@fased/fased 0.1.56 → 0.1.57

package/dist/plugin-sdk/{config-schema-B9DKr6J5.js → config-schema-aKPMn6ML.js}

@@ -1,11 +1,11 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { $ as mergeSessionEntry, A as deliveryContextKey, An as GATEWAY_CLIENT_IDS, B as INPUT_PROVENANCE_KIND_VALUES, Bn as CLI_DEFAULT_OPERATOR_SCOPES, C as recordSessionMetaFromInbound, Cn as isGatewayMessageChannel, D as isCacheEnabled, Dn as normalizeMessageChannel, Dt as getChannelDock, E as updateSessionStoreEntry, En as listDeliverableMessageChannels, F as archiveSessionTranscripts, Fn as normalizeAnyChannelId, Ft as trimMessagingTarget, G as resolveSessionLockMaxHoldFromTimeout, Gn as getPluginCommandSpecs, H as hasInterSessionUserProvenance, Hn as resolveLeastPrivilegeOperatorScopesForMethod, I as capArrayByJsonBytes, In as normalizeChannelId$2, It as isWhatsAppGroupJid, J as resolveChannelResetConfig, Jn as createInternalHookEvent, K as resolveSessionKey$1, Kn as listPluginCommands, L as countToolResults, Ln as logMutatingAdminRpcAudit, Lt as normalizeWhatsAppTarget, M as normalizeDeliveryContext, Mn as GATEWAY_CLIENT_NAMES, N as normalizeSessionDeliveryFields, Nn as getChatChannelMeta, O as resolveCacheTtlMs$1, On as resolveGatewayMessageChannel, Ot as listChannelDocks, P as normalizeAccountId$1, Pn as listChatChannels, Pt as looksLikeHandleOrPhoneTarget, Q as DEFAULT_RESET_TRIGGERS, R as extractToolCallNames, Rn as consumeMutatingAdminRpcBudget, S as readSessionUpdatedAt, Sn as isDeliverableMessageChannel, T as updateSessionStore, Tn as isMarkdownCapableMessageChannel, U as normalizeInputProvenance, Un as clearPluginCommands, V as applyInputProvenanceToUserMessage, Vn as authorizeOperatorScopesForMethod, W as acquireSessionWriteLock, Wn as executePluginCommand, X as resolveSessionResetType, Xn as normalizePluginHttpPath, Y as resolveSessionResetPolicy, Yn as triggerInternalHook, Z as resolveThreadFlag, _ as appendAssistantMessageToSessionTranscript, _n as resolveChannelGroupRequireMention, a as createPluginRegistry, an as resolveTelegramToken, at as resolveMainSessionKey, b as resolveAndPersistSessionFile, bn as resolveGroupSessionKey, bt as parseSlackTarget, c as listAgentsForGateway, ct as listChannelPlugins, d as lookupContextTokens, dn as resolveDefaultSignalAccountId, en as createTelegramActionGate, et as resolveFreshSessionTotalTokens, f as resolveContextTokensForModel, fn as resolveSignalAccount, g as parseSessionThreadInfo, gn as resolveChannelGroupPolicy, h as extractDeliveryInfo, hn as resolveIMessageAccount, i as setActivePluginRegistry, in as resolveTelegramAccount, it as resolveExplicitAgentSessionKey, j as mergeDeliveryContext, jn as GATEWAY_CLIENT_MODES, k as deliveryContextFromSession, kn as resolveMessageChannel, l as loadCombinedSessionStoreForGateway, ln as listEnabledSignalAccounts, lt as normalizeChannelId$1, mn as resolveDefaultIMessageAccountId, n as getActivePluginRegistryKey, nn as listTelegramAccountIds, nt as canonicalizeMainSessionAlias, o as createRuntimeHelpers, on as buildChannelAccountBindings, ot as deriveSessionMetaPatch, p as ensureFasedAgentModelsJson, pn as listIMessageAccountIds, q as evaluateSessionFreshness, qn as matchPluginCommand, r as requireActivePluginRegistry, rt as resolveAgentMainSessionKey, s as classifySessionKey, st as getChannelPlugin, t as getActivePluginRegistry, tn as listEnabledTelegramAccounts, tt as setSessionRuntimeModel, u as resolveSessionModelRef, un as listSignalAccountIds, v as resolveMirroredTranscriptText, vn as resolveChannelGroupToolsPolicy, w as updateLastRoute, wn as isInternalMessageChannel, x as loadSessionStore, xn as INTERNAL_MESSAGE_CHANNEL, y as resolveSessionTranscriptFile, z as parseInlineDirectives$1, zn as ADMIN_SCOPE, zt as normalizeSignalMessagingTarget } from "./runtime-Dy420wBu.js";
+import { $ as mergeSessionEntry, A as deliveryContextKey, An as GATEWAY_CLIENT_IDS, B as INPUT_PROVENANCE_KIND_VALUES, Bn as CLI_DEFAULT_OPERATOR_SCOPES, C as recordSessionMetaFromInbound, Cn as isGatewayMessageChannel, D as isCacheEnabled, Dn as normalizeMessageChannel, Dt as getChannelDock, E as updateSessionStoreEntry, En as listDeliverableMessageChannels, F as archiveSessionTranscripts, Fn as normalizeAnyChannelId, Ft as trimMessagingTarget, G as resolveSessionLockMaxHoldFromTimeout, Gn as getPluginCommandSpecs, H as hasInterSessionUserProvenance, Hn as resolveLeastPrivilegeOperatorScopesForMethod, I as capArrayByJsonBytes, In as normalizeChannelId$2, It as isWhatsAppGroupJid, J as resolveChannelResetConfig, Jn as createInternalHookEvent, K as resolveSessionKey$1, Kn as listPluginCommands, L as countToolResults, Ln as logMutatingAdminRpcAudit, Lt as normalizeWhatsAppTarget, M as normalizeDeliveryContext, Mn as GATEWAY_CLIENT_NAMES, N as normalizeSessionDeliveryFields, Nn as getChatChannelMeta, O as resolveCacheTtlMs$1, On as resolveGatewayMessageChannel, Ot as listChannelDocks, P as normalizeAccountId$1, Pn as listChatChannels, Pt as looksLikeHandleOrPhoneTarget, Q as DEFAULT_RESET_TRIGGERS, R as extractToolCallNames, Rn as consumeMutatingAdminRpcBudget, S as readSessionUpdatedAt, Sn as isDeliverableMessageChannel, T as updateSessionStore, Tn as isMarkdownCapableMessageChannel, U as normalizeInputProvenance, Un as clearPluginCommands, V as applyInputProvenanceToUserMessage, Vn as authorizeOperatorScopesForMethod, W as acquireSessionWriteLock, Wn as executePluginCommand, X as resolveSessionResetType, Xn as normalizePluginHttpPath, Y as resolveSessionResetPolicy, Yn as triggerInternalHook, Z as resolveThreadFlag, _ as appendAssistantMessageToSessionTranscript, _n as resolveChannelGroupRequireMention, a as createPluginRegistry, an as resolveTelegramToken, at as resolveMainSessionKey, b as resolveAndPersistSessionFile, bn as resolveGroupSessionKey, bt as parseSlackTarget, c as listAgentsForGateway, ct as listChannelPlugins, d as lookupContextTokens, dn as resolveDefaultSignalAccountId, en as createTelegramActionGate, et as resolveFreshSessionTotalTokens, f as resolveContextTokensForModel, fn as resolveSignalAccount, g as parseSessionThreadInfo, gn as resolveChannelGroupPolicy, h as extractDeliveryInfo, hn as resolveIMessageAccount, i as setActivePluginRegistry, in as resolveTelegramAccount, it as resolveExplicitAgentSessionKey, j as mergeDeliveryContext, jn as GATEWAY_CLIENT_MODES, k as deliveryContextFromSession, kn as resolveMessageChannel, l as loadCombinedSessionStoreForGateway, ln as listEnabledSignalAccounts, lt as normalizeChannelId$1, mn as resolveDefaultIMessageAccountId, n as getActivePluginRegistryKey, nn as listTelegramAccountIds, nt as canonicalizeMainSessionAlias, o as createRuntimeHelpers, on as buildChannelAccountBindings, ot as deriveSessionMetaPatch, p as ensureFasedAgentModelsJson, pn as listIMessageAccountIds, q as evaluateSessionFreshness, qn as matchPluginCommand, r as requireActivePluginRegistry, rt as resolveAgentMainSessionKey, s as classifySessionKey, st as getChannelPlugin, t as getActivePluginRegistry, tn as listEnabledTelegramAccounts, tt as setSessionRuntimeModel, u as resolveSessionModelRef, un as listSignalAccountIds, v as resolveMirroredTranscriptText, vn as resolveChannelGroupToolsPolicy, w as updateLastRoute, wn as isInternalMessageChannel, x as loadSessionStore, xn as INTERNAL_MESSAGE_CHANNEL, y as resolveSessionTranscriptFile, z as parseInlineDirectives$1, zn as ADMIN_SCOPE, zt as normalizeSignalMessagingTarget } from "./runtime-nVJl3PlS.js";
 import { a as clearActiveProgressLine, c as CHANNEL_IDS, f as normalizeChatChannelId, i as defaultRuntime, l as CHAT_CHANNEL_ORDER, o as registerActiveProgressLine, r as createNonExitingRuntime, s as unregisterActiveProgressLine, t as createSubsystemLogger } from "./subsystem-DBPNbQDQ.js";
 import { S as normalizeLogLevel, d as isRich, f as theme, i as logVerbose, l as warn, o as setVerbose, p as getChildLogger, s as shouldLogVerbose, t as danger, u as colorize, w as resolvePreferredFasedAgentTmpDir } from "./globals-B_jjtAje.js";
 import { c as expandHomePrefix, i as resolveGatewayPort, n as resolveConfigPath, s as resolveStateDir, t as STATE_DIR, u as resolveRequiredHomeDir } from "./paths-BEmvSyOV.js";
-import { C as isPlainObject, S as truncateUtf16Safe, _ as shortenHomeInString, a as ensureDir$3, b as sliceUtf16Safe, c as isRecord$4, d as normalizeE164, h as resolveUserPath, o as escapeRegExp, r as clampInt, t as CONFIG_DIR, v as shortenHomePath, y as sleep } from "./utils-CYk9EKoq.js";
-import { $ as resetConfigOverrides, $i as DEFAULT_MODEL, $n as ANTHROPIC_ROUTE_ID, $r as QWEN_CODING_PLAN_MODEL_IDS, $t as resolveSubagentSpawnModelSelection, Ai as lookupProviderManifestModelCapability, An as markAuthProfileGood, Ar as MINIMAX_PROVIDER_BRAND_ID, At as isSafeExecutableValue, B as MODEL_APIS, Bi as HUGGINGFACE_MODEL_IDS, Bn as normalizeProviderId$2, Br as OPENAI_API_ROUTE_ID, Bt as buildModelAliasIndex, C as resolveIMessageAttachmentRoots, Ca as normalizePluginsConfig, Ci as ZAI_MODEL_IDS, Cn as markAuthProfileFailure, Cr as LITELLM_ROUTE_ID, Ct as unwrapKnownDispatchWrapperInvocation, Di as isOpenAISignInRuntimeModelSupported, Dn as dedupeProfileIds, Dr as MINIMAX_CN_ROUTE_ID, Dt as normalizeSafeBinProfileFixtures, Ei as getProviderBrandManifestForRoute, En as resolveApiKeyForProfile, Er as MINIMAX_API_ROUTE_ID, Et as SAFE_BIN_PROFILES, Fi as VERCEL_AI_GATEWAY_MODEL_IDS, Fr as MOONSHOT_PROVIDER_BRAND_ID, G as isAvatarDataUrl, Gi as formatThinkingLevels, Gn as resolveAuthProfileDisplayLabel, Gr as OPENROUTER_MODEL_IDS, Gt as normalizeModelRef$1, H as parseDurationMs, Hi as CLOUDFLARE_AI_GATEWAY_PROVIDER_BRAND_ID, Hn as discoverFasedAgentPlugins, Hr as OPENAI_PROVIDER_BRAND_ID, Ii as VENICE_MODEL_IDS, In as withFileLock, Ir as MOONSHOT_ROUTE_ID, It as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, J as isSupportedLocalAvatarExtension, Ji as normalizeThinkLevel, Jn as assertSecretInputResolved, Jr as QIANFAN_MODEL_IDS, Jt as resolveConfiguredModelRef, K as isAvatarHttpUrl, Ki as formatXHighModelHint, Kn as isPrivateNetworkBaseUrl, Kr as OPENROUTER_PROVIDER_BRAND_ID, Kt as normalizeProviderId$1, Li as TOGETHER_MODEL_IDS, Lr as OLLAMA_PROVIDER_BRAND_ID, Mi as resolveProviderRouteModelCapability, Mn as resolveAuthStorePathForDisplay, Mr as MISTRAL_PROVIDER_BRAND_ID, Ni as LITELLM_BASE_URL, Nn as resolveFasedAgentAgentDir, Nr as MISTRAL_ROUTE_ID, Oi as isStandardProviderCatalogEntry, On as listProfilesForProvider, Or as MINIMAX_MODEL_IDS, Ot as resolveSafeBinProfiles, Pi as XIAOMI_MODEL_IDS, Pr as MOONSHOT_MODEL_IDS, Q as getConfigOverrides, Qi as DEFAULT_CONTEXT_TOKENS, Qn as ANTHROPIC_PROVIDER_BRAND_ID, Qr as QWEN_API_ROUTE_ID, Qt as resolveReasoningDefault, Ri as SYNTHETIC_MODEL_IDS, Rr as OLLAMA_ROUTE_ID, Rt as buildAllowedModelSet, S as mergeInboundPathRoots, Si as XIAOMI_ROUTE_ID, Sn as isProfileInCooldown, Sr as LITELLM_PROVIDER_BRAND_ID, St as isShellWrapperExecutable, T as normalizeScpRemoteHost, Ta as resolveMemorySlotDecision, Ti as ZAI_ROUTE_ID, Tn as resolveProfilesUnavailableReason, Tr as LMSTUDIO_ROUTE_ID, Tt as splitShellArgs, Ui as CLOUDFLARE_AI_GATEWAY_ROUTE_ID, Un as isPathInside, Ur as OPENCODE_ZEN_PROVIDER_BRAND_ID, Ut as isCliProvider, V as getBlockedNetworkModeReason, Vi as CLOUDFLARE_AI_GATEWAY_MODEL_IDS, Vn as loadPluginManifestRegistry, Vr as OPENAI_CODEX_ROUTE_ID, Vt as findNormalizedProviderValue, W as AVATAR_MAX_BYTES, Wi as BASE_THINKING_LEVELS, Wn as safeStatSync, Wr as OPENCODE_ZEN_ROUTE_ID, Wt as modelKey, Xi as supportsThinkingLevel, Xn as splitTrailingAuthProfile, Xr as QIANFAN_ROUTE_ID, Yi as resolveModelThinkingCapability, Yn as coerceSecretRef, Yr as QIANFAN_PROVIDER_BRAND_ID, Yt as resolveDefaultModelForAgent, Z as validateJsonSchemaValue, Zi as supportsXHighThinking, Zn as ANTHROPIC_MODEL_IDS, Zr as QWEN_API_MODEL_IDS, Zt as resolveModelRefFromString, _a as formatCliCommand, _i as VOLCENGINE_ROUTE_ID, _n as normalizeModelCatalogProviderId, _r as GOOGLE_PROVIDER_BRAND_ID, _t as matchAllowlist, a as readConfigFileSnapshotForWrite, aa as extractErrorCode, ai as TOGETHER_ROUTE_ID, an as getApiKeyForModel, ar as BYTEPLUS_ROUTE_ID, at as unsetConfigValueAtPath, b as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, ba as parseBooleanValue$1, bi as XAI_ROUTE_ID, bn as resolveAuthProfileOrder, br as KIMI_CODING_MODEL_IDS, bt as extractShellWrapperInlineCommand, c as validateConfigObjectWithPlugins, ci as VERCEL_AI_GATEWAY_PROVIDER_BRAND_ID, cn as resolveApiKeyForProvider, cr as CHUTES_ROUTE_ID, ct as isTrustedSafeBinPath, da as resolveShellEnvFallbackTimeoutMs, di as VLLM_ROUTE_ID, dn as CURRENT_MODEL_PROVIDER_CATALOG, dr as COPILOT_PROXY_ROUTE_ID, dt as validateSafeBinArgv, ea as DEFAULT_PROVIDER, ei as QWEN_CODING_PLAN_ROUTE_ID, en as resolveThinkingDefault, er as BYTEPLUS_CODING_MODEL_IDS, et as setConfigOverride, fa as isDangerousHostEnvOverrideVarName, fi as VOLCENGINE_CODING_MODEL_IDS, fn as cloneCurrentModelProvider, fr as CUSTOM_PROVIDER_BRAND_ID, ft as analyzeShellCommand, ga as resolveOwnerDisplaySetting, gi as VOLCENGINE_PROVIDER_BRAND_ID, gn as normalizeModelCatalogModelId, gr as GOOGLE_GEMINI_MODEL_IDS, gt as DEFAULT_SAFE_BINS, ha as sanitizeHostExecEnv, hi as VOLCENGINE_PLAN_ROUTE_ID, hn as mergeModelCatalogRowsByAuthority, hr as GOOGLE_GEMINI_CLI_ROUTE_ID, ht as splitCommandChain, i as readConfigFileSnapshot, ii as TOGETHER_PROVIDER_BRAND_ID, ir as BYTEPLUS_PROVIDER_BRAND_ID, it as setConfigValueAtPath, ji as providerModelRecommendationRank, jn as ensureAuthProfileStore, jr as MISTRAL_MODEL_IDS, ki as listProviderBrandManifests, kn as listProvidersWithStoredCredentials, kr as MINIMAX_PORTAL_ROUTE_ID, kt as applyMergePatch, la as extractArchive, li as VERCEL_AI_GATEWAY_ROUTE_ID, ln as resolveEnvApiKey, lr as COPILOT_PROVIDER_BRAND_ID, lt as listWritableExplicitTrustedSafeBinDirs, ma as isDangerousHostInheritedEnvVarName, mi as VOLCENGINE_MODEL_IDS, mn as buildModelCatalogMergeKey, mr as GOOGLE_API_ROUTE_ID, mt as isWindowsPlatform, n as loadConfig, na as resolvePluginInstallDir, ni as SYNTHETIC_PROVIDER_BRAND_ID, nr as BYTEPLUS_MODEL_IDS, nt as getConfigValueAtPath, o as resolveConfigSnapshotHash, oa as formatErrorMessage, oi as VENICE_PROVIDER_BRAND_ID, on as getCustomProviderApiKey, or as CHUTES_MODEL_IDS, ot as ensurePluginAllowlisted, pi as VOLCENGINE_CODING_ROUTE_ID, pn as listCurrentModelCatalogRows, pr as CUSTOM_PROVIDER_ROUTE_ID, pt as buildEnforcedShellCommand, q as isPathWithinRoot, qn as normalizeSecretInput, qr as OPENROUTER_ROUTE_ID, r as parseConfigJson5, ra as getPackageManifestMetadata, ri as SYNTHETIC_ROUTE_ID, rr as BYTEPLUS_PLAN_ROUTE_ID, rt as parseConfigPath, s as writeConfigFile, si as VENICE_ROUTE_ID, sn as requireApiKey, sr as CHUTES_PROVIDER_BRAND_ID, st as getTrustedSafeBinDirs, t as createConfigIO, ta as VERSION, ti as QWEN_PROVIDER_BRAND_ID, tn as normalizeGoogleModelId, tr as BYTEPLUS_CODING_ROUTE_ID, tt as unsetConfigOverride, ua as getShellPathFromLoginShell, ui as VLLM_PROVIDER_BRAND_ID, un as resolveModelAuthMode, ur as COPILOT_PROXY_MODEL_IDS, ut as normalizeTrustedSafeBinDirs, va as resolveCliName, vi as XAI_MODEL_IDS, vn as normalizeProviderCatalogRows, vr as HUGGINGFACE_PROVIDER_BRAND_ID, vt as resolveAllowlistCandidatePath, w as resolveIMessageRemoteAttachmentRoots, wa as resolveEffectiveEnableState, wi as ZAI_PROVIDER_BRAND_ID, wn as markAuthProfileUsed, wr as LMSTUDIO_PROVIDER_BRAND_ID, wt as unwrapKnownShellMultiplexerInvocation, x as isInboundPathAllowed, xa as applyTestPluginDefaults, xi as XIAOMI_PROVIDER_BRAND_ID, xn as getSoonestCooldownExpiry, xr as KIMI_CODING_ROUTE_ID, xt as isDispatchWrapperExecutable, ya as isTruthyEnvValue, yi as XAI_PROVIDER_BRAND_ID, yr as HUGGINGFACE_ROUTE_ID, yt as resolveCommandResolutionFromArgv, zi as OPENCODE_ZEN_MODEL_IDS, zn as findNormalizedProviderValue$1, zr as OPENAI_API_MODEL_IDS, zt as buildConfiguredAllowlistKeys } from "./config-Bt5GhnA-.js";
-import { A as openBoundaryFileSync, C as ensureAgentWorkspace, D as resolveFasedAgentPackageRootSync, E as resolveFasedAgentPackageRoot, G as normalizeHyphenSlug, H as resolveAgentModelPrimaryValue, K as normalizeStringEntries, P as resolvePathViaExistingAncestorSync, S as DEFAULT_USER_FILENAME, T as loadWorkspaceBootstrapFiles, U as toAgentModelListLike, V as resolveAgentModelFallbackValues, W as normalizeAtHashSlug, _ as DEFAULT_BOOTSTRAP_FILENAME, a as resolveAgentDir, b as DEFAULT_SOUL_FILENAME, c as resolveAgentSkillsFilter, d as resolveEffectiveModelFallbacks, f as resolveRunModelFallbacksOverride, g as DEFAULT_AGENT_WORKSPACE_DIR, h as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, k as openBoundaryFile, l as resolveAgentWorkspaceDir, m as resolveSessionAgentIds, n as listAgentEntries, p as resolveSessionAgentId, q as normalizeStringEntriesLower, r as listAgentIds, s as resolveAgentModelFallbacksOverride, t as hasConfiguredModelFallbacks, u as resolveDefaultAgentId, v as DEFAULT_HEARTBEAT_FILENAME, w as filterBootstrapFilesForSession, x as DEFAULT_TOOLS_FILENAME, y as DEFAULT_IDENTITY_FILENAME } from "./agent-scope-BbgPlhtw.js";
+import { C as isPlainObject, S as truncateUtf16Safe, _ as shortenHomeInString, a as ensureDir$3, b as sliceUtf16Safe, c as isRecord$5, d as normalizeE164, h as resolveUserPath, o as escapeRegExp, r as clampInt, t as CONFIG_DIR, v as shortenHomePath, y as sleep } from "./utils-CYk9EKoq.js";
+import { $ as resetConfigOverrides, $i as DEFAULT_CONTEXT_TOKENS, $n as ANTHROPIC_PROVIDER_BRAND_ID, $r as QWEN_API_ROUTE_ID, $t as resolveSubagentSpawnModelSelection, Ai as listProviderBrandManifests, An as markAuthProfileGood, Ar as MINIMAX_PORTAL_ROUTE_ID, At as isSafeExecutableValue, B as MODEL_APIS, Bi as OPENCODE_ZEN_MODEL_IDS, Bn as normalizeProviderId$2, Br as OPENAI_API_MODEL_IDS, Bt as buildModelAliasIndex, C as resolveIMessageAttachmentRoots, Ca as applyTestPluginDefaults, Ci as XIAOMI_ROUTE_ID, Cn as markAuthProfileFailure, Cr as LITELLM_PROVIDER_BRAND_ID, Ct as unwrapKnownDispatchWrapperInvocation, Da as resolveMemorySlotDecision, Di as getProviderBrandManifestForRoute, Dn as dedupeProfileIds, Dr as MINIMAX_API_ROUTE_ID, Dt as normalizeSafeBinProfileFixtures, Ea as resolveEffectiveEnableState, Ei as ZAI_ROUTE_ID, En as resolveApiKeyForProfile, Er as LMSTUDIO_ROUTE_ID, Et as SAFE_BIN_PROFILES, Fi as XIAOMI_MODEL_IDS, Fr as MOONSHOT_MODEL_IDS, G as isAvatarDataUrl, Gi as BASE_THINKING_LEVELS, Gn as safeStatSync, Gr as OPENCODE_ZEN_ROUTE_ID, Gt as normalizeModelRef$1, H as parseDurationMs, Hi as CLOUDFLARE_AI_GATEWAY_MODEL_IDS, Hn as loadPluginManifestRegistry, Hr as OPENAI_CODEX_ROUTE_ID, Ii as VERCEL_AI_GATEWAY_MODEL_IDS, In as withFileLock, Ir as MOONSHOT_PROVIDER_BRAND_ID, It as DEFAULT_SUBAGENT_MAX_SPAWN_DEPTH, J as isSupportedLocalAvatarExtension, Jn as normalizeSecretInput, Jr as OPENROUTER_ROUTE_ID, Jt as resolveConfiguredModelRef, K as isAvatarHttpUrl, Ki as formatThinkingLevels, Kn as resolveAuthProfileDisplayLabel, Kr as OPENROUTER_MODEL_IDS, Kt as normalizeProviderId$1, Li as VENICE_MODEL_IDS, Lr as MOONSHOT_ROUTE_ID, Mi as providerModelRecommendationRank, Mn as resolveAuthStorePathForDisplay, Mr as MISTRAL_MODEL_IDS, Ni as resolveProviderRouteModelCapability, Nn as resolveFasedAgentAgentDir, Nr as MISTRAL_PROVIDER_BRAND_ID, Oi as isOpenAISignInRuntimeModelSupported, On as listProfilesForProvider, Or as MINIMAX_CN_ROUTE_ID, Ot as resolveSafeBinProfiles, Pi as LITELLM_BASE_URL, Pr as MISTRAL_ROUTE_ID, Q as getConfigOverrides, Qi as supportsXHighThinking, Qn as ANTHROPIC_MODEL_IDS, Qr as QWEN_API_MODEL_IDS, Qt as resolveReasoningDefault, Ri as TOGETHER_MODEL_IDS, Rr as OLLAMA_PROVIDER_BRAND_ID, Rt as buildAllowedModelSet, S as mergeInboundPathRoots, Sa as parseBooleanValue$1, Si as XIAOMI_PROVIDER_BRAND_ID, Sn as isProfileInCooldown, Sr as KIMI_CODING_ROUTE_ID, St as isShellWrapperExecutable, T as normalizeScpRemoteHost, Ta as normalizePluginsConfig, Ti as ZAI_PROVIDER_BRAND_ID, Tn as resolveProfilesUnavailableReason, Tr as LMSTUDIO_PROVIDER_BRAND_ID, Tt as splitShellArgs, Ui as CLOUDFLARE_AI_GATEWAY_PROVIDER_BRAND_ID, Un as discoverFasedAgentPlugins, Ur as OPENAI_PROVIDER_BRAND_ID, Ut as isCliProvider, V as getBlockedNetworkModeReason, Vi as HUGGINGFACE_MODEL_IDS, Vn as clearPluginManifestRegistryCache, Vr as OPENAI_API_ROUTE_ID, Vt as findNormalizedProviderValue, W as AVATAR_MAX_BYTES, Wi as CLOUDFLARE_AI_GATEWAY_ROUTE_ID, Wn as isPathInside, Wr as OPENCODE_ZEN_PROVIDER_BRAND_ID, Wt as modelKey, Xi as resolveModelThinkingCapability, Xn as coerceSecretRef, Xr as QIANFAN_PROVIDER_BRAND_ID, Yi as normalizeThinkLevel, Yn as assertSecretInputResolved, Yr as QIANFAN_MODEL_IDS, Yt as resolveDefaultModelForAgent, Z as validateJsonSchemaValue, Zi as supportsThinkingLevel, Zn as splitTrailingAuthProfile, Zr as QIANFAN_ROUTE_ID, Zt as resolveModelRefFromString, _a as sanitizeHostExecEnv, _i as VOLCENGINE_PROVIDER_BRAND_ID, _n as normalizeModelCatalogProviderId, _r as GOOGLE_GEMINI_MODEL_IDS, _t as matchAllowlist, a as readConfigFileSnapshotForWrite, aa as getPackageManifestMetadata, ai as TOGETHER_PROVIDER_BRAND_ID, an as getApiKeyForModel, ar as BYTEPLUS_PROVIDER_BRAND_ID, at as unsetConfigValueAtPath, b as DEFAULT_IMESSAGE_ATTACHMENT_ROOTS, ba as resolveCliName, bi as XAI_PROVIDER_BRAND_ID, bn as resolveAuthProfileOrder, br as HUGGINGFACE_ROUTE_ID, bt as extractShellWrapperInlineCommand, c as validateConfigObjectWithPlugins, ca as formatErrorMessage, ci as VENICE_ROUTE_ID, cn as resolveApiKeyForProvider, cr as CHUTES_PROVIDER_BRAND_ID, ct as isTrustedSafeBinPath, da as extractArchive, di as VLLM_PROVIDER_BRAND_ID, dn as CURRENT_MODEL_PROVIDER_CATALOG, dr as COPILOT_PROXY_MODEL_IDS, dt as validateSafeBinArgv, ea as DEFAULT_MODEL, ei as QWEN_CODING_PLAN_MODEL_IDS, en as resolveThinkingDefault, er as ANTHROPIC_ROUTE_ID, et as setConfigOverride, fa as getShellPathFromLoginShell, fi as VLLM_ROUTE_ID, fn as cloneCurrentModelProvider, fr as COPILOT_PROXY_ROUTE_ID, ft as analyzeShellCommand, ga as isDangerousHostInheritedEnvVarName, gi as VOLCENGINE_PLAN_ROUTE_ID, gn as normalizeModelCatalogModelId, gr as GOOGLE_GEMINI_CLI_ROUTE_ID, gt as DEFAULT_SAFE_BINS, hi as VOLCENGINE_MODEL_IDS, hn as mergeModelCatalogRowsByAuthority, hr as GOOGLE_API_ROUTE_ID, ht as splitCommandChain, i as readConfigFileSnapshot, ia as resolvePluginInstallDir, ii as SYNTHETIC_ROUTE_ID, ir as BYTEPLUS_PLAN_ROUTE_ID, it as setConfigValueAtPath, ji as lookupProviderManifestModelCapability, jn as ensureAuthProfileStore, jr as MINIMAX_PROVIDER_BRAND_ID, ka as applyExclusiveSlotSelection, ki as isStandardProviderCatalogEntry, kn as listProvidersWithStoredCredentials, kr as MINIMAX_MODEL_IDS, kt as applyMergePatch, li as VERCEL_AI_GATEWAY_PROVIDER_BRAND_ID, ln as resolveEnvApiKey, lr as CHUTES_ROUTE_ID, lt as listWritableExplicitTrustedSafeBinDirs, ma as isDangerousHostEnvOverrideVarName, mi as VOLCENGINE_CODING_ROUTE_ID, mn as buildModelCatalogMergeKey, mr as CUSTOM_PROVIDER_ROUTE_ID, mt as isWindowsPlatform, n as loadConfig, na as VERSION, ni as QWEN_PROVIDER_BRAND_ID, nr as BYTEPLUS_CODING_ROUTE_ID, nt as getConfigValueAtPath, o as resolveConfigSnapshotHash, oi as TOGETHER_ROUTE_ID, on as getCustomProviderApiKey, or as BYTEPLUS_ROUTE_ID, ot as ensurePluginAllowlisted, pa as resolveShellEnvFallbackTimeoutMs, pi as VOLCENGINE_CODING_MODEL_IDS, pn as listCurrentModelCatalogRows, pr as CUSTOM_PROVIDER_BRAND_ID, pt as buildEnforcedShellCommand, q as isPathWithinRoot, qi as formatXHighModelHint, qn as isPrivateNetworkBaseUrl, qr as OPENROUTER_PROVIDER_BRAND_ID, r as parseConfigJson5, ra as installPluginFromNpmSpec, ri as SYNTHETIC_PROVIDER_BRAND_ID, rr as BYTEPLUS_MODEL_IDS, rt as parseConfigPath, s as writeConfigFile, sa as extractErrorCode, si as VENICE_PROVIDER_BRAND_ID, sn as requireApiKey, sr as CHUTES_MODEL_IDS, st as getTrustedSafeBinDirs, t as createConfigIO, ta as DEFAULT_PROVIDER, ti as QWEN_CODING_PLAN_ROUTE_ID, tn as normalizeGoogleModelId, tr as BYTEPLUS_CODING_MODEL_IDS, tt as unsetConfigOverride, ui as VERCEL_AI_GATEWAY_ROUTE_ID, un as resolveModelAuthMode, ur as COPILOT_PROVIDER_BRAND_ID, ut as normalizeTrustedSafeBinDirs, va as resolveOwnerDisplaySetting, vi as VOLCENGINE_ROUTE_ID, vn as normalizeProviderCatalogRows, vr as GOOGLE_PROVIDER_BRAND_ID, vt as resolveAllowlistCandidatePath, w as resolveIMessageRemoteAttachmentRoots, wi as ZAI_MODEL_IDS, wn as markAuthProfileUsed, wr as LITELLM_ROUTE_ID, wt as unwrapKnownShellMultiplexerInvocation, x as isInboundPathAllowed, xa as isTruthyEnvValue, xi as XAI_ROUTE_ID, xn as getSoonestCooldownExpiry, xr as KIMI_CODING_MODEL_IDS, xt as isDispatchWrapperExecutable, ya as formatCliCommand, yi as XAI_MODEL_IDS, yr as HUGGINGFACE_PROVIDER_BRAND_ID, yt as resolveCommandResolutionFromArgv, zi as SYNTHETIC_MODEL_IDS, zn as findNormalizedProviderValue$1, zr as OLLAMA_ROUTE_ID, zt as buildConfiguredAllowlistKeys } from "./config-Dbxj_jUP.js";
+import { A as openBoundaryFile, C as ensureAgentWorkspace, D as resolveFasedAgentPackageRoot, E as resolveDefaultAgentWorkspaceDir, F as resolvePathViaExistingAncestorSync, G as normalizeAtHashSlug, H as resolveAgentModelFallbackValues, J as normalizeStringEntriesLower, K as normalizeHyphenSlug, O as resolveFasedAgentPackageRootSync, S as DEFAULT_USER_FILENAME, T as loadWorkspaceBootstrapFiles, U as resolveAgentModelPrimaryValue, W as toAgentModelListLike, _ as DEFAULT_BOOTSTRAP_FILENAME, a as resolveAgentDir, b as DEFAULT_SOUL_FILENAME, c as resolveAgentSkillsFilter, d as resolveEffectiveModelFallbacks, f as resolveRunModelFallbacksOverride, g as DEFAULT_AGENT_WORKSPACE_DIR, h as DEFAULT_AGENTS_FILENAME, i as resolveAgentConfig, j as openBoundaryFileSync, l as resolveAgentWorkspaceDir, m as resolveSessionAgentIds, n as listAgentEntries, p as resolveSessionAgentId, q as normalizeStringEntries, r as listAgentIds, s as resolveAgentModelFallbacksOverride, t as hasConfiguredModelFallbacks, u as resolveDefaultAgentId, v as DEFAULT_HEARTBEAT_FILENAME, w as filterBootstrapFilesForSession, x as DEFAULT_TOOLS_FILENAME, y as DEFAULT_IDENTITY_FILENAME } from "./agent-scope-CCjfjKoO.js";
 import { t as normalizeChatType } from "./chat-type-C0osVllE.js";
 import { n as resolveAccountEntry } from "./account-helpers-Bdfws46K.js";
 import { C as resolveThreadParentSessionKey, S as parseAgentSessionKey, _ as getSubagentDepth, b as isCronSessionKey, c as normalizeMainKey, d as sanitizeAgentId, f as DEFAULT_ACCOUNT_ID, g as deriveSessionChatType, h as isBlockedObjectKey, l as resolveAgentIdFromSessionKey, m as normalizeOptionalAccountId, o as classifySessionKeyShape, p as normalizeAccountId$2, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, u as resolveThreadSessionKeys, v as isAcpSessionKey, x as isSubagentSessionKey } from "./session-key-HSJ2KQTc.js";
@@ -13,7 +13,7 @@ import { a as resolveDiscordAccount, r as listEnabledDiscordAccounts, t as creat
 import { i as resolveSlackAccount } from "./accounts-CuqIKU8X.js";
 import { i as logWarn, n as logError, r as logInfo, t as logDebug } from "./logger-BbFvCoKk.js";
 import { n as runExec, r as spawnWithFallback, t as runCommandWithTimeout } from "./exec-DQ8j4Fm3.js";
-import { _ as webAuthExists, c as logWebSelfId, i as resolveWhatsAppAccount, l as logoutWeb, p as readWebSelfId, s as getWebAuthAgeMs, t as hasAnyWhatsAppAuth } from "./accounts-DzWlKv1U.js";
+import { _ as webAuthExists, c as logWebSelfId, i as resolveWhatsAppAccount, l as logoutWeb, p as readWebSelfId, s as getWebAuthAgeMs, t as hasAnyWhatsAppAuth } from "./accounts-CmMwe9Dt.js";
 import { S as resolveChannelEntryMatchWithFallback, b as normalizeChannelSlug, y as buildChannelKeyCandidates } from "./allow-list-DyAxs4yw.js";
 import { n as redactSensitiveText, r as redactToolDetail, t as getDefaultRedactPatterns } from "./redact-Bm8vu_ju.js";
 import { a as saveJsonFile, i as loadJsonFile, r as resolveCopilotApiToken } from "./github-copilot-token-CUK__1s1.js";
@@ -21,19 +21,19 @@ import { t as runTasksWithConcurrency } from "./run-with-concurrency-BsDJWzgM.js
 import { n as retryAsync } from "./retry-DstNBhDW.js";
 import { a as resolveSessionTranscriptPath, c as resolveSessionTranscriptsDirForAgent, i as resolveSessionFilePathOptions, l as resolveStorePath, n as resolveDefaultSessionStorePath, r as resolveSessionFilePath } from "./paths-CTZ2RS_E.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-BJQWUdmU.js";
-import { l as resolveChannelDefaultAccountId } from "./pairing-message-ClqhfCUk.js";
+import { l as resolveChannelDefaultAccountId } from "./pairing-message-r-VQfhFB.js";
 import { n as fetchWithTimeout, t as bindAbortRelay } from "./fetch-timeout-l_6RdoMw.js";
 import { t as normalizeRequestInitHeadersForFetch } from "./fetch-headers-my7hgV2G.js";
 import { a as isBlockedHostnameOrIp, t as SsrFBlockedError } from "./ssrf-fG4UHKBw.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-CeG6u6ld.js";
 import { n as redactSensitiveUrlLikeString, t as redactSensitiveUrl } from "./redact-sensitive-url-g-ukZjwA.js";
-import { a as formatIMessageChatTarget, c as normalizeIMessageHandle, i as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, l as parseIMessageTarget, o as formatIMessageTargetForLog, r as createIMessageRpcClient, s as isAllowedIMessageSender, t as sendMessageIMessage } from "./send-DPJIIYAs.js";
-import { A as resolveDefaultGroupPolicy, D as formatDocsLink, M as warnMissingProviderGroupPolicyFallbackOnce, b as setOnboardingChannelEnabled, c as parseOnboardingEntriesAllowingWildcard, f as promptParsedAllowFromForScopedChannel, h as resolveAccountIdForConfigure, j as resolveOpenProviderRuntimeGroupPolicy, k as resolveAllowlistProviderRuntimeGroupPolicy, l as patchChannelConfigForAccount, v as setChannelDmPolicyWithAllowFrom } from "./helpers-CluGKuIV.js";
-import { A as formatLocationText, F as isSenderIdAllowed, I as mergeDmAllowFromSources, L as resolveGroupAllowFromSources, N as isVoiceCompatibleAudio, P as firstDefined$1, a as resolveCronStorePath, d as buildTelegramGroupPeerId, i as loadCronStore, j as toLocationContext, o as saveCronStore } from "./wsl-B_ojyEtC.js";
-import { a as upsertChannelPairingRequest, c as getPairingAdapter, i as removeChannelAllowFromStoreEntry, l as listPairingChannels, n as readChannelAllowFromStore, o as readJsonFileWithFallback, s as writeJsonFileAtomically, t as addChannelAllowFromStoreEntry } from "./pairing-store-B01mCSct.js";
-import { a as chunkText, c as resolveChunkMode, d as isSafeFenceBreak, f as parseFenceSpans, i as chunkMarkdownTextWithMode, l as resolveTextChunkLimit, n as chunkByParagraph, o as chunkTextWithMode, p as chunkTextByBreakResolver, r as chunkMarkdownText, t as chunkByNewline, u as findFenceSpanAt } from "./chunk-B8EZkwiT.js";
+import { a as formatIMessageChatTarget, c as normalizeIMessageHandle, i as DEFAULT_IMESSAGE_PROBE_TIMEOUT_MS, l as parseIMessageTarget, o as formatIMessageTargetForLog, r as createIMessageRpcClient, s as isAllowedIMessageSender, t as sendMessageIMessage } from "./send-BHokB4TR.js";
+import { A as resolveDefaultGroupPolicy, D as formatDocsLink, M as warnMissingProviderGroupPolicyFallbackOnce, b as setOnboardingChannelEnabled, c as parseOnboardingEntriesAllowingWildcard, f as promptParsedAllowFromForScopedChannel, h as resolveAccountIdForConfigure, j as resolveOpenProviderRuntimeGroupPolicy, k as resolveAllowlistProviderRuntimeGroupPolicy, l as patchChannelConfigForAccount, v as setChannelDmPolicyWithAllowFrom } from "./helpers-CDo2XBSr.js";
+import { A as formatLocationText, F as isSenderIdAllowed, I as mergeDmAllowFromSources, L as resolveGroupAllowFromSources, N as isVoiceCompatibleAudio, P as firstDefined$1, a as resolveCronStorePath, d as buildTelegramGroupPeerId, i as loadCronStore, j as toLocationContext, o as saveCronStore } from "./wsl-BtMDzMv5.js";
+import { a as upsertChannelPairingRequest, c as getPairingAdapter, i as removeChannelAllowFromStoreEntry, l as listPairingChannels, n as readChannelAllowFromStore, o as readJsonFileWithFallback, s as writeJsonFileAtomically, t as addChannelAllowFromStoreEntry } from "./pairing-store-uPnLfGgB.js";
+import { a as chunkText, c as resolveChunkMode, d as isSafeFenceBreak, f as parseFenceSpans, i as chunkMarkdownTextWithMode, l as resolveTextChunkLimit, n as chunkByParagraph, o as chunkTextWithMode, p as chunkTextByBreakResolver, r as chunkMarkdownText, t as chunkByNewline, u as findFenceSpanAt } from "./chunk-CF8nvZNj.js";
 import { c as normalizeDeviceAuthScopes, i as clearDevicePairing, s as normalizeDeviceAuthRole } from "./tailscale-status-DwpNdO3Z.js";
-import { c as resolveHumanDelayConfig, i as resolveResponsePrefixTemplate, n as createReplyPrefixOptions, o as resolveAgentIdentity, s as resolveEffectiveMessagesConfig } from "./reply-prefix-ClpxvL_w.js";
+import { c as resolveHumanDelayConfig, i as resolveResponsePrefixTemplate, n as createReplyPrefixOptions, o as resolveAgentIdentity, s as resolveEffectiveMessagesConfig } from "./reply-prefix-CeVw7Mn2.js";
 import { i as isSilentReplyText, n as SILENT_REPLY_TOKEN, r as isSilentReplyPrefixText, t as HEARTBEAT_TOKEN } from "./tokens-BbnqfVuu.js";
 import { n as safeEqualSecret, o as createAsyncLock, s as readJsonFile$1 } from "./pairing-token-Cs3BRKc0.js";
 import { n as generateSecureUuid, t as generateSecureToken } from "./secure-random-BIkG-k4s.js";
@@ -41,37 +41,37 @@ import { a as logMessageProcessed, i as logLaneEnqueue, m as isDiagnosticsEnable
 import { r as getDiagnosticSessionState } from "./diagnostic-session-state-DqgfGYqZ.js";
 import { t as redactIdentifier } from "./redact-identifier-Lt7t3l7S.js";
 import { i as resolveTelegramTargetChatType, r as parseTelegramTarget } from "./targets-CoMJ1ry1.js";
-import { t as importOptionalRuntimeDependency } from "./optional-runtime-dependency-DKmk9PZa.js";
-import { c as detectMime, d as imageMimeFromFormat, f as isAudioFileName, g as MAX_IMAGE_BYTES, i as getImageMetadata, l as extensionForMime, m as kindFromMime, n as buildImageResizeSideGrid, s as resizeToJpeg, t as IMAGE_REDUCE_QUALITY_STEPS, u as getFileExtension, v as mediaKindFromMime } from "./image-ops-CUaLtIFj.js";
-import { t as resolveMemorySearchConfig } from "./memory-search-VFll-AIb.js";
-import { i as executeWithApiKeyRotation, n as parseGeminiAuth, r as collectProviderApiKeysForExecution } from "./manager-oHAvZCT3.js";
+import { t as importOptionalRuntimeDependency } from "./optional-runtime-dependency-BlTVkcAg.js";
+import { c as detectMime, d as imageMimeFromFormat, f as isAudioFileName, g as MAX_IMAGE_BYTES, i as getImageMetadata, l as extensionForMime, m as kindFromMime, n as buildImageResizeSideGrid, s as resizeToJpeg, t as IMAGE_REDUCE_QUALITY_STEPS, u as getFileExtension, v as mediaKindFromMime } from "./image-ops-DbeBxbn4.js";
+import { t as resolveMemorySearchConfig } from "./memory-search-DTjIMw8J.js";
+import { i as executeWithApiKeyRotation, n as parseGeminiAuth, r as collectProviderApiKeysForExecution } from "./manager-CbiFFLKS.js";
 import { c as normalizeExtraMemoryPaths, s as listMemoryFiles } from "./internal-CG_nHo-2.js";
 import { i as resolveQmdScopeDenial } from "./qmd-scope-CdX34VCV.js";
-import { _ as estimateBase64DecodedBytes, a as jsonResult, d as readStringParam, f as sanitizeContentBlocksImages, g as canonicalizeBase64, h as resolveImageSanitizationLimits, i as imageResultFromFile, l as readStringArrayParam, m as sanitizeToolResultImages, n as createActionGate, p as sanitizeImageBlocks, r as imageResult, s as readNumberParam, u as readStringOrNumberParam } from "./common-CbfckC19.js";
-import { S as isCommandFlagEnabled, _ as normalizeElevatedLevel, a as listChatCommands, b as normalizeVerboseLevel, g as shouldHandleTextCommands, i as isCommandEnabled, l as maybeResolveTextAlias, m as resolveNativeCommandName, o as listChatCommandsForConfig, u as normalizeCommandBody, v as normalizeReasoningLevel, w as isRestartEnabled, x as resolveResponseUsageMode, y as normalizeUsageDisplay } from "./commands-registry-BfEa4tFA.js";
-import { A as fetchJson$1, B as DEFAULT_BROWSER_EVALUATE_ENABLED, C as normalizeCdpWsUrl, D as assertBrowserNavigationResultAllowed, E as assertBrowserNavigationAllowed, F as stopChromeExtensionRelayServer, G as isLoopbackHost, H as DEFAULT_FASED_BROWSER_ENABLED, I as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, J as resolveClientIp, K as isSecureWebSocketUrl, L as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, O as withBrowserNavigationPolicy, P as ensureChromeExtensionRelayServer, R as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as InvalidBrowserNavigationUrlError, U as DEFAULT_FASED_BROWSER_PROFILE_NAME, V as DEFAULT_FASED_BROWSER_COLOR, W as isLoopbackAddress, X as rawDataToString, Y as resolveForwardedClientIp, _ as stopFasedAgentChrome, a as DEFAULT_TRACE_DIR, b as captureScreenshot, d as normalizeBrowserFormField, g as resolveFasedAgentUserDataDir, h as launchFasedAgentChrome, i as DEFAULT_DOWNLOAD_DIR, j as fetchOk, k as appendCdpPath, l as resolveWritablePathWithinRoot, m as isChromeReachable, o as DEFAULT_UPLOAD_DIR, p as isChromeCdpReady, q as isTrustedProxyAddress, r as loadReadability, s as resolveExistingPathsWithinRoot, t as loadLinkedom, v as resolveBrowserExecutableForPlatform, w as snapshotAria, x as createTargetViaCdp, y as resolveLsofCommandSync, z as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME } from "./runtime-dependency-CIw9t7-k.js";
-import { t as PATH_ALIAS_POLICIES } from "./path-alias-guards-BJZD5JMJ.js";
-import { a as writeFileWithinRoot, n as openFileWithinRoot, r as readFileWithinRoot, t as SafeOpenError } from "./fs-safe-xBqok6yR.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-Mkx7k92Y.js";
-import { a as fetchRemoteMedia, d as getDefaultMediaLocalRoots, i as MediaFetchError, n as loadWebMedia, o as readResponseWithLimit, t as getDefaultLocalRoots, u as getAgentScopedMediaLocalRoots } from "./media-CA8sTmVE.js";
-import { a as resolveSignalRpcContext, c as streamSignalEvents, l as markdownToSignalTextChunks, n as sendReadReceiptSignal, o as signalCheck, r as sendTypingSignal, s as signalRpcRequest, t as sendMessageSignal } from "./send-J4JWKP62.js";
-import { a as saveMediaBuffer, i as getMediaDir, n as ensureMediaDir } from "./outbound-attachment-DdVkqUzE.js";
+import { _ as estimateBase64DecodedBytes, a as jsonResult, d as readStringParam, f as sanitizeContentBlocksImages, g as canonicalizeBase64, h as resolveImageSanitizationLimits, i as imageResultFromFile, l as readStringArrayParam, m as sanitizeToolResultImages, n as createActionGate, p as sanitizeImageBlocks, r as imageResult, s as readNumberParam, u as readStringOrNumberParam } from "./common-Cky4hpqr.js";
+import { S as isCommandFlagEnabled, _ as normalizeElevatedLevel, a as listChatCommands, b as normalizeVerboseLevel, g as shouldHandleTextCommands, i as isCommandEnabled, l as maybeResolveTextAlias, m as resolveNativeCommandName, o as listChatCommandsForConfig, u as normalizeCommandBody, v as normalizeReasoningLevel, w as isRestartEnabled, x as resolveResponseUsageMode, y as normalizeUsageDisplay } from "./commands-registry-CK4KmMG0.js";
+import { A as fetchJson$1, B as DEFAULT_BROWSER_EVALUATE_ENABLED, C as normalizeCdpWsUrl, D as assertBrowserNavigationResultAllowed, E as assertBrowserNavigationAllowed, F as stopChromeExtensionRelayServer, G as isLoopbackHost, H as DEFAULT_FASED_BROWSER_ENABLED, I as DEFAULT_AI_SNAPSHOT_EFFICIENT_DEPTH, J as resolveClientIp, K as isSecureWebSocketUrl, L as DEFAULT_AI_SNAPSHOT_EFFICIENT_MAX_CHARS, O as withBrowserNavigationPolicy, P as ensureChromeExtensionRelayServer, R as DEFAULT_AI_SNAPSHOT_MAX_CHARS, T as InvalidBrowserNavigationUrlError, U as DEFAULT_FASED_BROWSER_PROFILE_NAME, V as DEFAULT_FASED_BROWSER_COLOR, W as isLoopbackAddress, X as rawDataToString, Y as resolveForwardedClientIp, _ as stopFasedAgentChrome, a as DEFAULT_TRACE_DIR, b as captureScreenshot, d as normalizeBrowserFormField, g as resolveFasedAgentUserDataDir, h as launchFasedAgentChrome, i as DEFAULT_DOWNLOAD_DIR, j as fetchOk, k as appendCdpPath, l as resolveWritablePathWithinRoot, m as isChromeReachable, o as DEFAULT_UPLOAD_DIR, p as isChromeCdpReady, q as isTrustedProxyAddress, r as loadReadability, s as resolveExistingPathsWithinRoot, t as loadLinkedom, v as resolveBrowserExecutableForPlatform, w as snapshotAria, x as createTargetViaCdp, y as resolveLsofCommandSync, z as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME } from "./runtime-dependency-DlqVSsSs.js";
+import { t as PATH_ALIAS_POLICIES } from "./path-alias-guards-DjgDArrp.js";
+import { a as writeFileWithinRoot, n as openFileWithinRoot, r as readFileWithinRoot, t as SafeOpenError } from "./fs-safe-g4g7GT02.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-Bskt9r8i.js";
+import { a as fetchRemoteMedia, d as getDefaultMediaLocalRoots, i as MediaFetchError, n as loadWebMedia, o as readResponseWithLimit, t as getDefaultLocalRoots, u as getAgentScopedMediaLocalRoots } from "./media-B3aAg5rh.js";
+import { a as resolveSignalRpcContext, c as streamSignalEvents, l as markdownToSignalTextChunks, n as sendReadReceiptSignal, o as signalCheck, r as sendTypingSignal, s as signalRpcRequest, t as sendMessageSignal } from "./send-D3DQOg2a.js";
+import { a as saveMediaBuffer, i as getMediaDir, n as ensureMediaDir } from "./outbound-attachment-2RckWqrk.js";
 import { t as resolveFetch } from "./fetch-BtmoPIlf.js";
-import { B as isSessionBindingError, C as resolveThreadBindingMaxAgeMs$1, F as resolveThreadBindingIntroText, G as resolveSessionStorePathForAcp, I as resolveThreadBindingThreadName, K as upsertAcpSessionMeta, L as SYSTEM_MARK, N as formatThreadBindingDurationLabel, R as prefixSystemMessage, S as resolveThreadBindingMaxAgeExpiresAt, U as listAcpSessionEntries, W as readAcpSessionEntry, b as resolveThreadBindingIdleTimeoutMs$1, c as getThreadBindingManager, x as resolveThreadBindingInactivityExpiresAt, z as getSessionBindingService } from "./thread-bindings.state-BgYWFjNF.js";
-import { c as getSkillsSnapshotVersion, d as resolveSkillsPromptForRun, f as syncSkillsToWorkspace, h as sanitizeEnvVars, i as resolveSkillCommandInvocation, l as buildWorkspaceSkillSnapshot, m as applySkillEnvOverridesFromSnapshot, n as listSkillCommandsForAgents, o as getRemoteSkillEligibility, p as applySkillEnvOverrides, r as listSkillCommandsForWorkspace, s as ensureSkillsWatcher, t as listReservedChatSlashCommandNames, u as loadWorkspaceSkillEntries } from "./skill-commands-B7wx9ax8.js";
-import { a as resolveSandboxedMediaSource, i as resolveSandboxPath, n as assertSandboxPath, r as resolveSandboxInputPath, t as assertMediaNotDataUrl } from "./sandbox-paths-w64tYl0v.js";
+import { B as isSessionBindingError, C as resolveThreadBindingMaxAgeMs$1, F as resolveThreadBindingIntroText, G as resolveSessionStorePathForAcp, I as resolveThreadBindingThreadName, K as upsertAcpSessionMeta, L as SYSTEM_MARK, N as formatThreadBindingDurationLabel, R as prefixSystemMessage, S as resolveThreadBindingMaxAgeExpiresAt, U as listAcpSessionEntries, W as readAcpSessionEntry, b as resolveThreadBindingIdleTimeoutMs$1, c as getThreadBindingManager, x as resolveThreadBindingInactivityExpiresAt, z as getSessionBindingService } from "./thread-bindings.state-D7xG1GHu.js";
+import { c as getSkillsSnapshotVersion, d as resolveSkillsPromptForRun, f as syncSkillsToWorkspace, h as sanitizeEnvVars, i as resolveSkillCommandInvocation, l as buildWorkspaceSkillSnapshot, m as applySkillEnvOverridesFromSnapshot, n as listSkillCommandsForAgents, o as getRemoteSkillEligibility, p as applySkillEnvOverrides, r as listSkillCommandsForWorkspace, s as ensureSkillsWatcher, t as listReservedChatSlashCommandNames, u as loadWorkspaceSkillEntries } from "./skill-commands-CmdoKLh_.js";
+import { a as resolveSandboxedMediaSource, i as resolveSandboxPath, n as assertSandboxPath, r as resolveSandboxInputPath, t as assertMediaNotDataUrl } from "./sandbox-paths-Dx2lUqCu.js";
 import { n as resolveUserTimeFormat, r as resolveUserTimezone, t as formatUserTime } from "./date-time-uUevHscU.js";
-import { t as parseDiscordTarget } from "./targets-QfP164Dh.js";
+import { t as parseDiscordTarget } from "./targets-BeGUCGWK.js";
 import { n as missingTargetError, r as unknownTargetError, t as ambiguousTargetError } from "./target-errors-Ckufe179.js";
-import { i as discoverModels, r as discoverAuthStorage } from "./pi-model-discovery-Buz0JC1Y.js";
+import { i as discoverModels, r as discoverAuthStorage } from "./pi-model-discovery-BpEilAym.js";
 import { n as normalizePollInput } from "./polls-DKQXVfJp.js";
-import { n as resolveAgentRoute, t as buildAgentSessionKey } from "./resolve-route-CkNIKKEW.js";
+import { n as resolveAgentRoute, t as buildAgentSessionKey } from "./resolve-route-B8fOfihG.js";
 import { r as normalizeInboundTextNewlines, t as finalizeInboundContext } from "./inbound-context-DrAcXE0y.js";
 import { n as recordCommandPoll, r as resetCommandPollCount } from "./command-poll-backoff-yJU83wEq.js";
-import { t as convertMarkdownTables } from "./tables-CjlQJV4r.js";
+import { t as convertMarkdownTables } from "./tables-EX4Hy-a-.js";
 import { n as recordChannelActivity, t as getChannelActivity } from "./channel-activity-DBDMQ3yI.js";
 import { t as withTimeout$3 } from "./with-timeout-ckWB8rTo.js";
-import { t as getActiveWebListener } from "./active-listener-x4MLhYUw.js";
+import { t as getActiveWebListener } from "./active-listener-DVbpcisf.js";
 import { n as asString$4, r as collectIssuesForEnabledAccounts } from "./shared-CBgp_GBw.js";
 import { createRequire } from "node:module";
 import * as path$1 from "node:path";
@@ -1810,7 +1810,7 @@ function createHookRunner(registry, options = {}) {
 * Singleton hook runner that's initialized when plugins are loaded
 * and can be called from anywhere in the codebase.
 */
-const log$21 = createSubsystemLogger("plugins");
+const log$22 = createSubsystemLogger("plugins");
 let globalHookRunner = null;
 let globalRegistry = null;
 /**
@@ -1821,14 +1821,14 @@ function initializeGlobalHookRunner(registry) {
 	globalRegistry = registry;
 	globalHookRunner = createHookRunner(registry, {
 		logger: {
-			debug: (msg) => log$21.debug(msg),
-			warn: (msg) => log$21.warn(msg),
-			error: (msg) => log$21.error(msg)
+			debug: (msg) => log$22.debug(msg),
+			warn: (msg) => log$22.warn(msg),
+			error: (msg) => log$22.error(msg)
 		},
 		catchErrors: true
 	});
 	const hookCount = registry.hooks.length;
-	if (hookCount > 0) log$21.info(`hook runner initialized with ${hookCount} registered hooks`);
+	if (hookCount > 0) log$22.info(`hook runner initialized with ${hookCount} registered hooks`);
 }
 /**
 * Get the global hook runner.
@@ -7414,7 +7414,7 @@ async function discoverGitHubCopilotModels(params) {
 //#region src/agents/openai-codex-app-server.ts
 const OPENAI_CODEX_APP_SERVER_VERSION = "0.144.1";
 const DEFAULT_REQUEST_TIMEOUT_MS = 12e4;
-function isRecord$3(value) {
+function isRecord$4(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function decodeJwtPayload$1(token) {
@@ -7422,14 +7422,14 @@ function decodeJwtPayload$1(token) {
 	if (!encoded) return null;
 	try {
 		const parsed = JSON.parse(Buffer.from(encoded, "base64url").toString("utf8"));
-		return isRecord$3(parsed) ? parsed : null;
+		return isRecord$4(parsed) ? parsed : null;
 	} catch {
 		return null;
 	}
 }
 function extractOpenAICodexAccountId(token) {
 	const auth = decodeJwtPayload$1(token)?.["https://api.openai.com/auth"];
-	if (!isRecord$3(auth)) return null;
+	if (!isRecord$4(auth)) return null;
 	const accountId = auth.chatgpt_account_id;
 	return typeof accountId === "string" && accountId.trim() ? accountId.trim() : null;
 }
@@ -7442,21 +7442,39 @@ function executableName() {
 function codexExecutableCandidates() {
 	const configured = process.env.FASED_CODEX_BIN?.trim();
 	const componentRoot = resolvePluginInstallDir("openai-runtime");
+	const packageRoot = resolveFasedAgentPackageRootSync({
+		moduleUrl: import.meta.url,
+		argv1: process.argv[1],
+		cwd: process.cwd()
+	});
 	const candidates = [
 		configured,
 		path.join(componentRoot, "node_modules", ".bin", executableName()),
 		path.join(componentRoot, "node_modules", "@openai", "codex", "bin", executableName()),
-		"codex"
+		packageRoot ? path.join(packageRoot, "extensions", "runtime-openai", "node_modules", ".bin", executableName()) : void 0
 	].filter((value) => Boolean(value));
 	return [...new Set(candidates)];
 }
 function resolveOpenAICodexExecutable() {
-	for (const candidate of codexExecutableCandidates()) {
-		if (candidate === "codex") return candidate;
-		try {
-			if (fs.statSync(candidate).isFile()) return candidate;
-		} catch {}
-	}
+	const explicitlyConfigured = process.env.FASED_CODEX_BIN?.trim();
+	for (const candidate of codexExecutableCandidates()) try {
+		if (!fs.statSync(candidate).isFile()) continue;
+		if (explicitlyConfigured && candidate === explicitlyConfigured) return candidate;
+		const resolved = fs.realpathSync(candidate);
+		let current = path.dirname(resolved);
+		for (let depth = 0; depth < 6; depth += 1) {
+			try {
+				const parsed = JSON.parse(fs.readFileSync(path.join(current, "package.json"), "utf8"));
+				if (parsed.name === "@openai/codex") {
+					if (parsed.version === OPENAI_CODEX_APP_SERVER_VERSION) return candidate;
+					break;
+				}
+			} catch {}
+			const parent = path.dirname(current);
+			if (parent === current) break;
+			current = parent;
+		}
+	} catch {}
 	return null;
 }
 function managedCodexHome() {
@@ -7588,10 +7606,10 @@ async function initializeClient(client, token) {
 	});
 }
 function parseAppServerModels$1(value) {
-	if (!isRecord$3(value) || !Array.isArray(value.data)) return [];
+	if (!isRecord$4(value) || !Array.isArray(value.data)) return [];
 	return value.data.flatMap((entry) => {
-		if (!isRecord$3(entry) || typeof entry.id !== "string" || !entry.id.trim()) return [];
-		const efforts = Array.isArray(entry.supportedReasoningEfforts) ? entry.supportedReasoningEfforts.flatMap((item) => isRecord$3(item) && typeof item.reasoningEffort === "string" ? [item.reasoningEffort] : []) : [];
+		if (!isRecord$4(entry) || typeof entry.id !== "string" || !entry.id.trim()) return [];
+		const efforts = Array.isArray(entry.supportedReasoningEfforts) ? entry.supportedReasoningEfforts.flatMap((item) => isRecord$4(item) && typeof item.reasoningEffort === "string" ? [item.reasoningEffort] : []) : [];
 		const modalities = Array.isArray(entry.inputModalities) ? entry.inputModalities.filter((item) => item === "text" || item === "image") : [];
 		return [{
 			id: entry.id.trim(),
@@ -7605,7 +7623,7 @@ function parseAppServerModels$1(value) {
 	});
 }
 async function listOpenAICodexAppServerModels(params) {
-	const executable = params.executable ?? resolveOpenAICodexExecutable();
+	const executable = params.executable ?? (params.resolveExecutable ? await params.resolveExecutable() : resolveOpenAICodexExecutable());
 	if (!executable) throw new Error("OpenAI sign-in runtime is not installed. Run `fased components install openai-runtime`.");
 	const client = new CodexAppServerClient(executable);
 	try {
@@ -7618,7 +7636,7 @@ async function listOpenAICodexAppServerModels(params) {
 function contentText(content) {
 	if (typeof content === "string") return content;
 	if (!Array.isArray(content)) return "";
-	return content.flatMap((part) => isRecord$3(part) && part.type === "text" && typeof part.text === "string" ? [part.text] : []).join("\n");
+	return content.flatMap((part) => isRecord$4(part) && part.type === "text" && typeof part.text === "string" ? [part.text] : []).join("\n");
 }
 function renderConversationContext(context) {
 	const messages = context.messages;
@@ -7657,8 +7675,8 @@ function readUsageNumber(value) {
 	return typeof value === "number" && Number.isFinite(value) && value >= 0 ? value : 0;
 }
 function parseThreadTokenUsage(value) {
-	if (!isRecord$3(value)) return null;
-	const last = isRecord$3(value.last) ? value.last : null;
+	if (!isRecord$4(value)) return null;
+	const last = isRecord$4(value.last) ? value.last : null;
 	if (!last) return null;
 	const input = readUsageNumber(last.inputTokens);
 	const output = readUsageNumber(last.outputTokens);
@@ -7696,7 +7714,7 @@ function createOpenAICodexAppServerStreamFn(params) {
 			try {
 				const token = options?.apiKey?.trim() || (await params?.resolveToken?.())?.trim();
 				if (!token) throw new Error("OpenAI ChatGPT sign-in is required");
-				const executable = resolveOpenAICodexExecutable();
+				const executable = params?.resolveExecutable ? await params.resolveExecutable() : resolveOpenAICodexExecutable();
 				if (!executable) throw new Error("OpenAI sign-in runtime is not installed. Run `fased components install openai-runtime`.");
 				client = new CodexAppServerClient(executable);
 				await initializeClient(client, token);
@@ -7713,7 +7731,7 @@ function createOpenAICodexAppServerStreamFn(params) {
 						features: { shell_tool: false }
 					}
 				});
-				const thread = isRecord$3(started.thread) ? started.thread : null;
+				const thread = isRecord$4(started.thread) ? started.thread : null;
 				const threadId = typeof thread?.id === "string" ? thread.id : "";
 				if (!threadId) throw new Error("OpenAI sign-in runtime did not create a thread");
 				let text = "";
@@ -7772,11 +7790,11 @@ function createOpenAICodexAppServerStreamFn(params) {
 						return;
 					}
 					if (message.method !== "turn/completed" || settled) return;
-					const turn = isRecord$3(message.params?.turn) ? message.params.turn : null;
+					const turn = isRecord$4(message.params?.turn) ? message.params.turn : null;
 					settled = true;
 					if (turn?.status === "completed") settle();
 					else {
-						const error = isRecord$3(turn?.error) ? turn.error : null;
+						const error = isRecord$4(turn?.error) ? turn.error : null;
 						const status = typeof turn?.status === "string" ? turn.status : "unknown";
 						reject(new Error(typeof error?.message === "string" ? error.message : `OpenAI sign-in turn ended with status ${status}`));
 					}
@@ -7833,466 +7851,92 @@ function createOpenAICodexAppServerStreamFn(params) {
 }
 
 //#endregion
-//#region src/providers/openai-codex-model-discovery.ts
-const OPENAI_CODEX_MODELS_URL = "https://chatgpt.com/backend-api/codex/models";
-const OPENAI_CODEX_ROUTE = "openai-codex";
-const OPENAI_CODEX_CATALOG_CLIENT_VERSION = "0.144.0";
-const DISCOVERY_TIMEOUT_MS = 8e3;
-function decodeJwtPayload(token) {
-	const encoded = token.split(".")[1];
-	if (!encoded) return null;
-	try {
-		return JSON.parse(Buffer.from(encoded, "base64url").toString("utf8"));
-	} catch {
-		return null;
-	}
-}
-function extractChatGptAccountId(token) {
-	const auth = decodeJwtPayload(token)?.["https://api.openai.com/auth"];
-	if (!auth || typeof auth !== "object" || Array.isArray(auth)) return null;
-	const accountId = auth.chatgpt_account_id;
-	return typeof accountId === "string" && accountId.trim() ? accountId.trim() : null;
-}
-function positiveInteger(value) {
-	return typeof value === "number" && Number.isInteger(value) && value > 0 ? value : void 0;
-}
-function inputModalities(value) {
-	if (!Array.isArray(value)) return ["text"];
-	const values = value.filter((entry) => entry === "text" || entry === "image");
-	return values.length > 0 ? values : ["text"];
-}
-function modelCapabilities(model) {
-	const thinkingLevels = (Array.isArray(model.supported_reasoning_levels) ? model.supported_reasoning_levels : []).flatMap((entry) => {
-		if (!entry || typeof entry !== "object" || Array.isArray(entry)) return [];
-		const effort = entry.effort;
-		const normalized = typeof effort === "string" ? normalizeThinkLevel(effort) : void 0;
-		return normalized ? [normalized] : [];
-	});
-	const defaultThinkingLevel = typeof model.default_reasoning_level === "string" ? normalizeThinkLevel(model.default_reasoning_level) : void 0;
+//#region src/plugins/installs.ts
+function buildNpmResolutionInstallFields(resolution) {
 	return {
-		tools: true,
-		json: true,
-		streaming: true,
-		...thinkingLevels.length > 0 ? { thinkingLevels } : {},
-		...defaultThinkingLevel ? { defaultThinkingLevel } : {},
-		thinkingMode: "openai-reasoning-effort",
-		reasoningBudgetSupported: thinkingLevels.length > 0
+		resolvedName: resolution?.name,
+		resolvedVersion: resolution?.version,
+		resolvedSpec: resolution?.resolvedSpec,
+		integrity: resolution?.integrity,
+		shasum: resolution?.shasum,
+		resolvedAt: resolution?.resolvedAt
 	};
 }
-function parseModels(value) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return [];
-	const models = value.models;
-	if (!Array.isArray(models)) return [];
-	return models.flatMap((entry) => {
-		if (!entry || typeof entry !== "object" || Array.isArray(entry)) return [];
-		const model = entry;
-		const id = typeof model.slug === "string" ? model.slug.trim() : "";
-		if (!id || model.visibility !== "list") return [];
-		const capabilities = modelCapabilities(model);
-		return [{
-			id,
-			name: typeof model.display_name === "string" && model.display_name.trim() ? model.display_name.trim().replace(/-(Sol|Terra|Luna|Mini)$/i, " $1") : id,
-			input: inputModalities(model.input_modalities),
-			reasoning: true,
-			tools: capabilities.tools,
-			json: capabilities.json,
-			thinkingLevels: capabilities.thinkingLevels,
-			defaultThinkingLevel: capabilities.defaultThinkingLevel,
-			thinkingMode: capabilities.thinkingMode,
-			reasoningBudgetSupported: capabilities.reasoningBudgetSupported,
-			contextWindow: positiveInteger(model.context_window),
-			responsesLite: model.use_responses_lite === true,
-			source: "openai-codex-account"
-		}];
-	});
-}
-function parseAppServerModels(models) {
-	return models.map((model) => {
-		const thinkingLevels = model.supportedReasoningEfforts.flatMap((effort) => {
-			const normalized = normalizeThinkLevel(effort);
-			return normalized ? [normalized] : [];
-		});
-		const defaultThinkingLevel = normalizeThinkLevel(model.defaultReasoningEffort);
-		const responsesLite = /^gpt-5\.6-(?:sol|terra|luna)$/i.test(model.id);
-		return {
-			id: model.id,
-			name: model.displayName.replace(/-(Sol|Terra|Luna|Mini)$/i, " $1"),
-			input: model.inputModalities,
-			reasoning: thinkingLevels.length > 0,
-			tools: !responsesLite,
-			json: !responsesLite,
-			thinkingLevels,
-			...defaultThinkingLevel ? { defaultThinkingLevel } : {},
-			thinkingMode: "openai-reasoning-effort",
-			reasoningBudgetSupported: false,
-			responsesLite,
-			source: "openai-codex-app-server"
-		};
-	});
-}
-async function discoverOpenAICodexModels(params) {
-	const profileId = listProfilesForProvider(params.store, OPENAI_CODEX_ROUTE)[0];
-	if (!profileId) return [];
-	const resolved = await resolveApiKeyForProfile({
-		cfg: params.cfg,
-		store: params.store,
-		profileId,
-		agentDir: params.agentDir
-	});
-	if (!resolved?.apiKey) return [];
-	const accountId = extractChatGptAccountId(resolved.apiKey);
-	if (!accountId) throw new Error("OpenAI sign-in token does not contain a ChatGPT account ID");
-	if (!params.fetchImpl) return parseAppServerModels(await (params.listAppServerModels ?? listOpenAICodexAppServerModels)({ token: resolved.apiKey }));
-	const url = new URL(OPENAI_CODEX_MODELS_URL);
-	url.searchParams.set("client_version", OPENAI_CODEX_CATALOG_CLIENT_VERSION);
-	const response = await (params.fetchImpl ?? fetch)(url, {
-		headers: {
-			authorization: `Bearer ${resolved.apiKey}`,
-			"chatgpt-account-id": accountId,
-			originator: "fased",
-			accept: "application/json"
-		},
-		signal: AbortSignal.timeout(DISCOVERY_TIMEOUT_MS)
-	});
-	if (!response.ok) throw new Error(`OpenAI account model discovery failed (${response.status})`);
-	return parseModels(await response.json());
-}
-
-//#endregion
-//#region src/providers/runtime-model-catalog.ts
-const DISCOVERY_TTL_MS = 5 * 6e4;
-let cache$1 = null;
-const SPECIALIZED_DISCOVERY_ROUTES = new Set(["openai-codex", "github-copilot"]);
-function authModeForProfileType(type) {
-	return type === "api_key" ? "api-key" : type;
-}
-function methodMatchesAuthMode(method, authMode) {
-	return (method.kind === "api-key" || method.kind === "manual" ? "api-key" : method.kind === "token" ? "token" : "oauth") === authMode;
-}
-function methodRouteIds(method) {
-	return [
-		method.route,
-		method.statusRoute,
-		method.configProviderId
-	].map((value) => value?.trim().toLowerCase()).filter((value) => Boolean(value));
-}
-function credentialRoutesForProvider(store, route) {
-	const normalizedRoute = route.trim().toLowerCase();
-	const manifest = getProviderBrandManifestForRoute(normalizedRoute);
-	const routes = [];
-	const seen = /* @__PURE__ */ new Set();
-	for (const profile of Object.values(store.profiles ?? {})) {
-		const profileProvider = profile.provider.trim().toLowerCase();
-		if (!profileProvider) continue;
-		const profileManifest = getProviderBrandManifestForRoute(profileProvider);
-		if (profileProvider !== normalizedRoute && profileManifest?.id !== manifest?.id) continue;
-		const authMode = authModeForProfileType(profile.type);
-		const method = manifest?.methods.find((candidate) => methodMatchesAuthMode(candidate, authMode) && (methodRouteIds(candidate).includes(profileProvider) || methodRouteIds(candidate).includes(normalizedRoute)));
-		const id = method?.id ?? `${normalizedRoute}:${authMode}`;
-		const key = `${id}:${authMode}`;
-		if (seen.has(key)) continue;
-		seen.add(key);
-		routes.push({
-			id,
-			label: method?.label ?? manifest?.label ?? normalizedRoute,
-			authMode
-		});
-	}
-	return routes;
-}
-function discoveryKey(params) {
-	const endpoints = [...params.routes].map((route) => route.trim().toLowerCase()).toSorted().map((route) => {
-		const provider = params.cfg.models?.providers?.[route];
-		return [
-			route,
-			provider?.baseUrl ?? "",
-			provider?.api ?? ""
-		];
-	});
-	const credentialIdentity = createHash("sha256").update(JSON.stringify(params.store.profiles ?? {})).digest("hex");
-	return JSON.stringify({
-		endpoints,
-		credentialIdentity
-	});
-}
-async function loadSnapshot(params) {
-	const key = discoveryKey(params);
-	const now = Date.now();
-	if (cache$1?.key === key && cache$1.expiresAt > now) return await cache$1.value;
-	const value = fetchProviderRefreshSnapshotForRoutes({
-		routes: params.routes,
-		env: buildProviderRefreshEnvFromCredentials({
-			env: process.env,
-			authStores: [params.store],
-			modelProviders: params.cfg.models?.providers
-		})
-	});
-	cache$1 = {
-		key,
-		expiresAt: now + DISCOVERY_TTL_MS,
-		value
+function recordPluginInstall(cfg, update) {
+	const { pluginId, ...record } = update;
+	const installs = {
+		...cfg.plugins?.installs,
+		[pluginId]: {
+			...cfg.plugins?.installs?.[pluginId],
+			...record,
+			installedAt: record.installedAt ?? (/* @__PURE__ */ new Date()).toISOString()
+		}
 	};
-	try {
-		return await value;
-	} catch (error) {
-		if (cache$1?.value === value) cache$1 = null;
-		throw error;
-	}
-}
-async function discoverInteractiveRoutes(params) {
-	const discovered = /* @__PURE__ */ new Map();
-	if (params.routes.has("openai-codex")) discovered.set("openai-codex", await discoverOpenAICodexModels({
-		cfg: params.cfg,
-		store: params.store,
-		agentDir: params.agentDir
-	}));
-	if (params.routes.has("github-copilot")) discovered.set("github-copilot", await discoverGitHubCopilotModels({
-		cfg: params.cfg,
-		store: params.store,
-		agentDir: params.agentDir
-	}));
-	return discovered;
-}
-function snapshotCapabilities(model) {
 	return {
-		...model.tools !== void 0 ? { tools: model.tools } : {},
-		...model.json !== void 0 ? { json: model.json } : {},
-		...model.audio !== void 0 ? { audio: model.audio } : {},
-		...model.video !== void 0 ? { video: model.video } : {},
-		...model.speech !== void 0 ? { speech: model.speech } : {},
-		...model.thinkingLevels?.length ? { thinkingLevels: model.thinkingLevels } : {},
-		...model.defaultThinkingLevel ? { defaultThinkingLevel: model.defaultThinkingLevel } : {},
-		...model.thinkingMode ? { thinkingMode: model.thinkingMode } : {},
-		...model.reasoningBudgetSupported !== void 0 ? { reasoningBudgetSupported: model.reasoningBudgetSupported } : {}
-	};
-}
-function snapshotHasCapabilityMetadata(model) {
-	return model.input !== void 0 || model.reasoning !== void 0 || model.tools !== void 0 || model.json !== void 0 || model.audio !== void 0 || model.video !== void 0 || model.speech !== void 0 || model.thinkingLevels !== void 0 || model.defaultThinkingLevel !== void 0 || model.thinkingMode !== void 0 || model.reasoningBudgetSupported !== void 0 || model.contextWindow !== void 0 || model.maxTokens !== void 0;
-}
-function snapshotRoutes(snapshot) {
-	const routes = /* @__PURE__ */ new Map();
-	for (const provider of Object.values(snapshot.providers ?? {})) for (const [route, values] of Object.entries(provider.routes ?? {})) routes.set(route.trim().toLowerCase(), values.flatMap((value) => typeof value === "string" ? [{ id: value }] : value?.id?.trim() ? [value] : []));
-	return routes;
-}
-function mergeDiscoveredRoute(params) {
-	const baseByKey = new Map(params.catalog.map((model) => [buildModelCatalogMergeKey(model.provider, model.id), model]));
-	const providerConfig = params.cfg.models?.providers?.[params.route];
-	const credentialRoutes = credentialRoutesForProvider(params.store, params.route);
-	return params.discovered.map((model) => {
-		const base = baseByKey.get(buildModelCatalogMergeKey(params.route, model.id));
-		const capabilities = snapshotCapabilities(model);
-		const entry = {
-			id: model.id,
-			name: model.name ?? base?.name ?? model.id,
-			provider: params.route,
-			...model.contextWindow ?? base?.contextWindow ? { contextWindow: model.contextWindow ?? base?.contextWindow } : {},
-			...model.maxTokens ?? base?.maxTokens ? { maxTokens: model.maxTokens ?? base?.maxTokens } : {},
-			...model.reasoning ?? base?.reasoning ? { reasoning: model.reasoning ?? base?.reasoning } : {},
-			input: model.input ?? base?.input ?? ["text"],
-			...base?.baseUrl ?? providerConfig?.baseUrl ? { baseUrl: base?.baseUrl ?? providerConfig?.baseUrl } : {},
-			...base?.api ?? providerConfig?.api ? { api: base?.api ?? providerConfig?.api } : {},
-			...model.price ?? base?.cost ? { cost: model.price ?? base?.cost } : {},
-			...Object.keys(capabilities).length > 0 ? { capabilities } : {},
-			...model.responsesLite !== void 0 ? { compat: {
-				...base?.compat,
-				responsesLite: model.responsesLite
-			} } : base?.compat ? { compat: base.compat } : {},
-			catalogSource: "provider-api"
-		};
-		return {
-			...entry,
-			metadata: {
-				...base?.metadata,
-				...deriveModelMetadata({
-					model: entry,
-					cfg: params.cfg,
-					providerConfig,
-					...credentialRoutes.length > 0 ? { credentialRoutes } : {},
-					...snapshotHasCapabilityMetadata(model) ? {
-						capabilitySource: "provider-api",
-						capabilityRetrievedAt: params.retrievedAt
-					} : {}
-				}),
-				retrievedAt: params.retrievedAt
+		...cfg,
+		plugins: {
+			...cfg.plugins,
+			installs: {
+				...installs,
+				[pluginId]: installs[pluginId]
 			}
-		};
-	});
-}
-async function applyRuntimeProviderModelDiscovery(params) {
-	const requestedRoutes = new Set([...params.routes].map((route) => route.trim().toLowerCase()).filter(Boolean));
-	if (requestedRoutes.size === 0) return [];
-	const specializedRoutes = new Set([...requestedRoutes].filter((route) => SPECIALIZED_DISCOVERY_ROUTES.has(route)));
-	const providerApiRoutes = [...requestedRoutes].filter((route) => !specializedRoutes.has(route));
-	const interactiveRoutes = await discoverInteractiveRoutes({
-		routes: requestedRoutes,
-		cfg: params.cfg,
-		store: params.store,
-		agentDir: params.agentDir
-	}).catch(() => /* @__PURE__ */ new Map());
-	let discoveredRoutes = new Map(interactiveRoutes);
-	if (providerApiRoutes.length > 0) try {
-		const snapshot = await loadSnapshot({
-			...params,
-			routes: providerApiRoutes
-		});
-		discoveredRoutes = new Map([...discoveredRoutes, ...snapshotRoutes(snapshot)]);
-	} catch {}
-	const retrievedAt = (/* @__PURE__ */ new Date()).toISOString();
-	const authoritativeRoutes = new Set([...discoveredRoutes.keys()].filter((route) => requestedRoutes.has(route)));
-	const replacedRoutes = new Set(providerApiRoutes);
-	for (const route of specializedRoutes) replacedRoutes.add(route);
-	const retained = params.catalog.filter((model) => !replacedRoutes.has(model.provider.trim().toLowerCase()));
-	const discovered = [...authoritativeRoutes].flatMap((route) => mergeDiscoveredRoute({
-		route,
-		discovered: discoveredRoutes.get(route) ?? [],
-		catalog: params.catalog,
-		cfg: params.cfg,
-		store: params.store,
-		retrievedAt
-	}));
-	return [...retained, ...discovered].toSorted((left, right) => left.provider.localeCompare(right.provider) || (left.metadata?.recommendationRank ?? Number.MAX_SAFE_INTEGER) - (right.metadata?.recommendationRank ?? Number.MAX_SAFE_INTEGER) || left.name.localeCompare(right.name));
-}
-function filterCatalogToAuthoritativeAvailability(catalog, store) {
-	const specializedProviders = store ? new Set(Object.values(store.profiles ?? {}).map((profile) => profile.provider.trim().toLowerCase()).filter((provider) => SPECIALIZED_DISCOVERY_ROUTES.has(provider))) : /* @__PURE__ */ new Set();
-	const byProvider = /* @__PURE__ */ new Map();
-	for (const model of catalog) {
-		const provider = model.provider.trim().toLowerCase();
-		byProvider.set(provider, [...byProvider.get(provider) ?? [], model]);
-	}
-	return [...byProvider.entries()].flatMap(([provider, models]) => {
-		if (models.some((model) => model.catalogSource === "provider-api")) return models.filter((model) => model.catalogSource === "provider-api");
-		if (specializedProviders.has(provider)) return models.filter((model) => model.catalogSource === "runtime" || model.catalogSource === "provider-api");
-		return models;
-	});
+		}
+	};
 }
 
 //#endregion
-//#region src/agents/model-catalog-access.ts
-function providerHasConfiguredCredential(cfg, provider) {
-	return Boolean(resolveEnvApiKey(provider)?.apiKey || getCustomProviderApiKey(cfg, provider));
-}
-function normalizeProviderSet(providers) {
-	return new Set([...providers ?? []].map((provider) => normalizeProviderId$1(provider)).filter(Boolean));
-}
-function buildUsableModelProviderSet(params) {
-	const usable = normalizeProviderSet(params.storedProviders ?? (params.store ? listProvidersWithStoredCredentials(params.store) : []));
-	for (const entry of params.catalog) {
-		const provider = normalizeProviderId$1(entry.provider);
-		if (!provider || usable.has(provider)) continue;
-		if (providerHasConfiguredCredential(params.cfg, provider)) usable.add(provider);
-	}
-	return usable;
-}
-function filterModelCatalogByProviders(catalog, providers) {
-	const normalizedProviders = normalizeProviderSet(providers);
-	if (normalizedProviders.size === 0) return [];
-	return catalog.filter((entry) => normalizedProviders.has(normalizeProviderId$1(entry.provider)));
-}
-function buildCredentialScopedAllowedModelSet(params) {
-	const usableProviders = buildUsableModelProviderSet({
-		cfg: params.cfg,
-		catalog: params.catalog,
-		storedProviders: params.storedProviders,
-		store: params.store
-	});
-	const usableCatalog = filterModelCatalogByProviders(params.catalog, usableProviders);
-	const allowed = buildAllowedModelSet({
-		cfg: params.cfg,
-		catalog: usableCatalog,
-		defaultProvider: params.defaultProvider,
-		defaultModel: params.defaultModel,
-		additionalAllowedProviders: usableProviders
-	});
-	const allowedCatalog = filterModelCatalogByProviders(allowed.allowedCatalog, usableProviders);
+//#region src/plugins/toggle-config.ts
+function setPluginEnabledInConfig(config, pluginId, enabled) {
+	const builtInChannelId = normalizeChatChannelId(pluginId);
+	const resolvedId = builtInChannelId ?? pluginId;
+	const next = {
+		...config,
+		plugins: {
+			...config.plugins,
+			entries: {
+				...config.plugins?.entries,
+				[resolvedId]: {
+					...config.plugins?.entries?.[resolvedId],
+					enabled
+				}
+			}
+		}
+	};
+	if (!builtInChannelId) return next;
+	const existing = config.channels?.[builtInChannelId];
+	const existingRecord = existing && typeof existing === "object" && !Array.isArray(existing) ? existing : {};
 	return {
-		usableProviders,
-		usableCatalog,
-		allowedCatalog,
-		allowedKeys: new Set(allowedCatalog.map((entry) => modelKey(entry.provider, entry.id))),
-		allowAny: allowed.allowAny
+		...next,
+		channels: {
+			...config.channels,
+			[builtInChannelId]: {
+				...existingRecord,
+				enabled
+			}
+		}
 	};
 }
 
 //#endregion
-//#region src/agents/authenticated-model-catalog.ts
-async function resolveAuthenticatedModelCatalog(params) {
-	const initialScope = buildCredentialScopedAllowedModelSet({
-		cfg: params.cfg,
-		catalog: params.catalog,
-		defaultProvider: params.defaultProvider,
-		store: params.store
-	});
-	const discoveredCatalog = filterCatalogToAuthoritativeAvailability(await applyRuntimeProviderModelDiscovery({
-		cfg: params.cfg,
-		store: params.store,
-		routes: initialScope.usableProviders,
-		catalog: initialScope.usableCatalog,
-		agentDir: params.agentDir
-	}), params.store);
-	return buildCredentialScopedAllowedModelSet({
-		cfg: params.cfg,
-		catalog: discoveredCatalog,
-		defaultProvider: params.defaultProvider,
-		storedProviders: initialScope.usableProviders
-	});
-}
-
-//#endregion
-//#region src/agents/model-alias-lines.ts
-function buildModelAliasLines(cfg) {
-	const models = cfg?.agents?.defaults?.models ?? {};
-	const entries = [];
-	for (const [keyRaw, entryRaw] of Object.entries(models)) {
-		const model = String(keyRaw ?? "").trim();
-		if (!model) continue;
-		const alias = String(entryRaw?.alias ?? "").trim();
-		if (!alias) continue;
-		entries.push({
-			alias,
-			model
-		});
-	}
-	return entries.toSorted((a, b) => a.alias.localeCompare(b.alias)).map((entry) => `- ${entry.alias}: ${entry.model}`);
-}
-
-//#endregion
-//#region src/plugins/provider-discovery.ts
-function isUnsafeProviderKey(value) {
-	return value === "__proto__" || value === "prototype" || value === "constructor";
-}
-function normalizeProviderResultKey(value) {
-	if (!value) return;
-	const normalized = normalizeProviderId$2(value);
-	if (!normalized || isUnsafeProviderKey(normalized)) return;
-	return normalized;
-}
-function normalizeSingleProviderResultKey(provider) {
-	return [provider.id, ...provider.aliases ?? []].map((candidate) => normalizeProviderResultKey(candidate)).find((candidate) => Boolean(candidate));
-}
-function normalizePluginDiscoveryResult(params) {
-	const result = params.result;
-	if (!result) return {};
-	if ("provider" in result) {
-		const key = normalizeSingleProviderResultKey(params.provider);
-		return key ? { [key]: result.provider } : {};
-	}
-	const normalized = {};
-	for (const [key, value] of Object.entries(result.providers)) {
-		const normalizedKey = normalizeProviderResultKey(key);
-		if (!normalizedKey || !value) continue;
-		normalized[normalizedKey] = value;
-	}
-	return normalized;
-}
-function runProviderStaticCatalog(params) {
-	return params.provider.staticCatalog?.run({
-		config: params.config,
-		agentDir: params.agentDir,
-		workspaceDir: params.workspaceDir,
-		env: params.env,
-		resolveProviderApiKey: params.resolveProviderApiKey,
-		resolveProviderAuth: params.resolveProviderAuth
-	});
+//#region src/plugins/enable.ts
+function enablePluginInConfig(cfg, pluginId) {
+	const resolvedId = normalizeChatChannelId(pluginId) ?? pluginId;
+	if (cfg.plugins?.enabled === false) return {
+		config: cfg,
+		enabled: false,
+		reason: "plugins disabled"
+	};
+	if (cfg.plugins?.deny?.includes(pluginId) || cfg.plugins?.deny?.includes(resolvedId)) return {
+		config: cfg,
+		enabled: false,
+		reason: "blocked by denylist"
+	};
+	let next = setPluginEnabledInConfig(cfg, resolvedId, true);
+	next = ensurePluginAllowlisted(next, resolvedId);
+	return {
+		config: next,
+		enabled: true
+	};
 }
 
 //#endregion
@@ -8494,7 +8138,7 @@ function resolveMemoryBackendConfig(params) {
 
 //#endregion
 //#region src/memory/search-manager.ts
-const log$20 = createSubsystemLogger("memory");
+const log$21 = createSubsystemLogger("memory");
 const QMD_MANAGER_CACHE = /* @__PURE__ */ new Map();
 async function getMemorySearchManager(params) {
 	const resolved = resolveMemoryBackendConfig(params);
@@ -8506,7 +8150,7 @@ async function getMemorySearchManager(params) {
 			if (cached) return { manager: cached };
 		}
 		try {
-			const { QmdMemoryManager } = await import("./qmd-manager-CFFeM4Fl.js");
+			const { QmdMemoryManager } = await import("./qmd-manager-DSyx77KY.js");
 			const primary = await QmdMemoryManager.create({
 				cfg: params.cfg,
 				agentId: params.agentId,
@@ -8518,7 +8162,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-oHAvZCT3.js").then((n) => n.t);
+						const { MemoryIndexManager } = await import("./manager-CbiFFLKS.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -8527,23 +8171,23 @@ async function getMemorySearchManager(params) {
 			}
 		} catch (err) {
 			const message = err instanceof Error ? err.message : String(err);
-			log$20.warn(`qmd memory unavailable; falling back to builtin: ${message}`);
+			log$21.warn(`qmd memory unavailable; falling back to builtin: ${message}`);
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-oHAvZCT3.js").then((n) => n.t);
+		const { MemoryIndexManager } = await import("./manager-CbiFFLKS.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		const message = err instanceof Error ? err.message : String(err);
 		if (isNodeSqliteUnavailable(message)) {
-			const { FilesystemMemorySearchManager } = await import("./filesystem-manager-BGGGrkiN.js");
+			const { FilesystemMemorySearchManager } = await import("./filesystem-manager-ZoHU8oA7.js");
 			const manager = await FilesystemMemorySearchManager.create({
 				cfg: params.cfg,
 				agentId: params.agentId,
 				unavailableReason: message
 			});
 			if (manager) {
-				log$20.warn(`builtin sqlite memory unavailable; using filesystem fallback: ${message}`);
+				log$21.warn(`builtin sqlite memory unavailable; using filesystem fallback: ${message}`);
 				return { manager };
 			}
 		}
@@ -8570,7 +8214,7 @@ var FallbackMemoryManager = class {
 		} catch (err) {
 			this.primaryFailed = true;
 			this.lastError = err instanceof Error ? err.message : String(err);
-			log$20.warn(`qmd memory failed; switching to builtin index: ${this.lastError}`);
+			log$21.warn(`qmd memory failed; switching to builtin index: ${this.lastError}`);
 			await this.deps.primary.close?.().catch(() => {});
 			this.evictCacheEntry();
 		}
@@ -8650,12 +8294,12 @@ var FallbackMemoryManager = class {
 		try {
 			fallback = await this.deps.fallbackFactory();
 			if (!fallback) {
-				log$20.warn("memory fallback requested but builtin index is unavailable");
+				log$21.warn("memory fallback requested but builtin index is unavailable");
 				return null;
 			}
 		} catch (err) {
 			const message = err instanceof Error ? err.message : String(err);
-			log$20.warn(`memory fallback unavailable: ${message}`);
+			log$21.warn(`memory fallback unavailable: ${message}`);
 			return null;
 		}
 		this.fallback = fallback;
@@ -10054,6 +9698,18 @@ const ModelChoiceSchema = Type.Object({
 		Type.Literal("provider-index"),
 		Type.Literal("manifest")
 	])),
+	available: Type.Optional(Type.Boolean()),
+	runnable: Type.Optional(Type.Boolean()),
+	recommended: Type.Optional(Type.Boolean()),
+	assignedRoles: Type.Optional(Type.Array(Type.Union([
+		Type.Literal("primary"),
+		Type.Literal("fallback"),
+		Type.Literal("cheapCheck"),
+		Type.Literal("strong"),
+		Type.Literal("escalation"),
+		Type.Literal("coding"),
+		Type.Literal("summarizer")
+	]))),
 	metadata: Type.Optional(Type.Object({
 		ref: NonEmptyString,
 		provider: NonEmptyString,
@@ -10285,7 +9941,37 @@ const ModelsListParamsSchema = Type.Object({
 	sessionKey: Type.Optional(NonEmptyString),
 	includeMetadata: Type.Optional(Type.Boolean())
 }, { additionalProperties: false });
-const ModelsListResultSchema = Type.Object({ models: Type.Array(ModelChoiceSchema) }, { additionalProperties: false });
+const ModelsListResultSchema = Type.Object({
+	models: Type.Array(ModelChoiceSchema),
+	generatedAt: Type.Optional(NonEmptyString),
+	agentId: Type.Optional(NonEmptyString),
+	providers: Type.Optional(Type.Array(Type.Object({
+		id: NonEmptyString,
+		label: NonEmptyString,
+		routes: Type.Array(NonEmptyString),
+		credentialRoutes: Type.Array(Type.Object({
+			id: NonEmptyString,
+			label: NonEmptyString,
+			authMode: NonEmptyString
+		}, { additionalProperties: false })),
+		available: Type.Integer({ minimum: 0 }),
+		recommended: Type.Integer({ minimum: 0 }),
+		assigned: Type.Integer({ minimum: 0 })
+	}, { additionalProperties: false }))),
+	assignments: Type.Optional(Type.Array(Type.Object({
+		role: Type.Union([
+			Type.Literal("primary"),
+			Type.Literal("fallback"),
+			Type.Literal("cheapCheck"),
+			Type.Literal("strong"),
+			Type.Literal("escalation"),
+			Type.Literal("coding"),
+			Type.Literal("summarizer")
+		]),
+		ref: NonEmptyString,
+		available: Type.Boolean()
+	}, { additionalProperties: false })))
+}, { additionalProperties: false });
 const ModelsCatalogStatusParamsSchema = Type.Object({}, { additionalProperties: false });
 const ModelsCatalogStatusProviderSchema = Type.Object({
 	provider: NonEmptyString,
@@ -25598,7 +25284,7 @@ function formatOutboundPayloadLog(payload) {
 //#endregion
 //#region src/infra/outbound/deliver.ts
 var deliver_exports = /* @__PURE__ */ __exportAll({ deliverOutboundPayloads: () => deliverOutboundPayloads });
-const log$19 = createSubsystemLogger("outbound/deliver");
+const log$20 = createSubsystemLogger("outbound/deliver");
 async function createChannelHandler(params) {
 	const outbound = await loadChannelOutboundAdapter(params.channel);
 	const handler = createPluginHandler({
@@ -25814,7 +25500,7 @@ async function deliverOutboundPayloadsCore(params) {
 	});
 	const hookRunner = getGlobalHookRunner();
 	const sessionKeyForInternalHooks = params.mirror?.sessionKey ?? params.session?.key;
-	if (hookRunner?.hasHooks("message_sent") && params.session?.agentId && !sessionKeyForInternalHooks) log$19.warn("deliverOutboundPayloads: session.agentId present without session key; internal message:sent hook will be skipped", {
+	if (hookRunner?.hasHooks("message_sent") && params.session?.agentId && !sessionKeyForInternalHooks) log$20.warn("deliverOutboundPayloads: session.agentId present without session key; internal message:sent hook will be skipped", {
 		channel,
 		to,
 		agentId: params.session.agentId
@@ -26341,27 +26027,27 @@ function createOutboundSendDepsFromCliSource(deps) {
 function createDefaultDeps() {
 	return {
 		sendMessageWhatsApp: async (...args) => {
-			const { sendMessageWhatsApp } = await import("./web-D0yENDve.js");
+			const { sendMessageWhatsApp } = await import("./web-BFolfZ3i.js");
 			return await sendMessageWhatsApp(...args);
 		},
 		sendMessageTelegram: async (...args) => {
-			const { sendMessageTelegram } = await import("./send-Dqes9tdU.js").then((n) => n.c);
+			const { sendMessageTelegram } = await import("./send-hSu1HWms.js").then((n) => n.c);
 			return await sendMessageTelegram(...args);
 		},
 		sendMessageDiscord: async (...args) => {
-			const { sendMessageDiscord } = await import("./send-BQUtCJFW.js").then((n) => n.t);
+			const { sendMessageDiscord } = await import("./send-BCJ4hi3t.js").then((n) => n.t);
 			return await sendMessageDiscord(...args);
 		},
 		sendMessageSlack: async (...args) => {
-			const { sendMessageSlack } = await import("./send-2VcOMTN5.js").then((n) => n.n);
+			const { sendMessageSlack } = await import("./send-CPK_HlYW.js").then((n) => n.n);
 			return await sendMessageSlack(...args);
 		},
 		sendMessageSignal: async (...args) => {
-			const { sendMessageSignal } = await import("./send-J4JWKP62.js").then((n) => n.i);
+			const { sendMessageSignal } = await import("./send-D3DQOg2a.js").then((n) => n.i);
 			return await sendMessageSignal(...args);
 		},
 		sendMessageIMessage: async (...args) => {
-			const { sendMessageIMessage } = await import("./send-DPJIIYAs.js").then((n) => n.n);
+			const { sendMessageIMessage } = await import("./send-BHokB4TR.js").then((n) => n.n);
 			return await sendMessageIMessage(...args);
 		}
 	};
@@ -28113,305 +27799,867 @@ async function resolveSessionAuthProfileOverride(params) {
 }
 
 //#endregion
-//#region src/agents/failover-error.ts
-const TIMEOUT_HINT_RE = /timeout|timed out|deadline exceeded|context deadline exceeded|stop reason:\s*abort|reason:\s*abort|unhandled stop reason:\s*abort/i;
-const ABORT_TIMEOUT_RE = /request was aborted|request aborted/i;
-var FailoverError = class extends Error {
-	constructor(message, params) {
-		super(message, { cause: params.cause });
-		this.name = "FailoverError";
-		this.reason = params.reason;
-		this.provider = params.provider;
-		this.model = params.model;
-		this.profileId = params.profileId;
-		this.status = params.status;
-		this.code = params.code;
-	}
-};
-function isFailoverError(err) {
-	return err instanceof FailoverError;
+//#region src/agents/model-catalog-access.ts
+function providerHasConfiguredCredential(cfg, provider) {
+	return Boolean(resolveEnvApiKey(provider)?.apiKey || getCustomProviderApiKey(cfg, provider));
 }
-function resolveFailoverStatus(reason) {
-	switch (reason) {
-		case "billing": return 402;
-		case "rate_limit": return 429;
-		case "auth": return 401;
-		case "auth_permanent": return 403;
-		case "timeout": return 408;
-		case "format": return 400;
-		case "model_not_found": return 404;
-		default: return;
-	}
+function normalizeProviderSet(providers) {
+	return new Set([...providers ?? []].map((provider) => normalizeProviderId$1(provider)).filter(Boolean));
 }
-function getStatusCode(err) {
-	if (!err || typeof err !== "object") return;
-	const candidate = err.status ?? err.statusCode;
-	if (typeof candidate === "number") return candidate;
-	if (typeof candidate === "string" && /^\d+$/.test(candidate)) return Number(candidate);
+function buildUsableModelProviderSet(params) {
+	const usable = normalizeProviderSet(params.storedProviders ?? (params.store ? listProvidersWithStoredCredentials(params.store) : []));
+	for (const entry of params.catalog) {
+		const provider = normalizeProviderId$1(entry.provider);
+		if (!provider || usable.has(provider)) continue;
+		if (providerHasConfiguredCredential(params.cfg, provider)) usable.add(provider);
+	}
+	return usable;
 }
-function getErrorName(err) {
-	if (!err || typeof err !== "object") return "";
-	return "name" in err ? String(err.name) : "";
+function filterModelCatalogByProviders(catalog, providers) {
+	const normalizedProviders = normalizeProviderSet(providers);
+	if (normalizedProviders.size === 0) return [];
+	return catalog.filter((entry) => normalizedProviders.has(normalizeProviderId$1(entry.provider)));
 }
-function getErrorCode(err) {
-	if (!err || typeof err !== "object") return;
-	const candidate = err.code;
-	if (typeof candidate !== "string") return;
-	const trimmed = candidate.trim();
-	return trimmed ? trimmed : void 0;
+function buildCredentialScopedAllowedModelSet(params) {
+	const usableProviders = buildUsableModelProviderSet({
+		cfg: params.cfg,
+		catalog: params.catalog,
+		storedProviders: params.storedProviders,
+		store: params.store
+	});
+	const usableCatalog = filterModelCatalogByProviders(params.catalog, usableProviders);
+	const allowed = buildAllowedModelSet({
+		cfg: params.cfg,
+		catalog: usableCatalog,
+		defaultProvider: params.defaultProvider,
+		defaultModel: params.defaultModel,
+		additionalAllowedProviders: usableProviders
+	});
+	const allowedCatalog = filterModelCatalogByProviders(allowed.allowedCatalog, usableProviders);
+	return {
+		usableProviders,
+		usableCatalog,
+		allowedCatalog,
+		allowedKeys: new Set(allowedCatalog.map((entry) => modelKey(entry.provider, entry.id))),
+		allowAny: allowed.allowAny
+	};
 }
-function getErrorMessage(err) {
-	if (err instanceof Error) return err.message;
-	if (typeof err === "string") return err;
-	if (typeof err === "number" || typeof err === "boolean" || typeof err === "bigint") return String(err);
-	if (typeof err === "symbol") return err.description ?? "";
-	if (err && typeof err === "object") {
-		const message = err.message;
-		if (typeof message === "string") return message;
-	}
-	return "";
+
+//#endregion
+//#region src/plugins/provider-discovery.ts
+function isUnsafeProviderKey(value) {
+	return value === "__proto__" || value === "prototype" || value === "constructor";
 }
-function hasTimeoutHint(err) {
-	if (!err) return false;
-	if (getErrorName(err) === "TimeoutError") return true;
-	const message = getErrorMessage(err);
-	return Boolean(message && TIMEOUT_HINT_RE.test(message));
+function normalizeProviderResultKey(value) {
+	if (!value) return;
+	const normalized = normalizeProviderId$2(value);
+	if (!normalized || isUnsafeProviderKey(normalized)) return;
+	return normalized;
 }
-function isTimeoutError(err) {
-	if (hasTimeoutHint(err)) return true;
-	if (!err || typeof err !== "object") return false;
-	if (getErrorName(err) !== "AbortError") return false;
-	const message = getErrorMessage(err);
-	if (message && ABORT_TIMEOUT_RE.test(message)) return true;
-	const cause = "cause" in err ? err.cause : void 0;
-	const reason = "reason" in err ? err.reason : void 0;
-	return hasTimeoutHint(cause) || hasTimeoutHint(reason);
+function normalizeSingleProviderResultKey(provider) {
+	return [provider.id, ...provider.aliases ?? []].map((candidate) => normalizeProviderResultKey(candidate)).find((candidate) => Boolean(candidate));
 }
-function resolveFailoverReasonFromError(err) {
-	if (isFailoverError(err)) return err.reason;
-	const status = getStatusCode(err);
-	if (status === 402) return "billing";
-	if (status === 429) return "rate_limit";
-	if (status === 401 || status === 403) {
-		const msg = getErrorMessage(err);
-		if (msg && isAuthPermanentErrorMessage(msg)) return "auth_permanent";
-		return "auth";
+function normalizePluginDiscoveryResult(params) {
+	const result = params.result;
+	if (!result) return {};
+	if ("provider" in result) {
+		const key = normalizeSingleProviderResultKey(params.provider);
+		return key ? { [key]: result.provider } : {};
 	}
-	if (status === 408) return "timeout";
-	if (status === 502 || status === 503 || status === 504) return "timeout";
-	if (status === 400) return "format";
-	const code = (getErrorCode(err) ?? "").toUpperCase();
-	if ([
-		"ETIMEDOUT",
-		"ESOCKETTIMEDOUT",
-		"ECONNRESET",
-		"ECONNABORTED"
-	].includes(code)) return "timeout";
-	if (isTimeoutError(err)) return "timeout";
-	const message = getErrorMessage(err);
-	if (!message) return null;
-	return classifyFailoverReason(message);
+	const normalized = {};
+	for (const [key, value] of Object.entries(result.providers)) {
+		const normalizedKey = normalizeProviderResultKey(key);
+		if (!normalizedKey || !value) continue;
+		normalized[normalizedKey] = value;
+	}
+	return normalized;
 }
-function describeFailoverError(err) {
-	if (isFailoverError(err)) return {
-		message: err.message,
-		reason: err.reason,
-		status: err.status,
-		code: err.code
-	};
+function runProviderStaticCatalog(params) {
+	return params.provider.staticCatalog?.run({
+		config: params.config,
+		agentDir: params.agentDir,
+		workspaceDir: params.workspaceDir,
+		env: params.env,
+		resolveProviderApiKey: params.resolveProviderApiKey,
+		resolveProviderAuth: params.resolveProviderAuth
+	});
+}
+
+//#endregion
+//#region src/plugins/logger.ts
+function createPluginLoaderLogger(logger) {
 	return {
-		message: getErrorMessage(err) || String(err),
-		reason: resolveFailoverReasonFromError(err) ?? void 0,
-		status: getStatusCode(err),
-		code: getErrorCode(err)
+		info: (msg) => logger.info(msg),
+		warn: (msg) => logger.warn(msg),
+		error: (msg) => logger.error(msg),
+		debug: (msg) => logger.debug?.(msg)
 	};
 }
-function coerceToFailoverError(err, context) {
-	if (isFailoverError(err)) return err;
-	const reason = resolveFailoverReasonFromError(err);
-	if (!reason) return null;
-	const message = getErrorMessage(err) || String(err);
-	const status = getStatusCode(err) ?? resolveFailoverStatus(reason);
-	const code = getErrorCode(err);
-	return new FailoverError(message, {
-		reason,
-		provider: context?.provider,
-		model: context?.model,
-		profileId: context?.profileId,
-		status,
-		code,
-		cause: err instanceof Error ? err : void 0
-	});
-}
 
 //#endregion
-//#region src/agents/model-fallback.ts
-/**
-* Fallback abort check. Only treats explicit AbortError names as user aborts.
-* Message-based checks (e.g., "aborted") can mask timeouts and skip fallback.
-*/
-function isFallbackAbortError(err) {
-	if (!err || typeof err !== "object") return false;
-	if (isFailoverError(err)) return false;
-	return ("name" in err ? String(err.name) : "") === "AbortError";
+//#region src/plugins/providers.ts
+const log$19 = createSubsystemLogger("plugins");
+function resolvePluginProviders(params) {
+	return loadFasedAgentPlugins({
+		config: params.config,
+		workspaceDir: params.workspaceDir,
+		logger: createPluginLoaderLogger(log$19)
+	}).providers.map((entry) => entry.provider);
 }
-function shouldRethrowAbort(err) {
-	return isFallbackAbortError(err) && !isTimeoutError(err);
+
+//#endregion
+//#region src/plugins/provider-runtime.runtime.ts
+const log$18 = createSubsystemLogger("provider-runtime");
+function mergeProviders(target, providers) {
+	for (const [providerId, providerConfig] of Object.entries(providers)) target[providerId] = providerConfig;
 }
-function createModelCandidateCollector(allowlist) {
-	const seen = /* @__PURE__ */ new Set();
-	const candidates = [];
-	const addCandidate = (candidate, enforceAllowlist) => {
-		if (!candidate.provider || !candidate.model) return;
-		const key = modelKey(candidate.provider, candidate.model);
-		if (seen.has(key)) return;
-		if (enforceAllowlist && allowlist && !allowlist.has(key)) return;
-		seen.add(key);
-		candidates.push(candidate);
-	};
-	const addExplicitCandidate = (candidate) => {
-		addCandidate(candidate, false);
-	};
-	const addAllowlistedCandidate = (candidate) => {
-		addCandidate(candidate, true);
-	};
+function staticAuthContext() {
 	return {
-		candidates,
-		addExplicitCandidate,
-		addAllowlistedCandidate
+		resolveProviderApiKey: () => ({ apiKey: void 0 }),
+		resolveProviderAuth: () => ({
+			apiKey: void 0,
+			discoveryApiKey: void 0,
+			mode: "none",
+			source: "none"
+		})
 	};
 }
-function sameModelCandidate(a, b) {
-	return a.provider === b.provider && a.model === b.model;
-}
-function throwFallbackFailureSummary(params) {
-	if (params.attempts.length <= 1 && params.lastError) throw params.lastError;
-	const summary = params.attempts.length > 0 ? params.attempts.map(params.formatAttempt).join(" | ") : "unknown";
-	throw new Error(`All ${params.label} failed (${params.attempts.length || params.candidates.length}): ${summary}`, { cause: params.lastError instanceof Error ? params.lastError : void 0 });
+async function resolveProviderStaticCatalog(params) {
+	if (!params.provider.staticCatalog) return {};
+	const result = await runProviderStaticCatalog({
+		provider: params.provider,
+		config: params.config,
+		agentDir: params.agentDir,
+		workspaceDir: params.workspaceDir,
+		env: params.env,
+		...staticAuthContext()
+	});
+	return normalizePluginDiscoveryResult({
+		provider: params.provider,
+		result
+	});
 }
-function resolveImageFallbackCandidates(params) {
-	const aliasIndex = buildModelAliasIndex({
-		cfg: params.cfg ?? {},
-		defaultProvider: params.defaultProvider
+async function augmentModelCatalogWithProviderPlugins(params) {
+	const env = params.env ?? process.env;
+	const providers = resolvePluginProviders({
+		config: params.config,
+		workspaceDir: params.workspaceDir
 	});
-	const { candidates, addExplicitCandidate, addAllowlistedCandidate } = createModelCandidateCollector(buildConfiguredAllowlistKeys({
-		cfg: params.cfg,
-		defaultProvider: params.defaultProvider
-	}));
-	const addRaw = (raw, opts) => {
-		const resolved = resolveModelRefFromString({
-			raw: String(raw ?? ""),
-			defaultProvider: params.defaultProvider,
-			aliasIndex
-		});
-		if (!resolved) return;
-		if (opts?.allowlist) {
-			addAllowlistedCandidate(resolved.ref);
-			return;
-		}
-		addExplicitCandidate(resolved.ref);
-	};
-	if (params.modelOverride?.trim()) addRaw(params.modelOverride);
-	else {
-		const primary = resolveAgentModelPrimaryValue(params.cfg?.agents?.defaults?.imageModel);
-		if (primary?.trim()) addRaw(primary);
+	const catalogProviders = {};
+	for (const provider of providers) try {
+		if (provider.models) mergeProviders(catalogProviders, normalizePluginDiscoveryResult({
+			provider,
+			result: { provider: provider.models }
+		}));
+		mergeProviders(catalogProviders, await resolveProviderStaticCatalog({
+			provider,
+			config: params.config,
+			agentDir: params.agentDir,
+			workspaceDir: params.workspaceDir,
+			env
+		}));
+	} catch (error) {
+		log$18.warn(`Failed to read provider catalog for ${provider.id}: ${String(error)}`);
 	}
-	const imageFallbacks = resolveAgentModelFallbackValues(params.cfg?.agents?.defaults?.imageModel);
-	for (const raw of imageFallbacks) addRaw(raw);
-	return candidates;
+	return catalogProviders;
 }
-function resolveFallbackCandidates(params) {
-	const primary = params.cfg ? resolveConfiguredModelRef({
-		cfg: params.cfg,
-		defaultProvider: DEFAULT_PROVIDER,
-		defaultModel: DEFAULT_MODEL
-	}) : null;
-	const defaultProvider = primary?.provider ?? DEFAULT_PROVIDER;
-	const defaultModel = primary?.model ?? DEFAULT_MODEL;
-	const normalizedPrimary = normalizeModelRef$1(String(params.provider ?? "").trim() || defaultProvider, String(params.model ?? "").trim() || defaultModel);
-	const configuredPrimary = normalizeModelRef$1(defaultProvider, defaultModel);
-	const aliasIndex = buildModelAliasIndex({
-		cfg: params.cfg ?? {},
-		defaultProvider
-	});
-	const { candidates, addExplicitCandidate } = createModelCandidateCollector(buildConfiguredAllowlistKeys({
-		cfg: params.cfg,
-		defaultProvider
+
+//#endregion
+//#region src/agents/model-catalog-source.ts
+function normalizePositiveNumber(value) {
+	return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : void 0;
+}
+function normalizeBoolean$1(value) {
+	return typeof value === "boolean" ? value : void 0;
+}
+function normalizeString$1(value) {
+	return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function normalizeInput(value) {
+	if (!Array.isArray(value)) return ["text"];
+	const out = value.filter((item) => item === "text" || item === "image");
+	return out.length > 0 ? out : ["text"];
+}
+function normalizeApi(value) {
+	return MODEL_APIS.includes(value) ? value : void 0;
+}
+function isSupportedRuntimeCatalogModel(provider, id) {
+	if (provider !== "openai-codex") return true;
+	return isOpenAISignInRuntimeModelSupported(id);
+}
+function configuredProviderCatalogRows(cfg) {
+	return Object.entries(cfg.models?.providers ?? {}).flatMap(([provider, providerConfig]) => normalizeProviderCatalogRows({
+		provider,
+		providerConfig,
+		source: "configured",
+		status: "stable"
 	}));
-	addExplicitCandidate(normalizedPrimary);
-	const modelFallbacks = (() => {
-		if (params.fallbacksOverride !== void 0) return params.fallbacksOverride;
-		const configuredFallbacks = resolveAgentModelFallbackValues(params.cfg?.agents?.defaults?.model);
-		if (normalizedPrimary.provider !== configuredPrimary.provider) return configuredFallbacks.some((raw) => {
-			const resolved = resolveModelRefFromString({
-				raw: String(raw ?? ""),
-				defaultProvider,
-				aliasIndex
-			});
-			return resolved ? sameModelCandidate(resolved.ref, normalizedPrimary) : false;
-		}) ? configuredFallbacks : [];
-		return configuredFallbacks;
-	})();
-	for (const raw of modelFallbacks) {
-		const resolved = resolveModelRefFromString({
-			raw: String(raw ?? ""),
-			defaultProvider,
-			aliasIndex
-		});
-		if (!resolved) continue;
-		addExplicitCandidate(resolved.ref);
-	}
-	if (params.fallbacksOverride === void 0 && primary?.provider && primary.model) addExplicitCandidate({
-		provider: primary.provider,
-		model: primary.model
-	});
-	return candidates;
 }
-const lastProbeAttempt = /* @__PURE__ */ new Map();
-const MIN_PROBE_INTERVAL_MS = 3e4;
-const PROBE_MARGIN_MS = 120 * 1e3;
-const PROBE_STATE_TTL_MS = 600 * 1e3;
-const MAX_PROBE_KEYS = 256;
-const PROBE_SCOPE_DELIMITER = "::";
-function resolveProbeThrottleKey(provider, agentDir) {
-	const scope = String(agentDir ?? "").trim();
-	return scope ? `${scope}${PROBE_SCOPE_DELIMITER}${provider}` : provider;
+function providerPluginCatalogRows(providers) {
+	return Object.entries(providers ?? {}).flatMap(([provider, providerConfig]) => normalizeProviderCatalogRows({
+		provider,
+		providerConfig,
+		source: "provider-index",
+		status: "stable"
+	}));
 }
-function pruneProbeThrottleState(now) {
-	for (const [key, timestamp] of lastProbeAttempt) if (now - timestamp > PROBE_STATE_TTL_MS) lastProbeAttempt.delete(key);
-	while (lastProbeAttempt.size > MAX_PROBE_KEYS) {
-		let oldestKey;
-		let oldest = Number.POSITIVE_INFINITY;
-		for (const [key, timestamp] of lastProbeAttempt) if (timestamp < oldest) {
-			oldest = timestamp;
-			oldestKey = key;
-		}
-		if (!oldestKey) return;
-		lastProbeAttempt.delete(oldestKey);
+function runtimeCatalogRows(params) {
+	const rows = [];
+	for (const model of params.models) try {
+		const idRaw = normalizeString$1(model.id);
+		const providerRaw = normalizeString$1(model.provider);
+		if (!idRaw || !providerRaw) continue;
+		const id = normalizeModelCatalogModelId(idRaw);
+		const provider = normalizeModelCatalogProviderId(providerRaw);
+		if (!id || !provider) continue;
+		if (!isSupportedRuntimeCatalogModel(provider, id)) continue;
+		if (id.toLowerCase() === "gpt-5.3-codex-spark" && (provider === "openai" || provider === "azure-openai-responses")) continue;
+		rows.push({
+			id,
+			name: normalizeString$1(model.name) ?? id,
+			provider,
+			mergeKey: buildModelCatalogMergeKey(provider, id),
+			source: "runtime",
+			status: "stable",
+			input: normalizeInput(model.input),
+			contextWindow: normalizePositiveNumber(model.contextWindow),
+			maxTokens: normalizePositiveNumber(model.maxTokens),
+			reasoning: normalizeBoolean$1(model.reasoning),
+			baseUrl: normalizeString$1(model.baseUrl),
+			api: normalizeApi(model.api)
+		});
+	} catch (error) {
+		params.onEntryError?.(error);
 	}
+	return rows;
 }
-function isProbeThrottleOpen(now, throttleKey) {
-	pruneProbeThrottleState(now);
-	return now - (lastProbeAttempt.get(throttleKey) ?? 0) < MIN_PROBE_INTERVAL_MS;
+function manifestCatalogRows() {
+	return listProviderBrandManifests().flatMap((manifest) => manifest.models.recommended.flatMap((ref) => {
+		const slash = ref.indexOf("/");
+		if (slash <= 0 || slash === ref.length - 1) return [];
+		const provider = normalizeModelCatalogProviderId(ref.slice(0, slash));
+		const id = normalizeModelCatalogModelId(ref.slice(slash + 1));
+		if (!provider || !id) return [];
+		return [{
+			id,
+			name: id,
+			provider,
+			mergeKey: buildModelCatalogMergeKey(provider, id),
+			source: "manifest",
+			status: "stable",
+			input: ["text"]
+		}];
+	}));
 }
-function markProbeAttempt(now, throttleKey) {
-	pruneProbeThrottleState(now);
-	lastProbeAttempt.set(throttleKey, now);
-	pruneProbeThrottleState(now);
+function providerConfigForRow(cfg, row) {
+	return cfg.models?.providers?.[row.provider] ?? CURRENT_MODEL_PROVIDER_CATALOG[row.provider];
 }
-function shouldProbePrimaryDuringCooldown(params) {
-	if (!params.isPrimary || !params.hasFallbackCandidates) return false;
-	if (isProbeThrottleOpen(params.now, params.throttleKey)) return false;
-	const soonest = getSoonestCooldownExpiry(params.authStore, params.profileIds);
-	if (soonest === null || !Number.isFinite(soonest)) return true;
-	return params.now >= soonest - PROBE_MARGIN_MS;
+function buildFasedModelCatalogRows(params) {
+	const discoveredRows = mergeModelCatalogRowsByAuthority([
+		...[...listCurrentModelCatalogRows(), ...providerPluginCatalogRows(params.providerPluginProviders)].filter((row) => isSupportedRuntimeCatalogModel(row.provider, row.id)),
+		...runtimeCatalogRows({
+			models: params.runtimeModels ?? [],
+			onEntryError: params.onRuntimeEntryError
+		}),
+		...configuredProviderCatalogRows(params.config)
+	]);
+	const discoveredKeys = new Set(discoveredRows.map((row) => row.mergeKey));
+	const missingManifestRows = manifestCatalogRows().filter((row) => !discoveredKeys.has(row.mergeKey));
+	return mergeModelCatalogRowsByAuthority([...discoveredRows, ...missingManifestRows]);
 }
-function resolveCooldownDecision(params) {
-	const shouldProbe = shouldProbePrimaryDuringCooldown({
-		isPrimary: params.isPrimary,
-		hasFallbackCandidates: params.hasFallbackCandidates,
-		now: params.now,
-		throttleKey: params.probeThrottleKey,
+function buildFasedModelCatalogEntries(params) {
+	return buildFasedModelCatalogRows({
+		config: params.config,
+		runtimeModels: params.runtimeModels,
+		providerPluginProviders: params.providerPluginProviders,
+		onRuntimeEntryError: params.onRuntimeEntryError
+	}).map((row) => {
+		const providerConfig = providerConfigForRow(params.config, row);
+		const model = {
+			id: row.id,
+			name: row.name,
+			provider: row.provider,
+			contextWindow: row.contextWindow,
+			maxTokens: row.maxTokens,
+			reasoning: row.reasoning,
+			input: row.input,
+			baseUrl: row.baseUrl,
+			api: row.api,
+			catalogSource: row.source
+		};
+		return {
+			...model,
+			...params.includeMetadata ? { metadata: deriveModelMetadata({
+				model,
+				cfg: params.config,
+				providerConfig,
+				recommended: isStandardProviderCatalogEntry(row)
+			}) } : {}
+		};
+	});
+}
+
+//#endregion
+//#region src/agents/provider-extension-catalog-index.ts
+const UNSAFE_PROVIDER_KEYS = new Set([
+	"__proto__",
+	"prototype",
+	"constructor"
+]);
+const DEFAULT_PROVIDER_EXTENSION_CATALOG_ENTRIES = [];
+let providerExtensionCatalogEntriesForTest;
+function listBundledProviderExtensionCatalogEntries() {
+	return providerExtensionCatalogEntriesForTest ?? DEFAULT_PROVIDER_EXTENSION_CATALOG_ENTRIES;
+}
+function normalizeProviderIds(providerIds) {
+	return [...new Set(providerIds.map((providerId) => normalizeModelCatalogProviderId(providerId)).filter((providerId) => providerId.length > 0 && !UNSAFE_PROVIDER_KEYS.has(providerId)))].toSorted((left, right) => left.localeCompare(right));
+}
+function normalizeEntryTrust(entry) {
+	return entry.trusted === true || entry.source === "bundled";
+}
+function collectProviderConfigs(entry, module) {
+	const providers = {};
+	const explicitProviderIds = normalizeProviderIds(entry.providerIds);
+	const moduleProviders = module.providers ?? module.default?.providers;
+	if (moduleProviders) for (const [providerIdRaw, providerConfig] of Object.entries(moduleProviders)) {
+		const providerId = normalizeProviderIds([providerIdRaw])[0];
+		if (!providerId || !providerConfig) continue;
+		providers[providerId] = providerConfig;
+	}
+	const singleProvider = module.provider ?? module.default?.provider;
+	if (singleProvider && explicitProviderIds[0]) providers[explicitProviderIds[0]] = singleProvider;
+	return providers;
+}
+function countModels(providers) {
+	return Object.values(providers).reduce((total, provider) => total + (Array.isArray(provider.models) ? provider.models.length : 0), 0);
+}
+function formatCatalogError(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+async function loadProviderExtensionCatalogIndex(params) {
+	const entries = params?.entries ?? listBundledProviderExtensionCatalogEntries();
+	const includeUntrusted = params?.includeUntrusted === true;
+	const providers = {};
+	const statuses = [];
+	for (const entry of entries) {
+		const providerIds = normalizeProviderIds(entry.providerIds);
+		const trusted = normalizeEntryTrust(entry);
+		if (!trusted && !includeUntrusted) {
+			statuses.push({
+				id: entry.id,
+				source: entry.source,
+				trusted,
+				providerIds,
+				loadedProviderIds: [],
+				modelCount: 0,
+				status: "skipped-untrusted"
+			});
+			continue;
+		}
+		try {
+			const loadedProviders = collectProviderConfigs(entry, await entry.load());
+			const loadedProviderIds = Object.keys(loadedProviders).toSorted((left, right) => left.localeCompare(right));
+			for (const providerId of loadedProviderIds) providers[providerId] = loadedProviders[providerId];
+			const modelCount = countModels(loadedProviders);
+			statuses.push({
+				id: entry.id,
+				source: entry.source,
+				trusted,
+				providerIds,
+				loadedProviderIds,
+				modelCount,
+				status: loadedProviderIds.length > 0 ? "loaded" : "empty"
+			});
+		} catch (error) {
+			statuses.push({
+				id: entry.id,
+				source: entry.source,
+				trusted,
+				providerIds,
+				loadedProviderIds: [],
+				modelCount: 0,
+				status: "error",
+				error: formatCatalogError(error)
+			});
+		}
+	}
+	return {
+		providers,
+		entries: statuses
+	};
+}
+
+//#endregion
+//#region src/agents/model-catalog.ts
+const log$17 = createSubsystemLogger("model-catalog");
+let modelCatalogPromise = null;
+let hasLoggedModelCatalogError = false;
+let hasLoggedProviderCatalogError = false;
+const defaultImportPiSdk = () => import("./pi-model-discovery-BpEilAym.js").then((n) => n.a);
+let importPiSdk = defaultImportPiSdk;
+const CODEX_PROVIDER = "openai-codex";
+const OPENAI_PROVIDER = "openai";
+const OPENAI_GPT55_MODEL_ID = "gpt-5.5";
+const OPENAI_GPT54_MODEL_ID = "gpt-5.4";
+const OPENAI_GPT54_MINI_MODEL_ID = "gpt-5.4-mini";
+const OPENAI_GPT54_NANO_MODEL_ID = "gpt-5.4-nano";
+const OPENAI_CODEX_GPT55_MODEL_ID = "gpt-5.5";
+const OPENAI_CODEX_GPT54_MODEL_ID = "gpt-5.4";
+const OPENAI_CODEX_GPT54_MINI_MODEL_ID = "gpt-5.4-mini";
+const OPENAI_CODEX_GPT53_SPARK_MODEL_ID = "gpt-5.3-codex-spark";
+const SYNTHETIC_CATALOG_FALLBACKS = [
+	{
+		provider: OPENAI_PROVIDER,
+		id: OPENAI_GPT55_MODEL_ID,
+		templateIds: [OPENAI_GPT54_MODEL_ID, "gpt-5.2"]
+	},
+	{
+		provider: OPENAI_PROVIDER,
+		id: OPENAI_GPT54_MODEL_ID,
+		templateIds: ["gpt-5.2"]
+	},
+	{
+		provider: OPENAI_PROVIDER,
+		id: OPENAI_GPT54_MINI_MODEL_ID,
+		templateIds: ["gpt-5-mini"]
+	},
+	{
+		provider: OPENAI_PROVIDER,
+		id: OPENAI_GPT54_NANO_MODEL_ID,
+		templateIds: ["gpt-5-nano", "gpt-5-mini"]
+	},
+	{
+		provider: CODEX_PROVIDER,
+		id: OPENAI_CODEX_GPT55_MODEL_ID,
+		templateIds: [OPENAI_CODEX_GPT54_MODEL_ID, OPENAI_CODEX_GPT53_SPARK_MODEL_ID]
+	},
+	{
+		provider: CODEX_PROVIDER,
+		id: OPENAI_CODEX_GPT54_MODEL_ID,
+		templateIds: [OPENAI_CODEX_GPT53_SPARK_MODEL_ID]
+	},
+	{
+		provider: CODEX_PROVIDER,
+		id: OPENAI_CODEX_GPT54_MINI_MODEL_ID,
+		templateIds: [OPENAI_CODEX_GPT54_MODEL_ID, OPENAI_CODEX_GPT53_SPARK_MODEL_ID]
+	}
+];
+function applySyntheticCatalogFallbacks(models) {
+	const findCatalogEntry = (provider, id) => models.find((entry) => entry.provider.toLowerCase() === provider.toLowerCase() && entry.id.toLowerCase() === id.toLowerCase());
+	for (const fallback of SYNTHETIC_CATALOG_FALLBACKS) {
+		if (findCatalogEntry(fallback.provider, fallback.id)) continue;
+		const template = fallback.templateIds.map((templateId) => findCatalogEntry(fallback.provider, templateId)).find((entry) => entry !== void 0);
+		if (!template) continue;
+		const { metadata: _ignoredMetadata, ...templateWithoutMetadata } = template;
+		models.push({
+			...templateWithoutMetadata,
+			id: fallback.id,
+			name: fallback.id,
+			...template.metadata ? { metadata: deriveModelMetadata({ model: {
+				...templateWithoutMetadata,
+				id: fallback.id,
+				name: fallback.id
+			} }) } : {}
+		});
+	}
+}
+async function loadProviderPluginCatalogProviders(params) {
+	try {
+		return await augmentModelCatalogWithProviderPlugins({
+			config: params.config,
+			agentDir: params.agentDir,
+			env: process.env
+		});
+	} catch (error) {
+		if (!hasLoggedProviderCatalogError) {
+			hasLoggedProviderCatalogError = true;
+			log$17.warn(`Failed to load provider plugin model catalog: ${String(error)}`);
+		}
+		return {};
+	}
+}
+async function loadProviderExtensionCatalogProviders() {
+	try {
+		return (await loadProviderExtensionCatalogIndex()).providers;
+	} catch (error) {
+		if (!hasLoggedProviderCatalogError) {
+			hasLoggedProviderCatalogError = true;
+			log$17.warn(`Failed to load provider extension model catalog: ${String(error)}`);
+		}
+		return {};
+	}
+}
+async function loadModelCatalog(params) {
+	if (params?.useCache === false) modelCatalogPromise = null;
+	if (modelCatalogPromise) return modelCatalogPromise;
+	modelCatalogPromise = (async () => {
+		const models = [];
+		const sortModels = (entries) => entries.sort((a, b) => {
+			const p = a.provider.localeCompare(b.provider);
+			if (p !== 0) return p;
+			return a.name.localeCompare(b.name);
+		});
+		try {
+			const cfg = params?.config ?? loadConfig();
+			await ensureFasedAgentModelsJson(cfg);
+			const piSdk = await importPiSdk();
+			const agentDir = resolveFasedAgentAgentDir();
+			const { join } = await import("node:path");
+			const authStorage = piSdk.discoverAuthStorage(agentDir);
+			const registry = new piSdk.ModelRegistry(authStorage, join(agentDir, "models.json"));
+			const entries = Array.isArray(registry) ? registry : registry.getAll();
+			const runtimeModels = [];
+			for (const entry of entries) runtimeModels.push(entry);
+			const providerPluginProviders = await loadProviderPluginCatalogProviders({
+				config: cfg,
+				agentDir
+			});
+			const providerExtensionCatalogProviders = await loadProviderExtensionCatalogProviders();
+			models.push(...buildFasedModelCatalogEntries({
+				config: cfg,
+				runtimeModels,
+				providerPluginProviders: {
+					...providerExtensionCatalogProviders,
+					...providerPluginProviders
+				},
+				includeMetadata: params?.includeMetadata,
+				onRuntimeEntryError: (error) => {
+					if (!hasLoggedModelCatalogError) {
+						hasLoggedModelCatalogError = true;
+						log$17.warn(`Failed to read model catalog entry: ${String(error)}`);
+					}
+				}
+			}));
+			applySyntheticCatalogFallbacks(models);
+			if (models.length === 0) modelCatalogPromise = null;
+			return sortModels(models);
+		} catch (error) {
+			if (!hasLoggedModelCatalogError) {
+				hasLoggedModelCatalogError = true;
+				log$17.warn(`Failed to load model catalog: ${String(error)}`);
+			}
+			modelCatalogPromise = null;
+			if (models.length > 0) return sortModels(models);
+			return [];
+		}
+	})();
+	return modelCatalogPromise;
+}
+/**
+* Check if a model supports image input based on its catalog entry.
+*/
+function modelSupportsVision(entry) {
+	return entry?.input?.includes("image") ?? false;
+}
+/**
+* Find a model in the catalog by provider and model ID.
+*/
+function findModelInCatalog(catalog, provider, modelId) {
+	const normalizedProvider = normalizeModelCatalogProviderId(provider);
+	const normalizedModelId = modelId.toLowerCase().trim();
+	return catalog.find((entry) => normalizeModelCatalogProviderId(entry.provider) === normalizedProvider && entry.id.toLowerCase() === normalizedModelId);
+}
+
+//#endregion
+//#region src/agents/failover-error.ts
+const TIMEOUT_HINT_RE = /timeout|timed out|deadline exceeded|context deadline exceeded|stop reason:\s*abort|reason:\s*abort|unhandled stop reason:\s*abort/i;
+const ABORT_TIMEOUT_RE = /request was aborted|request aborted/i;
+var FailoverError = class extends Error {
+	constructor(message, params) {
+		super(message, { cause: params.cause });
+		this.name = "FailoverError";
+		this.reason = params.reason;
+		this.provider = params.provider;
+		this.model = params.model;
+		this.profileId = params.profileId;
+		this.status = params.status;
+		this.code = params.code;
+	}
+};
+function isFailoverError(err) {
+	return err instanceof FailoverError;
+}
+function resolveFailoverStatus(reason) {
+	switch (reason) {
+		case "billing": return 402;
+		case "rate_limit": return 429;
+		case "auth": return 401;
+		case "auth_permanent": return 403;
+		case "timeout": return 408;
+		case "format": return 400;
+		case "model_not_found": return 404;
+		default: return;
+	}
+}
+function getStatusCode(err) {
+	if (!err || typeof err !== "object") return;
+	const candidate = err.status ?? err.statusCode;
+	if (typeof candidate === "number") return candidate;
+	if (typeof candidate === "string" && /^\d+$/.test(candidate)) return Number(candidate);
+}
+function getErrorName(err) {
+	if (!err || typeof err !== "object") return "";
+	return "name" in err ? String(err.name) : "";
+}
+function getErrorCode(err) {
+	if (!err || typeof err !== "object") return;
+	const candidate = err.code;
+	if (typeof candidate !== "string") return;
+	const trimmed = candidate.trim();
+	return trimmed ? trimmed : void 0;
+}
+function getErrorMessage(err) {
+	if (err instanceof Error) return err.message;
+	if (typeof err === "string") return err;
+	if (typeof err === "number" || typeof err === "boolean" || typeof err === "bigint") return String(err);
+	if (typeof err === "symbol") return err.description ?? "";
+	if (err && typeof err === "object") {
+		const message = err.message;
+		if (typeof message === "string") return message;
+	}
+	return "";
+}
+function hasTimeoutHint(err) {
+	if (!err) return false;
+	if (getErrorName(err) === "TimeoutError") return true;
+	const message = getErrorMessage(err);
+	return Boolean(message && TIMEOUT_HINT_RE.test(message));
+}
+function isTimeoutError(err) {
+	if (hasTimeoutHint(err)) return true;
+	if (!err || typeof err !== "object") return false;
+	if (getErrorName(err) !== "AbortError") return false;
+	const message = getErrorMessage(err);
+	if (message && ABORT_TIMEOUT_RE.test(message)) return true;
+	const cause = "cause" in err ? err.cause : void 0;
+	const reason = "reason" in err ? err.reason : void 0;
+	return hasTimeoutHint(cause) || hasTimeoutHint(reason);
+}
+function resolveFailoverReasonFromError(err) {
+	if (isFailoverError(err)) return err.reason;
+	const status = getStatusCode(err);
+	if (status === 402) return "billing";
+	if (status === 429) return "rate_limit";
+	if (status === 401 || status === 403) {
+		const msg = getErrorMessage(err);
+		if (msg && isAuthPermanentErrorMessage(msg)) return "auth_permanent";
+		return "auth";
+	}
+	if (status === 408) return "timeout";
+	if (status === 502 || status === 503 || status === 504) return "timeout";
+	if (status === 400) return "format";
+	const code = (getErrorCode(err) ?? "").toUpperCase();
+	if ([
+		"ETIMEDOUT",
+		"ESOCKETTIMEDOUT",
+		"ECONNRESET",
+		"ECONNABORTED"
+	].includes(code)) return "timeout";
+	if (isTimeoutError(err)) return "timeout";
+	const message = getErrorMessage(err);
+	if (!message) return null;
+	return classifyFailoverReason(message);
+}
+function describeFailoverError(err) {
+	if (isFailoverError(err)) return {
+		message: err.message,
+		reason: err.reason,
+		status: err.status,
+		code: err.code
+	};
+	return {
+		message: getErrorMessage(err) || String(err),
+		reason: resolveFailoverReasonFromError(err) ?? void 0,
+		status: getStatusCode(err),
+		code: getErrorCode(err)
+	};
+}
+function coerceToFailoverError(err, context) {
+	if (isFailoverError(err)) return err;
+	const reason = resolveFailoverReasonFromError(err);
+	if (!reason) return null;
+	const message = getErrorMessage(err) || String(err);
+	const status = getStatusCode(err) ?? resolveFailoverStatus(reason);
+	const code = getErrorCode(err);
+	return new FailoverError(message, {
+		reason,
+		provider: context?.provider,
+		model: context?.model,
+		profileId: context?.profileId,
+		status,
+		code,
+		cause: err instanceof Error ? err : void 0
+	});
+}
+
+//#endregion
+//#region src/agents/model-fallback.ts
+/**
+* Fallback abort check. Only treats explicit AbortError names as user aborts.
+* Message-based checks (e.g., "aborted") can mask timeouts and skip fallback.
+*/
+function isFallbackAbortError(err) {
+	if (!err || typeof err !== "object") return false;
+	if (isFailoverError(err)) return false;
+	return ("name" in err ? String(err.name) : "") === "AbortError";
+}
+function shouldRethrowAbort(err) {
+	return isFallbackAbortError(err) && !isTimeoutError(err);
+}
+function createModelCandidateCollector(allowlist) {
+	const seen = /* @__PURE__ */ new Set();
+	const candidates = [];
+	const addCandidate = (candidate, enforceAllowlist) => {
+		if (!candidate.provider || !candidate.model) return;
+		const key = modelKey(candidate.provider, candidate.model);
+		if (seen.has(key)) return;
+		if (enforceAllowlist && allowlist && !allowlist.has(key)) return;
+		seen.add(key);
+		candidates.push(candidate);
+	};
+	const addExplicitCandidate = (candidate) => {
+		addCandidate(candidate, false);
+	};
+	const addAllowlistedCandidate = (candidate) => {
+		addCandidate(candidate, true);
+	};
+	return {
+		candidates,
+		addExplicitCandidate,
+		addAllowlistedCandidate
+	};
+}
+function sameModelCandidate(a, b) {
+	return a.provider === b.provider && a.model === b.model;
+}
+function throwFallbackFailureSummary(params) {
+	if (params.attempts.length <= 1 && params.lastError) throw params.lastError;
+	const summary = params.attempts.length > 0 ? params.attempts.map(params.formatAttempt).join(" | ") : "unknown";
+	throw new Error(`All ${params.label} failed (${params.attempts.length || params.candidates.length}): ${summary}`, { cause: params.lastError instanceof Error ? params.lastError : void 0 });
+}
+function resolveImageFallbackCandidates(params) {
+	const aliasIndex = buildModelAliasIndex({
+		cfg: params.cfg ?? {},
+		defaultProvider: params.defaultProvider
+	});
+	const { candidates, addExplicitCandidate, addAllowlistedCandidate } = createModelCandidateCollector(buildConfiguredAllowlistKeys({
+		cfg: params.cfg,
+		defaultProvider: params.defaultProvider
+	}));
+	const addRaw = (raw, opts) => {
+		const resolved = resolveModelRefFromString({
+			raw: String(raw ?? ""),
+			defaultProvider: params.defaultProvider,
+			aliasIndex
+		});
+		if (!resolved) return;
+		if (opts?.allowlist) {
+			addAllowlistedCandidate(resolved.ref);
+			return;
+		}
+		addExplicitCandidate(resolved.ref);
+	};
+	if (params.modelOverride?.trim()) addRaw(params.modelOverride);
+	else {
+		const primary = resolveAgentModelPrimaryValue(params.cfg?.agents?.defaults?.imageModel);
+		if (primary?.trim()) addRaw(primary);
+	}
+	const imageFallbacks = resolveAgentModelFallbackValues(params.cfg?.agents?.defaults?.imageModel);
+	for (const raw of imageFallbacks) addRaw(raw);
+	return candidates;
+}
+function resolveFallbackCandidates(params) {
+	const primary = params.cfg ? resolveConfiguredModelRef({
+		cfg: params.cfg,
+		defaultProvider: DEFAULT_PROVIDER,
+		defaultModel: DEFAULT_MODEL
+	}) : null;
+	const defaultProvider = primary?.provider ?? DEFAULT_PROVIDER;
+	const defaultModel = primary?.model ?? DEFAULT_MODEL;
+	const normalizedPrimary = normalizeModelRef$1(String(params.provider ?? "").trim() || defaultProvider, String(params.model ?? "").trim() || defaultModel);
+	const configuredPrimary = normalizeModelRef$1(defaultProvider, defaultModel);
+	const aliasIndex = buildModelAliasIndex({
+		cfg: params.cfg ?? {},
+		defaultProvider
+	});
+	const { candidates, addExplicitCandidate } = createModelCandidateCollector(buildConfiguredAllowlistKeys({
+		cfg: params.cfg,
+		defaultProvider
+	}));
+	addExplicitCandidate(normalizedPrimary);
+	const modelFallbacks = (() => {
+		if (params.fallbacksOverride !== void 0) return params.fallbacksOverride;
+		const configuredFallbacks = resolveAgentModelFallbackValues(params.cfg?.agents?.defaults?.model);
+		if (normalizedPrimary.provider !== configuredPrimary.provider) return configuredFallbacks.some((raw) => {
+			const resolved = resolveModelRefFromString({
+				raw: String(raw ?? ""),
+				defaultProvider,
+				aliasIndex
+			});
+			return resolved ? sameModelCandidate(resolved.ref, normalizedPrimary) : false;
+		}) ? configuredFallbacks : [];
+		return configuredFallbacks;
+	})();
+	for (const raw of modelFallbacks) {
+		const resolved = resolveModelRefFromString({
+			raw: String(raw ?? ""),
+			defaultProvider,
+			aliasIndex
+		});
+		if (!resolved) continue;
+		addExplicitCandidate(resolved.ref);
+	}
+	if (params.fallbacksOverride === void 0 && primary?.provider && primary.model) addExplicitCandidate({
+		provider: primary.provider,
+		model: primary.model
+	});
+	return candidates;
+}
+const lastProbeAttempt = /* @__PURE__ */ new Map();
+const MIN_PROBE_INTERVAL_MS = 3e4;
+const PROBE_MARGIN_MS = 120 * 1e3;
+const PROBE_STATE_TTL_MS = 600 * 1e3;
+const MAX_PROBE_KEYS = 256;
+const PROBE_SCOPE_DELIMITER = "::";
+function resolveProbeThrottleKey(provider, agentDir) {
+	const scope = String(agentDir ?? "").trim();
+	return scope ? `${scope}${PROBE_SCOPE_DELIMITER}${provider}` : provider;
+}
+function pruneProbeThrottleState(now) {
+	for (const [key, timestamp] of lastProbeAttempt) if (now - timestamp > PROBE_STATE_TTL_MS) lastProbeAttempt.delete(key);
+	while (lastProbeAttempt.size > MAX_PROBE_KEYS) {
+		let oldestKey;
+		let oldest = Number.POSITIVE_INFINITY;
+		for (const [key, timestamp] of lastProbeAttempt) if (timestamp < oldest) {
+			oldest = timestamp;
+			oldestKey = key;
+		}
+		if (!oldestKey) return;
+		lastProbeAttempt.delete(oldestKey);
+	}
+}
+function isProbeThrottleOpen(now, throttleKey) {
+	pruneProbeThrottleState(now);
+	return now - (lastProbeAttempt.get(throttleKey) ?? 0) < MIN_PROBE_INTERVAL_MS;
+}
+function markProbeAttempt(now, throttleKey) {
+	pruneProbeThrottleState(now);
+	lastProbeAttempt.set(throttleKey, now);
+	pruneProbeThrottleState(now);
+}
+function shouldProbePrimaryDuringCooldown(params) {
+	if (!params.isPrimary || !params.hasFallbackCandidates) return false;
+	if (isProbeThrottleOpen(params.now, params.throttleKey)) return false;
+	const soonest = getSoonestCooldownExpiry(params.authStore, params.profileIds);
+	if (soonest === null || !Number.isFinite(soonest)) return true;
+	return params.now >= soonest - PROBE_MARGIN_MS;
+}
+function resolveCooldownDecision(params) {
+	const shouldProbe = shouldProbePrimaryDuringCooldown({
+		isPrimary: params.isPrimary,
+		hasFallbackCandidates: params.hasFallbackCandidates,
+		now: params.now,
+		throttleKey: params.probeThrottleKey,
 		authStore: params.authStore,
 		profileIds: params.profileIds
 	});
@@ -29344,7 +29592,7 @@ function createRunRegistry(options) {
 
 //#endregion
 //#region src/process/supervisor/supervisor.ts
-const log$18 = createSubsystemLogger("process/supervisor");
+const log$16 = createSubsystemLogger("process/supervisor");
 function clampTimeout(value) {
 	if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) return;
 	return Math.max(1, Math.floor(value));
@@ -29530,7 +29778,7 @@ function createProcessSupervisor() {
 				exitCode: null,
 				exitSignal: null
 			});
-			log$18.warn(`spawn failed: runId=${runId} reason=${String(err)}`);
+			log$16.warn(`spawn failed: runId=${runId} reason=${String(err)}`);
 			throw err;
 		}
 	};
@@ -29554,12 +29802,12 @@ function getProcessSupervisor() {
 
 //#endregion
 //#region src/agents/bootstrap-cache.ts
-const cache = /* @__PURE__ */ new Map();
+const cache$1 = /* @__PURE__ */ new Map();
 async function getOrLoadBootstrapFiles(params) {
-	const existing = cache.get(params.sessionKey);
+	const existing = cache$1.get(params.sessionKey);
 	if (existing) return existing;
 	const files = await loadWorkspaceBootstrapFiles(params.workspaceDir);
-	cache.set(params.sessionKey, files);
+	cache$1.set(params.sessionKey, files);
 	return files;
 }
 
@@ -29880,6 +30128,24 @@ function resolveCliBackendConfig(provider, cfg) {
 	};
 }
 
+//#endregion
+//#region src/agents/model-alias-lines.ts
+function buildModelAliasLines(cfg) {
+	const models = cfg?.agents?.defaults?.models ?? {};
+	const entries = [];
+	for (const [keyRaw, entryRaw] of Object.entries(models)) {
+		const model = String(keyRaw ?? "").trim();
+		if (!model) continue;
+		const alias = String(entryRaw?.alias ?? "").trim();
+		if (!alias) continue;
+		entries.push({
+			alias,
+			model
+		});
+	}
+	return entries.toSorted((a, b) => a.alias.localeCompare(b.alias)).map((entry) => `- ${entry.alias}: ${entry.model}`);
+}
+
 //#endregion
 //#region src/agents/system-prompt-params.ts
 function buildSystemPromptParams(params) {
@@ -30572,11 +30838,11 @@ function collectText(value) {
 	if (!value) return "";
 	if (typeof value === "string") return value;
 	if (Array.isArray(value)) return value.map((entry) => collectText(entry)).join("");
-	if (!isRecord$4(value)) return "";
+	if (!isRecord$5(value)) return "";
 	if (typeof value.text === "string") return value.text;
 	if (typeof value.content === "string") return value.content;
 	if (Array.isArray(value.content)) return value.content.map((entry) => collectText(entry)).join("");
-	if (isRecord$4(value.message)) return collectText(value.message);
+	if (isRecord$5(value.message)) return collectText(value.message);
 	return "";
 }
 function pickSessionId(parsed, backend) {
@@ -30600,9 +30866,9 @@ function parseCliJson(raw, backend) {
 	} catch {
 		return null;
 	}
-	if (!isRecord$4(parsed)) return null;
+	if (!isRecord$5(parsed)) return null;
 	const sessionId = pickSessionId(parsed, backend);
-	const usage = isRecord$4(parsed.usage) ? toUsage(parsed.usage) : void 0;
+	const usage = isRecord$5(parsed.usage) ? toUsage(parsed.usage) : void 0;
 	return {
 		text: (collectText(parsed.message) || collectText(parsed.content) || collectText(parsed.result) || collectText(parsed)).trim(),
 		sessionId,
@@ -30622,11 +30888,11 @@ function parseCliJsonl(raw, backend) {
 		} catch {
 			continue;
 		}
-		if (!isRecord$4(parsed)) continue;
+		if (!isRecord$5(parsed)) continue;
 		if (!sessionId) sessionId = pickSessionId(parsed, backend);
 		if (!sessionId && typeof parsed.thread_id === "string") sessionId = parsed.thread_id.trim();
-		if (isRecord$4(parsed.usage)) usage = toUsage(parsed.usage) ?? usage;
-		const item = isRecord$4(parsed.item) ? parsed.item : null;
+		if (isRecord$5(parsed.usage)) usage = toUsage(parsed.usage) ?? usage;
+		const item = isRecord$5(parsed.item) ? parsed.item : null;
 		if (item && typeof item.text === "string") {
 			const type = typeof item.type === "string" ? item.type.toLowerCase() : "";
 			if (!type || type.includes("message")) texts.push(item.text);
@@ -30809,7 +31075,7 @@ function resolveRunWorkspaceDir(params) {
 
 //#endregion
 //#region src/agents/cli-runner.ts
-const log$17 = createSubsystemLogger("agent/claude-cli");
+const log$15 = createSubsystemLogger("agent/claude-cli");
 const CLI_ENV_AUTH_LOG_KEYS = [
 	"AI_GATEWAY_API_KEY",
 	"ANTHROPIC_API_KEY",
@@ -30859,7 +31125,7 @@ async function runCliAgent(params) {
 	const redactedSessionId = redactRunIdentifier(params.sessionId);
 	const redactedSessionKey = redactRunIdentifier(params.sessionKey);
 	const redactedWorkspace = redactRunIdentifier(resolvedWorkspace);
-	if (workspaceResolution.usedFallback) log$17.warn(`[workspace-fallback] caller=runCliAgent reason=${workspaceResolution.fallbackReason} run=${params.runId} session=${redactedSessionId} sessionKey=${redactedSessionKey} agent=${workspaceResolution.agentId} workspace=${redactedWorkspace}`);
+	if (workspaceResolution.usedFallback) log$15.warn(`[workspace-fallback] caller=runCliAgent reason=${workspaceResolution.fallbackReason} run=${params.runId} session=${redactedSessionId} sessionKey=${redactedSessionKey} agent=${workspaceResolution.agentId} workspace=${redactedWorkspace}`);
 	const workspaceDir = resolvedWorkspace;
 	const backendResolved = resolveCliBackendConfig(params.provider, params.config);
 	if (!backendResolved) throw new Error(`Unknown CLI backend: ${params.provider}`);
@@ -30876,7 +31142,7 @@ async function runCliAgent(params) {
 		sessionId: params.sessionId,
 		warn: makeBootstrapWarn({
 			sessionLabel,
-			warn: (message) => log$17.warn(message)
+			warn: (message) => log$15.warn(message)
 		})
 	});
 	const { defaultAgentId, sessionAgentId } = resolveSessionAgentIds({
@@ -30943,7 +31209,7 @@ async function runCliAgent(params) {
 	const queueKey = backend.serialize ?? true ? backendResolved.id : `${backendResolved.id}:${params.runId}`;
 	try {
 		const output = await enqueueCliRun(queueKey, async () => {
-			log$17.info(`cli exec: provider=${params.provider} model=${normalizedModel} promptChars=${params.prompt.length}`);
+			log$15.info(`cli exec: provider=${params.provider} model=${normalizedModel} promptChars=${params.prompt.length}`);
 			const logOutputText = isTruthyEnvValue(process.env.FASED_CLAUDE_CLI_LOG_OUTPUT);
 			const env = (() => {
 				const next = sanitizeHostExecEnv({ baseEnv: process.env });
@@ -30982,8 +31248,8 @@ async function runCliAgent(params) {
 					const promptIndex = logArgs.indexOf(argsPrompt);
 					if (promptIndex >= 0) logArgs[promptIndex] = `<prompt:${argsPrompt.length} chars>`;
 				}
-				log$17.info(`cli argv: ${backend.command} ${logArgs.join(" ")}`);
-				log$17.info(`cli env auth: ${buildCliEnvAuthLog(env)}`);
+				log$15.info(`cli argv: ${backend.command} ${logArgs.join(" ")}`);
+				log$15.info(`cli env auth: ${buildCliEnvAuthLog(env)}`);
 			}
 			const noOutputTimeoutMs = resolveCliNoOutputTimeoutMs({
 				backend,
@@ -31013,17 +31279,17 @@ async function runCliAgent(params) {
 			const stdout = result.stdout.trim();
 			const stderr = result.stderr.trim();
 			if (logOutputText) {
-				if (stdout) log$17.info(`cli stdout:\n${stdout}`);
-				if (stderr) log$17.info(`cli stderr:\n${stderr}`);
+				if (stdout) log$15.info(`cli stdout:\n${stdout}`);
+				if (stderr) log$15.info(`cli stderr:\n${stderr}`);
 			}
 			if (shouldLogVerbose()) {
-				if (stdout) log$17.debug(`cli stdout:\n${stdout}`);
-				if (stderr) log$17.debug(`cli stderr:\n${stderr}`);
+				if (stdout) log$15.debug(`cli stdout:\n${stdout}`);
+				if (stderr) log$15.debug(`cli stderr:\n${stderr}`);
 			}
 			if (result.exitCode !== 0 || result.reason !== "exit") {
 				if (result.reason === "no-output-timeout" || result.noOutputTimedOut) {
 					const timeoutReason = `CLI produced no output for ${Math.round(noOutputTimeoutMs / 1e3)}s and was terminated.`;
-					log$17.warn(`cli watchdog timeout: provider=${params.provider} model=${modelId} session=${cliSessionIdToSend ?? params.sessionId} noOutputTimeoutMs=${noOutputTimeoutMs} pid=${managedRun.pid ?? "unknown"}`);
+					log$15.warn(`cli watchdog timeout: provider=${params.provider} model=${modelId} session=${cliSessionIdToSend ?? params.sessionId} noOutputTimeoutMs=${noOutputTimeoutMs} pid=${managedRun.pid ?? "unknown"}`);
 					throw new FailoverError(timeoutReason, {
 						reason: "timeout",
 						provider: params.provider,
@@ -31207,11 +31473,11 @@ const DEFAULT_CATALOG_PATHS = [
 ];
 const ENV_CATALOG_PATHS = ["FASED_PLUGIN_CATALOG_PATHS", "FASED_MPM_CATALOG_PATHS"];
 function parseCatalogEntries(raw) {
-	if (Array.isArray(raw)) return raw.filter((entry) => isRecord$4(entry));
-	if (!isRecord$4(raw)) return [];
+	if (Array.isArray(raw)) return raw.filter((entry) => isRecord$5(entry));
+	if (!isRecord$5(raw)) return [];
 	const list = raw.entries ?? raw.packages ?? raw.plugins;
 	if (!Array.isArray(list)) return [];
-	return list.filter((entry) => isRecord$4(entry));
+	return list.filter((entry) => isRecord$5(entry));
 }
 function splitEnvPaths(value) {
 	const trimmed = value.trim();
@@ -31391,19 +31657,19 @@ function hasNonEmptyString(value) {
 	return typeof value === "string" && value.trim().length > 0;
 }
 function recordHasKeys(value) {
-	return isRecord$4(value) && Object.keys(value).length > 0;
+	return isRecord$5(value) && Object.keys(value).length > 0;
 }
 function accountsHaveKeys(value, keys) {
-	if (!isRecord$4(value)) return false;
+	if (!isRecord$5(value)) return false;
 	for (const account of Object.values(value)) {
-		if (!isRecord$4(account)) continue;
+		if (!isRecord$5(account)) continue;
 		for (const key of keys) if (hasNonEmptyString(account[key])) return true;
 	}
 	return false;
 }
 function resolveChannelConfig(cfg, channelId) {
 	const entry = cfg.channels?.[channelId];
-	return isRecord$4(entry) ? entry : null;
+	return isRecord$5(entry) ? entry : null;
 }
 const STRUCTURED_CHANNEL_CONFIG_SPECS = {
 	telegram: {
@@ -31515,19 +31781,19 @@ function collectModelRefs(cfg) {
 		if (!agent) return;
 		const model = agent.model;
 		if (typeof model === "string") pushModelRef(model);
-		else if (isRecord$4(model)) {
+		else if (isRecord$5(model)) {
 			pushModelRef(model.primary);
 			const fallbacks = model.fallbacks;
 			if (Array.isArray(fallbacks)) for (const entry of fallbacks) pushModelRef(entry);
 		}
 		const models = agent.models;
-		if (isRecord$4(models)) for (const key of Object.keys(models)) pushModelRef(key);
+		if (isRecord$5(models)) for (const key of Object.keys(models)) pushModelRef(key);
 	};
 	const defaults = cfg.agents?.defaults;
 	collectFromAgent(defaults);
 	const list = cfg.agents?.list;
 	if (Array.isArray(list)) {
-		for (const entry of list) if (isRecord$4(entry)) collectFromAgent(entry);
+		for (const entry of list) if (isRecord$5(entry)) collectFromAgent(entry);
 	}
 	return refs;
 }
@@ -31541,7 +31807,7 @@ function isProviderConfigured(cfg, providerId) {
 	const normalized = normalizeProviderId$1(providerId);
 	const profiles = cfg.auth?.profiles;
 	if (profiles && typeof profiles === "object") for (const profile of Object.values(profiles)) {
-		if (!isRecord$4(profile)) continue;
+		if (!isRecord$5(profile)) continue;
 		if (normalizeProviderId$1(String(profile.provider ?? "")) === normalized) return true;
 	}
 	const providerConfig = cfg.models?.providers;
@@ -33247,20 +33513,9 @@ async function handleGatewayPostJsonEndpoint(req, res, opts) {
 	return { body };
 }
 
-//#endregion
-//#region src/plugins/logger.ts
-function createPluginLoaderLogger(logger) {
-	return {
-		info: (msg) => logger.info(msg),
-		warn: (msg) => logger.warn(msg),
-		error: (msg) => logger.error(msg),
-		debug: (msg) => logger.debug?.(msg)
-	};
-}
-
 //#endregion
 //#region src/plugins/tools.ts
-const log$16 = createSubsystemLogger("plugins");
+const log$14 = createSubsystemLogger("plugins");
 const pluginToolMeta = /* @__PURE__ */ new WeakMap();
 function getPluginToolMeta(tool) {
 	return pluginToolMeta.get(tool);
@@ -33282,7 +33537,7 @@ function resolvePluginTools(params) {
 	const registry = loadFasedAgentPlugins({
 		config: effectiveConfig,
 		workspaceDir: params.context.workspaceDir,
-		logger: createPluginLoaderLogger(log$16)
+		logger: createPluginLoaderLogger(log$14)
 	});
 	const tools = [];
 	const existing = params.existingToolNames ?? /* @__PURE__ */ new Set();
@@ -33295,7 +33550,7 @@ function resolvePluginTools(params) {
 		if (existingNormalized.has(pluginIdKey)) {
 			const message = `plugin id conflicts with core tool name (${entry.pluginId})`;
 			if (!params.suppressNameConflicts) {
-				log$16.error(message);
+				log$14.error(message);
 				registry.diagnostics.push({
 					level: "error",
 					pluginId: entry.pluginId,
@@ -33310,7 +33565,7 @@ function resolvePluginTools(params) {
 		try {
 			resolved = entry.factory(params.context);
 		} catch (err) {
-			log$16.error(`plugin tool failed (${entry.pluginId}): ${String(err)}`);
+			log$14.error(`plugin tool failed (${entry.pluginId}): ${String(err)}`);
 			continue;
 		}
 		if (!resolved) continue;
@@ -33326,7 +33581,7 @@ function resolvePluginTools(params) {
 			if (nameSet.has(tool.name) || existing.has(tool.name)) {
 				const message = `plugin tool name conflict (${entry.pluginId}): ${tool.name}`;
 				if (!params.suppressNameConflicts) {
-					log$16.error(message);
+					log$14.error(message);
 					registry.diagnostics.push({
 						level: "error",
 						pluginId: entry.pluginId,
@@ -33708,7 +33963,7 @@ function isModuleNotFoundError(err) {
 }
 async function loadPwAiModule(mode) {
 	try {
-		return await import("./pw-ai-B0domrii.js");
+		return await import("./pw-ai-H7UgunQQ.js");
 	} catch (err) {
 		if (mode === "soft") return null;
 		if (isModuleNotFoundError(err)) return null;
@@ -34102,11 +34357,11 @@ function createProfileContext(opts, profile) {
 		const userDataDir = resolveFasedAgentUserDataDir(profile.name);
 		const profileState = getProfileState();
 		if (await isHttpReachable(300) && !profileState.running) try {
-			await (await import("./pw-ai-B0domrii.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-H7UgunQQ.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (profileState.running) await stopRunningBrowser();
 		try {
-			await (await import("./pw-ai-B0domrii.js")).closePlaywrightBrowserConnection();
+			await (await import("./pw-ai-H7UgunQQ.js")).closePlaywrightBrowserConnection();
 		} catch {}
 		if (!fs.existsSync(userDataDir)) return {
 			moved: false,
@@ -38372,7 +38627,7 @@ function coerceTrimmedString(raw) {
 }
 function coerceFailureAlert(raw) {
 	if (raw === false) return false;
-	if (!isRecord$4(raw)) return;
+	if (!isRecord$5(raw)) return;
 	const next = {};
 	const after = coercePositiveInteger(raw.after);
 	if (after !== void 0) next.after = after;
@@ -38395,7 +38650,7 @@ function coerceStringList(raw) {
 }
 function coerceWorkflowSubsteps(raw) {
 	if (!Array.isArray(raw)) return;
-	const substeps = raw.filter((entry) => isRecord$4(entry)).map((entry) => {
+	const substeps = raw.filter((entry) => isRecord$5(entry)).map((entry) => {
 		const id = coerceEnum(entry.id, [
 			"plan-analysis",
 			"execute-tool-or-model",
@@ -38419,11 +38674,11 @@ function coerceWorkflowSubsteps(raw) {
 	return substeps.length > 0 ? substeps : void 0;
 }
 function coerceWorkflowGraph(raw) {
-	if (!isRecord$4(raw)) return;
+	if (!isRecord$5(raw)) return;
 	const entryNodeId = coerceTrimmedString(raw.entryNodeId);
 	const terminalNodeIds = coerceStringList(raw.terminalNodeIds);
 	if (!entryNodeId || !terminalNodeIds) return;
-	const nodes = Array.isArray(raw.nodes) ? raw.nodes.filter((entry) => isRecord$4(entry)).map((entry) => {
+	const nodes = Array.isArray(raw.nodes) ? raw.nodes.filter((entry) => isRecord$5(entry)).map((entry) => {
 		const id = coerceTrimmedString(entry.id);
 		const label = coerceTrimmedString(entry.label);
 		const kind = coerceEnum(entry.kind, [
@@ -38509,15 +38764,15 @@ function coerceExecutionPolicy(policy) {
 		const allowedSkills = Array.from(new Set(policy.allowedSkills.filter((entry) => typeof entry === "string").map((entry) => entry.trim()).filter(Boolean)));
 		if (allowedSkills.length > 0) next.allowedSkills = allowedSkills;
 	}
-	if (isRecord$4(policy.skillAction)) {
+	if (isRecord$5(policy.skillAction)) {
 		const toolName = typeof policy.skillAction.toolName === "string" ? policy.skillAction.toolName.trim() : "";
 		if (toolName) {
 			const skillAction = { toolName };
-			if (isRecord$4(policy.skillAction.input)) skillAction.input = { ...policy.skillAction.input };
+			if (isRecord$5(policy.skillAction.input)) skillAction.input = { ...policy.skillAction.input };
 			next.skillAction = skillAction;
 		}
 	}
-	if (isRecord$4(policy.modelPolicy)) {
+	if (isRecord$5(policy.modelPolicy)) {
 		const modelPolicy = {};
 		const mode = coerceEnum(policy.modelPolicy.mode, [
 			"agent-default",
@@ -38544,7 +38799,7 @@ function coerceExecutionPolicy(policy) {
 		}
 		if (Object.keys(modelPolicy).length > 0) next.modelPolicy = modelPolicy;
 	}
-	if (isRecord$4(policy.coordination)) {
+	if (isRecord$5(policy.coordination)) {
 		const coordination = {};
 		const mode = coerceEnum(policy.coordination.mode, [
 			"none",
@@ -38565,7 +38820,7 @@ function coerceExecutionPolicy(policy) {
 		if (typeof policy.coordination.escalateWhenAdvisorsConflict === "boolean") coordination.escalateWhenAdvisorsConflict = policy.coordination.escalateWhenAdvisorsConflict;
 		if (Object.keys(coordination).length > 0) next.coordination = coordination;
 	}
-	if (isRecord$4(policy.budget)) {
+	if (isRecord$5(policy.budget)) {
 		const budget = {};
 		for (const field of [
 			"maxTokensPerRun",
@@ -38577,7 +38832,7 @@ function coerceExecutionPolicy(policy) {
 		}
 		if (Object.keys(budget).length > 0) next.budget = budget;
 	}
-	if (isRecord$4(policy.stop)) {
+	if (isRecord$5(policy.stop)) {
 		const stop = {};
 		if (typeof policy.stop.onSuccess === "boolean") stop.onSuccess = policy.stop.onSuccess;
 		if (Array.isArray(policy.stop.outputIncludes)) {
@@ -38590,7 +38845,7 @@ function coerceExecutionPolicy(policy) {
 		if (maxTotalRuns !== void 0) stop.maxTotalRuns = maxTotalRuns;
 		if (Object.keys(stop).length > 0) next.stop = stop;
 	}
-	if (isRecord$4(policy.evaluator)) {
+	if (isRecord$5(policy.evaluator)) {
 		const evaluator = {};
 		if (typeof policy.evaluator.escalateOnSignal === "boolean") evaluator.escalateOnSignal = policy.evaluator.escalateOnSignal;
 		if (Array.isArray(policy.evaluator.signalIncludes)) {
@@ -38601,7 +38856,7 @@ function coerceExecutionPolicy(policy) {
 		if (maxEscalations !== void 0) evaluator.maxEscalations = maxEscalations;
 		if (Object.keys(evaluator).length > 0) next.evaluator = evaluator;
 	}
-	if (isRecord$4(policy.repairPolicy)) {
+	if (isRecord$5(policy.repairPolicy)) {
 		const repairPolicy = {};
 		if (typeof policy.repairPolicy.autoRetryReplacement === "boolean") repairPolicy.autoRetryReplacement = policy.repairPolicy.autoRetryReplacement;
 		if (typeof policy.repairPolicy.autoStopOptionalSources === "boolean") repairPolicy.autoStopOptionalSources = policy.repairPolicy.autoStopOptionalSources;
@@ -38610,7 +38865,7 @@ function coerceExecutionPolicy(policy) {
 		if (typeof policy.repairPolicy.requireApprovalForPrimarySource === "boolean") repairPolicy.requireApprovalForPrimarySource = policy.repairPolicy.requireApprovalForPrimarySource;
 		if (Object.keys(repairPolicy).length > 0) next.repairPolicy = repairPolicy;
 	}
-	if (isRecord$4(policy.planner)) {
+	if (isRecord$5(policy.planner)) {
 		const strategy = coerceEnum(policy.planner.strategy, [
 			"agent-default",
 			"cheap-model",
@@ -38636,7 +38891,7 @@ function coerceExecutionPolicy(policy) {
 				if (signals.length > 0) planner.signals = signals;
 			}
 			if (Array.isArray(policy.planner.steps)) {
-				const steps = policy.planner.steps.filter((entry) => isRecord$4(entry)).map((entry) => {
+				const steps = policy.planner.steps.filter((entry) => isRecord$5(entry)).map((entry) => {
 					const id = coerceEnum(entry.id, [
 						"collect",
 						"analyze",
@@ -38670,8 +38925,8 @@ function coerceExecutionPolicy(policy) {
 	return Object.keys(next).length > 0 ? next : void 0;
 }
 function unwrapJob(raw) {
-	if (isRecord$4(raw.data)) return raw.data;
-	if (isRecord$4(raw.job)) return raw.job;
+	if (isRecord$5(raw.data)) return raw.data;
+	if (isRecord$5(raw.job)) return raw.job;
 	return raw;
 }
 function normalizeSessionTarget(raw) {
@@ -38718,7 +38973,7 @@ function stripLegacyTopLevelFields(next) {
 	delete next.provider;
 }
 function normalizeCronJobInput(raw, options = DEFAULT_OPTIONS$1) {
-	if (!isRecord$4(raw)) return null;
+	if (!isRecord$5(raw)) return null;
 	const base = unwrapJob(raw);
 	const next = { ...base };
 	if ("agentId" in base) {
@@ -38758,8 +39013,8 @@ function normalizeCronJobInput(raw, options = DEFAULT_OPTIONS$1) {
 		if (normalized) next.wakeMode = normalized;
 		else delete next.wakeMode;
 	}
-	if (isRecord$4(base.schedule)) next.schedule = coerceSchedule(base.schedule);
-	if (!("payload" in next) || !isRecord$4(next.payload)) {
+	if (isRecord$5(base.schedule)) next.schedule = coerceSchedule(base.schedule);
+	if (!("payload" in next) || !isRecord$5(next.payload)) {
 		const message = typeof next.message === "string" ? next.message.trim() : "";
 		const text = typeof next.text === "string" ? next.text.trim() : "";
 		if (message) next.payload = {
@@ -38771,21 +39026,21 @@ function normalizeCronJobInput(raw, options = DEFAULT_OPTIONS$1) {
 			text
 		};
 	}
-	if (isRecord$4(base.payload)) next.payload = coercePayload(base.payload);
-	if (isRecord$4(base.delivery)) next.delivery = coerceDelivery(base.delivery);
+	if (isRecord$5(base.payload)) next.payload = coercePayload(base.payload);
+	if (isRecord$5(base.delivery)) next.delivery = coerceDelivery(base.delivery);
 	if ("failureAlert" in base) {
 		const failureAlert = coerceFailureAlert(base.failureAlert);
 		if (failureAlert !== void 0) next.failureAlert = failureAlert;
 		else delete next.failureAlert;
 	}
 	if ("executionPolicy" in base) if (base.executionPolicy === null) next.executionPolicy = null;
-	else if (isRecord$4(base.executionPolicy)) {
+	else if (isRecord$5(base.executionPolicy)) {
 		const executionPolicy = coerceExecutionPolicy(base.executionPolicy);
 		if (executionPolicy) next.executionPolicy = executionPolicy;
 		else delete next.executionPolicy;
 	} else delete next.executionPolicy;
 	if ("isolation" in next) delete next.isolation;
-	const payload = isRecord$4(next.payload) ? next.payload : null;
+	const payload = isRecord$5(next.payload) ? next.payload : null;
 	if (payload && payload.kind === "agentTurn") {
 		copyTopLevelAgentTurnFields(next, payload);
 		copyTopLevelLegacyDeliveryFields(next, payload);
@@ -38794,7 +39049,7 @@ function normalizeCronJobInput(raw, options = DEFAULT_OPTIONS$1) {
 	if (options.applyDefaults) {
 		if (!next.wakeMode) next.wakeMode = "now";
 		if (typeof next.enabled !== "boolean") next.enabled = true;
-		if ((typeof next.name !== "string" || !next.name.trim()) && isRecord$4(next.schedule) && isRecord$4(next.payload)) next.name = inferLegacyName({
+		if ((typeof next.name !== "string" || !next.name.trim()) && isRecord$5(next.schedule) && isRecord$5(next.payload)) next.name = inferLegacyName({
 			schedule: next.schedule,
 			payload: next.payload
 		});
@@ -38802,13 +39057,13 @@ function normalizeCronJobInput(raw, options = DEFAULT_OPTIONS$1) {
 			const trimmed = next.name.trim();
 			if (trimmed) next.name = trimmed;
 		}
-		if (!next.sessionTarget && isRecord$4(next.payload)) {
+		if (!next.sessionTarget && isRecord$5(next.payload)) {
 			const kind = typeof next.payload.kind === "string" ? next.payload.kind : "";
 			if (kind === "systemEvent") next.sessionTarget = "main";
 			if (kind === "agentTurn") next.sessionTarget = "isolated";
 		}
-		if ("schedule" in next && isRecord$4(next.schedule) && next.schedule.kind === "at" && !("deleteAfterRun" in next)) next.deleteAfterRun = true;
-		if ("schedule" in next && isRecord$4(next.schedule) && next.schedule.kind === "cron") {
+		if ("schedule" in next && isRecord$5(next.schedule) && next.schedule.kind === "at" && !("deleteAfterRun" in next)) next.deleteAfterRun = true;
+		if ("schedule" in next && isRecord$5(next.schedule) && next.schedule.kind === "cron") {
 			const schedule = next.schedule;
 			const explicit = normalizeCronStaggerMs(schedule.staggerMs);
 			if (explicit !== void 0) schedule.staggerMs = explicit;
@@ -38817,7 +39072,7 @@ function normalizeCronJobInput(raw, options = DEFAULT_OPTIONS$1) {
 				if (defaultStaggerMs !== void 0) schedule.staggerMs = defaultStaggerMs;
 			}
 		}
-		const payload = isRecord$4(next.payload) ? next.payload : null;
+		const payload = isRecord$5(next.payload) ? next.payload : null;
 		const payloadKind = payload && typeof payload.kind === "string" ? payload.kind : "";
 		const sessionTarget = typeof next.sessionTarget === "string" ? next.sessionTarget : "";
 		const isIsolatedAgentTurn = sessionTarget === "isolated" || sessionTarget === "" && payloadKind === "agentTurn";
@@ -39096,7 +39351,7 @@ Use jobId as the canonical identifier; id is accepted for compatibility. Use con
 					}
 					if (opts?.agentSessionKey && job && typeof job === "object" && "payload" in job && job.payload?.kind === "agentTurn") {
 						const deliveryValue = job.delivery;
-						const delivery = isRecord$4(deliveryValue) ? deliveryValue : void 0;
+						const delivery = isRecord$5(deliveryValue) ? deliveryValue : void 0;
 						const mode = (typeof delivery?.mode === "string" ? delivery.mode : "").trim().toLowerCase();
 						if (mode === "webhook") {
 							const webhookUrl = normalizeHttpWebhookUrl(delivery?.to);
@@ -39774,7 +40029,7 @@ function collectEnabledInsecureOrDangerousFlags(cfg) {
 
 //#endregion
 //#region src/agents/tools/gateway-tool.ts
-const log$15 = createSubsystemLogger("gateway-tool");
+const log$13 = createSubsystemLogger("gateway-tool");
 const DEFAULT_UPDATE_TIMEOUT_MS = 20 * 6e4;
 function resolveBaseHashFromSnapshot(snapshot) {
 	if (!snapshot || typeof snapshot !== "object") return;
@@ -39804,19 +40059,19 @@ const ALLOWED_GATEWAY_CONFIG_PATHS = [
 	"channels.*.*.*.*.requireMention",
 	"channels.*.*.*.*.*.requireMention"
 ];
-function isRecord$2(value) {
+function isRecord$3(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function getSnapshotConfig(snapshot) {
-	if (!isRecord$2(snapshot)) throw new Error("config.get response is not an object.");
+	if (!isRecord$3(snapshot)) throw new Error("config.get response is not an object.");
 	const config = snapshot.config;
-	if (!isRecord$2(config)) throw new Error("config.get response is missing a config object.");
+	if (!isRecord$3(config)) throw new Error("config.get response is missing a config object.");
 	return config;
 }
 function parseGatewayConfigMutationRaw(raw, action) {
 	const parsed = parseConfigJson5(raw);
 	if (!parsed.ok) throw new Error(parsed.error);
-	if (!isRecord$2(parsed.parsed)) throw new Error(`${action} raw must be an object.`);
+	if (!isRecord$3(parsed.parsed)) throw new Error(`${action} raw must be an object.`);
 	return parsed.parsed;
 }
 function normalizeGatewayConfigPath(path) {
@@ -39830,7 +40085,7 @@ function readKeyedArrayEntries(list) {
 	let hasUnkeyedEntries = false;
 	const entries = /* @__PURE__ */ new Map();
 	for (const entry of list) {
-		if (!isRecord$2(entry) || typeof entry.id !== "string" || entry.id.length === 0) {
+		if (!isRecord$3(entry) || typeof entry.id !== "string" || entry.id.length === 0) {
 			hasUnkeyedEntries = true;
 			continue;
 		}
@@ -39861,7 +40116,7 @@ function collectConfigLeafPaths(value, basePath, out) {
 		if (canonicalPath) out.add(canonicalPath);
 		return;
 	}
-	if (!isRecord$2(value)) {
+	if (!isRecord$3(value)) {
 		if (canonicalPath) out.add(canonicalPath);
 		return;
 	}
@@ -39894,7 +40149,7 @@ function collectChangedConfigPaths(currentValue, nextValue, basePath = "", out =
 		for (const id of ids) collectChangedConfigPaths(currentEntries.entries.get(id), nextEntries.entries.get(id), `${basePath}[]`, out);
 		return out;
 	}
-	if (isRecord$2(currentValue) && isRecord$2(nextValue)) {
+	if (isRecord$3(currentValue) && isRecord$3(nextValue)) {
 		const keys = new Set([...Object.keys(currentValue), ...Object.keys(nextValue)]);
 		for (const key of keys) collectChangedConfigPaths(currentValue[key], nextValue[key], basePath ? `${basePath}.${key}` : key, out);
 		return out;
@@ -39981,7 +40236,7 @@ function createGatewayTool(opts) {
 				try {
 					await writeRestartSentinel(payload);
 				} catch {}
-				log$15.info(`gateway tool: restart requested (delayMs=${delayMs ?? "default"}, reason=${reason ?? "none"})`);
+				log$13.info(`gateway tool: restart requested (delayMs=${delayMs ?? "default"}, reason=${reason ?? "none"})`);
 				return jsonResult(scheduleGatewaySigusr1Restart({
 					delayMs,
 					reason
@@ -40135,11 +40390,11 @@ async function minimaxUnderstandImage(params) {
 		throw new Error(`MiniMax VLM request failed (${res.status} ${res.statusText}).${trace}${body ? ` Body: ${body.slice(0, 400)}` : ""}`);
 	}
 	const json = await res.json().catch(() => null);
-	if (!isRecord$4(json)) {
+	if (!isRecord$5(json)) {
 		const trace = traceId ? ` Trace-Id: ${traceId}` : "";
 		throw new Error(`MiniMax VLM response was not JSON.${trace}`);
 	}
-	const baseResp = isRecord$4(json.base_resp) ? json.base_resp : {};
+	const baseResp = isRecord$5(json.base_resp) ? json.base_resp : {};
 	const code = typeof baseResp.status_code === "number" ? baseResp.status_code : -1;
 	if (code !== 0) {
 		const msg = (baseResp.status_msg ?? "").trim();
@@ -49622,7 +49877,7 @@ function collectUsageCandidates(root) {
 		const next = queue.shift();
 		scanned += 1;
 		const { value, depth } = next;
-		if (isRecord$4(value)) {
+		if (isRecord$5(value)) {
 			if (seen.has(value)) continue;
 			seen.add(value);
 			const score = scoreUsageRecord(value);
@@ -49632,7 +49887,7 @@ function collectUsageCandidates(root) {
 				depth
 			});
 			if (depth < MAX_SCAN_DEPTH) {
-				for (const nested of Object.values(value)) if (isRecord$4(nested) || Array.isArray(nested)) queue.push({
+				for (const nested of Object.values(value)) if (isRecord$5(nested) || Array.isArray(nested)) queue.push({
 					value: nested,
 					depth: depth + 1
 				});
@@ -49640,7 +49895,7 @@ function collectUsageCandidates(root) {
 			continue;
 		}
 		if (Array.isArray(value) && depth < MAX_SCAN_DEPTH) {
-			for (const nested of value) if (isRecord$4(nested) || Array.isArray(nested)) queue.push({
+			for (const nested of value) if (isRecord$5(nested) || Array.isArray(nested)) queue.push({
 				value: nested,
 				depth: depth + 1
 			});
@@ -49684,20 +49939,20 @@ async function fetchMinimaxUsage(apiKey, timeoutMs, fetchFn) {
 		status: res.status
 	});
 	const data = await res.json().catch(() => null);
-	if (!isRecord$4(data)) return {
+	if (!isRecord$5(data)) return {
 		provider: "minimax",
 		displayName: PROVIDER_LABELS.minimax,
 		windows: [],
 		error: "Invalid JSON"
 	};
-	const baseResp = isRecord$4(data.base_resp) ? data.base_resp : void 0;
+	const baseResp = isRecord$5(data.base_resp) ? data.base_resp : void 0;
 	if (baseResp && typeof baseResp.status_code === "number" && baseResp.status_code !== 0) return {
 		provider: "minimax",
 		displayName: PROVIDER_LABELS.minimax,
 		windows: [],
 		error: baseResp.status_msg?.trim() || "API error"
 	};
-	const payload = isRecord$4(data.data) ? data.data : data;
+	const payload = isRecord$5(data.data) ? data.data : data;
 	const candidates = collectUsageCandidates(payload);
 	let usageRecord = payload;
 	let usedPercent = null;
@@ -50762,7 +51017,7 @@ async function resolveAnnounceTarget(params) {
 
 //#endregion
 //#region src/agents/tools/sessions-send-tool.a2a.ts
-const log$14 = createSubsystemLogger("agents/sessions-send");
+const log$12 = createSubsystemLogger("agents/sessions-send");
 const defaultDeps$1 = { callGateway };
 let deps$1 = defaultDeps$1;
 async function runSessionsSendA2AFlow(params) {
@@ -50856,7 +51111,7 @@ async function runSessionsSendA2AFlow(params) {
 				timeoutMs: 1e4
 			});
 		} catch (err) {
-			log$14.warn("sessions_send announce delivery failed", {
+			log$12.warn("sessions_send announce delivery failed", {
 				runId: runContextId,
 				channel: announceTarget.channel,
 				to: announceTarget.to,
@@ -50864,7 +51119,7 @@ async function runSessionsSendA2AFlow(params) {
 			});
 		}
 	} catch (err) {
-		log$14.warn("sessions_send announce flow failed", {
+		log$12.warn("sessions_send announce flow failed", {
 			runId: runContextId,
 			error: formatErrorMessage(err)
 		});
@@ -51293,7 +51548,7 @@ function normalizeChannelId(value) {
 function normalizeOptionalString$2(value) {
 	return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
-function normalizeBoolean$1(value) {
+function normalizeBoolean(value) {
 	if (typeof value !== "boolean") return;
 	return value;
 }
@@ -51329,13 +51584,13 @@ function resolveThreadBindingSpawnPolicy(params) {
 		channel,
 		accountId
 	});
-	const enabled = normalizeBoolean$1(account?.enabled) ?? normalizeBoolean$1(root?.enabled) ?? normalizeBoolean$1(params.cfg.session?.threadBindings?.enabled) ?? true;
+	const enabled = normalizeBoolean(account?.enabled) ?? normalizeBoolean(root?.enabled) ?? normalizeBoolean(params.cfg.session?.threadBindings?.enabled) ?? true;
 	const spawnFlagKey = resolveSpawnFlagKey(params.kind);
 	return {
 		channel,
 		accountId,
 		enabled,
-		spawnEnabled: normalizeBoolean$1(account?.[spawnFlagKey]) ?? normalizeBoolean$1(root?.[spawnFlagKey]) ?? channel !== DISCORD_THREAD_BINDING_CHANNEL
+		spawnEnabled: normalizeBoolean(account?.[spawnFlagKey]) ?? normalizeBoolean(root?.[spawnFlagKey]) ?? channel !== DISCORD_THREAD_BINDING_CHANNEL
 	};
 }
 function stripKnownTargetPrefix(value) {
@@ -60231,14 +60486,14 @@ const FASED_CLI_ENV_VALUE = "1";
 
 //#endregion
 //#region src/agents/sandbox/registry.ts
-function isRecord$1(value) {
+function isRecord$2(value) {
 	return Boolean(value) && typeof value === "object";
 }
 function isRegistryEntry(value) {
-	return isRecord$1(value) && typeof value.containerName === "string";
+	return isRecord$2(value) && typeof value.containerName === "string";
 }
 function isRegistryFile(value) {
-	if (!isRecord$1(value)) return false;
+	if (!isRecord$2(value)) return false;
 	const maybeEntries = value.entries;
 	return Array.isArray(maybeEntries) && maybeEntries.every(isRegistryEntry);
 }
@@ -60669,7 +60924,7 @@ function execDockerRaw(args, opts) {
 		else stdin.end();
 	});
 }
-const log$13 = createSubsystemLogger("docker");
+const log$11 = createSubsystemLogger("docker");
 const HOT_CONTAINER_WINDOW_MS = 300 * 1e3;
 async function execDocker(args, opts) {
 	const result = await execDockerRaw(args, opts);
@@ -60797,8 +61052,8 @@ function buildSandboxCreateArgs(params) {
 	if (params.cfg.network) args.push("--network", params.cfg.network);
 	if (params.cfg.user) args.push("--user", params.cfg.user);
 	const envSanitization = sanitizeEnvVars(params.cfg.env ?? {}, params.envSanitizationOptions);
-	if (envSanitization.blocked.length > 0) log$13.warn(`Blocked sensitive environment variables: ${envSanitization.blocked.join(", ")}`);
-	if (envSanitization.warnings.length > 0) log$13.warn(`Suspicious environment variables: ${envSanitization.warnings.join(", ")}`);
+	if (envSanitization.blocked.length > 0) log$11.warn(`Blocked sensitive environment variables: ${envSanitization.blocked.join(", ")}`);
+	if (envSanitization.warnings.length > 0) log$11.warn(`Suspicious environment variables: ${envSanitization.warnings.join(", ")}`);
 	for (const [key, value] of Object.entries(envSanitization.allowed)) args.push("--env", `${key}=${value}`);
 	if (!Object.hasOwn(envSanitization.allowed, "FASED_CLI")) args.push("--env", `FASED_CLI=${FASED_CLI_ENV_VALUE}`);
 	for (const cap of params.cfg.capDrop) args.push("--cap-drop", cap);
@@ -61850,7 +62105,7 @@ function stableStringify$1(value) {
 
 //#endregion
 //#region src/agents/pi-embedded-helpers/errors.ts
-const log$12 = createSubsystemLogger("errors");
+const log$10 = createSubsystemLogger("errors");
 function formatBillingErrorMessage(provider, model) {
 	const providerName = provider?.trim();
 	const modelName = model?.trim();
@@ -62145,7 +62400,7 @@ function formatAssistantErrorText(msg, opts) {
 	if (isTimeoutErrorMessage(raw)) return "LLM request timed out.";
 	if (isBillingErrorMessage(raw)) return formatBillingErrorMessage(opts?.provider, opts?.model ?? msg.model);
 	if (isLikelyHttpErrorText(raw) || isRawApiErrorPayload(raw)) return formatRawAssistantErrorForUi(raw);
-	if (raw.length > 600) log$12.warn(`Long error truncated: ${raw.slice(0, 200)}`);
+	if (raw.length > 600) log$10.warn(`Long error truncated: ${raw.slice(0, 200)}`);
 	return raw.length > 600 ? `${raw.slice(0, 600)}…` : raw;
 }
 function sanitizeUserFacingText(text, opts) {
@@ -68910,19 +69165,19 @@ function toAcpRuntimeErrorText(params) {
 
 //#endregion
 //#region src/auto-reply/reply/commands-acp/context.ts
-function normalizeString$1(value) {
+function normalizeString(value) {
 	if (typeof value === "string") return value.trim();
 	if (typeof value === "number" || typeof value === "bigint" || typeof value === "boolean") return `${value}`.trim();
 	return "";
 }
 function resolveAcpCommandChannel(params) {
-	return normalizeString$1(params.ctx.OriginatingChannel ?? params.command.channel ?? params.ctx.Surface ?? params.ctx.Provider).toLowerCase();
+	return normalizeString(params.ctx.OriginatingChannel ?? params.command.channel ?? params.ctx.Surface ?? params.ctx.Provider).toLowerCase();
 }
 function resolveAcpCommandAccountId(params) {
-	return normalizeString$1(params.ctx.AccountId) || "default";
+	return normalizeString(params.ctx.AccountId) || "default";
 }
 function resolveAcpCommandThreadId(params) {
-	return (params.ctx.MessageThreadId != null ? normalizeString$1(String(params.ctx.MessageThreadId)) : "") || void 0;
+	return (params.ctx.MessageThreadId != null ? normalizeString(String(params.ctx.MessageThreadId)) : "") || void 0;
 }
 function resolveAcpCommandConversationId(params) {
 	return resolveConversationIdFromTargets({
@@ -70567,7 +70822,7 @@ async function resolveSlackNames(params) {
 	});
 	const token = account.config.userToken?.trim() || account.botToken?.trim();
 	if (!token) return /* @__PURE__ */ new Map();
-	const { resolveSlackUserAllowlist } = await import("./resolve-users-Cxb5wpAQ.js").then((n) => n.n);
+	const { resolveSlackUserAllowlist } = await import("./resolve-users-DN9VQBwv.js").then((n) => n.n);
 	return mapResolvedAllowlistNames(await resolveSlackUserAllowlist({
 		token,
 		entries: params.entries
@@ -80857,7 +81112,7 @@ function wrapToolWithAbortSignal(tool, abortSignal) {
 
 //#endregion
 //#region src/agents/pi-tools.before-tool-call.ts
-const log$11 = createSubsystemLogger("agents/tools");
+const log$9 = createSubsystemLogger("agents/tools");
 const BEFORE_TOOL_CALL_WRAPPED = Symbol("beforeToolCallWrapped");
 const adjustedParamsByToolCallId = /* @__PURE__ */ new Map();
 const MAX_TRACKED_ADJUSTED_PARAMS = 1024;
@@ -80891,7 +81146,7 @@ async function recordLoopOutcome(args) {
 			config: args.ctx.loopDetection
 		});
 	} catch (err) {
-		log$11.warn(`tool loop outcome tracking failed: tool=${args.toolName} error=${String(err)}`);
+		log$9.warn(`tool loop outcome tracking failed: tool=${args.toolName} error=${String(err)}`);
 	}
 }
 async function runBeforeToolCallHook(args) {
@@ -80908,7 +81163,7 @@ async function runBeforeToolCallHook(args) {
 		const loopResult = detectToolCallLoop(sessionState, toolName, params, args.ctx.loopDetection);
 		if (loopResult.stuck) {
 			if (loopResult.level === "critical") {
-				log$11.error(`Blocking ${toolName} due to critical loop: ${loopResult.message}`);
+				log$9.error(`Blocking ${toolName} due to critical loop: ${loopResult.message}`);
 				logToolLoopAction({
 					sessionKey: args.ctx.sessionKey,
 					sessionId: args.ctx?.agentId,
@@ -80925,7 +81180,7 @@ async function runBeforeToolCallHook(args) {
 					reason: loopResult.message
 				};
 			} else if (shouldEmitLoopWarning(sessionState, loopResult.warningKey ?? `${loopResult.detector}:${toolName}`, loopResult.count)) {
-				log$11.warn(`Loop warning for ${toolName}: ${loopResult.message}`);
+				log$9.warn(`Loop warning for ${toolName}: ${loopResult.message}`);
 				logToolLoopAction({
 					sessionKey: args.ctx.sessionKey,
 					sessionId: args.ctx?.agentId,
@@ -80975,7 +81230,7 @@ async function runBeforeToolCallHook(args) {
 		}
 	} catch (err) {
 		const toolCallId = args.toolCallId ? ` toolCallId=${args.toolCallId}` : "";
-		log$11.warn(`before_tool_call hook failed: tool=${toolName}${toolCallId} error=${String(err)}`);
+		log$9.warn(`before_tool_call hook failed: tool=${toolName}${toolCallId} error=${String(err)}`);
 	}
 	return {
 		blocked: false,
@@ -84293,7 +84548,7 @@ const handleSessionCommand = async (params, allowTextCommands) => {
 			reply: { text: resolveSessionCommandUsage() }
 		};
 	}
-	const { setThreadBindingIdleTimeoutBySessionKey, setThreadBindingMaxAgeBySessionKey } = await import("./thread-bindings.lifecycle-DU4iX_Jr.js").then((n) => n.i);
+	const { setThreadBindingIdleTimeoutBySessionKey, setThreadBindingMaxAgeBySessionKey } = await import("./thread-bindings.lifecycle-tHK_1mvp.js").then((n) => n.i);
 	const updatedBindings = action === SESSION_ACTION_IDLE ? setThreadBindingIdleTimeoutBySessionKey({
 		targetSessionKey: binding.targetSessionKey,
 		accountId,
@@ -85508,7 +85763,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./config-Bt5GhnA-.js").then((n) => n.yn);
+		const { ensureAuthProfileStore } = await import("./config-Dbxj_jUP.js").then((n) => n.yn);
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId$1(provider);
 		if (!profile || normalizeProviderId$1(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -90759,7 +91014,7 @@ async function applyResetModelOverride(params) {
 //#endregion
 //#region src/infra/session-maintenance-warning.ts
 const warnedContexts = /* @__PURE__ */ new Map();
-const log$10 = createSubsystemLogger("session-maintenance-warning");
+const log$8 = createSubsystemLogger("session-maintenance-warning");
 function shouldSendWarning() {
 	return !process.env.VITEST && true;
 }
@@ -90830,14 +91085,14 @@ async function deliverSessionMaintenanceWarning(params) {
 			session: outboundSession
 		});
 	} catch (err) {
-		log$10.warn(`Failed to deliver session maintenance warning: ${String(err)}`);
+		log$8.warn(`Failed to deliver session maintenance warning: ${String(err)}`);
 		enqueueSystemEvent(text, { sessionKey: params.sessionKey });
 	}
 }
 
 //#endregion
 //#region src/auto-reply/reply/session.ts
-const log$9 = createSubsystemLogger("session-init");
+const log$7 = createSubsystemLogger("session-init");
 function resolveActiveNamedSessionKey(params) {
 	const baseSessionKey = params.baseSessionKey.trim().toLowerCase();
 	if (!baseSessionKey) return params.baseSessionKey;
@@ -91115,10 +91370,10 @@ async function initSessionState(params) {
 	if (parentSessionKey && parentSessionKey !== sessionKey && sessionStore[parentSessionKey] && !alreadyForked) {
 		const parentTokens = sessionStore[parentSessionKey].totalTokens ?? 0;
 		if (parentForkMaxTokens > 0 && parentTokens > parentForkMaxTokens) {
-			log$9.warn(`skipping parent fork (parent too large): parentKey=${parentSessionKey} → sessionKey=${sessionKey} parentTokens=${parentTokens} maxTokens=${parentForkMaxTokens}`);
+			log$7.warn(`skipping parent fork (parent too large): parentKey=${parentSessionKey} → sessionKey=${sessionKey} parentTokens=${parentTokens} maxTokens=${parentForkMaxTokens}`);
 			sessionEntry.forkedFromParent = true;
 		} else {
-			log$9.warn(`forking from parent session: parentKey=${parentSessionKey} → sessionKey=${sessionKey} parentTokens=${parentTokens}`);
+			log$7.warn(`forking from parent session: parentKey=${parentSessionKey} → sessionKey=${sessionKey} parentTokens=${parentTokens}`);
 			const forked = forkSessionFromParent({
 				parentEntry: sessionStore[parentSessionKey],
 				agentId,
@@ -91129,7 +91384,7 @@ async function initSessionState(params) {
 				sessionEntry.sessionId = forked.sessionId;
 				sessionEntry.sessionFile = forked.sessionFile;
 				sessionEntry.forkedFromParent = true;
-				log$9.warn(`forked session created: file=${forked.sessionFile}`);
+				log$7.warn(`forked session created: file=${forked.sessionFile}`);
 			}
 		}
 	}
@@ -93579,7 +93834,7 @@ const discordMessageActions = {
 		return null;
 	},
 	handleAction: async ({ action, params, cfg, accountId, requesterSenderId, toolContext, mediaLocalRoots }) => {
-		const { handleDiscordMessageAction } = await import("./handle-action-DbzZFYnG.js");
+		const { handleDiscordMessageAction } = await import("./handle-action-BSNDD2Vc.js");
 		return await handleDiscordMessageAction({
 			action,
 			params,
@@ -93816,7 +94071,7 @@ const signalMessageActions = {
 //#region src/channels/plugins/actions/telegram.ts
 const providerId = "telegram";
 async function loadTelegramActionHandler() {
-	const { handleTelegramAction } = await import("./telegram-actions-CwYjV6Db.js");
+	const { handleTelegramAction } = await import("./telegram-actions-CM8SJgc9.js");
 	return handleTelegramAction;
 }
 function readTelegramSendParams(params) {
@@ -93986,7 +94241,7 @@ function createWhatsAppLoginTool() {
 			force: Type.Optional(Type.Boolean())
 		}),
 		execute: async (_toolCallId, args) => {
-			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-CbHL5ayf.js");
+			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-CJB2zjmM.js");
 			if ((args?.action ?? "start") === "wait") {
 				const result = await waitForWebLogin({ timeoutMs: typeof args.timeoutMs === "number" ? args.timeoutMs : void 0 });
 				return {
@@ -96226,7 +96481,7 @@ function buildPairingReply(params) {
 
 //#endregion
 //#region src/brand.ts
-const FASED_PRODUCT_VERSION = "0.1.56";
+const FASED_PRODUCT_VERSION = "0.1.57";
 const FASED_DISPLAY_VERSION = `v${FASED_PRODUCT_VERSION}`;
 
 //#endregion
@@ -96830,7 +97085,7 @@ function describeIMessageEchoDropLog(params) {
 
 //#endregion
 //#region src/imessage/monitor/parse-notification.ts
-function isRecord(value) {
+function isRecord$1(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function isOptionalString(value) {
@@ -96852,14 +97107,14 @@ function isOptionalAttachments(value) {
 	if (value === void 0 || value === null) return true;
 	if (!Array.isArray(value)) return false;
 	return value.every((attachment) => {
-		if (!isRecord(attachment)) return false;
+		if (!isRecord$1(attachment)) return false;
 		return isOptionalString(attachment.original_path) && isOptionalString(attachment.mime_type) && isOptionalBoolean(attachment.missing);
 	});
 }
 function parseIMessageNotification(raw) {
-	if (!isRecord(raw)) return null;
+	if (!isRecord$1(raw)) return null;
 	const maybeMessage = raw.message;
-	if (!isRecord(maybeMessage)) return null;
+	if (!isRecord$1(maybeMessage)) return null;
 	const message = maybeMessage;
 	if (!isOptionalNumber(message.id) || !isOptionalNumber(message.chat_id) || !isOptionalString(message.sender) || !isOptionalBoolean(message.is_from_me) || !isOptionalString(message.text) || !isOptionalStringOrNumber(message.reply_to_id) || !isOptionalString(message.reply_to_text) || !isOptionalString(message.reply_to_sender) || !isOptionalString(message.created_at) || !isOptionalAttachments(message.attachments) || !isOptionalString(message.chat_identifier) || !isOptionalString(message.chat_guid) || !isOptionalString(message.chat_name) || !isOptionalStringArray(message.participants) || !isOptionalBoolean(message.is_group)) return null;
 	return message;
@@ -100007,8 +100262,8 @@ async function auditTelegramGroupMembership(params) {
 	for (const chatId of params.groupIds) try {
 		const res = await fetchWithTimeout(`${base}/getChatMember?chat_id=${encodeURIComponent(chatId)}&user_id=${encodeURIComponent(String(params.botId))}`, {}, params.timeoutMs, fetcher);
 		const json = await res.json();
-		if (!res.ok || !isRecord$4(json) || !json.ok) {
-			const desc = isRecord$4(json) && !json.ok && typeof json.description === "string" ? json.description : `getChatMember failed (${res.status})`;
+		if (!res.ok || !isRecord$5(json) || !json.ok) {
+			const desc = isRecord$5(json) && !json.ok && typeof json.description === "string" ? json.description : `getChatMember failed (${res.status})`;
 			groups.push({
 				chatId,
 				ok: false,
@@ -100019,7 +100274,7 @@ async function auditTelegramGroupMembership(params) {
 			});
 			continue;
 		}
-		const status = isRecord$4(json.result) ? json.result.status ?? null : null;
+		const status = isRecord$5(json.result) ? json.result.status ?? null : null;
 		const ok = status === "creator" || status === "administrator" || status === "member";
 		groups.push({
 			chatId,
@@ -100105,7 +100360,7 @@ const handleWhatsAppActionLazy = async (...args) => {
 	return handleWhatsAppAction(...args);
 };
 const auditDiscordChannelPermissionsLazy = async (...args) => {
-	const { auditDiscordChannelPermissions } = await import("./audit-CWknklvI.js").then((n) => n.t);
+	const { auditDiscordChannelPermissions } = await import("./audit-JImYFOzJ.js").then((n) => n.t);
 	return auditDiscordChannelPermissions(...args);
 };
 const listDiscordDirectoryGroupsLiveLazy = async (...args) => {
@@ -100129,15 +100384,15 @@ const resolveDiscordUserAllowlistLazy = async (...args) => {
 	return resolveDiscordUserAllowlist(...args);
 };
 const sendMessageDiscordLazy = async (...args) => {
-	const { sendMessageDiscord } = await import("./send-BQUtCJFW.js").then((n) => n.t);
+	const { sendMessageDiscord } = await import("./send-BCJ4hi3t.js").then((n) => n.t);
 	return sendMessageDiscord(...args);
 };
 const sendPollDiscordLazy = async (...args) => {
-	const { sendPollDiscord } = await import("./send-BQUtCJFW.js").then((n) => n.t);
+	const { sendPollDiscord } = await import("./send-BCJ4hi3t.js").then((n) => n.t);
 	return sendPollDiscord(...args);
 };
 const monitorDiscordProviderLazy = async (...args) => {
-	const { monitorDiscordProvider } = await import("./monitor-CmwGqNyV.js");
+	const { monitorDiscordProvider } = await import("./monitor-BYGbTI5V.js");
 	return monitorDiscordProvider(...args);
 };
 const listSlackDirectoryGroupsLiveLazy = async (...args) => {
@@ -100149,27 +100404,27 @@ const listSlackDirectoryPeersLiveLazy = async (...args) => {
 	return listSlackDirectoryPeersLive(...args);
 };
 const probeSlackLazy = async (...args) => {
-	const { probeSlack } = await import("./probe-xY3Ky0Tx.js");
+	const { probeSlack } = await import("./probe-CJb5uR8B.js");
 	return probeSlack(...args);
 };
 const resolveSlackChannelAllowlistLazy = async (...args) => {
-	const { resolveSlackChannelAllowlist } = await import("./resolve-channels-CwB2_019.js");
+	const { resolveSlackChannelAllowlist } = await import("./resolve-channels-_-nV-EK2.js").then((n) => n.n);
 	return resolveSlackChannelAllowlist(...args);
 };
 const resolveSlackUserAllowlistLazy = async (...args) => {
-	const { resolveSlackUserAllowlist } = await import("./resolve-users-Cxb5wpAQ.js").then((n) => n.n);
+	const { resolveSlackUserAllowlist } = await import("./resolve-users-DN9VQBwv.js").then((n) => n.n);
 	return resolveSlackUserAllowlist(...args);
 };
 const sendMessageSlackLazy = async (...args) => {
-	const { sendMessageSlack } = await import("./send-2VcOMTN5.js").then((n) => n.n);
+	const { sendMessageSlack } = await import("./send-CPK_HlYW.js").then((n) => n.n);
 	return sendMessageSlack(...args);
 };
 const monitorSlackProviderLazy = async (...args) => {
-	const { monitorSlackProvider } = await import("./slack-BouRQG-W.js");
+	const { monitorSlackProvider } = await import("./slack-B70NHpMF.js");
 	return monitorSlackProvider(...args);
 };
 const handleSlackActionLazy = async (...args) => {
-	const { handleSlackAction } = await import("./slack-actions-CasHVtiq.js");
+	const { handleSlackAction } = await import("./slack-actions-fSmP981b.js");
 	return handleSlackAction(...args);
 };
 const probeTelegramLazy = async (...args) => {
@@ -100177,15 +100432,15 @@ const probeTelegramLazy = async (...args) => {
 	return probeTelegram(...args);
 };
 const sendMessageTelegramLazy = async (...args) => {
-	const { sendMessageTelegram } = await import("./send-Dqes9tdU.js").then((n) => n.c);
+	const { sendMessageTelegram } = await import("./send-hSu1HWms.js").then((n) => n.c);
 	return sendMessageTelegram(...args);
 };
 const sendPollTelegramLazy = async (...args) => {
-	const { sendPollTelegram } = await import("./send-Dqes9tdU.js").then((n) => n.c);
+	const { sendPollTelegram } = await import("./send-hSu1HWms.js").then((n) => n.c);
 	return sendPollTelegram(...args);
 };
 const monitorTelegramProviderLazy = async (...args) => {
-	const { monitorTelegramProvider } = await import("./monitor-CZrN9pev.js");
+	const { monitorTelegramProvider } = await import("./monitor-BJs6z7AT.js");
 	return monitorTelegramProvider(...args);
 };
 let webOutboundPromise = null;
@@ -100194,23 +100449,23 @@ let webLoginQrPromise = null;
 let webChannelPromise = null;
 let whatsappActionsPromise = null;
 function loadWebOutbound() {
-	webOutboundPromise ??= import("./outbound-0oN9IfNw.js").then((n) => n.t);
+	webOutboundPromise ??= import("./outbound-CIemga5_.js").then((n) => n.t);
 	return webOutboundPromise;
 }
 function loadWebLogin() {
-	webLoginPromise ??= import("./login-DJuHYDiK.js").then((n) => n.n);
+	webLoginPromise ??= import("./login-CWXvFTd8.js").then((n) => n.n);
 	return webLoginPromise;
 }
 function loadWebLoginQr() {
-	webLoginQrPromise ??= import("./login-qr-CbHL5ayf.js");
+	webLoginQrPromise ??= import("./login-qr-CJB2zjmM.js");
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-D0yENDve.js");
+	webChannelPromise ??= import("./web-BFolfZ3i.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
-	whatsappActionsPromise ??= import("./whatsapp-actions-BT2nPLyo.js");
+	whatsappActionsPromise ??= import("./whatsapp-actions-CYmleHCz.js");
 	return whatsappActionsPromise;
 }
 function createPluginRuntime(options = {}) {
@@ -101056,467 +101311,567 @@ function safeRealpathOrResolve(value) {
 }
 
 //#endregion
-//#region src/plugins/providers.ts
-const log$8 = createSubsystemLogger("plugins");
-function resolvePluginProviders(params) {
-	return loadFasedAgentPlugins({
-		config: params.config,
-		workspaceDir: params.workspaceDir,
-		logger: createPluginLoaderLogger(log$8)
-	}).providers.map((entry) => entry.provider);
+//#region src/plugins/status.ts
+const log$6 = createSubsystemLogger("plugins");
+function buildPluginStatusReport(params) {
+	const config = params?.config ?? loadConfig();
+	const workspaceDir = params?.workspaceDir ? params.workspaceDir : resolveAgentWorkspaceDir(config, resolveDefaultAgentId(config)) ?? resolveDefaultAgentWorkspaceDir();
+	return {
+		workspaceDir,
+		...loadFasedAgentPlugins({
+			config,
+			workspaceDir,
+			logger: createPluginLoaderLogger(log$6)
+		})
+	};
 }
 
 //#endregion
-//#region src/plugins/provider-runtime.runtime.ts
-const log$7 = createSubsystemLogger("provider-runtime");
-function mergeProviders(target, providers) {
-	for (const [providerId, providerConfig] of Object.entries(providers)) target[providerId] = providerConfig;
-}
-function staticAuthContext() {
+//#region src/plugins/lifecycle.ts
+function applySlotSelectionForPlugin(config, pluginId) {
+	const report = buildPluginStatusReport({ config });
+	const plugin = (report.plugins ?? []).find((entry) => entry.id === pluginId);
+	if (!plugin) return {
+		config,
+		warnings: []
+	};
+	const result = applyExclusiveSlotSelection({
+		config,
+		selectedId: plugin.id,
+		selectedKind: plugin.kind,
+		registry: report
+	});
 	return {
-		resolveProviderApiKey: () => ({ apiKey: void 0 }),
-		resolveProviderAuth: () => ({
-			apiKey: void 0,
-			discoveryApiKey: void 0,
-			mode: "none",
-			source: "none"
-		})
+		config: result.config,
+		warnings: result.warnings
 	};
 }
-async function resolveProviderStaticCatalog(params) {
-	if (!params.provider.staticCatalog) return {};
-	const result = await runProviderStaticCatalog({
-		provider: params.provider,
-		config: params.config,
-		agentDir: params.agentDir,
-		workspaceDir: params.workspaceDir,
-		env: params.env,
-		...staticAuthContext()
-	});
-	return normalizePluginDiscoveryResult({
-		provider: params.provider,
-		result
-	});
+function addPluginLoadPath(cfg, pluginPath) {
+	const existing = cfg.plugins?.load?.paths ?? [];
+	const merged = Array.from(new Set([...existing, pluginPath]));
+	return {
+		...cfg,
+		plugins: {
+			...cfg.plugins,
+			load: {
+				...cfg.plugins?.load,
+				paths: merged
+			}
+		}
+	};
 }
-async function augmentModelCatalogWithProviderPlugins(params) {
-	const env = params.env ?? process.env;
-	const providers = resolvePluginProviders({
-		config: params.config,
-		workspaceDir: params.workspaceDir
+function finalizeInstalledPluginConfig(params) {
+	if (params.refreshManifestRegistry) clearPluginManifestRegistryCache();
+	let next = params.config;
+	if (params.loadPath) next = addPluginLoadPath(next, params.loadPath);
+	next = enablePluginInConfig(next, params.pluginId).config;
+	if (params.installRecord) next = recordPluginInstall(next, {
+		pluginId: params.pluginId,
+		...params.installRecord
 	});
-	const catalogProviders = {};
-	for (const provider of providers) try {
-		if (provider.models) mergeProviders(catalogProviders, normalizePluginDiscoveryResult({
-			provider,
-			result: { provider: provider.models }
-		}));
-		mergeProviders(catalogProviders, await resolveProviderStaticCatalog({
-			provider,
-			config: params.config,
-			agentDir: params.agentDir,
-			workspaceDir: params.workspaceDir,
-			env
-		}));
-	} catch (error) {
-		log$7.warn(`Failed to read provider catalog for ${provider.id}: ${String(error)}`);
-	}
-	return catalogProviders;
+	next = ensurePluginAllowlisted(next, params.pluginId, { createIfMissing: true });
+	const slotResult = applySlotSelectionForPlugin(next, params.pluginId);
+	return {
+		config: slotResult.config,
+		slotWarnings: slotResult.warnings
+	};
 }
 
 //#endregion
-//#region src/agents/model-catalog-source.ts
-function normalizePositiveNumber(value) {
-	return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : void 0;
+//#region src/capabilities/catalog.ts
+const CATALOG_RELATIVE_PATH = path.join("config", "capability-catalog.json");
+const DELIVERY_VALUES = new Set([
+	"core",
+	"npm-addon",
+	"external-runtime"
+]);
+const CATEGORY_VALUES = new Set([
+	"core",
+	"crypto",
+	"channel",
+	"provider",
+	"runtime"
+]);
+function isRecord(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
-function normalizeBoolean(value) {
-	return typeof value === "boolean" ? value : void 0;
+function requiredString(record, key, index) {
+	const value = record[key];
+	if (typeof value !== "string" || !value.trim()) throw new Error(`capability catalog entry ${index} requires ${key}`);
+	return value.trim();
 }
-function normalizeString(value) {
+function optionalString(record, key) {
+	const value = record[key];
 	return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
-function normalizeInput(value) {
-	if (!Array.isArray(value)) return ["text"];
-	const out = value.filter((item) => item === "text" || item === "image");
-	return out.length > 0 ? out : ["text"];
-}
-function normalizeApi(value) {
-	return MODEL_APIS.includes(value) ? value : void 0;
+function parseCatalogEntry(value, index) {
+	if (!isRecord(value)) throw new Error(`capability catalog entry ${index} must be an object`);
+	const delivery = requiredString(value, "delivery", index);
+	if (!DELIVERY_VALUES.has(delivery)) throw new Error(`capability catalog entry ${index} has invalid delivery ${delivery}`);
+	const category = requiredString(value, "category", index);
+	if (!CATEGORY_VALUES.has(category)) throw new Error(`capability catalog entry ${index} has invalid category ${category}`);
+	const externalKind = optionalString(value, "externalKind");
+	if (externalKind && externalKind !== "browser" && externalKind !== "model-server" && externalKind !== "local-embeddings") throw new Error(`capability catalog entry ${index} has invalid externalKind ${externalKind}`);
+	return {
+		id: requiredString(value, "id", index),
+		label: requiredString(value, "label", index),
+		category,
+		delivery,
+		description: requiredString(value, "description", index),
+		docsPath: requiredString(value, "docsPath", index),
+		surface: requiredString(value, "surface", index),
+		...optionalString(value, "packageName") ? { packageName: optionalString(value, "packageName") } : {},
+		...optionalString(value, "pluginId") ? { pluginId: optionalString(value, "pluginId") } : {},
+		...optionalString(value, "channelId") ? { channelId: optionalString(value, "channelId") } : {},
+		...optionalString(value, "providerId") ? { providerId: optionalString(value, "providerId") } : {},
+		...externalKind ? { externalKind } : {},
+		...value.restartRequired === true ? { restartRequired: true } : {}
+	};
+}
+function resolveCatalogPath() {
+	const roots = [
+		resolveFasedAgentPackageRootSync({ moduleUrl: import.meta.url }),
+		resolveFasedAgentPackageRootSync({ cwd: process.cwd() }),
+		process.cwd()
+	].filter((entry, index, all) => Boolean(entry) && all.indexOf(entry) === index);
+	for (const root of roots) {
+		const candidate = path.join(root, CATALOG_RELATIVE_PATH);
+		if (fs.existsSync(candidate)) return candidate;
+	}
+	throw new Error(`Fased capability catalog not found (${CATALOG_RELATIVE_PATH})`);
 }
-function isSupportedRuntimeCatalogModel(provider, id) {
-	if (provider !== "openai-codex") return true;
-	return isOpenAISignInRuntimeModelSupported(id);
+function loadCapabilityCatalog() {
+	const payload = JSON.parse(fs.readFileSync(resolveCatalogPath(), "utf8"));
+	if (!isRecord(payload) || !Array.isArray(payload.entries)) throw new Error("capability catalog must contain an entries array");
+	const entries = payload.entries.map(parseCatalogEntry);
+	const ids = /* @__PURE__ */ new Set();
+	for (const entry of entries) {
+		if (ids.has(entry.id)) throw new Error(`duplicate capability catalog id: ${entry.id}`);
+		ids.add(entry.id);
+	}
+	return entries;
 }
-function configuredProviderCatalogRows(cfg) {
-	return Object.entries(cfg.models?.providers ?? {}).flatMap(([provider, providerConfig]) => normalizeProviderCatalogRows({
-		provider,
-		providerConfig,
-		source: "configured",
-		status: "stable"
-	}));
+
+//#endregion
+//#region src/capabilities/install.ts
+async function installCapabilityComponent(params) {
+	const entry = loadCapabilityCatalog().find((candidate) => candidate.id === params.id);
+	if (!entry) throw new Error(`Unknown component: ${params.id}. Run \`fased components\` to list choices.`);
+	if (entry.delivery !== "npm-addon" || !entry.packageName || !entry.pluginId) throw new Error(`${entry.label} is delivered as ${entry.delivery} and cannot be installed as an add-on. See ${entry.docsPath}.`);
+	const packageSpec = params.packageSpec?.trim() || entry.packageName;
+	const result = await installPluginFromNpmSpec({ spec: packageSpec });
+	if (!result.ok) throw new Error(result.error);
+	const finalized = finalizeInstalledPluginConfig({
+		config: params.config,
+		pluginId: result.pluginId,
+		refreshManifestRegistry: true,
+		installRecord: {
+			source: "npm",
+			spec: packageSpec,
+			installPath: result.targetDir,
+			version: result.version,
+			...buildNpmResolutionInstallFields(result.npmResolution)
+		}
+	});
+	return {
+		config: finalized.config,
+		entry,
+		pluginId: result.pluginId,
+		targetDir: result.targetDir,
+		...result.version ? { version: result.version } : {},
+		slotWarnings: finalized.slotWarnings
+	};
 }
-function providerPluginCatalogRows(providers) {
-	return Object.entries(providers ?? {}).flatMap(([provider, providerConfig]) => normalizeProviderCatalogRows({
-		provider,
-		providerConfig,
-		source: "provider-index",
-		status: "stable"
-	}));
+
+//#endregion
+//#region src/agents/openai-codex-runtime-component.ts
+const OPENAI_RUNTIME_COMPONENT_ID = "openai-runtime";
+async function ensureOpenAICodexRuntimeComponent(params) {
+	const resolveExecutable = params.resolveExecutable ?? resolveOpenAICodexExecutable;
+	const existing = resolveExecutable();
+	if (existing) return {
+		config: params.config,
+		executable: existing,
+		installed: false,
+		slotWarnings: []
+	};
+	const installed = await (params.installComponent ?? installCapabilityComponent)({
+		id: OPENAI_RUNTIME_COMPONENT_ID,
+		config: params.config,
+		packageSpec: `@fased/openai-runtime@${params.version ?? VERSION}`
+	});
+	const executable = resolveExecutable();
+	if (!executable) throw new Error("OpenAI sign-in runtime installation completed without an executable. Run `fased components install openai-runtime` and retry.");
+	return {
+		config: installed.config,
+		executable,
+		installed: true,
+		slotWarnings: installed.slotWarnings
+	};
 }
-function runtimeCatalogRows(params) {
-	const rows = [];
-	for (const model of params.models) try {
-		const idRaw = normalizeString(model.id);
-		const providerRaw = normalizeString(model.provider);
-		if (!idRaw || !providerRaw) continue;
-		const id = normalizeModelCatalogModelId(idRaw);
-		const provider = normalizeModelCatalogProviderId(providerRaw);
-		if (!id || !provider) continue;
-		if (!isSupportedRuntimeCatalogModel(provider, id)) continue;
-		if (id.toLowerCase() === "gpt-5.3-codex-spark" && (provider === "openai" || provider === "azure-openai-responses")) continue;
-		rows.push({
-			id,
-			name: normalizeString(model.name) ?? id,
-			provider,
-			mergeKey: buildModelCatalogMergeKey(provider, id),
-			source: "runtime",
-			status: "stable",
-			input: normalizeInput(model.input),
-			contextWindow: normalizePositiveNumber(model.contextWindow),
-			maxTokens: normalizePositiveNumber(model.maxTokens),
-			reasoning: normalizeBoolean(model.reasoning),
-			baseUrl: normalizeString(model.baseUrl),
-			api: normalizeApi(model.api)
-		});
-	} catch (error) {
-		params.onEntryError?.(error);
+
+//#endregion
+//#region src/providers/openai-codex-model-discovery.ts
+const OPENAI_CODEX_MODELS_URL = "https://chatgpt.com/backend-api/codex/models";
+const OPENAI_CODEX_ROUTE = "openai-codex";
+const OPENAI_CODEX_CATALOG_CLIENT_VERSION = "0.144.0";
+const DISCOVERY_TIMEOUT_MS = 8e3;
+function decodeJwtPayload(token) {
+	const encoded = token.split(".")[1];
+	if (!encoded) return null;
+	try {
+		return JSON.parse(Buffer.from(encoded, "base64url").toString("utf8"));
+	} catch {
+		return null;
 	}
-	return rows;
 }
-function manifestCatalogRows() {
-	return listProviderBrandManifests().flatMap((manifest) => manifest.models.recommended.flatMap((ref) => {
-		const slash = ref.indexOf("/");
-		if (slash <= 0 || slash === ref.length - 1) return [];
-		const provider = normalizeModelCatalogProviderId(ref.slice(0, slash));
-		const id = normalizeModelCatalogModelId(ref.slice(slash + 1));
-		if (!provider || !id) return [];
-		return [{
-			id,
-			name: id,
-			provider,
-			mergeKey: buildModelCatalogMergeKey(provider, id),
-			source: "manifest",
-			status: "stable",
-			input: ["text"]
-		}];
-	}));
+function extractChatGptAccountId(token) {
+	const auth = decodeJwtPayload(token)?.["https://api.openai.com/auth"];
+	if (!auth || typeof auth !== "object" || Array.isArray(auth)) return null;
+	const accountId = auth.chatgpt_account_id;
+	return typeof accountId === "string" && accountId.trim() ? accountId.trim() : null;
 }
-function providerConfigForRow(cfg, row) {
-	return cfg.models?.providers?.[row.provider] ?? CURRENT_MODEL_PROVIDER_CATALOG[row.provider];
+function positiveInteger(value) {
+	return typeof value === "number" && Number.isInteger(value) && value > 0 ? value : void 0;
 }
-function buildFasedModelCatalogRows(params) {
-	const discoveredRows = mergeModelCatalogRowsByAuthority([
-		...[...listCurrentModelCatalogRows(), ...providerPluginCatalogRows(params.providerPluginProviders)].filter((row) => isSupportedRuntimeCatalogModel(row.provider, row.id)),
-		...runtimeCatalogRows({
-			models: params.runtimeModels ?? [],
-			onEntryError: params.onRuntimeEntryError
-		}),
-		...configuredProviderCatalogRows(params.config)
-	]);
-	const discoveredKeys = new Set(discoveredRows.map((row) => row.mergeKey));
-	const missingManifestRows = manifestCatalogRows().filter((row) => !discoveredKeys.has(row.mergeKey));
-	return mergeModelCatalogRowsByAuthority([...discoveredRows, ...missingManifestRows]);
+function inputModalities(value) {
+	if (!Array.isArray(value)) return ["text"];
+	const values = value.filter((entry) => entry === "text" || entry === "image");
+	return values.length > 0 ? values : ["text"];
 }
-function buildFasedModelCatalogEntries(params) {
-	return buildFasedModelCatalogRows({
-		config: params.config,
-		runtimeModels: params.runtimeModels,
-		providerPluginProviders: params.providerPluginProviders,
-		onRuntimeEntryError: params.onRuntimeEntryError
-	}).map((row) => {
-		const providerConfig = providerConfigForRow(params.config, row);
-		const model = {
-			id: row.id,
-			name: row.name,
-			provider: row.provider,
-			contextWindow: row.contextWindow,
-			maxTokens: row.maxTokens,
-			reasoning: row.reasoning,
-			input: row.input,
-			baseUrl: row.baseUrl,
-			api: row.api,
-			catalogSource: row.source
-		};
+function modelCapabilities(model) {
+	const thinkingLevels = (Array.isArray(model.supported_reasoning_levels) ? model.supported_reasoning_levels : []).flatMap((entry) => {
+		if (!entry || typeof entry !== "object" || Array.isArray(entry)) return [];
+		const effort = entry.effort;
+		const normalized = typeof effort === "string" ? normalizeThinkLevel(effort) : void 0;
+		return normalized ? [normalized] : [];
+	});
+	const defaultThinkingLevel = typeof model.default_reasoning_level === "string" ? normalizeThinkLevel(model.default_reasoning_level) : void 0;
+	return {
+		tools: true,
+		json: true,
+		streaming: true,
+		...thinkingLevels.length > 0 ? { thinkingLevels } : {},
+		...defaultThinkingLevel ? { defaultThinkingLevel } : {},
+		thinkingMode: "openai-reasoning-effort",
+		reasoningBudgetSupported: thinkingLevels.length > 0
+	};
+}
+function parseModels(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return [];
+	const models = value.models;
+	if (!Array.isArray(models)) return [];
+	return models.flatMap((entry) => {
+		if (!entry || typeof entry !== "object" || Array.isArray(entry)) return [];
+		const model = entry;
+		const id = typeof model.slug === "string" ? model.slug.trim() : "";
+		if (!id || model.visibility !== "list") return [];
+		const capabilities = modelCapabilities(model);
+		return [{
+			id,
+			name: typeof model.display_name === "string" && model.display_name.trim() ? model.display_name.trim().replace(/-(Sol|Terra|Luna|Mini)$/i, " $1") : id,
+			input: inputModalities(model.input_modalities),
+			reasoning: true,
+			tools: capabilities.tools,
+			json: capabilities.json,
+			thinkingLevels: capabilities.thinkingLevels,
+			defaultThinkingLevel: capabilities.defaultThinkingLevel,
+			thinkingMode: capabilities.thinkingMode,
+			reasoningBudgetSupported: capabilities.reasoningBudgetSupported,
+			contextWindow: positiveInteger(model.context_window),
+			responsesLite: model.use_responses_lite === true,
+			source: "openai-codex-account"
+		}];
+	});
+}
+function parseAppServerModels(models) {
+	return models.map((model) => {
+		const thinkingLevels = model.supportedReasoningEfforts.flatMap((effort) => {
+			const normalized = normalizeThinkLevel(effort);
+			return normalized ? [normalized] : [];
+		});
+		const defaultThinkingLevel = normalizeThinkLevel(model.defaultReasoningEffort);
+		const responsesLite = /^gpt-5\.6-(?:sol|terra|luna)$/i.test(model.id);
 		return {
-			...model,
-			...params.includeMetadata ? { metadata: deriveModelMetadata({
-				model,
-				cfg: params.config,
-				providerConfig,
-				recommended: isStandardProviderCatalogEntry(row)
-			}) } : {}
+			id: model.id,
+			name: model.displayName.replace(/-(Sol|Terra|Luna|Mini)$/i, " $1"),
+			input: model.inputModalities,
+			reasoning: thinkingLevels.length > 0,
+			tools: !responsesLite,
+			json: !responsesLite,
+			thinkingLevels,
+			...defaultThinkingLevel ? { defaultThinkingLevel } : {},
+			thinkingMode: "openai-reasoning-effort",
+			reasoningBudgetSupported: false,
+			responsesLite,
+			source: "openai-codex-app-server"
 		};
 	});
 }
+async function discoverOpenAICodexModels(params) {
+	const profileId = listProfilesForProvider(params.store, OPENAI_CODEX_ROUTE)[0];
+	if (!profileId) return [];
+	const resolved = await resolveApiKeyForProfile({
+		cfg: params.cfg,
+		store: params.store,
+		profileId,
+		agentDir: params.agentDir
+	});
+	if (!resolved?.apiKey) return [];
+	const accountId = extractChatGptAccountId(resolved.apiKey);
+	if (!accountId) throw new Error("OpenAI sign-in token does not contain a ChatGPT account ID");
+	if (!params.fetchImpl) {
+		const runtime = await (params.ensureRuntime ?? ensureOpenAICodexRuntimeComponent)({ config: params.cfg });
+		if (runtime.installed) await writeConfigFile(runtime.config);
+		return parseAppServerModels(await (params.listAppServerModels ?? listOpenAICodexAppServerModels)({
+			token: resolved.apiKey,
+			executable: runtime.executable
+		}));
+	}
+	const url = new URL(OPENAI_CODEX_MODELS_URL);
+	url.searchParams.set("client_version", OPENAI_CODEX_CATALOG_CLIENT_VERSION);
+	const response = await (params.fetchImpl ?? fetch)(url, {
+		headers: {
+			authorization: `Bearer ${resolved.apiKey}`,
+			"chatgpt-account-id": accountId,
+			originator: "fased",
+			accept: "application/json"
+		},
+		signal: AbortSignal.timeout(DISCOVERY_TIMEOUT_MS)
+	});
+	if (!response.ok) throw new Error(`OpenAI account model discovery failed (${response.status})`);
+	return parseModels(await response.json());
+}
 
 //#endregion
-//#region src/agents/provider-extension-catalog-index.ts
-const UNSAFE_PROVIDER_KEYS = new Set([
-	"__proto__",
-	"prototype",
-	"constructor"
-]);
-const DEFAULT_PROVIDER_EXTENSION_CATALOG_ENTRIES = [];
-let providerExtensionCatalogEntriesForTest;
-function listBundledProviderExtensionCatalogEntries() {
-	return providerExtensionCatalogEntriesForTest ?? DEFAULT_PROVIDER_EXTENSION_CATALOG_ENTRIES;
+//#region src/providers/runtime-model-catalog.ts
+const DISCOVERY_TTL_MS = 5 * 6e4;
+let cache = null;
+const SPECIALIZED_DISCOVERY_ROUTES = new Set(["openai-codex", "github-copilot"]);
+function authModeForProfileType(type) {
+	return type === "api_key" ? "api-key" : type;
 }
-function normalizeProviderIds(providerIds) {
-	return [...new Set(providerIds.map((providerId) => normalizeModelCatalogProviderId(providerId)).filter((providerId) => providerId.length > 0 && !UNSAFE_PROVIDER_KEYS.has(providerId)))].toSorted((left, right) => left.localeCompare(right));
+function methodMatchesAuthMode(method, authMode) {
+	return (method.kind === "api-key" || method.kind === "manual" ? "api-key" : method.kind === "token" ? "token" : "oauth") === authMode;
 }
-function normalizeEntryTrust(entry) {
-	return entry.trusted === true || entry.source === "bundled";
+function methodRouteIds(method) {
+	return [
+		method.route,
+		method.statusRoute,
+		method.configProviderId
+	].map((value) => value?.trim().toLowerCase()).filter((value) => Boolean(value));
 }
-function collectProviderConfigs(entry, module) {
-	const providers = {};
-	const explicitProviderIds = normalizeProviderIds(entry.providerIds);
-	const moduleProviders = module.providers ?? module.default?.providers;
-	if (moduleProviders) for (const [providerIdRaw, providerConfig] of Object.entries(moduleProviders)) {
-		const providerId = normalizeProviderIds([providerIdRaw])[0];
-		if (!providerId || !providerConfig) continue;
-		providers[providerId] = providerConfig;
+function credentialRoutesForProvider(store, route) {
+	const normalizedRoute = route.trim().toLowerCase();
+	const manifest = getProviderBrandManifestForRoute(normalizedRoute);
+	const routes = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const profile of Object.values(store.profiles ?? {})) {
+		const profileProvider = profile.provider.trim().toLowerCase();
+		if (!profileProvider) continue;
+		if (profileProvider !== normalizedRoute) continue;
+		const authMode = authModeForProfileType(profile.type);
+		const method = manifest?.methods.find((candidate) => methodMatchesAuthMode(candidate, authMode) && (methodRouteIds(candidate).includes(profileProvider) || methodRouteIds(candidate).includes(normalizedRoute)));
+		const id = method?.id ?? `${normalizedRoute}:${authMode}`;
+		const key = `${id}:${authMode}`;
+		if (seen.has(key)) continue;
+		seen.add(key);
+		routes.push({
+			id,
+			label: method?.label ?? manifest?.label ?? normalizedRoute,
+			authMode
+		});
 	}
-	const singleProvider = module.provider ?? module.default?.provider;
-	if (singleProvider && explicitProviderIds[0]) providers[explicitProviderIds[0]] = singleProvider;
-	return providers;
-}
-function countModels(providers) {
-	return Object.values(providers).reduce((total, provider) => total + (Array.isArray(provider.models) ? provider.models.length : 0), 0);
+	return routes;
 }
-function formatCatalogError(error) {
-	return error instanceof Error ? error.message : String(error);
+function discoveryKey(params) {
+	const endpoints = [...params.routes].map((route) => route.trim().toLowerCase()).toSorted().map((route) => {
+		const provider = params.cfg.models?.providers?.[route];
+		return [
+			route,
+			provider?.baseUrl ?? "",
+			provider?.api ?? ""
+		];
+	});
+	const credentialIdentity = createHash("sha256").update(JSON.stringify(params.store.profiles ?? {})).digest("hex");
+	return JSON.stringify({
+		endpoints,
+		credentialIdentity
+	});
 }
-async function loadProviderExtensionCatalogIndex(params) {
-	const entries = params?.entries ?? listBundledProviderExtensionCatalogEntries();
-	const includeUntrusted = params?.includeUntrusted === true;
-	const providers = {};
-	const statuses = [];
-	for (const entry of entries) {
-		const providerIds = normalizeProviderIds(entry.providerIds);
-		const trusted = normalizeEntryTrust(entry);
-		if (!trusted && !includeUntrusted) {
-			statuses.push({
-				id: entry.id,
-				source: entry.source,
-				trusted,
-				providerIds,
-				loadedProviderIds: [],
-				modelCount: 0,
-				status: "skipped-untrusted"
-			});
-			continue;
-		}
-		try {
-			const loadedProviders = collectProviderConfigs(entry, await entry.load());
-			const loadedProviderIds = Object.keys(loadedProviders).toSorted((left, right) => left.localeCompare(right));
-			for (const providerId of loadedProviderIds) providers[providerId] = loadedProviders[providerId];
-			const modelCount = countModels(loadedProviders);
-			statuses.push({
-				id: entry.id,
-				source: entry.source,
-				trusted,
-				providerIds,
-				loadedProviderIds,
-				modelCount,
-				status: loadedProviderIds.length > 0 ? "loaded" : "empty"
-			});
-		} catch (error) {
-			statuses.push({
-				id: entry.id,
-				source: entry.source,
-				trusted,
-				providerIds,
-				loadedProviderIds: [],
-				modelCount: 0,
-				status: "error",
-				error: formatCatalogError(error)
-			});
-		}
+async function loadSnapshot(params) {
+	const key = discoveryKey(params);
+	const now = Date.now();
+	if (cache?.key === key && cache.expiresAt > now) return await cache.value;
+	const value = fetchProviderRefreshSnapshotForRoutes({
+		routes: params.routes,
+		env: buildProviderRefreshEnvFromCredentials({
+			env: process.env,
+			authStores: [params.store],
+			modelProviders: params.cfg.models?.providers
+		})
+	});
+	cache = {
+		key,
+		expiresAt: now + DISCOVERY_TTL_MS,
+		value
+	};
+	try {
+		return await value;
+	} catch (error) {
+		if (cache?.value === value) cache = null;
+		throw error;
 	}
+}
+async function discoverInteractiveRoutes(params) {
+	const discovered = /* @__PURE__ */ new Map();
+	if (params.routes.has("openai-codex")) discovered.set("openai-codex", await discoverOpenAICodexModels({
+		cfg: params.cfg,
+		store: params.store,
+		agentDir: params.agentDir
+	}));
+	if (params.routes.has("github-copilot")) discovered.set("github-copilot", await discoverGitHubCopilotModels({
+		cfg: params.cfg,
+		store: params.store,
+		agentDir: params.agentDir
+	}));
+	return discovered;
+}
+function snapshotCapabilities(model) {
 	return {
-		providers,
-		entries: statuses
+		...model.tools !== void 0 ? { tools: model.tools } : {},
+		...model.json !== void 0 ? { json: model.json } : {},
+		...model.audio !== void 0 ? { audio: model.audio } : {},
+		...model.video !== void 0 ? { video: model.video } : {},
+		...model.speech !== void 0 ? { speech: model.speech } : {},
+		...model.thinkingLevels?.length ? { thinkingLevels: model.thinkingLevels } : {},
+		...model.defaultThinkingLevel ? { defaultThinkingLevel: model.defaultThinkingLevel } : {},
+		...model.thinkingMode ? { thinkingMode: model.thinkingMode } : {},
+		...model.reasoningBudgetSupported !== void 0 ? { reasoningBudgetSupported: model.reasoningBudgetSupported } : {}
 	};
 }
-
-//#endregion
-//#region src/agents/model-catalog.ts
-const log$6 = createSubsystemLogger("model-catalog");
-let modelCatalogPromise = null;
-let hasLoggedModelCatalogError = false;
-let hasLoggedProviderCatalogError = false;
-const defaultImportPiSdk = () => import("./pi-model-discovery-Buz0JC1Y.js").then((n) => n.a);
-let importPiSdk = defaultImportPiSdk;
-const CODEX_PROVIDER = "openai-codex";
-const OPENAI_PROVIDER = "openai";
-const OPENAI_GPT55_MODEL_ID = "gpt-5.5";
-const OPENAI_GPT54_MODEL_ID = "gpt-5.4";
-const OPENAI_GPT54_MINI_MODEL_ID = "gpt-5.4-mini";
-const OPENAI_GPT54_NANO_MODEL_ID = "gpt-5.4-nano";
-const OPENAI_CODEX_GPT55_MODEL_ID = "gpt-5.5";
-const OPENAI_CODEX_GPT54_MODEL_ID = "gpt-5.4";
-const OPENAI_CODEX_GPT54_MINI_MODEL_ID = "gpt-5.4-mini";
-const OPENAI_CODEX_GPT53_SPARK_MODEL_ID = "gpt-5.3-codex-spark";
-const SYNTHETIC_CATALOG_FALLBACKS = [
-	{
-		provider: OPENAI_PROVIDER,
-		id: OPENAI_GPT55_MODEL_ID,
-		templateIds: [OPENAI_GPT54_MODEL_ID, "gpt-5.2"]
-	},
-	{
-		provider: OPENAI_PROVIDER,
-		id: OPENAI_GPT54_MODEL_ID,
-		templateIds: ["gpt-5.2"]
-	},
-	{
-		provider: OPENAI_PROVIDER,
-		id: OPENAI_GPT54_MINI_MODEL_ID,
-		templateIds: ["gpt-5-mini"]
-	},
-	{
-		provider: OPENAI_PROVIDER,
-		id: OPENAI_GPT54_NANO_MODEL_ID,
-		templateIds: ["gpt-5-nano", "gpt-5-mini"]
-	},
-	{
-		provider: CODEX_PROVIDER,
-		id: OPENAI_CODEX_GPT55_MODEL_ID,
-		templateIds: [OPENAI_CODEX_GPT54_MODEL_ID, OPENAI_CODEX_GPT53_SPARK_MODEL_ID]
-	},
-	{
-		provider: CODEX_PROVIDER,
-		id: OPENAI_CODEX_GPT54_MODEL_ID,
-		templateIds: [OPENAI_CODEX_GPT53_SPARK_MODEL_ID]
-	},
-	{
-		provider: CODEX_PROVIDER,
-		id: OPENAI_CODEX_GPT54_MINI_MODEL_ID,
-		templateIds: [OPENAI_CODEX_GPT54_MODEL_ID, OPENAI_CODEX_GPT53_SPARK_MODEL_ID]
-	}
-];
-function applySyntheticCatalogFallbacks(models) {
-	const findCatalogEntry = (provider, id) => models.find((entry) => entry.provider.toLowerCase() === provider.toLowerCase() && entry.id.toLowerCase() === id.toLowerCase());
-	for (const fallback of SYNTHETIC_CATALOG_FALLBACKS) {
-		if (findCatalogEntry(fallback.provider, fallback.id)) continue;
-		const template = fallback.templateIds.map((templateId) => findCatalogEntry(fallback.provider, templateId)).find((entry) => entry !== void 0);
-		if (!template) continue;
-		const { metadata: _ignoredMetadata, ...templateWithoutMetadata } = template;
-		models.push({
-			...templateWithoutMetadata,
-			id: fallback.id,
-			name: fallback.id,
-			...template.metadata ? { metadata: deriveModelMetadata({ model: {
-				...templateWithoutMetadata,
-				id: fallback.id,
-				name: fallback.id
-			} }) } : {}
-		});
-	}
+function snapshotHasCapabilityMetadata(model) {
+	return model.input !== void 0 || model.reasoning !== void 0 || model.tools !== void 0 || model.json !== void 0 || model.audio !== void 0 || model.video !== void 0 || model.speech !== void 0 || model.thinkingLevels !== void 0 || model.defaultThinkingLevel !== void 0 || model.thinkingMode !== void 0 || model.reasoningBudgetSupported !== void 0 || model.contextWindow !== void 0 || model.maxTokens !== void 0;
 }
-async function loadProviderPluginCatalogProviders(params) {
-	try {
-		return await augmentModelCatalogWithProviderPlugins({
-			config: params.config,
-			agentDir: params.agentDir,
-			env: process.env
-		});
-	} catch (error) {
-		if (!hasLoggedProviderCatalogError) {
-			hasLoggedProviderCatalogError = true;
-			log$6.warn(`Failed to load provider plugin model catalog: ${String(error)}`);
-		}
-		return {};
-	}
+function snapshotRoutes(snapshot) {
+	const routes = /* @__PURE__ */ new Map();
+	for (const provider of Object.values(snapshot.providers ?? {})) for (const [route, values] of Object.entries(provider.routes ?? {})) routes.set(route.trim().toLowerCase(), values.flatMap((value) => typeof value === "string" ? [{ id: value }] : value?.id?.trim() ? [value] : []));
+	return routes;
 }
-async function loadProviderExtensionCatalogProviders() {
-	try {
-		return (await loadProviderExtensionCatalogIndex()).providers;
-	} catch (error) {
-		if (!hasLoggedProviderCatalogError) {
-			hasLoggedProviderCatalogError = true;
-			log$6.warn(`Failed to load provider extension model catalog: ${String(error)}`);
-		}
-		return {};
-	}
+function mergeDiscoveredRoute(params) {
+	const baseByKey = new Map(params.catalog.map((model) => [buildModelCatalogMergeKey(model.provider, model.id), model]));
+	const providerConfig = params.cfg.models?.providers?.[params.route];
+	const credentialRoutes = credentialRoutesForProvider(params.store, params.route);
+	return params.discovered.map((model) => {
+		const base = baseByKey.get(buildModelCatalogMergeKey(params.route, model.id));
+		const capabilities = snapshotCapabilities(model);
+		const entry = {
+			id: model.id,
+			name: model.name ?? base?.name ?? model.id,
+			provider: params.route,
+			...model.contextWindow ?? base?.contextWindow ? { contextWindow: model.contextWindow ?? base?.contextWindow } : {},
+			...model.maxTokens ?? base?.maxTokens ? { maxTokens: model.maxTokens ?? base?.maxTokens } : {},
+			...model.reasoning ?? base?.reasoning ? { reasoning: model.reasoning ?? base?.reasoning } : {},
+			input: model.input ?? base?.input ?? ["text"],
+			...base?.baseUrl ?? providerConfig?.baseUrl ? { baseUrl: base?.baseUrl ?? providerConfig?.baseUrl } : {},
+			...base?.api ?? providerConfig?.api ? { api: base?.api ?? providerConfig?.api } : {},
+			...model.price ?? base?.cost ? { cost: model.price ?? base?.cost } : {},
+			...Object.keys(capabilities).length > 0 ? { capabilities } : {},
+			...model.responsesLite !== void 0 ? { compat: {
+				...base?.compat,
+				responsesLite: model.responsesLite
+			} } : base?.compat ? { compat: base.compat } : {},
+			catalogSource: "provider-api"
+		};
+		return {
+			...entry,
+			metadata: {
+				...base?.metadata,
+				...deriveModelMetadata({
+					model: entry,
+					cfg: params.cfg,
+					providerConfig,
+					...credentialRoutes.length > 0 ? { credentialRoutes } : {},
+					...snapshotHasCapabilityMetadata(model) ? {
+						capabilitySource: "provider-api",
+						capabilityRetrievedAt: params.retrievedAt
+					} : {}
+				}),
+				retrievedAt: params.retrievedAt
+			}
+		};
+	});
 }
-async function loadModelCatalog(params) {
-	if (params?.useCache === false) modelCatalogPromise = null;
-	if (modelCatalogPromise) return modelCatalogPromise;
-	modelCatalogPromise = (async () => {
-		const models = [];
-		const sortModels = (entries) => entries.sort((a, b) => {
-			const p = a.provider.localeCompare(b.provider);
-			if (p !== 0) return p;
-			return a.name.localeCompare(b.name);
+async function applyRuntimeProviderModelDiscovery(params) {
+	const requestedRoutes = new Set([...params.routes].map((route) => route.trim().toLowerCase()).filter(Boolean));
+	if (requestedRoutes.size === 0) return [];
+	const specializedRoutes = new Set([...requestedRoutes].filter((route) => SPECIALIZED_DISCOVERY_ROUTES.has(route)));
+	const providerApiRoutes = [...requestedRoutes].filter((route) => !specializedRoutes.has(route));
+	const interactiveRoutes = await discoverInteractiveRoutes({
+		routes: requestedRoutes,
+		cfg: params.cfg,
+		store: params.store,
+		agentDir: params.agentDir
+	}).catch(() => /* @__PURE__ */ new Map());
+	let discoveredRoutes = new Map(interactiveRoutes);
+	if (providerApiRoutes.length > 0) try {
+		const snapshot = await loadSnapshot({
+			...params,
+			routes: providerApiRoutes
 		});
-		try {
-			const cfg = params?.config ?? loadConfig();
-			await ensureFasedAgentModelsJson(cfg);
-			const piSdk = await importPiSdk();
-			const agentDir = resolveFasedAgentAgentDir();
-			const { join } = await import("node:path");
-			const authStorage = piSdk.discoverAuthStorage(agentDir);
-			const registry = new piSdk.ModelRegistry(authStorage, join(agentDir, "models.json"));
-			const entries = Array.isArray(registry) ? registry : registry.getAll();
-			const runtimeModels = [];
-			for (const entry of entries) runtimeModels.push(entry);
-			const providerPluginProviders = await loadProviderPluginCatalogProviders({
-				config: cfg,
-				agentDir
-			});
-			const providerExtensionCatalogProviders = await loadProviderExtensionCatalogProviders();
-			models.push(...buildFasedModelCatalogEntries({
-				config: cfg,
-				runtimeModels,
-				providerPluginProviders: {
-					...providerExtensionCatalogProviders,
-					...providerPluginProviders
-				},
-				includeMetadata: params?.includeMetadata,
-				onRuntimeEntryError: (error) => {
-					if (!hasLoggedModelCatalogError) {
-						hasLoggedModelCatalogError = true;
-						log$6.warn(`Failed to read model catalog entry: ${String(error)}`);
-					}
-				}
-			}));
-			applySyntheticCatalogFallbacks(models);
-			if (models.length === 0) modelCatalogPromise = null;
-			return sortModels(models);
-		} catch (error) {
-			if (!hasLoggedModelCatalogError) {
-				hasLoggedModelCatalogError = true;
-				log$6.warn(`Failed to load model catalog: ${String(error)}`);
-			}
-			modelCatalogPromise = null;
-			if (models.length > 0) return sortModels(models);
-			return [];
-		}
-	})();
-	return modelCatalogPromise;
+		discoveredRoutes = new Map([...discoveredRoutes, ...snapshotRoutes(snapshot)]);
+	} catch {}
+	const retrievedAt = (/* @__PURE__ */ new Date()).toISOString();
+	const authoritativeRoutes = new Set([...discoveredRoutes.keys()].filter((route) => requestedRoutes.has(route)));
+	const replacedRoutes = new Set(providerApiRoutes);
+	for (const route of specializedRoutes) replacedRoutes.add(route);
+	const retained = params.catalog.filter((model) => !replacedRoutes.has(model.provider.trim().toLowerCase()));
+	const discovered = [...authoritativeRoutes].flatMap((route) => mergeDiscoveredRoute({
+		route,
+		discovered: discoveredRoutes.get(route) ?? [],
+		catalog: params.catalog,
+		cfg: params.cfg,
+		store: params.store,
+		retrievedAt
+	}));
+	return [...retained, ...discovered].toSorted((left, right) => left.provider.localeCompare(right.provider) || (left.metadata?.recommendationRank ?? Number.MAX_SAFE_INTEGER) - (right.metadata?.recommendationRank ?? Number.MAX_SAFE_INTEGER) || left.name.localeCompare(right.name));
 }
-/**
-* Check if a model supports image input based on its catalog entry.
-*/
-function modelSupportsVision(entry) {
-	return entry?.input?.includes("image") ?? false;
+function filterCatalogToAuthoritativeAvailability(catalog, store) {
+	const specializedProviders = store ? new Set(Object.values(store.profiles ?? {}).map((profile) => profile.provider.trim().toLowerCase()).filter((provider) => SPECIALIZED_DISCOVERY_ROUTES.has(provider))) : /* @__PURE__ */ new Set();
+	const byProvider = /* @__PURE__ */ new Map();
+	for (const model of catalog) {
+		const provider = model.provider.trim().toLowerCase();
+		byProvider.set(provider, [...byProvider.get(provider) ?? [], model]);
+	}
+	return [...byProvider.entries()].flatMap(([provider, models]) => {
+		if (models.some((model) => model.catalogSource === "provider-api")) return models.filter((model) => model.catalogSource === "provider-api");
+		if (specializedProviders.has(provider)) return models.filter((model) => model.catalogSource === "runtime" || model.catalogSource === "provider-api");
+		return models;
+	});
 }
-/**
-* Find a model in the catalog by provider and model ID.
-*/
-function findModelInCatalog(catalog, provider, modelId) {
-	const normalizedProvider = normalizeModelCatalogProviderId(provider);
-	const normalizedModelId = modelId.toLowerCase().trim();
-	return catalog.find((entry) => normalizeModelCatalogProviderId(entry.provider) === normalizedProvider && entry.id.toLowerCase() === normalizedModelId);
+
+//#endregion
+//#region src/agents/authenticated-model-catalog.ts
+async function resolveAuthenticatedModelCatalog(params) {
+	const initialScope = buildCredentialScopedAllowedModelSet({
+		cfg: params.cfg,
+		catalog: params.catalog,
+		defaultProvider: params.defaultProvider,
+		store: params.store
+	});
+	const discoveredCatalog = filterCatalogToAuthoritativeAvailability(await applyRuntimeProviderModelDiscovery({
+		cfg: params.cfg,
+		store: params.store,
+		routes: initialScope.usableProviders,
+		catalog: initialScope.usableCatalog,
+		agentDir: params.agentDir
+	}), params.store);
+	return buildCredentialScopedAllowedModelSet({
+		cfg: params.cfg,
+		catalog: discoveredCatalog,
+		defaultProvider: params.defaultProvider,
+		storedProviders: initialScope.usableProviders
+	});
 }
 
 //#endregion
@@ -106820,19 +107175,26 @@ function usesCodexResponsesLite(model) {
 }
 function createCodexResponsesLiteWrapper(baseStreamFn, params) {
 	const underlying = baseStreamFn ?? streamSimple;
-	const appServer = createOpenAICodexAppServerStreamFn({ resolveToken: async () => {
-		if (params?.resolvedApiKey?.trim()) return params.resolvedApiKey.trim();
-		const agentDir = params?.agentDir ?? resolveFasedAgentAgentDir();
-		const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
-		const profileId = listProfilesForProvider(store, "openai-codex")[0];
-		if (!profileId) return;
-		return (await resolveApiKeyForProfile({
-			cfg: params?.cfg ?? {},
-			store,
-			profileId,
-			agentDir
-		}))?.apiKey;
-	} });
+	const appServer = createOpenAICodexAppServerStreamFn({
+		resolveExecutable: async () => {
+			const runtime = await ensureOpenAICodexRuntimeComponent({ config: params?.cfg ?? loadConfig() });
+			if (runtime.installed) await writeConfigFile(runtime.config);
+			return runtime.executable;
+		},
+		resolveToken: async () => {
+			if (params?.resolvedApiKey?.trim()) return params.resolvedApiKey.trim();
+			const agentDir = params?.agentDir ?? resolveFasedAgentAgentDir();
+			const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
+			const profileId = listProfilesForProvider(store, "openai-codex")[0];
+			if (!profileId) return;
+			return (await resolveApiKeyForProfile({
+				cfg: params?.cfg ?? {},
+				store,
+				profileId,
+				agentDir
+			}))?.apiKey;
+		}
+	});
 	return (model, context, options) => {
 		if (!usesCodexResponsesLite(model)) return underlying(model, context, options);
 		return appServer(model, context, options);
@@ -107600,14 +107962,14 @@ function createCacheTrace(params) {
 //#region src/agents/embedded-pi-mcp.ts
 const BUNDLE_MCP_FILENAMES = [".mcp.json"];
 function normalizeConfiguredMcpServers(value) {
-	if (!isRecord$4(value)) return {};
+	if (!isRecord$5(value)) return {};
 	const result = {};
-	for (const [serverName, server] of Object.entries(value)) if (isRecord$4(server)) result[serverName] = { ...server };
+	for (const [serverName, server] of Object.entries(value)) if (isRecord$5(server)) result[serverName] = { ...server };
 	return result;
 }
 function extractMcpServerMap(raw) {
-	if (!isRecord$4(raw)) return {};
-	return normalizeConfiguredMcpServers(isRecord$4(raw.mcpServers) ? raw.mcpServers : isRecord$4(raw.servers) ? raw.servers : raw);
+	if (!isRecord$5(raw)) return {};
+	return normalizeConfiguredMcpServers(isRecord$5(raw.mcpServers) ? raw.mcpServers : isRecord$5(raw.servers) ? raw.servers : raw);
 }
 function expandBundlePath(value, rootDir) {
 	return value.split("${CLAUDE_PLUGIN_ROOT}").join(rootDir);
@@ -107627,7 +107989,7 @@ function absolutizeBundleMcpServer(params) {
 	if (typeof next.cwd === "string") next.cwd = normalizePathLike(next.cwd, params.baseDir, params.rootDir);
 	if (typeof next.workingDirectory === "string") next.workingDirectory = normalizePathLike(next.workingDirectory, params.baseDir, params.rootDir);
 	if (Array.isArray(next.args)) next.args = next.args.map((entry) => typeof entry === "string" ? normalizePathLike(entry, params.baseDir, params.rootDir) : entry);
-	if (isRecord$4(next.env)) next.env = Object.fromEntries(Object.entries(next.env).map(([key, value]) => [key, typeof value === "string" ? normalizePathLike(value, params.baseDir, params.rootDir) : value]));
+	if (isRecord$5(next.env)) next.env = Object.fromEntries(Object.entries(next.env).map(([key, value]) => [key, typeof value === "string" ? normalizePathLike(value, params.baseDir, params.rootDir) : value]));
 	return next;
 }
 function readBundleMcpFile(params) {
@@ -116050,7 +116412,7 @@ const signalOnboardingAdapter = {
 //#endregion
 //#region src/channels/plugins/status-issues/bluebubbles.ts
 function readBlueBubblesAccountStatus(value) {
-	if (!isRecord$4(value)) return null;
+	if (!isRecord$5(value)) return null;
 	return {
 		accountId: value.accountId,
 		enabled: value.enabled,
@@ -116062,7 +116424,7 @@ function readBlueBubblesAccountStatus(value) {
 	};
 }
 function readBlueBubblesProbeResult(value) {
-	if (!isRecord$4(value)) return null;
+	if (!isRecord$5(value)) return null;
 	return {
 		ok: typeof value.ok === "boolean" ? value.ok : void 0,
 		status: typeof value.status === "number" ? value.status : null,
@@ -116151,4 +116513,4 @@ const LineConfigSchema = LineCommonConfigSchema.extend({
 }).strict();
 
 //#endregion
-export { dispatchReplyWithBufferedBlockDispatcher as $, enforceWalletCustodyForAutonomousSend as $n, resolveWebhookTargets as $r, normalizeSlackSlug as $t, parseTtsDirectives as A, canonicalizeRealtimeTranscriptionProviderId as Ai, sendJson as An, loadOrCreateDeviceIdentity as Ar, registerUnhandledRejectionHandler as At, normalizeAccountId as B, extractDashscopeVideoUrls as Bi, requestBodyErrorToText as Bn, createInfoCard as Br, hasControlCommand as Bt, resolveEffectiveToolInventory as C, resolveCommandAuthorizedFromAuthorizers as Ci, agentCommand as Cn, emitAgentEvent as Cr, buildProviderRegistry as Ct, runEmbeddedPiAgent as D, getRealtimeVoiceProvider as Di, createDefaultDeps as Dn, GatewayClient as Dr, resolveMediaAttachmentLocalRoots as Dt, ACPX_PUSH_TEST_WRAPPER_ID as E, canonicalizeRealtimeVoiceProviderId as Ei, AcpRuntimeError as En, callGatewayScoped as Er, resolveAutoImageModel as Et, issuePairingChallenge as F, DEFAULT_VIDEO_GENERATION_TIMEOUT_MS as Fi, RequestBodyLimitError as Fn, processLineMessage as Fr, extractFileContentFromSource as Ft, logTypingFailure as G, resolveAllowlistMatchSimple as Gi, resolveAgentAvatar as Gn, createLoggerBackedRuntime as Gr, buildCommandsMessage as Gt, resolveLineAccount as H, resolveVideoGenerationReferenceUrls as Hi, resolveChannelMediaMaxBytes as Hn, resolveTelegramReactionLevel as Hr, isAbortRequestText as Ht, createTypingCallbacks as I, DEFAULT_VIDEO_RESOLUTION_TO_SIZE as Ii, installRequestBodyLimitGuard as In, stripMarkdown as Ir, extractImageContentFromSource as It, sleepWithAbort as J, BLUEBUBBLES_GROUP_ACTIONS as Ji, DEFAULT_FEDERATION_BASE_URL as Jn, pruneMapToMaxSize as Jr, normalizeGroupActivation as Jt, buildPairingReply as K, BLUEBUBBLES_ACTIONS as Ki, readWalletStatusSnapshot as Kn, createPersistentDedupe as Kr, buildCommandsMessagePaginated as Kt, resolveMentionGating as L, buildDashscopeVideoGenerationInput as Li, isRequestBodyLimitError as Ln, createReceiptCard as Lr, normalizeMimeList as Lt, findModelInCatalog as M, listRealtimeTranscriptionProviders as Mi, writeDone as Mn, signDevicePayload as Mr, DEFAULT_INPUT_IMAGE_MIMES as Mt, loadModelCatalog as N, normalizeRealtimeTranscriptionProviderId as Ni, DEFAULT_WEBHOOK_BODY_TIMEOUT_MS as Nn, verifyDeviceSignature as Nr, DEFAULT_INPUT_MAX_REDIRECTS as Nt, resolveTtsConfig as O, listRealtimeVoiceProviders as Oi, resolveAgentIdForRequest as On, ErrorCodes as Or, runCapability as Ot, modelSupportsVision as P, DEFAULT_VIDEO_GENERATION_DURATION_SECONDS as Pi, DEFAULT_WEBHOOK_MAX_BODY_BYTES as Pn, hasMarkdownToConvert as Pr, DEFAULT_INPUT_TIMEOUT_MS as Pt, shouldAckReactionForWhatsApp as Q, resolveFederationHandle as Qn, resolveSingleWebhookTargetAsync as Qr, normalizeAllowListLower as Qt, resolveMentionGatingWithBypass as R, buildDashscopeVideoGenerationParameters as Ri, readJsonBodyWithLimit as Rn, createActionCard as Rr, resolveInputFileLimits as Rt, getPublicGatewayIdentity as S, resolveEffectiveAllowFromLists as Si, resolveAssistantStreamDeltaText as Sn, tryResolveSatRuntimeIds as Sr, resolveChannelConfigWrites as St, ACPX_PUSH_TEST_METHOD as T, evaluateSenderGroupAccess as Ti, unregisterAcpRuntimeBackend as Tn, buildGatewayConnectionDetails as Tr, normalizeMediaAttachments as Tt, logAckFailure as U, registerPluginHttpRoute as Ui, runFederationAutoConnectOnce as Un, resolveTelegramInlineButtonsScope as Ur, subagent_registry_exports as Ut, resolveDefaultLineAccountId as V, pollDashscopeVideoTaskUntilComplete as Vi, deliver_exports as Vn, createListCard as Vr, shouldComputeCommandAuthorized as Vt, logInboundDrop as W, formatAllowlistMatchMeta as Wi, startFederationAutoConnect as Wn, waitForAbortSignal as Wr, enqueueSystemEvent as Wt, removeAckReactionAfterReply as X, resolveAgentPublicOrigin as Xn, rejectNonPostWebhookRequest as Xr, allowListMatches as Xt, recordInboundSession as Y, CHANNEL_MESSAGE_ACTION_NAMES as Yi, normalizeHandle as Yn, registerWebhookTarget as Yr, parseActivationCommand as Yt, shouldAckReaction as Z, resolveFederationBaseUrl as Zn, resolveSingleWebhookTarget as Zr, normalizeAllowList$2 as Zt, getGatewayUpdateStatus as _, resolveSenderCommandAuthorization as _i, recordPendingHistoryEntry as _n, SAT_RUNTIME_DEFAULTS as _r, getModelsPageSize as _t, normalizeIMessageMessagingTarget as a, isHttpsUrlAllowedByHostnameSuffixAllowlist as ai, isInsideCode as an, readWalletProviderRegistry as ar, formatInboundFromLabel as at, getStatusSummary as b, resolveDmGroupAccessWithCommandGate as bi, matchesMentionWithExplicit as bn, resolveSatMintProgramIdFromEnv as br, formatDurationPrecise as bt, addAllowlistUserEntriesFromConfigEntry as c, formatTextWithAttachmentLinks as ci, wrapExternalContent as cn, callLocalSocketSigner as cr, createReplyDispatcherWithTyping as ct, mergeAllowlist as d, buildOauthProviderAuthResult as di, DEFAULT_GROUP_HISTORY_LIMIT as dn, resolveLocalSignerSocketPath as dr, resolveStoredModelOverride as dt, normalizeWebhookPath as ei, resolveSlackAllowListMatch as en, createWalletProviderAdapter as er, dispatchReplyWithDispatcher as et, patchAllowlistUsersInConfigEntries as f, createScopedPairingAccess as fi, buildHistoryContextFromEntries as fn, resolveWalletRuntimeConfig as fr, buildModelsProviderData as ft, buildCommandsListResult as g, resolveChannelAccountConfigBasePath as gi, evictOldHistoryKeys as gn, syncSatMainnetRuntimeIds as gr, calculateTotalPages as gt, getAcpStatusSnapshot as h, chunkTextForOutbound as hi, clearHistoryEntriesIfEnabled as hn, getSatMainnetSyncStatus as hr, buildProviderKeyboard as ht, looksLikeIMessageTargetId as i, buildHostnameAllowlistPolicyFromSuffixAllowlist as ii, findCodeRegions as in, resolveWalletRolePolicyProfile as ir, formatInboundEnvelope as it, resolveModel as j, getRealtimeTranscriptionProvider as ji, setSseHeaders as jn, publicKeyRawBase64UrlFromPem as jr, DEFAULT_INPUT_IMAGE_MAX_BYTES as jt, textToSpeech as k, normalizeRealtimeVoiceProviderId as ki, resolveSessionKey as kn, errorShape as kr, isAudioAttachment as kt, buildAllowlistResolutionSummary as l, resolveOutboundMediaUrls as li, handleGatewayPostJsonEndpoint as ln, probeLocalSocketSignerHealth as lr, EmbeddedBlockChunker as lt, pushHandlers as m, buildAgentMediaPayload as mi, clearHistoryEntries as mn, buildAttestation as mr, buildModelsKeyboard as mt, collectBlueBubblesStatusIssues as n, extractToolSend as ni, formatReasoningMessage as nn, loadWalletProviderSecret as nr, createInboundDebouncer as nt, imessageOnboardingAdapter as o, normalizeHostnameSuffixAllowlist as oi, optionalStringEnum as on, resolveWalletUserRole as or, resolveEnvelopeFormatOptions as ot, summarizeMapping as p, fetchWithBearerAuthScopeFallback as pi, buildPendingHistoryContextFromMap as pn, fetchSolanaWalletAssetsViaRpc as pr, formatModelsAvailableHeader as pt, computeBackoff as q, BLUEBUBBLES_ACTION_NAMES as qi, createOrExecuteWalletSend as qn, createDedupeCache as qr, buildHelpMessage as qt, signalOnboardingAdapter as r, withTempDownloadPath as ri, stripReasoningTagsFromText as rn, resolveWalletPolicyConfig as rr, resolveInboundDebounceMs as rt, buildMediaPayload as s, createNormalizedOutboundDeliverer as si, stringEnum as sn, upsertNamedWallet as sr, dispatchInboundMessage as st, LineConfigSchema as t, resolveWebhookPath as ti, resolveSlackUserAllowed as tn, resolveWalletProviderId as tr, provider_dispatcher_exports as tt, canonicalizeAllowlistWithResolvedIds as u, sendMediaWithLeadingCaption as ui, buildAgentMessageFromConversationEntries as un, requireLocalSocketSignerPath as ur, getReplyFromConfig as ut, buildModelCatalogStatus as v, DM_GROUP_ACCESS_REASON as vi, recordPendingHistoryEntryIfEnabled as vn, resolveSatBondProgramIdFromEnv as vr, parseModelCallbackData as vt, executeAcpxPushTestRequest as w, resolveControlCommandGate as wi, registerAcpRuntimeBackend as wn, onAgentEvent as wr, createMediaAttachmentCache as wt, isDangerousNameMatchingEnabled as x, resolveDmGroupAccessWithLists as xi, normalizeMentionText as xn, resolveSatProgramIdFromEnv as xr, formatDurationSeconds as xt, loadGatewayModelCatalog as y, readStoreAllowFromForDmPolicy as yi, buildMentionRegexes as yn, resolveSatMintAddressFromEnv as yr, buildCommandsPaginationKeyboard as yt, listLineAccountIds as z, downloadDashscopeGeneratedVideos as zi, readRequestBodyWithLimit as zn, createImageCard as zr, image_exports as zt };
+export { createInboundDebouncer as $, enforceWalletCustodyForAutonomousSend as $n, resolveWebhookTargets as $r, formatReasoningMessage as $t, parseTtsDirectives as A, canonicalizeRealtimeTranscriptionProviderId as Ai, sendJson as An, loadOrCreateDeviceIdentity as Ar, DEFAULT_INPUT_MAX_REDIRECTS as At, logAckFailure as B, extractDashscopeVideoUrls as Bi, requestBodyErrorToText as Bn, createInfoCard as Br, subagent_registry_exports as Bt, resolveEffectiveToolInventory as C, resolveCommandAuthorizedFromAuthorizers as Ci, modelSupportsVision as Cn, emitAgentEvent as Cr, resolveAutoImageModel as Ct, runEmbeddedPiAgent as D, getRealtimeVoiceProvider as Di, createDefaultDeps as Dn, GatewayClient as Dr, registerUnhandledRejectionHandler as Dt, ACPX_PUSH_TEST_WRAPPER_ID as E, canonicalizeRealtimeVoiceProviderId as Ei, AcpRuntimeError as En, callGatewayScoped as Er, isAudioAttachment as Et, resolveMentionGatingWithBypass as F, DEFAULT_VIDEO_GENERATION_TIMEOUT_MS as Fi, RequestBodyLimitError as Fn, processLineMessage as Fr, resolveInputFileLimits as Ft, sleepWithAbort as G, resolveAllowlistMatchSimple as Gi, resolveAgentAvatar as Gn, createLoggerBackedRuntime as Gr, normalizeGroupActivation as Gt, logTypingFailure as H, resolveVideoGenerationReferenceUrls as Hi, resolveChannelMediaMaxBytes as Hn, resolveTelegramReactionLevel as Hr, buildCommandsMessage as Ht, listLineAccountIds as I, DEFAULT_VIDEO_RESOLUTION_TO_SIZE as Ii, installRequestBodyLimitGuard as In, stripMarkdown as Ir, image_exports as It, shouldAckReaction as J, BLUEBUBBLES_GROUP_ACTIONS as Ji, DEFAULT_FEDERATION_BASE_URL as Jn, pruneMapToMaxSize as Jr, normalizeAllowList$2 as Jt, recordInboundSession as K, BLUEBUBBLES_ACTIONS as Ki, readWalletStatusSnapshot as Kn, createPersistentDedupe as Kr, parseActivationCommand as Kt, normalizeAccountId as L, buildDashscopeVideoGenerationInput as Li, isRequestBodyLimitError as Ln, createReceiptCard as Lr, hasControlCommand as Lt, issuePairingChallenge as M, listRealtimeTranscriptionProviders as Mi, writeDone as Mn, signDevicePayload as Mr, extractFileContentFromSource as Mt, createTypingCallbacks as N, normalizeRealtimeTranscriptionProviderId as Ni, DEFAULT_WEBHOOK_BODY_TIMEOUT_MS as Nn, verifyDeviceSignature as Nr, extractImageContentFromSource as Nt, resolveTtsConfig as O, listRealtimeVoiceProviders as Oi, resolveAgentIdForRequest as On, ErrorCodes as Or, DEFAULT_INPUT_IMAGE_MAX_BYTES as Ot, resolveMentionGating as P, DEFAULT_VIDEO_GENERATION_DURATION_SECONDS as Pi, DEFAULT_WEBHOOK_MAX_BODY_BYTES as Pn, hasMarkdownToConvert as Pr, normalizeMimeList as Pt, provider_dispatcher_exports as Q, resolveFederationHandle as Qn, resolveSingleWebhookTargetAsync as Qr, resolveSlackUserAllowed as Qt, resolveDefaultLineAccountId as R, buildDashscopeVideoGenerationParameters as Ri, readJsonBodyWithLimit as Rn, createActionCard as Rr, shouldComputeCommandAuthorized as Rt, getPublicGatewayIdentity as S, resolveEffectiveAllowFromLists as Si, loadModelCatalog as Sn, tryResolveSatRuntimeIds as Sr, normalizeMediaAttachments as St, ACPX_PUSH_TEST_METHOD as T, evaluateSenderGroupAccess as Ti, unregisterAcpRuntimeBackend as Tn, buildGatewayConnectionDetails as Tr, runCapability as Tt, buildPairingReply as U, registerPluginHttpRoute as Ui, runFederationAutoConnectOnce as Un, resolveTelegramInlineButtonsScope as Ur, buildCommandsMessagePaginated as Ut, logInboundDrop as V, pollDashscopeVideoTaskUntilComplete as Vi, deliver_exports as Vn, createListCard as Vr, enqueueSystemEvent as Vt, computeBackoff as W, formatAllowlistMatchMeta as Wi, startFederationAutoConnect as Wn, waitForAbortSignal as Wr, buildHelpMessage as Wt, dispatchReplyWithBufferedBlockDispatcher as X, resolveAgentPublicOrigin as Xn, rejectNonPostWebhookRequest as Xr, normalizeSlackSlug as Xt, shouldAckReactionForWhatsApp as Y, CHANNEL_MESSAGE_ACTION_NAMES as Yi, normalizeHandle as Yn, registerWebhookTarget as Yr, normalizeAllowListLower as Yt, dispatchReplyWithDispatcher as Z, resolveFederationBaseUrl as Zn, resolveSingleWebhookTarget as Zr, resolveSlackAllowListMatch as Zt, getGatewayUpdateStatus as _, resolveSenderCommandAuthorization as _i, matchesMentionWithExplicit as _n, SAT_RUNTIME_DEFAULTS as _r, formatDurationPrecise as _t, normalizeIMessageMessagingTarget as a, isHttpsUrlAllowedByHostnameSuffixAllowlist as ai, wrapExternalContent as an, readWalletProviderRegistry as ar, createReplyDispatcherWithTyping as at, getStatusSummary as b, resolveDmGroupAccessWithCommandGate as bi, agentCommand as bn, resolveSatMintProgramIdFromEnv as br, buildProviderRegistry as bt, addAllowlistUserEntriesFromConfigEntry as c, formatTextWithAttachmentLinks as ci, DEFAULT_GROUP_HISTORY_LIMIT as cn, callLocalSocketSigner as cr, resolveStoredModelOverride as ct, mergeAllowlist as d, buildOauthProviderAuthResult as di, clearHistoryEntries as dn, resolveLocalSignerSocketPath as dr, buildModelsKeyboard as dt, normalizeWebhookPath as ei, stripReasoningTagsFromText as en, createWalletProviderAdapter as er, resolveInboundDebounceMs as et, patchAllowlistUsersInConfigEntries as f, createScopedPairingAccess as fi, clearHistoryEntriesIfEnabled as fn, resolveWalletRuntimeConfig as fr, buildProviderKeyboard as ft, buildCommandsListResult as g, resolveChannelAccountConfigBasePath as gi, buildMentionRegexes as gn, syncSatMainnetRuntimeIds as gr, buildCommandsPaginationKeyboard as gt, getAcpStatusSnapshot as h, chunkTextForOutbound as hi, recordPendingHistoryEntryIfEnabled as hn, getSatMainnetSyncStatus as hr, parseModelCallbackData as ht, looksLikeIMessageTargetId as i, buildHostnameAllowlistPolicyFromSuffixAllowlist as ii, stringEnum as in, resolveWalletRolePolicyProfile as ir, dispatchInboundMessage as it, resolveModel as j, getRealtimeTranscriptionProvider as ji, setSseHeaders as jn, publicKeyRawBase64UrlFromPem as jr, DEFAULT_INPUT_TIMEOUT_MS as jt, textToSpeech as k, normalizeRealtimeVoiceProviderId as ki, resolveSessionKey as kn, errorShape as kr, DEFAULT_INPUT_IMAGE_MIMES as kt, buildAllowlistResolutionSummary as l, resolveOutboundMediaUrls as li, buildHistoryContextFromEntries as ln, probeLocalSocketSignerHealth as lr, buildModelsProviderData as lt, pushHandlers as m, buildAgentMediaPayload as mi, recordPendingHistoryEntry as mn, buildAttestation as mr, getModelsPageSize as mt, collectBlueBubblesStatusIssues as n, extractToolSend as ni, isInsideCode as nn, loadWalletProviderSecret as nr, formatInboundFromLabel as nt, imessageOnboardingAdapter as o, normalizeHostnameSuffixAllowlist as oi, handleGatewayPostJsonEndpoint as on, resolveWalletUserRole as or, EmbeddedBlockChunker as ot, summarizeMapping as p, fetchWithBearerAuthScopeFallback as pi, evictOldHistoryKeys as pn, fetchSolanaWalletAssetsViaRpc as pr, calculateTotalPages as pt, removeAckReactionAfterReply as q, BLUEBUBBLES_ACTION_NAMES as qi, createOrExecuteWalletSend as qn, createDedupeCache as qr, allowListMatches as qt, signalOnboardingAdapter as r, withTempDownloadPath as ri, optionalStringEnum as rn, resolveWalletPolicyConfig as rr, resolveEnvelopeFormatOptions as rt, buildMediaPayload as s, createNormalizedOutboundDeliverer as si, buildAgentMessageFromConversationEntries as sn, upsertNamedWallet as sr, getReplyFromConfig as st, LineConfigSchema as t, resolveWebhookPath as ti, findCodeRegions as tn, resolveWalletProviderId as tr, formatInboundEnvelope as tt, canonicalizeAllowlistWithResolvedIds as u, sendMediaWithLeadingCaption as ui, buildPendingHistoryContextFromMap as un, requireLocalSocketSignerPath as ur, formatModelsAvailableHeader as ut, buildModelCatalogStatus as v, DM_GROUP_ACCESS_REASON as vi, normalizeMentionText as vn, resolveSatBondProgramIdFromEnv as vr, formatDurationSeconds as vt, executeAcpxPushTestRequest as w, resolveControlCommandGate as wi, registerAcpRuntimeBackend as wn, onAgentEvent as wr, resolveMediaAttachmentLocalRoots as wt, isDangerousNameMatchingEnabled as x, resolveDmGroupAccessWithLists as xi, findModelInCatalog as xn, resolveSatProgramIdFromEnv as xr, createMediaAttachmentCache as xt, loadGatewayModelCatalog as y, readStoreAllowFromForDmPolicy as yi, resolveAssistantStreamDeltaText as yn, resolveSatMintAddressFromEnv as yr, resolveChannelConfigWrites as yt, resolveLineAccount as z, downloadDashscopeGeneratedVideos as zi, readRequestBodyWithLimit as zn, createImageCard as zr, isAbortRequestText as zt };