@agentvault/grok-bridge 0.4.18 → 0.4.19

package/dist/index.js

@@ -3398,7 +3398,10 @@ function buildLlmSpan(opts) {
     "gen_ai.request.model": opts.model,
     "gen_ai.usage.input_tokens": opts.tokensInput,
     "gen_ai.usage.output_tokens": opts.tokensOutput,
-    "gen_ai.operation.name": "chat"
+    "gen_ai.operation.name": "chat",
+    // AgentVault extensions the backend ledger reads (telemetry_service.py
+    // _fan_in_genai_ledger) — the same names the Hermes plugin sends.
+    "av.genai.latency_ms": opts.latencyMs
   };
   if (opts.provider !== void 0) {
     attributes["ai.agent.llm.provider"] = opts.provider;
@@ -3407,6 +3410,7 @@ function buildLlmSpan(opts) {
   if (opts.costUsd !== void 0) {
     attributes["ai.agent.llm.cost_usd"] = opts.costUsd;
     attributes["gen_ai.usage.cost_usd"] = opts.costUsd;
+    attributes["av.genai.cost_usd"] = opts.costUsd;
   }
   applySkillName(attributes, opts.skillName);
   const isError = opts.status === "error";
@@ -4018,6 +4022,9 @@ function spanToOtlp(span) {
   }
   return otlp;
 }
+function isRetryableStatus(status) {
+  return status >= 500 || status === 408 || status === 429;
+}
 async function generateBackupCode() {
   await libsodium_wrappers_default.ready;
   const bytes = libsodium_wrappers_default.randombytes_buf(13);
@@ -11662,11 +11669,11 @@ async function joinWithFirstMatchingKp(welcomeBytes, candidates) {
   return null;
 }
 function ownIdentity() {
-  const v2 = true ? "0.23.45" : FALLBACK;
+  const v2 = true ? "0.23.47" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildSha() {
-  const raw = true ? "af0ab83" : "";
+  const raw = true ? "f1debc4" : "";
   const cleaned = (raw ?? "").trim();
   return !cleaned || cleaned === "unknown" ? null : cleaned;
 }
@@ -12172,6 +12179,25 @@ async function runHistoryRecoveryCommand(input) {
   });
   output("Agent history recovery: configured");
 }
+function decisionReplyFromEnvelope(parsed) {
+  if (parsed === null || typeof parsed !== "object") return void 0;
+  const decision = parsed.decision;
+  if (decision === null || typeof decision !== "object") return void 0;
+  const d2 = decision;
+  if (typeof d2.decision_id !== "string" || d2.decision_id.length === 0) return void 0;
+  if (Array.isArray(d2.options)) return void 0;
+  const selected = typeof d2.selected_option_id === "string" ? d2.selected_option_id : void 0;
+  const action = typeof d2.action === "string" && ACTIONS.has(d2.action) ? d2.action : void 0;
+  if (selected === void 0 && action === void 0) return void 0;
+  const reply = { decision_id: d2.decision_id };
+  if (selected !== void 0) reply.selected_option_id = selected;
+  if (action !== void 0) reply.action = action;
+  if (typeof d2.resolved_at === "string") reply.resolved_at = d2.resolved_at;
+  if (typeof d2.defer_until === "string") reply.defer_until = d2.defer_until;
+  if (typeof d2.defer_reason === "string") reply.defer_reason = d2.defer_reason;
+  if (typeof d2.reason === "string") reply.reason = d2.reason;
+  return reply;
+}
 async function readBoundedRestoreJson(response, signal, checkpoint) {
   const contentLength = response.headers?.get("content-length");
   if (contentLength && /^\d+$/.test(contentLength)) {
@@ -17160,7 +17186,7 @@ function writeFromReadableStream(stream, writable) {
   }
   return writeFromReadableStreamDefaultReader(stream.getReader(), writable);
 }
-var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url2, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto4, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, U32_MASK64, _32n, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto2, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, init_transport2, A2ALogGate, init_a2a_log_gate, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE2, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, AGENT_EVENT_CANDIDATES, TRANSCRIPT_CANDIDATES, _heartbeatFn, _agentEventFn, _transcriptFn, init_openclaw_compat, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE3, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, NEVER, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, util_exports, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, Class, init_util2, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, regexes_exports, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, extendedDuration, guid, uuid, uuid4, uuid6, uuid7, email, html5Email, rfc5322Email, unicodeEmail, idnEmail, browserEmail, _emoji, ipv4, ipv6, mac, cidrv4, cidrv6, base64, base64url, hostname, domain, e164, dateSource, date, string, bigint, integer, number, boolean, _null, _undefined, lowercase, uppercase, hex, md5_hex, md5_base64, md5_base64url, sha1_hex, sha1_base64, sha1_base64url, sha256_hex, sha256_base64, sha256_base64url, sha384_hex, sha384_base64, sha384_base64url, sha512_hex, sha512_base64, sha512_base64url, init_regexes, $ZodCheck, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckBigIntFormat, $ZodCheckMaxSize, $ZodCheckMinSize, $ZodCheckSizeEquals, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckProperty, $ZodCheckMimeType, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, $ZodIPv6, $ZodMAC, $ZodCIDRv4, $ZodCIDRv6, $ZodBase64, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodCustomStringFormat, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodBigInt, $ZodBigIntFormat, $ZodSymbol, $ZodUndefined, $ZodNull, $ZodAny, $ZodUnknown, $ZodNever, $ZodVoid, $ZodDate, $ZodArray, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodXor, $ZodDiscriminatedUnion, $ZodIntersection, $ZodTuple, $ZodRecord, $ZodMap, $ZodSet, $ZodEnum, $ZodLiteral, $ZodFile, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodSuccess, $ZodCatch, $ZodNaN, $ZodPipe, $ZodCodec, $ZodReadonly, $ZodTemplateLiteral, $ZodFunction, $ZodPromise, $ZodLazy, $ZodCustom, init_schemas, init_ar, init_az, init_be, init_bg, init_ca, init_cs, init_da, init_de, error, init_en2, init_eo, init_es, init_fa, init_fi, init_fr, init_fr_CA, init_he, init_hu, init_hy, init_id, init_is, init_it, init_ja, init_ka, init_km, init_kh, init_ko, init_lt, init_mk, init_ms, init_nl, init_no, init_ota, init_ps, init_pl, init_pt, init_ru, init_sl, init_sv, init_ta, init_th, init_tr, init_uk, init_ua, init_ur, init_uz, init_vi, init_zh_CN, init_zh_TW, init_yo, init_locales, _a2, $ZodRegistry, globalRegistry, init_registries, init_api, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, formatMap, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, recordProcessor, nullableProcessor, nonoptionalProcessor, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema_generator, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, checks_exports2, init_checks3, iso_exports2, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, init_iso2, initializer2, ZodError2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, schemas_exports3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodMAC, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodCustomStringFormat, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodBigInt2, ZodBigIntFormat, ZodSymbol2, ZodUndefined2, ZodNull2, ZodAny2, ZodUnknown2, ZodNever2, ZodVoid2, ZodDate2, ZodArray2, ZodObject2, ZodUnion2, ZodXor, ZodDiscriminatedUnion2, ZodIntersection2, ZodTuple2, ZodRecord2, ZodMap2, ZodSet2, ZodEnum2, ZodLiteral2, ZodFile, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodSuccess, ZodCatch2, ZodNaN2, ZodPipe, ZodCodec, ZodReadonly2, ZodTemplateLiteral, ZodLazy2, ZodPromise2, ZodFunction2, ZodCustom, describe2, meta2, stringbool, init_schemas3, ZodFirstPartyTypeKind2, init_compat, z2, init_from_json_schema, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
+var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url2, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto4, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, U32_MASK64, _32n, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto2, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, init_transport2, A2ALogGate, init_a2a_log_gate, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE2, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, AGENT_EVENT_CANDIDATES, TRANSCRIPT_CANDIDATES, _heartbeatFn, _agentEventFn, _transcriptFn, init_openclaw_compat, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE3, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, NEVER, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, util_exports, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, Class, init_util2, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, regexes_exports, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, extendedDuration, guid, uuid, uuid4, uuid6, uuid7, email, html5Email, rfc5322Email, unicodeEmail, idnEmail, browserEmail, _emoji, ipv4, ipv6, mac, cidrv4, cidrv6, base64, base64url, hostname, domain, e164, dateSource, date, string, bigint, integer, number, boolean, _null, _undefined, lowercase, uppercase, hex, md5_hex, md5_base64, md5_base64url, sha1_hex, sha1_base64, sha1_base64url, sha256_hex, sha256_base64, sha256_base64url, sha384_hex, sha384_base64, sha384_base64url, sha512_hex, sha512_base64, sha512_base64url, init_regexes, $ZodCheck, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckBigIntFormat, $ZodCheckMaxSize, $ZodCheckMinSize, $ZodCheckSizeEquals, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckProperty, $ZodCheckMimeType, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, $ZodIPv6, $ZodMAC, $ZodCIDRv4, $ZodCIDRv6, $ZodBase64, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodCustomStringFormat, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodBigInt, $ZodBigIntFormat, $ZodSymbol, $ZodUndefined, $ZodNull, $ZodAny, $ZodUnknown, $ZodNever, $ZodVoid, $ZodDate, $ZodArray, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodXor, $ZodDiscriminatedUnion, $ZodIntersection, $ZodTuple, $ZodRecord, $ZodMap, $ZodSet, $ZodEnum, $ZodLiteral, $ZodFile, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodSuccess, $ZodCatch, $ZodNaN, $ZodPipe, $ZodCodec, $ZodReadonly, $ZodTemplateLiteral, $ZodFunction, $ZodPromise, $ZodLazy, $ZodCustom, init_schemas, init_ar, init_az, init_be, init_bg, init_ca, init_cs, init_da, init_de, error, init_en2, init_eo, init_es, init_fa, init_fi, init_fr, init_fr_CA, init_he, init_hu, init_hy, init_id, init_is, init_it, init_ja, init_ka, init_km, init_kh, init_ko, init_lt, init_mk, init_ms, init_nl, init_no, init_ota, init_ps, init_pl, init_pt, init_ru, init_sl, init_sv, init_ta, init_th, init_tr, init_uk, init_ua, init_ur, init_uz, init_vi, init_zh_CN, init_zh_TW, init_yo, init_locales, _a2, $ZodRegistry, globalRegistry, init_registries, init_api, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, formatMap, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, recordProcessor, nullableProcessor, nonoptionalProcessor, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema_generator, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, checks_exports2, init_checks3, iso_exports2, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, init_iso2, initializer2, ZodError2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, schemas_exports3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodMAC, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodCustomStringFormat, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodBigInt2, ZodBigIntFormat, ZodSymbol2, ZodUndefined2, ZodNull2, ZodAny2, ZodUnknown2, ZodNever2, ZodVoid2, ZodDate2, ZodArray2, ZodObject2, ZodUnion2, ZodXor, ZodDiscriminatedUnion2, ZodIntersection2, ZodTuple2, ZodRecord2, ZodMap2, ZodSet2, ZodEnum2, ZodLiteral2, ZodFile, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodSuccess, ZodCatch2, ZodNaN2, ZodPipe, ZodCodec, ZodReadonly2, ZodTemplateLiteral, ZodLazy2, ZodPromise2, ZodFunction2, ZodCustom, describe2, meta2, stringbool, init_schemas3, ZodFirstPartyTypeKind2, init_compat, z2, init_from_json_schema, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
 var init_dist = __esm({
   async "../plugin/dist/index.js"() {
     "use strict";
@@ -59983,7 +60009,11 @@ var init_dist = __esm({
           _agentName;
           _agentVersion;
           _pluginVersion;
+          _maxRetries;
+          _maxBufferedSpans;
           _buffer = [];
+          /** Failed send attempts per buffered span. */
+          _attempts = /* @__PURE__ */ new WeakMap();
           _timer = null;
           constructor(config2) {
             this._apiBase = config2.apiBase.replace(/\/+$/, "");
@@ -59993,6 +60023,8 @@ var init_dist = __esm({
             this._agentName = config2.agentName ?? "unknown";
             this._agentVersion = config2.agentVersion ?? "0.0.0";
             this._pluginVersion = config2.pluginVersion ?? "0.0.0";
+            this._maxRetries = Math.max(1, config2.maxRetries ?? 5);
+            this._maxBufferedSpans = Math.max(1, config2.maxBufferedSpans ?? 1e3);
           }
           /** Number of spans waiting to be flushed. */
           get pendingCount() {
@@ -60040,7 +60072,9 @@ var init_dist = __esm({
            * POST all buffered spans to the backend ingest endpoint.
            *
            * - On success (HTTP 2xx): clears the buffer.
-           * - On failure: keeps spans in the buffer for retry.
+           * - On a retryable failure (network, 5xx, 408, 429): keeps spans for retry,
+           *   bounded by `maxRetries` per span and `maxBufferedSpans` overall.
+           * - On any other 4xx: drops the batch (it can never be accepted).
            * - Never throws — telemetry is best-effort.
            */
           async flush() {
@@ -60069,13 +60103,23 @@ var init_dist = __esm({
                   spans: spans.map(spanToOtlp)
                 })
               });
-              if (!response.ok) {
-                this._buffer = spans.concat(this._buffer);
+              if (!response.ok && isRetryableStatus(response.status)) {
+                this._requeue(spans);
               }
             } catch {
-              this._buffer = spans.concat(this._buffer);
+              this._requeue(spans);
             }
           }
+          /** Put a failed batch back in front of newer spans, within both caps. */
+          _requeue(spans) {
+            const retained = spans.filter((span) => {
+              const attempts = (this._attempts.get(span) ?? 0) + 1;
+              this._attempts.set(span, attempts);
+              return attempts < this._maxRetries;
+            });
+            const merged = retained.concat(this._buffer);
+            this._buffer = merged.length > this._maxBufferedSpans ? merged.slice(merged.length - this._maxBufferedSpans) : merged;
+          }
           // -- Auto-flush -------------------------------------------------------------
           /**
            * Start a periodic flush timer.
@@ -69597,6 +69641,12 @@ var init_dist = __esm({
         };
       }
     });
+    init_decision_reply = __esm2({
+      "src/decision-reply.ts"() {
+        "use strict";
+        ACTIONS = /* @__PURE__ */ new Set(["approve", "deny", "defer", "cancel"]);
+      }
+    });
     history_backup_client_exports = {};
     __export2(history_backup_client_exports, {
       HISTORY_RESTORE_RESPONSE_MAX_BYTES: () => HISTORY_RESTORE_RESPONSE_MAX_BYTES,
@@ -69940,6 +69990,7 @@ var init_dist = __esm({
         init_mls_membership_probe();
         init_history_backup_scheduler();
         await init_history_recovery_code();
+        init_decision_reply();
         ROOM_AGENT_TYPES = /* @__PURE__ */ new Set([
           "message",
           "text",
@@ -70225,9 +70276,12 @@ ${text}`;
           // Reset at the start of every `_connect`.
           _authFailedThisSession = false;
           // Last observed WebSocket close code, captured by the ws.on("close", ...)
-          // handler. Used by the rapid-disconnect classifier to surface
-          // server-driven "session_replaced" events (close codes 4000 / 4001).
+          // handler. Used by the rapid-disconnect classifier: 4001 = server rejected
+          // the credentials (auth_failed); 4000 = reserved "session_replaced".
           _lastCloseCode = null;
+          // True while a once("ready") listener is waiting to honour config.httpPort,
+          // so repeated start() calls do not stack listeners.
+          _httpPortListenerArmed = false;
           // Liveness detection: server sends app-level {"event":"ping"} every 30s.
           // We check every 30s; if no data received in 90s (3 missed pings), connection is dead.
           static PING_INTERVAL_MS = 3e4;
@@ -70529,10 +70583,19 @@ ${text}`;
           async start() {
             await this._stateSaveQueue;
             this._stopped = false;
+            this._clearSuspendedWait();
             this._lifecycleGeneration += 1;
             this._historyBackupScheduler.stop();
             this._historyBackupScheduler = this._createHistoryBackupScheduler();
             await libsodium_wrappers_default.ready;
+            const httpPort = this.config.httpPort;
+            if (typeof httpPort === "number" && !this._httpPortListenerArmed) {
+              this._httpPortListenerArmed = true;
+              this.once("ready", () => {
+                this._httpPortListenerArmed = false;
+                if (!this._stopped) this.startHttpServer(httpPort);
+              });
+            }
             if (this._forceReEnroll) {
               console.log("[SecureChannel] forceReEnroll set \u2014 clearing cached credentials, will enroll fresh");
               await clearState(this.config.dataDir);
@@ -70875,7 +70938,24 @@ ${text}`;
                 salt = libsodium_wrappers_default.randombytes_buf(16);
               }
               checkpoint();
-              const archive = buildHistoryArchive(state.hubId, state.messageHistory ?? []);
+              const history = state.messageHistory ?? [];
+              if (!Array.isArray(history)) throw new Error("entries must be an array");
+              const snapshotEntries = /* @__PURE__ */ new Map();
+              for (let index = 0; index < history.length; index += 1) {
+                if (!(index in history)) throw new Error("entries must not be sparse");
+                const entry = history[index];
+                const legacyId = legacyHistoryEntryId(entry);
+                const id = entry.id ?? legacyId;
+                const previous = snapshotEntries.get(id);
+                if (previous) {
+                  if (previous.sender !== entry.sender || previous.text !== entry.text || previous.ts !== entry.ts || previous.topicId !== entry.topicId) {
+                    throw new Error("History archive contains duplicate entry IDs");
+                  }
+                  continue;
+                }
+                snapshotEntries.set(id, { ...entry, id });
+              }
+              const archive = buildHistoryArchive(state.hubId, [...snapshotEntries.values()]);
               const requestedSaltHex = Buffer.from(salt).toString("hex");
               const cacheIdentity = `${state.hubId}:${codeHashHex}:${requestedSaltHex}`;
               checkpoint();
@@ -71605,7 +71685,7 @@ ${text}`;
            */
           sendActivitySpan(spanData) {
             if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-            const pluginVersion = true ? "0.23.45" : "0.0.0-dev";
+            const pluginVersion = true ? "0.23.47" : "0.0.0-dev";
             const agentName = this.config.agentName ?? "Agent";
             const resource = {
               "service.name": "agentvault-agent",
@@ -71684,16 +71764,27 @@ ${text}`;
           }
           /**
            * Wait for a decision response matching the given decisionId.
-           * Listens on the "message" event for messages where
-           * metadata.messageType === "decision_response" and the parsed plaintext
-           * contains a matching decision.decision_id.
+           * Listens on the "message" event. Resolves when either:
+           *   - metadata.decision carries an answer for this decisionId — what every
+           *     receive path now lifts out of the app's envelope (an option selected,
+           *     or action "defer" / "cancel"); or
+           *   - legacy: metadata.messageType === "decision_response" and the
+           *     plaintext is the JSON envelope with a matching decision.decision_id.
            * Optional timeout rejects with an Error.
            */
           waitForDecision(decisionId, timeoutMs) {
             return new Promise((resolve4, reject) => {
               let timer = null;
               const handler = (plaintext, metadata) => {
-                if (metadata.messageType !== "decision_response") return;
+                if (metadata?.roomId) return;
+                const reply = metadata?.decision;
+                if (reply && reply.decision_id === decisionId) {
+                  if (timer) clearTimeout(timer);
+                  this.removeListener("message", handler);
+                  resolve4(reply);
+                  return;
+                }
+                if (metadata?.messageType !== "decision_response") return;
                 try {
                   const parsed = JSON.parse(plaintext);
                   if (parsed.decision?.decision_id === decisionId) {
@@ -72692,6 +72783,7 @@ ${text}`;
               clearTimeout(this._reconnectTimer);
               this._reconnectTimer = null;
             }
+            this._clearSuspendedWait();
             if (this._telemetryReporter) {
               this._telemetryReporter.stopAutoFlush();
               await this._telemetryReporter.flush();
@@ -72805,7 +72897,12 @@ ${text}`;
                 res.end(JSON.stringify({ ok: false, error: "Not found. Use POST /send, POST /decision, POST /action, GET /status, GET /targets, or /mcp" }));
               }
             });
-            this._httpServer.listen(port, "127.0.0.1", () => {
+            const server = this._httpServer;
+            server.on("error", (err) => {
+              console.error(`[SecureChannel] local HTTP server on 127.0.0.1:${port} failed: ${err.message}`);
+              if (this._httpServer === server) this._httpServer = null;
+            });
+            server.listen(port, "127.0.0.1", () => {
               this.emit("http-ready", port);
             });
           }
@@ -73345,8 +73442,13 @@ ${text}`;
                 this.config.platform,
                 this.config.expectedFramework
               );
+              if (result.fingerprint && result.fingerprint !== fingerprint) {
+                throw new Error(
+                  `Enrollment fingerprint mismatch: this agent's key is ${fingerprint} but the server reported ${result.fingerprint}. Not continuing \u2014 do not approve this device.`
+                );
+              }
               this._deviceId = result.device_id;
-              this._fingerprint = result.fingerprint;
+              this._fingerprint = fingerprint;
               this._persisted = {
                 deviceId: result.device_id,
                 deviceJwt: "",
@@ -73363,7 +73465,7 @@ ${text}`;
                   publicKey: bytesToHex2(ephemeral.publicKey),
                   privateKey: bytesToHex2(ephemeral.privateKey)
                 },
-                fingerprint: result.fingerprint,
+                fingerprint,
                 messageHistory: []
               };
               this._poll();
@@ -73578,7 +73680,7 @@ ${text}`;
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.45" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.47" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -73663,6 +73765,10 @@ ${text}`;
                   await this._handleDeviceRevoked();
                   return;
                 }
+                if (data.event === "device_suspended") {
+                  await this._handleDeviceSuspended();
+                  return;
+                }
                 if (data.event === "connection_rejected") {
                   await this._handleConnectionRejected(data);
                   return;
@@ -73902,7 +74008,7 @@ ${text}`;
                         agentVersion: this.config.agentVersion ?? "0.0.0",
                         // __AV_VERSION__ is injected by esbuild from package.json at build time.
                         // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                        pluginVersion: true ? "0.23.45" : "0.0.0-dev"
+                        pluginVersion: true ? "0.23.47" : "0.0.0-dev"
                       });
                       this._telemetryReporter.startAutoFlush(3e4);
                     }
@@ -74354,12 +74460,15 @@ ${text}`;
               let messageType = "text";
               let topicId = data.topic_id;
               let mlsAttachment = null;
+              let decisionReply;
               try {
                 const parsed = JSON.parse(plaintext);
                 text = envelopeText(parsed, plaintext);
                 messageType = parsed.type ?? "text";
                 topicId = parsed.topicId ?? topicId;
                 if (parsed.attachment) mlsAttachment = parsed.attachment;
+                decisionReply = decisionReplyFromEnvelope(parsed);
+                if (decisionReply) messageType = "decision_response";
               } catch {
               }
               if (messageType === "history_catchup_request") {
@@ -74441,7 +74550,8 @@ ${text}`;
                 // material (MLS 1to1-group map, or a Double Ratchet session), NOT merely
                 // that a roomId was absent. The bridge's full-access DM lane requires it.
                 ownerDm1to1: true,
-                messageType
+                messageType,
+                ...decisionReply ? { decision: decisionReply } : {}
               };
               this.emit("message", text, metadata);
               if (this.config.onMessage) {
@@ -74551,6 +74661,7 @@ ${text}`;
             let messageText;
             let messageType;
             let attachmentInfo = null;
+            let decisionReply;
             try {
               const parsed = JSON.parse(plaintext);
               messageType = parsed.type || "message";
@@ -74558,6 +74669,7 @@ ${text}`;
               if (parsed.attachment) {
                 attachmentInfo = parsed.attachment;
               }
+              decisionReply = decisionReplyFromEnvelope(parsed);
             } catch {
               messageType = "message";
               messageText = plaintext;
@@ -74610,7 +74722,7 @@ ${text}`;
                 return;
               }
             }
-            if (messageType === "message") {
+            if (messageType === "message" || messageType === "decision_response" && decisionReply) {
               const topicId = msgData.topic_id;
               this._lastIncomingTopicId = topicId;
               let attachData;
@@ -74672,10 +74784,12 @@ ${messageText}`;
                 attachment: attachData,
                 spanId: msgData.span_id,
                 parentSpanId: msgData.parent_span_id,
-                messageType: msgData.message_type ?? "text",
+                // A decision answer only counts from the owner's 1:1 — never a room.
+                messageType: decisionReply && !roomId ? "decision_response" : msgData.message_type ?? "text",
                 priority: msgData.priority ?? "normal",
                 envelopeVersion: msgData.envelope_version ?? "1.0.0",
                 roomId,
+                ...decisionReply && !roomId ? { decision: decisionReply } : {},
                 // #1223 — the pre-fold text. This DR `message` path also sets `roomId`
                 // and folds an attachment into `emitText`, so without this a room
                 // message that reaches the gate here would fall back to the folded
@@ -77325,10 +77439,12 @@ ${baseText}`;
                   }
                   let messageText;
                   let messageType;
+                  let decisionReply;
                   try {
                     const parsed = JSON.parse(plaintext);
                     messageType = parsed.type || "message";
                     messageText = envelopeText(parsed, plaintext);
+                    decisionReply = decisionReplyFromEnvelope(parsed);
                   } catch {
                     messageType = "message";
                     messageText = plaintext;
@@ -77340,7 +77456,7 @@ ${baseText}`;
                     ackedIds.push(msg.queue_id);
                     continue;
                   }
-                  if (messageType === "message") {
+                  if (messageType === "message" || messageType === "decision_response" && decisionReply) {
                     const topicId = msg.topic_id;
                     await this._appendHistory("owner", messageText, this._historyContext("dm", topicId), msg.created_at, msg.message_id);
                     const metadata = {
@@ -77351,7 +77467,8 @@ ${baseText}`;
                       // #621: positive attestation that this decrypted under the OWNER'S 1:1
                       // material (MLS 1to1-group map, or a Double Ratchet session), NOT merely
                       // that a roomId was absent. The bridge's full-access DM lane requires it.
-                      ownerDm1to1: true
+                      ownerDm1to1: true,
+                      ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                     };
                     this.emit("message", messageText, metadata);
                     Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
@@ -77935,15 +78052,17 @@ ${baseText}`;
                     }
                     let messageText;
                     let messageType;
+                    let decisionReply;
                     try {
                       const parsed = JSON.parse(plaintext);
                       messageType = parsed.type || "message";
                       messageText = envelopeText(parsed, plaintext);
+                      decisionReply = decisionReplyFromEnvelope(parsed);
                     } catch {
                       messageType = "message";
                       messageText = plaintext;
                     }
-                    if (messageType === "message") {
+                    if (messageType === "message" || messageType === "decision_response" && decisionReply) {
                       const topicId = msg.topic_id;
                       await this._appendHistory("owner", messageText, this._historyContext("dm", topicId), msg.created_at, msg.id);
                       const metadata = {
@@ -77954,7 +78073,8 @@ ${baseText}`;
                         // #621: positive attestation that this decrypted under the OWNER'S 1:1
                         // material (MLS 1to1-group map, or a Double Ratchet session), NOT merely
                         // that a roomId was absent. The bridge's full-access DM lane requires it.
-                        ownerDm1to1: true
+                        ownerDm1to1: true,
+                        ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                       };
                       this.emit("message", messageText, metadata);
                       Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
@@ -78130,6 +78250,7 @@ ${baseText}`;
           }
           _scheduleReconnect() {
             if (this._stopped) return;
+            if (this._suspended) return;
             if (this._reconnectTimer) return;
             const sinceOpen = Date.now() - this._lastWsOpenTime;
             if (this._lastWsOpenTime > 0 && sinceOpen < 1e4) {
@@ -78150,7 +78271,16 @@ ${baseText}`;
                 return;
               }
               const lastCode = this._lastCloseCode;
-              if (lastCode === 4e3 || lastCode === 4001) {
+              if (lastCode === 4001) {
+                console.log(
+                  "[SecureChannel] Server rejected our credentials on every reconnect (close code 4001). Stopping; the device needs re-enrolling or a fresh token."
+                );
+                this._authFailedThisSession = true;
+                this._setState("error");
+                this.emit("auth_failed", { reason: "ws_auth_rejected" });
+                return;
+              }
+              if (lastCode === 4e3) {
                 console.log(
                   `[SecureChannel] Server reports our session was replaced by a newer one (close code ${lastCode}). Stopping reconnect.`
                 );
@@ -78242,15 +78372,17 @@ ${baseText}`;
                     }
                     let messageText;
                     let messageType;
+                    let decisionReply;
                     try {
                       const parsed = JSON.parse(plaintext);
                       messageType = parsed.type || "message";
                       messageText = envelopeText(parsed, plaintext);
+                      decisionReply = decisionReplyFromEnvelope(parsed);
                     } catch {
                       messageType = "message";
                       messageText = plaintext;
                     }
-                    if (messageType === "message") {
+                    if (messageType === "message" || messageType === "decision_response" && decisionReply) {
                       const topicId = msg.topic_id;
                       await this._appendHistory("owner", messageText, this._historyContext("dm", topicId), msg.created_at, msg.id);
                       const metadata = {
@@ -78261,7 +78393,8 @@ ${baseText}`;
                         // #621: positive attestation that this decrypted under the OWNER'S 1:1
                         // material (MLS 1to1-group map, or a Double Ratchet session), NOT merely
                         // that a roomId was absent. The bridge's full-access DM lane requires it.
-                        ownerDm1to1: true
+                        ownerDm1to1: true,
+                        ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                       };
                       this.emit("message", messageText, metadata);
                       Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
@@ -78350,6 +78483,10 @@ ${baseText}`;
            * `retryable` rejection is transient — fall through to a normal reconnect.
            */
           async _handleConnectionRejected(data) {
+            if (data?.reason === "device_suspended") {
+              this._enterSuspendedWait("connection_rejected");
+              return;
+            }
             if (data?.retryable === true) {
               this._scheduleReconnect();
               return;
@@ -78361,6 +78498,79 @@ ${baseText}`;
             );
             this.emit("auth_failed", { reason: authReason });
           }
+          // --- Owner pause (device SUSPENDED) — NON-final ---------------------------
+          //
+          // Suspension is reversible ("Agent active" off/on in the app). While
+          // suspended the server will not serve this device (it rejects the handshake
+          // with a retryable `device_suspended`), so reconnecting is pointless and,
+          // through the rapid-disconnect classifier, used to end in a terminal error.
+          // Instead: stay in "disconnected", poll the public status endpoint, and
+          // reconnect as soon as the device is ACTIVE again. REVOKED ends the wait as
+          // terminal; anything inconclusive (rate limit, network) keeps waiting.
+          static SUSPENDED_POLL_MS = 3e4;
+          _suspended = false;
+          _suspendedPollTimer = null;
+          /** Handle a WS `device_suspended` frame (owner paused this agent). */
+          async _handleDeviceSuspended() {
+            this._enterSuspendedWait("device_suspended");
+          }
+          _enterSuspendedWait(source) {
+            if (this._stopped) return;
+            if (this._reconnectTimer) {
+              clearTimeout(this._reconnectTimer);
+              this._reconnectTimer = null;
+            }
+            this._rapidDisconnects = 0;
+            if (!this._suspended) {
+              this._suspended = true;
+              console.log(
+                `[SecureChannel] Agent paused by its owner (${source}) \u2014 idling; will reconnect when resumed`
+              );
+              this._setState("disconnected");
+              this.emit("suspended", { source });
+            }
+            this._scheduleSuspendedPoll();
+          }
+          _scheduleSuspendedPoll() {
+            if (this._stopped || !this._suspended || this._suspendedPollTimer) return;
+            this._suspendedPollTimer = setTimeout(() => {
+              this._suspendedPollTimer = null;
+              void this._pollWhileSuspended();
+            }, _SecureChannel.SUSPENDED_POLL_MS);
+          }
+          _clearSuspendedWait() {
+            this._suspended = false;
+            if (this._suspendedPollTimer) {
+              clearTimeout(this._suspendedPollTimer);
+              this._suspendedPollTimer = null;
+            }
+          }
+          async _pollWhileSuspended() {
+            if (this._stopped || !this._suspended) return;
+            const deviceId = this._deviceId ?? this._persisted?.deviceId;
+            if (deviceId) {
+              try {
+                const st = await pollDeviceStatus(this.config.apiUrl, deviceId);
+                if (this._stopped || !this._suspended) return;
+                if (!st.rateLimited && (st.status === "ACTIVE" || st.status === "APPROVED")) {
+                  this._clearSuspendedWait();
+                  this._reconnectAttempt = 0;
+                  console.log("[SecureChannel] Agent resumed by its owner \u2014 reconnecting");
+                  this.emit("resumed");
+                  this._connect();
+                  return;
+                }
+                if (!st.rateLimited && st.status === "REVOKED") {
+                  this._clearSuspendedWait();
+                  this._handleError(new Error("Device was revoked"));
+                  return;
+                }
+              } catch (err) {
+                console.warn("[SecureChannel] status check while paused failed; still waiting:", err);
+              }
+            }
+            this._scheduleSuspendedPoll();
+          }
           async _handleDeviceRevoked() {
             const now = Date.now();
             this._revokeRecoveries = this._revokeRecoveries.filter(
@@ -78381,6 +78591,10 @@ ${baseText}`;
             let reconnect;
             try {
               const status = await pollDeviceStatus(this.config.apiUrl, deviceId);
+              if (status.status === "SUSPENDED") {
+                this._enterSuspendedWait("device_revoked");
+                return;
+              }
               reconnect = status.rateLimited === true || status.status === "ACTIVE";
               if (!reconnect) {
                 console.warn(
@@ -78462,7 +78676,7 @@ ${baseText}`;
             label: "AgentVault",
             selectionLabel: "AgentVault (E2E Encrypted)",
             docsPath: "https://agentvault.chat/docs",
-            blurb: "Zero-knowledge, end-to-end encrypted messaging between owners and their AI agents.",
+            blurb: "End-to-end encrypted messaging between owners and their AI agents.",
             aliases: ["av", "agent-vault"]
           },
           capabilities: {
@@ -78661,9 +78875,540 @@ ${actionsText}`);
         "use strict";
       }
     });
+    init_llm_pricing_openrouter = __esm2({
+      "src/llm-pricing-openrouter.ts"() {
+        "use strict";
+        OPENROUTER_PRICING = {
+          anthropic: {
+            "claude-fable-5": { inputPerMtoken: 10, outputPerMtoken: 50 },
+            "claude-fable-5-1": { inputPerMtoken: 10, outputPerMtoken: 50 },
+            "claude-haiku-4-5": { inputPerMtoken: 1, outputPerMtoken: 5 },
+            "claude-haiku-5-5": { inputPerMtoken: 0.1, outputPerMtoken: 0.5 },
+            "claude-opus-4-1": { inputPerMtoken: 15, outputPerMtoken: 75 },
+            "claude-opus-4-5": { inputPerMtoken: 5, outputPerMtoken: 25 },
+            "claude-opus-4-6": { inputPerMtoken: 5, outputPerMtoken: 25 },
+            "claude-opus-4-7": { inputPerMtoken: 5, outputPerMtoken: 25 },
+            "claude-opus-4-8": { inputPerMtoken: 5, outputPerMtoken: 25 },
+            "claude-opus-5": { inputPerMtoken: 5, outputPerMtoken: 25 },
+            "claude-opus-5-5": { inputPerMtoken: 4, outputPerMtoken: 20 },
+            "claude-sonnet-4": { inputPerMtoken: 3, outputPerMtoken: 15 },
+            "claude-sonnet-4-5": { inputPerMtoken: 3, outputPerMtoken: 15 },
+            "claude-sonnet-4-6": { inputPerMtoken: 3, outputPerMtoken: 15 },
+            "claude-sonnet-5": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "claude-sonnet-5-5": { inputPerMtoken: 2, outputPerMtoken: 10 }
+          },
+          openai: {
+            "gpt-3.5-turbo": { inputPerMtoken: 0.5, outputPerMtoken: 1.5 },
+            "gpt-3.5-turbo-0613": { inputPerMtoken: 1, outputPerMtoken: 2 },
+            "gpt-3.5-turbo-16k": { inputPerMtoken: 3, outputPerMtoken: 4 },
+            "gpt-3.5-turbo-instruct": { inputPerMtoken: 1.5, outputPerMtoken: 2 },
+            "gpt-4": { inputPerMtoken: 30, outputPerMtoken: 60 },
+            "gpt-4-turbo": { inputPerMtoken: 10, outputPerMtoken: 30 },
+            "gpt-4.1": { inputPerMtoken: 2, outputPerMtoken: 8 },
+            "gpt-4.1-mini": { inputPerMtoken: 0.4, outputPerMtoken: 1.6 },
+            "gpt-4.1-nano": { inputPerMtoken: 0.1, outputPerMtoken: 0.4 },
+            "gpt-4o": { inputPerMtoken: 2.5, outputPerMtoken: 10 },
+            "gpt-4o-2024-05-13": { inputPerMtoken: 5, outputPerMtoken: 15 },
+            "gpt-4o-2024-08-06": { inputPerMtoken: 2.5, outputPerMtoken: 10 },
+            "gpt-4o-2024-11-20": { inputPerMtoken: 2.5, outputPerMtoken: 10 },
+            "gpt-4o-mini": { inputPerMtoken: 0.15, outputPerMtoken: 0.6 },
+            "gpt-4o-mini-2024-07-18": { inputPerMtoken: 0.15, outputPerMtoken: 0.6 },
+            "gpt-5": { inputPerMtoken: 1.25, outputPerMtoken: 10 },
+            "gpt-5-image": { inputPerMtoken: 10, outputPerMtoken: 10 },
+            "gpt-5-image-mini": { inputPerMtoken: 2.5, outputPerMtoken: 2 },
+            "gpt-5-mini": { inputPerMtoken: 0.25, outputPerMtoken: 2 },
+            "gpt-5-nano": { inputPerMtoken: 0.05, outputPerMtoken: 0.4 },
+            "gpt-5-pro": { inputPerMtoken: 15, outputPerMtoken: 120 },
+            "gpt-5.1": { inputPerMtoken: 1.25, outputPerMtoken: 10 },
+            "gpt-5.1-codex": { inputPerMtoken: 1.25, outputPerMtoken: 10 },
+            "gpt-5.1-codex-max": { inputPerMtoken: 1.25, outputPerMtoken: 10 },
+            "gpt-5.1-codex-mini": { inputPerMtoken: 0.25, outputPerMtoken: 2 },
+            "gpt-5.2": { inputPerMtoken: 1.75, outputPerMtoken: 14 },
+            "gpt-5.2-chat": { inputPerMtoken: 1.75, outputPerMtoken: 14 },
+            "gpt-5.2-codex": { inputPerMtoken: 1.75, outputPerMtoken: 14 },
+            "gpt-5.2-pro": { inputPerMtoken: 21, outputPerMtoken: 168 },
+            "gpt-5.3-codex": { inputPerMtoken: 1.75, outputPerMtoken: 14 },
+            "gpt-5.4": { inputPerMtoken: 2.5, outputPerMtoken: 15 },
+            "gpt-5.4-image-2": { inputPerMtoken: 8, outputPerMtoken: 15 },
+            "gpt-5.4-mini": { inputPerMtoken: 0.75, outputPerMtoken: 4.5 },
+            "gpt-5.4-nano": { inputPerMtoken: 0.2, outputPerMtoken: 1.25 },
+            "gpt-5.4-pro": { inputPerMtoken: 30, outputPerMtoken: 180 },
+            "gpt-5.5": { inputPerMtoken: 5, outputPerMtoken: 30 },
+            "gpt-5.5-pro": { inputPerMtoken: 30, outputPerMtoken: 180 },
+            "gpt-5.6-luna": { inputPerMtoken: 0.2, outputPerMtoken: 1.2 },
+            "gpt-5.6-luna-pro": { inputPerMtoken: 0.2, outputPerMtoken: 1.2 },
+            "gpt-5.6-sol": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gpt-5.6-sol-pro": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gpt-5.6-terra": { inputPerMtoken: 2, outputPerMtoken: 12 },
+            "gpt-5.6-terra-pro": { inputPerMtoken: 2, outputPerMtoken: 12 },
+            "gpt-6-astra": { inputPerMtoken: 10, outputPerMtoken: 50 },
+            "gpt-6-astra-pro": { inputPerMtoken: 10, outputPerMtoken: 50 },
+            "gpt-6-luna": { inputPerMtoken: 0.1, outputPerMtoken: 0.5 },
+            "gpt-6-luna-pro": { inputPerMtoken: 0.1, outputPerMtoken: 0.5 },
+            "gpt-6-sol": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gpt-6-sol-pro": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gpt-6.1-sol": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gpt-6.1-sol-pro": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gpt-audio": { inputPerMtoken: 2.5, outputPerMtoken: 10 },
+            "gpt-audio-mini": { inputPerMtoken: 0.6, outputPerMtoken: 2.4 },
+            "gpt-chat-latest": { inputPerMtoken: 5, outputPerMtoken: 30 },
+            "gpt-oss-120b": { inputPerMtoken: 0.037, outputPerMtoken: 0.17 },
+            "gpt-oss-20b": { inputPerMtoken: 0.018, outputPerMtoken: 0.09 },
+            "gpt-oss-safeguard-20b": { inputPerMtoken: 0.075, outputPerMtoken: 0.3 },
+            "o1": { inputPerMtoken: 15, outputPerMtoken: 60 },
+            "o1-pro": { inputPerMtoken: 150, outputPerMtoken: 600 },
+            "o3": { inputPerMtoken: 2, outputPerMtoken: 8 },
+            "o3-mini": { inputPerMtoken: 1.1, outputPerMtoken: 4.4 },
+            "o3-mini-high": { inputPerMtoken: 1.1, outputPerMtoken: 4.4 },
+            "o3-pro": { inputPerMtoken: 20, outputPerMtoken: 80 },
+            "o4-mini": { inputPerMtoken: 1.1, outputPerMtoken: 4.4 },
+            "o4-mini-high": { inputPerMtoken: 1.1, outputPerMtoken: 4.4 }
+          },
+          openrouter: {
+            "aion-2.0": { inputPerMtoken: 0.8, outputPerMtoken: 1.6 },
+            "aion-3.0": { inputPerMtoken: 3, outputPerMtoken: 6 },
+            "aion-3.0-mini": { inputPerMtoken: 0.7, outputPerMtoken: 1.4 },
+            "aion-3.5": { inputPerMtoken: 3, outputPerMtoken: 6 },
+            "aion-3.5-mini": { inputPerMtoken: 0.7, outputPerMtoken: 1.4 },
+            "aion-rp-llama-3.1-8b": { inputPerMtoken: 0.8, outputPerMtoken: 1.6 },
+            "claude-fable-5": { inputPerMtoken: 10, outputPerMtoken: 50 },
+            "claude-fable-5.1": { inputPerMtoken: 10, outputPerMtoken: 50 },
+            "claude-fable-latest": { inputPerMtoken: 10, outputPerMtoken: 50 },
+            "claude-haiku-4.5": { inputPerMtoken: 1, outputPerMtoken: 5 },
+            "claude-haiku-5.5": { inputPerMtoken: 0.1, outputPerMtoken: 0.5 },
+            "claude-haiku-latest": { inputPerMtoken: 0.1, outputPerMtoken: 0.5 },
+            "claude-opus-4.1": { inputPerMtoken: 15, outputPerMtoken: 75 },
+            "claude-opus-4.5": { inputPerMtoken: 5, outputPerMtoken: 25 },
+            "claude-opus-4.6": { inputPerMtoken: 5, outputPerMtoken: 25 },
+            "claude-opus-4.7": { inputPerMtoken: 5, outputPerMtoken: 25 },
+            "claude-opus-4.8": { inputPerMtoken: 5, outputPerMtoken: 25 },
+            "claude-opus-5": { inputPerMtoken: 5, outputPerMtoken: 25 },
+            "claude-opus-5.5": { inputPerMtoken: 4, outputPerMtoken: 20 },
+            "claude-opus-latest": { inputPerMtoken: 4, outputPerMtoken: 20 },
+            "claude-sonnet-4": { inputPerMtoken: 3, outputPerMtoken: 15 },
+            "claude-sonnet-4.5": { inputPerMtoken: 3, outputPerMtoken: 15 },
+            "claude-sonnet-4.6": { inputPerMtoken: 3, outputPerMtoken: 15 },
+            "claude-sonnet-5": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "claude-sonnet-5.5": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "claude-sonnet-latest": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "codestral-2508": { inputPerMtoken: 0.3, outputPerMtoken: 0.9 },
+            "command-a": { inputPerMtoken: 2.5, outputPerMtoken: 10 },
+            "command-a-plus": { inputPerMtoken: 0.3, outputPerMtoken: 1.5 },
+            "command-r-08-2024": { inputPerMtoken: 0.15, outputPerMtoken: 0.6 },
+            "command-r-plus-08-2024": { inputPerMtoken: 2.5, outputPerMtoken: 10 },
+            "command-r7b-12-2024": { inputPerMtoken: 0.0375, outputPerMtoken: 0.15 },
+            "cydonia-24b-v4.1": { inputPerMtoken: 0.3, outputPerMtoken: 0.5 },
+            "deepseek-chat": { inputPerMtoken: 0.32, outputPerMtoken: 0.89 },
+            "deepseek-chat-v3-0324": { inputPerMtoken: 0.29, outputPerMtoken: 1.14 },
+            "deepseek-chat-v3.1": { inputPerMtoken: 0.25, outputPerMtoken: 0.95 },
+            "deepseek-flash-latest": { inputPerMtoken: 0.02016, outputPerMtoken: 0.891 },
+            "deepseek-pro-latest": { inputPerMtoken: 0.1461, outputPerMtoken: 8 },
+            "deepseek-r1": { inputPerMtoken: 0.7, outputPerMtoken: 2.5 },
+            "deepseek-r1-0528": { inputPerMtoken: 0.5, outputPerMtoken: 2.15 },
+            "deepseek-v3.1-terminus": { inputPerMtoken: 0.27, outputPerMtoken: 1 },
+            "deepseek-v3.2": { inputPerMtoken: 0.259, outputPerMtoken: 0.8 },
+            "deepseek-v3.2-exp": { inputPerMtoken: 0.27, outputPerMtoken: 0.41 },
+            "deepseek-v4-flash": { inputPerMtoken: 0.091, outputPerMtoken: 0.182 },
+            "deepseek-v4-flash-0731": { inputPerMtoken: 0.016, outputPerMtoken: 0.64 },
+            "deepseek-v4-flash-latest": { inputPerMtoken: 0.0144, outputPerMtoken: 0.576 },
+            "deepseek-v4-flash-vision-exp": { inputPerMtoken: 0.2156, outputPerMtoken: 0.6468 },
+            "deepseek-v4-pro": { inputPerMtoken: 0.430824, outputPerMtoken: 0.861648 },
+            "deepseek-v4-pro-0813": { inputPerMtoken: 0.66, outputPerMtoken: 1.98 },
+            "deepseek-v4.1-flash": { inputPerMtoken: 0.02016, outputPerMtoken: 0.891 },
+            "devstral-2512": { inputPerMtoken: 0.4, outputPerMtoken: 2 },
+            "dolphin-mistral-24b-venice-edition": { inputPerMtoken: 0.2, outputPerMtoken: 0.9 },
+            "dots-3-note-preview:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "ember-1": { inputPerMtoken: 3, outputPerMtoken: 15 },
+            "extract": { inputPerMtoken: 0.04, outputPerMtoken: 0 },
+            "free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "fugu-max": { inputPerMtoken: 2, outputPerMtoken: 6 },
+            "fugu-ultra": { inputPerMtoken: 5, outputPerMtoken: 30 },
+            "fugu-ultra-v2": { inputPerMtoken: 5, outputPerMtoken: 30 },
+            "gemini-2.5-flash": { inputPerMtoken: 0.3, outputPerMtoken: 2.5 },
+            "gemini-2.5-flash-image": { inputPerMtoken: 0.3, outputPerMtoken: 2.5 },
+            "gemini-2.5-flash-lite": { inputPerMtoken: 0.1, outputPerMtoken: 0.4 },
+            "gemini-2.5-pro": { inputPerMtoken: 1.25, outputPerMtoken: 10 },
+            "gemini-2.5-pro-preview": { inputPerMtoken: 1.25, outputPerMtoken: 10 },
+            "gemini-3-flash-preview": { inputPerMtoken: 0.5, outputPerMtoken: 3 },
+            "gemini-3-pro-image": { inputPerMtoken: 2, outputPerMtoken: 12 },
+            "gemini-3-pro-image-preview": { inputPerMtoken: 2, outputPerMtoken: 12 },
+            "gemini-3.1-flash-image": { inputPerMtoken: 0.5, outputPerMtoken: 3 },
+            "gemini-3.1-flash-image-preview": { inputPerMtoken: 0.5, outputPerMtoken: 3 },
+            "gemini-3.1-flash-lite": { inputPerMtoken: 0.25, outputPerMtoken: 1.5 },
+            "gemini-3.1-flash-lite-image": { inputPerMtoken: 0.25, outputPerMtoken: 1.5 },
+            "gemini-3.1-flash-lite-preview": { inputPerMtoken: 0.25, outputPerMtoken: 1.5 },
+            "gemini-3.1-pro-preview": { inputPerMtoken: 2, outputPerMtoken: 12 },
+            "gemini-3.1-pro-preview-customtools": { inputPerMtoken: 2, outputPerMtoken: 12 },
+            "gemini-3.5-flash": { inputPerMtoken: 1.5, outputPerMtoken: 9 },
+            "gemini-3.5-flash-lite": { inputPerMtoken: 0.3, outputPerMtoken: 2.5 },
+            "gemini-3.6-flash": { inputPerMtoken: 0.75, outputPerMtoken: 3.75 },
+            "gemini-3.7-flash": { inputPerMtoken: 0.75, outputPerMtoken: 3.75 },
+            "gemini-3.8-flash": { inputPerMtoken: 0.75, outputPerMtoken: 3.75 },
+            "gemini-4-argon": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gemini-flash-latest": { inputPerMtoken: 0.75, outputPerMtoken: 3.75 },
+            "gemini-nano-banana-2.1": { inputPerMtoken: 1.5, outputPerMtoken: 7.5 },
+            "gemini-pro-latest": { inputPerMtoken: 2, outputPerMtoken: 12 },
+            "gemma-2-27b-it": { inputPerMtoken: 0.65, outputPerMtoken: 0.65 },
+            "gemma-3-12b-it": { inputPerMtoken: 0.05, outputPerMtoken: 0.15 },
+            "gemma-3-27b-it": { inputPerMtoken: 0.08, outputPerMtoken: 0.45 },
+            "gemma-3-4b-it": { inputPerMtoken: 0.05, outputPerMtoken: 0.1 },
+            "gemma-4-26b-a4b-it": { inputPerMtoken: 0.09, outputPerMtoken: 0.3 },
+            "gemma-4-26b-a4b-it:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "gemma-4-31b-it": { inputPerMtoken: 0.09, outputPerMtoken: 0.34 },
+            "gemma-4-31b-it:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "glm-4.5": { inputPerMtoken: 0.6, outputPerMtoken: 2.2 },
+            "glm-4.5-air": { inputPerMtoken: 0.13, outputPerMtoken: 0.85 },
+            "glm-4.5v": { inputPerMtoken: 0.6, outputPerMtoken: 1.8 },
+            "glm-4.6": { inputPerMtoken: 0.5, outputPerMtoken: 2 },
+            "glm-4.6v": { inputPerMtoken: 0.3, outputPerMtoken: 0.9 },
+            "glm-4.7": { inputPerMtoken: 0.6, outputPerMtoken: 2.2 },
+            "glm-4.7-flash": { inputPerMtoken: 0.0605, outputPerMtoken: 0.4 },
+            "glm-5": { inputPerMtoken: 0.6, outputPerMtoken: 1.92 },
+            "glm-5-turbo": { inputPerMtoken: 1.2, outputPerMtoken: 4 },
+            "glm-5.1": { inputPerMtoken: 1.33, outputPerMtoken: 4.18 },
+            "glm-5.2": { inputPerMtoken: 0.05, outputPerMtoken: 7 },
+            "glm-5.3": { inputPerMtoken: 0.079, outputPerMtoken: 4.8 },
+            "glm-5.3-flash": { inputPerMtoken: 0.036, outputPerMtoken: 0.9 },
+            "glm-5.3-flashx": { inputPerMtoken: 0.37, outputPerMtoken: 1.25 },
+            "glm-5.3-prime": { inputPerMtoken: 2.8, outputPerMtoken: 8.8 },
+            "glm-5v-turbo": { inputPerMtoken: 1.2, outputPerMtoken: 4 },
+            "glm-flash-latest": { inputPerMtoken: 0.036, outputPerMtoken: 0.9 },
+            "glm-latest": { inputPerMtoken: 0.0576, outputPerMtoken: 4.4 },
+            "gpt-3.5-turbo": { inputPerMtoken: 0.5, outputPerMtoken: 1.5 },
+            "gpt-3.5-turbo-0613": { inputPerMtoken: 1, outputPerMtoken: 2 },
+            "gpt-3.5-turbo-16k": { inputPerMtoken: 3, outputPerMtoken: 4 },
+            "gpt-3.5-turbo-instruct": { inputPerMtoken: 1.5, outputPerMtoken: 2 },
+            "gpt-4": { inputPerMtoken: 30, outputPerMtoken: 60 },
+            "gpt-4-turbo": { inputPerMtoken: 10, outputPerMtoken: 30 },
+            "gpt-4.1": { inputPerMtoken: 2, outputPerMtoken: 8 },
+            "gpt-4.1-mini": { inputPerMtoken: 0.4, outputPerMtoken: 1.6 },
+            "gpt-4.1-nano": { inputPerMtoken: 0.1, outputPerMtoken: 0.4 },
+            "gpt-4o": { inputPerMtoken: 2.5, outputPerMtoken: 10 },
+            "gpt-4o-2024-05-13": { inputPerMtoken: 5, outputPerMtoken: 15 },
+            "gpt-4o-2024-08-06": { inputPerMtoken: 2.5, outputPerMtoken: 10 },
+            "gpt-4o-2024-11-20": { inputPerMtoken: 2.5, outputPerMtoken: 10 },
+            "gpt-4o-mini": { inputPerMtoken: 0.15, outputPerMtoken: 0.6 },
+            "gpt-4o-mini-2024-07-18": { inputPerMtoken: 0.15, outputPerMtoken: 0.6 },
+            "gpt-5": { inputPerMtoken: 1.25, outputPerMtoken: 10 },
+            "gpt-5-image": { inputPerMtoken: 10, outputPerMtoken: 10 },
+            "gpt-5-image-mini": { inputPerMtoken: 2.5, outputPerMtoken: 2 },
+            "gpt-5-mini": { inputPerMtoken: 0.25, outputPerMtoken: 2 },
+            "gpt-5-nano": { inputPerMtoken: 0.05, outputPerMtoken: 0.4 },
+            "gpt-5-pro": { inputPerMtoken: 15, outputPerMtoken: 120 },
+            "gpt-5.1": { inputPerMtoken: 1.25, outputPerMtoken: 10 },
+            "gpt-5.1-codex": { inputPerMtoken: 1.25, outputPerMtoken: 10 },
+            "gpt-5.1-codex-max": { inputPerMtoken: 1.25, outputPerMtoken: 10 },
+            "gpt-5.1-codex-mini": { inputPerMtoken: 0.25, outputPerMtoken: 2 },
+            "gpt-5.2": { inputPerMtoken: 1.75, outputPerMtoken: 14 },
+            "gpt-5.2-chat": { inputPerMtoken: 1.75, outputPerMtoken: 14 },
+            "gpt-5.2-codex": { inputPerMtoken: 1.75, outputPerMtoken: 14 },
+            "gpt-5.2-pro": { inputPerMtoken: 21, outputPerMtoken: 168 },
+            "gpt-5.3-codex": { inputPerMtoken: 1.75, outputPerMtoken: 14 },
+            "gpt-5.4": { inputPerMtoken: 2.5, outputPerMtoken: 15 },
+            "gpt-5.4-image-2": { inputPerMtoken: 8, outputPerMtoken: 15 },
+            "gpt-5.4-mini": { inputPerMtoken: 0.75, outputPerMtoken: 4.5 },
+            "gpt-5.4-nano": { inputPerMtoken: 0.2, outputPerMtoken: 1.25 },
+            "gpt-5.4-pro": { inputPerMtoken: 30, outputPerMtoken: 180 },
+            "gpt-5.5": { inputPerMtoken: 5, outputPerMtoken: 30 },
+            "gpt-5.5-pro": { inputPerMtoken: 30, outputPerMtoken: 180 },
+            "gpt-5.6-luna": { inputPerMtoken: 0.2, outputPerMtoken: 1.2 },
+            "gpt-5.6-luna-pro": { inputPerMtoken: 0.2, outputPerMtoken: 1.2 },
+            "gpt-5.6-sol": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gpt-5.6-sol-pro": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gpt-5.6-terra": { inputPerMtoken: 2, outputPerMtoken: 12 },
+            "gpt-5.6-terra-pro": { inputPerMtoken: 2, outputPerMtoken: 12 },
+            "gpt-6-astra": { inputPerMtoken: 10, outputPerMtoken: 50 },
+            "gpt-6-astra-pro": { inputPerMtoken: 10, outputPerMtoken: 50 },
+            "gpt-6-luna": { inputPerMtoken: 0.1, outputPerMtoken: 0.5 },
+            "gpt-6-luna-pro": { inputPerMtoken: 0.1, outputPerMtoken: 0.5 },
+            "gpt-6-sol": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gpt-6-sol-pro": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gpt-6.1-sol": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gpt-6.1-sol-pro": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gpt-astra-latest": { inputPerMtoken: 10, outputPerMtoken: 50 },
+            "gpt-audio": { inputPerMtoken: 2.5, outputPerMtoken: 10 },
+            "gpt-audio-mini": { inputPerMtoken: 0.6, outputPerMtoken: 2.4 },
+            "gpt-chat-latest": { inputPerMtoken: 5, outputPerMtoken: 30 },
+            "gpt-luna-latest": { inputPerMtoken: 0.1, outputPerMtoken: 0.5 },
+            "gpt-mini-latest": { inputPerMtoken: 0.75, outputPerMtoken: 4.5 },
+            "gpt-oss-120b": { inputPerMtoken: 0.037, outputPerMtoken: 0.17 },
+            "gpt-oss-20b": { inputPerMtoken: 0.018, outputPerMtoken: 0.09 },
+            "gpt-oss-safeguard-20b": { inputPerMtoken: 0.075, outputPerMtoken: 0.3 },
+            "gpt-sol-latest": { inputPerMtoken: 2, outputPerMtoken: 10 },
+            "gpt-terra-latest": { inputPerMtoken: 2, outputPerMtoken: 12 },
+            "granite-4.0-h-micro": { inputPerMtoken: 0.017, outputPerMtoken: 0.112 },
+            "granite-4.2-8b": { inputPerMtoken: 0.06, outputPerMtoken: 0.25 },
+            "grok-4.20": { inputPerMtoken: 1.25, outputPerMtoken: 2.5 },
+            "grok-4.20-multi-agent": { inputPerMtoken: 1.25, outputPerMtoken: 2.5 },
+            "grok-4.3": { inputPerMtoken: 1.25, outputPerMtoken: 2.5 },
+            "grok-4.5": { inputPerMtoken: 2, outputPerMtoken: 6 },
+            "grok-4.6": { inputPerMtoken: 2, outputPerMtoken: 6 },
+            "grok-4.7": { inputPerMtoken: 2, outputPerMtoken: 6 },
+            "grok-build-0.1": { inputPerMtoken: 1, outputPerMtoken: 2 },
+            "grok-latest": { inputPerMtoken: 2, outputPerMtoken: 6 },
+            "hermes-3-llama-3.1-405b": { inputPerMtoken: 1, outputPerMtoken: 1 },
+            "hermes-3-llama-3.1-70b": { inputPerMtoken: 0.7, outputPerMtoken: 0.7 },
+            "hermes-4-405b": { inputPerMtoken: 1, outputPerMtoken: 3 },
+            "hunyuan-a13b-instruct": { inputPerMtoken: 0.14, outputPerMtoken: 0.57 },
+            "hy-mt2-1.8b": { inputPerMtoken: 0.044, outputPerMtoken: 0.177 },
+            "hy-mt2-30b-a3b": { inputPerMtoken: 0.074, outputPerMtoken: 0.295 },
+            "hy-mt2-7b": { inputPerMtoken: 0.074, outputPerMtoken: 0.295 },
+            "hy3": { inputPerMtoken: 0.132, outputPerMtoken: 0.528 },
+            "hy3-preview": { inputPerMtoken: 0.18, outputPerMtoken: 0.6 },
+            "hy4-preview": { inputPerMtoken: 0.834, outputPerMtoken: 2.501 },
+            "inkling": { inputPerMtoken: 1, outputPerMtoken: 4.05 },
+            "inkling-small": { inputPerMtoken: 0.45, outputPerMtoken: 1.2 },
+            "inkling-small:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "inkling:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "kimi-k2": { inputPerMtoken: 0.57, outputPerMtoken: 2.3 },
+            "kimi-k2-0905": { inputPerMtoken: 0.6, outputPerMtoken: 2.5 },
+            "kimi-k2-thinking": { inputPerMtoken: 0.6, outputPerMtoken: 2.5 },
+            "kimi-k2.5": { inputPerMtoken: 0.5, outputPerMtoken: 2.5 },
+            "kimi-k2.6": { inputPerMtoken: 0.65, outputPerMtoken: 3.41 },
+            "kimi-k2.7-code": { inputPerMtoken: 0.6712, outputPerMtoken: 3.35 },
+            "kimi-k3": { inputPerMtoken: 0.7, outputPerMtoken: 15 },
+            "kimi-latest": { inputPerMtoken: 0.536, outputPerMtoken: 14 },
+            "l3-lunaris-8b": { inputPerMtoken: 0.04, outputPerMtoken: 0.05 },
+            "l3.1-euryale-70b": { inputPerMtoken: 0.85, outputPerMtoken: 0.85 },
+            "l3.3-euryale-70b": { inputPerMtoken: 0.65, outputPerMtoken: 0.75 },
+            "laguna-s-2.1": { inputPerMtoken: 0.09, outputPerMtoken: 0.18 },
+            "laguna-s-2.1:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "laguna-xs-2.1": { inputPerMtoken: 0.06, outputPerMtoken: 0.12 },
+            "laguna-xs-2.1:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "lfm-2.5-2.6b:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "lfm-2.5-24b-a2b": { inputPerMtoken: 0.05, outputPerMtoken: 0.7 },
+            "ling-3.0-flash": { inputPerMtoken: 0.021, outputPerMtoken: 0.063 },
+            "ling-3.0-flash-vl": { inputPerMtoken: 0.06, outputPerMtoken: 0.18 },
+            "ling-3.1-flash": { inputPerMtoken: 0.075, outputPerMtoken: 0.225 },
+            "llama-3.1-70b-instruct": { inputPerMtoken: 0.4, outputPerMtoken: 0.4 },
+            "llama-3.1-8b-instruct": { inputPerMtoken: 0.05, outputPerMtoken: 0.08 },
+            "llama-3.2-1b-instruct": { inputPerMtoken: 0.027, outputPerMtoken: 0.201 },
+            "llama-3.2-3b-instruct": { inputPerMtoken: 0.05, outputPerMtoken: 0.33 },
+            "llama-3.3-70b-instruct": { inputPerMtoken: 0.59, outputPerMtoken: 0.79 },
+            "llama-4-maverick": { inputPerMtoken: 0.1875, outputPerMtoken: 0.6525 },
+            "llama-4-scout": { inputPerMtoken: 0.18, outputPerMtoken: 0.59 },
+            "llama-guard-4-12b": { inputPerMtoken: 0.18, outputPerMtoken: 0.18 },
+            "longcat-2.0": { inputPerMtoken: 0.3, outputPerMtoken: 1.2 },
+            "lyria-3-clip-preview": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "lyria-3-pro-preview": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "magnum-v4-72b": { inputPerMtoken: 2.5, outputPerMtoken: 5 },
+            "mercury-2": { inputPerMtoken: 0.25, outputPerMtoken: 0.75 },
+            "mercury-2.5": { inputPerMtoken: 0.04, outputPerMtoken: 0.15 },
+            "mimo-v2.5": { inputPerMtoken: 0.14, outputPerMtoken: 0.28 },
+            "mimo-v2.5-pro": { inputPerMtoken: 0.435, outputPerMtoken: 0.87 },
+            "mimo-v2.6-flash": { inputPerMtoken: 0.14, outputPerMtoken: 0.28 },
+            "mimo-v2.6-pro": { inputPerMtoken: 0.435, outputPerMtoken: 0.87 },
+            "mimo-v2.6-pro-ultraspeed": { inputPerMtoken: 4.35, outputPerMtoken: 8.7 },
+            "minimax-01": { inputPerMtoken: 0.2, outputPerMtoken: 1.1 },
+            "minimax-m1": { inputPerMtoken: 0.55, outputPerMtoken: 2.2 },
+            "minimax-m2": { inputPerMtoken: 0.255, outputPerMtoken: 1.02 },
+            "minimax-m2-her": { inputPerMtoken: 0.3, outputPerMtoken: 1.2 },
+            "minimax-m2.1": { inputPerMtoken: 0.3, outputPerMtoken: 1.2 },
+            "minimax-m2.5": { inputPerMtoken: 0.27, outputPerMtoken: 1.08 },
+            "minimax-m2.7": { inputPerMtoken: 0.3, outputPerMtoken: 1.2 },
+            "minimax-m3": { inputPerMtoken: 0.3, outputPerMtoken: 1.2 },
+            "ministral-14b-2512": { inputPerMtoken: 0.2, outputPerMtoken: 0.2 },
+            "ministral-3b-2512": { inputPerMtoken: 0.1, outputPerMtoken: 0.1 },
+            "ministral-8b-2512": { inputPerMtoken: 0.15, outputPerMtoken: 0.15 },
+            "mistral-large": { inputPerMtoken: 2, outputPerMtoken: 6 },
+            "mistral-large-2407": { inputPerMtoken: 2, outputPerMtoken: 6 },
+            "mistral-large-2512": { inputPerMtoken: 0.5, outputPerMtoken: 1.5 },
+            "mistral-large-4-0": { inputPerMtoken: 0.68, outputPerMtoken: 2.09 },
+            "mistral-medium-3": { inputPerMtoken: 0.4, outputPerMtoken: 2 },
+            "mistral-medium-3-5": { inputPerMtoken: 1.5, outputPerMtoken: 7.5 },
+            "mistral-medium-3.1": { inputPerMtoken: 0.4, outputPerMtoken: 2 },
+            "mistral-nemo": { inputPerMtoken: 0.029, outputPerMtoken: 0.03 },
+            "mistral-saba": { inputPerMtoken: 0.2, outputPerMtoken: 0.6 },
+            "mistral-small-24b-instruct-2501": { inputPerMtoken: 0.05, outputPerMtoken: 0.08 },
+            "mistral-small-2603": { inputPerMtoken: 0.15, outputPerMtoken: 0.6 },
+            "mistral-small-3.1-24b-instruct": { inputPerMtoken: 0.351, outputPerMtoken: 0.555 },
+            "mistral-small-3.2-24b-instruct": { inputPerMtoken: 0.09375, outputPerMtoken: 0.25 },
+            "mixtral-8x22b-instruct": { inputPerMtoken: 2, outputPerMtoken: 6 },
+            "morph-v3-fast": { inputPerMtoken: 0.8, outputPerMtoken: 1.2 },
+            "morph-v3-large": { inputPerMtoken: 0.9, outputPerMtoken: 1.9 },
+            "muse-glimmer-30b": { inputPerMtoken: 0.3, outputPerMtoken: 1.2 },
+            "muse-spark-1.1": { inputPerMtoken: 1.25, outputPerMtoken: 4.25 },
+            "muse-spark-1.2": { inputPerMtoken: 1.25, outputPerMtoken: 4.25 },
+            "muse-spark-1.2-contributor": { inputPerMtoken: 0.1, outputPerMtoken: 0.2 },
+            "muse-spark-1.3": { inputPerMtoken: 1.25, outputPerMtoken: 4.25 },
+            "muse-spark-1.3-contributor": { inputPerMtoken: 0.1, outputPerMtoken: 0.2 },
+            "muse-wonder": { inputPerMtoken: 4, outputPerMtoken: 20 },
+            "mythomax-l2-13b": { inputPerMtoken: 0.08, outputPerMtoken: 0.11 },
+            "nemotron-3-nano-30b-a3b": { inputPerMtoken: 0.06, outputPerMtoken: 0.24 },
+            "nemotron-3-nano-omni-30b-a3b-reasoning:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "nemotron-3-super-120b-a12b": { inputPerMtoken: 0.08, outputPerMtoken: 0.45 },
+            "nemotron-3-super-120b-a12b:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "nemotron-3-ultra-550b-a55b": { inputPerMtoken: 0.6, outputPerMtoken: 2.4 },
+            "nemotron-3-ultra-550b-a55b:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "nemotron-3.5-content-safety": { inputPerMtoken: 0.2, outputPerMtoken: 0.2 },
+            "nemotron-3.5-content-safety:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "nemotron-3.5-lightning": { inputPerMtoken: 0.07, outputPerMtoken: 0.2 },
+            "nemotron-3.5-lightning:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "nex-n2.5-mini": { inputPerMtoken: 0.025, outputPerMtoken: 0.1 },
+            "nex-n2.5-pro": { inputPerMtoken: 0.075, outputPerMtoken: 0.25 },
+            "north-mini-code:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            "nova-2-lite-v1": { inputPerMtoken: 0.3, outputPerMtoken: 2.5 },
+            "nova-lite-v1": { inputPerMtoken: 0.06, outputPerMtoken: 0.24 },
+            "nova-micro-v1": { inputPerMtoken: 0.035, outputPerMtoken: 0.14 },
+            "nova-premier-v1": { inputPerMtoken: 2.5, outputPerMtoken: 12.5 },
+            "nova-pro-v1": { inputPerMtoken: 0.8, outputPerMtoken: 3.2 },
+            "o1": { inputPerMtoken: 15, outputPerMtoken: 60 },
+            "o1-pro": { inputPerMtoken: 150, outputPerMtoken: 600 },
+            "o3": { inputPerMtoken: 2, outputPerMtoken: 8 },
+            "o3-mini": { inputPerMtoken: 1.1, outputPerMtoken: 4.4 },
+            "o3-mini-high": { inputPerMtoken: 1.1, outputPerMtoken: 4.4 },
+            "o3-pro": { inputPerMtoken: 20, outputPerMtoken: 80 },
+            "o4-mini": { inputPerMtoken: 1.1, outputPerMtoken: 4.4 },
+            "o4-mini-high": { inputPerMtoken: 1.1, outputPerMtoken: 4.4 },
+            "palmyra-x5": { inputPerMtoken: 0.6, outputPerMtoken: 6 },
+            "pareto-26.10-preview": { inputPerMtoken: 0.8, outputPerMtoken: 3.2 },
+            "pareto-26.9": { inputPerMtoken: 2.5, outputPerMtoken: 7.5 },
+            "pareto-latest": { inputPerMtoken: 2.5, outputPerMtoken: 7.5 },
+            "perceptron-mk1": { inputPerMtoken: 0.15, outputPerMtoken: 1.5 },
+            "perceptron-mk1.5": { inputPerMtoken: 0.15, outputPerMtoken: 1.5 },
+            "phi-4": { inputPerMtoken: 0.07, outputPerMtoken: 0.14 },
+            "qwen-2.5-72b-instruct": { inputPerMtoken: 0.36, outputPerMtoken: 0.4 },
+            "qwen-2.5-7b-instruct": { inputPerMtoken: 0.1, outputPerMtoken: 0.2 },
+            "qwen-2.5-coder-32b-instruct": { inputPerMtoken: 0.66, outputPerMtoken: 1 },
+            "qwen-plus": { inputPerMtoken: 0.26, outputPerMtoken: 0.78 },
+            "qwen2.5-vl-72b-instruct": { inputPerMtoken: 0.8, outputPerMtoken: 1 },
+            "qwen3-14b": { inputPerMtoken: 0.12, outputPerMtoken: 0.24 },
+            "qwen3-235b-a22b-2507": { inputPerMtoken: 0.09, outputPerMtoken: 0.55 },
+            "qwen3-235b-a22b-thinking-2507": { inputPerMtoken: 0.45, outputPerMtoken: 3.5 },
+            "qwen3-30b-a3b": { inputPerMtoken: 0.12, outputPerMtoken: 0.5 },
+            "qwen3-30b-a3b-instruct-2507": { inputPerMtoken: 0.1, outputPerMtoken: 0.3 },
+            "qwen3-32b": { inputPerMtoken: 0.08, outputPerMtoken: 0.28 },
+            "qwen3-coder": { inputPerMtoken: 0.3, outputPerMtoken: 1 },
+            "qwen3-coder-30b-a3b-instruct": { inputPerMtoken: 0.07, outputPerMtoken: 0.28 },
+            "qwen3-coder-flash": { inputPerMtoken: 0.195, outputPerMtoken: 0.975 },
+            "qwen3-coder-next": { inputPerMtoken: 0.12, outputPerMtoken: 0.8 },
+            "qwen3-next-80b-a3b-instruct": { inputPerMtoken: 0.1, outputPerMtoken: 1.1 },
+            "qwen3-next-80b-a3b-thinking": { inputPerMtoken: 0.15, outputPerMtoken: 1.2 },
+            "qwen3-vl-235b-a22b-instruct": { inputPerMtoken: 0.21, outputPerMtoken: 1.9 },
+            "qwen3-vl-30b-a3b-instruct": { inputPerMtoken: 0.15, outputPerMtoken: 0.6 },
+            "qwen3-vl-30b-a3b-thinking": { inputPerMtoken: 0.29, outputPerMtoken: 1 },
+            "qwen3-vl-8b-instruct": { inputPerMtoken: 0.25, outputPerMtoken: 0.75 },
+            "qwen3.5-122b-a10b": { inputPerMtoken: 0.26, outputPerMtoken: 2.08 },
+            "qwen3.5-27b": { inputPerMtoken: 0.26, outputPerMtoken: 2.6 },
+            "qwen3.5-35b-a3b": { inputPerMtoken: 0.15, outputPerMtoken: 1 },
+            "qwen3.5-397b-a17b": { inputPerMtoken: 0.5, outputPerMtoken: 3.6 },
+            "qwen3.5-9b": { inputPerMtoken: 0.1, outputPerMtoken: 0.15 },
+            "qwen3.5-flash-02-23": { inputPerMtoken: 0.065, outputPerMtoken: 0.26 },
+            "qwen3.5-plus-02-15": { inputPerMtoken: 0.26, outputPerMtoken: 1.56 },
+            "qwen3.5-plus-20260420": { inputPerMtoken: 0.3, outputPerMtoken: 1.8 },
+            "qwen3.6-27b": { inputPerMtoken: 0.32, outputPerMtoken: 3.2 },
+            "qwen3.6-35b-a3b": { inputPerMtoken: 0.1, outputPerMtoken: 0.95 },
+            "qwen3.6-flash": { inputPerMtoken: 0.1875, outputPerMtoken: 1.125 },
+            "qwen3.6-plus": { inputPerMtoken: 0.325, outputPerMtoken: 1.95 },
+            "qwen3.7-flash": { inputPerMtoken: 0.03, outputPerMtoken: 0.13 },
+            "qwen3.7-max": { inputPerMtoken: 1.475, outputPerMtoken: 4.425 },
+            "qwen3.7-plus": { inputPerMtoken: 0.32, outputPerMtoken: 1.28 },
+            "qwen3.8-2.4t-a95b": { inputPerMtoken: 2, outputPerMtoken: 6 },
+            "qwen3.8-27b": { inputPerMtoken: 0.04, outputPerMtoken: 2.3 },
+            "qwen3.8-flash": { inputPerMtoken: 0.15, outputPerMtoken: 0.47 },
+            "qwen3.8-max-0902": { inputPerMtoken: 2, outputPerMtoken: 6 },
+            "qwen3.8-max-prime": { inputPerMtoken: 4, outputPerMtoken: 12 },
+            "qwen3.8-omni-flash": { inputPerMtoken: 0.15, outputPerMtoken: 0.47 },
+            "reka-edge": { inputPerMtoken: 0.1, outputPerMtoken: 0.1 },
+            "reka-flash-3": { inputPerMtoken: 0.1, outputPerMtoken: 0.2 },
+            "relace-apply-3": { inputPerMtoken: 0.85, outputPerMtoken: 1.25 },
+            "relace-search": { inputPerMtoken: 1, outputPerMtoken: 3 },
+            "remm-slerp-l2-13b": { inputPerMtoken: 0.35, outputPerMtoken: 0.65 },
+            "sakana-namazu": { inputPerMtoken: 0.95, outputPerMtoken: 4 },
+            "schematron-v2-small": { inputPerMtoken: 0.05, outputPerMtoken: 0.23 },
+            "schematron-v2-turbo": { inputPerMtoken: 0.03, outputPerMtoken: 0.15 },
+            "seed-1.6": { inputPerMtoken: 0.25, outputPerMtoken: 2 },
+            "seed-1.6-flash": { inputPerMtoken: 0.075, outputPerMtoken: 0.3 },
+            "seed-2-1-turbo": { inputPerMtoken: 0.5, outputPerMtoken: 2.5 },
+            "seed-2.0-code": { inputPerMtoken: 0.5, outputPerMtoken: 3 },
+            "seed-2.0-lite": { inputPerMtoken: 0.25, outputPerMtoken: 2 },
+            "seed-2.0-mini": { inputPerMtoken: 0.1, outputPerMtoken: 0.4 },
+            "skyfall-36b-v2": { inputPerMtoken: 0.55, outputPerMtoken: 0.8 },
+            "solar-mini4": { inputPerMtoken: 0.05, outputPerMtoken: 0.2 },
+            "solar-pro-3": { inputPerMtoken: 0.15, outputPerMtoken: 0.6 },
+            "solar-pro4": { inputPerMtoken: 0.09, outputPerMtoken: 0.36 },
+            "sonar": { inputPerMtoken: 1, outputPerMtoken: 1 },
+            "sonar-deep-research": { inputPerMtoken: 2, outputPerMtoken: 8 },
+            "sonar-pro": { inputPerMtoken: 3, outputPerMtoken: 15 },
+            "sonar-pro-search": { inputPerMtoken: 3, outputPerMtoken: 15 },
+            "sonar-reasoning-pro": { inputPerMtoken: 2, outputPerMtoken: 8 },
+            "step-3.5-flash": { inputPerMtoken: 0.1, outputPerMtoken: 0.3 },
+            "step-3.7-flash": { inputPerMtoken: 0.2, outputPerMtoken: 1.15 },
+            "step-5-preview": { inputPerMtoken: 1, outputPerMtoken: 2.7 },
+            "summarize": { inputPerMtoken: 0.04, outputPerMtoken: 0 },
+            "ternary-bonsai-2-27b": { inputPerMtoken: 0.075, outputPerMtoken: 0.5 },
+            "trinity-large-thinking": { inputPerMtoken: 0.25, outputPerMtoken: 0.8 },
+            "ui-tars-1.5-7b": { inputPerMtoken: 0.1, outputPerMtoken: 0.2 },
+            "unslopnemo-12b": { inputPerMtoken: 0.4, outputPerMtoken: 0.4 },
+            "voxtral-small-24b-2507": { inputPerMtoken: 0.1, outputPerMtoken: 0.3 },
+            "weaver": { inputPerMtoken: 0.4, outputPerMtoken: 0.75 },
+            "wizardlm-2-8x22b": { inputPerMtoken: 0.62, outputPerMtoken: 0.62 }
+          }
+        };
+      }
+    });
     init_llm_cost = __esm2({
       "src/llm-cost.ts"() {
         "use strict";
+        init_llm_pricing_openrouter();
+        LEGACY_PRICING = {
+          // Superseded by OPENROUTER_PRICING wherever OpenRouter lists the model.
+          anthropic: {
+            "claude-opus-4-7": { inputPerMtoken: 15, outputPerMtoken: 75 },
+            "claude-opus-4": { inputPerMtoken: 15, outputPerMtoken: 75 },
+            "claude-sonnet-4-6": { inputPerMtoken: 3, outputPerMtoken: 15 },
+            "claude-sonnet-4": { inputPerMtoken: 3, outputPerMtoken: 15 },
+            "claude-haiku-4-5": { inputPerMtoken: 0.8, outputPerMtoken: 4 },
+            "claude-3-5-sonnet": { inputPerMtoken: 3, outputPerMtoken: 15 },
+            "claude-3-5-haiku": { inputPerMtoken: 0.8, outputPerMtoken: 4 },
+            "claude-3-opus": { inputPerMtoken: 15, outputPerMtoken: 75 },
+            "claude-3-sonnet": { inputPerMtoken: 3, outputPerMtoken: 15 },
+            "claude-3-haiku": { inputPerMtoken: 0.25, outputPerMtoken: 1.25 }
+          },
+          openai: {
+            "gpt-4o": { inputPerMtoken: 2.5, outputPerMtoken: 10 },
+            "gpt-4o-mini": { inputPerMtoken: 0.15, outputPerMtoken: 0.6 },
+            "gpt-4-turbo": { inputPerMtoken: 10, outputPerMtoken: 30 },
+            "gpt-4": { inputPerMtoken: 30, outputPerMtoken: 60 },
+            "gpt-3.5-turbo": { inputPerMtoken: 0.5, outputPerMtoken: 1.5 },
+            "o1-preview": { inputPerMtoken: 15, outputPerMtoken: 60 },
+            "o1-mini": { inputPerMtoken: 3, outputPerMtoken: 12 },
+            "o3-mini": { inputPerMtoken: 1.1, outputPerMtoken: 4.4 }
+          },
+          openrouter: {
+            // Qwen via OpenRouter — keys are post-prefix-strip canonical names.
+            "qwen3.5-397b-a17b": { inputPerMtoken: 0.39, outputPerMtoken: 2.34 },
+            "qwen3.6-plus": { inputPerMtoken: 0.26, outputPerMtoken: 1.56 },
+            "qwen3-max-thinking": { inputPerMtoken: 1e-3, outputPerMtoken: 4e-3 },
+            "qwen3-coder:free": { inputPerMtoken: 0, outputPerMtoken: 0 },
+            // Grok via OpenRouter
+            "grok-4.20-multi-agent": { inputPerMtoken: 2, outputPerMtoken: 2 },
+            // DeepSeek routed through OpenRouter (cheaper than direct on output tokens).
+            "deepseek-v3.2": { inputPerMtoken: 0.28, outputPerMtoken: 0.42 },
+            "deepseek-v3.2-speciale": { inputPerMtoken: 0.4, outputPerMtoken: 1.2 },
+            "deepseek-v4-pro": { inputPerMtoken: 0.28, outputPerMtoken: 0.42 },
+            "deepseek-v4-flash": { inputPerMtoken: 0.14, outputPerMtoken: 0.28 }
+          },
+          // DeepSeek direct (deepseek.com) — different pricing than via-OR.
+          // Output prices are noticeably higher on the direct API.
+          deepseek: {
+            "deepseek-v3.2": { inputPerMtoken: 0.27, outputPerMtoken: 1.1 },
+            "deepseek-v3.2-speciale": { inputPerMtoken: 0.55, outputPerMtoken: 2.19 },
+            "deepseek-v4-pro": { inputPerMtoken: 0.27, outputPerMtoken: 1.1 },
+            "deepseek-v4-flash": { inputPerMtoken: 0.14, outputPerMtoken: 0.55 }
+          },
+          // Empty for now — add as we onboard customers using these providers.
+          groq: {},
+          together: {},
+          mistral: {},
+          azure: {}
+        };
+        PRICING = {
+          ...LEGACY_PRICING,
+          anthropic: { ...LEGACY_PRICING.anthropic, ...OPENROUTER_PRICING.anthropic },
+          openai: { ...LEGACY_PRICING.openai, ...OPENROUTER_PRICING.openai },
+          openrouter: { ...LEGACY_PRICING.openrouter, ...OPENROUTER_PRICING.openrouter }
+        };
       }
     });
     init_fetch_interceptor = __esm2({
@@ -99912,7 +100657,7 @@ data:
         await init_skill_telemetry();
         await init_policy_enforcer();
         init_room_protocol();
-        VERSION = true ? "0.23.45" : "0.0.0-dev";
+        VERSION = true ? "0.23.47" : "0.0.0-dev";
       }
     });
     await init_index();
@@ -100122,6 +100867,77 @@ var init_config = __esm({
   }
 });
 
+// src/enrollment-fingerprint.ts
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join9 } from "node:path";
+function fingerprintLines(fingerprint) {
+  return [
+    `Fingerprint: ${fingerprint}`,
+    "Verify this fingerprint matches the one shown in your AgentVault dashboard before clicking Approve."
+  ];
+}
+function pendingFingerprintPath(dataDir) {
+  return join9(dataDir, PENDING_FINGERPRINT_FILE);
+}
+function writePendingFingerprint(dataDir, fingerprint) {
+  try {
+    mkdirSync3(dataDir, { recursive: true, mode: 448 });
+    writeFileSync2(pendingFingerprintPath(dataDir), fingerprint, { mode: 384 });
+  } catch {
+  }
+}
+function readPendingFingerprint(dataDir) {
+  const p2 = pendingFingerprintPath(dataDir);
+  if (!existsSync3(p2)) return void 0;
+  try {
+    const raw = readFileSync4(p2, "utf-8").trim();
+    return raw.length > 0 ? raw : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function clearPendingFingerprint(dataDir) {
+  try {
+    rmSync2(pendingFingerprintPath(dataDir), { force: true });
+  } catch {
+  }
+}
+function sleepSync(ms) {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+function waitForPendingFingerprint(dataDir, opts = {}) {
+  const timeoutMs = opts.timeoutMs ?? 3e4;
+  const intervalMs = opts.intervalMs ?? 250;
+  const sleep = opts.sleep ?? sleepSync;
+  const now = opts.now ?? Date.now;
+  const deadline = now() + timeoutMs;
+  for (; ; ) {
+    const fp = readPendingFingerprint(dataDir);
+    if (fp) return fp;
+    if (now() >= deadline) return void 0;
+    sleep(intervalMs);
+  }
+}
+function watchEnrollmentFingerprint(channel, dataDir, log) {
+  channel.on("state", (s2) => {
+    if (s2 === "polling") {
+      const fp = channel.fingerprint;
+      if (!fp) return;
+      for (const line of fingerprintLines(fp)) log(line);
+      writePendingFingerprint(dataDir, fp);
+    } else if (s2 === "ready") {
+      clearPendingFingerprint(dataDir);
+    }
+  });
+}
+var PENDING_FINGERPRINT_FILE;
+var init_enrollment_fingerprint = __esm({
+  "src/enrollment-fingerprint.ts"() {
+    "use strict";
+    PENDING_FINGERPRINT_FILE = "pending-fingerprint";
+  }
+});
+
 // src/service/launcher.ts
 import { dirname as dirname3 } from "node:path";
 function sq(s2) {
@@ -100174,7 +100990,7 @@ var init_launcher = __esm({
 });
 
 // src/service/spec.ts
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 function buildServiceSpec(cfg, opts) {
   const env = {
     AV_AGENT_NAME: cfg.agentName,
@@ -100186,7 +101002,7 @@ function buildServiceSpec(cfg, opts) {
   if (cfg.workspaceDir) env.AV_WORKSPACE_DIR = cfg.workspaceDir;
   if (cfg.roomFilter) env.AV_ROOM_ID = cfg.roomFilter;
   if (cfg.grokPath) env.AV_GROK_PATH = cfg.grokPath;
-  const launcherPath = join12(cfg.dataDir, "launch-grok-bridge.sh");
+  const launcherPath = join13(cfg.dataDir, "launch-grok-bridge.sh");
   return {
     label: `dev.agentvault.grok-${slugify2(cfg.agentName)}`,
     programArgs: [launcherPath],
@@ -100194,8 +101010,8 @@ function buildServiceSpec(cfg, opts) {
     launcherScript: renderLauncher({ installPath: opts.path, entrypoint: opts.entrypoint }),
     env,
     workingDir: cfg.workspaceDir ? cfg.workspaceDir : opts.home,
-    logOut: join12(cfg.dataDir, "logs", "grok-bridge.log"),
-    logErr: join12(cfg.dataDir, "logs", "grok-bridge.error.log"),
+    logOut: join13(cfg.dataDir, "logs", "grok-bridge.log"),
+    logErr: join13(cfg.dataDir, "logs", "grok-bridge.error.log"),
     keepAliveUnlessCleanExit: true,
     runAtLoad: true
   };
@@ -100209,7 +101025,7 @@ var init_spec = __esm({
 });
 
 // src/service/launchd.ts
-import { dirname as dirname4, join as join13 } from "node:path";
+import { dirname as dirname4, join as join14 } from "node:path";
 function esc2(s2) {
   return s2.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
@@ -100287,7 +101103,7 @@ var init_launchd = __esm({
       }
       deps;
       plistPath(label) {
-        return join13(this.deps.home, "Library", "LaunchAgents", `${label}.plist`);
+        return join14(this.deps.home, "Library", "LaunchAgents", `${label}.plist`);
       }
       domain() {
         return `gui/${this.deps.uid}`;
@@ -100337,11 +101153,11 @@ var init_launchd = __esm({
        *  KeepAlive leaves it down. `launchctl list` would not show the very thing
        *  doctor exists to find. */
       list(prefix) {
-        const dir = join13(this.deps.home, "Library", "LaunchAgents");
+        const dir = join14(this.deps.home, "Library", "LaunchAgents");
         const out = [];
         for (const name of this.deps.readdir(dir)) {
           if (!name.startsWith(prefix) || !name.endsWith(".plist")) continue;
-          const path2 = join13(dir, name);
+          const path2 = join14(dir, name);
           out.push({
             label: name.slice(0, -".plist".length),
             path: path2,
@@ -100355,7 +101171,7 @@ var init_launchd = __esm({
 });
 
 // src/service/systemd.ts
-import { dirname as dirname5, join as join14 } from "node:path";
+import { dirname as dirname5, join as join15 } from "node:path";
 function q2(s2) {
   const esc3 = s2.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t").replace(/%/g, "%%");
   return `"${esc3}"`;
@@ -100410,7 +101226,7 @@ var init_systemd = __esm({
       }
       deps;
       unitPath(label) {
-        return join14(this.deps.home, ".config", "systemd", "user", `${label}.service`);
+        return join15(this.deps.home, ".config", "systemd", "user", `${label}.service`);
       }
       install(spec) {
         const path2 = this.unitPath(spec.label);
@@ -100446,11 +101262,11 @@ var init_systemd = __esm({
        *  SuccessExitStatus=0 treats as success, so it is never restarted. A
        *  running-units listing would not show the thing doctor exists to find. */
       list(prefix) {
-        const dir = join14(this.deps.home, ".config", "systemd", "user");
+        const dir = join15(this.deps.home, ".config", "systemd", "user");
         const out = [];
         for (const name of this.deps.readdir(dir)) {
           if (!name.startsWith(prefix) || !name.endsWith(".service")) continue;
-          const path2 = join14(dir, name);
+          const path2 = join15(dir, name);
           out.push({
             label: name.slice(0, -".service".length),
             path: path2,
@@ -100465,7 +101281,7 @@ var init_systemd = __esm({
 
 // src/service/backend.ts
 import { spawnSync } from "node:child_process";
-import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync3, rmSync as rmSync2, existsSync as existsSync4, chmodSync as chmodSync5, readdirSync, readFileSync as readFileSync4 } from "node:fs";
+import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync4, rmSync as rmSync3, existsSync as existsSync5, chmodSync as chmodSync5, readdirSync, readFileSync as readFileSync5 } from "node:fs";
 import { userInfo } from "node:os";
 function defaultDeps() {
   return {
@@ -100476,11 +101292,11 @@ function defaultDeps() {
       const r2 = spawnSync(cmd, args, { encoding: "utf8" });
       return { code: r2.status ?? 1, stdout: r2.stdout ?? "" };
     },
-    writeFile: (p2, d2) => writeFileSync3(p2, d2),
-    mkdir: (p2) => mkdirSync5(p2, { recursive: true }),
+    writeFile: (p2, d2) => writeFileSync4(p2, d2),
+    mkdir: (p2) => mkdirSync6(p2, { recursive: true }),
     chmod: (p2, m2) => chmodSync5(p2, m2),
-    rm: (p2) => rmSync2(p2, { force: true }),
-    exists: (p2) => existsSync4(p2),
+    rm: (p2) => rmSync3(p2, { force: true }),
+    exists: (p2) => existsSync5(p2),
     readdir: (p2) => {
       try {
         return readdirSync(p2);
@@ -100490,7 +101306,7 @@ function defaultDeps() {
     },
     readFile: (p2) => {
       try {
-        return readFileSync4(p2, "utf8");
+        return readFileSync5(p2, "utf8");
       } catch {
         return "";
       }
@@ -100558,6 +101374,7 @@ function maybeRunServiceSubcommand(argv, env, deps) {
       const firstBoot = !hasPersistedCreds(cfg.dataDir) && !!cfg.inviteToken;
       if (firstBoot) {
         writePendingInvite(cfg.dataDir, cfg.inviteToken);
+        clearPendingFingerprint(cfg.dataDir);
       }
       const spec = buildServiceSpec(cfg, {
         entrypoint,
@@ -100570,6 +101387,15 @@ function maybeRunServiceSubcommand(argv, env, deps) {
       backend.install(spec);
       log(`installed service ${spec.label} \u2014 logs: ${spec.logErr}`);
       if (firstBoot) {
+        const waitFp = deps?.waitForFingerprint ?? (deps?.backend ? () => void 0 : waitForPendingFingerprint);
+        const fp = waitFp(cfg.dataDir);
+        if (fp) {
+          for (const line of fingerprintLines(fp)) log(line);
+        } else {
+          log(
+            `the device fingerprint is not available yet \u2014 see it with: AV_AGENT_NAME=${cfg.agentName} agentvault-grok-bridge status`
+          );
+        }
         log("now APPROVE the device in AgentVault \u2014 the service is waiting to enrol");
         log("if it does not connect within a minute, the log above says why");
       }
@@ -100588,6 +101414,15 @@ function maybeRunServiceSubcommand(argv, env, deps) {
       const label = labelFor(env);
       const st = backend.status(label);
       log(`${label}: ${st.loaded ? "loaded" : "not loaded"}`);
+      let pendingFp;
+      try {
+        pendingFp = readPendingFingerprint(resolveDataDir(env).dataDir);
+      } catch {
+        pendingFp = void 0;
+      }
+      if (pendingFp) {
+        for (const line of fingerprintLines(pendingFp)) log(line);
+      }
     } else if (cmd === "logs") {
       const label = labelFor(env);
       log(`logs for ${label} are at <dataDir>/logs/grok-bridge.log (tail -f it)`);
@@ -100604,6 +101439,7 @@ var init_subcommand = __esm({
     "use strict";
     init_config();
     init_pending_invite();
+    init_enrollment_fingerprint();
     init_log();
     init_spec();
     init_backend();
@@ -100840,7 +101676,7 @@ __export(doctor_cli_exports, {
   maybeRunDoctorSubcommand: () => maybeRunDoctorSubcommand,
   realDoctorDeps: () => realDoctorDeps
 });
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 import { readdirSync as readdirSync2 } from "node:fs";
 async function fetchDeviceStatus(apiUrl, deviceId, doFetch = fetch) {
   const res = await doFetch(`${apiUrl}/api/v1/devices/${deviceId}/status`, {
@@ -100876,7 +101712,7 @@ function listCredDirs(base) {
     return out;
   }
   for (const name of names) {
-    const dir = join15(base, name);
+    const dir = join16(base, name);
     if (hasPersistedCreds(dir)) out.push(dir);
   }
   return out;
@@ -100893,7 +101729,7 @@ function otherFamilyLabels(backend) {
 }
 function realDoctorDeps(env) {
   const backend = selectBackend(process.platform);
-  const base = join15(env.HOME ?? "", ".agentvault", "grok-room-bridge");
+  const base = join16(env.HOME ?? "", ".agentvault", "grok-room-bridge");
   return {
     backend,
     labelPrefixes: [LABEL_PREFIX],
@@ -100951,29 +101787,30 @@ var init_doctor_cli = __esm({
 await init_dist();
 init_config();
 init_pending_invite();
+init_enrollment_fingerprint();
 init_log();
 import { spawn } from "node:child_process";
-import { mkdirSync as mkdirSync6 } from "node:fs";
-import { join as join16 } from "node:path";
+import { mkdirSync as mkdirSync7 } from "node:fs";
+import { join as join17 } from "node:path";
 
 // src/fence-auth.ts
-import { copyFileSync, chmodSync as chmodSync3, existsSync as existsSync3, mkdirSync as mkdirSync3 } from "node:fs";
-import { join as join9 } from "node:path";
+import { copyFileSync, chmodSync as chmodSync3, existsSync as existsSync4, mkdirSync as mkdirSync4 } from "node:fs";
+import { join as join10 } from "node:path";
 function seedFenceCredential(opts) {
   const log = opts.log ?? (() => {
   });
-  const fenceGrok = join9(opts.fenceHome, ".grok");
-  const fenceAuth = join9(fenceGrok, "auth.json");
-  if (existsSync3(fenceAuth)) {
+  const fenceGrok = join10(opts.fenceHome, ".grok");
+  const fenceAuth = join10(fenceGrok, "auth.json");
+  if (existsSync4(fenceAuth)) {
     log("[grok-bridge] fence credential already present; leaving it untouched");
     return "already-present";
   }
-  const hostAuth = join9(opts.hostHome, ".grok", "auth.json");
-  if (!existsSync3(hostAuth)) {
+  const hostAuth = join10(opts.hostHome, ".grok", "auth.json");
+  if (!existsSync4(hostAuth)) {
     log("[grok-bridge] no host credential to seed (run `grok login`, or set XAI_API_KEY)");
     return "no-host-credential";
   }
-  mkdirSync3(fenceGrok, { recursive: true });
+  mkdirSync4(fenceGrok, { recursive: true });
   copyFileSync(hostAuth, fenceAuth);
   chmodSync3(fenceAuth, 384);
   log("[grok-bridge] seeded fence credential from the host grok login");
@@ -101307,14 +102144,14 @@ var AcpConnection = class {
 };
 
 // src/grok-room-plugin.ts
-import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync2, chmodSync as chmodSync4 } from "node:fs";
-import { join as join10 } from "node:path";
+import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync3, chmodSync as chmodSync4 } from "node:fs";
+import { join as join11 } from "node:path";
 var SERVER_KEY = "room";
 var GROK_ROOM_SAY_TOOL_NAME = `${SERVER_KEY}__say`;
 function writeRoomPluginHttp(dir, url3) {
-  mkdirSync4(join10(dir, ".claude-plugin"), { recursive: true });
-  writeFileSync2(
-    join10(dir, ".claude-plugin", "plugin.json"),
+  mkdirSync5(join11(dir, ".claude-plugin"), { recursive: true });
+  writeFileSync3(
+    join11(dir, ".claude-plugin", "plugin.json"),
     JSON.stringify(
       {
         name: "avroom",
@@ -101326,12 +102163,12 @@ function writeRoomPluginHttp(dir, url3) {
       2
     ) + "\n"
   );
-  writeFileSync2(
-    join10(dir, ".mcp.json"),
+  writeFileSync3(
+    join11(dir, ".mcp.json"),
     JSON.stringify({ mcpServers: { [SERVER_KEY]: { type: "http", url: url3 } } }, null, 2) + "\n",
     { mode: 384 }
   );
-  chmodSync4(join10(dir, ".mcp.json"), 384);
+  chmodSync4(join11(dir, ".mcp.json"), 384);
 }
 
 // src/grok-driver.ts
@@ -101474,7 +102311,7 @@ var GrokDriver = class {
 };
 
 // src/grok-spawn.ts
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 function grokSpawnArgs(opts) {
   const args = ["agent", "--no-leader"];
   if (opts.model) args.push("--model", opts.model);
@@ -101483,7 +102320,7 @@ function grokSpawnArgs(opts) {
   const env = {
     PATH: process.env.PATH,
     HOME: opts.fenceHome,
-    GROK_HOME: join11(opts.fenceHome, ".grok")
+    GROK_HOME: join12(opts.fenceHome, ".grok")
   };
   if (opts.apiKey) env.XAI_API_KEY = opts.apiKey;
   return { command: opts.grokPath ?? "grok", args, env, cwd: opts.workspaceDir };
@@ -101921,7 +102758,7 @@ async function main() {
   const info = parseInfoFlags(process.argv.slice(2));
   if (info.showVersion || info.showHelp) {
     const version2 = buildClientVersion2(
-      true ? "0.4.18" : void 0
+      true ? "0.4.19" : void 0
     );
     if (info.showVersion) printLine(version2);
     if (info.showHelp) {
@@ -101960,9 +102797,9 @@ async function main() {
     process.exit(0);
   }
   const cfg = loadConfig(process.env, process.argv.slice(2));
-  logLine(`[grok-bridge] version: ${true ? "0.4.18" : "dev"}`);
-  mkdirSync6(cfg.workspaceDir, { recursive: true });
-  mkdirSync6(cfg.fenceHome, { recursive: true });
+  logLine(`[grok-bridge] version: ${true ? "0.4.19" : "dev"}`);
+  mkdirSync7(cfg.workspaceDir, { recursive: true });
+  mkdirSync7(cfg.fenceHome, { recursive: true });
   seedFenceCredential({
     fenceHome: cfg.fenceHome,
     hostHome: process.env.HOME ?? "",
@@ -101975,7 +102812,7 @@ async function main() {
     agentName: cfg.agentName,
     platform: "node",
     clientVersion: buildClientVersion2(
-      true ? "0.4.18" : void 0
+      true ? "0.4.19" : void 0
     )
   });
   channelRef = channel;
@@ -101995,7 +102832,7 @@ async function main() {
     },
     log: (m2) => logLine(m2)
   });
-  const pluginDir = join16(cfg.fenceHome, "av-room-plugin");
+  const pluginDir = join17(cfg.fenceHome, "av-room-plugin");
   writeRoomPluginHttp(pluginDir, mcp.url);
   const spawnSpec = grokSpawnArgs({
     grokPath: cfg.grokPath,
@@ -102072,6 +102909,7 @@ async function main() {
       logLine("[grok-bridge] enrolled \u2014 pending invite consumed and removed");
     }
   });
+  watchEnrollmentFingerprint(channel, cfg.dataDir, (m2) => logLine(`[grok-bridge] ${m2}`));
   await channel.start();
 }
 main().catch(async (err) => {