negotium 0.7.1 → 0.9.0

package/dist/main.js

@@ -3708,7 +3708,7 @@ var exports_version = {};
 __export(exports_version, {
   NEGOTIUM_VERSION: () => NEGOTIUM_VERSION
 });
-var NEGOTIUM_VERSION = "0.7.1";
+var NEGOTIUM_VERSION = "0.9.0";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn2 } from "child_process";
@@ -7884,6 +7884,7 @@ __export(exports_api_topics, {
   upsertTopic: () => upsertTopic,
   stampUnscopedOtiumTopics: () => stampUnscopedOtiumTopics,
   setTopicSurfaces: () => setTopicSurfaces,
+  setTopicSurfaceScope: () => setTopicSurfaceScope,
   setTopicSessionId: () => setTopicSessionId,
   setSurfaceScopeRequired: () => setSurfaceScopeRequired,
   setDefaultSurfaceScope: () => setDefaultSurfaceScope,
@@ -8412,11 +8413,9 @@ function normalizedTitle(title) {
   return title.trim().toLowerCase();
 }
 function surfaceScopeForWrite(t) {
-  if (normalizeTopicSurface(t.surface ?? defaultTopicSurface()) !== "otium")
-    return null;
   if (t.surfaceScope !== undefined)
     return normalizeSurfaceScope(t.surfaceScope);
-  return defaultSurfaceScope();
+  return normalizeTopicSurface(t.surface ?? defaultTopicSurface()) === "otium" ? defaultSurfaceScope() : null;
 }
 function upsertTopic(t) {
   const normalized = normalizeTopicState({
@@ -8561,6 +8560,13 @@ function setTopicSurfaces(topicIds, surface) {
   })();
   return changed;
 }
+function setTopicSurfaceScope(topicId, surface, surfaceScope) {
+  const normalizedSurface = normalizeTopicSurface(surface);
+  const normalizedScope = normalizeSurfaceScope(surfaceScope);
+  const result = db.query(`UPDATE api_topics SET surface = ?, surface_scope = ?
+       WHERE id = ? AND (surface IS NOT ? OR surface_scope IS NOT ?)`).run(normalizedSurface, normalizedScope, topicId, normalizedSurface, normalizedScope);
+  return Number(result.changes ?? 0) > 0;
+}
 function getTopicByNameForUser(title, userId, lookupScope) {
   const opts = "scope" in lookupScope ? {} : lookupScope;
   const trimmed = title.trim();
@@ -11511,9 +11517,32 @@ var init_manager2 = __esm(async () => {
   }, 30 * 60 * 1000).unref();
 });
 
+// ../../packages/core/src/identifiers.ts
+function asUserId(value) {
+  return value;
+}
+function asTopicId(value) {
+  return value;
+}
+function asMessageId(value) {
+  return value;
+}
+function asRequestId(value) {
+  return value;
+}
+function asClientMessageId(value) {
+  return value;
+}
+function asTurnId(value) {
+  return value;
+}
+function asTurnSlotKey(value) {
+  return value;
+}
+
 // ../../packages/core/src/query/room-query-registry.ts
 function isolatedTurnRoomId(topicId, queryId) {
-  return `${topicId}${ISOLATED_TURN_ROOM_MARKER}${queryId}`;
+  return asTurnSlotKey(`${topicId}${ISOLATED_TURN_ROOM_MARKER}${queryId}`);
 }
 function isIsolatedTurnRoomId(roomId) {
   return roomId.includes(ISOLATED_TURN_ROOM_MARKER);
@@ -11642,6 +11671,7 @@ function createRoomQueryRegistry(host) {
   };
 }
 var ISOLATED_TURN_ROOM_MARKER = "::isolated-turn::";
+var init_room_query_registry = () => {};
 
 // ../../packages/core/src/query/types.ts
 var AbortReason;
@@ -11867,7 +11897,9 @@ var roomQueryRegistry, interSessionQueue;
 var init_active_rooms = __esm(async () => {
   init_logger();
   await init_runtime_leases();
+  init_room_query_registry();
   init_types2();
+  init_room_query_registry();
   roomQueryRegistry = createRoomQueryRegistry({
     instanceId: RUNTIME_INSTANCE_ID,
     internalAbortReason: "internal" /* Internal */,
@@ -19713,8 +19745,8 @@ function startAiTurn(params) {
   const askReplySources = params.askReplySources;
   const sessionRetried = params._sessionRetried === true;
   const emptyResponseRetried = params._emptyResponseRetried === true;
-  const queryId = params._queryId ?? randomUUID17();
-  const roomId = turnConcurrency === "isolated" ? isolatedTurnRoomId(topicId, queryId) : topicId;
+  const queryId = asTurnId(params._queryId ?? randomUUID17());
+  const roomId = turnConcurrency === "isolated" ? isolatedTurnRoomId(topicId, queryId) : asTurnSlotKey(topicId);
   const currentRuntimeEpoch = getRuntimeTopicEpoch(topic.id);
   const runtimeEpoch = params._runtimeEpoch ?? currentRuntimeEpoch;
   if (params._runtimeEpoch !== undefined && params._runtimeEpoch !== currentRuntimeEpoch) {
@@ -21518,12 +21550,13 @@ var init_runtime_gateway_submissions = __esm(async () => {
 // ../../packages/core/src/application/submit-runtime-gateway-turn.ts
 import { createHash as createHash9, randomUUID as randomUUID18 } from "crypto";
 function duplicateResult(submission, params, requestId, actorUserId, payloadHash) {
+  const sourceAdapter = params.sourceAdapter?.trim() || "runtime-gateway";
   const message = getApiMessage(submission.topicId, submission.messageId) ?? (params.silent ? {
     id: submission.messageId,
     topicId: params.topic.id,
     authorId: actorUserId,
     authorName: params.actorLabel,
-    sourceAdapter: "runtime-gateway",
+    sourceAdapter,
     sourceMessageId: params.clientMessageId,
     text: params.text,
     createdAt: submission.createdAt
@@ -21566,6 +21599,7 @@ function gatewayPayloadHash(params, requestId, actorUserId) {
 function submitRuntimeGatewayTurn(params) {
   const requestId = params.requestId ?? params.clientMessageId;
   const actorUserId = params.actorUserId ?? params.userId;
+  const sourceAdapter = params.sourceAdapter?.trim() || "runtime-gateway";
   const respond = params.respond ?? true;
   const payloadHash = gatewayPayloadHash(params, requestId, actorUserId);
   const existing = findRuntimeGatewaySubmission(params.clientMessageId, requestId);
@@ -21586,7 +21620,7 @@ function submitRuntimeGatewayTurn(params) {
     topicId: params.topic.id,
     authorId: actorUserId,
     authorName: params.actorLabel,
-    sourceAdapter: "runtime-gateway",
+    sourceAdapter,
     sourceMessageId: params.clientMessageId,
     text: params.text,
     ...attachments2?.length ? { attachments: attachments2 } : {},
@@ -24134,6 +24168,7 @@ __export(exports_src, {
   startAiTurn: () => startAiTurn,
   stampUnscopedOtiumTopics: () => stampUnscopedOtiumTopics,
   setTopicSurfaces: () => setTopicSurfaces,
+  setTopicSurfaceScope: () => setTopicSurfaceScope,
   setTopicSessionId: () => setTopicSessionId,
   setSurfaceScopeRequired: () => setSurfaceScopeRequired,
   setRuntimeMcpPort: () => setRuntimeMcpPort,
@@ -24295,6 +24330,13 @@ __export(exports_src, {
   bgBashContextCapability: () => bgBashContextCapability,
   backgroundSessionProgress: () => backgroundSessionProgress,
   attachmentPromptLine: () => attachmentPromptLine,
+  asUserId: () => asUserId,
+  asTurnSlotKey: () => asTurnSlotKey,
+  asTurnId: () => asTurnId,
+  asTopicId: () => asTopicId,
+  asRequestId: () => asRequestId,
+  asMessageId: () => asMessageId,
+  asClientMessageId: () => asClientMessageId,
   appendJsonlEntry: () => appendJsonlEntry,
   appendApiMessage: () => appendApiMessage,
   answerPendingAskUserQuestion: () => answerPendingAskUserQuestion,
@@ -24793,6 +24835,11 @@ __export(exports_node_host, {
   earliestRuntimeEventSeq: () => earliestRuntimeEventSeq,
   deleteVaultEntry: () => deleteVaultEntry,
   compactTopicSession: () => compactTopicSession,
+  asUserId: () => asUserId,
+  asTopicId: () => asTopicId,
+  asRequestId: () => asRequestId,
+  asMessageId: () => asMessageId,
+  asClientMessageId: () => asClientMessageId,
   appendApiMessage: () => appendApiMessage,
   acquireRuntimeProcessLease: () => acquireRuntimeProcessLease,
   abortAllRooms: () => abortAllRooms,
@@ -29407,7 +29454,6 @@ __export(exports_storage_public, {
   waitForRequiredRuntimeProcessLease: () => waitForRequiredRuntimeProcessLease,
   validateDecisionGraph: () => validateDecisionGraph,
   upsertTopic: () => upsertTopic,
-  updateTopicThreadId: () => updateTopicThreadId,
   updateTasks: () => updateTasks,
   updateDecisions: () => updateDecisions,
   updateApiMessageUsage: () => updateApiMessageUsage,
@@ -29429,21 +29475,12 @@ __export(exports_storage_public, {
   softDeleteApiMessage: () => softDeleteApiMessage,
   settleTopicArchiveJob: () => settleTopicArchiveJob,
   setTopicSurfaces: () => setTopicSurfaces,
+  setTopicSurfaceScope: () => setTopicSurfaceScope,
   setTopicSessionId: () => setTopicSessionId,
-  setTopicMcpExtra: () => setTopicMcpExtra,
-  setTopicMcpEnabled: () => setTopicMcpEnabled,
-  setTopicForkOrigin: () => setTopicForkOrigin,
-  setTopicDescription: () => setTopicDescription,
   setTopicBrief: () => setTopicBrief,
   setTopicArchiveState: () => setTopicArchiveState,
-  setTopicAgentAndSession: () => setTopicAgentAndSession,
-  setTopicAgentAndClearSession: () => setTopicAgentAndClearSession,
-  setTopicAgent: () => setTopicAgent,
   setSurfaceScopeRequired: () => setSurfaceScopeRequired,
-  setSessionForTopic: () => setSessionForTopic,
-  setLastShownConfig: () => setLastShownConfig,
   setGlobalAiName: () => setGlobalAiName,
-  setDmSessionId: () => setDmSessionId,
   setDefaultSurfaceScope: () => setDefaultSurfaceScope,
   setApiTopicConfig: () => setApiTopicConfig,
   setApiTopicAgent: () => setApiTopicAgent,
@@ -29459,8 +29496,6 @@ __export(exports_storage_public, {
   reparentTopicChildren: () => reparentTopicChildren,
   renderTaskList: () => renderTaskList,
   renderDecisionList: () => renderDecisionList,
-  renameTopic: () => renameTopic,
-  removeTopic: () => removeTopic,
   removeSentFilesForTopic: () => removeSentFilesForTopic,
   removeParticipantFromDB: () => removeParticipantFromDB,
   removeDeadRuntimeProcessLeases: () => removeDeadRuntimeProcessLeases,
@@ -29503,49 +29538,34 @@ __export(exports_storage_public, {
   hasActiveConversation: () => hasActiveConversation,
   grantSubagentTellTarget: () => grantSubagentTellTarget,
   getWikiDir: () => getWikiDir,
-  getUserConfig: () => getUserConfig,
   getTopicStats: () => getTopicStats,
   getTopicSessionId: () => getTopicSessionId,
-  getTopicNames: () => getTopicNames,
   getTopicMemoryOrigin: () => getTopicMemoryOrigin,
   getTopicMemoryFilePaths: () => getTopicMemoryFilePaths,
-  getTopicMcpConfig: () => getTopicMcpConfig,
-  getTopicDescription: () => getTopicDescription,
   getTopicByNameForUser: () => getTopicByNameForUser,
   getTopicByNameAndKind: () => getTopicByNameAndKind,
   getTopicByName: () => getTopicByName,
   getTopicBrief: () => getTopicBrief,
   getTopicArchiveState: () => getTopicArchiveState,
-  getTopicAgentSwitchState: () => getTopicAgentSwitchState,
-  getTopicAgent: () => getTopicAgent,
   getTopic: () => getTopic,
   getThreadSummaries: () => getThreadSummaries,
   getTaskFilePath: () => getTaskFilePath,
   getStats: () => getStats,
   getSharedWikiDir: () => getSharedWikiDir,
-  getSessionForTopic: () => getSessionForTopic,
   getRuntimeProcessLease: () => getRuntimeProcessLease,
   getMessagesForTopicAfterRowid: () => getMessagesForTopicAfterRowid,
   getManagerTopicForUser: () => getManagerTopicForUser,
-  getLastShownConfig: () => getLastShownConfig,
   getLastMessagePreviews: () => getLastMessagePreviews,
   getGlobalAiName: () => getGlobalAiName,
-  getForumTopicByName: () => getTopicByName2,
-  getDmSessionId: () => getDmSessionId,
   getDecisionGraphSvgPath: () => getDecisionGraphSvgPath,
   getDecisionFilePath: () => getDecisionFilePath,
   getConversationPath: () => getConversationPath,
-  getCommunicateThreadId: () => getCommunicateThreadId,
   getApiTopicConfig: () => getApiTopicConfig,
   getApiMessage: () => getApiMessage,
-  getAllUserIds: () => getAllUserIds,
-  getAllTopics: () => getAllTopics,
   getAllMessagesForTopic: () => getAllMessagesForTopic,
   getActiveConversationPath: () => getActiveConversationPath,
   forum: () => exports_forum,
   formatTopicArchiveTranscriptRecord: () => formatTopicArchiveTranscriptRecord,
-  flushSessionCache: () => flushSessionCache,
-  findUserByThread: () => findUserByThread,
   findTopicTitleConflict: () => findTopicTitleConflict,
   findRecentUserMessage: () => findRecentUserMessage,
   findLastSessionIdForAgent: () => findLastSessionIdForAgent,
@@ -29573,10 +29593,8 @@ __export(exports_storage_public, {
   configureStorageHost: () => configureStorageHost2,
   cloneConversationLog: () => cloneConversationLog,
   clearTopicSessionId: () => clearTopicSessionId,
-  clearSessionForTopic: () => clearSessionForTopic,
   clearPendingAskSources: () => clearPendingAskSources,
   clearPendingAsk: () => clearPendingAsk,
-  clearDmSessionId: () => clearDmSessionId,
   claimTopicArchiveJob: () => claimTopicArchiveJob,
   claimAskUserGateAndSelect: () => claimAskUserGateAndSelect,
   captureMessageSnapshotForTopic: () => captureMessageSnapshotForTopic,
@@ -29596,7 +29614,6 @@ __export(exports_storage_public, {
   apiMessages: () => exports_api_messages,
   anonymizeApiMessages: () => anonymizeApiMessages,
   aiMentionFromMode: () => aiMentionFromMode,
-  addTopic: () => addTopic,
   addParticipantToDB: () => addParticipantToDB,
   activityLog: () => exports_activity_log,
   acquireRuntimeProcessLease: () => acquireRuntimeProcessLease,
@@ -29628,7 +29645,6 @@ var init_storage_public = __esm(async () => {
   await init_decisions();
   init_decisions();
   await init_forum();
-  await init_forum();
   await init_runtime_process_leases();
   init_runtime_process_leases();
   await init_session_asks();
@@ -29643,7 +29659,6 @@ var init_storage_public = __esm(async () => {
   await init_topic_archive_state();
   init_topic_archive_state();
   await init_topic_settings();
-  init_topic_settings();
   await init_wiki();
   init_wiki();
   init_wiki_summary_names();
@@ -30958,8 +30973,376 @@ var init_src3 = __esm(() => {
 });
 
 // ../../packages/core/src/runtime-gateway.ts
-var RUNTIME_GATEWAY_VERSION = 1, RUNTIME_GATEWAY_CONTROL_PATH = "/api/v1/control/runtime/v1";
-var init_runtime_gateway = () => {};
+function record(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+async function json(response) {
+  try {
+    return await response.json();
+  } catch {
+    throw new RuntimeGatewayError("Runtime Gateway returned invalid JSON", "protocol", response.status);
+  }
+}
+function validHealth(value) {
+  const body = record(value);
+  return Boolean(body?.ok === true && body.v === RUNTIME_GATEWAY_VERSION && Array.isArray(body.capabilities) && typeof body.cursor === "number");
+}
+function validAcknowledgedMessage(value) {
+  const message = record(value);
+  return Boolean(message && typeof message.id === "string" && typeof message.topicId === "string" && typeof message.authorId === "string" && typeof message.text === "string" && typeof message.createdAt === "string");
+}
+function validTurnAck(value) {
+  const body = record(value);
+  return Boolean(body?.ok === true && body.v === RUNTIME_GATEWAY_VERSION && body.accepted === true && typeof body.deduplicated === "boolean" && typeof body.requestId === "string" && typeof body.clientMessageId === "string" && typeof body.topicId === "string" && typeof body.messageId === "string" && (body.message === undefined || validAcknowledgedMessage(body.message)) && typeof body.cursor === "number");
+}
+function validManagerTopic(value) {
+  const topic = record(value);
+  return Boolean(typeof topic?.id === "string" && typeof topic.title === "string" && topic.kind === "manager" && Array.isArray(topic.participants));
+}
+function validDeletedMessage(value) {
+  const message = record(value);
+  return Boolean(typeof message?.id === "string" && typeof message.topicId === "string" && typeof message.authorId === "string" && typeof message.text === "string" && message.deleted === true && typeof message.createdAt === "string");
+}
+function validCronJob(value) {
+  const job = record(value);
+  return Boolean(typeof job?.id === "string" && typeof job.name === "string" && typeof job.executionPrincipalUserId === "string" && typeof job.actorOwnerUserId === "string" && typeof job.topicId === "string" && typeof job.schedule === "string" && typeof job.enabled === "boolean" && typeof job.nextRunAt === "string" && typeof job.canMutate === "boolean");
+}
+async function* parseRuntimeGatewaySse(body) {
+  const reader = body.getReader();
+  const decoder = new TextDecoder;
+  let buffer = "";
+  let event = "message";
+  let id;
+  let data = [];
+  const flush = () => {
+    if (data.length === 0)
+      return null;
+    const raw = data.join(`
+`);
+    data = [];
+    try {
+      return { event, id, data: JSON.parse(raw) };
+    } catch {
+      throw new RuntimeGatewayError("Runtime Gateway SSE event has invalid JSON", "protocol");
+    } finally {
+      event = "message";
+      id = undefined;
+    }
+  };
+  try {
+    while (true) {
+      const chunk = await reader.read();
+      if (chunk.done)
+        break;
+      buffer += decoder.decode(chunk.value, { stream: true }).replace(/\r\n/g, `
+`);
+      let newline = buffer.indexOf(`
+`);
+      while (newline >= 0) {
+        const line = buffer.slice(0, newline);
+        buffer = buffer.slice(newline + 1);
+        if (line === "") {
+          const parsed2 = flush();
+          if (parsed2)
+            yield parsed2;
+        } else if (line.startsWith("event:")) {
+          event = line.slice(6).trim() || "message";
+        } else if (line.startsWith("id:")) {
+          const parsed2 = Number.parseInt(line.slice(3).trim(), 10);
+          if (Number.isFinite(parsed2))
+            id = parsed2;
+        } else if (line.startsWith("data:")) {
+          data.push(line.slice(5).trimStart());
+        }
+        newline = buffer.indexOf(`
+`);
+      }
+    }
+    buffer += decoder.decode();
+    if (buffer.startsWith("data:"))
+      data.push(buffer.slice(5).trimStart());
+    const parsed = flush();
+    if (parsed)
+      yield parsed;
+  } finally {
+    reader.releaseLock();
+  }
+}
+
+class RuntimeGatewayClient {
+  options;
+  pathPrefix;
+  request;
+  requestTimeoutMs;
+  compactTimeoutMs;
+  constructor(options) {
+    this.options = options;
+    this.pathPrefix = options.pathPrefix ?? RUNTIME_GATEWAY_CONTROL_PATH;
+    this.request = options.fetch ?? fetch;
+    this.requestTimeoutMs = options.requestTimeoutMs ?? 5000;
+    this.compactTimeoutMs = options.compactTimeoutMs ?? 5 * 60000;
+  }
+  endpoint(path) {
+    if (!this.options.baseUrl || !this.options.token) {
+      throw new RuntimeGatewayError("Runtime Gateway is not configured", "config");
+    }
+    return `${this.options.baseUrl.replace(/\/+$/, "")}${this.pathPrefix}${path}`;
+  }
+  async authorization() {
+    try {
+      const token = typeof this.options.token === "function" ? await this.options.token() : this.options.token;
+      return `Bearer ${token}`;
+    } catch (error2) {
+      throw new RuntimeGatewayError(error2 instanceof Error ? error2.message : "Runtime Gateway token resolution failed", "config");
+    }
+  }
+  async send(path, init, timeoutMs) {
+    const authorization = await this.authorization();
+    try {
+      return await this.request(this.endpoint(path), {
+        ...init,
+        headers: { authorization, ...init.headers },
+        signal: timeoutMs === undefined ? init.signal : AbortSignal.timeout(timeoutMs)
+      });
+    } catch (error2) {
+      if (error2 instanceof DOMException && error2.name === "TimeoutError") {
+        throw new RuntimeGatewayError("Runtime Gateway request timed out", "timeout");
+      }
+      throw new RuntimeGatewayError("Runtime Gateway request failed", "transport");
+    }
+  }
+  async health() {
+    const response = await this.send("/health", { method: "GET" }, this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError("Runtime Gateway health request failed", "http", response.status);
+    }
+    const body = await json(response);
+    if (!validHealth(body)) {
+      throw new RuntimeGatewayError("Runtime Gateway health response is incompatible", "protocol");
+    }
+    return body;
+  }
+  async submitTurn(input) {
+    const response = await this.send("/turns", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, ...input })
+    }, this.requestTimeoutMs);
+    if (response.status !== 202) {
+      throw new RuntimeGatewayError("Runtime Gateway turn was not accepted", "http", response.status);
+    }
+    const body = await json(response);
+    if (!validTurnAck(body)) {
+      throw new RuntimeGatewayError("Runtime Gateway turn acknowledgement is incompatible", "protocol");
+    }
+    return body;
+  }
+  async deriveTopic(topicId, input) {
+    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/derive`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, ...input })
+    }, this.requestTimeoutMs);
+    if (response.status !== 201) {
+      throw new RuntimeGatewayError("Runtime Gateway topic derive failed", "http", response.status);
+    }
+    const body = await json(response);
+    const topic = record(body)?.topic;
+    const topicRecord = record(topic);
+    if (!topicRecord || typeof topicRecord.id !== "string" || typeof topicRecord.title !== "string") {
+      throw new RuntimeGatewayError("Runtime Gateway topic derive response is incompatible", "protocol");
+    }
+    return topic;
+  }
+  async ensureManagerTopic(userId) {
+    const response = await this.send("/manager-topic", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, userId })
+    }, this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError("Runtime Gateway manager topic request failed", "http", response.status);
+    }
+    const body = record(await json(response));
+    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION || !validManagerTopic(body.topic)) {
+      throw new RuntimeGatewayError("Runtime Gateway manager topic response is incompatible", "protocol");
+    }
+    return body.topic;
+  }
+  async deleteMessage(topicId, messageId, actorUserId, allowAdmin = false) {
+    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/messages/${encodeURIComponent(messageId)}`, {
+      method: "DELETE",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        v: RUNTIME_GATEWAY_VERSION,
+        actorUserId,
+        ...allowAdmin ? { allowAdmin: true } : {}
+      })
+    }, this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError("Runtime Gateway message delete failed", "http", response.status);
+    }
+    const body = record(await json(response));
+    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION || !validDeletedMessage(body.message)) {
+      throw new RuntimeGatewayError("Runtime Gateway message delete response is incompatible", "protocol");
+    }
+    return body.message;
+  }
+  async cronRequest(path, init) {
+    const response = await this.send(path, init, this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError("Runtime Gateway cron request failed", "http", response.status);
+    }
+    const body = record(await json(response));
+    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION) {
+      throw new RuntimeGatewayError("Runtime Gateway cron response is incompatible", "protocol");
+    }
+    return body;
+  }
+  async listCronScripts() {
+    const body = await this.cronRequest("/cron/scripts", { method: "GET" });
+    if (!Array.isArray(body.scripts) || !body.scripts.every((value) => typeof value === "string")) {
+      throw new RuntimeGatewayError("Runtime Gateway cron scripts are incompatible", "protocol");
+    }
+    return body.scripts;
+  }
+  async listCronJobs(userId, actorUserId, actorIsAdmin = false) {
+    const search = new URLSearchParams({
+      user: userId,
+      actorUserId,
+      actorIsAdmin: actorIsAdmin ? "1" : "0"
+    });
+    const body = await this.cronRequest(`/cron/jobs?${search}`, { method: "GET" });
+    if (!Array.isArray(body.jobs) || !body.jobs.every(validCronJob)) {
+      throw new RuntimeGatewayError("Runtime Gateway cron jobs are incompatible", "protocol");
+    }
+    return body.jobs;
+  }
+  async createCronJob(input) {
+    const body = await this.cronRequest("/cron/jobs", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, ...input })
+    });
+    if (!validCronJob(body.job)) {
+      throw new RuntimeGatewayError("Runtime Gateway cron job is incompatible", "protocol");
+    }
+    return body.job;
+  }
+  async updateCronJob(jobId, userId, actorUserId, patch, actorIsAdmin = false) {
+    const body = await this.cronRequest(`/cron/jobs/${encodeURIComponent(jobId)}`, {
+      method: "PATCH",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        v: RUNTIME_GATEWAY_VERSION,
+        userId,
+        actorUserId,
+        actorIsAdmin,
+        patch
+      })
+    });
+    if (!validCronJob(body.job)) {
+      throw new RuntimeGatewayError("Runtime Gateway cron job is incompatible", "protocol");
+    }
+    return body.job;
+  }
+  async deleteCronJob(jobId, userId, actorUserId, actorIsAdmin = false) {
+    const search = new URLSearchParams({
+      user: userId,
+      actorUserId,
+      actorIsAdmin: actorIsAdmin ? "1" : "0"
+    });
+    const body = await this.cronRequest(`/cron/jobs/${encodeURIComponent(jobId)}?${search}`, {
+      method: "DELETE"
+    });
+    if (typeof body.deleted !== "string") {
+      throw new RuntimeGatewayError("Runtime Gateway cron delete is incompatible", "protocol");
+    }
+    return body.deleted;
+  }
+  async* events(after, topicId, signal) {
+    const search = new URLSearchParams({ after: String(Math.max(0, after)) });
+    if (topicId)
+      search.set("topicId", topicId);
+    const response = await this.send(`/events?${search}`, { method: "GET", signal });
+    if (!response.ok || !response.body) {
+      throw new RuntimeGatewayError("Runtime Gateway event stream failed", "http", response.status);
+    }
+    yield* parseRuntimeGatewaySse(response.body);
+  }
+  async getTopicUsage(topicId, userId) {
+    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/usage?user=${encodeURIComponent(userId)}`, { method: "GET" }, this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError("Runtime Gateway topic usage request failed", "http", response.status);
+    }
+    const usage = record(record(await json(response))?.usage);
+    const read = (key) => {
+      const value = usage?.[key];
+      return typeof value === "number" && Number.isFinite(value) ? value : 0;
+    };
+    return {
+      queries: read("queries"),
+      inputTokens: read("inputTokens"),
+      outputTokens: read("outputTokens"),
+      cacheCreationInputTokens: read("cacheCreationInputTokens"),
+      cacheReadInputTokens: read("cacheReadInputTokens"),
+      estimatedCostUsd: read("estimatedCostUsd")
+    };
+  }
+  async abortTurn(topicId, userId) {
+    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/abort`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ v: RUNTIME_GATEWAY_VERSION, userId })
+    }, this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError("Runtime Gateway turn abort failed", "http", response.status);
+    }
+    const body = record(await json(response));
+    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION || typeof body.aborted !== "boolean") {
+      throw new RuntimeGatewayError("Runtime Gateway turn abort response is incompatible", "protocol");
+    }
+    return body.aborted;
+  }
+  async resetSession(topicId, userId, reason, actorUserId) {
+    return this.sessionCommand(topicId, userId, "reset", reason, actorUserId);
+  }
+  async compactSession(topicId, userId, reason, actorUserId) {
+    return this.sessionCommand(topicId, userId, "compact", reason, actorUserId);
+  }
+  async sessionCommand(topicId, userId, command, reason, actorUserId) {
+    const response = await this.send(`/topics/${encodeURIComponent(topicId)}/session/${command}`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        v: RUNTIME_GATEWAY_VERSION,
+        userId,
+        ...actorUserId ? { actorUserId } : {},
+        ...reason ? { reason } : {}
+      })
+    }, command === "compact" ? this.compactTimeoutMs : this.requestTimeoutMs);
+    if (!response.ok) {
+      throw new RuntimeGatewayError(`Runtime Gateway session ${command} failed`, "http", response.status);
+    }
+    const body = record(await json(response));
+    if (body?.ok !== true || body.v !== RUNTIME_GATEWAY_VERSION) {
+      throw new RuntimeGatewayError(`Runtime Gateway session ${command} response is incompatible`, "protocol");
+    }
+    return typeof body.result === "string" ? body.result : undefined;
+  }
+}
+var RUNTIME_GATEWAY_VERSION = 1, RUNTIME_GATEWAY_CONTROL_PATH = "/api/v1/control/runtime/v1", RuntimeGatewayError;
+var init_runtime_gateway = __esm(() => {
+  RuntimeGatewayError = class RuntimeGatewayError extends Error {
+    kind;
+    status;
+    constructor(message, kind, status) {
+      super(message);
+      this.kind = kind;
+      this.status = status;
+    }
+  };
+});
 
 // ../../packages/core/src/cron-host.ts
 var init_cron_host = __esm(async () => {
@@ -33542,21 +33925,22 @@ function createNodeControlHandler(options) {
           const body = await bodyRecord(req);
           if (body.v !== NODE_RUNTIME_CONTRACT_VERSION)
             return jsonError(400, "Unsupported v");
-          const topicId = requiredText(body.topicId, "topicId");
+          const topicId = asTopicId(requiredText(body.topicId, "topicId"));
           const turnTopic = getTopic(topicId);
           if (turnTopic && !topicInRequestScope(req, turnTopic)) {
             return jsonError(404, "Topic not found");
           }
-          const userId = requiredText(body.userId, "userId");
-          const actorUserId = body.actorUserId === undefined ? undefined : requiredText(body.actorUserId, "actorUserId");
+          const userId = asUserId(requiredText(body.userId, "userId"));
+          const actorUserId = body.actorUserId === undefined ? undefined : asUserId(requiredText(body.actorUserId, "actorUserId"));
           const actorLabel = body.actorLabel === undefined ? undefined : requiredText(body.actorLabel, "actorLabel");
-          const vaultUserId = body.vaultUserId === undefined ? undefined : requiredText(body.vaultUserId, "vaultUserId");
+          const vaultUserId = body.vaultUserId === undefined ? undefined : asUserId(requiredText(body.vaultUserId, "vaultUserId"));
+          const sourceAdapter = body.sourceAdapter === undefined ? undefined : requiredText(body.sourceAdapter, "sourceAdapter");
           if (typeof body.text !== "string")
             throw new ControlRequestError("text is required");
           const text2 = body.text;
-          const clientMessageId = requiredText(body.clientMessageId, "clientMessageId");
-          const requestId = body.requestId === undefined ? undefined : requiredText(body.requestId, "requestId");
-          const threadRootId = body.threadRootId === undefined ? undefined : requiredText(body.threadRootId, "threadRootId");
+          const clientMessageId = asClientMessageId(requiredText(body.clientMessageId, "clientMessageId"));
+          const requestId = body.requestId === undefined ? undefined : asRequestId(requiredText(body.requestId, "requestId"));
+          const threadRootId = body.threadRootId === undefined ? undefined : asMessageId(requiredText(body.threadRootId, "threadRootId"));
           const attachments2 = body.attachments === undefined ? [] : Array.isArray(body.attachments) && body.attachments.every((value) => typeof value === "string" && value.trim()) ? body.attachments : (() => {
             throw new ControlRequestError("attachments must be an array of file ids");
           })();
@@ -33584,6 +33968,7 @@ function createNodeControlHandler(options) {
             actorUserId,
             actorLabel,
             vaultUserId,
+            sourceAdapter,
             text: text2,
             clientMessageId,
             requestId,
@@ -33604,6 +33989,7 @@ function createNodeControlHandler(options) {
             clientMessageId: submission.clientMessageId,
             topicId: submission.topicId,
             messageId: submission.messageId,
+            message: submission.message,
             cursor: submission.ackCursor
           }, { status: 202 });
         }
@@ -36468,7 +36854,7 @@ function parseVisualizationReference(value) {
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
     return null;
   const keys = Object.keys(parsed);
-  if (keys.length < 1 || keys.length > 2 || keys.some((key) => key !== "path" && key !== "mode")) {
+  if (keys.length < 1 || keys.length > 3 || keys.some((key) => key !== "path" && key !== "mode" && key !== "title")) {
     return null;
   }
   const candidate = parsed;
@@ -36477,13 +36863,17 @@ function parseVisualizationReference(value) {
   }
   if (candidate.mode !== undefined && candidate.mode !== "wide")
     return null;
+  if (candidate.title !== undefined && (typeof candidate.title !== "string" || candidate.title.length === 0 || candidate.title.length > MAX_VISUALIZATION_TITLE_LENGTH || hasControlCharacter(candidate.title))) {
+    return null;
+  }
   return {
     path: candidate.path,
     name: basename12(candidate.path) || candidate.path,
-    ...candidate.mode === "wide" ? { mode: "wide" } : {}
+    ...candidate.mode === "wide" ? { mode: "wide" } : {},
+    ...typeof candidate.title === "string" ? { title: candidate.title } : {}
   };
 }
-var VISUALIZE_PREFIX = "\uE200visualize\uE202", VISUALIZE_SUFFIX = "\uE201", MAX_VISUALIZATION_REFERENCE_LENGTH = 8192, MAX_VISUALIZATION_PATH_LENGTH = 4096;
+var VISUALIZE_PREFIX = "\uE200visualize\uE202", VISUALIZE_SUFFIX = "\uE201", MAX_VISUALIZATION_REFERENCE_LENGTH = 8192, MAX_VISUALIZATION_PATH_LENGTH = 4096, MAX_VISUALIZATION_TITLE_LENGTH = 200;
 var init_visualization = () => {};
 
 // ../../adapters/terminal/src/render.ts
@@ -36934,7 +37324,8 @@ function renderMarkdown(value, width) {
     if (visualization) {
       flushTable();
       const mode = visualization.mode ? ` \xB7 ${visualization.mode}` : "";
-      result.push(line(`  \u25C7 visualization${mode} \xB7 ${visualization.name}`, {
+      const label = visualization.title ?? visualization.name;
+      result.push(line(`  \u25C7 visualization${mode} \xB7 ${label}`, {
         fg: theme.cyan,
         bg: theme.surfaceRaised,
         bold: true
@@ -38628,6 +39019,22 @@ __export(exports_client, {
   INITIAL_MESSAGE_HISTORY_LIMIT: () => INITIAL_MESSAGE_HISTORY_LIMIT,
   EmbeddedNegotiumClient: () => EmbeddedNegotiumClient
 });
+import { randomUUID as randomUUID28 } from "crypto";
+function terminalClientMessageId() {
+  return `terminal:${randomUUID28()}`;
+}
+function retryableGatewaySubmission(error2) {
+  return error2 instanceof RuntimeGatewayError && (error2.kind === "transport" || error2.kind === "timeout" || error2.kind === "http" && (error2.status ?? 0) >= 500);
+}
+async function submitTerminalGatewayTurn(gateway, input) {
+  try {
+    return await gateway.submitTurn(input);
+  } catch (error2) {
+    if (!retryableGatewaySubmission(error2))
+      throw error2;
+    return gateway.submitTurn(input);
+  }
+}
 
 class EmbeddedNegotiumClient {
   #userId;
@@ -38757,11 +39164,14 @@ class EmbeddedNegotiumClient {
     await topicService.delete({ topicId: topic.id, userId: this.#userId });
   }
   sendMessage(topic, text2) {
-    return submitUserMessage({
+    const clientMessageId = terminalClientMessageId();
+    return submitRuntimeGatewayTurn({
       topic,
       userId: this.#userId,
       text: text2,
       sourceAdapter: "terminal",
+      clientMessageId,
+      requestId: clientMessageId,
       visualTools: false,
       fileDeliveryTools: false
     }).message;
@@ -38822,6 +39232,7 @@ class RemoteNegotiumClient {
   #userId;
   #baseUrl;
   #token;
+  #gateway;
   #onEvent = null;
   #eventAbort = null;
   #eventTask = null;
@@ -38833,6 +39244,7 @@ class RemoteNegotiumClient {
       throw new Error("Remote node control requires HTTPS or loopback HTTP");
     }
     this.#token = options.token;
+    this.#gateway = new RuntimeGatewayClient({ baseUrl: this.#baseUrl, token: this.#token });
   }
   async start(onEvent) {
     if (this.#started)
@@ -38949,11 +39361,26 @@ class RemoteNegotiumClient {
     await this.#request(`/topics/${encodeURIComponent(topic.id)}?user=${encodeURIComponent(this.#userId)}`, { method: "DELETE" });
   }
   async sendMessage(topic, text2) {
-    const result = await this.#request(`/topics/${encodeURIComponent(topic.id)}/messages`, {
-      method: "POST",
-      body: JSON.stringify({ userId: this.#userId, text: text2 })
+    const clientMessageId = terminalClientMessageId();
+    const acknowledgement = await submitTerminalGatewayTurn(this.#gateway, {
+      topicId: topic.id,
+      userId: this.#userId,
+      sourceAdapter: "terminal",
+      text: text2,
+      clientMessageId,
+      requestId: clientMessageId,
+      visualTools: false,
+      fileDeliveryTools: false
     });
-    return result.message;
+    return acknowledgement.message ?? {
+      id: acknowledgement.messageId,
+      topicId: topic.id,
+      authorId: this.#userId,
+      sourceAdapter: "terminal",
+      sourceMessageId: clientMessageId,
+      text: text2,
+      createdAt: new Date().toISOString()
+    };
   }
   async answerQuestion(topicId, messageId, label) {
     try {
@@ -39133,6 +39560,7 @@ class RemoteNegotiumClient {
 var MESSAGE_HISTORY_PAGE_SIZE = 50, INITIAL_MESSAGE_HISTORY_PAGE_COUNT = 3, INITIAL_MESSAGE_HISTORY_LIMIT;
 var init_client = __esm(async () => {
   await init_src();
+  init_runtime_gateway();
   await init_storage_public();
   await init_src5();
   await init_history_store();
@@ -42719,12 +43147,15 @@ var init_telegram_api = __esm(() => {
 });
 
 // ../../adapters/telegram/src/commands.ts
-function resolveTelegramTopicArg(argument, userId) {
-  const byName = getTopicByNameForUser(argument, userId, { surface: "telegram" });
+function resolveTelegramTopicArg(argument, userId, surfaceScope) {
+  const byName = getTopicByNameForUser(argument, userId, {
+    surface: "telegram",
+    surfaceScope
+  });
   if (byName)
     return byName;
   const byId = getTopic(argument);
-  return byId?.surface === "telegram" ? byId : null;
+  return byId?.surface === "telegram" && (byId.surfaceScope ?? null) === surfaceScope ? byId : null;
 }
 function createTelegramCommandRouter(context) {
   const { userId, reply, currentTopicId, bindMapping, loadTopic, unloadTopic, abortTurn } = context;
@@ -42762,7 +43193,7 @@ function createTelegramCommandRouter(context) {
           return;
         }
         try {
-          const topic = context.getOrCreateTopic(`${context.titleFor(chatId, threadId)}-${argument}`, argument);
+          const topic = context.getOrCreateTopic(chatId, `${context.titleFor(chatId, threadId)}-${argument}`, argument);
           bindMapping(chatId, threadId, topic.id);
           reply(chatId, threadId, `agent set to ${argument} \u2014 topic "${topic.title}"`);
         } catch (err2) {
@@ -42771,7 +43202,10 @@ function createTelegramCommandRouter(context) {
         return;
       }
       case "/topics": {
-        const topics = listTopics({ surface: "telegram" }).filter((topic) => isTopicVisible(topic) && topic.participants.some((person) => person.userId === userId));
+        const topics = listTopics({
+          surface: "telegram",
+          surfaceScope: context.surfaceScopeFor(chatId)
+        }).filter((topic) => isTopicVisible(topic) && topic.participants.some((person) => person.userId === userId));
         reply(chatId, threadId, topics.length ? topics.map((topic) => `- ${topic.title}${topic.agent ? ` (${topic.agent})` : ""}`).join(`
 `) : "no topics");
         return;
@@ -42802,9 +43236,10 @@ function createTelegramCommandRouter(context) {
             userId,
             kind: "agent",
             surface: "telegram",
+            surfaceScope: context.surfaceScopeFor(chatId),
             ...context.defaultAgent ? { agent: context.defaultAgent } : {}
           };
-          const fromForumGeneral = context.forum?.enabled === true && chatId === context.forum.chatId && threadId === undefined;
+          const fromForumGeneral = context.isForumGeneral(chatId, threadId);
           const topic = fromForumGeneral ? topicService.create(createOptions) : context.registerTopic(createOptions);
           if (fromForumGeneral) {
             reply(chatId, threadId, `creating new topic "${topic.title}"`);
@@ -42822,7 +43257,7 @@ function createTelegramCommandRouter(context) {
           reply(chatId, threadId, "usage: /load <topic>");
           return;
         }
-        const candidate = resolveTelegramTopicArg(argument, userId);
+        const candidate = resolveTelegramTopicArg(argument, userId, context.surfaceScopeFor(chatId));
         const topic = candidate && isTopicVisible(candidate) ? candidate : null;
         if (!topic || !loadTopic(chatId, topic.id, threadId)) {
           reply(chatId, threadId, `no visible topic matching "${argument}"`);
@@ -42867,7 +43302,7 @@ function createTelegramCommandRouter(context) {
       case "/del!": {
         const force = command === "/del!";
         const topicId = currentTopicId(chatId, threadId);
-        const topic = argument ? resolveTelegramTopicArg(argument, userId) : topicId ? getTopic(topicId) : null;
+        const topic = argument ? resolveTelegramTopicArg(argument, userId, context.surfaceScopeFor(chatId)) : topicId ? getTopic(topicId) : null;
         if (!topic) {
           reply(chatId, threadId, argument ? `no topic named "${argument}"` : "this chat has no topic \u2014 usage: /del [name]");
           return;
@@ -42952,6 +43387,12 @@ function createTables(db4) {
       key TEXT PRIMARY KEY,
       value TEXT NOT NULL
     )`);
+  db4.run(`CREATE TABLE IF NOT EXISTS telegram_groups (
+      chat_id INTEGER PRIMARY KEY,
+      title TEXT,
+      owner_telegram_user_id INTEGER,
+      created_at TEXT NOT NULL
+    )`);
   db4.run(`CREATE TABLE IF NOT EXISTS runtime_inbox (
       seq INTEGER PRIMARY KEY,
       runtime_message_id TEXT,
@@ -42981,6 +43422,14 @@ function openMappingStore(path) {
   const db4 = new Database2(dbPath);
   migrateLegacySchema(db4);
   createTables(db4);
+  const legacyForum = db4.query("SELECT value FROM settings WHERE key = 'forum_chat_id'").get();
+  if (legacyForum) {
+    const chatId = Number.parseInt(legacyForum.value, 10);
+    if (Number.isSafeInteger(chatId)) {
+      db4.run(`INSERT OR IGNORE INTO telegram_groups (chat_id, created_at)
+         VALUES (?, ?)`, [chatId, new Date().toISOString()]);
+    }
+  }
   migrateOutboxSchema(db4);
   migrateRuntimeInboxSchema(db4);
   return {
@@ -43033,6 +43482,32 @@ function openMappingStore(path) {
     clearForumChatId() {
       db4.run("DELETE FROM settings WHERE key = 'forum_chat_id'");
     },
+    loadGroups() {
+      const rows = db4.query("SELECT chat_id, title, owner_telegram_user_id FROM telegram_groups ORDER BY created_at").all();
+      return rows.map((row) => ({
+        chatId: row.chat_id,
+        ...row.title ? { title: row.title } : {},
+        ...row.owner_telegram_user_id !== null ? { ownerTelegramUserId: row.owner_telegram_user_id } : {}
+      }));
+    },
+    saveGroup(group) {
+      db4.run(`INSERT INTO telegram_groups (chat_id, title, owner_telegram_user_id, created_at)
+         VALUES (?, ?, ?, ?)
+         ON CONFLICT(chat_id) DO UPDATE SET
+           title = COALESCE(excluded.title, telegram_groups.title),
+           owner_telegram_user_id = COALESCE(
+             excluded.owner_telegram_user_id,
+             telegram_groups.owner_telegram_user_id
+           )`, [
+        group.chatId,
+        group.title ?? null,
+        group.ownerTelegramUserId ?? null,
+        new Date().toISOString()
+      ]);
+    },
+    deleteGroup(chatId) {
+      db4.run("DELETE FROM telegram_groups WHERE chat_id = ?", [chatId]);
+    },
     isFlagSet(key) {
       return db4.query("SELECT 1 FROM settings WHERE key = ?").get(key) !== null;
     },
@@ -43194,7 +43669,7 @@ function createTelegramMediaIntake(options) {
     if (typeof client.getFileLink !== "function") {
       logger.warn({ chatId }, "telegram adapter: media message but client lacks getFileLink \u2014 caption only");
       if (caption)
-        runTurn(topic, caption, chatId, threadId);
+        runTurn(topic, caption, chatId, threadId, msg);
       else
         reply(chatId, threadId, "this bot cannot download attachments");
       return;
@@ -43227,7 +43702,7 @@ ${transcript}`;
 ${caption}` : voiceText : caption;
     if (!userText && promptLines.length === 0)
       return;
-    runTurn(topic, composeAttachmentPrompt(userText, promptLines), chatId, threadId);
+    runTurn(topic, composeAttachmentPrompt(userText, promptLines), chatId, threadId, msg);
   }
   function flushGroup(key) {
     const entry = mediaGroups.get(key);
@@ -43268,13 +43743,20 @@ ${caption}` : voiceText : caption;
   }
   async function handleGroupFlush(entry) {
     const { messages, chatId, threadId } = entry;
+    const sourceMessage = messages.reduce((earliest, message) => {
+      if (!Number.isSafeInteger(message.message_id))
+        return earliest;
+      if (!earliest || !Number.isSafeInteger(earliest.message_id))
+        return message;
+      return message.message_id < earliest.message_id ? message : earliest;
+    }, undefined) ?? messages[0];
     const topic = resolveTopic(chatId, threadId);
     const captions = messages.map((message) => (message.text ?? message.caption ?? "").trim()).filter((caption) => caption.length > 0);
     if (typeof client.getFileLink !== "function") {
       logger.warn({ chatId }, "telegram adapter: media group but client lacks getFileLink \u2014 captions only");
       if (captions.length > 0)
         runTurn(topic, captions.join(`
-`), chatId, threadId);
+`), chatId, threadId, sourceMessage);
       else
         reply(chatId, threadId, "this bot cannot download attachments");
       return;
@@ -43294,7 +43776,7 @@ ${caption}` : voiceText : caption;
 `);
     if (!userText && promptLines.length === 0)
       return;
-    runTurn(topic, composeAttachmentPrompt(userText, promptLines), chatId, threadId);
+    runTurn(topic, composeAttachmentPrompt(userText, promptLines), chatId, threadId, sourceMessage);
   }
   function stop() {
     for (const entry of mediaGroups.values()) {
@@ -43370,8 +43852,27 @@ function renderOutbound(text2, maxLen = 4096) {
 }
 
 // ../../adapters/telegram/src/adapter.ts
+import { randomUUID as randomUUID29 } from "crypto";
 import { existsSync as existsSync37 } from "fs";
 import { basename as basename13, extname as extname6 } from "path";
+function telegramGroupScope(chatId) {
+  return `tg:${chatId}`;
+}
+function telegramGroupIdFromScope(scope) {
+  if (!scope?.startsWith("tg:"))
+    return null;
+  const chatId = Number(scope.slice(3));
+  return Number.isSafeInteger(chatId) ? chatId : null;
+}
+function telegramClientMessageId(msg, chatId, threadId) {
+  const messageId = msg?.message_id;
+  const source = msg?.media_group_id ? Number.isSafeInteger(messageId) ? `album:${msg.media_group_id}:${messageId}` : `album:${msg.media_group_id}:legacy:${randomUUID29()}` : Number.isSafeInteger(messageId) ? `message:${messageId}` : `legacy:${randomUUID29()}`;
+  return `telegram:${chatId}:${threadId ?? "main"}:${source}`;
+}
+function telegramActorLabel(msg) {
+  const username = msg?.from?.username?.trim().replace(/^@/, "");
+  return username ? `@${username}` : undefined;
+}
 function startTelegramAdapter(opts) {
   const { client, forumChatId } = opts;
   const userId = opts.userId ?? "local";
@@ -43387,19 +43888,44 @@ function startTelegramAdapter(opts) {
   const sendTimeoutMs = opts.sendTimeoutMs ?? DEFAULT_SEND_TIMEOUT_MS;
   const typingHeartbeatMs = Math.max(250, opts.typingHeartbeatMs ?? 4000);
   const footerEnabled = opts.footer === true;
-  const dispatchTurn = opts.startTurn ?? startAiTurn;
   const store = openMappingStore(opts.mappingDbPath);
   const restoredForumChatId = store.loadForumChatId();
-  const initialForumChatId = forumChatId ?? restoredForumChatId;
-  let forumChat = initialForumChatId ?? 0;
-  let forumMode = initialForumChatId !== undefined && typeof client.createForumTopic === "function";
-  let forumManageTopicsAvailable = forumMode && forumChatId !== undefined;
-  if (forumChatId !== undefined)
+  if (forumChatId !== undefined) {
+    store.saveGroup({ chatId: forumChatId });
     store.saveForumChatId(forumChatId);
-  if (initialForumChatId !== undefined && !forumMode) {
-    logger.warn({ forumChatId: initialForumChatId }, "telegram adapter: forumChatId set but client lacks createForumTopic \u2014 forum mode disabled");
+  }
+  const forumGroups = new Map;
+  for (const group of store.loadGroups()) {
+    forumGroups.set(group.chatId, {
+      chatId: group.chatId,
+      manageTopicsAvailable: group.chatId === forumChatId,
+      configured: group.chatId === forumChatId,
+      permissionRevision: 0
+    });
+  }
+  if (restoredForumChatId !== undefined && !forumGroups.has(restoredForumChatId)) {
+    forumGroups.set(restoredForumChatId, {
+      chatId: restoredForumChatId,
+      manageTopicsAvailable: false,
+      configured: false,
+      permissionRevision: 0
+    });
+  }
+  if (forumGroups.size > 0 && typeof client.createForumTopic !== "function") {
+    logger.warn({ forumChatIds: [...forumGroups.keys()] }, "telegram adapter: forum groups configured but client lacks createForumTopic");
   }
   const personalGeneral = ensurePersonalGeneral(userId, "telegram");
+  const groupGenerals = new Map;
+  const generalForGroup = (chatId) => {
+    const existing = groupGenerals.get(chatId);
+    if (existing)
+      return existing;
+    const general = ensurePersonalGeneral(userId, "telegram", {
+      surfaceScope: telegramGroupScope(chatId)
+    });
+    groupGenerals.set(chatId, general);
+    return general;
+  };
   const byKey = new Map;
   const byTopic = new Map;
   const targetByQueryId = new Map;
@@ -43573,6 +44099,22 @@ function startTelegramAdapter(opts) {
   }
   function bindMapping(chatId, threadId, topicId, { persist = true } = {}) {
     const key = mappingKey(chatId, threadId);
+    if (forumGroups.has(chatId)) {
+      const topic = getTopic(topicId);
+      const expectedScope = telegramGroupScope(chatId);
+      if (!topic || topic.surface !== "telegram" || (topic.surfaceScope ?? null) !== expectedScope) {
+        throw new Error(`refusing to bind Telegram group ${chatId} to topic ${topicId} outside ${expectedScope}`);
+      }
+      for (const existing of [...byTopic.get(topicId) ?? []]) {
+        if (existing.chatId !== chatId || mappingKey(existing.chatId, existing.threadId) === key) {
+          continue;
+        }
+        detachFromTopic(existing);
+        byKey.delete(mappingKey(existing.chatId, existing.threadId));
+        if (persist)
+          store.deleteByChat(existing.chatId, existing.threadId);
+      }
+    }
     const prev = byKey.get(key);
     if (prev) {
       if (prev.topicId === topicId)
@@ -43639,7 +44181,8 @@ function startTelegramAdapter(opts) {
   }
   function loadExistingTopic(chatId, topicId, threadId) {
     const topic = getTopic(topicId);
-    if (!topic?.participants.some((participant) => participant.userId === userId)) {
+    const expectedScope = forumGroups.has(chatId) ? telegramGroupScope(chatId) : null;
+    if (!topic?.participants.some((participant) => participant.userId === userId) || topic.surface !== "telegram" || (topic.surfaceScope ?? null) !== expectedScope) {
       return false;
     }
     bindMapping(chatId, threadId, topic.id);
@@ -43647,7 +44190,10 @@ function startTelegramAdapter(opts) {
   }
   if (!store.isFlagSet(SURFACE_BACKFILL_FLAG)) {
     const mappedIds = [
-      ...new Set(store.load().map((mapping) => mapping.topicId).filter((topicId) => getTopic(topicId)?.kind !== "manager"))
+      ...new Set(store.load().flatMap((mapping) => {
+        const topic = getTopic(mapping.topicId);
+        return topic && topic.kind !== "manager" && topic.participants.some((participant) => participant.userId === userId) ? [topic.id] : [];
+      }))
     ];
     const moved = setTopicSurfaces(mappedIds, "telegram");
     store.setFlag(SURFACE_BACKFILL_FLAG);
@@ -43655,12 +44201,70 @@ function startTelegramAdapter(opts) {
       logger.info({ moved, mapped: mappedIds.length }, "telegram adapter: moved mapped topics onto the telegram surface");
     }
   }
+  if (!store.isFlagSet(GROUP_SCOPE_BACKFILL_FLAG)) {
+    const groupIds = new Set(forumGroups.keys());
+    const groupsByTopic = new Map;
+    for (const mapping of store.load()) {
+      if (!groupIds.has(mapping.chatId))
+        continue;
+      const groups = groupsByTopic.get(mapping.topicId) ?? new Set;
+      groups.add(mapping.chatId);
+      groupsByTopic.set(mapping.topicId, groups);
+    }
+    let filed = 0;
+    for (const [topicId, groups] of groupsByTopic) {
+      if (groups.size !== 1) {
+        logger.warn({ topicId, groupIds: [...groups] }, "telegram adapter: legacy topic spans multiple groups; scope migration skipped");
+        continue;
+      }
+      const topic = getTopic(topicId);
+      if (!topic || topic.kind === "manager" || topic.surface !== "telegram" || !topic.participants.some((participant) => participant.userId === userId)) {
+        continue;
+      }
+      const [chatId] = groups;
+      if (chatId !== undefined) {
+        const targetScope = telegramGroupScope(chatId);
+        const currentScope = topic.surfaceScope ?? null;
+        if (currentScope !== null && currentScope !== targetScope) {
+          logger.warn({ topicId, currentScope, targetScope }, "telegram adapter: legacy mapping conflicts with an existing topic namespace");
+          continue;
+        }
+        const titleConflict = findTopicTitleConflict(topic.title, topic.kind ?? "agent", {
+          excludeTopicId: topic.id,
+          surface: "telegram",
+          surfaceScope: targetScope
+        });
+        if (titleConflict) {
+          logger.warn({ topicId, conflictTopicId: titleConflict.id, targetScope }, "telegram adapter: legacy topic title conflicts in target namespace");
+          continue;
+        }
+        filed += Number(setTopicSurfaceScope(topicId, "telegram", targetScope));
+      }
+    }
+    store.setFlag(GROUP_SCOPE_BACKFILL_FLAG);
+    if (filed > 0) {
+      logger.info({ filed }, "telegram adapter: filed legacy topics into group namespaces");
+    }
+  }
   for (const persisted of store.load()) {
     const topic = getTopic(persisted.topicId);
-    if (topic?.participants.some((participant) => participant.userId === userId)) {
+    const expectedScope = forumGroups.has(persisted.chatId) ? telegramGroupScope(persisted.chatId) : null;
+    if (topic?.participants.some((participant) => participant.userId === userId) && topic.surface === "telegram" && (topic.surfaceScope ?? null) === expectedScope) {
       bindMapping(persisted.chatId, persisted.threadId, persisted.topicId, { persist: false });
       continue;
     }
+    if (topic) {
+      store.deleteByChat(persisted.chatId, persisted.threadId);
+      logger.warn({
+        chatId: persisted.chatId,
+        threadId: persisted.threadId,
+        topicId: persisted.topicId,
+        topicSurface: topic.surface,
+        topicSurfaceScope: topic.surfaceScope ?? null,
+        expectedScope
+      }, "telegram adapter: quarantined mapping outside its topic namespace");
+      continue;
+    }
     cleanupPersistedMapping(persisted, "telegram adapter: stale forum thread cleanup failed");
   }
   function reconcileStaleMappings() {
@@ -43680,8 +44284,15 @@ function startTelegramAdapter(opts) {
       suppressMaterialize--;
     }
   }
-  function getOrCreateTopic(title, agent) {
-    return getTopicByNameForUser(title, userId, { surface: "telegram" }) ?? registerTopicLocal({ title, userId, kind: "agent", ...agent ? { agent } : {} });
+  function getOrCreateTopic(chatId, title, agent) {
+    const surfaceScope = forumGroups.has(chatId) ? telegramGroupScope(chatId) : null;
+    return getTopicByNameForUser(title, userId, { surface: "telegram", surfaceScope }) ?? registerTopicLocal({
+      title,
+      userId,
+      kind: "agent",
+      surfaceScope,
+      ...agent ? { agent } : {}
+    });
   }
   function resolveMapping(chatId, threadId) {
     const cached = byKey.get(mappingKey(chatId, threadId));
@@ -43691,7 +44302,7 @@ function startTelegramAdapter(opts) {
         return topic2;
       unbindTopic(cached.topicId);
     }
-    const topic = getOrCreateTopic(titleFor(chatId, threadId), opts.defaultAgent);
+    const topic = getOrCreateTopic(chatId, titleFor(chatId, threadId), opts.defaultAgent);
     bindMapping(chatId, threadId, topic.id);
     return topic;
   }
@@ -44009,12 +44620,16 @@ function startTelegramAdapter(opts) {
   const pendingByTopic = new Map;
   const permissionBlockedTopics = new Map;
   const materializeTombstones = new Map;
-  if (forumMode) {
+  if (forumGroups.size > 0) {
     for (const t of store.loadTombstones())
       materializeTombstones.set(t.topicId, t.title);
   }
   function deliverFallback(topicId, title, payload) {
-    return deliverToTargets(topicId, [{ chatId: forumChat, topicId }], {
+    const topic = getTopic(topicId);
+    const chatId = telegramGroupIdFromScope(topic?.surfaceScope);
+    if (chatId === null)
+      return Promise.resolve();
+    return deliverToTargets(topicId, [{ chatId, topicId }], {
       text: payload.text ? `[${title}] ${payload.text}` : "",
       files: payload.files,
       runtimeMessageId: payload.runtimeMessageId,
@@ -44027,16 +44642,18 @@ function startTelegramAdapter(opts) {
     }
   }
   function materializeTopic(topic) {
-    if (!forumManageTopicsAvailable || suppressMaterialize > 0 || byTopic.has(topic.id) || pendingByTopic.has(topic.id) || permissionBlockedTopics.has(topic.id) || materializeTombstones.has(topic.id)) {
+    if (topic.surface !== "telegram" || !topic.participants?.some((participant) => participant.userId === userId)) {
       return false;
     }
-    if (!isTopicVisible(topic))
+    const materializationChat = telegramGroupIdFromScope(topic.surfaceScope);
+    if (materializationChat === null)
       return false;
-    if (!topic.participants?.some((p) => p.userId === userId))
+    const group = forumGroups.get(materializationChat);
+    if (!group?.manageTopicsAvailable || suppressMaterialize > 0 || byTopic.has(topic.id) || pendingByTopic.has(topic.id) || permissionBlockedTopics.has(topic.id) || materializeTombstones.has(topic.id)) {
       return false;
-    if (topic.surface !== "telegram")
+    }
+    if (!isTopicVisible(topic))
       return false;
-    const materializationChat = forumChat;
     const pending2 = { buffer: [], cancelled: false };
     pendingByTopic.set(topic.id, pending2);
     (async () => {
@@ -44050,12 +44667,12 @@ function startTelegramAdapter(opts) {
           return;
         const errorInfo = telegramErrorInfo(err2);
         if (isManageTopicsPermissionError(errorInfo)) {
-          const permissionWasAvailable = forumManageTopicsAvailable;
-          forumManageTopicsAvailable = false;
+          const permissionWasAvailable = group.manageTopicsAvailable;
+          group.manageTopicsAvailable = false;
           permissionBlockedTopics.set(topic.id, topic.title);
           logger.warn({ err: err2, topicId: topic.id, title: topic.title }, "telegram adapter: Manage Topics unavailable \u2014 waiting for permission recovery");
           if (permissionWasAvailable) {
-            reply(forumChat, undefined, 'Forum topic creation is paused. Enable the bot administrator permission "Manage Topics"; pending topics will be retried automatically.');
+            reply(materializationChat, undefined, 'Forum topic creation is paused. Enable the bot administrator permission "Manage Topics"; pending topics will be retried automatically.');
           }
           flushBuffered(topic.id, pending2.buffer, (payload) => deliverFallback(topic.id, topic.title, payload));
           return;
@@ -44144,8 +44761,10 @@ function startTelegramAdapter(opts) {
     const topic = getTopic(topicId);
     if (!topic)
       return false;
-    if (forumMode) {
-      if (!forumManageTopicsAvailable || permissionBlockedTopics.has(topicId)) {
+    const groupId = telegramGroupIdFromScope(topic.surfaceScope);
+    const group = groupId === null ? undefined : forumGroups.get(groupId);
+    if (group) {
+      if (!group.manageTopicsAvailable || permissionBlockedTopics.has(topicId)) {
         enqueueSend(topicId, () => deliverFallback(topicId, topic.title, payload)).then(payload.onSettled);
         return true;
       }
@@ -44291,32 +44910,52 @@ ${suffix}`;
       return;
     await client.sendMessage(chatId, onboardingGuide(bot?.username), threadOpts(threadId)).catch((err2) => logger.warn({ err: err2, chatId }, "telegram adapter: onboarding guide failed"));
   }
-  function materializeVisibleTopics() {
-    if (!forumMode || !forumManageTopicsAvailable)
+  function materializeVisibleTopics(chatId) {
+    const group = forumGroups.get(chatId);
+    if (!group?.manageTopicsAvailable)
       return;
-    for (const topic of listTopics({ surface: "telegram" })) {
+    const topics = listTopics({
+      surface: "telegram",
+      surfaceScope: telegramGroupScope(chatId)
+    });
+    for (const topic of topics) {
+      if (topic.kind === "manager")
+        continue;
       if (isTopicVisible(topic) && topic.participants.some((participant) => participant.userId === userId)) {
         materializeTopic(topic);
       }
     }
   }
-  function restoreForumTopicCreation({ retryPermanent = false } = {}) {
-    forumManageTopicsAvailable = true;
-    permissionBlockedTopics.clear();
+  function restoreForumTopicCreation(chatId, { retryPermanent = false } = {}) {
+    const group = forumGroups.get(chatId);
+    if (!group)
+      return;
+    group.manageTopicsAvailable = true;
+    for (const topicId of [...permissionBlockedTopics.keys()]) {
+      if (telegramGroupIdFromScope(getTopic(topicId)?.surfaceScope) === chatId) {
+        permissionBlockedTopics.delete(topicId);
+      }
+    }
     if (retryPermanent) {
-      materializeTombstones.clear();
-      store.clearTombstones();
+      for (const topicId of [...materializeTombstones.keys()]) {
+        if (telegramGroupIdFromScope(getTopic(topicId)?.surfaceScope) === chatId) {
+          materializeTombstones.delete(topicId);
+          store.deleteTombstone(topicId);
+        }
+      }
     }
     reconcileStaleMappings();
-    materializeVisibleTopics();
+    materializeVisibleTopics(chatId);
   }
   async function notifyOwnerDms(text2) {
     await Promise.allSettled([...ownerDmChatIds].map((chatId) => client.sendMessage(chatId, text2)));
   }
   async function disconnectForum(chatId) {
-    if (!forumMode || forumChat !== chatId)
+    if (!forumGroups.has(chatId))
       return false;
     for (const [topicId, pending2] of pendingByTopic) {
+      if (telegramGroupIdFromScope(getTopic(topicId)?.surfaceScope) !== chatId)
+        continue;
       pending2.cancelled = true;
       if (pendingByTopic.get(topicId) === pending2)
         pendingByTopic.delete(topicId);
@@ -44329,14 +44968,23 @@ ${suffix}`;
       if (target.chatId === chatId)
         targetByQueryId.delete(queryId);
     }
-    permissionBlockedTopics.clear();
-    materializeTombstones.clear();
-    store.clearTombstones();
+    for (const topicId of [...permissionBlockedTopics.keys()]) {
+      if (telegramGroupIdFromScope(getTopic(topicId)?.surfaceScope) === chatId) {
+        permissionBlockedTopics.delete(topicId);
+      }
+    }
+    for (const topicId of [...materializeTombstones.keys()]) {
+      if (telegramGroupIdFromScope(getTopic(topicId)?.surfaceScope) === chatId) {
+        materializeTombstones.delete(topicId);
+        store.deleteTombstone(topicId);
+      }
+    }
     store.outboxDeleteByChat(chatId);
-    store.clearForumChatId();
-    forumMode = false;
-    forumManageTopicsAvailable = false;
-    forumChat = 0;
+    store.deleteGroup(chatId);
+    if (store.loadForumChatId() === chatId)
+      store.clearForumChatId();
+    forumGroups.delete(chatId);
+    groupGenerals.delete(chatId);
     await notifyOwnerDms("The Telegram forum was disconnected because the bot left or was removed. Your Negotium topics were preserved; promote the bot in a forum group to reconnect.");
     logger.info({ userId, forumChatId: chatId }, "telegram adapter: forum disconnected");
     return true;
@@ -44346,16 +44994,14 @@ ${suffix}`;
       reply(ownerTelegramId, undefined, "This Telegram client cannot create forum topics, so the group was not connected.");
       return false;
     }
-    if (forumMode && forumChat !== chat.id) {
-      reply(ownerTelegramId, undefined, `A different forum group (${forumChat}) is already connected to this Negotium node.`);
-      return false;
-    }
     const hasManageTopics = canManageTopics(botMember);
-    if (forumMode && forumChat === chat.id) {
-      const recovered = hasManageTopics && !forumManageTopicsAvailable;
-      const lostPermission = !hasManageTopics && forumManageTopicsAvailable;
+    const existingGroup = forumGroups.get(chat.id);
+    if (existingGroup) {
+      existingGroup.permissionRevision += 1;
+      const recovered = hasManageTopics && !existingGroup.manageTopicsAvailable;
+      const lostPermission = !hasManageTopics && existingGroup.manageTopicsAvailable;
       if (hasManageTopics) {
-        restoreForumTopicCreation({ retryPermanent: recovered });
+        restoreForumTopicCreation(chat.id, { retryPermanent: recovered });
         if (recovered) {
           await Promise.allSettled([
             client.sendMessage(chat.id, "Manage Topics permission confirmed. Pending Negotium topics are being created now."),
@@ -44363,23 +45009,29 @@ ${suffix}`;
           ]);
         }
       } else {
-        forumManageTopicsAvailable = false;
+        existingGroup.manageTopicsAvailable = false;
         if (lostPermission) {
           await notifyOwnerDms(`Manage Topics permission was removed from \u201C${chat.title?.trim() || chat.id}\u201D. Existing topics are preserved; restore the permission to resume topic creation.`);
         }
       }
       return true;
     }
-    forumChat = chat.id;
-    forumMode = true;
-    forumManageTopicsAvailable = hasManageTopics;
-    permissionBlockedTopics.clear();
-    materializeTombstones.clear();
-    store.clearTombstones();
-    store.saveForumChatId(chat.id);
-    bindMapping(chat.id, undefined, personalGeneral.id);
+    forumGroups.set(chat.id, {
+      chatId: chat.id,
+      manageTopicsAvailable: hasManageTopics,
+      configured: chat.id === forumChatId,
+      permissionRevision: 1
+    });
+    store.saveGroup({
+      chatId: chat.id,
+      title: chat.title?.trim(),
+      ownerTelegramUserId: ownerTelegramId
+    });
+    if (store.loadForumChatId() === undefined)
+      store.saveForumChatId(chat.id);
+    bindMapping(chat.id, undefined, generalForGroup(chat.id).id);
     ownerDmChatIds.add(ownerTelegramId);
-    materializeVisibleTopics();
+    materializeVisibleTopics(chat.id);
     const title = chat.title?.trim() || String(chat.id);
     const permissionWarning = hasManageTopics ? "" : `
 
@@ -44401,9 +45053,8 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
     if (msg.chat.type !== "supergroup" || !msg.chat.is_forum || senderId === undefined || !isAllowed(senderId)) {
       return false;
     }
-    if (forumMode && msg.chat.id !== forumChat)
-      return false;
-    if (forumMode && forumManageTopicsAvailable)
+    const connected = forumGroups.get(msg.chat.id);
+    if (connected?.manageTopicsAvailable)
       return true;
     if (typeof client.getMe !== "function" || typeof client.getChatMember !== "function") {
       return false;
@@ -44419,74 +45070,124 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
       if (!isChatAdmin(botMember) || !isChatAdmin(senderMember))
         return false;
       await linkForumAndAnnounce(senderId, msg.chat, botMember);
-      return forumMode && forumChat === msg.chat.id;
+      return forumGroups.has(msg.chat.id);
     } catch (err2) {
       logger.debug({ err: err2, groupId: msg.chat.id, senderId }, "telegram adapter: lazy forum auto-connect check failed");
       return false;
     }
   }
   async function verifyInitialForumPermissions() {
-    if (!forumMode)
-      return;
-    if (forumChatId !== undefined)
+    const initialGroups = [...forumGroups.values()];
+    if (initialGroups.length === 0)
       return;
     if (typeof client.getMe !== "function" || typeof client.getChatMember !== "function") {
-      forumManageTopicsAvailable = true;
+      for (const group of initialGroups) {
+        if (forumGroups.get(group.chatId) === group)
+          group.manageTopicsAvailable = true;
+      }
       return;
     }
-    try {
-      const bot = await resolveBotIdentity();
-      if (!bot || stopped || !forumMode)
-        return;
-      const member = await client.getChatMember(forumChat, bot.id);
-      if (member.status === "left" || member.status === "kicked") {
-        await disconnectForum(forumChat);
-        return;
-      }
-      if (canManageTopics(member)) {
-        const restoredAutoConnection = forumChatId === undefined && restoredForumChatId !== undefined;
-        restoreForumTopicCreation({ retryPermanent: restoredAutoConnection });
-      } else {
-        forumManageTopicsAvailable = false;
+    const bot = await resolveBotIdentity();
+    if (!bot || stopped)
+      return;
+    for (const group of initialGroups) {
+      if (forumGroups.get(group.chatId) !== group)
+        continue;
+      if (group.configured)
+        continue;
+      try {
+        const permissionRevision = group.permissionRevision;
+        const member = await client.getChatMember(group.chatId, bot.id);
+        if (forumGroups.get(group.chatId) !== group || group.permissionRevision !== permissionRevision) {
+          continue;
+        }
+        if (member.status === "left" || member.status === "kicked") {
+          await disconnectForum(group.chatId);
+          continue;
+        }
+        if (canManageTopics(member)) {
+          restoreForumTopicCreation(group.chatId, { retryPermanent: !group.configured });
+        } else {
+          group.manageTopicsAvailable = false;
+        }
+      } catch (err2) {
+        logger.warn({ err: err2, forumChatId: group.chatId }, "telegram adapter: initial forum permission check failed");
       }
-    } catch (err2) {
-      logger.warn({ err: err2, forumChatId: forumChat }, "telegram adapter: initial forum permission check failed");
     }
   }
   verifyInitialForumPermissions();
-  function runTurn(topic, prompt, chatId, threadId) {
+  function runTurn(topic, prompt, chatId, threadId, sourceMessage) {
     const target = {
       topicId: topic.id,
       chatId,
       ...threadId !== undefined ? { threadId } : {}
     };
-    const rememberTarget = (queryId2) => {
-      targetByQueryId.set(queryId2, target);
+    const rememberTarget = (queryId) => {
+      targetByQueryId.set(queryId, target);
     };
+    const actorLabel = telegramActorLabel(sourceMessage);
     const input = {
       topic,
       userId,
+      clientMessageId: telegramClientMessageId(sourceMessage, chatId, threadId),
+      ...actorLabel ? { actorLabel } : {},
       text: prompt,
       sourceAdapter: "telegram",
       visualTools: false,
       fileDeliveryTools: true
     };
+    const provisionalQueryId = input.clientMessageId;
+    rememberTarget(provisionalQueryId);
+    const adoptQueryId = (queryId) => {
+      if (!queryId)
+        return;
+      if (queryId !== provisionalQueryId && targetByQueryId.get(provisionalQueryId) === target) {
+        targetByQueryId.delete(provisionalQueryId);
+      }
+      rememberTarget(queryId);
+    };
+    const removeProvisionalTarget = () => {
+      if (targetByQueryId.get(provisionalQueryId) === target) {
+        targetByQueryId.delete(provisionalQueryId);
+      }
+    };
     if (opts.submitTurn) {
-      opts.submitTurn(input).then(({ queryId: queryId2 }) => {
-        if (queryId2)
-          rememberTarget(queryId2);
+      opts.submitTurn(input).then(({ queryId }) => {
+        adoptQueryId(queryId ?? provisionalQueryId);
       }).catch((error2) => {
+        const mayHaveCommitted = error2 instanceof RuntimeGatewayError && (error2.kind === "transport" || error2.kind === "timeout" || error2.kind === "http" && (error2.status ?? 0) >= 500);
+        if (mayHaveCommitted) {
+          const timer = setTimeout(removeProvisionalTarget, 60 * 60000);
+          timer.unref?.();
+        } else {
+          removeProvisionalTarget();
+        }
         logger.error({ err: error2, topicId: topic.id }, "telegram adapter: remote turn failed");
       });
       return;
     }
-    const { queryId } = submitUserMessage({
-      ...input,
-      onDispatched: rememberTarget,
-      startTurn: dispatchTurn
-    });
-    if (queryId)
-      rememberTarget(queryId);
+    if (opts.startTurn) {
+      const { queryId } = submitUserMessage({
+        ...input,
+        onDispatched: adoptQueryId,
+        startTurn: opts.startTurn
+      });
+      if (queryId)
+        adoptQueryId(queryId);
+      else
+        removeProvisionalTarget();
+      return;
+    }
+    try {
+      const submission = submitRuntimeGatewayTurn({
+        ...input,
+        requestId: input.clientMessageId
+      });
+      adoptQueryId(submission.requestId);
+    } catch (error2) {
+      removeProvisionalTarget();
+      throw error2;
+    }
   }
   const mediaIntake = createTelegramMediaIntake({
     client,
@@ -44502,7 +45203,8 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
   const handleCommand = createTelegramCommandRouter({
     userId,
     defaultAgent: opts.defaultAgent,
-    forum: forumMode ? { enabled: true, chatId: forumChat } : undefined,
+    surfaceScopeFor: (chatId) => forumGroups.has(chatId) ? telegramGroupScope(chatId) : null,
+    isForumGeneral: (chatId, threadId) => forumGroups.has(chatId) && threadId === undefined,
     resolveBotUsername: async () => (await resolveBotIdentity())?.username,
     isVaultOwner,
     reply,
@@ -44528,8 +45230,10 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
     const firstPrivateContact = privateDm && !byKey.has(mappingKey(chatId));
     if (privateDm)
       ownerDmChatIds.add(chatId);
-    if (privateDm || forumMode && chatId === forumChat && threadId === undefined) {
+    if (privateDm) {
       bindMapping(chatId, threadId, personalGeneral.id);
+    } else if (forumGroups.has(chatId) && threadId === undefined) {
+      bindMapping(chatId, threadId, generalForGroup(chatId).id);
     }
     if (firstPrivateContact && text2 !== "/start") {
       sendOnboardingGuide(chatId);
@@ -44553,7 +45257,7 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
     }
     if (!text2)
       return;
-    mediaIntake.enqueue(chatId, threadId, () => runTurn(resolveMapping(chatId, threadId), text2, chatId, threadId));
+    mediaIntake.enqueue(chatId, threadId, () => runTurn(resolveMapping(chatId, threadId), text2, chatId, threadId, msg));
   }
   client.on("message", (msg) => {
     if (stopped)
@@ -44561,9 +45265,7 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
     if (!isAllowed(msg.from?.id))
       return;
     if (msg.chat.type === "supergroup" && msg.chat.is_forum) {
-      if (forumMode && msg.chat.id !== forumChat)
-        return;
-      if (!forumMode || !forumManageTopicsAvailable) {
+      if (!forumGroups.get(msg.chat.id)?.manageTopicsAvailable) {
         tryAutoConnectFromMessage(msg).then((connected) => {
           if (connected && !stopped)
             handleIncomingMessage(msg);
@@ -44577,26 +45279,29 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
     if (stopped || update.chat.type !== "supergroup" || !update.chat.is_forum)
       return;
     const status = update.new_chat_member?.status;
-    if ((status === "left" || status === "kicked") && forumChat === update.chat.id) {
+    if ((status === "left" || status === "kicked") && forumGroups.has(update.chat.id)) {
       disconnectForum(update.chat.id).catch((err2) => logger.warn({ err: err2, groupId: update.chat.id }, "telegram adapter: forum disconnect failed"));
       return;
     }
-    if (forumMode && forumChat === update.chat.id && status !== "administrator" && status !== "creator") {
-      const permissionWasAvailable = forumManageTopicsAvailable;
-      forumManageTopicsAvailable = false;
+    if (forumGroups.has(update.chat.id) && status !== "administrator" && status !== "creator") {
+      const group = forumGroups.get(update.chat.id);
+      group.permissionRevision += 1;
+      const permissionWasAvailable = group.manageTopicsAvailable;
+      group.manageTopicsAvailable = false;
       if (permissionWasAvailable) {
         notifyOwnerDms('The bot no longer has forum administrator access. Existing topics are preserved; restore administrator + "Manage Topics" to resume topic creation.');
       }
       return;
     }
-    if (status !== "administrator" && status !== "creator" || update.from?.id === undefined || !isAllowed(update.from.id) && (!forumMode || forumChat !== update.chat.id)) {
+    if (status !== "administrator" && status !== "creator" || update.from?.id === undefined || !isAllowed(update.from.id) && !forumGroups.has(update.chat.id)) {
       return;
     }
     linkForumAndAnnounce(update.from.id, update.chat, update.new_chat_member).catch((err2) => logger.warn({ err: err2, groupId: update.chat.id }, "telegram adapter: forum auto-connect failed"));
   });
   async function deliverPersistedRuntimeMessage(event) {
     const msg = event.payload;
-    if (msg.authorId === userId && msg.sourceAdapter === "telegram")
+    const isTelegramOrigin = msg.sourceAdapter === "telegram" || msg.sourceAdapter === "runtime-gateway" && msg.sourceMessageId?.startsWith("telegram:");
+    if (msg.authorId === userId && isTelegramOrigin)
       return true;
     if (msg.kind === "tool")
       return true;
@@ -44704,7 +45409,7 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
   const unsubscribe = runtimeBus().subscribe((event) => {
     if (stopped)
       return;
-    if (event.type === "topic-created" && forumMode) {
+    if (event.type === "topic-created") {
       materializeTopic(event.payload);
       return;
     }
@@ -44755,9 +45460,9 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
   pollRuntimeEvents();
   const runtimeEventPollTimer = setInterval(pollRuntimeEvents, 100);
   runtimeEventPollTimer.unref?.();
-  if (forumMode) {
-    bindMapping(forumChat, undefined, personalGeneral.id);
-    materializeVisibleTopics();
+  for (const group of forumGroups.values()) {
+    bindMapping(group.chatId, undefined, generalForGroup(group.chatId).id);
+    materializeVisibleTopics(group.chatId);
   }
   return {
     name: "telegram",
@@ -44780,9 +45485,10 @@ Warning: enable the bot administrator permission "Manage Topics" before creating
     }
   };
 }
-var SURFACE_BACKFILL_FLAG = "surface_backfill_20260808", FORUM_TOPIC_NAME_MAX = 128, MAX_PARENT_HOPS = 5, DEFAULT_SEND_TIMEOUT_MS = 60000, PHOTO_EXTS;
+var SURFACE_BACKFILL_FLAG = "surface_backfill_20260808", GROUP_SCOPE_BACKFILL_FLAG = "telegram_group_scope_backfill_20260829", FORUM_TOPIC_NAME_MAX = 128, MAX_PARENT_HOPS = 5, DEFAULT_SEND_TIMEOUT_MS = 60000, PHOTO_EXTS;
 var init_adapter = __esm(async () => {
   await init_src();
+  init_runtime_gateway();
   await init_commands2();
   await init_mapping_store();
   await init_media_intake();
@@ -44814,11 +45520,40 @@ var init_src7 = __esm(async () => {
 // ../../adapters/telegram/src/cli.ts
 var exports_cli2 = {};
 __export(exports_cli2, {
+  submitTelegramTurnToNode: () => submitTelegramTurnToNode,
   startTelegramFromEnv: () => startTelegramFromEnv,
   runTelegramCli: () => runTelegramCli,
   installTelegramNodeFileHooks: () => installTelegramNodeFileHooks
 });
 import TelegramBot from "node-telegram-bot-api";
+async function submitTelegramTurnToNode(node, input, fetchRequest) {
+  const gateway = new RuntimeGatewayClient({
+    baseUrl: node.baseUrl,
+    token: node.token,
+    ...fetchRequest ? { fetch: fetchRequest } : {}
+  });
+  const turn = {
+    topicId: input.topic.id,
+    userId: input.userId,
+    ...input.actorLabel ? { actorLabel: input.actorLabel } : {},
+    sourceAdapter: input.sourceAdapter,
+    text: input.text,
+    clientMessageId: input.clientMessageId,
+    requestId: input.clientMessageId,
+    visualTools: input.visualTools,
+    fileDeliveryTools: input.fileDeliveryTools
+  };
+  let acknowledgement;
+  try {
+    acknowledgement = await gateway.submitTurn(turn);
+  } catch (error2) {
+    const retryable = error2 instanceof RuntimeGatewayError && (error2.kind === "transport" || error2.kind === "timeout" || error2.kind === "http" && (error2.status ?? 0) >= 500);
+    if (!retryable)
+      throw error2;
+    acknowledgement = await gateway.submitTurn(turn);
+  }
+  return { queryId: acknowledgement.requestId };
+}
 function installTelegramNodeFileHooks() {
   setFileHooks(nodeFileStore.hooks);
 }
@@ -44920,24 +45655,7 @@ async function runTelegramCli(args = process.argv.slice(2)) {
       },
       submitTurn: async (input) => {
         const node = await waitForNodeDaemon(1500);
-        const response = await fetch(`${node.baseUrl}${NODE_CONTROL_BASE_PATH}/topics/${encodeURIComponent(input.topic.id)}/messages`, {
-          method: "POST",
-          headers: {
-            authorization: `Bearer ${NODE_CONTROL_TOKEN}`,
-            "content-type": "application/json"
-          },
-          body: JSON.stringify({
-            userId: input.userId,
-            text: input.text,
-            sourceAdapter: input.sourceAdapter,
-            visualTools: input.visualTools,
-            fileDeliveryTools: input.fileDeliveryTools
-          })
-        });
-        const body = await response.json();
-        if (!response.ok)
-          throw new Error(body.error ?? `node returned HTTP ${response.status}`);
-        return { queryId: body.queryId };
+        return submitTelegramTurnToNode(node, input);
       }
     });
   } catch (error2) {
@@ -44957,6 +45675,7 @@ async function runTelegramCli(args = process.argv.slice(2)) {
 }
 var init_cli2 = __esm(async () => {
   await init_src();
+  init_runtime_gateway();
   await init_src5();
   init_env_auth();
   await init_src7();
@@ -45171,7 +45890,7 @@ var init_protocol = __esm(() => {
 });
 
 // ../../adapters/otium/src/canonical-mcp-bridge.ts
-import { randomUUID as randomUUID28 } from "crypto";
+import { randomUUID as randomUUID30 } from "crypto";
 function readAuthorization(request) {
   const value = request.headers.get("authorization");
   return value?.startsWith("Bearer ") ? value.slice(7) : null;
@@ -45312,7 +46031,7 @@ function startCanonicalMcpBridge(options = {}) {
   const url = `http://127.0.0.1:${server.port}/`;
   const unregister = registerCanonicalMcpBridgeEnvProvider((scope) => {
     sweep();
-    const token = `${randomUUID28()}${randomUUID28()}`;
+    const token = `${randomUUID30()}${randomUUID30()}`;
     capabilities.set(token, {
       surface: scope.surface,
       userId: scope.userId,
@@ -45422,7 +46141,7 @@ __export(exports_join, {
   joinCredentialDigest: () => joinCredentialDigest,
   isJoinPersisted: () => isJoinPersisted
 });
-import { createHash as createHash12, randomUUID as randomUUID29 } from "crypto";
+import { createHash as createHash12, randomUUID as randomUUID31 } from "crypto";
 import {
   chmodSync as chmodSync7,
   closeSync as closeSync5,
@@ -45511,7 +46230,7 @@ function processIsAlive(pid) {
 function withJoinCredentialLock(operation) {
   const lockPath = joinLockPath();
   const ownerPath = resolve25(lockPath, "owner.json");
-  const owner = { pid: process.pid, token: randomUUID29() };
+  const owner = { pid: process.pid, token: randomUUID31() };
   mkdirSync34(dirname23(lockPath), { recursive: true });
   for (let attempt = 0;; attempt += 1) {
     let created = false;
@@ -45552,7 +46271,7 @@ function withJoinCredentialLock(operation) {
       if (attempt > 0) {
         throw new Error(`could not recover stale Otium join credential lock at ${lockPath}`);
       }
-      const stalePath = `${lockPath}.stale.${process.pid}.${randomUUID29()}`;
+      const stalePath = `${lockPath}.stale.${process.pid}.${randomUUID31()}`;
       try {
         renameSync17(lockPath, stalePath);
         rmSync11(stalePath, { recursive: true, force: true });
@@ -45595,10 +46314,10 @@ function readPersistedJoins(path = joinFilePath()) {
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
     throw new Error("persisted join credentials are not a JSON object");
   }
-  const record = parsed;
-  if (!Array.isArray(record.joins))
-    return [normalizeJoin(record)];
-  return record.joins.map((entry) => {
+  const record2 = parsed;
+  if (!Array.isArray(record2.joins))
+    return [normalizeJoin(record2)];
+  return record2.joins.map((entry) => {
     if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
       throw new Error("persisted join credentials contain a non-object entry");
     }
@@ -45624,7 +46343,7 @@ function fsyncPath(target) {
 function writeJoins(joins, allowOverwrite) {
   const path = joinFilePath();
   const directory = dirname23(path);
-  const temporaryPath = resolve25(directory, `.otium-join.json.${process.pid}.${randomUUID29()}.tmp`);
+  const temporaryPath = resolve25(directory, `.otium-join.json.${process.pid}.${randomUUID31()}.tmp`);
   const payload = { v: JOIN_FILE_VERSION, joins };
   let fd;
   try {
@@ -45749,7 +46468,7 @@ var init_join = __esm(async () => {
 });
 
 // ../../adapters/otium/src/peer-files.ts
-import { randomUUID as randomUUID30 } from "crypto";
+import { randomUUID as randomUUID32 } from "crypto";
 import { copyFileSync as copyFileSync5, mkdirSync as mkdirSync35, rmSync as rmSync12, statSync as statSync21 } from "fs";
 import { basename as basename14, extname as extname7, join as join47 } from "path";
 function fileType(mimeType) {
@@ -45815,7 +46534,7 @@ function recordFile(args) {
   });
 }
 function insertLocalFile(args) {
-  const id = randomUUID30();
+  const id = randomUUID32();
   mkdirSync35(PEER_FILES_DIR, { recursive: true });
   const path = join47(PEER_FILES_DIR, `${id}-${safeFilename(args.filename)}`);
   copyFileSync5(args.sourcePath, path);
@@ -45879,7 +46598,7 @@ var init_peer_files = __esm(async () => {
 });
 
 // ../../adapters/otium/src/runtime-bridge.ts
-import { randomUUID as randomUUID31 } from "crypto";
+import { randomUUID as randomUUID33 } from "crypto";
 function isMcpToolResult(value) {
   if (!value || typeof value !== "object" || Array.isArray(value))
     return false;
@@ -45941,7 +46660,7 @@ var init_runtime_bridge = __esm(async () => {
       } catch (error2) {
         return errorResult(`Error: Failed to open hub question: ${error2.message}`);
       }
-      const bridgeRequestId = `bridge-ask-${randomUUID31()}`;
+      const bridgeRequestId = `bridge-ask-${randomUUID33()}`;
       const baseUrl = hubNode.baseUrl.replace(/\/+$/, "");
       const post = async (path, body) => {
         const response = await fetch(`${baseUrl}${path}`, {
@@ -46290,10 +47009,10 @@ function readCache() {
   }
 }
 function cachedSurfaceScope(join48) {
-  const record = readCache()[join48.cellId];
-  if (!record || record.central !== join48.central || !record.workspaceId)
+  const record2 = readCache()[join48.cellId];
+  if (!record2 || record2.central !== join48.central || !record2.workspaceId)
     return null;
-  return surfaceScopeFor(record.central, record.workspaceId);
+  return surfaceScopeFor(record2.central, record2.workspaceId);
 }
 function cacheSurfaceScope(join48, workspaceId) {
   const scope = surfaceScopeFor(join48.central, workspaceId);
@@ -47422,7 +48141,7 @@ import {
   diffieHellman,
   generateKeyPairSync,
   hkdfSync,
-  randomUUID as randomUUID32
+  randomUUID as randomUUID34
 } from "crypto";
 import {
   chmodSync as chmodSync8,
@@ -47482,13 +48201,13 @@ function loadOrCreatePending(invite, nodeName) {
   const pair = generateKeyPairSync("x25519");
   const pending2 = {
     ...invite,
-    idempotencyKey: randomUUID32(),
+    idempotencyKey: randomUUID34(),
     privateKey: pair.privateKey.export({ format: "der", type: "pkcs8" }).toString("base64url"),
     publicKey: pair.publicKey.export({ format: "der", type: "spki" }).toString("base64url"),
     ...nodeName ? { nodeName } : {}
   };
   mkdirSync37(dirname25(path), { recursive: true });
-  const temporaryPath = resolve27(dirname25(path), `.otium-enrollment-pending.json.${process.pid}.${randomUUID32()}.tmp`);
+  const temporaryPath = resolve27(dirname25(path), `.otium-enrollment-pending.json.${process.pid}.${randomUUID34()}.tmp`);
   let fd;
   try {
     fd = openSync6(temporaryPath, "wx", 384);
@@ -47523,7 +48242,7 @@ function loadOrCreatePending(invite, nodeName) {
 function replacePendingEnrollment(pending2) {
   const path = pendingEnrollmentPath();
   const directory = dirname25(path);
-  const temporaryPath = resolve27(directory, `.otium-enrollment-pending.json.${process.pid}.${randomUUID32()}.tmp`);
+  const temporaryPath = resolve27(directory, `.otium-enrollment-pending.json.${process.pid}.${randomUUID34()}.tmp`);
   let fd;
   try {
     fd = openSync6(temporaryPath, "wx", 384);
@@ -49743,4 +50462,4 @@ switch (command) {
   }
 }
 
-//# debugId=3B82619F70BCB0E864756E2164756E21
+//# debugId=5392FFAC60CD6CD864756E2164756E21