@agentvault/openai-bridge 0.1.12 → 0.1.14

package/dist/index.js

@@ -22,6 +22,8 @@ __export(dist_exports, {
   PolicyEnforcer: () => PolicyEnforcer,
   SecureChannel: () => SecureChannel,
   TOOL_INVOKE_SPAN_NAME: () => TOOL_INVOKE_SPAN_NAME,
+  TURN_FAILURE_CODES: () => TURN_FAILURE_CODES,
+  TurnFailure: () => TurnFailure,
   VERSION: () => VERSION,
   agentVaultPlugin: () => agentVaultPlugin,
   buildToolInvokeSpan: () => buildToolInvokeSpan,
@@ -42,6 +44,7 @@ __export(dist_exports, {
   handleTargetsRequest: () => handleTargetsRequest,
   historyRecoveryCodePath: () => historyRecoveryCodePath,
   invokeSkill: () => invokeSkill,
+  isOwnerNotice: () => isOwnerNotice,
   isUsingManagedRoutes: () => managedRoutesRequested,
   listAccountIds: () => listAccountIds,
   listTargets: () => listTargets,
@@ -52,10 +55,12 @@ __export(dist_exports, {
   mergeSkills: () => mergeSkills,
   offerHistoryRecoveryConfiguration: () => offerHistoryRecoveryConfiguration,
   owesRoomReply: () => owesRoomReply,
+  ownerNoticeFor: () => ownerNoticeFor,
   parseMentions: () => parseMentions,
   parseSkillMd: () => parseSkillMd,
   parseTarget: () => parseTarget,
   readMaskedHistoryRecoveryCode: () => readMaskedHistoryRecoveryCode,
+  reportModelTurnFailure: () => reportModelTurnFailure,
   reportSkillInvocation: () => reportSkillInvocation,
   reportToolInvoke: () => reportToolInvoke,
   requestHeartbeatNow: () => requestHeartbeatNow,
@@ -176,6 +181,9 @@ function resolveOwn(mention, names) {
 }
 function owesRoomReply(plaintext, agentName, accountId, senderIsAgent, roomDisplayName, ownDisplayName, selfResolved = true) {
   const mentions = parseMentions(plaintext);
+  if (senderIsAgent === false && namesAgentPlainly(plaintext, agentName, roomDisplayName, ownDisplayName)) {
+    return true;
+  }
   if (mentions.length === 0) return false;
   const ownNames = ownRoomNames(agentName, accountId, roomDisplayName, ownDisplayName);
   if (mentions.some((m2) => resolveOwn(m2, ownNames) !== null)) return true;
@@ -199,6 +207,21 @@ function ownRoomNames(agentName, accountId, roomDisplayName, ownDisplayName) {
   add4(ownDisplayName);
   return names;
 }
+function namesAgentPlainly(text, agentName, roomDisplayName, ownDisplayName) {
+  const names = /* @__PURE__ */ new Set();
+  for (const n2 of [agentName, roomDisplayName, ownDisplayName]) {
+    if (!n2) continue;
+    const lower = n2.toLowerCase().trim();
+    for (const candidate of [lower, lower.split(/[\s(]/)[0]]) {
+      if (candidate.length >= 3 && !GENERIC_AGENT_NAMES.has(candidate)) names.add(candidate);
+    }
+  }
+  for (const name of names) {
+    const escaped = name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    if (new RegExp(`(?<![\\p{L}\\p{N}_@-])${escaped}(?![\\p{L}\\p{N}_-])`, "iu").test(text)) return true;
+  }
+  return false;
+}
 function stripMentions(text, agentName, accountId, roomDisplayName, ownDisplayName) {
   const ownNames = ownRoomNames(agentName, accountId, roomDisplayName, ownDisplayName);
   return text.replace(new RegExp(MENTION_RE.source, MENTION_RE.flags), (full, name) => {
@@ -4135,8 +4158,8 @@ async function generateBackupCode() {
   return code;
 }
 function formatBackupCode(code) {
-  const clean5 = code.replace(/[-\s]/g, "").toUpperCase();
-  return clean5.match(/.{1,4}/g)?.join("-") ?? clean5;
+  const clean6 = code.replace(/[-\s]/g, "").toUpperCase();
+  return clean6.match(/.{1,4}/g)?.join("-") ?? clean6;
 }
 function normalizeBackupCode(input) {
   return input.replace(/[-\s]/g, "").toUpperCase();
@@ -11812,11 +11835,11 @@ async function joinWithFirstMatchingKp(welcomeBytes, candidates) {
   return null;
 }
 function ownIdentity() {
-  const v2 = true ? "0.23.63" : FALLBACK;
+  const v2 = true ? "0.23.64" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildSha() {
-  const raw = true ? "52249f2" : "";
+  const raw = true ? "0e95fe8" : "";
   const cleaned = (raw ?? "").trim();
   return !cleaned || cleaned === "unknown" ? null : cleaned;
 }
@@ -18509,7 +18532,55 @@ function reportSkillInvocation(opts) {
   spanBuffer.push(span);
   return span;
 }
-var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, AMBIGUOUS_OWNER_ERROR, init_owner_routing, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports2, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, DECRYPTED_IDS_FILE, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, NOT_A_MEMBER_DETAIL, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, KP_BACKOFF_INITIAL_MS, KP_BACKOFF_MAX_MS, KP_RACE_RETRY_MS, KP_RACE_RETRY_LIMIT, consoleLogger, short, WelcomeKeyPackageBackoff, init_welcome_kp_backoff, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, _heartbeatFn, init_openclaw_compat, TOOL_INVOKE_SPAN_NAME, UNCLASSIFIED_ERROR, KNOWN_TOOL_ERROR_CODES, KNOWN_CODES, CLASS_NAME_RE, TOOL_NAME_RE, ERROR_TEXT_CODES, _conversation, init_tool_telemetry, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, _turnConversation, PERSON_INVOLVED_WINDOW_MS, ATTESTED_INBOUND_MAX, UNMAPPED_RECONCILE_COOLDOWN_MS, TOPIC_ID_RE, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
+function asTurnFailureCode(code) {
+  return typeof code === "string" && CODES.has(code) ? code : "model_error";
+}
+function clean5(value, max) {
+  if (typeof value !== "string") return "";
+  return value.replace(/@/g, "").replace(/\s+/g, " ").trim().slice(0, max).trim();
+}
+function ownerNoticeFor(code, ctx) {
+  const a2 = clean5(ctx?.agentName, 80) || "Your agent";
+  const p2 = clean5(ctx?.provider, 40) || "AI provider";
+  const head = `${a2} couldn't answer this message`;
+  switch (asTurnFailureCode(code)) {
+    case "provider_auth_failed":
+      return `${head}: its ${p2} sign-in expired. Sign in again on the agent's computer.`;
+    case "provider_billing":
+      return `${head}: its ${p2} account is out of credit or has a billing problem.`;
+    case "model_rate_limited":
+      return `${head}: it is being rate-limited by ${p2}. Try again in a few minutes.`;
+    case "model_unavailable":
+      return `${head}: the model it is set to use is no longer available.`;
+    case "provider_unreachable":
+      return `${head}: it can't reach ${p2} right now.`;
+    case "ai_tool_unsupported":
+      return `${head}: its AI tool needs attention on its computer.`;
+    case "plan_limit_reached":
+      return `${head}: it has reached its ${p2} plan's usage limit.`;
+    default:
+      return `${head}.`;
+  }
+}
+function isOwnerNotice(text) {
+  return typeof text === "string" && NOTICE_RE.test(text);
+}
+function reportModelTurnFailure(sink, report) {
+  try {
+    const code = asTurnFailureCode(report.code);
+    const isPlan = code === "plan_limit_reached";
+    reportToolInvoke(sink, {
+      toolName: "model_turn",
+      outcome: "error",
+      errorKind: code,
+      durationMs: report.durationMs,
+      conversation: isPlan ? { kind: "unknown" } : report.conversation,
+      ...isPlan && report.limitResetsAt !== void 0 ? { limitResetsAt: report.limitResetsAt } : {}
+    });
+  } catch {
+  }
+}
+var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, AMBIGUOUS_OWNER_ERROR, init_owner_routing, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, GENERIC_AGENT_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports2, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, DECRYPTED_IDS_FILE, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, NOT_A_MEMBER_DETAIL, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, KP_BACKOFF_INITIAL_MS, KP_BACKOFF_MAX_MS, KP_RACE_RETRY_MS, KP_RACE_RETRY_LIMIT, consoleLogger, short, WelcomeKeyPackageBackoff, init_welcome_kp_backoff, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, _heartbeatFn, init_openclaw_compat, TOOL_INVOKE_SPAN_NAME, UNCLASSIFIED_ERROR, KNOWN_TOOL_ERROR_CODES, KNOWN_CODES, CLASS_NAME_RE, TOOL_NAME_RE, ERROR_TEXT_CODES, _conversation, init_tool_telemetry, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, _turnConversation, PERSON_INVOLVED_WINDOW_MS, ATTESTED_INBOUND_MAX, UNMAPPED_RECONCILE_COOLDOWN_MS, TOPIC_ID_RE, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, TURN_FAILURE_CODES, CODES, TurnFailure, NOTICE_RE, init_turn_failure, VERSION, init_index;
 var init_dist = __esm({
   async "../plugin/dist/index.js"() {
     "use strict";
@@ -18583,6 +18654,7 @@ var init_dist = __esm({
         "use strict";
         MENTION_RE = /@([\w-]+)/gi;
         BROADCAST_NAMES = /* @__PURE__ */ new Set(["all", "everyone"]);
+        GENERIC_AGENT_NAMES = /* @__PURE__ */ new Set(["default", "agent", "assistant", "bot", "main"]);
       }
     });
     init_libsodium_sumo = __esm2({
@@ -71510,6 +71582,12 @@ var init_dist = __esm({
           // #1467: a Muse turn failed — Meta answered 429, or anything else.
           "model_rate_limited",
           "model_error",
+          // #1560: a failed model turn named for the owner (turn-failure.ts). Never send codes.
+          "provider_auth_failed",
+          "provider_billing",
+          "model_unavailable",
+          "provider_unreachable",
+          "ai_tool_unsupported",
           UNCLASSIFIED_ERROR
         ];
         KNOWN_CODES = new Set(KNOWN_TOOL_ERROR_CODES);
@@ -73477,6 +73555,33 @@ ${text}`,
             const tag = `room:${roomId}`;
             return history.filter((e) => e.topicId === tag).slice(-maxMessages);
           }
+          /**
+           * #1560 — recent history of one person's 1:1 chat, for LLM context
+           * injection by a bridge. Scoped by the group the inbound frame DECRYPTED
+           * under (`opts.groupId`, #1416/#1418): never another person's entries, and
+           * never a room's or an A2A channel's. Time-ordered, last `maxMessages`
+           * (capped at 100). Synchronous and pure: no new storage, no network.
+           */
+          getConversationHistory(conversationId, maxMessages = 20, opts = {}) {
+            if (!(maxMessages > 0)) return [];
+            if (this._knownDmGroups().size === 0) return [];
+            if (opts.groupId) {
+              const convs = this._conversationsOfGroup(opts.groupId);
+              if (convs.length > 0 && !convs.includes(conversationId)) return [];
+            }
+            return this._historyForCatchup("dm", void 0, void 0, {
+              groupId: opts.groupId,
+              conversationId
+            }).slice(-Math.min(maxMessages, 100));
+          }
+          /** Every conversation mapped to `groupId` (one per browser of its person). */
+          _conversationsOfGroup(groupId) {
+            const out = [];
+            for (const [convId, gid] of this._sessionGroupIds) {
+              if (gid === groupId) out.push(convId);
+            }
+            return out;
+          }
           /**
            * Encrypt and send a message to ALL owner devices (fanout).
            * Each session gets the same plaintext encrypted independently.
@@ -73954,7 +74059,7 @@ ${text}`,
            */
           sendActivitySpan(spanData) {
             if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-            const pluginVersion = true ? "0.23.63" : "0.0.0-dev";
+            const pluginVersion = true ? "0.23.64" : "0.0.0-dev";
             const agentName = this.config.agentName ?? "Agent";
             const resource = {
               "service.name": "agentvault-agent",
@@ -76165,7 +76270,7 @@ ${text}`,
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.63" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.64" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -76498,7 +76603,7 @@ ${text}`,
                         agentVersion: this.config.agentVersion ?? "0.0.0",
                         // __AV_VERSION__ is injected by esbuild from package.json at build time.
                         // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                        pluginVersion: true ? "0.23.63" : "0.0.0-dev"
+                        pluginVersion: true ? "0.23.64" : "0.0.0-dev"
                       });
                       this._telemetryReporter.startAutoFlush(3e4);
                     }
@@ -103062,6 +103167,34 @@ data:
         };
       }
     });
+    init_turn_failure = __esm2({
+      "src/turn-failure.ts"() {
+        "use strict";
+        init_tool_telemetry();
+        TURN_FAILURE_CODES = [
+          "provider_auth_failed",
+          "provider_billing",
+          "model_rate_limited",
+          "model_unavailable",
+          "provider_unreachable",
+          "ai_tool_unsupported",
+          "plan_limit_reached",
+          "model_error"
+        ];
+        CODES = new Set(TURN_FAILURE_CODES);
+        TurnFailure = class extends Error {
+          code;
+          exitCode;
+          constructor(code, opts = {}, message = "Codex turn failed") {
+            super(message);
+            this.name = "TurnFailure";
+            this.code = asTurnFailureCode(code);
+            if (opts.exitCode !== void 0) this.exitCode = opts.exitCode;
+          }
+        };
+        NOTICE_RE = /^[^\n@]{1,120} couldn't answer this message(?:\.|: [^\n]{1,200})$/;
+      }
+    });
     init_index = __esm2({
       async "src/index.ts"() {
         await init_channel();
@@ -103082,7 +103215,8 @@ data:
         await init_policy_enforcer();
         init_room_protocol();
         init_tool_telemetry();
-        VERSION = true ? "0.23.63" : "0.0.0-dev";
+        init_turn_failure();
+        VERSION = true ? "0.23.64" : "0.0.0-dev";
       }
     });
     await init_index();
@@ -103096,18 +103230,32 @@ import { join as join8 } from "node:path";
 async function findRollout(layout, id) {
   let visited = 0;
   const matches = [];
+  let unwalked = false;
+  const root3 = join8(layout.codex, "sessions");
   async function walk(directory, depth) {
-    const handle = await opendir(directory);
+    let handle;
+    try {
+      handle = await opendir(directory);
+    } catch (error2) {
+      if (depth === 0 && error2.code === "ENOENT")
+        throw new RolloutMissing();
+      throw error2;
+    }
     for await (const entry of handle) {
       if (++visited > 4096 || entry.isSymbolicLink())
         throw invalid();
-      if (entry.isDirectory() && depth < 3)
-        await walk(join8(directory, entry.name), depth + 1);
-      else if (entry.isFile() && entry.name.endsWith(`-${id}.jsonl`))
+      if (entry.isDirectory()) {
+        if (depth < 3)
+          await walk(join8(directory, entry.name), depth + 1);
+        else
+          unwalked = true;
+      } else if (entry.isFile() && entry.name.endsWith(`-${id}.jsonl`))
         matches.push(join8(directory, entry.name));
     }
   }
-  await walk(join8(layout.codex, "sessions"), 0);
+  await walk(root3, 0);
+  if (matches.length === 0)
+    throw unwalked ? invalid() : new RolloutMissing();
   if (matches.length !== 1)
     throw invalid();
   return matches[0];
@@ -103188,19 +103336,26 @@ async function verifyFinalReply(layout, id, stdoutText, before) {
     throw invalid();
   }
 }
-var UUID, invalid;
+var UUID, INVALID2, invalid, RolloutMissing;
 var init_rollout = __esm({
   "src/rollout.ts"() {
     "use strict";
     UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-    invalid = () => new Error("Codex final reply could not be verified");
+    INVALID2 = "Codex final reply could not be verified";
+    invalid = () => new Error(INVALID2);
+    RolloutMissing = class extends Error {
+      constructor() {
+        super(INVALID2);
+        this.name = "RolloutMissing";
+      }
+    };
   }
 });
 
 // src/driver.ts
 import { spawn, execFile } from "node:child_process";
 import { constants as constants4 } from "node:fs";
-import { mkdir as mkdir5, chmod as chmod3, readFile as readFile6, writeFile as writeFile4, rename as rename5, access, realpath } from "node:fs/promises";
+import { mkdir as mkdir5, chmod as chmod3, readFile as readFile6, writeFile as writeFile4, rename as rename5, access, realpath, link, unlink as unlink2 } from "node:fs/promises";
 import { createHash as createHash2, randomUUID as randomUUID5 } from "node:crypto";
 import { join as join9, isAbsolute } from "node:path";
 import { StringDecoder } from "node:string_decoder";
@@ -103224,7 +103379,7 @@ function childEnvironment(layout) {
 }
 function buildInvocation(layout, sessionId) {
   if (sessionId && !UUID2.test(sessionId))
-    throw new Error("Invalid stored Codex session");
+    throw new TurnFailure("model_error", {}, "Invalid stored Codex session");
   const args = [
     "exec",
     "--json",
@@ -103267,16 +103422,65 @@ async function resolveCodex(path2 = process.env.PATH ?? "") {
     } catch {
     }
   }
-  throw new Error(`Install Codex CLI ${SUPPORTED_CODEX_VERSION} and put codex on PATH`);
+  throw new TurnFailure("ai_tool_unsupported", {}, `Install Codex CLI ${SUPPORTED_CODEX_VERSION} and put codex on PATH`);
 }
-async function checkVersion(binary, layout) {
+async function checkVersion(binary, layout, timeoutMs = 5e3) {
   if (!isAbsolute(binary))
-    throw new Error("Codex executable must be absolute");
+    throw new TurnFailure("ai_tool_unsupported", {}, "Codex executable must be absolute");
   const version2 = await new Promise((resolve4, reject) => {
-    execFile(binary, ["--version"], { cwd: layout.work, env: childEnvironment(layout), timeout: 5e3, maxBuffer: 4096 }, (error2, stdout) => error2 ? reject(new Error("Cannot run Codex CLI; install the native 0.154.0 executable (the isolated child PATH is /usr/bin:/bin)")) : resolve4(stdout.trim()));
+    execFile(binary, ["--version"], { cwd: layout.work, env: childEnvironment(layout), timeout: timeoutMs, maxBuffer: 4096 }, (error2, stdout) => {
+      if (!error2)
+        resolve4(stdout.trim());
+      else if (error2.killed === true && error2.signal === "SIGTERM" && error2.code !== "ERR_CHILD_PROCESS_STDIO_MAXBUFFER")
+        reject(new TurnFailure("model_error", {}, "Codex CLI did not answer --version in time"));
+      else
+        reject(new TurnFailure("ai_tool_unsupported", {}, "Cannot run Codex CLI; install the native 0.154.0 executable (the isolated child PATH is /usr/bin:/bin)"));
+    });
   });
   if (version2 !== `codex-cli ${SUPPORTED_CODEX_VERSION}`)
-    throw new Error(`Unsupported Codex CLI; install ${SUPPORTED_CODEX_VERSION}`);
+    throw new TurnFailure("ai_tool_unsupported", {}, `Unsupported Codex CLI; install ${SUPPORTED_CODEX_VERSION}`);
+}
+function classifyCodexFailure(text) {
+  if (typeof text !== "string")
+    return "model_error";
+  if (/(?:status|error:?)\s+401\b|401 Unauthorized|could not be refreshed|sign in again|invalid_api_key|invalid_refresh_token/i.test(text))
+    return "provider_auth_failed";
+  if (/unexpected status 5\d\d|stream disconnected|error sending request|failed to lookup address|ENOTFOUND|ECONNREFUSED|ETIMEDOUT/.test(text))
+    return "provider_unreachable";
+  return "model_error";
+}
+async function keepFirstPrivate(path2, value) {
+  const temporary = `${path2}.${randomUUID5()}.tmp`;
+  await writeFile4(temporary, value, { mode: 384, flag: "wx" });
+  try {
+    await link(temporary, path2);
+  } catch (error2) {
+    if (error2.code !== "EEXIST")
+      throw error2;
+  } finally {
+    await unlink2(temporary).catch(() => void 0);
+  }
+}
+function seededPrompt(seed, prompt) {
+  if (!seed)
+    return prompt;
+  const budget = MAX_PROMPT_BYTES - Buffer.byteLength(prompt) - 2;
+  if (budget <= 0)
+    return prompt;
+  const bytes = Buffer.from(seed, "utf8");
+  if (bytes.length <= budget)
+    return `${seed}
+
+${prompt}`;
+  let start = bytes.length - budget;
+  while (start < bytes.length && (bytes[start] & 192) === 128)
+    start++;
+  let kept = bytes.subarray(start).toString("utf8");
+  const newline = kept.indexOf("\n");
+  kept = newline >= 0 ? kept.slice(newline + 1) : "";
+  return kept ? `${kept}
+
+${prompt}` : prompt;
 }
 function parseTurnUsage(raw) {
   if (!raw || typeof raw !== "object")
@@ -103288,13 +103492,17 @@ function parseTurnUsage(raw) {
   const cached2 = count(u2.cached_input_tokens);
   return { model: CODEX_MODEL, inputTokens, outputTokens, ...cached2 !== void 0 ? { cachedInputTokens: cached2 } : {} };
 }
-var SUPPORTED_CODEX_VERSION, CODE_MODE_WARNING, UUID2, CODEX_MODEL, count, CodexDriver;
+var SUPPORTED_CODEX_VERSION, CODE_MODE_WARNING, MODEL_METADATA_WARNING, MAX_PROMPT_BYTES, STDERR_PREFIX_BYTES, UUID2, CODEX_MODEL, count, CodexDriver;
 var init_driver = __esm({
-  "src/driver.ts"() {
+  async "src/driver.ts"() {
     "use strict";
     init_rollout();
+    await init_dist();
     SUPPORTED_CODEX_VERSION = "0.154.0";
     CODE_MODE_WARNING = "Code Mode is unavailable because code-mode host is disabled. Code mode will fail closed; enable `features.code_mode_host` and install `codex-code-mode-host`.";
+    MODEL_METADATA_WARNING = /^Model metadata for `[^`\n]{1,200}` not found\. Defaulting to fallback metadata;/;
+    MAX_PROMPT_BYTES = 128 * 1024;
+    STDERR_PREFIX_BYTES = 8 * 1024;
     UUID2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     CODEX_MODEL = "gpt-5.6-terra";
     count = (v2) => typeof v2 === "number" && Number.isSafeInteger(v2) && v2 >= 0 ? v2 : void 0;
@@ -103305,37 +103513,89 @@ var init_driver = __esm({
       options;
       busy = false;
       poisoned = false;
-      async run(key, prompt, signal) {
-        if (this.busy || this.poisoned || signal?.aborted || Buffer.byteLength(prompt) > 128 * 1024)
-          throw new Error("Codex turn failed");
+      async run(key, prompt, signal, opts = {}) {
+        if (this.busy || this.poisoned || signal?.aborted || Buffer.byteLength(prompt) > MAX_PROMPT_BYTES)
+          throw new TurnFailure("model_error");
         this.busy = true;
         try {
-          const { binary, layout } = this.options;
-          await checkVersion(binary, layout);
+          const { binary, layout, versionTimeoutMs } = this.options;
+          await checkVersion(binary, layout, versionTimeoutMs);
           if (signal?.aborted)
-            throw new Error("Codex turn failed");
+            throw new TurnFailure("model_error");
           const sessionFile = join9(layout.sessions, createHash2("sha256").update(key).digest("hex") + ".json");
           let sessionId;
           try {
             const stored = JSON.parse(await readFile6(sessionFile, "utf8"));
             if (typeof stored !== "string" || !UUID2.test(stored))
-              throw new Error("Invalid stored Codex session");
+              throw new TurnFailure("model_error", {}, "Invalid stored Codex session");
             sessionId = stored;
           } catch (error2) {
-            if (error2.code !== "ENOENT")
+            if (error2 instanceof TurnFailure || error2.code !== "ENOENT")
               throw error2;
           }
-          const before = sessionId ? await snapshotRollout(layout, sessionId) : void 0;
-          const result = await this.execute(prompt, sessionId, signal);
+          const freshPrompt = seededPrompt(opts.freshContext, prompt);
+          if (!sessionId) {
+            const result2 = await this.execute(freshPrompt, void 0, signal);
+            result2.text = await verifyFinalReply(layout, result2.sessionId, result2.text, void 0);
+            if (signal?.aborted)
+              throw new TurnFailure("model_error");
+            await atomicPrivateWrite(sessionFile, JSON.stringify(result2.sessionId));
+            return result2;
+          }
+          let before;
+          try {
+            before = await snapshotRollout(layout, sessionId);
+          } catch (error2) {
+            if (error2 instanceof RolloutMissing)
+              return await this.recover(sessionFile, sessionId, freshPrompt, signal);
+            throw new TurnFailure("model_error", {}, error2 instanceof Error ? error2.message : void 0);
+          }
+          let result;
+          try {
+            result = await this.execute(prompt, sessionId, signal);
+          } catch (error2) {
+            if (error2?.resumeRefused === true)
+              return await this.recover(sessionFile, sessionId, freshPrompt, signal);
+            throw error2;
+          }
           result.text = await verifyFinalReply(layout, result.sessionId, result.text, before);
           if (signal?.aborted)
-            throw new Error("Codex turn failed");
+            throw new TurnFailure("model_error");
           await atomicPrivateWrite(sessionFile, JSON.stringify(result.sessionId));
           return result;
+        } catch (error2) {
+          throw error2 instanceof TurnFailure ? error2 : new TurnFailure("model_error", {}, error2 instanceof Error ? error2.message : void 0);
         } finally {
           this.busy = false;
         }
       }
+      /**
+       * #1560 — the stored session is gone: run exactly one fresh, seeded session.
+       * The stored id is replaced only after the fresh reply verifies; the first
+       * replaced id is kept in `<file>.prev` and never overwritten.
+       */
+      async recover(sessionFile, oldId, freshPrompt, signal) {
+        if (signal?.aborted || this.poisoned)
+          throw new TurnFailure("model_error");
+        const { layout } = this.options;
+        const result = await this.execute(freshPrompt, void 0, signal);
+        if (result.sessionId === oldId)
+          throw new TurnFailure("model_error");
+        try {
+          result.text = await verifyFinalReply(layout, result.sessionId, result.text, void 0);
+        } catch (error2) {
+          throw new TurnFailure("model_error", {}, error2 instanceof Error ? error2.message : void 0);
+        }
+        if (signal?.aborted)
+          throw new TurnFailure("model_error");
+        await keepFirstPrivate(`${sessionFile}.prev`, JSON.stringify(oldId));
+        await atomicPrivateWrite(sessionFile, JSON.stringify(result.sessionId));
+        try {
+          this.options.onRecovered?.("session_resume_failed");
+        } catch {
+        }
+        return result;
+      }
       execute(prompt, expectedId, signal) {
         const { binary, layout, timeoutMs = 12e4, killGraceMs = 500, maxLineBytes = 256 * 1024, maxOutputBytes = 2 * 1024 * 1024 } = this.options;
         const invocation = buildInvocation(layout, expectedId);
@@ -103343,6 +103603,9 @@ var init_driver = __esm({
           const child = spawn(binary, invocation.args, { cwd: invocation.cwd, env: invocation.env, stdio: ["pipe", "pipe", "pipe"], detached: true });
           let failed = false, closed = false, settled = false, started = false, terminal = false;
           let sessionId = "", text = "", buffered = "", bytes = 0;
+          let eventText = "", itemText = "", errPrefix = "", errPrefixBytes = 0;
+          let threadStarted = false, exitCode = null;
+          let endedBy = "exit";
           let usage;
           const decoder2 = new StringDecoder("utf8");
           let killTimer;
@@ -103361,7 +103624,7 @@ var init_driver = __esm({
             clearTimeout(timeout);
             clearTimeout(killTimer);
             clearTimeout(reapTimer);
-            signal?.removeEventListener("abort", fail);
+            signal?.removeEventListener("abort", onAbort);
           };
           const finish = (ok) => {
             if (settled)
@@ -103370,10 +103633,22 @@ var init_driver = __esm({
             cleanup();
             if (ok)
               resolve4({ text, sessionId, ...usage ? { usage } : {} });
-            else
-              reject(new Error("Codex turn failed"));
+            else {
+              let code = classifyCodexFailure(eventText);
+              if (code === "model_error")
+                code = classifyCodexFailure(itemText);
+              if (code === "model_error" && !threadStarted)
+                code = classifyCodexFailure(errPrefix);
+              const resumeRefused = endedBy === "exit" && !threadStarted && typeof exitCode === "number" && /thread\/resume failed: no rollout found/.test(errPrefix);
+              const error2 = new TurnFailure(code, typeof exitCode === "number" ? { exitCode } : {});
+              Object.defineProperty(error2, "resumeRefused", { value: resumeRefused, enumerable: false });
+              reject(error2);
+            }
+            eventText = itemText = errPrefix = "";
           };
-          const fail = () => {
+          const fail = (why) => {
+            if (!failed && why)
+              endedBy = why;
             failed = true;
             text = "";
             if (killTimer || closed)
@@ -103385,10 +103660,11 @@ var init_driver = __esm({
               finish(false);
             }, killGraceMs + 5e3);
           };
-          const timeout = setTimeout(fail, timeoutMs);
-          signal?.addEventListener("abort", fail, { once: true });
+          const onAbort = () => fail("abort");
+          const timeout = setTimeout(() => fail("timeout"), timeoutMs);
+          signal?.addEventListener("abort", onAbort, { once: true });
           if (signal?.aborted)
-            fail();
+            onAbort();
           const line = (raw) => {
             if (failed)
               return;
@@ -103401,6 +103677,7 @@ var init_driver = __esm({
                   if (sessionId || typeof e.thread_id !== "string" || !UUID2.test(e.thread_id) || expectedId && e.thread_id !== expectedId)
                     throw new Error();
                   sessionId = e.thread_id;
+                  threadStarted = true;
                   break;
                 case "turn.started":
                   if (!sessionId || started)
@@ -103409,8 +103686,12 @@ var init_driver = __esm({
                   break;
                 case "item.completed":
                   if (e.item?.type === "error") {
-                    if (e.item.message !== CODE_MODE_WARNING)
+                    const message = e.item.message;
+                    const warning = message === CODE_MODE_WARNING || typeof message === "string" && MODEL_METADATA_WARNING.test(message);
+                    if (!warning) {
+                      itemText = typeof message === "string" ? message : "";
                       throw new Error();
+                    }
                   } else if (e.item?.type === "agent_message") {
                     if (!started || typeof e.item.text !== "string")
                       throw new Error();
@@ -103424,7 +103705,10 @@ var init_driver = __esm({
                   usage = parseTurnUsage(e.usage);
                   break;
                 case "error":
+                  eventText = typeof e.message === "string" ? e.message : "";
+                  throw new Error();
                 case "turn.failed":
+                  eventText = typeof e.error?.message === "string" ? e.error.message : "";
                   throw new Error();
                 case "item.started":
                 case "item.updated":
@@ -103439,7 +103723,7 @@ var init_driver = __esm({
           child.stdout.on("data", (chunk) => {
             bytes += chunk.length;
             if (bytes > maxOutputBytes) {
-              fail();
+              fail("overflow");
               return;
             }
             if (failed)
@@ -103452,17 +103736,23 @@ var init_driver = __esm({
               line(raw);
             }
             if (Buffer.byteLength(buffered) > maxLineBytes)
-              fail();
+              fail("overflow");
           });
           child.stderr.on("data", (chunk) => {
             bytes += chunk.length;
+            if (errPrefixBytes < STDERR_PREFIX_BYTES) {
+              const part = chunk.subarray(0, STDERR_PREFIX_BYTES - errPrefixBytes);
+              errPrefixBytes += part.length;
+              errPrefix += part.toString("utf8");
+            }
             if (bytes > maxOutputBytes)
-              fail();
+              fail("overflow");
           });
-          child.stdin.on("error", fail);
-          child.on("error", fail);
+          child.stdin.on("error", () => fail());
+          child.on("error", () => fail());
           child.on("close", (code) => {
             closed = true;
+            exitCode = code;
             killGroup("SIGKILL");
             const deadline = Date.now() + 5e3;
             const reaped = () => {
@@ -103494,7 +103784,7 @@ var init_driver = __esm({
 });
 
 // src/cli.ts
-import { access as access2, readFile as readFile7, mkdir as mkdir6, unlink as unlink2, open as open6, stat as stat2 } from "node:fs/promises";
+import { access as access2, readFile as readFile7, mkdir as mkdir6, unlink as unlink3, open as open6, stat as stat2 } from "node:fs/promises";
 import { join as join10, isAbsolute as isAbsolute2 } from "node:path";
 import { createHash as createHash3 } from "node:crypto";
 function agentSlug(name) {
@@ -103717,7 +104007,7 @@ Pending invite: ${await exists(join10(root3, "pending-invite")) ? "present" : "m
       await invoke("/bin/launchctl", ["bootout", `gui/${deps.uid}/${spec.label}`]);
     else
       await invoke("/usr/bin/systemctl", ["--user", "disable", "--now", `${spec.label}.service`]);
-    await unlink2(spec.path).catch((error2) => {
+    await unlink3(spec.path).catch((error2) => {
       if (error2.code !== "ENOENT")
         throw error2;
     });
@@ -103733,8 +104023,8 @@ var init_cli = __esm({
   async "src/cli.ts"() {
     "use strict";
     await init_dist();
-    init_driver();
-    VERSION2 = "0.1.12";
+    await init_driver();
+    VERSION2 = "0.1.14";
     HELP = `AgentVault OpenAI Bridge ${VERSION2}
 Usage: AV_AGENT_NAME=<name> agentvault-openai-bridge <command>
 
@@ -103773,7 +104063,7 @@ var init_bridge = __esm({
           this.waiting = [];
           for (const item of waiting)
             if (item.generation === this.generation && item.deviceId === this.channel.deviceId)
-              this.enqueue(item.kind, item.id, item.text);
+              this.enqueue(item.kind, item.id, item.text, item.groupId);
         });
         this.listen("state", (state) => {
           if (state === "connecting") {
@@ -103784,10 +104074,8 @@ var init_bridge = __esm({
             this.invalidate();
         });
         this.listen("error", () => {
-          this.generation++;
-          this.active?.abort();
         });
-        this.listen("revoked", () => this.invalidate());
+        this.listen("revoked", () => this.invalidate("revoked"));
         this.listen("room_hushed", (e) => {
           if (typeof e?.roomId !== "string")
             return;
@@ -103799,9 +104087,13 @@ var init_bridge = __esm({
           }
         });
         this.listen("message", (text, metadata) => {
-          if (metadata?.ownerDm1to1 !== true || metadata.roomId || typeof metadata.conversationId !== "string")
+          if (metadata?.ownerDm1to1 !== true || metadata.roomId)
             return;
-          this.enqueue("dm", metadata.conversationId, text);
+          if (typeof metadata.conversationId !== "string") {
+            this.report("dm_dropped reason=unmapped_conversation");
+            return;
+          }
+          this.enqueue("dm", metadata.conversationId, text, typeof metadata.conversationGroupId === "string" ? metadata.conversationGroupId : void 0);
         });
         this.listen("room_message", (e) => {
           if (typeof e?.roomId !== "string" || typeof e.plaintext !== "string" || this.hushed(e.roomId))
@@ -103824,6 +104116,8 @@ var init_bridge = __esm({
       ready = false;
       accepting = true;
       waiting = [];
+      /** The reason each generation ended, keyed by the generation it ended (#1560). */
+      cancelReasons = /* @__PURE__ */ new Map();
       stopped = false;
       active;
       hush = /* @__PURE__ */ new Map();
@@ -103835,14 +104129,40 @@ var init_bridge = __esm({
       hushed(id) {
         return (this.hush.get(id) ?? 0) > Date.now();
       }
-      invalidate() {
+      /** Ends the current generation. Its reason is recorded BEFORE the bump, under
+       *  the generation it ends, so a later invalidate (stop after revoked) cannot
+       *  overwrite why the turns of that generation were cut. */
+      invalidate(reason = "channel_state") {
         this.ready = false;
         this.accepting = false;
         this.waiting = [];
+        this.cancelReasons.set(this.generation, reason);
+        for (const key of this.cancelReasons.keys())
+          if (key < this.generation - 32)
+            this.cancelReasons.delete(key);
         this.generation++;
         this.active?.abort();
       }
-      enqueue(kind, id, text) {
+      cancelReason(entryGeneration, target, kind, id) {
+        if (entryGeneration !== this.generation)
+          return this.cancelReasons.get(entryGeneration) ?? "unknown";
+        if (target.deviceId !== this.channel.deviceId)
+          return "device_changed";
+        if (kind === "room" && this.hushed(id))
+          return "hushed";
+        return "unknown";
+      }
+      /** Recent entries as `sender: text`, without the bridge's own failure notices. */
+      context(entries, current) {
+        const kept = (entries ?? []).filter((entry) => !(entry.sender === "agent" && isOwnerNotice(entry.text)));
+        const last = kept[kept.length - 1];
+        if (current !== void 0 && last && last.sender === "owner" && (last.text === current || last.text.length > 0 && current.endsWith(`
+
+${last.text}`)))
+          kept.pop();
+        return kept.map((entry) => `${entry.sender}: ${entry.text}`).join("\n").slice(-8192);
+      }
+      enqueue(kind, id, text, groupId) {
         if (!this.accepting || this.stopped || !id || !this.channel.deviceId || typeof text !== "string" || !text.trim() || Buffer.byteLength(text) > 96 * 1024)
           return;
         if (this.pending + this.waiting.length >= this.maxQueue) {
@@ -103850,35 +104170,62 @@ var init_bridge = __esm({
           return;
         }
         if (!this.ready) {
-          this.waiting.push({ kind, id, text, deviceId: this.channel.deviceId, generation: this.generation });
+          this.waiting.push({ kind, id, text, groupId, deviceId: this.channel.deviceId, generation: this.generation });
           return;
         }
-        const history = kind === "room" ? (this.channel.getRoomHistory?.(id, 20) ?? []).map((entry) => `${entry.sender}: ${entry.text}`).join("\n").slice(-8192) : "";
+        const history = kind === "room" ? this.context(this.channel.getRoomHistory?.(id, 20)) : "";
+        const seed = kind === "dm" ? this.context(this.channel.getConversationHistory?.(id, 20, { groupId }), text) : "";
+        const freshContext = seed ? `Recent messages from this chat:
+${seed}` : void 0;
         const target = { kind, id, deviceId: this.channel.deviceId };
         const generation = this.generation;
         const valid = () => this.ready && !this.stopped && generation === this.generation && target.deviceId === this.channel.deviceId && !(kind === "room" && this.hushed(id));
+        const cancelled = () => this.report(`turn_cancelled reason=${this.cancelReason(generation, target, kind, id)}`);
         this.pending++;
         this.tail = this.tail.then(async () => {
-          if (!valid())
+          if (!valid()) {
+            cancelled();
             return;
+          }
           const controller = new AbortController();
           this.active = controller;
           try {
             const startedAt = Date.now();
-            const reply = await this.driver.run(JSON.stringify([target.deviceId, kind, id]), `You are ${this.name}, an AgentVault conversational agent. Reply in plain text to this ${kind === "dm" ? "owner direct message" : "addressed room message"}. Filesystem, shell, web and integration tools are unavailable.
+            let reply;
+            try {
+              reply = await this.driver.run(JSON.stringify([target.deviceId, kind, id]), `You are ${this.name}, an AgentVault conversational agent. Reply in plain text to this ${kind === "dm" ? "owner direct message" : "addressed room message"}. Filesystem, shell, web and integration tools are unavailable.
 ${history ? `Recent messages from this room (conversation context):
 ${history}
 ` : ""}
 Current message:
-${text}`, controller.signal);
+${text}`, controller.signal, { freshContext });
+            } catch (err) {
+              if (controller.signal.aborted || !valid()) {
+                cancelled();
+                return;
+              }
+              await this.turnFailed(target, err, Date.now() - startedAt, controller.signal);
+              return;
+            }
             this.reportUsage(reply, Date.now() - startedAt);
-            if (!valid() || controller.signal.aborted)
+            if (!valid() || controller.signal.aborted) {
+              cancelled();
+              return;
+            }
+            let cause;
+            try {
+              await this.deliver(target, reply.text, controller.signal, (e) => {
+                cause = e;
+              });
+            } catch (err) {
+              if (controller.signal.aborted || !valid())
+                cancelled();
+              else
+                this.report(`reply_failed code=${classifyToolError(cause ?? err)}`);
               return;
-            await this.deliver(target, reply.text, controller.signal);
+            }
             if (valid() && !controller.signal.aborted)
               this.report("delivered");
-          } catch {
-            this.report("turn_or_delivery_failed");
           } finally {
             this.active = void 0;
           }
@@ -103886,6 +104233,32 @@ ${text}`, controller.signal);
           this.pending--;
         });
       }
+      /** #1560: a turn that failed (not one cancelled on purpose). RECORD FIRST —
+       *  the span and the log line — then post the notice, so a notice that stalls
+       *  or fails cannot lose the record. Only codes and the exit status are
+       *  logged, never the error's text. In a room the notice is the bare sentence:
+       *  the coded ones describe the owner's own provider account. */
+      async turnFailed(target, err, durationMs, signal) {
+        const code = err instanceof TurnFailure ? err.code : "model_error";
+        const exitCode = err?.exitCode;
+        const exit = typeof exitCode === "number" ? exitCode : "none";
+        const sink = this.channel.telemetry;
+        reportModelTurnFailure(sink && typeof sink.reportCustomSpan === "function" ? sink : null, {
+          code,
+          conversation: { kind: target.kind === "dm" ? "direct" : "room", id: target.id },
+          durationMs
+        });
+        this.report(`turn_failed code=${code} exit=${exit}`);
+        const notice = ownerNoticeFor(target.kind === "room" ? "model_error" : code, { agentName: this.channel.ownDisplayName?.trim() || this.name, provider: "OpenAI" });
+        let cause;
+        try {
+          await this.deliverOnce(target, notice, signal, (e) => {
+            cause = e;
+          });
+        } catch (noticeErr) {
+          this.report(`notice_failed code=${classifyToolError(cause ?? noticeErr)}`);
+        }
+      }
       /** Health (2026-10-14): tokens for the model call. No cost — the bridge runs
        *  on a ChatGPT login, so there is no per-token price to report honestly. */
       reportUsage(reply, latencyMs) {
@@ -103921,12 +104294,14 @@ ${text}`, controller.signal);
         } catch {
         }
       }
-      async deliver(target, text, signal) {
+      async deliver(target, text, signal, onSendError = () => {
+      }) {
         const startedAt = Date.now();
         let cause;
         try {
           await this.deliverOnce(target, text, signal, (e) => {
             cause = e;
+            onSendError(e);
           });
         } catch (err) {
           this.reportReply(target, startedAt, { err: cause ?? err });
@@ -103950,7 +104325,7 @@ ${text}`, controller.signal);
           const timer = setTimeout(() => {
             finish(new Error("Delivery timed out"));
             this.stopped = true;
-            this.invalidate();
+            this.invalidate("delivery_timeout");
             this.report("delivery_timeout");
           }, this.deliveryTimeoutMs);
           signal.addEventListener("abort", abort, { once: true });
@@ -103967,7 +104342,7 @@ ${text}`, controller.signal);
       }
       async stop() {
         this.stopped = true;
-        this.invalidate();
+        this.invalidate("stop");
         for (const [event, fn] of this.listeners)
           this.channel.off(event, fn);
         this.listeners = [];
@@ -103978,7 +104353,7 @@ ${text}`, controller.signal);
 });
 
 // src/lock.ts
-import { mkdir as mkdir7, open as open7, readFile as readFile8, rmdir, unlink as unlink3 } from "node:fs/promises";
+import { mkdir as mkdir7, open as open7, readFile as readFile8, rmdir, unlink as unlink4 } from "node:fs/promises";
 import { join as join11 } from "node:path";
 import { randomUUID as randomUUID6 } from "node:crypto";
 async function acquireLock(root3) {
@@ -104008,7 +104383,7 @@ async function acquireLock(root3) {
         if (error2.code !== "ESRCH")
           throw error2;
       }
-      await unlink3(path2);
+      await unlink4(path2);
     }
     const file = await open7(path2, "wx", 384);
     try {
@@ -104022,7 +104397,7 @@ async function acquireLock(root3) {
   return async () => {
     const current = JSON.parse(await readFile8(path2, "utf8"));
     if (current.token === token)
-      await unlink3(path2);
+      await unlink4(path2);
   };
 }
 var init_lock = __esm({
@@ -104034,11 +104409,15 @@ var init_lock = __esm({
 // src/runtime.ts
 var runtime_exports = {};
 __export(runtime_exports, {
+  codexDriverOptions: () => codexDriverOptions,
   startBridge: () => startBridge
 });
-import { unlink as unlink4, access as access3, mkdir as mkdir8, rename as rename6, chmod as chmod4, readFile as readFile9 } from "node:fs/promises";
+import { unlink as unlink5, access as access3, mkdir as mkdir8, rename as rename6, chmod as chmod4, readFile as readFile9 } from "node:fs/promises";
 import { join as join12 } from "node:path";
 import { randomUUID as randomUUID7 } from "node:crypto";
+function codexDriverOptions(config2, report) {
+  return { binary: config2.binary, layout: config2.layout, onRecovered: (code) => report(`turn_recovered code=${code}`) };
+}
 async function startBridge(config2, injected) {
   const unlock = await acquireLock(config2.layout.root);
   const report = injected?.report ?? ((event) => {
@@ -104108,7 +104487,7 @@ async function startBridge(config2, injected) {
     const consumesInvite = !!config2.inviteToken && (config2.forceReEnroll || existing.length === 0);
     const options = { inviteToken: config2.inviteToken, dataDir: config2.layout.root, apiUrl: config2.apiUrl, agentName: config2.name, expectedFramework: "openai", forceReEnroll: config2.forceReEnroll ?? false, platform: "node", clientVersion: `@agentvault/openai-bridge@${VERSION2}` };
     channel = injected ? injected.createChannel(options) : new (await init_dist().then(() => dist_exports)).SecureChannel(options);
-    bridge = new OpenAIBridge(channel, injected?.driver ?? new CodexDriver({ binary: config2.binary, layout: config2.layout }), config2.name, (event) => {
+    bridge = new OpenAIBridge(channel, injected?.driver ?? new CodexDriver(codexDriverOptions(config2, report)), config2.name, (event) => {
       report(event);
       if (event === "delivery_timeout") {
         deliveryFailed = true;
@@ -104122,7 +104501,7 @@ async function startBridge(config2, injected) {
         void (async () => {
           const path2 = join12(config2.layout.root, "pending-invite");
           if ((await readFile9(path2, "utf8")).trim() === config2.inviteToken)
-            await unlink4(path2);
+            await unlink5(path2);
         })().catch(() => {
         });
       report("channel_ready");
@@ -104166,7 +104545,7 @@ async function startBridge(config2, injected) {
 var init_runtime = __esm({
   async "src/runtime.ts"() {
     "use strict";
-    init_driver();
+    await init_driver();
     await init_bridge();
     await init_cli();
     init_lock();
@@ -104175,9 +104554,9 @@ var init_runtime = __esm({
 
 // src/index.ts
 await init_cli();
-init_driver();
+await init_driver();
 await init_cli();
-init_driver();
+await init_driver();
 await init_bridge();
 import { spawn as spawn2 } from "node:child_process";
 import { realpathSync } from "node:fs";