@automagik/omni 2.260901.3 → 2.260902.2

package/dist/server/index.js

@@ -242901,7 +242901,7 @@ var init_sentry_scrub = __esm(() => {
 var require_package7 = __commonJS((exports, module) => {
   module.exports = {
     name: "@omni/api",
-    version: "2.260901.3",
+    version: "2.260902.2",
     type: "module",
     exports: {
       ".": {
@@ -345619,6 +345619,10 @@ async function consumeStream(generator, sender, instanceId, chatId, traceId) {
 function extractThreadId(messages4) {
   return (messages4[0]?.payload.rawPayload ?? {}).threadId;
 }
+function extractCancelThreadId(messages4) {
+  const parsed = CancelThreadPayloadSchema.safeParse(messages4[0]?.payload.rawPayload ?? {});
+  return (parsed.success ? parsed.data.cancelThreadId : undefined) ?? extractThreadId(messages4);
+}
 function extractKhalSessionId(messages4) {
   for (const message2 of messages4) {
     const rawPayload = message2.payload.rawPayload ?? {};
@@ -345759,8 +345763,9 @@ async function dispatchViaStreamingProvider(services, instance4, messages4, trig
   const streamKey = `${instance4.id}:${chatId}`;
   activeStreams.set(streamKey, sender);
   const cancelController = new AbortController;
-  const runKey = runAbortKey(instance4.id, chatId, rawThreadId);
-  activeRunAborts.set(runKey, { controller: cancelController, startedAt: Date.now(), sender });
+  const runKey = runAbortKey(instance4.id, chatId, extractCancelThreadId(messages4));
+  const runEntry = { controller: cancelController, startedAt: Date.now(), sender };
+  activeRunAborts.set(runKey, runEntry);
   trigger.abortSignal = cancelController.signal;
   const streamDispatchStart = Date.now();
   try {
@@ -345794,7 +345799,8 @@ async function dispatchViaStreamingProvider(services, instance4, messages4, trig
     return false;
   } finally {
     activeStreams.delete(streamKey);
-    activeRunAborts.delete(runKey);
+    if (activeRunAborts.get(runKey) === runEntry)
+      activeRunAborts.delete(runKey);
   }
 }
 function formatMediaContent(msg) {
@@ -346004,10 +346010,11 @@ function resolveReplySuppression(flags) {
     return "run_cancelled_by_user";
   return null;
 }
-async function triggerProviderWithCancellation(provider, trigger, spanAttributes, instanceId, chatId, traceId) {
+async function triggerProviderWithCancellation(provider, trigger, spanAttributes, instanceId, chatId, traceId, cancelThreadId = trigger.source.threadId) {
   const cancelController = new AbortController;
-  const runKey = runAbortKey(instanceId, chatId, trigger.source.threadId);
-  activeRunAborts.set(runKey, { controller: cancelController, startedAt: Date.now() });
+  const runKey = runAbortKey(instanceId, chatId, cancelThreadId);
+  const runEntry = { controller: cancelController, startedAt: Date.now() };
+  activeRunAborts.set(runKey, runEntry);
   try {
     const result = await withLifecycleSpan("omni.dispatch_to_agno", spanAttributes, () => provider.trigger({
       ...trigger,
@@ -346022,7 +346029,8 @@ async function triggerProviderWithCancellation(provider, trigger, spanAttributes
     }
     throw err2;
   } finally {
-    activeRunAborts.delete(runKey);
+    if (activeRunAborts.get(runKey) === runEntry)
+      activeRunAborts.delete(runKey);
   }
 }
 async function dispatchViaProvider(services, instance4, messages4, triggerType, channel5, chatId, senderId, personId, senderName, traceId, rawEvent, db2, extraContextMessages, senderAgentId) {
@@ -346098,7 +346106,7 @@ async function dispatchViaProvider(services, instance4, messages4, triggerType,
       ...lifecycleBase,
       stage: "dispatch_to_agno",
       extra: { trigger_type: triggerType, provider_id: provider.id, provider_schema: provider.schema }
-    }), instance4.id, chatId, traceId);
+    }), instance4.id, chatId, traceId, extractCancelThreadId(messages4));
     if (!triggerOutcome)
       return true;
     const { result, cancelled: runCancelled } = triggerOutcome;
@@ -346488,6 +346496,7 @@ function takeQueuedAck(chatKey) {
 }
 async function ackQueuedMessage(info2) {
   const chatKey = `${info2.instanceId}:${info2.chatId}`;
+  let entry;
   try {
     const existing = queuedMessageAcks.get(chatKey);
     if (existing && Date.now() - existing.at < QUEUED_ACK_TIMEOUT_MS)
@@ -346496,16 +346505,22 @@ async function ackQueuedMessage(info2) {
     const messageId = info2.message.payload.externalId;
     if (!instance4 || !messageId)
       return;
-    const entry = { at: Date.now() };
+    entry = { at: Date.now() };
     queuedMessageAcks.set(chatKey, entry);
     const channel5 = info2.message.metadata.channelType ?? instance4.channel;
     const plugin10 = await getPlugin(channel5) ?? null;
-    entry.handle = startAck(plugin10, createPluginAckProvider(plugin10), instance4.id, info2.chatId, messageId, channel5, {
+    const handle = startAck(plugin10, createPluginAckProvider(plugin10), instance4.id, info2.chatId, messageId, channel5, {
       ...buildAckConfig(instance4),
       ackTimeoutMs: QUEUED_ACK_TIMEOUT_MS
     });
+    if (queuedMessageAcks.get(chatKey) !== entry) {
+      handle.release();
+      return;
+    }
+    entry.handle = handle;
   } catch (error3) {
-    queuedMessageAcks.delete(chatKey);
+    if (entry && queuedMessageAcks.get(chatKey) === entry)
+      queuedMessageAcks.delete(chatKey);
     log91.debug("Failed to ack queued message", { chatId: info2.chatId, error: String(error3) });
   }
 }
@@ -347876,7 +347891,7 @@ async function setupAgentDispatcher(eventBus, services, db2) {
     log91.info("Agent dispatcher shutdown complete");
   };
 }
-var import_api32, log91, agentDispatchLimiter, _natsGenieProviderCtor, QUOTED_MESSAGE_MAX_CHARS = 4000, DM_HISTORY_LIMIT = 20, LIFECYCLE_PREVIEW_MAX_CHARS = 160, LIFECYCLE_SENSITIVE_KEY_PARTS, PRESENCE_DEFAULT_MIN_MS = 5000, PRESENCE_DEFAULT_MAX_WAIT_MS = 30000, activeMessageDebouncer = null, DEFAULT_DISPATCH_ERROR_MESSAGE = "Opa, tive um probleminha aqui \uD83D\uDE05 Pode mandar de novo?", DEFAULT_ERROR_HANDOFF_MESSAGE = "T\xF4 com um probleminha t\xE9cnico aqui agora. Logo algu\xE9m do time vai entrar em contato com voc\xEA.", TRANSIENT_DISPATCH_ERROR_PATTERNS, TRANSIENT_DISPATCH_RETRY_DELAYS_MS, CHANNEL_MESSAGE_LIMITS, DEFAULT_MESSAGE_LIMIT = 4000, MEDIA_BASE_PATH3, MEDIA_ICONS, MEDIA_WAIT_NULL, mediaCompletions, mediaResultCache, MEDIA_WAIT_TIMEOUT_MS = 30000, DEFAULT_SEND_MEDIA_PATH_TYPES, BOT_PREFIX = "\uD83E\uDD16 ", activeStreams, activeRunAborts, sessionActivityStore, PROC_REACT_START, PROC_REACT_DONE = "\u2705", queuedMessageAcks, QUEUED_ACK_TIMEOUT_MS = 120000, providerCache, openclawClientPool, _openClawClientCtor, nullFilterWarnedInstances, ACTIVE_OWNER_IDENTIFIER_CACHE_TTL_MS = 1e4, cachedActiveOwnerIdentifiers = null, cachedActiveOwnerIdentifiersAt = 0, tenantCachedActiveOwnerIdentifiers, DEFAULT_GATE_MODEL = "gemini-3-flash-preview", GATE_TIMEOUT_MS = 3000, setupAgentResponder;
+var import_api32, log91, agentDispatchLimiter, _natsGenieProviderCtor, QUOTED_MESSAGE_MAX_CHARS = 4000, DM_HISTORY_LIMIT = 20, LIFECYCLE_PREVIEW_MAX_CHARS = 160, LIFECYCLE_SENSITIVE_KEY_PARTS, PRESENCE_DEFAULT_MIN_MS = 5000, PRESENCE_DEFAULT_MAX_WAIT_MS = 30000, activeMessageDebouncer = null, DEFAULT_DISPATCH_ERROR_MESSAGE = "Opa, tive um probleminha aqui \uD83D\uDE05 Pode mandar de novo?", DEFAULT_ERROR_HANDOFF_MESSAGE = "T\xF4 com um probleminha t\xE9cnico aqui agora. Logo algu\xE9m do time vai entrar em contato com voc\xEA.", TRANSIENT_DISPATCH_ERROR_PATTERNS, TRANSIENT_DISPATCH_RETRY_DELAYS_MS, CHANNEL_MESSAGE_LIMITS, DEFAULT_MESSAGE_LIMIT = 4000, MEDIA_BASE_PATH3, MEDIA_ICONS, MEDIA_WAIT_NULL, mediaCompletions, mediaResultCache, MEDIA_WAIT_TIMEOUT_MS = 30000, DEFAULT_SEND_MEDIA_PATH_TYPES, BOT_PREFIX = "\uD83E\uDD16 ", activeStreams, activeRunAborts, CancelThreadPayloadSchema, sessionActivityStore, PROC_REACT_START, PROC_REACT_DONE = "\u2705", queuedMessageAcks, QUEUED_ACK_TIMEOUT_MS = 120000, providerCache, openclawClientPool, _openClawClientCtor, nullFilterWarnedInstances, ACTIVE_OWNER_IDENTIFIER_CACHE_TTL_MS = 1e4, cachedActiveOwnerIdentifiers = null, cachedActiveOwnerIdentifiersAt = 0, tenantCachedActiveOwnerIdentifiers, DEFAULT_GATE_MODEL = "gemini-3-flash-preview", GATE_TIMEOUT_MS = 3000, setupAgentResponder;
 var init_agent_dispatcher = __esm(() => {
   init_src2();
   init_src();
@@ -347884,6 +347899,7 @@ var init_agent_dispatcher = __esm(() => {
   init_src8();
   init_esm5();
   init_drizzle_orm();
+  init_zod();
   init_idempotency();
   init_sentry_scrub();
   init_agent_runner();
@@ -347934,6 +347950,7 @@ var init_agent_dispatcher = __esm(() => {
   DEFAULT_SEND_MEDIA_PATH_TYPES = ["image", "video", "document"];
   activeStreams = new Map;
   activeRunAborts = new Map;
+  CancelThreadPayloadSchema = exports_external.object({ cancelThreadId: exports_external.string().min(1).optional() });
   sessionActivityStore = new InMemorySessionActivityStore;
   PROC_REACT_START = { audio: "\uD83C\uDFA7", image: "\uD83D\uDC40", video: "\uD83D\uDC40", document: "\uD83D\uDC40" };
   queuedMessageAcks = new Map;
@@ -352912,9 +352929,23 @@ function openProviderSecrets(tenantId, row) {
 
 class ProviderService {
   db;
+  clientCacheInvalidators = [];
   constructor(db2) {
     this.db = db2;
   }
+  onProviderChanged(invalidate) {
+    this.clientCacheInvalidators.push(invalidate);
+  }
+  invalidateCaches(providerId) {
+    runAfterTenantCommit(() => {
+      invalidateProviderCache(providerId);
+      for (const invalidate of this.clientCacheInvalidators) {
+        try {
+          invalidate(providerId);
+        } catch {}
+      }
+    });
+  }
   get tenantId() {
     return currentTenantScope()?.tenantId ?? null;
   }
@@ -352955,7 +352986,7 @@ class ProviderService {
     if (!updated) {
       throw new NotFoundError("AgentProvider", id);
     }
-    invalidateProviderCache(id);
+    this.invalidateCaches(id);
     return openProviderSecrets(tenantId, updated);
   }
   async delete(id) {
@@ -352963,7 +352994,7 @@ class ProviderService {
     if (!result.length) {
       throw new NotFoundError("AgentProvider", id);
     }
-    invalidateProviderCache(id);
+    this.invalidateCaches(id);
   }
   async checkHealth(id) {
     const provider = await this.getById(id);
@@ -355406,6 +355437,9 @@ function createServices(db2, eventBus) {
   batchJobs2.setAuthPlane(authPlane.db);
   const mediaStorage = new MediaStorageService(db2);
   mediaStorage.setTenantAdmissibilityCheck((tenantId) => isTenantWorkAdmissible(authPlane.db, tenantId));
+  const providers2 = new ProviderService(db2);
+  const agentRunner = new AgentRunnerService(db2);
+  providers2.onProviderChanged((providerId) => agentRunner.clearCache(providerId));
   return {
     agents: new AgentService(db2, eventBus),
     agentState: new AgentStateService(eventBus),
@@ -355418,7 +355452,7 @@ function createServices(db2, eventBus) {
     events: new EventService(db2),
     settings,
     access: new AccessService(db2, eventBus, accessCache),
-    providers: new ProviderService(db2),
+    providers: providers2,
     routes: new RouteService(db2, routeResolver),
     routeResolver,
     deadLetters,
@@ -355430,7 +355464,7 @@ function createServices(db2, eventBus) {
     messages: new MessageService(db2, eventBus),
     syncJobs: new SyncJobService(db2, eventBus),
     batchJobs: batchJobs2,
-    agentRunner: new AgentRunnerService(db2),
+    agentRunner,
     tts,
     turns: new TurnService(db2),
     consumerOffsets: new ConsumerOffsetService(db2),
@@ -355833,6 +355867,14 @@ var init_error3 = __esm(() => {
 });
 
 // ../api/src/middleware/rate-limit.ts
+function resolveClientIp(trustedProxyHeaderValue, remoteAddr) {
+  const raw2 = trustedProxyHeaderValue ?? remoteAddr;
+  if (!raw2)
+    return;
+  const hops = raw2.split(",").map((hop) => hop.trim()).filter(Boolean);
+  const parsed = clientIpSchema.safeParse(hops.at(-1));
+  return parsed.success ? parsed.data : undefined;
+}
 function createRateLimiter2(config4 = RATE_LIMITS.general, keyPrefix = "ratelimit") {
   return createMiddleware(async (c, next) => {
     const apiKey = c.get("apiKey");
@@ -355840,8 +355882,13 @@ function createRateLimiter2(config4 = RATE_LIMITS.general, keyPrefix = "ratelimi
     const trustedProxyIp = trustedProxyHeader ? c.req.header(trustedProxyHeader) : undefined;
     const server = c.env;
     const remoteAddr = server?.remoteAddr ?? server?.requestIP?.(c.req.raw)?.address;
-    const rawIp = trustedProxyIp ?? remoteAddr;
-    const normalizedIp = rawIp?.split(",")[0]?.trim() || undefined;
+    const normalizedIp = resolveClientIp(trustedProxyIp, remoteAddr);
+    if (trustedProxyIp !== undefined && normalizedIp === undefined && !warnedUnparseableProxyHop) {
+      warnedUnparseableProxyHop = true;
+      log112.warn("TRUSTED_PROXY_HEADER hop is not a bare IP literal; requests share the anonymous rate-limit bucket", {
+        header: trustedProxyHeader
+      });
+    }
     const identifier = apiKey?.id ? `api:${apiKey.id}` : normalizedIp ? `ip:${normalizedIp}` : "anon";
     const key = `${keyPrefix}:${identifier}`;
     const now = Date.now();
@@ -355880,9 +355927,12 @@ function createRateLimiter2(config4 = RATE_LIMITS.general, keyPrefix = "ratelimi
     setRateLimitHeaders();
   });
 }
-var rateLimitStore, cleanupTimer, RATE_LIMITS, rateLimitMiddleware, webhookIngressRateLimitMiddleware;
+var log112, warnedUnparseableProxyHop = false, rateLimitStore, cleanupTimer, RATE_LIMITS, clientIpSchema, rateLimitMiddleware, webhookIngressRateLimitMiddleware;
 var init_rate_limit = __esm(() => {
+  init_src();
   init_factory2();
+  init_zod();
+  log112 = createLogger("api:rate-limit");
   rateLimitStore = new Map;
   cleanupTimer = setInterval(() => {
     const now = Date.now();
@@ -355899,6 +355949,7 @@ var init_rate_limit = __esm(() => {
     instances: { windowMs: 60 * 1000, maxRequests: 30 },
     general: { windowMs: 60 * 1000, maxRequests: 1000 }
   };
+  clientIpSchema = exports_external.string().ip();
   rateLimitMiddleware = createRateLimiter2(RATE_LIMITS.general);
   webhookIngressRateLimitMiddleware = createRateLimiter2(RATE_LIMITS.events, "ratelimit:webhook-ingress");
 });
@@ -356002,22 +356053,22 @@ function createWebhookAuthMiddleware(config4) {
     const token = c.req.header("x-telegram-bot-api-secret-token");
     if (!token) {
       const ip = c.req.header("x-forwarded-for") || c.req.header("x-real-ip") || "unknown";
-      log112.warn("Webhook request missing secret token", { ip });
+      log113.warn("Webhook request missing secret token", { ip });
       return c.json({ error: { code: "UNAUTHORIZED", message: "Missing webhook secret token" } }, 401);
     }
     if (token !== webhookSecret) {
       const ip = c.req.header("x-forwarded-for") || c.req.header("x-real-ip") || "unknown";
-      log112.warn("Webhook request with invalid secret token", { ip });
+      log113.warn("Webhook request with invalid secret token", { ip });
       return c.json({ error: { code: "UNAUTHORIZED", message: "Invalid webhook secret token" } }, 401);
     }
     return next();
   });
 }
-var log112;
+var log113;
 var init_webhook_auth = __esm(() => {
   init_src();
   init_factory2();
-  log112 = createLogger("api:webhook-auth");
+  log113 = createLogger("api:webhook-auth");
 });
 
 // ../api/src/plugin-state.ts
@@ -360507,7 +360558,10 @@ var init_messages4 = __esm(() => {
     instanceId: exports_external.string().uuid().openapi({ description: "Instance UUID" }),
     to: exports_external.string().openapi({ description: "Recipient" }),
     audioSizeKb: exports_external.number().openapi({ description: "Audio size in KB" }),
-    durationMs: exports_external.number().openapi({ description: "Audio duration in ms" })
+    durationMs: exports_external.number().openapi({ description: "Audio duration in ms" }),
+    senderAgentId: exports_external.string().uuid().nullable().optional().openapi({
+      description: "Present when the request set sentBy: 'agent' \u2014 the agent the send was attributed to, or null when the instance has no configured agent (attribution did not happen)"
+    })
   });
 });
 
@@ -361627,6 +361681,7 @@ var init_voice = __esm(() => {
 
 // ../api/src/schemas/openapi/webhooks.ts
 function registerWebhookSchemas(registry4) {
+  registry4.register("WebhookSignatureConfig", WebhookSignatureConfigSchema);
   registry4.register("WebhookSource", WebhookSourceSchema);
   registry4.register("CreateWebhookSourceRequest", CreateWebhookSourceSchema);
   registry4.register("TriggerEventRequest", TriggerEventSchema);
@@ -361716,7 +361771,7 @@ function registerWebhookSchemas(registry4) {
     operationId: "receiveWebhook",
     tags: ["Webhooks"],
     summary: "Receive webhook",
-    description: "Receive webhook from external system. Creates a custom event.",
+    description: "Receive webhook from external system. Creates a custom event. An empty body is accepted as an empty " + "payload; a non-empty body that is not a JSON object (malformed, array, scalar) is rejected.",
     request: {
       params: exports_external.object({ source: exports_external.string().openapi({ description: "Source name" }) }),
       body: { content: { "application/json": { schema: exports_external.record(exports_external.string(), exports_external.unknown()) } } }
@@ -361725,7 +361780,8 @@ function registerWebhookSchemas(registry4) {
       200: {
         description: "Webhook received",
         content: { "application/json": { schema: WebhookReceiveResponseSchema } }
-      }
+      },
+      400: { description: "Body is not a JSON object", content: { "application/json": { schema: ErrorSchema } } }
     }
   });
   registry4.registerPath({
@@ -361734,7 +361790,7 @@ function registerWebhookSchemas(registry4) {
     operationId: "receiveWebhookIngress",
     tags: ["Webhooks"],
     summary: "Public webhook ingress",
-    description: "Auth-exempt receiver for third-party webhook senders. Requires the source to have a signature " + "configuration; the request is verified against it (HMAC over the raw body, or token match) before any " + "event is published. Unknown, disabled, unconfigured, or badly signed requests all return the same 401.",
+    description: "Auth-exempt receiver for third-party webhook senders. Requires the source to have a signature " + "configuration; the request is verified against it (HMAC over the raw body, or token match) before any " + "event is published. Unknown, disabled, unconfigured, or badly signed requests all return the same 401. " + "A non-empty body that is not a JSON object (malformed, array, scalar) is rejected with 400.",
     security: [],
     request: {
       params: exports_external.object({ source: exports_external.string().openapi({ description: "Source name" }) }),
@@ -361745,6 +361801,7 @@ function registerWebhookSchemas(registry4) {
         description: "Webhook received",
         content: { "application/json": { schema: WebhookReceiveResponseSchema } }
       },
+      400: { description: "Body is not a JSON object", content: { "application/json": { schema: ErrorSchema } } },
       401: { description: "Verification failed", content: { "application/json": { schema: ErrorSchema } } }
     }
   });
@@ -361767,16 +361824,22 @@ function registerWebhookSchemas(registry4) {
 }
 var WebhookSignatureConfigSchema, WebhookSourceSchema, CreateWebhookSourceSchema, TriggerEventSchema, WebhookReceiveResponseSchema;
 var init_webhooks2 = __esm(() => {
+  init_src5();
   init_zod_openapi();
   init_common4();
   WebhookSignatureConfigSchema = exports_external.object({
-    algorithm: exports_external.enum(["hmac-sha256", "hmac-sha1", "token-match"]).openapi({
+    algorithm: exports_external.enum(webhookSignatureAlgorithms).openapi({
       description: "How to verify: HMAC over the raw request body, or direct token match"
     }),
-    header: exports_external.string().openapi({ description: "Header carrying the signature/token (e.g. X-Hub-Signature-256)" }),
-    prefix: exports_external.string().optional().openapi({
-      description: 'Prefix before the hex digest (e.g. "sha256="). HMAC algorithms only \u2014 rejected with token-match'
+    header: exports_external.string().min(1).max(200).openapi({
+      description: "Header carrying the signature/token (e.g. X-Hub-Signature-256). 1-200 characters"
+    }),
+    prefix: exports_external.string().max(50).optional().openapi({
+      description: 'Prefix before the hex digest (e.g. "sha256="), at most 50 characters. HMAC algorithms only \u2014 rejected with token-match'
     })
+  }).refine((config4) => config4.algorithm !== "token-match" || config4.prefix === undefined, {
+    message: "prefix is not applicable to algorithm 'token-match'",
+    path: ["prefix"]
   });
   WebhookSourceSchema = exports_external.object({
     id: exports_external.string().uuid().openapi({ description: "Source UUID" }),
@@ -361790,14 +361853,14 @@ var init_webhooks2 = __esm(() => {
     updatedAt: exports_external.string().datetime().openapi({ description: "Last update timestamp" })
   });
   CreateWebhookSourceSchema = exports_external.object({
-    name: exports_external.string().min(1).max(100).openapi({ description: "Unique source name" }),
+    name: exports_external.string().min(1).max(100).openapi({ description: "Unique source name (e.g., github, stripe, agno)" }),
     description: exports_external.string().optional().openapi({ description: "Description" }),
     expectedHeaders: exports_external.record(exports_external.string(), exports_external.boolean()).optional().openapi({ description: "Headers to validate" }),
     signatureConfig: WebhookSignatureConfigSchema.nullable().optional().openapi({
-      description: "Signature verification config; required for the source to be reachable on the public ingress"
+      description: "Signature verification config; required for the source to be reachable on the public ingress. " + "Always paired with signatureSecret: a config without a stored secret is rejected (400), and clearing " + "the config (null) also clears the stored secret."
     }),
     signatureSecret: exports_external.string().min(8).max(512).nullable().optional().openapi({
-      description: "Shared secret used by signatureConfig (write-only, never returned)"
+      description: "Shared secret used by signatureConfig (write-only, never returned; 8-512 characters). Cannot be set " + "without a signatureConfig (given in the same request, or already stored on update); null clears it."
     }),
     enabled: exports_external.boolean().default(true).openapi({ description: "Whether enabled" })
   });
@@ -363773,7 +363836,7 @@ async function clearAgentSession(services, db2, instanceId, from, chatId, option
   });
   const primaryDelete = await client.deleteSession?.(sessionId);
   const legacyDelete = legacySessionId !== sessionId ? await client.deleteSession?.(legacySessionId) : undefined;
-  log113.info("Agno session delete verified", {
+  log114.info("Agno session delete verified", {
     instanceId,
     sessionId,
     legacySessionId,
@@ -363795,7 +363858,7 @@ async function handleTrashEmojiMessage(services, db2, event) {
     await runTrashEmojiCleanup(services, db2, event);
   });
   if (!result.executed) {
-    log113.debug("Trash emoji event already processed (NATS redelivery skipped)", {
+    log114.debug("Trash emoji event already processed (NATS redelivery skipped)", {
       eventId: event.id,
       instanceId,
       chatId
@@ -363808,11 +363871,11 @@ async function runTrashEmojiCleanup(services, db2, event) {
   if (!instanceId)
     return;
   const tenantId = trustedTenantOf(event);
-  log113.info("Trash emoji detected, clearing session", { instanceId, chatId, from, personId });
+  log114.info("Trash emoji detected, clearing session", { instanceId, chatId, from, personId });
   try {
     const identity = await clearAgentSession(services, db2, instanceId, from, chatId, { personId, rawPayload }, tenantId);
     const { sessionId, legacySessionId, sessionStrategy, source, canonicalSessionId, environment, channelSegment } = identity;
-    log113.info("Session cleared successfully", {
+    log114.info("Session cleared successfully", {
       instanceId,
       sessionId,
       legacySessionId,
@@ -363837,11 +363900,11 @@ async function runTrashEmojiCleanup(services, db2, event) {
           await runTenantWorkDb(db2, tenantId, () => services.chats.update(dbChat.id, {
             settings: { agentPaused: false, agentResumedAt: new Date().toISOString() }
           }));
-          log113.info("Agent resumed after session clear (was paused by handoff)", { instanceId, chatId });
+          log114.info("Agent resumed after session clear (was paused by handoff)", { instanceId, chatId });
         }
       }
     } catch (disarmError) {
-      log113.warn("Failed to disarm follow-up after session clear", {
+      log114.warn("Failed to disarm follow-up after session clear", {
         instanceId,
         chatId,
         error: String(disarmError)
@@ -363849,9 +363912,9 @@ async function runTrashEmojiCleanup(services, db2, event) {
     }
     try {
       await sendMessage(services, db2, instanceId, chatId, "\u2705 Conversa limpa! Sua sess\xE3o com o assistente foi resetada.", tenantId);
-      log113.info("Sent session cleared confirmation", { instanceId, chatId });
+      log114.info("Sent session cleared confirmation", { instanceId, chatId });
     } catch (sendError) {
-      log113.error("Failed to send confirmation message", { instanceId, chatId, error: String(sendError) });
+      log114.error("Failed to send confirmation message", { instanceId, chatId, error: String(sendError) });
     }
   } catch (error3) {
     const errorMessage = error3 instanceof Error ? error3.message : String(error3);
@@ -363862,14 +363925,14 @@ async function runTrashEmojiCleanup(services, db2, event) {
       "Session clearing not supported for"
     ];
     if (skippableErrors.some((e) => errorMessage.includes(e))) {
-      log113.debug("Session clearing skipped", { instanceId, reason: errorMessage });
+      log114.debug("Session clearing skipped", { instanceId, reason: errorMessage });
       return;
     }
-    log113.error("Failed to clear session", { instanceId, chatId, error: errorMessage });
+    log114.error("Failed to clear session", { instanceId, chatId, error: errorMessage });
     try {
       await sendMessage(services, db2, instanceId, chatId, "\u274C Erro ao limpar sess\xE3o. Tente novamente.", tenantId);
     } catch (sendError) {
-      log113.error("Failed to send error message", { instanceId, chatId, error: String(sendError) });
+      log114.error("Failed to send error message", { instanceId, chatId, error: String(sendError) });
     }
   }
 }
@@ -363883,13 +363946,13 @@ async function setupSessionCleaner(eventBus, services, db2) {
       startFrom: "new",
       concurrency: 5
     });
-    log113.info("Session cleaner initialized");
+    log114.info("Session cleaner initialized");
   } catch (error3) {
-    log113.error("Failed to set up session cleaner", { error: String(error3) });
+    log114.error("Failed to set up session cleaner", { error: String(error3) });
     throw error3;
   }
 }
-var log113;
+var log114;
 var init_session_cleaner = __esm(() => {
   init_src();
   init_src5();
@@ -363899,7 +363962,7 @@ var init_session_cleaner = __esm(() => {
   init_worker_tenant_context();
   init_agent_dispatcher();
   init_loader2();
-  log113 = createLogger("session-cleaner");
+  log114 = createLogger("session-cleaner");
 });
 
 // ../api/src/routes/v2/chats.ts
@@ -365274,6 +365337,12 @@ var init_handoffs = __esm(() => {
 });
 
 // ../api/src/lib/whatsapp-business-connection.ts
+function resolveMetaApiVersion(persisted) {
+  const fromEnv = metaGraphApiVersionSchema.safeParse(process.env.META_GRAPH_API_VERSION);
+  if (fromEnv.success)
+    return fromEnv.data;
+  return persisted ?? undefined;
+}
 function applyWhatsAppBusinessConnectionOptions(options, input) {
   if (input.metaAccessToken)
     options.metaAccessToken = input.metaAccessToken;
@@ -365285,7 +365354,7 @@ function applyWhatsAppBusinessConnectionOptions(options, input) {
     options.metaAppId = input.metaAppId;
   if (input.metaBusinessId)
     options.metaBusinessId = input.metaBusinessId;
-  const apiVersion = process.env.META_GRAPH_API_VERSION ?? input.metaApiVersion;
+  const apiVersion = resolveMetaApiVersion(input.metaApiVersion);
   if (apiVersion)
     options.metaApiVersion = apiVersion;
   if (input.metaDisplayPhoneNumber)
@@ -365293,6 +365362,11 @@ function applyWhatsAppBusinessConnectionOptions(options, input) {
   if (input.metaConnectionMethod)
     options.metaConnectionMethod = input.metaConnectionMethod;
 }
+var metaGraphApiVersionSchema;
+var init_whatsapp_business_connection = __esm(() => {
+  init_zod();
+  metaGraphApiVersionSchema = exports_external.string().regex(/^v\d+\.\d+$/);
+});
 
 // ../../node_modules/.bun/qrcode-terminal@0.12.0/node_modules/qrcode-terminal/vendor/QRCode/QRMode.js
 var require_QRMode = __commonJS((exports, module) => {
@@ -366338,12 +366412,12 @@ async function printQrCodeToTerminal(qrCode, instanceId) {
   try {
     const qrTerminalModule = await Promise.resolve().then(() => __toESM(require_main(), 1));
     const qrTerminal = qrTerminalModule.default || qrTerminalModule;
-    log114.info("QR Code generated for WhatsApp", { instanceId });
+    log115.info("QR Code generated for WhatsApp", { instanceId });
     qrTerminal.generate(qrCode, { small: true });
   } catch (error3) {
-    log114.info("QR Code generated", { instanceId, qrCode: `${qrCode.substring(0, 50)}...` });
+    log115.info("QR Code generated", { instanceId, qrCode: `${qrCode.substring(0, 50)}...` });
     if (error3 instanceof Error && process.env.DEBUG) {
-      log114.debug("QR Terminal unavailable", { error: error3.message });
+      log115.debug("QR Terminal unavailable", { error: error3.message });
     }
   }
 }
@@ -366355,13 +366429,13 @@ async function setupQrCodeListener(eventBus) {
       await printQrCodeToTerminal(qrCode, instanceId);
     });
   } catch (error3) {
-    log114.warn("Failed to set up QR code listener", { error: String(error3) });
+    log115.warn("Failed to set up QR code listener", { error: String(error3) });
   }
 }
-var log114, qrCodes;
+var log115, qrCodes;
 var init_qr_store = __esm(() => {
   init_src();
-  log114 = createLogger("api:qr-store");
+  log115 = createLogger("api:qr-store");
   qrCodes = new Map;
 });
 
@@ -366385,29 +366459,29 @@ class AgentReplayService {
       agentId: instances.agentId
     }).from(instances).where(eq(instances.id, instanceId)).limit(1));
     if (!instance4) {
-      log115.warn("Instance not found for replay", { instanceId });
+      log116.warn("Instance not found for replay", { instanceId });
       return;
     }
     if (!instance4.agentId) {
-      log115.debug("Instance has no agent, skipping replay", { instanceId });
+      log116.debug("Instance has no agent, skipping replay", { instanceId });
       await this.updateLastSeenAt(instanceId, undefined, trustedTenantId);
       return;
     }
     if (!instance4.replayEnabled) {
-      log115.debug("Replay disabled for instance", { instanceId });
+      log116.debug("Replay disabled for instance", { instanceId });
       await this.updateLastSeenAt(instanceId, undefined, trustedTenantId);
       return;
     }
     const since = instance4.lastSeenAt ?? null;
     if (!since) {
-      log115.debug("No lastSeenAt recorded, skipping replay (first connect)", { instanceId });
+      log116.debug("No lastSeenAt recorded, skipping replay (first connect)", { instanceId });
       await this.updateLastSeenAt(instanceId, undefined, trustedTenantId);
       return;
     }
-    log115.info("Starting replay on reconnect", { instanceId, since: since.toISOString() });
+    log116.info("Starting replay on reconnect", { instanceId, since: since.toISOString() });
     try {
       const result = await this.replayMissedMessages({ instanceId, since }, trustedTenantId);
-      log115.info("Replay complete", {
+      log116.info("Replay complete", {
         instanceId,
         replayed: result.replayed,
         skipped: result.skipped,
@@ -366415,7 +366489,7 @@ class AgentReplayService {
       });
       await this.updateLastSeenAt(instanceId, result.until, trustedTenantId);
     } catch (error3) {
-      log115.error("Replay failed", { instanceId, error: String(error3) });
+      log116.error("Replay failed", { instanceId, error: String(error3) });
     }
   }
   async replayMissedMessages(options, trustedTenantId) {
@@ -366423,7 +366497,7 @@ class AgentReplayService {
     const now = new Date;
     const cutoff = new Date(now.getTime() - MAX_REPLAY_WINDOW_MS);
     const since = options.since && options.since > cutoff ? options.since : cutoff;
-    log115.debug("Fetching missed messages", { instanceId, since: since.toISOString(), until: now.toISOString() });
+    log116.debug("Fetching missed messages", { instanceId, since: since.toISOString(), until: now.toISOString() });
     let cursorTimestamp = since;
     let cursorId = null;
     let totalReplayed = 0;
@@ -366451,14 +366525,14 @@ class AgentReplayService {
               SELECT 1 FROM ${messages2} AS reply
               WHERE reply.chat_id = ${messages2.chatId}
                 AND reply.is_from_me = true
-                AND COALESCE((reply.raw_payload ->> 'omniSystemNotice')::boolean, false) = false
+                AND (reply.raw_payload -> 'omniSystemNotice') IS DISTINCT FROM 'true'::jsonb
                 AND reply.platform_timestamp > ${messages2.platformTimestamp}
                 AND reply.deleted_at IS NULL
             )`, cursorId ? or2(gt(messages2.platformTimestamp, cursorTimestamp), and2(eq(messages2.platformTimestamp, cursorTimestamp), gt(messages2.id, cursorId))) : gt(messages2.platformTimestamp, cursorTimestamp), lte(messages2.platformTimestamp, now))).orderBy(asc(messages2.platformTimestamp), asc(messages2.id)).limit(PAGE_SIZE));
       if (rows.length === 0)
         break;
       if (rows.length === PAGE_SIZE) {
-        log115.warn("Replay page cap hit, fetching next page", {
+        log116.warn("Replay page cap hit, fetching next page", {
           instanceId,
           limit: PAGE_SIZE,
           cursor: cursorTimestamp.toISOString()
@@ -366486,7 +366560,7 @@ class AgentReplayService {
         await this.redispatchMessage(instanceId, row);
         replayed++;
       } catch (error3) {
-        log115.warn("Failed to redispatch message during replay", {
+        log116.warn("Failed to redispatch message during replay", {
           instanceId,
           messageId: row.id,
           error: String(error3)
@@ -366543,14 +366617,14 @@ function mapMessageTypeToContentType(messageType) {
       return "text";
   }
 }
-var log115, MAX_REPLAY_WINDOW_MS;
+var log116, MAX_REPLAY_WINDOW_MS;
 var init_agent_replay = __esm(() => {
   init_src();
   init_src5();
   init_drizzle_orm();
   init_tenant_scope();
   init_worker_tenant_context();
-  log115 = createLogger("agent-replay");
+  log116 = createLogger("agent-replay");
   MAX_REPLAY_WINDOW_MS = 24 * 60 * 60 * 1000;
 });
 
@@ -366753,15 +366827,15 @@ async function connectInstanceWithPlugin(plugin10, instanceId, options) {
 async function triggerCreateConnection(channelRegistry2, channel5, instanceId, options) {
   const plugin10 = getPluginFromRegistry(channelRegistry2, channel5);
   if (!plugin10) {
-    log116.warn("No plugin found for channel", { channel: channel5 });
+    log117.warn("No plugin found for channel", { channel: channel5 });
     return;
   }
   const errorMessage = await connectInstanceWithPlugin(plugin10, instanceId, options);
   if (errorMessage) {
-    log116.error("Failed to connect instance", { instanceId, error: errorMessage });
+    log117.error("Failed to connect instance", { instanceId, error: errorMessage });
     return;
   }
-  log116.info("Triggered connection", { instanceId, channel: channel5 });
+  log117.info("Triggered connection", { instanceId, channel: channel5 });
 }
 function buildTokenPersistUpdates(channel5, body) {
   const updates = {};
@@ -366799,10 +366873,10 @@ async function handleAgentKeyProvisioning(services, instanceId, newAgentId, oldA
         await services.apiKeys.update(existingKey.id, {
           instanceIds: updated.length > 0 ? updated : null
         });
-        log116.info("Removed instance from agent key", { keyName, instanceId });
+        log117.info("Removed instance from agent key", { keyName, instanceId });
       }
     } catch (err2) {
-      log116.error("Failed to remove instance from old agent key", { oldAgentId, instanceId, error: String(err2) });
+      log117.error("Failed to remove instance from old agent key", { oldAgentId, instanceId, error: String(err2) });
     }
   }
   if (newAgentId) {
@@ -366816,7 +366890,7 @@ async function handleAgentKeyProvisioning(services, instanceId, newAgentId, oldA
           await services.apiKeys.update(existingKey.id, {
             instanceIds: [...currentIds, instanceId]
           });
-          log116.info("Added instance to existing agent key", { keyName, instanceId });
+          log117.info("Added instance to existing agent key", { keyName, instanceId });
         }
       } else {
         const agentScopes = Array.isArray(agent3.metadata?.omniScopes) ? agent3.metadata.omniScopes : [...DEFAULT_TURN_SCOPES];
@@ -366827,10 +366901,10 @@ async function handleAgentKeyProvisioning(services, instanceId, newAgentId, oldA
           instanceIds: [instanceId],
           createdBy: "system:auto-provision"
         });
-        log116.info("Created scoped agent key", { keyName, instanceId, keyId: result.key.id });
+        log117.info("Created scoped agent key", { keyName, instanceId, keyId: result.key.id });
       }
     } catch (err2) {
-      log116.error("Failed to provision agent key", { newAgentId, instanceId, error: String(err2) });
+      log117.error("Failed to provision agent key", { newAgentId, instanceId, error: String(err2) });
     }
   }
 }
@@ -367014,7 +367088,7 @@ function getCacheKey(instanceId, guildId) {
 function invalidateGuildCache(instanceId, guildId) {
   guildConfigCache.delete(getCacheKey(instanceId, guildId));
 }
-var log116, instancesRoutes, instanceAccess2, listQuerySchema12, agentReplyFilterSchema, createInstanceSchema, updateInstanceSchema, DEFAULT_AGENT_REPLY_FILTER, SENSITIVE_INSTANCE_FIELDS, pairingCodeSchema, passkeyBase64UrlSchema, passkeyCredentialSchema, connectInstanceSchema, syncRequestSchema, listContactsQuerySchema, listGroupsQuerySchema, checkNumberSchema, updateBioSchema, blockContactSchema, groupParticipantActionSchema, groupSettingSchema, groupParticipantsSchema, groupParticipantsPatchSchema, updateGroupSubjectSchema, updateGroupDescriptionSchema, updateGroupSettingsSchema, patchGroupSchema, resyncSchema, replaySchema, pairingActionSchema, guildConfigOverrideSchema, guildConfigCache, GUILD_CONFIG_TTL, presenceSchema;
+var log117, instancesRoutes, instanceAccess2, listQuerySchema12, agentReplyFilterSchema, createInstanceSchema, updateInstanceSchema, DEFAULT_AGENT_REPLY_FILTER, SENSITIVE_INSTANCE_FIELDS, pairingCodeSchema, passkeyBase64UrlSchema, passkeyCredentialSchema, connectInstanceSchema, syncRequestSchema, listContactsQuerySchema, listGroupsQuerySchema, checkNumberSchema, updateBioSchema, blockContactSchema, groupParticipantActionSchema, groupSettingSchema, groupParticipantsSchema, groupParticipantsPatchSchema, updateGroupSubjectSchema, updateGroupDescriptionSchema, updateGroupSettingsSchema, patchGroupSchema, resyncSchema, replaySchema, pairingActionSchema, guildConfigOverrideSchema, guildConfigCache, GUILD_CONFIG_TTL, presenceSchema;
 var init_instances3 = __esm(() => {
   init_dist6();
   init_src();
@@ -367022,12 +367096,13 @@ var init_instances3 = __esm(() => {
   init_zod();
   init_cache_keys();
   init_scopes();
+  init_whatsapp_business_connection();
   init_auth();
   init_agent_dispatcher();
   init_qr_store();
   init_access();
   init_agent_replay();
-  log116 = createLogger("api:instances");
+  log117 = createLogger("api:instances");
   instancesRoutes = new Hono2;
   instanceAccess2 = requireInstanceAccess((c) => c.req.param("id") ?? "");
   listQuerySchema12 = exports_external.object({
@@ -367239,7 +367314,7 @@ var init_instances3 = __esm(() => {
       agentIdTouched: data.agentId !== undefined
     })) {
       data.agentReplyFilter = DEFAULT_AGENT_REPLY_FILTER;
-      log116.info("Agent assigned without reply filter \u2014 defaulting to mode:all onDm:true (omni#443)", {
+      log117.info("Agent assigned without reply filter \u2014 defaulting to mode:all onDm:true (omni#443)", {
         agentId: data.agentId,
         defaultFilter: DEFAULT_AGENT_REPLY_FILTER
       });
@@ -367301,7 +367376,7 @@ var init_instances3 = __esm(() => {
       agentIdTouched: data.agentId !== undefined
     })) {
       data.agentReplyFilter = DEFAULT_AGENT_REPLY_FILTER;
-      log116.info("Agent assigned without reply filter \u2014 defaulting to mode:all onDm:true (omni#443)", {
+      log117.info("Agent assigned without reply filter \u2014 defaulting to mode:all onDm:true (omni#443)", {
         instanceId: id,
         agentId: data.agentId,
         defaultFilter: DEFAULT_AGENT_REPLY_FILTER
@@ -367327,7 +367402,7 @@ var init_instances3 = __esm(() => {
       try {
         await plugin10.disconnect(id);
       } catch (error3) {
-        log116.error("Failed to disconnect instance before delete", { instanceId: id, error: String(error3) });
+        log117.error("Failed to disconnect instance before delete", { instanceId: id, error: String(error3) });
       }
     }
     await services.instances.delete(id);
@@ -367335,7 +367410,7 @@ var init_instances3 = __esm(() => {
       try {
         await plugin10.logout(id);
       } catch (error3) {
-        log116.error("Failed to clear channel auth after delete", { instanceId: id, error: String(error3) });
+        log117.error("Failed to clear channel auth after delete", { instanceId: id, error: String(error3) });
       }
     }
     return c.json({ success: true });
@@ -367566,7 +367641,7 @@ var init_instances3 = __esm(() => {
         try {
           await plugin10.disconnect(id);
         } catch (error3) {
-          log116.error("Failed to disconnect instance", { instanceId: id, error: String(error3) });
+          log117.error("Failed to disconnect instance", { instanceId: id, error: String(error3) });
         }
       }
     }
@@ -367648,13 +367723,13 @@ var init_instances3 = __esm(() => {
         try {
           await plugin10.logout(id);
         } catch (error3) {
-          log116.error("Failed to logout instance", { instanceId: id, error: String(error3) });
+          log117.error("Failed to logout instance", { instanceId: id, error: String(error3) });
         }
       } else if (plugin10) {
         try {
           await plugin10.disconnect(id);
         } catch (error3) {
-          log116.error("Failed to disconnect instance during logout", { instanceId: id, error: String(error3) });
+          log117.error("Failed to disconnect instance during logout", { instanceId: id, error: String(error3) });
         }
       }
     }
@@ -368680,7 +368755,7 @@ var init_instances3 = __esm(() => {
           ...chatJids?.length ? { chatJids } : {}
         }
       });
-      log116.info("Resync triggered", {
+      log117.info("Resync triggered", {
         instanceId: id,
         jobId: job.id,
         since: sinceDate.toISOString(),
@@ -368698,7 +368773,7 @@ var init_instances3 = __esm(() => {
       });
     } catch (error3) {
       const message2 = error3 instanceof Error ? error3.message : "Unknown error";
-      log116.error("Failed to trigger resync", { instanceId: id, error: message2 });
+      log117.error("Failed to trigger resync", { instanceId: id, error: message2 });
       return c.json({ error: { code: "RESYNC_FAILED", message: message2 } }, 500);
     }
   });
@@ -368727,7 +368802,7 @@ var init_instances3 = __esm(() => {
     const sinceDate = since ? new Date(since) : undefined;
     try {
       const result = await replayService.replayMissedMessages({ instanceId: instance4.id, since: sinceDate });
-      log116.info("Manual replay triggered", {
+      log117.info("Manual replay triggered", {
         instanceId: instance4.id,
         replayed: result.replayed,
         since: result.since.toISOString()
@@ -368743,7 +368818,7 @@ var init_instances3 = __esm(() => {
       });
     } catch (error3) {
       const message2 = error3 instanceof Error ? error3.message : "Unknown error";
-      log116.error("Manual replay failed", { instanceId: id, error: message2 });
+      log117.error("Manual replay failed", { instanceId: id, error: message2 });
       return c.json({ error: { code: "REPLAY_FAILED", message: message2 } }, 500);
     }
   });
@@ -368876,7 +368951,7 @@ var init_instances3 = __esm(() => {
         plugin10.setGuildConfig(id, guildId, newConfig);
       }
     }
-    log116.info("Guild config updated", {
+    log117.info("Guild config updated", {
       instanceId: id,
       guildId,
       apiKeyId: apiKey?.id,
@@ -368905,7 +368980,7 @@ var init_instances3 = __esm(() => {
         plugin10.removeGuildConfig(id, guildId);
       }
     }
-    log116.info("Guild config deleted", {
+    log117.info("Guild config deleted", {
       instanceId: id,
       guildId,
       apiKeyId: apiKey?.id,
@@ -369820,7 +369895,7 @@ function isValidPathComponent(component) {
 function isValidUUID(str2) {
   return /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(str2);
 }
-var log117, mediaRoutes, mediaStorage = null, ttsAudioFormatSchema, ttsRequestSchema, sttRequestSchema, imagineAspectRatioSchema, imagineRequestSchema, visionRequestSchema, filmAspectRatioSchema, imageMimeTypeSchema, imageBase64Schema, filmRequestSchema, FILM_TIMEOUT_MS, FILM_POLL_INTERVAL_MS = 5000, musicRequestSchema;
+var log118, mediaRoutes, mediaStorage = null, ttsAudioFormatSchema, ttsRequestSchema, sttRequestSchema, imagineAspectRatioSchema, imagineRequestSchema, visionRequestSchema, filmAspectRatioSchema, imageMimeTypeSchema, imageBase64Schema, filmRequestSchema, FILM_TIMEOUT_MS, FILM_POLL_INTERVAL_MS = 5000, musicRequestSchema;
 var init_media2 = __esm(() => {
   init_dist6();
   init_src();
@@ -369828,7 +369903,7 @@ var init_media2 = __esm(() => {
   init_zod();
   init_registry3();
   init_media_storage();
-  log117 = createLogger("routes:media");
+  log118 = createLogger("routes:media");
   mediaRoutes = new Hono2;
   ttsAudioFormatSchema = exports_external.enum(["mp3", "ogg", "opus", "wav", "pcm", "flac", "aac"]);
   ttsRequestSchema = exports_external.object({
@@ -369855,7 +369930,7 @@ var init_media2 = __esm(() => {
       provider = await providerRegistry.resolve("tts", body.provider);
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.warn("TTS provider resolution failed", { provider: body.provider, error: message2 });
+      log118.warn("TTS provider resolution failed", { provider: body.provider, error: message2 });
       return c.json({
         error: {
           code: "PROVIDER_NOT_AVAILABLE",
@@ -369891,7 +369966,7 @@ var init_media2 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.error("TTS synthesis failed", { provider: provider.name, error: message2 });
+      log118.error("TTS synthesis failed", { provider: provider.name, error: message2 });
       return c.json({
         error: {
           code: "TTS_SYNTHESIS_FAILED",
@@ -369919,7 +369994,7 @@ var init_media2 = __esm(() => {
       provider = await providerRegistry.resolve("stt", body.provider);
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.warn("STT provider resolution failed", { provider: body.provider, error: message2 });
+      log118.warn("STT provider resolution failed", { provider: body.provider, error: message2 });
       return c.json({
         error: {
           code: "PROVIDER_NOT_AVAILABLE",
@@ -369963,7 +370038,7 @@ var init_media2 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.error("STT transcription failed", { provider: provider.name, error: message2 });
+      log118.error("STT transcription failed", { provider: provider.name, error: message2 });
       return c.json({
         error: {
           code: "STT_TRANSCRIPTION_FAILED",
@@ -369995,7 +370070,7 @@ var init_media2 = __esm(() => {
       provider = await providerRegistry.resolve("imagegen", body.provider);
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.warn("Imagegen provider resolution failed", { provider: body.provider, error: message2 });
+      log118.warn("Imagegen provider resolution failed", { provider: body.provider, error: message2 });
       return c.json({
         error: {
           code: "PROVIDER_NOT_AVAILABLE",
@@ -370033,7 +370108,7 @@ var init_media2 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.error("Image generation failed", { provider: provider.name, error: message2 });
+      log118.error("Image generation failed", { provider: provider.name, error: message2 });
       return c.json({
         error: {
           code: "IMAGE_GEN_FAILED",
@@ -370058,7 +370133,7 @@ var init_media2 = __esm(() => {
       provider = await providerRegistry.resolve("vision", body.provider);
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.warn("Vision provider resolution failed", { provider: body.provider, error: message2 });
+      log118.warn("Vision provider resolution failed", { provider: body.provider, error: message2 });
       return c.json({
         error: {
           code: "PROVIDER_NOT_AVAILABLE",
@@ -370097,7 +370172,7 @@ var init_media2 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.error("Vision description failed", { provider: provider.name, error: message2 });
+      log118.error("Vision description failed", { provider: provider.name, error: message2 });
       return c.json({
         error: {
           code: "VISION_DESCRIBE_FAILED",
@@ -370135,7 +370210,7 @@ var init_media2 = __esm(() => {
       provider = await providerRegistry.resolve("videogen", body.provider);
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.warn("Videogen provider resolution failed", { provider: body.provider, error: message2 });
+      log118.warn("Videogen provider resolution failed", { provider: body.provider, error: message2 });
       return c.json({
         error: {
           code: "PROVIDER_NOT_AVAILABLE",
@@ -370178,7 +370253,7 @@ var init_media2 = __esm(() => {
       }
       if (operation.state === "failed" || !operation.video) {
         const message2 = operation.error ?? "Video generation failed without error";
-        log117.error("Videogen operation failed", { provider: provider.name, error: message2 });
+        log118.error("Videogen operation failed", { provider: provider.name, error: message2 });
         return c.json({
           error: {
             code: "VIDEO_GEN_FAILED",
@@ -370189,7 +370264,7 @@ var init_media2 = __esm(() => {
         }, 500);
       }
       const video = operation.video;
-      log117.info("Videogen operation complete", {
+      log118.info("Videogen operation complete", {
         provider: provider.name,
         operationId: operation.operationId,
         sizeBytes: video.data.length,
@@ -370208,7 +370283,7 @@ var init_media2 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.error("Videogen request failed", { provider: provider.name, error: message2 });
+      log118.error("Videogen request failed", { provider: provider.name, error: message2 });
       return c.json({
         error: {
           code: "VIDEO_GEN_FAILED",
@@ -370243,7 +370318,7 @@ var init_media2 = __esm(() => {
       provider = await providerRegistry.resolve("musicgen", body.provider);
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.warn("Musicgen provider resolution failed", { provider: body.provider, error: message2 });
+      log118.warn("Musicgen provider resolution failed", { provider: body.provider, error: message2 });
       return c.json({
         error: {
           code: "PROVIDER_NOT_AVAILABLE",
@@ -370282,7 +370357,7 @@ var init_media2 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.error("Music generation failed", { provider: provider.name, error: message2 });
+      log118.error("Music generation failed", { provider: provider.name, error: message2 });
       return c.json({
         error: {
           code: "MUSIC_GEN_FAILED",
@@ -370356,7 +370431,7 @@ var init_media2 = __esm(() => {
         }
       });
     } catch (err2) {
-      log117.error("Media backend read failed", { relativePath, error: String(err2) });
+      log118.error("Media backend read failed", { relativePath, error: String(err2) });
       return c.json({ error: { code: "MEDIA_BACKEND_UNAVAILABLE", message: "Media storage backend unavailable, retry later" } }, 503);
     }
   });
@@ -370425,7 +370500,7 @@ async function resolveReactionTarget(services, instanceId, resolvedTo, messageId
         recoverable: false
       });
     }
-    log118.warn("Reaction target chat not found in DB; deferring fromMe to channel plugin fallback (#386)", {
+    log119.warn("Reaction target chat not found in DB; deferring fromMe to channel plugin fallback (#386)", {
       instanceId,
       resolvedTo,
       messageId,
@@ -370435,7 +370510,7 @@ async function resolveReactionTarget(services, instanceId, resolvedTo, messageId
   }
   const target = isUUID(messageId) ? await getReactionTargetByOmniId(services, instanceId, chat2.id, messageId) : await services.messages.getByExternalId(chat2.id, messageId);
   if (!target) {
-    log118.warn("Reaction target message not found in DB; deferring fromMe to channel plugin fallback (#386)", {
+    log119.warn("Reaction target message not found in DB; deferring fromMe to channel plugin fallback (#386)", {
       instanceId,
       chatId: chat2.id,
       messageId,
@@ -370586,7 +370661,7 @@ function resolveSentByAgentId(sentBy, instance4) {
   if (sentBy !== "agent")
     return;
   if (!instance4.agentId) {
-    log118.warn("sentBy=agent could not be attributed: instance has no configured agent", { instanceId: instance4.id });
+    log119.warn("sentBy=agent could not be attributed: instance has no configured agent", { instanceId: instance4.id });
     return;
   }
   return instance4.agentId;
@@ -370695,10 +370770,10 @@ async function resolveChannelMessageId(services, messageId, instanceId) {
     return messageId;
   const message2 = await services.messages.getById(messageId);
   await verifyMessageInstanceOwnership(services, message2, instanceId);
-  log118.debug("Resolved internal UUID to external ID", { messageId, externalId: message2.externalId });
+  log119.debug("Resolved internal UUID to external ID", { messageId, externalId: message2.externalId });
   return message2.externalId;
 }
-var log118, mediaDownloadLog, messagesRoutes, MIME_BY_EXTENSION, DEFAULT_MIME_BY_MEDIA_TYPE, UUID_REGEX2, permalinkQuerySchema, MessageSourceSchema, MessageTypeSchema, MessageStatusSchema, DeliveryStatusSchema, listQuerySchema14, createMessageSchema, updateMessageSchema, recordEditSchema, addReactionSchema, removeReactionSchema, updateDeliveryStatusSchema, sentByField, MentionSchema, sendTextSchema, sendMediaSchema, sendReactionSchema, sendStickerSchema, sendContactSchema, sendLocationSchema, sendHandoffSchema, sendCloseContactSchema, messageRefSchema, _mediaStorageForDownload = null, sendTtsSchema, forwardMessageSchema, sendPresenceSchema, markMessageReadSchema, markBatchReadSchema, sendPollSchema, sendEmbedSchema, editMessageChannelSchema, deleteMessageChannelSchema, starMessageSchema;
+var log119, mediaDownloadLog, messagesRoutes, MIME_BY_EXTENSION, DEFAULT_MIME_BY_MEDIA_TYPE, UUID_REGEX2, permalinkQuerySchema, MessageSourceSchema, MessageTypeSchema, MessageStatusSchema, DeliveryStatusSchema, listQuerySchema14, createMessageSchema, updateMessageSchema, recordEditSchema, addReactionSchema, removeReactionSchema, updateDeliveryStatusSchema, sentByField, MentionSchema, sendTextSchema, sendMediaSchema, sendReactionSchema, sendStickerSchema, sendContactSchema, sendLocationSchema, sendHandoffSchema, sendCloseContactSchema, messageRefSchema, _mediaStorageForDownload = null, sendTtsSchema, forwardMessageSchema, sendPresenceSchema, markMessageReadSchema, markBatchReadSchema, sendPollSchema, sendEmbedSchema, editMessageChannelSchema, deleteMessageChannelSchema, starMessageSchema;
 var init_messages5 = __esm(() => {
   init_dist6();
   init_src2();
@@ -370714,7 +370789,7 @@ var init_messages5 = __esm(() => {
   init_media_storage();
   init_tenant_scope();
   init__close_contact_config();
-  log118 = createLogger("routes:messages");
+  log119 = createLogger("routes:messages");
   mediaDownloadLog = createLogger("routes:messages:media-download");
   messagesRoutes = new Hono2;
   MIME_BY_EXTENSION = {
@@ -371669,7 +371744,7 @@ var init_messages5 = __esm(() => {
         channelHandoffSupported: hasNativeHandoff,
         ...data.motivoHandoff ? { motivoHandoff: data.motivoHandoff } : {}
       }
-    }).catch((err2) => log118.warn("Failed to persist handoff log", { error: String(err2) }));
+    }).catch((err2) => log119.warn("Failed to persist handoff log", { error: String(err2) }));
     return c.json({
       data: {
         messageId: channelSendResult?.messageId ?? null,
@@ -371770,7 +371845,7 @@ var init_messages5 = __esm(() => {
         closedFields: data.closeFields ?? null,
         closedAt: closedAt.toISOString()
       };
-      services.eventBus.publish("chat.closed", payload, { instanceId: data.instanceId }).catch((err2) => log118.debug("Failed to publish chat.closed", { error: String(err2) }));
+      services.eventBus.publish("chat.closed", payload, { instanceId: data.instanceId }).catch((err2) => log119.debug("Failed to publish chat.closed", { error: String(err2) }));
     }
     return c.json({
       data: {
@@ -373500,7 +373575,7 @@ function makeClient(cfg) {
 function variablesToBodyParameters(variables) {
   return Object.entries(variables).map(([k2, v2]) => [Number.parseInt(k2, 10), v2]).filter(([n2]) => Number.isFinite(n2) && n2 >= 1).sort((a, b3) => a[0] - b3[0]).map(([, v2]) => v2);
 }
-var log119, templatesRoutes, instanceAccess3, idParamSchema6, templateIdParamSchema, templateNameParamSchema, listQuerySchema19, createBodySchema, sendTestBodySchema, sendByNameBodySchema;
+var log120, templatesRoutes, instanceAccess3, idParamSchema6, templateIdParamSchema, templateNameParamSchema, listQuerySchema19, createBodySchema, sendTestBodySchema, sendByNameBodySchema;
 var init_templates3 = __esm(() => {
   init_dist6();
   init_src6();
@@ -373511,7 +373586,7 @@ var init_templates3 = __esm(() => {
   init_dist2();
   init_zod();
   init_auth();
-  log119 = createLogger("routes:whatsapp-templates");
+  log120 = createLogger("routes:whatsapp-templates");
   templatesRoutes = new Hono2;
   instanceAccess3 = requireInstanceAccess((c) => c.req.param("id") ?? "");
   idParamSchema6 = exports_external.object({
@@ -373638,7 +373713,7 @@ var init_templates3 = __esm(() => {
       });
       return c.json({ data: persisted.row }, persisted.created ? 201 : 200);
     } catch (dbErr) {
-      log119.error("[whatsapp-business] local template mirror failed after Meta create", {
+      log120.error("[whatsapp-business] local template mirror failed after Meta create", {
         instanceId,
         metaTemplateId: result.id,
         name: body.name,
@@ -374151,35 +374226,41 @@ var init_voice2 = __esm(() => {
   });
 });
 
+// ../api/src/utils/json-body.ts
+function parseJsonObjectBody(rawBody) {
+  if (!rawBody)
+    return {};
+  let parsed;
+  try {
+    parsed = JSON.parse(rawBody);
+  } catch {
+    throw new ValidationError2(NOT_AN_OBJECT);
+  }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    throw new ValidationError2(NOT_AN_OBJECT);
+  }
+  return parsed;
+}
+var NOT_AN_OBJECT = "Request body must be a JSON object";
+var init_json_body = __esm(() => {
+  init_src();
+});
+
 // ../api/src/routes/v2/webhooks.ts
 function sanitizeSource(source) {
   const { signatureSecret, ...rest } = source;
   return { ...rest, hasSignatureSecret: Boolean(signatureSecret) };
 }
-var webhooksRoutes, signatureConfigSchema, createWebhookSourceSchema, updateWebhookSourceSchema, listQuerySchema21, triggerEventSchema;
+var webhooksRoutes, createWebhookSourceSchema, updateWebhookSourceSchema, listQuerySchema21, triggerEventSchema;
 var init_webhooks3 = __esm(() => {
   init_dist6();
-  init_src5();
   init_dist2();
   init_zod();
+  init_webhooks2();
   init_api_keys();
+  init_json_body();
   webhooksRoutes = new Hono2;
-  signatureConfigSchema = exports_external.object({
-    algorithm: exports_external.enum(webhookSignatureAlgorithms).describe("How to verify: HMAC over the raw body, or token match"),
-    header: exports_external.string().min(1).max(200).describe("Header carrying the signature/token (e.g. X-Hub-Signature-256)"),
-    prefix: exports_external.string().max(50).optional().describe("Prefix before the hex digest (HMAC algorithms only)")
-  }).refine((config4) => config4.algorithm !== "token-match" || config4.prefix === undefined, {
-    message: "prefix is not applicable to algorithm 'token-match'",
-    path: ["prefix"]
-  });
-  createWebhookSourceSchema = exports_external.object({
-    name: exports_external.string().min(1).max(100).describe("Unique source name (e.g., github, stripe, agno)"),
-    description: exports_external.string().optional().describe("Description of the webhook source"),
-    expectedHeaders: exports_external.record(exports_external.string(), exports_external.boolean()).optional().describe("Headers to validate"),
-    signatureConfig: signatureConfigSchema.nullable().optional().describe("Signature verification config"),
-    signatureSecret: exports_external.string().min(8).max(512).nullable().optional().describe("Shared secret (write-only)"),
-    enabled: exports_external.boolean().default(true).describe("Whether source is enabled")
-  });
+  createWebhookSourceSchema = CreateWebhookSourceSchema;
   updateWebhookSourceSchema = createWebhookSourceSchema.partial();
   listQuerySchema21 = exports_external.object({
     enabled: exports_external.coerce.boolean().optional()
@@ -374219,12 +374300,7 @@ var init_webhooks3 = __esm(() => {
     const sourceName = c.req.param("source");
     const services = c.get("services");
     const rawBody = await c.req.text();
-    let payload;
-    try {
-      payload = rawBody ? JSON.parse(rawBody) : {};
-    } catch {
-      payload = {};
-    }
+    const payload = parseJsonObjectBody(rawBody);
     const headers = {};
     for (const [key, value] of Object.entries(c.req.header())) {
       headers[key.toLowerCase()] = value ?? "";
@@ -374290,7 +374366,7 @@ function readMetaAppEnv() {
   return {
     appId: process.env.META_APP_ID,
     appSecret: process.env.META_APP_SECRET,
-    apiVersion: process.env.META_GRAPH_API_VERSION ?? "v25.0"
+    apiVersion: resolveMetaApiVersion(undefined) ?? "v25.0"
   };
 }
 function ensureWhatsAppBusiness(instance4) {
@@ -374336,7 +374412,7 @@ async function readProfilePhotoUpload(c) {
     fileType: blob.type || "image/jpeg"
   };
 }
-var log120, whatsappBusinessRoutes, instanceAccess4, analyticsQuerySchema2, updateProfileSchema;
+var log121, whatsappBusinessRoutes, instanceAccess4, analyticsQuerySchema2, updateProfileSchema;
 var init_whatsapp_business3 = __esm(() => {
   init_dist6();
   init_src6();
@@ -374345,8 +374421,9 @@ var init_whatsapp_business3 = __esm(() => {
   init_dist2();
   init_zod();
   init_oauth_token_cache();
+  init_whatsapp_business_connection();
   init_auth();
-  log120 = createLogger("api:whatsapp-business");
+  log121 = createLogger("api:whatsapp-business");
   whatsappBusinessRoutes = new Hono2;
   instanceAccess4 = requireInstanceAccess((c) => c.req.param("id") ?? "");
   whatsappBusinessRoutes.use("/:id/whatsapp-business/*", instanceAccess4);
@@ -374372,7 +374449,7 @@ var init_whatsapp_business3 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log120.error("OAuth exchange failed", { error: message2 });
+      log121.error("OAuth exchange failed", { error: message2 });
       return c.json({ error: { code: "OAUTH_EXCHANGE_FAILED", message: message2 } }, 400);
     }
   });
@@ -374432,7 +374509,7 @@ var init_whatsapp_business3 = __esm(() => {
         await services.instances.update(id, { metaDisplayPhoneNumber: displayPhoneNumber });
       }
     } catch (err2) {
-      log120.warn("Failed to fetch phone_number info during connect \u2014 continuing", {
+      log121.warn("Failed to fetch phone_number info during connect \u2014 continuing", {
         instanceId: id,
         error: err2 instanceof Error ? err2.message : String(err2)
       });
@@ -374458,7 +374535,7 @@ var init_whatsapp_business3 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log120.error("plugin.connect failed for whatsapp-business", { instanceId: id, error: message2 });
+      log121.error("plugin.connect failed for whatsapp-business", { instanceId: id, error: message2 });
       return c.json({ error: { code: "CONNECT_FAILED", message: message2 } }, 500);
     }
     return c.json({
@@ -374486,7 +374563,7 @@ var init_whatsapp_business3 = __esm(() => {
       return c.json({ ok: true });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log120.error("register phone number failed", { instanceId: id, error: message2 });
+      log121.error("register phone number failed", { instanceId: id, error: message2 });
       return c.json({ error: { code: "REGISTER_FAILED", message: message2 } }, 500);
     }
   });
@@ -374505,7 +374582,7 @@ var init_whatsapp_business3 = __esm(() => {
       return c.json({ subscribed: result.success });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log120.error("subscribe app failed", { instanceId: id, error: message2 });
+      log121.error("subscribe app failed", { instanceId: id, error: message2 });
       return c.json({ error: { code: "SUBSCRIBE_FAILED", message: message2 } }, 500);
     }
   });
@@ -374543,7 +374620,7 @@ var init_whatsapp_business3 = __esm(() => {
       try {
         await plugin10.disconnect(id);
       } catch (err2) {
-        log120.warn("plugin.disconnect failed during connection delete", {
+        log121.warn("plugin.disconnect failed during connection delete", {
           instanceId: id,
           error: err2 instanceof Error ? err2.message : String(err2)
         });
@@ -374756,7 +374833,7 @@ function flowJsonInvalid(issues) {
     issues
   };
 }
-var log121, whatsappFlowsRoutes, instanceAccess5, idParamSchema8, flowIdParamSchema, FlowCategorySchema2, createBodySchema2, updateBodySchema, sendBodySchema;
+var log122, whatsappFlowsRoutes, instanceAccess5, idParamSchema8, flowIdParamSchema, FlowCategorySchema2, createBodySchema2, updateBodySchema, sendBodySchema;
 var init_whatsapp_flows3 = __esm(() => {
   init_dist6();
   init_src6();
@@ -374769,7 +374846,7 @@ var init_whatsapp_flows3 = __esm(() => {
   init_auth();
   init_sealed_credentials();
   init_whatsapp_business3();
-  log121 = createLogger("routes:whatsapp-flows");
+  log122 = createLogger("routes:whatsapp-flows");
   whatsappFlowsRoutes = new Hono2;
   instanceAccess5 = requireInstanceAccess((c) => c.req.param("id") ?? "");
   idParamSchema8 = exports_external.object({
@@ -374880,7 +374957,7 @@ var init_whatsapp_flows3 = __esm(() => {
       }
     });
     const status = await resolved.client.getBusinessPublicKey().catch(() => null);
-    log121.info("flow encryption key registered", { instanceId });
+    log122.info("flow encryption key registered", { instanceId });
     return c.json({
       data: {
         uploaded: true,
@@ -375012,7 +375089,7 @@ var init_whatsapp_flows3 = __esm(() => {
       metadata: { flow: { ...flow, flowToken } }
     });
     if (!result.success) {
-      log121.error("flow send failed", { instanceId, to, error: result.error, errorCode: result.errorCode });
+      log122.error("flow send failed", { instanceId, to, error: result.error, errorCode: result.errorCode });
       return c.json(jsonError2(result.error ?? "Flow send failed", result.errorCode ?? "SEND_FAILED"), 500);
     }
     return c.json({ messageId: result.messageId, flowToken }, 201);
@@ -375524,18 +375601,14 @@ function createApp(db2, eventBus = null, channelRegistry2 = null) {
     const sourceName = c.req.param("source");
     const services2 = c.get("services");
     const rawBody = await c.req.text();
-    let payload = {};
-    if (rawBody) {
-      let parsed;
-      try {
-        parsed = JSON.parse(rawBody);
-      } catch {
-        parsed = undefined;
-      }
-      if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-        return c.json({ error: { code: "VALIDATION", message: "Request body must be a JSON object" } }, 400);
+    let payload;
+    try {
+      payload = parseJsonObjectBody(rawBody);
+    } catch (error3) {
+      if (error3 instanceof ValidationError2) {
+        return c.json({ error: { code: "VALIDATION", message: error3.message } }, 400);
       }
-      payload = parsed;
+      throw error3;
     }
     const headers = {};
     for (const [key, value] of Object.entries(c.req.header())) {
@@ -375638,6 +375711,7 @@ var init_app = __esm(() => {
   init_v2();
   init_platform_tenants2();
   init_a2a_discovery();
+  init_json_body();
   httpLog = createLogger("http");
 });
 
@@ -375924,12 +375998,12 @@ async function setupEventPersistence(eventBus, db2) {
           const tracker = getJourneyTracker();
           tracker.recordCheckpoint(metadata.correlationId, "T4", JOURNEY_STAGES.T4);
         }
-        log122.debug("Persisted message.received", {
+        log123.debug("Persisted message.received", {
           externalId: payload.externalId,
           instanceId: metadata.instanceId
         });
       } catch (error3) {
-        log122.error("Failed to persist message.received", {
+        log123.error("Failed to persist message.received", {
           externalId: payload.externalId,
           error: String(error3)
         });
@@ -375973,12 +376047,12 @@ async function setupEventPersistence(eventBus, db2) {
           };
           await sdb.insert(omniEvents).values(newEvent).onConflictDoNothing({ target: omniEvents.id });
         });
-        log122.debug("Persisted message.sent", {
+        log123.debug("Persisted message.sent", {
           externalId: payload.externalId,
           instanceId: metadata.instanceId
         });
       } catch (error3) {
-        log122.error("Failed to persist message.sent", {
+        log123.error("Failed to persist message.sent", {
           externalId: payload.externalId,
           error: String(error3)
         });
@@ -376014,11 +376088,11 @@ async function setupEventPersistence(eventBus, db2) {
             await sdb.insert(omniEvents).values(newEvent).onConflictDoNothing({ target: omniEvents.id });
           }
         });
-        log122.debug("Persisted message.delivered", {
+        log123.debug("Persisted message.delivered", {
           externalId: payload.externalId
         });
       } catch (error3) {
-        log122.error("Failed to persist message.delivered", {
+        log123.error("Failed to persist message.delivered", {
           externalId: payload.externalId,
           error: String(error3)
         });
@@ -376053,11 +376127,11 @@ async function setupEventPersistence(eventBus, db2) {
             await sdb.insert(omniEvents).values(newEvent).onConflictDoNothing({ target: omniEvents.id });
           }
         });
-        log122.debug("Persisted message.read", {
+        log123.debug("Persisted message.read", {
           externalId: payload.externalId
         });
       } catch (error3) {
-        log122.error("Failed to persist message.read", {
+        log123.error("Failed to persist message.read", {
           externalId: payload.externalId,
           error: String(error3)
         });
@@ -376108,33 +376182,33 @@ async function setupEventPersistence(eventBus, db2) {
           }
           return updated.length;
         });
-        log122.debug("Persisted message.failed", {
+        log123.debug("Persisted message.failed", {
           chatId: payload.chatId,
           externalId: payload.externalId,
           updatedRows,
           error: payload.error
         });
       } catch (error3) {
-        log122.error("Failed to persist message.failed", {
+        log123.error("Failed to persist message.failed", {
           chatId: payload.chatId,
           error: String(error3)
         });
       }
     }, { ...CONSUMER_OPTIONS, durable: "event-persistence-failed" });
-    log122.info("Event persistence initialized - listening for message events");
+    log123.info("Event persistence initialized - listening for message events");
   } catch (error3) {
-    log122.error("Failed to set up event persistence", { error: String(error3) });
+    log123.error("Failed to set up event persistence", { error: String(error3) });
     throw error3;
   }
 }
-var log122, CONSUMER_OPTIONS;
+var log123, CONSUMER_OPTIONS;
 var init_event_persistence = __esm(() => {
   init_src();
   init_src5();
   init_drizzle_orm();
   init_tenant_scope();
   init_worker_tenant_context();
-  log122 = createLogger("event-persistence");
+  log123 = createLogger("event-persistence");
   CONSUMER_OPTIONS = {
     queue: "event-persistence",
     maxRetries: 3,
@@ -376218,27 +376292,27 @@ async function downloadMediaFromUrl(ctx, instanceId, messageId, mediaUrl, mimeTy
   try {
     const result = await ctx.mediaStorage.storeFromUrl(instanceId, messageId, mediaUrl, mimeType, platformTimestamp, fetchOptions, trustedTenantId);
     await runMediaDb(ctx, trustedTenantId, () => ctx.mediaStorage.updateMessageLocalPath(messageId, result.localPath));
-    log123.debug("Downloaded media from URL", { messageId, filePath: result.localPath });
+    log124.debug("Downloaded media from URL", { messageId, filePath: result.localPath });
     return result.localPath;
   } catch (error3) {
-    log123.error("Failed to download media", { error: String(error3), mediaUrl });
+    log124.error("Failed to download media", { error: String(error3), mediaUrl });
     return null;
   }
 }
 async function downloadMediaViaPlugin(ctx, instanceId, messageId, channelType, mediaRef, fallbackMimeType, platformTimestamp, trustedTenantId) {
   const plugin10 = await (ctx.resolveChannelPlugin ?? getPlugin)(channelType);
   if (!plugin10?.downloadInboundMedia) {
-    log123.warn("Channel plugin cannot materialize deferred media", { channelType, messageId });
+    log124.warn("Channel plugin cannot materialize deferred media", { channelType, messageId });
     return null;
   }
   try {
     const { buffer: buffer3, mimeType } = pluginMediaSchema.parse(await plugin10.downloadInboundMedia(instanceId, mediaRef));
     const result = await ctx.mediaStorage.storeFromBuffer(instanceId, messageId, buffer3, mimeType || fallbackMimeType, platformTimestamp, trustedTenantId);
     await runMediaDb(ctx, trustedTenantId, () => ctx.mediaStorage.updateMessageLocalPath(messageId, result.localPath));
-    log123.debug("Downloaded inbound media via plugin", { messageId, channelType, filePath: result.localPath });
+    log124.debug("Downloaded inbound media via plugin", { messageId, channelType, filePath: result.localPath });
     return result.localPath;
   } catch (error3) {
-    log123.error("Failed to download inbound media via plugin", {
+    log124.error("Failed to download inbound media via plugin", {
       error: String(error3),
       channelType,
       messageId
@@ -376256,7 +376330,7 @@ async function resolveMediaPath2(ctx, instanceId, chatId, externalId, content, m
     chat2 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.chats.findByExternalIdSmart(instanceId, chatId));
   }
   if (!chat2) {
-    log123.debug("Chat not found, cannot process media", { chatId, externalId });
+    log124.debug("Chat not found, cannot process media", { chatId, externalId });
     return null;
   }
   const chatDbId = chat2.id;
@@ -376266,7 +376340,7 @@ async function resolveMediaPath2(ctx, instanceId, chatId, externalId, content, m
     message2 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.messages.getByExternalId(chatDbId, externalId));
   }
   if (!message2) {
-    log123.debug("Message not found after waiting, cannot process media", { externalId });
+    log124.debug("Message not found after waiting, cannot process media", { externalId });
     return null;
   }
   let filePath = message2.mediaLocalPath;
@@ -376281,7 +376355,7 @@ async function resolveMediaPath2(ctx, instanceId, chatId, externalId, content, m
       return null;
   }
   if (!filePath) {
-    log123.debug("No media file path available", { externalId });
+    log124.debug("No media file path available", { externalId });
     return null;
   }
   return {
@@ -376304,13 +376378,13 @@ async function resolveSafeMediaContentEventId(ctx, envelope2, eventId) {
         return event?.id ?? null;
       });
     } catch (error3) {
-      log123.debug("Failed to validate media_content event FK", { eventId: id, error: String(error3) });
+      log124.debug("Failed to validate media_content event FK", { eventId: id, error: String(error3) });
       return null;
     }
     if (found)
       return found;
     if (Date.now() >= deadline) {
-      log123.debug("Skipping media_content event FK; omni_event not found", { eventId: id });
+      log124.debug("Skipping media_content event FK; omni_event not found", { eventId: id });
       return null;
     }
     await new Promise((resolve4) => setTimeout(resolve4, pollMs));
@@ -376346,7 +376420,7 @@ async function persistProcessingResult(ctx, messageId, safeEventId, result, cont
       await sdb.insert(mediaContent).values(row);
     }
   } catch (error3) {
-    log123.warn("Failed to insert media_content record (non-critical)", {
+    log124.warn("Failed to insert media_content record (non-critical)", {
       messageId,
       error: String(error3)
     });
@@ -376369,14 +376443,14 @@ async function processMessageMedia(ctx, payload, metadata, envelope2) {
   const mimeType = getMimeType2(content);
   const trustedTenantId = envelopeTenantId(envelope2);
   if (!mimeType || !ctx.mediaService.canProcess(mimeType)) {
-    log123.debug("MIME type not processable or missing", { mimeType, externalId });
+    log124.debug("MIME type not processable or missing", { mimeType, externalId });
     return;
   }
   const media = await resolveMediaPath2(ctx, instanceId, payload.chatId, externalId, content, mimeType, metadata.channelType, trustedTenantId);
   if (!media)
     return;
   const processable = await ctx.mediaStorage.materializeForProcessing(media.filePath);
-  log123.info("Processing media", { messageId: media.messageId, mimeType, filePath: processable.path });
+  log124.info("Processing media", { messageId: media.messageId, mimeType, filePath: processable.path });
   let result;
   try {
     result = await ctx.mediaService.process(processable.path, mimeType, {
@@ -376389,7 +376463,7 @@ async function processMessageMedia(ctx, payload, metadata, envelope2) {
   }
   if (!result.success) {
     const reason2 = result.errorMessage ?? "unknown";
-    log123.warn("Media processing failed", { messageId: media.messageId, error: reason2 });
+    log124.warn("Media processing failed", { messageId: media.messageId, error: reason2 });
     const processingType = result.processingType ?? inferProcessingType(content.type);
     const errorColumn = getContentFieldForType(processingType, content.type);
     if (errorColumn) {
@@ -376417,7 +376491,7 @@ async function processMessageMedia(ctx, payload, metadata, envelope2) {
   }
   const safeEventId = await resolveSafeMediaContentEventId(ctx, envelope2, eventId);
   await runConsumerInTenantContext(ctx.db, envelope2, () => persistProcessingResult(ctx, media.messageId, safeEventId, result, content.type));
-  log123.info("Media processing complete", {
+  log124.info("Media processing complete", {
     messageId: media.messageId,
     processingType: result.processingType,
     provider: result.provider,
@@ -376457,7 +376531,7 @@ async function publishMediaCrashEvents(ctx, eventId, payload, metadata, error3,
       error: reason2
     }, meta);
   } catch (publishError) {
-    log123.error("Failed to publish media failure event", { error: String(publishError) });
+    log124.error("Failed to publish media failure event", { error: String(publishError) });
   }
 }
 async function resolveMediaIdForCrash(ctx, instanceId, payload, trustedTenantId) {
@@ -376471,7 +376545,7 @@ async function resolveMediaIdForCrash(ctx, instanceId, payload, trustedTenantId)
     if (msg)
       return msg.id;
   } catch (lookupError) {
-    log123.debug("Failed to resolve DB message UUID for crash handler, falling back to externalId", {
+    log124.debug("Failed to resolve DB message UUID for crash handler, falling back to externalId", {
       error: String(lookupError),
       instanceId,
       chatId: payload.chatId
@@ -376544,7 +376618,7 @@ async function setupMediaProcessor(eventBus, db2, services) {
         channelType: metadata.channelType
       }, event);
     } catch (error3) {
-      log123.error("Failed to process media", {
+      log124.error("Failed to process media", {
         externalId: payload.externalId,
         error: String(error3)
       });
@@ -376559,14 +376633,14 @@ async function setupMediaProcessor(eventBus, db2, services) {
     concurrency: 5
   });
   setGlobalCircuitBreakerStateChangeCallback((name, from, to) => {
-    log123.warn("Circuit breaker state change", { provider: name, from, to });
+    log124.warn("Circuit breaker state change", { provider: name, from, to });
   });
   await eventBus.subscribePattern("media.health.request", async (event) => {
     const tracker = getMediaHealthTracker();
     const report = tracker.getReport();
     const correlationId = event.metadata?.correlationId ?? event.id;
     await eventBus.publishGeneric("system.media.health.response", { correlationId, report }, { source: "media-processor" });
-    log123.debug("Published media health report", {
+    log124.debug("Published media health report", {
       correlationId,
       totalRequests: report.overall.totalRequests,
       successRate: report.overall.successRate
@@ -376575,9 +376649,9 @@ async function setupMediaProcessor(eventBus, db2, services) {
     durable: "media-health-responder",
     queue: "media-health-responder"
   });
-  log123.info("Media processor initialized");
+  log124.info("Media processor initialized");
 }
-var log123, PROCESSABLE_MEDIA_TYPES, pluginMediaSchema;
+var log124, PROCESSABLE_MEDIA_TYPES, pluginMediaSchema;
 var init_media_processor = __esm(() => {
   init_src();
   init_src5();
@@ -376588,7 +376662,7 @@ var init_media_processor = __esm(() => {
   init_tenant_scope();
   init_worker_tenant_context();
   init_loader2();
-  log123 = createLogger("media-processor");
+  log124 = createLogger("media-processor");
   PROCESSABLE_MEDIA_TYPES = new Set(["audio", "image", "document", "video"]);
   pluginMediaSchema = exports_external.object({
     buffer: exports_external.instanceof(Buffer),
@@ -376619,7 +376693,7 @@ function createInflightRevocationMonitor(options) {
       try {
         admissible = await check2(tenantId);
       } catch (error3) {
-        log124.warn("Admissibility check failed \u2014 refusing in-flight work", {
+        log125.warn("Admissibility check failed \u2014 refusing in-flight work", {
           tenantId,
           error: String(error3)
         });
@@ -376633,10 +376707,10 @@ function createInflightRevocationMonitor(options) {
     }
   };
 }
-var log124, INFLIGHT_REVOCATION_CEILING_SECONDS = 30, InflightRevocationError;
+var log125, INFLIGHT_REVOCATION_CEILING_SECONDS = 30, InflightRevocationError;
 var init_inflight_revocation = __esm(() => {
   init_src();
-  log124 = createLogger("inflight-revocation");
+  log125 = createLogger("inflight-revocation");
   InflightRevocationError = class InflightRevocationError extends Error {
     code = "inflight_tenant_revoked";
     constructor(tenantId) {
@@ -376710,7 +376784,7 @@ async function setupSyncWorker(eventBus, services, channelRegistry2, database) {
     await eventBus.subscribe("sync.started", async (event) => {
       const payload = event.payload;
       const { jobId, instanceId, type, config: config4 } = payload;
-      log125.info("Processing sync job", { jobId, instanceId, type });
+      log126.info("Processing sync job", { jobId, instanceId, type });
       const jobTenantId = trustedSyncTenant(event);
       try {
         await services.syncJobs.start(jobId, jobTenantId);
@@ -376738,12 +376812,12 @@ async function setupSyncWorker(eventBus, services, channelRegistry2, database) {
           case "history-push":
             break;
           default:
-            log125.warn("Unknown sync type", { jobId, type });
+            log126.warn("Unknown sync type", { jobId, type });
             await services.syncJobs.fail(jobId, `Unknown sync type: ${type}`, jobTenantId);
         }
       } catch (error3) {
         const errorMessage = error3 instanceof Error ? error3.message : String(error3);
-        log125.error("Sync job failed", { jobId, error: errorMessage });
+        log126.error("Sync job failed", { jobId, error: errorMessage });
         await services.syncJobs.fail(jobId, errorMessage, jobTenantId);
       }
     }, {
@@ -376751,9 +376825,9 @@ async function setupSyncWorker(eventBus, services, channelRegistry2, database) {
       queue: "sync-workers",
       startFrom: "new"
     });
-    log125.info("Sync worker initialized - listening for sync.started events");
+    log126.info("Sync worker initialized - listening for sync.started events");
   } catch (error3) {
-    log125.error("Failed to set up sync worker", { error: String(error3) });
+    log126.error("Failed to set up sync worker", { error: String(error3) });
     throw error3;
   }
 }
@@ -376791,20 +376865,20 @@ async function buildWhatsAppAnchors(database, instanceId) {
       });
     }
   }
-  log125.info("Built WhatsApp anchors", { instanceId, anchorCount: anchors.length });
+  log126.info("Built WhatsApp anchors", { instanceId, anchorCount: anchors.length });
   return anchors;
 }
 function buildAnchorsForExplicitChatJids(jobId, chatJids, dbAnchors) {
-  log125.info("Using explicit chatJids for sync", { jobId, chatJids });
+  log126.info("Using explicit chatJids for sync", { jobId, chatJids });
   const anchors = [];
   for (const jid of chatJids) {
     const dbAnchor = dbAnchors.find((a) => a.chatJid === jid);
     if (dbAnchor) {
-      log125.debug("Found DB anchor for chatJid", { jobId, chatJid: jid, anchorId: dbAnchor.messageKey.id });
+      log126.debug("Found DB anchor for chatJid", { jobId, chatJid: jid, anchorId: dbAnchor.messageKey.id });
       anchors.push(dbAnchor);
       continue;
     }
-    log125.debug("No DB anchor for chatJid, will fetch recent", { jobId, chatJid: jid });
+    log126.debug("No DB anchor for chatJid, will fetch recent", { jobId, chatJid: jid });
     anchors.push({
       chatJid: jid,
       messageKey: { remoteJid: jid, id: "", fromMe: false },
@@ -376830,7 +376904,7 @@ async function discoverAnchorsFromPlugin(jobId, instanceId, plugin10, dbAnchors,
     discovered.push({ chatJid: jid, messageKey: { remoteJid: jid, id: "", fromMe: false }, timestamp: Date.now() });
   }
   if (discovered.length > 0) {
-    log125.info("Discovered chats from DB + Baileys not in anchors", {
+    log126.info("Discovered chats from DB + Baileys not in anchors", {
       jobId,
       discoveredCount: discovered.length,
       fromDb: dbExternalIds.length,
@@ -376856,7 +376930,7 @@ async function processMessageSync(jobId, instanceId, channelType, config4, servi
   await revocation.assertAdmissible();
   let inflightRevoked = null;
   if (!("fetchHistory" in plugin10) || typeof plugin10.fetchHistory !== "function") {
-    log125.warn("Plugin does not support fetchHistory", { channelType });
+    log126.warn("Plugin does not support fetchHistory", { channelType });
     await services.syncJobs.complete(jobId, jobTenantId);
     return;
   }
@@ -376865,7 +376939,7 @@ async function processMessageSync(jobId, instanceId, channelType, config4, servi
   let fetched = 0;
   let stored = 0;
   let duplicates = 0;
-  log125.info("Starting message sync", {
+  log126.info("Starting message sync", {
     jobId,
     instanceId,
     channelType,
@@ -376875,13 +376949,13 @@ async function processMessageSync(jobId, instanceId, channelType, config4, servi
   if (channelType === "whatsapp-baileys" && config4.chatJids?.length) {
     const dbAnchors = handle ? await inSyncWorkerScope(envelope2, () => buildWhatsAppAnchors(handle, instanceId)) : [];
     anchors = await resolveWhatsAppAnchors(jobId, instanceId, config4, plugin10, dbAnchors, services, envelope2);
-    log125.info("WhatsApp per-chat active sync", { jobId, anchorCount: anchors.length, chatJids: config4.chatJids });
+    log126.info("WhatsApp per-chat active sync", { jobId, anchorCount: anchors.length, chatJids: config4.chatJids });
   } else if (channelType === "whatsapp-baileys") {
     const dbAnchors = handle ? await inSyncWorkerScope(envelope2, () => buildWhatsAppAnchors(handle, instanceId)) : [];
     const discoveredAnchors = await discoverAnchorsFromPlugin(jobId, instanceId, plugin10, dbAnchors, services, envelope2);
     anchors = [...dbAnchors, ...discoveredAnchors];
     if (anchors.length > 0) {
-      log125.info("WhatsApp default sync with DB+cache discovery", {
+      log126.info("WhatsApp default sync with DB+cache discovery", {
         jobId,
         instanceId,
         dbAnchorCount: dbAnchors.length,
@@ -376889,7 +376963,7 @@ async function processMessageSync(jobId, instanceId, channelType, config4, servi
         totalAnchors: anchors.length
       });
     } else {
-      log125.info("WhatsApp passive sync (no prior data)", { jobId, instanceId });
+      log126.info("WhatsApp passive sync (no prior data)", { jobId, instanceId });
     }
   }
   const fetchOptions = {
@@ -376952,7 +377026,7 @@ async function processMessageSync(jobId, instanceId, channelType, config4, servi
         else
           stored++;
       } catch (error3) {
-        log125.warn("Failed to store synced message", {
+        log126.warn("Failed to store synced message", {
           externalId: msg.externalId,
           error: String(error3)
         });
@@ -376972,7 +377046,7 @@ async function processMessageSync(jobId, instanceId, channelType, config4, servi
   }, jobTenantId);
   await queueMediaBackfillAfterSync(services, config4, instanceId, jobId, stored, jobTenantId);
   await services.syncJobs.complete(jobId, jobTenantId);
-  log125.info("Message sync completed", {
+  log126.info("Message sync completed", {
     jobId,
     fetched,
     stored,
@@ -376994,9 +377068,9 @@ async function queueMediaBackfillAfterSync(services, config4, instanceId, jobId,
       delayMaxMs: config4.delayMaxMs ?? 3000
     };
     const batch = await services.batchJobs.create(params, trustedTenantId);
-    log125.info("Queued media backfill batch after message sync", { jobId, batchJobId: batch.id, stored });
+    log126.info("Queued media backfill batch after message sync", { jobId, batchJobId: batch.id, stored });
   } catch (error3) {
-    log125.warn("Failed to queue media backfill batch after message sync", { jobId, error: String(error3) });
+    log126.warn("Failed to queue media backfill batch after message sync", { jobId, error: String(error3) });
   }
 }
 function mapContentType3(contentType) {
@@ -377045,14 +377119,14 @@ async function processContactsSync(jobId, instanceId, channelType, config4, serv
   await revocation.assertAdmissible();
   let inflightRevoked = null;
   if (!("fetchContacts" in plugin10) || typeof plugin10.fetchContacts !== "function") {
-    log125.warn("Plugin does not support fetchContacts", { channelType });
+    log126.warn("Plugin does not support fetchContacts", { channelType });
     await services.syncJobs.complete(jobId, jobTenantId);
     return;
   }
   let fetched = 0;
   let stored = 0;
   let linked = 0;
-  log125.info("Starting contacts sync", {
+  log126.info("Starting contacts sync", {
     jobId,
     instanceId,
     channelType
@@ -377102,7 +377176,7 @@ async function processContactsSync(jobId, instanceId, channelType, config4, serv
           await updateDmChatName(services, instanceId, c.platformUserId, c.name, envelope2);
         }
       } catch (error3) {
-        log125.warn("Failed to store synced contact", {
+        log126.warn("Failed to store synced contact", {
           platformUserId: c.platformUserId,
           error: String(error3)
         });
@@ -377121,7 +377195,7 @@ async function processContactsSync(jobId, instanceId, channelType, config4, serv
     duplicates: 0
   }, jobTenantId);
   await services.syncJobs.complete(jobId, jobTenantId);
-  log125.info("Contacts sync completed", {
+  log126.info("Contacts sync completed", {
     jobId,
     fetched,
     stored,
@@ -377173,7 +377247,7 @@ async function processGroupsSync(jobId, instanceId, channelType, _config, servic
   let inflightRevoked = null;
   const fetchMethod = channelType === "discord" ? "fetchGuilds" : "fetchGroups";
   if (!(fetchMethod in plugin10) || typeof plugin10[fetchMethod] !== "function") {
-    log125.warn(`Plugin does not support ${fetchMethod}`, { channelType });
+    log126.warn(`Plugin does not support ${fetchMethod}`, { channelType });
     await services.syncJobs.complete(jobId, jobTenantId);
     return;
   }
@@ -377184,7 +377258,7 @@ async function processGroupsSync(jobId, instanceId, channelType, _config, servic
   let fetched = 0;
   let stored = 0;
   let updated = 0;
-  log125.info("Starting groups sync", {
+  log126.info("Starting groups sync", {
     jobId,
     instanceId,
     channelType
@@ -377218,7 +377292,7 @@ async function processGroupsSync(jobId, instanceId, channelType, _config, servic
         else
           stored++;
       } catch (error3) {
-        log125.warn("Failed to store synced group", {
+        log126.warn("Failed to store synced group", {
           externalId: g2.externalId,
           error: String(error3)
         });
@@ -377265,7 +377339,7 @@ async function processGroupsSync(jobId, instanceId, channelType, _config, servic
         else
           stored++;
       } catch (error3) {
-        log125.warn("Failed to store synced guild", {
+        log126.warn("Failed to store synced guild", {
           externalId: g2.externalId,
           error: String(error3)
         });
@@ -377282,7 +377356,7 @@ async function processGroupsSync(jobId, instanceId, channelType, _config, servic
     duplicates: updated
   }, jobTenantId);
   await services.syncJobs.complete(jobId, jobTenantId);
-  log125.info("Groups sync completed", {
+  log126.info("Groups sync completed", {
     jobId,
     fetched,
     stored,
@@ -377406,7 +377480,7 @@ async function setupHistoryPushTracker(eventBus, services) {
     throw error3;
   }
 }
-var log125, RATE_LIMITS2, db2 = null, historyPushLog;
+var log126, RATE_LIMITS2, db2 = null, historyPushLog;
 var init_sync_worker = __esm(() => {
   init_src();
   init_src5();
@@ -377415,7 +377489,7 @@ var init_sync_worker = __esm(() => {
   init_periodic_tenant_work();
   init_tenant_scope();
   init_worker_tenant_context();
-  log125 = createLogger("sync-worker");
+  log126 = createLogger("sync-worker");
   RATE_LIMITS2 = {
     "whatsapp-baileys": 30,
     discord: 50,
@@ -377437,7 +377511,7 @@ async function resolveChatId2(services, db3, tenantId, instanceId, externalId) {
     const chat2 = await runTenantWorkDb(db3, tenantId, () => services.chats.findByExternalIdSmart(instanceId, externalId));
     return chat2?.id ?? null;
   } catch (err2) {
-    log126.warn("follow-up-hooks: failed to resolve chatId", { instanceId, externalId, error: String(err2) });
+    log127.warn("follow-up-hooks: failed to resolve chatId", { instanceId, externalId, error: String(err2) });
     return null;
   }
 }
@@ -377548,16 +377622,16 @@ async function setupFollowUpHooks(eventBus, services, db3) {
       retryDelayMs: 500,
       startFrom: "new"
     });
-    log126.info("Follow-up hooks active (message.sent/received, chat.handoff_activated, chat.archived, chat.closed)");
+    log127.info("Follow-up hooks active (message.sent/received, chat.handoff_activated, chat.archived, chat.closed)");
   } catch (error3) {
-    log126.error("Failed to set up follow-up hooks", { error: String(error3) });
+    log127.error("Failed to set up follow-up hooks", { error: String(error3) });
   }
 }
-var log126;
+var log127;
 var init_follow_up_hooks = __esm(() => {
   init_src();
   init_worker_tenant_context();
-  log126 = createLogger("follow-up-hooks");
+  log127 = createLogger("follow-up-hooks");
 });
 
 // ../api/src/plugins/instance-monitor.ts
@@ -377998,6 +378072,7 @@ var logger7, DEFAULT_CONFIG3, STALE_TRANSITION_MAX_AGE_MS;
 var init_instance_monitor = __esm(() => {
   init_src5();
   init_drizzle_orm();
+  init_whatsapp_business_connection();
   init_instance_owner_registry();
   init_periodic_tenant_work();
   init_tenant_scope();
@@ -378042,7 +378117,7 @@ async function resolveCallAgentChatIds(services, db3, ctx, trustedTenantId) {
       senderId: ctx.senderId === ctx.chatId ? chat2.externalId : ctx.senderId
     };
   } catch {
-    log127.warn("call_agent: chat UUID not resolvable, using raw value (session may diverge)", {
+    log128.warn("call_agent: chat UUID not resolvable, using raw value (session may diverge)", {
       chatId: ctx.chatId,
       instanceId: ctx.instanceId
     });
@@ -378129,7 +378204,7 @@ function buildAutomationEngineDeps(services, db3, options = {}) {
     releaseIdleTimeoutClaim: (claimToken) => releaseIdleTimeoutClaim(claimToken)
   };
 }
-var log127, UUID_RE3;
+var log128, UUID_RE3;
 var init_automation_actions = __esm(() => {
   init_src();
   init_src5();
@@ -378138,7 +378213,7 @@ var init_automation_actions = __esm(() => {
   init_tenant_scope();
   init_worker_tenant_context();
   init_loader2();
-  log127 = createLogger("automation-actions");
+  log128 = createLogger("automation-actions");
   UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 });
 
@@ -378161,7 +378236,7 @@ async function createDailySyncJobs(services, type) {
       });
       jobsCreated++;
     } catch (err2) {
-      log128.warn(`Failed to create ${type} sync job for instance`, {
+      log129.warn(`Failed to create ${type} sync job for instance`, {
         instanceId: instance4.id,
         error: String(err2)
       });
@@ -378220,7 +378295,7 @@ function setupScheduler(services, channelRegistry2) {
           recordScheduledJob("dead-letter-auto-retry", "success", durationSec);
           const pendingCount = await services.deadLetters.getPendingCount();
           deadLettersPending.set(pendingCount);
-          log128.info("Dead letter auto-retry completed", result);
+          log129.info("Dead letter auto-retry completed", result);
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("dead-letter-auto-retry", "failure", durationSec);
@@ -378242,7 +378317,7 @@ function setupScheduler(services, channelRegistry2) {
           recordScheduledJob("payload-cleanup", "success", durationSec);
           const stats = await services.payloadStore.getStats();
           payloadStorageSize.set(stats.totalSizeCompressed);
-          log128.info("Payload cleanup completed", { deleted });
+          log129.info("Payload cleanup completed", { deleted });
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("payload-cleanup", "failure", durationSec);
@@ -378262,7 +378337,7 @@ function setupScheduler(services, channelRegistry2) {
           const deleted = await services.deadLetters.cleanupExpired();
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("dead-letter-cleanup", "success", durationSec);
-          log128.info("Dead letter cleanup completed", { deleted });
+          log129.info("Dead letter cleanup completed", { deleted });
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("dead-letter-cleanup", "failure", durationSec);
@@ -378282,7 +378357,7 @@ function setupScheduler(services, channelRegistry2) {
           const jobsCreated = await createDailySyncJobs(services, "contacts");
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("contacts-sync-daily", "success", durationSec);
-          log128.info("Daily contacts sync jobs created", { jobsCreated });
+          log129.info("Daily contacts sync jobs created", { jobsCreated });
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("contacts-sync-daily", "failure", durationSec);
@@ -378302,7 +378377,7 @@ function setupScheduler(services, channelRegistry2) {
           const jobsCreated = await createDailySyncJobs(services, "groups");
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("groups-sync-daily", "success", durationSec);
-          log128.info("Daily groups sync jobs created", { jobsCreated });
+          log129.info("Daily groups sync jobs created", { jobsCreated });
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("groups-sync-daily", "failure", durationSec);
@@ -378323,7 +378398,7 @@ function setupScheduler(services, channelRegistry2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("follow-up-sweeper", "success", durationSec);
           if (stats.scanned > 0) {
-            log128.debug("Follow-up sweep tick", stats);
+            log129.debug("Follow-up sweep tick", stats);
           }
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
@@ -378346,7 +378421,7 @@ function setupScheduler(services, channelRegistry2) {
             const stats = await scheduledMessages2.sweep();
             recordScheduledJob("scheduled-message-sweeper", "success", (Date.now() - startTime3) / 1000);
             if (stats.scanned > 0) {
-              log128.debug("Scheduled-message sweep tick", { ...stats });
+              log129.debug("Scheduled-message sweep tick", { ...stats });
             }
           } catch (err2) {
             recordScheduledJob("scheduled-message-sweeper", "failure", (Date.now() - startTime3) / 1000);
@@ -378369,7 +378444,7 @@ function setupScheduler(services, channelRegistry2) {
           const instanceCount = await refreshUnreadCounts(services, channelRegistry2);
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("unread-count-refresh", "success", durationSec);
-          log128.debug("Refreshed unread counts", { instanceCount });
+          log129.debug("Refreshed unread counts", { instanceCount });
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("unread-count-refresh", "failure", durationSec);
@@ -378380,7 +378455,7 @@ function setupScheduler(services, channelRegistry2) {
   });
   updateSchedulerMetrics();
   scheduler.start();
-  log128.info("Scheduler started", {
+  log129.info("Scheduler started", {
     jobs: scheduler.listJobs().map((j2) => ({
       name: j2.name,
       cron: j2.cron,
@@ -378400,16 +378475,16 @@ function updateSchedulerMetrics() {
 function stopScheduler() {
   const scheduler = getScheduler();
   scheduler.stop();
-  log128.info("Scheduler stopped");
+  log129.info("Scheduler stopped");
 }
-var log128;
+var log129;
 var init_scheduler2 = __esm(() => {
   init_src();
   init_esm5();
   init_sentry_scrub();
   init_scheduled_messages();
   init_periodic_tenant_work();
-  log128 = createLogger("scheduler:setup");
+  log129 = createLogger("scheduler:setup");
 });
 
 // ../api/src/services/agent-heartbeat.ts
@@ -378421,11 +378496,11 @@ class AgentHeartbeatConsumer {
       return;
     const { natsConnection, turnService, db: db3 } = options;
     if (natsConnection.isClosed()) {
-      log129.warn("Cannot start agent-heartbeat: NATS connection is closed");
+      log130.warn("Cannot start agent-heartbeat: NATS connection is closed");
       return;
     }
     this.subscription = natsConnection.subscribe(HEARTBEAT_SUBJECT);
-    log129.info("Agent heartbeat consumer started", { subject: HEARTBEAT_SUBJECT });
+    log130.info("Agent heartbeat consumer started", { subject: HEARTBEAT_SUBJECT });
     const sub = this.subscription;
     this.loop = (async () => {
       for await (const msg of sub) {
@@ -378433,25 +378508,25 @@ class AgentHeartbeatConsumer {
           const raw2 = sc3.decode(msg.data);
           const parsed = parseHeartbeat(raw2);
           if (!parsed) {
-            log129.warn("Discarded malformed agent heartbeat", {
+            log130.warn("Discarded malformed agent heartbeat", {
               subject: msg.subject,
               raw: raw2.slice(0, 200)
             });
             continue;
           }
           runDetachedFromTenantScope(async () => recordHeartbeatActivity(turnService, db3, parsed)).catch((error3) => {
-            log129.warn("recordActivity failed for heartbeat (turn likely closed)", {
+            log130.warn("recordActivity failed for heartbeat (turn likely closed)", {
               turnId: parsed.turnId,
               error: error3 instanceof Error ? error3.message : String(error3)
             });
           });
-          log129.debug("Agent heartbeat applied", {
+          log130.debug("Agent heartbeat applied", {
             turnId: parsed.turnId,
             instanceId: parsed.instanceId,
             chatId: parsed.chatId
           });
         } catch (error3) {
-          log129.warn("Failed to process agent heartbeat", {
+          log130.warn("Failed to process agent heartbeat", {
             subject: msg.subject,
             error: error3 instanceof Error ? error3.message : String(error3)
           });
@@ -378468,7 +378543,7 @@ class AgentHeartbeatConsumer {
       await this.loop;
     } catch {} finally {
       this.loop = null;
-      log129.info("Agent heartbeat consumer stopped");
+      log130.info("Agent heartbeat consumer stopped");
     }
   }
 }
@@ -378510,14 +378585,14 @@ async function closeAgentHeartbeat() {
   await consumer.stop();
   consumer = null;
 }
-var import_nats6, log129, sc3, HEARTBEAT_SUBJECT = "omni.agent.heartbeat.>", consumer = null;
+var import_nats6, log130, sc3, HEARTBEAT_SUBJECT = "omni.agent.heartbeat.>", consumer = null;
 var init_agent_heartbeat = __esm(() => {
   init_src();
   init_instance_owner_registry();
   init_tenant_scope();
   init_worker_tenant_context();
   import_nats6 = __toESM(require_mod4(), 1);
-  log129 = createLogger("agent-heartbeat");
+  log130 = createLogger("agent-heartbeat");
   sc3 = import_nats6.StringCodec();
 });
 
@@ -378532,7 +378607,7 @@ class TurnMonitor {
   start() {
     if (this.intervalId)
       return;
-    log130.info("Turn monitor started", {
+    log131.info("Turn monitor started", {
       pollIntervalMs: POLL_INTERVAL_MS2,
       nudgeMs: NUDGE_THRESHOLD_MS,
       defaultStalledMs: DEFAULT_STALLED_THRESHOLD_MS,
@@ -378544,7 +378619,7 @@ class TurnMonitor {
     if (this.intervalId) {
       clearInterval(this.intervalId);
       this.intervalId = null;
-      log130.info("Turn monitor stopped");
+      log131.info("Turn monitor stopped");
     }
   }
   async tick() {
@@ -378568,7 +378643,7 @@ class TurnMonitor {
         env: this.deps.env
       }, (turn, tenantId) => this.processTurn(turn, tenantId));
     } catch (error3) {
-      log130.error("Turn monitor tick failed", { error: String(error3) });
+      log131.error("Turn monitor tick failed", { error: String(error3) });
     } finally {
       this.running = false;
     }
@@ -378599,13 +378674,13 @@ class TurnMonitor {
       idleSec,
       message: `Turn idle for ${idleSec}s. Are you still working?`
     });
-    log130.info("Turn nudge emitted", { turnId, nudgeCount, idleSec });
+    log131.info("Turn nudge emitted", { turnId, nudgeCount, idleSec });
   }
   async handleStalled(turnId, instanceId, chatId, stalledAtMs, threshold, tenantId) {
     await runTenantWorkDb(this.deps.db, tenantId, () => this.deps.turnService.incrementNudge(turnId));
     const payload = { turnId, instanceId, chatId, stalledAtMs, threshold };
     publishTurnStalled(instanceId, chatId, payload);
-    log130.warn("Turn stalled \u2014 internal event emitted (no channel message sent)", payload);
+    log131.warn("Turn stalled \u2014 internal event emitted (no channel message sent)", payload);
   }
   async handleTimeout(turnId, instanceId, chatId, idleSec, nudgeCount, tenantId) {
     const closed = await runTenantWorkDb(this.deps.db, tenantId, () => this.deps.turnService.close(turnId, {
@@ -378628,16 +378703,16 @@ class TurnMonitor {
       nudgeCount,
       messagesSent: closed.messagesSent
     });
-    log130.info("Turn force-closed (timeout)", { turnId, duration, nudgeCount });
+    log131.info("Turn force-closed (timeout)", { turnId, duration, nudgeCount });
   }
 }
-var log130, NUDGE_THRESHOLD_MS = 120000, DEFAULT_STALLED_THRESHOLD_MS = 600000, TIMEOUT_THRESHOLD_MS = 1800000, POLL_INTERVAL_MS2 = 1e4;
+var log131, NUDGE_THRESHOLD_MS = 120000, DEFAULT_STALLED_THRESHOLD_MS = 600000, TIMEOUT_THRESHOLD_MS = 1800000, POLL_INTERVAL_MS2 = 1e4;
 var init_turn_monitor = __esm(() => {
   init_src();
   init_periodic_tenant_work();
   init_worker_tenant_context();
   init_turn_events();
-  log130 = createLogger("turn-monitor");
+  log131 = createLogger("turn-monitor");
 });
 
 // ../api/src/tenancy/enforcement-posture.ts
@@ -378717,7 +378792,7 @@ class TenantStreamRegistry {
       try {
         binding.close(reason2);
       } catch (err2) {
-        log131.warn("stream termination failed", {
+        log132.warn("stream termination failed", {
           tenantId,
           reason: reason2,
           error: err2 instanceof Error ? err2.message : String(err2)
@@ -378739,7 +378814,7 @@ async function sweepRevokedStreamSubscriptions(authPlaneDb, registry5, env2 = pr
     try {
       state = await readState(authPlaneDb, tenantId);
     } catch (err2) {
-      log131.warn("stream revocation read failed; terminating fail-closed", {
+      log132.warn("stream revocation read failed; terminating fail-closed", {
         tenantId,
         error: err2 instanceof Error ? err2.message : String(err2)
       });
@@ -378764,7 +378839,7 @@ function terminateSupersededEpochs(registry5, tenantId, currentEpoch) {
     try {
       binding.close("tenant_revoked");
     } catch (err2) {
-      log131.warn("stream termination failed", {
+      log132.warn("stream termination failed", {
         tenantId,
         error: err2 instanceof Error ? err2.message : String(err2)
       });
@@ -378780,17 +378855,17 @@ function startStreamRevocationSweeper(authPlaneDb, registry5, env2 = process.env
   const timer2 = setInterval(() => {
     sweepRevokedStreamSubscriptions(authPlaneDb, registry5, env2).then((stats) => {
       if (stats.terminated > 0) {
-        log131.info("terminated revoked stream subscriptions", {
+        log132.info("terminated revoked stream subscriptions", {
           terminated: stats.terminated,
           tenantsChecked: stats.tenantsChecked
         });
       }
-    }, (err2) => log131.warn("stream revocation sweep failed", { error: err2 instanceof Error ? err2.message : String(err2) }));
+    }, (err2) => log132.warn("stream revocation sweep failed", { error: err2 instanceof Error ? err2.message : String(err2) }));
   }, resolveStreamSweepIntervalMs());
   timer2.unref?.();
   return { stop: () => clearInterval(timer2) };
 }
-var log131, UUID7, STREAM_TERMINATION_CEILING_SECONDS = 30, readTenantRevocationState = async (authPlaneDb, tenantId) => {
+var log132, UUID7, STREAM_TERMINATION_CEILING_SECONDS = 30, readTenantRevocationState = async (authPlaneDb, tenantId) => {
   const [row] = await authPlaneDb.select({ status: tenants.status, revocationEpoch: tenants.revocationEpoch }).from(tenants).where(eq(tenants.id, tenantId)).limit(1);
   return row ?? null;
 };
@@ -378798,7 +378873,7 @@ var init_tenant_stream_subscriptions = __esm(() => {
   init_src();
   init_src5();
   init_drizzle_orm();
-  log131 = createLogger("tenant-stream-subscriptions");
+  log132 = createLogger("tenant-stream-subscriptions");
   UUID7 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 });
 
@@ -378873,12 +378948,12 @@ function printStartupBanner(options) {
     process.stdout.write(`${line3}
 `);
   }
-  log132.info("Server ready", { host, port, version: version3 });
+  log133.info("Server ready", { host, port, version: version3 });
 }
-var log132, COLORS2, BOX, ANSI_ESCAPE_PATTERN;
+var log133, COLORS2, BOX, ANSI_ESCAPE_PATTERN;
 var init_startup_banner = __esm(() => {
   init_src();
-  log132 = createLogger("api:startup");
+  log133 = createLogger("api:startup");
   COLORS2 = {
     reset: "\x1B[0m",
     dim: "\x1B[2m",
@@ -378981,7 +379056,7 @@ class VoiceStreamRegistry {
         }
       }
     });
-    log133.info("Voice WS client connected", {
+    log134.info("Voice WS client connected", {
       sessionId: client.params.sessionId,
       format: client.params.format,
       filterUser: client.params.filterUserId ?? "all"
@@ -379070,12 +379145,12 @@ async function authorizeVoiceApiKey(validate, apiKey) {
     return false;
   }
 }
-var log133, opusCodec = null;
+var log134, opusCodec = null;
 var init_voice3 = __esm(() => {
   init_src();
   init_src3();
   init_tenant_stream_subscriptions();
-  log133 = createLogger("ws:voice");
+  log134 = createLogger("ws:voice");
 });
 
 // ../api/src/ws/voice-upgrade-authorization.ts
@@ -379401,65 +379476,65 @@ function setupShutdownHandlers(server, earlyShutdown) {
 }
 async function setupEventBusServices(eventBus, services, db3) {
   if (!eventBus) {
-    log134.warn("Skipping event bus services (no event bus)");
+    log135.warn("Skipping event bus services (no event bus)");
     return;
   }
   try {
     await setupMessagePersistence(eventBus, services);
   } catch (error3) {
-    log134.error("Failed to set up message persistence", { error: String(error3) });
+    log135.error("Failed to set up message persistence", { error: String(error3) });
   }
   try {
     await setupMediaProcessor(eventBus, db3, services);
   } catch (error3) {
-    log134.error("Failed to set up media processor", { error: String(error3) });
+    log135.error("Failed to set up media processor", { error: String(error3) });
   }
   try {
     globalDispatcherCleanup = await setupAgentResponder(eventBus, services, db3);
   } catch (error3) {
-    log134.error("Failed to set up agent dispatcher", { error: String(error3) });
+    log135.error("Failed to set up agent dispatcher", { error: String(error3) });
   }
   try {
     await services.automations.startEngine(buildAutomationEngineDeps(services, db3));
   } catch (error3) {
-    log134.error("Failed to start automation engine", { error: String(error3) });
+    log135.error("Failed to start automation engine", { error: String(error3) });
   }
   try {
     await setupSessionCleaner(eventBus, services, db3);
   } catch (error3) {
-    log134.error("Failed to set up session cleaner", { error: String(error3) });
+    log135.error("Failed to set up session cleaner", { error: String(error3) });
   }
   try {
     await setupFollowUpHooks(eventBus, services, db3);
   } catch (error3) {
-    log134.error("Failed to set up follow-up hooks", { error: String(error3) });
+    log135.error("Failed to set up follow-up hooks", { error: String(error3) });
   }
   if (globalChannelRegistry) {
     try {
       await setupSyncWorker(eventBus, services, globalChannelRegistry, db3);
     } catch (error3) {
-      log134.error("Failed to set up sync worker", { error: String(error3) });
+      log135.error("Failed to set up sync worker", { error: String(error3) });
     }
   }
   try {
     await setupHistoryPushTracker(eventBus, services);
   } catch (error3) {
-    log134.error("Failed to set up history-push tracker", { error: String(error3) });
+    log135.error("Failed to set up history-push tracker", { error: String(error3) });
   }
   try {
     await initTurnEvents(NATS_URL);
   } catch (error3) {
-    log134.error("Failed to initialize turn events", { error: String(error3) });
+    log135.error("Failed to initialize turn events", { error: String(error3) });
   }
   try {
     const turnEventsConn = getTurnEventsConnection();
     if (turnEventsConn) {
       initAgentHeartbeat({ natsConnection: turnEventsConn, turnService: services.turns, db: services.db });
     } else {
-      log134.warn("Skipping agent heartbeat consumer: no NATS connection");
+      log135.warn("Skipping agent heartbeat consumer: no NATS connection");
     }
   } catch (error3) {
-    log134.error("Failed to initialize agent heartbeat consumer", { error: String(error3) });
+    log135.error("Failed to initialize agent heartbeat consumer", { error: String(error3) });
   }
   try {
     globalTurnMonitor = new TurnMonitor({
@@ -379469,23 +379544,23 @@ async function setupEventBusServices(eventBus, services, db3) {
       authPlaneDb: services.authPlane.db
     });
     globalTurnMonitor.start();
-    log134.info("Turn monitor started");
+    log135.info("Turn monitor started");
   } catch (error3) {
-    log134.error("Failed to start turn monitor", { error: String(error3) });
+    log135.error("Failed to start turn monitor", { error: String(error3) });
   }
 }
 async function waitForDatabaseReady(db3, maxAttempts = 30) {
-  log134.info("Waiting for database readiness");
+  log135.info("Waiting for database readiness");
   for (let attempt = 1;attempt <= maxAttempts; attempt++) {
     try {
       await db3.execute(sql`SELECT 1`);
-      log134.info("Database ready", { attempt });
+      log135.info("Database ready", { attempt });
       return;
     } catch {
       if (attempt === maxAttempts) {
         throw new Error(`Database not ready after ${maxAttempts} attempts`);
       }
-      log134.warn("Database not ready, retrying...", { attempt });
+      log135.warn("Database not ready, retrying...", { attempt });
       await new Promise((resolve4) => setTimeout(resolve4, 1000));
     }
   }
@@ -379503,7 +379578,7 @@ async function runStartupMigrations(db3, enforced) {
       return;
     });
     if (enforced && scrubDdlCredential()) {
-      log134.info("DDL credential scrubbed from process environment");
+      log135.info("DDL credential scrubbed from process environment");
     }
   }
 }
@@ -379512,39 +379587,39 @@ async function verifyEnforcedRuntimeIdentity(db3, mode) {
     return;
   try {
     const identity = await assertEnforcedRuntimeIdentity(db3);
-    log134.info("Enforced runtime identity verified", {
+    log135.info("Enforced runtime identity verified", {
       currentUser: identity.currentUser,
       forcedTables: identity.enforcement.forced.length
     });
   } catch (error3) {
-    log134.error("Enforcement-mode startup refused", { error: String(error3) });
+    log135.error("Enforcement-mode startup refused", { error: String(error3) });
     await closeDb();
     throw error3;
   }
 }
 async function main() {
-  log134.info("Starting Omni API v2");
+  log135.info("Starting Omni API v2");
   enableDefaultMetrics();
   if (process.env.PGSERVE_EMBEDDED === "true") {
-    log134.warn("PGSERVE_EMBEDDED=true is set but embedded mode was removed in pgserve-singleton-no-proxy. Run `omni doctor --fix` (or `pgserve install` directly) to migrate to consumer-only pgserve. omni-api will continue using DATABASE_URL.");
+    log135.warn("PGSERVE_EMBEDDED=true is set but embedded mode was removed in pgserve-singleton-no-proxy. Run `omni doctor --fix` (or `pgserve install` directly) to migrate to consumer-only pgserve. omni-api will continue using DATABASE_URL.");
   }
   const enforcementMode = resolveEnforcementMode();
-  warnOnMixedTenancyState(enforcementMode, (message2) => log134.warn(message2));
+  warnOnMixedTenancyState(enforcementMode, (message2) => log135.warn(message2));
   const enforcedIdentities = enforcementMode === "enforced" ? resolveEnforcedBootIdentities() : null;
   const databaseUrl = enforcedIdentities ? enforcedIdentities.runtimeUrl : getDefaultDatabaseUrl();
   if (enforcementMode === "enforced") {
-    log134.info("Connecting to database", { enforcementMode });
+    log135.info("Connecting to database", { enforcementMode });
   } else {
-    log134.info("Connecting to database");
+    log135.info("Connecting to database");
   }
   const db3 = createDb({ url: databaseUrl });
   globalDbRef = db3;
   const earlyShutdown = async () => {
-    log134.info("Shutdown during startup \u2014 cleaning up");
+    log135.info("Shutdown during startup \u2014 cleaning up");
     try {
       await closeDb();
     } catch (err2) {
-      log134.error("Cleanup failed during early shutdown", { error: String(err2) });
+      log135.error("Cleanup failed during early shutdown", { error: String(err2) });
     } finally {
       process.exit(1);
     }
@@ -379557,7 +379632,7 @@ async function main() {
     await closeDb();
     throw error3;
   }
-  log134.info("Running database migrations");
+  log135.info("Running database migrations");
   const migrationStart = Date.now();
   try {
     await runStartupMigrations(db3, enforcedIdentities);
@@ -379565,26 +379640,26 @@ async function main() {
     await closeDb();
     throw error3;
   }
-  log134.info("Database migrations complete", { durationMs: Date.now() - migrationStart });
+  log135.info("Database migrations complete", { durationMs: Date.now() - migrationStart });
   await verifyEnforcedRuntimeIdentity(db3, enforcementMode);
   try {
     const driftReport = await verifyCriticalColumns(db3, API_CRITICAL_COLUMNS);
     if (!driftReport.ok) {
-      log134.error(formatDriftReport(driftReport), { drift: driftReport.drift });
+      log135.error(formatDriftReport(driftReport), { drift: driftReport.drift });
       await closeDb();
       process.exit(1);
     }
   } catch (error3) {
-    log134.error("Schema drift check failed", { error: String(error3) });
+    log135.error("Schema drift check failed", { error: String(error3) });
     await closeDb();
     process.exit(1);
   }
   try {
     const [countRow] = await db3.select({ count: sql`count(*)::int` }).from(instances);
     const rowCount = countRow?.count ?? 0;
-    log134.info("Post-migration content snapshot", { DB_ROW_COUNT_INSTANCES: rowCount });
+    log135.info("Post-migration content snapshot", { DB_ROW_COUNT_INSTANCES: rowCount });
   } catch (error3) {
-    log134.warn("Failed to read instances row count (non-fatal)", { error: String(error3) });
+    log135.warn("Failed to read instances row count (non-fatal)", { error: String(error3) });
   }
   const eventBus = await connectToNats(db3);
   if (eventBus) {
@@ -379605,9 +379680,9 @@ async function main() {
   try {
     await services.settings.seedDefaults();
   } catch (error3) {
-    log134.error("Failed to seed default settings", { error: String(error3) });
+    log135.error("Failed to seed default settings", { error: String(error3) });
   }
-  log134.info("Initializing API key");
+  log135.info("Initializing API key");
   let apiKeyInfo;
   try {
     const keyResult = await services.apiKeys.initializePrimaryKey();
@@ -379617,17 +379692,17 @@ async function main() {
       isFromEnv: keyResult.isFromEnv
     };
     if (keyResult.isNew) {
-      log134.info("Generated new primary API key");
+      log135.info("Generated new primary API key");
     } else if (keyResult.isFromEnv) {
-      log134.info("Using primary API key from environment");
+      log135.info("Using primary API key from environment");
     } else {
-      log134.info("Using existing primary API key");
+      log135.info("Using existing primary API key");
     }
   } catch (error3) {
-    log134.error("Failed to initialize primary API key", { error: String(error3) });
+    log135.error("Failed to initialize primary API key", { error: String(error3) });
   }
   await setupEventBusServices(eventBus, services, db3);
-  log134.info("Starting scheduler");
+  log135.info("Starting scheduler");
   setupScheduler(services, globalChannelRegistry);
   const server = startBunServer(app);
   printStartupBanner({
@@ -379641,7 +379716,7 @@ async function main() {
   });
   setupShutdownHandlers(server, earlyShutdown);
 }
-var import__package3, log134, natsLog, pluginLog, shutdownLog, PORT, HOST, NATS_URL, voiceStreamRegistry, globalEventBus = null, globalChannelRegistry = null, globalInstanceMonitor = null, globalDispatcherCleanup = null, globalTurnMonitor = null, globalDbRef = null, globalServicesRef = null, globalStreamSweeper = null;
+var import__package3, log135, natsLog, pluginLog, shutdownLog, PORT, HOST, NATS_URL, voiceStreamRegistry, globalEventBus = null, globalChannelRegistry = null, globalInstanceMonitor = null, globalDispatcherCleanup = null, globalTurnMonitor = null, globalDbRef = null, globalServicesRef = null, globalStreamSweeper = null;
 var init_src9 = __esm(() => {
   init_instrument2();
   init_tracing5();
@@ -379674,7 +379749,7 @@ var init_src9 = __esm(() => {
     level: process.env.LOG_LEVEL ?? "info",
     format: process.env.LOG_FORMAT ?? "auto"
   });
-  log134 = createLogger("api:startup");
+  log135 = createLogger("api:startup");
   natsLog = createLogger("api:nats");
   pluginLog = createLogger("api:plugins");
   shutdownLog = createLogger("api:shutdown");
@@ -379683,7 +379758,7 @@ var init_src9 = __esm(() => {
   NATS_URL = process.env.NATS_URL ?? "nats://localhost:4222";
   voiceStreamRegistry = new VoiceStreamRegistry;
   main().catch((error3) => {
-    log134.error("Failed to start API server", { error: String(error3) });
+    log135.error("Failed to start API server", { error: String(error3) });
     process.exit(1);
   });
 });
@@ -385399,16 +385474,33 @@ async function checkBoltHealth(connection) {
 }
 
 // ../channel-slack/src/handlers/agent-sessions.ts
+init_zod();
+var AgentSessionStoppedEventSchema = exports_external.object({
+  channel: exports_external.string().min(1),
+  thread_ts: exports_external.string().optional(),
+  user: exports_external.string().optional(),
+  event_ts: exports_external.string().optional(),
+  streaming_message_ts: exports_external.array(exports_external.string()).optional()
+}).passthrough();
 function setupAgentSessionHandlers(app, instanceId, callbacks, logger5) {
   app.event("agent_session_stopped", async ({ event }) => {
-    const evt = event;
-    const channelId = evt.channel;
-    if (!channelId)
+    const channelHint = event?.channel;
+    if (typeof channelHint !== "string" || channelHint.length === 0)
       return;
-    const threadTs = evt.thread_ts;
-    const userId = evt.user;
-    const eventTs = evt.event_ts;
-    const streamingMessageTs = Array.isArray(evt.streaming_message_ts) ? evt.streaming_message_ts : [];
+    const parsed = AgentSessionStoppedEventSchema.safeParse(event);
+    if (!parsed.success) {
+      logger5.warn("Ignoring malformed agent_session_stopped event", {
+        instanceId,
+        channelId: channelHint,
+        issues: parsed.error.issues.map((issue) => `${issue.path.join(".")}: ${issue.message}`)
+      });
+      return;
+    }
+    const channelId = parsed.data.channel;
+    const threadTs = parsed.data.thread_ts;
+    const userId = parsed.data.user;
+    const eventTs = parsed.data.event_ts;
+    const streamingMessageTs = parsed.data.streaming_message_ts ?? [];
     logger5.info("Agent session stopped by user", { instanceId, channelId, threadTs, userId, streamingMessageTs });
     await callbacks.onSessionStopped(instanceId, { channelId, threadTs, userId, streamingMessageTs, eventTs });
   });
@@ -385739,6 +385831,7 @@ function buildRawPayload(meta, msg, extra) {
     ts: meta.ts,
     threadTs: meta.threadTs,
     threadId: !meta.isDm && meta.threadTs ? meta.threadTs : undefined,
+    cancelThreadId: meta.threadTs,
     channelType: meta.channelType,
     teamId: meta.teamId,
     isDm: meta.isDm,
@@ -386354,6 +386447,7 @@ function createNativeStreamSender(options) {
   } = options;
   let streamer;
   let lastSentContent = "";
+  let streamTs;
   let stopped = false;
   let fallback;
   function buildFallback() {
@@ -386384,7 +386478,7 @@ function createNativeStreamSender(options) {
         channel: channelId,
         ...threadTs ? { thread_ts: threadTs } : {}
       });
-      await streamer.append({ markdown_text: firstChunk });
+      noteStreamTs(await streamer.append({ markdown_text: firstChunk }));
       lastSentContent = firstChunk;
     } catch (err2) {
       logger5.warn("native-stream: chat.startStream failed, falling back to replace mode", {
@@ -386394,12 +386488,27 @@ function createNativeStreamSender(options) {
       fallback = buildFallback();
     }
   }
+  function noteStreamTs(response) {
+    if (streamTs || typeof response !== "object" || response === null)
+      return;
+    const ts = response.ts;
+    if (typeof ts === "string" && ts.length > 0)
+      streamTs = ts;
+  }
+  function resolveStreamTs() {
+    if (streamTs)
+      return streamTs;
+    const fromStreamer = streamer?.streamTs;
+    if (typeof fromStreamer === "string" && fromStreamer.length > 0)
+      streamTs = fromStreamer;
+    return streamTs;
+  }
   async function appendDelta(newContent) {
     const delta = newContent.slice(lastSentContent.length);
     if (!delta)
       return;
     try {
-      await streamer?.append({ markdown_text: delta });
+      noteStreamTs(await streamer?.append({ markdown_text: delta }));
       lastSentContent = newContent;
     } catch (err2) {
       logger5.warn("native-stream: append failed", { error: String(err2) });
@@ -386459,6 +386568,16 @@ function createNativeStreamSender(options) {
       if (fallback)
         return fallback.cancel ? fallback.cancel() : fallback.abort();
       await stopStream();
+    },
+    markStoppedByPlatform(stoppedTs) {
+      if (fallback || stopped || !streamer)
+        return false;
+      const ts = resolveStreamTs();
+      if (!ts || !stoppedTs.includes(ts))
+        return false;
+      stopped = true;
+      logger5.debug("native-stream: stream already halted by Slack, skipping chat.stopStream", { channelId, ts });
+      return true;
     }
   };
 }
@@ -386620,6 +386739,7 @@ class SlackPlugin extends BaseChannelPlugin {
   activeThreads = new Map;
   presenceStatusTimers = new Map;
   pendingAckReactions = new Map;
+  activeNativeStreams = new Map;
   async onInitialize(_context) {}
   async onDestroy() {
     for (const [instanceId, connection] of this.connections) {
@@ -386647,6 +386767,7 @@ class SlackPlugin extends BaseChannelPlugin {
     this.presenceStatusTimers.clear();
     this.activeThreads.clear();
     this.pendingAckReactions.clear();
+    this.activeNativeStreams.clear();
   }
   async connect(instanceId, config2) {
     const existing = this.connections.get(instanceId);
@@ -386751,6 +386872,10 @@ class SlackPlugin extends BaseChannelPlugin {
       clearTimeout(timer);
       this.presenceStatusTimers.delete(key);
     }
+    for (const key of this.activeNativeStreams.keys()) {
+      if (key.startsWith(`${instanceId}:`))
+        this.activeNativeStreams.delete(key);
+    }
     for (const key of this.pendingAckReactions.keys()) {
       if (key.startsWith(`${instanceId}:`))
         this.pendingAckReactions.delete(key);
@@ -386812,29 +386937,40 @@ class SlackPlugin extends BaseChannelPlugin {
     const threadTs = this.resolveThreadTs(replyToMode, replyToMessageId, undefined);
     const streamMode = resolveStreamMode(slackConfig.streamMode);
     const throttleMs = resolveStreamThrottle(slackConfig.streamThrottleMs);
-    const base2 = streamMode === "native" ? createNativeStreamSender({
-      client: connection.actingClient,
-      channelId: chatId,
-      threadTs,
-      throttleMs,
-      username: slackConfig.defaultUsername,
-      iconUrl: slackConfig.defaultIconUrl,
-      iconEmoji: slackConfig.defaultIconEmoji,
-      formatMode: options?.formatMode ?? "convert",
-      logger: this.logger
-    }) : createSlackStreamSender({
-      client: connection.actingClient,
-      channelId: chatId,
-      threadTs,
-      streamMode,
-      throttleMs,
-      username: slackConfig.defaultUsername,
-      iconUrl: slackConfig.defaultIconUrl,
-      iconEmoji: slackConfig.defaultIconEmoji,
-      formatMode: options?.formatMode ?? "convert",
-      logger: this.logger
-    });
+    const streamKey = `${instanceId}:${chatId}`;
+    let native;
+    let base2;
+    if (streamMode === "native") {
+      native = createNativeStreamSender({
+        client: connection.actingClient,
+        channelId: chatId,
+        threadTs,
+        throttleMs,
+        username: slackConfig.defaultUsername,
+        iconUrl: slackConfig.defaultIconUrl,
+        iconEmoji: slackConfig.defaultIconEmoji,
+        formatMode: options?.formatMode ?? "convert",
+        logger: this.logger
+      });
+      base2 = native;
+      this.trackNativeStream(streamKey, native);
+    } else {
+      base2 = createSlackStreamSender({
+        client: connection.actingClient,
+        channelId: chatId,
+        threadTs,
+        streamMode,
+        throttleMs,
+        username: slackConfig.defaultUsername,
+        iconUrl: slackConfig.defaultIconUrl,
+        iconEmoji: slackConfig.defaultIconEmoji,
+        formatMode: options?.formatMode ?? "convert",
+        logger: this.logger
+      });
+    }
     const cleanup = () => {
+      if (native)
+        this.untrackNativeStream(streamKey, native);
       this.removeAckReaction(instanceId, chatId, connection, replyToMessageId, threadTs);
       this.clearActiveTyping(instanceId, chatId, connection, threadTs).catch(() => {});
     };
@@ -386859,6 +386995,32 @@ class SlackPlugin extends BaseChannelPlugin {
       }
     };
   }
+  trackNativeStream(streamKey, sender) {
+    let set = this.activeNativeStreams.get(streamKey);
+    if (!set) {
+      set = new Set;
+      this.activeNativeStreams.set(streamKey, set);
+    }
+    set.add(sender);
+  }
+  untrackNativeStream(streamKey, sender) {
+    const set = this.activeNativeStreams.get(streamKey);
+    if (!set)
+      return;
+    set.delete(sender);
+    if (set.size === 0)
+      this.activeNativeStreams.delete(streamKey);
+  }
+  markStreamsStoppedByPlatform(instanceId, channelId, stoppedTs) {
+    if (stoppedTs.length === 0)
+      return;
+    const senders2 = this.activeNativeStreams.get(`${instanceId}:${channelId}`);
+    if (!senders2)
+      return;
+    for (const sender of senders2) {
+      sender.markStoppedByPlatform(stoppedTs);
+    }
+  }
   async sendTyping(instanceId, chatId, duration) {
     await this.sendPresenceStatus(instanceId, chatId, duration === 0 ? "paused" : "typing", duration);
   }
@@ -387260,6 +387422,7 @@ class SlackPlugin extends BaseChannelPlugin {
   async handleAgentSessionStopped(instanceId, connection, args) {
     const parsedEventTs = args.eventTs ? Number.parseFloat(args.eventTs) : Number.NaN;
     const requestedAt = Number.isFinite(parsedEventTs) ? Math.round(parsedEventTs * 1000) : Date.now();
+    this.markStreamsStoppedByPlatform(instanceId, args.channelId, args.streamingMessageTs ?? []);
     try {
       await this.eventBus.publish("agent.run.cancel_requested", {
         instanceId,