negotium 0.22.3 → 0.22.4

package/dist/mcp-factories.js

@@ -2457,6 +2457,9 @@ function initializeApiMessagesSchema() {
   try {
     db.exec("ALTER TABLE api_messages ADD COLUMN subagent_card TEXT");
   } catch {}
+  try {
+    db.exec("ALTER TABLE api_messages ADD COLUMN vault_secret_request TEXT");
+  } catch {}
   db.exec("CREATE INDEX IF NOT EXISTS idx_api_messages_topic ON api_messages(topic_id)");
   db.exec("CREATE INDEX IF NOT EXISTS idx_api_messages_thread_root ON api_messages(thread_root_id)");
 }
@@ -2493,6 +2496,7 @@ function rowToDto(r) {
     askUserQuestion: r.ask_user_question ? JSON.parse(r.ask_user_question) : undefined,
     tellCard: r.tell_card ? JSON.parse(r.tell_card) : undefined,
     subagentCard: r.subagent_card ? JSON.parse(r.subagent_card) : undefined,
+    vaultSecretRequest: r.vault_secret_request ? JSON.parse(r.vault_secret_request) : undefined,
     mentions: r.mentions ? JSON.parse(r.mentions) : undefined,
     threadRootId: r.thread_root_id ?? undefined,
     createdAt: r.created_at
@@ -2514,9 +2518,9 @@ function appendApiMessage(msg, options = {}) {
   let inserted = false;
   db.transaction(() => {
     const result = db.query(`INSERT INTO api_messages
-         (id, topic_id, parent_id, author_id, source_adapter, source_node, source_message_id, text, query_id, agent_type, model, attachments, usage, deleted, edited_at, reactions, kind, ask_user_question, tell_card, subagent_card, mentions, thread_root_id, created_at)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-       ON CONFLICT(id) DO NOTHING`).run(msg.id, msg.topicId, msg.parentId ?? null, msg.authorId, msg.sourceAdapter ?? null, msg.sourceNode ?? null, msg.sourceMessageId ?? null, msg.text, msg.queryId ?? null, msg.agentType ?? null, msg.model ?? null, msg.attachments ? JSON.stringify(msg.attachments) : null, msg.usage ? JSON.stringify(msg.usage) : null, msg.deleted ? 1 : 0, msg.editedAt ?? null, msg.reactions?.length ? JSON.stringify(msg.reactions) : null, msg.kind ?? null, msg.askUserQuestion ? JSON.stringify(msg.askUserQuestion) : null, msg.tellCard ? JSON.stringify(msg.tellCard) : null, msg.subagentCard ? JSON.stringify(msg.subagentCard) : null, msg.mentions?.length ? JSON.stringify(msg.mentions) : null, msg.threadRootId ?? null, msg.createdAt);
+         (id, topic_id, parent_id, author_id, source_adapter, source_node, source_message_id, text, query_id, agent_type, model, attachments, usage, deleted, edited_at, reactions, kind, ask_user_question, tell_card, subagent_card, vault_secret_request, mentions, thread_root_id, created_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+       ON CONFLICT(id) DO NOTHING`).run(msg.id, msg.topicId, msg.parentId ?? null, msg.authorId, msg.sourceAdapter ?? null, msg.sourceNode ?? null, msg.sourceMessageId ?? null, msg.text, msg.queryId ?? null, msg.agentType ?? null, msg.model ?? null, msg.attachments ? JSON.stringify(msg.attachments) : null, msg.usage ? JSON.stringify(msg.usage) : null, msg.deleted ? 1 : 0, msg.editedAt ?? null, msg.reactions?.length ? JSON.stringify(msg.reactions) : null, msg.kind ?? null, msg.askUserQuestion ? JSON.stringify(msg.askUserQuestion) : null, msg.tellCard ? JSON.stringify(msg.tellCard) : null, msg.subagentCard ? JSON.stringify(msg.subagentCard) : null, msg.vaultSecretRequest ? JSON.stringify(msg.vaultSecretRequest) : null, msg.mentions?.length ? JSON.stringify(msg.mentions) : null, msg.threadRootId ?? null, msg.createdAt);
     inserted = Number(result.changes ?? 0) > 0;
     if (inserted && updateTopicLastMessageAt && !msg.deleted) {
       db.query(`UPDATE api_topics
@@ -4573,6 +4577,16 @@ function vaultListDecryptableValues(userId) {
   }
   return entries;
 }
+function vaultSet(userId, key, value2, description = "") {
+  const normalizedKey = normalizeVaultKey(key);
+  activeVaultDatabase().prepare(`INSERT INTO vault (user_id, key, value, description) VALUES (?, ?, ?, ?)
+       ON CONFLICT (user_id, key) DO UPDATE
+         SET value = excluded.value, description = excluded.description`).run(userId, normalizedKey, encryptVaultValue(userId, normalizedKey, value2, vaultMasterKey), description);
+}
+function vaultHasKey(userId, key) {
+  const row = activeVaultDatabase().prepare("SELECT 1 FROM vault WHERE user_id = ? AND key = ?").get(userId, normalizeVaultKey(key));
+  return row != null;
+}
 function vaultGetValue(userId, key) {
   const normalizedKey = normalizeVaultKey(key);
   const row = activeVaultDatabase().prepare("SELECT key, value FROM vault WHERE user_id = ? AND key = ?").get(userId, normalizedKey);
@@ -4631,7 +4645,7 @@ function redactVaultSecrets(userId, text) {
   }
   return redacted;
 }
-var vaultDb, vaultMasterKey, VAULT_VALUE_MAX_BYTES;
+var vaultDb, vaultMasterKey, VAULT_KEY_PATTERN, VAULT_VALUE_MIN_BYTES = 4, VAULT_VALUE_MAX_BYTES, VAULT_DESCRIPTION_MAX_LENGTH = 500;
 var init_vault = __esm(async () => {
   init_config();
   init_vault_crypto();
@@ -4640,6 +4654,7 @@ var init_vault = __esm(async () => {
     init_storage_host()
   ]);
   vaultMasterKey = VAULT_MASTER_KEY;
+  VAULT_KEY_PATTERN = /^[A-Z][A-Z0-9_]{0,127}$/;
   VAULT_VALUE_MAX_BYTES = 64 * 1024;
 });
 
@@ -5253,7 +5268,7 @@ var init_codex = __esm(async () => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.22.3";
+var NEGOTIUM_VERSION = "0.22.4";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn2 } from "child_process";
@@ -18295,6 +18310,548 @@ var init_ask_user = __esm(async () => {
   });
 });
 
+// ../../packages/core/src/storage/vault-request-gates.ts
+function initializeVaultRequestGateSchema() {
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS vault_request_gates (
+      gate_id TEXT PRIMARY KEY,
+      topic_id TEXT NOT NULL REFERENCES api_topics(id) ON DELETE CASCADE,
+      query_id TEXT,
+      idempotency_key TEXT NOT NULL,
+      body_hash TEXT NOT NULL,
+      message_id TEXT NOT NULL UNIQUE,
+      owner_id TEXT NOT NULL,
+      state TEXT NOT NULL,
+      outcome TEXT,
+      answered_by TEXT,
+      claim_source TEXT,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS idx_vault_request_gates_idempotency
+      ON vault_request_gates(topic_id, idempotency_key, created_at);
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_vault_request_gates_active_key
+      ON vault_request_gates(topic_id, idempotency_key)
+      WHERE state IN ('pending', 'claimed');
+  `);
+}
+function fromRow2(row) {
+  return {
+    gateId: row.gate_id,
+    topicId: row.topic_id,
+    queryId: row.query_id ?? undefined,
+    idempotencyKey: row.idempotency_key,
+    bodyHash: row.body_hash,
+    messageId: row.message_id,
+    ownerId: row.owner_id,
+    state: row.state,
+    outcome: row.outcome ?? undefined,
+    answeredBy: row.answered_by ?? undefined
+  };
+}
+function latestGate2(topicId, idempotencyKey) {
+  const row = db.query(`SELECT * FROM vault_request_gates
+       WHERE topic_id = ? AND idempotency_key = ?
+       ORDER BY rowid DESC LIMIT 1`).get(topicId, idempotencyKey);
+  return row ? fromRow2(row) : null;
+}
+function expireVaultCard(topicId, messageId, editedAt) {
+  const row = db.query(`SELECT vault_secret_request FROM api_messages
+       WHERE topic_id = ? AND id = ? AND deleted = 0 AND kind = 'vault_secret_request'`).get(topicId, messageId);
+  if (!row?.vault_secret_request)
+    return null;
+  const request = JSON.parse(row.vault_secret_request);
+  if (request.status !== "pending")
+    return null;
+  const expired = { ...request, status: "expired" };
+  db.query(`UPDATE api_messages SET vault_secret_request = ?, edited_at = ?
+     WHERE topic_id = ? AND id = ? AND deleted = 0 AND kind = 'vault_secret_request'`).run(JSON.stringify(expired), editedAt, topicId, messageId);
+  return { topicId, messageId, vaultSecretRequest: expired, editedAt };
+}
+function prepareVaultRequestGate(args) {
+  return db.transaction(() => {
+    const latest = latestGate2(args.topicId, args.idempotencyKey);
+    if (latest?.bodyHash !== undefined && latest.bodyHash !== args.bodyHash) {
+      return { outcome: "conflict", gate: latest };
+    }
+    if (latest?.state === "answered")
+      return { outcome: "replay", gate: latest };
+    if (latest && (latest.state === "pending" || latest.state === "claimed")) {
+      return { outcome: "pending", gate: latest };
+    }
+    db.query(`INSERT INTO vault_request_gates
+       (gate_id, topic_id, query_id, idempotency_key, body_hash, message_id, owner_id, state, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, 'pending', ?, ?)`).run(args.gateId, args.topicId, args.queryId ?? null, args.idempotencyKey, args.bodyHash, args.messageId, args.ownerId, args.now, args.now);
+    return {
+      outcome: "created",
+      gate: {
+        gateId: args.gateId,
+        topicId: args.topicId,
+        queryId: args.queryId,
+        idempotencyKey: args.idempotencyKey,
+        bodyHash: args.bodyHash,
+        messageId: args.messageId,
+        ownerId: args.ownerId,
+        state: "pending"
+      }
+    };
+  }).immediate();
+}
+function quarantineVaultRequestGate(gateId, ownerId, now = new Date().toISOString()) {
+  return db.transaction(() => {
+    const row = db.query("SELECT * FROM vault_request_gates WHERE gate_id = ?").get(gateId);
+    if (!row || row.owner_id !== ownerId || !["pending", "claimed"].includes(row.state)) {
+      return null;
+    }
+    const result = db.query(`UPDATE vault_request_gates SET state = 'quarantined', updated_at = ?
+         WHERE gate_id = ? AND owner_id = ? AND state IN ('pending', 'claimed')`).run(now, gateId, ownerId);
+    if (Number(result.changes ?? 0) === 0)
+      return null;
+    return expireVaultCard(row.topic_id, row.message_id, now);
+  }).immediate();
+}
+function quarantineForeignVaultRequestGates(liveOwnerIds, now = new Date().toISOString()) {
+  return db.transaction(() => {
+    const rows = db.query(`SELECT * FROM vault_request_gates
+         WHERE state IN ('pending', 'claimed')`).all();
+    const updates = [];
+    for (const row of rows) {
+      if (liveOwnerIds.has(row.owner_id))
+        continue;
+      if (row.state === "claimed" && row.outcome && row.answered_by) {
+        db.query(`UPDATE vault_request_gates SET state = 'answered', updated_at = ?
+           WHERE gate_id = ? AND state = 'claimed'`).run(now, row.gate_id);
+        continue;
+      }
+      const result = db.query(`UPDATE vault_request_gates SET state = 'quarantined', updated_at = ?
+           WHERE gate_id = ? AND state IN ('pending', 'claimed')`).run(now, row.gate_id);
+      if (Number(result.changes ?? 0) === 0)
+        continue;
+      const update = expireVaultCard(row.topic_id, row.message_id, now);
+      if (update)
+        updates.push(update);
+    }
+    const legacyCards = db.query(`SELECT m.topic_id, m.id
+         FROM api_messages m
+         LEFT JOIN vault_request_gates g ON g.message_id = m.id
+         WHERE m.kind = 'vault_secret_request'
+           AND m.deleted = 0
+           AND g.gate_id IS NULL`).all();
+    for (const card of legacyCards) {
+      const update = expireVaultCard(card.topic_id, card.id, now);
+      if (update)
+        updates.push(update);
+    }
+    return updates;
+  }).immediate();
+}
+function claimVaultRequestGateAndAnswer(args) {
+  return db.transaction(() => {
+    const row = db.query(`SELECT * FROM vault_request_gates
+         WHERE topic_id = ? AND message_id = ?
+         ORDER BY rowid DESC LIMIT 1`).get(args.topicId, args.messageId);
+    if (!row || row.owner_id !== args.ownerId || row.state !== "pending") {
+      return { outcome: "unavailable" };
+    }
+    const message = db.query(`SELECT vault_secret_request FROM api_messages
+         WHERE topic_id = ? AND id = ? AND deleted = 0 AND kind = 'vault_secret_request'`).get(args.topicId, args.messageId);
+    if (!message?.vault_secret_request)
+      return { outcome: "unavailable" };
+    const request = JSON.parse(message.vault_secret_request);
+    if (request.status !== "pending")
+      return { outcome: "unavailable" };
+    const claimed = db.query(`UPDATE vault_request_gates
+         SET state = 'answered', outcome = ?, answered_by = ?, claim_source = ?, updated_at = ?
+         WHERE gate_id = ? AND owner_id = ? AND state = 'pending'`).run(args.outcome, args.userId, args.source, args.now, row.gate_id, args.ownerId);
+    if (Number(claimed.changes ?? 0) === 0)
+      return { outcome: "unavailable" };
+    const answered = {
+      ...request,
+      status: args.outcome,
+      answeredBy: args.userId
+    };
+    db.query(`UPDATE api_messages SET vault_secret_request = ?, edited_at = ?
+       WHERE topic_id = ? AND id = ? AND deleted = 0 AND kind = 'vault_secret_request'`).run(JSON.stringify(answered), args.now, args.topicId, args.messageId);
+    return {
+      outcome: "claimed",
+      gate: fromRow2({
+        ...row,
+        state: "answered",
+        outcome: args.outcome,
+        answered_by: args.userId
+      }),
+      vaultSecretRequest: answered,
+      editedAt: args.now
+    };
+  }).immediate();
+}
+function cancelVaultRequestGate(topicId, messageId, ownerId, now = new Date().toISOString()) {
+  return db.transaction(() => {
+    const row = db.query(`SELECT * FROM vault_request_gates
+         WHERE topic_id = ? AND message_id = ? ORDER BY rowid DESC LIMIT 1`).get(topicId, messageId);
+    if (!row || row.owner_id !== ownerId || row.state !== "pending")
+      return null;
+    const result = db.query(`UPDATE vault_request_gates SET state = 'cancelled', updated_at = ?
+         WHERE gate_id = ? AND owner_id = ? AND state = 'pending'`).run(now, row.gate_id, ownerId);
+    if (Number(result.changes ?? 0) === 0)
+      return null;
+    return expireVaultCard(topicId, messageId, now);
+  }).immediate();
+}
+var init_vault_request_gates = __esm(async () => {
+  await __promiseAll([
+    init_forum_db(),
+    init_storage_host()
+  ]);
+  registerStorageSchemaInitializer(initializeVaultRequestGateSchema, 32);
+});
+
+// ../../packages/core/src/agents/mcp-tools/request-vault.ts
+import { createHash as createHash12, randomUUID as randomUUID17 } from "crypto";
+import { z as z5 } from "zod";
+function requestBodyHash(key, description) {
+  return createHash12("sha256").update(JSON.stringify({ key, description })).digest("hex");
+}
+function answerToolResult2(key, outcome) {
+  if (outcome === "no_answer") {
+    return errorResult("The AI turn ended before the user answered.");
+  }
+  if (outcome === "declined") {
+    return errorResult(`User declined to provide a value for ${key}.`);
+  }
+  return textResult(`User stored a value for ${key} in the vault. Reference it as {{${key}}} directly in supported transient tool inputs. Never ask the user to repeat the raw value in chat.`);
+}
+function createRequestVaultRuntime(host) {
+  const pendingRequests = new Map;
+  const { ownerId } = host.runtime;
+  const createId = () => host.runtime.createId();
+  const now = () => host.runtime.now();
+  const isProcessLeaseAlive = (lease) => host.durability.processLeases.isAlive(lease);
+  let gateOwnerLease = null;
+  function broadcastGateUpdates(updates) {
+    for (const update of updates)
+      host.messaging.publication.publishCardUpdate(update);
+  }
+  function startGateOwner() {
+    if (gateOwnerLease)
+      return;
+    gateOwnerLease = host.durability.processLeases.acquire(`${VAULT_GATE_LEASE_ROLE_PREFIX}${ownerId}`, ownerId);
+    if (!gateOwnerLease)
+      throw new Error("failed to acquire the vault-request gate owner lease");
+  }
+  function stopGateOwner() {
+    gateOwnerLease?.stop();
+    gateOwnerLease = null;
+  }
+  function reconcilePendingGates() {
+    startGateOwner();
+    host.durability.processLeases.removeDead(VAULT_GATE_LEASE_ROLE_PREFIX);
+    const liveOwners = new Set(host.durability.processLeases.list(VAULT_GATE_LEASE_ROLE_PREFIX).filter(isProcessLeaseAlive).map((lease) => lease.ownerId));
+    const updates = host.durability.gates.quarantineForeign(liveOwners, now());
+    broadcastGateUpdates(updates);
+    return updates.length;
+  }
+  function answerPendingRequest(topicId, messageId, userId, value2) {
+    reconcilePendingGates();
+    const topic = host.topics.getTopic(topicId);
+    if (!topic?.participants.some((participant) => participant.userId === userId)) {
+      return { ok: false, error: "User is not a member of this topic." };
+    }
+    const existing = host.messaging.persistence.getMessage(topicId, messageId);
+    const request = existing?.kind === "vault_secret_request" ? existing.vaultSecretRequest : undefined;
+    if (!existing || existing.deleted || !request) {
+      return { ok: false, error: "Vault request card not found." };
+    }
+    if (request.status !== "pending") {
+      return { ok: false, error: "This request is no longer awaiting an answer." };
+    }
+    const pending = pendingRequests.get(messageId);
+    if (!pending || pending.topicId !== topicId) {
+      return { ok: false, error: "This request is no longer awaiting an answer." };
+    }
+    const declining = value2 === null;
+    if (!declining) {
+      const bytes = Buffer.byteLength(value2, "utf8");
+      if (bytes < VAULT_VALUE_MIN_BYTES || bytes > VAULT_VALUE_MAX_BYTES) {
+        return {
+          ok: false,
+          error: `Value must be between ${VAULT_VALUE_MIN_BYTES} and ${VAULT_VALUE_MAX_BYTES} bytes.`
+        };
+      }
+    }
+    if (!declining) {
+      try {
+        host.vault.set(userId, pending.key, value2, pending.description);
+      } catch (error) {
+        return {
+          ok: false,
+          error: `Failed to store the value: ${error instanceof Error ? error.message : String(error)}`
+        };
+      }
+    }
+    const outcome = declining ? "declined" : "fulfilled";
+    let claim;
+    try {
+      claim = host.durability.gates.claimAndAnswer({
+        topicId,
+        messageId,
+        outcome,
+        userId,
+        ownerId,
+        source: "host-control",
+        now: now()
+      });
+    } catch {
+      return { ok: false, error: "This request could not be claimed safely. Retry once." };
+    }
+    if (claim.outcome !== "claimed") {
+      return { ok: false, error: "This request is no longer awaiting an answer." };
+    }
+    pendingRequests.delete(messageId);
+    const answerMessage = {
+      id: createId(),
+      topicId,
+      authorId: userId,
+      text: outcome === "fulfilled" ? `Provided a value for ${pending.key}.` : `Declined to provide a value for ${pending.key}.`,
+      parentId: messageId,
+      ...existing.threadRootId ? { threadRootId: existing.threadRootId } : {},
+      createdAt: now()
+    };
+    try {
+      host.messaging.publication.publishCardUpdate({
+        topicId,
+        messageId,
+        vaultSecretRequest: claim.vaultSecretRequest,
+        editedAt: claim.editedAt
+      });
+      host.messaging.persistence.appendMessage(answerMessage);
+      host.messaging.publication.publishMessage(topicId, answerMessage);
+    } catch {}
+    pending.resolve({ outcome, userId });
+    return { ok: true, queryId: pending.queryId, outcome, answerMessage };
+  }
+  function cancelPendingRequests(topicId, queryId) {
+    for (const [messageId, pending] of pendingRequests) {
+      if (pending.topicId === topicId && pending.queryId === queryId) {
+        pendingRequests.delete(messageId);
+        const update = host.durability.gates.cancel(topicId, messageId, ownerId, now());
+        if (update)
+          broadcastGateUpdates([update]);
+        pending.resolve({ outcome: "no_answer", userId: "" });
+      }
+    }
+  }
+  function appendRequestMessage(ctx, key, description, messageId) {
+    const cfg = host.topics.getConfig(ctx.topicId);
+    const vaultSecretRequest = { key, description, status: "pending" };
+    const message = {
+      id: messageId,
+      topicId: ctx.topicId,
+      authorId: "ai",
+      text: `Vault secret requested: ${key}`,
+      queryId: ctx.queryId,
+      agentType: ctx.agent,
+      model: ctx.model ?? cfg?.model ?? "unknown",
+      kind: "vault_secret_request",
+      vaultSecretRequest,
+      ...ctx.threadRootId ? { threadRootId: ctx.threadRootId } : {},
+      createdAt: now()
+    };
+    host.messaging.persistence.appendMessage(message);
+    return message;
+  }
+  async function requestVaultSecret(ctx, input) {
+    if (ctx.unsupportedSurface) {
+      return errorResult("Error: this surface cannot mask secret input safely (there is no password field here, so a typed value would land in plaintext chat history). Ask the user to provide this value from the Terminal app or Otium instead.");
+    }
+    reconcilePendingGates();
+    const topic = host.topics.getTopic(ctx.topicId);
+    if (!topic)
+      return errorResult(`Error: topic '${ctx.topicId}' not found.`);
+    if (!topic.participants.some((participant) => participant.userId === ctx.userId)) {
+      return errorResult("Error: user is not a member of this topic.");
+    }
+    if (typeof input.key !== "string" || !input.key.trim()) {
+      return errorResult("Error: key is required.");
+    }
+    const key = normalizeVaultKey(input.key);
+    if (!VAULT_KEY_PATTERN.test(key)) {
+      return errorResult("Error: key must start with a letter and contain only uppercase letters, digits, and underscores (max 128 chars).");
+    }
+    if (typeof input.description !== "string" || !input.description.trim()) {
+      return errorResult("Error: description is required so the user knows what to type.");
+    }
+    const description = input.description.trim().slice(0, MAX_DESCRIPTION_CHARS);
+    if (input.idempotency_key !== undefined && (typeof input.idempotency_key !== "string" || !input.idempotency_key.trim())) {
+      return errorResult("Error: idempotency_key must be a non-empty string.");
+    }
+    const rawIdempotencyKey = typeof input.idempotency_key === "string" ? input.idempotency_key.trim() : createId();
+    if (rawIdempotencyKey.length > MAX_IDEMPOTENCY_KEY_CHARS2) {
+      return errorResult(`Error: idempotency_key must be at most ${MAX_IDEMPOTENCY_KEY_CHARS2} characters.`);
+    }
+    const bodyHash = requestBodyHash(key, description);
+    const createGate = () => {
+      const suffix = createId();
+      return host.durability.gates.prepare({
+        gateId: `vault-request-gate-${suffix}`,
+        topicId: ctx.topicId,
+        queryId: ctx.queryId,
+        idempotencyKey: rawIdempotencyKey,
+        bodyHash,
+        messageId: `vault-request-${ctx.queryId ?? "runtime"}-${suffix}`,
+        ownerId,
+        now: now()
+      });
+    };
+    let prepared = createGate();
+    if (prepared.outcome === "conflict") {
+      return errorResult("Error: idempotency_conflict. The same idempotency_key was already used with a different key or description.");
+    }
+    if (prepared.outcome === "replay") {
+      if (!prepared.gate.outcome || !prepared.gate.answeredBy) {
+        return errorResult("Error: the stored request_vault_secret replay is incomplete.");
+      }
+      return answerToolResult2(key, prepared.gate.outcome);
+    }
+    if (prepared.outcome === "pending") {
+      if (prepared.gate.ownerId !== ownerId) {
+        return errorResult("Error: this request_vault_secret is pending in another healthy runtime process.");
+      }
+      const existingPending = pendingRequests.get(prepared.gate.messageId);
+      if (existingPending)
+        return answerToolResult2(key, (await existingPending.promise).outcome);
+      if (prepared.gate.state === "claimed") {
+        return errorResult("Error: this request_vault_secret is already being finalized.");
+      }
+      const update = host.durability.gates.quarantine(prepared.gate.gateId, ownerId, now());
+      if (update)
+        broadcastGateUpdates([update]);
+      prepared = createGate();
+    }
+    if (prepared.outcome !== "created") {
+      return errorResult("Error: failed to create a durable request_vault_secret gate.");
+    }
+    if (host.vault.hasKey(ctx.userId, key)) {
+      host.durability.gates.quarantine(prepared.gate.gateId, ownerId, now());
+      return errorResult(`Error: vault key '${key}' already exists. Pick a different key, or ask the user to update it from their Vault manager.`);
+    }
+    let message;
+    try {
+      message = appendRequestMessage(ctx, key, description, prepared.gate.messageId);
+    } catch (error) {
+      host.durability.gates.quarantine(prepared.gate.gateId, ownerId, now());
+      return errorResult(`Error: failed to persist request_vault_secret: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    let resolveAnswer;
+    const promise = new Promise((resolve17) => {
+      resolveAnswer = resolve17;
+    });
+    pendingRequests.set(message.id, {
+      topicId: ctx.topicId,
+      queryId: ctx.queryId,
+      messageId: message.id,
+      key,
+      description,
+      promise,
+      resolve: resolveAnswer
+    });
+    try {
+      host.messaging.publication.publishMessage(ctx.topicId, message);
+    } catch (error) {
+      pendingRequests.delete(message.id);
+      try {
+        host.durability.gates.quarantine(prepared.gate.gateId, ownerId, now());
+      } catch {}
+      return errorResult(`Error: failed to publish request_vault_secret: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    return answerToolResult2(key, (await promise).outcome);
+  }
+  function createToolDefinition(ctx) {
+    return {
+      name: "request_vault_secret",
+      description: "Ask the user to store a brand-new secret value in their Vault. You choose the key name and a short description of what to paste; the user types only the value on a surface that can mask it, and you never see the raw value. Use this instead of asking the user to paste a secret directly into chat. After it succeeds, reference the value as {{KEY}} in supported transient tool inputs.",
+      schema: {
+        key: z5.string().describe("New Vault key name, e.g. STRIPE_API_KEY. Letters/digits/underscores, must start with a letter."),
+        description: z5.string().max(MAX_DESCRIPTION_CHARS).describe("One sentence telling the user what value to paste and where it's from."),
+        idempotency_key: z5.string().max(MAX_IDEMPOTENCY_KEY_CHARS2).optional().describe("Optional retry key. Reusing it with the same key/description replays the existing result; reusing it with different content fails.")
+      },
+      async handler(input) {
+        return requestVaultSecret(ctx, input);
+      }
+    };
+  }
+  return {
+    startGateOwner,
+    stopGateOwner,
+    reconcilePendingGates,
+    answerPendingRequest,
+    cancelPendingRequests,
+    createToolDefinition
+  };
+}
+function cancelPendingVaultSecretRequests(topicId, queryId) {
+  defaultRequestVaultRuntime.cancelPendingRequests(topicId, queryId);
+}
+var MAX_DESCRIPTION_CHARS, MAX_IDEMPOTENCY_KEY_CHARS2 = 200, VAULT_GATE_OWNER_ID, VAULT_GATE_LEASE_ROLE_PREFIX = "vault-request-gate:", defaultRequestVaultDurabilityHost, defaultRequestVaultRuntime;
+var init_request_vault = __esm(async () => {
+  init_common();
+  await __promiseAll([
+    init_bus(),
+    init_api_messages(),
+    init_api_topic_config(),
+    init_api_topics(),
+    init_runtime_process_leases(),
+    init_vault(),
+    init_vault_request_gates()
+  ]);
+  MAX_DESCRIPTION_CHARS = VAULT_DESCRIPTION_MAX_LENGTH;
+  VAULT_GATE_OWNER_ID = `request-vault-${process.pid}-${randomUUID17()}`;
+  defaultRequestVaultDurabilityHost = {
+    gates: {
+      prepare: prepareVaultRequestGate,
+      claimAndAnswer: claimVaultRequestGateAndAnswer,
+      cancel: cancelVaultRequestGate,
+      quarantine: quarantineVaultRequestGate,
+      quarantineForeign: quarantineForeignVaultRequestGates
+    },
+    processLeases: {
+      acquire: (role, ownerId) => acquireRuntimeProcessLease(role, { ownerId }),
+      list: listRuntimeProcessLeases,
+      isAlive: isRuntimeProcessLeaseAlive,
+      removeDead: removeDeadRuntimeProcessLeases
+    }
+  };
+  defaultRequestVaultRuntime = createRequestVaultRuntime({
+    messaging: {
+      persistence: {
+        getMessage: getApiMessage,
+        appendMessage: appendApiMessage
+      },
+      publication: {
+        publishMessage: (topicId, message) => WsHub.get().broadcastMessage(topicId, message),
+        publishCardUpdate: (update) => WsHub.get().broadcastMessageUpdated(update.topicId, update.messageId, {
+          vaultSecretRequest: update.vaultSecretRequest,
+          editedAt: update.editedAt
+        })
+      }
+    },
+    topics: {
+      getTopic,
+      getConfig: getApiTopicConfig
+    },
+    vault: {
+      hasKey: vaultHasKey,
+      set: vaultSet
+    },
+    durability: defaultRequestVaultDurabilityHost,
+    runtime: {
+      ownerId: VAULT_GATE_OWNER_ID,
+      createId: randomUUID17,
+      now: () => new Date().toISOString()
+    }
+  });
+});
+
 // ../../packages/core/src/mcp/peer-bridge.ts
 function flushPeerRuntimeEvents(localTopicId) {
   return activeBridge2?.flushEvents?.(localTopicId) ?? Promise.resolve(true);
@@ -18669,7 +19226,7 @@ var init_visuals = __esm(async () => {
 });
 
 // ../../packages/core/src/runtime/turn-event-stream.ts
-import { randomUUID as randomUUID17 } from "crypto";
+import { randomUUID as randomUUID18 } from "crypto";
 import { realpathSync as realpathSync7, statSync as statSync9 } from "fs";
 import { isAbsolute as isAbsolute6, resolve as resolve18 } from "path";
 function sessionEventMatchesCurrentExecution(topicId, queryId, agent, model) {
@@ -18776,7 +19333,7 @@ async function runTurnEventStream(topicId, topicTitle, queryId, events, control,
     if (silent || !text2.trim())
       return null;
     const message = {
-      id: randomUUID17(),
+      id: randomUUID18(),
       topicId,
       authorId: "ai",
       text: text2,
@@ -19256,6 +19813,7 @@ ${JSON.stringify(event.input ?? {})}`);
     const stillCurrent = getRoomQuery(roomId)?.queryId === queryId;
     clearRoomQuery(roomId, queryId);
     cancelPendingAskUserQuestions(topicId, queryId);
+    cancelPendingVaultSecretRequests(topicId, queryId);
     if (stillCurrent && roomId === topicId)
       clearQueryState(userId, topicId, topicTitle);
     if (!silent && stillCurrent)
@@ -19299,6 +19857,7 @@ var init_turn_event_stream = __esm(async () => {
     init_idle_archiver(),
     init_idle_compact(),
     init_ask_user(),
+    init_request_vault(),
     init_spawn_subagent(),
     init_registry(),
     init_bus(),
@@ -19453,7 +20012,7 @@ __export(exports_turn_runner, {
   FALLBACK_ORDER: () => FALLBACK_ORDER,
   AGENT_DISPLAY_NAME: () => AGENT_DISPLAY_NAME
 });
-import { randomUUID as randomUUID18 } from "crypto";
+import { randomUUID as randomUUID19 } from "crypto";
 import { existsSync as existsSync24, mkdirSync as mkdirSync21, readdirSync as readdirSync7, statSync as statSync10 } from "fs";
 import { join as join33 } from "path";
 function withDefaultPlaywright(configuredMcp, isManager) {
@@ -19478,7 +20037,7 @@ ${reminderPrompt}` };
 }
 function appendSystemMessage(topicId, text2, threadRootId) {
   const message = {
-    id: randomUUID18(),
+    id: randomUUID19(),
     topicId,
     authorId: "system",
     text: text2,
@@ -19500,7 +20059,7 @@ function notifyPlaywrightUnavailable(topicId) {
 }
 function appendAskReplyMessage(topicId, text2, sourceLabel, body, kind, agentType, threadRootId) {
   const message = {
-    id: randomUUID18(),
+    id: randomUUID19(),
     topicId,
     authorId: "ai",
     text: text2,
@@ -20021,7 +20580,7 @@ function startAiTurn(params) {
   const askReplySources = params.askReplySources;
   const sessionRetried = params._sessionRetried === true;
   const emptyResponseRetried = params._emptyResponseRetried === true;
-  const queryId = asTurnId(params._queryId ?? randomUUID18());
+  const queryId = asTurnId(params._queryId ?? randomUUID19());
   const roomId = turnConcurrency === "isolated" ? isolatedTurnRoomId(topicId, queryId) : asTurnSlotKey(topicId);
   const currentRuntimeEpoch = getRuntimeTopicEpoch(topic.id);
   const runtimeEpoch = params._runtimeEpoch ?? currentRuntimeEpoch;
@@ -20792,7 +21351,7 @@ function triggerTopicAiTurn(topicId, userId, prompt, agentType, opts) {
   if (!opts?.silent && !opts?.hideInjectMessage) {
     const now = new Date().toISOString();
     const injectMsg = {
-      id: opts?.requestId ? `tell-${opts.requestId}` : `tell-${randomUUID18()}`,
+      id: opts?.requestId ? `tell-${opts.requestId}` : `tell-${randomUUID19()}`,
       topicId,
       authorId: opts?.injectAuthorId ?? userId,
       sourceAdapter: opts?.injectSourceAdapter,
@@ -21016,7 +21575,7 @@ var init_auth_check = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/mcp-tools/spawn-subagent.ts
-import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 function activeQueryUserId(topic) {
   return topic?.participants.find((participant) => hasActiveQuery(participant.userId, topic.id))?.userId;
 }
@@ -21583,7 +22142,7 @@ ${card.task}${reportInstruction}`;
         name: "start_subagent",
         description: "Start a prepared descendant subagent task.",
         schema: {
-          topic_id: z5.string().describe("Prepared subagent room id.")
+          topic_id: z6.string().describe("Prepared subagent room id.")
         },
         async handler(input) {
           const result = ownedSubagentTree(ctx);
@@ -21603,7 +22162,7 @@ ${card.task}${reportInstruction}`;
         name: "delete_subagent",
         description: "Permanently delete one descendant subagent room managed by the current room. " + "This removes its conversation, workspace, runtime state, and topic. Keep it when follow-up work is likely.",
         schema: {
-          topic_id: z5.string().describe("Exact subagent room id returned by list_subagents; names are not accepted.")
+          topic_id: z6.string().describe("Exact subagent room id returned by list_subagents; names are not accepted.")
         },
         async handler(input) {
           const result = ownedSubagentTree(ctx);
@@ -21627,8 +22186,8 @@ ${card.task}${reportInstruction}`;
         name: "grant_subagent_tell",
         description: "Allow one descendant subagent to tell_session another topic in this managed subagent tree. " + "Direct-parent reporting is always allowed and does not need a grant.",
         schema: {
-          subagent_topic_id: z5.string().describe("Source descendant subagent topic id."),
-          target_topic_id: z5.string().describe("Target topic id: this manager room or another descendant in its tree.")
+          subagent_topic_id: z6.string().describe("Source descendant subagent topic id."),
+          target_topic_id: z6.string().describe("Target topic id: this manager room or another descendant in its tree.")
         },
         async handler(input) {
           const result = ownedSubagentTree(ctx);
@@ -21653,8 +22212,8 @@ ${card.task}${reportInstruction}`;
         name: "revoke_subagent_tell",
         description: "Remove an extra tell_session connection previously granted to a descendant subagent.",
         schema: {
-          subagent_topic_id: z5.string().describe("Source descendant subagent topic id."),
-          target_topic_id: z5.string().describe("Granted target topic id.")
+          subagent_topic_id: z6.string().describe("Source descendant subagent topic id."),
+          target_topic_id: z6.string().describe("Granted target topic id.")
         },
         async handler(input) {
           const result = ownedSubagentTree(ctx);
@@ -21676,18 +22235,18 @@ ${card.task}${reportInstruction}`;
   }
   function createSpawnSubagentToolDefinition(ctx, options = {}) {
     const executionOverrideSchema = options.executionOverrides === false ? {} : {
-      agent: z5.enum(["claude", "codex", "maestro"]).optional().describe("Agent backend override. Defaults to this room's agent."),
-      model: z5.string().optional().describe(`Best-fit model override from the system prompt catalog. Omit agent+model to inherit ${ctx.agent}/${ctx.model ?? "default"}; overriding agent without model uses that agent's default.`)
+      agent: z6.enum(["claude", "codex", "maestro"]).optional().describe("Agent backend override. Defaults to this room's agent."),
+      model: z6.string().optional().describe(`Best-fit model override from the system prompt catalog. Omit agent+model to inherit ${ctx.agent}/${ctx.model ?? "default"}; overriding agent without model uses that agent's default.`)
     };
     return {
       name: "spawn_subagent",
       description: "Delegate a self-contained task to a subagent that works in its own new agent room. " + "Returns immediately; the subagent runs in the background and reports according to report_mode. " + "The fresh room has no parent conversation history; it receives the task plus the selected or inherited topic memory. " + "Use for parallelizable or long-running side work. Do not use provider built-in Task/Agent subagents.",
       schema: {
-        task: z5.string().describe("Self-contained task brief. The worker has topic memory but no parent conversation history, so include all task-specific context."),
-        name: z5.string().optional().describe("Short name for the subagent room. Auto-generated when omitted."),
+        task: z6.string().describe("Self-contained task brief. The worker has topic memory but no parent conversation history, so include all task-specific context."),
+        name: z6.string().optional().describe("Short name for the subagent room. Auto-generated when omitted."),
         ...executionOverrideSchema,
-        memory_topic: z5.string().optional().describe("Optional knowledge source: an accessible topic id/title or topic/*.md brief. Defaults to the parent room's effective topic brief."),
-        report_mode: z5.enum(["auto", "tell", "status-only"]).optional().describe("Completion reporting: auto injects the final result, tell requires tell_session, status-only updates only the lifecycle card.")
+        memory_topic: z6.string().optional().describe("Optional knowledge source: an accessible topic id/title or topic/*.md brief. Defaults to the parent room's effective topic brief."),
+        report_mode: z6.enum(["auto", "tell", "status-only"]).optional().describe("Completion reporting: auto injects the final result, tell requires tell_session, status-only updates only the lifecycle card.")
       },
       async handler(input) {
         return createSubagent(ctx, input, true);
@@ -21699,14 +22258,14 @@ ${card.task}${reportInstruction}`;
       name: "create_subagent",
       description: "Create a prepared subagent room and task definition without starting its AI turn. " + "Use start_subagent when the team is ready to run it.",
       schema: {
-        task: z5.string().describe("Self-contained task brief for the subagent."),
-        name: z5.string().optional().describe("Short room name. Auto-generated when omitted."),
+        task: z6.string().describe("Self-contained task brief for the subagent."),
+        name: z6.string().optional().describe("Short room name. Auto-generated when omitted."),
         ...options.executionOverrides === false ? {} : {
-          agent: z5.enum(["claude", "codex", "maestro"]).optional(),
-          model: z5.string().optional()
+          agent: z6.enum(["claude", "codex", "maestro"]).optional(),
+          model: z6.string().optional()
         },
-        memory_topic: z5.string().optional().describe("Optional accessible topic id/title or topic/*.md brief to use as this worker's knowledge source. Defaults to the parent."),
-        report_mode: z5.enum(["auto", "tell", "status-only"]).optional()
+        memory_topic: z6.string().optional().describe("Optional accessible topic id/title or topic/*.md brief to use as this worker's knowledge source. Defaults to the parent."),
+        report_mode: z6.enum(["auto", "tell", "status-only"]).optional()
       },
       async handler(input) {
         return createSubagent(ctx, input, false);
@@ -24636,7 +25195,7 @@ ${renderDecisionList(decisions)}`);
 }
 // ../../packages/core/src/mcp/factories/session-comm.ts
 import { McpServer as McpServer4 } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 
 // ../../packages/core/src/mcp/session-comm/tell-permissions.ts
 await __promiseAll([
@@ -24677,29 +25236,29 @@ function createSessionCommMcpServer(context, host, options = {}) {
   const subagentIdentity = resolveSubagentTellIdentity(context.currentTopicId, context.subagentParentTopicId);
   server.tool("list_sessions", "List available sessions and remote peer sessions for inter-session communication.", {}, async () => host.listSessions(context));
   server.tool("configure_mcp", `Configure optional MCP servers for the current topic. Required: ${required}. Optional: ${optional}.`, {
-    enabled: z6.array(z6.string()).nullable().optional()
+    enabled: z7.array(z7.string()).nullable().optional()
   }, async ({ enabled }) => host.configureMcp(context, enabled));
   server.tool("get_mcp_config", "Get the current topic MCP configuration.", {}, async () => host.getMcpConfig(context));
   if (host.getBrowserProfile) {
     server.tool("get_browser_profile", "Get this topic's browser profile and the profiles owned by the same user.", {}, async () => host.getBrowserProfile(context));
   }
   if (host.setBrowserProfile) {
-    server.tool("set_browser_profile", "Assign this topic to a named shared browser profile. Takes effect next turn.", { profile: z6.string() }, async ({ profile }) => host.setBrowserProfile(context, profile));
+    server.tool("set_browser_profile", "Assign this topic to a named shared browser profile. Takes effect next turn.", { profile: z7.string() }, async ({ profile }) => host.setBrowserProfile(context, profile));
   }
   if (host.deleteBrowserProfile) {
-    server.tool("delete_browser_profile", "Delete an unused named browser profile and its on-disk data. The default or an assigned profile cannot be deleted.", { profile: z6.string() }, async ({ profile }) => host.deleteBrowserProfile(context, profile));
+    server.tool("delete_browser_profile", "Delete an unused named browser profile and its on-disk data. The default or an assigned profile cannot be deleted.", { profile: z7.string() }, async ({ profile }) => host.deleteBrowserProfile(context, profile));
   }
   server.tool("peek_session", "Inspect running and idle sessions, including pending ask_session calls.", {}, async () => host.peekSession(context));
-  server.tool("set_description", "Set the current session description used as a routing hint.", { description: z6.string() }, async ({ description }) => host.setDescription(context, description));
+  server.tool("set_description", "Set the current session description used as a routing hint.", { description: z7.string() }, async ({ description }) => host.setDescription(context, description));
   if (!context.replyOnly) {
     if (!subagentIdentity.restricted) {
-      server.tool("ask_session", "Ask another local or remote session a question and wait for its answer.", { to: z6.string(), message: z6.string() }, async (input) => host.askSession(context, input));
-      server.tool("ask_cron", "Ask this topic's shared Cron session a question. The answer is injected asynchronously into the current conversation.", { message: z6.string() }, async ({ message }) => host.askCron(context, message));
+      server.tool("ask_session", "Ask another local or remote session a question and wait for its answer.", { to: z7.string(), message: z7.string() }, async (input) => host.askSession(context, input));
+      server.tool("ask_cron", "Ask this topic's shared Cron session a question. The answer is injected asynchronously into the current conversation.", { message: z7.string() }, async ({ message }) => host.askCron(context, message));
     }
     if (!subagentIdentity.restricted) {
-      server.tool("abort_session", "Abort the active query in another session.", { to: z6.string() }, async ({ to }) => host.abortSession(context, to));
+      server.tool("abort_session", "Abort the active query in another session.", { to: z7.string() }, async ({ to }) => host.abortSession(context, to));
     }
-    server.tool("tell_session", "Send a one-way message to another local or remote session.", { to: z6.string(), message: z6.string() }, async (input) => {
+    server.tool("tell_session", "Send a one-way message to another local or remote session.", { to: z7.string(), message: z7.string() }, async (input) => {
       if (subagentIdentity.restricted && !canSubagentTellTargetByName(subagentIdentity, input.to)) {
         return {
           content: [
@@ -24916,7 +25475,7 @@ function createSystemHealthMcpServer(host = defaultSystemHealthMcpHost) {
 init_mcp_helpers();
 await init_tasks();
 import { McpServer as McpServer6 } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 var defaultTaskMcpHost = {
   readTasks,
   writeTasks
@@ -24930,13 +25489,13 @@ function createTaskMcpServer(context, host = defaultTaskMcpHost) {
     }
     return null;
   };
-  const statusEnum = z7.enum(TASK_STATUS_VALUES);
+  const statusEnum = z8.enum(TASK_STATUS_VALUES);
   server.tool("task_create", "Add one or more tasks to this topic's shared Otium task list. Use this instead of provider-native todo/task tools.", {
-    tasks: z7.array(z7.object({
-      subject: z7.string().min(1).describe("Short imperative task description"),
-      active_form: z7.string().optional().describe("Label to show while the task is in progress"),
-      blocked_by: z7.array(z7.string()).optional().describe("Task ids blocking this task"),
-      owner: z7.string().optional().describe("Owner/agent label for multi-agent work")
+    tasks: z8.array(z8.object({
+      subject: z8.string().min(1).describe("Short imperative task description"),
+      active_form: z8.string().optional().describe("Label to show while the task is in progress"),
+      blocked_by: z8.array(z8.string()).optional().describe("Task ids blocking this task"),
+      owner: z8.string().optional().describe("Owner/agent label for multi-agent work")
     })).min(1)
   }, async ({ tasks: inputs }) => {
     const guard = requireContext();
@@ -24960,13 +25519,13 @@ ${renderTaskList(tasks2)}`);
     }
   });
   server.tool("task_update", "Update task status/content in this topic's shared Otium task list. Batch related status changes in one call.", {
-    updates: z7.array(z7.object({
-      id: z7.string().describe("Target task id"),
+    updates: z8.array(z8.object({
+      id: z8.string().describe("Target task id"),
       status: statusEnum.optional().describe("New status"),
-      subject: z7.string().min(1).optional().describe("Replacement task description"),
-      active_form: z7.string().optional().describe("Replacement in-progress label; empty string clears it"),
-      blocked_by: z7.array(z7.string()).optional().describe("Replacement blocker id list"),
-      owner: z7.string().optional().describe("Replacement owner; empty string clears it")
+      subject: z8.string().min(1).optional().describe("Replacement task description"),
+      active_form: z8.string().optional().describe("Replacement in-progress label; empty string clears it"),
+      blocked_by: z8.array(z8.string()).optional().describe("Replacement blocker id list"),
+      owner: z8.string().optional().describe("Replacement owner; empty string clears it")
     })).min(1)
   }, async ({ updates }) => {
     const guard = requireContext();
@@ -25000,7 +25559,7 @@ Missing ids ignored: ${missing.join(", ")}` : "";
       return mcpError(`task_list failed: ${errMsg(error)}`);
     }
   });
-  server.tool("task_get", "Read one task from this topic's shared Otium task list as JSON.", { id: z7.string().describe("Task id") }, async ({ id }) => {
+  server.tool("task_get", "Read one task from this topic's shared Otium task list as JSON.", { id: z8.string().describe("Task id") }, async ({ id }) => {
     const guard = requireContext();
     if (guard)
       return guard;
@@ -25014,8 +25573,8 @@ Missing ids ignored: ${missing.join(", ")}` : "";
     }
   });
   server.tool("task_delete", "Delete tasks from this topic's shared Otium task list. Use all=true only when starting a new plan.", {
-    ids: z7.array(z7.string()).optional().describe("Task ids to delete"),
-    all: z7.boolean().optional().describe("Delete the whole list")
+    ids: z8.array(z8.string()).optional().describe("Task ids to delete"),
+    all: z8.boolean().optional().describe("Delete the whole list")
   }, async ({ ids, all }) => {
     const guard = requireContext();
     if (guard)
@@ -25038,7 +25597,7 @@ ${renderTaskList(tasks2)}`);
 // ../../packages/core/src/mcp/factories/token-stats.ts
 await init_token_stats();
 import { McpServer as McpServer7 } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z as z8 } from "zod";
+import { z as z9 } from "zod";
 var defaultTokenStatsMcpHost = {
   getStats,
   calcCost
@@ -25058,9 +25617,9 @@ function createTokenStatsMcpServer(context, host = defaultTokenStatsMcpHost) {
     "groupBy: 'session'\uC73C\uB85C \uC124\uC815\uD558\uBA74 \uC138\uC158\uBCC4 \uD1A0\uD070 \uC0AC\uC6A9\uB7C9 \uB7AD\uD0B9\uC744 \uBC18\uD658\uD569\uB2C8\uB2E4."
   ].join(`
 `), {
-    from: z8.string().optional().describe("\uC2DC\uC791 \uC2DC\uAC01 ISO 8601. \uC608: '2026-03-28T09:00:00Z'"),
-    to: z8.string().optional().describe("\uC885\uB8CC \uC2DC\uAC01 ISO 8601. \uC0DD\uB7B5 \uC2DC \uD604\uC7AC"),
-    groupBy: z8.enum(["hour", "session"]).optional().describe("\uC9D1\uACC4 \uAE30\uC900. \uAE30\uBCF8\uAC12: hour")
+    from: z9.string().optional().describe("\uC2DC\uC791 \uC2DC\uAC01 ISO 8601. \uC608: '2026-03-28T09:00:00Z'"),
+    to: z9.string().optional().describe("\uC885\uB8CC \uC2DC\uAC01 ISO 8601. \uC0DD\uB7B5 \uC2DC \uD604\uC7AC"),
+    groupBy: z9.enum(["hour", "session"]).optional().describe("\uC9D1\uACC4 \uAE30\uC900. \uAE30\uBCF8\uAC12: hour")
   }, async ({ from, to, groupBy = "hour" }) => {
     const snapshot = host.getStats(context.userId, from, to);
     const {
@@ -25170,4 +25729,4 @@ export {
   createAgentHealthMcpServer
 };
 
-//# debugId=1F80C21C052F8C6A64756E2164756E21
+//# debugId=0C619D7E527DC93B64756E2164756E21