@canonmsg/agent-sdk 12.5.1 → 13.0.2

package/dist/chunks/{chunk-C2WJT3VX.js → chunk-5WPAB5MB.js}

@@ -1,32 +1,6 @@
 var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
-// ../endpoint/src/mls-crypto.ts
-import { ed25519 } from "@noble/curves/ed25519.js";
-
-// ../backend-contracts/src/environment.ts
-var CANON_ENVIRONMENT_CONTRACTS = Object.freeze({
-  "canon-dev-v1": Object.freeze({
-    name: "dev",
-    projectId: "canonmail-dev",
-    region: "europe-west1"
-  }),
-  "canon-prod-v1": Object.freeze({
-    name: "prod",
-    projectId: "canonmail-prod",
-    region: "europe-west1"
-  })
-});
-function getCanonEnvironmentContract(value) {
-  const environmentId = value.trim();
-  const contract = CANON_ENVIRONMENT_CONTRACTS[environmentId];
-  if (!contract) {
-    throw new Error(`Unsupported Canon environment ID: ${value}`);
-  }
-  return Object.freeze({ environmentId, ...contract });
-}
-__name(getCanonEnvironmentContract, "getCanonEnvironmentContract");
-
 // ../backend-contracts/src/clientFloor.ts
 var CANON_CLIENT_HEADER = "X-Canon-Client";
 var CLIENT_UPDATE_REQUIRED = "CLIENT_UPDATE_REQUIRED";
@@ -76,6 +50,29 @@ var MEDIA_ORIGINS = {
   "canonmail-prod.firebasestorage.app": "https://api.canonmail.com"
 };
 
+// ../backend-contracts/src/environment.ts
+var CANON_ENVIRONMENT_CONTRACTS = Object.freeze({
+  "canon-dev-v1": Object.freeze({
+    name: "dev",
+    projectId: "canonmail-dev",
+    region: "europe-west1"
+  }),
+  "canon-prod-v1": Object.freeze({
+    name: "prod",
+    projectId: "canonmail-prod",
+    region: "europe-west1"
+  })
+});
+function getCanonEnvironmentContract(value) {
+  const environmentId = value.trim();
+  const contract = CANON_ENVIRONMENT_CONTRACTS[environmentId];
+  if (!contract) {
+    throw new Error(`Unsupported Canon environment ID: ${value}`);
+  }
+  return Object.freeze({ environmentId, ...contract });
+}
+__name(getCanonEnvironmentContract, "getCanonEnvironmentContract");
+
 // ../backend-contracts/src/media-url.ts
 function validMediaPath(path) {
   const parts = path.split("/");
@@ -123,131 +120,50 @@ function isCanonUploadUrl(url, input) {
 }
 __name(isCanonUploadUrl, "isCanonUploadUrl");
 
-// ../backend-contracts/src/upload-mime-types.ts
-var MIME_TYPE_RE = /^[a-z0-9.+-]+\/[a-z0-9.+-]+$/i;
-var SAFE_IMAGE_MIME_TYPES = /* @__PURE__ */ new Set([
-  "image/jpeg",
-  "image/png",
-  "image/webp",
-  "image/gif"
-]);
-var SAFE_AUDIO_MIME_TYPES = /* @__PURE__ */ new Set([
-  "audio/mp4",
-  "audio/x-m4a",
-  "audio/mpeg",
-  "audio/webm",
-  "audio/ogg",
-  "audio/wav",
-  // ADTS AAC — the future Android streamable-memo lane; harmless standalone.
-  "audio/aac"
-]);
-var SAFE_VIDEO_MIME_TYPES = /* @__PURE__ */ new Set([
-  "video/mp4",
-  "video/quicktime",
-  "video/webm",
-  "video/x-m4v"
-]);
-var SAFE_FILE_MIME_TYPES = /* @__PURE__ */ new Set([
-  "application/pdf",
-  "text/plain",
-  "text/markdown",
-  "text/x-markdown",
-  "text/csv",
-  "application/csv",
-  "application/json",
-  "application/zip",
-  "application/vnd.ms-excel",
-  "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
-]);
-var SAFE_FILE_MIME_BY_EXTENSION = {
-  csv: "text/csv",
-  json: "application/json",
-  md: "text/markdown",
-  markdown: "text/markdown",
-  pdf: "application/pdf",
-  txt: "text/plain",
-  xls: "application/vnd.ms-excel",
-  xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
-  zip: "application/zip"
-};
-var SAFE_VIDEO_MIME_BY_EXTENSION = {
-  m4v: "video/x-m4v",
-  mov: "video/quicktime",
-  mp4: "video/mp4",
-  webm: "video/webm"
-};
-var SAFE_AUDIO_MIME_BY_EXTENSION = {
-  aac: "audio/aac",
-  m4a: "audio/x-m4a",
-  mp3: "audio/mpeg",
-  oga: "audio/ogg",
-  ogg: "audio/ogg",
-  wav: "audio/wav"
-};
-function normalizeMimeType(value) {
-  if (typeof value !== "string") return null;
-  const normalized = value.split(";")[0].trim().toLowerCase();
-  if (!MIME_TYPE_RE.test(normalized)) return null;
-  if (normalized === "image/jpg") return "image/jpeg";
-  return normalized;
-}
-__name(normalizeMimeType, "normalizeMimeType");
-function inferSafeFileMimeTypeFromName(value) {
-  if (typeof value !== "string") return null;
-  const extension = value.trim().split(/[\\/]/).pop()?.split(".").pop()?.toLowerCase() ?? "";
-  return SAFE_FILE_MIME_BY_EXTENSION[extension] ?? null;
+// ../backend-contracts/src/mlsEnvironment.ts
+var MLS_ENVIRONMENT_PROFILES = Object.freeze({
+  "canon-dev-v1": Object.freeze({
+    issuer: "canon-mls-dev-v1",
+    credentialType: "canon-mls-dev-credential+jws",
+    issuerKeyPath: "projects/canonmail-dev/locations/europe-west1/keyRings/canon-mls/cryptoKeys/device-issuer",
+    receiptKeyPath: "projects/canonmail-dev/locations/europe-west1/keyRings/canon-mls/cryptoKeys/feed-receipt"
+  }),
+  "canon-prod-v1": Object.freeze({
+    issuer: "canon-mls-prod-v1",
+    credentialType: "canon-mls-prod-credential+jws",
+    issuerKeyPath: "projects/canonmail-prod/locations/europe-west1/keyRings/canon-mls/cryptoKeys/device-issuer",
+    receiptKeyPath: "projects/canonmail-prod/locations/europe-west1/keyRings/canon-mls/cryptoKeys/feed-receipt"
+  })
+});
+function requireMlsEnvironmentId(value) {
+  if (!isMlsEnvironmentId(value)) throw new Error("INVALID_MLS_DATA");
+  return value;
 }
-__name(inferSafeFileMimeTypeFromName, "inferSafeFileMimeTypeFromName");
-function inferSafeVideoMimeTypeFromName(value) {
-  if (typeof value !== "string") return null;
-  const extension = value.trim().split(/[\\/]/).pop()?.split(".").pop()?.toLowerCase() ?? "";
-  return SAFE_VIDEO_MIME_BY_EXTENSION[extension] ?? null;
+__name(requireMlsEnvironmentId, "requireMlsEnvironmentId");
+function isMlsEnvironmentId(value) {
+  return typeof value === "string" && Object.hasOwn(MLS_ENVIRONMENT_PROFILES, value);
 }
-__name(inferSafeVideoMimeTypeFromName, "inferSafeVideoMimeTypeFromName");
-function inferSafeAudioMimeTypeFromName(value) {
-  if (typeof value !== "string") return null;
-  const extension = value.trim().split(/[\\/]/).pop()?.split(".").pop()?.toLowerCase() ?? "";
-  return SAFE_AUDIO_MIME_BY_EXTENSION[extension] ?? null;
+__name(isMlsEnvironmentId, "isMlsEnvironmentId");
+function mlsEnvironmentProfile(environmentId) {
+  return MLS_ENVIRONMENT_PROFILES[environmentId];
 }
-__name(inferSafeAudioMimeTypeFromName, "inferSafeAudioMimeTypeFromName");
-function shouldTrustSafeFileName(mimeType) {
-  return !mimeType || mimeType === "application/octet-stream" || mimeType === "application/vnd.ms-excel" || mimeType === "text/plain";
+__name(mlsEnvironmentProfile, "mlsEnvironmentProfile");
+function mlsEnvironmentOfIssuerKeyVersion(value) {
+  return environmentOfKeyVersion(value, "issuerKeyPath");
 }
-__name(shouldTrustSafeFileName, "shouldTrustSafeFileName");
-function classifyAllowedUploadMimeType(value) {
-  const mimeType = normalizeMimeType(value);
-  if (!mimeType) return null;
-  if (SAFE_IMAGE_MIME_TYPES.has(mimeType)) return "image";
-  if (SAFE_AUDIO_MIME_TYPES.has(mimeType)) return "audio";
-  if (SAFE_VIDEO_MIME_TYPES.has(mimeType)) return "video";
-  if (SAFE_FILE_MIME_TYPES.has(mimeType)) return "file";
-  return null;
+__name(mlsEnvironmentOfIssuerKeyVersion, "mlsEnvironmentOfIssuerKeyVersion");
+function mlsEnvironmentOfReceiptKeyVersion(value) {
+  return environmentOfKeyVersion(value, "receiptKeyPath");
 }
-__name(classifyAllowedUploadMimeType, "classifyAllowedUploadMimeType");
-function resolveAllowedUploadMimeType(input) {
-  const normalizedMimeType = normalizeMimeType(input.mimeType);
-  const hasExplicitMimeType = typeof input.mimeType === "string" && input.mimeType.trim().length > 0;
-  const inferredVideoMimeType = inferSafeVideoMimeTypeFromName(input.fileName);
-  const inferredAudioMimeType = inferSafeAudioMimeTypeFromName(input.fileName);
-  const inferredFileMimeType = inferSafeFileMimeTypeFromName(input.fileName);
-  if (hasExplicitMimeType && !normalizedMimeType) {
-    return null;
-  }
-  if (inferredVideoMimeType && (!normalizedMimeType || normalizedMimeType === "application/octet-stream")) {
-    return inferredVideoMimeType;
-  }
-  if (inferredAudioMimeType && (!normalizedMimeType || normalizedMimeType === "application/octet-stream")) {
-    return inferredAudioMimeType;
-  }
-  if (inferredFileMimeType && shouldTrustSafeFileName(normalizedMimeType)) {
-    return inferredFileMimeType;
-  }
-  if (normalizedMimeType && classifyAllowedUploadMimeType(normalizedMimeType)) {
-    return normalizedMimeType;
+__name(mlsEnvironmentOfReceiptKeyVersion, "mlsEnvironmentOfReceiptKeyVersion");
+function environmentOfKeyVersion(value, key) {
+  for (const [environmentId, profile] of Object.entries(MLS_ENVIRONMENT_PROFILES)) {
+    const prefix = profile[key] + "/cryptoKeyVersions/";
+    if (value.startsWith(prefix) && /^[1-9][0-9]{0,9}$/.test(value.slice(prefix.length))) return environmentId;
   }
-  return normalizedMimeType ? null : inferredFileMimeType;
+  return void 0;
 }
-__name(resolveAllowedUploadMimeType, "resolveAllowedUploadMimeType");
+__name(environmentOfKeyVersion, "environmentOfKeyVersion");
 
 // ../backend-contracts/src/mlsDevValidation.ts
 function invalid() {
@@ -288,51 +204,6 @@ function requireMlsUuid(value) {
 }
 __name(requireMlsUuid, "requireMlsUuid");
 
-// ../backend-contracts/src/mlsEnvironment.ts
-var MLS_ENVIRONMENT_PROFILES = Object.freeze({
-  "canon-dev-v1": Object.freeze({
-    issuer: "canon-mls-dev-v1",
-    credentialType: "canon-mls-dev-credential+jws",
-    issuerKeyPath: "projects/canonmail-dev/locations/europe-west1/keyRings/canon-mls/cryptoKeys/device-issuer",
-    receiptKeyPath: "projects/canonmail-dev/locations/europe-west1/keyRings/canon-mls/cryptoKeys/feed-receipt"
-  }),
-  "canon-prod-v1": Object.freeze({
-    issuer: "canon-mls-prod-v1",
-    credentialType: "canon-mls-prod-credential+jws",
-    issuerKeyPath: "projects/canonmail-prod/locations/europe-west1/keyRings/canon-mls/cryptoKeys/device-issuer",
-    receiptKeyPath: "projects/canonmail-prod/locations/europe-west1/keyRings/canon-mls/cryptoKeys/feed-receipt"
-  })
-});
-function requireMlsEnvironmentId(value) {
-  if (!isMlsEnvironmentId(value)) throw new Error("INVALID_MLS_DATA");
-  return value;
-}
-__name(requireMlsEnvironmentId, "requireMlsEnvironmentId");
-function isMlsEnvironmentId(value) {
-  return typeof value === "string" && Object.hasOwn(MLS_ENVIRONMENT_PROFILES, value);
-}
-__name(isMlsEnvironmentId, "isMlsEnvironmentId");
-function mlsEnvironmentProfile(environmentId) {
-  return MLS_ENVIRONMENT_PROFILES[environmentId];
-}
-__name(mlsEnvironmentProfile, "mlsEnvironmentProfile");
-function mlsEnvironmentOfIssuerKeyVersion(value) {
-  return environmentOfKeyVersion(value, "issuerKeyPath");
-}
-__name(mlsEnvironmentOfIssuerKeyVersion, "mlsEnvironmentOfIssuerKeyVersion");
-function mlsEnvironmentOfReceiptKeyVersion(value) {
-  return environmentOfKeyVersion(value, "receiptKeyPath");
-}
-__name(mlsEnvironmentOfReceiptKeyVersion, "mlsEnvironmentOfReceiptKeyVersion");
-function environmentOfKeyVersion(value, key) {
-  for (const [environmentId, profile] of Object.entries(MLS_ENVIRONMENT_PROFILES)) {
-    const prefix = profile[key] + "/cryptoKeyVersions/";
-    if (value.startsWith(prefix) && /^[1-9][0-9]{0,9}$/.test(value.slice(prefix.length))) return environmentId;
-  }
-  return void 0;
-}
-__name(environmentOfKeyVersion, "environmentOfKeyVersion");
-
 // ../backend-contracts/src/mlsDevEnrollment.ts
 var MLS_DEV_ENROLLMENT_CHALLENGE_TTL_MS = 3e5;
 var MLS_DEV_ENROLLMENT_MAX_BYTES = 4096;
@@ -540,6 +411,7 @@ __name(decodeCanonicalMlsBase64Url, "decodeCanonicalMlsBase64Url");
 
 // ../backend-contracts/src/mlsDevCredential.ts
 var MLS_DEV_CREDENTIAL_TTL_MS = 864e5;
+var MLS_DEV_CREDENTIAL_LONG_TTL_MS = 14 * MLS_DEV_CREDENTIAL_TTL_MS;
 var MLS_DEV_CREDENTIAL_CHALLENGE_TTL_MS = 3e5;
 var MLS_DEV_CREDENTIAL_MAX_BYTES = 8192;
 var MlsDevCredentialValidationError = class extends Error {
@@ -591,8 +463,9 @@ function parseMlsDevCredentialClaims(value) {
     const input = readMlsDataRecord(value, ["version", "credentialId", "issuer", "device", "generation", "issuedAtMs", "expiresAtMs"]);
     const issuedAtMs = requireMlsInteger(input.issuedAtMs);
     const expiresAtMs = requireMlsInteger(input.expiresAtMs);
-    if (expiresAtMs - issuedAtMs !== MLS_DEV_CREDENTIAL_TTL_MS) invalid3();
     const device = parseMlsDevEnrollmentResult({ version: 1, authorization: "registration_only", device: input.device }).device;
+    const lifetimeMs = expiresAtMs - issuedAtMs;
+    if (lifetimeMs !== MLS_DEV_CREDENTIAL_TTL_MS && (lifetimeMs !== MLS_DEV_CREDENTIAL_LONG_TTL_MS || device.principal.type !== "human")) invalid3();
     return bounded2({
       version: requireMlsLiteral(input.version, 1),
       credentialId: requireMlsUuid(input.credentialId),
@@ -723,19 +596,21 @@ function parseMlsDevCredentialReceipt(value) {
 }
 __name(parseMlsDevCredentialReceipt, "parseMlsDevCredentialReceipt");
 
-// ../backend-contracts/src/mlsDevFeedReceipt.ts
-var MlsDevFeedReceiptValidationError = class extends Error {
+// ../backend-contracts/src/mlsDevGroupFeed.ts
+var MLS_DEV_GROUP_FEED_MAX_ENTRIES = 4;
+var MLS_DEV_GROUP_FEED_MAX_BYTES = 4 * 1024 * 1024;
+var MlsDevGroupFeedValidationError = class extends Error {
   static {
-    __name(this, "MlsDevFeedReceiptValidationError");
+    __name(this, "MlsDevGroupFeedValidationError");
   }
-  code = "INVALID_MLS_DEV_FEED_RECEIPT";
+  code = "INVALID_MLS_DEV_GROUP_FEED";
   constructor() {
-    super("INVALID_MLS_DEV_FEED_RECEIPT");
-    this.name = "MlsDevFeedReceiptValidationError";
+    super("INVALID_MLS_DEV_GROUP_FEED");
+    this.name = "MlsDevGroupFeedValidationError";
   }
 };
 function invalid4() {
-  throw new MlsDevFeedReceiptValidationError();
+  throw new MlsDevGroupFeedValidationError();
 }
 __name(invalid4, "invalid");
 function boundary3(read) {
@@ -746,139 +621,89 @@ function boundary3(read) {
   }
 }
 __name(boundary3, "boundary");
-function parseMlsDevReceiptKeyVersion(value, environmentId) {
-  return boundary3(() => {
-    if (typeof value !== "string" || value.length > 200) invalid4();
-    const owner = mlsEnvironmentOfReceiptKeyVersion(value);
-    if (!owner || environmentId !== void 0 && owner !== environmentId) invalid4();
-    return value;
-  });
-}
-__name(parseMlsDevReceiptKeyVersion, "parseMlsDevReceiptKeyVersion");
-function parseMlsDevFeedReceiptProof(value) {
-  return boundary3(() => {
-    const input = readMlsDataRecord(value, ["keyVersion", "signature"]);
-    decodeCanonicalMlsBase64Url(input.signature, 64);
-    return Object.freeze({ keyVersion: parseMlsDevReceiptKeyVersion(input.keyVersion), signature: input.signature });
-  });
-}
-__name(parseMlsDevFeedReceiptProof, "parseMlsDevFeedReceiptProof");
-var MLS_DEV_GROUP_RECEIPT_CLOCK_SKEW = "MLS_DEV_GROUP_RECEIPT_CLOCK_SKEW";
-function isMlsDevReceiptClockSkew(value) {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
-  const keys2 = Object.keys(value).sort().join(), input = value;
-  return (keys2 === "error,ok,retryable" || keys2 === "error,ok,retryable,version" && input.version === 1) && input.ok === false && input.error === MLS_DEV_GROUP_RECEIPT_CLOCK_SKEW && input.retryable === true;
-}
-__name(isMlsDevReceiptClockSkew, "isMlsDevReceiptClockSkew");
-
-// ../backend-contracts/src/mlsDevGroupFeed.ts
-var MLS_DEV_GROUP_FEED_MAX_ENTRIES = 4;
-var MLS_DEV_GROUP_FEED_MAX_BYTES = 4 * 1024 * 1024;
-var MlsDevGroupFeedValidationError = class extends Error {
-  static {
-    __name(this, "MlsDevGroupFeedValidationError");
-  }
-  code = "INVALID_MLS_DEV_GROUP_FEED";
-  constructor() {
-    super("INVALID_MLS_DEV_GROUP_FEED");
-    this.name = "MlsDevGroupFeedValidationError";
-  }
-};
-function invalid5() {
-  throw new MlsDevGroupFeedValidationError();
-}
-__name(invalid5, "invalid");
-function boundary4(read) {
-  try {
-    return read();
-  } catch {
-    return invalid5();
-  }
-}
-__name(boundary4, "boundary");
 function id(value) {
   if (typeof value !== "string" || !/^[A-Za-z0-9_.:~-]{1,200}$/.test(value) || value === "." || value === "..")
-    invalid5();
+    invalid4();
   return value;
 }
 __name(id, "id");
 function boolean(value) {
   if (typeof value !== "boolean")
-    invalid5();
+    invalid4();
   return value;
 }
 __name(boolean, "boolean");
 function bounded3(value) {
   if (new TextEncoder().encode(JSON.stringify(value)).length > MLS_DEV_GROUP_FEED_MAX_BYTES)
-    invalid5();
+    invalid4();
   return Object.freeze(value);
 }
 __name(bounded3, "bounded");
 function array(value) {
   if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype || value.length > MLS_DEV_GROUP_FEED_MAX_ENTRIES)
-    invalid5();
+    invalid4();
   const descriptors = Object.getOwnPropertyDescriptors(value);
   if (Reflect.ownKeys(descriptors).length !== value.length + 1)
-    invalid5();
+    invalid4();
   return Array.from({ length: value.length }, (_, index) => {
     const field = descriptors[index];
     if (!field || !field.enumerable || !Object.hasOwn(field, "value"))
-      invalid5();
+      invalid4();
     return field.value;
   });
 }
 __name(array, "array");
 function parseMlsDevGroupFeedEntry(value) {
-  return boundary4(() => {
+  return boundary3(() => {
     const signed = value !== null && typeof value === "object" && Object.hasOwn(value, "receiptProof") ? ["receiptProof"] : [];
     const input = readMlsDataRecord(value, ["version", "ordinal", "kind", "accepted", ...signed], ["version", "ordinal", "kind", "receipt", "envelope", ...signed]);
     const version = requireMlsLiteral(input.version, 1), ordinal = requireMlsInteger(input.ordinal, 1);
     const proof = signed.length ? { receiptProof: parseMlsDevFeedReceiptProof(input.receiptProof) } : {};
     if (input.kind === "control") {
       if (!Object.hasOwn(input, "accepted"))
-        invalid5();
+        invalid4();
       return bounded3({ version, ordinal, kind: "control", accepted: parseMlsDevGroupAcceptedControl(input.accepted), ...proof });
     }
     const kind = requireMlsLiteral(input.kind, "application"), receipt = parseMlsDevApplicationReceipt(input.receipt), envelope = parseMlsDevApplicationEnvelope(input.envelope);
     if (ordinal !== receipt.feedOrdinal || receipt.conversationId !== envelope.conversationId || receipt.groupId !== envelope.groupId || receipt.messageId !== envelope.messageId || JSON.stringify(receipt.head) !== JSON.stringify(envelope.expectedHead))
-      invalid5();
+      invalid4();
     return bounded3({ version, ordinal, kind, receipt, envelope, ...proof });
   });
 }
 __name(parseMlsDevGroupFeedEntry, "parseMlsDevGroupFeedEntry");
 function parseMlsDevGroupFeedQuery(value) {
-  return boundary4(() => {
+  return boundary3(() => {
     const input = readMlsDataRecord(value, ["version", "conversationId", "credential", "afterOrdinal", "limit"]);
     const limit2 = requireMlsInteger(input.limit, 1);
     if (limit2 > MLS_DEV_GROUP_FEED_MAX_ENTRIES)
-      invalid5();
+      invalid4();
     parseMlsDevCredentialToken(input.credential);
     return Object.freeze({ version: requireMlsLiteral(input.version, 1), conversationId: id(input.conversationId), credential: input.credential, afterOrdinal: requireMlsInteger(input.afterOrdinal), limit: limit2 });
   });
 }
 __name(parseMlsDevGroupFeedQuery, "parseMlsDevGroupFeedQuery");
 function parseMlsDevGroupFeedResult(value) {
-  return boundary4(() => {
+  return boundary3(() => {
     const input = readMlsDataRecord(value, ["version", "protocol", "conversationId", "marker", "membershipRevision", "admissionId", "roster", "minimumOrdinal", "latestOrdinal", "nextOrdinal", "entries", "hasMore", "terminal"]);
     const conversationId = id(input.conversationId), marker = input.marker === null ? null : parseMlsDevGroupMarker(input.marker);
     const minimumOrdinal = input.minimumOrdinal === null ? null : requireMlsInteger(input.minimumOrdinal, 1);
     const latestOrdinal = requireMlsInteger(input.latestOrdinal), nextOrdinal = requireMlsInteger(input.nextOrdinal);
     const entries = array(input.entries).map(parseMlsDevGroupFeedEntry), hasMore = boolean(input.hasMore), terminal = boolean(input.terminal);
     if (nextOrdinal > latestOrdinal || minimumOrdinal !== null && minimumOrdinal > latestOrdinal || minimumOrdinal === null && (entries.length || nextOrdinal || hasMore || terminal) || !marker && (latestOrdinal || minimumOrdinal !== null || entries.length || terminal))
-      invalid5();
-    const protocol = isMlsDevTextProtocol(input.protocol) ? input.protocol : invalid5();
+      invalid4();
+    const protocol = isMlsDevTextProtocol(input.protocol) ? input.protocol : invalid4();
     for (let i = 0; i < entries.length; i++) {
       const entry = entries[i], subject = entry.kind === "control" ? entry.accepted.control : entry.envelope;
       if (entry.kind === "application" && entry.envelope.interaction && !mlsDevProtocolCarriesCards(protocol))
-        invalid5();
+        invalid4();
       if (!marker || minimumOrdinal === null || entry.ordinal < minimumOrdinal || entry.ordinal > latestOrdinal || subject.conversationId !== conversationId || subject.groupId !== marker.groupId || i > 0 && entry.ordinal !== entries[i - 1].ordinal + 1)
-        invalid5();
+        invalid4();
       const head = entry.kind === "control" ? entry.accepted.head : entry.receipt.head;
       if (head.sequence > marker.head.sequence || head.epoch > marker.head.epoch)
-        invalid5();
+        invalid4();
     }
     if (entries.length && entries.at(-1).ordinal !== nextOrdinal || hasMore !== (minimumOrdinal !== null && nextOrdinal < latestOrdinal))
-      invalid5();
+      invalid4();
     return bounded3({
       version: requireMlsLiteral(input.version, 1),
       protocol,
@@ -911,25 +736,25 @@ var MlsDevKeyPackagesValidationError = class extends Error {
     this.name = "MlsDevKeyPackagesValidationError";
   }
 };
-function invalid6() {
+function invalid5() {
   throw new MlsDevKeyPackagesValidationError();
 }
-__name(invalid6, "invalid");
-function boundary5(read) {
+__name(invalid5, "invalid");
+function boundary4(read) {
   try {
     return read();
   } catch {
-    return invalid6();
+    return invalid5();
   }
 }
-__name(boundary5, "boundary");
+__name(boundary4, "boundary");
 function bounded4(value) {
-  if (new TextEncoder().encode(JSON.stringify(value)).length > MLS_DEV_KEY_PACKAGES_MAX_BYTES) invalid6();
+  if (new TextEncoder().encode(JSON.stringify(value)).length > MLS_DEV_KEY_PACKAGES_MAX_BYTES) invalid5();
   return Object.freeze(value);
 }
 __name(bounded4, "bounded");
 function id2(value) {
-  if (typeof value !== "string" || !/^[A-Za-z0-9_.:~-]{1,200}$/.test(value) || value === "." || value === "..") invalid6();
+  if (typeof value !== "string" || !/^[A-Za-z0-9_.:~-]{1,200}$/.test(value) || value === "." || value === "..") invalid5();
   return value;
 }
 __name(id2, "id");
@@ -939,18 +764,18 @@ function ref(value) {
 }
 __name(ref, "ref");
 function parseMlsDevKeyPackageWire(value) {
-  return boundary5(() => {
-    if (typeof value !== "string" || value.length < 2 || value.length > Math.ceil(MLS_DEV_KEY_PACKAGE_TLS_MAX_BYTES * 4 / 3)) invalid6();
+  return boundary4(() => {
+    if (typeof value !== "string" || value.length < 2 || value.length > Math.ceil(MLS_DEV_KEY_PACKAGE_TLS_MAX_BYTES * 4 / 3)) invalid5();
     const bytes = Math.floor(value.length * 3 / 4);
-    if (bytes < 1 || bytes > MLS_DEV_KEY_PACKAGE_TLS_MAX_BYTES || value.length !== Math.ceil(bytes * 4 / 3) || !/^[A-Za-z0-9_-]+$/.test(value)) invalid6();
+    if (bytes < 1 || bytes > MLS_DEV_KEY_PACKAGE_TLS_MAX_BYTES || value.length !== Math.ceil(bytes * 4 / 3) || !/^[A-Za-z0-9_-]+$/.test(value)) invalid5();
     const last = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".indexOf(value.at(-1));
-    if (value.length % 4 === 2 && (last & 15) !== 0 || value.length % 4 === 3 && (last & 3) !== 0) invalid6();
+    if (value.length % 4 === 2 && (last & 15) !== 0 || value.length % 4 === 3 && (last & 3) !== 0) invalid5();
     return value;
   });
 }
 __name(parseMlsDevKeyPackageWire, "parseMlsDevKeyPackageWire");
 function parseMlsDevKeyPackageClaimPreconditions(value) {
-  return boundary5(() => {
+  return boundary4(() => {
     const input = readMlsDataRecord(value, ["conversationId", "membershipRevision", "admissionId", "targetAdmissionId"]);
     return Object.freeze({
       conversationId: id2(input.conversationId),
@@ -962,17 +787,17 @@ function parseMlsDevKeyPackageClaimPreconditions(value) {
 }
 __name(parseMlsDevKeyPackageClaimPreconditions, "parseMlsDevKeyPackageClaimPreconditions");
 function parseMlsDevKeyPackagePublish(value) {
-  return boundary5(() => {
+  return boundary4(() => {
     const input = readMlsDataRecord(value, ["version", "requestId", "keyPackage"]);
     return bounded4({ version: requireMlsLiteral(input.version, 1), requestId: requireMlsUuid(input.requestId), keyPackage: parseMlsDevKeyPackageWire(input.keyPackage) });
   });
 }
 __name(parseMlsDevKeyPackagePublish, "parseMlsDevKeyPackagePublish");
 function parseMlsDevKeyPackagePublicationReceipt(value) {
-  return boundary5(() => {
+  return boundary4(() => {
     const input = readMlsDataRecord(value, ["version", "authorization", "requestId", "keyPackageRef", "deviceId", "publishedAtMs", "expiresAtMs"]);
     const publishedAtMs = requireMlsInteger(input.publishedAtMs), expiresAtMs = requireMlsInteger(input.expiresAtMs);
-    if (publishedAtMs >= expiresAtMs) invalid6();
+    if (publishedAtMs >= expiresAtMs) invalid5();
     return bounded4({
       version: requireMlsLiteral(input.version, 1),
       authorization: requireMlsLiteral(input.authorization, "key_package_publication_only"),
@@ -986,7 +811,7 @@ function parseMlsDevKeyPackagePublicationReceipt(value) {
 }
 __name(parseMlsDevKeyPackagePublicationReceipt, "parseMlsDevKeyPackagePublicationReceipt");
 function parseMlsDevKeyPackageClaim(value) {
-  return boundary5(() => {
+  return boundary4(() => {
     const input = readMlsDataRecord(value, ["version", "requestId", "claimantCredential", "recipientDeviceId", "preconditions"]);
     parseMlsDevCredentialToken(input.claimantCredential);
     return bounded4({
@@ -1000,7 +825,7 @@ function parseMlsDevKeyPackageClaim(value) {
 }
 __name(parseMlsDevKeyPackageClaim, "parseMlsDevKeyPackageClaim");
 function parseMlsDevKeyPackageClaimReceipt(value) {
-  return boundary5(() => {
+  return boundary4(() => {
     const input = readMlsDataRecord(value, [
       "version",
       "authorization",
@@ -1013,7 +838,7 @@ function parseMlsDevKeyPackageClaimReceipt(value) {
       "claimedAtMs"
     ]);
     const claimantDeviceId = requireMlsUuid(input.claimantDeviceId), recipientDeviceId = requireMlsUuid(input.recipientDeviceId);
-    if (claimantDeviceId === recipientDeviceId) invalid6();
+    if (claimantDeviceId === recipientDeviceId) invalid5();
     return bounded4({
       version: requireMlsLiteral(input.version, 1),
       authorization: requireMlsLiteral(input.authorization, "key_package_claim_only"),
@@ -1044,25 +869,25 @@ var MlsDevInteractionValidationError = class extends Error {
   }
 };
 var utf83 = new TextEncoder();
-function invalid7() {
+function invalid6() {
   throw new MlsDevInteractionValidationError();
 }
-__name(invalid7, "invalid");
-function boundary6(read) {
+__name(invalid6, "invalid");
+function boundary5(read) {
   try {
     return read();
   } catch {
-    return invalid7();
+    return invalid6();
   }
 }
-__name(boundary6, "boundary");
+__name(boundary5, "boundary");
 function id3(value) {
-  if (typeof value !== "string" || !/^[A-Za-z0-9_.:~-]{1,200}$/.test(value) || value === "." || value === "..") invalid7();
+  if (typeof value !== "string" || !/^[A-Za-z0-9_.:~-]{1,200}$/.test(value) || value === "." || value === "..") invalid6();
   return value;
 }
 __name(id3, "id");
 function interactionId(value) {
-  if (typeof value !== "string" || !MLS_DEV_INTERACTION_ID_PATTERN.test(value) || value === "." || value === "..") invalid7();
+  if (typeof value !== "string" || !MLS_DEV_INTERACTION_ID_PATTERN.test(value) || value === "." || value === "..") invalid6();
   return value;
 }
 __name(interactionId, "interactionId");
@@ -1072,39 +897,39 @@ function encoded3(value, bytes) {
 }
 __name(encoded3, "encoded");
 function wire(value, min, max) {
-  if (typeof value !== "string" || !/^[A-Za-z0-9_-]*$/.test(value) || value.length % 4 === 1) invalid7();
+  if (typeof value !== "string" || !/^[A-Za-z0-9_-]*$/.test(value) || value.length % 4 === 1) invalid6();
   const bytes = Math.floor(value.length * 3 / 4);
-  if (bytes < min || bytes > max) invalid7();
+  if (bytes < min || bytes > max) invalid6();
   const last = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".indexOf(value.at(-1));
-  if (value.length % 4 === 2 && (last & 15) !== 0 || value.length % 4 === 3 && (last & 3) !== 0) invalid7();
+  if (value.length % 4 === 2 && (last & 15) !== 0 || value.length % 4 === 3 && (last & 3) !== 0) invalid6();
   return value;
 }
 __name(wire, "wire");
 function text(value, max) {
-  if (typeof value !== "string" || !value.trim() || [...value].length > max || new TextDecoder("utf-8", { fatal: true }).decode(utf83.encode(value)) !== value) invalid7();
+  if (typeof value !== "string" || !value.trim() || [...value].length > max || new TextDecoder("utf-8", { fatal: true }).decode(utf83.encode(value)) !== value) invalid6();
   return value;
 }
 __name(text, "text");
 function boolean2(value) {
-  if (typeof value !== "boolean") invalid7();
+  if (typeof value !== "boolean") invalid6();
   return value;
 }
 __name(boolean2, "boolean");
 function array2(value, min, max) {
-  if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype || value.length < min || value.length > max) invalid7();
+  if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype || value.length < min || value.length > max) invalid6();
   const descriptors = Object.getOwnPropertyDescriptors(value);
-  if (Reflect.ownKeys(descriptors).length !== value.length + 1) invalid7();
+  if (Reflect.ownKeys(descriptors).length !== value.length + 1) invalid6();
   return Array.from({ length: value.length }, (_, index) => {
     const field = descriptors[index];
-    if (!field || !field.enumerable || !Object.hasOwn(field, "value")) invalid7();
+    if (!field || !field.enumerable || !Object.hasOwn(field, "value")) invalid6();
     return field.value;
   });
 }
 __name(array2, "array");
 function closed(value, required, optional) {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) invalid7();
+  if (value === null || typeof value !== "object" || Array.isArray(value)) invalid6();
   const present2 = Reflect.ownKeys(value);
-  if (present2.some((key) => typeof key !== "string" || !required.includes(key) && !optional.includes(key))) invalid7();
+  if (present2.some((key) => typeof key !== "string" || !required.includes(key) && !optional.includes(key))) invalid6();
   return readMlsDataRecord(value, present2);
 }
 __name(closed, "closed");
@@ -1113,31 +938,31 @@ function ordered(value) {
 }
 __name(ordered, "ordered");
 function parseMlsDevInteractionRequestBody(value) {
-  return boundary6(() => {
+  return boundary5(() => {
     const input = closed(
       value,
       ["requestId", "kind", "title", "responderIds", "expiresAtMs"],
       ["details", "options", "multiple", "risk", "allowSession", "scopeKey", "secretKey"]
     );
     const kind = input.kind;
-    if (typeof kind !== "string" || !MLS_DEV_INTERACTION_KINDS.includes(kind)) invalid7();
+    if (typeof kind !== "string" || !MLS_DEV_INTERACTION_KINDS.includes(kind)) invalid6();
     const has = /* @__PURE__ */ __name((key) => Object.hasOwn(input, key), "has");
     const options = has("options") ? array2(input.options, 1, MLS_DEV_INTERACTION_LIMITS.options).map((option) => {
       const fields2 = readMlsDataRecord(option, ["id", "label"]);
-      if (typeof fields2.id !== "string" || !/^[A-Za-z0-9_.:-]{1,64}$/.test(fields2.id)) invalid7();
+      if (typeof fields2.id !== "string" || !/^[A-Za-z0-9_.:-]{1,64}$/.test(fields2.id)) invalid6();
       return Object.freeze({ id: fields2.id, label: text(fields2.label, MLS_DEV_INTERACTION_LIMITS.optionLabel) });
     }) : void 0;
-    if (options && new Set(options.map((option) => option.id)).size !== options.length) invalid7();
+    if (options && new Set(options.map((option) => option.id)).size !== options.length) invalid6();
     const binding3 = parseMlsDevInteractionBinding({ role: "request", requestId: input.requestId, kind, responderIds: input.responderIds, expiresAtMs: input.expiresAtMs });
-    if (binding3.role !== "request") invalid7();
-    if (kind !== "approval" && ["risk", "allowSession", "scopeKey"].some(has)) invalid7();
-    if (kind !== "question" && (has("options") || has("multiple"))) invalid7();
-    if (has("multiple") && !options) invalid7();
-    if (kind === "secret" !== has("secretKey")) invalid7();
+    if (binding3.role !== "request") invalid6();
+    if (kind !== "approval" && ["risk", "allowSession", "scopeKey"].some(has)) invalid6();
+    if (kind !== "question" && (has("options") || has("multiple"))) invalid6();
+    if (has("multiple") && !options) invalid6();
+    if (kind === "secret" !== has("secretKey")) invalid6();
     const allowSession = has("allowSession") ? boolean2(input.allowSession) : void 0;
-    if (has("scopeKey") && (typeof input.scopeKey !== "string" || !/^[A-Za-z0-9_:-]{1,64}$/.test(input.scopeKey))) invalid7();
-    if (allowSession === true && !has("scopeKey")) invalid7();
-    if (has("risk") && input.risk !== "normal" && input.risk !== "destructive") invalid7();
+    if (has("scopeKey") && (typeof input.scopeKey !== "string" || !/^[A-Za-z0-9_:-]{1,64}$/.test(input.scopeKey))) invalid6();
+    if (allowSession === true && !has("scopeKey")) invalid6();
+    if (has("risk") && input.risk !== "normal" && input.risk !== "destructive") invalid6();
     const secretKey = has("secretKey") ? (() => {
       const key = readMlsDataRecord(input.secretKey, ["kem", "publicKey"]);
       return Object.freeze({ kem: requireMlsLiteral(key.kem, "x25519"), publicKey: encoded3(key.publicKey, 32) });
@@ -1160,20 +985,20 @@ function parseMlsDevInteractionRequestBody(value) {
 }
 __name(parseMlsDevInteractionRequestBody, "parseMlsDevInteractionRequestBody");
 function parseMlsDevInteractionAnswer(value) {
-  return boundary6(() => {
-    if (value === null || typeof value !== "object" || Array.isArray(value)) invalid7();
+  return boundary5(() => {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) invalid6();
     const keys2 = Reflect.ownKeys(value);
     if (keys2.includes("decision")) {
       const input = readMlsDataRecord(value, ["decision", "scope"]);
-      if (input.decision !== "allow" && input.decision !== "deny" || input.scope !== "once" && input.scope !== "session") invalid7();
+      if (input.decision !== "allow" && input.decision !== "deny" || input.scope !== "once" && input.scope !== "session") invalid6();
       return Object.freeze({ decision: input.decision, scope: input.scope });
     }
     if (keys2.includes("choices")) {
       const choices = array2(readMlsDataRecord(value, ["choices"]).choices, 1, MLS_DEV_INTERACTION_LIMITS.options).map((choice) => {
-        if (typeof choice !== "string" || !/^[A-Za-z0-9_.:-]{1,64}$/.test(choice)) invalid7();
+        if (typeof choice !== "string" || !/^[A-Za-z0-9_.:-]{1,64}$/.test(choice)) invalid6();
         return choice;
       });
-      if (new Set(choices).size !== choices.length) invalid7();
+      if (new Set(choices).size !== choices.length) invalid6();
       return Object.freeze({ choices: Object.freeze(choices) });
     }
     if (keys2.includes("text")) return Object.freeze({ text: text(readMlsDataRecord(value, ["text"]).text, MLS_DEV_INTERACTION_LIMITS.text) });
@@ -1181,31 +1006,31 @@ function parseMlsDevInteractionAnswer(value) {
       const sealed = readMlsDataRecord(readMlsDataRecord(value, ["sealed"]).sealed, ["enc", "ciphertext"]);
       return Object.freeze({ sealed: Object.freeze({ enc: encoded3(sealed.enc, 32), ciphertext: wire(sealed.ciphertext, 17, MLS_DEV_SECRET_ANSWER_MAX_BYTES) }) });
     }
-    if (readMlsDataRecord(value, ["cancelled"]).cancelled !== true) invalid7();
+    if (readMlsDataRecord(value, ["cancelled"]).cancelled !== true) invalid6();
     return Object.freeze({ cancelled: true });
   });
 }
 __name(parseMlsDevInteractionAnswer, "parseMlsDevInteractionAnswer");
 function parseMlsDevInteractionResponseBody(value) {
-  return boundary6(() => {
+  return boundary5(() => {
     const input = readMlsDataRecord(value, ["requestId", "agentId", "answer"]);
     return Object.freeze({ requestId: interactionId(input.requestId), agentId: id3(input.agentId), answer: parseMlsDevInteractionAnswer(input.answer) });
   });
 }
 __name(parseMlsDevInteractionResponseBody, "parseMlsDevInteractionResponseBody");
 function parseMlsDevInteractionWithdrawBody(value) {
-  return boundary6(() => {
+  return boundary5(() => {
     const input = readMlsDataRecord(value, ["requestId", "reason"]);
-    if (!MLS_DEV_INTERACTION_WITHDRAW_REASONS.includes(input.reason)) invalid7();
+    if (!MLS_DEV_INTERACTION_WITHDRAW_REASONS.includes(input.reason)) invalid6();
     return Object.freeze({ requestId: interactionId(input.requestId), reason: input.reason });
   });
 }
 __name(parseMlsDevInteractionWithdrawBody, "parseMlsDevInteractionWithdrawBody");
 var payloadFields = ["version", "kind", "conversationId", "groupId", "messageId", "operationId", "senderDeviceId"];
 function parseMlsDevApplicationPayload(value) {
-  return boundary6(() => {
+  return boundary5(() => {
     const kind = value && typeof value === "object" ? Object.getOwnPropertyDescriptor(value, "kind") : void 0;
-    if (!kind || !Object.hasOwn(kind, "value")) invalid7();
+    if (!kind || !Object.hasOwn(kind, "value")) invalid6();
     if (kind.value === "text") return parseMlsDevTextPayload(value);
     if (kind.value === "item") return parseMlsDevItemPayload(value);
     const input = readMlsDataRecord(value, [...payloadFields, "interaction"]);
@@ -1218,26 +1043,26 @@ function parseMlsDevApplicationPayload(value) {
       operationId: id3(input.operationId),
       senderDeviceId: requireMlsUuid(input.senderDeviceId)
     };
-    if (ids.messageId.startsWith("membership-")) invalid7();
-    const interaction = kind.value === "interaction.request" ? parseMlsDevInteractionRequestBody(input.interaction) : kind.value === "interaction.response" ? parseMlsDevInteractionResponseBody(input.interaction) : kind.value === "interaction.withdraw" ? parseMlsDevInteractionWithdrawBody(input.interaction) : invalid7();
+    if (ids.messageId.startsWith("membership-")) invalid6();
+    const interaction = kind.value === "interaction.request" ? parseMlsDevInteractionRequestBody(input.interaction) : kind.value === "interaction.response" ? parseMlsDevInteractionResponseBody(input.interaction) : kind.value === "interaction.withdraw" ? parseMlsDevInteractionWithdrawBody(input.interaction) : invalid6();
     const payload = Object.freeze({ ...ids, interaction });
-    if (utf83.encode(JSON.stringify(payload)).length > MLS_DEV_TEXT_MAX_BYTES) invalid7();
+    if (utf83.encode(JSON.stringify(payload)).length > MLS_DEV_TEXT_MAX_BYTES) invalid6();
     return payload;
   });
 }
 __name(parseMlsDevApplicationPayload, "parseMlsDevApplicationPayload");
 function assertMlsDevInteractionPayloadBinding(payload, binding3) {
-  boundary6(() => {
+  boundary5(() => {
     if (payload.kind === "text" || payload.kind === "item") {
-      if (binding3 !== void 0) invalid7();
+      if (binding3 !== void 0) invalid6();
       return;
     }
-    if (!binding3 || payload.interaction.requestId !== binding3.requestId) invalid7();
+    if (!binding3 || payload.interaction.requestId !== binding3.requestId) invalid6();
     if (payload.kind === "interaction.request") {
-      if (binding3.role !== "request" || payload.interaction.kind !== binding3.kind || payload.interaction.expiresAtMs !== binding3.expiresAtMs || payload.interaction.responderIds.length !== 1 || payload.interaction.responderIds[0] !== binding3.responderIds[0]) invalid7();
+      if (binding3.role !== "request" || payload.interaction.kind !== binding3.kind || payload.interaction.expiresAtMs !== binding3.expiresAtMs || payload.interaction.responderIds.length !== 1 || payload.interaction.responderIds[0] !== binding3.responderIds[0]) invalid6();
     } else if (payload.kind === "interaction.response") {
-      if (binding3.role !== "response" || payload.interaction.agentId !== binding3.agentId) invalid7();
-    } else if (binding3.role !== "withdraw") invalid7();
+      if (binding3.role !== "response" || payload.interaction.agentId !== binding3.agentId) invalid6();
+    } else if (binding3.role !== "withdraw") invalid6();
   });
 }
 __name(assertMlsDevInteractionPayloadBinding, "assertMlsDevInteractionPayloadBinding");
@@ -1271,27 +1096,27 @@ var MlsDevGroupValidationError = class extends Error {
   }
 };
 var utf84 = new TextEncoder();
-function invalid8() {
+function invalid7() {
   throw new MlsDevGroupValidationError();
 }
-__name(invalid8, "invalid");
-function boundary7(read) {
+__name(invalid7, "invalid");
+function boundary6(read) {
   try {
     return read();
   } catch {
-    return invalid8();
+    return invalid7();
   }
 }
-__name(boundary7, "boundary");
+__name(boundary6, "boundary");
 function bounded5(value, maximum = MLS_DEV_GROUP_CONTROL_MAX_BYTES) {
   if (utf84.encode(JSON.stringify(value)).length > maximum)
-    invalid8();
+    invalid7();
   return Object.freeze(value);
 }
 __name(bounded5, "bounded");
 function id4(value) {
   if (typeof value !== "string" || !/^[A-Za-z0-9_.:~-]{1,200}$/.test(value) || value === "." || value === "..")
-    invalid8();
+    invalid7();
   return value;
 }
 __name(id4, "id");
@@ -1302,13 +1127,13 @@ function encoded4(value, bytes) {
 __name(encoded4, "encoded");
 function boolean3(value) {
   if (typeof value !== "boolean")
-    invalid8();
+    invalid7();
   return value;
 }
 __name(boolean3, "boolean");
 function textProtocol(value) {
   if (!isMlsDevTextProtocol(value))
-    invalid8();
+    invalid7();
   return value;
 }
 __name(textProtocol, "textProtocol");
@@ -1319,19 +1144,19 @@ function token(value) {
 __name(token, "token");
 function wire2(value) {
   if (typeof value !== "string" || value.length < 2 || value.length > Math.ceil(MLS_DEV_GROUP_TLS_MAX_BYTES * 4 / 3))
-    invalid8();
+    invalid7();
   const bytes = Math.floor(value.length * 3 / 4);
   if (value.length !== Math.ceil(bytes * 4 / 3) || !/^[A-Za-z0-9_-]+$/.test(value))
-    invalid8();
+    invalid7();
   const last = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".indexOf(value.at(-1));
   if (value.length % 4 === 2 && (last & 15) !== 0 || value.length % 4 === 3 && (last & 3) !== 0)
-    invalid8();
+    invalid7();
   return value;
 }
 __name(wire2, "wire");
 function plaintextJson(value) {
   if (typeof value !== "string" || !value || utf84.encode(value).length > MLS_DEV_TEXT_MAX_BYTES || new TextDecoder("utf-8", { fatal: true }).decode(utf84.encode(value)) !== value)
-    invalid8();
+    invalid7();
   return value;
 }
 __name(plaintextJson, "plaintextJson");
@@ -1342,92 +1167,100 @@ __name(present, "present");
 var pick = /* @__PURE__ */ __name((value, keys2) => Object.fromEntries(keys2.map((key) => [key, value[key]])), "pick");
 var textExtras = /* @__PURE__ */ __name((text5) => ({ ...text5.replyTo ? { replyTo: text5.replyTo } : {}, ...text5.mentions ? { mentions: text5.mentions } : {} }), "textExtras");
 function sealedCiphertext(value) {
-  if (typeof value !== "string" || !/^[A-Za-z0-9_-]+$/.test(value) || value.length % 4 === 1) invalid8();
+  if (typeof value !== "string" || !/^[A-Za-z0-9_-]+$/.test(value) || value.length % 4 === 1) invalid7();
   const bytes = Math.floor(value.length * 3 / 4);
-  if (bytes < 17 || bytes > MLS_DEV_SECRET_ANSWER_MAX_BYTES) invalid8();
+  if (bytes < 17 || bytes > MLS_DEV_SECRET_ANSWER_MAX_BYTES) invalid7();
   const last = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".indexOf(value.at(-1));
-  if (value.length % 4 === 2 && (last & 15) !== 0 || value.length % 4 === 3 && (last & 3) !== 0) invalid8();
+  if (value.length % 4 === 2 && (last & 15) !== 0 || value.length % 4 === 3 && (last & 3) !== 0) invalid7();
   return value;
 }
 __name(sealedCiphertext, "sealedCiphertext");
 function array3(value, maximum) {
   if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype || value.length > maximum)
-    invalid8();
+    invalid7();
   const descriptors = Object.getOwnPropertyDescriptors(value);
   if (Reflect.ownKeys(descriptors).length !== value.length + 1)
-    invalid8();
+    invalid7();
   return Array.from({ length: value.length }, (_, index) => {
     const descriptor = descriptors[index];
     if (!descriptor || !descriptor.enumerable || !Object.hasOwn(descriptor, "value"))
-      invalid8();
+      invalid7();
     return descriptor.value;
   });
 }
 __name(array3, "array");
 function parseMlsDevGroupCreateConversation(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     const input = readMlsDataRecord(value, ["name", "memberIds", "mlsDev"]), config = readMlsDataRecord(input.mlsDev, ["version", "conversationId", "credential"], ["version", "conversationId", "credential", "protocol"]);
     if (typeof input.name !== "string" || input.name.trim().length > 100)
-      invalid8();
+      invalid7();
     const memberIds = array3(input.memberIds, 31).map((value2) => parseMlsDevEnrollmentPrincipal({ type: "human", id: value2 }).id);
     if (!memberIds.length || new Set(memberIds).size !== memberIds.length || memberIds.some((value2) => value2.includes("/") || value2 === "." || value2 === ".."))
-      invalid8();
+      invalid7();
     return bounded5({ name: input.name, memberIds: Object.freeze(memberIds), mlsDev: Object.freeze({ version: requireMlsLiteral(config.version, 1), conversationId: id4(config.conversationId), credential: token(config.credential), ...Object.hasOwn(config, "protocol") ? { protocol: textProtocol(config.protocol) } : {} }) }, 16 * 1024);
   });
 }
 __name(parseMlsDevGroupCreateConversation, "parseMlsDevGroupCreateConversation");
 function parseMlsDevGroupHead(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     const input = readMlsDataRecord(value, ["sequence", "epoch", "hash"]);
     return Object.freeze({ sequence: requireMlsInteger(input.sequence, 1), epoch: requireMlsInteger(input.epoch), hash: encoded4(input.hash, 32) });
   });
 }
 __name(parseMlsDevGroupHead, "parseMlsDevGroupHead");
 function parseMlsDevGroupMarker(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     const input = readMlsDataRecord(value, ["version", "groupId", "head"]);
     return Object.freeze({ version: requireMlsLiteral(input.version, 1), groupId: encoded4(input.groupId, 32), head: parseMlsDevGroupHead(input.head) });
   });
 }
 __name(parseMlsDevGroupMarker, "parseMlsDevGroupMarker");
 function parseMlsDevGroupRoster(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     const values = array3(value, MLS_DEV_GROUP_ROSTER_MAX).map((item2) => {
       const entry = readMlsDataRecord(item2, ["device", "admissionId"]);
       return Object.freeze({ device: parseMlsDevEnrollmentResult({ version: 1, authorization: "registration_only", device: entry.device }).device, admissionId: id4(entry.admissionId) });
     });
     for (let i = 1; i < values.length; i++)
       if (values[i - 1].device.deviceId >= values[i].device.deviceId)
-        invalid8();
+        invalid7();
     return Object.freeze(values);
   });
 }
 __name(parseMlsDevGroupRoster, "parseMlsDevGroupRoster");
+var MLS_MEMBER_JOIN_WAIT_MS = 6e4;
+function mlsAdmissionWait(input) {
+  const { senderId, memberIds, admitted } = input;
+  const expected = [.../* @__PURE__ */ new Set([...memberIds, ...input.unacceptedIds])];
+  if (!expected.some((id7) => id7 !== senderId && admitted.has(id7))) return expected.filter((id7) => !admitted.has(id7));
+  return input.nowMs < input.joinedAtMs + MLS_MEMBER_JOIN_WAIT_MS ? memberIds.filter((id7) => !admitted.has(id7)) : [];
+}
+__name(mlsAdmissionWait, "mlsAdmissionWait");
 var MLS_DEV_ROOM_REMOVAL_DEADLINE_MS = 72 * 60 * 60 * 1e3;
 function parseMlsDevRoomRemoval(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     const input = readMlsDataRecord(value, ["version", "status", "pending", "closedAtMs"]), devices = /* @__PURE__ */ new Set(), principals = /* @__PURE__ */ new Set();
-    const status = ["pending", "closing", "closed"].includes(input.status) ? input.status : invalid8();
+    const status = ["pending", "closing", "closed"].includes(input.status) ? input.status : invalid7();
     const pending = array3(input.pending, MLS_DEV_GROUP_ROSTER_MAX).map((item2) => {
       const entry = readMlsDataRecord(item2, ["principalId", "deviceIds", "deadlineAtMs"]);
       const principalId2 = parseMlsDevEnrollmentPrincipal({ type: "human", id: entry.principalId }).id;
       const deviceIds = array3(entry.deviceIds, MLS_DEV_GROUP_ROSTER_MAX).map(requireMlsUuid);
-      if (principals.has(principalId2)) invalid8();
+      if (principals.has(principalId2)) invalid7();
       principals.add(principalId2);
       for (const deviceId of deviceIds) {
-        if (devices.has(deviceId)) invalid8();
+        if (devices.has(deviceId)) invalid7();
         devices.add(deviceId);
       }
       return Object.freeze({ principalId: principalId2, deviceIds: Object.freeze(deviceIds), deadlineAtMs: requireMlsInteger(entry.deadlineAtMs, 1) });
     });
     const closedAtMs = input.closedAtMs === null ? null : requireMlsInteger(input.closedAtMs, 1);
-    if (status === "pending" ? !pending.length || closedAtMs !== null : closedAtMs === null || status === "closed" && pending.length) invalid8();
+    if (status === "pending" ? !pending.length || closedAtMs !== null : closedAtMs === null || status === "closed" && pending.length) invalid7();
     return Object.freeze({ version: requireMlsLiteral(input.version, 1), status, pending: Object.freeze(pending), closedAtMs });
   });
 }
 __name(parseMlsDevRoomRemoval, "parseMlsDevRoomRemoval");
 function parseMlsDevGroupPreconditions(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     const input = readMlsDataRecord(value, ["membershipRevision", "admissionId", "targetAdmissionId"]);
     return Object.freeze({
       membershipRevision: requireMlsInteger(input.membershipRevision),
@@ -1456,33 +1289,33 @@ var unsignedFields = [
 ];
 function unsigned(input) {
   if (typeof input.kind !== "string" || !["create", "add", "remove"].includes(input.kind))
-    invalid8();
+    invalid7();
   const kind = input.kind;
   const senderCredential = token(input.senderCredential), sender = parseMlsDevCredentialToken(senderCredential).unsigned.claims.device;
   const expectedHead = input.expectedHead === null ? null : parseMlsDevGroupHead(input.expectedHead);
   const epoch = requireMlsInteger(input.epoch), preconditions = parseMlsDevGroupPreconditions(input.preconditions), roster = parseMlsDevGroupRoster(input.roster);
   const environmentId = requireMlsEnvironmentId(input.environmentId);
   if (sender.environmentId !== environmentId || roster.some((entry) => entry.device.environmentId !== environmentId))
-    invalid8();
+    invalid7();
   const groupInfo = input.groupInfo === null ? null : wire2(input.groupInfo), commit = input.commit === null ? null : wire2(input.commit);
   const welcome = input.welcome === null ? null : wire2(input.welcome);
   const keyPackageClaim = input.keyPackageClaim === null ? null : parseMlsDevKeyPackageClaimReceipt(input.keyPackageClaim);
   const removedDeviceId = input.removedDeviceId === null ? null : requireMlsUuid(input.removedDeviceId);
   const own = roster.find((entry) => entry.device.deviceId === sender.deviceId);
   if (!own || JSON.stringify(own.device) !== JSON.stringify(sender) || own.admissionId !== preconditions.admissionId)
-    invalid8();
+    invalid7();
   if (kind === "create") {
     if (expectedHead !== null || epoch !== 0 || roster.length !== 1 || !groupInfo || commit !== null || welcome !== null || keyPackageClaim !== null || removedDeviceId !== null || preconditions.targetAdmissionId !== null)
-      invalid8();
+      invalid7();
   } else {
     if (!expectedHead || expectedHead.sequence >= Number.MAX_SAFE_INTEGER || expectedHead.epoch >= Number.MAX_SAFE_INTEGER || epoch !== expectedHead.epoch + 1 || !commit || preconditions.targetAdmissionId === null)
-      invalid8();
+      invalid7();
     if (kind === "add") {
       const target = roster.find((entry) => entry.device.deviceId === keyPackageClaim?.recipientDeviceId);
       if (!welcome || !keyPackageClaim || removedDeviceId !== null || !target || keyPackageClaim.claimantDeviceId !== sender.deviceId || keyPackageClaim.preconditions.conversationId !== input.conversationId || keyPackageClaim.preconditions.membershipRevision !== preconditions.membershipRevision || keyPackageClaim.preconditions.admissionId !== preconditions.admissionId || keyPackageClaim.preconditions.targetAdmissionId !== preconditions.targetAdmissionId || target.admissionId !== preconditions.targetAdmissionId)
-        invalid8();
+        invalid7();
     } else if (!removedDeviceId || removedDeviceId === sender.deviceId || roster.some((entry) => entry.device.deviceId === removedDeviceId) || welcome !== null || keyPackageClaim !== null)
-      invalid8();
+      invalid7();
   }
   return bounded5({
     version: requireMlsLiteral(input.version, 1),
@@ -1504,21 +1337,21 @@ function unsigned(input) {
 }
 __name(unsigned, "unsigned");
 function parseMlsDevGroupControl(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     const input = readMlsDataRecord(value, [...unsignedFields, "proof"]);
     return bounded5({ ...unsigned(input), proof: encoded4(input.proof, 64) });
   });
 }
 __name(parseMlsDevGroupControl, "parseMlsDevGroupControl");
 function parseMlsDevGroupAcceptedControl(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     const input = readMlsDataRecord(value, ["version", "authorization", "operationId", "control", "head", "acceptedAtMs", "membershipRevision"]);
     const control = parseMlsDevGroupControl(input.control), head = parseMlsDevGroupHead(input.head);
     if (head.sequence !== (control.expectedHead?.sequence ?? 0) + 1 || head.epoch !== control.epoch)
-      invalid8();
+      invalid7();
     const membershipRevision = requireMlsInteger(input.membershipRevision);
     if (membershipRevision !== control.preconditions.membershipRevision && !(control.kind === "remove" && membershipRevision === control.preconditions.membershipRevision + 1))
-      invalid8();
+      invalid7();
     return bounded5({
       version: requireMlsLiteral(input.version, 1),
       authorization: requireMlsLiteral(input.authorization, "group_control_only"),
@@ -1532,20 +1365,20 @@ function parseMlsDevGroupAcceptedControl(value) {
 }
 __name(parseMlsDevGroupAcceptedControl, "parseMlsDevGroupAcceptedControl");
 function parseMlsDevGroupAdmissionsResult(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     const input = readMlsDataRecord(value, ["version", "conversationId", "membershipRevision", "candidates", "waitingPrincipalIds"]);
     const candidates = array3(input.candidates, MLS_DEV_GROUP_ADMISSION_MAX_CANDIDATES).map((raw) => {
       const entry = readMlsDataRecord(raw, ["principal", "deviceId", "targetAdmissionId"]), principal2 = readMlsDataRecord(entry.principal, ["type", "id"]);
-      if (principal2.type !== "human" && principal2.type !== "ai_agent") invalid8();
+      if (principal2.type !== "human" && principal2.type !== "ai_agent") invalid7();
       return Object.freeze({
         principal: Object.freeze({ type: principal2.type, id: id4(principal2.id) }),
         deviceId: requireMlsUuid(entry.deviceId),
         targetAdmissionId: id4(entry.targetAdmissionId)
       });
     });
-    if (new Set(candidates.map((entry) => entry.deviceId)).size !== candidates.length) invalid8();
+    if (new Set(candidates.map((entry) => entry.deviceId)).size !== candidates.length) invalid7();
     const waiting = array3(input.waitingPrincipalIds, 32).map(id4);
-    if (new Set(waiting).size !== waiting.length) invalid8();
+    if (new Set(waiting).size !== waiting.length) invalid7();
     return bounded5(Object.freeze({
       version: requireMlsLiteral(input.version, 1),
       conversationId: id4(input.conversationId),
@@ -1557,11 +1390,11 @@ function parseMlsDevGroupAdmissionsResult(value) {
 }
 __name(parseMlsDevGroupAdmissionsResult, "parseMlsDevGroupAdmissionsResult");
 function parseMlsDevGroupQuery(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     const input = readMlsDataRecord(value, ["version", "conversationId", "credential", "afterSequence", "limit"]);
     const limit2 = requireMlsInteger(input.limit, 1);
     if (limit2 > MLS_DEV_GROUP_QUERY_MAX_CONTROLS)
-      invalid8();
+      invalid7();
     return bounded5({
       version: requireMlsLiteral(input.version, 1),
       conversationId: id4(input.conversationId),
@@ -1573,17 +1406,17 @@ function parseMlsDevGroupQuery(value) {
 }
 __name(parseMlsDevGroupQuery, "parseMlsDevGroupQuery");
 function parseMlsDevGroupQueryResult(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     const input = readMlsDataRecord(value, ["version", "conversationId", "marker", "membershipRevision", "admissionId", "roster", "controls", "nextSequence", "hasMore", "terminal"]);
     const conversationId = id4(input.conversationId), marker = input.marker === null ? null : parseMlsDevGroupMarker(input.marker);
     const controls = array3(input.controls, MLS_DEV_GROUP_QUERY_MAX_CONTROLS).map(parseMlsDevGroupAcceptedControl);
     const nextSequence = requireMlsInteger(input.nextSequence), terminal = boolean3(input.terminal), hasMore = boolean3(input.hasMore);
     for (let i = 0; i < controls.length; i++) {
       if (!marker || controls[i].control.conversationId !== conversationId || controls[i].control.groupId !== marker.groupId || controls[i].head.sequence > marker.head.sequence || i > 0 && controls[i].head.sequence !== controls[i - 1].head.sequence + 1)
-        invalid8();
+        invalid7();
     }
     if (controls.length && controls.at(-1).head.sequence !== nextSequence || marker && nextSequence > marker.head.sequence || !marker && (controls.length || nextSequence || terminal || hasMore))
-      invalid8();
+      invalid7();
     return bounded5({
       version: requireMlsLiteral(input.version, 1),
       conversationId,
@@ -1600,11 +1433,11 @@ function parseMlsDevGroupQueryResult(value) {
 }
 __name(parseMlsDevGroupQueryResult, "parseMlsDevGroupQueryResult");
 function parseMlsDevGroupContext(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     const input = readMlsDataRecord(value, ["version", "environmentId", "conversationId", "groupId", "deviceId", "installationId", "revision"], ["version", "environmentId", "conversationId", "groupId", "deviceId", "installationId", "revision", "protocol"]);
     const revision2 = requireMlsInteger(input.revision);
     if (revision2 >= Number.MAX_SAFE_INTEGER)
-      invalid8();
+      invalid7();
     return Object.freeze({
       version: requireMlsLiteral(input.version, 1),
       environmentId: requireMlsEnvironmentId(input.environmentId),
@@ -1619,17 +1452,17 @@ function parseMlsDevGroupContext(value) {
 }
 __name(parseMlsDevGroupContext, "parseMlsDevGroupContext");
 function parseMlsDevGroupCommand(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     if (!value || typeof value !== "object")
-      invalid8();
+      invalid7();
     const descriptor = Object.getOwnPropertyDescriptor(value, "op");
     if (!descriptor || !Object.hasOwn(descriptor, "value"))
-      invalid8();
+      invalid7();
     const op = descriptor.value;
     if (op === "process_application") {
       const input2 = readMlsDataRecord(value, ["op", "entry"]), entry = parseMlsDevGroupFeedEntry(input2.entry);
       if (entry.kind !== "application" || !entry.receiptProof)
-        invalid8();
+        invalid7();
       return bounded5({ op, entry });
     }
     if (op === "encrypt_text") {
@@ -1688,23 +1521,23 @@ function parseMlsDevGroupCommand(value) {
       let seal = null;
       if (interaction.role === "request") {
         if (Object.hasOwn(body, "secretKey") || input2.seal !== null)
-          invalid8();
+          invalid7();
         const parsed = parseMlsDevInteractionRequestBody(interaction.kind === "secret" ? { ...body, secretKey: { kem: "x25519", publicKey: "A".repeat(43) } } : body);
         if (parsed.requestId !== interaction.requestId || parsed.kind !== interaction.kind || parsed.expiresAtMs !== interaction.expiresAtMs || parsed.responderIds[0] !== interaction.responderIds[0])
-          invalid8();
+          invalid7();
       } else if (interaction.role === "response") {
         if (input2.seal === null) {
           const parsed = parseMlsDevInteractionResponseBody(body);
           if (parsed.requestId !== interaction.requestId || parsed.agentId !== interaction.agentId || "sealed" in parsed.answer)
-            invalid8();
+            invalid7();
         } else {
           const fields3 = readMlsDataRecord(input2.seal, ["text", "publicKey", "requesterDeviceId"]), ids2 = readMlsDataRecord(body, ["requestId", "agentId"]);
           if (ids2.requestId !== interaction.requestId || ids2.agentId !== interaction.agentId || typeof fields3.text !== "string" || !fields3.text.trim() || [...fields3.text].length > MLS_DEV_INTERACTION_LIMITS.text || utf84.encode(fields3.text).length > MLS_DEV_SECRET_ANSWER_MAX_BYTES - 16 || new TextDecoder("utf-8", { fatal: true }).decode(utf84.encode(fields3.text)) !== fields3.text)
-            invalid8();
+            invalid7();
           seal = Object.freeze({ text: fields3.text, publicKey: encoded4(fields3.publicKey, 32), requesterDeviceId: requireMlsUuid(fields3.requesterDeviceId) });
         }
       } else if (input2.seal !== null || parseMlsDevInteractionWithdrawBody(body).requestId !== interaction.requestId)
-        invalid8();
+        invalid7();
       const ids = parseMlsDevTextPayload({
         version: 1,
         kind: "text",
@@ -1716,7 +1549,7 @@ function parseMlsDevGroupCommand(value) {
         text: "x"
       });
       if (utf84.encode(JSON.stringify(body)).length > MLS_DEV_TEXT_MAX_BYTES)
-        invalid8();
+        invalid7();
       return bounded5({
         op,
         operationId: ids.operationId,
@@ -1758,7 +1591,7 @@ function parseMlsDevGroupCommand(value) {
       };
       if (op === "join") {
         if (common2.accepted.control.kind !== "add")
-          invalid8();
+          invalid7();
         return bounded5({ op, ...common2, keyPackageId: requireMlsUuid(input2.keyPackageId) });
       }
       return bounded5({ op, ...common2 });
@@ -1768,11 +1601,11 @@ function parseMlsDevGroupCommand(value) {
     const fields2 = { operationId: id4(input.operationId), credential: token(input.credential), preconditions: parseMlsDevGroupPreconditions(input.preconditions) };
     if (op === "create") {
       if (fields2.preconditions.targetAdmissionId !== null)
-        invalid8();
+        invalid7();
       return bounded5({ op, ...fields2 });
     }
     if (fields2.preconditions.targetAdmissionId === null)
-      invalid8();
+      invalid7();
     const expectedHead = parseMlsDevGroupHead(input.expectedHead);
     if (op === "add")
       return bounded5({
@@ -1788,24 +1621,24 @@ function parseMlsDevGroupCommand(value) {
         expectedHead,
         removedDeviceId: requireMlsUuid(input.removedDeviceId)
       });
-    return invalid8();
+    return invalid7();
   });
 }
 __name(parseMlsDevGroupCommand, "parseMlsDevGroupCommand");
 function parseMlsDevGroupPreparation(value) {
-  return boundary7(() => {
+  return boundary6(() => {
     const input = readMlsDataRecord(value, ["wrappedState", "payload"]);
     if (typeof input.wrappedState !== "string" || input.wrappedState.length > MLS_DEV_GROUP_WRAPPED_MAX_BYTES || !input.wrappedState.startsWith("v1:"))
-      invalid8();
+      invalid7();
     const body = input.wrappedState.slice(3);
     if (body.length < 40 || body.length % 4 !== 0 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(body))
-      invalid8();
+      invalid7();
     const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
     if (body.endsWith("==") && (alphabet.indexOf(body.at(-3)) & 15) !== 0 || !body.endsWith("==") && body.endsWith("=") && (alphabet.indexOf(body.at(-2)) & 3) !== 0)
-      invalid8();
+      invalid7();
     const kind = Object.getOwnPropertyDescriptor(input.payload ?? {}, "kind");
     if (!kind || !Object.hasOwn(kind, "value"))
-      invalid8();
+      invalid7();
     let payload;
     if (kind.value === "application") {
       const fields2 = readMlsDataRecord(input.payload, ["kind", "envelope", ...present(input.payload, ["payload"])]);
@@ -1861,7 +1694,7 @@ function parseMlsDevGroupPreparation(value) {
       const fields2 = readMlsDataRecord(input.payload, ["kind", "envelope", "payload"]);
       payload = Object.freeze({ kind: "interaction_application", envelope: parseMlsDevApplicationEnvelope(fields2.envelope), payload: plaintextJson(fields2.payload) });
       if (!payload.envelope.interaction)
-        invalid8();
+        invalid7();
     } else if (kind.value === "interaction") {
       const fields2 = readMlsDataRecord(input.payload, ["kind", "messageId", "operationId", "senderDeviceId", "payload", "feedOrdinal"]);
       const ids = parseMlsDevTextPayload({
@@ -1905,7 +1738,7 @@ function parseMlsDevGroupPreparation(value) {
       const fields2 = readMlsDataRecord(input.payload, ["kind", "requestId", "text"]);
       const binding3 = parseMlsDevInteractionBinding({ role: "withdraw", requestId: fields2.requestId });
       if (typeof fields2.text !== "string" || !fields2.text.trim() || [...fields2.text].length > MLS_DEV_INTERACTION_LIMITS.text || new TextDecoder("utf-8", { fatal: true }).decode(utf84.encode(fields2.text)) !== fields2.text)
-        invalid8();
+        invalid7();
       payload = Object.freeze({ kind: "secret", requestId: binding3.requestId, text: fields2.text });
     } else if (kind.value === "control") {
       const fields2 = readMlsDataRecord(input.payload, ["kind", "control"]);
@@ -1960,27 +1793,27 @@ var MlsDevApplicationValidationError = class extends Error {
   }
 };
 var utf85 = new TextEncoder();
-function invalid9() {
+function invalid8() {
   throw new MlsDevApplicationValidationError();
 }
-__name(invalid9, "invalid");
-function boundary8(read) {
+__name(invalid8, "invalid");
+function boundary7(read) {
   try {
     return read();
   } catch {
-    return invalid9();
+    return invalid8();
   }
 }
-__name(boundary8, "boundary");
+__name(boundary7, "boundary");
 function bounded6(value) {
   if (utf85.encode(JSON.stringify(value)).length > MLS_DEV_APPLICATION_MAX_BYTES)
-    invalid9();
+    invalid8();
   return Object.freeze(value);
 }
 __name(bounded6, "bounded");
 function id5(value) {
   if (typeof value !== "string" || !/^[A-Za-z0-9_.:~-]{1,200}$/.test(value) || value === "." || value === "..")
-    invalid9();
+    invalid8();
   return value;
 }
 __name(id5, "id");
@@ -1990,31 +1823,31 @@ function isMlsDevMessageId(value) {
 __name(isMlsDevMessageId, "isMlsDevMessageId");
 function messageId(value) {
   if (!isMlsDevMessageId(value))
-    invalid9();
+    invalid8();
   return value;
 }
 __name(messageId, "messageId");
 function interactionId2(value) {
   if (typeof value !== "string" || !MLS_DEV_INTERACTION_ID_PATTERN.test(value) || value === "." || value === "..")
-    invalid9();
+    invalid8();
   return value;
 }
 __name(interactionId2, "interactionId");
 function parseMlsDevInteractionBinding(value) {
-  return boundary8(() => {
+  return boundary7(() => {
     const role = value && typeof value === "object" ? Object.getOwnPropertyDescriptor(value, "role") : void 0;
     if (!role || !Object.hasOwn(role, "value"))
-      invalid9();
+      invalid8();
     if (role.value === "request") {
       const input2 = readMlsDataRecord(value, ["role", "requestId", "kind", "responderIds", "expiresAtMs"]);
       if (typeof input2.kind !== "string" || !MLS_DEV_INTERACTION_KINDS.includes(input2.kind))
-        invalid9();
+        invalid8();
       const responders = input2.responderIds;
       if (!Array.isArray(responders) || Object.getPrototypeOf(responders) !== Array.prototype || responders.length !== 1 || Reflect.ownKeys(Object.getOwnPropertyDescriptors(responders)).length !== 2)
-        invalid9();
+        invalid8();
       const only = Object.getOwnPropertyDescriptor(responders, 0);
       if (!only || !only.enumerable || !Object.hasOwn(only, "value"))
-        invalid9();
+        invalid8();
       const expiresAtMs = requireMlsInteger(input2.expiresAtMs, 1);
       return Object.freeze({
         role: "request",
@@ -2039,21 +1872,21 @@ function encoded5(value, bytes) {
 }
 __name(encoded5, "encoded");
 function parseMlsDevApplicationWire(value) {
-  return boundary8(() => {
+  return boundary7(() => {
     if (typeof value !== "string" || value.length < 2 || value.length > Math.ceil(MLS_DEV_APPLICATION_TLS_MAX_BYTES * 4 / 3))
-      invalid9();
+      invalid8();
     const bytes = Math.floor(value.length * 3 / 4);
     if (bytes > MLS_DEV_APPLICATION_TLS_MAX_BYTES || value.length !== Math.ceil(bytes * 4 / 3) || !/^[A-Za-z0-9_-]+$/.test(value))
-      invalid9();
+      invalid8();
     const last = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".indexOf(value.at(-1));
     if (value.length % 4 === 2 && (last & 15) !== 0 || value.length % 4 === 3 && (last & 3) !== 0)
-      invalid9();
+      invalid8();
     return value;
   });
 }
 __name(parseMlsDevApplicationWire, "parseMlsDevApplicationWire");
 function parseMlsDevApplicationPreconditions(value) {
-  return boundary8(() => {
+  return boundary7(() => {
     const input = readMlsDataRecord(value, ["membershipRevision", "admissionId"]);
     return Object.freeze({ membershipRevision: requireMlsInteger(input.membershipRevision), admissionId: id5(input.admissionId) });
   });
@@ -2063,7 +1896,7 @@ var bindingFields = ["version", "environmentId", "conversationId", "groupId", "m
 var interactionBindingFields = [...bindingFields, "interaction"];
 function binding(input) {
   const environmentId = requireMlsEnvironmentId(input.environmentId);
-  if (parseMlsDevCredentialToken(input.senderCredential).unsigned.claims.device.environmentId !== environmentId) invalid9();
+  if (parseMlsDevCredentialToken(input.senderCredential).unsigned.claims.device.environmentId !== environmentId) invalid8();
   return {
     version: requireMlsLiteral(input.version, 1),
     environmentId,
@@ -2082,14 +1915,14 @@ function fields(value, extra) {
 }
 __name(fields, "fields");
 function parseMlsDevApplicationEnvelope(value) {
-  return boundary8(() => {
+  return boundary7(() => {
     const input = fields(value, ["ciphertext", "proof"]);
     return bounded6({ ...binding(input), ciphertext: parseMlsDevApplicationWire(input.ciphertext), proof: encoded5(input.proof, 64) });
   });
 }
 __name(parseMlsDevApplicationEnvelope, "parseMlsDevApplicationEnvelope");
 function parseMlsDevApplicationReceipt(value) {
-  return boundary8(() => {
+  return boundary7(() => {
     const input = readMlsDataRecord(value, ["version", "authorization", "operationId", "conversationId", "groupId", "messageId", "feedOrdinal", "head", "acceptedAtMs", "envelopeHash"]);
     return bounded6({
       version: requireMlsLiteral(input.version, 1),
@@ -2108,7 +1941,7 @@ function parseMlsDevApplicationReceipt(value) {
 __name(parseMlsDevApplicationReceipt, "parseMlsDevApplicationReceipt");
 function text2(value) {
   if (typeof value !== "string" || !value.trim() || utf85.encode(value).length > MLS_DEV_TEXT_MAX_BYTES || new TextDecoder("utf-8", { fatal: true }).decode(utf85.encode(value)) !== value)
-    invalid9();
+    invalid8();
   return value;
 }
 __name(text2, "text");
@@ -2117,13 +1950,13 @@ function textExtras2(value) {
   if (Object.hasOwn(value, "replyTo")) {
     const reply = readMlsDataRecord(value.replyTo, ["messageId", "quote"]);
     if ([...text2(reply.quote)].length > MLS_DEV_REPLY_QUOTE_MAX_CHARACTERS)
-      invalid9();
+      invalid8();
     extras.replyTo = Object.freeze({ messageId: messageId(reply.messageId), quote: reply.quote });
   }
   if (Object.hasOwn(value, "mentions")) {
     const mentions = value.mentions;
     if (!Array.isArray(mentions) || mentions.length < 1 || mentions.length > MLS_DEV_MENTIONS_MAX || new Set(mentions).size !== mentions.length)
-      invalid9();
+      invalid8();
     extras.mentions = Object.freeze(mentions.map(id5));
   }
   return extras;
@@ -2131,7 +1964,7 @@ function textExtras2(value) {
 __name(textExtras2, "textExtras");
 var optionalKeys = /* @__PURE__ */ __name((value, keys2) => value && typeof value === "object" ? keys2.filter((key) => Object.hasOwn(value, key)) : [], "optionalKeys");
 function parseMlsDevTextPayload(value) {
-  return boundary8(() => {
+  return boundary7(() => {
     const input = readMlsDataRecord(value, ["version", "kind", "conversationId", "groupId", "messageId", "operationId", "senderDeviceId", "text", ...optionalKeys(value, ["replyTo", "mentions"])]);
     return bounded6({
       version: requireMlsLiteral(input.version, 1),
@@ -2149,19 +1982,19 @@ function parseMlsDevTextPayload(value) {
 __name(parseMlsDevTextPayload, "parseMlsDevTextPayload");
 var itemFields = ["type", "uploadId", "url", "mimeType", "sizeBytes", "fileName", "width", "height", "durationMs", "thumbnailUrl", "caption", "replyTo", "mentions"];
 function httpsUrl(value) {
-  if (typeof value !== "string" || value.length > 2048) invalid9();
-  const url = boundary8(() => new URL(value));
-  if (url.protocol !== "https:" || url.username || url.password) invalid9();
+  if (typeof value !== "string" || value.length > 2048) invalid8();
+  const url = boundary7(() => new URL(value));
+  if (url.protocol !== "https:" || url.username || url.password) invalid8();
   return value;
 }
 __name(httpsUrl, "httpsUrl");
-var dimension = /* @__PURE__ */ __name((value) => requireMlsInteger(value, 0) <= 1e5 ? value : invalid9(), "dimension");
+var dimension = /* @__PURE__ */ __name((value) => requireMlsInteger(value, 0) <= 1e5 ? value : invalid8(), "dimension");
 function item(value) {
   const input = readMlsDataRecord(value, ["type", "uploadId", "url", "mimeType", "sizeBytes", ...optionalKeys(value, itemFields.slice(5))]);
   if (!MLS_DEV_ITEM_TYPES.some((type) => type === input.type) || typeof input.mimeType !== "string" || !/^[a-z0-9.+-]{1,64}\/[a-z0-9.+-]{1,128}$/i.test(input.mimeType))
-    invalid9();
+    invalid8();
   if (input.fileName !== void 0 && (typeof input.fileName !== "string" || !input.fileName.trim() || [...input.fileName].length > 240))
-    invalid9();
+    invalid8();
   return Object.freeze({
     type: input.type,
     uploadId: requireMlsUuid(input.uploadId),
@@ -2177,7 +2010,7 @@ function item(value) {
 }
 __name(item, "item");
 function parseMlsDevItemPayload(value) {
-  return boundary8(() => {
+  return boundary7(() => {
     const input = readMlsDataRecord(value, ["version", "kind", "conversationId", "groupId", "messageId", "operationId", "senderDeviceId", "item"]);
     const payload = {
       version: requireMlsLiteral(input.version, 1),
@@ -2190,7 +2023,7 @@ function parseMlsDevItemPayload(value) {
       item: item(input.item)
     };
     if (utf85.encode(JSON.stringify(payload)).length > MLS_DEV_TEXT_MAX_BYTES)
-      invalid9();
+      invalid8();
     return bounded6(payload);
   });
 }
@@ -2212,40 +2045,443 @@ function framed(domain4, value, operationId) {
 }
 __name(framed, "framed");
 function encodeMlsDevApplicationEnvelopeHash(value, operationId) {
-  return boundary8(() => framed("canon.mls.dev-application-envelope.v1\0", parseMlsDevApplicationEnvelope(value), operationId));
+  return boundary7(() => framed("canon.mls.dev-application-envelope.v1\0", parseMlsDevApplicationEnvelope(value), operationId));
 }
 __name(encodeMlsDevApplicationEnvelopeHash, "encodeMlsDevApplicationEnvelopeHash");
 
-// ../backend-contracts/src/messageText.ts
-var HUMAN_MESSAGE_TEXT_MAX_BYTES = 32 * 1024;
-var UTF8_ENCODER = new TextEncoder();
-
-// ../backend-contracts/src/runtimeCardFields.ts
-var RUNTIME_CARD_FIELD_TYPES = [
-  "text",
-  "textarea",
-  "select",
-  "multiSelect",
-  "boolean",
-  "date",
-  "number",
-  "currency",
-  "searchSelect",
-  "lineItems"
-];
-var RUNTIME_CARD_LINE_ITEM_COLUMN_TYPES = [
-  "text",
-  "number",
-  "currency",
-  "date",
-  "select"
-];
-
-// ../backend-contracts/src/membershipChange.ts
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+// ../backend-contracts/src/mlsDevFeedReceipt.ts
+var MlsDevFeedReceiptValidationError = class extends Error {
+  static {
+    __name(this, "MlsDevFeedReceiptValidationError");
+  }
+  code = "INVALID_MLS_DEV_FEED_RECEIPT";
+  constructor() {
+    super("INVALID_MLS_DEV_FEED_RECEIPT");
+    this.name = "MlsDevFeedReceiptValidationError";
+  }
+};
+function invalid9() {
+  throw new MlsDevFeedReceiptValidationError();
+}
+__name(invalid9, "invalid");
+function boundary8(read) {
+  try {
+    return read();
+  } catch {
+    return invalid9();
+  }
+}
+__name(boundary8, "boundary");
+function parseMlsDevReceiptKeyVersion(value, environmentId) {
+  return boundary8(() => {
+    if (typeof value !== "string" || value.length > 200) invalid9();
+    const owner = mlsEnvironmentOfReceiptKeyVersion(value);
+    if (!owner || environmentId !== void 0 && owner !== environmentId) invalid9();
+    return value;
+  });
+}
+__name(parseMlsDevReceiptKeyVersion, "parseMlsDevReceiptKeyVersion");
+function parseMlsDevFeedReceiptProof(value) {
+  return boundary8(() => {
+    const input = readMlsDataRecord(value, ["keyVersion", "signature"]);
+    decodeCanonicalMlsBase64Url(input.signature, 64);
+    return Object.freeze({ keyVersion: parseMlsDevReceiptKeyVersion(input.keyVersion), signature: input.signature });
+  });
+}
+__name(parseMlsDevFeedReceiptProof, "parseMlsDevFeedReceiptProof");
+var MLS_DEV_GROUP_RECEIPT_CLOCK_SKEW = "MLS_DEV_GROUP_RECEIPT_CLOCK_SKEW";
+function isMlsDevReceiptClockSkew(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+  const keys2 = Object.keys(value).sort().join(), input = value;
+  return (keys2 === "error,ok,retryable" || keys2 === "error,ok,retryable,version" && input.version === 1) && input.ok === false && input.error === MLS_DEV_GROUP_RECEIPT_CLOCK_SKEW && input.retryable === true;
+}
+__name(isMlsDevReceiptClockSkew, "isMlsDevReceiptClockSkew");
+
+// ../backend-contracts/src/mlsDevCredentialReconciliation.ts
+var MLS_DEV_CREDENTIAL_RECONCILIATION_CHALLENGE_TTL_MS = 3e5;
+var MLS_DEV_CREDENTIAL_RECONCILIATION_MAX_BYTES = 8192;
+var MlsDevCredentialReconciliationValidationError = class extends Error {
+  static {
+    __name(this, "MlsDevCredentialReconciliationValidationError");
+  }
+  code = "INVALID_MLS_DEV_CREDENTIAL_RECONCILIATION";
+  constructor() {
+    super("INVALID_MLS_DEV_CREDENTIAL_RECONCILIATION");
+    this.name = "MlsDevCredentialReconciliationValidationError";
+  }
+};
+var utf86 = new TextEncoder();
+var domain2 = utf86.encode("canon.mls.credential-reconciliation-proof.v1\0");
+function invalid10() {
+  throw new MlsDevCredentialReconciliationValidationError();
+}
+__name(invalid10, "invalid");
+function boundary9(read) {
+  try {
+    return read();
+  } catch {
+    return invalid10();
+  }
+}
+__name(boundary9, "boundary");
+function bounded7(value) {
+  if (utf86.encode(JSON.stringify(value)).length > MLS_DEV_CREDENTIAL_RECONCILIATION_MAX_BYTES) invalid10();
+  return Object.freeze(value);
+}
+__name(bounded7, "bounded");
+function encoded6(value, bytes) {
+  decodeCanonicalMlsBase64Url(value, bytes);
+  return value;
+}
+__name(encoded6, "encoded");
+function parseMlsDevCredentialReconciliationBegin(value) {
+  return boundary9(() => {
+    const input = readMlsDataRecord(value, ["version", "deviceId", "requestId", "expectedCredentialGeneration"]);
+    return bounded7({
+      version: requireMlsLiteral(input.version, 1),
+      deviceId: requireMlsUuid(input.deviceId),
+      requestId: requireMlsUuid(input.requestId),
+      expectedCredentialGeneration: requireMlsInteger(input.expectedCredentialGeneration)
+    });
+  });
+}
+__name(parseMlsDevCredentialReconciliationBegin, "parseMlsDevCredentialReconciliationBegin");
+function parseMlsDevCredentialReconciliationChallenge(value) {
+  return boundary9(() => {
+    const input = readMlsDataRecord(value, [
+      "version",
+      "challengeId",
+      "requestId",
+      "nonce",
+      "device",
+      "expectedCredentialGeneration",
+      "issuedAtMs",
+      "expiresAtMs"
+    ]);
+    const device = parseMlsDevEnrollmentResult({ version: 1, authorization: "registration_only", device: input.device }).device;
+    const issuedAtMs = requireMlsInteger(input.issuedAtMs), expiresAtMs = requireMlsInteger(input.expiresAtMs);
+    if (issuedAtMs < device.registeredAtMs || expiresAtMs - issuedAtMs !== MLS_DEV_CREDENTIAL_RECONCILIATION_CHALLENGE_TTL_MS) invalid10();
+    return bounded7({
+      version: requireMlsLiteral(input.version, 1),
+      challengeId: requireMlsUuid(input.challengeId),
+      requestId: requireMlsUuid(input.requestId),
+      nonce: encoded6(input.nonce, 32),
+      device,
+      expectedCredentialGeneration: requireMlsInteger(input.expectedCredentialGeneration),
+      issuedAtMs,
+      expiresAtMs
+    });
+  });
+}
+__name(parseMlsDevCredentialReconciliationChallenge, "parseMlsDevCredentialReconciliationChallenge");
+function parseMlsDevCredentialReconciliationComplete(value) {
+  return boundary9(() => {
+    const input = readMlsDataRecord(value, ["version", "challengeId", "proof"]);
+    return bounded7({ version: requireMlsLiteral(input.version, 1), challengeId: requireMlsUuid(input.challengeId), proof: encoded6(input.proof, 64) });
+  });
+}
+__name(parseMlsDevCredentialReconciliationComplete, "parseMlsDevCredentialReconciliationComplete");
+function parseMlsDevCredentialReconciliationReceipt(value) {
+  return boundary9(() => {
+    const input = readMlsDataRecord(value, ["version", "authorization", "challenge", "observedCredentialGeneration", "observedAtMs"]);
+    const challenge = parseMlsDevCredentialReconciliationChallenge(input.challenge);
+    const observedCredentialGeneration = requireMlsInteger(input.observedCredentialGeneration), observedAtMs = requireMlsInteger(input.observedAtMs);
+    if (observedCredentialGeneration < challenge.expectedCredentialGeneration || observedAtMs < challenge.issuedAtMs || observedAtMs >= challenge.expiresAtMs) invalid10();
+    return bounded7({
+      version: requireMlsLiteral(input.version, 1),
+      authorization: requireMlsLiteral(input.authorization, "credential_generation_observation_only"),
+      challenge,
+      observedCredentialGeneration,
+      observedAtMs
+    });
+  });
+}
+__name(parseMlsDevCredentialReconciliationReceipt, "parseMlsDevCredentialReconciliationReceipt");
+
+// ../backend-contracts/src/mlsDevDeviceCustody.ts
+var MLS_DEV_DEVICE_CONTEXT_MAX_BYTES = 2048;
+var MLS_DEV_DEVICE_COMMAND_MAX_BYTES = 16384;
+var MLS_DEV_DEVICE_WRAPPED_STATE_MAX_BYTES = 6144;
+var MlsDevDeviceCustodyValidationError = class extends Error {
+  static {
+    __name(this, "MlsDevDeviceCustodyValidationError");
+  }
+  code = "INVALID_MLS_DEV_DEVICE_CUSTODY";
+  constructor() {
+    super("INVALID_MLS_DEV_DEVICE_CUSTODY");
+    this.name = "MlsDevDeviceCustodyValidationError";
+  }
+};
+var utf87 = new TextEncoder();
+function invalid11() {
+  throw new MlsDevDeviceCustodyValidationError();
+}
+__name(invalid11, "invalid");
+function boundary10(read) {
+  try {
+    return read();
+  } catch {
+    return invalid11();
+  }
+}
+__name(boundary10, "boundary");
+function bounded8(value, limit2) {
+  if (utf87.encode(JSON.stringify(value)).length > limit2) invalid11();
+  return Object.freeze(value);
+}
+__name(bounded8, "bounded");
+function binding2(input) {
+  return {
+    version: requireMlsLiteral(input.version, 1),
+    environmentId: requireMlsEnvironmentId(input.environmentId),
+    principal: parseMlsDevEnrollmentPrincipal(input.principal),
+    installationId: parseMlsDevInstallationId(input.installationId)
+  };
+}
+__name(binding2, "binding");
+function parseMlsDevDeviceBinding(value) {
+  return boundary10(() => bounded8(binding2(readMlsDataRecord(value, ["version", "environmentId", "principal", "installationId"])), MLS_DEV_DEVICE_CONTEXT_MAX_BYTES));
+}
+__name(parseMlsDevDeviceBinding, "parseMlsDevDeviceBinding");
+function parseMlsDevDeviceContext(value) {
+  return boundary10(() => {
+    const input = readMlsDataRecord(value, ["version", "environmentId", "principal", "installationId", "revision"]);
+    const revision2 = requireMlsInteger(input.revision);
+    if (revision2 >= Number.MAX_SAFE_INTEGER) invalid11();
+    return bounded8({ ...binding2(input), revision: revision2 }, MLS_DEV_DEVICE_CONTEXT_MAX_BYTES);
+  });
+}
+__name(parseMlsDevDeviceContext, "parseMlsDevDeviceContext");
+function parseMlsDevDeviceCommand(value) {
+  return boundary10(() => {
+    if (value === null || typeof value !== "object") invalid11();
+    const descriptor = Object.getOwnPropertyDescriptor(value, "op");
+    if (!descriptor || !Object.hasOwn(descriptor, "value")) invalid11();
+    if (descriptor.value === "create") {
+      const input2 = readMlsDataRecord(value, ["op"]);
+      return Object.freeze({ op: requireMlsLiteral(input2.op, "create") });
+    }
+    if (descriptor.value === "enrollment_proof") {
+      const input2 = readMlsDataRecord(value, ["op", "challenge"]);
+      return bounded8({
+        op: requireMlsLiteral(input2.op, "enrollment_proof"),
+        challenge: parseMlsDevEnrollmentChallenge(input2.challenge)
+      }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
+    }
+    if (descriptor.value === "credential_reconciliation_proof") {
+      const input2 = readMlsDataRecord(value, ["op", "challenge", "expectedCredentialGeneration"]);
+      const challenge2 = parseMlsDevCredentialReconciliationChallenge(input2.challenge);
+      const expectedCredentialGeneration2 = requireMlsInteger(input2.expectedCredentialGeneration);
+      if (challenge2.expectedCredentialGeneration !== expectedCredentialGeneration2) invalid11();
+      return bounded8({
+        op: requireMlsLiteral(input2.op, "credential_reconciliation_proof"),
+        challenge: challenge2,
+        expectedCredentialGeneration: expectedCredentialGeneration2
+      }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
+    }
+    if (descriptor.value !== "credential_proof") invalid11();
+    const input = readMlsDataRecord(value, ["op", "challenge", "registrationResult", "expectedCredentialGeneration"]);
+    const challenge = parseMlsDevCredentialChallenge(input.challenge);
+    const registrationResult = parseMlsDevEnrollmentResult(input.registrationResult);
+    const expectedCredentialGeneration = requireMlsInteger(input.expectedCredentialGeneration);
+    if (expectedCredentialGeneration >= Number.MAX_SAFE_INTEGER || challenge.credential.claims.generation !== expectedCredentialGeneration + 1 || JSON.stringify(challenge.credential.claims.device) !== JSON.stringify(registrationResult.device)) invalid11();
+    return bounded8({
+      op: requireMlsLiteral(input.op, "credential_proof"),
+      challenge,
+      registrationResult,
+      expectedCredentialGeneration
+    }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
+  });
+}
+__name(parseMlsDevDeviceCommand, "parseMlsDevDeviceCommand");
+function encoded7(value, bytes) {
+  decodeCanonicalMlsBase64Url(value, bytes);
+  return value;
+}
+__name(encoded7, "encoded");
+function wrapped(value) {
+  if (typeof value !== "string" || value.length > MLS_DEV_DEVICE_WRAPPED_STATE_MAX_BYTES || !value.startsWith("v1:")) invalid11();
+  const body = value.slice(3);
+  if (body.length < 40 || body.length % 4 !== 0 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(body)) invalid11();
+  const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+  if (body.endsWith("==") && (alphabet.indexOf(body.at(-3)) & 15) !== 0) invalid11();
+  if (!body.endsWith("==") && body.endsWith("=") && (alphabet.indexOf(body.at(-2)) & 3) !== 0) invalid11();
+  return value;
+}
+__name(wrapped, "wrapped");
+function parseMlsDevDevicePreparation(value, op) {
+  return boundary10(() => {
+    if (!["create", "enrollment_proof", "credential_proof", "credential_reconciliation_proof"].includes(op)) invalid11();
+    const input = readMlsDataRecord(value, ["wrappedState", "payload"]);
+    const payload = readMlsDataRecord(input.payload, op === "create" ? ["signaturePublicKey"] : ["signaturePublicKey", "proof"]);
+    return bounded8({ wrappedState: wrapped(input.wrappedState), payload: Object.freeze({
+      signaturePublicKey: encoded7(payload.signaturePublicKey, 32),
+      ...op === "create" ? {} : { proof: encoded7(payload.proof, 64) }
+    }) }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
+  });
+}
+__name(parseMlsDevDevicePreparation, "parseMlsDevDevicePreparation");
+
+// ../backend-contracts/src/upload-mime-types.ts
+var MIME_TYPE_RE = /^[a-z0-9.+-]+\/[a-z0-9.+-]+$/i;
+var SAFE_IMAGE_MIME_TYPES = /* @__PURE__ */ new Set([
+  "image/jpeg",
+  "image/png",
+  "image/webp",
+  "image/gif"
+]);
+var SAFE_AUDIO_MIME_TYPES = /* @__PURE__ */ new Set([
+  "audio/mp4",
+  "audio/x-m4a",
+  "audio/mpeg",
+  "audio/webm",
+  "audio/ogg",
+  "audio/wav",
+  // ADTS AAC — the future Android streamable-memo lane; harmless standalone.
+  "audio/aac"
+]);
+var SAFE_VIDEO_MIME_TYPES = /* @__PURE__ */ new Set([
+  "video/mp4",
+  "video/quicktime",
+  "video/webm",
+  "video/x-m4v"
+]);
+var SAFE_FILE_MIME_TYPES = /* @__PURE__ */ new Set([
+  "application/pdf",
+  "text/plain",
+  "text/markdown",
+  "text/x-markdown",
+  "text/csv",
+  "application/csv",
+  "application/json",
+  "application/zip",
+  "application/vnd.ms-excel",
+  "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
+]);
+var SAFE_FILE_MIME_BY_EXTENSION = {
+  csv: "text/csv",
+  json: "application/json",
+  md: "text/markdown",
+  markdown: "text/markdown",
+  pdf: "application/pdf",
+  txt: "text/plain",
+  xls: "application/vnd.ms-excel",
+  xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+  zip: "application/zip"
+};
+var SAFE_VIDEO_MIME_BY_EXTENSION = {
+  m4v: "video/x-m4v",
+  mov: "video/quicktime",
+  mp4: "video/mp4",
+  webm: "video/webm"
+};
+var SAFE_AUDIO_MIME_BY_EXTENSION = {
+  aac: "audio/aac",
+  m4a: "audio/x-m4a",
+  mp3: "audio/mpeg",
+  oga: "audio/ogg",
+  ogg: "audio/ogg",
+  wav: "audio/wav"
+};
+function normalizeMimeType(value) {
+  if (typeof value !== "string") return null;
+  const normalized = value.split(";")[0].trim().toLowerCase();
+  if (!MIME_TYPE_RE.test(normalized)) return null;
+  if (normalized === "image/jpg") return "image/jpeg";
+  return normalized;
+}
+__name(normalizeMimeType, "normalizeMimeType");
+function inferSafeFileMimeTypeFromName(value) {
+  if (typeof value !== "string") return null;
+  const extension = value.trim().split(/[\\/]/).pop()?.split(".").pop()?.toLowerCase() ?? "";
+  return SAFE_FILE_MIME_BY_EXTENSION[extension] ?? null;
+}
+__name(inferSafeFileMimeTypeFromName, "inferSafeFileMimeTypeFromName");
+function inferSafeVideoMimeTypeFromName(value) {
+  if (typeof value !== "string") return null;
+  const extension = value.trim().split(/[\\/]/).pop()?.split(".").pop()?.toLowerCase() ?? "";
+  return SAFE_VIDEO_MIME_BY_EXTENSION[extension] ?? null;
+}
+__name(inferSafeVideoMimeTypeFromName, "inferSafeVideoMimeTypeFromName");
+function inferSafeAudioMimeTypeFromName(value) {
+  if (typeof value !== "string") return null;
+  const extension = value.trim().split(/[\\/]/).pop()?.split(".").pop()?.toLowerCase() ?? "";
+  return SAFE_AUDIO_MIME_BY_EXTENSION[extension] ?? null;
+}
+__name(inferSafeAudioMimeTypeFromName, "inferSafeAudioMimeTypeFromName");
+function shouldTrustSafeFileName(mimeType) {
+  return !mimeType || mimeType === "application/octet-stream" || mimeType === "application/vnd.ms-excel" || mimeType === "text/plain";
+}
+__name(shouldTrustSafeFileName, "shouldTrustSafeFileName");
+function classifyAllowedUploadMimeType(value) {
+  const mimeType = normalizeMimeType(value);
+  if (!mimeType) return null;
+  if (SAFE_IMAGE_MIME_TYPES.has(mimeType)) return "image";
+  if (SAFE_AUDIO_MIME_TYPES.has(mimeType)) return "audio";
+  if (SAFE_VIDEO_MIME_TYPES.has(mimeType)) return "video";
+  if (SAFE_FILE_MIME_TYPES.has(mimeType)) return "file";
+  return null;
+}
+__name(classifyAllowedUploadMimeType, "classifyAllowedUploadMimeType");
+function resolveAllowedUploadMimeType(input) {
+  const normalizedMimeType = normalizeMimeType(input.mimeType);
+  const hasExplicitMimeType = typeof input.mimeType === "string" && input.mimeType.trim().length > 0;
+  const inferredVideoMimeType = inferSafeVideoMimeTypeFromName(input.fileName);
+  const inferredAudioMimeType = inferSafeAudioMimeTypeFromName(input.fileName);
+  const inferredFileMimeType = inferSafeFileMimeTypeFromName(input.fileName);
+  if (hasExplicitMimeType && !normalizedMimeType) {
+    return null;
+  }
+  if (inferredVideoMimeType && (!normalizedMimeType || normalizedMimeType === "application/octet-stream")) {
+    return inferredVideoMimeType;
+  }
+  if (inferredAudioMimeType && (!normalizedMimeType || normalizedMimeType === "application/octet-stream")) {
+    return inferredAudioMimeType;
+  }
+  if (inferredFileMimeType && shouldTrustSafeFileName(normalizedMimeType)) {
+    return inferredFileMimeType;
+  }
+  if (normalizedMimeType && classifyAllowedUploadMimeType(normalizedMimeType)) {
+    return normalizedMimeType;
+  }
+  return normalizedMimeType ? null : inferredFileMimeType;
+}
+__name(resolveAllowedUploadMimeType, "resolveAllowedUploadMimeType");
+
+// ../backend-contracts/src/messageText.ts
+var HUMAN_MESSAGE_TEXT_MAX_BYTES = 32 * 1024;
+var UTF8_ENCODER = new TextEncoder();
+
+// ../backend-contracts/src/runtimeCardFields.ts
+var RUNTIME_CARD_FIELD_TYPES = [
+  "text",
+  "textarea",
+  "select",
+  "multiSelect",
+  "boolean",
+  "date",
+  "number",
+  "currency",
+  "searchSelect",
+  "lineItems"
+];
+var RUNTIME_CARD_LINE_ITEM_COLUMN_TYPES = [
+  "text",
+  "number",
+  "currency",
+  "date",
+  "select"
+];
+
+// ../backend-contracts/src/membershipChange.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 __name(isRecord, "isRecord");
+function isMembershipChangeMessage(message) {
+  return isRecord(message.metadata) && message.metadata.type === "membership_change";
+}
+__name(isMembershipChangeMessage, "isMembershipChangeMessage");
 function isNameOrId(value) {
   return value === null || typeof value === "string" && value.trim().length > 0;
 }
@@ -2273,15 +2509,262 @@ function formatMembershipChangeNotice(metadata, currentUserId) {
   if (metadata.action === "left") {
     return `${isMember ? "You" : metadata.memberName} left`;
   }
-  const actor = isActor ? "You" : metadata.actorName ?? "A member";
-  const member2 = isMember ? "you" : metadata.memberName;
-  return `${actor} ${metadata.action} ${member2}`;
+  const actor = isActor ? "You" : metadata.actorName ?? "A member";
+  const member2 = isMember ? "you" : metadata.memberName;
+  return `${actor} ${metadata.action} ${member2}`;
+}
+__name(formatMembershipChangeNotice, "formatMembershipChangeNotice");
+
+// ../backend-contracts/src/turnProtocol.ts
+var ACTIVE_TURN_STALE_THRESHOLD_MS = 30 * 60 * 1e3;
+var WAITING_INPUT_STALE_THRESHOLD_MS = 12 * 60 * 60 * 1e3;
+var TURN_SEMANTICS = [
+  "progress",
+  "turn_complete",
+  "control"
+];
+var DELIVERY_INTENTS = [
+  "queue",
+  "interrupt",
+  "interleave",
+  "stop"
+];
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+__name(isRecord2, "isRecord");
+function normalizeTurnMetadata(metadata) {
+  if (!isRecord2(metadata)) return null;
+  const turnId = typeof metadata.turnId === "string" && metadata.turnId.trim() ? metadata.turnId.trim() : null;
+  const turnSemantics = TURN_SEMANTICS.includes(metadata.turnSemantics) ? metadata.turnSemantics : void 0;
+  const deliveryIntent = DELIVERY_INTENTS.includes(metadata.deliveryIntent) ? metadata.deliveryIntent : void 0;
+  const replyBehavior = metadata.replyBehavior === "allow_auto_reply" || metadata.replyBehavior === "suppress_auto_reply" ? metadata.replyBehavior : void 0;
+  const inboundDisposition = metadata.inboundDisposition === "queued" || metadata.inboundDisposition === "accepted_now" || metadata.inboundDisposition === "interleaved" || metadata.inboundDisposition === "trigger_suppressed" || metadata.inboundDisposition === "rejected" || metadata.inboundDisposition === "cancelled" ? metadata.inboundDisposition : void 0;
+  const requestedTurnMode = typeof metadata.requestedTurnMode === "string" && /^[A-Za-z0-9_.:-]{1,80}$/.test(metadata.requestedTurnMode.trim()) ? metadata.requestedTurnMode.trim() : void 0;
+  if (!turnId && !turnSemantics && !deliveryIntent && !replyBehavior && !inboundDisposition && !requestedTurnMode) {
+    return null;
+  }
+  return {
+    ...turnId ? { turnId } : {},
+    ...turnSemantics ? { turnSemantics } : {},
+    ...deliveryIntent ? { deliveryIntent } : {},
+    ...replyBehavior ? { replyBehavior } : {},
+    ...inboundDisposition ? { inboundDisposition } : {},
+    ...requestedTurnMode ? { requestedTurnMode } : {}
+  };
+}
+__name(normalizeTurnMetadata, "normalizeTurnMetadata");
+function resolveTurnMessageSemantics(input) {
+  if (isMembershipChangeMessage(input)) return "control";
+  const turnMetadata = normalizeTurnMetadata(input.metadata);
+  if (turnMetadata?.turnSemantics) return turnMetadata.turnSemantics;
+  if (input.senderType === "human") return "turn_complete";
+  return "progress";
+}
+__name(resolveTurnMessageSemantics, "resolveTurnMessageSemantics");
+function shouldTriggerAgentTurn(input) {
+  if (isMembershipChangeMessage(input)) {
+    return { allow: false, semantics: "control", reason: "membership notices do not trigger agent replies" };
+  }
+  const semantics = resolveTurnMessageSemantics(input);
+  const turnMetadata = normalizeTurnMetadata(input.metadata);
+  if (turnMetadata?.replyBehavior === "suppress_auto_reply") {
+    return {
+      allow: false,
+      semantics,
+      reason: "metadata explicitly suppresses auto-reply"
+    };
+  }
+  if (input.senderType === "human") {
+    return {
+      allow: true,
+      semantics,
+      reason: "human messages always remain triggerable"
+    };
+  }
+  if (semantics === "progress") {
+    return {
+      allow: false,
+      semantics,
+      reason: turnMetadata?.turnSemantics === "progress" ? "non-final agent progress does not trigger other agents" : "agent messages require explicit turn_complete semantics"
+    };
+  }
+  return {
+    allow: true,
+    semantics,
+    reason: "agent message is treated as turn-complete"
+  };
+}
+__name(shouldTriggerAgentTurn, "shouldTriggerAgentTurn");
+
+// ../backend-contracts/src/agentBehaviorPolicy.ts
+var PARTICIPATION_HISTORY_FETCH_LIMIT = 50;
+var DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS = 4;
+var DEFAULT_DIRECT_MAX_CONSECUTIVE_AGENT_TURNS = 4;
+function defaultMaxConsecutiveAgentTurns(conversationType) {
+  if (conversationType === "group") {
+    return DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS;
+  }
+  if (conversationType === "direct") {
+    return DEFAULT_DIRECT_MAX_CONSECUTIVE_AGENT_TURNS;
+  }
+  return null;
+}
+__name(defaultMaxConsecutiveAgentTurns, "defaultMaxConsecutiveAgentTurns");
+var DEFAULT_POLICY = {
+  participation: {
+    style: "natural",
+    allowAgentToAgent: true,
+    allowHumanToAgent: true,
+    allowLongRunningCollaboration: true,
+    requireMentionForGroupReplies: false,
+    maxConsecutiveAgentTurns: null
+  },
+  instructions: [],
+  source: {
+    hasAgentDefault: false,
+    hasConversationOverride: false
+  }
+};
+function coalesceBoolean(overrideValue, fallbackValue, defaultValue) {
+  if (typeof overrideValue === "boolean") return overrideValue;
+  if (typeof fallbackValue === "boolean") return fallbackValue;
+  return defaultValue;
+}
+__name(coalesceBoolean, "coalesceBoolean");
+function normalizeAgentBehaviorInstructions(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+__name(normalizeAgentBehaviorInstructions, "normalizeAgentBehaviorInstructions");
+function resolveAgentBehaviorPolicy(params) {
+  const agentDefault = params?.agentDefault ?? null;
+  const conversationOverride = params?.conversationOverride ?? null;
+  const defaultInstructions = normalizeAgentBehaviorInstructions(agentDefault?.instructions);
+  const overrideInstructions = normalizeAgentBehaviorInstructions(conversationOverride?.instructions);
+  return {
+    participation: {
+      style: conversationOverride?.participationStyle ?? agentDefault?.participationStyle ?? DEFAULT_POLICY.participation.style,
+      allowAgentToAgent: coalesceBoolean(
+        conversationOverride?.allowAgentToAgent,
+        agentDefault?.allowAgentToAgent,
+        DEFAULT_POLICY.participation.allowAgentToAgent
+      ),
+      allowHumanToAgent: DEFAULT_POLICY.participation.allowHumanToAgent,
+      allowLongRunningCollaboration: coalesceBoolean(
+        conversationOverride?.allowLongRunningCollaboration,
+        agentDefault?.allowLongRunningCollaboration,
+        DEFAULT_POLICY.participation.allowLongRunningCollaboration
+      ),
+      requireMentionForGroupReplies: coalesceBoolean(
+        conversationOverride?.requireMentionForGroupReplies,
+        agentDefault?.requireMentionForGroupReplies,
+        DEFAULT_POLICY.participation.requireMentionForGroupReplies
+      ),
+      maxConsecutiveAgentTurns: conversationOverride?.maxConsecutiveAgentTurns !== void 0 ? conversationOverride.maxConsecutiveAgentTurns ?? null : agentDefault?.maxConsecutiveAgentTurns !== void 0 ? agentDefault.maxConsecutiveAgentTurns ?? null : defaultMaxConsecutiveAgentTurns(params?.conversationType)
+    },
+    instructions: [
+      ...defaultInstructions ? [defaultInstructions] : [],
+      ...overrideInstructions ? [overrideInstructions] : []
+    ],
+    source: {
+      hasAgentDefault: agentDefault != null,
+      hasConversationOverride: conversationOverride != null
+    }
+  };
+}
+__name(resolveAgentBehaviorPolicy, "resolveAgentBehaviorPolicy");
+function toHistorySenderType(message) {
+  if (isMembershipChangeMessage(message)) return null;
+  if (message.senderType !== "ai_agent") {
+    return "human";
+  }
+  return shouldTriggerAgentTurn({
+    senderType: "ai_agent",
+    metadata: message.metadata
+  }).allow ? "ai_agent" : null;
+}
+__name(toHistorySenderType, "toHistorySenderType");
+function buildParticipationHistorySnapshotFromSenderTypes(recentSenderTypes) {
+  let consecutiveAgentTurns = 0;
+  for (const senderType of recentSenderTypes) {
+    if (senderType !== "ai_agent") break;
+    consecutiveAgentTurns += 1;
+  }
+  return {
+    recentSenderTypes,
+    recentHumanCount: recentSenderTypes.filter((senderType) => senderType === "human").length,
+    recentAgentCount: recentSenderTypes.filter((senderType) => senderType === "ai_agent").length,
+    consecutiveAgentTurns,
+    currentAgentStreakStartedByHuman: consecutiveAgentTurns > 0 && recentSenderTypes[consecutiveAgentTurns] === "human"
+  };
+}
+__name(buildParticipationHistorySnapshotFromSenderTypes, "buildParticipationHistorySnapshotFromSenderTypes");
+function buildParticipationHistorySnapshot(messages, agentId) {
+  void agentId;
+  const recentSenderTypes = messages.flatMap((message) => {
+    const senderType = toHistorySenderType(message);
+    return senderType ? [senderType] : [];
+  });
+  return buildParticipationHistorySnapshotFromSenderTypes(recentSenderTypes);
+}
+__name(buildParticipationHistorySnapshot, "buildParticipationHistorySnapshot");
+function evaluateParticipationPolicy(policy, input) {
+  const resolved = policy ?? resolveAgentBehaviorPolicy({ conversationType: input.conversationType });
+  const participation = resolved.participation;
+  const priorAgentTurns = Math.max(input.consecutiveAgentTurns ?? 0, 0);
+  const agentTurnsWithCurrent = priorAgentTurns + (input.senderType === "ai_agent" ? 1 : 0);
+  const consecutiveAgentTurns = Math.max(
+    priorAgentTurns,
+    input.senderType === "ai_agent" ? 1 : 0
+  );
+  const currentAgentStreakStartedByHuman = input.currentAgentStreakStartedByHuman === true;
+  if (input.conversationType === "group" && participation.requireMentionForGroupReplies && !input.mentionedAgent) {
+    return {
+      allow: false,
+      reasonCode: "group_mention_required",
+      reason: "group replies require a direct mention"
+    };
+  }
+  if (input.isOwner) {
+    return {
+      allow: true,
+      reasonCode: "owner_sender",
+      reason: "owner messages pass through outside mention-required group turns"
+    };
+  }
+  if (input.senderType !== "ai_agent") {
+    return { allow: true, reasonCode: "human_sender", reason: "latest sender is human" };
+  }
+  if (!participation.allowAgentToAgent) {
+    return {
+      allow: false,
+      reasonCode: "agent_to_agent_disabled",
+      reason: "agent-to-agent participation is disabled by policy"
+    };
+  }
+  if (!participation.allowLongRunningCollaboration && (consecutiveAgentTurns > 1 || !currentAgentStreakStartedByHuman)) {
+    return {
+      allow: false,
+      reasonCode: "human_reset_required",
+      reason: "a fresh human steer is required before continuing agent collaboration"
+    };
+  }
+  if (typeof participation.maxConsecutiveAgentTurns === "number" && participation.maxConsecutiveAgentTurns >= 0 && agentTurnsWithCurrent >= participation.maxConsecutiveAgentTurns) {
+    return {
+      allow: false,
+      reasonCode: "agent_turn_limit_reached",
+      reason: "maximum consecutive agent turns reached"
+    };
+  }
+  return {
+    allow: true,
+    reasonCode: input.conversationType === "group" ? "group_agent_allowed" : "direct_agent_allowed",
+    reason: participation.requireMentionForGroupReplies ? "policy allows this directly mentioned group reply" : "agent-to-agent participation allowed by policy"
+  };
 }
-__name(formatMembershipChangeNotice, "formatMembershipChangeNotice");
-
-// ../backend-contracts/src/turnProtocol.ts
-var ACTIVE_TURN_STALE_THRESHOLD_MS = 30 * 60 * 1e3;
-var WAITING_INPUT_STALE_THRESHOLD_MS = 12 * 60 * 60 * 1e3;
+__name(evaluateParticipationPolicy, "evaluateParticipationPolicy");
 
 // ../backend-contracts/src/agentDirectory.ts
 var MAX_DISCOVER_AGENTS_QUERY_LENGTH = 64;
@@ -3681,9 +4164,9 @@ function splitTurnMetadata(metadata) {
   };
 }
 __name(splitTurnMetadata, "splitTurnMetadata");
-function compact(record5) {
+function compact(record4) {
   const out = {};
-  for (const [key, value] of Object.entries(record5)) {
+  for (const [key, value] of Object.entries(record4)) {
     if (value !== void 0) out[key] = value;
   }
   return out;
@@ -3864,12 +4347,12 @@ function parseDirectConversationSelection(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
     throw new Error("selection must be an object");
   }
-  const record5 = value;
-  if (record5.mode === "latest_or_new" || record5.mode === "new") {
-    return { mode: record5.mode };
+  const record4 = value;
+  if (record4.mode === "latest_or_new" || record4.mode === "new") {
+    return { mode: record4.mode };
   }
-  if (record5.mode === "specific") {
-    const conversationId = typeof record5.conversationId === "string" ? record5.conversationId.trim() : "";
+  if (record4.mode === "specific") {
+    const conversationId = typeof record4.conversationId === "string" ? record4.conversationId.trim() : "";
     if (!conversationId) throw new Error("selection.conversationId is required");
     return { mode: "specific", conversationId };
   }
@@ -4063,6 +4546,14 @@ function normalizePublicRuntimeFacts(value) {
 }
 __name(normalizePublicRuntimeFacts, "normalizePublicRuntimeFacts");
 
+// ../backend-contracts/src/conversationMembership.ts
+function resolveConversationPolicyScope(memberIdsOrCount) {
+  const count = Array.isArray(memberIdsOrCount) ? new Set(memberIdsOrCount.filter((id7) => typeof id7 === "string" && id7.length > 0)).size : memberIdsOrCount;
+  if (typeof count !== "number" || !Number.isSafeInteger(count)) return "unknown";
+  return count === 2 ? "direct" : count > 2 ? "group" : "unknown";
+}
+__name(resolveConversationPolicyScope, "resolveConversationPolicyScope");
+
 // ../backend-contracts/src/endpointContentPolicy.ts
 var MLS_DEV_UNSUPPORTED_CONTENT_ACTIONS = ["forward_message"];
 var MLS_DEV_DISCLOSED_PROCESSING_FIELDS = {
@@ -4129,6 +4620,7 @@ var ENDPOINT_CONTENT_FUNCTION_QUERIES = [
   "mls_group_controls",
   "mls_group_admissions",
   "mls_interactions",
+  "mls_devices",
   "list_artifacts",
   "get_artifact_log",
   "get_artifact_asset",
@@ -4283,15 +4775,19 @@ var actionRouting = {
   create_conversation: ["memberIds.*"],
   add_member: ["conversationId", "userId", "agentId"],
   remove_member: ["conversationId", "userId", "agentId", "targetUserId"],
+  // A member's role is membership, which Canon sees and enforces in any room (ruling 3).
   leave_conversation: ["conversationId"],
-  update_member_role: ["conversationId", "userId", "targetUserId"],
-  update_conversation: ["conversationId"],
-  rename_conversation: ["conversationId"],
-  update_topic: ["conversationId"],
-  update_group_avatar: ["conversationId"],
+  update_member_role: ["conversationId", "userId", "targetUserId", "role"],
+  // A room's name, topic and picture are its public details, as in any room: Canon stores and serves them. The picture
+  // names no file: Canon takes its type from `mimeType`.
+  update_conversation: ["conversationId", "name", "topic"],
+  rename_conversation: ["conversationId", "name"],
+  update_topic: ["conversationId", "topic"],
+  update_group_avatar: ["conversationId", "data", "mimeType"],
   mark_read: ["conversationId"],
   cancel_queued_message: ["conversationId", "messageId"],
-  set_conversation_preferences: ["conversationId"],
+  // A person's own settings for a room, muting it or hiding it from their list: Canon applies them, as it decides who gets a push.
+  set_conversation_preferences: ["conversationId", "mutedUntil", "deleted"],
   set_block: ["targetUserId"],
   save_contact: ["contactUserId"],
   remove_contact: ["contactId", "contactUserId"],
@@ -4323,10 +4819,21 @@ var actionRouting = {
   consume_runtime_primitive: ["conversationId", "requestId", "expectedRevision"],
   generate_image: ["conversationId", "requestId"],
   update_agent_behavior_policy: ["agentId"],
-  update_conversation_agent_behavior_policy: ["conversationId", "agentId"]
+  // A room's rules are settings Canon stores and an encrypted room's runner reads back, so they are metadata; its free-text
+  // `instructions` stay private, which keeps them out of an encrypted room (plaintext-retirement.md §5.5).
+  update_conversation_agent_behavior_policy: [
+    "conversationId",
+    "agentId",
+    "policy.participationStyle",
+    "policy.allowAgentToAgent",
+    "policy.allowLongRunningCollaboration",
+    "policy.requireMentionForGroupReplies",
+    "policy.maxConsecutiveAgentTurns"
+  ]
 };
 var queryRouting = {
   mls_interactions: ["version", "conversationId"],
+  mls_devices: [],
   list_artifacts: ["conversationId", "cursor", "limit"],
   get_artifact_log: ["conversationId", "artifactId", "afterSequence", "cursor", "limit"],
   get_artifact_asset: ["conversationId", "artifactId", "assetId"],
@@ -4428,8 +4935,8 @@ function endpointOperationRequestRetention(action, body, envelope) {
 __name(endpointOperationRequestRetention, "endpointOperationRequestRetention");
 function endpointContentBoundary(lane, name, payload) {
   if (!namesForLane[lane]?.includes(name)) throw new EndpointContentPolicyError(lane, name);
-  const record5 = payload && typeof payload === "object" ? payload : void 0;
-  if (lane === "query.request" && name === "get_ephemeral" && record5 && !ENDPOINT_CONTENT_EPHEMERAL_FAMILIES.includes(record5.family)) {
+  const record4 = payload && typeof payload === "object" ? payload : void 0;
+  if (lane === "query.request" && name === "get_ephemeral" && record4 && !ENDPOINT_CONTENT_EPHEMERAL_FAMILIES.includes(record4.family)) {
     throw new EndpointContentPolicyError(lane, `${name}/unknown-family`);
   }
   const requestRoutingPaths = (actionRouting[name] ?? []).flatMap((field) => [`body.value.${field}`, `envelope.${field}`]);
@@ -4437,7 +4944,7 @@ function endpointContentBoundary(lane, name, payload) {
     if (path.some((part) => secretSegments.has(part))) return "restricted-secret";
     if (lane === "operation.request" && ["respond_interaction", "sync_phone_contacts"].includes(name) && matches(path, "preparedContent.payload")) return "restricted-secret";
     if (lane === "operation.request" && ["respond_interaction", "sync_phone_contacts"].includes(name) && path[0] === "body" && path[1] === "value" && !publicMatch(path, requestRoutingPaths)) return "restricted-secret";
-    if (lane === "operation.receipt" && path[0] === "result" && (["consume_interaction", "respond_interaction"].includes(name) || record5?.resultReference?.kind === "interaction")) return "restricted-secret";
+    if (lane === "operation.receipt" && path[0] === "result" && (["consume_interaction", "respond_interaction"].includes(name) || record4?.resultReference?.kind === "interaction")) return "restricted-secret";
     let selected = payload;
     for (const part of path) selected = selected && typeof selected === "object" && Object.hasOwn(selected, part) ? selected[part] : void 0;
     if (selected !== null && typeof selected === "object") return "private-content";
@@ -4446,7 +4953,7 @@ function endpointContentBoundary(lane, name, payload) {
       if (name === "respond_interaction" && path[0] === "body" && path[1] === "value") return "restricted-secret";
       if (name === "sync_phone_contacts" && path[0] === "body" && path[1] === "value") return "restricted-secret";
       if (name === "verb_execute") {
-        const wire4 = record5?.body?.value;
+        const wire4 = record4?.body?.value;
         const spec = VERB_WIRE_ENVELOPE_FIELDS[wire4?.verb];
         if (path[0] === "body" && path[1] === "value") {
           if (path.length === 3 && ["wire", "verb"].includes(path[2])) return "public-metadata";
@@ -4459,7 +4966,7 @@ function endpointContentBoundary(lane, name, payload) {
       }
     } else if (lane === "operation.receipt") {
       if (publicMatch(path, [...protocolPaths, "status", "createdAt", "updatedAt", "error.code", "error.status", "error.retryable", "error.retryAfterMs", "resultError.code", "resultError.status", "resultReference.kind", "resultReference.conversationId", "resultReference.artifactId", "resultReference.assetId", "resultReference.uploadId", "resultReference.sessionId", "resultReference.requestId"])) return "public-metadata";
-      if (path[0] === "result" && (name === "consume_interaction" || name === "respond_interaction" || record5?.resultReference?.kind === "interaction")) return "restricted-secret";
+      if (path[0] === "result" && (name === "consume_interaction" || name === "respond_interaction" || record4?.resultReference?.kind === "interaction")) return "restricted-secret";
     } else if (lane === "query.request") {
       if (publicMatch(path, queryRouting[name] ?? [])) return "public-metadata";
     } else if (lane === "query.result" || lane === "ephemeral.result") {
@@ -4491,10 +4998,10 @@ var PreparedContentError = class extends Error {
     __name(this, "PreparedContentError");
   }
 };
-function invalid10() {
+function invalid12() {
   throw new PreparedContentError("INVALID_PREPARED_CONTENT");
 }
-__name(invalid10, "invalid");
+__name(invalid12, "invalid");
 var record2 = /* @__PURE__ */ __name((value) => !!value && typeof value === "object" && !Array.isArray(value), "record");
 var keys = /* @__PURE__ */ __name((value, allowed) => Object.keys(value).every((key) => allowed.includes(key)), "keys");
 var revision = /* @__PURE__ */ __name((value) => Number.isSafeInteger(value) && value >= 0, "revision");
@@ -4515,25 +5022,25 @@ function canonicalEndpointJson(value) {
 }
 __name(canonicalEndpointJson, "canonicalEndpointJson");
 function validateMetadata(value) {
-  if (!record2(value)) invalid10();
+  if (!record2(value)) invalid12();
   if (value.version !== PREPARED_CONTENT_VERSION) throw new PreparedContentError("UNSUPPORTED_PREPARED_CONTENT_VERSION");
   if (value.codec !== PREPARED_JSON_CODEC) throw new PreparedContentError("UNSUPPORTED_PREPARED_CONTENT_CODEC");
-  if (!keys(value, ["version", "context", "codec", "payload", "blobs", "expected"])) invalid10();
+  if (!keys(value, ["version", "context", "codec", "payload", "blobs", "expected"])) invalid12();
   const context = value.context;
-  if (!record2(context) || !keys(context, ["action", "conversationId", "messageId"]) || typeof context.action !== "string" || !ENDPOINT_ACTION_PATTERN.test(context.action) || context.conversationId !== void 0 && !identity(context.conversationId) || context.messageId !== void 0 && !identity(context.messageId)) invalid10();
+  if (!record2(context) || !keys(context, ["action", "conversationId", "messageId"]) || typeof context.action !== "string" || !ENDPOINT_ACTION_PATTERN.test(context.action) || context.conversationId !== void 0 && !identity(context.conversationId) || context.messageId !== void 0 && !identity(context.messageId)) invalid12();
   const expected = value.expected;
-  if (!record2(expected) || !keys(expected, ["installationGeneration", "protocolRevision", "admission"]) || !revision(expected.installationGeneration) || !revision(expected.protocolRevision)) invalid10();
+  if (!record2(expected) || !keys(expected, ["installationGeneration", "protocolRevision", "admission"]) || !revision(expected.installationGeneration) || !revision(expected.protocolRevision)) invalid12();
   if (expected.admission !== void 0) {
     const admission = expected.admission;
-    if (!record2(admission) || !keys(admission, ["conversationId", "membershipRevision", "admissionId", "targetAdmissionId"]) || ["conversationId", "admissionId", "targetAdmissionId"].some((key) => admission[key] !== void 0 && !identity(admission[key])) || admission.membershipRevision !== void 0 && !revision(admission.membershipRevision) || context.conversationId !== void 0 && admission.conversationId !== void 0 && admission.conversationId !== context.conversationId) invalid10();
+    if (!record2(admission) || !keys(admission, ["conversationId", "membershipRevision", "admissionId", "targetAdmissionId"]) || ["conversationId", "admissionId", "targetAdmissionId"].some((key) => admission[key] !== void 0 && !identity(admission[key])) || admission.membershipRevision !== void 0 && !revision(admission.membershipRevision) || context.conversationId !== void 0 && admission.conversationId !== void 0 && admission.conversationId !== context.conversationId) invalid12();
   }
-  if (!Array.isArray(value.blobs)) invalid10();
+  if (!Array.isArray(value.blobs)) invalid12();
   const ids = /* @__PURE__ */ new Set();
   for (const [index, blob] of value.blobs.entries()) {
-    if (!record2(blob) || !keys(blob, ["id", "index"]) || !blobIdentity(blob.id) || blob.index !== index || ids.has(blob.id)) invalid10();
+    if (!record2(blob) || !keys(blob, ["id", "index"]) || !blobIdentity(blob.id) || blob.index !== index || ids.has(blob.id)) invalid12();
     ids.add(blob.id);
   }
-  if (typeof value.payload !== "string") invalid10();
+  if (typeof value.payload !== "string") invalid12();
 }
 __name(validateMetadata, "validateMetadata");
 function decodePreparedJsonContent(value) {
@@ -4542,10 +5049,10 @@ function decodePreparedJsonContent(value) {
   try {
     decoded = JSON.parse(value.payload);
   } catch {
-    invalid10();
+    invalid12();
   }
-  if (!record2(decoded) || !keys(decoded, ["body", "envelope"]) || !record2(decoded.body) || decoded.envelope !== void 0 && !record2(decoded.envelope)) invalid10();
-  if (canonicalEndpointJson(decoded) !== value.payload) invalid10();
+  if (!record2(decoded) || !keys(decoded, ["body", "envelope"]) || !record2(decoded.body) || decoded.envelope !== void 0 && !record2(decoded.envelope)) invalid12();
+  if (canonicalEndpointJson(decoded) !== value.payload) invalid12();
   const { body, envelope } = decoded;
   if (endpointOperationRequestRetention(value.context.action, body, envelope) === "memory") {
     throw new PreparedContentError("PREPARED_CONTENT_MEMORY_ONLY");
@@ -4553,7 +5060,7 @@ function decodePreparedJsonContent(value) {
   const effective = { ...body, ...envelope };
   for (const key of ["conversationId", "messageId"]) {
     const bound = value.context[key];
-    if (bound !== void 0 && effective[key] !== void 0 && effective[key] !== bound) invalid10();
+    if (bound !== void 0 && effective[key] !== void 0 && effective[key] !== bound) invalid12();
   }
   return envelope === void 0 ? { body } : { body, envelope };
 }
@@ -4583,7 +5090,7 @@ function prepareJsonContent(input) {
 }
 __name(prepareJsonContent, "prepareJsonContent");
 function logicalMediaBlobId(conversationId, messageId2, index) {
-  if (!identity(conversationId) || !identity(messageId2) || !revision(index)) invalid10();
+  if (!identity(conversationId) || !identity(messageId2) || !revision(index)) invalid12();
   return JSON.stringify([conversationId, messageId2, index]);
 }
 __name(logicalMediaBlobId, "logicalMediaBlobId");
@@ -4626,31 +5133,31 @@ var ConnectorRelayRequestError = class extends Error {
   }
   name = "ConnectorRelayRequestError";
 };
-function invalid11(what) {
+function invalid13(what) {
   throw new ConnectorRelayRequestError(`Invalid relay request: ${what}`);
 }
-__name(invalid11, "invalid");
+__name(invalid13, "invalid");
 function record3(value, required, optional = []) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) invalid11("expected an object");
+  if (!value || typeof value !== "object" || Array.isArray(value)) invalid13("expected an object");
   const result = value;
-  for (const key of Object.keys(result)) if (!required.includes(key) && !optional.includes(key)) invalid11(`unexpected ${key}`);
-  for (const key of required) if (!Object.hasOwn(result, key)) invalid11(`missing ${key}`);
+  for (const key of Object.keys(result)) if (!required.includes(key) && !optional.includes(key)) invalid13(`unexpected ${key}`);
+  for (const key of required) if (!Object.hasOwn(result, key)) invalid13(`missing ${key}`);
   return result;
 }
 __name(record3, "record");
 function id6(value, what, pattern = ENDPOINT_ID_PATTERN) {
-  if (typeof value !== "string" || !pattern.test(value)) invalid11(what);
+  if (typeof value !== "string" || !pattern.test(value)) invalid13(what);
   return value;
 }
 __name(id6, "id");
 function doc(value, what) {
-  if (typeof value !== "string" || !value || value.length > 200 || value.includes("/")) invalid11(what);
+  if (typeof value !== "string" || !value || value.length > 200 || value.includes("/")) invalid13(what);
   return value;
 }
 __name(doc, "doc");
 var room = /* @__PURE__ */ __name((value) => doc(value, "conversationId"), "room");
 function text4(value) {
-  if (typeof value !== "string" || !value.trim() || new TextEncoder().encode(value).length > CONNECTOR_RELAY_MAX_TEXT_BYTES) invalid11("text");
+  if (typeof value !== "string" || !value.trim() || new TextEncoder().encode(value).length > CONNECTOR_RELAY_MAX_TEXT_BYTES) invalid13("text");
   return value;
 }
 __name(text4, "text");
@@ -4658,18 +5165,18 @@ function selection(value) {
   const args = record3(value, ["mode"], ["conversationId"]);
   if ((args.mode === "new" || args.mode === "latest_or_new") && args.conversationId === void 0) return { mode: args.mode };
   if (args.mode === "specific") return { mode: "specific", conversationId: room(args.conversationId) };
-  return invalid11("selection");
+  return invalid13("selection");
 }
 __name(selection, "selection");
 function limit(value) {
   if (value === void 0) return void 0;
-  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1 || value > 100) invalid11("limit");
+  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1 || value > 100) invalid13("limit");
   return value;
 }
 __name(limit, "limit");
 function parseConnectorRelayRequest(value) {
   const body = record3(value, ["version", "agentId", "grantId", "op", "args"]);
-  if (body.version !== 1) invalid11("version");
+  if (body.version !== 1) invalid13("version");
   const head = { version: 1, agentId: doc(body.agentId, "agentId"), grantId: id6(body.grantId, "grantId") };
   switch (body.op) {
     case "pending": {
@@ -4690,7 +5197,7 @@ function parseConnectorRelayRequest(value) {
     }
     case "settle": {
       const args = record3(body.args, ["inputId", "requestId", "outcome"]);
-      if (!["completed", "no_reply", "failed"].includes(args.outcome)) invalid11("outcome");
+      if (!["completed", "no_reply", "failed"].includes(args.outcome)) invalid13("outcome");
       return { ...head, op: "settle", args: {
         inputId: id6(args.inputId, "inputId", CONNECTOR_RELAY_INPUT_ID_PATTERN),
         requestId: id6(args.requestId, "requestId"),
@@ -4699,7 +5206,7 @@ function parseConnectorRelayRequest(value) {
     }
     case "read": {
       const args = record3(body.args, ["conversationId"], ["limit", "before"]);
-      if (args.before !== void 0 && (typeof args.before !== "string" || !/^[1-9][0-9]{0,15}$/.test(args.before))) invalid11("before");
+      if (args.before !== void 0 && (typeof args.before !== "string" || !/^[1-9][0-9]{0,15}$/.test(args.before))) invalid13("before");
       return { ...head, op: "read", args: {
         conversationId: room(args.conversationId),
         ...args.limit === void 0 ? {} : { limit: limit(args.limit) },
@@ -4721,8 +5228,8 @@ function parseConnectorRelayRequest(value) {
     }
     case "credential": {
       const args = record3(body.args, ["installationId", "generation", "credential"]);
-      if (!Number.isSafeInteger(args.generation) || args.generation < 1) invalid11("generation");
-      if (!isConnectorRelayCredential(args.credential)) invalid11("credential");
+      if (!Number.isSafeInteger(args.generation) || args.generation < 1) invalid13("generation");
+      if (!isConnectorRelayCredential(args.credential)) invalid13("credential");
       return { ...head, op: "credential", args: {
         installationId: id6(args.installationId, "installationId", CONNECTOR_RELAY_INSTALLATION_PATTERN),
         generation: args.generation,
@@ -4730,7 +5237,7 @@ function parseConnectorRelayRequest(value) {
       } };
     }
     default:
-      return invalid11("op");
+      return invalid13("op");
   }
 }
 __name(parseConnectorRelayRequest, "parseConnectorRelayRequest");
@@ -4804,231 +5311,6 @@ var ARTIFACT_LIMITS = Object.freeze({
 });
 var NUMBER_MAX_TEXT = String(ARTIFACT_LIMITS.formNumberMax).replace(/\B(?=(\d{3})+(?!\d))/g, ",");
 
-// ../backend-contracts/src/mlsDevCredentialReconciliation.ts
-var MLS_DEV_CREDENTIAL_RECONCILIATION_CHALLENGE_TTL_MS = 3e5;
-var MLS_DEV_CREDENTIAL_RECONCILIATION_MAX_BYTES = 8192;
-var MlsDevCredentialReconciliationValidationError = class extends Error {
-  static {
-    __name(this, "MlsDevCredentialReconciliationValidationError");
-  }
-  code = "INVALID_MLS_DEV_CREDENTIAL_RECONCILIATION";
-  constructor() {
-    super("INVALID_MLS_DEV_CREDENTIAL_RECONCILIATION");
-    this.name = "MlsDevCredentialReconciliationValidationError";
-  }
-};
-var utf86 = new TextEncoder();
-var domain2 = utf86.encode("canon.mls.credential-reconciliation-proof.v1\0");
-function invalid12() {
-  throw new MlsDevCredentialReconciliationValidationError();
-}
-__name(invalid12, "invalid");
-function boundary9(read) {
-  try {
-    return read();
-  } catch {
-    return invalid12();
-  }
-}
-__name(boundary9, "boundary");
-function bounded7(value) {
-  if (utf86.encode(JSON.stringify(value)).length > MLS_DEV_CREDENTIAL_RECONCILIATION_MAX_BYTES) invalid12();
-  return Object.freeze(value);
-}
-__name(bounded7, "bounded");
-function encoded6(value, bytes) {
-  decodeCanonicalMlsBase64Url(value, bytes);
-  return value;
-}
-__name(encoded6, "encoded");
-function parseMlsDevCredentialReconciliationBegin(value) {
-  return boundary9(() => {
-    const input = readMlsDataRecord(value, ["version", "deviceId", "requestId", "expectedCredentialGeneration"]);
-    return bounded7({
-      version: requireMlsLiteral(input.version, 1),
-      deviceId: requireMlsUuid(input.deviceId),
-      requestId: requireMlsUuid(input.requestId),
-      expectedCredentialGeneration: requireMlsInteger(input.expectedCredentialGeneration)
-    });
-  });
-}
-__name(parseMlsDevCredentialReconciliationBegin, "parseMlsDevCredentialReconciliationBegin");
-function parseMlsDevCredentialReconciliationChallenge(value) {
-  return boundary9(() => {
-    const input = readMlsDataRecord(value, [
-      "version",
-      "challengeId",
-      "requestId",
-      "nonce",
-      "device",
-      "expectedCredentialGeneration",
-      "issuedAtMs",
-      "expiresAtMs"
-    ]);
-    const device = parseMlsDevEnrollmentResult({ version: 1, authorization: "registration_only", device: input.device }).device;
-    const issuedAtMs = requireMlsInteger(input.issuedAtMs), expiresAtMs = requireMlsInteger(input.expiresAtMs);
-    if (issuedAtMs < device.registeredAtMs || expiresAtMs - issuedAtMs !== MLS_DEV_CREDENTIAL_RECONCILIATION_CHALLENGE_TTL_MS) invalid12();
-    return bounded7({
-      version: requireMlsLiteral(input.version, 1),
-      challengeId: requireMlsUuid(input.challengeId),
-      requestId: requireMlsUuid(input.requestId),
-      nonce: encoded6(input.nonce, 32),
-      device,
-      expectedCredentialGeneration: requireMlsInteger(input.expectedCredentialGeneration),
-      issuedAtMs,
-      expiresAtMs
-    });
-  });
-}
-__name(parseMlsDevCredentialReconciliationChallenge, "parseMlsDevCredentialReconciliationChallenge");
-function parseMlsDevCredentialReconciliationComplete(value) {
-  return boundary9(() => {
-    const input = readMlsDataRecord(value, ["version", "challengeId", "proof"]);
-    return bounded7({ version: requireMlsLiteral(input.version, 1), challengeId: requireMlsUuid(input.challengeId), proof: encoded6(input.proof, 64) });
-  });
-}
-__name(parseMlsDevCredentialReconciliationComplete, "parseMlsDevCredentialReconciliationComplete");
-function parseMlsDevCredentialReconciliationReceipt(value) {
-  return boundary9(() => {
-    const input = readMlsDataRecord(value, ["version", "authorization", "challenge", "observedCredentialGeneration", "observedAtMs"]);
-    const challenge = parseMlsDevCredentialReconciliationChallenge(input.challenge);
-    const observedCredentialGeneration = requireMlsInteger(input.observedCredentialGeneration), observedAtMs = requireMlsInteger(input.observedAtMs);
-    if (observedCredentialGeneration < challenge.expectedCredentialGeneration || observedAtMs < challenge.issuedAtMs || observedAtMs >= challenge.expiresAtMs) invalid12();
-    return bounded7({
-      version: requireMlsLiteral(input.version, 1),
-      authorization: requireMlsLiteral(input.authorization, "credential_generation_observation_only"),
-      challenge,
-      observedCredentialGeneration,
-      observedAtMs
-    });
-  });
-}
-__name(parseMlsDevCredentialReconciliationReceipt, "parseMlsDevCredentialReconciliationReceipt");
-
-// ../backend-contracts/src/mlsDevDeviceCustody.ts
-var MLS_DEV_DEVICE_CONTEXT_MAX_BYTES = 2048;
-var MLS_DEV_DEVICE_COMMAND_MAX_BYTES = 16384;
-var MLS_DEV_DEVICE_WRAPPED_STATE_MAX_BYTES = 6144;
-var MlsDevDeviceCustodyValidationError = class extends Error {
-  static {
-    __name(this, "MlsDevDeviceCustodyValidationError");
-  }
-  code = "INVALID_MLS_DEV_DEVICE_CUSTODY";
-  constructor() {
-    super("INVALID_MLS_DEV_DEVICE_CUSTODY");
-    this.name = "MlsDevDeviceCustodyValidationError";
-  }
-};
-var utf87 = new TextEncoder();
-function invalid13() {
-  throw new MlsDevDeviceCustodyValidationError();
-}
-__name(invalid13, "invalid");
-function boundary10(read) {
-  try {
-    return read();
-  } catch {
-    return invalid13();
-  }
-}
-__name(boundary10, "boundary");
-function bounded8(value, limit2) {
-  if (utf87.encode(JSON.stringify(value)).length > limit2) invalid13();
-  return Object.freeze(value);
-}
-__name(bounded8, "bounded");
-function binding2(input) {
-  return {
-    version: requireMlsLiteral(input.version, 1),
-    environmentId: requireMlsEnvironmentId(input.environmentId),
-    principal: parseMlsDevEnrollmentPrincipal(input.principal),
-    installationId: parseMlsDevInstallationId(input.installationId)
-  };
-}
-__name(binding2, "binding");
-function parseMlsDevDeviceBinding(value) {
-  return boundary10(() => bounded8(binding2(readMlsDataRecord(value, ["version", "environmentId", "principal", "installationId"])), MLS_DEV_DEVICE_CONTEXT_MAX_BYTES));
-}
-__name(parseMlsDevDeviceBinding, "parseMlsDevDeviceBinding");
-function parseMlsDevDeviceContext(value) {
-  return boundary10(() => {
-    const input = readMlsDataRecord(value, ["version", "environmentId", "principal", "installationId", "revision"]);
-    const revision2 = requireMlsInteger(input.revision);
-    if (revision2 >= Number.MAX_SAFE_INTEGER) invalid13();
-    return bounded8({ ...binding2(input), revision: revision2 }, MLS_DEV_DEVICE_CONTEXT_MAX_BYTES);
-  });
-}
-__name(parseMlsDevDeviceContext, "parseMlsDevDeviceContext");
-function parseMlsDevDeviceCommand(value) {
-  return boundary10(() => {
-    if (value === null || typeof value !== "object") invalid13();
-    const descriptor = Object.getOwnPropertyDescriptor(value, "op");
-    if (!descriptor || !Object.hasOwn(descriptor, "value")) invalid13();
-    if (descriptor.value === "create") {
-      const input2 = readMlsDataRecord(value, ["op"]);
-      return Object.freeze({ op: requireMlsLiteral(input2.op, "create") });
-    }
-    if (descriptor.value === "enrollment_proof") {
-      const input2 = readMlsDataRecord(value, ["op", "challenge"]);
-      return bounded8({
-        op: requireMlsLiteral(input2.op, "enrollment_proof"),
-        challenge: parseMlsDevEnrollmentChallenge(input2.challenge)
-      }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
-    }
-    if (descriptor.value === "credential_reconciliation_proof") {
-      const input2 = readMlsDataRecord(value, ["op", "challenge", "expectedCredentialGeneration"]);
-      const challenge2 = parseMlsDevCredentialReconciliationChallenge(input2.challenge);
-      const expectedCredentialGeneration2 = requireMlsInteger(input2.expectedCredentialGeneration);
-      if (challenge2.expectedCredentialGeneration !== expectedCredentialGeneration2) invalid13();
-      return bounded8({
-        op: requireMlsLiteral(input2.op, "credential_reconciliation_proof"),
-        challenge: challenge2,
-        expectedCredentialGeneration: expectedCredentialGeneration2
-      }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
-    }
-    if (descriptor.value !== "credential_proof") invalid13();
-    const input = readMlsDataRecord(value, ["op", "challenge", "registrationResult", "expectedCredentialGeneration"]);
-    const challenge = parseMlsDevCredentialChallenge(input.challenge);
-    const registrationResult = parseMlsDevEnrollmentResult(input.registrationResult);
-    const expectedCredentialGeneration = requireMlsInteger(input.expectedCredentialGeneration);
-    if (expectedCredentialGeneration >= Number.MAX_SAFE_INTEGER || challenge.credential.claims.generation !== expectedCredentialGeneration + 1 || JSON.stringify(challenge.credential.claims.device) !== JSON.stringify(registrationResult.device)) invalid13();
-    return bounded8({
-      op: requireMlsLiteral(input.op, "credential_proof"),
-      challenge,
-      registrationResult,
-      expectedCredentialGeneration
-    }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
-  });
-}
-__name(parseMlsDevDeviceCommand, "parseMlsDevDeviceCommand");
-function encoded7(value, bytes) {
-  decodeCanonicalMlsBase64Url(value, bytes);
-  return value;
-}
-__name(encoded7, "encoded");
-function wrapped(value) {
-  if (typeof value !== "string" || value.length > MLS_DEV_DEVICE_WRAPPED_STATE_MAX_BYTES || !value.startsWith("v1:")) invalid13();
-  const body = value.slice(3);
-  if (body.length < 40 || body.length % 4 !== 0 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(body)) invalid13();
-  const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-  if (body.endsWith("==") && (alphabet.indexOf(body.at(-3)) & 15) !== 0) invalid13();
-  if (!body.endsWith("==") && body.endsWith("=") && (alphabet.indexOf(body.at(-2)) & 3) !== 0) invalid13();
-  return value;
-}
-__name(wrapped, "wrapped");
-function parseMlsDevDevicePreparation(value, op) {
-  return boundary10(() => {
-    if (!["create", "enrollment_proof", "credential_proof", "credential_reconciliation_proof"].includes(op)) invalid13();
-    const input = readMlsDataRecord(value, ["wrappedState", "payload"]);
-    const payload = readMlsDataRecord(input.payload, op === "create" ? ["signaturePublicKey"] : ["signaturePublicKey", "proof"]);
-    return bounded8({ wrappedState: wrapped(input.wrappedState), payload: Object.freeze({
-      signaturePublicKey: encoded7(payload.signaturePublicKey, 32),
-      ...op === "create" ? {} : { proof: encoded7(payload.proof, 64) }
-    }) }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
-  });
-}
-__name(parseMlsDevDevicePreparation, "parseMlsDevDevicePreparation");
-
 // ../backend-contracts/src/mlsDevKeyPackage.ts
 var MLS_DEV_KEY_PACKAGE_COMMAND_MAX_BYTES = 16384;
 var MLS_DEV_KEY_PACKAGE_WIRE_MAX_BYTES = 16384;
@@ -5122,7 +5404,7 @@ function parseMlsDevKeyPackagePayload(value) {
       "expiresAtMs"
     ]);
     const notBeforeMs = requireMlsInteger(input.notBeforeMs), expiresAtMs = requireMlsInteger(input.expiresAtMs);
-    if (notBeforeMs % 1e3 !== 0 || expiresAtMs % 1e3 !== 0 || expiresAtMs <= notBeforeMs || expiresAtMs - notBeforeMs > 864e5) invalid14();
+    if (notBeforeMs % 1e3 !== 0 || expiresAtMs % 1e3 !== 0 || expiresAtMs <= notBeforeMs || expiresAtMs - notBeforeMs > MLS_DEV_CREDENTIAL_LONG_TTL_MS) invalid14();
     return bounded9({
       version: requireMlsLiteral(input.version, 1),
       keyPackageId: requireMlsUuid(input.keyPackageId),
@@ -5218,103 +5500,6 @@ function parseMlsRoomIdentities(value) {
 }
 __name(parseMlsRoomIdentities, "parseMlsRoomIdentities");
 
-// ../endpoint/src/runtime-api-origins.generated.ts
-var RUNTIME_API_ORIGINS = {
-  "canon-dev-v1": "https://dev.api.canonmail.com",
-  "canon-prod-v1": "https://api.canonmail.com"
-};
-
-// ../endpoint/src/mls-crypto.ts
-function mlsDevDeviceHttpConfiguration(environmentId) {
-  if (!isMlsEnvironmentId(environmentId)) invalid16();
-  const origin = RUNTIME_API_ORIGINS[environmentId];
-  return Object.freeze({
-    enrollmentUrl: `${origin}/mls/enrollment`,
-    credentialUrl: `${origin}/mls/credential`,
-    reconciliationUrl: `${origin}/mls/reconciliation`,
-    keyPackagesUrl: `${origin}/mls/key-packages`,
-    trustedOrigins: Object.freeze([origin])
-  });
-}
-__name(mlsDevDeviceHttpConfiguration, "mlsDevDeviceHttpConfiguration");
-function invalid16() {
-  throw new Error("MLS_DEV_CLIENT_CONFIGURATION_INVALID");
-}
-__name(invalid16, "invalid");
-function record4(value, keys2) {
-  if (!value || typeof value !== "object" || Array.isArray(value) || ![Object.prototype, null].includes(Object.getPrototypeOf(value))) invalid16();
-  const fields2 = Object.getOwnPropertyDescriptors(value);
-  if (Reflect.ownKeys(fields2).length !== keys2.length || keys2.some((key) => !Object.hasOwn(fields2, key) || !Object.hasOwn(fields2[key], "value"))) invalid16();
-  return value;
-}
-__name(record4, "record");
-function primeOrderPoint(value) {
-  const point = ed25519.Point.fromBytes(value, false);
-  return !point.isSmallOrder() && point.isTorsionFree();
-}
-__name(primeOrderPoint, "primeOrderPoint");
-function issuerKeys(value, environmentId, receipt = false) {
-  if (!Array.isArray(value) || value.length < 1 || value.length > 8) invalid16();
-  const seen = /* @__PURE__ */ new Set();
-  let environment = environmentId;
-  return Object.freeze(Array.from(value, (item2) => {
-    const key = record4(item2, ["keyVersion", "signaturePublicKey"]);
-    const keyVersion = receipt ? parseMlsDevReceiptKeyVersion(key.keyVersion, environment) : parseMlsDevIssuerKeyVersion(key.keyVersion, environment);
-    environment ??= receipt ? mlsEnvironmentOfReceiptKeyVersion(keyVersion) : mlsEnvironmentOfIssuerKeyVersion(keyVersion);
-    if (seen.has(keyVersion) || typeof key.signaturePublicKey !== "string" || !primeOrderPoint(decodeCanonicalMlsBase64Url(key.signaturePublicKey, 32))) invalid16();
-    seen.add(keyVersion);
-    return Object.freeze({ keyVersion, signaturePublicKey: key.signaturePublicKey });
-  }));
-}
-__name(issuerKeys, "issuerKeys");
-function parseMlsDevClientConfiguration(value) {
-  try {
-    const listed = !!value && typeof value === "object" && Object.hasOwn(value, "principalIds");
-    const input = record4(value, ["version", "environmentId", "enabled", ...listed ? ["principalIds"] : [], "issuerKeys", "receiptKeys"]);
-    if (input.version !== 1 || !isMlsEnvironmentId(input.environmentId) || input.enabled !== true || listed && (!Array.isArray(input.principalIds) || input.principalIds.length < 1 || input.principalIds.length > 100)) invalid16();
-    const environmentId = input.environmentId;
-    const principalIds = listed ? Array.from(input.principalIds, (id7) => parseMlsDevEnrollmentPrincipal({ type: "human", id: id7 }).id) : void 0;
-    if (principalIds && new Set(principalIds).size !== principalIds.length) invalid16();
-    return Object.freeze({
-      version: 1,
-      environmentId,
-      enabled: true,
-      ...principalIds ? { principalIds: Object.freeze(principalIds) } : {},
-      issuerKeys: issuerKeys(input.issuerKeys, environmentId),
-      receiptKeys: issuerKeys(input.receiptKeys, environmentId, true)
-    });
-  } catch {
-    return invalid16();
-  }
-}
-__name(parseMlsDevClientConfiguration, "parseMlsDevClientConfiguration");
-function createMlsDevCredentialVerifier(options) {
-  let trusted;
-  try {
-    trusted = new Map(issuerKeys(options.issuerKeys).map((key) => [key.keyVersion, key.signaturePublicKey]));
-  } catch {
-    return invalid16();
-  }
-  const clock = options.clock ?? Date.now;
-  return async (value) => {
-    try {
-      const receipt = parseMlsDevCredentialReceipt(value);
-      const parsed = parseMlsDevCredentialToken(receipt.credential);
-      const key = trusted.get(parsed.unsigned.keyVersion);
-      const now = clock();
-      const { issuedAtMs, expiresAtMs } = parsed.unsigned.claims;
-      if (!key || !Number.isSafeInteger(now) || now < issuedAtMs || now >= expiresAtMs) return false;
-      const publicKey = decodeCanonicalMlsBase64Url(key, 32);
-      const signature = decodeCanonicalMlsBase64Url(parsed.signature, 64);
-      if (!primeOrderPoint(publicKey) || !primeOrderPoint(signature.subarray(0, 32))) return false;
-      return ed25519.verify(signature, new TextEncoder().encode(parsed.signingInput), publicKey, { zip215: false });
-    } catch {
-      return false;
-    }
-  };
-}
-__name(createMlsDevCredentialVerifier, "createMlsDevCredentialVerifier");
-
 export {
   __name,
   getCanonEnvironmentContract,
@@ -5328,6 +5513,8 @@ export {
   isCanonUploadUrl,
   resolveAllowedUploadMimeType,
   isMlsEnvironmentId,
+  mlsEnvironmentOfIssuerKeyVersion,
+  mlsEnvironmentOfReceiptKeyVersion,
   MLS_DEV_ENROLLMENT_MAX_BYTES,
   parseMlsDevEnrollmentPrincipal,
   parseMlsDevEnrollmentBegin,
@@ -5335,7 +5522,9 @@ export {
   parseMlsDevEnrollmentChallenge,
   parseMlsDevEnrollmentResult,
   encodeCanonicalMlsBase64Url,
+  decodeCanonicalMlsBase64Url,
   MLS_DEV_CREDENTIAL_MAX_BYTES,
+  parseMlsDevIssuerKeyVersion,
   parseMlsDevCredentialChallenge,
   parseMlsDevCredentialBegin,
   parseMlsDevCredentialComplete,
@@ -5344,6 +5533,7 @@ export {
   createMlsDevCredentialSigningInput,
   parseMlsDevCredentialToken,
   parseMlsDevCredentialReceipt,
+  parseMlsDevReceiptKeyVersion,
   MLS_DEV_GROUP_RECEIPT_CLOCK_SKEW,
   isMlsDevReceiptClockSkew,
   parseMlsDevGroupFeedEntry,
@@ -5366,6 +5556,7 @@ export {
   parseMlsDevGroupHead,
   parseMlsDevGroupMarker,
   parseMlsDevGroupRoster,
+  mlsAdmissionWait,
   parseMlsDevRoomRemoval,
   parseMlsDevGroupControl,
   parseMlsDevGroupAcceptedControl,
@@ -5388,8 +5579,10 @@ export {
   RUNTIME_CARD_LINE_ITEM_COLUMN_TYPES,
   readMembershipChangeMetadata,
   formatMembershipChangeNotice,
+  PARTICIPATION_HISTORY_FETCH_LIMIT,
+  buildParticipationHistorySnapshot,
+  evaluateParticipationPolicy,
   MAX_DISCOVER_AGENTS_QUERY_LENGTH,
-  VERB_LIMITS,
   NO_REPLY_ACK_NOTE,
   CANON_VERB_WIRE_SCHEMA_VERSION,
   projectVerbIntentToWire,
@@ -5399,6 +5592,7 @@ export {
   MAX_PUBLIC_RUNTIME_COMMANDS,
   normalizePublicRuntimeDescriptor,
   normalizePublicRuntimeFacts,
+  resolveConversationPolicyScope,
   MLS_DEV_UNSUPPORTED_CONTENT_ACTIONS,
   MLS_DEV_DISCLOSED_PROCESSING_FIELDS,
   endpointOperationRequestRetention,
@@ -5442,8 +5636,5 @@ export {
   isMlsPrincipalAlias,
   parseMlsPrincipalOpening,
   encodeMlsPrincipalAliasInput,
-  parseMlsRoomIdentities,
-  mlsDevDeviceHttpConfiguration,
-  parseMlsDevClientConfiguration,
-  createMlsDevCredentialVerifier
+  parseMlsRoomIdentities
 };