negotium 0.4.6 → 0.4.9

package/dist/main.js

@@ -273,7 +273,7 @@ function resolveDefaultModel(agent, registryDefaultModel) {
 function codexAuthFilePath() {
   return process.env.NEGOTIUM_CODEX_AUTH_FILE || join(process.env.CODEX_HOME || join(homedir(), ".codex"), "auth.json");
 }
-var HOME, PROJECT_ROOT, STATE_DIR_ENV, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.1.22", BROWSER_RS_MIN_SECURE_VERSION = "0.1.15", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.7", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, DECISION_SERVER, BROWSER_MCP_SSE_PROXY_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, _envMaxTellDepth, MAX_TELL_DEPTH;
+var HOME, PROJECT_ROOT, STATE_DIR_ENV, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.1.22", BROWSER_RS_MIN_SECURE_VERSION = "0.1.15", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.7", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, DECISION_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, _envMaxTellDepth, MAX_TELL_DEPTH;
 var init_config = __esm(() => {
   init_config_helpers();
   init_logger();
@@ -304,7 +304,6 @@ var init_config = __esm(() => {
   SESSION_COMM_SERVER = resolve(PROJECT_ROOT, "src/mcp/session-comm/server.ts");
   TASK_SERVER = resolve(PROJECT_ROOT, "src/mcp/task-server.ts");
   DECISION_SERVER = resolve(PROJECT_ROOT, "src/mcp/decision-server.ts");
-  BROWSER_MCP_SSE_PROXY_SERVER = resolve(PROJECT_ROOT, "src/mcp/browser-sse-proxy-server.ts");
   CANONICAL_MCP_PROXY_SERVER = resolve(PROJECT_ROOT, "src/mcp/canonical-proxy-server.ts");
   WIKI_SERVER = resolve(PROJECT_ROOT, "src/mcp/wiki-server.ts");
   TOKEN_STATS_SERVER = resolve(PROJECT_ROOT, "src/mcp/token-stats-server.ts");
@@ -1869,7 +1868,7 @@ var exports_version = {};
 __export(exports_version, {
   NEGOTIUM_VERSION: () => NEGOTIUM_VERSION
 });
-var NEGOTIUM_VERSION = "0.4.6";
+var NEGOTIUM_VERSION = "0.4.9";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn } from "child_process";
@@ -2755,12 +2754,6 @@ function playwrightTransport(port, owner, capability, agent) {
     };
   }
   const query = new URLSearchParams({ owner });
-  if (agent === "maestro") {
-    return buildStdioMcpServer("maestro", BROWSER_MCP_SSE_PROXY_SERVER, [], {
-      NEGOTIUM_BROWSER_SSE_URL: `http://127.0.0.1:${port}/sse?${query}`,
-      NEGOTIUM_BROWSER_OWNER_CAPABILITY: ownerCapability
-    });
-  }
   return {
     type: "sse",
     url: `http://127.0.0.1:${port}/sse?${query}`,
@@ -6969,6 +6962,10 @@ function latestRuntimeEventSeq() {
   const row = db.query("SELECT MAX(seq) AS seq FROM runtime_events").get();
   return Number(row?.seq ?? 0);
 }
+function earliestRuntimeEventSeq() {
+  const row = db.query("SELECT MIN(seq) AS seq FROM runtime_events").get();
+  return Number(row?.seq ?? 0);
+}
 function appendRuntimeEvent(sourceId, event) {
   const createdAt = new Date().toISOString();
   const result = db.query(`INSERT INTO runtime_events
@@ -6985,6 +6982,30 @@ function listRuntimeEventsAfter(seq, limit = 500) {
        LIMIT ?`).all(Math.max(0, seq), Math.max(1, Math.min(limit, 5000)));
   return rows.map(rowToEvent).filter((event) => event !== null);
 }
+function heartbeatRuntimeEventConsumer(consumerId, cursor, now = Date.now()) {
+  db.query(`INSERT INTO runtime_event_consumers (consumer_id, cursor, heartbeat_at)
+     VALUES (?, ?, ?)
+     ON CONFLICT(consumer_id) DO UPDATE SET
+       cursor = MAX(runtime_event_consumers.cursor, excluded.cursor),
+       heartbeat_at = excluded.heartbeat_at`).run(consumerId, Math.max(0, cursor), now);
+}
+function pruneRuntimeEvents(options = {}) {
+  const maxEvents = Math.max(1, Math.floor(options.maxEvents ?? 1e5));
+  const now = options.now ?? Date.now();
+  const activeAfter = now - Math.max(1000, options.activeConsumerMaxAgeMs ?? 5 * 60000);
+  db.query("DELETE FROM runtime_event_consumers WHERE heartbeat_at < ?").run(activeAfter);
+  const boundary = db.query("SELECT seq FROM runtime_events ORDER BY seq DESC LIMIT 1 OFFSET ?").get(maxEvents - 1);
+  if (!boundary)
+    return { deleted: 0, cutoff: 0, retainedForConsumer: null };
+  const targetCutoff = Math.max(0, Number(boundary.seq) - 1);
+  const consumer = db.query("SELECT MIN(cursor) AS cursor FROM runtime_event_consumers").get();
+  const retainedForConsumer = consumer?.cursor == null ? null : Number(consumer.cursor);
+  const cutoff = Math.min(targetCutoff, retainedForConsumer ?? targetCutoff);
+  if (cutoff <= 0)
+    return { deleted: 0, cutoff, retainedForConsumer };
+  const result = db.query("DELETE FROM runtime_events WHERE seq <= ?").run(cutoff);
+  return { deleted: Number(result.changes), cutoff, retainedForConsumer };
+}
 function listRecentRuntimeEventsForTopic(topicId, limit = 300) {
   const rows = db.query(`SELECT seq, source_id, event_type, topic_id, payload_json, created_at
        FROM (
@@ -7028,6 +7049,13 @@ var init_runtime_events = __esm(async () => {
       payload_json TEXT NOT NULL,
       created_at TEXT NOT NULL
     )
+  `);
+    database.exec(`
+    CREATE TABLE IF NOT EXISTS runtime_event_consumers (
+      consumer_id TEXT PRIMARY KEY,
+      cursor INTEGER NOT NULL,
+      heartbeat_at INTEGER NOT NULL
+    )
   `);
     database.exec("CREATE INDEX IF NOT EXISTS idx_runtime_events_topic_seq ON runtime_events(topic_id, seq)");
   });
@@ -23008,6 +23036,7 @@ __export(exports_src, {
   reconcilePendingAskUserQuestionGates: () => reconcilePendingAskUserQuestionGates,
   reapOrphanBrowsers: () => reapPlaywrightOrphans,
   purgeTopicLogs: () => purgeTopicLogs,
+  pruneRuntimeEvents: () => pruneRuntimeEvents,
   prepareDeliveryAck: () => prepareDeliveryAck,
   onShutdown: () => onShutdown,
   normalizeVaultKey: () => normalizeVaultKey,
@@ -23047,6 +23076,7 @@ __export(exports_src, {
   isAgentKind: () => isAgentKind,
   interSessionQueue: () => interSessionQueue,
   ingestAttachment: () => ingestAttachment,
+  heartbeatRuntimeEventConsumer: () => heartbeatRuntimeEventConsumer,
   grantSubagentTellTarget: () => grantSubagentTellTarget,
   getVisibleTopics: () => getVisibleTopics,
   getTopics: () => getTopics,
@@ -23081,6 +23111,7 @@ __export(exports_src, {
   errMsg: () => errMsg,
   ensurePersonalGeneral: () => ensurePersonalGeneral,
   ensureBgBash: () => ensureBgBash,
+  earliestRuntimeEventSeq: () => earliestRuntimeEventSeq,
   dispatchPeerRuntimeVisual: () => dispatchPeerRuntimeVisual,
   dispatchPeerRuntimeSpawn: () => dispatchPeerRuntimeSpawn,
   dispatchPeerRuntimeSelfConfig: () => dispatchPeerRuntimeSelfConfig,
@@ -23579,6 +23610,7 @@ __export(exports_node_host, {
   reconcilePendingAskUserQuestionGates: () => reconcilePendingAskUserQuestionGates,
   reapOrphanBrowsers: () => reapPlaywrightOrphans,
   readDecisions: () => readDecisions,
+  pruneRuntimeEvents: () => pruneRuntimeEvents,
   onShutdown: () => onShutdown,
   nodeRequestHandlerNames: () => nodeRequestHandlerNames,
   logger: () => logger,
@@ -23602,6 +23634,7 @@ __export(exports_node_host, {
   flushBashrsCompletions: () => flushBashrsCompletions,
   executeVaultCommand: () => executeVaultCommand,
   ensurePersonalGeneral: () => ensurePersonalGeneral,
+  earliestRuntimeEventSeq: () => earliestRuntimeEventSeq,
   deleteVaultEntry: () => deleteVaultEntry,
   compactTopicSession: () => compactTopicSession,
   appendApiMessage: () => appendApiMessage,
@@ -29847,8 +29880,8 @@ function createPollingSseStream(req, options) {
         } catch {}
       };
       const send = (event, data, id) => {
-        if (closed)
-          return;
+        if (closed || controller.desiredSize !== null && controller.desiredSize <= 0)
+          return false;
         try {
           const lines = [
             id === undefined ? "" : `id: ${id}`,
@@ -29859,8 +29892,10 @@ function createPollingSseStream(req, options) {
           controller.enqueue(encoder.encode(`${lines}
 
 `));
+          return true;
         } catch (error2) {
           fail(error2);
+          return false;
         }
       };
       const close = () => {
@@ -29903,7 +29938,7 @@ function createPollingSseStream(req, options) {
         return;
       pollTimer = setInterval(pump, options.pollIntervalMs ?? 100);
       heartbeatTimer = setInterval(() => {
-        if (closed)
+        if (closed || controller.desiredSize !== null && controller.desiredSize <= 0)
           return;
         try {
           controller.enqueue(encoder.encode(`: heartbeat ${Date.now()}
@@ -29917,7 +29952,7 @@ function createPollingSseStream(req, options) {
     cancel() {
       stop();
     }
-  });
+  }, { highWaterMark: 64 });
   return new Response(stream, {
     headers: {
       "cache-control": "no-cache, no-transform",
@@ -30025,7 +30060,6 @@ function runtimeEvent(event) {
 }
 function createRuntimeContractEventStream(req, after, topicId, scope = {}) {
   const scoped = "surfaceScope" in scope;
-  const wanted = scope.surfaceScope ?? null;
   const visible = new Map;
   const eventInScope = (eventTopicId) => {
     if (!scoped)
@@ -30033,26 +30067,39 @@ function createRuntimeContractEventStream(req, after, topicId, scope = {}) {
     const cached = visible.get(eventTopicId);
     if (cached !== undefined)
       return cached;
-    const roomScope = getTopic(eventTopicId)?.surfaceScope ?? null;
-    const allowed = roomScope === null || roomScope === wanted;
+    const topic = getTopic(eventTopicId);
+    const allowed = Boolean(topic && topicInRequestScope(req, topic));
     visible.set(eventTopicId, allowed);
     return allowed;
   };
   let cursor = Math.max(0, after);
+  let reportedCursor = cursor;
+  const oldestCursor = earliestRuntimeEventSeq();
   return createPollingSseStream(req, {
-    ready: { v: NODE_RUNTIME_CONTRACT_VERSION, cursor },
+    ready: {
+      v: NODE_RUNTIME_CONTRACT_VERSION,
+      cursor,
+      oldestCursor,
+      truncated: oldestCursor > 0 && cursor < oldestCursor - 1
+    },
     pump(send) {
-      while (true) {
+      for (let batch = 0;batch < 5; batch += 1) {
         const events = listRuntimeEventsAfter(cursor, 500);
-        if (events.length === 0)
+        if (events.length === 0) {
+          if (reportedCursor < cursor && send("cursor", { cursor }, cursor))
+            reportedCursor = cursor;
           break;
+        }
         for (const event of events) {
-          cursor = event.seq;
           if ((!topicId || event.topicId === topicId) && eventInScope(event.topicId)) {
-            send("runtime", runtimeEvent(event), event.seq);
+            if (!send("runtime", runtimeEvent(event), event.seq))
+              return;
           }
+          cursor = event.seq;
         }
-        send("cursor", { cursor }, cursor);
+        if (!send("cursor", { cursor }, cursor))
+          return;
+        reportedCursor = cursor;
         if (events.length < 500)
           break;
       }
@@ -30062,15 +30109,24 @@ function createRuntimeContractEventStream(req, after, topicId, scope = {}) {
 function createEventStream(req, userId, after, surface) {
   const allowedTopics = new Set(topicsForUser(userId, surface).map((topic) => topic.id));
   let cursor = Math.max(0, after);
+  let reportedCursor = cursor;
+  const oldestCursor = earliestRuntimeEventSeq();
   return createPollingSseStream(req, {
-    ready: { protocolVersion: NODE_CONTROL_PROTOCOL_VERSION, cursor },
+    ready: {
+      protocolVersion: NODE_CONTROL_PROTOCOL_VERSION,
+      cursor,
+      oldestCursor,
+      truncated: oldestCursor > 0 && cursor < oldestCursor - 1
+    },
     pump(send) {
-      while (true) {
+      for (let batch = 0;batch < 5; batch += 1) {
         const events = listRuntimeEventsAfter(cursor, 500);
-        if (events.length === 0)
+        if (events.length === 0) {
+          if (reportedCursor < cursor && send("cursor", { cursor }, cursor))
+            reportedCursor = cursor;
           break;
+        }
         for (const event of events) {
-          cursor = event.seq;
           if (event.type === "topic-created" || event.type === "topic-updated") {
             const topic = getTopic(event.topicId);
             const admissible = topic && isParticipant(topic, userId) && (!surface || topic.surface === surface);
@@ -30080,12 +30136,15 @@ function createEventStream(req, userId, after, surface) {
               allowedTopics.delete(event.topicId);
           }
           const visible = allowedTopics.has(event.topicId);
-          if (visible)
-            send("runtime", runtimeEvent(event), event.seq);
+          if (visible && !send("runtime", runtimeEvent(event), event.seq))
+            return;
+          cursor = event.seq;
           if (event.type === "topic-deleted")
             allowedTopics.delete(event.topicId);
         }
-        send("cursor", { cursor }, cursor);
+        if (!send("cursor", { cursor }, cursor))
+          return;
+        reportedCursor = cursor;
         if (events.length < 500)
           break;
       }
@@ -32837,6 +32896,19 @@ function startNode(opts = {}) {
   setRuntimeMcpPort(port);
   const stopTurnRequests = startDurableTurnRequestWorker();
   const stopInbox = startSessionInboxWorker();
+  const pruneEventLog = () => {
+    try {
+      const result = pruneRuntimeEvents();
+      if (result.deleted > 0) {
+        logger.info(result, "runtime event log pruned");
+      }
+    } catch (err2) {
+      logger.warn({ err: err2 }, "runtime event log prune failed");
+    }
+  };
+  pruneEventLog();
+  const eventPruneTimer = setInterval(pruneEventLog, 5 * 60000);
+  eventPruneTimer.unref?.();
   const stopBashrsCompletions = startBashrsCompletionsWorker();
   let modules;
   try {
@@ -32851,6 +32923,7 @@ function startNode(opts = {}) {
   } catch (error2) {
     stopTurnRequests();
     stopInbox();
+    clearInterval(eventPruneTimer);
     stopBashrsCompletions();
     server.stop(true);
     processLease?.stop();
@@ -32877,6 +32950,7 @@ function startNode(opts = {}) {
     });
     stopTurnRequests();
     stopInbox();
+    clearInterval(eventPruneTimer);
     stopBashrsCompletions();
     server.stop(true);
     processLease?.stop();
@@ -32889,6 +32963,7 @@ function startNode(opts = {}) {
   onShutdown("node-server", 130, () => {
     stopTurnRequests();
     stopInbox();
+    clearInterval(eventPruneTimer);
     stopBashrsCompletions();
     server.stop(true);
   });
@@ -40807,6 +40882,11 @@ function createTables(db4) {
       key TEXT PRIMARY KEY,
       value TEXT NOT NULL
     )`);
+  db4.run(`CREATE TABLE IF NOT EXISTS runtime_inbox (
+      seq INTEGER PRIMARY KEY,
+      runtime_message_id TEXT,
+      event_json TEXT NOT NULL
+    )`);
 }
 function migrateOutboxSchema(db4) {
   try {
@@ -40817,6 +40897,13 @@ function migrateOutboxSchema(db4) {
   } catch {}
   db4.run("CREATE INDEX IF NOT EXISTS idx_telegram_outbox_runtime_message ON outbox(runtime_message_id)");
 }
+function migrateRuntimeInboxSchema(db4) {
+  try {
+    db4.run("ALTER TABLE runtime_inbox ADD COLUMN runtime_message_id TEXT");
+  } catch {}
+  db4.run(`CREATE UNIQUE INDEX IF NOT EXISTS idx_telegram_runtime_inbox_message
+     ON runtime_inbox(runtime_message_id) WHERE runtime_message_id IS NOT NULL`);
+}
 function openMappingStore(path) {
   const dbPath = path ?? join45(DATA_DIR, "adapter-telegram.db");
   if (dbPath !== ":memory:")
@@ -40825,6 +40912,7 @@ function openMappingStore(path) {
   migrateLegacySchema(db4);
   createTables(db4);
   migrateOutboxSchema(db4);
+  migrateRuntimeInboxSchema(db4);
   return {
     load() {
       const rows = db4.query("SELECT chat_id, thread_id, topic_id FROM mappings").all();
@@ -40898,6 +40986,40 @@ function openMappingStore(path) {
         entry.lastError ?? null
       ]);
     },
+    runtimeEventCursor() {
+      const row = db4.query("SELECT value FROM settings WHERE key = 'runtime_event_cursor'").get();
+      if (!row)
+        return;
+      const value = Number.parseInt(row.value, 10);
+      return Number.isSafeInteger(value) && value >= 0 ? value : undefined;
+    },
+    captureRuntimeEvent(event) {
+      const messageId = event.payload && typeof event.payload === "object" && "id" in event.payload && typeof event.payload.id === "string" ? event.payload.id : null;
+      db4.transaction(() => {
+        db4.run(`INSERT OR IGNORE INTO runtime_inbox (seq, runtime_message_id, event_json)
+           VALUES (?, ?, ?)`, [event.seq, messageId, JSON.stringify(event)]);
+        db4.run(`INSERT INTO settings (key, value) VALUES ('runtime_event_cursor', ?)
+           ON CONFLICT(key) DO UPDATE SET value = MAX(CAST(value AS INTEGER), CAST(excluded.value AS INTEGER))`, [String(event.seq)]);
+      })();
+    },
+    advanceRuntimeEventCursor(seq) {
+      db4.run(`INSERT INTO settings (key, value) VALUES ('runtime_event_cursor', ?)
+         ON CONFLICT(key) DO UPDATE SET value = MAX(CAST(value AS INTEGER), CAST(excluded.value AS INTEGER))`, [String(seq)]);
+    },
+    pendingRuntimeEvents() {
+      const rows = db4.query("SELECT seq, event_json FROM runtime_inbox ORDER BY seq ASC").all();
+      return rows.flatMap((row) => {
+        try {
+          return [{ seq: row.seq, event: JSON.parse(row.event_json) }];
+        } catch {
+          db4.run("DELETE FROM runtime_inbox WHERE seq = ?", [row.seq]);
+          return [];
+        }
+      });
+    },
+    acknowledgeRuntimeEvent(seq) {
+      db4.run("DELETE FROM runtime_inbox WHERE seq = ?", [seq]);
+    },
     outboxDue(now) {
       const rows = db4.query("SELECT * FROM outbox WHERE dead = 0 AND next_try_at <= ? ORDER BY id ASC").all(now);
       return rows.map(outboxRowToEntry);
@@ -41775,15 +41897,29 @@ function startTelegramAdapter(opts) {
   }
   const sendQueues = new Map;
   function enqueueSend(topicId, task) {
-    const prev = sendQueues.get(topicId) ?? Promise.resolve();
+    const prev = sendQueues.get(topicId) ?? Promise.resolve(true);
     const next = prev.then(() => new Promise((resolve24) => {
+      let settled = false;
       const timer = setTimeout(() => {
+        if (settled)
+          return;
+        settled = true;
         logger.warn({ topicId, sendTimeoutMs }, "telegram adapter: send timed out \u2014 abandoning it and continuing the queue");
-        resolve24();
+        resolve24(false);
       }, sendTimeoutMs);
-      task().catch((err2) => logger.warn({ err: err2, topicId }, "telegram adapter: send task failed")).finally(() => {
+      task().then(() => {
+        if (settled)
+          return;
+        settled = true;
         clearTimeout(timer);
-        resolve24();
+        resolve24(true);
+      }).catch((err2) => {
+        logger.warn({ err: err2, topicId }, "telegram adapter: send task failed");
+        if (settled)
+          return;
+        settled = true;
+        clearTimeout(timer);
+        resolve24(false);
       });
     }));
     sendQueues.set(topicId, next);
@@ -41791,13 +41927,14 @@ function startTelegramAdapter(opts) {
       if (sendQueues.get(topicId) === next)
         sendQueues.delete(topicId);
     });
+    return next;
   }
   function enqueueFanout(topicId, mappings, payload) {
     const targets = [...mappings];
-    enqueueSend(topicId, () => deliverToTargets(topicId, targets, payload));
+    enqueueSend(topicId, () => deliverToTargets(topicId, targets, payload)).then(payload.onSettled);
   }
   function enqueueTarget(topicId, target, payload) {
-    enqueueSend(topicId, () => deliverToTargets(topicId, [target], payload));
+    enqueueSend(topicId, () => deliverToTargets(topicId, [target], payload)).then(payload.onSettled);
   }
   const pendingByTopic = new Map;
   const permissionBlockedTopics = new Map;
@@ -41815,8 +41952,9 @@ function startTelegramAdapter(opts) {
     });
   }
   function flushBuffered(topicId, buffer, send) {
-    for (const payload of buffer)
-      enqueueSend(topicId, () => send(payload));
+    for (const payload of buffer) {
+      enqueueSend(topicId, () => send(payload)).then(payload.onSettled);
+    }
   }
   function materializeTopic(topic) {
     if (!forumManageTopicsAvailable || suppressMaterialize > 0 || byTopic.has(topic.id) || pendingByTopic.has(topic.id) || permissionBlockedTopics.has(topic.id) || materializeTombstones.has(topic.id)) {
@@ -41878,8 +42016,12 @@ function startTelegramAdapter(opts) {
     if (materializeTombstones.delete(topicId))
       store.deleteTombstone(topicId);
     const pending2 = pendingByTopic.get(topicId);
-    if (pending2)
+    if (pending2) {
       pending2.cancelled = true;
+      for (const payload of pending2.buffer)
+        payload.onSettled?.(true);
+      pending2.buffer = [];
+    }
     for (const [messageId, message] of runtimeMessages) {
       if (message.topicId === topicId)
         deleteDeliveredRuntimeMessage(topicId, messageId);
@@ -41926,7 +42068,7 @@ function startTelegramAdapter(opts) {
     }
     const tombstoneTitle = materializeTombstones.get(topicId);
     if (tombstoneTitle !== undefined) {
-      enqueueSend(topicId, () => deliverFallback(topicId, tombstoneTitle, payload));
+      enqueueSend(topicId, () => deliverFallback(topicId, tombstoneTitle, payload)).then(payload.onSettled);
       return true;
     }
     const topic = getTopic(topicId);
@@ -41934,7 +42076,7 @@ function startTelegramAdapter(opts) {
       return false;
     if (forumMode) {
       if (!forumManageTopicsAvailable || permissionBlockedTopics.has(topicId)) {
-        enqueueSend(topicId, () => deliverFallback(topicId, topic.title, payload));
+        enqueueSend(topicId, () => deliverFallback(topicId, topic.title, payload)).then(payload.onSettled);
         return true;
       }
       if (!materializeTopic(topic))
@@ -42382,6 +42524,113 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
     }
     linkForumAndAnnounce(update.from.id, update.chat, update.new_chat_member).catch((err2) => logger.warn({ err: err2, groupId: update.chat.id }, "telegram adapter: forum auto-connect failed"));
   });
+  async function deliverPersistedRuntimeMessage(event) {
+    const msg = event.payload;
+    if (msg.authorId === userId && msg.sourceAdapter === "telegram")
+      return true;
+    if (msg.kind === "tool")
+      return true;
+    const hasAttachments = Boolean(msg.attachments && msg.attachments.length > 0);
+    if (!msg.text && !hasAttachments)
+      return true;
+    const runtimeMessageId = msg.authorId === "ai" ? msg.id : undefined;
+    if (runtimeMessageId) {
+      runtimeMessages.set(runtimeMessageId, msg);
+      if (!msg.queryId) {
+        const timer = setTimeout(() => {
+          runtimeMessages.delete(runtimeMessageId);
+          deliveredByRuntimeMessageId.delete(runtimeMessageId);
+        }, 5 * 60000);
+        timer.unref?.();
+      }
+    }
+    const tagFiles = msg.text ? extractFileTagPaths(msg.text).map((path) => ({ path, filename: basename12(path) })) : [];
+    const attachmentFiles = hasAttachments ? (msg.attachments ?? []).map((attachment) => {
+      const path = resolveUploadedFilePathByFileId(attachment.id);
+      if (!path)
+        return null;
+      return {
+        path,
+        filename: basename12(attachment.filename) || basename12(path),
+        ...attachment.mimeType ? { mimeType: attachment.mimeType } : {}
+      };
+    }).filter((file) => file !== null) : [];
+    const files = [...tagFiles, ...attachmentFiles];
+    const rawText = tagFiles.length > 0 && msg.text ? stripFileTags(msg.text) : msg.text ?? "";
+    const text2 = msg.authorId === userId && rawText ? `[From: User] ${rawText}` : rawText;
+    if (!text2 && files.length === 0)
+      return true;
+    let settle;
+    const settled = new Promise((resolve24) => {
+      settle = resolve24;
+    });
+    const payload = {
+      text: text2,
+      files,
+      runtimeMessageId,
+      deliveryAckRequested: msg.deliveryAckRequested === true,
+      onSettled: settle
+    };
+    const routed = routeMessage(event.topicId, payload, msg.queryId);
+    if (routed && payload.deliveryAckRequested)
+      claimDeliveryAck(event.topicId, msg.id);
+    return routed ? settled : true;
+  }
+  const savedRuntimeEventCursor = store.runtimeEventCursor();
+  let runtimeEventCursor = savedRuntimeEventCursor ?? latestRuntimeEventSeq();
+  if (savedRuntimeEventCursor === undefined) {
+    store.advanceRuntimeEventCursor(runtimeEventCursor);
+  }
+  const runtimeEventConsumerId = `telegram:${userId}:${opts.mappingDbPath ?? "default"}`;
+  heartbeatRuntimeEventConsumer(runtimeEventConsumerId, runtimeEventCursor);
+  let pollingRuntimeEvents = false;
+  let drainingRuntimeInbox = false;
+  const drainRuntimeInbox = async () => {
+    if (drainingRuntimeInbox || stopped)
+      return;
+    drainingRuntimeInbox = true;
+    try {
+      while (!stopped) {
+        const pending2 = store.pendingRuntimeEvents()[0];
+        if (!pending2)
+          break;
+        const delivered = await deliverPersistedRuntimeMessage(pending2.event);
+        if (!delivered || stopped)
+          break;
+        store.acknowledgeRuntimeEvent(pending2.seq);
+      }
+    } catch (err2) {
+      if (!stopped)
+        logger.warn({ err: err2 }, "telegram adapter: durable runtime inbox drain failed");
+    } finally {
+      drainingRuntimeInbox = false;
+    }
+  };
+  const pollRuntimeEvents = () => {
+    if (pollingRuntimeEvents || stopped)
+      return;
+    pollingRuntimeEvents = true;
+    try {
+      for (let batch = 0;batch < 5; batch += 1) {
+        const events = listRuntimeEventsAfter(runtimeEventCursor, 500);
+        if (events.length === 0)
+          break;
+        for (const event of events) {
+          if (event.type === "message")
+            store.captureRuntimeEvent({ ...event, seq: event.seq });
+          else
+            store.advanceRuntimeEventCursor(event.seq);
+          runtimeEventCursor = event.seq;
+        }
+        if (events.length < 500)
+          break;
+      }
+      drainRuntimeInbox();
+      heartbeatRuntimeEventConsumer(runtimeEventConsumerId, runtimeEventCursor);
+    } finally {
+      pollingRuntimeEvents = false;
+    }
+  };
   const unsubscribe = runtimeBus().subscribe((event) => {
     if (stopped)
       return;
@@ -42394,22 +42643,22 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
       return;
     }
     if (event.type === "message-updated") {
-      const payload2 = event.payload;
-      if (!payload2.messageId || !payload2.patch)
+      const payload = event.payload;
+      if (!payload.messageId || !payload.patch)
         return;
-      if (payload2.patch.deleted) {
-        deleteDeliveredRuntimeMessage(event.topicId, payload2.messageId);
+      if (payload.patch.deleted) {
+        deleteDeliveredRuntimeMessage(event.topicId, payload.messageId);
         return;
       }
-      const current3 = runtimeMessages.get(payload2.messageId);
+      const current3 = runtimeMessages.get(payload.messageId);
       if (!current3)
         return;
-      const updated = { ...current3, ...payload2.patch };
-      runtimeMessages.set(payload2.messageId, updated);
-      if (footerEnabled && payload2.patch.usage && updated.authorId === "ai") {
+      const updated = { ...current3, ...payload.patch };
+      runtimeMessages.set(payload.messageId, updated);
+      if (footerEnabled && payload.patch.usage && updated.authorId === "ai") {
         const footer = renderTurnFooter(updated);
         if (footer)
-          attachUpdatedFooter(event.topicId, payload2.messageId, footer);
+          attachUpdatedFooter(event.topicId, payload.messageId, footer);
       }
       return;
     }
@@ -42432,53 +42681,10 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
       }
       return;
     }
-    if (event.type !== "message")
-      return;
-    const msg = event.payload;
-    if (msg.authorId === userId && msg.sourceAdapter === "telegram")
-      return;
-    if (msg.kind === "tool")
-      return;
-    const hasAttachments = Boolean(msg.attachments && msg.attachments.length > 0);
-    if (!msg.text && !hasAttachments)
-      return;
-    const runtimeMessageId = msg.authorId === "ai" ? msg.id : undefined;
-    if (runtimeMessageId) {
-      runtimeMessages.set(runtimeMessageId, msg);
-      if (!msg.queryId) {
-        const timer = setTimeout(() => {
-          runtimeMessages.delete(runtimeMessageId);
-          deliveredByRuntimeMessageId.delete(runtimeMessageId);
-        }, 5 * 60000);
-        timer.unref?.();
-      }
-    }
-    const tagFiles = msg.text ? extractFileTagPaths(msg.text).map((path) => ({ path, filename: basename12(path) })) : [];
-    const attachmentFiles = hasAttachments ? (msg.attachments ?? []).map((attachment) => {
-      const path = resolveUploadedFilePathByFileId(attachment.id);
-      if (!path)
-        return null;
-      return {
-        path,
-        filename: basename12(attachment.filename) || basename12(path),
-        ...attachment.mimeType ? { mimeType: attachment.mimeType } : {}
-      };
-    }).filter((file) => file !== null) : [];
-    const files = [...tagFiles, ...attachmentFiles];
-    const rawText = tagFiles.length > 0 && msg.text ? stripFileTags(msg.text) : msg.text ?? "";
-    const text2 = msg.authorId === userId && rawText ? `[From: User] ${rawText}` : rawText;
-    if (!text2 && files.length === 0)
-      return;
-    const payload = {
-      text: text2,
-      files,
-      runtimeMessageId,
-      deliveryAckRequested: msg.deliveryAckRequested === true
-    };
-    if (routeMessage(event.topicId, payload, msg.queryId) && payload.deliveryAckRequested) {
-      claimDeliveryAck(event.topicId, msg.id);
-    }
   });
+  pollRuntimeEvents();
+  const runtimeEventPollTimer = setInterval(pollRuntimeEvents, 100);
+  runtimeEventPollTimer.unref?.();
   if (forumMode) {
     bindMapping(forumChat, undefined, personalGeneral.id);
     materializeVisibleTopics();
@@ -42498,6 +42704,7 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
       for (const queryId of toolStatusByQueryId.keys())
         closeToolStatus(queryId);
       mediaIntake.stop();
+      clearInterval(runtimeEventPollTimer);
       unsubscribe();
       store.close();
     }
@@ -44809,8 +45016,18 @@ class TunnelClient {
     this.bridgedSockets.clear();
   }
   send(frame) {
-    if (this.ws?.readyState === WebSocket.OPEN)
-      this.ws.send(encodeFrame(frame));
+    const ws = this.ws;
+    if (!ws || ws.readyState !== WebSocket.OPEN)
+      return;
+    if (Number(ws.bufferedAmount ?? 0) > MAX_TUNNEL_BUFFERED_AMOUNT) {
+      this.disconnectActiveConnection(ws, this.connectionGeneration, { reason: "relay outbound buffer limit exceeded" }, true);
+      return;
+    }
+    try {
+      ws.send(encodeFrame(frame));
+    } catch {
+      this.disconnectActiveConnection(ws, this.connectionGeneration, { reason: "relay send failed" }, true);
+    }
   }
   handleFrame(frame) {
     switch (frame.type) {
@@ -44845,11 +45062,23 @@ class TunnelClient {
         break;
       case "http_req_chunk": {
         const pending2 = this.pendingHttp.get(frame.id);
+        if (!pending2)
+          break;
         try {
-          pending2?.bodyController?.enqueue(fromB64(frame.dataB64));
-          if (pending2)
-            this.startPendingHttp(frame.id, pending2);
-        } catch {}
+          if (!pending2.body)
+            throw new Error("body chunk received for bodyless request");
+          const chunk = fromB64(frame.dataB64);
+          pending2.receivedBytes += chunk.byteLength;
+          if (pending2.receivedBytes > MAX_HTTP_REQUEST_BODY_BYTES) {
+            throw new Error("relay HTTP request body limit exceeded");
+          }
+          pending2.bodyController?.enqueue(chunk);
+          this.startPendingHttp(frame.id, pending2);
+        } catch {
+          pending2.abort.abort();
+          this.pendingHttp.delete(frame.id);
+          throw new Error("invalid or oversized relay HTTP request body");
+        }
         break;
       }
       case "http_req_end": {
@@ -44880,6 +45109,12 @@ class TunnelClient {
         if (!bridged)
           break;
         if (!bridged.opened) {
+          bridged.bufferedBytes += frame.text === undefined ? Math.floor((frame.dataB64 ?? "").length * 3 / 4) : Buffer.byteLength(frame.text, "utf8");
+          if (bridged.bufferedBytes > MAX_PREOPEN_WEBSOCKET_BYTES) {
+            this.bridgedSockets.delete(frame.id);
+            bridged.ws.close(1009, "pre-open buffer limit exceeded");
+            throw new Error("bridged WebSocket pre-open buffer limit exceeded");
+          }
           bridged.buffer.push(frame);
           break;
         }
@@ -44899,6 +45134,11 @@ class TunnelClient {
     }
   }
   startHttpRequest(frame) {
+    if (this.pendingHttp.has(frame.id))
+      throw new Error("duplicate relay HTTP request id");
+    if (this.pendingHttp.size >= MAX_IN_FLIGHT_HTTP_REQUESTS) {
+      throw new Error("too many in-flight relay HTTP requests");
+    }
     const abort = new AbortController;
     const headers = new Headers;
     for (const [name, value] of frame.headers)
@@ -44910,7 +45150,8 @@ class TunnelClient {
       method: frame.method,
       path: frame.path,
       headers,
-      started: false
+      started: false,
+      receivedBytes: 0
     };
     if (frame.hasBody) {
       pending2.body = new ReadableStream({
@@ -44971,6 +45212,11 @@ class TunnelClient {
     }
   }
   openBridgedSocket(id, path, headers) {
+    if (this.bridgedSockets.has(id))
+      throw new Error("duplicate bridged WebSocket id");
+    if (this.bridgedSockets.size >= MAX_BRIDGED_SOCKETS) {
+      throw new Error("too many bridged WebSockets");
+    }
     const wsOrigin = this.opts.targetOrigin.replace(/^http/, "ws");
     let local;
     try {
@@ -44987,7 +45233,7 @@ class TunnelClient {
       });
       return;
     }
-    const bridged = { ws: local, opened: false, buffer: [] };
+    const bridged = { ws: local, opened: false, buffer: [], bufferedBytes: 0 };
     this.bridgedSockets.set(id, bridged);
     local.onopen = () => {
       bridged.opened = true;
@@ -44995,6 +45241,7 @@ class TunnelClient {
       for (const frame of bridged.buffer)
         this.deliverToLocal(local, frame);
       bridged.buffer = [];
+      bridged.bufferedBytes = 0;
     };
     local.onmessage = (event) => {
       if (typeof event.data === "string") {
@@ -45026,11 +45273,14 @@ class TunnelClient {
       local.send(fromB64(frame.dataB64));
   }
 }
-var MAX_WS_UPGRADE_HEADER_BYTES, WS_PROTOCOL_TOKEN, DEFAULT_MIN_RECONNECT_MS = 1000, DEFAULT_MAX_RECONNECT_MS = 30000, RECONNECT_JITTER_RATIO = 0.2, LIVENESS_INTERVALS = 3, noop = () => {}, silentLogger;
+var MAX_WS_UPGRADE_HEADER_BYTES, WS_PROTOCOL_TOKEN, DEFAULT_MIN_RECONNECT_MS = 1000, DEFAULT_MAX_RECONNECT_MS = 30000, MAX_IN_FLIGHT_HTTP_REQUESTS = 128, MAX_BRIDGED_SOCKETS = 128, MAX_HTTP_REQUEST_BODY_BYTES, MAX_PREOPEN_WEBSOCKET_BYTES, MAX_TUNNEL_BUFFERED_AMOUNT, RECONNECT_JITTER_RATIO = 0.2, LIVENESS_INTERVALS = 3, noop = () => {}, silentLogger;
 var init_tunnel_client = __esm(() => {
   init_relay_protocol();
   MAX_WS_UPGRADE_HEADER_BYTES = 32 * 1024;
   WS_PROTOCOL_TOKEN = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
+  MAX_HTTP_REQUEST_BODY_BYTES = 16 * 1024 * 1024;
+  MAX_PREOPEN_WEBSOCKET_BYTES = 1024 * 1024;
+  MAX_TUNNEL_BUFFERED_AMOUNT = 8 * 1024 * 1024;
   silentLogger = { info: noop, warn: noop, error: noop };
 });
 
@@ -47339,4 +47589,4 @@ switch (command) {
   }
 }
 
-//# debugId=C1F343985A31393664756E2164756E21
+//# debugId=A95E28BED5799E3A64756E2164756E21