@fased/fased 0.1.46 → 0.1.48

package/dist/plugins/runtime/index.js

@@ -14,23 +14,17 @@ import { readSessionUpdatedAt, recordSessionMetaFromInbound, updateLastRoute } f
 import "../../config/sessions.js";
 import { createRuntimeHelpers } from "./scoped.js";
 import { finalizeInboundContext } from "../../auto-reply/reply/inbound-context.js";
+import { resolveCommandAuthorizedFromAuthorizers } from "../../channels/command-gating.js";
+import { readChannelAllowFromStore, upsertChannelPairingRequest } from "../../pairing/pairing-store.js";
 import { resolveEffectiveMessagesConfig, resolveHumanDelayConfig } from "../../agents/identity.js";
 import { mediaKindFromMime } from "../../media/constants.js";
 import { detectMime } from "../../media/mime.js";
-import { chunkByNewline, chunkMarkdownText, chunkMarkdownTextWithMode, chunkText, chunkTextWithMode, resolveChunkMode, resolveTextChunkLimit } from "../../auto-reply/chunk.js";
-import { resolveMarkdownTableMode } from "../../config/markdown-tables.js";
-import { fetchRemoteMedia } from "../../media/fetch.js";
+import { isVoiceCompatibleAudio } from "../../media/audio.js";
+import { textToSpeechTelephony } from "../../tts/tts.js";
 import { getImageMetadata, resizeToJpeg } from "../../media/image-ops.js";
-import { loadWebMedia } from "../../web/media.js";
-import { saveMediaBuffer } from "../../media/store.js";
-import { sendMessageSignal } from "../../signal/send.js";
 import { createMemoryGetTool, createMemorySearchTool } from "../../agents/tools/memory-tool.js";
+import { chunkByNewline, chunkMarkdownText, chunkMarkdownTextWithMode, chunkText, chunkTextWithMode, resolveChunkMode, resolveTextChunkLimit } from "../../auto-reply/chunk.js";
 import { shouldHandleTextCommands } from "../../auto-reply/commands-registry.js";
-import { isVoiceCompatibleAudio } from "../../media/audio.js";
-import { textToSpeechTelephony } from "../../tts/tts.js";
-import { enqueueSystemEvent } from "../../infra/system-events.js";
-import { resolveAgentRoute } from "../../routing/resolve-route.js";
-import { readChannelAllowFromStore, upsertChannelPairingRequest } from "../../pairing/pairing-store.js";
 import { buildMentionRegexes, matchesMentionPatterns, matchesMentionWithExplicit } from "../../auto-reply/reply/mentions.js";
 import { hasControlCommand, isControlCommandMessage, shouldComputeCommandAuthorized } from "../../auto-reply/command-detection.js";
 import { dispatchReplyFromConfig } from "../../auto-reply/reply/dispatch-from-config.js";
@@ -40,25 +34,31 @@ import { formatAgentEnvelope, formatInboundEnvelope, resolveEnvelopeFormatOption
 import { createInboundDebouncer, resolveInboundDebounceMs } from "../../auto-reply/inbound-debounce.js";
 import { dispatchReplyWithBufferedBlockDispatcher } from "../../auto-reply/reply/provider-dispatcher.js";
 import { removeAckReactionAfterReply, shouldAckReaction } from "../../channels/ack-reactions.js";
-import { resolveCommandAuthorizedFromAuthorizers } from "../../channels/command-gating.js";
 import { discordMessageActions } from "../../channels/plugins/actions/discord.js";
 import { signalMessageActions } from "../../channels/plugins/actions/signal.js";
 import { telegramMessageActions } from "../../channels/plugins/actions/telegram.js";
 import { createWhatsAppLoginTool } from "../../channels/plugins/agent-tools/whatsapp-login.js";
 import { recordInboundSession } from "../../channels/session.js";
 import { registerMemoryCli } from "../../cli/memory-cli.js";
+import { resolveMarkdownTableMode } from "../../config/markdown-tables.js";
 import { buildPairingReply } from "../../pairing/pairing-messages.js";
 import { probeIMessage } from "../../imessage/probe.js";
 import { convertMarkdownTables } from "../../markdown/tables.js";
+import { fetchRemoteMedia } from "../../media/fetch.js";
+import { loadWebMedia } from "../../web/media.js";
+import { saveMediaBuffer } from "../../media/store.js";
 import { sendMessageIMessage } from "../../imessage/send.js";
+import { resolveAgentRoute } from "../../routing/resolve-route.js";
 import { monitorIMessageProvider } from "../../imessage/monitor/monitor-provider.js";
 import "../../imessage/monitor.js";
 import { getChannelActivity, recordChannelActivity } from "../../infra/channel-activity.js";
+import { enqueueSystemEvent } from "../../infra/system-events.js";
 import { listLineAccountIds, normalizeAccountId, resolveDefaultLineAccountId, resolveLineAccount } from "../../line/accounts.js";
 import { createQuickReplyItems, pushFlexMessage, pushLocationMessage, pushMessageLine, pushMessagesLine, pushTemplateMessage, pushTextMessageWithQuickReplies, sendMessageLine } from "../../line/send.js";
 import { buildTemplateMessageFromPayload } from "../../line/template-messages.js";
 import { monitorLineProvider } from "../../line/monitor.js";
 import { probeLineBot } from "../../line/probe.js";
+import { sendMessageSignal } from "../../signal/send.js";
 import { monitorSignalProvider } from "../../signal/monitor.js";
 import { probeSignal } from "../../signal/probe.js";
 import "../../signal/index.js";

package/dist/plugins/status.js

@@ -3,8 +3,8 @@ import { resolveDefaultAgentWorkspaceDir } from "../agents/workspace.js";
 import { resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agents/agent-scope.js";
 import { loadConfig } from "../config/io.js";
 import "../config/config.js";
-import { createPluginLoaderLogger } from "./logger.js";
 import { loadFasedAgentPlugins, preloadNativePluginModules } from "./loader.js";
+import { createPluginLoaderLogger } from "./logger.js";
 import { buildPluginManifestStatusReport } from "./status-manifest.js";
 
 //#region src/plugins/status.ts

package/dist/plugins/tools.js

@@ -2,8 +2,8 @@ import { createSubsystemLogger } from "../logging/subsystem.js";
 import { applyTestPluginDefaults, normalizePluginsConfig } from "./config-state.js";
 import { normalizeToolName } from "../agents/tool-policy-shared.js";
 import "../agents/tool-policy.js";
-import { createPluginLoaderLogger } from "./logger.js";
 import { loadFasedAgentPlugins } from "./loader.js";
+import { createPluginLoaderLogger } from "./logger.js";
 
 //#region src/plugins/tools.ts
 const log = createSubsystemLogger("plugins");

package/dist/plugins/web-search-providers.runtime.js

@@ -1,6 +1,6 @@
 import { getActivePluginRegistry } from "./runtime.js";
-import { createWebSearchProviderToolDefinition } from "../agents/tools/web-search.js";
 import { loadFasedAgentPlugins } from "./loader.js";
+import { createWebSearchProviderToolDefinition } from "../agents/tools/web-search.js";
 import { sortWebSearchProviders } from "./web-search-providers.shared.js";
 
 //#region src/plugins/web-search-providers.runtime.ts

package/dist/process/command-queue.js

@@ -1,5 +1,5 @@
-import { CommandLane } from "./lanes.js";
 import { diag, logLaneDequeue, logLaneEnqueue } from "../logging/diagnostic.js";
+import { CommandLane } from "./lanes.js";
 
 //#region src/process/command-queue.ts
 /**

package/dist/providers/refresh.js

@@ -44,10 +44,10 @@ const VLLM_DEFAULT_BASE_URL = "http://127.0.0.1:8000/v1";
 const OLLAMA_DEFAULT_BASE_URL = "http://127.0.0.1:11434";
 const LMSTUDIO_DEFAULT_BASE_URL = "http://127.0.0.1:1234/v1";
 const LITELLM_DEFAULT_BASE_URL = LITELLM_BASE_URL;
-const OPENAI_CURRENT_API_MODEL_RE = /^gpt-5\.(?:[4-9]|\d{2,})(?:-(?:mini|nano))?$/;
+const OPENAI_CURRENT_API_MODEL_RE = /^gpt-5\.(?:[4-9]|\d{2,})(?:-(?:mini|nano|terra|luna))?$/;
 const OPENAI_CURRENT_SIGN_IN_MODEL_RE = /^gpt-(?:5\.(?:[4-9]|\d{2,})(?:-mini)?|5\.3-codex-spark)$/;
 const CHUTES_CURRENT_NORMAL_UI_MODEL_RE = /^(?:google\/gemma-4-[^/]+-TEE|Qwen\/Qwen3(?:\.\d+)?-[^/]+-TEE|deepseek-ai\/DeepSeek-V3\.2-TEE|zai-org\/GLM-5(?:\.\d+)?-TEE|moonshotai\/Kimi-K2\.6-TEE)$/;
-const OPENROUTER_CURRENT_NORMAL_UI_MODEL_RE = /^(?:openrouter\/owl-alpha|openai\/gpt-(?:5\.5|5\.4(?:-(?:mini|nano))?)|anthropic\/claude-(?:fable-5|opus-4\.8|sonnet-5|haiku-4\.5)|google\/gemini-(?:3\.5-flash|3\.1-(?:pro-preview|flash-lite)|3-flash-preview)|x-ai\/(?:grok-4\.3|grok-build-0\.1)|mistralai\/(?:mistral-medium-3-5|mistral-small-2603|mistral-large-2512|devstral-2512)|qwen\/qwen3\.(?:7-(?:max|plus)|6-flash)|z-ai\/glm-5\.2|deepseek\/deepseek-v4-(?:pro|flash)|minimax\/minimax-m2\.7|moonshotai\/kimi-k2\.6)$/;
+const OPENROUTER_CURRENT_NORMAL_UI_MODEL_RE = /^(?:openrouter\/owl-alpha|openai\/gpt-(?:5\.6-(?:sol|terra|luna)|5\.5|5\.4(?:-(?:mini|nano))?)|anthropic\/claude-(?:fable-5|opus-4\.8|sonnet-5|haiku-4\.5)|google\/gemini-(?:3\.5-flash|3\.1-(?:pro-preview|flash-lite)|3-flash-preview)|x-ai\/(?:grok-4\.5|grok-4\.3|grok-build-0\.1)|mistralai\/(?:mistral-medium-3-5|mistral-small-2603|mistral-large-2512|devstral-2512)|qwen\/qwen3\.(?:7-(?:max|plus)|6-flash)|z-ai\/glm-5\.2|deepseek\/deepseek-v4-(?:pro|flash)|minimax\/minimax-m2\.7|moonshotai\/kimi-k2\.6)$/;
 const VERCEL_AI_GATEWAY_CURRENT_NORMAL_UI_MODEL_RE = /^(?:openai\/gpt-(?:5\.5|5\.4(?:-(?:mini|nano))?)|anthropic\/claude-(?:fable-5|opus-4\.8|sonnet-5|haiku-4\.5)|google\/gemini-(?:3\.5-flash|3\.1-(?:pro-preview|flash-lite)|3-flash-preview)|xai\/(?:grok-4\.3|grok-build-0\.1)|mistral\/(?:mistral-medium-3\.5|mistral-small-2603|mistral-large-2512|devstral-2512)|minimax\/minimax-m2\.7(?:-highspeed)?|moonshotai\/kimi-k2\.6)$/;
 const OPENCODE_ZEN_CURRENT_NORMAL_UI_MODEL_RE = /^(?:gpt-5\.(?:5|4(?:-(?:mini|nano))?|3-codex-spark)|claude-(?:fable-5|opus-4-8|sonnet-5|haiku-4-5)|gemini-(?:3\.5-flash|3\.1-pro|3-flash)|qwen3\.7-plus|minimax-m2\.7|glm-5\.2|kimi-k2\.6)$/;
 function normalizeModelIds(values, options = {}) {

package/dist/providers/registry.js

@@ -1,4 +1,4 @@
-import { BASE_THINKING_LEVELS, resolveModelThinkingCapability } from "../shared/model-thinking.js";
+import { BASE_THINKING_LEVELS, XHIGH_THINKING_LEVELS, resolveModelThinkingCapability } from "../shared/model-thinking.js";
 import { CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_ID, CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF, CLOUDFLARE_AI_GATEWAY_MODEL_CATALOG, CLOUDFLARE_AI_GATEWAY_MODEL_IDS, CLOUDFLARE_AI_GATEWAY_MODEL_REFS, CLOUDFLARE_AI_GATEWAY_PROVIDER_BRAND_ID, CLOUDFLARE_AI_GATEWAY_ROUTE_ID, buildCloudflareAiGatewayModelCapabilityOverrides, resolveCloudflareAiGatewayBaseUrl } from "./cloudflare-ai-gateway-shared.js";
 import { HUGGINGFACE_DEFAULT_MODEL_ID, HUGGINGFACE_DEFAULT_MODEL_REF, HUGGINGFACE_MODEL_IDS, HUGGINGFACE_MODEL_REFS, buildHuggingfaceModelCapabilityOverrides } from "./huggingface-models.js";
 import { LITELLM_BASE_URL, LITELLM_DEFAULT_MODEL_ID, LITELLM_DEFAULT_MODEL_REF, LITELLM_MODEL_IDS, LITELLM_MODEL_REFS, buildLitellmModelCapabilityOverrides } from "./litellm-models.js";
@@ -107,6 +107,9 @@ const LITELLM_ROUTE_ID = "litellm";
 const CUSTOM_PROVIDER_BRAND_ID = "custom";
 const CUSTOM_PROVIDER_ROUTE_ID = "custom";
 const OPENAI_API_MODEL_IDS = [
+	"gpt-5.6",
+	"gpt-5.6-terra",
+	"gpt-5.6-luna",
 	"gpt-5.5",
 	"gpt-5.4",
 	"gpt-5.4-mini",
@@ -162,7 +165,11 @@ const GOOGLE_GEMINI_MODEL_IDS = [
 ];
 const GOOGLE_API_MODEL_REFS = GOOGLE_GEMINI_MODEL_IDS.map((id) => `${GOOGLE_API_ROUTE_ID}/${id}`);
 const GOOGLE_GEMINI_CLI_MODEL_REFS = GOOGLE_GEMINI_MODEL_IDS.map((id) => `${GOOGLE_GEMINI_CLI_ROUTE_ID}/${id}`);
-const XAI_MODEL_IDS = ["grok-4.3", "grok-build-0.1"];
+const XAI_MODEL_IDS = [
+	"grok-4.5",
+	"grok-4.3",
+	"grok-build-0.1"
+];
 const XAI_MODEL_REFS = XAI_MODEL_IDS.map((id) => `${XAI_ROUTE_ID}/${id}`);
 const MISTRAL_MODEL_IDS = [
 	"mistral-medium-3.5",
@@ -218,6 +225,9 @@ const BYTEPLUS_CODING_MODEL_IDS = [
 const BYTEPLUS_CODING_MODEL_REFS = BYTEPLUS_CODING_MODEL_IDS.flatMap((id) => [`${BYTEPLUS_CODING_ROUTE_ID}/${id}`, `${BYTEPLUS_PLAN_ROUTE_ID}/${id}`]);
 const OPENROUTER_MODEL_IDS = [
 	"openrouter/owl-alpha",
+	"openai/gpt-5.6-sol",
+	"openai/gpt-5.6-terra",
+	"openai/gpt-5.6-luna",
 	"openai/gpt-5.5",
 	"openai/gpt-5.4",
 	"openai/gpt-5.4-mini",
@@ -230,6 +240,7 @@ const OPENROUTER_MODEL_IDS = [
 	"google/gemini-3.1-pro-preview",
 	"google/gemini-3-flash-preview",
 	"google/gemini-3.1-flash-lite",
+	"x-ai/grok-4.5",
 	"x-ai/grok-4.3",
 	"x-ai/grok-build-0.1",
 	"mistralai/mistral-medium-3-5",
@@ -544,6 +555,19 @@ const GOOGLE_MODEL_CAPABILITY_OVERRIDES = Object.fromEntries([...GOOGLE_API_MODE
 	reasoningBudgetSupported: true
 }]));
 const XAI_MODEL_CAPABILITY_OVERRIDES = {
+	"xai/grok-4.5": {
+		tools: true,
+		json: true,
+		thinkingLevels: [
+			"off",
+			"low",
+			"medium",
+			"high"
+		],
+		defaultThinkingLevel: "low",
+		thinkingMode: "xai-reasoning-effort",
+		reasoningBudgetSupported: false
+	},
 	"xai/grok-4.3": {
 		tools: true,
 		json: true,
@@ -661,6 +685,16 @@ const OPENROUTER_VIDEO_MODEL_REFS = new Set([
 const OPENROUTER_MISTRAL_REASONING_MODEL_REFS = new Set(["openrouter/mistralai/mistral-medium-3-5", "openrouter/mistralai/mistral-small-2603"]);
 const OPENROUTER_MINIMAX_REASONING_MODEL_REFS = new Set(["openrouter/minimax/minimax-m2.7"]);
 const OPENROUTER_GENERIC_REASONING_MODEL_REFS = new Set(["openrouter/deepseek/deepseek-v4-pro", "openrouter/deepseek/deepseek-v4-flash"]);
+const OPENROUTER_OPENAI_REASONING_MODEL_REFS = new Set([
+	"openrouter/openai/gpt-5.6-sol",
+	"openrouter/openai/gpt-5.6-terra",
+	"openrouter/openai/gpt-5.6-luna",
+	"openrouter/openai/gpt-5.5",
+	"openrouter/openai/gpt-5.4",
+	"openrouter/openai/gpt-5.4-mini",
+	"openrouter/openai/gpt-5.4-nano"
+]);
+const OPENROUTER_XAI_REASONING_MODEL_REFS = new Set(["openrouter/x-ai/grok-4.5", "openrouter/x-ai/grok-4.3"]);
 const OPENROUTER_MODEL_CAPABILITY_OVERRIDES = Object.fromEntries(OPENROUTER_MODEL_REFS.map((ref) => [ref, {
 	tools: true,
 	json: true,
@@ -683,6 +717,23 @@ const OPENROUTER_MODEL_CAPABILITY_OVERRIDES = Object.fromEntries(OPENROUTER_MODE
 		defaultThinkingLevel: "low",
 		thinkingMode: "generic-reasoning",
 		reasoningBudgetSupported: false
+	} : {},
+	...OPENROUTER_OPENAI_REASONING_MODEL_REFS.has(ref) ? {
+		thinkingLevels: [...XHIGH_THINKING_LEVELS],
+		defaultThinkingLevel: "low",
+		thinkingMode: "openai-reasoning-effort",
+		reasoningBudgetSupported: false
+	} : {},
+	...OPENROUTER_XAI_REASONING_MODEL_REFS.has(ref) ? {
+		thinkingLevels: [
+			"off",
+			"low",
+			"medium",
+			"high"
+		],
+		defaultThinkingLevel: "low",
+		thinkingMode: "xai-reasoning-effort",
+		reasoningBudgetSupported: false
 	} : {}
 }]));
 const QWEN_NON_THINKING_MODEL_REFS = new Set([

package/dist/security/audit-channel.js

@@ -1,8 +1,8 @@
 import { normalizeStringEntries } from "../shared/string-normalization.js";
 import { formatCliCommand } from "../cli/command-format.js";
-import { resolveNativeCommandsEnabled, resolveNativeSkillsEnabled } from "../config/commands.js";
 import { readChannelAllowFromStore } from "../pairing/pairing-store.js";
 import { resolveDmAllowState } from "./dm-policy-shared.js";
+import { resolveNativeCommandsEnabled, resolveNativeSkillsEnabled } from "../config/commands.js";
 import { resolveChannelDefaultAccountId } from "../channels/plugins/helpers.js";
 import { isNumericTelegramUserId, normalizeTelegramAllowFromEntry } from "../channels/telegram/allow-from.js";
 import { isDangerousNameMatchingEnabled } from "../config/dangerous-name-matching.js";

package/dist/security/audit-extra.async.js

@@ -19,11 +19,11 @@ import { pickSandboxToolPolicy } from "../agents/sandbox-tool-policy.js";
 import { isToolAllowedByPolicies } from "../agents/pi-tools.policy.js";
 import { loadWorkspaceSkillEntries } from "../agents/skills/workspace.js";
 import "../agents/skills.js";
-import { listAgentWorkspaceDirs } from "../agents/workspace-dirs.js";
-import { execDockerRaw } from "../agents/sandbox/docker.js";
-import "../agents/sandbox.js";
 import "./audit-tool-policy.js";
+import { execDockerRaw } from "../agents/sandbox/docker.js";
+import { listAgentWorkspaceDirs } from "../agents/workspace-dirs.js";
 import { collectIncludePathsRecursive } from "../config/includes-scan.js";
+import "../agents/sandbox.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 

package/dist/security/audit-extra.sync.js

@@ -6,11 +6,11 @@ import { resolveSandboxConfigForAgent } from "../agents/sandbox/config.js";
 import { resolveBrowserConfig } from "../browser/config.js";
 import { pickSandboxToolPolicy } from "../agents/sandbox-tool-policy.js";
 import { isToolAllowedByPolicies } from "../agents/pi-tools.policy.js";
-import { resolveGatewayAuth } from "../gateway/auth.js";
-import "../agents/sandbox.js";
 import { resolveNodeCommandAllowlist } from "../gateway/node-command-policy.js";
 import { inferParamBFromIdOrName } from "../shared/model-param-b.js";
 import "./audit-tool-policy.js";
+import { resolveGatewayAuth } from "../gateway/auth.js";
+import "../agents/sandbox.js";
 
 //#region src/security/audit-extra.sync.ts
 const SMALL_MODEL_PARAM_B_MAX = 300;

package/dist/security/audit.js

@@ -5,15 +5,15 @@ import { listChannelPlugins } from "../channels/plugins/index.js";
 import { buildGatewayConnectionDetails } from "../gateway/call.js";
 import { resolveWalletRuntimeConfig } from "../wallet/wallet-runtime-config.js";
 import { resolveBrowserConfig, resolveProfile } from "../browser/config.js";
-import { DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools.js";
-import { resolveGatewayAuth } from "../gateway/auth.js";
-import { resolveBrowserControlAuth } from "../browser/control-auth.js";
-import { probeGateway } from "../gateway/probe.js";
 import { resolveGatewayProbeAuth } from "../gateway/probe-auth.js";
+import { probeGateway } from "../gateway/probe.js";
 import { collectChannelSecurityFindings } from "./audit-channel.js";
 import { collectAttackSurfaceSummaryFindings, collectExposureMatrixFindings, collectGatewayHttpSessionKeyOverrideFindings, collectHooksHardeningFindings, collectMinimalProfileOverrideFindings, collectModelHygieneFindings, collectNodeDenyCommandPatternFindings, collectSandboxDockerNoopFindings, collectSecretsInConfigFindings, collectSmallModelRiskFindings, collectSyncedFolderFindings } from "./audit-extra.sync.js";
 import { collectIncludeFilePermFindings, collectInstalledSkillsCodeSafetyFindings, collectPluginsCodeSafetyFindings, collectPluginsTrustFindings, collectStateDeepFilesystemFindings, readConfigSnapshotForAudit } from "./audit-extra.async.js";
 import "./audit-extra.js";
+import { DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools.js";
+import { resolveGatewayAuth } from "../gateway/auth.js";
+import { resolveBrowserControlAuth } from "../browser/control-auth.js";
 
 //#region src/security/audit.ts
 function countBySeverity(findings) {

package/dist/security/dm-policy-shared.js

@@ -1,7 +1,7 @@
 import { normalizeStringEntries } from "../shared/string-normalization.js";
-import { readChannelAllowFromStore } from "../pairing/pairing-store.js";
 import { mergeDmAllowFromSources, resolveGroupAllowFromSources } from "../channels/allow-from.js";
 import { resolveControlCommandGate } from "../channels/command-gating.js";
+import { readChannelAllowFromStore } from "../pairing/pairing-store.js";
 
 //#region src/security/dm-policy-shared.ts
 function resolveEffectiveAllowFromLists(params) {

package/dist/shared/model-thinking.js

@@ -8,6 +8,9 @@ const BASE_THINKING_LEVELS = [
 ];
 const XHIGH_THINKING_LEVELS = [...BASE_THINKING_LEVELS, "xhigh"];
 const XHIGH_MODEL_REFS = [
+	"openai/gpt-5.6",
+	"openai/gpt-5.6-terra",
+	"openai/gpt-5.6-luna",
 	"openai/gpt-5.5",
 	"openai/gpt-5.4",
 	"openai/gpt-5.4-mini",
@@ -256,4 +259,4 @@ function formatXHighModelHint() {
 }
 
 //#endregion
-export { BASE_THINKING_LEVELS, formatThinkingLevels, formatXHighModelHint, isBinaryThinkingProvider, listThinkingLevelLabels, listThinkingLevels, normalizeThinkLevel, resolveModelThinkingCapability, supportsXHighThinking };
+export { BASE_THINKING_LEVELS, XHIGH_THINKING_LEVELS, formatThinkingLevels, formatXHighModelHint, isBinaryThinkingProvider, listThinkingLevelLabels, listThinkingLevels, normalizeThinkLevel, resolveModelThinkingCapability, supportsXHighThinking };

package/dist/shared/net/redact-sensitive-url.js

@@ -3,6 +3,7 @@ const SENSITIVE_URL_QUERY_PARAM_NAMES = new Set([
 	"token",
 	"key",
 	"api_key",
+	"api-key",
 	"apikey",
 	"secret",
 	"access_token",

package/dist/signal/client.js

@@ -1,6 +1,6 @@
 import { fetchWithTimeout } from "../utils/fetch-timeout.js";
-import { resolveFetch } from "../infra/fetch.js";
 import { generateSecureUuid } from "../infra/secure-random.js";
+import { resolveFetch } from "../infra/fetch.js";
 
 //#region src/signal/client.ts
 const DEFAULT_TIMEOUT_MS = 1e4;

package/dist/signal/index.js

@@ -1,6 +1,6 @@
-import { sendMessageSignal } from "./send.js";
 import { resolveSignalReactionLevel } from "./reaction-level.js";
 import { removeReactionSignal, sendReactionSignal } from "./send-reactions.js";
+import { sendMessageSignal } from "./send.js";
 import { monitorSignalProvider } from "./monitor.js";
 import { probeSignal } from "./probe.js";
 

package/dist/signal/monitor/access-policy.js

@@ -1,6 +1,6 @@
-import { isSignalSenderAllowed } from "../identity.js";
 import { upsertChannelPairingRequest } from "../../pairing/pairing-store.js";
 import { readStoreAllowFromForDmPolicy, resolveDmGroupAccessWithLists } from "../../security/dm-policy-shared.js";
+import { isSignalSenderAllowed } from "../identity.js";
 import { issuePairingChallenge } from "../../pairing/pairing-challenge.js";
 
 //#region src/signal/monitor/access-policy.ts

package/dist/signal/monitor/event-handler.js

@@ -6,26 +6,26 @@ import { resolveStorePath } from "../../config/sessions/paths.js";
 import { readSessionUpdatedAt } from "../../config/sessions/store.js";
 import "../../config/sessions.js";
 import { finalizeInboundContext } from "../../auto-reply/reply/inbound-context.js";
+import { resolveControlCommandGate } from "../../channels/command-gating.js";
+import { DM_GROUP_ACCESS_REASON } from "../../security/dm-policy-shared.js";
 import { resolveHumanDelayConfig } from "../../agents/identity.js";
 import { mediaKindFromMime } from "../../media/constants.js";
-import { sendMessageSignal, sendReadReceiptSignal, sendTypingSignal } from "../send.js";
-import { enqueueSystemEvent } from "../../infra/system-events.js";
-import { resolveAgentRoute } from "../../routing/resolve-route.js";
-import { formatSignalPairingIdLine, formatSignalSenderDisplay, formatSignalSenderId, isSignalSenderAllowed, resolveSignalPeerId, resolveSignalRecipient, resolveSignalSender } from "../identity.js";
 import { buildMentionRegexes, matchesMentionPatterns } from "../../auto-reply/reply/mentions.js";
 import { hasControlCommand } from "../../auto-reply/command-detection.js";
 import { createReplyDispatcherWithTyping } from "../../auto-reply/reply/reply-dispatcher.js";
 import { dispatchInboundMessage } from "../../auto-reply/dispatch.js";
 import { formatInboundEnvelope, formatInboundFromLabel, resolveEnvelopeFormatOptions } from "../../auto-reply/envelope.js";
 import { createInboundDebouncer, resolveInboundDebounceMs } from "../../auto-reply/inbound-debounce.js";
-import { resolveControlCommandGate } from "../../channels/command-gating.js";
 import { recordInboundSession } from "../../channels/session.js";
 import { buildPendingHistoryContextFromMap, clearHistoryEntriesIfEnabled, recordPendingHistoryEntryIfEnabled } from "../../auto-reply/reply/history.js";
 import { createReplyPrefixOptions } from "../../channels/reply-prefix.js";
 import { logInboundDrop, logTypingFailure } from "../../channels/logging.js";
-import { DM_GROUP_ACCESS_REASON } from "../../security/dm-policy-shared.js";
+import { resolveAgentRoute } from "../../routing/resolve-route.js";
+import { enqueueSystemEvent } from "../../infra/system-events.js";
+import { formatSignalPairingIdLine, formatSignalSenderDisplay, formatSignalSenderId, isSignalSenderAllowed, resolveSignalPeerId, resolveSignalRecipient, resolveSignalSender } from "../identity.js";
 import { resolveMentionGatingWithBypass } from "../../channels/mention-gating.js";
 import { createTypingCallbacks } from "../../channels/typing.js";
+import { sendMessageSignal, sendReadReceiptSignal, sendTypingSignal } from "../send.js";
 import { handleSignalDirectMessageAccess, resolveSignalAccessState } from "./access-policy.js";
 import { renderSignalMentions } from "./mentions.js";
 

package/dist/signal/monitor.js

@@ -4,15 +4,15 @@ import { normalizeStringEntries } from "../shared/string-normalization.js";
 import { loadConfig } from "../config/io.js";
 import "../config/config.js";
 import { resolveSignalAccount } from "./accounts.js";
+import { resolveAllowlistProviderRuntimeGroupPolicy, resolveDefaultGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "../config/runtime-group-policy.js";
 import { chunkTextWithMode, resolveChunkMode, resolveTextChunkLimit } from "../auto-reply/chunk.js";
-import { saveMediaBuffer } from "../media/store.js";
 import { signalCheck, signalRpcRequest } from "./client.js";
-import { sendMessageSignal } from "./send.js";
-import { isSignalSenderAllowed } from "./identity.js";
 import { DEFAULT_GROUP_HISTORY_LIMIT } from "../auto-reply/reply/history.js";
-import { resolveAllowlistProviderRuntimeGroupPolicy, resolveDefaultGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "../config/runtime-group-policy.js";
 import { waitForTransportReady } from "../infra/transport-ready.js";
+import { saveMediaBuffer } from "../media/store.js";
 import { formatSignalDaemonExit, spawnSignalDaemon } from "./daemon.js";
+import { isSignalSenderAllowed } from "./identity.js";
+import { sendMessageSignal } from "./send.js";
 import { createSignalEventHandler } from "./monitor/event-handler.js";
 import { runSignalSseLoop } from "./sse-reconnect.js";
 

package/dist/signal/send.js

@@ -2,11 +2,11 @@ import { loadConfig } from "../config/io.js";
 import "../config/config.js";
 import { resolveSignalAccount } from "./accounts.js";
 import { mediaKindFromMime } from "../media/constants.js";
-import { resolveMarkdownTableMode } from "../config/markdown-tables.js";
-import { markdownToSignalText } from "./format.js";
-import { resolveOutboundAttachmentFromUrl } from "../media/outbound-attachment.js";
 import { signalRpcRequest } from "./client.js";
 import { resolveSignalRpcContext } from "./rpc-context.js";
+import { resolveMarkdownTableMode } from "../config/markdown-tables.js";
+import { resolveOutboundAttachmentFromUrl } from "../media/outbound-attachment.js";
+import { markdownToSignalText } from "./format.js";
 
 //#region src/signal/send.ts
 function parseTarget(raw) {

package/dist/slack/monitor/auth.js

@@ -1,5 +1,5 @@
-import { allowListMatches, normalizeAllowList, normalizeAllowListLower, resolveSlackUserAllowed } from "./allow-list.js";
 import { readStoreAllowFromForDmPolicy } from "../../security/dm-policy-shared.js";
+import { allowListMatches, normalizeAllowList, normalizeAllowListLower, resolveSlackUserAllowed } from "./allow-list.js";
 import { resolveSlackChannelConfig } from "./channel-config.js";
 import { normalizeSlackChannelType } from "./context.js";
 

package/dist/slack/monitor/context.js

@@ -4,8 +4,8 @@ import "../../logging.js";
 import { formatAllowlistMatchMeta } from "../../channels/allowlist-match.js";
 import { resolveSessionKey } from "../../config/sessions/session-key.js";
 import "../../config/sessions.js";
-import { normalizeAllowList, normalizeAllowListLower, normalizeSlackSlug } from "./allow-list.js";
 import { createDedupeCache } from "../../infra/dedupe.js";
+import { normalizeAllowList, normalizeAllowListLower, normalizeSlackSlug } from "./allow-list.js";
 import { isSlackChannelAllowedByPolicy } from "./policy.js";
 import { resolveSlackChannelConfig } from "./channel-config.js";
 

package/dist/slack/monitor/dm-auth.js

@@ -1,7 +1,7 @@
 import { formatAllowlistMatchMeta } from "../../channels/allowlist-match.js";
-import { resolveSlackAllowListMatch } from "./allow-list.js";
 import { upsertChannelPairingRequest } from "../../pairing/pairing-store.js";
 import { issuePairingChallenge } from "../../pairing/pairing-challenge.js";
+import { resolveSlackAllowListMatch } from "./allow-list.js";
 
 //#region src/slack/monitor/dm-auth.ts
 async function authorizeSlackDirectMessage(params) {

package/dist/slack/monitor/message-handler/prepare.js

@@ -5,20 +5,20 @@ import { resolveStorePath } from "../../../config/sessions/paths.js";
 import { readSessionUpdatedAt } from "../../../config/sessions/store.js";
 import "../../../config/sessions.js";
 import { finalizeInboundContext } from "../../../auto-reply/reply/inbound-context.js";
+import { resolveControlCommandGate } from "../../../channels/command-gating.js";
 import { resolveAckReaction } from "../../../agents/identity.js";
 import { shouldHandleTextCommands } from "../../../auto-reply/commands-registry.js";
-import { enqueueSystemEvent } from "../../../infra/system-events.js";
-import { resolveAgentRoute } from "../../../routing/resolve-route.js";
-import { resolveSlackAllowListMatch, resolveSlackUserAllowed } from "../allow-list.js";
 import { buildMentionRegexes, matchesMentionWithExplicit } from "../../../auto-reply/reply/mentions.js";
 import { hasControlCommand } from "../../../auto-reply/command-detection.js";
 import { formatInboundEnvelope, resolveEnvelopeFormatOptions } from "../../../auto-reply/envelope.js";
 import { shouldAckReaction } from "../../../channels/ack-reactions.js";
-import { resolveControlCommandGate } from "../../../channels/command-gating.js";
 import { recordInboundSession } from "../../../channels/session.js";
 import { buildPendingHistoryContextFromMap, recordPendingHistoryEntryIfEnabled } from "../../../auto-reply/reply/history.js";
 import { logInboundDrop } from "../../../channels/logging.js";
+import { resolveAgentRoute } from "../../../routing/resolve-route.js";
+import { enqueueSystemEvent } from "../../../infra/system-events.js";
 import { resolveMentionGatingWithBypass } from "../../../channels/mention-gating.js";
+import { resolveSlackAllowListMatch, resolveSlackUserAllowed } from "../allow-list.js";
 import { sendMessageSlack } from "../../send.js";
 import { reactSlackMessage } from "../../actions.js";
 import { stripSlackMentionsForCommandDetection } from "../commands.js";

package/dist/slack/monitor/provider.js

@@ -5,14 +5,14 @@ import { loadConfig } from "../../config/io.js";
 import "../../config/config.js";
 import { resolveSlackAppToken, resolveSlackBotToken } from "../token.js";
 import { resolveSlackAccount } from "../accounts.js";
+import { resolveDefaultGroupPolicy, resolveOpenProviderRuntimeGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "../../config/runtime-group-policy.js";
 import { resolveTextChunkLimit } from "../../auto-reply/chunk.js";
+import { DEFAULT_GROUP_HISTORY_LIMIT } from "../../auto-reply/reply/history.js";
 import { installRequestBodyLimitGuard } from "../../infra/http-body.js";
 import { normalizeAllowList } from "./allow-list.js";
-import { DEFAULT_GROUP_HISTORY_LIMIT } from "../../auto-reply/reply/history.js";
-import { resolveDefaultGroupPolicy, resolveOpenProviderRuntimeGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "../../config/runtime-group-policy.js";
-import { resolveSlackWebClientOptions } from "../client.js";
 import { isDangerousNameMatchingEnabled } from "../../config/dangerous-name-matching.js";
 import { addAllowlistUserEntriesFromConfigEntry, buildAllowlistResolutionSummary, mergeAllowlist, patchAllowlistUsersInConfigEntries, summarizeMapping } from "../../channels/allowlists/resolve-utils.js";
+import { resolveSlackWebClientOptions } from "../client.js";
 import { normalizeSlackWebhookPath, registerSlackHttpHandler } from "../http/registry.js";
 import "../http/index.js";
 import { resolveSlackSlashCommandConfig } from "./commands.js";

package/dist/slack/monitor/replies.js

@@ -1,5 +1,5 @@
-import { chunkMarkdownTextWithMode } from "../../auto-reply/chunk.js";
 import { SILENT_REPLY_TOKEN, isSilentReplyText } from "../../auto-reply/tokens.js";
+import { chunkMarkdownTextWithMode } from "../../auto-reply/chunk.js";
 import { markdownToSlackMrkdwnChunks } from "../format.js";
 import { sendMessageSlack } from "../send.js";
 import { createReplyReferencePlanner } from "../../auto-reply/reply/reply-reference.js";

package/dist/slack/monitor/slash.js

@@ -1,7 +1,7 @@
 import { danger, logVerbose } from "../../globals.js";
+import { resolveCommandAuthorizedFromAuthorizers } from "../../channels/command-gating.js";
 import { resolveNativeCommandsEnabled, resolveNativeSkillsEnabled } from "../../config/commands.js";
 import { resolveSlackAllowListMatch, resolveSlackUserAllowed } from "./allow-list.js";
-import { resolveCommandAuthorizedFromAuthorizers } from "../../channels/command-gating.js";
 import { chunkItems } from "../../utils/chunk-items.js";
 import { buildSlackSlashCommandMatcher, resolveSlackSlashCommandConfig } from "./commands.js";
 import { isSlackChannelAllowedByPolicy } from "./policy.js";

package/dist/slack/send.js

@@ -4,10 +4,10 @@ import "../config/config.js";
 import { resolveSlackBotToken } from "./token.js";
 import { resolveSlackAccount } from "./accounts.js";
 import { parseSlackTarget } from "./targets.js";
+import { isSilentReplyText } from "../auto-reply/tokens.js";
 import { chunkMarkdownTextWithMode, resolveChunkMode, resolveTextChunkLimit } from "../auto-reply/chunk.js";
 import { resolveMarkdownTableMode } from "../config/markdown-tables.js";
 import { loadWebMedia } from "../web/media.js";
-import { isSilentReplyText } from "../auto-reply/tokens.js";
 import { buildSlackBlocksFallbackText } from "./blocks-fallback.js";
 import { validateSlackBlocksArray } from "./blocks-input.js";
 import { createSlackWebClient } from "./client.js";

package/dist/telegram/bot/helpers.js

@@ -1,9 +1,9 @@
 import { normalizeAccountId } from "../../routing/account-id.js";
 import "../../routing/session-key.js";
 import { resolveTelegramPreviewStreamMode } from "../../config/discord-preview-streaming.js";
-import { formatLocationText } from "../../channels/location.js";
-import { readChannelAllowFromStore } from "../../pairing/pairing-store.js";
 import { firstDefined } from "../../channels/allow-from.js";
+import { readChannelAllowFromStore } from "../../pairing/pairing-store.js";
+import { formatLocationText } from "../../channels/location.js";
 import { normalizeAllowFrom } from "../bot-access.js";
 
 //#region src/telegram/bot/helpers.ts

package/dist/telegram/bot-handlers.js

@@ -6,18 +6,18 @@ import "../config/config.js";
 import { resolveStorePath } from "../config/sessions/paths.js";
 import { loadSessionStore } from "../config/sessions/store.js";
 import "../config/sessions.js";
-import { MediaFetchError } from "../media/fetch.js";
+import { readChannelAllowFromStore } from "../pairing/pairing-store.js";
 import { resolveTelegramInlineButtonsScope } from "./inline-buttons.js";
-import { enqueueSystemEvent } from "../infra/system-events.js";
+import { hasControlCommand } from "../auto-reply/command-detection.js";
+import { createInboundDebouncer, resolveInboundDebounceMs } from "../auto-reply/inbound-debounce.js";
+import { MediaFetchError } from "../media/fetch.js";
 import { resolveAgentRoute } from "../routing/resolve-route.js";
-import { readChannelAllowFromStore } from "../pairing/pairing-store.js";
+import { enqueueSystemEvent } from "../infra/system-events.js";
 import { isSenderAllowed, normalizeDmAllowFromWithStore } from "./bot-access.js";
 import { buildTelegramGroupPeerId, buildTelegramParentPeer, resolveTelegramForumThreadId, resolveTelegramGroupAllowFromContext } from "./bot/helpers.js";
 import { buildCommandsMessagePaginated } from "../auto-reply/status.js";
-import { hasControlCommand } from "../auto-reply/command-detection.js";
-import { createInboundDebouncer, resolveInboundDebounceMs } from "../auto-reply/inbound-debounce.js";
-import { resolveChannelConfigWrites } from "../channels/plugins/config-writes.js";
 import { listSkillCommandsForAgents } from "../auto-reply/skill-commands.js";
+import { resolveChannelConfigWrites } from "../channels/plugins/config-writes.js";
 import { buildCommandsPaginationKeyboard } from "../auto-reply/reply/commands-info.js";
 import { buildModelsKeyboard, buildProviderKeyboard, calculateTotalPages, getModelsPageSize, parseModelCallbackData } from "./model-buttons.js";
 import { buildModelsProviderData, formatModelsAvailableHeader } from "../auto-reply/reply/commands-models.js";

package/dist/telegram/bot-message-context.js

@@ -7,23 +7,23 @@ import { resolveStorePath } from "../config/sessions/paths.js";
 import { readSessionUpdatedAt } from "../config/sessions/store.js";
 import "../config/sessions.js";
 import { finalizeInboundContext } from "../auto-reply/reply/inbound-context.js";
+import { firstDefined } from "../channels/allow-from.js";
+import { resolveControlCommandGate } from "../channels/command-gating.js";
 import { resolveAckReaction } from "../agents/identity.js";
 import { normalizeCommandBody } from "../auto-reply/commands-registry.js";
-import { resolveAgentRoute } from "../routing/resolve-route.js";
-import { formatLocationText, toLocationContext } from "../channels/location.js";
-import { firstDefined } from "../channels/allow-from.js";
-import { isSenderAllowed, normalizeAllowFrom, normalizeDmAllowFromWithStore } from "./bot-access.js";
-import { buildGroupLabel, buildSenderLabel, buildSenderName, buildTelegramGroupFrom, buildTelegramGroupPeerId, buildTelegramParentPeer, buildTypingThreadParams, describeReplyTarget, expandTextLinks, extractTelegramLocation, hasBotMention, normalizeForwardedContext, resolveTelegramMediaPlaceholder, resolveTelegramThreadSpec } from "./bot/helpers.js";
 import { buildMentionRegexes, matchesMentionWithExplicit } from "../auto-reply/reply/mentions.js";
 import { hasControlCommand } from "../auto-reply/command-detection.js";
 import { formatInboundEnvelope, resolveEnvelopeFormatOptions } from "../auto-reply/envelope.js";
 import { shouldAckReaction } from "../channels/ack-reactions.js";
-import { resolveControlCommandGate } from "../channels/command-gating.js";
 import { recordInboundSession } from "../channels/session.js";
 import { buildPendingHistoryContextFromMap, recordPendingHistoryEntryIfEnabled } from "../auto-reply/reply/history.js";
 import { logInboundDrop } from "../channels/logging.js";
+import { resolveAgentRoute } from "../routing/resolve-route.js";
 import { recordChannelActivity } from "../infra/channel-activity.js";
+import { formatLocationText, toLocationContext } from "../channels/location.js";
 import { resolveMentionGatingWithBypass } from "../channels/mention-gating.js";
+import { isSenderAllowed, normalizeAllowFrom, normalizeDmAllowFromWithStore } from "./bot-access.js";
+import { buildGroupLabel, buildSenderLabel, buildSenderName, buildTelegramGroupFrom, buildTelegramGroupPeerId, buildTelegramParentPeer, buildTypingThreadParams, describeReplyTarget, expandTextLinks, extractTelegramLocation, hasBotMention, normalizeForwardedContext, resolveTelegramMediaPlaceholder, resolveTelegramThreadSpec } from "./bot/helpers.js";
 import { findModelInCatalog, loadModelCatalog, modelSupportsVision } from "../agents/model-catalog.js";
 import { withTelegramApiErrorLogging } from "./api-logging.js";
 import { createStatusReactionController } from "../channels/status-reactions.js";