@desplega.ai/agent-swarm 1.173.0 → 2.1.0

package/dist/{http-3dgrgp8y.js → http-r2dnb8f8.js}

@@ -1,7 +1,3 @@
-import {
-  BROWSER_SDK_JS,
-  SWARM_UI_JS
-} from "./cli-t1ze64h3.js";
 import {
   SIMILARITY_THRESHOLD,
   isLeadChannelMonitoringEnabled,
@@ -11,7 +7,7 @@ import {
 } from "./cli-hz99wfxp.js";
 import {
   ACP_TARGET_IDS
-} from "./cli-7a0sde2x.js";
+} from "./cli-6cagzc96.js";
 import {
   isCodexOAuthConfigKey
 } from "./cli-bqjfjex4.js";
@@ -23,12 +19,13 @@ import {
   MAX_RATE_LIMIT_RESET_MS
 } from "./cli-2pdaysab.js";
 import {
-  reasoningCapability
-} from "./cli-tmhsxhb8.js";
+  reasoningCapability,
+  supportedReasoningLevels
+} from "./cli-0veb92a3.js";
 import {
   ensureAgentFsCredentialsForAgent,
   inviteEmailToSharedOrg
-} from "./cli-phcqp1b9.js";
+} from "./cli-zm9t2vde.js";
 import"./cli-6zx22mv6.js";
 import {
   DEFAULT_CONNECTOR_CODE_LABEL,
@@ -39,16 +36,17 @@ import {
   startPoolRouting,
   stopHeartbeat,
   stopPoolRouting
-} from "./cli-r0byd61h.js";
+} from "./cli-yjmqpxt3.js";
 import {
   Anthropic
-} from "./cli-gmdajfw5.js";
+} from "./cli-gxzkg1de.js";
 import {
   runtimeSupervisorStatus,
   startRuntimeSupervisor,
   stopRuntimeSupervisor
-} from "./cli-ne7smj1b.js";
-import"./cli-ppy4nnnh.js";
+} from "./cli-01xvj1rq.js";
+import"./cli-n8ndw8j7.js";
+import"./cli-knd276ed.js";
 import {
   AGENT_MAX_TASKS_CONFIG_KEY,
   ALL_CAPABILITIES,
@@ -75,6 +73,7 @@ import {
   SDK_ALLOWLIST,
   SUPPORTED_PROTOCOL_VERSIONS,
   TaskCreationBlockedError,
+  TelegramBotApiError,
   WebhookError,
   activateVersion,
   agentRanModel,
@@ -88,6 +87,7 @@ import {
   authorizeAssetKeyWrite,
   authorizeRoomNamespace,
   calculateNextRun,
+  callTelegramBotApi,
   canClaim,
   canReadMemory,
   cancelApprovalRequest,
@@ -124,6 +124,7 @@ import {
   enforceContentLengthCap,
   enqueueAdmissionRow,
   enqueueAuditRow,
+  errorMessage,
   estimateTokens,
   executeRawLlm,
   executeReadOnlyQuery,
@@ -133,6 +134,9 @@ import {
   extractAndVerifyCookie,
   flushAuditBuffer,
   getAgentHarnessCliVersion,
+  getChatInstance,
+  getChatSdkConfig,
+  getChatSdkHealth,
   getCombConfig,
   getEnabledCapabilities,
   getEventCountsFiltered,
@@ -147,6 +151,7 @@ import {
   getLinksForMemory,
   getMemoryChunks,
   getOAuthPreset,
+  getPageEditCounter,
   getPathSegments,
   getPosteriorsByIds,
   getRoom,
@@ -198,6 +203,7 @@ import {
   initAgentMail,
   initApiTelemetry,
   initAzureDevOps,
+  initAzureDevOpsOutbound,
   initGitHub,
   initGitLab,
   initJira,
@@ -207,6 +213,9 @@ import {
   isAgentMailEnabled,
   isApiDraining,
   isAzureDevOpsEnabled,
+  isChatAdapterConfigured,
+  isChatSdkEnabled,
+  isChatSdkStopping,
   isGitHubEnabled,
   isGitLabEnabled,
   isInboxAllowed,
@@ -218,6 +227,7 @@ import {
   isLinearEnabled,
   isOriginAllowedForCredentials,
   isSenderAllowed,
+  isTrustedTeamsServiceUrl,
   issuePageSessionCookie,
   json,
   jsonError,
@@ -241,7 +251,6 @@ import {
   parseCookieHeader,
   parseModelTierOverridesHeader,
   parseQueryParams,
-  parseSkillContent,
   patchWorkflowDefinition,
   poolTaskRunsOnHarness,
   posteriorMean,
@@ -267,6 +276,7 @@ import {
   reservedRoomKeyError,
   resetAgentMaxTasksMirror,
   resetRoom,
+  resolveAdapterApiUrl,
   resolveHttpAuditUserId,
   resolveHttpFavoriteOwner,
   resolveHttpRequestAuth,
@@ -301,17 +311,21 @@ import {
   snapshotPage,
   startAuditGc,
   startAuditWriter,
+  startChatSdk,
   steerTaskHandler,
   steerTaskOutputSchema,
   steerTaskUserInputSchema,
   stopAuditGc,
   stopAuditWriter,
+  stopChatSdk,
   stopExtensionRuntime,
   stripSiblingBlock,
   sweepRooms,
   syncTelemetryEnabled,
+  taskModelPin,
   toolErr,
   touchRuntimeInstance,
+  trackBackground,
   triggerSchemaErrorResponse,
   uninstallExtension,
   updateExtensionMeta,
@@ -332,13 +346,13 @@ import {
   wireHttpSpanLifecycle,
   workflowModelErrors,
   writeUnhandledError
-} from "./cli-rfz2ve55.js";
-import"./cli-451ks6aw.js";
+} from "./cli-vgqzp4em.js";
+import"./cli-h1arqn31.js";
 import {
   AMP_ESTIMATE_MODELS,
   ampBillsCacheWrites,
   resolveAmpModel
-} from "./cli-2bw3w47j.js";
+} from "./cli-8wwxw8a3.js";
 import {
   RATING_MODEL_MAX_LENGTH,
   REFERENCES_SOURCE_MAX_LENGTH,
@@ -347,16 +361,12 @@ import {
 import {
   isMultiRuntimeEnabled
 } from "./cli-re8z5p8p.js";
-import"./cli-42qhyvwx.js";
 import {
   deleteModelCatalogOverlay,
   loadModelsCatalog,
   requestModelCatalogRefresh,
   upsertModelCatalogOverlay
-} from "./cli-9xf7fdtp.js";
-import {
-  normalizeModelKey
-} from "./cli-jpc4r224.js";
+} from "./cli-0pd8hzhc.js";
 import {
   ConnectionAuthInputSchema,
   MAX_SCRIPT_WALL_CLOCK_MS,
@@ -373,6 +383,7 @@ import {
   buildScriptCredentialBindingsWithFailures,
   callMcpServerTool,
   checkImportAllowlist,
+  checkQuickJSCompat,
   collectScriptReferences,
   computeExpiresAt,
   connectionAuthInputFromFlat,
@@ -411,7 +422,9 @@ import {
   mcpOAuthSsrfOptions,
   normalizeTokenEndpointAuthMethod,
   oauthAppToProviderConfig,
+  parseSkillContent,
   publicEndpointSsrfOptions,
+  quickJSCompatWarnings,
   readStreamCapped,
   refreshMcpToken,
   refreshScriptConnection,
@@ -434,7 +447,7 @@ import {
   upsertCredentialBinding,
   upsertMcpOAuthToken,
   upsertScriptConnection
-} from "./cli-7a93cv8c.js";
+} from "./cli-4mengw46.js";
 import"./cli-epan13p1.js";
 import {
   detachedProcessGroup,
@@ -449,7 +462,12 @@ import {
   forceRefreshAuthorizationOrThrow,
   forceRefreshTokenOrThrow,
   oauthAppRowToProviderConfig
-} from "./cli-w1apjecb.js";
+} from "./cli-711vwbxn.js";
+import"./cli-wfnemr1t.js";
+import {
+  normalizeModelKey
+} from "./cli-hqr88ew6.js";
+import"./cli-6cvfxs8r.js";
 import {
   AgentFsProvider,
   FilesError,
@@ -468,14 +486,14 @@ import {
   startWorkflowExecution,
   validateJsonSchema,
   workflowSaveWarnings
-} from "./cli-1w0vj3gw.js";
+} from "./cli-naqzr17j.js";
 import {
   createApprovalFollowUpTask,
   definitionNodeIds,
   generateEdges,
   validateDefinition
-} from "./cli-6r2f7edk.js";
-import"./cli-6thk4jz3.js";
+} from "./cli-20krdhz5.js";
+import"./cli-1y7yywmj.js";
 import {
   CLIENT_ID,
   MAX_CODEX_OAUTH_SLOT,
@@ -486,10 +504,10 @@ import {
   getAccountId,
   getValidCodexOAuth,
   loadAllCodexOAuthSlots
-} from "./cli-7jykv7ef.js";
-import"./cli-b07hr3bt.js";
-import"./cli-h6vtvt5c.js";
+} from "./cli-rc6pf5kv.js";
 import"./cli-2x0e561b.js";
+import"./cli-txqb9s38.js";
+import"./cli-h6vtvt5c.js";
 import"./cli-fad8m16k.js";
 import"./cli-bsakbbkm.js";
 import"./cli-zxg80zs9.js";
@@ -509,18 +527,22 @@ import {
   recordDbRetentionStatement,
   recordDbRetentionSweep,
   recordSessionCost,
-  require_content_type,
   startSlackApp,
   startSpan,
   stopSlackApp,
   withRemoteContext,
   withSpan,
   withSpanContext
-} from "./cli-tcc4wd5d.js";
-import"./cli-q51yprfq.js";
+} from "./cli-cvv9k0hh.js";
+import"./cli-n2wq4j7m.js";
+import {
+  require_content_type
+} from "./cli-wmgrkscj.js";
 import"./cli-3er6gcsn.js";
-import"./cli-yatxqynm.js";
-import"./cli-v3zhnxsb.js";
+import"./cli-hjwmhcg1.js";
+import"./cli-rhs9pz33.js";
+import"./cli-9ha6hs2d.js";
+import"./cli-r610p9bs.js";
 import {
   InvalidRuntimeTokenError,
   RuntimePoolError,
@@ -559,11 +581,11 @@ import {
   unlinkIdentity,
   updateRuntimeController,
   updateRuntimePool
-} from "./cli-3nxdmjrc.js";
-import"./cli-cd0hv9nh.js";
+} from "./cli-mgz4nbgg.js";
+import"./cli-j67mh2vg.js";
 import {
   bedrockProviderModule
-} from "./cli-h7k0xtry.js";
+} from "./cli-hvqbtna4.js";
 import"./cli-phre6gz0.js";
 import"./cli-eh1ytktb.js";
 import"./cli-txgcknmy.js";
@@ -578,7 +600,7 @@ import"./cli-1m2e086m.js";
 import"./cli-btbzvq95.js";
 import"./cli-p7z6q2m6.js";
 import"./cli-wnb9b2g3.js";
-import"./cli-bd957dgb.js";
+import"./cli-f527ce74.js";
 import {
   import_websocket,
   import_websocket_server
@@ -587,7 +609,7 @@ import"./cli-pzxba7gw.js";
 import {
   getUserGrant,
   init_rbac_roles
-} from "./cli-anzdk0z4.js";
+} from "./cli-d9286m9h.js";
 import {
   LEGACY_RULES,
   can,
@@ -596,10 +618,12 @@ import {
   init_rbac,
   isRbacEnabled,
   setAuditSink
-} from "./cli-7pz3b7x5.js";
+} from "./cli-sksetb2q.js";
 import {
   API_DRAINING_HEADER,
   CANDIDATE_SET_MULTIPLIER,
+  CHAT_SDK_ADAPTER_NAMES,
+  CHAT_TASK_ONLY_TOOLS,
   CODEX_AUTH_WATCH_NAMESPACE,
   CredentialBindingSchema,
   DB_RETENTION_TUNING_BOUNDS,
@@ -610,6 +634,7 @@ import {
   KvTypeCollisionError,
   MAX_DB_RETENTION_DAYS,
   MEMORY_KEY_MAX_LENGTH,
+  MODEL_PROFILE_CONFIG_KEY,
   NOT_EXTENSION_AGENT_SQL,
   OpenAI,
   ReservedAgentRoleError,
@@ -626,6 +651,7 @@ import {
   cancelTask,
   catalog_default,
   channelTopic,
+  chatThreadOfContextKey,
   checkoutPromptTemplate,
   claimKv,
   claimMentions,
@@ -656,6 +682,7 @@ import {
   createLogEntry,
   createMcpServer,
   createMetric,
+  createModelProfile,
   createOAuthApp,
   createPage,
   createScheduledTask,
@@ -677,6 +704,7 @@ import {
   deleteKv,
   deleteMcpServer,
   deleteMetric,
+  deleteModelProfile,
   deleteOAuthTokens,
   deletePage,
   deletePricingRow,
@@ -715,7 +743,6 @@ import {
   getAllChannelActivityCursors,
   getAllLogs,
   getAllPricingRows,
-  getAllServices,
   getAllSessionCosts,
   getAllTasks,
   getAllUsers,
@@ -752,6 +779,7 @@ import {
   getMetric,
   getMetricVersion,
   getMetricVersions,
+  getModelProfileByName,
   getOAuthApp,
   getOAuthAppById,
   getOAuthTokens,
@@ -787,7 +815,6 @@ import {
   getScriptRunByIdempotencyKey,
   getScriptRunExecutionArgs,
   getScriptRunJournalStep,
-  getServicesByAgentId,
   getSessionCostSummary,
   getSessionCostsByAgentId,
   getSessionCostsByTaskId,
@@ -842,6 +869,7 @@ import {
   init_human_free,
   init_key_paths,
   init_memory,
+  init_model_profiles,
   init_oauth,
   init_openai,
   init_org_website,
@@ -850,6 +878,7 @@ import {
   init_reranker,
   init_runtime,
   init_runtime_pools_flag,
+  init_schema,
   init_secret_registry,
   init_steering,
   init_swarm_config_guard,
@@ -866,6 +895,9 @@ import {
   installMcpServer,
   installSkill,
   internalConfigKeyError,
+  isAdapterEntryEnabled,
+  isApiOnlyConfigKey,
+  isChatSdkTask,
   isExtensionAgent,
   isFilledOrgLogoUrl,
   isInternalConfigKey,
@@ -886,6 +918,7 @@ import {
   listKv,
   listMcpServers,
   listMetricsByAgent,
+  listModelProfiles,
   listPagesByAgent,
   listRecentSessions,
   listScriptApisForScript,
@@ -905,6 +938,8 @@ import {
   markSteeringHandled,
   markSteeringUndeliverable,
   maskSecrets,
+  modelProfileRefError,
+  modelProfileReferences,
   moveAssetKey,
   normalizeDate,
   normalizeOrgWebsite,
@@ -954,6 +989,7 @@ import {
   startTask,
   supersedeTask,
   sweepExpiredKv,
+  taskProfileError,
   telemetry,
   touchScratchScriptLastUsed,
   trackRelayed,
@@ -972,6 +1008,7 @@ import {
   updateAgentStatusFromCapacity,
   updateAuthorizationIdentity,
   updateMetric,
+  updateModelProfile,
   updateOAuthAppById,
   updatePage,
   updateScheduledTask,
@@ -998,9 +1035,10 @@ import {
   upsertSkillFiles,
   upsertSwarmConfig,
   validateConfigValue,
+  validateExportToEnv,
   withFavoriteFlags
-} from "./cli-fmhj1ehj.js";
-import"./cli-ywm1azg9.js";
+} from "./cli-y3167wt1.js";
+import"./cli-9jzdj90z.js";
 import {
   ActiveSessionSchema,
   AgentAcpStatusSchema,
@@ -1059,6 +1097,8 @@ import {
   MetricSchema,
   MetricVersionSchema,
   MetricWidgetSchema,
+  ModelProfileNameSchema,
+  ModelProfileSchema,
   ModelTierSchema,
   OnUnsupportedSchema,
   PageAuthModeSchema,
@@ -1096,7 +1136,6 @@ import {
   ScriptRunStatusSchema,
   ScriptScopeSchema,
   ScriptVersionRecordSchema,
-  ServiceSchema,
   SessionCostModelBreakdownSchema,
   SessionCostSchema,
   SessionLogSchema,
@@ -1136,22 +1175,22 @@ import {
   isSafeBundlePath,
   isTerminalTaskStatus,
   splitLegacyModelAlias
-} from "./cli-hsem16hb.js";
+} from "./cli-pe05f8yk.js";
 import {
   IDENTITY_FIELD_BUDGETS,
   IdentityFieldBudgetError,
   init_identity_field_budget
-} from "./cli-r4fqfpwf.js";
-import {
-  init_steering_enabled,
-  isSteeringEnabled
-} from "./cli-7mm2r1kp.js";
+} from "./cli-78vv7446.js";
 import {
   getSlackConfiguration,
   init_config
 } from "./cli-dmtrxqhg.js";
+import {
+  init_steering_enabled,
+  isSteeringEnabled
+} from "./cli-7mm2r1kp.js";
+import"./cli-x1r545x8.js";
 import"./cli-mvzyxwg3.js";
-import"./cli-tadfgd0t.js";
 import {
   getAllTemplateDefinitions,
   getTemplateDefinition,
@@ -1178,10 +1217,7 @@ import {
   getOpenRouterAttributionHeaders,
   init_openrouter_base_url
 } from "./cli-a35hzdve.js";
-import {
-  init_src,
-  isAlias
-} from "./cli-014vns2y.js";
+import"./cli-stfs0k5s.js";
 import {
   exports_zod,
   init_zod
@@ -1202,17 +1238,17 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-5er5gjbm.js";
+} from "./cli-r35rw5de.js";
 import {
   init_event_bus,
   workflowEventBus
-} from "./cli-81r1wjyv.js";
+} from "./cli-z780ec7c.js";
 import {
   init_bus,
   realtimeBus
 } from "./cli-zf8jjwex.js";
 import"./cli-h8w3fg83.js";
-import"./cli-db3m6zdt.js";
+import"./cli-t02z59f2.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   agentFsFileRoute,
@@ -1228,7 +1264,7 @@ import {
   parseEnvFlag
 } from "./cli-ej6gbxfb.js";
 import"./cli-1srmzpr3.js";
-import"./cli-0p3enk35.js";
+import"./cli-s69nfyeh.js";
 import {
   getApiKey,
   init_api_key
@@ -1239,7 +1275,11 @@ import {
   registerVolatileSecret,
   scrubObject,
   scrubSecrets
-} from "./cli-d161g69q.js";
+} from "./cli-shk7r5cs.js";
+import {
+  init_src,
+  isAlias
+} from "./cli-e3g5mbkz.js";
 import {
   __require,
   __toESM
@@ -4024,6 +4064,7 @@ async function handleActiveSessions(req, res, pathSegments, queryParams, myAgent
 init_src();
 init_zod();
 init_db3();
+init_model_profiles();
 init_db2();
 init_telemetry();
 init_types();
@@ -4171,7 +4212,7 @@ var updateAgentRuntimeRoute = route({
   path: "/api/agents/{id}/runtime",
   pattern: ["api", "agents", null, "runtime"],
   summary: "Update an agent's runtime harness and default model",
-  description: "Updates `agents.harness_provider` and agent-scoped runtime config. The settings apply to future provider sessions. For `model`, `reasoning_effort`, and `claude.transport`: omit the field to leave it unchanged, send `null` to clear the corresponding override, or send a value to set it. A `model` the model catalog does not list is a 400 unless `allow_custom_model` is true. A `latest:` alias is not accepted here (aliases resolve for a task's model and for `MODEL_TIER_*` values); `reasoning_effort` must be one the harness and model support.",
+  description: "Updates `agents.harness_provider` and agent-scoped runtime config. The settings apply to future provider sessions. For `model`, `reasoning_effort`, and `claude.transport`: omit the field to leave it unchanged, send `null` to clear the corresponding override, or send a value to set it. A `model` the model catalog does not list is a 400 unless `allow_custom_model` is true. A `latest:` alias is not accepted here (aliases resolve for a task's model and for `MODEL_TIER_*` values); `reasoning_effort` must be one the harness and model support. `profile` sets the agent's default model profile (same tri-state): it must exist and run on `harness_provider`, and it cannot be sent with `model`. Sending `model`, or changing the model or effort override by any path, clears the default profile.",
   tags: ["Agents"],
   params: exports_external.object({ id: exports_external.string() }),
   query: exports_external.object({ repoId: exports_external.string().optional() }),
@@ -4180,6 +4221,7 @@ var updateAgentRuntimeRoute = route({
     model: exports_external.string().trim().min(1).nullable().optional(),
     allow_custom_model: exports_external.boolean().optional().default(false),
     reasoning_effort: ReasoningEffortSchema.nullable().optional(),
+    profile: exports_external.string().trim().min(1).nullable().optional(),
     acp: AcpRuntimeConfigSchema.optional(),
     claude: ClaudeRuntimeConfigSchema.optional()
   }),
@@ -4824,7 +4866,22 @@ async function handleAgentsRest(req, res, pathSegments, queryParams, _myAgentId)
     const parsed = await updateAgentRuntimeRoute.parse(req, res, pathSegments, queryParams);
     if (!parsed)
       return true;
-    const { harness_provider, model, allow_custom_model, reasoning_effort, acp, claude } = parsed.body;
+    const { harness_provider, model, allow_custom_model, reasoning_effort, profile, acp, claude } = parsed.body;
+    if (typeof profile === "string") {
+      if (model !== undefined) {
+        jsonError(res, "Send `profile` or `model`, not both", 400);
+        return true;
+      }
+      const picked = await getModelProfileByName(profile);
+      if (!picked) {
+        jsonError(res, `Unknown model profile "${profile}"`, 400);
+        return true;
+      }
+      if (picked.harness !== harness_provider) {
+        jsonError(res, `Model profile "${profile}" runs on the ${picked.harness} harness, not ${harness_provider}`, 400);
+        return true;
+      }
+    }
     if (acp && harness_provider !== "acp") {
       jsonError(res, "ACP configuration requires harness_provider=acp", 400);
       return true;
@@ -4901,6 +4958,18 @@ async function handleAgentsRest(req, res, pathSegments, queryParams, _myAgentId)
             description: "Set via PATCH /api/agents/{id}/runtime"
           });
         }
+        if (model !== undefined || profile === null) {
+          await deleteSwarmConfigByKey("agent", parsed.params.id, MODEL_PROFILE_CONFIG_KEY);
+        } else if (profile !== undefined) {
+          await upsertSwarmConfig({
+            scope: "agent",
+            scopeId: parsed.params.id,
+            key: MODEL_PROFILE_CONFIG_KEY,
+            value: profile,
+            description: "Default model profile, set via PATCH /api/agents/{id}/runtime",
+            exportToEnv: false
+          });
+        }
         if (claude?.transport === null) {
           await deleteSwarmConfigByKey("agent", parsed.params.id, "CLAUDE_TRANSPORT");
         } else if (claude?.transport !== undefined) {
@@ -4987,6 +5056,10 @@ async function handleAgentsRest(req, res, pathSegments, queryParams, _myAgentId)
         jsonError(res, error.message, 400);
         return true;
       }
+      if (modelProfileRefError(error) === "missing") {
+        jsonError(res, `Unknown model profile "${profile}"`, 400);
+        return true;
+      }
       throw error;
     }
     if (!agent) {
@@ -7487,6 +7560,7 @@ init_secret_scrubber();
 // src/http/config.ts
 init_zod();
 init_db3();
+init_model_profiles();
 
 // src/be/org-profile.ts
 init_org_website();
@@ -7522,14 +7596,23 @@ init_request_auth_context();
 init_secret_scrubber();
 var MAX_ENV_PRESENCE_KEYS = 200;
 var SECRETS_FORCE_MASK_NOTE = " (secret values masked: this token cannot read secrets in this scope)";
-var API_ONLY_CONFIG_KEYS = new Set(["API_AGENT_FS_API_KEY", "SLACK_SIGNING_SECRET"]);
 function stripApiOnlyKeys(configs) {
-  return configs.filter((config) => !API_ONLY_CONFIG_KEYS.has(config.key) && !isInternalConfigKey(config.key));
+  return configs.filter((config) => !isApiOnlyConfigKey(config.key) && !isInternalConfigKey(config.key));
 }
 function singleHeader(req, name) {
   const raw = req.headers[name];
   return Array.isArray(raw) ? raw[0] : raw;
 }
+function readsRepoSecrets(auth, agent) {
+  if (auth?.kind !== "agent" || !auth.runtimeId)
+    return true;
+  return can({
+    principal: { kind: "agent", agentId: auth.agentId, isLead: agent?.isLead ?? false },
+    verb: "config.read.secrets",
+    resource: { kind: "none" },
+    source: "http"
+  }).allow;
+}
 async function requestSecretReadScope(req, resolvedScope) {
   const auth = getRequestAuth(req);
   if (auth?.kind === "operator")
@@ -7566,6 +7649,9 @@ async function resolveSecretsRead(req, includeSecrets, resolvedScope) {
   };
 }
 async function ensureConfigAdmin(req, res, verb) {
+  return ensureHttpPermission(req, res, verb, verb === "config.write.any" ? "Writing swarm config requires the lead agent" : "Deleting swarm config requires the lead agent");
+}
+async function ensureHttpPermission(req, res, verb, forbiddenMessage) {
   const auth = getRequestAuth(req);
   if (auth?.kind === "operator" || auth?.kind === "user")
     return true;
@@ -7582,7 +7668,7 @@ async function ensureConfigAdmin(req, res, verb) {
     source: "http"
   });
   if (!decision.allow) {
-    jsonError(res, verb === "config.write.any" ? "Writing swarm config requires the lead agent" : "Deleting swarm config requires the lead agent", 403);
+    jsonError(res, forbiddenMessage, 403);
     return false;
   }
   return true;
@@ -7700,7 +7786,8 @@ var upsertConfig = route({
     value: exports_external.unknown(),
     isSecret: exports_external.boolean().optional(),
     envPath: exports_external.string().nullish(),
-    description: exports_external.string().nullish()
+    description: exports_external.string().nullish(),
+    exportToEnv: exports_external.boolean().optional().describe("Export this row into agent process env (default true on create, false for a few server-side secrets; omitted on update keeps the stored flag). Rejected as true for keys only the API server reads.")
   }),
   responses: {
     200: { description: "Config entry upserted", schema: SwarmConfigSchema },
@@ -7839,7 +7926,7 @@ async function handleConfig(req, res, pathSegments, queryParams) {
       return true;
     if (!await ensureConfigAdmin(req, res, "config.write.any"))
       return true;
-    const { scope, scopeId, key, value, isSecret, envPath, description } = parsed.body;
+    const { scope, scopeId, key, value, isSecret, envPath, description, exportToEnv } = parsed.body;
     if (scope === "global" && scopeId) {
       jsonError(res, "Global scope must not have scopeId", 400);
       return true;
@@ -7856,7 +7943,7 @@ async function handleConfig(req, res, pathSegments, queryParams) {
       jsonError(res, internalConfigKeyError(key).message, 400);
       return true;
     }
-    const validationError = validateConfigValue(key, value);
+    const validationError = validateConfigValue(key, value) ?? validateExportToEnv(key, exportToEnv);
     if (validationError) {
       jsonError(res, validationError, 400);
       return true;
@@ -7870,7 +7957,8 @@ async function handleConfig(req, res, pathSegments, queryParams) {
         value: String(value),
         isSecret: isSecret || false,
         envPath: envPath || null,
-        description: description || null
+        description: description || null,
+        exportToEnv
       });
       if (scope === "global" && key === "SWARM_ORG_WEBSITE") {
         await fillOrgLogoFromWebsite(String(value));
@@ -7880,7 +7968,11 @@ async function handleConfig(req, res, pathSegments, queryParams) {
       }
       const result = includeSecrets || !config.isSecret ? config : maskSecrets([config])[0];
       upsertConfig.respond(res, 200, result);
-    } catch (_error) {
+    } catch (error) {
+      if (modelProfileRefError(error) === "missing") {
+        jsonError(res, `Unknown model profile "${String(value)}"`, 400);
+        return true;
+      }
       jsonError(res, "Failed to upsert config", 500);
     }
     return true;
@@ -8428,7 +8520,7 @@ async function sendReviewBatch(input, deps = {}) {
     const target = targets[index];
     const isRepair = index >= wonIds.length;
     if (reply.status === "rejected") {
-      console.warn(scrubSecrets(`[comb] sent reply failed comment=${target.id} task=${target.taskId}: ${errorMessage(reply.reason)}`));
+      console.warn(scrubSecrets(`[comb] sent reply failed comment=${target.id} task=${target.taskId}: ${errorMessage2(reply.reason)}`));
       if (isRepair)
         skipped.push(alreadySent(target.id, target.taskId));
     } else if (isRepair) {
@@ -8459,7 +8551,7 @@ async function readComment(agentFs, drive, versionOf, id) {
   } catch (error) {
     if (error instanceof FilesError && error.code === "NotFound")
       return { id, thread: null };
-    throw new ReviewBatchError(502, scrubSecrets(`agent-fs could not read comment ${id}: ${errorMessage(error)}`));
+    throw new ReviewBatchError(502, scrubSecrets(`agent-fs could not read comment ${id}: ${errorMessage2(error)}`));
   }
   const { comment } = thread;
   const version = comment.fileVersion ?? (comment.parentId ? undefined : await versionOf(comment));
@@ -8519,7 +8611,7 @@ async function settleClaims(ids, claim, next) {
   settled.forEach((result, index) => {
     if (result.status === "fulfilled" && result.value)
       return;
-    const why = result.status === "rejected" ? errorMessage(result.reason) : "another send holds the claim";
+    const why = result.status === "rejected" ? errorMessage2(result.reason) : "another send holds the claim";
     console.warn(scrubSecrets(`[comb] could not ${next ? "record" : "release"} the claim on comment=${ids[index]}: ${why}`));
   });
 }
@@ -8621,7 +8713,7 @@ async function requesterLabel(userId) {
     return "an operator (swarm API key)";
   return user.email ? `${user.name} <${user.email}>` : user.name;
 }
-function errorMessage(error) {
+function errorMessage2(error) {
   return error instanceof Error ? error.message : String(error);
 }
 
@@ -8828,64 +8920,6 @@ async function handleContext(req, res, pathSegments, queryParams, myAgentId) {
   return false;
 }
 
-// src/http/ecosystem.ts
-init_zod();
-init_db3();
-var EcosystemAppSchema = exports_external.object({
-  name: exports_external.string(),
-  script: exports_external.string(),
-  cwd: exports_external.string().optional(),
-  interpreter: exports_external.string().optional(),
-  args: exports_external.array(exports_external.string()).optional(),
-  env: exports_external.record(exports_external.string(), exports_external.string()).optional()
-});
-var getEcosystem = route({
-  method: "get",
-  path: "/ecosystem",
-  pattern: ["ecosystem"],
-  summary: "Get PM2 ecosystem config for agent services",
-  tags: ["Ecosystem"],
-  auth: { apiKey: true, agentId: true },
-  responses: {
-    200: {
-      description: "PM2 ecosystem config",
-      schema: exports_external.object({ apps: exports_external.array(EcosystemAppSchema) })
-    },
-    400: { description: "Missing X-Agent-ID" }
-  }
-});
-async function handleEcosystem(req, res, pathSegments, myAgentId) {
-  if (getEcosystem.match(req.method, pathSegments)) {
-    if (!myAgentId) {
-      jsonError(res, "Missing X-Agent-ID header", 400);
-      return true;
-    }
-    const services = await getServicesByAgentId(myAgentId);
-    const ecosystem = {
-      apps: services.filter((s) => s.script).map((s) => {
-        const app = {
-          name: s.name,
-          script: s.script
-        };
-        if (s.cwd)
-          app.cwd = s.cwd;
-        if (s.interpreter)
-          app.interpreter = s.interpreter;
-        if (s.args && s.args.length > 0)
-          app.args = s.args;
-        if (s.env && Object.keys(s.env).length > 0)
-          app.env = s.env;
-        if (s.port)
-          app.env = { ...app.env || {}, PORT: String(s.port) };
-        return app;
-      })
-    };
-    getEcosystem.respond(res, 200, ecosystem);
-    return true;
-  }
-  return false;
-}
-
 // src/http/events.ts
 init_zod();
 init_types();
@@ -9107,6 +9141,7 @@ declare module "swarm-extension" {
       | "linear"
       | "jira"
       | "comb"
+      | "chat"
       | undefined;
     routingReason?:
       | "skill"
@@ -9147,6 +9182,7 @@ declare module "swarm-extension" {
     model?: string | undefined;
     modelTier?: "smol" | "regular" | "smart" | "ultra" | undefined;
     effort?: "off" | "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+    profile?: string | undefined;
     scheduleId?: string | undefined;
     workflowRunId?: string | undefined;
     workflowRunStepId?: string | undefined;
@@ -9220,7 +9256,8 @@ declare module "swarm-extension" {
       | "system"
       | "linear"
       | "jira"
-      | "comb";
+      | "comb"
+      | "chat";
     tags: string[];
     priority: number;
     dependsOn: string[];
@@ -9279,6 +9316,9 @@ declare module "swarm-extension" {
     resolvedModel?: string | undefined;
     modelSource?: string | undefined;
     modelAlias?: string | undefined;
+    resolvedEffort?: "off" | "low" | "medium" | "high" | "xhigh" | "max" | undefined;
+    profile?: string | undefined;
+    resolvedProfile?: string | undefined;
     scheduleId?: string | undefined;
     workflowRunId?: string | null | undefined;
     workflowRunStepId?: string | null | undefined;
@@ -9555,6 +9595,43 @@ declare module "swarm-extension" {
           kind: "broadcast";
         };
   }
+  /** A Chat SDK message after its thread buffer flushed, before routing. */
+  export interface ChatRouteEvent {
+    /** Adapter name, such as \`telegram\` or \`slack\`. */
+    adapter: string;
+    channelId: string;
+    /** The Chat SDK thread id, prefixed with the adapter name. */
+    threadId: string;
+    /** The first buffered sender. */
+    userId: string;
+    userName?: string;
+    /** The buffered messages, joined. */
+    text: string;
+    botMentioned: boolean;
+    isDirectMessage: boolean;
+    /** Set when earlier swarm tasks exist in this thread. */
+    threadContext?: {
+      adapter: string;
+      threadId: string;
+    };
+  }
+  export interface ChatRouteModify {
+    target:
+      | {
+          kind: "agent";
+          agentId: string;
+        }
+      | {
+          kind: "lead";
+        }
+      | {
+          kind: "broadcast";
+        }
+      | {
+          kind: "workflow";
+          workflowId: string;
+        };
+  }
   export type HeartbeatClassification = "no-session" | "stale-session" | "fresh-stalled";
   export type HeartbeatAction = "supersede-resume" | "fail" | "record";
   export interface HeartbeatRemediateEvent {
@@ -9599,6 +9676,18 @@ declare module "swarm-extension" {
     threadTs?: string;
     taskId?: string;
   }
+  /** A Chat SDK message the swarm received or sent. */
+  export interface ChatMessageEvent {
+    adapter: string;
+    channelId: string;
+    threadId: string;
+    /** The sender, for an inbound message. */
+    userId?: string;
+    text: string;
+    direction: "inbound" | "outbound";
+    taskId?: string;
+    messageId?: string;
+  }
   /**
    * A person answered an approval request. Fires for workflow and standalone
    * requests. Timeouts and cancellations do not emit it today.
@@ -9707,6 +9796,11 @@ declare module "swarm-extension" {
       modify: SlackRouteModify;
       result: PreResult<SlackRouteModify>;
     };
+    "pre.chat.route": {
+      event: ChatRouteEvent;
+      modify: ChatRouteModify;
+      result: PreResult<ChatRouteModify>;
+    };
     "pre.heartbeat.remediate": {
       event: HeartbeatRemediateEvent;
       modify: HeartbeatRemediateModify;
@@ -9752,6 +9846,11 @@ declare module "swarm-extension" {
       modify: never;
       result: void;
     };
+    "post.chat.message": {
+      event: ChatMessageEvent;
+      modify: never;
+      result: void;
+    };
     "post.approval.resolved": {
       event: ApprovalResolvedEvent;
       modify: never;
@@ -9899,6 +9998,512 @@ void _configIsValid;
 
 // src/extensions/catalog.generated.json
 var catalog_generated_default = {
+  "comms-adherence-gate": {
+    manifestFile: "manifest.json",
+    manifest: {
+      $schema: "../manifest.schema.json",
+      name: "comms-adherence-gate",
+      description: "Judges every Slack-facing store-progress completion against the requester's comms preferences and latest request with Jev (TypeSafe or OpenRouter), and in enforce blocks a non-adherent completion once per task",
+      version: "1.5.0",
+      runtime: "api",
+      assets: {
+        hooks: "hooks.ts"
+      }
+    },
+    files: {
+      "hooks.ts": `import { type ApiCtx, block, type SwarmExtension } from "swarm-extension";
+import { z } from "zod";
+
+/**
+ * comms-adherence-gate
+ *
+ * When an agent calls \`store-progress\` with status "completed" on a task that
+ * reaches a human in Slack, judge the \`output\` against the requesting user's
+ * stored comms preferences (users.metadata.$.comms) with Jev, and against what
+ * that user actually asked for in their latest message. An explicit request
+ * ("tell me a long joke", "explain in detail") outranks the stored default, so
+ * a requested long answer is not a verbosity failure.
+ *
+ * Transport (config.provider): Jev is served by TypeSafe directly and by
+ * OpenRouter's Decisions endpoint. Both take the same {model, state, questions}
+ * body and return the same \`answers\` shape. \`auto\` uses TYPESAFE_API_KEY when
+ * set, else OPENROUTER_API_KEY.
+ *
+ * modes (config.mode):
+ *   off     -> never evaluate
+ *   shadow  -> evaluate + record, never block (default)
+ *   enforce -> record, and block the completion up to maxBlocksPerTask times
+ *              per task with actionable feedback
+ *
+ * Fails OPEN on every error: a judge outage must never wall the swarm.
+ * Every verdict lands in KV namespace \`ext:comms-gate\`.
+ */
+
+export const config = z.object({
+  mode: z.enum(["off", "shadow", "enforce"]).default("shadow"),
+  /** A dimension scoring below this fails. */
+  threshold: z.number().min(0).max(1).default(0.5),
+  timeoutMs: z.number().int().positive().default(4000),
+  maxBlocksPerTask: z.number().int().min(0).default(1),
+  provider: z.enum(["auto", "typesafe", "openrouter"]).default("auto"),
+  /** Jev model on the TypeSafe transport. */
+  model: z.string().default("jev-latest"),
+  /** Jev model on the OpenRouter transport. */
+  openrouterModel: z.string().default("typesafe/jev-1.13"),
+  /** Explicit TypeSafe key; otherwise TYPESAFE_API_KEY from the API process env. */
+  apiKey: z.string().optional(),
+});
+
+type Cfg = z.infer<typeof config>;
+type Swarm = ApiCtx["swarm"];
+
+const NS = "ext:comms-gate";
+const TYPESAFE_ENDPOINT = "https://api.typesafe.ai/v1/systemone";
+const OPENROUTER_ENDPOINT = "https://openrouter.ai/api/alpha/decisions";
+const UUID_RE = /^[0-9a-fA-F-]{36}$/;
+// The dispatcher cancels a handler after 5 s; leave room for the DB read and KV writes.
+const MAX_TIMEOUT_MS = 4000;
+
+export const cfgOf = (raw: unknown): Cfg => {
+  const parsed = config.safeParse(raw ?? {});
+  return parsed.success ? parsed.data : config.parse({});
+};
+
+// kv keys accept [a-zA-Z0-9._:/%-]
+const safeKey = (raw: string | undefined | null): string =>
+  (raw && raw.length > 0 ? raw : "unknown").replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 120);
+
+/** SDK envelopes: {success, data:{...}} or the bare payload. */
+type Envelope = {
+  data?: { rows?: unknown[]; value?: unknown };
+  rows?: unknown[];
+  value?: unknown;
+} | null;
+
+const cell = (row: unknown, i: number, key: string): unknown =>
+  Array.isArray(row) ? row[i] : (row as Record<string, unknown>)?.[key];
+
+/**
+ * The newest human message sits at the END of a Slack task: the
+ * \`<thread_context>\` blob comes first and can run to thousands of chars, so a
+ * leading slice of \`agent_tasks.task\` shows the judge everything except the
+ * actual request. Take the tail, then the part after the last \`</thread_context>\`.
+ */
+const CTX_END = "</thread_context>";
+export const latestAsk = (tail: string): string => {
+  const end = tail.lastIndexOf(CTX_END);
+  let out = (end >= 0 ? tail.slice(end + CTX_END.length) : tail)
+    .replace(/\\[Thread follow-up[^\\]]*\\]/g, "")
+    .trim();
+  // Some tasks end with the context block; fall back to the last messages in it.
+  if (out.length < 8) out = (end >= 0 ? tail.slice(0, end) : tail).trim().slice(-800);
+  return out.slice(0, 900);
+};
+
+// Preferences are the DEFAULT. A direct request outranks them.
+const JUDGING_RULES = [
+  "The requester's explicit instruction in latest_request OUTRANKS requester_preferences. Preferences describe the DEFAULT; they never override a direct request.",
+  "If latest_request asks for something long, detailed, creative, a story, a joke, a full explanation or a document, then length and structure serving that request are CORRECT and must NOT be penalized.",
+  "Judge whether agent_message serves what latest_request actually asked for, written in the requester's manner. Do not judge it against the default preference when the request overrides it.",
+];
+
+type Prefs = { verbosity?: unknown; tone?: unknown; language?: unknown } & Record<string, unknown>;
+
+/** One \`noul\` question per stated preference the gate knows how to judge. */
+export const buildQuestions = (prefs: Prefs): Record<string, unknown> => {
+  const questions: Record<string, unknown> = {};
+  if (prefs.verbosity) {
+    questions.verbosity = {
+      type: "noul",
+      instructions:
+        "Does agent_message respect the requester's verbosity preference, AS OVERRIDDEN by any explicit instruction in latest_request? Apply judging_rules.",
+      criteria: {
+        true: "Length and structure fit what latest_request asked for (or the stated preference when the request does not override it), and it leads with the result.",
+        false:
+          "Too long for what was asked, or it opens with preamble, recaps the request, narrates the process, or ends with an offer to elaborate. Length explicitly requested in latest_request is NOT a failure.",
+      },
+    };
+  }
+  if (prefs.tone) {
+    questions.tone = {
+      type: "noul",
+      instructions:
+        "Does agent_message match the requester's stated tone preference, as overridden by any explicit instruction in latest_request? Apply judging_rules.",
+      criteria: {
+        true: "The tone matches what the requester asked for.",
+        false:
+          "The tone conflicts with it (for example hedging, flattery or filler when the requester asked for direct and plain). A voice appropriate to an explicitly requested creative or narrative form is NOT a failure.",
+      },
+    };
+  }
+  if (prefs.language) {
+    questions.language = {
+      type: "noul",
+      instructions: "Is agent_message written in the requester's stated language?",
+      criteria: {
+        true: "Written in the stated language.",
+        false: "Written in a different language.",
+      },
+    };
+  }
+  return questions;
+};
+
+const secretCache = new Map<string, { value: string; at: number }>();
+const KEY_TTL_MS = 5 * 60 * 1000;
+const usable = (v: string): boolean => Boolean(v) && !v.startsWith("[REDACTED");
+const envOf = (name: string): string => String(process.env[name] ?? "");
+
+/**
+ * Resolve a secret: explicit value, then the API process env. The API process loads
+ * global swarm_config rows into process.env at boot and on config reload.
+ * ctx.swarm.config_get cannot serve it: the SDK scrubs secrets to "[REDACTED:<name>]".
+ */
+const secret = (name: string, explicit?: string): string => {
+  const cached = secretCache.get(name);
+  if (cached && Date.now() - cached.at < KEY_TTL_MS) return cached.value;
+  const value = [String(explicit ?? ""), envOf(name)].find(usable) ?? "";
+  if (usable(value)) secretCache.set(name, { value, at: Date.now() });
+  return value;
+};
+
+/** Test hook: forget cached secrets. */
+export const resetKeyCache = (): void => {
+  secretCache.clear();
+};
+
+export type JevTransport = {
+  provider: "typesafe" | "openrouter";
+  endpoint: string;
+  key: string;
+  model: string;
+};
+
+/**
+ * Pick the Jev transport. \`auto\` prefers TypeSafe and falls back to OpenRouter.
+ * Throws when the chosen provider has no usable key; the handler fails open.
+ */
+export const resolveTransport = (cfg: Cfg): JevTransport => {
+  const typesafe = (): JevTransport | null => {
+    const key = secret("TYPESAFE_API_KEY", cfg.apiKey);
+    return usable(key)
+      ? { provider: "typesafe", endpoint: TYPESAFE_ENDPOINT, key, model: cfg.model }
+      : null;
+  };
+  const openrouter = (): JevTransport | null => {
+    const key = secret("OPENROUTER_API_KEY");
+    return usable(key)
+      ? { provider: "openrouter", endpoint: OPENROUTER_ENDPOINT, key, model: cfg.openrouterModel }
+      : null;
+  };
+  const transport =
+    cfg.provider === "typesafe"
+      ? typesafe()
+      : cfg.provider === "openrouter"
+        ? openrouter()
+        : (typesafe() ?? openrouter());
+  if (transport) return transport;
+  throw new Error(
+    cfg.provider === "typesafe"
+      ? "no TYPESAFE_API_KEY"
+      : cfg.provider === "openrouter"
+        ? "no OPENROUTER_API_KEY"
+        : "no TYPESAFE_API_KEY or OPENROUTER_API_KEY",
+  );
+};
+
+/** One Jev call; returns the \`noul\` score per question. Throws on any failure. */
+export const askJev = async (
+  state: Record<string, unknown>,
+  questions: Record<string, unknown>,
+  transport: JevTransport,
+  cfg: Cfg,
+  outer?: AbortSignal,
+): Promise<{ scores: Record<string, number>; latencyMs: number }> => {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), Math.min(cfg.timeoutMs, MAX_TIMEOUT_MS));
+  const onOuterAbort = () => controller.abort();
+  outer?.addEventListener("abort", onOuterAbort);
+  const t0 = Date.now();
+  try {
+    const res = await fetch(transport.endpoint, {
+      method: "POST",
+      headers: { "Content-Type": "application/json", Authorization: \`Bearer \${transport.key}\` },
+      body: JSON.stringify({ state, model: transport.model, questions }),
+      signal: controller.signal,
+    });
+    if (!res.ok) throw new Error(\`\${transport.provider} \${res.status}\`);
+    const body = (await res.json()) as { answers?: Record<string, { noul?: unknown }> } | null;
+    const answers = body?.answers;
+    if (!answers || typeof answers !== "object") throw new Error("no answers in response");
+    const scores: Record<string, number> = {};
+    for (const [id, a] of Object.entries(answers)) {
+      if (typeof a?.noul === "number") scores[id] = a.noul;
+    }
+    if (Object.keys(scores).length === 0) throw new Error("no scores in response");
+    return { scores, latencyMs: Date.now() - t0 };
+  } finally {
+    clearTimeout(timer);
+    outer?.removeEventListener("abort", onOuterAbort);
+  }
+};
+
+const SELFTEST = "comms-gate-selftest";
+const SELFTEST_PREFS = {
+  tone: "direct, plain, no hedging",
+  language: "English",
+  verbosity:
+    "very terse - answer in the first sentence, ~400 chars max. No preamble, no recap, no closing offer.",
+};
+const SELFTEST_BAD =
+  "Great question! Let me walk you through what I did here. First I looked at the task, then I reviewed the relevant files, and after careful consideration I decided to go with option B. I hope this helps - let me know if you would like me to elaborate further on any of the above!";
+const SELFTEST_GOOD =
+  "Went with option B: it is the only one that keeps the migration reversible. PR #123.";
+
+/**
+ * Run the judge on a known-bad (positive control, must score below threshold) and a
+ * known-good (negative control, must score at or above it) message and record both
+ * under \`selftest:last\`. Proves key, egress and KV from inside the API runtime
+ * without touching real traffic.
+ */
+const selfTest = async (swarm: Swarm, cfg: Cfg, signal?: AbortSignal): Promise<void> => {
+  const started = Date.now();
+  try {
+    const transport = resolveTransport(cfg);
+    const questions = { verbosity: buildQuestions(SELFTEST_PREFS).verbosity };
+    const judge = (message: string) =>
+      askJev(
+        { requester_preferences: SELFTEST_PREFS, agent_message: message },
+        questions,
+        transport,
+        cfg,
+        signal,
+      ).then((r) => r.scores.verbosity ?? null);
+    const [bad, good] = await Promise.all([judge(SELFTEST_BAD), judge(SELFTEST_GOOD)]);
+    await swarm.kv_set({
+      namespace: NS,
+      key: "selftest:last",
+      value: {
+        at: new Date().toISOString(),
+        provider: transport.provider,
+        threshold: cfg.threshold,
+        positiveControlBadScore: bad,
+        negativeControlGoodScore: good,
+        controlsOk:
+          typeof bad === "number" &&
+          typeof good === "number" &&
+          bad < cfg.threshold &&
+          good >= cfg.threshold,
+        latencyMs: Date.now() - started,
+      },
+    });
+  } catch (err) {
+    await swarm
+      .kv_set({
+        namespace: NS,
+        key: "selftest:last",
+        value: {
+          at: new Date().toISOString(),
+          error: String(err).slice(0, 400),
+          latencyMs: Date.now() - started,
+        },
+      })
+      .catch(() => {});
+  }
+};
+
+const TASK_SQL = \`SELECT t.source, t.slackThreadTs, t.agentId, t.requestedByUserId,
+       json_extract(u.metadata, '$.comms') AS comms, u.name,
+       substr(t.task, 1, 400) AS askHead,
+       substr(t.task, -1400) AS askTail
+FROM agent_tasks t
+LEFT JOIN users u ON u.id = t.requestedByUserId
+WHERE t.id = ?\`;
+
+const LEAD_SQL = "SELECT isLead FROM agents WHERE id = ?";
+
+/**
+ * Mirrors the \`task.progress.write\` rule store-progress enforces
+ * (src/rbac/legacy-policy.ts): the caller owns the task, the task is
+ * unassigned, or the caller is a lead. Lead status comes from the caller's
+ * agents row, never from tool args. Extension callers return before this.
+ */
+const mayWriteProgress = async (
+  swarm: Swarm,
+  callerId: string | undefined,
+  taskAgentId: string,
+): Promise<boolean> => {
+  if (!callerId) return false;
+  if (!taskAgentId || taskAgentId === callerId) return true;
+  const q = (await swarm.db_query({ sql: LEAD_SQL, params: [callerId] })) as Envelope;
+  const row = (q?.data?.rows ?? q?.rows ?? [])[0];
+  return Number(cell(row, 0, "isLead") ?? 0) === 1;
+};
+
+const extension: SwarmExtension = (api) => {
+  api.on("pre.tool.call", async (event, ctx) => {
+    if (event.tool !== "store-progress") return;
+    if (event.requestInfo?.callOrigin === "extension") return;
+
+    const cfg = cfgOf(ctx.config);
+    if (cfg.mode === "off") return;
+
+    const args = (event.args ?? {}) as Record<string, unknown>;
+
+    // Self-test hatch: a progress call whose text starts with the sentinel runs
+    // the controls and records them under \`selftest:last\`.
+    if (args.status !== "completed") {
+      if (typeof args.progress === "string" && args.progress.startsWith(SELFTEST)) {
+        await selfTest(ctx.swarm, cfg, ctx.signal);
+      }
+      return;
+    }
+
+    const output = typeof args.output === "string" ? args.output.trim() : "";
+    if (!output) return;
+
+    const taskId = String(args.taskId ?? event.requestInfo?.sourceTaskId ?? "");
+    if (!UUID_RE.test(taskId)) return;
+
+    try {
+      const q = (await ctx.swarm.db_query({ sql: TASK_SQL, params: [taskId] })) as Envelope;
+      const row = (q?.data?.rows ?? q?.rows ?? [])[0];
+      if (!row) return;
+
+      const source = String(cell(row, 0, "source") ?? "");
+      const slackThreadTs = cell(row, 1, "slackThreadTs");
+      const agentId = String(cell(row, 2, "agentId") ?? "");
+      const requesterId = String(cell(row, 3, "requestedByUserId") ?? "");
+      const commsRaw = cell(row, 4, "comms");
+      const requesterName = String(cell(row, 5, "name") ?? requesterId);
+      const threadOpening = String(cell(row, 6, "askHead") ?? "");
+      const ask = latestAsk(String(cell(row, 7, "askTail") ?? ""));
+
+      // Judge only a completion store-progress will accept, so no agent can ship
+      // another task's thread and preferences to the external judge.
+      if (!(await mayWriteProgress(ctx.swarm, event.requestInfo?.agentId, agentId))) return;
+
+      // Only where the text actually reaches a human in Slack.
+      if (source !== "slack" && !slackThreadTs) return;
+      if (!commsRaw) return; // no stated preferences -> nothing to judge against
+      const prefs = (typeof commsRaw === "string" ? JSON.parse(commsRaw) : commsRaw) as Prefs;
+      if (!prefs || typeof prefs !== "object") return;
+
+      const questions = buildQuestions(prefs);
+      if (Object.keys(questions).length === 0) return;
+
+      const transport = resolveTransport(cfg);
+      const { scores, latencyMs } = await askJev(
+        {
+          role: "You audit an AI agent's final message to the human who requested the work.",
+          requester: requesterName,
+          requester_preferences: prefs,
+          latest_request: ask,
+          thread_opening: threadOpening,
+          judging_rules: JUDGING_RULES,
+          agent_message: output,
+        },
+        questions,
+        transport,
+        cfg,
+        ctx.signal,
+      );
+
+      const failed = Object.entries(scores)
+        .filter(([, v]) => v < cfg.threshold)
+        .map(([k]) => k);
+
+      const verdict = {
+        at: new Date().toISOString(),
+        taskId,
+        agentId,
+        source,
+        requester: requesterName,
+        requesterId,
+        provider: transport.provider,
+        scores,
+        failed,
+        threshold: cfg.threshold,
+        mode: cfg.mode,
+        latencyMs,
+        preferences: prefs,
+        askPreview: ask.slice(0, 400),
+        outputPreview: output.slice(0, 700),
+      };
+
+      await ctx.swarm.kv_incr({ namespace: NS, key: "total" });
+      await ctx.swarm.kv_set({ namespace: NS, key: "last", value: verdict });
+
+      if (failed.length === 0) {
+        await ctx.swarm.kv_incr({ namespace: NS, key: "pass" });
+        return;
+      }
+
+      await ctx.swarm.kv_incr({ namespace: NS, key: "fail" });
+      for (const dim of failed) {
+        await ctx.swarm.kv_incr({ namespace: NS, key: \`dim:\${safeKey(dim)}\` });
+      }
+
+      const blocksKey = \`blocks:\${safeKey(taskId)}\`;
+      // kv_get answers {success, data:{value}}, and {success:false} when absent.
+      const prior = (await ctx.swarm.kv_get({ namespace: NS, key: blocksKey })) as Envelope;
+      const priorBlocks = Number(prior?.data?.value ?? prior?.value ?? 0) || 0;
+      const willBlock = cfg.mode === "enforce" && priorBlocks < cfg.maxBlocksPerTask;
+
+      await ctx.swarm.kv_set({
+        namespace: NS,
+        key: \`fail:\${Date.now()}:\${safeKey(taskId)}\`,
+        value: { ...verdict, action: willBlock ? "blocked" : "recorded" },
+      });
+
+      if (!willBlock) {
+        await ctx.swarm.kv_incr({
+          namespace: NS,
+          key: cfg.mode === "enforce" ? "escaped" : "shadowed",
+        });
+        return;
+      }
+
+      await ctx.swarm.kv_incr({ namespace: NS, key: "blocked" });
+      await ctx.swarm.kv_incr({ namespace: NS, key: blocksKey });
+
+      const detail = failed
+        .map(
+          (d) =>
+            \`\${d} (\${scores[d]!.toFixed(2)} vs \${cfg.threshold}) — requested: \${String(prefs[d] ?? "").slice(0, 220)}\`,
+        )
+        .join("\\n");
+
+      return block(
+        [
+          \`Comms gate: this output does not match \${requesterName}'s stated preferences.\`,
+          detail,
+          "Rewrite the output to match and call store-progress again. Do not change the facts, only how they are said.",
+        ].join("\\n"),
+      );
+    } catch (err) {
+      // Fail open, always.
+      try {
+        await ctx.swarm.kv_incr({ namespace: NS, key: "error" });
+        await ctx.swarm.kv_set({
+          namespace: NS,
+          key: "error:last",
+          value: { at: new Date().toISOString(), taskId, error: String(err).slice(0, 400) },
+        });
+      } catch {
+        /* ignore */
+      }
+      ctx.log.warn("comms-adherence-gate: failing open", { error: String(err) });
+      return;
+    }
+  });
+};
+
+export default extension;
+`
+    },
+    readme: '# comms-adherence-gate\n\nAgents finish Slack tasks with a final message a human reads. This extension judges that message against the requester\'s stated comms preferences and their latest request with Jev, [TypeSafe](https://typesafe.ai)\'s decision model. In `enforce` it blocks a non-adherent completion once and tells the agent what to fix.\n\nInstall config:\n\n```json\n{ "mode": "shadow" }\n```\n\nStart in `shadow`, read the verdicts in KV for a few days, then switch to `enforce`.\n\n## Modes\n\n| `mode` | Effect |\n|---|---|\n| `off` | Never evaluates. |\n| `shadow` (default) | Asks Jev and records the verdict. Never blocks. |\n| `enforce` | Asks Jev, records the verdict, and blocks the `store-progress` call when a dimension fails, at most `maxBlocksPerTask` times per task. The agent gets the failed dimensions, their scores and the stated preference, and calls again. |\n\n## What it gates\n\nHook: `pre.tool.call` on `store-progress` with `status: "completed"` and a non-empty `output`. Calls made by extensions are skipped. The task must:\n\n1. Come from Slack (`source = "slack"` or a `slackThreadTs`). Other tasks pass without a Jev call.\n2. Have a requester with stated preferences in `users.metadata.comms`. A requester with none passes. Set them with the `manage-user` tool.\n\n## Decision\n\nThe gate reads the task row and asks one `noul` question per stated preference it knows: `verbosity`, `tone`, `language`. Any other key in `comms` is context only.\n\nJev sees the preferences, the requester\'s latest message (the text after the last `</thread_context>`, from the last 1,400 characters of the task), the first 400 characters of the task, and the output. Its judging rules say an explicit request outranks the stored default. A requested long answer, story or document is not a verbosity failure.\n\nA dimension fails when its score is below `threshold`. Any failed dimension fails the output.\n\n## Jev transport\n\nJev is reachable two ways. Both take the same request and return the same answer.\n\n| `provider` | Endpoint | Key | Model |\n|---|---|---|---|\n| `typesafe` | `POST https://api.typesafe.ai/v1/systemone` | `TYPESAFE_API_KEY` (or `apiKey`) | `model`, default `jev-latest` |\n| `openrouter` | `POST https://openrouter.ai/api/alpha/decisions` | `OPENROUTER_API_KEY` | `openrouterModel`, default `typesafe/jev-1.13` |\n| `auto` (default) | TypeSafe when its key is set, else OpenRouter | | |\n\nEach verdict row records the `provider` that answered.\n\n## Fail open\n\nEvery error lets the completion through: a missing key, an HTTP error, a network error, a timeout, a malformed answer, or a failed DB read. The handler never throws, so an outage cannot auto-disable the extension. Each failure bumps the `error` counter and overwrites `error:last`.\n\n## Self-test\n\nCall `store-progress` with a non-completed status and `progress` starting with `comms-gate-selftest`. The gate judges a known-bad and a known-good message against a terse preference and writes `selftest:last`: both scores, the threshold, the provider, and `controlsOk` (bad below threshold and good at or above it). Real traffic is untouched.\n\n## Config\n\n| Key | Default | Notes |\n|---|---|---|\n| `mode` | `shadow` | `off`, `shadow`, or `enforce` |\n| `threshold` | `0.5` | A dimension scoring below this fails |\n| `timeoutMs` | `4000` | Jev call timeout, capped at 4000 (the dispatcher cancels a handler at 5 s) |\n| `maxBlocksPerTask` | `1` | Blocks per task in `enforce`; after that the gate records and lets it through |\n| `provider` | `auto` | `auto`, `typesafe`, or `openrouter`. See [Jev transport](#jev-transport) |\n| `model` | `jev-latest` | Jev model on TypeSafe |\n| `openrouterModel` | `typesafe/jev-1.13` | Jev model on OpenRouter |\n| `apiKey` | unset | Explicit TypeSafe key. Prefer the `TYPESAFE_API_KEY` secret below |\n\n## Required secrets\n\nRead from the API process environment at call time. Set them as global `swarm_config` secrets: the API process loads global rows into `process.env` at boot and on config reload.\n\n- `TYPESAFE_API_KEY` or `OPENROUTER_API_KEY`: one is required for any evaluation. Under `auto`, TypeSafe wins when both are set. Without either, every completion fails open.\n\nNo key is written to config, KV, logs, or a block reason.\n\n## KV namespace `ext:comms-gate`\n\n- `last`: the latest verdict, with `scores`, `failed`, `provider`, `latencyMs`, the preferences, a 400-character `askPreview` and a 700-character `outputPreview`.\n- `fail:<epochMs>:<taskId>`: one row per failed verdict, with `action` (`blocked` or `recorded`).\n- `blocks:<taskId>`: blocks issued for that task.\n- `error:last`, `selftest:last`.\n- Counters: `total`, `pass`, `fail`, `blocked`, `escaped` (enforce, block budget spent), `shadowed`, `error`, and `dim:<dimension>`.\n\n## Known limits\n\n- Only the last 1,400 characters of the task are searched for the latest request. A very long final message is cut to its last 900 characters.\n- The block budget is per task, so a retried completion after a block goes through once the budget is spent, even if it still fails.\n'
+  },
   "deploy-awareness": {
     manifestFile: "manifest.json",
     manifest: {
@@ -12808,6 +13413,203 @@ async function handleInboxState(req, res, pathSegments, queryParams) {
 
 // src/http/integrations.ts
 init_zod();
+
+// src/integrations/chat-sdk/status.ts
+init_zod();
+init_constants();
+init_env_flag();
+init_secret_scrubber();
+
+// src/integrations/chat-sdk/discord-api.ts
+init_secret_scrubber();
+var DISCORD_TIMEOUT_MS = 5000;
+var GUILDS_CACHE_MS = 60000;
+var MAX_GUILD_NAMES = 10;
+var cache;
+async function fetchDiscordGuilds(token, now = Date.now()) {
+  if (cache && cache.token === token && now - cache.at < GUILDS_CACHE_MS)
+    return cache.guilds;
+  let guilds;
+  try {
+    const response = await fetch(`${resolveAdapterApiUrl("discord")}/users/@me/guilds`, {
+      headers: { authorization: `Bot ${token}` },
+      signal: AbortSignal.timeout(DISCORD_TIMEOUT_MS)
+    });
+    if (!response.ok)
+      throw new Error(`HTTP ${response.status}`);
+    const payload = await response.json();
+    if (!Array.isArray(payload))
+      throw new Error("unexpected response shape");
+    const names = payload.map((guild) => guild !== null && typeof guild === "object" && typeof guild.name === "string" ? guild.name : undefined).filter((name) => name !== undefined);
+    guilds = { count: payload.length, names: names.slice(0, MAX_GUILD_NAMES) };
+  } catch (error) {
+    console.warn(scrubSecrets(`[chat-sdk] discord: could not list the bot's servers: ${errorMessage(error).replaceAll(token, "[REDACTED]")}`));
+  }
+  cache = { token, at: now, guilds };
+  return guilds;
+}
+
+// src/integrations/chat-sdk/status.ts
+init_schema();
+var ChatSdkStatusSchema = exports_external.object({
+  enabled: exports_external.boolean(),
+  slackClash: exports_external.boolean(),
+  error: exports_external.string().optional(),
+  adapters: exports_external.array(exports_external.object({
+    name: exports_external.enum(CHAT_SDK_ADAPTER_NAMES),
+    configured: exports_external.boolean(),
+    enabled: exports_external.boolean(),
+    health: exports_external.enum(["ok", "error", "disabled", "incomplete"]),
+    error: exports_external.string().optional(),
+    webhookUrl: exports_external.string(),
+    mode: exports_external.string().optional(),
+    gateway: exports_external.object({
+      state: exports_external.enum(["running", "backoff", "stopped"]),
+      since: exports_external.string(),
+      restarts: exports_external.number()
+    }).optional(),
+    guilds: exports_external.object({ count: exports_external.number(), names: exports_external.array(exports_external.string()) }).optional()
+  }))
+});
+var DEFAULT_MODES = {
+  telegram: "webhook",
+  slack: "webhook"
+};
+var NOT_RUNNING = "The adapter is starting, or the last configuration save is still applying. Refresh in a few seconds.";
+var SLACK_CLASH_CAUSE = "the Slack adapter conflicts with the built-in Slack integration (set SLACK_DISABLE=true)";
+var MAX_STATUS_ERROR_CHARS = 300;
+function statusError(message) {
+  return scrubSecrets(message).slice(0, MAX_STATUS_ERROR_CHARS);
+}
+function readRawAdapters() {
+  const raw = process.env.CHAT_SDK_ADAPTERS?.trim();
+  if (!raw)
+    return {};
+  try {
+    const parsed = JSON.parse(raw);
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
+      return {};
+    const out = {};
+    for (const name of CHAT_SDK_ADAPTER_NAMES) {
+      const value = parsed[name];
+      if (value !== null && typeof value === "object" && !Array.isArray(value)) {
+        out[name] = value;
+      }
+    }
+    return out;
+  } catch {
+    return {};
+  }
+}
+function chatSdkWebhookUrl(name) {
+  return `${getPublicMcpBaseUrl()}/api/integrations/chat/${name}/webhook`;
+}
+async function discordGuildsFor(config, health) {
+  if (health?.status !== "ok" || health.gateway?.state !== "running")
+    return;
+  const raw = config.adapters.discord?.botToken;
+  const token = typeof raw === "function" ? await raw() : raw;
+  if (typeof token !== "string" || token.length === 0)
+    return;
+  return fetchDiscordGuilds(token);
+}
+async function getChatSdkStatus() {
+  const config = await getChatSdkConfig();
+  const raw = readRawAdapters();
+  const runtimeHealth = getChatSdkHealth();
+  const slackClash = raw.slack !== undefined && !isEnvFlagEnabled("SLACK_DISABLE", false);
+  const blockedCause = config.error ?? (config.enabled && slackClash ? SLACK_CLASH_CAUSE : undefined);
+  const discordGuilds = await discordGuildsFor(config, runtimeHealth.discord);
+  const adapters = CHAT_SDK_ADAPTER_NAMES.map((name) => {
+    const configured = raw[name] !== undefined;
+    const enabled = isAdapterEntryEnabled(raw[name]);
+    const current = runtimeHealth[name];
+    const incomplete = config.incomplete?.[name];
+    const rawMode = raw[name]?.mode;
+    const mode = typeof rawMode === "string" ? rawMode : configured ? DEFAULT_MODES[name] : undefined;
+    let health = "disabled";
+    let error;
+    if (current) {
+      health = current.status;
+      const showWarning = current.status === "error" || current.gateway?.state === "backoff";
+      error = current.error ?? (showWarning ? current.lastWarning : undefined);
+    } else if (incomplete) {
+      health = "incomplete";
+      error = incomplete;
+    } else if (configured && !enabled) {
+      error = "Turned off on the card. The configuration is kept.";
+    } else if (config.enabled && configured) {
+      error = blockedCause ? `Not started: ${blockedCause}` : NOT_RUNNING;
+    }
+    return {
+      name,
+      configured,
+      enabled,
+      health,
+      ...error ? { error: statusError(error) } : {},
+      webhookUrl: chatSdkWebhookUrl(name),
+      ...mode ? { mode } : {},
+      ...current?.gateway ? { gateway: current.gateway } : {},
+      ...name === "discord" && discordGuilds ? { guilds: discordGuilds } : {}
+    };
+  });
+  return {
+    enabled: config.enabled,
+    slackClash,
+    ...config.error ? { error: statusError(config.error) } : {},
+    adapters
+  };
+}
+
+class ChatSdkActionError extends Error {
+  status;
+  constructor(message, status) {
+    super(message);
+    this.status = status;
+    this.name = "ChatSdkActionError";
+  }
+}
+async function callBotApi(baseUrl, token, method, body) {
+  try {
+    return await callTelegramBotApi(baseUrl, token, method, body);
+  } catch (error) {
+    if (error instanceof TelegramBotApiError)
+      throw new ChatSdkActionError(error.message, 502);
+    throw error;
+  }
+}
+async function registerTelegramWebhook() {
+  const config = await getChatSdkConfig();
+  if (!config.enabled) {
+    throw new ChatSdkActionError("The Chat SDK channel is disabled (CHAT_SDK_ENABLED is not true). Enable it and restart the API first", 400);
+  }
+  if (config.error)
+    throw new ChatSdkActionError(statusError(config.error), 400);
+  const telegram = config.adapters.telegram;
+  if (!telegram) {
+    throw new ChatSdkActionError("Telegram is not configured in CHAT_SDK_ADAPTERS", 400);
+  }
+  if (telegram.mode !== "webhook") {
+    throw new ChatSdkActionError("Telegram runs in polling mode; a registered webhook would stop polling", 400);
+  }
+  const secretToken = telegram.secretToken;
+  if (typeof secretToken !== "string" || secretToken.length === 0) {
+    throw new ChatSdkActionError("Telegram webhook mode needs a secretToken", 400);
+  }
+  const rawToken = telegram.botToken;
+  const token = typeof rawToken === "function" ? await rawToken() : rawToken;
+  if (typeof token !== "string" || token.length === 0) {
+    throw new ChatSdkActionError("Telegram botToken is empty", 400);
+  }
+  const baseUrl = resolveAdapterApiUrl("telegram");
+  const webhookUrl = chatSdkWebhookUrl("telegram");
+  await callBotApi(baseUrl, token, "setWebhook", { url: webhookUrl, secret_token: secretToken });
+  const info = await callBotApi(baseUrl, token, "getWebhookInfo", {});
+  if (info === null || typeof info !== "object" || typeof info.url !== "string") {
+    throw new ChatSdkActionError("Telegram getWebhookInfo returned an unexpected result", 502);
+  }
+  return { webhookUrl, webhookInfo: info };
+}
 // slack-manifest.json
 var slack_manifest_default = {
   display_information: {
@@ -12983,6 +13785,19 @@ var McpUserConfigSchema = exports_external.object({
   mcpUserUrl: exports_external.string()
 });
 var SlackManifestSchema = exports_external.record(exports_external.string(), exports_external.unknown());
+var TelegramRegisterWebhookSchema = exports_external.object({
+  webhookUrl: exports_external.string(),
+  webhookInfo: exports_external.looseObject({
+    url: exports_external.string(),
+    has_custom_certificate: exports_external.boolean().optional(),
+    pending_update_count: exports_external.number().optional(),
+    last_error_date: exports_external.number().optional(),
+    last_error_message: exports_external.string().optional(),
+    max_connections: exports_external.number().optional(),
+    ip_address: exports_external.string().optional(),
+    allowed_updates: exports_external.array(exports_external.string()).optional()
+  })
+});
 var claudeManagedTestRoute = route({
   method: "post",
   path: "/api/integrations/claude-managed/test",
@@ -13021,6 +13836,34 @@ var slackManifestRoute = route({
     200: { description: "Slack app manifest", schema: SlackManifestSchema }
   }
 });
+var chatSdkStatusRoute = route({
+  method: "get",
+  path: "/api/integrations/chat/status",
+  pattern: ["api", "integrations", "chat", "status"],
+  summary: "Chat SDK channel status: enabled flag, Slack clash, per-adapter health and webhook URL.",
+  tags: ["Integrations"],
+  responses: {
+    200: {
+      description: "Per-adapter status. `health` is `disabled` for an adapter that is not running. Never contains secret values.",
+      schema: ChatSdkStatusSchema
+    }
+  }
+});
+var chatSdkTelegramRegisterWebhookRoute = route({
+  method: "post",
+  path: "/api/integrations/chat/telegram/register-webhook",
+  pattern: ["api", "integrations", "chat", "telegram", "register-webhook"],
+  summary: "Register this swarm's public Telegram webhook URL and secret token with the Bot API (setWebhook), then return getWebhookInfo.",
+  tags: ["Integrations"],
+  body: exports_external.object({}).optional(),
+  responses: {
+    200: { description: "Webhook registered", schema: TelegramRegisterWebhookSchema },
+    400: { description: "Telegram is not configured for webhook mode" },
+    403: { description: "Only the lead agent or a dashboard user can register the webhook" },
+    502: { description: "The Telegram Bot API rejected the call" }
+  },
+  rbac: { permission: "integration.chat.manage" }
+});
 function createIntegrationsHandler(deps = {}) {
   const buildClient = deps.buildClient ?? ((apiKey) => new Anthropic({ apiKey }));
   return async function handleIntegrations(req, res, pathSegments, queryParams = new URLSearchParams) {
@@ -13031,6 +13874,26 @@ function createIntegrationsHandler(deps = {}) {
       slackManifestRoute.respond(res, 200, buildSlackManifest(parsed.query.name));
       return true;
     }
+    if (chatSdkStatusRoute.match(req.method, pathSegments)) {
+      chatSdkStatusRoute.respond(res, 200, await getChatSdkStatus());
+      return true;
+    }
+    if (chatSdkTelegramRegisterWebhookRoute.match(req.method, pathSegments)) {
+      const parsed = await chatSdkTelegramRegisterWebhookRoute.parse(req, res, pathSegments, queryParams);
+      if (!parsed)
+        return true;
+      if (!await ensureHttpPermission(req, res, "integration.chat.manage", "Registering the Telegram webhook requires the lead agent")) {
+        return true;
+      }
+      try {
+        chatSdkTelegramRegisterWebhookRoute.respond(res, 200, await registerTelegramWebhook());
+      } catch (error) {
+        if (!(error instanceof ChatSdkActionError))
+          throw error;
+        jsonError(res, error.message, error.status);
+      }
+      return true;
+    }
     if (mcpUserConfigRoute.match(req.method, pathSegments)) {
       const mcpBaseUrl = await resolveMcpBaseUrl();
       mcpUserConfigRoute.respond(res, 200, { mcpBaseUrl, mcpUserUrl: `${mcpBaseUrl}/mcp-user` });
@@ -13662,7 +14525,7 @@ var toRequestError = (e) => {
   return new RequestError(e.message, { cause: e });
 };
 var GlobalRequest = global.Request;
-var Request = class extends GlobalRequest {
+var Request2 = class extends GlobalRequest {
   constructor(input, options) {
     if (typeof input === "object" && getRequestCache in input) {
       input = input[getRequestCache]();
@@ -13693,7 +14556,7 @@ var newRequestFromIncoming = (method, url, headers2, incoming, abortController)
   };
   if (method === "TRACE") {
     init.method = "GET";
-    const req = new Request(url, init);
+    const req = new Request2(url, init);
     Object.defineProperty(req, "method", {
       get() {
         return "TRACE";
@@ -13730,7 +14593,7 @@ var newRequestFromIncoming = (method, url, headers2, incoming, abortController)
       init.body = Readable.toWeb(incoming);
     }
   }
-  return new Request(url, init);
+  return new Request2(url, init);
 };
 var getRequestCache = Symbol("getRequestCache");
 var requestCache = Symbol("requestCache");
@@ -13796,7 +14659,7 @@ Object.defineProperty(requestPrototype, Symbol.for("nodejs.util.inspect.custom")
     return `Request (lightweight) ${inspectFn(props, { ...options, depth: depth == null ? null : depth - 1 })}`;
   }
 });
-Object.setPrototypeOf(requestPrototype, Request.prototype);
+Object.setPrototypeOf(requestPrototype, Request2.prototype);
 var newRequest = (incoming, defaultHostname) => {
   const req = Object.create(requestPrototype);
   req[incomingKey] = incoming;
@@ -13865,12 +14728,12 @@ var Response2 = class _Response {
     }
   }
   get headers() {
-    const cache = this[cacheKey];
-    if (cache) {
-      if (!(cache[2] instanceof Headers)) {
-        cache[2] = new Headers(cache[2] || { "content-type": "text/plain; charset=UTF-8" });
+    const cache2 = this[cacheKey];
+    if (cache2) {
+      if (!(cache2[2] instanceof Headers)) {
+        cache2[2] = new Headers(cache2[2] || { "content-type": "text/plain; charset=UTF-8" });
       }
-      return cache[2];
+      return cache2[2];
     }
     return this[getResponseCache]().headers;
   }
@@ -14158,9 +15021,9 @@ var responseViaResponseObject = async (res, outgoing, options = {}) => {
 };
 var getRequestListener = (fetchCallback, options = {}) => {
   const autoCleanupIncoming = options.autoCleanupIncoming ?? true;
-  if (options.overrideGlobalObjects !== false && global.Request !== Request) {
+  if (options.overrideGlobalObjects !== false && global.Request !== Request2) {
     Object.defineProperty(global, "Request", {
-      value: Request
+      value: Request2
     });
     Object.defineProperty(global, "Response", {
       value: Response2
@@ -15200,13 +16063,14 @@ async function handleMcp(req, res, transports, sessionActivity = {}, sessionAgen
       const configValue = configs.find((config) => config.key === "SCRIPTS_ONLY_MCP")?.value;
       const preloadEnabled = parseEnvFlag(configs.find((config) => config.key === "TASK_TOOL_PRELOAD_ENABLED")?.value ?? process.env.TASK_TOOL_PRELOAD_ENABLED, true);
       let preloadedTools = [];
+      const sourceTaskId = headerValue(req.headers["x-source-task-id"]);
+      const sourceTask = sourceTaskId ? await getTaskById(sourceTaskId) : undefined;
+      const excludedTools = sourceTask && !isChatSdkTask(sourceTask) ? [...CHAT_TASK_ONLY_TOOLS] : [];
       if (preloadEnabled) {
-        const taskId = headerValue(req.headers["x-source-task-id"]);
-        const task = taskId ? await getTaskById(taskId) : undefined;
-        if (task?.agentId === agentId) {
+        if (sourceTask?.agentId === agentId) {
           const manifestValue = configs.find((config) => config.key === "TASK_TOOL_MANIFESTS")?.value ?? process.env.TASK_TOOL_MANIFESTS ?? "{}";
           try {
-            preloadedTools = selectTaskTools(parseTaskToolManifest(manifestValue), task);
+            preloadedTools = selectTaskTools(parseTaskToolManifest(manifestValue), sourceTask);
           } catch {
             console.warn("[MCP] Invalid TASK_TOOL_MANIFESTS; using ordinary tool discovery");
           }
@@ -15214,6 +16078,7 @@ async function handleMcp(req, res, transports, sessionActivity = {}, sessionAgen
       }
       const server = await createServer({
         preloadedTools,
+        excludedTools,
         enabledTools: configs.find((config) => config.key === "SWARM_ENABLED_TOOLS")?.value ?? process.env.SWARM_ENABLED_TOOLS,
         scriptsOnly: resolveScriptsOnlyMode({
           env: process.env.SCRIPTS_ONLY_MCP,
@@ -18615,6 +19480,237 @@ async function handleMetrics(req, res, pathSegments, queryParams, myAgentId) {
   return false;
 }
 
+// src/http/model-profiles.ts
+init_src();
+init_zod();
+init_model_profiles();
+init_rbac();
+init_types();
+var listProfiles = route({
+  method: "get",
+  path: "/api/model-profiles",
+  pattern: ["api", "model-profiles"],
+  summary: "List model profiles",
+  description: "Every model profile, ordered by harness then name. Filter by `harness` to see what an agent on that harness can run.",
+  tags: ["Models"],
+  query: exports_external.object({ harness: ProviderNameSchema.optional() }),
+  responses: {
+    200: {
+      description: "Model profiles",
+      schema: exports_external.object({ profiles: exports_external.array(ModelProfileSchema) })
+    }
+  }
+});
+var getProfile = route({
+  method: "get",
+  path: "/api/model-profiles/{name}",
+  pattern: ["api", "model-profiles", null],
+  summary: "Get one model profile",
+  tags: ["Models"],
+  params: exports_external.object({ name: exports_external.string() }),
+  responses: {
+    200: { description: "The model profile", schema: ModelProfileSchema },
+    404: { description: "No profile with that name" }
+  }
+});
+var createProfile = route({
+  method: "post",
+  path: "/api/model-profiles",
+  pattern: ["api", "model-profiles"],
+  summary: "Create a model profile",
+  description: "A profile runs on one harness. `model` must run on that harness and be in the model catalog unless `allowCustomModel` is true (a gateway id, a fresh launch); a `latest:` alias is accepted and resolves at claim. `effort` must be a level the harness and model support. Operator only (the shared API key).",
+  tags: ["Models"],
+  rbac: { permission: "models.profiles.write" },
+  body: exports_external.object({
+    name: ModelProfileNameSchema,
+    harness: ProviderNameSchema,
+    model: exports_external.string().trim().min(1),
+    effort: ReasoningEffortSchema.nullable().optional(),
+    allowCustomModel: exports_external.boolean().optional().default(false),
+    description: exports_external.string().trim().max(500).nullable().optional()
+  }),
+  responses: {
+    201: { description: "Profile created", schema: ModelProfileSchema },
+    400: { description: "Validation error" },
+    403: { description: "Forbidden" },
+    409: { description: "A profile with that name exists" }
+  }
+});
+var updateProfile = route({
+  method: "patch",
+  path: "/api/model-profiles/{name}",
+  pattern: ["api", "model-profiles", null],
+  summary: "Update a model profile",
+  description: "Changes the model, effort, custom-model flag or description; the name and harness are fixed. Omit a field to keep it; `effort: null` clears it. Applies to tasks claimed after the change. Operator only (the shared API key).",
+  tags: ["Models"],
+  rbac: { permission: "models.profiles.write" },
+  params: exports_external.object({ name: exports_external.string() }),
+  body: exports_external.object({
+    model: exports_external.string().trim().min(1).optional(),
+    effort: ReasoningEffortSchema.nullable().optional(),
+    allowCustomModel: exports_external.boolean().optional(),
+    description: exports_external.string().trim().max(500).nullable().optional()
+  }),
+  responses: {
+    200: { description: "Profile updated", schema: ModelProfileSchema },
+    400: { description: "Validation error" },
+    403: { description: "Forbidden" },
+    404: { description: "No profile with that name" }
+  }
+});
+var deleteProfile = route({
+  method: "delete",
+  path: "/api/model-profiles/{name}",
+  pattern: ["api", "model-profiles", null],
+  summary: "Delete a model profile",
+  description: "Refused (409) for a shipped `<harness>-<tier>` seed (edit it instead; it would come back at the next boot), and while an agent has the profile as its default or a task holds it (unfinished, or superseded and still owed its resume). Operator only (the shared API key).",
+  tags: ["Models"],
+  rbac: { permission: "models.profiles.write" },
+  params: exports_external.object({ name: exports_external.string() }),
+  responses: {
+    200: { description: "Profile deleted", schema: exports_external.object({ deleted: exports_external.literal(true) }) },
+    403: { description: "Forbidden" },
+    404: { description: "No profile with that name" },
+    409: { description: "The profile is a seed or still in use" }
+  }
+});
+async function profileValueError(input) {
+  const modelError = await explicitModelError({
+    model: input.model,
+    allowCustomModel: input.allowCustomModel,
+    harnessProvider: input.harness
+  });
+  if (modelError)
+    return modelError;
+  if (input.effort && !isAlias(input.model) && !supportedReasoningLevels(input.harness, input.model).includes(input.effort)) {
+    return `Effort "${input.effort}" is not supported by ${input.model} on ${input.harness}.`;
+  }
+  return null;
+}
+async function canWriteProfiles(req, res, myAgentId) {
+  const decision = can({
+    principal: await agentFirstPrincipal(req, myAgentId),
+    verb: "models.profiles.write",
+    resource: { kind: "none" },
+    source: "http"
+  });
+  if (!decision.allow) {
+    jsonError(res, "Writing model profiles requires the operator", 403);
+    return false;
+  }
+  return true;
+}
+async function handleModelProfiles(req, res, pathSegments, queryParams, myAgentId) {
+  if (listProfiles.match(req.method, pathSegments)) {
+    const parsed = await listProfiles.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    listProfiles.respond(res, 200, {
+      profiles: await listModelProfiles({ harness: parsed.query.harness })
+    });
+    return true;
+  }
+  if (getProfile.match(req.method, pathSegments)) {
+    const parsed = await getProfile.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    const profile = await getModelProfileByName(parsed.params.name);
+    if (!profile) {
+      jsonError(res, "Model profile not found", 404);
+      return true;
+    }
+    getProfile.respond(res, 200, profile);
+    return true;
+  }
+  if (createProfile.match(req.method, pathSegments)) {
+    const parsed = await createProfile.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    if (!await canWriteProfiles(req, res, myAgentId))
+      return true;
+    const body = parsed.body;
+    const error = await profileValueError({ ...body, effort: body.effort ?? null });
+    if (error) {
+      jsonError(res, error, 400);
+      return true;
+    }
+    const created = await createModelProfile(body, {
+      userId: await resolveHttpAuditUserId(req, myAgentId)
+    });
+    if (!created) {
+      jsonError(res, `Model profile "${body.name}" already exists`, 409);
+      return true;
+    }
+    createProfile.respond(res, 201, created);
+    return true;
+  }
+  if (updateProfile.match(req.method, pathSegments)) {
+    const parsed = await updateProfile.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    if (!await canWriteProfiles(req, res, myAgentId))
+      return true;
+    const current = await getModelProfileByName(parsed.params.name);
+    if (!current) {
+      jsonError(res, "Model profile not found", 404);
+      return true;
+    }
+    const body = parsed.body;
+    const error = await profileValueError({
+      harness: current.harness,
+      model: body.model ?? current.model,
+      effort: body.effort === undefined ? current.effort : body.effort,
+      allowCustomModel: body.allowCustomModel ?? current.allowCustomModel
+    });
+    if (error) {
+      jsonError(res, error, 400);
+      return true;
+    }
+    const updated = await updateModelProfile(current.name, body, {
+      userId: await resolveHttpAuditUserId(req, myAgentId)
+    });
+    if (!updated) {
+      jsonError(res, "Model profile not found", 404);
+      return true;
+    }
+    updateProfile.respond(res, 200, updated);
+    return true;
+  }
+  if (deleteProfile.match(req.method, pathSegments)) {
+    const parsed = await deleteProfile.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    if (!await canWriteProfiles(req, res, myAgentId))
+      return true;
+    const current = await getModelProfileByName(parsed.params.name);
+    if (!current) {
+      jsonError(res, "Model profile not found", 404);
+      return true;
+    }
+    if (current.seededFrom?.startsWith("tier:")) {
+      jsonError(res, `"${current.name}" is a shipped tier profile and comes back at the next boot; edit it instead.`, 409);
+      return true;
+    }
+    const refs = await modelProfileReferences(current.name);
+    if (refs.agentIds.length > 0 || refs.openTaskCount > 0) {
+      jsonError(res, `"${current.name}" is in use: default of ${refs.agentIds.length} agent(s), held by ${refs.openTaskCount} unfinished or awaiting-resume task(s).`, 409);
+      return true;
+    }
+    const outcome = await deleteModelProfile(current.name);
+    if (outcome === "in-use") {
+      jsonError(res, `"${current.name}" is in use by a task or an agent default created just now.`, 409);
+      return true;
+    }
+    if (outcome === "missing") {
+      jsonError(res, "Model profile not found", 404);
+      return true;
+    }
+    deleteProfile.respond(res, 200, { deleted: true });
+    return true;
+  }
+  return false;
+}
+
 // src/http/models-catalog.ts
 init_zod();
 init_db3();
@@ -20501,12 +21597,51 @@ init_request_auth_context();
 // src/http/tasks.ts
 init_zod();
 init_db3();
+init_model_profiles();
 init_steering();
 init_users();
 init_rbac();
+init_context_key();
 init_types();
 init_request_auth_context();
 init_secret_scrubber();
+
+// src/http/requested-by.ts
+init_zod();
+init_db3();
+init_types();
+var TaskRequestedBySchema = UserSchema.pick({
+  id: true,
+  name: true,
+  email: true,
+  role: true,
+  notes: true
+}).extend({
+  id: exports_external.string().optional(),
+  comms: UserCommsPrefsSchema.optional()
+});
+function getRequesterNotes(notes) {
+  return typeof notes === "string" && notes.trim().length > 0 ? notes : undefined;
+}
+async function buildTaskRequestedBy(task) {
+  const user = task.requestedByUserId ? await getUserById(task.requestedByUserId) : undefined;
+  if (user) {
+    return {
+      id: user.id,
+      name: user.name,
+      email: user.email,
+      role: user.role,
+      notes: getRequesterNotes(user.notes),
+      comms: getUserCommsPrefs(user)
+    };
+  }
+  if (task.slackUserId) {
+    return { name: renderIdentity(await resolveIdentity("slack", task.slackUserId)) };
+  }
+  return;
+}
+
+// src/http/tasks.ts
 var AgentTaskSummarySchema = AgentTaskSchema.pick({
   id: true,
   key: true,
@@ -20530,6 +21665,7 @@ var AgentTaskSummarySchema = AgentTaskSchema.pick({
   modelSource: true,
   modelAlias: true,
   effort: true,
+  resolvedEffort: true,
   provider: true,
   requestedByUserId: true,
   progress: true,
@@ -20658,6 +21794,7 @@ var createTask = route({
     modelTier: ModelTierSchema.optional(),
     allowCustomModel: exports_external.boolean().optional(),
     effort: ReasoningEffortSchema.optional(),
+    profile: exports_external.string().trim().min(1).optional(),
     draft: exports_external.boolean().optional()
   }).superRefine((body, ctx) => {
     if ((body.agentId !== undefined || body.offeredTo !== undefined) && !body.routingReason) {
@@ -20673,6 +21810,9 @@ var createTask = route({
     400: {
       description: "Validation error, an unknown `model` (set `allowCustomModel` to store a custom id), or agentId/offeredTo targets an extension identity"
     },
+    403: {
+      description: "An agent caller names a parentTaskId it neither owns nor created, or a non-lead agent binds the task to a chat thread"
+    },
     422: {
       description: "Task creation blocked by an extension",
       schema: exports_external.object({
@@ -20719,6 +21859,7 @@ var updateSession = route({
       claudeSessionId: exports_external.string().min(1),
       provider: ProviderNameSchema.exclude(["devin"]).optional(),
       model: exports_external.string().optional(),
+      effort: ReasoningEffortSchema.nullable().optional(),
       providerMeta: exports_external.object({ transport: exports_external.enum(["cli", "sdk"]).optional() }).optional(),
       harnessVariant: exports_external.string().optional(),
       harnessVariantMeta: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
@@ -20933,7 +22074,10 @@ var listPausedTasks = route({
     200: {
       description: "Paused task list",
       schema: exports_external.object({
-        tasks: exports_external.array(AgentTaskSchema.extend({ attachments: exports_external.array(TaskAttachmentSchema) }))
+        tasks: exports_external.array(AgentTaskSchema.extend({
+          attachments: exports_external.array(TaskAttachmentSchema),
+          requestedBy: TaskRequestedBySchema.optional()
+        }))
       })
     }
   }
@@ -21192,7 +22336,36 @@ async function handleTasks(req, res, pathSegments, queryParams, myAgentId) {
       jsonError(res, modelError, 400);
       return true;
     }
+    const profileError = await taskProfileError({
+      profile: parsed.body.profile,
+      ...splitLegacyModelAlias({ model: parsed.body.model, modelTier: parsed.body.modelTier }),
+      agentId: defaultAgentId
+    });
+    if (profileError) {
+      jsonError(res, profileError, 400);
+      return true;
+    }
     const parentTask = parsed.body.parentTaskId ? await getTaskById(parsed.body.parentTaskId) : null;
+    const principal = await resolveTaskWritePrincipal(req, myAgentId);
+    if (parentTask && !can({
+      principal,
+      verb: "task.parent.attach",
+      resource: {
+        kind: "task",
+        taskId: parentTask.id,
+        requestedByUserId: parentTask.requestedByUserId,
+        creatorAgentId: parentTask.creatorAgentId,
+        agentId: parentTask.agentId
+      },
+      source: "http"
+    }).allow) {
+      jsonError(res, `You don't have context for parent task ${parentTask.id}.`, 403);
+      return true;
+    }
+    if (principal.kind === "agent" && parsed.body.contextKey && parsed.body.contextKey !== parentTask?.contextKey && chatThreadOfContextKey(parsed.body.contextKey) && !can({ principal, verb: "integration.chat.post", resource: { kind: "none" }, source: "http" }).allow) {
+      jsonError(res, "Permission denied: only a lead can bind a task to a chat thread.", 403);
+      return true;
+    }
     let assetKey;
     try {
       const inheritedKey = parentTask?.key;
@@ -21229,7 +22402,8 @@ async function handleTasks(req, res, pathSegments, queryParams, myAgentId) {
           model: parsed.body.model,
           modelTier: parsed.body.modelTier
         }),
-        effort: parsed.body.effort
+        effort: parsed.body.effort,
+        profile: parsed.body.profile
       }, { origin: "rest", allowCustomModel: parsed.body.allowCustomModel });
       ensure({
         id: "created",
@@ -21256,6 +22430,10 @@ async function handleTasks(req, res, pathSegments, queryParams, myAgentId) {
         jsonError(res, error.message, 400);
         return true;
       }
+      if (modelProfileRefError(error) === "missing") {
+        jsonError(res, `Unknown model profile "${parsed.body.profile}"`, 400);
+        return true;
+      }
       console.error("[HTTP] Failed to create task:", error);
       jsonError(res, "Failed to create task", 500);
     }
@@ -21287,7 +22465,7 @@ async function handleTasks(req, res, pathSegments, queryParams, myAgentId) {
     const parsed = await updateSession.parse(req, res, pathSegments, queryParams);
     if (!parsed)
       return true;
-    const task = await updateTaskClaudeSessionId(parsed.params.id, parsed.body.claudeSessionId, parsed.body.provider, parsed.body.providerMeta, parsed.body.model, "harnessVariant" in parsed.body ? parsed.body.harnessVariant : undefined, "harnessVariantMeta" in parsed.body ? parsed.body.harnessVariantMeta : undefined);
+    const task = await updateTaskClaudeSessionId(parsed.params.id, parsed.body.claudeSessionId, parsed.body.provider, parsed.body.providerMeta, parsed.body.model, "harnessVariant" in parsed.body ? parsed.body.harnessVariant : undefined, "harnessVariantMeta" in parsed.body ? parsed.body.harnessVariantMeta : undefined, "effort" in parsed.body ? parsed.body.effort : undefined);
     if (!task) {
       jsonError(res, "Task not found", 404);
       return true;
@@ -21727,10 +22905,14 @@ async function handleTasks(req, res, pathSegments, queryParams, myAgentId) {
       return true;
     }
     const pausedTasks = await getPausedTasksForAgent(myAgentId);
-    const tasks = await Promise.all(pausedTasks.map(async (task) => ({
-      ...task,
-      attachments: await getTaskAttachments(task.id)
-    })));
+    const tasks = await Promise.all(pausedTasks.map(async (task) => {
+      const requestedBy = await buildTaskRequestedBy(task);
+      return {
+        ...task,
+        attachments: await getTaskAttachments(task.id),
+        ...requestedBy && { requestedBy }
+      };
+    }));
     listPausedTasks.respond(res, 200, { tasks });
     return true;
   }
@@ -22236,10 +23418,6 @@ function withShareUrls(page) {
     app_url: `${getAppBaseUrl()}/pages/${page.slug}`
   };
 }
-async function pageEditCounter(pageId) {
-  const versions = await getPageVersions(pageId);
-  return versions.length > 0 ? versions[0].version + 1 : 1;
-}
 function defuseFeedbackTags(value) {
   return value.replace(/<(\/?page_feedback)/gi, "‹$1");
 }
@@ -22513,7 +23691,7 @@ async function handlePages(req, res, pathSegments, queryParams, myAgentId) {
     updatePageRoute.respond(res, 200, {
       id: updated.id,
       key: updated.key,
-      version: await pageEditCounter(updated.id)
+      version: await getPageEditCounter(updated.id)
     });
     return true;
   }
@@ -22635,8 +23813,819 @@ ${defuseFeedbackTags(note)}
 
 // src/http/pages-public.ts
 init_zod();
+init_db3();
+
+// src/pages/browser-sdk.ts
+var BROWSER_SDK_JS = `
+class SwarmSDK {
+  constructor() {
+    let realtime;
+    const loadRealtime = () => realtime || (realtime = import('/@swarm/realtime.js'));
+    this.room = async (name, options) => (await loadRealtime()).room(name, options);
+    this.channel = async (name) => (await loadRealtime()).channel(name);
+
+    const base = '/@swarm/api';
+    const call = async (method, path, body) => {
+      const init = { method };
+      if (body !== undefined) {
+        init.headers = { 'Content-Type': 'application/json' };
+        init.body = JSON.stringify(body);
+      }
+      const res = await fetch(base + path, init);
+      const text = await res.text();
+      let parsed = null;
+      if (text) {
+        try { parsed = JSON.parse(text); } catch { parsed = text; }
+      }
+      if (!res.ok) {
+        const err = new Error('SwarmSDK ' + method + ' ' + path + ': ' + res.status);
+        err.status = res.status;
+        err.response = parsed;
+        throw err;
+      }
+      return parsed;
+    };
+    const qs = (obj) => {
+      if (!obj) return '';
+      const p = new URLSearchParams();
+      for (const [k, v] of Object.entries(obj)) {
+        if (v === undefined || v === null) continue;
+        p.set(k, String(v));
+      }
+      const s = p.toString();
+      return s ? '?' + s : '';
+    };
+    const enc = encodeURIComponent;
+
+    this.tasks = {
+      create: (body) => call('POST', '/tasks', body),
+      list: (filters) => call('GET', '/tasks' + qs(filters)),
+      get: (id) => call('GET', '/tasks/' + enc(id)),
+      storeProgress: (id, data) => call('POST', '/tasks/' + enc(id) + '/progress', data),
+    };
+
+    this.agents = {
+      list: () => call('GET', '/agents'),
+      get: (id) => call('GET', '/agents/' + enc(id)),
+    };
+
+    this.events = {
+      create: (body) => call('POST', '/events', body),
+      list: (filters) => call('GET', '/events' + qs(filters)),
+      batch: (body) => call('POST', '/events/batch', body),
+      counts: (filters) => call('GET', '/events/counts' + qs(filters)),
+    };
+
+    this.memory = {
+      search: (body) => call('POST', '/memory/search', body),
+      list: (filters) => call('GET', '/memory/list' + qs(filters)),
+      get: (id) => call('GET', '/memory/' + enc(id)),
+      rate: (body) => call('POST', '/memory/rate', body),
+    };
+
+    this.repos = {
+      list: () => call('GET', '/repos'),
+      get: (id) => call('GET', '/repos/' + enc(id)),
+      create: (body) => call('POST', '/repos', body),
+      update: (id, body) => call('PUT', '/repos/' + enc(id), body),
+      delete: (id) => call('DELETE', '/repos/' + enc(id)),
+    };
+
+    this.schedules = {
+      list: () => call('GET', '/schedules'),
+      get: (id) => call('GET', '/schedules/' + enc(id)),
+      create: (body) => call('POST', '/schedules', body),
+      update: (id, body) => call('PUT', '/schedules/' + enc(id), body),
+      delete: (id) => call('DELETE', '/schedules/' + enc(id)),
+      run: (id) => call('POST', '/schedules/' + enc(id) + '/run'),
+    };
+
+    this.approvalRequests = {
+      list: (filters) => call('GET', '/approval-requests' + qs(filters)),
+      get: (id) => call('GET', '/approval-requests/' + enc(id)),
+      create: (body) => call('POST', '/approval-requests', body),
+      respond: (id, body) => call('POST', '/approval-requests/' + enc(id) + '/respond', body),
+    };
+
+    this.assets = {
+      list: (filters) => call('GET', '/assets' + qs(filters)),
+      audit: () => call('GET', '/assets/key-audit'),
+      registerMapping: (body) => call('POST', '/assets/mappings', body),
+      move: (entityType, id, key) => call(
+        'PATCH',
+        '/assets/' + enc(entityType) + '/' + enc(id) + '/key',
+        { key },
+      ),
+    };
+
+    // KV store. The namespace is FORCED by the page-proxy to \`task:page:<id>\`
+    // (it injects X-Page-Id which the kv handler treats as highest priority).
+    // No namespace argument is exposed — pages cannot read/write any other
+    // namespace via this SDK.
+    this.kv = {
+      get: (key) => call('GET', '/kv/' + enc(key)),
+      set: (key, value, opts) => call('PUT', '/kv/' + enc(key), {
+        value,
+        valueType: opts && opts.valueType,
+        expiresInSec: opts && opts.expiresInSec,
+      }),
+      del: (key) => call('DELETE', '/kv/' + enc(key)),
+      incr: (key, by) => call('POST', '/kv/' + enc(key) + '/incr', { by: by == null ? 1 : by }),
+      list: (opts) => call('GET', '/kv' + qs(opts)),
+    };
+  }
+}
+
+// Expose BOTH the class (for \`new SwarmSDK()\`) AND a ready-to-use singleton
+// on \`window.swarmSdk\` so pages can call e.g. \`window.swarmSdk.agents.list()\`
+// directly without instantiating.
+window.SwarmSDK = SwarmSDK;
+window.swarmSdk = new SwarmSDK();
+`;
+var SWARM_UI_JS = `
+(function() {
+  if (typeof window === 'undefined' || !window.customElements) return;
+  if (window.customElements.get('swarm-diff')) return;
+
+  // Keep page-owned presence fields alongside the cursor. Room.presence.set
+  // replaces its payload, so retain each room's latest page data and merge
+  // the reserved __cursor field into it when the cursor moves.
+  var roomPresenceTrackers = new WeakMap();
+
+  function clonePresenceRecord(data) {
+    return data && typeof data === 'object' && !Array.isArray(data)
+      ? structuredClone(data)
+      : {};
+  }
+
+  function mergeCursorPresence(data, cursor) {
+    var merged = clonePresenceRecord(data);
+    if (cursor) merged.__cursor = { x: cursor.x, y: cursor.y };
+    else delete merged.__cursor;
+    return merged;
+  }
+
+  function trackRoomPresence(room) {
+    if (!room || !room.presence || typeof room.presence.set !== 'function') return null;
+    var existing = roomPresenceTrackers.get(room);
+    if (existing) return existing;
+
+    var presence = room.presence;
+    var originalSet = presence.set;
+    var pageData = {};
+    var cursor = null;
+    var tracker = {
+      setCursor: function(nextCursor) {
+        cursor = nextCursor;
+        return originalSet.call(presence, mergeCursorPresence(pageData, cursor));
+      },
+      clearCursor: function() {
+        if (!cursor) return;
+        return tracker.setCursor(null);
+      },
+    };
+
+    presence.set = function(data) {
+      pageData = clonePresenceRecord(data);
+      return originalSet.call(presence, cursor ? mergeCursorPresence(pageData, cursor) : data);
+    };
+    roomPresenceTrackers.set(room, tracker);
+    return tracker;
+  }
+
+  // Wrap room creation before page scripts run so presence.set calls made by
+  // page code are tracked even when they happen before <swarm-cursors> connects.
+  var cursorRoomRecords = new Map();
+  var sdkRoomMethods = new WeakMap();
+  var observedRoomClosers = new WeakSet();
+  var originalRoom = null;
+  function roomRecordKey(name) {
+    return name === undefined ? 'default' : name;
+  }
+
+  function observeRoom(record, room) {
+    record.hasResolvedRoom = true;
+    if (!cursorRoomRecords.has(record.name)) cursorRoomRecords.set(record.name, record);
+    trackRoomPresence(room);
+    if (room && typeof room.close === 'function' && !observedRoomClosers.has(room)) {
+      var originalClose = room.close;
+      room.close = function() {
+        if (cursorRoomRecords.get(record.name) === record) cursorRoomRecords.delete(record.name);
+        return originalClose.apply(room, arguments);
+      };
+      observedRoomClosers.add(room);
+    }
+    return room;
+  }
+
+  function observeRoomPromise(record, result) {
+    var observed = Promise.resolve(result).then(function(room) {
+      var resolvedRoom = observeRoom(record, room);
+      record.pageRequests--;
+      record.hasPageUse = true;
+      record.pageUsed = true;
+      record.promise = Promise.resolve(resolvedRoom);
+      return resolvedRoom;
+    }).catch(function(error) {
+      record.pageRequests--;
+      record.pageUsed = record.hasPageUse || record.pageRequests > 0;
+      if (!record.hasResolvedRoom
+        && record.pageRequests === 0
+        && cursorRoomRecords.get(record.name) === record)
+        cursorRoomRecords.delete(record.name);
+      if (record.cursorRefs === 0 && record.openedByCursor && !record.pageUsed)
+        closeCursorRoomIfUnused(record);
+      throw error;
+    });
+    record.pageRequests++;
+    record.pageUsed = true;
+    if (!record.promise) record.promise = observed;
+    return observed;
+  }
+
+  function closeCursorRoomIfUnused(record) {
+    if (record.closing || record.cursorRefs || !record.openedByCursor || record.pageUsed) return;
+    record.closing = true;
+    record.promise.then(function(room) {
+      if (record.cursorRefs || record.pageUsed) {
+        record.closing = false;
+        return;
+      }
+      if (cursorRoomRecords.get(record.name) === record) cursorRoomRecords.delete(record.name);
+      if (room && typeof room.close === 'function') return room.close();
+    }).catch(function() {
+      record.closing = false;
+    });
+  }
+
+  function instrumentSdk(sdk) {
+    if (!sdk || typeof sdk.room !== 'function') return null;
+    var existing = sdkRoomMethods.get(sdk);
+    if (existing) return existing;
+
+    var sdkOriginalRoom = sdk.room;
+    var wrappedRoom = function(name, options) {
+      var key = roomRecordKey(name);
+      var record = cursorRoomRecords.get(key);
+      var result = sdkOriginalRoom.call(sdk, name, options);
+      if (!record) {
+        record = {
+          name: key,
+          cursorRefs: 0,
+          openedByCursor: false,
+          pageUsed: false,
+          hasPageUse: false,
+          pageRequests: 0,
+          hasResolvedRoom: false,
+          promise: null,
+        };
+        cursorRoomRecords.set(key, record);
+      }
+      return observeRoomPromise(record, result);
+    };
+    sdk.room = wrappedRoom;
+    var methods = { original: sdkOriginalRoom, wrapped: wrappedRoom };
+    sdkRoomMethods.set(sdk, methods);
+    return methods;
+  }
+
+  if (window.swarmSdk) {
+    var singletonRoomMethods = instrumentSdk(window.swarmSdk);
+    originalRoom = singletonRoomMethods && singletonRoomMethods.original;
+  }
+  if (typeof window.SwarmSDK === 'function') {
+    var OriginalSwarmSDK = window.SwarmSDK;
+    window.SwarmSDK = new Proxy(OriginalSwarmSDK, {
+      construct: function(target, args, newTarget) {
+        var sdk = Reflect.construct(target, args, newTarget);
+        instrumentSdk(sdk);
+        return sdk;
+      },
+    });
+  }
+
+  function acquireCursorRoom(name, options) {
+    var key = roomRecordKey(name);
+    var record = cursorRoomRecords.get(key);
+    if (record) {
+      record.cursorRefs++;
+      return { record: record, promise: record.promise };
+    }
+
+    record = {
+      name: key,
+      cursorRefs: 1,
+      openedByCursor: true,
+      pageUsed: false,
+      hasPageUse: false,
+      pageRequests: 0,
+      hasResolvedRoom: false,
+      closing: false,
+      promise: null,
+    };
+    cursorRoomRecords.set(key, record);
+    record.promise = Promise.resolve().then(function() {
+      return originalRoom(name, options);
+    }).then(function(room) {
+      return observeRoom(record, room);
+    }).catch(function(error) {
+      if (cursorRoomRecords.get(key) === record) cursorRoomRecords.delete(key);
+      throw error;
+    });
+    return { record: record, promise: record.promise };
+  }
+
+  function releaseCursorRoom(record, presence) {
+    if (!record || record.cursorRefs < 1) return;
+    if (record.cursorRefs === 1 && presence) presence.clearCursor();
+    record.cursorRefs--;
+    closeCursorRoomIfUnused(record);
+  }
+
+  var SEV_COLOR = {
+    error: '#ef4444',
+    warn:  '#f59e0b',
+    info:  '#3b82f6',
+  };
+
+  function esc(s) {
+    return String(s == null ? '' : s)
+      .replace(/&/g, '&amp;')
+      .replace(/</g, '&lt;')
+      .replace(/>/g, '&gt;')
+      .replace(/"/g, '&quot;')
+      .replace(/'/g, '&#39;');
+  }
+
+  function slugifyAttr(s) {
+    return String(s || '').toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
+  }
+
+  function parseHunks(jsonText) {
+    var trimmed = (jsonText || '').trim();
+    if (!trimmed) return [];
+    try {
+      var parsed = JSON.parse(trimmed);
+      if (parsed && Array.isArray(parsed.hunks)) return parsed.hunks;
+      if (Array.isArray(parsed)) return parsed;
+      return [];
+    } catch (e) {
+      console.warn('[swarm-diff] failed to parse JSON body:', e);
+      return [];
+    }
+  }
+
+  function renderAnnotation(ann) {
+    var color = SEV_COLOR[ann && ann.severity] || SEV_COLOR.info;
+    return (
+      '<span class="swarm-diff-annot no-print" '
+      + 'style="display:inline-block;margin-left:8px;padding:1px 6px;'
+      + 'border-radius:4px;font-size:11px;font-weight:600;'
+      + 'background:' + color + '22;color:' + color + ';border:1px solid ' + color + '55;">'
+      + esc((ann && ann.severity ? ann.severity.toUpperCase() : 'INFO')) + ' · ' + esc(ann && ann.text || '')
+      + '</span>'
+    );
+  }
+
+  function renderHunk(hunk, hunkIdx, file) {
+    var oldLines = hunk.old_lines || 0;
+    var newLines = hunk.new_lines || 0;
+    var oldStart = hunk.old_start || 0;
+    var newStart = hunk.new_start || 0;
+    var lines = Array.isArray(hunk.lines) ? hunk.lines : [];
+    var annotations = Array.isArray(hunk.annotations) ? hunk.annotations : [];
+    // Index annotations by new-side line number for fast lookup per row.
+    var annByLine = {};
+    for (var i = 0; i < annotations.length; i++) {
+      var a = annotations[i];
+      if (a && typeof a.line === 'number') {
+        if (!annByLine[a.line]) annByLine[a.line] = [];
+        annByLine[a.line].push(a);
+      }
+    }
+
+    var rowsHtml = '';
+    var oldN = oldStart;
+    var newN = newStart;
+    for (var j = 0; j < lines.length; j++) {
+      var line = lines[j] || {};
+      var type = line.type || 'context';
+      var text = line.text == null ? '' : line.text;
+      var bg, oldCell, newCell, sign;
+      if (type === 'add') {
+        bg = 'rgba(34,197,94,0.10)';
+        oldCell = '';
+        newCell = String(newN++);
+        sign = '+';
+      } else if (type === 'del') {
+        bg = 'rgba(239,68,68,0.10)';
+        oldCell = String(oldN++);
+        newCell = '';
+        sign = '-';
+      } else {
+        bg = 'transparent';
+        oldCell = String(oldN++);
+        newCell = String(newN++);
+        sign = ' ';
+      }
+
+      var annHtml = '';
+      var anns = annByLine[Number(newCell)] || annByLine[Number(oldCell)] || [];
+      for (var k = 0; k < anns.length; k++) annHtml += renderAnnotation(anns[k]);
+
+      rowsHtml += (
+        '<tr style="background:' + bg + ';">'
+        + '<td class="swarm-diff-gutter" style="user-select:none;text-align:right;padding:0 8px;color:#7c8aa6;font-size:12px;width:48px;">' + esc(oldCell) + '</td>'
+        + '<td class="swarm-diff-gutter" style="user-select:none;text-align:right;padding:0 8px;color:#7c8aa6;font-size:12px;width:48px;">' + esc(newCell) + '</td>'
+        + '<td class="swarm-diff-sign" style="user-select:none;text-align:center;padding:0 4px;color:#7c8aa6;font-size:12px;width:18px;">' + esc(sign) + '</td>'
+        + '<td class="swarm-diff-code" style="padding:0 8px;white-space:pre-wrap;word-break:break-word;font-family:\\'Space Mono\\',ui-monospace,monospace;font-size:12px;">' + esc(text) + annHtml + '</td>'
+        + '</tr>'
+      );
+    }
+
+    var anchorSlug = slugifyAttr((file || 'hunk') + '-' + (oldStart || hunkIdx + 1));
+    var anchorId = 'swarm-diff-' + anchorSlug;
+    var header = (
+      '@@ -' + oldStart + ',' + oldLines + ' +' + newStart + ',' + newLines + ' @@'
+    );
+
+    return (
+      '<a id="' + esc(anchorId) + '" class="swarm-diff-anchor" data-hunk="' + esc(anchorSlug) + '"></a>'
+      + '<div class="swarm-diff-hunk-header" style="padding:6px 12px;background:rgba(124,138,166,0.10);color:#7c8aa6;font-family:\\'Space Mono\\',ui-monospace,monospace;font-size:11px;border-top:1px solid var(--swarm-border,#22304a);">'
+      + esc(header)
+      + '</div>'
+      + '<table class="swarm-diff-table" style="width:100%;border-collapse:collapse;table-layout:fixed;">'
+      + '<tbody>' + rowsHtml + '</tbody>'
+      + '</table>'
+    );
+  }
+
+  function renderDiff(rootEl, diffData) {
+    var hunks = (diffData && Array.isArray(diffData.hunks)) ? diffData.hunks : (Array.isArray(diffData) ? diffData : []);
+    var file = rootEl.getAttribute('file') || '';
+    var baseSha = rootEl.getAttribute('base-sha') || '';
+    var headSha = rootEl.getAttribute('head-sha') || '';
+
+    var shaLine = '';
+    if (baseSha || headSha) {
+      shaLine = '<span class="swarm-diff-sha" style="font-family:\\'Space Mono\\',ui-monospace,monospace;font-size:11px;color:#7c8aa6;">'
+        + esc(baseSha) + ' → ' + esc(headSha)
+        + '</span>';
+    }
+
+    var hunksHtml = '';
+    for (var i = 0; i < hunks.length; i++) {
+      hunksHtml += renderHunk(hunks[i] || {}, i, file);
+    }
+
+    rootEl.innerHTML = (
+      '<div class="swarm-diff-root" style="border:1px solid var(--swarm-border,#22304a);border-radius:8px;background:var(--swarm-card,#121826);overflow:hidden;margin:12px 0;break-inside:avoid;">'
+      + '<div class="swarm-diff-header" style="display:flex;align-items:center;justify-content:space-between;padding:10px 12px;background:rgba(59,130,246,0.10);border-bottom:1px solid var(--swarm-border,#22304a);">'
+      + '<span class="swarm-diff-file" style="font-family:\\'Space Mono\\',ui-monospace,monospace;font-size:13px;font-weight:700;color:var(--swarm-text,#e6eaf2);">' + esc(file || '(untitled)') + '</span>'
+      + shaLine
+      + '</div>'
+      + hunksHtml
+      + '</div>'
+    );
+  }
+
+  // Public function form lives on window.swarmUi so callers can render an
+  // arbitrary root element programmatically. The custom element below is just
+  // a declarative wrapper around the same render function.
+  window.swarmUi = window.swarmUi || {};
+  window.swarmUi.renderDiff = renderDiff;
+
+  // Defer the parse-and-render so the HTML parser has time to finish
+  // appending JSON text children. \`connectedCallback\` fires on the opening
+  // tag — \`this.textContent\` is empty until children parse. Without a
+  // defer, every declarative <swarm-diff> renders an empty header and the
+  // JSON text remains visible as orphan children.
+  //
+  // queueMicrotask alone is NOT enough — Chrome's streaming parser drains
+  // microtasks between chunks, so the microtask can run BEFORE the JSON
+  // child is appended. We need to wait for the parser to finish the current
+  // document load, then read textContent.
+  //
+  //  * \`document.readyState === 'loading'\` ⇒ parser still streaming →
+  //    wait for DOMContentLoaded (fires after all children are parsed).
+  //  * otherwise (element was created/inserted dynamically post-load) ⇒
+  //    queueMicrotask is fine — DOM is stable, just give the caller a tick.
+  //
+  // Re-entrancy (element moved/reconnected) re-fires connectedCallback so
+  // we re-render against current textContent.
+  class SwarmDiffElement extends HTMLElement {
+    connectedCallback() {
+      var self = this;
+      var doRender = function() {
+        if (!self.isConnected) return;
+        var raw = self.textContent || '';
+        renderDiff(self, { hunks: parseHunks(raw) });
+        // Notify <swarm-diff-jumps> instances so they can pick up new anchors.
+        self.dispatchEvent(new CustomEvent('swarm-diff:rendered', { bubbles: true }));
+      };
+      if (typeof document !== 'undefined' && document.readyState === 'loading') {
+        document.addEventListener('DOMContentLoaded', doRender, { once: true });
+      } else {
+        queueMicrotask(doRender);
+      }
+    }
+  }
+  window.customElements.define('swarm-diff', SwarmDiffElement);
+
+  // Sibling-anchor jump list. Walks subsequent siblings, finds every
+  // <swarm-diff data-hunk=...> anchor, and renders a small list of links.
+  //
+  // Same parse-order hazard as <swarm-diff>: <swarm-diff-jumps> usually
+  // appears in the document BEFORE the <swarm-diff> elements it indexes, so
+  // we also defer to a microtask AND re-render whenever a <swarm-diff> in the
+  // document finishes rendering its anchors.
+  class SwarmDiffJumpsElement extends HTMLElement {
+    connectedCallback() {
+      var self = this;
+      var renderJumps = function() {
+        var anchors = document.querySelectorAll('.swarm-diff-anchor[data-hunk]');
+        if (!anchors.length) {
+          self.innerHTML = '<span class="no-print" style="color:#7c8aa6;font-size:12px;">No hunks yet.</span>';
+          return;
+        }
+        var items = '';
+        for (var i = 0; i < anchors.length; i++) {
+          var a = anchors[i];
+          var slug = a.getAttribute('data-hunk') || ('hunk-' + i);
+          // Hunk title = nearest preceding diff's file attribute if available.
+          var diff = a.closest && a.closest('swarm-diff');
+          var file = (diff && diff.getAttribute('file')) || slug;
+          items += '<li style="margin:0;padding:2px 0;"><a href="#' + esc(a.id) + '" style="color:#3b82f6;text-decoration:none;font-family:\\'Space Mono\\',ui-monospace,monospace;font-size:12px;">' + esc(file) + '</a></li>';
+        }
+        self.innerHTML = (
+          '<nav class="swarm-diff-jumps no-print" style="padding:8px 12px;border:1px dashed var(--swarm-border,#22304a);border-radius:8px;background:rgba(124,138,166,0.05);">'
+          + '<div style="font-size:10px;text-transform:uppercase;letter-spacing:0.08em;color:#7c8aa6;margin-bottom:4px;">Jump to</div>'
+          + '<ul style="list-style:none;padding:0;margin:0;">' + items + '</ul>'
+          + '</nav>'
+        );
+      };
+      // Wait for the parser to finish initial load before first query —
+      // <swarm-diff> elements also defer to DOMContentLoaded so we must
+      // run AFTER they finish rendering their anchors. The event listener
+      // below handles the live-update case.
+      if (typeof document !== 'undefined' && document.readyState === 'loading') {
+        document.addEventListener('DOMContentLoaded', function() { queueMicrotask(renderJumps); }, { once: true });
+      } else {
+        queueMicrotask(renderJumps);
+      }
+      // Re-render whenever a sibling <swarm-diff> finishes its async render.
+      self._onDiffRendered = function() { renderJumps(); };
+      document.addEventListener('swarm-diff:rendered', self._onDiffRendered);
+    }
+    disconnectedCallback() {
+      if (this._onDiffRendered) {
+        document.removeEventListener('swarm-diff:rendered', this._onDiffRendered);
+      }
+    }
+  }
+  window.customElements.define('swarm-diff-jumps', SwarmDiffJumpsElement);
+
+  var CURSOR_IDLE_MS = 3000;
+  var CURSOR_SMOOTHING = 0.28;
+
+  function cursorColor(userId) {
+    var hash = 2166136261;
+    var value = String(userId || '');
+    for (var i = 0; i < value.length; i++) {
+      hash ^= value.charCodeAt(i);
+      hash = Math.imul(hash, 16777619);
+    }
+    return 'hsl(' + ((hash >>> 0) % 360) + ', 72%, 42%)';
+  }
+
+  function documentSize() {
+    var root = document.documentElement || {};
+    return {
+      width: Math.max(1, root.scrollWidth || root.clientWidth || window.innerWidth || 1),
+      height: Math.max(1, root.scrollHeight || root.clientHeight || window.innerHeight || 1),
+    };
+  }
+
+  function cursorMarkup(name, color) {
+    // CursorPointer + CursorBody label structure adapted from Kibo UI (MIT):
+    // https://github.com/shadcnblocks/kibo/blob/main/packages/cursor/index.tsx
+    return '<svg aria-hidden="true" focusable="false" height="20" width="20" viewBox="0 0 20 20" xmlns="http://www.w3.org/2000/svg" style="width:20px;height:20px;flex:none;filter:drop-shadow(0 1px 1px rgba(0,0,0,.2));">'
+      + '<path d="M19.438 6.716 1.115.05A.832.832 0 0 0 .05 1.116L6.712 19.45a.834.834 0 0 0 1.557.025l3.198-8 7.995-3.2a.833.833 0 0 0 0-1.559h-.024Z" fill="currentColor"></path>'
+      + '</svg>'
+      + '<span style="position:relative;margin-left:14px;display:flex;flex-direction:column;white-space:nowrap;border-radius:12px;padding:4px 12px 4px 10px;font-family:system-ui,sans-serif;font-size:12px;font-weight:500;line-height:1.4;background:' + color + ';color:#fff;box-shadow:0 2px 6px rgba(0,0,0,.18);">'
+      + esc(name || 'Guest')
+      + '</span>';
+  }
+
+  class SwarmCursorsElement extends HTMLElement {
+    connectedCallback() {
+      if (this._startPromise) return;
+      var roomName = this.getAttribute('room');
+      if (!roomName || !originalRoom) return;
+
+      var self = this;
+      var lifecycle = (this._lifecycle || 0) + 1;
+      this._lifecycle = lifecycle;
+      var begin = function() {
+        self._onDomReady = null;
+      if (!self.isConnected || self._lifecycle !== lifecycle) return;
+        var schemaVersion = self.getAttribute('schema-version');
+        var options = schemaVersion == null ? {} : { schemaVersion: Number(schemaVersion) };
+        var acquired = acquireCursorRoom(roomName, options);
+        self._roomRecord = acquired.record;
+        self._startPromise = acquired.promise.then(function(room) {
+        if (!self.isConnected || self._lifecycle !== lifecycle) return;
+        self._startPromise = null;
+        self._room = room;
+        self._presence = trackRoomPresence(room);
+        if (!self._presence) return;
+        self._pointers = new Map();
+        self._cursorStates = new Map();
+
+        self._overlay = document.createElement('div');
+        self._overlay.setAttribute('aria-hidden', 'true');
+        self._overlay.style.cssText = 'position:fixed;inset:0;z-index:2147483647;pointer-events:none;overflow:hidden;';
+        var parent = document.body || document.documentElement;
+        if (parent) parent.appendChild(self._overlay);
+
+        self._onPresence = function(peers) { self._renderPeers(peers || []); };
+        self._onPointerMove = function(event) {
+          var size = documentSize();
+          var scrollX = window.scrollX || window.pageXOffset || 0;
+          var scrollY = window.scrollY || window.pageYOffset || 0;
+          var pageX = typeof event.pageX === 'number' ? event.pageX : event.clientX + scrollX;
+          var pageY = typeof event.pageY === 'number' ? event.pageY : event.clientY + scrollY;
+          var x = Math.max(0, Math.min(1, pageX / size.width));
+          var y = Math.max(0, Math.min(1, pageY / size.height));
+          self._presence.setCursor({ x: x, y: y });
+        };
+        self._onPointerLeave = function() {
+          self._presence.clearCursor();
+        };
+
+        self._unsubscribe = room.on('presence', self._onPresence);
+        document.addEventListener('pointermove', self._onPointerMove, { passive: true });
+        document.addEventListener('pointerleave', self._onPointerLeave);
+        self._renderPeers(room.presence.peers || []);
+      }).catch(function(error) {
+        self._startPromise = null;
+        console.warn('[swarm-cursors] failed to join room:', error);
+      });
+      };
+      if (document.readyState === 'loading') {
+        this._onDomReady = function() { queueMicrotask(begin); };
+        this._startPromise = Promise.resolve();
+        document.addEventListener('DOMContentLoaded', this._onDomReady, { once: true });
+      } else {
+        begin();
+      }
+    }
+
+    _renderPeers(peers) {
+      if (!this._pointers) return;
+      var seen = new Set();
+      var activePeerIds = new Set();
+      var includeAgents = this.hasAttribute('include-agents');
+      var ownId = this._room && this._room.me && this._room.me.userId;
+      var now = Date.now();
+
+      for (var i = 0; i < peers.length; i++) {
+        var peer = peers[i];
+        if (!peer || !peer.userId || peer.userId === ownId) continue;
+        if (peer.kind === 'agent' && !includeAgents) continue;
+        var data = peer.data && typeof peer.data === 'object' ? peer.data : null;
+        var cursor = data && data.__cursor;
+        if (!cursor || typeof cursor.x !== 'number' || typeof cursor.y !== 'number'
+          || !Number.isFinite(cursor.x) || !Number.isFinite(cursor.y)) continue;
+
+        var id = String(peer.userId);
+        activePeerIds.add(id);
+        var state = this._cursorStates.get(id);
+        if (!state || state.x !== cursor.x || state.y !== cursor.y) {
+          state = { x: cursor.x, y: cursor.y, lastSeen: now };
+          this._cursorStates.set(id, state);
+        }
+        if (now - state.lastSeen > CURSOR_IDLE_MS) continue;
+
+        var entry = this._pointers.get(id);
+        if (!entry) {
+          entry = this._createPointer(peer);
+          this._pointers.set(id, entry);
+        }
+        entry.cursor = { x: state.x, y: state.y };
+        entry.lastSeen = state.lastSeen;
+        if (entry.name !== peer.name) {
+          entry.name = peer.name || 'Guest';
+          entry.node.innerHTML = cursorMarkup(entry.name, entry.color);
+        }
+        seen.add(id);
+      }
+
+      var ids = Array.from(this._pointers.keys());
+      for (var j = 0; j < ids.length; j++) {
+        if (!seen.has(ids[j])) this._removePointer(ids[j]);
+      }
+      var stateIds = Array.from(this._cursorStates.keys());
+      for (var k = 0; k < stateIds.length; k++) {
+        if (!activePeerIds.has(stateIds[k])) this._cursorStates.delete(stateIds[k]);
+      }
+      this._scheduleFrame();
+    }
+
+    _createPointer(peer) {
+      var color = cursorColor(peer.userId);
+      var node = document.createElement('div');
+      node.style.cssText = 'position:absolute;left:0;top:0;display:flex;align-items:flex-start;pointer-events:none;user-select:none;will-change:transform;color:' + color + ';';
+      node.innerHTML = cursorMarkup(peer.name || 'Guest', color);
+      this._overlay.appendChild(node);
+      return {
+        node: node,
+        color: color,
+        name: peer.name || 'Guest',
+        cursor: null,
+        x: null,
+        y: null,
+        lastSeen: Date.now(),
+      };
+    }
+
+    _removePointer(id) {
+      var entry = this._pointers.get(id);
+      if (entry && entry.node.parentNode) entry.node.parentNode.removeChild(entry.node);
+      this._pointers.delete(id);
+    }
+
+    _scheduleFrame() {
+      if (this._frameId != null || !this._pointers || !this._pointers.size
+        || typeof window.requestAnimationFrame !== 'function') return;
+      var self = this;
+      this._frameId = window.requestAnimationFrame(function() { self._animate(); });
+    }
+
+    _animate() {
+      this._frameId = null;
+      if (!this._pointers || !this._overlay) return;
+      var now = Date.now();
+      var size = documentSize();
+      var scrollX = window.scrollX || window.pageXOffset || 0;
+      var scrollY = window.scrollY || window.pageYOffset || 0;
+      var ids = Array.from(this._pointers.keys());
 
-// src/artifact-sdk/feedback-overlay.ts
+      for (var i = 0; i < ids.length; i++) {
+        var id = ids[i];
+        var entry = this._pointers.get(id);
+        if (now - entry.lastSeen > CURSOR_IDLE_MS) {
+          this._removePointer(id);
+          continue;
+        }
+        var targetX = entry.cursor.x * size.width - scrollX;
+        var targetY = entry.cursor.y * size.height - scrollY;
+        if (entry.x == null || entry.y == null) {
+          entry.x = targetX;
+          entry.y = targetY;
+        } else {
+          // Exponential interpolation keeps 50 ms presence updates from jumping.
+          entry.x += (targetX - entry.x) * CURSOR_SMOOTHING;
+          entry.y += (targetY - entry.y) * CURSOR_SMOOTHING;
+        }
+        entry.node.style.transform = 'translate3d(' + Math.round(entry.x) + 'px,' + Math.round(entry.y) + 'px,0)';
+      }
+      this._scheduleFrame();
+    }
+
+    disconnectedCallback() {
+      this._lifecycle = (this._lifecycle || 0) + 1;
+      this._startPromise = null;
+      if (this._onDomReady) {
+        document.removeEventListener('DOMContentLoaded', this._onDomReady);
+        this._onDomReady = null;
+      }
+      if (this._unsubscribe) this._unsubscribe();
+      if (this._onPointerMove) document.removeEventListener('pointermove', this._onPointerMove);
+      if (this._onPointerLeave) document.removeEventListener('pointerleave', this._onPointerLeave);
+      if (this._roomRecord) releaseCursorRoom(this._roomRecord, this._presence);
+      if (this._frameId != null && typeof window.cancelAnimationFrame === 'function')
+        window.cancelAnimationFrame(this._frameId);
+      if (this._pointers) {
+        var ids = Array.from(this._pointers.keys());
+        for (var i = 0; i < ids.length; i++) this._removePointer(ids[i]);
+      }
+      if (this._overlay && this._overlay.parentNode)
+        this._overlay.parentNode.removeChild(this._overlay);
+      this._room = null;
+      this._roomRecord = null;
+      this._presence = null;
+      this._overlay = null;
+      this._pointers = null;
+      this._cursorStates = null;
+      this._frameId = null;
+    }
+  }
+  window.customElements.define('swarm-cursors', SwarmCursorsElement);
+})();
+`;
+
+// src/pages/feedback-overlay.ts
 var PAGE_FEEDBACK_PARAM = "__swarm-feedback";
 function isPageFeedbackRequested(queryParams) {
   if (!queryParams.has(PAGE_FEEDBACK_PARAM))
@@ -22644,6 +24633,33 @@ function isPageFeedbackRequested(queryParams) {
   const value = (queryParams.get(PAGE_FEEDBACK_PARAM) ?? "").toLowerCase();
   return value !== "0" && value !== "false";
 }
+var FEEDBACK_KEY_GUARD_JS = `
+(function () {
+  if (window.__swarmFeedbackKeys) return;
+  var keys = window.__swarmFeedbackKeys = { host: null, handle: null };
+  var owned = {};
+  function id(e) { return e.code || e.key; }
+  function fromOverlay(e) {
+    return !!keys.host && typeof e.composedPath === 'function' && e.composedPath().indexOf(keys.host) !== -1;
+  }
+  function guard(e) {
+    var k = id(e);
+    var mine = fromOverlay(e);
+    if (!mine && !owned[k]) return;
+    if (e.type === 'keydown') {
+      if (mine) owned[k] = true;
+      else if (!e.repeat) { delete owned[k]; return; }
+    }
+    if (e.type === 'keyup') delete owned[k];
+    e.stopImmediatePropagation();
+    if (mine && keys.handle) keys.handle(e);
+  }
+  ['keydown', 'keypress', 'keyup'].forEach(function (type) {
+    window.addEventListener(type, guard, true);
+  });
+  window.addEventListener('blur', function () { owned = {}; });
+})();
+`;
 var FEEDBACK_OVERLAY_JS = `
 (function () {
   var cfg = window.__swarmFeedback;
@@ -22754,6 +24770,7 @@ var FEEDBACK_OVERLAY_JS = `
   var panel = document.createElement('div');
   panel.className = 'panel';
   var composer = null;
+  var composerInput = null;
   root.appendChild(hl);
   root.appendChild(markers);
   root.appendChild(panel);
@@ -22826,11 +24843,25 @@ var FEEDBACK_OVERLAY_JS = `
     }
     render();
   }
-  document.addEventListener('keydown', function (e) {
-    if (e.key !== 'Escape') return;
+  function onEscape() {
     if (state.draft) { closeComposer(); return; }
     if (state.selecting) setSelecting(false);
+  }
+  // Escape pressed on the page while selecting. Keys typed in the overlay never
+  // get here: the key guard stops them and calls onOverlayKey instead.
+  document.addEventListener('keydown', function (e) {
+    if (e.key === 'Escape') onEscape();
   }, true);
+  function onOverlayKey(e) {
+    if (e.type !== 'keydown') return;
+    if (e.key === 'Escape') { onEscape(); return; }
+    if (e.key === 'Enter' && (e.metaKey || e.ctrlKey) && composerInput && e.composedPath()[0] === composerInput) {
+      e.preventDefault();
+      commitDraft(composerInput.value);
+    }
+  }
+  window.__swarmFeedbackKeys.host = host;
+  window.__swarmFeedbackKeys.handle = onOverlayKey;
 
   // ─── Composer ──────────────────────────────────────────────────────────
   function openComposer(target) {
@@ -22849,9 +24880,7 @@ var FEEDBACK_OVERLAY_JS = `
     add.type = 'button';
     cancel.addEventListener('click', closeComposer);
     add.addEventListener('click', function () { commitDraft(input.value); });
-    input.addEventListener('keydown', function (e) {
-      if (e.key === 'Enter' && (e.metaKey || e.ctrlKey)) { e.preventDefault(); commitDraft(input.value); }
-    });
+    composerInput = input;
     row.appendChild(cancel);
     row.appendChild(add);
     composer.appendChild(row);
@@ -22872,6 +24901,7 @@ var FEEDBACK_OVERLAY_JS = `
   function closeComposer() {
     if (composer) composer.remove();
     composer = null;
+    composerInput = null;
     state.draft = null;
     hideHighlight();
   }
@@ -23137,11 +25167,13 @@ var FEEDBACK_OVERLAY_JS = `
 `;
 function feedbackOverlayScripts(pageId) {
   const config = JSON.stringify({ pageId }).replace(/</g, "\\u003c");
-  return `<script>window.__swarmFeedback = ${config};</script><script>${FEEDBACK_OVERLAY_JS}</script>`;
+  return `<script>window.__swarmFeedback = ${config};</script><script>${FEEDBACK_KEY_GUARD_JS}${FEEDBACK_OVERLAY_JS}</script>`;
+}
+function feedbackKeyGuardScript() {
+  return `<script>${FEEDBACK_KEY_GUARD_JS}</script>`;
 }
 
 // src/http/pages-public.ts
-init_db3();
 init_types();
 init_constants();
 init_node_env();
@@ -23246,8 +25278,8 @@ var PAGE_HEAD_DEFAULTS = `<base target="_blank">
     .swarm-card, swarm-diff { break-inside: avoid; }
   }
 </style>`;
-function injectBrowserSdk(html) {
-  const injection = `${PAGE_HEAD_DEFAULTS}<script>${BROWSER_SDK_JS}</script><script>${SWARM_UI_JS}</script>`;
+function injectBrowserSdk(html, headFirst = "") {
+  const injection = `${headFirst}${PAGE_HEAD_DEFAULTS}<script>${BROWSER_SDK_JS}</script><script>${SWARM_UI_JS}</script>`;
   const headOpenMatch = html.match(/<head\b[^>]*>/i);
   if (headOpenMatch) {
     const idx = headOpenMatch.index + headOpenMatch[0].length;
@@ -23550,7 +25582,8 @@ async function handlePagesPublic(req, res, pathSegments, queryParams) {
     res.end();
     return true;
   }
-  const html = injectBrowserSdk(page.body) + (wantsPrint ? PRINT_AUTOTRIGGER_SCRIPT : "") + (isPageFeedbackRequested(queryParams) ? feedbackOverlayScripts(page.id) : "");
+  const feedback = isPageFeedbackRequested(queryParams);
+  const html = injectBrowserSdk(page.body, feedback ? feedbackKeyGuardScript() : "") + (wantsPrint ? PRINT_AUTOTRIGGER_SCRIPT : "") + (feedback ? feedbackOverlayScripts(page.id) : "");
   const headers2 = {
     "Content-Type": "text/html; charset=utf-8",
     "Cache-Control": "no-store",
@@ -23682,6 +25715,7 @@ async function fetchAllBotChannels(client) {
 // src/http/poll.ts
 init_telemetry_trigger();
 init_types();
+init_request_auth_context();
 init_runtime_pools_flag();
 function buildBudgetRefusedTrigger(refusal) {
   const trigger = {
@@ -23709,21 +25743,11 @@ var PollTriggerAttachmentSchema = TaskAttachmentSchema.pick({
   mimeType: true,
   sizeBytes: true
 });
-var PollRequestedBySchema = UserSchema.pick({
-  id: true,
-  name: true,
-  email: true,
-  role: true,
-  notes: true
-}).extend({
-  id: exports_external.string().optional(),
-  comms: UserCommsPrefsSchema.optional()
-});
 var PollTaskOfferedTriggerSchema = exports_external.object({
   type: exports_external.literal("task_offered"),
   taskId: exports_external.string(),
   task: AgentTaskSchema,
-  requestedBy: PollRequestedBySchema.optional()
+  requestedBy: TaskRequestedBySchema.optional()
 });
 var PollTaskAssignedTriggerSchema = exports_external.object({
   type: exports_external.literal("task_assigned"),
@@ -23732,7 +25756,7 @@ var PollTaskAssignedTriggerSchema = exports_external.object({
   task: AgentTaskSchema.extend({
     attachments: exports_external.array(PollTriggerAttachmentSchema)
   }),
-  requestedBy: PollRequestedBySchema.optional()
+  requestedBy: TaskRequestedBySchema.optional()
 });
 var PollUnreadMentionsTriggerSchema = exports_external.object({
   type: exports_external.literal("unread_mentions"),
@@ -23780,26 +25804,6 @@ var pollTriggers = route({
 });
 var CHANNEL_ACTIVITY_INTERVAL_MS = 60000;
 var lastChannelActivityCheckAt = 0;
-function getRequesterNotes(notes) {
-  return typeof notes === "string" && notes.trim().length > 0 ? notes : undefined;
-}
-async function buildTriggerRequestedBy(task) {
-  const user = task.requestedByUserId ? await getUserById(task.requestedByUserId) : undefined;
-  if (user) {
-    return {
-      id: user.id,
-      name: user.name,
-      email: user.email,
-      role: user.role,
-      notes: getRequesterNotes(user.notes),
-      comms: getUserCommsPrefs(user)
-    };
-  }
-  if (task.slackUserId) {
-    return { name: renderIdentity(await resolveIdentity("slack", task.slackUserId)) };
-  }
-  return;
-}
 async function attachmentsForTrigger(taskId) {
   return (await getTaskAttachments(taskId)).map((a) => ({
     id: a.id,
@@ -23808,12 +25812,25 @@ async function attachmentsForTrigger(taskId) {
     sizeBytes: a.sizeBytes
   }));
 }
-async function claimModelFields(task, agent) {
+async function claimModelFields(task, agent, auth) {
+  const pin = taskModelPin(task);
+  const cleared = {
+    model: pin,
+    resolvedModel: undefined,
+    modelSource: undefined,
+    modelAlias: undefined,
+    resolvedProfile: undefined
+  };
   try {
-    return await recordClaimModelResolution(task, agent);
+    return {
+      ...cleared,
+      ...await recordClaimModelResolution({ ...task, model: pin }, agent, {
+        includeRepoSecrets: readsRepoSecrets(auth, agent)
+      })
+    };
   } catch (error) {
     console.warn(`[/api/poll] model resolution failed for task ${task.id}:`, error);
-    return {};
+    return cleared;
   }
 }
 var commitCursorsRoute = route({
@@ -23898,7 +25915,7 @@ async function handlePoll(req, res, pathSegments, queryParams, myAgentId) {
           const claimedTask = await claimOfferedTask(firstOfferedTask.id, myAgentId);
           if (claimedTask) {
             await recordRuntimeTask(claimedTask.id);
-            const offeredRequestedBy = await buildTriggerRequestedBy(claimedTask);
+            const offeredRequestedBy = await buildTaskRequestedBy(claimedTask);
             return {
               trigger: {
                 type: "task_offered",
@@ -23978,7 +25995,7 @@ async function handlePoll(req, res, pathSegments, queryParams, myAgentId) {
                 agentId: myAgentId
               });
             });
-            const assignedRequestedBy = await buildTriggerRequestedBy(pendingTask);
+            const assignedRequestedBy = await buildTaskRequestedBy(pendingTask);
             const assignedTriggerSurface = await resolveTriggerSurface(pendingTask.id, pendingTask.source);
             return {
               trigger: {
@@ -23987,7 +26004,7 @@ async function handlePoll(req, res, pathSegments, queryParams, myAgentId) {
                 triggerSurface: assignedTriggerSurface,
                 task: {
                   ...pendingTask,
-                  ...await claimModelFields(pendingTask, agent),
+                  ...await claimModelFields(pendingTask, agent, getRequestAuth(req)),
                   status: "in_progress",
                   attachments: await attachmentsForTrigger(pendingTask.id)
                 },
@@ -24069,7 +26086,7 @@ async function handlePoll(req, res, pathSegments, queryParams, myAgentId) {
                     agentId: myAgentId
                   });
                 });
-                const claimedRequestedBy = await buildTriggerRequestedBy(claimed);
+                const claimedRequestedBy = await buildTaskRequestedBy(claimed);
                 const claimedTriggerSurface = await resolveTriggerSurface(claimed.id, claimed.source);
                 return {
                   trigger: {
@@ -24078,7 +26095,7 @@ async function handlePoll(req, res, pathSegments, queryParams, myAgentId) {
                     triggerSurface: claimedTriggerSurface,
                     task: {
                       ...claimed,
-                      ...await claimModelFields(claimed, agent),
+                      ...await claimModelFields(claimed, agent, getRequestAuth(req)),
                       attachments: await attachmentsForTrigger(claimed.id)
                     },
                     ...claimedRequestedBy && { requestedBy: claimedRequestedBy }
@@ -28984,7 +31001,7 @@ async function handleScriptRuns(req, res, pathSegments, queryParams, agentId) {
       return true;
     const result = await executeRawLlm(parsed.body);
     if (result.status === "failed") {
-      json(res, { error: result.error }, 500);
+      jsonError(res, result.error, 500);
       return true;
     }
     rawLlmRoute.respond(res, 200, result.output);
@@ -29188,7 +31205,8 @@ var upsertRoute2 = route({
       schema: exports_external.object({
         name: exports_external.string(),
         version: exports_external.number(),
-        contentDeduped: exports_external.boolean()
+        contentDeduped: exports_external.boolean(),
+        warnings: exports_external.array(exports_external.string()).optional().describe("Advisory quickjs-executor compatibility findings. Never blocks the save.")
       })
     },
     400: { description: "Validation or typecheck failure" },
@@ -29348,7 +31366,12 @@ var createScriptApiRoute = route({
   params: idParamsSchema4,
   body: createScriptApiBodySchema,
   responses: {
-    201: { description: "Endpoint created", schema: scriptApiWithSecretSchema },
+    201: {
+      description: "Endpoint created",
+      schema: scriptApiWithSecretSchema.extend({
+        warnings: exports_external.array(exports_external.string()).optional().describe("Advisory quickjs-executor compatibility findings for the script.")
+      })
+    },
     400: { description: "Validation error or script has no owning agent" },
     404: { description: "Script not found" }
   },
@@ -29557,10 +31580,12 @@ async function handleScripts(req, res, pathSegments, queryParams, agentId) {
         isPromotion: Boolean(existingAgentScript)
       });
     }
+    const warnings = quickJSCompatWarnings(checkQuickJSCompat(parsed.body.source, { fsMode: parsed.body.fsMode }));
     upsertRoute2.respond(res, 200, {
       name: result.script.name,
       version: result.script.version,
-      contentDeduped: result.contentDeduped
+      contentDeduped: result.contentDeduped,
+      ...warnings.length > 0 ? { warnings } : {}
     });
     return true;
   }
@@ -29605,6 +31630,7 @@ async function handleScripts(req, res, pathSegments, queryParams, agentId) {
       runtimeInstanceId,
       egressSecrets: credentials.egressSecrets,
       failedBindings: credentials.failedBindings,
+      userConfig: credentials.userConfig,
       apiConnections: getScriptApiConnectionDescriptors({ agentId: agent.id }),
       mcpConnections: getScriptMcpConnectionDescriptors({ agentId: agent.id })
     });
@@ -29856,7 +31882,11 @@ async function handleScripts(req, res, pathSegments, queryParams, agentId) {
       label: parsed.body.label ?? null,
       createdBy: await resolveHttpAuditUserId(req, agentId)
     });
-    createScriptApiRoute.respond(res, 201, endpoint);
+    const warnings = quickJSCompatWarnings(checkQuickJSCompat(script.source, { fsMode: script.fsMode }));
+    createScriptApiRoute.respond(res, 201, {
+      ...endpoint,
+      ...warnings.length > 0 ? { warnings } : {}
+    });
     return true;
   }
   if (listScriptApisRoute.match(req.method, pathSegments)) {
@@ -32101,21 +34131,6 @@ var getMetrics = route({
     200: { description: "Swarm metrics counts", schema: SwarmMetricsSchema }
   }
 });
-var listServices = route({
-  method: "get",
-  path: "/api/services",
-  pattern: ["api", "services"],
-  summary: "List all registered services",
-  tags: ["Stats"],
-  query: exports_external.object({
-    status: exports_external.string().optional(),
-    agentId: exports_external.string().optional(),
-    name: exports_external.string().optional()
-  }),
-  responses: {
-    200: { description: "Service list", schema: exports_external.object({ services: exports_external.array(ServiceSchema) }) }
-  }
-});
 var listScheduledTasks = route({
   method: "get",
   path: "/api/scheduled-tasks",
@@ -32201,18 +34216,6 @@ async function handleStats(req, res, pathSegments, queryParams, myAgentId) {
     });
     return true;
   }
-  if (listServices.match(req.method, pathSegments)) {
-    const parsed = await listServices.parse(req, res, pathSegments, queryParams);
-    if (!parsed)
-      return true;
-    const services = await getAllServices({
-      status: parsed.query.status || undefined,
-      agentId: parsed.query.agentId || undefined,
-      name: parsed.query.name || undefined
-    });
-    listServices.respond(res, 200, { services });
-    return true;
-  }
   if (listScheduledTasks.match(req.method, pathSegments)) {
     const parsed = await listScheduledTasks.parse(req, res, pathSegments, queryParams);
     if (!parsed)
@@ -34358,6 +36361,8 @@ async function routeKapsoInbound(payload) {
 }
 
 // src/http/webhooks.ts
+init_constants();
+init_secret_scrubber();
 init_event_bus();
 var WebhookDispatchResultSchema = exports_external.object({
   created: exports_external.boolean(),
@@ -34453,6 +36458,57 @@ var kapsoWebhook = route({
     503: { description: "Kapso integration not configured" }
   }
 });
+var chatSdkWebhook = route({
+  method: "post",
+  path: "/api/integrations/chat/{adapter}/webhook",
+  pattern: ["api", "integrations", "chat", null, "webhook"],
+  summary: "Handle Chat SDK platform webhooks (Telegram, Slack, Discord, Teams)",
+  tags: ["Webhooks"],
+  params: exports_external.object({ adapter: exports_external.string().describe("Chat SDK adapter name, e.g. telegram") }),
+  auth: { apiKey: false },
+  rbac: {
+    ungated: "provider webhook: the Chat SDK adapter verifies the platform signature (Telegram secret token, Slack signing secret, Discord Ed25519, Teams JWT)"
+  },
+  responses: {
+    200: { description: "Adapter response", unstructured: "adapter response proxied as-is" },
+    401: { description: "Invalid platform signature or secret token" },
+    403: { description: "Teams activity whose serviceUrl is not a Bot Framework host" },
+    404: { description: "Chat SDK disabled or adapter not configured" },
+    413: { description: "Body exceeds 1 MiB" },
+    503: { description: "Adapter configured but failed to start" }
+  }
+});
+var CHAT_SDK_WEBHOOK_MAX_BODY_BYTES = 1024 * 1024;
+function hasTrustedTeamsServiceUrl(body) {
+  let serviceUrl;
+  try {
+    serviceUrl = JSON.parse(body.toString("utf-8"))?.serviceUrl;
+  } catch {
+    return true;
+  }
+  if (serviceUrl === undefined || serviceUrl === null || serviceUrl === "")
+    return true;
+  return typeof serviceUrl === "string" && isTrustedTeamsServiceUrl(serviceUrl);
+}
+function toFetchRequest(req, rawBody, fallbackPath) {
+  const headers2 = new Headers;
+  if (Array.isArray(req.rawHeaders) && req.rawHeaders.length > 0) {
+    for (let i = 0;i + 1 < req.rawHeaders.length; i += 2) {
+      headers2.append(req.rawHeaders[i], req.rawHeaders[i + 1]);
+    }
+  } else {
+    for (const [name, value] of Object.entries(req.headers)) {
+      for (const item of Array.isArray(value) ? value : value === undefined ? [] : [value]) {
+        headers2.append(name, item);
+      }
+    }
+  }
+  return new Request(`${getPublicMcpBaseUrl()}${req.url ?? fallbackPath}`, {
+    method: req.method ?? "POST",
+    headers: headers2,
+    body: rawBody.length > 0 ? new Uint8Array(rawBody) : undefined
+  });
+}
 function logKapsoAckResult(action, result) {
   if (result.ok)
     return;
@@ -34536,7 +36592,8 @@ async function handleWebhooks(req, res, pathSegments) {
       res.end(JSON.stringify({ error: "Invalid JSON body" }));
       return true;
     }
-    console.log(`[GitHub] Received ${eventType} event`);
+    const deliveryId = req.headers["x-github-delivery"];
+    console.log(`[GitHub] Received ${eventType} event (delivery ${deliveryId ?? "unknown"})`);
     let result = { created: false };
     try {
       result = await runBlockableHandler("GitHub", async () => {
@@ -34610,13 +36667,13 @@ async function handleWebhooks(req, res, pathSegments) {
       }
       githubWebhook.respond(res, 200, result);
     } catch (err) {
-      const errorMessage2 = err instanceof Error ? err.message : String(err);
-      console.error(`[GitHub] Error handling ${eventType} event: ${errorMessage2}`);
+      const errorMessage3 = err instanceof Error ? err.message : String(err);
+      console.error(`[GitHub] Error handling ${eventType} event: ${errorMessage3}`);
       if (err instanceof Error && err.stack) {
         console.error(err.stack);
       }
       res.writeHead(500, { "Content-Type": "application/json" });
-      res.end(JSON.stringify({ error: "Internal server error", message: errorMessage2 }));
+      res.end(JSON.stringify({ error: "Internal server error", message: errorMessage3 }));
     }
     return true;
   }
@@ -34724,8 +36781,8 @@ async function handleWebhooks(req, res, pathSegments) {
       }
       gitlabWebhook.respond(res, 200, result);
     } catch (err) {
-      const errorMessage2 = err instanceof Error ? err.message : String(err);
-      console.error(`[GitLab] Error handling ${objectKind} event: ${errorMessage2}`);
+      const errorMessage3 = err instanceof Error ? err.message : String(err);
+      console.error(`[GitLab] Error handling ${objectKind} event: ${errorMessage3}`);
       if (err instanceof Error && err.stack) {
         console.error(err.stack);
       }
@@ -34815,8 +36872,8 @@ async function handleWebhooks(req, res, pathSegments) {
       }
       azureDevOpsWebhook.respond(res, 200, result);
     } catch (err) {
-      const errorMessage2 = err instanceof Error ? err.message : String(err);
-      console.error(`[AzureDevOps] Error handling ${eventType} event: ${errorMessage2}`);
+      const errorMessage3 = err instanceof Error ? err.message : String(err);
+      console.error(`[AzureDevOps] Error handling ${eventType} event: ${errorMessage3}`);
       if (err instanceof Error && err.stack) {
         console.error(err.stack);
       }
@@ -34861,8 +36918,7 @@ async function handleWebhooks(req, res, pathSegments) {
     }
     agentmailWebhook.respond(res, 200, { received: true });
     if (payload.message && !isInboxAllowed(payload.message.inbox_id, process.env.AGENTMAIL_INBOX_DOMAIN_FILTER)) {
-      const domain = payload.message.inbox_id.split("@")[1] ?? "unknown";
-      console.log(`[AgentMail] Ignoring event for inbox domain "${domain}" (not in AGENTMAIL_INBOX_DOMAIN_FILTER)`);
+      console.log(`[AgentMail] Ignoring event for inbox "${payload.message.inbox_id}" (not in AGENTMAIL_INBOX_DOMAIN_FILTER)`);
       return true;
     }
     if (payload.message && !isSenderAllowed(payload.message.from_, process.env.AGENTMAIL_SENDER_DOMAIN_FILTER)) {
@@ -34884,8 +36940,8 @@ async function handleWebhooks(req, res, pathSegments) {
           console.log(`[AgentMail] Ignoring event type: ${payload.event_type}`);
       }
     } catch (err) {
-      const errorMessage2 = err instanceof Error ? err.message : String(err);
-      console.error(`[AgentMail] Error handling ${payload.event_type} event: ${errorMessage2}`);
+      const errorMessage3 = err instanceof Error ? err.message : String(err);
+      console.error(`[AgentMail] Error handling ${payload.event_type} event: ${errorMessage3}`);
       if (err instanceof Error && err.stack) {
         console.error(err.stack);
       }
@@ -34945,16 +37001,84 @@ async function handleWebhooks(req, res, pathSegments) {
       }
       kapsoWebhook.respond(res, 200, { received: true, routing: routing.kind });
     } catch (err) {
-      const errorMessage2 = err instanceof Error ? err.message : String(err);
+      const errorMessage3 = err instanceof Error ? err.message : String(err);
       if (err instanceof WebhookError) {
-        console.warn(`[Kapso] Workflow dispatch rejected: ${errorMessage2}`);
+        console.warn(`[Kapso] Workflow dispatch rejected: ${errorMessage3}`);
       } else {
-        console.error(`[Kapso] Error handling inbound event: ${errorMessage2}`);
+        console.error(`[Kapso] Error handling inbound event: ${errorMessage3}`);
       }
       kapsoWebhook.respond(res, 200, { received: true, routing: "error" });
     }
     return true;
   }
+  if (chatSdkWebhook.match(req.method, pathSegments)) {
+    const adapterName = pathSegments[3] ?? "";
+    if (!isChatSdkEnabled() || !isChatAdapterConfigured(adapterName)) {
+      res.writeHead(404, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Chat SDK adapter not configured" }));
+      return true;
+    }
+    if (isChatSdkStopping()) {
+      res.writeHead(503, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Chat SDK is shutting down" }));
+      return true;
+    }
+    const chat = getChatInstance(adapterName);
+    const handler = chat?.webhooks[adapterName];
+    if (!handler) {
+      res.writeHead(503, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Chat SDK adapter failed to start" }));
+      return true;
+    }
+    if (enforceContentLengthCap(req, res, CHAT_SDK_WEBHOOK_MAX_BODY_BYTES) === BODY_TOO_LARGE) {
+      return true;
+    }
+    const chunks = [];
+    let receivedBytes = 0;
+    let tooLarge = false;
+    for await (const chunk of req) {
+      if (tooLarge)
+        continue;
+      receivedBytes += chunk.byteLength;
+      if (receivedBytes > CHAT_SDK_WEBHOOK_MAX_BODY_BYTES) {
+        tooLarge = true;
+        chunks.length = 0;
+        jsonError(res, `Payload too large (max ${CHAT_SDK_WEBHOOK_MAX_BODY_BYTES} bytes)`, 413);
+        continue;
+      }
+      chunks.push(chunk);
+    }
+    if (tooLarge)
+      return true;
+    const rawBody = Buffer.concat(chunks);
+    if (adapterName === "teams" && !hasTrustedTeamsServiceUrl(rawBody)) {
+      console.warn("[chat-sdk] teams webhook refused: serviceUrl is not a Bot Framework host");
+      res.writeHead(403, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Untrusted Teams serviceUrl" }));
+      return true;
+    }
+    const request = toFetchRequest(req, rawBody, `/api/integrations/chat/${adapterName}/webhook`);
+    try {
+      const response = await handler(request, {
+        waitUntil: trackBackground
+      });
+      const responseHeaders = {};
+      response.headers.forEach((value, name) => {
+        responseHeaders[name] = value;
+      });
+      const body = Buffer.from(await response.arrayBuffer());
+      res.writeHead(response.status, responseHeaders);
+      res.end(body);
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      console.error(`[chat-sdk] ${adapterName} webhook failed: ${scrubSecrets(message)}`);
+      if (!res.headersSent) {
+        res.writeHead(500, { "Content-Type": "application/json" });
+      }
+      res.end(JSON.stringify({ error: "Chat SDK webhook failed" }));
+    }
+    return true;
+  }
   return false;
 }
 
@@ -35977,6 +38101,7 @@ async function handleX(req, res, pathSegments) {
     timeoutMs,
     egressSecrets: credentials.egressSecrets,
     failedBindings: credentials.failedBindings,
+    userConfig: credentials.userConfig,
     apiConnections: getScriptApiConnectionDescriptors({ agentId: endpoint.agentId }),
     mcpConnections: getScriptMcpConnectionDescriptors({ agentId: endpoint.agentId })
   });
@@ -36125,7 +38250,6 @@ var httpServer = createHttpServer(async (req, res) => {
         () => handleAgentRegister(req, res, pathSegments, myAgentId),
         () => handlePoll(req, res, pathSegments, queryParams, myAgentId),
         () => handleSessionData(req, res, pathSegments, queryParams, myAgentId),
-        () => handleEcosystem(req, res, pathSegments, myAgentId),
         () => handleTrackers(req, res, pathSegments),
         () => handleWebhooks(req, res, pathSegments),
         () => handleAgentsRest(req, res, pathSegments, queryParams, myAgentId),
@@ -36157,6 +38281,7 @@ var httpServer = createHttpServer(async (req, res) => {
         () => handleDbQuery(req, res, pathSegments, queryParams),
         () => handleMetrics(req, res, pathSegments, queryParams, myAgentId),
         () => handleModelsCatalog(req, res, pathSegments, queryParams),
+        () => handleModelProfiles(req, res, pathSegments, queryParams, myAgentId),
         () => handleRepos(req, res, pathSegments, queryParams, myAgentId),
         () => handleSkills(req, res, pathSegments, queryParams, myAgentId),
         () => handleScriptConnections(req, res, pathSegments, queryParams, myAgentId),
@@ -36217,7 +38342,7 @@ var httpServer = createHttpServer(async (req, res) => {
   });
 });
 var detachRealtime = attachRealtimeTransport(httpServer);
-var { attachControllerTransport } = await import("./controllers-connect-3mf2btyj.js");
+var { attachControllerTransport } = await import("./controllers-connect-v9yn8zb9.js");
 var detachControllers = attachControllerTransport(httpServer);
 var stopWorkerNudges = startWorkerNudgeListener();
 var stopRoomDeletion = realtimeBus.subscribe("room:namespace-deleted", (namespace) => {
@@ -36246,7 +38371,7 @@ async function shutdown() {
     sessionsProcessed: getServerSessionsProcessed()
   });
   if (hasCapability("scheduling")) {
-    const { stopScheduler } = await import("./index-fx3jqq1e.js");
+    const { stopScheduler } = await import("./index-3gtmkhc6.js");
     stopScheduler();
   }
   stopHeartbeat();
@@ -36256,8 +38381,9 @@ async function shutdown() {
   await drainApi();
   await stopScriptRunSupervisor();
   await stopSlackApp();
+  await stopChatSdk();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { stopOAuthKeepalive } = await import("./keepalive-6ywhpja1.js");
+    const { stopOAuthKeepalive } = await import("./keepalive-psj6j54c.js");
     await stopOAuthKeepalive();
   }
   stopOAuthPendingGc();
@@ -36337,15 +38463,21 @@ try {
   console.warn("[startup] CAPABILITIES upgrade seed failed (non-fatal):", err);
 }
 try {
-  const { ensurePricingSeeded } = await import("./boot-seeds-d8sp49t2.js");
+  const { ensurePricingSeeded } = await import("./boot-seeds-e9sta0yt.js");
   ensurePricingSeeded();
-  const { startPricingRefreshLoop } = await import("./pricing-refresh-gedkjdw0.js");
+  const { startPricingRefreshLoop } = await import("./pricing-refresh-kefx9v3t.js");
   startPricingRefreshLoop();
 } catch (err) {
   console.error("[startup] Failed to seed pricing rows:", err);
 }
 try {
-  const { ensureRbacSeeded } = await import("./boot-seeds-d8sp49t2.js");
+  const { ensureModelProfilesSeeded } = await import("./boot-seeds-e9sta0yt.js");
+  await ensureModelProfilesSeeded();
+} catch (err) {
+  console.error("[startup] Failed to seed model profiles:", err);
+}
+try {
+  const { ensureRbacSeeded } = await import("./boot-seeds-e9sta0yt.js");
   ensureRbacSeeded();
 } catch (err) {
   console.error("[startup] Failed to sync RBAC seed rows:", err);
@@ -36353,7 +38485,7 @@ try {
     throw err;
 }
 try {
-  const { runAllSeeders } = await import("./index-2ybk7khy.js");
+  const { runAllSeeders } = await import("./index-5wyfjc2c.js");
   await runAllSeeders({ scriptEmbeddingMode: "skip" });
 } catch (err) {
   console.error("[startup] Failed to seed built-in entities:", err);
@@ -36401,49 +38533,53 @@ httpServer.listen(port, async () => {
   } catch (err) {
     console.error("[Slack] Failed to start, continuing boot without Slack:", err);
   }
+  startChatSdk().catch((err) => {
+    console.error("[chat-sdk] Failed to start, continuing without Chat SDK:", scrubSecrets(err instanceof Error ? err.message : String(err)));
+  });
   startQueueStallAlarm();
   initGitHub();
   initGitLab();
   initAzureDevOps();
+  initAzureDevOpsOutbound();
   initAgentMail();
   await initLinear();
   await initJira();
   await initWorkflows();
   await startScriptRunSupervisor(getMcpBaseUrl());
   if (hasCapability("scheduling")) {
-    const { startScheduler } = await import("./index-fx3jqq1e.js");
-    const { getExecutorRegistry: getExecutorRegistry2 } = await import("./index-g2byveez.js");
+    const { startScheduler } = await import("./index-3gtmkhc6.js");
+    const { getExecutorRegistry: getExecutorRegistry2 } = await import("./index-5e101240.js");
     const intervalMs = Number(process.env.SCHEDULER_INTERVAL_MS) || 1e4;
     startScheduler(getExecutorRegistry2(), intervalMs, {
       runId: globalState.__runId
     });
   }
   if (!isEnvFlagEnabled("HEARTBEAT_DISABLE", false)) {
-    const { startHeartbeat } = await import("./index-bdsqa799.js");
+    const { startHeartbeat } = await import("./index-3k5hkz7r.js");
     const heartbeatMs = Number(process.env.HEARTBEAT_INTERVAL_MS) || 90000;
     startHeartbeat(heartbeatMs);
   }
   startPoolRouting();
   startRuntimeSupervisor();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { startOAuthKeepalive } = await import("./keepalive-6ywhpja1.js");
+    const { startOAuthKeepalive } = await import("./keepalive-psj6j54c.js");
     startOAuthKeepalive();
   }
   if (process.env.OAUTH_REFRESH_SWEEP_DISABLE !== "true") {
-    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-3c6f8vyy.js");
+    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-0284h93b.js");
     startOAuthRefreshSweep();
   }
   startOAuthPendingGc();
   await startMemoryGc();
   await startDbRetention();
   startHumanFreeDrain();
-  import("./boot-reembed-swwzdgd7.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+  import("./boot-reembed-whzbdthj.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
     console.error("[boot-reembed] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-reembed-16rv9843.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+  import("./boot-reembed-9apm9qw6.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
     console.error("[boot-reembed-scripts] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-scrub-sweep-zkr6vkqb.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
+  import("./boot-scrub-sweep-ndzmvmgt.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
     console.error("[boot-scrub-sweep] startup scrub failed (non-fatal):", err);
   });
 }).on("error", (err) => {