@desplega.ai/agent-swarm 2.4.4 → 2.5.0

package/dist/{http-4hwxv62p.js → http-fc1k6ec8.js}

@@ -1,6 +1,7 @@
 import {
   bedrockProviderModule
-} from "./cli-dvkmp9bt.js";
+} from "./cli-6ctwrf1z.js";
+import"./cli-2nf3b08t.js";
 import"./cli-kvzgak7c.js";
 import"./cli-445c1vp7.js";
 import"./cli-qz93y3x5.js";
@@ -42,6 +43,9 @@ import {
   recordUnmappedIdentity,
   MAX_TASK_ATTACHMENT_BYTES,
   recordTaskAttachmentUpload,
+  scopeFromAttachment,
+  backingProviderId,
+  transcribeAudioNotes,
   handleWebhookTrigger,
   verifyHmacSignature,
   WebhookError,
@@ -126,6 +130,16 @@ import {
   getTelemetryIngestAnchor,
   initApiTelemetry,
   syncTelemetryEnabled,
+  isBitbucketEnabled,
+  initBitbucket,
+  verifyBitbucketWebhook,
+  isDuplicateDelivery,
+  markDeliveryProcessed,
+  pullRequestEventOf,
+  pullRequestCommentEventOf,
+  handlePullRequestCreated2,
+  handlePullRequestCommentCreated,
+  handlePullRequestClosed,
   handlePullRequest,
   handleIssue,
   handleComment,
@@ -168,14 +182,18 @@ import {
   handleAgentSessionPrompted,
   isLinearEnabled,
   initLinear,
-  parseCookieHeader,
+  isCookieSafePageId,
+  extractPageSession,
+  extractLegacyPageSession,
   extractAndVerifyCookie,
-  issuePageSessionCookie,
+  pageSessionSetCookies,
   resolveHttpRequestAuth,
   loadGlobalConfigsIntoEnv,
   reloadGlobalConfigsAndIntegrations,
   scheduleIntegrationsReload,
   handleCore,
+  MCP_MAX_TOOL_INPUT_ELEMENTS,
+  MCP_MAX_REQUEST_BODY_BYTES,
   userCtx,
   requestPrincipal,
   agentFirstPrincipal,
@@ -205,6 +223,9 @@ import {
   hydrateOAuthAppFromPreset,
   scopedResourceScopeIdSchema,
   resolveScopedResourceId,
+  MemoryKeyError,
+  refreshLinks,
+  indexMemoryContent,
   dedupeMemoryDocumentIds,
   recordMemoryAccesses,
   recordRetrievals,
@@ -221,12 +242,9 @@ import {
   reservedRoomKeyError,
   updateMcpServerChecked,
   updateTouchesStdioExecution,
-  MemoryKeyError,
-  refreshLinks,
   canReadMemory,
   getLinksForMemory,
   expandCandidatesWithGraph,
-  indexMemoryContent,
   isApiDraining,
   drainApi,
   markKapsoMessageRead,
@@ -283,7 +301,7 @@ import {
   hasCapability,
   getEnabledCapabilities,
   createServer
-} from "./cli-v3yr2gbg.js";
+} from "./cli-5kzk3472.js";
 import {
   chatThreadOfContextKey,
   agentContextKey,
@@ -378,6 +396,7 @@ import {
   listApprovalRequestSummaries2,
   getPendingApprovalVoteState2,
   recordApprovalVotes2,
+  getPendingApprovalsForTasks2,
   computeContentHash2,
   getTaskById2,
   TASK_LINEAGE_LIMITS2,
@@ -397,6 +416,15 @@ import {
   deleteModelProfile,
   taskProfileError,
   init_model_profiles,
+  AssetKeyMovesBlockedError2,
+  assertAssetKeyMovesAllowed2,
+  moveSessionChains,
+  listPrefixRoots,
+  listSharedPrefixRoots,
+  init_session_moves,
+  getSessionReadState,
+  getSessionTree,
+  init_session_tree,
   setHumanFreeQueueListener,
   drainHumanFreeReclassifyQueue,
   init_human_free,
@@ -480,6 +508,8 @@ import {
   init_key_paths,
   rerank,
   init_reranker,
+  searchMemoryCandidates,
+  init_search_candidates,
   getEmbeddingProvider2,
   getMemoryStore2,
   init_memory,
@@ -720,38 +750,40 @@ import {
   countScriptRunJournalSteps2,
   countScriptRunJournalAgentTaskSteps2,
   init_db3
-} from "./cli-p20r8w42.js";
+} from "./cli-fcc5qe3f.js";
 import {
   getUserGrant2,
   init_rbac_roles
-} from "./cli-4dg55wsk.js";
-import"./cli-t7cyef5g.js";
+} from "./cli-0z3vjrpm.js";
+import"./cli-36j4jnk3.js";
 import {
   normalizeModelKey
-} from "./cli-amyhm3gj.js";
+} from "./cli-0y6f0ckq.js";
 import {
   upsertModelCatalogOverlay,
   deleteModelCatalogOverlay,
   loadModelsCatalog,
   requestModelCatalogRefresh2
-} from "./cli-xc27fwzg.js";
+} from "./cli-y9jvxfhk.js";
 import {
   AMP_ESTIMATE_MODELS,
   ampBillsCacheWrites,
   resolveAmpModel
-} from "./cli-2zqpkvtt.js";
+} from "./cli-jpxsrxcb.js";
 import {
   automationIntegrationFixUrl,
   preflightAutomation,
   getAutomationSetupStates,
   listEnabledAutomationPreflightInputs,
+  createApprovalFollowUpTask,
   validateJsonSchema,
   workflowSaveWarnings,
-  retryFailedRun2,
-  cancelWorkflowRun2,
   TriggerSchemaError,
-  startWorkflowExecution2
-} from "./cli-51y09c6p.js";
+  startWorkflowExecution2,
+  generateEdges,
+  definitionNodeIds,
+  validateDefinition
+} from "./cli-92mqenkc.js";
 import {
   require_dist2,
   isInvalidClientError,
@@ -831,14 +863,14 @@ import {
   typecheckWithAmbient,
   typecheckScript,
   parseSkillContent
-} from "./cli-2y91wnbh.js";
+} from "./cli-we0ra057.js";
 import {
   buildAuthorizationUrl,
   exchangeAuthorizationCode,
   oauthAppRowToProviderConfig,
   forceRefreshAuthorizationOrThrow,
   forceRefreshTokenOrThrow
-} from "./cli-esxerzg7.js";
+} from "./cli-s4sntwt4.js";
 import {
   signalProcessGroup,
   detachedProcessGroup,
@@ -866,15 +898,9 @@ import {
   getSlackApp2,
   startSlackApp2,
   stopSlackApp2
-} from "./cli-qkhc5aqy.js";
-import"./cli-1d70crsy.js";
-import {
-  createApprovalFollowUpTask,
-  generateEdges,
-  definitionNodeIds,
-  validateDefinition
-} from "./cli-q6r7t299.js";
-import"./cli-8nyhf7za.js";
+} from "./cli-fy1jyyym.js";
+import"./cli-ftmq4nvk.js";
+import"./cli-qqzmjxkf.js";
 import {
   _fetchHolder,
   CLIENT_ID,
@@ -885,11 +911,15 @@ import {
   codexOAuthKeyForSlot,
   loadAllCodexOAuthSlots,
   getValidCodexOAuth
-} from "./cli-ejs3m1sx.js";
+} from "./cli-kxpfx2xr.js";
 import {
   workflowEventBus2,
   init_event_bus
-} from "./cli-wt645v7q.js";
+} from "./cli-dabehxhp.js";
+import {
+  retryFailedRun2,
+  cancelWorkflowRun2
+} from "./cli-3zwye9sn.js";
 import {
   duplicateGuardedQueryKey,
   warnIfCorsAllowsAnyOrigin,
@@ -901,6 +931,7 @@ import {
   wireHttpSpanLifecycle,
   safeRequestUrlForLog,
   agentWithCapacity,
+  RequestBodyTooLargeError,
   parseBody,
   BODY_TOO_LARGE,
   enforceContentLengthCap,
@@ -926,13 +957,14 @@ import {
   canReadSession2,
   readableByFor2,
   SESSION_WRITE_DENIED2,
+  hasSessionWrite2,
   denyParentAttach2,
   runtimeInstanceHeader,
   bodyTask,
   bodyListTask,
   describeRequestRoute,
   route
-} from "./cli-cynvc9fj.js";
+} from "./cli-9ce2xw98.js";
 import {
   isMultiRuntimeEnabled
 } from "./cli-e8xyjvfc.js";
@@ -942,7 +974,7 @@ import {
   agentFsRequestTimeoutMs,
   AgentFsProvider,
   getFileStorageProvider2
-} from "./cli-qje9k2nh.js";
+} from "./cli-g9ypd5en.js";
 import {
   RuntimePoolError2,
   mintControllerToken,
@@ -963,13 +995,13 @@ import {
   resolvePoolDelivery2,
   createPoolAgent2,
   init_db
-} from "./cli-w6nadkh4.js";
+} from "./cli-5rvg1ddk.js";
 import {
   RATING_MODEL_MAX_LENGTH,
   REFERENCES_SOURCE_MAX_LENGTH,
   sanitizeReferencesSource
 } from "./cli-3h26v7yj.js";
-import"./cli-smvcw9z5.js";
+import"./cli-pasyvjmm.js";
 import {
   startPoolRouting,
   stopPoolRouting,
@@ -979,8 +1011,8 @@ import {
   checkHeartbeatChecklist2,
   runHeartbeatSweep2,
   stopHeartbeat2
-} from "./cli-3cgngyd8.js";
-import"./cli-82d3nkc3.js";
+} from "./cli-7g40g8hq.js";
+import"./cli-xd4eqtr2.js";
 import {
   import_websocket,
   import_websocket_server
@@ -989,7 +1021,7 @@ import {
   runtimeSupervisorStatus,
   startRuntimeSupervisor,
   stopRuntimeSupervisor
-} from "./cli-dqb4n629.js";
+} from "./cli-x6vf4sad.js";
 import"./cli-ns59dc6r.js";
 import {
   ACP_TARGET_IDS
@@ -1009,14 +1041,14 @@ import {
   memoryRelevance,
   isUnknownModelError,
   writeSkillsToFilesystem
-} from "./cli-xj0re5tm.js";
+} from "./cli-4w24f7z3.js";
 import {
   inviteEmailToSharedOrg,
   ensureAgentFsCredentialsForAgent
-} from "./cli-hj3debgw.js";
+} from "./cli-1pr672hz.js";
 import {
   Anthropic
-} from "./cli-er83cjbn.js";
+} from "./cli-3qv8naq8.js";
 import {
   isCodexOAuthConfigKey
 } from "./cli-j4bwnpkm.js";
@@ -1052,12 +1084,13 @@ import {
   revokeAgentTokens,
   fingerprintApiKey,
   init_users
-} from "./cli-9fhkkpj5.js";
+} from "./cli-xt768r5m.js";
 import"./cli-v41kn3cd.js";
 import"./cli-wgtk7xxr.js";
+import"./cli-1f0gp9vz.js";
 import {
   setBedrockProviderModule
-} from "./cli-qwkcwjdn.js";
+} from "./cli-rycdaj0a.js";
 import {
   isRbacEnabled,
   decideToolAdmission,
@@ -1068,6 +1101,11 @@ import {
   init_rbac
 } from "./cli-ba8ne1es.js";
 import {
+  ASSET_KEY_MAX_LENGTH,
+  normalizeAssetKey,
+  defaultAssetKey,
+  parseAssetKey,
+  init_key,
   isSafeBundlePath,
   init_bundle_path,
   init_zod_openapi,
@@ -1208,12 +1246,12 @@ import {
   KvKeySchema,
   KvEntrySchema,
   init_types
-} from "./cli-nc35pxb7.js";
+} from "./cli-rh5smt8t.js";
 import {
   IDENTITY_FIELD_BUDGETS,
   IdentityFieldBudgetError,
   init_identity_field_budget
-} from "./cli-74c1wpm0.js";
+} from "./cli-gpv60278.js";
 import {
   getSlackConfiguration,
   init_config
@@ -1281,7 +1319,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-pccfmtb5.js";
+} from "./cli-179xcyky.js";
 import {
   realtimeBus,
   init_bus
@@ -1310,7 +1348,7 @@ import {
   scrubObject,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-xf234ws8.js";
+} from "./cli-n4c8e3s5.js";
 import {
   isAlias,
   init_src2
@@ -2463,8 +2501,7 @@ async function authenticate(req) {
     const page = await getPage2(pageId);
     if (!page)
       throw new Error("Page not found");
-    const cookie = await extractAndVerifyCookie(req);
-    const session = cookie?.pageId === pageId ? cookie : null;
+    const session = await extractAndVerifyCookie(req, pageId);
     if (!session && page.authMode !== "public")
       throw new Error("Page session required");
     if (session?.uid && (await findUserById(session.uid))?.status !== "active")
@@ -6769,6 +6806,10 @@ async function handleAssets(req, res, pathSegments, queryParams, myAgentId) {
         jsonError(res, "Asset not found", 404);
         return true;
       }
+      if (!await hasSessionWrite2(req, myAgentId, task.id)) {
+        jsonError(res, await canReadSession2(req, myAgentId, task.id) ? "You can view this session but not move it." : SESSION_READ_DENIED2, 403);
+        return true;
+      }
       const tasks = parsed.body.cascade ? await getRootTaskChain2(task.id) : [task];
       for (const target of tasks) {
         if (!await canMutateTaskNamespace(target, myAgentId, req)) {
@@ -6825,7 +6866,7 @@ async function handleAssets(req, res, pathSegments, queryParams, myAgentId) {
         return true;
       }
       const message = error instanceof Error ? error.message : String(error);
-      jsonError(res, message, message.includes("blocked until") ? 409 : 400);
+      jsonError(res, message, error instanceof AssetKeyMovesBlockedError2 ? 409 : 400);
     }
     return true;
   }
@@ -7076,6 +7117,7 @@ var OnboardingIntegrationMethodSchema = _enum2([
   "slack",
   "github",
   "gitlab",
+  "bitbucket",
   "linear_oauth",
   "jira_oauth"
 ]);
@@ -7143,6 +7185,7 @@ var OnboardingSignalsSchema = object2({
     slack: boolean(),
     github: boolean(),
     gitlab: boolean(),
+    bitbucket: boolean(),
     linear: boolean(),
     jira: boolean()
   }),
@@ -7364,6 +7407,8 @@ function inferIntegrationMethod(signals) {
     return "github";
   if (signals.integrations.gitlab)
     return "gitlab";
+  if (signals.integrations.bitbucket)
+    return "bitbucket";
   if (signals.integrations.linear)
     return "linear_oauth";
   if (signals.integrations.jira)
@@ -9644,6 +9689,7 @@ declare module "swarm-extension" {
       | "github"
       | "gitlab"
       | "azure-devops"
+      | "bitbucket"
       | "system"
       | "linear"
       | "jira"
@@ -9670,7 +9716,7 @@ declare module "swarm-extension" {
     slackTriggerMessageTs?: string | undefined;
     slackUserId?: string | undefined;
     overrideSlackContext?: boolean | undefined;
-    vcsProvider?: "github" | "gitlab" | "azure-devops" | undefined;
+    vcsProvider?: "github" | "gitlab" | "azure-devops" | "bitbucket" | undefined;
     vcsRepo?: string | undefined;
     vcsEventType?: string | undefined;
     vcsNumber?: number | undefined;
@@ -9696,6 +9742,7 @@ declare module "swarm-extension" {
     sourceTaskId?: string | undefined;
     outputSchema?: Record<string, unknown> | undefined;
     inheritParentOutputSchema?: boolean | undefined;
+    inheritParentRequester?: boolean | undefined;
     inheritParentRoutingAffinity?: boolean | undefined;
     inheritParentFollowUpConfig?: boolean | undefined;
     followUpConfig?:
@@ -9760,6 +9807,7 @@ declare module "swarm-extension" {
       | "github"
       | "gitlab"
       | "azure-devops"
+      | "bitbucket"
       | "system"
       | "linear"
       | "jira"
@@ -9800,7 +9848,7 @@ declare module "swarm-extension" {
     slackUserId?: string | undefined;
     slackProgressMessageTs?: string | undefined;
     slackTreeRootMessageTs?: string | undefined;
-    vcsProvider?: "github" | "gitlab" | "azure-devops" | undefined;
+    vcsProvider?: "github" | "gitlab" | "azure-devops" | "bitbucket" | undefined;
     vcsRepo?: string | undefined;
     vcsEventType?: string | undefined;
     vcsNumber?: number | undefined;
@@ -10114,8 +10162,15 @@ declare module "swarm-extension" {
     userName?: string;
     /** The buffered messages, joined. */
     text: string;
+    /** True for an @mention and for a reply to one of the bot's messages. */
     botMentioned: boolean;
     isDirectMessage: boolean;
+    /** Platform chat type, such as Telegram \`private\`, \`group\`, \`supergroup\` or \`channel\`. */
+    chatType?: string;
+    /** Set for a Telegram supergroup with topics. */
+    isForum?: boolean;
+    /** A buffered message replies to one of the bot's own messages. */
+    replyToBot: boolean;
     /** Set when earlier swarm tasks exist in this thread. */
     threadContext?: {
       adapter: string;
@@ -10246,7 +10301,7 @@ declare module "swarm-extension" {
     /** The text, or a placeholder naming the type for a non-text message. */
     text: string;
   }
-  export type VcsProvider = "github" | "gitlab" | "azure-devops";
+  export type VcsProvider = "github" | "gitlab" | "azure-devops" | "bitbucket";
   /**
    * The provider object the event is about, as the provider names it. GitLab
    * calls a pull request a merge request, and a comment a \`note\`.
@@ -10269,7 +10324,7 @@ declare module "swarm-extension" {
     provider: VcsProvider;
     kind: VcsEventKind;
     action: string;
-    /** \`owner/name\` on GitHub and GitLab, the repository URL on Azure DevOps. */
+    /** \`owner/name\` on GitHub and GitLab, \`workspace/repo_slug\` on Bitbucket, the repository URL on Azure DevOps. */
     repo: string;
     /** The PR, merge request, or issue number. Absent for a pipeline outside a merge request. */
     number?: number;
@@ -11442,8 +11497,8 @@ export default extension;
     manifest: {
       $schema: "../manifest.schema.json",
       name: "slack-reply-gate",
-      description: "Asks Jev (TypeSafe or OpenRouter) whether Lead should answer a buffered Slack thread follow-up, and drops the wake-up when it should not",
-      version: "1.2.0",
+      description: "Asks a SystemOne decision model (Jev or Clef) whether Lead should answer a buffered Slack thread follow-up, and drops the wake-up when it should not",
+      version: "1.3.0",
       runtime: "api",
       assets: {
         hooks: "hooks.ts"
@@ -11458,8 +11513,9 @@ import { z } from "zod";
  *
  * Every human message in a Slack thread the swarm takes part in is buffered and
  * flushed into a Lead task ("[Thread follow-up — N message(s) buffered]"), even
- * "lol", ":joy:" or two people bantering. This hook asks TypeSafe Jev whether
- * Lead should answer, and drops the wake-up when the answer is no.
+ * "lol", ":joy:" or two people bantering. This hook asks a SystemOne decision
+ * model (Jev or Clef) whether Lead should answer, and drops the wake-up when the
+ * answer is no.
  *
  * Hook: \`pre.task.create\`, origin "slack", description carrying the
  * thread-buffer header. \`pre.slack.route\` cannot be used: the buffered thread
@@ -11467,17 +11523,20 @@ import { z } from "zod";
  * re-target a message, never drop it.
  *
  * Rules:
- *   - A message that @mentions Lead passes without a Jev call.
- *   - Otherwise one Jev \`choice\` question classifies the message into a reason;
+ *   - A message that @mentions Lead passes without a decision call.
+ *   - Otherwise one \`choice\` question classifies the message into a reason;
  *     reply=false only for reaction_only | banter_between_others |
  *     not_addressed_to_lead, and only when the summed probability of those
  *     three labels is >= minConfidence (a banter/reaction split is still a skip).
  *   - Fails OPEN on every error, timeout or missing key.
  *
- * Transport (config.provider): Jev is served by TypeSafe directly and by
- * OpenRouter's Decisions endpoint. Both take the same {model, state, questions}
- * body and return the same \`answers\` shape. \`auto\` uses TYPESAFE_API_KEY when
- * set, else OPENROUTER_API_KEY.
+ * Provider (config.provider): the decision is made server-side by the
+ * \`system-one-decide\` tool (\`ctx.swarm.systemOne_decide\`), the same path as a
+ * \`system-one-decision\` workflow node, so every SystemOne host works and no key
+ * enters this hook. \`auto\` picks the first host with a configured credential:
+ * typesafe (Jev, TYPESAFE_API_KEY), openrouter (Jev, OPENROUTER_API_KEY), then
+ * cloudflare (Clef, CLOUDFLARE_API_TOKEN or CLOUDFLARE_API_KEY, plus
+ * CLOUDFLARE_ACCOUNT_ID). laya and openai are explicit choices only.
  *
  * modes (config.mode):
  *   off     -> never evaluate
@@ -11500,17 +11559,19 @@ import { z } from "zod";
 export const config = z.object({
   mode: z.enum(["off", "shadow", "enforce"]).default("shadow"),
   timeoutMs: z.number().int().positive().default(3000),
-  provider: z.enum(["auto", "typesafe", "openrouter"]).default("auto"),
-  /** Jev model on the TypeSafe transport. */
+  provider: z
+    .enum(["auto", "typesafe", "openrouter", "cloudflare", "laya", "openai"])
+    .default("auto"),
+  /** Jev model on TypeSafe. */
   model: z.string().default("jev-latest"),
-  /** Jev model on the OpenRouter transport. */
+  /** Jev model on OpenRouter. */
   openrouterModel: z.string().default("typesafe/jev-1.13"),
+  /** Clef model on Cloudflare Workers AI: clef or clef-flash. */
+  cloudflareModel: z.string().default("clef"),
   minConfidence: z.number().min(0).max(1).default(0.55),
   contextMessages: z.number().int().min(0).max(20).default(6),
   leadAliases: z.array(z.string()).default(["lead"]),
   botSlackUserIds: z.array(z.string()).default([]),
-  /** Explicit TypeSafe key; otherwise TYPESAFE_API_KEY from the API process env. */
-  apiKey: z.string().optional(),
   /**
    * Reaction for a dropped message in enforce mode. "" only removes the bot's
    * acceptance reaction(s) and adds nothing.
@@ -11523,13 +11584,13 @@ type Cfg = z.infer<typeof config>;
 type Swarm = ApiCtx["swarm"];
 
 const NS = "ext:slack-reply-gate";
-const TYPESAFE_ENDPOINT = "https://api.typesafe.ai/v1/systemone";
-const OPENROUTER_ENDPOINT = "https://openrouter.ai/api/alpha/decisions";
 const HEADER_LINE_RE = /(?:^|\\n)\\[Thread follow-up — \\d+ message\\(s\\) buffered\\]\\n/g;
 const CTX_OPEN = "<thread_context>";
 const CTX_CLOSE = "</thread_context>";
 // The dispatcher cancels a handler after 5 s; leave room for the KV writes.
 const MAX_TIMEOUT_MS = 4000;
+// The smallest time budget system-one-decide accepts.
+const MIN_DECIDE_TIMEOUT_MS = 1000;
 
 export const REASONS = {
   direct_ask:
@@ -11631,14 +11692,14 @@ const usable = (v: string): boolean => Boolean(v) && !v.startsWith("[REDACTED");
 const envOf = (name: string): string => String(process.env[name] ?? "");
 
 /**
- * Resolve a secret: explicit value, then the API process env. The API process loads
- * global swarm_config rows into process.env at boot and on config reload.
+ * Resolve a secret from the API process env. The API process loads global
+ * swarm_config rows into process.env at boot and on config reload.
  * ctx.swarm.config_get cannot serve it: the SDK scrubs secrets to "[REDACTED:<name>]".
  */
-const secret = (name: string, explicit?: string): string => {
+const secret = (name: string): string => {
   const cached = secretCache.get(name);
   if (cached && Date.now() - cached.at < KEY_TTL_MS) return cached.value;
-  const value = [String(explicit ?? ""), envOf(name)].find(usable) ?? "";
+  const value = usable(envOf(name)) ? envOf(name) : "";
   if (usable(value)) secretCache.set(name, { value, at: Date.now() });
   return value;
 };
@@ -11648,46 +11709,51 @@ export const resetKeyCache = (): void => {
   secretCache.clear();
 };
 
-export type JevTransport = {
-  provider: "typesafe" | "openrouter";
-  endpoint: string;
-  key: string;
-  model: string;
-};
+export type ProviderId = Exclude<Cfg["provider"], "auto">;
+
+/** Where the decision is made. No model means the provider's own default. */
+export type DecisionTarget = { provider: ProviderId; model?: string };
+
+/** What \`auto\` needs per provider: every group must have one usable value. */
+const AUTO_CREDENTIALS: ReadonlyArray<[ProviderId, string[][]]> = [
+  ["typesafe", [["TYPESAFE_API_KEY"]]],
+  ["openrouter", [["OPENROUTER_API_KEY"]]],
+  ["cloudflare", [["CLOUDFLARE_API_TOKEN", "CLOUDFLARE_API_KEY"], ["CLOUDFLARE_ACCOUNT_ID"]]],
+];
+
+const modelFor = (provider: ProviderId, cfg: Cfg): string | undefined =>
+  provider === "typesafe"
+    ? cfg.model
+    : provider === "openrouter"
+      ? cfg.openrouterModel
+      : provider === "cloudflare"
+        ? cfg.cloudflareModel
+        : undefined;
 
 /**
- * Pick the Jev transport. \`auto\` prefers TypeSafe and falls back to OpenRouter.
- * Throws when the chosen provider has no usable key; the handler fails open.
+ * The decision providers to try, in order. An explicit one is used as is: the
+ * server checks its credential. \`auto\` lists every provider in \`AUTO_CREDENTIALS\`
+ * whose credential is set and throws when none is; the handler then fails open.
  */
-export const resolveTransport = (cfg: Cfg): JevTransport => {
-  const typesafe = (): JevTransport | null => {
-    const key = secret("TYPESAFE_API_KEY", cfg.apiKey);
-    return usable(key)
-      ? { provider: "typesafe", endpoint: TYPESAFE_ENDPOINT, key, model: cfg.model }
-      : null;
-  };
-  const openrouter = (): JevTransport | null => {
-    const key = secret("OPENROUTER_API_KEY");
-    return usable(key)
-      ? { provider: "openrouter", endpoint: OPENROUTER_ENDPOINT, key, model: cfg.openrouterModel }
-      : null;
-  };
-  const transport =
-    cfg.provider === "typesafe"
-      ? typesafe()
-      : cfg.provider === "openrouter"
-        ? openrouter()
-        : (typesafe() ?? openrouter());
-  if (transport) return transport;
+export const resolveProviders = (cfg: Cfg): DecisionTarget[] => {
+  if (cfg.provider !== "auto") {
+    return [{ provider: cfg.provider, model: modelFor(cfg.provider, cfg) }];
+  }
+  const targets = AUTO_CREDENTIALS.filter(([, groups]) =>
+    groups.every((keys) => keys.some((key) => usable(secret(key)))),
+  ).map(([provider]) => ({ provider, model: modelFor(provider, cfg) }));
+  if (targets.length > 0) return targets;
   throw new Error(
-    cfg.provider === "typesafe"
-      ? "no TYPESAFE_API_KEY"
-      : cfg.provider === "openrouter"
-        ? "no OPENROUTER_API_KEY"
-        : "no TYPESAFE_API_KEY or OPENROUTER_API_KEY",
+    "no TYPESAFE_API_KEY, OPENROUTER_API_KEY, or CLOUDFLARE_API_TOKEN with CLOUDFLARE_ACCOUNT_ID",
   );
 };
 
+/** The first provider \`resolveProviders\` would try. */
+export const resolveProvider = (cfg: Cfg): DecisionTarget => resolveProviders(cfg)[0]!;
+
+/** The server refused the provider for a deployment setting and sent nothing. */
+export class ProviderUnavailableError extends Error {}
+
 const SLACK_API = "https://slack.com/api";
 // The engine's acceptance reactions (src/slack/reaction-shortcode.ts), by config key.
 const ACCEPTANCE_REACTIONS: ReadonlyArray<[string, string]> = [
@@ -11775,7 +11841,7 @@ export const settleMutes = async (): Promise<void> => {
   await Promise.allSettled([...pendingMutes]);
 };
 
-export type JevVerdict = {
+export type Verdict = {
   reason: string;
   confidence: number | null;
   probabilities: Record<string, number> | null;
@@ -11783,56 +11849,73 @@ export type JevVerdict = {
 };
 
 /**
- * One Jev call: classify the newest message into a reason. Throws on any failure.
- * TypeSafe and OpenRouter share the request body and the \`answers\` response shape.
+ * One decision: classify the newest message into a reason. Throws on any failure.
+ * The server makes the call (\`system-one-decide\`), so every provider returns the
+ * same \`answers\` shape. The time budget is enforced here and on the server.
  */
-export const askJev = async (
+export const askModel = async (
+  swarm: Swarm,
   input: {
     messages: string[];
     context: string[];
     sender: string;
     leadNames: readonly string[];
   },
-  transport: JevTransport,
+  target: DecisionTarget,
   cfg: Cfg,
   outer?: AbortSignal,
-): Promise<JevVerdict> => {
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), Math.min(cfg.timeoutMs, MAX_TIMEOUT_MS));
-  const onOuterAbort = () => controller.abort();
-  outer?.addEventListener("abort", onOuterAbort);
+): Promise<Verdict> => {
+  const budgetMs = Math.min(cfg.timeoutMs, MAX_TIMEOUT_MS);
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  let onOuterAbort: (() => void) | undefined;
+  const stop = new Promise<never>((_resolve, reject) => {
+    timer = setTimeout(() => reject(new Error(\`timed out after \${budgetMs}ms\`)), budgetMs);
+    onOuterAbort = () => reject(new Error("aborted"));
+    outer?.addEventListener("abort", onOuterAbort);
+  });
   const t0 = Date.now();
   try {
-    const res = await fetch(transport.endpoint, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        Authorization: \`Bearer \${transport.key}\`,
+    const call = swarm.systemOne_decide({
+      provider: target.provider,
+      ...(target.model ? { model: target.model } : {}),
+      state: {
+        role: "Decide whether Lead, the coordinating AI agent of a team's agent swarm, should answer a new Slack message in a thread it takes part in. Lead is woken by every message in the thread, including ones not meant for it. Answering noise wastes everyone's time; missing a real ask is worse.",
+        lead_names: [...input.leadNames],
+        recent_thread_messages: input.context,
+        new_message: input.messages.join("\\n---\\n"),
+        new_message_sender: input.sender,
       },
-      body: JSON.stringify({
-        state: {
-          role: "Decide whether Lead, the coordinating AI agent of a team's agent swarm, should answer a new Slack message in a thread it takes part in. Lead is woken by every message in the thread, including ones not meant for it. Answering noise wastes everyone's time; missing a real ask is worse.",
-          lead_names: input.leadNames,
-          recent_thread_messages: input.context,
-          new_message: input.messages.join("\\n---\\n"),
-          new_message_sender: input.sender,
+      questions: {
+        reason: {
+          type: "choice",
+          instructions:
+            "Which label best describes new_message from Lead's point of view? Use recent_thread_messages to tell who it is talking to. Lines starting with [Agent] are swarm bots.",
+          criteria: REASONS,
         },
-        model: transport.model,
-        questions: {
-          reason: {
-            type: "choice",
-            instructions:
-              "Which label best describes new_message from Lead's point of view? Use recent_thread_messages to tell who it is talking to. Lines starting with [Agent] are swarm bots.",
-            criteria: REASONS,
-          },
-        },
-      }),
-      signal: controller.signal,
+      },
+      timeoutMs: Math.max(budgetMs, MIN_DECIDE_TIMEOUT_MS),
+      maxRetries: 0,
     });
-    if (!res.ok) throw new Error(\`\${transport.provider} \${res.status}\`);
-    const body = (await res.json()) as {
+    // After a timeout nobody awaits the call; its late failure must not go unhandled.
+    call.catch(() => {});
+    const res = (await Promise.race([call, stop])) as {
+      success?: boolean;
+      status?: number;
+      data?: unknown;
+    } | null;
+    const body = (res?.data ?? res) as {
+      success?: boolean;
+      message?: unknown;
+      error?: unknown;
+      providerUnavailable?: unknown;
       answers?: { reason?: { choice?: unknown; confidence?: unknown; probabilities?: unknown } };
     } | null;
+    if (res?.success === false || body?.success === false) {
+      const why = \`\${target.provider}: \${String(body?.message ?? body?.error ?? \`HTTP \${res?.status}\`).slice(0, 200)}\`;
+      throw body?.providerUnavailable === true
+        ? new ProviderUnavailableError(why)
+        : new Error(why);
+    }
     const answer = body?.answers?.reason;
     const reason = typeof answer?.choice === "string" ? answer.choice : "";
     if (!(reason in REASONS)) throw new Error(\`unexpected choice: \${String(reason).slice(0, 60)}\`);
@@ -11844,12 +11927,34 @@ export const askJev = async (
     return { reason, confidence, probabilities, latencyMs: Date.now() - t0 };
   } finally {
     clearTimeout(timer);
-    outer?.removeEventListener("abort", onOuterAbort);
+    if (onOuterAbort) outer?.removeEventListener("abort", onOuterAbort);
   }
 };
 
+/**
+ * \`askModel\` on each target in turn, moving on only when the server refused the
+ * provider for a deployment setting (no request was sent). Any other failure, or
+ * a refusal of the last target, throws.
+ */
+export const askFirstAvailable = async (
+  swarm: Swarm,
+  input: Parameters<typeof askModel>[1],
+  targets: readonly DecisionTarget[],
+  cfg: Cfg,
+  outer?: AbortSignal,
+): Promise<{ verdict: Verdict; target: DecisionTarget }> => {
+  for (const [i, target] of targets.entries()) {
+    try {
+      return { verdict: await askModel(swarm, input, target, cfg, outer), target };
+    } catch (err) {
+      if (!(err instanceof ProviderUnavailableError) || i === targets.length - 1) throw err;
+    }
+  }
+  throw new Error("no decision provider");
+};
+
 /** Probability that the message needs no reply: the summed mass of the skip labels. */
-export const skipProbability = (verdict: JevVerdict): number | null => {
+export const skipProbability = (verdict: Verdict): number | null => {
   if (verdict.probabilities) {
     let sum = 0;
     for (const [label, p] of Object.entries(verdict.probabilities)) {
@@ -11860,9 +11965,9 @@ export const skipProbability = (verdict: JevVerdict): number | null => {
   return verdict.confidence;
 };
 
-/** Map a Jev verdict to the typed decision. An unsure skip verdict replies. */
+/** Map a verdict to the typed decision. An unsure skip verdict replies. */
 export const decide = (
-  verdict: JevVerdict,
+  verdict: Verdict,
   minConfidence: number,
 ): { reply: boolean; reason: Reason; skipP: number | null; lowConfidence: boolean } => {
   const reason = verdict.reason as Reason;
@@ -11959,7 +12064,7 @@ const extension: SwarmExtension = (api) => {
         return;
       }
 
-      const transport = resolveTransport(cfg);
+      const targets = resolveProviders(cfg);
 
       const sender =
         opts.slackUserId && cfg.botSlackUserIds.includes(opts.slackUserId)
@@ -11968,14 +12073,15 @@ const extension: SwarmExtension = (api) => {
             ? "human (known teammate)"
             : "unknown (not a known teammate; may be a bot or an external person)";
 
-      const verdict = await askJev(
+      const { verdict, target } = await askFirstAvailable(
+        ctx.swarm,
         {
           messages,
           context: context.slice(-cfg.contextMessages).map((m) => m.slice(0, 500)),
           sender,
           leadNames: cfg.leadAliases,
         },
-        transport,
+        targets,
         cfg,
         ctx.signal,
       );
@@ -11994,7 +12100,7 @@ const extension: SwarmExtension = (api) => {
           skipP: decision.skipP,
           lowConfidence: decision.lowConfidence,
           latencyMs: verdict.latencyMs,
-          provider: transport.provider,
+          provider: target.provider,
           sender,
           preview,
         },
@@ -12034,7 +12140,7 @@ const extension: SwarmExtension = (api) => {
 export default extension;
 `
     },
-    readme: '# slack-reply-gate\n\nLead is woken by every human message in a Slack thread the swarm takes part in, including "lol", an emoji, or two people chatting with each other. This extension asks Jev, [TypeSafe](https://typesafe.ai)\'s decision model, whether Lead should answer a new thread message, and drops the wake-up when it should not.\n\nInstall config:\n\n```json\n{ "mode": "shadow" }\n```\n\nStart in `shadow`, read the decisions in KV for a few days, then switch to `enforce`.\n\n## Modes\n\n| `mode` | Effect |\n|---|---|\n| `off` | Never evaluates. |\n| `shadow` (default) | Asks Jev and records the verdict. Never blocks. |\n| `enforce` | Asks Jev, records the verdict, and blocks the Lead task when the answer is no. The message gets :mute: instead: no Lead task, no reply, no outcome card. |\n\n## What it gates\n\nHook: `pre.task.create`, for tasks with origin `slack` whose description carries the thread buffer\'s header `[Thread follow-up — N message(s) buffered]`. Those are the non-mention thread replies that `src/slack/thread-buffer.ts` batches into a Lead task. A direct @mention of the bot creates a task without that header and is never gated.\n\nThe header counts only at the start of the description or right after the closing `</thread_context>`. Thread context quotes old messages verbatim, and an older Lead reply can quote the header itself, so a header inside the context is ignored. Only the text after the real header is treated as new.\n\n## Decision\n\n1. A follow-up with downloaded files (status `draft`) passes without a Jev call.\n2. **@mention pass-through.** A new message that @mentions Lead passes without a Jev call. A mention is the bot mention the engine rewrites to `<@U…> (that\'s you)`, a resolved `<@U…|lead>`, or a literal `@lead` (any name in `leadAliases`). Only the new messages are scanned, never the thread context, so an old mention earlier in the thread does not pass later banter.\n3. Otherwise one Jev call (one `choice` question, see [Jev transport](#jev-transport)) with the new message(s), the sender kind, and the last `contextMessages` thread messages. Labels: `direct_ask`, `followup_to_lead`, `instruction_to_lead`, `reaction_only`, `banter_between_others`, `not_addressed_to_lead`, `other`.\n4. The answer is no only when the top label is `reaction_only`, `banter_between_others`, or `not_addressed_to_lead`, and the summed probability of those three labels is at least `minConfidence`. A split between two skip labels is still a skip. An unsure verdict replies.\n\nSeveral buffered messages are judged together. One mention in any of them passes the batch.\n\n## Jev transport\n\nJev is reachable two ways. Both take the same request and return the same answer, so the decision is identical whichever one runs.\n\n| `provider` | Endpoint | Key | Model |\n|---|---|---|---|\n| `typesafe` | `POST https://api.typesafe.ai/v1/systemone` | `TYPESAFE_API_KEY` (or `apiKey`) | `model`, default `jev-latest` |\n| `openrouter` | `POST https://openrouter.ai/api/alpha/decisions` | `OPENROUTER_API_KEY` | `openrouterModel`, default `typesafe/jev-1.13` |\n| `auto` (default) | TypeSafe when its key is set, else OpenRouter | | |\n\nUnder `auto`, `TYPESAFE_API_KEY` wins when both keys are set. With neither key, every message fails open and the KV row names both secrets. Each decision row records the `provider` that answered.\n\n## Fail open\n\nEvery error lets the task through: a missing key, a TypeSafe HTTP error, a network error, a timeout, a malformed answer, or an unknown label. The handler never throws, so an outage cannot auto-disable the extension. Each failure is recorded as `fail-open` in KV and logged as a warning.\n\n## :mute: on drop (enforce)\n\nNo swarm tool or extension `ctx` method adds a Slack reaction, so the hook calls the Slack Web API with the bot token. It needs the `reactions:write` scope, which the Slack app already uses for its acceptance reactions.\n\n1. `reactions.remove` for each acceptance reaction the engine may have put on the triggering message: `eyes`, `heavy_plus_sign`, `zap`, `speech_balloon`, or their `SLACK_REACTION_ACCEPTED`, `SLACK_REACTION_BUFFERED`, `SLACK_REACTION_NOW`, and `SLACK_REACTION_STEERED` overrides. Slack only removes the bot\'s own reaction, so a human\'s :eyes: stays.\n2. `reactions.add` with `muteReaction` (default `mute`). `already_reacted` counts as success. Skipped when `muteReaction` is `""`.\n\nThe block returns first and the Slack calls run after it. A slow or failing Slack call never delays the drop or turns it back into a task. Set `muteReaction` to `""` for a true no-op: step 1 still clears the bot\'s acceptance reaction(s), and nothing is added.\n\n## Config\n\n| Key | Default | Notes |\n|---|---|---|\n| `mode` | `shadow` | `off`, `shadow`, or `enforce` |\n| `timeoutMs` | `3000` | Jev call timeout, capped at 4000 (the dispatcher cancels a handler at 5 s) |\n| `provider` | `auto` | `auto`, `typesafe`, or `openrouter`. See [Jev transport](#jev-transport) |\n| `model` | `jev-latest` | Jev model on TypeSafe |\n| `openrouterModel` | `typesafe/jev-1.13` | Jev model on OpenRouter |\n| `minConfidence` | `0.55` | Minimum summed skip probability to skip |\n| `contextMessages` | `6` | Thread messages sent to Jev, 0 to 20 |\n| `leadAliases` | `["lead"]` | A literal `@alias` in a new message counts as a mention |\n| `botSlackUserIds` | `[]` | Slack user ids labelled `bot` as the sender for Jev |\n| `apiKey` | unset | Explicit TypeSafe key. Prefer the `TYPESAFE_API_KEY` secret below |\n| `muteReaction` | `mute` | Reaction for a dropped message; `""` only removes the acceptance reaction(s) |\n| `slackTimeoutMs` | `5000` | Timeout per Slack call |\n\n## Required secrets\n\nAll are read from the API process environment at call time. Set them as global `swarm_config` secrets: the API process loads global rows into `process.env` at boot and on config reload.\n\n- `TYPESAFE_API_KEY` or `OPENROUTER_API_KEY`: one is required for any evaluation. Under `auto`, TypeSafe wins when both are set. Without either, every message fails open.\n- `SLACK_BOT_TOKEN`: the Slack app\'s bot token. A swarm with Slack connected already has it. Without it, `enforce` still drops the message but cannot touch its reactions, and logs a `mute-error`.\n\nNo key is written to config, KV, logs, or a description.\n\n## KV namespace `ext:slack-reply-gate`\n\n- `d:<epochMs>:<channel>_<threadTs>`: one row per decision, with `action` (`pass`, `shadow-skip`, `skipped`, `fail-open`), `provider`, `reason`, `confidence`, `skipP`, `latencyMs`, `sender`, and a 300-character `preview`.\n- `m:<epochMs>:<channel>_<threadTs>`: one row per mute attempt, with `action` (`muted`, `unreacted` when `muteReaction` is `""`, `mute-error`), `removed`, `added`, and `errors`.\n- `last`: the latest decision. Mute rows never overwrite it.\n- Counters: `total`, `mention`, `files`, `reply`, `shadow-skip`, `skipped`, `error`, `muted`, `unreacted`, `mute-error`, and `reason:<label>`.\n\n## Known limits\n\n- When Lead already has an active task in the thread, the buffer steers that task instead of creating one, so `pre.task.create` does not fire and the gate does not run.\n- A blocked flush makes the thread buffer log a `TaskCreationBlockedError`. Nothing is lost: the next follow-up\'s `<thread_context>` carries the earlier messages.\n- A flush of several messages mutes only the triggering (last) message. The others keep their acceptance reaction.\n'
+    readme: '# slack-reply-gate\n\nLead is woken by every human message in a Slack thread the swarm takes part in, including "lol", an emoji, or two people chatting with each other. This extension asks a SystemOne decision model, Jev ([TypeSafe](https://typesafe.ai)) or Clef (Cloudflare Workers AI), whether Lead should answer a new thread message, and drops the wake-up when it should not.\n\nInstall config:\n\n```json\n{ "mode": "shadow" }\n```\n\nStart in `shadow`, read the decisions in KV for a few days, then switch to `enforce`.\n\n## Modes\n\n| `mode` | Effect |\n|---|---|\n| `off` | Never evaluates. |\n| `shadow` (default) | Asks the model and records the verdict. Never blocks. |\n| `enforce` | Asks the model, records the verdict, and blocks the Lead task when the answer is no. The message gets :mute: instead: no Lead task, no reply, no outcome card. |\n\n## What it gates\n\nHook: `pre.task.create`, for tasks with origin `slack` whose description carries the thread buffer\'s header `[Thread follow-up — N message(s) buffered]`. Those are the non-mention thread replies that `src/slack/thread-buffer.ts` batches into a Lead task. A direct @mention of the bot creates a task without that header and is never gated.\n\nThe header counts only at the start of the description or right after the closing `</thread_context>`. Thread context quotes old messages verbatim, and an older Lead reply can quote the header itself, so a header inside the context is ignored. Only the text after the real header is treated as new.\n\n## Decision\n\n1. A follow-up with downloaded files (status `draft`) passes without a decision call.\n2. **@mention pass-through.** A new message that @mentions Lead passes without a decision call. A mention is the bot mention the engine rewrites to `<@U…> (that\'s you)`, a resolved `<@U…|lead>`, or a literal `@lead` (any name in `leadAliases`). Only the new messages are scanned, never the thread context, so an old mention earlier in the thread does not pass later banter.\n3. Otherwise one decision call (one `choice` question, see [Provider](#provider)) with the new message(s), the sender kind, and the last `contextMessages` thread messages. Labels: `direct_ask`, `followup_to_lead`, `instruction_to_lead`, `reaction_only`, `banter_between_others`, `not_addressed_to_lead`, `other`.\n4. The answer is no only when the top label is `reaction_only`, `banter_between_others`, or `not_addressed_to_lead`, and the summed probability of those three labels is at least `minConfidence`. A split between two skip labels is still a skip. An unsure verdict replies.\n\nSeveral buffered messages are judged together. One mention in any of them passes the batch.\n\n## Provider\n\nThe decision is made on the API server by the `system-one-decide` tool (`ctx.swarm.systemOne_decide`), the same path a `system-one-decision` workflow node takes. The server reads the provider\'s credential, sends the request, and validates the answer, so every SystemOne host works and no key enters the hook.\n\n| `provider` | Model | Credential |\n|---|---|---|\n| `typesafe` | Jev, `model` (default `jev-latest`) | `TYPESAFE_API_KEY` |\n| `openrouter` | Jev, `openrouterModel` (default `typesafe/jev-1.13`) | `OPENROUTER_API_KEY` |\n| `cloudflare` | Clef, `cloudflareModel` (default `clef`, or `clef-flash`) | `CLOUDFLARE_API_TOKEN` (or `CLOUDFLARE_API_KEY`) and `CLOUDFLARE_ACCOUNT_ID` |\n| `laya`, `openai` | The host\'s default model | See the workflows guide |\n| `auto` (default) | The first of typesafe, openrouter, cloudflare whose credential is set. A provider the server refuses for a deployment setting (openrouter when `OPENROUTER_BASE_URL` points at a gateway) is skipped for the next one | |\n\nWith no credential for `auto`, every message fails open and the KV row names the secrets. Each decision row records the `provider` that answered. `minConfidence` was tuned on Jev; check Clef\'s verdicts in `shadow` before you enforce on it.\n\n## Fail open\n\nEvery error lets the task through: a missing key, a provider error relayed by the server, a network error, a timeout, a malformed answer, or an unknown label. The handler never throws, so an outage cannot auto-disable the extension. Each failure is recorded as `fail-open` in KV and logged as a warning.\n\n## :mute: on drop (enforce)\n\nNo swarm tool or extension `ctx` method adds a Slack reaction, so the hook calls the Slack Web API with the bot token. It needs the `reactions:write` scope, which the Slack app already uses for its acceptance reactions.\n\n1. `reactions.remove` for each acceptance reaction the engine may have put on the triggering message: `eyes`, `heavy_plus_sign`, `zap`, `speech_balloon`, or their `SLACK_REACTION_ACCEPTED`, `SLACK_REACTION_BUFFERED`, `SLACK_REACTION_NOW`, and `SLACK_REACTION_STEERED` overrides. Slack only removes the bot\'s own reaction, so a human\'s :eyes: stays.\n2. `reactions.add` with `muteReaction` (default `mute`). `already_reacted` counts as success. Skipped when `muteReaction` is `""`.\n\nThe block returns first and the Slack calls run after it. A slow or failing Slack call never delays the drop or turns it back into a task. Set `muteReaction` to `""` for a true no-op: step 1 still clears the bot\'s acceptance reaction(s), and nothing is added.\n\n## Config\n\n| Key | Default | Notes |\n|---|---|---|\n| `mode` | `shadow` | `off`, `shadow`, or `enforce` |\n| `timeoutMs` | `3000` | Decision call timeout, capped at 4000 (the dispatcher cancels a handler at 5 s) |\n| `provider` | `auto` | `auto`, `typesafe`, `openrouter`, `cloudflare`, `laya`, or `openai`. See [Provider](#provider) |\n| `model` | `jev-latest` | Jev model on TypeSafe |\n| `openrouterModel` | `typesafe/jev-1.13` | Jev model on OpenRouter |\n| `cloudflareModel` | `clef` | Clef model on Cloudflare Workers AI |\n| `minConfidence` | `0.55` | Minimum summed skip probability to skip |\n| `contextMessages` | `6` | Thread messages sent to the model, 0 to 20 |\n| `leadAliases` | `["lead"]` | A literal `@alias` in a new message counts as a mention |\n| `botSlackUserIds` | `[]` | Slack user ids labelled `bot` as the sender for the model |\n| `muteReaction` | `mute` | Reaction for a dropped message; `""` only removes the acceptance reaction(s) |\n| `slackTimeoutMs` | `5000` | Timeout per Slack call |\n\n## Required secrets\n\nSet them as global `swarm_config` values. The server reads the provider credential from the global row when it makes the decision. `auto` and the Slack token read the API process environment, which loads global rows at boot and on config reload.\n\n- One provider credential from the [Provider](#provider) table is required for any evaluation. Without one, every message fails open. The `apiKey` config field of earlier versions is gone: the hook never holds a key, so store it as the global `TYPESAFE_API_KEY` secret.\n- `SLACK_BOT_TOKEN`: the Slack app\'s bot token. A swarm with Slack connected already has it. Without it, `enforce` still drops the message but cannot touch its reactions, and logs a `mute-error`.\n\nNo key is written to config, KV, logs, or a description.\n\n## KV namespace `ext:slack-reply-gate`\n\n- `d:<epochMs>:<channel>_<threadTs>`: one row per decision, with `action` (`pass`, `shadow-skip`, `skipped`, `fail-open`), `provider`, `reason`, `confidence`, `skipP`, `latencyMs`, `sender`, and a 300-character `preview`.\n- `m:<epochMs>:<channel>_<threadTs>`: one row per mute attempt, with `action` (`muted`, `unreacted` when `muteReaction` is `""`, `mute-error`), `removed`, `added`, and `errors`.\n- `last`: the latest decision. Mute rows never overwrite it.\n- Counters: `total`, `mention`, `files`, `reply`, `shadow-skip`, `skipped`, `error`, `muted`, `unreacted`, `mute-error`, and `reason:<label>`.\n\n## Known limits\n\n- When Lead already has an active task in the thread, the buffer steers that task instead of creating one, so `pre.task.create` does not fire and the gate does not run.\n- A blocked flush makes the thread buffer log a `TaskCreationBlockedError`. Nothing is lost: the next follow-up\'s `<thread_context>` carries the earlier messages.\n- A flush of several messages mutes only the triggering (last) message. The others keep their acceptance reaction.\n'
   },
   "task-digest": {
     manifestFile: "manifest.yaml",
@@ -13220,6 +13326,17 @@ async function handleFleetBenchmark(req, res, pathSegments, queryParams) {
 // src/http/fs.ts
 init_zod();
 init_db3();
+
+// src/be/db/tasks/draft-text.ts
+init_runtime();
+async function appendDraftTaskText(taskId, block) {
+  const result = await getDbClient2().run("UPDATE agent_tasks SET task = task || ?, lastUpdatedAt = ? WHERE id = ? AND status = 'draft'", [`
+
+${block}`, new Date().toISOString(), taskId]);
+  return result.changes > 0;
+}
+
+// src/http/fs.ts
 init_rbac();
 init_types();
 
@@ -13343,7 +13460,7 @@ var uploadTaskFileRoute = route({
   pattern: ["api", "fs", "tasks", null, "files"],
   session: { taskParam: "taskId" },
   summary: "Upload a binary task file attachment",
-  description: "Accepts a raw binary request body. Pass the display/path name as the `name` query parameter.",
+  description: "Accepts a raw binary request body. Pass the display/path name as the `name` query parameter. An `audio/*` file uploaded to a `draft` task gets a `[File: …]` line and its transcript (or why there is none) appended to the task text before the response; a failed transcription never fails the upload.",
   tags: ["FS"],
   params: taskParams,
   query: uploadQuery,
@@ -13504,7 +13621,7 @@ async function handleFs(req, res, pathSegments, queryParams, myAgentId) {
       return notFound(res, "Task not found");
     if (!await canMutateTask(task, myAgentId, req))
       return forbidden(res);
-    return sendUpload(req, res, parsed.params.taskId, parsed.query, myAgentId ?? null);
+    return sendUpload(req, res, parsed.params.taskId, parsed.query, myAgentId ?? null, task.status === "draft");
   }
   if (listTaskFilesRoute.match(req.method, pathSegments)) {
     const parsed = await listTaskFilesRoute.parse(req, res, pathSegments, queryParams);
@@ -13531,7 +13648,7 @@ async function handleFs(req, res, pathSegments, queryParams, myAgentId) {
   }
   return false;
 }
-async function sendUpload(req, res, taskId, query, agentId) {
+async function sendUpload(req, res, taskId, query, agentId, isDraft) {
   const body = await readRawBody(req, MAX_TASK_ATTACHMENT_BYTES);
   if (body === BODY_TOO_LARGE) {
     jsonError(res, `Payload too large (max ${MAX_TASK_ATTACHMENT_BYTES} bytes)`, 413);
@@ -13572,9 +13689,27 @@ async function sendUpload(req, res, taskId, query, agentId) {
     isPrimary: query.isPrimary === "true",
     createdBy: auth?.kind === "user" ? auth.userId : undefined
   });
+  const mimeType = contentType.split(";")[0].trim().toLowerCase();
+  if (isDraft && mimeType.startsWith("audio/")) {
+    await appendAudioTranscript(taskId, query.name, mimeType, body);
+  }
   uploadTaskFileRoute.respond(res, 201, attachment);
   return true;
 }
+async function appendAudioTranscript(taskId, name, mimeType, body) {
+  try {
+    const notes = await transcribeAudioNotes([{ key: name, name, data: new Blob([body], { type: mimeType }), mimeType }], "[fs]");
+    const note = notes.get(name);
+    if (!note)
+      return;
+    if (!await appendDraftTaskText(taskId, `[File: ${name} (${mimeType})]
+${note}`)) {
+      console.warn(`[fs] task ${taskId} left draft before the transcript of ${name} was added`);
+    }
+  } catch (error) {
+    console.warn(scrubSecrets(`[fs] could not add the transcript of ${name} to task ${taskId}: ${error instanceof Error ? error.message : String(error)}`));
+  }
+}
 async function sendDownload(res, attachment) {
   const provider = getFileStorageProvider2();
   if (backingProviderId(attachment) !== provider.id) {
@@ -13634,23 +13769,6 @@ async function sendDelete(res, attachment) {
   res.end();
   return true;
 }
-function scopeFromAttachment(attachment) {
-  const storedKey = attachment.providerKey ?? attachment.path ?? "";
-  return {
-    taskId: attachment.taskId,
-    name: attachment.name,
-    key: storedKey.trim() ? storedKey : undefined,
-    orgId: attachment.orgId,
-    driveId: attachment.driveId
-  };
-}
-function backingProviderId(attachment) {
-  if (attachment.kind === "agent-fs")
-    return attachment.providerId ?? "agent-fs";
-  if (attachment.providerId === "local-fs")
-    return "local-fs";
-  return null;
-}
 async function findAttachment(req, myAgentId, taskId, attachmentId, res) {
   if (!await getTaskById2(taskId)) {
     notFound(res, "Task not found");
@@ -16408,6 +16526,29 @@ init_db3();
 init_env_flag();
 init_request_auth_context();
 init_task_tool_manifest();
+
+// src/http/mcp-body.ts
+var MCP_BODY_TOO_LARGE = Symbol("mcp-body-too-large");
+async function readMcpBody(req, res) {
+  try {
+    return await parseBody(req, MCP_MAX_REQUEST_BODY_BYTES);
+  } catch (error) {
+    if (!(error instanceof RequestBodyTooLargeError))
+      throw error;
+    res.writeHead(413, { "Content-Type": "application/json", Connection: "close" });
+    res.end(JSON.stringify({
+      jsonrpc: "2.0",
+      error: {
+        code: -32000,
+        message: `Payload Too Large: Request body must not exceed ${MCP_MAX_REQUEST_BODY_BYTES} bytes`
+      },
+      id: null
+    }));
+    return MCP_BODY_TOO_LARGE;
+  }
+}
+
+// src/http/mcp.ts
 var DEFAULT_MCP_TRANSPORT_IDLE_TIMEOUT_MS = 2 * 60 * 60 * 1000;
 function respondNoMcpSession(res, sessionId) {
   const notFound = Boolean(sessionId);
@@ -16507,17 +16648,16 @@ async function handleMcp(req, res, transports, sessionActivity = {}, sessionAgen
   if (agentMismatch)
     return true;
   if (req.method === "POST") {
-    const chunks = [];
-    for await (const chunk of req) {
-      chunks.push(chunk);
-    }
-    const body = JSON.parse(Buffer.concat(chunks).toString());
-    if (!sessionId && body.method === "server/discover") {
+    const body = await readMcpBody(req, res);
+    if (body === MCP_BODY_TOO_LARGE)
+      return true;
+    const rpc = body;
+    if (!sessionId && rpc?.method === "server/discover") {
       res.writeHead(200, { "Content-Type": "application/json" });
       res.end(JSON.stringify({
         jsonrpc: "2.0",
         error: { code: -32601, message: "Method not found" },
-        id: body.id ?? null
+        id: rpc.id ?? null
       }));
       return true;
     }
@@ -17854,7 +17994,8 @@ function createUserServer(user) {
   }, {
     capabilities: {
       logging: {}
-    }
+    },
+    maxToolInputElements: MCP_MAX_TOOL_INPUT_ELEMENTS
   });
   const registerTool = createToolRegistrar(server);
   const sendTaskConfig = {
@@ -17972,11 +18113,9 @@ async function handleMcpUser(req, res, transports, sessionUsers, sessionActivity
     return unauthorized2(res);
   }
   if (req.method === "POST") {
-    const chunks = [];
-    for await (const chunk of req) {
-      chunks.push(chunk);
-    }
-    const body = JSON.parse(Buffer.concat(chunks).toString());
+    const body = await readMcpBody(req, res);
+    if (body === MCP_BODY_TOO_LARGE)
+      return true;
     let transport;
     if (sessionId && transports[sessionId]) {
       transport = transports[sessionId];
@@ -18118,6 +18257,9 @@ async function hasRetrievalForTask(taskId, memoryId) {
   return row != null;
 }
 
+// src/http/memory.ts
+init_search_candidates();
+
 // src/be/memory/usefulness-stats.ts
 init_db3();
 async function getUsefulnessStats(options = {}) {
@@ -18958,7 +19100,7 @@ async function handleMemory(req, res, pathSegments, callerAgentId) {
       const store = getMemoryStore2();
       const queryEmbedding = await provider.embed(query);
       const candidateLimit = Math.min(limit, 20) * CANDIDATE_SET_MULTIPLIER;
-      const candidates = await store.search(queryEmbedding ?? new Float32Array(0), myAgentId, {
+      const candidates = await searchMemoryCandidates(store, queryEmbedding ?? new Float32Array(0), myAgentId, {
         scope,
         limit: candidateLimit,
         source,
@@ -19039,7 +19181,7 @@ async function handleMemory(req, res, pathSegments, callerAgentId) {
         const provider = getEmbeddingProvider2();
         const queryEmbedding = await provider.embed(query.trim());
         const candidateLimit = Math.min(4096, Math.max(offset + pageLimit, pageLimit) * CANDIDATE_SET_MULTIPLIER);
-        let candidates = await store.search(queryEmbedding ?? new Float32Array(0), viewer.agentId, {
+        let candidates = await searchMemoryCandidates(store, queryEmbedding ?? new Float32Array(0), viewer.agentId, {
           scope,
           limit: candidateLimit,
           isLead: viewer.seesAll,
@@ -21675,6 +21817,7 @@ async function buildSignals(state) {
       slack: integrations.slack === "configured",
       github: Boolean(process.env.GITHUB_TOKEN?.trim()) || integrations.github === "verified",
       gitlab: Boolean(process.env.GITLAB_TOKEN?.trim()),
+      bitbucket: Boolean(process.env.BITBUCKET_TOKEN?.trim()),
       linear: integrations.linear === "verified",
       jira: integrations.jira === "verified"
     },
@@ -21974,6 +22117,35 @@ route({
   auth: { apiKey: false }
 });
 var PROXY_PREFIX = "/@swarm/api/";
+var PAGE_ID_REQUEST_HEADER = "x-swarm-page-id";
+var PAGE_PATH_RE = /^\/p\/([^/.]+)/;
+function requestedPageId(req) {
+  const raw = req.headers[PAGE_ID_REQUEST_HEADER];
+  const fromHeader = Array.isArray(raw) ? raw[0] : raw;
+  if (fromHeader !== undefined)
+    return isCookieSafePageId(fromHeader) ? fromHeader : null;
+  const referer = req.headers.referer;
+  if (!referer)
+    return;
+  let refererUrl;
+  try {
+    refererUrl = new URL(referer);
+  } catch {
+    return;
+  }
+  if (refererUrl.host !== req.headers.host)
+    return;
+  const match = PAGE_PATH_RE.exec(refererUrl.pathname);
+  if (!match)
+    return;
+  let fromReferer;
+  try {
+    fromReferer = decodeURIComponent(match[1]);
+  } catch {
+    return;
+  }
+  return isCookieSafePageId(fromReferer) ? fromReferer : undefined;
+}
 function isSafeProxySuffix(suffix) {
   if (suffix.length === 0)
     return true;
@@ -22012,11 +22184,13 @@ async function handlePageProxy(req, res) {
     jsonError(res, "not found", 404);
     return true;
   }
-  const payload = await extractAndVerifyCookie(req);
-  if (!payload) {
+  const claimedPageId = requestedPageId(req);
+  const session = claimedPageId === undefined ? await extractLegacyPageSession(req) : claimedPageId === null ? null : await extractPageSession(req, claimedPageId);
+  if (!session) {
     jsonError(res, "no page session", 401);
     return true;
   }
+  const { payload } = session;
   const page = await getPage2(payload.pageId);
   if (!page) {
     jsonError(res, "page session no longer valid", 401);
@@ -22034,7 +22208,7 @@ async function handlePageProxy(req, res) {
   const headers = {
     Authorization: `Bearer ${apiKey}`,
     "X-Page-Id": page.id,
-    "X-Page-Session": parseCookieHeader(req.headers.cookie, "page_session") ?? ""
+    "X-Page-Session": session.token
   };
   const reqContentType = req.headers["content-type"];
   if (reqContentType) {
@@ -22678,7 +22852,7 @@ var updateTaskVcsRoute = route({
   tags: ["Tasks"],
   params: object2({ id: string2() }),
   body: object2({
-    vcsProvider: _enum2(["github", "gitlab", "azure-devops"]),
+    vcsProvider: _enum2(["github", "gitlab", "azure-devops", "bitbucket"]),
     vcsRepo: string2(),
     vcsNumber: number2().int().positive(),
     vcsUrl: string2().url()
@@ -24378,12 +24552,12 @@ ${defuseFeedbackTags(note)}
     }
     const auth = getRequestAuth(req);
     const identity = auth?.kind === "user" ? { uid: auth.userId, name: auth.user.name } : auth?.kind === "operator" ? { name: `guest-${randomUUID4().slice(0, 8)}`, op: true } : undefined;
-    const cookie = await issuePageSessionCookie(page.id, {
+    const cookies = await pageSessionSetCookies(req, page.id, {
       dev: isDevRequest(req),
       ...identity
     });
     applyLaunchCors(req, res);
-    res.setHeader("Set-Cookie", cookie);
+    res.setHeader("Set-Cookie", cookies);
     res.writeHead(204);
     res.end();
     return true;
@@ -24405,10 +24579,15 @@ class SwarmSDK {
     this.channel = async (name) => (await loadRealtime()).channel(name);
 
     const base = '/@swarm/api';
+    // Each page has its own session cookie. Naming the page tells the proxy
+    // which one to read; the cookie's signed payload must still match it.
+    const pathParts = typeof location === 'undefined' ? [] : location.pathname.split('/');
+    const pageId = pathParts[1] === 'p' && pathParts[2] ? pathParts[2].split('.')[0] : '';
     const call = async (method, path, body) => {
-      const init = { method };
+      const init = { method, headers: {} };
+      if (pageId) init.headers['X-Swarm-Page-Id'] = pageId;
       if (body !== undefined) {
-        init.headers = { 'Content-Type': 'application/json' };
+        init.headers['Content-Type'] = 'application/json';
         init.body = JSON.stringify(body);
       }
       const res = await fetch(base + path, init);
@@ -25593,7 +25772,7 @@ var FEEDBACK_OVERLAY_JS = `
     return fetch('/@swarm/api/pages/' + encodeURIComponent(pageId) + '/feedback', {
       method: 'POST',
       credentials: 'same-origin',
-      headers: { 'Content-Type': 'application/json' },
+      headers: { 'Content-Type': 'application/json', 'X-Swarm-Page-Id': pageId },
       body: JSON.stringify(payload),
     }).then(function (res) {
       return res.text().then(function (text) {
@@ -25979,23 +26158,8 @@ function buildCsp() {
 function isAccessible(page, cookiePayload) {
   if (page.authMode === "public")
     return { ok: true };
-  if (cookiePayload) {
-    if (cookiePayload.pageId === page.id)
-      return { ok: true };
-    if (page.authMode === "password") {
-      return {
-        ok: false,
-        status: 401,
-        reason: "password required",
-        needsPassword: true
-      };
-    }
-    return {
-      ok: false,
-      status: 403,
-      reason: "page-session cookie scoped to a different page id"
-    };
-  }
+  if (cookiePayload?.pageId === page.id)
+    return { ok: true };
   if (page.authMode === "authed") {
     return {
       ok: false,
@@ -26070,9 +26234,9 @@ async function handlePagesPublic(req, res, pathSegments, queryParams) {
     res.end(JSON.stringify({ error: "Page not found" }));
     return true;
   }
-  const cookiePayload = await extractAndVerifyCookie(req);
+  const cookiePayload = await extractAndVerifyCookie(req, page.id);
   const access = isAccessible(page, cookiePayload);
-  let inlineSetCookie = "";
+  let inlineSetCookie = [];
   if (!access.ok) {
     if (access.needsPassword) {
       const candidate = extractPasswordCandidate(req, queryParams);
@@ -26084,7 +26248,7 @@ async function handlePagesPublic(req, res, pathSegments, queryParams) {
           matched = false;
         }
         if (matched) {
-          inlineSetCookie = await issuePageSessionCookie(page.id, {
+          inlineSetCookie = await pageSessionSetCookies(req, page.id, {
             dev: isLocalhostRequest(req)
           });
         } else {
@@ -26111,7 +26275,7 @@ async function handlePagesPublic(req, res, pathSegments, queryParams) {
   }
   if (isJsonRoute) {
     res.setHeader("Cache-Control", "no-store");
-    if (inlineSetCookie)
+    if (inlineSetCookie.length > 0)
       res.setHeader("Set-Cookie", inlineSetCookie);
     publicPageJsonRoute.respond(res, 200, {
       id: page.id,
@@ -26132,7 +26296,7 @@ async function handlePagesPublic(req, res, pathSegments, queryParams) {
       "X-Content-Type-Options": "nosniff",
       "Content-Security-Policy": "default-src 'none'; style-src 'unsafe-inline'; sandbox"
     };
-    if (inlineSetCookie)
+    if (inlineSetCookie.length > 0)
       headers["Set-Cookie"] = inlineSetCookie;
     res.writeHead(200, headers);
     res.end(page.body);
@@ -26148,15 +26312,17 @@ async function handlePagesPublic(req, res, pathSegments, queryParams) {
         "Content-Security-Policy": buildCsp(),
         "X-Content-Type-Options": "nosniff"
       };
-      if (inlineSetCookie)
+      if (inlineSetCookie.length > 0)
         headers["Set-Cookie"] = inlineSetCookie;
       res.writeHead(200, headers);
       res.end(printableJsonPageHtml(page));
       await bumpViewCount(page.id);
       return true;
     }
-    const headers = { Location: `${getAppBaseUrl2()}/pages/${page.id}` };
-    if (inlineSetCookie)
+    const headers = {
+      Location: `${getAppBaseUrl2()}/pages/${page.id}`
+    };
+    if (inlineSetCookie.length > 0)
       headers["Set-Cookie"] = inlineSetCookie;
     res.writeHead(302, headers);
     res.end();
@@ -26170,7 +26336,7 @@ async function handlePagesPublic(req, res, pathSegments, queryParams) {
     "Content-Security-Policy": buildCsp(),
     "X-Content-Type-Options": "nosniff"
   };
-  if (inlineSetCookie)
+  if (inlineSetCookie.length > 0)
     headers["Set-Cookie"] = inlineSetCookie;
   res.writeHead(200, headers);
   res.end(html);
@@ -31137,6 +31303,7 @@ var agentTaskBodySchema = object2({
   routingNote: string2().max(200).optional(),
   tags: array2(string2()).optional(),
   priority: number2().int().min(0).max(100).optional(),
+  dependsOn: array2(uuid()).optional(),
   offerMode: boolean().optional(),
   dir: string2().min(1).optional(),
   vcsRepo: string2().min(1).optional(),
@@ -31617,6 +31784,7 @@ async function handleScriptRuns(req, res, pathSegments, queryParams, agentId) {
           routingSource: parsed.body.routingReason ? "declared" : parsed.body.agentId ? "engine_default" : undefined,
           tags: parsed.body.tags,
           priority: parsed.body.priority,
+          dependsOn: parsed.body.dependsOn,
           offeredTo: parsed.body.offerMode ? parsed.body.agentId : undefined,
           taskType: "script-run-step",
           source: "mcp",
@@ -33101,7 +33269,10 @@ async function handleSessionData(req, res, pathSegments, queryParams, myAgentId)
 
 // src/http/sessions.ts
 init_zod();
+init_key();
 init_db3();
+init_session_moves();
+init_session_tree();
 init_rbac_roles();
 init_steering();
 init_users();
@@ -33143,7 +33314,54 @@ var SessionListItemSchema = object2({
   root: union2([AgentTaskSchema, AgentTaskSummarySchema2]),
   chainTaskCount: number2().int(),
   lastActivityAt: string2(),
-  latestStatus: AgentTaskStatusSchema
+  latestStatus: AgentTaskStatusSchema,
+  readState: _enum2(["unread", "read", "later", "done"]).optional(),
+  snoozeUntil: string2().nullable().optional(),
+  needsYou: boolean().optional(),
+  groupKey: string2().optional(),
+  shared: boolean().optional(),
+  people: array2(object2({ id: string2(), name: string2() })).optional(),
+  peopleCount: number2().int().optional(),
+  preview: string2().nullable().optional(),
+  shares: array2(object2({
+    userId: string2().nullable(),
+    name: string2().nullable(),
+    access: _enum2(["read", "write"])
+  })).optional()
+});
+var SessionSectionCountsSchema = object2({
+  total: number2().int(),
+  unread: number2().int(),
+  running: number2().int(),
+  needsYou: number2().int()
+});
+var SessionTreeGroupSchema = SessionSectionCountsSchema.extend({
+  key: string2(),
+  lastActivityAt: string2()
+});
+var SessionTreeResponseSchema = object2({
+  groups: array2(SessionTreeGroupSchema),
+  inbox: SessionSectionCountsSchema,
+  later: SessionSectionCountsSchema,
+  done: SessionSectionCountsSchema,
+  noGroup: SessionSectionCountsSchema
+});
+var SessionApprovalSchema = object2({
+  id: string2(),
+  status: literal2("pending"),
+  sourceTaskId: string2(),
+  title: string2()
+});
+var SessionKeyFilterSchema = string2().transform((value, ctx) => {
+  try {
+    return normalizeAssetKey(value);
+  } catch (error) {
+    ctx.addIssue({
+      code: "custom",
+      message: error instanceof Error ? error.message : "Invalid asset key"
+    });
+    return NEVER;
+  }
 });
 var TaskWithSteeringSchema = AgentTaskSchema.extend({
   citations: array2(TaskCitationSchema),
@@ -33399,8 +33617,14 @@ var listSessions = route({
     q: string2().optional(),
     requestedByUserId: string2().min(1).optional(),
     contextKeyPrefix: string2().min(1).optional(),
+    keyPrefix: SessionKeyFilterSchema.optional(),
+    groupKey: SessionKeyFilterSchema.optional(),
+    noGroup: _enum2(["true", "false"]).transform((v) => v === "true").optional(),
+    triage: _enum2(["inbox", "later", "done", "unread"]).optional(),
+    status: _enum2(["running", "failed", "needs"]).optional(),
+    withUserId: string2().min(1).optional(),
     fields: _enum2(["full", "slim"]).optional(),
-    scope: _enum2(["mine", "shared"]).optional()
+    scope: _enum2(["mine", "shared", "tree"]).optional().describe("mine: owned sessions. shared: sessions shared with me. tree: Sessions that GET /api/session-tree counts: mine plus shared with me, no ownerless roots. A bypass actor sees every root with tree scope.")
   }),
   responses: {
     200: {
@@ -33416,6 +33640,110 @@ var listSessions = route({
   },
   auth: { apiKey: true }
 });
+var sessionTree = route({
+  method: "get",
+  path: "/api/session-tree",
+  pattern: ["api", "session-tree"],
+  summary: "Get session groups and triage counts",
+  tags: ["Sessions"],
+  responses: {
+    200: { description: "Visible groups and section counts", schema: SessionTreeResponseSchema },
+    401: { description: "Unauthorized" }
+  },
+  auth: { apiKey: true }
+});
+var SESSION_MOVE_LIMIT = 200;
+var SESSION_MOVE_OWNER_ONLY = "Only the session owner can move this group";
+var SESSION_MOVE_UNAVAILABLE = "Session not found or not accessible";
+var SessionMoveResultSchema = object2({
+  moved: array2(string2()),
+  skipped: array2(object2({ rootTaskId: string2(), reason: string2() }))
+});
+var sessionMoveRbac = {
+  ungated: "per-session access, per-task task.fs.mutate, and asset-key write checks in the handler, as PATCH /api/assets/task/{id}/key"
+};
+var sessionMoveResponses = {
+  400: { description: "Invalid namespace or request" },
+  403: { description: "Personal destination not authorized" },
+  409: { description: "Moves blocked until audit warnings are repaired" }
+};
+var moveSessions = route({
+  method: "post",
+  path: "/api/session-moves",
+  pattern: ["api", "session-moves"],
+  summary: "Move sessions into a group or reset their keys",
+  tags: ["Sessions"],
+  session: { none: "The handler checks each root and reports denied roots as skipped" },
+  body: object2({
+    rootTaskIds: array2(string2().min(1)).min(1).max(SESSION_MOVE_LIMIT),
+    groupKey: AssetKeySchema.nullable()
+  }),
+  responses: {
+    200: { description: "Moved and skipped sessions", schema: SessionMoveResultSchema },
+    ...sessionMoveResponses
+  },
+  auth: { apiKey: true },
+  rbac: sessionMoveRbac
+});
+var moveSessionPrefix = route({
+  method: "post",
+  path: "/api/session-moves/prefix",
+  pattern: ["api", "session-moves", "prefix"],
+  summary: "Rename or delete a session group",
+  tags: ["Sessions"],
+  body: object2({ from: AssetKeySchema, to: AssetKeySchema.nullable() }),
+  responses: {
+    200: {
+      description: "Moved and skipped sessions and remaining movable roots",
+      schema: SessionMoveResultSchema.extend({ remaining: number2().int().min(0) })
+    },
+    ...sessionMoveResponses
+  },
+  auth: { apiKey: true },
+  rbac: sessionMoveRbac
+});
+async function withSessionMove(req, res, myAgentId, destination, run) {
+  try {
+    const changedBy = await resolveHttpAuditUserId(req, myAgentId);
+    const actor = await resolveSessionActor2(req, myAgentId);
+    const key = destination === null ? null : await authorizeAssetKeyWrite(destination, changedBy);
+    await assertAssetKeyMovesAllowed2();
+    await run({ actor, changedBy: changedBy ?? undefined, key });
+  } catch (error) {
+    if (error instanceof AssetKeyAuthorizationError) {
+      jsonError(res, error.message, error.statusCode);
+    } else if (error instanceof AssetKeyMovesBlockedError2) {
+      jsonError(res, error.message, 409);
+    } else {
+      throw error;
+    }
+  }
+}
+async function checkSessionMove(rootTaskId, actor, req, myAgentId, options = {}) {
+  const root = await getTaskById2(rootTaskId);
+  if (!root)
+    return { reason: SESSION_MOVE_UNAVAILABLE };
+  if (options.ownerOnly) {
+    if (actor.kind === "user" && (!actor.userId || root.requestedByUserId !== actor.userId)) {
+      return { reason: SESSION_MOVE_OWNER_ONLY };
+    }
+  } else {
+    const access = await sessionAccessFor2(actor, root.id);
+    if (access === "none")
+      return { reason: SESSION_MOVE_UNAVAILABLE };
+    if (!hasSessionAccess(access, "write"))
+      return { reason: "Session write access required" };
+  }
+  if (root.parentTaskId)
+    return { reason: "Task is not a session root" };
+  const tasks = await getRootTaskChain2(root.id);
+  for (const task of tasks) {
+    if (!await canMutateTaskNamespace(task, myAgentId, req)) {
+      return { reason: "Not authorized to move this task namespace" };
+    }
+  }
+  return { taskIds: tasks.map((task) => task.id) };
+}
 var getSession = route({
   method: "get",
   path: "/api/sessions/{rootTaskId}",
@@ -33431,7 +33759,10 @@ var getSession = route({
         root: TaskWithSteeringSchema,
         chain: array2(TaskWithSteeringSchema),
         access: SessionAccessSchema,
-        owner: SessionOwnerSchema.nullable()
+        owner: SessionOwnerSchema.nullable(),
+        approvals: array2(SessionApprovalSchema).optional(),
+        readState: _enum2(["unread", "read", "later", "done"]).optional(),
+        lastActivityAt: string2().optional()
       })
     },
     401: { description: "Unauthorized" },
@@ -33562,11 +33893,12 @@ async function handleSessions(req, res, pathSegments, queryParams, myAgentId) {
       return true;
     const sources = parsed.query.source ? parsed.query.source.split(",").map((s) => s.trim()).filter(Boolean) : undefined;
     const actor = await resolveSessionActor2(req, myAgentId);
-    if (actor.kind === "bypass" && parsed.query.scope) {
+    const limit = Math.min(200, Math.max(0, parsed.query.limit ?? 25));
+    if (actor.kind === "bypass" && parsed.query.scope && parsed.query.scope !== "tree") {
       listSessions.respond(res, 200, {
         sessions: [],
         total: 0,
-        limit: parsed.query.limit ?? 25,
+        limit,
         offset: parsed.query.offset ?? 0
       });
       return true;
@@ -33576,11 +33908,24 @@ async function handleSessions(req, res, pathSegments, queryParams, myAgentId) {
       q: parsed.query.q,
       requestedByUserId: parsed.query.requestedByUserId,
       contextKeyPrefix: parsed.query.contextKeyPrefix,
-      ...actor.kind === "user" ? { viewer: { userId: actor.userId, scope: parsed.query.scope ?? "all" } } : {}
+      keyPrefix: parsed.query.keyPrefix,
+      groupKey: parsed.query.groupKey,
+      noGroup: parsed.query.noGroup,
+      triage: parsed.query.triage,
+      status: parsed.query.status,
+      withUserId: parsed.query.withUserId,
+      now: new Date().toISOString(),
+      tree: parsed.query.scope === "tree",
+      ...actor.kind === "user" ? {
+        viewer: {
+          userId: actor.userId,
+          scope: parsed.query.scope === "tree" ? "all" : parsed.query.scope ?? "all"
+        }
+      } : {}
     };
     const baseOpts = {
       ...filterOpts,
-      limit: parsed.query.limit,
+      limit,
       offset: parsed.query.offset
     };
     const sessions = parsed.query.fields === "full" ? await listRecentSessions2(baseOpts) : await listRecentSessions2({ ...baseOpts, slim: true });
@@ -33588,11 +33933,104 @@ async function handleSessions(req, res, pathSegments, queryParams, myAgentId) {
     listSessions.respond(res, 200, {
       sessions,
       total,
-      limit: parsed.query.limit ?? 25,
+      limit,
       offset: parsed.query.offset ?? 0
     });
     return true;
   }
+  if (sessionTree.match(req.method, pathSegments)) {
+    const parsed = await sessionTree.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    sessionTree.respond(res, 200, await getSessionTree(await resolveSessionActor2(req, myAgentId)));
+    return true;
+  }
+  if (moveSessions.match(req.method, pathSegments)) {
+    const parsed = await moveSessions.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    await withSessionMove(req, res, myAgentId, parsed.body.groupKey, async ({ actor, changedBy, key }) => {
+      const skipped = [];
+      const moves = [];
+      for (const rootId of new Set(parsed.body.rootTaskIds)) {
+        const checked = await checkSessionMove(rootId, actor, req, myAgentId);
+        if ("reason" in checked) {
+          skipped.push({ rootTaskId: rootId, reason: checked.reason });
+        } else {
+          moves.push({
+            rootId,
+            taskIds: checked.taskIds,
+            key: key ?? defaultAssetKey("task", rootId)
+          });
+        }
+      }
+      const moved = await moveSessionChains({ moves, changedBy });
+      moveSessions.respond(res, 200, { moved, skipped });
+    });
+    return true;
+  }
+  if (moveSessionPrefix.match(req.method, pathSegments)) {
+    const parsed = await moveSessionPrefix.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    const from = normalizeAssetKey(parsed.body.from);
+    if (parseAssetKey(from).relativeSegments.length === 0) {
+      jsonError(res, "Cannot move a namespace root", 400);
+      return true;
+    }
+    await withSessionMove(req, res, myAgentId, parsed.body.to, async ({ actor, changedBy, key }) => {
+      if (key?.startsWith(from)) {
+        jsonError(res, "Destination must be outside the source prefix", 400);
+        return;
+      }
+      const skipped = actor.kind === "user" ? (await listSharedPrefixRoots({ from, userId: actor.userId })).map((root) => ({
+        rootTaskId: root.id,
+        reason: SESSION_MOVE_OWNER_ONLY
+      })) : [];
+      const moves = [];
+      let remaining = 0;
+      for (let offset = 0;; offset += SESSION_MOVE_LIMIT) {
+        const roots = await listPrefixRoots({
+          from,
+          userId: actor.kind === "user" ? actor.userId : undefined,
+          limit: SESSION_MOVE_LIMIT,
+          offset
+        });
+        for (const root of roots) {
+          const nextKey = key === null ? defaultAssetKey("task", root.id) : key + root.key.slice(from.length);
+          if (nextKey.startsWith(from)) {
+            skipped.push({
+              rootTaskId: root.id,
+              reason: "The new key stays inside the source group"
+            });
+            continue;
+          }
+          if (nextKey.length > ASSET_KEY_MAX_LENGTH) {
+            skipped.push({
+              rootTaskId: root.id,
+              reason: `Asset key cannot exceed ${ASSET_KEY_MAX_LENGTH} characters`
+            });
+            continue;
+          }
+          const checked = await checkSessionMove(root.id, actor, req, myAgentId, {
+            ownerOnly: true
+          });
+          if ("reason" in checked) {
+            skipped.push({ rootTaskId: root.id, reason: checked.reason });
+          } else if (moves.length < SESSION_MOVE_LIMIT) {
+            moves.push({ rootId: root.id, taskIds: checked.taskIds, key: nextKey });
+          } else {
+            remaining++;
+          }
+        }
+        if (roots.length < SESSION_MOVE_LIMIT)
+          break;
+      }
+      const moved = await moveSessionChains({ moves, changedBy });
+      moveSessionPrefix.respond(res, 200, { moved, skipped, remaining });
+    });
+    return true;
+  }
   if (getSession.match(req.method, pathSegments)) {
     const parsed = await getSession.parse(req, res, pathSegments, queryParams);
     if (!parsed)
@@ -33606,7 +34044,8 @@ async function handleSessions(req, res, pathSegments, queryParams, myAgentId) {
       id: root.id,
       requestedByUserId: root.requestedByUserId ?? null
     };
-    const access = await accessForRoot(await resolveSessionActor2(req, myAgentId), sessionRoot);
+    const actor = await resolveSessionActor2(req, myAgentId);
+    const access = await accessForRoot(actor, sessionRoot);
     if (access === "none") {
       jsonError(res, "You don't have access to this session. Ask the owner to share it.", 403);
       return true;
@@ -33618,9 +34057,11 @@ async function handleSessions(req, res, pathSegments, queryParams, myAgentId) {
     } : null;
     const chain = await getRootTaskChain2(parsed.params.rootTaskId);
     const tasks = [root, ...chain];
-    const [steering, citations] = await Promise.all([
+    const [steering, citations, approvals, read] = await Promise.all([
       getTaskSteeringFieldsForTasks(tasks),
-      getTaskCitationsForTasks(tasks.map((task) => task.id))
+      getTaskCitationsForTasks(tasks.map((task) => task.id)),
+      getPendingApprovalsForTasks2(tasks.map((task) => task.id)),
+      actor.kind === "user" && actor.userId ? getSessionReadState(sessionRoot.id, actor.userId) : Promise.resolve(null)
     ]);
     const decorate = (task) => ({
       ...task,
@@ -33631,7 +34072,9 @@ async function handleSessions(req, res, pathSegments, queryParams, myAgentId) {
       root: decorate(root),
       chain: chain.map(decorate),
       access,
-      owner
+      owner,
+      ...approvals.length ? { approvals } : {},
+      ...read ?? {}
     });
     return true;
   }
@@ -33720,8 +34163,7 @@ async function syncSkillsToFilesystem(agentId, harnessType = "all", homeOverride
   })));
   return writeSkillsToFilesystem(entries, harnessType, home);
 }
-async function computeAgentSkillsSignature(agentId) {
-  const skills = await getAgentSkills2(agentId);
+function computeSkillsSignature(skills) {
   const sorted = [...skills].sort((a, b) => a.id.localeCompare(b.id));
   const canonical = JSON.stringify(sorted.map((s) => [
     s.id,
@@ -33736,6 +34178,18 @@ async function computeAgentSkillsSignature(agentId) {
   const hash = new Bun.CryptoHasher("sha256").update(canonical).digest("hex");
   return { hash, count: sorted.length };
 }
+async function computeAgentSkillsSignature(agentId) {
+  return computeSkillsSignature(await getAgentSkills2(agentId));
+}
+async function buildSkillsBundle(readSkills, readFiles) {
+  const skills = await readSkills();
+  const signature = computeSkillsSignature(skills).hash;
+  const entries = await Promise.all(skills.map(async (skill) => ({
+    ...skill,
+    files: skill.isComplex ? await readFiles(skill.id) : []
+  })));
+  return { skills: entries, total: entries.length, signature };
+}
 
 // src/be/skill-usage.ts
 init_db3();
@@ -34021,6 +34475,13 @@ var agentSkillsListResponseSchema = object2({
   total: number2(),
   signature: string2()
 });
+var agentSkillsBundleResponseSchema = object2({
+  skills: array2(SkillWithInstallInfoSchema.extend({
+    files: array2(SkillFileSchema)
+  })),
+  total: number2(),
+  signature: string2()
+});
 var agentSkillsSignatureResponseSchema = object2({
   hash: string2(),
   count: number2(),
@@ -34415,7 +34876,28 @@ var getAgentSkillsSignatureRoute = route({
     200: { description: "Skills signature", schema: agentSkillsSignatureResponseSchema }
   }
 });
+var getAgentSkillsBundleRoute = route({
+  method: "get",
+  path: "/api/agents/{id}/skills/bundle",
+  pattern: ["api", "agents", null, "skills", "bundle"],
+  summary: "Get an agent's installed skills together with their bundled files",
+  description: "Single-request boot payload: every installed-and-enabled skill with the full content of its bundled files, plus the same signature the cheap probe returns. Lets a worker sync its local skill tree without an N+1 file fan-out.",
+  tags: ["Skills"],
+  auth: { apiKey: true },
+  params: object2({ id: string2() }),
+  responses: {
+    200: { description: "Agent skills bundle", schema: agentSkillsBundleResponseSchema }
+  }
+});
 async function handleSkills(req, res, pathSegments, queryParams, myAgentId) {
+  if (getAgentSkillsBundleRoute.match(req.method, pathSegments)) {
+    const parsed = await getAgentSkillsBundleRoute.parse(req, res, pathSegments, queryParams);
+    if (!parsed)
+      return true;
+    const bundle = await buildSkillsBundle(() => getAgentSkills2(parsed.params.id), (skillId) => getSkillFiles2(skillId));
+    getAgentSkillsBundleRoute.respond(res, 200, bundle);
+    return true;
+  }
   if (getAgentSkillsSignatureRoute.match(req.method, pathSegments)) {
     const parsed = await getAgentSkillsSignatureRoute.parse(req, res, pathSegments, queryParams);
     if (!parsed)
@@ -36569,7 +37051,18 @@ var deleteIdentityRoute = route({
   },
   auth: { apiKey: true }
 });
-var UNMAPPED_KINDS = ["slack", "github", "gitlab", "azure-devops", "linear", "kapso"];
+var UNMAPPED_KINDS = [
+  "slack",
+  "github",
+  "gitlab",
+  "azure-devops",
+  "bitbucket",
+  "linear",
+  "kapso",
+  "telegram",
+  "discord",
+  "teams"
+];
 async function collectUnmappedForKind(kind, limit) {
   const namespace = `integration:unmapped:${kind}`;
   const rows = await listKv2(namespace, { limit: Math.min(limit * 2, 1000), offset: 0 });
@@ -37346,6 +37839,24 @@ var azureDevOpsWebhook = route({
     503: { description: "Azure DevOps integration not configured" }
   }
 });
+var bitbucketWebhook = route({
+  method: "post",
+  path: "/api/bitbucket/webhook",
+  pattern: ["api", "bitbucket", "webhook"],
+  summary: "Handle Bitbucket Cloud webhook events",
+  tags: ["Webhooks"],
+  auth: { apiKey: false },
+  rbac: {
+    ungated: "provider webhook: authenticated by the per-webhook HMAC secret, not a swarm principal"
+  },
+  responses: {
+    200: { description: "Event processed", schema: WebhookDispatchResultSchema },
+    401: { description: "Invalid signature" },
+    413: { description: "Body exceeds 1 MiB" },
+    503: { description: "Bitbucket integration not configured" }
+  }
+});
+var BITBUCKET_WEBHOOK_MAX_BODY_BYTES = 1024 * 1024;
 var agentmailWebhook = route({
   method: "post",
   path: "/api/agentmail/webhook",
@@ -37802,6 +38313,101 @@ async function handleWebhooks(req, res, pathSegments) {
     }
     return true;
   }
+  if (bitbucketWebhook.match(req.method, pathSegments)) {
+    if (!isBitbucketEnabled()) {
+      res.writeHead(503, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Bitbucket integration not configured" }));
+      return true;
+    }
+    if (enforceContentLengthCap(req, res, BITBUCKET_WEBHOOK_MAX_BODY_BYTES) === BODY_TOO_LARGE) {
+      return true;
+    }
+    const chunks = [];
+    let receivedBytes = 0;
+    let tooLarge = false;
+    for await (const chunk of req) {
+      if (tooLarge)
+        continue;
+      receivedBytes += chunk.byteLength;
+      if (receivedBytes > BITBUCKET_WEBHOOK_MAX_BODY_BYTES) {
+        tooLarge = true;
+        chunks.length = 0;
+        jsonError(res, `Payload too large (max ${BITBUCKET_WEBHOOK_MAX_BODY_BYTES} bytes)`, 413);
+        continue;
+      }
+      chunks.push(chunk);
+    }
+    if (tooLarge)
+      return true;
+    const rawBody = Buffer.concat(chunks).toString();
+    const signature = req.headers["x-hub-signature"];
+    if (!verifyBitbucketWebhook(rawBody, signature)) {
+      console.log("[Bitbucket] Invalid webhook signature");
+      res.writeHead(401, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Invalid signature" }));
+      return true;
+    }
+    let body;
+    try {
+      body = JSON.parse(rawBody);
+    } catch {
+      res.writeHead(400, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Invalid JSON body" }));
+      return true;
+    }
+    const eventKey = req.headers["x-event-key"];
+    const requestUuid = req.headers["x-request-uuid"];
+    if (isDuplicateDelivery(requestUuid)) {
+      console.log(`[Bitbucket] Skipping duplicate delivery ${requestUuid}`);
+      bitbucketWebhook.respond(res, 200, { created: false });
+      return true;
+    }
+    console.log(`[Bitbucket] Received ${eventKey} event`);
+    try {
+      const result = await runBlockableHandler("Bitbucket", async () => {
+        switch (eventKey) {
+          case "pullrequest:created":
+            return await handlePullRequestCreated2(body);
+          case "pullrequest:comment_created":
+            return await handlePullRequestCommentCreated(body);
+          case "pullrequest:fulfilled":
+            return await handlePullRequestClosed(body, "merged");
+          case "pullrequest:rejected":
+            return await handlePullRequestClosed(body, "declined");
+          default:
+            console.log(`[Bitbucket] Ignoring unsupported event type: ${eventKey}`);
+            return { created: false };
+        }
+      });
+      const workflowEvent = {
+        "pullrequest:created": "created",
+        "pullrequest:comment_created": "commented",
+        "pullrequest:fulfilled": "merged",
+        "pullrequest:rejected": "declined"
+      }[eventKey ?? ""];
+      const prEvent = workflowEvent ? pullRequestEventOf(body) : null;
+      if (workflowEvent && prEvent) {
+        const pr = prEvent.pullrequest;
+        const comment = workflowEvent === "commented" ? pullRequestCommentEventOf(body)?.comment : undefined;
+        const user = comment?.user ?? prEvent.actor;
+        workflowEventBus2.emit(`bitbucket.pull_request.${workflowEvent}`, {
+          repo: prEvent.repository.full_name,
+          number: pr.id,
+          ...workflowEvent === "commented" ? { body: comment?.content.raw } : { title: pr.title, body: pr.description ?? undefined },
+          action: workflowEvent,
+          user_login: user.account_id ?? user.nickname ?? user.display_name
+        });
+      }
+      markDeliveryProcessed(requestUuid);
+      bitbucketWebhook.respond(res, 200, result);
+    } catch (err) {
+      const errorMessage = err instanceof Error ? err.message : String(err);
+      console.error(`[Bitbucket] Error handling ${eventKey} event: ${scrubSecrets(errorMessage)}`);
+      res.writeHead(500, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Internal server error" }));
+    }
+    return true;
+  }
   if (agentmailWebhook.match(req.method, pathSegments)) {
     if (!isAgentMailEnabled()) {
       res.writeHead(503, { "Content-Type": "application/json" });
@@ -39264,7 +39870,7 @@ var httpServer = createHttpServer(async (req, res) => {
   });
 });
 var detachRealtime = attachRealtimeTransport(httpServer);
-var { attachControllerTransport } = await import("./controllers-connect-mwzx1fh6.js");
+var { attachControllerTransport } = await import("./controllers-connect-tw1dan9r.js");
 var detachControllers = attachControllerTransport(httpServer);
 var stopWorkerNudges = startWorkerNudgeListener();
 var stopRoomDeletion = realtimeBus.subscribe("room:namespace-deleted", (namespace) => {
@@ -39293,7 +39899,7 @@ async function shutdown() {
     sessionsProcessed: getServerSessionsProcessed()
   });
   if (hasCapability("scheduling")) {
-    const { stopScheduler } = await import("./index-hg0x2cdv.js");
+    const { stopScheduler } = await import("./index-07ef7nkm.js");
     stopScheduler();
   }
   stopHeartbeat2();
@@ -39305,7 +39911,7 @@ async function shutdown() {
   await stopSlackApp2();
   await stopChatSdk();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { stopOAuthKeepalive } = await import("./keepalive-hrh7xnr9.js");
+    const { stopOAuthKeepalive } = await import("./keepalive-5nh2rhmr.js");
     await stopOAuthKeepalive();
   }
   stopOAuthPendingGc();
@@ -39385,21 +39991,21 @@ try {
   console.warn("[startup] CAPABILITIES upgrade seed failed (non-fatal):", err);
 }
 try {
-  const { ensurePricingSeeded } = await import("./boot-seeds-9ks8hce7.js");
+  const { ensurePricingSeeded } = await import("./boot-seeds-3vn0m9sg.js");
   ensurePricingSeeded();
-  const { startPricingRefreshLoop } = await import("./pricing-refresh-j38dehfs.js");
+  const { startPricingRefreshLoop } = await import("./pricing-refresh-nevhat8h.js");
   startPricingRefreshLoop();
 } catch (err) {
   console.error("[startup] Failed to seed pricing rows:", err);
 }
 try {
-  const { ensureModelProfilesSeeded } = await import("./boot-seeds-9ks8hce7.js");
+  const { ensureModelProfilesSeeded } = await import("./boot-seeds-3vn0m9sg.js");
   await ensureModelProfilesSeeded();
 } catch (err) {
   console.error("[startup] Failed to seed model profiles:", err);
 }
 try {
-  const { ensureRbacSeeded } = await import("./boot-seeds-9ks8hce7.js");
+  const { ensureRbacSeeded } = await import("./boot-seeds-3vn0m9sg.js");
   ensureRbacSeeded();
 } catch (err) {
   console.error("[startup] Failed to sync RBAC seed rows:", err);
@@ -39407,7 +40013,7 @@ try {
     throw err;
 }
 try {
-  const { runAllSeeders } = await import("./index-97q4xn03.js");
+  const { runAllSeeders } = await import("./index-zdycv3ja.js");
   await runAllSeeders({ scriptEmbeddingMode: "skip" });
 } catch (err) {
   console.error("[startup] Failed to seed built-in entities:", err);
@@ -39463,45 +40069,46 @@ httpServer.listen(port, async () => {
   initGitLab();
   initAzureDevOps();
   initAzureDevOpsOutbound();
+  initBitbucket();
   initAgentMail();
   await initLinear();
   await initJira();
   await initWorkflows2();
   await startScriptRunSupervisor(getMcpBaseUrl());
   if (hasCapability("scheduling")) {
-    const { startScheduler } = await import("./index-hg0x2cdv.js");
-    const { getExecutorRegistry } = await import("./index-gdh8jrdm.js");
+    const { startScheduler } = await import("./index-07ef7nkm.js");
+    const { getExecutorRegistry } = await import("./index-q3t40ryv.js");
     const intervalMs = Number(process.env.SCHEDULER_INTERVAL_MS) || 1e4;
     startScheduler(getExecutorRegistry(), intervalMs, {
       runId: globalState.__runId
     });
   }
   if (!isEnvFlagEnabled("HEARTBEAT_DISABLE", false)) {
-    const { startHeartbeat } = await import("./index-thm0y6a8.js");
+    const { startHeartbeat } = await import("./index-7yts8n9s.js");
     const heartbeatMs = Number(process.env.HEARTBEAT_INTERVAL_MS) || 90000;
     startHeartbeat(heartbeatMs);
   }
   startPoolRouting();
   startRuntimeSupervisor();
   if (process.env.OAUTH_KEEPALIVE_DISABLE !== "true") {
-    const { startOAuthKeepalive } = await import("./keepalive-hrh7xnr9.js");
+    const { startOAuthKeepalive } = await import("./keepalive-5nh2rhmr.js");
     startOAuthKeepalive();
   }
   if (process.env.OAUTH_REFRESH_SWEEP_DISABLE !== "true") {
-    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-zm0yj4sj.js");
+    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-y3n1knmd.js");
     startOAuthRefreshSweep();
   }
   startOAuthPendingGc();
   await startMemoryGc();
   await startDbRetention();
   startHumanFreeDrain();
-  import("./boot-reembed-srp6v6af.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
+  import("./boot-reembed-n4wq5dd2.js").then(({ runBootReembed }) => runBootReembed()).catch((err) => {
     console.error("[boot-reembed] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-reembed-xns7h5h9.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
+  import("./boot-reembed-4xwq5tg0.js").then(({ runBootReembedScripts }) => runBootReembedScripts()).catch((err) => {
     console.error("[boot-reembed-scripts] startup backfill failed (non-fatal):", err);
   });
-  import("./boot-scrub-sweep-3qqrh2mz.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
+  import("./boot-scrub-sweep-69h90xcq.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
     console.error("[boot-scrub-sweep] startup scrub failed (non-fatal):", err);
   });
 }).on("error", (err) => {