchmark = route({
   path: "/api/fleet-benchmark",
   pattern: ["api", "fleet-benchmark"],
   summary: "Compare this swarm with similar swarms",
-  description: "Places this swarm's tasks per week and task success rate (last 30 days) in the fleet percentiles published by the telemetry proxy, against swarms with the same agent count when enough exist. Needs telemetry on and an organization name; otherwise `state` says what is missing and the proxy is not called. `unavailable` also covers an install whose first event the proxy saw cannot be established locally (until 30 days after the first accepted event). The fleet numbers are cached for a day.",
+  description: "Compares local task volume and success rate with fleet percentiles over the last 30 days. Comparisons require telemetry, an organization name, and a known proxy ingest date. A website, team size, and use case enable full comparisons with peer filters. The response includes the proxy's peer group when available. With telemetry off, it returns local DB counts without a proxy request. The fleet cache key includes the peer filters.",
   tags: ["Telemetry"],
   responses: {
     200: {
@@ -13099,48 +13137,64 @@ var ProxyFleetBenchmarksSchema = object2({
     "1": ProxyBlockSchema.optional(),
     "2-5": ProxyBlockSchema.optional(),
     "6+": ProxyBlockSchema.optional()
-  })
-});
-async function fleetBenchmarks(now) {
-  if (fleetCache && fleetCache.until > now)
+  }),
+  peer_group: object2({
+    team_size: string2().nullable(),
+    use_case: string2().nullable(),
+    orgs: number2().int().nonnegative()
+  }).nullable().optional()
+});
+async function fleetBenchmarks(now, peerGroup) {
+  const endpoint = new URL(await telemetryProxyEndpoint("/v1/fleet/benchmarks"));
+  endpoint.searchParams.set("window", "30d");
+  if (peerGroup) {
+    endpoint.searchParams.set("team_size", peerGroup.teamSize);
+    endpoint.searchParams.set("use_case", peerGroup.useCase);
+  }
+  const key = endpoint.toString();
+  if (fleetCache?.key === key && fleetCache.until > now)
     return fleetCache.value;
   let value = null;
   try {
-    const response = await fetch(`${await telemetryProxyEndpoint("/v1/fleet/benchmarks")}?window=30d`, {
-      signal: AbortSignal.timeout(TIMEOUT_MS2)
-    });
+    const response = await fetch(key, { signal: AbortSignal.timeout(TIMEOUT_MS2) });
     if (response.ok) {
       const parsed = ProxyFleetBenchmarksSchema.safeParse(await response.json());
       if (parsed.success)
         value = parsed.data;
     }
   } catch {}
-  fleetCache = { value, until: now + (value ? FLEET_TTL_MS : FLEET_FAILURE_TTL_MS) };
+  fleetCache = { key, value, until: now + (value ? FLEET_TTL_MS : FLEET_FAILURE_TTL_MS) };
   return value;
 }
-async function localStats(now) {
-  if (localCache && localCache.until > now.getTime())
+async function localStats(now, requireIngestAnchor = true) {
+  if (localCache?.requireIngestAnchor === requireIngestAnchor && localCache.until > now.getTime())
     return localCache.value;
-  const value = await getLocalFleetStats(now);
-  localCache = { value, until: now.getTime() + LOCAL_TTL_MS };
+  const value = await getLocalFleetStats(now, { requireIngestAnchor });
+  localCache = { requireIngestAnchor, value, until: now.getTime() + LOCAL_TTL_MS };
   return value;
 }
-async function orgName() {
-  const stored = (await getSwarmConfigs2({ scope: "global", key: "SWARM_ORG_NAME" }))?.[0]?.value?.trim();
-  return stored || process.env.SWARM_ORG_NAME?.trim() || undefined;
-}
 async function buildFleetBenchmarkResponse(now = new Date) {
+  const [name, website, teamSize, useCase] = await Promise.all([
+    globalConfig("SWARM_ORG_NAME"),
+    globalConfig("SWARM_ORG_WEBSITE"),
+    globalConfig("SWARM_ORG_TEAM_SIZE"),
+    globalConfig("SWARM_ORG_USE_CASE")
+  ]);
+  const team = _enum2(COMPANY_TEAM_SIZES).safeParse(teamSize);
+  const use = _enum2(COMPANY_USE_CASES).safeParse(useCase);
+  const peerGroup = normalizeOrgWebsite(website) && team.success && use.success ? { teamSize: team.data, useCase: use.data } : null;
   const empty = {
+    level: peerGroup ? "full" : "basic",
+    peerGroup: null,
     local: null,
     minFinishedTasks: FLEET_MIN_FINISHED_TASKS,
     generatedAt: null,
     comparisons: []
   };
-  if (!isTelemetryEnabled())
-    return { state: "telemetry_off", ...empty };
-  if (!await orgName())
+  const telemetryEnabled = isTelemetryEnabled();
+  if (telemetryEnabled && !name)
     return { state: "no_org_name", ...empty };
-  const stats = await localStats(now);
+  const stats = await localStats(now, telemetryEnabled);
   if (!stats)
     return { state: "unavailable", ...empty };
   const finishedTasks = stats.tasksCompleted + stats.tasksFailed;
@@ -13151,14 +13205,23 @@ async function buildFleetBenchmarkResponse(now = new Date) {
     agents: stats.agents,
     bucket: fleetBucketFor(stats.agents)
   };
+  if (!telemetryEnabled)
+    return { ...empty, state: "telemetry_off", local };
   if (finishedTasks < FLEET_MIN_FINISHED_TASKS)
     return { ...empty, state: "not_enough_tasks", local };
-  const fleet = await fleetBenchmarks(now.getTime());
+  const fleet = await fleetBenchmarks(now.getTime(), peerGroup);
+  const responsePeerGroup = peerGroup && fleet?.peer_group ? {
+    teamSize: fleet.peer_group.team_size,
+    useCase: fleet.peer_group.use_case,
+    orgs: fleet.peer_group.orgs
+  } : null;
   const comparisons = fleet ? compareWithFleet(stats, fleet, now) : [];
   if (!fleet || comparisons.length === 0)
-    return { ...empty, state: "unavailable", local };
+    return { ...empty, state: "unavailable", local, peerGroup: responsePeerGroup };
   return {
+    ...empty,
     state: "ready",
+    peerGroup: responsePeerGroup,
     local,
     minFinishedTasks: FLEET_MIN_FINISHED_TASKS,
     generatedAt: fleet.generatedAt,
@@ -23575,7 +23638,7 @@ async function handleTasks(req, res, pathSegments, queryParams, myAgentId) {
       return true;
     }
     if (task.workflowRunStepId != null) {
-      const failed = await failTask2(parsed.params.id, "superseded_workflow_task");
+      const failed = await failTask2(parsed.params.id, SUPERSEDED_WORKFLOW_TASK_REASON);
       ensure({
         id: "task.workflow_step_failed_on_supersede",
         flow: "task",
@@ -34968,9 +35031,8 @@ function uiEventEmitter(event) {
   return relayable.get(event)?.source;
 }
 function resolveSpec(spec) {
-  if (!spec.ref)
-    return spec;
-  return { ...file.definitions[spec.ref], ...spec };
+  const resolved = spec.ref ? { ...file.definitions[spec.ref], ...spec } : spec;
+  return resolved.items ? { ...resolved, items: resolveSpec(resolved.items) } : resolved;
 }
 function typeMatches(type, value) {
   switch (type) {
@@ -35015,6 +35077,12 @@ function validateUiEvent(event, properties) {
     if (spec.enum && !spec.enum.includes(value)) {
       problems.push(`"${key}" must be one of ${spec.enum.join(", ")}`);
     }
+    if (Array.isArray(value) && spec.items?.enum) {
+      const allowed = spec.items.enum;
+      if (value.some((item) => !allowed.includes(item))) {
+        problems.push(`"${key}" items must be one of ${allowed.join(", ")}`);
+      }
+    }
     if (typeof spec.minimum === "number" && typeof value === "number" && value < spec.minimum) {
       problems.push(`"${key}" must be at least ${spec.minimum}`);
     }
@@ -35055,7 +35123,7 @@ var enableTelemetry = route({
   summary: "Turn telemetry on",
   description: "Stores `ANONYMIZED_TELEMETRY=true` and applies it to the running server: the install ID is minted if needed and `telemetry.enabled` is sent once, so no restart is needed.",
   tags: ["Telemetry"],
-  body: object2({ via: _enum2(["banner", "settings"]).default("banner") }),
+  body: object2({ via: _enum2(["banner", "settings", "benchmark"]).default("banner") }),
   responses: {
     200: {
       description: "Telemetry is on",
@@ -36006,7 +36074,7 @@ var createUserRoute = route({
   tags: ["Users"],
   body: object2({
     name: string2().min(1),
-    email: string2().optional(),
+    email: string2().email("Email must be a valid email address").optional(),
     role: string2().optional(),
     notes: string2().optional(),
     emailAliases: array2(string2()).optional(),
@@ -36101,7 +36169,7 @@ var updateUserRoute = route({
   params: object2({ id: string2() }),
   body: object2({
     name: string2().min(1).optional(),
-    email: string2().optional(),
+    email: string2().email("Email must be a valid email address").nullable().optional(),
     role: string2().optional(),
     notes: string2().optional(),
     emailAliases: array2(string2()).optional(),
@@ -39012,7 +39080,7 @@ var httpServer = createHttpServer(async (req, res) => {
   });
 });
 var detachRealtime = attachRealtimeTransport(httpServer);
-var { attachControllerTransport } = await import("./controllers-connect-gkxmqw9d.js");
+var { attachControllerTransport } = await import("./controllers-connect-bg33ae53.js");
 var detachControllers = attachControllerTransport(httpServer);
 var stopWorkerNudges = startWorkerNudgeListener();
 var stopRoomDeletion = realtimeBus.subscribe("room:namespace-deleted", (namespace) => {
@@ -39041,7 +39109,7 @@ async function shutdown() {
     sessionsProcessed: getServerSessionsProcessed()
   });
   if (hasCapability("scheduling")) {
-    const { stopScheduler } = await import("./index-8pwc1jc8.js");
+    const { stopScheduler } = await import("./index-h2ek08d6.js");
     stopScheduler();
   }
   stopHeartbeat2();
@@ -39053,7 +39121,7 @@ async function shutdown() {
   await stopSlackApp2();
   await stopChatSdk();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { stopOAuthKeepalive } = await import("./keepalive-3nr4st3r.js");
+    const { stopOAuthKeepalive } = await import("./keepalive-nhvpw10z.js");
     await stopOAuthKeepalive();
   }
   stopOAuthPendingGc();
@@ -39133,21 +39201,21 @@ try {
   console.warn("[startup] CAPABILITIES upgrade seed failed (non-fatal):", err);
 }
 try {
-  const { ensurePricingSeeded } = await import("./boot-seeds-xs9a8dx1.js");
+  const { ensurePricingSeeded } = await import("./boot-seeds-6wxqkfk2.js");
   ensurePricingSeeded();
-  const { startPricingRefreshLoop } = await import("./pricing-refresh-5nvme3sm.js");
+  const { startPricingRefreshLoop } = await import("./pricing-refresh-3cqx3f3x.js");
   startPricingRefreshLoop();
 } catch (err) {
   console.error("[startup] Failed to seed pricing rows:", err);
 }
 try {
-  const { ensureModelProfilesSeeded } = await import("./boot-seeds-xs9a8dx1.js");
+  const { ensureModelProfilesSeeded } = await import("./boot-seeds-6wxqkfk2.js");
   await ensureModelProfilesSeeded();
 } catch (err) {
   console.error("[startup] Failed to seed model profiles:", err);
 }
 try {
-  const { ensureRbacSeeded } = await import("./boot-seeds-xs9a8dx1.js");
+  const { ensureRbacSeeded } = await import("./boot-seeds-6wxqkfk2.js");
   ensureRbacSeeded();
 } catch (err) {
   console.error("[startup] Failed to sync RBAC seed rows:", err);
@@ -39155,7 +39223,7 @@ try {
     throw err;
 }
 try {
-  const { runAllSeeders } = await import("./index-s7ckdajq.js");
+  const { runAllSeeders } = await import("./index-2z710v4x.js");
   await runAllSeeders({ scriptEmbeddingMode: "skip" });
 } catch (err) {
   console.error("[startup] Failed to seed built-in entities:", err);
@@ -39217,39 +39285,39 @@ httpServer.listen(port, async () => {
   await initWorkflows2();
   await startScriptRunSupervisor(getMcpBaseUrl());
   if (hasCapability("scheduling")) {
-    const { startScheduler } = await import("./index-8pwc1jc8.js");
-    const { getExecutorRegistry } = await import("./index-dg2tmj99.js");
+    const { startScheduler } = await import("./index-h2ek08d6.js");
+    const { getExecutorRegistry } = await import("./index-dgz61nff.js");
     const intervalMs = Number(process.env.SCHEDULER_INTERVAL_MS) || 1e4;
     startScheduler(getExecutorRegistry(), intervalMs, {
       runId: globalState.__runId
     });
   }
   if (!isEnvFlagEnabled("HEARTBEAT_DISABLE", false)) {
-    const { startHeartbeat } = await import("./index-nxa6me0q.js");
+    const { startHeartbeat } = await import("./index-pqfwh9nn.js");
     const heartbeatMs = Number(process.env.HEARTBEAT_INTERVAL_MS) || 90000;
     startHeartbeat(heartbeatMs);
   }
   startPoolRouting();
   startRuntimeSupervisor();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { startOAuthKeepalive } = await import("./keepalive-3nr4st3r.js");
+    const { startOAuthKeepalive } = await import("./keepalive-nhvpw10z.js");
     startOAuthKeepalive();
   }
   if (process.env.OAUTH_REFRESH_SWEEP_DISABLE !== "true") {
-    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-9q2t0y3q.js");
+    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-4dcbhtn0.js");
     startOAuthRefreshSweep();
   }
   startOAuthPendingGc();
   await startMemoryGc();
   await startDbRetention();
   startHumanFreeDrain();
-  import("./boot-reembed-qr8a894z.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+  import("./boot-reembed-e53x6b9v.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
     console.error("[boot-reembed] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-reembed-rj85jjhw.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+  import("./boot-reembed-f6z923ny.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
     console.error("[boot-reembed-scripts] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-scrub-sweep-eyfvn6v9.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
+  import("./boot-scrub-sweep-0538vsb7.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
     console.error("[boot-scrub-sweep] startup scrub failed (non-fatal):", err);
   });
 }).on("error", (err) => {