@agentvault/openai-bridge 0.1.8 → 0.1.10

package/dist/index.js

@@ -21,12 +21,17 @@ __export(dist_exports, {
   CredentialStore: () => CredentialStore,
   PolicyEnforcer: () => PolicyEnforcer,
   SecureChannel: () => SecureChannel,
+  TOOL_INVOKE_SPAN_NAME: () => TOOL_INVOKE_SPAN_NAME,
   VERSION: () => VERSION,
   agentVaultPlugin: () => agentVaultPlugin,
+  buildToolInvokeSpan: () => buildToolInvokeSpan,
   checkGateway: () => checkGateway,
+  classifyDeliveryReceipt: () => classifyDeliveryReceipt,
+  classifyToolError: () => classifyToolError,
   clearHistoryRecoveryCode: () => clearHistoryRecoveryCode,
   configureHistoryRecoveryCode: () => configureHistoryRecoveryCode,
   createMcpHandler: () => createMcpHandler,
+  currentToolConversation: () => currentToolConversation,
   drainSkillSpans: () => drainSkillSpans,
   getActiveChannel: () => getActiveChannel,
   getMcpStatus: () => getMcpStatus,
@@ -46,17 +51,18 @@ __export(dist_exports, {
   managedRoutesRequested: () => managedRoutesRequested,
   mergeSkills: () => mergeSkills,
   offerHistoryRecoveryConfiguration: () => offerHistoryRecoveryConfiguration,
-  onAgentEvent: () => onAgentEvent,
-  onSessionTranscriptUpdate: () => onSessionTranscriptUpdate,
   owesRoomReply: () => owesRoomReply,
   parseMentions: () => parseMentions,
   parseSkillMd: () => parseSkillMd,
   parseTarget: () => parseTarget,
   readMaskedHistoryRecoveryCode: () => readMaskedHistoryRecoveryCode,
   reportSkillInvocation: () => reportSkillInvocation,
+  reportToolInvoke: () => reportToolInvoke,
   requestHeartbeatNow: () => requestHeartbeatNow,
   resolveAccount: () => resolveAccount,
   runHistoryRecoveryCommand: () => runHistoryRecoveryCommand,
+  runWithToolConversation: () => runWithToolConversation,
+  safeErrorKind: () => safeErrorKind,
   sendDecisionToOwner: () => sendDecisionToOwner,
   sendToOwner: () => sendToOwner,
   sendToRoom: () => sendToRoom,
@@ -89,12 +95,17 @@ import { homedir } from "node:os";
 import { dirname, join as join4, resolve } from "node:path";
 import { Writable } from "node:stream";
 import { createInterface } from "node:readline";
+import { createRequire } from "node:module";
+import { join as joinPath } from "node:path";
+import { pathToFileURL } from "node:url";
+import { AsyncLocalStorage } from "node:async_hooks";
+import { randomBytes as randomBytes3 } from "node:crypto";
 import { Readable } from "node:stream";
 import { readdir as readdir2, readFile as readFile4, writeFile as writeFile2, rename as rename4, stat, unlink, mkdir as mkdir3 } from "node:fs/promises";
 import { join as join5 } from "node:path";
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { EventEmitter } from "node:events";
-import { AsyncLocalStorage } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 import { createServer } from "node:http";
 import { randomUUID as randomUUID4, createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
@@ -104,7 +115,7 @@ import { join as join6 } from "node:path";
 import { readFile as readFile5 } from "node:fs/promises";
 import WebSocket from "ws";
 import { resolve as resolve2 } from "node:path";
-import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage3 } from "node:async_hooks";
 import { Http2ServerRequest as Http2ServerRequest2 } from "http2";
 import { Http2ServerRequest } from "http2";
 import { Readable as Readable2 } from "stream";
@@ -9294,7 +9305,7 @@ function eddsa(Point, cHash, eddsaOpts = {}) {
   });
   const { prehash } = eddsaOpts;
   const { BASE, Fp: Fp3, Fn: Fn3 } = Point;
-  const randomBytes3 = eddsaOpts.randomBytes || randomBytes2;
+  const randomBytes4 = eddsaOpts.randomBytes || randomBytes2;
   const adjustScalarBytes3 = eddsaOpts.adjustScalarBytes || ((bytes) => bytes);
   const domain = eddsaOpts.domain || ((data, ctx, phflag) => {
     _abool2(phflag, "phflag");
@@ -9376,7 +9387,7 @@ function eddsa(Point, cHash, eddsaOpts = {}) {
     signature: 2 * _size2,
     seed: _size2
   };
-  function randomSecretKey(seed = randomBytes3(lengths.seed)) {
+  function randomSecretKey(seed = randomBytes4(lengths.seed)) {
     return _abytes2(seed, lengths.seed, "seed");
   }
   function keygen(seed) {
@@ -10755,7 +10766,7 @@ function ecdsa(Point, hash, ecdsaOpts = {}) {
     bits2int: "function",
     bits2int_modN: "function"
   });
-  const randomBytes3 = ecdsaOpts.randomBytes || randomBytes2;
+  const randomBytes4 = ecdsaOpts.randomBytes || randomBytes2;
   const hmac4 = ecdsaOpts.hmac || ((key, ...msgs) => hmac2(hash, key, concatBytes2(...msgs)));
   const { Fp: Fp3, Fn: Fn3 } = Point;
   const { ORDER: CURVE_ORDER, BITS: fnBits } = Fn3;
@@ -10910,7 +10921,7 @@ function ecdsa(Point, hash, ecdsaOpts = {}) {
     const d2 = _normFnElement(Fn3, privateKey);
     const seedArgs = [int2octets(d2), int2octets(h1int)];
     if (extraEntropy != null && extraEntropy !== false) {
-      const e = extraEntropy === true ? randomBytes3(lengths.secretKey) : extraEntropy;
+      const e = extraEntropy === true ? randomBytes4(lengths.secretKey) : extraEntropy;
       seedArgs.push(ensureBytes("extraEntropy", e));
     }
     const seed = concatBytes2(...seedArgs);
@@ -11788,11 +11799,11 @@ async function joinWithFirstMatchingKp(welcomeBytes, candidates) {
   return null;
 }
 function ownIdentity() {
-  const v2 = true ? "0.23.53" : FALLBACK;
+  const v2 = true ? "0.23.61" : FALLBACK;
   return `${PACKAGE}@${v2}`;
 }
 function buildSha() {
-  const raw = true ? "3f2a933" : "";
+  const raw = true ? "129e537" : "";
   const cleaned = (raw ?? "").trim();
   return !cleaned || cleaned === "unknown" ? null : cleaned;
 }
@@ -11944,13 +11955,18 @@ async function enrollDevice(apiUrl, inviteToken, identityPkHex, ephemeralPkHex,
   return res.json();
 }
 async function pollDeviceStatus(apiUrl, deviceId) {
-  const res = await fetch(`${apiUrl}/api/v1/devices/${deviceId}/status`);
+  const res = await fetch(`${apiUrl}/api/v1/devices/${deviceId}/status`, {
+    signal: AbortSignal.timeout(1e4)
+  });
   if (res.status === 429) {
     return { device_id: deviceId, status: "PENDING", fingerprint: "", rateLimited: true };
   }
   if (!res.ok) {
     const detail = await res.text();
-    throw new Error(`Status poll failed (${res.status}): ${detail}`);
+    const err = new Error(`Status poll failed (${res.status}): ${detail}`);
+    err.httpStatus = res.status;
+    err.body = detail;
+    throw err;
   }
   return res.json();
 }
@@ -12000,9 +12016,10 @@ function a2aChannelSignature(channels) {
     })).sort((a2, b2) => (a2.id ?? "").localeCompare(b2.id ?? ""))
   );
 }
-function mlsMembershipFromStatus(status) {
+function mlsMembershipFromStatus(status, detail) {
   if (status === 200) return true;
-  if (status === 403 || status === 404) return false;
+  if (status === 404) return false;
+  if (status === 403 && detail === NOT_A_MEMBER_DETAIL) return false;
   return null;
 }
 function sanitizeError(error2) {
@@ -12536,6 +12553,13 @@ function decodeStrictBase64(value) {
   if (decoded.toString("base64") !== value) throw new Error("Invalid history backup encoding");
   return new Uint8Array(decoded);
 }
+function importerFrom(root3) {
+  const req = createRequire(joinPath(root3, "package.json"));
+  return (specifier) => import(
+    /* @vite-ignore */
+    pathToFileURL(req.resolve(specifier)).href
+  );
+}
 async function resolveSdkFn(candidates, importer = defaultImporter) {
   for (const { specifier, symbol } of candidates) {
     try {
@@ -12561,40 +12585,105 @@ async function requestHeartbeatNow(opts) {
   }
   return false;
 }
-async function onAgentEvent(callback) {
-  if (_agentEventFn === null) {
-    _agentEventFn = await resolveSdkFn(AGENT_EVENT_CANDIDATES);
-  }
-  if (typeof _agentEventFn === "function") {
-    try {
-      return _agentEventFn(callback);
-    } catch {
-      return () => {
-      };
+function safeErrorKind(value) {
+  if (typeof value !== "string") return UNCLASSIFIED_ERROR;
+  if (KNOWN_CODES.has(value)) return value;
+  if (!CLASS_NAME_RE.test(value)) return UNCLASSIFIED_ERROR;
+  if ((value.match(/[0-9]/g) ?? []).length > 3) return UNCLASSIFIED_ERROR;
+  return value;
+}
+function codeForText(text) {
+  const t2 = text.replace(/^[A-Za-z]*Error: /, "");
+  for (const [re2, code] of ERROR_TEXT_CODES) if (re2.test(t2)) return code;
+  return void 0;
+}
+function classifyToolError(err) {
+  try {
+    if (err instanceof Error) {
+      return codeForText(err.message) ?? safeErrorKind(err.constructor?.name);
     }
+    if (typeof err === "string") return codeForText(err) ?? UNCLASSIFIED_ERROR;
+  } catch {
   }
-  return () => {
+  return UNCLASSIFIED_ERROR;
+}
+function classifyDeliveryReceipt(receipt) {
+  if (!receipt) return "no_receipt";
+  if (receipt.ambiguous) return "ambiguous_target";
+  if (typeof receipt.error === "string") return codeForText(receipt.error) ?? "delivery_failed";
+  return "delivery_failed";
+}
+async function runWithToolConversation(conversation, fn) {
+  const store = {
+    conversation: conversation.kind === "unknown" || !conversation.id ? { kind: "unknown" } : { kind: conversation.kind, id: conversation.id },
+    ended: false
   };
+  try {
+    return await _conversation.run(store, fn);
+  } finally {
+    store.ended = true;
+  }
 }
-async function onSessionTranscriptUpdate(callback) {
-  if (_transcriptFn === null) {
-    _transcriptFn = await resolveSdkFn(TRANSCRIPT_CANDIDATES);
+function currentToolConversation() {
+  const store = _conversation.getStore();
+  if (!store || store.ended) return { kind: "unknown" };
+  return store.conversation;
+}
+function conversationForTarget(target, opts = {}) {
+  if (typeof opts.conversationId === "string" && opts.conversationId) {
+    return { kind: "direct", id: opts.conversationId };
   }
-  if (typeof _transcriptFn === "function") {
-    try {
-      return _transcriptFn(callback);
-    } catch {
-      return () => {
-      };
-    }
+  const turn = currentToolConversation();
+  if (!target || target.kind === "context") return turn;
+  switch (target.kind) {
+    case "room":
+      return target.roomId ? { kind: "room", id: target.roomId } : { kind: "unknown" };
+    case "owner":
+      return turn.kind === "direct" ? turn : { kind: "unknown" };
+    default:
+      return { kind: "unknown" };
   }
-  return () => {
+}
+function buildToolInvokeSpan(report) {
+  const isError = report.outcome === "error";
+  const outcome = isError ? "error" : report.outcome === "cancelled" ? "cancelled" : "success";
+  const durationMs = Math.max(0, Math.round(Number(report.durationMs) || 0));
+  const endTime = report.endTime ?? Date.now();
+  const conv = report.conversation ?? currentToolConversation();
+  const kind = conv.kind === "room" || conv.kind === "direct" ? conv.kind : "unknown";
+  const attributes = {
+    "tool.name": TOOL_NAME_RE.test(report.toolName) ? report.toolName : "unknown",
+    "tool.outcome": outcome,
+    "av.conversation_kind": kind,
+    "tool.duration_ms": durationMs
+  };
+  if (isError) attributes["tool.error_kind"] = safeErrorKind(report.errorKind);
+  const resets = report.limitResetsAt;
+  if (attributes["tool.error_kind"] === "plan_limit_reached" && typeof resets === "number" && Number.isInteger(resets) && resets > 0 && resets < 1e11) {
+    attributes["av.limit_resets_at"] = resets;
+  }
+  if (kind !== "unknown" && typeof conv.id === "string" && conv.id) {
+    attributes["av.conversation_id"] = conv.id.slice(0, 64);
+  }
+  return {
+    traceId: randomBytes3(16).toString("hex"),
+    spanId: randomBytes3(8).toString("hex"),
+    name: TOOL_INVOKE_SPAN_NAME,
+    kind: "internal",
+    startTime: endTime - durationMs,
+    endTime,
+    attributes,
+    // OTLP codes: 1 = ok, 2 = error (the backend stores "ok" / "error").
+    // A cancellation is not a problem: OK status, outcome "cancelled".
+    status: { code: isError ? 2 : 1 }
   };
 }
-function _resetCompatCacheForTest() {
-  _heartbeatFn = null;
-  _agentEventFn = null;
-  _transcriptFn = null;
+function reportToolInvoke(sink, report) {
+  try {
+    if (!sink || typeof sink.reportCustomSpan !== "function") return;
+    sink.reportCustomSpan(buildToolInvokeSpan(report));
+  } catch {
+  }
 }
 function ownerRoutingFrom(parsed) {
   const out = {};
@@ -12620,6 +12709,34 @@ function statusOf(receipt) {
   return receipt.ok ? 200 : 500;
 }
 async function handleSendRequest(parsed, channel) {
+  const startedAt = Date.now();
+  const result = await _handleSendRequest(parsed, channel);
+  try {
+    const body = result.body;
+    const failed = body?.ok !== true;
+    reportToolInvoke(channel.telemetry, {
+      toolName: "agentvault_send",
+      outcome: failed ? "error" : "success",
+      errorKind: !failed ? void 0 : result.status === 400 ? "invalid_request" : result.status === 409 ? "ambiguous_target" : classifyDeliveryReceipt(body),
+      durationMs: Date.now() - startedAt,
+      conversation: sendConversation(parsed)
+    });
+  } catch {
+  }
+  return result;
+}
+function sendConversation(parsed) {
+  const str = (v2) => typeof v2 === "string" && v2 ? v2 : void 0;
+  if (str(parsed.hub_address) ?? str(parsed.a2a_address) ?? str(parsed.a2aAddress) ?? str(parsed.channel_id)) {
+    return { kind: "unknown" };
+  }
+  const roomId = str(parsed.room_id);
+  if (roomId) return conversationForTarget({ kind: "room", roomId });
+  if (parsed.target === "context") return conversationForTarget({ kind: "context" });
+  if (parsed.audience === "everyone") return { kind: "unknown" };
+  return conversationForTarget({ kind: "owner" }, { conversationId: str(parsed.conversation_id) });
+}
+async function _handleSendRequest(parsed, channel) {
   const text = parsed.text;
   if (!text || typeof text !== "string") {
     return { status: 400, body: { ok: false, error: "Missing 'text' field" } };
@@ -13075,6 +13192,14 @@ function _isSelfHubAddress(ownHubAddress, target) {
   const tgt = (target ?? "").trim().toLowerCase();
   return own2.length > 0 && own2 === tgt;
 }
+function keepKnownMemberTenants(previous, next) {
+  const known = /* @__PURE__ */ new Map();
+  for (const m2 of previous) if (m2.tenantId) known.set(m2.deviceId, m2.tenantId);
+  return next.map((m2) => {
+    const tenantId = m2.tenantId ? void 0 : known.get(m2.deviceId);
+    return tenantId ? { ...m2, tenantId } : m2;
+  });
+}
 function historyErrorReason(error2) {
   let name = "Error";
   let status;
@@ -18371,7 +18496,7 @@ function reportSkillInvocation(opts) {
   spanBuffer.push(span);
   return span;
 }
-var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, AMBIGUOUS_OWNER_ERROR, init_owner_routing, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports2, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, KP_BACKOFF_INITIAL_MS, KP_BACKOFF_MAX_MS, KP_RACE_RETRY_MS, KP_RACE_RETRY_LIMIT, consoleLogger, short, WelcomeKeyPackageBackoff, init_welcome_kp_backoff, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, AGENT_EVENT_CANDIDATES, TRANSCRIPT_CANDIDATES, _heartbeatFn, _agentEventFn, _transcriptFn, init_openclaw_compat, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, _turnConversation, PERSON_INVOLVED_WINDOW_MS, ATTESTED_INBOUND_MAX, UNMAPPED_RECONCILE_COOLDOWN_MS, TOPIC_ID_RE, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
+var __create, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf, __hasOwnProp, __esm2, __commonJS, __export2, __copyProps, __toESM, SENTINEL, WRAPPERS, INSTRUCTION, init_abstention, AMBIGUOUS_OWNER_ERROR, init_owner_routing, init_envelope_text, init_mls_commit_classify, MENTION_RE, BROADCAST_NAMES, init_room_protocol, __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default, init_libsodium_sumo, a, r, t, c, libsodium_wrappers_default, init_libsodium_wrappers, init_keys, init_x3dh, MAX_SKIP, CHAIN_KEY_SEED, MSG_KEY_SEED, HEADER_KEY_SEED, DoubleRatchet, init_ratchet, init_file_crypto, DOMAIN_DID_DOCUMENT, DOMAIN_TRANSFER_INTENT, DOMAIN_TRANSFER_ACCEPT, BASE58_ALPHABET, init_did, BUILTIN_PATTERNS, ScanEngine, init_scan_engine, init_merkle, VC_CONTEXT_V2, AV_CREDENTIAL_CONTEXT, CRYPTOSUITE, BASE58_ALPHABET2, init_vc, init_transport, init_telemetry, TelemetryReporter, init_telemetry_reporter, CROCKFORD, ARGON2_OPSLIMIT, ARGON2_MEMLIMIT, SALT_BYTES, NONCE_BYTES, KEY_BYTES, BACKUP_VERSION, MAX_BACKUP_SIZE, init_backup, atitle, aobject, aopts, isLE, swap8IfBE, swap32IfBE, hasHexBuiltin, hexes, oidNist, init_utils, BSIGMA, init_blake, U32_MASK64, _32n, fromNumH, fromNumL, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, rotr32H, rotr32L, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, B2B_IV, BBUF, _BLAKE2, _BLAKE2b, blake2b, init_blake2, CROCKFORD2, SALT_BYTES2, NONCE_BYTES2, KEY_BYTES2, TAG_BYTES, ENVELOPE_OVERHEAD, AAD_PREFIX, UUID_RE, UUID_V4_RE, DIGEST_ID_RE, TIMESTAMP_RE, encoder, decoder, HISTORY_MAGIC, HISTORY_ARCHIVE_VERSION, HISTORY_MAX_ENTRIES, HISTORY_MAX_BLOB_BYTES, HISTORY_KDF_OPSLIMIT, HISTORY_KDF_MEMLIMIT, HistoryEntryTooLargeError, init_history_backup, init_approval, encVoid, init_tlsEncoder, uint8Encoder, encodeUint8, decodeUint8, uint16Encoder, encodeUint16, decodeUint16, uint32Encoder, encodeUint32, decodeUint32, uint64Encoder, encodeUint64, decodeUint64, init_number, init_tlsDecoder, init_enumHelpers, defaultProposalTypes, defaultProposalTypeEncoder, encodeDefaultProposalType, decodeDefaultProposalType, init_defaultProposalType, defaultExtensionTypes, defaultExtensionTypeEncoder, encodeDefaultExtensionType, decodeDefaultExtensionType, init_defaultExtensionType, acceptAll, init_incomingMessageAction, MlsError, ValidationError, CodecError, UsageError, DependencyError, CryptoVerificationError, CryptoError, InternalError, init_mlsError, init_byteArray, varLenDataEncoder, decodeVarLenData, init_variableLength, init_constantTimeCompare, extensionTypeEncoder, encodeExtensionType, decodeExtensionType, extensionEncoder, encodeExtension, decodeExtension, init_extension, credentialTypes, credentialTypeEncoder, encodeCredentialType, decodeCredentialType, init_credentialType, credentialBasicEncoder, encodeCredentialBasic, credentialX509Encoder, encodeCredentialX509, credentialCustomEncoder, encodeCredentialCustom, credentialEncoder, encodeCredential, decodeCredentialBasic, decodeCredentialX509, decodeCredential, init_credential, externalSenderEncoder, encodeExternalSender, decodeExternalSender, init_externalSender, init_hash, init_optional, ciphersuites, ciphersuiteEncoder, encodeCiphersuite, decodeCiphersuite, ciphersuiteValues, init_ciphersuite, init_signature, protocolVersions, protocolVersionEncoder, encodeProtocolVersion, decodeProtocolVersion, init_protocolVersion, capabilitiesEncoder, encodeCapabilities, decodeCapabilities, init_capabilities, leafNodeSources, leafNodeSourceEncoder, encodeLeafNodeSource, decodeLeafNodeSource, init_leafNodeSource, lifetimeEncoder, encodeLifetime, decodeLifetime, defaultLifetime, init_lifetime, leafNodeDataEncoder, encodeLeafNodeData, decodeLeafNodeData, leafNodeInfoKeyPackageEncoder, encodeLeafNodeInfoKeyPackage, leafNodeInfoUpdateOmittedEncoder, encodeLeafNodeInfoUpdateOmitted, leafNodeInfoCommitOmittedEncoder, encodeLeafNodeInfoCommitOmitted, leafNodeInfoOmittedEncoder, encodeLeafNodeInfoOmitted, decodeLeafNodeInfoKeyPackage, decodeLeafNodeInfoUpdateOmitted, decodeLeafNodeInfoCommitOmitted, decodeLeafNodeInfoOmitted, leafNodeInfoUpdateEncoder, encodeLeafNodeInfoUpdate, leafNodeInfoCommitEncoder, encodeLeafNodeInfoCommit, leafNodeInfoEncoder, encodeLeafNodeInfo, decodeLeafNodeInfoUpdate, decodeLeafNodeInfoCommit, decodeLeafNodeInfo, leafNodeTBSEncoder, encodeLeafNodeTBS, leafNodeEncoder, encodeLeafNode, decodeLeafNode, decodeLeafNodeKeyPackage, decodeLeafNodeCommit, decodeLeafNodeUpdate, init_leafNode, keyPackageTBSEncoder, encodeKeyPackageTBS, decodeKeyPackageTBS, keyPackageEncoder, encodeKeyPackage, decodeKeyPackage, init_keyPackage, init_kdf, pskTypes, pskTypeEncoder, encodePskType, decodePskType, resumptionPSKUsages, resumptionPSKUsageEncoder, encodeResumptionPSKUsage, decodeResumptionPSKUsage, encodePskInfoExternal, encodePskInfoResumption, decodePskInfoResumption, pskInfoEncoder, encodePskInfo, decodePskInfo, pskIdEncoder, encodePskId, decodePskId, pskLabelEncoder, encodePskLabel, decodePskLabel, init_presharedkey, addEncoder, encodeAdd, decodeAdd, updateEncoder, encodeUpdate, decodeUpdate, removeEncoder, encodeRemove, decodeRemove, pskEncoder, encodePSK, decodePSK, reinitEncoder, encodeReinit, decodeReinit, externalInitEncoder, encodeExternalInit, decodeExternalInit, groupContextExtensionsEncoder, encodeGroupContextExtensions, decodeGroupContextExtensions, proposalAddEncoder, encodeProposalAdd, proposalUpdateEncoder, encodeProposalUpdate, proposalRemoveEncoder, encodeProposalRemove, proposalPSKEncoder, encodeProposalPSK, proposalReinitEncoder, encodeProposalReinit, proposalExternalInitEncoder, encodeProposalExternalInit, proposalGroupContextExtensionsEncoder, encodeProposalGroupContextExtensions, proposalCustomEncoder, encodeProposalCustom, proposalEncoder, encodeProposal, decodeProposalAdd, decodeProposalUpdate, decodeProposalRemove, decodeProposalPSK, decodeProposalReinit, decodeProposalExternalInit, decodeProposalGroupContextExtensions, decodeProposal, init_proposal, proposalOrRefTypes, proposalOrRefTypeEncoder, encodeProposalOrRefType, decodeProposalOrRefType, proposalOrRefProposalEncoder, encodeProposalOrRefProposal, proposalOrRefProposalRefEncoder, encodeProposalOrRefProposalRef, proposalOrRefEncoder, encodeProposalOrRef, decodeProposalOrRef, init_proposalOrRefType, init_hpke, groupContextEncoder, encodeGroupContext, decodeGroupContext, init_groupContext, nodeTypes, nodeTypeEncoder, encodeNodeType, decodeNodeType, init_nodeType, parentNodeEncoder, encodeParentNode, decodeParentNode, init_parentNode, init_treemath, nodeEncoder, encodeNode, decodeNode, ratchetTreeEncoder, encodeRatchetTree, decodeRatchetTree, init_ratchetTree, leafNodeHashInputEncoder, encodeLeafNodeHashInput, decodeLeafNodeHashInput, parentNodeHashInputEncoder, encodeParentNodeHashInput, decodeParentNodeHashInput, treeHashInputEncoder, encodeTreeHashInput, decodeTreeHashInput, init_treeHash, parentHashInputEncoder, encodeParentHashInput, decodeParentHashInput, init_parentHash, hpkeCiphertextEncoder, encodeHpkeCiphertext, decodeHpkeCiphertext, init_hpkeCiphertext, updatePathNodeEncoder, encodeUpdatePathNode, decodeUpdatePathNode, updatePathEncoder, encodeUpdatePath, decodeUpdatePath, init_updatePath, commitEncoder, encodeCommit, decodeCommit, init_commit, contentTypes, contentTypeEncoder, encodeContentType, decodeContentType, init_contentType, wireformats, wireformatEncoder, encodeWireformat, decodeWireformat, init_wireformat, senderTypes, senderTypeEncoder, encodeSenderType, decodeSenderType, senderEncoder, encodeSender, decodeSender, reuseGuardEncoder, encodeReuseGuard, decodeReuseGuard, senderDataEncoder, encodeSenderData, decodeSenderData, senderDataAADEncoder, encodeSenderDataAAD, decodeSenderDataAAD, init_sender, framedContentApplicationDataEncoder, encodeFramedContentApplicationData, framedContentProposalDataEncoder, encodeFramedContentProposalData, framedContentCommitDataEncoder, encodeFramedContentCommitData, framedContentInfoEncoder, encodeFramedContentInfo, decodeFramedContentApplicationData, decodeFramedContentProposalData, decodeFramedContentCommitData, decodeFramedContentInfo, framedContentEncoder, encodeFramedContent, decodeFramedContent, senderInfoEncoder, encodeSenderInfo, framedContentTBSEncoder, encodeFramedContentTBS, encodeFramedContentAuthDataContent, encodeFramedContentAuthDataCommit, framedContentAuthDataEncoder, encodeFramedContentAuthData, decodeFramedContentAuthDataCommit, init_framedContent, authenticatedContentEncoder, encodeAuthenticatedContent, decodeAuthenticatedContent, authenticatedContentTBMEncoder, encodeAuthenticatedContentTBM, init_authenticatedContent, publicMessageInfoEncoder, encodePublicMessageInfo, publicMessageEncoder, encodePublicMessage, decodePublicMessage, init_publicMessage, init_messageProtectionPublic, init_externalProposal, requiredCapabilitiesEncoder, encodeRequiredCapabilities, decodeRequiredCapabilities, init_requiredCapabilities, defaultAuthenticationService, init_authenticationService, defaultPaddingConfig, init_paddingConfig, defaultKeyPackageEqualityConfig, init_keyPackageEqualityConfig, defaultLifetimeConfig, init_lifetimeConfig, defaultKeyRetentionConfig, init_keyRetentionConfig, groupInfoTBSEncoder, encodeGroupInfoTBS, decodeGroupInfoTBS, groupInfoEncoder, encodeGroupInfo, decodeGroupInfo, init_groupInfo, keyScheduleEncoder, encodeKeySchedule, decodeKeySchedule, init_keySchedule, generationSecretEncoder, decodeGenerationSecret, secretTreeNodeEncoder, decodeSecretTreeNode, secretTreeEncoder, decodeSecretTree, init_secretTree, confirmedTranscriptHashInputEncoder, encodeConfirmedTranscriptHashInput, decodeConfirmedTranscriptHashInput, init_transcriptHash, groupSecretsEncoder, encodeGroupSecrets, decodeGroupSecrets, init_groupSecrets, encryptedGroupSecretsEncoder, encodeEncryptedGroupSecrets, decodeEncryptedGroupSecrets, welcomeEncoder, encodeWelcome, decodeWelcome, init_welcome, init_pathSecrets, privateKeyPathEncoder, decodePrivateKeyPath, init_privateKeyPath, proposalWithSenderEncoder, decodeProposalWithSender, unappliedProposalsEncoder, decodeUnappliedProposals, init_unappliedProposals, emptyPskIndex, init_pskIndex, init_addToMap, defaultClientConfig, init_clientConfig, init_array, stringEncoder, encodeString, decodeString, init_string, activeEncoder, suspendedPendingReinitEncoder, removedFromGroupEncoder, groupActiveStateEncoder, decodeGroupActiveState, init_groupActiveState, epochReceiverDataEncoder, decodeEpochReceiverData, init_epochReceiverData, groupStateEncoder, encodeGroupState, decodeGroupState, groupStateEncoderWithoutTree, encodeGroupStateWithoutTree, emptyProposals, init_clientState, privateMessageEncoder, encodePrivateMessage, decodePrivateMessage, privateContentAADEncoder, encodePrivateContentAAD, decodePrivateContentAAD, init_privateMessage, init_messageProtection, init_createMessage, init_createCommit, init_processMessages, init_makeHashImpl, HpkeError, InvalidParamError, SerializeError, DeserializeError, EncapError, DecapError, ExportError, SealError, OpenError, MessageLimitReachedError, DeriveKeyPairError, NotSupportedError, init_errors, dntGlobals, dntGlobalThis, init_dnt_shims, NativeAlgorithm, init_algorithm, Mode, KemId, KdfId, AeadId, init_identifiers, INPUT_LENGTH_LIMIT, INFO_LENGTH_LIMIT, MINIMUM_PSK_LENGTH, EMPTY, BYTE_TO_BIGINT_256, init_consts, SUITE_ID_HEADER_KEM, init_kemInterface, HPKE_VERSION, HkdfNative, HkdfSha256Native, HkdfSha384Native, HkdfSha512Native, init_hkdf, isCryptoKeyPair, init_misc, LABEL_EAE_PRK, LABEL_SHARED_SECRET, Dhkem, init_dhkem, KEM_USAGES, LABEL_DKP_PRK, LABEL_SK, init_dhkemPrimitives, Bignum, init_bignum, LABEL_CANDIDATE, ORDER_P_256, ORDER_P_384, ORDER_P_521, PKCS8_ALG_ID_P_256, PKCS8_ALG_ID_P_384, PKCS8_ALG_ID_P_521, EC_P_256_PARAMS, EC_P_384_PARAMS, EC_P_521_PARAMS, Ec, init_ec, init_xCryptoKey, init_xCurve, init_hybridkem, AEAD_USAGES, init_aeadEncryptionContext, _endianTestBuffer, _endianTestBytes, isLE2, init_noble, init_hash2, _HMAC, hmac, init_hmac, init_md2, U32_MASK642, _32n2, init_u642, init_sha2, _0n, _1n, _2n, _7n, _256n, _0x71n, SHA3_PI, SHA3_ROTL, _SHA3_IOTA, IOTAS, SHA3_IOTA_H, SHA3_IOTA_L, init_sha3, init_modular, init_curve, init_montgomery, init_mod, AesGcmContext, Aes128Gcm, Aes256Gcm, init_aesGcm, init_exportOnly, init_emitNotSupported, LABEL_SEC, ExporterContextImpl, RecipientExporterContextImpl, SenderExporterContextImpl, init_exporterContext, EncryptionContextImpl, init_encryptionContext, __classPrivateFieldGet, __classPrivateFieldSet, _Mutex_locked, Mutex, init_mutex, __classPrivateFieldGet2, __classPrivateFieldSet2, _RecipientContextImpl_mutex, RecipientContextImpl, init_recipientContext, __classPrivateFieldGet3, __classPrivateFieldSet3, _SenderContextImpl_mutex, SenderContextImpl, init_senderContext, LABEL_BASE_NONCE, LABEL_EXP, LABEL_INFO_HASH, LABEL_KEY, LABEL_PSK_ID_HASH, LABEL_SECRET, SUITE_ID_HEADER_HPKE, CipherSuiteNative, init_cipherSuiteNative, DhkemP256HkdfSha256Native, DhkemP384HkdfSha384Native, DhkemP521HkdfSha512Native, init_dhkemNative, CipherSuite, DhkemP256HkdfSha256, DhkemP384HkdfSha384, DhkemP521HkdfSha512, HkdfSha256, HkdfSha384, HkdfSha512, init_native, ALG_NAME, PKCS8_ALG_ID_X25519, BASE_POINT_X25519, X25519, init_x25519, DhkemX25519HkdfSha256, init_dhkemX25519, PKCS8_ALG_ID_X448, init_x448, init_dhkemX448, init_mod2, init_hpke2, isLE3, wrapCipher, init_utils2, encodeStr, sigma16, sigma32, sigma16_32, sigma32_32, BLOCK_LEN, BLOCK_LEN32, MAX_COUNTER, U32_EMPTY, _XorStreamPRG, createPRG, init_arx, Poly1305, poly1305, init_poly1305, chacha_exports, chacha20orig, chacha20, xchacha20, chacha8, chacha12, ZEROS16, updatePadded, ZEROS32, _poly1305_aead, chacha20poly1305, xchacha20poly1305, rngChacha20, rngChacha8, init_chacha, init_makeAead, init_makeKdfImpl, init_makeDhKem, init_makeHpke, defaultRng, init_rng, crypto3, init_cryptoNode, isLE4, swap32IfBE3, hasHexBuiltin2, hexes2, asciis, Hash, init_utils3, HashMD3, SHA256_IV3, SHA384_IV3, SHA512_IV3, init_md3, U32_MASK643, _32n3, shrSH3, shrSL3, rotrSH3, rotrSL3, rotrBH3, rotrBL3, rotlSH2, rotlSL2, rotlBH2, rotlBL2, add3L3, add3H3, add4L3, add4H3, add5L3, add5H3, init_u643, SHA256_K, SHA256_W, SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA512, SHA384, sha2563, sha5122, sha3842, init_sha22, _0n2, _1n2, isPosBig, bitMask, notImplemented, init_utils4, _0n3, _1n3, _2n2, _3n, _4n, _5n, _7n2, _8n, _9n, _16n, isNegativeLE, FIELD_FIELDS, init_modular2, _0n4, _1n4, pointPrecomputes, pointWindowSizes, wNAF, init_curve2, _0n5, _1n5, _2n3, _8n2, PrimeEdwardsPoint, init_edwards, os2ip, _DST_scalar, init_hash_to_curve, _0n6, _1n6, _2n4, init_montgomery2, ed25519_exports, _0n7, _1n7, _2n5, _3n2, _5n2, _8n3, ed25519_CURVE_p, ed25519_CURVE, ED25519_SQRT_M1, Fp, Fn, ed25519Defaults, ed25519, ed25519ctx, ed25519ph, x25519, ELL2_C1, ELL2_C2, ELL2_C3, ELL2_C1_EDWARDS, ed25519_hasher, SQRT_M1, SQRT_AD_MINUS_ONE, INVSQRT_A_MINUS_D, ONE_MINUS_D_SQ, D_MINUS_ONE_SQ, invertSqrt, MAX_255B, bytes255ToNumberLE, _RistrettoPoint, ristretto255, ristretto255_hasher, ED25519_TORSION_SUBGROUP, edwardsToMontgomery, RistrettoPoint, hashToCurve, encodeToCurve, hashToRistretto255, hash_to_ristretto255, init_ed25519, _0n8, _1n8, _2n6, _7n3, _256n2, _0x71n2, SHA3_PI2, SHA3_ROTL2, _SHA3_IOTA2, IOTAS2, SHA3_IOTA_H2, SHA3_IOTA_L2, rotlH, rotlL, Keccak, genShake, shake2562, init_sha32, ed448_exports, ed448_CURVE, E448_CURVE, shake256_114, shake256_64, _1n9, _2n7, _3n3, _4n2, _11n, _22n, _44n, _88n, _223n, Fp2, Fn2, Fp448, Fn448, ED448_DEF, ed448, ed448ph, E448, x448, ELL2_C12, ELL2_J, ed448_hasher, ONE_MINUS_D, ONE_MINUS_TWO_D, SQRT_MINUS_D, INVSQRT_MINUS_D, invertSqrt2, _DecafPoint, decaf448, decaf448_hasher, ED448_TORSION_SUBGROUP, DecafPoint, hashToCurve2, encodeToCurve2, hashToDecaf448, hash_to_decaf448, edwardsToMontgomery2, init_ed448, HMAC, hmac2, init_hmac2, divNearest, DERErr, DER, _0n9, _1n10, _2n8, _3n4, _4n3, init_weierstrass, init_shortw_utils, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, Fp256, Fp384, Fp521, p256, p256_hasher, p384, p384_hasher, p521, secp256r1, secp384r1, secp521r1, p521_hasher, init_nist, init_makeNobleSignatureImpl, defaultCryptoProvider, init_provider, init_getCiphersuiteImpl, init_resumption, SHA256_K2, SHA256_W2, SHA2_32B, _SHA256, K5122, SHA512_Kh2, SHA512_Kl2, SHA512_W_H2, SHA512_W_L2, SHA2_64B, _SHA512, _SHA384, sha2564, sha5123, sha3843, init_sha23, _HMAC2, hmac3, init_hmac3, init_makeHashImpl2, init_makeNobleSignatureImpl2, BLOCK_SIZE, ZEROS162, ZEROS322, POLY, mul2, swapLE, estimateWindow, GHASH, Polyval, ghash, polyval, init_polyval, BLOCK_SIZE2, BLOCK_SIZE32, EMPTY_BLOCK, POLY2, sbox, rotr32_8, rotl32_8, tableEncoding, xPowers, gcm, _CMAC, cmac, init_aes, init_makeAead2, init_makeKdfImpl2, init_makeDhKem2, init_makeHpke2, init_rng2, nobleCryptoProvider, init_provider2, mlsPublicMessageEncoder, encodeMlsPublicMessage, mlsWelcomeEncoder, encodeMlsWelcome, mlsPrivateMessageEncoder, encodeMlsPrivateMessage, mlsGroupInfoEncoder, encodeMlsGroupInfo, mlsKeyPackageEncoder, encodeMlsKeyPackage, mlsMessageContentEncoder, encodeMlsMessageContent, decodeMlsMessageContent, mlsMessageEncoder, encodeMlsMessage, decodeMlsMessage, init_message, greaseValues, defaultGreaseConfig, init_grease, init_defaultCapabilities, init_src, DEFAULT_CIPHERSUITE, MLSGroupManager, init_mls_group, DOMAIN, NONCE_BYTES3, init_owner_sync, init_mls_delivery_order, init_mls_presend_epoch, dist_exports2, init_dist2, DIR_MODE, FILE_MODE, init_secure_file, SYNC_LOCK_STALE_MS, pendingKpPath, init_mls_state, init_mls_kp_pool, PACKAGE, FALLBACK, MAX_LEN, DISALLOWED, init_client_version, CredentialStore, init_credential_store, init_crypto_helpers, STATE_FILE, LEGACY_STATE_FILE, init_state, ACTIVATION_DOMAIN, UUID_RE2, init_transport2, A2ALogGate, init_a2a_log_gate, NOT_A_MEMBER_DETAIL, init_mls_membership_probe, FIRST_DIRTY_DELAY_MS, RETRY_BASE_DELAYS_MS, MAX_RETRY_DELAY_MS, JITTER_FRACTION, HistoryBackupScheduler, init_history_backup_scheduler, FILE_MODE2, init_history_recovery_file, TENANT_ID_PATTERN, DIR_MODE2, FILE_MODE3, HISTORY_RECOVERY_VERIFY_TIMEOUT_MS, VERIFY_TIMEOUT_MESSAGE, HistoryRecoveryVerificationTimeoutError, init_history_recovery_code, ACTIONS, init_decision_reply, KP_BACKOFF_INITIAL_MS, KP_BACKOFF_MAX_MS, KP_RACE_RETRY_MS, KP_RACE_RETRY_LIMIT, consoleLogger, short, WelcomeKeyPackageBackoff, init_welcome_kp_backoff, history_backup_client_exports, HISTORY_RESTORE_TIMEOUT_MS, HISTORY_RESTORE_RESPONSE_MAX_BYTES, HISTORY_ENVELOPE_MIN_BYTES, HISTORY_AAD_PREFIX, UUID_RE3, GENERATION_RESPONSE_KEYS, utf8Encoder, utf8Decoder, HistoryBackupClient, init_history_backup_client, openclaw_compat_exports, defaultImporter, HEARTBEAT_CANDIDATES, _heartbeatFn, init_openclaw_compat, TOOL_INVOKE_SPAN_NAME, UNCLASSIFIED_ERROR, KNOWN_TOOL_ERROR_CODES, KNOWN_CODES, CLASS_NAME_RE, TOOL_NAME_RE, ERROR_TEXT_CODES, _conversation, init_tool_telemetry, http_handlers_exports, init_http_handlers, mcp_proxy_helpers_exports, init_mcp_proxy_helpers, workspace_handlers_exports, MAX_FILE_SIZE, init_workspace_handlers, ROOM_AGENT_TYPES, CREDENTIAL_MESSAGE_TYPES, CATCHUP_MESSAGE_TYPES, POLL_INTERVAL_MS, RECONNECT_BASE_MS, UUID_RE4, RECONNECT_MAX_MS, PENDING_POLL_INTERVAL_MS, HISTORY_RESTORE_TIMEOUT_MS2, HISTORY_UPLOAD_TIMEOUT_MS, CANONICAL_TIMESTAMP_RE, OUTBOUND_DEDUPE_WINDOW_MS, OUTBOUND_DEDUPE_MAX_SUPPRESS_MS, OUTBOUND_DEDUPE_MAX, OUTBOUND_DEDUPE_TYPES, RETRY_CANDIDATE_TTL_MS, RETRY_CANDIDATE_MAX, _turnConversation, PERSON_INVOLVED_WINDOW_MS, ATTESTED_INBOUND_MAX, UNMAPPED_RECONCILE_COOLDOWN_MS, TOPIC_ID_RE, ROOM_FULFIL_COOLDOWN_MS, SecureChannel, init_channel, init_types, DEFAULT_API_URL, DEFAULT_HTTP_PORT, init_account_config, init_lifecycle, _ocRuntime, _channels, agentVaultPlugin, init_openclaw_plugin, init_gateway_send, init_llm_response_parser, OPENROUTER_PRICING, init_llm_pricing_openrouter, LEGACY_PRICING, PRICING, init_llm_cost, traceStore, init_fetch_interceptor, init_tool_audit, init_harness_compat, managedRoutesRequested, init_openclaw_entry, util, objectUtil, ZodParsedType, getParsedType, init_util, ZodIssueCode, ZodError, init_ZodError, errorMap, en_default, init_en, overrideErrorMap, init_errors2, makeIssue, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync, init_parseUtil, init_typeAliases, errorUtil, init_errorUtil, ParseInputLazyPath, handleResult, ZodType, cuidRegex, cuid2Regex, ulidRegex, uuidRegex, nanoidRegex, jwtRegex, durationRegex, emailRegex, _emojiRegex, emojiRegex, ipv4Regex, ipv4CidrRegex, ipv6Regex, ipv6CidrRegex, base64Regex, base64urlRegex, dateRegexSource, dateRegex, ZodString, ZodNumber, ZodBigInt, ZodBoolean, ZodDate, ZodSymbol, ZodUndefined, ZodNull, ZodAny, ZodUnknown, ZodNever, ZodVoid, ZodArray, ZodObject, ZodUnion, getDiscriminator, ZodDiscriminatedUnion, ZodIntersection, ZodTuple, ZodRecord, ZodMap, ZodSet, ZodFunction, ZodLazy, ZodLiteral, ZodEnum, ZodNativeEnum, ZodPromise, ZodEffects, ZodOptional, ZodNullable, ZodDefault, ZodCatch, ZodNaN, ZodBranded, ZodPipeline, ZodReadonly, late, ZodFirstPartyTypeKind, stringType, numberType, nanType, bigIntType, booleanType, dateType, symbolType, undefinedType, nullType, anyType, unknownType, neverType, voidType, arrayType, objectType, strictObjectType, unionType, discriminatedUnionType, intersectionType, tupleType, recordType, mapType, setType, functionType, lazyType, literalType, enumType, nativeEnumType, promiseType, effectsType, optionalType, nullableType, preprocessType, pipelineType, init_types2, init_external, init_v3, util_exports, Cached, EVALUATING, captureStackTrace, allowsEval, getParsedType2, propertyKeyTypes, primitiveTypes, NUMBER_FORMAT_RANGES, BIGINT_FORMAT_RANGES, highSurrogate, Class, installing, broke, breaker, CONSTANT_CATCH, init_util2, _a2, _zodDesc, _E, $ZodAsyncError, $ZodEncodeError, globalConfig, init_core, _messageDesc, _issuesDesc, _installedToString, initializer, $ZodError, $ZodRealError, init_errors3, _parse, parse, _parseAsync, parseAsync, _safeParse, safeParse, _safeParseAsync, safeParseAsync, COMPILE_INVALID, COMPILE_FALLBACK, validate, validateAsync, _encode, _decode, _encodeAsync, _decodeAsync, _safeEncode, _safeDecode, _safeEncodeAsync, _safeDecodeAsync, init_parse, cuid, cuid2, ulid, xid, ksuid, nanoid, duration, guid, uuid, email, _emoji, ipv4, ipv6, cidrv4, cidrv6, base64, base64url, httpProtocol, e164, dateSource, date, anyString, integer, number, boolean, _null, lowercase, uppercase, init_regexes, $ZodCheck, _whenHasLength, numericOriginMap, $ZodCheckLessThan, $ZodCheckGreaterThan, $ZodCheckMultipleOf, $ZodCheckNumberFormat, $ZodCheckMaxLength, $ZodCheckMinLength, $ZodCheckLengthEquals, $ZodCheckStringFormat, $ZodCheckRegex, $ZodCheckLowerCase, $ZodCheckUpperCase, $ZodCheckIncludes, $ZodCheckStartsWith, $ZodCheckEndsWith, $ZodCheckOverwrite, init_checks, Doc, init_doc, version, init_versions, $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, $ZodJWT, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodNull, $ZodUnknown, $ZodNever, arraySize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodDiscriminatedUnion, $ZodIntersection, $ZodRecord, $ZodEnum, $ZodLiteral, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodCatch, $ZodPipe, $ZodPreprocess, $ZodReadonly, $ZodCustom, init_schemas, $ZodCyclicError, STATE, NO_ISSUES, recursive, NONE, ASSUMED, PROVEN, handoff, open4, memo, init_memoizer, error, init_en2, init_locales, _a3, $ZodRegistry, globalRegistry, init_registries, init_compile, init_api, FOLDABLE_KEYS, UNION_KEYS, createToJSONSchemaMethod, createStandardJSONSchemaMethod, init_to_json_schema, narrowMin, narrowMax, narrowBoth, addDivisor, addPattern, intersectMime, setFormat, minContributor, maxContributor, formatContributor, contributors, formatMap, exactPatterns, exactPattern, stringProcessor, numberProcessor, booleanProcessor, bigintProcessor, symbolProcessor, nullProcessor, undefinedProcessor, voidProcessor, neverProcessor, anyProcessor, unknownProcessor, dateProcessor, enumProcessor, literalProcessor, nanProcessor, templateLiteralProcessor, fileProcessor, successProcessor, customProcessor, functionProcessor, transformProcessor, mapProcessor, setProcessor, arrayProcessor, objectProcessor, unionProcessor, intersectionProcessor, tupleProcessor, pendingRecords, recordProcessor, nullableProcessor, nonoptionalProcessor, UNREPRESENTABLE_DEFAULT, defaultProcessor, prefaultProcessor, catchProcessor, pipeProcessor, readonlyProcessor, promiseProcessor, optionalProcessor, lazyProcessor, allProcessors, init_json_schema_processors, init_json_schema, init_core2, init_parse2, ZodMiniType, ZodMiniObject, init_schemas2, init_checks2, init_iso, init_coerce, init_external2, init_v4_mini, init_zod_compat, init_checks3, _installedErrorProtos, initializer2, ZodRealError, init_errors4, parse2, parseAsync2, safeParse3, safeParseAsync3, encode3, decode2, encodeAsync2, decodeAsync2, safeEncode2, safeDecode2, safeEncodeAsync2, safeDecodeAsync2, init_parse3, ZodType2, _ZodString, ZodString2, ZodStringFormat, ZodISODateTime, ZodISODate, ZodISOTime, ZodISODuration, ZodEmail, ZodGUID, ZodUUID, ZodURL, ZodEmoji, ZodNanoID, ZodCUID, ZodCUID2, ZodULID, ZodXID, ZodKSUID, ZodIPv4, ZodIPv6, ZodCIDRv4, ZodCIDRv6, ZodBase64, ZodBase64URL, ZodE164, ZodJWT, ZodNumber2, ZodNumberFormat, ZodBoolean2, ZodNull2, ZodUnknown2, ZodNever2, ZodArray2, ZodObject2, ZodUnion2, ZodDiscriminatedUnion2, ZodIntersection2, ZodRecord2, ZodEnum2, ZodLiteral2, ZodTransform, ZodOptional2, ZodExactOptional, ZodNullable2, ZodDefault2, ZodPrefault, ZodNonOptional, ZodCatch2, ZodPipe, ZodPreprocess, ZodReadonly2, ZodCustom, init_schemas3, ZodFirstPartyTypeKind2, init_compat, iso_exports2, init_iso2, init_coerce2, init_external3, init_classic, init_v4, LATEST_PROTOCOL_VERSION, DEFAULT_NEGOTIATED_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, JSONRPC_VERSION, AssertObjectSchema, ProgressTokenSchema, CursorSchema, TaskCreationParamsSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, isTaskAugmentedRequestParams, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, isJSONRPCRequest, JSONRPCNotificationSchema, isJSONRPCNotification, JSONRPCResultResponseSchema, isJSONRPCResultResponse, ErrorCode, JSONRPCErrorResponseSchema, isJSONRPCErrorResponse, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, isInitializeRequest, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, McpError, UrlElicitationRequiredError, init_types3, init_interfaces, ignoreOverride, defaultOptions, getDefaultOptions, init_Options, getRefs, init_Refs, init_errorMessages, getRelativePath, init_getRelativePath, init_any, init_array2, init_bigint, init_boolean, init_branded, parseCatchDef, init_catch, integerDateParser, init_date, init_default, init_effects, init_enum, isJsonSchema7AllOfType, init_intersection, init_literal, emojiRegex2, zodPatterns, ALPHA_NUMERIC, init_string2, init_record, init_map, init_nativeEnum, init_never, init_null, primitiveMappings, asAnyOf, init_union, init_nullable, init_number2, init_object, parseOptionalDef, init_optional2, parsePipelineDef, init_pipeline, init_promise, init_set, init_tuple, init_undefined, init_unknown, parseReadonlyDef, init_readonly, selectParser, init_selectParser, get$ref, addMeta, init_parseDef, init_parseTypes, zodToJsonSchema, init_zodToJsonSchema, init_esm, init_zod_json_schema_compat, DEFAULT_REQUEST_TIMEOUT_MSEC, Protocol, init_protocol, require_code, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code2, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core, require_id, require_ref, require_core2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator, require_format, require_format2, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_formats, require_limit, require_dist, import_ajv, import_ajv_formats, AjvJsonSchemaValidator, init_ajv_provider, ExperimentalServerTasks, init_server, init_helpers, Server, init_server2, COMPLETABLE_SYMBOL, McpZodTypeKind, init_completable, init_uriTemplate, TOOL_NAME_REGEX, init_toolNameValidation, ExperimentalMcpServerTasks, init_mcp_server, init_zod, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT, init_mcp, RequestError, toRequestError, GlobalRequest, Request2, newHeadersFromIncoming, wrapBodyStream, newRequestFromIncoming, getRequestCache, requestCache, incomingKey, urlKey, headersKey, abortControllerKey, getAbortController, requestPrototype, newRequest, responseCache, getResponseCache, cacheKey, GlobalResponse, Response2, buildOutgoingHttpHeaders, X_ALREADY_SENT, outgoingEnded, handleRequestError, handleFetchError, handleResponseError, flushHeaders, responseViaCache, isPromise, responseViaResponseObject, getRequestListener, init_dist22, require_content_type, import_content_type, init_mediaType, DEFAULT_MAX_REQUEST_BODY_SIZE, MAX_BATCH_SIZE, init_requestBody, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, init_sseKeepAlive, WebStandardStreamableHTTPServerTransport, init_webStandardStreamableHttp, StreamableHTTPServerTransport, init_streamableHttp, AgentVaultMcpServer, init_mcp_server2, init_mcp_handlers, init_skill_manifest, init_skill_invoker, spanBuffer, init_skill_telemetry, PolicyEnforcer, init_policy_enforcer, VERSION, init_index;
 var init_dist = __esm({
   async "../plugin/dist/index.js"() {
     "use strict";
@@ -70843,6 +70968,7 @@ var init_dist = __esm({
     init_mls_membership_probe = __esm2({
       "src/mls-membership-probe.ts"() {
         "use strict";
+        NOT_A_MEMBER_DETAIL = "Not authorized for this MLS group";
       }
     });
     init_history_backup_scheduler = __esm2({
@@ -71320,12 +71446,8 @@ var init_dist = __esm({
     });
     openclaw_compat_exports = {};
     __export2(openclaw_compat_exports, {
-      AGENT_EVENT_CANDIDATES: () => AGENT_EVENT_CANDIDATES,
       HEARTBEAT_CANDIDATES: () => HEARTBEAT_CANDIDATES,
-      TRANSCRIPT_CANDIDATES: () => TRANSCRIPT_CANDIDATES,
-      _resetCompatCacheForTest: () => _resetCompatCacheForTest,
-      onAgentEvent: () => onAgentEvent,
-      onSessionTranscriptUpdate: () => onSessionTranscriptUpdate,
+      importerFrom: () => importerFrom,
       requestHeartbeatNow: () => requestHeartbeatNow,
       resolveSdkFn: () => resolveSdkFn
     });
@@ -71342,23 +71464,61 @@ var init_dist = __esm({
           // <=2026.6.x — deep dist path, original name.
           { specifier: "openclaw/dist/plugin-sdk/infra/heartbeat-wake.js", symbol: "requestHeartbeatNow" }
         ];
-        AGENT_EVENT_CANDIDATES = [
-          { specifier: "openclaw/plugin-sdk/agent-harness", symbol: "onAgentEvent" },
-          { specifier: "openclaw/dist/plugin-sdk/infra/agent-events.js", symbol: "onAgentEvent" }
+        _heartbeatFn = null;
+      }
+    });
+    init_tool_telemetry = __esm2({
+      "src/tool-telemetry.ts"() {
+        "use strict";
+        TOOL_INVOKE_SPAN_NAME = "ai.agent.tool.invoke";
+        UNCLASSIFIED_ERROR = "unclassified";
+        KNOWN_TOOL_ERROR_CODES = [
+          "relay_not_connected",
+          "mls_group_not_initialized",
+          "mls_encrypt_failed",
+          "room_not_found",
+          "a2a_channel_not_found",
+          "channel_not_ready",
+          "channel_not_started",
+          "no_active_sessions",
+          "no_conversation_ready",
+          "blocked_by_policy",
+          "unknown_target",
+          "unsupported_destination",
+          "delivery_timeout",
+          "delivery_cancelled",
+          "delivery_failed",
+          "ambiguous_target",
+          "no_receipt",
+          "invalid_request",
+          // #1467: the owner's own AI plan refused the turn (a bridge on a subscription).
+          "plan_limit_reached",
+          // #1467: a Muse turn failed — Meta answered 429, or anything else.
+          "model_rate_limited",
+          "model_error",
+          UNCLASSIFIED_ERROR
         ];
-        TRANSCRIPT_CANDIDATES = [
-          {
-            specifier: "openclaw/plugin-sdk/memory-core-host-engine-foundation",
-            symbol: "onSessionTranscriptUpdate"
-          },
-          {
-            specifier: "openclaw/dist/plugin-sdk/sessions/transcript-events.js",
-            symbol: "onSessionTranscriptUpdate"
-          }
+        KNOWN_CODES = new Set(KNOWN_TOOL_ERROR_CODES);
+        CLASS_NAME_RE = /^(?:[A-Za-z][A-Za-z0-9_]{0,47})?(?:Error|Exception)$/;
+        TOOL_NAME_RE = /^[A-Za-z0-9_.:-]{1,64}$/;
+        ERROR_TEXT_CODES = [
+          [/relay socket is not open/, "relay_not_connected"],
+          [/has no initialized MLS group/, "mls_group_not_initialized"],
+          [/^MLS encrypt failed/, "mls_encrypt_failed"],
+          [/^Room .+ not found$/, "room_not_found"],
+          [/^No A2A channel found|^A2A channel .+ not found$/, "a2a_channel_not_found"],
+          [/^Channel is not ready$|^Channel is in \w+ state$/, "channel_not_ready"],
+          [/^AgentVault channel not connected$|^Channel not started$/, "channel_not_started"],
+          [/^No active sessions$/, "no_active_sessions"],
+          [/^No conversation is ready to receive/, "no_conversation_ready"],
+          [/^Message blocked by scan rule/, "blocked_by_policy"],
+          [/^Unknown target kind$/, "unknown_target"],
+          [/can only be sent to owner|cannot be sent to A2A targets/, "unsupported_destination"],
+          [/^Delivery timed out$/, "delivery_timeout"],
+          [/^Delivery cancelled$/, "delivery_cancelled"],
+          [/^Delivery failed$/, "delivery_failed"]
         ];
-        _heartbeatFn = null;
-        _agentEventFn = null;
-        _transcriptFn = null;
+        _conversation = new AsyncLocalStorage();
       }
     });
     http_handlers_exports = {};
@@ -71375,6 +71535,7 @@ var init_dist = __esm({
       "src/http-handlers.ts"() {
         "use strict";
         init_owner_routing();
+        init_tool_telemetry();
       }
     });
     mcp_proxy_helpers_exports = {};
@@ -71455,7 +71616,7 @@ var init_dist = __esm({
         OUTBOUND_DEDUPE_TYPES = /* @__PURE__ */ new Set(["text", "status_alert", "artifact", "attachment"]);
         RETRY_CANDIDATE_TTL_MS = 6e4;
         RETRY_CANDIDATE_MAX = 32;
-        _turnConversation = new AsyncLocalStorage();
+        _turnConversation = new AsyncLocalStorage2();
         PERSON_INVOLVED_WINDOW_MS = 5 * 6e4;
         ATTESTED_INBOUND_MAX = 64;
         UNMAPPED_RECONCILE_COOLDOWN_MS = 6e4;
@@ -71546,6 +71707,17 @@ var init_dist = __esm({
            *  self-heal rather than be logged and dropped. */
           _mlsCommitFailCounts = /* @__PURE__ */ new Map();
           static MAX_MLS_DECRYPT_FAILS = 3;
+          /**
+           * #1518: ids of MLS application frames this process has already decrypted
+           * (server-assigned `mls_messages.id`, the same on the live delivery pull and
+           * on a `/sync` / reconnect replay). A replayed frame cannot be decrypted a
+           * second time — forward secrecy deleted its key — so without this every
+           * reconnect after a backend deploy fed already-read messages into the
+           * decrypt-failure counter and re-admitted the agent (+2 epochs). Insertion
+           * ordered; the oldest ids fall out past DECRYPTED_ID_CAP.
+           */
+          _decryptedMessageIds = /* @__PURE__ */ new Map();
+          static DECRYPTED_ID_CAP = 5e3;
           /**
            * #1084: consecutive resyncs that found NOTHING to apply, per group.
            *
@@ -71618,15 +71790,19 @@ var init_dist = __esm({
            */
           _recentRoomAttachments = /* @__PURE__ */ new Map();
           static RECENT_ROOM_ATTACHMENT_MS = 10 * 60 * 1e3;
-          /** #1181: prefix a room turn that carries no attachment with the one saved in this room recently. */
+          /** #1181: prefix a room turn that carries no attachment with the one saved in this room recently.
+           *  `from` is who sent that file (#1459), so the turn can be marked as carrying their content. */
           _withRecentRoomAttachmentNote(roomId, text) {
             const recent = this._recentRoomAttachments.get(roomId);
-            if (!recent) return text;
+            if (!recent) return { text };
             const ageMs = Date.now() - recent.at;
-            if (ageMs > _SecureChannel.RECENT_ROOM_ATTACHMENT_MS) return text;
-            return `[Most recent file in this room: ${recent.filePath} (${recent.name}, received ${Math.round(ageMs / 1e3)}s ago). If this message refers to "the file" or "this file", it means that one \u2014 use your Read tool on it.]
+            if (ageMs > _SecureChannel.RECENT_ROOM_ATTACHMENT_MS) return { text };
+            return {
+              text: `[Most recent file in this room: ${recent.filePath} (${recent.name}, received ${Math.round(ageMs / 1e3)}s ago). If this message refers to "the file" or "this file", it means that one \u2014 use your Read tool on it.]
 
-${text}`;
+${text}`,
+              from: recent.senderDeviceId ?? null
+            };
           }
           /**
            * #1161: room attachments whose caption addressed nobody, NOT yet fetched.
@@ -71640,22 +71816,22 @@ ${text}`;
           _deferredRoomAttachments = /* @__PURE__ */ new Map();
           static DEFERRED_ROOM_ATTACHMENT_MAX = 5;
           static DEFERRED_ROOM_ATTACHMENT_MS = 60 * 60 * 1e3;
-          _deferRoomAttachment(roomId, info) {
+          _deferRoomAttachment(roomId, info, senderDeviceId) {
             const list = this._deferredRoomAttachments.get(roomId) ?? [];
-            list.push({ info, at: Date.now() });
+            list.push({ info, at: Date.now(), senderDeviceId });
             while (list.length > _SecureChannel.DEFERRED_ROOM_ATTACHMENT_MAX) list.shift();
             this._deferredRoomAttachments.set(roomId, list);
             console.log(
               `[SecureChannel] room ${roomId.slice(0, 8)}: attachment ${String(info?.filename ?? "file")} deferred \u2014 caption addresses nobody, fetch on the next @-addressed turn (#1161)`
             );
           }
-          /** Drain the room's deferred attachments that are still fresh (oldest first). */
+          /** Drain the room's deferred attachments that are still fresh (oldest first), with who sent each. */
           _takeDeferredRoomAttachments(roomId) {
             const list = this._deferredRoomAttachments.get(roomId);
             if (!list?.length) return [];
             this._deferredRoomAttachments.delete(roomId);
             const cutoff = Date.now() - _SecureChannel.DEFERRED_ROOM_ATTACHMENT_MS;
-            return list.filter((d2) => d2.at >= cutoff).map((d2) => d2.info);
+            return list.filter((d2) => d2.at >= cutoff).map((d2) => ({ info: d2.info, senderDeviceId: d2.senderDeviceId }));
           }
           /** In-flight roster-refresh promises (per room) — dedup concurrent refreshes. */
           _roomRosterRefreshInFlight = /* @__PURE__ */ new Map();
@@ -71822,6 +71998,119 @@ ${text}`;
               console.warn("[SecureChannel] failed to post auth_failed:", err);
             }
           }
+          /**
+           * Ask the PUBLIC status endpoint what this device is right now. Used to
+           * CONFIRM a credential rejection before acting on it — a 403 on its own
+           * cannot tell "revoked" from "paused by its owner" (both are non-ACTIVE to
+           * get_device_auth), and treating a pause as a revoke is what removed
+           * loopita's launchd service on 2026-10-25.
+           *
+           * Only two answers are terminal: REVOKED, and a deleted row (404 whose
+           * JSON `detail` is exactly get_device_or_404's "Device not found" — any
+           * other 404 is something in the way, not proof). Everything unreadable or inconclusive (network, 5xx, 429,
+           * PENDING, an ACTIVE device answering 403) is `unknown`, which callers MUST
+           * treat as transient: never terminal, never an uninstall, never a banner.
+           */
+          async _readDeviceStanding() {
+            const deviceId = this._deviceId ?? this._persisted?.deviceId;
+            if (!deviceId) return { kind: "unknown", why: "no device id" };
+            try {
+              const st = await pollDeviceStatus(this.config.apiUrl, deviceId);
+              if (!st || st.rateLimited) return { kind: "unknown", why: "rate limited" };
+              if (st.status === "SUSPENDED") return { kind: "suspended" };
+              if (st.status === "REVOKED") return { kind: "gone", reason: "device_revoked" };
+              if (st.status === "ACTIVE" || st.status === "APPROVED") return { kind: "active" };
+              return { kind: "unknown", why: `status ${String(st.status)}` };
+            } catch (err) {
+              const e = err;
+              if (e?.httpStatus === 404) {
+                try {
+                  const parsed = JSON.parse(e.body ?? "");
+                  if (parsed?.detail === _SecureChannel.DEVICE_DELETED_DETAIL) {
+                    return { kind: "gone", reason: "device_deleted" };
+                  }
+                } catch {
+                }
+              }
+              return { kind: "unknown", why: err instanceof Error ? err.message : String(err) };
+            }
+          }
+          /**
+           * A credential path answered 403 (today: /auth/reissue). Confirm before
+           * concluding anything:
+           *   - REVOKED / deleted  -> terminal: re_enroll health report + `auth_failed`
+           *                           carrying `deviceGone: true` (the ONLY verdict the
+           *                           bridges' self-uninstall acts on).
+           *   - SUSPENDED          -> suspended-wait (idle, keep polling, resume).
+           *   - anything else      -> transient; nothing is emitted or reported.
+           * Already paused => stay paused without another status read: the
+           * suspended-wait poll owns that question and will see a later revoke.
+           */
+          async _confirmForbidden(source) {
+            if (this._suspended) return "suspended";
+            const standing = await this._readDeviceStanding();
+            if (standing.kind === "gone") {
+              console.warn(
+                `[SecureChannel] ${source}: 403 confirmed by the status endpoint (${standing.reason}) \u2014 terminal`
+              );
+              this._authFailedThisSession = true;
+              await this._postAuthFailedToBackend(standing.reason);
+              this.emit("auth_failed", { reason: standing.reason, deviceGone: true });
+              return "gone";
+            }
+            if (standing.kind === "suspended") {
+              this._enterSuspendedWait(source);
+              return "suspended";
+            }
+            console.warn(
+              `[SecureChannel] ${source}: 403 but the device is not confirmed revoked (${standing.kind === "unknown" ? standing.why : standing.kind}) \u2014 treating as transient`
+            );
+            return "transient";
+          }
+          /** The backend's exact detail for an inactive (paused/revoked/deleted) device. */
+          static INACTIVE_DEVICE_DETAIL = "Device not found or not active";
+          /** get_device_or_404's exact detail — the only 404 that means "row deleted". */
+          static DEVICE_DELETED_DETAIL = "Device not found";
+          /**
+           * After a TRANSIENT inactive-403 verdict, how long before another 403 may
+           * re-read the status endpoint. Long enough that a burst cannot trip the
+           * 1-per-5s limiter (which would itself read as "unknown"); short enough that
+           * a revoke behind an outage is still noticed within the session (dr-evil Q1).
+           */
+          static INACTIVE_403_RECHECK_MS = 3e4;
+          /** Read a FastAPI error `detail` without consuming the caller's body. */
+          async _errorDetail(resp) {
+            try {
+              const body = await resp.clone().json();
+              return typeof body?.detail === "string" ? body.detail : null;
+            } catch {
+              return null;
+            }
+          }
+          // One confirmation per WS session, shared by every caller: a burst of 403s
+          // (the open handler fires several REST calls at once) must not turn into a
+          // burst of status reads against a 1-per-5s rate limit. Reset in _connect.
+          _inactive403Check = null;
+          _inactive403RetryAt = 0;
+          /**
+           * A REST call answered 403 "Device not found or not active". With the
+           * companion backend change this is how EVERY inactive-device auth failure
+           * arrives (401 now means a bad token only, so `_authedFetch`'s reissue never
+           * runs for it). Same rule as the reissue path: confirm, then act.
+           */
+          _confirmInactive403(source) {
+            if (this._inactive403Check) return this._inactive403Check;
+            if (Date.now() < this._inactive403RetryAt) return Promise.resolve("transient");
+            const check = this._confirmForbidden(source).then((verdict) => {
+              if (verdict === "transient" && this._inactive403Check === check) {
+                this._inactive403Check = null;
+                this._inactive403RetryAt = Date.now() + _SecureChannel.INACTIVE_403_RECHECK_MS;
+              }
+              return verdict;
+            });
+            this._inactive403Check = check;
+            return check;
+          }
           /**
            * Proactively reissue the persisted device JWT when its remaining lifetime
            * is under 30 days. Called before each WebSocket connect attempt so the
@@ -71840,6 +72129,9 @@ ${text}`;
            * than read back off `_authFailedThisSession`, whose lifetime is reset per
            * connect and is easy to get subtly wrong.
            */
+          //
+          // 2026-10-25: a TRUE return now also covers "paused by its owner" (a 403
+          // confirmed SUSPENDED). The caller tells the two apart by `_suspended`.
           async _maybeReissueDeviceJwt() {
             const jwt = this._persisted?.deviceJwt ?? this._deviceJwt;
             if (!jwt) return false;
@@ -71867,12 +72159,16 @@ ${text}`;
                 }
                 return false;
               }
-              if (resp.status === 401 || resp.status === 403) {
+              if (resp.status === 403) {
+                console.warn("[SecureChannel] reissue rejected (403); confirming device status");
+                const verdict = await this._confirmForbidden("reissue_forbidden");
+                return verdict !== "transient";
+              }
+              if (resp.status === 401) {
                 console.warn(`[SecureChannel] reissue rejected (${resp.status}); credentials need attention`);
                 this._authFailedThisSession = true;
-                const reason = resp.status === 401 ? "device_jwt_expired" : "device_revoked";
-                await this._postAuthFailedToBackend(reason);
-                this.emit("auth_failed", { reason });
+                await this._postAuthFailedToBackend("device_jwt_expired");
+                this.emit("auth_failed", { reason: "device_jwt_expired", deviceGone: false });
                 return true;
               }
               console.warn(`[SecureChannel] reissue ${resp.status}; keeping current jwt`);
@@ -71931,13 +72227,17 @@ ${text}`;
                   };
                   resp = await fetch(url2, { ...init, headers: retryHeaders });
                 }
-              } else if (reissueResp.status === 401 || reissueResp.status === 403) {
+              } else if (reissueResp.status === 403) {
+                await this._confirmForbidden("reissue_forbidden");
+              } else if (reissueResp.status === 401) {
                 this._authFailedThisSession = true;
-                const reason = reissueResp.status === 401 ? "device_jwt_expired" : "device_revoked";
-                await this._postAuthFailedToBackend(reason);
-                this.emit("auth_failed", { reason });
+                await this._postAuthFailedToBackend("device_jwt_expired");
+                this.emit("auth_failed", { reason: "device_jwt_expired", deviceGone: false });
               }
             }
+            if (resp.status === 403 && await this._errorDetail(resp) === _SecureChannel.INACTIVE_DEVICE_DETAIL) {
+              await this._confirmInactive403("rest_forbidden");
+            }
             return resp;
           }
           get state() {
@@ -73623,7 +73923,7 @@ ${text}`;
            */
           sendActivitySpan(spanData) {
             if (!this._ws || this._ws.readyState !== WebSocket.OPEN) return;
-            const pluginVersion = true ? "0.23.53" : "0.0.0-dev";
+            const pluginVersion = true ? "0.23.61" : "0.0.0-dev";
             const agentName = this.config.agentName ?? "Agent";
             const resource = {
               "service.name": "agentvault-agent",
@@ -73774,11 +74074,15 @@ ${text}`;
             }
             const existingMlsGroupId = this._persisted.rooms[roomData.roomId]?.mlsGroupId;
             const existingMlsTs = this._persisted.rooms[roomData.roomId]?.lastMlsMessageTs;
+            const members2 = keepKnownMemberTenants(
+              this._persisted.rooms[roomData.roomId]?.members ?? [],
+              roomData.members
+            );
             this._persisted.rooms[roomData.roomId] = {
               roomId: roomData.roomId,
               name: roomData.name,
               conversationIds,
-              members: roomData.members,
+              members: members2,
               ...existingMlsGroupId && { mlsGroupId: existingMlsGroupId },
               ...existingMlsTs && { lastMlsMessageTs: existingMlsTs }
             };
@@ -73991,15 +74295,27 @@ ${text}`;
            */
           async _quarantineOrphanedMlsGroups() {
             if (!this._deviceJwt) return;
+            let deviceActive = null;
+            const confirmDeviceActive = () => deviceActive ??= this._readDeviceStanding().then((st) => st.kind === "active");
             const quarantined = await quarantineOrphanedMlsState(
               this.config.dataDir,
               async (groupId) => {
                 try {
+                  if (this._suspended) return null;
                   const res = await fetch(
                     `${this.config.apiUrl}/api/v1/mls/groups/${encodeURIComponent(groupId)}`,
                     { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
                   );
-                  return mlsMembershipFromStatus(res.status);
+                  const detail = res.status === 403 ? await this._errorDetail(res) : null;
+                  if (detail === _SecureChannel.INACTIVE_DEVICE_DETAIL) {
+                    await this._confirmInactive403("mls_probe");
+                    return null;
+                  }
+                  const verdict = mlsMembershipFromStatus(res.status, detail);
+                  if (verdict === false && res.status === 403) {
+                    if (!await confirmDeviceActive() || this._suspended) return null;
+                  }
+                  return verdict;
                 } catch {
                   return null;
                 }
@@ -74271,7 +74587,8 @@ ${text}`;
                   entityType: m2.entity_type,
                   displayName: m2.display_name,
                   identityPublicKey: m2.identity_public_key,
-                  ephemeralPublicKey: m2.ephemeral_public_key
+                  ephemeralPublicKey: m2.ephemeral_public_key,
+                  ...typeof m2.tenant_id === "string" ? { tenantId: m2.tenant_id } : {}
                 }));
                 if (members2.length > 0) {
                   const roomState = this._persisted.rooms[roomId];
@@ -75734,6 +76051,8 @@ ${text}`;
           async _connect() {
             if (this._stopped) return;
             this._reissueAttempted = false;
+            this._inactive403Check = null;
+            this._inactive403RetryAt = 0;
             this._authFailedThisSession = false;
             if (this._reconnectTimer) {
               clearTimeout(this._reconnectTimer);
@@ -75749,6 +76068,10 @@ ${text}`;
             }
             this._setState("connecting");
             if (await this._maybeReissueDeviceJwt()) {
+              if (this._suspended) {
+                console.log("[SecureChannel] device is paused \u2014 not connecting until it is resumed");
+                return;
+              }
               console.warn(
                 "[SecureChannel] credentials are terminally dead \u2014 aborting connect (no WS attempt)"
               );
@@ -75759,16 +76082,26 @@ ${text}`;
             const url2 = `${wsUrl}/api/v1/ws?token=${encodeURIComponent(this._deviceJwt)}&device_id=${this._deviceId}&client_version=${encodeURIComponent(buildClientVersion(this.config.clientVersion))}`;
             const ws = new WebSocket(url2);
             this._ws = ws;
+            const served = this._createServedGate();
             ws.on("open", async () => {
               try {
-                this._reconnectAttempt = 0;
                 this._lastWsOpenTime = Date.now();
                 this._startPing(ws);
                 this._startWakeDetector();
+                if (!await served.wait()) {
+                  console.log("[SecureChannel] connection rejected before it was served \u2014 skipping connect-time work");
+                  return;
+                }
+                const aborted2 = () => this._stopped || this._suspended || this._ws !== ws || served.rejected;
+                if (aborted2()) return;
+                this._reconnectAttempt = 0;
                 this._startPendingPoll();
                 await this._syncMissedMessages();
+                if (aborted2()) return;
                 await this._pullDrDeliveryQueue();
+                if (aborted2()) return;
                 await this._flushOutboundQueue();
+                if (aborted2()) return;
                 this._setState("ready");
                 void this._reconcileConversationGroups().catch((err) => {
                   console.warn("[SecureChannel] Conversation-group reconcile failed:", err);
@@ -75800,7 +76133,7 @@ ${text}`;
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.53" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.61" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -75808,6 +76141,7 @@ ${text}`;
                 await this.listA2AChannels().catch((err) => {
                   console.warn("[SecureChannel] A2A channel sync on connect failed:", err);
                 });
+                if (aborted2()) return;
                 await this._ensureKpPoolPublished();
                 this._startKpReplenishTimer();
                 this._pullDeliveryQueue().catch((err) => {
@@ -75869,6 +76203,8 @@ ${text}`;
               this._lastWakeTick = Date.now();
               try {
                 const data = JSON.parse(raw.toString());
+                if (data?.event === "connection_rejected") served.markRejected();
+                else served.markServed();
                 if (data.event && data.event !== "ping" && data.event !== "typing") {
                   const d2 = data.data ?? {};
                   const conv = (data.conversation_id || d2.conversation_id || "").toString();
@@ -75953,7 +76289,8 @@ ${text}`;
                       entityType: m2.entity_type,
                       displayName: m2.display_name,
                       identityPublicKey: m2.identity_public_key,
-                      ephemeralPublicKey: m2.ephemeral_public_key
+                      ephemeralPublicKey: m2.ephemeral_public_key,
+                      ...typeof m2.tenant_id === "string" ? { tenantId: m2.tenant_id } : {}
                     })),
                     conversations: (d2.conversations || []).map((c2) => ({
                       id: c2.id,
@@ -76128,7 +76465,7 @@ ${text}`;
                         agentVersion: this.config.agentVersion ?? "0.0.0",
                         // __AV_VERSION__ is injected by esbuild from package.json at build time.
                         // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                        pluginVersion: true ? "0.23.53" : "0.0.0-dev"
+                        pluginVersion: true ? "0.23.61" : "0.0.0-dev"
                       });
                       this._telemetryReporter.startAutoFlush(3e4);
                     }
@@ -76497,6 +76834,7 @@ ${text}`;
             });
             ws.on("close", (code) => {
               this._lastCloseCode = typeof code === "number" ? code : null;
+              served.markRejected();
               this._stopPing();
               this._stopWakeDetector();
               this._stopPendingPoll();
@@ -76563,9 +76901,14 @@ ${text}`;
               if (groupId) void this._requestWelcomeSelfHeal(groupId);
               return;
             }
+            if (this._alreadyDecrypted(data.message_id)) {
+              console.debug(`[SecureChannel] MLS 1:1 frame ${String(data.message_id).slice(0, 8)} already read \u2014 replay skipped`);
+              return;
+            }
             try {
               const cipherBytes = new Uint8Array(Buffer.from(data.payload, "hex"));
               const result = await mgr.decrypt(cipherBytes);
+              this._rememberDecrypted(data.message_id);
               if (mgrKey) this._mlsDecryptFailCounts.delete(mgrKey);
               const mlsGroupId = (convGroupId ? this._persisted?.mlsGroups?.[convGroupId]?.mlsGroupId : null) ?? this._persisted?.mlsConversations?.[convId]?.mlsGroupId ?? groupId;
               if (mlsGroupId) {
@@ -76984,13 +77327,13 @@ ${messageText}`;
            * Returns the text unchanged when there is no attachment or the fetch fails —
            * but a failure is LOGGED and announced in the text, never silent.
            */
-          async _augmentWithAttachment(attachmentInfo, baseText, roomId) {
+          async _augmentWithAttachment(attachmentInfo, baseText, roomId, senderDeviceId) {
             if (!attachmentInfo) return baseText;
             try {
               const { filePath, decrypted } = await this._downloadAndDecryptAttachment(attachmentInfo);
               const mime = String(attachmentInfo.mime ?? "application/octet-stream");
               const name = String(attachmentInfo.filename ?? "attachment");
-              if (roomId) this._recentRoomAttachments.set(roomId, { filePath, name, at: Date.now() });
+              if (roomId) this._recentRoomAttachments.set(roomId, { filePath, name, at: Date.now(), senderDeviceId });
               const textMimes = ["text/", "application/json", "application/xml", "application/csv"];
               if (textMimes.some((m2) => mime.startsWith(m2))) {
                 const content = new TextDecoder().decode(decrypted);
@@ -77588,9 +77931,14 @@ ${baseText}`;
               }
               return;
             }
+            if (this._alreadyDecrypted(data.message_id)) {
+              console.debug(`[SecureChannel] MLS room frame ${String(data.message_id).slice(0, 8)} already read \u2014 replay skipped`);
+              return;
+            }
             try {
               const ciphertext = Buffer.from(data.payload, "hex");
               const result = await mlsGroup.decrypt(new Uint8Array(ciphertext));
+              this._rememberDecrypted(data.message_id);
               this._mlsDecryptFailCounts.delete(resolvedRoomId);
               await saveMlsState(this.config.dataDir, groupId, JSON.stringify(mlsGroup.exportState()));
               if (result.isHandshake || !result.plaintext) {
@@ -77646,22 +77994,34 @@ ${baseText}`;
               }
               const caption = messageText;
               const addressed = parseMentions(messageText).length > 0;
+              const foldedFrom = [];
               if (roomAttachment && !addressed) {
-                this._deferRoomAttachment(resolvedRoomId, roomAttachment);
+                this._deferRoomAttachment(resolvedRoomId, roomAttachment, senderDeviceId);
               } else {
                 const deferred = addressed ? this._takeDeferredRoomAttachments(resolvedRoomId) : [];
-                for (const info of deferred) {
-                  messageText = await this._augmentWithAttachment(info, messageText, resolvedRoomId);
+                for (const d2 of deferred) {
+                  messageText = await this._augmentWithAttachment(d2.info, messageText, resolvedRoomId, d2.senderDeviceId);
+                  foldedFrom.push(d2.senderDeviceId ?? null);
                 }
                 if (roomAttachment) {
-                  messageText = await this._augmentWithAttachment(roomAttachment, messageText, resolvedRoomId);
+                  messageText = await this._augmentWithAttachment(roomAttachment, messageText, resolvedRoomId, senderDeviceId);
+                  foldedFrom.push(senderDeviceId ?? null);
                 } else if (deferred.length === 0) {
-                  messageText = this._withRecentRoomAttachmentNote(resolvedRoomId, messageText);
+                  const noted = this._withRecentRoomAttachmentNote(resolvedRoomId, messageText);
+                  messageText = noted.text;
+                  if (noted.from !== void 0) foldedFrom.push(noted.from);
                 }
               }
               const roomMembers = this._persisted?.rooms?.[resolvedRoomId]?.members ?? [];
               const senderMember = roomMembers.find((m2) => m2.deviceId === senderDeviceId);
               const senderIsAgent = senderMember?.entityType === "agent" ? true : senderMember?.entityType === "owner" || senderMember?.entityType === "human" ? false : void 0;
+              const ownTenantId = this._deviceJwt ? this._decodeTenantIdForRecovery(this._deviceJwt) : null;
+              const isOwnerMember = (deviceId) => {
+                const member = deviceId ? roomMembers.find((m2) => m2.deviceId === deviceId) : void 0;
+                return (member?.entityType === "owner" || member?.entityType === "human") && ownTenantId !== null && typeof member?.tenantId === "string" && member.tenantId.toLowerCase() === ownTenantId;
+              };
+              const senderIsOwner = senderIsAgent === false && isOwnerMember(senderDeviceId);
+              const foreignContent = foldedFrom.some((from) => !isOwnerMember(from));
               const metadata = {
                 messageId: data.message_id ?? "",
                 conversationId: "",
@@ -77670,6 +78030,8 @@ ${baseText}`;
                 roomId: resolvedRoomId,
                 senderDeviceId,
                 senderIsAgent,
+                senderIsOwner,
+                foreignContent,
                 senderName: senderMember?.displayName || "unknown",
                 roomName: this._persisted?.rooms?.[resolvedRoomId]?.name,
                 caption
@@ -77695,7 +78057,10 @@ ${baseText}`;
                 timestamp: data.created_at ?? (/* @__PURE__ */ new Date()).toISOString(),
                 // Bridges require an explicit human classification for room tools.
                 // Reply policy separately uses this field for agent-loop prevention.
-                senderIsAgent
+                senderIsAgent,
+                // #1459 — owner-only power keys on these, never on senderIsAgent.
+                senderIsOwner,
+                foreignContent
               });
               const contextualMessage = senderIsAgent ? messageText : `[${senderLabel}]: ${messageText}`;
               Promise.resolve(this.config.onMessage?.(contextualMessage, metadata)).catch((err) => {
@@ -78751,16 +79116,57 @@ ${baseText}`;
             }
             return await mlsGroup.encrypt(plaintextBytes);
           }
+          /** #1518: is the server answering at all? Bounded; any failure is "no". */
+          async _serverReachable() {
+            try {
+              const res = await fetch(`${this.config.apiUrl}/health`, { signal: AbortSignal.timeout(5e3) });
+              return res.ok;
+            } catch {
+              return false;
+            }
+          }
+          /** #1518: the server is down — don't re-key (that needs the same server).
+           *  Clear the run so the next failures ask again. Reported as handled. */
+          _deferResync(groupKey, groupId, why) {
+            this._mlsDecryptFailCounts.delete(groupKey);
+            console.warn(
+              `[SecureChannel] Resync for ${groupId.slice(0, 8)}: server unreachable (${why}) \u2014 NOT re-keying; will retry (#1518)`
+            );
+            return true;
+          }
+          /** #1518: has this process already decrypted the frame with this id? */
+          _alreadyDecrypted(messageId) {
+            return typeof messageId === "string" && messageId !== "" && this._decryptedMessageIds.has(messageId);
+          }
+          /** #1518: remember a decrypted frame's id (bounded; oldest dropped). */
+          _rememberDecrypted(messageId) {
+            if (typeof messageId !== "string" || messageId === "") return;
+            this._decryptedMessageIds.set(messageId, true);
+            if (this._decryptedMessageIds.size > _SecureChannel.DECRYPTED_ID_CAP) {
+              const oldest = this._decryptedMessageIds.keys().next().value;
+              if (oldest !== void 0) this._decryptedMessageIds.delete(oldest);
+            }
+          }
           async _resyncOnDivergence(groupKey, groupId) {
             const mgr = this._mlsGroups.get(groupKey);
             if (!mgr?.isInitialized) return false;
             const fromEpoch = Number(mgr.epoch);
             try {
-              const res = await fetch(
-                `${this.config.apiUrl}/api/v1/mls/groups/${groupId}/sync?last_epoch=${fromEpoch}`,
-                { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
-              );
+              let res;
+              try {
+                res = await fetch(
+                  `${this.config.apiUrl}/api/v1/mls/groups/${groupId}/sync?last_epoch=${fromEpoch}`,
+                  { headers: { Authorization: `Bearer ${this._deviceJwt}` } }
+                );
+              } catch (netErr) {
+                if (!await this._serverReachable()) return this._deferResync(groupKey, groupId, String(netErr));
+                console.warn(`[SecureChannel] Resync-on-divergence failed for ${groupId.slice(0, 8)}:`, netErr);
+                return false;
+              }
               if (!res.ok) {
+                if ((res.status >= 500 || res.status === 429) && !await this._serverReachable()) {
+                  return this._deferResync(groupKey, groupId, `HTTP ${res.status}`);
+                }
                 console.warn(`[SecureChannel] Resync /sync failed for ${groupId.slice(0, 8)}: ${res.status}`);
                 return false;
               }
@@ -79875,9 +80281,14 @@ ${baseText}`;
               console.warn(`[SecureChannel] MLS group not loaded for A2A ${a2aChannelId.slice(0, 8)}`);
               return;
             }
+            if (this._alreadyDecrypted(data.message_id)) {
+              console.debug(`[SecureChannel] MLS A2A frame ${String(data.message_id).slice(0, 8)} already read \u2014 replay skipped`);
+              return;
+            }
             try {
               const ciphertext = new Uint8Array(Buffer.from(data.payload, "hex"));
               const result = await mlsGroup.decrypt(ciphertext);
+              this._rememberDecrypted(data.message_id);
               this._mlsDecryptFailCounts.delete(`a2a:${a2aChannelId}`);
               await saveMlsState(this.config.dataDir, groupId, JSON.stringify(mlsGroup.exportState()));
               if (result.isHandshake || !result.plaintext) {
@@ -80586,7 +80997,7 @@ ${baseText}`;
                 );
                 this._authFailedThisSession = true;
                 this._setState("error");
-                this.emit("auth_failed", { reason: "ws_auth_rejected" });
+                this.emit("auth_failed", { reason: "ws_auth_rejected", deviceGone: false });
                 return;
               }
               if (lastCode === 4e3) {
@@ -80625,7 +81036,7 @@ ${baseText}`;
             this._state = newState;
             this.emit("state", newState);
             this.config.onStateChange?.(newState);
-            if (newState === "disconnected" && !this._pollFallbackTimer && this._deviceJwt) {
+            if (newState === "disconnected" && !this._pollFallbackTimer && this._deviceJwt && !this._suspended) {
               this._startPollFallback();
             }
             if (newState === "ready" || newState === "error" || this._stopped) {
@@ -80762,8 +81173,10 @@ ${baseText}`;
            * blindly. We ask the PUBLIC /devices/{id}/status endpoint (no JWT needed, so
            * it answers even when our device JWT is being rejected):
            *   - ACTIVE          -> reconnect in place (transient); stay online.
-           *   - non-ACTIVE      -> terminal (genuinely revoked; operator must re-enroll).
-           *   - unreachable/429  -> reconnect (inconclusive; a network blip shouldn't
+           *   - SUSPENDED       -> suspended-wait (owner paused it; resume later).
+           *   - REVOKED/deleted -> terminal via `_terminalDeviceGone` (auth_failed with
+           *                        deviceGone: the bridges exit and remove their service).
+           *   - anything else / unreachable / 429 -> reconnect (inconclusive; a network blip shouldn't
            *                         permanently kill a healthy agent — the WS is down too,
            *                         so normal backoff handles it, and the war cap bounds
            *                         thrash if the device really is dead).
@@ -80803,10 +81216,58 @@ ${baseText}`;
             }
             this._authFailedThisSession = true;
             const authReason = data?.reason ?? "unknown";
+            const standing = await this._readDeviceStanding();
+            if (standing.kind === "suspended") {
+              this._authFailedThisSession = false;
+              this._enterSuspendedWait("connection_rejected");
+              return;
+            }
+            const deviceGone = standing.kind === "gone";
             console.warn(
-              `[SecureChannel] connection_rejected (reason=${data?.reason ?? "unknown"}, retryable=false) \u2014 terminal; surfacing auth_failed`
+              `[SecureChannel] connection_rejected (reason=${data?.reason ?? "unknown"}, retryable=false) \u2014 terminal; surfacing auth_failed (deviceGone=${deviceGone})`
             );
-            this.emit("auth_failed", { reason: authReason });
+            this.emit("auth_failed", { reason: authReason, deviceGone });
+          }
+          /**
+           * How long an opened socket may stay silent before we treat it as served.
+           * The backend's reject_connection sends `connection_rejected` immediately
+           * after the accept, so a refused socket's first frame lands well inside
+           * this; a served agent with a hub gets `hub_identity_sync` sooner still.
+           */
+          static OPEN_SETTLE_MS = 1500;
+          /**
+           * Per-socket "has the server agreed to serve this session?" latch. Settles
+           * once: served on the first non-rejection frame or when the settle window
+           * passes quietly; rejected on `connection_rejected` or a close first.
+           * `rejected` stays readable afterwards so long open-handler work can bail.
+           */
+          _createServedGate() {
+            let verdict = null;
+            let rejected = false;
+            let timer = null;
+            const waiters = [];
+            const settle2 = (ok) => {
+              if (!ok) rejected = true;
+              if (verdict !== null) return;
+              verdict = ok;
+              if (timer) {
+                clearTimeout(timer);
+                timer = null;
+              }
+              for (const w2 of waiters.splice(0)) w2(ok);
+            };
+            return {
+              wait: () => {
+                if (verdict !== null) return Promise.resolve(verdict && !rejected);
+                if (!timer) timer = setTimeout(() => settle2(true), _SecureChannel.OPEN_SETTLE_MS);
+                return new Promise((resolve4) => waiters.push(resolve4));
+              },
+              markServed: () => settle2(true),
+              markRejected: () => settle2(false),
+              get rejected() {
+                return rejected;
+              }
+            };
           }
           // --- Owner pause (device SUSPENDED) — NON-final ---------------------------
           //
@@ -80831,6 +81292,7 @@ ${baseText}`;
               this._reconnectTimer = null;
             }
             this._rapidDisconnects = 0;
+            this._stopPollFallback();
             if (!this._suspended) {
               this._suspended = true;
               console.log(
@@ -80857,30 +81319,40 @@ ${baseText}`;
           }
           async _pollWhileSuspended() {
             if (this._stopped || !this._suspended) return;
-            const deviceId = this._deviceId ?? this._persisted?.deviceId;
-            if (deviceId) {
-              try {
-                const st = await pollDeviceStatus(this.config.apiUrl, deviceId);
-                if (this._stopped || !this._suspended) return;
-                if (!st.rateLimited && (st.status === "ACTIVE" || st.status === "APPROVED")) {
-                  this._clearSuspendedWait();
-                  this._reconnectAttempt = 0;
-                  console.log("[SecureChannel] Agent resumed by its owner \u2014 reconnecting");
-                  this.emit("resumed");
-                  this._connect();
-                  return;
-                }
-                if (!st.rateLimited && st.status === "REVOKED") {
-                  this._clearSuspendedWait();
-                  this._handleError(new Error("Device was revoked"));
-                  return;
-                }
-              } catch (err) {
-                console.warn("[SecureChannel] status check while paused failed; still waiting:", err);
-              }
+            const standing = await this._readDeviceStanding();
+            if (this._stopped || !this._suspended) return;
+            if (standing.kind === "active") {
+              this._clearSuspendedWait();
+              this._reconnectAttempt = 0;
+              console.log("[SecureChannel] Agent resumed by its owner \u2014 reconnecting");
+              this.emit("resumed");
+              this._connect();
+              return;
+            }
+            if (standing.kind === "gone") {
+              await this._terminalDeviceGone(standing.reason, "suspended_wait");
+              return;
+            }
+            if (standing.kind === "unknown") {
+              console.warn(`[SecureChannel] status check while paused inconclusive (${standing.why}); still waiting`);
             }
             this._scheduleSuspendedPoll();
           }
+          /**
+           * The device is CONFIRMED gone (status endpoint: REVOKED, or the row is
+           * deleted). Stop for good through the documented terminal surface:
+           * re_enroll report, `auth_failed{deviceGone:true}` (bridges exit and remove
+           * their service), then the legacy `error("Device was revoked")` the OpenClaw
+           * lifecycle and older listeners key on.
+           */
+          async _terminalDeviceGone(reason, source) {
+            this._clearSuspendedWait();
+            this._authFailedThisSession = true;
+            console.warn(`[SecureChannel] ${source}: device confirmed gone (${reason}) \u2014 terminal`);
+            await this._postAuthFailedToBackend(reason);
+            this.emit("auth_failed", { reason, deviceGone: true });
+            this._handleError(new Error("Device was revoked"));
+          }
           async _handleDeviceRevoked() {
             const now = Date.now();
             this._revokeRecoveries = this._revokeRecoveries.filter(
@@ -80898,35 +81370,25 @@ ${baseText}`;
               this._handleError(new Error("Device was revoked"));
               return;
             }
-            let reconnect;
-            try {
-              const status = await pollDeviceStatus(this.config.apiUrl, deviceId);
-              if (status.status === "SUSPENDED") {
-                this._enterSuspendedWait("device_revoked");
-                return;
-              }
-              reconnect = status.rateLimited === true || status.status === "ACTIVE";
-              if (!reconnect) {
-                console.warn(
-                  `[SecureChannel] device_revoked confirmed by server (status=${status.status}) \u2014 terminal`
-                );
-              }
-            } catch (err) {
-              console.warn(
-                "[SecureChannel] device_revoked status check failed; reconnecting (inconclusive):",
-                err
-              );
-              reconnect = true;
+            const standing = await this._readDeviceStanding();
+            if (standing.kind === "suspended") {
+              this._enterSuspendedWait("device_revoked");
+              return;
             }
-            if (reconnect) {
-              this._revokeRecoveries.push(now);
-              console.log(
-                "[SecureChannel] device_revoked but device not confirmed dead \u2014 reconnecting (self-heal)"
-              );
-              this._scheduleReconnect();
+            if (standing.kind === "gone") {
+              await this._terminalDeviceGone(standing.reason, "device_revoked");
               return;
             }
-            this._handleError(new Error("Device was revoked"));
+            if (standing.kind === "unknown") {
+              console.warn(
+                `[SecureChannel] device_revoked status check inconclusive (${standing.why}); reconnecting`
+              );
+            }
+            this._revokeRecoveries.push(now);
+            console.log(
+              "[SecureChannel] device_revoked but device not confirmed dead \u2014 reconnecting (self-heal)"
+            );
+            this._scheduleReconnect();
           }
           /**
            * Persist all ratchet session states to disk.
@@ -80990,7 +81452,8 @@ ${baseText}`;
             aliases: ["av", "agent-vault"]
           },
           capabilities: {
-            chatTypes: ["direct", "room"]
+            chatTypes: ["direct", "group"]
+            // #1474: a room is OpenClaw's "group"
           },
           config: {
             listAccountIds,
@@ -81726,7 +82189,7 @@ ${actionsText}`);
         "use strict";
         init_llm_response_parser();
         init_llm_cost();
-        traceStore = new AsyncLocalStorage2();
+        traceStore = new AsyncLocalStorage3();
       }
     });
     init_tool_audit = __esm2({
@@ -81749,6 +82212,7 @@ ${actionsText}`);
         init_openclaw_compat();
         init_lifecycle();
         init_tool_audit();
+        init_tool_telemetry();
         init_harness_compat();
         init_types();
         managedRoutesRequested = false;
@@ -102474,7 +102938,8 @@ data:
         await init_skill_telemetry();
         await init_policy_enforcer();
         init_room_protocol();
-        VERSION = true ? "0.23.53" : "0.0.0-dev";
+        init_tool_telemetry();
+        VERSION = true ? "0.23.61" : "0.0.0-dev";
       }
     });
     await init_index();
@@ -103126,7 +103591,7 @@ var init_cli = __esm({
     "use strict";
     await init_dist();
     init_driver();
-    VERSION2 = "0.1.8";
+    VERSION2 = "0.1.10";
     HELP = `AgentVault OpenAI Bridge ${VERSION2}
 Usage: AV_AGENT_NAME=<name> agentvault-openai-bridge <command>
 
@@ -103294,7 +103759,39 @@ ${text}`, controller.signal);
         } catch {
         }
       }
+      /** "Recent problems" (2026-10-26): every reply delivery is one
+       *  `ai.agent.tool.invoke` span (tool `reply` — this bridge has no say tool;
+       *  the model's text IS the post). Outcome, machine error code, duration and
+       *  the conversation only — never the text or an error message. Never throws. */
+      reportReply(target, startedAt, failure2) {
+        try {
+          const sink = this.channel.telemetry;
+          const kind = failure2 ? classifyToolError(failure2.err) : void 0;
+          const outcome = !failure2 ? "success" : kind === "delivery_cancelled" ? "cancelled" : "error";
+          reportToolInvoke(sink && typeof sink.reportCustomSpan === "function" ? sink : null, {
+            toolName: "reply",
+            outcome,
+            errorKind: outcome === "error" ? kind : void 0,
+            durationMs: Date.now() - startedAt,
+            conversation: { kind: target.kind === "room" ? "room" : "direct", id: target.id }
+          });
+        } catch {
+        }
+      }
       async deliver(target, text, signal) {
+        const startedAt = Date.now();
+        let cause;
+        try {
+          await this.deliverOnce(target, text, signal, (e) => {
+            cause = e;
+          });
+        } catch (err) {
+          this.reportReply(target, startedAt, { err: cause ?? err });
+          throw err;
+        }
+        this.reportReply(target, startedAt);
+      }
+      async deliverOnce(target, text, signal, onSendError) {
         const delivery = target.kind === "room" ? this.channel.sendToRoom(target.id, text) : this.channel.send(text, { conversationId: target.id });
         await new Promise((resolve4, reject) => {
           let settled = false;
@@ -103308,15 +103805,18 @@ ${text}`, controller.signal);
           };
           const abort = () => finish(new Error("Delivery cancelled"));
           const timer = setTimeout(() => {
+            finish(new Error("Delivery timed out"));
             this.stopped = true;
             this.invalidate();
             this.report("delivery_timeout");
-            finish(new Error("Delivery timed out"));
           }, this.deliveryTimeoutMs);
           signal.addEventListener("abort", abort, { once: true });
           if (signal.aborted)
             abort();
-          delivery.then(() => finish(), () => finish(new Error("Delivery failed")));
+          delivery.then(() => finish(), (e) => {
+            onSendError(e);
+            finish(new Error("Delivery failed"));
+          });
         });
       }
       async idle() {