@desplega.ai/agent-swarm 2.7.5 → 2.7.7

package/dist/{http-1ted0j1k.js → http-r8cc4wz7.js}

@@ -1,6 +1,6 @@
 import {
   bedrockProviderModule
-} from "./cli-ehq736cn.js";
+} from "./cli-g7s47cc5.js";
 import {
   chatThreadOfContextKey,
   agentContextKey,
@@ -248,6 +248,7 @@ import {
   updateTaskClaudeSessionId2,
   recordTaskProviderIfUnset2,
   updateTaskTitle2,
+  setTaskTitleIfUnset2,
   completeTask2,
   failTask2,
   cancelTask2,
@@ -259,6 +260,7 @@ import {
   getPausedTasksForAgent2,
   resetOrphanedInProgressTasksForAgent2,
   updateTaskProgress2,
+  init_write,
   IdempotencyKeyTakenError,
   workflowRequestFingerprint,
   assertWorkflowIdempotencyKeyUnused,
@@ -269,6 +271,8 @@ import {
   retirePoolKeyStatus,
   init_api_keys,
   getScriptRunExecutionArgs2,
+  getScriptRunFollowUpGuard2,
+  setScriptRunFollowUpGuard2,
   updateTaskVcs2,
   upsertAssetKeyMapping2,
   listAssetSummaries2,
@@ -475,7 +479,7 @@ import {
   countScriptRunJournalSteps2,
   countScriptRunJournalAgentTaskSteps2,
   init_db4
-} from "./cli-1ayk1eas.js";
+} from "./cli-wk5yrfwd.js";
 import {
   PRIMARY_ROLE_NAMES2,
   getUserGrant2,
@@ -486,8 +490,8 @@ import {
   assertNotLastAdmin2,
   setUserRoles2,
   init_rbac_roles
-} from "./cli-8hs41zy2.js";
-import"./cli-6s7vdcta.js";
+} from "./cli-jtjtabxe.js";
+import"./cli-qh4d4tvk.js";
 import {
   upsertModelCatalogOverlay,
   deleteModelCatalogOverlay,
@@ -495,13 +499,14 @@ import {
   init_model_catalog_store,
   requestModelCatalogRefresh2,
   init_pricing_refresh
-} from "./cli-nn4d8dne.js";
+} from "./cli-5b456bpf.js";
 import {
   workflowEventBus2,
   init_event_bus
 } from "./cli-wx3rhnm0.js";
-import"./cli-mmwm7zbf.js";
+import"./cli-rtt8g4v9.js";
 import {
+  require_dist4,
   getSlackConnectionState,
   init_connection_state,
   getSlackInboundDiagnostics,
@@ -530,12 +535,12 @@ import {
   startSlackApp2,
   stopSlackApp2,
   init_app3
-} from "./cli-wvaawacd.js";
+} from "./cli-cppkf404.js";
 import {
   retryFailedRun2,
   cancelWorkflowRun2,
   init_resume
-} from "./cli-g61qxmge.js";
+} from "./cli-afkqkrtw.js";
 import {
   DEFAULT_NEGOTIATED_PROTOCOL_VERSION,
   SUPPORTED_PROTOCOL_VERSIONS,
@@ -623,6 +628,9 @@ import {
   hasKvViewArgs,
   resolveKvView,
   init_kv_view,
+  COLOR_LITERAL_THRESHOLD,
+  countColorLiterals,
+  init_color_literals,
   toolErr,
   createToolRegistrar,
   init_utils,
@@ -767,6 +775,7 @@ import {
   extractPageSession,
   extractLegacyPageSession,
   extractAndVerifyCookie,
+  isLocalDevPageRequest,
   pageSessionSetCookies,
   init_page_session,
   resolveHttpRequestAuth,
@@ -814,6 +823,12 @@ import {
   init_page_versions,
   snapshotPage,
   init_version3,
+  DEFAULT_THEME_ID,
+  THEME_PRESET_IDS,
+  getThemePreset,
+  init_presets,
+  readThemeFields,
+  init_page_fields,
   assertOAuthAppUrlsSafe,
   assertOAuthEgressUrlSafe,
   init_app_validation,
@@ -821,7 +836,7 @@ import {
   listOAuthPresetIds,
   getOAuthPreset,
   hydrateOAuthAppFromPreset,
-  init_presets,
+  init_presets2,
   scopedResourceScopeIdSchema,
   resolveScopedResourceId,
   init_scoped_resource,
@@ -914,6 +929,9 @@ import {
   mergeScheduleTiming,
   validateRecurringTiming,
   init_validate,
+  followUpThreadForSourceTask,
+  evaluateFollowUpRedelegation,
+  init_follow_up_redelegation_guard,
   checkOutputSchemaShape,
   sendTaskOutputSchema,
   sendTaskHandler,
@@ -941,7 +959,7 @@ import {
   getEnabledCapabilities,
   createServer,
   init_server
-} from "./cli-1338796d.js";
+} from "./cli-ws19768n.js";
 import {
   FilesError,
   normalizeFilesError,
@@ -973,7 +991,7 @@ import {
   resolvePoolDelivery2,
   createPoolAgent2,
   init_db2
-} from "./cli-mry0qzym.js";
+} from "./cli-ddaanqkd.js";
 import {
   duplicateGuardedQueryKey,
   warnIfCorsAllowsAnyOrigin,
@@ -1027,7 +1045,7 @@ import {
   describeRequestRoute,
   route,
   init_route_def
-} from "./cli-z8eh3ex8.js";
+} from "./cli-8sckt74b.js";
 import {
   startPoolRouting,
   stopPoolRouting,
@@ -1040,13 +1058,17 @@ import {
   checkHeartbeatChecklist2,
   runHeartbeatSweep2,
   stopHeartbeat2
-} from "./cli-z6jkx23q.js";
-import"./cli-rpm2sgv0.js";
+} from "./cli-bfv7vdg6.js";
+import"./cli-3fg0bdcv.js";
 import {
   runtimeSupervisorStatus,
   startRuntimeSupervisor,
   stopRuntimeSupervisor
-} from "./cli-rqkxrmgw.js";
+} from "./cli-je518txm.js";
+import {
+  TASK_TITLE_TIMEOUT_MS,
+  generateTaskTitle
+} from "./cli-vz22fyqv.js";
 import"./cli-ns59dc6r.js";
 import {
   ACP_TARGET_IDS
@@ -1067,11 +1089,11 @@ import {
   isUnknownModelError,
   checkProviderPoolKey,
   writeSkillsToFilesystem
-} from "./cli-rhw40jgb.js";
+} from "./cli-yyj3j5m4.js";
 import {
   inviteEmailToSharedOrg,
   ensureAgentFsCredentialsForAgent
-} from "./cli-vbyfwh92.js";
+} from "./cli-pjctyea3.js";
 import {
   Anthropic
 } from "./cli-318r69gq.js";
@@ -1087,7 +1109,7 @@ import {
   ampBillsCacheWrites,
   resolveAmpModel,
   init_amp_models
-} from "./cli-mjzynrse.js";
+} from "./cli-35rsp8ye.js";
 import {
   RATING_MODEL_MAX_LENGTH,
   REFERENCES_SOURCE_MAX_LENGTH,
@@ -1097,7 +1119,7 @@ import {
 import {
   normalizeModelKey,
   init_pricing_normalize
-} from "./cli-xtjhfmpc.js";
+} from "./cli-pc6n7fre.js";
 import {
   require_dist2,
   getMcpOAuthToken,
@@ -1186,7 +1208,7 @@ import {
   init_typecheck,
   parseSkillContent,
   init_skill_parser
-} from "./cli-0bxqnvq9.js";
+} from "./cli-adeegh7d.js";
 import {
   signalProcessGroup,
   detachedProcessGroup,
@@ -1203,7 +1225,7 @@ import {
   forceRefreshAuthorizationOrThrow,
   forceRefreshTokenOrThrow,
   init_ensure_token
-} from "./cli-7wcyk2s5.js";
+} from "./cli-q3tkegby.js";
 import {
   automationIntegrationFixUrl,
   preflightAutomation,
@@ -1247,7 +1269,7 @@ import {
   definitionNodeIds,
   validateDefinition,
   init_definition2
-} from "./cli-spknvxbq.js";
+} from "./cli-nmzhp1b5.js";
 import {
   _fetchHolder,
   CLIENT_ID,
@@ -1270,10 +1292,8 @@ import {
 } from "./cli-mdb054w3.js";
 import {
   require_content_type
-} from "./cli-gf5hbmdr.js";
-import {
-  require_dist9
-} from "./cli-w3hcrxht.js";
+} from "./cli-yjdgea32.js";
+import"./cli-g08zdaec.js";
 import {
   isInvalidClientError,
   publicEndpointSsrfOptions,
@@ -1291,11 +1311,11 @@ import {
   revokeMcpToken,
   computeExpiresAt,
   init_mcp_wrapper
-} from "./cli-pywf3eh5.js";
+} from "./cli-caj33vcq.js";
 import {
   createRuntimeProvider,
   init_runtime_providers
-} from "./cli-xbkdm710.js";
+} from "./cli-yndmfxb3.js";
 import {
   registerSessionTokenConnection,
   init_session_token_connections,
@@ -1322,17 +1342,17 @@ import {
   revokeAgentTokens,
   fingerprintApiKey,
   init_users
-} from "./cli-bhjt02p8.js";
+} from "./cli-5jnhv72d.js";
 import"./cli-v41kn3cd.js";
 import {
   setBedrockProviderModule,
   init_bedrock_converse_stream_lazy
-} from "./cli-aa6yxc7m.js";
+} from "./cli-pz4rk021.js";
 import {
   import_websocket,
   import_websocket_server,
   init_wrapper2
-} from "./cli-dznrgaep.js";
+} from "./cli-69szn7w7.js";
 import {
   isRbacEnabled,
   decideToolAdmission,
@@ -1350,6 +1370,10 @@ import {
   init_key,
   isSafeBundlePath,
   init_bundle_path,
+  PAGE_THEME_SHARED_TOKENS,
+  PAGE_THEME_TOKENS,
+  HIVE_PAGE_TOKENS,
+  init_tokens2,
   init_zod_openapi,
   AssetKeySchema,
   AssetEntityTypeSchema,
@@ -1440,6 +1464,7 @@ import {
   WorkflowVersionSchema,
   PageContentTypeSchema,
   PageAuthModeSchema,
+  PageThemeTokensInputSchema,
   PageSchema,
   PageVersionSchema,
   MetricWidgetSchema,
@@ -1494,7 +1519,7 @@ import {
   KvKeySchema,
   KvEntrySchema,
   init_types4
-} from "./cli-7wspm5gm.js";
+} from "./cli-n6bv12jn.js";
 import {
   CODEX_AUTH_FAILURE_BENCH_THRESHOLD,
   CODEX_AUTH_WATCH_NAMESPACE,
@@ -1505,7 +1530,7 @@ import {
   IDENTITY_FIELD_BUDGETS,
   IdentityFieldBudgetError,
   init_identity_field_budget
-} from "./cli-a7v854rf.js";
+} from "./cli-tgrv9cjx.js";
 import {
   getSlackConfiguration,
   init_config4
@@ -1571,14 +1596,10 @@ import {
   ZodIssueCode,
   exports_coerce
 } from "./cli-agfm16v9.js";
-import {
-  getNodeEnv,
-  init_node_env
-} from "./cli-rgeadyvq.js";
 import {
   init_package,
   package_default
-} from "./cli-tqgg40ek.js";
+} from "./cli-6pfd54vx.js";
 import {
   realtimeBus,
   init_bus
@@ -1588,13 +1609,14 @@ import {
   DEFAULT_APP_URL,
   getConfiguredAppUrls,
   getAppUrl,
+  getLocalDevAppOrigins,
   getMcpBaseUrl,
   getPublicMcpBaseUrl,
   agentFsFileRoute,
   isCombEnabled,
   isAgentFsProxyEnabled,
   init_constants3
-} from "./cli-611a1294.js";
+} from "./cli-k0wwfqbg.js";
 import {
   parseEnvFlag,
   isEnvFlagEnabled,
@@ -2528,6 +2550,88 @@ async function seedLegacyCapabilitiesConfig() {
   return { seeded: true, added: [...added] };
 }
 
+// src/be/task-auto-title-listener.ts
+init_api_key();
+init_constants3();
+init_env_flag();
+init_secret_scrubber();
+init_event_bus();
+init_read();
+init_write();
+var TASK_AUTO_TITLE_CONCURRENCY = 3;
+function isTaskAutoTitleEnabled(env = process.env) {
+  return parseEnvFlag(env.TASK_AUTO_TITLE_ENABLED, true);
+}
+function startTaskAutoTitleListener(options = {}) {
+  const env = options.env ?? process.env;
+  const generate = options.generate ?? generateTaskTitle;
+  const queue = [];
+  let active = 0;
+  let idleWaiters = [];
+  const settleIdle = () => {
+    if (active > 0 || queue.length > 0)
+      return;
+    const waiters = idleWaiters;
+    idleWaiters = [];
+    for (const resolve of waiters)
+      resolve();
+  };
+  const pump = () => {
+    while (active < TASK_AUTO_TITLE_CONCURRENCY) {
+      const taskId = queue.shift();
+      if (!taskId)
+        break;
+      active++;
+      titleTask(taskId, env, generate).catch((error) => console.error("[task-title] Failed:", scrubSecrets(String(error)))).finally(() => {
+        active--;
+        pump();
+        settleIdle();
+      });
+    }
+  };
+  const onTaskCreated = (data) => {
+    if (!isTaskAutoTitleEnabled(env))
+      return;
+    const taskId = data.taskId;
+    if (typeof taskId !== "string" || !taskId)
+      return;
+    queue.push(taskId);
+    pump();
+  };
+  workflowEventBus2.on("task.created", onTaskCreated);
+  return {
+    stop: () => workflowEventBus2.off("task.created", onTaskCreated),
+    idle: () => new Promise((resolve) => {
+      idleWaiters.push(resolve);
+      settleIdle();
+    })
+  };
+}
+async function titleTask(taskId, env, generate) {
+  const task = await getTaskById2(taskId);
+  if (!task || task.title)
+    return;
+  const shortId = taskId.slice(0, 8);
+  const startedAt = Date.now();
+  const result = await generate({
+    task: task.task,
+    env,
+    apiUrl: getMcpBaseUrl(),
+    apiKey: getApiKey(),
+    callerTag: `task-title:${task.source}`,
+    signal: AbortSignal.timeout(TASK_TITLE_TIMEOUT_MS)
+  });
+  if (!result.ok) {
+    if (result.reason !== "short-task") {
+      console.log(`[task-title] ${shortId}: no title (${result.reason})`);
+    }
+    return;
+  }
+  const updated = await setTaskTitleIfUnset2(taskId, result.title);
+  const elapsed = Date.now() - startedAt;
+  console.log(scrubSecrets(`[task-title] ${shortId}: "${result.title}" via ${result.model} in ${elapsed}ms${updated ? "" : " (kept the existing title)"}`));
+}
+
 // src/http/index.ts
 init_telemetry_enable();
 
@@ -15880,7 +15984,7 @@ async function registerTelegramWebhook() {
 
 // src/slack/app-icon.ts
 init_app3();
-var import_web_api = __toESM(require_dist9(), 1);
+var import_web_api = __toESM(require_dist4(), 1);
 var TTL_MS = 60 * 60 * 1000;
 var REQUEST_TIMEOUT_MS = 2500;
 var cached = null;
@@ -19766,6 +19870,7 @@ function createUserServer(user) {
       offerMode: false,
       leadOnly: false,
       allowDuplicate: false,
+      allowRedelegation: false,
       overrideSlackContext: false
     });
   });
@@ -21375,11 +21480,20 @@ async function handleMemory(req, res, pathSegments, callerAgentId) {
 var MEMORY_GC_INTERVAL_MS = 60 * 60 * 1000;
 var memoryGcTimer = null;
 var SEARCH_RETRIEVAL_TTL_DAYS = 90;
-async function purgeStaleSearchRetrievals() {
+var SEARCH_RETRIEVAL_PURGE_BATCH = 2000;
+async function purgeStaleSearchRetrievals(batchSize = SEARCH_RETRIEVAL_PURGE_BATCH) {
   try {
     const cutoff = new Date(Date.now() - SEARCH_RETRIEVAL_TTL_DAYS * 24 * 60 * 60 * 1000).toISOString();
-    const result = await getDbClient2().run("DELETE FROM memory_retrieval WHERE eventType = 'search' AND retrievedAt < ?", [cutoff]);
-    return result.changes;
+    let purged = 0;
+    for (;; ) {
+      const result = await getDbClient2().run(`DELETE FROM memory_retrieval WHERE rowid IN (
+          SELECT rowid FROM memory_retrieval
+          WHERE +eventType = 'search' AND retrievedAt < ? LIMIT ?)`, [cutoff, batchSize]);
+      purged += result.changes;
+      if (result.changes < batchSize)
+        return purged;
+      await new Promise((resolve) => setImmediate(resolve));
+    }
   } catch (err) {
     console.error("[memory-gc] Search retrieval purge failed:", err.message);
     return 0;
@@ -21399,10 +21513,17 @@ async function runMemoryGcTick(label) {
     console.error(`[memory-gc] ${label} purge failed:`, err);
   }
 }
-async function startMemoryGc(intervalMs = MEMORY_GC_INTERVAL_MS) {
+var MEMORY_GC_INITIAL_DELAY_MS = 2 * 60 * 1000;
+var memoryGcInitialTimer = null;
+async function startMemoryGc(intervalMs = MEMORY_GC_INTERVAL_MS, initialDelayMs = MEMORY_GC_INITIAL_DELAY_MS) {
   if (memoryGcTimer)
     return;
-  await runMemoryGcTick("Initial");
+  memoryGcInitialTimer = setTimeout(() => {
+    memoryGcInitialTimer = null;
+    runMemoryGcTick("Initial");
+  }, initialDelayMs);
+  if (typeof memoryGcInitialTimer?.unref === "function")
+    memoryGcInitialTimer.unref();
   memoryGcTimer = setInterval(() => {
     runMemoryGcTick("Periodic");
   }, intervalMs);
@@ -21410,6 +21531,10 @@ async function startMemoryGc(intervalMs = MEMORY_GC_INTERVAL_MS) {
     memoryGcTimer.unref();
 }
 function stopMemoryGc() {
+  if (memoryGcInitialTimer) {
+    clearTimeout(memoryGcInitialTimer);
+    memoryGcInitialTimer = null;
+  }
   if (memoryGcTimer) {
     clearInterval(memoryGcTimer);
     memoryGcTimer = null;
@@ -23056,7 +23181,8 @@ var StatusIdentitySchema = object2({
   is_cloud: boolean(),
   marketing_url: string2().nullable(),
   hide_cloud_promo: boolean(),
-  org_id: string2().nullable()
+  org_id: string2().nullable(),
+  dashboard_url: string2().nullable().optional()
 });
 var StatusActivitySchema = object2({
   agents_online: number2().int().nonnegative(),
@@ -23162,7 +23288,7 @@ async function rollupCredStatusForProvider(provider) {
     oldestReportAgeMs
   };
 }
-function buildIdentity() {
+function buildIdentity(dashboardUrl) {
   const cloudRaw = process.env.SWARM_CLOUD;
   const hideRaw = process.env.SWARM_HIDE_CLOUD_PROMO;
   return {
@@ -23172,7 +23298,8 @@ function buildIdentity() {
     is_cloud: cloudRaw === "true" || cloudRaw === "1",
     marketing_url: process.env.SWARM_MARKETING_URL?.trim() || null,
     hide_cloud_promo: hideRaw === "true" || hideRaw === "1",
-    org_id: process.env.SWARM_ORG_ID?.trim() || null
+    org_id: process.env.SWARM_ORG_ID?.trim() || null,
+    dashboard_url: dashboardUrl
   };
 }
 function describeRoll(roll) {
@@ -23474,7 +23601,7 @@ async function buildStatusPayload() {
   const instance = await getInstanceFeedbackSignals();
   return {
     runtime_pools: { enabled: isRuntimePoolsEnabled(), supervisor: runtimeSupervisorStatus() },
-    identity: buildIdentity(),
+    identity: buildIdentity(await resolveAppUrl()),
     setup,
     activity: { ...activity, leads_ready: readyLeads },
     agent_fs: {
@@ -24139,9 +24266,10 @@ init_version3();
 init_resolver();
 init_session_templates();
 init_sibling_awareness();
+init_page_fields();
+init_presets();
 init_types4();
 init_constants3();
-init_node_env();
 init_page_session();
 init_request_auth_context();
 init_favorite_owner();
@@ -24177,19 +24305,20 @@ var MAX_ENTRIES2 = 500;
 function filterKey(value) {
   return JSON.stringify(value, (_key, v) => v && typeof v === "object" && !Array.isArray(v) ? Object.fromEntries(Object.entries(v).sort(([a], [b]) => a.localeCompare(b))) : v);
 }
-function createListTotalCache(ttlMs = LIST_TOTAL_TTL_MS) {
+function createListTotalCache(ttlMs = LIST_TOTAL_TTL_MS, firstPageTtlMs = 0) {
   const entries = new Map;
   return {
     get(filters, offset, compute) {
       const key = filterKey(filters);
       const now = Date.now();
       const hit = entries.get(key);
-      if (hit && hit.expiresAt > now && (offset ?? 0) > 0)
+      const maxAge = (offset ?? 0) > 0 ? ttlMs : Math.min(ttlMs, firstPageTtlMs);
+      if (hit && hit.countedAt + maxAge > now)
         return hit.total;
       if (hit)
         entries.delete(key);
       const total = compute();
-      entries.set(key, { expiresAt: now + ttlMs, total });
+      entries.set(key, { countedAt: now, total });
       total.catch(() => {
         if (entries.get(key)?.total === total)
           entries.delete(key);
@@ -24335,7 +24464,7 @@ var SupersedeTaskResponseSchema = object2({
   resumeTaskId: string2().nullable(),
   resumeTaskStatus: AgentTaskStatusSchema.optional()
 });
-var taskTotals = createListTotalCache();
+var taskTotals = createListTotalCache(LIST_TOTAL_TTL_MS, 15000);
 var listTasks = route({
   method: "get",
   path: "/api/tasks",
@@ -25859,11 +25988,22 @@ var PageWithShareUrlsSchema = PageSchema.extend({
   api_url: string2(),
   app_url: string2()
 });
-var PageListItemSchema = PageSchema.partial({ body: true, passwordHash: true }).extend({
+var PageListItemSchema = PageSchema.partial({
+  body: true,
+  passwordHash: true,
+  theme: true,
+  themeTokens: true,
+  designVersion: true
+}).extend({
   favorite: boolean(),
   api_url: string2(),
   app_url: string2()
 });
+var pageDesignBodyFields = {
+  theme: string2().nullable().optional().describe(`Theme preset id that restyles the whole page. One of: ${THEME_PRESET_IDS.join(", ")}. Omit to follow the viewer's theme. Pass null on update to clear it.`),
+  themeTokens: PageThemeTokensInputSchema.nullable().optional().describe('Per-page token overrides, applied on top of the preset. Send { light, dark } maps of token name to CSS value, or { format: "css", css } with a CSS variable block (:root, .dark, @theme). Stored normalized. Names outside the token contract, and values that reference a variable outside it, are ignored and listed in ignoredTokens. Replaces the stored overrides. Pass null on update to clear them.'),
+  designVersion: number2().int().min(1).max(2).optional().describe("Design system version. 2 is the swarm design system and the default for new pages. 1 is the original look that older pages keep. Omit on update to keep the stored value.")
+};
 var createPageRoute = route({
   method: "post",
   path: "/api/pages",
@@ -25879,7 +26019,8 @@ var createPageRoute = route({
     authMode: PageAuthModeSchema.default("authed"),
     password: string2().min(1).optional(),
     body: string2(),
-    needsCredentials: array2(string2()).optional()
+    needsCredentials: array2(string2()).optional(),
+    ...pageDesignBodyFields
   }),
   responses: {
     201: {
@@ -25889,10 +26030,12 @@ var createPageRoute = route({
         key: AssetKeySchema,
         version: literal2(1),
         api_url: string2(),
-        app_url: string2()
+        app_url: string2(),
+        ignoredTokens: array2(string2()).optional().describe("Theme tokens the importer ignored. A bare name is outside the token contract. Other entries give the reason, for example --font-sans (references --font-geist-sans) or --ring (in .card). Absent when none were ignored."),
+        designVersion: number2().int().min(1).describe("The design version of the new page: 2 unless the body set designVersion: 1.")
       })
     },
-    400: { description: "Invalid body" },
+    400: { description: "Invalid body, unknown theme, or invalid themeTokens" },
     409: { description: "Slug already exists for this agent" }
   }
 });
@@ -25951,13 +26094,21 @@ var updatePageRoute = route({
     authMode: PageAuthModeSchema.optional(),
     password: string2().min(1).nullable().optional(),
     body: string2().optional(),
-    needsCredentials: array2(string2()).nullable().optional()
+    needsCredentials: array2(string2()).nullable().optional(),
+    ...pageDesignBodyFields
   }),
   responses: {
     200: {
       description: "Page updated",
-      schema: object2({ id: string2(), key: AssetKeySchema, version: number2().int().min(1) })
+      schema: object2({
+        id: string2(),
+        key: AssetKeySchema,
+        version: number2().int().min(1),
+        ignoredTokens: array2(string2()).optional().describe("Theme tokens the importer ignored. A bare name is outside the token contract. Other entries give the reason, for example --font-sans (references --font-geist-sans) or --ring (in .card). Absent when none were ignored."),
+        designVersion: number2().int().min(1).describe("The design version the page has after the update. An omitted designVersion keeps the stored one, so an older page stays on 1.")
+      })
     },
+    400: { description: "Unknown theme or invalid themeTokens" },
     404: { description: "Page not found" },
     413: { description: "Payload too large" }
   }
@@ -26168,12 +26319,6 @@ function formatFeedbackComments(comments) {
 
 `);
 }
-function isDevRequest(req) {
-  if (getNodeEnv() === "production")
-    return false;
-  const origin = req.headers.origin ?? "";
-  return origin === "" || origin.startsWith("http://localhost") || origin.startsWith("http://127.0.0.1");
-}
 async function handlePages(req, res, pathSegments, queryParams, myAgentId) {
   if (createPageRoute.match(req.method, pathSegments)) {
     if (enforceContentLengthCap(req, res, MAX_PAGE_BODY_BYTES) === BODY_TOO_LARGE)
@@ -26185,6 +26330,11 @@ async function handlePages(req, res, pathSegments, queryParams, myAgentId) {
       jsonError(res, "X-Agent-ID header required", 400);
       return true;
     }
+    const themeFields = readThemeFields(parsed.body);
+    if ("error" in themeFields) {
+      jsonError(res, themeFields.error, 400);
+      return true;
+    }
     const slug = parsed.body.slug ?? slugify2(parsed.body.title);
     let passwordHash;
     if (parsed.body.password) {
@@ -26202,14 +26352,19 @@ async function handlePages(req, res, pathSegments, queryParams, myAgentId) {
         authMode: parsed.body.authMode,
         passwordHash,
         body: parsed.body.body,
-        needsCredentials: parsed.body.needsCredentials
+        needsCredentials: parsed.body.needsCredentials,
+        theme: themeFields.theme,
+        themeTokens: themeFields.themeTokens,
+        designVersion: parsed.body.designVersion
       });
       createPageRoute.respond(res, 201, {
         id: page.id,
         key: page.key,
         version: 1,
         api_url: `${getApiBaseUrl()}/p/${page.id}`,
-        app_url: `${getAppBaseUrl()}/pages/${page.slug}`
+        app_url: `${getAppBaseUrl()}/pages/${page.slug}`,
+        ...themeFields.ignored.length > 0 ? { ignoredTokens: themeFields.ignored } : {},
+        designVersion: page.designVersion
       });
     } catch (err) {
       if (err instanceof AssetKeyAuthorizationError) {
@@ -26373,6 +26528,11 @@ async function handlePages(req, res, pathSegments, queryParams, myAgentId) {
       jsonError(res, "Page belongs to another agent", 403);
       return true;
     }
+    const themeFields = readThemeFields(parsed.body);
+    if ("error" in themeFields) {
+      jsonError(res, themeFields.error, 400);
+      return true;
+    }
     let passwordHashUpdate;
     if (parsed.body.password === null) {
       passwordHashUpdate = null;
@@ -26402,7 +26562,10 @@ async function handlePages(req, res, pathSegments, queryParams, myAgentId) {
       authMode: parsed.body.authMode,
       passwordHash: passwordHashUpdate,
       body: parsed.body.body,
-      needsCredentials: parsed.body.needsCredentials ?? undefined
+      needsCredentials: parsed.body.needsCredentials ?? undefined,
+      theme: themeFields.theme,
+      themeTokens: themeFields.themeTokens,
+      designVersion: parsed.body.designVersion
     });
     if (!updated) {
       res.writeHead(404);
@@ -26412,7 +26575,9 @@ async function handlePages(req, res, pathSegments, queryParams, myAgentId) {
     updatePageRoute.respond(res, 200, {
       id: updated.id,
       key: updated.key,
-      version: await getPageEditCounter(updated.id)
+      version: await getPageEditCounter(updated.id),
+      ...themeFields.ignored.length > 0 ? { ignoredTokens: themeFields.ignored } : {},
+      designVersion: updated.designVersion
     });
     return true;
   }
@@ -26521,7 +26686,7 @@ ${defuseFeedbackTags(note)}
     const user = authUser(auth);
     const identity = user ? { uid: user.id, name: user.name } : isOperatorAuth(auth) ? { name: `guest-${randomUUID4().slice(0, 8)}`, op: true } : undefined;
     const cookies = await pageSessionSetCookies(req, page.id, {
-      dev: isDevRequest(req),
+      dev: isLocalDevPageRequest(req),
       ...identity
     });
     applyLaunchCors(req, res);
@@ -26869,11 +27034,23 @@ var SWARM_UI_JS = `
     closeCursorRoomIfUnused(record);
   }
 
+  // Colors and fonts read the page theme tokens (designVersion 2). Each
+  // fallback is the original literal, so a designVersion 1 page, which has no
+  // tokens, renders exactly as before.
   var SEV_COLOR = {
-    error: '#ef4444',
-    warn:  '#f59e0b',
-    info:  '#3b82f6',
+    error: 'var(--color-status-error-strong, #ef4444)',
+    warn:  'var(--color-status-warning-strong, #f59e0b)',
+    info:  'var(--color-status-info-strong, #3b82f6)',
   };
+  var MUTED = 'var(--color-muted-foreground, #7c8aa6)';
+  var MONO = "var(--font-mono, 'Space Mono', ui-monospace, monospace)";
+
+  // A color at a lower alpha. Mixing with transparent keeps the color and
+  // scales its alpha, so tint('#ef4444', '13.33%') equals #ef444422 and
+  // tint('rgb(34,197,94)', '10%') equals rgba(34,197,94,0.10).
+  function tint(color, percent) {
+    return 'color-mix(in srgb, ' + color + ' ' + percent + ', transparent)';
+  }
 
   function esc(s) {
     return String(s == null ? '' : s)
@@ -26908,7 +27085,7 @@ var SWARM_UI_JS = `
       '<span class="swarm-diff-annot no-print" '
       + 'style="display:inline-block;margin-left:8px;padding:1px 6px;'
       + 'border-radius:4px;font-size:11px;font-weight:600;'
-      + 'background:' + color + '22;color:' + color + ';border:1px solid ' + color + '55;">'
+      + 'background:' + tint(color, '13.33%') + ';color:' + color + ';border:1px solid ' + tint(color, '33.33%') + ';">'
       + esc((ann && ann.severity ? ann.severity.toUpperCase() : 'INFO')) + ' · ' + esc(ann && ann.text || '')
       + '</span>'
     );
@@ -26940,12 +27117,12 @@ var SWARM_UI_JS = `
       var text = line.text == null ? '' : line.text;
       var bg, oldCell, newCell, sign;
       if (type === 'add') {
-        bg = 'rgba(34,197,94,0.10)';
+        bg = tint('var(--color-status-success, rgb(34,197,94))', '10%');
         oldCell = '';
         newCell = String(newN++);
         sign = '+';
       } else if (type === 'del') {
-        bg = 'rgba(239,68,68,0.10)';
+        bg = tint('var(--color-status-error, rgb(239,68,68))', '10%');
         oldCell = String(oldN++);
         newCell = '';
         sign = '-';
@@ -26957,15 +27134,17 @@ var SWARM_UI_JS = `
       }
 
       var annHtml = '';
-      var anns = annByLine[Number(newCell)] || annByLine[Number(oldCell)] || [];
+      // Annotations name new-side lines. A deleted row has no new-side
+      // number, so only a deleted row matches on its old-side number.
+      var anns = annByLine[Number(type === 'del' ? oldCell : newCell)] || [];
       for (var k = 0; k < anns.length; k++) annHtml += renderAnnotation(anns[k]);
 
       rowsHtml += (
         '<tr style="background:' + bg + ';">'
-        + '<td class="swarm-diff-gutter" style="user-select:none;text-align:right;padding:0 8px;color:#7c8aa6;font-size:12px;width:48px;">' + esc(oldCell) + '</td>'
-        + '<td class="swarm-diff-gutter" style="user-select:none;text-align:right;padding:0 8px;color:#7c8aa6;font-size:12px;width:48px;">' + esc(newCell) + '</td>'
-        + '<td class="swarm-diff-sign" style="user-select:none;text-align:center;padding:0 4px;color:#7c8aa6;font-size:12px;width:18px;">' + esc(sign) + '</td>'
-        + '<td class="swarm-diff-code" style="padding:0 8px;white-space:pre-wrap;word-break:break-word;font-family:\\'Space Mono\\',ui-monospace,monospace;font-size:12px;">' + esc(text) + annHtml + '</td>'
+        + '<td class="swarm-diff-gutter" style="user-select:none;text-align:right;padding:0 8px;color:' + MUTED + ';font-size:12px;width:48px;">' + esc(oldCell) + '</td>'
+        + '<td class="swarm-diff-gutter" style="user-select:none;text-align:right;padding:0 8px;color:' + MUTED + ';font-size:12px;width:48px;">' + esc(newCell) + '</td>'
+        + '<td class="swarm-diff-sign" style="user-select:none;text-align:center;padding:0 4px;color:' + MUTED + ';font-size:12px;width:18px;">' + esc(sign) + '</td>'
+        + '<td class="swarm-diff-code" style="padding:0 8px;white-space:pre-wrap;word-break:break-word;font-family:' + MONO + ';font-size:12px;">' + esc(text) + annHtml + '</td>'
         + '</tr>'
       );
     }
@@ -26977,8 +27156,8 @@ var SWARM_UI_JS = `
     );
 
     return (
-      '<a id="' + esc(anchorId) + '" class="swarm-diff-anchor" data-hunk="' + esc(anchorSlug) + '"></a>'
-      + '<div class="swarm-diff-hunk-header" style="padding:6px 12px;background:rgba(124,138,166,0.10);color:#7c8aa6;font-family:\\'Space Mono\\',ui-monospace,monospace;font-size:11px;border-top:1px solid var(--swarm-border,#22304a);">'
+      '<a id="' + esc(anchorId) + '" class="swarm-diff-anchor" data-hunk="' + esc(anchorSlug) + '" data-new-start="' + esc(newStart) + '"></a>'
+      + '<div class="swarm-diff-hunk-header" style="padding:6px 12px;background:' + tint('var(--color-muted-foreground, rgb(124,138,166))', '10%') + ';color:' + MUTED + ';font-family:' + MONO + ';font-size:11px;border-top:1px solid var(--swarm-border,#22304a);">'
       + esc(header)
       + '</div>'
       + '<table class="swarm-diff-table" style="width:100%;border-collapse:collapse;table-layout:fixed;">'
@@ -26995,7 +27174,7 @@ var SWARM_UI_JS = `
 
     var shaLine = '';
     if (baseSha || headSha) {
-      shaLine = '<span class="swarm-diff-sha" style="font-family:\\'Space Mono\\',ui-monospace,monospace;font-size:11px;color:#7c8aa6;">'
+      shaLine = '<span class="swarm-diff-sha" style="font-family:' + MONO + ';font-size:11px;color:' + MUTED + ';">'
         + esc(baseSha) + ' → ' + esc(headSha)
         + '</span>';
     }
@@ -27007,8 +27186,8 @@ var SWARM_UI_JS = `
 
     rootEl.innerHTML = (
       '<div class="swarm-diff-root" style="border:1px solid var(--swarm-border,#22304a);border-radius:8px;background:var(--swarm-card,#121826);overflow:hidden;margin:12px 0;break-inside:avoid;">'
-      + '<div class="swarm-diff-header" style="display:flex;align-items:center;justify-content:space-between;padding:10px 12px;background:rgba(59,130,246,0.10);border-bottom:1px solid var(--swarm-border,#22304a);">'
-      + '<span class="swarm-diff-file" style="font-family:\\'Space Mono\\',ui-monospace,monospace;font-size:13px;font-weight:700;color:var(--swarm-text,#e6eaf2);">' + esc(file || '(untitled)') + '</span>'
+      + '<div class="swarm-diff-header" style="display:flex;align-items:center;justify-content:space-between;padding:10px 12px;background:var(--color-surface, rgba(59,130,246,0.10));border-bottom:1px solid var(--swarm-border,#22304a);">'
+      + '<span class="swarm-diff-file" style="font-family:' + MONO + ';font-size:13px;font-weight:700;color:var(--swarm-text,#e6eaf2);">' + esc(file || '(untitled)') + '</span>'
       + shaLine
       + '</div>'
       + hunksHtml
@@ -27072,21 +27251,34 @@ var SWARM_UI_JS = `
       var renderJumps = function() {
         var anchors = document.querySelectorAll('.swarm-diff-anchor[data-hunk]');
         if (!anchors.length) {
-          self.innerHTML = '<span class="no-print" style="color:#7c8aa6;font-size:12px;">No hunks yet.</span>';
+          self.innerHTML = '<span class="no-print" style="color:' + MUTED + ';font-size:12px;">No hunks yet.</span>';
           return;
         }
-        var items = '';
+        var labels = [];
+        var fileCounts = new Map();
         for (var i = 0; i < anchors.length; i++) {
           var a = anchors[i];
           var slug = a.getAttribute('data-hunk') || ('hunk-' + i);
           // Hunk title = nearest preceding diff's file attribute if available.
           var diff = a.closest && a.closest('swarm-diff');
           var file = (diff && diff.getAttribute('file')) || slug;
-          items += '<li style="margin:0;padding:2px 0;"><a href="#' + esc(a.id) + '" style="color:#3b82f6;text-decoration:none;font-family:\\'Space Mono\\',ui-monospace,monospace;font-size:12px;">' + esc(file) + '</a></li>';
+          labels.push(file);
+          fileCounts.set(file, (fileCounts.get(file) || 0) + 1);
+        }
+        var items = '';
+        for (var n = 0; n < anchors.length; n++) {
+          // A file with more than one hunk gets each hunk's new-side start
+          // line (src/x.ts:58), so its links differ.
+          var label = labels[n];
+          var newStart = anchors[n].getAttribute('data-new-start');
+          if (fileCounts.get(label) > 1 && newStart) label += ':' + newStart;
+          // target=_self: the page head sets <base target="_blank">, which would
+          // open these in-page anchors in a new tab.
+          items += '<li style="margin:0;padding:2px 0;"><a href="#' + esc(anchors[n].id) + '" target="_self" style="color:var(--color-primary, #3b82f6);text-decoration:none;font-family:' + MONO + ';font-size:12px;">' + esc(label) + '</a></li>';
         }
         self.innerHTML = (
-          '<nav class="swarm-diff-jumps no-print" style="padding:8px 12px;border:1px dashed var(--swarm-border,#22304a);border-radius:8px;background:rgba(124,138,166,0.05);">'
-          + '<div style="font-size:10px;text-transform:uppercase;letter-spacing:0.08em;color:#7c8aa6;margin-bottom:4px;">Jump to</div>'
+          '<nav class="swarm-diff-jumps no-print" style="padding:8px 12px;border:1px dashed var(--swarm-border,#22304a);border-radius:8px;background:' + tint('var(--color-muted-foreground, rgb(124,138,166))', '5%') + ';">'
+          + '<div style="font-size:10px;text-transform:uppercase;letter-spacing:0.08em;color:' + MUTED + ';margin-bottom:4px;">Jump to</div>'
           + '<ul style="list-style:none;padding:0;margin:0;">' + items + '</ul>'
           + '</nav>'
         );
@@ -27352,6 +27544,9 @@ var SWARM_UI_JS = `
 })();
 `;
 
+// src/http/pages-public.ts
+init_color_literals();
+
 // src/pages/feedback-overlay.ts
 var PAGE_FEEDBACK_PARAM = "__swarm-feedback";
 function isPageFeedbackRequested(queryParams) {
@@ -27900,58 +28095,82 @@ function feedbackKeyGuardScript() {
   return `<script>${FEEDBACK_KEY_GUARD_JS}</script>`;
 }
 
-// src/http/pages-public.ts
-init_types4();
-init_constants3();
-init_node_env();
-init_page_session();
-init_secret_scrubber();
-init_route_def();
-var PublicPageJsonSchema = PageSchema.pick({
-  id: true,
-  title: true,
-  description: true,
-  contentType: true,
-  authMode: true,
-  body: true
-}).extend({
-  version: literal2(1)
-});
-var publicPageRoute = route({
-  method: "get",
-  path: "/p/{id}",
-  pattern: ["p", null],
-  summary: "Render a page (HTML/SVG inline; JSON redirects to SPA)",
-  tags: ["Pages"],
-  params: object2({ id: string2() }),
-  responses: {
-    200: {
-      description: "Rendered HTML page or raw SVG image",
-      unstructured: "Serves raw image/svg+xml bytes, the page's agent-authored HTML body (SDK-injected) or, for ?print=1 on a JSON-content page, a standalone printable HTML document — not a JSON shape"
-    },
-    302: { description: "Redirect to SPA for JSON content" },
-    401: { description: "Page requires an authenticated session" },
-    403: { description: "Cookie does not match this page id" },
-    404: { description: "Page not found" }
-  },
-  auth: { apiKey: false }
-});
-var publicPageJsonRoute = route({
-  method: "get",
-  path: "/p/{id}.json",
-  pattern: ["p", null],
-  summary: "Page metadata + body as JSON (used by SPA renderer)",
-  tags: ["Pages"],
-  params: object2({ id: string2() }),
-  responses: {
-    200: { description: "Page JSON", schema: PublicPageJsonSchema },
-    401: { description: "Page requires an authenticated session" },
-    403: { description: "Cookie does not match this page id" },
-    404: { description: "Page not found" }
-  },
-  auth: { apiKey: false }
-});
-var PAGE_HEAD_DEFAULTS = `<base target="_blank">
+// src/themes/page-theme.ts
+init_presets();
+init_tokens2();
+var SWARM_ALIASES = [
+  ["--swarm-bg", "--color-background"],
+  ["--swarm-card", "--color-card"],
+  ["--swarm-border", "--color-border"],
+  ["--swarm-text", "--color-foreground"],
+  ["--swarm-muted", "--color-muted-foreground"],
+  ["--swarm-primary", "--color-primary"]
+];
+function contractValues(vars) {
+  const values = {};
+  if (!vars)
+    return values;
+  for (const token of PAGE_THEME_TOKENS) {
+    const value = vars[token];
+    if (value !== undefined)
+      values[token] = value;
+  }
+  return values;
+}
+function resolvePageTheme({
+  pageTheme,
+  viewerTheme,
+  overrides
+}) {
+  const preset = getThemePreset(pageTheme) ?? getThemePreset(viewerTheme) ?? getThemePreset(DEFAULT_THEME_ID);
+  const lightOverrides = contractValues(overrides?.light);
+  const darkOverrides = contractValues(overrides?.dark);
+  const light = {
+    ...HIVE_PAGE_TOKENS.light,
+    ...contractValues(preset?.vars.light),
+    ...lightOverrides
+  };
+  const dark = { ...HIVE_PAGE_TOKENS.dark, ...contractValues(preset?.vars.dark), ...darkOverrides };
+  for (const token of PAGE_THEME_SHARED_TOKENS) {
+    const value = lightOverrides[token];
+    if (value !== undefined && darkOverrides[token] === undefined)
+      dark[token] = value;
+  }
+  return { presetId: preset?.id ?? DEFAULT_THEME_ID, light, dark };
+}
+function declarationLines(values, indent) {
+  return PAGE_THEME_TOKENS.map((token) => `${indent}${token}: ${values[token]};`).join(`
+`);
+}
+function renderPageThemeCss(theme) {
+  const aliases = SWARM_ALIASES.map(([alias, token]) => `  ${alias}: var(${token});`).join(`
+`);
+  return [
+    `:root {
+  color-scheme: light;
+${declarationLines(theme.light, "  ")}
+${aliases}
+}`,
+    `:root.dark {
+  color-scheme: dark;
+${declarationLines(theme.dark, "  ")}
+}`,
+    `@media print {
+  :root.dark {
+    color-scheme: light;
+${declarationLines(theme.light, "    ")}
+  }
+}`
+  ].join(`
+
+`);
+}
+
+// src/pages/page-head.ts
+init_tokens2();
+var PAGE_THEME_PARAM = "__swarm-theme";
+var PAGE_MODE_PARAM = "__swarm-mode";
+var PAGE_HEAD_V1 = `<base target="_blank">
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600;700&family=Space+Mono:wght@400;700&display=swap" rel="stylesheet">
@@ -28007,14 +28226,689 @@ var PAGE_HEAD_DEFAULTS = `<base target="_blank">
     .swarm-card, swarm-diff { break-inside: avoid; }
   }
 </style>`;
-function injectBrowserSdk(html, headFirst = "") {
-  const injection = `${headFirst}${PAGE_HEAD_DEFAULTS}<script>${BROWSER_SDK_JS}</script><script>${SWARM_UI_JS}</script>`;
-  const headOpenMatch = html.match(/<head\b[^>]*>/i);
-  if (headOpenMatch) {
-    const idx = headOpenMatch.index + headOpenMatch[0].length;
-    return html.slice(0, idx) + injection + html.slice(idx);
+var TAILWIND_BROWSER_SRC = "https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4.3.3/dist/index.global.js";
+var TAILWIND_BROWSER_INTEGRITY = "sha384-2ql948lIdLcGEE0/qxNiudyTjgauA3RDJERu5xW75kFCvSl5a9odyQYCb6tEjnmB";
+var IN_PAGE_LINK_SCRIPT = `<script>document.addEventListener("click", function (event) {
+  var link = event.target && event.target.closest && event.target.closest('a[href^="#"]:not([target])');
+  if (link) link.setAttribute("target", "_self");
+}, true);</script>`;
+var FONT_LINKS = `<link rel="preconnect" href="https://fonts.googleapis.com">
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+<link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600;700&family=Space+Mono:wght@400;700&display=swap" rel="stylesheet">`;
+var TAILWIND_SOURCE = [
+  '@import "tailwindcss/theme" layer(theme);',
+  '@import "tailwindcss/utilities" layer(utilities);',
+  "@custom-variant dark (&:where(.dark, .dark *));",
+  "@theme inline reference {",
+  ...PAGE_THEME_TOKENS.map((token) => `  ${token}: var(${token});`),
+  "}"
+].join(`
+`);
+var TAILWIND_SOURCE_SCRIPT = `<script>(function () {
+  var style = document.createElement("style");
+  style.type = "text/tailwindcss";
+  style.textContent = ${JSON.stringify(TAILWIND_SOURCE).replace(/</g, "\\u003c")};
+  document.head.appendChild(style);
+})();</script>`;
+var CONTROL_LOOK = `min-width: 0;
+    padding: 7px 12px;
+    font-size: 14px;
+    line-height: 20px;
+    color: var(--color-foreground);
+    background-color: var(--color-card);
+    border: 1px solid var(--color-input);
+    border-radius: var(--radius-md);
+    transition: border-color 150ms, box-shadow 150ms;`;
+var BUTTON_LOOK = `display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    gap: 8px;
+    padding: 7px 14px;
+    font-size: 14px;
+    font-weight: 500;
+    line-height: 20px;
+    color: var(--color-foreground);
+    background-color: var(--color-card);
+    border: 1px solid var(--color-input);
+    border-radius: var(--radius-md);
+    text-decoration: none;
+    white-space: nowrap;
+    cursor: pointer;
+    transition: color 150ms, background-color 150ms, border-color 150ms, box-shadow 150ms;`;
+var FOCUS_RING = `outline: none;
+    border-color: var(--color-ring);
+    box-shadow: 0 0 0 2px color-mix(in oklab, var(--color-ring) 60%, transparent);`;
+var TEXT_CONTROLS = `:where(input:not([type="checkbox"], [type="radio"], [type="range"], [type="color"], [type="file"], [type="button"], [type="submit"], [type="reset"], [type="image"], [type="hidden"]), select, textarea)`;
+var BUTTON_CONTROLS = `:where(button, input[type="button"], input[type="submit"], input[type="reset"])`;
+var EDGE_SHADOW = "color-mix(in oklab, var(--color-foreground) 14%, transparent)";
+var TONES = [
+  ["neutral", "--color-status-neutral", "--color-status-neutral-strong"],
+  ["primary", "--color-primary", "--color-primary"],
+  ...["success", "warning", "error", "info", "pending", "paused", "active"].map((tone) => [tone, `--color-status-${tone}`, `--color-status-${tone}-strong`])
+];
+var TONE_RULES = TONES.map(([tone, soft, strong]) => `  :is(.swarm-badge, .swarm-callout, .swarm-metric)[data-tone="${tone}"] {
+    --swarm-tone: var(${soft});
+    --swarm-tone-strong: var(${strong});
+  }`).join(`
+`);
+var PAGE_DESIGN_CSS = `@layer base {
+  *, ::before, ::after, ::backdrop, ::file-selector-button {
+    box-sizing: border-box;
+    border: 0 solid var(--color-border);
   }
-  return injection + html;
+  html {
+    color: var(--color-foreground);
+    -webkit-text-size-adjust: 100%;
+    text-size-adjust: 100%;
+    tab-size: 4;
+  }
+  body {
+    margin: 0;
+    padding: 24px;
+    background-color: var(--color-background);
+    color: var(--color-foreground);
+    font-family: var(--font-sans), ui-sans-serif, system-ui, sans-serif;
+    font-size: 15px;
+    line-height: 1.55;
+    -webkit-font-smoothing: antialiased;
+    -moz-osx-font-smoothing: grayscale;
+  }
+  @media (max-width: 640px) {
+    body { padding: 16px; }
+  }
+  :focus-visible {
+    outline: 2px solid var(--color-ring);
+    outline-offset: 2px;
+  }
+  h1, h2, h3, h4, h5, h6 {
+    margin: 0;
+    font-weight: 600;
+    text-wrap: balance;
+  }
+  h1 { margin: 0 0 12px; font-size: 30px; line-height: 1.2; letter-spacing: -0.02em; }
+  h2 { margin: 40px 0 12px; font-size: 20px; line-height: 1.3; letter-spacing: -0.015em; }
+  h3 { margin: 28px 0 8px; font-size: 16px; line-height: 1.4; letter-spacing: -0.01em; }
+  h4 { margin: 24px 0 6px; font-size: 15px; line-height: 1.45; }
+  h5, h6 { margin: 20px 0 6px; font-size: 13px; line-height: 1.45; }
+  p { margin: 0 0 12px; text-wrap: pretty; }
+  ul, ol { margin: 0 0 12px; padding-left: 1.5em; }
+  li { margin: 4px 0; }
+  li > ul, li > ol { margin: 4px 0 0; }
+  li::marker { color: var(--color-muted-foreground); }
+  dl, figure, blockquote, pre, table, details, fieldset, form { margin: 0 0 16px; }
+  dt { font-weight: 500; }
+  dd { margin: 0 0 8px; }
+  :where(h1, h2, h3, h4, h5, h6):first-child { margin-top: 0; }
+  :where(p, ul, ol, dl, dd, figure, blockquote, pre, table, details, fieldset, form):last-child { margin-bottom: 0; }
+  a {
+    color: var(--color-primary);
+    text-decoration-line: underline;
+    text-decoration-thickness: 1px;
+    text-decoration-color: color-mix(in oklab, currentColor 35%, transparent);
+    text-underline-offset: 3px;
+  }
+  a:hover { text-decoration-color: currentColor; }
+  hr {
+    height: 0;
+    margin: 32px 0;
+    color: inherit;
+    border-top: 1px solid var(--color-border-subtle);
+  }
+  b, strong { font-weight: 600; }
+  mark {
+    padding: 0 2px;
+    color: inherit;
+    background-color: color-mix(in oklab, var(--color-status-pending) 35%, transparent);
+    border-radius: 2px;
+  }
+  code, kbd, samp, pre {
+    font-family: var(--font-mono), ui-monospace, SFMono-Regular, Menlo, monospace;
+    font-size: 0.85em;
+  }
+  code {
+    padding: 0.1em 0.35em;
+    background-color: var(--color-muted);
+    border-radius: var(--radius-sm);
+    -webkit-box-decoration-break: clone;
+    box-decoration-break: clone;
+  }
+  kbd {
+    padding: 0.05em 0.4em;
+    background-color: var(--color-card);
+    border: 1px solid var(--color-border);
+    border-bottom-width: 2px;
+    border-radius: var(--radius-sm);
+  }
+  pre {
+    padding: 12px 14px;
+    overflow: auto;
+    line-height: 1.6;
+    background-color: var(--color-surface);
+    border: 1px solid var(--color-border);
+    border-radius: var(--radius-lg);
+  }
+  pre code {
+    padding: 0;
+    font-size: inherit;
+    background-color: transparent;
+    border-radius: 0;
+  }
+  blockquote {
+    padding: 2px 0 2px 16px;
+    color: var(--color-muted-foreground);
+    border-left: 2px solid var(--color-border);
+  }
+  summary {
+    cursor: pointer;
+    font-weight: 500;
+  }
+  summary::marker { color: var(--color-muted-foreground); }
+  details[open] > summary { margin-bottom: 8px; }
+  img, video {
+    display: block;
+    max-width: 100%;
+    height: auto;
+  }
+  figcaption {
+    margin-top: 8px;
+    font-size: 13px;
+    color: var(--color-muted-foreground);
+  }
+  table {
+    width: 100%;
+    border-collapse: collapse;
+    font-size: 14px;
+    font-variant-numeric: tabular-nums;
+  }
+  caption {
+    padding-bottom: 8px;
+    font-size: 13px;
+    text-align: left;
+    color: var(--color-muted-foreground);
+  }
+  th, td {
+    padding: 8px 12px;
+    text-align: left;
+    vertical-align: middle;
+    border-bottom: 1px solid var(--color-border-subtle);
+  }
+  th {
+    font-size: 11px;
+    font-weight: 500;
+    line-height: 1.45;
+    letter-spacing: 0.05em;
+    text-transform: uppercase;
+    vertical-align: bottom;
+    color: var(--color-muted-foreground);
+    border-bottom-color: var(--color-border);
+  }
+  th[scope="row"] {
+    font-size: inherit;
+    letter-spacing: normal;
+    text-transform: none;
+    vertical-align: middle;
+    color: inherit;
+    border-bottom-color: var(--color-border-subtle);
+  }
+  tfoot :is(td, th) {
+    font-weight: 600;
+    border-top: 1px solid var(--color-border);
+  }
+  tbody:has(+ tfoot) > tr:last-child > :is(td, th) { border-bottom-color: var(--color-border); }
+  :where(button, input, optgroup, select, textarea), ::file-selector-button {
+    font: inherit;
+    font-feature-settings: inherit;
+    font-variation-settings: inherit;
+    letter-spacing: inherit;
+    color: inherit;
+  }
+  ${TEXT_CONTROLS} {
+    ${CONTROL_LOOK}
+  }
+  ${TEXT_CONTROLS}:focus-visible {
+    ${FOCUS_RING}
+  }
+  :where(input, select, textarea)::placeholder {
+    color: var(--color-muted-foreground);
+    opacity: 1;
+  }
+  :where(input, select, textarea, button):disabled {
+    cursor: not-allowed;
+    opacity: 0.5;
+  }
+  :where(input, select, textarea)[aria-invalid="true"] { border-color: var(--color-destructive); }
+  textarea {
+    min-height: 80px;
+    line-height: 1.5;
+    resize: vertical;
+  }
+  select:not([multiple], [size]) {
+    appearance: none;
+    padding-right: 32px;
+    background-image:
+      linear-gradient(45deg, transparent 50%, var(--color-muted-foreground) 50%),
+      linear-gradient(135deg, var(--color-muted-foreground) 50%, transparent 50%);
+    background-position: calc(100% - 18px) 50%, calc(100% - 13px) 50%;
+    background-size: 5px 5px;
+    background-repeat: no-repeat;
+  }
+  ${BUTTON_CONTROLS} {
+    ${BUTTON_LOOK}
+  }
+  ${BUTTON_CONTROLS}:hover:not(:disabled) {
+    color: var(--color-accent-foreground);
+    background-color: var(--color-accent);
+  }
+  ${BUTTON_CONTROLS}:focus-visible {
+    ${FOCUS_RING}
+  }
+  ::file-selector-button {
+    margin-right: 12px;
+    padding: 4px 10px;
+    font-size: 13px;
+    font-weight: 500;
+    color: var(--color-foreground);
+    background-color: var(--color-card);
+    border: 1px solid var(--color-input);
+    border-radius: var(--radius-sm);
+    cursor: pointer;
+  }
+  input[type="checkbox"], input[type="radio"], input[type="range"], progress {
+    accent-color: var(--color-primary);
+  }
+  fieldset {
+    min-width: 0;
+    padding: 12px 16px 16px;
+    border: 1px solid var(--color-border);
+    border-radius: var(--radius-lg);
+  }
+  legend {
+    padding: 0 6px;
+    font-size: 13px;
+    font-weight: 500;
+    color: var(--color-muted-foreground);
+  }
+  label:has(input, select, textarea), label[for] { cursor: pointer; }
+  ::selection {
+    color: var(--color-primary-foreground);
+    background-color: var(--color-primary);
+  }
+}
+
+@layer components {
+  .swarm-page {
+    max-width: 1120px;
+    margin-inline: auto;
+    padding-block: 8px 24px;
+  }
+  .swarm-eyebrow {
+    margin: 0 0 8px;
+    font-size: 11px;
+    font-weight: 500;
+    line-height: 1.45;
+    letter-spacing: 0.08em;
+    text-transform: uppercase;
+    color: var(--color-muted-foreground);
+  }
+  .swarm-lede {
+    max-width: 68ch;
+    margin: 0 0 16px;
+    font-size: 17px;
+    line-height: 1.55;
+    color: var(--color-muted-foreground);
+    text-wrap: pretty;
+  }
+  .swarm-section { margin-block: 40px; }
+  .swarm-section:last-child { margin-bottom: 0; }
+  .swarm-section > :first-child { margin-top: 0; }
+
+  .swarm-metrics {
+    display: grid;
+    grid-template-columns: repeat(auto-fit, minmax(min(100%, 148px), 1fr));
+    gap: 12px;
+    margin: 24px 0;
+  }
+  .swarm-metric {
+    display: flex;
+    flex-direction: column;
+    gap: 4px;
+    min-width: 0;
+    padding: 14px 16px;
+    color: var(--color-card-foreground);
+    background-color: var(--color-card);
+    border: 1px solid var(--color-border);
+    border-radius: var(--radius-xl);
+  }
+  .swarm-metric-value {
+    font-size: 26px;
+    font-weight: 600;
+    line-height: 1.15;
+    letter-spacing: -0.02em;
+    font-variant-numeric: tabular-nums;
+    overflow-wrap: anywhere;
+  }
+  .swarm-metric[data-tone] .swarm-metric-value { color: var(--swarm-tone-strong); }
+  .swarm-metric-label {
+    font-size: 12px;
+    line-height: 1.45;
+    color: var(--color-muted-foreground);
+  }
+
+  .swarm-panel, .swarm-card {
+    padding: 20px;
+    color: var(--color-card-foreground);
+    background-color: var(--color-card);
+    border: 1px solid var(--color-border);
+    border-radius: var(--radius-xl);
+  }
+  :is(.swarm-panel, .swarm-card) > :first-child { margin-top: 0; }
+  :is(.swarm-panel, .swarm-card) > :last-child { margin-bottom: 0; }
+
+  .swarm-badge {
+    --swarm-tone: var(--color-status-neutral);
+    --swarm-tone-strong: var(--color-status-neutral-strong);
+    display: inline-flex;
+    align-items: center;
+    gap: 6px;
+    height: 22px;
+    padding: 0 8px;
+    font-size: 12px;
+    font-weight: 500;
+    line-height: 1;
+    white-space: nowrap;
+    vertical-align: middle;
+    color: var(--swarm-tone-strong);
+    background-color: color-mix(in oklab, var(--swarm-tone) 16%, transparent);
+    border: 1px solid color-mix(in oklab, var(--swarm-tone) 28%, transparent);
+    border-radius: 999px;
+  }
+  .swarm-badge[data-dot]::before {
+    content: "";
+    flex: none;
+    width: 6px;
+    height: 6px;
+    background: var(--swarm-dot, currentColor);
+    border-radius: 999px;
+  }
+
+  .swarm-table-wrap {
+    max-height: min(70vh, 720px);
+    margin: 0 0 16px;
+    overflow: auto;
+    background:
+      linear-gradient(to right, var(--color-card) 30%, transparent) left / 40px 100% no-repeat local,
+      linear-gradient(to left, var(--color-card) 30%, transparent) right / 40px 100% no-repeat local,
+      linear-gradient(to right, ${EDGE_SHADOW}, transparent) left / 14px 100% no-repeat scroll,
+      linear-gradient(to left, ${EDGE_SHADOW}, transparent) right / 14px 100% no-repeat scroll,
+      var(--color-card);
+    border: 1px solid var(--color-border);
+    border-radius: var(--radius-xl);
+  }
+  .swarm-table-wrap:last-child { margin-bottom: 0; }
+  .swarm-table-wrap > table { margin: 0; }
+  .swarm-table {
+    width: 100%;
+    border-collapse: separate;
+    border-spacing: 0;
+    font-size: 13px;
+    line-height: 1.45;
+    font-variant-numeric: tabular-nums;
+  }
+  .swarm-table :is(th, td) { padding: 8px 12px; }
+  .swarm-table thead th {
+    position: sticky;
+    top: 0;
+    z-index: 1;
+    padding-block: 10px 8px;
+    white-space: nowrap;
+    background-color: var(--color-card);
+  }
+  .swarm-table tbody tr:hover > :is(td, th) { background-color: color-mix(in oklab, var(--color-accent) 70%, transparent); }
+  .swarm-table-wrap > .swarm-table > :last-child > tr:last-child > :is(td, th) { border-bottom: 0; }
+  :is(td, th).num {
+    text-align: right;
+    white-space: nowrap;
+    font-variant-numeric: tabular-nums;
+  }
+  :is(td, th).nowrap { white-space: nowrap; }
+  .swarm-diff-root :is(table, th, td) { margin: 0; border: 0; }
+
+  .swarm-button {
+    ${BUTTON_LOOK}
+  }
+  .swarm-button:hover {
+    color: var(--color-accent-foreground);
+    background-color: var(--color-accent);
+  }
+  .swarm-button[data-variant="primary"] {
+    color: var(--color-primary-foreground);
+    background-color: var(--color-primary);
+    border-color: transparent;
+  }
+  .swarm-button[data-variant="primary"]:hover {
+    color: var(--color-primary-foreground);
+    background-color: color-mix(in oklab, var(--color-primary) 90%, transparent);
+  }
+  .swarm-button[data-variant="ghost"] {
+    background-color: transparent;
+    border-color: transparent;
+  }
+  .swarm-button[data-variant="ghost"]:hover { background-color: var(--color-accent); }
+  .swarm-button:focus-visible {
+    ${FOCUS_RING}
+  }
+  .swarm-button:is(:disabled, [aria-disabled="true"]) {
+    opacity: 0.5;
+    pointer-events: none;
+  }
+
+  .swarm-input {
+    ${CONTROL_LOOK}
+  }
+  .swarm-input:focus-visible {
+    ${FOCUS_RING}
+  }
+  select.swarm-input:not([multiple], [size]) { padding-right: 32px; }
+
+  .swarm-toolbar {
+    display: flex;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 8px;
+    margin: 0 0 12px;
+  }
+  .swarm-toolbar > :is(input[type="search"], input[type="text"], input:not([type])) { flex: 1 1 260px; }
+
+  .swarm-segmented {
+    display: inline-flex;
+    align-items: center;
+    gap: 2px;
+    height: 36px;
+    padding: 2px;
+    vertical-align: middle;
+    background-color: color-mix(in oklab, var(--color-muted) 40%, transparent);
+    border: 1px solid var(--color-border);
+    border-radius: var(--radius-md);
+  }
+  .swarm-segmented > :is(button, a) {
+    display: inline-flex;
+    align-items: center;
+    justify-content: center;
+    gap: 6px;
+    height: 100%;
+    padding: 0 12px;
+    font-size: 12px;
+    font-weight: 500;
+    line-height: 1;
+    white-space: nowrap;
+    text-decoration: none;
+    color: var(--color-muted-foreground);
+    background-color: transparent;
+    border: 0;
+    border-radius: calc(var(--radius-md) - 3px);
+    box-shadow: none;
+    cursor: pointer;
+    transition: color 150ms, background-color 150ms;
+  }
+  .swarm-segmented > :is(button, a):hover {
+    color: var(--color-foreground);
+    background-color: transparent;
+  }
+  .swarm-segmented > :is([aria-pressed="true"], [data-active]:not([data-active="false"])) {
+    color: var(--color-primary-foreground);
+    background-color: var(--color-primary);
+  }
+  .swarm-segmented > :is(button, a):focus-visible {
+    outline: none;
+    box-shadow: 0 0 0 2px color-mix(in oklab, var(--color-ring) 60%, transparent);
+  }
+
+  .swarm-callout {
+    --swarm-tone: var(--color-status-info);
+    --swarm-tone-strong: var(--color-status-info-strong);
+    margin: 0 0 12px;
+    padding: 12px 16px;
+    color: var(--color-foreground);
+    background-color: color-mix(in oklab, var(--swarm-tone) 12%, transparent);
+    border: 1px solid color-mix(in oklab, var(--swarm-tone) 40%, transparent);
+    border-radius: var(--radius-lg);
+  }
+  .swarm-callout:last-child { margin-bottom: 0; }
+  .swarm-callout > :first-child { margin-top: 0; }
+  .swarm-callout > :last-child { margin-bottom: 0; }
+
+  .swarm-kv {
+    display: grid;
+    grid-template-columns: minmax(96px, max-content) minmax(0, 1fr);
+    gap: 8px 20px;
+    margin: 0 0 16px;
+    font-size: 14px;
+  }
+  .swarm-kv:last-child { margin-bottom: 0; }
+  .swarm-kv > dt {
+    font-weight: 400;
+    color: var(--color-muted-foreground);
+  }
+  .swarm-kv > dd {
+    min-width: 0;
+    margin: 0;
+    overflow-wrap: anywhere;
+  }
+
+${TONE_RULES}
+}
+
+@media print {
+  html, body { background: white !important; color: black !important; }
+  a:not(.swarm-button) { color: black !important; text-decoration: underline; }
+  .no-print { display: none !important; }
+  .swarm-panel, .swarm-card, swarm-diff, .swarm-metric { break-inside: avoid; }
+  .swarm-table-wrap { max-height: none; overflow: visible; }
+  .swarm-table { font-size: 12px; }
+  .swarm-table :is(th, td):not(.num) { white-space: normal; }
+  .swarm-table thead th { position: static; }
+  tfoot { display: table-row-group; }
+}`;
+function buildPageHeadV2({
+  theme,
+  mode
+}) {
+  return [
+    '<base target="_blank">',
+    IN_PAGE_LINK_SCRIPT,
+    "<style>@layer properties, theme, base, components, utilities;</style>",
+    FONT_LINKS,
+    `<style id="swarm-theme">
+${renderPageThemeCss(theme)}
+</style>`,
+    `<style id="swarm-design">
+${PAGE_DESIGN_CSS}
+</style>`,
+    TAILWIND_SOURCE_SCRIPT,
+    `<script src="${TAILWIND_BROWSER_SRC}" integrity="${TAILWIND_BROWSER_INTEGRITY}" crossorigin="anonymous"></script>`,
+    ...mode === "dark" ? ['<script>document.documentElement.classList.add("dark")</script>'] : []
+  ].join(`
+`);
+}
+
+// src/http/pages-public.ts
+init_types4();
+init_constants3();
+init_page_session();
+init_secret_scrubber();
+init_route_def();
+var PublicPageJsonSchema = PageSchema.pick({
+  id: true,
+  title: true,
+  description: true,
+  contentType: true,
+  authMode: true,
+  body: true
+}).extend({
+  version: literal2(1)
+});
+var publicPageRoute = route({
+  method: "get",
+  path: "/p/{id}",
+  pattern: ["p", null],
+  summary: "Render a page (HTML/SVG inline; JSON redirects to SPA)",
+  tags: ["Pages"],
+  params: object2({ id: string2() }),
+  responses: {
+    200: {
+      description: "Rendered HTML page or raw SVG image",
+      unstructured: "Serves raw image/svg+xml bytes, the page's agent-authored HTML body (SDK-injected) or, for ?print=1 on a JSON-content page, a standalone printable HTML document — not a JSON shape"
+    },
+    302: { description: "Redirect to SPA for JSON content" },
+    401: { description: "Page requires an authenticated session" },
+    403: { description: "Cookie does not match this page id" },
+    404: { description: "Page not found" }
+  },
+  auth: { apiKey: false }
+});
+var publicPageJsonRoute = route({
+  method: "get",
+  path: "/p/{id}.json",
+  pattern: ["p", null],
+  summary: "Page metadata + body as JSON (used by SPA renderer)",
+  tags: ["Pages"],
+  params: object2({ id: string2() }),
+  responses: {
+    200: { description: "Page JSON", schema: PublicPageJsonSchema },
+    401: { description: "Page requires an authenticated session" },
+    403: { description: "Cookie does not match this page id" },
+    404: { description: "Page not found" }
+  },
+  auth: { apiKey: false }
+});
+function pageHead(page, queryParams, wantsPrint) {
+  if (page.designVersion === 1)
+    return PAGE_HEAD_V1;
+  const theme = resolvePageTheme({
+    pageTheme: page.theme,
+    viewerTheme: queryParams.get(PAGE_THEME_PARAM),
+    overrides: page.themeTokens
+  });
+  const dark = !wantsPrint && queryParams.get(PAGE_MODE_PARAM) === "dark" && countColorLiterals(page.body) < COLOR_LITERAL_THRESHOLD;
+  return buildPageHeadV2({ theme, mode: dark ? "dark" : "light" });
+}
+var LEADING_DOCTYPE_RE = /^\s*<!doctype\b[^>]*>/i;
+var LEADING_HTML_TAG_RE = /^\s*<!doctype\b[^>]*>\s*<html\b[^>]*>/i;
+function injectBrowserSdk(html, { head, headFirst, standardsMode }) {
+  const injection = `${headFirst}${head}<script>${BROWSER_SDK_JS}</script><script>${SWARM_UI_JS}</script>`;
+  const doc = standardsMode && !LEADING_DOCTYPE_RE.test(html) ? `<!doctype html>${html}` : html;
+  const leading = standardsMode ? LEADING_HTML_TAG_RE.exec(doc) ?? LEADING_DOCTYPE_RE.exec(doc) : null;
+  const idx = headTagEnd(doc) ?? (leading ? leading.index + leading[0].length : null);
+  if (idx === null)
+    return injection + doc;
+  return doc.slice(0, idx) + injection + doc.slice(idx);
+}
+function headTagEnd(doc) {
+  const start = doc.search(/<head\b/i);
+  if (start === -1)
+    return null;
+  const close = doc.indexOf(">", start);
+  return close === -1 ? null : close + 1;
 }
 var PRINT_AUTOTRIGGER_SCRIPT = `<script>
   (function () {
@@ -28124,14 +29018,7 @@ function getPageFrameAncestors() {
 }
 function buildCsp(page) {
   const configured = getConfiguredAppUrls();
-  const devFallbacks = getNodeEnv() === "production" ? [] : [
-    "http://localhost:5274",
-    "http://localhost:5175",
-    "http://127.0.0.1:5274",
-    "http://127.0.0.1:5175",
-    "https://*.localhost",
-    "http://*.localhost"
-  ];
+  const devFallbacks = getLocalDevAppOrigins();
   const embedders = page.authMode === "public" ? getPageFrameAncestors() : [];
   const ancestors = Array.from(new Set([...configured, ...devFallbacks, ...embedders]));
   return [
@@ -28186,19 +29073,6 @@ function extractPasswordCandidate(req, queryParams) {
     return null;
   return decoded.slice(colonIdx + 1);
 }
-function isLocalhostRequest(req) {
-  if (getNodeEnv() === "production")
-    return false;
-  const origin = req.headers.origin ?? "";
-  if (origin === "") {
-    const rawHost = req.headers.host;
-    const host = Array.isArray(rawHost) ? rawHost[0] : rawHost;
-    if (!host)
-      return true;
-    return host.startsWith("localhost") || host.startsWith("127.0.0.1");
-  }
-  return origin.startsWith("http://localhost") || origin.startsWith("http://127.0.0.1");
-}
 async function handlePagesPublic(req, res, pathSegments, queryParams) {
   if (pathSegments.length !== 2 || pathSegments[0] !== "p")
     return false;
@@ -28239,7 +29113,7 @@ async function handlePagesPublic(req, res, pathSegments, queryParams) {
         }
         if (matched) {
           inlineSetCookie = await pageSessionSetCookies(req, page.id, {
-            dev: isLocalhostRequest(req)
+            dev: isLocalDevPageRequest(req)
           });
         } else {
           res.writeHead(401, {
@@ -28319,7 +29193,11 @@ async function handlePagesPublic(req, res, pathSegments, queryParams) {
     return true;
   }
   const feedback = isPageFeedbackRequested(queryParams);
-  const html = injectBrowserSdk(page.body, feedback ? feedbackKeyGuardScript() : "") + (wantsPrint ? PRINT_AUTOTRIGGER_SCRIPT : "") + (feedback ? feedbackOverlayScripts(page.id) : "");
+  const html = injectBrowserSdk(page.body, {
+    head: pageHead(page, queryParams, wantsPrint),
+    headFirst: feedback ? feedbackKeyGuardScript() : "",
+    standardsMode: page.designVersion !== 1
+  }) + (wantsPrint ? PRINT_AUTOTRIGGER_SCRIPT : "") + (feedback ? feedbackOverlayScripts(page.id) : "");
   const headers = {
     "Content-Type": "text/html; charset=utf-8",
     "Cache-Control": "no-store",
@@ -31591,7 +32469,7 @@ init_vendored_openapi();
 init_app_validation();
 init_ensure_token();
 init_mcp_wrapper();
-init_presets();
+init_presets2();
 init_wrapper();
 init_credential_broker();
 init_telemetry();
@@ -33498,6 +34376,9 @@ function refuseSourceWithSecrets(source) {
   };
 }
 
+// src/http/script-runs.ts
+init_rbac();
+
 // src/script-workflows/label-lint.ts
 var import_typescript = __toESM(require_typescript2(), 1);
 var ITERATION_CALLBACK_METHODS = new Set([
@@ -33567,6 +34448,7 @@ function lintWorkflowLabels(source) {
 }
 
 // src/http/script-runs.ts
+init_follow_up_redelegation_guard();
 init_types4();
 init_constants3();
 init_secret_scrubber();
@@ -33626,7 +34508,8 @@ var agentTaskBodySchema = object2({
   allowCustomModel: boolean().optional(),
   parentTaskId: string2().uuid().optional(),
   requestedByUserId: string2().optional(),
-  outputSchema: record2(string2(), unknown()).optional()
+  outputSchema: record2(string2(), unknown()).optional(),
+  allowRedelegation: boolean().optional()
 });
 var scriptRunCreatedSchema = object2({
   id: string2().uuid(),
@@ -33792,9 +34675,41 @@ var agentTaskRoute = route({
       description: "Agent task created or still running",
       schema: object2({ taskId: string2(), status: AgentTaskStatusSchema })
     },
-    404: { description: "Script run not found" }
+    403: {
+      description: "Script run belongs to another agent, or the run's agent may not create a child task under parentTaskId"
+    },
+    404: { description: "Script run not found" },
+    409: { description: "Agent task failed, was cancelled, or was superseded" },
+    422: { description: "Blocked by the follow-up re-delegation guard" }
   }
 });
+async function stepParentRefusal(runAgentId, parentTaskId) {
+  const parentTask = await getTaskById2(parentTaskId);
+  if (!parentTask)
+    return null;
+  const runAgent = await getAgentById2(runAgentId);
+  const decision = can({
+    principal: { kind: "agent", agentId: runAgentId, isLead: runAgent?.isLead ?? false },
+    verb: "task.parent.attach",
+    resource: {
+      kind: "task",
+      taskId: parentTask.id,
+      requestedByUserId: parentTask.requestedByUserId,
+      creatorAgentId: parentTask.creatorAgentId,
+      agentId: parentTask.agentId
+    },
+    source: "http"
+  });
+  return decision.allow ? null : `You don't have context for parent task ${parentTaskId}. Only its assignee, its creator, or a lead can create a child task under it.`;
+}
+async function resolveRunSourceTaskId(req, agentId) {
+  const raw = req.headers["x-source-task-id"];
+  const sourceTaskId = Array.isArray(raw) ? raw[0] : raw;
+  if (!sourceTaskId)
+    return;
+  const task = await getTaskById2(sourceTaskId);
+  return task?.agentId === agentId ? task.id : undefined;
+}
 async function requireAgent(res, agentId) {
   if (!agentId) {
     jsonError(res, "X-Agent-ID required for script runs API", 400);
@@ -33872,6 +34787,7 @@ async function handleScriptRuns(req, res, pathSegments, queryParams, agentId) {
       }
     }
     const cap = scriptRunConcurrencyCap();
+    const sourceTaskId = await resolveRunSourceTaskId(req, agent.id);
     const creation = await getDbClient2().transaction(async () => {
       if (await countActiveScriptRuns2() >= cap)
         return null;
@@ -33883,6 +34799,7 @@ async function handleScriptRuns(req, res, pathSegments, queryParams, agentId) {
         scriptName: parsed.body.scriptName,
         idempotencyKey: parsed.body.idempotencyKey,
         requestedByUserId: parsed.body.requestedByUserId,
+        sourceTaskId,
         createdBy: parsed.body.requestedByUserId
       });
     });
@@ -34079,9 +34996,22 @@ async function handleScriptRuns(req, res, pathSegments, queryParams, agentId) {
       jsonError(res, "Script run not found", 404);
       return true;
     }
+    if (agentId !== run.agentId) {
+      jsonError(res, "Script run belongs to another agent", 403);
+      return true;
+    }
+    if (parsed.body.parentTaskId) {
+      const refusal = await stepParentRefusal(run.agentId, parsed.body.parentTaskId);
+      if (refusal) {
+        jsonError(res, refusal, 403);
+        return true;
+      }
+    }
     const contextKey = `script-run:${run.id}:${parsed.body.stepKey}`;
     let task = await getLatestScriptRunStepTaskByContextKey2(contextKey);
+    let dispatchedHere = false;
     if (!task) {
+      const taskDescription = parsed.body.template ?? parsed.body.task ?? parsed.body.stepKey;
       const modelError = await explicitModelErrorForAgent({
         model: parsed.body.model,
         allowCustomModel: parsed.body.allowCustomModel,
@@ -34091,25 +35021,62 @@ async function handleScriptRuns(req, res, pathSegments, queryParams, agentId) {
         jsonError(res, modelError, 400);
         return true;
       }
+      const followUpThread = await followUpThreadForSourceTask(run.sourceTaskId);
+      let dispatched;
       try {
-        task = await createTaskExtended2(parsed.body.template ?? parsed.body.task ?? parsed.body.stepKey, {
-          agentId: parsed.body.agentId,
-          routingReason: parsed.body.routingReason ?? (parsed.body.agentId ? "human_pinned" : undefined),
-          routingNote: parsed.body.routingNote,
-          routingSource: parsed.body.routingReason ? "declared" : parsed.body.agentId ? "engine_default" : undefined,
-          tags: parsed.body.tags,
-          priority: parsed.body.priority,
-          dependsOn: parsed.body.dependsOn,
-          offeredTo: parsed.body.offerMode ? parsed.body.agentId : undefined,
-          taskType: "script-run-step",
-          source: "mcp",
-          dir: parsed.body.dir,
-          vcsRepo: parsed.body.vcsRepo,
-          model: parsed.body.model,
-          parentTaskId: parsed.body.parentTaskId,
-          requestedByUserId: parsed.body.requestedByUserId ?? run.requestedByUserId,
-          outputSchema: parsed.body.outputSchema,
-          contextKey
+        dispatched = await getDbClient2().transaction(async () => {
+          const replayed = await getLatestScriptRunStepTaskByContextKey2(contextKey);
+          if (replayed)
+            return { task: replayed };
+          let override;
+          if (followUpThread) {
+            const decision = await getScriptRunFollowUpGuard2(run.id);
+            if (decision !== "passed") {
+              const blocked = decision === null ? await evaluateFollowUpRedelegation({
+                ...followUpThread,
+                creatorAgentId: run.agentId,
+                taskDescription,
+                targetAgentId: parsed.body.agentId
+              }) : {
+                rule: decision,
+                message: `Blocked by the follow-up re-delegation guard (${decision} rule): an earlier step of this script run was blocked, and a run counts as one dispatch. If it must run, pass allowRedelegation: true.`
+              };
+              if (blocked && !parsed.body.allowRedelegation) {
+                if (decision === null)
+                  await setScriptRunFollowUpGuard2(run.id, blocked.rule);
+                return { blocked };
+              }
+              override = blocked?.rule;
+              await setScriptRunFollowUpGuard2(run.id, "passed");
+            }
+          }
+          const created = await createTaskExtended2(taskDescription, {
+            agentId: parsed.body.agentId,
+            routingReason: parsed.body.routingReason ?? (parsed.body.agentId ? "human_pinned" : undefined),
+            routingNote: parsed.body.routingNote,
+            routingSource: parsed.body.routingReason ? "declared" : parsed.body.agentId ? "engine_default" : undefined,
+            tags: parsed.body.tags,
+            priority: parsed.body.priority,
+            dependsOn: parsed.body.dependsOn,
+            offeredTo: parsed.body.offerMode ? parsed.body.agentId : undefined,
+            taskType: "script-run-step",
+            source: "mcp",
+            creatorAgentId: run.agentId,
+            sourceTaskId: run.sourceTaskId,
+            ...followUpThread ? {
+              slackChannelId: followUpThread.channelId,
+              slackThreadTs: followUpThread.threadTs,
+              slackUserId: followUpThread.userId
+            } : {},
+            dir: parsed.body.dir,
+            vcsRepo: parsed.body.vcsRepo,
+            model: parsed.body.model,
+            parentTaskId: parsed.body.parentTaskId,
+            requestedByUserId: parsed.body.requestedByUserId ?? run.requestedByUserId,
+            outputSchema: parsed.body.outputSchema,
+            contextKey
+          });
+          return { task: created, created: true, override };
         });
       } catch (error) {
         if (error instanceof ExtensionAgentAssignmentError2) {
@@ -34118,6 +35085,22 @@ async function handleScriptRuns(req, res, pathSegments, queryParams, agentId) {
         }
         throw error;
       }
+      if (dispatched.override) {
+        console.log(`[script-runs] follow-up re-delegation override: rule=${dispatched.override} runId=${run.id} creatorAgentId=${run.agentId} sourceTaskId=${run.sourceTaskId} thread=${followUpThread?.channelId}/${followUpThread?.threadTs}`);
+      }
+      if (!dispatched.task) {
+        json(res, { error: dispatched.blocked.message, rule: dispatched.blocked.rule }, 422);
+        return true;
+      }
+      task = dispatched.task;
+      dispatchedHere = dispatched.created === true;
+    }
+    if (!dispatchedHere && task.parentTaskId) {
+      const refusal = await stepParentRefusal(run.agentId, task.parentTaskId);
+      if (refusal) {
+        jsonError(res, refusal, 403);
+        return true;
+      }
     }
     const deadline = Date.now() + 30000;
     while (Date.now() < deadline) {
@@ -42912,9 +43895,10 @@ var httpServer = createHttpServer(async (req, res) => {
   });
 });
 var detachRealtime = attachRealtimeTransport(httpServer);
-var { attachControllerTransport } = await import("./controllers-connect-pp5jnxvc.js");
+var { attachControllerTransport } = await import("./controllers-connect-c6nm70kg.js");
 var detachControllers = attachControllerTransport(httpServer);
 var stopWorkerNudges = startWorkerNudgeListener();
+var taskAutoTitles = startTaskAutoTitleListener();
 var stopRoomDeletion = realtimeBus.subscribe("room:namespace-deleted", (namespace) => {
   Promise.resolve(removeNamespaceRooms(String(namespace))).catch((error) => console.error("[rooms] Deletion failed:", scrubSecrets(String(error))));
 });
@@ -42922,6 +43906,7 @@ globalState.__closeRealtime = () => {
   detachRealtime();
   detachControllers();
   stopWorkerNudges();
+  taskAutoTitles.stop();
   stopRoomDeletion();
 };
 globalState.__httpServer = httpServer;
@@ -42941,7 +43926,7 @@ async function shutdown() {
     sessionsProcessed: getServerSessionsProcessed()
   });
   if (hasCapability("scheduling")) {
-    const { stopScheduler } = await import("./index-5r71rf98.js");
+    const { stopScheduler } = await import("./index-xrz7te8h.js");
     stopScheduler();
   }
   stopHeartbeat2();
@@ -42953,7 +43938,7 @@ async function shutdown() {
   await stopSlackApp2();
   await stopChatSdk();
   if (!isEnvFlagEnabled("OAUTH_KEEPALIVE_DISABLE", false)) {
-    const { stopOAuthKeepalive } = await import("./keepalive-6cf311t5.js");
+    const { stopOAuthKeepalive } = await import("./keepalive-x060nt9p.js");
     await stopOAuthKeepalive();
   }
   stopOAuthPendingGc();
@@ -43035,21 +44020,21 @@ try {
   console.warn("[startup] CAPABILITIES upgrade seed failed (non-fatal):", err);
 }
 try {
-  const { ensurePricingSeeded } = await import("./boot-seeds-aykx51v3.js");
+  const { ensurePricingSeeded } = await import("./boot-seeds-5cm6ambd.js");
   ensurePricingSeeded();
-  const { startPricingRefreshLoop } = await import("./pricing-refresh-83drrnxj.js");
+  const { startPricingRefreshLoop } = await import("./pricing-refresh-3pmre11v.js");
   startPricingRefreshLoop();
 } catch (err) {
   console.error("[startup] Failed to seed pricing rows:", err);
 }
 try {
-  const { ensureModelProfilesSeeded } = await import("./boot-seeds-aykx51v3.js");
+  const { ensureModelProfilesSeeded } = await import("./boot-seeds-5cm6ambd.js");
   await ensureModelProfilesSeeded();
 } catch (err) {
   console.error("[startup] Failed to seed model profiles:", err);
 }
 try {
-  const { ensureRbacSeeded } = await import("./boot-seeds-aykx51v3.js");
+  const { ensureRbacSeeded } = await import("./boot-seeds-5cm6ambd.js");
   ensureRbacSeeded();
 } catch (err) {
   console.error("[startup] Failed to sync RBAC seed rows:", err);
@@ -43057,7 +44042,7 @@ try {
     throw err;
 }
 try {
-  const { runAllSeeders } = await import("./index-7v51awbn.js");
+  const { runAllSeeders } = await import("./index-nh3wyqdt.js");
   await runAllSeeders({ scriptEmbeddingMode: "skip" });
 } catch (err) {
   console.error("[startup] Failed to seed built-in entities:", err);
@@ -43120,26 +44105,26 @@ httpServer.listen(port, async () => {
   await initWorkflows2();
   await startScriptRunSupervisor(getMcpBaseUrl());
   if (hasCapability("scheduling")) {
-    const { startScheduler } = await import("./index-5r71rf98.js");
-    const { getExecutorRegistry } = await import("./index-spp0ra5c.js");
+    const { startScheduler } = await import("./index-xrz7te8h.js");
+    const { getExecutorRegistry } = await import("./index-a8phxqnk.js");
     const intervalMs = Number(process.env.SCHEDULER_INTERVAL_MS) || 1e4;
     startScheduler(getExecutorRegistry(), intervalMs, {
       runId: globalState.__runId
     });
   }
   if (!isEnvFlagEnabled("HEARTBEAT_DISABLE", false)) {
-    const { startHeartbeat } = await import("./index-anmwxs87.js");
+    const { startHeartbeat } = await import("./index-k6h00t4c.js");
     const heartbeatMs = Number(process.env.HEARTBEAT_INTERVAL_MS) || 90000;
     startHeartbeat(heartbeatMs);
   }
   startPoolRouting();
   startRuntimeSupervisor();
   if (!isEnvFlagEnabled("OAUTH_KEEPALIVE_DISABLE", false)) {
-    const { startOAuthKeepalive } = await import("./keepalive-6cf311t5.js");
+    const { startOAuthKeepalive } = await import("./keepalive-x060nt9p.js");
     startOAuthKeepalive();
   }
   if (!isEnvFlagEnabled("OAUTH_REFRESH_SWEEP_DISABLE", false)) {
-    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-3h0dfw1k.js");
+    const { startOAuthRefreshSweep } = await import("./oauth-refresh-sweep-fckc4ar5.js");
     startOAuthRefreshSweep();
   }
   startOAuthPendingGc();
@@ -43148,16 +44133,16 @@ httpServer.listen(port, async () => {
   await startDbRetention();
   startHumanFreeDrain();
   startTaskSearchBackfill();
-  import("./embedding-space-1z0mbg95.js").then(({ runEmbeddingMaintenance, setDeploymentEnvReader }) => {
+  import("./embedding-space-0jepb239.js").then(({ runEmbeddingMaintenance, setDeploymentEnvReader }) => {
     setDeploymentEnvReader(getDeploymentEnvValue);
     return runEmbeddingMaintenance({ backfill: true });
   }).catch((err) => {
     console.error("[embedding-space] startup maintenance failed (non-fatal):", err);
   });
-  import("./boot-scrub-sweep-nd938kyf.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
+  import("./boot-scrub-sweep-yjpdj7s1.js").then(({ runBootScrubSweep }) => runBootScrubSweep()).catch((err) => {
     console.error("[boot-scrub-sweep] startup scrub failed (non-fatal):", err);
   });
-  import("./session-source-backfill-qh07xr8g.js").then(({ runSessionSourceBackfill }) => runSessionSourceBackfill()).catch((err) => {
+  import("./session-source-backfill-08xvv0sm.js").then(({ runSessionSourceBackfill }) => runSessionSourceBackfill()).catch((err) => {
     console.error("[session-source-backfill] startup run failed (non-fatal):", err);
   });
 }).on("error", (err) => {