@gguf/claw 2026.2.4 → 2026.2.5

package/dist/extensionAPI.js

@@ -1,21 +1,21 @@
-import { a as resolveOAuthDir, i as resolveGatewayPort, n as resolveConfigPath, s as resolveStateDir, t as STATE_DIR } from "./paths-VslOJiD2.js";
-import { A as normalizeAccountId$3, D as buildAgentMainSessionKey, E as DEFAULT_MAIN_KEY, F as sanitizeAgentId, I as isAcpSessionKey, L as isSubagentSessionKey, M as normalizeMainKey, N as resolveAgentIdFromSessionKey, O as buildAgentPeerSessionKey, P as resolveThreadSessionKeys, R as parseAgentSessionKey, S as resolveOpenClawPackageRoot, T as DEFAULT_AGENT_ID, b as filterBootstrapFilesForSession, c as resolveDefaultAgentId, f as DEFAULT_AGENT_WORKSPACE_DIR, i as resolveAgentModelFallbacksOverride, j as normalizeAgentId, k as buildGroupHistoryKey, l as resolveSessionAgentId, n as resolveAgentConfig, o as resolveAgentSkillsFilter, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, u as resolveSessionAgentIds, w as DEFAULT_ACCOUNT_ID$1, x as loadWorkspaceBootstrapFiles, y as ensureAgentWorkspace, z as resolveThreadParentSessionKey } from "./agent-scope-COnICB_7.js";
-import { A as normalizeE164, B as danger, C as CONFIG_DIR, D as formatTerminalLink, E as ensureDir$3, F as shortenHomePath, G as success, H as logVerbose, I as sleep, J as isRich, K as warn, L as sliceUtf16Safe, M as resolveJidToE164, N as resolveUserPath, O as isSelfChatMode, P as shortenHomeInString, Q as normalizeLogLevel, R as toWhatsappJid, S as setActivePluginRegistry, U as setVerbose, V as info, W as shouldLogVerbose, X as getChildLogger, Y as theme, _ as normalizeAnyChannelId, a as logDebug, b as getActivePluginRegistry, c as logWarn, d as clearActiveProgressLine, f as registerActiveProgressLine, h as CHAT_CHANNEL_ORDER, i as spawnWithFallback, k as jidToE164, l as createSubsystemLogger, n as runExec, o as logError, p as unregisterActiveProgressLine, q as colorize, r as formatSpawnError, s as logInfo, t as runCommandWithTimeout, u as defaultRuntime, v as normalizeChannelId, w as clampInt, x as requireActivePluginRegistry, z as truncateUtf16Safe } from "./exec-B7WKla_0.js";
-import { D as isTruthyEnvValue, G as DEFAULT_MODEL, H as resolveOpenClawAgentDir, K as DEFAULT_PROVIDER, L as listProfilesForProvider, M as markAuthProfileFailure, N as markAuthProfileUsed, O as parseBooleanValue$1, P as resolveApiKeyForProfile, R as markAuthProfileGood, S as getShellPathFromLoginShell, U as resolveAuthProfileDisplayLabel, V as resolveAuthStorePathForDisplay, W as DEFAULT_CONTEXT_TOKENS, _ as getCustomProviderApiKey, a as normalizeProviderId, b as resolveEnvApiKey, c as resolveDefaultModelForAgent, d as normalizeGoogleModelId, g as getApiKeyForModel, i as modelKey, j as isProfileInCooldown, k as resolveAuthProfileOrder, l as resolveModelRefFromString, n as buildModelAliasIndex, o as parseModelRef, r as isCliProvider, s as resolveConfiguredModelRef, t as buildAllowedModelSet, u as resolveThinkingDefault, v as requireApiKey, w as resolveShellEnvFallbackTimeoutMs, x as resolveModelAuthMode, y as resolveApiKeyForProvider, z as ensureAuthProfileStore } from "./model-selection-Cs1y6OBv.js";
-import { a as saveJsonFile, i as loadJsonFile } from "./github-copilot-token-BEtihsn6.js";
-import { n as resolveCliName, t as formatCliCommand } from "./command-format-SkzzRqR1.js";
-import { A as fetchRemoteMedia, B as findFenceSpanAt, C as wrapFetchWithAbortSignal, D as loadWebMedia, E as markdownToIRWithMeta, F as chunkMarkdownTextWithMode, G as isSilentReplyText, H as parseFenceSpans, I as chunkText, L as chunkTextWithMode, M as resolveMarkdownTableMode, N as chunkByNewline, O as loadWebMediaRaw, P as chunkMarkdownText, R as resolveChunkMode, S as resolveFetch, T as markdownToIR, U as HEARTBEAT_TOKEN, V as isSafeFenceBreak, W as SILENT_REPLY_TOKEN, _ as normalizeChannelTargetInput, a as filterMessagingToolDuplicates, b as splitMediaFromOutput, c as createReplyToModeFilterForChannel, d as sendReadReceiptSignal, f as sendTypingSignal, g as buildTargetResolverSignature, h as streamSignalEvents, i as applyReplyThreading, j as fetchWithSsrFGuard, k as MediaFetchError, l as resolveReplyToMode, m as signalRpcRequest, n as normalizeReplyPayloadsForDelivery, o as isRenderablePayload, p as signalCheck, r as applyReplyTagsToPayload, s as shouldSuppressMessagingToolReplies, t as deliverOutboundPayloads, u as sendMessageSignal, v as normalizeTargetForProvider, w as chunkMarkdownIR, x as parseInlineDirectives$1, y as parseReplyDirectives, z as resolveTextChunkLimit } from "./deliver-Dl8TEyHM.js";
-import { $ as resolveCacheTtlMs$1, $t as buildBootstrapContextFiles, A as isContextOverflowError, An as normalizeWhatsAppTarget, At as resizeToJpeg, B as ensureSandboxWorkspaceForSession, Bn as listEnabledDiscordAccounts, Bt as loadWorkspaceSkillEntries, C as classifyFailoverReason, Cn as mediaKindFromMime, Ct as registerBrowserRoutes, D as isAuthAssistantError, Dn as listChannelPlugins, Dt as getImageMetadata, E as getApiErrorPayloadFingerprint, En as getChannelPlugin, F as isRawApiErrorPayload, Fn as listBindings, G as loadSessionStore, Gt as resolveSandboxConfigForAgent, H as resolveSandboxRuntimeStatus, Hn as normalizeDiscordToken, Ht as resolvePluginSkillDirs, I as isTimeoutErrorMessage, In as resolveSlackAccount, J as saveSessionStore, Jt as expandPolicyWithPluginGroups, K as readSessionUpdatedAt, Kt as buildPluginToolGroups, L as parseImageDimensionError, Ln as resolveSlackAppToken, M as isFailoverErrorMessage, Mn as listTelegramAccountIds, Mt as saveMediaBuffer, N as isLikelyContextOverflowError, Nn as resolveTelegramAccount, Nt as SsrFBlockedError, O as isCloudCodeAssistFormatError, On as normalizeChannelId$1, P as isRateLimitAssistantError, Pn as resolveTelegramToken, Q as isCacheEnabled, Qt as stripPluginOnlyAllowlist, R as parseImageSizeError, Rn as resolveSlackBotToken, Rt as buildWorkspaceSkillCommandSpecs, S as isGoogleModelApi, St as createBrowserRouteContext, T as formatRawAssistantErrorForUi, Tn as resolveSignalAccount, Tt as resolveProfile, U as appendAssistantMessageToSessionTranscript, Ut as applySkillEnvOverrides, V as resolveSandboxContext, Vn as resolveDiscordAccount, Vt as resolveSkillsPromptForRun, Wt as applySkillEnvOverridesFromSnapshot, X as updateSessionStore, Xt as normalizeToolName, Y as updateLastRoute, Yt as expandToolGroups, Z as updateSessionStoreEntry, Zt as resolveToolProfilePolicy, _ as sanitizeSessionMessagesImages, _n as imageMimeFromFormat, _t as resolveChannelGroupRequireMention, a as formatXHighModelHint, an as isInternalMessageChannel, at as resolveSessionKey$1, b as downgradeOpenAIReasoningBlocks, bn as kindFromMime, bt as resolveConversationLabel, c as normalizeReasoningLevel, cn as normalizeMessageChannel, ct as resolveSessionResetPolicy, d as normalizeVerboseLevel, dn as GATEWAY_CLIENT_IDS, dt as DEFAULT_RESET_TRIGGERS, en as ensureSessionHeader, et as deliveryContextFromSession, f as resolveResponseUsageMode, fn as GATEWAY_CLIENT_MODES, ft as resolveMainSessionKey, g as normalizeTextForComparison, gn as getFileExtension, gt as resolveChannelGroupPolicy, h as isMessagingToolDuplicateNormalized, hn as extensionForMime, ht as listChannelDocks, i as formatThinkingLevels, in as isDeliverableMessageChannel, it as normalizeSessionDeliveryFields, j as isFailoverAssistantError, jn as listEnabledTelegramAccounts, jt as getMediaDir, k as isCompactionFailureError, kn as isWhatsAppGroupJid, l as normalizeThinkLevel, ln as resolveGatewayMessageChannel, lt as resolveSessionResetType, mn as detectMime, mt as getChannelDock, n as validateGeminiTurns, nn as sanitizeGoogleTurnOrdering, nt as mergeDeliveryContext, o as listThinkingLevels, on as isMarkdownCapableMessageChannel, ot as evaluateSessionFreshness, p as supportsXHighThinking, pn as GATEWAY_CLIENT_NAMES, pt as deriveSessionMetaPatch, q as recordSessionMetaFromInbound, qt as collectExplicitAllowlist, r as pickFallbackThinkingLevel, rn as INTERNAL_MESSAGE_CHANNEL, rt as normalizeDeliveryContext, s as normalizeElevatedLevel, sn as listDeliverableMessageChannels, st as resolveChannelResetConfig, t as validateAnthropicTurns, tn as resolveBootstrapMaxChars, tt as deliveryContextKey, u as normalizeUsageDisplay, un as resolveMessageChannel, ut as resolveThreadFlag, v as sanitizeImageBlocks, vn as isAudioFileName, vt as resolveChannelGroupToolsPolicy, w as formatAssistantErrorText, wn as listEnabledSignalAccounts, wt as resolveBrowserConfig, x as isAntigravityClaude, xn as MAX_IMAGE_BYTES, xt as resolveGroupSessionKey, y as sanitizeToolResultImages, yn as isGifMedia, yt as resolveIMessageAccount, z as sanitizeUserFacingText, zn as normalizeChatType, zt as buildWorkspaceSkillSnapshot } from "./pi-embedded-helpers-DiK8Qn1l.js";
-import { A as getWebAuthAgeMs, C as getConfigValueAtPath, D as resolveAgentMaxConcurrent, E as unsetConfigValueAtPath, M as logoutWeb, O as VERSION, P as readWebSelfId, R as webAuthExists, S as unsetConfigOverride, T as setConfigValueAtPath, _ as resolveEnableState, a as validateConfigObjectWithPlugins, b as resetConfigOverrides, c as resolveTelegramCustomCommands, d as validateJsonSchemaValue, f as loadPluginManifestRegistry, g as normalizePluginsConfig, i as writeConfigFile, j as logWebSelfId, k as resolveWhatsAppAccount, l as isSafeExecutableValue, n as readConfigFileSnapshot, o as TELEGRAM_COMMAND_NAME_PATTERN, p as discoverOpenClawPlugins, r as resolveConfigSnapshotHash, s as normalizeTelegramCommandName, t as loadConfig, u as parseDurationMs, v as resolveMemorySlotDecision, w as parseConfigPath, x as setConfigOverride, y as getConfigOverrides } from "./config-CGsoho7J.js";
-import { i as discoverModels, r as discoverAuthStorage } from "./pi-model-discovery-CnK2Dol8.js";
-import { C as DEFAULT_AI_SNAPSHOT_MAX_CHARS, _ as rawDataToString, b as formatUncaughtError, h as ensureChromeExtensionRelayServer, v as extractErrorCode, y as formatErrorMessage$1 } from "./chrome-DlqPCh1y.js";
-import { a as resolveStorePath, i as resolveSessionTranscriptsDirForAgent, n as resolveSessionFilePath, r as resolveSessionTranscriptPath } from "./paths-xPuk88Yf.js";
-import { t as emitSessionTranscriptUpdate } from "./transcript-events-DW_H__a1.js";
-import { _ as resolveToolDisplay, a as resolveProviderVisionModelFromConfig, c as extractAssistantThinking, d as formatReasoningMessage, f as inferToolMetaFromArgs, g as stripThinkingTagsFromText, h as stripMinimaxToolCallXml, i as decodeDataUrl, l as extractThinkingFromTaggedStream, m as stripDowngradedToolCallText, n as coerceImageAssistantText, o as minimaxUnderstandImage, p as promoteThinkingTagsToBlocks, r as coerceImageModelConfig, s as extractAssistantText$1, t as describeImageWithModel, u as extractThinkingFromTaggedText, v as ensureOpenClawModelsJson } from "./image-BYmtfVH8.js";
-import { i as resolveMemorySearchConfig, n as resolveRetryConfig, r as retryAsync } from "./manager-JSP5pLyv.js";
-import { c as listMemoryFiles, l as normalizeExtraMemoryPaths } from "./sqlite-C59YNxdL.js";
-import { t as redactSensitiveText } from "./redact-BR0IM00e.js";
-import { a as getStatusCode$1, i as formatError$1, n as waitForWebLogin, o as waitForWaConnection, r as createWaSocket, t as startWebLoginWithQr } from "./login-qr-7WOtj6zE.js";
+import { a as resolveOAuthDir, i as resolveGatewayPort, n as resolveConfigPath, s as resolveStateDir, t as STATE_DIR } from "./paths-B1kfl4h5.js";
+import { A as normalizeAccountId$3, D as buildAgentMainSessionKey, E as DEFAULT_MAIN_KEY, F as sanitizeAgentId, I as isAcpSessionKey, L as isSubagentSessionKey, M as normalizeMainKey, N as resolveAgentIdFromSessionKey, O as buildAgentPeerSessionKey, P as resolveThreadSessionKeys, R as parseAgentSessionKey, S as resolveOpenClawPackageRoot, T as DEFAULT_AGENT_ID, b as filterBootstrapFilesForSession, c as resolveDefaultAgentId, f as DEFAULT_AGENT_WORKSPACE_DIR, i as resolveAgentModelFallbacksOverride, j as normalizeAgentId, k as buildGroupHistoryKey, l as resolveSessionAgentId, n as resolveAgentConfig, o as resolveAgentSkillsFilter, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, u as resolveSessionAgentIds, w as DEFAULT_ACCOUNT_ID$1, x as loadWorkspaceBootstrapFiles, y as ensureAgentWorkspace, z as resolveThreadParentSessionKey } from "./agent-scope-Csu2B6AM.js";
+import { A as normalizeE164, B as danger, C as CONFIG_DIR, D as formatTerminalLink, E as ensureDir$3, F as shortenHomePath, G as success, H as logVerbose, I as sleep, J as isRich, K as warn, L as sliceUtf16Safe, M as resolveJidToE164, N as resolveUserPath, O as isSelfChatMode, P as shortenHomeInString, Q as normalizeLogLevel, R as toWhatsappJid, S as setActivePluginRegistry, U as setVerbose, V as info, W as shouldLogVerbose, X as getChildLogger, Y as theme, _ as normalizeAnyChannelId, a as logDebug, b as getActivePluginRegistry, c as logWarn, d as clearActiveProgressLine, f as registerActiveProgressLine, h as CHAT_CHANNEL_ORDER, i as spawnWithFallback, k as jidToE164, l as createSubsystemLogger, n as runExec, o as logError, p as unregisterActiveProgressLine, q as colorize, r as formatSpawnError, s as logInfo, t as runCommandWithTimeout, u as defaultRuntime, v as normalizeChannelId, w as clampInt, x as requireActivePluginRegistry, z as truncateUtf16Safe } from "./exec-BMnoMcZW.js";
+import { B as resolveOpenClawAgentDir, C as getShellPathFromLoginShell, F as resolveApiKeyForProfile, H as DEFAULT_CONTEXT_TOKENS, I as listProfilesForProvider, L as markAuthProfileGood, M as isProfileInCooldown, N as markAuthProfileFailure, O as isTruthyEnvValue, P as markAuthProfileUsed, R as ensureAuthProfileStore, S as resolveModelAuthMode, T as resolveShellEnvFallbackTimeoutMs, U as DEFAULT_MODEL, V as resolveAuthProfileDisplayLabel, W as DEFAULT_PROVIDER, _ as getApiKeyForModel, a as modelKey, b as resolveApiKeyForProvider, c as resolveConfiguredModelRef, d as resolveThinkingDefault, f as normalizeGoogleModelId, i as isCliProvider, j as resolveAuthProfileOrder, k as parseBooleanValue$1, l as resolveDefaultModelForAgent, n as buildConfiguredAllowlistKeys, o as normalizeProviderId, r as buildModelAliasIndex, t as buildAllowedModelSet, u as resolveModelRefFromString, v as getCustomProviderApiKey, x as resolveEnvApiKey, y as requireApiKey, z as resolveAuthStorePathForDisplay } from "./model-selection-mzTqrNoj.js";
+import { a as saveJsonFile, i as loadJsonFile } from "./github-copilot-token-B3SA95yo.js";
+import { n as resolveCliName, t as formatCliCommand } from "./command-format-CFzL448l.js";
+import { A as MediaFetchError, B as resolveTextChunkLimit, C as resolveFetch, D as markdownToIRWithMeta, E as markdownToIR, F as chunkMarkdownText, G as SILENT_REPLY_TOKEN, H as isSafeFenceBreak, I as chunkMarkdownTextWithMode, K as isSilentReplyText, L as chunkText, M as fetchWithSsrFGuard, N as resolveMarkdownTableMode, O as loadWebMedia, P as chunkByNewline, R as chunkTextWithMode, S as parseInlineDirectives$1, T as chunkMarkdownIR, U as parseFenceSpans, V as findFenceSpanAt, W as HEARTBEAT_TOKEN, _ as buildTargetResolverSignature, a as applyReplyThreading, b as parseReplyDirectives, c as shouldSuppressMessagingToolReplies, d as sendMessageSignal, f as sendReadReceiptSignal, g as streamSignalEvents, h as signalRpcRequest, i as applyReplyTagsToPayload, j as fetchRemoteMedia, k as loadWebMediaRaw, l as createReplyToModeFilterForChannel, m as signalCheck, o as filterMessagingToolDuplicates, p as sendTypingSignal, r as normalizeReplyPayloadsForDelivery, s as isRenderablePayload, t as deliverOutboundPayloads, u as resolveReplyToMode, v as normalizeChannelTargetInput, w as wrapFetchWithAbortSignal, x as splitMediaFromOutput, y as normalizeTargetForProvider, z as resolveChunkMode } from "./deliver-CZPhTA7x.js";
+import { $ as updateSessionStoreEntry, $t as normalizeToolName, A as isCloudCodeAssistFormatError, An as listChannelPlugins, B as parseImageSizeError, Bn as resolveSlackAppToken, Bt as buildWorkspaceSkillCommandSpecs, C as BILLING_ERROR_USER_MESSAGE, Cn as kindFromMime, Ct as resolveGroupSessionKey, D as getApiErrorPayloadFingerprint, Dn as listEnabledSignalAccounts, Dt as resolveProfile, E as formatRawAssistantErrorForUi, En as mediaKindFromMime, Et as resolveBrowserConfig, F as isLikelyContextOverflowError, Fn as listTelegramAccountIds, Ft as SsrFBlockedError, G as appendAssistantMessageToSessionTranscript, Gn as normalizeDiscordToken, Gt as applySkillEnvOverrides, H as ensureSandboxWorkspaceForSession, Hn as normalizeChatType, Ht as loadWorkspaceSkillEntries, I as isRateLimitAssistantError, In as resolveTelegramAccount, J as readSessionUpdatedAt, Jt as applyOwnerOnlyToolPolicy, Kt as applySkillEnvOverridesFromSnapshot, L as isRawApiErrorPayload, Ln as resolveTelegramToken, M as isContextOverflowError, Mn as isWhatsAppGroupJid, Mt as resizeToJpeg, N as isFailoverAssistantError, Nn as normalizeWhatsAppTarget, Nt as getMediaDir, O as isAuthAssistantError, On as resolveSignalAccount, P as isFailoverErrorMessage, Pn as listEnabledTelegramAccounts, Pt as saveMediaBuffer, Q as updateSessionStore, Qt as expandToolGroups, R as isTimeoutErrorMessage, Rn as listBindings, S as isGoogleModelApi, Sn as isGifMedia, St as resolveConversationLabel, T as formatAssistantErrorText, Tt as registerBrowserRoutes, U as resolveSandboxContext, Un as listEnabledDiscordAccounts, Ut as resolveSkillsPromptForRun, V as sanitizeUserFacingText, Vn as resolveSlackBotToken, Vt as buildWorkspaceSkillSnapshot, W as resolveSandboxRuntimeStatus, Wn as resolveDiscordAccount, Wt as resolvePluginSkillDirs, X as saveSessionStore, Xt as collectExplicitAllowlist, Y as recordSessionMetaFromInbound, Yt as buildPluginToolGroups, Z as updateLastRoute, Zt as expandPolicyWithPluginGroups, _ as sanitizeSessionMessagesImages, _n as detectMime, _t as listChannelDocks, a as formatXHighModelHint, an as sanitizeGoogleTurnOrdering, at as normalizeDeliveryContext, b as downgradeOpenAIReasoningBlocks, bn as imageMimeFromFormat, bt as resolveChannelGroupToolsPolicy, c as normalizeReasoningLevel, cn as isInternalMessageChannel, ct as evaluateSessionFreshness, d as normalizeVerboseLevel, dn as normalizeMessageChannel, dt as resolveSessionResetType, en as resolveToolProfilePolicy, et as isCacheEnabled, f as resolveResponseUsageMode, fn as resolveGatewayMessageChannel, ft as resolveThreadFlag, g as normalizeTextForComparison, gn as GATEWAY_CLIENT_NAMES, gt as getChannelDock, h as isMessagingToolDuplicateNormalized, hn as GATEWAY_CLIENT_MODES, ht as deriveSessionMetaPatch, i as formatThinkingLevels, in as resolveBootstrapMaxChars, it as mergeDeliveryContext, j as isCompactionFailureError, jn as normalizeChannelId$1, k as isBillingAssistantError, kn as getChannelPlugin, kt as getImageMetadata, l as normalizeThinkLevel, ln as isMarkdownCapableMessageChannel, lt as resolveChannelResetConfig, mn as GATEWAY_CLIENT_IDS, mt as resolveMainSessionKey, n as validateGeminiTurns, nn as buildBootstrapContextFiles, nt as deliveryContextFromSession, o as listThinkingLevels, on as INTERNAL_MESSAGE_CHANNEL, ot as normalizeSessionDeliveryFields, p as supportsXHighThinking, pn as resolveMessageChannel, pt as DEFAULT_RESET_TRIGGERS, q as loadSessionStore, qt as resolveSandboxConfigForAgent, r as pickFallbackThinkingLevel, rn as ensureSessionHeader, rt as deliveryContextKey, s as normalizeElevatedLevel, sn as isDeliverableMessageChannel, st as resolveSessionKey$1, t as validateAnthropicTurns, tn as stripPluginOnlyAllowlist, tt as resolveCacheTtlMs$1, u as normalizeUsageDisplay, un as listDeliverableMessageChannels, ut as resolveSessionResetPolicy, v as sanitizeImageBlocks, vn as extensionForMime, vt as resolveChannelGroupPolicy, w as classifyFailoverReason, wn as MAX_IMAGE_BYTES, wt as createBrowserRouteContext, x as isAntigravityClaude, xn as isAudioFileName, xt as resolveIMessageAccount, y as sanitizeToolResultImages, yn as getFileExtension, yt as resolveChannelGroupRequireMention, z as parseImageDimensionError, zn as resolveSlackAccount } from "./pi-embedded-helpers-BxqZh6U7.js";
+import { A as getWebAuthAgeMs, C as getConfigValueAtPath, D as resolveAgentMaxConcurrent, E as unsetConfigValueAtPath, M as logoutWeb, O as VERSION, P as readWebSelfId, R as webAuthExists, S as unsetConfigOverride, T as setConfigValueAtPath, _ as resolveEnableState, a as validateConfigObjectWithPlugins, b as resetConfigOverrides, c as resolveTelegramCustomCommands, d as validateJsonSchemaValue, f as loadPluginManifestRegistry, g as normalizePluginsConfig, i as writeConfigFile, j as logWebSelfId, k as resolveWhatsAppAccount, l as isSafeExecutableValue, n as readConfigFileSnapshot, o as TELEGRAM_COMMAND_NAME_PATTERN, p as discoverOpenClawPlugins, r as resolveConfigSnapshotHash, s as normalizeTelegramCommandName, t as loadConfig, u as parseDurationMs, v as resolveMemorySlotDecision, w as parseConfigPath, x as setConfigOverride, y as getConfigOverrides } from "./config-CG73z4h6.js";
+import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-EhM2JAQo.js";
+import { C as DEFAULT_AI_SNAPSHOT_MAX_CHARS, _ as rawDataToString, b as formatUncaughtError, h as ensureChromeExtensionRelayServer, v as extractErrorCode, y as formatErrorMessage$1 } from "./chrome-B3IuUad-.js";
+import { a as resolveStorePath, i as resolveSessionTranscriptsDirForAgent, n as resolveSessionFilePath, r as resolveSessionTranscriptPath } from "./paths-B4kigINg.js";
+import { t as emitSessionTranscriptUpdate } from "./transcript-events-JLH5W4He.js";
+import { _ as stripThinkingTagsFromText, a as decodeDataUrl, c as extractAssistantText$1, d as extractThinkingFromTaggedText, f as formatReasoningMessage, g as stripMinimaxToolCallXml, h as stripDowngradedToolCallText, i as coerceImageModelConfig, l as extractAssistantThinking, m as promoteThinkingTagsToBlocks, o as resolveProviderVisionModelFromConfig, p as inferToolMetaFromArgs, r as coerceImageAssistantText, s as minimaxUnderstandImage, t as describeImageWithModel, u as extractThinkingFromTaggedStream, v as resolveToolDisplay, y as ensureOpenClawModelsJson } from "./image-CgBndiQy.js";
+import { i as resolveMemorySearchConfig, n as resolveRetryConfig, r as retryAsync } from "./manager-C4ILl-d3.js";
+import { c as listMemoryFiles, l as normalizeExtraMemoryPaths } from "./sqlite-Dnmf3LS7.js";
+import { t as redactSensitiveText } from "./redact-BIMJ3ntQ.js";
+import { a as formatError$1, i as createWaSocket, n as startWebLoginWithQr, o as getStatusCode$1, r as waitForWebLogin, s as waitForWaConnection } from "./login-qr-CcOWO_dR.js";
 import { createRequire } from "node:module";
 import * as os$1 from "node:os";
 import os, { homedir, tmpdir } from "node:os";
@@ -85,7 +85,26 @@ function resolveMessagePrefix(cfg, agentId, opts) {
 	if (opts?.hasAllowFrom === true) return "";
 	return resolveIdentityNamePrefix(cfg, agentId) ?? opts?.fallback ?? "[openclaw]";
 }
-function resolveResponsePrefix(cfg, agentId) {
+/** Helper to extract a channel config value by dynamic key. */
+function getChannelConfig(cfg, channel) {
+	const value = cfg.channels?.[channel];
+	return typeof value === "object" && value !== null ? value : void 0;
+}
+function resolveResponsePrefix(cfg, agentId, opts) {
+	if (opts?.channel && opts?.accountId) {
+		const accountPrefix = (getChannelConfig(cfg, opts.channel)?.accounts)?.[opts.accountId]?.responsePrefix;
+		if (accountPrefix !== void 0) {
+			if (accountPrefix === "auto") return resolveIdentityNamePrefix(cfg, agentId);
+			return accountPrefix;
+		}
+	}
+	if (opts?.channel) {
+		const channelPrefix = getChannelConfig(cfg, opts.channel)?.responsePrefix;
+		if (channelPrefix !== void 0) {
+			if (channelPrefix === "auto") return resolveIdentityNamePrefix(cfg, agentId);
+			return channelPrefix;
+		}
+	}
 	const configured = cfg.messages?.responsePrefix;
 	if (configured !== void 0) {
 		if (configured === "auto") return resolveIdentityNamePrefix(cfg, agentId);
@@ -98,7 +117,10 @@ function resolveEffectiveMessagesConfig(cfg, agentId, opts) {
 			hasAllowFrom: opts?.hasAllowFrom,
 			fallback: opts?.fallbackMessagePrefix
 		}),
-		responsePrefix: resolveResponsePrefix(cfg, agentId)
+		responsePrefix: resolveResponsePrefix(cfg, agentId, {
+			channel: opts?.channel,
+			accountId: opts?.accountId
+		})
 	};
 }
 function resolveHumanDelayConfig(cfg, agentId) {
@@ -942,6 +964,40 @@ function normalizeModelCompat(model) {
 
 //#endregion
 //#region src/agents/pi-embedded-runner/model.ts
+const OPENAI_CODEX_GPT_53_MODEL_ID = "gpt-5.3-codex";
+const OPENAI_CODEX_TEMPLATE_MODEL_IDS = ["gpt-5.2-codex"];
+function resolveOpenAICodexGpt53FallbackModel(provider, modelId, modelRegistry) {
+	const normalizedProvider = normalizeProviderId(provider);
+	const trimmedModelId = modelId.trim();
+	if (normalizedProvider !== "openai-codex") return;
+	if (trimmedModelId.toLowerCase() !== OPENAI_CODEX_GPT_53_MODEL_ID) return;
+	for (const templateId of OPENAI_CODEX_TEMPLATE_MODEL_IDS) {
+		const template = modelRegistry.find(normalizedProvider, templateId);
+		if (!template) continue;
+		return normalizeModelCompat({
+			...template,
+			id: trimmedModelId,
+			name: trimmedModelId
+		});
+	}
+	return normalizeModelCompat({
+		id: trimmedModelId,
+		name: trimmedModelId,
+		api: "openai-codex-responses",
+		provider: normalizedProvider,
+		baseUrl: "https://chatgpt.com/backend-api",
+		reasoning: true,
+		input: ["text", "image"],
+		cost: {
+			input: 0,
+			output: 0,
+			cacheRead: 0,
+			cacheWrite: 0
+		},
+		contextWindow: DEFAULT_CONTEXT_TOKENS,
+		maxTokens: DEFAULT_CONTEXT_TOKENS
+	});
+}
 function buildInlineProviderModels(providers) {
 	return Object.entries(providers).flatMap(([providerId, entry]) => {
 		const trimmed = providerId.trim();
@@ -984,6 +1040,12 @@ function resolveModel$4(provider, modelId, agentDir, cfg) {
 			authStorage,
 			modelRegistry
 		};
+		const codexForwardCompat = resolveOpenAICodexGpt53FallbackModel(provider, modelId, modelRegistry);
+		if (codexForwardCompat) return {
+			model: codexForwardCompat,
+			authStorage,
+			modelRegistry
+		};
 		const providerCfg = providers[provider];
 		if (providerCfg || modelId.startsWith("mock-")) return {
 			model: normalizeModelCompat({
@@ -3379,7 +3441,7 @@ async function getMemorySearchManager(params) {
 		const cached = QMD_MANAGER_CACHE.get(cacheKey);
 		if (cached) return { manager: cached };
 		try {
-			const { QmdMemoryManager } = await import("./qmd-manager-CzArLjr6.js");
+			const { QmdMemoryManager } = await import("./qmd-manager-CF52nuBg.js");
 			const primary = await QmdMemoryManager.create({
 				cfg: params.cfg,
 				agentId: params.agentId,
@@ -3389,7 +3451,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-Dr_eVHpN.js");
+						const { MemoryIndexManager } = await import("./manager-C4ILl-d3.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -3402,7 +3464,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-Dr_eVHpN.js");
+		const { MemoryIndexManager } = await import("./manager-C4ILl-d3.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -6817,6 +6879,13 @@ const SessionsCompactParamsSchema = Type.Object({
 	key: NonEmptyString,
 	maxLines: Type.Optional(Type.Integer({ minimum: 1 }))
 }, { additionalProperties: false });
+const SessionsUsageParamsSchema = Type.Object({
+	key: Type.Optional(NonEmptyString),
+	startDate: Type.Optional(Type.String({ pattern: "^\\d{4}-\\d{2}-\\d{2}$" })),
+	endDate: Type.Optional(Type.String({ pattern: "^\\d{4}-\\d{2}-\\d{2}$" })),
+	limit: Type.Optional(Type.Integer({ minimum: 1 })),
+	includeContextWeight: Type.Optional(Type.Boolean())
+}, { additionalProperties: false });
 
 //#endregion
 //#region src/gateway/protocol/schema/wizard.ts
@@ -6934,6 +7003,7 @@ const validateSessionsPatchParams = ajv.compile(SessionsPatchParamsSchema);
 const validateSessionsResetParams = ajv.compile(SessionsResetParamsSchema);
 const validateSessionsDeleteParams = ajv.compile(SessionsDeleteParamsSchema);
 const validateSessionsCompactParams = ajv.compile(SessionsCompactParamsSchema);
+const validateSessionsUsageParams = ajv.compile(SessionsUsageParamsSchema);
 const validateConfigGetParams = ajv.compile(ConfigGetParamsSchema);
 const validateConfigSetParams = ajv.compile(ConfigSetParamsSchema);
 const validateConfigApplyParams = ajv.compile(ConfigApplyParamsSchema);
@@ -7246,6 +7316,22 @@ var GatewayClient = class {
 
 //#endregion
 //#region src/gateway/call.ts
+function resolveExplicitGatewayAuth(opts) {
+	return {
+		token: typeof opts?.token === "string" && opts.token.trim().length > 0 ? opts.token.trim() : void 0,
+		password: typeof opts?.password === "string" && opts.password.trim().length > 0 ? opts.password.trim() : void 0
+	};
+}
+function ensureExplicitGatewayAuth(params) {
+	if (!params.urlOverride) return;
+	if (params.auth.token || params.auth.password) return;
+	const message = [
+		"gateway url override requires explicit credentials",
+		params.errorHint,
+		params.configPath ? `Config: ${params.configPath}` : void 0
+	].filter(Boolean).join("\n");
+	throw new Error(message);
+}
 function buildGatewayConnectionDetails(options = {}) {
 	const config = options.config ?? loadConfig();
 	const configPath = options.configPath ?? resolveConfigPath(process.env, resolveStateDir(process.env));
@@ -7285,6 +7371,16 @@ async function callGateway(opts) {
 	const isRemoteMode = config.gateway?.mode === "remote";
 	const remote = isRemoteMode ? config.gateway?.remote : void 0;
 	const urlOverride = typeof opts.url === "string" && opts.url.trim().length > 0 ? opts.url.trim() : void 0;
+	const explicitAuth = resolveExplicitGatewayAuth({
+		token: opts.token,
+		password: opts.password
+	});
+	ensureExplicitGatewayAuth({
+		urlOverride,
+		auth: explicitAuth,
+		errorHint: "Fix: pass --token or --password (or gatewayToken in tools).",
+		configPath: opts.configPath ?? resolveConfigPath(process.env, resolveStateDir(process.env))
+	});
 	const remoteUrl = typeof remote?.url === "string" && remote.url.trim().length > 0 ? remote.url.trim() : void 0;
 	if (isRemoteMode && !urlOverride && !remoteUrl) {
 		const configPath = opts.configPath ?? resolveConfigPath(process.env, resolveStateDir(process.env));
@@ -7305,8 +7401,8 @@ async function callGateway(opts) {
 	const tlsRuntime = config.gateway?.tls?.enabled === true && !urlOverride && !remoteUrl && url.startsWith("wss://") ? await loadGatewayTlsRuntime(config.gateway?.tls) : void 0;
 	const remoteTlsFingerprint = isRemoteMode && !urlOverride && remoteUrl && typeof remote?.tlsFingerprint === "string" ? remote.tlsFingerprint.trim() : void 0;
 	const tlsFingerprint = (typeof opts.tlsFingerprint === "string" ? opts.tlsFingerprint.trim() : void 0) || remoteTlsFingerprint || (tlsRuntime?.enabled ? tlsRuntime.fingerprintSha256 : void 0);
-	const token = (typeof opts.token === "string" && opts.token.trim().length > 0 ? opts.token.trim() : void 0) || (isRemoteMode ? typeof remote?.token === "string" && remote.token.trim().length > 0 ? remote.token.trim() : void 0 : process.env.OPENCLAW_GATEWAY_TOKEN?.trim() || process.env.CLAWDBOT_GATEWAY_TOKEN?.trim() || (typeof authToken === "string" && authToken.trim().length > 0 ? authToken.trim() : void 0));
-	const password = (typeof opts.password === "string" && opts.password.trim().length > 0 ? opts.password.trim() : void 0) || process.env.OPENCLAW_GATEWAY_PASSWORD?.trim() || process.env.CLAWDBOT_GATEWAY_PASSWORD?.trim() || (isRemoteMode ? typeof remote?.password === "string" && remote.password.trim().length > 0 ? remote.password.trim() : void 0 : typeof authPassword === "string" && authPassword.trim().length > 0 ? authPassword.trim() : void 0);
+	const token = explicitAuth.token || (!urlOverride ? isRemoteMode ? typeof remote?.token === "string" && remote.token.trim().length > 0 ? remote.token.trim() : void 0 : process.env.OPENCLAW_GATEWAY_TOKEN?.trim() || process.env.CLAWDBOT_GATEWAY_TOKEN?.trim() || (typeof authToken === "string" && authToken.trim().length > 0 ? authToken.trim() : void 0) : void 0);
+	const password = explicitAuth.password || (!urlOverride ? process.env.OPENCLAW_GATEWAY_PASSWORD?.trim() || process.env.CLAWDBOT_GATEWAY_PASSWORD?.trim() || (isRemoteMode ? typeof remote?.password === "string" && remote.password.trim().length > 0 ? remote.password.trim() : void 0 : typeof authPassword === "string" && authPassword.trim().length > 0 ? authPassword.trim() : void 0) : void 0);
 	const formatCloseError = (code, reason) => {
 		const reasonText = reason?.trim() || "no close reason";
 		const hint = code === 1006 ? "abnormal closure (no close frame)" : code === 1e3 ? "normal closure" : "";
@@ -8806,12 +8902,12 @@ function resolveResponsePrefixTemplate(template, context) {
 *
 * Strips:
 * - Provider prefix (e.g., "openai/" from "openai/gpt-5.2")
-* - Date suffixes (e.g., "-20251101" from "claude-opus-4-5-20251101")
+* - Date suffixes (e.g., "-20260205" from "claude-opus-4-6-20260205")
 * - Common version suffixes (e.g., "-latest")
 *
 * @example
 * extractShortModelName("openai-codex/gpt-5.2") // "gpt-5.2"
-* extractShortModelName("claude-opus-4-5-20251101") // "claude-opus-4-5"
+* extractShortModelName("claude-opus-4-6-20260205") // "claude-opus-4-6"
 * extractShortModelName("gpt-5.2-latest") // "gpt-5.2"
 */
 function extractShortModelName(fullModel) {
@@ -8881,10 +8977,14 @@ function normalizeReplyPayload(payload, opts = {}) {
 */
 async function routeReply(params) {
 	const { payload, channel, to, accountId, threadId, cfg, abortSignal } = params;
+	const normalizedChannel = normalizeMessageChannel(channel);
 	const normalized = normalizeReplyPayload(payload, { responsePrefix: params.sessionKey ? resolveEffectiveMessagesConfig(cfg, resolveSessionAgentId({
 		sessionKey: params.sessionKey,
 		config: cfg
-	})).responsePrefix : cfg.messages?.responsePrefix === "auto" ? void 0 : cfg.messages?.responsePrefix });
+	}), {
+		channel: normalizedChannel,
+		accountId
+	}).responsePrefix : cfg.messages?.responsePrefix === "auto" ? void 0 : cfg.messages?.responsePrefix });
 	if (!normalized) return { ok: true };
 	let text = normalized.text ?? "";
 	let mediaUrls = (normalized.mediaUrls?.filter(Boolean) ?? []).length ? normalized.mediaUrls?.filter(Boolean) : normalized.mediaUrl ? [normalized.mediaUrl] : [];
@@ -8906,7 +9006,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-BGnJ4-vz.js");
+		const { deliverOutboundPayloads } = await import("./deliver-CZPhTA7x.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -10096,6 +10196,32 @@ function normalizeAllowFromEntry(params) {
 		allowFrom: [params.value]
 	}).filter((entry) => entry.trim().length > 0);
 }
+function resolveOwnerAllowFromList(params) {
+	const raw = params.allowFrom ?? params.cfg.commands?.ownerAllowFrom;
+	if (!Array.isArray(raw) || raw.length === 0) return [];
+	const filtered = [];
+	for (const entry of raw) {
+		const trimmed = String(entry ?? "").trim();
+		if (!trimmed) continue;
+		const separatorIndex = trimmed.indexOf(":");
+		if (separatorIndex > 0) {
+			const channel = normalizeAnyChannelId(trimmed.slice(0, separatorIndex));
+			if (channel) {
+				if (params.providerId && channel !== params.providerId) continue;
+				const remainder = trimmed.slice(separatorIndex + 1).trim();
+				if (remainder) filtered.push(remainder);
+				continue;
+			}
+		}
+		filtered.push(trimmed);
+	}
+	return formatAllowFromList({
+		dock: params.dock,
+		cfg: params.cfg,
+		accountId: params.accountId,
+		allowFrom: filtered
+	});
+}
 function resolveSenderCandidates(params) {
 	const { dock, cfg, accountId } = params;
 	const candidates = [];
@@ -10140,18 +10266,35 @@ function resolveCommandAuthorization(params) {
 		accountId: ctx.AccountId,
 		allowFrom: Array.isArray(allowFromRaw) ? allowFromRaw : []
 	});
+	const configOwnerAllowFromList = resolveOwnerAllowFromList({
+		dock,
+		cfg,
+		accountId: ctx.AccountId,
+		providerId,
+		allowFrom: cfg.commands?.ownerAllowFrom
+	});
+	const contextOwnerAllowFromList = resolveOwnerAllowFromList({
+		dock,
+		cfg,
+		accountId: ctx.AccountId,
+		providerId,
+		allowFrom: ctx.OwnerAllowFrom
+	});
 	const allowAll = allowFromList.length === 0 || allowFromList.some((entry) => entry.trim() === "*");
-	const ownerCandidates = allowAll ? [] : allowFromList.filter((entry) => entry !== "*");
-	if (!allowAll && ownerCandidates.length === 0 && to) {
+	const ownerCandidatesForCommands = allowAll ? [] : allowFromList.filter((entry) => entry !== "*");
+	if (!allowAll && ownerCandidatesForCommands.length === 0 && to) {
 		const normalizedTo = normalizeAllowFromEntry({
 			dock,
 			cfg,
 			accountId: ctx.AccountId,
 			value: to
 		});
-		if (normalizedTo.length > 0) ownerCandidates.push(...normalizedTo);
+		if (normalizedTo.length > 0) ownerCandidatesForCommands.push(...normalizedTo);
 	}
-	const ownerList = Array.from(new Set(ownerCandidates));
+	const ownerAllowAll = configOwnerAllowFromList.some((entry) => entry.trim() === "*");
+	const explicitOwners = configOwnerAllowFromList.filter((entry) => entry !== "*");
+	const explicitOverrides = contextOwnerAllowFromList.filter((entry) => entry !== "*");
+	const ownerList = Array.from(new Set(explicitOwners.length > 0 ? explicitOwners : ownerAllowAll ? [] : explicitOverrides.length > 0 ? explicitOverrides : ownerCandidatesForCommands));
 	const senderCandidates = resolveSenderCandidates({
 		dock,
 		providerId,
@@ -10162,13 +10305,18 @@ function resolveCommandAuthorization(params) {
 		from
 	});
 	const matchedSender = ownerList.length ? senderCandidates.find((candidate) => ownerList.includes(candidate)) : void 0;
+	const matchedCommandOwner = ownerCandidatesForCommands.length ? senderCandidates.find((candidate) => ownerCandidatesForCommands.includes(candidate)) : void 0;
 	const senderId = matchedSender ?? senderCandidates[0];
-	const isOwner = !Boolean(dock?.commands?.enforceOwnerForCommands) || allowAll || ownerList.length === 0 || Boolean(matchedSender);
+	const enforceOwner = Boolean(dock?.commands?.enforceOwnerForCommands);
+	const senderIsOwner = Boolean(matchedSender);
+	const ownerAllowlistConfigured = ownerAllowAll || explicitOwners.length > 0;
+	const isOwnerForCommands = !(enforceOwner || ownerAllowlistConfigured) ? true : ownerAllowAll ? true : ownerAllowlistConfigured ? senderIsOwner : allowAll || ownerCandidatesForCommands.length === 0 || Boolean(matchedCommandOwner);
 	return {
 		providerId,
 		ownerList,
 		senderId: senderId || void 0,
-		isAuthorizedSender: commandAuthorized && isOwner,
+		senderIsOwner,
+		isAuthorizedSender: commandAuthorized && isOwnerForCommands,
 		from: from || void 0,
 		to: to || void 0
 	};
@@ -12245,7 +12393,7 @@ function formatAudioTranscripts(outputs) {
 //#region src/agents/model-catalog.ts
 let modelCatalogPromise = null;
 let hasLoggedModelCatalogError = false;
-const defaultImportPiSdk = () => import("./pi-model-discovery-Bj98Srfa.js");
+const defaultImportPiSdk = () => import("./pi-model-discovery-EhM2JAQo.js").then((n) => n.r);
 let importPiSdk = defaultImportPiSdk;
 async function loadModelCatalog(params) {
 	if (params?.useCache === false) modelCatalogPromise = null;
@@ -12339,7 +12487,7 @@ const AUTO_IMAGE_KEY_PROVIDERS = [
 const AUTO_VIDEO_KEY_PROVIDERS = ["google"];
 const DEFAULT_IMAGE_MODELS = {
 	openai: "gpt-5-mini",
-	anthropic: "claude-opus-4-5",
+	anthropic: "claude-opus-4-6",
 	google: "gemini-3-flash-preview",
 	minimax: "MiniMax-VL-01"
 };
@@ -14320,7 +14468,7 @@ async function resolveSessionAuthProfileOverride(params) {
 const MODEL_CACHE = /* @__PURE__ */ new Map();
 (async () => {
 	try {
-		const { discoverAuthStorage, discoverModels } = await import("./pi-model-discovery-Bj98Srfa.js");
+		const { discoverAuthStorage, discoverModels } = await import("./pi-model-discovery-EhM2JAQo.js").then((n) => n.r);
 		await ensureOpenClawModelsJson(loadConfig());
 		const agentDir = resolveOpenClawAgentDir();
 		const models = discoverModels(discoverAuthStorage(agentDir), agentDir).getAll();
@@ -14534,7 +14682,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./auth-profiles-BYvLI-zr.js");
+		const { ensureAuthProfileStore } = await import("./model-selection-mzTqrNoj.js").then((n) => n.A);
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId(provider);
 		if (!profile || normalizeProviderId(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -15794,6 +15942,7 @@ function buildCommandContext(params) {
 		channel,
 		channelId: auth.providerId,
 		ownerList: auth.ownerList,
+		senderIsOwner: auth.senderIsOwner,
 		isAuthorizedSender: auth.isAuthorizedSender,
 		senderId: auth.senderId,
 		abortKey,
@@ -16049,6 +16198,26 @@ function resolveDiscordUserAllowed(params) {
 		tag: params.userTag
 	});
 }
+function resolveDiscordOwnerAllowFrom(params) {
+	const rawAllowList = params.channelConfig?.users ?? params.guildInfo?.users;
+	if (!Array.isArray(rawAllowList) || rawAllowList.length === 0) return;
+	const allowList = normalizeDiscordAllowList(rawAllowList, [
+		"discord:",
+		"user:",
+		"pk:"
+	]);
+	if (!allowList) return;
+	const match = resolveDiscordAllowListMatch({
+		allowList,
+		candidate: {
+			id: params.sender.id,
+			name: params.sender.name,
+			tag: params.sender.tag
+		}
+	});
+	if (!match.allowed || !match.matchKey || match.matchKey === "*") return;
+	return [match.matchKey];
+}
 function resolveDiscordGuildEntry(params) {
 	const guild = params.guild;
 	const entries = params.guildEntries;
@@ -16093,6 +16262,7 @@ function resolveDiscordChannelConfigEntry(entry) {
 		enabled: entry.enabled,
 		users: entry.users,
 		systemPrompt: entry.systemPrompt,
+		includeThreadStarter: entry.includeThreadStarter,
 		autoThread: entry.autoThread
 	};
 }
@@ -17682,6 +17852,23 @@ function ensureDir$1(filePath) {
 	const dir = path.dirname(filePath);
 	fs.mkdirSync(dir, { recursive: true });
 }
+function coerceAllowlistEntries(allowlist) {
+	if (!Array.isArray(allowlist) || allowlist.length === 0) return Array.isArray(allowlist) ? allowlist : void 0;
+	let changed = false;
+	const result = [];
+	for (const item of allowlist) if (typeof item === "string") {
+		const trimmed = item.trim();
+		if (trimmed) {
+			result.push({ pattern: trimmed });
+			changed = true;
+		} else changed = true;
+	} else if (item && typeof item === "object" && !Array.isArray(item)) {
+		const pattern = item.pattern;
+		if (typeof pattern === "string" && pattern.trim().length > 0) result.push(item);
+		else changed = true;
+	} else changed = true;
+	return changed ? result.length > 0 ? result : void 0 : allowlist;
+}
 function ensureAllowlistIds(allowlist) {
 	if (!Array.isArray(allowlist) || allowlist.length === 0) return allowlist;
 	let changed = false;
@@ -17706,7 +17893,7 @@ function normalizeExecApprovals(file) {
 		delete agents.default;
 	}
 	for (const [key, agent] of Object.entries(agents)) {
-		const allowlist = ensureAllowlistIds(agent.allowlist);
+		const allowlist = ensureAllowlistIds(coerceAllowlistEntries(agent.allowlist));
 		if (allowlist !== agent.allowlist) agents[key] = {
 			...agent,
 			allowlist
@@ -18658,6 +18845,8 @@ function buildNodeShellCommand(command, platform) {
 //#endregion
 //#region src/agents/sandbox-paths.ts
 const UNICODE_SPACES$1 = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
+const HTTP_URL_RE = /^https?:\/\//i;
+const DATA_URL_RE = /^data:/i;
 function normalizeUnicodeSpaces$1(str) {
 	return str.replace(UNICODE_SPACES$1, " ");
 }
@@ -18691,6 +18880,26 @@ async function assertSandboxPath(params) {
 	await assertNoSymlink(resolved.relative, path.resolve(params.root));
 	return resolved;
 }
+function assertMediaNotDataUrl(media) {
+	const raw = media.trim();
+	if (DATA_URL_RE.test(raw)) throw new Error("data: URLs are not supported for media. Use buffer instead.");
+}
+async function resolveSandboxedMediaSource(params) {
+	const raw = params.media.trim();
+	if (!raw) return raw;
+	if (HTTP_URL_RE.test(raw)) return raw;
+	let candidate = raw;
+	if (/^file:\/\//i.test(candidate)) try {
+		candidate = fileURLToPath(candidate);
+	} catch {
+		throw new Error(`Invalid file:// URL for sandboxed media: ${raw}`);
+	}
+	return (await assertSandboxPath({
+		filePath: candidate,
+		cwd: params.sandboxRoot,
+		root: params.sandboxRoot
+	})).resolved;
+}
 async function assertNoSymlink(relative, root) {
 	if (!relative) return;
 	const parts = relative.split(path.sep).filter(Boolean);
@@ -21892,6 +22101,7 @@ const handleCompactCommand = async (params) => {
 			defaultLevel: "off"
 		},
 		customInstructions,
+		senderIsOwner: params.command.senderIsOwner,
 		ownerNumbers: params.command.ownerList.length > 0 ? params.command.ownerList : void 0
 	});
 	const compactLabel = result.ok ? result.compacted ? result.result?.tokensBefore != null && result.result?.tokensAfter != null ? `Compacted (${formatTokenCount(result.result.tokensBefore)} → ${formatTokenCount(result.result.tokensAfter)})` : result.result?.tokensBefore ? `Compacted (${formatTokenCount(result.result.tokensBefore)} before)` : "Compacted" : "Compaction skipped" : "Compaction failed";
@@ -22858,6 +23068,7 @@ async function resolveContextReport(params) {
 				groupChannel: params.sessionEntry?.groupChannel ?? void 0,
 				groupSpace: params.sessionEntry?.space ?? void 0,
 				spawnedBy: params.sessionEntry?.spawnedBy ?? void 0,
+				senderIsOwner: params.command.senderIsOwner,
 				modelProvider: params.provider,
 				modelId: params.model
 			});
@@ -23875,7 +24086,7 @@ const WINDOW_MINUTE_KEYS = [
 	"durationMinutes",
 	"minutes"
 ];
-function isRecord$3(value) {
+function isRecord$4(value) {
 	return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
 function pickNumber(record, keys) {
@@ -23931,7 +24142,7 @@ function collectUsageCandidates(root) {
 		if (!next) break;
 		scanned += 1;
 		const { value, depth } = next;
-		if (isRecord$3(value)) {
+		if (isRecord$4(value)) {
 			if (seen.has(value)) continue;
 			seen.add(value);
 			const score = scoreUsageRecord(value);
@@ -23941,7 +24152,7 @@ function collectUsageCandidates(root) {
 				depth
 			});
 			if (depth < MAX_SCAN_DEPTH) {
-				for (const nested of Object.values(value)) if (isRecord$3(nested) || Array.isArray(nested)) queue.push({
+				for (const nested of Object.values(value)) if (isRecord$4(nested) || Array.isArray(nested)) queue.push({
 					value: nested,
 					depth: depth + 1
 				});
@@ -23949,7 +24160,7 @@ function collectUsageCandidates(root) {
 			continue;
 		}
 		if (Array.isArray(value) && depth < MAX_SCAN_DEPTH) {
-			for (const nested of value) if (isRecord$3(nested) || Array.isArray(nested)) queue.push({
+			for (const nested of value) if (isRecord$4(nested) || Array.isArray(nested)) queue.push({
 				value: nested,
 				depth: depth + 1
 			});
@@ -23999,20 +24210,20 @@ async function fetchMinimaxUsage(apiKey, timeoutMs, fetchFn) {
 		error: `HTTP ${res.status}`
 	};
 	const data = await res.json().catch(() => null);
-	if (!isRecord$3(data)) return {
+	if (!isRecord$4(data)) return {
 		provider: "minimax",
 		displayName: PROVIDER_LABELS.minimax,
 		windows: [],
 		error: "Invalid JSON"
 	};
-	const baseResp = isRecord$3(data.base_resp) ? data.base_resp : void 0;
+	const baseResp = isRecord$4(data.base_resp) ? data.base_resp : void 0;
 	if (baseResp && typeof baseResp.status_code === "number" && baseResp.status_code !== 0) return {
 		provider: "minimax",
 		displayName: PROVIDER_LABELS.minimax,
 		windows: [],
 		error: baseResp.status_msg?.trim() || "API error"
 	};
-	const payload = isRecord$3(data.data) ? data.data : data;
+	const payload = isRecord$4(data.data) ? data.data : data;
 	const candidates = collectUsageCandidates(payload);
 	let usageRecord = payload;
 	let usedPercent = null;
@@ -24667,6 +24878,56 @@ function scheduleGatewaySigusr1Restart(opts) {
 	};
 }
 
+//#endregion
+//#region src/utils/transcript-tools.ts
+const TOOL_CALL_TYPES$1 = new Set([
+	"tool_use",
+	"toolcall",
+	"tool_call"
+]);
+const TOOL_RESULT_TYPES = new Set(["tool_result", "tool_result_error"]);
+const normalizeType = (value) => {
+	if (typeof value !== "string") return "";
+	return value.trim().toLowerCase();
+};
+const extractToolCallNames = (message) => {
+	const names = /* @__PURE__ */ new Set();
+	const toolNameRaw = message.toolName ?? message.tool_name;
+	if (typeof toolNameRaw === "string" && toolNameRaw.trim()) names.add(toolNameRaw.trim());
+	const content = message.content;
+	if (!Array.isArray(content)) return Array.from(names);
+	for (const entry of content) {
+		if (!entry || typeof entry !== "object") continue;
+		const block = entry;
+		const type = normalizeType(block.type);
+		if (!TOOL_CALL_TYPES$1.has(type)) continue;
+		const name = block.name;
+		if (typeof name === "string" && name.trim()) names.add(name.trim());
+	}
+	return Array.from(names);
+};
+const countToolResults = (message) => {
+	const content = message.content;
+	if (!Array.isArray(content)) return {
+		total: 0,
+		errors: 0
+	};
+	let total = 0;
+	let errors = 0;
+	for (const entry of content) {
+		if (!entry || typeof entry !== "object") continue;
+		const block = entry;
+		const type = normalizeType(block.type);
+		if (!TOOL_RESULT_TYPES.has(type)) continue;
+		total += 1;
+		if (block.is_error === true) errors += 1;
+	}
+	return {
+		total,
+		errors
+	};
+};
+
 //#endregion
 //#region src/infra/session-cost-usage.ts
 const emptyTotals = () => ({
@@ -24676,6 +24937,10 @@ const emptyTotals = () => ({
 	cacheWrite: 0,
 	totalTokens: 0,
 	totalCost: 0,
+	inputCost: 0,
+	outputCost: 0,
+	cacheReadCost: 0,
+	cacheWriteCost: 0,
 	missingCostEntries: 0
 });
 const toFiniteNumber = (value) => {
@@ -24683,13 +24948,19 @@ const toFiniteNumber = (value) => {
 	if (!Number.isFinite(value)) return;
 	return value;
 };
-const extractCostTotal = (usageRaw) => {
+const extractCostBreakdown = (usageRaw) => {
 	if (!usageRaw || typeof usageRaw !== "object") return;
 	const cost = usageRaw.cost;
-	const total = toFiniteNumber(cost?.total);
-	if (total === void 0) return;
-	if (total < 0) return;
-	return total;
+	if (!cost) return;
+	const total = toFiniteNumber(cost.total);
+	if (total === void 0 || total < 0) return;
+	return {
+		total,
+		input: toFiniteNumber(cost.input),
+		output: toFiniteNumber(cost.output),
+		cacheRead: toFiniteNumber(cost.cacheRead),
+		cacheWrite: toFiniteNumber(cost.cacheWrite)
+	};
 };
 const parseTimestamp = (entry) => {
 	const raw = entry.timestamp;
@@ -24704,23 +24975,49 @@ const parseTimestamp = (entry) => {
 		if (!Number.isNaN(parsed.valueOf())) return parsed;
 	}
 };
-const parseUsageEntry = (entry) => {
+const parseTranscriptEntry = (entry) => {
 	const message = entry.message;
-	if (message?.role !== "assistant") return null;
-	const usageRaw = message?.usage ?? entry.usage;
-	const usage = normalizeUsage(usageRaw);
-	if (!usage) return null;
-	const provider = (typeof message?.provider === "string" ? message?.provider : void 0) ?? (typeof entry.provider === "string" ? entry.provider : void 0);
-	const model = (typeof message?.model === "string" ? message?.model : void 0) ?? (typeof entry.model === "string" ? entry.model : void 0);
+	if (!message || typeof message !== "object") return null;
+	const roleRaw = message.role;
+	const role = roleRaw === "user" || roleRaw === "assistant" ? roleRaw : void 0;
+	if (!role) return null;
+	const usageRaw = message.usage ?? entry.usage;
+	const usage = usageRaw ? normalizeUsage(usageRaw) ?? void 0 : void 0;
+	const provider = (typeof message.provider === "string" ? message.provider : void 0) ?? (typeof entry.provider === "string" ? entry.provider : void 0);
+	const model = (typeof message.model === "string" ? message.model : void 0) ?? (typeof entry.model === "string" ? entry.model : void 0);
+	const costBreakdown = extractCostBreakdown(usageRaw);
+	const stopReason = typeof message.stopReason === "string" ? message.stopReason : void 0;
+	const durationMs = toFiniteNumber(message.durationMs ?? entry.durationMs);
 	return {
+		message,
+		role,
+		timestamp: parseTimestamp(entry),
+		durationMs,
 		usage,
-		costTotal: extractCostTotal(usageRaw),
+		costTotal: costBreakdown?.total,
+		costBreakdown,
 		provider,
 		model,
-		timestamp: parseTimestamp(entry)
+		stopReason,
+		toolNames: extractToolCallNames(message),
+		toolResultCounts: countToolResults(message)
 	};
 };
 const formatDayKey = (date) => date.toLocaleDateString("en-CA", { timeZone: Intl.DateTimeFormat().resolvedOptions().timeZone });
+const computeLatencyStats = (values) => {
+	if (!values.length) return;
+	const sorted = values.toSorted((a, b) => a - b);
+	const total = sorted.reduce((sum, v) => sum + v, 0);
+	const count = sorted.length;
+	const p95Index = Math.max(0, Math.ceil(count * .95) - 1);
+	return {
+		count,
+		avgMs: total / count,
+		p95Ms: sorted[p95Index] ?? sorted[count - 1],
+		minMs: sorted[0],
+		maxMs: sorted[count - 1]
+	};
+};
 const applyUsageTotals = (totals, usage) => {
 	totals.input += usage.input ?? 0;
 	totals.output += usage.output ?? 0;
@@ -24729,6 +25026,14 @@ const applyUsageTotals = (totals, usage) => {
 	const totalTokens = usage.total ?? (usage.input ?? 0) + (usage.output ?? 0) + (usage.cacheRead ?? 0) + (usage.cacheWrite ?? 0);
 	totals.totalTokens += totalTokens;
 };
+const applyCostBreakdown = (totals, costBreakdown) => {
+	if (costBreakdown === void 0 || costBreakdown.total === void 0) return;
+	totals.totalCost += costBreakdown.total;
+	totals.inputCost += costBreakdown.input ?? 0;
+	totals.outputCost += costBreakdown.output ?? 0;
+	totals.cacheReadCost += costBreakdown.cacheRead ?? 0;
+	totals.cacheWriteCost += costBreakdown.cacheWrite ?? 0;
+};
 const applyCostTotal = (totals, costTotal) => {
 	if (costTotal === void 0) {
 		totals.missingCostEntries += 1;
@@ -24736,7 +25041,7 @@ const applyCostTotal = (totals, costTotal) => {
 	}
 	totals.totalCost += costTotal;
 };
-async function scanUsageFile(params) {
+async function scanTranscriptFile(params) {
 	const fileStream = fs.createReadStream(params.filePath, { encoding: "utf-8" });
 	const rl = readline.createInterface({
 		input: fileStream,
@@ -24746,9 +25051,9 @@ async function scanUsageFile(params) {
 		const trimmed = line.trim();
 		if (!trimmed) continue;
 		try {
-			const entry = parseUsageEntry(JSON.parse(trimmed));
+			const entry = parseTranscriptEntry(JSON.parse(trimmed));
 			if (!entry) continue;
-			if (entry.costTotal === void 0) {
+			if (entry.usage && entry.costTotal === void 0) {
 				const cost = resolveModelCostConfig({
 					provider: entry.provider,
 					model: entry.model,
@@ -24763,12 +25068,37 @@ async function scanUsageFile(params) {
 		} catch {}
 	}
 }
+async function scanUsageFile(params) {
+	await scanTranscriptFile({
+		filePath: params.filePath,
+		config: params.config,
+		onEntry: (entry) => {
+			if (!entry.usage) return;
+			params.onEntry({
+				usage: entry.usage,
+				costTotal: entry.costTotal,
+				costBreakdown: entry.costBreakdown,
+				provider: entry.provider,
+				model: entry.model,
+				timestamp: entry.timestamp
+			});
+		}
+	});
+}
 async function loadCostUsageSummary(params) {
-	const days = Math.max(1, Math.floor(params?.days ?? 30));
 	const now = /* @__PURE__ */ new Date();
-	const since = new Date(now);
-	since.setDate(since.getDate() - (days - 1));
-	const sinceTime = since.getTime();
+	let sinceTime;
+	let untilTime;
+	if (params?.startMs !== void 0 && params?.endMs !== void 0) {
+		sinceTime = params.startMs;
+		untilTime = params.endMs;
+	} else {
+		const days = Math.max(1, Math.floor(params?.days ?? 30));
+		const since = new Date(now);
+		since.setDate(since.getDate() - (days - 1));
+		sinceTime = since.getTime();
+		untilTime = now.getTime();
+	}
 	const dailyMap = /* @__PURE__ */ new Map();
 	const totals = emptyTotals();
 	const sessionsDir = resolveSessionTranscriptsDirForAgent(params?.agentId);
@@ -24785,17 +25115,20 @@ async function loadCostUsageSummary(params) {
 		config: params?.config,
 		onEntry: (entry) => {
 			const ts = entry.timestamp?.getTime();
-			if (!ts || ts < sinceTime) return;
+			if (!ts || ts < sinceTime || ts > untilTime) return;
 			const dayKey = formatDayKey(entry.timestamp ?? now);
 			const bucket = dailyMap.get(dayKey) ?? emptyTotals();
 			applyUsageTotals(bucket, entry.usage);
-			applyCostTotal(bucket, entry.costTotal);
+			if (entry.costBreakdown?.total !== void 0) applyCostBreakdown(bucket, entry.costBreakdown);
+			else applyCostTotal(bucket, entry.costTotal);
 			dailyMap.set(dayKey, bucket);
 			applyUsageTotals(totals, entry.usage);
-			applyCostTotal(totals, entry.costTotal);
+			if (entry.costBreakdown?.total !== void 0) applyCostBreakdown(totals, entry.costBreakdown);
+			else applyCostTotal(totals, entry.costTotal);
 		}
 	});
 	const daily = Array.from(dailyMap.entries()).map(([date, bucket]) => Object.assign({ date }, bucket)).toSorted((a, b) => a.date.localeCompare(b.date));
+	const days = Math.ceil((untilTime - sinceTime) / (1440 * 60 * 1e3)) + 1;
 	return {
 		updatedAt: Date.now(),
 		days,
@@ -24807,21 +25140,183 @@ async function loadSessionCostSummary(params) {
 	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry) : void 0);
 	if (!sessionFile || !fs.existsSync(sessionFile)) return null;
 	const totals = emptyTotals();
+	let firstActivity;
 	let lastActivity;
-	await scanUsageFile({
+	const activityDatesSet = /* @__PURE__ */ new Set();
+	const dailyMap = /* @__PURE__ */ new Map();
+	const dailyMessageMap = /* @__PURE__ */ new Map();
+	const dailyLatencyMap = /* @__PURE__ */ new Map();
+	const dailyModelUsageMap = /* @__PURE__ */ new Map();
+	const messageCounts = {
+		total: 0,
+		user: 0,
+		assistant: 0,
+		toolCalls: 0,
+		toolResults: 0,
+		errors: 0
+	};
+	const toolUsageMap = /* @__PURE__ */ new Map();
+	const modelUsageMap = /* @__PURE__ */ new Map();
+	const errorStopReasons = new Set([
+		"error",
+		"aborted",
+		"timeout"
+	]);
+	const latencyValues = [];
+	let lastUserTimestamp;
+	const MAX_LATENCY_MS = 720 * 60 * 1e3;
+	await scanTranscriptFile({
 		filePath: sessionFile,
 		config: params.config,
 		onEntry: (entry) => {
-			applyUsageTotals(totals, entry.usage);
-			applyCostTotal(totals, entry.costTotal);
 			const ts = entry.timestamp?.getTime();
-			if (ts && (!lastActivity || ts > lastActivity)) lastActivity = ts;
+			if (params.startMs !== void 0 && ts !== void 0 && ts < params.startMs) return;
+			if (params.endMs !== void 0 && ts !== void 0 && ts > params.endMs) return;
+			if (ts !== void 0) {
+				if (!firstActivity || ts < firstActivity) firstActivity = ts;
+				if (!lastActivity || ts > lastActivity) lastActivity = ts;
+			}
+			if (entry.role === "user") {
+				messageCounts.user += 1;
+				messageCounts.total += 1;
+				if (entry.timestamp) lastUserTimestamp = entry.timestamp.getTime();
+			}
+			if (entry.role === "assistant") {
+				messageCounts.assistant += 1;
+				messageCounts.total += 1;
+				const ts = entry.timestamp?.getTime();
+				if (ts !== void 0) {
+					const latencyMs = entry.durationMs ?? (lastUserTimestamp !== void 0 ? Math.max(0, ts - lastUserTimestamp) : void 0);
+					if (latencyMs !== void 0 && Number.isFinite(latencyMs) && latencyMs <= MAX_LATENCY_MS) {
+						latencyValues.push(latencyMs);
+						const dayKey = formatDayKey(entry.timestamp ?? new Date(ts));
+						const dailyLatencies = dailyLatencyMap.get(dayKey) ?? [];
+						dailyLatencies.push(latencyMs);
+						dailyLatencyMap.set(dayKey, dailyLatencies);
+					}
+				}
+			}
+			if (entry.toolNames.length > 0) {
+				messageCounts.toolCalls += entry.toolNames.length;
+				for (const name of entry.toolNames) toolUsageMap.set(name, (toolUsageMap.get(name) ?? 0) + 1);
+			}
+			if (entry.toolResultCounts.total > 0) {
+				messageCounts.toolResults += entry.toolResultCounts.total;
+				messageCounts.errors += entry.toolResultCounts.errors;
+			}
+			if (entry.stopReason && errorStopReasons.has(entry.stopReason)) messageCounts.errors += 1;
+			if (entry.timestamp) {
+				const dayKey = formatDayKey(entry.timestamp);
+				activityDatesSet.add(dayKey);
+				const daily = dailyMessageMap.get(dayKey) ?? {
+					date: dayKey,
+					total: 0,
+					user: 0,
+					assistant: 0,
+					toolCalls: 0,
+					toolResults: 0,
+					errors: 0
+				};
+				daily.total += entry.role === "user" || entry.role === "assistant" ? 1 : 0;
+				if (entry.role === "user") daily.user += 1;
+				else if (entry.role === "assistant") daily.assistant += 1;
+				daily.toolCalls += entry.toolNames.length;
+				daily.toolResults += entry.toolResultCounts.total;
+				daily.errors += entry.toolResultCounts.errors;
+				if (entry.stopReason && errorStopReasons.has(entry.stopReason)) daily.errors += 1;
+				dailyMessageMap.set(dayKey, daily);
+			}
+			if (!entry.usage) return;
+			applyUsageTotals(totals, entry.usage);
+			if (entry.costBreakdown?.total !== void 0) applyCostBreakdown(totals, entry.costBreakdown);
+			else applyCostTotal(totals, entry.costTotal);
+			if (entry.timestamp) {
+				const dayKey = formatDayKey(entry.timestamp);
+				const entryTokens = (entry.usage.input ?? 0) + (entry.usage.output ?? 0) + (entry.usage.cacheRead ?? 0) + (entry.usage.cacheWrite ?? 0);
+				const entryCost = entry.costBreakdown?.total ?? (entry.costBreakdown ? (entry.costBreakdown.input ?? 0) + (entry.costBreakdown.output ?? 0) + (entry.costBreakdown.cacheRead ?? 0) + (entry.costBreakdown.cacheWrite ?? 0) : entry.costTotal ?? 0);
+				const existing = dailyMap.get(dayKey) ?? {
+					tokens: 0,
+					cost: 0
+				};
+				dailyMap.set(dayKey, {
+					tokens: existing.tokens + entryTokens,
+					cost: existing.cost + entryCost
+				});
+				if (entry.provider || entry.model) {
+					const modelKey = `${dayKey}::${entry.provider ?? "unknown"}::${entry.model ?? "unknown"}`;
+					const dailyModel = dailyModelUsageMap.get(modelKey) ?? {
+						date: dayKey,
+						provider: entry.provider,
+						model: entry.model,
+						tokens: 0,
+						cost: 0,
+						count: 0
+					};
+					dailyModel.tokens += entryTokens;
+					dailyModel.cost += entryCost;
+					dailyModel.count += 1;
+					dailyModelUsageMap.set(modelKey, dailyModel);
+				}
+			}
+			if (entry.provider || entry.model) {
+				const key = `${entry.provider ?? "unknown"}::${entry.model ?? "unknown"}`;
+				const existing = modelUsageMap.get(key) ?? {
+					provider: entry.provider,
+					model: entry.model,
+					count: 0,
+					totals: emptyTotals()
+				};
+				existing.count += 1;
+				applyUsageTotals(existing.totals, entry.usage);
+				if (entry.costBreakdown?.total !== void 0) applyCostBreakdown(existing.totals, entry.costBreakdown);
+				else applyCostTotal(existing.totals, entry.costTotal);
+				modelUsageMap.set(key, existing);
+			}
 		}
 	});
+	const dailyBreakdown = Array.from(dailyMap.entries()).map(([date, data]) => ({
+		date,
+		tokens: data.tokens,
+		cost: data.cost
+	})).toSorted((a, b) => a.date.localeCompare(b.date));
+	const dailyMessageCounts = Array.from(dailyMessageMap.values()).toSorted((a, b) => a.date.localeCompare(b.date));
+	const dailyLatency = Array.from(dailyLatencyMap.entries()).map(([date, values]) => {
+		const stats = computeLatencyStats(values);
+		if (!stats) return null;
+		return {
+			date,
+			...stats
+		};
+	}).filter((entry) => Boolean(entry)).toSorted((a, b) => a.date.localeCompare(b.date));
+	const dailyModelUsage = Array.from(dailyModelUsageMap.values()).toSorted((a, b) => a.date.localeCompare(b.date) || b.cost - a.cost);
+	const toolUsage = toolUsageMap.size ? {
+		totalCalls: Array.from(toolUsageMap.values()).reduce((sum, count) => sum + count, 0),
+		uniqueTools: toolUsageMap.size,
+		tools: Array.from(toolUsageMap.entries()).map(([name, count]) => ({
+			name,
+			count
+		})).toSorted((a, b) => b.count - a.count)
+	} : void 0;
+	const modelUsage = modelUsageMap.size ? Array.from(modelUsageMap.values()).toSorted((a, b) => {
+		const costDiff = b.totals.totalCost - a.totals.totalCost;
+		if (costDiff !== 0) return costDiff;
+		return b.totals.totalTokens - a.totals.totalTokens;
+	}) : void 0;
 	return {
 		sessionId: params.sessionId,
 		sessionFile,
+		firstActivity,
 		lastActivity,
+		durationMs: firstActivity !== void 0 && lastActivity !== void 0 ? Math.max(0, lastActivity - firstActivity) : void 0,
+		activityDates: Array.from(activityDatesSet).toSorted(),
+		dailyBreakdown,
+		dailyMessageCounts,
+		dailyLatency: dailyLatency.length ? dailyLatency : void 0,
+		dailyModelUsage: dailyModelUsage.length ? dailyModelUsage : void 0,
+		messageCounts,
+		toolUsage,
+		modelUsage,
+		latency: computeLatencyStats(latencyValues),
 		...totals
 	};
 }
@@ -27832,7 +28327,7 @@ function migrateLegacyCronPayload(payload) {
 //#endregion
 //#region src/cron/normalize.ts
 const DEFAULT_OPTIONS = { applyDefaults: false };
-function isRecord$2(value) {
+function isRecord$3(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function coerceSchedule(schedule) {
@@ -27898,12 +28393,12 @@ function stripLegacyDeliveryFields(payload) {
 	if ("bestEffortDeliver" in payload) delete payload.bestEffortDeliver;
 }
 function unwrapJob(raw) {
-	if (isRecord$2(raw.data)) return raw.data;
-	if (isRecord$2(raw.job)) return raw.job;
+	if (isRecord$3(raw.data)) return raw.data;
+	if (isRecord$3(raw.job)) return raw.job;
 	return raw;
 }
 function normalizeCronJobInput(raw, options = DEFAULT_OPTIONS) {
-	if (!isRecord$2(raw)) return null;
+	if (!isRecord$3(raw)) return null;
 	const base = unwrapJob(raw);
 	const next = { ...base };
 	if ("agentId" in base) {
@@ -27924,20 +28419,20 @@ function normalizeCronJobInput(raw, options = DEFAULT_OPTIONS) {
 			if (trimmed === "false") next.enabled = false;
 		}
 	}
-	if (isRecord$2(base.schedule)) next.schedule = coerceSchedule(base.schedule);
-	if (isRecord$2(base.payload)) next.payload = coercePayload(base.payload);
-	if (isRecord$2(base.delivery)) next.delivery = coerceDelivery(base.delivery);
-	if (isRecord$2(base.isolation)) delete next.isolation;
+	if (isRecord$3(base.schedule)) next.schedule = coerceSchedule(base.schedule);
+	if (isRecord$3(base.payload)) next.payload = coercePayload(base.payload);
+	if (isRecord$3(base.delivery)) next.delivery = coerceDelivery(base.delivery);
+	if (isRecord$3(base.isolation)) delete next.isolation;
 	if (options.applyDefaults) {
 		if (!next.wakeMode) next.wakeMode = "next-heartbeat";
 		if (typeof next.enabled !== "boolean") next.enabled = true;
-		if (!next.sessionTarget && isRecord$2(next.payload)) {
+		if (!next.sessionTarget && isRecord$3(next.payload)) {
 			const kind = typeof next.payload.kind === "string" ? next.payload.kind : "";
 			if (kind === "systemEvent") next.sessionTarget = "main";
 			if (kind === "agentTurn") next.sessionTarget = "isolated";
 		}
-		if ("schedule" in next && isRecord$2(next.schedule) && next.schedule.kind === "at" && !("deleteAfterRun" in next)) next.deleteAfterRun = true;
-		const payload = isRecord$2(next.payload) ? next.payload : null;
+		if ("schedule" in next && isRecord$3(next.schedule) && next.schedule.kind === "at" && !("deleteAfterRun" in next)) next.deleteAfterRun = true;
+		const payload = isRecord$3(next.payload) ? next.payload : null;
 		const payloadKind = payload && typeof payload.kind === "string" ? payload.kind : "";
 		const sessionTarget = typeof next.sessionTarget === "string" ? next.sessionTarget : "";
 		const isIsolatedAgentTurn = sessionTarget === "isolated" || sessionTarget === "" && payloadKind === "agentTurn";
@@ -28065,6 +28560,37 @@ async function buildReminderContextLines(params) {
 		return [];
 	}
 }
+function isRecord$2(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function stripThreadSuffixFromSessionKey(sessionKey) {
+	const idx = sessionKey.toLowerCase().lastIndexOf(":thread:");
+	if (idx <= 0) return sessionKey;
+	const parent = sessionKey.slice(0, idx).trim();
+	return parent ? parent : sessionKey;
+}
+function inferDeliveryFromSessionKey(agentSessionKey) {
+	const rawSessionKey = agentSessionKey?.trim();
+	if (!rawSessionKey) return null;
+	const parsed = parseAgentSessionKey(stripThreadSuffixFromSessionKey(rawSessionKey));
+	if (!parsed || !parsed.rest) return null;
+	const parts = parsed.rest.split(":").filter(Boolean);
+	if (parts.length === 0) return null;
+	const head = parts[0]?.trim().toLowerCase();
+	if (!head || head === "main" || head === "subagent" || head === "acp") return null;
+	const markerIndex = parts.findIndex((part) => part === "dm" || part === "group" || part === "channel");
+	if (markerIndex === -1) return null;
+	const peerId = parts.slice(markerIndex + 1).join(":").trim();
+	if (!peerId) return null;
+	let channel;
+	if (markerIndex >= 1) channel = parts[0]?.trim().toLowerCase();
+	const delivery = {
+		mode: "announce",
+		to: peerId
+	};
+	if (channel) delivery.channel = channel;
+	return delivery;
+}
 function createCronTool(opts) {
 	return {
 		label: "Cron",
@@ -28145,6 +28671,19 @@ Use jobId as the canonical identifier; id is accepted for compatibility. Use con
 						}) : void 0;
 						if (agentId) job.agentId = agentId;
 					}
+					if (opts?.agentSessionKey && job && typeof job === "object" && "payload" in job && job.payload?.kind === "agentTurn") {
+						const deliveryValue = job.delivery;
+						const delivery = isRecord$2(deliveryValue) ? deliveryValue : void 0;
+						const mode = (typeof delivery?.mode === "string" ? delivery.mode : "").trim().toLowerCase();
+						const hasTarget = typeof delivery?.channel === "string" && delivery.channel.trim() || typeof delivery?.to === "string" && delivery.to.trim();
+						if ((deliveryValue == null || delivery) && mode !== "none" && !hasTarget) {
+							const inferred = inferDeliveryFromSessionKey(opts.agentSessionKey);
+							if (inferred) job.delivery = {
+								...delivery,
+								...inferred
+							};
+						}
+					}
 					const contextMessages = typeof params.contextMessages === "number" && Number.isFinite(params.contextMessages) ? params.contextMessages : 0;
 					if (job && typeof job === "object" && "payload" in job && job.payload?.kind === "systemEvent") {
 						const payload = job.payload;
@@ -28511,26 +29050,15 @@ function isAbortError$1(err) {
 function shouldRethrowAbort(err) {
 	return isAbortError$1(err) && !isTimeoutError(err);
 }
-function buildAllowedModelKeys(cfg, defaultProvider) {
-	const rawAllowlist = (() => {
-		const modelMap = cfg?.agents?.defaults?.models ?? {};
-		return Object.keys(modelMap);
-	})();
-	if (rawAllowlist.length === 0) return null;
-	const keys = /* @__PURE__ */ new Set();
-	for (const raw of rawAllowlist) {
-		const parsed = parseModelRef(String(raw ?? ""), defaultProvider);
-		if (!parsed) continue;
-		keys.add(modelKey(parsed.provider, parsed.model));
-	}
-	return keys.size > 0 ? keys : null;
-}
 function resolveImageFallbackCandidates(params) {
 	const aliasIndex = buildModelAliasIndex({
 		cfg: params.cfg ?? {},
 		defaultProvider: params.defaultProvider
 	});
-	const allowlist = buildAllowedModelKeys(params.cfg, params.defaultProvider);
+	const allowlist = buildConfiguredAllowlistKeys({
+		cfg: params.cfg,
+		defaultProvider: params.defaultProvider
+	});
 	const seen = /* @__PURE__ */ new Set();
 	const candidates = [];
 	const addCandidate = (candidate, enforceAllowlist) => {
@@ -28578,7 +29106,10 @@ function resolveFallbackCandidates(params) {
 		cfg: params.cfg ?? {},
 		defaultProvider
 	});
-	const allowlist = buildAllowedModelKeys(params.cfg, defaultProvider);
+	const allowlist = buildConfiguredAllowlistKeys({
+		cfg: params.cfg,
+		defaultProvider
+	});
 	const seen = /* @__PURE__ */ new Set();
 	const candidates = [];
 	const addCandidate = (candidate, enforceAllowlist) => {
@@ -28723,6 +29254,8 @@ async function runWithImageModelFallback(params) {
 //#endregion
 //#region src/agents/tools/image-tool.ts
 const DEFAULT_PROMPT = "Describe the image.";
+const ANTHROPIC_IMAGE_PRIMARY = "anthropic/claude-opus-4-6";
+const ANTHROPIC_IMAGE_FALLBACK = "anthropic/claude-opus-4-5";
 function resolveDefaultModelRef(cfg) {
 	if (cfg) {
 		const resolved = resolveConfiguredModelRef({
@@ -28783,10 +29316,10 @@ function resolveImageModelConfigForTool(params) {
 	if (primary.provider === "minimax" && providerOk) preferred = "minimax/MiniMax-VL-01";
 	else if (providerOk && providerVisionFromConfig) preferred = providerVisionFromConfig;
 	else if (primary.provider === "openai" && openaiOk) preferred = "openai/gpt-5-mini";
-	else if (primary.provider === "anthropic" && anthropicOk) preferred = "anthropic/claude-opus-4-5";
+	else if (primary.provider === "anthropic" && anthropicOk) preferred = ANTHROPIC_IMAGE_PRIMARY;
 	if (preferred?.trim()) {
 		if (openaiOk) addFallback("openai/gpt-5-mini");
-		if (anthropicOk) addFallback("anthropic/claude-opus-4-5");
+		if (anthropicOk) addFallback(ANTHROPIC_IMAGE_FALLBACK);
 		const pruned = fallbacks.filter((ref) => ref !== preferred);
 		return {
 			primary: preferred,
@@ -28794,13 +29327,16 @@ function resolveImageModelConfigForTool(params) {
 		};
 	}
 	if (openaiOk) {
-		if (anthropicOk) addFallback("anthropic/claude-opus-4-5");
+		if (anthropicOk) addFallback(ANTHROPIC_IMAGE_FALLBACK);
 		return {
 			primary: "openai/gpt-5-mini",
 			...fallbacks.length ? { fallbacks } : {}
 		};
 	}
-	if (anthropicOk) return { primary: "anthropic/claude-opus-4-5" };
+	if (anthropicOk) return {
+		primary: ANTHROPIC_IMAGE_PRIMARY,
+		fallbacks: [ANTHROPIC_IMAGE_FALLBACK]
+	};
 	return null;
 }
 function pickMaxBytes(cfg, maxBytesMb) {
@@ -30634,6 +31170,20 @@ function buildTelegramGroupPeerId(chatId, messageThreadId) {
 function buildTelegramGroupFrom(chatId, messageThreadId) {
 	return `telegram:group:${buildTelegramGroupPeerId(chatId, messageThreadId)}`;
 }
+/**
+* Build parentPeer for forum topic binding inheritance.
+* When a message comes from a forum topic, the peer ID includes the topic suffix
+* (e.g., `-1001234567890:topic:99`). To allow bindings configured for the base
+* group ID to match, we provide the parent group as `parentPeer` so the routing
+* layer can fall back to it when the exact peer doesn't match.
+*/
+function buildTelegramParentPeer(params) {
+	if (!params.isGroup || params.resolvedThreadId == null) return;
+	return {
+		kind: "group",
+		id: String(params.chatId)
+	};
+}
 function buildSenderName(msg) {
 	return [msg.from?.first_name, msg.from?.last_name].filter(Boolean).join(" ").trim() || msg.from?.username || void 0;
 }
@@ -31643,6 +32193,24 @@ function resolveSlackAutoThreadId(params) {
 	if (context.replyToMode === "first" && context.hasRepliedRef?.value) return;
 	return context.currentThreadTs;
 }
+/**
+* Auto-inject Telegram forum topic thread ID when the message tool targets
+* the same chat the session originated from.  Mirrors the Slack auto-threading
+* pattern so media, buttons, and other tool-sent messages land in the correct
+* topic instead of the General Topic.
+*
+* Unlike Slack, we do not gate on `replyToMode` here: Telegram forum topics
+* are persistent sub-channels (not ephemeral reply threads), so auto-injection
+* should always apply when the target chat matches.
+*/
+function resolveTelegramAutoThreadId(params) {
+	const context = params.toolContext;
+	if (!context?.currentThreadTs || !context.currentChannelId) return;
+	const parsedTo = parseTelegramTarget(params.to);
+	const parsedChannel = parseTelegramTarget(context.currentChannelId);
+	if (parsedTo.chatId.toLowerCase() !== parsedChannel.chatId.toLowerCase()) return;
+	return context.currentThreadTs;
+}
 function resolveAttachmentMaxBytes(params) {
 	const fallback = params.cfg.agents?.defaults?.mediaMaxMb;
 	if (params.channel !== "bluebubbles") return typeof fallback === "number" ? fallback * 1024 * 1024 : void 0;
@@ -31691,6 +32259,42 @@ function normalizeBase64Payload(params) {
 		contentType: params.contentType ?? mime
 	};
 }
+async function normalizeSandboxMediaParams(params) {
+	const sandboxRoot = params.sandboxRoot?.trim();
+	for (const key of [
+		"media",
+		"path",
+		"filePath"
+	]) {
+		const raw = readStringParam(params.args, key, { trim: false });
+		if (!raw) continue;
+		assertMediaNotDataUrl(raw);
+		if (!sandboxRoot) continue;
+		const normalized = await resolveSandboxedMediaSource({
+			media: raw,
+			sandboxRoot
+		});
+		if (normalized !== raw) params.args[key] = normalized;
+	}
+}
+async function normalizeSandboxMediaList(params) {
+	const sandboxRoot = params.sandboxRoot?.trim();
+	const normalized = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const value of params.values) {
+		const raw = value?.trim();
+		if (!raw) continue;
+		assertMediaNotDataUrl(raw);
+		const resolved = sandboxRoot ? await resolveSandboxedMediaSource({
+			media: raw,
+			sandboxRoot
+		}) : raw;
+		if (seen.has(resolved)) continue;
+		seen.add(resolved);
+		normalized.push(resolved);
+	}
+	return normalized;
+}
 async function hydrateSetGroupIconParams(params) {
 	if (params.action !== "setGroupIcon") return;
 	const mediaHint = readStringParam(params.args, "media", { trim: false });
@@ -31911,6 +32515,7 @@ async function handleSendAction(ctx) {
 		required: !mediaHint && !hasCard,
 		allowEmpty: true
 	}) ?? "";
+	if (message.includes("\\n")) message = message.replaceAll("\\n", "\n");
 	const parsed = parseReplyDirectives(message);
 	const mergedMediaUrls = [];
 	const seenMedia = /* @__PURE__ */ new Set();
@@ -31924,6 +32529,12 @@ async function handleSendAction(ctx) {
 	pushMedia(mediaHint);
 	for (const url of parsed.mediaUrls ?? []) pushMedia(url);
 	pushMedia(parsed.mediaUrl);
+	const normalizedMediaUrls = await normalizeSandboxMediaList({
+		values: mergedMediaUrls,
+		sandboxRoot: input.sandboxRoot
+	});
+	mergedMediaUrls.length = 0;
+	mergedMediaUrls.push(...normalizedMediaUrls);
 	message = parsed.text;
 	params.message = message;
 	if (!params.replyTo && parsed.replyToId) params.replyTo = parsed.replyToId;
@@ -31948,6 +32559,12 @@ async function handleSendAction(ctx) {
 		to,
 		toolContext: input.toolContext
 	}) : void 0;
+	const telegramAutoThreadId = channel === "telegram" && !threadId ? resolveTelegramAutoThreadId({
+		to,
+		toolContext: input.toolContext
+	}) : void 0;
+	const resolvedThreadId = threadId ?? slackAutoThreadId ?? telegramAutoThreadId;
+	if (resolvedThreadId && !params.threadId) params.threadId = resolvedThreadId;
 	const outboundRoute = agentId && !dryRun ? await resolveOutboundSessionRoute({
 		cfg,
 		channel,
@@ -31956,7 +32573,7 @@ async function handleSendAction(ctx) {
 		target: to,
 		resolvedTarget,
 		replyToId,
-		threadId: threadId ?? slackAutoThreadId
+		threadId: resolvedThreadId
 	}) : null;
 	if (outboundRoute && agentId && !dryRun) await ensureOutboundSessionEntry({
 		cfg,
@@ -32139,6 +32756,10 @@ async function runMessageAction(input) {
 	const accountId = readStringParam(params, "accountId") ?? input.defaultAccountId;
 	if (accountId) params.accountId = accountId;
 	const dryRun = Boolean(input.dryRun ?? readBooleanParam(params, "dryRun"));
+	await normalizeSandboxMediaParams({
+		args: params,
+		sandboxRoot: input.sandboxRoot
+	});
 	await hydrateSendAttachmentParams({
 		cfg,
 		channel,
@@ -32232,7 +32853,7 @@ function buildSendSchema(options) {
 		message: Type.Optional(Type.String()),
 		effectId: Type.Optional(Type.String({ description: "Message effect name/id for sendWithEffect (e.g., invisible ink)." })),
 		effect: Type.Optional(Type.String({ description: "Alias for effectId (e.g., invisible-ink, balloons)." })),
-		media: Type.Optional(Type.String()),
+		media: Type.Optional(Type.String({ description: "Media URL or local path. data: URLs are not supported here, use buffer." })),
 		filename: Type.Optional(Type.String()),
 		buffer: Type.Optional(Type.String({ description: "Base64 payload for attachments (optionally a data: URL)." })),
 		contentType: Type.Optional(Type.String()),
@@ -32462,15 +33083,6 @@ function createMessageTool(options) {
 			if (options?.requireExplicitTarget === true && actionNeedsExplicitTarget(action)) {
 				if (!(typeof params.target === "string" && params.target.trim().length > 0 || typeof params.to === "string" && params.to.trim().length > 0 || typeof params.channelId === "string" && params.channelId.trim().length > 0 || Array.isArray(params.targets) && params.targets.some((value) => typeof value === "string" && value.trim().length > 0))) throw new Error("Explicit message target required for this run. Provide target/targets (and channel when needed).");
 			}
-			const sandboxRoot = options?.sandboxRoot;
-			if (sandboxRoot) for (const key of ["filePath", "path"]) {
-				const raw = readStringParam(params, key, { trim: false });
-				if (raw) await assertSandboxPath({
-					filePath: raw,
-					cwd: sandboxRoot,
-					root: sandboxRoot
-				});
-			}
 			const accountId = readStringParam(params, "accountId") ?? agentAccountId;
 			if (accountId) params.accountId = accountId;
 			const gateway = {
@@ -32500,6 +33112,7 @@ function createMessageTool(options) {
 					sessionKey: options.agentSessionKey,
 					config: cfg
 				}) : void 0,
+				sandboxRoot: options?.sandboxRoot,
 				abortSignal: signal
 			});
 			const toolResult = getToolResult(result);
@@ -32892,6 +33505,30 @@ function createNodesTool(options) {
 
 //#endregion
 //#region src/gateway/session-utils.fs.ts
+function jsonUtf8Bytes$1(value) {
+	try {
+		return Buffer.byteLength(JSON.stringify(value), "utf8");
+	} catch {
+		return Buffer.byteLength(String(value), "utf8");
+	}
+}
+function capArrayByJsonBytes(items, maxBytes) {
+	if (items.length === 0) return {
+		items,
+		bytes: 2
+	};
+	const parts = items.map((item) => jsonUtf8Bytes$1(item));
+	let bytes = 2 + parts.reduce((a, b) => a + b, 0) + (items.length - 1);
+	let start = 0;
+	while (bytes > maxBytes && start < items.length - 1) {
+		bytes -= parts[start] + 1;
+		start += 1;
+	}
+	return {
+		items: start > 0 ? items.slice(start) : items,
+		bytes
+	};
+}
 const PREVIEW_READ_SIZES = [
 	64 * 1024,
 	256 * 1024,
@@ -33287,6 +33924,131 @@ const SessionsHistoryToolSchema = Type.Object({
 	limit: Type.Optional(Type.Number({ minimum: 1 })),
 	includeTools: Type.Optional(Type.Boolean())
 });
+const SESSIONS_HISTORY_MAX_BYTES = 80 * 1024;
+const SESSIONS_HISTORY_TEXT_MAX_CHARS = 4e3;
+function truncateHistoryText(text) {
+	if (text.length <= SESSIONS_HISTORY_TEXT_MAX_CHARS) return {
+		text,
+		truncated: false
+	};
+	return {
+		text: `${truncateUtf16Safe(text, SESSIONS_HISTORY_TEXT_MAX_CHARS)}\n…(truncated)…`,
+		truncated: true
+	};
+}
+function sanitizeHistoryContentBlock(block) {
+	if (!block || typeof block !== "object") return {
+		block,
+		truncated: false
+	};
+	const entry = { ...block };
+	let truncated = false;
+	const type = typeof entry.type === "string" ? entry.type : "";
+	if (typeof entry.text === "string") {
+		const res = truncateHistoryText(entry.text);
+		entry.text = res.text;
+		truncated ||= res.truncated;
+	}
+	if (type === "thinking") {
+		if (typeof entry.thinking === "string") {
+			const res = truncateHistoryText(entry.thinking);
+			entry.thinking = res.text;
+			truncated ||= res.truncated;
+		}
+		if ("thinkingSignature" in entry) {
+			delete entry.thinkingSignature;
+			truncated = true;
+		}
+	}
+	if (typeof entry.partialJson === "string") {
+		const res = truncateHistoryText(entry.partialJson);
+		entry.partialJson = res.text;
+		truncated ||= res.truncated;
+	}
+	if (type === "image") {
+		const data = typeof entry.data === "string" ? entry.data : void 0;
+		const bytes = data ? data.length : void 0;
+		if ("data" in entry) {
+			delete entry.data;
+			truncated = true;
+		}
+		entry.omitted = true;
+		if (bytes !== void 0) entry.bytes = bytes;
+	}
+	return {
+		block: entry,
+		truncated
+	};
+}
+function sanitizeHistoryMessage(message) {
+	if (!message || typeof message !== "object") return {
+		message,
+		truncated: false
+	};
+	const entry = { ...message };
+	let truncated = false;
+	if ("details" in entry) {
+		delete entry.details;
+		truncated = true;
+	}
+	if ("usage" in entry) {
+		delete entry.usage;
+		truncated = true;
+	}
+	if ("cost" in entry) {
+		delete entry.cost;
+		truncated = true;
+	}
+	if (typeof entry.content === "string") {
+		const res = truncateHistoryText(entry.content);
+		entry.content = res.text;
+		truncated ||= res.truncated;
+	} else if (Array.isArray(entry.content)) {
+		const updated = entry.content.map((block) => sanitizeHistoryContentBlock(block));
+		entry.content = updated.map((item) => item.block);
+		truncated ||= updated.some((item) => item.truncated);
+	}
+	if (typeof entry.text === "string") {
+		const res = truncateHistoryText(entry.text);
+		entry.text = res.text;
+		truncated ||= res.truncated;
+	}
+	return {
+		message: entry,
+		truncated
+	};
+}
+function jsonUtf8Bytes(value) {
+	try {
+		return Buffer.byteLength(JSON.stringify(value), "utf8");
+	} catch {
+		return Buffer.byteLength(String(value), "utf8");
+	}
+}
+function enforceSessionsHistoryHardCap(params) {
+	if (params.bytes <= params.maxBytes) return {
+		items: params.items,
+		bytes: params.bytes,
+		hardCapped: false
+	};
+	const last = params.items.at(-1);
+	const lastOnly = last ? [last] : [];
+	const lastBytes = jsonUtf8Bytes(lastOnly);
+	if (lastBytes <= params.maxBytes) return {
+		items: lastOnly,
+		bytes: lastBytes,
+		hardCapped: true
+	};
+	const placeholder = [{
+		role: "assistant",
+		content: "[sessions_history omitted: message too large]"
+	}];
+	return {
+		items: placeholder,
+		bytes: jsonUtf8Bytes(placeholder),
+		hardCapped: true
+	};
+}
 function resolveSandboxSessionToolsVisibility$1(cfg) {
 	return cfg.agents?.defaults?.sandbox?.sessionToolsVisibility ?? "spawned";
 }
@@ -33370,9 +34132,23 @@ function createSessionsHistoryTool(opts) {
 				}
 			});
 			const rawMessages = Array.isArray(result?.messages) ? result.messages : [];
+			const selectedMessages = includeTools ? rawMessages : stripToolMessages(rawMessages);
+			const sanitizedMessages = selectedMessages.map((message) => sanitizeHistoryMessage(message));
+			const contentTruncated = sanitizedMessages.some((entry) => entry.truncated);
+			const cappedMessages = capArrayByJsonBytes(sanitizedMessages.map((entry) => entry.message), SESSIONS_HISTORY_MAX_BYTES);
+			const droppedMessages = cappedMessages.items.length < selectedMessages.length;
+			const hardened = enforceSessionsHistoryHardCap({
+				items: cappedMessages.items,
+				bytes: cappedMessages.bytes,
+				maxBytes: SESSIONS_HISTORY_MAX_BYTES
+			});
 			return jsonResult({
 				sessionKey: displayKey,
-				messages: includeTools ? rawMessages : stripToolMessages(rawMessages)
+				messages: hardened.items,
+				truncated: droppedMessages || contentTruncated || hardened.hardCapped,
+				droppedMessages: droppedMessages || hardened.hardCapped,
+				contentTruncated,
+				bytes: hardened.bytes
 			});
 		}
 	};
@@ -34179,6 +34955,9 @@ function createSessionsSpawnTool(opts) {
 						message: task,
 						sessionKey: childSessionKey,
 						channel: requesterOrigin?.channel,
+						to: requesterOrigin?.to ?? void 0,
+						accountId: requesterOrigin?.accountId ?? void 0,
+						threadId: requesterOrigin?.threadId != null ? String(requesterOrigin.threadId) : void 0,
 						idempotencyKey: childIdem,
 						deliver: false,
 						lane: AGENT_LANE_SUBAGENT,
@@ -35700,8 +36479,10 @@ const DEFAULT_CLAUDE_BACKEND = {
 	modelArg: "--model",
 	modelAliases: {
 		opus: "opus",
+		"opus-4.6": "opus",
 		"opus-4.5": "opus",
 		"opus-4": "opus",
+		"claude-opus-4-6": "opus",
 		"claude-opus-4-5": "opus",
 		"claude-opus-4": "opus",
 		sonnet: "sonnet",
@@ -38194,6 +38975,7 @@ async function runPreparedReply(params) {
 			senderName: sessionCtx.SenderName?.trim() || void 0,
 			senderUsername: sessionCtx.SenderUsername?.trim() || void 0,
 			senderE164: sessionCtx.SenderE164?.trim() || void 0,
+			senderIsOwner: command.senderIsOwner,
 			sessionFile,
 			workspaceDir,
 			config: cfg,
@@ -38566,11 +39348,13 @@ async function initSessionState(params) {
 	if (threadLabel) sessionEntry.displayName = threadLabel;
 	const parentSessionKey = ctx.ParentSessionKey?.trim();
 	if (isNewSession && parentSessionKey && parentSessionKey !== sessionKey && sessionStore[parentSessionKey]) {
+		console.warn(`[session-init] forking from parent session: parentKey=${parentSessionKey} → sessionKey=${sessionKey} parentTokens=${sessionStore[parentSessionKey].totalTokens ?? "?"}`);
 		const forked = forkSessionFromParent({ parentEntry: sessionStore[parentSessionKey] });
 		if (forked) {
 			sessionId = forked.sessionId;
 			sessionEntry.sessionId = forked.sessionId;
 			sessionEntry.sessionFile = forked.sessionFile;
+			console.warn(`[session-init] forked session created: file=${forked.sessionFile}`);
 		}
 	}
 	if (!sessionEntry.sessionFile) sessionEntry.sessionFile = resolveSessionTranscriptPath(sessionEntry.sessionId, agentId, ctx.MessageThreadId);
@@ -38578,6 +39362,10 @@ async function initSessionState(params) {
 		sessionEntry.compactionCount = 0;
 		sessionEntry.memoryFlushCompactionCount = void 0;
 		sessionEntry.memoryFlushAt = void 0;
+		sessionEntry.totalTokens = void 0;
+		sessionEntry.inputTokens = void 0;
+		sessionEntry.outputTokens = void 0;
+		sessionEntry.contextTokens = void 0;
 	}
 	sessionStore[sessionKey] = {
 		...sessionStore[sessionKey],
@@ -39325,9 +40113,10 @@ async function dispatchReplyFromConfig(params) {
 		}
 		let accumulatedBlockText = "";
 		let blockCount = 0;
+		const shouldSendToolSummaries = ctx.ChatType !== "group" && ctx.CommandSource !== "native";
 		const replyResult = await (params.replyResolver ?? getReplyFromConfig)(ctx, {
 			...params.replyOptions,
-			onToolResult: ctx.ChatType !== "group" && ctx.CommandSource !== "native" ? (payload) => {
+			onToolResult: shouldSendToolSummaries ? (payload) => {
 				const run = async () => {
 					const ttsPayload = await maybeApplyTtsToPayload({
 						payload,
@@ -43131,7 +43920,7 @@ async function describeStickerImage(params) {
 	const selectCatalogModel = (provider) => {
 		const entries = catalog.filter((entry) => entry.provider.toLowerCase() === provider.toLowerCase() && modelSupportsVision(entry));
 		if (entries.length === 0) return;
-		const defaultId = provider === "openai" ? "gpt-5-mini" : provider === "anthropic" ? "claude-opus-4-5" : provider === "google" ? "gemini-3-flash-preview" : "MiniMax-VL-01";
+		const defaultId = provider === "openai" ? "gpt-5-mini" : provider === "anthropic" ? "claude-opus-4-6" : provider === "google" ? "gemini-3-flash-preview" : "MiniMax-VL-01";
 		return entries.find((entry) => entry.id === defaultId) ?? entries[0];
 	};
 	let resolved = null;
@@ -43160,7 +43949,7 @@ async function describeStickerImage(params) {
 	logVerbose(`telegram: describing sticker with ${provider}/${model}`);
 	try {
 		const buffer = await fs$1.readFile(imagePath);
-		const { describeImageWithModel } = await import("./image-D1O-ebQc.js");
+		const { describeImageWithModel } = await import("./image-CgBndiQy.js").then((n) => n.n);
 		return (await describeImageWithModel({
 			buffer,
 			fileName: "sticker.webp",
@@ -43517,7 +44306,7 @@ function createWhatsAppLoginTool() {
 			force: Type.Optional(Type.Boolean())
 		}),
 		execute: async (_toolCallId, args) => {
-			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-CGWNrSQq.js");
+			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-CcOWO_dR.js").then((n) => n.t);
 			if ((args?.action ?? "start") === "wait") {
 				const result = await waitForWebLogin({ timeoutMs: typeof args.timeoutMs === "number" ? args.timeoutMs : void 0 });
 				return {
@@ -44966,11 +45755,22 @@ function createReplyPrefixContext(params) {
 	};
 	return {
 		prefixContext,
-		responsePrefix: resolveEffectiveMessagesConfig(cfg, agentId).responsePrefix,
+		responsePrefix: resolveEffectiveMessagesConfig(cfg, agentId, {
+			channel: params.channel,
+			accountId: params.accountId
+		}).responsePrefix,
 		responsePrefixContextProvider: () => prefixContext,
 		onModelSelected
 	};
 }
+function createReplyPrefixOptions(params) {
+	const { responsePrefix, responsePrefixContextProvider, onModelSelected } = createReplyPrefixContext(params);
+	return {
+		responsePrefix,
+		responsePrefixContextProvider,
+		onModelSelected
+	};
+}
 
 //#endregion
 //#region src/web/auto-reply/deliver-reply.ts
@@ -45279,12 +46079,14 @@ async function processMessage(params) {
 		msg: params.msg
 	}) : void 0;
 	const configuredResponsePrefix = params.cfg.messages?.responsePrefix;
-	const prefixContext = createReplyPrefixContext({
+	const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
 		cfg: params.cfg,
-		agentId: params.route.agentId
+		agentId: params.route.agentId,
+		channel: "whatsapp",
+		accountId: params.route.accountId
 	});
 	const isSelfChat = params.msg.chatType !== "group" && Boolean(params.msg.selfE164) && normalizeE164(params.msg.from) === normalizeE164(params.msg.selfE164 ?? "");
-	const responsePrefix = prefixContext.responsePrefix ?? (configuredResponsePrefix === void 0 && isSelfChat ? resolveIdentityNamePrefix(params.cfg, params.route.agentId) ?? "[openclaw]" : void 0);
+	const responsePrefix = prefixOptions.responsePrefix ?? (configuredResponsePrefix === void 0 && isSelfChat ? resolveIdentityNamePrefix(params.cfg, params.route.agentId) ?? "[openclaw]" : void 0);
 	const ctxPayload = finalizeInboundContext({
 		Body: combinedBody,
 		RawBody: params.msg.body,
@@ -45347,8 +46149,8 @@ async function processMessage(params) {
 		cfg: params.cfg,
 		replyResolver: params.replyResolver,
 		dispatcherOptions: {
+			...prefixOptions,
 			responsePrefix,
-			responsePrefixContextProvider: prefixContext.responsePrefixContextProvider,
 			onHeartbeatStrip: () => {
 				if (!didLogHeartbeatStrip) {
 					didLogHeartbeatStrip = true;
@@ -45396,7 +46198,7 @@ async function processMessage(params) {
 		},
 		replyOptions: {
 			disableBlockStreaming: typeof params.cfg.channels?.whatsapp?.blockStreaming === "boolean" ? !params.cfg.channels.whatsapp.blockStreaming : void 0,
-			onModelSelected: prefixContext.onModelSelected
+			onModelSelected
 		}
 	});
 	if (!queuedFinal) {
@@ -47758,6 +48560,15 @@ async function processDiscordMessage(ctx) {
 	const senderTag = sender.tag;
 	const systemPromptParts = [channelConfig?.systemPrompt?.trim() || null].filter((entry) => Boolean(entry));
 	const groupSystemPrompt = systemPromptParts.length > 0 ? systemPromptParts.join("\n\n") : void 0;
+	const ownerAllowFrom = resolveDiscordOwnerAllowFrom({
+		channelConfig,
+		guildInfo,
+		sender: {
+			id: sender.id,
+			name: sender.name,
+			tag: sender.tag
+		}
+	});
 	const storePath = resolveStorePath(cfg.session?.store, { agentId: route.agentId });
 	const envelopeOptions = resolveEnvelopeFormatOptions(cfg);
 	const previousTimestamp = readSessionUpdatedAt({
@@ -47796,20 +48607,22 @@ async function processDiscordMessage(ctx) {
 	let threadLabel;
 	let parentSessionKey;
 	if (threadChannel) {
-		const starter = await resolveDiscordThreadStarter({
-			channel: threadChannel,
-			client,
-			parentId: threadParentId,
-			parentType: threadParentType,
-			resolveTimestampMs
-		});
-		if (starter?.text) threadStarterBody = formatThreadStarterEnvelope({
-			channel: "Discord",
-			author: starter.author,
-			timestamp: starter.timestamp,
-			body: starter.text,
-			envelope: envelopeOptions
-		});
+		if (channelConfig?.includeThreadStarter !== false) {
+			const starter = await resolveDiscordThreadStarter({
+				channel: threadChannel,
+				client,
+				parentId: threadParentId,
+				parentType: threadParentType,
+				resolveTimestampMs
+			});
+			if (starter?.text) threadStarterBody = formatThreadStarterEnvelope({
+				channel: "Discord",
+				author: starter.author,
+				timestamp: starter.timestamp,
+				body: starter.text,
+				envelope: envelopeOptions
+			});
+		}
 		const parentName = threadParentName ?? "parent";
 		threadLabel = threadName ? `Discord thread #${normalizeDiscordSlug(parentName)} › ${threadName}` : `Discord thread #${normalizeDiscordSlug(parentName)}`;
 		if (threadParentId) parentSessionKey = buildAgentSessionKey({
@@ -47869,6 +48682,7 @@ async function processDiscordMessage(ctx) {
 		UntrustedContext: untrustedChannelMetadata ? [untrustedChannelMetadata] : void 0,
 		GroupSystemPrompt: isGuildMessage ? groupSystemPrompt : void 0,
 		GroupSpace: isGuildMessage ? (guildInfo?.id ?? guildSlug) || void 0 : void 0,
+		OwnerAllowFrom: ownerAllowFrom,
 		Provider: "discord",
 		Surface: "discord",
 		WasMentioned: effectiveWasMentioned,
@@ -47902,9 +48716,11 @@ async function processDiscordMessage(ctx) {
 		logVerbose(`discord inbound: channel=${message.channelId} deliver=${deliverTarget} from=${ctxPayload.From} preview="${preview}"`);
 	}
 	const typingChannelId = deliverTarget.startsWith("channel:") ? deliverTarget.slice(8) : message.channelId;
-	const prefixContext = createReplyPrefixContext({
+	const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
 		cfg,
-		agentId: route.agentId
+		agentId: route.agentId,
+		channel: "discord",
+		accountId: route.accountId
 	});
 	const tableMode = resolveMarkdownTableMode({
 		cfg,
@@ -47912,8 +48728,7 @@ async function processDiscordMessage(ctx) {
 		accountId
 	});
 	const { dispatcher, replyOptions, markDispatchIdle } = createReplyDispatcherWithTyping({
-		responsePrefix: prefixContext.responsePrefix,
-		responsePrefixContextProvider: prefixContext.responsePrefixContextProvider,
+		...prefixOptions,
 		humanDelay: resolveHumanDelayConfig(cfg, route.agentId),
 		deliver: async (payload) => {
 			const replyToId = replyReference.use();
@@ -47958,9 +48773,7 @@ async function processDiscordMessage(ctx) {
 			...replyOptions,
 			skillFilter: channelConfig?.skills,
 			disableBlockStreaming: typeof discordConfig?.blockStreaming === "boolean" ? !discordConfig.blockStreaming : void 0,
-			onModelSelected: (ctx) => {
-				prefixContext.onModelSelected(ctx);
-			}
+			onModelSelected
 		}
 	});
 	markDispatchIdle();
@@ -48585,6 +49398,15 @@ async function dispatchDiscordCommandInteraction(params) {
 		} : void 0
 	});
 	const conversationLabel = isDirectMessage ? user.globalName ?? user.username : channelId;
+	const ownerAllowFrom = resolveDiscordOwnerAllowFrom({
+		channelConfig,
+		guildInfo,
+		sender: {
+			id: sender.id,
+			name: sender.name,
+			tag: sender.tag
+		}
+	});
 	const ctxPayload = finalizeInboundContext({
 		Body: prompt,
 		RawBody: prompt,
@@ -48610,6 +49432,7 @@ async function dispatchDiscordCommandInteraction(params) {
 			});
 			return untrustedChannelMetadata ? [untrustedChannelMetadata] : void 0;
 		})() : void 0,
+		OwnerAllowFrom: ownerAllowFrom,
 		SenderName: user.globalName ?? user.username,
 		SenderId: user.id,
 		SenderUsername: user.username,
@@ -48622,12 +49445,18 @@ async function dispatchDiscordCommandInteraction(params) {
 		CommandAuthorized: commandAuthorized,
 		CommandSource: "native"
 	});
+	const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
+		cfg,
+		agentId: route.agentId,
+		channel: "discord",
+		accountId: route.accountId
+	});
 	let didReply = false;
 	await dispatchReplyWithDispatcher({
 		ctx: ctxPayload,
 		cfg,
 		dispatcherOptions: {
-			responsePrefix: resolveEffectiveMessagesConfig(cfg, route.agentId).responsePrefix,
+			...prefixOptions,
 			humanDelay: resolveHumanDelayConfig(cfg, route.agentId),
 			deliver: async (payload) => {
 				try {
@@ -48654,7 +49483,8 @@ async function dispatchDiscordCommandInteraction(params) {
 		},
 		replyOptions: {
 			skillFilter: channelConfig?.skills,
-			disableBlockStreaming: typeof discordConfig?.blockStreaming === "boolean" ? !discordConfig.blockStreaming : void 0
+			disableBlockStreaming: typeof discordConfig?.blockStreaming === "boolean" ? !discordConfig.blockStreaming : void 0,
+			onModelSelected
 		}
 	});
 }
@@ -50810,16 +51640,17 @@ async function monitorIMessageProvider(opts = {}) {
 			const preview = truncateUtf16Safe(body, 200).replace(/\n/g, "\\n");
 			logVerbose(`imessage inbound: chatId=${chatId ?? "unknown"} from=${ctxPayload.From} len=${body.length} preview="${preview}"`);
 		}
-		const prefixContext = createReplyPrefixContext({
+		const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
 			cfg,
-			agentId: route.agentId
+			agentId: route.agentId,
+			channel: "imessage",
+			accountId: route.accountId
 		});
 		const { queuedFinal } = await dispatchInboundMessage({
 			ctx: ctxPayload,
 			cfg,
 			dispatcher: createReplyDispatcher({
-				responsePrefix: prefixContext.responsePrefix,
-				responsePrefixContextProvider: prefixContext.responsePrefixContextProvider,
+				...prefixOptions,
 				humanDelay: resolveHumanDelayConfig(cfg, route.agentId),
 				deliver: async (payload) => {
 					await deliverReplies$3({
@@ -50839,7 +51670,7 @@ async function monitorIMessageProvider(opts = {}) {
 			}),
 			replyOptions: {
 				disableBlockStreaming: typeof accountInfo.config.blockStreaming === "boolean" ? !accountInfo.config.blockStreaming : void 0,
-				onModelSelected: prefixContext.onModelSelected
+				onModelSelected
 			}
 		});
 		if (!queuedFinal) {
@@ -52641,11 +53472,17 @@ async function monitorLineProvider(opts) {
 			try {
 				const textLimit = 5e3;
 				let replyTokenUsed = false;
+				const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
+					cfg: config,
+					agentId: route.agentId,
+					channel: "line",
+					accountId: route.accountId
+				});
 				const { queuedFinal } = await dispatchReplyWithBufferedBlockDispatcher({
 					ctx: ctxPayload,
 					cfg: config,
 					dispatcherOptions: {
-						responsePrefix: resolveEffectiveMessagesConfig(config, route.agentId).responsePrefix,
+						...prefixOptions,
 						deliver: async (payload, _info) => {
 							const lineData = payload.channelData?.line ?? {};
 							if (ctx.userId && !ctx.isGroup) showLoadingAnimation(ctx.userId, { accountId: ctx.accountId }).catch(() => {});
@@ -52687,7 +53524,7 @@ async function monitorLineProvider(opts) {
 							runtime.error?.(danger(`line ${info.kind} reply failed: ${String(err)}`));
 						}
 					},
-					replyOptions: {}
+					replyOptions: { onModelSelected }
 				});
 				if (!queuedFinal) logVerbose(`line: no response generated for message from ${ctxPayload.From}`);
 			} catch (err) {
@@ -52982,9 +53819,11 @@ function createSignalEventHandler(deps) {
 			const preview = body.slice(0, 200).replace(/\\n/g, "\\\\n");
 			logVerbose(`signal inbound: from=${ctxPayload.From} len=${body.length} preview="${preview}"`);
 		}
-		const prefixContext = createReplyPrefixContext({
+		const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
 			cfg: deps.cfg,
-			agentId: route.agentId
+			agentId: route.agentId,
+			channel: "signal",
+			accountId: route.accountId
 		});
 		const typingCallbacks = createTypingCallbacks({
 			start: async () => {
@@ -53005,8 +53844,7 @@ function createSignalEventHandler(deps) {
 			}
 		});
 		const { dispatcher, replyOptions, markDispatchIdle } = createReplyDispatcherWithTyping({
-			responsePrefix: prefixContext.responsePrefix,
-			responsePrefixContextProvider: prefixContext.responsePrefixContextProvider,
+			...prefixOptions,
 			humanDelay: resolveHumanDelayConfig(deps.cfg, route.agentId),
 			deliver: async (payload) => {
 				await deps.deliverReplies({
@@ -53032,9 +53870,7 @@ function createSignalEventHandler(deps) {
 			replyOptions: {
 				...replyOptions,
 				disableBlockStreaming: typeof deps.blockStreaming === "boolean" ? !deps.blockStreaming : void 0,
-				onModelSelected: (ctx) => {
-					prefixContext.onModelSelected(ctx);
-				}
+				onModelSelected
 			}
 		});
 		markDispatchIdle();
@@ -54727,13 +55563,14 @@ async function dispatchPreparedSlackMessage(prepared) {
 			});
 		}
 	});
-	const prefixContext = createReplyPrefixContext({
+	const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
 		cfg,
-		agentId: route.agentId
+		agentId: route.agentId,
+		channel: "slack",
+		accountId: route.accountId
 	});
 	const { dispatcher, replyOptions, markDispatchIdle } = createReplyDispatcherWithTyping({
-		responsePrefix: prefixContext.responsePrefix,
-		responsePrefixContextProvider: prefixContext.responsePrefixContextProvider,
+		...prefixOptions,
 		humanDelay: resolveHumanDelayConfig(cfg, route.agentId),
 		deliver: async (payload) => {
 			const replyThreadTs = replyPlan.nextThreadTs();
@@ -54764,9 +55601,7 @@ async function dispatchPreparedSlackMessage(prepared) {
 			skillFilter: prepared.channelConfig?.skills,
 			hasRepliedRef,
 			disableBlockStreaming: typeof account.config.blockStreaming === "boolean" ? !account.config.blockStreaming : void 0,
-			onModelSelected: (ctx) => {
-				prefixContext.onModelSelected(ctx);
-			}
+			onModelSelected
 		}
 	});
 	markDispatchIdle();
@@ -55760,42 +56595,49 @@ function registerSlackMonitorSlashCommands(params) {
 			}) : void 0;
 			const systemPromptParts = [channelConfig?.systemPrompt?.trim() || null].filter((entry) => Boolean(entry));
 			const groupSystemPrompt = systemPromptParts.length > 0 ? systemPromptParts.join("\n\n") : void 0;
-			const { counts } = await dispatchReplyWithDispatcher({
-				ctx: finalizeInboundContext({
-					Body: prompt,
-					RawBody: prompt,
-					CommandBody: prompt,
-					CommandArgs: commandArgs,
-					From: isDirectMessage ? `slack:${command.user_id}` : isRoom ? `slack:channel:${command.channel_id}` : `slack:group:${command.channel_id}`,
-					To: `slash:${command.user_id}`,
+			const ctxPayload = finalizeInboundContext({
+				Body: prompt,
+				RawBody: prompt,
+				CommandBody: prompt,
+				CommandArgs: commandArgs,
+				From: isDirectMessage ? `slack:${command.user_id}` : isRoom ? `slack:channel:${command.channel_id}` : `slack:group:${command.channel_id}`,
+				To: `slash:${command.user_id}`,
+				ChatType: isDirectMessage ? "direct" : "channel",
+				ConversationLabel: resolveConversationLabel({
 					ChatType: isDirectMessage ? "direct" : "channel",
-					ConversationLabel: resolveConversationLabel({
-						ChatType: isDirectMessage ? "direct" : "channel",
-						SenderName: senderName,
-						GroupSubject: isRoomish ? roomLabel : void 0,
-						From: isDirectMessage ? `slack:${command.user_id}` : isRoom ? `slack:channel:${command.channel_id}` : `slack:group:${command.channel_id}`
-					}) ?? (isDirectMessage ? senderName : roomLabel),
-					GroupSubject: isRoomish ? roomLabel : void 0,
-					GroupSystemPrompt: isRoomish ? groupSystemPrompt : void 0,
-					UntrustedContext: untrustedChannelMetadata ? [untrustedChannelMetadata] : void 0,
 					SenderName: senderName,
-					SenderId: command.user_id,
-					Provider: "slack",
-					Surface: "slack",
-					WasMentioned: true,
-					MessageSid: command.trigger_id,
-					Timestamp: Date.now(),
-					SessionKey: `agent:${route.agentId}:${slashCommand.sessionPrefix}:${command.user_id}`.toLowerCase(),
-					CommandTargetSessionKey: route.sessionKey,
-					AccountId: route.accountId,
-					CommandSource: "native",
-					CommandAuthorized: commandAuthorized,
-					OriginatingChannel: "slack",
-					OriginatingTo: `user:${command.user_id}`
-				}),
+					GroupSubject: isRoomish ? roomLabel : void 0,
+					From: isDirectMessage ? `slack:${command.user_id}` : isRoom ? `slack:channel:${command.channel_id}` : `slack:group:${command.channel_id}`
+				}) ?? (isDirectMessage ? senderName : roomLabel),
+				GroupSubject: isRoomish ? roomLabel : void 0,
+				GroupSystemPrompt: isRoomish ? groupSystemPrompt : void 0,
+				UntrustedContext: untrustedChannelMetadata ? [untrustedChannelMetadata] : void 0,
+				SenderName: senderName,
+				SenderId: command.user_id,
+				Provider: "slack",
+				Surface: "slack",
+				WasMentioned: true,
+				MessageSid: command.trigger_id,
+				Timestamp: Date.now(),
+				SessionKey: `agent:${route.agentId}:${slashCommand.sessionPrefix}:${command.user_id}`.toLowerCase(),
+				CommandTargetSessionKey: route.sessionKey,
+				AccountId: route.accountId,
+				CommandSource: "native",
+				CommandAuthorized: commandAuthorized,
+				OriginatingChannel: "slack",
+				OriginatingTo: `user:${command.user_id}`
+			});
+			const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
+				cfg,
+				agentId: route.agentId,
+				channel: "slack",
+				accountId: route.accountId
+			});
+			const { counts } = await dispatchReplyWithDispatcher({
+				ctx: ctxPayload,
 				cfg,
 				dispatcherOptions: {
-					responsePrefix: resolveEffectiveMessagesConfig(cfg, route.agentId).responsePrefix,
+					...prefixOptions,
 					deliver: async (payload) => {
 						await deliverSlackSlashReplies({
 							replies: [payload],
@@ -55814,7 +56656,10 @@ function registerSlackMonitorSlashCommands(params) {
 						runtime.error?.(danger(`slack slash ${info.kind} reply failed: ${String(err)}`));
 					}
 				},
-				replyOptions: { skillFilter: channelConfig?.skills }
+				replyOptions: {
+					skillFilter: channelConfig?.skills,
+					onModelSelected
+				}
 			});
 			if (counts.final + counts.tool + counts.block === 0) await deliverSlackSlashReplies({
 				replies: [],
@@ -56899,6 +57744,11 @@ const registerTelegramHandlers = ({ cfg, accountId, bot, opts, runtime, mediaMax
 			messageThreadId: params.messageThreadId
 		});
 		const peerId = params.isGroup ? buildTelegramGroupPeerId(params.chatId, resolvedThreadId) : String(params.chatId);
+		const parentPeer = buildTelegramParentPeer({
+			isGroup: params.isGroup,
+			resolvedThreadId,
+			chatId: params.chatId
+		});
 		const route = resolveAgentRoute({
 			cfg,
 			channel: "telegram",
@@ -56906,7 +57756,8 @@ const registerTelegramHandlers = ({ cfg, accountId, bot, opts, runtime, mediaMax
 			peer: {
 				kind: params.isGroup ? "group" : "dm",
 				id: peerId
-			}
+			},
+			parentPeer
 		});
 		const baseSessionKey = route.sessionKey;
 		const dmThreadId = !params.isGroup ? params.messageThreadId : void 0;
@@ -57047,7 +57898,7 @@ const registerTelegramHandlers = ({ cfg, accountId, bot, opts, runtime, mediaMax
 					}
 				}
 				const defaultGroupPolicy = cfg.channels?.defaults?.groupPolicy;
-				const groupPolicy = telegramCfg.groupPolicy ?? defaultGroupPolicy ?? "open";
+				const groupPolicy = firstDefined(topicConfig?.groupPolicy, groupConfig?.groupPolicy, telegramCfg.groupPolicy, defaultGroupPolicy, "open");
 				if (groupPolicy === "disabled") {
 					logVerbose(`Blocked telegram group message (groupPolicy: disabled)`);
 					return;
@@ -57298,7 +58149,7 @@ const registerTelegramHandlers = ({ cfg, accountId, bot, opts, runtime, mediaMax
 					}
 				}
 				const defaultGroupPolicy = cfg.channels?.defaults?.groupPolicy;
-				const groupPolicy = telegramCfg.groupPolicy ?? defaultGroupPolicy ?? "open";
+				const groupPolicy = firstDefined(topicConfig?.groupPolicy, groupConfig?.groupPolicy, telegramCfg.groupPolicy, defaultGroupPolicy, "open");
 				if (groupPolicy === "disabled") {
 					logVerbose(`Blocked telegram group message (groupPolicy: disabled)`);
 					return;
@@ -57497,6 +58348,11 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 	const replyThreadId = threadSpec.id;
 	const { groupConfig, topicConfig } = resolveTelegramGroupConfig(chatId, resolvedThreadId);
 	const peerId = isGroup ? buildTelegramGroupPeerId(chatId, resolvedThreadId) : String(chatId);
+	const parentPeer = buildTelegramParentPeer({
+		isGroup,
+		resolvedThreadId,
+		chatId
+	});
 	const route = resolveAgentRoute({
 		cfg,
 		channel: "telegram",
@@ -57504,7 +58360,8 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 		peer: {
 			kind: isGroup ? "group" : "dm",
 			id: peerId
-		}
+		},
+		parentPeer
 	});
 	const baseSessionKey = route.sessionKey;
 	const dmThreadId = threadSpec.scope === "dm" ? threadSpec.id : void 0;
@@ -57850,7 +58707,8 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 			sessionKey: route.mainSessionKey,
 			channel: "telegram",
 			to: String(chatId),
-			accountId: route.accountId
+			accountId: route.accountId,
+			threadId: dmThreadId != null ? String(dmThreadId) : void 0
 		} : void 0,
 		onRecordError: (err) => {
 			logVerbose(`telegram: failed updating session meta: ${String(err)}`);
@@ -58291,9 +59149,11 @@ const dispatchTelegramMessage = async ({ context, bot, cfg, runtime, replyToMode
 		await draftStream.flush();
 	};
 	const disableBlockStreaming = Boolean(draftStream) || (typeof telegramCfg.blockStreaming === "boolean" ? !telegramCfg.blockStreaming : void 0);
-	const prefixContext = createReplyPrefixContext({
+	const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
 		cfg,
-		agentId: route.agentId
+		agentId: route.agentId,
+		channel: "telegram",
+		accountId: route.accountId
 	});
 	const tableMode = resolveMarkdownTableMode({
 		cfg,
@@ -58302,7 +59162,7 @@ const dispatchTelegramMessage = async ({ context, bot, cfg, runtime, replyToMode
 	});
 	const chunkMode = resolveChunkMode(cfg, "telegram", route.accountId);
 	const sticker = ctxPayload.Sticker;
-	if (sticker?.fileUniqueId && ctxPayload.MediaPath) {
+	if (sticker?.fileId && sticker.fileUniqueId && ctxPayload.MediaPath) {
 		const agentDir = resolveAgentDir(cfg, route.agentId);
 		const stickerSupportsVision = await resolveStickerVisionSupport(cfg, route.agentId);
 		let description = sticker.cachedDescription ?? null;
@@ -58326,16 +59186,18 @@ const dispatchTelegramMessage = async ({ context, bot, cfg, runtime, replyToMode
 				ctxPayload.MediaUrls = void 0;
 				ctxPayload.MediaTypes = void 0;
 			}
-			cacheSticker({
-				fileId: sticker.fileId,
-				fileUniqueId: sticker.fileUniqueId,
-				emoji: sticker.emoji,
-				setName: sticker.setName,
-				description,
-				cachedAt: (/* @__PURE__ */ new Date()).toISOString(),
-				receivedFrom: ctxPayload.From
-			});
-			logVerbose(`telegram: cached sticker description for ${sticker.fileUniqueId}`);
+			if (sticker.fileId) {
+				cacheSticker({
+					fileId: sticker.fileId,
+					fileUniqueId: sticker.fileUniqueId,
+					emoji: sticker.emoji,
+					setName: sticker.setName,
+					description,
+					cachedAt: (/* @__PURE__ */ new Date()).toISOString(),
+					receivedFrom: ctxPayload.From
+				});
+				logVerbose(`telegram: cached sticker description for ${sticker.fileUniqueId}`);
+			} else logVerbose(`telegram: skipped sticker cache (missing fileId)`);
 		}
 	}
 	const replyQuoteText = ctxPayload.ReplyToIsQuote && ctxPayload.ReplyToBody ? ctxPayload.ReplyToBody.trim() || void 0 : void 0;
@@ -58347,8 +59209,7 @@ const dispatchTelegramMessage = async ({ context, bot, cfg, runtime, replyToMode
 		ctx: ctxPayload,
 		cfg,
 		dispatcherOptions: {
-			responsePrefix: prefixContext.responsePrefix,
-			responsePrefixContextProvider: prefixContext.responsePrefixContextProvider,
+			...prefixOptions,
 			deliver: async (payload, info) => {
 				if (info.kind === "final") {
 					await flushDraft();
@@ -58392,9 +59253,7 @@ const dispatchTelegramMessage = async ({ context, bot, cfg, runtime, replyToMode
 			skillFilter,
 			disableBlockStreaming,
 			onPartialReply: draftStream ? (payload) => updateDraftFromPartial(payload.text) : void 0,
-			onModelSelected: (ctx) => {
-				prefixContext.onModelSelected(ctx);
-			}
+			onModelSelected
 		}
 	});
 	draftStream?.stop();
@@ -58729,6 +59588,11 @@ const registerTelegramNativeCommands = ({ bot, cfg, runtime, accountId, telegram
 					});
 					return;
 				}
+				const parentPeer = buildTelegramParentPeer({
+					isGroup,
+					resolvedThreadId,
+					chatId
+				});
 				const route = resolveAgentRoute({
 					cfg,
 					channel: "telegram",
@@ -58736,7 +59600,8 @@ const registerTelegramNativeCommands = ({ bot, cfg, runtime, accountId, telegram
 					peer: {
 						kind: isGroup ? "group" : "dm",
 						id: isGroup ? buildTelegramGroupPeerId(chatId, resolvedThreadId) : String(chatId)
-					}
+					},
+					parentPeer
 				});
 				const baseSessionKey = route.sessionKey;
 				const dmThreadId = threadSpec.scope === "dm" ? threadSpec.id : void 0;
@@ -58787,11 +59652,17 @@ const registerTelegramNativeCommands = ({ bot, cfg, runtime, accountId, telegram
 					delivered: false,
 					skippedNonSilent: 0
 				};
+				const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
+					cfg,
+					agentId: route.agentId,
+					channel: "telegram",
+					accountId: route.accountId
+				});
 				await dispatchReplyWithBufferedBlockDispatcher({
 					ctx: ctxPayload,
 					cfg,
 					dispatcherOptions: {
-						responsePrefix: resolveEffectiveMessagesConfig(cfg, route.agentId).responsePrefix,
+						...prefixOptions,
 						deliver: async (payload, _info) => {
 							if ((await deliverReplies({
 								replies: [payload],
@@ -58816,7 +59687,8 @@ const registerTelegramNativeCommands = ({ bot, cfg, runtime, accountId, telegram
 					},
 					replyOptions: {
 						skillFilter,
-						disableBlockStreaming
+						disableBlockStreaming,
+						onModelSelected
 					}
 				});
 				if (!deliveryState.delivered && deliveryState.skippedNonSilent > 0) await deliverReplies({
@@ -58921,7 +59793,7 @@ function getTelegramSequentialKey(ctx) {
 	}
 	const isGroup = msg?.chat?.type === "group" || msg?.chat?.type === "supergroup";
 	const messageThreadId = msg?.message_thread_id;
-	const isForum = (msg?.chat)?.is_forum;
+	const isForum = msg?.chat?.is_forum;
 	const threadId = isGroup ? resolveTelegramForumThreadId({
 		isForum,
 		messageThreadId
@@ -58956,10 +59828,6 @@ function createTelegramBot(opts) {
 	bot.catch((err) => {
 		runtime.error?.(danger(`telegram bot error: ${formatUncaughtError(err)}`));
 	});
-	bot.catch((err) => {
-		const message = err instanceof Error ? err.message : String(err);
-		runtime.error?.(danger(`telegram bot error: ${message}`));
-	});
 	const recentUpdates = createTelegramUpdateDedupe();
 	let lastUpdateId = typeof opts.updateOffset?.lastUpdateId === "number" ? opts.updateOffset.lastUpdateId : null;
 	const recordUpdateId = (ctx) => {
@@ -58989,9 +59857,8 @@ function createTelegramBot(opts) {
 			if (typeof value === "string" && value.length > MAX_RAW_UPDATE_STRING) return `${value.slice(0, MAX_RAW_UPDATE_STRING)}...`;
 			if (Array.isArray(value) && value.length > MAX_RAW_UPDATE_ARRAY) return [...value.slice(0, MAX_RAW_UPDATE_ARRAY), `...(${value.length - MAX_RAW_UPDATE_ARRAY} more)`];
 			if (value && typeof value === "object") {
-				const obj = value;
-				if (seen.has(obj)) return "[Circular]";
-				seen.add(obj);
+				if (seen.has(value)) return "[Circular]";
+				seen.add(value);
 			}
 			return value;
 		});
@@ -59035,9 +59902,8 @@ function createTelegramBot(opts) {
 	const streamMode = resolveTelegramStreamMode(telegramCfg);
 	let botHasTopicsEnabled;
 	const resolveBotTopicsEnabled = async (ctx) => {
-		const fromCtx = ctx?.me;
-		if (typeof fromCtx?.has_topics_enabled === "boolean") {
-			botHasTopicsEnabled = fromCtx.has_topics_enabled;
+		if (typeof ctx?.me?.has_topics_enabled === "boolean") {
+			botHasTopicsEnabled = ctx.me.has_topics_enabled;
 			return botHasTopicsEnabled;
 		}
 		if (typeof botHasTopicsEnabled === "boolean") return botHasTopicsEnabled;
@@ -59159,27 +60025,28 @@ function createTelegramBot(opts) {
 			else if (!senderName && senderUsername) senderLabel = senderUsername;
 			if (!senderLabel && user?.id) senderLabel = `id:${user.id}`;
 			senderLabel = senderLabel || "unknown";
-			const messageThreadId = reaction.message_thread_id;
-			const resolvedThreadId = resolveTelegramForumThreadId({
-				isForum: reaction.chat.is_forum === true,
-				messageThreadId
-			});
 			const isGroup = reaction.chat.type === "group" || reaction.chat.type === "supergroup";
+			const isForum = reaction.chat.is_forum === true;
+			const resolvedThreadId = isForum ? resolveTelegramForumThreadId({
+				isForum,
+				messageThreadId: void 0
+			}) : void 0;
 			const peerId = isGroup ? buildTelegramGroupPeerId(chatId, resolvedThreadId) : String(chatId);
-			const baseSessionKey = resolveAgentRoute({
+			const parentPeer = buildTelegramParentPeer({
+				isGroup,
+				resolvedThreadId,
+				chatId
+			});
+			const sessionKey = resolveAgentRoute({
 				cfg,
 				channel: "telegram",
 				accountId: account.accountId,
 				peer: {
 					kind: isGroup ? "group" : "dm",
 					id: peerId
-				}
+				},
+				parentPeer
 			}).sessionKey;
-			const dmThreadId = !isGroup ? messageThreadId : void 0;
-			const sessionKey = (dmThreadId != null ? resolveThreadSessionKeys({
-				baseSessionKey,
-				threadId: String(dmThreadId)
-			}) : null)?.sessionKey ?? baseSessionKey;
 			for (const r of addedReactions) {
 				const emoji = r.emoji;
 				const text = `Telegram reaction added: ${emoji} by ${senderLabel} on msg ${messageId}`;
@@ -61528,7 +62395,7 @@ function createOpenClawCodingTools(options) {
 		cwd: sandboxRoot ?? workspaceRoot,
 		sandboxRoot: sandboxRoot && allowWorkspaceWrites ? sandboxRoot : void 0
 	});
-	const tools = [
+	const toolsByAuthorization = applyOwnerOnlyToolPolicy([
 		...base,
 		...sandboxRoot ? allowWorkspaceWrites ? [createSandboxedEditTool(sandboxRoot), createSandboxedWriteTool(sandboxRoot)] : [] : [],
 		...applyPatchTool ? [applyPatchTool] : [],
@@ -61571,10 +62438,10 @@ function createOpenClawCodingTools(options) {
 			disableMessageTool: options?.disableMessageTool,
 			requesterAgentIdOverride: agentId
 		})
-	];
-	const coreToolNames = new Set(tools.filter((tool) => !getPluginToolMeta(tool)).map((tool) => normalizeToolName(tool.name)).filter(Boolean));
+	], options?.senderIsOwner === true);
+	const coreToolNames = new Set(toolsByAuthorization.filter((tool) => !getPluginToolMeta(tool)).map((tool) => normalizeToolName(tool.name)).filter(Boolean));
 	const pluginGroups = buildPluginToolGroups({
-		tools,
+		tools: toolsByAuthorization,
 		toolMeta: (tool) => getPluginToolMeta(tool)
 	});
 	const resolvePolicy = (policy, label) => {
@@ -61591,7 +62458,7 @@ function createOpenClawCodingTools(options) {
 	const groupPolicyExpanded = resolvePolicy(groupPolicy, "group tools.allow");
 	const sandboxPolicyExpanded = expandPolicyWithPluginGroups(sandbox?.tools, pluginGroups);
 	const subagentPolicyExpanded = expandPolicyWithPluginGroups(subagentPolicy, pluginGroups);
-	const toolsFiltered = profilePolicyExpanded ? filterToolsByPolicy(tools, profilePolicyExpanded) : tools;
+	const toolsFiltered = profilePolicyExpanded ? filterToolsByPolicy(toolsByAuthorization, profilePolicyExpanded) : toolsByAuthorization;
 	const providerProfileFiltered = providerProfileExpanded ? filterToolsByPolicy(toolsFiltered, providerProfileExpanded) : toolsFiltered;
 	const globalFiltered = globalPolicyExpanded ? filterToolsByPolicy(providerProfileFiltered, globalPolicyExpanded) : providerProfileFiltered;
 	const globalProviderFiltered = globalProviderExpanded ? filterToolsByPolicy(globalFiltered, globalProviderExpanded) : globalFiltered;
@@ -61832,7 +62699,13 @@ function repairToolUseResultPairing(messages) {
 			}
 			continue;
 		}
-		const toolCalls = extractToolCallsFromAssistant(msg);
+		const assistant = msg;
+		const stopReason = assistant.stopReason;
+		if (stopReason === "error" || stopReason === "aborted") {
+			out.push(msg);
+			continue;
+		}
+		const toolCalls = extractToolCallsFromAssistant(assistant);
 		if (toolCalls.length === 0) {
 			out.push(msg);
 			continue;
@@ -63041,7 +63914,7 @@ async function compactEmbeddedPiSessionDirect(params) {
 		if (!apiKeyInfo.apiKey) {
 			if (apiKeyInfo.mode !== "aws-sdk") throw new Error(`No API key resolved for provider "${model.provider}" (auth mode: ${apiKeyInfo.mode}).`);
 		} else if (model.provider === "github-copilot") {
-			const { resolveCopilotApiToken } = await import("./github-copilot-token-B0CUgVkW.js");
+			const { resolveCopilotApiToken } = await import("./github-copilot-token-B3SA95yo.js").then((n) => n.n);
 			const copilotToken = await resolveCopilotApiToken({ githubToken: apiKeyInfo.apiKey });
 			authStorage.setRuntimeApiKey(model.provider, copilotToken.token);
 		} else authStorage.setRuntimeApiKey(model.provider, apiKeyInfo.apiKey);
@@ -63110,6 +63983,7 @@ async function compactEmbeddedPiSessionDirect(params) {
 				groupChannel: params.groupChannel,
 				groupSpace: params.groupSpace,
 				spawnedBy: params.spawnedBy,
+				senderIsOwner: params.senderIsOwner,
 				agentDir,
 				workspaceDir: effectiveWorkspace,
 				config: params.config,
@@ -64162,6 +65036,7 @@ function handleMessageUpdate(ctx, evt) {
 					mediaUrls: hasMedia ? mediaUrls : void 0
 				}
 			});
+			ctx.state.emittedAssistantUpdate = true;
 			if (ctx.params.onPartialReply && ctx.state.shouldEmitPartialReplies) ctx.params.onPartialReply({
 				text: cleanedText,
 				mediaUrls: hasMedia ? mediaUrls : void 0
@@ -64205,6 +65080,41 @@ function handleMessageEnd(ctx, evt) {
 	});
 	const rawThinking = ctx.state.includeReasoning || ctx.state.streamReasoning ? extractAssistantThinking(assistantMessage) || extractThinkingFromTaggedText(rawText) : "";
 	const formattedReasoning = rawThinking ? formatReasoningMessage(rawThinking) : "";
+	const trimmedText = text.trim();
+	const parsedText = trimmedText ? parseReplyDirectives(stripTrailingDirective(trimmedText)) : null;
+	let cleanedText = parsedText?.text ?? "";
+	let mediaUrls = parsedText?.mediaUrls;
+	let hasMedia = Boolean(mediaUrls && mediaUrls.length > 0);
+	if (!cleanedText && !hasMedia) {
+		const rawTrimmed = rawText.trim();
+		const rawCandidate = rawTrimmed.replace(/<\s*\/?\s*final\s*>/gi, "").trim() || rawTrimmed;
+		if (rawCandidate) {
+			const parsedFallback = parseReplyDirectives(stripTrailingDirective(rawCandidate));
+			cleanedText = parsedFallback.text ?? rawCandidate;
+			mediaUrls = parsedFallback.mediaUrls;
+			hasMedia = Boolean(mediaUrls && mediaUrls.length > 0);
+		}
+	}
+	if (!ctx.state.emittedAssistantUpdate && (cleanedText || hasMedia)) {
+		emitAgentEvent({
+			runId: ctx.params.runId,
+			stream: "assistant",
+			data: {
+				text: cleanedText,
+				delta: cleanedText,
+				mediaUrls: hasMedia ? mediaUrls : void 0
+			}
+		});
+		ctx.params.onAgentEvent?.({
+			stream: "assistant",
+			data: {
+				text: cleanedText,
+				delta: cleanedText,
+				mediaUrls: hasMedia ? mediaUrls : void 0
+			}
+		});
+		ctx.state.emittedAssistantUpdate = true;
+	}
 	const addedDuringMessage = ctx.state.assistantTexts.length > ctx.state.assistantTextBaseline;
 	const chunkerHasBuffered = ctx.blockChunker?.hasBuffered() ?? false;
 	ctx.finalizeAssistantTexts({
@@ -64657,6 +65567,7 @@ function subscribeEmbeddedPiSession(params) {
 		},
 		lastStreamedAssistant: void 0,
 		lastStreamedAssistantCleaned: void 0,
+		emittedAssistantUpdate: false,
 		lastStreamedReasoning: void 0,
 		lastBlockReplyText: void 0,
 		assistantMessageIndex: 0,
@@ -64701,6 +65612,7 @@ function subscribeEmbeddedPiSession(params) {
 		state.partialBlockState.inlineCode = createInlineCodeState();
 		state.lastStreamedAssistant = void 0;
 		state.lastStreamedAssistantCleaned = void 0;
+		state.emittedAssistantUpdate = false;
 		state.lastBlockReplyText = void 0;
 		state.lastStreamedReasoning = void 0;
 		state.lastReasoningSent = void 0;
@@ -65517,6 +66429,7 @@ async function runEmbeddedAttempt(params) {
 				senderName: params.senderName,
 				senderUsername: params.senderUsername,
 				senderE164: params.senderE164,
+				senderIsOwner: params.senderIsOwner,
 				sessionKey: params.sessionKey ?? params.sessionId,
 				agentDir,
 				workspaceDir: effectiveWorkspace,
@@ -66224,7 +67137,7 @@ async function runEmbeddedPiAgent(params) {
 				return;
 			}
 			if (model.provider === "github-copilot") {
-				const { resolveCopilotApiToken } = await import("./github-copilot-token-B0CUgVkW.js");
+				const { resolveCopilotApiToken } = await import("./github-copilot-token-B3SA95yo.js").then((n) => n.n);
 				const copilotToken = await resolveCopilotApiToken({ githubToken: apiKeyInfo.apiKey });
 				authStorage.setRuntimeApiKey(model.provider, copilotToken.token);
 			} else authStorage.setRuntimeApiKey(model.provider, apiKeyInfo.apiKey);
@@ -66274,7 +67187,8 @@ async function runEmbeddedPiAgent(params) {
 				error: err
 			});
 		}
-		let overflowCompactionAttempted = false;
+		const MAX_OVERFLOW_COMPACTION_ATTEMPTS = 3;
+		let overflowCompactionAttempts = 0;
 		try {
 			while (true) {
 				attemptedThinking.add(thinkLevel);
@@ -66292,6 +67206,7 @@ async function runEmbeddedPiAgent(params) {
 					groupChannel: params.groupChannel,
 					groupSpace: params.groupSpace,
 					spawnedBy: params.spawnedBy,
+					senderIsOwner: params.senderIsOwner,
 					currentChannelId: params.currentChannelId,
 					currentThreadTs: params.currentThreadTs,
 					replyToMode: params.replyToMode,
@@ -66338,10 +67253,12 @@ async function runEmbeddedPiAgent(params) {
 				if (promptError && !aborted) {
 					const errorText = describeUnknownError(promptError);
 					if (isContextOverflowError(errorText)) {
+						const msgCount = attempt.messagesSnapshot?.length ?? 0;
+						log$2.warn(`[context-overflow-diag] sessionKey=${params.sessionKey ?? params.sessionId} provider=${provider}/${modelId} messages=${msgCount} sessionFile=${params.sessionFile} compactionAttempts=${overflowCompactionAttempts} error=${errorText.slice(0, 200)}`);
 						const isCompactionFailure = isCompactionFailureError(errorText);
-						if (!isCompactionFailure && !overflowCompactionAttempted) {
-							log$2.warn(`context overflow detected; attempting auto-compaction for ${provider}/${modelId}`);
-							overflowCompactionAttempted = true;
+						if (!isCompactionFailure && overflowCompactionAttempts < MAX_OVERFLOW_COMPACTION_ATTEMPTS) {
+							overflowCompactionAttempts++;
+							log$2.warn(`context overflow detected (attempt ${overflowCompactionAttempts}/${MAX_OVERFLOW_COMPACTION_ATTEMPTS}); attempting auto-compaction for ${provider}/${modelId}`);
 							const compactResult = await compactEmbeddedPiSessionDirect({
 								sessionId: params.sessionId,
 								sessionKey: params.sessionKey,
@@ -66354,6 +67271,7 @@ async function runEmbeddedPiAgent(params) {
 								agentDir,
 								config: params.config,
 								skillsSnapshot: params.skillsSnapshot,
+								senderIsOwner: params.senderIsOwner,
 								provider,
 								model: modelId,
 								thinkLevel,
@@ -66470,6 +67388,7 @@ async function runEmbeddedPiAgent(params) {
 				}
 				const authFailure = isAuthAssistantError(lastAssistant);
 				const rateLimitFailure = isRateLimitAssistantError(lastAssistant);
+				const billingFailure = isBillingAssistantError(lastAssistant);
 				const failoverFailure = isFailoverAssistantError(lastAssistant);
 				const assistantFailoverReason = classifyFailoverReason(lastAssistant?.errorMessage ?? "");
 				const cloudCodeAssistFormatError = attempt.cloudCodeAssistFormatError;
@@ -66499,7 +67418,7 @@ async function runEmbeddedPiAgent(params) {
 						const message = (lastAssistant ? formatAssistantErrorText(lastAssistant, {
 							cfg: params.config,
 							sessionKey: params.sessionKey ?? params.sessionId
-						}) : void 0) || lastAssistant?.errorMessage?.trim() || (timedOut ? "LLM request timed out." : rateLimitFailure ? "LLM request rate limited." : authFailure ? "LLM request unauthorized." : "LLM request failed.");
+						}) : void 0) || lastAssistant?.errorMessage?.trim() || (timedOut ? "LLM request timed out." : rateLimitFailure ? "LLM request rate limited." : billingFailure ? BILLING_ERROR_USER_MESSAGE : authFailure ? "LLM request unauthorized." : "LLM request failed.");
 						const status = resolveFailoverStatus(assistantFailoverReason ?? "unknown") ?? (isTimeoutErrorMessage(message) ? 408 : void 0);
 						throw new FailoverError(message, {
 							reason: assistantFailoverReason ?? "unknown",