@awiki/dsh-plugin 0.3.17 → 0.3.19

package/lib/index.js

@@ -1,8 +1,9 @@
-import { a as fencedMailRecoveryObservability, i as failedMailRecoveryObservability, o as successfulMailRecoveryObservability, r as downloadedAttachment, s as isMessageTarget, t as AwikiSdkError } from "./sdk-adapter-DGcTiEZz.mjs";
-import "@deepseek-ai/cordis";
+import { a as downloadedAttachment, c as successfulMailRecoveryObservability, l as isMessageTarget, n as DSH_AWIKI_PACKAGE_VERSION, o as failedMailRecoveryObservability, r as AwikiSdkError, s as fencedMailRecoveryObservability, t as DSH_AWIKI_MODEL_PROXY_PACKAGE_VERSION } from "./package-version.generated-nZcAVnm8.mjs";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
-import { homedir } from "node:os";
+import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { basename, dirname, isAbsolute, join, resolve } from "node:path";
+import "@deepseek-ai/cordis";
+import { homedir } from "node:os";
 import z from "@deepseek-ai/schemastery";
 import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { SettingsConflictError } from "@deepseek-ai/dsh-settings";
@@ -12,8 +13,122 @@ import { SessionId, SessionLogOffset } from "@deepseek-ai/dsh-session";
 import { installModelSelection } from "@deepseek-ai/dsh-agent";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
 import { fileURLToPath } from "node:url";
-import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { satisfies, validRange } from "semver";
+//#region lib/types/tenant-capability-cache.js
+/** Host-only metadata. Core owns feature truth; this contains no auth material. */
+var TenantCapabilityCache = class {
+	key;
+	directory;
+	path;
+	constructor(stateRoot, endpoint) {
+		this.key = createHash("sha256").update(JSON.stringify([
+			endpoint,
+			stateRoot,
+			1
+		])).digest("hex");
+		this.directory = join(stateRoot, "cache", "tenant-capabilities-v1");
+		this.path = join(this.directory, `${this.key}.json`);
+	}
+	read(validate) {
+		try {
+			const bytes = readFileSync(this.path);
+			if (bytes.length > 16384) return void 0;
+			const value = JSON.parse(bytes.toString("utf8"));
+			if (value.version !== 1 || value.key !== this.key || typeof value.metadata?.handleRecoveryPhoneEnabled !== "boolean") return void 0;
+			return validate(value.metadata);
+		} catch {
+			return;
+		}
+	}
+	write(metadata) {
+		const temporary = `${this.path}.${randomUUID()}.tmp`;
+		try {
+			mkdirSync(this.directory, {
+				recursive: true,
+				mode: 448
+			});
+			writeFileSync(temporary, JSON.stringify({
+				version: 1,
+				key: this.key,
+				metadata
+			}), {
+				mode: 384,
+				flag: "wx"
+			});
+			renameSync(temporary, this.path);
+			return true;
+		} catch {
+			try {
+				unlinkSync(temporary);
+			} catch {}
+			return false;
+		}
+	}
+};
+//#endregion
+//#region lib/types/backend-capabilities.js
+/** Keep the client ceiling and only project a confirmed positive byte limit. */
+function backendAttachmentMaxBytes(snapshot, clientLimit) {
+	if (snapshot?.status !== "confirmed" && snapshot?.status !== "stale") return clientLimit;
+	const capability = snapshot.capabilities.attachments;
+	if (capability?.support !== "supported") return clientLimit;
+	const raw = capability.limits?.max_object_bytes;
+	const value = typeof raw === "number" ? raw : typeof raw === "string" && /^\d+$/.test(raw) ? Number(raw) : NaN;
+	return Number.isSafeInteger(value) && value > 0 ? Math.min(clientLimit, value) : clientLimit;
+}
+const PUBLIC = [
+	"registration.handle_only",
+	"identity.multi_device",
+	"identity.device_revoke",
+	"identity.capability_upgrade",
+	"identity.root_transfer",
+	"agents.managed_agents",
+	"agents.daemon",
+	"services.mail",
+	"services.model_proxy",
+	"services.guest_gateway",
+	"account.state_sync",
+	"content.pages",
+	"content.sites",
+	"content.hosting",
+	"client_updates.policy"
+];
+const MESSAGE = [
+	"direct",
+	"groups",
+	"attachments",
+	"direct_e2ee",
+	"group_e2ee",
+	"encrypted_attachments",
+	"group_open_join",
+	"group_admin_add"
+];
+/** Project one source independently so a failed source cannot erase its peer. */
+function projectBackendSnapshot(snapshot, authenticated) {
+	const result = {};
+	for (const key of authenticated ? MESSAGE : PUBLIC) {
+		const support = snapshot?.capabilities[key]?.support;
+		result[key] = (snapshot?.status === "confirmed" || snapshot?.status === "stale") && (support === "supported" || support === "unsupported") ? support : "unknown";
+	}
+	return result;
+}
+/** Copy only allowlisted support states. Browser never sees endpoints or SDK errors. */
+async function projectBackendFeatures(client, authenticated) {
+	const sources = await Promise.allSettled([client.backendCapabilities?.(false, false), ...authenticated ? [client.backendCapabilities?.(true, false)] : []]);
+	const result = {};
+	for (const [index, source] of sources.entries()) if (source.status === "fulfilled") Object.assign(result, projectBackendSnapshot(source.value, index === 1));
+	else throw source.reason;
+	return result;
+}
+async function requireBackendFeature(client, key) {
+	const snapshot = await client.backendCapabilities?.(!key.includes("."), false);
+	const support = snapshot?.status === "confirmed" || snapshot?.status === "stale" ? snapshot.capabilities[key]?.support : "unknown";
+	if (support !== "supported") throw Object.assign(/* @__PURE__ */ new Error("Server feature unavailable"), {
+		name: "AwikiSdkError",
+		code: support === "unsupported" ? "backend-not-supported" : "backend-unconfirmed"
+	});
+}
+//#endregion
 //#region lib/types/builtin-tenant-config.js
 /** Build-injected two-slot tenant catalog with a source-tree default for tests. */
 function record$2(value) {
@@ -2141,17 +2256,27 @@ function preferences(value, expectedOwnerDid) {
 		if (seen.has(hidden.conversation.id)) invalidState();
 		seen.add(hidden.conversation.id);
 	}
+	const encryptedConversationIds = value.encryptedConversationIds === void 0 ? [] : value.encryptedConversationIds;
+	if (!Array.isArray(encryptedConversationIds) || encryptedConversationIds.length > MAX_HIDDEN_CONVERSATIONS) invalidState();
 	return {
+		encryptedConversationIds: encryptedConversationIds.map((id) => {
+			const canonical = boundedString$1(id, MAX_IDENTIFIER_CHARACTERS);
+			if (!canonical.startsWith("dm:")) invalidState();
+			return canonical;
+		}),
 		version: STORE_VERSION,
 		ownerDid: String(expectedOwnerDid),
 		hiddenConversations
 	};
 }
 function publicPreferences(value) {
-	return { hiddenConversations: value.hiddenConversations.map((hidden) => ({
-		conversation: { ...hidden.conversation },
-		hiddenAt: hidden.hiddenAt
-	})) };
+	return {
+		encryptedConversationIds: [...value.encryptedConversationIds ?? []],
+		hiddenConversations: value.hiddenConversations.map((hidden) => ({
+			conversation: { ...hidden.conversation },
+			hiddenAt: hidden.hiddenAt
+		}))
+	};
 }
 function emptyPreferences(ownerDid) {
 	return {
@@ -2164,6 +2289,15 @@ function emptyPreferences(ownerDid) {
 function normalizeConversationPreferenceMutation(value) {
 	try {
 		if (!isRecord$3(value)) return void 0;
+		if (value.action === "security" && typeof value.encrypted === "boolean") {
+			const conversationId = boundedString$1(value.conversationId, MAX_IDENTIFIER_CHARACTERS);
+			if (!conversationId.startsWith("dm:")) return void 0;
+			return {
+				action: "security",
+				conversationId,
+				encrypted: value.encrypted
+			};
+		}
 		if (value.action === "hide") return {
 			action: "hide",
 			conversation: conversation(value.conversation)
@@ -2196,6 +2330,17 @@ var AwikiConversationPreferenceStore = class {
 			const current = await this.load(ownerDid);
 			let next;
 			switch (normalized.action) {
+				case "security": {
+					const ids = new Set(current.encryptedConversationIds ?? []);
+					if (normalized.encrypted) ids.add(normalized.conversationId);
+					else ids.delete(normalized.conversationId);
+					if (ids.size > MAX_HIDDEN_CONVERSATIONS) invalidState();
+					next = {
+						...current,
+						encryptedConversationIds: [...ids]
+					};
+					break;
+				}
 				case "hide": {
 					const snapshot = normalized.conversation;
 					const hidden = current.hiddenConversations.filter((item) => item.conversation.id !== snapshot.id);
@@ -2765,29 +2910,29 @@ var AwikiAgentListener = class {
 		await this.stateMutation;
 		const route = this.state.conversations[conversation.id];
 		if (route?.lastProcessedMessageId === message.id) return;
-		if (message.content.kind !== "text") {
+		if (message.content.kind !== "text" || message.encrypted === true && message.decryptionState !== "decrypted") {
 			await this.commit(conversation, message.id, route?.sessionId);
 			return;
 		}
 		const parsed = command(message.content.text);
 		if (parsed?.name === "/help") {
-			await this.reply(conversation, message.id, HELP_TEXT);
+			await this.reply(conversation, message, HELP_TEXT);
 			await this.commit(conversation, message.id, route?.sessionId);
 			return;
 		}
 		if (parsed?.name === "/status") {
-			await this.reply(conversation, message.id, route?.sessionId === void 0 ? NO_SESSION_TEXT : `当前 DSH 会话：${route.sessionId}`);
+			await this.reply(conversation, message, route?.sessionId === void 0 ? NO_SESSION_TEXT : `当前 DSH 会话：${route.sessionId}`);
 			await this.commit(conversation, message.id, route?.sessionId);
 			return;
 		}
 		if (parsed?.name === "/new" && parsed.argument.length === 0) {
 			await this.agents.reset(route?.sessionId);
-			await this.reply(conversation, message.id, RESET_TEXT);
+			await this.reply(conversation, message, RESET_TEXT);
 			await this.commit(conversation, message.id, void 0);
 			return;
 		}
 		if (parsed !== void 0 && parsed.name !== "/new") {
-			await this.reply(conversation, message.id, UNKNOWN_COMMAND_TEXT);
+			await this.reply(conversation, message, UNKNOWN_COMMAND_TEXT);
 			await this.commit(conversation, message.id, route?.sessionId);
 			return;
 		}
@@ -2803,10 +2948,10 @@ var AwikiAgentListener = class {
 		} catch {
 			output = AGENT_FAILURE_TEXT;
 		}
-		await this.reply(conversation, message.id, output);
+		await this.reply(conversation, message, output);
 		await this.commit(conversation, message.id, sessionId);
 	}
-	async reply(conversation, messageId, text) {
+	async reply(conversation, message, text) {
 		const parts = chunks(text);
 		for (const [index, part] of parts.entries()) await this.awiki.sendText({
 			target: {
@@ -2814,7 +2959,8 @@ var AwikiAgentListener = class {
 				conversationId: conversation.id
 			},
 			text: part,
-			idempotencyKey: replyKey(messageId, index)
+			security: message.encrypted === true ? "e2ee-required" : "plain",
+			idempotencyKey: replyKey(message.id, index)
 		});
 	}
 	async commit(conversation, messageId, sessionId) {
@@ -3137,7 +3283,7 @@ function endpointsForOrigin(origin, domain) {
 function officialProfile(entry) {
 	return {
 		tenantId: entry.tenantId,
-		storageScopeId: entry.storageScopeId,
+		storageScopeId: randomUUID(),
 		kind: "built_in",
 		displayName: entry.displayName,
 		backendBaseUrl: entry.backendOrigin,
@@ -3177,10 +3323,13 @@ function decodeTenant(value) {
 	const backendBaseUrl = safeString(value.backendBaseUrl);
 	const didHost = safeString(value.didHost);
 	const endpoints = decodeEndpoints(value.endpoints);
+	const preferenceTenantIds = value.preferenceTenantIds;
+	if (preferenceTenantIds !== void 0 && (!Array.isArray(preferenceTenantIds) || preferenceTenantIds.some((id) => typeof id !== "string" || id.trim() === "") || new Set(preferenceTenantIds).size !== preferenceTenantIds.length)) return void 0;
 	if (tenantId === void 0 || storageScopeId === void 0 || displayName === void 0 || backendBaseUrl === void 0 || didHost === void 0 || endpoints === void 0 || value.kind !== "built_in" && value.kind !== "custom" || value.lifecycle !== "active" && value.lifecycle !== "inactive" && value.lifecycle !== "archived" || value.storageLayout !== "scope-v1" && value.storageLayout !== "legacy-base" && value.storageLayout !== "domain-v1") return;
 	return {
 		tenantId,
 		storageScopeId,
+		...preferenceTenantIds === void 0 ? {} : { preferenceTenantIds },
 		kind: value.kind,
 		displayName,
 		backendBaseUrl,
@@ -3190,12 +3339,12 @@ function decodeTenant(value) {
 		endpoints
 	};
 }
-function decodeDocument(value) {
+function decodeDocument(value, allowDuplicateScopes = false) {
 	if (!isRecord$1(value) || value.schemaVersion !== 1 || !Number.isSafeInteger(value.officialCatalogVersion) || value.officialCatalogVersion < 1 || value.officialCatalogVersion > 2 || !Number.isSafeInteger(value.generation) || value.generation < 0 || typeof value.activeTenantId !== "string" || !Array.isArray(value.tenants)) return void 0;
 	const tenants = value.tenants.map(decodeTenant);
 	if (tenants.some((tenant) => tenant === void 0)) return void 0;
 	const complete = tenants;
-	if (new Set(complete.map((tenant) => tenant.tenantId)).size !== complete.length || new Set(complete.map((tenant) => tenant.storageScopeId)).size !== complete.length || !complete.some((tenant) => tenant.tenantId === value.activeTenantId && tenant.lifecycle === "active") || complete.filter((tenant) => tenant.lifecycle === "active").length !== 1) return void 0;
+	if (new Set(complete.map((tenant) => tenant.tenantId)).size !== complete.length || !allowDuplicateScopes && new Set(complete.map((tenant) => tenant.storageScopeId)).size !== complete.length || complete.some((tenant) => !/^[a-zA-Z0-9_-]+$/u.test(tenant.storageScopeId)) || !complete.some((tenant) => tenant.tenantId === value.activeTenantId && tenant.lifecycle === "active") || complete.filter((tenant) => tenant.lifecycle === "active").length !== 1) return void 0;
 	return {
 		schemaVersion: 1,
 		officialCatalogVersion: 2,
@@ -3213,7 +3362,7 @@ function directoryHasData(path) {
 }
 function sameOfficialEndpoint(tenant, entry) {
 	const origin = entry.backendOrigin;
-	return tenant.didHost === entry.didHost || tenant.backendBaseUrl.replace(/\/$/u, "") === origin || tenant.endpoints.userServiceUrl.replace(/\/$/u, "") === origin;
+	return tenant.didHost === entry.didHost && tenant.backendBaseUrl.replace(/\/$/u, "") === origin && tenant.endpoints.userServiceUrl.replace(/\/$/u, "") === origin;
 }
 function preservedTenantId(tenants, tenant) {
 	const base = `custom-${tenant.storageScopeId}`;
@@ -3244,6 +3393,7 @@ function reconcileOfficials(document) {
 				tenants[exactIndex] = {
 					...officialProfile(entry),
 					storageScopeId: current.storageScopeId,
+					...current.preferenceTenantIds === void 0 ? {} : { preferenceTenantIds: current.preferenceTenantIds },
 					storageLayout: current.storageLayout,
 					lifecycle: current.lifecycle
 				};
@@ -3253,7 +3403,8 @@ function reconcileOfficials(document) {
 			tenants[exactIndex] = {
 				...current,
 				tenantId: preservedId,
-				kind: "custom"
+				kind: "custom",
+				preferenceTenantIds: [.../* @__PURE__ */ new Set([current.tenantId, ...current.preferenceTenantIds ?? []])]
 			};
 			if (activeTenantId === current.tenantId) activeTenantId = preservedId;
 			exactIndex = -1;
@@ -3265,6 +3416,7 @@ function reconcileOfficials(document) {
 				tenants[legacyIndex] = {
 					...officialProfile(entry),
 					storageScopeId: current.storageScopeId,
+					preferenceTenantIds: [.../* @__PURE__ */ new Set([current.tenantId, ...current.preferenceTenantIds ?? []])],
 					storageLayout: current.storageLayout,
 					lifecycle: current.lifecycle
 				};
@@ -3282,6 +3434,7 @@ function reconcileOfficials(document) {
 			tenants[endpointIndex] = {
 				...officialProfile(entry),
 				storageScopeId: current.storageScopeId,
+				preferenceTenantIds: [.../* @__PURE__ */ new Set([current.tenantId, ...current.preferenceTenantIds ?? []])],
 				storageLayout: current.storageLayout,
 				lifecycle: current.lifecycle
 			};
@@ -3298,6 +3451,50 @@ function reconcileOfficials(document) {
 function cloneDocument(document) {
 	return structuredClone(document);
 }
+function tenantStateRoot(base, tenant) {
+	if (tenant.storageLayout === "legacy-base") return resolve(base);
+	if (tenant.storageLayout === "domain-v1") return resolve(dirname(base), "tenants", normalizeAwikiDomain(tenant.didHost), basename(base));
+	return resolve(dirname(base), "tenant-scopes", tenant.storageScopeId, basename(base));
+}
+function validateDocument(base, document) {
+	if (decodeDocument(document) === void 0 || new Set(document.tenants.map((tenant) => tenantStateRoot(base, tenant))).size !== document.tenants.length) throw new Error("registry schema or storage ownership invariants are invalid");
+}
+/** Repair only the known catalog-slot collision with a unique pre-migration owner. */
+function repairCatalogCollision(base, parsed, backupPath) {
+	const document = decodeDocument(parsed, true);
+	if (document === void 0 || !existsSync(backupPath)) return void 0;
+	const backup = decodeDocument(JSON.parse(readFileSync(backupPath, "utf8")));
+	if (backup === void 0) return void 0;
+	let repaired = false;
+	const tenants = [...document.tenants];
+	for (const entry of OFFICIALS) {
+		const group = tenants.filter((tenant) => tenant.storageScopeId === entry.storageScopeId);
+		if (group.length !== 2) continue;
+		const current = group.find((tenant) => tenant.tenantId === entry.tenantId && sameOfficialEndpoint(tenant, entry));
+		const preserved = group.find((tenant) => tenant.kind === "custom" && tenant.tenantId === `custom-${entry.storageScopeId}`);
+		if (current === void 0 || preserved === void 0 || current.storageLayout !== "scope-v1" || preserved.storageLayout !== "scope-v1") continue;
+		const owners = backup.tenants.filter((tenant) => tenant.storageScopeId === entry.storageScopeId);
+		const owner = owners[0];
+		if (owners.length !== 1 || owner === void 0 || owner.storageLayout !== preserved.storageLayout || owner.didHost !== preserved.didHost || owner.backendBaseUrl !== preserved.backendBaseUrl || JSON.stringify(owner.endpoints) !== JSON.stringify(preserved.endpoints)) continue;
+		const identityPath = join(tenantStateRoot(base, preserved), "identities", "registry.json");
+		if (existsSync(identityPath)) {
+			const identities = JSON.parse(readFileSync(identityPath, "utf8"));
+			if (!isRecord$1(identities) || !isRecord$1(identities.credentials) || Object.values(identities.credentials).some((value) => !isRecord$1(value) || typeof value.did !== "string" || !value.did.startsWith(`did:wba:${preserved.didHost}:`))) continue;
+		}
+		tenants[tenants.indexOf(current)] = {
+			...current,
+			storageScopeId: randomUUID()
+		};
+		repaired = true;
+	}
+	if (!repaired) return void 0;
+	const result = {
+		...document,
+		tenants
+	};
+	validateDocument(base, result);
+	return result;
+}
 /** Durable registry. All mutations are synchronous, backup-aware, and atomic. */
 var AwikiTenantRegistry = class AwikiTenantRegistry {
 	baseStateRoot;
@@ -3317,10 +3514,16 @@ var AwikiTenantRegistry = class AwikiTenantRegistry {
 	static open(baseStateRoot, seed) {
 		const filePath = registryFilePath(baseStateRoot);
 		if (existsSync(filePath)) try {
-			const decoded = decodeDocument(JSON.parse(readFileSync(filePath, "utf8")));
+			const parsed = JSON.parse(readFileSync(filePath, "utf8"));
+			const decoded = decodeDocument(parsed) ?? repairCatalogCollision(baseStateRoot, parsed, `${filePath}.pre-v1.bak`);
 			if (decoded === void 0) throw new Error("registry schema or invariants are invalid");
 			const registry = new AwikiTenantRegistry(baseStateRoot, reconcileOfficials(decoded), true);
-			if (JSON.stringify(decoded) !== JSON.stringify(registry.document)) registry.persist(true);
+			validateDocument(baseStateRoot, registry.document);
+			if (JSON.stringify(parsed) !== JSON.stringify(registry.document)) {
+				const repairBackup = `${filePath}.pre-scope-repair.bak`;
+				if (!existsSync(repairBackup)) copyFileSync(filePath, repairBackup);
+				registry.persist(true);
+			}
 			return registry;
 		} catch (error) {
 			const diagnostic = `AWiki tenant registry was not migrated: ${error instanceof Error ? error.message : "unknown error"}\n`;
@@ -3329,7 +3532,7 @@ var AwikiTenantRegistry = class AwikiTenantRegistry {
 				encoding: "utf8",
 				mode: 384
 			});
-			return new AwikiTenantRegistry(baseStateRoot, legacyDocument(seed, !seed.configured), false);
+			throw new Error("awiki: tenant registry needs repair; no environment was opened", { cause: error });
 		}
 		const hasLegacyData = directoryHasData(baseStateRoot);
 		const document = seed.configured || hasLegacyData ? legacyDocument(seed, hasLegacyData && !seed.configured) : freshDocument();
@@ -3354,9 +3557,7 @@ var AwikiTenantRegistry = class AwikiTenantRegistry {
 		return tenant === void 0 ? void 0 : structuredClone(tenant);
 	}
 	stateRoot(tenant) {
-		if (tenant.storageLayout === "legacy-base") return this.baseStateRoot;
-		if (tenant.storageLayout === "domain-v1") return join(dirname(this.baseStateRoot), "tenants", tenant.didHost, basename(this.baseStateRoot));
-		return join(dirname(this.baseStateRoot), "tenant-scopes", tenant.storageScopeId, basename(this.baseStateRoot));
+		return tenantStateRoot(this.baseStateRoot, tenant);
 	}
 	createCustom(displayName, rawDomain) {
 		const domain = normalizeAwikiDomain(rawDomain);
@@ -3426,6 +3627,7 @@ var AwikiTenantRegistry = class AwikiTenantRegistry {
 		return cloneDocument(this.document);
 	}
 	persist(backup) {
+		validateDocument(this.baseStateRoot, this.document);
 		if (!this.persistent) throw new Error("awiki: tenant registry is read-only until its migration diagnostic is resolved");
 		mkdirSync(dirname(this.filePath), { recursive: true });
 		if (backup && existsSync(this.filePath) && !existsSync(this.backupPath)) copyFileSync(this.filePath, this.backupPath);
@@ -3569,11 +3771,6 @@ function checkInstallation(requirements, installed) {
 	return {};
 }
 //#endregion
-//#region lib/types/package-version.generated.js
-/** Generated from package.json by scripts/sync-package-versions.mjs. */
-const DSH_AWIKI_PACKAGE_VERSION = "0.3.17";
-const DSH_AWIKI_MODEL_PROXY_PACKAGE_VERSION = "0.1.11";
-//#endregion
 //#region lib/types/update-policy.js
 /** Tenant-scoped DSH AWiki plugin update policy and verified cache. */
 const DSH_AWIKI_VERSION = DSH_AWIKI_PACKAGE_VERSION;
@@ -3636,6 +3833,7 @@ async function checkAwikiUpdatePolicy(options) {
 		signal.throwIfAborted();
 		const endpoint = new URL("/user-service/v1/server-info", origin);
 		endpoint.searchParams.set("client_platform", "dsh");
+		endpoint.searchParams.set("capabilities_version", "1");
 		const response = await bounded((options.fetcher ?? fetch)(endpoint, {
 			method: "GET",
 			headers: {
@@ -3664,7 +3862,19 @@ async function checkAwikiUpdatePolicy(options) {
 		const bytes = await bounded(readPolicyBody(response));
 		signal.throwIfAborted();
 		if (bytes.byteLength > MAX_POLICY_BYTES) throw new Error("policy response exceeds 1 MiB");
-		const policy = decodeServerInfoPolicy(JSON.parse(Buffer.from(bytes).toString("utf8")), origin, cached?.policy.policy_revision);
+		const document = JSON.parse(Buffer.from(bytes).toString("utf8"));
+		if (isRecord(document) && document.schema_version === 1 && document.capabilities_version === 1 && isRecord(document.client_updates) && isRecord(document.client_updates.policy) && document.client_updates.policy.protocol_version === 1 && document.client_updates.policy.enabled === false) return {
+			...cached === void 0 ? {
+				...base,
+				usedCache: false,
+				restricted: false,
+				modelProxyRestricted: false
+			} : statusFromPolicy(base, cached.policy, cached.checkedAt, false, true, options.installedRuntime),
+			offline: false,
+			policyUnavailable: true,
+			checkState: "unavailable"
+		};
+		const policy = decodeServerInfoPolicy(document, origin, cached?.policy.policy_revision);
 		if (policy === void 0) {
 			rmSync(cachePath, { force: true });
 			return {
@@ -3994,6 +4204,8 @@ const Config = z.object({
 	summaryMaxInputBytes: z.number().default(DEFAULT_SUMMARY_MAX_INPUT_BYTES)
 });
 const FAILURE_CODES = /* @__PURE__ */ new Set([
+	"backend-not-supported",
+	"backend-unconfirmed",
 	"client-version-unsupported",
 	"not-registered",
 	"signed-out",
@@ -4011,6 +4223,7 @@ const FAILURE_CODES = /* @__PURE__ */ new Set([
 	"state-in-use",
 	"rate-limited",
 	"group-membership-required",
+	"group-member-encryption-not-ready",
 	"group-identity-stale",
 	"attachment-too-large",
 	"summary-unavailable",
@@ -4033,6 +4246,8 @@ const RESUMABLE_JOIN_PHASES = /* @__PURE__ */ new Set([
 	"approval_prepared"
 ]);
 const FAILURE_MESSAGES = {
+	"backend-not-supported": "This server does not support this feature.",
+	"backend-unconfirmed": "Server features are not confirmed yet. Please retry.",
 	"client-version-unsupported": "This AWiki plugin version is not supported by the active tenant. Update the plugin or switch tenants.",
 	"not-registered": "No AWiki identity is registered for this deployment.",
 	"signed-out": "This installation is signed out of AWiki.",
@@ -4049,6 +4264,7 @@ const FAILURE_MESSAGES = {
 	"conflict": "The AWiki operation conflicts with current state.",
 	"state-in-use": "AWiki data is already open in another client.",
 	"rate-limited": "The AWiki service rate-limited the request.",
+	"group-member-encryption-not-ready": "The member has not prepared encrypted messaging.",
 	"group-membership-required": "The active AWiki identity is not a member of this group.",
 	"group-identity-stale": "The AWiki group identity binding is still recovering.",
 	"attachment-too-large": "The attachment exceeds this deployment's size limit.",
@@ -4114,7 +4330,7 @@ function publishedServiceBaseUrl(services, name, allowInsecureLoopbackForTesting
 	const candidate = services[name];
 	if (typeof candidate !== "object" || candidate === null || Array.isArray(candidate)) return void 0;
 	const value = candidate;
-	if (value.enabled !== true || typeof value.base_url !== "string") return void 0;
+	if (value.enabled !== true || value.protocol_version !== 1 || typeof value.base_url !== "string") return void 0;
 	try {
 		const baseUrl = serviceUrl(`server-info.services.${name}.base_url`, value.base_url, allowInsecureLoopbackForTesting);
 		if (new URL(baseUrl).search !== "") return void 0;
@@ -4258,6 +4474,8 @@ const MAX_PROFILE_TAGS = 5;
 const MAX_PROFILE_TAG_CHARACTERS = 30;
 const MAX_MESSAGE_CHARACTERS = 2e4;
 function normalizeCreateGroupRequest(request) {
+	if (request?.operationId !== void 0 && (typeof request.operationId !== "string" || !/^[a-zA-Z0-9_-]{1,100}$/.test(request.operationId))) return void 0;
+	if (request?.encrypted !== void 0 && typeof request.encrypted !== "boolean") return void 0;
 	if (typeof request?.name !== "string" || !Array.isArray(request.members)) return void 0;
 	const name = request.name.trim();
 	if (name.length === 0 || Array.from(name).length > MAX_GROUP_NAME_CHARACTERS) return void 0;
@@ -4274,7 +4492,9 @@ function normalizeCreateGroupRequest(request) {
 	}
 	return {
 		name,
-		members
+		members,
+		...request.operationId === void 0 ? {} : { operationId: request.operationId },
+		...request.encrypted === void 0 ? {} : { encrypted: request.encrypted }
 	};
 }
 function normalizeMember(value) {
@@ -4286,6 +4506,22 @@ function normalizeGroupDid(value) {
 	if (typeof value !== "string" || !value.startsWith("did:") || value.length > 2048) return void 0;
 	return value;
 }
+function validAvatarRequest(request, image) {
+	if (request === null || typeof request !== "object" || Array.isArray(request)) return false;
+	const value = request;
+	const keys = image ? [
+		"requestId",
+		"expectedProfileVersion",
+		"imageBase64"
+	] : ["requestId", "expectedProfileVersion"];
+	if (Object.keys(value).length !== keys.length || Object.keys(value).some((key) => !keys.includes(key))) return false;
+	if (typeof value.requestId !== "string" || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/u.test(value.requestId)) return false;
+	if (typeof value.expectedProfileVersion !== "string" || !/^(0|[1-9][0-9]{0,18})$/u.test(value.expectedProfileVersion) || BigInt(value.expectedProfileVersion) > 9223372036854775807n) return false;
+	if (!image) return true;
+	if (typeof value.imageBase64 !== "string" || value.imageBase64.length === 0 || value.imageBase64.length > 699052) return false;
+	const bytes = Buffer.from(value.imageBase64, "base64");
+	return bytes.length <= 524288 && bytes.length >= 4 && bytes[0] === 255 && bytes[1] === 216 && bytes[bytes.length - 2] === 255 && bytes[bytes.length - 1] === 217 && bytes.toString("base64") === value.imageBase64;
+}
 function normalizeProfileRequest(request) {
 	if (typeof request?.displayName !== "string" || typeof request.bio !== "string" || !Array.isArray(request.tags)) return void 0;
 	const displayName = request.displayName.trim();
@@ -4385,6 +4621,7 @@ function identityAccessTarget(request, configuredDomain) {
 	};
 }
 function normalizeSendTextRequest(request) {
+	if (request?.security !== void 0 && request.security !== "plain" && request.security !== "e2ee-required") return void 0;
 	if (typeof request?.text !== "string" || typeof request.idempotencyKey !== "string" || !isMessageTarget(request.target)) return void 0;
 	const text = request.text;
 	const codePoints = Array.from(text);
@@ -4544,6 +4781,7 @@ let AwikiService = (() => {
 	let _classSuper = TypertRemoteService;
 	let _instanceExtraInitializers = [];
 	let _getConfig_decorators;
+	let _refreshBackendCapabilities_decorators;
 	let _getIntegration_decorators;
 	let _createIntegration_decorators;
 	let _updateIntegration_decorators;
@@ -4574,6 +4812,8 @@ let AwikiService = (() => {
 	let _prepareRootTransfer_decorators;
 	let _confirmRootTransfer_decorators;
 	let _updateDisplayName_decorators;
+	let _setAvatar_decorators;
+	let _clearAvatar_decorators;
 	let _getProfile_decorators;
 	let _updateProfile_decorators;
 	let _sendRecoveryOtp_decorators;
@@ -4586,6 +4826,7 @@ let AwikiService = (() => {
 	let _resolvePeer_decorators;
 	let _createGroup_decorators;
 	let _getGroup_decorators;
+	let _repairGroupSecurity_decorators;
 	let _joinGroup_decorators;
 	let _leaveGroup_decorators;
 	let _getDisplayProfiles_decorators;
@@ -4613,6 +4854,7 @@ let AwikiService = (() => {
 		static {
 			const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
 			_getConfig_decorators = [Remote];
+			_refreshBackendCapabilities_decorators = [Remote];
 			_getIntegration_decorators = [Remote];
 			_createIntegration_decorators = [Remote];
 			_updateIntegration_decorators = [Remote];
@@ -4643,6 +4885,8 @@ let AwikiService = (() => {
 			_prepareRootTransfer_decorators = [Remote];
 			_confirmRootTransfer_decorators = [Remote];
 			_updateDisplayName_decorators = [Remote];
+			_setAvatar_decorators = [Remote];
+			_clearAvatar_decorators = [Remote];
 			_getProfile_decorators = [Remote];
 			_updateProfile_decorators = [Remote];
 			_sendRecoveryOtp_decorators = [Remote];
@@ -4655,6 +4899,7 @@ let AwikiService = (() => {
 			_resolvePeer_decorators = [Remote];
 			_createGroup_decorators = [Remote];
 			_getGroup_decorators = [Remote];
+			_repairGroupSecurity_decorators = [Remote];
 			_joinGroup_decorators = [Remote];
 			_leaveGroup_decorators = [Remote];
 			_getDisplayProfiles_decorators = [Remote];
@@ -4689,6 +4934,17 @@ let AwikiService = (() => {
 				},
 				metadata: _metadata
 			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _refreshBackendCapabilities_decorators, {
+				kind: "method",
+				name: "refreshBackendCapabilities",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "refreshBackendCapabilities" in obj,
+					get: (obj) => obj.refreshBackendCapabilities
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
 			__esDecorate(this, null, _getIntegration_decorators, {
 				kind: "method",
 				name: "getIntegration",
@@ -5019,6 +5275,28 @@ let AwikiService = (() => {
 				},
 				metadata: _metadata
 			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _setAvatar_decorators, {
+				kind: "method",
+				name: "setAvatar",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "setAvatar" in obj,
+					get: (obj) => obj.setAvatar
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _clearAvatar_decorators, {
+				kind: "method",
+				name: "clearAvatar",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "clearAvatar" in obj,
+					get: (obj) => obj.clearAvatar
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
 			__esDecorate(this, null, _getProfile_decorators, {
 				kind: "method",
 				name: "getProfile",
@@ -5151,6 +5429,17 @@ let AwikiService = (() => {
 				},
 				metadata: _metadata
 			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _repairGroupSecurity_decorators, {
+				kind: "method",
+				name: "repairGroupSecurity",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "repairGroupSecurity" in obj,
+					get: (obj) => obj.repairGroupSecurity
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
 			__esDecorate(this, null, _joinGroup_decorators, {
 				kind: "method",
 				name: "joinGroup",
@@ -5428,6 +5717,15 @@ let AwikiService = (() => {
 		tenantSwitching = false;
 		tenantParticipants = /* @__PURE__ */ new Set();
 		activeCapabilities;
+		backendFeatures = {};
+		backendDiagnostics = {};
+		backendFeaturesTask;
+		backendFeaturesRevision = -1;
+		backendSubscriptions = /* @__PURE__ */ new Map();
+		backendSubscriptionPending = /* @__PURE__ */ new Set();
+		backendAttachmentLimit;
+		capabilityDiscoveryTask;
+		capabilityDiscoveryAt = 0;
 		updatePolicyStatus;
 		updatePolicyRequest;
 		updatePolicyTask;
@@ -5524,6 +5822,7 @@ let AwikiService = (() => {
 			registerAwikiTools(ctx, this);
 			ctx.effect(() => async () => {
 				this.updatePolicyRequest?.abort();
+				this.stopBackendSubscriptions();
 				const provider = this.provider;
 				if (provider !== void 0) await this.disposeProvider(provider);
 			}, "awiki: dispose current client provider");
@@ -5607,12 +5906,49 @@ let AwikiService = (() => {
 			this.conversationPreferenceStore = new AwikiConversationPreferenceStore(options.stateRoot);
 			this.mailListClient = new AwikiMailListClient(options.mailServiceUrl, this.externalHttpAuth);
 			this.integrationClient = void 0;
+			this.stopBackendSubscriptions();
+			this.backendFeatures = {};
+			this.backendDiagnostics = {};
+			this.backendFeaturesRevision = -1;
+			this.backendFeaturesTask = void 0;
+			this.backendAttachmentLimit = void 0;
+			this.capabilityDiscoveryTask = void 0;
+			this.capabilityDiscoveryAt = 0;
 			this.activeCapabilities = {
 				tenantId: tenant.tenantId,
 				generation: this.runtimeGeneration,
 				online: false,
 				handleRecoveryPhoneEnabled: false
 			};
+			const metadata = new TenantCapabilityCache(options.stateRoot, options.userServiceUrl).read((value) => {
+				const services = {
+					model_proxy: {
+						enabled: true,
+						protocol_version: 1,
+						base_url: value.modelProxyBaseUrl
+					},
+					guest_gateway: {
+						enabled: true,
+						protocol_version: 1,
+						base_url: value.guestGatewayBaseUrl
+					}
+				};
+				const modelProxyBaseUrl = publishedServiceBaseUrl(services, "model_proxy", this.resolved.allowInsecureLoopbackForTesting);
+				const guestGatewayBaseUrl = publishedServiceBaseUrl(services, "guest_gateway", false);
+				return {
+					handleRecoveryPhoneEnabled: value.handleRecoveryPhoneEnabled,
+					...modelProxyBaseUrl === void 0 ? {} : { modelProxyBaseUrl },
+					...guestGatewayBaseUrl === void 0 ? {} : { guestGatewayBaseUrl }
+				};
+			});
+			if (metadata !== void 0) {
+				this.activeCapabilities = {
+					...this.activeCapabilities,
+					...metadata,
+					online: true
+				};
+				this.integrationClient = metadata.guestGatewayBaseUrl === void 0 ? void 0 : new AwikiIntegrationClient(metadata.guestGatewayBaseUrl, this.externalHttpAuth);
+			}
 			this.signedOut = void 0;
 			this.activeIdentityDid = void 0;
 			this.pendingDeviceJoin = void 0;
@@ -5773,6 +6109,11 @@ let AwikiService = (() => {
 			let committed = false;
 			try {
 				await this.sessionMutation;
+				await this.sessionStore.signOut();
+				this.signedOut = true;
+				this.sessionRevision += 1;
+				this.activeIdentityDid = void 0;
+				await new AwikiSessionStore(registry.stateRoot(target)).signOut();
 				this.invalidateSummaries();
 				for (const participant of this.tenantParticipants) {
 					await participant.prepareSwitch(context);
@@ -5781,8 +6122,11 @@ let AwikiService = (() => {
 				await this.disposeProvider(previousProvider);
 				const targetProvider = this.openTenantProvider(target, factory, false);
 				targetOpened = true;
-				await targetProvider.client.getIdentity();
-				await Promise.all([this.discoverTenantCapabilities(3e3), this.refreshUpdatePolicy()]);
+				if (await targetProvider.client.getIdentity() === null) {
+					await this.sessionStore.signIn();
+					this.signedOut = false;
+				}
+				Promise.all([this.refreshTenantCapabilities(), this.refreshUpdatePolicy()]).catch(() => void 0);
 				registry.commitActive(target.tenantId);
 				committed = true;
 				for (const participant of prepared) await participant.commitSwitch?.(context);
@@ -5860,16 +6204,22 @@ let AwikiService = (() => {
 		*/
 		async getConfig() {
 			this.ensureTenantOptions();
-			const capabilities = await this.discoverTenantCapabilities(1e4);
-			if (this.tenantSwitching || capabilities.generation !== this.runtimeGeneration || capabilities.tenantId !== this.activeTenant?.tenantId) return {
+			if (this.runtimeGeneration !== this.runtimeGeneration) return {
 				ok: false,
 				error: failure("conflict")
 			};
+			const capabilities = this.activeCapabilities;
+			this.refreshBackendProjection();
+			this.refreshTenantCapabilities(false).catch(() => void 0);
+			const serverFeatures = this.backendFeatures;
+			const attachmentMaxBytes = this.backendAttachmentLimit ?? this.resolved.attachmentMaxBytes;
 			return {
 				ok: true,
 				value: {
+					serverFeatures,
+					serverFeatureDiagnostics: this.backendDiagnostics,
 					pollIntervalMs: this.resolved.pollIntervalMs,
-					attachmentMaxBytes: this.resolved.attachmentMaxBytes,
+					attachmentMaxBytes,
 					mailAttachmentMaxCount: this.resolved.mailAttachmentMaxCount,
 					mailAttachmentMaxBytes: Math.min(this.resolved.mailAttachmentMaxBytes, MAIL_HTTP_UPLOAD_MAX_BYTES),
 					mailAttachmentDownloadMaxBytes: this.resolved.mailAttachmentMaxBytes,
@@ -5877,6 +6227,7 @@ let AwikiService = (() => {
 					handleRecoveryPhoneEnabled: capabilities.handleRecoveryPhoneEnabled,
 					...capabilities.guestGatewayBaseUrl === void 0 ? {} : { integrationGuideUrl: new URL("/guest/guide/integration", capabilities.guestGatewayBaseUrl).toString() },
 					tenantId: capabilities.tenantId,
+					tenantStorageScopeId: this.activeTenant.storageScopeId,
 					tenantGeneration: capabilities.generation,
 					tenantOnline: capabilities.online,
 					services: {
@@ -5886,6 +6237,17 @@ let AwikiService = (() => {
 				}
 			};
 		}
+		/** Explicit discovery retry; ordinary config reads retain their zero-argument contract. */
+		async refreshBackendCapabilities() {
+			this.ensureTenantOptions();
+			const generation = this.runtimeGeneration;
+			await Promise.allSettled([this.refreshTenantCapabilities(true), this.refreshBackendProjection(true)]);
+			if (generation !== this.runtimeGeneration) return {
+				ok: false,
+				error: failure("conflict")
+			};
+			return this.getConfig();
+		}
 		/** Trusted same-process capability binding for optional tenant participants. */
 		getTenantCapabilities() {
 			const capabilities = this.activeCapabilities;
@@ -5893,16 +6255,117 @@ let AwikiService = (() => {
 			return { ...capabilities };
 		}
 		/** Refresh the active tenant's optional service advertisement without affecting Core availability. */
-		refreshTenantCapabilities() {
+		refreshTenantCapabilities(force = true) {
 			this.ensureTenantOptions();
-			return this.discoverTenantCapabilities(1e4);
+			if (this.capabilityDiscoveryTask !== void 0) return this.capabilityDiscoveryTask;
+			if (!force && Date.now() - this.capabilityDiscoveryAt < 3e5 && this.activeCapabilities !== void 0) return Promise.resolve(this.activeCapabilities);
+			const generation = this.runtimeGeneration;
+			const task = this.discoverTenantCapabilities(1e4).finally(() => {
+				if (this.runtimeGeneration === generation && this.capabilityDiscoveryTask === task) {
+					this.capabilityDiscoveryTask = void 0;
+					this.capabilityDiscoveryAt = Date.now();
+				}
+			});
+			this.capabilityDiscoveryTask = task;
+			return task;
+		}
+		refreshBackendProjection(force = false) {
+			const provider = this.provider;
+			if (provider === void 0) return Promise.resolve();
+			if (this.backendFeaturesTask !== void 0) return this.backendFeaturesTask;
+			const revision = this.sessionRevision;
+			const generation = this.runtimeGeneration;
+			if (this.backendFeaturesRevision !== revision) {
+				this.backendFeatures = Object.fromEntries(Object.entries(this.backendFeatures).filter(([key]) => key.includes(".")));
+				this.backendAttachmentLimit = void 0;
+				this.backendDiagnostics = this.backendDiagnostics.public === void 0 ? {} : { public: this.backendDiagnostics.public };
+				this.backendFeaturesRevision = revision;
+			}
+			const current = () => provider === this.provider && revision === this.sessionRevision && generation === this.runtimeGeneration;
+			const task = (async () => {
+				const authenticated = !await this.isSignedOut() && await provider.client.getIdentity() !== null;
+				await Promise.all([false, ...authenticated ? [true] : []].map(async (local) => {
+					try {
+						this.observeBackendProjection(provider, local, current);
+						const snapshot = await provider.client.backendCapabilities?.(local, force);
+						if (!current()) return;
+						if (snapshot === void 0) return;
+						if (this.backendSubscriptions.has(local)) return;
+						this.recordBackendDiagnostics(local, snapshot);
+						if (snapshot.status === "unavailable") return;
+						this.backendFeatures = {
+							...this.backendFeatures,
+							...projectBackendSnapshot(snapshot, local)
+						};
+						if (local) this.backendAttachmentLimit = backendAttachmentMaxBytes(snapshot, this.resolved.attachmentMaxBytes);
+						if (this.backendFeatures["agents.managed_agents"] === "unsupported") await this.detachAgentConsumer(provider);
+						else if (this.backendFeatures["agents.managed_agents"] === "supported") this.ensureAgentConsumer(provider);
+					} catch (error) {
+						if (current()) this.ctx.logger("awiki-capabilities").debug("AWiki capability refresh failed: %s", error instanceof AwikiSdkError ? error.code : "unavailable");
+					}
+				}));
+			})().finally(() => {
+				if (this.backendFeaturesTask === task) this.backendFeaturesTask = void 0;
+			});
+			this.backendFeaturesTask = task;
+			task.catch(() => void 0);
+			return task;
+		}
+		recordBackendDiagnostics(local, snapshot) {
+			this.backendDiagnostics = {
+				...this.backendDiagnostics,
+				[local ? "message" : "public"]: {
+					...typeof snapshot.fetched_at === "number" ? { fetchedAt: snapshot.fetched_at } : {},
+					...snapshot.refresh_error === void 0 ? {} : { refreshError: snapshot.refresh_error }
+				}
+			};
+		}
+		stopBackendSubscriptions() {
+			for (const subscription of this.backendSubscriptions.values()) subscription.stop();
+			this.backendSubscriptions.clear();
+			this.backendSubscriptionPending.clear();
+		}
+		observeBackendProjection(provider, local, current) {
+			const subscribe = provider.client.subscribeBackendCapabilities;
+			if (subscribe === void 0 || this.backendSubscriptions.has(local) || this.backendSubscriptionPending.has(local)) return;
+			this.backendSubscriptionPending.add(local);
+			(async () => {
+				const subscription = await subscribe.call(provider.client, local);
+				if (!current()) {
+					subscription.stop();
+					return;
+				}
+				this.backendSubscriptionPending.delete(local);
+				this.backendSubscriptions.set(local, subscription);
+				try {
+					while (current()) {
+						const state = await subscription.nextUpdate();
+						if (state === null || !current()) break;
+						this.recordBackendDiagnostics(local, state.snapshot);
+						if (state.snapshot.status === "unavailable") continue;
+						this.backendFeatures = {
+							...this.backendFeatures,
+							...projectBackendSnapshot(state.snapshot, local)
+						};
+						if (local) this.backendAttachmentLimit = backendAttachmentMaxBytes(state.snapshot, this.resolved.attachmentMaxBytes);
+						if (this.backendFeatures["agents.managed_agents"] === "unsupported") await this.detachAgentConsumer(provider);
+						else if (this.backendFeatures["agents.managed_agents"] === "supported") this.ensureAgentConsumer(provider);
+					}
+				} finally {
+					subscription.stop();
+					if (this.backendSubscriptions.get(local) === subscription) this.backendSubscriptions.delete(local);
+				}
+			})().catch(() => {
+				if (current()) this.backendSubscriptionPending.delete(local);
+			});
 		}
 		async discoverTenantCapabilities(timeoutMs) {
 			const options = this.activeClientOptions;
 			const tenant = this.activeTenant;
 			if (options === void 0 || tenant === void 0) throw new ProviderUnavailableError();
 			const generation = this.runtimeGeneration;
-			const fallback = {
+			const previous = this.activeCapabilities;
+			const fallback = previous?.tenantId === tenant.tenantId && previous.generation === generation ? { ...previous } : {
 				tenantId: tenant.tenantId,
 				generation,
 				online: false,
@@ -5922,6 +6385,7 @@ let AwikiService = (() => {
 			try {
 				const endpoint = new URL("/user-service/v1/server-info", options.userServiceUrl);
 				endpoint.searchParams.set("client_platform", "dsh");
+				endpoint.searchParams.set("capabilities_version", "1");
 				const response = await fetch(endpoint, {
 					method: "GET",
 					headers: {
@@ -5936,19 +6400,37 @@ let AwikiService = (() => {
 				const text = await readBoundedResponseText(response, SERVER_INFO_RESPONSE_MAX_BYTES);
 				const value = text === void 0 ? void 0 : JSON.parse(text);
 				if (typeof value !== "object" || value === null || value.schema_version !== 1) return publish(fallback);
+				const versioned = value.capabilities_version === 1;
+				if (!versioned) {
+					if ("capabilities_version" in value) return publish({
+						tenantId: tenant.tenantId,
+						generation,
+						online: true,
+						handleRecoveryPhoneEnabled: false
+					});
+					return publish(fallback);
+				}
 				const methods = value.identity?.handle_recovery?.methods;
-				const handleRecoveryPhoneEnabled = Array.isArray(methods) && methods.some((method) => typeof method === "object" && method !== null && method.id === "phone" && method.enabled === true && method.verification?.required === true && method.verification?.type === "sms_otp");
-				const services = value.services;
+				const handleRecoveryPhoneEnabled = versioned && Array.isArray(methods) && methods.some((method) => typeof method === "object" && method !== null && method.id === "phone" && method.enabled === true && method.verification?.required === true && method.verification?.type === "sms_otp");
+				const services = versioned ? value.services : void 0;
 				const modelProxyBaseUrl = publishedServiceBaseUrl(services, "model_proxy", this.resolved.allowInsecureLoopbackForTesting);
 				const guestGatewayBaseUrl = publishedServiceBaseUrl(services, "guest_gateway", false);
-				return publish({
+				const capabilities = {
 					tenantId: tenant.tenantId,
 					generation,
 					online: true,
 					handleRecoveryPhoneEnabled,
 					...modelProxyBaseUrl === void 0 ? {} : { modelProxyBaseUrl },
 					...guestGatewayBaseUrl === void 0 ? {} : { guestGatewayBaseUrl }
-				});
+				};
+				if (this.runtimeGeneration === generation && this.activeTenant?.tenantId === tenant.tenantId) {
+					if (!new TenantCapabilityCache(options.stateRoot, options.userServiceUrl).write({
+						handleRecoveryPhoneEnabled,
+						...modelProxyBaseUrl === void 0 ? {} : { modelProxyBaseUrl },
+						...guestGatewayBaseUrl === void 0 ? {} : { guestGatewayBaseUrl }
+					})) this.ctx.logger("awiki-capabilities").debug("AWiki capability metadata persistence failed");
+				}
+				return publish(capabilities);
 			} catch {
 				return publish(fallback);
 			} finally {
@@ -6031,12 +6513,6 @@ let AwikiService = (() => {
 					ok: true,
 					value: { status: "signed-out" }
 				};
-				const identity = await this.run((client) => client.getIdentity(), { allowSignedOut: true });
-				if (!identity.ok) return identity;
-				if (identity.value === null) return {
-					ok: false,
-					error: failure("not-registered")
-				};
 				try {
 					await this.sessionStore.signOut();
 					this.signedOut = true;
@@ -6045,7 +6521,10 @@ let AwikiService = (() => {
 					const session = { status: "signed-out" };
 					this.publishSession(session);
 					const provider = this.provider;
-					if (provider !== void 0) await this.stopProviderRuntime(provider);
+					if (provider !== void 0) {
+						await this.stopProviderRuntime(provider);
+						await this.updateBackendDiscoveryLifecycle(provider, false);
+					}
 					return {
 						ok: true,
 						value: session
@@ -6078,7 +6557,10 @@ let AwikiService = (() => {
 					};
 					this.publishSession(session);
 					const provider = this.provider;
-					if (provider !== void 0) this.ensureProviderRuntime(provider);
+					if (provider !== void 0) {
+						this.ensureProviderRuntime(provider);
+						await this.updateBackendDiscoveryLifecycle(provider, true);
+					}
 					return {
 						ok: true,
 						value: session
@@ -6312,6 +6794,8 @@ let AwikiService = (() => {
 				const recoveries = await client.listPendingRecoveries();
 				const pendingRegistrations = await client.pendingIdentityRegistrations();
 				const creationMethods = await client.identityCreationMethods().catch(() => []);
+				const backend = await client.backendCapabilities?.(false);
+				const registrationHandleOnly = backend?.capabilities["registration.handle_only"]?.support === "supported" && (backend.status === "confirmed" || backend.status === "stale");
 				const identity = await client.getIdentity();
 				const capabilities = identity === null ? void 0 : await client.identityMethodCapabilities(identity.did);
 				const domain = this.activeClientOptions?.userServiceDomain;
@@ -6326,6 +6810,7 @@ let AwikiService = (() => {
 					},
 					joining,
 					creationMethods,
+					registrationHandleOnly,
 					pendingRegistrations,
 					...capabilities === void 0 ? {} : { methodCapabilities: capabilities },
 					recoveries: recoveries.filter((value) => domain !== void 0 && value.fullHandle.slice(value.fullHandle.indexOf(".") + 1) === domain)
@@ -6598,6 +7083,22 @@ let AwikiService = (() => {
 			if (result.ok) this.activeIdentityDid = result.value.did;
 			return result;
 		}
+		/** Replace only the current authenticated human account's avatar. */
+		setAvatar(request) {
+			if (!validAvatarRequest(request, true)) return Promise.resolve({
+				ok: false,
+				error: failure("invalid-request")
+			});
+			return this.run((client) => client.setAvatar(request));
+		}
+		/** Restore the current account's default character avatar. */
+		clearAvatar(request) {
+			if (!validAvatarRequest(request, false)) return Promise.resolve({
+				ok: false,
+				error: failure("invalid-request")
+			});
+			return this.run((client) => client.clearAvatar(request));
+		}
 		/** Return the public editable profile for the active identity. */
 		getProfile() {
 			return this.run((client) => client.getProfile());
@@ -6711,7 +7212,12 @@ let AwikiService = (() => {
 				ok: false,
 				error: failure("invalid-request")
 			};
-			const created = await this.run((client) => client.createGroup(normalized.name));
+			const created = await this.run(async (client) => {
+				await requireBackendFeature(client, "groups");
+				if (normalized.encrypted) await requireBackendFeature(client, "group_e2ee");
+				if (normalized.members.length > 0) await requireBackendFeature(client, "group_admin_add");
+				return client.createGroup(normalized.name, normalized.encrypted, normalized.operationId);
+			});
 			if (!created.ok) return created;
 			const addedMembers = [];
 			const failedMembers = [];
@@ -6741,6 +7247,18 @@ let AwikiService = (() => {
 			});
 			return this.run((client) => client.getGroup(groupDid));
 		}
+		/** Resume owner-held group encryption maintenance through Core. */
+		repairGroupSecurity(request) {
+			const groupDid = normalizeGroupDid(request?.groupDid);
+			if (groupDid === void 0) return Promise.resolve({
+				ok: false,
+				error: failure("invalid-request")
+			});
+			return this.run(async (client) => {
+				await requireBackendFeature(client, "group_e2ee");
+				return client.repairGroupSecurity(groupDid);
+			});
+		}
 		/** Join one open group and return its authoritative membership state. */
 		joinGroup(request) {
 			const groupDid = normalizeGroupDid(request?.groupDid);
@@ -6748,7 +7266,10 @@ let AwikiService = (() => {
 				ok: false,
 				error: failure("invalid-request")
 			});
-			return this.run((client) => client.joinGroup(groupDid));
+			return this.run(async (client) => {
+				await requireBackendFeature(client, "group_open_join");
+				return client.joinGroup(groupDid);
+			});
 		}
 		/** Leave one group. Core rejects owner leave and unsupported security profiles. */
 		async leaveGroup(request) {
@@ -6764,12 +7285,12 @@ let AwikiService = (() => {
 			} : result;
 		}
 		/** Read one authoritative versioned member page. */
-		getDisplayProfiles(peers) {
-			if (!Array.isArray(peers) || peers.length > 100 || peers.some((peer) => typeof peer !== "string" || !peer.startsWith("did:"))) return Promise.resolve({
+		getDisplayProfiles(peers, refresh) {
+			if (refresh !== void 0 && typeof refresh !== "boolean" || !Array.isArray(peers) || peers.length > 100 || peers.some((peer) => typeof peer !== "string" || !peer.startsWith("did:"))) return Promise.resolve({
 				ok: false,
 				error: failure("invalid-request")
 			});
-			return this.run((client) => client.getDisplayProfiles(peers));
+			return this.run((client) => client.getDisplayProfiles(peers, refresh));
 		}
 		listGroupMembers(request) {
 			const groupDid = normalizeGroupDid(request?.groupDid);
@@ -6968,6 +7489,10 @@ let AwikiService = (() => {
 		* @returns The accepted attachment message or a closed failure.
 		*/
 		async sendAttachment(request) {
+			if (request?.security !== void 0 && request.security !== "plain" && request.security !== "e2ee-required") return {
+				ok: false,
+				error: failure("invalid-request")
+			};
 			if (!isMessageTarget(request?.target)) return {
 				ok: false,
 				error: failure("invalid-request")
@@ -6976,6 +7501,7 @@ let AwikiService = (() => {
 			if (!decoded.ok) return decoded;
 			return this.run(async (client) => {
 				const message = await client.sendAttachment({
+					...request.security === void 0 ? {} : { security: request.security },
 					target: request.target,
 					attachment: {
 						fileName: request.fileName,
@@ -7325,6 +7851,7 @@ let AwikiService = (() => {
 			return client.getLocalDeviceJoinVerificationProgress(notice.joinSessionId);
 		}
 		async requireDeviceManager(client) {
+			await requireBackendFeature(client, "identity.multi_device");
 			const current = await client.getCurrentDeviceSummary();
 			if (!current.canManage || current.role !== "admin" || current.readiness !== "admin_ready") throw Object.assign(/* @__PURE__ */ new Error("device manager required"), {
 				name: "AwikiSdkError",
@@ -7332,6 +7859,7 @@ let AwikiService = (() => {
 			});
 		}
 		async requireRootTransferRecipient(client, deviceId) {
+			await requireBackendFeature(client, "identity.root_transfer");
 			if (!client.trustedUserPresenceSupported) throw Object.assign(/* @__PURE__ */ new Error("trusted user presence unsupported"), {
 				name: "AwikiSdkError",
 				code: "forbidden"
@@ -7458,6 +7986,7 @@ let AwikiService = (() => {
 		}
 		/** Invalidate cached session work and cancel every model request still owned by the old session. */
 		invalidateSummaries() {
+			this.stopBackendSubscriptions();
 			this.sessionRevision += 1;
 			this.requestRefs.clear();
 			this.requestSessions.clear();
@@ -7541,7 +8070,10 @@ let AwikiService = (() => {
 					error: failure("invalid-request")
 				});
 			}
-			return this.run((client) => operation(client, request), options);
+			return this.run(async (client) => {
+				await requireBackendFeature(client, "services.mail");
+				return operation(client, request);
+			}, options);
 		}
 		/** Read and cache the private Host-owned session marker. */
 		async isSignedOut() {
@@ -7595,6 +8127,14 @@ let AwikiService = (() => {
 			this.sessionMutation = pending.then(() => void 0, () => void 0);
 			return pending;
 		}
+		/** Discovery is an optional projection, not authority for a committed session transition. */
+		async updateBackendDiscoveryLifecycle(provider, active) {
+			try {
+				await provider.client.setBackendDiscoveryActive?.(active);
+			} catch {
+				this.ctx.logger("awiki-backend").warn("AWiki backend discovery lifecycle unavailable");
+			}
+		}
 		/** Start identity realtime and the optional Agent consumer without blocking identity success. */
 		ensureProviderRuntime(provider) {
 			if (this.tenantSwitching) return;
@@ -7604,6 +8144,7 @@ let AwikiService = (() => {
 				this.replaceProviderRuntime(provider, identityDid);
 				return;
 			}
+			this.refreshBackendProjection();
 			this.ensureRealtimeSupervisor(provider);
 			this.ensureAgentConsumer(provider);
 		}
@@ -7680,6 +8221,7 @@ let AwikiService = (() => {
 			const logger = this.ctx.logger("awiki-listener");
 			const observed = (async () => {
 				await this.detachAgentConsumer(provider);
+				if ((await projectBackendFeatures(provider.client, false))["agents.managed_agents"] !== "supported") return;
 				if (!this.agentConsumerFenceMatches(provider, workspaceContext, identityDid, generation)) return;
 				const agents = new DshAwikiListenerAgentRuntime(workspaceContext, this.resolved.listener.workspacePath);
 				const consumer = new AwikiAgentListener(source, agents, {