@canonmsg/agent-sdk 13.2.1 → 13.3.0

package/dist/chunks/{chunk-VIS5WXNH.js → chunk-CUPSYLBV.js}

@@ -1,22 +1,6 @@
 var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
-// ../backend-contracts/src/clientFloor.ts
-var CANON_CLIENT_HEADER = "X-Canon-Client";
-var CLIENT_UPDATE_REQUIRED = "CLIENT_UPDATE_REQUIRED";
-var CANON_CLIENT_KINDS = ["app-ios", "app-android", "web", "runner", "hermes", "core", "connector"];
-var VERSION = /^(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})$/;
-var isKind = /* @__PURE__ */ __name((value) => CANON_CLIENT_KINDS.includes(value), "isKind");
-function isCanonClientVersion(value) {
-  return typeof value === "string" && VERSION.test(value);
-}
-__name(isCanonClientVersion, "isCanonClientVersion");
-function formatCanonClientHeader(client) {
-  if (!isKind(client.kind) || !isCanonClientVersion(client.version)) throw new Error("Invalid Canon client identity");
-  return `${client.kind}/${client.version}`;
-}
-__name(formatCanonClientHeader, "formatCanonClientHeader");
-
 // ../backend-contracts/src/media.ts
 function sanitizeDownloadFileName(value, fallback = "attachment") {
   const baseName = typeof value === "string" ? value.trim().split(/[\\/]/).filter(Boolean).pop() ?? "" : "";
@@ -726,6 +710,7 @@ __name(parseMlsDevGroupFeedResult, "parseMlsDevGroupFeedResult");
 // ../backend-contracts/src/mlsDevKeyPackages.ts
 var MLS_DEV_KEY_PACKAGES_MAX_BYTES = 32768;
 var MLS_DEV_KEY_PACKAGE_TLS_MAX_BYTES = 16384;
+var MLS_DEV_KEY_PACKAGE_CLAIM_LEASE_MS = 2 * 6e4;
 var MlsDevKeyPackagesValidationError = class extends Error {
   static {
     __name(this, "MlsDevKeyPackagesValidationError");
@@ -2097,1761 +2082,1089 @@ function isMlsDevReceiptClockSkew(value) {
 }
 __name(isMlsDevReceiptClockSkew, "isMlsDevReceiptClockSkew");
 
-// ../backend-contracts/src/mlsDevCredentialReconciliation.ts
-var MLS_DEV_CREDENTIAL_RECONCILIATION_CHALLENGE_TTL_MS = 3e5;
-var MLS_DEV_CREDENTIAL_RECONCILIATION_MAX_BYTES = 8192;
-var MlsDevCredentialReconciliationValidationError = class extends Error {
-  static {
-    __name(this, "MlsDevCredentialReconciliationValidationError");
+// ../backend-contracts/src/verbContract.ts
+var CANON_VERBS_SCHEMA_ID = "https://canonmsg.com/schemas/canon.verbs.v1.json";
+var VERB_ID_PATTERNS = {
+  runtimeId: "^[A-Za-z0-9_.:-]{1,160}$",
+  cardId: "^[A-Za-z0-9_.:-]{1,80}$",
+  actionId: "^[A-Za-z0-9_.:-]{1,80}$",
+  questionId: "^[A-Za-z0-9_.:-]{1,120}$",
+  sessionRuleToolPattern: "^[\\w.*:-]{1,128}$",
+  runtimeCorrelationValue: "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+  runtimeMethod: "^[A-Za-z0-9_][A-Za-z0-9_./:\\-]{0,255}$",
+  runtimeHandleKey: "^[A-Za-z0-9_.:-]{1,80}$",
+  /** UUID issued by Canon's resumable-media session endpoint. */
+  resumableUploadId: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
+};
+var VERB_LIMITS = {
+  /** Message text — UTF-8 bytes (functions/src/api/sendMessage.ts MAX_MESSAGE_TEXT_BYTES). */
+  messageTextBytes: 4096,
+  /**
+   * Serialized metadata JSON length in UTF-16 code units — the server checks
+   * JSON.stringify(metadata).length, not bytes (sendMessage.ts:716-724 inline;
+   * parseBody.ts maxJsonBytes despite the name).
+   */
+  messageMetadataJsonChars: 4096,
+  /** Attachments per message (sendMessage.ts MAX_MESSAGE_ATTACHMENTS). */
+  messageAttachments: 10,
+  /** Client-supplied messageId — chars and UTF-8 bytes (sendMessage.ts). */
+  messageIdChars: 160,
+  messageIdBytes: 256,
+  /** Self-context note (functions/src/utils/selfContexts.ts SELF_CONTEXT_CONTEXT_LIMIT). */
+  selfContextChars: 1e3,
+  /** Short private description of an external working context. */
+  externalSourceLabelChars: 80,
+  /**
+   * Contact-request note. Values longer than this are truncated by senders
+   * (slice(0,497)+'...'); this constant is the canonical figure.
+   */
+  contactRequestNoteChars: 500,
+  /** Group membership cap incl. creator (functions/src/utils/conversations.ts MAX_GROUP_MEMBERS). */
+  groupMembers: 50,
+  /** Runtime input (functions/src/api/interactionInput.ts). */
+  inputTitleChars: 160,
+  inputPromptChars: 4e3,
+  inputChoices: 12,
+  inputChoiceLabelChars: 120,
+  inputChoiceValueChars: 200,
+  inputChoiceDescriptionChars: 300,
+  inputQuestions: 12,
+  inputQuestionChars: 1e3,
+  inputQuestionHeaderChars: 120,
+  inputSecretNameChars: 160,
+  inputAnswerChars: 8192,
+  /** Approval (functions/src/api/interactionApproval.ts). */
+  toolNameChars: 128,
+  toolSummaryChars: 1e3,
+  approvalDetails: 8,
+  approvalDetailLabelChars: 80,
+  approvalDetailValueChars: 500,
+  diffFiles: 100,
+  diffPathChars: 1024,
+  diffFileBytes: 24 * 1024,
+  diffTotalBytes: 96 * 1024,
+  /** Card envelope acceptance (functions/src/api/interactionCard.ts — server caps;
+   * authoring caps in @canonmsg/rich-cards are stricter: title 120, fallback 500, blocks 24). */
+  cardEnvelopeBytes: 32 * 1024,
+  cardServerTitleChars: 200,
+  cardServerFallbackTextChars: 2e3,
+  cardServerBlocks: 64,
+  /** Response-values caps enforced on submit (callable respondToInteraction.ts
+   * MAX_VALUES_BYTES/MAX_VALUES_DEPTH; interactionCard.ts re-checks bytes on
+   * consume via MAX_REPLY_BYTES). */
+  cardValuesBytes: 8 * 1024,
+  cardValuesDepth: 8,
+  /** Native correlation metadata (functions/src/api/interactionKinds.ts normalizeNative). */
+  nativeKeys: 24,
+  nativeValueChars: 256,
+  nativeHandles: 16,
+  /** Deadlines (functions/src/utils/runtimeRequestHelpers.ts). */
+  minTimeoutMs: 1e3,
+  /** input/card/plan ceiling (30 minutes). */
+  maxTimeoutMs: 30 * 60 * 1e3,
+  /** approval-only ceiling (72 hours — owner ruling 2026-07-10). */
+  maxApprovalTimeoutMs: 72 * 60 * 60 * 1e3,
+  /** turnId / runtimeId fields on interaction creators. */
+  turnIdChars: 128,
+  /** Reaction key (functions/src/api/reactToMessage.ts normalizeReactionKey). */
+  reactionEmojiChars: 64,
+  /**
+   * Group name authoring cap (enforced on rename via updateNameServer; group
+   * CREATE does not length-check today — treat as the authoring contract).
+   */
+  groupNameChars: 100,
+  /**
+   * `no_reply.reason` authoring cap. There is no server enforcement beyond the
+   * intent schema — the handler logs the reason's presence and nothing else —
+   * so this constant is the canonical figure.
+   */
+  noReplyReasonChars: 500
+};
+var SELF_CONTEXT_TYPE = "cross_session";
+var CANON_VERB_NAMES = [
+  "send_to",
+  "request_input",
+  "request_approval",
+  "check_approval",
+  "send_card",
+  "request_card",
+  "share_contact",
+  "react",
+  "forward",
+  "create_group",
+  "add_member",
+  "remove_member",
+  "leave_conversation",
+  "list_contacts",
+  "list_conversations",
+  "no_reply"
+];
+var VERB_NATIVE_METADATA_KEYS = [
+  "runtime",
+  "method",
+  "requestId",
+  "provider",
+  "origin",
+  "surface",
+  "threadId",
+  "turnId",
+  "runId",
+  "itemId",
+  "toolCallId",
+  "approvalId",
+  "pluginId",
+  "sessionKey",
+  "nodeId",
+  "handles"
+];
+var VERB_NATIVE_STRING_KEYS = VERB_NATIVE_METADATA_KEYS.filter(
+  (key) => key !== "handles"
+);
+var RUNTIME_CORRELATION_VALUE_PATTERN = new RegExp(
+  VERB_ID_PATTERNS.runtimeCorrelationValue
+);
+var RUNTIME_METHOD_PATTERN = new RegExp(VERB_ID_PATTERNS.runtimeMethod);
+var RUNTIME_HANDLE_KEY_PATTERN = new RegExp(VERB_ID_PATTERNS.runtimeHandleKey);
+var NO_REPLY_ACK_NOTE = "Acknowledged \u2014 nothing was posted to the conversation.";
+
+// ../backend-contracts/src/verbSchemas.ts
+var REF = /* @__PURE__ */ __name((def) => ({ $ref: `#/$defs/${def}` }), "REF");
+var selfContextDef = {
+  type: "object",
+  description: "Private note-to-self attached to a cross-conversation send. Visible only to the sending agent (surfaced back as provenance.activeSelfContext); never shown to recipients. Enforced by functions/src/utils/selfContexts.ts.",
+  required: ["type", "context"],
+  additionalProperties: false,
+  properties: {
+    type: { const: SELF_CONTEXT_TYPE },
+    context: {
+      type: "string",
+      minLength: 1,
+      maxLength: VERB_LIMITS.selfContextChars,
+      description: "What future-you needs to know about this transfer."
+    }
   }
-  code = "INVALID_MLS_DEV_CREDENTIAL_RECONCILIATION";
-  constructor() {
-    super("INVALID_MLS_DEV_CREDENTIAL_RECONCILIATION");
-    this.name = "MlsDevCredentialReconciliationValidationError";
+};
+var sessionSelectionDef = {
+  description: "How to pick the conversation when targeting a user whose chats are session-shaped (agent targets). Canon default for user-targeted sends: continue_or_create.",
+  oneOf: [
+    {
+      type: "object",
+      required: ["mode"],
+      additionalProperties: false,
+      properties: { mode: { enum: ["new", "continue_latest", "continue_or_create"] } }
+    },
+    {
+      type: "object",
+      required: ["mode", "conversationId"],
+      additionalProperties: false,
+      properties: {
+        mode: { const: "specific" },
+        conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId }
+      }
+    }
+  ]
+};
+var mediaAttachmentDef = {
+  type: "object",
+  required: ["kind", "url"],
+  additionalProperties: false,
+  properties: {
+    kind: { enum: ["image", "audio", "video", "file"] },
+    url: {
+      type: "string",
+      minLength: 1,
+      description: "Must come from a canonical Canon upload/finalization response or the GIF picker \u2014 server allowlist, fail-closed (functions/src/utils/mediaUploadSafety.ts)."
+    },
+    uploadId: {
+      type: "string",
+      pattern: VERB_ID_PATTERNS.resumableUploadId,
+      description: "Server-issued resumable identity. Preserve it from finalization so the durable message transaction can validate and retain initially temporary media."
+    },
+    mimeType: { type: "string" },
+    fileName: { type: "string" },
+    sizeBytes: { type: "number", minimum: 0 },
+    width: { type: "number", minimum: 0 },
+    height: { type: "number", minimum: 0 },
+    durationMs: { type: "number", minimum: 0 },
+    thumbnailUrl: { type: "string", minLength: 1 },
+    processingStatus: { enum: ["processing", "ready", "failed"] },
+    processingErrorCode: {
+      enum: ["invalid_video", "video_limits_exceeded", "video_processing_failed"]
+    }
   }
 };
-var utf86 = new TextEncoder();
-var domain2 = utf86.encode("canon.mls.credential-reconciliation-proof.v1\0");
-function invalid10() {
-  throw new MlsDevCredentialReconciliationValidationError();
-}
-__name(invalid10, "invalid");
-function boundary9(read) {
-  try {
-    return read();
-  } catch {
-    return invalid10();
+var turnMetadataDef = {
+  type: "object",
+  description: `Free-form metadata envelope; JSON.stringify length <= ${VERB_LIMITS.messageMetadataJsonChars} UTF-16 code units (functions/src/api/sendMessage.ts checks string length, not bytes). Well-known turn-protocol keys below (authoritative type: turnProtocol.ts TurnMetadata, which also carries requestedTurnMode); receipt metadata.type values are server-owned and rejected.`,
+  additionalProperties: true,
+  properties: {
+    turnId: { type: ["string", "null"] },
+    turnSemantics: { enum: ["progress", "turn_complete", "control"] },
+    deliveryIntent: {
+      enum: ["queue", "interrupt", "interleave", "stop"],
+      description: "What the recipient runtime should do if the message lands mid-turn. Default queue."
+    },
+    replyBehavior: { enum: ["allow_auto_reply", "suppress_auto_reply"] }
   }
-}
-__name(boundary9, "boundary");
-function bounded7(value) {
-  if (utf86.encode(JSON.stringify(value)).length > MLS_DEV_CREDENTIAL_RECONCILIATION_MAX_BYTES) invalid10();
-  return Object.freeze(value);
-}
-__name(bounded7, "bounded");
-function encoded6(value, bytes) {
-  decodeCanonicalMlsBase64Url(value, bytes);
-  return value;
-}
-__name(encoded6, "encoded");
-function parseMlsDevCredentialReconciliationBegin(value) {
-  return boundary9(() => {
-    const input = readMlsDataRecord(value, ["version", "deviceId", "requestId", "expectedCredentialGeneration"]);
-    return bounded7({
-      version: requireMlsLiteral(input.version, 1),
-      deviceId: requireMlsUuid(input.deviceId),
-      requestId: requireMlsUuid(input.requestId),
-      expectedCredentialGeneration: requireMlsInteger(input.expectedCredentialGeneration)
-    });
-  });
-}
-__name(parseMlsDevCredentialReconciliationBegin, "parseMlsDevCredentialReconciliationBegin");
-function parseMlsDevCredentialReconciliationChallenge(value) {
-  return boundary9(() => {
-    const input = readMlsDataRecord(value, [
-      "version",
-      "challengeId",
-      "requestId",
-      "nonce",
-      "device",
-      "expectedCredentialGeneration",
-      "issuedAtMs",
-      "expiresAtMs"
-    ]);
-    const device = parseMlsDevEnrollmentResult({ version: 1, authorization: "registration_only", device: input.device }).device;
-    const issuedAtMs = requireMlsInteger(input.issuedAtMs), expiresAtMs = requireMlsInteger(input.expiresAtMs);
-    if (issuedAtMs < device.registeredAtMs || expiresAtMs - issuedAtMs !== MLS_DEV_CREDENTIAL_RECONCILIATION_CHALLENGE_TTL_MS) invalid10();
-    return bounded7({
-      version: requireMlsLiteral(input.version, 1),
-      challengeId: requireMlsUuid(input.challengeId),
-      requestId: requireMlsUuid(input.requestId),
-      nonce: encoded6(input.nonce, 32),
-      device,
-      expectedCredentialGeneration: requireMlsInteger(input.expectedCredentialGeneration),
-      issuedAtMs,
-      expiresAtMs
-    });
-  });
-}
-__name(parseMlsDevCredentialReconciliationChallenge, "parseMlsDevCredentialReconciliationChallenge");
-function parseMlsDevCredentialReconciliationComplete(value) {
-  return boundary9(() => {
-    const input = readMlsDataRecord(value, ["version", "challengeId", "proof"]);
-    return bounded7({ version: requireMlsLiteral(input.version, 1), challengeId: requireMlsUuid(input.challengeId), proof: encoded6(input.proof, 64) });
-  });
-}
-__name(parseMlsDevCredentialReconciliationComplete, "parseMlsDevCredentialReconciliationComplete");
-function parseMlsDevCredentialReconciliationReceipt(value) {
-  return boundary9(() => {
-    const input = readMlsDataRecord(value, ["version", "authorization", "challenge", "observedCredentialGeneration", "observedAtMs"]);
-    const challenge = parseMlsDevCredentialReconciliationChallenge(input.challenge);
-    const observedCredentialGeneration = requireMlsInteger(input.observedCredentialGeneration), observedAtMs = requireMlsInteger(input.observedAtMs);
-    if (observedCredentialGeneration < challenge.expectedCredentialGeneration || observedAtMs < challenge.issuedAtMs || observedAtMs >= challenge.expiresAtMs) invalid10();
-    return bounded7({
-      version: requireMlsLiteral(input.version, 1),
-      authorization: requireMlsLiteral(input.authorization, "credential_generation_observation_only"),
-      challenge,
-      observedCredentialGeneration,
-      observedAtMs
-    });
-  });
-}
-__name(parseMlsDevCredentialReconciliationReceipt, "parseMlsDevCredentialReconciliationReceipt");
-
-// ../backend-contracts/src/mlsDevDeviceCustody.ts
-var MLS_DEV_DEVICE_CONTEXT_MAX_BYTES = 2048;
-var MLS_DEV_DEVICE_COMMAND_MAX_BYTES = 16384;
-var MLS_DEV_DEVICE_WRAPPED_STATE_MAX_BYTES = 6144;
-var MlsDevDeviceCustodyValidationError = class extends Error {
-  static {
-    __name(this, "MlsDevDeviceCustodyValidationError");
+};
+var messageIdDef = {
+  type: "string",
+  pattern: VERB_ID_PATTERNS.runtimeId,
+  not: {
+    pattern: "^(\\.{1,2}|__.*__)$",
+    description: "Reserved forms the server 400s: '.', '..', and __x__ ids."
+  },
+  description: `Client idempotency key (<= ${VERB_LIMITS.messageIdChars} chars / ${VERB_LIMITS.messageIdBytes} UTF-8 bytes; no slashes, control chars, '.', '..', __x__). Same id + identical payload replays idempotently; different payload -> 409 MESSAGE_ID_EXISTS.`
+};
+var messageOptionsDef = {
+  type: "object",
+  description: "Message composition options (mirrors POST /messages/send). Deliberately absent: contact_card contentType (use share_contact) and forwarded/forwardedFrom (forwarding has its own verb \u2014 use forward, not send_to).",
+  additionalProperties: false,
+  properties: {
+    messageId: REF("messageId"),
+    contentType: {
+      enum: ["text", "image", "audio", "video", "file"],
+      description: "Derived from attachments when omitted. contact_card is deliberately excluded here \u2014 use the share_contact verb."
+    },
+    attachments: {
+      type: "array",
+      maxItems: VERB_LIMITS.messageAttachments,
+      items: REF("mediaAttachment")
+    },
+    mentions: {
+      type: "array",
+      items: { type: "string" },
+      description: "Member userIds; every id must be a conversation member (400 otherwise)."
+    },
+    replyTo: { type: "string", description: "Message id being replied to (not existence-validated)." },
+    replyToPosition: { type: "integer" },
+    metadata: REF("turnMetadata")
   }
-  code = "INVALID_MLS_DEV_DEVICE_CUSTODY";
-  constructor() {
-    super("INVALID_MLS_DEV_DEVICE_CUSTODY");
-    this.name = "MlsDevDeviceCustodyValidationError";
+};
+var inputChoiceDef = {
+  type: "object",
+  required: ["label"],
+  additionalProperties: false,
+  properties: {
+    label: { type: "string", minLength: 1, maxLength: VERB_LIMITS.inputChoiceLabelChars },
+    value: { type: "string", maxLength: VERB_LIMITS.inputChoiceValueChars },
+    description: { type: "string", maxLength: VERB_LIMITS.inputChoiceDescriptionChars }
   }
 };
-var utf87 = new TextEncoder();
-function invalid11() {
-  throw new MlsDevDeviceCustodyValidationError();
-}
-__name(invalid11, "invalid");
-function boundary10(read) {
-  try {
-    return read();
-  } catch {
-    return invalid11();
+var inputQuestionDef = {
+  type: "object",
+  required: ["id", "question"],
+  additionalProperties: false,
+  properties: {
+    id: { type: "string", pattern: VERB_ID_PATTERNS.questionId },
+    question: { type: "string", minLength: 1, maxLength: VERB_LIMITS.inputQuestionChars },
+    header: { type: "string", maxLength: VERB_LIMITS.inputQuestionHeaderChars },
+    choices: { type: "array", maxItems: VERB_LIMITS.inputChoices, items: REF("inputChoice") },
+    allowOther: { type: "boolean" },
+    isSecret: {
+      type: "boolean",
+      description: "Forces owner-only routing for the whole request."
+    },
+    multiSelect: { type: "boolean" }
   }
-}
-__name(boundary10, "boundary");
-function bounded8(value, limit2) {
-  if (utf87.encode(JSON.stringify(value)).length > limit2) invalid11();
-  return Object.freeze(value);
-}
-__name(bounded8, "bounded");
-function binding2(input) {
-  return {
-    version: requireMlsLiteral(input.version, 1),
-    environmentId: requireMlsEnvironmentId(input.environmentId),
-    principal: parseMlsDevEnrollmentPrincipal(input.principal),
-    installationId: parseMlsDevInstallationId(input.installationId)
-  };
-}
-__name(binding2, "binding");
-function parseMlsDevDeviceBinding(value) {
-  return boundary10(() => bounded8(binding2(readMlsDataRecord(value, ["version", "environmentId", "principal", "installationId"])), MLS_DEV_DEVICE_CONTEXT_MAX_BYTES));
-}
-__name(parseMlsDevDeviceBinding, "parseMlsDevDeviceBinding");
-function parseMlsDevDeviceContext(value) {
-  return boundary10(() => {
-    const input = readMlsDataRecord(value, ["version", "environmentId", "principal", "installationId", "revision"]);
-    const revision2 = requireMlsInteger(input.revision);
-    if (revision2 >= Number.MAX_SAFE_INTEGER) invalid11();
-    return bounded8({ ...binding2(input), revision: revision2 }, MLS_DEV_DEVICE_CONTEXT_MAX_BYTES);
-  });
-}
-__name(parseMlsDevDeviceContext, "parseMlsDevDeviceContext");
-function parseMlsDevDeviceCommand(value) {
-  return boundary10(() => {
-    if (value === null || typeof value !== "object") invalid11();
-    const descriptor = Object.getOwnPropertyDescriptor(value, "op");
-    if (!descriptor || !Object.hasOwn(descriptor, "value")) invalid11();
-    if (descriptor.value === "create") {
-      const input2 = readMlsDataRecord(value, ["op"]);
-      return Object.freeze({ op: requireMlsLiteral(input2.op, "create") });
-    }
-    if (descriptor.value === "enrollment_proof") {
-      const input2 = readMlsDataRecord(value, ["op", "challenge"]);
-      return bounded8({
-        op: requireMlsLiteral(input2.op, "enrollment_proof"),
-        challenge: parseMlsDevEnrollmentChallenge(input2.challenge)
-      }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
-    }
-    if (descriptor.value === "credential_reconciliation_proof") {
-      const input2 = readMlsDataRecord(value, ["op", "challenge", "expectedCredentialGeneration"]);
-      const challenge2 = parseMlsDevCredentialReconciliationChallenge(input2.challenge);
-      const expectedCredentialGeneration2 = requireMlsInteger(input2.expectedCredentialGeneration);
-      if (challenge2.expectedCredentialGeneration !== expectedCredentialGeneration2) invalid11();
-      return bounded8({
-        op: requireMlsLiteral(input2.op, "credential_reconciliation_proof"),
-        challenge: challenge2,
-        expectedCredentialGeneration: expectedCredentialGeneration2
-      }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
-    }
-    if (descriptor.value !== "credential_proof") invalid11();
-    const input = readMlsDataRecord(value, ["op", "challenge", "registrationResult", "expectedCredentialGeneration"]);
-    const challenge = parseMlsDevCredentialChallenge(input.challenge);
-    const registrationResult = parseMlsDevEnrollmentResult(input.registrationResult);
-    const expectedCredentialGeneration = requireMlsInteger(input.expectedCredentialGeneration);
-    if (expectedCredentialGeneration >= Number.MAX_SAFE_INTEGER || challenge.credential.claims.generation !== expectedCredentialGeneration + 1 || JSON.stringify(challenge.credential.claims.device) !== JSON.stringify(registrationResult.device)) invalid11();
-    return bounded8({
-      op: requireMlsLiteral(input.op, "credential_proof"),
-      challenge,
-      registrationResult,
-      expectedCredentialGeneration
-    }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
-  });
-}
-__name(parseMlsDevDeviceCommand, "parseMlsDevDeviceCommand");
-function encoded7(value, bytes) {
-  decodeCanonicalMlsBase64Url(value, bytes);
-  return value;
-}
-__name(encoded7, "encoded");
-function wrapped(value) {
-  if (typeof value !== "string" || value.length > MLS_DEV_DEVICE_WRAPPED_STATE_MAX_BYTES || !value.startsWith("v1:")) invalid11();
-  const body = value.slice(3);
-  if (body.length < 40 || body.length % 4 !== 0 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(body)) invalid11();
-  const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-  if (body.endsWith("==") && (alphabet.indexOf(body.at(-3)) & 15) !== 0) invalid11();
-  if (!body.endsWith("==") && body.endsWith("=") && (alphabet.indexOf(body.at(-2)) & 3) !== 0) invalid11();
-  return value;
-}
-__name(wrapped, "wrapped");
-function parseMlsDevDevicePreparation(value, op) {
-  return boundary10(() => {
-    if (!["create", "enrollment_proof", "credential_proof", "credential_reconciliation_proof"].includes(op)) invalid11();
-    const input = readMlsDataRecord(value, ["wrappedState", "payload"]);
-    const payload = readMlsDataRecord(input.payload, op === "create" ? ["signaturePublicKey"] : ["signaturePublicKey", "proof"]);
-    return bounded8({ wrappedState: wrapped(input.wrappedState), payload: Object.freeze({
-      signaturePublicKey: encoded7(payload.signaturePublicKey, 32),
-      ...op === "create" ? {} : { proof: encoded7(payload.proof, 64) }
-    }) }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
-  });
-}
-__name(parseMlsDevDevicePreparation, "parseMlsDevDevicePreparation");
-
-// ../backend-contracts/src/upload-mime-types.ts
-var MIME_TYPE_RE = /^[a-z0-9.+-]+\/[a-z0-9.+-]+$/i;
-var SAFE_IMAGE_MIME_TYPES = /* @__PURE__ */ new Set([
-  "image/jpeg",
-  "image/png",
-  "image/webp",
-  "image/gif"
-]);
-var SAFE_AUDIO_MIME_TYPES = /* @__PURE__ */ new Set([
-  "audio/mp4",
-  "audio/x-m4a",
-  "audio/mpeg",
-  "audio/webm",
-  "audio/ogg",
-  "audio/wav",
-  // ADTS AAC — the future Android streamable-memo lane; harmless standalone.
-  "audio/aac"
-]);
-var SAFE_VIDEO_MIME_TYPES = /* @__PURE__ */ new Set([
-  "video/mp4",
-  "video/quicktime",
-  "video/webm",
-  "video/x-m4v"
-]);
-var SAFE_FILE_MIME_TYPES = /* @__PURE__ */ new Set([
-  "application/pdf",
-  "text/plain",
-  "text/markdown",
-  "text/x-markdown",
-  "text/csv",
-  "application/csv",
-  "application/json",
-  "application/zip",
-  "application/vnd.ms-excel",
-  "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
-]);
-var SAFE_FILE_MIME_BY_EXTENSION = {
-  csv: "text/csv",
-  json: "application/json",
-  md: "text/markdown",
-  markdown: "text/markdown",
-  pdf: "application/pdf",
-  txt: "text/plain",
-  xls: "application/vnd.ms-excel",
-  xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
-  zip: "application/zip"
-};
-var SAFE_VIDEO_MIME_BY_EXTENSION = {
-  m4v: "video/x-m4v",
-  mov: "video/quicktime",
-  mp4: "video/mp4",
-  webm: "video/webm"
-};
-var SAFE_AUDIO_MIME_BY_EXTENSION = {
-  aac: "audio/aac",
-  m4a: "audio/x-m4a",
-  mp3: "audio/mpeg",
-  oga: "audio/ogg",
-  ogg: "audio/ogg",
-  wav: "audio/wav"
 };
-function normalizeMimeType(value) {
-  if (typeof value !== "string") return null;
-  const normalized = value.split(";")[0].trim().toLowerCase();
-  if (!MIME_TYPE_RE.test(normalized)) return null;
-  if (normalized === "image/jpg") return "image/jpeg";
-  return normalized;
-}
-__name(normalizeMimeType, "normalizeMimeType");
-function inferSafeFileMimeTypeFromName(value) {
-  if (typeof value !== "string") return null;
-  const extension = value.trim().split(/[\\/]/).pop()?.split(".").pop()?.toLowerCase() ?? "";
-  return SAFE_FILE_MIME_BY_EXTENSION[extension] ?? null;
-}
-__name(inferSafeFileMimeTypeFromName, "inferSafeFileMimeTypeFromName");
-function inferSafeVideoMimeTypeFromName(value) {
-  if (typeof value !== "string") return null;
-  const extension = value.trim().split(/[\\/]/).pop()?.split(".").pop()?.toLowerCase() ?? "";
-  return SAFE_VIDEO_MIME_BY_EXTENSION[extension] ?? null;
-}
-__name(inferSafeVideoMimeTypeFromName, "inferSafeVideoMimeTypeFromName");
-function inferSafeAudioMimeTypeFromName(value) {
-  if (typeof value !== "string") return null;
-  const extension = value.trim().split(/[\\/]/).pop()?.split(".").pop()?.toLowerCase() ?? "";
-  return SAFE_AUDIO_MIME_BY_EXTENSION[extension] ?? null;
-}
-__name(inferSafeAudioMimeTypeFromName, "inferSafeAudioMimeTypeFromName");
-function shouldTrustSafeFileName(mimeType) {
-  return !mimeType || mimeType === "application/octet-stream" || mimeType === "application/vnd.ms-excel" || mimeType === "text/plain";
-}
-__name(shouldTrustSafeFileName, "shouldTrustSafeFileName");
-function classifyAllowedUploadMimeType(value) {
-  const mimeType = normalizeMimeType(value);
-  if (!mimeType) return null;
-  if (SAFE_IMAGE_MIME_TYPES.has(mimeType)) return "image";
-  if (SAFE_AUDIO_MIME_TYPES.has(mimeType)) return "audio";
-  if (SAFE_VIDEO_MIME_TYPES.has(mimeType)) return "video";
-  if (SAFE_FILE_MIME_TYPES.has(mimeType)) return "file";
-  return null;
-}
-__name(classifyAllowedUploadMimeType, "classifyAllowedUploadMimeType");
-function resolveAllowedUploadMimeType(input) {
-  const normalizedMimeType = normalizeMimeType(input.mimeType);
-  const hasExplicitMimeType = typeof input.mimeType === "string" && input.mimeType.trim().length > 0;
-  const inferredVideoMimeType = inferSafeVideoMimeTypeFromName(input.fileName);
-  const inferredAudioMimeType = inferSafeAudioMimeTypeFromName(input.fileName);
-  const inferredFileMimeType = inferSafeFileMimeTypeFromName(input.fileName);
-  if (hasExplicitMimeType && !normalizedMimeType) {
-    return null;
-  }
-  if (inferredVideoMimeType && (!normalizedMimeType || normalizedMimeType === "application/octet-stream")) {
-    return inferredVideoMimeType;
+var approvalDetailDef = {
+  type: "object",
+  required: ["label", "value"],
+  additionalProperties: false,
+  properties: {
+    label: { type: "string", minLength: 1, maxLength: VERB_LIMITS.approvalDetailLabelChars },
+    value: { type: "string", minLength: 1, maxLength: VERB_LIMITS.approvalDetailValueChars },
+    monospace: { type: "boolean" }
   }
-  if (inferredAudioMimeType && (!normalizedMimeType || normalizedMimeType === "application/octet-stream")) {
-    return inferredAudioMimeType;
+};
+var unifiedDiffDef = {
+  type: "object",
+  description: `Unified diff for file-change approvals. Server sanitizes: sensitive paths suppressed, secret tokens redacted, per-file clip ${VERB_LIMITS.diffFileBytes} bytes, total ${VERB_LIMITS.diffTotalBytes} bytes (functions/src/api/interactionApproval.ts; primitives in backend-contracts diffRedaction.ts).`,
+  required: ["files"],
+  additionalProperties: false,
+  properties: {
+    files: {
+      type: "array",
+      maxItems: VERB_LIMITS.diffFiles,
+      items: {
+        type: "object",
+        required: ["path", "status"],
+        additionalProperties: false,
+        properties: {
+          path: { type: "string", minLength: 1, maxLength: VERB_LIMITS.diffPathChars },
+          status: { enum: ["modified", "created", "deleted", "renamed"] },
+          oldPath: { type: "string", maxLength: VERB_LIMITS.diffPathChars },
+          additions: { type: "integer", minimum: 0 },
+          deletions: { type: "integer", minimum: 0 },
+          diff: { type: "string" },
+          suppressed: { type: "boolean" }
+        }
+      }
+    },
+    truncated: { type: "boolean" }
   }
-  if (inferredFileMimeType && shouldTrustSafeFileName(normalizedMimeType)) {
-    return inferredFileMimeType;
+};
+var sessionRuleDef = {
+  type: "object",
+  description: "Standing approval rule. Owner-only: the server forces allowSessionRule=false for non-owner responders.",
+  required: ["type"],
+  additionalProperties: false,
+  properties: {
+    type: { enum: ["approve-all", "approve-tool", "deny-tool"] },
+    toolPattern: { type: "string", pattern: VERB_ID_PATTERNS.sessionRuleToolPattern },
+    expiresAt: { type: ["string", "null"], description: "ISO timestamp or null." }
+  },
+  if: { properties: { type: { enum: ["approve-tool", "deny-tool"] } }, required: ["type"] },
+  then: { required: ["toolPattern"], properties: { toolPattern: true } }
+};
+var runtimeCardDef = {
+  type: "object",
+  description: `ENVELOPE-ONLY validation of a canon.card.v1 document: block structures are NOT checked here. Full document contract: @canonmsg/rich-cards RUNTIME_CARD_JSON_SCHEMA_V1 ($id https://canonmsg.com/schemas/canon.card.v1.json) \u2014 authoring caps title 120 / fallbackText 500 / blocks 24. Server envelope acceptance (interactionCard.ts): <= ${VERB_LIMITS.cardEnvelopeBytes} bytes serialized, title <= ${VERB_LIMITS.cardServerTitleChars}, fallbackText <= ${VERB_LIMITS.cardServerFallbackTextChars}, blocks <= ${VERB_LIMITS.cardServerBlocks}; no secret-bearing top-level keys.`,
+  required: ["schema", "title", "fallbackText", "blocks"],
+  additionalProperties: true,
+  properties: {
+    schema: { const: "canon.card.v1" },
+    cardId: { type: "string", pattern: VERB_ID_PATTERNS.cardId },
+    title: { type: "string", minLength: 1, maxLength: VERB_LIMITS.cardServerTitleChars },
+    fallbackText: { type: "string", minLength: 1, maxLength: VERB_LIMITS.cardServerFallbackTextChars },
+    blocks: { type: "array", minItems: 1, maxItems: VERB_LIMITS.cardServerBlocks }
   }
-  if (normalizedMimeType && classifyAllowedUploadMimeType(normalizedMimeType)) {
-    return normalizedMimeType;
+};
+var runtimeCorrelationValueDef = {
+  type: "string",
+  pattern: VERB_ID_PATTERNS.runtimeCorrelationValue,
+  maxLength: VERB_LIMITS.nativeValueChars
+};
+var runtimeMethodDef = {
+  type: "string",
+  pattern: VERB_ID_PATTERNS.runtimeMethod,
+  maxLength: VERB_LIMITS.nativeValueChars
+};
+var VERB_NATIVE_METADATA_JSON_SCHEMA = {
+  type: "object",
+  description: "Content-free runtime correlation ids. Commands, paths, prompts, summaries, and model labels are not permitted in this public envelope.",
+  maxProperties: VERB_LIMITS.nativeKeys,
+  additionalProperties: false,
+  properties: {
+    runtime: runtimeCorrelationValueDef,
+    method: runtimeMethodDef,
+    requestId: runtimeCorrelationValueDef,
+    provider: runtimeCorrelationValueDef,
+    origin: runtimeCorrelationValueDef,
+    surface: runtimeCorrelationValueDef,
+    threadId: runtimeCorrelationValueDef,
+    turnId: runtimeCorrelationValueDef,
+    runId: runtimeCorrelationValueDef,
+    itemId: runtimeCorrelationValueDef,
+    toolCallId: runtimeCorrelationValueDef,
+    approvalId: runtimeCorrelationValueDef,
+    pluginId: runtimeCorrelationValueDef,
+    sessionKey: runtimeCorrelationValueDef,
+    nodeId: runtimeCorrelationValueDef,
+    handles: {
+      type: "object",
+      maxProperties: VERB_LIMITS.nativeHandles,
+      propertyNames: { pattern: VERB_ID_PATTERNS.runtimeHandleKey },
+      additionalProperties: runtimeCorrelationValueDef
+    }
   }
-  return normalizedMimeType ? null : inferredFileMimeType;
-}
-__name(resolveAllowedUploadMimeType, "resolveAllowedUploadMimeType");
-
-// ../backend-contracts/src/messageText.ts
-var HUMAN_MESSAGE_TEXT_MAX_BYTES = 32 * 1024;
-var UTF8_ENCODER = new TextEncoder();
-
-// ../backend-contracts/src/runtimeCardFields.ts
-var RUNTIME_CARD_FIELD_TYPES = [
-  "text",
-  "textarea",
-  "select",
-  "multiSelect",
-  "boolean",
-  "date",
-  "number",
-  "currency",
-  "searchSelect",
-  "lineItems"
-];
-var RUNTIME_CARD_LINE_ITEM_COLUMN_TYPES = [
-  "text",
-  "number",
-  "currency",
-  "date",
-  "select"
-];
-
-// ../backend-contracts/src/membershipChange.ts
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-__name(isRecord, "isRecord");
-function isMembershipChangeMessage(message) {
-  return isRecord(message.metadata) && message.metadata.type === "membership_change";
-}
-__name(isMembershipChangeMessage, "isMembershipChangeMessage");
-function isNameOrId(value) {
-  return value === null || typeof value === "string" && value.trim().length > 0;
-}
-__name(isNameOrId, "isNameOrId");
-function readMembershipChangeMetadata(metadata) {
-  if (!isRecord(metadata) || metadata.type !== "membership_change" || metadata.action !== "added" && metadata.action !== "removed" && metadata.action !== "left" || !isNameOrId(metadata.actorId) || !isNameOrId(metadata.actorName) || !isNameOrId(metadata.memberId) || typeof metadata.memberName !== "string" || !metadata.memberName.trim() || !Number.isSafeInteger(metadata.membershipRevision) || Number(metadata.membershipRevision) < 1 || metadata.turnSemantics !== "control" || metadata.replyBehavior !== "suppress_auto_reply") {
-    return null;
+};
+var timeoutFields = /* @__PURE__ */ __name((maxMs, ceilingNote) => ({
+  timeoutMs: {
+    type: "integer",
+    minimum: VERB_LIMITS.minTimeoutMs,
+    maximum: maxMs,
+    description: `Relative deadline in ms (server ceiling ${ceilingNote}). expiresAt wins when both are given.`
+  },
+  expiresAt: {
+    type: "integer",
+    minimum: 0,
+    description: "Absolute epoch-ms deadline. The REST interaction creators REQUIRE a deadline (input interactions also require input subtype kind): bindings must fill defaults and convert timeoutMs into expiresAt before calling the endpoint."
   }
-  return {
-    type: "membership_change",
-    action: metadata.action,
-    actorId: metadata.actorId,
-    actorName: metadata.actorName,
-    memberId: metadata.memberId,
-    memberName: metadata.memberName,
-    membershipRevision: metadata.membershipRevision,
-    turnSemantics: "control",
-    replyBehavior: "suppress_auto_reply"
-  };
-}
-__name(readMembershipChangeMetadata, "readMembershipChangeMetadata");
-function formatMembershipChangeNotice(metadata, currentUserId) {
-  const isActor = !!currentUserId && metadata.actorId === currentUserId;
-  const isMember = !!currentUserId && metadata.memberId === currentUserId;
-  if (metadata.action === "left") {
-    return `${isMember ? "You" : metadata.memberName} left`;
-  }
-  const actor = isActor ? "You" : metadata.actorName ?? "A member";
-  const member2 = isMember ? "you" : metadata.memberName;
-  return `${actor} ${metadata.action} ${member2}`;
-}
-__name(formatMembershipChangeNotice, "formatMembershipChangeNotice");
-
-// ../backend-contracts/src/turnProtocol.ts
-var ACTIVE_TURN_STALE_THRESHOLD_MS = 30 * 60 * 1e3;
-var WAITING_INPUT_STALE_THRESHOLD_MS = 12 * 60 * 60 * 1e3;
-var TURN_SEMANTICS = [
-  "progress",
-  "turn_complete",
-  "control"
-];
-var DELIVERY_INTENTS = [
-  "queue",
-  "interrupt",
-  "interleave",
-  "stop"
-];
-function isRecord2(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-__name(isRecord2, "isRecord");
-function normalizeTurnMetadata(metadata) {
-  if (!isRecord2(metadata)) return null;
-  const turnId = typeof metadata.turnId === "string" && metadata.turnId.trim() ? metadata.turnId.trim() : null;
-  const turnSemantics = TURN_SEMANTICS.includes(metadata.turnSemantics) ? metadata.turnSemantics : void 0;
-  const deliveryIntent = DELIVERY_INTENTS.includes(metadata.deliveryIntent) ? metadata.deliveryIntent : void 0;
-  const replyBehavior = metadata.replyBehavior === "allow_auto_reply" || metadata.replyBehavior === "suppress_auto_reply" ? metadata.replyBehavior : void 0;
-  const inboundDisposition = metadata.inboundDisposition === "queued" || metadata.inboundDisposition === "accepted_now" || metadata.inboundDisposition === "interleaved" || metadata.inboundDisposition === "trigger_suppressed" || metadata.inboundDisposition === "rejected" || metadata.inboundDisposition === "cancelled" ? metadata.inboundDisposition : void 0;
-  const requestedTurnMode = typeof metadata.requestedTurnMode === "string" && /^[A-Za-z0-9_.:-]{1,80}$/.test(metadata.requestedTurnMode.trim()) ? metadata.requestedTurnMode.trim() : void 0;
-  if (!turnId && !turnSemantics && !deliveryIntent && !replyBehavior && !inboundDisposition && !requestedTurnMode) {
-    return null;
-  }
-  return {
-    ...turnId ? { turnId } : {},
-    ...turnSemantics ? { turnSemantics } : {},
-    ...deliveryIntent ? { deliveryIntent } : {},
-    ...replyBehavior ? { replyBehavior } : {},
-    ...inboundDisposition ? { inboundDisposition } : {},
-    ...requestedTurnMode ? { requestedTurnMode } : {}
-  };
-}
-__name(normalizeTurnMetadata, "normalizeTurnMetadata");
-function resolveTurnMessageSemantics(input) {
-  if (isMembershipChangeMessage(input)) return "control";
-  const turnMetadata = normalizeTurnMetadata(input.metadata);
-  if (turnMetadata?.turnSemantics) return turnMetadata.turnSemantics;
-  if (input.senderType === "human") return "turn_complete";
-  return "progress";
-}
-__name(resolveTurnMessageSemantics, "resolveTurnMessageSemantics");
-function shouldTriggerAgentTurn(input) {
-  if (isMembershipChangeMessage(input)) {
-    return { allow: false, semantics: "control", reason: "membership notices do not trigger agent replies" };
-  }
-  const semantics = resolveTurnMessageSemantics(input);
-  const turnMetadata = normalizeTurnMetadata(input.metadata);
-  if (turnMetadata?.replyBehavior === "suppress_auto_reply") {
-    return {
-      allow: false,
-      semantics,
-      reason: "metadata explicitly suppresses auto-reply"
-    };
-  }
-  if (input.senderType === "human") {
-    return {
-      allow: true,
-      semantics,
-      reason: "human messages always remain triggerable"
-    };
-  }
-  if (semantics === "progress") {
-    return {
-      allow: false,
-      semantics,
-      reason: turnMetadata?.turnSemantics === "progress" ? "non-final agent progress does not trigger other agents" : "agent messages require explicit turn_complete semantics"
-    };
-  }
-  return {
-    allow: true,
-    semantics,
-    reason: "agent message is treated as turn-complete"
-  };
-}
-__name(shouldTriggerAgentTurn, "shouldTriggerAgentTurn");
-
-// ../backend-contracts/src/agentBehaviorPolicy.ts
-var PARTICIPATION_HISTORY_FETCH_LIMIT = 50;
-var DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS = 4;
-var DEFAULT_DIRECT_MAX_CONSECUTIVE_AGENT_TURNS = 4;
-function defaultMaxConsecutiveAgentTurns(conversationType) {
-  if (conversationType === "group") {
-    return DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS;
-  }
-  if (conversationType === "direct") {
-    return DEFAULT_DIRECT_MAX_CONSECUTIVE_AGENT_TURNS;
-  }
-  return null;
-}
-__name(defaultMaxConsecutiveAgentTurns, "defaultMaxConsecutiveAgentTurns");
-var DEFAULT_POLICY = {
-  participation: {
-    style: "natural",
-    allowAgentToAgent: true,
-    allowHumanToAgent: true,
-    allowLongRunningCollaboration: true,
-    requireMentionForGroupReplies: false,
-    maxConsecutiveAgentTurns: null
+}), "timeoutFields");
+var send_to_input = {
+  type: "object",
+  description: "Message another conversation or user (admission-aware), optionally carrying a private self-context. Exactly one of targetConversationId / targetUserId / canonContactId. canonContactId is NOT a wire field: bindings resolve it via POST /admission/resolve to a targetUserId first. Projections: selfContext sends -> POST /messages/send-contextual (which requires selfContext and exactly one Canon conversation or external source); known-conversation sends without selfContext -> POST /messages/send; plain user sends -> admission resolve + create + send (the core reachOut composite). User targets resolve admission first: open targets get the message, approval-required targets get a contact request (send deferred and auto-fulfilled on approval), closed targets surface as status 'unavailable' with reason closed.",
+  additionalProperties: false,
+  properties: {
+    targetConversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
+    targetUserId: { type: "string", minLength: 1 },
+    canonContactId: { type: "string", minLength: 1 },
+    text: {
+      type: "string",
+      maxLength: VERB_LIMITS.messageTextBytes,
+      description: `<= ${VERB_LIMITS.messageTextBytes} UTF-8 bytes. Required unless messageOptions.attachments carries the content.`
+    },
+    sourceConversationId: {
+      type: "string",
+      pattern: VERB_ID_PATTERNS.runtimeId,
+      description: "Canon source; the agent must be a member. Exclusive with externalSource."
+    },
+    externalSource: {
+      type: "object",
+      required: ["kind", "integration"],
+      additionalProperties: false,
+      properties: {
+        kind: { const: "external" },
+        integration: { const: "codex" },
+        label: { type: "string", minLength: 1, maxLength: VERB_LIMITS.externalSourceLabelChars }
+      }
+    },
+    selfContext: REF("selfContext"),
+    requestMessage: {
+      type: "string",
+      maxLength: VERB_LIMITS.contactRequestNoteChars,
+      description: `Contact-request note when admission requires approval; defaults to text; senders truncate to ${VERB_LIMITS.contactRequestNoteChars} chars.`
+    },
+    sessionSelection: REF("sessionSelection"),
+    messageOptions: REF("messageOptions")
   },
-  instructions: [],
-  source: {
-    hasAgentDefault: false,
-    hasConversationOverride: false
-  }
+  oneOf: [
+    { required: ["targetConversationId"], properties: { targetConversationId: true } },
+    { required: ["targetUserId"], properties: { targetUserId: true } },
+    { required: ["canonContactId"], properties: { canonContactId: true } }
+  ],
+  allOf: [
+    {
+      if: { required: ["selfContext"], properties: { selfContext: true } },
+      then: { oneOf: [
+        { required: ["sourceConversationId"], properties: { sourceConversationId: true } },
+        { required: ["externalSource"], properties: { externalSource: true } }
+      ] }
+    },
+    { if: { required: ["externalSource"], properties: { externalSource: true } }, then: { required: ["selfContext"], properties: { selfContext: true } } }
+  ]
 };
-function coalesceBoolean(overrideValue, fallbackValue, defaultValue) {
-  if (typeof overrideValue === "boolean") return overrideValue;
-  if (typeof fallbackValue === "boolean") return fallbackValue;
-  return defaultValue;
-}
-__name(coalesceBoolean, "coalesceBoolean");
-function normalizeAgentBehaviorInstructions(value) {
-  if (typeof value !== "string") return null;
-  const trimmed = value.trim();
-  return trimmed.length > 0 ? trimmed : null;
-}
-__name(normalizeAgentBehaviorInstructions, "normalizeAgentBehaviorInstructions");
-function resolveAgentBehaviorPolicy(params) {
-  const agentDefault = params?.agentDefault ?? null;
-  const conversationOverride = params?.conversationOverride ?? null;
-  const defaultInstructions = normalizeAgentBehaviorInstructions(agentDefault?.instructions);
-  const overrideInstructions = normalizeAgentBehaviorInstructions(conversationOverride?.instructions);
-  return {
-    participation: {
-      style: conversationOverride?.participationStyle ?? agentDefault?.participationStyle ?? DEFAULT_POLICY.participation.style,
-      allowAgentToAgent: coalesceBoolean(
-        conversationOverride?.allowAgentToAgent,
-        agentDefault?.allowAgentToAgent,
-        DEFAULT_POLICY.participation.allowAgentToAgent
-      ),
-      allowHumanToAgent: DEFAULT_POLICY.participation.allowHumanToAgent,
-      allowLongRunningCollaboration: coalesceBoolean(
-        conversationOverride?.allowLongRunningCollaboration,
-        agentDefault?.allowLongRunningCollaboration,
-        DEFAULT_POLICY.participation.allowLongRunningCollaboration
-      ),
-      requireMentionForGroupReplies: coalesceBoolean(
-        conversationOverride?.requireMentionForGroupReplies,
-        agentDefault?.requireMentionForGroupReplies,
-        DEFAULT_POLICY.participation.requireMentionForGroupReplies
-      ),
-      maxConsecutiveAgentTurns: conversationOverride?.maxConsecutiveAgentTurns !== void 0 ? conversationOverride.maxConsecutiveAgentTurns ?? null : agentDefault?.maxConsecutiveAgentTurns !== void 0 ? agentDefault.maxConsecutiveAgentTurns ?? null : defaultMaxConsecutiveAgentTurns(params?.conversationType)
+var send_to_result = {
+  description: "Canonical outcome vocabulary.",
+  oneOf: [
+    {
+      type: "object",
+      required: ["status", "conversationId"],
+      additionalProperties: true,
+      properties: {
+        status: { const: "messaged" },
+        conversationId: { type: "string" },
+        messageId: { type: "string" },
+        selfContextId: { type: "string" },
+        created: { type: "boolean" },
+        reused: { type: "boolean" },
+        sessionSelection: { type: "string" }
+      }
     },
-    instructions: [
-      ...defaultInstructions ? [defaultInstructions] : [],
-      ...overrideInstructions ? [overrideInstructions] : []
-    ],
-    source: {
-      hasAgentDefault: agentDefault != null,
-      hasConversationOverride: conversationOverride != null
-    }
-  };
-}
-__name(resolveAgentBehaviorPolicy, "resolveAgentBehaviorPolicy");
-function toHistorySenderType(message) {
-  if (isMembershipChangeMessage(message)) return null;
-  if (message.senderType !== "ai_agent") {
-    return "human";
-  }
-  return shouldTriggerAgentTurn({
-    senderType: "ai_agent",
-    metadata: message.metadata
-  }).allow ? "ai_agent" : null;
-}
-__name(toHistorySenderType, "toHistorySenderType");
-function buildParticipationHistorySnapshotFromSenderTypes(recentSenderTypes) {
-  let consecutiveAgentTurns = 0;
-  for (const senderType of recentSenderTypes) {
-    if (senderType !== "ai_agent") break;
-    consecutiveAgentTurns += 1;
-  }
-  return {
-    recentSenderTypes,
-    recentHumanCount: recentSenderTypes.filter((senderType) => senderType === "human").length,
-    recentAgentCount: recentSenderTypes.filter((senderType) => senderType === "ai_agent").length,
-    consecutiveAgentTurns,
-    currentAgentStreakStartedByHuman: consecutiveAgentTurns > 0 && recentSenderTypes[consecutiveAgentTurns] === "human"
-  };
-}
-__name(buildParticipationHistorySnapshotFromSenderTypes, "buildParticipationHistorySnapshotFromSenderTypes");
-function buildParticipationHistorySnapshot(messages, agentId) {
-  void agentId;
-  const recentSenderTypes = messages.flatMap((message) => {
-    const senderType = toHistorySenderType(message);
-    return senderType ? [senderType] : [];
-  });
-  return buildParticipationHistorySnapshotFromSenderTypes(recentSenderTypes);
-}
-__name(buildParticipationHistorySnapshot, "buildParticipationHistorySnapshot");
-function evaluateParticipationPolicy(policy, input) {
-  const resolved = policy ?? resolveAgentBehaviorPolicy({ conversationType: input.conversationType });
-  const participation = resolved.participation;
-  const priorAgentTurns = Math.max(input.consecutiveAgentTurns ?? 0, 0);
-  const agentTurnsWithCurrent = priorAgentTurns + (input.senderType === "ai_agent" ? 1 : 0);
-  const consecutiveAgentTurns = Math.max(
-    priorAgentTurns,
-    input.senderType === "ai_agent" ? 1 : 0
-  );
-  const currentAgentStreakStartedByHuman = input.currentAgentStreakStartedByHuman === true;
-  if (input.conversationType === "group" && participation.requireMentionForGroupReplies && !input.mentionedAgent) {
-    return {
-      allow: false,
-      reasonCode: "group_mention_required",
-      reason: "group replies require a direct mention"
-    };
-  }
-  if (input.isOwner) {
-    return {
-      allow: true,
-      reasonCode: "owner_sender",
-      reason: "owner messages pass through outside mention-required group turns"
-    };
-  }
-  if (input.senderType !== "ai_agent") {
-    return { allow: true, reasonCode: "human_sender", reason: "latest sender is human" };
-  }
-  if (!participation.allowAgentToAgent) {
-    return {
-      allow: false,
-      reasonCode: "agent_to_agent_disabled",
-      reason: "agent-to-agent participation is disabled by policy"
-    };
-  }
-  if (!participation.allowLongRunningCollaboration && (consecutiveAgentTurns > 1 || !currentAgentStreakStartedByHuman)) {
-    return {
-      allow: false,
-      reasonCode: "human_reset_required",
-      reason: "a fresh human steer is required before continuing agent collaboration"
-    };
+    {
+      type: "object",
+      required: ["status", "conversationId", "messageId", "openingText"],
+      additionalProperties: true,
+      description: "The room is encrypted, so Canon stored no opening text: the sender sends it encrypted under messageId.",
+      properties: {
+        status: { const: "opened" },
+        conversationId: { type: "string" },
+        messageId: { type: "string" },
+        openingText: { const: "deferred" },
+        created: { type: "boolean" },
+        reused: { type: "boolean" }
+      }
+    },
+    {
+      type: "object",
+      required: ["status", "requestId"],
+      additionalProperties: true,
+      properties: {
+        status: { enum: ["requested", "pending"] },
+        requestId: { type: ["string", "null"] },
+        deferredIntentId: {
+          type: ["string", "null"],
+          description: "Present when the send is deferred until the contact request resolves."
+        },
+        conversationId: { type: "string" },
+        messageId: { type: "string" },
+        openingText: {
+          const: "deferred",
+          description: "The room is encrypted, so Canon stored no opening text: the sender sends it encrypted under messageId."
+        }
+      }
+    },
+    {
+      type: "object",
+      required: ["status", "reason"],
+      additionalProperties: true,
+      properties: {
+        status: { enum: ["setup_required", "no_session", "blocked", "unavailable"] },
+        reason: { type: "string" }
+      }
+    }
+  ]
+};
+var request_input_input = {
+  type: "object",
+  description: `Ask a human a structured question mid-turn (HITL input card). sudo/secret kinds, sensitive:true, or any isSecret question force owner-only routing server-side; bindings must not let the model redirect the responder for those. Ceiling ${VERB_LIMITS.maxTimeoutMs / 6e4} minutes.`,
+  additionalProperties: false,
+  properties: {
+    conversationId: {
+      type: "string",
+      pattern: VERB_ID_PATTERNS.runtimeId,
+      description: "Bindings default to the active conversation."
+    },
+    inputId: {
+      type: "string",
+      pattern: VERB_ID_PATTERNS.runtimeId,
+      description: "Durable single-use id (reuse -> 409); generated when omitted."
+    },
+    kind: { enum: ["clarify", "sudo", "secret"], default: "clarify" },
+    title: { type: "string", maxLength: VERB_LIMITS.inputTitleChars },
+    prompt: { type: "string", maxLength: VERB_LIMITS.inputPromptChars },
+    choices: { type: "array", maxItems: VERB_LIMITS.inputChoices, items: REF("inputChoice") },
+    questions: { type: "array", maxItems: VERB_LIMITS.inputQuestions, items: REF("inputQuestion") },
+    secretName: { type: "string", maxLength: VERB_LIMITS.inputSecretNameChars },
+    sensitive: { type: "boolean" },
+    responseUserId: {
+      type: "string",
+      pattern: VERB_ID_PATTERNS.runtimeId,
+      description: "Must be a human conversation member. Trust-critical bindings derive this from turn provenance and ignore model-supplied values."
+    },
+    native: REF("native"),
+    turnId: { type: "string", maxLength: VERB_LIMITS.turnIdChars },
+    ...timeoutFields(VERB_LIMITS.maxTimeoutMs, "30 minutes")
   }
-  if (typeof participation.maxConsecutiveAgentTurns === "number" && participation.maxConsecutiveAgentTurns >= 0 && agentTurnsWithCurrent >= participation.maxConsecutiveAgentTurns) {
-    return {
-      allow: false,
-      reasonCode: "agent_turn_limit_reached",
-      reason: "maximum consecutive agent turns reached"
-    };
+};
+var request_input_result = {
+  oneOf: [
+    {
+      type: "object",
+      required: ["status", "inputId", "value"],
+      additionalProperties: true,
+      properties: {
+        status: { const: "submitted" },
+        inputId: { type: "string" },
+        value: { type: "string", description: "Free-text answer ('' when structured answers were used)." },
+        answers: {
+          type: "object",
+          description: "Structured answers keyed by question id.",
+          additionalProperties: {
+            type: "object",
+            required: ["answers"],
+            properties: { answers: { type: "array", items: { type: "string" } } }
+          }
+        }
+      }
+    },
+    {
+      type: "object",
+      required: ["status", "inputId"],
+      additionalProperties: true,
+      properties: {
+        status: { enum: ["cancelled", "timeout"] },
+        inputId: { type: "string" }
+      }
+    }
+  ]
+};
+var request_approval_input = {
+  type: "object",
+  description: `Ask a human to allow/deny an action. mode 'blocking' (default) waits inside the verb call; mode 'detached' returns pending immediately \u2014 fetch the decision later with check_approval. Approval deadline ceiling is ${VERB_LIMITS.maxApprovalTimeoutMs / 36e5} hours (other kinds: 30 minutes). Timeouts fail closed to deny.`,
+  required: ["toolName", "toolSummary"],
+  additionalProperties: false,
+  properties: {
+    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
+    approvalId: {
+      type: "string",
+      pattern: VERB_ID_PATTERNS.runtimeId,
+      description: "Durable single-use id; server-generated when omitted."
+    },
+    toolName: { type: "string", minLength: 1, maxLength: VERB_LIMITS.toolNameChars },
+    toolSummary: {
+      type: "string",
+      minLength: 1,
+      maxLength: VERB_LIMITS.toolSummaryChars,
+      description: "Pre-redact secrets \u2014 this renders to humans."
+    },
+    mode: { enum: ["blocking", "detached"], default: "blocking" },
+    riskLevel: {
+      enum: ["normal", "destructive"],
+      description: "Server accepts only these values; others are silently dropped, not rejected."
+    },
+    risk: {
+      enum: ["low", "normal", "high", "destructive"],
+      description: "Advisory; server stores any string <= 64 chars today."
+    },
+    category: {
+      enum: ["command", "file", "network", "browser", "mcp", "plugin", "canon", "tool"],
+      description: "Advisory; server stores any string <= 64 chars today."
+    },
+    details: { type: "array", maxItems: VERB_LIMITS.approvalDetails, items: REF("approvalDetail") },
+    diff: REF("unifiedDiff"),
+    native: REF("native"),
+    runtimeId: { type: "string", maxLength: VERB_LIMITS.turnIdChars },
+    turnId: { type: "string", maxLength: VERB_LIMITS.turnIdChars },
+    responseUserId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
+    allowSessionRule: {
+      type: "boolean",
+      description: "Server forces false when the responder is not the agent owner."
+    },
+    ...timeoutFields(VERB_LIMITS.maxApprovalTimeoutMs, "72 hours")
   }
-  return {
-    allow: true,
-    reasonCode: input.conversationType === "group" ? "group_agent_allowed" : "direct_agent_allowed",
-    reason: participation.requireMentionForGroupReplies ? "policy allows this directly mentioned group reply" : "agent-to-agent participation allowed by policy"
-  };
-}
-__name(evaluateParticipationPolicy, "evaluateParticipationPolicy");
-
-// ../backend-contracts/src/agentDirectory.ts
-var MAX_DISCOVER_AGENTS_QUERY_LENGTH = 64;
-
-// ../backend-contracts/src/verbContract.ts
-var CANON_VERBS_SCHEMA_ID = "https://canonmsg.com/schemas/canon.verbs.v1.json";
-var VERB_ID_PATTERNS = {
-  runtimeId: "^[A-Za-z0-9_.:-]{1,160}$",
-  cardId: "^[A-Za-z0-9_.:-]{1,80}$",
-  actionId: "^[A-Za-z0-9_.:-]{1,80}$",
-  questionId: "^[A-Za-z0-9_.:-]{1,120}$",
-  sessionRuleToolPattern: "^[\\w.*:-]{1,128}$",
-  runtimeCorrelationValue: "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
-  runtimeMethod: "^[A-Za-z0-9_][A-Za-z0-9_./:\\-]{0,255}$",
-  runtimeHandleKey: "^[A-Za-z0-9_.:-]{1,80}$",
-  /** UUID issued by Canon's resumable-media session endpoint. */
-  resumableUploadId: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
 };
-var VERB_LIMITS = {
-  /** Message text — UTF-8 bytes (functions/src/api/sendMessage.ts MAX_MESSAGE_TEXT_BYTES). */
-  messageTextBytes: 4096,
-  /**
-   * Serialized metadata JSON length in UTF-16 code units — the server checks
-   * JSON.stringify(metadata).length, not bytes (sendMessage.ts:716-724 inline;
-   * parseBody.ts maxJsonBytes despite the name).
-   */
-  messageMetadataJsonChars: 4096,
-  /** Attachments per message (sendMessage.ts MAX_MESSAGE_ATTACHMENTS). */
-  messageAttachments: 10,
-  /** Client-supplied messageId — chars and UTF-8 bytes (sendMessage.ts). */
-  messageIdChars: 160,
-  messageIdBytes: 256,
-  /** Self-context note (functions/src/utils/selfContexts.ts SELF_CONTEXT_CONTEXT_LIMIT). */
-  selfContextChars: 1e3,
-  /** Short private description of an external working context. */
-  externalSourceLabelChars: 80,
-  /**
-   * Contact-request note. Values longer than this are truncated by senders
-   * (slice(0,497)+'...'); this constant is the canonical figure.
-   */
-  contactRequestNoteChars: 500,
-  /** Group membership cap incl. creator (functions/src/utils/conversations.ts MAX_GROUP_MEMBERS). */
-  groupMembers: 50,
-  /** Runtime input (functions/src/api/interactionInput.ts). */
-  inputTitleChars: 160,
-  inputPromptChars: 4e3,
-  inputChoices: 12,
-  inputChoiceLabelChars: 120,
-  inputChoiceValueChars: 200,
-  inputChoiceDescriptionChars: 300,
-  inputQuestions: 12,
-  inputQuestionChars: 1e3,
-  inputQuestionHeaderChars: 120,
-  inputSecretNameChars: 160,
-  inputAnswerChars: 8192,
-  /** Approval (functions/src/api/interactionApproval.ts). */
-  toolNameChars: 128,
-  toolSummaryChars: 1e3,
-  approvalDetails: 8,
-  approvalDetailLabelChars: 80,
-  approvalDetailValueChars: 500,
-  diffFiles: 100,
-  diffPathChars: 1024,
-  diffFileBytes: 24 * 1024,
-  diffTotalBytes: 96 * 1024,
-  /** Card envelope acceptance (functions/src/api/interactionCard.ts — server caps;
-   * authoring caps in @canonmsg/rich-cards are stricter: title 120, fallback 500, blocks 24). */
-  cardEnvelopeBytes: 32 * 1024,
-  cardServerTitleChars: 200,
-  cardServerFallbackTextChars: 2e3,
-  cardServerBlocks: 64,
-  /** Response-values caps enforced on submit (callable respondToInteraction.ts
-   * MAX_VALUES_BYTES/MAX_VALUES_DEPTH; interactionCard.ts re-checks bytes on
-   * consume via MAX_REPLY_BYTES). */
-  cardValuesBytes: 8 * 1024,
-  cardValuesDepth: 8,
-  /** Native correlation metadata (functions/src/api/interactionKinds.ts normalizeNative). */
-  nativeKeys: 24,
-  nativeValueChars: 256,
-  nativeHandles: 16,
-  /** Deadlines (functions/src/utils/runtimeRequestHelpers.ts). */
-  minTimeoutMs: 1e3,
-  /** input/card/plan ceiling (30 minutes). */
-  maxTimeoutMs: 30 * 60 * 1e3,
-  /** approval-only ceiling (72 hours — owner ruling 2026-07-10). */
-  maxApprovalTimeoutMs: 72 * 60 * 60 * 1e3,
-  /** turnId / runtimeId fields on interaction creators. */
-  turnIdChars: 128,
-  /** Reaction key (functions/src/api/reactToMessage.ts normalizeReactionKey). */
-  reactionEmojiChars: 64,
-  /**
-   * Group name authoring cap (enforced on rename via updateNameServer; group
-   * CREATE does not length-check today — treat as the authoring contract).
-   */
-  groupNameChars: 100,
-  /**
-   * `no_reply.reason` authoring cap. There is no server enforcement beyond the
-   * intent schema — the handler logs the reason's presence and nothing else —
-   * so this constant is the canonical figure.
-   */
-  noReplyReasonChars: 500
+var request_approval_result = {
+  oneOf: [
+    {
+      type: "object",
+      required: ["status", "approvalId"],
+      additionalProperties: true,
+      properties: {
+        status: { const: "allow" },
+        approvalId: { type: "string" },
+        sessionRule: REF("sessionRule"),
+        respondedBy: { type: "string", description: "Canon-authenticated responder userId." }
+      }
+    },
+    {
+      type: "object",
+      required: ["status", "approvalId"],
+      additionalProperties: true,
+      properties: {
+        status: { const: "deny" },
+        approvalId: { type: "string" },
+        sessionRule: REF("sessionRule"),
+        respondedBy: { type: "string" }
+      }
+    },
+    {
+      type: "object",
+      required: ["status", "approvalId"],
+      additionalProperties: true,
+      properties: { status: { const: "timeout" }, approvalId: { type: "string" } }
+    },
+    {
+      type: "object",
+      description: "Detached acceptance \u2014 the decision arrives via check_approval.",
+      required: ["status", "approvalId", "expiresAt"],
+      additionalProperties: true,
+      properties: {
+        status: { const: "pending" },
+        approvalId: { type: "string" },
+        conversationId: { type: "string" },
+        expiresAt: { type: "integer" },
+        responseUserId: { type: "string" }
+      }
+    }
+  ]
 };
-var SELF_CONTEXT_TYPE = "cross_session";
-var CANON_VERB_NAMES = [
-  "send_to",
-  "request_input",
-  "request_approval",
-  "check_approval",
-  "send_card",
-  "request_card",
-  "share_contact",
-  "react",
-  "forward",
-  "create_group",
-  "add_member",
-  "remove_member",
-  "leave_conversation",
-  "list_contacts",
-  "list_conversations",
-  "no_reply"
-];
-var VERB_NATIVE_METADATA_KEYS = [
-  "runtime",
-  "method",
-  "requestId",
-  "provider",
-  "origin",
-  "surface",
-  "threadId",
-  "turnId",
-  "runId",
-  "itemId",
-  "toolCallId",
-  "approvalId",
-  "pluginId",
-  "sessionKey",
-  "nodeId",
-  "handles"
-];
-var VERB_NATIVE_STRING_KEYS = VERB_NATIVE_METADATA_KEYS.filter(
-  (key) => key !== "handles"
-);
-var RUNTIME_CORRELATION_VALUE_PATTERN = new RegExp(
-  VERB_ID_PATTERNS.runtimeCorrelationValue
-);
-var RUNTIME_METHOD_PATTERN = new RegExp(VERB_ID_PATTERNS.runtimeMethod);
-var RUNTIME_HANDLE_KEY_PATTERN = new RegExp(VERB_ID_PATTERNS.runtimeHandleKey);
-var NO_REPLY_ACK_NOTE = "Acknowledged \u2014 nothing was posted to the conversation.";
-
-// ../backend-contracts/src/verbSchemas.ts
-var REF = /* @__PURE__ */ __name((def) => ({ $ref: `#/$defs/${def}` }), "REF");
-var selfContextDef = {
+var check_approval_input = {
   type: "object",
-  description: "Private note-to-self attached to a cross-conversation send. Visible only to the sending agent (surfaced back as provenance.activeSelfContext); never shown to recipients. Enforced by functions/src/utils/selfContexts.ts.",
-  required: ["type", "context"],
+  description: "Fetch the decision of a detached approval. Consume is idempotent within the replay window: a resolved decision replays for up to 72h after first consume, then the id becomes unknown. Bindings must bind the check to the conversation that created the approval.",
+  required: ["approvalId"],
   additionalProperties: false,
   properties: {
-    type: { const: SELF_CONTEXT_TYPE },
-    context: {
-      type: "string",
-      minLength: 1,
-      maxLength: VERB_LIMITS.selfContextChars,
-      description: "What future-you needs to know about this transfer."
-    }
+    approvalId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
+    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId }
   }
 };
-var sessionSelectionDef = {
-  description: "How to pick the conversation when targeting a user whose chats are session-shaped (agent targets). Canon default for user-targeted sends: continue_or_create.",
+var check_approval_result = {
+  description: "'unknown' is NOT a denial \u2014 only 'resolved' carries a decision. Canonical statuses map from the approval interaction consume result as: allow/deny -> resolved.decision, timeout -> expired, pending -> pending, HTTP 404 RUNTIME_APPROVAL_NOT_FOUND -> unknown.",
   oneOf: [
     {
       type: "object",
-      required: ["mode"],
-      additionalProperties: false,
-      properties: { mode: { enum: ["new", "continue_latest", "continue_or_create"] } }
+      required: ["status", "approvalId", "decision"],
+      additionalProperties: true,
+      properties: {
+        status: { const: "resolved" },
+        approvalId: { type: "string" },
+        decision: { enum: ["allow", "deny"] },
+        respondedBy: { type: "string" },
+        conversationId: { type: "string" }
+      }
     },
     {
       type: "object",
-      required: ["mode", "conversationId"],
-      additionalProperties: false,
+      required: ["status", "approvalId"],
+      additionalProperties: true,
       properties: {
-        mode: { const: "specific" },
-        conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId }
+        status: { enum: ["pending", "expired", "unknown"] },
+        approvalId: { type: "string" },
+        expiresAt: { type: "integer" },
+        conversationId: { type: "string" }
       }
     }
   ]
 };
-var mediaAttachmentDef = {
+var send_card_input = {
   type: "object",
-  required: ["kind", "url"],
+  description: "Display a card with no actions \u2014 fire-and-forget, no pending state, no deadline.",
+  required: ["card"],
   additionalProperties: false,
   properties: {
-    kind: { enum: ["image", "audio", "video", "file"] },
-    url: {
-      type: "string",
-      minLength: 1,
-      description: "Must come from a canonical Canon upload/finalization response or the GIF picker \u2014 server allowlist, fail-closed (functions/src/utils/mediaUploadSafety.ts)."
-    },
-    uploadId: {
-      type: "string",
-      pattern: VERB_ID_PATTERNS.resumableUploadId,
-      description: "Server-issued resumable identity. Preserve it from finalization so the durable message transaction can validate and retain initially temporary media."
-    },
-    mimeType: { type: "string" },
-    fileName: { type: "string" },
-    sizeBytes: { type: "number", minimum: 0 },
-    width: { type: "number", minimum: 0 },
-    height: { type: "number", minimum: 0 },
-    durationMs: { type: "number", minimum: 0 },
-    thumbnailUrl: { type: "string", minLength: 1 },
-    processingStatus: { enum: ["processing", "ready", "failed"] },
-    processingErrorCode: {
-      enum: ["invalid_video", "video_limits_exceeded", "video_processing_failed"]
-    }
+    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
+    card: REF("runtimeCard"),
+    cardId: { type: "string", pattern: VERB_ID_PATTERNS.cardId },
+    native: REF("native"),
+    runtimeId: { type: "string", maxLength: VERB_LIMITS.turnIdChars },
+    turnId: { type: "string", maxLength: VERB_LIMITS.turnIdChars }
   }
 };
-var turnMetadataDef = {
+var send_card_result = {
   type: "object",
-  description: `Free-form metadata envelope; JSON.stringify length <= ${VERB_LIMITS.messageMetadataJsonChars} UTF-16 code units (functions/src/api/sendMessage.ts checks string length, not bytes). Well-known turn-protocol keys below (authoritative type: turnProtocol.ts TurnMetadata, which also carries requestedTurnMode); receipt metadata.type values are server-owned and rejected.`,
+  required: ["status", "cardId"],
   additionalProperties: true,
   properties: {
-    turnId: { type: ["string", "null"] },
-    turnSemantics: { enum: ["progress", "turn_complete", "control"] },
-    deliveryIntent: {
-      enum: ["queue", "interrupt", "interleave", "stop"],
-      description: "What the recipient runtime should do if the message lands mid-turn. Default queue."
-    },
-    replyBehavior: { enum: ["allow_auto_reply", "suppress_auto_reply"] }
+    status: { const: "displayed" },
+    cardId: { type: "string" },
+    conversationId: { type: "string" },
+    responseUserId: { type: "string" }
   }
 };
-var messageIdDef = {
-  type: "string",
-  pattern: VERB_ID_PATTERNS.runtimeId,
-  not: {
-    pattern: "^(\\.{1,2}|__.*__)$",
-    description: "Reserved forms the server 400s: '.', '..', and __x__ ids."
-  },
-  description: `Client idempotency key (<= ${VERB_LIMITS.messageIdChars} chars / ${VERB_LIMITS.messageIdBytes} UTF-8 bytes; no slashes, control chars, '.', '..', __x__). Same id + identical payload replays idempotently; different payload -> 409 MESSAGE_ID_EXISTS.`
-};
-var messageOptionsDef = {
+var request_card_input = {
   type: "object",
-  description: "Message composition options (mirrors POST /messages/send). Deliberately absent: contact_card contentType (use share_contact) and forwarded/forwardedFrom (forwarding has its own verb \u2014 use forward, not send_to).",
+  description: `Show an interactive card (>= 1 actions block required) and wait for the response. Deadline ceiling ${VERB_LIMITS.maxTimeoutMs / 6e4} minutes.`,
+  required: ["card"],
   additionalProperties: false,
   properties: {
-    messageId: REF("messageId"),
-    contentType: {
-      enum: ["text", "image", "audio", "video", "file"],
-      description: "Derived from attachments when omitted. contact_card is deliberately excluded here \u2014 use the share_contact verb."
+    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
+    card: REF("runtimeCard"),
+    cardId: { type: "string", pattern: VERB_ID_PATTERNS.cardId },
+    responseUserId: {
+      type: "string",
+      pattern: VERB_ID_PATTERNS.runtimeId,
+      description: "Must be a human conversation member; defaults to the turn-triggering human (trust-critical bindings ignore model-supplied values)."
     },
-    attachments: {
-      type: "array",
-      maxItems: VERB_LIMITS.messageAttachments,
-      items: REF("mediaAttachment")
+    native: REF("native"),
+    runtimeId: { type: "string", maxLength: VERB_LIMITS.turnIdChars },
+    turnId: { type: "string", maxLength: VERB_LIMITS.turnIdChars },
+    ...timeoutFields(VERB_LIMITS.maxTimeoutMs, "30 minutes")
+  }
+};
+var request_card_result = {
+  oneOf: [
+    {
+      type: "object",
+      required: ["status", "cardId"],
+      additionalProperties: true,
+      properties: {
+        status: { const: "submitted" },
+        cardId: { type: "string" },
+        actionId: { type: "string" },
+        values: {
+          type: "object",
+          description: `Validated server-side against the card's actionFields (validateRuntimeCardFieldValues); <= ${VERB_LIMITS.cardValuesBytes} bytes, depth <= ${VERB_LIMITS.cardValuesDepth}.`
+        },
+        respondedBy: {
+          type: "string",
+          description: "Canon-authenticated responder (server-verified vs responseUserId)."
+        }
+      }
     },
-    mentions: {
-      type: "array",
-      items: { type: "string" },
-      description: "Member userIds; every id must be a conversation member (400 otherwise)."
+    {
+      type: "object",
+      required: ["status", "cardId"],
+      additionalProperties: true,
+      properties: {
+        status: { const: "cancelled" },
+        cardId: { type: "string" },
+        respondedBy: { type: "string" }
+      }
     },
-    replyTo: { type: "string", description: "Message id being replied to (not existence-validated)." },
-    replyToPosition: { type: "integer" },
-    metadata: REF("turnMetadata")
-  }
+    {
+      type: "object",
+      required: ["status", "cardId"],
+      additionalProperties: true,
+      properties: { status: { const: "timeout" }, cardId: { type: "string" } }
+    }
+  ]
 };
-var inputChoiceDef = {
+var share_contact_input = {
   type: "object",
-  required: ["label"],
+  description: "Share a contact card into a conversation (POST /messages/send, contentType 'contact_card'). The shared user must be in the sending agent's contacts (403 otherwise; the owner shortcut applies only to human senders sharing their own agents). The server snapshots the card.",
+  required: ["conversationId", "contactUserId"],
   additionalProperties: false,
   properties: {
-    label: { type: "string", minLength: 1, maxLength: VERB_LIMITS.inputChoiceLabelChars },
-    value: { type: "string", maxLength: VERB_LIMITS.inputChoiceValueChars },
-    description: { type: "string", maxLength: VERB_LIMITS.inputChoiceDescriptionChars }
+    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
+    contactUserId: { type: "string", minLength: 1 },
+    text: { type: "string", maxLength: VERB_LIMITS.messageTextBytes },
+    messageId: REF("messageId")
   }
 };
-var inputQuestionDef = {
+var share_contact_result = {
   type: "object",
-  required: ["id", "question"],
-  additionalProperties: false,
+  required: ["status", "messageId"],
+  additionalProperties: true,
   properties: {
-    id: { type: "string", pattern: VERB_ID_PATTERNS.questionId },
-    question: { type: "string", minLength: 1, maxLength: VERB_LIMITS.inputQuestionChars },
-    header: { type: "string", maxLength: VERB_LIMITS.inputQuestionHeaderChars },
-    choices: { type: "array", maxItems: VERB_LIMITS.inputChoices, items: REF("inputChoice") },
-    allowOther: { type: "boolean" },
-    isSecret: {
-      type: "boolean",
-      description: "Forces owner-only routing for the whole request."
-    },
-    multiSelect: { type: "boolean" }
+    status: { const: "shared" },
+    messageId: { type: "string" }
   }
 };
-var approvalDetailDef = {
+var react_input = {
   type: "object",
-  required: ["label", "value"],
+  description: "Toggle an emoji reaction on a message (server-side atomic toggle; functions/src/api/reactToMessage.ts).",
+  required: ["conversationId", "messageId", "emoji"],
   additionalProperties: false,
   properties: {
-    label: { type: "string", minLength: 1, maxLength: VERB_LIMITS.approvalDetailLabelChars },
-    value: { type: "string", minLength: 1, maxLength: VERB_LIMITS.approvalDetailValueChars },
-    monospace: { type: "boolean" }
+    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
+    messageId: { type: "string", minLength: 1 },
+    emoji: {
+      type: "string",
+      minLength: 1,
+      maxLength: VERB_LIMITS.reactionEmojiChars,
+      description: "Reaction key. Content-adjacent (D5) \u2014 rides the wire body."
+    }
   }
 };
-var unifiedDiffDef = {
+var react_result = {
   type: "object",
-  description: `Unified diff for file-change approvals. Server sanitizes: sensitive paths suppressed, secret tokens redacted, per-file clip ${VERB_LIMITS.diffFileBytes} bytes, total ${VERB_LIMITS.diffTotalBytes} bytes (functions/src/api/interactionApproval.ts; primitives in backend-contracts diffRedaction.ts).`,
-  required: ["files"],
-  additionalProperties: false,
+  required: ["status", "action"],
+  additionalProperties: true,
   properties: {
-    files: {
-      type: "array",
-      maxItems: VERB_LIMITS.diffFiles,
-      items: {
-        type: "object",
-        required: ["path", "status"],
-        additionalProperties: false,
-        properties: {
-          path: { type: "string", minLength: 1, maxLength: VERB_LIMITS.diffPathChars },
-          status: { enum: ["modified", "created", "deleted", "renamed"] },
-          oldPath: { type: "string", maxLength: VERB_LIMITS.diffPathChars },
-          additions: { type: "integer", minimum: 0 },
-          deletions: { type: "integer", minimum: 0 },
-          diff: { type: "string" },
-          suppressed: { type: "boolean" }
-        }
-      }
-    },
-    truncated: { type: "boolean" }
+    status: { const: "reacted" },
+    action: { enum: ["added", "removed"] },
+    reactions: { type: "object" }
   }
 };
-var sessionRuleDef = {
+var forward_input = {
   type: "object",
-  description: "Standing approval rule. Owner-only: the server forces allowSessionRule=false for non-owner responders.",
-  required: ["type"],
+  description: "Forward an existing message into another conversation. Under E2EE this becomes client-side re-encrypt; only routing ids + an optional caption cross the wire.",
+  required: ["sourceConversationId", "targetConversationId", "messageId"],
   additionalProperties: false,
   properties: {
-    type: { enum: ["approve-all", "approve-tool", "deny-tool"] },
-    toolPattern: { type: "string", pattern: VERB_ID_PATTERNS.sessionRuleToolPattern },
-    expiresAt: { type: ["string", "null"], description: "ISO timestamp or null." }
-  },
-  if: { properties: { type: { enum: ["approve-tool", "deny-tool"] } }, required: ["type"] },
-  then: { required: ["toolPattern"], properties: { toolPattern: true } }
+    sourceConversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
+    targetConversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
+    messageId: { type: "string", minLength: 1 },
+    text: {
+      type: "string",
+      maxLength: VERB_LIMITS.messageTextBytes,
+      description: `Optional caption; <= ${VERB_LIMITS.messageTextBytes} UTF-8 bytes.`
+    }
+  }
 };
-var runtimeCardDef = {
+var forward_result = {
   type: "object",
-  description: `ENVELOPE-ONLY validation of a canon.card.v1 document: block structures are NOT checked here. Full document contract: @canonmsg/rich-cards RUNTIME_CARD_JSON_SCHEMA_V1 ($id https://canonmsg.com/schemas/canon.card.v1.json) \u2014 authoring caps title 120 / fallbackText 500 / blocks 24. Server envelope acceptance (interactionCard.ts): <= ${VERB_LIMITS.cardEnvelopeBytes} bytes serialized, title <= ${VERB_LIMITS.cardServerTitleChars}, fallbackText <= ${VERB_LIMITS.cardServerFallbackTextChars}, blocks <= ${VERB_LIMITS.cardServerBlocks}; no secret-bearing top-level keys.`,
-  required: ["schema", "title", "fallbackText", "blocks"],
+  required: ["status", "messageId", "targetConversationId"],
   additionalProperties: true,
   properties: {
-    schema: { const: "canon.card.v1" },
-    cardId: { type: "string", pattern: VERB_ID_PATTERNS.cardId },
-    title: { type: "string", minLength: 1, maxLength: VERB_LIMITS.cardServerTitleChars },
-    fallbackText: { type: "string", minLength: 1, maxLength: VERB_LIMITS.cardServerFallbackTextChars },
-    blocks: { type: "array", minItems: 1, maxItems: VERB_LIMITS.cardServerBlocks }
+    status: { const: "forwarded" },
+    messageId: { type: "string" },
+    targetConversationId: { type: "string" }
   }
 };
-var runtimeCorrelationValueDef = {
-  type: "string",
-  pattern: VERB_ID_PATTERNS.runtimeCorrelationValue,
-  maxLength: VERB_LIMITS.nativeValueChars
-};
-var runtimeMethodDef = {
-  type: "string",
-  pattern: VERB_ID_PATTERNS.runtimeMethod,
-  maxLength: VERB_LIMITS.nativeValueChars
-};
-var VERB_NATIVE_METADATA_JSON_SCHEMA = {
+var create_group_input = {
   type: "object",
-  description: "Content-free runtime correlation ids. Commands, paths, prompts, summaries, and model labels are not permitted in this public envelope.",
-  maxProperties: VERB_LIMITS.nativeKeys,
+  description: "Create a group conversation. Each target's groupJoinPolicy is enforced server-side with staged admission: directly-addable members join at creation, approval-required members become pending group_invite requests; hard-denied members are skipped (see the result). A creator-only group is valid when at least one requested member has a pending invite. Under MLS, membership changes are Add/Remove proposals + Commit \u2014 a group operation is a cryptographic state change, not a codec swap.",
+  required: ["memberIds"],
   additionalProperties: false,
   properties: {
-    runtime: runtimeCorrelationValueDef,
-    method: runtimeMethodDef,
-    requestId: runtimeCorrelationValueDef,
-    provider: runtimeCorrelationValueDef,
-    origin: runtimeCorrelationValueDef,
-    surface: runtimeCorrelationValueDef,
-    threadId: runtimeCorrelationValueDef,
-    turnId: runtimeCorrelationValueDef,
-    runId: runtimeCorrelationValueDef,
-    itemId: runtimeCorrelationValueDef,
-    toolCallId: runtimeCorrelationValueDef,
-    approvalId: runtimeCorrelationValueDef,
-    pluginId: runtimeCorrelationValueDef,
-    sessionKey: runtimeCorrelationValueDef,
-    nodeId: runtimeCorrelationValueDef,
-    handles: {
-      type: "object",
-      maxProperties: VERB_LIMITS.nativeHandles,
-      propertyNames: { pattern: VERB_ID_PATTERNS.runtimeHandleKey },
-      additionalProperties: runtimeCorrelationValueDef
+    name: { type: "string", minLength: 1, maxLength: VERB_LIMITS.groupNameChars },
+    memberIds: {
+      type: "array",
+      minItems: 1,
+      maxItems: VERB_LIMITS.groupMembers - 1,
+      items: { type: "string", minLength: 1 },
+      description: "Other members; the caller is added automatically."
     }
   }
 };
-var timeoutFields = /* @__PURE__ */ __name((maxMs, ceilingNote) => ({
-  timeoutMs: {
-    type: "integer",
-    minimum: VERB_LIMITS.minTimeoutMs,
-    maximum: maxMs,
-    description: `Relative deadline in ms (server ceiling ${ceilingNote}). expiresAt wins when both are given.`
-  },
-  expiresAt: {
-    type: "integer",
-    minimum: 0,
-    description: "Absolute epoch-ms deadline. The REST interaction creators REQUIRE a deadline (input interactions also require input subtype kind): bindings must fill defaults and convert timeoutMs into expiresAt before calling the endpoint."
-  }
-}), "timeoutFields");
-var send_to_input = {
+var create_group_result = {
   type: "object",
-  description: "Message another conversation or user (admission-aware), optionally carrying a private self-context. Exactly one of targetConversationId / targetUserId / canonContactId. canonContactId is NOT a wire field: bindings resolve it via POST /admission/resolve to a targetUserId first. Projections: selfContext sends -> POST /messages/send-contextual (which requires selfContext and exactly one Canon conversation or external source); known-conversation sends without selfContext -> POST /messages/send; plain user sends -> admission resolve + create + send (the core reachOut composite). User targets resolve admission first: open targets get the message, approval-required targets get a contact request (send deferred and auto-fulfilled on approval), closed targets surface as status 'unavailable' with reason closed.",
-  additionalProperties: false,
+  description: "Staged admission: the group exists with the directly-added members; `pending` lists group_invite requests awaiting policy approval; `skipped` lists hard-denied targets.",
+  required: ["status", "conversationId", "added", "pending", "skipped"],
+  additionalProperties: true,
   properties: {
-    targetConversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
-    targetUserId: { type: "string", minLength: 1 },
-    canonContactId: { type: "string", minLength: 1 },
-    text: {
-      type: "string",
-      maxLength: VERB_LIMITS.messageTextBytes,
-      description: `<= ${VERB_LIMITS.messageTextBytes} UTF-8 bytes. Required unless messageOptions.attachments carries the content.`
-    },
-    sourceConversationId: {
-      type: "string",
-      pattern: VERB_ID_PATTERNS.runtimeId,
-      description: "Canon source; the agent must be a member. Exclusive with externalSource."
-    },
-    externalSource: {
-      type: "object",
-      required: ["kind", "integration"],
-      additionalProperties: false,
-      properties: {
-        kind: { const: "external" },
-        integration: { const: "codex" },
-        label: { type: "string", minLength: 1, maxLength: VERB_LIMITS.externalSourceLabelChars }
-      }
-    },
-    selfContext: REF("selfContext"),
-    requestMessage: {
-      type: "string",
-      maxLength: VERB_LIMITS.contactRequestNoteChars,
-      description: `Contact-request note when admission requires approval; defaults to text; senders truncate to ${VERB_LIMITS.contactRequestNoteChars} chars.`
-    },
-    sessionSelection: REF("sessionSelection"),
-    messageOptions: REF("messageOptions")
-  },
-  oneOf: [
-    { required: ["targetConversationId"], properties: { targetConversationId: true } },
-    { required: ["targetUserId"], properties: { targetUserId: true } },
-    { required: ["canonContactId"], properties: { canonContactId: true } }
-  ],
-  allOf: [
-    {
-      if: { required: ["selfContext"], properties: { selfContext: true } },
-      then: { oneOf: [
-        { required: ["sourceConversationId"], properties: { sourceConversationId: true } },
-        { required: ["externalSource"], properties: { externalSource: true } }
-      ] }
-    },
-    { if: { required: ["externalSource"], properties: { externalSource: true } }, then: { required: ["selfContext"], properties: { selfContext: true } } }
-  ]
-};
-var send_to_result = {
-  description: "Canonical outcome vocabulary.",
-  oneOf: [
-    {
-      type: "object",
-      required: ["status", "conversationId"],
-      additionalProperties: true,
-      properties: {
-        status: { const: "messaged" },
-        conversationId: { type: "string" },
-        messageId: { type: "string" },
-        selfContextId: { type: "string" },
-        created: { type: "boolean" },
-        reused: { type: "boolean" },
-        sessionSelection: { type: "string" }
-      }
-    },
-    {
-      type: "object",
-      required: ["status", "conversationId", "messageId", "openingText"],
-      additionalProperties: true,
-      description: "The room is encrypted, so Canon stored no opening text: the sender sends it encrypted under messageId.",
-      properties: {
-        status: { const: "opened" },
-        conversationId: { type: "string" },
-        messageId: { type: "string" },
-        openingText: { const: "deferred" },
-        created: { type: "boolean" },
-        reused: { type: "boolean" }
-      }
+    status: { const: "created" },
+    conversationId: { type: "string" },
+    added: {
+      type: "array",
+      items: { type: "string" }
     },
-    {
-      type: "object",
-      required: ["status", "requestId"],
-      additionalProperties: true,
-      properties: {
-        status: { enum: ["requested", "pending"] },
-        requestId: { type: ["string", "null"] },
-        deferredIntentId: {
-          type: ["string", "null"],
-          description: "Present when the send is deferred until the contact request resolves."
-        },
-        conversationId: { type: "string" },
-        messageId: { type: "string" },
-        openingText: {
-          const: "deferred",
-          description: "The room is encrypted, so Canon stored no opening text: the sender sends it encrypted under messageId."
+    pending: {
+      type: "array",
+      items: {
+        type: "object",
+        required: ["userId", "requestId"],
+        additionalProperties: true,
+        properties: {
+          userId: { type: "string" },
+          requestId: { type: "string" }
         }
       }
     },
-    {
-      type: "object",
-      required: ["status", "reason"],
-      additionalProperties: true,
-      properties: {
-        status: { enum: ["setup_required", "no_session", "blocked", "unavailable"] },
-        reason: { type: "string" }
+    skipped: {
+      type: "array",
+      items: {
+        type: "object",
+        required: ["userId", "reason"],
+        additionalProperties: true,
+        properties: {
+          userId: { type: "string" },
+          reason: { type: "string" }
+        }
       }
     }
-  ]
+  }
 };
-var request_input_input = {
+var add_member_input = {
   type: "object",
-  description: `Ask a human a structured question mid-turn (HITL input card). sudo/secret kinds, sensitive:true, or any isSecret question force owner-only routing server-side; bindings must not let the model redirect the responder for those. Ceiling ${VERB_LIMITS.maxTimeoutMs / 6e4} minutes.`,
+  description: "A target needing policy approval yields one pending group_invite. Under MLS an add is an Add proposal + Commit (new epoch), not a server-side membership write \u2014 the verb semantics are stable, the mechanism is not.",
+  required: ["conversationId", "userId"],
   additionalProperties: false,
   properties: {
-    conversationId: {
-      type: "string",
-      pattern: VERB_ID_PATTERNS.runtimeId,
-      description: "Bindings default to the active conversation."
-    },
-    inputId: {
-      type: "string",
-      pattern: VERB_ID_PATTERNS.runtimeId,
-      description: "Durable single-use id (reuse -> 409); generated when omitted."
-    },
-    kind: { enum: ["clarify", "sudo", "secret"], default: "clarify" },
-    title: { type: "string", maxLength: VERB_LIMITS.inputTitleChars },
-    prompt: { type: "string", maxLength: VERB_LIMITS.inputPromptChars },
-    choices: { type: "array", maxItems: VERB_LIMITS.inputChoices, items: REF("inputChoice") },
-    questions: { type: "array", maxItems: VERB_LIMITS.inputQuestions, items: REF("inputQuestion") },
-    secretName: { type: "string", maxLength: VERB_LIMITS.inputSecretNameChars },
-    sensitive: { type: "boolean" },
-    responseUserId: {
-      type: "string",
-      pattern: VERB_ID_PATTERNS.runtimeId,
-      description: "Must be a human conversation member. Trust-critical bindings derive this from turn provenance and ignore model-supplied values."
-    },
-    native: REF("native"),
-    turnId: { type: "string", maxLength: VERB_LIMITS.turnIdChars },
-    ...timeoutFields(VERB_LIMITS.maxTimeoutMs, "30 minutes")
+    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
+    userId: { type: "string", minLength: 1 }
   }
 };
-var request_input_result = {
+var add_member_result = {
+  description: "Targets needing policy approval yield an exact pending group invite.",
   oneOf: [
     {
       type: "object",
-      required: ["status", "inputId", "value"],
+      required: ["status"],
       additionalProperties: true,
-      properties: {
-        status: { const: "submitted" },
-        inputId: { type: "string" },
-        value: { type: "string", description: "Free-text answer ('' when structured answers were used)." },
-        answers: {
-          type: "object",
-          description: "Structured answers keyed by question id.",
-          additionalProperties: {
-            type: "object",
-            required: ["answers"],
-            properties: { answers: { type: "array", items: { type: "string" } } }
-          }
-        }
-      }
+      properties: { status: { const: "added" } }
     },
     {
       type: "object",
-      required: ["status", "inputId"],
+      required: ["status", "requestId"],
       additionalProperties: true,
       properties: {
-        status: { enum: ["cancelled", "timeout"] },
-        inputId: { type: "string" }
+        status: { const: "pending" },
+        requestId: { type: "string" }
       }
     }
   ]
 };
-var request_approval_input = {
+var remove_member_input = {
   type: "object",
-  description: `Ask a human to allow/deny an action. mode 'blocking' (default) waits inside the verb call; mode 'detached' returns pending immediately \u2014 fetch the decision later with check_approval. Approval deadline ceiling is ${VERB_LIMITS.maxApprovalTimeoutMs / 36e5} hours (other kinds: 30 minutes). Timeouts fail closed to deny.`,
-  required: ["toolName", "toolSummary"],
+  description: "Requester must be a group owner/admin (server-enforced). Under MLS a removal is a Remove proposal + Commit that rotates the group secret away from the removed leaf.",
+  required: ["conversationId", "userId"],
   additionalProperties: false,
   properties: {
     conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
-    approvalId: {
-      type: "string",
-      pattern: VERB_ID_PATTERNS.runtimeId,
-      description: "Durable single-use id; server-generated when omitted."
-    },
-    toolName: { type: "string", minLength: 1, maxLength: VERB_LIMITS.toolNameChars },
-    toolSummary: {
-      type: "string",
-      minLength: 1,
-      maxLength: VERB_LIMITS.toolSummaryChars,
-      description: "Pre-redact secrets \u2014 this renders to humans."
-    },
-    mode: { enum: ["blocking", "detached"], default: "blocking" },
-    riskLevel: {
-      enum: ["normal", "destructive"],
-      description: "Server accepts only these values; others are silently dropped, not rejected."
-    },
-    risk: {
-      enum: ["low", "normal", "high", "destructive"],
-      description: "Advisory; server stores any string <= 64 chars today."
-    },
-    category: {
-      enum: ["command", "file", "network", "browser", "mcp", "plugin", "canon", "tool"],
-      description: "Advisory; server stores any string <= 64 chars today."
-    },
-    details: { type: "array", maxItems: VERB_LIMITS.approvalDetails, items: REF("approvalDetail") },
-    diff: REF("unifiedDiff"),
-    native: REF("native"),
-    runtimeId: { type: "string", maxLength: VERB_LIMITS.turnIdChars },
-    turnId: { type: "string", maxLength: VERB_LIMITS.turnIdChars },
-    responseUserId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
-    allowSessionRule: {
-      type: "boolean",
-      description: "Server forces false when the responder is not the agent owner."
-    },
-    ...timeoutFields(VERB_LIMITS.maxApprovalTimeoutMs, "72 hours")
+    userId: { type: "string", minLength: 1 }
   }
 };
-var request_approval_result = {
-  oneOf: [
-    {
-      type: "object",
-      required: ["status", "approvalId"],
-      additionalProperties: true,
-      properties: {
-        status: { const: "allow" },
-        approvalId: { type: "string" },
-        sessionRule: REF("sessionRule"),
-        respondedBy: { type: "string", description: "Canon-authenticated responder userId." }
-      }
-    },
-    {
-      type: "object",
-      required: ["status", "approvalId"],
-      additionalProperties: true,
-      properties: {
-        status: { const: "deny" },
-        approvalId: { type: "string" },
-        sessionRule: REF("sessionRule"),
-        respondedBy: { type: "string" }
-      }
-    },
-    {
-      type: "object",
-      required: ["status", "approvalId"],
-      additionalProperties: true,
-      properties: { status: { const: "timeout" }, approvalId: { type: "string" } }
-    },
-    {
-      type: "object",
-      description: "Detached acceptance \u2014 the decision arrives via check_approval.",
-      required: ["status", "approvalId", "expiresAt"],
-      additionalProperties: true,
-      properties: {
-        status: { const: "pending" },
-        approvalId: { type: "string" },
-        conversationId: { type: "string" },
-        expiresAt: { type: "integer" },
-        responseUserId: { type: "string" }
-      }
-    }
-  ]
+var remove_member_result = {
+  type: "object",
+  required: ["status"],
+  additionalProperties: true,
+  properties: { status: { const: "removed" } }
 };
-var check_approval_input = {
+var leave_conversation_input = {
   type: "object",
-  description: "Fetch the decision of a detached approval. Consume is idempotent within the replay window: a resolved decision replays for up to 72h after first consume, then the id becomes unknown. Bindings must bind the check to the conversation that created the approval.",
-  required: ["approvalId"],
+  required: ["conversationId"],
   additionalProperties: false,
   properties: {
-    approvalId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
     conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId }
   }
 };
-var check_approval_result = {
-  description: "'unknown' is NOT a denial \u2014 only 'resolved' carries a decision. Canonical statuses map from the approval interaction consume result as: allow/deny -> resolved.decision, timeout -> expired, pending -> pending, HTTP 404 RUNTIME_APPROVAL_NOT_FOUND -> unknown.",
-  oneOf: [
-    {
-      type: "object",
-      required: ["status", "approvalId", "decision"],
-      additionalProperties: true,
-      properties: {
-        status: { const: "resolved" },
-        approvalId: { type: "string" },
-        decision: { enum: ["allow", "deny"] },
-        respondedBy: { type: "string" },
-        conversationId: { type: "string" }
-      }
-    },
-    {
-      type: "object",
-      required: ["status", "approvalId"],
-      additionalProperties: true,
-      properties: {
-        status: { enum: ["pending", "expired", "unknown"] },
-        approvalId: { type: "string" },
-        expiresAt: { type: "integer" },
-        conversationId: { type: "string" }
-      }
-    }
-  ]
+var leave_conversation_result = {
+  type: "object",
+  required: ["status"],
+  additionalProperties: true,
+  properties: { status: { const: "left" } }
 };
-var send_card_input = {
+var list_contacts_input = {
   type: "object",
-  description: "Display a card with no actions \u2014 fire-and-forget, no pending state, no deadline.",
-  required: ["card"],
   additionalProperties: false,
-  properties: {
-    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
-    card: REF("runtimeCard"),
-    cardId: { type: "string", pattern: VERB_ID_PATTERNS.cardId },
-    native: REF("native"),
-    runtimeId: { type: "string", maxLength: VERB_LIMITS.turnIdChars },
-    turnId: { type: "string", maxLength: VERB_LIMITS.turnIdChars }
-  }
+  properties: {}
 };
-var send_card_result = {
+var list_contacts_result = {
   type: "object",
-  required: ["status", "cardId"],
+  required: ["contacts"],
   additionalProperties: true,
   properties: {
-    status: { const: "displayed" },
-    cardId: { type: "string" },
-    conversationId: { type: "string" },
-    responseUserId: { type: "string" }
-  }
-};
-var request_card_input = {
-  type: "object",
-  description: `Show an interactive card (>= 1 actions block required) and wait for the response. Deadline ceiling ${VERB_LIMITS.maxTimeoutMs / 6e4} minutes.`,
-  required: ["card"],
-  additionalProperties: false,
-  properties: {
-    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
-    card: REF("runtimeCard"),
-    cardId: { type: "string", pattern: VERB_ID_PATTERNS.cardId },
-    responseUserId: {
-      type: "string",
-      pattern: VERB_ID_PATTERNS.runtimeId,
-      description: "Must be a human conversation member; defaults to the turn-triggering human (trust-critical bindings ignore model-supplied values)."
-    },
-    native: REF("native"),
-    runtimeId: { type: "string", maxLength: VERB_LIMITS.turnIdChars },
-    turnId: { type: "string", maxLength: VERB_LIMITS.turnIdChars },
-    ...timeoutFields(VERB_LIMITS.maxTimeoutMs, "30 minutes")
-  }
-};
-var request_card_result = {
-  oneOf: [
-    {
-      type: "object",
-      required: ["status", "cardId"],
-      additionalProperties: true,
-      properties: {
-        status: { const: "submitted" },
-        cardId: { type: "string" },
-        actionId: { type: "string" },
-        values: {
-          type: "object",
-          description: `Validated server-side against the card's actionFields (validateRuntimeCardFieldValues); <= ${VERB_LIMITS.cardValuesBytes} bytes, depth <= ${VERB_LIMITS.cardValuesDepth}.`
-        },
-        respondedBy: {
-          type: "string",
-          description: "Canon-authenticated responder (server-verified vs responseUserId)."
+    contacts: {
+      type: "array",
+      items: {
+        type: "object",
+        required: ["id", "source", "addedAt", "displayNameOverride"],
+        additionalProperties: true,
+        properties: {
+          id: { type: "string", description: "The contact's userId." },
+          source: {
+            type: "string",
+            description: "Vocabulary: direct_add | phone_book | contact_request | link | qr | group | open_inbound_message | unknown (server passes strings through)."
+          },
+          addedAt: { type: ["string", "null"] },
+          displayNameOverride: { type: ["string", "null"] }
         }
       }
-    },
-    {
-      type: "object",
-      required: ["status", "cardId"],
-      additionalProperties: true,
-      properties: {
-        status: { const: "cancelled" },
-        cardId: { type: "string" },
-        respondedBy: { type: "string" }
-      }
-    },
-    {
-      type: "object",
-      required: ["status", "cardId"],
-      additionalProperties: true,
-      properties: { status: { const: "timeout" }, cardId: { type: "string" } }
     }
-  ]
-};
-var share_contact_input = {
-  type: "object",
-  description: "Share a contact card into a conversation (POST /messages/send, contentType 'contact_card'). The shared user must be in the sending agent's contacts (403 otherwise; the owner shortcut applies only to human senders sharing their own agents). The server snapshots the card.",
-  required: ["conversationId", "contactUserId"],
-  additionalProperties: false,
-  properties: {
-    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
-    contactUserId: { type: "string", minLength: 1 },
-    text: { type: "string", maxLength: VERB_LIMITS.messageTextBytes },
-    messageId: REF("messageId")
-  }
-};
-var share_contact_result = {
-  type: "object",
-  required: ["status", "messageId"],
-  additionalProperties: true,
-  properties: {
-    status: { const: "shared" },
-    messageId: { type: "string" }
   }
 };
-var react_input = {
+var list_conversations_input = {
   type: "object",
-  description: "Toggle an emoji reaction on a message (server-side atomic toggle; functions/src/api/reactToMessage.ts).",
-  required: ["conversationId", "messageId", "emoji"],
   additionalProperties: false,
   properties: {
-    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
-    messageId: { type: "string", minLength: 1 },
-    emoji: {
-      type: "string",
-      minLength: 1,
-      maxLength: VERB_LIMITS.reactionEmojiChars,
-      description: "Reaction key. Content-adjacent (D5) \u2014 rides the wire body."
+    limit: {
+      type: "integer",
+      minimum: 1,
+      description: "Optional client-side cap applied by the binding; the REST endpoint has no pagination and returns all visible memberships."
     }
   }
 };
-var react_result = {
+var list_conversations_result = {
   type: "object",
-  required: ["status", "action"],
+  required: ["conversations"],
   additionalProperties: true,
   properties: {
-    status: { const: "reacted" },
-    action: { enum: ["added", "removed"] },
-    reactions: { type: "object" }
+    conversations: {
+      type: "array",
+      items: {
+        type: "object",
+        // topic/lastMessage/createdAt are ??-null'd by the serializer (always
+        // present); name is a raw passthrough and may be absent on direct chats.
+        required: ["id", "type", "memberIds", "isAgentChat", "topic", "lastMessage", "createdAt"],
+        additionalProperties: true,
+        properties: {
+          id: { type: "string" },
+          type: { enum: ["direct", "group"] },
+          name: { type: ["string", "null"] },
+          topic: { type: ["string", "null"] },
+          memberIds: { type: "array", items: { type: "string" } },
+          originalParticipantIds: { type: "array", items: { type: "string" }, minItems: 2, maxItems: 2, uniqueItems: true },
+          isAgentChat: { type: "boolean" },
+          hasUnread: { type: "boolean" },
+          lastMessage: {
+            type: ["object", "null"],
+            additionalProperties: true,
+            properties: {
+              text: { type: ["string", "null"] },
+              messageId: { type: "string" },
+              senderId: { type: "string" },
+              senderType: { type: "string" },
+              contentType: { type: "string" },
+              timestamp: { type: ["string", "null"] }
+            }
+          },
+          createdAt: { type: ["string", "null"] }
+        }
+      }
+    }
   }
 };
-var forward_input = {
+var no_reply_input = {
   type: "object",
-  description: "Forward an existing message into another conversation. Under E2EE this becomes client-side re-encrypt; only routing ids + an optional caption cross the wire.",
-  required: ["sourceConversationId", "targetConversationId", "messageId"],
+  description: "End this turn without posting anything to the conversation. Nothing is rendered and no other member or agent is triggered.",
   additionalProperties: false,
   properties: {
-    sourceConversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
-    targetConversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
-    messageId: { type: "string", minLength: 1 },
-    text: {
+    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
+    messageId: {
       type: "string",
-      maxLength: VERB_LIMITS.messageTextBytes,
-      description: `Optional caption; <= ${VERB_LIMITS.messageTextBytes} UTF-8 bytes.`
+      pattern: VERB_ID_PATTERNS.runtimeId,
+      description: "The triggering message this silence answers, so the record cannot be misread against a later message."
+    },
+    reason: {
+      type: "string",
+      maxLength: VERB_LIMITS.noReplyReasonChars,
+      description: "Never rendered; logged only."
     }
   }
 };
-var forward_result = {
+var no_reply_result = {
   type: "object",
-  required: ["status", "messageId", "targetConversationId"],
+  required: ["status"],
   additionalProperties: true,
   properties: {
-    status: { const: "forwarded" },
-    messageId: { type: "string" },
-    targetConversationId: { type: "string" }
-  }
-};
-var create_group_input = {
-  type: "object",
-  description: "Create a group conversation. Each target's groupJoinPolicy is enforced server-side with staged admission: directly-addable members join at creation, approval-required members become pending group_invite requests; hard-denied members are skipped (see the result). A creator-only group is valid when at least one requested member has a pending invite. Under MLS, membership changes are Add/Remove proposals + Commit \u2014 a group operation is a cryptographic state change, not a codec swap.",
-  required: ["memberIds"],
-  additionalProperties: false,
-  properties: {
-    name: { type: "string", minLength: 1, maxLength: VERB_LIMITS.groupNameChars },
-    memberIds: {
-      type: "array",
-      minItems: 1,
-      maxItems: VERB_LIMITS.groupMembers - 1,
-      items: { type: "string", minLength: 1 },
-      description: "Other members; the caller is added automatically."
-    }
-  }
-};
-var create_group_result = {
-  type: "object",
-  description: "Staged admission: the group exists with the directly-added members; `pending` lists group_invite requests awaiting policy approval; `skipped` lists hard-denied targets.",
-  required: ["status", "conversationId", "added", "pending", "skipped"],
-  additionalProperties: true,
-  properties: {
-    status: { const: "created" },
-    conversationId: { type: "string" },
-    added: {
-      type: "array",
-      items: { type: "string" }
-    },
-    pending: {
-      type: "array",
-      items: {
-        type: "object",
-        required: ["userId", "requestId"],
-        additionalProperties: true,
-        properties: {
-          userId: { type: "string" },
-          requestId: { type: "string" }
-        }
-      }
-    },
-    skipped: {
-      type: "array",
-      items: {
-        type: "object",
-        required: ["userId", "reason"],
-        additionalProperties: true,
-        properties: {
-          userId: { type: "string" },
-          reason: { type: "string" }
-        }
-      }
-    }
-  }
-};
-var add_member_input = {
-  type: "object",
-  description: "A target needing policy approval yields one pending group_invite. Under MLS an add is an Add proposal + Commit (new epoch), not a server-side membership write \u2014 the verb semantics are stable, the mechanism is not.",
-  required: ["conversationId", "userId"],
-  additionalProperties: false,
-  properties: {
-    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
-    userId: { type: "string", minLength: 1 }
-  }
-};
-var add_member_result = {
-  description: "Targets needing policy approval yield an exact pending group invite.",
-  oneOf: [
-    {
-      type: "object",
-      required: ["status"],
-      additionalProperties: true,
-      properties: { status: { const: "added" } }
-    },
-    {
-      type: "object",
-      required: ["status", "requestId"],
-      additionalProperties: true,
-      properties: {
-        status: { const: "pending" },
-        requestId: { type: "string" }
-      }
-    }
-  ]
-};
-var remove_member_input = {
-  type: "object",
-  description: "Requester must be a group owner/admin (server-enforced). Under MLS a removal is a Remove proposal + Commit that rotates the group secret away from the removed leaf.",
-  required: ["conversationId", "userId"],
-  additionalProperties: false,
-  properties: {
-    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
-    userId: { type: "string", minLength: 1 }
-  }
-};
-var remove_member_result = {
-  type: "object",
-  required: ["status"],
-  additionalProperties: true,
-  properties: { status: { const: "removed" } }
-};
-var leave_conversation_input = {
-  type: "object",
-  required: ["conversationId"],
-  additionalProperties: false,
-  properties: {
-    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId }
-  }
-};
-var leave_conversation_result = {
-  type: "object",
-  required: ["status"],
-  additionalProperties: true,
-  properties: { status: { const: "left" } }
-};
-var list_contacts_input = {
-  type: "object",
-  additionalProperties: false,
-  properties: {}
-};
-var list_contacts_result = {
-  type: "object",
-  required: ["contacts"],
-  additionalProperties: true,
-  properties: {
-    contacts: {
-      type: "array",
-      items: {
-        type: "object",
-        required: ["id", "source", "addedAt", "displayNameOverride"],
-        additionalProperties: true,
-        properties: {
-          id: { type: "string", description: "The contact's userId." },
-          source: {
-            type: "string",
-            description: "Vocabulary: direct_add | phone_book | contact_request | link | qr | group | open_inbound_message | unknown (server passes strings through)."
-          },
-          addedAt: { type: ["string", "null"] },
-          displayNameOverride: { type: ["string", "null"] }
-        }
-      }
-    }
-  }
-};
-var list_conversations_input = {
-  type: "object",
-  additionalProperties: false,
-  properties: {
-    limit: {
-      type: "integer",
-      minimum: 1,
-      description: "Optional client-side cap applied by the binding; the REST endpoint has no pagination and returns all visible memberships."
-    }
-  }
-};
-var list_conversations_result = {
-  type: "object",
-  required: ["conversations"],
-  additionalProperties: true,
-  properties: {
-    conversations: {
-      type: "array",
-      items: {
-        type: "object",
-        // topic/lastMessage/createdAt are ??-null'd by the serializer (always
-        // present); name is a raw passthrough and may be absent on direct chats.
-        required: ["id", "type", "memberIds", "isAgentChat", "topic", "lastMessage", "createdAt"],
-        additionalProperties: true,
-        properties: {
-          id: { type: "string" },
-          type: { enum: ["direct", "group"] },
-          name: { type: ["string", "null"] },
-          topic: { type: ["string", "null"] },
-          memberIds: { type: "array", items: { type: "string" } },
-          originalParticipantIds: { type: "array", items: { type: "string" }, minItems: 2, maxItems: 2, uniqueItems: true },
-          isAgentChat: { type: "boolean" },
-          hasUnread: { type: "boolean" },
-          lastMessage: {
-            type: ["object", "null"],
-            additionalProperties: true,
-            properties: {
-              text: { type: ["string", "null"] },
-              messageId: { type: "string" },
-              senderId: { type: "string" },
-              senderType: { type: "string" },
-              contentType: { type: "string" },
-              timestamp: { type: ["string", "null"] }
-            }
-          },
-          createdAt: { type: ["string", "null"] }
-        }
-      }
-    }
-  }
-};
-var no_reply_input = {
-  type: "object",
-  description: "End this turn without posting anything to the conversation. Nothing is rendered and no other member or agent is triggered.",
-  additionalProperties: false,
-  properties: {
-    conversationId: { type: "string", pattern: VERB_ID_PATTERNS.runtimeId },
-    messageId: {
-      type: "string",
-      pattern: VERB_ID_PATTERNS.runtimeId,
-      description: "The triggering message this silence answers, so the record cannot be misread against a later message."
-    },
-    reason: {
-      type: "string",
-      maxLength: VERB_LIMITS.noReplyReasonChars,
-      description: "Never rendered; logged only."
-    }
-  }
-};
-var no_reply_result = {
-  type: "object",
-  required: ["status"],
-  additionalProperties: true,
-  properties: {
-    status: { const: "acknowledged" },
-    conversationId: { type: "string" },
-    note: { type: "string" }
+    status: { const: "acknowledged" },
+    conversationId: { type: "string" },
+    note: { type: "string" }
   }
 };
 var CANON_VERBS_JSON_SCHEMA = {
@@ -4341,219 +3654,6 @@ function projectVerbIntentToWire(verb, intent, options) {
 }
 __name(projectVerbIntentToWire, "projectVerbIntentToWire");
 
-// ../backend-contracts/src/communication.ts
-function parseDirectConversationSelection(value) {
-  if (value == null) return { mode: "latest_or_new" };
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    throw new Error("selection must be an object");
-  }
-  const record4 = value;
-  if (record4.mode === "latest_or_new" || record4.mode === "new") {
-    return { mode: record4.mode };
-  }
-  if (record4.mode === "specific") {
-    const conversationId = typeof record4.conversationId === "string" ? record4.conversationId.trim() : "";
-    if (!conversationId) throw new Error("selection.conversationId is required");
-    return { mode: "specific", conversationId };
-  }
-  throw new Error("selection.mode is invalid");
-}
-__name(parseDirectConversationSelection, "parseDirectConversationSelection");
-
-// ../backend-contracts/src/runtimeDescriptor.ts
-function normalizeRuntimeCommandAlias(value) {
-  const normalized = value.trim().replace(/^\/+/, "").replace(/\s+/g, "-");
-  return /^[A-Za-z0-9:_-]+$/.test(normalized) ? normalized : null;
-}
-__name(normalizeRuntimeCommandAlias, "normalizeRuntimeCommandAlias");
-function normalizeRuntimeCommandAliases(command) {
-  const rawAliases = command.aliases?.length ? command.aliases : [command.id];
-  const aliases = rawAliases.map(normalizeRuntimeCommandAlias).filter((value) => Boolean(value));
-  return Array.from(new Set(aliases));
-}
-__name(normalizeRuntimeCommandAliases, "normalizeRuntimeCommandAliases");
-var MAX_PUBLIC_RUNTIME_COMMANDS = 256;
-function record(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-__name(record, "record");
-function text3(value, max) {
-  return typeof value === "string" && value.length > 0 && value.length <= max ? value : void 0;
-}
-__name(text3, "text");
-function member(value, choices) {
-  return choices.includes(value) ? value : void 0;
-}
-__name(member, "member");
-function members(value, choices) {
-  if (!Array.isArray(value)) return void 0;
-  return [...new Set(value.filter((entry) => choices.includes(entry)))];
-}
-__name(members, "members");
-function defined(value) {
-  return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== void 0));
-}
-__name(defined, "defined");
-var PRIMITIVES = [
-  "runtime.status",
-  "runtime.reasoning.set",
-  "runtime.verbosity.set",
-  "runtime.usage",
-  "context.compact",
-  "session.new",
-  "session.reset"
-];
-function normalizeDispatch(value) {
-  const dispatch = record(value);
-  switch (dispatch.kind) {
-    case "signal": {
-      const signal = member(dispatch.signal, ["interrupt", "stop_and_drop", "new_session"]);
-      return signal ? { kind: "signal", signal } : void 0;
-    }
-    case "primitive": {
-      const primitive = member(dispatch.primitive, PRIMITIVES);
-      return primitive ? { kind: "primitive", primitive } : void 0;
-    }
-    case "control": {
-      const controlId = text3(dispatch.controlId, 128);
-      return controlId ? defined({ kind: "control", controlId, value: text3(dispatch.value, 1024) }) : void 0;
-    }
-    case "text_passthrough": {
-      const template = text3(dispatch.template, 2048);
-      return template ? { kind: "text_passthrough", template } : void 0;
-    }
-    case "compose": {
-      const content = text3(dispatch.text, 2048);
-      return content ? { kind: "compose", text: content } : void 0;
-    }
-    case "open_details":
-      return defined({ kind: "open_details", target: text3(dispatch.target, 128) });
-    default:
-      return void 0;
-  }
-}
-__name(normalizeDispatch, "normalizeDispatch");
-function normalizeArgument(value) {
-  const arg = record(value);
-  const id7 = text3(arg.id, 128);
-  const label = text3(arg.label, 160);
-  const kind = member(arg.kind, ["string", "enum", "boolean"]);
-  if (!id7 || !label || !kind) return void 0;
-  if (["required", "captureRemaining"].some((key) => arg[key] !== void 0 && typeof arg[key] !== "boolean")) return void 0;
-  if (arg.choices !== void 0 && !Array.isArray(arg.choices)) return void 0;
-  const choices = Array.isArray(arg.choices) ? arg.choices.slice(0, 128).flatMap((value2) => {
-    const choice = record(value2);
-    const entry = text3(choice.value, 1024);
-    const label2 = text3(choice.label, 160);
-    return entry && label2 ? [defined({ value: entry, label: label2, description: text3(choice.description, 1024) })] : [];
-  }) : void 0;
-  if (kind === "enum" && !choices?.length) return void 0;
-  return defined({
-    id: id7,
-    label,
-    kind,
-    choices,
-    required: typeof arg.required === "boolean" ? arg.required : void 0,
-    captureRemaining: typeof arg.captureRemaining === "boolean" ? arg.captureRemaining : void 0
-  });
-}
-__name(normalizeArgument, "normalizeArgument");
-function normalizePublicRuntimeCommands(value) {
-  if (!Array.isArray(value)) return [];
-  const seenIds = /* @__PURE__ */ new Set();
-  const seenAliases = /* @__PURE__ */ new Set();
-  const result = [];
-  for (const item2 of value.slice(0, MAX_PUBLIC_RUNTIME_COMMANDS)) {
-    const command = record(item2);
-    const id7 = text3(command.id, 128);
-    const label = text3(command.label, 160);
-    const dispatch = normalizeDispatch(command.dispatch);
-    if (!id7 || !label || !dispatch || seenIds.has(id7) || command.visibility === "hidden" || command.sensitive === true) continue;
-    if (["ownerOnly", "sensitive"].some((key) => command[key] !== void 0 && typeof command[key] !== "boolean")) continue;
-    if (["aliases", "args", "placements", "availability"].some((key) => command[key] !== void 0 && !Array.isArray(command[key]))) continue;
-    const rawAliases = Array.isArray(command.aliases) && command.aliases.length ? command.aliases : [id7];
-    const aliases = [...new Set(rawAliases.slice(0, 8).flatMap((value2) => {
-      const alias = typeof value2 === "string" && value2.length <= 128 ? normalizeRuntimeCommandAlias(value2) : null;
-      return alias && /^[A-Za-z0-9:_-]+$/.test(alias) && !seenAliases.has(alias.toLowerCase()) ? [alias] : [];
-    }))];
-    if (!aliases.length) continue;
-    const args = Array.isArray(command.args) ? command.args.slice(0, 12).map(normalizeArgument) : void 0;
-    if (args?.some((arg) => !arg) || Array.isArray(command.args) && command.args.length > 12) continue;
-    seenIds.add(id7);
-    aliases.forEach((alias) => seenAliases.add(alias.toLowerCase()));
-    result.push(defined({
-      id: id7,
-      label,
-      aliases,
-      dispatch,
-      args,
-      description: text3(command.description, 1024),
-      category: member(command.category, ["plan", "turn", "session", "runtime", "details", "skill", "custom"]),
-      placements: members(command.placements, ["composer_slash", "command_palette", "session_strip"]),
-      availability: members(command.availability, ["idle", "busy", "busy_with_queue", "waiting_input", "always"]),
-      ownerOnly: typeof command.ownerOnly === "boolean" ? command.ownerOnly : void 0,
-      disabledReason: text3(command.disabledReason, 1024),
-      trailingTextBehavior: member(command.trailingTextBehavior, ["ignore", "send_as_prompt"]),
-      primitive: member(command.primitive, PRIMITIVES),
-      tier: member(command.tier, ["primary", "detail", "diagnostic"])
-    }));
-  }
-  return result;
-}
-__name(normalizePublicRuntimeCommands, "normalizePublicRuntimeCommands");
-function normalizePublicRuntimeDescriptor(value) {
-  const descriptor = record(value);
-  return defined({
-    supportsInterrupt: typeof descriptor.supportsInterrupt === "boolean" ? descriptor.supportsInterrupt : void 0,
-    supportsInputInterrupt: typeof descriptor.supportsInputInterrupt === "boolean" ? descriptor.supportsInputInterrupt : void 0,
-    streamingTextMode: member(descriptor.streamingTextMode, ["none", "status", "snapshot", "block", "delta"]),
-    commands: Array.isArray(descriptor.commands) ? normalizePublicRuntimeCommands(descriptor.commands) : void 0
-  });
-}
-__name(normalizePublicRuntimeDescriptor, "normalizePublicRuntimeDescriptor");
-var PUBLIC_RUNTIME_FACT_GROUPS = {
-  harness: "runtime",
-  runtime: "runtime",
-  provider: "model",
-  model: "model",
-  reasoning: "model",
-  connection: "connection",
-  gateway: "connection",
-  route: "route"
-};
-function normalizePublicRuntimeFacts(value) {
-  if (!Array.isArray(value)) return [];
-  const seen = /* @__PURE__ */ new Set();
-  return value.slice(0, 16).flatMap((entry) => {
-    const fact = record(entry);
-    const id7 = text3(fact.id, 64);
-    const group = id7 && Object.hasOwn(PUBLIC_RUNTIME_FACT_GROUPS, id7) ? PUBLIC_RUNTIME_FACT_GROUPS[id7] : void 0;
-    const label = text3(fact.label, 80);
-    const content = text3(fact.value, 512);
-    if (!id7 || !group || !label || !content || seen.has(id7) || fact.sensitive === true || fact.visibility === "hidden") return [];
-    seen.add(id7);
-    return [defined({
-      id: id7,
-      group,
-      label,
-      value: content,
-      tier: member(fact.tier, ["primary", "detail", "diagnostic"]),
-      tone: member(fact.tone, ["neutral", "good", "warning", "danger"]),
-      copyable: typeof fact.copyable === "boolean" ? fact.copyable : void 0,
-      updatedAt: typeof fact.updatedAt === "number" && Number.isFinite(fact.updatedAt) && fact.updatedAt >= 0 ? fact.updatedAt : void 0
-    })];
-  });
-}
-__name(normalizePublicRuntimeFacts, "normalizePublicRuntimeFacts");
-
-// ../backend-contracts/src/conversationMembership.ts
-function resolveConversationPolicyScope(memberIdsOrCount) {
-  const count = Array.isArray(memberIdsOrCount) ? new Set(memberIdsOrCount.filter((id7) => typeof id7 === "string" && id7.length > 0)).size : memberIdsOrCount;
-  if (typeof count !== "number" || !Number.isSafeInteger(count)) return "unknown";
-  return count === 2 ? "direct" : count > 2 ? "group" : "unknown";
-}
-__name(resolveConversationPolicyScope, "resolveConversationPolicyScope");
-
 // ../backend-contracts/src/endpointContentPolicy.ts
 var MLS_DEV_UNSUPPORTED_CONTENT_ACTIONS = ["forward_message"];
 var MLS_DEV_DISCLOSED_PROCESSING_FIELDS = {
@@ -4872,234 +3972,1146 @@ var turnPresence = {
   openedAt: timestamp,
   turnUpdatedAt: timestamp
 };
-var transientRouting = {
-  create_memo_stream: ["conversationId", "streamId"],
-  append_memo_chunk: ["streamId"],
-  prewarm_agents: ["conversationId"],
-  publish_presence: [],
-  publish_typing: ["conversationId"],
-  publish_streaming: ["conversationId"],
-  publish_turn: ["conversationId"],
-  publish_runtime_status: [],
-  publish_session_state: ["conversationId"],
-  publish_runtime_info: ["conversationId"],
-  publish_runtime_activity: ["conversationId", "itemId"]
+var transientRouting = {
+  create_memo_stream: ["conversationId", "streamId"],
+  append_memo_chunk: ["streamId"],
+  prewarm_agents: ["conversationId"],
+  publish_presence: [],
+  publish_typing: ["conversationId"],
+  publish_streaming: ["conversationId"],
+  publish_turn: ["conversationId"],
+  publish_runtime_status: [],
+  publish_session_state: ["conversationId"],
+  publish_runtime_info: ["conversationId"],
+  publish_runtime_activity: ["conversationId", "itemId"]
+};
+function eventRouting(name) {
+  if (name.startsWith("ephemeral.")) return ["conversationId", "scopeId"];
+  if (name === "connected") return ["protocol", "connectionId", "agentId", "principalId", "principalType"];
+  if (name === "heartbeat") return ["timestamp"];
+  if (name === "error") return ["code", "status", "retryable", "retryAfterMs", "retryAfter", "activeConnections", "maxConnections"];
+  if (name === "participation.suppressed") return ["conversationId", "agentId", "messageId"];
+  if (name === "agent.context") return ["agentId", "ownerId", "ownershipVersion"];
+  if (name === "conversations.changed") return ["conversationIds.*", "removedConversationIds.*"];
+  if (name === "artifact.changed") return ["conversationId", "artifactId", "sequence", "eventId"];
+  if (name.startsWith("message.")) return ["conversationId", "messageId", "eventId", "id", "message.id", "message.conversationId", "message.senderId", "message.senderType", "message.createdAt", "message.replyTo", "message.mentions.*"];
+  if (name.startsWith("conversation.")) return ["conversationId"];
+  if (name.startsWith("contact.")) return ["contactId"];
+  if (name.startsWith("voice.session.")) return ["conversationId", "sessionId"];
+  if (/^(runtime\.|turn\.|typing$|presence$)/.test(name)) return ["conversationId", "agentId", "userId", "memberId"];
+  return [];
+}
+__name(eventRouting, "eventRouting");
+var secretSegments = /* @__PURE__ */ new Set(["token", "accessToken", "refreshToken", "uploadUrl", "signedUrl", "livekitToken", "replyAuthority", "renewReplyAuthorityToken", "credentials", "password", "secret", "authorization", "answer", "answers", "response", "submittedValue"]);
+var matches = /* @__PURE__ */ __name((path, pattern) => {
+  const parts = pattern.split(".");
+  return parts.length === path.length && parts.every((part, index) => part === path[index] || part === "*" && /^\d+$/.test(path[index]));
+}, "matches");
+var publicMatch = /* @__PURE__ */ __name((path, patterns) => patterns.some((pattern) => matches(path, pattern)), "publicMatch");
+function endpointOperationRequestRetention(action, body, envelope) {
+  if (action !== "respond_interaction") return "journal";
+  if (envelope && Object.keys(envelope).length > 0) return "memory";
+  const routing = ["kind", "conversationId", "agentId", "requestId"];
+  const hasOnly = /* @__PURE__ */ __name((fields2) => Object.keys(body).every((field) => fields2.includes(field)), "hasOnly");
+  if (routing.some((field) => body[field] !== void 0 && typeof body[field] !== "string")) return "memory";
+  if ((body.kind === "input" || body.kind === "card") && hasOnly([...routing, "status", "actionId"])) {
+    if (!["submitted", "cancelled"].includes(String(body.status)) || body.actionId !== void 0 && typeof body.actionId !== "string") return "memory";
+    return "journal";
+  }
+  if (body.kind === "approval" && hasOnly([...routing, "decision", "sessionRule"])) {
+    if (body.decision !== "allow" && body.decision !== "deny") return "memory";
+    const rule = body.sessionRule;
+    if (rule !== void 0 && (!rule || typeof rule !== "object" || Array.isArray(rule) || !Object.entries(rule).every(([field, value]) => ["type", "toolPattern", "expiresAt"].includes(field) && (typeof value === "string" || field === "expiresAt" && value === null)))) return "memory";
+    return "journal";
+  }
+  if (body.kind === "plan" && hasOnly([...routing, "decision", "feedback", "grantedPrompts"])) {
+    if (!["approve", "revise", "reject"].includes(String(body.decision)) || body.feedback !== void 0 && typeof body.feedback !== "string") return "memory";
+    const prompts = body.grantedPrompts;
+    if (prompts !== void 0 && (!Array.isArray(prompts) || prompts.some((prompt) => !prompt || typeof prompt !== "object" || Array.isArray(prompt) || !Object.entries(prompt).every(([field, value]) => ["tool", "prompt"].includes(field) && typeof value === "string")))) return "memory";
+    return "journal";
+  }
+  return "memory";
+}
+__name(endpointOperationRequestRetention, "endpointOperationRequestRetention");
+function endpointContentBoundary(lane, name, payload) {
+  if (!namesForLane[lane]?.includes(name)) throw new EndpointContentPolicyError(lane, name);
+  const record4 = payload && typeof payload === "object" ? payload : void 0;
+  if (lane === "query.request" && name === "get_ephemeral" && record4 && !ENDPOINT_CONTENT_EPHEMERAL_FAMILIES.includes(record4.family)) {
+    throw new EndpointContentPolicyError(lane, `${name}/unknown-family`);
+  }
+  const requestRoutingPaths = (actionRouting[name] ?? []).flatMap((field) => [`body.value.${field}`, `envelope.${field}`]);
+  const classify = /* @__PURE__ */ __name((path) => {
+    if (path.some((part) => secretSegments.has(part))) return "restricted-secret";
+    if (lane === "operation.request" && ["respond_interaction", "sync_phone_contacts"].includes(name) && matches(path, "preparedContent.payload")) return "restricted-secret";
+    if (lane === "operation.request" && ["respond_interaction", "sync_phone_contacts"].includes(name) && path[0] === "body" && path[1] === "value" && !publicMatch(path, requestRoutingPaths)) return "restricted-secret";
+    if (lane === "operation.receipt" && path[0] === "result" && (["consume_interaction", "respond_interaction"].includes(name) || record4?.resultReference?.kind === "interaction")) return "restricted-secret";
+    let selected = payload;
+    for (const part of path) selected = selected && typeof selected === "object" && Object.hasOwn(selected, part) ? selected[part] : void 0;
+    if (selected !== null && typeof selected === "object") return "private-content";
+    if (lane === "operation.request") {
+      if (publicMatch(path, protocolPaths) || publicMatch(path, requestRoutingPaths)) return "public-metadata";
+      if (name === "respond_interaction" && path[0] === "body" && path[1] === "value") return "restricted-secret";
+      if (name === "sync_phone_contacts" && path[0] === "body" && path[1] === "value") return "restricted-secret";
+      if (name === "verb_execute") {
+        const wire4 = record4?.body?.value;
+        const spec = VERB_WIRE_ENVELOPE_FIELDS[wire4?.verb];
+        if (path[0] === "body" && path[1] === "value") {
+          if (path.length === 3 && ["wire", "verb"].includes(path[2])) return "public-metadata";
+          if (path[2] === "envelope" && spec) {
+            const field = path[3];
+            const allowed = [...spec.required, ...spec.optional];
+            if (field && allowed.includes(field) && (path.length === 4 || path.length === 5 && ["mentions", "memberIds"].includes(field) && /^\d+$/.test(path[4]))) return "public-metadata";
+          }
+        }
+      }
+    } else if (lane === "operation.receipt") {
+      if (publicMatch(path, [...protocolPaths, "status", "createdAt", "updatedAt", "error.code", "error.status", "error.retryable", "error.retryAfterMs", "resultError.code", "resultError.status", "resultReference.kind", "resultReference.conversationId", "resultReference.artifactId", "resultReference.assetId", "resultReference.uploadId", "resultReference.sessionId", "resultReference.requestId"])) return "public-metadata";
+      if (path[0] === "result" && (name === "consume_interaction" || name === "respond_interaction" || record4?.resultReference?.kind === "interaction")) return "restricted-secret";
+    } else if (lane === "query.request") {
+      if (publicMatch(path, queryRouting[name] ?? [])) return "public-metadata";
+    } else if (lane === "query.result" || lane === "ephemeral.result") {
+      if (name === "conversation_changes" && publicMatch(path, ["cursor", "hasMore", "reset", "admissionId"])) return "public-metadata";
+      if (name === "get_ephemeral" && path[0] === "value") return "private-content";
+    } else if (lane === "ephemeral.request") {
+      if (publicMatch(path, transientRouting[name] ?? [])) return "public-metadata";
+      if (name === "publish_turn" && path.length === 1 && Object.hasOwn(turnPresence, path[0]) && turnPresence[path[0]](selected)) return "public-metadata";
+    } else if (lane === "event") {
+      if (publicMatch(path, eventRouting(name))) return "public-metadata";
+    }
+    return "private-content";
+  }, "classify");
+  return Object.freeze({ lane, name, defaultClass: "private-content", classify });
+}
+__name(endpointContentBoundary, "endpointContentBoundary");
+
+// ../backend-contracts/src/preparedContent.ts
+var PREPARED_CONTENT_VERSION = 1;
+var PREPARED_JSON_CODEC = "canon.json.v1";
+var PreparedContentError = class extends Error {
+  constructor(code) {
+    super(code);
+    this.code = code;
+    this.name = "PreparedContentError";
+  }
+  code;
+  static {
+    __name(this, "PreparedContentError");
+  }
+};
+function invalid10() {
+  throw new PreparedContentError("INVALID_PREPARED_CONTENT");
+}
+__name(invalid10, "invalid");
+var record = /* @__PURE__ */ __name((value) => !!value && typeof value === "object" && !Array.isArray(value), "record");
+var keys = /* @__PURE__ */ __name((value, allowed) => Object.keys(value).every((key) => allowed.includes(key)), "keys");
+var revision = /* @__PURE__ */ __name((value) => Number.isSafeInteger(value) && value >= 0, "revision");
+var blobIdentity = /* @__PURE__ */ __name((value) => typeof value === "string" && value.length > 0 && value.length <= 1024 && !/[\u0000-\u001f]/.test(value), "blobIdentity");
+var identity = /* @__PURE__ */ __name((value) => typeof value === "string" && ENDPOINT_ID_PATTERN.test(value), "identity");
+function canonicalEndpointJson(value) {
+  const serialized = JSON.stringify(value);
+  if (serialized === void 0) throw new Error("Endpoint value is not JSON");
+  const normalized = JSON.parse(serialized);
+  function encode(input) {
+    if (input === null || typeof input !== "object") return JSON.stringify(input);
+    if (Array.isArray(input)) return `[${input.map(encode).join(",")}]`;
+    const object = input;
+    return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${encode(object[key])}`).join(",")}}`;
+  }
+  __name(encode, "encode");
+  return encode(normalized);
+}
+__name(canonicalEndpointJson, "canonicalEndpointJson");
+function validateMetadata(value) {
+  if (!record(value)) invalid10();
+  if (value.version !== PREPARED_CONTENT_VERSION) throw new PreparedContentError("UNSUPPORTED_PREPARED_CONTENT_VERSION");
+  if (value.codec !== PREPARED_JSON_CODEC) throw new PreparedContentError("UNSUPPORTED_PREPARED_CONTENT_CODEC");
+  if (!keys(value, ["version", "context", "codec", "payload", "blobs", "expected"])) invalid10();
+  const context = value.context;
+  if (!record(context) || !keys(context, ["action", "conversationId", "messageId"]) || typeof context.action !== "string" || !ENDPOINT_ACTION_PATTERN.test(context.action) || context.conversationId !== void 0 && !identity(context.conversationId) || context.messageId !== void 0 && !identity(context.messageId)) invalid10();
+  const expected = value.expected;
+  if (!record(expected) || !keys(expected, ["installationGeneration", "protocolRevision", "admission"]) || !revision(expected.installationGeneration) || !revision(expected.protocolRevision)) invalid10();
+  if (expected.admission !== void 0) {
+    const admission = expected.admission;
+    if (!record(admission) || !keys(admission, ["conversationId", "membershipRevision", "admissionId", "targetAdmissionId"]) || ["conversationId", "admissionId", "targetAdmissionId"].some((key) => admission[key] !== void 0 && !identity(admission[key])) || admission.membershipRevision !== void 0 && !revision(admission.membershipRevision) || context.conversationId !== void 0 && admission.conversationId !== void 0 && admission.conversationId !== context.conversationId) invalid10();
+  }
+  if (!Array.isArray(value.blobs)) invalid10();
+  const ids = /* @__PURE__ */ new Set();
+  for (const [index, blob] of value.blobs.entries()) {
+    if (!record(blob) || !keys(blob, ["id", "index"]) || !blobIdentity(blob.id) || blob.index !== index || ids.has(blob.id)) invalid10();
+    ids.add(blob.id);
+  }
+  if (typeof value.payload !== "string") invalid10();
+}
+__name(validateMetadata, "validateMetadata");
+function decodePreparedJsonContent(value) {
+  validateMetadata(value);
+  let decoded;
+  try {
+    decoded = JSON.parse(value.payload);
+  } catch {
+    invalid10();
+  }
+  if (!record(decoded) || !keys(decoded, ["body", "envelope"]) || !record(decoded.body) || decoded.envelope !== void 0 && !record(decoded.envelope)) invalid10();
+  if (canonicalEndpointJson(decoded) !== value.payload) invalid10();
+  const { body, envelope } = decoded;
+  if (endpointOperationRequestRetention(value.context.action, body, envelope) === "memory") {
+    throw new PreparedContentError("PREPARED_CONTENT_MEMORY_ONLY");
+  }
+  const effective = { ...body, ...envelope };
+  for (const key of ["conversationId", "messageId"]) {
+    const bound = value.context[key];
+    if (bound !== void 0 && effective[key] !== void 0 && effective[key] !== bound) invalid10();
+  }
+  return envelope === void 0 ? { body } : { body, envelope };
+}
+__name(decodePreparedJsonContent, "decodePreparedJsonContent");
+function freeze(value) {
+  if (value && typeof value === "object") {
+    for (const child of Object.values(value)) freeze(child);
+    Object.freeze(value);
+  }
+  return value;
+}
+__name(freeze, "freeze");
+function prepareJsonContent(input) {
+  if (endpointOperationRequestRetention(input.context.action, input.body, input.envelope) === "memory") {
+    throw new PreparedContentError("PREPARED_CONTENT_MEMORY_ONLY");
+  }
+  const content = JSON.parse(canonicalEndpointJson({
+    version: PREPARED_CONTENT_VERSION,
+    codec: PREPARED_JSON_CODEC,
+    context: input.context,
+    payload: canonicalEndpointJson({ body: input.body, ...input.envelope === void 0 ? {} : { envelope: input.envelope } }),
+    blobs: input.blobs ?? [],
+    expected: input.expected
+  }));
+  decodePreparedJsonContent(content);
+  return freeze(content);
+}
+__name(prepareJsonContent, "prepareJsonContent");
+
+// ../backend-contracts/src/endpoint.ts
+var CANON_ENDPOINT_PROTOCOL = "canon.endpoint.v1";
+var ENDPOINT_ID_PATTERN = /^[A-Za-z0-9_.:~-]{1,200}$/;
+var ENDPOINT_ACTION_PATTERN = /^[a-z][a-z0-9_.-]{0,95}$/;
+function isEndpointOperationReceipt(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const receipt = value;
+  return receipt.protocol === CANON_ENDPOINT_PROTOCOL && typeof receipt.operationId === "string" && ENDPOINT_ID_PATTERN.test(receipt.operationId) && typeof receipt.installationId === "string" && ENDPOINT_ID_PATTERN.test(receipt.installationId) && typeof receipt.action === "string" && ENDPOINT_ACTION_PATTERN.test(receipt.action) && ["pending", "succeeded", "rejected", "uncertain"].includes(String(receipt.status)) && typeof receipt.createdAt === "string" && typeof receipt.updatedAt === "string";
+}
+__name(isEndpointOperationReceipt, "isEndpointOperationReceipt");
+var AGENT_HOME_ELSEWHERE = "AGENT_HOME_ELSEWHERE";
+function agentHomeElsewhereMessage(agentName, home) {
+  const name = agentName?.trim() || "This agent";
+  const since = home.since ? `, since ${new Date(home.since).toISOString().slice(0, 16).replace("T", " ")} UTC` : "";
+  return home.kind === "connector" ? `${name} gets its messages through Canon's relay for its MCP connection${since}. Its owner can turn the relay off at /connect on Canon's web app to run it here.` : `${name} now runs on another machine${since}. Stop this one, or start it with --take-over to move ${name} back here.`;
+}
+__name(agentHomeElsewhereMessage, "agentHomeElsewhereMessage");
+
+// ../backend-contracts/src/mlsDevCredentialReconciliation.ts
+var MLS_DEV_CREDENTIAL_RECONCILIATION_CHALLENGE_TTL_MS = 3e5;
+var MLS_DEV_CREDENTIAL_RECONCILIATION_MAX_BYTES = 8192;
+var MlsDevCredentialReconciliationValidationError = class extends Error {
+  static {
+    __name(this, "MlsDevCredentialReconciliationValidationError");
+  }
+  code = "INVALID_MLS_DEV_CREDENTIAL_RECONCILIATION";
+  constructor() {
+    super("INVALID_MLS_DEV_CREDENTIAL_RECONCILIATION");
+    this.name = "MlsDevCredentialReconciliationValidationError";
+  }
+};
+var utf86 = new TextEncoder();
+var domain2 = utf86.encode("canon.mls.credential-reconciliation-proof.v1\0");
+function invalid11() {
+  throw new MlsDevCredentialReconciliationValidationError();
+}
+__name(invalid11, "invalid");
+function boundary9(read) {
+  try {
+    return read();
+  } catch {
+    return invalid11();
+  }
+}
+__name(boundary9, "boundary");
+function bounded7(value) {
+  if (utf86.encode(JSON.stringify(value)).length > MLS_DEV_CREDENTIAL_RECONCILIATION_MAX_BYTES) invalid11();
+  return Object.freeze(value);
+}
+__name(bounded7, "bounded");
+function encoded6(value, bytes) {
+  decodeCanonicalMlsBase64Url(value, bytes);
+  return value;
+}
+__name(encoded6, "encoded");
+function parseMlsDevCredentialReconciliationBegin(value) {
+  return boundary9(() => {
+    const input = readMlsDataRecord(value, ["version", "deviceId", "requestId", "expectedCredentialGeneration"]);
+    return bounded7({
+      version: requireMlsLiteral(input.version, 1),
+      deviceId: requireMlsUuid(input.deviceId),
+      requestId: requireMlsUuid(input.requestId),
+      expectedCredentialGeneration: requireMlsInteger(input.expectedCredentialGeneration)
+    });
+  });
+}
+__name(parseMlsDevCredentialReconciliationBegin, "parseMlsDevCredentialReconciliationBegin");
+function parseMlsDevCredentialReconciliationChallenge(value) {
+  return boundary9(() => {
+    const input = readMlsDataRecord(value, [
+      "version",
+      "challengeId",
+      "requestId",
+      "nonce",
+      "device",
+      "expectedCredentialGeneration",
+      "issuedAtMs",
+      "expiresAtMs"
+    ]);
+    const device = parseMlsDevEnrollmentResult({ version: 1, authorization: "registration_only", device: input.device }).device;
+    const issuedAtMs = requireMlsInteger(input.issuedAtMs), expiresAtMs = requireMlsInteger(input.expiresAtMs);
+    if (issuedAtMs < device.registeredAtMs || expiresAtMs - issuedAtMs !== MLS_DEV_CREDENTIAL_RECONCILIATION_CHALLENGE_TTL_MS) invalid11();
+    return bounded7({
+      version: requireMlsLiteral(input.version, 1),
+      challengeId: requireMlsUuid(input.challengeId),
+      requestId: requireMlsUuid(input.requestId),
+      nonce: encoded6(input.nonce, 32),
+      device,
+      expectedCredentialGeneration: requireMlsInteger(input.expectedCredentialGeneration),
+      issuedAtMs,
+      expiresAtMs
+    });
+  });
+}
+__name(parseMlsDevCredentialReconciliationChallenge, "parseMlsDevCredentialReconciliationChallenge");
+function parseMlsDevCredentialReconciliationComplete(value) {
+  return boundary9(() => {
+    const input = readMlsDataRecord(value, ["version", "challengeId", "proof"]);
+    return bounded7({ version: requireMlsLiteral(input.version, 1), challengeId: requireMlsUuid(input.challengeId), proof: encoded6(input.proof, 64) });
+  });
+}
+__name(parseMlsDevCredentialReconciliationComplete, "parseMlsDevCredentialReconciliationComplete");
+function parseMlsDevCredentialReconciliationReceipt(value) {
+  return boundary9(() => {
+    const input = readMlsDataRecord(value, ["version", "authorization", "challenge", "observedCredentialGeneration", "observedAtMs"]);
+    const challenge = parseMlsDevCredentialReconciliationChallenge(input.challenge);
+    const observedCredentialGeneration = requireMlsInteger(input.observedCredentialGeneration), observedAtMs = requireMlsInteger(input.observedAtMs);
+    if (observedCredentialGeneration < challenge.expectedCredentialGeneration || observedAtMs < challenge.issuedAtMs || observedAtMs >= challenge.expiresAtMs) invalid11();
+    return bounded7({
+      version: requireMlsLiteral(input.version, 1),
+      authorization: requireMlsLiteral(input.authorization, "credential_generation_observation_only"),
+      challenge,
+      observedCredentialGeneration,
+      observedAtMs
+    });
+  });
+}
+__name(parseMlsDevCredentialReconciliationReceipt, "parseMlsDevCredentialReconciliationReceipt");
+
+// ../backend-contracts/src/mlsDevDeviceCustody.ts
+var MLS_DEV_DEVICE_CONTEXT_MAX_BYTES = 2048;
+var MLS_DEV_DEVICE_COMMAND_MAX_BYTES = 16384;
+var MLS_DEV_DEVICE_WRAPPED_STATE_MAX_BYTES = 6144;
+var MlsDevDeviceCustodyValidationError = class extends Error {
+  static {
+    __name(this, "MlsDevDeviceCustodyValidationError");
+  }
+  code = "INVALID_MLS_DEV_DEVICE_CUSTODY";
+  constructor() {
+    super("INVALID_MLS_DEV_DEVICE_CUSTODY");
+    this.name = "MlsDevDeviceCustodyValidationError";
+  }
+};
+var utf87 = new TextEncoder();
+function invalid12() {
+  throw new MlsDevDeviceCustodyValidationError();
+}
+__name(invalid12, "invalid");
+function boundary10(read) {
+  try {
+    return read();
+  } catch {
+    return invalid12();
+  }
+}
+__name(boundary10, "boundary");
+function bounded8(value, limit2) {
+  if (utf87.encode(JSON.stringify(value)).length > limit2) invalid12();
+  return Object.freeze(value);
+}
+__name(bounded8, "bounded");
+function binding2(input) {
+  return {
+    version: requireMlsLiteral(input.version, 1),
+    environmentId: requireMlsEnvironmentId(input.environmentId),
+    principal: parseMlsDevEnrollmentPrincipal(input.principal),
+    installationId: parseMlsDevInstallationId(input.installationId)
+  };
+}
+__name(binding2, "binding");
+function parseMlsDevDeviceBinding(value) {
+  return boundary10(() => bounded8(binding2(readMlsDataRecord(value, ["version", "environmentId", "principal", "installationId"])), MLS_DEV_DEVICE_CONTEXT_MAX_BYTES));
+}
+__name(parseMlsDevDeviceBinding, "parseMlsDevDeviceBinding");
+function parseMlsDevDeviceContext(value) {
+  return boundary10(() => {
+    const input = readMlsDataRecord(value, ["version", "environmentId", "principal", "installationId", "revision"]);
+    const revision2 = requireMlsInteger(input.revision);
+    if (revision2 >= Number.MAX_SAFE_INTEGER) invalid12();
+    return bounded8({ ...binding2(input), revision: revision2 }, MLS_DEV_DEVICE_CONTEXT_MAX_BYTES);
+  });
+}
+__name(parseMlsDevDeviceContext, "parseMlsDevDeviceContext");
+function parseMlsDevDeviceCommand(value) {
+  return boundary10(() => {
+    if (value === null || typeof value !== "object") invalid12();
+    const descriptor = Object.getOwnPropertyDescriptor(value, "op");
+    if (!descriptor || !Object.hasOwn(descriptor, "value")) invalid12();
+    if (descriptor.value === "create") {
+      const input2 = readMlsDataRecord(value, ["op"]);
+      return Object.freeze({ op: requireMlsLiteral(input2.op, "create") });
+    }
+    if (descriptor.value === "enrollment_proof") {
+      const input2 = readMlsDataRecord(value, ["op", "challenge"]);
+      return bounded8({
+        op: requireMlsLiteral(input2.op, "enrollment_proof"),
+        challenge: parseMlsDevEnrollmentChallenge(input2.challenge)
+      }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
+    }
+    if (descriptor.value === "credential_reconciliation_proof") {
+      const input2 = readMlsDataRecord(value, ["op", "challenge", "expectedCredentialGeneration"]);
+      const challenge2 = parseMlsDevCredentialReconciliationChallenge(input2.challenge);
+      const expectedCredentialGeneration2 = requireMlsInteger(input2.expectedCredentialGeneration);
+      if (challenge2.expectedCredentialGeneration !== expectedCredentialGeneration2) invalid12();
+      return bounded8({
+        op: requireMlsLiteral(input2.op, "credential_reconciliation_proof"),
+        challenge: challenge2,
+        expectedCredentialGeneration: expectedCredentialGeneration2
+      }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
+    }
+    if (descriptor.value !== "credential_proof") invalid12();
+    const input = readMlsDataRecord(value, ["op", "challenge", "registrationResult", "expectedCredentialGeneration"]);
+    const challenge = parseMlsDevCredentialChallenge(input.challenge);
+    const registrationResult = parseMlsDevEnrollmentResult(input.registrationResult);
+    const expectedCredentialGeneration = requireMlsInteger(input.expectedCredentialGeneration);
+    if (expectedCredentialGeneration >= Number.MAX_SAFE_INTEGER || challenge.credential.claims.generation !== expectedCredentialGeneration + 1 || JSON.stringify(challenge.credential.claims.device) !== JSON.stringify(registrationResult.device)) invalid12();
+    return bounded8({
+      op: requireMlsLiteral(input.op, "credential_proof"),
+      challenge,
+      registrationResult,
+      expectedCredentialGeneration
+    }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
+  });
+}
+__name(parseMlsDevDeviceCommand, "parseMlsDevDeviceCommand");
+function encoded7(value, bytes) {
+  decodeCanonicalMlsBase64Url(value, bytes);
+  return value;
+}
+__name(encoded7, "encoded");
+function wrapped(value) {
+  if (typeof value !== "string" || value.length > MLS_DEV_DEVICE_WRAPPED_STATE_MAX_BYTES || !value.startsWith("v1:")) invalid12();
+  const body = value.slice(3);
+  if (body.length < 40 || body.length % 4 !== 0 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(body)) invalid12();
+  const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+  if (body.endsWith("==") && (alphabet.indexOf(body.at(-3)) & 15) !== 0) invalid12();
+  if (!body.endsWith("==") && body.endsWith("=") && (alphabet.indexOf(body.at(-2)) & 3) !== 0) invalid12();
+  return value;
+}
+__name(wrapped, "wrapped");
+function parseMlsDevDevicePreparation(value, op) {
+  return boundary10(() => {
+    if (!["create", "enrollment_proof", "credential_proof", "credential_reconciliation_proof"].includes(op)) invalid12();
+    const input = readMlsDataRecord(value, ["wrappedState", "payload"]);
+    const payload = readMlsDataRecord(input.payload, op === "create" ? ["signaturePublicKey"] : ["signaturePublicKey", "proof"]);
+    return bounded8({ wrappedState: wrapped(input.wrappedState), payload: Object.freeze({
+      signaturePublicKey: encoded7(payload.signaturePublicKey, 32),
+      ...op === "create" ? {} : { proof: encoded7(payload.proof, 64) }
+    }) }, MLS_DEV_DEVICE_COMMAND_MAX_BYTES);
+  });
+}
+__name(parseMlsDevDevicePreparation, "parseMlsDevDevicePreparation");
+
+// ../backend-contracts/src/clientFloor.ts
+var CANON_CLIENT_HEADER = "X-Canon-Client";
+var CLIENT_UPDATE_REQUIRED = "CLIENT_UPDATE_REQUIRED";
+var CANON_CLIENT_KINDS = ["app-ios", "app-android", "web", "runner", "hermes", "core", "connector"];
+var VERSION = /^(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})\.(0|[1-9]\d{0,5})$/;
+var isKind = /* @__PURE__ */ __name((value) => CANON_CLIENT_KINDS.includes(value), "isKind");
+function isCanonClientVersion(value) {
+  return typeof value === "string" && VERSION.test(value);
+}
+__name(isCanonClientVersion, "isCanonClientVersion");
+function formatCanonClientHeader(client) {
+  if (!isKind(client.kind) || !isCanonClientVersion(client.version)) throw new Error("Invalid Canon client identity");
+  return `${client.kind}/${client.version}`;
+}
+__name(formatCanonClientHeader, "formatCanonClientHeader");
+
+// ../backend-contracts/src/upload-mime-types.ts
+var MIME_TYPE_RE = /^[a-z0-9.+-]+\/[a-z0-9.+-]+$/i;
+var SAFE_IMAGE_MIME_TYPES = /* @__PURE__ */ new Set([
+  "image/jpeg",
+  "image/png",
+  "image/webp",
+  "image/gif"
+]);
+var SAFE_AUDIO_MIME_TYPES = /* @__PURE__ */ new Set([
+  "audio/mp4",
+  "audio/x-m4a",
+  "audio/mpeg",
+  "audio/webm",
+  "audio/ogg",
+  "audio/wav",
+  // ADTS AAC — the future Android streamable-memo lane; harmless standalone.
+  "audio/aac"
+]);
+var SAFE_VIDEO_MIME_TYPES = /* @__PURE__ */ new Set([
+  "video/mp4",
+  "video/quicktime",
+  "video/webm",
+  "video/x-m4v"
+]);
+var SAFE_FILE_MIME_TYPES = /* @__PURE__ */ new Set([
+  "application/pdf",
+  "text/plain",
+  "text/markdown",
+  "text/x-markdown",
+  "text/csv",
+  "application/csv",
+  "application/json",
+  "application/zip",
+  "application/vnd.ms-excel",
+  "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
+]);
+var SAFE_FILE_MIME_BY_EXTENSION = {
+  csv: "text/csv",
+  json: "application/json",
+  md: "text/markdown",
+  markdown: "text/markdown",
+  pdf: "application/pdf",
+  txt: "text/plain",
+  xls: "application/vnd.ms-excel",
+  xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+  zip: "application/zip"
+};
+var SAFE_VIDEO_MIME_BY_EXTENSION = {
+  m4v: "video/x-m4v",
+  mov: "video/quicktime",
+  mp4: "video/mp4",
+  webm: "video/webm"
 };
-function eventRouting(name) {
-  if (name.startsWith("ephemeral.")) return ["conversationId", "scopeId"];
-  if (name === "connected") return ["protocol", "connectionId", "agentId", "principalId", "principalType"];
-  if (name === "heartbeat") return ["timestamp"];
-  if (name === "error") return ["code", "status", "retryable", "retryAfterMs", "retryAfter", "activeConnections", "maxConnections"];
-  if (name === "participation.suppressed") return ["conversationId", "agentId", "messageId"];
-  if (name === "agent.context") return ["agentId", "ownerId", "ownershipVersion"];
-  if (name === "conversations.changed") return ["conversationIds.*", "removedConversationIds.*"];
-  if (name === "artifact.changed") return ["conversationId", "artifactId", "sequence", "eventId"];
-  if (name.startsWith("message.")) return ["conversationId", "messageId", "eventId", "id", "message.id", "message.conversationId", "message.senderId", "message.senderType", "message.createdAt", "message.replyTo", "message.mentions.*"];
-  if (name.startsWith("conversation.")) return ["conversationId"];
-  if (name.startsWith("contact.")) return ["contactId"];
-  if (name.startsWith("voice.session.")) return ["conversationId", "sessionId"];
-  if (/^(runtime\.|turn\.|typing$|presence$)/.test(name)) return ["conversationId", "agentId", "userId", "memberId"];
-  return [];
+var SAFE_AUDIO_MIME_BY_EXTENSION = {
+  aac: "audio/aac",
+  m4a: "audio/x-m4a",
+  mp3: "audio/mpeg",
+  oga: "audio/ogg",
+  ogg: "audio/ogg",
+  wav: "audio/wav"
+};
+function normalizeMimeType(value) {
+  if (typeof value !== "string") return null;
+  const normalized = value.split(";")[0].trim().toLowerCase();
+  if (!MIME_TYPE_RE.test(normalized)) return null;
+  if (normalized === "image/jpg") return "image/jpeg";
+  return normalized;
 }
-__name(eventRouting, "eventRouting");
-var secretSegments = /* @__PURE__ */ new Set(["token", "accessToken", "refreshToken", "uploadUrl", "signedUrl", "livekitToken", "replyAuthority", "renewReplyAuthorityToken", "credentials", "password", "secret", "authorization", "answer", "answers", "response", "submittedValue"]);
-var matches = /* @__PURE__ */ __name((path, pattern) => {
-  const parts = pattern.split(".");
-  return parts.length === path.length && parts.every((part, index) => part === path[index] || part === "*" && /^\d+$/.test(path[index]));
-}, "matches");
-var publicMatch = /* @__PURE__ */ __name((path, patterns) => patterns.some((pattern) => matches(path, pattern)), "publicMatch");
-function endpointOperationRequestRetention(action, body, envelope) {
-  if (action !== "respond_interaction") return "journal";
-  if (envelope && Object.keys(envelope).length > 0) return "memory";
-  const routing = ["kind", "conversationId", "agentId", "requestId"];
-  const hasOnly = /* @__PURE__ */ __name((fields2) => Object.keys(body).every((field) => fields2.includes(field)), "hasOnly");
-  if (routing.some((field) => body[field] !== void 0 && typeof body[field] !== "string")) return "memory";
-  if ((body.kind === "input" || body.kind === "card") && hasOnly([...routing, "status", "actionId"])) {
-    if (!["submitted", "cancelled"].includes(String(body.status)) || body.actionId !== void 0 && typeof body.actionId !== "string") return "memory";
-    return "journal";
+__name(normalizeMimeType, "normalizeMimeType");
+function inferSafeFileMimeTypeFromName(value) {
+  if (typeof value !== "string") return null;
+  const extension = value.trim().split(/[\\/]/).pop()?.split(".").pop()?.toLowerCase() ?? "";
+  return SAFE_FILE_MIME_BY_EXTENSION[extension] ?? null;
+}
+__name(inferSafeFileMimeTypeFromName, "inferSafeFileMimeTypeFromName");
+function inferSafeVideoMimeTypeFromName(value) {
+  if (typeof value !== "string") return null;
+  const extension = value.trim().split(/[\\/]/).pop()?.split(".").pop()?.toLowerCase() ?? "";
+  return SAFE_VIDEO_MIME_BY_EXTENSION[extension] ?? null;
+}
+__name(inferSafeVideoMimeTypeFromName, "inferSafeVideoMimeTypeFromName");
+function inferSafeAudioMimeTypeFromName(value) {
+  if (typeof value !== "string") return null;
+  const extension = value.trim().split(/[\\/]/).pop()?.split(".").pop()?.toLowerCase() ?? "";
+  return SAFE_AUDIO_MIME_BY_EXTENSION[extension] ?? null;
+}
+__name(inferSafeAudioMimeTypeFromName, "inferSafeAudioMimeTypeFromName");
+function shouldTrustSafeFileName(mimeType) {
+  return !mimeType || mimeType === "application/octet-stream" || mimeType === "application/vnd.ms-excel" || mimeType === "text/plain";
+}
+__name(shouldTrustSafeFileName, "shouldTrustSafeFileName");
+function classifyAllowedUploadMimeType(value) {
+  const mimeType = normalizeMimeType(value);
+  if (!mimeType) return null;
+  if (SAFE_IMAGE_MIME_TYPES.has(mimeType)) return "image";
+  if (SAFE_AUDIO_MIME_TYPES.has(mimeType)) return "audio";
+  if (SAFE_VIDEO_MIME_TYPES.has(mimeType)) return "video";
+  if (SAFE_FILE_MIME_TYPES.has(mimeType)) return "file";
+  return null;
+}
+__name(classifyAllowedUploadMimeType, "classifyAllowedUploadMimeType");
+function resolveAllowedUploadMimeType(input) {
+  const normalizedMimeType = normalizeMimeType(input.mimeType);
+  const hasExplicitMimeType = typeof input.mimeType === "string" && input.mimeType.trim().length > 0;
+  const inferredVideoMimeType = inferSafeVideoMimeTypeFromName(input.fileName);
+  const inferredAudioMimeType = inferSafeAudioMimeTypeFromName(input.fileName);
+  const inferredFileMimeType = inferSafeFileMimeTypeFromName(input.fileName);
+  if (hasExplicitMimeType && !normalizedMimeType) {
+    return null;
+  }
+  if (inferredVideoMimeType && (!normalizedMimeType || normalizedMimeType === "application/octet-stream")) {
+    return inferredVideoMimeType;
+  }
+  if (inferredAudioMimeType && (!normalizedMimeType || normalizedMimeType === "application/octet-stream")) {
+    return inferredAudioMimeType;
+  }
+  if (inferredFileMimeType && shouldTrustSafeFileName(normalizedMimeType)) {
+    return inferredFileMimeType;
+  }
+  if (normalizedMimeType && classifyAllowedUploadMimeType(normalizedMimeType)) {
+    return normalizedMimeType;
+  }
+  return normalizedMimeType ? null : inferredFileMimeType;
+}
+__name(resolveAllowedUploadMimeType, "resolveAllowedUploadMimeType");
+
+// ../backend-contracts/src/messageText.ts
+var HUMAN_MESSAGE_TEXT_MAX_BYTES = 32 * 1024;
+var UTF8_ENCODER = new TextEncoder();
+
+// ../backend-contracts/src/runtimeCardFields.ts
+var RUNTIME_CARD_FIELD_TYPES = [
+  "text",
+  "textarea",
+  "select",
+  "multiSelect",
+  "boolean",
+  "date",
+  "number",
+  "currency",
+  "searchSelect",
+  "lineItems"
+];
+var RUNTIME_CARD_LINE_ITEM_COLUMN_TYPES = [
+  "text",
+  "number",
+  "currency",
+  "date",
+  "select"
+];
+
+// ../backend-contracts/src/membershipChange.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+__name(isRecord, "isRecord");
+function isMembershipChangeMessage(message) {
+  return isRecord(message.metadata) && message.metadata.type === "membership_change";
+}
+__name(isMembershipChangeMessage, "isMembershipChangeMessage");
+function isNameOrId(value) {
+  return value === null || typeof value === "string" && value.trim().length > 0;
+}
+__name(isNameOrId, "isNameOrId");
+function readMembershipChangeMetadata(metadata) {
+  if (!isRecord(metadata) || metadata.type !== "membership_change" || metadata.action !== "added" && metadata.action !== "removed" && metadata.action !== "left" || !isNameOrId(metadata.actorId) || !isNameOrId(metadata.actorName) || !isNameOrId(metadata.memberId) || typeof metadata.memberName !== "string" || !metadata.memberName.trim() || !Number.isSafeInteger(metadata.membershipRevision) || Number(metadata.membershipRevision) < 1 || metadata.turnSemantics !== "control" || metadata.replyBehavior !== "suppress_auto_reply") {
+    return null;
+  }
+  return {
+    type: "membership_change",
+    action: metadata.action,
+    actorId: metadata.actorId,
+    actorName: metadata.actorName,
+    memberId: metadata.memberId,
+    memberName: metadata.memberName,
+    membershipRevision: metadata.membershipRevision,
+    turnSemantics: "control",
+    replyBehavior: "suppress_auto_reply"
+  };
+}
+__name(readMembershipChangeMetadata, "readMembershipChangeMetadata");
+function formatMembershipChangeNotice(metadata, currentUserId) {
+  const isActor = !!currentUserId && metadata.actorId === currentUserId;
+  const isMember = !!currentUserId && metadata.memberId === currentUserId;
+  if (metadata.action === "left") {
+    return `${isMember ? "You" : metadata.memberName} left`;
+  }
+  const actor = isActor ? "You" : metadata.actorName ?? "A member";
+  const member2 = isMember ? "you" : metadata.memberName;
+  return `${actor} ${metadata.action} ${member2}`;
+}
+__name(formatMembershipChangeNotice, "formatMembershipChangeNotice");
+
+// ../backend-contracts/src/turnProtocol.ts
+var ACTIVE_TURN_STALE_THRESHOLD_MS = 30 * 60 * 1e3;
+var WAITING_INPUT_STALE_THRESHOLD_MS = 12 * 60 * 60 * 1e3;
+var TURN_SEMANTICS = [
+  "progress",
+  "turn_complete",
+  "control"
+];
+var DELIVERY_INTENTS = [
+  "queue",
+  "interrupt",
+  "interleave",
+  "stop"
+];
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+__name(isRecord2, "isRecord");
+function normalizeTurnMetadata(metadata) {
+  if (!isRecord2(metadata)) return null;
+  const turnId = typeof metadata.turnId === "string" && metadata.turnId.trim() ? metadata.turnId.trim() : null;
+  const turnSemantics = TURN_SEMANTICS.includes(metadata.turnSemantics) ? metadata.turnSemantics : void 0;
+  const deliveryIntent = DELIVERY_INTENTS.includes(metadata.deliveryIntent) ? metadata.deliveryIntent : void 0;
+  const replyBehavior = metadata.replyBehavior === "allow_auto_reply" || metadata.replyBehavior === "suppress_auto_reply" ? metadata.replyBehavior : void 0;
+  const inboundDisposition = metadata.inboundDisposition === "queued" || metadata.inboundDisposition === "accepted_now" || metadata.inboundDisposition === "interleaved" || metadata.inboundDisposition === "trigger_suppressed" || metadata.inboundDisposition === "rejected" || metadata.inboundDisposition === "cancelled" ? metadata.inboundDisposition : void 0;
+  const requestedTurnMode = typeof metadata.requestedTurnMode === "string" && /^[A-Za-z0-9_.:-]{1,80}$/.test(metadata.requestedTurnMode.trim()) ? metadata.requestedTurnMode.trim() : void 0;
+  if (!turnId && !turnSemantics && !deliveryIntent && !replyBehavior && !inboundDisposition && !requestedTurnMode) {
+    return null;
+  }
+  return {
+    ...turnId ? { turnId } : {},
+    ...turnSemantics ? { turnSemantics } : {},
+    ...deliveryIntent ? { deliveryIntent } : {},
+    ...replyBehavior ? { replyBehavior } : {},
+    ...inboundDisposition ? { inboundDisposition } : {},
+    ...requestedTurnMode ? { requestedTurnMode } : {}
+  };
+}
+__name(normalizeTurnMetadata, "normalizeTurnMetadata");
+function resolveTurnMessageSemantics(input) {
+  if (isMembershipChangeMessage(input)) return "control";
+  const turnMetadata = normalizeTurnMetadata(input.metadata);
+  if (turnMetadata?.turnSemantics) return turnMetadata.turnSemantics;
+  if (input.senderType === "human") return "turn_complete";
+  return "progress";
+}
+__name(resolveTurnMessageSemantics, "resolveTurnMessageSemantics");
+function shouldTriggerAgentTurn(input) {
+  if (isMembershipChangeMessage(input)) {
+    return { allow: false, semantics: "control", reason: "membership notices do not trigger agent replies" };
+  }
+  const semantics = resolveTurnMessageSemantics(input);
+  const turnMetadata = normalizeTurnMetadata(input.metadata);
+  if (turnMetadata?.replyBehavior === "suppress_auto_reply") {
+    return {
+      allow: false,
+      semantics,
+      reason: "metadata explicitly suppresses auto-reply"
+    };
+  }
+  if (input.senderType === "human") {
+    return {
+      allow: true,
+      semantics,
+      reason: "human messages always remain triggerable"
+    };
+  }
+  if (semantics === "progress") {
+    return {
+      allow: false,
+      semantics,
+      reason: turnMetadata?.turnSemantics === "progress" ? "non-final agent progress does not trigger other agents" : "agent messages require explicit turn_complete semantics"
+    };
   }
-  if (body.kind === "approval" && hasOnly([...routing, "decision", "sessionRule"])) {
-    if (body.decision !== "allow" && body.decision !== "deny") return "memory";
-    const rule = body.sessionRule;
-    if (rule !== void 0 && (!rule || typeof rule !== "object" || Array.isArray(rule) || !Object.entries(rule).every(([field, value]) => ["type", "toolPattern", "expiresAt"].includes(field) && (typeof value === "string" || field === "expiresAt" && value === null)))) return "memory";
-    return "journal";
+  return {
+    allow: true,
+    semantics,
+    reason: "agent message is treated as turn-complete"
+  };
+}
+__name(shouldTriggerAgentTurn, "shouldTriggerAgentTurn");
+
+// ../backend-contracts/src/agentBehaviorPolicy.ts
+var PARTICIPATION_HISTORY_FETCH_LIMIT = 50;
+var DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS = 4;
+var DEFAULT_DIRECT_MAX_CONSECUTIVE_AGENT_TURNS = 4;
+function defaultMaxConsecutiveAgentTurns(conversationType) {
+  if (conversationType === "group") {
+    return DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS;
   }
-  if (body.kind === "plan" && hasOnly([...routing, "decision", "feedback", "grantedPrompts"])) {
-    if (!["approve", "revise", "reject"].includes(String(body.decision)) || body.feedback !== void 0 && typeof body.feedback !== "string") return "memory";
-    const prompts = body.grantedPrompts;
-    if (prompts !== void 0 && (!Array.isArray(prompts) || prompts.some((prompt) => !prompt || typeof prompt !== "object" || Array.isArray(prompt) || !Object.entries(prompt).every(([field, value]) => ["tool", "prompt"].includes(field) && typeof value === "string")))) return "memory";
-    return "journal";
+  if (conversationType === "direct") {
+    return DEFAULT_DIRECT_MAX_CONSECUTIVE_AGENT_TURNS;
   }
-  return "memory";
+  return null;
 }
-__name(endpointOperationRequestRetention, "endpointOperationRequestRetention");
-function endpointContentBoundary(lane, name, payload) {
-  if (!namesForLane[lane]?.includes(name)) throw new EndpointContentPolicyError(lane, name);
-  const record4 = payload && typeof payload === "object" ? payload : void 0;
-  if (lane === "query.request" && name === "get_ephemeral" && record4 && !ENDPOINT_CONTENT_EPHEMERAL_FAMILIES.includes(record4.family)) {
-    throw new EndpointContentPolicyError(lane, `${name}/unknown-family`);
+__name(defaultMaxConsecutiveAgentTurns, "defaultMaxConsecutiveAgentTurns");
+var DEFAULT_POLICY = {
+  participation: {
+    style: "natural",
+    allowAgentToAgent: true,
+    allowHumanToAgent: true,
+    allowLongRunningCollaboration: true,
+    requireMentionForGroupReplies: false,
+    maxConsecutiveAgentTurns: null
+  },
+  instructions: [],
+  source: {
+    hasAgentDefault: false,
+    hasConversationOverride: false
   }
-  const requestRoutingPaths = (actionRouting[name] ?? []).flatMap((field) => [`body.value.${field}`, `envelope.${field}`]);
-  const classify = /* @__PURE__ */ __name((path) => {
-    if (path.some((part) => secretSegments.has(part))) return "restricted-secret";
-    if (lane === "operation.request" && ["respond_interaction", "sync_phone_contacts"].includes(name) && matches(path, "preparedContent.payload")) return "restricted-secret";
-    if (lane === "operation.request" && ["respond_interaction", "sync_phone_contacts"].includes(name) && path[0] === "body" && path[1] === "value" && !publicMatch(path, requestRoutingPaths)) return "restricted-secret";
-    if (lane === "operation.receipt" && path[0] === "result" && (["consume_interaction", "respond_interaction"].includes(name) || record4?.resultReference?.kind === "interaction")) return "restricted-secret";
-    let selected = payload;
-    for (const part of path) selected = selected && typeof selected === "object" && Object.hasOwn(selected, part) ? selected[part] : void 0;
-    if (selected !== null && typeof selected === "object") return "private-content";
-    if (lane === "operation.request") {
-      if (publicMatch(path, protocolPaths) || publicMatch(path, requestRoutingPaths)) return "public-metadata";
-      if (name === "respond_interaction" && path[0] === "body" && path[1] === "value") return "restricted-secret";
-      if (name === "sync_phone_contacts" && path[0] === "body" && path[1] === "value") return "restricted-secret";
-      if (name === "verb_execute") {
-        const wire4 = record4?.body?.value;
-        const spec = VERB_WIRE_ENVELOPE_FIELDS[wire4?.verb];
-        if (path[0] === "body" && path[1] === "value") {
-          if (path.length === 3 && ["wire", "verb"].includes(path[2])) return "public-metadata";
-          if (path[2] === "envelope" && spec) {
-            const field = path[3];
-            const allowed = [...spec.required, ...spec.optional];
-            if (field && allowed.includes(field) && (path.length === 4 || path.length === 5 && ["mentions", "memberIds"].includes(field) && /^\d+$/.test(path[4]))) return "public-metadata";
-          }
-        }
-      }
-    } else if (lane === "operation.receipt") {
-      if (publicMatch(path, [...protocolPaths, "status", "createdAt", "updatedAt", "error.code", "error.status", "error.retryable", "error.retryAfterMs", "resultError.code", "resultError.status", "resultReference.kind", "resultReference.conversationId", "resultReference.artifactId", "resultReference.assetId", "resultReference.uploadId", "resultReference.sessionId", "resultReference.requestId"])) return "public-metadata";
-      if (path[0] === "result" && (name === "consume_interaction" || name === "respond_interaction" || record4?.resultReference?.kind === "interaction")) return "restricted-secret";
-    } else if (lane === "query.request") {
-      if (publicMatch(path, queryRouting[name] ?? [])) return "public-metadata";
-    } else if (lane === "query.result" || lane === "ephemeral.result") {
-      if (name === "conversation_changes" && publicMatch(path, ["cursor", "hasMore", "reset", "admissionId"])) return "public-metadata";
-      if (name === "get_ephemeral" && path[0] === "value") return "private-content";
-    } else if (lane === "ephemeral.request") {
-      if (publicMatch(path, transientRouting[name] ?? [])) return "public-metadata";
-      if (name === "publish_turn" && path.length === 1 && Object.hasOwn(turnPresence, path[0]) && turnPresence[path[0]](selected)) return "public-metadata";
-    } else if (lane === "event") {
-      if (publicMatch(path, eventRouting(name))) return "public-metadata";
+};
+function coalesceBoolean(overrideValue, fallbackValue, defaultValue) {
+  if (typeof overrideValue === "boolean") return overrideValue;
+  if (typeof fallbackValue === "boolean") return fallbackValue;
+  return defaultValue;
+}
+__name(coalesceBoolean, "coalesceBoolean");
+function normalizeAgentBehaviorInstructions(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+__name(normalizeAgentBehaviorInstructions, "normalizeAgentBehaviorInstructions");
+function resolveAgentBehaviorPolicy(params) {
+  const agentDefault = params?.agentDefault ?? null;
+  const conversationOverride = params?.conversationOverride ?? null;
+  const defaultInstructions = normalizeAgentBehaviorInstructions(agentDefault?.instructions);
+  const overrideInstructions = normalizeAgentBehaviorInstructions(conversationOverride?.instructions);
+  return {
+    participation: {
+      style: conversationOverride?.participationStyle ?? agentDefault?.participationStyle ?? DEFAULT_POLICY.participation.style,
+      allowAgentToAgent: coalesceBoolean(
+        conversationOverride?.allowAgentToAgent,
+        agentDefault?.allowAgentToAgent,
+        DEFAULT_POLICY.participation.allowAgentToAgent
+      ),
+      allowHumanToAgent: DEFAULT_POLICY.participation.allowHumanToAgent,
+      allowLongRunningCollaboration: coalesceBoolean(
+        conversationOverride?.allowLongRunningCollaboration,
+        agentDefault?.allowLongRunningCollaboration,
+        DEFAULT_POLICY.participation.allowLongRunningCollaboration
+      ),
+      requireMentionForGroupReplies: coalesceBoolean(
+        conversationOverride?.requireMentionForGroupReplies,
+        agentDefault?.requireMentionForGroupReplies,
+        DEFAULT_POLICY.participation.requireMentionForGroupReplies
+      ),
+      maxConsecutiveAgentTurns: conversationOverride?.maxConsecutiveAgentTurns !== void 0 ? conversationOverride.maxConsecutiveAgentTurns ?? null : agentDefault?.maxConsecutiveAgentTurns !== void 0 ? agentDefault.maxConsecutiveAgentTurns ?? null : defaultMaxConsecutiveAgentTurns(params?.conversationType)
+    },
+    instructions: [
+      ...defaultInstructions ? [defaultInstructions] : [],
+      ...overrideInstructions ? [overrideInstructions] : []
+    ],
+    source: {
+      hasAgentDefault: agentDefault != null,
+      hasConversationOverride: conversationOverride != null
     }
-    return "private-content";
-  }, "classify");
-  return Object.freeze({ lane, name, defaultClass: "private-content", classify });
+  };
 }
-__name(endpointContentBoundary, "endpointContentBoundary");
-
-// ../backend-contracts/src/preparedContent.ts
-var PREPARED_CONTENT_VERSION = 1;
-var PREPARED_JSON_CODEC = "canon.json.v1";
-var PreparedContentError = class extends Error {
-  constructor(code) {
-    super(code);
-    this.code = code;
-    this.name = "PreparedContentError";
-  }
-  code;
-  static {
-    __name(this, "PreparedContentError");
+__name(resolveAgentBehaviorPolicy, "resolveAgentBehaviorPolicy");
+function toHistorySenderType(message) {
+  if (isMembershipChangeMessage(message)) return null;
+  if (message.senderType !== "ai_agent") {
+    return "human";
   }
-};
-function invalid12() {
-  throw new PreparedContentError("INVALID_PREPARED_CONTENT");
+  return shouldTriggerAgentTurn({
+    senderType: "ai_agent",
+    metadata: message.metadata
+  }).allow ? "ai_agent" : null;
 }
-__name(invalid12, "invalid");
-var record2 = /* @__PURE__ */ __name((value) => !!value && typeof value === "object" && !Array.isArray(value), "record");
-var keys = /* @__PURE__ */ __name((value, allowed) => Object.keys(value).every((key) => allowed.includes(key)), "keys");
-var revision = /* @__PURE__ */ __name((value) => Number.isSafeInteger(value) && value >= 0, "revision");
-var blobIdentity = /* @__PURE__ */ __name((value) => typeof value === "string" && value.length > 0 && value.length <= 1024 && !/[\u0000-\u001f]/.test(value), "blobIdentity");
-var identity = /* @__PURE__ */ __name((value) => typeof value === "string" && ENDPOINT_ID_PATTERN.test(value), "identity");
-function canonicalEndpointJson(value) {
-  const serialized = JSON.stringify(value);
-  if (serialized === void 0) throw new Error("Endpoint value is not JSON");
-  const normalized = JSON.parse(serialized);
-  function encode(input) {
-    if (input === null || typeof input !== "object") return JSON.stringify(input);
-    if (Array.isArray(input)) return `[${input.map(encode).join(",")}]`;
-    const object = input;
-    return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${encode(object[key])}`).join(",")}}`;
+__name(toHistorySenderType, "toHistorySenderType");
+function buildParticipationHistorySnapshotFromSenderTypes(recentSenderTypes) {
+  let consecutiveAgentTurns = 0;
+  for (const senderType of recentSenderTypes) {
+    if (senderType !== "ai_agent") break;
+    consecutiveAgentTurns += 1;
   }
-  __name(encode, "encode");
-  return encode(normalized);
+  return {
+    recentSenderTypes,
+    recentHumanCount: recentSenderTypes.filter((senderType) => senderType === "human").length,
+    recentAgentCount: recentSenderTypes.filter((senderType) => senderType === "ai_agent").length,
+    consecutiveAgentTurns,
+    currentAgentStreakStartedByHuman: consecutiveAgentTurns > 0 && recentSenderTypes[consecutiveAgentTurns] === "human"
+  };
 }
-__name(canonicalEndpointJson, "canonicalEndpointJson");
-function validateMetadata(value) {
-  if (!record2(value)) invalid12();
-  if (value.version !== PREPARED_CONTENT_VERSION) throw new PreparedContentError("UNSUPPORTED_PREPARED_CONTENT_VERSION");
-  if (value.codec !== PREPARED_JSON_CODEC) throw new PreparedContentError("UNSUPPORTED_PREPARED_CONTENT_CODEC");
-  if (!keys(value, ["version", "context", "codec", "payload", "blobs", "expected"])) invalid12();
-  const context = value.context;
-  if (!record2(context) || !keys(context, ["action", "conversationId", "messageId"]) || typeof context.action !== "string" || !ENDPOINT_ACTION_PATTERN.test(context.action) || context.conversationId !== void 0 && !identity(context.conversationId) || context.messageId !== void 0 && !identity(context.messageId)) invalid12();
-  const expected = value.expected;
-  if (!record2(expected) || !keys(expected, ["installationGeneration", "protocolRevision", "admission"]) || !revision(expected.installationGeneration) || !revision(expected.protocolRevision)) invalid12();
-  if (expected.admission !== void 0) {
-    const admission = expected.admission;
-    if (!record2(admission) || !keys(admission, ["conversationId", "membershipRevision", "admissionId", "targetAdmissionId"]) || ["conversationId", "admissionId", "targetAdmissionId"].some((key) => admission[key] !== void 0 && !identity(admission[key])) || admission.membershipRevision !== void 0 && !revision(admission.membershipRevision) || context.conversationId !== void 0 && admission.conversationId !== void 0 && admission.conversationId !== context.conversationId) invalid12();
+__name(buildParticipationHistorySnapshotFromSenderTypes, "buildParticipationHistorySnapshotFromSenderTypes");
+function buildParticipationHistorySnapshot(messages, agentId) {
+  void agentId;
+  const recentSenderTypes = messages.flatMap((message) => {
+    const senderType = toHistorySenderType(message);
+    return senderType ? [senderType] : [];
+  });
+  return buildParticipationHistorySnapshotFromSenderTypes(recentSenderTypes);
+}
+__name(buildParticipationHistorySnapshot, "buildParticipationHistorySnapshot");
+function evaluateParticipationPolicy(policy, input) {
+  const resolved = policy ?? resolveAgentBehaviorPolicy({ conversationType: input.conversationType });
+  const participation = resolved.participation;
+  const priorAgentTurns = Math.max(input.consecutiveAgentTurns ?? 0, 0);
+  const agentTurnsWithCurrent = priorAgentTurns + (input.senderType === "ai_agent" ? 1 : 0);
+  const consecutiveAgentTurns = Math.max(
+    priorAgentTurns,
+    input.senderType === "ai_agent" ? 1 : 0
+  );
+  const currentAgentStreakStartedByHuman = input.currentAgentStreakStartedByHuman === true;
+  if (input.conversationType === "group" && participation.requireMentionForGroupReplies && !input.mentionedAgent) {
+    return {
+      allow: false,
+      reasonCode: "group_mention_required",
+      reason: "group replies require a direct mention"
+    };
   }
-  if (!Array.isArray(value.blobs)) invalid12();
-  const ids = /* @__PURE__ */ new Set();
-  for (const [index, blob] of value.blobs.entries()) {
-    if (!record2(blob) || !keys(blob, ["id", "index"]) || !blobIdentity(blob.id) || blob.index !== index || ids.has(blob.id)) invalid12();
-    ids.add(blob.id);
+  if (input.isOwner) {
+    return {
+      allow: true,
+      reasonCode: "owner_sender",
+      reason: "owner messages pass through outside mention-required group turns"
+    };
+  }
+  if (input.senderType !== "ai_agent") {
+    return { allow: true, reasonCode: "human_sender", reason: "latest sender is human" };
+  }
+  if (!participation.allowAgentToAgent) {
+    return {
+      allow: false,
+      reasonCode: "agent_to_agent_disabled",
+      reason: "agent-to-agent participation is disabled by policy"
+    };
+  }
+  if (!participation.allowLongRunningCollaboration && (consecutiveAgentTurns > 1 || !currentAgentStreakStartedByHuman)) {
+    return {
+      allow: false,
+      reasonCode: "human_reset_required",
+      reason: "a fresh human steer is required before continuing agent collaboration"
+    };
   }
-  if (typeof value.payload !== "string") invalid12();
+  if (typeof participation.maxConsecutiveAgentTurns === "number" && participation.maxConsecutiveAgentTurns >= 0 && agentTurnsWithCurrent >= participation.maxConsecutiveAgentTurns) {
+    return {
+      allow: false,
+      reasonCode: "agent_turn_limit_reached",
+      reason: "maximum consecutive agent turns reached"
+    };
+  }
+  return {
+    allow: true,
+    reasonCode: input.conversationType === "group" ? "group_agent_allowed" : "direct_agent_allowed",
+    reason: participation.requireMentionForGroupReplies ? "policy allows this directly mentioned group reply" : "agent-to-agent participation allowed by policy"
+  };
 }
-__name(validateMetadata, "validateMetadata");
-function decodePreparedJsonContent(value) {
-  validateMetadata(value);
-  let decoded;
-  try {
-    decoded = JSON.parse(value.payload);
-  } catch {
-    invalid12();
+__name(evaluateParticipationPolicy, "evaluateParticipationPolicy");
+
+// ../backend-contracts/src/agentDirectory.ts
+var MAX_DISCOVER_AGENTS_QUERY_LENGTH = 64;
+
+// ../backend-contracts/src/communication.ts
+function parseDirectConversationSelection(value) {
+  if (value == null) return { mode: "latest_or_new" };
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("selection must be an object");
   }
-  if (!record2(decoded) || !keys(decoded, ["body", "envelope"]) || !record2(decoded.body) || decoded.envelope !== void 0 && !record2(decoded.envelope)) invalid12();
-  if (canonicalEndpointJson(decoded) !== value.payload) invalid12();
-  const { body, envelope } = decoded;
-  if (endpointOperationRequestRetention(value.context.action, body, envelope) === "memory") {
-    throw new PreparedContentError("PREPARED_CONTENT_MEMORY_ONLY");
+  const record4 = value;
+  const fields2 = record4.mode === "specific" ? ["mode", "conversationId"] : ["mode"];
+  if (Object.keys(record4).some((key) => !fields2.includes(key))) {
+    throw new Error(`selection ${String(record4.mode)} only takes ${fields2.join(" and ")}`);
   }
-  const effective = { ...body, ...envelope };
-  for (const key of ["conversationId", "messageId"]) {
-    const bound = value.context[key];
-    if (bound !== void 0 && effective[key] !== void 0 && effective[key] !== bound) invalid12();
+  if (record4.mode === "latest_or_new" || record4.mode === "new") {
+    return { mode: record4.mode };
   }
-  return envelope === void 0 ? { body } : { body, envelope };
+  if (record4.mode === "specific") {
+    const conversationId = typeof record4.conversationId === "string" ? record4.conversationId.trim() : "";
+    if (!conversationId) throw new Error("selection.conversationId is required");
+    return { mode: "specific", conversationId };
+  }
+  throw new Error("selection.mode is invalid");
 }
-__name(decodePreparedJsonContent, "decodePreparedJsonContent");
-function freeze(value) {
-  if (value && typeof value === "object") {
-    for (const child of Object.values(value)) freeze(child);
-    Object.freeze(value);
+__name(parseDirectConversationSelection, "parseDirectConversationSelection");
+
+// ../backend-contracts/src/runtimeDescriptor.ts
+function normalizeRuntimeCommandAlias(value) {
+  const normalized = value.trim().replace(/^\/+/, "").replace(/\s+/g, "-");
+  return /^[A-Za-z0-9:_-]+$/.test(normalized) ? normalized : null;
+}
+__name(normalizeRuntimeCommandAlias, "normalizeRuntimeCommandAlias");
+function normalizeRuntimeCommandAliases(command) {
+  const rawAliases = command.aliases?.length ? command.aliases : [command.id];
+  const aliases = rawAliases.map(normalizeRuntimeCommandAlias).filter((value) => Boolean(value));
+  return Array.from(new Set(aliases));
+}
+__name(normalizeRuntimeCommandAliases, "normalizeRuntimeCommandAliases");
+var MAX_PUBLIC_RUNTIME_COMMANDS = 256;
+function record2(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+__name(record2, "record");
+function text3(value, max) {
+  return typeof value === "string" && value.length > 0 && value.length <= max ? value : void 0;
+}
+__name(text3, "text");
+function member(value, choices) {
+  return choices.includes(value) ? value : void 0;
+}
+__name(member, "member");
+function members(value, choices) {
+  if (!Array.isArray(value)) return void 0;
+  return [...new Set(value.filter((entry) => choices.includes(entry)))];
+}
+__name(members, "members");
+function defined(value) {
+  return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== void 0));
+}
+__name(defined, "defined");
+var PRIMITIVES = [
+  "runtime.status",
+  "runtime.reasoning.set",
+  "runtime.verbosity.set",
+  "runtime.usage",
+  "context.compact",
+  "session.new",
+  "session.reset"
+];
+function normalizeDispatch(value) {
+  const dispatch = record2(value);
+  switch (dispatch.kind) {
+    case "signal": {
+      const signal = member(dispatch.signal, ["interrupt", "stop_and_drop", "new_session"]);
+      return signal ? { kind: "signal", signal } : void 0;
+    }
+    case "primitive": {
+      const primitive = member(dispatch.primitive, PRIMITIVES);
+      return primitive ? { kind: "primitive", primitive } : void 0;
+    }
+    case "control": {
+      const controlId = text3(dispatch.controlId, 128);
+      return controlId ? defined({ kind: "control", controlId, value: text3(dispatch.value, 1024) }) : void 0;
+    }
+    case "text_passthrough": {
+      const template = text3(dispatch.template, 2048);
+      return template ? { kind: "text_passthrough", template } : void 0;
+    }
+    case "compose": {
+      const content = text3(dispatch.text, 2048);
+      return content ? { kind: "compose", text: content } : void 0;
+    }
+    case "open_details":
+      return defined({ kind: "open_details", target: text3(dispatch.target, 128) });
+    default:
+      return void 0;
   }
-  return value;
 }
-__name(freeze, "freeze");
-function prepareJsonContent(input) {
-  if (endpointOperationRequestRetention(input.context.action, input.body, input.envelope) === "memory") {
-    throw new PreparedContentError("PREPARED_CONTENT_MEMORY_ONLY");
+__name(normalizeDispatch, "normalizeDispatch");
+function normalizeArgument(value) {
+  const arg = record2(value);
+  const id7 = text3(arg.id, 128);
+  const label = text3(arg.label, 160);
+  const kind = member(arg.kind, ["string", "enum", "boolean"]);
+  if (!id7 || !label || !kind) return void 0;
+  if (["required", "captureRemaining"].some((key) => arg[key] !== void 0 && typeof arg[key] !== "boolean")) return void 0;
+  if (arg.choices !== void 0 && !Array.isArray(arg.choices)) return void 0;
+  const choices = Array.isArray(arg.choices) ? arg.choices.slice(0, 128).flatMap((value2) => {
+    const choice = record2(value2);
+    const entry = text3(choice.value, 1024);
+    const label2 = text3(choice.label, 160);
+    return entry && label2 ? [defined({ value: entry, label: label2, description: text3(choice.description, 1024) })] : [];
+  }) : void 0;
+  if (kind === "enum" && !choices?.length) return void 0;
+  return defined({
+    id: id7,
+    label,
+    kind,
+    choices,
+    required: typeof arg.required === "boolean" ? arg.required : void 0,
+    captureRemaining: typeof arg.captureRemaining === "boolean" ? arg.captureRemaining : void 0
+  });
+}
+__name(normalizeArgument, "normalizeArgument");
+function normalizePublicRuntimeCommands(value) {
+  if (!Array.isArray(value)) return [];
+  const seenIds = /* @__PURE__ */ new Set();
+  const seenAliases = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const item2 of value.slice(0, MAX_PUBLIC_RUNTIME_COMMANDS)) {
+    const command = record2(item2);
+    const id7 = text3(command.id, 128);
+    const label = text3(command.label, 160);
+    const dispatch = normalizeDispatch(command.dispatch);
+    if (!id7 || !label || !dispatch || seenIds.has(id7) || command.visibility === "hidden" || command.sensitive === true) continue;
+    if (["ownerOnly", "sensitive"].some((key) => command[key] !== void 0 && typeof command[key] !== "boolean")) continue;
+    if (["aliases", "args", "placements", "availability"].some((key) => command[key] !== void 0 && !Array.isArray(command[key]))) continue;
+    const rawAliases = Array.isArray(command.aliases) && command.aliases.length ? command.aliases : [id7];
+    const aliases = [...new Set(rawAliases.slice(0, 8).flatMap((value2) => {
+      const alias = typeof value2 === "string" && value2.length <= 128 ? normalizeRuntimeCommandAlias(value2) : null;
+      return alias && /^[A-Za-z0-9:_-]+$/.test(alias) && !seenAliases.has(alias.toLowerCase()) ? [alias] : [];
+    }))];
+    if (!aliases.length) continue;
+    const args = Array.isArray(command.args) ? command.args.slice(0, 12).map(normalizeArgument) : void 0;
+    if (args?.some((arg) => !arg) || Array.isArray(command.args) && command.args.length > 12) continue;
+    seenIds.add(id7);
+    aliases.forEach((alias) => seenAliases.add(alias.toLowerCase()));
+    result.push(defined({
+      id: id7,
+      label,
+      aliases,
+      dispatch,
+      args,
+      description: text3(command.description, 1024),
+      category: member(command.category, ["plan", "turn", "session", "runtime", "details", "skill", "custom"]),
+      placements: members(command.placements, ["composer_slash", "command_palette", "session_strip"]),
+      availability: members(command.availability, ["idle", "busy", "busy_with_queue", "waiting_input", "always"]),
+      ownerOnly: typeof command.ownerOnly === "boolean" ? command.ownerOnly : void 0,
+      disabledReason: text3(command.disabledReason, 1024),
+      trailingTextBehavior: member(command.trailingTextBehavior, ["ignore", "send_as_prompt"]),
+      primitive: member(command.primitive, PRIMITIVES),
+      tier: member(command.tier, ["primary", "detail", "diagnostic"])
+    }));
   }
-  const content = JSON.parse(canonicalEndpointJson({
-    version: PREPARED_CONTENT_VERSION,
-    codec: PREPARED_JSON_CODEC,
-    context: input.context,
-    payload: canonicalEndpointJson({ body: input.body, ...input.envelope === void 0 ? {} : { envelope: input.envelope } }),
-    blobs: input.blobs ?? [],
-    expected: input.expected
-  }));
-  decodePreparedJsonContent(content);
-  return freeze(content);
+  return result;
 }
-__name(prepareJsonContent, "prepareJsonContent");
+__name(normalizePublicRuntimeCommands, "normalizePublicRuntimeCommands");
+function normalizePublicRuntimeDescriptor(value) {
+  const descriptor = record2(value);
+  return defined({
+    supportsInterrupt: typeof descriptor.supportsInterrupt === "boolean" ? descriptor.supportsInterrupt : void 0,
+    supportsInputInterrupt: typeof descriptor.supportsInputInterrupt === "boolean" ? descriptor.supportsInputInterrupt : void 0,
+    streamingTextMode: member(descriptor.streamingTextMode, ["none", "status", "snapshot", "block", "delta"]),
+    commands: Array.isArray(descriptor.commands) ? normalizePublicRuntimeCommands(descriptor.commands) : void 0
+  });
+}
+__name(normalizePublicRuntimeDescriptor, "normalizePublicRuntimeDescriptor");
+var PUBLIC_RUNTIME_FACT_GROUPS = {
+  harness: "runtime",
+  runtime: "runtime",
+  provider: "model",
+  model: "model",
+  reasoning: "model",
+  connection: "connection",
+  gateway: "connection",
+  route: "route"
+};
+function normalizePublicRuntimeFacts(value) {
+  if (!Array.isArray(value)) return [];
+  const seen = /* @__PURE__ */ new Set();
+  return value.slice(0, 16).flatMap((entry) => {
+    const fact = record2(entry);
+    const id7 = text3(fact.id, 64);
+    const group = id7 && Object.hasOwn(PUBLIC_RUNTIME_FACT_GROUPS, id7) ? PUBLIC_RUNTIME_FACT_GROUPS[id7] : void 0;
+    const label = text3(fact.label, 80);
+    const content = text3(fact.value, 512);
+    if (!id7 || !group || !label || !content || seen.has(id7) || fact.sensitive === true || fact.visibility === "hidden") return [];
+    seen.add(id7);
+    return [defined({
+      id: id7,
+      group,
+      label,
+      value: content,
+      tier: member(fact.tier, ["primary", "detail", "diagnostic"]),
+      tone: member(fact.tone, ["neutral", "good", "warning", "danger"]),
+      copyable: typeof fact.copyable === "boolean" ? fact.copyable : void 0,
+      updatedAt: typeof fact.updatedAt === "number" && Number.isFinite(fact.updatedAt) && fact.updatedAt >= 0 ? fact.updatedAt : void 0
+    })];
+  });
+}
+__name(normalizePublicRuntimeFacts, "normalizePublicRuntimeFacts");
 
-// ../backend-contracts/src/endpoint.ts
-var CANON_ENDPOINT_PROTOCOL = "canon.endpoint.v1";
-var ENDPOINT_ID_PATTERN = /^[A-Za-z0-9_.:~-]{1,200}$/;
-var ENDPOINT_ACTION_PATTERN = /^[a-z][a-z0-9_.-]{0,95}$/;
-function isEndpointOperationReceipt(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const receipt = value;
-  return receipt.protocol === CANON_ENDPOINT_PROTOCOL && typeof receipt.operationId === "string" && ENDPOINT_ID_PATTERN.test(receipt.operationId) && typeof receipt.installationId === "string" && ENDPOINT_ID_PATTERN.test(receipt.installationId) && typeof receipt.action === "string" && ENDPOINT_ACTION_PATTERN.test(receipt.action) && ["pending", "succeeded", "rejected", "uncertain"].includes(String(receipt.status)) && typeof receipt.createdAt === "string" && typeof receipt.updatedAt === "string";
+// ../backend-contracts/src/conversationMembership.ts
+function resolveConversationPolicyScope(memberIdsOrCount) {
+  const count = Array.isArray(memberIdsOrCount) ? new Set(memberIdsOrCount.filter((id7) => typeof id7 === "string" && id7.length > 0)).size : memberIdsOrCount;
+  if (typeof count !== "number" || !Number.isSafeInteger(count)) return "unknown";
+  return count === 2 ? "direct" : count > 2 ? "group" : "unknown";
 }
-__name(isEndpointOperationReceipt, "isEndpointOperationReceipt");
+__name(resolveConversationPolicyScope, "resolveConversationPolicyScope");
 
 // ../backend-contracts/src/connectorRelay.ts
 var CONNECTOR_RELAY_INSTALLATION_PREFIX = "canon-relay:";
@@ -5519,6 +5531,7 @@ export {
   parseMlsDevGroupFeedQuery,
   parseMlsDevGroupFeedResult,
   MLS_DEV_KEY_PACKAGES_MAX_BYTES,
+  MLS_DEV_KEY_PACKAGE_CLAIM_LEASE_MS,
   parseMlsDevKeyPackageClaimPreconditions,
   parseMlsDevKeyPackagePublish,
   parseMlsDevKeyPackagePublicationReceipt,
@@ -5562,6 +5575,7 @@ export {
   buildParticipationHistorySnapshot,
   evaluateParticipationPolicy,
   MAX_DISCOVER_AGENTS_QUERY_LENGTH,
+  VERB_LIMITS,
   NO_REPLY_ACK_NOTE,
   CANON_VERB_WIRE_SCHEMA_VERSION,
   projectVerbIntentToWire,
@@ -5583,6 +5597,8 @@ export {
   ENDPOINT_ID_PATTERN,
   ENDPOINT_ACTION_PATTERN,
   isEndpointOperationReceipt,
+  AGENT_HOME_ELSEWHERE,
+  agentHomeElsewhereMessage,
   CONNECTOR_RELAY_INSTALLATION_PREFIX,
   CONNECTOR_RELAY_INSTALLATION_PATTERN,
   isConnectorRelayInstallation,