fix: workflow UI only on enabled channels, add reaction picker, update protocol docs

- Add workflow_enabled column to channels (default false) — reactions
  and workflow badges only show on opted-in channels
- ReactionPills: add "+" button with picker dropdown to add reactions
  when none exist yet (was missing, only showed existing reactions)
- Update CLAUDE.md protocol docs with reactions workflow guidance
- Update channel store queries for new workflow_enabled column

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.claude/scheduled_tasks.lock

@@ -0,0 +1 @@
+{"sessionId":"45d44ada-86af-4207-b3dd-de510e521157","pid":20439,"acquiredAt":1773554855575}

CLAUDE.md

@@ -103,6 +103,9 @@ make lint           # Run linters
 - Go 1.25+ (per go.mod) + go-chi/chi (HTTP), mark3labs/mcp-go (MCP), ory/fosite (OAuth), spf13/cobra (CLI), modernc.org/sqlite (storage), TFMV/hnsw (vectors). NEW: coreos/go-oidc/v3 (OIDC), golang.org/x/oauth2 (OAuth client) (007-platform-features-bundle)
 - Go 1.25+ (backend), SvelteKit 2 + Svelte 5 (frontend), SvelteKit (website) + go-chi/chi (HTTP), mark3labs/mcp-go (MCP), modernc.org/sqlite (storage), SherClockHolmes/webpush-go (push notifications — NEW) (008-webui-pwa-analytics)
 - SQLite (existing DB, 1 new migration for push_subscriptions), localStorage (font size) (008-webui-pwa-analytics)
+- Go 1.25+ (backend), Svelte 5 + Tailwind (frontend) + go-chi/chi (HTTP), mark3labs/mcp-go (MCP), modernc.org/sqlite (storage), spf13/cobra (CLI) (009-attachments-threads)
+- SQLite (modernc.org/sqlite, pure Go) + content-addressable filesystem (SHA-256) (009-attachments-threads)
+- SQLite (modernc.org/sqlite, pure Go) — new migration 013_reactions.sql (010-reactions-workflows)
 
 ## Recent Changes
 - 002-mcp-auth-ux-polish: Added Go 1.23+ + ory/fosite (OAuth 2.1), mark3labs/mcp-go (MCP server), go-chi/chi (HTTP), Svelte 5 + Tailwind (Web UI)

autonomous_summary.md

@@ -1,62 +1,101 @@
-# Autonomous Execution Summary: SynapBus v0.7.0
+# Autonomous Implementation Summary: Message Reactions & Workflow States
 
-**Date**: 2026-03-17
-**Branch**: `008-webui-pwa-analytics`
-**Status**: Complete — all tests pass, binary builds, endpoints verified
+**Branch**: `010-reactions-workflows`
+**Date**: 2026-03-18
+**Status**: Complete (StalemateWorker extension deferred)
 
-## Features Implemented
+## What Was Built
 
-### 1. Analytics Dashboard (P1)
-- 4 new REST endpoints (`/api/analytics/timeline`, `/top-agents`, `/top-channels`, `/summary`)
-- SVG bar chart (`AnalyticsChart.svelte`), ranked list (`TopList.svelte`), redesigned dashboard with stat cards and time span selector (1h, 4h, 24h, 7d, 1month)
+### Message Reactions
+- **Toggle semantics**: Add a reaction → added. Add same reaction again → removed. One per type per agent per message.
+- **5 reaction types**: approve, reject, in_progress, done, published
+- **Metadata support**: JSON metadata on reactions (e.g., `{"url": "https://..."}` for published)
+- **100-reaction limit** per message (safety)
 
-### 2. PWA Conversion (P1)
-- PWA manifest (`manifest.json`), service worker (`sw.js`), SVG icon
-- Cache-first for static assets, network-only for API, push notification handling
+### Workflow State Derivation
+- State computed from reactions: published > done > rejected > in_progress > approved > proposed
+- No denormalization — state derived on read from reaction list
+- Channel messages with no reactions → "proposed" state
+- Terminal states (rejected, done, published) don't trigger stalemate checks
 
-### 3. Push Notifications (P1)
-- `internal/push/` package — VAPID key generation, Web Push sending, SQLite subscription store
-- API: `POST/DELETE /api/push/subscribe`, `GET /api/push/vapid-key`
-- Push toggle in Settings, migration `012_push_subscriptions.sql`
+### Channel Workflow Settings
+- `auto_approve` — skip proposed state for new messages
+- `stalemate_remind_after` — duration before reminder DM (default 24h)
+- `stalemate_escalate_after` — duration before escalation to #approvals (default 72h)
 
-### 4. Auto-Resizing Textarea (P1)
-- ComposeForm textarea auto-grows 3→12 lines, then scrollbar. Resets on send.
+### REST API
+- `POST /api/messages/{id}/reactions` — toggle reaction (add or remove)
+- `GET /api/messages/{id}/reactions` — get reactions + workflow state
+- `DELETE /api/messages/{id}/reactions/{reaction}` — remove reaction
+- `PUT /api/channels/{name}/settings` — update workflow settings
+- `GET /api/channels/{name}/messages/by-state?state=X` — list messages by state
 
-### 5. Smart Mention/Channel Highlighting (P2)
-- Entities store caches agents/channels. MessageBody validates @mentions and #channels:
-  existing → link, deleted → "inactive" badge, unknown → plain text. Handles email/issue number edge cases.
+### MCP Tools (via execute bridge)
+- `react` — add/toggle reaction on a message
+- `unreact` — remove a reaction
+- `get_reactions` — query reactions and workflow state
+- `list_by_state` — list messages by workflow state in a channel
 
-### 6. Editable Agent Display Name (P2)
-- Inline edit on agent detail page (click → edit, Enter → save, Escape → cancel)
+### Web UI
+- **WorkflowBadge** component: colored pills (yellow/green/blue/red/gray/cyan) per state
+- **ReactionPills** component: grouped reaction pills with count, agent names on hover, click-to-toggle
+- Published reactions with URL show clickable link icon
+- Integrated into channel message view
 
-### 7. Editable Human Display Name (P2)
-- `PUT /api/auth/profile` endpoint, `UpdateDisplayName` in UserStore, Settings page field
+### Admin CLI
+- `synapbus channels update --name X --auto-approve=true --stalemate-remind-after=12h --stalemate-escalate-after=48h`
 
-### 8. Font Size Preference (P3)
-- fontSize store (12–24px, 2px steps), -/+ controls in Settings, persisted in localStorage
+## Files Created/Modified
 
-### 9. Version Display (P3)
-- `GET /api/version` endpoint, version footer in layout linked to GitHub repo
+### New Files
+| File | Description |
+|------|-------------|
+| `internal/storage/schema/013_reactions.sql` | Migration: message_reactions table + channel columns |
+| `internal/reactions/model.go` | Reaction types, state derivation, constants |
+| `internal/reactions/store.go` | SQLite CRUD for reactions |
+| `internal/reactions/service.go` | Business logic: toggle, remove, get, list by state |
+| `internal/reactions/model_test.go` | 23 test cases for model functions |
+| `internal/reactions/store_test.go` | 6 test functions for store operations |
+| `internal/api/reactions_handler.go` | REST API handlers for reactions |
+| `web/src/lib/components/WorkflowBadge.svelte` | Colored state badge component |
+| `web/src/lib/components/ReactionPills.svelte` | Reaction toggle pills component |
 
-### 10. MCP Prompts (P2)
-- 4 prompts: daily-digest, agent-health-check, channel-overview, debug-agent
-- `internal/mcp/prompts.go` registered in server.go
-
-### 11. Website Update (P3)
-- Updated hero/features messaging at ~/repos/synapbus-website/ for individual/small-team positioning
+### Modified Files
+| File | Changes |
+|------|---------|
+| `internal/messaging/types.go` | Added WorkflowState, Reactions, ReactionInfo to Message |
+| `internal/messaging/service.go` | Added ReactionEnricher interface, enrichment in EnrichMessages |
+| `internal/channels/types.go` | Added AutoApprove, StalemateRemindAfter, StalemateEscalateAfter, ChannelSettings |
+| `internal/channels/store.go` | Updated SELECT queries for new columns, added UpdateChannelSettings |
+| `internal/channels/service.go` | Added UpdateChannelSettings method |
+| `internal/api/router.go` | Registered reaction and channel settings routes |
+| `internal/api/channels_handler.go` | Added UpdateSettings, ListByState handlers |
+| `internal/mcp/bridge.go` | Added react/unreact/get_reactions/list_by_state bridge methods |
+| `internal/mcp/tools_hybrid.go` | Added reactionService to registrar |
+| `internal/mcp/server.go` | Added reactionService parameter |
+| `internal/actions/registry.go` | Registered 4 new reaction actions |
+| `cmd/synapbus/main.go` | Wired reaction service, adapter, passed to router+MCP |
+| `cmd/synapbus/admin.go` | Added channels update CLI command |
+| `internal/admin/socket.go` | Added channels.update_settings handler |
+| `web/src/lib/api/client.ts` | Added reactions.toggle/get methods |
+| `web/src/routes/channels/[name]/+page.svelte` | Integrated WorkflowBadge + ReactionPills |
 
 ## Test Results
 
-All 24 Go packages PASS. All API endpoints verified via curl. Web UI builds successfully. Binary compiles with CGO_ENABLED=0.
+- **25 Go test packages**: all pass, 0 failures
+- **New tests**: 29+ test cases (model: 23, store: 6)
+- **Integration tests**: 9 E2E tests pass
+- **Web build**: Svelte SPA builds successfully
+- **Binary build**: Compiles cleanly
 
-## New Files
+## Deferred
 
-- `internal/api/analytics_handler.go` + test
-- `internal/api/version_handler.go` + test
-- `internal/api/push_handler.go`
-- `internal/push/service.go` + test, `store.go` + test
-- `internal/mcp/prompts.go` + test
-- `schema/012_push_subscriptions.sql`
-- `web/src/lib/components/AnalyticsChart.svelte`, `TopList.svelte`
-- `web/src/lib/stores/fontSize.ts`, `entities.ts`
-- `web/static/manifest.json`, `sw.js`, `icons/icon.svg`
+- **StalemateWorker extension** (T023-T025): The data model, channel settings, and query infrastructure are in place. The worker just needs a scan loop added to detect stale messages and send DMs/escalations. This is a straightforward follow-up task.
+
+## Architecture Decisions
+
+1. **Separate reactions package**: Clean domain separation from messaging
+2. **Toggle semantics**: INSERT if absent, DELETE if present — simple, atomic, idempotent
+3. **Derived workflow state**: No denormalization; state computed from reactions on read
+4. **Bridge actions (not hybrid tools)**: Consistent with attachments pattern — 4 hybrid tools are stable surface area
+5. **ReactionEnricher adapter**: Avoids circular dependency between reactions and messaging packages

cmd/synapbus/admin.go

@@ -1,11 +1,15 @@
 package main
 
 import (
+	"archive/tar"
 	"bufio"
+	"compress/gzip"
 	"encoding/json"
 	"fmt"
+	"io"
 	"net"
 	"os"
+	"path/filepath"
 	"strings"
 	"text/tabwriter"
 
@@ -632,7 +636,46 @@ func addAdminCommands(rootCmd *cobra.Command) {
 	channelsJoinCmd.MarkFlagRequired("channel")
 	channelsJoinCmd.MarkFlagRequired("agent")
 
-	channelsCmd.AddCommand(channelsListCmd, channelsShowCmd, channelsCreateCmd, channelsJoinCmd)
+	var (
+		channelsUpdateName               string
+		channelsUpdateAutoApprove        string
+		channelsUpdateStalemateRemind    string
+		channelsUpdateStalemateEscalate  string
+	)
+	channelsUpdateCmd := &cobra.Command{
+		Use:   "update",
+		Short: "Update channel settings (auto-approve, stalemate timers)",
+		RunE: func(cmd *cobra.Command, args []string) error {
+			if channelsUpdateName == "" {
+				return fmt.Errorf("--name is required")
+			}
+			reqArgs := map[string]interface{}{
+				"name": channelsUpdateName,
+			}
+			if cmd.Flags().Changed("auto-approve") {
+				reqArgs["auto_approve"] = channelsUpdateAutoApprove == "true"
+			}
+			if cmd.Flags().Changed("stalemate-remind-after") {
+				reqArgs["stalemate_remind_after"] = channelsUpdateStalemateRemind
+			}
+			if cmd.Flags().Changed("stalemate-escalate-after") {
+				reqArgs["stalemate_escalate_after"] = channelsUpdateStalemateEscalate
+			}
+			resp, err := adminRequest("channels.update_settings", reqArgs)
+			if err != nil {
+				return err
+			}
+			printJSON(resp["data"])
+			return nil
+		},
+	}
+	channelsUpdateCmd.Flags().StringVar(&channelsUpdateName, "name", "", "Channel name")
+	channelsUpdateCmd.Flags().StringVar(&channelsUpdateAutoApprove, "auto-approve", "", "Auto-approve messages (true|false)")
+	channelsUpdateCmd.Flags().StringVar(&channelsUpdateStalemateRemind, "stalemate-remind-after", "", "Stalemate reminder duration (e.g. 24h)")
+	channelsUpdateCmd.Flags().StringVar(&channelsUpdateStalemateEscalate, "stalemate-escalate-after", "", "Stalemate escalation duration (e.g. 72h)")
+	channelsUpdateCmd.MarkFlagRequired("name")
+
+	channelsCmd.AddCommand(channelsListCmd, channelsShowCmd, channelsCreateCmd, channelsJoinCmd, channelsUpdateCmd)
 
 	// ----- conversations commands -----
 	conversationsCmd := &cobra.Command{
@@ -987,7 +1030,48 @@ func addAdminCommands(rootCmd *cobra.Command) {
 		},
 	}
 
-	attachmentsCmd.AddCommand(attachmentsGCCmd)
+	var attachmentsBackupOutput string
+	var attachmentsBackupDataDir string
+	attachmentsBackupCmd := &cobra.Command{
+		Use:   "backup",
+		Short: "Create a tar.gz backup of all attachments (no server required)",
+		RunE: func(cmd *cobra.Command, args []string) error {
+			attachDir := filepath.Join(attachmentsBackupDataDir, "attachments")
+			if _, err := os.Stat(attachDir); os.IsNotExist(err) {
+				return fmt.Errorf("attachments directory does not exist: %s", attachDir)
+			}
+			fileCount, totalSize, err := backupAttachments(attachDir, attachmentsBackupOutput)
+			if err != nil {
+				return fmt.Errorf("backup failed: %w", err)
+			}
+			fmt.Printf("Backup complete: %d files, %s total, written to %s\n", fileCount, formatBytes(totalSize), attachmentsBackupOutput)
+			return nil
+		},
+	}
+	attachmentsBackupCmd.Flags().StringVar(&attachmentsBackupOutput, "output", "", "Output path for the tar.gz archive")
+	attachmentsBackupCmd.Flags().StringVar(&attachmentsBackupDataDir, "data", "./data", "Data directory")
+	attachmentsBackupCmd.MarkFlagRequired("output")
+
+	var attachmentsRestoreInput string
+	var attachmentsRestoreDataDir string
+	attachmentsRestoreCmd := &cobra.Command{
+		Use:   "restore",
+		Short: "Restore attachments from a tar.gz backup (no server required)",
+		RunE: func(cmd *cobra.Command, args []string) error {
+			attachDir := filepath.Join(attachmentsRestoreDataDir, "attachments")
+			restored, skipped, err := restoreAttachments(attachDir, attachmentsRestoreInput)
+			if err != nil {
+				return fmt.Errorf("restore failed: %w", err)
+			}
+			fmt.Printf("Restore complete: %d files restored, %d files skipped (already exist)\n", restored, skipped)
+			return nil
+		},
+	}
+	attachmentsRestoreCmd.Flags().StringVar(&attachmentsRestoreInput, "input", "", "Input path for the tar.gz archive")
+	attachmentsRestoreCmd.Flags().StringVar(&attachmentsRestoreDataDir, "data", "./data", "Data directory")
+	attachmentsRestoreCmd.MarkFlagRequired("input")
+
+	attachmentsCmd.AddCommand(attachmentsGCCmd, attachmentsBackupCmd, attachmentsRestoreCmd)
 
 	// ----- add persistent flag and commands to root -----
 	rootCmd.PersistentFlags().StringVar(&adminSocket, "socket", "/tmp/synapbus.sock", "Path to admin Unix socket")
@@ -1012,3 +1096,146 @@ func toTableRows(data []map[string]string, headerMap map[string]string) []map[st
 	}
 	return rows
 }
+
+// backupAttachments creates a tar.gz archive of the attachments directory.
+// Returns the number of files archived and total bytes of file content.
+func backupAttachments(attachmentsDir, outputPath string) (int, int64, error) {
+	outFile, err := os.Create(outputPath)
+	if err != nil {
+		return 0, 0, fmt.Errorf("create output file: %w", err)
+	}
+	defer outFile.Close()
+
+	gzw := gzip.NewWriter(outFile)
+	defer gzw.Close()
+
+	tw := tar.NewWriter(gzw)
+	defer tw.Close()
+
+	var fileCount int
+	var totalSize int64
+
+	err = filepath.Walk(attachmentsDir, func(path string, info os.FileInfo, err error) error {
+		if err != nil {
+			return err
+		}
+		// Skip directories — tar entries for files include the path.
+		if info.IsDir() {
+			return nil
+		}
+
+		relPath, err := filepath.Rel(attachmentsDir, path)
+		if err != nil {
+			return fmt.Errorf("relative path: %w", err)
+		}
+
+		header, err := tar.FileInfoHeader(info, "")
+		if err != nil {
+			return fmt.Errorf("file info header: %w", err)
+		}
+		header.Name = relPath
+
+		if err := tw.WriteHeader(header); err != nil {
+			return fmt.Errorf("write header: %w", err)
+		}
+
+		f, err := os.Open(path)
+		if err != nil {
+			return fmt.Errorf("open file: %w", err)
+		}
+		defer f.Close()
+
+		if _, err := io.Copy(tw, f); err != nil {
+			return fmt.Errorf("copy file: %w", err)
+		}
+
+		fileCount++
+		totalSize += info.Size()
+		return nil
+	})
+
+	return fileCount, totalSize, err
+}
+
+// restoreAttachments extracts a tar.gz archive into the attachments directory.
+// Files that already exist on disk are skipped. Returns (restored, skipped) counts.
+func restoreAttachments(attachmentsDir, inputPath string) (int, int, error) {
+	inFile, err := os.Open(inputPath)
+	if err != nil {
+		return 0, 0, fmt.Errorf("open input file: %w", err)
+	}
+	defer inFile.Close()
+
+	gzr, err := gzip.NewReader(inFile)
+	if err != nil {
+		return 0, 0, fmt.Errorf("gzip reader: %w", err)
+	}
+	defer gzr.Close()
+
+	tr := tar.NewReader(gzr)
+
+	var restored, skipped int
+
+	for {
+		header, err := tr.Next()
+		if err == io.EOF {
+			break
+		}
+		if err != nil {
+			return restored, skipped, fmt.Errorf("read tar entry: %w", err)
+		}
+
+		// Only handle regular files.
+		if header.Typeflag != tar.TypeReg {
+			continue
+		}
+
+		// Sanitize: reject absolute paths and path traversal.
+		cleanName := filepath.Clean(header.Name)
+		if filepath.IsAbs(cleanName) || strings.HasPrefix(cleanName, "..") {
+			return restored, skipped, fmt.Errorf("invalid path in archive: %s", header.Name)
+		}
+
+		destPath := filepath.Join(attachmentsDir, cleanName)
+
+		// Skip if already exists (content-addressable, so same hash = same content).
+		if _, err := os.Stat(destPath); err == nil {
+			skipped++
+			continue
+		}
+
+		// Ensure parent directory exists.
+		if err := os.MkdirAll(filepath.Dir(destPath), 0o755); err != nil {
+			return restored, skipped, fmt.Errorf("create directory: %w", err)
+		}
+
+		outFile, err := os.Create(destPath)
+		if err != nil {
+			return restored, skipped, fmt.Errorf("create file: %w", err)
+		}
+
+		if _, err := io.Copy(outFile, tr); err != nil {
+			outFile.Close()
+			return restored, skipped, fmt.Errorf("write file: %w", err)
+		}
+		outFile.Close()
+
+		restored++
+	}
+
+	return restored, skipped, nil
+}
+
+// formatBytes returns a human-readable byte count string.
+func formatBytes(b int64) string {
+	const unit = 1024
+	if b < unit {
+		return fmt.Sprintf("%d B", b)
+	}
+	div, exp := int64(unit), 0
+	for n := b / unit; n >= unit; n /= unit {
+		div *= unit
+		exp++
+	}
+	return fmt.Sprintf("%.1f %ciB", float64(b)/float64(div), "KMGTPE"[exp])
+}

cmd/synapbus/main.go

@@ -41,6 +41,7 @@ import (
 	mcpserver "github.com/synapbus/synapbus/internal/mcp"
 	"github.com/synapbus/synapbus/internal/messaging"
 	prommetrics "github.com/synapbus/synapbus/internal/metrics"
+	"github.com/synapbus/synapbus/internal/reactions"
 	"github.com/synapbus/synapbus/internal/search"
 	"github.com/synapbus/synapbus/internal/search/embedding"
 	"github.com/synapbus/synapbus/internal/storage"
@@ -281,8 +282,15 @@ func runServe(cmd *cobra.Command, args []string) error {
 	}
 	attachmentStore := attachments.NewSQLiteStore(db.DB, slog.Default())
 	attachmentService := attachments.NewService(attachmentStore, cas, slog.Default())
+	msgService.SetAttachmentLinker(&attachmentLinkerAdapter{svc: attachmentService})
 	slog.Info("attachment service initialized", "dir", attachmentsDir)
 
+	// Create reaction service
+	reactionStore := reactions.NewSQLiteStore(db.DB)
+	reactionService := reactions.NewService(reactionStore, slog.Default())
+	msgService.SetReactionEnricher(&reactionEnricherAdapter{svc: reactionService})
+	slog.Info("reaction service initialized")
+
 	// Initialize auth subsystem
 	authSecret := make([]byte, 32)
 	if _, err := rand.Read(authSecret); err != nil {
@@ -465,7 +473,7 @@ func runServe(cmd *cobra.Command, args []string) error {
 	actionIndex := actions.NewIndex(actionRegistry.List())
 
 	// Create MCP server (4 hybrid tools: my_status, send_message, search, execute)
-	mcpSrv := mcpserver.NewMCPServer(msgService, agentService, channelService, swarmService, attachmentService, searchService, con, jsPool, actionRegistry, actionIndex, db.DB)
+	mcpSrv := mcpserver.NewMCPServer(msgService, agentService, channelService, swarmService, attachmentService, searchService, reactionService, con, jsPool, actionRegistry, actionIndex, db.DB)
 	startTime := time.Now()
 
 	// Start task expiry worker
@@ -619,6 +627,7 @@ func runServe(cmd *cobra.Command, args []string) error {
 		ChannelService:    channelService,
 		APIKeyService:     apiKeyService,
 		DeadLetterStore:   deadLetterStore,
+		ReactionService:   reactionService,
 		SSEHub:            sseHub,
 		Broadcaster:       sseBroadcaster,
 		SessionMiddleware: sessionMiddleware,
@@ -836,6 +845,59 @@ func (a *a2aAgentListerAdapter) ListAllActiveAgents(ctx context.Context) ([]a2a.
 	return result, nil
 }
 
+// attachmentLinkerAdapter adapts attachments.Service to messaging.AttachmentLinker.
+type attachmentLinkerAdapter struct {
+	svc *attachments.Service
+}
+
+func (a *attachmentLinkerAdapter) AttachToMessage(ctx context.Context, hash string, messageID int64) error {
+	return a.svc.AttachToMessage(ctx, hash, messageID)
+}
+
+func (a *attachmentLinkerAdapter) GetByMessageID(ctx context.Context, messageID int64) ([]messaging.AttachmentInfo, error) {
+	atts, err := a.svc.GetByMessageID(ctx, messageID)
+	if err != nil {
+		return nil, err
+	}
+	results := make([]messaging.AttachmentInfo, len(atts))
+	for i, att := range atts {
+		results[i] = messaging.AttachmentInfo{
+			Hash:             att.Hash,
+			OriginalFilename: att.OriginalFilename,
+			Size:             att.Size,
+			MIMEType:         att.MIMEType,
+			IsImage:          attachments.IsImageType(att.MIMEType),
+		}
+	}
+	return results, nil
+}
+
+// reactionEnricherAdapter adapts reactions.Service to messaging.ReactionEnricher.
+type reactionEnricherAdapter struct {
+	svc *reactions.Service
+}
+
+func (a *reactionEnricherAdapter) GetByMessageIDs(ctx context.Context, messageIDs []int64) (map[int64][]messaging.ReactionInfo, error) {
+	rxMap, err := a.svc.GetReactionsByMessageIDs(ctx, messageIDs)
+	if err != nil {
+		return nil, err
+	}
+	result := make(map[int64][]messaging.ReactionInfo, len(rxMap))
+	for msgID, rxs := range rxMap {
+		infos := make([]messaging.ReactionInfo, len(rxs))
+		for i, rx := range rxs {
+			infos[i] = messaging.ReactionInfo{
+				AgentName: rx.AgentName,
+				Reaction:  rx.Reaction,
+				Metadata:  rx.Metadata,
+				CreatedAt: rx.CreatedAt,
+			}
+		}
+		result[msgID] = infos
+	}
+	return result, nil
+}
+
 // agentListerAdapter adapts agents.AgentService to auth.AgentLister.
 type agentListerAdapter struct {
 	agentService *agents.AgentService

docs/2026-03-18-message-reactions-workflow-design.md

@@ -0,0 +1,208 @@
+# Message Reactions & Workflow States
+
+**Date:** 2026-03-18
+**Status:** Proposed
+**Authors:** Algis Dumbris, claude-home
+
+## Problem
+
+When research agents post blog ideas to `#new_posts`, there is no way to track their lifecycle. Status updates appear as flat thread replies, humans cannot quickly approve/reject inline, and StalemateWorker does not track channel message workflows.
+
+### Current pain points
+
+1. **Status is disconnected** — `mark_done` only works on DMs (claim/process model), not channel messages
+2. **No reactions** — humans cannot quickly approve/reject inline like Slack
+3. **Thread replies are noise** — DONE replies appear as full messages, not visual status updates on the original
+4. **StalemateWorker is DM-only** — channel-based proposals have no timeout or escalation
+
+## Design
+
+### Data Model
+
+#### New `message_reactions` table
+
+```sql
+CREATE TABLE message_reactions (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    message_id INTEGER NOT NULL REFERENCES messages(id),
+    agent_name TEXT NOT NULL,
+    reaction TEXT NOT NULL,  -- 'approve', 'reject', 'in_progress', 'done', 'published'
+    metadata TEXT,           -- JSON: {"url": "...", "reason": "...", "claimed_by": "..."}
+    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    UNIQUE(message_id, agent_name, reaction)
+);
+CREATE INDEX idx_reactions_message ON message_reactions(message_id);
+```
+
+#### Channel workflow columns
+
+```sql
+ALTER TABLE channels ADD COLUMN auto_approve BOOLEAN DEFAULT FALSE;
+ALTER TABLE channels ADD COLUMN stalemate_remind_after TEXT DEFAULT '24h';
+ALTER TABLE channels ADD COLUMN stalemate_escalate_after TEXT DEFAULT '72h';
+```
+
+### Reaction semantics
+
+- **Fixed set of reactions** with semantic meaning: `approve`, `reject`, `in_progress`, `done`, `published`
+- **Toggleable** — adding the same reaction again removes it
+- **Any channel member** can react to any message in channels they belong to
+- **Latest non-removed reaction** determines the message's effective workflow state
+- Each reaction stores: who reacted, when, and optional metadata (URL, reason, etc.)
+
+### Workflow state derivation
+
+The effective state of a message is derived from its reactions, in priority order:
+
+1. If any `published` reaction exists → **published**
+2. If any `done` reaction exists → **done**
+3. If any `reject` reaction exists → **rejected**
+4. If any `in_progress` reaction exists → **in_progress**
+5. If any `approve` reaction exists → **approved**
+6. Otherwise → **proposed** (default for any message with no reactions)
+
+### Two workflow types (channel property)
+
+#### `auto_approve = false` (human-in-the-loop, default)
+
+```
+Message posted → proposed (yellow)
+  → Human adds 'approve' → approved (green)
+  → Agent adds 'in_progress' → in_progress (blue)
+  → Agent adds 'done' or 'published' with metadata → terminal (cyan)
+
+Any state → 'reject' → rejected (red)
+```
+
+#### `auto_approve = true` (fully autonomous)
+
+```
+Message posted → proposed (yellow)
+  → Any agent adds 'in_progress' → in_progress (blue)
+  → Agent adds 'done' or 'published' → terminal (cyan)
+
+No approval step required. Agents act on proposals immediately.
+```
+
+### Reaction metadata
+
+| Reaction | Metadata |
+|----------|----------|
+| `approve` | `{"approved_by": "algis"}` |
+| `reject` | `{"reason": "duplicate of #1590"}` |
+| `in_progress` | `{"claimed_by": "blog-posts"}` |
+| `done` | `{"summary": "completed"}` |
+| `published` | `{"url": "https://mcpproxy.app/blog/2026-03-18-..."}` |
+
+### StalemateWorker integration
+
+Extend existing StalemateWorker to track channel message workflow states using per-channel configurable timeouts.
+
+#### Timeout sources
+
+Read from channel columns with fallback to environment variables:
+- Channel-level: `stalemate_remind_after`, `stalemate_escalate_after` columns
+- Global fallback: `SYNAPBUS_STALEMATE_REMINDER_AFTER`, `SYNAPBUS_STALEMATE_ESCALATE_AFTER`
+
+#### Tracking rules
+
+| Channel Type | State | After `remind_after` | After `escalate_after` |
+|---|---|---|---|
+| `auto_approve=false` | `proposed` (no reaction) | Remind in channel: "Awaiting review" | Escalate to #approvals |
+| `auto_approve=false` | `approved` (not started) | DM channel's agents: "Approved but not started" | Escalate to #approvals |
+| Both | `in_progress` (stuck) | DM claiming agent: "Still in progress?" | Escalate to #approvals |
+| Both | `rejected`/`done`/`published` | No tracking — terminal states | — |
+
+#### Escalation format
+
+```
+**STALE**: Message #{id} in #{channel} has been in '{state}' for {age}.
+"{body truncated to 100 chars}" — posted by @{author}
+```
+
+#### Duplicate prevention
+
+Use metadata field on reminder/escalation messages: `{"stalemate_workflow_for": message_id, "state": "proposed"}`. Check for existing reminder before sending.
+
+### MCP tool extensions
+
+New actions available via `execute`:
+
+```javascript
+// Add or toggle a reaction (toggle off if already exists)
+call("react", {
+    "message_id": 123,
+    "reaction": "published",
+    "metadata": "{\"url\": \"https://mcpproxy.app/blog/...\"}"
+})
+
+// Explicitly remove a reaction
+call("unreact", {"message_id": 123, "reaction": "approve"})
+
+// Get all reactions on a message
+call("get_reactions", {"message_id": 123})
+// Returns: [{reaction: "approve", agent: "algis", metadata: null, created_at: "..."}]
+
+// List messages in a channel filtered by derived workflow state
+call("list_by_state", {"channel_name": "new_posts", "state": "proposed"})
+call("list_by_state", {"channel_name": "new_posts", "state": "approved"})
+
+// Update channel workflow settings
+call("update_channel", {
+    "channel_name": "new_posts",
+    "auto_approve": false,
+    "stalemate_remind_after": "24h",
+    "stalemate_escalate_after": "72h"
+})
+```
+
+### CLI extensions
+
+```bash
+# Configure channel workflow
+synapbus channels update --name new_posts \
+  --auto-approve=false \
+  --stalemate-remind-after=24h \
+  --stalemate-escalate-after=72h
+
+# Query messages by state
+synapbus messages list --channel new_posts --state proposed
+synapbus messages list --channel new_posts --state approved
+```
+
+### Web UI changes
+
+#### Message list (MessageList.svelte)
+
+- **Workflow badge** inline next to existing status badge:
+  - `proposed` — yellow pill
+  - `approved` — green pill
+  - `in_progress` — blue pill
+  - `published` — cyan pill with clickable URL
+  - `rejected` — red pill
+- **Reaction row** below message body (like Slack):
+  - Small pills showing reaction + count + who reacted (on hover)
+  - Click to toggle reaction on/off for current user
+  - `published` reaction shows URL as clickable link next to the pill
+
+#### Channel info panel
+
+- New **Workflow Settings** section (visible to channel owner):
+  - Auto-approve toggle
+  - Remind after input (duration string)
+  - Escalate after input (duration string)
+
+#### SSE events
+
+New event types for real-time reaction updates:
+- `reaction_added` — `{message_id, agent_name, reaction, metadata}`
+- `reaction_removed` — `{message_id, agent_name, reaction}`
+
+## Migration path
+
+1. Add `message_reactions` table (new migration `010_reactions.sql`)
+2. Add channel columns (`auto_approve`, `stalemate_remind_after`, `stalemate_escalate_after`)
+3. Extend MCP bridge with `react`, `unreact`, `get_reactions`, `list_by_state` actions
+4. Extend StalemateWorker with channel workflow tracking
+5. Update Web UI components
+6. Add CLI commands for channel workflow configuration

internal/actions/registry.go

@@ -6,10 +6,10 @@ type Registry struct {
 	ordered []Action // maintains insertion order
 }
 
-// NewRegistry creates a registry pre-populated with all 23 agent-callable actions.
+// NewRegistry creates a registry pre-populated with all 27 agent-callable actions.
 func NewRegistry() *Registry {
 	r := &Registry{
-		actions: make(map[string]Action, 23),
+		actions: make(map[string]Action, 27),
 	}
 	for _, a := range allActions() {
 		r.actions[a.Name] = a
@@ -42,7 +42,7 @@ func (r *Registry) ListByCategory(category string) []Action {
 	return out
 }
 
-// allActions returns the canonical list of all 23 agent-callable actions.
+// allActions returns the canonical list of all 27 agent-callable actions.
 func allActions() []Action {
 	return []Action{
 		// ── Messaging (7 actions) ──────────────────────────────────────
@@ -425,7 +425,7 @@ func allActions() []Action {
 		{
 			Name:        "upload_attachment",
 			Category:    "attachments",
-			Description: "Upload a file attachment. Content must be base64-encoded. Returns the SHA-256 hash for later retrieval. Max file size: 50MB.",
+			Description: "Upload a file attachment. Content must be base64-encoded. Returns the SHA-256 hash for later retrieval. Upload first, then use the returned hash in send_message's attachments parameter to link it to a message. Max file size: 50MB.",
 			Params: []Param{
 				{Name: "content", Type: "string", Description: "Base64-encoded file content", Required: true},
 				{Name: "filename", Type: "string", Description: "Original filename (optional, used for MIME detection and display)"},
@@ -455,5 +455,75 @@ func allActions() []Action {
 				},
 			},
 		},
+
+		// ── Reactions (4 actions) ────────────────────────────────────
+		{
+			Name:        "react",
+			Category:    "reactions",
+			Description: "Add or toggle a reaction on a message. Valid reactions: approve, reject, in_progress, done, published. Adding the same reaction again removes it (toggle).",
+			Params: []Param{
+				{Name: "message_id", Type: "number", Description: "ID of the message to react to", Required: true},
+				{Name: "reaction", Type: "string", Description: "Reaction type: approve, reject, in_progress, done, published", Required: true},
+				{Name: "metadata", Type: "string", Description: "JSON metadata object (optional)"},
+			},
+			Returns: "JSON with action ('added' or 'removed') and reaction details",
+			Examples: []Example{
+				{
+					Description: "Approve a message",
+					Code:        `call("react", {"message_id": 42, "reaction": "approve"})`,
+				},
+				{
+					Description: "Toggle a reaction off (call same reaction again)",
+					Code:        `call("react", {"message_id": 42, "reaction": "approve"})`,
+				},
+			},
+		},
+		{
+			Name:        "unreact",
+			Category:    "reactions",
+			Description: "Remove a specific reaction from a message.",
+			Params: []Param{
+				{Name: "message_id", Type: "number", Description: "ID of the message to remove reaction from", Required: true},
+				{Name: "reaction", Type: "string", Description: "Reaction type to remove: approve, reject, in_progress, done, published", Required: true},
+			},
+			Returns: "JSON with message_id, reaction, and status 'removed'",
+			Examples: []Example{
+				{
+					Description: "Remove an approval reaction",
+					Code:        `call("unreact", {"message_id": 42, "reaction": "approve"})`,
+				},
+			},
+		},
+		{
+			Name:        "get_reactions",
+			Category:    "reactions",
+			Description: "Get all reactions on a message and its derived workflow state.",
+			Params: []Param{
+				{Name: "message_id", Type: "number", Description: "ID of the message to get reactions for", Required: true},
+			},
+			Returns: "JSON with reactions array and workflow_state",
+			Examples: []Example{
+				{
+					Description: "Get reactions and workflow state for a message",
+					Code:        `call("get_reactions", {"message_id": 42})`,
+				},
+			},
+		},
+		{
+			Name:        "list_by_state",
+			Category:    "reactions",
+			Description: "List messages in a channel filtered by workflow state. Valid states: proposed, approved, in_progress, rejected, done, published.",
+			Params: []Param{
+				{Name: "channel", Type: "string", Description: "Channel name", Required: true},
+				{Name: "state", Type: "string", Description: "Workflow state to filter by: proposed, approved, in_progress, rejected, done, published", Required: true},
+			},
+			Returns: "JSON with message_ids array and count",
+			Examples: []Example{
+				{
+					Description: "List approved messages in a channel",
+					Code:        `call("list_by_state", {"channel": "approvals", "state": "approved"})`,
+				},
+			},
+		},
 	}
 }

internal/actions/registry_test.go

@@ -4,11 +4,11 @@ import (
 	"testing"
 )
 
-func TestRegistryHas23Actions(t *testing.T) {
+func TestRegistryHas27Actions(t *testing.T) {
 	r := NewRegistry()
 	got := len(r.List())
-	if got != 23 {
-		t.Errorf("expected 23 actions, got %d", got)
+	if got != 27 {
+		t.Errorf("expected 27 actions, got %d", got)
 	}
 }
 
@@ -23,6 +23,7 @@ func TestRegistryCategories(t *testing.T) {
 		{"channels", 9},
 		{"swarm", 5},
 		{"attachments", 2},
+		{"reactions", 4},
 	}
 
 	for _, tt := range tests {
@@ -49,6 +50,8 @@ func TestRegistryGetByName(t *testing.T) {
 		"post_task", "bid_task", "accept_bid", "complete_task", "list_tasks",
 		// attachments
 		"upload_attachment", "download_attachment",
+		// reactions
+		"react", "unreact", "get_reactions", "list_by_state",
 	}
 
 	for _, name := range allNames {

internal/admin/socket.go

@@ -169,6 +169,8 @@ func (s *AdminServer) dispatch(req Request) Response {
 		return s.handleChannelsCreate(ctx, req.Args)
 	case "channels.join":
 		return s.handleChannelsJoin(ctx, req.Args)
+	case "channels.update_settings":
+		return s.handleChannelsUpdateSettings(ctx, req.Args)
 
 	// --- conversations ---
 	case "conversations.list":
@@ -995,6 +997,64 @@ func (s *AdminServer) handleChannelsJoin(ctx context.Context, args json.RawMessa
 	}}
 }
 
+func (s *AdminServer) handleChannelsUpdateSettings(ctx context.Context, args json.RawMessage) Response {
+	var p struct {
+		Name                   string `json:"name"`
+		AutoApprove            *bool  `json:"auto_approve,omitempty"`
+		StalemateRemindAfter   string `json:"stalemate_remind_after,omitempty"`
+		StalemateEscalateAfter string `json:"stalemate_escalate_after,omitempty"`
+	}
+	if err := json.Unmarshal(args, &p); err != nil {
+		return Response{OK: false, Error: "invalid args: " + err.Error()}
+	}
+	if p.Name == "" {
+		return Response{OK: false, Error: "name is required"}
+	}
+
+	// Build the SET clause dynamically based on provided fields
+	var setClauses []string
+	var setArgs []interface{}
+
+	if p.AutoApprove != nil {
+		autoApproveVal := 0
+		if *p.AutoApprove {
+			autoApproveVal = 1
+		}
+		setClauses = append(setClauses, "auto_approve = ?")
+		setArgs = append(setArgs, autoApproveVal)
+	}
+	if p.StalemateRemindAfter != "" {
+		setClauses = append(setClauses, "stalemate_remind_after = ?")
+		setArgs = append(setArgs, p.StalemateRemindAfter)
+	}
+	if p.StalemateEscalateAfter != "" {
+		setClauses = append(setClauses, "stalemate_escalate_after = ?")
+		setArgs = append(setArgs, p.StalemateEscalateAfter)
+	}
+
+	if len(setClauses) == 0 {
+		return Response{OK: false, Error: "at least one setting must be provided (auto_approve, stalemate_remind_after, stalemate_escalate_after)"}
+	}
+
+	query := fmt.Sprintf("UPDATE channels SET %s WHERE LOWER(name) = LOWER(?)", strings.Join(setClauses, ", "))
+	setArgs = append(setArgs, p.Name)
+
+	result, err := s.db.ExecContext(ctx, query, setArgs...)
+	if err != nil {
+		return Response{OK: false, Error: "update channel settings: " + err.Error()}
+	}
+
+	rowsAffected, _ := result.RowsAffected()
+	if rowsAffected == 0 {
+		return Response{OK: false, Error: fmt.Sprintf("channel not found: %s", p.Name)}
+	}
+
+	return Response{OK: true, Data: map[string]interface{}{
+		"channel": p.Name,
+		"updated": true,
+	}}
+}
+
 // ---------- conversations handlers ----------
 
 func (s *AdminServer) handleConversationsList(ctx context.Context, args json.RawMessage) Response {

internal/api/attachments_handler.go

@@ -137,6 +137,8 @@ func (h *AttachmentsHandler) Upload(w http.ResponseWriter, r *http.Request) {
 			http.Error(w, `{"error":"empty file not allowed"}`, http.StatusBadRequest)
 		case attachments.ErrFileTooLarge:
 			http.Error(w, `{"error":"file exceeds maximum size of 50MB"}`, http.StatusRequestEntityTooLarge)
+		case attachments.ErrUnsupportedType:
+			http.Error(w, `{"error":"unsupported file type: only images, PDFs, and text files are allowed"}`, http.StatusBadRequest)
 		default:
 			h.logger.Error("upload attachment failed", "error", err)
 			http.Error(w, `{"error":"internal server error"}`, http.StatusInternalServerError)

internal/api/channels_handler.go

@@ -1,6 +1,7 @@
 package api
 
 import (
+	"context"
 	"encoding/json"
 	"log/slog"
 	"net/http"
@@ -15,10 +16,16 @@ import (
 
 // ChannelsHandler handles REST API requests for channels.
 type ChannelsHandler struct {
-	channelService *channels.Service
-	agentService   *agents.AgentService
-	msgService     *messaging.MessagingService
-	logger         *slog.Logger
+	channelService  *channels.Service
+	agentService    *agents.AgentService
+	msgService      *messaging.MessagingService
+	reactionService ChannelReactionService
+	logger          *slog.Logger
+}
+
+// ChannelReactionService is the subset of reactions.Service needed by ChannelsHandler.
+type ChannelReactionService interface {
+	ListByState(ctx context.Context, channelID int64, state string) ([]int64, error)
 }
 
 // NewChannelsHandler creates a new channels handler.
@@ -31,6 +38,11 @@ func NewChannelsHandler(channelService *channels.Service, agentService *agents.A
 	}
 }
 
+// SetReactionService sets the reaction service for workflow state queries.
+func (h *ChannelsHandler) SetReactionService(svc ChannelReactionService) {
+	h.reactionService = svc
+}
+
 // ListChannels handles GET /api/channels.
 func (h *ChannelsHandler) ListChannels(w http.ResponseWriter, r *http.Request) {
 	ownerID, ok := OwnerIDFromContext(r.Context())
@@ -228,6 +240,9 @@ func (h *ChannelsHandler) ChannelMessages(w http.ResponseWriter, r *http.Request
 		return
 	}
 
+	// Enrich messages with reply counts and attachments.
+	h.msgService.EnrichMessages(r.Context(), paginated.Messages)
+
 	// Compute last_read_message_id across owned agents
 	var lastReadMessageID int64
 	ownedAgents, err := h.agentService.ListAgents(r.Context(), ownerID)
@@ -295,3 +310,112 @@ func (h *ChannelsHandler) LeaveChannel(w http.ResponseWriter, r *http.Request) {
 
 	writeJSON(w, http.StatusOK, map[string]string{"status": "left"})
 }
+
+// UpdateSettings handles PUT /api/channels/{name}/settings.
+func (h *ChannelsHandler) UpdateSettings(w http.ResponseWriter, r *http.Request) {
+	_, ok := OwnerIDFromContext(r.Context())
+	if !ok {
+		writeJSON(w, http.StatusUnauthorized, errorBody("unauthorized", "Authentication required"))
+		return
+	}
+
+	name := chi.URLParam(r, "name")
+	ch, err := h.channelService.GetChannelByName(r.Context(), name)
+	if err != nil {
+		writeJSON(w, http.StatusNotFound, errorBody("not_found", "Channel not found"))
+		return
+	}
+
+	var req struct {
+		AutoApprove            *bool   `json:"auto_approve"`
+		StalemateRemindAfter   *string `json:"stalemate_remind_after"`
+		StalemateEscalateAfter *string `json:"stalemate_escalate_after"`
+	}
+
+	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
+		writeJSON(w, http.StatusBadRequest, errorBody("invalid_request", "Invalid JSON body"))
+		return
+	}
+
+	settings := channels.ChannelSettings{
+		AutoApprove:            ch.AutoApprove,
+		StalemateRemindAfter:   ch.StalemateRemindAfter,
+		StalemateEscalateAfter: ch.StalemateEscalateAfter,
+	}
+
+	if req.AutoApprove != nil {
+		settings.AutoApprove = *req.AutoApprove
+	}
+	if req.StalemateRemindAfter != nil {
+		settings.StalemateRemindAfter = *req.StalemateRemindAfter
+	}
+	if req.StalemateEscalateAfter != nil {
+		settings.StalemateEscalateAfter = *req.StalemateEscalateAfter
+	}
+
+	updated, err := h.channelService.UpdateChannelSettings(r.Context(), ch.ID, settings)
+	if err != nil {
+		h.logger.Error("update channel settings failed", "error", err)
+		writeJSON(w, http.StatusInternalServerError, errorBody("server_error", "Failed to update channel settings"))
+		return
+	}
+
+	writeJSON(w, http.StatusOK, map[string]any{"channel": updated})
+}
+
+// ListByState handles GET /api/channels/{name}/messages/by-state?state=X.
+func (h *ChannelsHandler) ListByState(w http.ResponseWriter, r *http.Request) {
+	_, ok := OwnerIDFromContext(r.Context())
+	if !ok {
+		writeJSON(w, http.StatusUnauthorized, errorBody("unauthorized", "Authentication required"))
+		return
+	}
+
+	if h.reactionService == nil {
+		writeJSON(w, http.StatusServiceUnavailable, errorBody("unavailable", "Reactions service not configured"))
+		return
+	}
+
+	name := chi.URLParam(r, "name")
+	ch, err := h.channelService.GetChannelByName(r.Context(), name)
+	if err != nil {
+		writeJSON(w, http.StatusNotFound, errorBody("not_found", "Channel not found"))
+		return
+	}
+
+	state := r.URL.Query().Get("state")
+	if state == "" {
+		writeJSON(w, http.StatusBadRequest, errorBody("missing_state", "Query parameter 'state' is required"))
+		return
+	}
+
+	ids, err := h.reactionService.ListByState(r.Context(), ch.ID, state)
+	if err != nil {
+		h.logger.Error("list by state failed", "error", err)
+		writeJSON(w, http.StatusBadRequest, errorBody("invalid_state", err.Error()))
+		return
+	}
+
+	// Load messages by IDs
+	var messages []*messaging.Message
+	for _, id := range ids {
+		msg, err := h.msgService.GetMessageByID(r.Context(), id)
+		if err != nil {
+			continue
+		}
+		messages = append(messages, msg)
+	}
+
+	if messages == nil {
+		messages = []*messaging.Message{}
+	}
+
+	// Enrich messages with reactions, reply counts, attachments
+	h.msgService.EnrichMessages(r.Context(), messages)
+
+	writeJSON(w, http.StatusOK, map[string]any{
+		"messages": messages,
+		"state":    state,
+		"total":    len(messages),
+	})
+}

internal/api/messages_handler.go

@@ -86,6 +86,8 @@ func (h *MessagesHandler) ListMessages(w http.ResponseWriter, r *http.Request) {
 		allMessages = []*messaging.Message{}
 	}
 
+	h.msgService.EnrichMessages(r.Context(), allMessages)
+
 	sortMessagesByTime(allMessages)
 	if len(allMessages) > limit {
 		allMessages = allMessages[:limit]
@@ -122,6 +124,8 @@ func (h *MessagesHandler) GetMessage(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	h.msgService.EnrichMessages(r.Context(), []*messaging.Message{msg})
+
 	writeJSON(w, http.StatusOK, msg)
 }
 
@@ -230,6 +234,8 @@ func (h *MessagesHandler) GetConversation(w http.ResponseWriter, r *http.Request
 		return
 	}
 
+	h.msgService.EnrichMessages(r.Context(), messages)
+
 	writeJSON(w, http.StatusOK, map[string]any{
 		"conversation": conv,
 		"messages":     messages,
@@ -245,14 +251,15 @@ func (h *MessagesHandler) SendMessage(w http.ResponseWriter, r *http.Request) {
 	}
 
 	var req struct {
-		From           string `json:"from"`
-		To             string `json:"to"`
-		Body           string `json:"body"`
-		Priority       int    `json:"priority"`
-		ChannelID      *int64 `json:"channel_id,omitempty"`
-		ConversationID *int64 `json:"conversation_id,omitempty"`
-		Subject        string `json:"subject,omitempty"`
-		ReplyTo        *int64 `json:"reply_to,omitempty"`
+		From           string   `json:"from"`
+		To             string   `json:"to"`
+		Body           string   `json:"body"`
+		Priority       int      `json:"priority"`
+		ChannelID      *int64   `json:"channel_id,omitempty"`
+		ConversationID *int64   `json:"conversation_id,omitempty"`
+		Subject        string   `json:"subject,omitempty"`
+		ReplyTo        *int64   `json:"reply_to,omitempty"`
+		Attachments    []string `json:"attachments,omitempty"`
 	}
 
 	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
@@ -307,6 +314,7 @@ func (h *MessagesHandler) SendMessage(w http.ResponseWriter, r *http.Request) {
 		ConversationID: req.ConversationID,
 		Subject:        req.Subject,
 		ReplyTo:        req.ReplyTo,
+		Attachments:    req.Attachments,
 	}
 
 	msg, err := h.msgService.SendMessage(r.Context(), req.From, req.To, req.Body, opts)
@@ -319,6 +327,8 @@ func (h *MessagesHandler) SendMessage(w http.ResponseWriter, r *http.Request) {
 	// SSE broadcast is handled by the MessageListener on the messaging
 	// service, so it fires for both REST and MCP message paths.
 
+	h.msgService.EnrichMessages(r.Context(), []*messaging.Message{msg})
+
 	writeJSON(w, http.StatusCreated, msg)
 }
 
@@ -465,6 +475,8 @@ func (h *MessagesHandler) SearchMessages(w http.ResponseWriter, r *http.Request)
 		allMessages = []*messaging.Message{}
 	}
 
+	h.msgService.EnrichMessages(r.Context(), allMessages)
+
 	writeJSON(w, http.StatusOK, map[string]any{
 		"messages": allMessages,
 		"query":    query,
@@ -505,6 +517,8 @@ func (h *MessagesHandler) GetReplies(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	h.msgService.EnrichMessages(r.Context(), replies)
+
 	writeJSON(w, http.StatusOK, map[string]any{
 		"replies": replies,
 		"total":   len(replies),
@@ -550,6 +564,8 @@ func (h *MessagesHandler) DMMessages(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	h.msgService.EnrichMessages(r.Context(), msgs)
+
 	// Include last_read_message_id for the human agent's DM with the peer
 	lastRead, _ := h.msgService.GetLastReadForDM(r.Context(), agentNames, peerAgent)
 

internal/api/notifications_handler_test.go

@@ -333,7 +333,7 @@ func TestChannelMessages_IncludesLastRead(t *testing.T) {
 	}
 
 	// Broadcast messages
-	msgs, err := channelService.BroadcastMessage(ctx, ch.ID, "human-agent", "Hello channel", 5, "", nil)
+	msgs, err := channelService.BroadcastMessage(ctx, ch.ID, "human-agent", "Hello channel", 5, "", nil, nil)
 	if err != nil {
 		t.Fatalf("broadcast: %v", err)
 	}

internal/api/reactions_handler.go

@@ -0,0 +1,233 @@
+package api
+
+import (
+	"encoding/json"
+	"fmt"
+	"log/slog"
+	"net/http"
+	"strconv"
+
+	"github.com/go-chi/chi/v5"
+
+	"github.com/synapbus/synapbus/internal/agents"
+	"github.com/synapbus/synapbus/internal/auth"
+	"github.com/synapbus/synapbus/internal/messaging"
+	"github.com/synapbus/synapbus/internal/reactions"
+)
+
+// ReactionsHandler handles REST API requests for message reactions.
+type ReactionsHandler struct {
+	reactionService *reactions.Service
+	msgService      *messaging.MessagingService
+	agentService    *agents.AgentService
+	logger          *slog.Logger
+}
+
+// NewReactionsHandler creates a new reactions handler.
+func NewReactionsHandler(reactionService *reactions.Service, msgService *messaging.MessagingService, agentService *agents.AgentService) *ReactionsHandler {
+	return &ReactionsHandler{
+		reactionService: reactionService,
+		msgService:      msgService,
+		agentService:    agentService,
+		logger:          slog.Default().With("component", "api.reactions"),
+	}
+}
+
+// Toggle handles POST /api/messages/{id}/reactions.
+func (h *ReactionsHandler) Toggle(w http.ResponseWriter, r *http.Request) {
+	ownerID, ok := OwnerIDFromContext(r.Context())
+	if !ok {
+		writeJSON(w, http.StatusUnauthorized, errorBody("unauthorized", "Authentication required"))
+		return
+	}
+
+	id, err := strconv.ParseInt(chi.URLParam(r, "id"), 10, 64)
+	if err != nil {
+		writeJSON(w, http.StatusBadRequest, errorBody("invalid_id", "Invalid message ID"))
+		return
+	}
+
+	var req struct {
+		Reaction string          `json:"reaction"`
+		Metadata json.RawMessage `json:"metadata,omitempty"`
+	}
+
+	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
+		writeJSON(w, http.StatusBadRequest, errorBody("invalid_request", "Invalid JSON body"))
+		return
+	}
+
+	if req.Reaction == "" {
+		writeJSON(w, http.StatusBadRequest, errorBody("validation_error", "Reaction type is required"))
+		return
+	}
+
+	// Verify the message exists
+	msg, err := h.msgService.GetMessageByID(r.Context(), id)
+	if err != nil {
+		writeJSON(w, http.StatusNotFound, errorBody("not_found", "Message not found"))
+		return
+	}
+
+	// Determine the acting agent name from the session
+	agentName, err := h.resolveAgentName(r, ownerID, msg)
+	if err != nil {
+		h.logger.Error("resolve agent name failed", "error", err)
+		writeJSON(w, http.StatusBadRequest, errorBody("no_agent", err.Error()))
+		return
+	}
+
+	result, err := h.reactionService.Toggle(r.Context(), id, agentName, req.Reaction, req.Metadata)
+	if err != nil {
+		if err == reactions.ErrInvalidReaction {
+			writeJSON(w, http.StatusBadRequest, errorBody("invalid_reaction", err.Error()))
+			return
+		}
+		if err == reactions.ErrReactionLimit {
+			writeJSON(w, http.StatusBadRequest, errorBody("reaction_limit", err.Error()))
+			return
+		}
+		h.logger.Error("toggle reaction failed", "error", err)
+		writeJSON(w, http.StatusInternalServerError, errorBody("server_error", "Failed to toggle reaction"))
+		return
+	}
+
+	// Reload reactions and workflow state for the response
+	rxs, state, err := h.reactionService.GetReactions(r.Context(), id)
+	if err != nil {
+		h.logger.Error("get reactions failed", "error", err)
+		writeJSON(w, http.StatusInternalServerError, errorBody("server_error", "Failed to get reactions"))
+		return
+	}
+
+	writeJSON(w, http.StatusOK, map[string]any{
+		"action":         result.Action,
+		"reaction":       result.Reaction,
+		"reactions":      rxs,
+		"workflow_state": state,
+	})
+}
+
+// GetReactions handles GET /api/messages/{id}/reactions.
+func (h *ReactionsHandler) GetReactions(w http.ResponseWriter, r *http.Request) {
+	_, ok := OwnerIDFromContext(r.Context())
+	if !ok {
+		writeJSON(w, http.StatusUnauthorized, errorBody("unauthorized", "Authentication required"))
+		return
+	}
+
+	id, err := strconv.ParseInt(chi.URLParam(r, "id"), 10, 64)
+	if err != nil {
+		writeJSON(w, http.StatusBadRequest, errorBody("invalid_id", "Invalid message ID"))
+		return
+	}
+
+	// Verify the message exists
+	_, err = h.msgService.GetMessageByID(r.Context(), id)
+	if err != nil {
+		writeJSON(w, http.StatusNotFound, errorBody("not_found", "Message not found"))
+		return
+	}
+
+	rxs, state, err := h.reactionService.GetReactions(r.Context(), id)
+	if err != nil {
+		h.logger.Error("get reactions failed", "error", err)
+		writeJSON(w, http.StatusInternalServerError, errorBody("server_error", "Failed to get reactions"))
+		return
+	}
+
+	writeJSON(w, http.StatusOK, map[string]any{
+		"reactions":      rxs,
+		"workflow_state": state,
+	})
+}
+
+// Remove handles DELETE /api/messages/{id}/reactions/{reaction}.
+func (h *ReactionsHandler) Remove(w http.ResponseWriter, r *http.Request) {
+	ownerID, ok := OwnerIDFromContext(r.Context())
+	if !ok {
+		writeJSON(w, http.StatusUnauthorized, errorBody("unauthorized", "Authentication required"))
+		return
+	}
+
+	id, err := strconv.ParseInt(chi.URLParam(r, "id"), 10, 64)
+	if err != nil {
+		writeJSON(w, http.StatusBadRequest, errorBody("invalid_id", "Invalid message ID"))
+		return
+	}
+
+	reactionType := chi.URLParam(r, "reaction")
+	if reactionType == "" {
+		writeJSON(w, http.StatusBadRequest, errorBody("validation_error", "Reaction type is required"))
+		return
+	}
+
+	// Verify the message exists
+	msg, err := h.msgService.GetMessageByID(r.Context(), id)
+	if err != nil {
+		writeJSON(w, http.StatusNotFound, errorBody("not_found", "Message not found"))
+		return
+	}
+
+	// Determine the acting agent name
+	agentName, err := h.resolveAgentName(r, ownerID, msg)
+	if err != nil {
+		h.logger.Error("resolve agent name failed", "error", err)
+		writeJSON(w, http.StatusBadRequest, errorBody("no_agent", err.Error()))
+		return
+	}
+
+	if err := h.reactionService.Remove(r.Context(), id, agentName, reactionType); err != nil {
+		if err == reactions.ErrInvalidReaction {
+			writeJSON(w, http.StatusBadRequest, errorBody("invalid_reaction", err.Error()))
+			return
+		}
+		h.logger.Error("remove reaction failed", "error", err)
+		writeJSON(w, http.StatusInternalServerError, errorBody("server_error", "Failed to remove reaction"))
+		return
+	}
+
+	// Reload reactions and workflow state for the response
+	rxs, state, err := h.reactionService.GetReactions(r.Context(), id)
+	if err != nil {
+		h.logger.Error("get reactions failed", "error", err)
+		writeJSON(w, http.StatusInternalServerError, errorBody("server_error", "Failed to get reactions"))
+		return
+	}
+
+	writeJSON(w, http.StatusOK, map[string]any{
+		"status":         "removed",
+		"reactions":      rxs,
+		"workflow_state": state,
+	})
+}
+
+// resolveAgentName determines the agent name for the current session user.
+// For session-authenticated users (Web UI), it returns the human agent.
+// For API key / OAuth, it falls back to the first owned agent.
+func (h *ReactionsHandler) resolveAgentName(r *http.Request, ownerID int64, msg *messaging.Message) (string, error) {
+	if _, isSession := auth.SessionIDFromContext(r.Context()); isSession {
+		humanAgent, err := h.agentService.GetHumanAgentForUser(r.Context(), ownerID)
+		if err != nil {
+			return "", err
+		}
+		if humanAgent == nil {
+			return "", fmt.Errorf("no human agent found for this user")
+		}
+		return humanAgent.Name, nil
+	}
+
+	// Non-session: find an owned agent
+	ownedAgents, err := h.agentService.ListAgents(r.Context(), ownerID)
+	if err != nil || len(ownedAgents) == 0 {
+		return "", fmt.Errorf("no agents registered")
+	}
+
+	// Prefer human-type agent
+	for _, a := range ownedAgents {
+		if a.Type == "human" {
+			return a.Name, nil
+		}
+	}
+	return ownedAgents[0].Name, nil
+}

internal/api/router.go

@@ -13,6 +13,7 @@ import (
 	"github.com/synapbus/synapbus/internal/k8s"
 	"github.com/synapbus/synapbus/internal/messaging"
 	"github.com/synapbus/synapbus/internal/push"
+	"github.com/synapbus/synapbus/internal/reactions"
 	"github.com/synapbus/synapbus/internal/trace"
 	"github.com/synapbus/synapbus/internal/webhooks"
 )
@@ -32,6 +33,7 @@ type RouterConfig struct {
 	WebhookStore      webhooks.WebhookStore
 	K8sService        *k8s.K8sService
 	K8sStore          k8s.K8sStore
+	ReactionService   *reactions.Service
 	PushService       *push.Service
 	SSEHub            *SSEHub
 	Broadcaster       *SSEBroadcaster
@@ -142,9 +144,24 @@ func NewRouterWithConfig(cfg RouterConfig) chi.Router {
 			})
 		}
 
+		// Reactions
+		if cfg.ReactionService != nil {
+			reactionsHandler := NewReactionsHandler(cfg.ReactionService, cfg.MsgService, cfg.AgentService)
+			r.Group(func(r chi.Router) {
+				r.Use(authMiddleware)
+
+				r.Post("/api/messages/{id}/reactions", reactionsHandler.Toggle)
+				r.Get("/api/messages/{id}/reactions", reactionsHandler.GetReactions)
+				r.Delete("/api/messages/{id}/reactions/{reaction}", reactionsHandler.Remove)
+			})
+		}
+
 		// Channels
 		if cfg.ChannelService != nil {
 			channelsHandler := NewChannelsHandler(cfg.ChannelService, cfg.AgentService, cfg.MsgService)
+			if cfg.ReactionService != nil {
+				channelsHandler.SetReactionService(cfg.ReactionService)
+			}
 			r.Group(func(r chi.Router) {
 				r.Use(authMiddleware)
 
@@ -152,6 +169,8 @@ func NewRouterWithConfig(cfg RouterConfig) chi.Router {
 				r.Get("/api/channels/{name}", channelsHandler.GetChannel)
 				r.Post("/api/channels", channelsHandler.CreateChannel)
 				r.Get("/api/channels/{name}/messages", channelsHandler.ChannelMessages)
+				r.Get("/api/channels/{name}/messages/by-state", channelsHandler.ListByState)
+				r.Put("/api/channels/{name}/settings", channelsHandler.UpdateSettings)
 				r.Post("/api/channels/{name}/join", channelsHandler.JoinChannel)
 				r.Post("/api/channels/{name}/leave", channelsHandler.LeaveChannel)
 			})

internal/attachments/mime.go

@@ -118,3 +118,27 @@ func DefaultFilename(mimeType string) string {
 func IsImageType(mimeType string) bool {
 	return imageTypes[mimeType]
 }
+
+// IsAllowedType returns true if the MIME type is allowed for upload.
+// Allowed: image/*, application/pdf, text/*.
+func IsAllowedType(mimeType string) bool {
+	// Normalize: strip parameters like "; charset=utf-8".
+	base := mimeType
+	if idx := strings.Index(mimeType, ";"); idx >= 0 {
+		base = strings.TrimSpace(mimeType[:idx])
+	}
+	if strings.HasPrefix(base, "image/") {
+		return true
+	}
+	if base == "application/pdf" {
+		return true
+	}
+	if strings.HasPrefix(base, "text/") {
+		return true
+	}
+	// Also allow JSON and XML which may be detected as application/*
+	if base == "application/json" || base == "application/xml" {
+		return true
+	}
+	return false
+}

internal/attachments/mime_test.go

@@ -154,6 +154,35 @@ func TestIsImageType(t *testing.T) {
 	}
 }
 
+func TestIsAllowedType(t *testing.T) {
+	tests := []struct {
+		mimeType string
+		want     bool
+	}{
+		{"image/png", true},
+		{"image/jpeg", true},
+		{"image/gif", true},
+		{"application/pdf", true},
+		{"text/plain", true},
+		{"text/csv", true},
+		{"text/plain; charset=utf-8", true},
+		{"application/json", true},
+		{"application/octet-stream", false},
+		{"application/zip", false},
+		{"application/x-executable", false},
+		{"video/mp4", false},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.mimeType, func(t *testing.T) {
+			got := IsAllowedType(tt.mimeType)
+			if got != tt.want {
+				t.Errorf("IsAllowedType(%q) = %v, want %v", tt.mimeType, got, tt.want)
+			}
+		})
+	}
+}
+
 func min(a, b int) int {
 	if a < b {
 		return a

internal/attachments/model.go

@@ -11,10 +11,11 @@ const MaxFileSize = 50 * 1024 * 1024 // 50 MB
 
 // Sentinel errors.
 var (
-	ErrNotFound      = errors.New("attachment not found")
-	ErrFileTooLarge  = errors.New("file exceeds maximum size of 50MB")
-	ErrEmptyFile     = errors.New("empty file not allowed")
-	ErrFileMissing   = errors.New("attachment file missing from disk")
+	ErrNotFound        = errors.New("attachment not found")
+	ErrFileTooLarge    = errors.New("file exceeds maximum size of 50MB")
+	ErrEmptyFile       = errors.New("empty file not allowed")
+	ErrFileMissing     = errors.New("attachment file missing from disk")
+	ErrUnsupportedType = errors.New("unsupported file type: only images (jpg, png, gif, webp, svg), PDFs, and text files are allowed")
 )
 
 // Attachment represents the metadata for a stored file.

internal/attachments/service.go

@@ -60,6 +60,11 @@ func (s *Service) Upload(ctx context.Context, req UploadRequest) (*UploadResult,
 		mimeType = DetectMIMEType(sniffBuf, req.Filename)
 	}
 
+	// Validate file type against allowlist.
+	if !IsAllowedType(mimeType) {
+		return nil, ErrUnsupportedType
+	}
+
 	// Assign default filename if missing.
 	filename := req.Filename
 	if filename == "" {

internal/attachments/service_test.go

@@ -202,6 +202,80 @@ func TestService_Dedup(t *testing.T) {
 	}
 }
 
+func TestService_Upload_FileTypeValidation(t *testing.T) {
+	// PNG magic bytes.
+	pngContent := []byte{0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a, 0x00, 0x00}
+	// PDF magic bytes.
+	pdfContent := []byte("%PDF-1.4 some pdf content here")
+	// Plain text content.
+	textContent := []byte("just some plain text content")
+
+	tests := []struct {
+		name     string
+		content  []byte
+		filename string
+		mimeType string
+		wantErr  error
+	}{
+		{
+			name:     "valid image upload",
+			content:  pngContent,
+			filename: "photo.png",
+			wantErr:  nil,
+		},
+		{
+			name:     "valid PDF upload",
+			content:  pdfContent,
+			filename: "report.pdf",
+			wantErr:  nil,
+		},
+		{
+			name:     "valid text file upload",
+			content:  textContent,
+			filename: "notes.txt",
+			wantErr:  nil,
+		},
+		{
+			name:     "invalid type zip rejected",
+			content:  []byte("not real zip content"),
+			filename: "archive.zip",
+			mimeType: "application/zip",
+			wantErr:  ErrUnsupportedType,
+		},
+		{
+			name:     "invalid type executable rejected",
+			content:  []byte{0x7f, 0x45, 0x4c, 0x46},
+			filename: "program.exe",
+			mimeType: "application/x-executable",
+			wantErr:  ErrUnsupportedType,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			svc, _ := newTestService(t)
+			ctx := context.Background()
+
+			_, err := svc.Upload(ctx, UploadRequest{
+				Content:    bytes.NewReader(tt.content),
+				Filename:   tt.filename,
+				MIMEType:   tt.mimeType,
+				UploadedBy: "agent-a",
+			})
+
+			if tt.wantErr != nil {
+				if err != tt.wantErr {
+					t.Errorf("expected error %v, got %v", tt.wantErr, err)
+				}
+				return
+			}
+			if err != nil {
+				t.Fatalf("Upload: %v", err)
+			}
+		})
+	}
+}
+
 func TestService_GarbageCollect(t *testing.T) {
 	svc, db := newTestService(t)
 	ctx := context.Background()

internal/channels/service.go

@@ -459,13 +459,38 @@ func (s *Service) UpdateChannel(ctx context.Context, channelID int64, req Update
 	return ch, nil
 }
 
+// UpdateChannelSettings updates the workflow-related settings for a channel.
+func (s *Service) UpdateChannelSettings(ctx context.Context, channelID int64, settings ChannelSettings) (*Channel, error) {
+	store, ok := s.store.(*SQLiteChannelStore)
+	if !ok {
+		return nil, fmt.Errorf("channel store does not support settings update")
+	}
+
+	if err := store.UpdateChannelSettings(ctx, channelID, settings); err != nil {
+		return nil, err
+	}
+
+	// Reload channel to return updated state
+	ch, err := s.store.GetChannel(ctx, channelID)
+	if err != nil {
+		return nil, err
+	}
+
+	s.logger.Info("channel settings updated",
+		"channel_id", channelID,
+		"auto_approve", settings.AutoApprove,
+	)
+
+	return ch, nil
+}
+
 // BroadcastMessage sends a message to a channel. It creates a single channel
 // message (visible in the channel timeline via GetChannelMessages) and also
 // delivers individual DM notifications to each member's inbox.
 // If the message body contains @mentions, mentioned members receive a
 // "mention":true flag in their inbox notification metadata, and the channel
 // message metadata includes "mentioned_agents".
-func (s *Service) BroadcastMessage(ctx context.Context, channelID int64, fromAgent, body string, priority int, metadata string, replyTo *int64) ([]*messaging.Message, error) {
+func (s *Service) BroadcastMessage(ctx context.Context, channelID int64, fromAgent, body string, priority int, metadata string, replyTo *int64, attachments []string) ([]*messaging.Message, error) {
 	ch, err := s.store.GetChannel(ctx, channelID)
 	if err != nil {
 		return nil, err
@@ -522,11 +547,12 @@ func (s *Service) BroadcastMessage(ctx context.Context, channelID int64, fromAge
 	channelMetaBytes, _ := json.Marshal(channelMetaObj)
 
 	channelMsg, err := s.msgService.SendMessage(ctx, fromAgent, "", body, messaging.SendOptions{
-		Subject:   fmt.Sprintf("channel:%s", ch.Name),
-		Priority:  priority,
-		Metadata:  string(channelMetaBytes),
-		ChannelID: &channelID,
-		ReplyTo:   replyTo,
+		Subject:     fmt.Sprintf("channel:%s", ch.Name),
+		Priority:    priority,
+		Metadata:    string(channelMetaBytes),
+		ChannelID:   &channelID,
+		ReplyTo:     replyTo,
+		Attachments: attachments,
 	})
 	if err != nil {
 		return nil, fmt.Errorf("create channel message: %w", err)

internal/channels/service_test.go

@@ -533,7 +533,7 @@ func TestService_BroadcastMessage(t *testing.T) {
 	ch, _ := svc.CreateChannel(ctx, CreateChannelRequest{Name: "alerts", Type: TypeStandard, CreatedBy: "agent-a"})
 
 	t.Run("broadcast creates channel message", func(t *testing.T) {
-		msgs, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "hello", 5, "", nil)
+		msgs, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "hello", 5, "", nil, nil)
 		if err != nil {
 			t.Fatalf("BroadcastMessage: %v", err)
 		}
@@ -568,7 +568,7 @@ func TestService_BroadcastMessage(t *testing.T) {
 	t.Run("broadcast without mentions sends no DMs", func(t *testing.T) {
 		svc.JoinChannel(ctx, ch.ID, "agent-b")
 		svc.JoinChannel(ctx, ch.ID, "agent-c")
-		_, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "no-dm-test", 5, "", nil)
+		_, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "no-dm-test", 5, "", nil, nil)
 		if err != nil {
 			t.Fatalf("BroadcastMessage: %v", err)
 		}
@@ -583,7 +583,7 @@ func TestService_BroadcastMessage(t *testing.T) {
 	})
 
 	t.Run("sender does not receive own message", func(t *testing.T) {
-		svc.BroadcastMessage(ctx, ch.ID, "agent-a", "no self-message", 5, "", nil)
+		svc.BroadcastMessage(ctx, ch.ID, "agent-a", "no self-message", 5, "", nil, nil)
 		inboxResult, _ := svc.msgService.ReadInbox(ctx, "agent-a", messaging.ReadOptions{IncludeRead: true})
 		for _, m := range inboxResult.Messages {
 			if m.Body == "no self-message" {
@@ -594,7 +594,7 @@ func TestService_BroadcastMessage(t *testing.T) {
 
 	t.Run("non-member auto-joins public channel on broadcast", func(t *testing.T) {
 		seedAgent(t, svc.store.(*SQLiteChannelStore).db, "outsider")
-		_, err := svc.BroadcastMessage(ctx, ch.ID, "outsider", "auto-joined", 5, "", nil)
+		_, err := svc.BroadcastMessage(ctx, ch.ID, "outsider", "auto-joined", 5, "", nil, nil)
 		if err != nil {
 			t.Fatalf("expected auto-join for public channel, got %v", err)
 		}
@@ -605,10 +605,10 @@ func TestService_BroadcastMessage(t *testing.T) {
 	})
 
 	t.Run("broadcast with reply_to", func(t *testing.T) {
-		msgs, _ := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "original", 5, "", nil)
+		msgs, _ := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "original", 5, "", nil, nil)
 		original := msgs[0]
 
-		replies, err := svc.BroadcastMessage(ctx, ch.ID, "agent-b", "reply to original", 5, "", &original.ID)
+		replies, err := svc.BroadcastMessage(ctx, ch.ID, "agent-b", "reply to original", 5, "", &original.ID, nil)
 		if err != nil {
 			t.Fatalf("BroadcastMessage with reply_to: %v", err)
 		}
@@ -625,7 +625,7 @@ func TestService_BroadcastMessage(t *testing.T) {
 			t.Fatalf("create private channel: %v", err)
 		}
 		seedAgent(t, svc.store.(*SQLiteChannelStore).db, "outsider2")
-		_, err = svc.BroadcastMessage(ctx, privCh.ID, "outsider2", "unauthorized", 5, "", nil)
+		_, err = svc.BroadcastMessage(ctx, privCh.ID, "outsider2", "unauthorized", 5, "", nil, nil)
 		if !errors.Is(err, ErrNotChannelMember) {
 			t.Errorf("expected ErrNotChannelMember for private channel, got %v", err)
 		}
@@ -644,7 +644,7 @@ func TestService_BroadcastMessage_Mentions(t *testing.T) {
 	svc.JoinChannel(ctx, ch.ID, "agent-c")
 
 	t.Run("mentioned member gets mention flag in inbox", func(t *testing.T) {
-		_, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "hey @agent-b check this", 5, "", nil)
+		_, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "hey @agent-b check this", 5, "", nil, nil)
 		if err != nil {
 			t.Fatalf("BroadcastMessage: %v", err)
 		}
@@ -677,7 +677,7 @@ func TestService_BroadcastMessage_Mentions(t *testing.T) {
 	})
 
 	t.Run("channel message metadata includes mentioned_agents", func(t *testing.T) {
-		_, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "cc @agent-b and @agent-c", 5, "", nil)
+		_, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "cc @agent-b and @agent-c", 5, "", nil, nil)
 		if err != nil {
 			t.Fatalf("BroadcastMessage: %v", err)
 		}
@@ -707,7 +707,7 @@ func TestService_BroadcastMessage_Mentions(t *testing.T) {
 	})
 
 	t.Run("self-mention is excluded", func(t *testing.T) {
-		_, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "I am @agent-a and cc @agent-b", 5, "", nil)
+		_, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "I am @agent-a and cc @agent-b", 5, "", nil, nil)
 		if err != nil {
 			t.Fatalf("BroadcastMessage: %v", err)
 		}
@@ -732,7 +732,7 @@ func TestService_BroadcastMessage_Mentions(t *testing.T) {
 	})
 
 	t.Run("no mentions produces no mention metadata", func(t *testing.T) {
-		_, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "just a normal message", 5, "", nil)
+		_, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "just a normal message", 5, "", nil, nil)
 		if err != nil {
 			t.Fatalf("BroadcastMessage: %v", err)
 		}
@@ -752,7 +752,7 @@ func TestService_BroadcastMessage_Mentions(t *testing.T) {
 
 	t.Run("non-member mention is ignored", func(t *testing.T) {
 		seedAgent(t, svc.store.(*SQLiteChannelStore).db, "outsider")
-		_, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "hey @outsider and @agent-b", 5, "", nil)
+		_, err := svc.BroadcastMessage(ctx, ch.ID, "agent-a", "hey @outsider and @agent-b", 5, "", nil, nil)
 		if err != nil {
 			t.Fatalf("BroadcastMessage: %v", err)
 		}

internal/channels/store.go

@@ -83,9 +83,9 @@ func (s *SQLiteChannelStore) GetChannel(ctx context.Context, id int64) (*Channel
 	var ch Channel
 	var isPrivate, isSystem int
 	err := s.db.QueryRowContext(ctx,
-		`SELECT id, name, description, topic, type, is_private, is_system, created_by, created_at, updated_at
+		`SELECT id, name, description, topic, type, is_private, is_system, created_by, workflow_enabled, auto_approve, stalemate_remind_after, stalemate_escalate_after, created_at, updated_at
 		 FROM channels WHERE id = ?`, id,
-	).Scan(&ch.ID, &ch.Name, &ch.Description, &ch.Topic, &ch.Type, &isPrivate, &isSystem, &ch.CreatedBy, &ch.CreatedAt, &ch.UpdatedAt)
+	).Scan(&ch.ID, &ch.Name, &ch.Description, &ch.Topic, &ch.Type, &isPrivate, &isSystem, &ch.CreatedBy, &ch.WorkflowEnabled, &ch.AutoApprove, &ch.StalemateRemindAfter, &ch.StalemateEscalateAfter, &ch.CreatedAt, &ch.UpdatedAt)
 	if err != nil {
 		if err == sql.ErrNoRows {
 			return nil, ErrChannelNotFound
@@ -102,9 +102,9 @@ func (s *SQLiteChannelStore) GetChannelByName(ctx context.Context, name string)
 	var ch Channel
 	var isPrivate, isSystem int
 	err := s.db.QueryRowContext(ctx,
-		`SELECT id, name, description, topic, type, is_private, is_system, created_by, created_at, updated_at
+		`SELECT id, name, description, topic, type, is_private, is_system, created_by, workflow_enabled, auto_approve, stalemate_remind_after, stalemate_escalate_after, created_at, updated_at
 		 FROM channels WHERE LOWER(name) = LOWER(?)`, name,
-	).Scan(&ch.ID, &ch.Name, &ch.Description, &ch.Topic, &ch.Type, &isPrivate, &isSystem, &ch.CreatedBy, &ch.CreatedAt, &ch.UpdatedAt)
+	).Scan(&ch.ID, &ch.Name, &ch.Description, &ch.Topic, &ch.Type, &isPrivate, &isSystem, &ch.CreatedBy, &ch.WorkflowEnabled, &ch.AutoApprove, &ch.StalemateRemindAfter, &ch.StalemateEscalateAfter, &ch.CreatedAt, &ch.UpdatedAt)
 	if err != nil {
 		if err == sql.ErrNoRows {
 			return nil, ErrChannelNotFound
@@ -120,7 +120,7 @@ func (s *SQLiteChannelStore) GetChannelByName(ctx context.Context, name string)
 // is a member or has a pending invite.
 func (s *SQLiteChannelStore) ListChannels(ctx context.Context, agentName string) ([]*Channel, error) {
 	rows, err := s.db.QueryContext(ctx,
-		`SELECT DISTINCT c.id, c.name, c.description, c.topic, c.type, c.is_private, c.is_system, c.created_by, c.created_at, c.updated_at
+		`SELECT DISTINCT c.id, c.name, c.description, c.topic, c.type, c.is_private, c.is_system, c.created_by, c.workflow_enabled, c.auto_approve, c.stalemate_remind_after, c.stalemate_escalate_after, c.created_at, c.updated_at
 		 FROM channels c
 		 WHERE c.is_private = 0
 		    OR EXISTS (SELECT 1 FROM channel_members cm WHERE cm.channel_id = c.id AND cm.agent_name = ?)
@@ -137,7 +137,7 @@ func (s *SQLiteChannelStore) ListChannels(ctx context.Context, agentName string)
 	for rows.Next() {
 		var ch Channel
 		var isPrivate, isSystem int
-		if err := rows.Scan(&ch.ID, &ch.Name, &ch.Description, &ch.Topic, &ch.Type, &isPrivate, &isSystem, &ch.CreatedBy, &ch.CreatedAt, &ch.UpdatedAt); err != nil {
+		if err := rows.Scan(&ch.ID, &ch.Name, &ch.Description, &ch.Topic, &ch.Type, &isPrivate, &isSystem, &ch.CreatedBy, &ch.WorkflowEnabled, &ch.AutoApprove, &ch.StalemateRemindAfter, &ch.StalemateEscalateAfter, &ch.CreatedAt, &ch.UpdatedAt); err != nil {
 			return nil, fmt.Errorf("scan channel: %w", err)
 		}
 		ch.IsPrivate = isPrivate != 0
@@ -415,6 +415,23 @@ func (s *SQLiteChannelStore) GetChannelSummaries(ctx context.Context, agentName
 	return summaries, rows.Err()
 }
 
+// UpdateChannelSettings updates the workflow-related settings for a channel.
+func (s *SQLiteChannelStore) UpdateChannelSettings(ctx context.Context, id int64, settings ChannelSettings) error {
+	result, err := s.db.ExecContext(ctx,
+		`UPDATE channels SET workflow_enabled = ?, auto_approve = ?, stalemate_remind_after = ?, stalemate_escalate_after = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?`,
+		settings.WorkflowEnabled, settings.AutoApprove, settings.StalemateRemindAfter, settings.StalemateEscalateAfter, id,
+	)
+	if err != nil {
+		return fmt.Errorf("update channel settings: %w", err)
+	}
+	rowsAffected, _ := result.RowsAffected()
+	if rowsAffected == 0 {
+		return ErrChannelNotFound
+	}
+	s.logger.Info("channel settings updated", "id", id)
+	return nil
+}
+
 // isUniqueConstraintError checks if an error is a SQLite unique constraint violation.
 func isUniqueConstraintError(err error) bool {
 	return strings.Contains(err.Error(), "UNIQUE constraint failed")

internal/channels/types.go

@@ -25,16 +25,20 @@ const (
 
 // Channel represents a named group communication space.
 type Channel struct {
-	ID          int64     `json:"id"`
-	Name        string    `json:"name"`
-	Description string    `json:"description"`
-	Topic       string    `json:"topic"`
-	Type        string    `json:"type"`
-	IsPrivate   bool      `json:"is_private"`
-	IsSystem    bool      `json:"is_system"`
-	CreatedBy   string    `json:"created_by"`
-	CreatedAt   time.Time `json:"created_at"`
-	UpdatedAt   time.Time `json:"updated_at"`
+	ID                     int64     `json:"id"`
+	Name                   string    `json:"name"`
+	Description            string    `json:"description"`
+	Topic                  string    `json:"topic"`
+	Type                   string    `json:"type"`
+	IsPrivate              bool      `json:"is_private"`
+	IsSystem               bool      `json:"is_system"`
+	CreatedBy              string    `json:"created_by"`
+	WorkflowEnabled        bool      `json:"workflow_enabled"`
+	AutoApprove            bool      `json:"auto_approve"`
+	StalemateRemindAfter   string    `json:"stalemate_remind_after"`
+	StalemateEscalateAfter string    `json:"stalemate_escalate_after"`
+	CreatedAt              time.Time `json:"created_at"`
+	UpdatedAt              time.Time `json:"updated_at"`
 }
 
 // ChannelWithCount embeds Channel and adds a member count.
@@ -107,6 +111,14 @@ type JoinChannelRequest struct {
 	AgentName string `json:"agent_name"`
 }
 
+// ChannelSettings holds workflow-related settings for a channel.
+type ChannelSettings struct {
+	WorkflowEnabled        bool   `json:"workflow_enabled"`
+	AutoApprove            bool   `json:"auto_approve"`
+	StalemateRemindAfter   string `json:"stalemate_remind_after"`
+	StalemateEscalateAfter string `json:"stalemate_escalate_after"`
+}
+
 // InviteRequest is the input for inviting an agent to a channel.
 type InviteRequest struct {
 	ChannelID    int64  `json:"channel_id"`

internal/mcp/bridge.go

@@ -7,12 +7,14 @@ import (
 	"encoding/json"
 	"fmt"
 	"io"
+	"strings"
 	"time"
 
 	"github.com/synapbus/synapbus/internal/agents"
 	"github.com/synapbus/synapbus/internal/attachments"
 	"github.com/synapbus/synapbus/internal/channels"
 	"github.com/synapbus/synapbus/internal/messaging"
+	"github.com/synapbus/synapbus/internal/reactions"
 	"github.com/synapbus/synapbus/internal/search"
 )
 
@@ -25,6 +27,7 @@ type ServiceBridge struct {
 	swarmService      *channels.SwarmService
 	attachmentService *attachments.Service
 	searchService     *search.Service
+	reactionService   *reactions.Service
 	agentName         string
 }
 
@@ -36,6 +39,7 @@ func NewServiceBridge(
 	swarmService *channels.SwarmService,
 	attachmentService *attachments.Service,
 	searchService *search.Service,
+	reactionService *reactions.Service,
 	agentName string,
 ) *ServiceBridge {
 	return &ServiceBridge{
@@ -45,6 +49,7 @@ func NewServiceBridge(
 		swarmService:      swarmService,
 		attachmentService: attachmentService,
 		searchService:     searchService,
+		reactionService:   reactionService,
 		agentName:         agentName,
 	}
 }
@@ -102,6 +107,16 @@ func (b *ServiceBridge) Call(ctx context.Context, actionName string, args map[st
 	case "download_attachment":
 		return b.callDownloadAttachment(ctx, args)
 
+	// --- Reactions ---
+	case "react":
+		return b.callReact(ctx, args)
+	case "unreact":
+		return b.callUnreact(ctx, args)
+	case "get_reactions":
+		return b.callGetReactions(ctx, args)
+	case "list_by_state":
+		return b.callListByState(ctx, args)
+
 	// --- DM send (also accessible via bridge for execute tool) ---
 	case "send_message":
 		return b.callSendMessage(ctx, args)
@@ -132,12 +147,34 @@ func (b *ServiceBridge) callSendMessage(ctx context.Context, args map[string]any
 		replyTo = &v
 	}
 
+	var attachmentHashes []string
+	if attVal, ok := args["attachments"]; ok {
+		switch v := attVal.(type) {
+		case string:
+			for _, h := range strings.Split(v, ",") {
+				h = strings.TrimSpace(h)
+				if h != "" {
+					attachmentHashes = append(attachmentHashes, h)
+				}
+			}
+		case []any:
+			for _, item := range v {
+				if s, ok := item.(string); ok && s != "" {
+					attachmentHashes = append(attachmentHashes, s)
+				}
+			}
+		case []string:
+			attachmentHashes = v
+		}
+	}
+
 	opts := messaging.SendOptions{
-		Subject:   getString(args, "subject", ""),
-		Priority:  getInt(args, "priority", 5),
-		Metadata:  getString(args, "metadata", ""),
-		ChannelID: channelID,
-		ReplyTo:   replyTo,
+		Subject:     getString(args, "subject", ""),
+		Priority:    getInt(args, "priority", 5),
+		Metadata:    getString(args, "metadata", ""),
+		ChannelID:   channelID,
+		ReplyTo:     replyTo,
+		Attachments: attachmentHashes,
 	}
 
 	msg, err := b.msgService.SendMessage(ctx, b.agentName, to, body, opts)
@@ -554,7 +591,28 @@ func (b *ServiceBridge) callSendChannelMessage(ctx context.Context, args map[str
 		}
 	}
 
-	messages, err := b.channelService.BroadcastMessage(ctx, channelID, b.agentName, body, priority, metadata, replyTo)
+	var attachmentHashes []string
+	if attVal, ok := args["attachments"]; ok {
+		switch v := attVal.(type) {
+		case string:
+			for _, h := range strings.Split(v, ",") {
+				h = strings.TrimSpace(h)
+				if h != "" {
+					attachmentHashes = append(attachmentHashes, h)
+				}
+			}
+		case []any:
+			for _, item := range v {
+				if s, ok := item.(string); ok && s != "" {
+					attachmentHashes = append(attachmentHashes, s)
+				}
+			}
+		case []string:
+			attachmentHashes = v
+		}
+	}
+
+	messages, err := b.channelService.BroadcastMessage(ctx, channelID, b.agentName, body, priority, metadata, replyTo, attachmentHashes)
 	if err != nil {
 		return nil, err
 	}
@@ -876,6 +934,136 @@ func (b *ServiceBridge) callDownloadAttachment(ctx context.Context, args map[str
 	}, nil
 }
 
+// --- Reaction implementations ---
+
+func (b *ServiceBridge) callReact(ctx context.Context, args map[string]any) (any, error) {
+	if b.reactionService == nil {
+		return nil, fmt.Errorf("reaction service not available")
+	}
+
+	messageID := getInt(args, "message_id", 0)
+	if messageID == 0 {
+		return nil, fmt.Errorf("'message_id' parameter is required")
+	}
+
+	reaction := getString(args, "reaction", "")
+	if reaction == "" {
+		return nil, fmt.Errorf("'reaction' parameter is required")
+	}
+
+	var metadata json.RawMessage
+	if metaStr := getString(args, "metadata", ""); metaStr != "" {
+		if !json.Valid([]byte(metaStr)) {
+			return nil, fmt.Errorf("metadata must be valid JSON")
+		}
+		metadata = json.RawMessage(metaStr)
+	}
+
+	result, err := b.reactionService.Toggle(ctx, int64(messageID), b.agentName, reaction, metadata)
+	if err != nil {
+		return nil, err
+	}
+
+	resp := map[string]any{
+		"action":     result.Action,
+		"message_id": messageID,
+		"reaction":   reaction,
+	}
+	if result.Reaction != nil {
+		resp["id"] = result.Reaction.ID
+		resp["created_at"] = result.Reaction.CreatedAt
+	}
+	return resp, nil
+}
+
+func (b *ServiceBridge) callUnreact(ctx context.Context, args map[string]any) (any, error) {
+	if b.reactionService == nil {
+		return nil, fmt.Errorf("reaction service not available")
+	}
+
+	messageID := getInt(args, "message_id", 0)
+	if messageID == 0 {
+		return nil, fmt.Errorf("'message_id' parameter is required")
+	}
+
+	reaction := getString(args, "reaction", "")
+	if reaction == "" {
+		return nil, fmt.Errorf("'reaction' parameter is required")
+	}
+
+	if err := b.reactionService.Remove(ctx, int64(messageID), b.agentName, reaction); err != nil {
+		return nil, err
+	}
+
+	return map[string]any{
+		"message_id": messageID,
+		"reaction":   reaction,
+		"status":     "removed",
+	}, nil
+}
+
+func (b *ServiceBridge) callGetReactions(ctx context.Context, args map[string]any) (any, error) {
+	if b.reactionService == nil {
+		return nil, fmt.Errorf("reaction service not available")
+	}
+
+	messageID := getInt(args, "message_id", 0)
+	if messageID == 0 {
+		return nil, fmt.Errorf("'message_id' parameter is required")
+	}
+
+	rxns, state, err := b.reactionService.GetReactions(ctx, int64(messageID))
+	if err != nil {
+		return nil, err
+	}
+
+	return map[string]any{
+		"reactions":      rxns,
+		"workflow_state": state,
+		"count":          len(rxns),
+	}, nil
+}
+
+func (b *ServiceBridge) callListByState(ctx context.Context, args map[string]any) (any, error) {
+	if b.reactionService == nil {
+		return nil, fmt.Errorf("reaction service not available")
+	}
+	if b.channelService == nil {
+		return nil, fmt.Errorf("channel service not available")
+	}
+
+	channelName := getString(args, "channel", "")
+	if channelName == "" {
+		return nil, fmt.Errorf("'channel' parameter is required")
+	}
+
+	state := getString(args, "state", "")
+	if state == "" {
+		return nil, fmt.Errorf("'state' parameter is required")
+	}
+
+	ch, err := b.channelService.GetChannelByName(ctx, channelName)
+	if err != nil {
+		return nil, err
+	}
+
+	messageIDs, err := b.reactionService.ListByState(ctx, ch.ID, state)
+	if err != nil {
+		return nil, err
+	}
+
+	if messageIDs == nil {
+		messageIDs = []int64{}
+	}
+
+	return map[string]any{
+		"message_ids": messageIDs,
+		"count":       len(messageIDs),
+		"channel":     channelName,
+		"state":       state,
+	}, nil
+}
+
 // --- Helpers ---
 
 // resolveChannelID resolves a channel ID from either channel_id or channel_name in args.

internal/mcp/bridge_test.go

@@ -43,6 +43,7 @@ func newTestBridge(t *testing.T) (*ServiceBridge, *messaging.MessagingService, *
 		swarmService,
 		nil, // attachmentService
 		nil, // searchService
+		nil, // reactionService
 		"agent-a",
 	)
 	return bridge, msgService, agentService, channelService
@@ -185,7 +186,7 @@ func TestBridge_JoinChannel(t *testing.T) {
 		bridge.agentService,
 		bridge.channelService,
 		bridge.swarmService,
-		nil, nil,
+		nil, nil, nil,
 		"agent-b",
 	)
 

internal/mcp/channel_tools_test.go

@@ -50,6 +50,7 @@ func newTestHybridWithChannels(t *testing.T) (*HybridToolRegistrar, *channels.Se
 		nil, // swarmService
 		nil, // attachmentService
 		nil, // searchService
+		nil, // reactionService
 		jsPool,
 		actionRegistry,
 		actionIndex,

internal/mcp/server.go

@@ -18,6 +18,7 @@ import (
 	"github.com/synapbus/synapbus/internal/console"
 	"github.com/synapbus/synapbus/internal/jsruntime"
 	"github.com/synapbus/synapbus/internal/messaging"
+	"github.com/synapbus/synapbus/internal/reactions"
 	"github.com/synapbus/synapbus/internal/search"
 	"github.com/synapbus/synapbus/internal/trace"
 )
@@ -40,6 +41,7 @@ func NewMCPServer(
 	swarmService *channels.SwarmService,
 	attachmentService *attachments.Service,
 	searchService *search.Service,
+	reactionService *reactions.Service,
 	consolePrinter *console.Printer,
 	jsPool *jsruntime.Pool,
 	actionRegistry *actions.Registry,
@@ -153,6 +155,7 @@ func NewMCPServer(
 		swarmService,
 		attachmentService,
 		searchService,
+		reactionService,
 		jsPool,
 		actionRegistry,
 		actionIndex,

internal/mcp/server_test.go

@@ -38,7 +38,7 @@ func newTestMCPServer(t *testing.T, con *console.Printer) (*MCPServer, *messagin
 	actionRegistry := actions.NewRegistry()
 	actionIndex := actions.NewIndex(actionRegistry.List())
 
-	srv := NewMCPServer(msgService, agentService, nil, nil, nil, nil, con, jsPool, actionRegistry, actionIndex, db)
+	srv := NewMCPServer(msgService, agentService, nil, nil, nil, nil, nil, con, jsPool, actionRegistry, actionIndex, db)
 	return srv, msgService, agentService
 }
 
@@ -133,7 +133,7 @@ func TestMCPToolCall_WithValidAPIKey(t *testing.T) {
 	actionIndex := actions.NewIndex(actionRegistry.List())
 
 	// Create MCP server
-	srv := NewMCPServer(msgService, agentService, nil, nil, nil, nil, nil, jsPool, actionRegistry, actionIndex, db)
+	srv := NewMCPServer(msgService, agentService, nil, nil, nil, nil, nil, nil, jsPool, actionRegistry, actionIndex, db)
 
 	// Mount with auth middleware, just like main.go does
 	mux := http.NewServeMux()
@@ -188,7 +188,7 @@ func TestMCPToolCall_InvalidAPIKeyReturns401(t *testing.T) {
 	actionRegistry := actions.NewRegistry()
 	actionIndex := actions.NewIndex(actionRegistry.List())
 
-	srv := NewMCPServer(msgService, agentService, nil, nil, nil, nil, nil, jsPool, actionRegistry, actionIndex, db)
+	srv := NewMCPServer(msgService, agentService, nil, nil, nil, nil, nil, nil, jsPool, actionRegistry, actionIndex, db)
 
 	mux := http.NewServeMux()
 	handler := agents.OptionalAuthMiddlewareWithAPIKeys(agentService, apiKeyService)(srv.Handler())

internal/mcp/tools_hybrid.go

@@ -18,6 +18,7 @@ import (
 	"github.com/synapbus/synapbus/internal/channels"
 	"github.com/synapbus/synapbus/internal/jsruntime"
 	"github.com/synapbus/synapbus/internal/messaging"
+	"github.com/synapbus/synapbus/internal/reactions"
 	"github.com/synapbus/synapbus/internal/search"
 )
 
@@ -29,6 +30,7 @@ type HybridToolRegistrar struct {
 	swarmService      *channels.SwarmService
 	attachmentService *attachments.Service
 	searchService     *search.Service
+	reactionService   *reactions.Service
 	jsPool            *jsruntime.Pool
 	actionRegistry    *actions.Registry
 	actionIndex       *actions.Index
@@ -44,6 +46,7 @@ func NewHybridToolRegistrar(
 	swarmService *channels.SwarmService,
 	attachmentService *attachments.Service,
 	searchService *search.Service,
+	reactionService *reactions.Service,
 	jsPool *jsruntime.Pool,
 	actionRegistry *actions.Registry,
 	actionIndex *actions.Index,
@@ -56,6 +59,7 @@ func NewHybridToolRegistrar(
 		swarmService:      swarmService,
 		attachmentService: attachmentService,
 		searchService:     searchService,
+		reactionService:   reactionService,
 		jsPool:            jsPool,
 		actionRegistry:    actionRegistry,
 		actionIndex:       actionIndex,
@@ -84,14 +88,15 @@ func (h *HybridToolRegistrar) myStatusTool() mcplib.Tool {
 
 func (h *HybridToolRegistrar) sendMessageTool() mcplib.Tool {
 	return mcplib.NewTool("send_message",
-		mcplib.WithDescription("Send a message to another agent (DM) or to a channel. Specify exactly one of 'to' (agent name for DM) or 'channel' (channel name or numeric ID)."),
+		mcplib.WithDescription("Send a message to another agent (DM) or to a channel. Supports attachments — upload files first via the execute tool, then pass the returned hashes here. Specify exactly one of 'to' (agent name for DM) or 'channel' (channel name or numeric ID)."),
 		mcplib.WithString("to", mcplib.Description("Recipient agent name for direct messages")),
 		mcplib.WithString("channel", mcplib.Description("Channel name or numeric ID for channel messages")),
 		mcplib.WithString("body", mcplib.Description("Message body text"), mcplib.Required()),
 		mcplib.WithString("subject", mcplib.Description("Conversation subject (optional)")),
 		mcplib.WithNumber("priority", mcplib.Description("Message priority (1-10, default 5)"), mcplib.Min(1), mcplib.Max(10)),
 		mcplib.WithString("metadata", mcplib.Description("JSON metadata object (optional)")),
-		mcplib.WithNumber("reply_to", mcplib.Description("ID of the message to reply to (optional, for threading)")),
+		mcplib.WithNumber("reply_to", mcplib.Description("ID of the parent message to reply to. Creates a threaded reply. Always use reply_to when responding to a message that is itself a thread reply, to keep conversations organized.")),
+		mcplib.WithString("attachments", mcplib.Description("Comma-separated list of attachment hashes to link to this message. Upload attachments first using the upload_attachment action via the execute tool.")),
 	)
 }
 
@@ -323,6 +328,16 @@ func (h *HybridToolRegistrar) handleSendMessage(ctx context.Context, req mcplib.
 		replyTo = &v
 	}
 
+	var attachmentHashes []string
+	if attStr := req.GetString("attachments", ""); attStr != "" {
+		for _, h := range strings.Split(attStr, ",") {
+			h = strings.TrimSpace(h)
+			if h != "" {
+				attachmentHashes = append(attachmentHashes, h)
+			}
+		}
+	}
+
 	// Channel message path.
 	if channel != "" {
 		if h.channelService == nil {
@@ -335,7 +350,7 @@ func (h *HybridToolRegistrar) handleSendMessage(ctx context.Context, req mcplib.
 			return mcplib.NewToolResultError(fmt.Sprintf("send_message to channel failed: %s", err)), nil
 		}
 
-		messages, err := h.channelService.BroadcastMessage(ctx, channelID, agentName, body, priority, metadataStr, replyTo)
+		messages, err := h.channelService.BroadcastMessage(ctx, channelID, agentName, body, priority, metadataStr, replyTo, attachmentHashes)
 		if err != nil {
 			return mcplib.NewToolResultError(fmt.Sprintf("send_message to channel failed: %s", err)), nil
 		}
@@ -345,19 +360,30 @@ func (h *HybridToolRegistrar) handleSendMessage(ctx context.Context, req mcplib.
 			messageID = messages[0].ID
 		}
 
-		return resultJSON(map[string]any{
+		result := map[string]any{
 			"channel_id": channelID,
 			"message_id": messageID,
 			"status":     "sent",
-		})
+		}
+
+		// Enrich channel messages with attachment info.
+		if len(messages) > 0 && len(attachmentHashes) > 0 {
+			h.msgService.EnrichMessages(ctx, messages)
+			if len(messages[0].Attachments) > 0 {
+				result["attachments"] = messages[0].Attachments
+			}
+		}
+
+		return resultJSON(result)
 	}
 
 	// DM path.
 	opts := messaging.SendOptions{
-		Subject:  subject,
-		Priority: priority,
-		Metadata: metadataStr,
-		ReplyTo:  replyTo,
+		Subject:     subject,
+		Priority:    priority,
+		Metadata:    metadataStr,
+		ReplyTo:     replyTo,
+		Attachments: attachmentHashes,
 	}
 
 	msg, err := h.msgService.SendMessage(ctx, agentName, to, body, opts)
@@ -365,11 +391,21 @@ func (h *HybridToolRegistrar) handleSendMessage(ctx context.Context, req mcplib.
 		return mcplib.NewToolResultError(fmt.Sprintf("send_message failed: %s", err)), nil
 	}
 
-	return resultJSON(map[string]any{
+	result := map[string]any{
 		"message_id":      msg.ID,
 		"conversation_id": msg.ConversationID,
 		"status":          msg.Status,
-	})
+	}
+
+	// Enrich message with attachment info.
+	if len(attachmentHashes) > 0 {
+		h.msgService.EnrichMessages(ctx, []*messaging.Message{msg})
+		if len(msg.Attachments) > 0 {
+			result["attachments"] = msg.Attachments
+		}
+	}
+
+	return resultJSON(result)
 }
 
 func (h *HybridToolRegistrar) handleSearch(ctx context.Context, req mcplib.CallToolRequest) (*mcplib.CallToolResult, error) {
@@ -443,6 +479,7 @@ func (h *HybridToolRegistrar) handleExecute(ctx context.Context, req mcplib.Call
 		h.swarmService,
 		h.attachmentService,
 		h.searchService,
+		h.reactionService,
 		agentName,
 	)
 

internal/mcp/tools_test.go

@@ -68,6 +68,7 @@ func newTestHybridRegistrar(t *testing.T) (*HybridToolRegistrar, *messaging.Mess
 		nil, // swarmService
 		nil, // attachmentService
 		nil, // searchService
+		nil, // reactionService
 		jsPool,
 		actionRegistry,
 		actionIndex,

internal/messaging/options.go

@@ -2,12 +2,13 @@ package messaging
 
 // SendOptions configures message sending behavior.
 type SendOptions struct {
-	Subject        string `json:"subject,omitempty"`
-	Priority       int    `json:"priority,omitempty"`
-	Metadata       string `json:"metadata,omitempty"`
-	ChannelID      *int64 `json:"channel_id,omitempty"`
-	ConversationID *int64 `json:"conversation_id,omitempty"`
-	ReplyTo        *int64 `json:"reply_to,omitempty"`
+	Subject        string   `json:"subject,omitempty"`
+	Priority       int      `json:"priority,omitempty"`
+	Metadata       string   `json:"metadata,omitempty"`
+	ChannelID      *int64   `json:"channel_id,omitempty"`
+	ConversationID *int64   `json:"conversation_id,omitempty"`
+	ReplyTo        *int64   `json:"reply_to,omitempty"`
+	Attachments    []string `json:"attachments,omitempty"` // attachment hashes to link
 }
 
 // ReadOptions configures inbox reading behavior.

internal/messaging/service.go

@@ -24,12 +24,27 @@ type MessageListener interface {
 	OnMessageSent(ctx context.Context, msg *Message)
 }
 
+// AttachmentLinker links attachment hashes to message IDs. This avoids
+// importing the attachments package directly. Set via SetAttachmentLinker.
+type AttachmentLinker interface {
+	AttachToMessage(ctx context.Context, hash string, messageID int64) error
+	GetByMessageID(ctx context.Context, messageID int64) ([]AttachmentInfo, error)
+}
+
+// ReactionEnricher loads reactions for messages. This avoids importing the
+// reactions package directly. Set via SetReactionEnricher.
+type ReactionEnricher interface {
+	GetByMessageIDs(ctx context.Context, messageIDs []int64) (map[int64][]ReactionInfo, error)
+}
+
 // MessagingService provides business logic for messaging operations.
 type MessagingService struct {
 	store      MessageStore
 	tracer     *trace.Tracer
 	dispatcher dispatcher.EventDispatcher
 	embeddings EmbeddingNotifier
+	attLinker  AttachmentLinker
+	rxEnricher ReactionEnricher
 	listeners  []MessageListener
 	logger     *slog.Logger
 }
@@ -53,6 +68,16 @@ func (s *MessagingService) SetEmbeddingNotifier(n EmbeddingNotifier) {
 	s.embeddings = n
 }
 
+// SetAttachmentLinker sets the attachment linker for message-attachment binding.
+func (s *MessagingService) SetAttachmentLinker(l AttachmentLinker) {
+	s.attLinker = l
+}
+
+// SetReactionEnricher sets the reaction enricher for message reaction loading.
+func (s *MessagingService) SetReactionEnricher(e ReactionEnricher) {
+	s.rxEnricher = e
+}
+
 // AddMessageListener registers a listener that is notified after message creation.
 func (s *MessagingService) AddMessageListener(l MessageListener) {
 	s.listeners = append(s.listeners, l)
@@ -145,6 +170,19 @@ func (s *MessagingService) SendMessage(ctx context.Context, from, to, body strin
 		return nil, fmt.Errorf("insert message: %w", err)
 	}
 
+	// Link attachments if provided.
+	if s.attLinker != nil && len(opts.Attachments) > 0 {
+		for _, hash := range opts.Attachments {
+			if err := s.attLinker.AttachToMessage(ctx, hash, msg.ID); err != nil {
+				s.logger.Error("failed to link attachment",
+					"hash", hash,
+					"message_id", msg.ID,
+					"error", err,
+				)
+			}
+		}
+	}
+
 	// Enqueue for embedding (async, best-effort)
 	if s.embeddings != nil {
 		s.embeddings.OnMessageCreated(ctx, msg.ID, msg.Body)
@@ -523,6 +561,76 @@ func (s *MessagingService) GetConversationIDsForDM(ctx context.Context, agentNam
 	return s.store.GetConversationIDsForDM(ctx, agentNames, peerAgent, lastMessageID)
 }
 
+// EnrichMessages populates ReplyCount and Attachments on a slice of messages.
+func (s *MessagingService) EnrichMessages(ctx context.Context, msgs []*Message) {
+	if len(msgs) == 0 {
+		return
+	}
+
+	ids := make([]int64, len(msgs))
+	for i, m := range msgs {
+		ids[i] = m.ID
+	}
+
+	// Batch-load reply counts.
+	counts, err := s.store.GetReplyCounts(ctx, ids)
+	if err != nil {
+		s.logger.Error("failed to load reply counts", "error", err)
+	} else {
+		for _, m := range msgs {
+			if c, ok := counts[m.ID]; ok {
+				m.ReplyCount = c
+			}
+		}
+	}
+
+	// Batch-load attachments.
+	if s.attLinker != nil {
+		for _, m := range msgs {
+			atts, err := s.attLinker.GetByMessageID(ctx, m.ID)
+			if err != nil {
+				s.logger.Error("failed to load attachments", "message_id", m.ID, "error", err)
+				continue
+			}
+			if len(atts) > 0 {
+				m.Attachments = atts
+			}
+		}
+	}
+
+	// Batch-load reactions and derive workflow state.
+	if s.rxEnricher != nil {
+		rxMap, err := s.rxEnricher.GetByMessageIDs(ctx, ids)
+		if err != nil {
+			s.logger.Error("failed to load reactions", "error", err)
+		} else {
+			for _, m := range msgs {
+				if rxs, ok := rxMap[m.ID]; ok && len(rxs) > 0 {
+					m.Reactions = rxs
+					// Derive workflow state from reactions
+					highestPriority := 0
+					priorities := map[string]int{
+						"approve": 2, "in_progress": 3, "reject": 4, "done": 5, "published": 6,
+					}
+					states := map[string]string{
+						"approve": "approved", "in_progress": "in_progress", "reject": "rejected", "done": "done", "published": "published",
+					}
+					for _, rx := range rxs {
+						if p, ok := priorities[rx.Reaction]; ok && p > highestPriority {
+							highestPriority = p
+							m.WorkflowState = states[rx.Reaction]
+						}
+					}
+				}
+				// Default to "proposed" for channel messages with no reactions
+				if m.WorkflowState == "" && m.ChannelID != nil {
+					m.WorkflowState = "proposed"
+				}
+			}
+		}
+	}
+}
+
 // GetConversation returns a conversation and its messages.
 func (s *MessagingService) GetConversation(ctx context.Context, id int64) (*Conversation, []*Message, error) {
 	conv, err := s.store.GetConversation(ctx, id)

internal/messaging/service_test.go

@@ -728,5 +728,96 @@ func TestMessagingService_ReadInbox_DateFiltering(t *testing.T) {
 	})
 }
 
+// mockAttachmentLinker is a test double for the AttachmentLinker interface.
+type mockAttachmentLinker struct {
+	attachments map[int64][]AttachmentInfo
+}
+
+func (m *mockAttachmentLinker) AttachToMessage(_ context.Context, _ string, _ int64) error {
+	return nil
+}
+
+func (m *mockAttachmentLinker) GetByMessageID(_ context.Context, messageID int64) ([]AttachmentInfo, error) {
+	return m.attachments[messageID], nil
+}
+
+func TestMessagingService_EnrichMessages(t *testing.T) {
+	svc, _ := newTestService(t)
+	ctx := context.Background()
+
+	// Send a parent message and replies to it.
+	parent, err := svc.SendMessage(ctx, "sender", "receiver", "parent message", SendOptions{Subject: "Enrich Test"})
+	if err != nil {
+		t.Fatalf("SendMessage (parent): %v", err)
+	}
+
+	replyTo := parent.ID
+	for i := 0; i < 3; i++ {
+		_, err := svc.SendMessage(ctx, "receiver", "sender", "reply", SendOptions{
+			Subject: "Enrich Test",
+			ReplyTo: &replyTo,
+		})
+		if err != nil {
+			t.Fatalf("SendMessage (reply %d): %v", i, err)
+		}
+	}
+
+	// Send a message with no replies.
+	noReplies, err := svc.SendMessage(ctx, "sender", "receiver", "standalone", SendOptions{Subject: "Enrich Standalone"})
+	if err != nil {
+		t.Fatalf("SendMessage (standalone): %v", err)
+	}
+
+	t.Run("reply counts populated", func(t *testing.T) {
+		msgs := []*Message{parent, noReplies}
+		svc.EnrichMessages(ctx, msgs)
+
+		if parent.ReplyCount != 3 {
+			t.Errorf("parent ReplyCount = %d, want 3", parent.ReplyCount)
+		}
+		if noReplies.ReplyCount != 0 {
+			t.Errorf("noReplies ReplyCount = %d, want 0", noReplies.ReplyCount)
+		}
+	})
+
+	t.Run("attachments populated when linker set", func(t *testing.T) {
+		linker := &mockAttachmentLinker{
+			attachments: map[int64][]AttachmentInfo{
+				parent.ID: {
+					{Hash: "abc123", OriginalFilename: "photo.png", Size: 1024, MIMEType: "image/png", IsImage: true},
+				},
+			},
+		}
+		svc.SetAttachmentLinker(linker)
+
+		// Reset enrichment state.
+		parent.ReplyCount = 0
+		parent.Attachments = nil
+		noReplies.ReplyCount = 0
+		noReplies.Attachments = nil
+
+		msgs := []*Message{parent, noReplies}
+		svc.EnrichMessages(ctx, msgs)
+
+		if parent.ReplyCount != 3 {
+			t.Errorf("parent ReplyCount = %d, want 3", parent.ReplyCount)
+		}
+		if len(parent.Attachments) != 1 {
+			t.Fatalf("parent Attachments count = %d, want 1", len(parent.Attachments))
+		}
+		if parent.Attachments[0].Hash != "abc123" {
+			t.Errorf("attachment hash = %s, want abc123", parent.Attachments[0].Hash)
+		}
+		if noReplies.Attachments != nil {
+			t.Errorf("noReplies Attachments should be nil, got %v", noReplies.Attachments)
+		}
+	})
+
+	t.Run("empty slice is a no-op", func(t *testing.T) {
+		svc.EnrichMessages(ctx, []*Message{})
+		// Should not panic or error.
+	})
+}
+
 // suppress unused import warning for storage package
 var _ = storage.RunMigrations

internal/messaging/store.go

@@ -39,6 +39,7 @@ type MessageStore interface {
 	GetLastReadForDM(ctx context.Context, agentNames []string, peerAgent string) (int64, error)
 	GetConversationIDsForChannel(ctx context.Context, channelID int64, lastMessageID int64) ([]int64, error)
 	GetConversationIDsForDM(ctx context.Context, agentNames []string, peerAgent string, lastMessageID int64) ([]int64, error)
+	GetReplyCounts(ctx context.Context, messageIDs []int64) (map[int64]int, error)
 }
 
 // SQLiteMessageStore implements MessageStore using SQLite.
@@ -1007,6 +1008,44 @@ func (s *SQLiteMessageStore) GetConversationIDsForDM(ctx context.Context, agentN
 	return ids, rows.Err()
 }
 
+// GetReplyCounts returns a map of message ID → reply count for the given IDs.
+func (s *SQLiteMessageStore) GetReplyCounts(ctx context.Context, messageIDs []int64) (map[int64]int, error) {
+	if len(messageIDs) == 0 {
+		return map[int64]int{}, nil
+	}
+
+	placeholders := make([]string, len(messageIDs))
+	args := make([]any, len(messageIDs))
+	for i, id := range messageIDs {
+		placeholders[i] = "?"
+		args[i] = id
+	}
+
+	query := fmt.Sprintf(
+		`SELECT reply_to, COUNT(*) FROM messages
+		 WHERE reply_to IN (%s)
+		 GROUP BY reply_to`,
+		strings.Join(placeholders, ","),
+	)
+
+	rows, err := s.db.QueryContext(ctx, query, args...)
+	if err != nil {
+		return nil, fmt.Errorf("get reply counts: %w", err)
+	}
+	defer rows.Close()
+
+	counts := make(map[int64]int)
+	for rows.Next() {
+		var replyTo int64
+		var count int
+		if err := rows.Scan(&replyTo, &count); err != nil {
+			return nil, fmt.Errorf("scan reply count: %w", err)
+		}
+		counts[replyTo] = count
+	}
+	return counts, rows.Err()
+}
+
 // scanMessage scans a single message from sql.Row.
 func scanMessage(row *sql.Row) (*Message, error) {
 	var msg Message

internal/messaging/store_test.go

@@ -1027,6 +1027,132 @@ func TestSQLiteMessageStore_GetChannelMessages_Offset(t *testing.T) {
 	})
 }
 
+func TestSQLiteMessageStore_GetReplyCounts(t *testing.T) {
+	db := newTestDB(t)
+	store := NewSQLiteMessageStore(db)
+	ctx := context.Background()
+
+	seedAgent(t, db, "sender")
+	seedAgent(t, db, "replier")
+
+	conv := &Conversation{Subject: "reply counts", CreatedBy: "sender"}
+	if err := store.InsertConversation(ctx, conv); err != nil {
+		t.Fatalf("InsertConversation: %v", err)
+	}
+
+	// Insert parent message
+	parent := &Message{
+		ConversationID: conv.ID,
+		FromAgent:      "sender",
+		ToAgent:        "replier",
+		Body:           "parent message",
+		Priority:       5,
+		Status:         StatusPending,
+	}
+	if err := store.InsertMessage(ctx, parent); err != nil {
+		t.Fatalf("InsertMessage (parent): %v", err)
+	}
+
+	// Insert 3 replies to parent
+	for i := 0; i < 3; i++ {
+		reply := &Message{
+			ConversationID: conv.ID,
+			FromAgent:      "replier",
+			ToAgent:        "sender",
+			ReplyTo:        &parent.ID,
+			Body:           fmt.Sprintf("reply %d", i),
+			Priority:       5,
+			Status:         StatusPending,
+		}
+		if err := store.InsertMessage(ctx, reply); err != nil {
+			t.Fatalf("InsertMessage (reply %d): %v", i, err)
+		}
+	}
+
+	t.Run("parent with 3 replies", func(t *testing.T) {
+		counts, err := store.GetReplyCounts(ctx, []int64{parent.ID})
+		if err != nil {
+			t.Fatalf("GetReplyCounts: %v", err)
+		}
+		if counts[parent.ID] != 3 {
+			t.Errorf("reply count for parent = %d, want 3", counts[parent.ID])
+		}
+	})
+
+	t.Run("message with no replies returns 0", func(t *testing.T) {
+		// Insert a message with no replies
+		noReply := &Message{
+			ConversationID: conv.ID,
+			FromAgent:      "sender",
+			ToAgent:        "replier",
+			Body:           "no replies here",
+			Priority:       5,
+			Status:         StatusPending,
+		}
+		if err := store.InsertMessage(ctx, noReply); err != nil {
+			t.Fatalf("InsertMessage (noReply): %v", err)
+		}
+
+		counts, err := store.GetReplyCounts(ctx, []int64{noReply.ID})
+		if err != nil {
+			t.Fatalf("GetReplyCounts: %v", err)
+		}
+		if counts[noReply.ID] != 0 {
+			t.Errorf("reply count for noReply = %d, want 0", counts[noReply.ID])
+		}
+	})
+
+	t.Run("multiple parents", func(t *testing.T) {
+		// Insert a second parent with 2 replies
+		parent2 := &Message{
+			ConversationID: conv.ID,
+			FromAgent:      "sender",
+			ToAgent:        "replier",
+			Body:           "second parent",
+			Priority:       5,
+			Status:         StatusPending,
+		}
+		if err := store.InsertMessage(ctx, parent2); err != nil {
+			t.Fatalf("InsertMessage (parent2): %v", err)
+		}
+		for i := 0; i < 2; i++ {
+			reply := &Message{
+				ConversationID: conv.ID,
+				FromAgent:      "replier",
+				ToAgent:        "sender",
+				ReplyTo:        &parent2.ID,
+				Body:           fmt.Sprintf("reply to parent2 %d", i),
+				Priority:       5,
+				Status:         StatusPending,
+			}
+			if err := store.InsertMessage(ctx, reply); err != nil {
+				t.Fatalf("InsertMessage (parent2 reply %d): %v", i, err)
+			}
+		}
+
+		counts, err := store.GetReplyCounts(ctx, []int64{parent.ID, parent2.ID})
+		if err != nil {
+			t.Fatalf("GetReplyCounts: %v", err)
+		}
+		if counts[parent.ID] != 3 {
+			t.Errorf("reply count for parent = %d, want 3", counts[parent.ID])
+		}
+		if counts[parent2.ID] != 2 {
+			t.Errorf("reply count for parent2 = %d, want 2", counts[parent2.ID])
+		}
+	})
+
+	t.Run("empty slice returns empty map", func(t *testing.T) {
+		counts, err := store.GetReplyCounts(ctx, []int64{})
+		if err != nil {
+			t.Fatalf("GetReplyCounts: %v", err)
+		}
+		if len(counts) != 0 {
+			t.Errorf("expected empty map, got %v", counts)
+		}
+	})
+}
+
 func TestSQLiteMessageStore_CombinedFiltersAndPagination(t *testing.T) {
 	db := newTestDB(t)
 	store := NewSQLiteMessageStore(db)

internal/messaging/types.go

@@ -14,6 +14,16 @@ const (
 	StatusFailed     = "failed"
 )
 
+// AttachmentInfo is a lightweight attachment summary included in message responses.
+// It avoids importing the attachments package into the messaging package.
+type AttachmentInfo struct {
+	Hash             string `json:"hash"`
+	OriginalFilename string `json:"original_filename"`
+	Size             int64  `json:"size"`
+	MIMEType         string `json:"mime_type"`
+	IsImage          bool   `json:"is_image"`
+}
+
 // Message represents a single message in the system.
 type Message struct {
 	ID             int64            `json:"id"`
@@ -30,6 +40,18 @@ type Message struct {
 	ClaimedAt      *time.Time       `json:"claimed_at,omitempty"`
 	CreatedAt      time.Time        `json:"created_at"`
 	UpdatedAt      time.Time        `json:"updated_at"`
+	ReplyCount     int              `json:"reply_count"`
+	Attachments    []AttachmentInfo `json:"attachments,omitempty"`
+	WorkflowState  string           `json:"workflow_state,omitempty"`
+	Reactions      []ReactionInfo   `json:"reactions,omitempty"`
+}
+
+// ReactionInfo is a lightweight reaction summary included in message responses.
+type ReactionInfo struct {
+	AgentName string          `json:"agent_name"`
+	Reaction  string          `json:"reaction"`
+	Metadata  json.RawMessage `json:"metadata,omitempty"`
+	CreatedAt time.Time       `json:"created_at"`
 }
 
 // Conversation groups related messages into a thread.

internal/reactions/model.go

@@ -0,0 +1,113 @@
+// Package reactions provides message reaction types, storage, and workflow state logic.
+package reactions
+
+import (
+	"encoding/json"
+	"errors"
+	"time"
+)
+
+// Valid reaction types.
+const (
+	ReactionApprove    = "approve"
+	ReactionReject     = "reject"
+	ReactionInProgress = "in_progress"
+	ReactionDone       = "done"
+	ReactionPublished  = "published"
+)
+
+// Workflow states (derived from reactions).
+const (
+	StateProposed   = "proposed"
+	StateApproved   = "approved"
+	StateInProgress = "in_progress"
+	StateRejected   = "rejected"
+	StateDone       = "done"
+	StatePublished  = "published"
+)
+
+// reactionPriority maps reaction types to their priority for state derivation.
+// Higher number = higher priority = wins for badge display.
+var reactionPriority = map[string]int{
+	ReactionApprove:    2,
+	ReactionInProgress: 3,
+	ReactionReject:     4,
+	ReactionDone:       5,
+	ReactionPublished:  6,
+}
+
+// reactionToState maps reaction types to workflow states.
+var reactionToState = map[string]string{
+	ReactionApprove:    StateApproved,
+	ReactionReject:     StateRejected,
+	ReactionInProgress: StateInProgress,
+	ReactionDone:       StateDone,
+	ReactionPublished:  StatePublished,
+}
+
+// TerminalStates are states that should not trigger stalemate checks.
+var TerminalStates = map[string]bool{
+	StateRejected:  true,
+	StateDone:      true,
+	StatePublished: true,
+}
+
+// MaxReactionsPerMessage is the safety limit.
+const MaxReactionsPerMessage = 100
+
+// Sentinel errors.
+var (
+	ErrInvalidReaction = errors.New("invalid reaction type: must be one of approve, reject, in_progress, done, published")
+	ErrReactionLimit   = errors.New("maximum reactions per message (100) reached")
+	ErrNotMember       = errors.New("only channel members can react to messages")
+)
+
+// Reaction represents a single reaction on a message.
+type Reaction struct {
+	ID        int64           `json:"id"`
+	MessageID int64           `json:"message_id"`
+	AgentName string          `json:"agent_name"`
+	Reaction  string          `json:"reaction"`
+	Metadata  json.RawMessage `json:"metadata"`
+	CreatedAt time.Time       `json:"created_at"`
+}
+
+// ValidReactions is the set of allowed reaction types.
+var ValidReactions = map[string]bool{
+	ReactionApprove:    true,
+	ReactionReject:     true,
+	ReactionInProgress: true,
+	ReactionDone:       true,
+	ReactionPublished:  true,
+}
+
+// IsValidReaction returns true if the reaction type is valid.
+func IsValidReaction(r string) bool {
+	return ValidReactions[r]
+}
+
+// ComputeWorkflowState derives the workflow state from a list of reactions.
+// Returns "proposed" if no reactions exist.
+func ComputeWorkflowState(reactions []*Reaction) string {
+	if len(reactions) == 0 {
+		return StateProposed
+	}
+
+	highestPriority := 0
+	highestState := StateProposed
+
+	for _, r := range reactions {
+		p, ok := reactionPriority[r.Reaction]
+		if ok && p > highestPriority {
+			highestPriority = p
+			highestState = reactionToState[r.Reaction]
+		}
+	}
+
+	return highestState
+}
+
+// IsTerminalState returns true if the state should not trigger stalemate checks.
+func IsTerminalState(state string) bool {
+	return TerminalStates[state]
+}

internal/reactions/model_test.go

@@ -0,0 +1,150 @@
+package reactions
+
+import (
+	"testing"
+)
+
+func TestIsValidReaction(t *testing.T) {
+	tests := []struct {
+		name     string
+		reaction string
+		want     bool
+	}{
+		{"approve is valid", ReactionApprove, true},
+		{"reject is valid", ReactionReject, true},
+		{"in_progress is valid", ReactionInProgress, true},
+		{"done is valid", ReactionDone, true},
+		{"published is valid", ReactionPublished, true},
+		{"empty string is invalid", "", false},
+		{"thumbs_up is invalid", "thumbs_up", false},
+		{"like is invalid", "like", false},
+		{"APPROVE uppercase is invalid", "APPROVE", false},
+		{"random text is invalid", "foobar", false},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			got := IsValidReaction(tt.reaction)
+			if got != tt.want {
+				t.Errorf("IsValidReaction(%q) = %v, want %v", tt.reaction, got, tt.want)
+			}
+		})
+	}
+}
+
+func TestComputeWorkflowState(t *testing.T) {
+	tests := []struct {
+		name      string
+		reactions []*Reaction
+		want      string
+	}{
+		{
+			name:      "empty reactions returns proposed",
+			reactions: []*Reaction{},
+			want:      StateProposed,
+		},
+		{
+			name:      "nil reactions returns proposed",
+			reactions: nil,
+			want:      StateProposed,
+		},
+		{
+			name: "single approve returns approved",
+			reactions: []*Reaction{
+				{Reaction: ReactionApprove, AgentName: "agent-a"},
+			},
+			want: StateApproved,
+		},
+		{
+			name: "approve + in_progress returns in_progress (higher priority wins)",
+			reactions: []*Reaction{
+				{Reaction: ReactionApprove, AgentName: "agent-a"},
+				{Reaction: ReactionInProgress, AgentName: "agent-b"},
+			},
+			want: StateInProgress,
+		},
+		{
+			name: "single reject returns rejected",
+			reactions: []*Reaction{
+				{Reaction: ReactionReject, AgentName: "agent-a"},
+			},
+			want: StateRejected,
+		},
+		{
+			name: "single done returns done",
+			reactions: []*Reaction{
+				{Reaction: ReactionDone, AgentName: "agent-a"},
+			},
+			want: StateDone,
+		},
+		{
+			name: "single published returns published",
+			reactions: []*Reaction{
+				{Reaction: ReactionPublished, AgentName: "agent-a"},
+			},
+			want: StatePublished,
+		},
+		{
+			name: "all five types - published wins",
+			reactions: []*Reaction{
+				{Reaction: ReactionApprove, AgentName: "agent-a"},
+				{Reaction: ReactionInProgress, AgentName: "agent-b"},
+				{Reaction: ReactionReject, AgentName: "agent-c"},
+				{Reaction: ReactionDone, AgentName: "agent-d"},
+				{Reaction: ReactionPublished, AgentName: "agent-e"},
+			},
+			want: StatePublished,
+		},
+		{
+			name: "published wins over everything",
+			reactions: []*Reaction{
+				{Reaction: ReactionDone, AgentName: "agent-a"},
+				{Reaction: ReactionReject, AgentName: "agent-b"},
+				{Reaction: ReactionPublished, AgentName: "agent-c"},
+			},
+			want: StatePublished,
+		},
+		{
+			name: "reject beats in_progress",
+			reactions: []*Reaction{
+				{Reaction: ReactionInProgress, AgentName: "agent-a"},
+				{Reaction: ReactionReject, AgentName: "agent-b"},
+			},
+			want: StateRejected,
+		},
+		{
+			name: "done beats reject",
+			reactions: []*Reaction{
+				{Reaction: ReactionReject, AgentName: "agent-a"},
+				{Reaction: ReactionDone, AgentName: "agent-b"},
+			},
+			want: StateDone,
+		},
+		{
+			name: "in_progress beats approve",
+			reactions: []*Reaction{
+				{Reaction: ReactionInProgress, AgentName: "agent-a"},
+				{Reaction: ReactionApprove, AgentName: "agent-b"},
+			},
+			want: StateInProgress,
+		},
+		{
+			name: "multiple approves still returns approved",
+			reactions: []*Reaction{
+				{Reaction: ReactionApprove, AgentName: "agent-a"},
+				{Reaction: ReactionApprove, AgentName: "agent-b"},
+				{Reaction: ReactionApprove, AgentName: "agent-c"},
+			},
+			want: StateApproved,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			got := ComputeWorkflowState(tt.reactions)
+			if got != tt.want {
+				t.Errorf("ComputeWorkflowState() = %q, want %q", got, tt.want)
+			}
+		})
+	}
+}

internal/reactions/service.go

@@ -0,0 +1,127 @@
+package reactions
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"log/slog"
+)
+
+// Service provides business logic for message reactions.
+type Service struct {
+	store  Store
+	logger *slog.Logger
+}
+
+// NewService creates a new reaction service.
+func NewService(store Store, logger *slog.Logger) *Service {
+	return &Service{
+		store:  store,
+		logger: logger.With("component", "reactions"),
+	}
+}
+
+// ToggleResult describes what happened after a toggle operation.
+type ToggleResult struct {
+	Action   string    `json:"action"` // "added" or "removed"
+	Reaction *Reaction `json:"reaction,omitempty"`
+}
+
+// Toggle adds a reaction if it doesn't exist, or removes it if it does.
+// Returns the action taken and the reaction (if added).
+func (s *Service) Toggle(ctx context.Context, messageID int64, agentName, reactionType string, metadata json.RawMessage) (*ToggleResult, error) {
+	if !IsValidReaction(reactionType) {
+		return nil, ErrInvalidReaction
+	}
+
+	// Check if reaction already exists
+	exists, err := s.store.Exists(ctx, messageID, agentName, reactionType)
+	if err != nil {
+		return nil, fmt.Errorf("check existing reaction: %w", err)
+	}
+
+	if exists {
+		// Toggle off — remove it
+		if err := s.store.Delete(ctx, messageID, agentName, reactionType); err != nil {
+			return nil, fmt.Errorf("remove reaction: %w", err)
+		}
+		s.logger.Info("reaction removed",
+			"message_id", messageID,
+			"agent", agentName,
+			"reaction", reactionType,
+		)
+		return &ToggleResult{Action: "removed"}, nil
+	}
+
+	// Check reaction count limit
+	count, err := s.store.CountByMessage(ctx, messageID)
+	if err != nil {
+		return nil, fmt.Errorf("count reactions: %w", err)
+	}
+	if count >= MaxReactionsPerMessage {
+		return nil, ErrReactionLimit
+	}
+
+	// Toggle on — add it
+	if metadata == nil {
+		metadata = json.RawMessage("{}")
+	}
+
+	r := &Reaction{
+		MessageID: messageID,
+		AgentName: agentName,
+		Reaction:  reactionType,
+		Metadata:  metadata,
+	}
+
+	if err := s.store.Insert(ctx, r); err != nil {
+		return nil, fmt.Errorf("add reaction: %w", err)
+	}
+
+	s.logger.Info("reaction added",
+		"message_id", messageID,
+		"agent", agentName,
+		"reaction", reactionType,
+	)
+
+	return &ToggleResult{Action: "added", Reaction: r}, nil
+}
+
+// Remove explicitly removes a reaction.
+func (s *Service) Remove(ctx context.Context, messageID int64, agentName, reactionType string) error {
+	if !IsValidReaction(reactionType) {
+		return ErrInvalidReaction
+	}
+
+	if err := s.store.Delete(ctx, messageID, agentName, reactionType); err != nil {
+		return fmt.Errorf("remove reaction: %w", err)
+	}
+
+	s.logger.Info("reaction removed",
+		"message_id", messageID,
+		"agent", agentName,
+		"reaction", reactionType,
+	)
+	return nil
+}
+
+// GetReactions returns all reactions for a message and the computed workflow state.
+func (s *Service) GetReactions(ctx context.Context, messageID int64) ([]*Reaction, string, error) {
+	reactions, err := s.store.GetByMessageID(ctx, messageID)
+	if err != nil {
+		return nil, "", fmt.Errorf("get reactions: %w", err)
+	}
+
+	state := ComputeWorkflowState(reactions)
+	return reactions, state, nil
+}
+
+// GetReactionsByMessageIDs returns reactions grouped by message ID.
+func (s *Service) GetReactionsByMessageIDs(ctx context.Context, messageIDs []int64) (map[int64][]*Reaction, error) {
+	return s.store.GetByMessageIDs(ctx, messageIDs)
+}
+
+// ListByState returns message IDs in a channel that have the given workflow state.
+func (s *Service) ListByState(ctx context.Context, channelID int64, state string) ([]int64, error) {
+	return s.store.GetMessageIDsByState(ctx, channelID, state)
+}

internal/reactions/store.go

@@ -0,0 +1,209 @@
+package reactions
+
+import (
+	"context"
+	"database/sql"
+	"encoding/json"
+	"fmt"
+	"strings"
+)
+
+// Store defines the storage interface for reactions.
+type Store interface {
+	Insert(ctx context.Context, r *Reaction) error
+	Delete(ctx context.Context, messageID int64, agentName, reaction string) error
+	GetByMessageID(ctx context.Context, messageID int64) ([]*Reaction, error)
+	GetByMessageIDs(ctx context.Context, messageIDs []int64) (map[int64][]*Reaction, error)
+	Exists(ctx context.Context, messageID int64, agentName, reaction string) (bool, error)
+	CountByMessage(ctx context.Context, messageID int64) (int, error)
+	// GetMessageIDsByState returns message IDs in a channel that have the given workflow state.
+	GetMessageIDsByState(ctx context.Context, channelID int64, state string) ([]int64, error)
+}
+
+// SQLiteStore implements Store using SQLite.
+type SQLiteStore struct {
+	db *sql.DB
+}
+
+// NewSQLiteStore creates a new SQLite-backed reaction store.
+func NewSQLiteStore(db *sql.DB) *SQLiteStore {
+	return &SQLiteStore{db: db}
+}
+
+func (s *SQLiteStore) Insert(ctx context.Context, r *Reaction) error {
+	metadata := r.Metadata
+	if metadata == nil {
+		metadata = json.RawMessage("{}")
+	}
+
+	result, err := s.db.ExecContext(ctx,
+		`INSERT INTO message_reactions (message_id, agent_name, reaction, metadata, created_at)
+		 VALUES (?, ?, ?, ?, CURRENT_TIMESTAMP)`,
+		r.MessageID, r.AgentName, r.Reaction, string(metadata),
+	)
+	if err != nil {
+		return fmt.Errorf("insert reaction: %w", err)
+	}
+	id, err := result.LastInsertId()
+	if err != nil {
+		return fmt.Errorf("get reaction id: %w", err)
+	}
+	r.ID = id
+	return nil
+}
+
+func (s *SQLiteStore) Delete(ctx context.Context, messageID int64, agentName, reaction string) error {
+	result, err := s.db.ExecContext(ctx,
+		`DELETE FROM message_reactions WHERE message_id = ? AND agent_name = ? AND reaction = ?`,
+		messageID, agentName, reaction,
+	)
+	if err != nil {
+		return fmt.Errorf("delete reaction: %w", err)
+	}
+	n, _ := result.RowsAffected()
+	if n == 0 {
+		return fmt.Errorf("reaction not found")
+	}
+	return nil
+}
+
+func (s *SQLiteStore) GetByMessageID(ctx context.Context, messageID int64) ([]*Reaction, error) {
+	rows, err := s.db.QueryContext(ctx,
+		`SELECT id, message_id, agent_name, reaction, metadata, created_at
+		 FROM message_reactions WHERE message_id = ?
+		 ORDER BY created_at ASC`, messageID,
+	)
+	if err != nil {
+		return nil, fmt.Errorf("get reactions: %w", err)
+	}
+	defer rows.Close()
+	return scanReactions(rows)
+}
+
+func (s *SQLiteStore) GetByMessageIDs(ctx context.Context, messageIDs []int64) (map[int64][]*Reaction, error) {
+	if len(messageIDs) == 0 {
+		return map[int64][]*Reaction{}, nil
+	}
+
+	placeholders := make([]string, len(messageIDs))
+	args := make([]any, len(messageIDs))
+	for i, id := range messageIDs {
+		placeholders[i] = "?"
+		args[i] = id
+	}
+
+	query := fmt.Sprintf(
+		`SELECT id, message_id, agent_name, reaction, metadata, created_at
+		 FROM message_reactions WHERE message_id IN (%s)
+		 ORDER BY created_at ASC`,
+		strings.Join(placeholders, ","),
+	)
+
+	rows, err := s.db.QueryContext(ctx, query, args...)
+	if err != nil {
+		return nil, fmt.Errorf("get reactions by ids: %w", err)
+	}
+	defer rows.Close()
+
+	all, err := scanReactions(rows)
+	if err != nil {
+		return nil, err
+	}
+
+	result := make(map[int64][]*Reaction)
+	for _, r := range all {
+		result[r.MessageID] = append(result[r.MessageID], r)
+	}
+	return result, nil
+}
+
+func (s *SQLiteStore) Exists(ctx context.Context, messageID int64, agentName, reaction string) (bool, error) {
+	var count int
+	err := s.db.QueryRowContext(ctx,
+		`SELECT COUNT(*) FROM message_reactions WHERE message_id = ? AND agent_name = ? AND reaction = ?`,
+		messageID, agentName, reaction,
+	).Scan(&count)
+	if err != nil {
+		return false, fmt.Errorf("check reaction exists: %w", err)
+	}
+	return count > 0, nil
+}
+
+func (s *SQLiteStore) CountByMessage(ctx context.Context, messageID int64) (int, error) {
+	var count int
+	err := s.db.QueryRowContext(ctx,
+		`SELECT COUNT(*) FROM message_reactions WHERE message_id = ?`, messageID,
+	).Scan(&count)
+	if err != nil {
+		return 0, fmt.Errorf("count reactions: %w", err)
+	}
+	return count, nil
+}
+
+func (s *SQLiteStore) GetMessageIDsByState(ctx context.Context, channelID int64, state string) ([]int64, error) {
+	var query string
+	var args []any
+
+	if state == StateProposed {
+		// Messages with no reactions
+		query = `SELECT m.id FROM messages m
+				 WHERE m.channel_id = ?
+				 AND NOT EXISTS (SELECT 1 FROM message_reactions r WHERE r.message_id = m.id)
+				 ORDER BY m.created_at DESC`
+		args = []any{channelID}
+	} else {
+		// Find the reaction type for this state
+		var reactionType string
+		for rt, st := range reactionToState {
+			if st == state {
+				reactionType = rt
+				break
+			}
+		}
+		if reactionType == "" {
+			return nil, fmt.Errorf("unknown workflow state: %s", state)
+		}
+
+		// Messages where the highest-priority reaction maps to this state
+		// We get all messages with this reaction type and filter in app layer
+		query = `SELECT DISTINCT r.message_id FROM message_reactions r
+				 JOIN messages m ON m.id = r.message_id
+				 WHERE m.channel_id = ? AND r.reaction = ?
+				 ORDER BY m.created_at DESC`
+		args = []any{channelID, reactionType}
+	}
+
+	rows, err := s.db.QueryContext(ctx, query, args...)
+	if err != nil {
+		return nil, fmt.Errorf("get message ids by state: %w", err)
+	}
+	defer rows.Close()
+
+	var ids []int64
+	for rows.Next() {
+		var id int64
+		if err := rows.Scan(&id); err != nil {
+			return nil, fmt.Errorf("scan message id: %w", err)
+		}
+		ids = append(ids, id)
+	}
+	return ids, rows.Err()
+}
+
+func scanReactions(rows *sql.Rows) ([]*Reaction, error) {
+	var reactions []*Reaction
+	for rows.Next() {
+		var r Reaction
+		var metadata string
+		err := rows.Scan(&r.ID, &r.MessageID, &r.AgentName, &r.Reaction, &metadata, &r.CreatedAt)
+		if err != nil {
+			return nil, fmt.Errorf("scan reaction: %w", err)
+		}
+		r.Metadata = json.RawMessage(metadata)
+		reactions = append(reactions, &r)
+	}
+	if reactions == nil {
+		reactions = []*Reaction{}
+	}
+	return reactions, rows.Err()
+}

internal/reactions/store_test.go

@@ -0,0 +1,332 @@
+package reactions
+
+import (
+	"context"
+	"database/sql"
+	"encoding/json"
+	"fmt"
+	"testing"
+
+	_ "modernc.org/sqlite"
+
+	"github.com/synapbus/synapbus/internal/storage"
+)
+
+func newTestDB(t *testing.T) *sql.DB {
+	t.Helper()
+	dsn := fmt.Sprintf("file:%s?mode=memory&cache=shared", t.Name())
+	db, err := sql.Open("sqlite", dsn)
+	if err != nil {
+		t.Fatalf("open database: %v", err)
+	}
+	t.Cleanup(func() { db.Close() })
+
+	if _, err := db.Exec("PRAGMA foreign_keys=ON"); err != nil {
+		t.Fatalf("enable foreign keys: %v", err)
+	}
+
+	ctx := context.Background()
+	if err := storage.RunMigrations(ctx, db); err != nil {
+		t.Fatalf("run migrations: %v", err)
+	}
+
+	return db
+}
+
+// seedTestMessage creates a test user, agent, conversation, and message,
+// returning the message ID.
+func seedTestMessage(t *testing.T, db *sql.DB, agentName string) int64 {
+	t.Helper()
+
+	// Ensure user exists
+	db.Exec(`INSERT OR IGNORE INTO users (id, username, password_hash, display_name) VALUES (1, 'testowner', 'hash', 'Test Owner')`)
+
+	// Ensure agent exists
+	_, err := db.Exec(
+		`INSERT OR IGNORE INTO agents (name, display_name, type, capabilities, owner_id, api_key_hash, status) VALUES (?, ?, 'ai', '{}', 1, 'testhash', 'active')`,
+		agentName, agentName,
+	)
+	if err != nil {
+		t.Fatalf("seed agent %s: %v", agentName, err)
+	}
+
+	// Create conversation
+	result, err := db.Exec(
+		`INSERT INTO conversations (subject, created_by, created_at, updated_at) VALUES ('test', ?, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)`,
+		agentName,
+	)
+	if err != nil {
+		t.Fatalf("create conversation: %v", err)
+	}
+	convID, _ := result.LastInsertId()
+
+	// Create message
+	result, err = db.Exec(
+		`INSERT INTO messages (conversation_id, from_agent, body, priority, status, created_at) VALUES (?, ?, 'test body', 5, 'pending', CURRENT_TIMESTAMP)`,
+		convID, agentName,
+	)
+	if err != nil {
+		t.Fatalf("create message: %v", err)
+	}
+	msgID, _ := result.LastInsertId()
+	return msgID
+}
+
+func TestSQLiteStore_InsertAndGet(t *testing.T) {
+	db := newTestDB(t)
+	store := NewSQLiteStore(db)
+	ctx := context.Background()
+
+	msgID := seedTestMessage(t, db, "agent-a")
+
+	r := &Reaction{
+		MessageID: msgID,
+		AgentName: "agent-a",
+		Reaction:  ReactionApprove,
+		Metadata:  json.RawMessage(`{"comment":"looks good"}`),
+	}
+
+	if err := store.Insert(ctx, r); err != nil {
+		t.Fatalf("Insert: %v", err)
+	}
+
+	if r.ID == 0 {
+		t.Error("reaction ID should not be 0 after insert")
+	}
+
+	// Verify it exists
+	exists, err := store.Exists(ctx, msgID, "agent-a", ReactionApprove)
+	if err != nil {
+		t.Fatalf("Exists: %v", err)
+	}
+	if !exists {
+		t.Error("expected reaction to exist after insert")
+	}
+
+	// GetByMessageID
+	reactions, err := store.GetByMessageID(ctx, msgID)
+	if err != nil {
+		t.Fatalf("GetByMessageID: %v", err)
+	}
+	if len(reactions) != 1 {
+		t.Fatalf("got %d reactions, want 1", len(reactions))
+	}
+	if reactions[0].AgentName != "agent-a" {
+		t.Errorf("AgentName = %q, want %q", reactions[0].AgentName, "agent-a")
+	}
+	if reactions[0].Reaction != ReactionApprove {
+		t.Errorf("Reaction = %q, want %q", reactions[0].Reaction, ReactionApprove)
+	}
+	if string(reactions[0].Metadata) != `{"comment":"looks good"}` {
+		t.Errorf("Metadata = %s, want %s", reactions[0].Metadata, `{"comment":"looks good"}`)
+	}
+}
+
+func TestSQLiteStore_UniqueConstraint(t *testing.T) {
+	db := newTestDB(t)
+	store := NewSQLiteStore(db)
+	ctx := context.Background()
+
+	msgID := seedTestMessage(t, db, "agent-a")
+
+	r := &Reaction{
+		MessageID: msgID,
+		AgentName: "agent-a",
+		Reaction:  ReactionApprove,
+	}
+
+	if err := store.Insert(ctx, r); err != nil {
+		t.Fatalf("Insert first: %v", err)
+	}
+
+	// Inserting the same reaction again should fail with UNIQUE constraint
+	r2 := &Reaction{
+		MessageID: msgID,
+		AgentName: "agent-a",
+		Reaction:  ReactionApprove,
+	}
+	err := store.Insert(ctx, r2)
+	if err == nil {
+		t.Error("expected error on duplicate insert, got nil")
+	}
+}
+
+func TestSQLiteStore_Delete(t *testing.T) {
+	db := newTestDB(t)
+	store := NewSQLiteStore(db)
+	ctx := context.Background()
+
+	msgID := seedTestMessage(t, db, "agent-a")
+
+	r := &Reaction{
+		MessageID: msgID,
+		AgentName: "agent-a",
+		Reaction:  ReactionApprove,
+	}
+	if err := store.Insert(ctx, r); err != nil {
+		t.Fatalf("Insert: %v", err)
+	}
+
+	// Delete the reaction
+	if err := store.Delete(ctx, msgID, "agent-a", ReactionApprove); err != nil {
+		t.Fatalf("Delete: %v", err)
+	}
+
+	// Verify it's gone
+	exists, err := store.Exists(ctx, msgID, "agent-a", ReactionApprove)
+	if err != nil {
+		t.Fatalf("Exists: %v", err)
+	}
+	if exists {
+		t.Error("expected reaction to not exist after delete")
+	}
+
+	// Deleting a non-existent reaction should return an error
+	err = store.Delete(ctx, msgID, "agent-a", ReactionApprove)
+	if err == nil {
+		t.Error("expected error when deleting non-existent reaction, got nil")
+	}
+}
+
+func TestSQLiteStore_GetByMessageID(t *testing.T) {
+	db := newTestDB(t)
+	store := NewSQLiteStore(db)
+	ctx := context.Background()
+
+	msgID := seedTestMessage(t, db, "agent-a")
+	// Seed a second agent
+	db.Exec(`INSERT OR IGNORE INTO agents (name, display_name, type, capabilities, owner_id, api_key_hash, status) VALUES ('agent-b', 'agent-b', 'ai', '{}', 1, 'testhash2', 'active')`)
+
+	// Insert multiple reactions from different agents
+	reactions := []*Reaction{
+		{MessageID: msgID, AgentName: "agent-a", Reaction: ReactionApprove},
+		{MessageID: msgID, AgentName: "agent-b", Reaction: ReactionInProgress},
+		{MessageID: msgID, AgentName: "agent-a", Reaction: ReactionDone},
+	}
+
+	for _, r := range reactions {
+		if err := store.Insert(ctx, r); err != nil {
+			t.Fatalf("Insert: %v", err)
+		}
+	}
+
+	got, err := store.GetByMessageID(ctx, msgID)
+	if err != nil {
+		t.Fatalf("GetByMessageID: %v", err)
+	}
+
+	if len(got) != 3 {
+		t.Fatalf("got %d reactions, want 3", len(got))
+	}
+
+	// Verify results are ordered by created_at ASC
+	for i, r := range got {
+		if r.ID == 0 {
+			t.Errorf("reaction[%d] ID should not be 0", i)
+		}
+		if r.MessageID != msgID {
+			t.Errorf("reaction[%d] MessageID = %d, want %d", i, r.MessageID, msgID)
+		}
+	}
+
+	// Test with a message that has no reactions
+	msgID2 := seedTestMessage(t, db, "agent-a")
+	got2, err := store.GetByMessageID(ctx, msgID2)
+	if err != nil {
+		t.Fatalf("GetByMessageID (empty): %v", err)
+	}
+	if len(got2) != 0 {
+		t.Errorf("got %d reactions for empty message, want 0", len(got2))
+	}
+}
+
+func TestSQLiteStore_CountByMessage(t *testing.T) {
+	db := newTestDB(t)
+	store := NewSQLiteStore(db)
+	ctx := context.Background()
+
+	msgID := seedTestMessage(t, db, "agent-a")
+	db.Exec(`INSERT OR IGNORE INTO agents (name, display_name, type, capabilities, owner_id, api_key_hash, status) VALUES ('agent-b', 'agent-b', 'ai', '{}', 1, 'testhash2', 'active')`)
+
+	// Count should be 0 initially
+	count, err := store.CountByMessage(ctx, msgID)
+	if err != nil {
+		t.Fatalf("CountByMessage: %v", err)
+	}
+	if count != 0 {
+		t.Errorf("initial count = %d, want 0", count)
+	}
+
+	// Insert some reactions
+	for _, r := range []*Reaction{
+		{MessageID: msgID, AgentName: "agent-a", Reaction: ReactionApprove},
+		{MessageID: msgID, AgentName: "agent-b", Reaction: ReactionDone},
+	} {
+		if err := store.Insert(ctx, r); err != nil {
+			t.Fatalf("Insert: %v", err)
+		}
+	}
+
+	count, err = store.CountByMessage(ctx, msgID)
+	if err != nil {
+		t.Fatalf("CountByMessage: %v", err)
+	}
+	if count != 2 {
+		t.Errorf("count = %d, want 2", count)
+	}
+
+	// Delete one and verify count decreases
+	if err := store.Delete(ctx, msgID, "agent-a", ReactionApprove); err != nil {
+		t.Fatalf("Delete: %v", err)
+	}
+	count, err = store.CountByMessage(ctx, msgID)
+	if err != nil {
+		t.Fatalf("CountByMessage after delete: %v", err)
+	}
+	if count != 1 {
+		t.Errorf("count after delete = %d, want 1", count)
+	}
+}
+
+func TestSQLiteStore_GetByMessageIDs(t *testing.T) {
+	db := newTestDB(t)
+	store := NewSQLiteStore(db)
+	ctx := context.Background()
+
+	msgID1 := seedTestMessage(t, db, "agent-a")
+	msgID2 := seedTestMessage(t, db, "agent-a")
+
+	// Add reactions to msg1
+	if err := store.Insert(ctx, &Reaction{MessageID: msgID1, AgentName: "agent-a", Reaction: ReactionApprove}); err != nil {
+		t.Fatalf("Insert: %v", err)
+	}
+	if err := store.Insert(ctx, &Reaction{MessageID: msgID1, AgentName: "agent-a", Reaction: ReactionDone}); err != nil {
+		t.Fatalf("Insert: %v", err)
+	}
+
+	// Add reaction to msg2
+	if err := store.Insert(ctx, &Reaction{MessageID: msgID2, AgentName: "agent-a", Reaction: ReactionReject}); err != nil {
+		t.Fatalf("Insert: %v", err)
+	}
+
+	result, err := store.GetByMessageIDs(ctx, []int64{msgID1, msgID2})
+	if err != nil {
+		t.Fatalf("GetByMessageIDs: %v", err)
+	}
+
+	if len(result[msgID1]) != 2 {
+		t.Errorf("msg1 reactions = %d, want 2", len(result[msgID1]))
+	}
+	if len(result[msgID2]) != 1 {
+		t.Errorf("msg2 reactions = %d, want 1", len(result[msgID2]))
+	}
+
+	// Empty slice returns empty map
+	result, err = store.GetByMessageIDs(ctx, []int64{})
+	if err != nil {
+		t.Fatalf("GetByMessageIDs (empty): %v", err)
+	}
+	if len(result) != 0 {
+		t.Errorf("expected empty map, got %v", result)
+	}
+}

internal/storage/schema/013_reactions.sql

@@ -0,0 +1,22 @@
+-- Message reactions for workflow state tracking
+-- Supports: approve, reject, in_progress, done, published
+
+CREATE TABLE IF NOT EXISTS message_reactions (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    message_id INTEGER NOT NULL REFERENCES messages(id) ON DELETE CASCADE,
+    agent_name TEXT NOT NULL,
+    reaction TEXT NOT NULL CHECK(reaction IN ('approve', 'reject', 'in_progress', 'done', 'published')),
+    metadata TEXT NOT NULL DEFAULT '{}',
+    created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    UNIQUE(message_id, agent_name, reaction)
+);
+
+CREATE INDEX idx_reactions_message ON message_reactions(message_id);
+CREATE INDEX idx_reactions_agent ON message_reactions(agent_name);
+CREATE INDEX idx_reactions_type ON message_reactions(reaction);
+
+-- Channel workflow settings
+ALTER TABLE channels ADD COLUMN workflow_enabled BOOLEAN NOT NULL DEFAULT 0;
+ALTER TABLE channels ADD COLUMN auto_approve BOOLEAN NOT NULL DEFAULT 0;
+ALTER TABLE channels ADD COLUMN stalemate_remind_after TEXT NOT NULL DEFAULT '24h';
+ALTER TABLE channels ADD COLUMN stalemate_escalate_after TEXT NOT NULL DEFAULT '72h';

internal/web/dist/index.html

@@ -11,30 +11,30 @@
 		<link rel="preconnect" href="https://fonts.googleapis.com">
 		<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 		<link href="https://fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;600;700&family=Instrument+Sans:wght@400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap" rel="stylesheet">
-		<link href="/_app/immutable/entry/start.Brt_7G-i.js" rel="modulepreload">
-		<link href="/_app/immutable/chunks/B_GGgm-X.js" rel="modulepreload">
+		<link href="/_app/immutable/entry/start.HBAljWpY.js" rel="modulepreload">
+		<link href="/_app/immutable/chunks/By4mEdwX.js" rel="modulepreload">
 		<link href="/_app/immutable/chunks/BjgrqnN-.js" rel="modulepreload">
-		<link href="/_app/immutable/chunks/CAWWRzNH.js" rel="modulepreload">
-		<link href="/_app/immutable/chunks/B-GqcZrE.js" rel="modulepreload">
-		<link href="/_app/immutable/chunks/DpGxxGDS.js" rel="modulepreload">
-		<link href="/_app/immutable/chunks/3PInzq4O.js" rel="modulepreload">
-		<link href="/_app/immutable/chunks/qakGnb92.js" rel="modulepreload">
-		<link href="/_app/immutable/entry/app.n45Hd8qT.js" rel="modulepreload">
+		<link href="/_app/immutable/chunks/DFRGYO_X.js" rel="modulepreload">
+		<link href="/_app/immutable/chunks/0x2jFCf0.js" rel="modulepreload">
+		<link href="/_app/immutable/chunks/C3nS3byM.js" rel="modulepreload">
+		<link href="/_app/immutable/chunks/C1Y8Vas-.js" rel="modulepreload">
+		<link href="/_app/immutable/chunks/Bs4ZECIt.js" rel="modulepreload">
+		<link href="/_app/immutable/entry/app.mRWkfG8z.js" rel="modulepreload">
 		
 	</head>
 	<body data-sveltekit-preload-data="hover">
 		<div style="display: contents">
 			<script>
 				{
-					__sveltekit_nj28a9 = {
+					__sveltekit_ro0mhp = {
 						base: ""
 					};
 
 					const element = document.currentScript.parentElement;
 
 					Promise.all([
-						import("/_app/immutable/entry/start.Brt_7G-i.js"),
-						import("/_app/immutable/entry/app.n45Hd8qT.js")
+						import("/_app/immutable/entry/start.HBAljWpY.js"),
+						import("/_app/immutable/entry/app.mRWkfG8z.js")
 					]).then(([kit, app]) => {
 						kit.start(app, element);
 					});

specs/004-embeddings-retention-inbox/checklists/requirements.md

@@ -0,0 +1,36 @@
+# Specification Quality Checklist: Embeddings Management, Message Retention & Agent Inbox
+
+**Purpose**: Validate specification completeness and quality before proceeding to planning
+**Created**: 2026-03-14
+**Feature**: [spec.md](../spec.md)
+
+## Content Quality
+
+- [x] No implementation details (languages, frameworks, APIs)
+- [x] Focused on user value and business needs
+- [x] Written for non-technical stakeholders
+- [x] All mandatory sections completed
+
+## Requirement Completeness
+
+- [x] No [NEEDS CLARIFICATION] markers remain
+- [x] Requirements are testable and unambiguous
+- [x] Success criteria are measurable
+- [x] Success criteria are technology-agnostic (no implementation details)
+- [x] All acceptance scenarios are defined
+- [x] Edge cases are identified
+- [x] Scope is clearly bounded
+- [x] Dependencies and assumptions identified
+
+## Feature Readiness
+
+- [x] All functional requirements have clear acceptance criteria
+- [x] User scenarios cover primary flows
+- [x] Feature meets measurable outcomes defined in Success Criteria
+- [x] No implementation details leak into specification
+
+## Notes
+
+- All items pass validation. Spec is ready for `/speckit.plan`.
+- Assumptions section documents all decisions made where the original description was ambiguous.
+- The spec references SynapBus-specific concepts (MCP tools, admin socket, HNSW) which are domain terms, not implementation details.

specs/004-embeddings-retention-inbox/contracts/admin-commands.md

@@ -0,0 +1,124 @@
+# Admin Socket Command Contracts
+
+All commands use the existing admin socket JSON-RPC protocol:
+- Request: `{"command": "...", "args": {...}}\n`
+- Response: `{"ok": true, "data": {...}}\n` or `{"ok": false, "error": "..."}\n`
+
+## embeddings.status
+
+**Args**: None
+
+**Response data**:
+```json
+{
+  "provider": "openai",
+  "total_embedded": 1500,
+  "pending_count": 23,
+  "failed_count": 2,
+  "index_size": 1498,
+  "dimensions": 1536
+}
+```
+
+If no provider configured: `provider` is empty string, all counts are from existing data.
+
+## embeddings.reindex
+
+**Args**: None
+
+**Response data**:
+```json
+{
+  "deleted_embeddings": 1500,
+  "cleared_index": true,
+  "enqueued_messages": 1523
+}
+```
+
+Requires a running embedding pipeline (provider configured). Returns error if no provider.
+
+## embeddings.clear
+
+**Args**: None
+
+**Response data**:
+```json
+{
+  "deleted_embeddings": 1500,
+  "cleared_index": true,
+  "cleared_queue": true
+}
+```
+
+## retention.status
+
+**Args**: None
+
+**Response data**:
+```json
+{
+  "enabled": true,
+  "retention_period": "8760h0m0s",
+  "retention_period_human": "12 months",
+  "warning_window": "720h0m0s",
+  "cleanup_interval": "24h0m0s",
+  "last_cleanup_at": "2026-03-14T00:00:00Z",
+  "next_cleanup_at": "2026-03-15T00:00:00Z",
+  "message_age_distribution": {
+    "< 1 month": 500,
+    "1-3 months": 300,
+    "3-6 months": 200,
+    "6-12 months": 100,
+    "> 12 months": 15
+  },
+  "total_messages": 1115
+}
+```
+
+## messages.purge
+
+**Args**:
+```json
+{
+  "older_than": "4320h",
+  "agent": "bot-test",
+  "channel": "test-channel"
+}
+```
+
+At least one of `older_than`, `agent`, or `channel` must be specified.
+
+**Response data**:
+```json
+{
+  "deleted_messages": 150,
+  "deleted_embeddings": 120,
+  "deleted_attachments": 5,
+  "cleaned_conversations": 3
+}
+```
+
+## db.vacuum
+
+**Args**: None
+
+**Response data**:
+```json
+{
+  "before_size_bytes": 104857600,
+  "after_size_bytes": 52428800,
+  "reclaimed_bytes": 52428800,
+  "duration_ms": 3200
+}
+```
+
+## CLI Command Mapping
+
+| CLI Command | Admin Socket Command |
+|------------|---------------------|
+| `synapbus embeddings status` | `embeddings.status` |
+| `synapbus embeddings reindex` | `embeddings.reindex` |
+| `synapbus embeddings clear` | `embeddings.clear` |
+| `synapbus retention status` | `retention.status` |
+| `synapbus messages purge --older-than 6m --agent X --channel Y` | `messages.purge` |
+| `synapbus db vacuum` | `db.vacuum` |

specs/004-embeddings-retention-inbox/contracts/mcp-tools.md

@@ -0,0 +1,74 @@
+# MCP Tool Contracts
+
+## my_status
+
+**Description**: Get your complete status overview — identity, pending messages, channel mentions, system notifications, and statistics. Call this first when connecting to SynapBus to orient yourself.
+
+**Parameters**: None (agent identity is derived from authentication context)
+
+**Response Schema**:
+
+```json
+{
+  "agent": {
+    "name": "string — your agent name",
+    "display_name": "string — your display name",
+    "type": "string — 'ai' or 'human'",
+    "owner": "string — name of your human owner"
+  },
+  "direct_messages": [
+    {
+      "id": "number — message ID",
+      "from": "string — sender agent name",
+      "subject": "string — conversation subject",
+      "body": "string — message body (truncated to 200 chars)",
+      "priority": "number — 1-10",
+      "status": "string — pending/processing/done/failed",
+      "created_at": "string — ISO 8601 timestamp"
+    }
+  ],
+  "direct_messages_total": "number — total pending DMs (may exceed array length)",
+  "mentions": [
+    {
+      "id": "number — message ID",
+      "channel": "string — channel name",
+      "from": "string — sender agent name",
+      "body": "string — message body (truncated to 200 chars)",
+      "created_at": "string — ISO 8601 timestamp"
+    }
+  ],
+  "mentions_total": "number — total recent mentions",
+  "system_notifications": [
+    {
+      "id": "number — message ID",
+      "body": "string — notification text",
+      "created_at": "string — ISO 8601 timestamp"
+    }
+  ],
+  "system_notifications_total": "number — total system notifications",
+  "channels": [
+    {
+      "id": "number — channel ID",
+      "name": "string — channel name",
+      "unread": "number — unread message count",
+      "last_message_at": "string — ISO 8601 timestamp or null"
+    }
+  ],
+  "stats": {
+    "pending_dms": "number",
+    "channels_joined": "number",
+    "unread_channel_messages": "number",
+    "system_notifications": "number"
+  },
+  "truncated": "boolean — true if any section was capped",
+  "instructions": "string — present only if truncated, guidance on using read_inbox/get_channel_messages"
+}
+```
+
+**Access Control**: Agent identity from MCP auth context. Only returns data the agent has access to.
+
+**Limits**:
+- direct_messages: max 10 items
+- mentions: max 10 items
+- system_notifications: max 5 items
+- Body text truncated to 200 characters

specs/004-embeddings-retention-inbox/data-model.md

@@ -0,0 +1,119 @@
+# Data Model: Embeddings Management, Message Retention & Agent Inbox
+
+## Existing Entities (Modified)
+
+### messages (existing table)
+No schema changes. Retention operates on the existing `created_at` column.
+- Retention queries: `WHERE created_at < ? AND status != 'processing'`
+- Warning queries: `WHERE created_at < ? AND created_at >= ?` (11-month to 12-month window)
+
+### embeddings (existing table)
+No schema changes. Existing methods `DeleteAllEmbeddings()`, `EmbeddingCount()`, `GetEmbeddingProvider()` are sufficient for the new CLI commands.
+
+New method needed:
+- `EmbeddingStats(ctx) → (provider, count, pending, failed, dimensions)` — aggregates data from `embeddings` and `embedding_queue` tables.
+
+### embedding_queue (existing table)
+No schema changes. Existing methods `ClearQueue()`, `EnqueueAllMessages()`, `PendingCount()` are sufficient.
+
+New method needed:
+- `FailedCount(ctx) → int64` — counts items with `status = 'failed'`
+
+### agents (existing table)
+No schema changes. The `system` agent is created as a regular row with `name = 'system'`, `type = 'ai'`, `owner_id = 1` (first admin user).
+
+### conversations (existing table)
+No schema changes. Orphaned conversations (no remaining messages) are cleaned up during retention.
+
+### attachments (existing table)
+No schema changes. Attachments for deleted messages are cleaned up during retention. CAS files are only removed if no other attachment record references the same hash.
+
+## New Entities
+
+### RetentionConfig (in-memory, not persisted)
+
+Configuration for the message retention system. Set at server startup from CLI flags / env vars.
+
+| Field | Type | Default | Description |
+|-------|------|---------|-------------|
+| RetentionPeriod | time.Duration | 12 months (8760h) | Messages older than this are deleted |
+| WarningWindow | time.Duration | 1 month (720h) | How long before deletion to send warnings |
+| CleanupInterval | time.Duration | 24h | How often the cleanup job runs |
+| Enabled | bool | true | false if retention period is 0 |
+
+### RetentionState (derived, not stored)
+
+Runtime state queried by `retention.status` admin command.
+
+| Field | Type | Description |
+|-------|------|-------------|
+| Config | RetentionConfig | Current configuration |
+| LastCleanupAt | *time.Time | When cleanup last ran (tracked in memory) |
+| NextCleanupAt | *time.Time | When next cleanup will run |
+| MessageAgeDistribution | map[string]int64 | Counts bucketed by age |
+
+### EmbeddingStatus (derived, not stored)
+
+Aggregated from embeddings + embedding_queue tables by `embeddings.status` admin command.
+
+| Field | Type | Description |
+|-------|------|-------------|
+| Provider | string | Current embedding provider name |
+| TotalEmbedded | int64 | Count of embedded messages |
+| PendingCount | int64 | Queue items with status pending/processing |
+| FailedCount | int64 | Queue items with status failed |
+| IndexSize | int | Number of vectors in HNSW index |
+| Dimensions | int | Vector dimensions (from provider) |
+
+### MyStatusResponse (MCP tool response, not stored)
+
+Response structure for the `my_status` MCP tool.
+
+| Field | Type | Description |
+|-------|------|-------------|
+| agent | object | {name, display_name, type, owner_name} |
+| direct_messages | []object | Up to 10 pending DMs, newest first |
+| direct_messages_total | int | Total pending DM count |
+| mentions | []object | Up to 10 recent @-mentions in channels |
+| mentions_total | int | Total mention count |
+| system_notifications | []object | Up to 5 system messages |
+| system_notifications_total | int | Total system notification count |
+| channels | []object | Joined channels with unread counts |
+| stats | object | {pending_dms, channels_joined, unread_channel_messages, system_notifications} |
+| truncated | bool | true if any section was capped |
+| instructions | string | Guidance on how to get full data if truncated |
+
+## State Transitions
+
+### Message Lifecycle (updated with retention)
+
+```
+created → pending → processing → done
+                  → failed
+
+After retention period:
+  any status (except processing) → WARNING_SENT → DELETED
+```
+
+### Embedding Lifecycle (updated with admin commands)
+
+```
+message created → enqueued → processing → completed (embedded)
+                           → failed → requeued (up to 3 retries)
+
+Admin reindex: all embeddings DELETED → all messages re-enqueued
+Admin clear: all embeddings DELETED, queue cleared
+```
+
+## Relationships
+
+```
+messages 1──* embeddings (message_id)
+messages 1──* embedding_queue (message_id)
+messages 1──* attachments (message_id)
+messages *──1 conversations (conversation_id)
+agents   1──* messages (from_agent, to_agent)
+agents   *──1 users (owner_id)
+channels 1──* messages (channel_id)
+channels 1──* channel_members (channel_id)
+```

specs/004-embeddings-retention-inbox/plan.md

@@ -0,0 +1,85 @@
+# Implementation Plan: Embeddings Management, Message Retention & Agent Inbox
+
+**Branch**: `004-embeddings-retention-inbox` | **Date**: 2026-03-14 | **Spec**: [spec.md](spec.md)
+**Input**: Feature specification from `/specs/004-embeddings-retention-inbox/spec.md`
+
+## Summary
+
+Three operational improvements to SynapBus: (1) CLI admin commands for embedding provider management (status, reindex, clear), (2) automated message retention with configurable TTL, archive warnings, cleanup with SQLite compaction, and manual purge CLI commands, (3) a unified `my_status` MCP tool that gives agents a complete overview in a single call. All changes follow existing patterns: admin commands via Unix socket, MCP tools via mark3labs/mcp-go, background workers as goroutines.
+
+## Technical Context
+
+**Language/Version**: Go 1.25+ (per go.mod)
+**Primary Dependencies**: mark3labs/mcp-go (MCP tools), go-chi/chi (HTTP), spf13/cobra (CLI), modernc.org/sqlite (storage), TFMV/hnsw (vectors)
+**Storage**: SQLite (modernc.org/sqlite, pure Go) — single DB file in `--data` directory
+**Testing**: `go test ./...` — table-driven tests, existing test files in most packages
+**Target Platform**: linux/amd64, darwin/arm64 (zero CGO)
+**Project Type**: CLI + server (single binary)
+**Performance Goals**: `my_status` response < 500ms; message purge of 100k messages < 30s
+**Constraints**: Zero CGO, single binary, all data in `--data` directory
+**Scale/Scope**: Single-instance deployments, up to 100k messages, up to 100 agents
+
+## Constitution Check
+
+*GATE: Must pass before Phase 0 research. Re-check after Phase 1 design.*
+
+| Principle | Status | Notes |
+|-----------|--------|-------|
+| I. Local-First, Single Binary | PASS | All new features are embedded in the single binary. No external dependencies added. |
+| II. MCP-Native | PASS | `my_status` is an MCP tool. Admin commands use Unix socket (non-MCP, for operators). |
+| III. Pure Go, Zero CGO | PASS | No new dependencies. SQLite VACUUM/incremental_vacuum are built-in SQLite features available via modernc.org/sqlite. |
+| IV. Multi-Tenant with Ownership | PASS | `my_status` respects agent access control. Retention cleanup only affects messages the system owns. System agent has an owner. |
+| V. Embedded OAuth 2.1 | N/A | No auth changes in this feature. |
+| VI. Semantic-Ready Storage | PASS | Embedding management improves the existing semantic storage. Cleanup properly cascades to embeddings. System still works without embedding provider. |
+| VII. Swarm Intelligence Patterns | N/A | No changes to swarm patterns. |
+| VIII. Observable by Default | PASS | Cleanup operations are logged. Embedding status is queryable. System notifications are traced. |
+| IX. Progressive Complexity | PASS | `my_status` is an optional tool — agents can still use individual tools. Retention defaults to 12mo but can be disabled (0). Embedding CLI is opt-in. |
+| X. Web UI as First-Class Citizen | N/A | No Web UI changes in this feature (could be added later). |
+
+No violations. All gates pass.
+
+## Project Structure
+
+### Documentation (this feature)
+
+```text
+specs/004-embeddings-retention-inbox/
+├── plan.md              # This file
+├── research.md          # Phase 0 output
+├── data-model.md        # Phase 1 output
+├── quickstart.md        # Phase 1 output
+├── contracts/           # Phase 1 output
+│   ├── mcp-tools.md     # my_status MCP tool schema
+│   └── admin-commands.md # New admin socket commands
+└── tasks.md             # Phase 2 output (created by /speckit.tasks)
+```
+
+### Source Code (repository root)
+
+```text
+cmd/synapbus/
+├── main.go              # Add --message-retention flag, retention worker startup
+└── admin.go             # Add embeddings, retention, messages purge, db vacuum CLI commands
+
+internal/
+├── admin/
+│   └── socket.go        # Add handlers: embeddings.*, retention.*, messages.purge, db.vacuum
+├── mcp/
+│   └── tools.go         # Add my_status tool definition and handler
+├── messaging/
+│   ├── retention.go     # NEW: RetentionService — cleanup worker, warning sender
+│   └── retention_test.go # NEW: Tests for retention logic
+├── search/
+│   └── store.go         # Add EmbeddingStats() method
+└── agents/
+    └── service.go       # Add EnsureSystemAgent() method
+
+schema/
+└── 010_retention.sql    # NEW: system_notifications tracking table (optional, may use existing messages table)
+```
+
+**Structure Decision**: Follows existing Go package layout. New code goes into existing packages where it belongs. Only one new file pair (retention.go/retention_test.go) is truly new. Everything else extends existing files.
+
+## Complexity Tracking
+
+No violations to justify. All changes follow existing patterns.

specs/004-embeddings-retention-inbox/quickstart.md

@@ -0,0 +1,72 @@
+# Quickstart: Embeddings Management, Message Retention & Agent Inbox
+
+## For Agents: Using my_status
+
+After connecting to SynapBus via MCP, call `my_status` as your first tool:
+
+```
+→ my_status (no parameters needed)
+← {
+    "agent": {"name": "my-agent", "display_name": "My Agent", "type": "ai", "owner": "admin"},
+    "direct_messages": [...],
+    "mentions": [...],
+    "system_notifications": [...],
+    "channels": [...],
+    "stats": {"pending_dms": 3, "channels_joined": 2, ...}
+  }
+```
+
+If you have more messages than shown, the response will include instructions like:
+> "Showing 10 of 47 pending messages. Use read_inbox to see all."
+
+## For Administrators: Embedding Management
+
+```bash
+# Check current embedding status
+synapbus embeddings status
+
+# Switch providers: set new env vars, then reindex
+export SYNAPBUS_EMBEDDING_PROVIDER=openai
+export OPENAI_API_KEY=sk-...
+synapbus embeddings reindex    # clears old vectors, re-queues all messages
+
+# Monitor progress
+synapbus embeddings status     # shows pending/completed counts
+
+# Clear all embeddings (disable semantic search)
+synapbus embeddings clear
+```
+
+## For Administrators: Message Retention
+
+```bash
+# Start server with custom retention (default: 12 months)
+synapbus serve --message-retention 6m
+
+# Or disable retention
+synapbus serve --message-retention 0
+
+# Check retention status
+synapbus retention status
+
+# Manual purge
+synapbus messages purge --older-than 6m
+synapbus messages purge --agent bot-test
+synapbus messages purge --channel test-channel
+
+# Compact database after purge
+synapbus db vacuum
+```
+
+## Environment Variables
+
+| Variable | Description | Default |
+|----------|-------------|---------|
+| `SYNAPBUS_MESSAGE_RETENTION` | Message retention period (e.g., "12m", "365d", "8760h", "0" to disable) | `12m` |
+
+## What Happens Automatically
+
+1. **Daily cleanup**: Messages older than the retention period are deleted automatically.
+2. **1-month warning**: Agents receive system notifications about conversations approaching deletion.
+3. **Space reclamation**: SQLite incremental vacuum runs after each cleanup cycle.
+4. **Cascade cleanup**: Embeddings, FTS entries, and orphaned conversations are cleaned up with messages.

specs/004-embeddings-retention-inbox/research.md

@@ -0,0 +1,88 @@
+# Research: Embeddings Management, Message Retention & Agent Inbox
+
+## R1: SQLite Compaction Strategy
+
+**Decision**: Use `PRAGMA auto_vacuum = INCREMENTAL` for automated cleanup and `VACUUM` for manual CLI compaction.
+
+**Rationale**: SQLite supports three vacuum modes:
+- `auto_vacuum = FULL` — automatically reclaims pages after every DELETE but adds overhead to every write.
+- `auto_vacuum = INCREMENTAL` — pages are marked for reclamation but only freed when `PRAGMA incremental_vacuum(N)` is called. This allows batching the space reclamation.
+- `VACUUM` — rewrites the entire database file. Slow for large DBs but guarantees maximum compaction.
+
+For SynapBus: the DB is already created with default auto_vacuum mode. We'll set `PRAGMA auto_vacuum = INCREMENTAL` in the storage initialization (if not already set — this requires no existing data, so it may need a one-time VACUUM to switch modes). For the automated daily cleanup, call `PRAGMA incremental_vacuum(1000)` to free up to 1000 pages. For the manual `db vacuum` CLI command, run full `VACUUM`.
+
+**Alternatives considered**:
+- Full auto_vacuum: Too much per-write overhead for a messaging system with high insert rates.
+- No compaction: Database file would grow monotonically. Rejected per requirements.
+
+## R2: Cascade Deletion of Embeddings and FTS on Message Delete
+
+**Decision**: Use explicit DELETE queries in the retention service, not SQLite CASCADE triggers.
+
+**Rationale**: The existing schema has FTS sync triggers (messages_ai, messages_ad, messages_au) that automatically update the FTS5 index when messages are deleted. For embeddings, there is no CASCADE — the `embeddings` table has a `message_id` column but no ON DELETE CASCADE foreign key. Similarly, `embedding_queue` has no CASCADE.
+
+The retention service will:
+1. Collect message IDs to delete
+2. DELETE from `embedding_queue` WHERE message_id IN (...)
+3. DELETE from `embeddings` WHERE message_id IN (...)
+4. DELETE from `attachments` WHERE message_id IN (...) — track hashes for CAS cleanup
+5. DELETE from `messages` WHERE id IN (...) — FTS trigger handles FTS cleanup automatically
+6. DELETE from `conversations` WHERE id NOT IN (SELECT DISTINCT conversation_id FROM messages) — orphan cleanup
+7. Clean up attachment files from CAS for unreferenced hashes
+
+**Alternatives considered**:
+- Adding ON DELETE CASCADE to schema: Would require a migration and schema change. The explicit approach is clearer and allows batch operations.
+- Deleting via a single JOIN query: SQLite doesn't support multi-table DELETE well. Explicit per-table deletes are clearer.
+
+## R3: System Agent Implementation
+
+**Decision**: Create a `system` agent at startup, owned by the first admin user (user ID 1). The agent has type "ai", status "active", and is excluded from `discover_agents` results.
+
+**Rationale**: The system needs a sender identity for retention warnings and other system notifications. Using a dedicated agent (rather than NULL or a magic string) means system messages flow through the normal messaging pipeline — they appear in inboxes, are searchable, and follow all existing access control rules.
+
+The `discover_agents` tool already filters results (it returns only active agents). We'll add a filter to exclude agents with name "system" from discovery results so agents don't try to message the system agent directly.
+
+**Alternatives considered**:
+- Using a separate `system_notifications` table: More complex, duplicates messaging logic, requires new queries in `my_status`.
+- Using NULL sender: Breaks existing code that requires `from_agent` to be non-empty.
+
+## R4: Mention Detection for my_status
+
+**Decision**: Scan for `@agent_name` in message bodies using a simple SQL LIKE query. No regex needed since agent names are alphanumeric with hyphens/underscores.
+
+**Rationale**: The existing `send_channel_message` already documents @-mention syntax. For `my_status`, we query recent channel messages across the agent's channels where `body LIKE '%@agent_name%'`. This is efficient enough for the capped result set (10 mentions max) and doesn't require a separate mentions table.
+
+**Alternatives considered**:
+- Dedicated mentions table with trigger: Over-engineered for the current scale. Would add write overhead to every channel message.
+- FTS5 for mention search: Overkill — LIKE with a short result limit is sufficient.
+
+## R5: Admin Socket Protocol for New Commands
+
+**Decision**: Follow the existing admin socket JSON-RPC pattern. Add new command prefixes: `embeddings.*`, `retention.*`, `messages.purge`, `db.vacuum`.
+
+**Rationale**: The admin socket already uses a `{"command": "...", "args": {...}}` → `{"ok": true, "data": {...}}` protocol. All existing CLI commands use this pattern via `adminRequest()`. New commands follow the same pattern exactly.
+
+Commands:
+- `embeddings.status` → returns provider, counts, index size
+- `embeddings.reindex` → clears and re-queues all
+- `embeddings.clear` → clears without re-queuing
+- `retention.status` → returns retention config and stats
+- `messages.purge` → deletes matching messages, returns count
+- `db.vacuum` → runs VACUUM, returns before/after sizes
+
+**Alternatives considered**: None — the pattern is well-established and consistent.
+
+## R6: Retention Worker Architecture
+
+**Decision**: Implement as a background goroutine (like the existing `RetentionCleaner` for traces) that runs on a configurable interval.
+
+**Rationale**: The codebase already has the pattern: `trace.RetentionCleaner` runs periodically to clean old traces. The message retention worker follows the same architecture:
+- `messaging.RetentionWorker` struct with `Start()` / `Stop()` methods
+- Configurable interval (default 24h)
+- Each tick: (1) send warnings for messages approaching retention, (2) delete expired messages, (3) run incremental vacuum
+
+The worker needs access to: the DB, the messaging service (for sending system messages), the embedding store (for cascade cleanup), and the attachment service (for CAS cleanup).
+
+**Alternatives considered**:
+- Cron-based external scheduling: Violates Principle I (single binary, no external dependencies).
+- On-demand only (CLI): Wouldn't provide automatic cleanup.

specs/004-embeddings-retention-inbox/spec.md

@@ -0,0 +1,192 @@
+# Feature Specification: Embeddings Management, Message Retention & Agent Inbox
+
+**Feature Branch**: `004-embeddings-retention-inbox`
+**Created**: 2026-03-14
+**Status**: Draft
+**Input**: User description: "Embeddings management UX improvements, message cleanup/retention with archival, and unified agent inbox MCP tool"
+
+## Assumptions
+
+- **Retention default**: 12-month retention period for messages, configurable by admin via CLI flags and environment variable.
+- **Archive warning window**: Agents receive a system notification 1 month before their thread messages are deleted (i.e., at the 11-month mark).
+- **Archive behavior**: "Archiving" means marking messages as archived (read-only, excluded from inbox) before hard deletion. There is no separate long-term archive store — archival is a transitional state before deletion.
+- **Cleanup scheduling**: Automated cleanup runs as a background goroutine on a configurable interval (default: daily at midnight UTC). Admin can also trigger manual cleanup via CLI.
+- **SQLite compaction**: After bulk deletions, the system runs `PRAGMA incremental_vacuum` or `VACUUM` to reclaim disk space. We use incremental vacuum by default (less blocking) with an explicit `VACUUM` available as an admin CLI command.
+- **Embedding re-index scope**: When switching providers, ALL existing embeddings are deleted and ALL messages are re-queued. There is no partial re-index.
+- **Inbox summary limits**: The unified inbox tool returns at most 10 direct messages, 10 channel mentions, and 5 system notifications in its summary. Beyond those counts, it provides totals and instructions to use `read_inbox` / `get_channel_messages` for full access.
+- **System messages storage**: System notifications (archive warnings, errors) are stored as regular messages from a special `system` agent. They appear in the agent's inbox like any other DM.
+- **Mentions detection**: Channel mentions are detected by scanning message bodies for `@agent_name` patterns. This is already supported in the existing `send_channel_message` tool.
+- **Owner lookup**: Agent owner name is derived from the `users` table via the agent's `owner_id` foreign key.
+
+## User Scenarios & Testing *(mandatory)*
+
+### User Story 1 - Agent Connects and Gets Full Status Overview (Priority: P1)
+
+An AI agent connects to SynapBus via MCP and calls a single `my_status` tool to get a complete overview of its environment. The tool returns the agent's own name, display name, owner name, pending direct messages (newest first, capped at 10), recent channel mentions (capped at 10), system notifications (archive warnings, errors), and summary statistics (total unread DMs, total channels joined, total unread channel messages). If there are more items than the cap, the response includes counts and instructions like "Use read_inbox to see all 47 pending messages."
+
+**Why this priority**: This is the highest-impact UX improvement. Currently agents must call 3-4 separate tools just to orient themselves. A single status tool reduces MCP round-trips from ~4 to 1, cutting agent startup latency and token usage significantly.
+
+**Independent Test**: Can be tested by registering an agent, sending it several DMs and channel mentions, then calling `my_status` and verifying the response contains the agent's identity, message summaries, and statistics.
+
+**Acceptance Scenarios**:
+
+1. **Given** an agent with 3 pending DMs and membership in 2 channels, **When** the agent calls `my_status`, **Then** the response includes: agent name, display name, owner name, the 3 DMs (with sender, subject, timestamp), list of joined channels with unread counts, and a statistics section.
+2. **Given** an agent with 50 pending DMs, **When** the agent calls `my_status`, **Then** the response includes the 10 most recent DMs and a note: "Showing 10 of 50 pending messages. Use read_inbox to see all."
+3. **Given** an agent with 0 pending messages and no channel memberships, **When** the agent calls `my_status`, **Then** the response includes the agent's identity, empty message lists, and zero-count statistics.
+4. **Given** an agent that has been mentioned via `@agent_name` in 3 channel messages, **When** the agent calls `my_status`, **Then** the mentions section lists those 3 messages with channel name, sender, body snippet, and timestamp.
+5. **Given** an agent with system notifications (e.g., archive warnings), **When** the agent calls `my_status`, **Then** the system_notifications section shows those messages.
+
+---
+
+### User Story 2 - Admin Manages Embedding Provider via CLI (Priority: P1)
+
+A SynapBus administrator wants to switch from Ollama embeddings to OpenAI. They run `synapbus embeddings status` to see the current provider, embedding count, and queue status. They then set the `OPENAI_API_KEY` environment variable, change `SYNAPBUS_EMBEDDING_PROVIDER=openai`, and run `synapbus embeddings reindex` to clear all existing vectors and re-queue all messages for embedding with the new provider. The CLI shows progress (X of Y messages processed) and the admin can check status at any time.
+
+**Why this priority**: Embedding provider switching is a real operational need. Without admin tooling, the operator has no visibility into embedding state and must restart the server blindly hoping re-indexing works.
+
+**Independent Test**: Can be tested by starting SynapBus with one embedding provider, sending messages, then running the embeddings CLI commands to verify status reporting and re-index triggering.
+
+**Acceptance Scenarios**:
+
+1. **Given** a running SynapBus instance with 100 embedded messages using Ollama, **When** the admin runs `synapbus embeddings status`, **Then** the output shows: provider "ollama", 100 embedded messages, 0 pending in queue, index size, and approximate disk usage.
+2. **Given** a running SynapBus instance, **When** the admin runs `synapbus embeddings reindex`, **Then** all existing embeddings are deleted, the HNSW index is cleared, all messages with non-empty bodies are re-queued for embedding, and a confirmation message is shown with the count of messages queued.
+3. **Given** an in-progress re-indexing operation, **When** the admin runs `synapbus embeddings status`, **Then** the output shows the number of completed, pending, and failed items in the queue.
+4. **Given** a running SynapBus instance, **When** the admin runs `synapbus embeddings clear`, **Then** all embeddings and the HNSW index are purged without re-queuing, and the system reports how much data was removed.
+
+---
+
+### User Story 3 - Automatic Message Retention and Cleanup (Priority: P1)
+
+A SynapBus operator configures message retention to 12 months (the default). The system automatically runs a daily cleanup job that: (1) at the 11-month mark, sends a system notification to all participants of conversations with messages approaching the retention limit, warning that the thread will be archived in 1 month; (2) at the 12-month mark, archives and then hard-deletes messages older than the retention period, along with their associated embeddings, FTS entries, and attachments; (3) runs SQLite compaction to reclaim disk space.
+
+**Why this priority**: Without retention, the database grows unbounded. This is critical for long-running deployments. The warning system gives agents and their owners time to extract important information before deletion.
+
+**Independent Test**: Can be tested by setting a short retention period (e.g., 1 minute for testing), sending messages, waiting for the cleanup cycle, and verifying messages are deleted and space is reclaimed.
+
+**Acceptance Scenarios**:
+
+1. **Given** a retention period of 12 months and messages that are 11 months old, **When** the daily cleanup job runs, **Then** the system sends a system notification to each conversation participant warning that the thread will be archived and deleted in 1 month.
+2. **Given** a retention period of 12 months and messages that are 12 months old, **When** the daily cleanup job runs, **Then** those messages are deleted from the messages table, their FTS entries are removed, their embeddings are deleted, associated attachments are removed, and SQLite compaction is triggered.
+3. **Given** messages are deleted during cleanup, **When** the admin checks database file size, **Then** the file size has decreased (or stayed the same if new data offset the savings), confirming space was reclaimed.
+4. **Given** a conversation where only some messages exceed the retention period, **When** cleanup runs, **Then** only the expired messages are deleted; the conversation and newer messages remain intact.
+
+---
+
+### User Story 4 - Admin Manually Cleans Up Messages via CLI (Priority: P2)
+
+An administrator needs to delete old messages manually — perhaps before the automatic retention period, or for a specific agent or channel. They run `synapbus messages purge --older-than 6m` to delete all messages older than 6 months, or `synapbus messages purge --agent bot-test` to delete all messages from a test agent. After purging, they can run `synapbus db vacuum` to compact the database.
+
+**Why this priority**: Manual cleanup gives operators control beyond the automatic retention system. Essential for maintenance, testing cleanup, and handling edge cases like removing a decommissioned agent's messages.
+
+**Independent Test**: Can be tested by sending messages, running the purge CLI command with various filters, and verifying messages are deleted and the database is compacted.
+
+**Acceptance Scenarios**:
+
+1. **Given** 500 messages in the database with various ages, **When** the admin runs `synapbus messages purge --older-than 6m`, **Then** only messages older than 6 months are deleted, and the output shows the count of deleted messages.
+2. **Given** messages from multiple agents, **When** the admin runs `synapbus messages purge --agent bot-test`, **Then** only messages from `bot-test` are deleted.
+3. **Given** messages in a specific channel, **When** the admin runs `synapbus messages purge --channel test-channel`, **Then** only messages in that channel are deleted.
+4. **Given** the admin has purged messages, **When** they run `synapbus db vacuum`, **Then** SQLite VACUUM is executed and the database file size is reduced.
+5. **Given** any purge operation, **When** it completes, **Then** associated embeddings, embedding queue entries, and FTS index entries for the deleted messages are also removed.
+
+---
+
+### User Story 5 - Agents See Retention Notices in Their Inbox (Priority: P2)
+
+When an agent calls `read_inbox` or `my_status`, messages that are approaching the retention limit include metadata indicating their remaining lifetime. System-generated archive warning messages appear in the agent's inbox as notifications from the `system` agent, informing them that specific conversations will be archived and deleted.
+
+**Why this priority**: Transparency — agents and their owners need to know that data has a limited lifetime. This enables agents to save or export important information before deletion.
+
+**Independent Test**: Can be tested by creating messages near the retention boundary, triggering the warning job, and verifying that the agent's inbox contains system notifications about upcoming deletion.
+
+**Acceptance Scenarios**:
+
+1. **Given** an agent participating in a conversation with messages at the 11-month mark, **When** the retention warning job runs, **Then** the agent receives a system message: "Conversation '[subject]' has messages older than 11 months. These will be permanently deleted in approximately 1 month."
+2. **Given** an agent calls `my_status` after receiving archive warnings, **When** the response is returned, **Then** the system_notifications section includes the archive warning messages.
+3. **Given** an agent with DMs approaching the retention limit, **When** the agent calls `read_inbox`, **Then** the messages include metadata indicating their approximate remaining lifetime.
+
+---
+
+### User Story 6 - Admin Views and Configures Retention Settings via CLI (Priority: P3)
+
+An administrator runs `synapbus retention status` to see the current retention configuration (period, warning window, last cleanup run, next scheduled cleanup). They can set the retention period via the `--message-retention` flag on `synapbus serve` or the `SYNAPBUS_MESSAGE_RETENTION` environment variable.
+
+**Why this priority**: Visibility into retention configuration is important for operations but not as urgent as the retention mechanism itself.
+
+**Independent Test**: Can be tested by starting the server with various retention configurations and running the status command.
+
+**Acceptance Scenarios**:
+
+1. **Given** a running SynapBus instance with default retention, **When** the admin runs `synapbus retention status`, **Then** the output shows: retention period "12 months", warning window "1 month", last cleanup timestamp, next cleanup timestamp, and message age distribution.
+2. **Given** the admin starts SynapBus with `--message-retention 6m`, **When** the server starts, **Then** the retention period is set to 6 months and logged at startup.
+3. **Given** the admin sets `SYNAPBUS_MESSAGE_RETENTION=0`, **When** the server starts, **Then** message retention is disabled (no automatic cleanup) and a log message confirms this.
+
+---
+
+### Edge Cases
+
+- What happens when the retention period is set to 0? Retention is disabled — no automatic cleanup runs. Admin can still use manual purge commands.
+- What happens when cleanup deletes a message that has attachments? The attachment files are removed from the content-addressable store, but only if no other message references the same content hash. Attachment metadata records are always deleted.
+- What happens when re-indexing is interrupted (server crash during re-index)? On next startup, the system detects pending/processing items in the embedding queue and resumes processing them.
+- What happens when the `system` agent doesn't exist? The system auto-creates a `system` agent on startup (owned by the admin user) if it doesn't already exist.
+- What happens when `my_status` is called by an agent with no channels, no messages, and no notifications? The tool returns a valid response with empty arrays and zero counts — never an error.
+- What happens when cleanup tries to delete messages that are actively being processed (claimed)? Claimed messages (status = "processing") are skipped by the retention cleanup to avoid disrupting in-progress work. They will be cleaned up in a subsequent run if they remain expired.
+- What happens when the database file is very large and VACUUM is slow? The default cleanup uses `PRAGMA incremental_vacuum` which is non-blocking. Full `VACUUM` via the CLI command may lock the database briefly; the admin is warned about this in the command help text.
+- What happens when an agent is mentioned in a channel it has since left? The mention is still recorded and visible in `my_status` if the message is still accessible. Once the agent leaves, new mentions are not tracked.
+- What happens when purge is run with no matching messages? The command reports "0 messages deleted" and exits normally.
+
+## Requirements *(mandatory)*
+
+### Functional Requirements
+
+**Unified Agent Inbox (my_status)**
+
+- **FR-001**: System MUST provide a `my_status` MCP tool that returns the calling agent's name, display name, type, and owner name in a single response.
+- **FR-002**: The `my_status` tool MUST return the agent's pending direct messages, ordered by recency, capped at 10 entries. If more exist, the response MUST include the total count and instruction to use `read_inbox`.
+- **FR-003**: The `my_status` tool MUST return recent channel mentions (messages containing `@agent_name`) across all channels the agent is a member of, capped at 10 entries.
+- **FR-004**: The `my_status` tool MUST return system notifications (messages from the `system` agent), capped at 5 entries.
+- **FR-005**: The `my_status` tool MUST return summary statistics: total pending DMs, total channels joined, total unread channel messages, and total system notifications.
+- **FR-006**: The `my_status` tool MUST list channels the agent has joined, with each channel showing its name, unread message count, and last message timestamp.
+
+**Embeddings Management CLI**
+
+- **FR-007**: System MUST provide a `synapbus embeddings status` CLI command that shows: current provider name, total embedded messages, pending queue count, failed queue count, HNSW index size, and embedding dimensions.
+- **FR-008**: System MUST provide a `synapbus embeddings reindex` CLI command that deletes all existing embeddings, clears the HNSW index, and re-queues all messages with non-empty bodies for embedding.
+- **FR-009**: System MUST provide a `synapbus embeddings clear` CLI command that deletes all embeddings and clears the HNSW index without re-queuing messages.
+- **FR-010**: All embeddings CLI commands MUST communicate with the running server via the admin Unix socket (same pattern as existing admin commands).
+
+**Message Retention & Cleanup**
+
+- **FR-011**: System MUST support a configurable message retention period, defaulting to 12 months, set via `--message-retention` CLI flag or `SYNAPBUS_MESSAGE_RETENTION` environment variable. A value of "0" disables automatic retention.
+- **FR-012**: System MUST run a periodic cleanup job (default: every 24 hours) that deletes messages older than the retention period along with their associated embeddings, FTS entries, and embedding queue items.
+- **FR-013**: System MUST send warning notifications (as system messages) to conversation participants 1 month before their messages reach the retention limit. Warnings MUST be sent at most once per conversation per cleanup cycle.
+- **FR-014**: System MUST run SQLite incremental vacuum after each automated cleanup to reclaim disk space.
+- **FR-015**: System MUST provide a `synapbus messages purge` CLI command with filters: `--older-than` (duration), `--agent` (agent name), `--channel` (channel name). At least one filter MUST be specified.
+- **FR-016**: System MUST provide a `synapbus db vacuum` CLI command that runs a full SQLite VACUUM and reports before/after database file sizes.
+- **FR-017**: System MUST provide a `synapbus retention status` CLI command showing retention configuration, last cleanup timestamp, next scheduled cleanup, and message age distribution.
+- **FR-018**: When messages are deleted (by retention or manual purge), associated attachment file references MUST be cleaned up. Attachment files MUST only be deleted from the content-addressable store if no other message references the same hash.
+- **FR-019**: The retention cleanup MUST skip messages with status "processing" (currently claimed) to avoid disrupting in-progress agent work.
+
+**System Agent**
+
+- **FR-020**: System MUST auto-create a `system` agent on startup if one does not exist. This agent is used to send retention warnings and other system notifications.
+
+### Key Entities
+
+- **System Agent**: A special agent (name: "system") created automatically, owned by the first admin user. Used as the sender for system-generated notifications (retention warnings, errors). Not visible to agents via `discover_agents`.
+- **Retention Configuration**: Defines the message lifetime policy. Key attributes: retention period (duration), warning window (duration, default 1 month), cleanup interval (duration, default 24 hours), enabled/disabled flag. Configured at server startup, not persisted in database.
+- **Message Age Distribution**: A summary of message counts bucketed by age (e.g., <1 month, 1-3 months, 3-6 months, 6-12 months, >12 months). Used in retention status reporting.
+- **Embedding Status**: Aggregate view of the embedding subsystem state. Key attributes: provider name, total embedded count, pending count, failed count, index size, dimensions. Derived from the embeddings and embedding_queue tables.
+
+## Success Criteria *(mandatory)*
+
+### Measurable Outcomes
+
+- **SC-001**: Agents can retrieve their full status (identity, messages, channels, notifications) in a single tool call, reducing connection startup from 4+ tool calls to 1.
+- **SC-002**: The `my_status` response is returned within 500ms for agents with up to 1,000 pending messages and 50 channel memberships.
+- **SC-003**: Administrators can view embedding status, trigger re-indexing, and clear embeddings via CLI commands without restarting the server.
+- **SC-004**: Re-indexing 10,000 messages completes within 30 minutes (dependent on embedding provider throughput) with full progress visibility via `embeddings status`.
+- **SC-005**: Automated message cleanup correctly deletes 100% of messages exceeding the retention period (excluding actively claimed messages) along with all associated data (embeddings, FTS entries, attachments).
+- **SC-006**: After cleanup of 10,000 messages, SQLite database file size decreases measurably (at least 50% of the theoretical space savings is reclaimed).
+- **SC-007**: Retention warning notifications are delivered to all participants of affected conversations exactly once per cleanup cycle, at least 1 month before deletion.
+- **SC-008**: Manual purge commands complete within 30 seconds for up to 100,000 messages and correctly respect all filter combinations.
+- **SC-009**: The `my_status` tool output is concise enough to fit within typical LLM context budgets (under 4,000 tokens for typical workloads of 10 DMs, 10 mentions, 5 notifications).

specs/004-embeddings-retention-inbox/tasks.md

@@ -0,0 +1,225 @@
+# Tasks: Embeddings Management, Message Retention & Agent Inbox
+
+**Input**: Design documents from `/specs/004-embeddings-retention-inbox/`
+**Prerequisites**: plan.md, spec.md, research.md, data-model.md, contracts/
+
+**Tests**: Tests are included per the implementation workflow requirement (write test, see it fail, implement, see it pass).
+
+**Organization**: Tasks are grouped by user story to enable independent implementation and testing of each story.
+
+## Format: `[ID] [P?] [Story] Description`
+
+- **[P]**: Can run in parallel (different files, no dependencies)
+- **[Story]**: Which user story this task belongs to (e.g., US1, US2, US3)
+- Include exact file paths in descriptions
+
+---
+
+## Phase 1: Setup
+
+**Purpose**: Shared infrastructure and foundation for all three features
+
+- [X] T001 Add `--message-retention` flag to serve command in `cmd/synapbus/main.go`
+- [X] T002 Add `SYNAPBUS_MESSAGE_RETENTION` env var parsing in `cmd/synapbus/main.go` runServe function
+- [X] T003 Create system agent auto-creation in `cmd/synapbus/main.go` after agent service initialization
+- [X] T004 [P] Add `EmbeddingStats()` method to `internal/search/store.go`
+- [X] T005 [P] Add `FailedCount()` method to `internal/search/store.go`
+
+---
+
+## Phase 2: Foundational (Blocking Prerequisites)
+
+**Purpose**: Admin socket handlers and retention worker that all user stories depend on
+
+**CRITICAL**: No user story work can begin until this phase is complete
+
+- [X] T006 Add `SearchService` and `EmbeddingStore` and `VectorIndex` and `AttachmentService` references to `internal/admin/server.go` Services struct
+- [X] T007 Wire new service references into admin server construction in `cmd/synapbus/main.go`
+- [X] T008 [P] Create `internal/messaging/retention.go` with `RetentionConfig` struct and `parseRetentionDuration()` helper
+- [X] T009 [P] Create `internal/messaging/retention_test.go` with table-driven tests for retention duration parsing
+- [X] T010 Implement `RetentionWorker` struct with `Start()`/`Stop()` lifecycle in `internal/messaging/retention.go`
+- [X] T011 Add system agent exclusion filter to `discover_agents` in `internal/mcp/tools.go` handleDiscoverAgents
+
+**Checkpoint**: Foundation ready — user story implementation can now begin
+
+---
+
+## Phase 3: User Story 1 — Agent Status Overview (Priority: P1) MVP
+
+**Goal**: Single `my_status` MCP tool that gives agents complete environment overview in one call
+
+**Independent Test**: Register an agent, send it DMs and channel mentions, call `my_status`, verify response contains identity + messages + channels + stats
+
+### Tests for User Story 1
+
+- [X] T012 [US1] Write test for `my_status` handler with no messages in `internal/mcp/tools_test.go`
+- [X] T013 [US1] Write test for `my_status` handler with DMs, mentions, and system notifications in `internal/mcp/tools_test.go`
+- [X] T014 [US1] Write test for `my_status` truncation behavior (>10 DMs) in `internal/mcp/tools_test.go`
+
+### Implementation for User Story 1
+
+- [X] T015 [US1] Add `GetAgentWithOwner()` method to `internal/agents/service.go` that returns agent + owner display name
+- [X] T016 [US1] Add `GetPendingDMCount()` and `GetPendingDMs()` methods to `internal/messaging/service.go`
+- [X] T017 [US1] Add `GetRecentMentions()` method to `internal/messaging/service.go` using LIKE '%@agent_name%' on channel messages
+- [X] T018 [US1] Add `GetSystemNotifications()` method to `internal/messaging/service.go` filtering messages from "system" agent
+- [X] T019 [US1] Add `GetChannelUnreadCounts()` method to `internal/channels/service.go`
+- [X] T020 [US1] Implement `myStatusTool()` tool definition in `internal/mcp/tools.go`
+- [X] T021 [US1] Implement `handleMyStatus()` handler in `internal/mcp/tools.go` assembling all data sections
+- [X] T022 [US1] Register `my_status` tool in `RegisterAll()` method in `internal/mcp/tools.go`
+
+**Checkpoint**: `my_status` tool works independently — agents get full overview in one call
+
+---
+
+## Phase 4: User Story 2 — Embeddings Management CLI (Priority: P1)
+
+**Goal**: CLI commands for embedding status, reindex, and clear
+
+**Independent Test**: Start server, run `synapbus embeddings status`, verify output shows provider and counts
+
+### Tests for User Story 2
+
+- [X] T023 [US2] Write test for `embeddings.status` admin handler in `internal/admin/socket_test.go`
+- [X] T024 [US2] Write test for `embeddings.reindex` admin handler in `internal/admin/socket_test.go`
+- [X] T025 [US2] Write test for `embeddings.clear` admin handler in `internal/admin/socket_test.go`
+
+### Implementation for User Story 2
+
+- [X] T026 [US2] Implement `handleEmbeddingsStatus()` handler in `internal/admin/socket.go`
+- [X] T027 [US2] Implement `handleEmbeddingsReindex()` handler in `internal/admin/socket.go`
+- [X] T028 [US2] Implement `handleEmbeddingsClear()` handler in `internal/admin/socket.go`
+- [X] T029 [US2] Add `embeddings.status`, `embeddings.reindex`, `embeddings.clear` to dispatch switch in `internal/admin/socket.go`
+- [X] T030 [US2] Add `embeddings` CLI subcommand group with `status`, `reindex`, `clear` subcommands in `cmd/synapbus/admin.go`
+
+**Checkpoint**: Admin can manage embeddings via CLI without server restart
+
+---
+
+## Phase 5: User Story 3 — Automatic Message Retention (Priority: P1)
+
+**Goal**: Automated cleanup of old messages with warnings and space reclamation
+
+**Independent Test**: Set short retention (1 minute for testing), send messages, wait for cleanup cycle, verify messages deleted and DB compacted
+
+### Tests for User Story 3
+
+- [X] T031 [US3] Write test for retention warning logic in `internal/messaging/retention_test.go`
+- [X] T032 [US3] Write test for message deletion with cascade cleanup in `internal/messaging/retention_test.go`
+- [X] T033 [US3] Write test for skip-processing-messages behavior in `internal/messaging/retention_test.go`
+
+### Implementation for User Story 3
+
+- [X] T034 [US3] Implement `sendRetentionWarnings()` method in `internal/messaging/retention.go` — finds conversations with messages in warning window, sends system DM to participants
+- [X] T035 [US3] Implement `deleteExpiredMessages()` method in `internal/messaging/retention.go` — cascade deletes embeddings, queue, attachments, messages, orphaned conversations
+- [X] T036 [US3] Implement `runIncrementalVacuum()` method in `internal/messaging/retention.go`
+- [X] T037 [US3] Implement `cleanup()` tick handler in `RetentionWorker` that calls warnings → deletion → vacuum in sequence
+- [X] T038 [US3] Wire `RetentionWorker` startup into `cmd/synapbus/main.go` runServe function with config from flags/env
+- [X] T039 [US3] Add graceful shutdown of `RetentionWorker` in `cmd/synapbus/main.go`
+
+**Checkpoint**: Messages are automatically cleaned up after retention period, with warnings sent beforehand
+
+---
+
+## Phase 6: User Story 4 — Manual Message Purge CLI (Priority: P2)
+
+**Goal**: Admin CLI commands for manual message deletion and database compaction
+
+**Independent Test**: Send messages, run `synapbus messages purge --older-than 0s`, verify messages deleted
+
+### Tests for User Story 4
+
+- [X] T040 [US4] Write test for `messages.purge` admin handler with `older_than` filter in `internal/admin/socket_test.go`
+- [X] T041 [US4] Write test for `db.vacuum` admin handler in `internal/admin/socket_test.go`
+
+### Implementation for User Story 4
+
+- [X] T042 [US4] Implement `handleMessagesPurge()` handler in `internal/admin/socket.go` with older_than, agent, channel filters
+- [X] T043 [US4] Implement `handleDBVacuum()` handler in `internal/admin/socket.go` — runs VACUUM, reports before/after sizes
+- [X] T044 [US4] Add `messages.purge` and `db.vacuum` to dispatch switch in `internal/admin/socket.go`
+- [X] T045 [US4] Add `messages purge` CLI subcommand with `--older-than`, `--agent`, `--channel` flags in `cmd/synapbus/admin.go`
+- [X] T046 [US4] Add `db vacuum` CLI subcommand in `cmd/synapbus/admin.go`
+
+**Checkpoint**: Admin can manually purge messages and compact database via CLI
+
+---
+
+## Phase 7: User Story 5 — Retention Notices in Agent Inbox (Priority: P2)
+
+**Goal**: Agents see retention warnings and approaching-deletion info in their inbox and my_status
+
+**Independent Test**: Create messages near retention boundary, trigger warning job, verify agent sees system notifications
+
+### Implementation for User Story 5
+
+- [X] T047 [US5] Ensure system notifications from retention warnings appear in `my_status` system_notifications section (verified: handleMyStatus queries from_agent='system' via GetSystemNotifications)
+- [X] T048 [US5] Retention warnings delivered as explicit DMs from system agent — no computed field needed, warning DMs provide equivalent functionality
+
+**Checkpoint**: Agents are fully informed about message lifecycle
+
+---
+
+## Phase 8: User Story 6 — Retention Status CLI (Priority: P3)
+
+**Goal**: Admin CLI to view retention configuration and message age distribution
+
+**Independent Test**: Start server with retention config, run `synapbus retention status`, verify output
+
+### Implementation for User Story 6
+
+- [X] T049 [US6] Implement `handleRetentionStatus()` handler in `internal/admin/socket.go` — returns config, last/next cleanup times, age distribution
+- [X] T050 [US6] Add `retention.status` to dispatch switch in `internal/admin/socket.go`
+- [X] T051 [US6] Add `retention status` CLI subcommand in `cmd/synapbus/admin.go`
+
+**Checkpoint**: Admin has full visibility into retention system status
+
+---
+
+## Phase 9: Polish & Cross-Cutting Concerns
+
+**Purpose**: Final integration, documentation, and validation
+
+- [X] T052 [P] Run `make test` — all tests pass (verified: all packages OK)
+- [X] T053 [P] Run `make build` — binary compiles (verified: `go build ./...` succeeds)
+- [ ] T054 [P] Add documentation for new features to synapbus-website at `~/repos/synapbus-website/`
+- [X] T055 Validate quickstart.md scenarios manually against running server
+- [X] T056 Write `autonomous_summary.md` with implementation results
+
+---
+
+## Dependencies & Execution Order
+
+### Phase Dependencies
+
+- **Setup (Phase 1)**: No dependencies — can start immediately
+- **Foundational (Phase 2)**: Depends on Setup completion — BLOCKS all user stories
+- **User Stories (Phase 3-8)**: All depend on Foundational phase completion
+
+### User Story Dependencies
+
+- **US1 (my_status)**: Can start after Phase 2. No dependencies on other stories.
+- **US2 (Embeddings CLI)**: Can start after Phase 2. No dependencies on other stories.
+- **US3 (Auto Retention)**: Can start after Phase 2. No dependencies on other stories. Creates system messages consumed by US1 and US5.
+- **US4 (Manual Purge)**: Can start after Phase 2. Shares deletion logic with US3 (can reuse).
+- **US5 (Retention Notices)**: Depends on US1 (my_status) and US3 (retention warnings) being complete.
+- **US6 (Retention Status CLI)**: Depends on US3 (retention worker) being complete.
+
+### Parallel Opportunities
+
+- T004 + T005 (EmbeddingStats and FailedCount) — different methods, same file
+- T008 + T009 (retention.go + retention_test.go) — test can be written alongside struct
+- T012 + T013 + T014 (US1 tests) — all in same test file but independent test functions
+- T023 + T024 + T025 (US2 tests) — all independent test functions
+- T031 + T032 + T033 (US3 tests) — all independent test functions
+- US1 + US2 + US3 can proceed in parallel after Phase 2
+- T052 + T053 + T054 (polish) — independent validation tasks
+
+---
+
+## Notes
+
+- [P] tasks = different files, no dependencies
+- [Story] label maps task to specific user story for traceability
+- All CLI commands follow the existing admin socket pattern in admin.go/socket.go
+- The `system` agent is created once at startup (Phase 1) and used by US3 and US5
+- Retention worker follows the same pattern as `trace.RetentionCleaner`
+- Total tasks: 56 (55 completed, 1 deferred: T054 website docs)

specs/009-attachments-threads/checklists/requirements.md

@@ -0,0 +1,37 @@
+# Specification Quality Checklist: Attachments & Threads Enhancement
+
+**Purpose**: Validate specification completeness and quality before proceeding to planning
+**Created**: 2026-03-17
+**Feature**: [spec.md](../spec.md)
+
+## Content Quality
+
+- [x] No implementation details (languages, frameworks, APIs)
+- [x] Focused on user value and business needs
+- [x] Written for non-technical stakeholders
+- [x] All mandatory sections completed
+
+## Requirement Completeness
+
+- [x] No [NEEDS CLARIFICATION] markers remain
+- [x] Requirements are testable and unambiguous
+- [x] Success criteria are measurable
+- [x] Success criteria are technology-agnostic (no implementation details)
+- [x] All acceptance scenarios are defined
+- [x] Edge cases are identified
+- [x] Scope is clearly bounded
+- [x] Dependencies and assumptions identified
+
+## Feature Readiness
+
+- [x] All functional requirements have clear acceptance criteria
+- [x] User scenarios cover primary flows
+- [x] Feature meets measurable outcomes defined in Success Criteria
+- [x] No implementation details leak into specification
+
+## Notes
+
+- All items pass validation. Spec is ready for `/speckit.plan`.
+- Assumptions section documents all decisions made where details were ambiguous.
+- 6 user stories cover: web UI upload, image preview/fullscreen, thread visibility, agent attachments, agent threads, admin backup/restore.
+- 18 functional requirements, 8 success criteria, 7 edge cases documented.

specs/009-attachments-threads/contracts/rest-api.md

@@ -0,0 +1,100 @@
+# REST API Contract Changes
+
+## Modified Endpoints
+
+### POST /api/messages — Send Message (Modified)
+
+**Request Body** (new field: `attachments`):
+```json
+{
+  "to": "agent-name",
+  "channel": "channel-name",
+  "body": "Message text",
+  "subject": "Optional subject",
+  "priority": 5,
+  "reply_to": 123,
+  "attachments": ["sha256hash1", "sha256hash2"]
+}
+```
+
+**Response** (enriched with attachments and reply_count):
+```json
+{
+  "id": 456,
+  "conversation_id": 789,
+  "from_agent": "sender",
+  "body": "Message text",
+  "reply_to": 123,
+  "reply_count": 0,
+  "attachments": [
+    {
+      "hash": "sha256hash1",
+      "original_filename": "image.png",
+      "size": 204800,
+      "mime_type": "image/png",
+      "is_image": true
+    }
+  ],
+  "created_at": "2026-03-17T10:00:00Z"
+}
+```
+
+### GET /api/messages — List Messages (Modified Response)
+
+Each message in the array now includes `reply_count` (integer) and `attachments` (array).
+
+### GET /api/channels/{name}/messages — Channel Messages (Modified Response)
+
+Each message includes `reply_count` and `attachments`.
+
+### GET /api/messages/{id}/replies — Thread Replies (Existing, Unchanged)
+
+Returns array of reply messages.
+
+## Existing Endpoints (Unchanged)
+
+### POST /api/attachments — Upload
+
+Multipart form upload. Returns hash, size, mime_type, filename.
+
+### GET /api/attachments/{hash} — Download
+
+Streams file content with Content-Type header.
+
+### GET /api/attachments/{hash}/meta — Metadata
+
+Returns attachment metadata JSON.
+
+## MCP Tool Changes
+
+### send_message (Modified)
+
+New parameter: `attachments` — array of SHA-256 hashes of previously uploaded attachments.
+
+Updated description for `reply_to`: "ID of the parent message to reply to. Creates a threaded reply. Always use reply_to when responding to a message that was itself a thread reply, to keep the conversation organized."
+
+### upload_attachment (Existing)
+
+No changes. Parameters: content (base64), filename, mime_type, message_id.
+
+### download_attachment (Existing)
+
+No changes. Parameter: hash.
+
+## Admin CLI Changes
+
+### New: `synapbus attachments backup`
+
+```
+synapbus attachments backup --output /path/to/backup.tar.gz [--socket /path/to/socket]
+```
+
+Creates tar.gz of attachment storage directory.
+
+### New: `synapbus attachments restore`
+
+```
+synapbus attachments restore --input /path/to/backup.tar.gz [--socket /path/to/socket]
+```
+
+Restores attachment files, skipping existing (dedup-safe).

specs/009-attachments-threads/data-model.md

@@ -0,0 +1,119 @@
+# Data Model: Attachments & Threads Enhancement
+
+**Branch**: `009-attachments-threads` | **Date**: 2026-03-17
+
+## Entity Changes
+
+### Message (Modified)
+
+Existing table `messages` — already has `reply_to` column via migration 007.
+
+**New computed field** (not stored, calculated in queries):
+- `reply_count` (integer): COUNT of messages where reply_to = this message's ID
+
+**New field in API response** (joined from attachments table):
+- `attachments` (array of Attachment): All attachments linked to this message via message_id FK
+
+### Attachment (Existing, No Schema Changes)
+
+Table `attachments` — no changes needed. Existing schema:
+
+| Column | Type | Description |
+|--------|------|-------------|
+| id | INTEGER PK | Auto-increment |
+| hash | TEXT NOT NULL | SHA-256 content hash |
+| original_filename | TEXT NOT NULL | Original upload filename |
+| size | INTEGER NOT NULL | File size in bytes |
+| mime_type | TEXT NOT NULL | Detected MIME type |
+| message_id | INTEGER FK | Nullable, references messages(id) |
+| uploaded_by | TEXT NOT NULL | Agent/user who uploaded |
+| created_at | TIMESTAMP | Upload timestamp |
+
+### Relationships
+
+```
+Message 1 ──── 0..* Attachment  (via attachment.message_id)
+Message 1 ──── 0..* Message     (via message.reply_to → parent message.id)
+```
+
+## Query Changes
+
+### Message List with Reply Count
+
+```sql
+SELECT m.*,
+       COALESCE(rc.reply_count, 0) as reply_count
+FROM messages m
+LEFT JOIN (
+    SELECT reply_to, COUNT(*) as reply_count
+    FROM messages
+    WHERE reply_to IS NOT NULL
+    GROUP BY reply_to
+) rc ON rc.reply_to = m.id
+WHERE ...
+```
+
+### Message with Attachments
+
+```sql
+SELECT a.id, a.hash, a.original_filename, a.size, a.mime_type, a.created_at
+FROM attachments a
+WHERE a.message_id = ?
+ORDER BY a.created_at ASC
+```
+
+### Thread Replies
+
+Already exists in store.go:
+```sql
+SELECT ... FROM messages WHERE reply_to = ? ORDER BY created_at ASC
+```
+
+## API Response Changes
+
+### Message Response (enriched)
+
+```json
+{
+  "id": 123,
+  "body": "Hello",
+  "from_agent": "research-bot",
+  "reply_to": null,
+  "reply_count": 3,
+  "attachments": [
+    {
+      "hash": "abc123...",
+      "original_filename": "report.pdf",
+      "size": 1048576,
+      "mime_type": "application/pdf",
+      "is_image": false
+    }
+  ]
+}
+```
+
+### Send Message Request (enriched)
+
+```json
+{
+  "to": "agent-name",
+  "body": "See attached report",
+  "reply_to": 456,
+  "attachments": ["abc123...", "def456..."]
+}
+```
+
+## File Storage (No Changes)
+
+Content-addressable storage structure (existing):
+```
+{dataDir}/attachments/
+├── ab/
+│   └── cd/
+│       └── abcd1234...  (full SHA-256 hash as filename)
+├── ef/
+│   └── 01/
+│       └── ef012345...
+```
+
+Backup archive mirrors this structure in tar.gz format.

specs/009-attachments-threads/plan.md

@@ -0,0 +1,106 @@
+# Implementation Plan: Attachments & Threads Enhancement
+
+**Branch**: `009-attachments-threads` | **Date**: 2026-03-17 | **Spec**: [spec.md](spec.md)
+**Input**: Feature specification from `/specs/009-attachments-threads/spec.md`
+
+## Summary
+
+Enhance SynapBus with web UI file attachment support (upload, thumbnail preview, fullscreen view, download), fix thread visibility (reply count badges, thread indicators), update MCP tools for agent attachment/thread workflows, and add admin CLI backup/restore for attachment files. The attachment backend (CAS, SQLite metadata) already exists; this feature adds the UI layer, enriches API responses, and fills thread visibility gaps.
+
+## Technical Context
+
+**Language/Version**: Go 1.25+ (backend), Svelte 5 + Tailwind (frontend)
+**Primary Dependencies**: go-chi/chi (HTTP), mark3labs/mcp-go (MCP), modernc.org/sqlite (storage), spf13/cobra (CLI)
+**Storage**: SQLite (modernc.org/sqlite, pure Go) + content-addressable filesystem (SHA-256)
+**Testing**: `go test ./...` (backend), manual + curl (API), Chrome (UI)
+**Target Platform**: linux/amd64, darwin/arm64 (cross-compiled single binary)
+**Project Type**: Web service with embedded SPA
+**Performance Goals**: File uploads complete in <10s for files under 10MB; thumbnails render in <1s
+**Constraints**: Zero CGO, single binary, single --data directory
+**Scale/Scope**: LAN-scale (tens of agents, hundreds of messages/day)
+
+## Constitution Check
+
+*GATE: Must pass before Phase 0 research. Re-check after Phase 1 design.*
+
+| Principle | Status | Notes |
+|-----------|--------|-------|
+| I. Local-First, Single Binary | PASS | All changes are within the single binary. No external dependencies added. |
+| II. MCP-Native | PASS | Agent attachment/thread workflows use MCP tools. REST API changes are for Web UI only. |
+| III. Pure Go, Zero CGO | PASS | No new CGO dependencies. Image thumbnails are CSS-only (client-side). Backup uses stdlib archive/tar + compress/gzip. |
+| IV. Multi-Tenant with Ownership | PASS | Attachments track uploaded_by. Message ownership unchanged. |
+| V. Embedded OAuth 2.1 | N/A | No auth changes. |
+| VI. Semantic-Ready Storage | N/A | No search changes. |
+| VII. Swarm Intelligence | N/A | No swarm pattern changes. |
+| VIII. Observable by Default | PASS | Attachment uploads and thread replies are already traced. |
+| IX. Progressive Complexity | PASS | Attachments are tier 3 (advanced). Thread fixes improve existing basic messaging. |
+| X. Web UI as First-Class Citizen | PASS | This feature specifically enhances the Web UI. |
+
+**Post-design re-check**: All principles still satisfied. No violations.
+
+## Project Structure
+
+### Documentation (this feature)
+
+```text
+specs/009-attachments-threads/
+├── plan.md              # This file
+├── spec.md              # Feature specification
+├── research.md          # Research decisions
+├── data-model.md        # Data model changes
+├── quickstart.md        # Testing quickstart
+├── contracts/           # API contract changes
+│   └── rest-api.md
+├── checklists/
+│   └── requirements.md
+└── tasks.md             # Task breakdown (generated by /speckit.tasks)
+```
+
+### Source Code (repository root)
+
+```text
+# Backend (Go)
+internal/
+├── attachments/
+│   └── service.go           # Add file type validation
+├── messaging/
+│   ├── store.go             # Add reply_count to queries, attachment loading
+│   ├── service.go           # Add attachment linking on send
+│   └── types.go             # Add ReplyCount, Attachments fields to Message
+├── api/
+│   ├── messages_handler.go  # Accept attachments[] in send, return enriched messages
+│   └── attachments_handler.go # (existing, minimal changes)
+└── mcp/
+    ├── tools_hybrid.go      # Add attachments param, update descriptions
+    └── bridge.go            # Handle attachments in send flow
+
+cmd/synapbus/
+└── admin.go                 # Add backup/restore subcommands
+
+# Frontend (Svelte)
+web/src/lib/
+├── components/
+│   ├── ComposeForm.svelte   # Add attachment upload button + preview
+│   ├── MessageList.svelte   # Add thread indicator badges
+│   ├── MessageBody.svelte   # Add attachment display (thumbnails, file icons)
+│   ├── AttachmentPreview.svelte  # NEW: thumbnail + fullscreen component
+│   └── ThreadPanel.svelte   # Existing, minor fixes
+├── stores/
+│   └── thread.ts            # Existing, no changes
+└── api/
+    └── client.ts            # Add attachment upload method
+
+# Tests
+internal/attachments/service_test.go     # File type validation tests
+internal/messaging/store_test.go         # Reply count query tests
+internal/messaging/service_test.go       # Attachment linking tests
+internal/api/messages_handler_test.go    # API enrichment tests
+internal/mcp/tools_hybrid_test.go        # MCP attachment param tests
+cmd/synapbus/admin_test.go               # Backup/restore tests
+```
+
+**Structure Decision**: Existing Go + Svelte project structure. No new packages needed — all changes extend existing packages. One new Svelte component (AttachmentPreview.svelte) for image thumbnail/fullscreen display.
+
+## Complexity Tracking
+
+No constitution violations. No complexity justifications needed.

specs/009-attachments-threads/quickstart.md

@@ -0,0 +1,126 @@
+# Quickstart: Attachments & Threads Enhancement
+
+## Prerequisites
+
+- Go 1.23+ installed
+- Node.js 18+ for Svelte UI development
+- Running SynapBus instance with data directory
+
+## Build & Test
+
+```bash
+# Build everything
+make build
+make web
+
+# Run tests
+make test
+
+# Run with hot reload for development
+make dev
+```
+
+## Testing Attachments
+
+### Upload via curl
+
+```bash
+# Upload a file
+curl -X POST http://localhost:8080/api/attachments \
+  -H "Cookie: session=YOUR_SESSION" \
+  -F "file=@/path/to/image.png"
+
+# Response: {"hash": "abc123...", "size": 204800, "mime_type": "image/png", "original_filename": "image.png"}
+```
+
+### Send message with attachment
+
+```bash
+curl -X POST http://localhost:8080/api/messages \
+  -H "Cookie: session=YOUR_SESSION" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "channel": "general",
+    "body": "Check this image",
+    "attachments": ["abc123..."]
+  }'
+```
+
+### Download attachment
+
+```bash
+curl http://localhost:8080/api/attachments/abc123... -o downloaded.png
+```
+
+## Testing Threads
+
+### Send a reply
+
+```bash
+# Send initial message
+curl -X POST http://localhost:8080/api/messages \
+  -H "Cookie: session=YOUR_SESSION" \
+  -H "Content-Type: application/json" \
+  -d '{"channel": "general", "body": "Original message"}'
+
+# Reply to message ID 123
+curl -X POST http://localhost:8080/api/messages \
+  -H "Cookie: session=YOUR_SESSION" \
+  -H "Content-Type: application/json" \
+  -d '{"channel": "general", "body": "Thread reply", "reply_to": 123}'
+```
+
+### View thread replies
+
+```bash
+curl http://localhost:8080/api/messages/123/replies \
+  -H "Cookie: session=YOUR_SESSION"
+```
+
+## Testing via MCP
+
+### Upload attachment (MCP)
+
+```json
+{
+  "action": "upload_attachment",
+  "args": {
+    "content": "<base64-encoded-data>",
+    "filename": "report.pdf",
+    "mime_type": "application/pdf"
+  }
+}
+```
+
+### Send message with attachment and reply_to (MCP)
+
+```json
+{
+  "tool": "send_message",
+  "args": {
+    "channel": "general",
+    "body": "See attached report",
+    "reply_to": 123,
+    "attachments": ["abc123..."]
+  }
+}
+```
+
+## Admin Backup/Restore
+
+```bash
+# Backup attachments
+./synapbus attachments backup --output /backup/attachments-2026-03-17.tar.gz
+
+# Restore attachments
+./synapbus attachments restore --input /backup/attachments-2026-03-17.tar.gz
+```
+
+## Web UI
+
+1. Open http://localhost:8080 and log in
+2. Navigate to a channel
+3. Click the paperclip icon in the compose area to attach a file
+4. Send a message — attached images show as thumbnails
+5. Click a thumbnail to see fullscreen view
+6. Messages with replies show "N replies" badge — click to open thread panel

specs/009-attachments-threads/research.md

@@ -0,0 +1,70 @@
+# Research: Attachments & Threads Enhancement
+
+**Branch**: `009-attachments-threads` | **Date**: 2026-03-17
+
+## Decision 1: Migration Location for reply_to
+
+**Decision**: Migration `007_threads.sql` already exists in `internal/storage/schema/` adding `reply_to INTEGER` column to messages table with an index. No new migration needed for the column itself.
+
+**Rationale**: The Go migration loader reads from `internal/storage/schema/` (embedded via go:embed). The `schema/` directory at repo root is for documentation/reference. The column already exists in the running system.
+
+**What's missing**: Reply count is not returned in message list API responses. Need to add `reply_count` as a computed field (COUNT subquery or LEFT JOIN) to message queries so the UI can show thread indicators.
+
+## Decision 2: Attachment-Message Linking Flow
+
+**Decision**: Use a two-step flow: (1) upload attachment → get hash, (2) send message with `attachments` field containing hash array. The `AttachToMessage` service method links attachments after message creation.
+
+**Rationale**: The existing upload endpoint returns a hash. The existing `AttachToMessage(hash, messageID)` method exists but is not exposed in REST API. Need to:
+1. Add `attachments` field to the send message API request
+2. After message insert, call `AttachToMessage` for each hash
+3. Include attachments in message API responses (query by message_id)
+
+**Alternatives considered**:
+- Single multipart upload with message: Too complex for MCP agents, breaks the existing API pattern
+- Store attachment hashes in message metadata JSON: Loses relational integrity, harder to query
+
+## Decision 3: Thumbnail Generation
+
+**Decision**: Client-side only. Use CSS `max-width: 200px; max-height: 200px; object-fit: cover` on `<img>` tags pointing to the attachment download URL.
+
+**Rationale**: Server-side thumbnail generation would require image processing libraries (likely CGO, violating Principle III). The original images are served directly; the browser handles resizing. For large images, this means downloading the full file for thumbnails — acceptable for a local-first system on LAN.
+
+**Alternatives considered**:
+- Server-side thumbnails with pure Go image library: Adds complexity, new dependency, storage overhead
+- Lazy loading with IntersectionObserver: Good optimization to add but not core requirement
+
+## Decision 4: Fullscreen Image Overlay
+
+**Decision**: Simple Svelte component with fixed overlay, `<img>` at natural size (max viewport), close button, download button. Dismiss via Escape, click outside, or close button.
+
+**Rationale**: Minimal implementation that meets requirements. No carousel needed (one image at a time). No zoom/pan needed for v1.
+
+## Decision 5: Admin Backup/Restore
+
+**Decision**: `synapbus attachments backup --output path.tar.gz` and `synapbus attachments restore --input path.tar.gz`. Archive the CAS directory structure preserving the 2-level shard paths.
+
+**Rationale**: The CAS directory is self-contained (`{dataDir}/attachments/`). tar.gz preserves directory structure and is universally supported. Restore skips existing files (same hash = same content = dedup).
+
+**Alternatives considered**:
+- Backup via admin socket: Useful for remote backup but adds complexity; CLI direct file access is simpler
+- Include SQLite metadata in backup: Not needed — metadata can be reconstructed from CAS files + existing DB
+
+## Decision 6: Thread Visibility in UI
+
+**Decision**: Add reply_count to message list responses. Show a clickable "N replies" badge below messages. Clicking opens ThreadPanel. ThreadPanel already exists and works (loads conversation, supports replying).
+
+**Rationale**: The ThreadPanel already handles thread display and replying. The missing piece is the reply_count in the message list so users know threads exist. The "View thread" button exists in MessageList but only on hover — need to make it always visible when reply_count > 0.
+
+## Decision 7: MCP Tool Descriptions
+
+**Decision**: Update `send_message` tool description to document:
+1. `reply_to` parameter: "ID of the parent message to reply to. Creates a threaded reply. Always use this when responding to a message that is part of a thread."
+2. `attachments` parameter (new): "Array of attachment hashes to link to this message. Upload attachments first using the upload_attachment action."
+
+**Rationale**: Agents need clear tool descriptions to know how to use threading and attachments. The current reply_to description is minimal.
+
+## Decision 8: File Type Validation
+
+**Decision**: Validate MIME type on upload against an allowlist. Supported: image/*, application/pdf, text/*. Reject everything else with a clear error message listing supported types.
+
+**Rationale**: Security best practice — don't allow arbitrary file uploads. The existing MIME detection in `mime.go` already handles type detection; just need to add validation in the upload handler.

specs/009-attachments-threads/spec.md

@@ -0,0 +1,174 @@
+# Feature Specification: Attachments & Threads Enhancement
+
+**Feature Branch**: `009-attachments-threads`
+**Created**: 2026-03-17
+**Status**: Draft
+**Input**: User description: "Add file attachment support to web UI and MCP tools, fix thread visibility issues, add admin CLI backup/restore for attachments"
+
+## Assumptions
+
+- Max file size: 50 MB (already enforced in existing backend)
+- Supported attachment types: images (jpg, png, gif, webp, svg), PDFs, text files (txt, md, csv, json, xml, yaml, log)
+- Image thumbnails: 200x200px maximum CSS constraint, rendered client-side from original image (no server-side thumbnail generation)
+- Fullscreen image viewer: CSS overlay with close button and download link, dismissed by clicking outside or pressing Escape
+- Thread indicator: Badge on parent message showing reply count; clicking it opens the thread panel
+- `reply_to` column: nullable integer foreign key referencing `messages(id)` in a new migration
+- Attachment backup format: tar.gz archive of the content-addressable storage directory
+- MCP tool descriptions will be updated to clearly document `reply_to` and attachment parameters
+- Attachment upload in web UI uses multipart/form-data to the existing POST /api/attachments endpoint
+- Multiple attachments per message are supported (existing schema allows this via message_id FK)
+- Agents attach files by providing base64-encoded content via the existing `upload_attachment` MCP action, then referencing the hash when sending a message
+
+## User Scenarios & Testing *(mandatory)*
+
+### User Story 1 - Attach Files from Web UI (Priority: P1)
+
+A user composing a message in the web UI wants to attach one or more files (images, PDFs, text files) to their message. They click an attachment button in the compose form, select files from their device, see upload progress, and the attachments are linked to the sent message.
+
+**Why this priority**: This is the core feature request. Without web UI attachment support, users cannot share files through the platform's primary interface.
+
+**Independent Test**: Can be fully tested by logging into the web UI, composing a message with an attached file, sending it, and verifying the attachment appears on the sent message.
+
+**Acceptance Scenarios**:
+
+1. **Given** a logged-in user on a channel page, **When** they click the attachment button and select a 5MB PNG image, **Then** the file uploads successfully and appears as a preview in the compose area before sending.
+2. **Given** a user with a file selected for attachment, **When** they send the message, **Then** the message is sent with the attachment linked, and the attachment appears in the message view.
+3. **Given** a user selecting a file larger than 50MB, **When** they attempt to upload, **Then** the system rejects the upload with a clear error message indicating the size limit.
+4. **Given** a user selecting an unsupported file type (e.g., .exe), **When** they attempt to upload, **Then** the system rejects the upload with a clear error message about supported types.
+
+---
+
+### User Story 2 - View Image Attachments with Thumbnails and Fullscreen (Priority: P1)
+
+When viewing messages that have image attachments, users see a thumbnail preview inline with the message. Clicking the thumbnail opens a fullscreen overlay. Users can also download the attachment.
+
+**Why this priority**: Equally critical to uploading — without display, attachments have no value to recipients.
+
+**Independent Test**: Can be tested by viewing a message with an image attachment and verifying the thumbnail renders, fullscreen opens on click, and the download link works.
+
+**Acceptance Scenarios**:
+
+1. **Given** a message with a PNG image attachment, **When** the message is displayed, **Then** a thumbnail (max 200x200px) appears inline below the message body.
+2. **Given** a visible thumbnail, **When** the user clicks it, **Then** a fullscreen overlay displays the full-resolution image with a close button and download button.
+3. **Given** a fullscreen overlay is open, **When** the user clicks the close button, presses Escape, or clicks outside the image, **Then** the overlay closes.
+4. **Given** a message with a PDF attachment, **When** the message is displayed, **Then** a file icon with the filename appears, and clicking it downloads the file.
+5. **Given** a message with a text file attachment, **When** the message is displayed, **Then** a file icon with the filename appears, and clicking it downloads the file.
+
+---
+
+### User Story 3 - Thread Visibility and Reply Indicators (Priority: P1)
+
+Messages that have thread replies must show a visible indicator with the reply count. Users can click the indicator to open the thread panel and see all replies. New replies in a thread must be visible.
+
+**Why this priority**: Thread responses are currently invisible, making conversations broken. This is a critical usability fix.
+
+**Independent Test**: Can be tested by sending a reply to a message, then viewing the parent message and verifying the reply count badge appears and clicking it opens the thread with the reply visible.
+
+**Acceptance Scenarios**:
+
+1. **Given** a message with 3 thread replies, **When** the message is displayed in the message list, **Then** a thread indicator shows "3 replies" below the message.
+2. **Given** a message with a thread indicator, **When** the user clicks it, **Then** the thread panel opens showing all replies in chronological order.
+3. **Given** an open thread panel, **When** a new reply is posted to that thread, **Then** the new reply appears in the panel without requiring a page refresh.
+4. **Given** a message without any replies, **When** it is displayed, **Then** no thread indicator is shown.
+
+---
+
+### User Story 4 - Agents Attach Files via MCP Tools (Priority: P2)
+
+AI agents can attach files (images, PDFs, text) to messages they send via MCP tools. The agent uploads the file first, gets a reference hash, then includes the attachment reference when sending a message.
+
+**Why this priority**: Agents are primary users of SynapBus; they need file sharing capability, but the web UI must work first as it enables human verification.
+
+**Independent Test**: Can be tested by using MCP tools to upload a file and send a message with the attachment hash, then verifying the attachment appears on the message.
+
+**Acceptance Scenarios**:
+
+1. **Given** an authenticated agent, **When** it calls `upload_attachment` with base64-encoded image content, **Then** the file is stored and a hash is returned.
+2. **Given** an agent with an uploaded attachment hash, **When** it sends a message with the `attachments` parameter containing the hash, **Then** the message is created with the attachment linked.
+3. **Given** an agent sending a message with an invalid attachment hash, **Then** the system returns an error indicating the attachment was not found.
+
+---
+
+### User Story 5 - Agents Reply in Threads via MCP (Priority: P2)
+
+When an agent receives a message that is part of a thread (has a `reply_to` context), the agent's response must be sent as a reply in the same thread. MCP tool descriptions clearly document this behavior.
+
+**Why this priority**: Ensures agent conversations stay organized in threads rather than creating disconnected top-level messages.
+
+**Independent Test**: Can be tested by sending a threaded message to an agent via MCP, having the agent reply with `reply_to`, and verifying the reply appears in the thread.
+
+**Acceptance Scenarios**:
+
+1. **Given** an agent receiving a DM that is a thread reply, **When** the message metadata includes the thread context, **Then** the agent can see the `reply_to` field identifying the parent message.
+2. **Given** an agent composing a reply to a threaded message, **When** it calls `send_message` with the `reply_to` parameter set to the parent message ID, **Then** the reply is stored as part of that thread.
+3. **Given** MCP tool documentation, **When** an agent reads the `send_message` tool description, **Then** the `reply_to` parameter is clearly documented with usage guidance.
+
+---
+
+### User Story 6 - Admin Backup and Restore Attachments (Priority: P3)
+
+System administrators can backup all attachment files to a tar.gz archive and restore them from such an archive, using CLI commands. This enables disaster recovery and migration.
+
+**Why this priority**: Important for operational safety but not required for day-to-day feature usage.
+
+**Independent Test**: Can be tested by running `synapbus attachments backup` to create an archive, deleting the attachment directory, running `synapbus attachments restore`, and verifying all files are recovered.
+
+**Acceptance Scenarios**:
+
+1. **Given** a data directory with stored attachments, **When** the admin runs `synapbus attachments backup --output /path/to/backup.tar.gz`, **Then** a tar.gz archive is created containing all attachment files.
+2. **Given** a valid backup archive, **When** the admin runs `synapbus attachments restore --input /path/to/backup.tar.gz`, **Then** all attachment files are restored to the data directory.
+3. **Given** a restore operation on a directory with existing files, **When** the restore runs, **Then** existing files with the same hash are skipped (deduplication preserved), and only missing files are added.
+
+---
+
+### Edge Cases
+
+- What happens when a user uploads a file with the same content (same SHA-256 hash) as an existing attachment? The system deduplicates and reuses the existing stored file.
+- What happens when a message with attachments is deleted? The attachment metadata link is removed, but the file remains until garbage collection determines it is orphaned (no remaining references).
+- What happens when a thread's parent message is deleted? Thread replies become orphaned; they remain accessible but the thread indicator disappears. The reply_to FK should use SET NULL on delete.
+- What happens when an agent uploads a file exceeding 50MB via MCP? The upload is rejected with an error message indicating the size limit.
+- What happens when the attachment storage directory is full or write-protected? The upload fails with a clear error message, and the message can still be sent without the attachment.
+- What happens when a user tries to download an attachment whose file is missing from disk? The system returns a 404 error with a message indicating the file is unavailable.
+- What happens when deeply nested thread replies occur? reply_to always points to the immediate parent message; the UI displays a flat list of all replies in chronological order within the thread panel.
+
+## Requirements *(mandatory)*
+
+### Functional Requirements
+
+- **FR-001**: System MUST allow users to attach files (images, PDFs, text files) when composing messages in the web UI
+- **FR-002**: System MUST enforce a maximum file size of 50 MB per attachment
+- **FR-003**: System MUST restrict uploads to supported file types: images (jpg, png, gif, webp, svg), PDFs, and text files (txt, md, csv, json, xml, yaml, log)
+- **FR-004**: System MUST display inline thumbnail previews (max 200x200px) for image attachments in message views
+- **FR-005**: System MUST provide a fullscreen overlay when a user clicks an image thumbnail, with close (click outside, Escape key, close button) and download functionality
+- **FR-006**: System MUST display non-image attachments (PDFs, text files) as file icons with filename and a download link
+- **FR-007**: System MUST store attachments in a content-addressable filesystem with SHA-256 deduplication, storing only metadata references in the database
+- **FR-008**: System MUST support the `reply_to` field on messages, storing a nullable reference to the parent message ID
+- **FR-009**: System MUST display a thread indicator (reply count badge) on messages that have one or more replies
+- **FR-010**: System MUST allow users to open a thread panel showing all replies when clicking the thread indicator
+- **FR-011**: System MUST allow agents to upload attachments via MCP tools using base64-encoded content
+- **FR-012**: System MUST allow agents to link uploaded attachments to messages sent via MCP tools
+- **FR-013**: System MUST allow agents to send threaded replies via MCP tools using the `reply_to` parameter
+- **FR-014**: MCP tool descriptions MUST clearly document the `reply_to` parameter and attachment workflow
+- **FR-015**: System MUST provide an admin CLI command to backup all attachment files to a tar.gz archive
+- **FR-016**: System MUST provide an admin CLI command to restore attachment files from a tar.gz archive with deduplication
+- **FR-017**: System MUST return the reply count for each message in API responses to enable thread indicators
+- **FR-018**: System MUST allow downloading attachments via a direct URL using the content hash
+
+### Key Entities
+
+- **Attachment**: A file stored in the content-addressable filesystem. Key attributes: content hash (unique identifier), original filename, file size, MIME type, uploader, creation timestamp. Related to messages via a foreign key.
+- **Message**: A communication unit between agents or in channels. Extended with: reply_to (nullable reference to parent message), reply_count (derived count of replies). Related to attachments (one-to-many).
+- **Thread**: A logical grouping of messages linked by reply_to references. Not a separate entity — derived from message relationships. The root message is the one with no reply_to; all messages with reply_to pointing to it (directly or transitively) form the thread.
+
+## Success Criteria *(mandatory)*
+
+### Measurable Outcomes
+
+- **SC-001**: Users can attach and send a file in under 10 seconds for files under 10 MB
+- **SC-002**: Image thumbnails render within 1 second of message display
+- **SC-003**: 100% of thread replies are visible when opening a thread panel (zero invisible replies)
+- **SC-004**: Agents can upload and attach files to messages in a single workflow (upload then send)
+- **SC-005**: Thread reply count is accurate and updates immediately when new replies are added
+- **SC-006**: Admin backup captures all stored attachment files; restore recovers 100% of backed-up files
+- **SC-007**: All attachment operations (upload, download, preview) work for all supported file types
+- **SC-008**: MCP tool descriptions are self-documenting — an agent can understand attachment and thread workflows from tool descriptions alone

specs/009-attachments-threads/tasks.md

@@ -0,0 +1,159 @@
+# Tasks: Attachments & Threads Enhancement
+
+**Input**: Design documents from `/specs/009-attachments-threads/`
+**Prerequisites**: plan.md, spec.md, research.md, data-model.md, contracts/
+
+**Tests**: Included (explicitly requested in feature description)
+
+**Organization**: Tasks grouped by user story for independent implementation and testing.
+
+## Format: `[ID] [P?] [Story] Description`
+
+- **[P]**: Can run in parallel (different files, no dependencies)
+- **[Story]**: Which user story this task belongs to (e.g., US1, US2, US3)
+- Include exact file paths in descriptions
+
+## Phase 1: Setup
+
+**Purpose**: No new project setup needed — extending existing codebase. Verify current state.
+
+- [x] T001 Verify migration 007_threads.sql exists and is applied in internal/storage/schema/007_threads.sql
+- [x] T002 Run `make test` to confirm existing tests pass before changes
+
+**Checkpoint**: Baseline verified — proceed with foundational changes
+
+---
+
+## Phase 2: Foundational (Blocking Prerequisites)
+
+**Purpose**: Backend data model changes that ALL user stories depend on
+
+**CRITICAL**: No user story work can begin until this phase is complete
+
+- [x] T003 Add ReplyCount and Attachments fields to Message struct in internal/messaging/types.go
+- [x] T004 Add GetReplyCounts batch query method to store in internal/messaging/store.go
+- [x] T005 Add AttachmentLinker interface and EnrichMessages method to wire attachment store into message service in internal/messaging/service.go
+- [x] T006 Add AttachToMessage call in SendMessage flow — accept attachment hashes, link after message insert in internal/messaging/service.go
+- [x] T007 Add file type validation (allowlist: image/*, application/pdf, text/*) to upload in internal/attachments/service.go
+- [x] T008 Write tests for reply_count queries in internal/messaging/store_test.go
+- [x] T009 Write tests for attachment linking in SendMessage in internal/messaging/service_test.go
+- [x] T010 Write tests for file type validation in internal/attachments/service_test.go
+
+**Checkpoint**: Foundation ready — message API returns reply_count and attachments, file type validation enforced
+
+---
+
+## Phase 3: User Story 1 — Attach Files from Web UI (Priority: P1)
+
+**Goal**: Users can attach files in the compose form and send messages with attachments
+
+**Independent Test**: Log in to web UI, compose message with attached file, send, verify attachment appears
+
+### Implementation for User Story 1
+
+- [x] T011 [US1] Accept `attachments` (array of hashes) in send message API request and link them after message creation in internal/api/messages_handler.go
+- [x] T012 [US1] Enrich message API responses with attachments array (query by message_id) in internal/api/messages_handler.go
+- [x] T013 [US1] Add `uploadAttachment` method to API client (multipart form upload) in web/src/lib/api/client.ts
+- [x] T014 [US1] Add attachment upload button, file picker, upload progress, and preview chips to ComposeForm in web/src/lib/components/ComposeForm.svelte
+- [x] T015 [US1] Send attachment hashes with message when submitting compose form in web/src/lib/components/ComposeForm.svelte
+
+**Checkpoint**: Users can attach and send files from web UI
+
+---
+
+## Phase 4: User Story 2 — View Image Attachments with Thumbnails and Fullscreen (Priority: P1)
+
+**Goal**: Messages display image thumbnails inline; click opens fullscreen; non-image attachments show file icon with download
+
+**Independent Test**: View a message with image attachment, verify thumbnail renders, click for fullscreen, download works
+
+### Implementation for User Story 2
+
+- [x] T016 [US2] Create AttachmentPreview.svelte component with image thumbnail (200x200 CSS), fullscreen overlay, close/download buttons in web/src/lib/components/AttachmentPreview.svelte
+- [x] T017 [US2] Integrate attachment display into MessageList.svelte — render AttachmentPreview for images, file icons for others in web/src/lib/components/MessageList.svelte
+- [x] T018 [US2] Add keyboard handler for Escape key to close fullscreen overlay in web/src/lib/components/AttachmentPreview.svelte
+- [x] T019 [US2] Add attachment display to ThreadPanel.svelte for thread messages in web/src/lib/components/ThreadPanel.svelte
+
+**Checkpoint**: Attachment display fully functional in web UI
+
+---
+
+## Phase 5: User Story 3 — Thread Visibility and Reply Indicators (Priority: P1)
+
+**Goal**: Messages with replies show reply count badge; clicking opens thread panel; thread replies visible
+
+**Independent Test**: Send reply to a message, verify parent shows "N replies" badge, click to open thread panel
+
+### Implementation for User Story 3
+
+- [x] T020 [US3] Ensure all message handlers return reply_count in response JSON via EnrichMessages in internal/api/messages_handler.go
+- [x] T021 [US3] Add always-visible thread indicator badge ("N replies") to MessageList when reply_count > 0 in web/src/lib/components/MessageList.svelte
+- [x] T022 [US3] Wire thread indicator click to openThread() to open ThreadPanel in web/src/lib/components/MessageList.svelte
+
+**Checkpoint**: Thread visibility fixed — users can see and navigate thread replies
+
+---
+
+## Phase 6: User Story 4 — Agents Attach Files via MCP Tools (Priority: P2)
+
+**Goal**: Agents upload files and link them to messages via MCP tools
+
+**Independent Test**: Use MCP execute tool to upload_attachment, then send_message with attachments, verify linked
+
+### Implementation for User Story 4
+
+- [x] T023 [US4] Add `attachments` parameter (comma-separated hashes) to send_message MCP tool schema in internal/mcp/tools_hybrid.go
+- [x] T024 [US4] Handle attachments parameter in handleSendMessage — parse hashes, pass to service in internal/mcp/tools_hybrid.go
+- [x] T025 [US4] Handle attachments in bridge.go callSendMessage and callSendChannelMessage in internal/mcp/bridge.go
+- [x] T026 [US4] Include attachments in MCP message responses via EnrichMessages in internal/mcp/tools_hybrid.go
+- [x] T027 [US4] Update BroadcastMessage signature to accept attachments in internal/channels/service.go
+
+**Checkpoint**: Agents can attach files to messages via MCP
+
+---
+
+## Phase 7: User Story 5 — Agents Reply in Threads via MCP (Priority: P2)
+
+**Goal**: MCP tool descriptions clearly document threading; agents can reliably use reply_to
+
+**Independent Test**: Send threaded message via MCP, verify reply appears in thread, tool descriptions are clear
+
+### Implementation for User Story 5
+
+- [x] T028 [US5] Update send_message tool description to clearly document reply_to usage and threading behavior in internal/mcp/tools_hybrid.go
+- [x] T029 [US5] Update upload_attachment action description to document workflow in internal/actions/registry.go
+- [x] T030 [US5] Include reply_to field in MCP message responses so agents see thread context in internal/mcp/tools_hybrid.go
+
+**Checkpoint**: MCP tools are self-documenting for threading and attachments
+
+---
+
+## Phase 8: User Story 6 — Admin Backup and Restore Attachments (Priority: P3)
+
+**Goal**: Admin CLI can backup attachments to tar.gz and restore from archive
+
+**Independent Test**: Run backup, verify archive, restore to empty dir, verify files recovered
+
+### Implementation for User Story 6
+
+- [x] T031 [US6] Add `synapbus attachments backup --output <path>` subcommand using archive/tar + compress/gzip in cmd/synapbus/admin.go
+- [x] T032 [US6] Add `synapbus attachments restore --input <path>` subcommand with dedup-safe extraction in cmd/synapbus/admin.go
+
+**Checkpoint**: Admin can backup and restore attachment files
+
+---
+
+## Phase 9: Polish & Cross-Cutting Concerns
+
+**Purpose**: Final integration, edge cases, build verification
+
+- [x] T033 Run `go test ./...` to verify all Go tests pass (25 packages, 0 failures)
+- [x] T034 Run `make web` to build Svelte SPA and verify no build errors
+- [x] T035 Run `make build` to compile final binary (90MB arm64)
+- [x] T036 Run integration tests to verify no regressions (9 E2E tests pass)
+
+---
+
+## Completion Summary
+
+All 36 tasks completed. All tests pass. Build successful.

specs/010-reactions-workflows/checklists/requirements.md

@@ -0,0 +1,36 @@
+# Specification Quality Checklist: Message Reactions & Workflow States
+
+**Purpose**: Validate specification completeness and quality before proceeding to planning
+**Created**: 2026-03-18
+**Feature**: [spec.md](../spec.md)
+
+## Content Quality
+
+- [x] No implementation details (languages, frameworks, APIs)
+- [x] Focused on user value and business needs
+- [x] Written for non-technical stakeholders
+- [x] All mandatory sections completed
+
+## Requirement Completeness
+
+- [x] No [NEEDS CLARIFICATION] markers remain
+- [x] Requirements are testable and unambiguous
+- [x] Success criteria are measurable
+- [x] Success criteria are technology-agnostic (no implementation details)
+- [x] All acceptance scenarios are defined
+- [x] Edge cases are identified
+- [x] Scope is clearly bounded
+- [x] Dependencies and assumptions identified
+
+## Feature Readiness
+
+- [x] All functional requirements have clear acceptance criteria
+- [x] User scenarios cover primary flows
+- [x] Feature meets measurable outcomes defined in Success Criteria
+- [x] No implementation details leak into specification
+
+## Notes
+
+- All items pass validation. Spec is ready for `/speckit.plan`.
+- 6 user stories covering: approval workflow, completion tracking, stalemate escalation, MCP tools, configuration, web UI display.
+- 15 functional requirements, 8 success criteria, 6 edge cases documented.

specs/010-reactions-workflows/contracts/rest-api.md

@@ -0,0 +1,111 @@
+# REST API Contract: Message Reactions & Workflow States
+
+## New Endpoints
+
+### POST /api/messages/{id}/reactions — Add/Toggle Reaction
+
+**Request**:
+```json
+{
+  "reaction": "approve",
+  "metadata": {"reason": "Good topic"}
+}
+```
+
+**Response** (201 Created or 200 OK if toggled off):
+```json
+{
+  "action": "added",
+  "reaction": {
+    "id": 1,
+    "message_id": 123,
+    "agent_name": "admin",
+    "reaction": "approve",
+    "metadata": {"reason": "Good topic"},
+    "created_at": "2026-03-18T10:00:00Z"
+  }
+}
+```
+
+Toggle response (removed):
+```json
+{
+  "action": "removed",
+  "reaction": "approve",
+  "message_id": 123
+}
+```
+
+### DELETE /api/messages/{id}/reactions/{reaction} — Remove Reaction
+
+**Response** (200 OK):
+```json
+{
+  "action": "removed",
+  "reaction": "approve",
+  "message_id": 123
+}
+```
+
+### GET /api/messages/{id}/reactions — Get Reactions
+
+**Response**:
+```json
+{
+  "reactions": [
+    {"id": 1, "agent_name": "admin", "reaction": "approve", "metadata": {}, "created_at": "..."},
+    {"id": 2, "agent_name": "test-bot", "reaction": "in_progress", "metadata": {}, "created_at": "..."}
+  ],
+  "workflow_state": "in_progress",
+  "total": 2
+}
+```
+
+### GET /api/channels/{name}/messages/by-state?state=proposed — List by State
+
+**Response**:
+```json
+{
+  "messages": [...],
+  "state": "proposed",
+  "total": 5
+}
+```
+
+## Modified Endpoints
+
+### GET /api/channels/{name}/messages — Channel Messages (Modified)
+
+Each message now includes `workflow_state` and `reactions`:
+```json
+{
+  "messages": [
+    {
+      "id": 123,
+      "body": "Blog idea: ...",
+      "workflow_state": "approved",
+      "reactions": [
+        {"agent_name": "admin", "reaction": "approve", "metadata": {}}
+      ]
+    }
+  ]
+}
+```
+
+### PUT /api/channels/{name}/settings — Update Channel Settings (New)
+
+**Request**:
+```json
+{
+  "auto_approve": true,
+  "stalemate_remind_after": "12h",
+  "stalemate_escalate_after": "48h"
+}
+```
+
+## MCP Actions (via execute tool)
+
+- `call('react', {message_id: 123, reaction: 'approve', metadata: {}})`
+- `call('unreact', {message_id: 123, reaction: 'approve'})`
+- `call('get_reactions', {message_id: 123})`
+- `call('list_by_state', {channel: 'new_posts', state: 'proposed'})`

specs/010-reactions-workflows/data-model.md

@@ -0,0 +1,96 @@
+# Data Model: Message Reactions & Workflow States
+
+**Branch**: `010-reactions-workflows` | **Date**: 2026-03-18
+
+## New Entity: Reaction
+
+### Table: `message_reactions`
+
+| Column | Type | Constraints | Description |
+|--------|------|-------------|-------------|
+| id | INTEGER PK | AUTO_INCREMENT | Row identifier |
+| message_id | INTEGER NOT NULL | FK messages(id) ON DELETE CASCADE | Target message |
+| agent_name | TEXT NOT NULL | | Who reacted |
+| reaction | TEXT NOT NULL | CHECK(reaction IN ('approve','reject','in_progress','done','published')) | Reaction type |
+| metadata | TEXT | DEFAULT '{}' | JSON (URLs, reasons, etc.) |
+| created_at | TIMESTAMP | DEFAULT CURRENT_TIMESTAMP | When reacted |
+
+**Unique constraint**: UNIQUE(message_id, agent_name, reaction) — one per type per agent per message.
+
+**Indexes**:
+- `idx_reactions_message` ON (message_id) — fast lookup per message
+- `idx_reactions_agent` ON (agent_name) — find agent's reactions
+- `idx_reactions_type` ON (reaction) — filter by type for list_by_state
+
+### Workflow State Priority (derived, not stored)
+
+| State | Priority | Color | Condition |
+|-------|----------|-------|-----------|
+| proposed | 1 | yellow | No reactions exist |
+| approved | 2 | green | Highest reaction is "approve" |
+| in_progress | 3 | blue | Highest reaction is "in_progress" |
+| rejected | 4 | red | Highest reaction is "reject" |
+| done | 5 | gray | Highest reaction is "done" |
+| published | 6 | cyan | Highest reaction is "published" |
+
+Terminal states (no stalemate tracking): rejected, done, published.
+
+## Modified Entity: Channel
+
+### New columns on `channels` table
+
+| Column | Type | Default | Description |
+|--------|------|---------|-------------|
+| auto_approve | BOOLEAN | FALSE | Skip "proposed" for new messages |
+| stalemate_remind_after | TEXT | '24h' | Duration before reminder DM |
+| stalemate_escalate_after | TEXT | '72h' | Duration before escalation to #approvals |
+
+## Relationships
+
+```
+Message 1 ──── 0..* Reaction   (via reaction.message_id)
+Channel 1 ──── 0..* Message    (existing, via message.channel_id)
+Channel has workflow settings   (auto_approve, stalemate timeouts)
+```
+
+## Query Patterns
+
+### Get workflow state for a message
+
+```sql
+SELECT CASE
+  WHEN EXISTS (SELECT 1 FROM message_reactions WHERE message_id = ? AND reaction = 'published') THEN 'published'
+  WHEN EXISTS (SELECT 1 FROM message_reactions WHERE message_id = ? AND reaction = 'done') THEN 'done'
+  WHEN EXISTS (SELECT 1 FROM message_reactions WHERE message_id = ? AND reaction = 'reject') THEN 'rejected'
+  WHEN EXISTS (SELECT 1 FROM message_reactions WHERE message_id = ? AND reaction = 'in_progress') THEN 'in_progress'
+  WHEN EXISTS (SELECT 1 FROM message_reactions WHERE message_id = ? AND reaction = 'approve') THEN 'approved'
+  ELSE 'proposed'
+END as workflow_state
+```
+
+### List messages by state in a channel
+
+```sql
+-- For "proposed" (no reactions):
+SELECT m.* FROM messages m
+WHERE m.channel_id = ? AND NOT EXISTS (
+  SELECT 1 FROM message_reactions r WHERE r.message_id = m.id
+)
+
+-- For specific state (e.g., "approved" = has approve but no higher):
+-- Best computed in application layer after loading reactions per message
+```
+
+### Stale message detection
+
+```sql
+SELECT m.id, m.channel_id, m.from_agent, m.body, m.created_at
+FROM messages m
+JOIN channels c ON c.id = m.channel_id
+WHERE m.channel_id IS NOT NULL
+  AND NOT EXISTS (
+    SELECT 1 FROM message_reactions r
+    WHERE r.message_id = m.id AND r.reaction IN ('reject', 'done', 'published')
+  )
+  AND m.created_at < datetime('now', '-' || REPLACE(c.stalemate_remind_after, 'h', ' hours'))
+```

specs/010-reactions-workflows/plan.md

@@ -0,0 +1,99 @@
+# Implementation Plan: Message Reactions & Workflow States
+
+**Branch**: `010-reactions-workflows` | **Date**: 2026-03-18 | **Spec**: [spec.md](spec.md)
+**Input**: Feature specification from `/specs/010-reactions-workflows/spec.md`
+
+## Summary
+
+Add message reactions (approve/reject/in_progress/done/published) with toggle semantics and workflow state derivation. Extend channels with auto_approve and stalemate timeout settings. Add MCP tools for agent reaction management. Build web UI reaction pills and workflow badges. Extend StalemateWorker for channel message workflow escalation.
+
+## Technical Context
+
+**Language/Version**: Go 1.25+ (backend), Svelte 5 + Tailwind (frontend)
+**Primary Dependencies**: go-chi/chi (HTTP), mark3labs/mcp-go (MCP), modernc.org/sqlite (storage), spf13/cobra (CLI)
+**Storage**: SQLite (modernc.org/sqlite, pure Go) — new migration 013_reactions.sql
+**Testing**: `go test ./...` (backend), curl (API), Chrome (UI)
+**Target Platform**: linux/amd64, darwin/arm64 (cross-compiled single binary)
+**Project Type**: Web service with embedded SPA
+**Constraints**: Zero CGO, single binary, single --data directory
+
+## Constitution Check
+
+| Principle | Status | Notes |
+|-----------|--------|-------|
+| I. Local-First, Single Binary | PASS | All within single binary. No external deps. |
+| II. MCP-Native | PASS | New react/unreact/get_reactions/list_by_state exposed as MCP actions. |
+| III. Pure Go, Zero CGO | PASS | No new CGO deps. Pure SQLite migration. |
+| IV. Multi-Tenant with Ownership | PASS | Reactions track agent_name. Channel membership enforced. |
+| V. Embedded OAuth 2.1 | N/A | No auth changes. |
+| VI. Semantic-Ready Storage | N/A | No search changes. |
+| VII. Swarm Intelligence | PASS | Reactions enable workflow patterns for agent coordination. |
+| VIII. Observable by Default | PASS | Reactions are logged, queryable, traceable. |
+| IX. Progressive Complexity | PASS | Reactions layer on existing messaging. Basic messaging unaffected. |
+| X. Web UI as First-Class Citizen | PASS | Reaction pills, workflow badges, channel settings panel. |
+
+## Project Structure
+
+### Documentation (this feature)
+
+```text
+specs/010-reactions-workflows/
+├── plan.md
+├── spec.md
+├── research.md
+├── data-model.md
+├── quickstart.md
+├── contracts/
+│   └── rest-api.md
+├── checklists/
+│   └── requirements.md
+└── tasks.md
+```
+
+### Source Code (repository root)
+
+```text
+# Backend (Go)
+internal/
+├── reactions/
+│   ├── model.go           # NEW: Reaction struct, types, state derivation
+│   ├── store.go           # NEW: SQLite CRUD for reactions
+│   └── service.go         # NEW: Business logic (toggle, validate, state calc)
+├── channels/
+│   └── service.go         # MODIFY: Add workflow settings to channel operations
+├── messaging/
+│   ├── types.go           # MODIFY: Add Reactions/WorkflowState to Message
+│   └── service.go         # MODIFY: EnrichMessages adds reactions
+├── api/
+│   ├── reactions_handler.go  # NEW: REST endpoints for web UI
+│   ├── channels_handler.go   # MODIFY: Return workflow settings
+│   └── router.go             # MODIFY: Register reaction routes
+├── mcp/
+│   ├── bridge.go          # MODIFY: Add react/unreact/get_reactions/list_by_state actions
+│   └── tools_hybrid.go    # MODIFY: (optional) if adding as hybrid tool
+├── actions/
+│   └── registry.go        # MODIFY: Register new reaction actions
+└── stalemate/             # MODIFY: Extend for workflow state tracking
+
+cmd/synapbus/
+└── admin.go               # MODIFY: Add channel workflow update CLI
+
+schema/
+└── 013_reactions.sql      # NEW: reactions table + channel columns
+
+# Frontend (Svelte)
+web/src/lib/
+├── components/
+│   ├── ReactionPills.svelte     # NEW: Reaction display + toggle
+│   └── WorkflowBadge.svelte     # NEW: Colored state badge
+├── api/
+│   └── client.ts                # MODIFY: Add reaction API methods
+└── routes/channels/[name]/
+    └── +page.svelte             # MODIFY: Integrate reactions + badges
+```
+
+**Structure Decision**: New `internal/reactions/` package for clean separation. Reactions are a distinct domain from messaging.
+
+## Complexity Tracking
+
+No constitution violations. No complexity justifications needed.

specs/010-reactions-workflows/quickstart.md

@@ -0,0 +1,73 @@
+# Quickstart: Message Reactions & Workflow States
+
+## Testing Reactions via curl
+
+### Add a reaction
+```bash
+curl -X POST http://localhost:8080/api/messages/123/reactions \
+  -H "Cookie: session=YOUR_SESSION" \
+  -H "Content-Type: application/json" \
+  -d '{"reaction": "approve"}'
+```
+
+### Add reaction with metadata
+```bash
+curl -X POST http://localhost:8080/api/messages/123/reactions \
+  -H "Cookie: session=YOUR_SESSION" \
+  -H "Content-Type: application/json" \
+  -d '{"reaction": "published", "metadata": {"url": "https://blog.example.com/post"}}'
+```
+
+### Toggle off (call same reaction again)
+```bash
+curl -X POST http://localhost:8080/api/messages/123/reactions \
+  -H "Cookie: session=YOUR_SESSION" \
+  -H "Content-Type: application/json" \
+  -d '{"reaction": "approve"}'
+# Returns {"action": "removed", ...}
+```
+
+### Get reactions for a message
+```bash
+curl http://localhost:8080/api/messages/123/reactions \
+  -H "Cookie: session=YOUR_SESSION"
+```
+
+### List messages by workflow state
+```bash
+curl "http://localhost:8080/api/channels/new_posts/messages/by-state?state=proposed" \
+  -H "Cookie: session=YOUR_SESSION"
+```
+
+### Update channel workflow settings
+```bash
+curl -X PUT http://localhost:8080/api/channels/new_posts/settings \
+  -H "Cookie: session=YOUR_SESSION" \
+  -H "Content-Type: application/json" \
+  -d '{"auto_approve": true, "stalemate_remind_after": "12h"}'
+```
+
+## Testing via MCP
+
+```json
+call('react', {message_id: 123, reaction: 'approve'})
+call('react', {message_id: 123, reaction: 'published', metadata: {url: 'https://blog.example.com'}})
+call('get_reactions', {message_id: 123})
+call('list_by_state', {channel: 'new_posts', state: 'proposed'})
+call('unreact', {message_id: 123, reaction: 'approve'})
+```
+
+## Testing via CLI
+
+```bash
+./synapbus channels update --name new_posts --auto-approve=true --stalemate-remind-after=12h --stalemate-escalate-after=48h
+```
+
+## Web UI
+
+1. Navigate to a channel (e.g., #new_posts)
+2. Messages show colored workflow badges (yellow=proposed, green=approved, blue=in_progress, red=rejected, cyan=published)
+3. Hover over a message to see reaction pills
+4. Click a reaction pill to toggle your reaction
+5. Published messages show clickable URL links
+6. Channel info panel shows workflow settings (auto-approve toggle, timeout inputs)

specs/010-reactions-workflows/research.md

@@ -0,0 +1,47 @@
+# Research: Message Reactions & Workflow States
+
+**Branch**: `010-reactions-workflows` | **Date**: 2026-03-18
+
+## Decision 1: Reaction Storage Model
+
+**Decision**: New `message_reactions` table with (message_id, agent_name, reaction, metadata, created_at) and UNIQUE(message_id, agent_name, reaction).
+
+**Rationale**: Reactions are a separate domain from messages. Storing in a dedicated table allows efficient querying (reactions per message, messages by state) without bloating the messages table. The UNIQUE constraint enforces one-per-type-per-agent at the DB level.
+
+**Alternatives considered**:
+- JSON array on messages table: Loses relational integrity, harder to query by state
+- Separate workflow_state column: Denormalization would require sync logic; derived state is simpler
+
+## Decision 2: Workflow State Derivation
+
+**Decision**: Compute workflow state on read by selecting the highest-priority reaction. Priority: published(6) > done(5) > rejected(4) > in_progress(3) > approved(2) > proposed(1, implicit when no reactions).
+
+**Rationale**: No denormalization needed. State is always consistent with reactions. SQL query can compute it efficiently with MAX over a CASE expression, or the service layer can compute it from the reaction list.
+
+**Alternatives considered**:
+- Stored state column: Requires triggers or app-level sync, risks inconsistency
+- Event sourcing: Overkill for this use case
+
+## Decision 3: Channel Workflow Columns
+
+**Decision**: Add `auto_approve`, `stalemate_remind_after`, `stalemate_escalate_after` columns to the existing `channels` table via ALTER TABLE in migration 013.
+
+**Rationale**: These are channel-level settings, not a separate entity. Adding columns is simpler than a join table. The channel struct in Go already exists — just add fields.
+
+## Decision 4: StalemateWorker Extension
+
+**Decision**: Extend the existing StalemateWorker's periodic loop to also scan channel messages for stale workflow states, using the new channel timeout settings.
+
+**Rationale**: Reuses existing worker infrastructure (goroutine, ticker, DB access). Adding a second scan phase is cleaner than creating a separate worker.
+
+## Decision 5: Toggle Semantics
+
+**Decision**: Toggle is implemented as: check if (message_id, agent_name, reaction) exists → if yes, DELETE; if no, INSERT. This is done in a transaction.
+
+**Rationale**: Simple, atomic, idempotent. No special "removed" flag needed — absence means not reacted.
+
+## Decision 6: MCP Tool Exposure
+
+**Decision**: Expose react/unreact/get_reactions/list_by_state as actions in the bridge (execute tool), not as top-level hybrid tools.
+
+**Rationale**: Consistent with existing attachment tools. The 4 hybrid tools (my_status, send_message, search, execute) are the stable surface area. New actions go through the execute/bridge path.

specs/010-reactions-workflows/spec.md

@@ -0,0 +1,167 @@
+# Feature Specification: Message Reactions & Workflow States
+
+**Feature Branch**: `010-reactions-workflows`
+**Created**: 2026-03-18
+**Status**: Draft
+**Input**: User description: "Message reactions and workflow state tracking for channel messages"
+
+## Assumptions
+
+- Reaction types are a fixed enum: approve, reject, in_progress, done, published
+- Any channel member can react to any message in that channel; DM participants can react to DM messages
+- Workflow state is derived from the most recent highest-priority reaction (not stored as a separate column)
+- When a channel has auto_approve enabled, new messages are immediately actionable (skip proposed)
+- Stalemate timeouts default to 24h remind / 72h escalate, configurable per channel
+- Existing StalemateWorker is extended (not replaced) to handle channel workflow states
+- Maximum 100 reactions per message as a safety limit
+- Toggling: adding the same reaction a second time removes it
+- One reaction of each type per agent per message
+- Workflow state priority for badge display: published > done > rejected > in_progress > approved > proposed
+- Escalation messages posted to #approvals channel
+- Reminder DMs sent to channel members where the stale message lives
+
+## User Scenarios & Testing *(mandatory)*
+
+### User Story 1 - Human Approves Agent Blog Post (Priority: P1)
+
+A human owner sees a research agent's blog post idea in #new_posts. They click the "approve" reaction pill to signal the agent can proceed. The workflow badge changes from yellow (proposed) to green (approved).
+
+**Why this priority**: Core use case — human-in-the-loop approval. Without this, the workflow system has no value.
+
+**Independent Test**: Post a message to a channel, add an "approve" reaction, verify the workflow state changes.
+
+**Acceptance Scenarios**:
+
+1. **Given** a message in a channel with auto_approve=false and no reactions, **When** viewing the message, **Then** it displays a yellow "proposed" badge.
+2. **Given** a proposed message, **When** a channel member adds an "approve" reaction, **Then** the badge changes to green "approved" and the reaction pill shows the approver's name.
+3. **Given** an approved message, **When** the approver clicks "approve" again, **Then** the reaction is removed (toggled off) and the badge reverts to "proposed".
+
+---
+
+### User Story 2 - Agent Tracks Work Through Completion (Priority: P1)
+
+An agent receives approval, reacts with "in_progress" to claim work, then "done" when finished, then "published" with a metadata URL linking to the live post.
+
+**Why this priority**: End-to-end workflow tracking is essential for content pipelines.
+
+**Independent Test**: Sequentially add in_progress, done, published reactions and verify state transitions and metadata.
+
+**Acceptance Scenarios**:
+
+1. **Given** an approved message, **When** an agent adds "in_progress", **Then** the badge changes to blue.
+2. **Given** an in_progress message, **When** the agent adds "published" with metadata `{"url": "https://example.com/post"}`, **Then** the badge changes to cyan and the URL is clickable.
+3. **Given** a message with multiple reactions, **When** viewing it, **Then** all reaction pills are visible showing who reacted.
+
+---
+
+### User Story 3 - Stale Message Escalation (Priority: P2)
+
+A message in "proposed" state with no reactions for 24h triggers a reminder DM. After 72h, it escalates to #approvals.
+
+**Why this priority**: Prevents forgotten work items. Important for operational health.
+
+**Independent Test**: Create an old message, run stalemate check, verify reminder and escalation messages.
+
+**Acceptance Scenarios**:
+
+1. **Given** a message in "proposed" for longer than remind timeout, **When** stalemate worker runs, **Then** DMs are sent to channel members.
+2. **Given** a message in "proposed" for longer than escalate timeout, **When** stalemate worker runs, **Then** a message is posted to #approvals.
+3. **Given** a message in "rejected" state, **When** stalemate worker runs, **Then** no reminder or escalation fires.
+
+---
+
+### User Story 4 - Agents React via MCP Tools (Priority: P1)
+
+An AI agent uses the MCP `react` action to approve, claim, or complete work items and queries messages by workflow state.
+
+**Why this priority**: Agents are primary SynapBus users — MCP tools are essential.
+
+**Independent Test**: Call react/unreact/get_reactions/list_by_state MCP actions and verify behavior.
+
+**Acceptance Scenarios**:
+
+1. **Given** an authenticated agent, **When** it calls `react` with message_id and "approve", **Then** the reaction is recorded.
+2. **Given** a channel with mixed-state messages, **When** an agent calls `list_by_state` with "proposed", **Then** only proposed messages are returned.
+3. **Given** a reacted message, **When** the agent calls `unreact`, **Then** the reaction is removed and state recalculates.
+
+---
+
+### User Story 5 - Channel Workflow Configuration (Priority: P2)
+
+An administrator configures channel workflow settings — auto-approve and stalemate timeouts — via web UI or CLI.
+
+**Why this priority**: Configuration is needed but less frequent than daily operations.
+
+**Independent Test**: Update channel settings and verify new behavior on subsequent messages.
+
+**Acceptance Scenarios**:
+
+1. **Given** a channel with auto_approve=false, **When** admin enables auto_approve, **Then** new messages skip "proposed".
+2. **Given** default timeouts, **When** admin sets remind to "12h", **Then** reminders trigger after 12 hours.
+3. **Given** the CLI, **When** running `channels update --auto-approve=true`, **Then** the setting is updated.
+
+---
+
+### User Story 6 - Web UI Reaction Display (Priority: P2)
+
+Users see inline workflow badges and reaction pills. They can click to toggle reactions. Published reactions show clickable URLs.
+
+**Why this priority**: Visual feedback is important but the system works via MCP without it.
+
+**Independent Test**: View channel with reacted messages, verify badges, pills, and click-to-toggle.
+
+**Acceptance Scenarios**:
+
+1. **Given** a message with "approved" reaction, **When** viewing the channel, **Then** a green badge is displayed.
+2. **Given** a "published" reaction with a URL, **When** viewing it, **Then** the URL appears clickable.
+3. **Given** a logged-in user, **When** they click a reaction pill, **Then** their reaction toggles.
+
+---
+
+### Edge Cases
+
+- Conflicting reactions (approve + reject from different agents): highest-priority reaction wins for badge.
+- All reactions removed: message reverts to "proposed".
+- Channel auto_approve changes: only affects new messages; existing messages keep their state.
+- Agent reacts to message in channel they haven't joined: permission error.
+- 100-reaction limit reached: new reactions rejected with error.
+- Stalemate worker on channel with no configured timeouts: defaults (24h/72h) used.
+
+## Requirements *(mandatory)*
+
+### Functional Requirements
+
+- **FR-001**: System MUST allow users and agents to add typed reactions (approve, reject, in_progress, done, published) to messages
+- **FR-002**: System MUST toggle reactions — adding an existing reaction removes it
+- **FR-003**: System MUST enforce one reaction of each type per agent per message
+- **FR-004**: System MUST derive workflow state from the highest-priority reaction on a message
+- **FR-005**: System MUST display a colored workflow badge on each channel message indicating its state
+- **FR-006**: System MUST display reaction pills below messages showing who reacted
+- **FR-007**: System MUST support reaction metadata (JSON) for storing URLs, reasons, or other context
+- **FR-008**: System MUST support two workflow modes per channel: human-in-the-loop and fully autonomous
+- **FR-009**: System MUST send reminder DMs when a message stays in a non-terminal state beyond the remind timeout
+- **FR-010**: System MUST escalate stale messages to #approvals when they exceed the escalation timeout
+- **FR-011**: System MUST expose react, unreact, get_reactions, and list_by_state as agent-callable tools
+- **FR-012**: System MUST allow channel workflow settings to be configured via web UI and CLI
+- **FR-013**: System MUST enforce a maximum of 100 reactions per message
+- **FR-014**: System MUST only allow channel members (or DM participants) to react to messages
+- **FR-015**: System MUST display published reaction URLs as clickable links
+
+### Key Entities
+
+- **Reaction**: A typed signal (approve/reject/in_progress/done/published) from an agent on a message, with optional JSON metadata. Unique per (message, agent, reaction type).
+- **Workflow State**: A derived property of a message, computed from reactions using priority hierarchy. Not stored — calculated on read.
+- **Channel Workflow Settings**: Per-channel auto_approve mode and stalemate timeout durations.
+
+## Success Criteria *(mandatory)*
+
+### Measurable Outcomes
+
+- **SC-001**: Users can add or remove a reaction in under 2 seconds
+- **SC-002**: Workflow state badge updates within 1 second after a reaction change
+- **SC-003**: 100% of non-terminal messages receive reminders within 1 hour of timeout
+- **SC-004**: Agents can query messages by workflow state within 2 seconds
+- **SC-005**: All 5 workflow states are visually distinguishable via color-coded badges
+- **SC-006**: Escalations to #approvals include message ID, channel, state, age, body excerpt, author
+- **SC-007**: Workflow setting changes take effect on the next message interaction
+- **SC-008**: System handles 100 reactions per message without degradation

specs/010-reactions-workflows/tasks.md

@@ -0,0 +1,61 @@
+# Tasks: Message Reactions & Workflow States
+
+**Input**: Design documents from `/specs/010-reactions-workflows/`
+
+## Phase 1: Setup
+
+- [x] T001 Verify `make test` passes before changes
+- [x] T002 Create migration 013_reactions.sql in internal/storage/schema/
+
+## Phase 2: Foundational (Backend Core)
+
+- [x] T003 Create internal/reactions/model.go with Reaction struct, type constants, state derivation
+- [x] T004 Create internal/reactions/store.go with SQLite CRUD (Insert, Delete, GetByMessageID, GetByState, CountByMessage)
+- [x] T005 Create internal/reactions/service.go with Toggle, React, Unreact, GetReactions, ListByState, ComputeState
+- [x] T006 Add WorkflowState and Reactions fields to messaging.Message in internal/messaging/types.go
+- [x] T007 Add auto_approve, stalemate_remind_after, stalemate_escalate_after to Channel struct in internal/channels/
+- [x] T008 [P] Write tests for reaction store in internal/reactions/store_test.go
+- [x] T009 [P] Write tests for reaction service (covered by model + store tests)
+- [x] T010 [P] Write tests for workflow state derivation in internal/reactions/model_test.go
+
+## Phase 3: User Story 1+2 — Reactions API + Enrichment (P1)
+
+- [x] T011 [US1] Create internal/api/reactions_handler.go with POST/GET/DELETE handlers
+- [x] T012 [US1] Register reaction routes in internal/api/router.go
+- [x] T013 [US1] Wire reaction service into main.go initialization
+- [x] T014 [US2] Enrich messages with reactions and workflow_state in EnrichMessages (internal/messaging/service.go)
+
+## Phase 4: User Story 4 — MCP Tools (P1)
+
+- [x] T016 [US4] Register react/unreact/get_reactions/list_by_state actions in internal/actions/registry.go
+- [x] T017 [US4] Implement reaction bridge methods in internal/mcp/bridge.go
+- [x] T018 [US4] Updated all MCP test call sites for new reactionService parameter
+
+## Phase 5: User Story 5 — Channel Settings + CLI (P2)
+
+- [x] T019 [US5] Add channel workflow settings update endpoint (PUT /api/channels/{name}/settings)
+- [x] T020 [US5] Add list_by_state endpoint (GET /api/channels/{name}/messages/by-state)
+- [x] T021 [US5] Add CLI command: synapbus channels update --auto-approve --stalemate-remind-after --stalemate-escalate-after
+- [x] T022 [US5] Add admin socket handler for channels.update_settings
+
+## Phase 6: User Story 3 — StalemateWorker Extension (P2)
+
+- [ ] T023 [US3] Extend StalemateWorker to scan channel messages for stale workflow states (deferred — can be added in follow-up)
+- [ ] T024 [US3] Implement reminder DMs and #approvals escalation for stale messages (deferred)
+- [ ] T025 [US3] Write tests for stalemate workflow detection (deferred)
+
+## Phase 7: User Story 6 — Web UI (P2)
+
+- [x] T026 [US6] Create WorkflowBadge.svelte component (colored badge per state)
+- [x] T027 [US6] Create ReactionPills.svelte component (toggle pills with agent names)
+- [x] T028 [US6] Add reaction API methods to web/src/lib/api/client.ts
+- [x] T029 [US6] Integrate badges + pills into channel page
+
+## Phase 8: Polish
+
+- [x] T031 Run `go test ./...` — 25 packages pass, 0 failures
+- [x] T032 Run `make web` — Svelte SPA builds successfully
+- [x] T033 Run `make build` — Binary compiles cleanly
+
+## Note
+StalemateWorker extension (T023-T025) deferred to a follow-up. The data model and channel settings are in place; the worker just needs a scan loop added.

tests/e2e/uv.lock

@@ -0,0 +1,405 @@
+version = 1
+revision = 3
+requires-python = ">=3.10"
+
+[[package]]
+name = "annotated-types"
+version = "0.7.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/ee/67/531ea369ba64dcff5ec9c3402f9f51bf748cec26dde048a2f973a4eea7f5/annotated_types-0.7.0.tar.gz", hash = "sha256:aff07c09a53a08bc8cfccb9c85b05f1aa9a2a6f23728d790723543408344ce89", size = 16081, upload-time = "2024-05-20T21:33:25.928Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/78/b6/6307fbef88d9b5ee7421e68d78a9f162e0da4900bc5f5793f6d3d0e34fb8/annotated_types-0.7.0-py3-none-any.whl", hash = "sha256:1f02e8b43a8fbbc3f3e0d4f0f4bfc8131bcb4eebe8849b8e5c773f3a1c582a53", size = 13643, upload-time = "2024-05-20T21:33:24.1Z" },
+]
+
+[[package]]
+name = "anthropic"
+version = "0.84.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "anyio" },
+    { name = "distro" },
+    { name = "docstring-parser" },
+    { name = "httpx" },
+    { name = "jiter" },
+    { name = "pydantic" },
+    { name = "sniffio" },
+    { name = "typing-extensions" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/04/ea/0869d6df9ef83dcf393aeefc12dd81677d091c6ffc86f783e51cf44062f2/anthropic-0.84.0.tar.gz", hash = "sha256:72f5f90e5aebe62dca316cb013629cfa24996b0f5a4593b8c3d712bc03c43c37", size = 539457, upload-time = "2026-02-25T05:22:38.54Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/64/ca/218fa25002a332c0aa149ba18ffc0543175998b1f65de63f6d106689a345/anthropic-0.84.0-py3-none-any.whl", hash = "sha256:861c4c50f91ca45f942e091d83b60530ad6d4f98733bfe648065364da05d29e7", size = 455156, upload-time = "2026-02-25T05:22:40.468Z" },
+]
+
+[[package]]
+name = "anyio"
+version = "4.12.1"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "exceptiongroup", marker = "python_full_version < '3.11'" },
+    { name = "idna" },
+    { name = "typing-extensions", marker = "python_full_version < '3.13'" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/96/f0/5eb65b2bb0d09ac6776f2eb54adee6abe8228ea05b20a5ad0e4945de8aac/anyio-4.12.1.tar.gz", hash = "sha256:41cfcc3a4c85d3f05c932da7c26d0201ac36f72abd4435ba90d0464a3ffed703", size = 228685, upload-time = "2026-01-06T11:45:21.246Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/38/0e/27be9fdef66e72d64c0cdc3cc2823101b80585f8119b5c112c2e8f5f7dab/anyio-4.12.1-py3-none-any.whl", hash = "sha256:d405828884fc140aa80a3c667b8beed277f1dfedec42ba031bd6ac3db606ab6c", size = 113592, upload-time = "2026-01-06T11:45:19.497Z" },
+]
+
+[[package]]
+name = "certifi"
+version = "2026.2.25"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/af/2d/7bf41579a8986e348fa033a31cdd0e4121114f6bce2457e8876010b092dd/certifi-2026.2.25.tar.gz", hash = "sha256:e887ab5cee78ea814d3472169153c2d12cd43b14bd03329a39a9c6e2e80bfba7", size = 155029, upload-time = "2026-02-25T02:54:17.342Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/9a/3c/c17fb3ca2d9c3acff52e30b309f538586f9f5b9c9cf454f3845fc9af4881/certifi-2026.2.25-py3-none-any.whl", hash = "sha256:027692e4402ad994f1c42e52a4997a9763c646b73e4096e4d5d6db8af1d6f0fa", size = 153684, upload-time = "2026-02-25T02:54:15.766Z" },
+]
+
+[[package]]
+name = "distro"
+version = "1.9.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/fc/f8/98eea607f65de6527f8a2e8885fc8015d3e6f5775df186e443e0964a11c3/distro-1.9.0.tar.gz", hash = "sha256:2fa77c6fd8940f116ee1d6b94a2f90b13b5ea8d019b98bc8bafdcabcdd9bdbed", size = 60722, upload-time = "2023-12-24T09:54:32.31Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/12/b3/231ffd4ab1fc9d679809f356cebee130ac7daa00d6d6f3206dd4fd137e9e/distro-1.9.0-py3-none-any.whl", hash = "sha256:7bffd925d65168f85027d8da9af6bddab658135b840670a223589bc0c8ef02b2", size = 20277, upload-time = "2023-12-24T09:54:30.421Z" },
+]
+
+[[package]]
+name = "docstring-parser"
+version = "0.17.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/b2/9d/c3b43da9515bd270df0f80548d9944e389870713cc1fe2b8fb35fe2bcefd/docstring_parser-0.17.0.tar.gz", hash = "sha256:583de4a309722b3315439bb31d64ba3eebada841f2e2cee23b99df001434c912", size = 27442, upload-time = "2025-07-21T07:35:01.868Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/55/e2/2537ebcff11c1ee1ff17d8d0b6f4db75873e3b0fb32c2d4a2ee31ecb310a/docstring_parser-0.17.0-py3-none-any.whl", hash = "sha256:cf2569abd23dce8099b300f9b4fa8191e9582dda731fd533daf54c4551658708", size = 36896, upload-time = "2025-07-21T07:35:00.684Z" },
+]
+
+[[package]]
+name = "exceptiongroup"
+version = "1.3.1"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "typing-extensions", marker = "python_full_version < '3.13'" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/50/79/66800aadf48771f6b62f7eb014e352e5d06856655206165d775e675a02c9/exceptiongroup-1.3.1.tar.gz", hash = "sha256:8b412432c6055b0b7d14c310000ae93352ed6754f70fa8f7c34141f91c4e3219", size = 30371, upload-time = "2025-11-21T23:01:54.787Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/8a/0e/97c33bf5009bdbac74fd2beace167cab3f978feb69cc36f1ef79360d6c4e/exceptiongroup-1.3.1-py3-none-any.whl", hash = "sha256:a7a39a3bd276781e98394987d3a5701d0c4edffb633bb7a5144577f82c773598", size = 16740, upload-time = "2025-11-21T23:01:53.443Z" },
+]
+
+[[package]]
+name = "h11"
+version = "0.16.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/01/ee/02a2c011bdab74c6fb3c75474d40b3052059d95df7e73351460c8588d963/h11-0.16.0.tar.gz", hash = "sha256:4e35b956cf45792e4caa5885e69fba00bdbc6ffafbfa020300e549b208ee5ff1", size = 101250, upload-time = "2025-04-24T03:35:25.427Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/04/4b/29cac41a4d98d144bf5f6d33995617b185d14b22401f75ca86f384e87ff1/h11-0.16.0-py3-none-any.whl", hash = "sha256:63cf8bbe7522de3bf65932fda1d9c2772064ffb3dae62d55932da54b31cb6c86", size = 37515, upload-time = "2025-04-24T03:35:24.344Z" },
+]
+
+[[package]]
+name = "httpcore"
+version = "1.0.9"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "certifi" },
+    { name = "h11" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/06/94/82699a10bca87a5556c9c59b5963f2d039dbd239f25bc2a63907a05a14cb/httpcore-1.0.9.tar.gz", hash = "sha256:6e34463af53fd2ab5d807f399a9b45ea31c3dfa2276f15a2c3f00afff6e176e8", size = 85484, upload-time = "2025-04-24T22:06:22.219Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/7e/f5/f66802a942d491edb555dd61e3a9961140fd64c90bce1eafd741609d334d/httpcore-1.0.9-py3-none-any.whl", hash = "sha256:2d400746a40668fc9dec9810239072b40b4484b640a8c38fd654a024c7a1bf55", size = 78784, upload-time = "2025-04-24T22:06:20.566Z" },
+]
+
+[[package]]
+name = "httpx"
+version = "0.28.1"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "anyio" },
+    { name = "certifi" },
+    { name = "httpcore" },
+    { name = "idna" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/b1/df/48c586a5fe32a0f01324ee087459e112ebb7224f646c0b5023f5e79e9956/httpx-0.28.1.tar.gz", hash = "sha256:75e98c5f16b0f35b567856f597f06ff2270a374470a5c2392242528e3e3e42fc", size = 141406, upload-time = "2024-12-06T15:37:23.222Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/2a/39/e50c7c3a983047577ee07d2a9e53faf5a69493943ec3f6a384bdc792deb2/httpx-0.28.1-py3-none-any.whl", hash = "sha256:d909fcccc110f8c7faf814ca82a9a4d816bc5a6dbfea25d6591d6985b8ba59ad", size = 73517, upload-time = "2024-12-06T15:37:21.509Z" },
+]
+
+[[package]]
+name = "idna"
+version = "3.11"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/6f/6d/0703ccc57f3a7233505399edb88de3cbd678da106337b9fcde432b65ed60/idna-3.11.tar.gz", hash = "sha256:795dafcc9c04ed0c1fb032c2aa73654d8e8c5023a7df64a53f39190ada629902", size = 194582, upload-time = "2025-10-12T14:55:20.501Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/0e/61/66938bbb5fc52dbdf84594873d5b51fb1f7c7794e9c0f5bd885f30bc507b/idna-3.11-py3-none-any.whl", hash = "sha256:771a87f49d9defaf64091e6e6fe9c18d4833f140bd19464795bc32d966ca37ea", size = 71008, upload-time = "2025-10-12T14:55:18.883Z" },
+]
+
+[[package]]
+name = "jiter"
+version = "0.13.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/0d/5e/4ec91646aee381d01cdb9974e30882c9cd3b8c5d1079d6b5ff4af522439a/jiter-0.13.0.tar.gz", hash = "sha256:f2839f9c2c7e2dffc1bc5929a510e14ce0a946be9365fd1219e7ef342dae14f4", size = 164847, upload-time = "2026-02-02T12:37:56.441Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/d0/5a/41da76c5ea07bec1b0472b6b2fdb1b651074d504b19374d7e130e0cdfb25/jiter-0.13.0-cp310-cp310-macosx_10_12_x86_64.whl", hash = "sha256:2ffc63785fd6c7977defe49b9824ae6ce2b2e2b77ce539bdaf006c26da06342e", size = 311164, upload-time = "2026-02-02T12:35:17.688Z" },
+    { url = "https://files.pythonhosted.org/packages/40/cb/4a1bf994a3e869f0d39d10e11efb471b76d0ad70ecbfb591427a46c880c2/jiter-0.13.0-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:4a638816427006c1e3f0013eb66d391d7a3acda99a7b0cf091eff4497ccea33a", size = 320296, upload-time = "2026-02-02T12:35:19.828Z" },
+    { url = "https://files.pythonhosted.org/packages/09/82/acd71ca9b50ecebadc3979c541cd717cce2fe2bc86236f4fa597565d8f1a/jiter-0.13.0-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:19928b5d1ce0ff8c1ee1b9bdef3b5bfc19e8304f1b904e436caf30bc15dc6cf5", size = 352742, upload-time = "2026-02-02T12:35:21.258Z" },
+    { url = "https://files.pythonhosted.org/packages/71/03/d1fc996f3aecfd42eb70922edecfb6dd26421c874503e241153ad41df94f/jiter-0.13.0-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:309549b778b949d731a2f0e1594a3f805716be704a73bf3ad9a807eed5eb5721", size = 363145, upload-time = "2026-02-02T12:35:24.653Z" },
+    { url = "https://files.pythonhosted.org/packages/f1/61/a30492366378cc7a93088858f8991acd7d959759fe6138c12a4644e58e81/jiter-0.13.0-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:bcdabaea26cb04e25df3103ce47f97466627999260290349a88c8136ecae0060", size = 487683, upload-time = "2026-02-02T12:35:26.162Z" },
+    { url = "https://files.pythonhosted.org/packages/20/4e/4223cffa9dbbbc96ed821c5aeb6bca510848c72c02086d1ed3f1da3d58a7/jiter-0.13.0-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:a3a377af27b236abbf665a69b2bdd680e3b5a0bd2af825cd3b81245279a7606c", size = 373579, upload-time = "2026-02-02T12:35:27.582Z" },
+    { url = "https://files.pythonhosted.org/packages/fe/c9/b0489a01329ab07a83812d9ebcffe7820a38163c6d9e7da644f926ff877c/jiter-0.13.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:fe49d3ff6db74321f144dff9addd4a5874d3105ac5ba7c5b77fac099cfae31ae", size = 362904, upload-time = "2026-02-02T12:35:28.925Z" },
+    { url = "https://files.pythonhosted.org/packages/05/af/53e561352a44afcba9a9bc67ee1d320b05a370aed8df54eafe714c4e454d/jiter-0.13.0-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:2113c17c9a67071b0f820733c0893ed1d467b5fcf4414068169e5c2cabddb1e2", size = 392380, upload-time = "2026-02-02T12:35:30.385Z" },
+    { url = "https://files.pythonhosted.org/packages/76/2a/dd805c3afb8ed5b326c5ae49e725d1b1255b9754b1b77dbecdc621b20773/jiter-0.13.0-cp310-cp310-musllinux_1_1_aarch64.whl", hash = "sha256:ab1185ca5c8b9491b55ebf6c1e8866b8f68258612899693e24a92c5fdb9455d5", size = 517939, upload-time = "2026-02-02T12:35:31.865Z" },
+    { url = "https://files.pythonhosted.org/packages/20/2a/7b67d76f55b8fe14c937e7640389612f05f9a4145fc28ae128aaa5e62257/jiter-0.13.0-cp310-cp310-musllinux_1_1_x86_64.whl", hash = "sha256:9621ca242547edc16400981ca3231e0c91c0c4c1ab8573a596cd9bb3575d5c2b", size = 551696, upload-time = "2026-02-02T12:35:33.306Z" },
+    { url = "https://files.pythonhosted.org/packages/85/9c/57cdd64dac8f4c6ab8f994fe0eb04dc9fd1db102856a4458fcf8a99dfa62/jiter-0.13.0-cp310-cp310-win32.whl", hash = "sha256:a7637d92b1c9d7a771e8c56f445c7f84396d48f2e756e5978840ecba2fac0894", size = 204592, upload-time = "2026-02-02T12:35:34.58Z" },
+    { url = "https://files.pythonhosted.org/packages/a7/38/f4f3ea5788b8a5bae7510a678cdc747eda0c45ffe534f9878ff37e7cf3b3/jiter-0.13.0-cp310-cp310-win_amd64.whl", hash = "sha256:c1b609e5cbd2f52bb74fb721515745b407df26d7b800458bd97cb3b972c29e7d", size = 206016, upload-time = "2026-02-02T12:35:36.435Z" },
+    { url = "https://files.pythonhosted.org/packages/71/29/499f8c9eaa8a16751b1c0e45e6f5f1761d180da873d417996cc7bddc8eef/jiter-0.13.0-cp311-cp311-macosx_10_12_x86_64.whl", hash = "sha256:ea026e70a9a28ebbdddcbcf0f1323128a8db66898a06eaad3a4e62d2f554d096", size = 311157, upload-time = "2026-02-02T12:35:37.758Z" },
+    { url = "https://files.pythonhosted.org/packages/50/f6/566364c777d2ab450b92100bea11333c64c38d32caf8dc378b48e5b20c46/jiter-0.13.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:66aa3e663840152d18cc8ff1e4faad3dd181373491b9cfdc6004b92198d67911", size = 319729, upload-time = "2026-02-02T12:35:39.246Z" },
+    { url = "https://files.pythonhosted.org/packages/73/dd/560f13ec5e4f116d8ad2658781646cca91b617ae3b8758d4a5076b278f70/jiter-0.13.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:c3524798e70655ff19aec58c7d05adb1f074fecff62da857ea9be2b908b6d701", size = 354766, upload-time = "2026-02-02T12:35:40.662Z" },
+    { url = "https://files.pythonhosted.org/packages/7c/0d/061faffcfe94608cbc28a0d42a77a74222bdf5055ccdbe5fd2292b94f510/jiter-0.13.0-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:ec7e287d7fbd02cb6e22f9a00dd9c9cd504c40a61f2c61e7e1f9690a82726b4c", size = 362587, upload-time = "2026-02-02T12:35:42.025Z" },
+    { url = "https://files.pythonhosted.org/packages/92/c9/c66a7864982fd38a9773ec6e932e0398d1262677b8c60faecd02ffb67bf3/jiter-0.13.0-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:47455245307e4debf2ce6c6e65a717550a0244231240dcf3b8f7d64e4c2f22f4", size = 487537, upload-time = "2026-02-02T12:35:43.459Z" },
+    { url = "https://files.pythonhosted.org/packages/6c/86/84eb4352cd3668f16d1a88929b5888a3fe0418ea8c1dfc2ad4e7bf6e069a/jiter-0.13.0-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:ee9da221dca6e0429c2704c1b3655fe7b025204a71d4d9b73390c759d776d165", size = 373717, upload-time = "2026-02-02T12:35:44.928Z" },
+    { url = "https://files.pythonhosted.org/packages/6e/09/9fe4c159358176f82d4390407a03f506a8659ed13ca3ac93a843402acecf/jiter-0.13.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:24ab43126d5e05f3d53a36a8e11eb2f23304c6c1117844aaaf9a0aa5e40b5018", size = 362683, upload-time = "2026-02-02T12:35:46.636Z" },
+    { url = "https://files.pythonhosted.org/packages/c9/5e/85f3ab9caca0c1d0897937d378b4a515cae9e119730563572361ea0c48ae/jiter-0.13.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:9da38b4fedde4fb528c740c2564628fbab737166a0e73d6d46cb4bb5463ff411", size = 392345, upload-time = "2026-02-02T12:35:48.088Z" },
+    { url = "https://files.pythonhosted.org/packages/12/4c/05b8629ad546191939e6f0c2f17e29f542a398f4a52fb987bc70b6d1eb8b/jiter-0.13.0-cp311-cp311-musllinux_1_1_aarch64.whl", hash = "sha256:0b34c519e17658ed88d5047999a93547f8889f3c1824120c26ad6be5f27b6cf5", size = 517775, upload-time = "2026-02-02T12:35:49.482Z" },
+    { url = "https://files.pythonhosted.org/packages/4d/88/367ea2eb6bc582c7052e4baf5ddf57ebe5ab924a88e0e09830dfb585c02d/jiter-0.13.0-cp311-cp311-musllinux_1_1_x86_64.whl", hash = "sha256:d2a6394e6af690d462310a86b53c47ad75ac8c21dc79f120714ea449979cb1d3", size = 551325, upload-time = "2026-02-02T12:35:51.104Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/12/fa377ffb94a2f28c41afaed093e0d70cfe512035d5ecb0cad0ae4792d35e/jiter-0.13.0-cp311-cp311-win32.whl", hash = "sha256:0f0c065695f616a27c920a56ad0d4fc46415ef8b806bf8fc1cacf25002bd24e1", size = 204709, upload-time = "2026-02-02T12:35:52.467Z" },
+    { url = "https://files.pythonhosted.org/packages/cb/16/8e8203ce92f844dfcd3d9d6a5a7322c77077248dbb12da52d23193a839cd/jiter-0.13.0-cp311-cp311-win_amd64.whl", hash = "sha256:0733312953b909688ae3c2d58d043aa040f9f1a6a75693defed7bc2cc4bf2654", size = 204560, upload-time = "2026-02-02T12:35:53.925Z" },
+    { url = "https://files.pythonhosted.org/packages/44/26/97cc40663deb17b9e13c3a5cf29251788c271b18ee4d262c8f94798b8336/jiter-0.13.0-cp311-cp311-win_arm64.whl", hash = "sha256:5d9b34ad56761b3bf0fbe8f7e55468704107608512350962d3317ffd7a4382d5", size = 189608, upload-time = "2026-02-02T12:35:55.304Z" },
+    { url = "https://files.pythonhosted.org/packages/2e/30/7687e4f87086829955013ca12a9233523349767f69653ebc27036313def9/jiter-0.13.0-cp312-cp312-macosx_10_12_x86_64.whl", hash = "sha256:0a2bd69fc1d902e89925fc34d1da51b2128019423d7b339a45d9e99c894e0663", size = 307958, upload-time = "2026-02-02T12:35:57.165Z" },
+    { url = "https://files.pythonhosted.org/packages/c3/27/e57f9a783246ed95481e6749cc5002a8a767a73177a83c63ea71f0528b90/jiter-0.13.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:f917a04240ef31898182f76a332f508f2cc4b57d2b4d7ad2dbfebbfe167eb505", size = 318597, upload-time = "2026-02-02T12:35:58.591Z" },
+    { url = "https://files.pythonhosted.org/packages/cf/52/e5719a60ac5d4d7c5995461a94ad5ef962a37c8bf5b088390e6fad59b2ff/jiter-0.13.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:c1e2b199f446d3e82246b4fd9236d7cb502dc2222b18698ba0d986d2fecc6152", size = 348821, upload-time = "2026-02-02T12:36:00.093Z" },
+    { url = "https://files.pythonhosted.org/packages/61/db/c1efc32b8ba4c740ab3fc2d037d8753f67685f475e26b9d6536a4322bcdd/jiter-0.13.0-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:04670992b576fa65bd056dbac0c39fe8bd67681c380cb2b48efa885711d9d726", size = 364163, upload-time = "2026-02-02T12:36:01.937Z" },
+    { url = "https://files.pythonhosted.org/packages/55/8a/fb75556236047c8806995671a18e4a0ad646ed255276f51a20f32dceaeec/jiter-0.13.0-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:5a1aff1fbdb803a376d4d22a8f63f8e7ccbce0b4890c26cc7af9e501ab339ef0", size = 483709, upload-time = "2026-02-02T12:36:03.41Z" },
+    { url = "https://files.pythonhosted.org/packages/7e/16/43512e6ee863875693a8e6f6d532e19d650779d6ba9a81593ae40a9088ff/jiter-0.13.0-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:3b3fb8c2053acaef8580809ac1d1f7481a0a0bdc012fd7f5d8b18fb696a5a089", size = 370480, upload-time = "2026-02-02T12:36:04.791Z" },
+    { url = "https://files.pythonhosted.org/packages/f8/4c/09b93e30e984a187bc8aaa3510e1ec8dcbdcd71ca05d2f56aac0492453aa/jiter-0.13.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:bdaba7d87e66f26a2c45d8cbadcbfc4bf7884182317907baf39cfe9775bb4d93", size = 360735, upload-time = "2026-02-02T12:36:06.994Z" },
+    { url = "https://files.pythonhosted.org/packages/1a/1b/46c5e349019874ec5dfa508c14c37e29864ea108d376ae26d90bee238cd7/jiter-0.13.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:7b88d649135aca526da172e48083da915ec086b54e8e73a425ba50999468cc08", size = 391814, upload-time = "2026-02-02T12:36:08.368Z" },
+    { url = "https://files.pythonhosted.org/packages/15/9e/26184760e85baee7162ad37b7912797d2077718476bf91517641c92b3639/jiter-0.13.0-cp312-cp312-musllinux_1_1_aarch64.whl", hash = "sha256:e404ea551d35438013c64b4f357b0474c7abf9f781c06d44fcaf7a14c69ff9e2", size = 513990, upload-time = "2026-02-02T12:36:09.993Z" },
+    { url = "https://files.pythonhosted.org/packages/e9/34/2c9355247d6debad57a0a15e76ab1566ab799388042743656e566b3b7de1/jiter-0.13.0-cp312-cp312-musllinux_1_1_x86_64.whl", hash = "sha256:1f4748aad1b4a93c8bdd70f604d0f748cdc0e8744c5547798acfa52f10e79228", size = 548021, upload-time = "2026-02-02T12:36:11.376Z" },
+    { url = "https://files.pythonhosted.org/packages/ac/4a/9f2c23255d04a834398b9c2e0e665382116911dc4d06b795710503cdad25/jiter-0.13.0-cp312-cp312-win32.whl", hash = "sha256:0bf670e3b1445fc4d31612199f1744f67f889ee1bbae703c4b54dc097e5dd394", size = 203024, upload-time = "2026-02-02T12:36:12.682Z" },
+    { url = "https://files.pythonhosted.org/packages/09/ee/f0ae675a957ae5a8f160be3e87acea6b11dc7b89f6b7ab057e77b2d2b13a/jiter-0.13.0-cp312-cp312-win_amd64.whl", hash = "sha256:15db60e121e11fe186c0b15236bd5d18381b9ddacdcf4e659feb96fc6c969c92", size = 205424, upload-time = "2026-02-02T12:36:13.93Z" },
+    { url = "https://files.pythonhosted.org/packages/1b/02/ae611edf913d3cbf02c97cdb90374af2082c48d7190d74c1111dde08bcdd/jiter-0.13.0-cp312-cp312-win_arm64.whl", hash = "sha256:41f92313d17989102f3cb5dd533a02787cdb99454d494344b0361355da52fcb9", size = 186818, upload-time = "2026-02-02T12:36:15.308Z" },
+    { url = "https://files.pythonhosted.org/packages/91/9c/7ee5a6ff4b9991e1a45263bfc46731634c4a2bde27dfda6c8251df2d958c/jiter-0.13.0-cp313-cp313-macosx_10_12_x86_64.whl", hash = "sha256:1f8a55b848cbabf97d861495cd65f1e5c590246fabca8b48e1747c4dfc8f85bf", size = 306897, upload-time = "2026-02-02T12:36:16.748Z" },
+    { url = "https://files.pythonhosted.org/packages/7c/02/be5b870d1d2be5dd6a91bdfb90f248fbb7dcbd21338f092c6b89817c3dbf/jiter-0.13.0-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:f556aa591c00f2c45eb1b89f68f52441a016034d18b65da60e2d2875bbbf344a", size = 317507, upload-time = "2026-02-02T12:36:18.351Z" },
+    { url = "https://files.pythonhosted.org/packages/da/92/b25d2ec333615f5f284f3a4024f7ce68cfa0604c322c6808b2344c7f5d2b/jiter-0.13.0-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:f7e1d61da332ec412350463891923f960c3073cf1aae93b538f0bb4c8cd46efb", size = 350560, upload-time = "2026-02-02T12:36:19.746Z" },
+    { url = "https://files.pythonhosted.org/packages/be/ec/74dcb99fef0aca9fbe56b303bf79f6bd839010cb18ad41000bf6cc71eec0/jiter-0.13.0-cp313-cp313-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:3097d665a27bc96fd9bbf7f86178037db139f319f785e4757ce7ccbf390db6c2", size = 363232, upload-time = "2026-02-02T12:36:21.243Z" },
+    { url = "https://files.pythonhosted.org/packages/1b/37/f17375e0bb2f6a812d4dd92d7616e41917f740f3e71343627da9db2824ce/jiter-0.13.0-cp313-cp313-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:9d01ecc3a8cbdb6f25a37bd500510550b64ddf9f7d64a107d92f3ccb25035d0f", size = 483727, upload-time = "2026-02-02T12:36:22.688Z" },
+    { url = "https://files.pythonhosted.org/packages/77/d2/a71160a5ae1a1e66c1395b37ef77da67513b0adba73b993a27fbe47eb048/jiter-0.13.0-cp313-cp313-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:ed9bbc30f5d60a3bdf63ae76beb3f9db280d7f195dfcfa61af792d6ce912d159", size = 370799, upload-time = "2026-02-02T12:36:24.106Z" },
+    { url = "https://files.pythonhosted.org/packages/01/99/ed5e478ff0eb4e8aa5fd998f9d69603c9fd3f32de3bd16c2b1194f68361c/jiter-0.13.0-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:98fbafb6e88256f4454de33c1f40203d09fc33ed19162a68b3b257b29ca7f663", size = 359120, upload-time = "2026-02-02T12:36:25.519Z" },
+    { url = "https://files.pythonhosted.org/packages/16/be/7ffd08203277a813f732ba897352797fa9493faf8dc7995b31f3d9cb9488/jiter-0.13.0-cp313-cp313-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:5467696f6b827f1116556cb0db620440380434591e93ecee7fd14d1a491b6daa", size = 390664, upload-time = "2026-02-02T12:36:26.866Z" },
+    { url = "https://files.pythonhosted.org/packages/d1/84/e0787856196d6d346264d6dcccb01f741e5f0bd014c1d9a2ebe149caf4f3/jiter-0.13.0-cp313-cp313-musllinux_1_1_aarch64.whl", hash = "sha256:2d08c9475d48b92892583df9da592a0e2ac49bcd41fae1fec4f39ba6cf107820", size = 513543, upload-time = "2026-02-02T12:36:28.217Z" },
+    { url = "https://files.pythonhosted.org/packages/65/50/ecbd258181c4313cf79bca6c88fb63207d04d5bf5e4f65174114d072aa55/jiter-0.13.0-cp313-cp313-musllinux_1_1_x86_64.whl", hash = "sha256:aed40e099404721d7fcaf5b89bd3b4568a4666358bcac7b6b15c09fb6252ab68", size = 547262, upload-time = "2026-02-02T12:36:29.678Z" },
+    { url = "https://files.pythonhosted.org/packages/27/da/68f38d12e7111d2016cd198161b36e1f042bd115c169255bcb7ec823a3bf/jiter-0.13.0-cp313-cp313-win32.whl", hash = "sha256:36ebfbcffafb146d0e6ffb3e74d51e03d9c35ce7c625c8066cdbfc7b953bdc72", size = 200630, upload-time = "2026-02-02T12:36:31.808Z" },
+    { url = "https://files.pythonhosted.org/packages/25/65/3bd1a972c9a08ecd22eb3b08a95d1941ebe6938aea620c246cf426ae09c2/jiter-0.13.0-cp313-cp313-win_amd64.whl", hash = "sha256:8d76029f077379374cf0dbc78dbe45b38dec4a2eb78b08b5194ce836b2517afc", size = 202602, upload-time = "2026-02-02T12:36:33.679Z" },
+    { url = "https://files.pythonhosted.org/packages/15/fe/13bd3678a311aa67686bb303654792c48206a112068f8b0b21426eb6851e/jiter-0.13.0-cp313-cp313-win_arm64.whl", hash = "sha256:bb7613e1a427cfcb6ea4544f9ac566b93d5bf67e0d48c787eca673ff9c9dff2b", size = 185939, upload-time = "2026-02-02T12:36:35.065Z" },
+    { url = "https://files.pythonhosted.org/packages/49/19/a929ec002ad3228bc97ca01dbb14f7632fffdc84a95ec92ceaf4145688ae/jiter-0.13.0-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:fa476ab5dd49f3bf3a168e05f89358c75a17608dbabb080ef65f96b27c19ab10", size = 316616, upload-time = "2026-02-02T12:36:36.579Z" },
+    { url = "https://files.pythonhosted.org/packages/52/56/d19a9a194afa37c1728831e5fb81b7722c3de18a3109e8f282bfc23e587a/jiter-0.13.0-cp313-cp313t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:ade8cb6ff5632a62b7dbd4757d8c5573f7a2e9ae285d6b5b841707d8363205ef", size = 346850, upload-time = "2026-02-02T12:36:38.058Z" },
+    { url = "https://files.pythonhosted.org/packages/36/4a/94e831c6bf287754a8a019cb966ed39ff8be6ab78cadecf08df3bb02d505/jiter-0.13.0-cp313-cp313t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:9950290340acc1adaded363edd94baebcee7dabdfa8bee4790794cd5cfad2af6", size = 358551, upload-time = "2026-02-02T12:36:39.417Z" },
+    { url = "https://files.pythonhosted.org/packages/a2/ec/a4c72c822695fa80e55d2b4142b73f0012035d9fcf90eccc56bc060db37c/jiter-0.13.0-cp313-cp313t-win_amd64.whl", hash = "sha256:2b4972c6df33731aac0742b64fd0d18e0a69bc7d6e03108ce7d40c85fd9e3e6d", size = 201950, upload-time = "2026-02-02T12:36:40.791Z" },
+    { url = "https://files.pythonhosted.org/packages/b6/00/393553ec27b824fbc29047e9c7cd4a3951d7fbe4a76743f17e44034fa4e4/jiter-0.13.0-cp313-cp313t-win_arm64.whl", hash = "sha256:701a1e77d1e593c1b435315ff625fd071f0998c5f02792038a5ca98899261b7d", size = 185852, upload-time = "2026-02-02T12:36:42.077Z" },
+    { url = "https://files.pythonhosted.org/packages/6e/f5/f1997e987211f6f9bd71b8083047b316208b4aca0b529bb5f8c96c89ef3e/jiter-0.13.0-cp314-cp314-macosx_10_12_x86_64.whl", hash = "sha256:cc5223ab19fe25e2f0bf2643204ad7318896fe3729bf12fde41b77bfc4fafff0", size = 308804, upload-time = "2026-02-02T12:36:43.496Z" },
+    { url = "https://files.pythonhosted.org/packages/cd/8f/5482a7677731fd44881f0204981ce2d7175db271f82cba2085dd2212e095/jiter-0.13.0-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:9776ebe51713acf438fd9b4405fcd86893ae5d03487546dae7f34993217f8a91", size = 318787, upload-time = "2026-02-02T12:36:45.071Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/b9/7257ac59778f1cd025b26a23c5520a36a424f7f1b068f2442a5b499b7464/jiter-0.13.0-cp314-cp314-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:879e768938e7b49b5e90b7e3fecc0dbec01b8cb89595861fb39a8967c5220d09", size = 353880, upload-time = "2026-02-02T12:36:47.365Z" },
+    { url = "https://files.pythonhosted.org/packages/c3/87/719eec4a3f0841dad99e3d3604ee4cba36af4419a76f3cb0b8e2e691ad67/jiter-0.13.0-cp314-cp314-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:682161a67adea11e3aae9038c06c8b4a9a71023228767477d683f69903ebc607", size = 366702, upload-time = "2026-02-02T12:36:48.871Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/65/415f0a75cf6921e43365a1bc227c565cb949caca8b7532776e430cbaa530/jiter-0.13.0-cp314-cp314-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:a13b68cd1cd8cc9de8f244ebae18ccb3e4067ad205220ef324c39181e23bbf66", size = 486319, upload-time = "2026-02-02T12:36:53.006Z" },
+    { url = "https://files.pythonhosted.org/packages/54/a2/9e12b48e82c6bbc6081fd81abf915e1443add1b13d8fc586e1d90bb02bb8/jiter-0.13.0-cp314-cp314-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:87ce0f14c6c08892b610686ae8be350bf368467b6acd5085a5b65441e2bf36d2", size = 372289, upload-time = "2026-02-02T12:36:54.593Z" },
+    { url = "https://files.pythonhosted.org/packages/4e/c1/e4693f107a1789a239c759a432e9afc592366f04e901470c2af89cfd28e1/jiter-0.13.0-cp314-cp314-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:0c365005b05505a90d1c47856420980d0237adf82f70c4aff7aebd3c1cc143ad", size = 360165, upload-time = "2026-02-02T12:36:56.112Z" },
+    { url = "https://files.pythonhosted.org/packages/17/08/91b9ea976c1c758240614bd88442681a87672eebc3d9a6dde476874e706b/jiter-0.13.0-cp314-cp314-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:1317fdffd16f5873e46ce27d0e0f7f4f90f0cdf1d86bf6abeaea9f63ca2c401d", size = 389634, upload-time = "2026-02-02T12:36:57.495Z" },
+    { url = "https://files.pythonhosted.org/packages/18/23/58325ef99390d6d40427ed6005bf1ad54f2577866594bcf13ce55675f87d/jiter-0.13.0-cp314-cp314-musllinux_1_1_aarch64.whl", hash = "sha256:c05b450d37ba0c9e21c77fef1f205f56bcee2330bddca68d344baebfc55ae0df", size = 514933, upload-time = "2026-02-02T12:36:58.909Z" },
+    { url = "https://files.pythonhosted.org/packages/5b/25/69f1120c7c395fd276c3996bb8adefa9c6b84c12bb7111e5c6ccdcd8526d/jiter-0.13.0-cp314-cp314-musllinux_1_1_x86_64.whl", hash = "sha256:775e10de3849d0631a97c603f996f518159272db00fdda0a780f81752255ee9d", size = 548842, upload-time = "2026-02-02T12:37:00.433Z" },
+    { url = "https://files.pythonhosted.org/packages/18/05/981c9669d86850c5fbb0d9e62bba144787f9fba84546ba43d624ee27ef29/jiter-0.13.0-cp314-cp314-win32.whl", hash = "sha256:632bf7c1d28421c00dd8bbb8a3bac5663e1f57d5cd5ed962bce3c73bf62608e6", size = 202108, upload-time = "2026-02-02T12:37:01.718Z" },
+    { url = "https://files.pythonhosted.org/packages/8d/96/cdcf54dd0b0341db7d25413229888a346c7130bd20820530905fdb65727b/jiter-0.13.0-cp314-cp314-win_amd64.whl", hash = "sha256:f22ef501c3f87ede88f23f9b11e608581c14f04db59b6a801f354397ae13739f", size = 204027, upload-time = "2026-02-02T12:37:03.075Z" },
+    { url = "https://files.pythonhosted.org/packages/fb/f9/724bcaaab7a3cd727031fe4f6995cb86c4bd344909177c186699c8dec51a/jiter-0.13.0-cp314-cp314-win_arm64.whl", hash = "sha256:07b75fe09a4ee8e0c606200622e571e44943f47254f95e2436c8bdcaceb36d7d", size = 187199, upload-time = "2026-02-02T12:37:04.414Z" },
+    { url = "https://files.pythonhosted.org/packages/62/92/1661d8b9fd6a3d7a2d89831db26fe3c1509a287d83ad7838831c7b7a5c7e/jiter-0.13.0-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:964538479359059a35fb400e769295d4b315ae61e4105396d355a12f7fef09f0", size = 318423, upload-time = "2026-02-02T12:37:05.806Z" },
+    { url = "https://files.pythonhosted.org/packages/4f/3b/f77d342a54d4ebcd128e520fc58ec2f5b30a423b0fd26acdfc0c6fef8e26/jiter-0.13.0-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:e104da1db1c0991b3eaed391ccd650ae8d947eab1480c733e5a3fb28d4313e40", size = 351438, upload-time = "2026-02-02T12:37:07.189Z" },
+    { url = "https://files.pythonhosted.org/packages/76/b3/ba9a69f0e4209bd3331470c723c2f5509e6f0482e416b612431a5061ed71/jiter-0.13.0-cp314-cp314t-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:0e3a5f0cde8ff433b8e88e41aa40131455420fb3649a3c7abdda6145f8cb7202", size = 364774, upload-time = "2026-02-02T12:37:08.579Z" },
+    { url = "https://files.pythonhosted.org/packages/b3/16/6cdb31fa342932602458dbb631bfbd47f601e03d2e4950740e0b2100b570/jiter-0.13.0-cp314-cp314t-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:57aab48f40be1db920a582b30b116fe2435d184f77f0e4226f546794cedd9cf0", size = 487238, upload-time = "2026-02-02T12:37:10.066Z" },
+    { url = "https://files.pythonhosted.org/packages/ed/b1/956cc7abaca8d95c13aa8d6c9b3f3797241c246cd6e792934cc4c8b250d2/jiter-0.13.0-cp314-cp314t-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:7772115877c53f62beeb8fd853cab692dbc04374ef623b30f997959a4c0e7e95", size = 372892, upload-time = "2026-02-02T12:37:11.656Z" },
+    { url = "https://files.pythonhosted.org/packages/26/c4/97ecde8b1e74f67b8598c57c6fccf6df86ea7861ed29da84629cdbba76c4/jiter-0.13.0-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:1211427574b17b633cfceba5040de8081e5abf114f7a7602f73d2e16f9fdaa59", size = 360309, upload-time = "2026-02-02T12:37:13.244Z" },
+    { url = "https://files.pythonhosted.org/packages/4b/d7/eabe3cf46715854ccc80be2cd78dd4c36aedeb30751dbf85a1d08c14373c/jiter-0.13.0-cp314-cp314t-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:7beae3a3d3b5212d3a55d2961db3c292e02e302feb43fce6a3f7a31b90ea6dfe", size = 389607, upload-time = "2026-02-02T12:37:14.881Z" },
+    { url = "https://files.pythonhosted.org/packages/df/2d/03963fc0804e6109b82decfb9974eb92df3797fe7222428cae12f8ccaa0c/jiter-0.13.0-cp314-cp314t-musllinux_1_1_aarch64.whl", hash = "sha256:e5562a0f0e90a6223b704163ea28e831bd3a9faa3512a711f031611e6b06c939", size = 514986, upload-time = "2026-02-02T12:37:16.326Z" },
+    { url = "https://files.pythonhosted.org/packages/f6/6c/8c83b45eb3eb1c1e18d841fe30b4b5bc5619d781267ca9bc03e005d8fd0a/jiter-0.13.0-cp314-cp314t-musllinux_1_1_x86_64.whl", hash = "sha256:6c26a424569a59140fb51160a56df13f438a2b0967365e987889186d5fc2f6f9", size = 548756, upload-time = "2026-02-02T12:37:17.736Z" },
+    { url = "https://files.pythonhosted.org/packages/47/66/eea81dfff765ed66c68fd2ed8c96245109e13c896c2a5015c7839c92367e/jiter-0.13.0-cp314-cp314t-win32.whl", hash = "sha256:24dc96eca9f84da4131cdf87a95e6ce36765c3b156fc9ae33280873b1c32d5f6", size = 201196, upload-time = "2026-02-02T12:37:19.101Z" },
+    { url = "https://files.pythonhosted.org/packages/ff/32/4ac9c7a76402f8f00d00842a7f6b83b284d0cf7c1e9d4227bc95aa6d17fa/jiter-0.13.0-cp314-cp314t-win_amd64.whl", hash = "sha256:0a8d76c7524087272c8ae913f5d9d608bd839154b62c4322ef65723d2e5bb0b8", size = 204215, upload-time = "2026-02-02T12:37:20.495Z" },
+    { url = "https://files.pythonhosted.org/packages/f9/8e/7def204fea9f9be8b3c21a6f2dd6c020cf56c7d5ff753e0e23ed7f9ea57e/jiter-0.13.0-cp314-cp314t-win_arm64.whl", hash = "sha256:2c26cf47e2cad140fa23b6d58d435a7c0161f5c514284802f25e87fddfe11024", size = 187152, upload-time = "2026-02-02T12:37:22.124Z" },
+    { url = "https://files.pythonhosted.org/packages/79/b3/3c29819a27178d0e461a8571fb63c6ae38be6dc36b78b3ec2876bbd6a910/jiter-0.13.0-graalpy311-graalpy242_311_native-macosx_10_12_x86_64.whl", hash = "sha256:b1cbfa133241d0e6bdab48dcdc2604e8ba81512f6bbd68ec3e8e1357dd3c316c", size = 307016, upload-time = "2026-02-02T12:37:42.755Z" },
+    { url = "https://files.pythonhosted.org/packages/eb/ae/60993e4b07b1ac5ebe46da7aa99fdbb802eb986c38d26e3883ac0125c4e0/jiter-0.13.0-graalpy311-graalpy242_311_native-macosx_11_0_arm64.whl", hash = "sha256:db367d8be9fad6e8ebbac4a7578b7af562e506211036cba2c06c3b998603c3d2", size = 305024, upload-time = "2026-02-02T12:37:44.774Z" },
+    { url = "https://files.pythonhosted.org/packages/77/fa/2227e590e9cf98803db2811f172b2d6460a21539ab73006f251c66f44b14/jiter-0.13.0-graalpy311-graalpy242_311_native-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:45f6f8efb2f3b0603092401dc2df79fa89ccbc027aaba4174d2d4133ed661434", size = 339337, upload-time = "2026-02-02T12:37:46.668Z" },
+    { url = "https://files.pythonhosted.org/packages/2d/92/015173281f7eb96c0ef580c997da8ef50870d4f7f4c9e03c845a1d62ae04/jiter-0.13.0-graalpy311-graalpy242_311_native-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:597245258e6ad085d064780abfb23a284d418d3e61c57362d9449c6c7317ee2d", size = 346395, upload-time = "2026-02-02T12:37:48.09Z" },
+    { url = "https://files.pythonhosted.org/packages/80/60/e50fa45dd7e2eae049f0ce964663849e897300433921198aef94b6ffa23a/jiter-0.13.0-graalpy312-graalpy250_312_native-macosx_10_12_x86_64.whl", hash = "sha256:3d744a6061afba08dd7ae375dcde870cffb14429b7477e10f67e9e6d68772a0a", size = 305169, upload-time = "2026-02-02T12:37:50.376Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/73/a009f41c5eed71c49bec53036c4b33555afcdee70682a18c6f66e396c039/jiter-0.13.0-graalpy312-graalpy250_312_native-macosx_11_0_arm64.whl", hash = "sha256:ff732bd0a0e778f43d5009840f20b935e79087b4dc65bd36f1cd0f9b04b8ff7f", size = 303808, upload-time = "2026-02-02T12:37:52.092Z" },
+    { url = "https://files.pythonhosted.org/packages/c4/10/528b439290763bff3d939268085d03382471b442f212dca4ff5f12802d43/jiter-0.13.0-graalpy312-graalpy250_312_native-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:ab44b178f7981fcaea7e0a5df20e773c663d06ffda0198f1a524e91b2fde7e59", size = 337384, upload-time = "2026-02-02T12:37:53.582Z" },
+    { url = "https://files.pythonhosted.org/packages/67/8a/a342b2f0251f3dac4ca17618265d93bf244a2a4d089126e81e4c1056ac50/jiter-0.13.0-graalpy312-graalpy250_312_native-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:7bb00b6d26db67a05fe3e12c76edc75f32077fb51deed13822dc648fa373bc19", size = 343768, upload-time = "2026-02-02T12:37:55.055Z" },
+]
+
+[[package]]
+name = "pydantic"
+version = "2.12.5"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "annotated-types" },
+    { name = "pydantic-core" },
+    { name = "typing-extensions" },
+    { name = "typing-inspection" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/69/44/36f1a6e523abc58ae5f928898e4aca2e0ea509b5aa6f6f392a5d882be928/pydantic-2.12.5.tar.gz", hash = "sha256:4d351024c75c0f085a9febbb665ce8c0c6ec5d30e903bdb6394b7ede26aebb49", size = 821591, upload-time = "2025-11-26T15:11:46.471Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/5a/87/b70ad306ebb6f9b585f114d0ac2137d792b48be34d732d60e597c2f8465a/pydantic-2.12.5-py3-none-any.whl", hash = "sha256:e561593fccf61e8a20fc46dfc2dfe075b8be7d0188df33f221ad1f0139180f9d", size = 463580, upload-time = "2025-11-26T15:11:44.605Z" },
+]
+
+[[package]]
+name = "pydantic-core"
+version = "2.41.5"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "typing-extensions" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/71/70/23b021c950c2addd24ec408e9ab05d59b035b39d97cdc1130e1bce647bb6/pydantic_core-2.41.5.tar.gz", hash = "sha256:08daa51ea16ad373ffd5e7606252cc32f07bc72b28284b6bc9c6df804816476e", size = 460952, upload-time = "2025-11-04T13:43:49.098Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/c6/90/32c9941e728d564b411d574d8ee0cf09b12ec978cb22b294995bae5549a5/pydantic_core-2.41.5-cp310-cp310-macosx_10_12_x86_64.whl", hash = "sha256:77b63866ca88d804225eaa4af3e664c5faf3568cea95360d21f4725ab6e07146", size = 2107298, upload-time = "2025-11-04T13:39:04.116Z" },
+    { url = "https://files.pythonhosted.org/packages/fb/a8/61c96a77fe28993d9a6fb0f4127e05430a267b235a124545d79fea46dd65/pydantic_core-2.41.5-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:dfa8a0c812ac681395907e71e1274819dec685fec28273a28905df579ef137e2", size = 1901475, upload-time = "2025-11-04T13:39:06.055Z" },
+    { url = "https://files.pythonhosted.org/packages/5d/b6/338abf60225acc18cdc08b4faef592d0310923d19a87fba1faf05af5346e/pydantic_core-2.41.5-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:5921a4d3ca3aee735d9fd163808f5e8dd6c6972101e4adbda9a4667908849b97", size = 1918815, upload-time = "2025-11-04T13:39:10.41Z" },
+    { url = "https://files.pythonhosted.org/packages/d1/1c/2ed0433e682983d8e8cba9c8d8ef274d4791ec6a6f24c58935b90e780e0a/pydantic_core-2.41.5-cp310-cp310-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:e25c479382d26a2a41b7ebea1043564a937db462816ea07afa8a44c0866d52f9", size = 2065567, upload-time = "2025-11-04T13:39:12.244Z" },
+    { url = "https://files.pythonhosted.org/packages/b3/24/cf84974ee7d6eae06b9e63289b7b8f6549d416b5c199ca2d7ce13bbcf619/pydantic_core-2.41.5-cp310-cp310-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:f547144f2966e1e16ae626d8ce72b4cfa0caedc7fa28052001c94fb2fcaa1c52", size = 2230442, upload-time = "2025-11-04T13:39:13.962Z" },
+    { url = "https://files.pythonhosted.org/packages/fd/21/4e287865504b3edc0136c89c9c09431be326168b1eb7841911cbc877a995/pydantic_core-2.41.5-cp310-cp310-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:6f52298fbd394f9ed112d56f3d11aabd0d5bd27beb3084cc3d8ad069483b8941", size = 2350956, upload-time = "2025-11-04T13:39:15.889Z" },
+    { url = "https://files.pythonhosted.org/packages/a8/76/7727ef2ffa4b62fcab916686a68a0426b9b790139720e1934e8ba797e238/pydantic_core-2.41.5-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:100baa204bb412b74fe285fb0f3a385256dad1d1879f0a5cb1499ed2e83d132a", size = 2068253, upload-time = "2025-11-04T13:39:17.403Z" },
+    { url = "https://files.pythonhosted.org/packages/d5/8c/a4abfc79604bcb4c748e18975c44f94f756f08fb04218d5cb87eb0d3a63e/pydantic_core-2.41.5-cp310-cp310-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:05a2c8852530ad2812cb7914dc61a1125dc4e06252ee98e5638a12da6cc6fb6c", size = 2177050, upload-time = "2025-11-04T13:39:19.351Z" },
+    { url = "https://files.pythonhosted.org/packages/67/b1/de2e9a9a79b480f9cb0b6e8b6ba4c50b18d4e89852426364c66aa82bb7b3/pydantic_core-2.41.5-cp310-cp310-musllinux_1_1_aarch64.whl", hash = "sha256:29452c56df2ed968d18d7e21f4ab0ac55e71dc59524872f6fc57dcf4a3249ed2", size = 2147178, upload-time = "2025-11-04T13:39:21Z" },
+    { url = "https://files.pythonhosted.org/packages/16/c1/dfb33f837a47b20417500efaa0378adc6635b3c79e8369ff7a03c494b4ac/pydantic_core-2.41.5-cp310-cp310-musllinux_1_1_armv7l.whl", hash = "sha256:d5160812ea7a8a2ffbe233d8da666880cad0cbaf5d4de74ae15c313213d62556", size = 2341833, upload-time = "2025-11-04T13:39:22.606Z" },
+    { url = "https://files.pythonhosted.org/packages/47/36/00f398642a0f4b815a9a558c4f1dca1b4020a7d49562807d7bc9ff279a6c/pydantic_core-2.41.5-cp310-cp310-musllinux_1_1_x86_64.whl", hash = "sha256:df3959765b553b9440adfd3c795617c352154e497a4eaf3752555cfb5da8fc49", size = 2321156, upload-time = "2025-11-04T13:39:25.843Z" },
+    { url = "https://files.pythonhosted.org/packages/7e/70/cad3acd89fde2010807354d978725ae111ddf6d0ea46d1ea1775b5c1bd0c/pydantic_core-2.41.5-cp310-cp310-win32.whl", hash = "sha256:1f8d33a7f4d5a7889e60dc39856d76d09333d8a6ed0f5f1190635cbec70ec4ba", size = 1989378, upload-time = "2025-11-04T13:39:27.92Z" },
+    { url = "https://files.pythonhosted.org/packages/76/92/d338652464c6c367e5608e4488201702cd1cbb0f33f7b6a85a60fe5f3720/pydantic_core-2.41.5-cp310-cp310-win_amd64.whl", hash = "sha256:62de39db01b8d593e45871af2af9e497295db8d73b085f6bfd0b18c83c70a8f9", size = 2013622, upload-time = "2025-11-04T13:39:29.848Z" },
+    { url = "https://files.pythonhosted.org/packages/e8/72/74a989dd9f2084b3d9530b0915fdda64ac48831c30dbf7c72a41a5232db8/pydantic_core-2.41.5-cp311-cp311-macosx_10_12_x86_64.whl", hash = "sha256:a3a52f6156e73e7ccb0f8cced536adccb7042be67cb45f9562e12b319c119da6", size = 2105873, upload-time = "2025-11-04T13:39:31.373Z" },
+    { url = "https://files.pythonhosted.org/packages/12/44/37e403fd9455708b3b942949e1d7febc02167662bf1a7da5b78ee1ea2842/pydantic_core-2.41.5-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:7f3bf998340c6d4b0c9a2f02d6a400e51f123b59565d74dc60d252ce888c260b", size = 1899826, upload-time = "2025-11-04T13:39:32.897Z" },
+    { url = "https://files.pythonhosted.org/packages/33/7f/1d5cab3ccf44c1935a359d51a8a2a9e1a654b744b5e7f80d41b88d501eec/pydantic_core-2.41.5-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:378bec5c66998815d224c9ca994f1e14c0c21cb95d2f52b6021cc0b2a58f2a5a", size = 1917869, upload-time = "2025-11-04T13:39:34.469Z" },
+    { url = "https://files.pythonhosted.org/packages/6e/6a/30d94a9674a7fe4f4744052ed6c5e083424510be1e93da5bc47569d11810/pydantic_core-2.41.5-cp311-cp311-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:e7b576130c69225432866fe2f4a469a85a54ade141d96fd396dffcf607b558f8", size = 2063890, upload-time = "2025-11-04T13:39:36.053Z" },
+    { url = "https://files.pythonhosted.org/packages/50/be/76e5d46203fcb2750e542f32e6c371ffa9b8ad17364cf94bb0818dbfb50c/pydantic_core-2.41.5-cp311-cp311-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:6cb58b9c66f7e4179a2d5e0f849c48eff5c1fca560994d6eb6543abf955a149e", size = 2229740, upload-time = "2025-11-04T13:39:37.753Z" },
+    { url = "https://files.pythonhosted.org/packages/d3/ee/fed784df0144793489f87db310a6bbf8118d7b630ed07aa180d6067e653a/pydantic_core-2.41.5-cp311-cp311-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:88942d3a3dff3afc8288c21e565e476fc278902ae4d6d134f1eeda118cc830b1", size = 2350021, upload-time = "2025-11-04T13:39:40.94Z" },
+    { url = "https://files.pythonhosted.org/packages/c8/be/8fed28dd0a180dca19e72c233cbf58efa36df055e5b9d90d64fd1740b828/pydantic_core-2.41.5-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:f31d95a179f8d64d90f6831d71fa93290893a33148d890ba15de25642c5d075b", size = 2066378, upload-time = "2025-11-04T13:39:42.523Z" },
+    { url = "https://files.pythonhosted.org/packages/b0/3b/698cf8ae1d536a010e05121b4958b1257f0b5522085e335360e53a6b1c8b/pydantic_core-2.41.5-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:c1df3d34aced70add6f867a8cf413e299177e0c22660cc767218373d0779487b", size = 2175761, upload-time = "2025-11-04T13:39:44.553Z" },
+    { url = "https://files.pythonhosted.org/packages/b8/ba/15d537423939553116dea94ce02f9c31be0fa9d0b806d427e0308ec17145/pydantic_core-2.41.5-cp311-cp311-musllinux_1_1_aarch64.whl", hash = "sha256:4009935984bd36bd2c774e13f9a09563ce8de4abaa7226f5108262fa3e637284", size = 2146303, upload-time = "2025-11-04T13:39:46.238Z" },
+    { url = "https://files.pythonhosted.org/packages/58/7f/0de669bf37d206723795f9c90c82966726a2ab06c336deba4735b55af431/pydantic_core-2.41.5-cp311-cp311-musllinux_1_1_armv7l.whl", hash = "sha256:34a64bc3441dc1213096a20fe27e8e128bd3ff89921706e83c0b1ac971276594", size = 2340355, upload-time = "2025-11-04T13:39:48.002Z" },
+    { url = "https://files.pythonhosted.org/packages/e5/de/e7482c435b83d7e3c3ee5ee4451f6e8973cff0eb6007d2872ce6383f6398/pydantic_core-2.41.5-cp311-cp311-musllinux_1_1_x86_64.whl", hash = "sha256:c9e19dd6e28fdcaa5a1de679aec4141f691023916427ef9bae8584f9c2fb3b0e", size = 2319875, upload-time = "2025-11-04T13:39:49.705Z" },
+    { url = "https://files.pythonhosted.org/packages/fe/e6/8c9e81bb6dd7560e33b9053351c29f30c8194b72f2d6932888581f503482/pydantic_core-2.41.5-cp311-cp311-win32.whl", hash = "sha256:2c010c6ded393148374c0f6f0bf89d206bf3217f201faa0635dcd56bd1520f6b", size = 1987549, upload-time = "2025-11-04T13:39:51.842Z" },
+    { url = "https://files.pythonhosted.org/packages/11/66/f14d1d978ea94d1bc21fc98fcf570f9542fe55bfcc40269d4e1a21c19bf7/pydantic_core-2.41.5-cp311-cp311-win_amd64.whl", hash = "sha256:76ee27c6e9c7f16f47db7a94157112a2f3a00e958bc626e2f4ee8bec5c328fbe", size = 2011305, upload-time = "2025-11-04T13:39:53.485Z" },
+    { url = "https://files.pythonhosted.org/packages/56/d8/0e271434e8efd03186c5386671328154ee349ff0354d83c74f5caaf096ed/pydantic_core-2.41.5-cp311-cp311-win_arm64.whl", hash = "sha256:4bc36bbc0b7584de96561184ad7f012478987882ebf9f9c389b23f432ea3d90f", size = 1972902, upload-time = "2025-11-04T13:39:56.488Z" },
+    { url = "https://files.pythonhosted.org/packages/5f/5d/5f6c63eebb5afee93bcaae4ce9a898f3373ca23df3ccaef086d0233a35a7/pydantic_core-2.41.5-cp312-cp312-macosx_10_12_x86_64.whl", hash = "sha256:f41a7489d32336dbf2199c8c0a215390a751c5b014c2c1c5366e817202e9cdf7", size = 2110990, upload-time = "2025-11-04T13:39:58.079Z" },
+    { url = "https://files.pythonhosted.org/packages/aa/32/9c2e8ccb57c01111e0fd091f236c7b371c1bccea0fa85247ac55b1e2b6b6/pydantic_core-2.41.5-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:070259a8818988b9a84a449a2a7337c7f430a22acc0859c6b110aa7212a6d9c0", size = 1896003, upload-time = "2025-11-04T13:39:59.956Z" },
+    { url = "https://files.pythonhosted.org/packages/68/b8/a01b53cb0e59139fbc9e4fda3e9724ede8de279097179be4ff31f1abb65a/pydantic_core-2.41.5-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:e96cea19e34778f8d59fe40775a7a574d95816eb150850a85a7a4c8f4b94ac69", size = 1919200, upload-time = "2025-11-04T13:40:02.241Z" },
+    { url = "https://files.pythonhosted.org/packages/38/de/8c36b5198a29bdaade07b5985e80a233a5ac27137846f3bc2d3b40a47360/pydantic_core-2.41.5-cp312-cp312-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:ed2e99c456e3fadd05c991f8f437ef902e00eedf34320ba2b0842bd1c3ca3a75", size = 2052578, upload-time = "2025-11-04T13:40:04.401Z" },
+    { url = "https://files.pythonhosted.org/packages/00/b5/0e8e4b5b081eac6cb3dbb7e60a65907549a1ce035a724368c330112adfdd/pydantic_core-2.41.5-cp312-cp312-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:65840751b72fbfd82c3c640cff9284545342a4f1eb1586ad0636955b261b0b05", size = 2208504, upload-time = "2025-11-04T13:40:06.072Z" },
+    { url = "https://files.pythonhosted.org/packages/77/56/87a61aad59c7c5b9dc8caad5a41a5545cba3810c3e828708b3d7404f6cef/pydantic_core-2.41.5-cp312-cp312-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:e536c98a7626a98feb2d3eaf75944ef6f3dbee447e1f841eae16f2f0a72d8ddc", size = 2335816, upload-time = "2025-11-04T13:40:07.835Z" },
+    { url = "https://files.pythonhosted.org/packages/0d/76/941cc9f73529988688a665a5c0ecff1112b3d95ab48f81db5f7606f522d3/pydantic_core-2.41.5-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:eceb81a8d74f9267ef4081e246ffd6d129da5d87e37a77c9bde550cb04870c1c", size = 2075366, upload-time = "2025-11-04T13:40:09.804Z" },
+    { url = "https://files.pythonhosted.org/packages/d3/43/ebef01f69baa07a482844faaa0a591bad1ef129253ffd0cdaa9d8a7f72d3/pydantic_core-2.41.5-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:d38548150c39b74aeeb0ce8ee1d8e82696f4a4e16ddc6de7b1d8823f7de4b9b5", size = 2171698, upload-time = "2025-11-04T13:40:12.004Z" },
+    { url = "https://files.pythonhosted.org/packages/b1/87/41f3202e4193e3bacfc2c065fab7706ebe81af46a83d3e27605029c1f5a6/pydantic_core-2.41.5-cp312-cp312-musllinux_1_1_aarch64.whl", hash = "sha256:c23e27686783f60290e36827f9c626e63154b82b116d7fe9adba1fda36da706c", size = 2132603, upload-time = "2025-11-04T13:40:13.868Z" },
+    { url = "https://files.pythonhosted.org/packages/49/7d/4c00df99cb12070b6bccdef4a195255e6020a550d572768d92cc54dba91a/pydantic_core-2.41.5-cp312-cp312-musllinux_1_1_armv7l.whl", hash = "sha256:482c982f814460eabe1d3bb0adfdc583387bd4691ef00b90575ca0d2b6fe2294", size = 2329591, upload-time = "2025-11-04T13:40:15.672Z" },
+    { url = "https://files.pythonhosted.org/packages/cc/6a/ebf4b1d65d458f3cda6a7335d141305dfa19bdc61140a884d165a8a1bbc7/pydantic_core-2.41.5-cp312-cp312-musllinux_1_1_x86_64.whl", hash = "sha256:bfea2a5f0b4d8d43adf9d7b8bf019fb46fdd10a2e5cde477fbcb9d1fa08c68e1", size = 2319068, upload-time = "2025-11-04T13:40:17.532Z" },
+    { url = "https://files.pythonhosted.org/packages/49/3b/774f2b5cd4192d5ab75870ce4381fd89cf218af999515baf07e7206753f0/pydantic_core-2.41.5-cp312-cp312-win32.whl", hash = "sha256:b74557b16e390ec12dca509bce9264c3bbd128f8a2c376eaa68003d7f327276d", size = 1985908, upload-time = "2025-11-04T13:40:19.309Z" },
+    { url = "https://files.pythonhosted.org/packages/86/45/00173a033c801cacf67c190fef088789394feaf88a98a7035b0e40d53dc9/pydantic_core-2.41.5-cp312-cp312-win_amd64.whl", hash = "sha256:1962293292865bca8e54702b08a4f26da73adc83dd1fcf26fbc875b35d81c815", size = 2020145, upload-time = "2025-11-04T13:40:21.548Z" },
+    { url = "https://files.pythonhosted.org/packages/f9/22/91fbc821fa6d261b376a3f73809f907cec5ca6025642c463d3488aad22fb/pydantic_core-2.41.5-cp312-cp312-win_arm64.whl", hash = "sha256:1746d4a3d9a794cacae06a5eaaccb4b8643a131d45fbc9af23e353dc0a5ba5c3", size = 1976179, upload-time = "2025-11-04T13:40:23.393Z" },
+    { url = "https://files.pythonhosted.org/packages/87/06/8806241ff1f70d9939f9af039c6c35f2360cf16e93c2ca76f184e76b1564/pydantic_core-2.41.5-cp313-cp313-macosx_10_12_x86_64.whl", hash = "sha256:941103c9be18ac8daf7b7adca8228f8ed6bb7a1849020f643b3a14d15b1924d9", size = 2120403, upload-time = "2025-11-04T13:40:25.248Z" },
+    { url = "https://files.pythonhosted.org/packages/94/02/abfa0e0bda67faa65fef1c84971c7e45928e108fe24333c81f3bfe35d5f5/pydantic_core-2.41.5-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:112e305c3314f40c93998e567879e887a3160bb8689ef3d2c04b6cc62c33ac34", size = 1896206, upload-time = "2025-11-04T13:40:27.099Z" },
+    { url = "https://files.pythonhosted.org/packages/15/df/a4c740c0943e93e6500f9eb23f4ca7ec9bf71b19e608ae5b579678c8d02f/pydantic_core-2.41.5-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:0cbaad15cb0c90aa221d43c00e77bb33c93e8d36e0bf74760cd00e732d10a6a0", size = 1919307, upload-time = "2025-11-04T13:40:29.806Z" },
+    { url = "https://files.pythonhosted.org/packages/9a/e3/6324802931ae1d123528988e0e86587c2072ac2e5394b4bc2bc34b61ff6e/pydantic_core-2.41.5-cp313-cp313-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:03ca43e12fab6023fc79d28ca6b39b05f794ad08ec2feccc59a339b02f2b3d33", size = 2063258, upload-time = "2025-11-04T13:40:33.544Z" },
+    { url = "https://files.pythonhosted.org/packages/c9/d4/2230d7151d4957dd79c3044ea26346c148c98fbf0ee6ebd41056f2d62ab5/pydantic_core-2.41.5-cp313-cp313-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:dc799088c08fa04e43144b164feb0c13f9a0bc40503f8df3e9fde58a3c0c101e", size = 2214917, upload-time = "2025-11-04T13:40:35.479Z" },
+    { url = "https://files.pythonhosted.org/packages/e6/9f/eaac5df17a3672fef0081b6c1bb0b82b33ee89aa5cec0d7b05f52fd4a1fa/pydantic_core-2.41.5-cp313-cp313-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:97aeba56665b4c3235a0e52b2c2f5ae9cd071b8a8310ad27bddb3f7fb30e9aa2", size = 2332186, upload-time = "2025-11-04T13:40:37.436Z" },
+    { url = "https://files.pythonhosted.org/packages/cf/4e/35a80cae583a37cf15604b44240e45c05e04e86f9cfd766623149297e971/pydantic_core-2.41.5-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:406bf18d345822d6c21366031003612b9c77b3e29ffdb0f612367352aab7d586", size = 2073164, upload-time = "2025-11-04T13:40:40.289Z" },
+    { url = "https://files.pythonhosted.org/packages/bf/e3/f6e262673c6140dd3305d144d032f7bd5f7497d3871c1428521f19f9efa2/pydantic_core-2.41.5-cp313-cp313-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:b93590ae81f7010dbe380cdeab6f515902ebcbefe0b9327cc4804d74e93ae69d", size = 2179146, upload-time = "2025-11-04T13:40:42.809Z" },
+    { url = "https://files.pythonhosted.org/packages/75/c7/20bd7fc05f0c6ea2056a4565c6f36f8968c0924f19b7d97bbfea55780e73/pydantic_core-2.41.5-cp313-cp313-musllinux_1_1_aarch64.whl", hash = "sha256:01a3d0ab748ee531f4ea6c3e48ad9dac84ddba4b0d82291f87248f2f9de8d740", size = 2137788, upload-time = "2025-11-04T13:40:44.752Z" },
+    { url = "https://files.pythonhosted.org/packages/3a/8d/34318ef985c45196e004bc46c6eab2eda437e744c124ef0dbe1ff2c9d06b/pydantic_core-2.41.5-cp313-cp313-musllinux_1_1_armv7l.whl", hash = "sha256:6561e94ba9dacc9c61bce40e2d6bdc3bfaa0259d3ff36ace3b1e6901936d2e3e", size = 2340133, upload-time = "2025-11-04T13:40:46.66Z" },
+    { url = "https://files.pythonhosted.org/packages/9c/59/013626bf8c78a5a5d9350d12e7697d3d4de951a75565496abd40ccd46bee/pydantic_core-2.41.5-cp313-cp313-musllinux_1_1_x86_64.whl", hash = "sha256:915c3d10f81bec3a74fbd4faebe8391013ba61e5a1a8d48c4455b923bdda7858", size = 2324852, upload-time = "2025-11-04T13:40:48.575Z" },
+    { url = "https://files.pythonhosted.org/packages/1a/d9/c248c103856f807ef70c18a4f986693a46a8ffe1602e5d361485da502d20/pydantic_core-2.41.5-cp313-cp313-win32.whl", hash = "sha256:650ae77860b45cfa6e2cdafc42618ceafab3a2d9a3811fcfbd3bbf8ac3c40d36", size = 1994679, upload-time = "2025-11-04T13:40:50.619Z" },
+    { url = "https://files.pythonhosted.org/packages/9e/8b/341991b158ddab181cff136acd2552c9f35bd30380422a639c0671e99a91/pydantic_core-2.41.5-cp313-cp313-win_amd64.whl", hash = "sha256:79ec52ec461e99e13791ec6508c722742ad745571f234ea6255bed38c6480f11", size = 2019766, upload-time = "2025-11-04T13:40:52.631Z" },
+    { url = "https://files.pythonhosted.org/packages/73/7d/f2f9db34af103bea3e09735bb40b021788a5e834c81eedb541991badf8f5/pydantic_core-2.41.5-cp313-cp313-win_arm64.whl", hash = "sha256:3f84d5c1b4ab906093bdc1ff10484838aca54ef08de4afa9de0f5f14d69639cd", size = 1981005, upload-time = "2025-11-04T13:40:54.734Z" },
+    { url = "https://files.pythonhosted.org/packages/ea/28/46b7c5c9635ae96ea0fbb779e271a38129df2550f763937659ee6c5dbc65/pydantic_core-2.41.5-cp314-cp314-macosx_10_12_x86_64.whl", hash = "sha256:3f37a19d7ebcdd20b96485056ba9e8b304e27d9904d233d7b1015db320e51f0a", size = 2119622, upload-time = "2025-11-04T13:40:56.68Z" },
+    { url = "https://files.pythonhosted.org/packages/74/1a/145646e5687e8d9a1e8d09acb278c8535ebe9e972e1f162ed338a622f193/pydantic_core-2.41.5-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:1d1d9764366c73f996edd17abb6d9d7649a7eb690006ab6adbda117717099b14", size = 1891725, upload-time = "2025-11-04T13:40:58.807Z" },
+    { url = "https://files.pythonhosted.org/packages/23/04/e89c29e267b8060b40dca97bfc64a19b2a3cf99018167ea1677d96368273/pydantic_core-2.41.5-cp314-cp314-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:25e1c2af0fce638d5f1988b686f3b3ea8cd7de5f244ca147c777769e798a9cd1", size = 1915040, upload-time = "2025-11-04T13:41:00.853Z" },
+    { url = "https://files.pythonhosted.org/packages/84/a3/15a82ac7bd97992a82257f777b3583d3e84bdb06ba6858f745daa2ec8a85/pydantic_core-2.41.5-cp314-cp314-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:506d766a8727beef16b7adaeb8ee6217c64fc813646b424d0804d67c16eddb66", size = 2063691, upload-time = "2025-11-04T13:41:03.504Z" },
+    { url = "https://files.pythonhosted.org/packages/74/9b/0046701313c6ef08c0c1cf0e028c67c770a4e1275ca73131563c5f2a310a/pydantic_core-2.41.5-cp314-cp314-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:4819fa52133c9aa3c387b3328f25c1facc356491e6135b459f1de698ff64d869", size = 2213897, upload-time = "2025-11-04T13:41:05.804Z" },
+    { url = "https://files.pythonhosted.org/packages/8a/cd/6bac76ecd1b27e75a95ca3a9a559c643b3afcd2dd62086d4b7a32a18b169/pydantic_core-2.41.5-cp314-cp314-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:2b761d210c9ea91feda40d25b4efe82a1707da2ef62901466a42492c028553a2", size = 2333302, upload-time = "2025-11-04T13:41:07.809Z" },
+    { url = "https://files.pythonhosted.org/packages/4c/d2/ef2074dc020dd6e109611a8be4449b98cd25e1b9b8a303c2f0fca2f2bcf7/pydantic_core-2.41.5-cp314-cp314-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:22f0fb8c1c583a3b6f24df2470833b40207e907b90c928cc8d3594b76f874375", size = 2064877, upload-time = "2025-11-04T13:41:09.827Z" },
+    { url = "https://files.pythonhosted.org/packages/18/66/e9db17a9a763d72f03de903883c057b2592c09509ccfe468187f2a2eef29/pydantic_core-2.41.5-cp314-cp314-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:2782c870e99878c634505236d81e5443092fba820f0373997ff75f90f68cd553", size = 2180680, upload-time = "2025-11-04T13:41:12.379Z" },
+    { url = "https://files.pythonhosted.org/packages/d3/9e/3ce66cebb929f3ced22be85d4c2399b8e85b622db77dad36b73c5387f8f8/pydantic_core-2.41.5-cp314-cp314-musllinux_1_1_aarch64.whl", hash = "sha256:0177272f88ab8312479336e1d777f6b124537d47f2123f89cb37e0accea97f90", size = 2138960, upload-time = "2025-11-04T13:41:14.627Z" },
+    { url = "https://files.pythonhosted.org/packages/a6/62/205a998f4327d2079326b01abee48e502ea739d174f0a89295c481a2272e/pydantic_core-2.41.5-cp314-cp314-musllinux_1_1_armv7l.whl", hash = "sha256:63510af5e38f8955b8ee5687740d6ebf7c2a0886d15a6d65c32814613681bc07", size = 2339102, upload-time = "2025-11-04T13:41:16.868Z" },
+    { url = "https://files.pythonhosted.org/packages/3c/0d/f05e79471e889d74d3d88f5bd20d0ed189ad94c2423d81ff8d0000aab4ff/pydantic_core-2.41.5-cp314-cp314-musllinux_1_1_x86_64.whl", hash = "sha256:e56ba91f47764cc14f1daacd723e3e82d1a89d783f0f5afe9c364b8bb491ccdb", size = 2326039, upload-time = "2025-11-04T13:41:18.934Z" },
+    { url = "https://files.pythonhosted.org/packages/ec/e1/e08a6208bb100da7e0c4b288eed624a703f4d129bde2da475721a80cab32/pydantic_core-2.41.5-cp314-cp314-win32.whl", hash = "sha256:aec5cf2fd867b4ff45b9959f8b20ea3993fc93e63c7363fe6851424c8a7e7c23", size = 1995126, upload-time = "2025-11-04T13:41:21.418Z" },
+    { url = "https://files.pythonhosted.org/packages/48/5d/56ba7b24e9557f99c9237e29f5c09913c81eeb2f3217e40e922353668092/pydantic_core-2.41.5-cp314-cp314-win_amd64.whl", hash = "sha256:8e7c86f27c585ef37c35e56a96363ab8de4e549a95512445b85c96d3e2f7c1bf", size = 2015489, upload-time = "2025-11-04T13:41:24.076Z" },
+    { url = "https://files.pythonhosted.org/packages/4e/bb/f7a190991ec9e3e0ba22e4993d8755bbc4a32925c0b5b42775c03e8148f9/pydantic_core-2.41.5-cp314-cp314-win_arm64.whl", hash = "sha256:e672ba74fbc2dc8eea59fb6d4aed6845e6905fc2a8afe93175d94a83ba2a01a0", size = 1977288, upload-time = "2025-11-04T13:41:26.33Z" },
+    { url = "https://files.pythonhosted.org/packages/92/ed/77542d0c51538e32e15afe7899d79efce4b81eee631d99850edc2f5e9349/pydantic_core-2.41.5-cp314-cp314t-macosx_10_12_x86_64.whl", hash = "sha256:8566def80554c3faa0e65ac30ab0932b9e3a5cd7f8323764303d468e5c37595a", size = 2120255, upload-time = "2025-11-04T13:41:28.569Z" },
+    { url = "https://files.pythonhosted.org/packages/bb/3d/6913dde84d5be21e284439676168b28d8bbba5600d838b9dca99de0fad71/pydantic_core-2.41.5-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:b80aa5095cd3109962a298ce14110ae16b8c1aece8b72f9dafe81cf597ad80b3", size = 1863760, upload-time = "2025-11-04T13:41:31.055Z" },
+    { url = "https://files.pythonhosted.org/packages/5a/f0/e5e6b99d4191da102f2b0eb9687aaa7f5bea5d9964071a84effc3e40f997/pydantic_core-2.41.5-cp314-cp314t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:3006c3dd9ba34b0c094c544c6006cc79e87d8612999f1a5d43b769b89181f23c", size = 1878092, upload-time = "2025-11-04T13:41:33.21Z" },
+    { url = "https://files.pythonhosted.org/packages/71/48/36fb760642d568925953bcc8116455513d6e34c4beaa37544118c36aba6d/pydantic_core-2.41.5-cp314-cp314t-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:72f6c8b11857a856bcfa48c86f5368439f74453563f951e473514579d44aa612", size = 2053385, upload-time = "2025-11-04T13:41:35.508Z" },
+    { url = "https://files.pythonhosted.org/packages/20/25/92dc684dd8eb75a234bc1c764b4210cf2646479d54b47bf46061657292a8/pydantic_core-2.41.5-cp314-cp314t-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:5cb1b2f9742240e4bb26b652a5aeb840aa4b417c7748b6f8387927bc6e45e40d", size = 2218832, upload-time = "2025-11-04T13:41:37.732Z" },
+    { url = "https://files.pythonhosted.org/packages/e2/09/f53e0b05023d3e30357d82eb35835d0f6340ca344720a4599cd663dca599/pydantic_core-2.41.5-cp314-cp314t-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:bd3d54f38609ff308209bd43acea66061494157703364ae40c951f83ba99a1a9", size = 2327585, upload-time = "2025-11-04T13:41:40Z" },
+    { url = "https://files.pythonhosted.org/packages/aa/4e/2ae1aa85d6af35a39b236b1b1641de73f5a6ac4d5a7509f77b814885760c/pydantic_core-2.41.5-cp314-cp314t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:2ff4321e56e879ee8d2a879501c8e469414d948f4aba74a2d4593184eb326660", size = 2041078, upload-time = "2025-11-04T13:41:42.323Z" },
+    { url = "https://files.pythonhosted.org/packages/cd/13/2e215f17f0ef326fc72afe94776edb77525142c693767fc347ed6288728d/pydantic_core-2.41.5-cp314-cp314t-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:d0d2568a8c11bf8225044aa94409e21da0cb09dcdafe9ecd10250b2baad531a9", size = 2173914, upload-time = "2025-11-04T13:41:45.221Z" },
+    { url = "https://files.pythonhosted.org/packages/02/7a/f999a6dcbcd0e5660bc348a3991c8915ce6599f4f2c6ac22f01d7a10816c/pydantic_core-2.41.5-cp314-cp314t-musllinux_1_1_aarch64.whl", hash = "sha256:a39455728aabd58ceabb03c90e12f71fd30fa69615760a075b9fec596456ccc3", size = 2129560, upload-time = "2025-11-04T13:41:47.474Z" },
+    { url = "https://files.pythonhosted.org/packages/3a/b1/6c990ac65e3b4c079a4fb9f5b05f5b013afa0f4ed6780a3dd236d2cbdc64/pydantic_core-2.41.5-cp314-cp314t-musllinux_1_1_armv7l.whl", hash = "sha256:239edca560d05757817c13dc17c50766136d21f7cd0fac50295499ae24f90fdf", size = 2329244, upload-time = "2025-11-04T13:41:49.992Z" },
+    { url = "https://files.pythonhosted.org/packages/d9/02/3c562f3a51afd4d88fff8dffb1771b30cfdfd79befd9883ee094f5b6c0d8/pydantic_core-2.41.5-cp314-cp314t-musllinux_1_1_x86_64.whl", hash = "sha256:2a5e06546e19f24c6a96a129142a75cee553cc018ffee48a460059b1185f4470", size = 2331955, upload-time = "2025-11-04T13:41:54.079Z" },
+    { url = "https://files.pythonhosted.org/packages/5c/96/5fb7d8c3c17bc8c62fdb031c47d77a1af698f1d7a406b0f79aaa1338f9ad/pydantic_core-2.41.5-cp314-cp314t-win32.whl", hash = "sha256:b4ececa40ac28afa90871c2cc2b9ffd2ff0bf749380fbdf57d165fd23da353aa", size = 1988906, upload-time = "2025-11-04T13:41:56.606Z" },
+    { url = "https://files.pythonhosted.org/packages/22/ed/182129d83032702912c2e2d8bbe33c036f342cc735737064668585dac28f/pydantic_core-2.41.5-cp314-cp314t-win_amd64.whl", hash = "sha256:80aa89cad80b32a912a65332f64a4450ed00966111b6615ca6816153d3585a8c", size = 1981607, upload-time = "2025-11-04T13:41:58.889Z" },
+    { url = "https://files.pythonhosted.org/packages/9f/ed/068e41660b832bb0b1aa5b58011dea2a3fe0ba7861ff38c4d4904c1c1a99/pydantic_core-2.41.5-cp314-cp314t-win_arm64.whl", hash = "sha256:35b44f37a3199f771c3eaa53051bc8a70cd7b54f333531c59e29fd4db5d15008", size = 1974769, upload-time = "2025-11-04T13:42:01.186Z" },
+    { url = "https://files.pythonhosted.org/packages/11/72/90fda5ee3b97e51c494938a4a44c3a35a9c96c19bba12372fb9c634d6f57/pydantic_core-2.41.5-graalpy311-graalpy242_311_native-macosx_10_12_x86_64.whl", hash = "sha256:b96d5f26b05d03cc60f11a7761a5ded1741da411e7fe0909e27a5e6a0cb7b034", size = 2115441, upload-time = "2025-11-04T13:42:39.557Z" },
+    { url = "https://files.pythonhosted.org/packages/1f/53/8942f884fa33f50794f119012dc6a1a02ac43a56407adaac20463df8e98f/pydantic_core-2.41.5-graalpy311-graalpy242_311_native-macosx_11_0_arm64.whl", hash = "sha256:634e8609e89ceecea15e2d61bc9ac3718caaaa71963717bf3c8f38bfde64242c", size = 1930291, upload-time = "2025-11-04T13:42:42.169Z" },
+    { url = "https://files.pythonhosted.org/packages/79/c8/ecb9ed9cd942bce09fc888ee960b52654fbdbede4ba6c2d6e0d3b1d8b49c/pydantic_core-2.41.5-graalpy311-graalpy242_311_native-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:93e8740d7503eb008aa2df04d3b9735f845d43ae845e6dcd2be0b55a2da43cd2", size = 1948632, upload-time = "2025-11-04T13:42:44.564Z" },
+    { url = "https://files.pythonhosted.org/packages/2e/1b/687711069de7efa6af934e74f601e2a4307365e8fdc404703afc453eab26/pydantic_core-2.41.5-graalpy311-graalpy242_311_native-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:f15489ba13d61f670dcc96772e733aad1a6f9c429cc27574c6cdaed82d0146ad", size = 2138905, upload-time = "2025-11-04T13:42:47.156Z" },
+    { url = "https://files.pythonhosted.org/packages/09/32/59b0c7e63e277fa7911c2fc70ccfb45ce4b98991e7ef37110663437005af/pydantic_core-2.41.5-graalpy312-graalpy250_312_native-macosx_10_12_x86_64.whl", hash = "sha256:7da7087d756b19037bc2c06edc6c170eeef3c3bafcb8f532ff17d64dc427adfd", size = 2110495, upload-time = "2025-11-04T13:42:49.689Z" },
+    { url = "https://files.pythonhosted.org/packages/aa/81/05e400037eaf55ad400bcd318c05bb345b57e708887f07ddb2d20e3f0e98/pydantic_core-2.41.5-graalpy312-graalpy250_312_native-macosx_11_0_arm64.whl", hash = "sha256:aabf5777b5c8ca26f7824cb4a120a740c9588ed58df9b2d196ce92fba42ff8dc", size = 1915388, upload-time = "2025-11-04T13:42:52.215Z" },
+    { url = "https://files.pythonhosted.org/packages/6e/0d/e3549b2399f71d56476b77dbf3cf8937cec5cd70536bdc0e374a421d0599/pydantic_core-2.41.5-graalpy312-graalpy250_312_native-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:c007fe8a43d43b3969e8469004e9845944f1a80e6acd47c150856bb87f230c56", size = 1942879, upload-time = "2025-11-04T13:42:56.483Z" },
+    { url = "https://files.pythonhosted.org/packages/f7/07/34573da085946b6a313d7c42f82f16e8920bfd730665de2d11c0c37a74b5/pydantic_core-2.41.5-graalpy312-graalpy250_312_native-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:76d0819de158cd855d1cbb8fcafdf6f5cf1eb8e470abe056d5d161106e38062b", size = 2139017, upload-time = "2025-11-04T13:42:59.471Z" },
+    { url = "https://files.pythonhosted.org/packages/e6/b0/1a2aa41e3b5a4ba11420aba2d091b2d17959c8d1519ece3627c371951e73/pydantic_core-2.41.5-pp310-pypy310_pp73-macosx_10_12_x86_64.whl", hash = "sha256:b5819cd790dbf0c5eb9f82c73c16b39a65dd6dd4d1439dcdea7816ec9adddab8", size = 2103351, upload-time = "2025-11-04T13:43:02.058Z" },
+    { url = "https://files.pythonhosted.org/packages/a4/ee/31b1f0020baaf6d091c87900ae05c6aeae101fa4e188e1613c80e4f1ea31/pydantic_core-2.41.5-pp310-pypy310_pp73-macosx_11_0_arm64.whl", hash = "sha256:5a4e67afbc95fa5c34cf27d9089bca7fcab4e51e57278d710320a70b956d1b9a", size = 1925363, upload-time = "2025-11-04T13:43:05.159Z" },
+    { url = "https://files.pythonhosted.org/packages/e1/89/ab8e86208467e467a80deaca4e434adac37b10a9d134cd2f99b28a01e483/pydantic_core-2.41.5-pp310-pypy310_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:ece5c59f0ce7d001e017643d8d24da587ea1f74f6993467d85ae8a5ef9d4f42b", size = 2135615, upload-time = "2025-11-04T13:43:08.116Z" },
+    { url = "https://files.pythonhosted.org/packages/99/0a/99a53d06dd0348b2008f2f30884b34719c323f16c3be4e6cc1203b74a91d/pydantic_core-2.41.5-pp310-pypy310_pp73-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:16f80f7abe3351f8ea6858914ddc8c77e02578544a0ebc15b4c2e1a0e813b0b2", size = 2175369, upload-time = "2025-11-04T13:43:12.49Z" },
+    { url = "https://files.pythonhosted.org/packages/6d/94/30ca3b73c6d485b9bb0bc66e611cff4a7138ff9736b7e66bcf0852151636/pydantic_core-2.41.5-pp310-pypy310_pp73-musllinux_1_1_aarch64.whl", hash = "sha256:33cb885e759a705b426baada1fe68cbb0a2e68e34c5d0d0289a364cf01709093", size = 2144218, upload-time = "2025-11-04T13:43:15.431Z" },
+    { url = "https://files.pythonhosted.org/packages/87/57/31b4f8e12680b739a91f472b5671294236b82586889ef764b5fbc6669238/pydantic_core-2.41.5-pp310-pypy310_pp73-musllinux_1_1_armv7l.whl", hash = "sha256:c8d8b4eb992936023be7dee581270af5c6e0697a8559895f527f5b7105ecd36a", size = 2329951, upload-time = "2025-11-04T13:43:18.062Z" },
+    { url = "https://files.pythonhosted.org/packages/7d/73/3c2c8edef77b8f7310e6fb012dbc4b8551386ed575b9eb6fb2506e28a7eb/pydantic_core-2.41.5-pp310-pypy310_pp73-musllinux_1_1_x86_64.whl", hash = "sha256:242a206cd0318f95cd21bdacff3fcc3aab23e79bba5cac3db5a841c9ef9c6963", size = 2318428, upload-time = "2025-11-04T13:43:20.679Z" },
+    { url = "https://files.pythonhosted.org/packages/2f/02/8559b1f26ee0d502c74f9cca5c0d2fd97e967e083e006bbbb4e97f3a043a/pydantic_core-2.41.5-pp310-pypy310_pp73-win_amd64.whl", hash = "sha256:d3a978c4f57a597908b7e697229d996d77a6d3c94901e9edee593adada95ce1a", size = 2147009, upload-time = "2025-11-04T13:43:23.286Z" },
+    { url = "https://files.pythonhosted.org/packages/5f/9b/1b3f0e9f9305839d7e84912f9e8bfbd191ed1b1ef48083609f0dabde978c/pydantic_core-2.41.5-pp311-pypy311_pp73-macosx_10_12_x86_64.whl", hash = "sha256:b2379fa7ed44ddecb5bfe4e48577d752db9fc10be00a6b7446e9663ba143de26", size = 2101980, upload-time = "2025-11-04T13:43:25.97Z" },
+    { url = "https://files.pythonhosted.org/packages/a4/ed/d71fefcb4263df0da6a85b5d8a7508360f2f2e9b3bf5814be9c8bccdccc1/pydantic_core-2.41.5-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:266fb4cbf5e3cbd0b53669a6d1b039c45e3ce651fd5442eff4d07c2cc8d66808", size = 1923865, upload-time = "2025-11-04T13:43:28.763Z" },
+    { url = "https://files.pythonhosted.org/packages/ce/3a/626b38db460d675f873e4444b4bb030453bbe7b4ba55df821d026a0493c4/pydantic_core-2.41.5-pp311-pypy311_pp73-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:58133647260ea01e4d0500089a8c4f07bd7aa6ce109682b1426394988d8aaacc", size = 2134256, upload-time = "2025-11-04T13:43:31.71Z" },
+    { url = "https://files.pythonhosted.org/packages/83/d9/8412d7f06f616bbc053d30cb4e5f76786af3221462ad5eee1f202021eb4e/pydantic_core-2.41.5-pp311-pypy311_pp73-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:287dad91cfb551c363dc62899a80e9e14da1f0e2b6ebde82c806612ca2a13ef1", size = 2174762, upload-time = "2025-11-04T13:43:34.744Z" },
+    { url = "https://files.pythonhosted.org/packages/55/4c/162d906b8e3ba3a99354e20faa1b49a85206c47de97a639510a0e673f5da/pydantic_core-2.41.5-pp311-pypy311_pp73-musllinux_1_1_aarch64.whl", hash = "sha256:03b77d184b9eb40240ae9fd676ca364ce1085f203e1b1256f8ab9984dca80a84", size = 2143141, upload-time = "2025-11-04T13:43:37.701Z" },
+    { url = "https://files.pythonhosted.org/packages/1f/f2/f11dd73284122713f5f89fc940f370d035fa8e1e078d446b3313955157fe/pydantic_core-2.41.5-pp311-pypy311_pp73-musllinux_1_1_armv7l.whl", hash = "sha256:a668ce24de96165bb239160b3d854943128f4334822900534f2fe947930e5770", size = 2330317, upload-time = "2025-11-04T13:43:40.406Z" },
+    { url = "https://files.pythonhosted.org/packages/88/9d/b06ca6acfe4abb296110fb1273a4d848a0bfb2ff65f3ee92127b3244e16b/pydantic_core-2.41.5-pp311-pypy311_pp73-musllinux_1_1_x86_64.whl", hash = "sha256:f14f8f046c14563f8eb3f45f499cc658ab8d10072961e07225e507adb700e93f", size = 2316992, upload-time = "2025-11-04T13:43:43.602Z" },
+    { url = "https://files.pythonhosted.org/packages/36/c7/cfc8e811f061c841d7990b0201912c3556bfeb99cdcb7ed24adc8d6f8704/pydantic_core-2.41.5-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:56121965f7a4dc965bff783d70b907ddf3d57f6eba29b6d2e5dabfaf07799c51", size = 2145302, upload-time = "2025-11-04T13:43:46.64Z" },
+]
+
+[[package]]
+name = "sniffio"
+version = "1.3.1"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/a2/87/a6771e1546d97e7e041b6ae58d80074f81b7d5121207425c964ddf5cfdbd/sniffio-1.3.1.tar.gz", hash = "sha256:f4324edc670a0f49750a81b895f35c3adb843cca46f0530f79fc1babb23789dc", size = 20372, upload-time = "2024-02-25T23:20:04.057Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/e9/44/75a9c9421471a6c4805dbf2356f7c181a29c1879239abab1ea2cc8f38b40/sniffio-1.3.1-py3-none-any.whl", hash = "sha256:2f6da418d1f1e0fddd844478f41680e794e6051915791a034ff65e5f100525a2", size = 10235, upload-time = "2024-02-25T23:20:01.196Z" },
+]
+
+[[package]]
+name = "synapbus-e2e"
+version = "0.1.0"
+source = { virtual = "." }
+dependencies = [
+    { name = "anthropic" },
+    { name = "httpx" },
+]
+
+[package.metadata]
+requires-dist = [
+    { name = "anthropic", specifier = ">=0.50.0" },
+    { name = "httpx", specifier = ">=0.27.0" },
+]
+
+[[package]]
+name = "typing-extensions"
+version = "4.15.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/72/94/1a15dd82efb362ac84269196e94cf00f187f7ed21c242792a923cdb1c61f/typing_extensions-4.15.0.tar.gz", hash = "sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466", size = 109391, upload-time = "2025-08-25T13:49:26.313Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/18/67/36e9267722cc04a6b9f15c7f3441c2363321a3ea07da7ae0c0707beb2a9c/typing_extensions-4.15.0-py3-none-any.whl", hash = "sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548", size = 44614, upload-time = "2025-08-25T13:49:24.86Z" },
+]
+
+[[package]]
+name = "typing-inspection"
+version = "0.4.2"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "typing-extensions" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/55/e3/70399cb7dd41c10ac53367ae42139cf4b1ca5f36bb3dc6c9d33acdb43655/typing_inspection-0.4.2.tar.gz", hash = "sha256:ba561c48a67c5958007083d386c3295464928b01faa735ab8547c5692e87f464", size = 75949, upload-time = "2025-10-01T02:14:41.687Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/dc/9b/47798a6c91d8bdb567fe2698fe81e0c6b7cb7ef4d13da4114b41d239f65d/typing_inspection-0.4.2-py3-none-any.whl", hash = "sha256:4ed1cacbdc298c220f1bd249ed5287caa16f34d44ef4e9c3d0cbad5b521545e7", size = 14611, upload-time = "2025-10-01T02:14:40.154Z" },
+]

tests/integration/mcp_e2e_test.go

@@ -126,7 +126,7 @@ func setupEnv(t *testing.T) *testEnv {
 	actionIndex := actions.NewIndex(actionRegistry.List())
 
 	// Create MCP server with 4 hybrid tools
-	mcpSrv := mcpserver.NewMCPServer(msgService, agentService, channelService, swarmService, attService, searchService, con, jsPool, actionRegistry, actionIndex, db)
+	mcpSrv := mcpserver.NewMCPServer(msgService, agentService, channelService, swarmService, attService, searchService, nil, con, jsPool, actionRegistry, actionIndex, db)
 	t.Cleanup(func() {
 		mcpSrv.Shutdown(context.Background())
 	})

tests/report.html

@@ -0,0 +1,723 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>SynapBus E2E Test Report</title>
+<style>
+:root {
+    --bg: #0f172a;
+    --surface: #1e293b;
+    --surface2: #334155;
+    --text: #e2e8f0;
+    --text-dim: #94a3b8;
+    --border: #475569;
+    --green: #10b981;
+    --red: #ef4444;
+    --yellow: #f59e0b;
+    --blue: #3b82f6;
+    --purple: #8b5cf6;
+}
+
+* { margin: 0; padding: 0; box-sizing: border-box; }
+
+body {
+    font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+    background: var(--bg);
+    color: var(--text);
+    line-height: 1.6;
+    padding: 2rem;
+    max-width: 1200px;
+    margin: 0 auto;
+}
+
+h1 { font-size: 1.8rem; margin-bottom: 0.5rem; }
+h2 { font-size: 1.3rem; margin-bottom: 1rem; color: var(--text-dim); }
+h3 { font-size: 1.1rem; margin-bottom: 0.5rem; }
+h4 { font-size: 0.95rem; margin: 1rem 0 0.5rem; color: var(--text-dim); }
+
+.header {
+    text-align: center;
+    padding: 2rem 0;
+    border-bottom: 1px solid var(--border);
+    margin-bottom: 2rem;
+}
+
+.header .subtitle {
+    color: var(--text-dim);
+    font-size: 0.9rem;
+}
+
+.dashboard {
+    display: grid;
+    grid-template-columns: repeat(auto-fit, minmax(160px, 1fr));
+    gap: 1rem;
+    margin-bottom: 2rem;
+}
+
+.stat-card {
+    background: var(--surface);
+    border-radius: 8px;
+    padding: 1.2rem;
+    text-align: center;
+}
+
+.stat-card .stat-value {
+    font-size: 2rem;
+    font-weight: 700;
+}
+
+.stat-card .stat-label {
+    font-size: 0.8rem;
+    color: var(--text-dim);
+    text-transform: uppercase;
+    letter-spacing: 0.05em;
+}
+
+.stat-value.green { color: var(--green); }
+.stat-value.red { color: var(--red); }
+.stat-value.yellow { color: var(--yellow); }
+.stat-value.blue { color: var(--blue); }
+.stat-value.purple { color: var(--purple); }
+
+.filter-bar {
+    display: flex;
+    gap: 0.5rem;
+    margin-bottom: 1.5rem;
+    flex-wrap: wrap;
+}
+
+.filter-btn {
+    background: var(--surface);
+    color: var(--text);
+    border: 1px solid var(--border);
+    border-radius: 6px;
+    padding: 0.4rem 1rem;
+    cursor: pointer;
+    font-size: 0.85rem;
+    transition: all 0.2s;
+}
+
+.filter-btn:hover { background: var(--surface2); }
+.filter-btn.active { background: var(--blue); border-color: var(--blue); }
+
+.scenario-card {
+    background: var(--surface);
+    border-radius: 8px;
+    margin-bottom: 1rem;
+    overflow: hidden;
+}
+
+.scenario-header {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    padding: 1rem 1.2rem;
+    cursor: pointer;
+    transition: background 0.2s;
+    flex-wrap: wrap;
+    gap: 0.5rem;
+}
+
+.scenario-header:hover { background: var(--surface2); }
+
+.scenario-title {
+    display: flex;
+    align-items: center;
+    gap: 0.75rem;
+    font-weight: 600;
+    font-size: 1rem;
+}
+
+.scenario-meta {
+    display: flex;
+    gap: 1rem;
+    font-size: 0.8rem;
+    color: var(--text-dim);
+}
+
+.meta-item {
+    white-space: nowrap;
+}
+
+.badge {
+    display: inline-block;
+    padding: 0.15rem 0.6rem;
+    border-radius: 4px;
+    font-size: 0.7rem;
+    font-weight: 700;
+    color: white;
+    letter-spacing: 0.05em;
+}
+
+.scenario-body {
+    padding: 0 1.2rem 1.2rem;
+    display: none;
+}
+
+.scenario-body.open { display: block; }
+
+.description {
+    color: var(--text-dim);
+    font-size: 0.9rem;
+    margin-bottom: 0.5rem;
+}
+
+.agents-list {
+    font-size: 0.85rem;
+    color: var(--text-dim);
+    margin-bottom: 1rem;
+    font-family: 'SF Mono', 'Fira Code', monospace;
+}
+
+.verification-table {
+    width: 100%;
+    border-collapse: collapse;
+    font-size: 0.85rem;
+    margin-bottom: 1rem;
+}
+
+.verification-table th {
+    text-align: left;
+    padding: 0.4rem 0.6rem;
+    background: var(--surface2);
+    color: var(--text-dim);
+    font-weight: 600;
+    font-size: 0.75rem;
+    text-transform: uppercase;
+}
+
+.verification-table td {
+    padding: 0.4rem 0.6rem;
+    border-bottom: 1px solid var(--border);
+}
+
+.mono { font-family: 'SF Mono', 'Fira Code', monospace; font-size: 0.8rem; }
+
+.error-block {
+    background: rgba(239, 68, 68, 0.1);
+    border: 1px solid var(--red);
+    border-radius: 6px;
+    padding: 1rem;
+    margin: 1rem 0;
+}
+
+.error-block pre {
+    color: var(--red);
+    white-space: pre-wrap;
+    word-break: break-word;
+    font-size: 0.8rem;
+}
+
+.agent-run {
+    background: var(--bg);
+    border-radius: 6px;
+    padding: 1rem;
+    margin-bottom: 0.75rem;
+}
+
+.run-header {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    margin-bottom: 0.5rem;
+    flex-wrap: wrap;
+    gap: 0.5rem;
+}
+
+.agent-name {
+    font-weight: 700;
+    color: var(--purple);
+    font-size: 0.95rem;
+}
+
+.run-meta {
+    font-size: 0.8rem;
+    color: var(--text-dim);
+}
+
+.run-error {
+    background: rgba(239, 68, 68, 0.1);
+    color: var(--red);
+    padding: 0.5rem;
+    border-radius: 4px;
+    font-size: 0.85rem;
+    margin-bottom: 0.5rem;
+}
+
+details {
+    margin-bottom: 0.5rem;
+}
+
+summary {
+    cursor: pointer;
+    color: var(--text-dim);
+    font-size: 0.85rem;
+    padding: 0.3rem 0;
+}
+
+summary:hover { color: var(--text); }
+
+pre {
+    font-family: 'SF Mono', 'Fira Code', monospace;
+    font-size: 0.8rem;
+    background: var(--surface2);
+    padding: 0.6rem;
+    border-radius: 4px;
+    white-space: pre-wrap;
+    word-break: break-word;
+    max-height: 300px;
+    overflow-y: auto;
+    margin-top: 0.3rem;
+}
+
+.tool-call {
+    border-left: 3px solid var(--border);
+    padding: 0.3rem 0 0.3rem 0.8rem;
+    margin-bottom: 0.4rem;
+}
+
+.tool-call.tc-pass { border-left-color: var(--green); }
+.tool-call.tc-fail { border-left-color: var(--red); }
+
+.tc-header {
+    display: flex;
+    gap: 1rem;
+    align-items: center;
+    cursor: pointer;
+    font-size: 0.85rem;
+    padding: 0.2rem 0;
+}
+
+.tc-header:hover { color: var(--blue); }
+
+.tc-tool {
+    font-weight: 600;
+    font-family: 'SF Mono', 'Fira Code', monospace;
+}
+
+.tc-status { font-size: 0.75rem; }
+.tc-duration { font-size: 0.75rem; color: var(--text-dim); }
+
+.tc-body { padding: 0.5rem 0; }
+.tc-section { margin-bottom: 0.5rem; }
+.tc-section strong { font-size: 0.8rem; color: var(--text-dim); }
+
+.footer {
+    text-align: center;
+    padding: 2rem 0;
+    color: var(--text-dim);
+    font-size: 0.8rem;
+    border-top: 1px solid var(--border);
+    margin-top: 2rem;
+}
+</style>
+</head>
+<body>
+
+<div class="header">
+    <h1>SynapBus E2E Test Report</h1>
+    <p class="subtitle">Generated 2026-03-13 16:04:35 | Model: claude-sonnet-4-6 | Server: http://localhost:9090</p>
+</div>
+
+<div class="dashboard">
+    <div class="stat-card">
+        <div class="stat-value">1</div>
+        <div class="stat-label">Scenarios</div>
+    </div>
+    <div class="stat-card">
+        <div class="stat-value green">1</div>
+        <div class="stat-label">Passed</div>
+    </div>
+    <div class="stat-card">
+        <div class="stat-value red">0</div>
+        <div class="stat-label">Failed</div>
+    </div>
+    <div class="stat-card">
+        <div class="stat-value yellow">0</div>
+        <div class="stat-label">Errors</div>
+    </div>
+    <div class="stat-card">
+        <div class="stat-value blue">31.2s</div>
+        <div class="stat-label">Duration</div>
+    </div>
+    <div class="stat-card">
+        <div class="stat-value purple">11.3k / 1.3k</div>
+        <div class="stat-label">Tokens In/Out</div>
+    </div>
+    <div class="stat-card">
+        <div class="stat-value">$0.0536</div>
+        <div class="stat-label">Est. Cost</div>
+    </div>
+    <div class="stat-card">
+        <div class="stat-value">6</div>
+        <div class="stat-label">Tool Calls</div>
+    </div>
+</div>
+
+<div class="filter-bar">
+    <button class="filter-btn active" onclick="filterScenarios('all')">All (1)</button>
+    <button class="filter-btn" onclick="filterScenarios('pass')">Passed (1)</button>
+    <button class="filter-btn" onclick="filterScenarios('fail')">Failed (0)</button>
+    <button class="filter-btn" onclick="filterScenarios('error')">Errors (0)</button>
+</div>
+
+<div id="scenarios">
+
+    <div class="scenario-card" style="border-left: 4px solid #10b981" id="scenario-0">
+        <div class="scenario-header" onclick="toggleSection('scenario-body-0')">
+            <div class="scenario-title">
+                <span class="badge" style="background:#10b981">PASS</span> <span>direct_messaging</span>
+            </div>
+            <div class="scenario-meta">
+                <span class="meta-item">31.2s</span>
+                <span class="meta-item">11.3k in / 1.3k out</span>
+                <span class="meta-item">$0.0536</span>
+                <span class="meta-item">2 agents</span>
+            </div>
+        </div>
+        <div class="scenario-body" id="scenario-body-0">
+            <p class="description">Two agents exchange direct messages: discover, send, read, claim, reply, mark done</p>
+            <div class="agents-list">Agents: dm_alice, dm_bob</div>
+            
+            <h4>Verifications</h4>
+            <table class="verification-table">
+                <tr><th>Status</th><th>Check</th><th>Detail</th></tr>
+                <tr><td><span style="color:#10b981;font-weight:bold">PASS</span></td><td>Alice sent message to Bob</td><td class="mono">Found send_message tool call</td></tr>
+<tr><td><span style="color:#10b981;font-weight:bold">PASS</span></td><td>Bob read inbox</td><td class="mono"></td></tr>
+<tr><td><span style="color:#10b981;font-weight:bold">PASS</span></td><td>Bob claimed message</td><td class="mono"></td></tr>
+<tr><td><span style="color:#10b981;font-weight:bold">PASS</span></td><td>Bob sent reply</td><td class="mono"></td></tr>
+<tr><td><span style="color:#10b981;font-weight:bold">PASS</span></td><td>Bob marked done</td><td class="mono"></td></tr>
+<tr><td><span style="color:#10b981;font-weight:bold">PASS</span></td><td>Alice received reply from Bob</td><td class="mono">1 reply(ies) found</td></tr>
+            </table>
+            
+            
+            <div class="runs-section">
+                <h4>Agent Runs</h4>
+                
+    <div class="agent-run">
+        <div class="run-header">
+            <span class="agent-name">dm_alice</span>
+            <span class="run-meta">9.2s | 3.1k in / 427 out | 2 tool calls</span>
+        </div>
+        
+        <div class="run-prompt">
+            <details>
+                <summary>Prompts</summary>
+                <div class="prompt-section">
+                    <strong>System:</strong>
+                    <pre>You are Alice, a research agent on SynapBus. You communicate with other agents using the provided tools. Be concise. Complete your task in as few tool calls as possible.</pre>
+                </div>
+                <div class="prompt-section">
+                    <strong>User:</strong>
+                    <pre>First, discover what other agents are available using discover_agents. Then send a message to &#x27;dm_bob&#x27; asking: &#x27;What are the top 3 trade-offs of using MCP vs REST APIs for agent-to-agent communication?&#x27; Use subject &#x27;MCP vs REST Analysis&#x27;.</pre>
+                </div>
+            </details>
+        </div>
+        <div class="run-response">
+            <details>
+                <summary>Response</summary>
+                <pre>Here&#x27;s a summary of what happened:
+
+---
+
+### 🔍 Agent Discovery
+The discovery query for **&quot;agent communication&quot;** returned **no agents currently registered** on SynapBus. The network may be sparsely populated at the moment, or no agents have advertised that specific capability.
+
+---
+
+### ✉️ Message Sent to `dm_bob`
+The message was successfully delivered! Here are the details:
+
+| Field | Value |
+|---|---|
+| **Recipient** | `dm_bob` |
+| **Subject** | MCP vs REST Analysis |
+| **Body** | *What are the top 3 trade-offs of using MCP vs REST APIs for agent-to-agent communication?* |
+| **Message ID** | `1` |
+| **Conversation ID** | `1` |
+| **Status** | ✅ Pending |
+
+---
+
+The message is queued and awaiting `dm_bob`&#x27;s response. Would you like me to poll the inbox for a reply or do anything else in the...</pre>
+            </details>
+        </div>
+        <div class="tool-calls">
+            
+        <div class="tool-call tc-pass">
+            <div class="tc-header" onclick="toggleSection('tc-4502584496-1773410648140')">
+                <span class="tc-tool">discover_agents</span>
+                <span class="tc-status">OK</span>
+                <span class="tc-duration">62ms</span>
+            </div>
+            <div class="tc-body" id="tc-4502584496-1773410648140" style="display:none">
+                <div class="tc-section">
+                    <strong>Input:</strong>
+                    <pre>{
+  &quot;query&quot;: &quot;agent communication&quot;
+}</pre>
+                </div>
+                <div class="tc-section">
+                    <strong>Output:</strong>
+                    <pre>{
+  &quot;agents&quot;: [],
+  &quot;count&quot;: 0
+}</pre>
+                </div>
+            </div>
+        </div>
+        
+
+        <div class="tool-call tc-pass">
+            <div class="tc-header" onclick="toggleSection('tc-4504817168-1773410648189')">
+                <span class="tc-tool">send_message</span>
+                <span class="tc-status">OK</span>
+                <span class="tc-duration">49ms</span>
+            </div>
+            <div class="tc-body" id="tc-4504817168-1773410648189" style="display:none">
+                <div class="tc-section">
+                    <strong>Input:</strong>
+                    <pre>{
+  &quot;to&quot;: &quot;dm_bob&quot;,
+  &quot;subject&quot;: &quot;MCP vs REST Analysis&quot;,
+  &quot;body&quot;: &quot;What are the top 3 trade-offs of using MCP vs REST APIs for agent-to-agent communication?&quot;
+}</pre>
+                </div>
+                <div class="tc-section">
+                    <strong>Output:</strong>
+                    <pre>{
+  &quot;conversation_id&quot;: 1,
+  &quot;message_id&quot;: 1,
+  &quot;status&quot;: &quot;pending&quot;
+}</pre>
+                </div>
+            </div>
+        </div>
+        
+        </div>
+    </div>
+    
+
+    <div class="agent-run">
+        <div class="run-header">
+            <span class="agent-name">dm_bob</span>
+            <span class="run-meta">21.3s | 8.2k in / 895 out | 4 tool calls</span>
+        </div>
+        
+        <div class="run-prompt">
+            <details>
+                <summary>Prompts</summary>
+                <div class="prompt-section">
+                    <strong>System:</strong>
+                    <pre>You are Bob, a data analyst agent on SynapBus. When you receive messages, process them and reply. Be concise and direct. Complete your task efficiently.</pre>
+                </div>
+                <div class="prompt-section">
+                    <strong>User:</strong>
+                    <pre>1. Check your inbox using read_inbox
+2. Claim the message using claim_messages
+3. Send a reply to &#x27;dm_alice&#x27; answering her question about MCP vs REST
+4. Mark the original message as done using mark_done with the message_id
+Do all steps.</pre>
+                </div>
+            </details>
+        </div>
+        <div class="run-response">
+            <details>
+                <summary>Response</summary>
+                <pre>All 4 steps completed! Here&#x27;s a summary:
+
+| Step | Action | Result |
+|------|--------|--------|
+| ✅ 1 | **Read Inbox** | Found 1 message from `dm_alice` asking about MCP vs REST |
+| ✅ 2 | **Claim Message** | Message ID `1` claimed and set to `processing` |
+| ✅ 3 | **Send Reply** | Detailed 3-point answer sent to `dm_alice` (new message ID: `2`) |
+| ✅ 4 | **Mark Done** | Original message ID `1` marked as `done` |
+
+The reply covered the three key trade-offs: **protocol overhead vs. simplicity**, **statefulness &amp; context management**, and **ecosystem &amp; interoperability**.</pre>
+            </details>
+        </div>
+        <div class="tool-calls">
+            
+        <div class="tool-call tc-pass">
+            <div class="tc-header" onclick="toggleSection('tc-4504817808-1773410657015')">
+                <span class="tc-tool">read_inbox</span>
+                <span class="tc-status">OK</span>
+                <span class="tc-duration">116ms</span>
+            </div>
+            <div class="tc-body" id="tc-4504817808-1773410657015" style="display:none">
+                <div class="tc-section">
+                    <strong>Input:</strong>
+                    <pre>{}</pre>
+                </div>
+                <div class="tc-section">
+                    <strong>Output:</strong>
+                    <pre>{
+  &quot;count&quot;: 1,
+  &quot;messages&quot;: [
+    {
+      &quot;id&quot;: 1,
+      &quot;conversation_id&quot;: 1,
+      &quot;from_agent&quot;: &quot;dm_alice&quot;,
+      &quot;to_agent&quot;: &quot;dm_bob&quot;,
+      &quot;body&quot;: &quot;What are the top 3 trade-offs of using MCP vs REST APIs for agent-to-agent communication?&quot;,
+      &quot;priority&quot;: 5,
+      &quot;status&quot;: &quot;pending&quot;,
+      &quot;metadata&quot;: {},
+      &quot;created_at&quot;: &quot;2026-03-13T14:04:08Z&quot;,
+      &quot;updated_at&quot;: &quot;2026-03-13T14:04:08Z&quot;
+    }
+  ]
+}</pre>
+                </div>
+            </div>
+        </div>
+        
+
+        <div class="tool-call tc-pass">
+            <div class="tc-header" onclick="toggleSection('tc-4504704736-1773410657106')">
+                <span class="tc-tool">claim_messages</span>
+                <span class="tc-status">OK</span>
+                <span class="tc-duration">91ms</span>
+            </div>
+            <div class="tc-body" id="tc-4504704736-1773410657106" style="display:none">
+                <div class="tc-section">
+                    <strong>Input:</strong>
+                    <pre>{}</pre>
+                </div>
+                <div class="tc-section">
+                    <strong>Output:</strong>
+                    <pre>{
+  &quot;count&quot;: 1,
+  &quot;messages&quot;: [
+    {
+      &quot;id&quot;: 1,
+      &quot;conversation_id&quot;: 1,
+      &quot;from_agent&quot;: &quot;dm_alice&quot;,
+      &quot;to_agent&quot;: &quot;dm_bob&quot;,
+      &quot;body&quot;: &quot;What are the top 3 trade-offs of using MCP vs REST APIs for agent-to-agent communication?&quot;,
+      &quot;priority&quot;: 5,
+      &quot;status&quot;: &quot;processing&quot;,
+      &quot;metadata&quot;: {},
+      &quot;claimed_by&quot;: &quot;dm_bob&quot;,
+      &quot;claimed_at&quot;: &quot;2026-03-13T14:04:17Z&quot;,
+      &quot;created_at&quot;: &quot;2026-03-13T14:04:08Z&quot;,
+      &quot;updated_at&quot;: &quot;2026-03-13T14:04:17Z&quot;
+    }
+  ]
+}</pre>
+                </div>
+            </div>
+        </div>
+        
+
+        <div class="tool-call tc-pass">
+            <div class="tc-header" onclick="toggleSection('tc-4504707472-1773410668809')">
+                <span class="tc-tool">send_message</span>
+                <span class="tc-status">OK</span>
+                <span class="tc-duration">114ms</span>
+            </div>
+            <div class="tc-body" id="tc-4504707472-1773410668809" style="display:none">
+                <div class="tc-section">
+                    <strong>Input:</strong>
+                    <pre>{
+  &quot;to&quot;: &quot;dm_alice&quot;,
+  &quot;subject&quot;: &quot;Re: MCP vs REST APIs for Agent-to-Agent Communication&quot;,
+  &quot;body&quot;: &quot;Hi Alice! Here are the top 3 trade-offs of MCP vs REST APIs for agent-to-agent communication:\n\n1. **Protocol Overhead vs. Simplicity**\n   - **MCP** is a purpose-built protocol for AI/agent contexts, offering structured tool-calling, context management, and session state natively \u2014 but this adds complexity and requires MCP-compatible infrastructure.\n   - **REST** is universally understo...</pre>
+                </div>
+                <div class="tc-section">
+                    <strong>Output:</strong>
+                    <pre>{
+  &quot;conversation_id&quot;: 2,
+  &quot;message_id&quot;: 2,
+  &quot;status&quot;: &quot;pending&quot;
+}</pre>
+                </div>
+            </div>
+        </div>
+        
+
+        <div class="tool-call tc-pass">
+            <div class="tc-header" onclick="toggleSection('tc-4504682576-1773410670602')">
+                <span class="tc-tool">mark_done</span>
+                <span class="tc-status">OK</span>
+                <span class="tc-duration">109ms</span>
+            </div>
+            <div class="tc-body" id="tc-4504682576-1773410670602" style="display:none">
+                <div class="tc-section">
+                    <strong>Input:</strong>
+                    <pre>{
+  &quot;message_id&quot;: 1,
+  &quot;status&quot;: &quot;done&quot;
+}</pre>
+                </div>
+                <div class="tc-section">
+                    <strong>Output:</strong>
+                    <pre>{
+  &quot;message_id&quot;: 1,
+  &quot;status&quot;: &quot;done&quot;
+}</pre>
+                </div>
+            </div>
+        </div>
+        
+        </div>
+    </div>
+    
+            </div>
+        </div>
+    </div>
+    
+</div>
+
+<div class="footer">
+    SynapBus E2E Test Suite | Pass Rate: 100%
+</div>
+
+<script>
+function toggleSection(id) {
+    var el = document.getElementById(id);
+    if (!el) return;
+    if (el.style.display === 'none' || !el.style.display) {
+        el.style.display = 'block';
+        el.classList.add('open');
+    } else {
+        el.style.display = 'none';
+        el.classList.remove('open');
+    }
+}
+
+function filterScenarios(status) {
+    var cards = document.querySelectorAll('.scenario-card');
+    var btns = document.querySelectorAll('.filter-btn');
+    btns.forEach(function(b) { b.classList.remove('active'); });
+    event.target.classList.add('active');
+    cards.forEach(function(card) {
+        if (status === 'all') {
+            card.style.display = 'block';
+        } else {
+            var badge = card.querySelector('.badge');
+            if (badge && badge.textContent.toLowerCase() === status) {
+                card.style.display = 'block';
+            } else {
+                card.style.display = 'none';
+            }
+        }
+    });
+}
+
+// Auto-expand failed scenarios
+document.querySelectorAll('.scenario-card').forEach(function(card) {
+    var badge = card.querySelector('.badge');
+    if (badge && (badge.textContent === 'FAIL' || badge.textContent === 'ERROR')) {
+        var body = card.querySelector('.scenario-body');
+        if (body) {
+            body.style.display = 'block';
+            body.classList.add('open');
+        }
+    }
+});
+</script>
+
+</body>
+</html>

web/src/lib/api/client.ts

@@ -62,7 +62,7 @@ export const messages = {
 		return request<{ messages: any[]; total: number }>('GET', `/api/messages${q ? '?' + q : ''}`);
 	},
 	get: (id: number) => request<any>('GET', `/api/messages/${id}`),
-	send: (body: { from?: string; to?: string; body: string; priority?: number; subject?: string; channel_id?: number; conversation_id?: number; reply_to?: number }) =>
+	send: (body: { from?: string; to?: string; body: string; priority?: number; subject?: string; channel_id?: number; conversation_id?: number; reply_to?: number; attachments?: string[] }) =>
 		request<any>('POST', '/api/messages', body),
 	markDone: (id: number) => request<{ status: string }>('POST', `/api/messages/${id}/done`),
 	search: (q: string, opts?: { limit?: number; channel?: string; agent?: string; after?: string; before?: string }) => {
@@ -232,4 +232,34 @@ export const profile = {
 		request<{ message: string; user: { id: number; username: string; display_name: string; role: string } }>('PUT', '/api/auth/profile', body)
 };
 
+// Attachments
+export const attachments = {
+	upload: async (file: File): Promise<{hash: string, size: number, mime_type: string, original_filename: string}> => {
+		const formData = new FormData();
+		formData.append('file', file);
+		const response = await fetch('/api/attachments', {
+			method: 'POST',
+			body: formData,
+			credentials: 'include'
+		});
+		if (!response.ok) {
+			const err = await response.json().catch(() => ({error: 'Upload failed'}));
+			throw new Error(err.error || err.detail || 'Upload failed');
+		}
+		return response.json();
+	}
+};
+
+// Reactions
+export const reactions = {
+	toggle: (messageId: number, reaction: string, metadata?: Record<string, any>) =>
+		request<{ action: string; reaction: any; reactions: any[]; workflow_state: string }>(
+			'POST', `/api/messages/${messageId}/reactions`, { reaction, metadata }
+		),
+	get: (messageId: number) =>
+		request<{ reactions: any[]; workflow_state: string }>(
+			'GET', `/api/messages/${messageId}/reactions`
+		)
+};
+
 export { ApiError };

web/src/lib/components/AttachmentPreview.svelte

@@ -0,0 +1,117 @@
+<script lang="ts">
+	type Attachment = {
+		hash: string;
+		original_filename: string;
+		size: number;
+		mime_type: string;
+		is_image: boolean;
+	};
+
+	let { attachment }: { attachment: Attachment } = $props();
+
+	let showOverlay = $state(false);
+
+	function formatSize(bytes: number): string {
+		if (bytes < 1024 * 1024) {
+			return (bytes / 1024).toFixed(1) + ' KB';
+		}
+		return (bytes / (1024 * 1024)).toFixed(1) + ' MB';
+	}
+
+	function openOverlay() {
+		showOverlay = true;
+	}
+
+	function closeOverlay() {
+		showOverlay = false;
+	}
+
+	function handleOverlayClick(e: MouseEvent) {
+		if (e.target === e.currentTarget) {
+			closeOverlay();
+		}
+	}
+
+	function handleKeydown(e: KeyboardEvent) {
+		if (e.key === 'Escape') {
+			closeOverlay();
+		}
+	}
+</script>
+
+<svelte:window onkeydown={showOverlay ? handleKeydown : undefined} />
+
+{#if attachment.is_image}
+	<!-- Image thumbnail -->
+	<button
+		class="block rounded-lg overflow-hidden border border-border hover:border-border-active transition-colors cursor-pointer bg-bg-tertiary"
+		onclick={openOverlay}
+	>
+		<img
+			src="/api/attachments/{attachment.hash}"
+			alt={attachment.original_filename}
+			class="max-w-[200px] max-h-[200px] object-cover"
+			loading="lazy"
+		/>
+	</button>
+
+	<!-- Fullscreen overlay -->
+	{#if showOverlay}
+		<div
+			class="fixed inset-0 bg-black/80 z-50 flex items-center justify-center"
+			role="dialog"
+			aria-modal="true"
+			onclick={handleOverlayClick}
+		>
+			<!-- Close button -->
+			<button
+				class="absolute top-4 right-4 p-2 rounded-lg bg-white/10 hover:bg-white/20 text-white transition-colors z-10"
+				onclick={closeOverlay}
+				aria-label="Close"
+			>
+				<svg class="w-6 h-6" fill="none" stroke="currentColor" viewBox="0 0 24 24" stroke-width="2">
+					<path stroke-linecap="round" stroke-linejoin="round" d="M6 18L18 6M6 6l12 12" />
+				</svg>
+			</button>
+
+			<!-- Full-resolution image -->
+			<img
+				src="/api/attachments/{attachment.hash}"
+				alt={attachment.original_filename}
+				class="max-w-[90vw] max-h-[90vh] object-contain rounded-lg"
+			/>
+
+			<!-- Download button -->
+			<div class="absolute bottom-6 left-1/2 -translate-x-1/2">
+				<a
+					href="/api/attachments/{attachment.hash}"
+					download={attachment.original_filename}
+					class="flex items-center gap-2 px-4 py-2 rounded-lg bg-white/10 hover:bg-white/20 text-white text-sm transition-colors"
+				>
+					<svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24" stroke-width="2">
+						<path stroke-linecap="round" stroke-linejoin="round" d="M4 16v1a3 3 0 003 3h10a3 3 0 003-3v-1m-4-4l-4 4m0 0l-4-4m4 4V4" />
+					</svg>
+					Download {attachment.original_filename}
+				</a>
+			</div>
+		</div>
+	{/if}
+{:else}
+	<!-- Non-image file -->
+	<div class="inline-flex items-center gap-2 px-3 py-2 rounded-lg border border-border bg-bg-tertiary hover:bg-bg-tertiary/80 transition-colors">
+		<!-- File icon -->
+		<svg class="w-5 h-5 text-text-secondary flex-shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24" stroke-width="1.5">
+			<path stroke-linecap="round" stroke-linejoin="round" d="M19.5 14.25v-2.625a3.375 3.375 0 00-3.375-3.375h-1.5A1.125 1.125 0 0113.5 7.125v-1.5a3.375 3.375 0 00-3.375-3.375H8.25m2.25 0H5.625c-.621 0-1.125.504-1.125 1.125v17.25c0 .621.504 1.125 1.125 1.125h12.75c.621 0 1.125-.504 1.125-1.125V11.25a9 9 0 00-9-9z" />
+		</svg>
+		<div class="min-w-0">
+			<a
+				href="/api/attachments/{attachment.hash}"
+				download={attachment.original_filename}
+				class="text-sm text-text-link hover:underline block truncate max-w-[200px]"
+			>
+				{attachment.original_filename}
+			</a>
+			<span class="text-[10px] text-text-secondary">{formatSize(attachment.size)}</span>
+		</div>
+	</div>
+{/if}

web/src/lib/components/ComposeForm.svelte

@@ -1,5 +1,5 @@
 <script lang="ts">
-	import { messages as messagesApi, agents as agentsApi, channels as channelsApi } from '$lib/api/client';
+	import { messages as messagesApi, agents as agentsApi, channels as channelsApi, attachments as attachmentsApi } from '$lib/api/client';
 
 	let { onSent = () => {} }: { onSent?: () => void } = $props();
 
@@ -12,6 +12,49 @@
 	let error = $state('');
 	let showOptions = $state(false);
 
+	// Attachment state
+	type UploadedAttachment = { hash: string; original_filename: string; size: number; mime_type: string };
+	let uploadedAttachments = $state<UploadedAttachment[]>([]);
+	let uploading = $state(false);
+	let uploadError = $state('');
+	let fileInputEl: HTMLInputElement | undefined = $state(undefined);
+
+	const ACCEPTED_FILES = '.jpg,.jpeg,.png,.gif,.webp,.svg,.pdf,.txt,.md,.csv,.json,.xml,.yaml,.yml,.log';
+
+	function formatFileSize(bytes: number): string {
+		if (bytes < 1024 * 1024) {
+			return (bytes / 1024).toFixed(1) + ' KB';
+		}
+		return (bytes / (1024 * 1024)).toFixed(1) + ' MB';
+	}
+
+	function triggerFileInput() {
+		fileInputEl?.click();
+	}
+
+	async function handleFileSelected(e: Event) {
+		const input = e.target as HTMLInputElement;
+		const file = input.files?.[0];
+		if (!file) return;
+
+		uploading = true;
+		uploadError = '';
+		try {
+			const result = await attachmentsApi.upload(file);
+			uploadedAttachments = [...uploadedAttachments, result];
+		} catch (err: any) {
+			uploadError = err.message || 'Upload failed';
+		} finally {
+			uploading = false;
+			// Reset file input so same file can be re-selected
+			if (fileInputEl) fileInputEl.value = '';
+		}
+	}
+
+	function removeAttachment(hash: string) {
+		uploadedAttachments = uploadedAttachments.filter(a => a.hash !== hash);
+	}
+
 	// Autocomplete state
 	let agentList = $state<any[]>([]);
 	let channelList = $state<any[]>([]);
@@ -102,13 +145,16 @@
 				body: body.trim(),
 				priority,
 				subject: subject.trim() || undefined,
-				channel_id: channelId
+				channel_id: channelId,
+				attachments: uploadedAttachments.length > 0 ? uploadedAttachments.map(a => a.hash) : undefined
 			});
 			to = '';
 			body = '';
 			priority = 5;
 			subject = '';
 			channelId = undefined;
+			uploadedAttachments = [];
+			uploadError = '';
 			if (textareaEl) {
 				textareaEl.style.height = '72px';
 				textareaEl.style.overflowY = 'hidden';
@@ -211,14 +257,71 @@
 		</div>
 	{/if}
 
+	<!-- Hidden file input -->
+	<input
+		bind:this={fileInputEl}
+		type="file"
+		accept={ACCEPTED_FILES}
+		class="hidden"
+		onchange={handleFileSelected}
+	/>
+
+	<!-- Attachment list -->
+	{#if uploadedAttachments.length > 0 || uploading || uploadError}
+		<div class="px-4 py-2 border-t border-border space-y-1">
+			{#if uploadError}
+				<div class="text-xs text-accent-red">{uploadError}</div>
+			{/if}
+			{#if uploading}
+				<div class="flex items-center gap-2 text-xs text-text-secondary">
+					<svg class="w-3.5 h-3.5 animate-spin" fill="none" viewBox="0 0 24 24">
+						<circle class="opacity-25" cx="12" cy="12" r="10" stroke="currentColor" stroke-width="4"></circle>
+						<path class="opacity-75" fill="currentColor" d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4zm2 5.291A7.962 7.962 0 014 12H0c0 3.042 1.135 5.824 3 7.938l3-2.647z"></path>
+					</svg>
+					Uploading...
+				</div>
+			{/if}
+			{#each uploadedAttachments as att (att.hash)}
+				<div class="flex items-center gap-2 text-xs text-text-primary bg-bg-tertiary rounded px-2 py-1">
+					<svg class="w-3.5 h-3.5 text-text-secondary flex-shrink-0" fill="none" stroke="currentColor" viewBox="0 0 24 24" stroke-width="1.5">
+						<path stroke-linecap="round" stroke-linejoin="round" d="M18.375 12.739l-7.693 7.693a4.5 4.5 0 01-6.364-6.364l10.94-10.94A3 3 0 1119.5 7.372L8.552 18.32m.009-.01l-.01.01m5.699-9.941l-7.81 7.81a1.5 1.5 0 002.112 2.13" />
+					</svg>
+					<span class="truncate flex-1">{att.original_filename}</span>
+					<span class="text-text-secondary flex-shrink-0">{formatFileSize(att.size)}</span>
+					<button
+						class="p-0.5 rounded hover:bg-bg-secondary text-text-secondary hover:text-accent-red transition-colors flex-shrink-0"
+						onclick={() => removeAttachment(att.hash)}
+						title="Remove attachment"
+					>
+						<svg class="w-3 h-3" fill="none" stroke="currentColor" viewBox="0 0 24 24" stroke-width="2">
+							<path stroke-linecap="round" stroke-linejoin="round" d="M6 18L18 6M6 6l12 12" />
+						</svg>
+					</button>
+				</div>
+			{/each}
+		</div>
+	{/if}
+
 	<!-- Bottom bar -->
 	<div class="flex items-center justify-between px-3 py-2 border-t border-border">
-		<button
-			class="text-xs text-text-secondary hover:text-text-primary transition-colors px-2 py-1 rounded hover:bg-bg-tertiary"
-			onclick={() => (showOptions = !showOptions)}
-		>
-			{showOptions ? 'Hide options' : 'Options'}
-		</button>
+		<div class="flex items-center gap-1">
+			<button
+				class="text-xs text-text-secondary hover:text-text-primary transition-colors px-2 py-1 rounded hover:bg-bg-tertiary"
+				onclick={() => (showOptions = !showOptions)}
+			>
+				{showOptions ? 'Hide options' : 'Options'}
+			</button>
+			<button
+				class="p-1.5 rounded text-text-secondary hover:text-text-primary hover:bg-bg-tertiary transition-colors disabled:opacity-50"
+				onclick={triggerFileInput}
+				disabled={uploading}
+				title="Attach file"
+			>
+				<svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24" stroke-width="2">
+					<path stroke-linecap="round" stroke-linejoin="round" d="M18.375 12.739l-7.693 7.693a4.5 4.5 0 01-6.364-6.364l10.94-10.94A3 3 0 1119.5 7.372L8.552 18.32m.009-.01l-.01.01m5.699-9.941l-7.81 7.81a1.5 1.5 0 002.112 2.13" />
+				</svg>
+			</button>
+		</div>
 		<button
 			class="px-4 py-1.5 bg-accent-green rounded text-xs font-semibold text-white hover:brightness-110 transition-all disabled:opacity-50 disabled:cursor-not-allowed flex items-center gap-1.5"
 			disabled={sending || !body.trim() || !to.trim()}

web/src/lib/components/MessageList.svelte

@@ -1,6 +1,15 @@
 <script lang="ts">
 	import { openThread } from '$lib/stores/thread';
 	import MessageBody from '$lib/components/MessageBody.svelte';
+	import AttachmentPreview from '$lib/components/AttachmentPreview.svelte';
+
+	type Attachment = {
+		hash: string;
+		original_filename: string;
+		size: number;
+		mime_type: string;
+		is_image: boolean;
+	};
 
 	type Message = {
 		id: number;
@@ -12,6 +21,7 @@
 		status: string;
 		created_at: string;
 		reply_count?: number;
+		attachments?: Attachment[];
 	};
 
 	let { messages = [], showConversationLink = false, agentTypes = {} }: { messages: Message[]; showConversationLink?: boolean; agentTypes?: Record<string, string> } = $props();
@@ -108,8 +118,30 @@
 						</div>
 						<div class="text-sm text-text-primary/90 leading-relaxed"><MessageBody body={msg.body} truncate={300} /></div>
 
-						<!-- Thread link -->
-						{#if showConversationLink && msg.conversation_id}
+						<!-- Attachments -->
+						{#if msg.attachments && msg.attachments.length > 0}
+							<div class="mt-2 flex flex-wrap gap-2">
+								{#each msg.attachments as att (att.hash)}
+									<AttachmentPreview attachment={att} />
+								{/each}
+							</div>
+						{/if}
+
+						<!-- Reply count badge -->
+						{#if msg.reply_count && msg.reply_count > 0}
+							<button
+								class="mt-1.5 flex items-center gap-1 text-xs text-text-link hover:underline"
+								onclick={(e) => { e.stopPropagation(); openThread(msg.id, msg.conversation_id, msg.from_agent); }}
+							>
+								<svg class="w-3 h-3" fill="none" stroke="currentColor" viewBox="0 0 24 24" stroke-width="2">
+									<path stroke-linecap="round" stroke-linejoin="round" d="M8 12h.01M12 12h.01M16 12h.01M21 12c0 4.418-4.03 8-9 8a9.863 9.863 0 01-4.255-.949L3 20l1.395-3.72C3.512 15.042 3 13.574 3 12c0-4.418 4.03-8 9-8s9 3.582 9 8z" />
+								</svg>
+								{msg.reply_count === 1 ? '1 reply' : `${msg.reply_count} replies`}
+							</button>
+						{/if}
+
+						<!-- Thread link (conversation view) -->
+						{#if showConversationLink && msg.conversation_id && (!msg.reply_count || msg.reply_count === 0)}
 							<button
 								class="mt-1 flex items-center gap-1 text-xs text-text-link hover:underline"
 								onclick={(e) => { e.stopPropagation(); openThread(msg.id, msg.conversation_id, msg.from_agent); }}
@@ -117,7 +149,7 @@
 								<svg class="w-3 h-3" fill="none" stroke="currentColor" viewBox="0 0 24 24" stroke-width="2">
 									<path stroke-linecap="round" stroke-linejoin="round" d="M8 12h.01M12 12h.01M16 12h.01M21 12c0 4.418-4.03 8-9 8a9.863 9.863 0 01-4.255-.949L3 20l1.395-3.72C3.512 15.042 3 13.574 3 12c0-4.418 4.03-8 9-8s9 3.582 9 8z" />
 								</svg>
-								{msg.reply_count ? `${msg.reply_count} replies` : 'View thread'}
+								View thread
 							</button>
 						{/if}
 					</div>

web/src/lib/components/ReactionPills.svelte

@@ -0,0 +1,154 @@
+<script lang="ts">
+	import { reactions as reactionsApi } from '$lib/api/client';
+
+	type ReactionEntry = {
+		agent_name: string;
+		reaction: string;
+		metadata?: Record<string, any>;
+	};
+
+	let { reactions = [], messageId }: { reactions: ReactionEntry[]; messageId: number } = $props();
+
+	type GroupedReaction = {
+		type: string;
+		count: number;
+		agents: string[];
+		metadata?: Record<string, any>;
+	};
+
+	let grouped = $derived((() => {
+		const map = new Map<string, GroupedReaction>();
+		for (const r of reactions) {
+			const existing = map.get(r.reaction);
+			if (existing) {
+				existing.count++;
+				existing.agents.push(r.agent_name);
+				if (r.reaction === 'published' && r.metadata?.url) {
+					existing.metadata = r.metadata;
+				}
+			} else {
+				map.set(r.reaction, {
+					type: r.reaction,
+					count: 1,
+					agents: [r.agent_name],
+					metadata: r.metadata
+				});
+			}
+		}
+		return Array.from(map.values());
+	})());
+
+	const allReactions = ['approve', 'reject', 'in_progress', 'done', 'published'] as const;
+
+	const reactionEmoji: Record<string, string> = {
+		approve: '\u2705',
+		reject: '\u274C',
+		in_progress: '\u23F3',
+		done: '\u2714\uFE0F',
+		published: '\uD83D\uDE80'
+	};
+
+	const reactionLabels: Record<string, string> = {
+		approve: 'Approve',
+		reject: 'Reject',
+		in_progress: 'In Progress',
+		done: 'Done',
+		published: 'Published'
+	};
+
+	const reactionColors: Record<string, string> = {
+		approve: 'bg-accent-green/15 text-accent-green border-accent-green/30 hover:bg-accent-green/25',
+		reject: 'bg-accent-red/15 text-accent-red border-accent-red/30 hover:bg-accent-red/25',
+		in_progress: 'bg-accent-blue/15 text-accent-blue border-accent-blue/30 hover:bg-accent-blue/25',
+		done: 'bg-bg-tertiary text-text-secondary border-border hover:bg-bg-tertiary/80',
+		published: 'bg-cyan-500/15 text-cyan-400 border-cyan-500/30 hover:bg-cyan-500/25'
+	};
+
+	let toggling = $state(false);
+	let showPicker = $state(false);
+
+	// Reaction types that already have at least one reaction
+	let existingTypes = $derived(new Set(grouped.map(g => g.type)));
+
+	async function handleToggle(reactionType: string) {
+		if (toggling) return;
+		toggling = true;
+		showPicker = false;
+		try {
+			const result = await reactionsApi.toggle(messageId, reactionType);
+			if (result.reactions) {
+				reactions = result.reactions;
+			}
+		} catch {
+			// silently fail
+		} finally {
+			toggling = false;
+		}
+	}
+</script>
+
+<div class="flex flex-wrap items-center gap-1 mt-1">
+	<!-- Existing reaction pills -->
+	{#each grouped as group}
+		<button
+			class="inline-flex items-center gap-1 px-1.5 py-0.5 rounded-full text-[11px] border transition-colors cursor-pointer {reactionColors[group.type] ?? 'bg-bg-tertiary text-text-secondary border-border'}"
+			title="{reactionLabels[group.type] ?? group.type}: {group.agents.join(', ')}"
+			onclick={(e) => { e.stopPropagation(); handleToggle(group.type); }}
+			disabled={toggling}
+		>
+			<span>{reactionEmoji[group.type] ?? group.type}</span>
+			<span class="font-medium">{group.count}</span>
+			{#if group.type === 'published' && group.metadata?.url}
+				<a
+					href={group.metadata.url}
+					target="_blank"
+					rel="noopener noreferrer"
+					class="ml-0.5 hover:underline"
+					onclick={(e) => e.stopPropagation()}
+					title="View published URL"
+				>
+					<svg class="w-3 h-3 inline" fill="none" stroke="currentColor" viewBox="0 0 24 24" stroke-width="2">
+						<path stroke-linecap="round" stroke-linejoin="round" d="M13.828 10.172a4 4 0 00-5.656 0l-4 4a4 4 0 105.656 5.656l1.102-1.101m-.758-4.899a4 4 0 005.656 0l4-4a4 4 0 00-5.656-5.656l-1.1 1.1" />
+					</svg>
+				</a>
+			{/if}
+		</button>
+	{/each}
+
+	<!-- Add reaction button (always visible) -->
+	<div class="relative">
+		<button
+			class="inline-flex items-center gap-0.5 px-1.5 py-0.5 rounded-full text-[11px] border border-dashed border-border text-text-secondary hover:text-text-primary hover:border-border-active hover:bg-bg-tertiary transition-colors cursor-pointer"
+			title="Add reaction"
+			onclick={(e) => { e.stopPropagation(); showPicker = !showPicker; }}
+			disabled={toggling}
+		>
+			<svg class="w-3 h-3" fill="none" stroke="currentColor" viewBox="0 0 24 24" stroke-width="2">
+				<path stroke-linecap="round" stroke-linejoin="round" d="M12 4.5v15m7.5-7.5h-15" />
+			</svg>
+		</button>
+
+		<!-- Reaction picker dropdown -->
+		{#if showPicker}
+			<!-- svelte-ignore a11y_click_events_have_key_events -->
+			<!-- svelte-ignore a11y_no_static_element_interactions -->
+			<div
+				class="fixed inset-0 z-40"
+				onclick={() => showPicker = false}
+			></div>
+			<div class="absolute left-0 bottom-full mb-1 z-50 bg-bg-secondary border border-border rounded-lg shadow-lg p-1.5 flex gap-1 whitespace-nowrap">
+				{#each allReactions as rt}
+					<button
+						class="flex items-center gap-1 px-2 py-1 rounded text-xs transition-colors {existingTypes.has(rt) ? 'bg-accent-blue/10 text-accent-blue' : 'hover:bg-bg-tertiary text-text-secondary hover:text-text-primary'}"
+						title="{reactionLabels[rt]}{existingTypes.has(rt) ? ' (remove)' : ''}"
+						onclick={(e) => { e.stopPropagation(); handleToggle(rt); }}
+						disabled={toggling}
+					>
+						<span>{reactionEmoji[rt]}</span>
+						<span class="hidden sm:inline">{reactionLabels[rt]}</span>
+					</button>
+				{/each}
+			</div>
+		{/if}
+	</div>
+</div>

web/src/lib/components/ThreadPanel.svelte

@@ -2,6 +2,7 @@
 	import { activeThread, closeThread } from '$lib/stores/thread';
 	import { conversations as convsApi, messages as messagesApi } from '$lib/api/client';
 	import MessageBody from '$lib/components/MessageBody.svelte';
+	import AttachmentPreview from '$lib/components/AttachmentPreview.svelte';
 
 	let conversation = $state<any>(null);
 	let threadMessages = $state<any[]>([]);
@@ -164,6 +165,13 @@
 									{/if}
 								</div>
 								<div class="text-xs text-text-primary/90 leading-relaxed"><MessageBody body={msg.body} /></div>
+								{#if msg.attachments && msg.attachments.length > 0}
+									<div class="mt-1.5 flex flex-wrap gap-1.5">
+										{#each msg.attachments as att (att.hash)}
+											<AttachmentPreview attachment={att} />
+										{/each}
+									</div>
+								{/if}
 							</div>
 						</div>
 					</div>

web/src/lib/components/WorkflowBadge.svelte

@@ -0,0 +1,26 @@
+<script lang="ts">
+	let { state }: { state: string } = $props();
+
+	let badgeClass = $derived((() => {
+		switch (state) {
+			case 'proposed':
+				return 'bg-accent-yellow/20 text-accent-yellow';
+			case 'approved':
+				return 'bg-accent-green text-white';
+			case 'in_progress':
+				return 'bg-accent-blue text-white';
+			case 'rejected':
+				return 'bg-accent-red text-white';
+			case 'done':
+				return 'bg-bg-tertiary text-text-secondary';
+			case 'published':
+				return 'bg-cyan-500/20 text-cyan-400';
+			default:
+				return 'bg-bg-tertiary text-text-secondary';
+		}
+	})());
+</script>
+
+<span class="inline-flex items-center px-1.5 py-0.5 rounded text-[10px] font-medium leading-tight {badgeClass}">
+	{state}
+</span>

web/src/routes/channels/[name]/+page.svelte

@@ -1,9 +1,12 @@
 <script lang="ts">
 	import { page } from '$app/stores';
-	import { channels as channelsApi, messages as messagesApi, agents as agentsApi } from '$lib/api/client';
+	import { channels as channelsApi, messages as messagesApi, agents as agentsApi, attachments as attachmentsApi } from '$lib/api/client';
 	import { openThread, closeThread } from '$lib/stores/thread';
 	import { notifications } from '$lib/stores/notifications';
 	import MessageBody from '$lib/components/MessageBody.svelte';
+	import AttachmentPreview from '$lib/components/AttachmentPreview.svelte';
+	import WorkflowBadge from '$lib/components/WorkflowBadge.svelte';
+	import ReactionPills from '$lib/components/ReactionPills.svelte';
 
 	let channel = $state<any>(null);
 	let members = $state<any[]>([]);
@@ -21,6 +24,39 @@
 	let sending = $state(false);
 	let sendError = $state('');
 
+	// Attachment state
+	let uploadedAttachments = $state<{hash: string, name: string, size: number}[]>([]);
+	let uploading = $state(false);
+	let fileInputEl: HTMLInputElement;
+
+	function triggerFileInput() { fileInputEl?.click(); }
+
+	async function handleFileSelected(e: Event) {
+		const input = e.target as HTMLInputElement;
+		const file = input.files?.[0];
+		if (!file) return;
+		uploading = true;
+		try {
+			const result = await attachmentsApi.upload(file);
+			uploadedAttachments = [...uploadedAttachments, { hash: result.hash, name: result.original_filename, size: result.size }];
+		} catch (err: any) {
+			sendError = err.message || 'Upload failed';
+		} finally {
+			uploading = false;
+			input.value = '';
+		}
+	}
+
+	function removeAttachment(hash: string) {
+		uploadedAttachments = uploadedAttachments.filter(a => a.hash !== hash);
+	}
+
+	function formatFileSize(bytes: number): string {
+		if (bytes < 1024) return bytes + ' B';
+		if (bytes < 1048576) return (bytes / 1024).toFixed(1) + ' KB';
+		return (bytes / 1048576).toFixed(1) + ' MB';
+	}
+
 	// Mark-as-read timer
 	let markReadTimer: ReturnType<typeof setTimeout> | null = null;
 
@@ -132,15 +168,17 @@
 	}
 
 	async function handleSend() {
-		if (!body.trim()) return;
+		if (!body.trim() && uploadedAttachments.length === 0) return;
 		sending = true;
 		sendError = '';
 		try {
 			await messagesApi.send({
-				body: body.trim(),
-				channel_id: channel.id
+				body: body.trim() || '(attachment)',
+				channel_id: channel.id,
+				attachments: uploadedAttachments.length > 0 ? uploadedAttachments.map(a => a.hash) : undefined
 			});
 			body = '';
+			uploadedAttachments = [];
 			await loadMessages();
 		} catch (err: any) {
 			sendError = err.message || 'Failed to send message';
@@ -270,6 +308,19 @@
 												<span class="text-xs text-text-secondary">{formatTime(msg.created_at)}</span>
 											</div>
 											<div class="text-sm text-text-primary/90 leading-relaxed"><MessageBody body={msg.body} /></div>
+											{#if channel?.workflow_enabled}
+												{#if msg.workflow_state}
+													<WorkflowBadge state={msg.workflow_state} />
+												{/if}
+												<ReactionPills reactions={msg.reactions ?? []} messageId={msg.id} />
+											{/if}
+											{#if msg.attachments?.length > 0}
+												<div class="flex flex-wrap gap-2 mt-1.5">
+													{#each msg.attachments as att}
+														<AttachmentPreview attachment={att} />
+													{/each}
+												</div>
+											{/if}
 											{#if msg.reply_count > 0}
 												<button
 													class="mt-1 flex items-center gap-1 text-xs text-accent-blue hover:underline"
@@ -310,6 +361,30 @@
 								Register an agent to send messages
 							</div>
 						{:else}
+							<!-- Hidden file input -->
+							<input
+								type="file"
+								class="hidden"
+								accept=".jpg,.jpeg,.png,.gif,.webp,.svg,.pdf,.txt,.md,.csv,.json,.xml,.yaml,.yml,.log"
+								bind:this={fileInputEl}
+								onchange={handleFileSelected}
+							/>
+							<!-- Attachment preview chips -->
+							{#if uploadedAttachments.length > 0}
+								<div class="flex flex-wrap gap-1.5 mb-1.5">
+									{#each uploadedAttachments as att}
+										<span class="inline-flex items-center gap-1 px-2 py-1 bg-bg-tertiary border border-border rounded text-xs text-text-primary">
+											<svg class="w-3 h-3 text-text-secondary" fill="none" stroke="currentColor" viewBox="0 0 24 24" stroke-width="1.5"><path stroke-linecap="round" stroke-linejoin="round" d="M18.375 12.739l-7.693 7.693a4.5 4.5 0 01-6.364-6.364l10.94-10.94A3 3 0 1119.5 7.372L8.552 18.32m.009-.01l-.01.01m5.699-9.941l-7.81 7.81a1.5 1.5 0 002.112 2.13" /></svg>
+											{att.name}
+											<span class="text-text-secondary">({formatFileSize(att.size)})</span>
+											<button class="ml-0.5 text-text-secondary hover:text-accent-red" onclick={() => removeAttachment(att.hash)} title="Remove">&times;</button>
+										</span>
+									{/each}
+								</div>
+							{/if}
+							{#if uploading}
+								<div class="mb-1.5 text-xs text-text-secondary">Uploading...</div>
+							{/if}
 							<div class="flex items-end gap-2 bg-bg-tertiary rounded-lg border border-border focus-within:border-border-active transition-colors">
 								<textarea
 									placeholder="Message #{channelName}..."
@@ -318,9 +393,19 @@
 									rows="1"
 									onkeydown={handleKeydown}
 								></textarea>
+								<button
+									class="p-2 mb-1 rounded-md text-text-secondary hover:text-text-primary hover:bg-bg-secondary transition-all"
+									onclick={triggerFileInput}
+									title="Attach file"
+									type="button"
+								>
+									<svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24" stroke-width="1.5">
+										<path stroke-linecap="round" stroke-linejoin="round" d="M18.375 12.739l-7.693 7.693a4.5 4.5 0 01-6.364-6.364l10.94-10.94A3 3 0 1119.5 7.372L8.552 18.32m.009-.01l-.01.01m5.699-9.941l-7.81 7.81a1.5 1.5 0 002.112 2.13" />
+									</svg>
+								</button>
 								<button
 									class="p-2 mr-1 mb-1 rounded-md bg-accent-green text-white hover:brightness-110 transition-all disabled:opacity-40 disabled:cursor-not-allowed"
-									disabled={sending || !body.trim()}
+									disabled={sending || (!body.trim() && uploadedAttachments.length === 0)}
 									onclick={handleSend}
 								>
 									<svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24" stroke-width="2">