diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0bd7061..95193b9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,70 @@
 # Changelog
 
+## [0.32.0] — 2026-03-19
+
+### Summary
+
+Multi-Replica HA: run 2+ backend replicas across nodes for node-level
+availability.  All shared mutable state moves from in-process memory to
+Postgres — task scheduler uses `FOR UPDATE SKIP LOCKED` for atomic
+claim (no leader election), WebSocket tickets and rate limit counters
+become PG tables, and `SendToUser` is replaced by bus-routed
+`PublishToUser` for cross-pod event delivery.  New `/healthz/ready`
+and `/healthz/live` probe endpoints.  Helm defaults to 2 replicas with
+pod anti-affinity.
+
+### New
+
+- **`FOR UPDATE SKIP LOCKED` task scheduler** — every replica polls;
+  PG serializes task handoff atomically.  `ClaimDueTask` replaces
+  `ListDue`.  `CreateRunExclusive` conditional insert prevents
+  double-execution.  Startup jitter (0–15s) staggers replicas.
+- **PG ticket store** — `ws_tickets` table replaces in-memory
+  `sync.Map`.  Atomic `DELETE ... RETURNING` for single-use validation.
+  30s TTL, reaper piggybacked on scheduler poll tick.
+- **PG rate limiter** — `rate_limit_counters` table with fixed-window
+  `INSERT ON CONFLICT DO UPDATE`.  Fail-open policy: DB errors allow
+  the request rather than blocking auth.  Cleanup piggybacked on
+  scheduler poll tick.
+- **Cross-pod WebSocket delivery** — `Hub.PublishToUser` routes events
+  through the bus → `pg_broadcast` → remote pod `publishLocal`.
+  `TargetUserID` field on `Event` for targeted filtering.
+  `tool.result.*` routing changed to `DirBoth` so browser tool results
+  cross pods for `WaitFor`.
+- **Health probes** — `/healthz/ready` (PG ping, 2s timeout) and
+  `/healthz/live` (process alive, no deps).
+- **Helm HA** — `backend.replicaCount: 2`, pod anti-affinity
+  (`preferredDuringScheduling`, `kubernetes.io/hostname`), readiness
+  and liveness probes pointed at new healthz endpoints.
+- **Schema `020_ha.sql`** — `ws_tickets` and `rate_limit_counters`
+  tables (PG + SQLite).
+
+### Changed
+
+- **`SendToUser` → `PublishToUser`** — 18 call sites across 10 files
+  migrated to bus-routed delivery for cross-pod reach.
+- **`ListDue` removed from `TaskStore`** — replaced by `ClaimDueTask`
+  (atomic claim) + `CreateRunExclusive` (belt-and-suspenders guard).
+- **Rate limiter middleware** — rewritten to accept `store.RateLimitStore`
+  instead of managing in-memory state.  Constructor signature changed:
+  `NewRateLimiter(store, rate, burst)`.
+- **`tool.result.*` routing** — `DirFromClient` → `DirBoth` to enable
+  cross-pod `WaitFor`.  WS subscriber explicitly filters `tool.result`
+  to prevent re-sending to clients.
+
+### Removed
+
+- **`events/tickets.go`** — in-memory `TicketStore` replaced by
+  `store.TicketStore` (PG/SQLite) + `TicketValidatorAdapter`.
+- **In-memory rate limiter** — visitor map and cleanup goroutine
+  replaced by PG-backed store.
+
+### Fixed
+
+- **Team workflow route registration** — v0.31.2 team-scoped workflow
+  CRUD routes (`/teams/:teamId/workflows`) were missing from `main.go`
+  route registration.  12 routes added to `teamScoped` group.
+
 ## [0.31.2] — 2026-03-19
 
 ### Summary
diff --git a/VERSION b/VERSION
index c415e1c..8a0d6d4 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.31.2
+0.32.0
\ No newline at end of file
diff --git a/chart/templates/deployment-backend.yaml b/chart/templates/deployment-backend.yaml
index 90a2168..c5f194e 100644
--- a/chart/templates/deployment-backend.yaml
+++ b/chart/templates/deployment-backend.yaml
@@ -22,6 +22,20 @@ spec:
       imagePullSecrets:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      # v0.32.0: Spread replicas across nodes for node-level HA.
+      # preferred (not required) — if fewer nodes than replicas, pods
+      # still schedule on the same node (degraded HA > no scheduling).
+      affinity:
+        podAntiAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - weight: 100
+              podAffinityTerm:
+                labelSelector:
+                  matchLabels:
+                    app.kubernetes.io/name: {{ .Chart.Name }}
+                    app.kubernetes.io/instance: {{ .Release.Name }}
+                    app.kubernetes.io/component: backend
+                topologyKey: kubernetes.io/hostname
       containers:
         - name: backend
           image: {{ include "switchboard.backend.image" . }}
@@ -45,18 +59,21 @@ spec:
             - name: data
               mountPath: /data
           {{- end }}
+          # v0.32.0: Liveness — process alive (no dependency checks).
           livenessProbe:
             httpGet:
-              path: {{ .Values.basePath }}/api/v1/health
+              path: {{ .Values.basePath }}/healthz/live
               port: http
             initialDelaySeconds: 10
             periodSeconds: 30
+          # v0.32.0: Readiness — PG reachable. Failure pulls pod from Service.
           readinessProbe:
             httpGet:
-              path: {{ .Values.basePath }}/api/v1/health
+              path: {{ .Values.basePath }}/healthz/ready
               port: http
             initialDelaySeconds: 5
             periodSeconds: 10
+            failureThreshold: 3
       {{- if .Values.persistence.enabled }}
       volumes:
         - name: data
diff --git a/chart/values.yaml b/chart/values.yaml
index 79e0522..ef2a9fb 100644
--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -7,7 +7,7 @@ backend:
     repository: git.gobha.me/xcaliber/chat-switchboard
     tag: ""  # defaults to Chart.appVersion
     pullPolicy: IfNotPresent
-  replicaCount: 1
+  replicaCount: 2  # v0.32.0: multi-replica HA
   resources:
     requests:
       cpu: 100m
diff --git a/docs/DESIGN-0.32.0.md b/docs/DESIGN-0.32.0.md
new file mode 100644
index 0000000..54bc173
--- /dev/null
+++ b/docs/DESIGN-0.32.0.md
@@ -0,0 +1,810 @@
+# DESIGN-0.32.0 — Multi-Replica HA
+
+Run 2–3 backend replicas across nodes for node-level availability.
+Five changesets. No sub-versions — the work is tightly coupled and
+each CS builds on the previous.
+
+Depends on: v0.31.2 (current HEAD).
+
+**Design decision:** PG `SKIP LOCKED` replaces Kubernetes Lease-based
+leader election for the task scheduler. Every replica polls; PG
+serializes the claims. Extends to all shared mutable state — tickets,
+rate counters — keeping PG as the sole coordination layer. No Redis,
+no K8s API dependency, no new infrastructure.
+
+---
+
+## What Already Works Multi-Replica
+
+These require zero changes:
+
+- **REST API** — stateless, JWT auth, any replica serves any request.
+- **PG + S3 + CephFS** — shared storage infrastructure.
+- **`pg_broadcast` LISTEN/NOTIFY** — cross-pod event bus. `Publish()`
+  → `broadcastHook` → `pg_notify` → remote pod `publishLocal()` →
+  local WS subscribers. Fully wired, just never tested at N>1.
+
+---
+
+## What Needs Work
+
+Five areas of in-process mutable state that break at replica count > 1:
+
+| State | Current | Problem at N>1 | Fix |
+|-------|---------|----------------|-----|
+| Task scheduler | Single goroutine polls `ListDue` | All replicas fire same tasks | `SKIP LOCKED` atomic claim |
+| Task run guard | `GetActiveRun` check → `CreateRun` | TOCTOU race window | Conditional `INSERT ... WHERE NOT EXISTS` |
+| WS ticket store | `sync.Map` per-pod | Ticket from pod-1 invalid on pod-2 | PG table with TTL reaper |
+| Rate limiter | In-memory token bucket per-pod | Effective limit = N × configured | PG counter with time bucket |
+| `SendToUser` | Local hub lookup only | User on pod-2 never reached | Route through bus → `pg_broadcast` |
+
+---
+
+## CS0 — Schema: `020_ha.sql`
+
+New migration for both PG and SQLite. No changes to existing 019
+task schema — `next_run_at` nullable already supports the claim
+mechanism.
+
+### PG: `server/database/migrations/020_ha.sql`
+
+```sql
+-- ==========================================
+-- Chat Switchboard — 020 Multi-Replica HA
+-- ==========================================
+-- Shared state tables for multi-replica operation.
+-- v0.32.0: ws_tickets, rate_limit_counters.
+-- ==========================================
+
+-- =========================================
+-- WEBSOCKET TICKETS (replaces sync.Map)
+-- =========================================
+
+CREATE TABLE IF NOT EXISTS ws_tickets (
+    id         TEXT PRIMARY KEY,           -- 128-bit hex token
+    user_id    UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    expires_at TIMESTAMPTZ NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_ws_tickets_expires
+    ON ws_tickets (expires_at);
+
+-- =========================================
+-- RATE LIMIT COUNTERS (replaces in-memory)
+-- =========================================
+-- Token bucket approximation using time-windowed counters.
+-- Key format: "{scope}:{identifier}" e.g. "auth:192.168.1.1"
+-- Window is truncated to the second for the configured rate.
+
+CREATE TABLE IF NOT EXISTS rate_limit_counters (
+    key        TEXT NOT NULL,
+    window     TIMESTAMPTZ NOT NULL,       -- truncated timestamp (window start)
+    tokens     REAL NOT NULL DEFAULT 0,    -- tokens consumed in this window
+    PRIMARY KEY (key, window)
+);
+
+CREATE INDEX IF NOT EXISTS idx_rate_limit_counters_window
+    ON rate_limit_counters (window);
+```
+
+### SQLite: `server/database/migrations/sqlite/020_ha.sql`
+
+SQLite parity — structurally identical but with dialect adjustments.
+These tables are functional in SQLite for single-process test parity,
+though multi-replica is PG-only in production.
+
+```sql
+CREATE TABLE IF NOT EXISTS ws_tickets (
+    id         TEXT PRIMARY KEY,
+    user_id    TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    expires_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_ws_tickets_expires
+    ON ws_tickets (expires_at);
+
+CREATE TABLE IF NOT EXISTS rate_limit_counters (
+    key        TEXT NOT NULL,
+    window     TEXT NOT NULL,
+    tokens     REAL NOT NULL DEFAULT 0,
+    PRIMARY KEY (key, window)
+);
+
+CREATE INDEX IF NOT EXISTS idx_rate_limit_counters_window
+    ON rate_limit_counters (window);
+```
+
+### Deliverables
+
+- [x] `020_ha.sql` (PG)
+- [x] `020_ha.sql` (SQLite)
+- [x] CI green on both pipelines (migration runs, tables exist)
+
+---
+
+## CS1 — Task Scheduler: SKIP LOCKED
+
+Replace the read-then-execute scheduler with atomic claim semantics.
+Every replica runs the poll loop. PG serializes task handoff.
+
+### 1.1 — Atomic `ClaimDueTask` (replaces `ListDue`)
+
+New store method. Single atomic statement — SELECT + UPDATE in one
+round trip. Returns at most one task per call.
+
+**PG implementation:**
+
+```sql
+UPDATE tasks
+SET next_run_at = NULL
+WHERE id = (
+    SELECT id FROM tasks
+    WHERE is_active = true
+      AND next_run_at <= NOW()
+    ORDER BY next_run_at ASC
+    LIMIT 1
+    FOR UPDATE SKIP LOCKED
+)
+RETURNING <taskColumns>
+```
+
+Mechanics:
+- `FOR UPDATE SKIP LOCKED` — if another replica holds a lock on a
+  candidate row, skip it instantly (no wait, no deadlock).
+- `SET next_run_at = NULL` — claimed task disappears from future
+  polls. `advanceNextRun` restores it after execution.
+- Returns zero rows if nothing is due → `sql.ErrNoRows` → no-op.
+- The existing partial index `idx_tasks_next_run` covers the WHERE
+  clause (`is_active = true AND next_run_at IS NOT NULL` by
+  implication — NULL rows won't satisfy `<= NOW()`).
+
+**SQLite implementation:**
+
+SQLite has no `SKIP LOCKED`. Single-process, so not needed. Keep
+the current `ListDue` behavior unchanged for SQLite. The store
+interface accommodates both:
+
+```go
+// TaskStore additions
+ClaimDueTask(ctx context.Context) (*models.Task, error)
+```
+
+SQLite `ClaimDueTask` just does:
+```sql
+SELECT <taskColumns> FROM tasks
+WHERE is_active = 1 AND next_run_at <= datetime('now')
+ORDER BY next_run_at ASC LIMIT 1
+```
+Then sets `next_run_at = NULL` in a second statement (single writer,
+no contention).
+
+### 1.2 — Conditional `CreateRunExclusive`
+
+Belt-and-suspenders: prevent double-execution even if two replicas
+somehow both claim the same task (shouldn't happen with SKIP LOCKED,
+but defense in depth).
+
+```sql
+INSERT INTO task_runs (task_id, status)
+SELECT $1, 'running'
+WHERE NOT EXISTS (
+    SELECT 1 FROM task_runs
+    WHERE task_id = $1 AND status IN ('running', 'queued')
+)
+RETURNING id, started_at
+```
+
+Returns `sql.ErrNoRows` if a run already exists → skip execution.
+
+New store method:
+```go
+CreateRunExclusive(ctx context.Context, taskID string) (*models.TaskRun, error)
+```
+
+### 1.3 — Scheduler Loop Rewrite
+
+`scheduler.go` changes:
+
+```go
+func (s *Scheduler) poll() {
+    ctx, cancel := context.WithTimeout(context.Background(), 20*time.Second)
+    defer cancel()
+
+    cfg := taskutil.LoadTaskConfig(ctx, s.stores.GlobalConfig)
+    if !cfg.Enabled {
+        return
+    }
+
+    // Claim tasks one at a time until none remain or budget exhausted.
+    // Each replica claims independently — PG SKIP LOCKED serializes.
+    claimed := 0
+    for claimed < cfg.MaxConcurrent {
+        task, err := s.stores.Tasks.ClaimDueTask(ctx)
+        if err != nil {
+            break // sql.ErrNoRows or real error — either way, done
+        }
+        claimed++
+        go s.execute(ctx, task)
+    }
+}
+```
+
+`execute()` changes:
+- Remove the `GetActiveRun` TOCTOU check — replaced by
+  `CreateRunExclusive`.
+- `GetQueuedRun` stays — webhook-triggered runs still need adoption.
+  But adoption also uses `CreateRunExclusive` semantics (transition
+  only if still `queued`).
+- `advanceNextRun` still computes and sets `next_run_at`, making the
+  task visible to future polls again.
+
+### 1.4 — Remove `ListDue` from Interface
+
+`ListDue` removed from `TaskStore` interface. Replaced by
+`ClaimDueTask`. `CreateRun` remains for webhook trigger path;
+`CreateRunExclusive` added alongside it.
+
+Updated interface:
+```go
+type TaskStore interface {
+    // ... existing CRUD ...
+
+    // Scheduler queries
+    ClaimDueTask(ctx context.Context) (*models.Task, error)
+    SetNextRun(ctx context.Context, id string, nextRun interface{}) error
+    SetLastRun(ctx context.Context, id string) error
+    IncrementRunCount(ctx context.Context, id string) error
+
+    // Run history
+    CreateRun(ctx context.Context, r *models.TaskRun) error
+    CreateRunExclusive(ctx context.Context, taskID string) (*models.TaskRun, error)
+    UpdateRun(ctx context.Context, id string, status string, ...) error
+    TransitionRunStatus(ctx context.Context, id string, status string) error
+    GetActiveRun(ctx context.Context, taskID string) (*models.TaskRun, error)
+    GetQueuedRun(ctx context.Context, taskID string) (*models.TaskRun, error)
+    ListRuns(ctx context.Context, taskID string, limit int) ([]models.TaskRun, error)
+}
+```
+
+### Deliverables
+
+- [ ] `ClaimDueTask` — PG (`FOR UPDATE SKIP LOCKED`) + SQLite (simple select)
+- [ ] `CreateRunExclusive` — PG + SQLite
+- [ ] Scheduler loop rewrite — claim-per-iteration, no TOCTOU
+- [ ] Remove `ListDue` from interface + both stores
+- [ ] Unit tests: concurrent claim (PG only — two goroutines, verify
+      disjoint task sets)
+- [ ] CI green
+
+---
+
+## CS2 — PG Ticket Store
+
+Replace `events.TicketStore` (in-memory `sync.Map`) with a PG-backed
+implementation. The middleware already programs to the `TicketValidator`
+interface — the swap is clean.
+
+### 2.1 — Store Interface
+
+New interface in `store/`:
+
+```go
+// TicketStore manages short-lived single-use WebSocket auth tickets.
+type TicketStore interface {
+    Issue(ctx context.Context, userID string) (string, error)
+    Validate(ctx context.Context, ticketID string) (string, bool)
+    Reap(ctx context.Context) (int, error)
+}
+```
+
+### 2.2 — PG Implementation
+
+**Issue:**
+```sql
+INSERT INTO ws_tickets (id, user_id, expires_at)
+VALUES ($1, $2, NOW() + INTERVAL '30 seconds')
+```
+
+Token generation stays in Go (`crypto/rand`, 16 bytes, hex-encoded).
+
+**Validate (atomic consume):**
+```sql
+DELETE FROM ws_tickets
+WHERE id = $1 AND expires_at > NOW()
+RETURNING user_id
+```
+
+Single statement — delete + return. If expired or already consumed,
+zero rows → `("", false)`.
+
+**Reap (TTL cleanup):**
+```sql
+DELETE FROM ws_tickets WHERE expires_at <= NOW()
+```
+
+Called by a system task or inline during poll. No dedicated goroutine
+needed — the scheduler's 30s tick can piggyback, or register as a
+lightweight system function.
+
+### 2.3 — SQLite Implementation
+
+Identical SQL with dialect adjustments (`datetime('now', '+30 seconds')`
+instead of `NOW() + INTERVAL`).
+
+### 2.4 — Adapter for Middleware Interface
+
+The middleware `TicketValidator` interface is:
+```go
+type TicketValidator interface {
+    Validate(ticketID string) (string, bool)
+}
+```
+
+The store's `Validate` takes a `context.Context`. Thin adapter:
+
+```go
+// TicketValidatorAdapter bridges store.TicketStore → middleware.TicketValidator.
+type TicketValidatorAdapter struct {
+    Store store.TicketStore
+}
+
+func (a *TicketValidatorAdapter) Validate(ticketID string) (string, bool) {
+    ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
+    defer cancel()
+    return a.Store.Validate(ctx, ticketID)
+}
+```
+
+### 2.5 — Wiring in `main.go`
+
+Replace:
+```go
+ticketStore := events.NewTicketStore()
+defer ticketStore.Stop()
+```
+
+With:
+```go
+ticketAdapter := &events.TicketValidatorAdapter{Store: stores.Tickets}
+```
+
+The `POST /ws/ticket` endpoint calls `stores.Tickets.Issue(ctx, userID)`
+directly. The WS auth middleware receives `ticketAdapter` (satisfies
+`TicketValidator`). No reaper goroutine — use system function or
+scheduler piggyback.
+
+### 2.6 — Reap Strategy
+
+Option A: Register `ticket_reap` as a system function
+(`taskutil.SystemRegistry`), add a system task with `schedule: "@hourly"`
+or `"*/5 * * * *"`. Pros: visible in admin UI, uses existing
+infrastructure. Cons: requires task to exist.
+
+Option B: Inline reap — call `stores.Tickets.Reap(ctx)` at the top
+of the scheduler `poll()` loop (every 30s, cheap no-op when table is
+empty). Pros: zero config. Cons: slightly couples scheduler to tickets.
+
+**Recommendation: Option B.** At 50 users, the table will have at most
+a few dozen rows. A `DELETE WHERE expires_at <= NOW()` every 30s is
+free. Revisit if ticket volume grows.
+
+### 2.7 — Delete `events/tickets.go`
+
+The in-memory `TicketStore` struct, `NewTicketStore()`, and reaper
+goroutine are fully replaced. Remove the file. The `TicketValidatorAdapter`
+lives in `events/` (or alongside the middleware — whichever avoids
+import cycles).
+
+### Deliverables
+
+- [ ] `store.TicketStore` interface
+- [ ] PG implementation + SQLite implementation
+- [ ] `TicketValidatorAdapter` — bridges `context`-aware store to
+      `TicketValidator` interface
+- [ ] `main.go` wiring — swap in PG store, remove `events.NewTicketStore()`
+- [ ] Inline reap in scheduler poll
+- [ ] Delete `events/tickets.go`
+- [ ] Add `Tickets` field to `store.Stores`
+- [ ] CI green
+
+---
+
+## CS3 — PG Rate Limiter
+
+Replace the in-memory token bucket (`middleware.RateLimiter`) with a
+PG-backed counter. Currently only applied to `/auth` routes (5 req/s,
+burst 8), so transaction volume is trivially low.
+
+### 3.1 — Store Interface
+
+```go
+// RateLimitStore manages distributed rate limit counters.
+type RateLimitStore interface {
+    // Allow checks if a request is within the rate limit.
+    // Returns (allowed bool, tokensRemaining float64).
+    // Atomically increments the counter if allowed.
+    Allow(ctx context.Context, key string, rate float64, burst int) (bool, error)
+
+    // Cleanup removes expired windows.
+    Cleanup(ctx context.Context, maxAge time.Duration) error
+}
+```
+
+### 3.2 — PG Implementation: Sliding-Window Token Bucket
+
+The in-memory implementation uses a classic token bucket (refill based
+on elapsed time). The PG version approximates this with time-bucketed
+counters.
+
+**`Allow` — atomic check-and-increment:**
+
+```sql
+-- Upsert the current window's counter and check burst limit.
+-- Window = current second (truncated).
+INSERT INTO rate_limit_counters (key, window, tokens)
+VALUES ($1, date_trunc('second', NOW()), 1)
+ON CONFLICT (key, window)
+DO UPDATE SET tokens = rate_limit_counters.tokens + 1
+RETURNING tokens
+```
+
+Go logic after the RETURNING:
+1. Query returns `tokens` (count in the current 1-second window).
+2. If `tokens > burst` → denied, return `(false, nil)`.
+3. Else → allowed.
+
+This is a fixed-window approximation, not a sliding window. For auth
+rate limiting at 5 req/s burst 8, the practical difference is
+negligible — worst case allows 2× burst at window boundaries, which
+is acceptable for this use case. A true sliding window would require
+reading adjacent windows and interpolating, adding complexity for
+near-zero benefit at this scale.
+
+**Cleanup:**
+```sql
+DELETE FROM rate_limit_counters
+WHERE window < NOW() - $1::interval
+```
+
+Called alongside ticket reap in the scheduler poll loop.
+
+### 3.3 — SQLite Implementation
+
+Same logic, `datetime('now')` for window truncation. Single-process,
+so the PG atomicity guarantees are naturally satisfied.
+
+### 3.4 — Middleware Swap
+
+Replace `middleware.RateLimiter` struct with one backed by the store:
+
+```go
+type RateLimiter struct {
+    store store.RateLimitStore
+    rate  float64
+    burst int
+}
+
+func NewRateLimiter(store store.RateLimitStore, rate float64, burst int) *RateLimiter {
+    return &RateLimiter{store: store, rate: rate, burst: burst}
+}
+
+func (rl *RateLimiter) Limit() gin.HandlerFunc {
+    return func(c *gin.Context) {
+        key := "auth:" + c.ClientIP()
+        allowed, err := rl.store.Allow(c.Request.Context(), key, rl.rate, rl.burst)
+        if err != nil {
+            // DB error — fail open (don't block auth on rate limit DB failure)
+            c.Next()
+            return
+        }
+        if !allowed {
+            c.Header("Retry-After", "1")
+            c.AbortWithStatusJSON(http.StatusTooManyRequests, gin.H{
+                "error": "rate limit exceeded",
+            })
+            return
+        }
+        c.Next()
+    }
+}
+```
+
+**Fail-open policy:** if PG is down, allow the request. The auth
+endpoints have their own protections (bcrypt, lockout). Blocking
+legitimate logins because the rate limit table is unreachable is worse
+than allowing a brief burst.
+
+### 3.5 — Wiring in `main.go`
+
+Replace:
+```go
+authLimiter := middleware.NewRateLimiter(5, 8)
+```
+
+With:
+```go
+authLimiter := middleware.NewRateLimiter(stores.RateLimits, 5, 8)
+```
+
+Delete the in-memory cleanup goroutine (replaced by scheduler reap).
+
+### Deliverables
+
+- [ ] `store.RateLimitStore` interface
+- [ ] PG implementation + SQLite implementation
+- [ ] `middleware.RateLimiter` rewrite — backed by store, fail-open
+- [ ] `main.go` wiring
+- [ ] Add `RateLimits` field to `store.Stores`
+- [ ] Scheduler poll cleanup (rate_limit_counters + ws_tickets)
+- [ ] Delete in-memory visitor map + cleanup goroutine
+- [ ] CI green
+
+---
+
+## CS4 — WebSocket Cross-Pod Delivery
+
+The event bus → `pg_broadcast` → remote `publishLocal` pipeline is
+already implemented and handles room-scoped events correctly. The gap:
+**`hub.SendToUser()` bypasses the bus entirely** — it writes directly
+to local connection send channels. Users on other pods are never reached.
+
+### Affected call sites (7 total)
+
+| File | Context |
+|------|---------|
+| `main.go` | DM typing indicators |
+| `handlers/completion.go` (×3) | Streaming chunks, tool results, mentions |
+| `handlers/stream_loop.go` | SSE stream events |
+| `handlers/tool_loop.go` | Browser tool call delivery |
+| `notifications/service.go` | Push notification delivery |
+
+### 4.1 — Add `TargetUserID` to Event
+
+```go
+type Event struct {
+    Label    string          `json:"event"`
+    Room     string          `json:"room,omitempty"`
+    Payload  json.RawMessage `json:"payload"`
+    Ts       int64           `json:"ts"`
+
+    // Server-side metadata (not serialized to clients)
+    SenderID     string `json:"-"`
+    ConnID       string `json:"-"`
+    TargetUserID string `json:"-"` // v0.32.0: cross-pod targeted delivery
+}
+```
+
+`TargetUserID` is included in the JSON serialization for `pg_broadcast`
+(so the remote pod knows who to deliver to) but stripped before sending
+to WebSocket clients. Add a custom `MarshalJSON` for the broadcast
+path, or use a separate internal envelope.
+
+**Simpler approach:** Use `json:"target_user_id,omitempty"` — it's
+harmless if clients see it (they already ignore unknown fields), and
+avoids a second serialization path. The field is empty for room-scoped
+events and only populated for targeted delivery.
+
+### 4.2 — Update WS Subscriber Filter
+
+In `subscribeToBus`, add target filtering:
+
+```go
+// Targeted delivery: if event has a target user, only deliver to that user
+if e.TargetUserID != "" && e.TargetUserID != c.userID {
+    return
+}
+```
+
+This goes before the room filter. Targeted events skip room filtering
+entirely (they're user-scoped, not room-scoped).
+
+### 4.3 — Rewrite `SendToUser` → `PublishToUser`
+
+New method on `Hub`:
+
+```go
+// PublishToUser sends an event to a specific user via the bus.
+// Cross-pod safe: the bus broadcast hook fans out via pg_notify.
+func (h *Hub) PublishToUser(userID string, event Event) {
+    event.TargetUserID = userID
+    h.bus.Publish(event)
+}
+```
+
+This replaces all 7 `hub.SendToUser` call sites. The event flows:
+
+1. `hub.PublishToUser(userID, evt)`
+2. `bus.Publish(evt)` → local subscribers + `broadcastHook`
+3. Local pod: `subscribeToBus` filter matches `TargetUserID` → deliver
+4. `broadcastHook` → `pg_notify` → remote pod
+5. Remote pod: `publishLocal(evt)` → `subscribeToBus` filter → deliver
+
+### 4.4 — Keep `SendToUser` as Local-Only Optimization
+
+Don't delete `SendToUser` — rename to `sendToUserLocal` (unexported).
+`PublishToUser` can optionally try local delivery first (fast path)
+and only broadcast if the user isn't connected locally. But this
+optimization is premature at 50 users — just always go through the
+bus. Revisit post-MVP if latency matters.
+
+### 4.5 — Audit: `tool.call` + `WaitFor`
+
+`tool.call.*` events use `DirToClient` routing and are delivered via
+`SendToUser`. After the rewrite, they go through the bus and will
+broadcast to all pods. The `WaitFor` on the originating pod still
+works — `tool.result.*` comes back from the client on the same pod
+(the WS connection is sticky to a pod).
+
+Verify: if the user's browser tool is connected to pod-2, but the
+completion handler calling `WaitFor` is on pod-1, the tool call event
+needs to reach pod-2 (via pg_broadcast), and the result needs to come
+back to pod-1 (via pg_broadcast of `tool.result.*`). Check
+`RouteFor("tool.result.*")` — currently `DirFromClient`, which means
+the broadcast hook skips it. **This needs to change to `DirBoth`** so
+tool results cross pod boundaries for `WaitFor` to work.
+
+### Deliverables
+
+- [ ] `TargetUserID` field on `Event`
+- [ ] `subscribeToBus` target filter
+- [ ] `Hub.PublishToUser` — replaces all `SendToUser` call sites
+- [ ] Update `tool.result.*` routing to `DirBoth`
+- [ ] Rename `SendToUser` → `sendToUserLocal` (unexported)
+- [ ] Verify `WaitFor` works cross-pod (tool bridge scenario)
+- [ ] CI green
+
+---
+
+## CS5 — Health Probes + Helm Validation
+
+### 5.1 — Readiness Probe Refinement
+
+Current health endpoint: basic HTTP 200. Add a PG ping:
+
+```go
+func (h *HealthHandler) Readiness(c *gin.Context) {
+    ctx, cancel := context.WithTimeout(c.Request.Context(), 2*time.Second)
+    defer cancel()
+    if err := database.DB.PingContext(ctx); err != nil {
+        c.JSON(503, gin.H{"error": "database unavailable"})
+        return
+    }
+    c.JSON(200, gin.H{"status": "ok"})
+}
+```
+
+Wire as `/healthz/ready` (separate from the existing `/healthz/live`
+liveness probe). Kubernetes pulls the pod from the service on readiness
+failure — new requests route to healthy replicas.
+
+### 5.2 — Helm Changes
+
+`chart/values.yaml`:
+```yaml
+backend:
+  replicaCount: 2     # was 1
+```
+
+`chart/templates/deployment-backend.yaml` additions:
+
+**Pod anti-affinity** — spread replicas across nodes:
+```yaml
+affinity:
+  podAntiAffinity:
+    preferredDuringSchedulingIgnoredDuringExecution:
+      - weight: 100
+        podAffinityTerm:
+          labelSelector:
+            matchLabels:
+              app: switchboard-backend
+          topologyKey: kubernetes.io/hostname
+```
+
+`preferredDuring` (not `requiredDuring`) — if fewer nodes than
+replicas, pods still schedule on the same node (degraded HA is better
+than no scheduling).
+
+**Readiness probe:**
+```yaml
+readinessProbe:
+  httpGet:
+    path: /healthz/ready
+    port: 8080
+  initialDelaySeconds: 5
+  periodSeconds: 10
+  failureThreshold: 3
+```
+
+### 5.3 — Startup Jitter
+
+Add random jitter (0–15s) to the scheduler's initial tick to stagger
+replica polling:
+
+```go
+func (s *Scheduler) Run() {
+    // ...
+    jitter := time.Duration(rand.Intn(15000)) * time.Millisecond
+    time.Sleep(jitter)
+    log.Printf("[scheduler] Started (jitter=%s, interval=%s)", jitter, s.interval)
+    // ...
+}
+```
+
+Not strictly necessary with `SKIP LOCKED` (contention is harmless),
+but reduces unnecessary lock acquisition at startup.
+
+### 5.4 — Validation Checklist
+
+Manual validation on the `gobha-ai-chat` cluster:
+
+- [ ] Scale to 2 replicas: `kubectl scale deploy switchboard-backend --replicas=2`
+- [ ] Verify pods land on different nodes (`kubectl get pods -o wide`)
+- [ ] Create a cron task (every 1 min), confirm only one run per tick
+- [ ] WebSocket: connect on pod-1, send message that completes on
+      pod-2, verify streaming events arrive
+- [ ] Issue WS ticket on pod-1, connect WS on pod-2 — ticket validates
+- [ ] Rate limit: hit `/auth/login` 10× rapidly — confirm 429 after
+      burst regardless of which replica serves each request
+- [ ] Kill one pod (`kubectl delete pod ...`), confirm the other
+      continues serving + picks up scheduler duties immediately
+- [ ] `kubectl top pod` — memory baseline at 2 replicas under light load
+
+### Deliverables
+
+- [ ] `/healthz/ready` endpoint with PG ping
+- [ ] Helm: `replicaCount: 2`, pod anti-affinity, readiness probe
+- [ ] Scheduler startup jitter
+- [ ] Validation checklist executed and documented
+- [ ] CI green, tag `v0.32.0`
+
+---
+
+## Summary: Store Interface Additions
+
+```go
+type Stores struct {
+    // ... existing fields ...
+    Tickets    TicketStore     // v0.32.0: WS auth tickets (PG-backed)
+    RateLimits RateLimitStore  // v0.32.0: Distributed rate limiting
+}
+```
+
+`TaskStore` changes:
+- **Add:** `ClaimDueTask(ctx) (*Task, error)`
+- **Add:** `CreateRunExclusive(ctx, taskID) (*TaskRun, error)`
+- **Remove:** `ListDue(ctx, limit) ([]Task, error)`
+
+---
+
+## Changeset Sequence
+
+| CS | Scope | Key Files | Gate |
+|----|-------|-----------|------|
+| CS0 | Schema | `020_ha.sql` (PG + SQLite) | Migrations run, tables exist |
+| CS1 | Task scheduler | `store/task_iface.go`, `store/postgres/tasks.go`, `store/sqlite/tasks.go`, `scheduler/scheduler.go` | Concurrent claim test passes |
+| CS2 | Ticket store | `store/ticket_iface.go`, `store/postgres/tickets.go`, `store/sqlite/tickets.go`, `events/tickets.go` (delete), `main.go` | WS auth works with PG tickets |
+| CS3 | Rate limiter | `store/ratelimit_iface.go`, `store/postgres/ratelimit.go`, `store/sqlite/ratelimit.go`, `middleware/ratelimit.go`, `main.go` | Rate limit shared across replicas |
+| CS4 | WS fan-out | `events/types.go`, `events/ws.go`, all `SendToUser` call sites | Cross-pod event delivery |
+| CS5 | Health + Helm | `handlers/health.go`, `chart/`, `scheduler/scheduler.go` | 2-replica cluster validated |
+
+---
+
+## Risk Assessment
+
+**Low risk:** CS0 (schema), CS2 (ticket store — simple CRUD), CS3
+(rate limiter — auth-only, fail-open).
+
+**Medium risk:** CS1 (scheduler rewrite — core behavior change, but
+well-scoped and testable), CS5 (Helm — infra changes, but rollback is
+`--replicas=1`).
+
+**Higher risk:** CS4 (WS fan-out — touches 7 call sites across
+handlers, completion, notifications). The `tool.result` routing change
+(`DirFromClient` → `DirBoth`) needs careful testing — if tool results
+broadcast to all pods, the non-originating pod's `WaitFor` must not
+accidentally consume the result. Verify: `WaitFor` subscribes to
+`tool.result.{specific-id}` (exact label match), so only the waiting
+goroutine receives it. Safe.
+
+**Fallback:** If any CS breaks multi-replica, `replicaCount: 1` is
+always a safe rollback. Each CS should leave CI green at single-replica.
diff --git a/docs/ROADMAP.md b/docs/ROADMAP.md
index 67615e8..d6fa373 100644
--- a/docs/ROADMAP.md
+++ b/docs/ROADMAP.md
@@ -30,7 +30,7 @@ v0.9.x–v0.28.7  Foundation through Platform Polish          ✅
         │                               │
    Extension Track                 Operations Track
         │                               │
-   v0.29.0 Starlark Sandbox  ✅  v0.32.0 Multi-Replica HA
+   v0.29.0 Starlark Sandbox  ✅  v0.32.0 Multi-Replica HA  ✅
    v0.29.1 API Extensions   ✅  v0.33.0 Observability
    v0.29.2 DB Extensions    ✅   v0.34.0 Data Portability
    v0.29.3 Workflow Forms   ✅          │
@@ -39,7 +39,7 @@ v0.9.x–v0.28.7  Foundation through Platform Polish          ✅
    v0.30.2 Workflow Packages ✅         │
    v0.31.0 Editor + SDK     ✅         │
    v0.31.1 SDK Exercise     ✅         │
-   v0.31.2 Team Workflows            │
+   v0.31.2 Team Workflows   ✅         │
         │                               │
         │                          v0.35.0 Workflow Product
         │                               │
@@ -350,43 +350,39 @@ Depends on: v0.31.1.
 Parallel to extension track. No Starlark dependency. Delivers
 production readiness for the target multi-team deployment.
 
-### v0.32.0 — Multi-Replica HA
+### v0.32.0 — Multi-Replica HA ✅
 
 Run 2–3 backend replicas across nodes for node-level availability.
 
 Depends on: v0.28.8.
 
+**Design decision:** PG `SKIP LOCKED` replaces Kubernetes Lease-based
+leader election. Every replica runs the scheduler poll loop; PG
+serializes task claims atomically. No K8s API dependency, no Redis,
+no new coordination infrastructure. See `docs/DESIGN-0.32.0.md`.
+
 **What already works multi-replica:**
 - REST API (stateless, JWT auth) ✅
 - PG + S3 + CephFS (shared infrastructure) ✅
 - `pg_broadcast` LISTEN/NOTIFY (cross-pod event bus) ✅
 
-**What needs work:**
-- [ ] WebSocket fan-out: wire `Bus.Subscribe` to `pg_broadcast` listener
-      so events from other pods reach local WebSocket connections.
-      LISTEN/NOTIFY plumbing exists — bridge inbound NOTIFY into per-pod
-      hub for local delivery.
-- [ ] Task scheduler leader election: Kubernetes `Lease`-based. Only
-      leader runs cron scheduler. Prevents duplicate execution.
-- [ ] Shared ticket store: `TicketStore` from `sync.Map` → PG table
-      with 30s TTL. Ensures WS ticket from pod-1 validates on pod-2.
-- [ ] Shared rate limiter: in-memory → PG or Redis counter. Without
-      this, effective rate limit = N × configured across N replicas.
-- [ ] Health check refinement: readiness probe fails fast on PG
-      connection loss.
-- [ ] Helm: `backend.replicaCount` > 1 tested. Pod anti-affinity
-      to spread across nodes.
+**Delivered (5 changesets):**
+- [x] Task scheduler: `FOR UPDATE SKIP LOCKED` atomic claim replaces
+      `ListDue`. `CreateRunExclusive` conditional insert for
+      belt-and-suspenders uniqueness. Startup jitter (0–15s).
+- [x] WebSocket cross-pod delivery: `PublishToUser` routes through
+      bus → `pg_broadcast` → remote pod. 18 `SendToUser` call sites
+      migrated. `tool.result.*` routing changed to `DirBoth` for
+      cross-pod `WaitFor`. `TargetUserID` field on `Event`.
+- [x] Shared ticket store: `ws_tickets` PG table with 30s TTL,
+      atomic `DELETE ... RETURNING` validation. Replaces `sync.Map`.
+- [x] Shared rate limiter: `rate_limit_counters` PG table with
+      fixed-window counters. Fail-open policy on DB errors.
+- [x] Health probes: `/healthz/ready` (PG ping, 2s timeout),
+      `/healthz/live` (process alive). Helm: `replicaCount: 2`,
+      pod anti-affinity, readiness/liveness probes.
 
-**Sizing (measured on v0.28.8):**
-
-| Metric | Value |
-|--------|-------|
-| Idle memory | 17Mi |
-| Peak (569 reqs, 4 users, SSE) | 216Mi |
-| Settled after GC | 34Mi |
-| Per-SSE stream | ~500KB–1MB |
-| Per-WebSocket | ~64KB |
-| DB pool | 25 max (shared) |
+**Schema:** `020_ha.sql` — `ws_tickets`, `rate_limit_counters`.
 
 ### v0.33.0 — Observability
 
diff --git a/server/auth/auth.go b/server/auth/auth.go
index 1e7af27..ab2f6a1 100644
--- a/server/auth/auth.go
+++ b/server/auth/auth.go
@@ -5,8 +5,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type Mode string
diff --git a/server/auth/builtin.go b/server/auth/builtin.go
index c172851..8b9a6c4 100644
--- a/server/auth/builtin.go
+++ b/server/auth/builtin.go
@@ -9,8 +9,8 @@ import (
 	"github.com/gin-gonic/gin"
 	"golang.org/x/crypto/bcrypt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 const bcryptCost = 12
diff --git a/server/auth/mtls.go b/server/auth/mtls.go
index 53fc7d5..f097765 100644
--- a/server/auth/mtls.go
+++ b/server/auth/mtls.go
@@ -8,8 +8,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // MTLSConfig holds mTLS-specific configuration.
diff --git a/server/auth/mtls_test.go b/server/auth/mtls_test.go
index 9de1691..b27117e 100644
--- a/server/auth/mtls_test.go
+++ b/server/auth/mtls_test.go
@@ -3,7 +3,7 @@ package auth
 import (
 	"testing"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 func TestParseDN(t *testing.T) {
diff --git a/server/auth/oidc.go b/server/auth/oidc.go
index d661124..17f6a06 100644
--- a/server/auth/oidc.go
+++ b/server/auth/oidc.go
@@ -18,8 +18,8 @@ import (
 	"github.com/gin-gonic/gin"
 	"github.com/golang-jwt/jwt/v5"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // OIDCConfig holds OIDC-specific configuration from env vars.
diff --git a/server/auth/oidc_test.go b/server/auth/oidc_test.go
index 6f89cac..97f8db1 100644
--- a/server/auth/oidc_test.go
+++ b/server/auth/oidc_test.go
@@ -3,7 +3,7 @@ package auth_test
 import (
 	"testing"
 
-	"git.gobha.me/xcaliber/chat-switchboard/auth"
+	"chat-switchboard/auth"
 )
 
 func TestOIDCProvider_Discovery(t *testing.T) {
diff --git a/server/auth/permissions.go b/server/auth/permissions.go
index cb04bbe..8adfff3 100644
--- a/server/auth/permissions.go
+++ b/server/auth/permissions.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // EveryoneGroupID is the stable ID of the implicit "Everyone" group seeded in
diff --git a/server/auth/session.go b/server/auth/session.go
index 52fcea8..efb1c13 100644
--- a/server/auth/session.go
+++ b/server/auth/session.go
@@ -9,9 +9,9 @@ import (
 	"github.com/gin-gonic/gin"
 	"github.com/google/uuid"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/config"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 const sessionCookieName = "sb_session"
diff --git a/server/capabilities/capabilities_test.go b/server/capabilities/capabilities_test.go
index 0e0e955..dc47a6d 100644
--- a/server/capabilities/capabilities_test.go
+++ b/server/capabilities/capabilities_test.go
@@ -3,7 +3,7 @@ package capabilities
 import (
 	"testing"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 func TestLookupKnownModel_AlwaysFalse(t *testing.T) {
diff --git a/server/capabilities/intrinsic.go b/server/capabilities/intrinsic.go
index 5bb0319..57cb948 100644
--- a/server/capabilities/intrinsic.go
+++ b/server/capabilities/intrinsic.go
@@ -4,7 +4,7 @@ import (
 	"regexp"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // ── Known Model Defaults ────────────────────
diff --git a/server/capabilities/resolver.go b/server/capabilities/resolver.go
index 1c13183..90e25cf 100644
--- a/server/capabilities/resolver.go
+++ b/server/capabilities/resolver.go
@@ -4,8 +4,8 @@ import (
 	"context"
 	"log"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ModelsForUser returns all models and Personas visible to a user.
diff --git a/server/compaction/compaction.go b/server/compaction/compaction.go
index 34f8b32..3b04b61 100644
--- a/server/compaction/compaction.go
+++ b/server/compaction/compaction.go
@@ -8,11 +8,11 @@ import (
 	"strings"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/roles"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/treepath"
+	"chat-switchboard/models"
+	"chat-switchboard/providers"
+	"chat-switchboard/roles"
+	"chat-switchboard/store"
+	"chat-switchboard/treepath"
 )
 
 // ── Request / Result ────────────────────────
diff --git a/server/compaction/compaction_test.go b/server/compaction/compaction_test.go
index 718859f..f28d7d9 100644
--- a/server/compaction/compaction_test.go
+++ b/server/compaction/compaction_test.go
@@ -6,9 +6,9 @@ import (
 	"testing"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
+	"chat-switchboard/database"
+	"chat-switchboard/models"
+	postgres "chat-switchboard/store/postgres"
 )
 
 // ── Helpers ─────────────────────────────────
diff --git a/server/compaction/estimator.go b/server/compaction/estimator.go
index 8bd7579..bad265d 100644
--- a/server/compaction/estimator.go
+++ b/server/compaction/estimator.go
@@ -1,7 +1,7 @@
 package compaction
 
 import (
-	"git.gobha.me/xcaliber/chat-switchboard/treepath"
+	"chat-switchboard/treepath"
 )
 
 // ── Token Estimation ────────────────────────
diff --git a/server/compaction/estimator_test.go b/server/compaction/estimator_test.go
index 20c5236..45388f3 100644
--- a/server/compaction/estimator_test.go
+++ b/server/compaction/estimator_test.go
@@ -3,7 +3,7 @@ package compaction
 import (
 	"testing"
 
-	"git.gobha.me/xcaliber/chat-switchboard/treepath"
+	"chat-switchboard/treepath"
 )
 
 func TestEstimateTokens(t *testing.T) {
diff --git a/server/compaction/scanner.go b/server/compaction/scanner.go
index a4f43c0..9343b9c 100644
--- a/server/compaction/scanner.go
+++ b/server/compaction/scanner.go
@@ -6,10 +6,10 @@ import (
 	"sync"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/roles"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/treepath"
+	"chat-switchboard/models"
+	"chat-switchboard/roles"
+	"chat-switchboard/store"
+	"chat-switchboard/treepath"
 )
 
 // ── Defaults ────────────────────────────────
diff --git a/server/compaction/testmain_test.go b/server/compaction/testmain_test.go
index 9a52e15..cc67b37 100644
--- a/server/compaction/testmain_test.go
+++ b/server/compaction/testmain_test.go
@@ -4,7 +4,7 @@ import (
 	"os"
 	"testing"
 
-	"git.gobha.me/xcaliber/chat-switchboard/database"
+	"chat-switchboard/database"
 )
 
 func TestMain(m *testing.M) {
diff --git a/server/database/database.go b/server/database/database.go
index 14f2927..7eda278 100644
--- a/server/database/database.go
+++ b/server/database/database.go
@@ -12,7 +12,7 @@ import (
 	_ "github.com/lib/pq"
 	_ "modernc.org/sqlite"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
+	"chat-switchboard/config"
 )
 
 // DB is the application-wide database connection pool.
diff --git a/server/database/migrations/002_teams.sql b/server/database/migrations/002_teams.sql
index aa6036f..759cd26 100644
--- a/server/database/migrations/002_teams.sql
+++ b/server/database/migrations/002_teams.sql
@@ -13,7 +13,6 @@
 CREATE TABLE IF NOT EXISTS teams (
     id          UUID PRIMARY KEY DEFAULT gen_random_uuid(),
     name        VARCHAR(200) NOT NULL UNIQUE,
-    slug        VARCHAR(200) NOT NULL DEFAULT '' UNIQUE,
     description TEXT DEFAULT '',
     created_by  UUID NOT NULL REFERENCES users(id) ON DELETE RESTRICT,
     is_active   BOOLEAN DEFAULT true,
diff --git a/server/database/migrations/020_ha.sql b/server/database/migrations/020_ha.sql
new file mode 100644
index 0000000..54fc90d
--- /dev/null
+++ b/server/database/migrations/020_ha.sql
@@ -0,0 +1,37 @@
+-- ==========================================
+-- Chat Switchboard — 020 Multi-Replica HA
+-- ==========================================
+-- Shared state tables for multi-replica operation.
+-- v0.32.0: ws_tickets, rate_limit_counters.
+-- ==========================================
+
+-- =========================================
+-- WEBSOCKET TICKETS (replaces in-memory sync.Map)
+-- =========================================
+-- Short-lived, single-use tokens for WebSocket authentication.
+-- Ticket issued on pod-1 must validate on pod-2.
+
+CREATE TABLE IF NOT EXISTS ws_tickets (
+    id         TEXT PRIMARY KEY,
+    user_id    UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    expires_at TIMESTAMPTZ NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_ws_tickets_expires
+    ON ws_tickets (expires_at);
+
+-- =========================================
+-- RATE LIMIT COUNTERS (replaces in-memory token bucket)
+-- =========================================
+-- Fixed-window counters keyed by scope:identifier and time bucket.
+-- Key format: "{scope}:{identifier}" e.g. "auth:192.168.1.1"
+
+CREATE TABLE IF NOT EXISTS rate_limit_counters (
+    key          TEXT NOT NULL,
+    window_start TIMESTAMPTZ NOT NULL,
+    tokens       REAL NOT NULL DEFAULT 0,
+    PRIMARY KEY (key, window_start)
+);
+
+CREATE INDEX IF NOT EXISTS idx_rate_limit_counters_window
+    ON rate_limit_counters (window_start);
diff --git a/server/database/migrations/sqlite/002_teams.sql b/server/database/migrations/sqlite/002_teams.sql
index d157e38..1edd9e3 100644
--- a/server/database/migrations/sqlite/002_teams.sql
+++ b/server/database/migrations/sqlite/002_teams.sql
@@ -4,7 +4,6 @@
 CREATE TABLE IF NOT EXISTS teams (
     id          TEXT PRIMARY KEY,
     name        TEXT NOT NULL UNIQUE,
-    slug        TEXT NOT NULL DEFAULT '' UNIQUE,
     description TEXT DEFAULT '',
     created_by  TEXT NOT NULL REFERENCES users(id) ON DELETE RESTRICT,
     is_active   INTEGER DEFAULT 1,
diff --git a/server/database/migrations/sqlite/020_ha.sql b/server/database/migrations/sqlite/020_ha.sql
new file mode 100644
index 0000000..37f2d26
--- /dev/null
+++ b/server/database/migrations/sqlite/020_ha.sql
@@ -0,0 +1,34 @@
+-- ==========================================
+-- Chat Switchboard — 020 Multi-Replica HA
+-- ==========================================
+-- Shared state tables for multi-replica operation.
+-- v0.32.0: ws_tickets, rate_limit_counters.
+-- SQLite parity — functional for single-process test coverage.
+-- ==========================================
+
+-- =========================================
+-- WEBSOCKET TICKETS
+-- =========================================
+
+CREATE TABLE IF NOT EXISTS ws_tickets (
+    id         TEXT PRIMARY KEY,
+    user_id    TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    expires_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_ws_tickets_expires
+    ON ws_tickets (expires_at);
+
+-- =========================================
+-- RATE LIMIT COUNTERS
+-- =========================================
+
+CREATE TABLE IF NOT EXISTS rate_limit_counters (
+    key          TEXT NOT NULL,
+    window_start TEXT NOT NULL,
+    tokens       REAL NOT NULL DEFAULT 0,
+    PRIMARY KEY (key, window_start)
+);
+
+CREATE INDEX IF NOT EXISTS idx_rate_limit_counters_window
+    ON rate_limit_counters (window_start);
diff --git a/server/events/bus_test.go b/server/events/bus_test.go
index 43462bf..0db568a 100644
--- a/server/events/bus_test.go
+++ b/server/events/bus_test.go
@@ -115,7 +115,7 @@ func TestRouteFor(t *testing.T) {
 		{"pong", DirToClient},
 		// Tool bridge routes
 		{"tool.call.abc123", DirToClient},
-		{"tool.result.abc123", DirFromClient},
+		{"tool.result.abc123", DirBoth}, // v0.32.0: DirBoth for cross-pod WaitFor
 		// Extension lifecycle
 		{"extension.loaded", DirLocal},
 		{"extension.error", DirLocal},
@@ -201,11 +201,14 @@ func TestToolCallRouteToClient(t *testing.T) {
 	}
 }
 
-func TestToolResultRouteFromClient(t *testing.T) {
+func TestToolResultRouteBoth(t *testing.T) {
+	// v0.32.0: tool.result is DirBoth so results cross pods for WaitFor.
+	// The WS subscriber explicitly filters out tool.result events to
+	// prevent re-sending to clients (see subscribeToBus in ws.go).
 	if !ShouldAcceptFromClient("tool.result.abc123") {
 		t.Error("tool.result.* should be accepted from client")
 	}
-	if ShouldSendToClient("tool.result.abc123") {
-		t.Error("tool.result.* should NOT be sent to client")
+	if !ShouldSendToClient("tool.result.abc123") {
+		t.Error("tool.result.* should route DirBoth (filtered by WS subscriber, not routing table)")
 	}
 }
diff --git a/server/events/pg_broadcast.go b/server/events/pg_broadcast.go
index 83ab059..95cb5bb 100644
--- a/server/events/pg_broadcast.go
+++ b/server/events/pg_broadcast.go
@@ -23,7 +23,7 @@ import (
 
 	"github.com/lib/pq"
 
-	"git.gobha.me/xcaliber/chat-switchboard/database"
+	"chat-switchboard/database"
 )
 
 const pgNotifyChannel = "switchboard_events"
diff --git a/server/events/ticket_adapter.go b/server/events/ticket_adapter.go
new file mode 100644
index 0000000..1c1af10
--- /dev/null
+++ b/server/events/ticket_adapter.go
@@ -0,0 +1,25 @@
+package events
+
+// v0.32.0: TicketValidatorAdapter bridges the context-aware store.TicketStore
+// to the middleware.TicketValidator interface (which has no context parameter).
+// Replaces the in-memory TicketStore that lived in this file previously.
+
+import (
+	"context"
+	"time"
+
+	"chat-switchboard/store"
+)
+
+// TicketValidatorAdapter satisfies middleware.TicketValidator using a
+// store.TicketStore backend (PG or SQLite).
+type TicketValidatorAdapter struct {
+	Store store.TicketStore
+}
+
+// Validate atomically consumes a ticket. Satisfies middleware.TicketValidator.
+func (a *TicketValidatorAdapter) Validate(ticketID string) (string, bool) {
+	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
+	defer cancel()
+	return a.Store.Validate(ctx, ticketID)
+}
diff --git a/server/events/tickets.go b/server/events/tickets.go
deleted file mode 100644
index ac893f5..0000000
--- a/server/events/tickets.go
+++ /dev/null
@@ -1,118 +0,0 @@
-package events
-
-import (
-	"crypto/rand"
-	"encoding/hex"
-	"log"
-	"sync"
-	"time"
-)
-
-const (
-	// ticketTTL is how long a ticket remains valid after issuance.
-	ticketTTL = 30 * time.Second
-
-	// ticketReapInterval is how often the background reaper runs.
-	ticketReapInterval = 15 * time.Second
-)
-
-// ticket is a single-use opaque token that maps to a user ID.
-type ticket struct {
-	userID    string
-	expiresAt time.Time
-}
-
-// TicketStore manages short-lived, single-use WebSocket authentication tickets.
-//
-// Flow:
-//  1. Client POSTs to /api/v1/ws/ticket (authenticated via JWT).
-//  2. Server returns {"ticket": "<opaque>"}.
-//  3. Client connects WebSocket with ?ticket=<opaque>.
-//  4. Server validates and deletes the ticket atomically (single-use).
-//
-// This replaces passing the JWT as ?token= in the WebSocket URL, which
-// exposed the token in server logs, proxy logs, and browser history.
-type TicketStore struct {
-	mu      sync.Mutex
-	tickets map[string]ticket
-	stopCh  chan struct{}
-}
-
-// NewTicketStore creates a store and starts the background reaper.
-func NewTicketStore() *TicketStore {
-	ts := &TicketStore{
-		tickets: make(map[string]ticket),
-		stopCh:  make(chan struct{}),
-	}
-	go ts.reaper()
-	return ts
-}
-
-// Issue creates a new single-use ticket for the given user.
-// Returns the opaque ticket string.
-func (ts *TicketStore) Issue(userID string) (string, error) {
-	b := make([]byte, 16) // 128-bit random
-	if _, err := rand.Read(b); err != nil {
-		return "", err
-	}
-	id := hex.EncodeToString(b)
-
-	ts.mu.Lock()
-	ts.tickets[id] = ticket{
-		userID:    userID,
-		expiresAt: time.Now().Add(ticketTTL),
-	}
-	ts.mu.Unlock()
-
-	return id, nil
-}
-
-// Validate checks a ticket, deletes it (single-use), and returns the user ID.
-// Returns ("", false) if the ticket is invalid, expired, or already consumed.
-func (ts *TicketStore) Validate(ticketID string) (string, bool) {
-	ts.mu.Lock()
-	defer ts.mu.Unlock()
-
-	t, ok := ts.tickets[ticketID]
-	if !ok {
-		return "", false
-	}
-	delete(ts.tickets, ticketID) // single-use: delete immediately
-
-	if time.Now().After(t.expiresAt) {
-		return "", false
-	}
-	return t.userID, true
-}
-
-// Stop shuts down the background reaper.
-func (ts *TicketStore) Stop() {
-	close(ts.stopCh)
-}
-
-// reaper periodically removes expired tickets that were never validated.
-func (ts *TicketStore) reaper() {
-	ticker := time.NewTicker(ticketReapInterval)
-	defer ticker.Stop()
-
-	for {
-		select {
-		case <-ticker.C:
-			ts.mu.Lock()
-			now := time.Now()
-			reaped := 0
-			for id, t := range ts.tickets {
-				if now.After(t.expiresAt) {
-					delete(ts.tickets, id)
-					reaped++
-				}
-			}
-			ts.mu.Unlock()
-			if reaped > 0 {
-				log.Printf("[ws-tickets] reaped %d expired tickets", reaped)
-			}
-		case <-ts.stopCh:
-			return
-		}
-	}
-}
diff --git a/server/events/types.go b/server/events/types.go
index 74cd455..d4c8053 100644
--- a/server/events/types.go
+++ b/server/events/types.go
@@ -9,6 +9,11 @@ type Event struct {
 	Payload json.RawMessage `json:"payload"`
 	Ts      int64           `json:"ts"`
 
+	// v0.32.0: Cross-pod targeted delivery. When set, only connections
+	// belonging to this user receive the event. Serialized for pg_broadcast
+	// (harmless if clients see it — they ignore unknown fields).
+	TargetUserID string `json:"target_user_id,omitempty"`
+
 	// Server-side metadata (not serialized to clients)
 	SenderID string `json:"-"` // user ID of sender, empty for system events
 	ConnID   string `json:"-"` // WebSocket connection ID, empty for server-origin
@@ -60,7 +65,7 @@ var routeTable = map[string]Direction{
 	"role.fallback":     DirToClient,
 
 	// Notifications (v0.20.0)
-	"notification.new":  DirToClient, // targeted via Hub.SendToUser, not room-based
+	"notification.new":  DirToClient, // targeted via Hub.PublishToUser, not room-based
 	"notification.read": DirToClient, // badge sync across tabs
 
 	// Workspace (v0.21.5)
@@ -79,7 +84,7 @@ var routeTable = map[string]Direction{
 
 	// Tool execution (browser tools bridge)
 	"tool.call.":    DirToClient,    // Server → specific client (browser tool invocation)
-	"tool.result.":  DirFromClient,  // Client → server (browser tool result)
+	"tool.result.":  DirBoth,        // v0.32.0: DirBoth — result must cross pods for WaitFor
 
 	// Extension lifecycle
 	"extension.loaded":  DirLocal,   // Client-only
diff --git a/server/events/ws.go b/server/events/ws.go
index 980a23c..3a83393 100644
--- a/server/events/ws.go
+++ b/server/events/ws.go
@@ -170,9 +170,17 @@ func (h *Hub) IsConnected(userID string) bool {
 	return false
 }
 
-// SendToUser sends an event directly to all WebSocket connections for a user,
-// bypassing room filtering. Used for targeted tool.call delivery.
-func (h *Hub) SendToUser(userID string, event Event) {
+// PublishToUser sends an event to a specific user via the bus.
+// v0.32.0: Cross-pod safe — the bus broadcast hook fans out via pg_notify.
+// All replicas receive the event; only the one with the user's connection delivers it.
+func (h *Hub) PublishToUser(userID string, event Event) {
+	event.TargetUserID = userID
+	h.bus.Publish(event)
+}
+
+// sendToUserLocal sends an event directly to local WebSocket connections for a user.
+// Unexported — callers should use PublishToUser for cross-pod delivery.
+func (h *Hub) sendToUserLocal(userID string, event Event) {
 	data, err := json.Marshal(event)
 	if err != nil {
 		return
@@ -226,6 +234,18 @@ func (c *Conn) subscribeToBus() {
 			return
 		}
 
+		// v0.32.0: Targeted delivery — only deliver to the intended user.
+		// Targeted events skip room filtering (user-scoped, not room-scoped).
+		if e.TargetUserID != "" && e.TargetUserID != c.userID {
+			return
+		}
+
+		// v0.32.0: tool.result travels cross-pod for WaitFor (DirBoth) but
+		// must not be forwarded to WebSocket clients — they sent it.
+		if strings.HasPrefix(e.Label, "tool.result.") {
+			return
+		}
+
 		// Don't echo typing events back to the sender
 		if e.Label == "chat.typing" || e.ConnID == c.id {
 			if e.SenderID == c.userID && e.ConnID == c.id {
diff --git a/server/filters/discover.go b/server/filters/discover.go
index 16def74..ceff8c6 100644
--- a/server/filters/discover.go
+++ b/server/filters/discover.go
@@ -9,9 +9,9 @@ import (
 	"context"
 	"log"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/sandbox"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/sandbox"
+	"chat-switchboard/store"
 )
 
 // DiscoverStarlarkFilters scans the package registry for active starlark
diff --git a/server/filters/kb_inject.go b/server/filters/kb_inject.go
index 8fa5e1c..d52db8c 100644
--- a/server/filters/kb_inject.go
+++ b/server/filters/kb_inject.go
@@ -13,7 +13,7 @@ import (
 	"fmt"
 	"log"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // KBInjectFilter injects a system prompt listing active knowledge bases
diff --git a/server/filters/starlark_filter.go b/server/filters/starlark_filter.go
index f83975e..0b5a136 100644
--- a/server/filters/starlark_filter.go
+++ b/server/filters/starlark_filter.go
@@ -24,8 +24,8 @@ import (
 
 	"go.starlark.net/starlark"
 
-	"git.gobha.me/xcaliber/chat-switchboard/sandbox"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/sandbox"
+	"chat-switchboard/store"
 )
 
 // StarlarkFilter runs a Starlark package's on_pre_completion entry point.
diff --git a/server/go.mod b/server/go.mod
index 1721abe..b4d3abf 100644
--- a/server/go.mod
+++ b/server/go.mod
@@ -1,4 +1,4 @@
-module git.gobha.me/xcaliber/chat-switchboard
+module chat-switchboard
 
 go 1.22
 
diff --git a/server/handlers/admin.go b/server/handlers/admin.go
index b62ca22..b8c2b16 100644
--- a/server/handlers/admin.go
+++ b/server/handlers/admin.go
@@ -12,14 +12,14 @@ import (
 	"github.com/gin-gonic/gin"
 	"golang.org/x/crypto/bcrypt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/storage"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/tools/search"
+	"chat-switchboard/auth"
+	"chat-switchboard/crypto"
+	"chat-switchboard/database"
+	"chat-switchboard/models"
+	"chat-switchboard/providers"
+	"chat-switchboard/storage"
+	"chat-switchboard/store"
+	"chat-switchboard/tools/search"
 )
 
 type AdminHandler struct {
diff --git a/server/handlers/admin_email.go b/server/handlers/admin_email.go
index 6ed6ffd..0cf6631 100644
--- a/server/handlers/admin_email.go
+++ b/server/handlers/admin_email.go
@@ -6,8 +6,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/notifications"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/notifications"
+	"chat-switchboard/store"
 )
 
 // AdminEmailHandler handles admin SMTP configuration and test endpoints.
diff --git a/server/handlers/apiconfigs.go b/server/handlers/apiconfigs.go
index 770fc6b..680cfb1 100644
--- a/server/handlers/apiconfigs.go
+++ b/server/handlers/apiconfigs.go
@@ -7,9 +7,9 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/crypto"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ProviderConfigHandler handles user-facing provider config endpoints.
diff --git a/server/handlers/audit.go b/server/handlers/audit.go
index 00d85b8..e729ccd 100644
--- a/server/handlers/audit.go
+++ b/server/handlers/audit.go
@@ -8,8 +8,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // AuditLog writes an audit entry via the store interface.
diff --git a/server/handlers/auth.go b/server/handlers/auth.go
index 750cc48..fb3158a 100644
--- a/server/handlers/auth.go
+++ b/server/handlers/auth.go
@@ -17,11 +17,11 @@ import (
 	"github.com/google/uuid"
 	"golang.org/x/crypto/bcrypt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/auth"
+	"chat-switchboard/config"
+	"chat-switchboard/crypto"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // Claims represents the JWT payload.
diff --git a/server/handlers/auth_test.go b/server/handlers/auth_test.go
index f3059d7..ad7f8a9 100644
--- a/server/handlers/auth_test.go
+++ b/server/handlers/auth_test.go
@@ -14,9 +14,9 @@ import (
 	"github.com/golang-jwt/jwt/v5"
 	"golang.org/x/crypto/bcrypt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/auth"
+	"chat-switchboard/config"
+	"chat-switchboard/store"
 )
 
 func testConfig() *config.Config {
diff --git a/server/handlers/avatar.go b/server/handlers/avatar.go
index 7c3eaa9..ca308f9 100644
--- a/server/handlers/avatar.go
+++ b/server/handlers/avatar.go
@@ -15,8 +15,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 const avatarSize = 128
diff --git a/server/handlers/capabilities.go b/server/handlers/capabilities.go
index a7a8c1b..87ef393 100644
--- a/server/handlers/capabilities.go
+++ b/server/handlers/capabilities.go
@@ -8,11 +8,11 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	capspkg "git.gobha.me/xcaliber/chat-switchboard/capabilities"
-	"git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/health"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	capspkg "chat-switchboard/capabilities"
+	"chat-switchboard/auth"
+	"chat-switchboard/health"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ModelHandler provides the unified models endpoint.
diff --git a/server/handlers/channel_models.go b/server/handlers/channel_models.go
index 30be966..a441cd9 100644
--- a/server/handlers/channel_models.go
+++ b/server/handlers/channel_models.go
@@ -6,8 +6,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── Channel Models Handler ──────────────────
diff --git a/server/handlers/channels.go b/server/handlers/channels.go
index 6adca2f..cd93724 100644
--- a/server/handlers/channels.go
+++ b/server/handlers/channels.go
@@ -9,8 +9,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── Request / Response types ────────────────
diff --git a/server/handlers/completion.go b/server/handlers/completion.go
index e0f8ea5..b4cf52c 100644
--- a/server/handlers/completion.go
+++ b/server/handlers/completion.go
@@ -13,22 +13,22 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/auth"
-	capspkg "git.gobha.me/xcaliber/chat-switchboard/capabilities"
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/filters"
-	"git.gobha.me/xcaliber/chat-switchboard/health"
-	"git.gobha.me/xcaliber/chat-switchboard/knowledge"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/notifications"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/routing"
-	"git.gobha.me/xcaliber/chat-switchboard/sandbox"
-	"git.gobha.me/xcaliber/chat-switchboard/storage"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/tools"
+	"chat-switchboard/auth"
+	capspkg "chat-switchboard/capabilities"
+	"chat-switchboard/crypto"
+	"chat-switchboard/database"
+	"chat-switchboard/events"
+	"chat-switchboard/filters"
+	"chat-switchboard/health"
+	"chat-switchboard/knowledge"
+	"chat-switchboard/models"
+	"chat-switchboard/notifications"
+	"chat-switchboard/providers"
+	"chat-switchboard/routing"
+	"chat-switchboard/sandbox"
+	"chat-switchboard/storage"
+	"chat-switchboard/store"
+	"chat-switchboard/tools"
 )
 
 // ── Request Types ───────────────────────────
@@ -280,7 +280,7 @@ func (h *CompletionHandler) Complete(c *gin.Context) {
 					Ts:      time.Now().UnixMilli(),
 				}
 				// Send to sender
-				h.hub.SendToUser(userID, evt)
+				h.hub.PublishToUser(userID, evt)
 				// Send to other user participants in the channel
 				pRows, pErr := database.DB.QueryContext(c.Request.Context(), database.Q(`
 					SELECT participant_id FROM channel_participants
@@ -291,7 +291,7 @@ func (h *CompletionHandler) Complete(c *gin.Context) {
 					for pRows.Next() {
 						var pid string
 						if pRows.Scan(&pid) == nil {
-							h.hub.SendToUser(pid, evt)
+							h.hub.PublishToUser(pid, evt)
 						}
 					}
 				}
@@ -598,7 +598,7 @@ func (h *CompletionHandler) Complete(c *gin.Context) {
 				"from_user":  userID,
 				"content":    truncateContent(req.Content, 120),
 			})
-			h.hub.SendToUser(mentionedUserID, events.Event{
+			h.hub.PublishToUser(mentionedUserID, events.Event{
 				Label:   "user.mentioned",
 				Payload: payload,
 				Ts:      time.Now().UnixMilli(),
diff --git a/server/handlers/completion_chain.go b/server/handlers/completion_chain.go
index 8425f02..ec8fcab 100644
--- a/server/handlers/completion_chain.go
+++ b/server/handlers/completion_chain.go
@@ -7,11 +7,11 @@ import (
 	"log"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
+	"chat-switchboard/events"
+	"chat-switchboard/models"
+	"chat-switchboard/providers"
 
-	capspkg "git.gobha.me/xcaliber/chat-switchboard/capabilities"
+	capspkg "chat-switchboard/capabilities"
 )
 
 // maxChainDepth limits AI-to-AI chaining to prevent runaway loops.
@@ -175,7 +175,7 @@ func (h *CompletionHandler) chainIfMentioned(
 			"tokens_used":      resp.InputTokens + resp.OutputTokens,
 			"chain_depth":      depth + 1,
 		})
-		h.hub.SendToUser(userID, events.Event{
+		h.hub.PublishToUser(userID, events.Event{
 			Label:   "message.created",
 			Payload: payload,
 			Ts:      time.Now().UnixMilli(),
@@ -314,7 +314,7 @@ func (h *CompletionHandler) chainToPersona(channelID, userID, personaID, trigger
 			"tokens_used":      resp.InputTokens + resp.OutputTokens,
 			"chain_depth":      depth,
 		})
-		h.hub.SendToUser(userID, events.Event{
+		h.hub.PublishToUser(userID, events.Event{
 			Label:   "message.created",
 			Payload: payload,
 			Ts:      time.Now().UnixMilli(),
@@ -350,7 +350,7 @@ func (h *CompletionHandler) emitTyping(userID, channelID, participantID, display
 		"participant_type": "persona",
 		"display_name":     displayName,
 	})
-	h.hub.SendToUser(userID, events.Event{
+	h.hub.PublishToUser(userID, events.Event{
 		Label:   eventType,
 		Payload: payload,
 		Ts:      time.Now().UnixMilli(),
diff --git a/server/handlers/ext_api.go b/server/handlers/ext_api.go
index ecc6f2f..8565900 100644
--- a/server/handlers/ext_api.go
+++ b/server/handlers/ext_api.go
@@ -42,9 +42,9 @@ import (
 	"github.com/gin-gonic/gin"
 	"go.starlark.net/starlark"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/sandbox"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/sandbox"
+	"chat-switchboard/store"
 )
 
 // ExtAPIHandler serves extension API routes via Starlark.
diff --git a/server/handlers/ext_db_schema.go b/server/handlers/ext_db_schema.go
index 709b1b1..72c8a97 100644
--- a/server/handlers/ext_db_schema.go
+++ b/server/handlers/ext_db_schema.go
@@ -15,7 +15,7 @@ import (
 	"regexp"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // validSchemaIdentifier matches safe SQL identifiers for table and column names.
diff --git a/server/handlers/ext_db_schema_test.go b/server/handlers/ext_db_schema_test.go
index 7be3d55..8ed649b 100644
--- a/server/handlers/ext_db_schema_test.go
+++ b/server/handlers/ext_db_schema_test.go
@@ -8,7 +8,7 @@ import (
 
 	_ "modernc.org/sqlite"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // ── mock ExtDataStore ────────────────────────────────────────────────────────
diff --git a/server/handlers/extension_permissions.go b/server/handlers/extension_permissions.go
index e1ce81e..95cbb4e 100644
--- a/server/handlers/extension_permissions.go
+++ b/server/handlers/extension_permissions.go
@@ -5,8 +5,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ExtPermHandler serves extension permission management endpoints.
diff --git a/server/handlers/extension_secrets.go b/server/handlers/extension_secrets.go
index a1ed2e0..c566585 100644
--- a/server/handlers/extension_secrets.go
+++ b/server/handlers/extension_secrets.go
@@ -5,8 +5,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ExtSecretsHandler serves extension secret management endpoints.
diff --git a/server/handlers/extension_test.go b/server/handlers/extension_test.go
index 151e871..c62a4b3 100644
--- a/server/handlers/extension_test.go
+++ b/server/handlers/extension_test.go
@@ -11,13 +11,13 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	authpkg "git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/middleware"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
-	sqlite "git.gobha.me/xcaliber/chat-switchboard/store/sqlite"
+	authpkg "chat-switchboard/auth"
+	"chat-switchboard/config"
+	"chat-switchboard/database"
+	"chat-switchboard/middleware"
+	"chat-switchboard/store"
+	postgres "chat-switchboard/store/postgres"
+	sqlite "chat-switchboard/store/sqlite"
 )
 
 // ── Extension Test Harness ──────────────────
diff --git a/server/handlers/extensions.go b/server/handlers/extensions.go
index 61be842..a863488 100644
--- a/server/handlers/extensions.go
+++ b/server/handlers/extensions.go
@@ -7,9 +7,9 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/database"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ExtensionHandler serves extension management endpoints.
diff --git a/server/handlers/files.go b/server/handlers/files.go
index 9578854..89ae753 100644
--- a/server/handlers/files.go
+++ b/server/handlers/files.go
@@ -12,10 +12,10 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/extraction"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/storage"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/extraction"
+	"chat-switchboard/models"
+	"chat-switchboard/storage"
+	"chat-switchboard/store"
 )
 
 // ── Default Limits ─────────────────────────
diff --git a/server/handlers/folders.go b/server/handlers/folders.go
index 85a1f81..5b19850 100644
--- a/server/handlers/folders.go
+++ b/server/handlers/folders.go
@@ -10,8 +10,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type FolderHandler struct {
diff --git a/server/handlers/git.go b/server/handlers/git.go
index 6b91fc1..9f34339 100644
--- a/server/handlers/git.go
+++ b/server/handlers/git.go
@@ -11,10 +11,10 @@ import (
 
 	"golang.org/x/crypto/ssh"
 
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/workspace"
+	"chat-switchboard/crypto"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
+	"chat-switchboard/workspace"
 
 	"github.com/gin-gonic/gin"
 )
diff --git a/server/handlers/git_credentials_test.go b/server/handlers/git_credentials_test.go
index 33ef820..dcdde60 100644
--- a/server/handlers/git_credentials_test.go
+++ b/server/handlers/git_credentials_test.go
@@ -7,13 +7,13 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/middleware"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
-	sqlite "git.gobha.me/xcaliber/chat-switchboard/store/sqlite"
+	"chat-switchboard/config"
+	"chat-switchboard/crypto"
+	"chat-switchboard/database"
+	"chat-switchboard/middleware"
+	"chat-switchboard/store"
+	postgres "chat-switchboard/store/postgres"
+	sqlite "chat-switchboard/store/sqlite"
 )
 
 // ── Git Credentials Test Harness ──────────
diff --git a/server/handlers/groups.go b/server/handlers/groups.go
index a651900..344597c 100644
--- a/server/handlers/groups.go
+++ b/server/handlers/groups.go
@@ -7,11 +7,11 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/notifications"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/auth"
+	"chat-switchboard/database"
+	"chat-switchboard/models"
+	"chat-switchboard/notifications"
+	"chat-switchboard/store"
 )
 
 // ── Request types ───────────────────────────
diff --git a/server/handlers/health_admin.go b/server/handlers/health_admin.go
index bbf3dbe..b7b371c 100644
--- a/server/handlers/health_admin.go
+++ b/server/handlers/health_admin.go
@@ -6,11 +6,11 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	capspkg "git.gobha.me/xcaliber/chat-switchboard/capabilities"
-	"git.gobha.me/xcaliber/chat-switchboard/health"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	capspkg "chat-switchboard/capabilities"
+	"chat-switchboard/health"
+	"chat-switchboard/models"
+	"chat-switchboard/providers"
+	"chat-switchboard/store"
 )
 
 // ── Health Admin Handler ────────────────────
diff --git a/server/handlers/integration_test.go b/server/handlers/integration_test.go
index eecda50..573445a 100644
--- a/server/handlers/integration_test.go
+++ b/server/handlers/integration_test.go
@@ -15,16 +15,16 @@ import (
 	"github.com/golang-jwt/jwt/v5"
 	"github.com/google/uuid"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	authpkg "git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/middleware"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/roles"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
-	sqlite "git.gobha.me/xcaliber/chat-switchboard/store/sqlite"
-	"git.gobha.me/xcaliber/chat-switchboard/treepath"
+	"chat-switchboard/config"
+	authpkg "chat-switchboard/auth"
+	"chat-switchboard/database"
+	"chat-switchboard/middleware"
+	"chat-switchboard/models"
+	"chat-switchboard/roles"
+	"chat-switchboard/store"
+	postgres "chat-switchboard/store/postgres"
+	sqlite "chat-switchboard/store/sqlite"
+	"chat-switchboard/treepath"
 )
 
 // ── Test Harness ────────────────────────────
diff --git a/server/handlers/knowledge_bases.go b/server/handlers/knowledge_bases.go
index 4f33f8c..45a9bf8 100644
--- a/server/handlers/knowledge_bases.go
+++ b/server/handlers/knowledge_bases.go
@@ -11,10 +11,10 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/knowledge"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/storage"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/knowledge"
+	"chat-switchboard/models"
+	"chat-switchboard/storage"
+	"chat-switchboard/store"
 )
 
 // ── Limits ───────────────────────────────────
diff --git a/server/handlers/live_compaction_test.go b/server/handlers/live_compaction_test.go
index c874bf3..93a3552 100644
--- a/server/handlers/live_compaction_test.go
+++ b/server/handlers/live_compaction_test.go
@@ -7,14 +7,14 @@ import (
 	"strings"
 	"testing"
 
-	"git.gobha.me/xcaliber/chat-switchboard/compaction"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/roles"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
-	sqlite "git.gobha.me/xcaliber/chat-switchboard/store/sqlite"
-	"git.gobha.me/xcaliber/chat-switchboard/treepath"
+	"chat-switchboard/compaction"
+	"chat-switchboard/database"
+	"chat-switchboard/models"
+	"chat-switchboard/roles"
+	"chat-switchboard/store"
+	postgres "chat-switchboard/store/postgres"
+	sqlite "chat-switchboard/store/sqlite"
+	"chat-switchboard/treepath"
 )
 
 // ═══════════════════════════════════════════
diff --git a/server/handlers/live_provider_test.go b/server/handlers/live_provider_test.go
index 8a209a3..c02bd8e 100644
--- a/server/handlers/live_provider_test.go
+++ b/server/handlers/live_provider_test.go
@@ -10,8 +10,8 @@ import (
 	"testing"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
+	"chat-switchboard/database"
+	"chat-switchboard/providers"
 )
 
 // ═══════════════════════════════════════════
diff --git a/server/handlers/memory.go b/server/handlers/memory.go
index a675631..1b667d4 100644
--- a/server/handlers/memory.go
+++ b/server/handlers/memory.go
@@ -5,9 +5,9 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/memory"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/memory"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // MemoryHandler provides REST endpoints for memory management.
diff --git a/server/handlers/memory_inject.go b/server/handlers/memory_inject.go
index 6fb430f..a197b3c 100644
--- a/server/handlers/memory_inject.go
+++ b/server/handlers/memory_inject.go
@@ -6,9 +6,9 @@ import (
 	"log"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/knowledge"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/knowledge"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // maxMemoryChars is the approximate character budget for injected memories.
diff --git a/server/handlers/memory_test.go b/server/handlers/memory_test.go
index f70470b..1f3f2b1 100644
--- a/server/handlers/memory_test.go
+++ b/server/handlers/memory_test.go
@@ -4,8 +4,8 @@ import (
 	"net/http"
 	"testing"
 
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/database"
+	"chat-switchboard/models"
 )
 
 // seedMemory inserts a memory directly into the DB for testing.
diff --git a/server/handlers/messages.go b/server/handlers/messages.go
index 26c6e07..923adc9 100644
--- a/server/handlers/messages.go
+++ b/server/handlers/messages.go
@@ -10,15 +10,15 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	capspkg "git.gobha.me/xcaliber/chat-switchboard/capabilities"
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/storage"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/tools"
-	"git.gobha.me/xcaliber/chat-switchboard/treepath"
+	capspkg "chat-switchboard/capabilities"
+	"chat-switchboard/crypto"
+	"chat-switchboard/events"
+	"chat-switchboard/models"
+	"chat-switchboard/providers"
+	"chat-switchboard/storage"
+	"chat-switchboard/store"
+	"chat-switchboard/tools"
+	"chat-switchboard/treepath"
 )
 
 // ── Request / Response types ────────────────
diff --git a/server/handlers/model_prefs.go b/server/handlers/model_prefs.go
index a26c6cc..7d55d5d 100644
--- a/server/handlers/model_prefs.go
+++ b/server/handlers/model_prefs.go
@@ -5,8 +5,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ModelPrefsHandler handles user model preference endpoints.
diff --git a/server/handlers/model_prefs_test.go b/server/handlers/model_prefs_test.go
index db42251..19d10c6 100644
--- a/server/handlers/model_prefs_test.go
+++ b/server/handlers/model_prefs_test.go
@@ -8,12 +8,12 @@ import (
 	"github.com/gin-gonic/gin"
 	"github.com/google/uuid"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/middleware"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
-	sqlite "git.gobha.me/xcaliber/chat-switchboard/store/sqlite"
+	"chat-switchboard/config"
+	"chat-switchboard/database"
+	"chat-switchboard/middleware"
+	"chat-switchboard/store"
+	postgres "chat-switchboard/store/postgres"
+	sqlite "chat-switchboard/store/sqlite"
 )
 
 // ── Model Prefs Test Harness ──────────────
diff --git a/server/handlers/model_sync.go b/server/handlers/model_sync.go
index d7b355c..d990a23 100644
--- a/server/handlers/model_sync.go
+++ b/server/handlers/model_sync.go
@@ -10,9 +10,9 @@ import (
 	"strconv"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/providers"
+	"chat-switchboard/store"
 )
 
 // providerSyncTimeout is the maximum time allowed for an outbound provider
diff --git a/server/handlers/notes.go b/server/handlers/notes.go
index 5b8211c..747fe69 100644
--- a/server/handlers/notes.go
+++ b/server/handlers/notes.go
@@ -7,9 +7,9 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/notelinks"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/notelinks"
+	"chat-switchboard/store"
 )
 
 // ── Request / Response Types ────────────────
diff --git a/server/handlers/notification_test.go b/server/handlers/notification_test.go
index 515c8e9..fc12859 100644
--- a/server/handlers/notification_test.go
+++ b/server/handlers/notification_test.go
@@ -8,14 +8,14 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/middleware"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/notifications"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
-	sqlite "git.gobha.me/xcaliber/chat-switchboard/store/sqlite"
+	"chat-switchboard/config"
+	"chat-switchboard/database"
+	"chat-switchboard/middleware"
+	"chat-switchboard/models"
+	"chat-switchboard/notifications"
+	"chat-switchboard/store"
+	postgres "chat-switchboard/store/postgres"
+	sqlite "chat-switchboard/store/sqlite"
 )
 
 // ── Notification Test Harness ──────────────
diff --git a/server/handlers/notifications.go b/server/handlers/notifications.go
index de4dd8a..9ca7ca7 100644
--- a/server/handlers/notifications.go
+++ b/server/handlers/notifications.go
@@ -10,10 +10,10 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/notifications"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/events"
+	"chat-switchboard/models"
+	"chat-switchboard/notifications"
+	"chat-switchboard/store"
 )
 
 // ── Handler ─────────────────────────────────
@@ -111,7 +111,7 @@ func (h *NotificationHandler) MarkRead(c *gin.Context) {
 	// Sync badge across tabs
 	if h.hub != nil {
 		payload, _ := json.Marshal(map[string]string{"id": id})
-		h.hub.SendToUser(userID, events.Event{
+		h.hub.PublishToUser(userID, events.Event{
 			Label:   "notification.read",
 			Payload: payload,
 			Ts:      time.Now().UnixMilli(),
@@ -138,7 +138,7 @@ func (h *NotificationHandler) MarkAllRead(c *gin.Context) {
 	// Sync badge across tabs
 	if h.hub != nil {
 		payload, _ := json.Marshal(map[string]string{"action": "mark_all_read"})
-		h.hub.SendToUser(userID, events.Event{
+		h.hub.PublishToUser(userID, events.Event{
 			Label:   "notification.read",
 			Payload: payload,
 			Ts:      time.Now().UnixMilli(),
@@ -341,7 +341,7 @@ func (h *NotificationHandler) Broadcast(c *gin.Context) {
 			"level":   level,
 		})
 		for _, uid := range userIDs {
-			h.hub.SendToUser(uid, events.Event{
+			h.hub.PublishToUser(uid, events.Event{
 				Label:   "system.broadcast",
 				Payload: payload,
 				Ts:      time.Now().UnixMilli(),
diff --git a/server/handlers/package_export.go b/server/handlers/package_export.go
index fe963ef..5e80267 100644
--- a/server/handlers/package_export.go
+++ b/server/handlers/package_export.go
@@ -18,7 +18,7 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // PackageExportHandler handles package export operations.
diff --git a/server/handlers/package_migrations.go b/server/handlers/package_migrations.go
index 1b10212..9c2878e 100644
--- a/server/handlers/package_migrations.go
+++ b/server/handlers/package_migrations.go
@@ -28,8 +28,8 @@ import (
 
 	"go.starlark.net/starlark"
 
-	"git.gobha.me/xcaliber/chat-switchboard/sandbox"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/sandbox"
+	"chat-switchboard/store"
 )
 
 // ParseSchemaVersion extracts the "schema_version" integer from a manifest.
diff --git a/server/handlers/package_registry.go b/server/handlers/package_registry.go
index e7b3abe..e80cdf6 100644
--- a/server/handlers/package_registry.go
+++ b/server/handlers/package_registry.go
@@ -29,7 +29,7 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // RegistryEntry represents a single package in the registry.
diff --git a/server/handlers/packages.go b/server/handlers/packages.go
index e9eb3e7..08dbb4a 100644
--- a/server/handlers/packages.go
+++ b/server/handlers/packages.go
@@ -14,9 +14,9 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/sandbox"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/database"
+	"chat-switchboard/sandbox"
+	"chat-switchboard/store"
 )
 
 // validPackageID matches lowercase alphanumeric slugs with optional hyphens.
diff --git a/server/handlers/participants.go b/server/handlers/participants.go
index 3dd07a7..062ab0d 100644
--- a/server/handlers/participants.go
+++ b/server/handlers/participants.go
@@ -6,8 +6,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── Channel Participants Handler ──────────────
diff --git a/server/handlers/persona_groups.go b/server/handlers/persona_groups.go
index a02bce8..42311d5 100644
--- a/server/handlers/persona_groups.go
+++ b/server/handlers/persona_groups.go
@@ -10,8 +10,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type PersonaGroupHandler struct {
diff --git a/server/handlers/personas.go b/server/handlers/personas.go
index 3020e41..72a66bf 100644
--- a/server/handlers/personas.go
+++ b/server/handlers/personas.go
@@ -6,8 +6,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // PersonaHandler handles persona endpoints.
diff --git a/server/handlers/presence.go b/server/handlers/presence.go
index 994538c..eb12ce9 100644
--- a/server/handlers/presence.go
+++ b/server/handlers/presence.go
@@ -15,7 +15,7 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 const presenceOnlineThreshold = 90 * time.Second
diff --git a/server/handlers/profile_test.go b/server/handlers/profile_test.go
index a7822cf..e4b8cba 100644
--- a/server/handlers/profile_test.go
+++ b/server/handlers/profile_test.go
@@ -8,12 +8,12 @@ import (
 	"github.com/gin-gonic/gin"
 	"golang.org/x/crypto/bcrypt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/middleware"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
-	sqlite "git.gobha.me/xcaliber/chat-switchboard/store/sqlite"
+	"chat-switchboard/config"
+	"chat-switchboard/database"
+	"chat-switchboard/middleware"
+	"chat-switchboard/store"
+	postgres "chat-switchboard/store/postgres"
+	sqlite "chat-switchboard/store/sqlite"
 )
 
 // ── Profile Test Harness ──────────────────
diff --git a/server/handlers/projects.go b/server/handlers/projects.go
index 2261878..0ac04eb 100644
--- a/server/handlers/projects.go
+++ b/server/handlers/projects.go
@@ -6,8 +6,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── Request / Response Types ────────────────
diff --git a/server/handlers/projects_test.go b/server/handlers/projects_test.go
index 6789fc8..8e01cc6 100644
--- a/server/handlers/projects_test.go
+++ b/server/handlers/projects_test.go
@@ -8,13 +8,13 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/middleware"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
-	sqlite "git.gobha.me/xcaliber/chat-switchboard/store/sqlite"
+	"chat-switchboard/config"
+	"chat-switchboard/database"
+	"chat-switchboard/middleware"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
+	postgres "chat-switchboard/store/postgres"
+	sqlite "chat-switchboard/store/sqlite"
 )
 
 // ── Project Test Harness ──────────────────
diff --git a/server/handlers/provider_resolver_adapter.go b/server/handlers/provider_resolver_adapter.go
index 3dff26f..55dabc3 100644
--- a/server/handlers/provider_resolver_adapter.go
+++ b/server/handlers/provider_resolver_adapter.go
@@ -10,10 +10,10 @@ import (
 	"context"
 	"fmt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/sandbox"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/crypto"
+	"chat-switchboard/providers"
+	"chat-switchboard/sandbox"
+	"chat-switchboard/store"
 )
 
 // ProviderResolverAdapter implements sandbox.ProviderResolver using
diff --git a/server/handlers/resolve.go b/server/handlers/resolve.go
index e58727b..4a985eb 100644
--- a/server/handlers/resolve.go
+++ b/server/handlers/resolve.go
@@ -17,10 +17,10 @@ import (
 	"fmt"
 	"log"
 
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/tools"
+	"chat-switchboard/crypto"
+	"chat-switchboard/providers"
+	"chat-switchboard/store"
+	"chat-switchboard/tools"
 )
 
 // ── Provider Resolution ────────────────────────
diff --git a/server/handlers/roles.go b/server/handlers/roles.go
index 37df14e..3e06a98 100644
--- a/server/handlers/roles.go
+++ b/server/handlers/roles.go
@@ -5,10 +5,10 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/roles"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/providers"
+	"chat-switchboard/roles"
+	"chat-switchboard/store"
 )
 
 // RolesHandler manages model role configuration.
diff --git a/server/handlers/route_test.go b/server/handlers/route_test.go
index 77cb5c9..576881f 100644
--- a/server/handlers/route_test.go
+++ b/server/handlers/route_test.go
@@ -7,14 +7,14 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	authpkg "git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/middleware"
-	"git.gobha.me/xcaliber/chat-switchboard/pages"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
-	sqlite "git.gobha.me/xcaliber/chat-switchboard/store/sqlite"
+	"chat-switchboard/config"
+	authpkg "chat-switchboard/auth"
+	"chat-switchboard/database"
+	"chat-switchboard/middleware"
+	"chat-switchboard/pages"
+	"chat-switchboard/store"
+	postgres "chat-switchboard/store/postgres"
+	sqlite "chat-switchboard/store/sqlite"
 )
 
 // TestRouteRegistration verifies that ALL production routes can be
diff --git a/server/handlers/routing_admin.go b/server/handlers/routing_admin.go
index 86c08d5..5fb3aec 100644
--- a/server/handlers/routing_admin.go
+++ b/server/handlers/routing_admin.go
@@ -6,10 +6,10 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/health"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/routing"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/health"
+	"chat-switchboard/models"
+	"chat-switchboard/routing"
+	"chat-switchboard/store"
 )
 
 // ── Routing Admin Handler ───────────────────
diff --git a/server/handlers/safe_json.go b/server/handlers/safe_json.go
index da935e6..ff2cd9b 100644
--- a/server/handlers/safe_json.go
+++ b/server/handlers/safe_json.go
@@ -8,7 +8,7 @@ import (
 	"github.com/gin-gonic/gin"
 	"github.com/lib/pq"
 
-	"git.gobha.me/xcaliber/chat-switchboard/database"
+	"chat-switchboard/database"
 )
 
 // ── SafeJSON ────────────────────────────────
diff --git a/server/handlers/seed_packages.go b/server/handlers/seed_packages.go
index 11110c8..e5f3a21 100644
--- a/server/handlers/seed_packages.go
+++ b/server/handlers/seed_packages.go
@@ -7,7 +7,7 @@ import (
 	"os"
 	"path/filepath"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // builtinManifest is the on-disk manifest.json shape.
diff --git a/server/handlers/seed_providers.go b/server/handlers/seed_providers.go
index 2a5093d..c2359a6 100644
--- a/server/handlers/seed_providers.go
+++ b/server/handlers/seed_providers.go
@@ -5,10 +5,10 @@ import (
 	"log"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/config"
+	"chat-switchboard/crypto"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // Known provider default endpoints for seeding.
diff --git a/server/handlers/settings.go b/server/handlers/settings.go
index 64a1164..1d4dfb7 100644
--- a/server/handlers/settings.go
+++ b/server/handlers/settings.go
@@ -15,8 +15,8 @@ import (
 	"github.com/gin-gonic/gin"
 	"golang.org/x/crypto/bcrypt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/crypto"
+	"chat-switchboard/store"
 )
 
 // ── Request Types ───────────────────────────
diff --git a/server/handlers/storage.go b/server/handlers/storage.go
index 2b156b4..60d9e59 100644
--- a/server/handlers/storage.go
+++ b/server/handlers/storage.go
@@ -5,7 +5,7 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/storage"
+	"chat-switchboard/storage"
 )
 
 // storageConfigured is a package-level flag set during init.
diff --git a/server/handlers/stream_loop.go b/server/handlers/stream_loop.go
index 5b4448c..5c2a617 100644
--- a/server/handlers/stream_loop.go
+++ b/server/handlers/stream_loop.go
@@ -11,11 +11,11 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/sandbox"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/tools"
+	"chat-switchboard/events"
+	"chat-switchboard/providers"
+	"chat-switchboard/sandbox"
+	"chat-switchboard/store"
+	"chat-switchboard/tools"
 )
 
 // recordHealthFn records provider health from standalone streaming functions.
@@ -141,7 +141,7 @@ func executeBrowserTool(hub *events.Hub, userID string, call tools.ToolCall) too
 		"arguments": json.RawMessage(call.Arguments),
 	})
 
-	hub.SendToUser(userID, events.Event{
+	hub.PublishToUser(userID, events.Event{
 		Label:   "tool.call." + callID,
 		Payload: payload,
 		Ts:      time.Now().UnixMilli(),
diff --git a/server/handlers/summarize.go b/server/handlers/summarize.go
index 372ea09..7cb689c 100644
--- a/server/handlers/summarize.go
+++ b/server/handlers/summarize.go
@@ -9,9 +9,9 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/compaction"
-	"git.gobha.me/xcaliber/chat-switchboard/roles"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/compaction"
+	"chat-switchboard/roles"
+	"chat-switchboard/store"
 )
 
 // SummarizeHandler handles manual conversation summarization via HTTP.
diff --git a/server/handlers/task_test.go b/server/handlers/task_test.go
index ebf7a12..e234bc4 100644
--- a/server/handlers/task_test.go
+++ b/server/handlers/task_test.go
@@ -7,7 +7,7 @@ import (
 	"strings"
 	"testing"
 
-	"git.gobha.me/xcaliber/chat-switchboard/database"
+	"chat-switchboard/database"
 )
 
 // ═══════════════════════════════════════════════
diff --git a/server/handlers/tasks.go b/server/handlers/tasks.go
index 7fe5c89..e97bdca 100644
--- a/server/handlers/tasks.go
+++ b/server/handlers/tasks.go
@@ -7,12 +7,12 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/middleware"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/taskutil"
-	"git.gobha.me/xcaliber/chat-switchboard/webhook"
+	"chat-switchboard/auth"
+	"chat-switchboard/middleware"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
+	"chat-switchboard/taskutil"
+	"chat-switchboard/webhook"
 )
 
 // TaskHandler manages task CRUD and manual execution.
diff --git a/server/handlers/team_providers.go b/server/handlers/team_providers.go
index c5f29ac..d00ffc4 100644
--- a/server/handlers/team_providers.go
+++ b/server/handlers/team_providers.go
@@ -8,10 +8,10 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	capspkg "git.gobha.me/xcaliber/chat-switchboard/capabilities"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	capspkg "chat-switchboard/capabilities"
+	"chat-switchboard/models"
+	"chat-switchboard/providers"
+	"chat-switchboard/store"
 )
 
 // ── Team Provider Handlers ──────────────────
diff --git a/server/handlers/teams.go b/server/handlers/teams.go
index b0c7178..a29981b 100644
--- a/server/handlers/teams.go
+++ b/server/handlers/teams.go
@@ -11,11 +11,11 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/crypto"
+	"chat-switchboard/database"
+	"chat-switchboard/models"
+	"chat-switchboard/providers"
+	"chat-switchboard/store"
 )
 
 // ── Request types ───────────────────────────
@@ -105,7 +105,6 @@ func (h *TeamHandler) CreateTeam(c *gin.Context) {
 
 	team := &models.Team{
 		Name:        req.Name,
-		Slug:        slugify(req.Name),
 		Description: req.Description,
 		CreatedBy:   adminID,
 		IsActive:    true,
@@ -119,7 +118,7 @@ func (h *TeamHandler) CreateTeam(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusCreated, gin.H{"id": team.ID, "name": team.Name, "slug": team.Slug})
+	c.JSON(http.StatusCreated, gin.H{"id": team.ID, "name": team.Name})
 	AuditLog(h.stores.Audit, c, "team.create", "team", team.ID, map[string]interface{}{"name": team.Name})
 }
 
@@ -156,7 +155,6 @@ func (h *TeamHandler) UpdateTeam(c *gin.Context) {
 	fields := map[string]interface{}{}
 	if req.Name != nil {
 		fields["name"] = *req.Name
-		fields["slug"] = slugify(*req.Name)
 	}
 	if req.Description != nil {
 		fields["description"] = *req.Description
diff --git a/server/handlers/testmain_test.go b/server/handlers/testmain_test.go
index e65fc06..9609b74 100644
--- a/server/handlers/testmain_test.go
+++ b/server/handlers/testmain_test.go
@@ -6,8 +6,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
+	"chat-switchboard/database"
+	"chat-switchboard/providers"
 
 	_ "modernc.org/sqlite" // register sqlite driver for DB_DRIVER=sqlite
 )
diff --git a/server/handlers/title.go b/server/handlers/title.go
index c775e12..d1f837c 100644
--- a/server/handlers/title.go
+++ b/server/handlers/title.go
@@ -9,9 +9,9 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/roles"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/providers"
+	"chat-switchboard/roles"
+	"chat-switchboard/store"
 )
 
 // TitleHandler generates chat titles using the utility role.
diff --git a/server/handlers/tool_loop.go b/server/handlers/tool_loop.go
index 29b7fc7..05f65db 100644
--- a/server/handlers/tool_loop.go
+++ b/server/handlers/tool_loop.go
@@ -27,11 +27,11 @@ import (
 	"github.com/gin-gonic/gin"
 	"go.starlark.net/starlark"
 
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/sandbox"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/tools"
+	"chat-switchboard/events"
+	"chat-switchboard/providers"
+	"chat-switchboard/sandbox"
+	"chat-switchboard/store"
+	"chat-switchboard/tools"
 )
 
 // ── Types ──────────────────────────────────────
@@ -564,7 +564,7 @@ func emitWorkspaceEvent(lcfg LoopConfig, call tools.ToolCall, result tools.ToolR
 		Path string `json:"path"`
 	}
 	if json.Unmarshal([]byte(call.Arguments), &toolArgs) == nil && toolArgs.Path != "" {
-		lcfg.Hub.SendToUser(lcfg.ExecCtx.UserID, events.Event{
+		lcfg.Hub.PublishToUser(lcfg.ExecCtx.UserID, events.Event{
 			Label: "workspace.file.changed",
 			Payload: events.MustJSON(map[string]string{
 				"workspace_id": lcfg.ExecCtx.WorkspaceID,
diff --git a/server/handlers/tree.go b/server/handlers/tree.go
index 5656ed1..7a33efb 100644
--- a/server/handlers/tree.go
+++ b/server/handlers/tree.go
@@ -8,7 +8,7 @@ package handlers
 // New code should import treepath directly.
 
 import (
-	"git.gobha.me/xcaliber/chat-switchboard/treepath"
+	"chat-switchboard/treepath"
 )
 
 // ── Type Aliases ────────────────────────────
diff --git a/server/handlers/usage.go b/server/handlers/usage.go
index 94be647..7d63f92 100644
--- a/server/handlers/usage.go
+++ b/server/handlers/usage.go
@@ -6,8 +6,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // UsageHandler manages usage tracking and pricing endpoints.
diff --git a/server/handlers/user_packages.go b/server/handlers/user_packages.go
index 2523cba..fa91194 100644
--- a/server/handlers/user_packages.go
+++ b/server/handlers/user_packages.go
@@ -22,7 +22,7 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // allowedNonGlobalPermissions is the set of permissions that non-admin
diff --git a/server/handlers/workflow_assignments.go b/server/handlers/workflow_assignments.go
index ca971e3..8ac0a58 100644
--- a/server/handlers/workflow_assignments.go
+++ b/server/handlers/workflow_assignments.go
@@ -11,9 +11,9 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/notifications"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/events"
+	"chat-switchboard/notifications"
+	"chat-switchboard/store"
 )
 
 // ── Workflow Assignment Handler ─────────────
@@ -93,7 +93,7 @@ func (h *WorkflowAssignmentHandler) Claim(c *gin.Context) {
 		}
 		pids, _ := h.stores.Channels.ListUserParticipantIDs(c.Request.Context(), channelID, "")
 		for _, uid := range pids {
-			h.hub.SendToUser(uid, evt)
+			h.hub.PublishToUser(uid, evt)
 		}
 	}
 
diff --git a/server/handlers/workflow_entry.go b/server/handlers/workflow_entry.go
index 54df211..c8fff24 100644
--- a/server/handlers/workflow_entry.go
+++ b/server/handlers/workflow_entry.go
@@ -1,15 +1,14 @@
 package handlers
 
 import (
-	"context"
 	"fmt"
 	"log"
 	"net/http"
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── Workflow Entry Handler ──────────────────
@@ -24,24 +23,6 @@ func NewWorkflowEntryHandler(stores store.Stores) *WorkflowEntryHandler {
 	return &WorkflowEntryHandler{stores: stores}
 }
 
-// resolveTeamScope converts a URL scope parameter to a team ID.
-// Accepts "global" (returns nil), a UUID (passed through), or a team slug (looked up).
-func resolveTeamScope(ctx context.Context, teams store.TeamStore, scope string) *string {
-	if scope == "global" {
-		return nil
-	}
-	// UUID format: 36 chars with dashes at 8,13,18,23
-	if len(scope) == 36 && scope[8] == '-' && scope[13] == '-' {
-		return &scope
-	}
-	// Try team slug lookup
-	t, err := teams.GetBySlug(ctx, scope)
-	if err == nil && t != nil {
-		return &t.ID
-	}
-	return &scope // fall through — will 404 downstream
-}
-
 // StartVisitor creates an anonymous session + workflow instance for a visitor.
 // POST /api/v1/workflow-entry/:scope/:slug
 func (h *WorkflowEntryHandler) StartVisitor(c *gin.Context) {
@@ -49,7 +30,10 @@ func (h *WorkflowEntryHandler) StartVisitor(c *gin.Context) {
 	scope := c.Param("scope")
 	slug := c.Param("slug")
 
-	teamID := resolveTeamScope(ctx, h.stores.Teams, scope)
+	var teamID *string
+	if scope != "global" {
+		teamID = &scope
+	}
 
 	wf, err := h.stores.Workflows.GetBySlug(ctx, teamID, slug)
 	if err != nil || wf == nil {
diff --git a/server/handlers/workflow_forms.go b/server/handlers/workflow_forms.go
index 32e5384..59077a5 100644
--- a/server/handlers/workflow_forms.go
+++ b/server/handlers/workflow_forms.go
@@ -8,11 +8,11 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/sandbox"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/tools"
+	"chat-switchboard/events"
+	"chat-switchboard/models"
+	"chat-switchboard/sandbox"
+	"chat-switchboard/store"
+	"chat-switchboard/tools"
 
 	"go.starlark.net/starlark"
 )
@@ -241,7 +241,7 @@ func (h *WorkflowFormHandler) emitFormEvent(channelID, label string, stage int)
 	}
 	evt := events.Event{Label: label, Payload: payload}
 	for _, uid := range pids {
-		h.hub.SendToUser(uid, evt)
+		h.hub.PublishToUser(uid, evt)
 	}
 }
 
diff --git a/server/handlers/workflow_instance_test.go b/server/handlers/workflow_instance_test.go
index 0df9eab..e3fba9f 100644
--- a/server/handlers/workflow_instance_test.go
+++ b/server/handlers/workflow_instance_test.go
@@ -8,13 +8,13 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	authpkg "git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/middleware"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
-	sqlite "git.gobha.me/xcaliber/chat-switchboard/store/sqlite"
+	"chat-switchboard/config"
+	authpkg "chat-switchboard/auth"
+	"chat-switchboard/database"
+	"chat-switchboard/middleware"
+	"chat-switchboard/store"
+	postgres "chat-switchboard/store/postgres"
+	sqlite "chat-switchboard/store/sqlite"
 )
 
 // ═══════════════════════════════════════════════════════════
diff --git a/server/handlers/workflow_instances.go b/server/handlers/workflow_instances.go
index 1fa8578..dba7295 100644
--- a/server/handlers/workflow_instances.go
+++ b/server/handlers/workflow_instances.go
@@ -10,11 +10,11 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/notifications"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/tools"
+	"chat-switchboard/events"
+	"chat-switchboard/models"
+	"chat-switchboard/notifications"
+	"chat-switchboard/store"
+	"chat-switchboard/tools"
 )
 
 // ── Workflow Instance Handler ───────────────
@@ -298,7 +298,7 @@ func (h *WorkflowInstanceHandler) readWorkflowState(ctx context.Context, channel
 }
 
 // emitWorkflowEvent pushes a workflow event to all user participants in the channel.
-// Uses SendToUser (not room-scoped Bus.Publish) because room subscriptions are
+// Uses PublishToUser (not room-scoped Bus.Publish) because room subscriptions are
 // not yet wired on the client side. See websocket.md § Room Model.
 func (h *WorkflowInstanceHandler) emitWorkflowEvent(label, channelID string, data map[string]any) {
 	if h.hub == nil {
@@ -318,7 +318,7 @@ func (h *WorkflowInstanceHandler) emitWorkflowEvent(label, channelID string, dat
 		return
 	}
 	for _, uid := range pids {
-		h.hub.SendToUser(uid, evt)
+		h.hub.PublishToUser(uid, evt)
 	}
 }
 
@@ -398,7 +398,7 @@ func (h *WorkflowInstanceHandler) notifyAssignment(ctx context.Context, teamID,
 			"stage_name": stageName, "assigned_to": assignedTo,
 		})
 		for _, m := range members {
-			h.hub.SendToUser(m.UserID, events.Event{
+			h.hub.PublishToUser(m.UserID, events.Event{
 				Label:   "workflow.assigned",
 				Payload: payload,
 				Ts:      time.Now().UnixMilli(),
diff --git a/server/handlers/workflow_packages.go b/server/handlers/workflow_packages.go
index fc2820e..a6fc8d1 100644
--- a/server/handlers/workflow_packages.go
+++ b/server/handlers/workflow_packages.go
@@ -15,8 +15,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // WorkflowPackageHandler handles workflow package export and install.
diff --git a/server/handlers/workflow_team.go b/server/handlers/workflow_team.go
index b824996..e281cfe 100644
--- a/server/handlers/workflow_team.go
+++ b/server/handlers/workflow_team.go
@@ -6,7 +6,7 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // ── Team-Scoped Workflow Wrappers (v0.31.2) ────────────────
diff --git a/server/handlers/workflow_test.go b/server/handlers/workflow_test.go
index 16fde78..7639402 100644
--- a/server/handlers/workflow_test.go
+++ b/server/handlers/workflow_test.go
@@ -7,13 +7,13 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	authpkg "git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/middleware"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
-	sqlite "git.gobha.me/xcaliber/chat-switchboard/store/sqlite"
+	"chat-switchboard/config"
+	authpkg "chat-switchboard/auth"
+	"chat-switchboard/database"
+	"chat-switchboard/middleware"
+	"chat-switchboard/store"
+	postgres "chat-switchboard/store/postgres"
+	sqlite "chat-switchboard/store/sqlite"
 )
 
 // TestWorkflowCRUD exercises the full workflow lifecycle:
diff --git a/server/handlers/workflows.go b/server/handlers/workflows.go
index 3cf61ea..313f593 100644
--- a/server/handlers/workflows.go
+++ b/server/handlers/workflows.go
@@ -10,8 +10,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── Workflow Handler ────────────────────────
@@ -106,10 +106,10 @@ func (h *WorkflowHandler) Create(c *gin.Context) {
 
 	w.CreatedBy = c.GetString("user_id")
 
-	// v0.31.2: Team-scoped workflow creation (set by CreateTeamWorkflow)
-	if forceTeam, ok := c.Get("force_team_id"); ok {
-		teamID := forceTeam.(string)
-		w.TeamID = &teamID
+	// v0.31.2: team-scoped route injects force_team_id via CreateTeamWorkflow
+	if ftid, ok := c.Get("force_team_id"); ok {
+		tid := ftid.(string)
+		w.TeamID = &tid
 	}
 
 	if err := h.stores.Workflows.Create(c.Request.Context(), &w); err != nil {
diff --git a/server/handlers/workspace_test.go b/server/handlers/workspace_test.go
index 7f72cbe..01fa625 100644
--- a/server/handlers/workspace_test.go
+++ b/server/handlers/workspace_test.go
@@ -8,13 +8,13 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/middleware"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
-	sqlite "git.gobha.me/xcaliber/chat-switchboard/store/sqlite"
+	"chat-switchboard/config"
+	"chat-switchboard/database"
+	"chat-switchboard/middleware"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
+	postgres "chat-switchboard/store/postgres"
+	sqlite "chat-switchboard/store/sqlite"
 )
 
 // ── Workspace Test Harness ────────────────
diff --git a/server/handlers/workspaces.go b/server/handlers/workspaces.go
index e6c9c8e..0918066 100644
--- a/server/handlers/workspaces.go
+++ b/server/handlers/workspaces.go
@@ -12,9 +12,9 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/workspace"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
+	"chat-switchboard/workspace"
 )
 
 // ── Request Types ───────────────────────────
diff --git a/server/health/accumulator.go b/server/health/accumulator.go
index 2adcea4..052f178 100644
--- a/server/health/accumulator.go
+++ b/server/health/accumulator.go
@@ -10,7 +10,7 @@ import (
 	"sync"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // ── Thresholds ──────────────────────────────
diff --git a/server/health/accumulator_test.go b/server/health/accumulator_test.go
index a837715..a5be29d 100644
--- a/server/health/accumulator_test.go
+++ b/server/health/accumulator_test.go
@@ -6,7 +6,7 @@ import (
 	"testing"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // ── Mock Store ──────────────────────────────
diff --git a/server/knowledge/embedder.go b/server/knowledge/embedder.go
index 501ab1d..53d6138 100644
--- a/server/knowledge/embedder.go
+++ b/server/knowledge/embedder.go
@@ -5,9 +5,9 @@ import (
 	"fmt"
 	"log"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/roles"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/roles"
+	"chat-switchboard/store"
 )
 
 // ── Configuration ────────────────────────────
diff --git a/server/knowledge/ingest.go b/server/knowledge/ingest.go
index ef715da..d0efa4b 100644
--- a/server/knowledge/ingest.go
+++ b/server/knowledge/ingest.go
@@ -9,10 +9,10 @@ import (
 	"sync"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/notifications"
-	"git.gobha.me/xcaliber/chat-switchboard/storage"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/notifications"
+	"chat-switchboard/storage"
+	"chat-switchboard/store"
 )
 
 // ── Configuration ────────────────────────────
diff --git a/server/main.go b/server/main.go
index d331a1d..87b1186 100644
--- a/server/main.go
+++ b/server/main.go
@@ -13,34 +13,34 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/compaction"
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/extraction"
-	"git.gobha.me/xcaliber/chat-switchboard/filters"
-	"git.gobha.me/xcaliber/chat-switchboard/sandbox"
-	"git.gobha.me/xcaliber/chat-switchboard/handlers"
-	"git.gobha.me/xcaliber/chat-switchboard/health"
-	"git.gobha.me/xcaliber/chat-switchboard/knowledge"
-	"git.gobha.me/xcaliber/chat-switchboard/memory"
-	"git.gobha.me/xcaliber/chat-switchboard/middleware"
-	"git.gobha.me/xcaliber/chat-switchboard/notifications"
-	"git.gobha.me/xcaliber/chat-switchboard/pages"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/roles"
-	"git.gobha.me/xcaliber/chat-switchboard/routing"
-	"git.gobha.me/xcaliber/chat-switchboard/scheduler"
-	"git.gobha.me/xcaliber/chat-switchboard/storage"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	postgres "git.gobha.me/xcaliber/chat-switchboard/store/postgres"
-	sqliteStore "git.gobha.me/xcaliber/chat-switchboard/store/sqlite"
-	"git.gobha.me/xcaliber/chat-switchboard/tools"
-	"git.gobha.me/xcaliber/chat-switchboard/tools/search"
-	"git.gobha.me/xcaliber/chat-switchboard/treepath"
-	"git.gobha.me/xcaliber/chat-switchboard/workspace"
+	"chat-switchboard/auth"
+	"chat-switchboard/compaction"
+	"chat-switchboard/config"
+	"chat-switchboard/crypto"
+	"chat-switchboard/database"
+	"chat-switchboard/events"
+	"chat-switchboard/extraction"
+	"chat-switchboard/filters"
+	"chat-switchboard/sandbox"
+	"chat-switchboard/handlers"
+	"chat-switchboard/health"
+	"chat-switchboard/knowledge"
+	"chat-switchboard/memory"
+	"chat-switchboard/middleware"
+	"chat-switchboard/notifications"
+	"chat-switchboard/pages"
+	"chat-switchboard/providers"
+	"chat-switchboard/roles"
+	"chat-switchboard/routing"
+	"chat-switchboard/scheduler"
+	"chat-switchboard/storage"
+	"chat-switchboard/store"
+	postgres "chat-switchboard/store/postgres"
+	sqliteStore "chat-switchboard/store/sqlite"
+	"chat-switchboard/tools"
+	"chat-switchboard/tools/search"
+	"chat-switchboard/treepath"
+	"chat-switchboard/workspace"
 )
 
 func main() {
@@ -400,9 +400,8 @@ func main() {
 	// ── WebSocket Hub ─────────────────────────
 	hub := events.NewHub(bus, middleware.GetAllowedOrigins(cfg))
 
-	// ── WebSocket Ticket Store (v0.28.8) ─────
-	ticketStore := events.NewTicketStore()
-	defer ticketStore.Stop()
+	// ── WebSocket Ticket Store (v0.32.0: PG-backed for cross-pod) ─────
+	ticketAdapter := &events.TicketValidatorAdapter{Store: stores.Tickets}
 
 	// ── Notification Service (v0.20.0) ───────
 	var notifSvc *notifications.Service
@@ -457,8 +456,30 @@ func main() {
 		})
 	})
 
+	// v0.32.0: Kubernetes probe endpoints
+	// Liveness: process is alive and serving (no dependency checks).
+	base.GET("/healthz/live", func(c *gin.Context) {
+		c.JSON(200, gin.H{"status": "ok"})
+	})
+	// Readiness: process can serve traffic (PG reachable).
+	// Failing readiness pulls the pod from the Service — new requests
+	// route to healthy replicas.
+	base.GET("/healthz/ready", func(c *gin.Context) {
+		if database.DB == nil {
+			c.JSON(503, gin.H{"error": "database not initialized"})
+			return
+		}
+		ctx, cancel := context.WithTimeout(c.Request.Context(), 2*time.Second)
+		defer cancel()
+		if err := database.DB.PingContext(ctx); err != nil {
+			c.JSON(503, gin.H{"error": "database unavailable"})
+			return
+		}
+		c.JSON(200, gin.H{"status": "ok"})
+	})
+
 	// WebSocket endpoint
-	base.GET("/ws", middleware.WsAuth(cfg, stores.Users, userCache, ticketStore), hub.HandleWebSocket)
+	base.GET("/ws", middleware.WsAuth(cfg, stores.Users, userCache, ticketAdapter), hub.HandleWebSocket)
 
 	// ── Auth routes (rate limited) ──────────────
 	authMode, err := auth.ParseMode(cfg.AuthMode)
@@ -500,7 +521,7 @@ func main() {
 	log.Printf("  🔑 Auth mode: %s", authMode)
 
 	authH := handlers.NewAuthHandler(cfg, stores, uekCache, authProvider)
-	authLimiter := middleware.NewRateLimiter(5, 5)
+	authLimiter := middleware.NewRateLimiter(stores.RateLimits, 5, 8)
 
 	api := base.Group("/api/v1")
 	{
@@ -549,7 +570,7 @@ func main() {
 			// Client fetches this, then connects with ?ticket=<opaque>.
 			protected.POST("/ws/ticket", func(c *gin.Context) {
 				userID := c.GetString("user_id")
-				ticket, err := ticketStore.Issue(userID)
+				ticket, err := stores.Tickets.Issue(c.Request.Context(), userID)
 				if err != nil {
 					c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to issue ticket"})
 					return
@@ -596,7 +617,7 @@ func main() {
 						Ts:      time.Now().UnixMilli(),
 					}
 					for _, pid := range pids {
-						hub.SendToUser(pid, evt)
+						hub.PublishToUser(pid, evt)
 					}
 				}
 				c.JSON(200, gin.H{"ok": true})
@@ -983,6 +1004,20 @@ func main() {
 				teamAssignH := handlers.NewWorkflowAssignmentHandler(stores, hub)
 				teamScoped.GET("/assignments", teamAssignH.ListForTeam)
 
+				// Team workflows — self-service (v0.31.2)
+				teamWfH := handlers.NewWorkflowHandler(stores)
+				teamScoped.GET("/workflows", teamWfH.ListTeamWorkflows)
+				teamScoped.POST("/workflows", teamWfH.CreateTeamWorkflow)
+				teamScoped.GET("/workflows/:id", teamWfH.GetTeamWorkflow)
+				teamScoped.PATCH("/workflows/:id", teamWfH.UpdateTeamWorkflow)
+				teamScoped.DELETE("/workflows/:id", teamWfH.DeleteTeamWorkflow)
+				teamScoped.GET("/workflows/:id/stages", teamWfH.ListTeamWorkflowStages)
+				teamScoped.POST("/workflows/:id/stages", teamWfH.CreateTeamWorkflowStage)
+				teamScoped.PUT("/workflows/:id/stages/:sid", teamWfH.UpdateTeamWorkflowStage)
+				teamScoped.DELETE("/workflows/:id/stages/:sid", teamWfH.DeleteTeamWorkflowStage)
+				teamScoped.PATCH("/workflows/:id/stages/reorder", teamWfH.ReorderTeamWorkflowStages)
+				teamScoped.POST("/workflows/:id/publish", teamWfH.PublishTeamWorkflow)
+
 				// Team tasks — admin CRUD (v0.27.5)
 				teamTaskH := handlers.NewTaskHandler(stores)
 				teamScoped.POST("/tasks", middleware.RequirePermission(auth.PermTaskCreate, stores), teamTaskH.CreateTeamTask)
@@ -990,21 +1025,6 @@ func main() {
 				teamScoped.DELETE("/tasks/:id", middleware.RequirePermission(auth.PermTaskCreate, stores), teamTaskH.Delete)
 				teamScoped.POST("/tasks/:id/run", middleware.RequirePermission(auth.PermTaskCreate, stores), teamTaskH.RunNow)
 				teamScoped.POST("/tasks/:id/kill", middleware.RequirePermission(auth.PermTaskCreate, stores), teamTaskH.KillRun)
-
-				// Team workflows — self-service CRUD (v0.31.2)
-				teamWfH := handlers.NewWorkflowHandler(stores)
-				teamScoped.GET("/workflows", teamWfH.ListTeamWorkflows)
-				teamScoped.POST("/workflows", middleware.RequirePermission(auth.PermWorkflowCreate, stores), teamWfH.CreateTeamWorkflow)
-				teamScoped.GET("/workflows/:id", teamWfH.GetTeamWorkflow)
-				teamScoped.PATCH("/workflows/:id", middleware.RequirePermission(auth.PermWorkflowCreate, stores), teamWfH.UpdateTeamWorkflow)
-				teamScoped.DELETE("/workflows/:id", middleware.RequirePermission(auth.PermWorkflowCreate, stores), teamWfH.DeleteTeamWorkflow)
-				teamScoped.GET("/workflows/:id/stages", teamWfH.ListTeamWorkflowStages)
-				teamScoped.POST("/workflows/:id/stages", middleware.RequirePermission(auth.PermWorkflowCreate, stores), teamWfH.CreateTeamWorkflowStage)
-				teamScoped.PUT("/workflows/:id/stages/:sid", middleware.RequirePermission(auth.PermWorkflowCreate, stores), teamWfH.UpdateTeamWorkflowStage)
-				teamScoped.DELETE("/workflows/:id/stages/:sid", middleware.RequirePermission(auth.PermWorkflowCreate, stores), teamWfH.DeleteTeamWorkflowStage)
-				teamScoped.PATCH("/workflows/:id/stages/reorder", middleware.RequirePermission(auth.PermWorkflowCreate, stores), teamWfH.ReorderTeamWorkflowStages)
-				teamScoped.POST("/workflows/:id/publish", middleware.RequirePermission(auth.PermWorkflowCreate, stores), teamWfH.PublishTeamWorkflow)
-				teamScoped.GET("/workflows/:id/versions/:version", teamWfH.GetTeamWorkflowVersion)
 			}
 
 			// Team task viewing for all members (v0.27.5)
diff --git a/server/memory/compactor.go b/server/memory/compactor.go
index 6706925..7b94b67 100644
--- a/server/memory/compactor.go
+++ b/server/memory/compactor.go
@@ -7,10 +7,10 @@ import (
 	"log"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/roles"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/providers"
+	"chat-switchboard/roles"
+	"chat-switchboard/store"
 )
 
 // compactionThreshold is the minimum number of active memories before
diff --git a/server/memory/extractor.go b/server/memory/extractor.go
index 3176ef7..b29ecd7 100644
--- a/server/memory/extractor.go
+++ b/server/memory/extractor.go
@@ -7,12 +7,12 @@ import (
 	"log"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/knowledge"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/notifications"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/roles"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/knowledge"
+	"chat-switchboard/models"
+	"chat-switchboard/notifications"
+	"chat-switchboard/providers"
+	"chat-switchboard/roles"
+	"chat-switchboard/store"
 )
 
 // defaultExtractionPrompt is used when the persona has no custom prompt.
diff --git a/server/memory/scanner.go b/server/memory/scanner.go
index 3bd3caf..16bf684 100644
--- a/server/memory/scanner.go
+++ b/server/memory/scanner.go
@@ -6,8 +6,8 @@ import (
 	"sync"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/database"
+	"chat-switchboard/store"
 )
 
 // ScannerConfig holds tunable parameters for the background scanner.
diff --git a/server/mentions/parser.go b/server/mentions/parser.go
index 635a029..8aaab14 100644
--- a/server/mentions/parser.go
+++ b/server/mentions/parser.go
@@ -5,7 +5,7 @@ import (
 	"strings"
 	"unicode"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // Mention represents a parsed @mention token in message content.
diff --git a/server/mentions/parser_test.go b/server/mentions/parser_test.go
index f84e73e..0f1ab37 100644
--- a/server/mentions/parser_test.go
+++ b/server/mentions/parser_test.go
@@ -3,7 +3,7 @@ package mentions
 import (
 	"testing"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 func roster() []models.ChannelModel {
diff --git a/server/middleware/auth.go b/server/middleware/auth.go
index b8d0209..ecf11d1 100644
--- a/server/middleware/auth.go
+++ b/server/middleware/auth.go
@@ -11,9 +11,9 @@ import (
 	"github.com/gin-gonic/gin"
 	"github.com/golang-jwt/jwt/v5"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/config"
+	"chat-switchboard/database"
+	"chat-switchboard/store"
 )
 
 // Claims represents the JWT payload. Must match handlers.Claims.
diff --git a/server/middleware/page_auth.go b/server/middleware/page_auth.go
index b46c699..c84b426 100644
--- a/server/middleware/page_auth.go
+++ b/server/middleware/page_auth.go
@@ -7,9 +7,9 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/config"
+	"chat-switchboard/database"
+	"chat-switchboard/store"
 )
 
 // AuthOrRedirect validates JWT tokens for page routes.
diff --git a/server/middleware/permissions.go b/server/middleware/permissions.go
index 82bf3a8..ff7fedd 100644
--- a/server/middleware/permissions.go
+++ b/server/middleware/permissions.go
@@ -5,8 +5,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/auth"
+	"chat-switchboard/store"
 )
 
 const permCacheKey = "resolved_permissions"
diff --git a/server/middleware/ratelimit.go b/server/middleware/ratelimit.go
index 3c1a3ef..585b718 100644
--- a/server/middleware/ratelimit.go
+++ b/server/middleware/ratelimit.go
@@ -1,70 +1,46 @@
 package middleware
 
 import (
+	"log"
 	"net/http"
-	"sync"
-	"time"
 
 	"github.com/gin-gonic/gin"
+
+	"chat-switchboard/store"
 )
 
-type visitor struct {
-	tokens   float64
-	lastSeen time.Time
-}
-
-// RateLimiter implements a per-IP token bucket rate limiter.
+// RateLimiter implements per-IP rate limiting backed by a shared store.
+// v0.32.0: replaces in-memory token bucket for cross-pod consistency.
+//
+// Fail-open: if the store is unavailable (PG down), requests are allowed.
+// Auth endpoints have their own protections (bcrypt, lockout); blocking
+// legitimate logins due to a rate-limit DB failure is worse than a brief burst.
 type RateLimiter struct {
-	mu       sync.Mutex
-	visitors map[string]*visitor
-	rate     float64 // tokens per second
-	burst    int     // max tokens
+	store store.RateLimitStore
+	rate  float64
+	burst int
 }
 
-// NewRateLimiter creates a rate limiter.
-// rate is requests per second, burst is max burst size.
-func NewRateLimiter(rate float64, burst int) *RateLimiter {
-	rl := &RateLimiter{
-		visitors: make(map[string]*visitor),
-		rate:     rate,
-		burst:    burst,
-	}
-
-	// Cleanup stale entries every 5 minutes
-	go func() {
-		for {
-			time.Sleep(5 * time.Minute)
-			rl.cleanup()
-		}
-	}()
-
-	return rl
+// NewRateLimiter creates a rate limiter backed by the given store.
+// rate is requests per second, burst is max requests per window.
+func NewRateLimiter(s store.RateLimitStore, rate float64, burst int) *RateLimiter {
+	return &RateLimiter{store: s, rate: rate, burst: burst}
 }
 
 // Limit returns a Gin middleware that enforces the rate limit.
 func (rl *RateLimiter) Limit() gin.HandlerFunc {
 	return func(c *gin.Context) {
-		ip := c.ClientIP()
+		key := "auth:" + c.ClientIP()
 
-		rl.mu.Lock()
-		v, exists := rl.visitors[ip]
-		now := time.Now()
-
-		if !exists {
-			v = &visitor{tokens: float64(rl.burst), lastSeen: now}
-			rl.visitors[ip] = v
+		allowed, err := rl.store.Allow(c.Request.Context(), key, rl.rate, rl.burst)
+		if err != nil {
+			// Fail open — don't block auth on rate limit DB failure.
+			log.Printf("[ratelimit] store error (allowing request): %v", err)
+			c.Next()
+			return
 		}
 
-		// Refill tokens based on elapsed time
-		elapsed := now.Sub(v.lastSeen).Seconds()
-		v.tokens += elapsed * rl.rate
-		if v.tokens > float64(rl.burst) {
-			v.tokens = float64(rl.burst)
-		}
-		v.lastSeen = now
-
-		if v.tokens < 1 {
-			rl.mu.Unlock()
+		if !allowed {
 			c.Header("Retry-After", "1")
 			c.AbortWithStatusJSON(http.StatusTooManyRequests, gin.H{
 				"error": "rate limit exceeded",
@@ -72,21 +48,6 @@ func (rl *RateLimiter) Limit() gin.HandlerFunc {
 			return
 		}
 
-		v.tokens--
-		rl.mu.Unlock()
-
 		c.Next()
 	}
 }
-
-func (rl *RateLimiter) cleanup() {
-	rl.mu.Lock()
-	defer rl.mu.Unlock()
-
-	cutoff := time.Now().Add(-10 * time.Minute)
-	for ip, v := range rl.visitors {
-		if v.lastSeen.Before(cutoff) {
-			delete(rl.visitors, ip)
-		}
-	}
-}
diff --git a/server/middleware/session_auth.go b/server/middleware/session_auth.go
index 2c01cd9..284ce43 100644
--- a/server/middleware/session_auth.go
+++ b/server/middleware/session_auth.go
@@ -6,10 +6,10 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/auth"
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/auth"
+	"chat-switchboard/config"
+	"chat-switchboard/database"
+	"chat-switchboard/store"
 )
 
 // AuthOrSession returns middleware that accepts either a normal JWT or a
diff --git a/server/middleware/team.go b/server/middleware/team.go
index 57417a2..408412a 100644
--- a/server/middleware/team.go
+++ b/server/middleware/team.go
@@ -5,7 +5,7 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // RequireTeamAdmin returns middleware that restricts access to team admins.
diff --git a/server/models/models.go b/server/models/models.go
index f7b99f7..c7ad465 100644
--- a/server/models/models.go
+++ b/server/models/models.go
@@ -92,7 +92,6 @@ type User struct {
 type Team struct {
 	BaseModel
 	Name        string  `json:"name" db:"name"`
-	Slug        string  `json:"slug" db:"slug"`
 	Description string  `json:"description,omitempty" db:"description"`
 	CreatedBy   string  `json:"created_by" db:"created_by"`
 	IsActive    bool    `json:"is_active" db:"is_active"`
diff --git a/server/notelinks/extract.go b/server/notelinks/extract.go
index 0e8971e..b32025d 100644
--- a/server/notelinks/extract.go
+++ b/server/notelinks/extract.go
@@ -4,7 +4,7 @@ import (
 	"regexp"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // wikiRe matches [[Title]], [[Title|Display]], ![[Title]], and ![[Title|Display]].
diff --git a/server/notifications/email.go b/server/notifications/email.go
index 61a66fa..a89ab7a 100644
--- a/server/notifications/email.go
+++ b/server/notifications/email.go
@@ -10,7 +10,7 @@ import (
 	"strings"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // SMTPConfig holds SMTP connection settings, loaded from platform_settings.
diff --git a/server/notifications/service.go b/server/notifications/service.go
index 762b96f..d559265 100644
--- a/server/notifications/service.go
+++ b/server/notifications/service.go
@@ -7,9 +7,9 @@ import (
 	"sync"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/events"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── Package-level singleton ─────────────────
@@ -103,7 +103,7 @@ func (s *Service) Notify(ctx context.Context, n *models.Notification) error {
 
 		if s.hub != nil {
 			payload, _ := json.Marshal(n)
-			s.hub.SendToUser(n.UserID, events.Event{
+			s.hub.PublishToUser(n.UserID, events.Event{
 				Label:   "notification.new",
 				Payload: payload,
 				Ts:      time.Now().UnixMilli(),
diff --git a/server/notifications/service_test.go b/server/notifications/service_test.go
index 0f43f4c..b8c748d 100644
--- a/server/notifications/service_test.go
+++ b/server/notifications/service_test.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"testing"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // mockPrefStore implements store.NotificationPreferenceStore for testing.
diff --git a/server/notifications/sources.go b/server/notifications/sources.go
index 3b84399..390c9a6 100644
--- a/server/notifications/sources.go
+++ b/server/notifications/sources.go
@@ -6,9 +6,9 @@ import (
 	"fmt"
 	"log"
 
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/events"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── Role Fallback ───────────────────────────
diff --git a/server/notifications/sources_test.go b/server/notifications/sources_test.go
index f783fd5..8e6c48d 100644
--- a/server/notifications/sources_test.go
+++ b/server/notifications/sources_test.go
@@ -5,7 +5,7 @@ import (
 	"testing"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // mockNotifStore implements store.NotificationStore for testing.
diff --git a/server/notifications/templates.go b/server/notifications/templates.go
index 599ee07..f14d5ff 100644
--- a/server/notifications/templates.go
+++ b/server/notifications/templates.go
@@ -5,7 +5,7 @@ import (
 	"html/template"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // ── Template Data ───────────────────────────
diff --git a/server/notifications/templates_test.go b/server/notifications/templates_test.go
index f75849e..15e2c18 100644
--- a/server/notifications/templates_test.go
+++ b/server/notifications/templates_test.go
@@ -4,7 +4,7 @@ import (
 	"strings"
 	"testing"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 func TestRenderHTML_Basic(t *testing.T) {
diff --git a/server/pages/loaders.go b/server/pages/loaders.go
index 3133977..cc838a1 100644
--- a/server/pages/loaders.go
+++ b/server/pages/loaders.go
@@ -7,8 +7,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/providers"
+	"chat-switchboard/store"
 )
 
 // ── Types for template data ──────────────────
diff --git a/server/pages/pages.go b/server/pages/pages.go
index b834687..2a0dc19 100644
--- a/server/pages/pages.go
+++ b/server/pages/pages.go
@@ -25,8 +25,8 @@ import (
 
 	"github.com/gin-gonic/gin"
 
-	"git.gobha.me/xcaliber/chat-switchboard/config"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/config"
+	"chat-switchboard/store"
 )
 
 //go:embed templates/*.html templates/components/*.html templates/surfaces/*.html templates/admin/*.html
@@ -700,23 +700,10 @@ func (e *Engine) RenderWorkflowLanding() gin.HandlerFunc {
 		scope := c.Param("id")
 		slug := c.Param("slug")
 
-		// Resolve scope to team_id (v0.31.2: supports team slug)
+		// Resolve scope to team_id
 		var teamID *string
 		if scope != "global" {
-			// UUID format check: 36 chars with dashes at standard positions
-			if len(scope) == 36 && scope[8] == '-' && scope[13] == '-' {
-				teamID = &scope
-			} else if e.stores.Teams != nil {
-				// Try team slug lookup
-				t, err := e.stores.Teams.GetBySlug(ctx, scope)
-				if err == nil && t != nil {
-					teamID = &t.ID
-				} else {
-					teamID = &scope // fall through — will 404 downstream
-				}
-			} else {
-				teamID = &scope
-			}
+			teamID = &scope
 		}
 
 		if e.stores.Workflows == nil {
diff --git a/server/pages/templates/surfaces/chat.html b/server/pages/templates/surfaces/chat.html
index ba82eda..bb0a696 100644
--- a/server/pages/templates/surfaces/chat.html
+++ b/server/pages/templates/surfaces/chat.html
@@ -374,7 +374,6 @@ window.addEventListener('unhandledrejection', function(e) {
                     <button class="admin-tab active" data-ttab="members" onclick="sb.call('UI.switchTeamTab','members')">Members</button>
                     <button class="admin-tab" data-ttab="providers" onclick="sb.call('UI.switchTeamTab','providers')">Providers</button>
                     <button class="admin-tab" data-ttab="personas" onclick="sb.call('UI.switchTeamTab','personas')">Personas</button>
-                    <button class="admin-tab" data-ttab="workflows" onclick="sb.call('UI.switchTeamTab','workflows')">Workflows</button>
                     <button class="admin-tab" data-ttab="knowledge" onclick="sb.call('UI.switchTeamTab','knowledge')">Knowledge</button>
                     <button class="admin-tab" data-ttab="groups" onclick="sb.call('UI.switchTeamTab','groups')">Groups</button>
                     <button class="admin-tab" data-ttab="settings" onclick="sb.call('UI.switchTeamTab','settings')">Settings</button>
@@ -419,9 +418,6 @@ window.addEventListener('unhandledrejection', function(e) {
                         <div id="teamKBContent"></div>
                     </div>
 
-                    {{/* Workflows (v0.31.2) */}}
-                    <div id="teamTabWorkflows" class="team-tab-content" style="display:none;"></div>
-
                     {{/* Groups */}}
                     <div id="teamTabGroups" class="team-tab-content" style="display:none;">
                         <div id="settingsTeamGroups"></div>
@@ -528,7 +524,6 @@ window.addEventListener('unhandledrejection', function(e) {
 <script type="module" nonce="{{$.CSPNonce}}" src="{{$.BasePath}}/js/admin-handlers.js?v={{$.Version}}"></script>
 <script type="module" nonce="{{$.CSPNonce}}" src="{{$.BasePath}}/js/workflow-api.js?v={{$.Version}}"></script>
 <script type="module" nonce="{{$.CSPNonce}}" src="{{$.BasePath}}/js/workflow-admin.js?v={{$.Version}}"></script>
-<script type="module" nonce="{{$.CSPNonce}}" src="{{$.BasePath}}/js/workflow-team-admin.js?v={{$.Version}}"></script>
 <script type="module" nonce="{{$.CSPNonce}}" src="{{$.BasePath}}/js/workflow-queue.js?v={{$.Version}}"></script>
 <script type="module" nonce="{{$.CSPNonce}}" src="{{$.BasePath}}/js/task-sidebar.js?v={{$.Version}}"></script>
 <script type="module" nonce="{{$.CSPNonce}}" src="{{$.BasePath}}/js/app.js?v={{$.Version}}"></script>
diff --git a/server/providers/anthropic.go b/server/providers/anthropic.go
index 4abaab2..cebf688 100644
--- a/server/providers/anthropic.go
+++ b/server/providers/anthropic.go
@@ -1,8 +1,8 @@
 package providers
 
 import (
-	"git.gobha.me/xcaliber/chat-switchboard/capabilities"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/capabilities"
+	"chat-switchboard/models"
 	"bufio"
 	"bytes"
 	"context"
diff --git a/server/providers/openai.go b/server/providers/openai.go
index 4ae1df0..d45cd69 100644
--- a/server/providers/openai.go
+++ b/server/providers/openai.go
@@ -1,7 +1,7 @@
 package providers
 
 import (
-	"git.gobha.me/xcaliber/chat-switchboard/capabilities"
+	"chat-switchboard/capabilities"
 	"bufio"
 	"bytes"
 	"context"
diff --git a/server/providers/openrouter.go b/server/providers/openrouter.go
index 079ef2b..3b8b7c2 100644
--- a/server/providers/openrouter.go
+++ b/server/providers/openrouter.go
@@ -1,8 +1,8 @@
 package providers
 
 import (
-	"git.gobha.me/xcaliber/chat-switchboard/capabilities"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/capabilities"
+	"chat-switchboard/models"
 	"context"
 	"encoding/json"
 	"fmt"
diff --git a/server/providers/provider.go b/server/providers/provider.go
index 42a6df0..6ba56fd 100644
--- a/server/providers/provider.go
+++ b/server/providers/provider.go
@@ -10,7 +10,7 @@ import (
 	"sync"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // ── Errors ─────────────────────────────────
diff --git a/server/providers/venice.go b/server/providers/venice.go
index 75edc97..922b349 100644
--- a/server/providers/venice.go
+++ b/server/providers/venice.go
@@ -1,7 +1,7 @@
 package providers
 
 import (
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 	"context"
 	"encoding/json"
 	"fmt"
diff --git a/server/roles/roles.go b/server/roles/roles.go
index 562cb31..b2158ea 100644
--- a/server/roles/roles.go
+++ b/server/roles/roles.go
@@ -8,11 +8,11 @@ import (
 	"sync"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/crypto"
+	"chat-switchboard/events"
+	"chat-switchboard/models"
+	"chat-switchboard/providers"
+	"chat-switchboard/store"
 )
 
 // ── Known Roles ────────────────────────────
diff --git a/server/routing/convert.go b/server/routing/convert.go
index 48b3805..7b9c708 100644
--- a/server/routing/convert.go
+++ b/server/routing/convert.go
@@ -3,7 +3,7 @@ package routing
 import (
 	"encoding/json"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // FromModel converts a DB model to a routing Policy for evaluation.
diff --git a/server/routing/evaluator.go b/server/routing/evaluator.go
index 9a9f53c..cf91d62 100644
--- a/server/routing/evaluator.go
+++ b/server/routing/evaluator.go
@@ -4,7 +4,7 @@ import (
 	"sort"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // Evaluator processes routing policies to produce a ranked candidate list.
diff --git a/server/routing/evaluator_test.go b/server/routing/evaluator_test.go
index d6329e8..e8b5c34 100644
--- a/server/routing/evaluator_test.go
+++ b/server/routing/evaluator_test.go
@@ -3,7 +3,7 @@ package routing
 import (
 	"testing"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 func strPtr(s string) *string { return &s }
diff --git a/server/routing/types.go b/server/routing/types.go
index f4aa60c..1d40f27 100644
--- a/server/routing/types.go
+++ b/server/routing/types.go
@@ -7,7 +7,7 @@ package routing
 import (
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // ── Policy ─────────────────────────────────
diff --git a/server/sandbox/modules.go b/server/sandbox/modules.go
index bc7bf44..8059f97 100644
--- a/server/sandbox/modules.go
+++ b/server/sandbox/modules.go
@@ -12,8 +12,8 @@ import (
 	"go.starlark.net/starlark"
 	"go.starlark.net/starlarkstruct"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ─── Secrets Module ──────────────────────────
diff --git a/server/sandbox/provider_module.go b/server/sandbox/provider_module.go
index 9c08e71..4e2d625 100644
--- a/server/sandbox/provider_module.go
+++ b/server/sandbox/provider_module.go
@@ -32,7 +32,7 @@ import (
 	"go.starlark.net/starlark"
 	"go.starlark.net/starlarkstruct"
 
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
+	"chat-switchboard/providers"
 )
 
 // ─── Provider Resolution Interface ──────────
diff --git a/server/sandbox/provider_module_test.go b/server/sandbox/provider_module_test.go
index 4c264a6..507e17d 100644
--- a/server/sandbox/provider_module_test.go
+++ b/server/sandbox/provider_module_test.go
@@ -5,7 +5,7 @@ import (
 
 	"go.starlark.net/starlark"
 
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
+	"chat-switchboard/providers"
 )
 
 // ─── ParseRequiresProvider ──────────────────
diff --git a/server/sandbox/runner.go b/server/sandbox/runner.go
index 10ae0b6..b2e3471 100644
--- a/server/sandbox/runner.go
+++ b/server/sandbox/runner.go
@@ -25,8 +25,8 @@ import (
 
 	"go.starlark.net/starlark"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // RunContext carries per-invocation state that modules need but which
diff --git a/server/sandbox/settings_module.go b/server/sandbox/settings_module.go
index 91c25ac..1d0e272 100644
--- a/server/sandbox/settings_module.go
+++ b/server/sandbox/settings_module.go
@@ -17,7 +17,7 @@ import (
 	"go.starlark.net/starlark"
 	"go.starlark.net/starlarkstruct"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // BuildSettingsModule creates the "settings" Starlark module for a package.
diff --git a/server/sandbox/workflow_module.go b/server/sandbox/workflow_module.go
index d59e34d..553dce6 100644
--- a/server/sandbox/workflow_module.go
+++ b/server/sandbox/workflow_module.go
@@ -19,7 +19,7 @@ import (
 	"go.starlark.net/starlark"
 	"go.starlark.net/starlarkstruct"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // BuildWorkflowModule creates the "workflow" Starlark module for a package.
diff --git a/server/scheduler/executor.go b/server/scheduler/executor.go
index e5cda43..066675e 100644
--- a/server/scheduler/executor.go
+++ b/server/scheduler/executor.go
@@ -15,18 +15,18 @@ import (
 	"log"
 	"time"
 
-	capspkg "git.gobha.me/xcaliber/chat-switchboard/capabilities"
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/events"
-	"git.gobha.me/xcaliber/chat-switchboard/handlers"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/notifications"
-	"git.gobha.me/xcaliber/chat-switchboard/providers"
-	"git.gobha.me/xcaliber/chat-switchboard/sandbox"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/taskutil"
-	"git.gobha.me/xcaliber/chat-switchboard/tools"
-	"git.gobha.me/xcaliber/chat-switchboard/webhook"
+	capspkg "chat-switchboard/capabilities"
+	"chat-switchboard/crypto"
+	"chat-switchboard/events"
+	"chat-switchboard/handlers"
+	"chat-switchboard/models"
+	"chat-switchboard/notifications"
+	"chat-switchboard/providers"
+	"chat-switchboard/sandbox"
+	"chat-switchboard/store"
+	"chat-switchboard/taskutil"
+	"chat-switchboard/tools"
+	"chat-switchboard/webhook"
 )
 
 // Executor runs task completions headlessly (no HTTP client).
diff --git a/server/scheduler/scheduler.go b/server/scheduler/scheduler.go
index cd56e4a..65bac3c 100644
--- a/server/scheduler/scheduler.go
+++ b/server/scheduler/scheduler.go
@@ -5,16 +5,22 @@
 // v0.27.2: Adds global config checks (enabled, max_concurrent), full cron
 //          parsing via robfig/cron/v3, and completion invocation via executor.
 // v0.28.0: Adopt queued runs (webhook triggers), action tasks, C3/C4 audit fixes.
+// v0.32.0: SKIP LOCKED atomic claim — every replica polls, PG serializes.
+//          Replaces ListDue with ClaimDueTask, CreateRunExclusive for
+//          belt-and-suspenders uniqueness. Startup jitter staggers replicas.
 package scheduler
 
 import (
 	"context"
+	"database/sql"
+	"errors"
 	"log"
+	"math/rand"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/taskutil"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
+	"chat-switchboard/taskutil"
 )
 
 // Scheduler polls for due tasks and dispatches execution.
@@ -45,7 +51,12 @@ func (s *Scheduler) Run() {
 		return
 	}
 	s.running = true
-	log.Printf("[scheduler] Started (poll interval: %s)", s.interval)
+
+	// v0.32.0: Startup jitter — stagger replica polling to reduce lock contention.
+	// Not strictly necessary with SKIP LOCKED but reduces unnecessary work.
+	jitter := time.Duration(rand.Intn(15000)) * time.Millisecond
+	time.Sleep(jitter)
+	log.Printf("[scheduler] Started (jitter=%s, interval=%s)", jitter, s.interval)
 
 	ticker := time.NewTicker(s.interval)
 	defer ticker.Stop()
@@ -69,42 +80,53 @@ func (s *Scheduler) Stop() {
 	}
 }
 
-// poll checks for due tasks and dispatches them.
+// poll claims due tasks one at a time and dispatches them.
+// v0.32.0: Each call to ClaimDueTask atomically locks and claims one task
+// via FOR UPDATE SKIP LOCKED (PG). Multiple replicas poll concurrently;
+// PG ensures each task is handed to exactly one replica.
 func (s *Scheduler) poll() {
 	ctx, cancel := context.WithTimeout(context.Background(), 20*time.Second)
 	defer cancel()
 
-	// v0.27.2: Check global config — tasks may be disabled at runtime.
+	// v0.32.0: Piggyback cleanup of expired tickets and stale rate limit
+	// counters on the scheduler tick. Cheap no-ops when tables are empty.
+	if s.stores.Tickets != nil {
+		if n, err := s.stores.Tickets.Reap(ctx); err == nil && n > 0 {
+			log.Printf("[scheduler] Reaped %d expired WS tickets", n)
+		}
+	}
+	if s.stores.RateLimits != nil {
+		_ = s.stores.RateLimits.Cleanup(ctx, 5*time.Minute)
+	}
+
+	// Check global config — tasks may be disabled at runtime.
 	cfg := taskutil.LoadTaskConfig(ctx, s.stores.GlobalConfig)
 	if !cfg.Enabled {
 		return
 	}
 
-	due, err := s.stores.Tasks.ListDue(ctx, cfg.MaxConcurrent)
-	if err != nil {
-		log.Printf("[scheduler] Failed to list due tasks: %v", err)
-		return
-	}
-
-	for _, task := range due {
-		go s.execute(ctx, task)
+	// Claim tasks one at a time until none remain or max_concurrent reached.
+	claimed := 0
+	for claimed < cfg.MaxConcurrent {
+		task, err := s.stores.Tasks.ClaimDueTask(ctx)
+		if err != nil {
+			// sql.ErrNoRows = nothing due; any other error = log and stop.
+			if !errors.Is(err, sql.ErrNoRows) {
+				log.Printf("[scheduler] ClaimDueTask error: %v", err)
+			}
+			break
+		}
+		claimed++
+		go s.execute(task)
 	}
 }
 
-// execute runs a single task.
-func (s *Scheduler) execute(parentCtx context.Context, task models.Task) {
-	ctx, cancel := context.WithTimeout(parentCtx, time.Duration(task.MaxWallClock)*time.Second)
+// execute runs a single task. The task has already been claimed
+// (next_run_at set to NULL by ClaimDueTask).
+func (s *Scheduler) execute(task *models.Task) {
+	ctx, cancel := context.WithTimeout(context.Background(), time.Duration(task.MaxWallClock)*time.Second)
 	defer cancel()
 
-	// Skip if previous run still active
-	active, _ := s.stores.Tasks.GetActiveRun(ctx, task.ID)
-	if active != nil {
-		log.Printf("[scheduler] Skipping task %s (%s) — previous run still active", task.ID, task.Name)
-		// Still advance next_run_at to avoid re-polling the same task
-		s.advanceNextRun(ctx, task)
-		return
-	}
-
 	// v0.28.0: Check for queued run (from webhook trigger) — adopt it instead
 	// of creating a new one so the trigger_payload is preserved.
 	run, _ := s.stores.Tasks.GetQueuedRun(ctx, task.ID)
@@ -114,29 +136,32 @@ func (s *Scheduler) execute(parentCtx context.Context, task models.Task) {
 		run.Status = "running"
 		log.Printf("[scheduler] Adopting queued run %s for task %s (%s)", run.ID, task.ID, task.Name)
 	} else {
-		// Normal cron-triggered execution — create a new run
-		run = &models.TaskRun{
-			TaskID: task.ID,
-			Status: "running",
-		}
-		if err := s.stores.Tasks.CreateRun(ctx, run); err != nil {
-			log.Printf("[scheduler] Failed to create run for task %s: %v", task.ID, err)
-			s.advanceNextRun(ctx, task)
+		// v0.32.0: Conditional insert — prevents double-execution if another
+		// replica somehow also processes this task (belt-and-suspenders).
+		var err error
+		run, err = s.stores.Tasks.CreateRunExclusive(ctx, task.ID)
+		if err != nil {
+			if errors.Is(err, sql.ErrNoRows) {
+				log.Printf("[scheduler] Skipping task %s (%s) — run already exists", task.ID, task.Name)
+			} else {
+				log.Printf("[scheduler] Failed to create run for task %s: %v", task.ID, err)
+			}
+			s.advanceNextRun(ctx, *task)
 			return
 		}
 	}
 
 	log.Printf("[scheduler] Executing task %s (%s) type=%s", task.ID, task.Name, task.TaskType)
 
-	// Mark execution start (C4 fix: SetLastRun is now separate from SetNextRun)
+	// Mark execution start
 	_ = s.stores.Tasks.SetLastRun(ctx, task.ID)
 
 	// Create or reuse service channel
-	channelID, err := s.ensureServiceChannel(ctx, task)
+	channelID, err := s.ensureServiceChannel(ctx, *task)
 	if err != nil {
 		log.Printf("[scheduler] Failed to create service channel for task %s: %v", task.ID, err)
 		_ = s.stores.Tasks.UpdateRun(ctx, run.ID, "failed", 0, 0, 0, "channel creation failed: "+err.Error())
-		s.advanceNextRun(ctx, task)
+		s.advanceNextRun(ctx, *task)
 		return
 	}
 
@@ -154,9 +179,9 @@ func (s *Scheduler) execute(parentCtx context.Context, task models.Task) {
 		})
 	}
 
-	// v0.27.2: Invoke completion via executor
+	// Invoke completion via executor
 	if s.executor != nil {
-		s.executor.Execute(ctx, task, run, channelID)
+		s.executor.Execute(ctx, *task, run, channelID)
 	} else {
 		// No executor — mark completed (channel + prompt persisted)
 		_ = s.stores.Tasks.UpdateRun(ctx, run.ID, "completed", 0, 0, 0, "")
@@ -165,7 +190,7 @@ func (s *Scheduler) execute(parentCtx context.Context, task models.Task) {
 
 	log.Printf("[scheduler] Task %s finished (channel %s)", task.ID, channelID)
 
-	s.advanceNextRun(ctx, task)
+	s.advanceNextRun(ctx, *task)
 }
 
 // ensureServiceChannel creates a new service channel or reuses an existing one.
@@ -213,7 +238,7 @@ func (s *Scheduler) advanceNextRun(ctx context.Context, task models.Task) {
 		return
 	}
 
-	// v0.27.2: Full cron parsing via robfig/cron/v3 (replaces hand-rolled parser).
+	// Full cron parsing via robfig/cron/v3.
 	next := taskutil.NextRunFromSchedule(task.Schedule, task.Timezone)
 	if next == nil {
 		log.Printf("[scheduler] Failed to compute next run for task %s (schedule: %q) — deactivating", task.ID, task.Schedule)
diff --git a/server/scheduler/system_builtins.go b/server/scheduler/system_builtins.go
index 59b37ee..6b346f3 100644
--- a/server/scheduler/system_builtins.go
+++ b/server/scheduler/system_builtins.go
@@ -10,8 +10,8 @@ import (
 	"log"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/taskutil"
+	"chat-switchboard/store"
+	"chat-switchboard/taskutil"
 )
 
 // RegisterBuiltins registers all built-in system functions.
diff --git a/server/store/extension_perm_iface.go b/server/store/extension_perm_iface.go
index 1956976..fe3b76e 100644
--- a/server/store/extension_perm_iface.go
+++ b/server/store/extension_perm_iface.go
@@ -3,7 +3,7 @@ package store
 import (
 	"context"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // ExtensionPermissionStore manages declared and granted permissions for packages.
diff --git a/server/store/interfaces.go b/server/store/interfaces.go
index 396e900..f2f4372 100644
--- a/server/store/interfaces.go
+++ b/server/store/interfaces.go
@@ -6,7 +6,7 @@ import (
 	"errors"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // ── Sentinel Errors ─────────────────────────
@@ -62,6 +62,8 @@ type Stores struct {
 	Health          HealthStore            // v0.29.0: Provider health window management
 	ExtPermissions  ExtensionPermissionStore // v0.29.0: Extension declared/granted capabilities
 	ExtData         ExtDataStore             // v0.29.2: Extension namespaced table catalog
+	Tickets         TicketStore              // v0.32.0: WS auth tickets (PG-backed for cross-pod)
+	RateLimits      RateLimitStore           // v0.32.0: Distributed rate limiting
 }
 
 // =========================================
@@ -340,7 +342,6 @@ type UserSearchResult struct {
 type TeamStore interface {
 	Create(ctx context.Context, t *models.Team) error
 	GetByID(ctx context.Context, id string) (*models.Team, error)
-	GetBySlug(ctx context.Context, slug string) (*models.Team, error)
 	Update(ctx context.Context, id string, fields map[string]interface{}) error
 	Delete(ctx context.Context, id string) error
 	List(ctx context.Context) ([]models.Team, error)
diff --git a/server/store/postgres/audit.go b/server/store/postgres/audit.go
index f2ce027..571bda8 100644
--- a/server/store/postgres/audit.go
+++ b/server/store/postgres/audit.go
@@ -5,8 +5,8 @@ import (
 	"database/sql"
 	"encoding/json"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type AuditStore struct{}
diff --git a/server/store/postgres/cap_override.go b/server/store/postgres/cap_override.go
index b88901c..22d9482 100644
--- a/server/store/postgres/cap_override.go
+++ b/server/store/postgres/cap_override.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // CapOverrideStore implements store.CapabilityOverrideStore for Postgres.
diff --git a/server/store/postgres/catalog.go b/server/store/postgres/catalog.go
index 34a79ec..de1d643 100644
--- a/server/store/postgres/catalog.go
+++ b/server/store/postgres/catalog.go
@@ -7,8 +7,8 @@ import (
 	"fmt"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type CatalogStore struct{}
diff --git a/server/store/postgres/channel.go b/server/store/postgres/channel.go
index 4ef53bd..6aaf7e5 100644
--- a/server/store/postgres/channel.go
+++ b/server/store/postgres/channel.go
@@ -10,8 +10,8 @@ import (
 
 	"github.com/lib/pq"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type ChannelStore struct{}
diff --git a/server/store/postgres/extension_permissions.go b/server/store/postgres/extension_permissions.go
index ab5e22f..1f211fe 100644
--- a/server/store/postgres/extension_permissions.go
+++ b/server/store/postgres/extension_permissions.go
@@ -5,7 +5,7 @@ import (
 	"database/sql"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type ExtensionPermissionStore struct {
diff --git a/server/store/postgres/file.go b/server/store/postgres/file.go
index 2fe9cd2..93f1e48 100644
--- a/server/store/postgres/file.go
+++ b/server/store/postgres/file.go
@@ -6,7 +6,7 @@ import (
 	"encoding/json"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // FileStore implements store.FileStore against the `files` table.
diff --git a/server/store/postgres/folder.go b/server/store/postgres/folder.go
index d7c3903..ac10f0c 100644
--- a/server/store/postgres/folder.go
+++ b/server/store/postgres/folder.go
@@ -3,7 +3,7 @@ package postgres
 import (
 	"context"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type FolderStore struct{}
diff --git a/server/store/postgres/git_credentials.go b/server/store/postgres/git_credentials.go
index 4d569bc..eeecfe4 100644
--- a/server/store/postgres/git_credentials.go
+++ b/server/store/postgres/git_credentials.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // GitCredentialStore implements store.GitCredentialStore for PostgreSQL.
diff --git a/server/store/postgres/global_config.go b/server/store/postgres/global_config.go
index 3d3ee1c..f008129 100644
--- a/server/store/postgres/global_config.go
+++ b/server/store/postgres/global_config.go
@@ -5,7 +5,7 @@ import (
 	"database/sql"
 	"encoding/json"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type GlobalConfigStore struct{}
diff --git a/server/store/postgres/groups.go b/server/store/postgres/groups.go
index 210ec2b..0c344a0 100644
--- a/server/store/postgres/groups.go
+++ b/server/store/postgres/groups.go
@@ -7,8 +7,8 @@ import (
 	"errors"
 	"fmt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── GroupStore ──────────────────────────────
diff --git a/server/store/postgres/health.go b/server/store/postgres/health.go
index 55eb173..9b1fcb8 100644
--- a/server/store/postgres/health.go
+++ b/server/store/postgres/health.go
@@ -5,7 +5,7 @@ import (
 	"database/sql"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // HealthStore implements health.Store for Postgres.
diff --git a/server/store/postgres/helpers.go b/server/store/postgres/helpers.go
index d133b0a..98ff71e 100644
--- a/server/store/postgres/helpers.go
+++ b/server/store/postgres/helpers.go
@@ -6,7 +6,7 @@ import (
 	"fmt"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // DB is the shared database connection pool.
diff --git a/server/store/postgres/knowledge_bases.go b/server/store/postgres/knowledge_bases.go
index 1feae24..613c45e 100644
--- a/server/store/postgres/knowledge_bases.go
+++ b/server/store/postgres/knowledge_bases.go
@@ -6,7 +6,7 @@ import (
 	"fmt"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 
 	"github.com/lib/pq"
 )
diff --git a/server/store/postgres/memory.go b/server/store/postgres/memory.go
index 17b21ee..a32eb3c 100644
--- a/server/store/postgres/memory.go
+++ b/server/store/postgres/memory.go
@@ -6,8 +6,8 @@ import (
 	"fmt"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type MemoryStore struct{}
diff --git a/server/store/postgres/memory_hybrid.go b/server/store/postgres/memory_hybrid.go
index e533d7e..814fd23 100644
--- a/server/store/postgres/memory_hybrid.go
+++ b/server/store/postgres/memory_hybrid.go
@@ -5,7 +5,7 @@ import (
 	"fmt"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // RecallHybrid returns active memories using vector similarity + keyword search.
diff --git a/server/store/postgres/message.go b/server/store/postgres/message.go
index 9e0c300..d8abbf9 100644
--- a/server/store/postgres/message.go
+++ b/server/store/postgres/message.go
@@ -7,8 +7,8 @@ import (
 	"fmt"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type MessageStore struct{}
diff --git a/server/store/postgres/message_tree.go b/server/store/postgres/message_tree.go
index a80aeca..cb09c15 100644
--- a/server/store/postgres/message_tree.go
+++ b/server/store/postgres/message_tree.go
@@ -6,8 +6,8 @@ import (
 	"encoding/json"
 	"fmt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── Tree Operations (v0.29.0) ───────────────────────────────────────────
diff --git a/server/store/postgres/note.go b/server/store/postgres/note.go
index d410c97..b4492f3 100644
--- a/server/store/postgres/note.go
+++ b/server/store/postgres/note.go
@@ -7,8 +7,8 @@ import (
 	"fmt"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 
 	"github.com/lib/pq"
 )
diff --git a/server/store/postgres/note_link.go b/server/store/postgres/note_link.go
index 68d677e..0274128 100644
--- a/server/store/postgres/note_link.go
+++ b/server/store/postgres/note_link.go
@@ -3,7 +3,7 @@ package postgres
 import (
 	"context"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 
 	"github.com/lib/pq"
 )
diff --git a/server/store/postgres/notification.go b/server/store/postgres/notification.go
index 6daa55b..34f6032 100644
--- a/server/store/postgres/notification.go
+++ b/server/store/postgres/notification.go
@@ -5,7 +5,7 @@ import (
 	"database/sql"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type NotificationStore struct{}
diff --git a/server/store/postgres/notification_prefs.go b/server/store/postgres/notification_prefs.go
index 5fae120..2210503 100644
--- a/server/store/postgres/notification_prefs.go
+++ b/server/store/postgres/notification_prefs.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type NotificationPreferenceStore struct{}
diff --git a/server/store/postgres/packages.go b/server/store/postgres/packages.go
index f7c560d..7f9e6af 100644
--- a/server/store/postgres/packages.go
+++ b/server/store/postgres/packages.go
@@ -5,7 +5,7 @@ import (
 	"database/sql"
 	"encoding/json"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 type PackageStore struct{}
diff --git a/server/store/postgres/persona.go b/server/store/postgres/persona.go
index b48544d..6dc8137 100644
--- a/server/store/postgres/persona.go
+++ b/server/store/postgres/persona.go
@@ -6,7 +6,7 @@ import (
 	"encoding/json"
 	"fmt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type PersonaStore struct{}
diff --git a/server/store/postgres/persona_group.go b/server/store/postgres/persona_group.go
index c57f086..fc7b997 100644
--- a/server/store/postgres/persona_group.go
+++ b/server/store/postgres/persona_group.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type PersonaGroupStore struct{}
diff --git a/server/store/postgres/persona_mention.go b/server/store/postgres/persona_mention.go
index d12c72a..a8749c6 100644
--- a/server/store/postgres/persona_mention.go
+++ b/server/store/postgres/persona_mention.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // ── Mention resolution + display info (v0.29.0) ────────────────────────
diff --git a/server/store/postgres/policy.go b/server/store/postgres/policy.go
index 16eafe9..e36704a 100644
--- a/server/store/postgres/policy.go
+++ b/server/store/postgres/policy.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type PolicyStore struct{}
diff --git a/server/store/postgres/pricing.go b/server/store/postgres/pricing.go
index cf9578b..78f4fd8 100644
--- a/server/store/postgres/pricing.go
+++ b/server/store/postgres/pricing.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type PricingStore struct{}
diff --git a/server/store/postgres/project.go b/server/store/postgres/project.go
index 5e1a716..4a121dd 100644
--- a/server/store/postgres/project.go
+++ b/server/store/postgres/project.go
@@ -7,8 +7,8 @@ import (
 
 	"github.com/lib/pq"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── ProjectStore ───────────────────────────
diff --git a/server/store/postgres/provider.go b/server/store/postgres/provider.go
index 59af17b..a9e2fbe 100644
--- a/server/store/postgres/provider.go
+++ b/server/store/postgres/provider.go
@@ -6,7 +6,7 @@ import (
 	"encoding/json"
 	"fmt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type ProviderStore struct{}
diff --git a/server/store/postgres/ratelimit.go b/server/store/postgres/ratelimit.go
new file mode 100644
index 0000000..192a984
--- /dev/null
+++ b/server/store/postgres/ratelimit.go
@@ -0,0 +1,36 @@
+package postgres
+
+import (
+	"context"
+	"fmt"
+	"time"
+)
+
+// RateLimitStore manages distributed rate limit counters in Postgres.
+// v0.32.0: fixed-window counter — upsert per-second bucket, check burst.
+type RateLimitStore struct{}
+
+func NewRateLimitStore() *RateLimitStore { return &RateLimitStore{} }
+
+func (s *RateLimitStore) Allow(ctx context.Context, key string, rate float64, burst int) (bool, error) {
+	// Upsert the current-second window counter and return the new token count.
+	var tokens float64
+	err := DB.QueryRowContext(ctx, `
+		INSERT INTO rate_limit_counters (key, window_start, tokens)
+		VALUES ($1, date_trunc('second', NOW()), 1)
+		ON CONFLICT (key, window_start)
+		DO UPDATE SET tokens = rate_limit_counters.tokens + 1
+		RETURNING tokens`, key).Scan(&tokens)
+	if err != nil {
+		return false, fmt.Errorf("rate limit upsert: %w", err)
+	}
+	return tokens <= float64(burst), nil
+}
+
+func (s *RateLimitStore) Cleanup(ctx context.Context, maxAge time.Duration) error {
+	_, err := DB.ExecContext(ctx, `
+		DELETE FROM rate_limit_counters
+		WHERE window_start < NOW() - $1 * INTERVAL '1 second'`,
+		int(maxAge.Seconds()))
+	return err
+}
diff --git a/server/store/postgres/resource_grants.go b/server/store/postgres/resource_grants.go
index 7f9f20a..2320fd0 100644
--- a/server/store/postgres/resource_grants.go
+++ b/server/store/postgres/resource_grants.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 
 	"github.com/lib/pq"
 )
diff --git a/server/store/postgres/routing_policy.go b/server/store/postgres/routing_policy.go
index 6573bc1..d60ea31 100644
--- a/server/store/postgres/routing_policy.go
+++ b/server/store/postgres/routing_policy.go
@@ -5,7 +5,7 @@ import (
 	"database/sql"
 	"encoding/json"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // RoutingPolicyStore implements store.RoutingPolicyStore for Postgres.
diff --git a/server/store/postgres/sessions.go b/server/store/postgres/sessions.go
index 96f5a1b..9d48e7d 100644
--- a/server/store/postgres/sessions.go
+++ b/server/store/postgres/sessions.go
@@ -5,7 +5,7 @@ import (
 	"database/sql"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // ── SessionStore ───────────────────────────
diff --git a/server/store/postgres/stores.go b/server/store/postgres/stores.go
index e4da4f9..b1cb1bd 100644
--- a/server/store/postgres/stores.go
+++ b/server/store/postgres/stores.go
@@ -3,7 +3,7 @@ package postgres
 import (
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // NewStores creates all Postgres store implementations and wires them
@@ -48,5 +48,7 @@ func NewStores(db *sql.DB) store.Stores {
 		Health:          NewHealthStore(db),
 		ExtPermissions:  NewExtensionPermissionStore(db),
 		ExtData:         NewExtDataStore(db),
+		Tickets:         NewTicketStore(),
+		RateLimits:      NewRateLimitStore(),
 	}
 }
diff --git a/server/store/postgres/tasks.go b/server/store/postgres/tasks.go
index 2e4d6c6..f5c206b 100644
--- a/server/store/postgres/tasks.go
+++ b/server/store/postgres/tasks.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"fmt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type TaskStore struct{}
@@ -149,8 +149,22 @@ func (s *TaskStore) ListAll(ctx context.Context) ([]models.Task, error) {
 	return s.list(ctx, `ORDER BY created_at DESC`)
 }
 
-func (s *TaskStore) ListDue(ctx context.Context, limit int) ([]models.Task, error) {
-	return s.list(ctx, `WHERE is_active = true AND next_run_at <= NOW() ORDER BY next_run_at ASC LIMIT $1`, limit)
+func (s *TaskStore) ClaimDueTask(ctx context.Context) (*models.Task, error) {
+	t := &models.Task{}
+	row := DB.QueryRowContext(ctx, `
+		UPDATE tasks SET next_run_at = NULL
+		WHERE id = (
+			SELECT id FROM tasks
+			WHERE is_active = true AND next_run_at <= NOW()
+			ORDER BY next_run_at ASC
+			LIMIT 1
+			FOR UPDATE SKIP LOCKED
+		)
+		RETURNING `+taskColumns)
+	if err := scanTask(row, t); err != nil {
+		return nil, err
+	}
+	return t, nil
 }
 
 // ── Scheduler bookkeeping ──────────────────────
@@ -181,6 +195,25 @@ func (s *TaskStore) CreateRun(ctx context.Context, r *models.TaskRun) error {
 	).Scan(&r.ID, &r.StartedAt)
 }
 
+func (s *TaskStore) CreateRunExclusive(ctx context.Context, taskID string) (*models.TaskRun, error) {
+	r := &models.TaskRun{}
+	err := DB.QueryRowContext(ctx, `
+		INSERT INTO task_runs (task_id, status)
+		SELECT $1, 'running'
+		WHERE NOT EXISTS (
+			SELECT 1 FROM task_runs
+			WHERE task_id = $1 AND status IN ('running', 'queued')
+		)
+		RETURNING id, started_at`, taskID,
+	).Scan(&r.ID, &r.StartedAt)
+	if err != nil {
+		return nil, err
+	}
+	r.TaskID = taskID
+	r.Status = "running"
+	return r, nil
+}
+
 func (s *TaskStore) UpdateRun(ctx context.Context, id, status string, tokensUsed, toolCalls, wallClock int, errMsg string) error {
 	_, err := DB.ExecContext(ctx, `
 		UPDATE task_runs SET status = $1, tokens_used = $2, tool_calls = $3,
diff --git a/server/store/postgres/team.go b/server/store/postgres/team.go
index b2e68e6..3ca8e0c 100644
--- a/server/store/postgres/team.go
+++ b/server/store/postgres/team.go
@@ -6,7 +6,7 @@ import (
 	"encoding/json"
 	"fmt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type TeamStore struct{}
@@ -16,10 +16,10 @@ func NewTeamStore() *TeamStore { return &TeamStore{} }
 func (s *TeamStore) Create(ctx context.Context, t *models.Team) error {
 	settingsJSON := ToJSON(t.Settings)
 	return DB.QueryRowContext(ctx, `
-		INSERT INTO teams (name, slug, description, created_by, is_active, settings)
-		VALUES ($1, $2, $3, $4, $5, $6)
+		INSERT INTO teams (name, description, created_by, is_active, settings)
+		VALUES ($1, $2, $3, $4, $5)
 		RETURNING id, created_at, updated_at`,
-		t.Name, t.Slug, t.Description, t.CreatedBy, t.IsActive, settingsJSON,
+		t.Name, t.Description, t.CreatedBy, t.IsActive, settingsJSON,
 	).Scan(&t.ID, &t.CreatedAt, &t.UpdatedAt)
 }
 
@@ -27,27 +27,10 @@ func (s *TeamStore) GetByID(ctx context.Context, id string) (*models.Team, error
 	var t models.Team
 	var settingsJSON []byte
 	err := DB.QueryRowContext(ctx, `
-		SELECT id, name, slug, description, created_by, is_active, settings, created_at, updated_at,
+		SELECT id, name, description, created_by, is_active, settings, created_at, updated_at,
 			(SELECT COUNT(*) FROM team_members WHERE team_id = teams.id) as member_count
 		FROM teams WHERE id = $1`, id).Scan(
-		&t.ID, &t.Name, &t.Slug, &t.Description, &t.CreatedBy, &t.IsActive,
-		&settingsJSON, &t.CreatedAt, &t.UpdatedAt, &t.MemberCount,
-	)
-	if err != nil {
-		return nil, err
-	}
-	json.Unmarshal(settingsJSON, &t.Settings)
-	return &t, nil
-}
-
-func (s *TeamStore) GetBySlug(ctx context.Context, slug string) (*models.Team, error) {
-	var t models.Team
-	var settingsJSON []byte
-	err := DB.QueryRowContext(ctx, `
-		SELECT id, name, slug, description, created_by, is_active, settings, created_at, updated_at,
-			(SELECT COUNT(*) FROM team_members WHERE team_id = teams.id) as member_count
-		FROM teams WHERE slug = $1`, slug).Scan(
-		&t.ID, &t.Name, &t.Slug, &t.Description, &t.CreatedBy, &t.IsActive,
+		&t.ID, &t.Name, &t.Description, &t.CreatedBy, &t.IsActive,
 		&settingsJSON, &t.CreatedAt, &t.UpdatedAt, &t.MemberCount,
 	)
 	if err != nil {
@@ -81,7 +64,7 @@ func (s *TeamStore) Delete(ctx context.Context, id string) error {
 
 func (s *TeamStore) List(ctx context.Context) ([]models.Team, error) {
 	rows, err := DB.QueryContext(ctx, `
-		SELECT id, name, slug, description, created_by, is_active, settings, created_at, updated_at,
+		SELECT id, name, description, created_by, is_active, settings, created_at, updated_at,
 			(SELECT COUNT(*) FROM team_members WHERE team_id = teams.id) as member_count
 		FROM teams ORDER BY name`)
 	if err != nil {
@@ -93,7 +76,7 @@ func (s *TeamStore) List(ctx context.Context) ([]models.Team, error) {
 	for rows.Next() {
 		var t models.Team
 		var settingsJSON []byte
-		err := rows.Scan(&t.ID, &t.Name, &t.Slug, &t.Description, &t.CreatedBy, &t.IsActive,
+		err := rows.Scan(&t.ID, &t.Name, &t.Description, &t.CreatedBy, &t.IsActive,
 			&settingsJSON, &t.CreatedAt, &t.UpdatedAt, &t.MemberCount)
 		if err != nil {
 			return nil, err
@@ -106,7 +89,7 @@ func (s *TeamStore) List(ctx context.Context) ([]models.Team, error) {
 
 func (s *TeamStore) ListForUser(ctx context.Context, userID string) ([]models.Team, error) {
 	rows, err := DB.QueryContext(ctx, `
-		SELECT t.id, t.name, t.slug, t.description, t.created_by, t.is_active,
+		SELECT t.id, t.name, t.description, t.created_by, t.is_active,
 		       COALESCE(t.settings, '{}'), t.created_at, t.updated_at,
 		       tm.role AS my_role,
 		       (SELECT COUNT(*) FROM team_members WHERE team_id = t.id) AS member_count
@@ -123,7 +106,7 @@ func (s *TeamStore) ListForUser(ctx context.Context, userID string) ([]models.Te
 	for rows.Next() {
 		var t models.Team
 		var settingsJSON []byte
-		err := rows.Scan(&t.ID, &t.Name, &t.Slug, &t.Description, &t.CreatedBy, &t.IsActive,
+		err := rows.Scan(&t.ID, &t.Name, &t.Description, &t.CreatedBy, &t.IsActive,
 			&settingsJSON, &t.CreatedAt, &t.UpdatedAt, &t.MyRole, &t.MemberCount)
 		if err != nil {
 			return nil, err
diff --git a/server/store/postgres/tickets.go b/server/store/postgres/tickets.go
new file mode 100644
index 0000000..58c9a54
--- /dev/null
+++ b/server/store/postgres/tickets.go
@@ -0,0 +1,53 @@
+package postgres
+
+import (
+	"context"
+	"crypto/rand"
+	"database/sql"
+	"encoding/hex"
+)
+
+// TicketStore manages WS auth tickets in Postgres.
+// v0.32.0: replaces in-memory sync.Map for cross-pod validation.
+type TicketStore struct{}
+
+func NewTicketStore() *TicketStore { return &TicketStore{} }
+
+func (s *TicketStore) Issue(ctx context.Context, userID string) (string, error) {
+	b := make([]byte, 16)
+	if _, err := rand.Read(b); err != nil {
+		return "", err
+	}
+	id := hex.EncodeToString(b)
+	_, err := DB.ExecContext(ctx, `
+		INSERT INTO ws_tickets (id, user_id, expires_at)
+		VALUES ($1, $2, NOW() + INTERVAL '30 seconds')`, id, userID)
+	if err != nil {
+		return "", err
+	}
+	return id, nil
+}
+
+func (s *TicketStore) Validate(ctx context.Context, ticketID string) (string, bool) {
+	var userID string
+	err := DB.QueryRowContext(ctx, `
+		DELETE FROM ws_tickets
+		WHERE id = $1 AND expires_at > NOW()
+		RETURNING user_id`, ticketID).Scan(&userID)
+	if err != nil {
+		if err == sql.ErrNoRows {
+			return "", false
+		}
+		return "", false
+	}
+	return userID, true
+}
+
+func (s *TicketStore) Reap(ctx context.Context) (int, error) {
+	res, err := DB.ExecContext(ctx, `DELETE FROM ws_tickets WHERE expires_at <= NOW()`)
+	if err != nil {
+		return 0, err
+	}
+	n, _ := res.RowsAffected()
+	return int(n), nil
+}
diff --git a/server/store/postgres/usage.go b/server/store/postgres/usage.go
index c35a38e..bfb2d62 100644
--- a/server/store/postgres/usage.go
+++ b/server/store/postgres/usage.go
@@ -6,8 +6,8 @@ import (
 	"strings"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type UsageStore struct{}
diff --git a/server/store/postgres/user.go b/server/store/postgres/user.go
index ac224be..fb71595 100644
--- a/server/store/postgres/user.go
+++ b/server/store/postgres/user.go
@@ -7,8 +7,8 @@ import (
 	"strings"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type UserStore struct{}
diff --git a/server/store/postgres/user_mention.go b/server/store/postgres/user_mention.go
index 6872a79..188a2b6 100644
--- a/server/store/postgres/user_mention.go
+++ b/server/store/postgres/user_mention.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // ── Mention resolution + display info (v0.29.0) ────────────────────────
diff --git a/server/store/postgres/user_settings.go b/server/store/postgres/user_settings.go
index 0687265..175903f 100644
--- a/server/store/postgres/user_settings.go
+++ b/server/store/postgres/user_settings.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"fmt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type UserModelSettingsStore struct{}
diff --git a/server/store/postgres/workflows.go b/server/store/postgres/workflows.go
index 5cbf39f..24fb64e 100644
--- a/server/store/postgres/workflows.go
+++ b/server/store/postgres/workflows.go
@@ -7,8 +7,8 @@ import (
 	"fmt"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // WorkflowStore implements store.WorkflowStore for Postgres.
diff --git a/server/store/postgres/workspace.go b/server/store/postgres/workspace.go
index 7a8bd9d..565a906 100644
--- a/server/store/postgres/workspace.go
+++ b/server/store/postgres/workspace.go
@@ -7,7 +7,7 @@ import (
 	"strings"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type WorkspaceStore struct{}
diff --git a/server/store/project_interface.go b/server/store/project_interface.go
index 7fb07ee..04d0b68 100644
--- a/server/store/project_interface.go
+++ b/server/store/project_interface.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // =========================================
diff --git a/server/store/ratelimit_iface.go b/server/store/ratelimit_iface.go
new file mode 100644
index 0000000..00da431
--- /dev/null
+++ b/server/store/ratelimit_iface.go
@@ -0,0 +1,18 @@
+package store
+
+import (
+	"context"
+	"time"
+)
+
+// RateLimitStore manages distributed rate limit counters.
+// v0.32.0: replaces in-memory token bucket for cross-pod rate limiting.
+type RateLimitStore interface {
+	// Allow checks if a request is within the rate limit.
+	// key is "{scope}:{identifier}" e.g. "auth:192.168.1.1".
+	// Atomically increments the counter if allowed.
+	Allow(ctx context.Context, key string, rate float64, burst int) (bool, error)
+
+	// Cleanup removes expired windows older than maxAge.
+	Cleanup(ctx context.Context, maxAge time.Duration) error
+}
diff --git a/server/store/sqlite/audit.go b/server/store/sqlite/audit.go
index 7487195..2b0ab9e 100644
--- a/server/store/sqlite/audit.go
+++ b/server/store/sqlite/audit.go
@@ -6,8 +6,8 @@ import (
 	"encoding/json"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type AuditStore struct{}
diff --git a/server/store/sqlite/cap_override.go b/server/store/sqlite/cap_override.go
index 9cbdc99..c2301aa 100644
--- a/server/store/sqlite/cap_override.go
+++ b/server/store/sqlite/cap_override.go
@@ -3,8 +3,8 @@ package sqlite
 import (
 	"context"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type CapOverrideStore struct{}
diff --git a/server/store/sqlite/catalog.go b/server/store/sqlite/catalog.go
index 0f5bc41..4330280 100644
--- a/server/store/sqlite/catalog.go
+++ b/server/store/sqlite/catalog.go
@@ -7,8 +7,8 @@ import (
 	"fmt"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type CatalogStore struct{}
diff --git a/server/store/sqlite/channel.go b/server/store/sqlite/channel.go
index 9063b9c..6a07d4b 100644
--- a/server/store/sqlite/channel.go
+++ b/server/store/sqlite/channel.go
@@ -8,8 +8,8 @@ import (
 	"strings"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type ChannelStore struct{}
diff --git a/server/store/sqlite/extension_permissions.go b/server/store/sqlite/extension_permissions.go
index 44c03fc..1e50580 100644
--- a/server/store/sqlite/extension_permissions.go
+++ b/server/store/sqlite/extension_permissions.go
@@ -6,8 +6,8 @@ import (
 
 	"github.com/google/uuid"
 
-	"git.gobha.me/xcaliber/chat-switchboard/database"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/database"
+	"chat-switchboard/models"
 )
 
 type ExtensionPermissionStore struct{}
diff --git a/server/store/sqlite/file.go b/server/store/sqlite/file.go
index 93929c9..4ff9448 100644
--- a/server/store/sqlite/file.go
+++ b/server/store/sqlite/file.go
@@ -6,8 +6,8 @@ import (
 	"encoding/json"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // FileStore implements store.FileStore against the `files` table.
diff --git a/server/store/sqlite/folder.go b/server/store/sqlite/folder.go
index bdee558..21596c6 100644
--- a/server/store/sqlite/folder.go
+++ b/server/store/sqlite/folder.go
@@ -3,8 +3,8 @@ package sqlite
 import (
 	"context"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type FolderStore struct{}
diff --git a/server/store/sqlite/git_credentials.go b/server/store/sqlite/git_credentials.go
index 68243c2..99f2fba 100644
--- a/server/store/sqlite/git_credentials.go
+++ b/server/store/sqlite/git_credentials.go
@@ -5,7 +5,7 @@ import (
 	"database/sql"
 	"encoding/base64"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 
 	"github.com/google/uuid"
 )
diff --git a/server/store/sqlite/global_config.go b/server/store/sqlite/global_config.go
index 63b4ca8..a84da05 100644
--- a/server/store/sqlite/global_config.go
+++ b/server/store/sqlite/global_config.go
@@ -5,7 +5,7 @@ import (
 	"database/sql"
 	"encoding/json"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type GlobalConfigStore struct{}
diff --git a/server/store/sqlite/groups.go b/server/store/sqlite/groups.go
index eacfcd5..c0725ed 100644
--- a/server/store/sqlite/groups.go
+++ b/server/store/sqlite/groups.go
@@ -8,8 +8,8 @@ import (
 	"fmt"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── GroupStore ──────────────────────────────
diff --git a/server/store/sqlite/health.go b/server/store/sqlite/health.go
index e160f6f..c8bfc7b 100644
--- a/server/store/sqlite/health.go
+++ b/server/store/sqlite/health.go
@@ -5,8 +5,8 @@ import (
 	"database/sql"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type HealthStore struct{}
diff --git a/server/store/sqlite/helpers.go b/server/store/sqlite/helpers.go
index 5920d90..f7730cc 100644
--- a/server/store/sqlite/helpers.go
+++ b/server/store/sqlite/helpers.go
@@ -7,7 +7,7 @@ import (
 	"strings"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // DB is the shared database connection pool.
diff --git a/server/store/sqlite/knowledge_bases.go b/server/store/sqlite/knowledge_bases.go
index 8fcf36e..2c043e8 100644
--- a/server/store/sqlite/knowledge_bases.go
+++ b/server/store/sqlite/knowledge_bases.go
@@ -10,8 +10,8 @@ import (
 	"strings"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── KnowledgeBaseStore ──────────────────────────
diff --git a/server/store/sqlite/memory.go b/server/store/sqlite/memory.go
index 6fb8f5b..ce1b563 100644
--- a/server/store/sqlite/memory.go
+++ b/server/store/sqlite/memory.go
@@ -6,8 +6,8 @@ import (
 	"fmt"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type MemoryStore struct{}
diff --git a/server/store/sqlite/memory_hybrid.go b/server/store/sqlite/memory_hybrid.go
index 8580ed7..60cb05a 100644
--- a/server/store/sqlite/memory_hybrid.go
+++ b/server/store/sqlite/memory_hybrid.go
@@ -5,7 +5,7 @@ import (
 	"encoding/json"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // RecallHybrid returns active memories using vector similarity + keyword search.
diff --git a/server/store/sqlite/message.go b/server/store/sqlite/message.go
index ad92c91..31f484b 100644
--- a/server/store/sqlite/message.go
+++ b/server/store/sqlite/message.go
@@ -7,8 +7,8 @@ import (
 	"strings"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type MessageStore struct{}
diff --git a/server/store/sqlite/message_tree.go b/server/store/sqlite/message_tree.go
index bf90a75..7ec1e62 100644
--- a/server/store/sqlite/message_tree.go
+++ b/server/store/sqlite/message_tree.go
@@ -7,8 +7,8 @@ import (
 	"fmt"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── Tree Operations (v0.29.0) ───────────────────────────────────────────
diff --git a/server/store/sqlite/note.go b/server/store/sqlite/note.go
index 1aeefe5..d378d7f 100644
--- a/server/store/sqlite/note.go
+++ b/server/store/sqlite/note.go
@@ -8,8 +8,8 @@ import (
 	"time"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type NoteStore struct{}
diff --git a/server/store/sqlite/note_link.go b/server/store/sqlite/note_link.go
index 424aaf2..750c179 100644
--- a/server/store/sqlite/note_link.go
+++ b/server/store/sqlite/note_link.go
@@ -3,7 +3,7 @@ package sqlite
 import (
 	"context"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type NoteLinkStore struct{}
diff --git a/server/store/sqlite/notification.go b/server/store/sqlite/notification.go
index c5d56d6..966494c 100644
--- a/server/store/sqlite/notification.go
+++ b/server/store/sqlite/notification.go
@@ -5,8 +5,8 @@ import (
 	"database/sql"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type NotificationStore struct{}
diff --git a/server/store/sqlite/notification_prefs.go b/server/store/sqlite/notification_prefs.go
index b139309..9100277 100644
--- a/server/store/sqlite/notification_prefs.go
+++ b/server/store/sqlite/notification_prefs.go
@@ -4,8 +4,8 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type NotificationPreferenceStore struct{}
diff --git a/server/store/sqlite/packages.go b/server/store/sqlite/packages.go
index 95cc469..aa0fa91 100644
--- a/server/store/sqlite/packages.go
+++ b/server/store/sqlite/packages.go
@@ -6,7 +6,7 @@ import (
 	"encoding/json"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 type PackageStore struct{}
diff --git a/server/store/sqlite/persona.go b/server/store/sqlite/persona.go
index 829b7bd..ed81b84 100644
--- a/server/store/sqlite/persona.go
+++ b/server/store/sqlite/persona.go
@@ -7,8 +7,8 @@ import (
 	"fmt"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type PersonaStore struct{}
diff --git a/server/store/sqlite/persona_group.go b/server/store/sqlite/persona_group.go
index 6687762..6772405 100644
--- a/server/store/sqlite/persona_group.go
+++ b/server/store/sqlite/persona_group.go
@@ -5,8 +5,8 @@ import (
 	"database/sql"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type PersonaGroupStore struct{}
diff --git a/server/store/sqlite/persona_mention.go b/server/store/sqlite/persona_mention.go
index 7f301a6..2bb7ce1 100644
--- a/server/store/sqlite/persona_mention.go
+++ b/server/store/sqlite/persona_mention.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // ── Mention resolution + display info (v0.29.0) ────────────────────────
diff --git a/server/store/sqlite/policy.go b/server/store/sqlite/policy.go
index 26e15fd..5f223a4 100644
--- a/server/store/sqlite/policy.go
+++ b/server/store/sqlite/policy.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 type PolicyStore struct{}
diff --git a/server/store/sqlite/presence.go b/server/store/sqlite/presence.go
index a4301db..b449cd8 100644
--- a/server/store/sqlite/presence.go
+++ b/server/store/sqlite/presence.go
@@ -5,7 +5,7 @@ import (
 	"database/sql"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // PresenceStore manages user_presence table.
diff --git a/server/store/sqlite/pricing.go b/server/store/sqlite/pricing.go
index d5221ff..a15dac9 100644
--- a/server/store/sqlite/pricing.go
+++ b/server/store/sqlite/pricing.go
@@ -4,8 +4,8 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type PricingStore struct{}
diff --git a/server/store/sqlite/project.go b/server/store/sqlite/project.go
index 50ec114..1b482d5 100644
--- a/server/store/sqlite/project.go
+++ b/server/store/sqlite/project.go
@@ -6,8 +6,8 @@ import (
 	"fmt"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── ProjectStore ───────────────────────────
diff --git a/server/store/sqlite/provider.go b/server/store/sqlite/provider.go
index ec41d02..d351823 100644
--- a/server/store/sqlite/provider.go
+++ b/server/store/sqlite/provider.go
@@ -7,8 +7,8 @@ import (
 	"fmt"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type ProviderStore struct{}
diff --git a/server/store/sqlite/ratelimit.go b/server/store/sqlite/ratelimit.go
new file mode 100644
index 0000000..503a6d8
--- /dev/null
+++ b/server/store/sqlite/ratelimit.go
@@ -0,0 +1,46 @@
+package sqlite
+
+import (
+	"context"
+	"fmt"
+	"time"
+)
+
+// RateLimitStore manages rate limit counters in SQLite.
+// v0.32.0: functional parity for single-process test coverage.
+type RateLimitStore struct{}
+
+func NewRateLimitStore() *RateLimitStore { return &RateLimitStore{} }
+
+func (s *RateLimitStore) Allow(ctx context.Context, key string, rate float64, burst int) (bool, error) {
+	// SQLite: strftime truncates to the second for window bucketing.
+	window := time.Now().UTC().Truncate(time.Second).Format("2006-01-02 15:04:05")
+
+	// Upsert via INSERT OR REPLACE pattern. SQLite has no ON CONFLICT ... DO UPDATE
+	// with RETURNING, so read-then-write in a single connection (single-writer safe).
+	var tokens float64
+	err := DB.QueryRowContext(ctx, `
+		SELECT COALESCE(tokens, 0) FROM rate_limit_counters
+		WHERE key = ? AND window_start = ?`, key, window).Scan(&tokens)
+	if err != nil {
+		// No row yet — insert fresh
+		tokens = 0
+	}
+	tokens++
+	_, err = DB.ExecContext(ctx, `
+		INSERT INTO rate_limit_counters (key, window_start, tokens)
+		VALUES (?, ?, ?)
+		ON CONFLICT (key, window_start) DO UPDATE SET tokens = ?`,
+		key, window, tokens, tokens)
+	if err != nil {
+		return false, fmt.Errorf("rate limit upsert: %w", err)
+	}
+	return tokens <= float64(burst), nil
+}
+
+func (s *RateLimitStore) Cleanup(ctx context.Context, maxAge time.Duration) error {
+	cutoff := time.Now().UTC().Add(-maxAge).Format("2006-01-02 15:04:05")
+	_, err := DB.ExecContext(ctx, `
+		DELETE FROM rate_limit_counters WHERE window_start < ?`, cutoff)
+	return err
+}
diff --git a/server/store/sqlite/resource_grants.go b/server/store/sqlite/resource_grants.go
index bd685ce..1ab3b6a 100644
--- a/server/store/sqlite/resource_grants.go
+++ b/server/store/sqlite/resource_grants.go
@@ -5,8 +5,8 @@ import (
 	"database/sql"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── ResourceGrantStore ──────────────────────
diff --git a/server/store/sqlite/routing_policy.go b/server/store/sqlite/routing_policy.go
index 5cb1db0..ddbc582 100644
--- a/server/store/sqlite/routing_policy.go
+++ b/server/store/sqlite/routing_policy.go
@@ -5,8 +5,8 @@ import (
 	"encoding/json"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // RoutingPolicyStore implements store.RoutingPolicyStore for SQLite.
diff --git a/server/store/sqlite/sessions.go b/server/store/sqlite/sessions.go
index 1958243..9a4bc11 100644
--- a/server/store/sqlite/sessions.go
+++ b/server/store/sqlite/sessions.go
@@ -5,8 +5,8 @@ import (
 	"database/sql"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── SessionStore ───────────────────────────
diff --git a/server/store/sqlite/stores.go b/server/store/sqlite/stores.go
index 1ac96e1..84a1834 100644
--- a/server/store/sqlite/stores.go
+++ b/server/store/sqlite/stores.go
@@ -3,7 +3,7 @@ package sqlite
 import (
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // NewStores creates all SQLite store implementations and wires them
@@ -48,5 +48,7 @@ func NewStores(db *sql.DB) store.Stores {
 		Health:          NewHealthStore(),
 		ExtPermissions:  NewExtensionPermissionStore(),
 		ExtData:         NewExtDataStore(),
+		Tickets:         NewTicketStore(),
+		RateLimits:      NewRateLimitStore(),
 	}
 }
diff --git a/server/store/sqlite/tasks.go b/server/store/sqlite/tasks.go
index f199ef7..40a81c7 100644
--- a/server/store/sqlite/tasks.go
+++ b/server/store/sqlite/tasks.go
@@ -2,11 +2,12 @@ package sqlite
 
 import (
 	"context"
+	"database/sql"
 	"encoding/json"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type TaskStore struct{}
@@ -159,8 +160,20 @@ func (s *TaskStore) ListAll(ctx context.Context) ([]models.Task, error) {
 	return s.list(ctx, `ORDER BY created_at DESC`)
 }
 
-func (s *TaskStore) ListDue(ctx context.Context, limit int) ([]models.Task, error) {
-	return s.list(ctx, `WHERE is_active = 1 AND next_run_at <= datetime('now') ORDER BY next_run_at ASC LIMIT ?`, limit)
+func (s *TaskStore) ClaimDueTask(ctx context.Context) (*models.Task, error) {
+	// SQLite: single-process, no contention. Select the oldest due task,
+	// then atomically clear next_run_at to mark it claimed.
+	t := &models.Task{}
+	row := DB.QueryRowContext(ctx,
+		`SELECT `+taskColumns+` FROM tasks
+		 WHERE is_active = 1 AND next_run_at <= datetime('now')
+		 ORDER BY next_run_at ASC LIMIT 1`)
+	if err := scanTask(row, t); err != nil {
+		return nil, err
+	}
+	_, _ = DB.ExecContext(ctx,
+		`UPDATE tasks SET next_run_at = NULL WHERE id = ?`, t.ID)
+	return t, nil
 }
 
 // ── Scheduler bookkeeping ──────────────────────
@@ -194,6 +207,34 @@ func (s *TaskStore) CreateRun(ctx context.Context, r *models.TaskRun) error {
 	return err
 }
 
+func (s *TaskStore) CreateRunExclusive(ctx context.Context, taskID string) (*models.TaskRun, error) {
+	// SQLite: check-then-insert. Single-process, no race.
+	var count int
+	err := DB.QueryRowContext(ctx, `
+		SELECT COUNT(*) FROM task_runs
+		WHERE task_id = ? AND status IN ('running', 'queued')`, taskID).Scan(&count)
+	if err != nil {
+		return nil, err
+	}
+	if count > 0 {
+		return nil, sql.ErrNoRows
+	}
+	r := &models.TaskRun{
+		ID:        store.NewID(),
+		TaskID:    taskID,
+		Status:    "running",
+		StartedAt: time.Now().UTC(),
+	}
+	_, err = DB.ExecContext(ctx, `
+		INSERT INTO task_runs (id, task_id, status, started_at)
+		VALUES (?, ?, 'running', ?)`,
+		r.ID, taskID, r.StartedAt.UTC().Format("2006-01-02 15:04:05"))
+	if err != nil {
+		return nil, err
+	}
+	return r, nil
+}
+
 func (s *TaskStore) UpdateRun(ctx context.Context, id, status string, tokensUsed, toolCalls, wallClock int, errMsg string) error {
 	_, err := DB.ExecContext(ctx, `
 		UPDATE task_runs SET status = ?, tokens_used = ?, tool_calls = ?,
diff --git a/server/store/sqlite/team.go b/server/store/sqlite/team.go
index c2e8ac3..a5b8478 100644
--- a/server/store/sqlite/team.go
+++ b/server/store/sqlite/team.go
@@ -7,8 +7,8 @@ import (
 	"fmt"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type TeamStore struct{}
@@ -22,9 +22,9 @@ func (s *TeamStore) Create(ctx context.Context, t *models.Team) error {
 	t.CreatedAt = now
 	t.UpdatedAt = now
 	_, err := DB.ExecContext(ctx, `
-		INSERT INTO teams (id, name, slug, description, created_by, is_active, settings, created_at, updated_at)
-		VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,
-		t.ID, t.Name, t.Slug, t.Description, t.CreatedBy, t.IsActive, settingsJSON,
+		INSERT INTO teams (id, name, description, created_by, is_active, settings, created_at, updated_at)
+		VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,
+		t.ID, t.Name, t.Description, t.CreatedBy, t.IsActive, settingsJSON,
 		now.Format(timeFmt), now.Format(timeFmt),
 	)
 	return err
@@ -34,27 +34,10 @@ func (s *TeamStore) GetByID(ctx context.Context, id string) (*models.Team, error
 	var t models.Team
 	var settingsJSON []byte
 	err := DB.QueryRowContext(ctx, `
-		SELECT id, name, slug, description, created_by, is_active, settings, created_at, updated_at,
+		SELECT id, name, description, created_by, is_active, settings, created_at, updated_at,
 			(SELECT COUNT(*) FROM team_members WHERE team_id = teams.id) as member_count
 		FROM teams WHERE id = ?`, id).Scan(
-		&t.ID, &t.Name, &t.Slug, &t.Description, &t.CreatedBy, &t.IsActive,
-		&settingsJSON, st(&t.CreatedAt), st(&t.UpdatedAt), &t.MemberCount,
-	)
-	if err != nil {
-		return nil, err
-	}
-	json.Unmarshal(settingsJSON, &t.Settings)
-	return &t, nil
-}
-
-func (s *TeamStore) GetBySlug(ctx context.Context, slug string) (*models.Team, error) {
-	var t models.Team
-	var settingsJSON []byte
-	err := DB.QueryRowContext(ctx, `
-		SELECT id, name, slug, description, created_by, is_active, settings, created_at, updated_at,
-			(SELECT COUNT(*) FROM team_members WHERE team_id = teams.id) as member_count
-		FROM teams WHERE slug = ?`, slug).Scan(
-		&t.ID, &t.Name, &t.Slug, &t.Description, &t.CreatedBy, &t.IsActive,
+		&t.ID, &t.Name, &t.Description, &t.CreatedBy, &t.IsActive,
 		&settingsJSON, st(&t.CreatedAt), st(&t.UpdatedAt), &t.MemberCount,
 	)
 	if err != nil {
@@ -88,7 +71,7 @@ func (s *TeamStore) Delete(ctx context.Context, id string) error {
 
 func (s *TeamStore) List(ctx context.Context) ([]models.Team, error) {
 	rows, err := DB.QueryContext(ctx, `
-		SELECT id, name, slug, description, created_by, is_active, settings, created_at, updated_at,
+		SELECT id, name, description, created_by, is_active, settings, created_at, updated_at,
 			(SELECT COUNT(*) FROM team_members WHERE team_id = teams.id) as member_count
 		FROM teams ORDER BY name`)
 	if err != nil {
@@ -100,7 +83,7 @@ func (s *TeamStore) List(ctx context.Context) ([]models.Team, error) {
 	for rows.Next() {
 		var t models.Team
 		var settingsJSON []byte
-		err := rows.Scan(&t.ID, &t.Name, &t.Slug, &t.Description, &t.CreatedBy, &t.IsActive,
+		err := rows.Scan(&t.ID, &t.Name, &t.Description, &t.CreatedBy, &t.IsActive,
 			&settingsJSON, st(&t.CreatedAt), st(&t.UpdatedAt), &t.MemberCount)
 		if err != nil {
 			return nil, err
@@ -113,7 +96,7 @@ func (s *TeamStore) List(ctx context.Context) ([]models.Team, error) {
 
 func (s *TeamStore) ListForUser(ctx context.Context, userID string) ([]models.Team, error) {
 	rows, err := DB.QueryContext(ctx, `
-		SELECT t.id, t.name, t.slug, t.description, t.created_by, t.is_active,
+		SELECT t.id, t.name, t.description, t.created_by, t.is_active,
 		       COALESCE(t.settings, '{}'), t.created_at, t.updated_at,
 		       tm.role AS my_role,
 		       (SELECT COUNT(*) FROM team_members WHERE team_id = t.id) AS member_count
@@ -130,7 +113,7 @@ func (s *TeamStore) ListForUser(ctx context.Context, userID string) ([]models.Te
 	for rows.Next() {
 		var t models.Team
 		var settingsJSON []byte
-		err := rows.Scan(&t.ID, &t.Name, &t.Slug, &t.Description, &t.CreatedBy, &t.IsActive,
+		err := rows.Scan(&t.ID, &t.Name, &t.Description, &t.CreatedBy, &t.IsActive,
 			&settingsJSON, st(&t.CreatedAt), st(&t.UpdatedAt), &t.MyRole, &t.MemberCount)
 		if err != nil {
 			return nil, err
diff --git a/server/store/sqlite/tickets.go b/server/store/sqlite/tickets.go
new file mode 100644
index 0000000..fbc1466
--- /dev/null
+++ b/server/store/sqlite/tickets.go
@@ -0,0 +1,54 @@
+package sqlite
+
+import (
+	"context"
+	"crypto/rand"
+	"database/sql"
+	"encoding/hex"
+)
+
+// TicketStore manages WS auth tickets in SQLite.
+// v0.32.0: functional parity for single-process test coverage.
+type TicketStore struct{}
+
+func NewTicketStore() *TicketStore { return &TicketStore{} }
+
+func (s *TicketStore) Issue(ctx context.Context, userID string) (string, error) {
+	b := make([]byte, 16)
+	if _, err := rand.Read(b); err != nil {
+		return "", err
+	}
+	id := hex.EncodeToString(b)
+	_, err := DB.ExecContext(ctx, `
+		INSERT INTO ws_tickets (id, user_id, expires_at)
+		VALUES (?, ?, datetime('now', '+30 seconds'))`, id, userID)
+	if err != nil {
+		return "", err
+	}
+	return id, nil
+}
+
+func (s *TicketStore) Validate(ctx context.Context, ticketID string) (string, bool) {
+	// SQLite has no DELETE ... RETURNING. Two-step: select then delete.
+	var userID string
+	err := DB.QueryRowContext(ctx, `
+		SELECT user_id FROM ws_tickets
+		WHERE id = ? AND expires_at > datetime('now')`, ticketID).Scan(&userID)
+	if err != nil {
+		if err == sql.ErrNoRows {
+			return "", false
+		}
+		return "", false
+	}
+	DB.ExecContext(ctx, `DELETE FROM ws_tickets WHERE id = ?`, ticketID)
+	return userID, true
+}
+
+func (s *TicketStore) Reap(ctx context.Context) (int, error) {
+	res, err := DB.ExecContext(ctx, `DELETE FROM ws_tickets WHERE expires_at <= datetime('now')`)
+	if err != nil {
+		return 0, err
+	}
+	n, _ := res.RowsAffected()
+	return int(n), nil
+}
diff --git a/server/store/sqlite/usage.go b/server/store/sqlite/usage.go
index f5bb265..af94a89 100644
--- a/server/store/sqlite/usage.go
+++ b/server/store/sqlite/usage.go
@@ -6,8 +6,8 @@ import (
 	"strings"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type UsageStore struct{}
diff --git a/server/store/sqlite/user.go b/server/store/sqlite/user.go
index cabde84..92b370d 100644
--- a/server/store/sqlite/user.go
+++ b/server/store/sqlite/user.go
@@ -7,8 +7,8 @@ import (
 	"strings"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type UserStore struct{}
diff --git a/server/store/sqlite/user_mention.go b/server/store/sqlite/user_mention.go
index dc087c3..73f99fc 100644
--- a/server/store/sqlite/user_mention.go
+++ b/server/store/sqlite/user_mention.go
@@ -4,7 +4,7 @@ import (
 	"context"
 	"database/sql"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // ── Mention resolution + display info (v0.29.0) ────────────────────────
diff --git a/server/store/sqlite/user_settings.go b/server/store/sqlite/user_settings.go
index 9980301..e053754 100644
--- a/server/store/sqlite/user_settings.go
+++ b/server/store/sqlite/user_settings.go
@@ -4,8 +4,8 @@ import (
 	"context"
 	"fmt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type UserModelSettingsStore struct{}
diff --git a/server/store/sqlite/workflows.go b/server/store/sqlite/workflows.go
index 490975c..d5ed65b 100644
--- a/server/store/sqlite/workflows.go
+++ b/server/store/sqlite/workflows.go
@@ -6,8 +6,8 @@ import (
 	"encoding/json"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // WorkflowStore implements store.WorkflowStore for SQLite.
diff --git a/server/store/sqlite/workspace.go b/server/store/sqlite/workspace.go
index 5d73a78..d31d8ff 100644
--- a/server/store/sqlite/workspace.go
+++ b/server/store/sqlite/workspace.go
@@ -10,8 +10,8 @@ import (
 	"strings"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 type WorkspaceStore struct{}
diff --git a/server/store/store_memory.go b/server/store/store_memory.go
index 9f9841d..da8ac58 100644
--- a/server/store/store_memory.go
+++ b/server/store/store_memory.go
@@ -9,7 +9,7 @@ package store
 import (
 	"context"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // =========================================
diff --git a/server/store/task_iface.go b/server/store/task_iface.go
index 15638fa..ee7f7c6 100644
--- a/server/store/task_iface.go
+++ b/server/store/task_iface.go
@@ -3,7 +3,7 @@ package store
 import (
 	"context"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // TaskStore manages task definitions and run history.
@@ -21,13 +21,14 @@ type TaskStore interface {
 	GetByTriggerToken(ctx context.Context, token string) (*models.Task, error)
 
 	// Scheduler queries
-	ListDue(ctx context.Context, limit int) ([]models.Task, error)
+	ClaimDueTask(ctx context.Context) (*models.Task, error)
 	SetNextRun(ctx context.Context, id string, nextRun interface{}) error
 	SetLastRun(ctx context.Context, id string) error
 	IncrementRunCount(ctx context.Context, id string) error
 
 	// Run history
 	CreateRun(ctx context.Context, r *models.TaskRun) error
+	CreateRunExclusive(ctx context.Context, taskID string) (*models.TaskRun, error)
 	UpdateRun(ctx context.Context, id string, status string, tokensUsed, toolCalls, wallClock int, errMsg string) error
 	TransitionRunStatus(ctx context.Context, id string, status string) error
 	GetActiveRun(ctx context.Context, taskID string) (*models.TaskRun, error)
diff --git a/server/store/ticket_iface.go b/server/store/ticket_iface.go
new file mode 100644
index 0000000..9ab4a45
--- /dev/null
+++ b/server/store/ticket_iface.go
@@ -0,0 +1,18 @@
+package store
+
+import "context"
+
+// TicketStore manages short-lived, single-use WebSocket auth tickets.
+// v0.32.0: replaces in-memory sync.Map for cross-pod ticket validation.
+type TicketStore interface {
+	// Issue creates a single-use ticket for the given user.
+	// Returns the opaque ticket ID (128-bit hex).
+	Issue(ctx context.Context, userID string) (string, error)
+
+	// Validate atomically consumes a ticket and returns the user ID.
+	// Returns ("", false) if the ticket is invalid, expired, or already consumed.
+	Validate(ctx context.Context, ticketID string) (string, bool)
+
+	// Reap removes expired tickets. Returns the count deleted.
+	Reap(ctx context.Context) (int, error)
+}
diff --git a/server/store/workflow_iface.go b/server/store/workflow_iface.go
index ba62314..2e4bd18 100644
--- a/server/store/workflow_iface.go
+++ b/server/store/workflow_iface.go
@@ -3,7 +3,7 @@ package store
 import (
 	"context"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // WorkflowStore manages workflow definitions, stages, and version snapshots.
diff --git a/server/taskutil/system_registry.go b/server/taskutil/system_registry.go
index b1ad22f..11dc564 100644
--- a/server/taskutil/system_registry.go
+++ b/server/taskutil/system_registry.go
@@ -18,7 +18,7 @@ import (
 	"sort"
 	"sync"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // SystemFunc is the signature for built-in system task functions.
diff --git a/server/taskutil/task_config.go b/server/taskutil/task_config.go
index 66386b8..5c43ff8 100644
--- a/server/taskutil/task_config.go
+++ b/server/taskutil/task_config.go
@@ -4,8 +4,8 @@ import (
 	"context"
 	"log"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // TaskConfig holds the runtime task configuration read from global_settings.
diff --git a/server/tools/conversation_search.go b/server/tools/conversation_search.go
index 4a5a969..3717d38 100644
--- a/server/tools/conversation_search.go
+++ b/server/tools/conversation_search.go
@@ -7,7 +7,7 @@ import (
 	"log"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // ── Late Registration ────────────────────────
diff --git a/server/tools/file_recall.go b/server/tools/file_recall.go
index 7bb570d..6ad2bd5 100644
--- a/server/tools/file_recall.go
+++ b/server/tools/file_recall.go
@@ -9,8 +9,8 @@ import (
 	"log"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/storage"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/storage"
+	"chat-switchboard/store"
 )
 
 // ── Late Registration ────────────────────────
diff --git a/server/tools/git.go b/server/tools/git.go
index fb223ec..58d8702 100644
--- a/server/tools/git.go
+++ b/server/tools/git.go
@@ -5,7 +5,7 @@ import (
 	"encoding/json"
 	"fmt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/workspace"
+	"chat-switchboard/workspace"
 )
 
 // RegisterGitTools registers the 5 git-related workspace tools.
diff --git a/server/tools/kbsearch.go b/server/tools/kbsearch.go
index 3a58744..fa0a761 100644
--- a/server/tools/kbsearch.go
+++ b/server/tools/kbsearch.go
@@ -6,8 +6,8 @@ import (
 	"fmt"
 	"log"
 
-	"git.gobha.me/xcaliber/chat-switchboard/knowledge"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/knowledge"
+	"chat-switchboard/store"
 )
 
 // ── Late Registration ────────────────────────
diff --git a/server/tools/memory.go b/server/tools/memory.go
index eaa623c..eed4830 100644
--- a/server/tools/memory.go
+++ b/server/tools/memory.go
@@ -7,9 +7,9 @@ import (
 	"log"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/knowledge"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/knowledge"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── Late Registration ────────────────────────
diff --git a/server/tools/notes.go b/server/tools/notes.go
index 2425126..cab7650 100644
--- a/server/tools/notes.go
+++ b/server/tools/notes.go
@@ -7,9 +7,9 @@ import (
 	"log"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/knowledge"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/knowledge"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── Late Registration ────────────────────────
diff --git a/server/tools/task_create.go b/server/tools/task_create.go
index 070db6d..f83016e 100644
--- a/server/tools/task_create.go
+++ b/server/tools/task_create.go
@@ -7,9 +7,9 @@ import (
 	"log"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/taskutil"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
+	"chat-switchboard/taskutil"
 )
 
 // ── Late Registration ────────────────────────
diff --git a/server/tools/tools_test.go b/server/tools/tools_test.go
index f3a16a9..9c29e38 100644
--- a/server/tools/tools_test.go
+++ b/server/tools/tools_test.go
@@ -6,7 +6,7 @@ import (
 	"os"
 	"testing"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // TestMain registers late-registered tools (notes) with nil deps so
diff --git a/server/tools/websearch.go b/server/tools/websearch.go
index 139e44d..ae424eb 100644
--- a/server/tools/websearch.go
+++ b/server/tools/websearch.go
@@ -5,7 +5,7 @@ import (
 	"encoding/json"
 	"fmt"
 
-	"git.gobha.me/xcaliber/chat-switchboard/tools/search"
+	"chat-switchboard/tools/search"
 )
 
 func init() {
diff --git a/server/tools/workflow.go b/server/tools/workflow.go
index a398790..73b786f 100644
--- a/server/tools/workflow.go
+++ b/server/tools/workflow.go
@@ -7,9 +7,9 @@ import (
 	"log"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/webhook"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
+	"chat-switchboard/webhook"
 )
 
 // ── Late Registration ────────────────────────
diff --git a/server/tools/workspace.go b/server/tools/workspace.go
index e674705..61819ee 100644
--- a/server/tools/workspace.go
+++ b/server/tools/workspace.go
@@ -8,10 +8,10 @@ import (
 	"log"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/knowledge"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
-	"git.gobha.me/xcaliber/chat-switchboard/workspace"
+	"chat-switchboard/knowledge"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
+	"chat-switchboard/workspace"
 )
 
 // ── Late Registration ────────────────────────
diff --git a/server/tools/workspace_search.go b/server/tools/workspace_search.go
index 8c5d3ee..34f7fc7 100644
--- a/server/tools/workspace_search.go
+++ b/server/tools/workspace_search.go
@@ -7,9 +7,9 @@ import (
 	"path/filepath"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/knowledge"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/knowledge"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── workspace_search ────────────────────────
diff --git a/server/treepath/path.go b/server/treepath/path.go
index 206fe28..c39dfbb 100644
--- a/server/treepath/path.go
+++ b/server/treepath/path.go
@@ -10,7 +10,7 @@ import (
 	"context"
 	"encoding/json"
 
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/store"
 )
 
 // Stores is set at startup by main.go. All tree operations delegate here.
diff --git a/server/workspace/archive.go b/server/workspace/archive.go
index 8d5a7f0..ce41e0c 100644
--- a/server/workspace/archive.go
+++ b/server/workspace/archive.go
@@ -14,7 +14,7 @@ import (
 	"path/filepath"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // ── Archive Configuration ───────────────────
diff --git a/server/workspace/fs.go b/server/workspace/fs.go
index 43e7cd4..9e60e8c 100644
--- a/server/workspace/fs.go
+++ b/server/workspace/fs.go
@@ -18,8 +18,8 @@ import (
 	"path/filepath"
 	"strings"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // ── Configuration ───────────────────────────
diff --git a/server/workspace/fs_test.go b/server/workspace/fs_test.go
index 5981a1a..3797852 100644
--- a/server/workspace/fs_test.go
+++ b/server/workspace/fs_test.go
@@ -8,7 +8,7 @@ import (
 	"testing"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"chat-switchboard/models"
 )
 
 // ── Path Cleaning Tests ─────────────────────
diff --git a/server/workspace/gitops.go b/server/workspace/gitops.go
index e6391aa..b88396c 100644
--- a/server/workspace/gitops.go
+++ b/server/workspace/gitops.go
@@ -14,9 +14,9 @@ import (
 	"strings"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/crypto"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/crypto"
+	"chat-switchboard/models"
+	"chat-switchboard/store"
 )
 
 // GitOps provides git operations for workspaces via exec.
diff --git a/server/workspace/indexer.go b/server/workspace/indexer.go
index 14d4142..52dd5fc 100644
--- a/server/workspace/indexer.go
+++ b/server/workspace/indexer.go
@@ -10,10 +10,10 @@ import (
 	"sync"
 	"time"
 
-	"git.gobha.me/xcaliber/chat-switchboard/knowledge"
-	"git.gobha.me/xcaliber/chat-switchboard/models"
-	"git.gobha.me/xcaliber/chat-switchboard/notifications"
-	"git.gobha.me/xcaliber/chat-switchboard/store"
+	"chat-switchboard/knowledge"
+	"chat-switchboard/models"
+	"chat-switchboard/notifications"
+	"chat-switchboard/store"
 )
 
 // ── Configuration ────────────────────────────