@agentvault/openai-bridge 0.1.6 → 0.1.7

package/dist/cli.d.ts

@@ -1,6 +1,6 @@
 import { type HistoryRecoveryCommandInput } from "@agentvault/agentvault";
 import { type Layout } from "./driver.js";
-export declare const VERSION = "0.1.6";
+export declare const VERSION = "0.1.7";
 export interface RunConfig {
     name: string;
     apiUrl: string;

package/dist/index.js

@@ -94,6 +94,7 @@ import { readdir as readdir2, readFile as readFile4, writeFile as writeFile2, re
 import { join as join5 } from "node:path";
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { EventEmitter } from "node:events";
+import { AsyncLocalStorage } from "node:async_hooks";
 import { createServer } from "node:http";
 import { randomUUID as randomUUID4, createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
@@ -103,7 +104,7 @@ import { join as join6 } from "node:path";
 import { readFile as readFile5 } from "node:fs/promises";
 import WebSocket from "ws";
 import { resolve as resolve2 } from "node:path";
-import { AsyncLocalStorage } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 import { Http2ServerRequest as Http2ServerRequest2 } from "http2";
 import { Http2ServerRequest } from "http2";
 import { Readable as Readable2 } from "stream";
@@ -11787,11 +11788,11 @@ async function joinWithFirstMatchingKp(welcomeBytes, candidates) {
   return null;
 }
 function ownIdentity() {
-  const v2 = true ? "0.23.51" : FALLBACK;
+  const v2 = true ? "0.23.52" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildSha() {
-  const raw = true ? "753de79" : "";
+  const raw = true ? "d7143c3" : "";
   const cleaned = (raw ?? "").trim();
   return !cleaned || cleaned === "unknown" ? null : cleaned;
 }
@@ -12595,11 +12596,38 @@ function _resetCompatCacheForTest() {
   _agentEventFn = null;
   _transcriptFn = null;
 }
+function ownerRoutingFrom(parsed) {
+  const out = {};
+  if (parsed.conversation_id !== void 0) {
+    if (typeof parsed.conversation_id !== "string" || !parsed.conversation_id) return "'conversation_id' must be a string";
+    out.conversationId = parsed.conversation_id;
+  }
+  if (parsed.audience !== void 0) {
+    if (parsed.audience !== "person" && parsed.audience !== "everyone") {
+      return `'audience' must be "person" or "everyone"`;
+    }
+    out.audience = parsed.audience;
+  }
+  return out;
+}
+function ambiguousOwnerRequest(channel, routing) {
+  const check = channel.isUntargetedOwnerAmbiguous;
+  if (typeof check !== "function" || !check.call(channel, routing)) return null;
+  return { status: 409, body: { ok: false, error: AMBIGUOUS_OWNER_ERROR } };
+}
+function statusOf(receipt) {
+  if (receipt.ambiguous) return 409;
+  return receipt.ok ? 200 : 500;
+}
 async function handleSendRequest(parsed, channel) {
   const text = parsed.text;
   if (!text || typeof text !== "string") {
     return { status: 400, body: { ok: false, error: "Missing 'text' field" } };
   }
+  const routing = ownerRoutingFrom(parsed);
+  if (typeof routing === "string") {
+    return { status: 400, body: { ok: false, error: routing } };
+  }
   try {
     let target;
     let a2aTarget = parsed.hub_address ?? parsed.a2a_address ?? parsed.a2aAddress;
@@ -12617,10 +12645,10 @@ async function handleSendRequest(parsed, channel) {
       const receipt2 = await channel.deliver(
         { kind: "owner" },
         { type: "attachment", text, filePath: parsed.file_path },
-        { topicId: parsed.topicId }
+        { topicId: parsed.topicId, ...routing, refuseIfAmbiguous: true }
       );
       return {
-        status: receipt2.ok ? 200 : 500,
+        status: statusOf(receipt2),
         body: {
           ok: receipt2.ok,
           destination: receipt2.destination,
@@ -12634,6 +12662,8 @@ async function handleSendRequest(parsed, channel) {
       target,
       { type: "text", text },
       {
+        ...routing,
+        refuseIfAmbiguous: true,
         topicId: parsed.topicId,
         priority: parsed.priority,
         metadata: {
@@ -12643,7 +12673,7 @@ async function handleSendRequest(parsed, channel) {
       }
     );
     return {
-      status: receipt.ok ? 200 : 500,
+      status: statusOf(receipt),
       body: {
         ok: receipt.ok,
         destination: receipt.destination,
@@ -12658,6 +12688,10 @@ async function handleActionRequest(parsed, channel) {
   if (!parsed.action || typeof parsed.action !== "string") {
     return { status: 400, body: { ok: false, error: "Missing 'action' field" } };
   }
+  const routing = ownerRoutingFrom(parsed);
+  if (typeof routing === "string") {
+    return { status: 400, body: { ok: false, error: routing } };
+  }
   try {
     const confirmation = {
       action: parsed.action,
@@ -12667,12 +12701,10 @@ async function handleActionRequest(parsed, channel) {
       estimated_cost: parsed.estimated_cost
     };
     const target = parsed.room_id && typeof parsed.room_id === "string" ? { kind: "room", roomId: parsed.room_id } : { kind: "owner" };
-    const receipt = await channel.deliver(
-      target,
-      { type: "action_confirmation", confirmation }
-    );
+    const content = { type: "action_confirmation", confirmation };
+    const receipt = await channel.deliver(target, content, { ...routing, refuseIfAmbiguous: true });
     return {
-      status: receipt.ok ? 200 : 500,
+      status: statusOf(receipt),
       body: {
         ok: receipt.ok,
         destination: receipt.destination,
@@ -12697,6 +12729,12 @@ async function handleDecisionRequest(parsed, channel) {
       return { status: 400, body: { ok: false, error: "Each option must have 'option_id' and 'label'" } };
     }
   }
+  const routing = ownerRoutingFrom(parsed);
+  if (typeof routing === "string") {
+    return { status: 400, body: { ok: false, error: routing } };
+  }
+  const ambiguous = ambiguousOwnerRequest(channel, routing);
+  if (ambiguous) return ambiguous;
   try {
     const decision_id = await channel.sendDecisionRequest({
       title,
@@ -12705,7 +12743,7 @@ async function handleDecisionRequest(parsed, channel) {
       context_refs: parsed.context_refs,
       deadline: parsed.deadline,
       auto_action: parsed.auto_action
-    });
+    }, routing);
     return { status: 200, body: { ok: true, decision_id } };
   } catch (err) {
     return { status: 500, body: { ok: false, error: String(err) } };
@@ -13240,7 +13278,7 @@ async function _handleInbound(params) {
       core.error?.(`[AgentVault] session record failed: ${String(err)}`);
     }
   });
-  await core.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
+  await channel.runForConversation(metadata.conversationId, () => core.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
     ctx: ctxPayload,
     cfg,
     dispatcherOptions: {
@@ -13257,7 +13295,7 @@ async function _handleInbound(params) {
       }
     },
     replyOptions: {}
-  });
+  }), { groupId: metadata.conversationGroupId });
 }
 function resolveBaseUrl(options) {
   const host = options?.host ?? "127.0.0.1";
@@ -18333,7 +18371,7 @@ function reportSkillInvocation(opts) {
   spanBuffer.push(span);
   return span;
 }
-var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports2, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, AGENT_EVENT_CANDIDATES, TRANSCRIPT_CANDIDATES, _heartbeatFn, _agentEventFn, _transcriptFn, init_openclaw_compat, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, TOPIC_ID_RE, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
+var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, AMBIGUOUS_OWNER_ERROR, init_owner_routing, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports2, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, AGENT_EVENT_CANDIDATES, TRANSCRIPT_CANDIDATES, _heartbeatFn, _agentEventFn, _transcriptFn, init_openclaw_compat, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, _turnConversation, PERSON_INVOLVED_WINDOW_MS, ATTESTED_INBOUND_MAX, UNMAPPED_RECONCILE_COOLDOWN_MS, TOPIC_ID_RE, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
 var init_dist = __esm({
   async "../plugin/dist/index.js"() {
     "use strict";
@@ -18386,6 +18424,12 @@ var init_dist = __esm({
         INSTRUCTION = "not every message needs an answer from you: if this one is not addressed to you and asks nothing of you, reply with exactly " + SENTINEL + " and nothing else \u2014 that is discarded, not posted, and is how you stay quiet; never post a message SAYING that you are staying quiet";
       }
     });
+    init_owner_routing = __esm2({
+      "src/owner-routing.ts"() {
+        "use strict";
+        AMBIGUOUS_OWNER_ERROR = `More than one person is talking to this agent right now, so it can't tell who this is for. Add 'conversation_id' to say which conversation, or send audience "everyone" to reach them all.`;
+      }
+    });
     init_envelope_text = __esm2({
       "src/envelope-text.ts"() {
         "use strict";
@@ -71217,6 +71261,7 @@ var init_dist = __esm({
     init_http_handlers = __esm2({
       "src/http-handlers.ts"() {
         "use strict";
+        init_owner_routing();
       }
     });
     mcp_proxy_helpers_exports = {};
@@ -71246,6 +71291,7 @@ var init_dist = __esm({
       async "src/channel.ts"() {
         "use strict";
         init_abstention();
+        init_owner_routing();
         init_envelope_text();
         init_mls_commit_classify();
         init_room_protocol();
@@ -71295,6 +71341,10 @@ var init_dist = __esm({
         OUTBOUND_DEDUPE_TYPES = /* @__PURE__ */ new Set(["text", "status_alert", "artifact", "attachment"]);
         RETRY_CANDIDATE_TTL_MS = 6e4;
         RETRY_CANDIDATE_MAX = 32;
+        _turnConversation = new AsyncLocalStorage();
+        PERSON_INVOLVED_WINDOW_MS = 5 * 6e4;
+        ATTESTED_INBOUND_MAX = 64;
+        UNMAPPED_RECONCILE_COOLDOWN_MS = 6e4;
         TOPIC_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
         ROOM_FULFIL_COOLDOWN_MS = 6e4;
         SecureChannel = class _SecureChannel extends EventEmitter {
@@ -71533,6 +71583,31 @@ ${text}`;
           _lastIncomingTopics = /* @__PURE__ */ new Map();
           /** Room ID from the most recent inbound room message — used as fallback for HTTP /send replies. */
           _lastInboundRoomId;
+          /**
+           * #1418: the most recent owner 1:1 message that reached the agent — the
+           * person involved in whatever the agent says next without naming a
+           * conversation (see `_involvedPerson`). In memory only: after a restart
+           * there is no trigger, so untargeted content goes to the primary person.
+           */
+          _lastInboundDm;
+          /** #1418: turns in progress (`runForConversation`). */
+          _activeTurns = /* @__PURE__ */ new Set();
+          /**
+           * #1418: recent owner 1:1 messages that decrypted, keyed by
+           * conversation|group — evidence of which conversation, group and browser
+           * belong together (one person). In memory only, bounded.
+           */
+          _attestedInbound = /* @__PURE__ */ new Map();
+          /** #1418: per UNMAPPED group (or conversation), the last time it asked for a reconcile. */
+          _unmappedReconcileAt = /* @__PURE__ */ new Map();
+          /**
+           * #1418: 1:1 groups joined by a Welcome IN THIS PROCESS while no
+           * conversation mapped them — a person who has not been learned yet, counted
+           * as one until the next successful reconcile. Persisted husks never are.
+           */
+          _welcomedUnmapped = /* @__PURE__ */ new Map();
+          /** #1418: what the last SUCCESSFUL reconcile reported live, and when it started. */
+          _lastReconcile;
           /** Rate-limit: last resync_request timestamp per conversation (5-min cooldown). */
           _lastResyncRequest = /* @__PURE__ */ new Map();
           /** Dedup: last room/group welcome self-heal request timestamp per group (30s window). */
@@ -72138,6 +72213,379 @@ ${text}`;
             if (this._persisted?.groupId) known.add(this._persisted.groupId);
             return known;
           }
+          // --- #1418: only the person involved ----------------------------------
+          /**
+           * Run `fn` as the work an inbound 1:1 message from `conversationId`
+           * triggered. Untargeted owner content sent while it runs — from inside its
+           * async call chain, or from anywhere while it is the only turn in progress —
+           * goes to that conversation's person only.
+           *
+           * `opts.groupId` is the group that message DECRYPTED under
+           * (`metadata.conversationGroupId`). Pass it: it outranks the local
+           * conversation→group map, which can be stale, and it is all there is for a
+           * frame whose conversation is not mapped yet. With neither an id nor a
+           * group, `fn` runs unchanged.
+           */
+          async runForConversation(conversationId, fn, opts) {
+            const groupId = typeof opts?.groupId === "string" && opts.groupId ? opts.groupId : void 0;
+            if (!conversationId && !groupId) return fn();
+            const store = { convId: conversationId || void 0, groupId, ended: false };
+            this._activeTurns.add(store);
+            try {
+              return await _turnConversation.run(store, fn);
+            } finally {
+              store.ended = true;
+              store.endedAt = Date.now();
+              this._activeTurns.delete(store);
+            }
+          }
+          /**
+           * The turn this call chain belongs to (#1418) — running, or ended but
+           * still within the window in which work it left behind is for its person.
+           * `"expired"` once that window is over: the work is proactive now.
+           */
+          _currentTurn() {
+            const store = _turnConversation.getStore();
+            if (!store) return void 0;
+            if (!store.ended) return store;
+            return Date.now() - (store.endedAt ?? 0) < PERSON_INVOLVED_WINDOW_MS ? store : "expired";
+          }
+          /**
+           * Record an owner 1:1 message that just decrypted (#1418).
+           *
+           * Always kept as evidence of which conversation, group and browser belong
+           * together (see `_dmPeople`). It makes its person "the person involved" only
+           * when it is RECENT by the server's `createdAt`: a frame replayed from
+           * backlog on reconnect is not something anyone is waiting on an answer to.
+           */
+          _noteInboundDm(convId, groupId, opts = {}) {
+            if (!convId && !groupId) return;
+            const now = Date.now();
+            const sentAt = opts.createdAt ? Date.parse(opts.createdAt) : NaN;
+            const at = Number.isFinite(sentAt) ? Math.min(now, sentAt) : now;
+            const sender = opts.senderDeviceId && opts.senderDeviceId !== this._deviceId ? opts.senderDeviceId : void 0;
+            const key = `${convId ?? ""}|${groupId ?? ""}|${sender ?? ""}`;
+            const prior = this._attestedInbound.get(key);
+            this._attestedInbound.delete(key);
+            this._attestedInbound.set(key, { convId, groupId, senderDeviceId: sender, at: Math.max(prior?.at ?? 0, at) });
+            while (this._attestedInbound.size > ATTESTED_INBOUND_MAX) {
+              const oldest = this._attestedInbound.keys().next().value;
+              if (oldest === void 0) break;
+              this._attestedInbound.delete(oldest);
+            }
+            if (this._lastInboundDm && this._lastInboundDm.at > at) return;
+            this._lastInboundDm = {
+              convId,
+              groupId: groupId ?? (convId ? this._sessionGroupIds.get(convId) : void 0),
+              at
+            };
+          }
+          /** The group `convId`'s most recent inbound decrypted under, if any. */
+          _attestedGroupOf(convId) {
+            if (!convId) return void 0;
+            let gid;
+            for (const a2 of this._attestedInbound.values()) {
+              if (a2.convId === convId && a2.groupId) gid = a2.groupId;
+            }
+            return gid;
+          }
+          /** Does some mapped conversation point at `groupId`? */
+          _isMappedGroup(groupId) {
+            for (const gid of this._sessionGroupIds.values()) if (gid === groupId) return true;
+            return false;
+          }
+          /**
+           * An owner message decrypted under a group no mapped conversation points at
+           * (#1418): the map is stale — a Welcome landed before its conversation was
+           * learned, or a conversation was recreated. Re-resolve it from the server.
+           * Fire-and-forget and rate-limited per group: never awaited on the receive
+           * or Welcome path, so it can never hold up MLS processing.
+           */
+          _reconcileForUnmappedGroup(groupId) {
+            if (!groupId || this._isMappedGroup(groupId)) return;
+            this._reconcileSoon(`g:${groupId}`);
+          }
+          /** The same for a Double Ratchet message on a conversation the map does not know. */
+          _reconcileForUnmappedConversation(convId) {
+            if (!convId || this._sessionGroupIds.size === 0 || this._sessionGroupIds.has(convId)) return;
+            this._reconcileSoon(`c:${convId}`);
+          }
+          _reconcileSoon(key) {
+            const now = Date.now();
+            if (now - (this._unmappedReconcileAt.get(key) ?? 0) < UNMAPPED_RECONCILE_COOLDOWN_MS) return;
+            this._unmappedReconcileAt.set(key, now);
+            void Promise.resolve().then(() => this._reconcileConversationGroups()).catch((err) => console.warn("[SecureChannel] Conversation-group reconcile (unmapped group) failed:", err));
+          }
+          /** A conversation of `groupId`, for an MLS frame that named only its group. */
+          _conversationOfGroup(groupId) {
+            if (!groupId) return void 0;
+            if (this._primaryConversationId && this._sessionGroupIds.get(this._primaryConversationId) === groupId) {
+              return this._primaryConversationId;
+            }
+            for (const [convId, gid] of this._sessionGroupIds) {
+              if (gid === groupId) return convId;
+            }
+            return void 0;
+          }
+          /** Is `convId` one of this agent's own 1:1 conversations (never a room's or an A2A channel's)? */
+          _isOwnDmConversation(convId) {
+            if (this._isNonDmConversation(convId)) return false;
+            return this._sessions.has(convId) || this._sessionGroupIds.has(convId) || !!this._persisted?.mlsConversations?.[convId] || convId === this._primaryConversationId;
+          }
+          /**
+           * #1418 — the PEOPLE this agent has a 1:1 with, or `undefined` when it
+           * cannot tell (no conversation is mapped: then it behaves as before #1418).
+           *
+           * People, not groups. Since #1399 one person has one group, but an agent
+           * also keeps joined groups that are nobody's any more — husks of deleted or
+           * recreated conversations. Measured 2026-10-24: wren held 13 joined groups
+           * for 1 mapped, loopita 2 for 1, wowzer 2 for 1. Counting joined groups made
+           * all three single-person agents look like several people, and their
+           * replies could go only to a dead group.
+           *
+           * So a person is built from the conversations the server mapped, joined by
+           * evidence that two things are the same person:
+           *  - the same group (a legacy group shared by several people cannot be told
+           *    apart, so it stays one — exactly the pre-#1418 behaviour);
+           *  - the same owner browser (a browser belongs to exactly one person);
+           *  - a message that decrypted under a group, from a conversation and browser.
+           * A joined group nothing maps and nobody has spoken in is not a person. A
+           * message on an unmapped group from a browser nobody knows IS someone —
+           * that fails closed, toward "only them".
+           */
+          _dmPeople() {
+            if (this._sessionGroupIds.size === 0) return void 0;
+            const parent2 = /* @__PURE__ */ new Map();
+            const add4 = (x2) => {
+              if (!parent2.has(x2)) parent2.set(x2, x2);
+            };
+            const find = (x2) => {
+              let root3 = x2;
+              while (parent2.get(root3) !== root3) root3 = parent2.get(root3);
+              return root3;
+            };
+            const union2 = (a2, b2) => {
+              if (!a2 || !b2) return;
+              add4(a2);
+              add4(b2);
+              const ra2 = find(a2), rb = find(b2);
+              if (ra2 !== rb) parent2.set(ra2, rb);
+            };
+            const ownerOf = (convId) => {
+              const owner = this._sessions.get(convId)?.ownerDeviceId ?? this._persisted?.sessions?.[convId]?.ownerDeviceId;
+              return owner ? `d:${owner}` : void 0;
+            };
+            for (const [convId, gid] of this._sessionGroupIds) {
+              add4(`c:${convId}`);
+              union2(`c:${convId}`, `g:${gid}`);
+              union2(`c:${convId}`, ownerOf(convId));
+            }
+            const primary = this._primaryConversationId || this._persisted?.primaryConversationId;
+            const primaryGid = this._persisted?.groupId;
+            if (primary && primaryGid && (parent2.has(`c:${primary}`) || parent2.has(`g:${primaryGid}`))) {
+              union2(`c:${primary}`, `g:${primaryGid}`);
+            }
+            for (const gid of this._welcomedUnmapped.keys()) add4(`g:${gid}`);
+            const records = [...this._attestedInbound.values()].map((a2) => ({
+              a: a2,
+              nodes: [
+                a2.convId ? `c:${a2.convId}` : void 0,
+                a2.groupId ? `g:${a2.groupId}` : void 0,
+                a2.senderDeviceId ? `d:${a2.senderDeviceId}` : void 0
+              ].filter((n2) => !!n2)
+            }));
+            const placed = /* @__PURE__ */ new Set();
+            const place = (i2) => {
+              const { a: a2, nodes } = records[i2];
+              for (const n2 of nodes) add4(n2);
+              for (const n2 of nodes.slice(1)) union2(nodes[0], n2);
+              if (a2.convId && this._sessionGroupIds.has(a2.convId)) union2(`c:${a2.convId}`, ownerOf(a2.convId));
+              placed.add(i2);
+            };
+            const linkKnown = () => {
+              for (let progress = true; progress; ) {
+                progress = false;
+                records.forEach((r2, i2) => {
+                  if (!placed.has(i2) && r2.nodes.some((n2) => parent2.has(n2))) {
+                    place(i2);
+                    progress = true;
+                  }
+                });
+              }
+            };
+            linkKnown();
+            records.forEach((r2, i2) => {
+              if (!placed.has(i2) && this._mayBeNewPerson(r2.a)) place(i2);
+            });
+            linkKnown();
+            const roots = /* @__PURE__ */ new Set();
+            for (const node2 of parent2.keys()) {
+              if (!node2.startsWith("d:")) roots.add(find(node2));
+            }
+            return {
+              count: roots.size,
+              keyOf: (convId, groupId) => {
+                if (convId && parent2.has(`c:${convId}`)) return find(`c:${convId}`);
+                if (groupId && parent2.has(`g:${groupId}`)) return find(`g:${groupId}`);
+                return void 0;
+              }
+            };
+          }
+          /**
+           * May this inbound evidence stand for a person nobody knows yet (#1418)?
+           * Only if it was sent recently, and the last successful reconcile — when it
+           * started after the message was sent — listed its conversation or group.
+           */
+          _mayBeNewPerson(a2) {
+            if (Date.now() - a2.at >= PERSON_INVOLVED_WINDOW_MS) return false;
+            const r2 = this._lastReconcile;
+            if (r2 && a2.at <= r2.at && !(a2.convId && r2.convs.has(a2.convId)) && !(a2.groupId && r2.groups.has(a2.groupId))) return false;
+            return true;
+          }
+          /** More than one person has a 1:1 with this agent (#1418). Unknown counts as one: the old behaviour. */
+          _isMultiPerson() {
+            return (this._dmPeople()?.count ?? 0) > 1;
+          }
+          /**
+           * The group a turn's message decrypted under, for placing the turn when its
+           * conversation is not mapped (a mapped conversation already names its person).
+           */
+          _turnGroup(turn) {
+            return turn.groupId ?? this._attestedGroupOf(turn.convId);
+          }
+          /** The people with a 1:1 turn in progress, one turn each (#1418). */
+          _activeTurnPeople() {
+            const people = this._dmPeople();
+            const out = /* @__PURE__ */ new Map();
+            for (const turn of this._activeTurns) {
+              if (turn.convId && (turn.groupId ? this._isNonDmConversation(turn.convId) : !this._isOwnDmConversation(turn.convId))) continue;
+              const gid = this._turnGroup(turn);
+              const key = people?.keyOf(turn.convId, gid) ?? (gid ? `g:${gid}` : `c:${turn.convId}`);
+              if (!out.has(key)) out.set(key, turn);
+            }
+            return out;
+          }
+          /**
+           * The person an untargeted owner message is for (#1418), in order:
+           *
+           *  1. the turn this call chain belongs to — always, and only, that
+           *     conversation, reached on the group its message decrypted under. A turn
+           *     never borrows another conversation's turn: one it cannot place fails
+           *     closed to its own conversation. Work the turn left running (a timer, a
+           *     dispatch orphaned by the turn budget) stays with that person for
+           *     `PERSON_INVOLVED_WINDOW_MS` after the turn, then is proactive (4);
+           *  2. with no turn context (a skill's HTTP call), the one person with a turn
+           *     in progress;
+           *  3. the last inbound 1:1 message, if it is recent — a reply produced in
+           *     response to it;
+           *  4. otherwise the content is proactive: the PRIMARY conversation's person.
+           */
+          _involvedPerson() {
+            const person = (convId, groupId, reason) => ({
+              convId,
+              groupId: groupId ?? this._attestedGroupOf(convId) ?? (convId ? this._sessionGroupIds.get(convId) : void 0),
+              reason
+            });
+            const turn = this._currentTurn();
+            if (turn && turn !== "expired") {
+              return person(turn.convId ?? this._conversationOfGroup(turn.groupId), turn.groupId, turn.ended ? "outlived-turn" : "turn");
+            }
+            if (turn === "expired") return this._primaryPerson();
+            const active = this._activeTurnPeople();
+            if (active.size === 1) {
+              const [only] = active.values();
+              return person(only.convId ?? this._conversationOfGroup(only.groupId), only.groupId, "active-turn");
+            }
+            const last = this._lastInboundDm;
+            if (active.size === 0 && last && Date.now() - last.at < PERSON_INVOLVED_WINDOW_MS) {
+              return person(last.convId ?? this._conversationOfGroup(last.groupId), last.groupId, "last-inbound");
+            }
+            return this._primaryPerson();
+          }
+          /** The PRIMARY conversation's person — where proactive content goes. */
+          _primaryPerson() {
+            const primary = this._primaryConversationId || this._persisted?.primaryConversationId || void 0;
+            const primaryGroup = (primary ? this._sessionGroupIds.get(primary) : void 0) ?? this._persisted?.groupId;
+            return {
+              convId: primary,
+              groupId: primaryGroup ?? this._attestedGroupOf(primary),
+              reason: "primary"
+            };
+          }
+          /**
+           * #1418 — would an untargeted owner send right now have to GUESS between
+           * people? True only with no turn context while two or more people have a
+           * turn in progress. The local HTTP API refuses such a request (409) and
+           * asks for a conversation instead of picking one.
+           */
+          isUntargetedOwnerAmbiguous(options) {
+            if (options?.conversationId !== void 0 || options?.audience === "everyone") return false;
+            if (this._currentTurn()) return false;
+            if (!this._isMultiPerson()) return false;
+            return this._activeTurnPeople().size > 1;
+          }
+          /**
+           * Who an UNTARGETED owner send reaches, or `null` for "every session, as
+           * before". `null` when the caller chose `audience: "everyone"`, and when the
+           * agent has one person (or cannot tell how many) — nothing to choose
+           * between, so its recipients are exactly what they always were.
+           */
+          _untargetedAudience(options) {
+            if (options?.conversationId !== void 0) return null;
+            if (options?.audience === "everyone") return null;
+            if (!this._isMultiPerson()) return null;
+            return this._involvedPerson();
+          }
+          /** A stable name for who an untargeted owner send reaches right now, or undefined when that is "everyone, as before". */
+          _audienceTag(options) {
+            if (options?.audience === "everyone") return "everyone";
+            const person = this._untargetedAudience(options);
+            return person ? `person:${person.groupId ?? person.convId ?? ""}` : void 0;
+          }
+          /** Does conversation `convId` belong to `person`? A conversation nothing ties to them fails closed. */
+          _isPersonsConversation(person, convId) {
+            if (convId === person.convId) return true;
+            const gid = this._sessionGroupIds.get(convId);
+            if (gid !== void 0 && gid === person.groupId) return true;
+            const people = this._dmPeople();
+            const theirs = people?.keyOf(person.convId, person.groupId);
+            return theirs !== void 0 && people.keyOf(convId, gid) === theirs;
+          }
+          /**
+           * #1418: the Double Ratchet sessions an owner-bound FILE (attachment or
+           * artifact) goes to, bucketed by the conversation its blob is uploaded
+           * under. The blob is uploaded under a conversation of the person who gets
+           * it — the backend only lets that conversation's participants download it —
+           * so an explicit "everyone" uploads once per person.
+           */
+          _ownerFileRecipients(routing) {
+            const roomConvIds = /* @__PURE__ */ new Set();
+            for (const room of Object.values(this._persisted?.rooms ?? {})) {
+              for (const cid of room.conversationIds ?? []) roomConvIds.add(cid);
+            }
+            const live = [...this._sessions].filter(([convId, session]) => session.activated && !roomConvIds.has(convId)).map(([convId]) => convId);
+            const person = routing?.conversationId !== void 0 ? { convId: routing.conversationId, groupId: this._sessionGroupIds.get(routing.conversationId), reason: "target" } : this._untargetedAudience(routing);
+            if (person) {
+              const convIds = live.filter((convId) => this._isPersonsConversation(person, convId));
+              const uploadConvId = person.convId ?? convIds[0];
+              return uploadConvId && convIds.length > 0 ? [{ uploadConvId, convIds }] : [];
+            }
+            if (live.length === 0) return [];
+            if (!this._isMultiPerson()) {
+              return [{ uploadConvId: this._primaryConversationId, convIds: live }];
+            }
+            const people = this._dmPeople();
+            const buckets = /* @__PURE__ */ new Map();
+            for (const convId of live) {
+              const gid = this._sessionGroupIds.get(convId);
+              const key = people?.keyOf(convId, gid) ?? gid ?? `c:${convId}`;
+              buckets.set(key, [...buckets.get(key) ?? [], convId]);
+            }
+            return [...buckets.values()].map((convIds) => ({
+              uploadConvId: convIds.includes(this._primaryConversationId) ? this._primaryConversationId : convIds[0],
+              convIds
+            }));
+          }
           /** The group a DM history entry belongs to (see the forms above). */
           _dmEntryScope(entry, known) {
             const t2 = entry.topicId ?? "";
@@ -72709,6 +73157,7 @@ ${text}`;
             Promise.resolve().then(() => (init_openclaw_compat(), openclaw_compat_exports)).then(({ requestHeartbeatNow: requestHeartbeatNow2 }) => requestHeartbeatNow2({ reason: "channel-send" })).catch(() => {
             });
             const targetConvId = options?.conversationId;
+            const audience = this._untargetedAudience(options);
             const explicitTopicId = options?.topicId;
             const targeted = targetConvId !== void 0;
             const frameHistoryContexts = [];
@@ -72747,7 +73196,7 @@ ${text}`;
             if (this._persisted?.mlsGroups && this._state === "ready" && this._ws) {
               const targetSharedGid = targetConvId ? this._sessionGroupIds?.get(targetConvId) : void 0;
               console.log(
-                `[SecureChannel] send(): considering ${Object.keys(this._persisted.mlsGroups).length} shared group(s); targetConvId=${targetConvId ? targetConvId.slice(0, 8) : "(none \u2014 broadcast)"} targetSharedGid=${targetSharedGid ? targetSharedGid.slice(0, 8) : "(none)"}`
+                `[SecureChannel] send(): considering ${Object.keys(this._persisted.mlsGroups).length} shared group(s); targetConvId=${targetConvId ? targetConvId.slice(0, 8) : audience ? `(none \u2014 person involved: ${audience.reason})` : "(none \u2014 everyone)"} targetSharedGid=${targetSharedGid ? targetSharedGid.slice(0, 8) : audience?.groupId ? audience.groupId.slice(0, 8) : "(none)"}`
               );
               const skipped = [];
               for (const [gid, entry] of Object.entries(this._persisted.mlsGroups)) {
@@ -72755,6 +73204,10 @@ ${text}`;
                   skipped.push(`${gid.slice(0, 8)}:not-target`);
                   continue;
                 }
+                if (audience && gid !== audience.groupId) {
+                  skipped.push(`${gid.slice(0, 8)}:not-involved`);
+                  continue;
+                }
                 if (!entry.mlsGroupId) {
                   skipped.push(`${gid.slice(0, 8)}:no-mlsGroupId`);
                   continue;
@@ -72811,6 +73264,7 @@ ${text}`;
               if (!session.activated) continue;
               if (roomConvIds.has(convId)) continue;
               if (targetConvId && convId !== targetConvId) continue;
+              if (audience && !this._isPersonsConversation(audience, convId)) continue;
               const convGroupId = this._sessionGroupIds?.get(convId);
               if (convGroupId && sentSharedGroupIds.has(convGroupId)) {
                 sentCount++;
@@ -72929,6 +73383,7 @@ ${text}`;
             if (this._persisted?.mlsConversations && this._state === "ready" && this._ws) {
               for (const [mlsConvId, entry] of Object.entries(this._persisted.mlsConversations)) {
                 if (targetConvId && mlsConvId !== targetConvId) continue;
+                if (audience && !this._isPersonsConversation(audience, mlsConvId)) continue;
                 if (this._sessions.has(mlsConvId)) continue;
                 if (roomConvIds.has(mlsConvId)) continue;
                 const mlsOnlyConvGroupId = this._sessionGroupIds?.get(mlsConvId);
@@ -73052,7 +73507,7 @@ ${text}`;
            */
           sendActivitySpan(spanData) {
             if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-            const pluginVersion = true ? "0.23.51" : "0.0.0-dev";
+            const pluginVersion = true ? "0.23.52" : "0.0.0-dev";
             const agentName = this.config.agentName ?? "Agent";
             const resource = {
               "service.name": "agentvault-agent",
@@ -73104,7 +73559,7 @@ ${text}`;
            * Builds a structured envelope with decision metadata and sends it
            * as a high-priority message. Returns the generated decision_id.
            */
-          async sendDecisionRequest(request) {
+          async sendDecisionRequest(request, routing) {
             const decision_id = `dec_${randomUUID4().replace(/-/g, "").slice(0, 16)}`;
             const payload = JSON.stringify({
               type: "message",
@@ -73115,6 +73570,8 @@ ${text}`;
               }
             });
             await this.send(payload, {
+              conversationId: routing?.conversationId,
+              audience: routing?.audience,
               messageType: "decision_request",
               priority: "high",
               metadata: {
@@ -73521,6 +73978,7 @@ ${text}`;
             const jwt = this._deviceJwt ?? this._persisted?.deviceJwt;
             if (!jwt || !this._persisted) return false;
             let rows;
+            const reconcileStartedAt = Date.now();
             try {
               const res = await fetch(`${this.config.apiUrl}/api/v1/conversations`, {
                 headers: { Authorization: `Bearer ${jwt}` }
@@ -73549,6 +74007,19 @@ ${text}`;
             }
             this._sessionGroupIds = new Map(mine.map((r2) => [r2.id, r2.group_id]));
             this._persisted.conversationGroupIds = Object.fromEntries(this._sessionGroupIds);
+            {
+              const convs = new Set(mine.map((r2) => r2.id));
+              const groups = new Set(mine.map((r2) => r2.group_id));
+              this._lastReconcile = { at: reconcileStartedAt, convs, groups };
+              for (const [key, a2] of this._attestedInbound) {
+                if (a2.at > reconcileStartedAt) continue;
+                if (a2.convId && convs.has(a2.convId) || a2.groupId && groups.has(a2.groupId)) continue;
+                this._attestedInbound.delete(key);
+              }
+              for (const [gid, at] of this._welcomedUnmapped) {
+                if (at <= reconcileStartedAt) this._welcomedUnmapped.delete(gid);
+              }
+            }
             const joined = mine.find((r2) => this._persisted.mlsGroups?.[r2.group_id]);
             const primary = mine.find((r2) => r2.id === this._persisted.primaryConversationId) ?? joined ?? mine[0];
             if (!mine.some((r2) => r2.id === this._persisted.primaryConversationId)) {
@@ -73742,7 +74213,7 @@ ${text}`;
             }
             this._heartbeatCallback = null;
           }
-          async sendStatusAlert(alert) {
+          async sendStatusAlert(alert, routing) {
             const priority = alert.severity === "error" || alert.severity === "critical" ? "high" : "normal";
             const envelope = {
               title: alert.title,
@@ -73756,52 +74227,61 @@ ${text}`;
             await this.send(
               JSON.stringify(envelope),
               {
+                conversationId: routing?.conversationId,
+                audience: routing?.audience,
                 messageType: "status_alert",
                 priority,
                 metadata: { severity: alert.severity }
               }
             );
           }
-          async sendArtifact(artifact) {
+          async sendArtifact(artifact, routing) {
             if (this._state !== "ready" || this._sessions.size === 0 || !this._ws) {
               throw new Error("Channel is not ready");
             }
-            const attachMeta = await this._uploadAttachment(artifact.filePath, this._primaryConversationId);
-            const envelope = JSON.stringify({
-              type: "artifact",
-              blob_id: attachMeta.blobId,
-              blob_url: attachMeta.blobUrl,
-              filename: artifact.filename,
-              mime_type: artifact.mimeType,
-              size_bytes: attachMeta.size,
-              description: artifact.description,
-              attachment: attachMeta
-            });
             const messageGroupId = randomUUID4();
             const pendingWsSends = [];
-            for (const [convId, session] of this._sessions) {
-              if (!session.activated) continue;
-              const encrypted = session.ratchet.encrypt(envelope);
-              const transport = encryptedMessageToTransport(encrypted);
-              pendingWsSends.push(
-                JSON.stringify({
-                  event: "message",
-                  data: {
-                    conversation_id: convId,
-                    header_blob: transport.header_blob,
-                    ciphertext: transport.ciphertext,
-                    message_group_id: messageGroupId,
-                    message_type: "artifact_share"
-                  }
-                })
-              );
+            const buckets = this._ownerFileRecipients(routing);
+            if (buckets.length === 0) {
+              console.warn("[SecureChannel] sendArtifact(): no live session for the person involved \u2014 nothing sent");
+              throw new Error("No conversation is ready to receive this file");
+            }
+            for (const bucket of buckets) {
+              const attachMeta = await this._uploadAttachment(artifact.filePath, bucket.uploadConvId);
+              const envelope = JSON.stringify({
+                type: "artifact",
+                blob_id: attachMeta.blobId,
+                blob_url: attachMeta.blobUrl,
+                filename: artifact.filename,
+                mime_type: artifact.mimeType,
+                size_bytes: attachMeta.size,
+                description: artifact.description,
+                attachment: attachMeta
+              });
+              for (const convId of bucket.convIds) {
+                const session = this._sessions.get(convId);
+                const encrypted = session.ratchet.encrypt(envelope);
+                const transport = encryptedMessageToTransport(encrypted);
+                pendingWsSends.push(
+                  JSON.stringify({
+                    event: "message",
+                    data: {
+                      conversation_id: convId,
+                      header_blob: transport.header_blob,
+                      ciphertext: transport.ciphertext,
+                      message_group_id: messageGroupId,
+                      message_type: "artifact_share"
+                    }
+                  })
+                );
+              }
             }
             await this._persistState();
             for (const frame of pendingWsSends) {
               this._ws.send(frame);
             }
           }
-          async sendActionConfirmation(confirmation) {
+          async sendActionConfirmation(confirmation, routing) {
             const envelope = {
               type: "action_confirmation",
               action: confirmation.action,
@@ -73812,6 +74292,8 @@ ${text}`;
             await this.send(
               JSON.stringify(envelope),
               {
+                conversationId: routing?.conversationId,
+                audience: routing?.audience,
                 messageType: "action_confirmation",
                 metadata: { status: confirmation.status }
               }
@@ -73917,9 +74399,23 @@ ${text}`;
             } else {
               return { ok: false, destination: { kind: "owner" }, error: "Unknown target kind", timestamp: ts };
             }
+            if (resolved.kind === "owner" && options?.refuseIfAmbiguous && this.isUntargetedOwnerAmbiguous(options)) {
+              console.log(`[deliver] target=owner content=${content.type} result=REFUSED: ambiguous (several people mid-turn)`);
+              return { ok: false, ambiguous: true, destination: resolved, error: AMBIGUOUS_OWNER_ERROR, timestamp: ts };
+            }
             let dedupeKey = null;
             try {
-              dedupeKey = outboundDedupeKey(resolved, content, options);
+              let audienceTag;
+              try {
+                audienceTag = resolved.kind === "owner" && options?.conversationId === void 0 ? this._audienceTag(options) : void 0;
+              } catch {
+                audienceTag = void 0;
+              }
+              dedupeKey = outboundDedupeKey(
+                resolved,
+                content,
+                audienceTag ? { ...options, conversationId: audienceTag } : options
+              );
               if (dedupeKey) {
                 const now = Date.now();
                 const recent = this._recentDeliveries ??= /* @__PURE__ */ new Map();
@@ -73939,6 +74435,10 @@ ${text}`;
             }
             try {
               let decisionId;
+              const ownerRouting = {
+                conversationId: options?.conversationId,
+                audience: options?.audience
+              };
               if (content.type === "text") {
                 if (resolved.kind === "room") {
                   await this.sendToRoom(resolved.id, content.text, {
@@ -73957,6 +74457,7 @@ ${text}`;
                 } else {
                   await this.send(content.text, {
                     conversationId: options?.conversationId,
+                    audience: options?.audience,
                     topicId: options?.topicId,
                     messageType: options?.metadata?.message_type,
                     priority: options?.priority,
@@ -73969,7 +74470,7 @@ ${text}`;
                   console.log(`[deliver] target=${resolved.kind}:${resolved.id} content=decision_request result=FAIL: ${err}`);
                   return { ok: false, destination: resolved, error: err, timestamp: ts };
                 }
-                decisionId = await this.sendDecisionRequest(content.request);
+                decisionId = await this.sendDecisionRequest(content.request, ownerRouting);
               } else if (content.type === "status_alert") {
                 if (resolved.kind === "room") {
                   const envelope = {
@@ -73987,7 +74488,7 @@ ${text}`;
                     metadata: { severity: content.alert.severity }
                   });
                 } else if (resolved.kind === "owner") {
-                  await this.sendStatusAlert(content.alert);
+                  await this.sendStatusAlert(content.alert, ownerRouting);
                 } else {
                   return { ok: false, destination: resolved, error: "Status alerts cannot be sent to A2A targets", timestamp: ts };
                 }
@@ -73995,7 +74496,7 @@ ${text}`;
                 if (resolved.kind === "room") {
                   await this.sendActionConfirmationToRoom(resolved.id, content.confirmation);
                 } else if (resolved.kind === "owner") {
-                  await this.sendActionConfirmation(content.confirmation);
+                  await this.sendActionConfirmation(content.confirmation, ownerRouting);
                 } else {
                   return { ok: false, destination: resolved, error: "Action confirmations cannot be sent to A2A targets", timestamp: ts };
                 }
@@ -74003,13 +74504,14 @@ ${text}`;
                 if (resolved.kind !== "owner") {
                   return { ok: false, destination: resolved, error: "Artifacts can only be sent to owner", timestamp: ts };
                 }
-                await this.sendArtifact(content.artifact);
+                await this.sendArtifact(content.artifact, ownerRouting);
               } else if (content.type === "attachment") {
                 if (resolved.kind !== "owner") {
                   return { ok: false, destination: resolved, error: "Attachments can only be sent to owner", timestamp: ts };
                 }
                 await this.sendWithAttachment(content.text, content.filePath, {
-                  topicId: options?.topicId
+                  topicId: options?.topicId,
+                  ...ownerRouting
                 });
               }
               const targetLabel = resolved.kind === "owner" ? "owner" : `${resolved.kind}:${resolved.id?.slice(0, 8)}...`;
@@ -75182,7 +75684,7 @@ ${text}`;
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.51" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.52" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -75510,7 +76012,7 @@ ${text}`;
                         agentVersion: this.config.agentVersion ?? "0.0.0",
                         // __AV_VERSION__ is injected by esbuild from package.json at build time.
                         // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                        pluginVersion: true ? "0.23.51" : "0.0.0-dev"
+                        pluginVersion: true ? "0.23.52" : "0.0.0-dev"
                       });
                       this._telemetryReporter.startAutoFlush(3e4);
                     }
@@ -76051,9 +76553,18 @@ ${text}`;
                 messageType,
                 { groupId: dmGroupId, conversationId: convId }
               );
+              const dmConvId = convId ?? this._conversationOfGroup(dmGroupId);
+              this._noteInboundDm(dmConvId, dmGroupId, { createdAt: data.created_at, senderDeviceId });
+              this._reconcileForUnmappedGroup(dmGroupId);
               const metadata = {
                 messageId: data.message_id ?? `mls_${Date.now()}`,
-                conversationId: convId ?? this._primaryConversationId,
+                // A frame on a KNOWN group that no conversation maps yet is not the
+                // primary person's: leave the conversation unnamed rather than hand
+                // the reply to someone else; `conversationGroupId` still places it.
+                conversationId: dmConvId ?? (dmGroupId ? void 0 : this._primaryConversationId),
+                // #1418: the group this message decrypted under — attested, so a turn
+                // answers here even when the local map is stale.
+                conversationGroupId: dmGroupId,
                 timestamp: data.created_at ?? (/* @__PURE__ */ new Date()).toISOString(),
                 topicId,
                 // #621: positive attestation that this decrypted under the OWNER'S 1:1
@@ -76308,6 +76819,13 @@ ${messageText}`;
                 // envelope text before the fold; `emitText` is the folded copy.
                 caption: messageText
               };
+              if (!roomId) {
+                this._noteInboundDm(convId, void 0, {
+                  createdAt: msgData.created_at,
+                  senderDeviceId: msgData.sender_device_id
+                });
+                this._reconcileForUnmappedConversation(convId);
+              }
               this.emit("message", emitText, metadata);
               Promise.resolve(this.config.onMessage?.(emitText, metadata)).catch((err) => {
                 console.error("[SecureChannel] onMessage callback error:", err);
@@ -76456,34 +76974,41 @@ ${baseText}`;
             if (this._state !== "ready" || this._sessions.size === 0 || !this._ws) {
               throw new Error("Channel is not ready");
             }
-            const attachMeta = await this._uploadAttachment(filePath, this._primaryConversationId);
             const messageGroupId = randomUUID4();
             const pendingWsSends = [];
             const frameHistoryContexts = [];
-            for (const [convId, session] of this._sessions) {
-              if (!session.activated) continue;
-              const topicId = this._topicForFrame(void 0, convId, options?.topicId, false, false);
-              const envelope = JSON.stringify({
-                type: "message",
-                text: plaintext,
-                topicId,
-                attachment: attachMeta
-              });
-              const encrypted = session.ratchet.encrypt(envelope);
-              const transport = encryptedMessageToTransport(encrypted);
-              pendingWsSends.push(
-                JSON.stringify({
-                  event: "message",
-                  data: {
-                    conversation_id: convId,
-                    header_blob: transport.header_blob,
-                    ciphertext: transport.ciphertext,
-                    message_group_id: messageGroupId,
-                    topic_id: topicId
-                  }
-                })
-              );
-              frameHistoryContexts.push(this._dmHistoryContext(topicId, void 0, convId));
+            const buckets = this._ownerFileRecipients(options);
+            if (buckets.length === 0) {
+              console.warn("[SecureChannel] sendWithAttachment(): no live session for the person involved \u2014 nothing sent");
+              throw new Error("No conversation is ready to receive this file");
+            }
+            for (const bucket of buckets) {
+              const attachMeta = await this._uploadAttachment(filePath, bucket.uploadConvId);
+              for (const convId of bucket.convIds) {
+                const session = this._sessions.get(convId);
+                const topicId = this._topicForFrame(void 0, convId, options?.topicId, false, false);
+                const envelope = JSON.stringify({
+                  type: "message",
+                  text: plaintext,
+                  topicId,
+                  attachment: attachMeta
+                });
+                const encrypted = session.ratchet.encrypt(envelope);
+                const transport = encryptedMessageToTransport(encrypted);
+                pendingWsSends.push(
+                  JSON.stringify({
+                    event: "message",
+                    data: {
+                      conversation_id: convId,
+                      header_blob: transport.header_blob,
+                      ciphertext: transport.ciphertext,
+                      message_group_id: messageGroupId,
+                      topic_id: topicId
+                    }
+                  })
+                );
+                frameHistoryContexts.push(this._dmHistoryContext(topicId, void 0, convId));
+              }
             }
             await this._persistState();
             let deliveredFrames = 0;
@@ -76643,10 +77168,15 @@ ${baseText}`;
               `[SecureChannel] New owner device linked: ${event.owner_device_id.slice(0, 8)}...`
             );
             try {
+              if (event.group_id && !this._sessionGroupIds.has(event.conversation_id)) {
+                this._sessionGroupIds.set(event.conversation_id, event.group_id);
+                this._persisted.conversationGroupIds = Object.fromEntries(this._sessionGroupIds);
+              }
               if (!event.owner_identity_public_key) {
                 console.error(
                   `[SecureChannel] device_linked event missing owner keys for conv ${event.conversation_id.slice(0, 8)}...`
                 );
+                await this._persistState();
                 return;
               }
               const identity = this._persisted.identityKeypair;
@@ -76681,10 +77211,6 @@ ${baseText}`;
               if (event.owner_hub_id) {
                 this._persisted.ownerHubId = event.owner_hub_id;
               }
-              if (event.group_id && !this._sessionGroupIds.has(event.conversation_id)) {
-                this._sessionGroupIds.set(event.conversation_id, event.group_id);
-                this._persisted.conversationGroupIds = Object.fromEntries(this._sessionGroupIds);
-              }
               await this._persistState();
               console.log(
                 `[SecureChannel] Session initialized for device ${event.owner_device_id.slice(0, 8)}... (conv ${event.conversation_id.slice(0, 8)}...)`
@@ -78354,6 +78880,10 @@ ${baseText}`;
                   await this._persistState();
                 }
                 console.log(`[SecureChannel] Joined shared 1:1 MLS group for group ${conversationGroupId.slice(0, 8)} via Welcome (epoch=${mgr.epoch})`);
+                if (!this._isMappedGroup(conversationGroupId)) {
+                  this._welcomedUnmapped.set(conversationGroupId, Date.now());
+                }
+                this._reconcileForUnmappedGroup(conversationGroupId);
                 await this._flushMlsHold(conversationGroupId);
                 return;
               }
@@ -78995,6 +79525,7 @@ ${baseText}`;
                       ownerDm1to1: true,
                       ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                     };
+                    this._noteInboundDm(msg.conversation_id, void 0, { createdAt: msg.created_at, senderDeviceId: msg.sender_device_id });
                     this.emit("message", messageText, metadata);
                     Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
                       console.error("[SecureChannel] onMessage callback error:", err);
@@ -79601,6 +80132,7 @@ ${baseText}`;
                         ownerDm1to1: true,
                         ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                       };
+                      this._noteInboundDm(msg.conversation_id, void 0, { createdAt: msg.created_at, senderDeviceId: msg.sender_device_id });
                       this.emit("message", messageText, metadata);
                       Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
                         console.error("[SecureChannel] onMessage callback error:", err);
@@ -79921,6 +80453,7 @@ ${baseText}`;
                         ownerDm1to1: true,
                         ...decisionReply ? { messageType: "decision_response", decision: decisionReply } : {}
                       };
+                      this._noteInboundDm(msg.conversation_id, void 0, { createdAt: msg.created_at, senderDeviceId: msg.sender_device_id });
                       this.emit("message", messageText, metadata);
                       Promise.resolve(this.config.onMessage?.(messageText, metadata)).catch((err) => {
                         console.error("[SecureChannel] onMessage callback error:", err);
@@ -80941,7 +81474,7 @@ ${actionsText}`);
         "use strict";
         init_llm_response_parser();
         init_llm_cost();
-        traceStore = new AsyncLocalStorage();
+        traceStore = new AsyncLocalStorage2();
       }
     });
     init_tool_audit = __esm2({
@@ -101689,7 +102222,7 @@ data:
         await init_skill_telemetry();
         await init_policy_enforcer();
         init_room_protocol();
-        VERSION = true ? "0.23.51" : "0.0.0-dev";
+        VERSION = true ? "0.23.52" : "0.0.0-dev";
       }
     });
     await init_index();
@@ -102341,7 +102874,7 @@ var init_cli = __esm({
     "use strict";
     await init_dist();
     init_driver();
-    VERSION2 = "0.1.6";
+    VERSION2 = "0.1.7";
     HELP = `AgentVault OpenAI Bridge ${VERSION2}
 Usage: AV_AGENT_NAME=<name> agentvault-openai-bridge <command>
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "@agentvault/openai-bridge", "version": "0.1.6", "type": "module",
+  "name": "@agentvault/openai-bridge", "version": "0.1.7", "type": "module",
   "description": "AgentVault OpenAI Codex bridge for encrypted owner messages and rooms",
   "main": "dist/index.js", "types": "dist/index.d.ts",
   "bin": { "agentvault-openai-bridge": "dist/index.js" },