@agentvault/openai-bridge 0.1.5 → 0.1.7

package/dist/index.js

@@ -94,6 +94,7 @@ import { readdir as readdir2, readFile as readFile4, writeFile as writeFile2, re
 import { join as join5 } from "node:path";
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { EventEmitter } from "node:events";
+import { AsyncLocalStorage } from "node:async_hooks";
 import { createServer } from "node:http";
 import { randomUUID as randomUUID4, createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
@@ -103,7 +104,7 @@ import { join as join6 } from "node:path";
 import { readFile as readFile5 } from "node:fs/promises";
 import WebSocket from "ws";
 import { resolve as resolve2 } from "node:path";
-import { AsyncLocalStorage } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 import { Http2ServerRequest as Http2ServerRequest2 } from "http2";
 import { Http2ServerRequest } from "http2";
 import { Readable as Readable2 } from "stream";
@@ -11787,11 +11788,11 @@ async function joinWithFirstMatchingKp(welcomeBytes, candidates) {
   return null;
 }
 function ownIdentity() {
-  const v2 = true ? "0.23.50" : FALLBACK;
+  const v2 = true ? "0.23.52" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildSha() {
-  const raw = true ? "c8f1371" : "";
+  const raw = true ? "d7143c3" : "";
   const cleaned = (raw ?? "").trim();
   return !cleaned || cleaned === "unknown" ? null : cleaned;
 }
@@ -12595,11 +12596,38 @@ function _resetCompatCacheForTest() {
   _agentEventFn = null;
   _transcriptFn = null;
 }
+function ownerRoutingFrom(parsed) {
+  const out = {};
+  if (parsed.conversation_id !== void 0) {
+    if (typeof parsed.conversation_id !== "string" || !parsed.conversation_id) return "'conversation_id' must be a string";
+    out.conversationId = parsed.conversation_id;
+  }
+  if (parsed.audience !== void 0) {
+    if (parsed.audience !== "person" && parsed.audience !== "everyone") {
+      return `'audience' must be "person" or "everyone"`;
+    }
+    out.audience = parsed.audience;
+  }
+  return out;
+}
+function ambiguousOwnerRequest(channel, routing) {
+  const check = channel.isUntargetedOwnerAmbiguous;
+  if (typeof check !== "function" || !check.call(channel, routing)) return null;
+  return { status: 409, body: { ok: false, error: AMBIGUOUS_OWNER_ERROR } };
+}
+function statusOf(receipt) {
+  if (receipt.ambiguous) return 409;
+  return receipt.ok ? 200 : 500;
+}
 async function handleSendRequest(parsed, channel) {
   const text = parsed.text;
   if (!text || typeof text !== "string") {
     return { status: 400, body: { ok: false, error: "Missing 'text' field" } };
   }
+  const routing = ownerRoutingFrom(parsed);
+  if (typeof routing === "string") {
+    return { status: 400, body: { ok: false, error: routing } };
+  }
   try {
     let target;
     let a2aTarget = parsed.hub_address ?? parsed.a2a_address ?? parsed.a2aAddress;
@@ -12617,10 +12645,10 @@ async function handleSendRequest(parsed, channel) {
       const receipt2 = await channel.deliver(
         { kind: "owner" },
         { type: "attachment", text, filePath: parsed.file_path },
-        { topicId: parsed.topicId }
+        { topicId: parsed.topicId, ...routing, refuseIfAmbiguous: true }
       );
       return {
-        status: receipt2.ok ? 200 : 500,
+        status: statusOf(receipt2),
         body: {
           ok: receipt2.ok,
           destination: receipt2.destination,
@@ -12634,6 +12662,8 @@ async function handleSendRequest(parsed, channel) {
       target,
       { type: "text", text },
       {
+        ...routing,
+        refuseIfAmbiguous: true,
         topicId: parsed.topicId,
         priority: parsed.priority,
         metadata: {
@@ -12643,7 +12673,7 @@ async function handleSendRequest(parsed, channel) {
       }
     );
     return {
-      status: receipt.ok ? 200 : 500,
+      status: statusOf(receipt),
       body: {
         ok: receipt.ok,
         destination: receipt.destination,
@@ -12658,6 +12688,10 @@ async function handleActionRequest(parsed, channel) {
   if (!parsed.action || typeof parsed.action !== "string") {
     return { status: 400, body: { ok: false, error: "Missing 'action' field" } };
   }
+  const routing = ownerRoutingFrom(parsed);
+  if (typeof routing === "string") {
+    return { status: 400, body: { ok: false, error: routing } };
+  }
   try {
     const confirmation = {
       action: parsed.action,
@@ -12667,12 +12701,10 @@ async function handleActionRequest(parsed, channel) {
       estimated_cost: parsed.estimated_cost
     };
     const target = parsed.room_id && typeof parsed.room_id === "string" ? { kind: "room", roomId: parsed.room_id } : { kind: "owner" };
-    const receipt = await channel.deliver(
-      target,
-      { type: "action_confirmation", confirmation }
-    );
+    const content = { type: "action_confirmation", confirmation };
+    const receipt = await channel.deliver(target, content, { ...routing, refuseIfAmbiguous: true });
     return {
-      status: receipt.ok ? 200 : 500,
+      status: statusOf(receipt),
       body: {
         ok: receipt.ok,
         destination: receipt.destination,
@@ -12697,6 +12729,12 @@ async function handleDecisionRequest(parsed, channel) {
       return { status: 400, body: { ok: false, error: "Each option must have 'option_id' and 'label'" } };
     }
   }
+  const routing = ownerRoutingFrom(parsed);
+  if (typeof routing === "string") {
+    return { status: 400, body: { ok: false, error: routing } };
+  }
+  const ambiguous = ambiguousOwnerRequest(channel, routing);
+  if (ambiguous) return ambiguous;
   try {
     const decision_id = await channel.sendDecisionRequest({
       title,
@@ -12705,7 +12743,7 @@ async function handleDecisionRequest(parsed, channel) {
       context_refs: parsed.context_refs,
       deadline: parsed.deadline,
       auto_action: parsed.auto_action
-    });
+    }, routing);
     return { status: 200, body: { ok: true, decision_id } };
   } catch (err) {
     return { status: 500, body: { ok: false, error: String(err) } };
@@ -12992,14 +13030,27 @@ function migrateHistoryEntries(history) {
     return { id, ...legacyEntry };
   });
 }
+function isTopicId(value) {
+  return typeof value === "string" && TOPIC_ID_RE.test(value);
+}
+function migrateDefaultTopics(state) {
+  if (!state.defaultTopicId || !state.groupId) return state;
+  if (state.defaultTopicIds?.[state.groupId]) return state;
+  return {
+    ...state,
+    defaultTopicIds: { ...state.defaultTopicIds ?? {}, [state.groupId]: state.defaultTopicId }
+  };
+}
 function migratePersistedState(raw) {
   if (raw.sessions && raw.primaryConversationId) {
     const history = raw.messageHistory;
-    if (!history?.some((entry) => typeof entry.id !== "string")) return raw;
-    return {
+    if (!history?.some((entry) => typeof entry.id !== "string")) {
+      return migrateDefaultTopics(raw);
+    }
+    return migrateDefaultTopics({
       ...raw,
       messageHistory: migrateHistoryEntries(history)
-    };
+    });
   }
   const legacy = raw;
   return {
@@ -13227,7 +13278,7 @@ async function _handleInbound(params) {
       core.error?.(`[AgentVault] session record failed: ${String(err)}`);
     }
   });
-  await core.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
+  await channel.runForConversation(metadata.conversationId, () => core.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
     ctx: ctxPayload,
     cfg,
     dispatcherOptions: {
@@ -13244,7 +13295,7 @@ async function _handleInbound(params) {
       }
     },
     replyOptions: {}
-  });
+  }), { groupId: metadata.conversationGroupId });
 }
 function resolveBaseUrl(options) {
   const host = options?.host ?? "127.0.0.1";
@@ -18320,7 +18371,7 @@ function reportSkillInvocation(opts) {
   spanBuffer.push(span);
   return span;
 }
-var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports2, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, AGENT_EVENT_CANDIDATES, TRANSCRIPT_CANDIDATES, _heartbeatFn, _agentEventFn, _transcriptFn, init_openclaw_compat, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
+var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, AMBIGUOUS_OWNER_ERROR, init_owner_routing, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports2, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, AGENT_EVENT_CANDIDATES, TRANSCRIPT_CANDIDATES, _heartbeatFn, _agentEventFn, _transcriptFn, init_openclaw_compat, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, _turnConversation, PERSON_INVOLVED_WINDOW_MS, ATTESTED_INBOUND_MAX, UNMAPPED_RECONCILE_COOLDOWN_MS, TOPIC_ID_RE, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
 var init_dist = __esm({
   async "../plugin/dist/index.js"() {
     "use strict";
@@ -18373,6 +18424,12 @@ var init_dist = __esm({
         INSTRUCTION = "not every message needs an answer from you: if this one is not addressed to you and asks nothing of you, reply with exactly " + SENTINEL + " and nothing else \u2014 that is discarded, not posted, and is how you stay quiet; never post a message SAYING that you are staying quiet";
       }
     });
+    init_owner_routing = __esm2({
+      "src/owner-routing.ts"() {
+        "use strict";
+        AMBIGUOUS_OWNER_ERROR = `More than one person is talking to this agent right now, so it can't tell who this is for. Add 'conversation_id' to say which conversation, or send audience "everyone" to reach them all.`;
+      }
+    });
     init_envelope_text = __esm2({
       "src/envelope-text.ts"() {
         "use strict";
@@ -71204,6 +71261,7 @@ var init_dist = __esm({
     init_http_handlers = __esm2({
       "src/http-handlers.ts"() {
         "use strict";
+        init_owner_routing();
       }
     });
     mcp_proxy_helpers_exports = {};
@@ -71233,6 +71291,7 @@ var init_dist = __esm({
       async "src/channel.ts"() {
         "use strict";
         init_abstention();
+        init_owner_routing();
         init_envelope_text();
         init_mls_commit_classify();
         init_room_protocol();
@@ -71282,6 +71341,11 @@ var init_dist = __esm({
         OUTBOUND_DEDUPE_TYPES = /* @__PURE__ */ new Set(["text", "status_alert", "artifact", "attachment"]);
         RETRY_CANDIDATE_TTL_MS = 6e4;
         RETRY_CANDIDATE_MAX = 32;
+        _turnConversation = new AsyncLocalStorage();
+        PERSON_INVOLVED_WINDOW_MS = 5 * 6e4;
+        ATTESTED_INBOUND_MAX = 64;
+        UNMAPPED_RECONCILE_COOLDOWN_MS = 6e4;
+        TOPIC_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
         ROOM_FULFIL_COOLDOWN_MS = 6e4;
         SecureChannel = class _SecureChannel extends EventEmitter {
           constructor(config2) {
@@ -71508,10 +71572,42 @@ ${text}`;
           _scanEngine = null;
           _scanRuleSetVersion = 0;
           _telemetryReporter = null;
-          /** Topic ID from the most recent inbound message — used as fallback for replies. */
-          _lastIncomingTopicId;
+          /**
+           * #1416: topic of the most recent inbound message, PER conversation group —
+           * the fallback for a reply that names no topic. Keyed by `_topicScope()`:
+           * `g:<group>` normally, `c:<conversation>` for a conversation whose group is
+           * not known yet, `*` for a legacy agent that knows no groups at all. It used
+           * to be one value for the whole agent, so a broadcast into person B's group
+           * carried the topic of person A's last message. In memory only, as before.
+           */
+          _lastIncomingTopics = /* @__PURE__ */ new Map();
           /** Room ID from the most recent inbound room message — used as fallback for HTTP /send replies. */
           _lastInboundRoomId;
+          /**
+           * #1418: the most recent owner 1:1 message that reached the agent — the
+           * person involved in whatever the agent says next without naming a
+           * conversation (see `_involvedPerson`). In memory only: after a restart
+           * there is no trigger, so untargeted content goes to the primary person.
+           */
+          _lastInboundDm;
+          /** #1418: turns in progress (`runForConversation`). */
+          _activeTurns = /* @__PURE__ */ new Set();
+          /**
+           * #1418: recent owner 1:1 messages that decrypted, keyed by
+           * conversation|group — evidence of which conversation, group and browser
+           * belong together (one person). In memory only, bounded.
+           */
+          _attestedInbound = /* @__PURE__ */ new Map();
+          /** #1418: per UNMAPPED group (or conversation), the last time it asked for a reconcile. */
+          _unmappedReconcileAt = /* @__PURE__ */ new Map();
+          /**
+           * #1418: 1:1 groups joined by a Welcome IN THIS PROCESS while no
+           * conversation mapped them — a person who has not been learned yet, counted
+           * as one until the next successful reconcile. Persisted husks never are.
+           */
+          _welcomedUnmapped = /* @__PURE__ */ new Map();
+          /** #1418: what the last SUCCESSFUL reconcile reported live, and when it started. */
+          _lastReconcile;
           /** Rate-limit: last resync_request timestamp per conversation (5-min cooldown). */
           _lastResyncRequest = /* @__PURE__ */ new Map();
           /** Dedup: last room/group welcome self-heal request timestamp per group (30s window). */
@@ -72087,13 +72183,449 @@ ${text}`;
             }
             return `${kind}:${id ?? ""}`;
           }
+          /*
+           * #1416 — DM history is partitioned by conversation GROUP.
+           *
+           * Since #1399 every person has their own 1:1 group with the agent, but the
+           * agent kept one DM history pool: a catch-up request or a session_init
+           * replay from person B's group was answered with person A's plaintext too.
+           * A DM entry's context now names its group:
+           *
+           *   dm:g:<groupId>:<topicId>   — the group is known
+           *   dm:c:<convId>:<topicId>    — the conversation's group is not known yet
+           *   dm:<topicId>               — legacy (pre-#1416): the PRIMARY group's
+           *
+           * Every form keeps the `dm:` prefix the archive, the web client and Hermes
+           * test for, and the archive format (`topicId` is a free string) is unchanged.
+           * An agent that knows at most one group selects exactly what it did before.
+           */
+          /** The DM history context for a message in `gid` (or `convId`'s group). */
+          _dmHistoryContext(topicId, gid, convId) {
+            const g2 = gid ?? (convId ? this._sessionGroupIds.get(convId) : void 0);
+            if (g2) return `dm:g:${g2}:${topicId ?? ""}`;
+            if (convId && this._knownDmGroups().size > 0) return `dm:c:${convId}:${topicId ?? ""}`;
+            const legacyTopic = topicId && /^[gc]:/.test(topicId) ? "" : topicId;
+            return this._historyContext("dm", legacyTopic);
+          }
+          /** Every conversation group this agent knows of. */
+          _knownDmGroups() {
+            const known = new Set(this._sessionGroupIds.values());
+            if (this._persisted?.groupId) known.add(this._persisted.groupId);
+            return known;
+          }
+          // --- #1418: only the person involved ----------------------------------
+          /**
+           * Run `fn` as the work an inbound 1:1 message from `conversationId`
+           * triggered. Untargeted owner content sent while it runs — from inside its
+           * async call chain, or from anywhere while it is the only turn in progress —
+           * goes to that conversation's person only.
+           *
+           * `opts.groupId` is the group that message DECRYPTED under
+           * (`metadata.conversationGroupId`). Pass it: it outranks the local
+           * conversation→group map, which can be stale, and it is all there is for a
+           * frame whose conversation is not mapped yet. With neither an id nor a
+           * group, `fn` runs unchanged.
+           */
+          async runForConversation(conversationId, fn, opts) {
+            const groupId = typeof opts?.groupId === "string" && opts.groupId ? opts.groupId : void 0;
+            if (!conversationId && !groupId) return fn();
+            const store = { convId: conversationId || void 0, groupId, ended: false };
+            this._activeTurns.add(store);
+            try {
+              return await _turnConversation.run(store, fn);
+            } finally {
+              store.ended = true;
+              store.endedAt = Date.now();
+              this._activeTurns.delete(store);
+            }
+          }
+          /**
+           * The turn this call chain belongs to (#1418) — running, or ended but
+           * still within the window in which work it left behind is for its person.
+           * `"expired"` once that window is over: the work is proactive now.
+           */
+          _currentTurn() {
+            const store = _turnConversation.getStore();
+            if (!store) return void 0;
+            if (!store.ended) return store;
+            return Date.now() - (store.endedAt ?? 0) < PERSON_INVOLVED_WINDOW_MS ? store : "expired";
+          }
+          /**
+           * Record an owner 1:1 message that just decrypted (#1418).
+           *
+           * Always kept as evidence of which conversation, group and browser belong
+           * together (see `_dmPeople`). It makes its person "the person involved" only
+           * when it is RECENT by the server's `createdAt`: a frame replayed from
+           * backlog on reconnect is not something anyone is waiting on an answer to.
+           */
+          _noteInboundDm(convId, groupId, opts = {}) {
+            if (!convId && !groupId) return;
+            const now = Date.now();
+            const sentAt = opts.createdAt ? Date.parse(opts.createdAt) : NaN;
+            const at = Number.isFinite(sentAt) ? Math.min(now, sentAt) : now;
+            const sender = opts.senderDeviceId && opts.senderDeviceId !== this._deviceId ? opts.senderDeviceId : void 0;
+            const key = `${convId ?? ""}|${groupId ?? ""}|${sender ?? ""}`;
+            const prior = this._attestedInbound.get(key);
+            this._attestedInbound.delete(key);
+            this._attestedInbound.set(key, { convId, groupId, senderDeviceId: sender, at: Math.max(prior?.at ?? 0, at) });
+            while (this._attestedInbound.size > ATTESTED_INBOUND_MAX) {
+              const oldest = this._attestedInbound.keys().next().value;
+              if (oldest === void 0) break;
+              this._attestedInbound.delete(oldest);
+            }
+            if (this._lastInboundDm && this._lastInboundDm.at > at) return;
+            this._lastInboundDm = {
+              convId,
+              groupId: groupId ?? (convId ? this._sessionGroupIds.get(convId) : void 0),
+              at
+            };
+          }
+          /** The group `convId`'s most recent inbound decrypted under, if any. */
+          _attestedGroupOf(convId) {
+            if (!convId) return void 0;
+            let gid;
+            for (const a2 of this._attestedInbound.values()) {
+              if (a2.convId === convId && a2.groupId) gid = a2.groupId;
+            }
+            return gid;
+          }
+          /** Does some mapped conversation point at `groupId`? */
+          _isMappedGroup(groupId) {
+            for (const gid of this._sessionGroupIds.values()) if (gid === groupId) return true;
+            return false;
+          }
+          /**
+           * An owner message decrypted under a group no mapped conversation points at
+           * (#1418): the map is stale — a Welcome landed before its conversation was
+           * learned, or a conversation was recreated. Re-resolve it from the server.
+           * Fire-and-forget and rate-limited per group: never awaited on the receive
+           * or Welcome path, so it can never hold up MLS processing.
+           */
+          _reconcileForUnmappedGroup(groupId) {
+            if (!groupId || this._isMappedGroup(groupId)) return;
+            this._reconcileSoon(`g:${groupId}`);
+          }
+          /** The same for a Double Ratchet message on a conversation the map does not know. */
+          _reconcileForUnmappedConversation(convId) {
+            if (!convId || this._sessionGroupIds.size === 0 || this._sessionGroupIds.has(convId)) return;
+            this._reconcileSoon(`c:${convId}`);
+          }
+          _reconcileSoon(key) {
+            const now = Date.now();
+            if (now - (this._unmappedReconcileAt.get(key) ?? 0) < UNMAPPED_RECONCILE_COOLDOWN_MS) return;
+            this._unmappedReconcileAt.set(key, now);
+            void Promise.resolve().then(() => this._reconcileConversationGroups()).catch((err) => console.warn("[SecureChannel] Conversation-group reconcile (unmapped group) failed:", err));
+          }
+          /** A conversation of `groupId`, for an MLS frame that named only its group. */
+          _conversationOfGroup(groupId) {
+            if (!groupId) return void 0;
+            if (this._primaryConversationId && this._sessionGroupIds.get(this._primaryConversationId) === groupId) {
+              return this._primaryConversationId;
+            }
+            for (const [convId, gid] of this._sessionGroupIds) {
+              if (gid === groupId) return convId;
+            }
+            return void 0;
+          }
+          /** Is `convId` one of this agent's own 1:1 conversations (never a room's or an A2A channel's)? */
+          _isOwnDmConversation(convId) {
+            if (this._isNonDmConversation(convId)) return false;
+            return this._sessions.has(convId) || this._sessionGroupIds.has(convId) || !!this._persisted?.mlsConversations?.[convId] || convId === this._primaryConversationId;
+          }
+          /**
+           * #1418 — the PEOPLE this agent has a 1:1 with, or `undefined` when it
+           * cannot tell (no conversation is mapped: then it behaves as before #1418).
+           *
+           * People, not groups. Since #1399 one person has one group, but an agent
+           * also keeps joined groups that are nobody's any more — husks of deleted or
+           * recreated conversations. Measured 2026-10-24: wren held 13 joined groups
+           * for 1 mapped, loopita 2 for 1, wowzer 2 for 1. Counting joined groups made
+           * all three single-person agents look like several people, and their
+           * replies could go only to a dead group.
+           *
+           * So a person is built from the conversations the server mapped, joined by
+           * evidence that two things are the same person:
+           *  - the same group (a legacy group shared by several people cannot be told
+           *    apart, so it stays one — exactly the pre-#1418 behaviour);
+           *  - the same owner browser (a browser belongs to exactly one person);
+           *  - a message that decrypted under a group, from a conversation and browser.
+           * A joined group nothing maps and nobody has spoken in is not a person. A
+           * message on an unmapped group from a browser nobody knows IS someone —
+           * that fails closed, toward "only them".
+           */
+          _dmPeople() {
+            if (this._sessionGroupIds.size === 0) return void 0;
+            const parent2 = /* @__PURE__ */ new Map();
+            const add4 = (x2) => {
+              if (!parent2.has(x2)) parent2.set(x2, x2);
+            };
+            const find = (x2) => {
+              let root3 = x2;
+              while (parent2.get(root3) !== root3) root3 = parent2.get(root3);
+              return root3;
+            };
+            const union2 = (a2, b2) => {
+              if (!a2 || !b2) return;
+              add4(a2);
+              add4(b2);
+              const ra2 = find(a2), rb = find(b2);
+              if (ra2 !== rb) parent2.set(ra2, rb);
+            };
+            const ownerOf = (convId) => {
+              const owner = this._sessions.get(convId)?.ownerDeviceId ?? this._persisted?.sessions?.[convId]?.ownerDeviceId;
+              return owner ? `d:${owner}` : void 0;
+            };
+            for (const [convId, gid] of this._sessionGroupIds) {
+              add4(`c:${convId}`);
+              union2(`c:${convId}`, `g:${gid}`);
+              union2(`c:${convId}`, ownerOf(convId));
+            }
+            const primary = this._primaryConversationId || this._persisted?.primaryConversationId;
+            const primaryGid = this._persisted?.groupId;
+            if (primary && primaryGid && (parent2.has(`c:${primary}`) || parent2.has(`g:${primaryGid}`))) {
+              union2(`c:${primary}`, `g:${primaryGid}`);
+            }
+            for (const gid of this._welcomedUnmapped.keys()) add4(`g:${gid}`);
+            const records = [...this._attestedInbound.values()].map((a2) => ({
+              a: a2,
+              nodes: [
+                a2.convId ? `c:${a2.convId}` : void 0,
+                a2.groupId ? `g:${a2.groupId}` : void 0,
+                a2.senderDeviceId ? `d:${a2.senderDeviceId}` : void 0
+              ].filter((n2) => !!n2)
+            }));
+            const placed = /* @__PURE__ */ new Set();
+            const place = (i2) => {
+              const { a: a2, nodes } = records[i2];
+              for (const n2 of nodes) add4(n2);
+              for (const n2 of nodes.slice(1)) union2(nodes[0], n2);
+              if (a2.convId && this._sessionGroupIds.has(a2.convId)) union2(`c:${a2.convId}`, ownerOf(a2.convId));
+              placed.add(i2);
+            };
+            const linkKnown = () => {
+              for (let progress = true; progress; ) {
+                progress = false;
+                records.forEach((r2, i2) => {
+                  if (!placed.has(i2) && r2.nodes.some((n2) => parent2.has(n2))) {
+                    place(i2);
+                    progress = true;
+                  }
+                });
+              }
+            };
+            linkKnown();
+            records.forEach((r2, i2) => {
+              if (!placed.has(i2) && this._mayBeNewPerson(r2.a)) place(i2);
+            });
+            linkKnown();
+            const roots = /* @__PURE__ */ new Set();
+            for (const node2 of parent2.keys()) {
+              if (!node2.startsWith("d:")) roots.add(find(node2));
+            }
+            return {
+              count: roots.size,
+              keyOf: (convId, groupId) => {
+                if (convId && parent2.has(`c:${convId}`)) return find(`c:${convId}`);
+                if (groupId && parent2.has(`g:${groupId}`)) return find(`g:${groupId}`);
+                return void 0;
+              }
+            };
+          }
+          /**
+           * May this inbound evidence stand for a person nobody knows yet (#1418)?
+           * Only if it was sent recently, and the last successful reconcile — when it
+           * started after the message was sent — listed its conversation or group.
+           */
+          _mayBeNewPerson(a2) {
+            if (Date.now() - a2.at >= PERSON_INVOLVED_WINDOW_MS) return false;
+            const r2 = this._lastReconcile;
+            if (r2 && a2.at <= r2.at && !(a2.convId && r2.convs.has(a2.convId)) && !(a2.groupId && r2.groups.has(a2.groupId))) return false;
+            return true;
+          }
+          /** More than one person has a 1:1 with this agent (#1418). Unknown counts as one: the old behaviour. */
+          _isMultiPerson() {
+            return (this._dmPeople()?.count ?? 0) > 1;
+          }
+          /**
+           * The group a turn's message decrypted under, for placing the turn when its
+           * conversation is not mapped (a mapped conversation already names its person).
+           */
+          _turnGroup(turn) {
+            return turn.groupId ?? this._attestedGroupOf(turn.convId);
+          }
+          /** The people with a 1:1 turn in progress, one turn each (#1418). */
+          _activeTurnPeople() {
+            const people = this._dmPeople();
+            const out = /* @__PURE__ */ new Map();
+            for (const turn of this._activeTurns) {
+              if (turn.convId && (turn.groupId ? this._isNonDmConversation(turn.convId) : !this._isOwnDmConversation(turn.convId))) continue;
+              const gid = this._turnGroup(turn);
+              const key = people?.keyOf(turn.convId, gid) ?? (gid ? `g:${gid}` : `c:${turn.convId}`);
+              if (!out.has(key)) out.set(key, turn);
+            }
+            return out;
+          }
+          /**
+           * The person an untargeted owner message is for (#1418), in order:
+           *
+           *  1. the turn this call chain belongs to — always, and only, that
+           *     conversation, reached on the group its message decrypted under. A turn
+           *     never borrows another conversation's turn: one it cannot place fails
+           *     closed to its own conversation. Work the turn left running (a timer, a
+           *     dispatch orphaned by the turn budget) stays with that person for
+           *     `PERSON_INVOLVED_WINDOW_MS` after the turn, then is proactive (4);
+           *  2. with no turn context (a skill's HTTP call), the one person with a turn
+           *     in progress;
+           *  3. the last inbound 1:1 message, if it is recent — a reply produced in
+           *     response to it;
+           *  4. otherwise the content is proactive: the PRIMARY conversation's person.
+           */
+          _involvedPerson() {
+            const person = (convId, groupId, reason) => ({
+              convId,
+              groupId: groupId ?? this._attestedGroupOf(convId) ?? (convId ? this._sessionGroupIds.get(convId) : void 0),
+              reason
+            });
+            const turn = this._currentTurn();
+            if (turn && turn !== "expired") {
+              return person(turn.convId ?? this._conversationOfGroup(turn.groupId), turn.groupId, turn.ended ? "outlived-turn" : "turn");
+            }
+            if (turn === "expired") return this._primaryPerson();
+            const active = this._activeTurnPeople();
+            if (active.size === 1) {
+              const [only] = active.values();
+              return person(only.convId ?? this._conversationOfGroup(only.groupId), only.groupId, "active-turn");
+            }
+            const last = this._lastInboundDm;
+            if (active.size === 0 && last && Date.now() - last.at < PERSON_INVOLVED_WINDOW_MS) {
+              return person(last.convId ?? this._conversationOfGroup(last.groupId), last.groupId, "last-inbound");
+            }
+            return this._primaryPerson();
+          }
+          /** The PRIMARY conversation's person — where proactive content goes. */
+          _primaryPerson() {
+            const primary = this._primaryConversationId || this._persisted?.primaryConversationId || void 0;
+            const primaryGroup = (primary ? this._sessionGroupIds.get(primary) : void 0) ?? this._persisted?.groupId;
+            return {
+              convId: primary,
+              groupId: primaryGroup ?? this._attestedGroupOf(primary),
+              reason: "primary"
+            };
+          }
+          /**
+           * #1418 — would an untargeted owner send right now have to GUESS between
+           * people? True only with no turn context while two or more people have a
+           * turn in progress. The local HTTP API refuses such a request (409) and
+           * asks for a conversation instead of picking one.
+           */
+          isUntargetedOwnerAmbiguous(options) {
+            if (options?.conversationId !== void 0 || options?.audience === "everyone") return false;
+            if (this._currentTurn()) return false;
+            if (!this._isMultiPerson()) return false;
+            return this._activeTurnPeople().size > 1;
+          }
+          /**
+           * Who an UNTARGETED owner send reaches, or `null` for "every session, as
+           * before". `null` when the caller chose `audience: "everyone"`, and when the
+           * agent has one person (or cannot tell how many) — nothing to choose
+           * between, so its recipients are exactly what they always were.
+           */
+          _untargetedAudience(options) {
+            if (options?.conversationId !== void 0) return null;
+            if (options?.audience === "everyone") return null;
+            if (!this._isMultiPerson()) return null;
+            return this._involvedPerson();
+          }
+          /** A stable name for who an untargeted owner send reaches right now, or undefined when that is "everyone, as before". */
+          _audienceTag(options) {
+            if (options?.audience === "everyone") return "everyone";
+            const person = this._untargetedAudience(options);
+            return person ? `person:${person.groupId ?? person.convId ?? ""}` : void 0;
+          }
+          /** Does conversation `convId` belong to `person`? A conversation nothing ties to them fails closed. */
+          _isPersonsConversation(person, convId) {
+            if (convId === person.convId) return true;
+            const gid = this._sessionGroupIds.get(convId);
+            if (gid !== void 0 && gid === person.groupId) return true;
+            const people = this._dmPeople();
+            const theirs = people?.keyOf(person.convId, person.groupId);
+            return theirs !== void 0 && people.keyOf(convId, gid) === theirs;
+          }
+          /**
+           * #1418: the Double Ratchet sessions an owner-bound FILE (attachment or
+           * artifact) goes to, bucketed by the conversation its blob is uploaded
+           * under. The blob is uploaded under a conversation of the person who gets
+           * it — the backend only lets that conversation's participants download it —
+           * so an explicit "everyone" uploads once per person.
+           */
+          _ownerFileRecipients(routing) {
+            const roomConvIds = /* @__PURE__ */ new Set();
+            for (const room of Object.values(this._persisted?.rooms ?? {})) {
+              for (const cid of room.conversationIds ?? []) roomConvIds.add(cid);
+            }
+            const live = [...this._sessions].filter(([convId, session]) => session.activated && !roomConvIds.has(convId)).map(([convId]) => convId);
+            const person = routing?.conversationId !== void 0 ? { convId: routing.conversationId, groupId: this._sessionGroupIds.get(routing.conversationId), reason: "target" } : this._untargetedAudience(routing);
+            if (person) {
+              const convIds = live.filter((convId) => this._isPersonsConversation(person, convId));
+              const uploadConvId = person.convId ?? convIds[0];
+              return uploadConvId && convIds.length > 0 ? [{ uploadConvId, convIds }] : [];
+            }
+            if (live.length === 0) return [];
+            if (!this._isMultiPerson()) {
+              return [{ uploadConvId: this._primaryConversationId, convIds: live }];
+            }
+            const people = this._dmPeople();
+            const buckets = /* @__PURE__ */ new Map();
+            for (const convId of live) {
+              const gid = this._sessionGroupIds.get(convId);
+              const key = people?.keyOf(convId, gid) ?? gid ?? `c:${convId}`;
+              buckets.set(key, [...buckets.get(key) ?? [], convId]);
+            }
+            return [...buckets.values()].map((convIds) => ({
+              uploadConvId: convIds.includes(this._primaryConversationId) ? this._primaryConversationId : convIds[0],
+              convIds
+            }));
+          }
+          /** The group a DM history entry belongs to (see the forms above). */
+          _dmEntryScope(entry, known) {
+            const t2 = entry.topicId ?? "";
+            let scope;
+            if (t2.startsWith("dm:g:")) {
+              scope = t2.slice("dm:g:".length).split(":")[0];
+            } else if (t2.startsWith("dm:c:")) {
+              const conv = t2.slice("dm:c:".length).split(":")[0];
+              scope = this._sessionGroupIds.get(conv) ?? `c:${conv}`;
+            } else {
+              scope = this._persisted?.groupId;
+            }
+            if ((scope === void 0 || scope.startsWith("c:")) && known.size === 1) {
+              return [...known][0];
+            }
+            return scope;
+          }
+          /**
+           * The group a DM history request is answered from, or `null` for "every DM
+           * entry" (an agent that knows no groups at all — the old behaviour). A
+           * request whose group cannot be told fails closed to its own conversation.
+           */
+          _dmRequestScope(gid, convId, known) {
+            if (known.size === 0) return null;
+            const g2 = gid ?? (convId ? this._sessionGroupIds.get(convId) : void 0);
+            if (g2) return g2;
+            const isPrimaryConv = convId === void 0 || convId === this._primaryConversationId;
+            if (known.size === 1 && isPrimaryConv) return [...known][0];
+            if (convId && convId === this._primaryConversationId && this._persisted?.groupId) {
+              return this._persisted.groupId;
+            }
+            return `c:${convId ?? ""}`;
+          }
           /**
            * Normalize one accepted application envelope before it enters plaintext
            * history. Protocol/control types and empty attachment-only envelopes are
            * never archived, and attachment key material can never become the fallback
            * text.
            */
-          async _captureHistoryApplication(sender, rawPlaintext, kind, id, transportTimestamp, declaredType = "message") {
+          async _captureHistoryApplication(sender, rawPlaintext, kind, id, transportTimestamp, declaredType = "message", dmScope) {
             let messageType = declaredType;
             let text = rawPlaintext;
             try {
@@ -72108,14 +72640,14 @@ ${text}`;
             await this._appendHistory(
               sender,
               text,
-              this._historyContext(kind, id),
+              kind === "dm" ? this._dmHistoryContext(id, dmScope?.groupId, dmScope?.conversationId) : this._historyContext(kind, id),
               transportTimestamp
             );
             return text;
           }
           /** Select a context before applying the optional lower bound and final cap. */
-          _historyForCatchup(kind, id, sinceTs) {
-            let filtered = this._selectHistoryContext(kind, id);
+          _historyForCatchup(kind, id, sinceTs, dmScope) {
+            let filtered = this._selectHistoryContext(kind, id, dmScope);
             if (sinceTs !== void 0 && sinceTs !== null) {
               if (typeof sinceTs !== "string" || !CANONICAL_TIMESTAMP_RE.test(sinceTs) || !Number.isFinite(Date.parse(sinceTs)) || new Date(Date.parse(sinceTs)).toISOString() !== sinceTs) {
                 throw new Error("Invalid history catch-up timestamp");
@@ -72125,11 +72657,17 @@ ${text}`;
             return filtered.sort((a2, b2) => Date.parse(a2.ts) - Date.parse(b2.ts) || a2.id.localeCompare(b2.id)).slice(-100);
           }
           /** Shared exact routing selector for catch-up and legacy DR replay. */
-          _selectHistoryContext(kind, id) {
+          _selectHistoryContext(kind, id, dmScope) {
             const history = this._persisted?.messageHistory ?? [];
-            return kind === "room" ? history.filter((entry) => entry.topicId === this._historyContext("room", id)) : history.filter(
+            if (kind === "room") {
+              return history.filter((entry) => entry.topicId === this._historyContext("room", id));
+            }
+            const dm = history.filter(
               (entry) => entry.topicId?.startsWith("dm:") === true || !entry.topicId?.startsWith("room:") && !entry.topicId?.startsWith("a2a:")
             );
+            const known = this._knownDmGroups();
+            const want = this._dmRequestScope(dmScope?.groupId, dmScope?.conversationId, known);
+            return want === null ? dm : dm.filter((entry) => this._dmEntryScope(entry, known) === want);
           }
           _markHistoryDirty() {
             this._historyBackupScheduler.markDirty();
@@ -72619,7 +73157,10 @@ ${text}`;
             Promise.resolve().then(() => (init_openclaw_compat(), openclaw_compat_exports)).then(({ requestHeartbeatNow: requestHeartbeatNow2 }) => requestHeartbeatNow2({ reason: "channel-send" })).catch(() => {
             });
             const targetConvId = options?.conversationId;
-            const topicId = options?.topicId ?? this._lastIncomingTopicId ?? this._persisted?.defaultTopicId;
+            const audience = this._untargetedAudience(options);
+            const explicitTopicId = options?.topicId;
+            const targeted = targetConvId !== void 0;
+            const frameHistoryContexts = [];
             const messageType = options?.messageType ?? "text";
             const priority = options?.priority ?? "normal";
             const parentSpanId = options?.parentSpanId;
@@ -72655,7 +73196,7 @@ ${text}`;
             if (this._persisted?.mlsGroups && this._state === "ready" && this._ws) {
               const targetSharedGid = targetConvId ? this._sessionGroupIds?.get(targetConvId) : void 0;
               console.log(
-                `[SecureChannel] send(): considering ${Object.keys(this._persisted.mlsGroups).length} shared group(s); targetConvId=${targetConvId ? targetConvId.slice(0, 8) : "(none \u2014 broadcast)"} targetSharedGid=${targetSharedGid ? targetSharedGid.slice(0, 8) : "(none)"}`
+                `[SecureChannel] send(): considering ${Object.keys(this._persisted.mlsGroups).length} shared group(s); targetConvId=${targetConvId ? targetConvId.slice(0, 8) : audience ? `(none \u2014 person involved: ${audience.reason})` : "(none \u2014 everyone)"} targetSharedGid=${targetSharedGid ? targetSharedGid.slice(0, 8) : audience?.groupId ? audience.groupId.slice(0, 8) : "(none)"}`
               );
               const skipped = [];
               for (const [gid, entry] of Object.entries(this._persisted.mlsGroups)) {
@@ -72663,6 +73204,10 @@ ${text}`;
                   skipped.push(`${gid.slice(0, 8)}:not-target`);
                   continue;
                 }
+                if (audience && gid !== audience.groupId) {
+                  skipped.push(`${gid.slice(0, 8)}:not-involved`);
+                  continue;
+                }
                 if (!entry.mlsGroupId) {
                   skipped.push(`${gid.slice(0, 8)}:no-mlsGroupId`);
                   continue;
@@ -72686,11 +73231,12 @@ ${text}`;
                     plaintextBytes
                   );
                   await saveMlsState(this.config.dataDir, entry.mlsGroupId, JSON.stringify(mlsGroup.exportState()));
+                  const frameTopicId = this._topicForFrame(gid, targetConvId, explicitTopicId, targeted);
                   const payload = {
                     group_id: entry.mlsGroupId,
                     epoch: Number(mlsGroup.epoch),
                     payload: Buffer.from(cipherBytes).toString("hex"),
-                    topic_id: topicId,
+                    topic_id: frameTopicId,
                     client_message_id: clientMessageId,
                     message_type: messageType,
                     priority,
@@ -72700,6 +73246,7 @@ ${text}`;
                   if (this._persisted?.hubAddress) payload.hub_address = this._persisted.hubAddress;
                   if (this._persisted?.hubId) payload.sender_hub_id = this._persisted.hubId;
                   pendingWsSends.push(JSON.stringify({ event: "message_mls", data: payload }));
+                  frameHistoryContexts.push(this._dmHistoryContext(frameTopicId, gid, targetConvId));
                   addressedMlsGroupIds.push(entry.mlsGroupId);
                   sentSharedGroupIds.add(gid);
                   sentCount++;
@@ -72717,12 +73264,14 @@ ${text}`;
               if (!session.activated) continue;
               if (roomConvIds.has(convId)) continue;
               if (targetConvId && convId !== targetConvId) continue;
+              if (audience && !this._isPersonsConversation(audience, convId)) continue;
               const convGroupId = this._sessionGroupIds?.get(convId);
               if (convGroupId && sentSharedGroupIds.has(convGroupId)) {
                 sentCount++;
                 continue;
               }
               try {
+                const topicId = this._topicForFrame(convGroupId, convId, explicitTopicId, targeted);
                 const mlsGroup = (convGroupId ? this._mlsGroups.get(`1to1-group:${convGroupId}`) : null) ?? this._mlsGroups.get(`conv:${convId}`);
                 const mlsGroupId = (convGroupId ? this._persisted?.mlsGroups?.[convGroupId]?.mlsGroupId : null) ?? this._persisted?.mlsConversations?.[convId]?.mlsGroupId;
                 if (convGroupId && mlsGroupId && sentSharedGroupIds.has(convGroupId)) {
@@ -72764,6 +73313,7 @@ ${text}`;
                       data: payload
                     })
                   );
+                  frameHistoryContexts.push(this._dmHistoryContext(topicId, convGroupId, convId));
                   addressedMlsGroupIds.push(mlsGroupId);
                   if (convGroupId) sentSharedGroupIds.add(convGroupId);
                 } else if (!options?.bypassMlsHold && this._shouldHoldForMls(convGroupId, mlsGroup, mlsGroupId)) {
@@ -72783,7 +73333,7 @@ ${text}`;
                       history: {
                         id: clientMessageId,
                         text: plaintext,
-                        topicId: this._historyContext("dm", topicId)
+                        topicId: this._dmHistoryContext(topicId, convGroupId, convId)
                       }
                     } : {}
                   };
@@ -72812,6 +73362,7 @@ ${text}`;
                         data: payload
                       })
                     );
+                    frameHistoryContexts.push(this._dmHistoryContext(topicId, convGroupId, convId));
                   } else {
                     if (!this._persisted.outboundQueue) {
                       this._persisted.outboundQueue = [];
@@ -72832,6 +73383,7 @@ ${text}`;
             if (this._persisted?.mlsConversations && this._state === "ready" && this._ws) {
               for (const [mlsConvId, entry] of Object.entries(this._persisted.mlsConversations)) {
                 if (targetConvId && mlsConvId !== targetConvId) continue;
+                if (audience && !this._isPersonsConversation(audience, mlsConvId)) continue;
                 if (this._sessions.has(mlsConvId)) continue;
                 if (roomConvIds.has(mlsConvId)) continue;
                 const mlsOnlyConvGroupId = this._sessionGroupIds?.get(mlsConvId);
@@ -72843,6 +73395,7 @@ ${text}`;
                   continue;
                 }
                 try {
+                  const topicId = this._topicForFrame(mlsOnlyConvGroupId, mlsConvId, explicitTopicId, targeted);
                   const plaintextBytes = new TextEncoder().encode(plaintext);
                   const mlsOnlyGroupKey = mlsOnlyConvGroupId && this._mlsGroups.has(`1to1-group:${mlsOnlyConvGroupId}`) ? `1to1-group:${mlsOnlyConvGroupId}` : `conv:${mlsConvId}`;
                   const cipherBytes = await this._encryptWithCatchUp(
@@ -72868,6 +73421,7 @@ ${text}`;
                   if (this._persisted?.hubAddress) payload.hub_address = this._persisted.hubAddress;
                   if (this._persisted?.hubId) payload.sender_hub_id = this._persisted.hubId;
                   pendingWsSends.push(JSON.stringify({ event: "message_mls", data: payload }));
+                  frameHistoryContexts.push(this._dmHistoryContext(topicId, mlsOnlyConvGroupId, mlsConvId));
                   addressedMlsGroupIds.push(resolvedMlsGroupId);
                   sentCount++;
                   if (mlsOnlyConvGroupId) sentSharedGroupIds.add(mlsOnlyConvGroupId);
@@ -72889,11 +73443,15 @@ ${text}`;
               );
             }
             let writtenFrames = 0;
-            for (const frame of pendingWsSends) {
-              if (this._sendApplicationFrame(frame)) writtenFrames += 1;
+            let historyContext;
+            for (const [i2, frame] of pendingWsSends.entries()) {
+              if (this._sendApplicationFrame(frame)) {
+                if (writtenFrames === 0) historyContext = frameHistoryContexts[i2];
+                writtenFrames += 1;
+              }
             }
             if (!options?.isResend && messageType === "text" && writtenFrames > 0) {
-              await this._appendHistory("agent", plaintext, this._historyContext("dm", topicId), void 0, clientMessageId);
+              await this._appendHistory("agent", plaintext, historyContext ?? this._historyContext("dm"), void 0, clientMessageId);
             }
             if (writtenFrames > 0) {
               console.log(
@@ -72949,7 +73507,7 @@ ${text}`;
            */
           sendActivitySpan(spanData) {
             if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-            const pluginVersion = true ? "0.23.50" : "0.0.0-dev";
+            const pluginVersion = true ? "0.23.52" : "0.0.0-dev";
             const agentName = this.config.agentName ?? "Agent";
             const resource = {
               "service.name": "agentvault-agent",
@@ -73001,7 +73559,7 @@ ${text}`;
            * Builds a structured envelope with decision metadata and sends it
            * as a high-priority message. Returns the generated decision_id.
            */
-          async sendDecisionRequest(request) {
+          async sendDecisionRequest(request, routing) {
             const decision_id = `dec_${randomUUID4().replace(/-/g, "").slice(0, 16)}`;
             const payload = JSON.stringify({
               type: "message",
@@ -73012,6 +73570,8 @@ ${text}`;
               }
             });
             await this.send(payload, {
+              conversationId: routing?.conversationId,
+              audience: routing?.audience,
               messageType: "decision_request",
               priority: "high",
               metadata: {
@@ -73418,6 +73978,7 @@ ${text}`;
             const jwt = this._deviceJwt ?? this._persisted?.deviceJwt;
             if (!jwt || !this._persisted) return false;
             let rows;
+            const reconcileStartedAt = Date.now();
             try {
               const res = await fetch(`${this.config.apiUrl}/api/v1/conversations`, {
                 headers: { Authorization: `Bearer ${jwt}` }
@@ -73434,8 +73995,31 @@ ${text}`;
             );
             if (mine.length === 0) return false;
             const before = this._persisted.groupId;
+            const primaryBefore = this._persisted.primaryConversationId;
+            const knownBefore = this._knownDmGroups();
+            const ownersBefore = /* @__PURE__ */ new Set();
+            if (before) {
+              for (const [convId, gid] of this._sessionGroupIds) {
+                if (gid !== before) continue;
+                const owner = this._sessions.get(convId)?.ownerDeviceId ?? this._persisted.sessions?.[convId]?.ownerDeviceId;
+                if (owner) ownersBefore.add(owner);
+              }
+            }
             this._sessionGroupIds = new Map(mine.map((r2) => [r2.id, r2.group_id]));
             this._persisted.conversationGroupIds = Object.fromEntries(this._sessionGroupIds);
+            {
+              const convs = new Set(mine.map((r2) => r2.id));
+              const groups = new Set(mine.map((r2) => r2.group_id));
+              this._lastReconcile = { at: reconcileStartedAt, convs, groups };
+              for (const [key, a2] of this._attestedInbound) {
+                if (a2.at > reconcileStartedAt) continue;
+                if (a2.convId && convs.has(a2.convId) || a2.groupId && groups.has(a2.groupId)) continue;
+                this._attestedInbound.delete(key);
+              }
+              for (const [gid, at] of this._welcomedUnmapped) {
+                if (at <= reconcileStartedAt) this._welcomedUnmapped.delete(gid);
+              }
+            }
             const joined = mine.find((r2) => this._persisted.mlsGroups?.[r2.group_id]);
             const primary = mine.find((r2) => r2.id === this._persisted.primaryConversationId) ?? joined ?? mine[0];
             if (!mine.some((r2) => r2.id === this._persisted.primaryConversationId)) {
@@ -73445,6 +74029,23 @@ ${text}`;
             }
             this._persisted.groupId = primary.group_id;
             this._persisted.primaryConversationId = primary.id;
+            for (const r2 of mine) {
+              if (typeof r2.default_topic_id === "string") this._recordDefaultTopic(r2.group_id, r2.default_topic_id);
+            }
+            const primaryDefault = this._persisted.defaultTopicIds?.[primary.group_id];
+            if (primaryDefault) this._persisted.defaultTopicId = primaryDefault;
+            const primaryOwner = primary.owner_device_id;
+            const samePerson = primary.id === primaryBefore || typeof primaryOwner === "string" && ownersBefore.has(primaryOwner);
+            let retagged = false;
+            if (before && primary.group_id !== before && knownBefore.size === 1 && knownBefore.has(before) && samePerson) {
+              const oldPrefix = `dm:g:${before}:`;
+              for (const entry of this._persisted.messageHistory ?? []) {
+                if (entry.topicId?.startsWith(oldPrefix)) {
+                  entry.topicId = `dm:g:${primary.group_id}:${entry.topicId.slice(oldPrefix.length)}`;
+                  retagged = true;
+                }
+              }
+            }
             const liveGroupIds = new Set(mine.map((r2) => r2.group_id));
             if (staleGid && staleMlsGroupId && !liveGroupIds.has(staleGid)) {
               try {
@@ -73459,6 +74060,10 @@ ${text}`;
               });
             }
             await this._persistState();
+            if (retagged) {
+              this._markHistoryDirty();
+              await this._saveHistoryState();
+            }
             console.log(
               `[SecureChannel] Re-resolved conversation groups ${staleMlsGroupId ? `after 'unknown group' ${staleMlsGroupId.slice(0, 8)}` : "on connect (#1034)"}: primary group ${String(before).slice(0, 8)} \u2192 ${this._persisted.groupId.slice(0, 8)} (${mine.length} active conversation(s))`
             );
@@ -73608,7 +74213,7 @@ ${text}`;
             }
             this._heartbeatCallback = null;
           }
-          async sendStatusAlert(alert) {
+          async sendStatusAlert(alert, routing) {
             const priority = alert.severity === "error" || alert.severity === "critical" ? "high" : "normal";
             const envelope = {
               title: alert.title,
@@ -73622,52 +74227,61 @@ ${text}`;
             await this.send(
               JSON.stringify(envelope),
               {
+                conversationId: routing?.conversationId,
+                audience: routing?.audience,
                 messageType: "status_alert",
                 priority,
                 metadata: { severity: alert.severity }
               }
             );
           }
-          async sendArtifact(artifact) {
+          async sendArtifact(artifact, routing) {
             if (this._state !== "ready" || this._sessions.size === 0 || !this._ws) {
               throw new Error("Channel is not ready");
             }
-            const attachMeta = await this._uploadAttachment(artifact.filePath, this._primaryConversationId);
-            const envelope = JSON.stringify({
-              type: "artifact",
-              blob_id: attachMeta.blobId,
-              blob_url: attachMeta.blobUrl,
-              filename: artifact.filename,
-              mime_type: artifact.mimeType,
-              size_bytes: attachMeta.size,
-              description: artifact.description,
-              attachment: attachMeta
-            });
             const messageGroupId = randomUUID4();
             const pendingWsSends = [];
-            for (const [convId, session] of this._sessions) {
-              if (!session.activated) continue;
-              const encrypted = session.ratchet.encrypt(envelope);
-              const transport = encryptedMessageToTransport(encrypted);
-              pendingWsSends.push(
-                JSON.stringify({
-                  event: "message",
-                  data: {
-                    conversation_id: convId,
-                    header_blob: transport.header_blob,
-                    ciphertext: transport.ciphertext,
-                    message_group_id: messageGroupId,
-                    message_type: "artifact_share"
-                  }
-                })
-              );
+            const buckets = this._ownerFileRecipients(routing);
+            if (buckets.length === 0) {
+              console.warn("[SecureChannel] sendArtifact(): no live session for the person involved \u2014 nothing sent");
+              throw new Error("No conversation is ready to receive this file");
+            }
+            for (const bucket of buckets) {
+              const attachMeta = await this._uploadAttachment(artifact.filePath, bucket.uploadConvId);
+              const envelope = JSON.stringify({
+                type: "artifact",
+                blob_id: attachMeta.blobId,
+                blob_url: attachMeta.blobUrl,
+                filename: artifact.filename,
+                mime_type: artifact.mimeType,
+                size_bytes: attachMeta.size,
+                description: artifact.description,
+                attachment: attachMeta
+              });
+              for (const convId of bucket.convIds) {
+                const session = this._sessions.get(convId);
+                const encrypted = session.ratchet.encrypt(envelope);
+                const transport = encryptedMessageToTransport(encrypted);
+                pendingWsSends.push(
+                  JSON.stringify({
+                    event: "message",
+                    data: {
+                      conversation_id: convId,
+                      header_blob: transport.header_blob,
+                      ciphertext: transport.ciphertext,
+                      message_group_id: messageGroupId,
+                      message_type: "artifact_share"
+                    }
+                  })
+                );
+              }
             }
             await this._persistState();
             for (const frame of pendingWsSends) {
               this._ws.send(frame);
             }
           }
-          async sendActionConfirmation(confirmation) {
+          async sendActionConfirmation(confirmation, routing) {
             const envelope = {
               type: "action_confirmation",
               action: confirmation.action,
@@ -73678,6 +74292,8 @@ ${text}`;
             await this.send(
               JSON.stringify(envelope),
               {
+                conversationId: routing?.conversationId,
+                audience: routing?.audience,
                 messageType: "action_confirmation",
                 metadata: { status: confirmation.status }
               }
@@ -73783,9 +74399,23 @@ ${text}`;
             } else {
               return { ok: false, destination: { kind: "owner" }, error: "Unknown target kind", timestamp: ts };
             }
+            if (resolved.kind === "owner" && options?.refuseIfAmbiguous && this.isUntargetedOwnerAmbiguous(options)) {
+              console.log(`[deliver] target=owner content=${content.type} result=REFUSED: ambiguous (several people mid-turn)`);
+              return { ok: false, ambiguous: true, destination: resolved, error: AMBIGUOUS_OWNER_ERROR, timestamp: ts };
+            }
             let dedupeKey = null;
             try {
-              dedupeKey = outboundDedupeKey(resolved, content, options);
+              let audienceTag;
+              try {
+                audienceTag = resolved.kind === "owner" && options?.conversationId === void 0 ? this._audienceTag(options) : void 0;
+              } catch {
+                audienceTag = void 0;
+              }
+              dedupeKey = outboundDedupeKey(
+                resolved,
+                content,
+                audienceTag ? { ...options, conversationId: audienceTag } : options
+              );
               if (dedupeKey) {
                 const now = Date.now();
                 const recent = this._recentDeliveries ??= /* @__PURE__ */ new Map();
@@ -73805,6 +74435,10 @@ ${text}`;
             }
             try {
               let decisionId;
+              const ownerRouting = {
+                conversationId: options?.conversationId,
+                audience: options?.audience
+              };
               if (content.type === "text") {
                 if (resolved.kind === "room") {
                   await this.sendToRoom(resolved.id, content.text, {
@@ -73823,6 +74457,7 @@ ${text}`;
                 } else {
                   await this.send(content.text, {
                     conversationId: options?.conversationId,
+                    audience: options?.audience,
                     topicId: options?.topicId,
                     messageType: options?.metadata?.message_type,
                     priority: options?.priority,
@@ -73835,7 +74470,7 @@ ${text}`;
                   console.log(`[deliver] target=${resolved.kind}:${resolved.id} content=decision_request result=FAIL: ${err}`);
                   return { ok: false, destination: resolved, error: err, timestamp: ts };
                 }
-                decisionId = await this.sendDecisionRequest(content.request);
+                decisionId = await this.sendDecisionRequest(content.request, ownerRouting);
               } else if (content.type === "status_alert") {
                 if (resolved.kind === "room") {
                   const envelope = {
@@ -73853,7 +74488,7 @@ ${text}`;
                     metadata: { severity: content.alert.severity }
                   });
                 } else if (resolved.kind === "owner") {
-                  await this.sendStatusAlert(content.alert);
+                  await this.sendStatusAlert(content.alert, ownerRouting);
                 } else {
                   return { ok: false, destination: resolved, error: "Status alerts cannot be sent to A2A targets", timestamp: ts };
                 }
@@ -73861,7 +74496,7 @@ ${text}`;
                 if (resolved.kind === "room") {
                   await this.sendActionConfirmationToRoom(resolved.id, content.confirmation);
                 } else if (resolved.kind === "owner") {
-                  await this.sendActionConfirmation(content.confirmation);
+                  await this.sendActionConfirmation(content.confirmation, ownerRouting);
                 } else {
                   return { ok: false, destination: resolved, error: "Action confirmations cannot be sent to A2A targets", timestamp: ts };
                 }
@@ -73869,13 +74504,14 @@ ${text}`;
                 if (resolved.kind !== "owner") {
                   return { ok: false, destination: resolved, error: "Artifacts can only be sent to owner", timestamp: ts };
                 }
-                await this.sendArtifact(content.artifact);
+                await this.sendArtifact(content.artifact, ownerRouting);
               } else if (content.type === "attachment") {
                 if (resolved.kind !== "owner") {
                   return { ok: false, destination: resolved, error: "Attachments can only be sent to owner", timestamp: ts };
                 }
                 await this.sendWithAttachment(content.text, content.filePath, {
-                  topicId: options?.topicId
+                  topicId: options?.topicId,
+                  ...ownerRouting
                 });
               }
               const targetLabel = resolved.kind === "owner" ? "owner" : `${resolved.kind}:${resolved.id?.slice(0, 8)}...`;
@@ -74192,15 +74828,105 @@ ${text}`;
             return this._mcpServer;
           }
           // --- Topic management ---
+          /*
+           * #1416 — topics are per conversation GROUP.
+           *
+           * Since #1399 every person has their own 1:1 group with the agent, and a
+           * topic belongs to exactly one group (`topics.group_id`). The agent used to
+           * keep ONE default topic (the primary group's) and ONE last-incoming topic,
+           * and stamped both on every frame — so a reply into person B's group could
+           * carry person A's topic, and B's web client (which filters live messages by
+           * the topic it is viewing) dropped it until a reload.
+           *
+           * The rule now: a frame's topic comes from THAT frame's group. A group with
+           * no known topic gets none — the server then files the message under that
+           * conversation's own default topic (`ws.py`, lazily created) — rather than
+           * borrowing another group's.
+           */
+          /** Scope key for per-group topic state; see `_lastIncomingTopics`. */
+          _topicScope(gid, convId) {
+            if (gid) return `g:${gid}`;
+            if (!this._persisted?.groupId && this._sessionGroupIds.size === 0) return "*";
+            return convId ? `c:${convId}` : void 0;
+          }
+          /** Record the topic of an inbound 1:1 message for its own group (#1416). */
+          _rememberIncomingTopic(convId, gid, topicId) {
+            const scope = this._topicScope(gid ?? (convId ? this._sessionGroupIds.get(convId) : void 0), convId);
+            if (!scope) return;
+            if (topicId && !isTopicId(topicId)) return;
+            if (topicId) this._lastIncomingTopics.set(scope, topicId);
+            else this._lastIncomingTopics.delete(scope);
+          }
           /**
-           * Create a new topic within the conversation group.
-           * Requires the channel to be initialized with a groupId (from activation).
+           * Record a group's default topic (#1416). The legacy `defaultTopicId` keeps
+           * mirroring the PRIMARY group's entry, for older readers and backups.
+           */
+          _recordDefaultTopic(gid, topicId) {
+            if (!gid || !topicId || !this._persisted) return;
+            (this._persisted.defaultTopicIds ??= {})[gid] = topicId;
+            if (gid === this._persisted.groupId) this._persisted.defaultTopicId = topicId;
+          }
+          /** The group a topic is known to belong to, if any. */
+          _groupOfTopic(topicId) {
+            const p2 = this._persisted;
+            for (const [gid, tid] of Object.entries(p2?.defaultTopicIds ?? {})) {
+              if (tid === topicId) return gid;
+            }
+            if (p2?.defaultTopicId === topicId && p2.groupId) return p2.groupId;
+            for (const t2 of p2?.topics ?? []) {
+              if (t2.id === topicId) return t2.groupId ?? p2?.groupId;
+            }
+            for (const [scope, tid] of this._lastIncomingTopics) {
+              if (tid === topicId && scope.startsWith("g:")) return scope.slice(2);
+            }
+            return void 0;
+          }
+          /**
+           * The topic one outgoing 1:1 frame carries (#1416), or `undefined` to send
+           * none. `gid` is the frame's conversation group (looked up from `convId`
+           * when not given); `explicit` is the caller's `topicId`; `targeted` is true
+           * when the caller addressed one conversation.
            */
-          async createTopic(name) {
+          _topicForFrame(gid, convId, explicit, targeted, useLastIncoming = true) {
+            const p2 = this._persisted;
+            const g2 = gid ?? (convId ? this._sessionGroupIds.get(convId) : void 0);
+            const primaryScope = g2 !== void 0 ? g2 === p2?.groupId : convId === this._primaryConversationId || !p2?.groupId;
+            if (isTopicId(explicit)) {
+              const owner = this._groupOfTopic(explicit);
+              if (owner !== void 0 ? owner === g2 : targeted || primaryScope) return explicit;
+            }
+            const scope = this._topicScope(g2, convId);
+            const last = scope && useLastIncoming ? this._lastIncomingTopics.get(scope) : void 0;
+            if (last) return last;
+            if (g2 && p2?.defaultTopicIds?.[g2]) return p2.defaultTopicIds[g2];
+            if (primaryScope && p2?.defaultTopicId) return p2.defaultTopicId;
+            return void 0;
+          }
+          /**
+           * The conversation group a topic call addresses (#1416): the named
+           * conversation's own group, else the primary group. A named conversation
+           * whose group is unknown is an error — falling back to the primary group
+           * would create/list topics in somebody else's chat.
+           */
+          _topicGroupFor(conversationId) {
+            if (conversationId) {
+              const gid = this._sessionGroupIds.get(conversationId);
+              if (!gid) throw new Error("Conversation group unknown for topic call");
+              return gid;
+            }
             if (!this._persisted?.groupId) {
               throw new Error("Channel not initialized or groupId unknown");
             }
-            if (!this._deviceJwt) {
+            return this._persisted.groupId;
+          }
+          /**
+           * Create a new topic within a conversation group — the given conversation's
+           * own group (#1416), or the primary group when none is named.
+           * Requires the channel to be initialized with a groupId (from activation).
+           */
+          async createTopic(name, options) {
+            const groupId = this._topicGroupFor(options?.conversationId);
+            if (!this._deviceJwt || !this._persisted) {
               throw new Error("Channel not authenticated");
             }
             const res = await fetch(`${this.config.apiUrl}/api/v1/topics`, {
@@ -74210,7 +74936,7 @@ ${text}`;
                 Authorization: `Bearer ${this._deviceJwt}`
               },
               body: JSON.stringify({
-                group_id: this._persisted.groupId,
+                group_id: groupId,
                 name,
                 creator_device_id: this._persisted.deviceId
               })
@@ -74224,23 +74950,23 @@ ${text}`;
             if (!this._persisted.topics) {
               this._persisted.topics = [];
             }
-            this._persisted.topics.push(topic);
+            this._persisted.topics.push({ ...topic, groupId });
+            if (topic.isDefault) this._recordDefaultTopic(groupId, topic.id);
             await this._persistState();
             return topic;
           }
           /**
-           * List all topics in the conversation group.
+           * List all topics in a conversation group — the given conversation's own
+           * group (#1416), or the primary group when none is named.
            * Requires the channel to be initialized with a groupId (from activation).
            */
-          async listTopics() {
-            if (!this._persisted?.groupId) {
-              throw new Error("Channel not initialized or groupId unknown");
-            }
-            if (!this._deviceJwt) {
+          async listTopics(options) {
+            const groupId = this._topicGroupFor(options?.conversationId);
+            if (!this._deviceJwt || !this._persisted) {
               throw new Error("Channel not authenticated");
             }
             const res = await fetch(
-              `${this.config.apiUrl}/api/v1/topics?group_id=${encodeURIComponent(this._persisted.groupId)}`,
+              `${this.config.apiUrl}/api/v1/topics?group_id=${encodeURIComponent(groupId)}`,
               {
                 headers: {
                   Authorization: `Bearer ${this._deviceJwt}`
@@ -74253,7 +74979,13 @@ ${text}`;
             }
             const resp = await res.json();
             const topics = resp.map((t2) => ({ id: t2.id, name: t2.name, isDefault: t2.is_default }));
-            this._persisted.topics = topics;
+            const primaryGid = this._persisted.groupId;
+            this._persisted.topics = [
+              ...(this._persisted.topics ?? []).filter((t2) => (t2.groupId ?? primaryGid) !== groupId),
+              ...topics.map((t2) => ({ ...t2, groupId }))
+            ];
+            const def = topics.find((t2) => t2.isDefault);
+            if (def) this._recordDefaultTopic(groupId, def.id);
             await this._persistState();
             return topics;
           }
@@ -74837,6 +75569,9 @@ ${text}`;
                   this._persisted.defaultTopicId = primary.default_topic_id;
                 }
               }
+              for (const conv of conversations) {
+                this._recordDefaultTopic(conv.group_id, conv.default_topic_id);
+              }
               this._sessionGroupIds = /* @__PURE__ */ new Map();
               for (const conv of conversations) {
                 if (conv.group_id) {
@@ -74949,7 +75684,7 @@ ${text}`;
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.50" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.52" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -75277,7 +76012,7 @@ ${text}`;
                         agentVersion: this.config.agentVersion ?? "0.0.0",
                         // __AV_VERSION__ is injected by esbuild from package.json at build time.
                         // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                        pluginVersion: true ? "0.23.50" : "0.0.0-dev"
+                        pluginVersion: true ? "0.23.52" : "0.0.0-dev"
                       });
                       this._telemetryReporter.startAutoFlush(3e4);
                     }
@@ -75740,11 +76475,15 @@ ${text}`;
                 if (decisionReply) messageType = "decision_response";
               } catch {
               }
+              const dmGroupId = convGroupId ?? (mgrKey?.startsWith("1to1-group:") ? mgrKey.slice("1to1-group:".length) : void 0);
               if (messageType === "history_catchup_request") {
                 try {
                   const request = JSON.parse(plaintext);
                   if (typeof request.requesting_device_id !== "string") return;
-                  const filtered = this._historyForCatchup("dm", void 0, request.since_ts);
+                  const filtered = this._historyForCatchup("dm", void 0, request.since_ts, {
+                    groupId: dmGroupId,
+                    conversationId: convId
+                  });
                   const responsePayload = JSON.stringify({
                     type: "history_catchup_response",
                     target_device_id: request.requesting_device_id,
@@ -75799,6 +76538,9 @@ ${text}`;
                   console.log(`[SecureChannel] Session ${convId.slice(0, 8)} activated via MLS message`);
                 }
               }
+              if (topicId) {
+                this._rememberIncomingTopic(convId, dmGroupId, topicId);
+              }
               if (mlsAttachment) {
                 text = await this._augmentWithAttachment(mlsAttachment, text);
               }
@@ -75808,11 +76550,21 @@ ${text}`;
                 "dm",
                 topicId,
                 data.created_at,
-                messageType
+                messageType,
+                { groupId: dmGroupId, conversationId: convId }
               );
+              const dmConvId = convId ?? this._conversationOfGroup(dmGroupId);
+              this._noteInboundDm(dmConvId, dmGroupId, { createdAt: data.created_at, senderDeviceId });
+              this._reconcileForUnmappedGroup(dmGroupId);
               const metadata = {
                 messageId: data.message_id ?? `mls_${Date.now()}`,
-                conversationId: convId ?? this._primaryConversationId,
+                // A frame on a KNOWN group that no conversation maps yet is not the
+                // primary person's: leave the conversation unnamed rather than hand
+                // the reply to someone else; `conversationGroupId` still places it.
+                conversationId: dmConvId ?? (dmGroupId ? void 0 : this._primaryConversationId),
+                // #1418: the group this message decrypted under — attested, so a turn
+                // answers here even when the local map is stale.
+                conversationGroupId: dmGroupId,
                 timestamp: data.created_at ?? (/* @__PURE__ */ new Date()).toISOString(),
                 topicId,
                 // #621: positive attestation that this decrypted under the OWNER'S 1:1
@@ -75993,7 +76745,7 @@ ${text}`;
             }
             if (messageType === "message" || messageType === "decision_response" && decisionReply) {
               const topicId = msgData.topic_id;
-              this._lastIncomingTopicId = topicId;
+              this._rememberIncomingTopic(convId, void 0, topicId);
               let attachData;
               if (attachmentInfo) {
                 try {
@@ -76021,7 +76773,8 @@ ${text}`;
                 "dm",
                 topicId,
                 msgData.created_at,
-                messageType
+                messageType,
+                { conversationId: convId }
               );
               let emitText = messageText;
               if (attachData) {
@@ -76066,6 +76819,13 @@ ${messageText}`;
                 // envelope text before the fold; `emitText` is the folded copy.
                 caption: messageText
               };
+              if (!roomId) {
+                this._noteInboundDm(convId, void 0, {
+                  createdAt: msgData.created_at,
+                  senderDeviceId: msgData.sender_device_id
+                });
+                this._reconcileForUnmappedConversation(convId);
+              }
               this.emit("message", emitText, metadata);
               Promise.resolve(this.config.onMessage?.(emitText, metadata)).catch((err) => {
                 console.error("[SecureChannel] onMessage callback error:", err);
@@ -76214,40 +76974,53 @@ ${baseText}`;
             if (this._state !== "ready" || this._sessions.size === 0 || !this._ws) {
               throw new Error("Channel is not ready");
             }
-            const topicId = options?.topicId ?? this._persisted?.defaultTopicId;
-            const attachMeta = await this._uploadAttachment(filePath, this._primaryConversationId);
-            const envelope = JSON.stringify({
-              type: "message",
-              text: plaintext,
-              topicId,
-              attachment: attachMeta
-            });
             const messageGroupId = randomUUID4();
             const pendingWsSends = [];
-            for (const [convId, session] of this._sessions) {
-              if (!session.activated) continue;
-              const encrypted = session.ratchet.encrypt(envelope);
-              const transport = encryptedMessageToTransport(encrypted);
-              pendingWsSends.push(
-                JSON.stringify({
-                  event: "message",
-                  data: {
-                    conversation_id: convId,
-                    header_blob: transport.header_blob,
-                    ciphertext: transport.ciphertext,
-                    message_group_id: messageGroupId,
-                    topic_id: topicId
-                  }
-                })
-              );
+            const frameHistoryContexts = [];
+            const buckets = this._ownerFileRecipients(options);
+            if (buckets.length === 0) {
+              console.warn("[SecureChannel] sendWithAttachment(): no live session for the person involved \u2014 nothing sent");
+              throw new Error("No conversation is ready to receive this file");
+            }
+            for (const bucket of buckets) {
+              const attachMeta = await this._uploadAttachment(filePath, bucket.uploadConvId);
+              for (const convId of bucket.convIds) {
+                const session = this._sessions.get(convId);
+                const topicId = this._topicForFrame(void 0, convId, options?.topicId, false, false);
+                const envelope = JSON.stringify({
+                  type: "message",
+                  text: plaintext,
+                  topicId,
+                  attachment: attachMeta
+                });
+                const encrypted = session.ratchet.encrypt(envelope);
+                const transport = encryptedMessageToTransport(encrypted);
+                pendingWsSends.push(
+                  JSON.stringify({
+                    event: "message",
+                    data: {
+                      conversation_id: convId,
+                      header_blob: transport.header_blob,
+                      ciphertext: transport.ciphertext,
+                      message_group_id: messageGroupId,
+                      topic_id: topicId
+                    }
+                  })
+                );
+                frameHistoryContexts.push(this._dmHistoryContext(topicId, void 0, convId));
+              }
             }
             await this._persistState();
             let deliveredFrames = 0;
-            for (const frame of pendingWsSends) {
-              if (this._sendApplicationFrame(frame)) deliveredFrames += 1;
+            let historyContext;
+            for (const [i2, frame] of pendingWsSends.entries()) {
+              if (this._sendApplicationFrame(frame)) {
+                if (deliveredFrames === 0) historyContext = frameHistoryContexts[i2];
+                deliveredFrames += 1;
+              }
             }
             if (deliveredFrames > 0) {
-              await this._appendHistory("agent", plaintext, this._historyContext("dm", topicId), void 0, messageGroupId);
+              await this._appendHistory("agent", plaintext, historyContext ?? this._historyContext("dm"), void 0, messageGroupId);
             }
           }
           /**
@@ -76272,9 +77045,13 @@ ${baseText}`;
               topicId
             });
             const pendingWsSends = [];
+            const sourceGid = this._sessionGroupIds.get(sourceConvId);
+            const knowsGroups = this._sessionGroupIds.size > 0;
             for (const [siblingConvId, siblingSession] of this._sessions) {
               if (siblingConvId === sourceConvId) continue;
               if (!siblingSession.activated) continue;
+              const siblingGid = this._sessionGroupIds.get(siblingConvId);
+              if (knowsGroups && !(sourceGid && siblingGid && siblingGid === sourceGid)) continue;
               if (roomConvIds.has(siblingConvId)) continue;
               const syncEncrypted = siblingSession.ratchet.encrypt(syncPayload);
               const syncTransport = encryptedMessageToTransport(syncEncrypted);
@@ -76355,7 +77132,7 @@ ${baseText}`;
           async _replayHistoryToSession(convId) {
             const session = this._sessions.get(convId);
             if (!session || !session.activated || !this._ws) return;
-            const history = this._selectHistoryContext("dm");
+            const history = this._selectHistoryContext("dm", void 0, { conversationId: convId });
             if (history.length === 0) {
               console.log(`[SecureChannel] No history to replay for ${convId.slice(0, 8)}...`);
               return;
@@ -76391,10 +77168,15 @@ ${baseText}`;
               `[SecureChannel] New owner device linked: ${event.owner_device_id.slice(0, 8)}...`
             );
             try {
+              if (event.group_id && !this._sessionGroupIds.has(event.conversation_id)) {
+                this._sessionGroupIds.set(event.conversation_id, event.group_id);
+                this._persisted.conversationGroupIds = Object.fromEntries(this._sessionGroupIds);
+              }
               if (!event.owner_identity_public_key) {
                 console.error(
                   `[SecureChannel] device_linked event missing owner keys for conv ${event.conversation_id.slice(0, 8)}...`
                 );
+                await this._persistState();
                 return;
               }
               const identity = this._persisted.identityKeypair;
@@ -78098,6 +78880,10 @@ ${baseText}`;
                   await this._persistState();
                 }
                 console.log(`[SecureChannel] Joined shared 1:1 MLS group for group ${conversationGroupId.slice(0, 8)} via Welcome (epoch=${mgr.epoch})`);
+                if (!this._isMappedGroup(conversationGroupId)) {
+                  this._welcomedUnmapped.set(conversationGroupId, Date.now());
+                }
+                this._reconcileForUnmappedGroup(conversationGroupId);
                 await this._flushMlsHold(conversationGroupId);
                 return;
               }
@@ -78727,7 +79513,7 @@ ${baseText}`;
                   }
                   if (messageType === "message" || messageType === "decision_response" && decisionReply) {
                     const topicId = msg.topic_id;
-                    await this._appendHistory("owner", messageText, this._historyContext("dm", topicId), msg.created_at, msg.message_id);
+                    await this._appendHistory("owner", messageText, this._dmHistoryContext(topicId, void 0, msg.conversation_id), msg.created_at, msg.message_id);
                     const metadata = {
                       messageId: msg.message_id,
                       conversationId: msg.conversation_id,
@@ -78739,6 +79525,7 @@ ${baseText}`;
                       ownerDm1to1: true,
                       ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                     };
+                    this._noteInboundDm(msg.conversation_id, void 0, { createdAt: msg.created_at, senderDeviceId: msg.sender_device_id });
                     this.emit("message", messageText, metadata);
                     Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
                       console.error("[SecureChannel] onMessage callback error:", err);
@@ -79333,7 +80120,7 @@ ${baseText}`;
                     }
                     if (messageType === "message" || messageType === "decision_response" && decisionReply) {
                       const topicId = msg.topic_id;
-                      await this._appendHistory("owner", messageText, this._historyContext("dm", topicId), msg.created_at, msg.id);
+                      await this._appendHistory("owner", messageText, this._dmHistoryContext(topicId, void 0, msg.conversation_id), msg.created_at, msg.id);
                       const metadata = {
                         messageId: msg.id,
                         conversationId: msg.conversation_id,
@@ -79345,6 +80132,7 @@ ${baseText}`;
                         ownerDm1to1: true,
                         ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                       };
+                      this._noteInboundDm(msg.conversation_id, void 0, { createdAt: msg.created_at, senderDeviceId: msg.sender_device_id });
                       this.emit("message", messageText, metadata);
                       Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
                         console.error("[SecureChannel] onMessage callback error:", err);
@@ -79653,7 +80441,7 @@ ${baseText}`;
                     }
                     if (messageType === "message" || messageType === "decision_response" && decisionReply) {
                       const topicId = msg.topic_id;
-                      await this._appendHistory("owner", messageText, this._historyContext("dm", topicId), msg.created_at, msg.id);
+                      await this._appendHistory("owner", messageText, this._dmHistoryContext(topicId, void 0, msg.conversation_id), msg.created_at, msg.id);
                       const metadata = {
                         messageId: msg.id,
                         conversationId: msg.conversation_id,
@@ -79665,6 +80453,7 @@ ${baseText}`;
                         ownerDm1to1: true,
                         ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                       };
+                      this._noteInboundDm(msg.conversation_id, void 0, { createdAt: msg.created_at, senderDeviceId: msg.sender_device_id });
                       this.emit("message", messageText, metadata);
                       Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
                         console.error("[SecureChannel] onMessage callback error:", err);
@@ -80685,7 +81474,7 @@ ${actionsText}`);
         "use strict";
         init_llm_response_parser();
         init_llm_cost();
-        traceStore = new AsyncLocalStorage();
+        traceStore = new AsyncLocalStorage2();
       }
     });
     init_tool_audit = __esm2({
@@ -101433,7 +102222,7 @@ data:
         await init_skill_telemetry();
         await init_policy_enforcer();
         init_room_protocol();
-        VERSION = true ? "0.23.50" : "0.0.0-dev";
+        VERSION = true ? "0.23.52" : "0.0.0-dev";
       }
     });
     await init_index();
@@ -102085,7 +102874,7 @@ var init_cli = __esm({
     "use strict";
     await init_dist();
     init_driver();
-    VERSION2 = "0.1.5";
+    VERSION2 = "0.1.7";
     HELP = `AgentVault OpenAI Bridge ${VERSION2}
 Usage: AV_AGENT_NAME=<name> agentvault-openai-bridge <command>