@geminixiang/mikan 1.0.0-beta.14 → 1.0.0-beta.15

package/CHANGELOG.md

@@ -9,6 +9,31 @@ any release.
 
 ## [Unreleased]
 
+## [1.0.0-beta.15]
+
+### Added
+
+- Add native image generation with automatic upload through the active model provider.
+- Add extension chat commands via `api.registerCommand`: deterministic `/name` dispatch with no model call; built-ins and first registrations win.
+- Add an extension disposal lifecycle (`api.onDispose` or an `activate` return value), run when a harness instance is discarded (`/pi-new`, idle eviction, session rotation).
+- Add `api.triggerRun(text)` to fire an immediate autonomous agent run, `api.uploadFile(path, title)` for proactive file uploads, and an explicit `conversationId` option on `api.notify` for cross-conversation posting.
+- Add `agent_error` and `budget_exceeded` extension hooks so monitoring extensions see failed turns and tripped run budgets.
+- Pass a `RunOrigin` (platform, triggering message id, user identity, attachments) to extension hook events, making `api.react` and per-user extension policy usable.
+- Let `before_agent_start` extensions rewrite the user prompt or block the turn before the model runs; blocked turns leave no trace in the transcript or session store.
+- Let `tool_result` extensions rewrite tool output (content and error flag) before the model and the session store see it, enabling secret redaction and output truncation.
+
+### Changed
+
+- Dispatch `before_agent_start` and `tool_result` hooks with chaining semantics (each handler sees earlier handlers' rewrites; any `block` wins) instead of first-result-wins.
+
+### Fixed
+
+- Dispose cached runners when models switch or environment credentials refresh.
+
+### Tests
+
+- Add coverage for image generation, extension lifecycle and hook rewrites, and runner disposal.
+
 ## [1.0.0-beta.14]
 
 ### Added

package/README.md

@@ -51,19 +51,45 @@ npm install && npm run build
 
 ## Quick Start
 
-All platforms share the same CLI:
+Run mikan under [PM2](https://pm2.keymetrics.io/) so it stays up, restarts after failures, and starts on boot:
 
 ```bash
-mikan [--state-dir=~/.mikan] [--sandbox=<mode>] <working-directory>
+npm i -g @geminixiang/mikan pm2
+
+# One-time setup: create the state directory and settings
+mikan --onboard --state-dir=~/.mikan
+
+# Grab the maintained ecosystem file, then edit `args` and `env`
+curl -O https://raw.githubusercontent.com/geminixiang/mikan/main/deploy/pm2/ecosystem.config.cjs
+
+pm2 start ecosystem.config.cjs
+pm2 save
+pm2 startup   # run the printed command to enable boot autostart
+```
+
+In `ecosystem.config.cjs`, point `args` at your state dir, sandbox mode, and working directory:
+
+```js
+args: "--state-dir=/srv/mikan/state --sandbox=host /srv/mikan/workspace",
+```
+
+Then set the platform tokens you need in `env`; you can run multiple platforms at once:
+
+```js
+env: {
+  SLACK_APP_TOKEN: "xapp-...",
+  SLACK_BOT_TOKEN: "xoxb-...",
+  TELEGRAM_BOT_TOKEN: "123456:ABC-...",
+  DISCORD_BOT_TOKEN: "MTI...",
+},
 ```
 
-Set the platform tokens you need; you can run multiple platforms at once:
+Tail logs with `pm2 logs mikan`; upgrade with `npm i -g @geminixiang/mikan && pm2 reload mikan`. See [the deployment guide](src/content/docs/deployment.mdx) for sandbox images, graceful shutdown, and the health endpoint.
+
+For a one-off foreground run, the same CLI works directly:
 
 ```bash
-export SLACK_APP_TOKEN=xapp-...
-export SLACK_BOT_TOKEN=xoxb-...
-export TELEGRAM_BOT_TOKEN=123456:ABC-...
-export DISCORD_BOT_TOKEN=MTI...
+mikan [--state-dir=~/.mikan] [--sandbox=<mode>] <working-directory>
 ```
 
 ## Platforms

package/dist/adapter.d.ts

@@ -1,2 +1,2 @@
-export type { MessagingBot, ConversationContext, ConversationEvent, MessagingEventHandler, ChatAdapter, ConversationMessage, ConversationResponder, ChatToolResult, ConversationKind, MessagingInfo, PlatformName, PlatformNotifier, PlatformReactor, RunningSession, } from "./types.js";
+export type { MessagingBot, ConversationContext, ConversationEvent, MessagingEventHandler, ChatAdapter, ConversationMessage, ConversationResponder, ChatToolResult, ConversationKind, MessagingInfo, PlatformName, PlatformNotifier, PlatformReactor, PlatformUploader, RunningSession, } from "./types.js";
 //# sourceMappingURL=adapter.d.ts.map

package/dist/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,cAAc,GACf,MAAM,YAAY,CAAC"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,cAAc,GACf,MAAM,YAAY,CAAC"}

package/dist/adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"","sourcesContent":["export type {\n  MessagingBot,\n  ConversationContext,\n  ConversationEvent,\n  MessagingEventHandler,\n  ChatAdapter,\n  ConversationMessage,\n  ConversationResponder,\n  ChatToolResult,\n  ConversationKind,\n  MessagingInfo,\n  PlatformName,\n  PlatformNotifier,\n  PlatformReactor,\n  RunningSession,\n} from \"./types.js\";\n"]}
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"","sourcesContent":["export type {\n  MessagingBot,\n  ConversationContext,\n  ConversationEvent,\n  MessagingEventHandler,\n  ChatAdapter,\n  ConversationMessage,\n  ConversationResponder,\n  ChatToolResult,\n  ConversationKind,\n  MessagingInfo,\n  PlatformName,\n  PlatformNotifier,\n  PlatformReactor,\n  PlatformUploader,\n  RunningSession,\n} from \"./types.js\";\n"]}

package/dist/agent.d.ts

@@ -7,7 +7,7 @@ import type { PiAgentWrapper } from "./types.js";
 import { type ImageContent } from "@earendil-works/pi-ai";
 import { MikanModels } from "./harness/index.js";
 import type { ConversationMessage } from "./adapter.js";
-import type { PlatformNotifier, PlatformReactor } from "./types.js";
+import type { PlatformNotifier, PlatformReactor, PlatformUploader } from "./types.js";
 import type { SessionViewTokenStoreLike } from "./commands/types.js";
 import type { DockerContainerManager } from "./provisioner.js";
 import { type RuntimePathContext, type SandboxConfig } from "./sandbox/index.js";
@@ -46,6 +46,7 @@ export interface CreateRunnerOptions {
     };
     platformNotifier?: PlatformNotifier;
     platformReactor?: PlatformReactor;
+    platformUploader?: PlatformUploader;
     platformToolPackFactories?: readonly PlatformToolPackFactory[];
     /** Model registry override; defaults to the process-wide models.json load. */
     models?: MikanModels;

package/dist/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD,OAAO,EAAY,KAAK,YAAY,EAAc,MAAM,uBAAuB,CAAC;AAChF,OAAO,EASL,WAAW,EAGZ,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EAEV,mBAAmB,EAIpB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAGV,gBAAgB,EAChB,eAAe,EAEhB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAKrE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAQ5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIrD,OAAO,EAGL,KAAK,oBAAoB,EAE1B,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAKhE,wBAAgB,+BAA+B,CAC7C,aAAa,EAAE,aAAa,EAC5B,iBAAiB,EAAE,MAAM,GACxB,kBAAkB,CAMpB;AAED,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,kBAAkB,GAC9B,MAAM,CAER;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,kBAAkB,GAC9B,MAAM,CAKR;AAsDD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,mBAAmB,EAC5B,aAAa,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,kBAAkB,GAC/B;IACD,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,YAAY,EAAE,CAAC;CAClC,CAaA;AAyID,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,GAAG,MAAM,GAAG,UAAU,CAAC,GAC7D,MAAM,GAAG,SAAS,CAOpB;AA6KD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,cAAc,EAAE,OAAO,EACvB,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,YAAY,EAAE,MAAM,GACnB,MAAM,CAkBR;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAYR;AAqhCD,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,oBAAoB,CAAC;IACnC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,WAAW,CAAC,EAAE;QACZ,UAAU,EAAE,yBAAyB,CAAC;QACtC,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,yBAAyB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC/D,8EAA8E;IAC9E,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAmPxF"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD,OAAO,EAAY,KAAK,YAAY,EAAc,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAUL,WAAW,EAKZ,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EAEV,mBAAmB,EAIpB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAGV,gBAAgB,EAChB,eAAe,EAEf,gBAAgB,EACjB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAKrE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAQ5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIrD,OAAO,EAGL,KAAK,oBAAoB,EAE1B,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAKhE,wBAAgB,+BAA+B,CAC7C,aAAa,EAAE,aAAa,EAC5B,iBAAiB,EAAE,MAAM,GACxB,kBAAkB,CAMpB;AAED,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,kBAAkB,GAC9B,MAAM,CAER;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,kBAAkB,GAC9B,MAAM,CAKR;AAsDD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,mBAAmB,EAC5B,aAAa,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,kBAAkB,GAC/B;IACD,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,YAAY,EAAE,CAAC;CAClC,CAaA;AAsHD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,GAAG,MAAM,GAAG,UAAU,CAAC,GAC7D,MAAM,GAAG,SAAS,CAOpB;AA6KD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,cAAc,EAAE,OAAO,EACvB,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,YAAY,EAAE,MAAM,GACnB,MAAM,CAkBR;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAYR;AA4hCD,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,oBAAoB,CAAC;IACnC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,WAAW,CAAC,EAAE;QACZ,UAAU,EAAE,yBAAyB,CAAC;QACtC,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,yBAAyB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC/D,8EAA8E;IAC9E,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CA2SxF"}

package/dist/agent.js

@@ -2,10 +2,10 @@
  * Agent runner: prompt construction, path translation, run lifecycle, and createRunner.
  * Single module — do not split helpers that only this file uses.
  */
-import { DEFAULT_EVENT_BUDGET, defaultExtensionDirs, formatSkillsForPrompt, loadExtensions, loadSkillsFromDir, MikanAgentSession, MikanModels, } from "./harness/index.js";
+import { DEFAULT_EVENT_BUDGET, defaultExtensionDirs, formatSkillsForPrompt, loadExtensions, loadSkillsFromDir, MikanAgentSession, MikanModels, parseCommandInput, } from "./harness/index.js";
 import { createHash } from "crypto";
 import { existsSync, readFileSync } from "fs";
-import { mkdir, readFile, writeFile } from "fs/promises";
+import { mkdir, readFile } from "fs/promises";
 import { join, posix } from "path";
 import { resolveConversationSettings } from "./config.js";
 import { readEnv } from "./utils/env.js";
@@ -88,15 +88,6 @@ export function buildPromptPayload(message, workspacePath, pathContext) {
     }
     return { userMessage, imageAttachments };
 }
-async function writePromptDebugContext(conversationDir, systemPrompt, session, userMessage, imageAttachmentCount) {
-    const debugContext = {
-        systemPrompt,
-        messages: session.messages,
-        newUserMessage: userMessage,
-        imageAttachmentCount,
-    };
-    await writeFile(join(conversationDir, "last_prompt.jsonl"), JSON.stringify(debugContext, null, 2));
-}
 async function getMemory(conversationDir) {
     const parts = [];
     // Read workspace-level memory (shared across all conversations)
@@ -722,7 +713,7 @@ function createRunnerExecutionContext(sandboxConfig, vaultManager, provisioner,
  * notify posts through the platform bots when main.ts provides a notifier.
  */
 function buildExtensionHostServices(params) {
-    const { workspaceDir, vaultManager, platformNotifier, platformReactor } = params;
+    const { workspaceDir, vaultManager, platformNotifier, platformReactor, platformUploader } = params;
     const eventStore = HostEventStore.fromWorkspaceDir(workspaceDir);
     return {
         stateDir: readEnv("STATE_DIR"),
@@ -742,6 +733,7 @@ function buildExtensionHostServices(params) {
         },
         ...(platformNotifier ? { postMessage: platformNotifier } : {}),
         ...(platformReactor ? { addReaction: platformReactor } : {}),
+        ...(platformUploader ? { uploadFile: platformUploader } : {}),
         ...(vaultManager
             ? {
                 resolveSecrets: (slug) => vaultManager.resolve(`extensions/${slug}`)?.env ?? {},
@@ -750,7 +742,7 @@ function buildExtensionHostServices(params) {
     };
 }
 async function createConfiguredAgentSession(params) {
-    const { conversationId, workspaceDir, systemPrompt, model, thinkingLevel, tools, sessionStore, models, vaultManager, platformNotifier, platformReactor, } = params;
+    const { conversationId, workspaceDir, systemPrompt, model, thinkingLevel, tools, sessionStore, models, vaultManager, platformNotifier, platformReactor, platformUploader, } = params;
     // Host-only dirs under the state dir: extension code runs in the mikan
     // process, so it must never load from workspace paths — those are mounted
     // into sandbox containers and agent-writable (sandbox escape otherwise).
@@ -762,6 +754,7 @@ async function createConfiguredAgentSession(params) {
             vaultManager,
             platformNotifier,
             platformReactor,
+            platformUploader,
         }),
     });
     for (const err of extensionsResult.errors) {
@@ -783,7 +776,12 @@ async function createConfiguredAgentSession(params) {
     if (reloaded > 0) {
         log.logInfo(`[${conversationId}] Reloaded ${reloaded} messages from session context`);
     }
-    return { session, extensionSkills: extensionsResult.skills };
+    return {
+        session,
+        extensionSkills: extensionsResult.skills,
+        extensionRegistry: extensionsResult.registry,
+        disposeExtensions: extensionsResult.dispose,
+    };
 }
 function reloadSessionMessages(session, conversationId) {
     const reloaded = session.reloadFromSession();
@@ -846,7 +844,6 @@ async function prepareRunContext(params) {
     const { userMessage, imageAttachments } = buildPromptPayload(message, pathContext.runtimeWorkspaceRoot, pathContext);
     const turnInstructions = buildTurnInstructions(message.id.startsWith("event:"), triggerAttribution, platform.name);
     const finalUserMessage = turnInstructions ? `${turnInstructions}\n\n${userMessage}` : userMessage;
-    await writePromptDebugContext(conversationDir, systemPrompt, session, finalUserMessage, imageAttachments.length);
     return {
         sessionConversation,
         runQueue,
@@ -1133,18 +1130,21 @@ function attachSessionEventHandlers(params) {
  * This is a stateless factory function.
  */
 export async function createRunner(options) {
-    const { sandboxConfig, sessionKey, conversationId, conversationDir, workspaceDir, sessionScope, vaultManager, provisioner, sessionView, platformNotifier, platformReactor, platformToolPackFactories, } = options;
+    const { sandboxConfig, sessionKey, conversationId, conversationDir, workspaceDir, sessionScope, vaultManager, provisioner, sessionView, platformNotifier, platformReactor, platformUploader, platformToolPackFactories, } = options;
     const agentConfig = resolveConversationSettings(conversationDir);
     const workspaceBase = join(conversationDir, "..");
     const { executionResolver, executor, getPathContext, resolveExecutorForRun } = createRunnerExecutionContext(sandboxConfig, vaultManager, provisioner, workspaceDir, workspaceBase);
     let pathContext = getUnresolvedSandboxPathContext(sandboxConfig, workspaceBase);
-    // Create tools (per-runner, with per-runner upload function setter)
-    const { tools, setUploadFunction, setReactFunction, bindPlatformToolPacks, setEventContext, setSandboxContext, } = createMikanTools(executor, workspaceDir, { sandbox: sandboxConfig, provisioner }, platformToolPackFactories ?? []);
     const modelRegistry = options.models ?? MikanModels.create();
     if (modelRegistry.getError()) {
         log.logWarning("models.json load error", modelRegistry.getError());
     }
     const model = modelRegistry.resolve(agentConfig.provider, agentConfig.model);
+    // Create tools (per-runner, with per-runner upload function setter)
+    const { tools, setUploadFunction, setReactFunction, bindPlatformToolPacks, setEventContext, setSandboxContext, } = createMikanTools(executor, workspaceDir, { sandbox: sandboxConfig, provisioner }, platformToolPackFactories ?? [], {
+        model,
+        getApiKey: () => modelRegistry.getApiKeyForProvider(model.provider),
+    });
     // Initial system prompt (will be updated each run with fresh memory/channels/users/skills)
     const memory = await getMemory(conversationDir);
     const skills = loadMikanSkills(conversationDir, pathContext.runtimeWorkspaceRoot);
@@ -1168,7 +1168,7 @@ export async function createRunner(options) {
     }
     const sessionUuid = extractSessionUuid(contextFile);
     const chatSessionManager = new AgentMemoryFileManager();
-    const { session, extensionSkills } = await createConfiguredAgentSession({
+    const { session, extensionSkills, extensionRegistry, disposeExtensions } = await createConfiguredAgentSession({
         conversationId,
         workspaceDir,
         systemPrompt,
@@ -1180,6 +1180,7 @@ export async function createRunner(options) {
         vaultManager,
         platformNotifier,
         platformReactor,
+        platformUploader,
     });
     // Mutable per-run state - event handler references this
     const runState = createRunState();
@@ -1241,10 +1242,39 @@ export async function createRunner(options) {
             // Autonomous (event/trigger) runs get an explicit resource ceiling since
             // no human is watching the loop; interactive turns stay human-gated.
             const isEventRun = message.id.startsWith("event:");
-            await session.prompt(prepared.userMessage, {
+            // Event runs have no triggering platform message, so identity fields
+            // stay unset and extensions must null-check them.
+            const origin = isEventRun
+                ? { kind: "event", platform: platform.name }
+                : {
+                    kind: "interactive",
+                    platform: platform.name,
+                    messageTs: message.id,
+                    userId: message.userId,
+                    userName: message.userName,
+                    threadTs: message.threadTs,
+                    attachments: message.attachments,
+                };
+            const outcome = await session.prompt(prepared.userMessage, {
+                origin,
                 ...(prepared.imageAttachments.length > 0 ? { images: prepared.imageAttachments } : {}),
                 ...(isEventRun ? { budget: DEFAULT_EVENT_BUDGET } : {}),
             });
+            if (outcome?.blocked) {
+                const text = outcome.reason
+                    ? `_Turn blocked by an extension: ${outcome.reason}_`
+                    : "_Turn blocked by an extension._";
+                sendAgentEvent({
+                    sessionId: sessionUuid,
+                    actorName: formatAgentActorName(message.userName, prepared.sessionConversation),
+                    event: { kind: "diagnostic", text },
+                });
+                await responder.respondDiagnostic(text, { style: "muted" });
+                runState.responder = null;
+                runState.logCtx = null;
+                runState.queue = null;
+                return { stopReason: "blocked" };
+            }
             // Wait for queued messages
             await prepared.runQueue.wait();
             const sessionViewTokenStore = sessionView?.tokenStore;
@@ -1290,6 +1320,21 @@ export async function createRunner(options) {
         abort() {
             session.abort();
         },
+        async tryExtensionCommand(message, responder) {
+            const parsed = parseCommandInput(message.text);
+            if (!parsed)
+                return false;
+            return extensionRegistry.dispatchCommand(parsed.name, {
+                args: parsed.args,
+                conversationId,
+                userId: message.userId,
+                userName: message.userName,
+                respond: (text) => responder.respond(text),
+            });
+        },
+        async dispose() {
+            await disposeExtensions();
+        },
         getCurrentStep() {
             const pending = runState.pendingTools;
             if (pending.size === 0)