@canonmsg/agent-sdk 12.1.0 → 12.2.1

package/dist/chunks/{chunk-QZ4PPRQW.js → chunk-FCG2Z57F.js}

@@ -109,13 +109,13 @@ import {
   readMembershipChangeMetadata,
   resolveAllowedUploadMimeType,
   sanitizeDownloadFileName
-} from "./chunk-7N6OPPW4.js";
+} from "./chunk-J63YVAKA.js";
 
 // src/media.ts
 import { createWriteStream as createWriteStream2 } from "node:fs";
 import { randomUUID as randomUUID8 } from "node:crypto";
 import { mkdir as mkdir3, open as open4, rename as rename2, stat as stat2, unlink as unlink2 } from "node:fs/promises";
-import { basename, dirname as dirname3, extname, join as join8 } from "node:path";
+import { basename, dirname as dirname3, extname, join as join7 } from "node:path";
 import { Readable, Transform as Transform2 } from "node:stream";
 import { pipeline as pipeline2 } from "node:stream/promises";
 
@@ -1876,9 +1876,6 @@ var DEFAULT_BASE_URL = DEFAULT_CANON_RUNTIME_ENDPOINTS.apiBaseUrl;
 
 // ../core/src/client.ts
 import { createHash as createHash6, randomUUID as randomUUID2 } from "node:crypto";
-import { mkdtemp, writeFile, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join as join5 } from "node:path";
 
 // ../endpoint/src/store.ts
 function copyJson(value) {
@@ -2374,10 +2371,11 @@ function createEndpointQueryObserver(options) {
   const intervalMs = Math.max(250, options.intervalMs ?? 3e3);
   function schedule(entry) {
     if (closed || entry.listeners.size === 0) return;
+    const delay = entry.retryAt === void 0 ? options.getPollInterval?.() ?? intervalMs : entry.retryAt - Date.now();
     entry.timer = setTimeout(() => {
       entry.timer = void 0;
       void refresh(entry);
-    }, Math.max(250, options.getPollInterval?.() ?? intervalMs));
+    }, Math.max(250, delay));
   }
   __name(schedule, "schedule");
   async function refresh(entry) {
@@ -2388,11 +2386,17 @@ function createEndpointQueryObserver(options) {
     }
     if (entry.timer) clearTimeout(entry.timer);
     entry.timer = void 0;
+    if (entry.retryAt !== void 0 && entry.retryAt > Date.now()) {
+      schedule(entry);
+      return;
+    }
+    delete entry.retryAt;
     entry.running = true;
     entry.dirty = false;
     try {
       const value = await options.query(entry.query, entry.parameters);
       if (closed || entry.listeners.size === 0) return;
+      entry.retryAttempts = 0;
       if (!entry.dirty) {
         const fingerprint = canonicalEndpointJson(value);
         if (!entry.hasValue || entry.hadError || fingerprint !== entry.fingerprint) {
@@ -2412,6 +2416,13 @@ function createEndpointQueryObserver(options) {
     } catch (error) {
       entry.hadError = true;
       entry.lastError = error;
+      if (error instanceof EndpointError && error.retryable) {
+        const retryAfter = Number.isFinite(error.retryAfterMs) ? Math.max(0, Math.min(3e5, error.retryAfterMs)) : 0;
+        const fastDelay = entry.retryAttempts < 3 ? 1e3 * 2 ** entry.retryAttempts++ : void 0;
+        if (fastDelay !== void 0 || retryAfter > 0) {
+          entry.retryAt = Date.now() + Math.max(retryAfter, fastDelay ?? options.getPollInterval?.() ?? intervalMs);
+        }
+      }
       if (!closed) for (const listener of entry.listeners) {
         try {
           listener.error?.(error);
@@ -2431,7 +2442,7 @@ function createEndpointQueryObserver(options) {
       const key = canonicalEndpointJson({ query, parameters });
       let entry = entries2.get(key);
       if (!entry) {
-        entry = { query, parameters, listeners: /* @__PURE__ */ new Set(), running: false, dirty: false, hasValue: false, hadError: false };
+        entry = { query, parameters, listeners: /* @__PURE__ */ new Set(), running: false, dirty: false, hasValue: false, hadError: false, retryAttempts: 0 };
         entries2.set(key, entry);
       }
       const observer = { value: listener, error: onError };
@@ -6638,6 +6649,16 @@ function createMlsDevGroups(options, context, keyPackages, bridge) {
     const current = envelope(state.protocolState, init.binding, conversationId);
     const observed = authority(await tx.get(authorityKey(conversationId)), conversationId);
     const conversation = await tx.get(`conversation/${conversationId}`);
+    const roomDependencies = conversation ? Object.fromEntries([
+      "membershipRevision",
+      "memberIds",
+      "mls",
+      "mlsRequired",
+      "mlsProtocol",
+      "mlsRemoval",
+      "mlsIdentities",
+      "mlsInviteeId"
+    ].map((key) => [key, conversation[key] ?? null])) : null;
     const cursor = await tx.get(`cursor/${conversationId}`);
     const protocol = await tx.get(mlsDevTextProtocolKey(conversationId));
     if (protocol !== void 0 && !isMlsDevTextProtocol(protocol) || current && current.protocol !== protocol) fail6("MLS_DEV_TEXT_PROTOCOL_UNSUPPORTED");
@@ -6647,7 +6668,7 @@ function createMlsDevGroups(options, context, keyPackages, bridge) {
     return { device, envelope: current, authority: observed, feedOrdinal, ...protocol ? { protocol } : {}, fingerprint: canonicalEndpointJson({
       device: device.fingerprint,
       authority: observed ?? null,
-      conversation: conversation ?? null,
+      conversation: roomDependencies,
       cursor: cursor ?? null,
       protocol: protocol ?? null,
       feedOrdinal
@@ -10011,7 +10032,7 @@ async function acquireAgentEndpoint(input) {
   }
   const requestedMls = input.options.mlsDev;
   const mls = requestedMls ? await (async () => {
-    const crypto2 = await import("./mls-crypto-LMNQZOS6.js");
+    const crypto2 = await import("./mls-crypto-ITVGUEP7.js");
     const configuration = crypto2.parseMlsDevClientConfiguration(requestedMls.configuration);
     if (configuration.environmentId !== environmentId || baseUrl !== CANON_RUNTIME_ENDPOINT_DEFAULTS[configuration.environmentId]?.apiBaseUrl || configuration.principalIds && !configuration.principalIds.includes(input.principalId) || !Number.isSafeInteger(input.ownershipVersion) || input.ownershipVersion < 0) throw new Error("MLS_DEV_AGENT_CONFIGURATION_BINDING_MISMATCH");
     const custody = requestedMls.custody;
@@ -10312,45 +10333,6 @@ var CanonClient = class {
     }
     return result;
   }
-  /**
-   * List conversations. Called with no options this is the historical request —
-   * no query string, every conversation the agent belongs to, most recent
-   * first. Passing `limit`/`before` opts into paging; use
-   * `getConversationsPage` when you need the cursor back.
-   */
-  async getConversations(options) {
-    if (options) return (await this.fetchConversationsPage(options)).conversations;
-    const conversations = [];
-    const seen = /* @__PURE__ */ new Set();
-    let before;
-    do {
-      const page = await this.fetchConversationsPage({ limit: 100, ...before ? { before } : {} });
-      conversations.push(...page.conversations);
-      if (page.nextBefore && seen.has(page.nextBefore)) throw new Error("Canon conversation cursor did not advance.");
-      before = page.nextBefore ?? void 0;
-      if (before) seen.add(before);
-    } while (before);
-    return conversations;
-  }
-  /**
-   * One page of conversations plus the cursor to continue from. Pages are cut
-   * in conversation-id order; keep calling with `before: page.nextBefore` until
-   * `nextBefore` is null. Do not stop on an empty page and do not derive the
-   * cursor from the returned array — the array is recency-sorted within the
-   * page and hidden conversations are filtered after the page is read.
-   */
-  async getConversationsPage(options) {
-    return this.fetchConversationsPage(options);
-  }
-  async fetchConversationsPage(options) {
-    const data = await this.endpointQuery("list_conversations", { ...options });
-    return {
-      conversations: data.conversations,
-      // Absent on the unpaginated shape, and on any Canon deployment that
-      // predates conversation paging — both mean "no further pages".
-      nextBefore: typeof data.nextBefore === "string" ? data.nextBefore : null
-    };
-  }
   /** Targeted membership read; session hosts must not poll the entire account. */
   async getConversation(conversationId) {
     return await (await this.getEndpoint()).getConversation(conversationId);
@@ -10363,15 +10345,6 @@ var CanonClient = class {
     const data = await this.endpointQuery("list_messages", { conversationId, limit, includeBehavior: true, ...before ? { before } : {} });
     return { ...data, messages: data.messages.map(normalizeMessage) };
   }
-  /** Read one explicitly referenced message without extending ordinary history. */
-  async getMessage(conversationId, messageId) {
-    const data = await this.endpointQuery("get_messages", {
-      conversationId,
-      messageIds: [messageId]
-    });
-    const message = data.messages.find((candidate) => candidate.id === messageId);
-    return message ? normalizeMessage(message) : null;
-  }
   async sendMessage(conversationId, text, options, delivery) {
     return this.endpointAction(
       "send_message",
@@ -10394,78 +10367,27 @@ var CanonClient = class {
   }
   /** Core's chunker records all ordered message intents before publishing any part. */
   async prepareMessageGroup(conversationId, messageId, parts, delivery) {
-    const id2 = delivery?.operationId ?? stableOperationId(delivery?.proactive ? "send_proactive_group" : "send_group", conversationId, messageId);
+    const id2 = delivery?.operationId ?? stableOperationId("send_group", conversationId, messageId);
     try {
       const endpoint = await this.getEndpoint();
       const group = await endpoint.registerMessageGroup({ id: id2, ...delivery?.replacesOperationId ? { replacesOperationId: delivery.replacesOperationId } : {}, children: parts.map((part, index) => ({
-        operationId: delivery?.operationId ? `${delivery.operationId.slice(0, 160 - `-part-${index + 1}`.length)}-part-${index + 1}` : delivery?.proactive ? stableOperationId("verb_execute", "send_to", conversationId, part.options.messageId) : stableOperationId("send_message", conversationId, part.options.messageId),
-        intent: delivery?.proactive ? { action: "verb_execute", body: { ...projectVerbIntentToWire("send_to", { targetConversationId: conversationId, text: part.text, messageOptions: part.options }, { now: Date.now() }) } } : { action: "send_message", body: { conversationId, text: part.text, ...part.options } }
+        operationId: delivery?.operationId ? `${delivery.operationId.slice(0, 160 - `-part-${index + 1}`.length)}-part-${index + 1}` : stableOperationId("send_message", conversationId, part.options.messageId),
+        intent: { action: "send_message", body: { conversationId, text: part.text, ...part.options } }
       })) }, { signal: delivery?.signal });
       return { id: id2, sendPart: /* @__PURE__ */ __name(async (index, options) => {
         const operationId = group.childOperationIds?.[index];
         if (!operationId) throw new Error("Unknown message group part");
         if (options?.signal?.aborted) throw new CanonApiError(409, JSON.stringify({ code: "OPERATION_PENDING", message: "Reply delivery was interrupted" }));
         await endpoint.retry(operationId);
-        return delivery?.proactive ? this.waitForProactiveMessage(operationId, options) : this.waitForOperation(operationId, options);
+        return this.waitForOperation(operationId, options);
       }, "sendPart") };
     } catch (error) {
       throw asCanonApiError(error);
     }
   }
-  /** Publish a native-formatted ordered plan through the same endpoint engine. */
-  async sendMessageGroup(conversationId, messageId, parts, delivery) {
-    const root = messageId ?? randomUUID2();
-    const prepared = parts.map((part, index) => ({ ...part, options: {
-      ...part.options,
-      messageId: part.options.messageId ?? `${root.slice(0, 160 - `-part-${index + 1}`.length)}-part-${index + 1}`
-    } }));
-    const group = await this.prepareMessageGroup(conversationId, root, prepared, delivery);
-    try {
-      for (let index = 0; index < prepared.length; index++) await group.sendPart(index);
-      return await this.waitForOperation(group.id);
-    } catch (error) {
-      if (error instanceof CanonApiError) error.operationId = group.id;
-      throw error;
-    }
-  }
   async cancelMessageGroup(id2) {
     await (await this.getEndpoint()).cancelMessageGroup(id2);
   }
-  /**
-   * Send outside an active inbound turn through the canonical policy boundary.
-   * Harness reply paths should keep using sendMessage; schedulers, notifications,
-   * and other detached work must use this method.
-   */
-  async sendProactiveMessage(conversationId, text, options, delivery) {
-    const result = await this.sendTo({
-      targetConversationId: conversationId,
-      text,
-      ...options ? { messageOptions: options } : {}
-    }, delivery);
-    if (result.status !== "messaged" || !result.messageId) {
-      const reason = "reason" in result ? result.reason : result.status;
-      throw new CanonApiError(
-        403,
-        `Canon proactive send was not admitted: ${reason}`
-      );
-    }
-    return {
-      conversationId: result.conversationId,
-      messageId: result.messageId
-    };
-  }
-  /** Reconcile an existing publication without rebuilding or resubmitting its body. */
-  async waitForProactiveMessage(operationId, options) {
-    if (await (await this.getEndpoint()).getMessageGroup(operationId)) return this.waitForOperation(operationId, options);
-    const response = await this.waitForOperation(operationId, options);
-    const value = unwrapJsonVerbResponse(response, "send_to");
-    if (!isSendToResult(value)) throw new CanonApiError(502, "Canon returned a malformed send_to result");
-    if (value.status !== "messaged" || !value.messageId) {
-      const reason = "reason" in value ? value.reason : value.status;
-      throw new CanonApiError(403, `Canon proactive send was not admitted: ${reason}`);
-    }
-    return { conversationId: value.conversationId, messageId: value.messageId };
-  }
   /**
    * Execute a canonical verb over the wire contract (canon.verb-wire.v1).
    * Bindings build the request with projectVerbIntentToWire; the endpoint
@@ -10703,98 +10625,9 @@ var CanonClient = class {
     }
     return result.status === "unavailable" && result.reason === "opening-text-required" ? void 0 : result;
   }
-  /** Create a group. Direct conversations must go through `communicate`. */
-  async createGroup(options) {
-    return this.endpointAction("create_conversation", { ...options });
-  }
-  async createMemoStream(options) {
-    return this.endpointPublish("create_memo_stream", { streamId: randomUUID2(), ...options });
-  }
-  async appendMemoStreamChunk(conversationId, streamId, options) {
-    return this.endpointPublish("append_memo_chunk", { conversationId, streamId, ...options });
-  }
-  async finalizeMemoStream(conversationId, streamId, messageId) {
-    await this.endpointAction("finalize_memo_stream", { conversationId, streamId, messageId });
-  }
-  async abortMemoStream(conversationId, streamId) {
-    await this.endpointAction("abort_memo_stream", { conversationId, streamId });
-  }
-  async createVoiceSession(options) {
-    return this.endpointAction("create_voice_session", { ...options });
-  }
-  async getVoiceSessionState(conversationId, sessionId) {
-    return this.endpointQuery("get_voice_session", { conversationId, sessionId });
-  }
-  async declineVoiceSession(conversationId, sessionId) {
-    await this.endpointAction("decline_voice_session", { conversationId, sessionId });
-  }
-  async joinVoiceSession(conversationId, sessionId, options) {
-    return this.endpointAction("join_voice_session", { conversationId, sessionId, ...options ?? {} });
-  }
-  async endVoiceSession(conversationId, sessionId) {
-    await this.endpointAction("end_voice_session", { conversationId, sessionId });
-  }
-  async listContacts() {
-    const data = await this.endpointQuery("list_contacts");
-    return data.contacts;
-  }
-  async getContact(contactId) {
-    try {
-      return await this.endpointQuery("get_contact", { contactId });
-    } catch (error) {
-      if (error instanceof CanonApiError && error.status === 404) return null;
-      throw error;
-    }
-  }
-  async deleteContact(contactId) {
-    await this.endpointAction("remove_contact", { contactId });
-  }
   async blockUser(userId) {
     await this.endpointAction("set_block", { userId, blocked: true });
   }
-  async unblockUser(userId) {
-    await this.endpointAction("set_block", { userId, blocked: false });
-  }
-  async resolveAdmission(target) {
-    const body = typeof target === "string" ? { targetUserId: target } : target;
-    return this.endpointQuery("resolve_admission", { ...body });
-  }
-  async uploadMedia(conversationId, data, mimeType, fileName, options) {
-    const bytes = Buffer.from(data, "base64");
-    if (!bytes.length || bytes.length > 100 * 1024 * 1024) throw new CanonApiError(400, "Canon media must contain from 1 byte to 100 MiB");
-    const directory = await mkdtemp(join5(tmpdir(), "canon-upload-"));
-    const source = join5(directory, "bytes");
-    try {
-      await writeFile(source, bytes, { mode: 384 });
-      const media = await this.getFileMediaPipeline();
-      const [attachment] = await media.prepare({
-        conversationId,
-        attachmentId: options?.attachmentId ?? randomUUID2(),
-        files: [{ source, descriptor: { mimeType, sizeBytes: bytes.length, ...fileName ? { fileName } : {} } }]
-      });
-      if (typeof attachment?.url !== "string") throw new CanonApiError(502, "Canon returned an invalid prepared attachment");
-      return { url: attachment.url, attachment };
-    } catch (error) {
-      throw asCanonApiError(error);
-    } finally {
-      await rm(directory, { recursive: true, force: true });
-    }
-  }
-  /**
-   * Start a private direct-to-Storage upload. The returned upload URL is a
-   * short-lived bearer capability; send exactly `sizeBytes` raw bytes to it,
-   * then call `finalizeResumableMediaUpload`.
-   */
-  async createResumableMediaUpload(conversationId, sizeBytes, mimeType, fileName) {
-    return this.endpointAction("create_upload", { conversationId, sizeBytes, mimeType, ...fileName ? { fileName } : {} });
-  }
-  /** Promote validated pending bytes into a canonical Canon attachment. */
-  async finalizeResumableMediaUpload(uploadId) {
-    return this.endpointAction("finalize_upload", { uploadId });
-  }
-  async updateTopic(conversationId, topic) {
-    await this.endpointAction("update_conversation", { conversationId, topic });
-  }
   async deleteMessage(conversationId, messageId) {
     await this.endpointAction("delete_message", { conversationId, messageId });
   }
@@ -10804,25 +10637,9 @@ var CanonClient = class {
   async markAsRead(conversationId) {
     await this.endpointAction("mark_read", { conversationId });
   }
-  async leaveConversation(conversationId) {
-    await this.endpointAction("leave_conversation", { conversationId });
-  }
   async react(conversationId, messageId, emoji) {
     await this.endpointAction("react", { conversationId, messageId, emoji });
   }
-  async updateConversationName(conversationId, name) {
-    await this.endpointAction("update_conversation", { conversationId, name });
-  }
-  async addMember(conversationId, userId) {
-    const result = await this.endpointAction("add_member", { conversationId, userId });
-    if (!result || typeof result !== "object" || !("status" in result) || result.status !== "added" && !(result.status === "pending" && "requestId" in result && typeof result.requestId === "string" && result.requestId)) {
-      throw new CanonApiError(502, "Canon returned a malformed add_member result");
-    }
-    return result;
-  }
-  async removeMember(conversationId, userId) {
-    await this.endpointAction("remove_member", { conversationId, userId });
-  }
   async setStreaming(options) {
     await this.endpointPublish("publish_streaming", { ...options });
   }
@@ -11256,7 +11073,7 @@ __name(resumeRegistration, "resumeRegistration");
 import { existsSync, readFileSync as readFileSync2, renameSync, writeFileSync as writeFileSync2, unlinkSync as unlinkSync2, mkdirSync } from "node:fs";
 import { closeSync as closeSync2, openSync as openSync2 } from "node:fs";
 import { randomUUID as randomUUID5 } from "node:crypto";
-import { join as join6, resolve as resolve4 } from "node:path";
+import { join as join5, resolve as resolve4 } from "node:path";
 import { homedir as homedir2 } from "node:os";
 
 // ../core/src/process-lock.ts
@@ -11297,15 +11114,15 @@ function claimStaleLockReaper(lockPath) {
 __name(claimStaleLockReaper, "claimStaleLockReaper");
 
 // ../core/src/agent-profiles.ts
-var CANON_DIR = process.env.CANON_HOME ? resolve4(process.env.CANON_HOME) : join6(homedir2(), ".canon");
-var AGENTS_PATH = join6(CANON_DIR, "agents.json");
-var LOCKS_DIR = join6(CANON_DIR, "locks");
-var PENDING_REGISTRATIONS_PATH = join6(CANON_DIR, "pending-registrations.json");
+var CANON_DIR = process.env.CANON_HOME ? resolve4(process.env.CANON_HOME) : join5(homedir2(), ".canon");
+var AGENTS_PATH = join5(CANON_DIR, "agents.json");
+var LOCKS_DIR = join5(CANON_DIR, "locks");
+var PENDING_REGISTRATIONS_PATH = join5(CANON_DIR, "pending-registrations.json");
 var AGENTS_JSON_BOOTSTRAP_ENV = "CANON_AGENTS_JSON_BOOTSTRAP";
 function canonPaths(home) {
   if (!home) return { dir: CANON_DIR, agents: AGENTS_PATH, locks: LOCKS_DIR };
   const dir = resolve4(home);
-  return { dir, agents: join6(dir, "agents.json"), locks: join6(dir, "locks") };
+  return { dir, agents: join5(dir, "agents.json"), locks: join5(dir, "locks") };
 }
 __name(canonPaths, "canonPaths");
 function normalizeAgentProfile(name, value, source) {
@@ -11452,12 +11269,31 @@ function isProcessAlive(pid) {
   }
 }
 __name(isProcessAlive, "isProcessAlive");
+function processIdentity(pid) {
+  if (process.platform !== "linux") return void 0;
+  try {
+    const bootId = readFileSync2("/proc/sys/kernel/random/boot_id", "utf8").trim();
+    const stat3 = readFileSync2(`/proc/${pid}/stat`, "utf8");
+    const startTicks = stat3.slice(stat3.lastIndexOf(")") + 2).split(/\s+/)[19];
+    if (!/^[a-f0-9-]{36}$/.test(bootId) || !startTicks || !/^\d+$/.test(startTicks)) return void 0;
+    return { bootId, startTicks };
+  } catch {
+    return void 0;
+  }
+}
+__name(processIdentity, "processIdentity");
+function sameProcess(owner) {
+  if (!owner.processIdentity) return true;
+  const current = processIdentity(owner.pid);
+  return !current || current.bootId === owner.processIdentity.bootId && current.startTicks === owner.processIdentity.startTicks;
+}
+__name(sameProcess, "sameProcess");
 function isProfileLocked(profile, home) {
-  const lockPath = join6(canonPaths(home).locks, `${profile}.lock`);
+  const lockPath = join5(canonPaths(home).locks, `${profile}.lock`);
   try {
     const lock = parseLock(readFileSync2(lockPath, "utf-8"));
     const pid = lock?.pid;
-    if (pid && isProcessAlive(pid)) return { locked: true, pid };
+    if (pid && isProcessAlive(pid) && sameProcess(lock)) return { locked: true, pid };
   } catch {
   }
   return { locked: false };
@@ -11468,7 +11304,8 @@ function parseLock(raw) {
   if (!trimmed) return null;
   try {
     const data = JSON.parse(trimmed);
-    return typeof data.pid === "number" ? { pid: data.pid, token: typeof data.token === "string" ? data.token : void 0 } : null;
+    if (data.processIdentity !== void 0 && (!data.processIdentity || typeof data.processIdentity.bootId !== "string" || !/^[a-f0-9-]{36}$/.test(data.processIdentity.bootId) || typeof data.processIdentity.startTicks !== "string" || !/^\d+$/.test(data.processIdentity.startTicks))) return null;
+    return typeof data.pid === "number" ? { pid: data.pid, token: typeof data.token === "string" ? data.token : void 0, processIdentity: data.processIdentity } : null;
   } catch {
     return null;
   }
@@ -11477,12 +11314,13 @@ __name(parseLock, "parseLock");
 function acquireLock(profile, home) {
   const locks = canonPaths(home).locks;
   mkdirSync(locks, { recursive: true });
-  const lockPath = join6(locks, `${profile}.lock`);
+  const lockPath = join5(locks, `${profile}.lock`);
   const token = randomUUID5();
   const payload = JSON.stringify({
     pid: process.pid,
     token,
-    acquiredAt: (/* @__PURE__ */ new Date()).toISOString()
+    acquiredAt: (/* @__PURE__ */ new Date()).toISOString(),
+    processIdentity: processIdentity(process.pid)
   });
   for (let attempt = 0; attempt < 2; attempt += 1) {
     try {
@@ -11514,7 +11352,7 @@ function acquireLock(profile, home) {
         }
         try {
           process.kill(owner.pid, 0);
-          throw new Error(`Agent "${profile}" is in use by another session (PID ${owner.pid})`);
+          if (sameProcess(owner)) throw new Error(`Agent "${profile}" is in use by another session (PID ${owner.pid})`);
         } catch (probeError) {
           if (probeError.code !== "ESRCH") throw probeError;
         }
@@ -11528,7 +11366,7 @@ function acquireLock(profile, home) {
 }
 __name(acquireLock, "acquireLock");
 function releaseLock(profile, token, home) {
-  const lockPath = join6(canonPaths(home).locks, `${profile}.lock`);
+  const lockPath = join5(canonPaths(home).locks, `${profile}.lock`);
   if (token) {
     try {
       const lock = parseLock(readFileSync2(lockPath, "utf-8"));
@@ -11548,13 +11386,6 @@ function normalizePendingRegistration(name, value) {
     throw new Error(`${PENDING_REGISTRATIONS_PATH} entry "${name}" must be an object`);
   }
   const pending = { ...value };
-  if (typeof pending.localRegistrationId === "string" && pending.localRegistrationId.startsWith("hermes-")) {
-    const now = (/* @__PURE__ */ new Date()).toISOString();
-    pending.profile ??= name;
-    pending.clientType ??= "hermes";
-    pending.createdAt ??= typeof pending.submittedAt === "string" ? pending.submittedAt : now;
-    pending.updatedAt ??= pending.createdAt;
-  }
   const requiredStrings = [
     "profile",
     "localRegistrationId",
@@ -12695,7 +12526,7 @@ var DEFAULT_TURN_VERBOSITY_BY_CONVERSATION_TYPE = {
 };
 function normalizeTurnVerbosityConversationType(value) {
   const normalized = typeof value === "string" ? value.trim().toLowerCase() : "";
-  if (normalized === "direct" || normalized === "dm") return "direct";
+  if (normalized === "direct") return "direct";
   if (normalized === "group") return "group";
   return "unknown";
 }
@@ -13519,11 +13350,11 @@ import {
   unlinkSync as unlinkSync3,
   writeFileSync as writeFileSync3
 } from "node:fs";
-import { join as join7 } from "node:path";
+import { join as join6 } from "node:path";
 function createCompletedOutputJournal(directory, scope5, options) {
   const label = options.label;
-  const folder = join7(directory, createHash7("sha256").update(JSON.stringify(scope5)).digest("hex"));
-  const filename = /* @__PURE__ */ __name((turnId) => join7(folder, `${createHash7("sha256").update(turnId).digest("hex")}.json`), "filename");
+  const folder = join6(directory, createHash7("sha256").update(JSON.stringify(scope5)).digest("hex"));
+  const filename = /* @__PURE__ */ __name((turnId) => join6(folder, `${createHash7("sha256").update(turnId).digest("hex")}.json`), "filename");
   function syncDirectory() {
     const fd = openSync3(folder, "r");
     try {
@@ -13549,7 +13380,7 @@ function createCompletedOutputJournal(directory, scope5, options) {
       } catch (error) {
         if (error.code !== "ESRCH") continue;
       }
-      const path = join7(folder, name);
+      const path = join6(folder, name);
       let record7;
       try {
         record7 = JSON.parse(readFileSync4(path, "utf8"));
@@ -13559,7 +13390,7 @@ function createCompletedOutputJournal(directory, scope5, options) {
         throw new Error(`Incomplete ${label} output write removed; reconcile its native transcript`);
       }
       const destination = filename(record7.turnId);
-      if (destination !== join7(folder, `${match[1]}.json`)) {
+      if (destination !== join6(folder, `${match[1]}.json`)) {
         throw new Error(`Completed ${label} output temporary file identity mismatch`);
       }
       if (existsSync2(destination)) {
@@ -13605,9 +13436,9 @@ function createCompletedOutputJournal(directory, scope5, options) {
       if (!existsSync2(folder)) return [];
       recoverTemporaryFiles();
       return readdirSync(folder).filter((name) => name.endsWith(".json")).map((name) => {
-        const record7 = JSON.parse(readFileSync4(join7(folder, name), "utf8"));
+        const record7 = JSON.parse(readFileSync4(join6(folder, name), "utf8"));
         validate(record7);
-        if (filename(record7.turnId) !== join7(folder, name)) throw new Error(`Completed ${label} output identity mismatch`);
+        if (filename(record7.turnId) !== join6(folder, name)) throw new Error(`Completed ${label} output identity mismatch`);
         return record7;
       }).sort((a, b) => a.createdAt.localeCompare(b.createdAt));
     },
@@ -13672,7 +13503,7 @@ var ANTHROPIC_IMAGE_MIME_TYPES = /* @__PURE__ */ new Set([
   "image/gif",
   "image/webp"
 ]);
-var DEFAULT_MEDIA_CACHE_DIR = join8(CANON_DIR, "media-cache");
+var DEFAULT_MEDIA_CACHE_DIR = join7(CANON_DIR, "media-cache");
 var DEFAULT_MEDIA_MATERIALIZATION_BYTES = 10 * 1024 * 1024;
 var MAX_CANON_MEDIA_BYTES = 100 * 1024 * 1024;
 var MAX_ANTHROPIC_IMAGE_RAW_BYTES = 7 * 1024 * 1024;
@@ -13740,7 +13571,7 @@ function inferExtension(input) {
 }
 __name(inferExtension, "inferExtension");
 function conversationMediaCacheDir(input) {
-  return join8(
+  return join7(
     input.rootDir ?? DEFAULT_MEDIA_CACHE_DIR,
     sanitizeSegment(input.agentId, "agent"),
     sanitizeSegment(input.conversationId, "conversation")
@@ -13756,7 +13587,7 @@ function buildCachePath(input) {
   const fallbackName = `${input.attachment.kind}-${input.index}${extension}`;
   const preferredName = input.attachment.fileName ? sanitizeDownloadFileName(input.attachment.fileName, fallbackName) : fallbackName;
   const fileName = extname(preferredName) ? preferredName : `${preferredName}${extension}`;
-  return join8(
+  return join7(
     conversationMediaCacheDir({ agentId: input.agentId, conversationId: input.conversationId, rootDir }),
     sanitizeSegment(input.messageId, "message"),
     `${String(input.index).padStart(2, "0")}-${fileName}`

package/dist/chunks/{chunk-7N6OPPW4.js → chunk-J63YVAKA.js}

@@ -366,16 +366,12 @@ function installation(value) {
   return value;
 }
 __name(installation, "installation");
+function isMlsPrincipalId(value) {
+  return typeof value === "string" && value.length > 0 && value.length <= 512 && !/[\u0000-\u001f\u007f-\u009f]/.test(value) && !/[\ud800-\udfff]/.test(value.replace(/[\ud800-\udbff][\udc00-\udfff]/g, "")) && utf8.encode(value).length <= 512;
+}
+__name(isMlsPrincipalId, "isMlsPrincipalId");
 function principalId(value) {
-  if (typeof value !== "string" || value.length < 1 || value.length > 512 || /[\u0000-\u001f\u007f-\u009f]/.test(value)) invalid2();
-  for (let index = 0; index < value.length; index++) {
-    const unit = value.charCodeAt(index);
-    if (unit >= 55296 && unit <= 56319) {
-      const next = value.charCodeAt(++index);
-      if (!(next >= 56320 && next <= 57343)) invalid2();
-    } else if (unit >= 56320 && unit <= 57343) invalid2();
-  }
-  if (utf8.encode(value).length > 512) invalid2();
+  if (!isMlsPrincipalId(value)) invalid2();
   return value;
 }
 __name(principalId, "principalId");
@@ -2324,9 +2320,7 @@ var VERB_LIMITS = {
   externalSourceLabelChars: 80,
   /**
    * Contact-request note. Values longer than this are truncated by senders
-   * (slice(0,497)+'...') — the truncation is currently triplicated in
-   * functions/src/api/sendContextualMessage.ts, packages/core/src/reach-out.ts
-   * and the hermes plugin; this constant is the canonical figure.
+   * (slice(0,497)+'...'); this constant is the canonical figure.
    */
   contactRequestNoteChars: 500,
   /** Group membership cap incl. creator (functions/src/utils/conversations.ts MAX_GROUP_MEMBERS). */
@@ -2747,7 +2741,7 @@ var send_to_input = {
   ]
 };
 var send_to_result = {
-  description: "Canonical outcome vocabulary. Legacy binding drift documented in docs/design/verb-bindings.md (hermes 'opened' -> messaged without messageId; hermes 'denied' -> blocked).",
+  description: "Canonical outcome vocabulary.",
   oneOf: [
     {
       type: "object",
@@ -2832,7 +2826,7 @@ var request_input_input = {
     responseUserId: {
       type: "string",
       pattern: VERB_ID_PATTERNS.runtimeId,
-      description: "Must be a human conversation member. Trust-critical bindings (hermes) derive this from turn provenance and ignore model-supplied values."
+      description: "Must be a human conversation member. Trust-critical bindings derive this from turn provenance and ignore model-supplied values."
     },
     native: REF("native"),
     turnId: { type: "string", maxLength: VERB_LIMITS.turnIdChars },
@@ -5148,9 +5142,12 @@ function isMlsPrincipalAlias(value) {
   return typeof value === "string" && ALIAS_PATTERN.test(value);
 }
 __name(isMlsPrincipalAlias, "isMlsPrincipalAlias");
+function isMlsAccountId(value) {
+  return isMlsPrincipalId(value) && !value.includes("/") && value !== "." && value !== "..";
+}
+__name(isMlsAccountId, "isMlsAccountId");
 function accountId(value) {
-  if (typeof value !== "string" || value.length < 1 || /[\u0000-\u001f\u007f-\u009f/]/.test(value) || value === "." || value === ".." || utf89.encode(value).length > 512 || /[\ud800-\udfff]/.test(value.replace(/[\ud800-\udbff][\udc00-\udfff]/g, ""))) invalid15();
-  if (ALIAS_PATTERN.test(value)) invalid15();
+  if (!isMlsAccountId(value) || ALIAS_PATTERN.test(value)) invalid15();
   return value;
 }
 __name(accountId, "accountId");