npm - @agentvault/grok-bridge - Versions diffs - 0.4.21 → 0.4.23 - Mend

@agentvault/grok-bridge 0.4.21 → 0.4.23

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/index.js CHANGED Viewed

@@ -43,6 +43,7 @@ import { readdir as readdir2, readFile as readFile4, writeFile as writeFile2, re
 import { join as join5 } from "node:path";
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { EventEmitter } from "node:events";
+import { AsyncLocalStorage } from "node:async_hooks";
 import { createServer } from "node:http";
 import { randomUUID as randomUUID4, createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
@@ -52,7 +53,7 @@ import { join as join6 } from "node:path";
 import { readFile as readFile5 } from "node:fs/promises";
 import WebSocket from "ws";
 import { resolve as resolve2 } from "node:path";
-import { AsyncLocalStorage } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 import { Http2ServerRequest as Http2ServerRequest2 } from "http2";
 import { Http2ServerRequest } from "http2";
 import { Readable as Readable2 } from "stream";
@@ -11712,11 +11713,11 @@ async function joinWithFirstMatchingKp(welcomeBytes, candidates) {
   return null;
 }
 function ownIdentity() {
-  const v2 = true ? "0.23.50" : FALLBACK;
+  const v2 = true ? "0.23.52" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildSha() {
-  const raw = true ? "c8f1371" : "";
+  const raw = true ? "d7143c3" : "";
   const cleaned = (raw ?? "").trim();
   return !cleaned || cleaned === "unknown" ? null : cleaned;
 }
@@ -12494,11 +12495,38 @@ function _resetCompatCacheForTest() {
   _agentEventFn = null;
   _transcriptFn = null;
 }
+function ownerRoutingFrom(parsed) {
+  const out = {};
+  if (parsed.conversation_id !== void 0) {
+    if (typeof parsed.conversation_id !== "string" || !parsed.conversation_id) return "'conversation_id' must be a string";
+    out.conversationId = parsed.conversation_id;
+  }
+  if (parsed.audience !== void 0) {
+    if (parsed.audience !== "person" && parsed.audience !== "everyone") {
+      return `'audience' must be "person" or "everyone"`;
+    }
+    out.audience = parsed.audience;
+  }
+  return out;
+}
+function ambiguousOwnerRequest(channel, routing) {
+  const check = channel.isUntargetedOwnerAmbiguous;
+  if (typeof check !== "function" || !check.call(channel, routing)) return null;
+  return { status: 409, body: { ok: false, error: AMBIGUOUS_OWNER_ERROR } };
+}
+function statusOf(receipt) {
+  if (receipt.ambiguous) return 409;
+  return receipt.ok ? 200 : 500;
+}
 async function handleSendRequest(parsed, channel) {
   const text = parsed.text;
   if (!text || typeof text !== "string") {
     return { status: 400, body: { ok: false, error: "Missing 'text' field" } };
   }
+  const routing = ownerRoutingFrom(parsed);
+  if (typeof routing === "string") {
+    return { status: 400, body: { ok: false, error: routing } };
+  }
   try {
     let target;
     let a2aTarget = parsed.hub_address ?? parsed.a2a_address ?? parsed.a2aAddress;
@@ -12516,10 +12544,10 @@ async function handleSendRequest(parsed, channel) {
       const receipt2 = await channel.deliver(
         { kind: "owner" },
         { type: "attachment", text, filePath: parsed.file_path },
-        { topicId: parsed.topicId }
+        { topicId: parsed.topicId, ...routing, refuseIfAmbiguous: true }
       );
       return {
-        status: receipt2.ok ? 200 : 500,
+        status: statusOf(receipt2),
         body: {
           ok: receipt2.ok,
           destination: receipt2.destination,
@@ -12533,6 +12561,8 @@ async function handleSendRequest(parsed, channel) {
       target,
       { type: "text", text },
       {
+        ...routing,
+        refuseIfAmbiguous: true,
         topicId: parsed.topicId,
         priority: parsed.priority,
         metadata: {
@@ -12542,7 +12572,7 @@ async function handleSendRequest(parsed, channel) {
       }
     );
     return {
-      status: receipt.ok ? 200 : 500,
+      status: statusOf(receipt),
       body: {
         ok: receipt.ok,
         destination: receipt.destination,
@@ -12557,6 +12587,10 @@ async function handleActionRequest(parsed, channel) {
   if (!parsed.action || typeof parsed.action !== "string") {
     return { status: 400, body: { ok: false, error: "Missing 'action' field" } };
   }
+  const routing = ownerRoutingFrom(parsed);
+  if (typeof routing === "string") {
+    return { status: 400, body: { ok: false, error: routing } };
+  }
   try {
     const confirmation = {
       action: parsed.action,
@@ -12566,12 +12600,10 @@ async function handleActionRequest(parsed, channel) {
       estimated_cost: parsed.estimated_cost
     };
     const target = parsed.room_id && typeof parsed.room_id === "string" ? { kind: "room", roomId: parsed.room_id } : { kind: "owner" };
-    const receipt = await channel.deliver(
-      target,
-      { type: "action_confirmation", confirmation }
-    );
+    const content = { type: "action_confirmation", confirmation };
+    const receipt = await channel.deliver(target, content, { ...routing, refuseIfAmbiguous: true });
     return {
-      status: receipt.ok ? 200 : 500,
+      status: statusOf(receipt),
       body: {
         ok: receipt.ok,
         destination: receipt.destination,
@@ -12596,6 +12628,12 @@ async function handleDecisionRequest(parsed, channel) {
       return { status: 400, body: { ok: false, error: "Each option must have 'option_id' and 'label'" } };
     }
   }
+  const routing = ownerRoutingFrom(parsed);
+  if (typeof routing === "string") {
+    return { status: 400, body: { ok: false, error: routing } };
+  }
+  const ambiguous = ambiguousOwnerRequest(channel, routing);
+  if (ambiguous) return ambiguous;
   try {
     const decision_id = await channel.sendDecisionRequest({
       title,
@@ -12604,7 +12642,7 @@ async function handleDecisionRequest(parsed, channel) {
       context_refs: parsed.context_refs,
       deadline: parsed.deadline,
       auto_action: parsed.auto_action
-    });
+    }, routing);
     return { status: 200, body: { ok: true, decision_id } };
   } catch (err) {
     return { status: 500, body: { ok: false, error: String(err) } };
@@ -12891,14 +12929,27 @@ function migrateHistoryEntries(history) {
     return { id, ...legacyEntry };
   });
 }
+function isTopicId(value) {
+  return typeof value === "string" && TOPIC_ID_RE.test(value);
+}
+function migrateDefaultTopics(state) {
+  if (!state.defaultTopicId || !state.groupId) return state;
+  if (state.defaultTopicIds?.[state.groupId]) return state;
+  return {
+    ...state,
+    defaultTopicIds: { ...state.defaultTopicIds ?? {}, [state.groupId]: state.defaultTopicId }
+  };
+}
 function migratePersistedState(raw) {
   if (raw.sessions && raw.primaryConversationId) {
     const history = raw.messageHistory;
-    if (!history?.some((entry) => typeof entry.id !== "string")) return raw;
-    return {
+    if (!history?.some((entry) => typeof entry.id !== "string")) {
+      return migrateDefaultTopics(raw);
+    }
+    return migrateDefaultTopics({
       ...raw,
       messageHistory: migrateHistoryEntries(history)
-    };
+    });
   }
   const legacy = raw;
   return {
@@ -13089,7 +13140,7 @@ async function _handleInbound(params) {
       core.error?.(`[AgentVault] session record failed: ${String(err)}`);
     }
   });
-  await core.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
+  await channel.runForConversation(metadata.conversationId, () => core.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
     ctx: ctxPayload,
     cfg,
     dispatcherOptions: {
@@ -13106,7 +13157,7 @@ async function _handleInbound(params) {
       }
     },
     replyOptions: {}
-  });
+  }), { groupId: metadata.conversationGroupId });
 }
 function getErrorMap() {
   return overrideErrorMap;
@@ -17630,7 +17681,7 @@ function armSseKeepAlive(intervalMs, onTick) {
   timer.unref?.();
   return timer;
 }
-var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, AGENT_EVENT_CANDIDATES, TRANSCRIPT_CANDIDATES, _heartbeatFn, _agentEventFn, _transcriptFn, init_openclaw_compat, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
+var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, AMBIGUOUS_OWNER_ERROR, init_owner_routing, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, AGENT_EVENT_CANDIDATES, TRANSCRIPT_CANDIDATES, _heartbeatFn, _agentEventFn, _transcriptFn, init_openclaw_compat, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, _turnConversation, PERSON_INVOLVED_WINDOW_MS, ATTESTED_INBOUND_MAX, UNMAPPED_RECONCILE_COOLDOWN_MS, TOPIC_ID_RE, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
 var init_dist = __esm({
   async "../plugin/dist/index.js"() {
     "use strict";
@@ -17683,6 +17734,12 @@ var init_dist = __esm({
         INSTRUCTION = "not every message needs an answer from you: if this one is not addressed to you and asks nothing of you, reply with exactly " + SENTINEL + " and nothing else \u2014 that is discarded, not posted, and is how you stay quiet; never post a message SAYING that you are staying quiet";
       }
     });
+    init_owner_routing = __esm2({
+      "src/owner-routing.ts"() {
+        "use strict";
+        AMBIGUOUS_OWNER_ERROR = `More than one person is talking to this agent right now, so it can't tell who this is for. Add 'conversation_id' to say which conversation, or send audience "everyone" to reach them all.`;
+      }
+    });
     init_envelope_text = __esm2({
       "src/envelope-text.ts"() {
         "use strict";
@@ -70514,6 +70571,7 @@ var init_dist = __esm({
     init_http_handlers = __esm2({
       "src/http-handlers.ts"() {
         "use strict";
+        init_owner_routing();
       }
     });
     mcp_proxy_helpers_exports = {};
@@ -70543,6 +70601,7 @@ var init_dist = __esm({
       async "src/channel.ts"() {
         "use strict";
         init_abstention();
+        init_owner_routing();
         init_envelope_text();
         init_mls_commit_classify();
         init_room_protocol();
@@ -70592,6 +70651,11 @@ var init_dist = __esm({
         OUTBOUND_DEDUPE_TYPES = /* @__PURE__ */ new Set(["text", "status_alert", "artifact", "attachment"]);
         RETRY_CANDIDATE_TTL_MS = 6e4;
         RETRY_CANDIDATE_MAX = 32;
+        _turnConversation = new AsyncLocalStorage();
+        PERSON_INVOLVED_WINDOW_MS = 5 * 6e4;
+        ATTESTED_INBOUND_MAX = 64;
+        UNMAPPED_RECONCILE_COOLDOWN_MS = 6e4;
+        TOPIC_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
         ROOM_FULFIL_COOLDOWN_MS = 6e4;
         SecureChannel = class _SecureChannel extends EventEmitter {
           constructor(config2) {
@@ -70818,10 +70882,42 @@ ${text}`;
           _scanEngine = null;
           _scanRuleSetVersion = 0;
           _telemetryReporter = null;
-          /** Topic ID from the most recent inbound message — used as fallback for replies. */
-          _lastIncomingTopicId;
+          /**
+           * #1416: topic of the most recent inbound message, PER conversation group —
+           * the fallback for a reply that names no topic. Keyed by `_topicScope()`:
+           * `g:<group>` normally, `c:<conversation>` for a conversation whose group is
+           * not known yet, `*` for a legacy agent that knows no groups at all. It used
+           * to be one value for the whole agent, so a broadcast into person B's group
+           * carried the topic of person A's last message. In memory only, as before.
+           */
+          _lastIncomingTopics = /* @__PURE__ */ new Map();
           /** Room ID from the most recent inbound room message — used as fallback for HTTP /send replies. */
           _lastInboundRoomId;
+          /**
+           * #1418: the most recent owner 1:1 message that reached the agent — the
+           * person involved in whatever the agent says next without naming a
+           * conversation (see `_involvedPerson`). In memory only: after a restart
+           * there is no trigger, so untargeted content goes to the primary person.
+           */
+          _lastInboundDm;
+          /** #1418: turns in progress (`runForConversation`). */
+          _activeTurns = /* @__PURE__ */ new Set();
+          /**
+           * #1418: recent owner 1:1 messages that decrypted, keyed by
+           * conversation|group — evidence of which conversation, group and browser
+           * belong together (one person). In memory only, bounded.
+           */
+          _attestedInbound = /* @__PURE__ */ new Map();
+          /** #1418: per UNMAPPED group (or conversation), the last time it asked for a reconcile. */
+          _unmappedReconcileAt = /* @__PURE__ */ new Map();
+          /**
+           * #1418: 1:1 groups joined by a Welcome IN THIS PROCESS while no
+           * conversation mapped them — a person who has not been learned yet, counted
+           * as one until the next successful reconcile. Persisted husks never are.
+           */
+          _welcomedUnmapped = /* @__PURE__ */ new Map();
+          /** #1418: what the last SUCCESSFUL reconcile reported live, and when it started. */
+          _lastReconcile;
           /** Rate-limit: last resync_request timestamp per conversation (5-min cooldown). */
           _lastResyncRequest = /* @__PURE__ */ new Map();
           /** Dedup: last room/group welcome self-heal request timestamp per group (30s window). */
@@ -71397,13 +71493,449 @@ ${text}`;
             }
             return `${kind}:${id ?? ""}`;
           }
+          /*
+           * #1416 — DM history is partitioned by conversation GROUP.
+           *
+           * Since #1399 every person has their own 1:1 group with the agent, but the
+           * agent kept one DM history pool: a catch-up request or a session_init
+           * replay from person B's group was answered with person A's plaintext too.
+           * A DM entry's context now names its group:
+           *
+           *   dm:g:<groupId>:<topicId>   — the group is known
+           *   dm:c:<convId>:<topicId>    — the conversation's group is not known yet
+           *   dm:<topicId>               — legacy (pre-#1416): the PRIMARY group's
+           *
+           * Every form keeps the `dm:` prefix the archive, the web client and Hermes
+           * test for, and the archive format (`topicId` is a free string) is unchanged.
+           * An agent that knows at most one group selects exactly what it did before.
+           */
+          /** The DM history context for a message in `gid` (or `convId`'s group). */
+          _dmHistoryContext(topicId, gid, convId) {
+            const g2 = gid ?? (convId ? this._sessionGroupIds.get(convId) : void 0);
+            if (g2) return `dm:g:${g2}:${topicId ?? ""}`;
+            if (convId && this._knownDmGroups().size > 0) return `dm:c:${convId}:${topicId ?? ""}`;
+            const legacyTopic = topicId && /^[gc]:/.test(topicId) ? "" : topicId;
+            return this._historyContext("dm", legacyTopic);
+          }
+          /** Every conversation group this agent knows of. */
+          _knownDmGroups() {
+            const known = new Set(this._sessionGroupIds.values());
+            if (this._persisted?.groupId) known.add(this._persisted.groupId);
+            return known;
+          }
+          // --- #1418: only the person involved ----------------------------------
+          /**
+           * Run `fn` as the work an inbound 1:1 message from `conversationId`
+           * triggered. Untargeted owner content sent while it runs — from inside its
+           * async call chain, or from anywhere while it is the only turn in progress —
+           * goes to that conversation's person only.
+           *
+           * `opts.groupId` is the group that message DECRYPTED under
+           * (`metadata.conversationGroupId`). Pass it: it outranks the local
+           * conversation→group map, which can be stale, and it is all there is for a
+           * frame whose conversation is not mapped yet. With neither an id nor a
+           * group, `fn` runs unchanged.
+           */
+          async runForConversation(conversationId, fn, opts) {
+            const groupId = typeof opts?.groupId === "string" && opts.groupId ? opts.groupId : void 0;
+            if (!conversationId && !groupId) return fn();
+            const store = { convId: conversationId || void 0, groupId, ended: false };
+            this._activeTurns.add(store);
+            try {
+              return await _turnConversation.run(store, fn);
+            } finally {
+              store.ended = true;
+              store.endedAt = Date.now();
+              this._activeTurns.delete(store);
+            }
+          }
+          /**
+           * The turn this call chain belongs to (#1418) — running, or ended but
+           * still within the window in which work it left behind is for its person.
+           * `"expired"` once that window is over: the work is proactive now.
+           */
+          _currentTurn() {
+            const store = _turnConversation.getStore();
+            if (!store) return void 0;
+            if (!store.ended) return store;
+            return Date.now() - (store.endedAt ?? 0) < PERSON_INVOLVED_WINDOW_MS ? store : "expired";
+          }
+          /**
+           * Record an owner 1:1 message that just decrypted (#1418).
+           *
+           * Always kept as evidence of which conversation, group and browser belong
+           * together (see `_dmPeople`). It makes its person "the person involved" only
+           * when it is RECENT by the server's `createdAt`: a frame replayed from
+           * backlog on reconnect is not something anyone is waiting on an answer to.
+           */
+          _noteInboundDm(convId, groupId, opts = {}) {
+            if (!convId && !groupId) return;
+            const now = Date.now();
+            const sentAt = opts.createdAt ? Date.parse(opts.createdAt) : NaN;
+            const at = Number.isFinite(sentAt) ? Math.min(now, sentAt) : now;
+            const sender = opts.senderDeviceId && opts.senderDeviceId !== this._deviceId ? opts.senderDeviceId : void 0;
+            const key = `${convId ?? ""}|${groupId ?? ""}|${sender ?? ""}`;
+            const prior = this._attestedInbound.get(key);
+            this._attestedInbound.delete(key);
+            this._attestedInbound.set(key, { convId, groupId, senderDeviceId: sender, at: Math.max(prior?.at ?? 0, at) });
+            while (this._attestedInbound.size > ATTESTED_INBOUND_MAX) {
+              const oldest = this._attestedInbound.keys().next().value;
+              if (oldest === void 0) break;
+              this._attestedInbound.delete(oldest);
+            }
+            if (this._lastInboundDm && this._lastInboundDm.at > at) return;
+            this._lastInboundDm = {
+              convId,
+              groupId: groupId ?? (convId ? this._sessionGroupIds.get(convId) : void 0),
+              at
+            };
+          }
+          /** The group `convId`'s most recent inbound decrypted under, if any. */
+          _attestedGroupOf(convId) {
+            if (!convId) return void 0;
+            let gid;
+            for (const a2 of this._attestedInbound.values()) {
+              if (a2.convId === convId && a2.groupId) gid = a2.groupId;
+            }
+            return gid;
+          }
+          /** Does some mapped conversation point at `groupId`? */
+          _isMappedGroup(groupId) {
+            for (const gid of this._sessionGroupIds.values()) if (gid === groupId) return true;
+            return false;
+          }
+          /**
+           * An owner message decrypted under a group no mapped conversation points at
+           * (#1418): the map is stale — a Welcome landed before its conversation was
+           * learned, or a conversation was recreated. Re-resolve it from the server.
+           * Fire-and-forget and rate-limited per group: never awaited on the receive
+           * or Welcome path, so it can never hold up MLS processing.
+           */
+          _reconcileForUnmappedGroup(groupId) {
+            if (!groupId || this._isMappedGroup(groupId)) return;
+            this._reconcileSoon(`g:${groupId}`);
+          }
+          /** The same for a Double Ratchet message on a conversation the map does not know. */
+          _reconcileForUnmappedConversation(convId) {
+            if (!convId || this._sessionGroupIds.size === 0 || this._sessionGroupIds.has(convId)) return;
+            this._reconcileSoon(`c:${convId}`);
+          }
+          _reconcileSoon(key) {
+            const now = Date.now();
+            if (now - (this._unmappedReconcileAt.get(key) ?? 0) < UNMAPPED_RECONCILE_COOLDOWN_MS) return;
+            this._unmappedReconcileAt.set(key, now);
+            void Promise.resolve().then(() => this._reconcileConversationGroups()).catch((err) => console.warn("[SecureChannel] Conversation-group reconcile (unmapped group) failed:", err));
+          }
+          /** A conversation of `groupId`, for an MLS frame that named only its group. */
+          _conversationOfGroup(groupId) {
+            if (!groupId) return void 0;
+            if (this._primaryConversationId && this._sessionGroupIds.get(this._primaryConversationId) === groupId) {
+              return this._primaryConversationId;
+            }
+            for (const [convId, gid] of this._sessionGroupIds) {
+              if (gid === groupId) return convId;
+            }
+            return void 0;
+          }
+          /** Is `convId` one of this agent's own 1:1 conversations (never a room's or an A2A channel's)? */
+          _isOwnDmConversation(convId) {
+            if (this._isNonDmConversation(convId)) return false;
+            return this._sessions.has(convId) || this._sessionGroupIds.has(convId) || !!this._persisted?.mlsConversations?.[convId] || convId === this._primaryConversationId;
+          }
+          /**
+           * #1418 — the PEOPLE this agent has a 1:1 with, or `undefined` when it
+           * cannot tell (no conversation is mapped: then it behaves as before #1418).
+           *
+           * People, not groups. Since #1399 one person has one group, but an agent
+           * also keeps joined groups that are nobody's any more — husks of deleted or
+           * recreated conversations. Measured 2026-10-24: wren held 13 joined groups
+           * for 1 mapped, loopita 2 for 1, wowzer 2 for 1. Counting joined groups made
+           * all three single-person agents look like several people, and their
+           * replies could go only to a dead group.
+           *
+           * So a person is built from the conversations the server mapped, joined by
+           * evidence that two things are the same person:
+           *  - the same group (a legacy group shared by several people cannot be told
+           *    apart, so it stays one — exactly the pre-#1418 behaviour);
+           *  - the same owner browser (a browser belongs to exactly one person);
+           *  - a message that decrypted under a group, from a conversation and browser.
+           * A joined group nothing maps and nobody has spoken in is not a person. A
+           * message on an unmapped group from a browser nobody knows IS someone —
+           * that fails closed, toward "only them".
+           */
+          _dmPeople() {
+            if (this._sessionGroupIds.size === 0) return void 0;
+            const parent2 = /* @__PURE__ */ new Map();
+            const add4 = (x2) => {
+              if (!parent2.has(x2)) parent2.set(x2, x2);
+            };
+            const find = (x2) => {
+              let root3 = x2;
+              while (parent2.get(root3) !== root3) root3 = parent2.get(root3);
+              return root3;
+            };
+            const union2 = (a2, b2) => {
+              if (!a2 || !b2) return;
+              add4(a2);
+              add4(b2);
+              const ra2 = find(a2), rb = find(b2);
+              if (ra2 !== rb) parent2.set(ra2, rb);
+            };
+            const ownerOf = (convId) => {
+              const owner = this._sessions.get(convId)?.ownerDeviceId ?? this._persisted?.sessions?.[convId]?.ownerDeviceId;
+              return owner ? `d:${owner}` : void 0;
+            };
+            for (const [convId, gid] of this._sessionGroupIds) {
+              add4(`c:${convId}`);
+              union2(`c:${convId}`, `g:${gid}`);
+              union2(`c:${convId}`, ownerOf(convId));
+            }
+            const primary = this._primaryConversationId || this._persisted?.primaryConversationId;
+            const primaryGid = this._persisted?.groupId;
+            if (primary && primaryGid && (parent2.has(`c:${primary}`) || parent2.has(`g:${primaryGid}`))) {
+              union2(`c:${primary}`, `g:${primaryGid}`);
+            }
+            for (const gid of this._welcomedUnmapped.keys()) add4(`g:${gid}`);
+            const records = [...this._attestedInbound.values()].map((a2) => ({
+              a: a2,
+              nodes: [
+                a2.convId ? `c:${a2.convId}` : void 0,
+                a2.groupId ? `g:${a2.groupId}` : void 0,
+                a2.senderDeviceId ? `d:${a2.senderDeviceId}` : void 0
+              ].filter((n2) => !!n2)
+            }));
+            const placed = /* @__PURE__ */ new Set();
+            const place = (i2) => {
+              const { a: a2, nodes } = records[i2];
+              for (const n2 of nodes) add4(n2);
+              for (const n2 of nodes.slice(1)) union2(nodes[0], n2);
+              if (a2.convId && this._sessionGroupIds.has(a2.convId)) union2(`c:${a2.convId}`, ownerOf(a2.convId));
+              placed.add(i2);
+            };
+            const linkKnown = () => {
+              for (let progress = true; progress; ) {
+                progress = false;
+                records.forEach((r2, i2) => {
+                  if (!placed.has(i2) && r2.nodes.some((n2) => parent2.has(n2))) {
+                    place(i2);
+                    progress = true;
+                  }
+                });
+              }
+            };
+            linkKnown();
+            records.forEach((r2, i2) => {
+              if (!placed.has(i2) && this._mayBeNewPerson(r2.a)) place(i2);
+            });
+            linkKnown();
+            const roots = /* @__PURE__ */ new Set();
+            for (const node2 of parent2.keys()) {
+              if (!node2.startsWith("d:")) roots.add(find(node2));
+            }
+            return {
+              count: roots.size,
+              keyOf: (convId, groupId) => {
+                if (convId && parent2.has(`c:${convId}`)) return find(`c:${convId}`);
+                if (groupId && parent2.has(`g:${groupId}`)) return find(`g:${groupId}`);
+                return void 0;
+              }
+            };
+          }
+          /**
+           * May this inbound evidence stand for a person nobody knows yet (#1418)?
+           * Only if it was sent recently, and the last successful reconcile — when it
+           * started after the message was sent — listed its conversation or group.
+           */
+          _mayBeNewPerson(a2) {
+            if (Date.now() - a2.at >= PERSON_INVOLVED_WINDOW_MS) return false;
+            const r2 = this._lastReconcile;
+            if (r2 && a2.at <= r2.at && !(a2.convId && r2.convs.has(a2.convId)) && !(a2.groupId && r2.groups.has(a2.groupId))) return false;
+            return true;
+          }
+          /** More than one person has a 1:1 with this agent (#1418). Unknown counts as one: the old behaviour. */
+          _isMultiPerson() {
+            return (this._dmPeople()?.count ?? 0) > 1;
+          }
+          /**
+           * The group a turn's message decrypted under, for placing the turn when its
+           * conversation is not mapped (a mapped conversation already names its person).
+           */
+          _turnGroup(turn) {
+            return turn.groupId ?? this._attestedGroupOf(turn.convId);
+          }
+          /** The people with a 1:1 turn in progress, one turn each (#1418). */
+          _activeTurnPeople() {
+            const people = this._dmPeople();
+            const out = /* @__PURE__ */ new Map();
+            for (const turn of this._activeTurns) {
+              if (turn.convId && (turn.groupId ? this._isNonDmConversation(turn.convId) : !this._isOwnDmConversation(turn.convId))) continue;
+              const gid = this._turnGroup(turn);
+              const key = people?.keyOf(turn.convId, gid) ?? (gid ? `g:${gid}` : `c:${turn.convId}`);
+              if (!out.has(key)) out.set(key, turn);
+            }
+            return out;
+          }
+          /**
+           * The person an untargeted owner message is for (#1418), in order:
+           *
+           *  1. the turn this call chain belongs to — always, and only, that
+           *     conversation, reached on the group its message decrypted under. A turn
+           *     never borrows another conversation's turn: one it cannot place fails
+           *     closed to its own conversation. Work the turn left running (a timer, a
+           *     dispatch orphaned by the turn budget) stays with that person for
+           *     `PERSON_INVOLVED_WINDOW_MS` after the turn, then is proactive (4);
+           *  2. with no turn context (a skill's HTTP call), the one person with a turn
+           *     in progress;
+           *  3. the last inbound 1:1 message, if it is recent — a reply produced in
+           *     response to it;
+           *  4. otherwise the content is proactive: the PRIMARY conversation's person.
+           */
+          _involvedPerson() {
+            const person = (convId, groupId, reason) => ({
+              convId,
+              groupId: groupId ?? this._attestedGroupOf(convId) ?? (convId ? this._sessionGroupIds.get(convId) : void 0),
+              reason
+            });
+            const turn = this._currentTurn();
+            if (turn && turn !== "expired") {
+              return person(turn.convId ?? this._conversationOfGroup(turn.groupId), turn.groupId, turn.ended ? "outlived-turn" : "turn");
+            }
+            if (turn === "expired") return this._primaryPerson();
+            const active = this._activeTurnPeople();
+            if (active.size === 1) {
+              const [only] = active.values();
+              return person(only.convId ?? this._conversationOfGroup(only.groupId), only.groupId, "active-turn");
+            }
+            const last = this._lastInboundDm;
+            if (active.size === 0 && last && Date.now() - last.at < PERSON_INVOLVED_WINDOW_MS) {
+              return person(last.convId ?? this._conversationOfGroup(last.groupId), last.groupId, "last-inbound");
+            }
+            return this._primaryPerson();
+          }
+          /** The PRIMARY conversation's person — where proactive content goes. */
+          _primaryPerson() {
+            const primary = this._primaryConversationId || this._persisted?.primaryConversationId || void 0;
+            const primaryGroup = (primary ? this._sessionGroupIds.get(primary) : void 0) ?? this._persisted?.groupId;
+            return {
+              convId: primary,
+              groupId: primaryGroup ?? this._attestedGroupOf(primary),
+              reason: "primary"
+            };
+          }
+          /**
+           * #1418 — would an untargeted owner send right now have to GUESS between
+           * people? True only with no turn context while two or more people have a
+           * turn in progress. The local HTTP API refuses such a request (409) and
+           * asks for a conversation instead of picking one.
+           */
+          isUntargetedOwnerAmbiguous(options) {
+            if (options?.conversationId !== void 0 || options?.audience === "everyone") return false;
+            if (this._currentTurn()) return false;
+            if (!this._isMultiPerson()) return false;
+            return this._activeTurnPeople().size > 1;
+          }
+          /**
+           * Who an UNTARGETED owner send reaches, or `null` for "every session, as
+           * before". `null` when the caller chose `audience: "everyone"`, and when the
+           * agent has one person (or cannot tell how many) — nothing to choose
+           * between, so its recipients are exactly what they always were.
+           */
+          _untargetedAudience(options) {
+            if (options?.conversationId !== void 0) return null;
+            if (options?.audience === "everyone") return null;
+            if (!this._isMultiPerson()) return null;
+            return this._involvedPerson();
+          }
+          /** A stable name for who an untargeted owner send reaches right now, or undefined when that is "everyone, as before". */
+          _audienceTag(options) {
+            if (options?.audience === "everyone") return "everyone";
+            const person = this._untargetedAudience(options);
+            return person ? `person:${person.groupId ?? person.convId ?? ""}` : void 0;
+          }
+          /** Does conversation `convId` belong to `person`? A conversation nothing ties to them fails closed. */
+          _isPersonsConversation(person, convId) {
+            if (convId === person.convId) return true;
+            const gid = this._sessionGroupIds.get(convId);
+            if (gid !== void 0 && gid === person.groupId) return true;
+            const people = this._dmPeople();
+            const theirs = people?.keyOf(person.convId, person.groupId);
+            return theirs !== void 0 && people.keyOf(convId, gid) === theirs;
+          }
+          /**
+           * #1418: the Double Ratchet sessions an owner-bound FILE (attachment or
+           * artifact) goes to, bucketed by the conversation its blob is uploaded
+           * under. The blob is uploaded under a conversation of the person who gets
+           * it — the backend only lets that conversation's participants download it —
+           * so an explicit "everyone" uploads once per person.
+           */
+          _ownerFileRecipients(routing) {
+            const roomConvIds = /* @__PURE__ */ new Set();
+            for (const room of Object.values(this._persisted?.rooms ?? {})) {
+              for (const cid of room.conversationIds ?? []) roomConvIds.add(cid);
+            }
+            const live = [...this._sessions].filter(([convId, session2]) => session2.activated && !roomConvIds.has(convId)).map(([convId]) => convId);
+            const person = routing?.conversationId !== void 0 ? { convId: routing.conversationId, groupId: this._sessionGroupIds.get(routing.conversationId), reason: "target" } : this._untargetedAudience(routing);
+            if (person) {
+              const convIds = live.filter((convId) => this._isPersonsConversation(person, convId));
+              const uploadConvId = person.convId ?? convIds[0];
+              return uploadConvId && convIds.length > 0 ? [{ uploadConvId, convIds }] : [];
+            }
+            if (live.length === 0) return [];
+            if (!this._isMultiPerson()) {
+              return [{ uploadConvId: this._primaryConversationId, convIds: live }];
+            }
+            const people = this._dmPeople();
+            const buckets = /* @__PURE__ */ new Map();
+            for (const convId of live) {
+              const gid = this._sessionGroupIds.get(convId);
+              const key = people?.keyOf(convId, gid) ?? gid ?? `c:${convId}`;
+              buckets.set(key, [...buckets.get(key) ?? [], convId]);
+            }
+            return [...buckets.values()].map((convIds) => ({
+              uploadConvId: convIds.includes(this._primaryConversationId) ? this._primaryConversationId : convIds[0],
+              convIds
+            }));
+          }
+          /** The group a DM history entry belongs to (see the forms above). */
+          _dmEntryScope(entry, known) {
+            const t2 = entry.topicId ?? "";
+            let scope;
+            if (t2.startsWith("dm:g:")) {
+              scope = t2.slice("dm:g:".length).split(":")[0];
+            } else if (t2.startsWith("dm:c:")) {
+              const conv = t2.slice("dm:c:".length).split(":")[0];
+              scope = this._sessionGroupIds.get(conv) ?? `c:${conv}`;
+            } else {
+              scope = this._persisted?.groupId;
+            }
+            if ((scope === void 0 || scope.startsWith("c:")) && known.size === 1) {
+              return [...known][0];
+            }
+            return scope;
+          }
+          /**
+           * The group a DM history request is answered from, or `null` for "every DM
+           * entry" (an agent that knows no groups at all — the old behaviour). A
+           * request whose group cannot be told fails closed to its own conversation.
+           */
+          _dmRequestScope(gid, convId, known) {
+            if (known.size === 0) return null;
+            const g2 = gid ?? (convId ? this._sessionGroupIds.get(convId) : void 0);
+            if (g2) return g2;
+            const isPrimaryConv = convId === void 0 || convId === this._primaryConversationId;
+            if (known.size === 1 && isPrimaryConv) return [...known][0];
+            if (convId && convId === this._primaryConversationId && this._persisted?.groupId) {
+              return this._persisted.groupId;
+            }
+            return `c:${convId ?? ""}`;
+          }
           /**
            * Normalize one accepted application envelope before it enters plaintext
            * history. Protocol/control types and empty attachment-only envelopes are
            * never archived, and attachment key material can never become the fallback
            * text.
            */
-          async _captureHistoryApplication(sender, rawPlaintext, kind, id, transportTimestamp, declaredType = "message") {
+          async _captureHistoryApplication(sender, rawPlaintext, kind, id, transportTimestamp, declaredType = "message", dmScope) {
             let messageType = declaredType;
             let text = rawPlaintext;
             try {
@@ -71418,14 +71950,14 @@ ${text}`;
             await this._appendHistory(
               sender,
               text,
-              this._historyContext(kind, id),
+              kind === "dm" ? this._dmHistoryContext(id, dmScope?.groupId, dmScope?.conversationId) : this._historyContext(kind, id),
               transportTimestamp
             );
             return text;
           }
           /** Select a context before applying the optional lower bound and final cap. */
-          _historyForCatchup(kind, id, sinceTs) {
-            let filtered = this._selectHistoryContext(kind, id);
+          _historyForCatchup(kind, id, sinceTs, dmScope) {
+            let filtered = this._selectHistoryContext(kind, id, dmScope);
             if (sinceTs !== void 0 && sinceTs !== null) {
               if (typeof sinceTs !== "string" || !CANONICAL_TIMESTAMP_RE.test(sinceTs) || !Number.isFinite(Date.parse(sinceTs)) || new Date(Date.parse(sinceTs)).toISOString() !== sinceTs) {
                 throw new Error("Invalid history catch-up timestamp");
@@ -71435,11 +71967,17 @@ ${text}`;
             return filtered.sort((a2, b2) => Date.parse(a2.ts) - Date.parse(b2.ts) || a2.id.localeCompare(b2.id)).slice(-100);
           }
           /** Shared exact routing selector for catch-up and legacy DR replay. */
-          _selectHistoryContext(kind, id) {
+          _selectHistoryContext(kind, id, dmScope) {
             const history = this._persisted?.messageHistory ?? [];
-            return kind === "room" ? history.filter((entry) => entry.topicId === this._historyContext("room", id)) : history.filter(
+            if (kind === "room") {
+              return history.filter((entry) => entry.topicId === this._historyContext("room", id));
+            }
+            const dm = history.filter(
               (entry) => entry.topicId?.startsWith("dm:") === true || !entry.topicId?.startsWith("room:") && !entry.topicId?.startsWith("a2a:")
             );
+            const known = this._knownDmGroups();
+            const want = this._dmRequestScope(dmScope?.groupId, dmScope?.conversationId, known);
+            return want === null ? dm : dm.filter((entry) => this._dmEntryScope(entry, known) === want);
           }
           _markHistoryDirty() {
             this._historyBackupScheduler.markDirty();
@@ -71929,7 +72467,10 @@ ${text}`;
             Promise.resolve().then(() => (init_openclaw_compat(), openclaw_compat_exports)).then(({ requestHeartbeatNow: requestHeartbeatNow2 }) => requestHeartbeatNow2({ reason: "channel-send" })).catch(() => {
             });
             const targetConvId = options?.conversationId;
-            const topicId = options?.topicId ?? this._lastIncomingTopicId ?? this._persisted?.defaultTopicId;
+            const audience = this._untargetedAudience(options);
+            const explicitTopicId = options?.topicId;
+            const targeted = targetConvId !== void 0;
+            const frameHistoryContexts = [];
             const messageType = options?.messageType ?? "text";
             const priority = options?.priority ?? "normal";
             const parentSpanId = options?.parentSpanId;
@@ -71965,7 +72506,7 @@ ${text}`;
             if (this._persisted?.mlsGroups && this._state === "ready" && this._ws) {
               const targetSharedGid = targetConvId ? this._sessionGroupIds?.get(targetConvId) : void 0;
               console.log(
-                `[SecureChannel] send(): considering ${Object.keys(this._persisted.mlsGroups).length} shared group(s); targetConvId=${targetConvId ? targetConvId.slice(0, 8) : "(none \u2014 broadcast)"} targetSharedGid=${targetSharedGid ? targetSharedGid.slice(0, 8) : "(none)"}`
+                `[SecureChannel] send(): considering ${Object.keys(this._persisted.mlsGroups).length} shared group(s); targetConvId=${targetConvId ? targetConvId.slice(0, 8) : audience ? `(none \u2014 person involved: ${audience.reason})` : "(none \u2014 everyone)"} targetSharedGid=${targetSharedGid ? targetSharedGid.slice(0, 8) : audience?.groupId ? audience.groupId.slice(0, 8) : "(none)"}`
               );
               const skipped = [];
               for (const [gid, entry] of Object.entries(this._persisted.mlsGroups)) {
@@ -71973,6 +72514,10 @@ ${text}`;
                   skipped.push(`${gid.slice(0, 8)}:not-target`);
                   continue;
                 }
+                if (audience && gid !== audience.groupId) {
+                  skipped.push(`${gid.slice(0, 8)}:not-involved`);
+                  continue;
+                }
                 if (!entry.mlsGroupId) {
                   skipped.push(`${gid.slice(0, 8)}:no-mlsGroupId`);
                   continue;
@@ -71996,11 +72541,12 @@ ${text}`;
                     plaintextBytes
                   );
                   await saveMlsState(this.config.dataDir, entry.mlsGroupId, JSON.stringify(mlsGroup.exportState()));
+                  const frameTopicId = this._topicForFrame(gid, targetConvId, explicitTopicId, targeted);
                   const payload = {
                     group_id: entry.mlsGroupId,
                     epoch: Number(mlsGroup.epoch),
                     payload: Buffer.from(cipherBytes).toString("hex"),
-                    topic_id: topicId,
+                    topic_id: frameTopicId,
                     client_message_id: clientMessageId,
                     message_type: messageType,
                     priority,
@@ -72010,6 +72556,7 @@ ${text}`;
                   if (this._persisted?.hubAddress) payload.hub_address = this._persisted.hubAddress;
                   if (this._persisted?.hubId) payload.sender_hub_id = this._persisted.hubId;
                   pendingWsSends.push(JSON.stringify({ event: "message_mls", data: payload }));
+                  frameHistoryContexts.push(this._dmHistoryContext(frameTopicId, gid, targetConvId));
                   addressedMlsGroupIds.push(entry.mlsGroupId);
                   sentSharedGroupIds.add(gid);
                   sentCount++;
@@ -72027,12 +72574,14 @@ ${text}`;
               if (!session2.activated) continue;
               if (roomConvIds.has(convId)) continue;
               if (targetConvId && convId !== targetConvId) continue;
+              if (audience && !this._isPersonsConversation(audience, convId)) continue;
               const convGroupId = this._sessionGroupIds?.get(convId);
               if (convGroupId && sentSharedGroupIds.has(convGroupId)) {
                 sentCount++;
                 continue;
               }
               try {
+                const topicId = this._topicForFrame(convGroupId, convId, explicitTopicId, targeted);
                 const mlsGroup = (convGroupId ? this._mlsGroups.get(`1to1-group:${convGroupId}`) : null) ?? this._mlsGroups.get(`conv:${convId}`);
                 const mlsGroupId = (convGroupId ? this._persisted?.mlsGroups?.[convGroupId]?.mlsGroupId : null) ?? this._persisted?.mlsConversations?.[convId]?.mlsGroupId;
                 if (convGroupId && mlsGroupId && sentSharedGroupIds.has(convGroupId)) {
@@ -72074,6 +72623,7 @@ ${text}`;
                       data: payload
                     })
                   );
+                  frameHistoryContexts.push(this._dmHistoryContext(topicId, convGroupId, convId));
                   addressedMlsGroupIds.push(mlsGroupId);
                   if (convGroupId) sentSharedGroupIds.add(convGroupId);
                 } else if (!options?.bypassMlsHold && this._shouldHoldForMls(convGroupId, mlsGroup, mlsGroupId)) {
@@ -72093,7 +72643,7 @@ ${text}`;
                       history: {
                         id: clientMessageId,
                         text: plaintext,
-                        topicId: this._historyContext("dm", topicId)
+                        topicId: this._dmHistoryContext(topicId, convGroupId, convId)
                       }
                     } : {}
                   };
@@ -72122,6 +72672,7 @@ ${text}`;
                         data: payload
                       })
                     );
+                    frameHistoryContexts.push(this._dmHistoryContext(topicId, convGroupId, convId));
                   } else {
                     if (!this._persisted.outboundQueue) {
                       this._persisted.outboundQueue = [];
@@ -72142,6 +72693,7 @@ ${text}`;
             if (this._persisted?.mlsConversations && this._state === "ready" && this._ws) {
               for (const [mlsConvId, entry] of Object.entries(this._persisted.mlsConversations)) {
                 if (targetConvId && mlsConvId !== targetConvId) continue;
+                if (audience && !this._isPersonsConversation(audience, mlsConvId)) continue;
                 if (this._sessions.has(mlsConvId)) continue;
                 if (roomConvIds.has(mlsConvId)) continue;
                 const mlsOnlyConvGroupId = this._sessionGroupIds?.get(mlsConvId);
@@ -72153,6 +72705,7 @@ ${text}`;
                   continue;
                 }
                 try {
+                  const topicId = this._topicForFrame(mlsOnlyConvGroupId, mlsConvId, explicitTopicId, targeted);
                   const plaintextBytes = new TextEncoder().encode(plaintext);
                   const mlsOnlyGroupKey = mlsOnlyConvGroupId && this._mlsGroups.has(`1to1-group:${mlsOnlyConvGroupId}`) ? `1to1-group:${mlsOnlyConvGroupId}` : `conv:${mlsConvId}`;
                   const cipherBytes = await this._encryptWithCatchUp(
@@ -72178,6 +72731,7 @@ ${text}`;
                   if (this._persisted?.hubAddress) payload.hub_address = this._persisted.hubAddress;
                   if (this._persisted?.hubId) payload.sender_hub_id = this._persisted.hubId;
                   pendingWsSends.push(JSON.stringify({ event: "message_mls", data: payload }));
+                  frameHistoryContexts.push(this._dmHistoryContext(topicId, mlsOnlyConvGroupId, mlsConvId));
                   addressedMlsGroupIds.push(resolvedMlsGroupId);
                   sentCount++;
                   if (mlsOnlyConvGroupId) sentSharedGroupIds.add(mlsOnlyConvGroupId);
@@ -72199,11 +72753,15 @@ ${text}`;
               );
             }
             let writtenFrames = 0;
-            for (const frame of pendingWsSends) {
-              if (this._sendApplicationFrame(frame)) writtenFrames += 1;
+            let historyContext;
+            for (const [i2, frame] of pendingWsSends.entries()) {
+              if (this._sendApplicationFrame(frame)) {
+                if (writtenFrames === 0) historyContext = frameHistoryContexts[i2];
+                writtenFrames += 1;
+              }
             }
             if (!options?.isResend && messageType === "text" && writtenFrames > 0) {
-              await this._appendHistory("agent", plaintext, this._historyContext("dm", topicId), void 0, clientMessageId);
+              await this._appendHistory("agent", plaintext, historyContext ?? this._historyContext("dm"), void 0, clientMessageId);
             }
             if (writtenFrames > 0) {
               console.log(
@@ -72259,7 +72817,7 @@ ${text}`;
            */
           sendActivitySpan(spanData) {
             if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-            const pluginVersion = true ? "0.23.50" : "0.0.0-dev";
+            const pluginVersion = true ? "0.23.52" : "0.0.0-dev";
             const agentName = this.config.agentName ?? "Agent";
             const resource = {
               "service.name": "agentvault-agent",
@@ -72311,7 +72869,7 @@ ${text}`;
            * Builds a structured envelope with decision metadata and sends it
            * as a high-priority message. Returns the generated decision_id.
            */
-          async sendDecisionRequest(request) {
+          async sendDecisionRequest(request, routing) {
             const decision_id = `dec_${randomUUID4().replace(/-/g, "").slice(0, 16)}`;
             const payload = JSON.stringify({
               type: "message",
@@ -72322,6 +72880,8 @@ ${text}`;
               }
             });
             await this.send(payload, {
+              conversationId: routing?.conversationId,
+              audience: routing?.audience,
               messageType: "decision_request",
               priority: "high",
               metadata: {
@@ -72728,6 +73288,7 @@ ${text}`;
             const jwt = this._deviceJwt ?? this._persisted?.deviceJwt;
             if (!jwt || !this._persisted) return false;
             let rows;
+            const reconcileStartedAt = Date.now();
             try {
               const res = await fetch(`${this.config.apiUrl}/api/v1/conversations`, {
                 headers: { Authorization: `Bearer ${jwt}` }
@@ -72744,8 +73305,31 @@ ${text}`;
             );
             if (mine.length === 0) return false;
             const before = this._persisted.groupId;
+            const primaryBefore = this._persisted.primaryConversationId;
+            const knownBefore = this._knownDmGroups();
+            const ownersBefore = /* @__PURE__ */ new Set();
+            if (before) {
+              for (const [convId, gid] of this._sessionGroupIds) {
+                if (gid !== before) continue;
+                const owner = this._sessions.get(convId)?.ownerDeviceId ?? this._persisted.sessions?.[convId]?.ownerDeviceId;
+                if (owner) ownersBefore.add(owner);
+              }
+            }
             this._sessionGroupIds = new Map(mine.map((r2) => [r2.id, r2.group_id]));
             this._persisted.conversationGroupIds = Object.fromEntries(this._sessionGroupIds);
+            {
+              const convs = new Set(mine.map((r2) => r2.id));
+              const groups = new Set(mine.map((r2) => r2.group_id));
+              this._lastReconcile = { at: reconcileStartedAt, convs, groups };
+              for (const [key, a2] of this._attestedInbound) {
+                if (a2.at > reconcileStartedAt) continue;
+                if (a2.convId && convs.has(a2.convId) || a2.groupId && groups.has(a2.groupId)) continue;
+                this._attestedInbound.delete(key);
+              }
+              for (const [gid, at] of this._welcomedUnmapped) {
+                if (at <= reconcileStartedAt) this._welcomedUnmapped.delete(gid);
+              }
+            }
             const joined = mine.find((r2) => this._persisted.mlsGroups?.[r2.group_id]);
             const primary = mine.find((r2) => r2.id === this._persisted.primaryConversationId) ?? joined ?? mine[0];
             if (!mine.some((r2) => r2.id === this._persisted.primaryConversationId)) {
@@ -72755,6 +73339,23 @@ ${text}`;
             }
             this._persisted.groupId = primary.group_id;
             this._persisted.primaryConversationId = primary.id;
+            for (const r2 of mine) {
+              if (typeof r2.default_topic_id === "string") this._recordDefaultTopic(r2.group_id, r2.default_topic_id);
+            }
+            const primaryDefault = this._persisted.defaultTopicIds?.[primary.group_id];
+            if (primaryDefault) this._persisted.defaultTopicId = primaryDefault;
+            const primaryOwner = primary.owner_device_id;
+            const samePerson = primary.id === primaryBefore || typeof primaryOwner === "string" && ownersBefore.has(primaryOwner);
+            let retagged = false;
+            if (before && primary.group_id !== before && knownBefore.size === 1 && knownBefore.has(before) && samePerson) {
+              const oldPrefix = `dm:g:${before}:`;
+              for (const entry of this._persisted.messageHistory ?? []) {
+                if (entry.topicId?.startsWith(oldPrefix)) {
+                  entry.topicId = `dm:g:${primary.group_id}:${entry.topicId.slice(oldPrefix.length)}`;
+                  retagged = true;
+                }
+              }
+            }
             const liveGroupIds = new Set(mine.map((r2) => r2.group_id));
             if (staleGid && staleMlsGroupId && !liveGroupIds.has(staleGid)) {
               try {
@@ -72769,6 +73370,10 @@ ${text}`;
               });
             }
             await this._persistState();
+            if (retagged) {
+              this._markHistoryDirty();
+              await this._saveHistoryState();
+            }
             console.log(
               `[SecureChannel] Re-resolved conversation groups ${staleMlsGroupId ? `after 'unknown group' ${staleMlsGroupId.slice(0, 8)}` : "on connect (#1034)"}: primary group ${String(before).slice(0, 8)} \u2192 ${this._persisted.groupId.slice(0, 8)} (${mine.length} active conversation(s))`
             );
@@ -72918,7 +73523,7 @@ ${text}`;
             }
             this._heartbeatCallback = null;
           }
-          async sendStatusAlert(alert) {
+          async sendStatusAlert(alert, routing) {
             const priority = alert.severity === "error" || alert.severity === "critical" ? "high" : "normal";
             const envelope = {
               title: alert.title,
@@ -72932,52 +73537,61 @@ ${text}`;
             await this.send(
               JSON.stringify(envelope),
               {
+                conversationId: routing?.conversationId,
+                audience: routing?.audience,
                 messageType: "status_alert",
                 priority,
                 metadata: { severity: alert.severity }
               }
             );
           }
-          async sendArtifact(artifact) {
+          async sendArtifact(artifact, routing) {
             if (this._state !== "ready" || this._sessions.size === 0 || !this._ws) {
               throw new Error("Channel is not ready");
             }
-            const attachMeta = await this._uploadAttachment(artifact.filePath, this._primaryConversationId);
-            const envelope = JSON.stringify({
-              type: "artifact",
-              blob_id: attachMeta.blobId,
-              blob_url: attachMeta.blobUrl,
-              filename: artifact.filename,
-              mime_type: artifact.mimeType,
-              size_bytes: attachMeta.size,
-              description: artifact.description,
-              attachment: attachMeta
-            });
             const messageGroupId = randomUUID4();
             const pendingWsSends = [];
-            for (const [convId, session2] of this._sessions) {
-              if (!session2.activated) continue;
-              const encrypted = session2.ratchet.encrypt(envelope);
-              const transport = encryptedMessageToTransport(encrypted);
-              pendingWsSends.push(
-                JSON.stringify({
-                  event: "message",
-                  data: {
-                    conversation_id: convId,
-                    header_blob: transport.header_blob,
-                    ciphertext: transport.ciphertext,
-                    message_group_id: messageGroupId,
-                    message_type: "artifact_share"
-                  }
-                })
-              );
+            const buckets = this._ownerFileRecipients(routing);
+            if (buckets.length === 0) {
+              console.warn("[SecureChannel] sendArtifact(): no live session for the person involved \u2014 nothing sent");
+              throw new Error("No conversation is ready to receive this file");
+            }
+            for (const bucket of buckets) {
+              const attachMeta = await this._uploadAttachment(artifact.filePath, bucket.uploadConvId);
+              const envelope = JSON.stringify({
+                type: "artifact",
+                blob_id: attachMeta.blobId,
+                blob_url: attachMeta.blobUrl,
+                filename: artifact.filename,
+                mime_type: artifact.mimeType,
+                size_bytes: attachMeta.size,
+                description: artifact.description,
+                attachment: attachMeta
+              });
+              for (const convId of bucket.convIds) {
+                const session2 = this._sessions.get(convId);
+                const encrypted = session2.ratchet.encrypt(envelope);
+                const transport = encryptedMessageToTransport(encrypted);
+                pendingWsSends.push(
+                  JSON.stringify({
+                    event: "message",
+                    data: {
+                      conversation_id: convId,
+                      header_blob: transport.header_blob,
+                      ciphertext: transport.ciphertext,
+                      message_group_id: messageGroupId,
+                      message_type: "artifact_share"
+                    }
+                  })
+                );
+              }
             }
             await this._persistState();
             for (const frame of pendingWsSends) {
               this._ws.send(frame);
             }
           }
-          async sendActionConfirmation(confirmation) {
+          async sendActionConfirmation(confirmation, routing) {
             const envelope = {
               type: "action_confirmation",
               action: confirmation.action,
@@ -72988,6 +73602,8 @@ ${text}`;
             await this.send(
               JSON.stringify(envelope),
               {
+                conversationId: routing?.conversationId,
+                audience: routing?.audience,
                 messageType: "action_confirmation",
                 metadata: { status: confirmation.status }
               }
@@ -73093,9 +73709,23 @@ ${text}`;
             } else {
               return { ok: false, destination: { kind: "owner" }, error: "Unknown target kind", timestamp: ts };
             }
+            if (resolved.kind === "owner" && options?.refuseIfAmbiguous && this.isUntargetedOwnerAmbiguous(options)) {
+              console.log(`[deliver] target=owner content=${content.type} result=REFUSED: ambiguous (several people mid-turn)`);
+              return { ok: false, ambiguous: true, destination: resolved, error: AMBIGUOUS_OWNER_ERROR, timestamp: ts };
+            }
             let dedupeKey = null;
             try {
-              dedupeKey = outboundDedupeKey(resolved, content, options);
+              let audienceTag;
+              try {
+                audienceTag = resolved.kind === "owner" && options?.conversationId === void 0 ? this._audienceTag(options) : void 0;
+              } catch {
+                audienceTag = void 0;
+              }
+              dedupeKey = outboundDedupeKey(
+                resolved,
+                content,
+                audienceTag ? { ...options, conversationId: audienceTag } : options
+              );
               if (dedupeKey) {
                 const now = Date.now();
                 const recent = this._recentDeliveries ??= /* @__PURE__ */ new Map();
@@ -73115,6 +73745,10 @@ ${text}`;
             }
             try {
               let decisionId;
+              const ownerRouting = {
+                conversationId: options?.conversationId,
+                audience: options?.audience
+              };
               if (content.type === "text") {
                 if (resolved.kind === "room") {
                   await this.sendToRoom(resolved.id, content.text, {
@@ -73133,6 +73767,7 @@ ${text}`;
                 } else {
                   await this.send(content.text, {
                     conversationId: options?.conversationId,
+                    audience: options?.audience,
                     topicId: options?.topicId,
                     messageType: options?.metadata?.message_type,
                     priority: options?.priority,
@@ -73145,7 +73780,7 @@ ${text}`;
                   console.log(`[deliver] target=${resolved.kind}:${resolved.id} content=decision_request result=FAIL: ${err}`);
                   return { ok: false, destination: resolved, error: err, timestamp: ts };
                 }
-                decisionId = await this.sendDecisionRequest(content.request);
+                decisionId = await this.sendDecisionRequest(content.request, ownerRouting);
               } else if (content.type === "status_alert") {
                 if (resolved.kind === "room") {
                   const envelope = {
@@ -73163,7 +73798,7 @@ ${text}`;
                     metadata: { severity: content.alert.severity }
                   });
                 } else if (resolved.kind === "owner") {
-                  await this.sendStatusAlert(content.alert);
+                  await this.sendStatusAlert(content.alert, ownerRouting);
                 } else {
                   return { ok: false, destination: resolved, error: "Status alerts cannot be sent to A2A targets", timestamp: ts };
                 }
@@ -73171,7 +73806,7 @@ ${text}`;
                 if (resolved.kind === "room") {
                   await this.sendActionConfirmationToRoom(resolved.id, content.confirmation);
                 } else if (resolved.kind === "owner") {
-                  await this.sendActionConfirmation(content.confirmation);
+                  await this.sendActionConfirmation(content.confirmation, ownerRouting);
                 } else {
                   return { ok: false, destination: resolved, error: "Action confirmations cannot be sent to A2A targets", timestamp: ts };
                 }
@@ -73179,13 +73814,14 @@ ${text}`;
                 if (resolved.kind !== "owner") {
                   return { ok: false, destination: resolved, error: "Artifacts can only be sent to owner", timestamp: ts };
                 }
-                await this.sendArtifact(content.artifact);
+                await this.sendArtifact(content.artifact, ownerRouting);
               } else if (content.type === "attachment") {
                 if (resolved.kind !== "owner") {
                   return { ok: false, destination: resolved, error: "Attachments can only be sent to owner", timestamp: ts };
                 }
                 await this.sendWithAttachment(content.text, content.filePath, {
-                  topicId: options?.topicId
+                  topicId: options?.topicId,
+                  ...ownerRouting
                 });
               }
               const targetLabel = resolved.kind === "owner" ? "owner" : `${resolved.kind}:${resolved.id?.slice(0, 8)}...`;
@@ -73502,15 +74138,105 @@ ${text}`;
             return this._mcpServer;
           }
           // --- Topic management ---
+          /*
+           * #1416 — topics are per conversation GROUP.
+           *
+           * Since #1399 every person has their own 1:1 group with the agent, and a
+           * topic belongs to exactly one group (`topics.group_id`). The agent used to
+           * keep ONE default topic (the primary group's) and ONE last-incoming topic,
+           * and stamped both on every frame — so a reply into person B's group could
+           * carry person A's topic, and B's web client (which filters live messages by
+           * the topic it is viewing) dropped it until a reload.
+           *
+           * The rule now: a frame's topic comes from THAT frame's group. A group with
+           * no known topic gets none — the server then files the message under that
+           * conversation's own default topic (`ws.py`, lazily created) — rather than
+           * borrowing another group's.
+           */
+          /** Scope key for per-group topic state; see `_lastIncomingTopics`. */
+          _topicScope(gid, convId) {
+            if (gid) return `g:${gid}`;
+            if (!this._persisted?.groupId && this._sessionGroupIds.size === 0) return "*";
+            return convId ? `c:${convId}` : void 0;
+          }
+          /** Record the topic of an inbound 1:1 message for its own group (#1416). */
+          _rememberIncomingTopic(convId, gid, topicId) {
+            const scope = this._topicScope(gid ?? (convId ? this._sessionGroupIds.get(convId) : void 0), convId);
+            if (!scope) return;
+            if (topicId && !isTopicId(topicId)) return;
+            if (topicId) this._lastIncomingTopics.set(scope, topicId);
+            else this._lastIncomingTopics.delete(scope);
+          }
           /**
-           * Create a new topic within the conversation group.
-           * Requires the channel to be initialized with a groupId (from activation).
+           * Record a group's default topic (#1416). The legacy `defaultTopicId` keeps
+           * mirroring the PRIMARY group's entry, for older readers and backups.
            */
-          async createTopic(name) {
+          _recordDefaultTopic(gid, topicId) {
+            if (!gid || !topicId || !this._persisted) return;
+            (this._persisted.defaultTopicIds ??= {})[gid] = topicId;
+            if (gid === this._persisted.groupId) this._persisted.defaultTopicId = topicId;
+          }
+          /** The group a topic is known to belong to, if any. */
+          _groupOfTopic(topicId) {
+            const p2 = this._persisted;
+            for (const [gid, tid] of Object.entries(p2?.defaultTopicIds ?? {})) {
+              if (tid === topicId) return gid;
+            }
+            if (p2?.defaultTopicId === topicId && p2.groupId) return p2.groupId;
+            for (const t2 of p2?.topics ?? []) {
+              if (t2.id === topicId) return t2.groupId ?? p2?.groupId;
+            }
+            for (const [scope, tid] of this._lastIncomingTopics) {
+              if (tid === topicId && scope.startsWith("g:")) return scope.slice(2);
+            }
+            return void 0;
+          }
+          /**
+           * The topic one outgoing 1:1 frame carries (#1416), or `undefined` to send
+           * none. `gid` is the frame's conversation group (looked up from `convId`
+           * when not given); `explicit` is the caller's `topicId`; `targeted` is true
+           * when the caller addressed one conversation.
+           */
+          _topicForFrame(gid, convId, explicit, targeted, useLastIncoming = true) {
+            const p2 = this._persisted;
+            const g2 = gid ?? (convId ? this._sessionGroupIds.get(convId) : void 0);
+            const primaryScope = g2 !== void 0 ? g2 === p2?.groupId : convId === this._primaryConversationId || !p2?.groupId;
+            if (isTopicId(explicit)) {
+              const owner = this._groupOfTopic(explicit);
+              if (owner !== void 0 ? owner === g2 : targeted || primaryScope) return explicit;
+            }
+            const scope = this._topicScope(g2, convId);
+            const last = scope && useLastIncoming ? this._lastIncomingTopics.get(scope) : void 0;
+            if (last) return last;
+            if (g2 && p2?.defaultTopicIds?.[g2]) return p2.defaultTopicIds[g2];
+            if (primaryScope && p2?.defaultTopicId) return p2.defaultTopicId;
+            return void 0;
+          }
+          /**
+           * The conversation group a topic call addresses (#1416): the named
+           * conversation's own group, else the primary group. A named conversation
+           * whose group is unknown is an error — falling back to the primary group
+           * would create/list topics in somebody else's chat.
+           */
+          _topicGroupFor(conversationId) {
+            if (conversationId) {
+              const gid = this._sessionGroupIds.get(conversationId);
+              if (!gid) throw new Error("Conversation group unknown for topic call");
+              return gid;
+            }
             if (!this._persisted?.groupId) {
               throw new Error("Channel not initialized or groupId unknown");
             }
-            if (!this._deviceJwt) {
+            return this._persisted.groupId;
+          }
+          /**
+           * Create a new topic within a conversation group — the given conversation's
+           * own group (#1416), or the primary group when none is named.
+           * Requires the channel to be initialized with a groupId (from activation).
+           */
+          async createTopic(name, options) {
+            const groupId = this._topicGroupFor(options?.conversationId);
+            if (!this._deviceJwt || !this._persisted) {
               throw new Error("Channel not authenticated");
             }
             const res = await fetch(`${this.config.apiUrl}/api/v1/topics`, {
@@ -73520,7 +74246,7 @@ ${text}`;
                 Authorization: `Bearer ${this._deviceJwt}`
               },
               body: JSON.stringify({
-                group_id: this._persisted.groupId,
+                group_id: groupId,
                 name,
                 creator_device_id: this._persisted.deviceId
               })
@@ -73534,23 +74260,23 @@ ${text}`;
             if (!this._persisted.topics) {
               this._persisted.topics = [];
             }
-            this._persisted.topics.push(topic);
+            this._persisted.topics.push({ ...topic, groupId });
+            if (topic.isDefault) this._recordDefaultTopic(groupId, topic.id);
             await this._persistState();
             return topic;
           }
           /**
-           * List all topics in the conversation group.
+           * List all topics in a conversation group — the given conversation's own
+           * group (#1416), or the primary group when none is named.
            * Requires the channel to be initialized with a groupId (from activation).
            */
-          async listTopics() {
-            if (!this._persisted?.groupId) {
-              throw new Error("Channel not initialized or groupId unknown");
-            }
-            if (!this._deviceJwt) {
+          async listTopics(options) {
+            const groupId = this._topicGroupFor(options?.conversationId);
+            if (!this._deviceJwt || !this._persisted) {
               throw new Error("Channel not authenticated");
             }
             const res = await fetch(
-              `${this.config.apiUrl}/api/v1/topics?group_id=${encodeURIComponent(this._persisted.groupId)}`,
+              `${this.config.apiUrl}/api/v1/topics?group_id=${encodeURIComponent(groupId)}`,
               {
                 headers: {
                   Authorization: `Bearer ${this._deviceJwt}`
@@ -73563,7 +74289,13 @@ ${text}`;
             }
             const resp = await res.json();
             const topics = resp.map((t2) => ({ id: t2.id, name: t2.name, isDefault: t2.is_default }));
-            this._persisted.topics = topics;
+            const primaryGid = this._persisted.groupId;
+            this._persisted.topics = [
+              ...(this._persisted.topics ?? []).filter((t2) => (t2.groupId ?? primaryGid) !== groupId),
+              ...topics.map((t2) => ({ ...t2, groupId }))
+            ];
+            const def = topics.find((t2) => t2.isDefault);
+            if (def) this._recordDefaultTopic(groupId, def.id);
             await this._persistState();
             return topics;
           }
@@ -74147,6 +74879,9 @@ ${text}`;
                   this._persisted.defaultTopicId = primary.default_topic_id;
                 }
               }
+              for (const conv of conversations) {
+                this._recordDefaultTopic(conv.group_id, conv.default_topic_id);
+              }
               this._sessionGroupIds = /* @__PURE__ */ new Map();
               for (const conv of conversations) {
                 if (conv.group_id) {
@@ -74259,7 +74994,7 @@ ${text}`;
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.50" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.52" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -74587,7 +75322,7 @@ ${text}`;
                         agentVersion: this.config.agentVersion ?? "0.0.0",
                         // __AV_VERSION__ is injected by esbuild from package.json at build time.
                         // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                        pluginVersion: true ? "0.23.50" : "0.0.0-dev"
+                        pluginVersion: true ? "0.23.52" : "0.0.0-dev"
                       });
                       this._telemetryReporter.startAutoFlush(3e4);
                     }
@@ -75050,11 +75785,15 @@ ${text}`;
                 if (decisionReply) messageType = "decision_response";
               } catch {
               }
+              const dmGroupId = convGroupId ?? (mgrKey?.startsWith("1to1-group:") ? mgrKey.slice("1to1-group:".length) : void 0);
               if (messageType === "history_catchup_request") {
                 try {
                   const request = JSON.parse(plaintext);
                   if (typeof request.requesting_device_id !== "string") return;
-                  const filtered = this._historyForCatchup("dm", void 0, request.since_ts);
+                  const filtered = this._historyForCatchup("dm", void 0, request.since_ts, {
+                    groupId: dmGroupId,
+                    conversationId: convId
+                  });
                   const responsePayload = JSON.stringify({
                     type: "history_catchup_response",
                     target_device_id: request.requesting_device_id,
@@ -75109,6 +75848,9 @@ ${text}`;
                   console.log(`[SecureChannel] Session ${convId.slice(0, 8)} activated via MLS message`);
                 }
               }
+              if (topicId) {
+                this._rememberIncomingTopic(convId, dmGroupId, topicId);
+              }
               if (mlsAttachment) {
                 text = await this._augmentWithAttachment(mlsAttachment, text);
               }
@@ -75118,11 +75860,21 @@ ${text}`;
                 "dm",
                 topicId,
                 data.created_at,
-                messageType
+                messageType,
+                { groupId: dmGroupId, conversationId: convId }
               );
+              const dmConvId = convId ?? this._conversationOfGroup(dmGroupId);
+              this._noteInboundDm(dmConvId, dmGroupId, { createdAt: data.created_at, senderDeviceId });
+              this._reconcileForUnmappedGroup(dmGroupId);
               const metadata = {
                 messageId: data.message_id ?? `mls_${Date.now()}`,
-                conversationId: convId ?? this._primaryConversationId,
+                // A frame on a KNOWN group that no conversation maps yet is not the
+                // primary person's: leave the conversation unnamed rather than hand
+                // the reply to someone else; `conversationGroupId` still places it.
+                conversationId: dmConvId ?? (dmGroupId ? void 0 : this._primaryConversationId),
+                // #1418: the group this message decrypted under — attested, so a turn
+                // answers here even when the local map is stale.
+                conversationGroupId: dmGroupId,
                 timestamp: data.created_at ?? (/* @__PURE__ */ new Date()).toISOString(),
                 topicId,
                 // #621: positive attestation that this decrypted under the OWNER'S 1:1
@@ -75303,7 +76055,7 @@ ${text}`;
             }
             if (messageType === "message" || messageType === "decision_response" && decisionReply) {
               const topicId = msgData.topic_id;
-              this._lastIncomingTopicId = topicId;
+              this._rememberIncomingTopic(convId, void 0, topicId);
               let attachData;
               if (attachmentInfo) {
                 try {
@@ -75331,7 +76083,8 @@ ${text}`;
                 "dm",
                 topicId,
                 msgData.created_at,
-                messageType
+                messageType,
+                { conversationId: convId }
               );
               let emitText = messageText;
               if (attachData) {
@@ -75376,6 +76129,13 @@ ${messageText}`;
                 // envelope text before the fold; `emitText` is the folded copy.
                 caption: messageText
               };
+              if (!roomId) {
+                this._noteInboundDm(convId, void 0, {
+                  createdAt: msgData.created_at,
+                  senderDeviceId: msgData.sender_device_id
+                });
+                this._reconcileForUnmappedConversation(convId);
+              }
               this.emit("message", emitText, metadata);
               Promise.resolve(this.config.onMessage?.(emitText, metadata)).catch((err) => {
                 console.error("[SecureChannel] onMessage callback error:", err);
@@ -75524,40 +76284,53 @@ ${baseText}`;
             if (this._state !== "ready" || this._sessions.size === 0 || !this._ws) {
               throw new Error("Channel is not ready");
             }
-            const topicId = options?.topicId ?? this._persisted?.defaultTopicId;
-            const attachMeta = await this._uploadAttachment(filePath, this._primaryConversationId);
-            const envelope = JSON.stringify({
-              type: "message",
-              text: plaintext,
-              topicId,
-              attachment: attachMeta
-            });
             const messageGroupId = randomUUID4();
             const pendingWsSends = [];
-            for (const [convId, session2] of this._sessions) {
-              if (!session2.activated) continue;
-              const encrypted = session2.ratchet.encrypt(envelope);
-              const transport = encryptedMessageToTransport(encrypted);
-              pendingWsSends.push(
-                JSON.stringify({
-                  event: "message",
-                  data: {
-                    conversation_id: convId,
-                    header_blob: transport.header_blob,
-                    ciphertext: transport.ciphertext,
-                    message_group_id: messageGroupId,
-                    topic_id: topicId
-                  }
-                })
-              );
+            const frameHistoryContexts = [];
+            const buckets = this._ownerFileRecipients(options);
+            if (buckets.length === 0) {
+              console.warn("[SecureChannel] sendWithAttachment(): no live session for the person involved \u2014 nothing sent");
+              throw new Error("No conversation is ready to receive this file");
+            }
+            for (const bucket of buckets) {
+              const attachMeta = await this._uploadAttachment(filePath, bucket.uploadConvId);
+              for (const convId of bucket.convIds) {
+                const session2 = this._sessions.get(convId);
+                const topicId = this._topicForFrame(void 0, convId, options?.topicId, false, false);
+                const envelope = JSON.stringify({
+                  type: "message",
+                  text: plaintext,
+                  topicId,
+                  attachment: attachMeta
+                });
+                const encrypted = session2.ratchet.encrypt(envelope);
+                const transport = encryptedMessageToTransport(encrypted);
+                pendingWsSends.push(
+                  JSON.stringify({
+                    event: "message",
+                    data: {
+                      conversation_id: convId,
+                      header_blob: transport.header_blob,
+                      ciphertext: transport.ciphertext,
+                      message_group_id: messageGroupId,
+                      topic_id: topicId
+                    }
+                  })
+                );
+                frameHistoryContexts.push(this._dmHistoryContext(topicId, void 0, convId));
+              }
             }
             await this._persistState();
             let deliveredFrames = 0;
-            for (const frame of pendingWsSends) {
-              if (this._sendApplicationFrame(frame)) deliveredFrames += 1;
+            let historyContext;
+            for (const [i2, frame] of pendingWsSends.entries()) {
+              if (this._sendApplicationFrame(frame)) {
+                if (deliveredFrames === 0) historyContext = frameHistoryContexts[i2];
+                deliveredFrames += 1;
+              }
             }
             if (deliveredFrames > 0) {
-              await this._appendHistory("agent", plaintext, this._historyContext("dm", topicId), void 0, messageGroupId);
+              await this._appendHistory("agent", plaintext, historyContext ?? this._historyContext("dm"), void 0, messageGroupId);
             }
           }
           /**
@@ -75582,9 +76355,13 @@ ${baseText}`;
               topicId
             });
             const pendingWsSends = [];
+            const sourceGid = this._sessionGroupIds.get(sourceConvId);
+            const knowsGroups = this._sessionGroupIds.size > 0;
             for (const [siblingConvId, siblingSession] of this._sessions) {
               if (siblingConvId === sourceConvId) continue;
               if (!siblingSession.activated) continue;
+              const siblingGid = this._sessionGroupIds.get(siblingConvId);
+              if (knowsGroups && !(sourceGid && siblingGid && siblingGid === sourceGid)) continue;
               if (roomConvIds.has(siblingConvId)) continue;
               const syncEncrypted = siblingSession.ratchet.encrypt(syncPayload);
               const syncTransport = encryptedMessageToTransport(syncEncrypted);
@@ -75665,7 +76442,7 @@ ${baseText}`;
           async _replayHistoryToSession(convId) {
             const session2 = this._sessions.get(convId);
             if (!session2 || !session2.activated || !this._ws) return;
-            const history = this._selectHistoryContext("dm");
+            const history = this._selectHistoryContext("dm", void 0, { conversationId: convId });
             if (history.length === 0) {
               console.log(`[SecureChannel] No history to replay for ${convId.slice(0, 8)}...`);
               return;
@@ -75701,10 +76478,15 @@ ${baseText}`;
               `[SecureChannel] New owner device linked: ${event.owner_device_id.slice(0, 8)}...`
             );
             try {
+              if (event.group_id && !this._sessionGroupIds.has(event.conversation_id)) {
+                this._sessionGroupIds.set(event.conversation_id, event.group_id);
+                this._persisted.conversationGroupIds = Object.fromEntries(this._sessionGroupIds);
+              }
               if (!event.owner_identity_public_key) {
                 console.error(
                   `[SecureChannel] device_linked event missing owner keys for conv ${event.conversation_id.slice(0, 8)}...`
                 );
+                await this._persistState();
                 return;
               }
               const identity = this._persisted.identityKeypair;
@@ -77408,6 +78190,10 @@ ${baseText}`;
                   await this._persistState();
                 }
                 console.log(`[SecureChannel] Joined shared 1:1 MLS group for group ${conversationGroupId.slice(0, 8)} via Welcome (epoch=${mgr.epoch})`);
+                if (!this._isMappedGroup(conversationGroupId)) {
+                  this._welcomedUnmapped.set(conversationGroupId, Date.now());
+                }
+                this._reconcileForUnmappedGroup(conversationGroupId);
                 await this._flushMlsHold(conversationGroupId);
                 return;
               }
@@ -78037,7 +78823,7 @@ ${baseText}`;
                   }
                   if (messageType === "message" || messageType === "decision_response" && decisionReply) {
                     const topicId = msg.topic_id;
-                    await this._appendHistory("owner", messageText, this._historyContext("dm", topicId), msg.created_at, msg.message_id);
+                    await this._appendHistory("owner", messageText, this._dmHistoryContext(topicId, void 0, msg.conversation_id), msg.created_at, msg.message_id);
                     const metadata = {
                       messageId: msg.message_id,
                       conversationId: msg.conversation_id,
@@ -78049,6 +78835,7 @@ ${baseText}`;
                       ownerDm1to1: true,
                       ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                     };
+                    this._noteInboundDm(msg.conversation_id, void 0, { createdAt: msg.created_at, senderDeviceId: msg.sender_device_id });
                     this.emit("message", messageText, metadata);
                     Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
                       console.error("[SecureChannel] onMessage callback error:", err);
@@ -78643,7 +79430,7 @@ ${baseText}`;
                     }
                     if (messageType === "message" || messageType === "decision_response" && decisionReply) {
                       const topicId = msg.topic_id;
-                      await this._appendHistory("owner", messageText, this._historyContext("dm", topicId), msg.created_at, msg.id);
+                      await this._appendHistory("owner", messageText, this._dmHistoryContext(topicId, void 0, msg.conversation_id), msg.created_at, msg.id);
                       const metadata = {
                         messageId: msg.id,
                         conversationId: msg.conversation_id,
@@ -78655,6 +79442,7 @@ ${baseText}`;
                         ownerDm1to1: true,
                         ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                       };
+                      this._noteInboundDm(msg.conversation_id, void 0, { createdAt: msg.created_at, senderDeviceId: msg.sender_device_id });
                       this.emit("message", messageText, metadata);
                       Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
                         console.error("[SecureChannel] onMessage callback error:", err);
@@ -78963,7 +79751,7 @@ ${baseText}`;
                     }
                     if (messageType === "message" || messageType === "decision_response" && decisionReply) {
                       const topicId = msg.topic_id;
-                      await this._appendHistory("owner", messageText, this._historyContext("dm", topicId), msg.created_at, msg.id);
+                      await this._appendHistory("owner", messageText, this._dmHistoryContext(topicId, void 0, msg.conversation_id), msg.created_at, msg.id);
                       const metadata = {
                         messageId: msg.id,
                         conversationId: msg.conversation_id,
@@ -78975,6 +79763,7 @@ ${baseText}`;
                         ownerDm1to1: true,
                         ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                       };
+                      this._noteInboundDm(msg.conversation_id, void 0, { createdAt: msg.created_at, senderDeviceId: msg.sender_device_id });
                       this.emit("message", messageText, metadata);
                       Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
                         console.error("[SecureChannel] onMessage callback error:", err);
@@ -79995,7 +80784,7 @@ ${actionsText}`);
         "use strict";
         init_llm_response_parser();
         init_llm_cost();
-        traceStore = new AsyncLocalStorage();
+        traceStore = new AsyncLocalStorage2();
       }
     });
     init_tool_audit = __esm2({
@@ -100743,7 +101532,7 @@ data:
         await init_skill_telemetry();
         await init_policy_enforcer();
         init_room_protocol();
-        VERSION = true ? "0.23.50" : "0.0.0-dev";
+        VERSION = true ? "0.23.52" : "0.0.0-dev";
       }
     });
     await init_index();
@@ -102604,13 +103393,28 @@ var RoomHushState = class {
     return t2 !== void 0 && now < t2;
   }
 };
+async function sendDm(channel, t2, text) {
+  if ((t2.conversationId || t2.groupId) && typeof channel.runForConversation === "function") {
+    await channel.runForConversation(
+      t2.conversationId,
+      () => channel.send(text),
+      t2.groupId ? { groupId: t2.groupId } : void 0
+    );
+  } else {
+    await channel.send(text);
+  }
+}
 var ActiveTarget = class {
   target = null;
   setRoom(roomId) {
     this.target = { kind: "room", roomId };
   }
-  setDm() {
-    this.target = { kind: "dm" };
+  setDm(conversationId, groupId) {
+    this.target = {
+      kind: "dm",
+      ...conversationId ? { conversationId } : {},
+      ...groupId ? { groupId } : {}
+    };
   }
   get current() {
     return this.target;
@@ -102630,7 +103434,7 @@ var ActiveTarget = class {
       if (!t2) return;
       try {
         if (t2.kind === "room") await channel.sendToRoom(t2.roomId, text);
-        else await channel.send(text);
+        else await sendDm(channel, t2, text);
         log(`said to ${where}`);
       } catch (err) {
         log(`send failed to ${where}: ${err instanceof Error ? err.message : String(err)}`);
@@ -102739,7 +103543,7 @@ function wireBridge(channel, session2, target, opts = {}) {
     } else {
       log("inbound 1:1 DM from owner");
     }
-    target.setDm();
+    target.setDm(metadata?.conversationId, metadata?.conversationGroupId);
     session2.push(text, target.snapshotReply(channel, log), { autoReplyOnText: ownerAttested });
   });
 }
@@ -102844,7 +103648,7 @@ async function main() {
   const info = parseInfoFlags(process.argv.slice(2));
   if (info.showVersion || info.showHelp) {
     const version2 = buildClientVersion2(
-      true ? "0.4.21" : void 0
+      true ? "0.4.23" : void 0
     );
     if (info.showVersion) printLine(version2);
     if (info.showHelp) {
@@ -102883,7 +103687,7 @@ async function main() {
     process.exit(0);
   }
   const cfg = loadConfig(process.env, process.argv.slice(2));
-  logLine(`[grok-bridge] version: ${true ? "0.4.21" : "dev"}`);
+  logLine(`[grok-bridge] version: ${true ? "0.4.23" : "dev"}`);
   mkdirSync7(cfg.workspaceDir, { recursive: true });
   mkdirSync7(cfg.fenceHome, { recursive: true });
   seedFenceCredential({
@@ -102898,7 +103702,7 @@ async function main() {
     agentName: cfg.agentName,
     platform: "node",
     clientVersion: buildClientVersion2(
-      true ? "0.4.21" : void 0
+      true ? "0.4.23" : void 0
     )
   });
   channelRef = channel;