npm - @agentvault/muse-bridge - Versions diffs - 0.1.26 → 0.1.28 - Mend

@agentvault/muse-bridge 0.1.26 → 0.1.28

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/index.js CHANGED Viewed

@@ -94,6 +94,7 @@ import { readdir as readdir2, readFile as readFile4, writeFile as writeFile2, re
 import { join as join5 } from "node:path";
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { EventEmitter } from "node:events";
+import { AsyncLocalStorage } from "node:async_hooks";
 import { createServer } from "node:http";
 import { randomUUID as randomUUID4, createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
@@ -103,7 +104,7 @@ import { join as join6 } from "node:path";
 import { readFile as readFile5 } from "node:fs/promises";
 import WebSocket from "ws";
 import { resolve as resolve2 } from "node:path";
-import { AsyncLocalStorage } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 import { Http2ServerRequest as Http2ServerRequest2 } from "http2";
 import { Http2ServerRequest } from "http2";
 import { Readable as Readable2 } from "stream";
@@ -11787,11 +11788,11 @@ async function joinWithFirstMatchingKp(welcomeBytes, candidates) {
   return null;
 }
 function ownIdentity() {
-  const v2 = true ? "0.23.51" : FALLBACK;
+  const v2 = true ? "0.23.53" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildSha() {
-  const raw = true ? "753de79" : "";
+  const raw = true ? "3f2a933" : "";
   const cleaned = (raw ?? "").trim();
   return !cleaned || cleaned === "unknown" ? null : cleaned;
 }
@@ -12595,11 +12596,38 @@ function _resetCompatCacheForTest() {
   _agentEventFn = null;
   _transcriptFn = null;
 }
+function ownerRoutingFrom(parsed) {
+  const out = {};
+  if (parsed.conversation_id !== void 0) {
+    if (typeof parsed.conversation_id !== "string" || !parsed.conversation_id) return "'conversation_id' must be a string";
+    out.conversationId = parsed.conversation_id;
+  }
+  if (parsed.audience !== void 0) {
+    if (parsed.audience !== "person" && parsed.audience !== "everyone") {
+      return `'audience' must be "person" or "everyone"`;
+    }
+    out.audience = parsed.audience;
+  }
+  return out;
+}
+function ambiguousOwnerRequest(channel, routing) {
+  const check = channel.isUntargetedOwnerAmbiguous;
+  if (typeof check !== "function" || !check.call(channel, routing)) return null;
+  return { status: 409, body: { ok: false, error: AMBIGUOUS_OWNER_ERROR } };
+}
+function statusOf(receipt) {
+  if (receipt.ambiguous) return 409;
+  return receipt.ok ? 200 : 500;
+}
 async function handleSendRequest(parsed, channel) {
   const text = parsed.text;
   if (!text || typeof text !== "string") {
     return { status: 400, body: { ok: false, error: "Missing 'text' field" } };
   }
+  const routing = ownerRoutingFrom(parsed);
+  if (typeof routing === "string") {
+    return { status: 400, body: { ok: false, error: routing } };
+  }
   try {
     let target;
     let a2aTarget = parsed.hub_address ?? parsed.a2a_address ?? parsed.a2aAddress;
@@ -12617,10 +12645,10 @@ async function handleSendRequest(parsed, channel) {
       const receipt2 = await channel.deliver(
         { kind: "owner" },
         { type: "attachment", text, filePath: parsed.file_path },
-        { topicId: parsed.topicId }
+        { topicId: parsed.topicId, ...routing, refuseIfAmbiguous: true }
       );
       return {
-        status: receipt2.ok ? 200 : 500,
+        status: statusOf(receipt2),
         body: {
           ok: receipt2.ok,
           destination: receipt2.destination,
@@ -12634,6 +12662,8 @@ async function handleSendRequest(parsed, channel) {
       target,
       { type: "text", text },
       {
+        ...routing,
+        refuseIfAmbiguous: true,
         topicId: parsed.topicId,
         priority: parsed.priority,
         metadata: {
@@ -12643,7 +12673,7 @@ async function handleSendRequest(parsed, channel) {
       }
     );
     return {
-      status: receipt.ok ? 200 : 500,
+      status: statusOf(receipt),
       body: {
         ok: receipt.ok,
         destination: receipt.destination,
@@ -12658,6 +12688,10 @@ async function handleActionRequest(parsed, channel) {
   if (!parsed.action || typeof parsed.action !== "string") {
     return { status: 400, body: { ok: false, error: "Missing 'action' field" } };
   }
+  const routing = ownerRoutingFrom(parsed);
+  if (typeof routing === "string") {
+    return { status: 400, body: { ok: false, error: routing } };
+  }
   try {
     const confirmation = {
       action: parsed.action,
@@ -12667,12 +12701,10 @@ async function handleActionRequest(parsed, channel) {
       estimated_cost: parsed.estimated_cost
     };
     const target = parsed.room_id && typeof parsed.room_id === "string" ? { kind: "room", roomId: parsed.room_id } : { kind: "owner" };
-    const receipt = await channel.deliver(
-      target,
-      { type: "action_confirmation", confirmation }
-    );
+    const content = { type: "action_confirmation", confirmation };
+    const receipt = await channel.deliver(target, content, { ...routing, refuseIfAmbiguous: true });
     return {
-      status: receipt.ok ? 200 : 500,
+      status: statusOf(receipt),
       body: {
         ok: receipt.ok,
         destination: receipt.destination,
@@ -12697,6 +12729,12 @@ async function handleDecisionRequest(parsed, channel) {
       return { status: 400, body: { ok: false, error: "Each option must have 'option_id' and 'label'" } };
     }
   }
+  const routing = ownerRoutingFrom(parsed);
+  if (typeof routing === "string") {
+    return { status: 400, body: { ok: false, error: routing } };
+  }
+  const ambiguous = ambiguousOwnerRequest(channel, routing);
+  if (ambiguous) return ambiguous;
   try {
     const decision_id = await channel.sendDecisionRequest({
       title,
@@ -12705,7 +12743,7 @@ async function handleDecisionRequest(parsed, channel) {
       context_refs: parsed.context_refs,
       deadline: parsed.deadline,
       auto_action: parsed.auto_action
-    });
+    }, routing);
     return { status: 200, body: { ok: true, decision_id } };
   } catch (err) {
     return { status: 500, body: { ok: false, error: String(err) } };
@@ -13240,7 +13278,7 @@ async function _handleInbound(params) {
       core.error?.(`[AgentVault] session record failed: ${String(err)}`);
     }
   });
-  await core.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
+  await channel.runForConversation(metadata.conversationId, () => core.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
     ctx: ctxPayload,
     cfg,
     dispatcherOptions: {
@@ -13257,7 +13295,7 @@ async function _handleInbound(params) {
       }
     },
     replyOptions: {}
-  });
+  }), { groupId: metadata.conversationGroupId });
 }
 function resolveBaseUrl(options) {
   const host = options?.host ?? "127.0.0.1";
@@ -18333,7 +18371,7 @@ function reportSkillInvocation(opts) {
   spanBuffer.push(span);
   return span;
 }
-var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports2, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, AGENT_EVENT_CANDIDATES, TRANSCRIPT_CANDIDATES, _heartbeatFn, _agentEventFn, _transcriptFn, init_openclaw_compat, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, TOPIC_ID_RE, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
+var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, AMBIGUOUS_OWNER_ERROR, init_owner_routing, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports2, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, KP_BACKOFF_INITIAL_MS, KP_BACKOFF_MAX_MS, KP_RACE_RETRY_MS, KP_RACE_RETRY_LIMIT, consoleLogger, short, WelcomeKeyPackageBackoff, init_welcome_kp_backoff, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, AGENT_EVENT_CANDIDATES, TRANSCRIPT_CANDIDATES, _heartbeatFn, _agentEventFn, _transcriptFn, init_openclaw_compat, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, _turnConversation, PERSON_INVOLVED_WINDOW_MS, ATTESTED_INBOUND_MAX, UNMAPPED_RECONCILE_COOLDOWN_MS, TOPIC_ID_RE, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
 var init_dist = __esm({
   async "../plugin/dist/index.js"() {
     "use strict";
@@ -18386,6 +18424,12 @@ var init_dist = __esm({
         INSTRUCTION = "not every message needs an answer from you: if this one is not addressed to you and asks nothing of you, reply with exactly " + SENTINEL + " and nothing else \u2014 that is discarded, not posted, and is how you stay quiet; never post a message SAYING that you are staying quiet";
       }
     });
+    init_owner_routing = __esm2({
+      "src/owner-routing.ts"() {
+        "use strict";
+        AMBIGUOUS_OWNER_ERROR = `More than one person is talking to this agent right now, so it can't tell who this is for. Add 'conversation_id' to say which conversation, or send audience "everyone" to reach them all.`;
+      }
+    });
     init_envelope_text = __esm2({
       "src/envelope-text.ts"() {
         "use strict";
@@ -70917,6 +70961,119 @@ var init_dist = __esm({
         ACTIONS = /* @__PURE__ */ new Set(["approve", "deny", "defer", "cancel"]);
       }
     });
+    init_welcome_kp_backoff = __esm2({
+      "src/welcome-kp-backoff.ts"() {
+        "use strict";
+        KP_BACKOFF_INITIAL_MS = 10 * 6e4;
+        KP_BACKOFF_MAX_MS = 60 * 6e4;
+        KP_RACE_RETRY_MS = 6e4;
+        KP_RACE_RETRY_LIMIT = 3;
+        consoleLogger = {
+          warn: (m2) => console.warn(m2),
+          info: (m2) => console.log(m2)
+        };
+        short = (id) => id.slice(0, 8);
+        WelcomeKeyPackageBackoff = class {
+          constructor(log = consoleLogger) {
+            this.log = log;
+          }
+          log;
+          entries = /* @__PURE__ */ new Map();
+          pendingSig = /* @__PURE__ */ new Map();
+          failing = /* @__PURE__ */ new Set();
+          key(groupId, deviceId) {
+            return `${groupId}:${deviceId}`;
+          }
+          /**
+           * Record this pull's pending list for a group. Returns true when the set of
+           * requests differs from the previous pull's — the caller logs its "N pending"
+           * line only then. Backoffs for devices whose request is gone are dropped.
+           */
+          observePending(groupId, pending) {
+            const sig = pending.map((r2) => r2.id).sort().join(",");
+            const changed = this.pendingSig.get(groupId) !== sig;
+            if (pending.length === 0) this.pendingSig.delete(groupId);
+            else this.pendingSig.set(groupId, sig);
+            const live = new Set(pending.map((r2) => r2.requesting_device_id));
+            const prefix = `${groupId}:`;
+            for (const k2 of [...this.entries.keys()]) {
+              if (k2.startsWith(prefix) && !live.has(k2.slice(prefix.length))) this.entries.delete(k2);
+            }
+            return changed && pending.length > 0;
+          }
+          /** Should this pull ask the batch for this device's KeyPackage? */
+          shouldAsk(groupId, deviceId, available, label, now = Date.now()) {
+            const k2 = this.key(groupId, deviceId);
+            const entry = this.entries.get(k2);
+            if (available === false) {
+              if (!entry) {
+                this.entries.set(k2, { untilMs: now + KP_BACKOFF_INITIAL_MS, delayMs: KP_BACKOFF_INITIAL_MS, lastAvailable: false, raceRetries: 0 });
+                this.log.warn(
+                  `[SecureChannel] No KeyPackage for ${short(deviceId)} in ${label} \u2014 waiting for the device to come back online; not asking again until it publishes one`
+                );
+              } else {
+                entry.lastAvailable = false;
+              }
+              return false;
+            }
+            if (!entry) return true;
+            if (available === true && entry.lastAvailable === false) return true;
+            return now >= entry.untilMs;
+          }
+          /** The outcome of an ask. `found` = the batch returned a KeyPackage. */
+          recordKeyPackage(groupId, deviceId, found, available, label, now = Date.now()) {
+            const k2 = this.key(groupId, deviceId);
+            const entry = this.entries.get(k2);
+            if (found) {
+              if (entry) {
+                this.entries.delete(k2);
+                this.log.info(`[SecureChannel] KeyPackage for ${short(deviceId)} is available again in ${label} \u2014 admitting`);
+              }
+              return;
+            }
+            const raced = available === true && (entry?.raceRetries ?? 0) < KP_RACE_RETRY_LIMIT;
+            if (!entry) {
+              if (raced) {
+                this.entries.set(k2, { untilMs: now + KP_RACE_RETRY_MS, delayMs: 0, lastAvailable: available, raceRetries: 1 });
+                this.log.warn(
+                  `[SecureChannel] No KeyPackage for ${short(deviceId)} in ${label} although the server listed one (claimed elsewhere?) \u2014 retrying in ${KP_RACE_RETRY_MS / 1e3} s`
+                );
+                return;
+              }
+              this.entries.set(k2, { untilMs: now + KP_BACKOFF_INITIAL_MS, delayMs: KP_BACKOFF_INITIAL_MS, lastAvailable: available, raceRetries: 0 });
+              this.log.warn(
+                `[SecureChannel] No KeyPackage for ${short(deviceId)} in ${label}, skipping \u2014 not asking again for ${KP_BACKOFF_INITIAL_MS / 6e4} min (the device has to come back online)`
+              );
+              return;
+            }
+            entry.lastAvailable = available;
+            if (raced) {
+              entry.raceRetries += 1;
+              entry.untilMs = now + KP_RACE_RETRY_MS;
+              return;
+            }
+            entry.raceRetries = available === true ? entry.raceRetries : 0;
+            entry.delayMs = entry.delayMs === 0 ? KP_BACKOFF_INITIAL_MS : Math.min(entry.delayMs * 2, KP_BACKOFF_MAX_MS);
+            entry.untilMs = now + entry.delayMs;
+          }
+          /** A non-OK response for `scope`: warn once until it recovers. */
+          noteFetchFailure(scope, status) {
+            if (this.failing.has(scope)) return;
+            this.failing.add(scope);
+            this.log.warn(`[SecureChannel] ${scope} failed (${status}) \u2014 will retry each pull; logging once until it recovers`);
+          }
+          noteFetchOk(scope) {
+            if (!this.failing.delete(scope)) return;
+            this.log.info(`[SecureChannel] ${scope} recovered`);
+          }
+          /** Test/diagnostic view. */
+          backoffFor(groupId, deviceId) {
+            const e = this.entries.get(this.key(groupId, deviceId));
+            return e ? { untilMs: e.untilMs, delayMs: e.delayMs } : void 0;
+          }
+        };
+      }
+    });
     history_backup_client_exports = {};
     __export2(history_backup_client_exports, {
       HISTORY_RESTORE_RESPONSE_MAX_BYTES: () => HISTORY_RESTORE_RESPONSE_MAX_BYTES,
@@ -71217,6 +71374,7 @@ var init_dist = __esm({
     init_http_handlers = __esm2({
       "src/http-handlers.ts"() {
         "use strict";
+        init_owner_routing();
       }
     });
     mcp_proxy_helpers_exports = {};
@@ -71246,6 +71404,7 @@ var init_dist = __esm({
       async "src/channel.ts"() {
         "use strict";
         init_abstention();
+        init_owner_routing();
         init_envelope_text();
         init_mls_commit_classify();
         init_room_protocol();
@@ -71265,6 +71424,7 @@ var init_dist = __esm({
         init_history_backup_scheduler();
         await init_history_recovery_code();
         init_decision_reply();
+        init_welcome_kp_backoff();
         ROOM_AGENT_TYPES = /* @__PURE__ */ new Set([
           "message",
           "text",
@@ -71295,6 +71455,10 @@ var init_dist = __esm({
         OUTBOUND_DEDUPE_TYPES = /* @__PURE__ */ new Set(["text", "status_alert", "artifact", "attachment"]);
         RETRY_CANDIDATE_TTL_MS = 6e4;
         RETRY_CANDIDATE_MAX = 32;
+        _turnConversation = new AsyncLocalStorage();
+        PERSON_INVOLVED_WINDOW_MS = 5 * 6e4;
+        ATTESTED_INBOUND_MAX = 64;
+        UNMAPPED_RECONCILE_COOLDOWN_MS = 6e4;
         TOPIC_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
         ROOM_FULFIL_COOLDOWN_MS = 6e4;
         SecureChannel = class _SecureChannel extends EventEmitter {
@@ -71371,6 +71535,8 @@ var init_dist = __esm({
           _mlsGroups = /* @__PURE__ */ new Map();
           /** `${mlsGroupId}:${deviceId}` -> last re-admit ms (#1171). */
           _roomFulfilCooldown = /* @__PURE__ */ new Map();
+          /** #1428: per (group, device) KeyPackage backoff for the pending-Welcome pulls. */
+          _welcomeKpBackoff = new WelcomeKeyPackageBackoff();
           /** Maps conversationId -> conversation_group_id for shared 1:1 MLS groups */
           _sessionGroupIds = /* @__PURE__ */ new Map();
           /** Consecutive MLS decrypt failure count per group key for epoch recovery. */
@@ -71533,6 +71699,31 @@ ${text}`;
           _lastIncomingTopics = /* @__PURE__ */ new Map();
           /** Room ID from the most recent inbound room message — used as fallback for HTTP /send replies. */
           _lastInboundRoomId;
+          /**
+           * #1418: the most recent owner 1:1 message that reached the agent — the
+           * person involved in whatever the agent says next without naming a
+           * conversation (see `_involvedPerson`). In memory only: after a restart
+           * there is no trigger, so untargeted content goes to the primary person.
+           */
+          _lastInboundDm;
+          /** #1418: turns in progress (`runForConversation`). */
+          _activeTurns = /* @__PURE__ */ new Set();
+          /**
+           * #1418: recent owner 1:1 messages that decrypted, keyed by
+           * conversation|group — evidence of which conversation, group and browser
+           * belong together (one person). In memory only, bounded.
+           */
+          _attestedInbound = /* @__PURE__ */ new Map();
+          /** #1418: per UNMAPPED group (or conversation), the last time it asked for a reconcile. */
+          _unmappedReconcileAt = /* @__PURE__ */ new Map();
+          /**
+           * #1418: 1:1 groups joined by a Welcome IN THIS PROCESS while no
+           * conversation mapped them — a person who has not been learned yet, counted
+           * as one until the next successful reconcile. Persisted husks never are.
+           */
+          _welcomedUnmapped = /* @__PURE__ */ new Map();
+          /** #1418: what the last SUCCESSFUL reconcile reported live, and when it started. */
+          _lastReconcile;
           /** Rate-limit: last resync_request timestamp per conversation (5-min cooldown). */
           _lastResyncRequest = /* @__PURE__ */ new Map();
           /** Dedup: last room/group welcome self-heal request timestamp per group (30s window). */
@@ -72138,6 +72329,379 @@ ${text}`;
             if (this._persisted?.groupId) known.add(this._persisted.groupId);
             return known;
           }
+          // --- #1418: only the person involved ----------------------------------
+          /**
+           * Run `fn` as the work an inbound 1:1 message from `conversationId`
+           * triggered. Untargeted owner content sent while it runs — from inside its
+           * async call chain, or from anywhere while it is the only turn in progress —
+           * goes to that conversation's person only.
+           *
+           * `opts.groupId` is the group that message DECRYPTED under
+           * (`metadata.conversationGroupId`). Pass it: it outranks the local
+           * conversation→group map, which can be stale, and it is all there is for a
+           * frame whose conversation is not mapped yet. With neither an id nor a
+           * group, `fn` runs unchanged.
+           */
+          async runForConversation(conversationId, fn, opts) {
+            const groupId = typeof opts?.groupId === "string" && opts.groupId ? opts.groupId : void 0;
+            if (!conversationId && !groupId) return fn();
+            const store = { convId: conversationId || void 0, groupId, ended: false };
+            this._activeTurns.add(store);
+            try {
+              return await _turnConversation.run(store, fn);
+            } finally {
+              store.ended = true;
+              store.endedAt = Date.now();
+              this._activeTurns.delete(store);
+            }
+          }
+          /**
+           * The turn this call chain belongs to (#1418) — running, or ended but
+           * still within the window in which work it left behind is for its person.
+           * `"expired"` once that window is over: the work is proactive now.
+           */
+          _currentTurn() {
+            const store = _turnConversation.getStore();
+            if (!store) return void 0;
+            if (!store.ended) return store;
+            return Date.now() - (store.endedAt ?? 0) < PERSON_INVOLVED_WINDOW_MS ? store : "expired";
+          }
+          /**
+           * Record an owner 1:1 message that just decrypted (#1418).
+           *
+           * Always kept as evidence of which conversation, group and browser belong
+           * together (see `_dmPeople`). It makes its person "the person involved" only
+           * when it is RECENT by the server's `createdAt`: a frame replayed from
+           * backlog on reconnect is not something anyone is waiting on an answer to.
+           */
+          _noteInboundDm(convId, groupId, opts = {}) {
+            if (!convId && !groupId) return;
+            const now = Date.now();
+            const sentAt = opts.createdAt ? Date.parse(opts.createdAt) : NaN;
+            const at = Number.isFinite(sentAt) ? Math.min(now, sentAt) : now;
+            const sender = opts.senderDeviceId && opts.senderDeviceId !== this._deviceId ? opts.senderDeviceId : void 0;
+            const key = `${convId ?? ""}|${groupId ?? ""}|${sender ?? ""}`;
+            const prior = this._attestedInbound.get(key);
+            this._attestedInbound.delete(key);
+            this._attestedInbound.set(key, { convId, groupId, senderDeviceId: sender, at: Math.max(prior?.at ?? 0, at) });
+            while (this._attestedInbound.size > ATTESTED_INBOUND_MAX) {
+              const oldest = this._attestedInbound.keys().next().value;
+              if (oldest === void 0) break;
+              this._attestedInbound.delete(oldest);
+            }
+            if (this._lastInboundDm && this._lastInboundDm.at > at) return;
+            this._lastInboundDm = {
+              convId,
+              groupId: groupId ?? (convId ? this._sessionGroupIds.get(convId) : void 0),
+              at
+            };
+          }
+          /** The group `convId`'s most recent inbound decrypted under, if any. */
+          _attestedGroupOf(convId) {
+            if (!convId) return void 0;
+            let gid;
+            for (const a2 of this._attestedInbound.values()) {
+              if (a2.convId === convId && a2.groupId) gid = a2.groupId;
+            }
+            return gid;
+          }
+          /** Does some mapped conversation point at `groupId`? */
+          _isMappedGroup(groupId) {
+            for (const gid of this._sessionGroupIds.values()) if (gid === groupId) return true;
+            return false;
+          }
+          /**
+           * An owner message decrypted under a group no mapped conversation points at
+           * (#1418): the map is stale — a Welcome landed before its conversation was
+           * learned, or a conversation was recreated. Re-resolve it from the server.
+           * Fire-and-forget and rate-limited per group: never awaited on the receive
+           * or Welcome path, so it can never hold up MLS processing.
+           */
+          _reconcileForUnmappedGroup(groupId) {
+            if (!groupId || this._isMappedGroup(groupId)) return;
+            this._reconcileSoon(`g:${groupId}`);
+          }
+          /** The same for a Double Ratchet message on a conversation the map does not know. */
+          _reconcileForUnmappedConversation(convId) {
+            if (!convId || this._sessionGroupIds.size === 0 || this._sessionGroupIds.has(convId)) return;
+            this._reconcileSoon(`c:${convId}`);
+          }
+          _reconcileSoon(key) {
+            const now = Date.now();
+            if (now - (this._unmappedReconcileAt.get(key) ?? 0) < UNMAPPED_RECONCILE_COOLDOWN_MS) return;
+            this._unmappedReconcileAt.set(key, now);
+            void Promise.resolve().then(() => this._reconcileConversationGroups()).catch((err) => console.warn("[SecureChannel] Conversation-group reconcile (unmapped group) failed:", err));
+          }
+          /** A conversation of `groupId`, for an MLS frame that named only its group. */
+          _conversationOfGroup(groupId) {
+            if (!groupId) return void 0;
+            if (this._primaryConversationId && this._sessionGroupIds.get(this._primaryConversationId) === groupId) {
+              return this._primaryConversationId;
+            }
+            for (const [convId, gid] of this._sessionGroupIds) {
+              if (gid === groupId) return convId;
+            }
+            return void 0;
+          }
+          /** Is `convId` one of this agent's own 1:1 conversations (never a room's or an A2A channel's)? */
+          _isOwnDmConversation(convId) {
+            if (this._isNonDmConversation(convId)) return false;
+            return this._sessions.has(convId) || this._sessionGroupIds.has(convId) || !!this._persisted?.mlsConversations?.[convId] || convId === this._primaryConversationId;
+          }
+          /**
+           * #1418 — the PEOPLE this agent has a 1:1 with, or `undefined` when it
+           * cannot tell (no conversation is mapped: then it behaves as before #1418).
+           *
+           * People, not groups. Since #1399 one person has one group, but an agent
+           * also keeps joined groups that are nobody's any more — husks of deleted or
+           * recreated conversations. Measured 2026-10-24: wren held 13 joined groups
+           * for 1 mapped, loopita 2 for 1, wowzer 2 for 1. Counting joined groups made
+           * all three single-person agents look like several people, and their
+           * replies could go only to a dead group.
+           *
+           * So a person is built from the conversations the server mapped, joined by
+           * evidence that two things are the same person:
+           *  - the same group (a legacy group shared by several people cannot be told
+           *    apart, so it stays one — exactly the pre-#1418 behaviour);
+           *  - the same owner browser (a browser belongs to exactly one person);
+           *  - a message that decrypted under a group, from a conversation and browser.
+           * A joined group nothing maps and nobody has spoken in is not a person. A
+           * message on an unmapped group from a browser nobody knows IS someone —
+           * that fails closed, toward "only them".
+           */
+          _dmPeople() {
+            if (this._sessionGroupIds.size === 0) return void 0;
+            const parent2 = /* @__PURE__ */ new Map();
+            const add4 = (x2) => {
+              if (!parent2.has(x2)) parent2.set(x2, x2);
+            };
+            const find = (x2) => {
+              let root3 = x2;
+              while (parent2.get(root3) !== root3) root3 = parent2.get(root3);
+              return root3;
+            };
+            const union2 = (a2, b2) => {
+              if (!a2 || !b2) return;
+              add4(a2);
+              add4(b2);
+              const ra2 = find(a2), rb = find(b2);
+              if (ra2 !== rb) parent2.set(ra2, rb);
+            };
+            const ownerOf = (convId) => {
+              const owner = this._sessions.get(convId)?.ownerDeviceId ?? this._persisted?.sessions?.[convId]?.ownerDeviceId;
+              return owner ? `d:${owner}` : void 0;
+            };
+            for (const [convId, gid] of this._sessionGroupIds) {
+              add4(`c:${convId}`);
+              union2(`c:${convId}`, `g:${gid}`);
+              union2(`c:${convId}`, ownerOf(convId));
+            }
+            const primary = this._primaryConversationId || this._persisted?.primaryConversationId;
+            const primaryGid = this._persisted?.groupId;
+            if (primary && primaryGid && (parent2.has(`c:${primary}`) || parent2.has(`g:${primaryGid}`))) {
+              union2(`c:${primary}`, `g:${primaryGid}`);
+            }
+            for (const gid of this._welcomedUnmapped.keys()) add4(`g:${gid}`);
+            const records = [...this._attestedInbound.values()].map((a2) => ({
+              a: a2,
+              nodes: [
+                a2.convId ? `c:${a2.convId}` : void 0,
+                a2.groupId ? `g:${a2.groupId}` : void 0,
+                a2.senderDeviceId ? `d:${a2.senderDeviceId}` : void 0
+              ].filter((n2) => !!n2)
+            }));
+            const placed = /* @__PURE__ */ new Set();
+            const place = (i2) => {
+              const { a: a2, nodes } = records[i2];
+              for (const n2 of nodes) add4(n2);
+              for (const n2 of nodes.slice(1)) union2(nodes[0], n2);
+              if (a2.convId && this._sessionGroupIds.has(a2.convId)) union2(`c:${a2.convId}`, ownerOf(a2.convId));
+              placed.add(i2);
+            };
+            const linkKnown = () => {
+              for (let progress = true; progress; ) {
+                progress = false;
+                records.forEach((r2, i2) => {
+                  if (!placed.has(i2) && r2.nodes.some((n2) => parent2.has(n2))) {
+                    place(i2);
+                    progress = true;
+                  }
+                });
+              }
+            };
+            linkKnown();
+            records.forEach((r2, i2) => {
+              if (!placed.has(i2) && this._mayBeNewPerson(r2.a)) place(i2);
+            });
+            linkKnown();
+            const roots = /* @__PURE__ */ new Set();
+            for (const node2 of parent2.keys()) {
+              if (!node2.startsWith("d:")) roots.add(find(node2));
+            }
+            return {
+              count: roots.size,
+              keyOf: (convId, groupId) => {
+                if (convId && parent2.has(`c:${convId}`)) return find(`c:${convId}`);
+                if (groupId && parent2.has(`g:${groupId}`)) return find(`g:${groupId}`);
+                return void 0;
+              }
+            };
+          }
+          /**
+           * May this inbound evidence stand for a person nobody knows yet (#1418)?
+           * Only if it was sent recently, and the last successful reconcile — when it
+           * started after the message was sent — listed its conversation or group.
+           */
+          _mayBeNewPerson(a2) {
+            if (Date.now() - a2.at >= PERSON_INVOLVED_WINDOW_MS) return false;
+            const r2 = this._lastReconcile;
+            if (r2 && a2.at <= r2.at && !(a2.convId && r2.convs.has(a2.convId)) && !(a2.groupId && r2.groups.has(a2.groupId))) return false;
+            return true;
+          }
+          /** More than one person has a 1:1 with this agent (#1418). Unknown counts as one: the old behaviour. */
+          _isMultiPerson() {
+            return (this._dmPeople()?.count ?? 0) > 1;
+          }
+          /**
+           * The group a turn's message decrypted under, for placing the turn when its
+           * conversation is not mapped (a mapped conversation already names its person).
+           */
+          _turnGroup(turn) {
+            return turn.groupId ?? this._attestedGroupOf(turn.convId);
+          }
+          /** The people with a 1:1 turn in progress, one turn each (#1418). */
+          _activeTurnPeople() {
+            const people = this._dmPeople();
+            const out = /* @__PURE__ */ new Map();
+            for (const turn of this._activeTurns) {
+              if (turn.convId && (turn.groupId ? this._isNonDmConversation(turn.convId) : !this._isOwnDmConversation(turn.convId))) continue;
+              const gid = this._turnGroup(turn);
+              const key = people?.keyOf(turn.convId, gid) ?? (gid ? `g:${gid}` : `c:${turn.convId}`);
+              if (!out.has(key)) out.set(key, turn);
+            }
+            return out;
+          }
+          /**
+           * The person an untargeted owner message is for (#1418), in order:
+           *
+           *  1. the turn this call chain belongs to — always, and only, that
+           *     conversation, reached on the group its message decrypted under. A turn
+           *     never borrows another conversation's turn: one it cannot place fails
+           *     closed to its own conversation. Work the turn left running (a timer, a
+           *     dispatch orphaned by the turn budget) stays with that person for
+           *     `PERSON_INVOLVED_WINDOW_MS` after the turn, then is proactive (4);
+           *  2. with no turn context (a skill's HTTP call), the one person with a turn
+           *     in progress;
+           *  3. the last inbound 1:1 message, if it is recent — a reply produced in
+           *     response to it;
+           *  4. otherwise the content is proactive: the PRIMARY conversation's person.
+           */
+          _involvedPerson() {
+            const person = (convId, groupId, reason) => ({
+              convId,
+              groupId: groupId ?? this._attestedGroupOf(convId) ?? (convId ? this._sessionGroupIds.get(convId) : void 0),
+              reason
+            });
+            const turn = this._currentTurn();
+            if (turn && turn !== "expired") {
+              return person(turn.convId ?? this._conversationOfGroup(turn.groupId), turn.groupId, turn.ended ? "outlived-turn" : "turn");
+            }
+            if (turn === "expired") return this._primaryPerson();
+            const active = this._activeTurnPeople();
+            if (active.size === 1) {
+              const [only] = active.values();
+              return person(only.convId ?? this._conversationOfGroup(only.groupId), only.groupId, "active-turn");
+            }
+            const last = this._lastInboundDm;
+            if (active.size === 0 && last && Date.now() - last.at < PERSON_INVOLVED_WINDOW_MS) {
+              return person(last.convId ?? this._conversationOfGroup(last.groupId), last.groupId, "last-inbound");
+            }
+            return this._primaryPerson();
+          }
+          /** The PRIMARY conversation's person — where proactive content goes. */
+          _primaryPerson() {
+            const primary = this._primaryConversationId || this._persisted?.primaryConversationId || void 0;
+            const primaryGroup = (primary ? this._sessionGroupIds.get(primary) : void 0) ?? this._persisted?.groupId;
+            return {
+              convId: primary,
+              groupId: primaryGroup ?? this._attestedGroupOf(primary),
+              reason: "primary"
+            };
+          }
+          /**
+           * #1418 — would an untargeted owner send right now have to GUESS between
+           * people? True only with no turn context while two or more people have a
+           * turn in progress. The local HTTP API refuses such a request (409) and
+           * asks for a conversation instead of picking one.
+           */
+          isUntargetedOwnerAmbiguous(options) {
+            if (options?.conversationId !== void 0 || options?.audience === "everyone") return false;
+            if (this._currentTurn()) return false;
+            if (!this._isMultiPerson()) return false;
+            return this._activeTurnPeople().size > 1;
+          }
+          /**
+           * Who an UNTARGETED owner send reaches, or `null` for "every session, as
+           * before". `null` when the caller chose `audience: "everyone"`, and when the
+           * agent has one person (or cannot tell how many) — nothing to choose
+           * between, so its recipients are exactly what they always were.
+           */
+          _untargetedAudience(options) {
+            if (options?.conversationId !== void 0) return null;
+            if (options?.audience === "everyone") return null;
+            if (!this._isMultiPerson()) return null;
+            return this._involvedPerson();
+          }
+          /** A stable name for who an untargeted owner send reaches right now, or undefined when that is "everyone, as before". */
+          _audienceTag(options) {
+            if (options?.audience === "everyone") return "everyone";
+            const person = this._untargetedAudience(options);
+            return person ? `person:${person.groupId ?? person.convId ?? ""}` : void 0;
+          }
+          /** Does conversation `convId` belong to `person`? A conversation nothing ties to them fails closed. */
+          _isPersonsConversation(person, convId) {
+            if (convId === person.convId) return true;
+            const gid = this._sessionGroupIds.get(convId);
+            if (gid !== void 0 && gid === person.groupId) return true;
+            const people = this._dmPeople();
+            const theirs = people?.keyOf(person.convId, person.groupId);
+            return theirs !== void 0 && people.keyOf(convId, gid) === theirs;
+          }
+          /**
+           * #1418: the Double Ratchet sessions an owner-bound FILE (attachment or
+           * artifact) goes to, bucketed by the conversation its blob is uploaded
+           * under. The blob is uploaded under a conversation of the person who gets
+           * it — the backend only lets that conversation's participants download it —
+           * so an explicit "everyone" uploads once per person.
+           */
+          _ownerFileRecipients(routing) {
+            const roomConvIds = /* @__PURE__ */ new Set();
+            for (const room of Object.values(this._persisted?.rooms ?? {})) {
+              for (const cid of room.conversationIds ?? []) roomConvIds.add(cid);
+            }
+            const live = [...this._sessions].filter(([convId, session]) => session.activated && !roomConvIds.has(convId)).map(([convId]) => convId);
+            const person = routing?.conversationId !== void 0 ? { convId: routing.conversationId, groupId: this._sessionGroupIds.get(routing.conversationId), reason: "target" } : this._untargetedAudience(routing);
+            if (person) {
+              const convIds = live.filter((convId) => this._isPersonsConversation(person, convId));
+              const uploadConvId = person.convId ?? convIds[0];
+              return uploadConvId && convIds.length > 0 ? [{ uploadConvId, convIds }] : [];
+            }
+            if (live.length === 0) return [];
+            if (!this._isMultiPerson()) {
+              return [{ uploadConvId: this._primaryConversationId, convIds: live }];
+            }
+            const people = this._dmPeople();
+            const buckets = /* @__PURE__ */ new Map();
+            for (const convId of live) {
+              const gid = this._sessionGroupIds.get(convId);
+              const key = people?.keyOf(convId, gid) ?? gid ?? `c:${convId}`;
+              buckets.set(key, [...buckets.get(key) ?? [], convId]);
+            }
+            return [...buckets.values()].map((convIds) => ({
+              uploadConvId: convIds.includes(this._primaryConversationId) ? this._primaryConversationId : convIds[0],
+              convIds
+            }));
+          }
           /** The group a DM history entry belongs to (see the forms above). */
           _dmEntryScope(entry, known) {
             const t2 = entry.topicId ?? "";
@@ -72709,6 +73273,7 @@ ${text}`;
             Promise.resolve().then(() => (init_openclaw_compat(), openclaw_compat_exports)).then(({ requestHeartbeatNow: requestHeartbeatNow2 }) => requestHeartbeatNow2({ reason: "channel-send" })).catch(() => {
             });
             const targetConvId = options?.conversationId;
+            const audience = this._untargetedAudience(options);
             const explicitTopicId = options?.topicId;
             const targeted = targetConvId !== void 0;
             const frameHistoryContexts = [];
@@ -72747,7 +73312,7 @@ ${text}`;
             if (this._persisted?.mlsGroups && this._state === "ready" && this._ws) {
               const targetSharedGid = targetConvId ? this._sessionGroupIds?.get(targetConvId) : void 0;
               console.log(
-                `[SecureChannel] send(): considering ${Object.keys(this._persisted.mlsGroups).length} shared group(s); targetConvId=${targetConvId ? targetConvId.slice(0, 8) : "(none \u2014 broadcast)"} targetSharedGid=${targetSharedGid ? targetSharedGid.slice(0, 8) : "(none)"}`
+                `[SecureChannel] send(): considering ${Object.keys(this._persisted.mlsGroups).length} shared group(s); targetConvId=${targetConvId ? targetConvId.slice(0, 8) : audience ? `(none \u2014 person involved: ${audience.reason})` : "(none \u2014 everyone)"} targetSharedGid=${targetSharedGid ? targetSharedGid.slice(0, 8) : audience?.groupId ? audience.groupId.slice(0, 8) : "(none)"}`
               );
               const skipped = [];
               for (const [gid, entry] of Object.entries(this._persisted.mlsGroups)) {
@@ -72755,6 +73320,10 @@ ${text}`;
                   skipped.push(`${gid.slice(0, 8)}:not-target`);
                   continue;
                 }
+                if (audience && gid !== audience.groupId) {
+                  skipped.push(`${gid.slice(0, 8)}:not-involved`);
+                  continue;
+                }
                 if (!entry.mlsGroupId) {
                   skipped.push(`${gid.slice(0, 8)}:no-mlsGroupId`);
                   continue;
@@ -72811,6 +73380,7 @@ ${text}`;
               if (!session.activated) continue;
               if (roomConvIds.has(convId)) continue;
               if (targetConvId && convId !== targetConvId) continue;
+              if (audience && !this._isPersonsConversation(audience, convId)) continue;
               const convGroupId = this._sessionGroupIds?.get(convId);
               if (convGroupId && sentSharedGroupIds.has(convGroupId)) {
                 sentCount++;
@@ -72929,6 +73499,7 @@ ${text}`;
             if (this._persisted?.mlsConversations && this._state === "ready" && this._ws) {
               for (const [mlsConvId, entry] of Object.entries(this._persisted.mlsConversations)) {
                 if (targetConvId && mlsConvId !== targetConvId) continue;
+                if (audience && !this._isPersonsConversation(audience, mlsConvId)) continue;
                 if (this._sessions.has(mlsConvId)) continue;
                 if (roomConvIds.has(mlsConvId)) continue;
                 const mlsOnlyConvGroupId = this._sessionGroupIds?.get(mlsConvId);
@@ -73052,7 +73623,7 @@ ${text}`;
            */
           sendActivitySpan(spanData) {
             if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-            const pluginVersion = true ? "0.23.51" : "0.0.0-dev";
+            const pluginVersion = true ? "0.23.53" : "0.0.0-dev";
             const agentName = this.config.agentName ?? "Agent";
             const resource = {
               "service.name": "agentvault-agent",
@@ -73104,7 +73675,7 @@ ${text}`;
            * Builds a structured envelope with decision metadata and sends it
            * as a high-priority message. Returns the generated decision_id.
            */
-          async sendDecisionRequest(request) {
+          async sendDecisionRequest(request, routing) {
             const decision_id = `dec_${randomUUID4().replace(/-/g, "").slice(0, 16)}`;
             const payload = JSON.stringify({
               type: "message",
@@ -73115,6 +73686,8 @@ ${text}`;
               }
             });
             await this.send(payload, {
+              conversationId: routing?.conversationId,
+              audience: routing?.audience,
               messageType: "decision_request",
               priority: "high",
               metadata: {
@@ -73521,6 +74094,7 @@ ${text}`;
             const jwt = this._deviceJwt ?? this._persisted?.deviceJwt;
             if (!jwt || !this._persisted) return false;
             let rows;
+            const reconcileStartedAt = Date.now();
             try {
               const res = await fetch(`${this.config.apiUrl}/api/v1/conversations`, {
                 headers: { Authorization: `Bearer ${jwt}` }
@@ -73549,6 +74123,19 @@ ${text}`;
             }
             this._sessionGroupIds = new Map(mine.map((r2) => [r2.id, r2.group_id]));
             this._persisted.conversationGroupIds = Object.fromEntries(this._sessionGroupIds);
+            {
+              const convs = new Set(mine.map((r2) => r2.id));
+              const groups = new Set(mine.map((r2) => r2.group_id));
+              this._lastReconcile = { at: reconcileStartedAt, convs, groups };
+              for (const [key, a2] of this._attestedInbound) {
+                if (a2.at > reconcileStartedAt) continue;
+                if (a2.convId && convs.has(a2.convId) || a2.groupId && groups.has(a2.groupId)) continue;
+                this._attestedInbound.delete(key);
+              }
+              for (const [gid, at] of this._welcomedUnmapped) {
+                if (at <= reconcileStartedAt) this._welcomedUnmapped.delete(gid);
+              }
+            }
             const joined = mine.find((r2) => this._persisted.mlsGroups?.[r2.group_id]);
             const primary = mine.find((r2) => r2.id === this._persisted.primaryConversationId) ?? joined ?? mine[0];
             if (!mine.some((r2) => r2.id === this._persisted.primaryConversationId)) {
@@ -73742,7 +74329,7 @@ ${text}`;
             }
             this._heartbeatCallback = null;
           }
-          async sendStatusAlert(alert) {
+          async sendStatusAlert(alert, routing) {
             const priority = alert.severity === "error" || alert.severity === "critical" ? "high" : "normal";
             const envelope = {
               title: alert.title,
@@ -73756,52 +74343,61 @@ ${text}`;
             await this.send(
               JSON.stringify(envelope),
               {
+                conversationId: routing?.conversationId,
+                audience: routing?.audience,
                 messageType: "status_alert",
                 priority,
                 metadata: { severity: alert.severity }
               }
             );
           }
-          async sendArtifact(artifact) {
+          async sendArtifact(artifact, routing) {
             if (this._state !== "ready" || this._sessions.size === 0 || !this._ws) {
               throw new Error("Channel is not ready");
             }
-            const attachMeta = await this._uploadAttachment(artifact.filePath, this._primaryConversationId);
-            const envelope = JSON.stringify({
-              type: "artifact",
-              blob_id: attachMeta.blobId,
-              blob_url: attachMeta.blobUrl,
-              filename: artifact.filename,
-              mime_type: artifact.mimeType,
-              size_bytes: attachMeta.size,
-              description: artifact.description,
-              attachment: attachMeta
-            });
             const messageGroupId = randomUUID4();
             const pendingWsSends = [];
-            for (const [convId, session] of this._sessions) {
-              if (!session.activated) continue;
-              const encrypted = session.ratchet.encrypt(envelope);
-              const transport = encryptedMessageToTransport(encrypted);
-              pendingWsSends.push(
-                JSON.stringify({
-                  event: "message",
-                  data: {
-                    conversation_id: convId,
-                    header_blob: transport.header_blob,
-                    ciphertext: transport.ciphertext,
-                    message_group_id: messageGroupId,
-                    message_type: "artifact_share"
-                  }
-                })
-              );
+            const buckets = this._ownerFileRecipients(routing);
+            if (buckets.length === 0) {
+              console.warn("[SecureChannel] sendArtifact(): no live session for the person involved \u2014 nothing sent");
+              throw new Error("No conversation is ready to receive this file");
+            }
+            for (const bucket of buckets) {
+              const attachMeta = await this._uploadAttachment(artifact.filePath, bucket.uploadConvId);
+              const envelope = JSON.stringify({
+                type: "artifact",
+                blob_id: attachMeta.blobId,
+                blob_url: attachMeta.blobUrl,
+                filename: artifact.filename,
+                mime_type: artifact.mimeType,
+                size_bytes: attachMeta.size,
+                description: artifact.description,
+                attachment: attachMeta
+              });
+              for (const convId of bucket.convIds) {
+                const session = this._sessions.get(convId);
+                const encrypted = session.ratchet.encrypt(envelope);
+                const transport = encryptedMessageToTransport(encrypted);
+                pendingWsSends.push(
+                  JSON.stringify({
+                    event: "message",
+                    data: {
+                      conversation_id: convId,
+                      header_blob: transport.header_blob,
+                      ciphertext: transport.ciphertext,
+                      message_group_id: messageGroupId,
+                      message_type: "artifact_share"
+                    }
+                  })
+                );
+              }
             }
             await this._persistState();
             for (const frame of pendingWsSends) {
               this._ws.send(frame);
             }
           }
-          async sendActionConfirmation(confirmation) {
+          async sendActionConfirmation(confirmation, routing) {
             const envelope = {
               type: "action_confirmation",
               action: confirmation.action,
@@ -73812,6 +74408,8 @@ ${text}`;
             await this.send(
               JSON.stringify(envelope),
               {
+                conversationId: routing?.conversationId,
+                audience: routing?.audience,
                 messageType: "action_confirmation",
                 metadata: { status: confirmation.status }
               }
@@ -73917,9 +74515,23 @@ ${text}`;
             } else {
               return { ok: false, destination: { kind: "owner" }, error: "Unknown target kind", timestamp: ts };
             }
+            if (resolved.kind === "owner" && options?.refuseIfAmbiguous && this.isUntargetedOwnerAmbiguous(options)) {
+              console.log(`[deliver] target=owner content=${content.type} result=REFUSED: ambiguous (several people mid-turn)`);
+              return { ok: false, ambiguous: true, destination: resolved, error: AMBIGUOUS_OWNER_ERROR, timestamp: ts };
+            }
             let dedupeKey = null;
             try {
-              dedupeKey = outboundDedupeKey(resolved, content, options);
+              let audienceTag;
+              try {
+                audienceTag = resolved.kind === "owner" && options?.conversationId === void 0 ? this._audienceTag(options) : void 0;
+              } catch {
+                audienceTag = void 0;
+              }
+              dedupeKey = outboundDedupeKey(
+                resolved,
+                content,
+                audienceTag ? { ...options, conversationId: audienceTag } : options
+              );
               if (dedupeKey) {
                 const now = Date.now();
                 const recent = this._recentDeliveries ??= /* @__PURE__ */ new Map();
@@ -73939,6 +74551,10 @@ ${text}`;
             }
             try {
               let decisionId;
+              const ownerRouting = {
+                conversationId: options?.conversationId,
+                audience: options?.audience
+              };
               if (content.type === "text") {
                 if (resolved.kind === "room") {
                   await this.sendToRoom(resolved.id, content.text, {
@@ -73957,6 +74573,7 @@ ${text}`;
                 } else {
                   await this.send(content.text, {
                     conversationId: options?.conversationId,
+                    audience: options?.audience,
                     topicId: options?.topicId,
                     messageType: options?.metadata?.message_type,
                     priority: options?.priority,
@@ -73969,7 +74586,7 @@ ${text}`;
                   console.log(`[deliver] target=${resolved.kind}:${resolved.id} content=decision_request result=FAIL: ${err}`);
                   return { ok: false, destination: resolved, error: err, timestamp: ts };
                 }
-                decisionId = await this.sendDecisionRequest(content.request);
+                decisionId = await this.sendDecisionRequest(content.request, ownerRouting);
               } else if (content.type === "status_alert") {
                 if (resolved.kind === "room") {
                   const envelope = {
@@ -73987,7 +74604,7 @@ ${text}`;
                     metadata: { severity: content.alert.severity }
                   });
                 } else if (resolved.kind === "owner") {
-                  await this.sendStatusAlert(content.alert);
+                  await this.sendStatusAlert(content.alert, ownerRouting);
                 } else {
                   return { ok: false, destination: resolved, error: "Status alerts cannot be sent to A2A targets", timestamp: ts };
                 }
@@ -73995,7 +74612,7 @@ ${text}`;
                 if (resolved.kind === "room") {
                   await this.sendActionConfirmationToRoom(resolved.id, content.confirmation);
                 } else if (resolved.kind === "owner") {
-                  await this.sendActionConfirmation(content.confirmation);
+                  await this.sendActionConfirmation(content.confirmation, ownerRouting);
                 } else {
                   return { ok: false, destination: resolved, error: "Action confirmations cannot be sent to A2A targets", timestamp: ts };
                 }
@@ -74003,13 +74620,14 @@ ${text}`;
                 if (resolved.kind !== "owner") {
                   return { ok: false, destination: resolved, error: "Artifacts can only be sent to owner", timestamp: ts };
                 }
-                await this.sendArtifact(content.artifact);
+                await this.sendArtifact(content.artifact, ownerRouting);
               } else if (content.type === "attachment") {
                 if (resolved.kind !== "owner") {
                   return { ok: false, destination: resolved, error: "Attachments can only be sent to owner", timestamp: ts };
                 }
                 await this.sendWithAttachment(content.text, content.filePath, {
-                  topicId: options?.topicId
+                  topicId: options?.topicId,
+                  ...ownerRouting
                 });
               }
               const targetLabel = resolved.kind === "owner" ? "owner" : `${resolved.kind}:${resolved.id?.slice(0, 8)}...`;
@@ -75182,7 +75800,7 @@ ${text}`;
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.51" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.53" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -75510,7 +76128,7 @@ ${text}`;
                         agentVersion: this.config.agentVersion ?? "0.0.0",
                         // __AV_VERSION__ is injected by esbuild from package.json at build time.
                         // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                        pluginVersion: true ? "0.23.51" : "0.0.0-dev"
+                        pluginVersion: true ? "0.23.53" : "0.0.0-dev"
                       });
                       this._telemetryReporter.startAutoFlush(3e4);
                     }
@@ -76051,9 +76669,18 @@ ${text}`;
                 messageType,
                 { groupId: dmGroupId, conversationId: convId }
               );
+              const dmConvId = convId ?? this._conversationOfGroup(dmGroupId);
+              this._noteInboundDm(dmConvId, dmGroupId, { createdAt: data.created_at, senderDeviceId });
+              this._reconcileForUnmappedGroup(dmGroupId);
               const metadata = {
                 messageId: data.message_id ?? `mls_${Date.now()}`,
-                conversationId: convId ?? this._primaryConversationId,
+                // A frame on a KNOWN group that no conversation maps yet is not the
+                // primary person's: leave the conversation unnamed rather than hand
+                // the reply to someone else; `conversationGroupId` still places it.
+                conversationId: dmConvId ?? (dmGroupId ? void 0 : this._primaryConversationId),
+                // #1418: the group this message decrypted under — attested, so a turn
+                // answers here even when the local map is stale.
+                conversationGroupId: dmGroupId,
                 timestamp: data.created_at ?? (/* @__PURE__ */ new Date()).toISOString(),
                 topicId,
                 // #621: positive attestation that this decrypted under the OWNER'S 1:1
@@ -76308,6 +76935,13 @@ ${messageText}`;
                 // envelope text before the fold; `emitText` is the folded copy.
                 caption: messageText
               };
+              if (!roomId) {
+                this._noteInboundDm(convId, void 0, {
+                  createdAt: msgData.created_at,
+                  senderDeviceId: msgData.sender_device_id
+                });
+                this._reconcileForUnmappedConversation(convId);
+              }
               this.emit("message", emitText, metadata);
               Promise.resolve(this.config.onMessage?.(emitText, metadata)).catch((err) => {
                 console.error("[SecureChannel] onMessage callback error:", err);
@@ -76456,34 +77090,41 @@ ${baseText}`;
             if (this._state !== "ready" || this._sessions.size === 0 || !this._ws) {
               throw new Error("Channel is not ready");
             }
-            const attachMeta = await this._uploadAttachment(filePath, this._primaryConversationId);
             const messageGroupId = randomUUID4();
             const pendingWsSends = [];
             const frameHistoryContexts = [];
-            for (const [convId, session] of this._sessions) {
-              if (!session.activated) continue;
-              const topicId = this._topicForFrame(void 0, convId, options?.topicId, false, false);
-              const envelope = JSON.stringify({
-                type: "message",
-                text: plaintext,
-                topicId,
-                attachment: attachMeta
-              });
-              const encrypted = session.ratchet.encrypt(envelope);
-              const transport = encryptedMessageToTransport(encrypted);
-              pendingWsSends.push(
-                JSON.stringify({
-                  event: "message",
-                  data: {
-                    conversation_id: convId,
-                    header_blob: transport.header_blob,
-                    ciphertext: transport.ciphertext,
-                    message_group_id: messageGroupId,
-                    topic_id: topicId
-                  }
-                })
-              );
-              frameHistoryContexts.push(this._dmHistoryContext(topicId, void 0, convId));
+            const buckets = this._ownerFileRecipients(options);
+            if (buckets.length === 0) {
+              console.warn("[SecureChannel] sendWithAttachment(): no live session for the person involved \u2014 nothing sent");
+              throw new Error("No conversation is ready to receive this file");
+            }
+            for (const bucket of buckets) {
+              const attachMeta = await this._uploadAttachment(filePath, bucket.uploadConvId);
+              for (const convId of bucket.convIds) {
+                const session = this._sessions.get(convId);
+                const topicId = this._topicForFrame(void 0, convId, options?.topicId, false, false);
+                const envelope = JSON.stringify({
+                  type: "message",
+                  text: plaintext,
+                  topicId,
+                  attachment: attachMeta
+                });
+                const encrypted = session.ratchet.encrypt(envelope);
+                const transport = encryptedMessageToTransport(encrypted);
+                pendingWsSends.push(
+                  JSON.stringify({
+                    event: "message",
+                    data: {
+                      conversation_id: convId,
+                      header_blob: transport.header_blob,
+                      ciphertext: transport.ciphertext,
+                      message_group_id: messageGroupId,
+                      topic_id: topicId
+                    }
+                  })
+                );
+                frameHistoryContexts.push(this._dmHistoryContext(topicId, void 0, convId));
+              }
             }
             await this._persistState();
             let deliveredFrames = 0;
@@ -76643,10 +77284,15 @@ ${baseText}`;
               `[SecureChannel] New owner device linked: ${event.owner_device_id.slice(0, 8)}...`
             );
             try {
+              if (event.group_id && !this._sessionGroupIds.has(event.conversation_id)) {
+                this._sessionGroupIds.set(event.conversation_id, event.group_id);
+                this._persisted.conversationGroupIds = Object.fromEntries(this._sessionGroupIds);
+              }
               if (!event.owner_identity_public_key) {
                 console.error(
                   `[SecureChannel] device_linked event missing owner keys for conv ${event.conversation_id.slice(0, 8)}...`
                 );
+                await this._persistState();
                 return;
               }
               const identity = this._persisted.identityKeypair;
@@ -76681,10 +77327,6 @@ ${baseText}`;
               if (event.owner_hub_id) {
                 this._persisted.ownerHubId = event.owner_hub_id;
               }
-              if (event.group_id && !this._sessionGroupIds.has(event.conversation_id)) {
-                this._sessionGroupIds.set(event.conversation_id, event.group_id);
-                this._persisted.conversationGroupIds = Object.fromEntries(this._sessionGroupIds);
-              }
               await this._persistState();
               console.log(
                 `[SecureChannel] Session initialized for device ${event.owner_device_id.slice(0, 8)}... (conv ${event.conversation_id.slice(0, 8)}...)`
@@ -77422,7 +78064,7 @@ ${baseText}`;
               return 0;
             }
             const snapshot = mlsGroup.exportState();
-            const preHead = await this._readGroupHead(mlsGroupId);
+            const preHead = opts.preHead ?? await this._readGroupHead(mlsGroupId);
             if (preHead.ok && preHead.epoch !== Number(mlsGroup.epoch)) {
               console.warn(
                 `[SecureChannel] ${label}: server head is at epoch ${preHead.epoch}, we are at ${Number(mlsGroup.epoch)} \u2014 NOT committing (it would be refused, #1184); ${targets.length} request(s) stay pending`
@@ -77609,6 +78251,40 @@ ${baseText}`;
           _wsIsOpen() {
             return this._ws?.readyState === 1;
           }
+          /**
+           * #1429 review: the cheap checks `_fulfilWelcomeRequests` makes, run BEFORE a
+           * pending-Welcome site claims KeyPackages — the order #1225 S4 gave the A2A
+           * path. `GET /key-packages/batch` CONSUMES; the room, shared-1:1 and conv
+           * sites used to claim one per pending device and only then find the socket
+           * closed, another commit in flight, or the server head elsewhere — burning a
+           * package per device per failed pull (and the shared/conv sites have no
+           * cooldown). `_fulfilWelcomeRequests` keeps its own checks: this is a gate on
+           * spending, not a replacement for the guard at the point of commit.
+           */
+          /**
+           * Returns the head it read (handed on to `_fulfilWelcomeRequests` as its
+           * pre-flight, so a pull still reads the head once before committing), or
+           * `null` when nothing should be claimed this pull.
+           */
+          async _welcomeCommitPreflight(mlsGroupId, mlsGroup, label) {
+            if (!this._wsIsOpen()) {
+              console.warn(`[SecureChannel] ${label}: socket is not OPEN \u2014 not claiming KeyPackages; requests stay pending for the next pull`);
+              return null;
+            }
+            if (this._commitInFlight.has(mlsGroupId)) {
+              console.warn(`[SecureChannel] ${label}: another commit for this group is in flight \u2014 not claiming KeyPackages this pull`);
+              return null;
+            }
+            const head = await this._readGroupHead(mlsGroupId);
+            if (head.ok && head.epoch !== Number(mlsGroup.epoch)) {
+              console.warn(
+                `[SecureChannel] ${label}: server head is at epoch ${head.epoch}, we are at ${Number(mlsGroup.epoch)} \u2014 not claiming KeyPackages (the commit would be refused, #1184); requests stay pending`
+              );
+              await this._catchUpAfterPreflightSkip(mlsGroupId, head.epoch, Number(mlsGroup.epoch), label);
+              return null;
+            }
+            return head;
+          }
           /** SHA-256 hex of a commit's bytes — its identity on the server (#1175/#1177). */
           /**
            * #1225: send ONE commit over the socket and wait for the server's verdict,
@@ -78354,6 +79030,10 @@ ${baseText}`;
                   await this._persistState();
                 }
                 console.log(`[SecureChannel] Joined shared 1:1 MLS group for group ${conversationGroupId.slice(0, 8)} via Welcome (epoch=${mgr.epoch})`);
+                if (!this._isMappedGroup(conversationGroupId)) {
+                  this._welcomedUnmapped.set(conversationGroupId, Date.now());
+                }
+                this._reconcileForUnmappedGroup(conversationGroupId);
                 await this._flushMlsHold(conversationGroupId);
                 return;
               }
@@ -78630,14 +79310,27 @@ ${baseText}`;
                 const roomState = this._persisted?.rooms?.[roomId];
                 if (!roomState?.mlsGroupId) continue;
                 try {
+                  const roomLabel = `room ${roomId.slice(0, 8)}`;
                   const pendingRes = await fetch(
                     `${this.config.apiUrl}/api/v1/mls/groups/${roomState.mlsGroupId}/pending-welcomes`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  if (!pendingRes.ok) continue;
+                  if (!pendingRes.ok) {
+                    this._welcomeKpBackoff.noteFetchFailure(`pending-welcomes for ${roomLabel}`, pendingRes.status);
+                    continue;
+                  }
+                  this._welcomeKpBackoff.noteFetchOk(`pending-welcomes for ${roomLabel}`);
                   let pending = await pendingRes.json();
+                  if (this._welcomeKpBackoff.observePending(roomState.mlsGroupId, pending)) {
+                    console.log(`[SecureChannel] ${pending.length} pending Welcome requests for room ${roomId.slice(0, 8)}`);
+                  }
+                  if (pending.length === 0) continue;
+                  const nowKp = Date.now();
+                  const roomMlsGroupId = roomState.mlsGroupId;
+                  pending = pending.filter(
+                    (r2) => this._welcomeKpBackoff.shouldAsk(roomMlsGroupId, r2.requesting_device_id, r2.key_package_available, roomLabel, nowKp)
+                  );
                   if (pending.length === 0) continue;
-                  console.log(`[SecureChannel] ${pending.length} pending Welcome requests for room ${roomId.slice(0, 8)}`);
                   const nowMs = Date.now();
                   const fresh = pending.filter((r2) => {
                     const key = `${roomState.mlsGroupId}:${r2.requesting_device_id}`;
@@ -78651,6 +79344,8 @@ ${baseText}`;
                     return true;
                   });
                   if (fresh.length === 0) continue;
+                  const roomPreHead = await this._welcomeCommitPreflight(roomState.mlsGroupId, mlsGroup, roomLabel);
+                  if (!roomPreHead) continue;
                   for (const r2 of fresh) {
                     this._roomFulfilCooldown.set(`${roomState.mlsGroupId}:${r2.requesting_device_id}`, nowMs);
                   }
@@ -78660,13 +79355,23 @@ ${baseText}`;
                     `${this.config.apiUrl}/api/v1/mls/key-packages/batch?device_ids=${deviceIds.join(",")}`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  if (!kpRes.ok) continue;
+                  if (!kpRes.ok) {
+                    this._welcomeKpBackoff.noteFetchFailure(`KeyPackage batch for ${roomLabel}`, kpRes.status);
+                    continue;
+                  }
+                  this._welcomeKpBackoff.noteFetchOk(`KeyPackage batch for ${roomLabel}`);
                   const kpData = await kpRes.json();
                   const roomTargets = [];
                   for (const req of pending) {
                     const kpHex = kpData[req.requesting_device_id];
+                    this._welcomeKpBackoff.recordKeyPackage(
+                      roomState.mlsGroupId,
+                      req.requesting_device_id,
+                      Boolean(kpHex),
+                      req.key_package_available,
+                      roomLabel
+                    );
                     if (!kpHex) {
-                      console.warn(`[SecureChannel] No KeyPackage for ${req.requesting_device_id.slice(0, 8)}, skipping`);
                       continue;
                     }
                     const kpBytes = new Uint8Array(Buffer.from(kpHex, "hex"));
@@ -78684,8 +79389,10 @@ ${baseText}`;
                       label: `room ${roomId.slice(0, 8)}`,
                       welcomeFields: { room_id: roomId },
                       targets: roomTargets,
-                      memberDeviceIds: (roomState.members ?? []).map((m2) => m2.deviceId)
+                      memberDeviceIds: (roomState.members ?? []).map((m2) => m2.deviceId),
                       // #1226
+                      preHead: roomPreHead
+                      // #1429
                     });
                     if (done > 0) {
                       console.log(
@@ -78703,28 +79410,49 @@ ${baseText}`;
                 const mlsGroup = this._mlsGroups.get(`1to1-group:${gid}`);
                 if (!mlsGroup?.isInitialized) continue;
                 try {
+                  const sharedLabel = `shared group ${gid.slice(0, 8)}`;
                   const pendingRes = await fetch(
                     `${this.config.apiUrl}/api/v1/mls/groups/${entry.mlsGroupId}/pending-welcomes`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  if (!pendingRes.ok) continue;
-                  const pending = await pendingRes.json();
+                  if (!pendingRes.ok) {
+                    this._welcomeKpBackoff.noteFetchFailure(`pending-welcomes for ${sharedLabel}`, pendingRes.status);
+                    continue;
+                  }
+                  this._welcomeKpBackoff.noteFetchOk(`pending-welcomes for ${sharedLabel}`);
+                  const allPending = await pendingRes.json();
+                  if (this._welcomeKpBackoff.observePending(entry.mlsGroupId, allPending)) {
+                    console.log(`[SecureChannel] ${allPending.length} pending Welcome requests for shared group ${gid.slice(0, 8)}`);
+                  }
+                  const nowKp = Date.now();
+                  const pending = allPending.filter(
+                    (r2) => this._welcomeKpBackoff.shouldAsk(entry.mlsGroupId, r2.requesting_device_id, r2.key_package_available, sharedLabel, nowKp)
+                  );
                   if (pending.length === 0) continue;
-                  console.log(`[SecureChannel] ${pending.length} pending Welcome requests for shared group ${gid.slice(0, 8)}`);
+                  const sharedPreHead = await this._welcomeCommitPreflight(entry.mlsGroupId, mlsGroup, sharedLabel);
+                  if (!sharedPreHead) continue;
                   const deviceIds = pending.map((r2) => r2.requesting_device_id);
                   const kpRes = await fetch(
                     `${this.config.apiUrl}/api/v1/mls/key-packages/batch?device_ids=${deviceIds.join(",")}`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  if (!kpRes.ok) continue;
+                  if (!kpRes.ok) {
+                    this._welcomeKpBackoff.noteFetchFailure(`KeyPackage batch for ${sharedLabel}`, kpRes.status);
+                    continue;
+                  }
+                  this._welcomeKpBackoff.noteFetchOk(`KeyPackage batch for ${sharedLabel}`);
                   const kpData = await kpRes.json();
                   const validReqs = [];
                   for (const req of pending) {
                     const kpHex = kpData[req.requesting_device_id];
-                    if (!kpHex) {
-                      console.warn(`[SecureChannel] No KeyPackage for ${req.requesting_device_id.slice(0, 8)}, skipping`);
-                      continue;
-                    }
+                    this._welcomeKpBackoff.recordKeyPackage(
+                      entry.mlsGroupId,
+                      req.requesting_device_id,
+                      Boolean(kpHex),
+                      req.key_package_available,
+                      sharedLabel
+                    );
+                    if (!kpHex) continue;
                     const kpBytes = new Uint8Array(Buffer.from(kpHex, "hex"));
                     validReqs.push({ req, kp: MLSGroupManager.deserializeKeyPackage(kpBytes) });
                   }
@@ -78741,8 +79469,10 @@ ${baseText}`;
                       label: `shared group ${gid.slice(0, 8)}`,
                       welcomeFields: { conversation_group_id: gid },
                       targets: sharedTargets,
-                      memberDeviceIds: entry.memberDeviceIds ?? []
+                      memberDeviceIds: entry.memberDeviceIds ?? [],
                       // #1226
+                      preHead: sharedPreHead
+                      // #1429
                     });
                     if (done > 0) {
                       console.log(`[SecureChannel] Batched Welcome for ${done}/${validReqs.length} devices in shared group ${gid.slice(0, 8)} (epoch=${mlsGroup.epoch})`);
@@ -78776,23 +79506,49 @@ ${baseText}`;
                 const mlsGroup = this._mlsGroups.get(`conv:${convId}`);
                 if (!mlsGroup?.isInitialized) continue;
                 try {
+                  const convLabel = `conv ${convId.slice(0, 8)}`;
                   const pendingRes = await fetch(
                     `${this.config.apiUrl}/api/v1/mls/groups/${convEntry.mlsGroupId}/pending-welcomes`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  if (!pendingRes.ok) continue;
+                  if (!pendingRes.ok) {
+                    this._welcomeKpBackoff.noteFetchFailure(`pending-welcomes for ${convLabel}`, pendingRes.status);
+                    continue;
+                  }
+                  this._welcomeKpBackoff.noteFetchOk(`pending-welcomes for ${convLabel}`);
                   const pending = await pendingRes.json();
+                  if (this._welcomeKpBackoff.observePending(convEntry.mlsGroupId, pending)) {
+                    console.log(`[SecureChannel] ${pending.length} pending Welcome requests for conv ${convId.slice(0, 8)}`);
+                  }
                   if (pending.length === 0) continue;
-                  console.log(`[SecureChannel] ${pending.length} pending Welcome requests for conv ${convId.slice(0, 8)}`);
                   for (const req of pending) {
                     try {
+                      if (!this._welcomeKpBackoff.shouldAsk(
+                        convEntry.mlsGroupId,
+                        req.requesting_device_id,
+                        req.key_package_available,
+                        convLabel
+                      )) continue;
+                      const convPreHead = await this._welcomeCommitPreflight(convEntry.mlsGroupId, mlsGroup, convLabel);
+                      if (!convPreHead) break;
                       const kpRes = await fetch(
                         `${this.config.apiUrl}/api/v1/mls/key-packages/batch?device_ids=${req.requesting_device_id}`,
                         { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                       );
-                      if (!kpRes.ok) continue;
+                      if (!kpRes.ok) {
+                        this._welcomeKpBackoff.noteFetchFailure(`KeyPackage batch for ${convLabel}`, kpRes.status);
+                        continue;
+                      }
+                      this._welcomeKpBackoff.noteFetchOk(`KeyPackage batch for ${convLabel}`);
                       const kpData = await kpRes.json();
                       const kpHex = kpData[req.requesting_device_id];
+                      this._welcomeKpBackoff.recordKeyPackage(
+                        convEntry.mlsGroupId,
+                        req.requesting_device_id,
+                        Boolean(kpHex),
+                        req.key_package_available,
+                        convLabel
+                      );
                       if (!kpHex) continue;
                       const kpBytes = new Uint8Array(Buffer.from(kpHex, "hex"));
                       const memberKp = MLSGroupManager.deserializeKeyPackage(kpBytes);
@@ -78809,7 +79565,9 @@ ${baseText}`;
                         // #1226: a 1:1 roster is [self, owner] — the web's shape too.
                         memberDeviceIds: [this._persisted?.sessions?.[convId]?.ownerDeviceId].filter(
                           (d2) => typeof d2 === "string"
-                        )
+                        ),
+                        preHead: convPreHead
+                        // #1429
                       });
                       if (done > 0) {
                         console.log(`[SecureChannel] Fulfilled Welcome for ${req.requesting_device_id.slice(0, 8)} in conv ${convId.slice(0, 8)}`);
@@ -78857,15 +79615,28 @@ ${baseText}`;
                 if (!mlsGroup?.isInitialized) continue;
                 if (chState.role !== "creator") continue;
                 try {
+                  const a2aPendingLabel = `A2A ${chId.slice(0, 8)}`;
                   const pendingRes = await fetch(
                     `${this.config.apiUrl}/api/v1/mls/groups/${chState.mlsGroupId}/pending-welcomes`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  if (!pendingRes.ok) continue;
+                  if (!pendingRes.ok) {
+                    this._welcomeKpBackoff.noteFetchFailure(`pending-welcomes for ${a2aPendingLabel}`, pendingRes.status);
+                    continue;
+                  }
+                  this._welcomeKpBackoff.noteFetchOk(`pending-welcomes for ${a2aPendingLabel}`);
                   const pending = await pendingRes.json();
+                  if (this._welcomeKpBackoff.observePending(chState.mlsGroupId, pending)) {
+                    console.log(`[SecureChannel] ${pending.length} pending A2A Welcome requests for channel ${chId.slice(0, 8)}`);
+                  }
                   if (pending.length === 0) continue;
-                  console.log(`[SecureChannel] ${pending.length} pending A2A Welcome requests for channel ${chId.slice(0, 8)}`);
                   for (const req of pending) {
+                    if (!this._welcomeKpBackoff.shouldAsk(
+                      chState.mlsGroupId,
+                      req.requesting_device_id,
+                      req.key_package_available,
+                      a2aPendingLabel
+                    )) continue;
                     try {
                       const next = await this._fulfilA2AWelcome(chId, chState, mlsGroup, req);
                       if (next === "stop") break;
@@ -78995,6 +79766,7 @@ ${baseText}`;
                       ownerDm1to1: true,
                       ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                     };
+                    this._noteInboundDm(msg.conversation_id, void 0, { createdAt: msg.created_at, senderDeviceId: msg.sender_device_id });
                     this.emit("message", messageText, metadata);
                     Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
                       console.error("[SecureChannel] onMessage callback error:", err);
@@ -79176,9 +79948,20 @@ ${baseText}`;
                 `${this.config.apiUrl}/api/v1/mls/key-packages/batch?device_ids=${req.requesting_device_id}`,
                 { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
               );
-              if (!kpRes.ok) return "next";
+              if (!kpRes.ok) {
+                this._welcomeKpBackoff.noteFetchFailure(`KeyPackage batch for ${a2aLabel}`, kpRes.status);
+                return "next";
+              }
+              this._welcomeKpBackoff.noteFetchOk(`KeyPackage batch for ${a2aLabel}`);
               const kpData = await kpRes.json();
               const kpHex = kpData[req.requesting_device_id];
+              this._welcomeKpBackoff.recordKeyPackage(
+                chState.mlsGroupId,
+                req.requesting_device_id,
+                Boolean(kpHex),
+                req.key_package_available,
+                a2aLabel
+              );
               if (!kpHex) return "next";
               const kpBytes = new Uint8Array(Buffer.from(kpHex, "hex"));
               const memberKp = MLSGroupManager.deserializeKeyPackage(kpBytes);
@@ -79601,6 +80384,7 @@ ${baseText}`;
                         ownerDm1to1: true,
                         ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                       };
+                      this._noteInboundDm(msg.conversation_id, void 0, { createdAt: msg.created_at, senderDeviceId: msg.sender_device_id });
                       this.emit("message", messageText, metadata);
                       Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
                         console.error("[SecureChannel] onMessage callback error:", err);
@@ -79921,6 +80705,7 @@ ${baseText}`;
                         ownerDm1to1: true,
                         ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                       };
+                      this._noteInboundDm(msg.conversation_id, void 0, { createdAt: msg.created_at, senderDeviceId: msg.sender_device_id });
                       this.emit("message", messageText, metadata);
                       Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
                         console.error("[SecureChannel] onMessage callback error:", err);
@@ -80941,7 +81726,7 @@ ${actionsText}`);
         "use strict";
         init_llm_response_parser();
         init_llm_cost();
-        traceStore = new AsyncLocalStorage();
+        traceStore = new AsyncLocalStorage2();
       }
     });
     init_tool_audit = __esm2({
@@ -101689,7 +102474,7 @@ data:
         await init_skill_telemetry();
         await init_policy_enforcer();
         init_room_protocol();
-        VERSION = true ? "0.23.51" : "0.0.0-dev";
+        VERSION = true ? "0.23.53" : "0.0.0-dev";
       }
     });
     await init_index();
@@ -103448,13 +104233,28 @@ var RoomHushState = class {
     return t2 !== void 0 && now < t2;
   }
 };
+async function sendDm(channel, t2, text) {
+  if ((t2.conversationId || t2.groupId) && typeof channel.runForConversation === "function") {
+    await channel.runForConversation(
+      t2.conversationId,
+      () => channel.send(text),
+      t2.groupId ? { groupId: t2.groupId } : void 0
+    );
+  } else {
+    await channel.send(text);
+  }
+}
 var ActiveTarget = class {
   target = null;
   setRoom(roomId) {
     this.target = { kind: "room", roomId };
   }
-  setDm() {
-    this.target = { kind: "dm" };
+  setDm(conversationId, groupId) {
+    this.target = {
+      kind: "dm",
+      ...conversationId ? { conversationId } : {},
+      ...groupId ? { groupId } : {}
+    };
   }
   get current() {
     return this.target;
@@ -103467,7 +104267,7 @@ var ActiveTarget = class {
       if (!t2) return;
       try {
         if (t2.kind === "room") await channel.sendToRoom(t2.roomId, text);
-        else await channel.send(text);
+        else await sendDm(channel, t2, text);
         log(`said to ${where}`);
       } catch (err) {
         log(`send failed to ${where}: ${err instanceof Error ? err.message : String(err)}`);
@@ -103583,7 +104383,7 @@ function wireBridge(channel, session, target, opts = {}) {
     } else {
       log("inbound 1:1 DM from owner");
     }
-    target.setDm();
+    target.setDm(metadata?.conversationId, metadata?.conversationGroupId);
     session.push(text, target.snapshotReply(channel, log), { autoReplyOnText: ownerAttested });
   });
 }
@@ -103634,7 +104434,7 @@ function mkdir700(path2) {
   chmodSync5(path2, 448);
 }
 function packageVersion() {
-  return true ? "0.1.26" : void 0;
+  return true ? "0.1.28" : void 0;
 }
 function helpText(version2) {
   return [