@desplega.ai/agent-swarm 1.113.0 → 1.115.0

package/dist/{cli-4xyj9jtq.js → cli-hrhye2rm.js}

@@ -7,20 +7,22 @@ import {
   LlmRater,
   REFERENCES_SOURCE_MAX_LENGTH,
   sanitizeReferencesSource
-} from "./cli-dcfyyh3t.js";
-import {
-  ensureToken,
-  ensureTokenOrThrow,
-  getOAuthApp,
-  getOAuthTokens,
-  upsertOAuthApp
-} from "./cli-bgef578c.js";
+} from "./cli-ftyf58xj.js";
 import {
   startPricingRefreshLoop
-} from "./cli-36ymmpmp.js";
+} from "./cli-3samkyap.js";
 import {
   seedPricingFromModelsDev
-} from "./cli-tbw13sx8.js";
+} from "./cli-tece6zgm.js";
+import {
+  ensureRbacSeedsSynced,
+  getUserGrant
+} from "./cli-52fg7s7x.js";
+import {
+  can,
+  decideAdmission,
+  isRbacEnabled
+} from "./cli-86fdnerz.js";
 import {
   createTrackerAgentMapping,
   createTrackerSync,
@@ -35,7 +37,7 @@ import {
   repointTrackerSyncBySwarmId,
   updateTrackerSync,
   updateTrackerSyncSwarmId
-} from "./cli-r5g6ngtn.js";
+} from "./cli-dcca6j8m.js";
 import {
   ZodFirstPartyTypeKind,
   objectType
@@ -45,35 +47,41 @@ import {
   ensure,
   require_dist,
   runScheduleNow
-} from "./cli-gtkqc144.js";
+} from "./cli-shvaxw27.js";
 import {
   TriggerSchemaError,
   applyDefinitionPatch,
   cancelWorkflowRun,
   generateEdges,
   getExecutorRegistry,
+  getOAuthBindingTokenStatus,
+  getOAuthProviderConfig,
   retryFailedRun,
   snapshotWorkflow,
   startWorkflowExecution,
   validateDefinition,
   validateJsonSchema
-} from "./cli-z46pnksz.js";
+} from "./cli-q1rx7g0d.js";
 import {
   getApiKey
 } from "./cli-f14fvzag.js";
 import {
   CREDENTIAL_BINDINGS_CONFIG_KEY,
   CredentialBindingSchema,
+  assertUrlSafe,
   disableCredentialBinding,
   getScript,
+  getScriptConnectionById,
   importLegacyCredentialBindings,
   listRelationalCredentialBindings,
   listScriptConnections,
   placeholderForConfigKey,
+  publicEndpointSsrfOptions,
+  refreshScriptConnection,
   setScriptConnectionEnabled,
   upsertCredentialBinding,
   upsertScriptConnection
-} from "./cli-qwgtacd6.js";
+} from "./cli-r9f6ngrf.js";
 import {
   CANDIDATE_SET_MULTIPLIER,
   computeScore,
@@ -85,32 +93,44 @@ import {
   isGraphExpansionEnabled,
   rerank,
   rowToCandidate
-} from "./cli-f3qa069v.js";
+} from "./cli-7xje5amz.js";
+import {
+  buildAuthorizationUrl,
+  ensureToken,
+  ensureTokenOrThrow,
+  getOAuthApp,
+  getOAuthTokens,
+  upsertOAuthApp
+} from "./cli-t0vqevnm.js";
 import {
   createAdditiveBuffer,
   extractSlackMessageText,
   parseSlackTs
-} from "./cli-bgvskydy.js";
+} from "./cli-tffvrh6j.js";
 import {
   getSlackApp,
   startSlackApp,
   stopSlackApp
-} from "./cli-trmapn9k.js";
+} from "./cli-pet3aev6.js";
 import {
   findOrCreateUserByEmail,
-  findUserByEmail,
   findUserByExternalId,
   findUserById,
+  findUsersByName,
   fingerprintApiKey,
   getUserIdentities,
   linkIdentity,
   recordIdentityEvent,
+  recordUnmappedIdentity,
+  renderIdentity,
+  resolveIdentity,
+  resolveIdentityByEmail,
   resolveUserByToken,
   unlinkIdentity
-} from "./cli-h3k622d0.js";
+} from "./cli-6aq8xhvm.js";
 import {
   markdownToSlack
-} from "./cli-6xd0bvf8.js";
+} from "./cli-ma04faw5.js";
 import {
   agentContextKey,
   agentmailContextKey,
@@ -118,7 +138,7 @@ import {
   createTaskWithSiblingAwareness,
   githubContextKey,
   linearContextKey
-} from "./cli-y4ycrnjc.js";
+} from "./cli-k3y4z3h5.js";
 import {
   getAppUrl,
   getMcpBaseUrl,
@@ -193,6 +213,7 @@ import {
   deleteChannel,
   deleteKv,
   deleteMcpServer,
+  deletePage,
   deletePromptTemplate,
   deleteScheduledTask,
   deleteService,
@@ -295,6 +316,7 @@ import {
   installMcpServer,
   installSkill,
   interpolate,
+  isAgentEligibleForTask,
   isReservedConfigKey,
   isTerminalTaskStatus,
   listKv,
@@ -347,10 +369,10 @@ import {
   upsertService,
   upsertSwarmConfig,
   validateConfigValue
-} from "./cli-ncfgsqbd.js";
+} from "./cli-15y7qhzp.js";
 import {
   init_zod
-} from "./cli-q21d49ac.js";
+} from "./cli-bw80ck94.js";
 import {
   $ZodObject,
   $ZodType,
@@ -387,11 +409,11 @@ import {
   union,
   unknown,
   uuid
-} from "./cli-anrj584m.js";
+} from "./cli-xz9aq0rf.js";
 import {
   init_package,
   package_default
-} from "./cli-c3frqf65.js";
+} from "./cli-b23axgz4.js";
 import {
   init_secret_scrubber,
   refreshSecretScrubberCache,
@@ -19613,300 +19635,6 @@ function registerGithubTaskReactions() {
 init_zod();
 init_db();
 
-// src/rbac/legacy-policy.ts
-var leadOnly = {
-  name: "lead-only",
-  denyReason: "requires lead agent",
-  evaluate: (principal) => principal.kind === "agent" && principal.isLead
-};
-var leadOrTaskCreator = {
-  name: "lead-or-task-creator",
-  denyReason: "requires lead agent or task creator",
-  evaluate: (principal, resource) => {
-    if (principal.kind !== "agent")
-      return false;
-    if (principal.isLead)
-      return true;
-    return resource?.kind === "task" && resource.creatorAgentId != null && resource.creatorAgentId === principal.agentId;
-  }
-};
-var leadOrResourceOwner = {
-  name: "lead-or-resource-owner",
-  denyReason: "requires lead agent or resource owner",
-  evaluate: (principal, resource) => {
-    if (principal.kind !== "agent")
-      return false;
-    if (principal.isLead)
-      return true;
-    return resource?.kind === "owned" && resource.ownerAgentId != null && resource.ownerAgentId === principal.agentId;
-  }
-};
-var leadOrOwnNamespace = {
-  name: "lead-or-own-namespace",
-  denyReason: "requires lead agent or your own task:agent: namespace",
-  evaluate: (principal, resource) => {
-    if (principal.kind !== "agent")
-      return false;
-    if (principal.isLead)
-      return true;
-    return principal.agentId !== "" && resource?.kind === "kv-namespace" && resource.namespace === `task:agent:${principal.agentId}`;
-  }
-};
-var requesterOwnsTask = {
-  name: "requester-owns-task",
-  denyReason: "not the task requester",
-  evaluate: (principal, resource) => {
-    if (principal.kind !== "user")
-      return true;
-    return resource?.kind === "task" && resource.requestedByUserId === principal.userId;
-  }
-};
-var memoryOwnerOrLeadSwarm = {
-  name: "memory-owner-or-lead-swarm",
-  denyReason: "requires memory owner, or lead agent for swarm-scoped memories",
-  evaluate: (principal, resource) => {
-    if (principal.kind !== "agent" || resource?.kind !== "owned")
-      return false;
-    if (resource.ownerAgentId != null && resource.ownerAgentId === principal.agentId)
-      return true;
-    return principal.isLead && resource.scope === "swarm";
-  }
-};
-var taskFsMutate = {
-  name: "operator-or-user-or-lead-or-task-owner",
-  denyReason: "requires operator, user, lead agent, task assignee, or task creator",
-  evaluate: (principal, resource) => {
-    if (principal.kind === "operator" || principal.kind === "user")
-      return true;
-    if (principal.isLead)
-      return true;
-    if (resource?.kind !== "task")
-      return false;
-    return resource.agentId != null && resource.agentId === principal.agentId || resource.creatorAgentId != null && resource.creatorAgentId === principal.agentId;
-  }
-};
-var LEGACY_POLICY = {
-  "user.manage": leadOnly,
-  "agent.profile.update.any": leadOnly,
-  "agent.context.read.any": leadOnly,
-  "task.cancel.any": leadOrTaskCreator,
-  "task.read.own": requesterOwnsTask,
-  "task.cancel.own": requesterOwnsTask,
-  "task.action.own": requesterOwnsTask,
-  "task.fs.mutate": taskFsMutate,
-  "memory.learning.inject": leadOnly,
-  "memory.delete.any": memoryOwnerOrLeadSwarm,
-  "channel.delete": leadOnly,
-  "integration.kapso.manage": leadOnly,
-  "integration.slack.post": leadOnly,
-  "integration.slack.read": leadOnly,
-  "integration.slack.thread.start": leadOnly,
-  "integration.slack.upload": leadOnly,
-  "integration.slack.delete": leadOnly,
-  "integration.slack.update": leadOnly,
-  "credential-binding.manage": leadOnly,
-  "script-connection.manage": leadOnly,
-  "config.credential-bindings.write": leadOnly,
-  "config.write.any": leadOnly,
-  "config.delete.any": leadOnly,
-  "config.read.secrets": leadOnly,
-  "skill.create.swarm": leadOnly,
-  "skill.install.any": leadOnly,
-  "skill.install.global": leadOnly,
-  "skill.uninstall.any": leadOnly,
-  "skill.update.any": leadOrResourceOwner,
-  "skill.promote.swarm": leadOnly,
-  "skill.delete.any": leadOrResourceOwner,
-  "mcp-server.create.swarm": leadOnly,
-  "mcp-server.install.any": leadOnly,
-  "mcp-server.uninstall.any": leadOnly,
-  "mcp-server.delete.any": leadOrResourceOwner,
-  "mcp-server.update.any": leadOrResourceOwner,
-  "kv.write.any": leadOrOwnNamespace,
-  "script.global.write": leadOnly,
-  "script.global.delete": leadOnly
-};
-
-// src/rbac/can.ts
-var auditSink = null;
-function setAuditSink(fn) {
-  auditSink = fn;
-}
-function clearAuditSink() {
-  auditSink = null;
-}
-function can(check) {
-  const rule = LEGACY_POLICY[check.verb];
-  const decision = rule.evaluate(check.principal, check.resource) ? { allow: true } : { allow: false, reason: rule.denyReason, missing: check.verb };
-  if (auditSink) {
-    try {
-      auditSink(check, decision);
-    } catch {}
-  }
-  return decision;
-}
-// src/rbac/permissions.ts
-init_zod();
-var PERMISSIONS = {
-  "user.manage": {
-    description: "Create, update, or deactivate user profiles.",
-    namespace: "user"
-  },
-  "agent.profile.update.any": {
-    description: "Update another agent's profile.",
-    namespace: "agent"
-  },
-  "agent.context.read.any": {
-    description: "View or diff another agent's context history.",
-    namespace: "agent"
-  },
-  "task.cancel.any": {
-    description: "Cancel any task (beyond tasks the caller created).",
-    namespace: "task"
-  },
-  "task.read.own": {
-    description: "Read details of a task the principal requested.",
-    namespace: "task"
-  },
-  "task.cancel.own": {
-    description: "Cancel a task the principal requested.",
-    namespace: "task"
-  },
-  "task.action.own": {
-    description: "Run actions (follow-up, retry, ...) on a task the principal requested.",
-    namespace: "task"
-  },
-  "task.fs.mutate": {
-    description: "Mutate a task's filesystem artifacts and attachments.",
-    namespace: "task"
-  },
-  "memory.learning.inject": {
-    description: "Inject a learning into another agent's memory.",
-    namespace: "memory"
-  },
-  "memory.delete.any": {
-    description: "Delete a memory entry (own entries, or swarm-scoped entries as lead).",
-    namespace: "memory"
-  },
-  "channel.delete": {
-    description: "Delete a Slack channel.",
-    namespace: "channel"
-  },
-  "integration.kapso.manage": {
-    description: "Register or unregister a Kapso inbound number.",
-    namespace: "integration"
-  },
-  "integration.slack.post": {
-    description: "Post to a direct Slack channel.",
-    namespace: "integration"
-  },
-  "integration.slack.read": {
-    description: "Read a direct Slack channel.",
-    namespace: "integration"
-  },
-  "integration.slack.thread.start": {
-    description: "Start a thread in a direct Slack channel.",
-    namespace: "integration"
-  },
-  "integration.slack.upload": {
-    description: "Upload a file to a direct Slack channel.",
-    namespace: "integration"
-  },
-  "integration.slack.delete": {
-    description: "Delete a Slack message.",
-    namespace: "integration"
-  },
-  "integration.slack.update": {
-    description: "Update (edit) a Slack message.",
-    namespace: "integration"
-  },
-  "credential-binding.manage": {
-    description: "Manage script credential bindings.",
-    namespace: "credential-binding"
-  },
-  "script-connection.manage": {
-    description: "Manage script connections.",
-    namespace: "script-connection"
-  },
-  "config.credential-bindings.write": {
-    description: "Write the SCRIPT_CREDENTIAL_BINDINGS swarm-config key.",
-    namespace: "config"
-  },
-  "config.write.any": {
-    description: "Write any swarm-config key.",
-    namespace: "config"
-  },
-  "config.delete.any": {
-    description: "Delete any swarm-config entry.",
-    namespace: "config"
-  },
-  "config.read.secrets": {
-    description: "Read unmasked secret config values.",
-    namespace: "config"
-  },
-  "skill.create.swarm": {
-    description: "Create a swarm-scoped skill.",
-    namespace: "skill"
-  },
-  "skill.install.any": {
-    description: "Install a skill for another agent.",
-    namespace: "skill"
-  },
-  "skill.install.global": {
-    description: "Install a remote/global skill.",
-    namespace: "skill"
-  },
-  "skill.uninstall.any": {
-    description: "Uninstall a skill for another agent.",
-    namespace: "skill"
-  },
-  "skill.update.any": {
-    description: "Update a skill the caller does not own.",
-    namespace: "skill"
-  },
-  "skill.promote.swarm": {
-    description: "Promote a skill to swarm scope (skill-approval path).",
-    namespace: "skill"
-  },
-  "skill.delete.any": {
-    description: "Delete a skill the caller does not own.",
-    namespace: "skill"
-  },
-  "mcp-server.create.swarm": {
-    description: "Create a swarm- or global-scoped MCP server.",
-    namespace: "mcp-server"
-  },
-  "mcp-server.install.any": {
-    description: "Install an MCP server for another agent.",
-    namespace: "mcp-server"
-  },
-  "mcp-server.uninstall.any": {
-    description: "Uninstall an MCP server for another agent.",
-    namespace: "mcp-server"
-  },
-  "mcp-server.delete.any": {
-    description: "Delete an MCP server the caller does not own.",
-    namespace: "mcp-server"
-  },
-  "mcp-server.update.any": {
-    description: "Update an MCP server the caller does not own.",
-    namespace: "mcp-server"
-  },
-  "kv.write.any": {
-    description: "Write another agent's task:agent: KV namespace.",
-    namespace: "kv"
-  },
-  "script.global.write": {
-    description: "Create or update a global-scope script.",
-    namespace: "script"
-  },
-  "script.global.delete": {
-    description: "Delete a global-scope script.",
-    namespace: "script"
-  }
-};
-var PERMISSION_VERBS = Object.keys(PERMISSIONS);
-var PermissionVerbSchema = _enum(PERMISSION_VERBS);
 // src/tools/task-tool-ctx.ts
 function ownerCtx(info) {
   return {
@@ -19973,7 +19701,7 @@ async function initOtel(serviceRole = process.env.AGENT_ROLE || "api") {
     return;
   initialized2 = true;
   try {
-    const impl = await import("./otel-impl-b86qseaa.js");
+    const impl = await import("./otel-impl-wbns8hf7.js");
     await impl.boot(serviceRole);
     realWithSpan = impl.withSpan;
     realStartSpan = impl.startSpan;
@@ -21248,22 +20976,87 @@ var registerCreatePageTool = (server) => {
 // src/tools/credential-bindings/tool.ts
 init_zod();
 init_db();
+
+// src/oauth/app-validation.ts
+var RESERVED_OAUTH_PROVIDERS = new Set(["linear", "jira"]);
+function assertOAuthProviderIsNotReserved(provider) {
+  if (!RESERVED_OAUTH_PROVIDERS.has(provider.toLowerCase()))
+    return;
+  throw new Error(`OAuth provider "${provider}" is reserved for dedicated tracker OAuth flows. Use the Linear/Jira tracker integration flow instead.`);
+}
+function assertOAuthAppUrlsSafe(input) {
+  const options = publicEndpointSsrfOptions();
+  assertUrlSafe(input.authorizeUrl, options);
+  assertUrlSafe(input.tokenUrl, options);
+}
+
+// src/utils/scoped-resource.ts
+init_zod();
+var scopedResourceScopeIdSchema = exports_external.string().min(1).max(255);
+var agentScopeIdSchema = exports_external.string().uuid();
+function resolveScopedResourceId(scope, scopeId, subject) {
+  if (!scope || scope === "global")
+    return null;
+  if (!scopeId || scopeId.trim().length === 0) {
+    throw new Error(`scopeId is required for ${scope} ${subject}.`);
+  }
+  if (scopeId.length > 255) {
+    throw new Error(`scopeId must be at most 255 characters for ${scope} ${subject}.`);
+  }
+  if (scope === "agent" && !agentScopeIdSchema.safeParse(scopeId).success) {
+    throw new Error(`scopeId must be an agent UUID for agent ${subject}.`);
+  }
+  return scopeId;
+}
+
+// src/tools/credential-bindings/tool.ts
+var providerSchema = string().min(1).max(255).regex(/^[A-Za-z0-9_-]+$/);
+var tokenStatusSchema = _enum(["ok", "expiring", "missing"]);
+var credentialBindingToolBindingSchema = CredentialBindingSchema.and(object({
+  id: string().optional(),
+  source: _enum(["default", "user", "migration"]).optional(),
+  createdAt: string().optional(),
+  updatedAt: string().optional(),
+  createdBy: string().nullable().optional(),
+  updatedBy: string().nullable().optional(),
+  tokenStatus: tokenStatusSchema.optional()
+}));
 var credentialBindingsOutputSchema = object({
   yourAgentId: string().uuid().optional(),
   success: boolean(),
   message: string(),
-  bindings: array(CredentialBindingSchema)
+  provider: string().optional(),
+  authorizeUrl: string().optional(),
+  redirectUri: string().optional(),
+  bindings: array(credentialBindingToolBindingSchema)
 });
 var credentialBindingsInputSchema = object({
-  action: _enum(["list", "upsert", "disable", "import-legacy"]).describe("List, add/update, disable, or import legacy JSON bindings."),
-  id: string().uuid().optional(),
-  configKey: string().min(1).max(255).optional(),
-  allowedHosts: array(string().min(1)).min(1).optional(),
-  headerTemplate: string().min(1).optional(),
-  queryTemplate: string().min(1).optional(),
-  scope: _enum(["global", "agent", "repo"]).default("global").optional(),
-  scopeId: string().uuid().nullable().optional()
+  action: _enum(["list", "upsert", "disable", "import-legacy", "oauth-app-upsert", "oauth-authorize-url"]).describe("List, add/update, disable, import legacy JSON bindings, or register/authorize OAuth apps."),
+  id: string().uuid().optional().describe("Existing credential binding ID for update or disable."),
+  configKey: string().min(1).max(255).optional().describe("Swarm config key whose secret value is injected through templates."),
+  allowedHosts: array(string().min(1)).min(1).optional().describe("Allowed outbound hostnames for this binding."),
+  headerTemplate: string().min(1).optional().describe("Header template containing the config-key placeholder."),
+  queryTemplate: string().min(1).optional().describe("Query parameter template containing the config-key placeholder."),
+  scope: _enum(["global", "agent", "repo"]).default("global").optional().describe("Binding visibility scope."),
+  scopeId: scopedResourceScopeIdSchema.nullable().optional().describe("Agent UUID for agent scope or repo id (owner/name) for repo scope."),
+  authKind: _enum(["config", "oauth"]).default("config").optional().describe("Use config for stored swarm config secrets or oauth for OAuth token resolution."),
+  oauthProvider: providerSchema.optional().describe("OAuth provider slug required when authKind is oauth."),
+  provider: providerSchema.optional().describe("OAuth provider slug for oauth-app-upsert and oauth-authorize-url."),
+  clientId: string().min(1).optional().describe("OAuth client ID for oauth-app-upsert."),
+  clientSecret: string().min(1).optional().describe("OAuth client secret for oauth-app-upsert."),
+  authorizeUrl: string().url().optional().describe("OAuth authorization URL for oauth-app-upsert."),
+  tokenUrl: string().url().optional().describe("OAuth token URL for oauth-app-upsert."),
+  scopes: array(string().min(1)).optional().describe("OAuth scopes for oauth-app-upsert."),
+  extraParams: record(string(), string()).optional().describe("Extra OAuth authorization parameters stored with the OAuth app."),
+  tokenAuthStyle: _enum(["body", "basic"]).optional().describe("How client credentials reach the token endpoint: body params (default) or HTTP Basic auth (required by e.g. Notion)."),
+  tokenBodyFormat: _enum(["form", "json"]).optional().describe("Token request body encoding: form-urlencoded (default) or JSON (required by e.g. Notion).")
 });
+function genericOAuthRedirectUri(provider) {
+  return `${getPublicMcpBaseUrl()}/api/oauth/${encodeURIComponent(provider)}/callback`;
+}
+function decorateBindings(bindings) {
+  return bindings.map((binding) => binding.authKind === "oauth" && binding.oauthProvider ? { ...binding, tokenStatus: getOAuthBindingTokenStatus(binding.oauthProvider) } : binding);
+}
 var registerCredentialBindingsTool = (server) => {
   createToolRegistrar(server)("credential-bindings", {
     title: "Credential Bindings",
@@ -21304,7 +21097,115 @@ var registerCredentialBindingsTool = (server) => {
         }
       };
     }
-    const bindings = listRelationalCredentialBindings({ includeInactive: true });
+    const currentBindings = () => decorateBindings(listRelationalCredentialBindings({ includeInactive: true }));
+    const bindings = currentBindings();
+    if (args.action === "oauth-app-upsert") {
+      if (!args.provider || !args.clientId || !args.clientSecret || !args.authorizeUrl || !args.tokenUrl || !args.scopes) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: "provider, clientId, clientSecret, authorizeUrl, tokenUrl, and scopes are required for oauth-app-upsert."
+            }
+          ],
+          structuredContent: {
+            yourAgentId: requestInfo.agentId,
+            success: false,
+            message: "provider, clientId, clientSecret, authorizeUrl, tokenUrl, and scopes are required for oauth-app-upsert.",
+            bindings
+          }
+        };
+      }
+      try {
+        assertOAuthProviderIsNotReserved(args.provider);
+        assertOAuthAppUrlsSafe({
+          authorizeUrl: args.authorizeUrl,
+          tokenUrl: args.tokenUrl
+        });
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+          content: [{ type: "text", text: message }],
+          structuredContent: {
+            yourAgentId: requestInfo.agentId,
+            success: false,
+            message,
+            bindings
+          }
+        };
+      }
+      const redirectUri = genericOAuthRedirectUri(args.provider);
+      upsertOAuthApp(args.provider, {
+        clientId: args.clientId,
+        clientSecret: args.clientSecret,
+        authorizeUrl: args.authorizeUrl,
+        tokenUrl: args.tokenUrl,
+        redirectUri,
+        scopes: args.scopes.join(","),
+        ...args.extraParams || args.tokenAuthStyle || args.tokenBodyFormat ? {
+          metadata: JSON.stringify({
+            ...args.extraParams ? { extraParams: args.extraParams } : {},
+            ...args.tokenAuthStyle ? { tokenAuthStyle: args.tokenAuthStyle } : {},
+            ...args.tokenBodyFormat ? { tokenBodyFormat: args.tokenBodyFormat } : {}
+          })
+        } : {}
+      });
+      return {
+        content: [
+          {
+            type: "text",
+            text: `OAuth app ${args.provider} saved. Redirect URI: ${redirectUri}`
+          }
+        ],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: true,
+          message: `OAuth app ${args.provider} saved.`,
+          provider: args.provider,
+          redirectUri,
+          bindings: currentBindings()
+        }
+      };
+    }
+    if (args.action === "oauth-authorize-url") {
+      if (!args.provider) {
+        return {
+          content: [{ type: "text", text: "provider is required for oauth-authorize-url." }],
+          structuredContent: {
+            yourAgentId: requestInfo.agentId,
+            success: false,
+            message: "provider is required for oauth-authorize-url.",
+            bindings
+          }
+        };
+      }
+      const config = getOAuthProviderConfig(args.provider);
+      if (!config) {
+        return {
+          content: [{ type: "text", text: `OAuth app ${args.provider} is not configured.` }],
+          structuredContent: {
+            yourAgentId: requestInfo.agentId,
+            success: false,
+            message: `OAuth app ${args.provider} is not configured.`,
+            provider: args.provider,
+            bindings
+          }
+        };
+      }
+      const result = await buildAuthorizationUrl(config);
+      return {
+        content: [{ type: "text", text: result.url }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: true,
+          message: `OAuth authorization URL generated for ${args.provider}.`,
+          provider: args.provider,
+          authorizeUrl: result.url,
+          redirectUri: config.redirectUri,
+          bindings
+        }
+      };
+    }
     if (args.action === "list") {
       return {
         content: [
@@ -21323,7 +21224,7 @@ var registerCredentialBindingsTool = (server) => {
     }
     if (args.action === "import-legacy") {
       const imported = importLegacyCredentialBindings();
-      const nextBindings2 = listRelationalCredentialBindings({ includeInactive: true });
+      const nextBindings2 = currentBindings();
       return {
         content: [{ type: "text", text: `Imported ${imported} legacy credential binding(s).` }],
         structuredContent: {
@@ -21347,7 +21248,7 @@ var registerCredentialBindingsTool = (server) => {
           }
         };
       }
-      const nextBindings2 = listRelationalCredentialBindings({ includeInactive: true });
+      const nextBindings2 = currentBindings();
       return {
         content: [{ type: "text", text: `Credential binding ${disabled.configKey} disabled.` }],
         structuredContent: {
@@ -21370,14 +21271,17 @@ var registerCredentialBindingsTool = (server) => {
       };
     }
     const scope = args.scope ?? "global";
-    const scopeId = scope === "global" ? null : args.scopeId ?? null;
-    if (scope !== "global" && !scopeId) {
+    let scopeId;
+    try {
+      scopeId = resolveScopedResourceId(scope, args.scopeId, "bindings");
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
       return {
-        content: [{ type: "text", text: `scopeId is required for ${scope} bindings.` }],
+        content: [{ type: "text", text: message }],
         structuredContent: {
           yourAgentId: requestInfo.agentId,
           success: false,
-          message: `scopeId is required for ${scope} bindings.`,
+          message,
           bindings
         }
       };
@@ -21398,6 +21302,17 @@ var registerCredentialBindingsTool = (server) => {
         }
       };
     }
+    if ((args.authKind ?? "config") === "oauth" && !args.oauthProvider) {
+      return {
+        content: [{ type: "text", text: "oauthProvider is required for oauth bindings." }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: false,
+          message: "oauthProvider is required for oauth bindings.",
+          bindings
+        }
+      };
+    }
     const placeholder = placeholderForConfigKey(args.configKey);
     if (args.headerTemplate && !args.headerTemplate.includes(placeholder)) {
       return {
@@ -21428,7 +21343,9 @@ var registerCredentialBindingsTool = (server) => {
       queryTemplate: args.queryTemplate,
       scope,
       scopeId,
-      active: true
+      active: true,
+      authKind: args.authKind ?? "config",
+      oauthProvider: args.oauthProvider
     });
     upsertCredentialBinding({
       id: args.id,
@@ -21438,9 +21355,11 @@ var registerCredentialBindingsTool = (server) => {
       queryTemplate: nextBinding.queryTemplate,
       scope: nextBinding.scope,
       scopeId: nextBinding.scopeId ?? null,
-      active: true
+      active: true,
+      authKind: nextBinding.authKind,
+      oauthProvider: nextBinding.oauthProvider ?? null
     });
-    const nextBindings = listRelationalCredentialBindings({ includeInactive: true });
+    const nextBindings = currentBindings();
     return {
       content: [{ type: "text", text: `Credential binding ${args.configKey} saved.` }],
       structuredContent: {
@@ -21637,6 +21556,126 @@ var registerDeleteChannelTool = (server) => {
   });
 };
 
+// src/tools/delete-page.ts
+init_zod();
+init_db();
+var registerDeletePageTool = (server) => {
+  createToolRegistrar(server)("delete-page", {
+    title: "Delete Page",
+    description: "Permanently delete one page by pageId, or by slug in the caller's page namespace. Only the lead or the page owner can delete a page.",
+    annotations: { destructiveHint: true },
+    inputSchema: object({
+      pageId: string().min(1).optional().describe("Page ID to delete."),
+      slug: string().min(1).optional().describe("Page slug to delete from the caller's own (agentId, slug) namespace. Alternative to pageId.")
+    }),
+    outputSchema: object({
+      yourAgentId: string().optional(),
+      success: boolean(),
+      message: string(),
+      deletedPage: object({
+        id: string(),
+        slug: string(),
+        title: string()
+      }).optional()
+    })
+  }, async ({ pageId, slug }, requestInfo, _meta) => {
+    if (!requestInfo.agentId) {
+      return {
+        content: [{ type: "text", text: 'Agent ID not found. Set the "X-Agent-ID" header.' }],
+        structuredContent: {
+          success: false,
+          message: 'Agent ID not found. Set the "X-Agent-ID" header.'
+        }
+      };
+    }
+    if (!pageId && !slug) {
+      return {
+        content: [{ type: "text", text: "Either pageId or slug must be provided." }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: false,
+          message: "Either pageId or slug must be provided."
+        }
+      };
+    }
+    const caller = getAgentById(requestInfo.agentId);
+    if (!caller) {
+      return {
+        content: [{ type: "text", text: "Agent not found." }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: false,
+          message: "Agent not found."
+        }
+      };
+    }
+    const page = pageId ? getPage(pageId) : slug ? getPageBySlug(requestInfo.agentId, slug) : null;
+    if (!page) {
+      return {
+        content: [{ type: "text", text: "Page not found." }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: false,
+          message: "Page not found."
+        }
+      };
+    }
+    const decision = can({
+      principal: { kind: "agent", agentId: caller.id, isLead: caller.isLead },
+      verb: "page.delete.any",
+      resource: { kind: "owned", ownerAgentId: page.agentId },
+      source: "mcp"
+    });
+    if (!decision.allow) {
+      return {
+        content: [{ type: "text", text: "Only the lead or page owner can delete pages." }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: false,
+          message: "Only the lead or page owner can delete pages."
+        }
+      };
+    }
+    try {
+      const deleted = deletePage(page.id);
+      if (!deleted) {
+        return {
+          content: [{ type: "text", text: "Failed to delete page." }],
+          structuredContent: {
+            yourAgentId: requestInfo.agentId,
+            success: false,
+            message: "Failed to delete page."
+          }
+        };
+      }
+      const deletedPage = {
+        id: page.id,
+        slug: page.slug,
+        title: page.title
+      };
+      return {
+        content: [{ type: "text", text: `Deleted page "${page.title}".` }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: true,
+          message: `Deleted page "${page.title}".`,
+          deletedPage
+        }
+      };
+    } catch (error) {
+      const message = error instanceof Error ? error.message : "Unknown error";
+      return {
+        content: [{ type: "text", text: `Failed to delete page: ${message}` }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: false,
+          message: `Failed to delete page: ${message}`
+        }
+      };
+    }
+  });
+};
+
 // src/tools/get-metrics.ts
 init_zod();
 init_db();
@@ -23095,18 +23134,19 @@ var registerMcpServerDeleteTool = (server) => {
         }
       };
     }
-    const deleted = deleteMcpServer(args.id);
+    const result = deleteMcpServer(args.id);
+    const message = result.deleted ? `Deleted MCP server "${existing.name}" and ${result.deletedScriptConnectionCount} script connection(s).` : "Delete failed.";
     return {
       content: [
         {
           type: "text",
-          text: deleted ? `Deleted MCP server "${existing.name}".` : "Delete failed."
+          text: message
         }
       ],
       structuredContent: {
         yourAgentId: requestInfo.agentId,
-        success: deleted,
-        message: deleted ? `Deleted MCP server "${existing.name}".` : "Delete failed."
+        success: result.deleted,
+        message
       }
     };
   });
@@ -26180,6 +26220,45 @@ var registerUpdateRepoTool = (server) => {
 };
 // src/tools/request-human-input.ts
 init_zod();
+
+// src/be/audit-user.ts
+init_request_auth_context();
+init_db();
+function resolveTaskAuditUserId(sourceTaskId, callerAgentId) {
+  if (!callerAgentId)
+    return null;
+  let resolvedSourceTaskId = sourceTaskId;
+  if (!resolvedSourceTaskId) {
+    const currentTask = getAgentCurrentTask(callerAgentId);
+    if (currentTask)
+      resolvedSourceTaskId = currentTask.id;
+  }
+  if (!resolvedSourceTaskId)
+    return null;
+  const task = getTaskById(resolvedSourceTaskId);
+  if (!task)
+    return null;
+  if (task.agentId !== callerAgentId)
+    return null;
+  if (task.requestedByUserId)
+    return task.requestedByUserId;
+  if (task.slackUserId) {
+    const user = findUserByExternalId("slack", task.slackUserId);
+    if (user)
+      return user.id;
+  }
+  return null;
+}
+function resolveHttpAuditUserId(req, callerAgentId) {
+  const auth = getRequestAuth(req);
+  if (auth?.kind === "user")
+    return auth.userId;
+  const header = req.headers["x-source-task-id"];
+  const sourceTaskId = Array.isArray(header) ? header[0] : header;
+  return resolveTaskAuditUserId(sourceTaskId, callerAgentId);
+}
+
+// src/tools/request-human-input.ts
 init_db();
 var QuestionSchema = object({
   id: string().describe("Unique ID for the question (used as key in responses)"),
@@ -26245,7 +26324,8 @@ var registerRequestHumanInputTool = (server) => {
       questions,
       approvers: { policy: "any" },
       sourceTaskId: sourceTaskId ?? undefined,
-      timeoutSeconds
+      timeoutSeconds,
+      createdBy: resolveTaskAuditUserId(sourceTaskId, requestInfo.agentId) ?? undefined
     });
     const appUrl = getAppUrl();
     const url = `${appUrl}/approval-requests/${request.id}`;
@@ -26270,67 +26350,72 @@ var registerRequestHumanInputTool = (server) => {
 // src/tools/resolve-user.ts
 init_zod();
 var resolveUserInputSchema = object({
-  kind: string().optional().describe("Identity kind — e.g. 'slack', 'linear', 'github', 'gitlab', 'jira', or a custom value. Must be paired with externalId."),
-  externalId: string().optional().describe("Platform-specific identifier for the given kind (e.g. Slack user ID 'U08NR6QD6CS', Linear user UUID, GitHub login)."),
+  kind: string().optional().describe("Identity kind — e.g. 'slack', 'linear', 'github', 'gitlab', 'jira', 'kapso', 'whatsapp', or a custom value. Must be paired with externalId."),
+  externalId: string().optional().describe("Platform-specific identifier for the given kind (e.g. Slack user ID 'U08NR6QD6CS', Linear user UUID, GitHub login, Jira accountId)."),
   email: string().email().optional().describe("Email address (primary or alias)."),
-  userId: string().optional().describe("Canonical swarm user ID. Use this to reverse-look up all external identities for a known user (e.g. find their GitHub handle from a requestedByUserId).")
-}).strict().refine((v) => v.kind !== undefined && v.externalId !== undefined || v.email !== undefined || v.userId !== undefined, { message: "Provide either (kind + externalId), email, or userId" });
+  userId: string().optional().describe("Canonical swarm user ID. Use this to reverse-look up all external identities for a known user (e.g. find their GitHub handle from a requestedByUserId)."),
+  name: string().min(2).optional().describe("Human display name to search for (exact, or first-token prefix). Convenience only — ambiguous matches return all candidates rather than picking one.")
+}).strict().refine((v) => v.kind !== undefined && v.externalId !== undefined || v.email !== undefined || v.userId !== undefined || v.name !== undefined, { message: "Provide either (kind + externalId), email, userId, or name" });
+function jsonResult(value) {
+  return { content: [{ type: "text", text: JSON.stringify(value, null, 2) }] };
+}
+function profileResult(user) {
+  return jsonResult({ ...user, externalIds: getUserIdentities(user.id) });
+}
+function unknownResult(kind, externalId) {
+  return jsonResult({ status: "unknown", kind, externalId });
+}
+function ambiguousResult(candidates) {
+  return jsonResult({
+    status: "ambiguous",
+    message: "AMBIGUOUS — do not pick by salience. Multiple users match this name; disambiguate with (kind, externalId), email, or userId.",
+    candidates: candidates.map((u) => ({ userId: u.id, name: u.name, email: u.email }))
+  });
+}
 var registerResolveUserTool = (server) => {
   createToolRegistrar(server)("resolve-user", {
     title: "Resolve user identity",
-    description: "Look up a canonical user profile by an `(kind, externalId)` pair (e.g. {kind: 'slack', externalId: 'U_X'}), by email (primary or alias), or by swarm `userId`. Returns the user profile including `externalIds` (all linked platform identities) or 'No user found'.",
+    description: "Provider-agnostic reverse lookup: (kind, externalId) → user, e.g. {kind: 'slack', externalId: 'U016H7XKZGS'} or {kind: 'github', externalId: 'octocat'} — the same shape for every provider, no per-provider keys. Also accepts email (primary or alias), userId (reverse lookup of all linked identities), or name (exact/prefix search). A miss returns a structured {status: 'unknown', ...} payload, never prose; an ambiguous name search returns {status: 'ambiguous', candidates: [...]}.",
     annotations: { readOnlyHint: true },
     inputSchema: resolveUserInputSchema
-  }, async ({ kind, externalId, email, userId }) => {
-    let user = null;
+  }, async ({ kind, externalId, email, userId, name }) => {
     if (kind && externalId) {
-      user = findUserByExternalId(kind, externalId);
-    } else if (email) {
-      user = findUserByEmail(email);
-    } else if (userId) {
-      user = findUserById(userId);
-    }
-    if (!user) {
-      return {
-        content: [{ type: "text", text: "No user found matching the given criteria." }]
-      };
-    }
-    const externalIds = getUserIdentities(user.id);
-    return {
-      content: [
-        { type: "text", text: JSON.stringify({ ...user, externalIds }, null, 2) }
-      ]
-    };
+      const resolution = resolveIdentity(kind, externalId);
+      if (resolution.status === "unknown")
+        return unknownResult(kind, externalId);
+      const user = findUserById(resolution.userId);
+      if (!user)
+        return unknownResult(kind, externalId);
+      return profileResult(user);
+    }
+    if (email) {
+      const resolution = resolveIdentityByEmail(email);
+      if (resolution.status === "unknown")
+        return unknownResult("email", email);
+      const user = findUserById(resolution.userId);
+      if (!user)
+        return unknownResult("email", email);
+      return profileResult(user);
+    }
+    if (userId) {
+      const user = findUserById(userId);
+      if (!user)
+        return unknownResult("userId", userId);
+      return profileResult(user);
+    }
+    const matches = findUsersByName(name ?? "");
+    if (matches.length === 0)
+      return unknownResult("name", name ?? "");
+    const [only] = matches;
+    if (matches.length === 1 && only)
+      return profileResult(only);
+    return ambiguousResult(matches);
   });
 };
 
 // src/tools/schedules/create-schedule.ts
 init_zod();
 var import_cron_parser = __toESM(require_dist(), 1);
-
-// src/be/audit-user.ts
-init_request_auth_context();
-init_db();
-function resolveTaskAuditUserId(sourceTaskId, callerAgentId) {
-  if (!sourceTaskId || !callerAgentId)
-    return null;
-  const task = getTaskById(sourceTaskId);
-  if (!task)
-    return null;
-  if (task.agentId !== callerAgentId)
-    return null;
-  return task.requestedByUserId ?? null;
-}
-function resolveHttpAuditUserId(req, callerAgentId) {
-  const auth = getRequestAuth(req);
-  if (auth?.kind === "user")
-    return auth.userId;
-  const header = req.headers["x-source-task-id"];
-  const sourceTaskId = Array.isArray(header) ? header[0] : header;
-  return resolveTaskAuditUserId(sourceTaskId, callerAgentId);
-}
-
-// src/tools/schedules/create-schedule.ts
 init_db();
 init_types();
 var createScheduleInputSchema = object({
@@ -27783,6 +27868,7 @@ var registerUpdateScheduleTool = (server) => {
 };
 // src/tools/script-apis.ts
 init_zod();
+init_db();
 init_secret_scrubber();
 
 // src/tools/script-common.ts
@@ -27866,13 +27952,29 @@ function maskToken(endpoint) {
   const { token: _drop, ...rest } = endpoint;
   return { ...rest, token: endpoint.authMode === "bearer" ? "********" : null };
 }
-function errorResult(message) {
+function errorResult(message, status = 400) {
   return {
     isError: true,
     content: [{ type: "text", text: message }],
-    structuredContent: { success: false, status: 400, error: message }
+    structuredContent: { success: false, status, error: message }
   };
 }
+function requireScriptApiPermission(requestInfo, verb, message) {
+  if (!requestInfo.agentId)
+    return errorResult(SCRIPT_TRANSPORT_ERROR);
+  const agent = getAgentById(requestInfo.agentId);
+  const decision = can({
+    principal: {
+      kind: "agent",
+      agentId: requestInfo.agentId,
+      isLead: agent?.isLead ?? false
+    },
+    verb,
+    resource: { kind: "none" },
+    source: "mcp"
+  });
+  return decision.allow ? null : errorResult(message, 403);
+}
 var registerScriptApisTool = (server) => {
   createToolRegistrar(server)("script-apis", {
     title: "Script APIs",
@@ -27893,6 +27995,9 @@ var registerScriptApisTool = (server) => {
       const raw = result.structuredContent?.data;
       let endpoints = (raw?.apis ?? []).map(maskToken);
       if (args.includeSecrets) {
+        const denied = requireScriptApiPermission(requestInfo, "script.api.read.secrets", "Only lead agents can reveal script API bearer tokens.");
+        if (denied)
+          return denied;
         endpoints = await Promise.all(endpoints.map(async (endpoint) => {
           if (endpoint.authMode !== "bearer")
             return endpoint;
@@ -27916,6 +28021,9 @@ var registerScriptApisTool = (server) => {
       };
     }
     if (args.action === "create") {
+      const denied = requireScriptApiPermission(requestInfo, "script.api.create", "Only lead agents can create script API endpoints.");
+      if (denied)
+        return denied;
       const result = await proxyScriptsApi({
         method: "POST",
         path: `/api/scripts/${args.scriptId}/apis`,
@@ -27937,6 +28045,9 @@ var registerScriptApisTool = (server) => {
     if (args.action === "rotate") {
       if (!args.endpointId)
         return errorResult("endpointId is required for rotate.");
+      const denied = requireScriptApiPermission(requestInfo, "script.api.rotate", "Only lead agents can rotate script API bearer tokens.");
+      if (denied)
+        return denied;
       const result = await proxyScriptsApi({
         method: "POST",
         path: `/api/scripts/${args.scriptId}/apis/${args.endpointId}/rotate`,
@@ -27953,6 +28064,9 @@ var registerScriptApisTool = (server) => {
     if (args.action === "update") {
       if (!args.endpointId)
         return errorResult("endpointId is required for update.");
+      const denied = requireScriptApiPermission(requestInfo, "script.api.update", "Only lead agents can update script API endpoints.");
+      if (denied)
+        return denied;
       return proxyScriptsApi({
         method: "PATCH",
         path: `/api/scripts/${args.scriptId}/apis/${args.endpointId}`,
@@ -27964,6 +28078,9 @@ var registerScriptApisTool = (server) => {
     if (args.action === "delete") {
       if (!args.endpointId)
         return errorResult("endpointId is required for delete.");
+      const denied = requireScriptApiPermission(requestInfo, "script.api.delete", "Only lead agents can delete script API endpoints.");
+      if (denied)
+        return denied;
       return proxyScriptsApi({
         method: "DELETE",
         path: `/api/scripts/${args.scriptId}/apis/${args.endpointId}`,
@@ -27979,20 +28096,22 @@ var registerScriptApisTool = (server) => {
 init_zod();
 init_db();
 var scriptConnectionsInputSchema = object({
-  action: _enum(["list", "upsert-openapi", "disable"]).describe("List, create/update, or disable a script connection."),
-  id: string().uuid().optional(),
-  slug: string().min(1).max(80).optional(),
-  displayName: string().max(160).optional(),
-  scope: _enum(["global", "agent", "repo"]).default("global").optional(),
-  scopeId: string().uuid().nullable().optional(),
-  baseUrl: string().url().optional(),
-  allowedHosts: array(string().min(1)).optional(),
-  credentialBindingId: string().uuid().nullable().optional(),
-  configKey: string().min(1).max(255).optional(),
-  headerTemplate: string().min(1).optional(),
-  queryTemplate: string().min(1).optional(),
-  openapiSpecJson: string().optional(),
-  enabled: boolean().default(true).optional()
+  action: _enum(["list", "upsert-openapi", "upsert-mcp", "upsert-graphql", "refresh", "disable"]).describe("List, create/update, refresh, or disable a script connection."),
+  id: string().uuid().optional().describe("Existing connection ID for update, refresh, or disable."),
+  slug: string().min(1).max(80).optional().describe("Stable script namespace slug exposed under ctx.api or ctx.mcp."),
+  displayName: string().max(160).optional().describe("Human-readable connection name."),
+  scope: _enum(["global", "agent", "repo"]).optional().describe("Connection visibility scope."),
+  scopeId: scopedResourceScopeIdSchema.nullable().optional().describe("Agent UUID for agent scope or repo id (owner/name) for repo scope."),
+  mcpServerId: string().uuid().optional().describe("Registered MCP server ID for upsert-mcp connections."),
+  baseUrl: string().url().optional().describe("Base URL for OpenAPI or GraphQL connections."),
+  allowedHosts: array(string().min(1)).optional().describe("Allowed outbound hostnames for credential substitution."),
+  credentialBindingId: string().uuid().nullable().optional().describe("Existing credential binding ID to attach to the connection."),
+  configKey: string().min(1).max(255).optional().describe("Config key used to create a credential binding when credentialBindingId is omitted."),
+  headerTemplate: string().min(1).optional().describe("Header template containing the config-key placeholder."),
+  queryTemplate: string().min(1).optional().describe("Query parameter template containing the config-key placeholder."),
+  openapiSpecUrl: string().url().optional().describe("URL to fetch and store an OpenAPI spec for upsert-openapi and refresh."),
+  openapiSpecJson: string().optional().describe("Inline OpenAPI JSON for upsert-openapi. Mutually exclusive with openapiSpecUrl."),
+  enabled: boolean().optional().describe("Whether the connection is enabled.")
 });
 var scriptConnectionsOutputSchema = object({
   yourAgentId: string().uuid().optional(),
@@ -28000,10 +28119,23 @@ var scriptConnectionsOutputSchema = object({
   message: string(),
   connections: array(unknown())
 });
+function resolveConnectionScope(args, existing) {
+  const scopeWasProvided = Object.hasOwn(args, "scope");
+  const scopeIdWasProvided = Object.hasOwn(args, "scopeId");
+  const scope = (scopeWasProvided ? args.scope : existing?.scope) ?? "global";
+  const scopeIdInput = scopeIdWasProvided ? args.scopeId : existing && scope === existing.scope ? existing.scopeId : null;
+  return {
+    scope,
+    scopeId: resolveScopedResourceId(scope, scopeIdInput, "connections")
+  };
+}
+function resolveConnectionEnabled(args, existing) {
+  return Object.hasOwn(args, "enabled") ? args.enabled !== false : existing?.enabled ?? true;
+}
 var registerScriptConnectionsTool = (server) => {
   createToolRegistrar(server)("script-connections", {
     title: "Script Connections",
-    description: "Lead-only registry management for scripts ctx.api/ctx.mcp connections. Phase 1 supports OpenAPI ctx.api connections with generated args and response types.",
+    description: "Lead-only registry management for scripts ctx.api/ctx.mcp connections. Supports OpenAPI, MCP, and GraphQL script connections.",
     annotations: { idempotentHint: true },
     inputSchema: scriptConnectionsInputSchema,
     outputSchema: scriptConnectionsOutputSchema
@@ -28041,7 +28173,7 @@ var registerScriptConnectionsTool = (server) => {
       };
     }
     if (args.action === "list") {
-      const connections2 = listScriptConnections({ includeDisabled: true });
+      const connections2 = listScriptConnections({ includeDisabled: true, allScopes: true });
       return {
         content: [{ type: "text", text: `Found ${connections2.length} script connection(s).` }],
         structuredContent: {
@@ -28060,12 +28192,12 @@ var registerScriptConnectionsTool = (server) => {
             yourAgentId: requestInfo.agentId,
             success: false,
             message: "id is required for disable.",
-            connections: listScriptConnections({ includeDisabled: true })
+            connections: listScriptConnections({ includeDisabled: true, allScopes: true })
           }
         };
       }
       setScriptConnectionEnabled(args.id, false);
-      const connections2 = listScriptConnections({ includeDisabled: true });
+      const connections2 = listScriptConnections({ includeDisabled: true, allScopes: true });
       return {
         content: [{ type: "text", text: "Script connection disabled." }],
         structuredContent: {
@@ -28076,44 +28208,191 @@ var registerScriptConnectionsTool = (server) => {
         }
       };
     }
-    if (!args.slug || !args.baseUrl || !args.openapiSpecJson) {
+    if (args.action === "refresh") {
+      if (!args.id) {
+        return {
+          content: [{ type: "text", text: "id is required for refresh." }],
+          structuredContent: {
+            yourAgentId: requestInfo.agentId,
+            success: false,
+            message: "id is required for refresh.",
+            connections: listScriptConnections({ includeDisabled: true, allScopes: true })
+          }
+        };
+      }
+      const refreshed = await refreshScriptConnection(args.id, null, requestInfo.agentId);
+      const connections2 = listScriptConnections({ includeDisabled: true, allScopes: true });
+      if (!refreshed) {
+        return {
+          content: [{ type: "text", text: "Script connection not found." }],
+          structuredContent: {
+            yourAgentId: requestInfo.agentId,
+            success: false,
+            message: "Script connection not found.",
+            connections: connections2
+          }
+        };
+      }
+      return {
+        content: [{ type: "text", text: `Script connection ${refreshed.slug} refreshed.` }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: !refreshed.generationError,
+          message: refreshed.generationError ? `Refreshed but generation failed: ${refreshed.generationError}` : `Script connection ${refreshed.slug} refreshed.`,
+          connections: connections2
+        }
+      };
+    }
+    if (args.action === "upsert-mcp") {
+      if (!args.slug || !args.mcpServerId) {
+        return {
+          content: [{ type: "text", text: "slug and mcpServerId are required." }],
+          structuredContent: {
+            yourAgentId: requestInfo.agentId,
+            success: false,
+            message: "slug and mcpServerId are required.",
+            connections: listScriptConnections({ includeDisabled: true, allScopes: true })
+          }
+        };
+      }
+      const existing2 = args.id ? getScriptConnectionById(args.id) : null;
+      const { scope: scope2, scopeId: scopeId2 } = resolveConnectionScope(args, existing2);
+      const connection2 = await upsertScriptConnection({
+        id: args.id,
+        slug: args.slug,
+        displayName: args.displayName,
+        kind: "mcp",
+        scope: scope2,
+        scopeId: scopeId2,
+        mcpServerId: args.mcpServerId,
+        enabled: resolveConnectionEnabled(args, existing2),
+        agentId: requestInfo.agentId
+      });
+      const connections2 = listScriptConnections({ includeDisabled: true, allScopes: true });
+      return {
+        content: [{ type: "text", text: `Script MCP connection ${connection2.slug} saved.` }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: !connection2.generationError,
+          message: connection2.generationError ? `Saved but generation failed: ${connection2.generationError}` : `Script MCP connection ${connection2.slug} saved.`,
+          connections: connections2
+        }
+      };
+    }
+    if (args.action === "upsert-graphql") {
+      if (!args.slug || !args.baseUrl || !args.allowedHosts?.length) {
+        return {
+          content: [{ type: "text", text: "slug, baseUrl, and allowedHosts are required." }],
+          structuredContent: {
+            yourAgentId: requestInfo.agentId,
+            success: false,
+            message: "slug, baseUrl, and allowedHosts are required.",
+            connections: listScriptConnections({ includeDisabled: true, allScopes: true })
+          }
+        };
+      }
+      let credentialBindingId2 = args.credentialBindingId ?? null;
+      if (!credentialBindingId2 && args.configKey) {
+        const placeholder = placeholderForConfigKey(args.configKey);
+        const bindingScope = args.scope ?? "global";
+        const binding = upsertCredentialBinding({
+          configKey: args.configKey,
+          allowedHosts: args.allowedHosts,
+          headerTemplate: args.headerTemplate ?? (args.queryTemplate ? undefined : `Authorization: Bearer ${placeholder}`),
+          queryTemplate: args.queryTemplate,
+          scope: bindingScope,
+          scopeId: resolveScopedResourceId(bindingScope, args.scopeId, "bindings")
+        });
+        credentialBindingId2 = binding.id;
+      }
+      const existing2 = args.id ? getScriptConnectionById(args.id) : null;
+      const { scope: scope2, scopeId: scopeId2 } = resolveConnectionScope(args, existing2);
+      const connection2 = await upsertScriptConnection({
+        id: args.id,
+        slug: args.slug,
+        displayName: args.displayName,
+        kind: "graphql",
+        scope: scope2,
+        scopeId: scopeId2,
+        baseUrl: args.baseUrl,
+        allowedHosts: args.allowedHosts,
+        credentialBindingId: credentialBindingId2,
+        enabled: resolveConnectionEnabled(args, existing2)
+      });
+      const connections2 = listScriptConnections({ includeDisabled: true, allScopes: true });
+      return {
+        content: [{ type: "text", text: `Script GraphQL connection ${connection2.slug} saved.` }],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: !connection2.generationError,
+          message: connection2.generationError ? `Saved but generation failed: ${connection2.generationError}` : `Script GraphQL connection ${connection2.slug} saved.`,
+          connections: connections2
+        }
+      };
+    }
+    if (!args.slug || !args.baseUrl || !args.openapiSpecJson && !args.openapiSpecUrl) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: "slug, baseUrl, and either openapiSpecJson or openapiSpecUrl are required."
+          }
+        ],
+        structuredContent: {
+          yourAgentId: requestInfo.agentId,
+          success: false,
+          message: "slug, baseUrl, and either openapiSpecJson or openapiSpecUrl are required.",
+          connections: listScriptConnections({ includeDisabled: true, allScopes: true })
+        }
+      };
+    }
+    if (args.openapiSpecJson && args.openapiSpecUrl) {
       return {
-        content: [{ type: "text", text: "slug, baseUrl, and openapiSpecJson are required." }],
+        content: [
+          {
+            type: "text",
+            text: "Provide either openapiSpecJson or openapiSpecUrl, not both."
+          }
+        ],
         structuredContent: {
           yourAgentId: requestInfo.agentId,
           success: false,
-          message: "slug, baseUrl, and openapiSpecJson are required.",
-          connections: listScriptConnections({ includeDisabled: true })
+          message: "Provide either openapiSpecJson or openapiSpecUrl, not both.",
+          connections: listScriptConnections({ includeDisabled: true, allScopes: true })
         }
       };
     }
     let credentialBindingId = args.credentialBindingId ?? null;
     if (!credentialBindingId && args.configKey) {
       const placeholder = placeholderForConfigKey(args.configKey);
+      const bindingScope = args.scope ?? "global";
       const binding = upsertCredentialBinding({
         configKey: args.configKey,
         allowedHosts: args.allowedHosts ?? [new URL(args.baseUrl).hostname],
-        headerTemplate: args.headerTemplate ?? `Authorization: Bearer ${placeholder}`,
+        headerTemplate: args.headerTemplate ?? (args.queryTemplate ? undefined : `Authorization: Bearer ${placeholder}`),
         queryTemplate: args.queryTemplate,
-        scope: args.scope ?? "global",
-        scopeId: args.scope === "global" ? null : args.scopeId ?? null
+        scope: bindingScope,
+        scopeId: resolveScopedResourceId(bindingScope, args.scopeId, "bindings")
       });
       credentialBindingId = binding.id;
     }
-    const connection = upsertScriptConnection({
+    const existing = args.id ? getScriptConnectionById(args.id) : null;
+    const { scope, scopeId } = resolveConnectionScope(args, existing);
+    const connection = await upsertScriptConnection({
       id: args.id,
       slug: args.slug,
       displayName: args.displayName,
       kind: "openapi",
-      scope: args.scope ?? "global",
-      scopeId: args.scope === "global" ? null : args.scopeId ?? null,
+      scope,
+      scopeId,
       baseUrl: args.baseUrl,
       allowedHosts: args.allowedHosts ?? [new URL(args.baseUrl).hostname],
       credentialBindingId,
+      openapiSpecUrl: args.openapiSpecUrl,
       openapiSpecJson: args.openapiSpecJson,
-      enabled: args.enabled !== false
+      enabled: resolveConnectionEnabled(args, existing)
     });
-    const connections = listScriptConnections({ includeDisabled: true });
+    const connections = listScriptConnections({ includeDisabled: true, allScopes: true });
     return {
       content: [{ type: "text", text: `Script connection ${connection.slug} saved.` }],
       structuredContent: {
@@ -28385,6 +28664,7 @@ var sendTaskInputSchema = object({
   offerMode: boolean().default(false).describe("If true, offer the task instead of direct assign (agent must accept/reject)."),
   taskType: string().max(50).optional().describe("Task type (e.g., 'bug', 'feature', 'review')."),
   tags: array(string()).optional().describe("Tags for filtering (e.g., ['urgent', 'frontend'])."),
+  requiredCapabilities: array(string()).optional().describe("Capabilities a claiming agent must have (declared via join-swarm/update-profile) to be pool-eligible for this task. Written into the created task's routingAffinity (role is left unset — only enforced when the pool auto-claim/claim-tool paths check it). Most useful when omitting agentId (unassigned pool task); a no-op for a task with an explicit agentId, which bypasses the pool gate entirely."),
   priority: number().int().min(0).max(100).optional().describe("Priority 0-100 (default: 50)."),
   dependsOn: array(uuid()).optional().describe("Task IDs this task depends on."),
   parentTaskId: uuid().optional().describe("Parent task ID for session continuity. Child task will resume the parent's Claude session. Auto-routes to the same worker unless agentId is explicitly provided."),
@@ -28392,7 +28672,7 @@ var sendTaskInputSchema = object({
   vcsRepo: string().optional().describe("VCS repo identifier (e.g., 'desplega-ai/agent-swarm' for GitHub or 'group/project' for GitLab). Links the task to a registered repo for workspace context."),
   model: string().trim().min(1).optional().describe("Concrete model override for this task, interpreted by the assignee's harness/provider. This does not switch providers. Prefer modelTier for portable intent."),
   modelTier: ModelTierSchema.optional().describe("Portable model tier for this task: 'smol', 'regular', 'smart', or 'ultra'. Resolved at claim/run time using the assignee's harness/provider. Legacy model shortnames map as haiku→smol, sonnet→regular, opus→smart, fable→ultra."),
-  effort: ReasoningEffortSchema.optional().describe("Reasoning effort for this task: 'off', 'low', 'medium', 'high', or 'xhigh'. If omitted, the assignee's REASONING_EFFORT_OVERRIDE/default applies."),
+  effort: ReasoningEffortSchema.optional().describe("Reasoning effort for this task: 'off', 'low', 'medium', 'high', 'xhigh', or 'max'. If omitted, the assignee's REASONING_EFFORT_OVERRIDE/default applies."),
   allowDuplicate: boolean().default(false).describe("If true, skip duplicate detection and create the task even if a similar one exists."),
   slackChannelId: string().optional().describe("Slack channel ID to post progress updates to. Use this to propagate Slack context when delegating from a Slack thread."),
   slackThreadTs: string().optional().describe("Slack thread timestamp. Required with slackChannelId for thread-level updates."),
@@ -28429,6 +28709,7 @@ async function sendTaskHandler(ctx, {
   offerMode,
   taskType,
   tags,
+  requiredCapabilities,
   priority,
   dependsOn,
   dir,
@@ -28561,7 +28842,8 @@ async function sendTaskHandler(ctx, {
         slackChannelId,
         slackThreadTs,
         slackUserId,
-        followUpConfig
+        followUpConfig,
+        routingAffinity: requiredCapabilities?.length ? { capabilities: requiredCapabilities } : undefined
       });
       transferTrackerSyncToResumeChild({
         parentTaskId: effectiveParentTaskId,
@@ -32013,7 +32295,10 @@ Thread: {{thread_id}}
 
 {{preview}}`,
   variables: [
-    { name: "from", description: "Sender address(es)" },
+    {
+      name: "from",
+      description: "Sender identity — resolved canonical name (e.g. 'Luis (email:luis@x.com)') or the UNKNOWN sentinel"
+    },
     { name: "subject", description: "Email subject" },
     { name: "inbox_id", description: "AgentMail inbox ID" },
     { name: "thread_id", description: "AgentMail thread ID" },
@@ -32032,7 +32317,10 @@ Message: {{message_id}}
 
 {{preview}}`,
   variables: [
-    { name: "from", description: "Sender address(es)" },
+    {
+      name: "from",
+      description: "Sender identity — resolved canonical name (e.g. 'Luis (email:luis@x.com)') or the UNKNOWN sentinel"
+    },
     { name: "subject", description: "Email subject" },
     { name: "inbox_id", description: "AgentMail inbox ID" },
     { name: "thread_id", description: "AgentMail thread ID" },
@@ -32051,7 +32339,10 @@ Thread: {{thread_id}}
 
 {{preview}}`,
   variables: [
-    { name: "from", description: "Sender address(es)" },
+    {
+      name: "from",
+      description: "Sender identity — resolved canonical name (e.g. 'Luis (email:luis@x.com)') or the UNKNOWN sentinel"
+    },
     { name: "subject", description: "Email subject" },
     { name: "inbox_id", description: "AgentMail inbox ID" },
     { name: "thread_id", description: "AgentMail thread ID" },
@@ -32070,7 +32361,10 @@ Message: {{message_id}}
 
 {{preview}}`,
   variables: [
-    { name: "from", description: "Sender address(es)" },
+    {
+      name: "from",
+      description: "Sender identity — resolved canonical name (e.g. 'Luis (email:luis@x.com)') or the UNKNOWN sentinel"
+    },
     { name: "subject", description: "Email subject" },
     { name: "inbox_id", description: "AgentMail inbox ID" },
     { name: "thread_id", description: "AgentMail thread ID" },
@@ -32089,7 +32383,10 @@ Thread: {{thread_id}}
 
 {{preview}}`,
   variables: [
-    { name: "from", description: "Sender address(es)" },
+    {
+      name: "from",
+      description: "Sender identity — resolved canonical name (e.g. 'Luis (email:luis@x.com)') or the UNKNOWN sentinel"
+    },
     { name: "subject", description: "Email subject" },
     { name: "inbox_id", description: "AgentMail inbox ID" },
     { name: "thread_id", description: "AgentMail thread ID" },
@@ -32211,6 +32508,7 @@ async function handleMessageReceived(payload) {
     const { user } = findOrCreateUserByEmail(senderEmail, { name: senderName ?? undefined }, { kind: "system", id: "webhook:agentmail" });
     requestedByUserId = user.id;
   }
+  const senderDisplay = senderEmail ? renderIdentity(resolveIdentityByEmail(senderEmail)) : renderIdentity({ status: "unknown", kind: "email", externalId: "unknown" });
   const preview = body.length > 500 ? `${body.substring(0, 500)}...` : body;
   workflowEventBus.emit("agentmail.message.received", {
     inboxId: inbox_id,
@@ -32225,7 +32523,7 @@ async function handleMessageReceived(payload) {
     const contextKey = agentmailContextKey({ threadId: thread_id });
     const siblingInFlight = ACTIVE_TASK_STATUSES.has(existingTask.status);
     if (agentmailBuffer.enabled && agentmailBuffer.maybeBuffer(contextKey, siblingInFlight, {
-      from,
+      from: senderDisplay,
       subject,
       inboxId: inbox_id,
       threadId: thread_id,
@@ -32239,7 +32537,7 @@ async function handleMessageReceived(payload) {
       return { created: false };
     }
     const followupResult = resolveTemplate("agentmail.email.followup", {
-      from,
+      from: senderDisplay,
       subject,
       inbox_id,
       thread_id,
@@ -32268,7 +32566,7 @@ async function handleMessageReceived(payload) {
     if (agent) {
       if (agent.isLead) {
         const leadResult = resolveTemplate("agentmail.email.mapped_lead", {
-          from,
+          from: senderDisplay,
           subject,
           inbox_id,
           thread_id,
@@ -32292,7 +32590,7 @@ async function handleMessageReceived(payload) {
         return { created: true, taskId: task3.id };
       }
       const workerResult = resolveTemplate("agentmail.email.mapped_worker", {
-        from,
+        from: senderDisplay,
         subject,
         inbox_id,
         thread_id,
@@ -32318,7 +32616,7 @@ async function handleMessageReceived(payload) {
   const lead = findLeadAgent();
   if (lead) {
     const unmappedResult = resolveTemplate("agentmail.email.unmapped", {
-      from,
+      from: senderDisplay,
       subject,
       inbox_id,
       thread_id,
@@ -32342,7 +32640,7 @@ async function handleMessageReceived(payload) {
     return { created: true, taskId: task2.id };
   }
   const noAgentResult = resolveTemplate("agentmail.email.no_agent", {
-    from,
+    from: senderDisplay,
     subject,
     inbox_id,
     thread_id,
@@ -32365,6 +32663,170 @@ async function handleMessageReceived(payload) {
 }
 // src/http/core.ts
 init_db();
+
+// src/be/rbac-audit.ts
+init_db();
+var FLUSH_INTERVAL_MS = 2000;
+var FLUSH_MAX_ROWS = 200;
+var AUDIT_GC_INTERVAL_MS = 24 * 60 * 60 * 1000;
+var DEFAULT_RETENTION_DAYS = 30;
+var buffer = [];
+var flushTimer = null;
+var auditGcTimer = null;
+var thresholdFlushScheduled = false;
+function isAuditDisabled() {
+  return process.env.RBAC_AUDIT_DISABLED === "true";
+}
+function principalIdOf(principal) {
+  switch (principal.kind) {
+    case "agent":
+      return principal.agentId;
+    case "user":
+      return principal.userId;
+    case "operator":
+      return null;
+  }
+}
+function resourceIdOf(resource) {
+  if (!resource)
+    return null;
+  switch (resource.kind) {
+    case "task":
+      return resource.taskId;
+    case "agent":
+      return resource.agentId;
+    case "kv-namespace":
+      return resource.namespace;
+    case "owned":
+      return resource.ownerAgentId ?? null;
+    case "none":
+      return null;
+  }
+}
+function toRow(check, decision) {
+  return {
+    principalType: check.principal.kind,
+    principalId: principalIdOf(check.principal),
+    originatorUserId: null,
+    verb: check.verb,
+    resourceType: check.resource?.kind ?? null,
+    resourceId: resourceIdOf(check.resource),
+    decision: decision.allow ? "allow" : "deny",
+    reason: decision.allow ? null : decision.reason,
+    source: check.source
+  };
+}
+function enqueueRow(row) {
+  buffer.push(row);
+  if (buffer.length >= FLUSH_MAX_ROWS && !thresholdFlushScheduled) {
+    thresholdFlushScheduled = true;
+    const t = setTimeout(() => {
+      thresholdFlushScheduled = false;
+      flushAuditBuffer();
+    }, 0);
+    if (typeof t.unref === "function")
+      t.unref();
+  }
+}
+function enqueueAuditRow(check, decision) {
+  if (isAuditDisabled())
+    return;
+  try {
+    enqueueRow(toRow(check, decision));
+  } catch (err) {
+    console.warn("[rbac-audit] enqueue failed, dropping row:", err.message);
+  }
+}
+function enqueueAdmissionRow(input) {
+  if (isAuditDisabled())
+    return;
+  try {
+    const isMcp = input.source === "mcp";
+    const method = isMcp ? undefined : (input.method ?? "UNKNOWN").toUpperCase();
+    enqueueRow({
+      principalType: "user",
+      principalId: input.userId,
+      originatorUserId: null,
+      verb: input.decision.verb ?? "(admission:no-verb)",
+      resourceType: isMcp ? "mcp-tool" : "http-route",
+      resourceId: isMcp ? input.toolName : `${method} ${input.route}`,
+      decision: input.decision.allow ? "allow" : "deny",
+      reason: input.decision.allow ? null : input.decision.reason,
+      source: isMcp ? "mcp" : "http"
+    });
+  } catch (err) {
+    console.warn("[rbac-audit] enqueue failed, dropping admission row:", err.message);
+  }
+}
+function flushAuditBuffer() {
+  if (buffer.length === 0)
+    return;
+  const rows = buffer;
+  buffer = [];
+  try {
+    const db = getDb();
+    const stmt = db.prepare(`INSERT INTO permission_audit
+         (principalType, principalId, originatorUserId, verb, resourceType, resourceId, decision, reason, source)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`);
+    const insertAll = db.transaction((batch) => {
+      for (const r of batch) {
+        stmt.run(r.principalType, r.principalId, r.originatorUserId, r.verb, r.resourceType, r.resourceId, r.decision, r.reason, r.source);
+      }
+    });
+    insertAll(rows);
+  } catch (err) {
+    console.warn(`[rbac-audit] flush failed, dropping ${rows.length} row(s):`, err.message);
+  }
+}
+function flushIntervalMs() {
+  const v = Number(process.env.RBAC_AUDIT_FLUSH_MS);
+  return Number.isFinite(v) && v > 0 ? v : FLUSH_INTERVAL_MS;
+}
+function startAuditWriter(intervalMs = flushIntervalMs()) {
+  if (flushTimer)
+    return;
+  flushTimer = setInterval(() => flushAuditBuffer(), intervalMs);
+  if (typeof flushTimer?.unref === "function")
+    flushTimer.unref();
+}
+function stopAuditWriter() {
+  if (flushTimer) {
+    clearInterval(flushTimer);
+    flushTimer = null;
+  }
+}
+function purgeExpiredAuditRows() {
+  try {
+    const days = Number(process.env.RBAC_AUDIT_RETENTION_DAYS) || DEFAULT_RETENTION_DAYS;
+    const result = getDb().prepare("DELETE FROM permission_audit WHERE ts < datetime('now', ?)").run(`-${days} days`);
+    return result.changes;
+  } catch (err) {
+    console.warn("[rbac-audit] retention purge failed:", err.message);
+    return 0;
+  }
+}
+function startAuditGc(intervalMs = AUDIT_GC_INTERVAL_MS) {
+  if (auditGcTimer)
+    return;
+  const purged = purgeExpiredAuditRows();
+  if (purged > 0) {
+    console.log(`[rbac-audit] Initial retention purge removed ${purged} audit row(s)`);
+  }
+  auditGcTimer = setInterval(() => {
+    const n = purgeExpiredAuditRows();
+    if (n > 0) {
+      console.log(`[rbac-audit] Retention purge removed ${n} audit row(s)`);
+    }
+  }, intervalMs);
+  if (typeof auditGcTimer?.unref === "function")
+    auditGcTimer.unref();
+}
+function stopAuditGc() {
+  if (auditGcTimer) {
+    clearInterval(auditGcTimer);
+    auditGcTimer = null;
+  }
+}
 // src/github/handlers.ts
 init_db();
 init_resolver();
@@ -32458,7 +32920,10 @@ Context:
     { name: "pr_number", description: "Pull request number" },
     { name: "pr_title", description: "Pull request title" },
     { name: "bot_name", description: "GitHub bot username" },
-    { name: "sender_login", description: "Event sender login" },
+    {
+      name: "sender_login",
+      description: "Event sender identity — resolved canonical name (e.g. 'Luis (github:login)') or the UNKNOWN sentinel"
+    },
     { name: "repo_full_name", description: "Repository full name (owner/repo)" },
     { name: "head_ref", description: "Head branch name" },
     { name: "base_ref", description: "Base branch name" },
@@ -32486,7 +32951,10 @@ Context:
     { name: "pr_number", description: "Pull request number" },
     { name: "pr_title", description: "Pull request title" },
     { name: "bot_name", description: "GitHub bot username" },
-    { name: "sender_login", description: "Event sender login" },
+    {
+      name: "sender_login",
+      description: "Event sender identity — resolved canonical name (e.g. 'Luis (github:login)') or the UNKNOWN sentinel"
+    },
     { name: "repo_full_name", description: "Repository full name (owner/repo)" },
     { name: "head_ref", description: "Head branch name" },
     { name: "base_ref", description: "Base branch name" },
@@ -32563,7 +33031,10 @@ Context:
   variables: [
     { name: "pr_number", description: "Pull request number" },
     { name: "pr_title", description: "Pull request title" },
-    { name: "sender_login", description: "Event sender login" },
+    {
+      name: "sender_login",
+      description: "Event sender identity — resolved canonical name (e.g. 'Luis (github:login)') or the UNKNOWN sentinel"
+    },
     { name: "repo_full_name", description: "Repository full name (owner/repo)" },
     { name: "head_ref", description: "Head branch name" },
     { name: "base_ref", description: "Base branch name" },
@@ -32591,7 +33062,10 @@ Context:
     { name: "pr_number", description: "Pull request number" },
     { name: "pr_title", description: "Pull request title" },
     { name: "label_name", description: "Label that was added" },
-    { name: "sender_login", description: "Event sender login" },
+    {
+      name: "sender_login",
+      description: "Event sender identity — resolved canonical name (e.g. 'Luis (github:login)') or the UNKNOWN sentinel"
+    },
     { name: "repo_full_name", description: "Repository full name (owner/repo)" },
     { name: "head_ref", description: "Head branch name" },
     { name: "base_ref", description: "Base branch name" },
@@ -32618,7 +33092,10 @@ Context:
     { name: "issue_number", description: "Issue number" },
     { name: "issue_title", description: "Issue title" },
     { name: "bot_name", description: "GitHub bot username" },
-    { name: "sender_login", description: "Event sender login" },
+    {
+      name: "sender_login",
+      description: "Event sender identity — resolved canonical name (e.g. 'Luis (github:login)') or the UNKNOWN sentinel"
+    },
     { name: "repo_full_name", description: "Repository full name (owner/repo)" },
     { name: "issue_url", description: "Issue HTML URL" },
     { name: "context", description: "Issue body or title as context" }
@@ -32641,7 +33118,10 @@ Context:
   variables: [
     { name: "issue_number", description: "Issue number" },
     { name: "issue_title", description: "Issue title" },
-    { name: "sender_login", description: "Event sender login" },
+    {
+      name: "sender_login",
+      description: "Event sender identity — resolved canonical name (e.g. 'Luis (github:login)') or the UNKNOWN sentinel"
+    },
     { name: "repo_full_name", description: "Repository full name (owner/repo)" },
     { name: "issue_url", description: "Issue HTML URL" },
     { name: "context", description: "Extracted mention context or issue title" }
@@ -32666,7 +33146,10 @@ Context:
     { name: "issue_number", description: "Issue number" },
     { name: "issue_title", description: "Issue title" },
     { name: "label_name", description: "Label that was added" },
-    { name: "sender_login", description: "Event sender login" },
+    {
+      name: "sender_login",
+      description: "Event sender identity — resolved canonical name (e.g. 'Luis (github:login)') or the UNKNOWN sentinel"
+    },
     { name: "repo_full_name", description: "Repository full name (owner/repo)" },
     { name: "issue_url", description: "Issue HTML URL" },
     { name: "context", description: "Issue body or title as context" }
@@ -32690,7 +33173,10 @@ Comment:
     { name: "target_type", description: "PR or Issue" },
     { name: "target_number", description: "PR or issue number" },
     { name: "target_title", description: "PR or issue title" },
-    { name: "sender_login", description: "Event sender login" },
+    {
+      name: "sender_login",
+      description: "Event sender identity — resolved canonical name (e.g. 'Luis (github:login)') or the UNKNOWN sentinel"
+    },
     { name: "repo_full_name", description: "Repository full name (owner/repo)" },
     { name: "comment_url", description: "Comment HTML URL" },
     { name: "context", description: "Extracted mention context from comment" },
@@ -32718,7 +33204,10 @@ URL: {{review_url}}{{review_body_section}}{{inline_comments_section}}
     { name: "pr_number", description: "Pull request number" },
     { name: "review_label", description: "Review state label (APPROVED, CHANGES REQUESTED, etc.)" },
     { name: "pr_title", description: "Pull request title" },
-    { name: "sender_login", description: "Reviewer login" },
+    {
+      name: "sender_login",
+      description: "Reviewer identity — resolved canonical name (e.g. 'Luis (github:login)') or the UNKNOWN sentinel"
+    },
     { name: "repo_full_name", description: "Repository full name (owner/repo)" },
     { name: "review_url", description: "Review HTML URL" },
     { name: "review_body_section", description: "Review overall body section or empty string" },
@@ -32915,7 +33404,7 @@ async function handlePullRequest(event) {
       pr_number: pr.number,
       pr_title: pr.title,
       bot_name: GITHUB_BOT_NAME,
-      sender_login: sender.login,
+      sender_login: renderIdentity(resolveIdentity("github", sender.login)),
       repo_full_name: repository.full_name,
       head_ref: pr.head.ref,
       base_ref: pr.base.ref,
@@ -32987,7 +33476,7 @@ async function handlePullRequest(event) {
       pr_number: pr.number,
       pr_title: pr.title,
       bot_name: GITHUB_BOT_NAME,
-      sender_login: sender.login,
+      sender_login: renderIdentity(resolveIdentity("github", sender.login)),
       repo_full_name: repository.full_name,
       head_ref: pr.head.ref,
       base_ref: pr.base.ref,
@@ -33055,7 +33544,7 @@ async function handlePullRequest(event) {
       pr_number: pr.number,
       pr_title: pr.title,
       label_name: labelName,
-      sender_login: sender.login,
+      sender_login: renderIdentity(resolveIdentity("github", sender.login)),
       repo_full_name: repository.full_name,
       head_ref: pr.head.ref,
       base_ref: pr.base.ref,
@@ -33113,7 +33602,7 @@ async function handlePullRequest(event) {
   const result = resolveTemplate("github.pull_request.mentioned", {
     pr_number: pr.number,
     pr_title: pr.title,
-    sender_login: sender.login,
+    sender_login: renderIdentity(resolveIdentity("github", sender.login)),
     repo_full_name: repository.full_name,
     head_ref: pr.head.ref,
     base_ref: pr.base.ref,
@@ -33163,7 +33652,7 @@ async function handleIssue(event) {
       issue_number: issue.number,
       issue_title: issue.title,
       bot_name: GITHUB_BOT_NAME,
-      sender_login: sender.login,
+      sender_login: renderIdentity(resolveIdentity("github", sender.login)),
       repo_full_name: repository.full_name,
       issue_url: issue.html_url,
       context: issue.body || issue.title
@@ -33229,7 +33718,7 @@ async function handleIssue(event) {
       issue_number: issue.number,
       issue_title: issue.title,
       label_name: labelName,
-      sender_login: sender.login,
+      sender_login: renderIdentity(resolveIdentity("github", sender.login)),
       repo_full_name: repository.full_name,
       issue_url: issue.html_url,
       context: issue.body || issue.title
@@ -33277,7 +33766,7 @@ async function handleIssue(event) {
   const result = resolveTemplate("github.issue.mentioned", {
     issue_number: issue.number,
     issue_title: issue.title,
-    sender_login: sender.login,
+    sender_login: renderIdentity(resolveIdentity("github", sender.login)),
     repo_full_name: repository.full_name,
     issue_url: issue.html_url,
     context
@@ -33338,7 +33827,7 @@ async function handleComment(event, eventType) {
     target_type: targetType,
     target_number: targetNumber,
     target_title: targetTitle,
-    sender_login: sender.login,
+    sender_login: renderIdentity(resolveIdentity("github", sender.login)),
     repo_full_name: repository.full_name,
     comment_url: comment.html_url,
     context,
@@ -33533,7 +34022,7 @@ ${review.body}` : "";
     pr_number: pr.number,
     review_label: label,
     pr_title: pr.title,
-    sender_login: sender.login,
+    sender_login: renderIdentity(resolveIdentity("github", sender.login)),
     repo_full_name: repository.full_name,
     review_url: review.html_url,
     review_body_section: reviewBodySection,
@@ -33906,7 +34395,10 @@ Reporter: {{reporter}}
     { name: "issue_key", description: "Jira issue key (e.g. ENG-123)" },
     { name: "issue_summary", description: "Issue summary / title" },
     { name: "issue_url", description: "Issue URL on the Jira site" },
-    { name: "reporter", description: "Reporter display name (or empty string)" },
+    {
+      name: "reporter",
+      description: "Reporter identity — resolved canonical name (e.g. 'Luis (jira:<accountId>)') or the UNKNOWN sentinel"
+    },
     {
       name: "description_section",
       description: "Description section (extracted from ADF) or empty string"
@@ -33928,7 +34420,10 @@ Comment:
     { name: "issue_key", description: "Jira issue key (e.g. ENG-123)" },
     { name: "issue_summary", description: "Issue summary / title" },
     { name: "issue_url", description: "Issue URL on the Jira site" },
-    { name: "comment_author", description: "Comment author display name" },
+    {
+      name: "comment_author",
+      description: "Comment author identity — resolved canonical name (e.g. 'Luis (jira:<accountId>)') or the UNKNOWN sentinel"
+    },
     {
       name: "description_section",
       description: "Description section (extracted from ADF) or empty string"
@@ -33968,6 +34463,31 @@ Original issue: {{issue_key}} — {{issue_summary}}`,
 init_db();
 init_resolver();
 init_types();
+var JIRA_WEBHOOK_ACTOR = { kind: "system", id: "webhook:jira" };
+function resolveJiraActor(accountId, email, name, sampleEventType, sampleContext) {
+  if (!accountId)
+    return;
+  const existing = findUserByExternalId("jira", accountId);
+  if (existing)
+    return existing.id;
+  const trimmedEmail = typeof email === "string" ? email.trim() : "";
+  if (trimmedEmail !== "") {
+    const { user } = findOrCreateUserByEmail(trimmedEmail, { name: name?.trim() || undefined }, JIRA_WEBHOOK_ACTOR);
+    try {
+      linkIdentity(user.id, "jira", accountId, JIRA_WEBHOOK_ACTOR);
+    } catch (error) {
+      console.warn(`[Jira Sync] linkIdentity('jira', ${accountId}) failed — likely a concurrent enroll`, error);
+    }
+    return user.id;
+  }
+  recordUnmappedIdentity("jira", accountId, { sampleEventType, sampleContext });
+  return;
+}
+function renderJiraIdentity(accountId) {
+  if (!accountId)
+    return "(unknown user)";
+  return renderIdentity(resolveIdentity("jira", accountId));
+}
 var BOT_ACCOUNT_ID_SLOT = Symbol.for("agent-swarm.jira.botAccountId");
 function getCachedBotAccountId() {
   return globalThis[BOT_ACCOUNT_ID_SLOT] ?? null;
@@ -34065,7 +34585,8 @@ async function handleIssueEvent(event) {
   const issueId = issue.id;
   const issueKey = issue.key;
   const summary = issue.fields?.summary ?? "(no summary)";
-  const reporterName = issue.fields?.reporter?.displayName ?? "";
+  const reporterAccountId = issue.fields?.reporter?.accountId;
+  const requestedByUserId = resolveJiraActor(reporterAccountId, issue.fields?.reporter?.emailAddress, issue.fields?.reporter?.displayName, "issue_updated", `${issueKey}: ${summary}`);
   const descriptionText = extractText(issue.fields?.description);
   const issueUrl = buildIssueUrl(issueKey);
   const claim = createTrackerSyncIfAbsent({
@@ -34083,7 +34604,8 @@ async function handleIssueEvent(event) {
     await createInitialJiraTask({
       issueKey,
       summary,
-      reporterName,
+      reporterAccountId,
+      requestedByUserId,
       descriptionText,
       issueUrl,
       syncRowId: claim.sync.id,
@@ -34099,7 +34621,8 @@ async function handleIssueEvent(event) {
   await createInitialJiraTask({
     issueKey,
     summary,
-    reporterName,
+    reporterAccountId,
+    requestedByUserId,
     descriptionText,
     issueUrl,
     syncRowId: claim.sync.id,
@@ -34141,7 +34664,8 @@ async function handleCommentEvent(event) {
   const summary = issue.fields?.summary ?? "(no summary)";
   const descriptionText = extractText(issue.fields?.description);
   const commentText = extractText(comment.body);
-  const commentAuthor = comment.author?.displayName ?? "";
+  const commentAuthorAccountId = comment.author?.accountId ?? comment.updateAuthor?.accountId;
+  const requestedByUserId = resolveJiraActor(commentAuthorAccountId, comment.author?.emailAddress ?? comment.updateAuthor?.emailAddress, comment.author?.displayName ?? comment.updateAuthor?.displayName, "comment_created", `${issueKey}: ${commentText.slice(0, 80)}`);
   const issueUrl = buildIssueUrl(issueKey);
   if (!existing) {
     const claim = createTrackerSyncIfAbsent({
@@ -34161,7 +34685,8 @@ async function handleCommentEvent(event) {
         summary,
         descriptionText,
         commentText,
-        commentAuthor,
+        commentAuthorAccountId,
+        requestedByUserId,
         issueUrl,
         syncRowId: claim.sync.id
       });
@@ -34172,7 +34697,8 @@ async function handleCommentEvent(event) {
       summary,
       issueUrl,
       commentText,
-      commentAuthor,
+      commentAuthorAccountId,
+      requestedByUserId,
       syncRow: claim.sync
     });
   }
@@ -34181,7 +34707,8 @@ async function handleCommentEvent(event) {
     summary,
     issueUrl,
     commentText,
-    commentAuthor,
+    commentAuthorAccountId,
+    requestedByUserId,
     syncRow: existing
   });
 }
@@ -34191,15 +34718,17 @@ async function routeCommentOnExistingSync(input) {
     console.log(`[Jira Sync] Bot mentioned on issue ${input.issueKey} but task ${priorTask.id} still ${priorTask.status} — ignoring`);
     return;
   }
+  const commentAuthorDisplay = renderJiraIdentity(input.commentAuthorAccountId);
   await createInitialJiraTask({
     issueKey: input.issueKey,
     summary: input.summary,
-    reporterName: input.commentAuthor,
+    reporterAccountId: input.commentAuthorAccountId,
+    requestedByUserId: input.requestedByUserId,
     descriptionText: "",
     issueUrl: input.issueUrl,
     syncRowId: input.syncRow.id,
     followup: true,
-    followupTrigger: `New comment from ${input.commentAuthor || "user"}`,
+    followupTrigger: `New comment from ${commentAuthorDisplay}`,
     followupMessage: input.commentText
   });
 }
@@ -34233,7 +34762,7 @@ ${input.descriptionText}
     issue_key: input.issueKey,
     issue_summary: input.summary,
     issue_url: input.issueUrl,
-    reporter: input.reporterName,
+    reporter: renderJiraIdentity(input.reporterAccountId),
     description_section: descriptionSection
   };
   const result = resolveTemplate(tmplName, variables);
@@ -34245,6 +34774,7 @@ ${input.descriptionText}
     agentId: lead?.id ?? "",
     source: "jira",
     taskType: "jira-issue",
+    requestedByUserId: input.requestedByUserId,
     contextKey: buildJiraContextKey(input.issueKey)
   });
   updateTrackerSyncSwarmId(input.syncRowId, task.id);
@@ -34261,7 +34791,7 @@ ${input.descriptionText}
     issue_key: input.issueKey,
     issue_summary: input.summary,
     issue_url: input.issueUrl,
-    comment_author: input.commentAuthor,
+    comment_author: renderJiraIdentity(input.commentAuthorAccountId),
     description_section: descriptionSection,
     comment_text: input.commentText
   });
@@ -34273,6 +34803,7 @@ ${input.descriptionText}
     agentId: lead?.id ?? "",
     source: "jira",
     taskType: "jira-issue",
+    requestedByUserId: input.requestedByUserId,
     contextKey: buildJiraContextKey(input.issueKey)
   });
   updateTrackerSyncSwarmId(input.syncRowId, task.id);
@@ -34307,7 +34838,7 @@ async function notifySlack(text) {
     return;
   }
   try {
-    const { getSlackApp: getSlackApp2 } = await import("./app-es4nzc71.js");
+    const { getSlackApp: getSlackApp2 } = await import("./app-4f718yk0.js");
     const app = getSlackApp2();
     if (!app) {
       console.warn("[Jira webhook keepalive] Slack not available, cannot send notification");
@@ -34376,7 +34907,7 @@ async function deleteJiraWebhook(webhookId) {
   console.log(`[Jira webhook keepalive] Deleted webhook id=${webhookId}`);
 }
 async function overwriteWebhookIds(next) {
-  const { getDb: getDb2 } = await import("./db-bbgahh4z.js");
+  const { getDb: getDb2 } = await import("./db-p3h2j06x.js");
   const db = getDb2();
   const txn = db.transaction(() => {
     const row = db.query("SELECT metadata FROM oauth_apps WHERE provider = 'jira'").get();
@@ -108655,10 +109186,11 @@ async function handleCore(req, res, myAgentId, apiKey) {
   }
   const pathSegments = getPathSegments(req.url || "");
   const isUserMcpRoute = req.url === "/mcp-user";
+  let auth = null;
   if (isUserMcpRoute || isPublicRoute(req.method, pathSegments)) {
     setRequestAuth(req, null);
   } else {
-    const auth = resolveHttpRequestAuth(req, apiKey);
+    auth = resolveHttpRequestAuth(req, apiKey);
     if (!auth) {
       setRequestAuth(req, null);
       res.writeHead(401, { "Content-Type": "application/json" });
@@ -108667,6 +109199,28 @@ async function handleCore(req, res, myAgentId, apiKey) {
     }
     setRequestAuth(req, auth);
   }
+  if (auth?.kind === "user" && isRbacEnabled()) {
+    const grant = getUserGrant(auth.userId);
+    if (!grant.grantsAll) {
+      const def = findRoute(req.method, pathSegments);
+      const decision = decideAdmission({
+        method: req.method ?? "",
+        rbac: def?.rbac,
+        routeKnown: def !== undefined,
+        grant
+      });
+      enqueueAdmissionRow({
+        userId: auth.userId,
+        decision,
+        method: req.method,
+        route: def?.path ?? pathSegments.join("/")
+      });
+      if (!decision.allow) {
+        jsonError(res, `Forbidden: ${decision.reason}`, 403);
+        return true;
+      }
+    }
+  }
   if (req.method === "POST" && req.url === "/internal/reload-config") {
     try {
       const result = await reloadGlobalConfigsAndIntegrations();
@@ -109505,7 +110059,8 @@ var taskActionInputSchema = object({
   dir: string().min(1).startsWith("/").optional().describe("Working directory (absolute path) for the agent to start in. Only used with 'create' action."),
   model: string().trim().min(1).optional().describe("Concrete model override for the created task, interpreted by the claiming worker's harness/provider. This does not switch providers. Only used with 'create' action."),
   modelTier: ModelTierSchema.optional().describe("Portable model tier for the created task: 'smol', 'regular', 'smart', or 'ultra'. Resolved when a worker claims/runs the task. Only used with 'create' action."),
-  effort: ReasoningEffortSchema.optional().describe("Reasoning effort for the created task: 'off', 'low', 'medium', 'high', or 'xhigh'. Only used with 'create' action.")
+  effort: ReasoningEffortSchema.optional().describe("Reasoning effort for the created task: 'off', 'low', 'medium', 'high', 'xhigh', or 'max'. Only used with 'create' action."),
+  requiredCapabilities: array(string()).optional().describe("Capabilities a claiming agent must have (declared via join-swarm/update-profile) to be pool-eligible for this task. Written into the created task's routingAffinity (role is left unset). Only used with 'create' action.")
 });
 var taskActionOutputSchema = object({
   yourAgentId: string().uuid().optional(),
@@ -109551,7 +110106,19 @@ function taskActionCallResult(result, agentId) {
   };
 }
 async function taskActionHandler(ctx, input) {
-  const { action, task, taskType, tags, priority, dependsOn, taskId, reason, dir, model } = input;
+  const {
+    action,
+    task,
+    taskType,
+    tags,
+    priority,
+    dependsOn,
+    taskId,
+    reason,
+    dir,
+    model,
+    requiredCapabilities
+  } = input;
   const normalizedModel = splitLegacyModelAlias({ model, modelTier: input.modelTier });
   if (ctx.kind === "user") {
     if (action !== "to_backlog" && action !== "from_backlog") {
@@ -109631,7 +110198,8 @@ async function taskActionHandler(ctx, input) {
           dir,
           model: normalizedModel.model,
           modelTier: normalizedModel.modelTier,
-          effort: input.effort
+          effort: input.effort,
+          routingAffinity: requiredCapabilities?.length ? { capabilities: requiredCapabilities } : undefined
         });
         return {
           success: true,
@@ -109668,6 +110236,13 @@ async function taskActionHandler(ctx, input) {
             message: `Task "${taskId}" has unmet dependencies: ${blockedBy.join(", ")}. Cannot claim until dependencies are completed.`
           };
         }
+        const claimingAgent = getAgentById(agentId);
+        if (claimingAgent && !isAgentEligibleForTask(claimingAgent, existingTask)) {
+          return {
+            success: false,
+            message: `Task "${taskId}" requires role "${existingTask.routingAffinity?.role ?? "(unspecified)"}"; yours is "${claimingAgent.role ?? "(unspecified)"}". Cannot claim.`
+          };
+        }
         const claimedTask = claimTask(taskId, agentId);
         if (!claimedTask) {
           return {
@@ -110740,12 +111315,13 @@ var registerCreateWorkflowTool = (server) => {
 ` + "- STRUCTURED OUTPUT: For agent-task nodes, put outputSchema inside 'config' to validate the agent's raw JSON output. " + `Node-level outputSchema validates the executor's return ({taskId, taskOutput}), which is different.
 ` + `- Agent-task config: { template, outputSchema?, agentId?, tags?, priority?, dir?, vcsRepo?, model? }.
 ` + "- TRIGGER SCHEMA: Optional 'triggerSchema' is a JSON-Schema object that validates incoming trigger payloads. " + "Supported keywords: type, required, properties, enum, const, items (recursive into arrays). " + `Other JSON-Schema keywords (oneOf/anyOf/$ref/pattern/format/additionalProperties) are silently ignored.
+` + "- WEBHOOK VERIFICATION: Webhook triggers use hmacSecret for all verification formats. " + "Omit verification for legacy HMAC-SHA256 over the raw body with fallback header scanning; " + "or set verification to { format: 'hmac-sha256', header }, { format: 'timestamped-hmac-sha256', header, toleranceSeconds? }, " + "or { format: 'token-equality', header }. Example: { type: 'webhook', hmacSecret: 'secret.SUPERAGENT_WEBHOOK_SECRET', " + `verification: { format: 'timestamped-hmac-sha256', header: 'X-Superagent-Signature', toleranceSeconds: 300 } }.
 ` + "- WAIT NODE: type 'wait' pauses a workflow for a duration or until a named workflowEventBus event arrives. " + "See runbooks/workflows.md#wait-nodes for config shapes, ordering caveats, and built-in event names.",
     inputSchema: exports_external.object({
       name: exports_external.string().describe("Unique name for the workflow"),
       description: exports_external.string().optional().describe("Description of what this workflow does"),
       definition: WorkflowDefinitionSchema.describe("The workflow definition with nodes (each node has id, type, config, and optional next/retry/validation)"),
-      triggers: exports_external.array(TriggerConfigSchema).optional().describe("Optional trigger configurations (webhook, schedule)"),
+      triggers: exports_external.array(TriggerConfigSchema).optional().describe("Optional trigger configurations (webhook, schedule). Webhook verification formats: legacy omitted verification, hmac-sha256, timestamped-hmac-sha256, token-equality."),
       cooldown: CooldownConfigSchema.optional().describe("Optional cooldown configuration to prevent re-triggering too frequently"),
       input: exports_external.record(exports_external.string(), InputValueSchema).optional().describe("Optional input values resolved at execution time (env vars like VAR_NAME, secrets secret.NAME, or literals)"),
       dir: exports_external.string().min(1).startsWith("/").optional().describe("Default working directory for all agent-task nodes (absolute path, e.g. /tmp/workspace)"),
@@ -111364,13 +111940,13 @@ var registerUpdateWorkflowTool = (server) => {
   createToolRegistrar(server)("update-workflow", {
     title: "Update Workflow",
     annotations: { destructiveHint: false },
-    description: "Update an existing workflow's name, description, definition, triggers, cooldown, input, triggerSchema, or enabled state. " + "Creates a version snapshot before applying changes. " + "TRIGGER SCHEMA: pass 'triggerSchema' as a JSON-Schema object to set/replace, or 'null' to clear. " + "Supported JSON-Schema keywords: type, required, properties, enum, const, items (recursive into arrays). " + "Other JSON-Schema keywords (oneOf/anyOf/$ref/pattern/format/additionalProperties) are silently ignored.",
+    description: "Update an existing workflow's name, description, definition, triggers, cooldown, input, triggerSchema, or enabled state. " + "Creates a version snapshot before applying changes. " + "TRIGGER SCHEMA: pass 'triggerSchema' as a JSON-Schema object to set/replace, or 'null' to clear. " + "Supported JSON-Schema keywords: type, required, properties, enum, const, items (recursive into arrays). " + "Other JSON-Schema keywords (oneOf/anyOf/$ref/pattern/format/additionalProperties) are silently ignored. " + "WEBHOOK VERIFICATION: webhook triggers use hmacSecret for all verification formats. " + "Omit verification for legacy HMAC-SHA256 over the raw body with fallback header scanning; " + "or set verification to { format: 'hmac-sha256', header }, { format: 'timestamped-hmac-sha256', header, toleranceSeconds? }, " + "or { format: 'token-equality', header }.",
     inputSchema: exports_external.object({
       id: exports_external.string().uuid().describe("Workflow ID to update"),
       name: exports_external.string().optional().describe("New name for the workflow"),
       description: exports_external.string().optional().describe("New description"),
       definition: WorkflowDefinitionSchema.optional().describe("New workflow definition"),
-      triggers: exports_external.array(TriggerConfigSchema).optional().describe("New trigger configurations"),
+      triggers: exports_external.array(TriggerConfigSchema).optional().describe("New trigger configurations. Webhook verification formats: legacy omitted verification, hmac-sha256, timestamped-hmac-sha256, token-equality."),
       cooldown: CooldownConfigSchema.optional().nullable().describe("New cooldown configuration (null to remove)"),
       input: exports_external.record(exports_external.string(), InputValueSchema).optional().nullable().describe("New input values (null to remove)"),
       dir: exports_external.string().min(1).startsWith("/").optional().nullable().describe("Default working directory for all agent-task nodes (null to remove)"),
@@ -111478,6 +112054,13 @@ function createServer() {
   initDb(process.env.DATABASE_PATH);
   seedPricingFromModelsDev();
   startPricingRefreshLoop();
+  try {
+    ensureRbacSeedsSynced();
+  } catch (err) {
+    console.error("[startup] Failed to sync RBAC seed rows:", err);
+    if (isRbacEnabled())
+      throw err;
+  }
   registerGithubTaskReactions();
   const server = new McpServer({
     name: package_default.name,
@@ -111608,6 +112191,7 @@ function createServer() {
   registerSkillPublishTool(server);
   if (hasCapability("pages")) {
     registerCreatePageTool(server);
+    registerDeletePageTool(server);
   }
   if (hasCapability("metrics")) {
     registerCreateMetricTool(server);
@@ -111768,4 +112352,4 @@ function writeSkillsToFilesystem(entries, harnessType = "all", home) {
   return { synced, removed, errors };
 }
 
-export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, setAuditSink, clearAuditSink, can, userCtx, isPollTracingEnabled, initOtel, withSpan, startSpan, withSpanContext, withRemoteContext, injectTraceContext, recordSessionCost, createToolRegistrar, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, setCorsHeaders, parseQueryParams, getPathSegments, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, describeRequestRoute, route, assertSelectOnlyQuery, executeReadOnlyQuery, handleDbQuery, snapshotMetric, snapshotPage, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, storeLinks, refreshLinks, canReadMemory, getLinksForMemory, recordRetrievals, expandCandidatesWithGraph, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, resolveHttpAuditUserId, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, sendTaskOutputSchema, sendTaskHandler, parseSkillContent, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, isInboxAllowed, isSenderAllowed, handleMessageReceived, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, canClaim, emitBudgetRefusalSideEffects, taskActionInputSchema, taskActionOutputSchema, taskActionHandler, hasCapability, getEnabledCapabilities, createServer, writeSkillsToFilesystem };
+export { DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, isJSONRPCRequest, isJSONRPCResultResponse, isJSONRPCErrorResponse, JSONRPCMessageSchema, isInitializeRequest, McpServer, isGitHubEnabled, initGitHub, verifyWebhookSignature, userCtx, isPollTracingEnabled, initOtel, withSpan, startSpan, withSpanContext, withRemoteContext, injectTraceContext, recordSessionCost, createToolRegistrar, cancelTaskInputSchema, cancelTaskOutputSchema, cancelTaskHandler, setCorsHeaders, parseQueryParams, getPathSegments, safeRequestUrlForLog, agentWithCapacity, parseBody, BODY_TOO_LARGE, enforceContentLengthCap, json, jsonError, triggerSchemaErrorResponse, deriveApiBaseUrl, httpServerSemconvAttributes, describeRequestRoute, route, assertSelectOnlyQuery, executeReadOnlyQuery, handleDbQuery, snapshotMetric, snapshotPage, assertOAuthProviderIsNotReserved, assertOAuthAppUrlsSafe, scopedResourceScopeIdSchema, resolveScopedResourceId, getTaskDetailsInputSchema, getTaskDetailsOutputSchema, getTaskDetailsHandler, getTasksInputSchema, getTasksOutputSchema, getTasksHandler, storeLinks, refreshLinks, canReadMemory, getLinksForMemory, recordRetrievals, expandCandidatesWithGraph, markKapsoMessageRead, sendKapsoReaction, getKapsoConfig, getKapsoNumberMapping, markKapsoMessageSeen, resolveTaskAuditUserId, resolveHttpAuditUserId, createEvent, createEventsBatch, getEventCountsFiltered, getEventsFiltered, mergeScheduleTiming, validateRecurringTiming, sendTaskOutputSchema, sendTaskHandler, parseSkillContent, ExplicitSelfDuplicateError, applyRating, shouldPersistAutomaticTaskMemory, isAgentMailEnabled, initAgentMail, verifyAgentMailWebhook, isInboxAllowed, isSenderAllowed, handleMessageReceived, enqueueAuditRow, enqueueAdmissionRow, flushAuditBuffer, startAuditWriter, stopAuditWriter, startAuditGc, stopAuditGc, handlePullRequest, handleIssue, handleComment, handlePullRequestReview, handleCheckRun, handleCheckSuite, handleWorkflowRun, getJiraMetadata, updateJiraMetadata, clearJiraMetadata, registerJiraWebhook, deleteJiraWebhook, isJiraEnabled, initJira, handleJiraWebhook, handleAgentSessionEvent, handleIssueUpdate, handleIssueDelete, handleAgentSessionPrompted, isLinearEnabled, initLinear, loadGlobalConfigsIntoEnv, reloadGlobalConfigsAndIntegrations, scheduleIntegrationsReload, handleCore, canClaim, emitBudgetRefusalSideEffects, taskActionInputSchema, taskActionOutputSchema, taskActionHandler, hasCapability, getEnabledCapabilities, createServer, writeSkillsToFilesystem };