@agentvault/muse-bridge 0.1.27 → 0.1.29

package/dist/index.js

@@ -21,12 +21,17 @@ __export(dist_exports, {
   CredentialStore: () => CredentialStore,
   PolicyEnforcer: () => PolicyEnforcer,
   SecureChannel: () => SecureChannel,
+  TOOL_INVOKE_SPAN_NAME: () => TOOL_INVOKE_SPAN_NAME,
   VERSION: () => VERSION,
   agentVaultPlugin: () => agentVaultPlugin,
+  buildToolInvokeSpan: () => buildToolInvokeSpan,
   checkGateway: () => checkGateway,
+  classifyDeliveryReceipt: () => classifyDeliveryReceipt,
+  classifyToolError: () => classifyToolError,
   clearHistoryRecoveryCode: () => clearHistoryRecoveryCode,
   configureHistoryRecoveryCode: () => configureHistoryRecoveryCode,
   createMcpHandler: () => createMcpHandler,
+  currentToolConversation: () => currentToolConversation,
   drainSkillSpans: () => drainSkillSpans,
   getActiveChannel: () => getActiveChannel,
   getMcpStatus: () => getMcpStatus,
@@ -54,9 +59,12 @@ __export(dist_exports, {
   parseTarget: () => parseTarget,
   readMaskedHistoryRecoveryCode: () => readMaskedHistoryRecoveryCode,
   reportSkillInvocation: () => reportSkillInvocation,
+  reportToolInvoke: () => reportToolInvoke,
   requestHeartbeatNow: () => requestHeartbeatNow,
   resolveAccount: () => resolveAccount,
   runHistoryRecoveryCommand: () => runHistoryRecoveryCommand,
+  runWithToolConversation: () => runWithToolConversation,
+  safeErrorKind: () => safeErrorKind,
   sendDecisionToOwner: () => sendDecisionToOwner,
   sendToOwner: () => sendToOwner,
   sendToRoom: () => sendToRoom,
@@ -89,12 +97,14 @@ import { homedir } from "node:os";
 import { dirname, join as join4, resolve } from "node:path";
 import { Writable } from "node:stream";
 import { createInterface } from "node:readline";
+import { AsyncLocalStorage } from "node:async_hooks";
+import { randomBytes as randomBytes3 } from "node:crypto";
 import { Readable } from "node:stream";
 import { readdir as readdir2, readFile as readFile4, writeFile as writeFile2, rename as rename4, stat, unlink, mkdir as mkdir3 } from "node:fs/promises";
 import { join as join5 } from "node:path";
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { EventEmitter } from "node:events";
-import { AsyncLocalStorage } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 import { createServer } from "node:http";
 import { randomUUID as randomUUID4, createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
@@ -104,7 +114,7 @@ import { join as join6 } from "node:path";
 import { readFile as readFile5 } from "node:fs/promises";
 import WebSocket from "ws";
 import { resolve as resolve2 } from "node:path";
-import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage3 } from "node:async_hooks";
 import { Http2ServerRequest as Http2ServerRequest2 } from "http2";
 import { Http2ServerRequest } from "http2";
 import { Readable as Readable2 } from "stream";
@@ -9294,7 +9304,7 @@ function eddsa(Point, cHash, eddsaOpts = {}) {
   });
   const { prehash } = eddsaOpts;
   const { BASE, Fp: Fp3, Fn: Fn3 } = Point;
-  const randomBytes32 = eddsaOpts.randomBytes || randomBytes2;
+  const randomBytes42 = eddsaOpts.randomBytes || randomBytes2;
   const adjustScalarBytes3 = eddsaOpts.adjustScalarBytes || ((bytes) => bytes);
   const domain = eddsaOpts.domain || ((data, ctx, phflag) => {
     _abool2(phflag, "phflag");
@@ -9376,7 +9386,7 @@ function eddsa(Point, cHash, eddsaOpts = {}) {
     signature: 2 * _size2,
     seed: _size2
   };
-  function randomSecretKey(seed = randomBytes32(lengths.seed)) {
+  function randomSecretKey(seed = randomBytes42(lengths.seed)) {
     return _abytes2(seed, lengths.seed, "seed");
   }
   function keygen(seed) {
@@ -10755,7 +10765,7 @@ function ecdsa(Point, hash, ecdsaOpts = {}) {
     bits2int: "function",
     bits2int_modN: "function"
   });
-  const randomBytes32 = ecdsaOpts.randomBytes || randomBytes2;
+  const randomBytes42 = ecdsaOpts.randomBytes || randomBytes2;
   const hmac4 = ecdsaOpts.hmac || ((key, ...msgs) => hmac2(hash, key, concatBytes2(...msgs)));
   const { Fp: Fp3, Fn: Fn3 } = Point;
   const { ORDER: CURVE_ORDER, BITS: fnBits } = Fn3;
@@ -10910,7 +10920,7 @@ function ecdsa(Point, hash, ecdsaOpts = {}) {
     const d2 = _normFnElement(Fn3, privateKey);
     const seedArgs = [int2octets(d2), int2octets(h1int)];
     if (extraEntropy != null && extraEntropy !== false) {
-      const e = extraEntropy === true ? randomBytes32(lengths.secretKey) : extraEntropy;
+      const e = extraEntropy === true ? randomBytes42(lengths.secretKey) : extraEntropy;
       seedArgs.push(ensureBytes("extraEntropy", e));
     }
     const seed = concatBytes2(...seedArgs);
@@ -11788,11 +11798,11 @@ async function joinWithFirstMatchingKp(welcomeBytes, candidates) {
   return null;
 }
 function ownIdentity() {
-  const v2 = true ? "0.23.52" : FALLBACK;
+  const v2 = true ? "0.23.54" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildSha() {
-  const raw = true ? "d7143c3" : "";
+  const raw = true ? "429977f" : "";
   const cleaned = (raw ?? "").trim();
   return !cleaned || cleaned === "unknown" ? null : cleaned;
 }
@@ -11944,13 +11954,18 @@ async function enrollDevice(apiUrl, inviteToken, identityPkHex, ephemeralPkHex,
   return res.json();
 }
 async function pollDeviceStatus(apiUrl, deviceId) {
-  const res = await fetch(`${apiUrl}/api/v1/devices/${deviceId}/status`);
+  const res = await fetch(`${apiUrl}/api/v1/devices/${deviceId}/status`, {
+    signal: AbortSignal.timeout(1e4)
+  });
   if (res.status === 429) {
     return { device_id: deviceId, status: "PENDING", fingerprint: "", rateLimited: true };
   }
   if (!res.ok) {
     const detail = await res.text();
-    throw new Error(`Status poll failed (${res.status}): ${detail}`);
+    const err = new Error(`Status poll failed (${res.status}): ${detail}`);
+    err.httpStatus = res.status;
+    err.body = detail;
+    throw err;
   }
   return res.json();
 }
@@ -12000,9 +12015,10 @@ function a2aChannelSignature(channels) {
     })).sort((a2, b2) => (a2.id ?? "").localeCompare(b2.id ?? ""))
   );
 }
-function mlsMembershipFromStatus(status) {
+function mlsMembershipFromStatus(status, detail) {
   if (status === 200) return true;
-  if (status === 403 || status === 404) return false;
+  if (status === 404) return false;
+  if (status === 403 && detail === NOT_A_MEMBER_DETAIL) return false;
   return null;
 }
 function sanitizeError(error2) {
@@ -12596,6 +12612,102 @@ function _resetCompatCacheForTest() {
   _agentEventFn = null;
   _transcriptFn = null;
 }
+function safeErrorKind(value) {
+  if (typeof value !== "string") return UNCLASSIFIED_ERROR;
+  if (KNOWN_CODES.has(value)) return value;
+  if (!CLASS_NAME_RE.test(value)) return UNCLASSIFIED_ERROR;
+  if ((value.match(/[0-9]/g) ?? []).length > 3) return UNCLASSIFIED_ERROR;
+  return value;
+}
+function codeForText(text) {
+  const t2 = text.replace(/^[A-Za-z]*Error: /, "");
+  for (const [re2, code] of ERROR_TEXT_CODES) if (re2.test(t2)) return code;
+  return void 0;
+}
+function classifyToolError(err) {
+  try {
+    if (err instanceof Error) {
+      return codeForText(err.message) ?? safeErrorKind(err.constructor?.name);
+    }
+    if (typeof err === "string") return codeForText(err) ?? UNCLASSIFIED_ERROR;
+  } catch {
+  }
+  return UNCLASSIFIED_ERROR;
+}
+function classifyDeliveryReceipt(receipt) {
+  if (!receipt) return "no_receipt";
+  if (receipt.ambiguous) return "ambiguous_target";
+  if (typeof receipt.error === "string") return codeForText(receipt.error) ?? "delivery_failed";
+  return "delivery_failed";
+}
+async function runWithToolConversation(conversation, fn) {
+  const store = {
+    conversation: conversation.kind === "unknown" || !conversation.id ? { kind: "unknown" } : { kind: conversation.kind, id: conversation.id },
+    ended: false
+  };
+  try {
+    return await _conversation.run(store, fn);
+  } finally {
+    store.ended = true;
+  }
+}
+function currentToolConversation() {
+  const store = _conversation.getStore();
+  if (!store || store.ended) return { kind: "unknown" };
+  return store.conversation;
+}
+function conversationForTarget(target, opts = {}) {
+  if (typeof opts.conversationId === "string" && opts.conversationId) {
+    return { kind: "direct", id: opts.conversationId };
+  }
+  const turn = currentToolConversation();
+  if (!target || target.kind === "context") return turn;
+  switch (target.kind) {
+    case "room":
+      return target.roomId ? { kind: "room", id: target.roomId } : { kind: "unknown" };
+    case "owner":
+      return turn.kind === "direct" ? turn : { kind: "unknown" };
+    default:
+      return { kind: "unknown" };
+  }
+}
+function buildToolInvokeSpan(report) {
+  const isError = report.outcome === "error";
+  const outcome = isError ? "error" : report.outcome === "cancelled" ? "cancelled" : "success";
+  const durationMs = Math.max(0, Math.round(Number(report.durationMs) || 0));
+  const endTime = report.endTime ?? Date.now();
+  const conv = report.conversation ?? currentToolConversation();
+  const kind = conv.kind === "room" || conv.kind === "direct" ? conv.kind : "unknown";
+  const attributes = {
+    "tool.name": TOOL_NAME_RE.test(report.toolName) ? report.toolName : "unknown",
+    "tool.outcome": outcome,
+    "av.conversation_kind": kind,
+    "tool.duration_ms": durationMs
+  };
+  if (isError) attributes["tool.error_kind"] = safeErrorKind(report.errorKind);
+  if (kind !== "unknown" && typeof conv.id === "string" && conv.id) {
+    attributes["av.conversation_id"] = conv.id.slice(0, 64);
+  }
+  return {
+    traceId: randomBytes3(16).toString("hex"),
+    spanId: randomBytes3(8).toString("hex"),
+    name: TOOL_INVOKE_SPAN_NAME,
+    kind: "internal",
+    startTime: endTime - durationMs,
+    endTime,
+    attributes,
+    // OTLP codes: 1 = ok, 2 = error (the backend stores "ok" / "error").
+    // A cancellation is not a problem: OK status, outcome "cancelled".
+    status: { code: isError ? 2 : 1 }
+  };
+}
+function reportToolInvoke(sink, report) {
+  try {
+    if (!sink || typeof sink.reportCustomSpan !== "function") return;
+    sink.reportCustomSpan(buildToolInvokeSpan(report));
+  } catch {
+  }
+}
 function ownerRoutingFrom(parsed) {
   const out = {};
   if (parsed.conversation_id !== void 0) {
@@ -12620,6 +12732,34 @@ function statusOf(receipt) {
   return receipt.ok ? 200 : 500;
 }
 async function handleSendRequest(parsed, channel) {
+  const startedAt = Date.now();
+  const result = await _handleSendRequest(parsed, channel);
+  try {
+    const body = result.body;
+    const failed = body?.ok !== true;
+    reportToolInvoke(channel.telemetry, {
+      toolName: "agentvault_send",
+      outcome: failed ? "error" : "success",
+      errorKind: !failed ? void 0 : result.status === 400 ? "invalid_request" : result.status === 409 ? "ambiguous_target" : classifyDeliveryReceipt(body),
+      durationMs: Date.now() - startedAt,
+      conversation: sendConversation(parsed)
+    });
+  } catch {
+  }
+  return result;
+}
+function sendConversation(parsed) {
+  const str = (v2) => typeof v2 === "string" && v2 ? v2 : void 0;
+  if (str(parsed.hub_address) ?? str(parsed.a2a_address) ?? str(parsed.a2aAddress) ?? str(parsed.channel_id)) {
+    return { kind: "unknown" };
+  }
+  const roomId = str(parsed.room_id);
+  if (roomId) return conversationForTarget({ kind: "room", roomId });
+  if (parsed.target === "context") return conversationForTarget({ kind: "context" });
+  if (parsed.audience === "everyone") return { kind: "unknown" };
+  return conversationForTarget({ kind: "owner" }, { conversationId: str(parsed.conversation_id) });
+}
+async function _handleSendRequest(parsed, channel) {
   const text = parsed.text;
   if (!text || typeof text !== "string") {
     return { status: 400, body: { ok: false, error: "Missing 'text' field" } };
@@ -18371,7 +18511,7 @@ function reportSkillInvocation(opts) {
   spanBuffer.push(span);
   return span;
 }
-var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, AMBIGUOUS_OWNER_ERROR, init_owner_routing, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports2, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, AGENT_EVENT_CANDIDATES, TRANSCRIPT_CANDIDATES, _heartbeatFn, _agentEventFn, _transcriptFn, init_openclaw_compat, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, _turnConversation, PERSON_INVOLVED_WINDOW_MS, ATTESTED_INBOUND_MAX, UNMAPPED_RECONCILE_COOLDOWN_MS, TOPIC_ID_RE, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
+var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, AMBIGUOUS_OWNER_ERROR, init_owner_routing, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports2, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, NOT_A_MEMBER_DETAIL, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, KP_BACKOFF_INITIAL_MS, KP_BACKOFF_MAX_MS, KP_RACE_RETRY_MS, KP_RACE_RETRY_LIMIT, consoleLogger, short, WelcomeKeyPackageBackoff, init_welcome_kp_backoff, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, AGENT_EVENT_CANDIDATES, TRANSCRIPT_CANDIDATES, _heartbeatFn, _agentEventFn, _transcriptFn, init_openclaw_compat, TOOL_INVOKE_SPAN_NAME, UNCLASSIFIED_ERROR, KNOWN_TOOL_ERROR_CODES, KNOWN_CODES, CLASS_NAME_RE, TOOL_NAME_RE, ERROR_TEXT_CODES, _conversation, init_tool_telemetry, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, _turnConversation, PERSON_INVOLVED_WINDOW_MS, ATTESTED_INBOUND_MAX, UNMAPPED_RECONCILE_COOLDOWN_MS, TOPIC_ID_RE, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
 var init_dist = __esm({
   async "../plugin/dist/index.js"() {
     "use strict";
@@ -70843,6 +70983,7 @@ var init_dist = __esm({
     init_mls_membership_probe = __esm2({
       "src/mls-membership-probe.ts"() {
         "use strict";
+        NOT_A_MEMBER_DETAIL = "Not authorized for this MLS group";
       }
     });
     init_history_backup_scheduler = __esm2({
@@ -70961,6 +71102,119 @@ var init_dist = __esm({
         ACTIONS = /* @__PURE__ */ new Set(["approve", "deny", "defer", "cancel"]);
       }
     });
+    init_welcome_kp_backoff = __esm2({
+      "src/welcome-kp-backoff.ts"() {
+        "use strict";
+        KP_BACKOFF_INITIAL_MS = 10 * 6e4;
+        KP_BACKOFF_MAX_MS = 60 * 6e4;
+        KP_RACE_RETRY_MS = 6e4;
+        KP_RACE_RETRY_LIMIT = 3;
+        consoleLogger = {
+          warn: (m2) => console.warn(m2),
+          info: (m2) => console.log(m2)
+        };
+        short = (id) => id.slice(0, 8);
+        WelcomeKeyPackageBackoff = class {
+          constructor(log = consoleLogger) {
+            this.log = log;
+          }
+          log;
+          entries = /* @__PURE__ */ new Map();
+          pendingSig = /* @__PURE__ */ new Map();
+          failing = /* @__PURE__ */ new Set();
+          key(groupId, deviceId) {
+            return `${groupId}:${deviceId}`;
+          }
+          /**
+           * Record this pull's pending list for a group. Returns true when the set of
+           * requests differs from the previous pull's — the caller logs its "N pending"
+           * line only then. Backoffs for devices whose request is gone are dropped.
+           */
+          observePending(groupId, pending) {
+            const sig = pending.map((r2) => r2.id).sort().join(",");
+            const changed = this.pendingSig.get(groupId) !== sig;
+            if (pending.length === 0) this.pendingSig.delete(groupId);
+            else this.pendingSig.set(groupId, sig);
+            const live = new Set(pending.map((r2) => r2.requesting_device_id));
+            const prefix = `${groupId}:`;
+            for (const k2 of [...this.entries.keys()]) {
+              if (k2.startsWith(prefix) && !live.has(k2.slice(prefix.length))) this.entries.delete(k2);
+            }
+            return changed && pending.length > 0;
+          }
+          /** Should this pull ask the batch for this device's KeyPackage? */
+          shouldAsk(groupId, deviceId, available, label, now = Date.now()) {
+            const k2 = this.key(groupId, deviceId);
+            const entry = this.entries.get(k2);
+            if (available === false) {
+              if (!entry) {
+                this.entries.set(k2, { untilMs: now + KP_BACKOFF_INITIAL_MS, delayMs: KP_BACKOFF_INITIAL_MS, lastAvailable: false, raceRetries: 0 });
+                this.log.warn(
+                  `[SecureChannel] No KeyPackage for ${short(deviceId)} in ${label} \u2014 waiting for the device to come back online; not asking again until it publishes one`
+                );
+              } else {
+                entry.lastAvailable = false;
+              }
+              return false;
+            }
+            if (!entry) return true;
+            if (available === true && entry.lastAvailable === false) return true;
+            return now >= entry.untilMs;
+          }
+          /** The outcome of an ask. `found` = the batch returned a KeyPackage. */
+          recordKeyPackage(groupId, deviceId, found, available, label, now = Date.now()) {
+            const k2 = this.key(groupId, deviceId);
+            const entry = this.entries.get(k2);
+            if (found) {
+              if (entry) {
+                this.entries.delete(k2);
+                this.log.info(`[SecureChannel] KeyPackage for ${short(deviceId)} is available again in ${label} \u2014 admitting`);
+              }
+              return;
+            }
+            const raced = available === true && (entry?.raceRetries ?? 0) < KP_RACE_RETRY_LIMIT;
+            if (!entry) {
+              if (raced) {
+                this.entries.set(k2, { untilMs: now + KP_RACE_RETRY_MS, delayMs: 0, lastAvailable: available, raceRetries: 1 });
+                this.log.warn(
+                  `[SecureChannel] No KeyPackage for ${short(deviceId)} in ${label} although the server listed one (claimed elsewhere?) \u2014 retrying in ${KP_RACE_RETRY_MS / 1e3} s`
+                );
+                return;
+              }
+              this.entries.set(k2, { untilMs: now + KP_BACKOFF_INITIAL_MS, delayMs: KP_BACKOFF_INITIAL_MS, lastAvailable: available, raceRetries: 0 });
+              this.log.warn(
+                `[SecureChannel] No KeyPackage for ${short(deviceId)} in ${label}, skipping \u2014 not asking again for ${KP_BACKOFF_INITIAL_MS / 6e4} min (the device has to come back online)`
+              );
+              return;
+            }
+            entry.lastAvailable = available;
+            if (raced) {
+              entry.raceRetries += 1;
+              entry.untilMs = now + KP_RACE_RETRY_MS;
+              return;
+            }
+            entry.raceRetries = available === true ? entry.raceRetries : 0;
+            entry.delayMs = entry.delayMs === 0 ? KP_BACKOFF_INITIAL_MS : Math.min(entry.delayMs * 2, KP_BACKOFF_MAX_MS);
+            entry.untilMs = now + entry.delayMs;
+          }
+          /** A non-OK response for `scope`: warn once until it recovers. */
+          noteFetchFailure(scope, status) {
+            if (this.failing.has(scope)) return;
+            this.failing.add(scope);
+            this.log.warn(`[SecureChannel] ${scope} failed (${status}) \u2014 will retry each pull; logging once until it recovers`);
+          }
+          noteFetchOk(scope) {
+            if (!this.failing.delete(scope)) return;
+            this.log.info(`[SecureChannel] ${scope} recovered`);
+          }
+          /** Test/diagnostic view. */
+          backoffFor(groupId, deviceId) {
+            const e = this.entries.get(this.key(groupId, deviceId));
+            return e ? { untilMs: e.untilMs, delayMs: e.delayMs } : void 0;
+          }
+        };
+      }
+    });
     history_backup_client_exports = {};
     __export2(history_backup_client_exports, {
       HISTORY_RESTORE_RESPONSE_MAX_BYTES: () => HISTORY_RESTORE_RESPONSE_MAX_BYTES,
@@ -71248,6 +71502,55 @@ var init_dist = __esm({
         _transcriptFn = null;
       }
     });
+    init_tool_telemetry = __esm2({
+      "src/tool-telemetry.ts"() {
+        "use strict";
+        TOOL_INVOKE_SPAN_NAME = "ai.agent.tool.invoke";
+        UNCLASSIFIED_ERROR = "unclassified";
+        KNOWN_TOOL_ERROR_CODES = [
+          "relay_not_connected",
+          "mls_group_not_initialized",
+          "mls_encrypt_failed",
+          "room_not_found",
+          "a2a_channel_not_found",
+          "channel_not_ready",
+          "channel_not_started",
+          "no_active_sessions",
+          "no_conversation_ready",
+          "blocked_by_policy",
+          "unknown_target",
+          "unsupported_destination",
+          "delivery_timeout",
+          "delivery_cancelled",
+          "delivery_failed",
+          "ambiguous_target",
+          "no_receipt",
+          "invalid_request",
+          UNCLASSIFIED_ERROR
+        ];
+        KNOWN_CODES = new Set(KNOWN_TOOL_ERROR_CODES);
+        CLASS_NAME_RE = /^(?:[A-Za-z][A-Za-z0-9_]{0,47})?(?:Error|Exception)$/;
+        TOOL_NAME_RE = /^[A-Za-z0-9_.:-]{1,64}$/;
+        ERROR_TEXT_CODES = [
+          [/relay socket is not open/, "relay_not_connected"],
+          [/has no initialized MLS group/, "mls_group_not_initialized"],
+          [/^MLS encrypt failed/, "mls_encrypt_failed"],
+          [/^Room .+ not found$/, "room_not_found"],
+          [/^No A2A channel found|^A2A channel .+ not found$/, "a2a_channel_not_found"],
+          [/^Channel is not ready$|^Channel is in \w+ state$/, "channel_not_ready"],
+          [/^AgentVault channel not connected$|^Channel not started$/, "channel_not_started"],
+          [/^No active sessions$/, "no_active_sessions"],
+          [/^No conversation is ready to receive/, "no_conversation_ready"],
+          [/^Message blocked by scan rule/, "blocked_by_policy"],
+          [/^Unknown target kind$/, "unknown_target"],
+          [/can only be sent to owner|cannot be sent to A2A targets/, "unsupported_destination"],
+          [/^Delivery timed out$/, "delivery_timeout"],
+          [/^Delivery cancelled$/, "delivery_cancelled"],
+          [/^Delivery failed$/, "delivery_failed"]
+        ];
+        _conversation = new AsyncLocalStorage();
+      }
+    });
     http_handlers_exports = {};
     __export2(http_handlers_exports, {
       handleActionRequest: () => handleActionRequest,
@@ -71262,6 +71565,7 @@ var init_dist = __esm({
       "src/http-handlers.ts"() {
         "use strict";
         init_owner_routing();
+        init_tool_telemetry();
       }
     });
     mcp_proxy_helpers_exports = {};
@@ -71311,6 +71615,7 @@ var init_dist = __esm({
         init_history_backup_scheduler();
         await init_history_recovery_code();
         init_decision_reply();
+        init_welcome_kp_backoff();
         ROOM_AGENT_TYPES = /* @__PURE__ */ new Set([
           "message",
           "text",
@@ -71341,7 +71646,7 @@ var init_dist = __esm({
         OUTBOUND_DEDUPE_TYPES = /* @__PURE__ */ new Set(["text", "status_alert", "artifact", "attachment"]);
         RETRY_CANDIDATE_TTL_MS = 6e4;
         RETRY_CANDIDATE_MAX = 32;
-        _turnConversation = new AsyncLocalStorage();
+        _turnConversation = new AsyncLocalStorage2();
         PERSON_INVOLVED_WINDOW_MS = 5 * 6e4;
         ATTESTED_INBOUND_MAX = 64;
         UNMAPPED_RECONCILE_COOLDOWN_MS = 6e4;
@@ -71421,6 +71726,8 @@ var init_dist = __esm({
           _mlsGroups = /* @__PURE__ */ new Map();
           /** `${mlsGroupId}:${deviceId}` -> last re-admit ms (#1171). */
           _roomFulfilCooldown = /* @__PURE__ */ new Map();
+          /** #1428: per (group, device) KeyPackage backoff for the pending-Welcome pulls. */
+          _welcomeKpBackoff = new WelcomeKeyPackageBackoff();
           /** Maps conversationId -> conversation_group_id for shared 1:1 MLS groups */
           _sessionGroupIds = /* @__PURE__ */ new Map();
           /** Consecutive MLS decrypt failure count per group key for epoch recovery. */
@@ -71706,6 +72013,119 @@ ${text}`;
               console.warn("[SecureChannel] failed to post auth_failed:", err);
             }
           }
+          /**
+           * Ask the PUBLIC status endpoint what this device is right now. Used to
+           * CONFIRM a credential rejection before acting on it — a 403 on its own
+           * cannot tell "revoked" from "paused by its owner" (both are non-ACTIVE to
+           * get_device_auth), and treating a pause as a revoke is what removed
+           * loopita's launchd service on 2026-10-25.
+           *
+           * Only two answers are terminal: REVOKED, and a deleted row (404 whose
+           * JSON `detail` is exactly get_device_or_404's "Device not found" — any
+           * other 404 is something in the way, not proof). Everything unreadable or inconclusive (network, 5xx, 429,
+           * PENDING, an ACTIVE device answering 403) is `unknown`, which callers MUST
+           * treat as transient: never terminal, never an uninstall, never a banner.
+           */
+          async _readDeviceStanding() {
+            const deviceId = this._deviceId ?? this._persisted?.deviceId;
+            if (!deviceId) return { kind: "unknown", why: "no device id" };
+            try {
+              const st = await pollDeviceStatus(this.config.apiUrl, deviceId);
+              if (!st || st.rateLimited) return { kind: "unknown", why: "rate limited" };
+              if (st.status === "SUSPENDED") return { kind: "suspended" };
+              if (st.status === "REVOKED") return { kind: "gone", reason: "device_revoked" };
+              if (st.status === "ACTIVE" || st.status === "APPROVED") return { kind: "active" };
+              return { kind: "unknown", why: `status ${String(st.status)}` };
+            } catch (err) {
+              const e = err;
+              if (e?.httpStatus === 404) {
+                try {
+                  const parsed = JSON.parse(e.body ?? "");
+                  if (parsed?.detail === _SecureChannel.DEVICE_DELETED_DETAIL) {
+                    return { kind: "gone", reason: "device_deleted" };
+                  }
+                } catch {
+                }
+              }
+              return { kind: "unknown", why: err instanceof Error ? err.message : String(err) };
+            }
+          }
+          /**
+           * A credential path answered 403 (today: /auth/reissue). Confirm before
+           * concluding anything:
+           *   - REVOKED / deleted  -> terminal: re_enroll health report + `auth_failed`
+           *                           carrying `deviceGone: true` (the ONLY verdict the
+           *                           bridges' self-uninstall acts on).
+           *   - SUSPENDED          -> suspended-wait (idle, keep polling, resume).
+           *   - anything else      -> transient; nothing is emitted or reported.
+           * Already paused => stay paused without another status read: the
+           * suspended-wait poll owns that question and will see a later revoke.
+           */
+          async _confirmForbidden(source) {
+            if (this._suspended) return "suspended";
+            const standing = await this._readDeviceStanding();
+            if (standing.kind === "gone") {
+              console.warn(
+                `[SecureChannel] ${source}: 403 confirmed by the status endpoint (${standing.reason}) \u2014 terminal`
+              );
+              this._authFailedThisSession = true;
+              await this._postAuthFailedToBackend(standing.reason);
+              this.emit("auth_failed", { reason: standing.reason, deviceGone: true });
+              return "gone";
+            }
+            if (standing.kind === "suspended") {
+              this._enterSuspendedWait(source);
+              return "suspended";
+            }
+            console.warn(
+              `[SecureChannel] ${source}: 403 but the device is not confirmed revoked (${standing.kind === "unknown" ? standing.why : standing.kind}) \u2014 treating as transient`
+            );
+            return "transient";
+          }
+          /** The backend's exact detail for an inactive (paused/revoked/deleted) device. */
+          static INACTIVE_DEVICE_DETAIL = "Device not found or not active";
+          /** get_device_or_404's exact detail — the only 404 that means "row deleted". */
+          static DEVICE_DELETED_DETAIL = "Device not found";
+          /**
+           * After a TRANSIENT inactive-403 verdict, how long before another 403 may
+           * re-read the status endpoint. Long enough that a burst cannot trip the
+           * 1-per-5s limiter (which would itself read as "unknown"); short enough that
+           * a revoke behind an outage is still noticed within the session (dr-evil Q1).
+           */
+          static INACTIVE_403_RECHECK_MS = 3e4;
+          /** Read a FastAPI error `detail` without consuming the caller's body. */
+          async _errorDetail(resp) {
+            try {
+              const body = await resp.clone().json();
+              return typeof body?.detail === "string" ? body.detail : null;
+            } catch {
+              return null;
+            }
+          }
+          // One confirmation per WS session, shared by every caller: a burst of 403s
+          // (the open handler fires several REST calls at once) must not turn into a
+          // burst of status reads against a 1-per-5s rate limit. Reset in _connect.
+          _inactive403Check = null;
+          _inactive403RetryAt = 0;
+          /**
+           * A REST call answered 403 "Device not found or not active". With the
+           * companion backend change this is how EVERY inactive-device auth failure
+           * arrives (401 now means a bad token only, so `_authedFetch`'s reissue never
+           * runs for it). Same rule as the reissue path: confirm, then act.
+           */
+          _confirmInactive403(source) {
+            if (this._inactive403Check) return this._inactive403Check;
+            if (Date.now() < this._inactive403RetryAt) return Promise.resolve("transient");
+            const check = this._confirmForbidden(source).then((verdict) => {
+              if (verdict === "transient" && this._inactive403Check === check) {
+                this._inactive403Check = null;
+                this._inactive403RetryAt = Date.now() + _SecureChannel.INACTIVE_403_RECHECK_MS;
+              }
+              return verdict;
+            });
+            this._inactive403Check = check;
+            return check;
+          }
           /**
            * Proactively reissue the persisted device JWT when its remaining lifetime
            * is under 30 days. Called before each WebSocket connect attempt so the
@@ -71724,6 +72144,9 @@ ${text}`;
            * than read back off `_authFailedThisSession`, whose lifetime is reset per
            * connect and is easy to get subtly wrong.
            */
+          //
+          // 2026-10-25: a TRUE return now also covers "paused by its owner" (a 403
+          // confirmed SUSPENDED). The caller tells the two apart by `_suspended`.
           async _maybeReissueDeviceJwt() {
             const jwt = this._persisted?.deviceJwt ?? this._deviceJwt;
             if (!jwt) return false;
@@ -71751,12 +72174,16 @@ ${text}`;
                 }
                 return false;
               }
-              if (resp.status === 401 || resp.status === 403) {
+              if (resp.status === 403) {
+                console.warn("[SecureChannel] reissue rejected (403); confirming device status");
+                const verdict = await this._confirmForbidden("reissue_forbidden");
+                return verdict !== "transient";
+              }
+              if (resp.status === 401) {
                 console.warn(`[SecureChannel] reissue rejected (${resp.status}); credentials need attention`);
                 this._authFailedThisSession = true;
-                const reason = resp.status === 401 ? "device_jwt_expired" : "device_revoked";
-                await this._postAuthFailedToBackend(reason);
-                this.emit("auth_failed", { reason });
+                await this._postAuthFailedToBackend("device_jwt_expired");
+                this.emit("auth_failed", { reason: "device_jwt_expired", deviceGone: false });
                 return true;
               }
               console.warn(`[SecureChannel] reissue ${resp.status}; keeping current jwt`);
@@ -71815,13 +72242,17 @@ ${text}`;
                   };
                   resp = await fetch(url2, { ...init, headers: retryHeaders });
                 }
-              } else if (reissueResp.status === 401 || reissueResp.status === 403) {
+              } else if (reissueResp.status === 403) {
+                await this._confirmForbidden("reissue_forbidden");
+              } else if (reissueResp.status === 401) {
                 this._authFailedThisSession = true;
-                const reason = reissueResp.status === 401 ? "device_jwt_expired" : "device_revoked";
-                await this._postAuthFailedToBackend(reason);
-                this.emit("auth_failed", { reason });
+                await this._postAuthFailedToBackend("device_jwt_expired");
+                this.emit("auth_failed", { reason: "device_jwt_expired", deviceGone: false });
               }
             }
+            if (resp.status === 403 && await this._errorDetail(resp) === _SecureChannel.INACTIVE_DEVICE_DETAIL) {
+              await this._confirmInactive403("rest_forbidden");
+            }
             return resp;
           }
           get state() {
@@ -73507,7 +73938,7 @@ ${text}`;
            */
           sendActivitySpan(spanData) {
             if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-            const pluginVersion = true ? "0.23.52" : "0.0.0-dev";
+            const pluginVersion = true ? "0.23.54" : "0.0.0-dev";
             const agentName = this.config.agentName ?? "Agent";
             const resource = {
               "service.name": "agentvault-agent",
@@ -73875,15 +74306,27 @@ ${text}`;
            */
           async _quarantineOrphanedMlsGroups() {
             if (!this._deviceJwt) return;
+            let deviceActive = null;
+            const confirmDeviceActive = () => deviceActive ??= this._readDeviceStanding().then((st) => st.kind === "active");
             const quarantined = await quarantineOrphanedMlsState(
               this.config.dataDir,
               async (groupId) => {
                 try {
+                  if (this._suspended) return null;
                   const res = await fetch(
                     `${this.config.apiUrl}/api/v1/mls/groups/${encodeURIComponent(groupId)}`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  return mlsMembershipFromStatus(res.status);
+                  const detail = res.status === 403 ? await this._errorDetail(res) : null;
+                  if (detail === _SecureChannel.INACTIVE_DEVICE_DETAIL) {
+                    await this._confirmInactive403("mls_probe");
+                    return null;
+                  }
+                  const verdict = mlsMembershipFromStatus(res.status, detail);
+                  if (verdict === false && res.status === 403) {
+                    if (!await confirmDeviceActive() || this._suspended) return null;
+                  }
+                  return verdict;
                 } catch {
                   return null;
                 }
@@ -75618,6 +76061,8 @@ ${text}`;
           async _connect() {
             if (this._stopped) return;
             this._reissueAttempted = false;
+            this._inactive403Check = null;
+            this._inactive403RetryAt = 0;
             this._authFailedThisSession = false;
             if (this._reconnectTimer) {
               clearTimeout(this._reconnectTimer);
@@ -75633,6 +76078,10 @@ ${text}`;
             }
             this._setState("connecting");
             if (await this._maybeReissueDeviceJwt()) {
+              if (this._suspended) {
+                console.log("[SecureChannel] device is paused \u2014 not connecting until it is resumed");
+                return;
+              }
               console.warn(
                 "[SecureChannel] credentials are terminally dead \u2014 aborting connect (no WS attempt)"
               );
@@ -75643,16 +76092,26 @@ ${text}`;
             const url2 = `${wsUrl}/api/v1/ws?token=${encodeURIComponent(this._deviceJwt)}&device_id=${this._deviceId}&client_version=${encodeURIComponent(buildClientVersion(this.config.clientVersion))}`;
             const ws = new WebSocket(url2);
             this._ws = ws;
+            const served = this._createServedGate();
             ws.on("open", async () => {
               try {
-                this._reconnectAttempt = 0;
                 this._lastWsOpenTime = Date.now();
                 this._startPing(ws);
                 this._startWakeDetector();
+                if (!await served.wait()) {
+                  console.log("[SecureChannel] connection rejected before it was served \u2014 skipping connect-time work");
+                  return;
+                }
+                const aborted2 = () => this._stopped || this._suspended || this._ws !== ws || served.rejected;
+                if (aborted2()) return;
+                this._reconnectAttempt = 0;
                 this._startPendingPoll();
                 await this._syncMissedMessages();
+                if (aborted2()) return;
                 await this._pullDrDeliveryQueue();
+                if (aborted2()) return;
                 await this._flushOutboundQueue();
+                if (aborted2()) return;
                 this._setState("ready");
                 void this._reconcileConversationGroups().catch((err) => {
                   console.warn("[SecureChannel] Conversation-group reconcile failed:", err);
@@ -75684,7 +76143,7 @@ ${text}`;
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.52" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.54" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -75692,6 +76151,7 @@ ${text}`;
                 await this.listA2AChannels().catch((err) => {
                   console.warn("[SecureChannel] A2A channel sync on connect failed:", err);
                 });
+                if (aborted2()) return;
                 await this._ensureKpPoolPublished();
                 this._startKpReplenishTimer();
                 this._pullDeliveryQueue().catch((err) => {
@@ -75753,6 +76213,8 @@ ${text}`;
               this._lastWakeTick = Date.now();
               try {
                 const data = JSON.parse(raw.toString());
+                if (data?.event === "connection_rejected") served.markRejected();
+                else served.markServed();
                 if (data.event && data.event !== "ping" && data.event !== "typing") {
                   const d2 = data.data ?? {};
                   const conv = (data.conversation_id || d2.conversation_id || "").toString();
@@ -76012,7 +76474,7 @@ ${text}`;
                         agentVersion: this.config.agentVersion ?? "0.0.0",
                         // __AV_VERSION__ is injected by esbuild from package.json at build time.
                         // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                        pluginVersion: true ? "0.23.52" : "0.0.0-dev"
+                        pluginVersion: true ? "0.23.54" : "0.0.0-dev"
                       });
                       this._telemetryReporter.startAutoFlush(3e4);
                     }
@@ -76381,6 +76843,7 @@ ${text}`;
             });
             ws.on("close", (code) => {
               this._lastCloseCode = typeof code === "number" ? code : null;
+              served.markRejected();
               this._stopPing();
               this._stopWakeDetector();
               this._stopPendingPoll();
@@ -77948,7 +78411,7 @@ ${baseText}`;
               return 0;
             }
             const snapshot = mlsGroup.exportState();
-            const preHead = await this._readGroupHead(mlsGroupId);
+            const preHead = opts.preHead ?? await this._readGroupHead(mlsGroupId);
             if (preHead.ok && preHead.epoch !== Number(mlsGroup.epoch)) {
               console.warn(
                 `[SecureChannel] ${label}: server head is at epoch ${preHead.epoch}, we are at ${Number(mlsGroup.epoch)} \u2014 NOT committing (it would be refused, #1184); ${targets.length} request(s) stay pending`
@@ -78135,6 +78598,40 @@ ${baseText}`;
           _wsIsOpen() {
             return this._ws?.readyState === 1;
           }
+          /**
+           * #1429 review: the cheap checks `_fulfilWelcomeRequests` makes, run BEFORE a
+           * pending-Welcome site claims KeyPackages — the order #1225 S4 gave the A2A
+           * path. `GET /key-packages/batch` CONSUMES; the room, shared-1:1 and conv
+           * sites used to claim one per pending device and only then find the socket
+           * closed, another commit in flight, or the server head elsewhere — burning a
+           * package per device per failed pull (and the shared/conv sites have no
+           * cooldown). `_fulfilWelcomeRequests` keeps its own checks: this is a gate on
+           * spending, not a replacement for the guard at the point of commit.
+           */
+          /**
+           * Returns the head it read (handed on to `_fulfilWelcomeRequests` as its
+           * pre-flight, so a pull still reads the head once before committing), or
+           * `null` when nothing should be claimed this pull.
+           */
+          async _welcomeCommitPreflight(mlsGroupId, mlsGroup, label) {
+            if (!this._wsIsOpen()) {
+              console.warn(`[SecureChannel] ${label}: socket is not OPEN \u2014 not claiming KeyPackages; requests stay pending for the next pull`);
+              return null;
+            }
+            if (this._commitInFlight.has(mlsGroupId)) {
+              console.warn(`[SecureChannel] ${label}: another commit for this group is in flight \u2014 not claiming KeyPackages this pull`);
+              return null;
+            }
+            const head = await this._readGroupHead(mlsGroupId);
+            if (head.ok && head.epoch !== Number(mlsGroup.epoch)) {
+              console.warn(
+                `[SecureChannel] ${label}: server head is at epoch ${head.epoch}, we are at ${Number(mlsGroup.epoch)} \u2014 not claiming KeyPackages (the commit would be refused, #1184); requests stay pending`
+              );
+              await this._catchUpAfterPreflightSkip(mlsGroupId, head.epoch, Number(mlsGroup.epoch), label);
+              return null;
+            }
+            return head;
+          }
           /** SHA-256 hex of a commit's bytes — its identity on the server (#1175/#1177). */
           /**
            * #1225: send ONE commit over the socket and wait for the server's verdict,
@@ -79160,14 +79657,27 @@ ${baseText}`;
                 const roomState = this._persisted?.rooms?.[roomId];
                 if (!roomState?.mlsGroupId) continue;
                 try {
+                  const roomLabel = `room ${roomId.slice(0, 8)}`;
                   const pendingRes = await fetch(
                     `${this.config.apiUrl}/api/v1/mls/groups/${roomState.mlsGroupId}/pending-welcomes`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  if (!pendingRes.ok) continue;
+                  if (!pendingRes.ok) {
+                    this._welcomeKpBackoff.noteFetchFailure(`pending-welcomes for ${roomLabel}`, pendingRes.status);
+                    continue;
+                  }
+                  this._welcomeKpBackoff.noteFetchOk(`pending-welcomes for ${roomLabel}`);
                   let pending = await pendingRes.json();
+                  if (this._welcomeKpBackoff.observePending(roomState.mlsGroupId, pending)) {
+                    console.log(`[SecureChannel] ${pending.length} pending Welcome requests for room ${roomId.slice(0, 8)}`);
+                  }
+                  if (pending.length === 0) continue;
+                  const nowKp = Date.now();
+                  const roomMlsGroupId = roomState.mlsGroupId;
+                  pending = pending.filter(
+                    (r2) => this._welcomeKpBackoff.shouldAsk(roomMlsGroupId, r2.requesting_device_id, r2.key_package_available, roomLabel, nowKp)
+                  );
                   if (pending.length === 0) continue;
-                  console.log(`[SecureChannel] ${pending.length} pending Welcome requests for room ${roomId.slice(0, 8)}`);
                   const nowMs = Date.now();
                   const fresh = pending.filter((r2) => {
                     const key = `${roomState.mlsGroupId}:${r2.requesting_device_id}`;
@@ -79181,6 +79691,8 @@ ${baseText}`;
                     return true;
                   });
                   if (fresh.length === 0) continue;
+                  const roomPreHead = await this._welcomeCommitPreflight(roomState.mlsGroupId, mlsGroup, roomLabel);
+                  if (!roomPreHead) continue;
                   for (const r2 of fresh) {
                     this._roomFulfilCooldown.set(`${roomState.mlsGroupId}:${r2.requesting_device_id}`, nowMs);
                   }
@@ -79190,13 +79702,23 @@ ${baseText}`;
                     `${this.config.apiUrl}/api/v1/mls/key-packages/batch?device_ids=${deviceIds.join(",")}`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  if (!kpRes.ok) continue;
+                  if (!kpRes.ok) {
+                    this._welcomeKpBackoff.noteFetchFailure(`KeyPackage batch for ${roomLabel}`, kpRes.status);
+                    continue;
+                  }
+                  this._welcomeKpBackoff.noteFetchOk(`KeyPackage batch for ${roomLabel}`);
                   const kpData = await kpRes.json();
                   const roomTargets = [];
                   for (const req of pending) {
                     const kpHex = kpData[req.requesting_device_id];
+                    this._welcomeKpBackoff.recordKeyPackage(
+                      roomState.mlsGroupId,
+                      req.requesting_device_id,
+                      Boolean(kpHex),
+                      req.key_package_available,
+                      roomLabel
+                    );
                     if (!kpHex) {
-                      console.warn(`[SecureChannel] No KeyPackage for ${req.requesting_device_id.slice(0, 8)}, skipping`);
                       continue;
                     }
                     const kpBytes = new Uint8Array(Buffer.from(kpHex, "hex"));
@@ -79214,8 +79736,10 @@ ${baseText}`;
                       label: `room ${roomId.slice(0, 8)}`,
                       welcomeFields: { room_id: roomId },
                       targets: roomTargets,
-                      memberDeviceIds: (roomState.members ?? []).map((m2) => m2.deviceId)
+                      memberDeviceIds: (roomState.members ?? []).map((m2) => m2.deviceId),
                       // #1226
+                      preHead: roomPreHead
+                      // #1429
                     });
                     if (done > 0) {
                       console.log(
@@ -79233,28 +79757,49 @@ ${baseText}`;
                 const mlsGroup = this._mlsGroups.get(`1to1-group:${gid}`);
                 if (!mlsGroup?.isInitialized) continue;
                 try {
+                  const sharedLabel = `shared group ${gid.slice(0, 8)}`;
                   const pendingRes = await fetch(
                     `${this.config.apiUrl}/api/v1/mls/groups/${entry.mlsGroupId}/pending-welcomes`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  if (!pendingRes.ok) continue;
-                  const pending = await pendingRes.json();
+                  if (!pendingRes.ok) {
+                    this._welcomeKpBackoff.noteFetchFailure(`pending-welcomes for ${sharedLabel}`, pendingRes.status);
+                    continue;
+                  }
+                  this._welcomeKpBackoff.noteFetchOk(`pending-welcomes for ${sharedLabel}`);
+                  const allPending = await pendingRes.json();
+                  if (this._welcomeKpBackoff.observePending(entry.mlsGroupId, allPending)) {
+                    console.log(`[SecureChannel] ${allPending.length} pending Welcome requests for shared group ${gid.slice(0, 8)}`);
+                  }
+                  const nowKp = Date.now();
+                  const pending = allPending.filter(
+                    (r2) => this._welcomeKpBackoff.shouldAsk(entry.mlsGroupId, r2.requesting_device_id, r2.key_package_available, sharedLabel, nowKp)
+                  );
                   if (pending.length === 0) continue;
-                  console.log(`[SecureChannel] ${pending.length} pending Welcome requests for shared group ${gid.slice(0, 8)}`);
+                  const sharedPreHead = await this._welcomeCommitPreflight(entry.mlsGroupId, mlsGroup, sharedLabel);
+                  if (!sharedPreHead) continue;
                   const deviceIds = pending.map((r2) => r2.requesting_device_id);
                   const kpRes = await fetch(
                     `${this.config.apiUrl}/api/v1/mls/key-packages/batch?device_ids=${deviceIds.join(",")}`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  if (!kpRes.ok) continue;
+                  if (!kpRes.ok) {
+                    this._welcomeKpBackoff.noteFetchFailure(`KeyPackage batch for ${sharedLabel}`, kpRes.status);
+                    continue;
+                  }
+                  this._welcomeKpBackoff.noteFetchOk(`KeyPackage batch for ${sharedLabel}`);
                   const kpData = await kpRes.json();
                   const validReqs = [];
                   for (const req of pending) {
                     const kpHex = kpData[req.requesting_device_id];
-                    if (!kpHex) {
-                      console.warn(`[SecureChannel] No KeyPackage for ${req.requesting_device_id.slice(0, 8)}, skipping`);
-                      continue;
-                    }
+                    this._welcomeKpBackoff.recordKeyPackage(
+                      entry.mlsGroupId,
+                      req.requesting_device_id,
+                      Boolean(kpHex),
+                      req.key_package_available,
+                      sharedLabel
+                    );
+                    if (!kpHex) continue;
                     const kpBytes = new Uint8Array(Buffer.from(kpHex, "hex"));
                     validReqs.push({ req, kp: MLSGroupManager.deserializeKeyPackage(kpBytes) });
                   }
@@ -79271,8 +79816,10 @@ ${baseText}`;
                       label: `shared group ${gid.slice(0, 8)}`,
                       welcomeFields: { conversation_group_id: gid },
                       targets: sharedTargets,
-                      memberDeviceIds: entry.memberDeviceIds ?? []
+                      memberDeviceIds: entry.memberDeviceIds ?? [],
                       // #1226
+                      preHead: sharedPreHead
+                      // #1429
                     });
                     if (done > 0) {
                       console.log(`[SecureChannel] Batched Welcome for ${done}/${validReqs.length} devices in shared group ${gid.slice(0, 8)} (epoch=${mlsGroup.epoch})`);
@@ -79306,23 +79853,49 @@ ${baseText}`;
                 const mlsGroup = this._mlsGroups.get(`conv:${convId}`);
                 if (!mlsGroup?.isInitialized) continue;
                 try {
+                  const convLabel = `conv ${convId.slice(0, 8)}`;
                   const pendingRes = await fetch(
                     `${this.config.apiUrl}/api/v1/mls/groups/${convEntry.mlsGroupId}/pending-welcomes`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  if (!pendingRes.ok) continue;
+                  if (!pendingRes.ok) {
+                    this._welcomeKpBackoff.noteFetchFailure(`pending-welcomes for ${convLabel}`, pendingRes.status);
+                    continue;
+                  }
+                  this._welcomeKpBackoff.noteFetchOk(`pending-welcomes for ${convLabel}`);
                   const pending = await pendingRes.json();
+                  if (this._welcomeKpBackoff.observePending(convEntry.mlsGroupId, pending)) {
+                    console.log(`[SecureChannel] ${pending.length} pending Welcome requests for conv ${convId.slice(0, 8)}`);
+                  }
                   if (pending.length === 0) continue;
-                  console.log(`[SecureChannel] ${pending.length} pending Welcome requests for conv ${convId.slice(0, 8)}`);
                   for (const req of pending) {
                     try {
+                      if (!this._welcomeKpBackoff.shouldAsk(
+                        convEntry.mlsGroupId,
+                        req.requesting_device_id,
+                        req.key_package_available,
+                        convLabel
+                      )) continue;
+                      const convPreHead = await this._welcomeCommitPreflight(convEntry.mlsGroupId, mlsGroup, convLabel);
+                      if (!convPreHead) break;
                       const kpRes = await fetch(
                         `${this.config.apiUrl}/api/v1/mls/key-packages/batch?device_ids=${req.requesting_device_id}`,
                         { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                       );
-                      if (!kpRes.ok) continue;
+                      if (!kpRes.ok) {
+                        this._welcomeKpBackoff.noteFetchFailure(`KeyPackage batch for ${convLabel}`, kpRes.status);
+                        continue;
+                      }
+                      this._welcomeKpBackoff.noteFetchOk(`KeyPackage batch for ${convLabel}`);
                       const kpData = await kpRes.json();
                       const kpHex = kpData[req.requesting_device_id];
+                      this._welcomeKpBackoff.recordKeyPackage(
+                        convEntry.mlsGroupId,
+                        req.requesting_device_id,
+                        Boolean(kpHex),
+                        req.key_package_available,
+                        convLabel
+                      );
                       if (!kpHex) continue;
                       const kpBytes = new Uint8Array(Buffer.from(kpHex, "hex"));
                       const memberKp = MLSGroupManager.deserializeKeyPackage(kpBytes);
@@ -79339,7 +79912,9 @@ ${baseText}`;
                         // #1226: a 1:1 roster is [self, owner] — the web's shape too.
                         memberDeviceIds: [this._persisted?.sessions?.[convId]?.ownerDeviceId].filter(
                           (d2) => typeof d2 === "string"
-                        )
+                        ),
+                        preHead: convPreHead
+                        // #1429
                       });
                       if (done > 0) {
                         console.log(`[SecureChannel] Fulfilled Welcome for ${req.requesting_device_id.slice(0, 8)} in conv ${convId.slice(0, 8)}`);
@@ -79387,15 +79962,28 @@ ${baseText}`;
                 if (!mlsGroup?.isInitialized) continue;
                 if (chState.role !== "creator") continue;
                 try {
+                  const a2aPendingLabel = `A2A ${chId.slice(0, 8)}`;
                   const pendingRes = await fetch(
                     `${this.config.apiUrl}/api/v1/mls/groups/${chState.mlsGroupId}/pending-welcomes`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  if (!pendingRes.ok) continue;
+                  if (!pendingRes.ok) {
+                    this._welcomeKpBackoff.noteFetchFailure(`pending-welcomes for ${a2aPendingLabel}`, pendingRes.status);
+                    continue;
+                  }
+                  this._welcomeKpBackoff.noteFetchOk(`pending-welcomes for ${a2aPendingLabel}`);
                   const pending = await pendingRes.json();
+                  if (this._welcomeKpBackoff.observePending(chState.mlsGroupId, pending)) {
+                    console.log(`[SecureChannel] ${pending.length} pending A2A Welcome requests for channel ${chId.slice(0, 8)}`);
+                  }
                   if (pending.length === 0) continue;
-                  console.log(`[SecureChannel] ${pending.length} pending A2A Welcome requests for channel ${chId.slice(0, 8)}`);
                   for (const req of pending) {
+                    if (!this._welcomeKpBackoff.shouldAsk(
+                      chState.mlsGroupId,
+                      req.requesting_device_id,
+                      req.key_package_available,
+                      a2aPendingLabel
+                    )) continue;
                     try {
                       const next = await this._fulfilA2AWelcome(chId, chState, mlsGroup, req);
                       if (next === "stop") break;
@@ -79707,9 +80295,20 @@ ${baseText}`;
                 `${this.config.apiUrl}/api/v1/mls/key-packages/batch?device_ids=${req.requesting_device_id}`,
                 { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
               );
-              if (!kpRes.ok) return "next";
+              if (!kpRes.ok) {
+                this._welcomeKpBackoff.noteFetchFailure(`KeyPackage batch for ${a2aLabel}`, kpRes.status);
+                return "next";
+              }
+              this._welcomeKpBackoff.noteFetchOk(`KeyPackage batch for ${a2aLabel}`);
               const kpData = await kpRes.json();
               const kpHex = kpData[req.requesting_device_id];
+              this._welcomeKpBackoff.recordKeyPackage(
+                chState.mlsGroupId,
+                req.requesting_device_id,
+                Boolean(kpHex),
+                req.key_package_available,
+                a2aLabel
+              );
               if (!kpHex) return "next";
               const kpBytes = new Uint8Array(Buffer.from(kpHex, "hex"));
               const memberKp = MLSGroupManager.deserializeKeyPackage(kpBytes);
@@ -80334,7 +80933,7 @@ ${baseText}`;
                 );
                 this._authFailedThisSession = true;
                 this._setState("error");
-                this.emit("auth_failed", { reason: "ws_auth_rejected" });
+                this.emit("auth_failed", { reason: "ws_auth_rejected", deviceGone: false });
                 return;
               }
               if (lastCode === 4e3) {
@@ -80373,7 +80972,7 @@ ${baseText}`;
             this._state = newState;
             this.emit("state", newState);
             this.config.onStateChange?.(newState);
-            if (newState === "disconnected" && !this._pollFallbackTimer && this._deviceJwt) {
+            if (newState === "disconnected" && !this._pollFallbackTimer && this._deviceJwt && !this._suspended) {
               this._startPollFallback();
             }
             if (newState === "ready" || newState === "error" || this._stopped) {
@@ -80510,8 +81109,10 @@ ${baseText}`;
            * blindly. We ask the PUBLIC /devices/{id}/status endpoint (no JWT needed, so
            * it answers even when our device JWT is being rejected):
            *   - ACTIVE          -> reconnect in place (transient); stay online.
-           *   - non-ACTIVE      -> terminal (genuinely revoked; operator must re-enroll).
-           *   - unreachable/429  -> reconnect (inconclusive; a network blip shouldn't
+           *   - SUSPENDED       -> suspended-wait (owner paused it; resume later).
+           *   - REVOKED/deleted -> terminal via `_terminalDeviceGone` (auth_failed with
+           *                        deviceGone: the bridges exit and remove their service).
+           *   - anything else / unreachable / 429 -> reconnect (inconclusive; a network blip shouldn't
            *                         permanently kill a healthy agent — the WS is down too,
            *                         so normal backoff handles it, and the war cap bounds
            *                         thrash if the device really is dead).
@@ -80551,10 +81152,58 @@ ${baseText}`;
             }
             this._authFailedThisSession = true;
             const authReason = data?.reason ?? "unknown";
+            const standing = await this._readDeviceStanding();
+            if (standing.kind === "suspended") {
+              this._authFailedThisSession = false;
+              this._enterSuspendedWait("connection_rejected");
+              return;
+            }
+            const deviceGone = standing.kind === "gone";
             console.warn(
-              `[SecureChannel] connection_rejected (reason=${data?.reason ?? "unknown"}, retryable=false) \u2014 terminal; surfacing auth_failed`
+              `[SecureChannel] connection_rejected (reason=${data?.reason ?? "unknown"}, retryable=false) \u2014 terminal; surfacing auth_failed (deviceGone=${deviceGone})`
             );
-            this.emit("auth_failed", { reason: authReason });
+            this.emit("auth_failed", { reason: authReason, deviceGone });
+          }
+          /**
+           * How long an opened socket may stay silent before we treat it as served.
+           * The backend's reject_connection sends `connection_rejected` immediately
+           * after the accept, so a refused socket's first frame lands well inside
+           * this; a served agent with a hub gets `hub_identity_sync` sooner still.
+           */
+          static OPEN_SETTLE_MS = 1500;
+          /**
+           * Per-socket "has the server agreed to serve this session?" latch. Settles
+           * once: served on the first non-rejection frame or when the settle window
+           * passes quietly; rejected on `connection_rejected` or a close first.
+           * `rejected` stays readable afterwards so long open-handler work can bail.
+           */
+          _createServedGate() {
+            let verdict = null;
+            let rejected = false;
+            let timer = null;
+            const waiters = [];
+            const settle2 = (ok) => {
+              if (!ok) rejected = true;
+              if (verdict !== null) return;
+              verdict = ok;
+              if (timer) {
+                clearTimeout(timer);
+                timer = null;
+              }
+              for (const w2 of waiters.splice(0)) w2(ok);
+            };
+            return {
+              wait: () => {
+                if (verdict !== null) return Promise.resolve(verdict && !rejected);
+                if (!timer) timer = setTimeout(() => settle2(true), _SecureChannel.OPEN_SETTLE_MS);
+                return new Promise((resolve42) => waiters.push(resolve42));
+              },
+              markServed: () => settle2(true),
+              markRejected: () => settle2(false),
+              get rejected() {
+                return rejected;
+              }
+            };
           }
           // --- Owner pause (device SUSPENDED) — NON-final ---------------------------
           //
@@ -80579,6 +81228,7 @@ ${baseText}`;
               this._reconnectTimer = null;
             }
             this._rapidDisconnects = 0;
+            this._stopPollFallback();
             if (!this._suspended) {
               this._suspended = true;
               console.log(
@@ -80605,30 +81255,40 @@ ${baseText}`;
           }
           async _pollWhileSuspended() {
             if (this._stopped || !this._suspended) return;
-            const deviceId = this._deviceId ?? this._persisted?.deviceId;
-            if (deviceId) {
-              try {
-                const st = await pollDeviceStatus(this.config.apiUrl, deviceId);
-                if (this._stopped || !this._suspended) return;
-                if (!st.rateLimited && (st.status === "ACTIVE" || st.status === "APPROVED")) {
-                  this._clearSuspendedWait();
-                  this._reconnectAttempt = 0;
-                  console.log("[SecureChannel] Agent resumed by its owner \u2014 reconnecting");
-                  this.emit("resumed");
-                  this._connect();
-                  return;
-                }
-                if (!st.rateLimited && st.status === "REVOKED") {
-                  this._clearSuspendedWait();
-                  this._handleError(new Error("Device was revoked"));
-                  return;
-                }
-              } catch (err) {
-                console.warn("[SecureChannel] status check while paused failed; still waiting:", err);
-              }
+            const standing = await this._readDeviceStanding();
+            if (this._stopped || !this._suspended) return;
+            if (standing.kind === "active") {
+              this._clearSuspendedWait();
+              this._reconnectAttempt = 0;
+              console.log("[SecureChannel] Agent resumed by its owner \u2014 reconnecting");
+              this.emit("resumed");
+              this._connect();
+              return;
+            }
+            if (standing.kind === "gone") {
+              await this._terminalDeviceGone(standing.reason, "suspended_wait");
+              return;
+            }
+            if (standing.kind === "unknown") {
+              console.warn(`[SecureChannel] status check while paused inconclusive (${standing.why}); still waiting`);
             }
             this._scheduleSuspendedPoll();
           }
+          /**
+           * The device is CONFIRMED gone (status endpoint: REVOKED, or the row is
+           * deleted). Stop for good through the documented terminal surface:
+           * re_enroll report, `auth_failed{deviceGone:true}` (bridges exit and remove
+           * their service), then the legacy `error("Device was revoked")` the OpenClaw
+           * lifecycle and older listeners key on.
+           */
+          async _terminalDeviceGone(reason, source) {
+            this._clearSuspendedWait();
+            this._authFailedThisSession = true;
+            console.warn(`[SecureChannel] ${source}: device confirmed gone (${reason}) \u2014 terminal`);
+            await this._postAuthFailedToBackend(reason);
+            this.emit("auth_failed", { reason, deviceGone: true });
+            this._handleError(new Error("Device was revoked"));
+          }
           async _handleDeviceRevoked() {
             const now = Date.now();
             this._revokeRecoveries = this._revokeRecoveries.filter(
@@ -80646,35 +81306,25 @@ ${baseText}`;
               this._handleError(new Error("Device was revoked"));
               return;
             }
-            let reconnect;
-            try {
-              const status = await pollDeviceStatus(this.config.apiUrl, deviceId);
-              if (status.status === "SUSPENDED") {
-                this._enterSuspendedWait("device_revoked");
-                return;
-              }
-              reconnect = status.rateLimited === true || status.status === "ACTIVE";
-              if (!reconnect) {
-                console.warn(
-                  `[SecureChannel] device_revoked confirmed by server (status=${status.status}) \u2014 terminal`
-                );
-              }
-            } catch (err) {
-              console.warn(
-                "[SecureChannel] device_revoked status check failed; reconnecting (inconclusive):",
-                err
-              );
-              reconnect = true;
+            const standing = await this._readDeviceStanding();
+            if (standing.kind === "suspended") {
+              this._enterSuspendedWait("device_revoked");
+              return;
             }
-            if (reconnect) {
-              this._revokeRecoveries.push(now);
-              console.log(
-                "[SecureChannel] device_revoked but device not confirmed dead \u2014 reconnecting (self-heal)"
-              );
-              this._scheduleReconnect();
+            if (standing.kind === "gone") {
+              await this._terminalDeviceGone(standing.reason, "device_revoked");
               return;
             }
-            this._handleError(new Error("Device was revoked"));
+            if (standing.kind === "unknown") {
+              console.warn(
+                `[SecureChannel] device_revoked status check inconclusive (${standing.why}); reconnecting`
+              );
+            }
+            this._revokeRecoveries.push(now);
+            console.log(
+              "[SecureChannel] device_revoked but device not confirmed dead \u2014 reconnecting (self-heal)"
+            );
+            this._scheduleReconnect();
           }
           /**
            * Persist all ratchet session states to disk.
@@ -81474,7 +82124,7 @@ ${actionsText}`);
         "use strict";
         init_llm_response_parser();
         init_llm_cost();
-        traceStore = new AsyncLocalStorage2();
+        traceStore = new AsyncLocalStorage3();
       }
     });
     init_tool_audit = __esm2({
@@ -81497,6 +82147,7 @@ ${actionsText}`);
         init_openclaw_compat();
         init_lifecycle();
         init_tool_audit();
+        init_tool_telemetry();
         init_harness_compat();
         init_types();
         managedRoutesRequested = false;
@@ -102222,7 +102873,8 @@ data:
         await init_skill_telemetry();
         await init_policy_enforcer();
         init_room_protocol();
-        VERSION = true ? "0.23.52" : "0.0.0-dev";
+        init_tool_telemetry();
+        VERSION = true ? "0.23.54" : "0.0.0-dev";
       }
     });
     await init_index();
@@ -103118,7 +103770,7 @@ function museSpawnArgs(opts) {
 }
 
 // src/muse-provider.ts
-import { randomBytes as randomBytes3 } from "node:crypto";
+import { randomBytes as randomBytes4 } from "node:crypto";
 import { createServer as createServer2 } from "node:http";
 import { once } from "node:events";
 var META_RESPONSES_URL = "https://api.meta.ai/v1/responses";
@@ -103234,7 +103886,7 @@ async function forward(response, res, signal, inspected) {
   }
 }
 async function createMuseProviderAdapter(opts) {
-  const route = `/${randomBytes3(24).toString("hex")}/v1/responses`;
+  const route = `/${randomBytes4(24).toString("hex")}/v1/responses`;
   const turn = new AbortController();
   const sockets = /* @__PURE__ */ new Set();
   const log = (message) => {
@@ -103656,7 +104308,7 @@ function redactSecrets(text) {
 
 // src/muse-room-http.ts
 import { createServer as createServer3 } from "node:http";
-import { randomBytes as randomBytes4, randomUUID as randomUUID6, timingSafeEqual } from "node:crypto";
+import { randomBytes as randomBytes5, randomUUID as randomUUID6, timingSafeEqual } from "node:crypto";
 
 // src/muse-room-mcp.ts
 var PROTOCOL = "2024-11-05";
@@ -103733,7 +104385,7 @@ function acceptOf(req) {
 async function startRoomMcpServer(opts) {
   const seen = [];
   const traces = [];
-  const token = randomBytes4(24).toString("base64url");
+  const token = randomBytes5(24).toString("base64url");
   const path2 = `/mcp/${token}`;
   const log = opts.log ?? (() => {
   });
@@ -103981,6 +104633,18 @@ var RoomHushState = class {
     return t2 !== void 0 && now < t2;
   }
 };
+function reportSay(channel, t2, startedAt, failure2) {
+  try {
+    reportToolInvoke(channel.telemetry, {
+      toolName: "say",
+      outcome: failure2 ? "error" : "success",
+      errorKind: failure2 ? classifyToolError(failure2.err) : void 0,
+      durationMs: Date.now() - startedAt,
+      conversation: t2.kind === "room" ? { kind: "room", id: t2.roomId } : t2.conversationId ? { kind: "direct", id: t2.conversationId } : { kind: "unknown" }
+    });
+  } catch {
+  }
+}
 async function sendDm(channel, t2, text) {
   if ((t2.conversationId || t2.groupId) && typeof channel.runForConversation === "function") {
     await channel.runForConversation(
@@ -104013,13 +104677,17 @@ var ActiveTarget = class {
     const where = !t2 ? "nowhere" : t2.kind === "room" ? `room ${t2.roomId.slice(0, 8)}` : "1:1 owner";
     return async (text) => {
       if (!t2) return;
+      const startedAt = Date.now();
       try {
         if (t2.kind === "room") await channel.sendToRoom(t2.roomId, text);
         else await sendDm(channel, t2, text);
         log(`said to ${where}`);
       } catch (err) {
         log(`send failed to ${where}: ${err instanceof Error ? err.message : String(err)}`);
+        reportSay(channel, t2, startedAt, { err });
+        return;
       }
+      reportSay(channel, t2, startedAt);
     };
   }
 };
@@ -104182,7 +104850,7 @@ function mkdir700(path2) {
   chmodSync5(path2, 448);
 }
 function packageVersion() {
-  return true ? "0.1.27" : void 0;
+  return true ? "0.1.29" : void 0;
 }
 function helpText(version2) {
   return [