negotium 0.1.13 → 0.1.15

package/dist/main.js

@@ -3324,7 +3324,7 @@ var init_claude_provider = __esm(async () => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.1.13";
+var NEGOTIUM_VERSION = "0.1.15";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn2 } from "child_process";
@@ -4520,6 +4520,8 @@ function initializeApiMessagesSchema() {
     parent_id TEXT,
     author_id TEXT NOT NULL,
     source_adapter TEXT,
+    source_node TEXT,
+    source_message_id TEXT,
     text TEXT NOT NULL,
     query_id TEXT,
     agent_type TEXT,
@@ -4539,6 +4541,12 @@ function initializeApiMessagesSchema() {
   try {
     db.exec("ALTER TABLE api_messages ADD COLUMN source_adapter TEXT");
   } catch {}
+  try {
+    db.exec("ALTER TABLE api_messages ADD COLUMN source_node TEXT");
+  } catch {}
+  try {
+    db.exec("ALTER TABLE api_messages ADD COLUMN source_message_id TEXT");
+  } catch {}
   try {
     db.exec("ALTER TABLE api_messages ADD COLUMN deleted INTEGER NOT NULL DEFAULT 0");
   } catch {}
@@ -4584,6 +4592,8 @@ function rowToDto(r) {
     parentId: r.parent_id ?? undefined,
     authorId: r.author_id,
     sourceAdapter: r.source_adapter ?? undefined,
+    sourceNode: r.source_node ?? undefined,
+    sourceMessageId: r.source_message_id ?? undefined,
     text: r.text,
     queryId: r.query_id ?? undefined,
     agentType: r.agent_type ?? undefined,
@@ -4617,9 +4627,9 @@ function appendApiMessage(msg, options = {}) {
   let inserted = false;
   db.transaction(() => {
     const result = db.query(`INSERT INTO api_messages
-         (id, topic_id, parent_id, author_id, source_adapter, text, query_id, agent_type, model, attachments, usage, deleted, edited_at, reactions, kind, ask_user_question, subagent_card, mentions, thread_root_id, created_at)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-       ON CONFLICT(id) DO NOTHING`).run(msg.id, msg.topicId, msg.parentId ?? null, msg.authorId, msg.sourceAdapter ?? null, msg.text, msg.queryId ?? null, msg.agentType ?? null, msg.model ?? null, msg.attachments ? JSON.stringify(msg.attachments) : null, msg.usage ? JSON.stringify(msg.usage) : null, msg.deleted ? 1 : 0, msg.editedAt ?? null, msg.reactions?.length ? JSON.stringify(msg.reactions) : null, msg.kind ?? null, msg.askUserQuestion ? JSON.stringify(msg.askUserQuestion) : null, msg.subagentCard ? JSON.stringify(msg.subagentCard) : null, msg.mentions?.length ? JSON.stringify(msg.mentions) : null, msg.threadRootId ?? null, msg.createdAt);
+         (id, topic_id, parent_id, author_id, source_adapter, source_node, source_message_id, text, query_id, agent_type, model, attachments, usage, deleted, edited_at, reactions, kind, ask_user_question, subagent_card, mentions, thread_root_id, created_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+       ON CONFLICT(id) DO NOTHING`).run(msg.id, msg.topicId, msg.parentId ?? null, msg.authorId, msg.sourceAdapter ?? null, msg.sourceNode ?? null, msg.sourceMessageId ?? null, msg.text, msg.queryId ?? null, msg.agentType ?? null, msg.model ?? null, msg.attachments ? JSON.stringify(msg.attachments) : null, msg.usage ? JSON.stringify(msg.usage) : null, msg.deleted ? 1 : 0, msg.editedAt ?? null, msg.reactions?.length ? JSON.stringify(msg.reactions) : null, msg.kind ?? null, msg.askUserQuestion ? JSON.stringify(msg.askUserQuestion) : null, msg.subagentCard ? JSON.stringify(msg.subagentCard) : null, msg.mentions?.length ? JSON.stringify(msg.mentions) : null, msg.threadRootId ?? null, msg.createdAt);
     inserted = Number(result.changes ?? 0) > 0;
     if (inserted && updateTopicLastMessageAt && !msg.deleted) {
       db.query(`UPDATE api_topics
@@ -7420,6 +7430,7 @@ function updateTopic(topicId, patch) {
     return false;
   Object.assign(topic, patch);
   upsertTopic(topic);
+  WsHub.get().broadcastTopicUpdated(topicId);
   return true;
 }
 function isParticipant(topic, userId) {
@@ -11356,6 +11367,7 @@ async function streamAgentEvents(topicId, topicTitle, queryId, events, control,
       queryId,
       agentType,
       model,
+      sourceNode: execution?.sourceNode,
       usage,
       createdAt: new Date().toISOString()
     };
@@ -11832,6 +11844,7 @@ function redispatchInject(inject) {
     bridgeSessionFromHistory: inject.bridgeSessionFromHistory,
     onSettled: inject.onSettled,
     peerBridge: inject.peerBridge,
+    sourceNode: inject.sourceNode,
     askReplySources: inject.askReplySources,
     _runtimeEpoch: inject.runtimeEpoch,
     _sessionRetried: inject._sessionRetried,
@@ -12158,6 +12171,7 @@ function startAiTurn(params) {
   let sessionId = sessionResolution.sessionId;
   const deferredSessionId = params.sessionId === undefined && !sessionResolution.isolated ? undefined : sessionId;
   const origin = params.origin ?? "user";
+  const sourceNode = params.sourceNode;
   const topicId = topic.id;
   const requestId = params.requestId;
   const depth = params.depth;
@@ -12207,6 +12221,7 @@ function startAiTurn(params) {
       userId,
       prompt,
       origin,
+      sourceNode,
       requestId,
       depth,
       silent,
@@ -12598,7 +12613,7 @@ ${playwrightNote}`;
     WsHub.get().broadcastTyping(topicId, "ai");
     WsHub.get().broadcastAiActive(topicId, queryId);
   }
-  streamAgentEvents(topicId, topic.title, queryId, events, control, agentKind, resolvedModel, resolvedEffort, userId, !sessionRetried, onSessionId, { silent, peerBridge }).then(async (outcome) => {
+  streamAgentEvents(topicId, topic.title, queryId, events, control, agentKind, resolvedModel, resolvedEffort, userId, !sessionRetried, onSessionId, { silent, peerBridge, sourceNode }).then(async (outcome) => {
     if (outcome.kind === "session-expired") {
       if (!silent)
         WsHub.get().broadcastAborted(topicId, queryId, "stopped");
@@ -12743,6 +12758,8 @@ function triggerTopicAiTurn(topicId, userId, prompt, agentType, opts) {
       topicId,
       authorId: opts?.injectAuthorId ?? userId,
       sourceAdapter: opts?.injectSourceAdapter,
+      sourceNode: opts?.injectSourceNode,
+      sourceMessageId: opts?.injectSourceMessageId,
       authorName: execution.agent,
       text: prompt,
       agentType: execution.agent,
@@ -12782,6 +12799,7 @@ function triggerTopicAiTurn(topicId, userId, prompt, agentType, opts) {
     bridgeSessionFromHistory: opts?.bridgeSessionFromHistory,
     onSettled: opts?.onSettled,
     peerBridge: opts?.peerBridge,
+    sourceNode: opts?.injectSourceNode,
     askReplySources: opts?.askReplySources,
     from: opts?.from
   });
@@ -13769,6 +13787,28 @@ var init_submit_user_message = __esm(async () => {
   await init_api_messages();
 });
 
+// ../../packages/core/src/application/switch-topic-access-mode.ts
+function switchTopicAccessMode(params) {
+  const topic = getTopic(params.topicId);
+  if (!topic)
+    return { ok: false, error: "Topic not found" };
+  const owner = topic.participants.some((participant) => participant.userId === params.userId && participant.role === "owner");
+  if (!owner)
+    return { ok: false, error: "Only topic owners can change privacy" };
+  topic.accessMode = params.accessMode;
+  upsertTopic(topic);
+  WsHub.get().broadcastTopicUpdated(topic.id);
+  return {
+    ok: true,
+    accessMode: params.accessMode,
+    text: params.accessMode === "shared" ? `"${topic.title}" is public to the connected Otium Hub.` : `"${topic.title}" is private to this worker.`
+  };
+}
+var init_switch_topic_access_mode = __esm(async () => {
+  await init_bus();
+  await init_api_topics();
+});
+
 // ../../packages/core/src/application/switch-topic-effort.ts
 function switchTopicEffort(params) {
   const topic = getTopic(params.topicId);
@@ -14799,6 +14839,10 @@ function getRuntimeProcessLease(role, now = Date.now(), staleMs = PROCESS_LEASE_
   const lease = rowToLease2(row);
   return now - lease.heartbeatAt <= staleMs ? lease : null;
 }
+function listRuntimeProcessLeases(rolePrefix = "", now = Date.now(), staleMs = PROCESS_LEASE_STALE_MS) {
+  const rows = rolePrefix ? db.query("SELECT * FROM runtime_process_leases WHERE role LIKE ? ORDER BY role").all(`${rolePrefix}%`) : db.query("SELECT * FROM runtime_process_leases ORDER BY role").all();
+  return rows.map(rowToLease2).filter((lease) => now - lease.heartbeatAt <= staleMs);
+}
 function heartbeatRuntimeProcessLease(role, ownerId, now = Date.now()) {
   const result = db.query(`UPDATE runtime_process_leases
        SET heartbeat_at = ?
@@ -15961,6 +16005,7 @@ __export(exports_src, {
   textResult: () => textResult,
   switchTopicModel: () => switchTopicModel,
   switchTopicEffort: () => switchTopicEffort,
+  switchTopicAccessMode: () => switchTopicAccessMode,
   sweepStaleSubagentCards: () => sweepStaleSubagentCards,
   submitUserMessage: () => submitUserMessage,
   stripFileTags: () => stripFileTags,
@@ -16016,6 +16061,7 @@ __export(exports_src, {
   listVaultEntries: () => listVaultEntries,
   listTopics: () => listTopics,
   listRuntimeTurnLeases: () => listRuntimeTurnLeases,
+  listRuntimeProcessLeases: () => listRuntimeProcessLeases,
   listRuntimeEventsAfter: () => listRuntimeEventsAfter,
   listRunningTopicQueries: () => listRunningTopicQueries,
   listRunningTopicIds: () => listRunningTopicIds,
@@ -16152,6 +16198,7 @@ var init_src = __esm(async () => {
   await init_topic_cleanup();
   await init_execute_external_user_turn();
   await init_submit_user_message();
+  await init_switch_topic_access_mode();
   await init_switch_topic_effort();
   await init_switch_topic_model();
   await init_topic_service();
@@ -17852,14 +17899,17 @@ function createNodeControlHandler(options) {
         const topic = topicForUser(topicId, userId);
         if (!topic)
           return jsonError(404, "Topic not found");
-        const { message } = submitUserMessage({
+        const sourceAdapter = body.sourceAdapter === "telegram" || body.sourceAdapter === "otium" ? body.sourceAdapter : "terminal";
+        const { message, queryId } = submitUserMessage({
           topic,
           userId,
           text: text2,
-          sourceAdapter: "terminal",
+          sourceAdapter,
+          visualTools: body.visualTools === true,
+          fileDeliveryTools: body.fileDeliveryTools === true,
           startTurn: options.startTurn
         });
-        return Response.json({ ok: true, message }, { status: 201 });
+        return Response.json({ ok: true, message, queryId }, { status: 201 });
       }
       const recentMatch = path.match(/^\/topics\/([^/]+)\/recent-events$/);
       if (recentMatch && req.method === "GET") {
@@ -17883,6 +17933,24 @@ function createNodeControlHandler(options) {
           return jsonError(400, result.error);
         return Response.json({ ok: true, model: result.model, result: result.text });
       }
+      const accessModeMatch = path.match(/^\/topics\/([^/]+)\/access-mode$/);
+      if (accessModeMatch && req.method === "POST") {
+        const topicId = decodeURIComponent(accessModeMatch[1]);
+        const body = await bodyRecord(req);
+        const userId = requiredText(body.userId, "userId");
+        const accessMode = requiredText(body.accessMode, "accessMode");
+        if (accessMode !== "private" && accessMode !== "shared") {
+          return jsonError(400, `Unknown access mode: ${accessMode}`);
+        }
+        const result = switchTopicAccessMode({ topicId, userId, accessMode });
+        if (!result.ok)
+          return jsonError(400, result.error);
+        return Response.json({
+          ok: true,
+          accessMode: result.accessMode,
+          result: result.text
+        });
+      }
       const effortMatch = path.match(/^\/topics\/([^/]+)\/effort$/);
       if (effortMatch && req.method === "POST") {
         const topicId = decodeURIComponent(effortMatch[1]);
@@ -20013,6 +20081,7 @@ async function startDefaultNode(opts = {}) {
 async function runNodeDaemon(opts = {}) {
   const node = await startDefaultNode({
     port: opts.port ?? 0,
+    ...opts.maxRequestBodySize ? { maxRequestBodySize: opts.maxRequestBodySize } : {},
     advertise: true,
     singleton: true
   });
@@ -20199,6 +20268,16 @@ class EmbeddedNegotiumClient {
       throw new Error(result.error);
     return result.text;
   }
+  setAccessMode(topic, accessMode) {
+    const result = switchTopicAccessMode({
+      topicId: topic.id,
+      userId: this.#userId,
+      accessMode
+    });
+    if (!result.ok)
+      throw new Error(result.error);
+    return result.text;
+  }
   async deleteTopic(topic) {
     await topicService.delete({ topicId: topic.id, userId: this.#userId });
   }
@@ -20377,6 +20456,13 @@ class RemoteNegotiumClient {
     });
     return String(result.result ?? `Effort set to '${effort}'.`);
   }
+  async setAccessMode(topic, accessMode) {
+    const result = await this.#request(`/topics/${encodeURIComponent(topic.id)}/access-mode`, {
+      method: "POST",
+      body: JSON.stringify({ userId: this.#userId, accessMode })
+    });
+    return String(result.result ?? `Access mode set to '${accessMode}'.`);
+  }
   async deleteTopic(topic) {
     await this.#request(`/topics/${encodeURIComponent(topic.id)}?user=${encodeURIComponent(this.#userId)}`, { method: "DELETE" });
   }
@@ -20629,7 +20715,7 @@ var MAX_CLIPBOARD_BYTES = 1e5;
 
 // ../../adapters/terminal/src/clock.ts
 function terminalNowMs() {
-  return performance.timeOrigin + performance.now();
+  return Date.now();
 }
 
 // ../../adapters/terminal/src/commands.ts
@@ -20659,6 +20745,8 @@ var init_commands = __esm(() => {
     { name: "model", usage: "/model", description: "choose the model" },
     { name: "effort", usage: "/effort", description: "choose reasoning effort" },
     { name: "topics", usage: "/topics", description: "open topic picker" },
+    { name: "public", usage: "/public", description: "share this topic with Otium Hub" },
+    { name: "private", usage: "/private", description: "make this topic local-only" },
     {
       name: "fork",
       usage: "/fork [name]",
@@ -20854,8 +20942,8 @@ function orderTopicsByParent(topics) {
 }
 function setBackgroundSessions(state, backgroundSessions) {
   const orderedSessions = [
-    ...backgroundSessions.filter((session) => session.kind === "memory"),
-    ...backgroundSessions.filter((session) => session.kind === "cron")
+    ...backgroundSessions.filter((session) => session.kind === "cron"),
+    ...backgroundSessions.filter((session) => session.kind === "memory")
   ];
   const selectedStillExists = orderedSessions.some((session) => session.id === state.topicPickerBackgroundId);
   return {
@@ -20872,8 +20960,11 @@ function pickedTopic(state) {
   return state.topicPickerBackgroundId ? undefined : state.topics[state.topicPickerIndex];
 }
 function moveTopicPickerSelection(state, delta) {
+  const indexedTopics = state.topics.map((topic, index) => ({ topic, index }));
   const items = [
-    ...state.topics.map((topic, index) => ({ kind: "topic", id: topic.id, index })),
+    ...indexedTopics.filter(({ topic }) => topic.kind === "manager").map(({ topic, index }) => ({ kind: "topic", id: topic.id, index })),
+    ...indexedTopics.filter(({ topic }) => topic.kind !== "manager" && topic.accessMode !== "shared").map(({ topic, index }) => ({ kind: "topic", id: topic.id, index })),
+    ...indexedTopics.filter(({ topic }) => topic.kind !== "manager" && topic.accessMode === "shared").map(({ topic, index }) => ({ kind: "topic", id: topic.id, index })),
     ...state.backgroundSessions.map((session) => ({
       kind: "background",
       id: session.id
@@ -21510,7 +21601,8 @@ function helpLines() {
     line("  Esc/Ctrl-C stop active turn \xB7 Ctrl-C twice when idle to quit"),
     line(""),
     line("  Commands", { fg: theme.cyan, bold: true }),
-    line("  /new  /model  /effort  /topics  /fork  /spawn  /del  /copy"),
+    line("  /new  /model  /effort  /topics  /public  /private"),
+    line("  /fork  /spawn  /del  /copy"),
     line("  /abort  /help  /quit", { fg: theme.muted })
   ];
 }
@@ -21561,23 +21653,27 @@ function plainTranscript(state) {
 }
 function topicOverlayLines(state, width, height, animationFrame = 0) {
   const indexedTopics = state.topics.map((topic, topicIndex) => ({ topic, topicIndex }));
-  const general = indexedTopics.filter(({ topic }) => topic.title.toLowerCase() === "general");
-  const otherTopics = indexedTopics.filter(({ topic }) => topic.title.toLowerCase() !== "general");
+  const managerTopics = indexedTopics.filter(({ topic }) => topic.kind === "manager");
+  const privateTopics = indexedTopics.filter(({ topic }) => topic.kind !== "manager" && topic.accessMode !== "shared");
+  const publicTopics = indexedTopics.filter(({ topic }) => topic.kind !== "manager" && topic.accessMode === "shared");
   const entries = [];
-  if (general.length > 0) {
-    entries.push({ kind: "manager" }, ...general.map(({ topic, topicIndex }) => ({ kind: "topic", topic, topicIndex })));
-  }
-  if (otherTopics.length > 0) {
-    if (general.length > 0)
+  for (const [label, topics] of [
+    ["Manager", managerTopics],
+    ["Private", privateTopics],
+    ["Public", publicTopics]
+  ]) {
+    if (topics.length === 0)
+      continue;
+    if (entries.length > 0)
       entries.push({ kind: "separator" });
-    entries.push({ kind: "heading", label: "Worker" });
-    entries.push(...otherTopics.map(({ topic, topicIndex }) => ({
+    entries.push({ kind: "heading", label });
+    entries.push(...topics.map(({ topic, topicIndex }) => ({
       kind: "topic",
       topic,
       topicIndex
     })));
   }
-  for (const kind of ["memory", "cron"]) {
+  for (const kind of ["cron", "memory"]) {
     const sessions = state.backgroundSessions.filter((session) => session.kind === kind);
     if (sessions.length === 0)
       continue;
@@ -21594,18 +21690,12 @@ function topicOverlayLines(state, width, height, animationFrame = 0) {
   }
   const visibleCount = Math.max(1, height - 3);
   const selectedEntryIndex = entries.findIndex((entry) => entry.kind === "topic" && !state.topicPickerBackgroundId && entry.topicIndex === state.topicPickerIndex || entry.kind === "background" && entry.sessionId === state.topicPickerBackgroundId);
-  let start = Math.min(Math.max(0, entries.length - visibleCount), Math.max(0, selectedEntryIndex - visibleCount + 1));
-  if (start > 0 && entries[start - 1]?.kind === "manager" && selectedEntryIndex - (start - 1) < visibleCount) {
-    start -= 1;
-  }
+  const start = Math.min(Math.max(0, entries.length - visibleCount), Math.max(0, selectedEntryIndex - visibleCount + 1));
   return [
     line("  Topics", { fg: theme.accent, bold: true }),
     line(state.topicPickerRoot ? "  \u2191\u2193 select \xB7 Enter open \xB7 N new \xB7 D/Del delete \xB7 Esc/Ctrl-C exit" : "  \u2191\u2193 select \xB7 Enter open \xB7 N new \xB7 D/Del delete \xB7 Esc close \xB7 Ctrl-C exit; work continues", { fg: theme.muted }),
     line(""),
     ...entries.length === 0 ? [line("  No topics yet \xB7 Press N to create one", { fg: theme.muted })] : entries.slice(start, start + visibleCount).map((entry) => {
-      if (entry.kind === "manager") {
-        return line("  Manager", { fg: theme.cyan, bold: true });
-      }
       if (entry.kind === "heading") {
         return line(`  ${entry.label}`, { fg: theme.cyan, bold: true });
       }
@@ -21993,7 +22083,7 @@ function renderAppFrame(state, columns, rows, animationFrame = 0, nowMs = termin
   const height = Math.max(14, rows);
   const footer = footerLines(state, width);
   const decision = decisionPane(state, width);
-  const hideComposer = state.overlay === "background-session" || state.overlay === "vault" && (state.vaultMode === "list" || state.vaultMode === "confirm-delete");
+  const hideComposer = state.overlay === "background-session" || state.overlay === "topics" || state.overlay === "vault" && (state.vaultMode === "list" || state.vaultMode === "confirm-delete");
   const composer = hideComposer ? { lines: [], cursor: null } : composerPane(state, width);
   const bodyHeight = Math.max(3, height - footer.length - decision.length - composer.lines.length);
   const body = renderBody(conversationLines(state, width, bodyHeight, animationFrame, nowMs), width, bodyHeight);
@@ -23249,6 +23339,31 @@ class TerminalApp {
       this.#queueRender();
       return;
     }
+    if (command === "public" || command === "private") {
+      if (args.length > 0) {
+        this.#state = { ...this.#state, notice: `Usage: /${command}` };
+        this.#queueRender();
+        return;
+      }
+      const topic = activeTopic(this.#state);
+      if (!topic) {
+        this.#state = { ...this.#state, notice: "No topic selected" };
+        this.#queueRender();
+        return;
+      }
+      try {
+        const notice = await this.#client.setAccessMode(topic, command === "public" ? "shared" : "private");
+        await this.#refreshTopics(topic.title);
+        this.#state = { ...this.#state, notice };
+      } catch (error) {
+        this.#state = {
+          ...this.#state,
+          notice: error instanceof Error ? error.message : String(error)
+        };
+      }
+      this.#queueRender();
+      return;
+    }
     if (command === "compact") {
       const topic = activeTopic(this.#state);
       if (!topic) {
@@ -25688,13 +25803,25 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
     const rememberTarget = (queryId2) => {
       targetByQueryId.set(queryId2, target);
     };
-    const { queryId } = submitUserMessage({
+    const input = {
       topic,
       userId,
       text: prompt,
       sourceAdapter: "telegram",
       visualTools: false,
-      fileDeliveryTools: true,
+      fileDeliveryTools: true
+    };
+    if (opts.submitTurn) {
+      opts.submitTurn(input).then(({ queryId: queryId2 }) => {
+        if (queryId2)
+          rememberTarget(queryId2);
+      }).catch((error) => {
+        logger.error({ err: error, topicId: topic.id }, "telegram adapter: remote turn failed");
+      });
+      return;
+    }
+    const { queryId } = submitUserMessage({
+      ...input,
       onDispatched: rememberTarget,
       startTurn: dispatchTurn
     });
@@ -25883,7 +26010,8 @@ ${caption}` : voiceText : caption;
       }
       case "/abort": {
         const mapping = byKey.get(mappingKey(chatId, threadId));
-        reply(chatId, threadId, mapping && topicService.abortTurn(mapping.topicId, userId) ? "aborted" : "nothing running");
+        const aborted = mapping ? await (opts.abortTurn?.(mapping.topicId, userId) ?? topicService.abortTurn(mapping.topicId, userId)) : false;
+        reply(chatId, threadId, aborted ? "aborted" : "nothing running");
         return;
       }
       case "/agent": {
@@ -26260,7 +26388,7 @@ __export(exports_cli2, {
   runTelegramCli: () => runTelegramCli
 });
 import TelegramBot from "node-telegram-bot-api";
-function startTelegramFromEnv() {
+function startTelegramFromEnv(options = {}) {
   const token = process.env.TELEGRAM_BOT_TOKEN?.trim();
   if (!token)
     throw new Error("TELEGRAM_BOT_TOKEN is required");
@@ -26268,6 +26396,7 @@ function startTelegramFromEnv() {
   const requestedAgent = process.env.TELEGRAM_DEFAULT_AGENT?.trim();
   const forumChatId = Number.parseInt(process.env.TELEGRAM_FORUM_CHAT_ID ?? "", 10);
   const adapter = startTelegramAdapter({
+    ...options,
     client: bot,
     allowedUsers: (process.env.TELEGRAM_ALLOWED_USERS ?? "").split(",").map((value) => value.trim()).filter(Boolean),
     ...process.env.TELEGRAM_VAULT_OWNER_USER_ID?.trim() ? { vaultOwnerTelegramUserId: process.env.TELEGRAM_VAULT_OWNER_USER_ID.trim() } : {},
@@ -26288,38 +26417,101 @@ function startTelegramFromEnv() {
     }
   };
 }
-async function runTelegramCli() {
+async function spawnCanonicalNode() {
+  const entry = process.argv[1];
+  if (!entry)
+    throw new Error("cannot locate the Negotium CLI entrypoint");
+  const child = Bun.spawn({
+    cmd: [process.execPath, entry, "__node-daemon", "--port=0"],
+    detached: true,
+    env: { ...process.env, LOG_LEVEL: process.env.NEGOTIUM_NODE_LOG_LEVEL?.trim() || "info" },
+    stdin: "ignore",
+    stdout: "ignore",
+    stderr: Bun.file(`${LOG_DIR}/node-daemon.log`)
+  });
+  child.unref();
+}
+async function ensureCanonicalNode() {
+  const status = await inspectNodeDaemon();
+  if (!status.running)
+    await spawnCanonicalNode();
+  return waitForNodeDaemon(15000);
+}
+async function runCanonicalNodeChild() {
+  const { runNodeDaemon: runNodeDaemon2 } = await init_src5().then(() => exports_src3);
+  await runNodeDaemon2({ port: 0 });
+}
+async function runTelegramCli(args = process.argv.slice(2)) {
+  if (args[0] === "__node-daemon") {
+    await runCanonicalNodeChild();
+    return;
+  }
   if (!process.env.TELEGRAM_BOT_TOKEN?.trim()) {
     throw new Error("TELEGRAM_BOT_TOKEN is required");
   }
-  let node;
+  const initialNode = await ensureCanonicalNode();
   const singleton = await waitForRequiredRuntimeProcessLease("adapter:telegram", {
     workloadName: "Telegram adapter",
     onLost: () => {
       process.stderr.write(`negotium-telegram: singleton lease lost; shutting down
 `);
-      node?.stop();
+      runShutdown("test");
     }
   });
-  try {
-    node = await startDefaultNode({ port: 0 });
-  } catch (error) {
-    singleton.stop();
-    throw error;
-  }
   let channel;
   try {
-    channel = startTelegramFromEnv();
+    channel = startTelegramFromEnv({
+      abortTurn: async (topicId, userId) => {
+        const node = await waitForNodeDaemon(1500);
+        const response = await fetch(`${node.baseUrl}${NODE_CONTROL_BASE_PATH}/topics/${encodeURIComponent(topicId)}/abort`, {
+          method: "POST",
+          headers: {
+            authorization: `Bearer ${NODE_CONTROL_TOKEN}`,
+            "content-type": "application/json"
+          },
+          body: JSON.stringify({ userId })
+        });
+        const body = await response.json();
+        if (!response.ok)
+          throw new Error(body.error ?? `node returned HTTP ${response.status}`);
+        return body.aborted === true;
+      },
+      submitTurn: async (input) => {
+        const node = await waitForNodeDaemon(1500);
+        const response = await fetch(`${node.baseUrl}${NODE_CONTROL_BASE_PATH}/topics/${encodeURIComponent(input.topic.id)}/messages`, {
+          method: "POST",
+          headers: {
+            authorization: `Bearer ${NODE_CONTROL_TOKEN}`,
+            "content-type": "application/json"
+          },
+          body: JSON.stringify({
+            userId: input.userId,
+            text: input.text,
+            sourceAdapter: input.sourceAdapter,
+            visualTools: input.visualTools,
+            fileDeliveryTools: input.fileDeliveryTools
+          })
+        });
+        const body = await response.json();
+        if (!response.ok)
+          throw new Error(body.error ?? `node returned HTTP ${response.status}`);
+        return { queryId: body.queryId };
+      }
+    });
   } catch (error) {
-    await node.stop();
     singleton.stop();
     throw error;
   }
   onShutdown("telegram-channel", 100, () => channel.stop());
   onShutdown("telegram-singleton", 90, () => singleton.stop());
-  process.stdout.write(`negotium Telegram adapter listening through node :${node.port}
+  let resolveCompleted;
+  const completed = new Promise((resolve13) => {
+    resolveCompleted = resolve13;
+  });
+  onShutdown("telegram-completed", -100, resolveCompleted);
+  process.stdout.write(`negotium Telegram adapter connected to canonical node pid ${initialNode.info?.pid ?? "unknown"}
 `);
-  await node.completed;
+  await completed;
 }
 var init_cli2 = __esm(async () => {
   await init_src();
@@ -26328,37 +26520,6 @@ var init_cli2 = __esm(async () => {
   if (false) {}
 });
 
-// ../../adapters/otium/src/protocol.ts
-function str(body, field) {
-  const value = body[field];
-  return typeof value === "string" && value.trim() ? value : null;
-}
-function parseExecutionSpec(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value))
-    return null;
-  const raw = value;
-  const agent = str(raw, "agent");
-  const model = str(raw, "model");
-  const effort = str(raw, "effort");
-  const rawMcp = raw.mcp;
-  if (!agent || !model || !effort || !Array.isArray(rawMcp) || !rawMcp.every((entry) => typeof entry === "string" && entry.trim().length > 0) || typeof raw.canSpawnSubagents !== "boolean") {
-    return null;
-  }
-  return {
-    agent,
-    model,
-    effort,
-    ...str(raw, "description") ? { description: str(raw, "description") } : {},
-    mcp: [...new Set(rawMcp.map((entry) => entry.trim()))],
-    canSpawnSubagents: raw.canSpawnSubagents
-  };
-}
-var PEER_PROTOCOL_VERSION = 1, MAX_PEER_MESSAGE_LENGTH = 1e4, MAX_PEER_INPUT_FILE_BYTES, MAX_PEER_INPUT_REQUEST_BYTES;
-var init_protocol = __esm(() => {
-  MAX_PEER_INPUT_FILE_BYTES = 2 * 1024 * 1024 * 1024;
-  MAX_PEER_INPUT_REQUEST_BYTES = MAX_PEER_INPUT_FILE_BYTES + 8 * 1024 * 1024;
-});
-
 // ../../adapters/otium/src/central.ts
 var exports_central = {};
 __export(exports_central, {
@@ -26518,6 +26679,7 @@ __export(exports_join, {
   withJoinCredentialLock: () => withJoinCredentialLock,
   saveJoinWhileLocked: () => saveJoinWhileLocked,
   saveJoin: () => saveJoin,
+  removeJoin: () => removeJoin,
   parseInviteCode: () => parseInviteCode,
   loadJoin: () => loadJoin,
   joinFilePath: () => joinFilePath,
@@ -26778,6 +26940,24 @@ function saveJoinWhileLocked(join31, options = {}) {
 function saveJoin(join31, options = {}) {
   return withJoinCredentialLock(() => saveJoinWhileLocked(join31, options));
 }
+function removeJoin() {
+  return withJoinCredentialLock(() => {
+    const path = joinFilePath();
+    if (!existsSync25(path))
+      return false;
+    if (lstatSync(path).isSymbolicLink()) {
+      throw new Error(`refusing to remove symlinked Otium join file at ${path}`);
+    }
+    unlinkSync18(path);
+    const directoryFd = openSync3(dirname17(path), "r");
+    try {
+      fsyncSync2(directoryFd);
+    } finally {
+      closeSync3(directoryFd);
+    }
+    return true;
+  });
+}
 function loadJoin() {
   const central = process.env.OTIUM_CENTRAL_URL?.trim();
   const cellId = process.env.OTIUM_CELL_ID?.trim();
@@ -26812,363 +26992,56 @@ var init_join = __esm(async () => {
   await init_src();
 });
 
-// ../../adapters/otium/src/enrollment.ts
-import {
-  createDecipheriv as createDecipheriv2,
-  createPrivateKey,
-  createPublicKey,
-  diffieHellman,
-  generateKeyPairSync,
-  hkdfSync,
-  randomUUID as randomUUID24
-} from "crypto";
-import {
-  chmodSync as chmodSync6,
-  closeSync as closeSync4,
-  existsSync as existsSync26,
-  fsyncSync as fsyncSync3,
-  linkSync as linkSync2,
-  mkdirSync as mkdirSync29,
-  openSync as openSync4,
-  readFileSync as readFileSync21,
-  renameSync as renameSync14,
-  unlinkSync as unlinkSync19,
-  writeFileSync as writeFileSync19
-} from "fs";
-import { dirname as dirname18, resolve as resolve14 } from "path";
-function parseEnrollmentInvite(code) {
-  let parsed;
-  try {
-    parsed = JSON.parse(Buffer.from(code.trim(), "base64url").toString("utf8"));
-  } catch {
-    throw new Error("production invite must be base64url JSON");
-  }
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-    throw new Error("production invite must decode to an object");
-  }
-  const raw = parsed;
-  const central = typeof raw.central === "string" ? raw.central.trim().replace(/\/+$/, "") : "";
-  const token = typeof raw.token === "string" ? raw.token.trim() : "";
-  if (raw.v !== 2 || !central || !token.startsWith("nei_")) {
-    throw new Error("production invite requires {v:2, central:http(s), token:nei_\u2026}");
+// ../../adapters/otium/src/control-protocol.ts
+var OTIUM_ADAPTER_CONTROL_PREFIX = "/api/v1/adapter/otium", OTIUM_ADAPTER_CONTROL_HEADER = "x-negotium-adapter-token";
+
+// ../../adapters/otium/src/protocol.ts
+function str(body, field) {
+  const value = body[field];
+  return typeof value === "string" && value.trim() ? value : null;
+}
+function parseExecutionSpec(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return null;
+  const raw = value;
+  const agent = str(raw, "agent");
+  const model = str(raw, "model");
+  const effort = str(raw, "effort");
+  const rawMcp = raw.mcp;
+  if (!agent || !model || !effort || !Array.isArray(rawMcp) || !rawMcp.every((entry) => typeof entry === "string" && entry.trim().length > 0) || typeof raw.canSpawnSubagents !== "boolean") {
+    return null;
   }
-  assertSecureCentralUrl(central);
-  return { v: 2, central, token };
+  return {
+    agent,
+    model,
+    effort,
+    ...str(raw, "description") ? { description: str(raw, "description") } : {},
+    mcp: [...new Set(rawMcp.map((entry) => entry.trim()))],
+    canSpawnSubagents: raw.canSpawnSubagents
+  };
 }
-function pendingEnrollmentPath() {
-  return resolve14(DATA_DIR, "otium-enrollment-pending.json");
+var PEER_PROTOCOL_VERSION = 1, MAX_PEER_MESSAGE_LENGTH = 1e4, MAX_PEER_INPUT_FILE_BYTES, MAX_PEER_INPUT_REQUEST_BYTES;
+var init_protocol = __esm(() => {
+  MAX_PEER_INPUT_FILE_BYTES = 2 * 1024 * 1024 * 1024;
+  MAX_PEER_INPUT_REQUEST_BYTES = MAX_PEER_INPUT_FILE_BYTES + 8 * 1024 * 1024;
+});
+
+// ../../adapters/otium/src/canonical-mcp-bridge.ts
+import { randomUUID as randomUUID24 } from "crypto";
+function readAuthorization(request) {
+  const value = request.headers.get("authorization");
+  return value?.startsWith("Bearer ") ? value.slice(7) : null;
 }
-function isEnrollmentPending(invite) {
-  const path = pendingEnrollmentPath();
-  if (!existsSync26(path))
-    return false;
-  try {
-    const saved = JSON.parse(readFileSync21(path, "utf8"));
-    return saved.central === invite.central && saved.token === invite.token;
-  } catch {
-    return false;
-  }
-}
-function loadOrCreatePending(invite, nodeName) {
-  const path = pendingEnrollmentPath();
-  if (existsSync26(path)) {
-    const saved = JSON.parse(readFileSync21(path, "utf8"));
-    if (saved.central === invite.central && saved.token === invite.token)
-      return saved;
-    throw new Error(`another Otium enrollment is pending at ${path}`);
-  }
-  const pair = generateKeyPairSync("x25519");
-  const pending2 = {
-    ...invite,
-    idempotencyKey: randomUUID24(),
-    privateKey: pair.privateKey.export({ format: "der", type: "pkcs8" }).toString("base64url"),
-    publicKey: pair.publicKey.export({ format: "der", type: "spki" }).toString("base64url"),
-    ...nodeName ? { nodeName } : {}
-  };
-  mkdirSync29(dirname18(path), { recursive: true });
-  const temporaryPath = resolve14(dirname18(path), `.otium-enrollment-pending.json.${process.pid}.${randomUUID24()}.tmp`);
-  let fd;
-  try {
-    fd = openSync4(temporaryPath, "wx", 384);
-    writeFileSync19(fd, `${JSON.stringify(pending2, null, 2)}
-`, "utf8");
-    fsyncSync3(fd);
-    closeSync4(fd);
-    fd = undefined;
-    linkSync2(temporaryPath, path);
-    unlinkSync19(temporaryPath);
-    chmodSync6(path, 384);
-    const directoryFd = openSync4(dirname18(path), "r");
-    try {
-      fsyncSync3(directoryFd);
-    } finally {
-      closeSync4(directoryFd);
-    }
-  } catch (error) {
-    if (fd !== undefined)
-      closeSync4(fd);
-    if (existsSync26(temporaryPath))
-      unlinkSync19(temporaryPath);
-    if (error.code === "EEXIST" && existsSync26(path)) {
-      const saved = JSON.parse(readFileSync21(path, "utf8"));
-      if (saved.central === invite.central && saved.token === invite.token)
-        return saved;
-    }
-    throw error;
-  }
-  return pending2;
-}
-function replacePendingEnrollment(pending2) {
-  const path = pendingEnrollmentPath();
-  const directory = dirname18(path);
-  const temporaryPath = resolve14(directory, `.otium-enrollment-pending.json.${process.pid}.${randomUUID24()}.tmp`);
-  let fd;
-  try {
-    fd = openSync4(temporaryPath, "wx", 384);
-    writeFileSync19(fd, `${JSON.stringify(pending2, null, 2)}
-`, "utf8");
-    fsyncSync3(fd);
-    closeSync4(fd);
-    fd = undefined;
-    renameSync14(temporaryPath, path);
-    const directoryFd = openSync4(directory, "r");
-    try {
-      fsyncSync3(directoryFd);
-    } finally {
-      closeSync4(directoryFd);
-    }
-  } catch (error) {
-    if (fd !== undefined)
-      closeSync4(fd);
-    if (existsSync26(temporaryPath))
-      unlinkSync19(temporaryPath);
-    throw error;
-  }
-}
-function recordClaimedCredential(pending2, join31) {
-  withJoinCredentialLock(() => {
-    const current3 = JSON.parse(readFileSync21(pendingEnrollmentPath(), "utf8"));
-    if (current3.central !== pending2.central || current3.token !== pending2.token || current3.idempotencyKey !== pending2.idempotencyKey || current3.publicKey !== pending2.publicKey) {
-      throw new Error("pending Otium enrollment changed while its claim was in flight");
-    }
-    const claimed = { digest: joinCredentialDigest(join31), cellId: join31.cellId };
-    if (current3.claimed && (current3.claimed.digest !== claimed.digest || current3.claimed.cellId !== claimed.cellId)) {
-      throw new Error("central returned different credentials for an idempotent enrollment claim");
-    }
-    replacePendingEnrollment({ ...current3, claimed });
-  });
-}
-function openCredential(envelope, privateKeyDer) {
-  if (envelope.v !== 1 || envelope.algorithm !== "X25519-HKDF-SHA256-AES-256-GCM") {
-    throw new Error("unsupported enrollment credential envelope");
-  }
-  const privateKey = createPrivateKey({
-    key: Buffer.from(privateKeyDer, "base64url"),
-    format: "der",
-    type: "pkcs8"
-  });
-  const ephemeral = createPublicKey({
-    key: Buffer.from(envelope.ephemeralPublicKey, "base64url"),
-    format: "der",
-    type: "spki"
-  });
-  const shared = diffieHellman({ privateKey, publicKey: ephemeral });
-  const key = Buffer.from(hkdfSync("sha256", shared, Buffer.from(envelope.salt, "base64url"), INFO, 32));
-  const decipher = createDecipheriv2("aes-256-gcm", key, Buffer.from(envelope.nonce, "base64url"));
-  decipher.setAAD(INFO);
-  decipher.setAuthTag(Buffer.from(envelope.tag, "base64url"));
-  return Buffer.concat([
-    decipher.update(Buffer.from(envelope.ciphertext, "base64url")),
-    decipher.final()
-  ]).toString("utf8");
-}
-async function postJson(url, body, headers) {
-  const response = await fetch(url, {
-    method: "POST",
-    headers: { "content-type": "application/json", ...headers },
-    body: JSON.stringify(body)
-  });
-  const result = await response.json();
-  if (!response.ok)
-    throw new Error(String(result.error || `request failed (${response.status})`));
-  return result;
-}
-async function previewEnrollment(invite) {
-  return postJson(`${invite.central}/api/v1/node-enrollments/preview`, {
-    token: invite.token
-  });
-}
-async function claimEnrollment(invite, nodeName) {
-  const pending2 = loadOrCreatePending(invite, nodeName);
-  const response = await postJson(`${invite.central}/api/v1/node-enrollments/claim`, {
-    token: invite.token,
-    credentialPublicKey: pending2.publicKey,
-    ...pending2.nodeName ? { nodeName: pending2.nodeName } : {}
-  }, { "idempotency-key": pending2.idempotencyKey });
-  const credential = response.credential;
-  const secret = openCredential(credential, pending2.privateKey);
-  if (!secret.startsWith("rcs_"))
-    throw new Error("central returned an invalid runtime credential");
-  const join31 = {
-    v: 2,
-    central: invite.central,
-    relay: String(response.relayUrl),
-    cellId: String(response.cell?.id),
-    secret
-  };
-  if (!join31.relay || !join31.cellId || join31.cellId === "undefined") {
-    throw new Error("central returned an incomplete enrollment response");
-  }
-  assertSecureRelayUrl(join31.relay);
-  recordClaimedCredential(pending2, join31);
-  return join31;
-}
-function commitEnrollment(join31, options = {}) {
-  return withJoinCredentialLock(() => {
-    const pendingPath = pendingEnrollmentPath();
-    const pending2 = existsSync26(pendingPath) ? JSON.parse(readFileSync21(pendingPath, "utf8")) : null;
-    const digest = joinCredentialDigest(join31);
-    if (pending2 && (!pending2.claimed || pending2.claimed.digest !== digest || pending2.claimed.cellId !== join31.cellId)) {
-      throw new Error(`pending Otium enrollment at ${pendingPath} does not match these credentials`);
-    }
-    const path = saveJoinWhileLocked(join31, options);
-    if (!isJoinPersisted(join31)) {
-      throw new Error("Otium join credentials were not durably persisted");
-    }
-    if (!pending2)
-      return path;
-    unlinkSync19(pendingPath);
-    const directoryFd = openSync4(dirname18(pendingPath), "r");
-    try {
-      fsyncSync3(directoryFd);
-    } finally {
-      closeSync4(directoryFd);
-    }
-    return path;
-  });
-}
-var INFO;
-var init_enrollment = __esm(async () => {
-  await init_src();
-  await init_join();
-  INFO = Buffer.from("otium-node-enrollment-v1", "utf8");
-});
-
-// ../../adapters/otium/src/join-cli.ts
-var exports_join_cli = {};
-__export(exports_join_cli, {
-  joinCommand: () => joinCommand
-});
-function option2(args, name) {
-  const index = args.indexOf(`--${name}`);
-  return index >= 0 ? args[index + 1]?.trim() : undefined;
-}
-async function confirmEnrollment(message) {
-  if (!process.stdin.isTTY)
-    return false;
-  const { createInterface } = await import("readline/promises");
-  const prompt = createInterface({ input: process.stdin, output: process.stdout });
-  try {
-    return /^(?:y|yes)$/i.test((await prompt.question(`${message} [y/N] `)).trim());
-  } finally {
-    prompt.close();
-  }
-}
-async function joinCommand(args) {
-  const code = args[0]?.trim();
-  if (!code) {
-    console.error("usage: negotium-otium join <invite-code> [--yes] [--name <node-name>] [--legacy] [--replace]");
-    process.exitCode = 1;
-    return;
-  }
-  let join31;
-  let productionEnrollment = false;
-  if (args.includes("--legacy")) {
-    try {
-      join31 = parseInviteCode(code);
-    } catch (err2) {
-      console.error(`invalid legacy invite code: ${err2 instanceof Error ? err2.message : err2}`);
-      process.exitCode = 1;
-      return;
-    }
-  } else {
-    try {
-      const invite = parseEnrollmentInvite(code);
-      const resuming = isEnrollmentPending(invite);
-      let nodeName = option2(args, "name");
-      if (resuming) {
-        console.log(`Resuming interrupted Otium enrollment with ${invite.central}`);
-      } else {
-        const preview = await previewEnrollment(invite);
-        const workspace = preview.preview?.workspace;
-        nodeName ||= preview.preview?.suggestedNodeName || undefined;
-        console.log(`Otium workspace: ${workspace?.name ?? workspace?.slug ?? workspace?.id}`);
-        console.log(`  central:   ${invite.central}`);
-        console.log(`  transport: ${preview.preview?.transport ?? "relay"}`);
-        console.log(`  access:    ${preview.preview?.topics ?? "explicitly shared topics only"}`);
-        const accepted = args.includes("--yes") || await confirmEnrollment("Join this workspace?");
-        if (!accepted) {
-          console.log("enrollment cancelled");
-          return;
-        }
-      }
-      join31 = await claimEnrollment(invite, nodeName);
-      productionEnrollment = true;
-    } catch (err2) {
-      console.error(`enrollment failed: ${err2 instanceof Error ? err2.message : err2}`);
-      process.exitCode = 1;
-      return;
-    }
-  }
-  let path;
-  try {
-    const saveOptions = { replaceExisting: args.includes("--replace") };
-    path = productionEnrollment ? commitEnrollment(join31, saveOptions) : saveJoin(join31, saveOptions);
-  } catch (err2) {
-    console.error(`could not save join credentials: ${err2 instanceof Error ? err2.message : err2}`);
-    process.exitCode = 1;
-    return;
-  }
-  console.log(`otium join credentials saved to ${path}`);
-  console.log(`  central: ${join31.central}`);
-  console.log(`  cellId:  ${join31.cellId}`);
-  configureOtiumCentral(join31);
-  try {
-    const self = await selfPeerNode();
-    if (self) {
-      console.log(`attached to workspace as "${self.nodeName ?? self.cellId}" (baseUrl ${self.baseUrl})`);
-    } else {
-      console.warn("warning: central answered but this cell has no visible assignment yet \u2014 check the workspace assignment");
-    }
-  } catch (err2) {
-    console.warn(`warning: could not verify against central (${err2 instanceof Error ? err2.message : err2}) \u2014 credentials saved anyway`);
-  } finally {
-    configureOtiumCentral(null);
-  }
-  console.log("\nnext: `negotium-otium serve` (mounts the otium peer routes automatically)");
-}
-var init_join_cli = __esm(async () => {
-  await init_central();
-  await init_enrollment();
-  await init_join();
-});
-
-// ../../adapters/otium/src/canonical-mcp-bridge.ts
-import { randomUUID as randomUUID25 } from "crypto";
-function readAuthorization(request) {
-  const value = request.headers.get("authorization");
-  return value?.startsWith("Bearer ") ? value.slice(7) : null;
-}
-async function readLimitedJson(request) {
-  const declared = Number(request.headers.get("content-length") ?? "0");
-  if (Number.isFinite(declared) && declared > MAX_BODY_BYTES)
-    return null;
-  const reader = request.body?.getReader();
-  if (!reader)
-    return null;
-  const chunks = [];
-  let size = 0;
-  const deadline = Date.now() + BODY_READ_TIMEOUT_MS;
+async function readLimitedJson(request) {
+  const declared = Number(request.headers.get("content-length") ?? "0");
+  if (Number.isFinite(declared) && declared > MAX_BODY_BYTES)
+    return null;
+  const reader = request.body?.getReader();
+  if (!reader)
+    return null;
+  const chunks = [];
+  let size = 0;
+  const deadline = Date.now() + BODY_READ_TIMEOUT_MS;
   try {
     while (true) {
       const remaining = deadline - Date.now();
@@ -27295,7 +27168,7 @@ function startCanonicalMcpBridge(options = {}) {
   const url = `http://127.0.0.1:${server.port}/`;
   const unregister = registerCanonicalMcpBridgeEnvProvider((scope) => {
     sweep();
-    const token = `${randomUUID25()}${randomUUID25()}`;
+    const token = `${randomUUID24()}${randomUUID24()}`;
     capabilities.set(token, {
       surface: scope.surface,
       userId: scope.userId,
@@ -27348,6 +27221,43 @@ var init_canonical_mcp_bridge = __esm(async () => {
 
 // ../../adapters/otium/src/store.ts
 import { createHash as createHash7 } from "crypto";
+function isPeerDetached(hubNodeId) {
+  const row = db.query("SELECT status FROM otium_peer_lifecycle WHERE hub_node_id = ?").get(hubNodeId);
+  return row?.status === "detached";
+}
+function enqueueSharedMessage(args) {
+  db.run(`INSERT OR REPLACE INTO otium_shared_message_outbox
+       (local_topic_id, source_message_id, message_json, created_at)
+     VALUES (?, ?, ?, ?)`, [
+    args.localTopicId,
+    args.sourceMessageId,
+    JSON.stringify(args.message),
+    new Date().toISOString()
+  ]);
+}
+function listSharedMessages(localTopicId) {
+  return db.query("SELECT * FROM otium_shared_message_outbox WHERE local_topic_id = ? ORDER BY created_at").all(localTopicId);
+}
+function deleteSharedMessage(localTopicId, sourceMessageId) {
+  return db.run("DELETE FROM otium_shared_message_outbox WHERE local_topic_id = ? AND source_message_id = ?", [localTopicId, sourceMessageId]).changes === 1;
+}
+function getSharedTopicState(localTopicId) {
+  return db.query("SELECT * FROM otium_shared_topic_state WHERE local_topic_id = ?").get(localTopicId) ?? null;
+}
+function listSharedTopicStates() {
+  return db.query("SELECT * FROM otium_shared_topic_state ORDER BY updated_at").all();
+}
+function setSharedTopicState(args) {
+  db.run(`INSERT INTO otium_shared_topic_state (local_topic_id, host_topic_id, status, updated_at)
+     VALUES (?, ?, ?, ?)
+     ON CONFLICT(local_topic_id) DO UPDATE SET
+       host_topic_id = excluded.host_topic_id,
+       status = excluded.status,
+       updated_at = excluded.updated_at`, [args.localTopicId, args.hostTopicId ?? null, args.status, new Date().toISOString()]);
+}
+function deleteSharedTopicState(localTopicId) {
+  return db.run("DELETE FROM otium_shared_topic_state WHERE local_topic_id = ?", [localTopicId]).changes === 1;
+}
 function getPeerSession(hostNodeId, hostTopicId) {
   return db.query("SELECT * FROM otium_peer_sessions WHERE host_node_id = ? AND host_topic_id = ?").get(hostNodeId, hostTopicId) ?? null;
 }
@@ -27388,6 +27298,19 @@ function unbindPeerSession(hostNodeId, hostTopicId) {
 function unbindSharedPeerSessionsForLocalTopic(localTopicId) {
   return db.run("DELETE FROM otium_peer_sessions WHERE local_topic_id = ? AND binding_mode = 'shared'", [localTopicId]).changes;
 }
+function downgradeSharedTopicsLocally(hubNodeId) {
+  return db.transaction(() => {
+    const topics = db.query("SELECT id FROM api_topics WHERE access_mode = 'shared'").all().map((row) => row.id);
+    db.run("UPDATE api_topics SET access_mode = 'private' WHERE access_mode = 'shared'");
+    db.run("DELETE FROM otium_peer_sessions WHERE host_node_id = ?", [hubNodeId]);
+    db.run("DELETE FROM otium_shared_message_outbox");
+    db.run("DELETE FROM otium_shared_topic_state");
+    db.run(`INSERT INTO otium_peer_lifecycle (hub_node_id, status, updated_at)
+       VALUES (?, 'detached', ?)
+       ON CONFLICT(hub_node_id) DO UPDATE SET status = 'detached', updated_at = excluded.updated_at`, [hubNodeId, new Date().toISOString()]);
+    return topics;
+  })();
+}
 function listPeerSessions() {
   return db.query("SELECT * FROM otium_peer_sessions").all();
 }
@@ -27581,7 +27504,7 @@ var init_store2 = __esm(async () => {
     db.exec("ALTER TABLE otium_peer_sessions ADD COLUMN binding_mode TEXT NOT NULL DEFAULT 'mirror'");
   }
   db.run(`UPDATE api_topics
-   SET visibility = 'hidden', access_mode = 'shared'
+   SET visibility = 'visible', access_mode = 'shared', is_subagent = 0
    WHERE id IN (
      SELECT local_topic_id FROM otium_peer_sessions WHERE binding_mode = 'mirror'
    )`);
@@ -27653,6 +27576,30 @@ var init_store2 = __esm(async () => {
     updated_at   INTEGER NOT NULL,
     PRIMARY KEY (node_cell_id, request_id)
   )
+`);
+  db.exec(`
+  CREATE TABLE IF NOT EXISTS otium_shared_topic_state (
+    local_topic_id TEXT PRIMARY KEY,
+    host_topic_id  TEXT,
+    status         TEXT NOT NULL CHECK (status IN ('publishing', 'published', 'unpublishing')),
+    updated_at     TEXT NOT NULL
+  )
+`);
+  db.exec(`
+  CREATE TABLE IF NOT EXISTS otium_shared_message_outbox (
+    local_topic_id TEXT NOT NULL,
+    source_message_id TEXT NOT NULL,
+    message_json TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    PRIMARY KEY (local_topic_id, source_message_id)
+  )
+`);
+  db.exec(`
+  CREATE TABLE IF NOT EXISTS otium_peer_lifecycle (
+    hub_node_id TEXT PRIMARY KEY,
+    status TEXT NOT NULL CHECK (status IN ('attached', 'detached')),
+    updated_at TEXT NOT NULL
+  )
 `);
 });
 
@@ -27844,7 +27791,7 @@ function createTurnForwarder(opts) {
           logger.warn({ requestId, seq, type: event.type, attempt, error: result.error }, "otium: peer event delivery to hub failed");
           if (attempt < PEER_EVENT_MAX_ATTEMPTS) {
             const delayMs = retryBaseMs * 2 ** (attempt - 1);
-            await new Promise((resolve15) => setTimeout(resolve15, delayMs));
+            await new Promise((resolve14) => setTimeout(resolve14, delayMs));
           }
         }
         forwarder.deliveryBlocked = true;
@@ -27983,8 +27930,8 @@ var init_event_backflow = __esm(async () => {
 });
 
 // ../../adapters/otium/src/peer-files.ts
-import { randomUUID as randomUUID26 } from "crypto";
-import { copyFileSync as copyFileSync3, mkdirSync as mkdirSync30, rmSync as rmSync6, statSync as statSync12 } from "fs";
+import { randomUUID as randomUUID25 } from "crypto";
+import { copyFileSync as copyFileSync3, mkdirSync as mkdirSync29, rmSync as rmSync6, statSync as statSync12 } from "fs";
 import { basename as basename8, extname as extname5, join as join31 } from "path";
 function fileType(mimeType) {
   if (mimeType.startsWith("image/"))
@@ -28053,8 +28000,8 @@ function recordFile(args) {
   });
 }
 function insertLocalFile(args) {
-  const id = randomUUID26();
-  mkdirSync30(PEER_FILES_DIR, { recursive: true });
+  const id = randomUUID25();
+  mkdirSync29(PEER_FILES_DIR, { recursive: true });
   const path = join31(PEER_FILES_DIR, `${id}-${safeFilename(args.filename)}`);
   copyFileSync3(args.sourcePath, path);
   return recordFile({ id, path, sizeBytes: statSync12(path).size, ...args });
@@ -28066,8 +28013,8 @@ function deletePeerFilesForTopic(topicId) {
     rmSync6(row.path, { force: true });
 }
 async function storePeerInputFile(file, access) {
-  const id = randomUUID26();
-  mkdirSync30(PEER_FILES_DIR, { recursive: true });
+  const id = randomUUID25();
+  mkdirSync29(PEER_FILES_DIR, { recursive: true });
   const filename = file.name || "upload";
   const path = join31(PEER_FILES_DIR, `${id}-${safeFilename(filename)}`);
   const sizeBytes = await Bun.write(path, file);
@@ -28132,7 +28079,7 @@ var init_peer_files = __esm(async () => {
 });
 
 // ../../adapters/otium/src/runtime-bridge.ts
-import { randomUUID as randomUUID27 } from "crypto";
+import { randomUUID as randomUUID26 } from "crypto";
 function isMcpToolResult(value) {
   if (!value || typeof value !== "object" || Array.isArray(value))
     return false;
@@ -28202,7 +28149,7 @@ var init_runtime_bridge = __esm(async () => {
       } catch (error) {
         return errorResult(`Error: Failed to open hub question: ${error.message}`);
       }
-      const bridgeRequestId = `bridge-ask-${randomUUID27()}`;
+      const bridgeRequestId = `bridge-ask-${randomUUID26()}`;
       const baseUrl = hubNode.baseUrl.replace(/\/+$/, "");
       const post = async (path, body) => {
         const response = await fetch(`${baseUrl}${path}`, {
@@ -28762,6 +28709,287 @@ var init_session_bridge_ipc = __esm(() => {
   MAX_BODY_BYTES2 = 1024 * 1024;
 });
 
+// ../../adapters/otium/src/shared-topic-sync.ts
+var exports_shared_topic_sync = {};
+__export(exports_shared_topic_sync, {
+  startSharedTopicSync: () => startSharedTopicSync,
+  forwardSharedTopicMessage: () => forwardSharedTopicMessage,
+  downgradeSharedTopicsForHub: () => downgradeSharedTopicsForHub,
+  disconnectSharedTopics: () => disconnectSharedTopics,
+  checkPeerAttachment: () => checkPeerAttachment,
+  acceptSharedTopicMessages: () => acceptSharedTopicMessages
+});
+function isMirrorTopic(topicId) {
+  return listPeerSessions().some((row) => row.local_topic_id === topicId && row.binding_mode === "mirror");
+}
+function metadata(topic) {
+  if (!topic.agent)
+    throw new Error(`topic ${topic.id} has no executable agent`);
+  const registry = getRegistry(topic.agent);
+  return {
+    localTopicId: topic.id,
+    title: topic.title,
+    ...topic.description ? { description: topic.description } : {},
+    agent: topic.agent,
+    model: topic.defaultModel || registry.defaultModel,
+    effort: topic.defaultEffort ?? "medium"
+  };
+}
+async function peerRequest(node, path, init) {
+  const token = await mintPeerToken(node.cellId);
+  const response = await fetch(`${node.baseUrl.replace(/\/+$/, "")}${path}`, {
+    ...init,
+    headers: {
+      authorization: `Bearer ${token}`,
+      "content-type": "application/json",
+      ...init.headers ?? {}
+    },
+    signal: AbortSignal.timeout(15000)
+  });
+  const body = await response.json().catch(() => null);
+  if (!response.ok || !body?.ok)
+    throw new Error(String(body?.error ?? `peer request failed (${response.status})`));
+  return body;
+}
+function messageEnvelope(message) {
+  const author = message.agentType ? "ai" : message.kind === "system" || message.kind === "tool" ? "system" : "user";
+  return {
+    sourceMessageId: message.sourceMessageId ?? message.id,
+    author,
+    text: message.text,
+    createdAt: message.createdAt,
+    ...message.agentType ? { agent: message.agentType } : {},
+    ...message.model ? { model: message.model } : {},
+    ...message.kind ? { kind: message.kind } : {}
+  };
+}
+async function publishTopic(join32, topicId, node) {
+  const topic = getTopic(topicId);
+  if (!topic || topic.kind !== "agent" || !topic.agent || !isTopicShared(topic) || !topic.visibility || topic.visibility === "hidden" || isMirrorTopic(topicId))
+    return;
+  const state = getSharedTopicState(topicId);
+  setSharedTopicState({
+    localTopicId: topicId,
+    hostTopicId: state?.host_topic_id,
+    status: "publishing"
+  });
+  try {
+    const body = await peerRequest(node, "/api/v1/peer/shared-topic", {
+      method: "POST",
+      body: JSON.stringify({
+        v: PEER_PROTOCOL_VERSION,
+        ...metadata(topic)
+      })
+    });
+    const hostTopicId = typeof body.hostTopicId === "string" ? body.hostTopicId : state?.host_topic_id;
+    if (!hostTopicId)
+      throw new Error("shared-topic response omitted hostTopicId");
+    setSharedTopicState({ localTopicId: topicId, hostTopicId, status: "published" });
+    const messages = listApiMessages(topicId, { limit: 200 }).page.filter((message) => !message.sourceNode).map(messageEnvelope);
+    if (messages.length) {
+      await peerRequest(node, "/api/v1/peer/shared-topic/messages", {
+        method: "POST",
+        body: JSON.stringify({
+          v: PEER_PROTOCOL_VERSION,
+          localTopicId: topicId,
+          hostTopicId,
+          messages
+        })
+      });
+    }
+    for (const row of listSharedMessages(topicId)) {
+      await peerRequest(node, "/api/v1/peer/shared-topic/messages", {
+        method: "POST",
+        body: JSON.stringify({
+          v: PEER_PROTOCOL_VERSION,
+          localTopicId: topicId,
+          hostTopicId,
+          messages: [JSON.parse(row.message_json)]
+        })
+      });
+      deleteSharedMessage(topicId, row.source_message_id);
+    }
+  } catch (error) {
+    logger.warn({ error, topicId }, "otium: shared topic publish deferred");
+    setTimeout(() => void reconcileTopic(join32, topicId), RETRY_MS).unref?.();
+  }
+}
+async function unpublishTopic(join32, topicId, node) {
+  const state = getSharedTopicState(topicId);
+  if (!state)
+    return;
+  setSharedTopicState({
+    localTopicId: topicId,
+    hostTopicId: state.host_topic_id,
+    status: "unpublishing"
+  });
+  try {
+    await peerRequest(node, `/api/v1/peer/shared-topic/${encodeURIComponent(topicId)}`, {
+      method: "DELETE"
+    });
+    deleteSharedTopicState(topicId);
+  } catch (error) {
+    logger.warn({ error, topicId }, "otium: shared topic unpublish deferred");
+    setTimeout(() => void reconcileTopic(join32, topicId), RETRY_MS).unref?.();
+  }
+}
+async function reconcileTopic(join32, topicId, explicit = false) {
+  if (!otiumCentralConfig())
+    return;
+  if (!explicit && isPeerDetached(join32.cellId))
+    return;
+  const target = (await listPeerNodes()).find((node) => node.isPrimary) ?? null;
+  if (!target)
+    return;
+  const topic = getTopic(topicId);
+  if (topic?.kind === "agent" && topic.agent && isTopicShared(topic) && topic.visibility !== "hidden" && !isMirrorTopic(topicId))
+    return publishTopic(join32, topicId, target);
+  return unpublishTopic(join32, topicId, target);
+}
+function disconnectSharedTopics(join32) {
+  const states = listSharedTopicStates();
+  const hubPromise = listPeerNodes({ fresh: true }).then((nodes) => nodes.find((node) => node.isPrimary) ?? null, () => null);
+  const updated = downgradeSharedTopicsLocally(join32.cellId);
+  for (const topicId of updated)
+    WsHub.get().broadcastTopicUpdated(topicId);
+  const deletions = states.map(async (state) => {
+    const hub = await hubPromise;
+    if (!hub)
+      return;
+    try {
+      await peerRequest(hub, `/api/v1/peer/shared-topic/${encodeURIComponent(state.local_topic_id)}`, {
+        method: "DELETE"
+      });
+    } catch {}
+  });
+  return Promise.all(deletions).then(() => {
+    return;
+  });
+}
+function downgradeSharedTopicsForHub(hubNodeId) {
+  const updated = downgradeSharedTopicsLocally(hubNodeId);
+  for (const topicId of updated)
+    WsHub.get().broadcastTopicUpdated(topicId);
+  return updated.length;
+}
+async function checkPeerAttachment(join32) {
+  const nodes = await listPeerNodes({ fresh: true });
+  if (nodes.some((node) => node.cellId === join32.cellId))
+    return true;
+  downgradeSharedTopicsForHub(join32.cellId);
+  return false;
+}
+function startSharedTopicSync(join32) {
+  let stopped = false;
+  let detached = isPeerDetached(join32.cellId);
+  const queue = new Set;
+  const schedule = (topicId, explicit = false) => {
+    if (stopped || queue.has(topicId))
+      return;
+    queue.add(topicId);
+    queueMicrotask(async () => {
+      queue.delete(topicId);
+      try {
+        await reconcileTopic(join32, topicId, explicit);
+      } catch (error) {
+        logger.warn({ error, topicId }, "otium: shared topic reconciliation failed");
+      }
+    });
+  };
+  for (const topic of listTopics())
+    schedule(topic.id, false);
+  for (const state of listSharedTopicStates())
+    schedule(state.local_topic_id);
+  const attachmentCheck = setInterval(async () => {
+    if (stopped || detached)
+      return;
+    try {
+      if (!await checkPeerAttachment(join32))
+        detached = true;
+    } catch {}
+  }, 30000);
+  attachmentCheck.unref?.();
+  const unsubscribe2 = runtimeBus().subscribe((event) => {
+    if (event.type === "topic-created" || event.type === "topic-updated" || event.type === "topic-deleted")
+      schedule(event.topicId, true);
+    if (event.type === "message") {
+      const message = event.payload;
+      if (!message.sourceNode) {
+        schedule(event.topicId);
+        forwardSharedTopicMessage(join32, message).catch((error) => logger.warn({ error, topicId: event.topicId }, "otium: shared message deferred"));
+      }
+    }
+  });
+  return () => {
+    stopped = true;
+    clearInterval(attachmentCheck);
+    unsubscribe2();
+  };
+}
+async function forwardSharedTopicMessage(_join, message) {
+  if (message.sourceNode || isMirrorTopic(message.topicId))
+    return;
+  if (getActiveForwarder(message.topicId))
+    return;
+  const state = getSharedTopicState(message.topicId);
+  if (!state?.host_topic_id || state.status !== "published")
+    return;
+  const hub = (await listPeerNodes()).find((node) => node.isPrimary) ?? null;
+  if (!hub)
+    return;
+  const envelope = messageEnvelope(message);
+  try {
+    await peerRequest(hub, "/api/v1/peer/shared-topic/messages", {
+      method: "POST",
+      body: JSON.stringify({
+        v: PEER_PROTOCOL_VERSION,
+        localTopicId: message.topicId,
+        hostTopicId: state.host_topic_id,
+        messages: [envelope]
+      })
+    });
+  } catch (error) {
+    enqueueSharedMessage({
+      localTopicId: message.topicId,
+      sourceMessageId: envelope.sourceMessageId,
+      message: envelope
+    });
+    throw error;
+  }
+}
+function acceptSharedTopicMessages(messages, localTopicId, sourceNode) {
+  let inserted = 0;
+  for (const incoming of messages) {
+    if (!incoming.sourceMessageId || typeof incoming.text !== "string")
+      continue;
+    if (getApiMessage(localTopicId, incoming.sourceMessageId))
+      continue;
+    const message = {
+      id: incoming.sourceMessageId,
+      topicId: localTopicId,
+      authorId: sourceNode,
+      text: incoming.text,
+      createdAt: incoming.createdAt,
+      ...incoming.agent ? { agentType: incoming.agent } : {},
+      ...incoming.model ? { model: incoming.model } : {},
+      ...incoming.kind ? { kind: incoming.kind } : {},
+      sourceNode,
+      sourceMessageId: incoming.sourceMessageId
+    };
+    appendApiMessage(message);
+    inserted++;
+  }
+  return inserted;
+}
+var RETRY_MS = 1000;
+var init_shared_topic_sync = __esm(async () => {
+  await init_src();
+  await init_central();
+  await init_event_backflow();
+  init_protocol();
+  await init_store2();
+});
+
 // ../../adapters/otium/src/relay-protocol.ts
 function encodeFrame(frame) {
   const encoded = JSON.stringify(frame);
@@ -29158,6 +29386,8 @@ class TunnelClient {
         const pending2 = this.pendingHttp.get(frame.id);
         try {
           pending2?.bodyController?.enqueue(fromB64(frame.dataB64));
+          if (pending2)
+            this.startPendingHttp(frame.id, pending2);
         } catch {}
         break;
       }
@@ -29165,6 +29395,8 @@ class TunnelClient {
         const pending2 = this.pendingHttp.get(frame.id);
         try {
           pending2?.bodyController?.close();
+          if (pending2)
+            this.startPendingHttp(frame.id, pending2);
         } catch {}
         break;
       }
@@ -29207,21 +29439,35 @@ class TunnelClient {
   }
   startHttpRequest(frame) {
     const abort = new AbortController;
-    const pending2 = { abort, bodyController: null };
-    this.pendingHttp.set(frame.id, pending2);
-    let body;
+    const headers = new Headers;
+    for (const [name, value] of frame.headers)
+      headers.append(name, value);
+    const pending2 = {
+      abort,
+      bodyController: null,
+      body: undefined,
+      method: frame.method,
+      path: frame.path,
+      headers,
+      started: false
+    };
     if (frame.hasBody) {
-      body = new ReadableStream({
+      pending2.body = new ReadableStream({
         start: (controller) => {
           pending2.bodyController = controller;
         }
       });
     }
-    const headers = new Headers;
-    for (const [name, value] of frame.headers)
-      headers.append(name, value);
-    this.replayHttp(frame.id, frame.method, frame.path, headers, body, abort).finally(() => {
-      this.pendingHttp.delete(frame.id);
+    this.pendingHttp.set(frame.id, pending2);
+    if (!frame.hasBody)
+      this.startPendingHttp(frame.id, pending2);
+  }
+  startPendingHttp(id, pending2) {
+    if (pending2.started || pending2.abort.signal.aborted)
+      return;
+    pending2.started = true;
+    this.replayHttp(id, pending2.method, pending2.path, pending2.headers, pending2.body, pending2.abort).finally(() => {
+      this.pendingHttp.delete(id);
     });
   }
   async replayHttp(id, method, path, headers, body, abort) {
@@ -29365,57 +29611,301 @@ function bindOtiumTopic(options) {
   if (!topic.participants.some((participant) => participant.userId === options.userId)) {
     return { ok: false, error: "local topic is not visible to this user", status: 403 };
   }
-  if (!isTopicShared(topic)) {
-    return { ok: false, error: "private topics must be shared explicitly first", status: 409 };
+  if (!isTopicShared(topic)) {
+    return { ok: false, error: "private topics must be shared explicitly first", status: 409 };
+  }
+  const previous = getPeerSession(options.hostNodeId, options.hostTopicId);
+  bindPeerSession(options.hostNodeId, options.hostTopicId, options.localTopicId, "shared");
+  return {
+    ok: true,
+    localTopicId: options.localTopicId,
+    replaced: Boolean(previous && previous.local_topic_id !== options.localTopicId)
+  };
+}
+function shareOtiumTopic(options) {
+  const owned = ownsTopic(options.localTopicId, options.userId);
+  if (!owned.ok)
+    return owned;
+  if (!isTopicShared(owned.topic)) {
+    upsertTopic({ ...owned.topic, accessMode: "shared" });
+    WsHub.get().broadcastTopicUpdated(owned.topic.id);
+  }
+  return bindOtiumTopic(options);
+}
+function setOtiumTopicPrivate(options) {
+  const owned = ownsTopic(options.localTopicId, options.userId);
+  if (!owned.ok)
+    return owned;
+  const removedBindings = unbindSharedPeerSessionsForLocalTopic(options.localTopicId);
+  if (isTopicShared(owned.topic)) {
+    upsertTopic({ ...owned.topic, accessMode: "private" });
+    WsHub.get().broadcastTopicUpdated(owned.topic.id);
+  }
+  return { ok: true, localTopicId: options.localTopicId, removedBindings };
+}
+function unbindOtiumTopic(hostNodeId, hostTopicId) {
+  return unbindPeerSession(hostNodeId, hostTopicId);
+}
+function listOtiumTopicBindings() {
+  return listPeerSessions().map((row) => {
+    const topic = getTopic(row.local_topic_id);
+    return {
+      hostNodeId: row.host_node_id,
+      hostTopicId: row.host_topic_id,
+      localTopicId: row.local_topic_id,
+      transport: row.binding_mode === "shared" ? "shared-binding" : "internal-mirror",
+      ...topic ? { topicAccessMode: topic.accessMode ?? "private" } : {},
+      ...topic ? { localTopicTitle: topic.title } : {},
+      localTopicExists: Boolean(topic),
+      createdAt: row.created_at
+    };
+  });
+}
+var init_bindings = __esm(async () => {
+  await init_src();
+  await init_store2();
+});
+
+// ../../adapters/otium/src/enrollment.ts
+import {
+  createDecipheriv as createDecipheriv2,
+  createPrivateKey,
+  createPublicKey,
+  diffieHellman,
+  generateKeyPairSync,
+  hkdfSync,
+  randomUUID as randomUUID27
+} from "crypto";
+import {
+  chmodSync as chmodSync6,
+  closeSync as closeSync4,
+  existsSync as existsSync26,
+  fsyncSync as fsyncSync3,
+  linkSync as linkSync2,
+  mkdirSync as mkdirSync30,
+  openSync as openSync4,
+  readFileSync as readFileSync21,
+  renameSync as renameSync14,
+  unlinkSync as unlinkSync19,
+  writeFileSync as writeFileSync19
+} from "fs";
+import { dirname as dirname18, resolve as resolve14 } from "path";
+function parseEnrollmentInvite(code) {
+  let parsed;
+  try {
+    parsed = JSON.parse(Buffer.from(code.trim(), "base64url").toString("utf8"));
+  } catch {
+    throw new Error("production invite must be base64url JSON");
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error("production invite must decode to an object");
+  }
+  const raw = parsed;
+  const central = typeof raw.central === "string" ? raw.central.trim().replace(/\/+$/, "") : "";
+  const token = typeof raw.token === "string" ? raw.token.trim() : "";
+  if (raw.v !== 2 || !central || !token.startsWith("nei_")) {
+    throw new Error("production invite requires {v:2, central:http(s), token:nei_\u2026}");
+  }
+  assertSecureCentralUrl(central);
+  return { v: 2, central, token };
+}
+function pendingEnrollmentPath() {
+  return resolve14(DATA_DIR, "otium-enrollment-pending.json");
+}
+function isEnrollmentPending(invite) {
+  const path = pendingEnrollmentPath();
+  if (!existsSync26(path))
+    return false;
+  try {
+    const saved = JSON.parse(readFileSync21(path, "utf8"));
+    return saved.central === invite.central && saved.token === invite.token;
+  } catch {
+    return false;
+  }
+}
+function loadOrCreatePending(invite, nodeName) {
+  const path = pendingEnrollmentPath();
+  if (existsSync26(path)) {
+    const saved = JSON.parse(readFileSync21(path, "utf8"));
+    if (saved.central === invite.central && saved.token === invite.token)
+      return saved;
+    throw new Error(`another Otium enrollment is pending at ${path}`);
   }
-  const previous = getPeerSession(options.hostNodeId, options.hostTopicId);
-  bindPeerSession(options.hostNodeId, options.hostTopicId, options.localTopicId, "shared");
-  return {
-    ok: true,
-    localTopicId: options.localTopicId,
-    replaced: Boolean(previous && previous.local_topic_id !== options.localTopicId)
+  const pair = generateKeyPairSync("x25519");
+  const pending2 = {
+    ...invite,
+    idempotencyKey: randomUUID27(),
+    privateKey: pair.privateKey.export({ format: "der", type: "pkcs8" }).toString("base64url"),
+    publicKey: pair.publicKey.export({ format: "der", type: "spki" }).toString("base64url"),
+    ...nodeName ? { nodeName } : {}
   };
+  mkdirSync30(dirname18(path), { recursive: true });
+  const temporaryPath = resolve14(dirname18(path), `.otium-enrollment-pending.json.${process.pid}.${randomUUID27()}.tmp`);
+  let fd;
+  try {
+    fd = openSync4(temporaryPath, "wx", 384);
+    writeFileSync19(fd, `${JSON.stringify(pending2, null, 2)}
+`, "utf8");
+    fsyncSync3(fd);
+    closeSync4(fd);
+    fd = undefined;
+    linkSync2(temporaryPath, path);
+    unlinkSync19(temporaryPath);
+    chmodSync6(path, 384);
+    const directoryFd = openSync4(dirname18(path), "r");
+    try {
+      fsyncSync3(directoryFd);
+    } finally {
+      closeSync4(directoryFd);
+    }
+  } catch (error) {
+    if (fd !== undefined)
+      closeSync4(fd);
+    if (existsSync26(temporaryPath))
+      unlinkSync19(temporaryPath);
+    if (error.code === "EEXIST" && existsSync26(path)) {
+      const saved = JSON.parse(readFileSync21(path, "utf8"));
+      if (saved.central === invite.central && saved.token === invite.token)
+        return saved;
+    }
+    throw error;
+  }
+  return pending2;
 }
-function shareOtiumTopic(options) {
-  const owned = ownsTopic(options.localTopicId, options.userId);
-  if (!owned.ok)
-    return owned;
-  if (!isTopicShared(owned.topic)) {
-    upsertTopic({ ...owned.topic, accessMode: "shared" });
+function replacePendingEnrollment(pending2) {
+  const path = pendingEnrollmentPath();
+  const directory = dirname18(path);
+  const temporaryPath = resolve14(directory, `.otium-enrollment-pending.json.${process.pid}.${randomUUID27()}.tmp`);
+  let fd;
+  try {
+    fd = openSync4(temporaryPath, "wx", 384);
+    writeFileSync19(fd, `${JSON.stringify(pending2, null, 2)}
+`, "utf8");
+    fsyncSync3(fd);
+    closeSync4(fd);
+    fd = undefined;
+    renameSync14(temporaryPath, path);
+    const directoryFd = openSync4(directory, "r");
+    try {
+      fsyncSync3(directoryFd);
+    } finally {
+      closeSync4(directoryFd);
+    }
+  } catch (error) {
+    if (fd !== undefined)
+      closeSync4(fd);
+    if (existsSync26(temporaryPath))
+      unlinkSync19(temporaryPath);
+    throw error;
   }
-  return bindOtiumTopic(options);
 }
-function setOtiumTopicPrivate(options) {
-  const owned = ownsTopic(options.localTopicId, options.userId);
-  if (!owned.ok)
-    return owned;
-  const removedBindings = unbindSharedPeerSessionsForLocalTopic(options.localTopicId);
-  if (isTopicShared(owned.topic)) {
-    upsertTopic({ ...owned.topic, accessMode: "private" });
+function recordClaimedCredential(pending2, join32) {
+  withJoinCredentialLock(() => {
+    const current3 = JSON.parse(readFileSync21(pendingEnrollmentPath(), "utf8"));
+    if (current3.central !== pending2.central || current3.token !== pending2.token || current3.idempotencyKey !== pending2.idempotencyKey || current3.publicKey !== pending2.publicKey) {
+      throw new Error("pending Otium enrollment changed while its claim was in flight");
+    }
+    const claimed = { digest: joinCredentialDigest(join32), cellId: join32.cellId };
+    if (current3.claimed && (current3.claimed.digest !== claimed.digest || current3.claimed.cellId !== claimed.cellId)) {
+      throw new Error("central returned different credentials for an idempotent enrollment claim");
+    }
+    replacePendingEnrollment({ ...current3, claimed });
+  });
+}
+function openCredential(envelope, privateKeyDer) {
+  if (envelope.v !== 1 || envelope.algorithm !== "X25519-HKDF-SHA256-AES-256-GCM") {
+    throw new Error("unsupported enrollment credential envelope");
   }
-  return { ok: true, localTopicId: options.localTopicId, removedBindings };
+  const privateKey = createPrivateKey({
+    key: Buffer.from(privateKeyDer, "base64url"),
+    format: "der",
+    type: "pkcs8"
+  });
+  const ephemeral = createPublicKey({
+    key: Buffer.from(envelope.ephemeralPublicKey, "base64url"),
+    format: "der",
+    type: "spki"
+  });
+  const shared = diffieHellman({ privateKey, publicKey: ephemeral });
+  const key = Buffer.from(hkdfSync("sha256", shared, Buffer.from(envelope.salt, "base64url"), INFO, 32));
+  const decipher = createDecipheriv2("aes-256-gcm", key, Buffer.from(envelope.nonce, "base64url"));
+  decipher.setAAD(INFO);
+  decipher.setAuthTag(Buffer.from(envelope.tag, "base64url"));
+  return Buffer.concat([
+    decipher.update(Buffer.from(envelope.ciphertext, "base64url")),
+    decipher.final()
+  ]).toString("utf8");
 }
-function unbindOtiumTopic(hostNodeId, hostTopicId) {
-  return unbindPeerSession(hostNodeId, hostTopicId);
+async function postJson(url, body, headers) {
+  const response = await fetch(url, {
+    method: "POST",
+    headers: { "content-type": "application/json", ...headers },
+    body: JSON.stringify(body)
+  });
+  const result = await response.json();
+  if (!response.ok)
+    throw new Error(String(result.error || `request failed (${response.status})`));
+  return result;
 }
-function listOtiumTopicBindings() {
-  return listPeerSessions().map((row) => {
-    const topic = getTopic(row.local_topic_id);
-    return {
-      hostNodeId: row.host_node_id,
-      hostTopicId: row.host_topic_id,
-      localTopicId: row.local_topic_id,
-      transport: row.binding_mode === "shared" ? "shared-binding" : "internal-mirror",
-      ...topic ? { topicAccessMode: topic.accessMode ?? "private" } : {},
-      ...topic ? { localTopicTitle: topic.title } : {},
-      localTopicExists: Boolean(topic),
-      createdAt: row.created_at
-    };
+async function previewEnrollment(invite) {
+  return postJson(`${invite.central}/api/v1/node-enrollments/preview`, {
+    token: invite.token
   });
 }
-var init_bindings = __esm(async () => {
+async function claimEnrollment(invite, nodeName) {
+  const pending2 = loadOrCreatePending(invite, nodeName);
+  const response = await postJson(`${invite.central}/api/v1/node-enrollments/claim`, {
+    token: invite.token,
+    credentialPublicKey: pending2.publicKey,
+    ...pending2.nodeName ? { nodeName: pending2.nodeName } : {}
+  }, { "idempotency-key": pending2.idempotencyKey });
+  const credential = response.credential;
+  const secret = openCredential(credential, pending2.privateKey);
+  if (!secret.startsWith("rcs_"))
+    throw new Error("central returned an invalid runtime credential");
+  const join32 = {
+    v: 2,
+    central: invite.central,
+    relay: String(response.relayUrl),
+    cellId: String(response.cell?.id),
+    secret
+  };
+  if (!join32.relay || !join32.cellId || join32.cellId === "undefined") {
+    throw new Error("central returned an incomplete enrollment response");
+  }
+  assertSecureRelayUrl(join32.relay);
+  recordClaimedCredential(pending2, join32);
+  return join32;
+}
+function commitEnrollment(join32, options = {}) {
+  return withJoinCredentialLock(() => {
+    const pendingPath = pendingEnrollmentPath();
+    const pending2 = existsSync26(pendingPath) ? JSON.parse(readFileSync21(pendingPath, "utf8")) : null;
+    const digest = joinCredentialDigest(join32);
+    if (pending2 && (!pending2.claimed || pending2.claimed.digest !== digest || pending2.claimed.cellId !== join32.cellId)) {
+      throw new Error(`pending Otium enrollment at ${pendingPath} does not match these credentials`);
+    }
+    const path = saveJoinWhileLocked(join32, options);
+    if (!isJoinPersisted(join32)) {
+      throw new Error("Otium join credentials were not durably persisted");
+    }
+    if (!pending2)
+      return path;
+    unlinkSync19(pendingPath);
+    const directoryFd = openSync4(dirname18(pendingPath), "r");
+    try {
+      fsyncSync3(directoryFd);
+    } finally {
+      closeSync4(directoryFd);
+    }
+    return path;
+  });
+}
+var INFO;
+var init_enrollment = __esm(async () => {
   await init_src();
-  await init_store2();
+  await init_join();
+  INFO = Buffer.from("otium-node-enrollment-v1", "utf8");
 });
 
 // ../../adapters/otium/src/turn-bridge.ts
@@ -29471,8 +29961,8 @@ function provisionMirrorTopic(hostCellId, payload) {
     defaultModel: nextModel,
     defaultEffort: EFFORT_LEVELS.includes(execution.effort) ? execution.effort : current3?.defaultEffort ?? "medium",
     participants: [{ userId: payload.userId, role: "owner" }],
-    isSubagent: true,
-    visibility: "hidden",
+    isSubagent: undefined,
+    visibility: "visible",
     accessMode: "shared",
     ...execution.description ? { description: execution.description } : {},
     createdAt: current3?.createdAt ?? now,
@@ -29550,6 +30040,8 @@ function runPeerTurn(hubNode, hostCellId, payload, opts = {}) {
         origin: "user",
         requestId: payload.requestId,
         injectAuthorId: payload.userId,
+        injectSourceNode: hostCellId,
+        ...payload.sourceMessageId ? { injectSourceMessageId: payload.sourceMessageId } : {},
         attachments: payload.attachments,
         visualTools: true,
         fileDeliveryTools: true,
@@ -29736,7 +30228,7 @@ async function handleProvision(req) {
   });
   if (!result.ok)
     return jsonError2(result.error, result.status);
-  logger.info({ hostTopicId, localTopicId: result.localTopicId, fromNode: peer.verified.fromNodeName }, "otium: hidden mirror room provisioned");
+  logger.info({ hostTopicId, localTopicId: result.localTopicId, fromNode: peer.verified.fromNodeName }, "otium: mirror room provisioned");
   return Response.json({ ok: true });
 }
 async function handleBind(req) {
@@ -29768,6 +30260,50 @@ async function handleBind(req) {
     return jsonError2(result.error, result.status);
   return Response.json({ ok: true, localTopicId: result.localTopicId, replaced: result.replaced });
 }
+async function handleSharedTopicMessages(req) {
+  const peer = await requirePeer(req);
+  if (!peer.ok)
+    return peer.response;
+  const originError = requirePrimaryOrigin(peer);
+  if (originError)
+    return originError;
+  const body = await readBody(req);
+  if (!body)
+    return jsonError2("invalid JSON body", 400);
+  const protocolError = checkProtocol(body);
+  if (protocolError)
+    return protocolError;
+  const localTopicId = str2(body, "localTopicId");
+  const hostTopicId = str2(body, "hostTopicId");
+  const messages = body.messages;
+  if (!localTopicId || !hostTopicId || !Array.isArray(messages)) {
+    return jsonError2("localTopicId, hostTopicId and messages are required", 400);
+  }
+  const session = getPeerSession(peer.verified.fromCellId, hostTopicId);
+  if (!session || session.local_topic_id !== localTopicId) {
+    return jsonError2("shared topic binding not found", 404);
+  }
+  const accepted = acceptSharedTopicMessages(messages, localTopicId, peer.verified.fromCellId);
+  return Response.json({ ok: true, accepted });
+}
+async function handleSharedTopicsPrivate(req) {
+  const peer = await requirePeer(req);
+  if (!peer.ok)
+    return peer.response;
+  const originError = requirePrimaryOrigin(peer);
+  if (originError)
+    return originError;
+  const body = await readBody(req);
+  if (!body)
+    return jsonError2("invalid JSON body", 400);
+  const protocolError = checkProtocol(body);
+  if (protocolError)
+    return protocolError;
+  if (body.reason !== "hub-removal")
+    return jsonError2("reason must be hub-removal", 400);
+  const updated = downgradeSharedTopicsForHub(peer.verified.fromCellId);
+  return Response.json({ ok: true, updated });
+}
 async function handleUnbind(req) {
   const peer = await requirePeer(req);
   if (!peer.ok)
@@ -29829,6 +30365,7 @@ async function handleTurn(req) {
     ...str2(body, "model") ? { model: str2(body, "model") } : {},
     ...str2(body, "effort") ? { effort: str2(body, "effort") } : {},
     ...Array.isArray(body.attachments) && body.attachments.every((entry) => typeof entry === "string") ? { attachments: body.attachments } : {},
+    ...str2(body, "sourceMessageId") ? { sourceMessageId: str2(body, "sourceMessageId") } : {},
     message
   };
   const result = runPeerTurn(hubNode, peer.verified.fromCellId, payload);
@@ -30182,6 +30719,10 @@ async function handleOtiumPeerRequest(req) {
       return handleProvision(req);
     case "/api/v1/peer/bind":
       return handleBind(req);
+    case "/api/v1/peer/shared-topic/messages":
+      return handleSharedTopicMessages(req);
+    case "/api/v1/peer/shared-topics/private":
+      return handleSharedTopicsPrivate(req);
     case "/api/v1/peer/unbind":
       return handleUnbind(req);
     case "/api/v1/peer/turn":
@@ -30210,62 +30751,16 @@ var init_peer_server = __esm(async () => {
   await init_bindings();
   await init_central();
   await init_peer_files();
-  init_protocol();
-  await init_session_bridge();
-  await init_store2();
-  await init_turn_bridge();
-  RUNTIME_VERSION = NEGOTIUM_VERSION;
-});
-
-// ../../adapters/otium/src/index.ts
-var exports_src5 = {};
-__export(exports_src5, {
-  verifyPeerToken: () => verifyPeerToken,
-  unbindOtiumTopic: () => unbindOtiumTopic,
-  translateBusEvent: () => translateBusEvent,
-  stopEventBackflow: () => stopEventBackflow,
-  startOtiumWorker: () => startOtiumWorker,
-  startOtiumAdapter: () => startOtiumAdapter,
-  startEventBackflow: () => startEventBackflow,
-  shareOtiumTopic: () => shareOtiumTopic,
-  setOtiumTopicPrivate: () => setOtiumTopicPrivate,
-  selfPeerNode: () => selfPeerNode,
-  saveJoin: () => saveJoin,
-  runPeerTurn: () => runPeerTurn,
-  resolvePeerNodeByCellId: () => resolvePeerNodeByCellId,
-  resetPeerCentralCaches: () => resetPeerCentralCaches,
-  registerTurnForwarder: () => registerTurnForwarder,
-  provisionMirrorTopic: () => provisionMirrorTopic,
-  previewEnrollment: () => previewEnrollment,
-  pendingEnrollmentPath: () => pendingEnrollmentPath,
-  parseInviteCode: () => parseInviteCode,
-  parseEnrollmentInvite: () => parseEnrollmentInvite,
-  otiumPeerRuntimeBridge: () => otiumPeerRuntimeBridge,
-  otiumCentralConfig: () => otiumCentralConfig,
-  otiumAdapter: () => otiumAdapter,
-  mintPeerToken: () => mintPeerToken,
-  loadJoin: () => loadJoin,
-  listPeerNodes: () => listPeerNodes,
-  listOtiumTopicBindings: () => listOtiumTopicBindings,
-  joinFilePath: () => joinFilePath,
-  isJoinPersisted: () => isJoinPersisted,
-  isEnrollmentPending: () => isEnrollmentPending,
-  hubEventSender: () => hubEventSender,
-  handleOtiumPeerRequest: () => handleOtiumPeerRequest,
-  getActiveForwarder: () => getActiveForwarder,
-  failInterruptedPeerTurnRequestsOnStartup: () => failInterruptedPeerTurnRequestsOnStartup,
-  createTurnForwarder: () => createTurnForwarder,
-  configureOtiumCentral: () => configureOtiumCentral,
-  commitEnrollment: () => commitEnrollment,
-  cleanupPeerStateForLocalTopic: () => cleanupPeerStateForLocalTopic,
-  claimEnrollment: () => claimEnrollment,
-  bindOtiumTopic: () => bindOtiumTopic,
-  abortHostedPeerTurn: () => abortHostedPeerTurn,
-  TunnelClient: () => TunnelClient,
-  RELAY_PROTOCOL_VERSION: () => PROTOCOL_VERSION,
-  PEER_PROTOCOL_VERSION: () => PEER_PROTOCOL_VERSION
+  init_protocol();
+  await init_session_bridge();
+  await init_shared_topic_sync();
+  await init_store2();
+  await init_turn_bridge();
+  RUNTIME_VERSION = NEGOTIUM_VERSION;
 });
-function startOtiumAdapter(options) {
+
+// ../../adapters/otium/src/index.ts
+function startOtiumNodeRuntime(options) {
   const { join: join32 } = options;
   configureOtiumCentral(join32);
   const failed = failInterruptedPeerTurnRequestsOnStartup();
@@ -30273,6 +30768,7 @@ function startOtiumAdapter(options) {
     logger.warn({ failed }, "otium: failed interrupted peer turns from previous process");
   }
   const stopBackflow = startEventBackflow();
+  const stopSharedTopicSync = startSharedTopicSync(join32);
   const unregisterRuntimeBridge = registerPeerRuntimeBridge(otiumPeerRuntimeBridge);
   const unregisterSessionBridge = registerPeerSessionBridge(otiumPeerSessionBridge);
   const sessionBridgeIpc = startPeerSessionBridgeIpc(otiumPeerSessionBridge);
@@ -30293,7 +30789,6 @@ function startOtiumAdapter(options) {
     }
   });
   let stopped = false;
-  let tunnel = null;
   logger.info({ central: join32.central, cellId: join32.cellId }, "otium: worker mode enabled");
   selfPeerNode().then((self) => {
     if (self) {
@@ -30305,17 +30800,41 @@ function startOtiumAdapter(options) {
   return {
     name: "otium",
     join: join32,
+    stop: () => {
+      if (stopped)
+        return;
+      stopped = true;
+      unsubscribeTopicCleanup();
+      unregisterRuntimeBridge();
+      unregisterSessionBridge();
+      sessionBridgeIpc.stop();
+      canonicalMcpBridge.stop();
+      stopPeerReplyOutbox();
+      uninstallFileHooks();
+      stopBackflow();
+      stopSharedTopicSync();
+      configureOtiumCentral(null);
+    }
+  };
+}
+function startOtiumAdapter(options) {
+  const runtime = startOtiumNodeRuntime(options);
+  let tunnel = null;
+  let stopped = false;
+  return {
+    name: "otium",
+    join: runtime.join,
     startTunnel: ({ targetOrigin, relayUrl }) => {
       if (stopped || tunnel)
         return;
-      const selectedRelay = relayUrl?.trim() || join32.relay || process.env.OTIUM_RELAY_URL?.trim();
+      const selectedRelay = relayUrl?.trim() || runtime.join.relay || process.env.OTIUM_RELAY_URL?.trim();
       if (!selectedRelay) {
         logger.info({}, "otium: relay tunnel disabled (no relay URL configured)");
         return;
       }
       tunnel = new TunnelClient({
         relayUrl: selectedRelay,
-        token: join32.secret,
+        token: runtime.join.secret,
         targetOrigin,
         nodeVersion: `negotium@${NEGOTIUM_VERSION}`,
         logger
@@ -30328,24 +30847,10 @@ function startOtiumAdapter(options) {
       stopped = true;
       tunnel?.stop();
       tunnel = null;
-      unsubscribeTopicCleanup();
-      unregisterRuntimeBridge();
-      unregisterSessionBridge();
-      sessionBridgeIpc.stop();
-      canonicalMcpBridge.stop();
-      stopPeerReplyOutbox();
-      uninstallFileHooks();
-      stopBackflow();
-      configureOtiumCentral(null);
+      runtime.stop();
     }
   };
 }
-function startOtiumWorker() {
-  const join32 = loadJoin();
-  if (!join32)
-    return null;
-  return startOtiumAdapter({ join: join32 });
-}
 var otiumAdapter;
 var init_src8 = __esm(async () => {
   await init_src();
@@ -30357,6 +30862,7 @@ var init_src8 = __esm(async () => {
   await init_runtime_bridge();
   await init_session_bridge();
   init_session_bridge_ipc();
+  await init_shared_topic_sync();
   await init_store2();
   init_tunnel_client();
   await init_bindings();
@@ -30368,6 +30874,7 @@ var init_src8 = __esm(async () => {
   init_protocol();
   init_relay_protocol();
   await init_runtime_bridge();
+  await init_shared_topic_sync();
   await init_store2();
   init_tunnel_client();
   await init_turn_bridge();
@@ -30387,6 +30894,245 @@ var init_src8 = __esm(async () => {
   });
 });
 
+// ../../adapters/otium/src/node-runtime.ts
+var exports_node_runtime = {};
+__export(exports_node_runtime, {
+  mountConfiguredOtiumNodeRuntime: () => mountConfiguredOtiumNodeRuntime,
+  handleOtiumAdapterControlRequest: () => handleOtiumAdapterControlRequest,
+  OTIUM_ADAPTER_CONTROL_PREFIX: () => OTIUM_ADAPTER_CONTROL_PREFIX,
+  OTIUM_ADAPTER_CONTROL_HEADER: () => OTIUM_ADAPTER_CONTROL_HEADER,
+  MAX_PEER_INPUT_REQUEST_BYTES: () => MAX_PEER_INPUT_REQUEST_BYTES
+});
+async function handleOtiumAdapterControlRequest(req) {
+  const url = new URL(req.url);
+  if (!url.pathname.startsWith(`${OTIUM_ADAPTER_CONTROL_PREFIX}/`))
+    return null;
+  if (req.headers.get(OTIUM_ADAPTER_CONTROL_HEADER) !== NODE_CONTROL_TOKEN) {
+    return Response.json({ ok: false, error: "Unauthorized" }, { status: 401 });
+  }
+  const peerPath = url.pathname.slice(OTIUM_ADAPTER_CONTROL_PREFIX.length) || "/";
+  const peerUrl = new URL(req.url);
+  peerUrl.pathname = peerPath;
+  const headers = new Headers(req.headers);
+  headers.delete(OTIUM_ADAPTER_CONTROL_HEADER);
+  const body = req.method === "GET" || req.method === "HEAD" ? undefined : await req.arrayBuffer();
+  return await handleOtiumPeerRequest(new Request(peerUrl.toString(), { method: req.method, headers, body, signal: req.signal })) ?? Response.json({ ok: false, error: "Otium route not found" }, { status: 404 });
+}
+function mountConfiguredOtiumNodeRuntime() {
+  const join32 = loadJoin();
+  if (!join32)
+    return null;
+  const runtime = startOtiumNodeRuntime({ join: join32 });
+  registerNodeRequestHandler("otium-adapter-control", handleOtiumAdapterControlRequest);
+  let stopped = false;
+  return {
+    ...runtime,
+    stop() {
+      if (stopped)
+        return;
+      stopped = true;
+      unregisterNodeRequestHandler("otium-adapter-control");
+      runtime.stop();
+    }
+  };
+}
+var init_node_runtime = __esm(async () => {
+  await init_src();
+  await init_src8();
+  await init_join();
+  await init_peer_server();
+  init_protocol();
+});
+
+// ../../adapters/otium/src/join-cli.ts
+var exports_join_cli = {};
+__export(exports_join_cli, {
+  joinCommand: () => joinCommand
+});
+function option2(args, name) {
+  const index = args.indexOf(`--${name}`);
+  return index >= 0 ? args[index + 1]?.trim() : undefined;
+}
+async function confirmEnrollment(message) {
+  if (!process.stdin.isTTY)
+    return false;
+  const { createInterface } = await import("readline/promises");
+  const prompt = createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    return /^(?:y|yes)$/i.test((await prompt.question(`${message} [y/N] `)).trim());
+  } finally {
+    prompt.close();
+  }
+}
+async function joinCommand(args) {
+  const code = args[0]?.trim();
+  if (!code) {
+    console.error("usage: negotium-otium join <invite-code> [--yes] [--name <node-name>] [--legacy] [--replace]");
+    process.exitCode = 1;
+    return;
+  }
+  let join32;
+  let productionEnrollment = false;
+  if (args.includes("--legacy")) {
+    try {
+      join32 = parseInviteCode(code);
+    } catch (err2) {
+      console.error(`invalid legacy invite code: ${err2 instanceof Error ? err2.message : err2}`);
+      process.exitCode = 1;
+      return;
+    }
+  } else {
+    try {
+      const invite = parseEnrollmentInvite(code);
+      const resuming = isEnrollmentPending(invite);
+      let nodeName = option2(args, "name");
+      if (resuming) {
+        console.log(`Resuming interrupted Otium enrollment with ${invite.central}`);
+      } else {
+        const preview = await previewEnrollment(invite);
+        const workspace = preview.preview?.workspace;
+        nodeName ||= preview.preview?.suggestedNodeName || undefined;
+        console.log(`Otium workspace: ${workspace?.name ?? workspace?.slug ?? workspace?.id}`);
+        console.log(`  central:   ${invite.central}`);
+        console.log(`  transport: ${preview.preview?.transport ?? "relay"}`);
+        console.log(`  access:    ${preview.preview?.topics ?? "explicitly shared topics only"}`);
+        const accepted = args.includes("--yes") || await confirmEnrollment("Join this workspace?");
+        if (!accepted) {
+          console.log("enrollment cancelled");
+          return;
+        }
+      }
+      join32 = await claimEnrollment(invite, nodeName);
+      productionEnrollment = true;
+    } catch (err2) {
+      console.error(`enrollment failed: ${err2 instanceof Error ? err2.message : err2}`);
+      process.exitCode = 1;
+      return;
+    }
+  }
+  let path;
+  try {
+    const saveOptions = { replaceExisting: args.includes("--replace") };
+    path = productionEnrollment ? commitEnrollment(join32, saveOptions) : saveJoin(join32, saveOptions);
+  } catch (err2) {
+    console.error(`could not save join credentials: ${err2 instanceof Error ? err2.message : err2}`);
+    process.exitCode = 1;
+    return;
+  }
+  console.log(`otium join credentials saved to ${path}`);
+  console.log(`  central: ${join32.central}`);
+  console.log(`  cellId:  ${join32.cellId}`);
+  configureOtiumCentral(join32);
+  try {
+    const self = await selfPeerNode();
+    if (self) {
+      console.log(`attached to workspace as "${self.nodeName ?? self.cellId}" (baseUrl ${self.baseUrl})`);
+    } else {
+      console.warn("warning: central answered but this cell has no visible assignment yet \u2014 check the workspace assignment");
+    }
+  } catch (err2) {
+    console.warn(`warning: could not verify against central (${err2 instanceof Error ? err2.message : err2}) \u2014 credentials saved anyway`);
+  } finally {
+    configureOtiumCentral(null);
+  }
+  console.log("\nnext: `negotium-otium serve` (mounts the otium peer routes automatically)");
+}
+var init_join_cli = __esm(async () => {
+  await init_central();
+  await init_enrollment();
+  await init_join();
+});
+
+// ../../adapters/otium/src/sidecar.ts
+var exports_sidecar = {};
+__export(exports_sidecar, {
+  runOtiumSidecar: () => runOtiumSidecar,
+  proxyOtiumPeerRequest: () => proxyOtiumPeerRequest
+});
+async function proxyOtiumPeerRequest(req, dependencies = {}) {
+  const inspectNode = dependencies.inspectNode ?? inspectNodeDaemon;
+  const fetchRequest = dependencies.fetch ?? fetch;
+  const status = await inspectNode();
+  if (!status.running || !status.info) {
+    return Response.json({ ok: false, error: "canonical Negotium node is unavailable" }, { status: 503 });
+  }
+  const source = new URL(req.url);
+  const target = new URL(`http://127.0.0.1:${status.info.port}`);
+  target.pathname = `${OTIUM_ADAPTER_CONTROL_PREFIX}${source.pathname}`;
+  target.search = source.search;
+  const headers = new Headers(req.headers);
+  headers.set(OTIUM_ADAPTER_CONTROL_HEADER, NODE_CONTROL_TOKEN);
+  try {
+    const body = req.method === "GET" || req.method === "HEAD" ? undefined : await req.arrayBuffer();
+    return await fetchRequest(new Request(target.toString(), { method: req.method, headers, body, signal: req.signal }));
+  } catch (error) {
+    logger.warn({ err: error }, "otium sidecar: canonical node request failed");
+    return Response.json({ ok: false, error: "canonical Negotium node connection failed" }, { status: 503 });
+  }
+}
+async function runOtiumSidecar(options) {
+  const join32 = loadJoin();
+  if (!join32) {
+    throw new Error("not joined to an Otium workspace \u2014 run `negotium otium join <code>` first");
+  }
+  const initialNode = await inspectNodeDaemon();
+  if (!initialNode.running) {
+    throw new Error("canonical Negotium node is not running");
+  }
+  const ready = await proxyOtiumPeerRequest(new Request("http://127.0.0.1/ready"));
+  if (!ready.ok) {
+    throw new Error("canonical Negotium node has no Otium runtime; restart it after joining the workspace");
+  }
+  let server;
+  const lease = await waitForRequiredRuntimeProcessLease("adapter:otium", {
+    workloadName: "Otium adapter",
+    onLost: () => {
+      process.stderr.write(`negotium otium: singleton lease lost; shutting down
+`);
+      runShutdown("test");
+    }
+  });
+  try {
+    server = Bun.serve({
+      port: options.port,
+      hostname: "127.0.0.1",
+      idleTimeout: 240,
+      maxRequestBodySize: MAX_PEER_INPUT_REQUEST_BYTES,
+      fetch: (req) => proxyOtiumPeerRequest(req)
+    });
+  } catch (error) {
+    lease.stop();
+    throw error;
+  }
+  const selectedRelay = options.relayUrl?.trim() || join32.relay || process.env.OTIUM_RELAY_URL?.trim();
+  const tunnel = selectedRelay ? new TunnelClient({
+    relayUrl: selectedRelay,
+    token: join32.secret,
+    targetOrigin: `http://127.0.0.1:${server.port}`,
+    nodeVersion: `negotium@${NEGOTIUM_VERSION}`,
+    logger
+  }) : null;
+  tunnel?.start();
+  let resolveCompleted;
+  const completed = new Promise((resolve15) => {
+    resolveCompleted = resolve15;
+  });
+  onShutdown("otium-sidecar-server", 130, () => server?.stop(true));
+  onShutdown("otium-sidecar-tunnel", 120, () => tunnel?.stop());
+  onShutdown("otium-sidecar-lease", 110, () => lease.stop());
+  onShutdown("otium-sidecar-completed", -100, resolveCompleted);
+  process.stdout.write(`negotium Otium adapter listening on 127.0.0.1:${server.port} (canonical node pid ${initialNode.info?.pid})
+`);
+  await completed;
+}
+var init_sidecar = __esm(async () => {
+  await init_src();
+  await init_src5();
+  await init_join();
+  init_protocol();
+  init_tunnel_client();
+});
+
 // ../../adapters/otium/src/cli.ts
 var exports_cli3 = {};
 __export(exports_cli3, {
@@ -30464,66 +31210,80 @@ async function resolveHostNodeId(explicit) {
     configureOtiumCentral2(null);
   }
 }
+async function spawnCanonicalNode2() {
+  const entry = process.argv[1];
+  if (!entry)
+    throw new Error("cannot locate the Negotium CLI entrypoint");
+  const { LOG_DIR: LOG_DIR2 } = await init_src().then(() => exports_src);
+  const child = Bun.spawn({
+    cmd: [process.execPath, entry, "__node-daemon", "--port=0"],
+    detached: true,
+    env: { ...process.env, LOG_LEVEL: process.env.NEGOTIUM_NODE_LOG_LEVEL?.trim() || "info" },
+    stdin: "ignore",
+    stdout: "ignore",
+    stderr: Bun.file(`${LOG_DIR2}/node-daemon.log`)
+  });
+  child.unref();
+}
+async function ensureCanonicalNode2() {
+  const { inspectNodeDaemon: inspectNodeDaemon2, waitForNodeDaemon: waitForNodeDaemon2 } = await init_src5().then(() => exports_src3);
+  const status = await inspectNodeDaemon2();
+  if (status.running)
+    return;
+  await spawnCanonicalNode2();
+  await waitForNodeDaemon2(15000);
+}
+async function runCanonicalNodeChild2() {
+  const { onShutdown: onShutdown2 } = await init_src().then(() => exports_src);
+  const { MAX_PEER_INPUT_REQUEST_BYTES: MAX_PEER_INPUT_REQUEST_BYTES2, mountConfiguredOtiumNodeRuntime: mountConfiguredOtiumNodeRuntime2 } = await init_node_runtime().then(() => exports_node_runtime);
+  const { runNodeDaemon: runNodeDaemon2 } = await init_src5().then(() => exports_src3);
+  const runtime = mountConfiguredOtiumNodeRuntime2();
+  if (runtime)
+    onShutdown2("otium-node-runtime", 125, () => runtime.stop());
+  await runNodeDaemon2({ port: 0, maxRequestBodySize: MAX_PEER_INPUT_REQUEST_BYTES2 });
+}
 async function runOtiumCli(args = process.argv.slice(2)) {
   const [command, ...commandArgs] = args;
   switch (command) {
+    case "__node-daemon": {
+      await runCanonicalNodeChild2();
+      break;
+    }
     case "join": {
       const { joinCommand: joinCommand2 } = await init_join_cli().then(() => exports_join_cli);
       await joinCommand2(commandArgs);
       break;
     }
+    case "leave":
+    case "disconnect": {
+      if (commandArgs.length > 0)
+        throw new Error(`usage: negotium otium ${command}`);
+      if (process.env.OTIUM_CENTRAL_URL || process.env.OTIUM_CELL_ID || process.env.OTIUM_CELL_SECRET) {
+        throw new Error("Otium join is configured by environment; remove OTIUM_CENTRAL_URL, OTIUM_CELL_ID, and OTIUM_CELL_SECRET to disconnect");
+      }
+      const { configureOtiumCentral: configureOtiumCentral2 } = await init_central().then(() => exports_central);
+      const { loadJoin: loadJoin2, removeJoin: removeJoin2 } = await init_join().then(() => exports_join);
+      const { disconnectSharedTopics: disconnectSharedTopics2 } = await init_shared_topic_sync().then(() => exports_shared_topic_sync);
+      const join32 = loadJoin2();
+      if (!join32)
+        throw new Error("not joined to an Otium workspace");
+      configureOtiumCentral2(join32);
+      try {
+        await disconnectSharedTopics2(join32);
+        removeJoin2();
+      } finally {
+        configureOtiumCentral2(null);
+      }
+      console.log("disconnected from Otium; local shared topics are now private");
+      break;
+    }
     case "serve": {
-      const {
-        NEGOTIUM_PORT: NEGOTIUM_PORT2,
-        onShutdown: onShutdown2,
-        registerNodeRequestHandler: registerNodeRequestHandler2,
-        unregisterNodeRequestHandler: unregisterNodeRequestHandler2,
-        waitForRequiredRuntimeProcessLease: waitForRequiredRuntimeProcessLease2
-      } = await init_src().then(() => exports_src);
-      const [{ startDefaultNode: startDefaultNode2 }, otium] = await Promise.all([
-        init_src5().then(() => exports_src3),
-        init_src8().then(() => exports_src5)
-      ]);
+      const { NEGOTIUM_PORT: NEGOTIUM_PORT2 } = await init_src().then(() => exports_src);
+      const { runOtiumSidecar: runOtiumSidecar2 } = await init_sidecar().then(() => exports_sidecar);
       const port = parseOtiumServePort(commandArgs, NEGOTIUM_PORT2);
       const relayUrl = parseOtiumServeRelayUrl(commandArgs);
-      let node;
-      const singleton = await waitForRequiredRuntimeProcessLease2("adapter:otium", {
-        workloadName: "Otium adapter",
-        onLost: () => {
-          console.error("negotium otium: singleton lease lost; shutting down");
-          node?.stop();
-        }
-      });
-      const { handleOtiumPeerRequest: handleOtiumPeerRequest2, startOtiumWorker: startOtiumWorker2 } = otium;
-      const worker = startOtiumWorker2();
-      if (!worker) {
-        singleton.stop();
-        throw new Error("not joined to an otium workspace \u2014 run `negotium otium join <code>` first");
-      }
-      registerNodeRequestHandler2("otium-peer", handleOtiumPeerRequest2);
-      let workerStopped = false;
-      const stopWorker = () => {
-        if (workerStopped)
-          return;
-        workerStopped = true;
-        unregisterNodeRequestHandler2("otium-peer");
-        worker.stop();
-      };
-      onShutdown2("otium-worker", 100, stopWorker);
-      onShutdown2("otium-singleton", 90, () => singleton.stop());
-      try {
-        node = await startDefaultNode2({
-          port,
-          maxRequestBodySize: MAX_PEER_INPUT_REQUEST_BYTES
-        });
-      } catch (error) {
-        stopWorker();
-        singleton.stop();
-        throw error;
-      }
-      console.log(`negotium node (otium worker) listening on 127.0.0.1:${node.port} (ctrl-c to stop)`);
-      worker.startTunnel({ targetOrigin: `http://127.0.0.1:${node.port}`, relayUrl });
-      await node.completed;
+      await ensureCanonicalNode2();
+      await runOtiumSidecar2({ port, relayUrl });
       break;
     }
     case "bindings": {
@@ -30572,9 +31332,10 @@ async function runOtiumCli(args = process.argv.slice(2)) {
       console.log([
         "negotium otium \u2014 attach a Negotium node to an Otium workspace",
         "",
-        "usage: negotium otium <join|serve|bindings|share|private> [args]",
+        "usage: negotium otium <join|leave|serve|bindings|share|private> [args]",
         "",
         "  join <code>   store credentials from an Otium invite code",
+        "  leave         delete Hub copies, make local topics private, and remove credentials",
         "  serve [--port <port>] [--relay <url>]",
         "                 run peer routes and an outbound relay tunnel",
         "  bindings      list internal mirrors and shared topic bindings",
@@ -30590,7 +31351,6 @@ async function runOtiumCli(args = process.argv.slice(2)) {
   }
 }
 var init_cli3 = __esm(() => {
-  init_protocol();
   if (false) {}
 });
 
@@ -31304,6 +32064,36 @@ function numericOption(values, name, fallback) {
   const parsed = Number.parseInt(values.find((value) => value.startsWith(prefix))?.slice(prefix.length) ?? "", 10);
   return Number.isInteger(parsed) && parsed >= 0 ? parsed : fallback;
 }
+async function runCanonicalNode(port) {
+  const { onShutdown: onShutdown2 } = await init_src().then(() => exports_src);
+  const { MAX_PEER_INPUT_REQUEST_BYTES: MAX_PEER_INPUT_REQUEST_BYTES2, mountConfiguredOtiumNodeRuntime: mountConfiguredOtiumNodeRuntime2 } = await init_node_runtime().then(() => exports_node_runtime);
+  const { startDefaultNode: startDefaultNode2 } = await init_src5().then(() => exports_src3);
+  const otiumRuntime = mountConfiguredOtiumNodeRuntime2();
+  if (otiumRuntime)
+    onShutdown2("otium-node-runtime", 125, () => otiumRuntime.stop());
+  const node = await startDefaultNode2({
+    port,
+    advertise: true,
+    singleton: true,
+    maxRequestBodySize: MAX_PEER_INPUT_REQUEST_BYTES2
+  });
+  console.log(`negotium node listening on 127.0.0.1:${node.port} (ctrl-c to stop)`);
+  await node.completed;
+}
+async function stopAdapter(name) {
+  const { getRuntimeProcessLease: getRuntimeProcessLease2 } = await init_src().then(() => exports_src);
+  const lease = getRuntimeProcessLease2(`adapter:${name}`);
+  if (!lease)
+    return false;
+  try {
+    process.kill(lease.pid, "SIGTERM");
+    return true;
+  } catch (error) {
+    if (error.code === "ESRCH")
+      return false;
+    throw error;
+  }
+}
 switch (command) {
   case "init": {
     const { initCommand: initCommand2 } = await init_init().then(() => exports_init);
@@ -31316,22 +32106,20 @@ switch (command) {
     break;
   }
   case "serve": {
-    const { startDefaultNode: startDefaultNode2 } = await init_src5().then(() => exports_src3);
-    const node = await startDefaultNode2({
-      port: numericOption(args, "port", 7777),
-      advertise: true,
-      singleton: true
-    });
-    console.log(`negotium node listening on 127.0.0.1:${node.port} (ctrl-c to stop)`);
-    await node.completed;
+    if (args[0] === "otium") {
+      const { runOtiumCli: runOtiumCli2 } = await loadOtiumCli();
+      await runOtiumCli2(["serve", ...args.slice(1)]);
+      break;
+    }
+    await runCanonicalNode(numericOption(args, "port", 7777));
     break;
   }
   case "__node-daemon": {
-    const { runNodeDaemon: runNodeDaemon2 } = await init_src5().then(() => exports_src3);
-    await runNodeDaemon2({ port: numericOption(args, "port", 0) });
+    await runCanonicalNode(numericOption(args, "port", 0));
     break;
   }
   case "status": {
+    const { listRuntimeProcessLeases: listRuntimeProcessLeases2 } = await init_src().then(() => exports_src);
     const { inspectNodeDaemon: inspectNodeDaemon2 } = await init_src5().then(() => exports_src3);
     const status = await inspectNodeDaemon2();
     if (status.running && status.info) {
@@ -31342,10 +32130,33 @@ switch (command) {
     } else {
       console.log("negotium node is stopped");
     }
+    const adapters = listRuntimeProcessLeases2("adapter:");
+    if (adapters.length === 0)
+      console.log("adapters: none");
+    else {
+      for (const adapter of adapters) {
+        console.log(`adapter ${adapter.role.slice("adapter:".length)} running (pid ${adapter.pid}, since ${new Date(adapter.startedAt).toISOString()})`);
+      }
+    }
     break;
   }
   case "stop": {
     const { stopNodeDaemon: stopNodeDaemon2 } = await init_src5().then(() => exports_src3);
+    const target = args[0];
+    if (target === "otium" || target === "telegram") {
+      const stopped2 = await stopAdapter(target);
+      console.log(stopped2 ? `${target} adapter shutdown requested` : `${target} adapter is not running`);
+      break;
+    }
+    if (target && target !== "--all") {
+      throw new Error("usage: negotium stop [otium|telegram|--all]");
+    }
+    if (target === "--all") {
+      for (const name of ["otium", "telegram"]) {
+        if (await stopAdapter(name))
+          console.log(`${name} adapter shutdown requested`);
+      }
+    }
     const stopped = await stopNodeDaemon2();
     console.log(stopped ? "negotium node shutdown requested" : "negotium node is not running");
     break;
@@ -31377,11 +32188,14 @@ switch (command) {
   }
   case "telegram": {
     const { runTelegramCli: runTelegramCli2 } = await loadTelegramCli();
-    await runTelegramCli2();
+    await runTelegramCli2(args);
     break;
   }
   case "otium": {
     const { runOtiumCli: runOtiumCli2 } = await loadOtiumCli();
+    if (args[0] === "serve") {
+      process.stderr.write("warning: `negotium otium serve` is deprecated; use `negotium serve otium`\n");
+    }
     await runOtiumCli2(args);
     break;
   }
@@ -31400,9 +32214,10 @@ switch (command) {
       "  init            bootstrap ~/.negotium and check agent auth",
       "  chat [topic]    interactive chat (creates the topic if missing)",
       "                  options: --agent=claude|codex|maestro",
-      "  serve           foreground long-lived node (default port 7777)",
-      "  status          show the local long-lived node status",
-      "  stop            stop the local long-lived node",
+      "  serve           foreground canonical node (default port 7777)",
+      "  serve otium     ensure the canonical node and run the Otium sidecar",
+      "  status          show the canonical node and adapter processes",
+      "  stop [otium|telegram|--all]  stop the node, one adapter, or everything",
       "  topics          list topics on this node",
       "  mcp list|add|remove|enable|disable   manage node MCP manifest",
       "  vault list|set|get|del               node secret store (encrypted at rest)",
@@ -31420,4 +32235,4 @@ switch (command) {
   }
 }
 
-//# debugId=4DB206AEE32F96CD64756E2164756E21
+//# debugId=17956C13E9ACAD6764756E2164756E21