@gguf/claw 2026.2.4 → 2026.2.5

package/dist/{reply-CoztdrN_.js → reply-B8pOiUNN.js}

@@ -1,55 +1,57 @@
-import { A as buildBootstrapContextFiles, B as normalizeThinkLevel, C as isLikelyContextOverflowError, D as parseImageDimensionError, E as isTimeoutErrorMessage, F as formatXHighModelHint, H as normalizeVerboseLevel, M as resolveBootstrapMaxChars, N as sanitizeGoogleTurnOrdering, O as parseImageSizeError, P as formatThinkingLevels, R as normalizeElevatedLevel, S as isFailoverErrorMessage, T as isRawApiErrorPayload, U as resolveResponseUsageMode, V as normalizeUsageDisplay, W as supportsXHighThinking, _ as isAuthAssistantError, a as isMessagingToolDuplicateNormalized, b as isContextOverflowError, c as sanitizeImageBlocks, d as isAntigravityClaude, f as isGoogleModelApi, g as getApiErrorPayloadFingerprint, h as formatRawAssistantErrorForUi, j as ensureSessionHeader, k as sanitizeUserFacingText, l as sanitizeToolResultImages, m as formatAssistantErrorText, n as validateGeminiTurns, o as normalizeTextForComparison, p as classifyFailoverReason, r as pickFallbackThinkingLevel, s as sanitizeSessionMessagesImages, t as validateAnthropicTurns, u as downgradeOpenAIReasoningBlocks, v as isCloudCodeAssistFormatError, w as isRateLimitAssistantError, x as isFailoverAssistantError, y as isCompactionFailureError, z as normalizeReasoningLevel } from "./pi-embedded-helpers-CC00lEFI.js";
-import { g as resolveStateDir, r as STATE_DIR, t as CONFIG_PATH } from "./paths-BDd7_JUB.js";
-import { A as buildAgentPeerSessionKey, B as isAcpSessionKey, C as loadWorkspaceBootstrapFiles, D as DEFAULT_AGENT_ID, E as DEFAULT_ACCOUNT_ID$1, F as resolveAgentIdFromSessionKey, H as parseAgentSessionKey, I as resolveThreadSessionKeys, L as sanitizeAgentId, M as normalizeAccountId$3, N as normalizeAgentId, O as DEFAULT_MAIN_KEY, P as normalizeMainKey, S as filterBootstrapFilesForSession, U as resolveThreadParentSessionKey, V as isSubagentSessionKey, c as resolveDefaultAgentId, f as DEFAULT_AGENT_WORKSPACE_DIR, i as resolveAgentModelFallbacksOverride, j as buildGroupHistoryKey, k as buildAgentMainSessionKey, l as resolveSessionAgentId, n as resolveAgentConfig, o as resolveAgentSkillsFilter, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, u as resolveSessionAgentIds, x as ensureAgentWorkspace } from "./agent-scope-CrgUOY3f.js";
-import { A as logVerbose, D as info, E as danger, F as warn, I as colorize, L as isRich, M as setVerbose, N as shouldLogVerbose, P as success, R as theme, T as setActivePluginRegistry, U as normalizeLogLevel, b as normalizeAnyChannelId, c as defaultRuntime, m as CHAT_CHANNEL_ORDER, t as createSubsystemLogger, w as requireActivePluginRegistry, x as normalizeChannelId, z as getChildLogger } from "./subsystem-46MXi6Ip.js";
-import { _ as shortenHomePath, b as toWhatsappJid, d as normalizeE164, g as shortenHomeInString, h as resolveUserPath, l as isSelfChatMode, m as resolveJidToE164, r as clampInt, t as CONFIG_DIR, u as jidToE164, v as sleep, x as truncateUtf16Safe, y as sliceUtf16Safe } from "./utils-Dg0Xbl6w.js";
-import { a as logDebug, c as logWarn, i as spawnWithFallback, n as runExec, o as logError, r as formatSpawnError, s as logInfo, t as runCommandWithTimeout } from "./exec-CTo4hK94.js";
-import { t as resolveOpenClawPackageRoot } from "./openclaw-root-CJKDUIBP.js";
-import { A as getCustomProviderApiKey, F as resolveModelAuthMode, G as resolveAuthProfileOrder, J as markAuthProfileFailure, L as getShellPathFromLoginShell, M as resolveApiKeyForProvider, P as resolveEnvApiKey, Y as markAuthProfileUsed, Z as resolveApiKeyForProfile, a as modelKey, at as listProfilesForProvider, bt as DEFAULT_MODEL, f as resolveModelRefFromString, g as normalizeGoogleModelId, gt as resolveAuthProfileDisplayLabel, ht as resolveOpenClawAgentDir, i as isCliProvider, j as requireApiKey, k as getApiKeyForModel, l as resolveConfiguredModelRef, lt as ensureAuthProfileStore, mt as resolveAuthStorePathForDisplay, n as buildModelAliasIndex, o as normalizeProviderId, ot as markAuthProfileGood, p as resolveThinkingDefault, q as isProfileInCooldown, s as parseModelRef, t as buildAllowedModelSet, u as resolveDefaultModelForAgent, xt as DEFAULT_PROVIDER, yt as DEFAULT_CONTEXT_TOKENS, z as resolveShellEnvFallbackTimeoutMs } from "./model-selection-Cp1maz7B.js";
-import { a as saveJsonFile, i as loadJsonFile } from "./github-copilot-token-VZsS4013.js";
-import { t as formatCliCommand } from "./command-format-BQK1OIvH.js";
-import { t as parseBooleanValue$1 } from "./boolean-CE7i9tBR.js";
-import { t as isTruthyEnvValue } from "./env-DOcCob95.js";
-import { A as resolveAgentMaxConcurrent, C as parseConfigPath, M as VERSION, S as getConfigValueAtPath, T as unsetConfigValueAtPath, a as readConfigFileSnapshot, b as setConfigOverride, d as TELEGRAM_COMMAND_NAME_PATTERN, f as normalizeTelegramCommandName, g as validateJsonSchemaValue, h as parseDurationMs, l as validateConfigObjectWithPlugins, m as isSafeExecutableValue, o as resolveConfigSnapshotHash, p as resolveTelegramCustomCommands, r as loadConfig, s as writeConfigFile, v as getConfigOverrides, w as setConfigValueAtPath, x as unsetConfigOverride, y as resetConfigOverrides } from "./config-qgIz1lbh.js";
-import { c as resolveEnableState, l as resolveMemorySlotDecision, n as discoverOpenClawPlugins, s as normalizePluginsConfig, t as loadPluginManifestRegistry } from "./manifest-registry-BFpLJJDB.js";
-import { _ as listEnabledDiscordAccounts, a as normalizeWhatsAppTarget, b as normalizeChatType, c as resolveTelegramAccount, d as listBindings, g as resolveSlackBotToken, h as resolveSlackAppToken, i as isWhatsAppGroupJid, l as resolveTelegramToken, n as listChannelPlugins, o as listEnabledTelegramAccounts, p as resolveSlackAccount, r as normalizeChannelId$1, s as listTelegramAccountIds, t as getChannelPlugin, v as resolveDiscordAccount, y as normalizeDiscordToken } from "./plugins-D1CxUobm.js";
-import { A as resolveSessionResetPolicy, C as normalizeDeliveryContext, D as resolveSessionKey$1, H as listChannelDocks, J as resolveIMessageAccount, K as listEnabledSignalAccounts, L as resolveMainSessionKey, M as resolveThreadFlag, N as DEFAULT_RESET_TRIGGERS, O as evaluateSessionFreshness, P as canonicalizeMainSessionAlias, S as mergeDeliveryContext, U as resolveChannelGroupPolicy, V as getChannelDock, W as resolveChannelGroupRequireMention, X as resolveGroupSessionKey, Y as buildGroupDisplayName, Z as resolveSandboxConfigForAgent, _ as updateSessionStoreEntry, a as ensureSandboxWorkspaceForSession, at as resolveToolProfilePolicy, b as deliveryContextFromSession, c as resolveSandboxRuntimeStatus, d as loadSessionStore, et as buildPluginToolGroups, f as readSessionUpdatedAt, g as updateSessionStore, h as updateLastRoute, it as normalizeToolName, j as resolveSessionResetType, k as resolveChannelResetConfig, l as appendAssistantMessageToSessionTranscript, nt as expandPolicyWithPluginGroups, o as resolveSandboxContext, ot as stripPluginOnlyAllowlist, p as recordSessionMetaFromInbound, q as resolveSignalAccount, tt as collectExplicitAllowlist, ut as resolveConversationLabel, v as isCacheEnabled, w as normalizeSessionDeliveryFields, x as deliveryContextKey, y as resolveCacheTtlMs$1, z as deriveSessionMetaPatch } from "./sandbox-BXUfp_qv.js";
-import { _ as minimaxUnderstandImage, a as resolveProviderVisionModelFromConfig, c as extractThinkingFromTaggedStream, d as inferToolMetaFromArgs, f as promoteThinkingTagsToBlocks, g as ensureOpenClawModelsJson, h as stripThinkingTagsFromText, i as decodeDataUrl, l as extractThinkingFromTaggedText, m as stripMinimaxToolCallXml, n as coerceImageAssistantText, o as extractAssistantText$1, p as stripDowngradedToolCallText, r as coerceImageModelConfig, s as extractAssistantThinking, t as describeImageWithModel, u as formatReasoningMessage } from "./image-ClOB6QDJ.js";
-import { i as discoverModels, r as discoverAuthStorage } from "./pi-model-discovery-DjGamP_B.js";
-import { E as formatUncaughtError, T as formatErrorMessage, k as DEFAULT_AI_SNAPSHOT_MAX_CHARS, w as extractErrorCode } from "./chrome-D2LUApAY.js";
-import { a as resolveSkillsPromptForRun, i as loadWorkspaceSkillEntries, l as applySkillEnvOverrides, n as buildWorkspaceSkillCommandSpecs, r as buildWorkspaceSkillSnapshot, s as resolvePluginSkillDirs, u as applySkillEnvOverridesFromSnapshot } from "./skills-C4b1FA1e.js";
-import { c as saveMediaBuffer, d as getFileExtension, f as imageMimeFromFormat, g as MAX_IMAGE_BYTES, h as kindFromMime, l as detectMime, m as isGifMedia, o as resizeToJpeg, p as isAudioFileName, r as getImageMetadata, s as getMediaDir, u as extensionForMime, v as mediaKindFromMime, y as SsrFBlockedError } from "./routes-Ds-tIZFJ.js";
-import { i as resolveBrowserConfig } from "./server-context-D2cv-pIA.js";
-import { a as isInternalMessageChannel, c as listDeliverableMessageChannels, d as resolveMessageChannel, f as GATEWAY_CLIENT_IDS, l as normalizeMessageChannel, m as GATEWAY_CLIENT_NAMES, n as isDeliverableMessageChannel, o as isMarkdownCapableMessageChannel, p as GATEWAY_CLIENT_MODES, t as INTERNAL_MESSAGE_CHANNEL, u as resolveGatewayMessageChannel } from "./message-channel-CQGWXVL4.js";
-import { a as logoutWeb, d as webAuthExists, i as logWebSelfId, n as resolveWhatsAppAccount, r as getWebAuthAgeMs, s as readWebSelfId } from "./accounts-BlHoTziG.js";
-import { a as resolveSessionTranscriptsDirForAgent, n as resolveSessionFilePath, o as resolveStorePath, r as resolveSessionTranscriptPath } from "./paths-50eo6DV6.js";
-import { t as emitSessionTranscriptUpdate } from "./transcript-events-fUhPZcB5.js";
-import { n as redactSensitiveText } from "./redact-BKh-zp-c.js";
-import { n as resolveToolDisplay } from "./tool-display-rIUh61kT.js";
-import { A as loadWebMedia, B as findFenceSpanAt, C as signalRpcRequest, D as chunkMarkdownIR, E as wrapFetchWithAbortSignal, F as chunkMarkdownTextWithMode, G as isSilentReplyText, H as parseFenceSpans, I as chunkText, J as fetchWithSsrFGuard, K as MediaFetchError, L as chunkTextWithMode, M as resolveMarkdownTableMode, N as chunkByNewline, O as markdownToIR, P as chunkMarkdownText, R as resolveChunkMode, S as signalCheck, T as resolveFetch, U as HEARTBEAT_TOKEN, V as isSafeFenceBreak, W as SILENT_REPLY_TOKEN, _ as splitMediaFromOutput, a as normalizeReplyPayloadsForDelivery, b as sendReadReceiptSignal, c as filterMessagingToolDuplicates, d as createReplyToModeFilterForChannel, f as resolveReplyToMode, g as parseReplyDirectives, h as normalizeTargetForProvider, j as loadWebMediaRaw, k as markdownToIRWithMeta, l as isRenderablePayload, m as normalizeChannelTargetInput, o as applyReplyTagsToPayload, p as buildTargetResolverSignature, q as fetchRemoteMedia, s as applyReplyThreading, t as deliverOutboundPayloads, u as shouldSuppressMessagingToolReplies, v as parseInlineDirectives$1, w as streamSignalEvents, x as sendTypingSignal, y as sendMessageSignal, z as resolveTextChunkLimit } from "./deliver-Bsvrattg.js";
-import { i as getMachineDisplayName, n as isWSL, t as createBrowserRouteDispatcher } from "./dispatcher-BNB5aCZ6.js";
-import { i as resolveMemorySearchConfig, n as resolveRetryConfig, r as retryAsync } from "./manager-BArueSTR.js";
-import { c as listMemoryFiles, l as normalizeExtraMemoryPaths } from "./sqlite-Dz6S6ijV.js";
-import { C as parseCommandArgs, D as shouldHandleTextCommands, E as serializeCommandArgs, S as normalizeCommandBody, T as resolveCommandArgMenu, _ as findCommandByNativeName, b as listNativeCommandSpecs, f as estimateUsageCost, g as buildCommandTextFromArgs, h as resolveModelCostConfig, m as formatUsd$1, o as extractTextFromMessage, p as formatTokenCount$2, t as buildChannelSummary, v as listChatCommands, w as resolveCommandArgChoices, x as listNativeCommandSpecsForConfig, y as listChatCommandsForConfig } from "./channel-summary-C8GoEKgH.js";
-import { Tt as SESSION_LABEL_MAX_LENGTH, t as GatewayClient } from "./client-zqMhLTAX.js";
-import { t as pickPrimaryTailnetIPv4 } from "./tailnet-Bk5cGmwE.js";
-import { n as callGateway, r as randomIdempotencyKey } from "./call-CPBhMXxo.js";
-import { a as getStatusCode$1, i as formatError$1, n as waitForWebLogin, o as waitForWaConnection, r as createWaSocket, t as startWebLoginWithQr } from "./login-qr-C2H_iQJU.js";
-import { a as removeChannelAllowFromStoreEntry, c as listPairingChannels, i as readChannelAllowFromStore, o as upsertChannelPairingRequest, t as addChannelAllowFromStoreEntry } from "./pairing-store-BnMngoWQ.js";
-import { t as formatDocsLink } from "./links-C9fyAH-V.js";
-import { i as withManager, t as formatErrorMessage$1 } from "./cli-utils-CukoNm8O.js";
-import { n as withProgress, r as withProgressTotals } from "./progress-uNDQDtGB.js";
-import { a as resolveSubagentToolPolicy, c as resolveNativeSkillsEnabled, i as resolveGroupToolPolicy, n as isToolAllowedByPolicies, o as isNativeCommandsExplicitlyDisabled, r as resolveEffectiveToolPolicy, s as resolveNativeCommandsEnabled, t as filterToolsByPolicy } from "./pi-tools.policy-DleRi9eC.js";
-import { r as stylePromptTitle } from "./prompt-style-gfROyHgB.js";
-import { t as resolvePairingIdLabel } from "./pairing-labels-DK2aLSd2.js";
-import { a as evaluateShellAllowlist, d as requiresExecApproval, f as resolveExecApprovals, h as resolveSafeBins, o as maxAsk, p as resolveExecApprovalsFromFile, s as minSecurity, t as addAllowlistEntry, u as recordAllowlistUse } from "./exec-approvals-CK-Umdr3.js";
-import { a as canvasSnapshotTempPath, c as parseCameraClipPayload, d as buildNodeShellCommand, i as parseEnvPairs, l as parseCameraSnapPayload, n as screenRecordTempPath, o as parseCanvasSnapshotPayload, r as writeScreenRecordToFile, s as cameraTempPath, t as parseScreenRecordPayload, u as writeBase64ToFile } from "./nodes-screen-Ln98EX_f.js";
-import { r as startBrowserControlServiceFromConfig, t as createBrowserControlContext } from "./control-service-BW5sW2U1.js";
-import { t as parseAbsoluteTimeMs } from "./parse-DLFPuO7w.js";
-import { n as formatDoctorNonInteractiveHint, s as writeRestartSentinel } from "./restart-sentinel-CdcBcziq.js";
-import { d as resolveGatewaySystemdServiceName, l as resolveGatewayLaunchAgentLabel } from "./constants-3er_81qc.js";
-import { n as resolveMessageChannelSelection, t as listConfiguredMessageChannels } from "./channel-selection-BCn8_qun.js";
-import { t as parseTimeoutMs } from "./parse-timeout-CmBmmqZZ.js";
+import { A as parseImageSizeError, B as normalizeElevatedLevel, C as isFailoverAssistantError, D as isRawApiErrorPayload, E as isRateLimitAssistantError, F as sanitizeGoogleTurnOrdering, G as resolveResponseUsageMode, H as normalizeThinkLevel, I as formatThinkingLevels, K as supportsXHighThinking, L as formatXHighModelHint, M as buildBootstrapContextFiles, N as ensureSessionHeader, O as isTimeoutErrorMessage, P as resolveBootstrapMaxChars, S as isContextOverflowError, T as isLikelyContextOverflowError, U as normalizeUsageDisplay, V as normalizeReasoningLevel, W as normalizeVerboseLevel, _ as getApiErrorPayloadFingerprint, a as isMessagingToolDuplicateNormalized, b as isCloudCodeAssistFormatError, c as sanitizeImageBlocks, d as isAntigravityClaude, f as isGoogleModelApi, g as formatRawAssistantErrorForUi, h as formatAssistantErrorText, j as sanitizeUserFacingText, k as parseImageDimensionError, l as sanitizeToolResultImages, m as classifyFailoverReason, n as validateGeminiTurns, o as normalizeTextForComparison, p as BILLING_ERROR_USER_MESSAGE, r as pickFallbackThinkingLevel, s as sanitizeSessionMessagesImages, t as validateAnthropicTurns, u as downgradeOpenAIReasoningBlocks, v as isAuthAssistantError, w as isFailoverErrorMessage, x as isCompactionFailureError, y as isBillingAssistantError } from "./pi-embedded-helpers-BB4uACeq.js";
+import { g as resolveStateDir, r as STATE_DIR, t as CONFIG_PATH } from "./paths-scjhy7N2.js";
+import { _ as parseAgentSessionKey, a as buildAgentPeerSessionKey, c as normalizeAgentId, d as resolveThreadSessionKeys, f as sanitizeAgentId, g as isSubagentSessionKey, h as isAcpSessionKey, i as buildAgentMainSessionKey, l as normalizeMainKey, n as DEFAULT_AGENT_ID, o as buildGroupHistoryKey, r as DEFAULT_MAIN_KEY, s as normalizeAccountId$3, t as DEFAULT_ACCOUNT_ID$1, u as resolveAgentIdFromSessionKey, v as resolveThreadParentSessionKey } from "./session-key-Dm2EOhrH.js";
+import { A as logVerbose, D as info, E as danger, F as warn, I as colorize, L as isRich, M as setVerbose, N as shouldLogVerbose, P as success, R as theme, T as setActivePluginRegistry, U as normalizeLogLevel, b as normalizeAnyChannelId, c as defaultRuntime, m as CHAT_CHANNEL_ORDER, t as createSubsystemLogger, w as requireActivePluginRegistry, x as normalizeChannelId, z as getChildLogger } from "./subsystem-CAq3uyo7.js";
+import { _ as shortenHomePath, b as toWhatsappJid, d as normalizeE164, g as shortenHomeInString, h as resolveUserPath, l as isSelfChatMode, m as resolveJidToE164, r as clampInt, t as CONFIG_DIR, u as jidToE164, v as sleep, x as truncateUtf16Safe, y as sliceUtf16Safe } from "./utils-CKSrBNwq.js";
+import { a as logDebug, c as logWarn, i as spawnWithFallback, n as runExec, o as logError, r as formatSpawnError, s as logInfo, t as runCommandWithTimeout } from "./exec-HEWTMJ7j.js";
+import { t as resolveOpenClawPackageRoot } from "./openclaw-root-Cvotktkd.js";
+import { C as loadWorkspaceBootstrapFiles, S as filterBootstrapFilesForSession, c as resolveDefaultAgentId, f as DEFAULT_AGENT_WORKSPACE_DIR, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, n as resolveAgentConfig, o as resolveAgentSkillsFilter, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, u as resolveSessionAgentIds, x as ensureAgentWorkspace } from "./agent-scope-CMs5Y7l-.js";
+import { $ as resolveApiKeyForProfile, I as resolveEnvApiKey, J as resolveAuthProfileOrder, L as resolveModelAuthMode, M as getCustomProviderApiKey, N as requireApiKey, P as resolveApiKeyForProvider, V as resolveShellEnvFallbackTimeoutMs, X as markAuthProfileFailure, Y as isProfileInCooldown, Z as markAuthProfileUsed, a as isCliProvider, at as listProfilesForProvider, bt as DEFAULT_PROVIDER, d as resolveConfiguredModelRef, f as resolveDefaultModelForAgent, h as resolveThinkingDefault, ht as resolveAuthProfileDisplayLabel, j as getApiKeyForModel, lt as ensureAuthProfileStore, m as resolveModelRefFromString, mt as resolveOpenClawAgentDir, n as buildConfiguredAllowlistKeys, o as modelKey, ot as markAuthProfileGood, pt as resolveAuthStorePathForDisplay, r as buildModelAliasIndex, s as normalizeProviderId, t as buildAllowedModelSet, v as normalizeGoogleModelId, vt as DEFAULT_CONTEXT_TOKENS, yt as DEFAULT_MODEL, z as getShellPathFromLoginShell } from "./model-selection-DMUrNhQP.js";
+import { a as saveJsonFile, i as loadJsonFile } from "./github-copilot-token-pGSmVaW-.js";
+import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
+import { t as parseBooleanValue$1 } from "./boolean-BgXe2hyu.js";
+import { t as isTruthyEnvValue } from "./env-0_mKbEWW.js";
+import { C as setConfigValueAtPath, S as parseConfigPath, _ as getConfigOverrides, b as unsetConfigOverride, c as writeConfigFile, d as TELEGRAM_COMMAND_NAME_PATTERN, f as normalizeTelegramCommandName, g as validateJsonSchemaValue, h as parseDurationMs, i as loadConfig, j as VERSION, k as resolveAgentMaxConcurrent, l as validateConfigObjectWithPlugins, m as isSafeExecutableValue, o as readConfigFileSnapshot, p as resolveTelegramCustomCommands, s as resolveConfigSnapshotHash, v as resetConfigOverrides, w as unsetConfigValueAtPath, x as getConfigValueAtPath, y as setConfigOverride } from "./config-CAuZ-EkU.js";
+import { c as resolveEnableState, l as resolveMemorySlotDecision, n as discoverOpenClawPlugins, s as normalizePluginsConfig, t as loadPluginManifestRegistry } from "./manifest-registry-DHaa1SJb.js";
+import { _ as listEnabledDiscordAccounts, a as normalizeWhatsAppTarget, b as normalizeChatType, c as resolveTelegramAccount, d as listBindings, g as resolveSlackBotToken, h as resolveSlackAppToken, i as isWhatsAppGroupJid, l as resolveTelegramToken, n as listChannelPlugins, o as listEnabledTelegramAccounts, p as resolveSlackAccount, r as normalizeChannelId$1, s as listTelegramAccountIds, t as getChannelPlugin, v as resolveDiscordAccount, y as normalizeDiscordToken } from "./plugins-BYIWo0Cp.js";
+import { A as resolveSessionResetPolicy, C as normalizeDeliveryContext, D as resolveSessionKey$1, H as listChannelDocks, J as resolveIMessageAccount, K as listEnabledSignalAccounts, L as resolveMainSessionKey, M as resolveThreadFlag, N as DEFAULT_RESET_TRIGGERS, O as evaluateSessionFreshness, P as canonicalizeMainSessionAlias, S as mergeDeliveryContext, U as resolveChannelGroupPolicy, V as getChannelDock, W as resolveChannelGroupRequireMention, X as resolveGroupSessionKey, Y as buildGroupDisplayName, Z as resolveSandboxConfigForAgent, _ as updateSessionStoreEntry, a as ensureSandboxWorkspaceForSession, at as normalizeToolName, b as deliveryContextFromSession, c as resolveSandboxRuntimeStatus, d as loadSessionStore, dt as resolveConversationLabel, et as applyOwnerOnlyToolPolicy, f as readSessionUpdatedAt, g as updateSessionStore, h as updateLastRoute, j as resolveSessionResetType, k as resolveChannelResetConfig, l as appendAssistantMessageToSessionTranscript, nt as collectExplicitAllowlist, o as resolveSandboxContext, ot as resolveToolProfilePolicy, p as recordSessionMetaFromInbound, q as resolveSignalAccount, rt as expandPolicyWithPluginGroups, st as stripPluginOnlyAllowlist, tt as buildPluginToolGroups, v as isCacheEnabled, w as normalizeSessionDeliveryFields, x as deliveryContextKey, y as resolveCacheTtlMs$1, z as deriveSessionMetaPatch } from "./sandbox-CV8VwPij.js";
+import { _ as ensureOpenClawModelsJson, a as decodeDataUrl, c as extractAssistantThinking, d as formatReasoningMessage, f as inferToolMetaFromArgs, g as stripThinkingTagsFromText, h as stripMinimaxToolCallXml, i as coerceImageModelConfig, l as extractThinkingFromTaggedStream, m as stripDowngradedToolCallText, o as resolveProviderVisionModelFromConfig, p as promoteThinkingTagsToBlocks, r as coerceImageAssistantText, s as extractAssistantText$1, t as describeImageWithModel, u as extractThinkingFromTaggedText, v as minimaxUnderstandImage } from "./image-Ca_PtqY7.js";
+import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-CV2V1HHz.js";
+import { E as formatUncaughtError, T as formatErrorMessage, k as DEFAULT_AI_SNAPSHOT_MAX_CHARS, w as extractErrorCode } from "./chrome-BNSd7Bie.js";
+import { a as resolveSkillsPromptForRun, i as loadWorkspaceSkillEntries, l as applySkillEnvOverrides, n as buildWorkspaceSkillCommandSpecs, r as buildWorkspaceSkillSnapshot, s as resolvePluginSkillDirs, u as applySkillEnvOverridesFromSnapshot } from "./skills-D5JDj3TR.js";
+import { c as saveMediaBuffer, d as getFileExtension, f as imageMimeFromFormat, g as MAX_IMAGE_BYTES, h as kindFromMime, l as detectMime, m as isGifMedia, o as resizeToJpeg, p as isAudioFileName, r as getImageMetadata, s as getMediaDir, u as extensionForMime, v as mediaKindFromMime, y as SsrFBlockedError } from "./routes-DchZU3EK.js";
+import { i as resolveBrowserConfig } from "./server-context-vChIAqjH.js";
+import { a as isInternalMessageChannel, c as listDeliverableMessageChannels, d as resolveMessageChannel, h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, o as isMarkdownCapableMessageChannel, p as GATEWAY_CLIENT_IDS, t as INTERNAL_MESSAGE_CHANNEL, u as resolveGatewayMessageChannel } from "./message-channel-Bpfe5l5f.js";
+import { a as logoutWeb, d as webAuthExists, i as logWebSelfId, n as resolveWhatsAppAccount, r as getWebAuthAgeMs, s as readWebSelfId } from "./accounts-BgZmhIm6.js";
+import { a as resolveSessionTranscriptsDirForAgent, n as resolveSessionFilePath, o as resolveStorePath, r as resolveSessionTranscriptPath } from "./paths-Bb0nwPeu.js";
+import { t as emitSessionTranscriptUpdate } from "./transcript-events-ChU6IQwp.js";
+import { n as redactSensitiveText } from "./redact-DJCFY628.js";
+import { n as resolveToolDisplay } from "./tool-display-BxZG0o1b.js";
+import { A as markdownToIRWithMeta, B as resolveTextChunkLimit, C as signalCheck, D as wrapFetchWithAbortSignal, E as resolveFetch, F as chunkMarkdownText, G as SILENT_REPLY_TOKEN, H as isSafeFenceBreak, I as chunkMarkdownTextWithMode, J as fetchRemoteMedia, K as isSilentReplyText, L as chunkText, M as loadWebMediaRaw, N as resolveMarkdownTableMode, O as chunkMarkdownIR, P as chunkByNewline, R as chunkTextWithMode, S as sendTypingSignal, T as streamSignalEvents, U as parseFenceSpans, V as findFenceSpanAt, W as HEARTBEAT_TOKEN, Y as fetchWithSsrFGuard, _ as parseReplyDirectives, b as sendMessageSignal, c as applyReplyThreading, d as shouldSuppressMessagingToolReplies, f as createReplyToModeFilterForChannel, g as normalizeTargetForProvider, h as normalizeChannelTargetInput, j as loadWebMedia, k as markdownToIR, l as filterMessagingToolDuplicates, m as buildTargetResolverSignature, o as normalizeReplyPayloadsForDelivery, p as resolveReplyToMode, q as MediaFetchError, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as isRenderablePayload, v as splitMediaFromOutput, w as signalRpcRequest, x as sendReadReceiptSignal, y as parseInlineDirectives$1, z as resolveChunkMode } from "./deliver-C3bnXkg5.js";
+import { i as getMachineDisplayName, n as isWSL, t as createBrowserRouteDispatcher } from "./dispatcher-6oI-H42S.js";
+import { i as resolveMemorySearchConfig, n as resolveRetryConfig, r as retryAsync } from "./manager-LpytrxUw.js";
+import { c as listMemoryFiles, l as normalizeExtraMemoryPaths } from "./sqlite-BKl1HJFe.js";
+import { C as shouldHandleTextCommands, S as serializeCommandArgs, _ as listNativeCommandSpecsForConfig, b as resolveCommandArgChoices, f as buildCommandTextFromArgs, g as listNativeCommandSpecs, h as listChatCommandsForConfig, m as listChatCommands, o as extractTextFromMessage, p as findCommandByNativeName, t as buildChannelSummary, v as normalizeCommandBody, x as resolveCommandArgMenu, y as parseCommandArgs } from "./channel-summary-DUiKDBLv.js";
+import { Et as SESSION_LABEL_MAX_LENGTH, t as GatewayClient } from "./client-BYVbRnuQ.js";
+import { t as pickPrimaryTailnetIPv4 } from "./tailnet-DLDGNuH2.js";
+import { i as randomIdempotencyKey, n as callGateway } from "./call-BTbA5OB4.js";
+import { a as formatError$1, i as createWaSocket, n as startWebLoginWithQr, o as getStatusCode$1, r as waitForWebLogin, s as waitForWaConnection } from "./login-qr-BIlr0vwe.js";
+import { a as removeChannelAllowFromStoreEntry, c as listPairingChannels, i as readChannelAllowFromStore, o as upsertChannelPairingRequest, t as addChannelAllowFromStoreEntry } from "./pairing-store-DFq7WtOv.js";
+import { t as formatDocsLink } from "./links-B5pRdmo1.js";
+import { i as withManager, t as formatErrorMessage$1 } from "./cli-utils-BkRQdAoC.js";
+import { n as withProgress, r as withProgressTotals } from "./progress-xpLtQsNY.js";
+import { a as resolveSubagentToolPolicy, c as resolveNativeSkillsEnabled, i as resolveGroupToolPolicy, n as isToolAllowedByPolicies, o as isNativeCommandsExplicitlyDisabled, r as resolveEffectiveToolPolicy, s as resolveNativeCommandsEnabled, t as filterToolsByPolicy } from "./pi-tools.policy-BQ8N5y8a.js";
+import { r as stylePromptTitle } from "./prompt-style-vzh0MGHs.js";
+import { t as resolvePairingIdLabel } from "./pairing-labels-CtqLxbG6.js";
+import { c as derivePromptTokens, l as hasNonzeroUsage, n as loadCostUsageSummary, o as extractToolCallNames, r as loadSessionCostSummary, s as hasToolCall, u as normalizeUsage } from "./session-cost-usage-CBP4Hv9D.js";
+import { i as resolveModelCostConfig, n as formatTokenCount$2, r as formatUsd$1, t as estimateUsageCost } from "./usage-format-DvowRSs-.js";
+import { a as evaluateShellAllowlist, d as requiresExecApproval, f as resolveExecApprovals, h as resolveSafeBins, o as maxAsk, p as resolveExecApprovalsFromFile, s as minSecurity, t as addAllowlistEntry, u as recordAllowlistUse } from "./exec-approvals-DZixgolZ.js";
+import { a as canvasSnapshotTempPath, c as parseCameraClipPayload, d as buildNodeShellCommand, i as parseEnvPairs, l as parseCameraSnapPayload, n as screenRecordTempPath, o as parseCanvasSnapshotPayload, r as writeScreenRecordToFile, s as cameraTempPath, t as parseScreenRecordPayload, u as writeBase64ToFile } from "./nodes-screen-DT5HvhJV.js";
+import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-CS61Road.js";
+import { t as parseAbsoluteTimeMs } from "./parse-BZz5lHzQ.js";
+import { d as resolveGatewaySystemdServiceName, l as resolveGatewayLaunchAgentLabel } from "./constants-HPrOsATF.js";
+import { n as resolveMessageChannelSelection, t as listConfiguredMessageChannels } from "./channel-selection-CJWYmCLf.js";
+import { t as parseTimeoutMs } from "./parse-timeout-Du-wHHNi.js";
 import { createRequire } from "node:module";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";
@@ -79,7 +81,7 @@ import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { DisconnectReason, downloadMediaMessage, extractMessageContent, getContentType, isJidGroup, normalizeMessageContent } from "@whiskeysockets/baileys";
 import { cancel, isCancel } from "@clack/prompts";
 import { GatewayIntents, GatewayPlugin } from "@buape/carbon/gateway";
-import readline, { createInterface } from "node:readline";
+import { createInterface } from "node:readline";
 import { messagingApi } from "@line/bot-sdk";
 import SlackBolt from "@slack/bolt";
 import { run, sequentialize } from "@grammyjs/runner";
@@ -1905,7 +1907,7 @@ function formatAudioTranscripts(outputs) {
 //#region src/agents/model-catalog.ts
 let modelCatalogPromise = null;
 let hasLoggedModelCatalogError = false;
-const defaultImportPiSdk = () => import("./pi-model-discovery-DHPwfwKu.js");
+const defaultImportPiSdk = () => import("./pi-model-discovery-CV2V1HHz.js").then((n) => n.r);
 let importPiSdk = defaultImportPiSdk;
 async function loadModelCatalog(params) {
 	if (params?.useCache === false) modelCatalogPromise = null;
@@ -1999,7 +2001,7 @@ const AUTO_IMAGE_KEY_PROVIDERS = [
 const AUTO_VIDEO_KEY_PROVIDERS = ["google"];
 const DEFAULT_IMAGE_MODELS = {
 	openai: "gpt-5-mini",
-	anthropic: "claude-opus-4-5",
+	anthropic: "claude-opus-4-6",
 	google: "gemini-3-flash-preview",
 	minimax: "MiniMax-VL-01"
 };
@@ -3307,6 +3309,32 @@ function normalizeAllowFromEntry(params) {
 		allowFrom: [params.value]
 	}).filter((entry) => entry.trim().length > 0);
 }
+function resolveOwnerAllowFromList(params) {
+	const raw = params.allowFrom ?? params.cfg.commands?.ownerAllowFrom;
+	if (!Array.isArray(raw) || raw.length === 0) return [];
+	const filtered = [];
+	for (const entry of raw) {
+		const trimmed = String(entry ?? "").trim();
+		if (!trimmed) continue;
+		const separatorIndex = trimmed.indexOf(":");
+		if (separatorIndex > 0) {
+			const channel = normalizeAnyChannelId(trimmed.slice(0, separatorIndex));
+			if (channel) {
+				if (params.providerId && channel !== params.providerId) continue;
+				const remainder = trimmed.slice(separatorIndex + 1).trim();
+				if (remainder) filtered.push(remainder);
+				continue;
+			}
+		}
+		filtered.push(trimmed);
+	}
+	return formatAllowFromList({
+		dock: params.dock,
+		cfg: params.cfg,
+		accountId: params.accountId,
+		allowFrom: filtered
+	});
+}
 function resolveSenderCandidates(params) {
 	const { dock, cfg, accountId } = params;
 	const candidates = [];
@@ -3351,18 +3379,35 @@ function resolveCommandAuthorization(params) {
 		accountId: ctx.AccountId,
 		allowFrom: Array.isArray(allowFromRaw) ? allowFromRaw : []
 	});
+	const configOwnerAllowFromList = resolveOwnerAllowFromList({
+		dock,
+		cfg,
+		accountId: ctx.AccountId,
+		providerId,
+		allowFrom: cfg.commands?.ownerAllowFrom
+	});
+	const contextOwnerAllowFromList = resolveOwnerAllowFromList({
+		dock,
+		cfg,
+		accountId: ctx.AccountId,
+		providerId,
+		allowFrom: ctx.OwnerAllowFrom
+	});
 	const allowAll = allowFromList.length === 0 || allowFromList.some((entry) => entry.trim() === "*");
-	const ownerCandidates = allowAll ? [] : allowFromList.filter((entry) => entry !== "*");
-	if (!allowAll && ownerCandidates.length === 0 && to) {
+	const ownerCandidatesForCommands = allowAll ? [] : allowFromList.filter((entry) => entry !== "*");
+	if (!allowAll && ownerCandidatesForCommands.length === 0 && to) {
 		const normalizedTo = normalizeAllowFromEntry({
 			dock,
 			cfg,
 			accountId: ctx.AccountId,
 			value: to
 		});
-		if (normalizedTo.length > 0) ownerCandidates.push(...normalizedTo);
+		if (normalizedTo.length > 0) ownerCandidatesForCommands.push(...normalizedTo);
 	}
-	const ownerList = Array.from(new Set(ownerCandidates));
+	const ownerAllowAll = configOwnerAllowFromList.some((entry) => entry.trim() === "*");
+	const explicitOwners = configOwnerAllowFromList.filter((entry) => entry !== "*");
+	const explicitOverrides = contextOwnerAllowFromList.filter((entry) => entry !== "*");
+	const ownerList = Array.from(new Set(explicitOwners.length > 0 ? explicitOwners : ownerAllowAll ? [] : explicitOverrides.length > 0 ? explicitOverrides : ownerCandidatesForCommands));
 	const senderCandidates = resolveSenderCandidates({
 		dock,
 		providerId,
@@ -3373,13 +3418,18 @@ function resolveCommandAuthorization(params) {
 		from
 	});
 	const matchedSender = ownerList.length ? senderCandidates.find((candidate) => ownerList.includes(candidate)) : void 0;
+	const matchedCommandOwner = ownerCandidatesForCommands.length ? senderCandidates.find((candidate) => ownerCandidatesForCommands.includes(candidate)) : void 0;
 	const senderId = matchedSender ?? senderCandidates[0];
-	const isOwner = !Boolean(dock?.commands?.enforceOwnerForCommands) || allowAll || ownerList.length === 0 || Boolean(matchedSender);
+	const enforceOwner = Boolean(dock?.commands?.enforceOwnerForCommands);
+	const senderIsOwner = Boolean(matchedSender);
+	const ownerAllowlistConfigured = ownerAllowAll || explicitOwners.length > 0;
+	const isOwnerForCommands = !(enforceOwner || ownerAllowlistConfigured) ? true : ownerAllowAll ? true : ownerAllowlistConfigured ? senderIsOwner : allowAll || ownerCandidatesForCommands.length === 0 || Boolean(matchedCommandOwner);
 	return {
 		providerId,
 		ownerList,
 		senderId: senderId || void 0,
-		isAuthorizedSender: commandAuthorized && isOwner,
+		senderIsOwner,
+		isAuthorizedSender: commandAuthorized && isOwnerForCommands,
 		from: from || void 0,
 		to: to || void 0
 	};
@@ -4129,7 +4179,7 @@ async function resolveSessionAuthProfileOverride(params) {
 const MODEL_CACHE = /* @__PURE__ */ new Map();
 (async () => {
 	try {
-		const { discoverAuthStorage, discoverModels } = await import("./pi-model-discovery-DHPwfwKu.js");
+		const { discoverAuthStorage, discoverModels } = await import("./pi-model-discovery-CV2V1HHz.js").then((n) => n.r);
 		await ensureOpenClawModelsJson(loadConfig());
 		const agentDir = resolveOpenClawAgentDir();
 		const models = discoverModels(discoverAuthStorage(agentDir), agentDir).getAll();
@@ -4343,7 +4393,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./auth-profiles-3t9aTwDR.js");
+		const { ensureAuthProfileStore } = await import("./model-selection-DMUrNhQP.js").then((n) => n.q);
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId(provider);
 		if (!profile || normalizeProviderId(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -5561,6 +5611,40 @@ function normalizeModelCompat(model) {
 
 //#endregion
 //#region src/agents/pi-embedded-runner/model.ts
+const OPENAI_CODEX_GPT_53_MODEL_ID = "gpt-5.3-codex";
+const OPENAI_CODEX_TEMPLATE_MODEL_IDS = ["gpt-5.2-codex"];
+function resolveOpenAICodexGpt53FallbackModel(provider, modelId, modelRegistry) {
+	const normalizedProvider = normalizeProviderId(provider);
+	const trimmedModelId = modelId.trim();
+	if (normalizedProvider !== "openai-codex") return;
+	if (trimmedModelId.toLowerCase() !== OPENAI_CODEX_GPT_53_MODEL_ID) return;
+	for (const templateId of OPENAI_CODEX_TEMPLATE_MODEL_IDS) {
+		const template = modelRegistry.find(normalizedProvider, templateId);
+		if (!template) continue;
+		return normalizeModelCompat({
+			...template,
+			id: trimmedModelId,
+			name: trimmedModelId
+		});
+	}
+	return normalizeModelCompat({
+		id: trimmedModelId,
+		name: trimmedModelId,
+		api: "openai-codex-responses",
+		provider: normalizedProvider,
+		baseUrl: "https://chatgpt.com/backend-api",
+		reasoning: true,
+		input: ["text", "image"],
+		cost: {
+			input: 0,
+			output: 0,
+			cacheRead: 0,
+			cacheWrite: 0
+		},
+		contextWindow: DEFAULT_CONTEXT_TOKENS,
+		maxTokens: DEFAULT_CONTEXT_TOKENS
+	});
+}
 function buildInlineProviderModels(providers) {
 	return Object.entries(providers).flatMap(([providerId, entry]) => {
 		const trimmed = providerId.trim();
@@ -5603,6 +5687,12 @@ function resolveModel(provider, modelId, agentDir, cfg) {
 			authStorage,
 			modelRegistry
 		};
+		const codexForwardCompat = resolveOpenAICodexGpt53FallbackModel(provider, modelId, modelRegistry);
+		if (codexForwardCompat) return {
+			model: codexForwardCompat,
+			authStorage,
+			modelRegistry
+		};
 		const providerCfg = providers[provider];
 		if (providerCfg || modelId.startsWith("mock-")) return {
 			model: normalizeModelCompat({
@@ -7803,7 +7893,26 @@ function resolveMessagePrefix(cfg, agentId, opts) {
 	if (opts?.hasAllowFrom === true) return "";
 	return resolveIdentityNamePrefix(cfg, agentId) ?? opts?.fallback ?? "[openclaw]";
 }
-function resolveResponsePrefix(cfg, agentId) {
+/** Helper to extract a channel config value by dynamic key. */
+function getChannelConfig(cfg, channel) {
+	const value = cfg.channels?.[channel];
+	return typeof value === "object" && value !== null ? value : void 0;
+}
+function resolveResponsePrefix(cfg, agentId, opts) {
+	if (opts?.channel && opts?.accountId) {
+		const accountPrefix = (getChannelConfig(cfg, opts.channel)?.accounts)?.[opts.accountId]?.responsePrefix;
+		if (accountPrefix !== void 0) {
+			if (accountPrefix === "auto") return resolveIdentityNamePrefix(cfg, agentId);
+			return accountPrefix;
+		}
+	}
+	if (opts?.channel) {
+		const channelPrefix = getChannelConfig(cfg, opts.channel)?.responsePrefix;
+		if (channelPrefix !== void 0) {
+			if (channelPrefix === "auto") return resolveIdentityNamePrefix(cfg, agentId);
+			return channelPrefix;
+		}
+	}
 	const configured = cfg.messages?.responsePrefix;
 	if (configured !== void 0) {
 		if (configured === "auto") return resolveIdentityNamePrefix(cfg, agentId);
@@ -7816,7 +7925,10 @@ function resolveEffectiveMessagesConfig(cfg, agentId, opts) {
 			hasAllowFrom: opts?.hasAllowFrom,
 			fallback: opts?.fallbackMessagePrefix
 		}),
-		responsePrefix: resolveResponsePrefix(cfg, agentId)
+		responsePrefix: resolveResponsePrefix(cfg, agentId, {
+			channel: opts?.channel,
+			accountId: opts?.accountId
+		})
 	};
 }
 function resolveHumanDelayConfig(cfg, agentId) {
@@ -8057,7 +8169,7 @@ async function getMemorySearchManager(params) {
 		const cached = QMD_MANAGER_CACHE.get(cacheKey);
 		if (cached) return { manager: cached };
 		try {
-			const { QmdMemoryManager } = await import("./qmd-manager-8xWxIGbO.js");
+			const { QmdMemoryManager } = await import("./qmd-manager-BKkFEEN_.js");
 			const primary = await QmdMemoryManager.create({
 				cfg: params.cfg,
 				agentId: params.agentId,
@@ -8067,7 +8179,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-DtFcs1NT.js");
+						const { MemoryIndexManager } = await import("./manager-LpytrxUw.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -8080,7 +8192,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-DtFcs1NT.js");
+		const { MemoryIndexManager } = await import("./manager-LpytrxUw.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -12208,12 +12320,12 @@ function resolveResponsePrefixTemplate(template, context) {
 *
 * Strips:
 * - Provider prefix (e.g., "openai/" from "openai/gpt-5.2")
-* - Date suffixes (e.g., "-20251101" from "claude-opus-4-5-20251101")
+* - Date suffixes (e.g., "-20260205" from "claude-opus-4-6-20260205")
 * - Common version suffixes (e.g., "-latest")
 *
 * @example
 * extractShortModelName("openai-codex/gpt-5.2") // "gpt-5.2"
-* extractShortModelName("claude-opus-4-5-20251101") // "claude-opus-4-5"
+* extractShortModelName("claude-opus-4-6-20260205") // "claude-opus-4-6"
 * extractShortModelName("gpt-5.2-latest") // "gpt-5.2"
 */
 function extractShortModelName(fullModel) {
@@ -12283,10 +12395,14 @@ function normalizeReplyPayload(payload, opts = {}) {
 */
 async function routeReply(params) {
 	const { payload, channel, to, accountId, threadId, cfg, abortSignal } = params;
+	const normalizedChannel = normalizeMessageChannel(channel);
 	const normalized = normalizeReplyPayload(payload, { responsePrefix: params.sessionKey ? resolveEffectiveMessagesConfig(cfg, resolveSessionAgentId({
 		sessionKey: params.sessionKey,
 		config: cfg
-	})).responsePrefix : cfg.messages?.responsePrefix === "auto" ? void 0 : cfg.messages?.responsePrefix });
+	}), {
+		channel: normalizedChannel,
+		accountId
+	}).responsePrefix : cfg.messages?.responsePrefix === "auto" ? void 0 : cfg.messages?.responsePrefix });
 	if (!normalized) return { ok: true };
 	let text = normalized.text ?? "";
 	let mediaUrls = (normalized.mediaUrls?.filter(Boolean) ?? []).length ? normalized.mediaUrls?.filter(Boolean) : normalized.mediaUrl ? [normalized.mediaUrl] : [];
@@ -12308,7 +12424,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-CXpx7BNb.js");
+		const { deliverOutboundPayloads } = await import("./deliver-C3bnXkg5.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -12523,9 +12639,10 @@ async function dispatchReplyFromConfig(params) {
 		}
 		let accumulatedBlockText = "";
 		let blockCount = 0;
+		const shouldSendToolSummaries = ctx.ChatType !== "group" && ctx.CommandSource !== "native";
 		const replyResult = await (params.replyResolver ?? getReplyFromConfig)(ctx, {
 			...params.replyOptions,
-			onToolResult: ctx.ChatType !== "group" && ctx.CommandSource !== "native" ? (payload) => {
+			onToolResult: shouldSendToolSummaries ? (payload) => {
 				const run = async () => {
 					const ttsPayload = await maybeApplyTtsToPayload({
 						payload,
@@ -13366,6 +13483,26 @@ function resolveDiscordUserAllowed(params) {
 		tag: params.userTag
 	});
 }
+function resolveDiscordOwnerAllowFrom(params) {
+	const rawAllowList = params.channelConfig?.users ?? params.guildInfo?.users;
+	if (!Array.isArray(rawAllowList) || rawAllowList.length === 0) return;
+	const allowList = normalizeDiscordAllowList(rawAllowList, [
+		"discord:",
+		"user:",
+		"pk:"
+	]);
+	if (!allowList) return;
+	const match = resolveDiscordAllowListMatch({
+		allowList,
+		candidate: {
+			id: params.sender.id,
+			name: params.sender.name,
+			tag: params.sender.tag
+		}
+	});
+	if (!match.allowed || !match.matchKey || match.matchKey === "*") return;
+	return [match.matchKey];
+}
 function resolveDiscordGuildEntry(params) {
 	const guild = params.guild;
 	const entries = params.guildEntries;
@@ -13410,6 +13547,7 @@ function resolveDiscordChannelConfigEntry(entry) {
 		enabled: entry.enabled,
 		users: entry.users,
 		systemPrompt: entry.systemPrompt,
+		includeThreadStarter: entry.includeThreadStarter,
 		autoThread: entry.autoThread
 	};
 }
@@ -16035,6 +16173,20 @@ function buildTelegramGroupPeerId(chatId, messageThreadId) {
 function buildTelegramGroupFrom(chatId, messageThreadId) {
 	return `telegram:group:${buildTelegramGroupPeerId(chatId, messageThreadId)}`;
 }
+/**
+* Build parentPeer for forum topic binding inheritance.
+* When a message comes from a forum topic, the peer ID includes the topic suffix
+* (e.g., `-1001234567890:topic:99`). To allow bindings configured for the base
+* group ID to match, we provide the parent group as `parentPeer` so the routing
+* layer can fall back to it when the exact peer doesn't match.
+*/
+function buildTelegramParentPeer(params) {
+	if (!params.isGroup || params.resolvedThreadId == null) return;
+	return {
+		kind: "group",
+		id: String(params.chatId)
+	};
+}
 function buildSenderName(msg) {
 	return [msg.from?.first_name, msg.from?.last_name].filter(Boolean).join(" ").trim() || msg.from?.username || void 0;
 }
@@ -17070,7 +17222,7 @@ async function describeStickerImage(params) {
 	const selectCatalogModel = (provider) => {
 		const entries = catalog.filter((entry) => entry.provider.toLowerCase() === provider.toLowerCase() && modelSupportsVision(entry));
 		if (entries.length === 0) return;
-		const defaultId = provider === "openai" ? "gpt-5-mini" : provider === "anthropic" ? "claude-opus-4-5" : provider === "google" ? "gemini-3-flash-preview" : "MiniMax-VL-01";
+		const defaultId = provider === "openai" ? "gpt-5-mini" : provider === "anthropic" ? "claude-opus-4-6" : provider === "google" ? "gemini-3-flash-preview" : "MiniMax-VL-01";
 		return entries.find((entry) => entry.id === defaultId) ?? entries[0];
 	};
 	let resolved = null;
@@ -17099,7 +17251,7 @@ async function describeStickerImage(params) {
 	logVerbose(`telegram: describing sticker with ${provider}/${model}`);
 	try {
 		const buffer = await fs$1.readFile(imagePath);
-		const { describeImageWithModel } = await import("./image-CgTMdnmz.js");
+		const { describeImageWithModel } = await import("./image-Ca_PtqY7.js").then((n) => n.n);
 		return (await describeImageWithModel({
 			buffer,
 			fileName: "sticker.webp",
@@ -17456,7 +17608,7 @@ function createWhatsAppLoginTool() {
 			force: Type.Optional(Type.Boolean())
 		}),
 		execute: async (_toolCallId, args) => {
-			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-CUV9HZCg.js");
+			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-BIlr0vwe.js").then((n) => n.t);
 			if ((args?.action ?? "start") === "wait") {
 				const result = await waitForWebLogin({ timeoutMs: typeof args.timeoutMs === "number" ? args.timeoutMs : void 0 });
 				return {
@@ -19229,11 +19381,22 @@ function createReplyPrefixContext(params) {
 	};
 	return {
 		prefixContext,
-		responsePrefix: resolveEffectiveMessagesConfig(cfg, agentId).responsePrefix,
+		responsePrefix: resolveEffectiveMessagesConfig(cfg, agentId, {
+			channel: params.channel,
+			accountId: params.accountId
+		}).responsePrefix,
 		responsePrefixContextProvider: () => prefixContext,
 		onModelSelected
 	};
 }
+function createReplyPrefixOptions(params) {
+	const { responsePrefix, responsePrefixContextProvider, onModelSelected } = createReplyPrefixContext(params);
+	return {
+		responsePrefix,
+		responsePrefixContextProvider,
+		onModelSelected
+	};
+}
 
 //#endregion
 //#region src/web/auto-reply/deliver-reply.ts
@@ -19542,12 +19705,14 @@ async function processMessage(params) {
 		msg: params.msg
 	}) : void 0;
 	const configuredResponsePrefix = params.cfg.messages?.responsePrefix;
-	const prefixContext = createReplyPrefixContext({
+	const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
 		cfg: params.cfg,
-		agentId: params.route.agentId
+		agentId: params.route.agentId,
+		channel: "whatsapp",
+		accountId: params.route.accountId
 	});
 	const isSelfChat = params.msg.chatType !== "group" && Boolean(params.msg.selfE164) && normalizeE164(params.msg.from) === normalizeE164(params.msg.selfE164 ?? "");
-	const responsePrefix = prefixContext.responsePrefix ?? (configuredResponsePrefix === void 0 && isSelfChat ? resolveIdentityNamePrefix(params.cfg, params.route.agentId) ?? "[openclaw]" : void 0);
+	const responsePrefix = prefixOptions.responsePrefix ?? (configuredResponsePrefix === void 0 && isSelfChat ? resolveIdentityNamePrefix(params.cfg, params.route.agentId) ?? "[openclaw]" : void 0);
 	const ctxPayload = finalizeInboundContext({
 		Body: combinedBody,
 		RawBody: params.msg.body,
@@ -19610,8 +19775,8 @@ async function processMessage(params) {
 		cfg: params.cfg,
 		replyResolver: params.replyResolver,
 		dispatcherOptions: {
+			...prefixOptions,
 			responsePrefix,
-			responsePrefixContextProvider: prefixContext.responsePrefixContextProvider,
 			onHeartbeatStrip: () => {
 				if (!didLogHeartbeatStrip) {
 					didLogHeartbeatStrip = true;
@@ -19659,7 +19824,7 @@ async function processMessage(params) {
 		},
 		replyOptions: {
 			disableBlockStreaming: typeof params.cfg.channels?.whatsapp?.blockStreaming === "boolean" ? !params.cfg.channels.whatsapp.blockStreaming : void 0,
-			onModelSelected: prefixContext.onModelSelected
+			onModelSelected
 		}
 	});
 	if (!queuedFinal) {
@@ -22048,6 +22213,15 @@ async function processDiscordMessage(ctx) {
 	const senderTag = sender.tag;
 	const systemPromptParts = [channelConfig?.systemPrompt?.trim() || null].filter((entry) => Boolean(entry));
 	const groupSystemPrompt = systemPromptParts.length > 0 ? systemPromptParts.join("\n\n") : void 0;
+	const ownerAllowFrom = resolveDiscordOwnerAllowFrom({
+		channelConfig,
+		guildInfo,
+		sender: {
+			id: sender.id,
+			name: sender.name,
+			tag: sender.tag
+		}
+	});
 	const storePath = resolveStorePath(cfg.session?.store, { agentId: route.agentId });
 	const envelopeOptions = resolveEnvelopeFormatOptions(cfg);
 	const previousTimestamp = readSessionUpdatedAt({
@@ -22086,20 +22260,22 @@ async function processDiscordMessage(ctx) {
 	let threadLabel;
 	let parentSessionKey;
 	if (threadChannel) {
-		const starter = await resolveDiscordThreadStarter({
-			channel: threadChannel,
-			client,
-			parentId: threadParentId,
-			parentType: threadParentType,
-			resolveTimestampMs
-		});
-		if (starter?.text) threadStarterBody = formatThreadStarterEnvelope({
-			channel: "Discord",
-			author: starter.author,
-			timestamp: starter.timestamp,
-			body: starter.text,
-			envelope: envelopeOptions
-		});
+		if (channelConfig?.includeThreadStarter !== false) {
+			const starter = await resolveDiscordThreadStarter({
+				channel: threadChannel,
+				client,
+				parentId: threadParentId,
+				parentType: threadParentType,
+				resolveTimestampMs
+			});
+			if (starter?.text) threadStarterBody = formatThreadStarterEnvelope({
+				channel: "Discord",
+				author: starter.author,
+				timestamp: starter.timestamp,
+				body: starter.text,
+				envelope: envelopeOptions
+			});
+		}
 		const parentName = threadParentName ?? "parent";
 		threadLabel = threadName ? `Discord thread #${normalizeDiscordSlug(parentName)} › ${threadName}` : `Discord thread #${normalizeDiscordSlug(parentName)}`;
 		if (threadParentId) parentSessionKey = buildAgentSessionKey({
@@ -22159,6 +22335,7 @@ async function processDiscordMessage(ctx) {
 		UntrustedContext: untrustedChannelMetadata ? [untrustedChannelMetadata] : void 0,
 		GroupSystemPrompt: isGuildMessage ? groupSystemPrompt : void 0,
 		GroupSpace: isGuildMessage ? (guildInfo?.id ?? guildSlug) || void 0 : void 0,
+		OwnerAllowFrom: ownerAllowFrom,
 		Provider: "discord",
 		Surface: "discord",
 		WasMentioned: effectiveWasMentioned,
@@ -22192,9 +22369,11 @@ async function processDiscordMessage(ctx) {
 		logVerbose(`discord inbound: channel=${message.channelId} deliver=${deliverTarget} from=${ctxPayload.From} preview="${preview}"`);
 	}
 	const typingChannelId = deliverTarget.startsWith("channel:") ? deliverTarget.slice(8) : message.channelId;
-	const prefixContext = createReplyPrefixContext({
+	const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
 		cfg,
-		agentId: route.agentId
+		agentId: route.agentId,
+		channel: "discord",
+		accountId: route.accountId
 	});
 	const tableMode = resolveMarkdownTableMode({
 		cfg,
@@ -22202,8 +22381,7 @@ async function processDiscordMessage(ctx) {
 		accountId
 	});
 	const { dispatcher, replyOptions, markDispatchIdle } = createReplyDispatcherWithTyping({
-		responsePrefix: prefixContext.responsePrefix,
-		responsePrefixContextProvider: prefixContext.responsePrefixContextProvider,
+		...prefixOptions,
 		humanDelay: resolveHumanDelayConfig(cfg, route.agentId),
 		deliver: async (payload) => {
 			const replyToId = replyReference.use();
@@ -22248,9 +22426,7 @@ async function processDiscordMessage(ctx) {
 			...replyOptions,
 			skillFilter: channelConfig?.skills,
 			disableBlockStreaming: typeof discordConfig?.blockStreaming === "boolean" ? !discordConfig.blockStreaming : void 0,
-			onModelSelected: (ctx) => {
-				prefixContext.onModelSelected(ctx);
-			}
+			onModelSelected
 		}
 	});
 	markDispatchIdle();
@@ -22875,6 +23051,15 @@ async function dispatchDiscordCommandInteraction(params) {
 		} : void 0
 	});
 	const conversationLabel = isDirectMessage ? user.globalName ?? user.username : channelId;
+	const ownerAllowFrom = resolveDiscordOwnerAllowFrom({
+		channelConfig,
+		guildInfo,
+		sender: {
+			id: sender.id,
+			name: sender.name,
+			tag: sender.tag
+		}
+	});
 	const ctxPayload = finalizeInboundContext({
 		Body: prompt,
 		RawBody: prompt,
@@ -22900,6 +23085,7 @@ async function dispatchDiscordCommandInteraction(params) {
 			});
 			return untrustedChannelMetadata ? [untrustedChannelMetadata] : void 0;
 		})() : void 0,
+		OwnerAllowFrom: ownerAllowFrom,
 		SenderName: user.globalName ?? user.username,
 		SenderId: user.id,
 		SenderUsername: user.username,
@@ -22912,12 +23098,18 @@ async function dispatchDiscordCommandInteraction(params) {
 		CommandAuthorized: commandAuthorized,
 		CommandSource: "native"
 	});
+	const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
+		cfg,
+		agentId: route.agentId,
+		channel: "discord",
+		accountId: route.accountId
+	});
 	let didReply = false;
 	await dispatchReplyWithDispatcher({
 		ctx: ctxPayload,
 		cfg,
 		dispatcherOptions: {
-			responsePrefix: resolveEffectiveMessagesConfig(cfg, route.agentId).responsePrefix,
+			...prefixOptions,
 			humanDelay: resolveHumanDelayConfig(cfg, route.agentId),
 			deliver: async (payload) => {
 				try {
@@ -22944,7 +23136,8 @@ async function dispatchDiscordCommandInteraction(params) {
 		},
 		replyOptions: {
 			skillFilter: channelConfig?.skills,
-			disableBlockStreaming: typeof discordConfig?.blockStreaming === "boolean" ? !discordConfig.blockStreaming : void 0
+			disableBlockStreaming: typeof discordConfig?.blockStreaming === "boolean" ? !discordConfig.blockStreaming : void 0,
+			onModelSelected
 		}
 	});
 }
@@ -25327,15 +25520,12 @@ function formatControlUiSshHint(params) {
 	const basePath = normalizeControlUiBasePath(params.basePath);
 	const uiPath = basePath ? `${basePath}/` : "/";
 	const localUrl = `http://localhost:${params.port}${uiPath}`;
-	const tokenParam = params.token ? `?token=${encodeURIComponent(params.token)}` : "";
-	const authedUrl = params.token ? `${localUrl}${tokenParam}` : void 0;
 	const sshTarget = resolveSshTargetHint();
 	return [
 		"No GUI detected. Open from your computer:",
 		`ssh -N -L ${params.port}:127.0.0.1:${params.port} ${sshTarget}`,
 		"Then open:",
 		localUrl,
-		authedUrl,
 		"Docs:",
 		"https://docs.openclaw.ai/gateway/remote",
 		"https://docs.openclaw.ai/web/control-ui"
@@ -26302,16 +26492,17 @@ async function monitorIMessageProvider(opts = {}) {
 			const preview = truncateUtf16Safe(body, 200).replace(/\n/g, "\\n");
 			logVerbose(`imessage inbound: chatId=${chatId ?? "unknown"} from=${ctxPayload.From} len=${body.length} preview="${preview}"`);
 		}
-		const prefixContext = createReplyPrefixContext({
+		const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
 			cfg,
-			agentId: route.agentId
+			agentId: route.agentId,
+			channel: "imessage",
+			accountId: route.accountId
 		});
 		const { queuedFinal } = await dispatchInboundMessage({
 			ctx: ctxPayload,
 			cfg,
 			dispatcher: createReplyDispatcher({
-				responsePrefix: prefixContext.responsePrefix,
-				responsePrefixContextProvider: prefixContext.responsePrefixContextProvider,
+				...prefixOptions,
 				humanDelay: resolveHumanDelayConfig(cfg, route.agentId),
 				deliver: async (payload) => {
 					await deliverReplies$3({
@@ -26331,7 +26522,7 @@ async function monitorIMessageProvider(opts = {}) {
 			}),
 			replyOptions: {
 				disableBlockStreaming: typeof accountInfo.config.blockStreaming === "boolean" ? !accountInfo.config.blockStreaming : void 0,
-				onModelSelected: prefixContext.onModelSelected
+				onModelSelected
 			}
 		});
 		if (!queuedFinal) {
@@ -28127,11 +28318,17 @@ async function monitorLineProvider(opts) {
 			try {
 				const textLimit = 5e3;
 				let replyTokenUsed = false;
+				const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
+					cfg: config,
+					agentId: route.agentId,
+					channel: "line",
+					accountId: route.accountId
+				});
 				const { queuedFinal } = await dispatchReplyWithBufferedBlockDispatcher({
 					ctx: ctxPayload,
 					cfg: config,
 					dispatcherOptions: {
-						responsePrefix: resolveEffectiveMessagesConfig(config, route.agentId).responsePrefix,
+						...prefixOptions,
 						deliver: async (payload, _info) => {
 							const lineData = payload.channelData?.line ?? {};
 							if (ctx.userId && !ctx.isGroup) showLoadingAnimation(ctx.userId, { accountId: ctx.accountId }).catch(() => {});
@@ -28173,7 +28370,7 @@ async function monitorLineProvider(opts) {
 							runtime.error?.(danger(`line ${info.kind} reply failed: ${String(err)}`));
 						}
 					},
-					replyOptions: {}
+					replyOptions: { onModelSelected }
 				});
 				if (!queuedFinal) logVerbose(`line: no response generated for message from ${ctxPayload.From}`);
 			} catch (err) {
@@ -28544,9 +28741,11 @@ function createSignalEventHandler(deps) {
 			const preview = body.slice(0, 200).replace(/\\n/g, "\\\\n");
 			logVerbose(`signal inbound: from=${ctxPayload.From} len=${body.length} preview="${preview}"`);
 		}
-		const prefixContext = createReplyPrefixContext({
+		const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
 			cfg: deps.cfg,
-			agentId: route.agentId
+			agentId: route.agentId,
+			channel: "signal",
+			accountId: route.accountId
 		});
 		const typingCallbacks = createTypingCallbacks({
 			start: async () => {
@@ -28567,8 +28766,7 @@ function createSignalEventHandler(deps) {
 			}
 		});
 		const { dispatcher, replyOptions, markDispatchIdle } = createReplyDispatcherWithTyping({
-			responsePrefix: prefixContext.responsePrefix,
-			responsePrefixContextProvider: prefixContext.responsePrefixContextProvider,
+			...prefixOptions,
 			humanDelay: resolveHumanDelayConfig(deps.cfg, route.agentId),
 			deliver: async (payload) => {
 				await deps.deliverReplies({
@@ -28594,9 +28792,7 @@ function createSignalEventHandler(deps) {
 			replyOptions: {
 				...replyOptions,
 				disableBlockStreaming: typeof deps.blockStreaming === "boolean" ? !deps.blockStreaming : void 0,
-				onModelSelected: (ctx) => {
-					prefixContext.onModelSelected(ctx);
-				}
+				onModelSelected
 			}
 		});
 		markDispatchIdle();
@@ -30515,13 +30711,14 @@ async function dispatchPreparedSlackMessage(prepared) {
 			});
 		}
 	});
-	const prefixContext = createReplyPrefixContext({
+	const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
 		cfg,
-		agentId: route.agentId
+		agentId: route.agentId,
+		channel: "slack",
+		accountId: route.accountId
 	});
 	const { dispatcher, replyOptions, markDispatchIdle } = createReplyDispatcherWithTyping({
-		responsePrefix: prefixContext.responsePrefix,
-		responsePrefixContextProvider: prefixContext.responsePrefixContextProvider,
+		...prefixOptions,
 		humanDelay: resolveHumanDelayConfig(cfg, route.agentId),
 		deliver: async (payload) => {
 			const replyThreadTs = replyPlan.nextThreadTs();
@@ -30552,9 +30749,7 @@ async function dispatchPreparedSlackMessage(prepared) {
 			skillFilter: prepared.channelConfig?.skills,
 			hasRepliedRef,
 			disableBlockStreaming: typeof account.config.blockStreaming === "boolean" ? !account.config.blockStreaming : void 0,
-			onModelSelected: (ctx) => {
-				prefixContext.onModelSelected(ctx);
-			}
+			onModelSelected
 		}
 	});
 	markDispatchIdle();
@@ -31548,42 +31743,49 @@ function registerSlackMonitorSlashCommands(params) {
 			}) : void 0;
 			const systemPromptParts = [channelConfig?.systemPrompt?.trim() || null].filter((entry) => Boolean(entry));
 			const groupSystemPrompt = systemPromptParts.length > 0 ? systemPromptParts.join("\n\n") : void 0;
-			const { counts } = await dispatchReplyWithDispatcher({
-				ctx: finalizeInboundContext({
-					Body: prompt,
-					RawBody: prompt,
-					CommandBody: prompt,
-					CommandArgs: commandArgs,
-					From: isDirectMessage ? `slack:${command.user_id}` : isRoom ? `slack:channel:${command.channel_id}` : `slack:group:${command.channel_id}`,
-					To: `slash:${command.user_id}`,
+			const ctxPayload = finalizeInboundContext({
+				Body: prompt,
+				RawBody: prompt,
+				CommandBody: prompt,
+				CommandArgs: commandArgs,
+				From: isDirectMessage ? `slack:${command.user_id}` : isRoom ? `slack:channel:${command.channel_id}` : `slack:group:${command.channel_id}`,
+				To: `slash:${command.user_id}`,
+				ChatType: isDirectMessage ? "direct" : "channel",
+				ConversationLabel: resolveConversationLabel({
 					ChatType: isDirectMessage ? "direct" : "channel",
-					ConversationLabel: resolveConversationLabel({
-						ChatType: isDirectMessage ? "direct" : "channel",
-						SenderName: senderName,
-						GroupSubject: isRoomish ? roomLabel : void 0,
-						From: isDirectMessage ? `slack:${command.user_id}` : isRoom ? `slack:channel:${command.channel_id}` : `slack:group:${command.channel_id}`
-					}) ?? (isDirectMessage ? senderName : roomLabel),
-					GroupSubject: isRoomish ? roomLabel : void 0,
-					GroupSystemPrompt: isRoomish ? groupSystemPrompt : void 0,
-					UntrustedContext: untrustedChannelMetadata ? [untrustedChannelMetadata] : void 0,
 					SenderName: senderName,
-					SenderId: command.user_id,
-					Provider: "slack",
-					Surface: "slack",
-					WasMentioned: true,
-					MessageSid: command.trigger_id,
-					Timestamp: Date.now(),
-					SessionKey: `agent:${route.agentId}:${slashCommand.sessionPrefix}:${command.user_id}`.toLowerCase(),
-					CommandTargetSessionKey: route.sessionKey,
-					AccountId: route.accountId,
-					CommandSource: "native",
-					CommandAuthorized: commandAuthorized,
-					OriginatingChannel: "slack",
-					OriginatingTo: `user:${command.user_id}`
-				}),
+					GroupSubject: isRoomish ? roomLabel : void 0,
+					From: isDirectMessage ? `slack:${command.user_id}` : isRoom ? `slack:channel:${command.channel_id}` : `slack:group:${command.channel_id}`
+				}) ?? (isDirectMessage ? senderName : roomLabel),
+				GroupSubject: isRoomish ? roomLabel : void 0,
+				GroupSystemPrompt: isRoomish ? groupSystemPrompt : void 0,
+				UntrustedContext: untrustedChannelMetadata ? [untrustedChannelMetadata] : void 0,
+				SenderName: senderName,
+				SenderId: command.user_id,
+				Provider: "slack",
+				Surface: "slack",
+				WasMentioned: true,
+				MessageSid: command.trigger_id,
+				Timestamp: Date.now(),
+				SessionKey: `agent:${route.agentId}:${slashCommand.sessionPrefix}:${command.user_id}`.toLowerCase(),
+				CommandTargetSessionKey: route.sessionKey,
+				AccountId: route.accountId,
+				CommandSource: "native",
+				CommandAuthorized: commandAuthorized,
+				OriginatingChannel: "slack",
+				OriginatingTo: `user:${command.user_id}`
+			});
+			const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
+				cfg,
+				agentId: route.agentId,
+				channel: "slack",
+				accountId: route.accountId
+			});
+			const { counts } = await dispatchReplyWithDispatcher({
+				ctx: ctxPayload,
 				cfg,
 				dispatcherOptions: {
-					responsePrefix: resolveEffectiveMessagesConfig(cfg, route.agentId).responsePrefix,
+					...prefixOptions,
 					deliver: async (payload) => {
 						await deliverSlackSlashReplies({
 							replies: [payload],
@@ -31602,7 +31804,10 @@ function registerSlackMonitorSlashCommands(params) {
 						runtime.error?.(danger(`slack slash ${info.kind} reply failed: ${String(err)}`));
 					}
 				},
-				replyOptions: { skillFilter: channelConfig?.skills }
+				replyOptions: {
+					skillFilter: channelConfig?.skills,
+					onModelSelected
+				}
 			});
 			if (counts.final + counts.tool + counts.block === 0) await deliverSlackSlashReplies({
 				replies: [],
@@ -32037,7 +32242,7 @@ async function fetchWithTimeout$1(url, timeoutMs, fetcher) {
 		clearTimeout(timer);
 	}
 }
-function isRecord$3(value) {
+function isRecord$4(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 function collectTelegramUnmentionedGroupIds(groups) {
@@ -32083,8 +32288,8 @@ async function auditTelegramGroupMembership(params) {
 	for (const chatId of params.groupIds) try {
 		const res = await fetchWithTimeout$1(`${base}/getChatMember?chat_id=${encodeURIComponent(chatId)}&user_id=${encodeURIComponent(String(params.botId))}`, params.timeoutMs, fetcher);
 		const json = await res.json();
-		if (!res.ok || !isRecord$3(json) || !json.ok) {
-			const desc = isRecord$3(json) && !json.ok && typeof json.description === "string" ? json.description : `getChatMember failed (${res.status})`;
+		if (!res.ok || !isRecord$4(json) || !json.ok) {
+			const desc = isRecord$4(json) && !json.ok && typeof json.description === "string" ? json.description : `getChatMember failed (${res.status})`;
 			groups.push({
 				chatId,
 				ok: false,
@@ -32095,7 +32300,7 @@ async function auditTelegramGroupMembership(params) {
 			});
 			continue;
 		}
-		const status = isRecord$3(json.result) ? json.result.status ?? null : null;
+		const status = isRecord$4(json.result) ? json.result.status ?? null : null;
 		const ok = status === "creator" || status === "administrator" || status === "member";
 		groups.push({
 			chatId,
@@ -32133,48 +32338,6 @@ function resolveTelegramAllowedUpdates() {
 	return updates;
 }
 
-//#endregion
-//#region src/agents/usage.ts
-const asFiniteNumber = (value) => {
-	if (typeof value !== "number") return;
-	if (!Number.isFinite(value)) return;
-	return value;
-};
-function hasNonzeroUsage(usage) {
-	if (!usage) return false;
-	return [
-		usage.input,
-		usage.output,
-		usage.cacheRead,
-		usage.cacheWrite,
-		usage.total
-	].some((v) => typeof v === "number" && Number.isFinite(v) && v > 0);
-}
-function normalizeUsage(raw) {
-	if (!raw) return;
-	const input = asFiniteNumber(raw.input ?? raw.inputTokens ?? raw.input_tokens ?? raw.promptTokens ?? raw.prompt_tokens);
-	const output = asFiniteNumber(raw.output ?? raw.outputTokens ?? raw.output_tokens ?? raw.completionTokens ?? raw.completion_tokens);
-	const cacheRead = asFiniteNumber(raw.cacheRead ?? raw.cache_read ?? raw.cache_read_input_tokens);
-	const cacheWrite = asFiniteNumber(raw.cacheWrite ?? raw.cache_write ?? raw.cache_creation_input_tokens);
-	const total = asFiniteNumber(raw.total ?? raw.totalTokens ?? raw.total_tokens);
-	if (input === void 0 && output === void 0 && cacheRead === void 0 && cacheWrite === void 0 && total === void 0) return;
-	return {
-		input,
-		output,
-		cacheRead,
-		cacheWrite,
-		total
-	};
-}
-function derivePromptTokens(usage) {
-	if (!usage) return;
-	const input = usage.input ?? 0;
-	const cacheRead = usage.cacheRead ?? 0;
-	const cacheWrite = usage.cacheWrite ?? 0;
-	const sum = input + cacheRead + cacheWrite;
-	return sum > 0 ? sum : void 0;
-}
-
 //#endregion
 //#region src/infra/git-commit.ts
 const formatCommit = (value) => {
@@ -33252,6 +33415,7 @@ async function resolveContextReport(params) {
 				groupChannel: params.sessionEntry?.groupChannel ?? void 0,
 				groupSpace: params.sessionEntry?.space ?? void 0,
 				spawnedBy: params.sessionEntry?.spawnedBy ?? void 0,
+				senderIsOwner: params.command.senderIsOwner,
 				modelProvider: params.provider,
 				modelId: params.model
 			});
@@ -34292,7 +34456,7 @@ const WINDOW_MINUTE_KEYS = [
 	"durationMinutes",
 	"minutes"
 ];
-function isRecord$2(value) {
+function isRecord$3(value) {
 	return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
 function pickNumber(record, keys) {
@@ -34348,7 +34512,7 @@ function collectUsageCandidates(root) {
 		if (!next) break;
 		scanned += 1;
 		const { value, depth } = next;
-		if (isRecord$2(value)) {
+		if (isRecord$3(value)) {
 			if (seen.has(value)) continue;
 			seen.add(value);
 			const score = scoreUsageRecord(value);
@@ -34358,7 +34522,7 @@ function collectUsageCandidates(root) {
 				depth
 			});
 			if (depth < MAX_SCAN_DEPTH) {
-				for (const nested of Object.values(value)) if (isRecord$2(nested) || Array.isArray(nested)) queue.push({
+				for (const nested of Object.values(value)) if (isRecord$3(nested) || Array.isArray(nested)) queue.push({
 					value: nested,
 					depth: depth + 1
 				});
@@ -34366,7 +34530,7 @@ function collectUsageCandidates(root) {
 			continue;
 		}
 		if (Array.isArray(value) && depth < MAX_SCAN_DEPTH) {
-			for (const nested of value) if (isRecord$2(nested) || Array.isArray(nested)) queue.push({
+			for (const nested of value) if (isRecord$3(nested) || Array.isArray(nested)) queue.push({
 				value: nested,
 				depth: depth + 1
 			});
@@ -34416,20 +34580,20 @@ async function fetchMinimaxUsage(apiKey, timeoutMs, fetchFn) {
 		error: `HTTP ${res.status}`
 	};
 	const data = await res.json().catch(() => null);
-	if (!isRecord$2(data)) return {
+	if (!isRecord$3(data)) return {
 		provider: "minimax",
 		displayName: PROVIDER_LABELS.minimax,
 		windows: [],
 		error: "Invalid JSON"
 	};
-	const baseResp = isRecord$2(data.base_resp) ? data.base_resp : void 0;
+	const baseResp = isRecord$3(data.base_resp) ? data.base_resp : void 0;
 	if (baseResp && typeof baseResp.status_code === "number" && baseResp.status_code !== 0) return {
 		provider: "minimax",
 		displayName: PROVIDER_LABELS.minimax,
 		windows: [],
 		error: baseResp.status_msg?.trim() || "API error"
 	};
-	const payload = isRecord$2(data.data) ? data.data : data;
+	const payload = isRecord$3(data.data) ? data.data : data;
 	const candidates = collectUsageCandidates(payload);
 	let usageRecord = payload;
 	let usedPercent = null;
@@ -35436,6 +35600,11 @@ const registerTelegramHandlers = ({ cfg, accountId, bot, opts, runtime, mediaMax
 			messageThreadId: params.messageThreadId
 		});
 		const peerId = params.isGroup ? buildTelegramGroupPeerId(params.chatId, resolvedThreadId) : String(params.chatId);
+		const parentPeer = buildTelegramParentPeer({
+			isGroup: params.isGroup,
+			resolvedThreadId,
+			chatId: params.chatId
+		});
 		const route = resolveAgentRoute({
 			cfg,
 			channel: "telegram",
@@ -35443,7 +35612,8 @@ const registerTelegramHandlers = ({ cfg, accountId, bot, opts, runtime, mediaMax
 			peer: {
 				kind: params.isGroup ? "group" : "dm",
 				id: peerId
-			}
+			},
+			parentPeer
 		});
 		const baseSessionKey = route.sessionKey;
 		const dmThreadId = !params.isGroup ? params.messageThreadId : void 0;
@@ -35584,7 +35754,7 @@ const registerTelegramHandlers = ({ cfg, accountId, bot, opts, runtime, mediaMax
 					}
 				}
 				const defaultGroupPolicy = cfg.channels?.defaults?.groupPolicy;
-				const groupPolicy = telegramCfg.groupPolicy ?? defaultGroupPolicy ?? "open";
+				const groupPolicy = firstDefined(topicConfig?.groupPolicy, groupConfig?.groupPolicy, telegramCfg.groupPolicy, defaultGroupPolicy, "open");
 				if (groupPolicy === "disabled") {
 					logVerbose(`Blocked telegram group message (groupPolicy: disabled)`);
 					return;
@@ -35835,7 +36005,7 @@ const registerTelegramHandlers = ({ cfg, accountId, bot, opts, runtime, mediaMax
 					}
 				}
 				const defaultGroupPolicy = cfg.channels?.defaults?.groupPolicy;
-				const groupPolicy = telegramCfg.groupPolicy ?? defaultGroupPolicy ?? "open";
+				const groupPolicy = firstDefined(topicConfig?.groupPolicy, groupConfig?.groupPolicy, telegramCfg.groupPolicy, defaultGroupPolicy, "open");
 				if (groupPolicy === "disabled") {
 					logVerbose(`Blocked telegram group message (groupPolicy: disabled)`);
 					return;
@@ -36034,6 +36204,11 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 	const replyThreadId = threadSpec.id;
 	const { groupConfig, topicConfig } = resolveTelegramGroupConfig(chatId, resolvedThreadId);
 	const peerId = isGroup ? buildTelegramGroupPeerId(chatId, resolvedThreadId) : String(chatId);
+	const parentPeer = buildTelegramParentPeer({
+		isGroup,
+		resolvedThreadId,
+		chatId
+	});
 	const route = resolveAgentRoute({
 		cfg,
 		channel: "telegram",
@@ -36041,7 +36216,8 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 		peer: {
 			kind: isGroup ? "group" : "dm",
 			id: peerId
-		}
+		},
+		parentPeer
 	});
 	const baseSessionKey = route.sessionKey;
 	const dmThreadId = threadSpec.scope === "dm" ? threadSpec.id : void 0;
@@ -36387,7 +36563,8 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 			sessionKey: route.mainSessionKey,
 			channel: "telegram",
 			to: String(chatId),
-			accountId: route.accountId
+			accountId: route.accountId,
+			threadId: dmThreadId != null ? String(dmThreadId) : void 0
 		} : void 0,
 		onRecordError: (err) => {
 			logVerbose(`telegram: failed updating session meta: ${String(err)}`);
@@ -36828,9 +37005,11 @@ const dispatchTelegramMessage = async ({ context, bot, cfg, runtime, replyToMode
 		await draftStream.flush();
 	};
 	const disableBlockStreaming = Boolean(draftStream) || (typeof telegramCfg.blockStreaming === "boolean" ? !telegramCfg.blockStreaming : void 0);
-	const prefixContext = createReplyPrefixContext({
+	const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
 		cfg,
-		agentId: route.agentId
+		agentId: route.agentId,
+		channel: "telegram",
+		accountId: route.accountId
 	});
 	const tableMode = resolveMarkdownTableMode({
 		cfg,
@@ -36839,7 +37018,7 @@ const dispatchTelegramMessage = async ({ context, bot, cfg, runtime, replyToMode
 	});
 	const chunkMode = resolveChunkMode(cfg, "telegram", route.accountId);
 	const sticker = ctxPayload.Sticker;
-	if (sticker?.fileUniqueId && ctxPayload.MediaPath) {
+	if (sticker?.fileId && sticker.fileUniqueId && ctxPayload.MediaPath) {
 		const agentDir = resolveAgentDir(cfg, route.agentId);
 		const stickerSupportsVision = await resolveStickerVisionSupport(cfg, route.agentId);
 		let description = sticker.cachedDescription ?? null;
@@ -36863,16 +37042,18 @@ const dispatchTelegramMessage = async ({ context, bot, cfg, runtime, replyToMode
 				ctxPayload.MediaUrls = void 0;
 				ctxPayload.MediaTypes = void 0;
 			}
-			cacheSticker({
-				fileId: sticker.fileId,
-				fileUniqueId: sticker.fileUniqueId,
-				emoji: sticker.emoji,
-				setName: sticker.setName,
-				description,
-				cachedAt: (/* @__PURE__ */ new Date()).toISOString(),
-				receivedFrom: ctxPayload.From
-			});
-			logVerbose(`telegram: cached sticker description for ${sticker.fileUniqueId}`);
+			if (sticker.fileId) {
+				cacheSticker({
+					fileId: sticker.fileId,
+					fileUniqueId: sticker.fileUniqueId,
+					emoji: sticker.emoji,
+					setName: sticker.setName,
+					description,
+					cachedAt: (/* @__PURE__ */ new Date()).toISOString(),
+					receivedFrom: ctxPayload.From
+				});
+				logVerbose(`telegram: cached sticker description for ${sticker.fileUniqueId}`);
+			} else logVerbose(`telegram: skipped sticker cache (missing fileId)`);
 		}
 	}
 	const replyQuoteText = ctxPayload.ReplyToIsQuote && ctxPayload.ReplyToBody ? ctxPayload.ReplyToBody.trim() || void 0 : void 0;
@@ -36884,8 +37065,7 @@ const dispatchTelegramMessage = async ({ context, bot, cfg, runtime, replyToMode
 		ctx: ctxPayload,
 		cfg,
 		dispatcherOptions: {
-			responsePrefix: prefixContext.responsePrefix,
-			responsePrefixContextProvider: prefixContext.responsePrefixContextProvider,
+			...prefixOptions,
 			deliver: async (payload, info) => {
 				if (info.kind === "final") {
 					await flushDraft();
@@ -36929,9 +37109,7 @@ const dispatchTelegramMessage = async ({ context, bot, cfg, runtime, replyToMode
 			skillFilter,
 			disableBlockStreaming,
 			onPartialReply: draftStream ? (payload) => updateDraftFromPartial(payload.text) : void 0,
-			onModelSelected: (ctx) => {
-				prefixContext.onModelSelected(ctx);
-			}
+			onModelSelected
 		}
 	});
 	draftStream?.stop();
@@ -37266,6 +37444,11 @@ const registerTelegramNativeCommands = ({ bot, cfg, runtime, accountId, telegram
 					});
 					return;
 				}
+				const parentPeer = buildTelegramParentPeer({
+					isGroup,
+					resolvedThreadId,
+					chatId
+				});
 				const route = resolveAgentRoute({
 					cfg,
 					channel: "telegram",
@@ -37273,7 +37456,8 @@ const registerTelegramNativeCommands = ({ bot, cfg, runtime, accountId, telegram
 					peer: {
 						kind: isGroup ? "group" : "dm",
 						id: isGroup ? buildTelegramGroupPeerId(chatId, resolvedThreadId) : String(chatId)
-					}
+					},
+					parentPeer
 				});
 				const baseSessionKey = route.sessionKey;
 				const dmThreadId = threadSpec.scope === "dm" ? threadSpec.id : void 0;
@@ -37324,11 +37508,17 @@ const registerTelegramNativeCommands = ({ bot, cfg, runtime, accountId, telegram
 					delivered: false,
 					skippedNonSilent: 0
 				};
+				const { onModelSelected, ...prefixOptions } = createReplyPrefixOptions({
+					cfg,
+					agentId: route.agentId,
+					channel: "telegram",
+					accountId: route.accountId
+				});
 				await dispatchReplyWithBufferedBlockDispatcher({
 					ctx: ctxPayload,
 					cfg,
 					dispatcherOptions: {
-						responsePrefix: resolveEffectiveMessagesConfig(cfg, route.agentId).responsePrefix,
+						...prefixOptions,
 						deliver: async (payload, _info) => {
 							if ((await deliverReplies({
 								replies: [payload],
@@ -37353,7 +37543,8 @@ const registerTelegramNativeCommands = ({ bot, cfg, runtime, accountId, telegram
 					},
 					replyOptions: {
 						skillFilter,
-						disableBlockStreaming
+						disableBlockStreaming,
+						onModelSelected
 					}
 				});
 				if (!deliveryState.delivered && deliveryState.skippedNonSilent > 0) await deliverReplies({
@@ -37458,7 +37649,7 @@ function getTelegramSequentialKey(ctx) {
 	}
 	const isGroup = msg?.chat?.type === "group" || msg?.chat?.type === "supergroup";
 	const messageThreadId = msg?.message_thread_id;
-	const isForum = (msg?.chat)?.is_forum;
+	const isForum = msg?.chat?.is_forum;
 	const threadId = isGroup ? resolveTelegramForumThreadId({
 		isForum,
 		messageThreadId
@@ -37493,10 +37684,6 @@ function createTelegramBot(opts) {
 	bot.catch((err) => {
 		runtime.error?.(danger(`telegram bot error: ${formatUncaughtError(err)}`));
 	});
-	bot.catch((err) => {
-		const message = err instanceof Error ? err.message : String(err);
-		runtime.error?.(danger(`telegram bot error: ${message}`));
-	});
 	const recentUpdates = createTelegramUpdateDedupe();
 	let lastUpdateId = typeof opts.updateOffset?.lastUpdateId === "number" ? opts.updateOffset.lastUpdateId : null;
 	const recordUpdateId = (ctx) => {
@@ -37526,9 +37713,8 @@ function createTelegramBot(opts) {
 			if (typeof value === "string" && value.length > MAX_RAW_UPDATE_STRING) return `${value.slice(0, MAX_RAW_UPDATE_STRING)}...`;
 			if (Array.isArray(value) && value.length > MAX_RAW_UPDATE_ARRAY) return [...value.slice(0, MAX_RAW_UPDATE_ARRAY), `...(${value.length - MAX_RAW_UPDATE_ARRAY} more)`];
 			if (value && typeof value === "object") {
-				const obj = value;
-				if (seen.has(obj)) return "[Circular]";
-				seen.add(obj);
+				if (seen.has(value)) return "[Circular]";
+				seen.add(value);
 			}
 			return value;
 		});
@@ -37572,9 +37758,8 @@ function createTelegramBot(opts) {
 	const streamMode = resolveTelegramStreamMode(telegramCfg);
 	let botHasTopicsEnabled;
 	const resolveBotTopicsEnabled = async (ctx) => {
-		const fromCtx = ctx?.me;
-		if (typeof fromCtx?.has_topics_enabled === "boolean") {
-			botHasTopicsEnabled = fromCtx.has_topics_enabled;
+		if (typeof ctx?.me?.has_topics_enabled === "boolean") {
+			botHasTopicsEnabled = ctx.me.has_topics_enabled;
 			return botHasTopicsEnabled;
 		}
 		if (typeof botHasTopicsEnabled === "boolean") return botHasTopicsEnabled;
@@ -37696,27 +37881,28 @@ function createTelegramBot(opts) {
 			else if (!senderName && senderUsername) senderLabel = senderUsername;
 			if (!senderLabel && user?.id) senderLabel = `id:${user.id}`;
 			senderLabel = senderLabel || "unknown";
-			const messageThreadId = reaction.message_thread_id;
-			const resolvedThreadId = resolveTelegramForumThreadId({
-				isForum: reaction.chat.is_forum === true,
-				messageThreadId
-			});
 			const isGroup = reaction.chat.type === "group" || reaction.chat.type === "supergroup";
+			const isForum = reaction.chat.is_forum === true;
+			const resolvedThreadId = isForum ? resolveTelegramForumThreadId({
+				isForum,
+				messageThreadId: void 0
+			}) : void 0;
 			const peerId = isGroup ? buildTelegramGroupPeerId(chatId, resolvedThreadId) : String(chatId);
-			const baseSessionKey = resolveAgentRoute({
+			const parentPeer = buildTelegramParentPeer({
+				isGroup,
+				resolvedThreadId,
+				chatId
+			});
+			const sessionKey = resolveAgentRoute({
 				cfg,
 				channel: "telegram",
 				accountId: account.accountId,
 				peer: {
 					kind: isGroup ? "group" : "dm",
 					id: peerId
-				}
+				},
+				parentPeer
 			}).sessionKey;
-			const dmThreadId = !isGroup ? messageThreadId : void 0;
-			const sessionKey = (dmThreadId != null ? resolveThreadSessionKeys({
-				baseSessionKey,
-				threadId: String(dmThreadId)
-			}) : null)?.sessionKey ?? baseSessionKey;
 			for (const r of addedReactions) {
 				const emoji = r.emoji;
 				const text = `Telegram reaction added: ${emoji} by ${senderLabel} on msg ${messageId}`;
@@ -38809,6 +38995,8 @@ function normalizePunctuation(value) {
 //#endregion
 //#region src/agents/sandbox-paths.ts
 const UNICODE_SPACES$1 = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
+const HTTP_URL_RE = /^https?:\/\//i;
+const DATA_URL_RE = /^data:/i;
 function normalizeUnicodeSpaces$1(str) {
 	return str.replace(UNICODE_SPACES$1, " ");
 }
@@ -38842,6 +39030,26 @@ async function assertSandboxPath(params) {
 	await assertNoSymlink(resolved.relative, path.resolve(params.root));
 	return resolved;
 }
+function assertMediaNotDataUrl(media) {
+	const raw = media.trim();
+	if (DATA_URL_RE.test(raw)) throw new Error("data: URLs are not supported for media. Use buffer instead.");
+}
+async function resolveSandboxedMediaSource(params) {
+	const raw = params.media.trim();
+	if (!raw) return raw;
+	if (HTTP_URL_RE.test(raw)) return raw;
+	let candidate = raw;
+	if (/^file:\/\//i.test(candidate)) try {
+		candidate = fileURLToPath(candidate);
+	} catch {
+		throw new Error(`Invalid file:// URL for sandboxed media: ${raw}`);
+	}
+	return (await assertSandboxPath({
+		filePath: candidate,
+		cwd: params.sandboxRoot,
+		root: params.sandboxRoot
+	})).resolved;
+}
 async function assertNoSymlink(relative, root) {
 	if (!relative) return;
 	const parts = relative.split(path.sep).filter(Boolean);
@@ -42665,7 +42873,7 @@ function migrateLegacyCronPayload(payload) {
 //#endregion
 //#region src/cron/normalize.ts
 const DEFAULT_OPTIONS = { applyDefaults: false };
-function isRecord$1(value) {
+function isRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function coerceSchedule(schedule) {
@@ -42731,12 +42939,12 @@ function stripLegacyDeliveryFields(payload) {
 	if ("bestEffortDeliver" in payload) delete payload.bestEffortDeliver;
 }
 function unwrapJob(raw) {
-	if (isRecord$1(raw.data)) return raw.data;
-	if (isRecord$1(raw.job)) return raw.job;
+	if (isRecord$2(raw.data)) return raw.data;
+	if (isRecord$2(raw.job)) return raw.job;
 	return raw;
 }
 function normalizeCronJobInput(raw, options = DEFAULT_OPTIONS) {
-	if (!isRecord$1(raw)) return null;
+	if (!isRecord$2(raw)) return null;
 	const base = unwrapJob(raw);
 	const next = { ...base };
 	if ("agentId" in base) {
@@ -42757,20 +42965,20 @@ function normalizeCronJobInput(raw, options = DEFAULT_OPTIONS) {
 			if (trimmed === "false") next.enabled = false;
 		}
 	}
-	if (isRecord$1(base.schedule)) next.schedule = coerceSchedule(base.schedule);
-	if (isRecord$1(base.payload)) next.payload = coercePayload(base.payload);
-	if (isRecord$1(base.delivery)) next.delivery = coerceDelivery(base.delivery);
-	if (isRecord$1(base.isolation)) delete next.isolation;
+	if (isRecord$2(base.schedule)) next.schedule = coerceSchedule(base.schedule);
+	if (isRecord$2(base.payload)) next.payload = coercePayload(base.payload);
+	if (isRecord$2(base.delivery)) next.delivery = coerceDelivery(base.delivery);
+	if (isRecord$2(base.isolation)) delete next.isolation;
 	if (options.applyDefaults) {
 		if (!next.wakeMode) next.wakeMode = "next-heartbeat";
 		if (typeof next.enabled !== "boolean") next.enabled = true;
-		if (!next.sessionTarget && isRecord$1(next.payload)) {
+		if (!next.sessionTarget && isRecord$2(next.payload)) {
 			const kind = typeof next.payload.kind === "string" ? next.payload.kind : "";
 			if (kind === "systemEvent") next.sessionTarget = "main";
 			if (kind === "agentTurn") next.sessionTarget = "isolated";
 		}
-		if ("schedule" in next && isRecord$1(next.schedule) && next.schedule.kind === "at" && !("deleteAfterRun" in next)) next.deleteAfterRun = true;
-		const payload = isRecord$1(next.payload) ? next.payload : null;
+		if ("schedule" in next && isRecord$2(next.schedule) && next.schedule.kind === "at" && !("deleteAfterRun" in next)) next.deleteAfterRun = true;
+		const payload = isRecord$2(next.payload) ? next.payload : null;
 		const payloadKind = payload && typeof payload.kind === "string" ? payload.kind : "";
 		const sessionTarget = typeof next.sessionTarget === "string" ? next.sessionTarget : "";
 		const isIsolatedAgentTurn = sessionTarget === "isolated" || sessionTarget === "" && payloadKind === "agentTurn";
@@ -42898,6 +43106,37 @@ async function buildReminderContextLines(params) {
 		return [];
 	}
 }
+function isRecord$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function stripThreadSuffixFromSessionKey(sessionKey) {
+	const idx = sessionKey.toLowerCase().lastIndexOf(":thread:");
+	if (idx <= 0) return sessionKey;
+	const parent = sessionKey.slice(0, idx).trim();
+	return parent ? parent : sessionKey;
+}
+function inferDeliveryFromSessionKey(agentSessionKey) {
+	const rawSessionKey = agentSessionKey?.trim();
+	if (!rawSessionKey) return null;
+	const parsed = parseAgentSessionKey(stripThreadSuffixFromSessionKey(rawSessionKey));
+	if (!parsed || !parsed.rest) return null;
+	const parts = parsed.rest.split(":").filter(Boolean);
+	if (parts.length === 0) return null;
+	const head = parts[0]?.trim().toLowerCase();
+	if (!head || head === "main" || head === "subagent" || head === "acp") return null;
+	const markerIndex = parts.findIndex((part) => part === "dm" || part === "group" || part === "channel");
+	if (markerIndex === -1) return null;
+	const peerId = parts.slice(markerIndex + 1).join(":").trim();
+	if (!peerId) return null;
+	let channel;
+	if (markerIndex >= 1) channel = parts[0]?.trim().toLowerCase();
+	const delivery = {
+		mode: "announce",
+		to: peerId
+	};
+	if (channel) delivery.channel = channel;
+	return delivery;
+}
 function createCronTool(opts) {
 	return {
 		label: "Cron",
@@ -42978,6 +43217,19 @@ Use jobId as the canonical identifier; id is accepted for compatibility. Use con
 						}) : void 0;
 						if (agentId) job.agentId = agentId;
 					}
+					if (opts?.agentSessionKey && job && typeof job === "object" && "payload" in job && job.payload?.kind === "agentTurn") {
+						const deliveryValue = job.delivery;
+						const delivery = isRecord$1(deliveryValue) ? deliveryValue : void 0;
+						const mode = (typeof delivery?.mode === "string" ? delivery.mode : "").trim().toLowerCase();
+						const hasTarget = typeof delivery?.channel === "string" && delivery.channel.trim() || typeof delivery?.to === "string" && delivery.to.trim();
+						if ((deliveryValue == null || delivery) && mode !== "none" && !hasTarget) {
+							const inferred = inferDeliveryFromSessionKey(opts.agentSessionKey);
+							if (inferred) job.delivery = {
+								...delivery,
+								...inferred
+							};
+						}
+					}
 					const contextMessages = typeof params.contextMessages === "number" && Number.isFinite(params.contextMessages) ? params.contextMessages : 0;
 					if (job && typeof job === "object" && "payload" in job && job.payload?.kind === "systemEvent") {
 						const payload = job.payload;
@@ -43029,6 +43281,65 @@ Use jobId as the canonical identifier; id is accepted for compatibility. Use con
 	};
 }
 
+//#endregion
+//#region src/infra/restart-sentinel.ts
+const SENTINEL_FILENAME = "restart-sentinel.json";
+function formatDoctorNonInteractiveHint(env = process.env) {
+	return `Run: ${formatCliCommand("openclaw doctor --non-interactive", env)}`;
+}
+function resolveRestartSentinelPath(env = process.env) {
+	return path.join(resolveStateDir(env), SENTINEL_FILENAME);
+}
+async function writeRestartSentinel(payload, env = process.env) {
+	const filePath = resolveRestartSentinelPath(env);
+	await fs$1.mkdir(path.dirname(filePath), { recursive: true });
+	const data = {
+		version: 1,
+		payload
+	};
+	await fs$1.writeFile(filePath, `${JSON.stringify(data, null, 2)}\n`, "utf-8");
+	return filePath;
+}
+async function readRestartSentinel(env = process.env) {
+	const filePath = resolveRestartSentinelPath(env);
+	try {
+		const raw = await fs$1.readFile(filePath, "utf-8");
+		let parsed;
+		try {
+			parsed = JSON.parse(raw);
+		} catch {
+			await fs$1.unlink(filePath).catch(() => {});
+			return null;
+		}
+		if (!parsed || parsed.version !== 1 || !parsed.payload) {
+			await fs$1.unlink(filePath).catch(() => {});
+			return null;
+		}
+		return parsed;
+	} catch {
+		return null;
+	}
+}
+async function consumeRestartSentinel(env = process.env) {
+	const filePath = resolveRestartSentinelPath(env);
+	const parsed = await readRestartSentinel(env);
+	if (!parsed) return null;
+	await fs$1.unlink(filePath).catch(() => {});
+	return parsed;
+}
+function formatRestartSentinelMessage(payload) {
+	return `GatewayRestart:\n${JSON.stringify(payload, null, 2)}`;
+}
+function summarizeRestartSentinel(payload) {
+	return `Gateway restart ${payload.kind} ${payload.status}${payload.stats?.mode ? ` (${payload.stats.mode})` : ""}`.trim();
+}
+function trimLogTail(input, maxChars = 8e3) {
+	if (!input) return null;
+	const text = input.trimEnd();
+	if (text.length <= maxChars) return text;
+	return `…${text.slice(text.length - maxChars)}`;
+}
+
 //#endregion
 //#region src/infra/restart.ts
 const SPAWN_TIMEOUT_MS = 2e3;
@@ -43477,26 +43788,15 @@ function isAbortError$1(err) {
 function shouldRethrowAbort(err) {
 	return isAbortError$1(err) && !isTimeoutError(err);
 }
-function buildAllowedModelKeys(cfg, defaultProvider) {
-	const rawAllowlist = (() => {
-		const modelMap = cfg?.agents?.defaults?.models ?? {};
-		return Object.keys(modelMap);
-	})();
-	if (rawAllowlist.length === 0) return null;
-	const keys = /* @__PURE__ */ new Set();
-	for (const raw of rawAllowlist) {
-		const parsed = parseModelRef(String(raw ?? ""), defaultProvider);
-		if (!parsed) continue;
-		keys.add(modelKey(parsed.provider, parsed.model));
-	}
-	return keys.size > 0 ? keys : null;
-}
 function resolveImageFallbackCandidates(params) {
 	const aliasIndex = buildModelAliasIndex({
 		cfg: params.cfg ?? {},
 		defaultProvider: params.defaultProvider
 	});
-	const allowlist = buildAllowedModelKeys(params.cfg, params.defaultProvider);
+	const allowlist = buildConfiguredAllowlistKeys({
+		cfg: params.cfg,
+		defaultProvider: params.defaultProvider
+	});
 	const seen = /* @__PURE__ */ new Set();
 	const candidates = [];
 	const addCandidate = (candidate, enforceAllowlist) => {
@@ -43544,7 +43844,10 @@ function resolveFallbackCandidates(params) {
 		cfg: params.cfg ?? {},
 		defaultProvider
 	});
-	const allowlist = buildAllowedModelKeys(params.cfg, defaultProvider);
+	const allowlist = buildConfiguredAllowlistKeys({
+		cfg: params.cfg,
+		defaultProvider
+	});
 	const seen = /* @__PURE__ */ new Set();
 	const candidates = [];
 	const addCandidate = (candidate, enforceAllowlist) => {
@@ -43689,6 +43992,8 @@ async function runWithImageModelFallback(params) {
 //#endregion
 //#region src/agents/tools/image-tool.ts
 const DEFAULT_PROMPT = "Describe the image.";
+const ANTHROPIC_IMAGE_PRIMARY = "anthropic/claude-opus-4-6";
+const ANTHROPIC_IMAGE_FALLBACK = "anthropic/claude-opus-4-5";
 function resolveDefaultModelRef(cfg) {
 	if (cfg) {
 		const resolved = resolveConfiguredModelRef({
@@ -43749,10 +44054,10 @@ function resolveImageModelConfigForTool(params) {
 	if (primary.provider === "minimax" && providerOk) preferred = "minimax/MiniMax-VL-01";
 	else if (providerOk && providerVisionFromConfig) preferred = providerVisionFromConfig;
 	else if (primary.provider === "openai" && openaiOk) preferred = "openai/gpt-5-mini";
-	else if (primary.provider === "anthropic" && anthropicOk) preferred = "anthropic/claude-opus-4-5";
+	else if (primary.provider === "anthropic" && anthropicOk) preferred = ANTHROPIC_IMAGE_PRIMARY;
 	if (preferred?.trim()) {
 		if (openaiOk) addFallback("openai/gpt-5-mini");
-		if (anthropicOk) addFallback("anthropic/claude-opus-4-5");
+		if (anthropicOk) addFallback(ANTHROPIC_IMAGE_FALLBACK);
 		const pruned = fallbacks.filter((ref) => ref !== preferred);
 		return {
 			primary: preferred,
@@ -43760,13 +44065,16 @@ function resolveImageModelConfigForTool(params) {
 		};
 	}
 	if (openaiOk) {
-		if (anthropicOk) addFallback("anthropic/claude-opus-4-5");
+		if (anthropicOk) addFallback(ANTHROPIC_IMAGE_FALLBACK);
 		return {
 			primary: "openai/gpt-5-mini",
 			...fallbacks.length ? { fallbacks } : {}
 		};
 	}
-	if (anthropicOk) return { primary: "anthropic/claude-opus-4-5" };
+	if (anthropicOk) return {
+		primary: ANTHROPIC_IMAGE_PRIMARY,
+		fallbacks: [ANTHROPIC_IMAGE_FALLBACK]
+	};
 	return null;
 }
 function pickMaxBytes(cfg, maxBytesMb) {
@@ -44657,10 +44965,27 @@ function resolveHeartbeatDeliveryTarget(params) {
 		explicitTo: heartbeat?.to,
 		mode: "heartbeat"
 	});
+	const heartbeatAccountId = heartbeat?.accountId?.trim();
+	let effectiveAccountId = heartbeatAccountId || resolvedTarget.accountId;
+	if (heartbeatAccountId && resolvedTarget.channel) {
+		const listAccountIds = getChannelPlugin(resolvedTarget.channel)?.config.listAccountIds;
+		const accountIds = listAccountIds ? listAccountIds(cfg) : [];
+		if (accountIds.length > 0) {
+			const normalizedAccountId = normalizeAccountId$3(heartbeatAccountId);
+			if (!new Set(accountIds.map((accountId) => normalizeAccountId$3(accountId))).has(normalizedAccountId)) return {
+				channel: "none",
+				reason: "unknown-account",
+				accountId: normalizedAccountId,
+				lastChannel: resolvedTarget.lastChannel,
+				lastAccountId: resolvedTarget.lastAccountId
+			};
+			effectiveAccountId = normalizedAccountId;
+		}
+	}
 	if (!resolvedTarget.channel || !resolvedTarget.to) return {
 		channel: "none",
 		reason: "no-target",
-		accountId: resolvedTarget.accountId,
+		accountId: effectiveAccountId,
 		lastChannel: resolvedTarget.lastChannel,
 		lastAccountId: resolvedTarget.lastAccountId
 	};
@@ -44668,13 +44993,13 @@ function resolveHeartbeatDeliveryTarget(params) {
 		channel: resolvedTarget.channel,
 		to: resolvedTarget.to,
 		cfg,
-		accountId: resolvedTarget.accountId,
+		accountId: effectiveAccountId,
 		mode: "heartbeat"
 	});
 	if (!resolved.ok) return {
 		channel: "none",
 		reason: "no-target",
-		accountId: resolvedTarget.accountId,
+		accountId: effectiveAccountId,
 		lastChannel: resolvedTarget.lastChannel,
 		lastAccountId: resolvedTarget.lastAccountId
 	};
@@ -44684,7 +45009,7 @@ function resolveHeartbeatDeliveryTarget(params) {
 			channel: resolvedTarget.channel,
 			to: resolvedTarget.to,
 			cfg,
-			accountId: resolvedTarget.accountId,
+			accountId: effectiveAccountId,
 			mode: "explicit"
 		});
 		if (explicit.ok && explicit.to !== resolved.to) reason = "allowFrom-fallback";
@@ -44693,7 +45018,7 @@ function resolveHeartbeatDeliveryTarget(params) {
 		channel: resolvedTarget.channel,
 		to: resolved.to,
 		reason,
-		accountId: resolvedTarget.accountId,
+		accountId: effectiveAccountId,
 		lastChannel: resolvedTarget.lastChannel,
 		lastAccountId: resolvedTarget.lastAccountId
 	};
@@ -44718,9 +45043,10 @@ function resolveHeartbeatSenderId(params) {
 }
 function resolveHeartbeatSenderContext(params) {
 	const provider = params.delivery.channel !== "none" ? params.delivery.channel : params.delivery.lastChannel;
+	const accountId = params.delivery.accountId ?? (provider === params.delivery.lastChannel ? params.delivery.lastAccountId : void 0);
 	const allowFrom = provider ? getChannelPlugin(provider)?.config.resolveAllowFrom?.({
 		cfg: params.cfg,
-		accountId: provider === params.delivery.lastChannel ? params.delivery.lastAccountId : void 0
+		accountId
 	}) ?? [] : [];
 	return {
 		sender: resolveHeartbeatSenderId({
@@ -45810,6 +46136,24 @@ function resolveSlackAutoThreadId(params) {
 	if (context.replyToMode === "first" && context.hasRepliedRef?.value) return;
 	return context.currentThreadTs;
 }
+/**
+* Auto-inject Telegram forum topic thread ID when the message tool targets
+* the same chat the session originated from.  Mirrors the Slack auto-threading
+* pattern so media, buttons, and other tool-sent messages land in the correct
+* topic instead of the General Topic.
+*
+* Unlike Slack, we do not gate on `replyToMode` here: Telegram forum topics
+* are persistent sub-channels (not ephemeral reply threads), so auto-injection
+* should always apply when the target chat matches.
+*/
+function resolveTelegramAutoThreadId(params) {
+	const context = params.toolContext;
+	if (!context?.currentThreadTs || !context.currentChannelId) return;
+	const parsedTo = parseTelegramTarget(params.to);
+	const parsedChannel = parseTelegramTarget(context.currentChannelId);
+	if (parsedTo.chatId.toLowerCase() !== parsedChannel.chatId.toLowerCase()) return;
+	return context.currentThreadTs;
+}
 function resolveAttachmentMaxBytes(params) {
 	const fallback = params.cfg.agents?.defaults?.mediaMaxMb;
 	if (params.channel !== "bluebubbles") return typeof fallback === "number" ? fallback * 1024 * 1024 : void 0;
@@ -45858,6 +46202,42 @@ function normalizeBase64Payload(params) {
 		contentType: params.contentType ?? mime
 	};
 }
+async function normalizeSandboxMediaParams(params) {
+	const sandboxRoot = params.sandboxRoot?.trim();
+	for (const key of [
+		"media",
+		"path",
+		"filePath"
+	]) {
+		const raw = readStringParam(params.args, key, { trim: false });
+		if (!raw) continue;
+		assertMediaNotDataUrl(raw);
+		if (!sandboxRoot) continue;
+		const normalized = await resolveSandboxedMediaSource({
+			media: raw,
+			sandboxRoot
+		});
+		if (normalized !== raw) params.args[key] = normalized;
+	}
+}
+async function normalizeSandboxMediaList(params) {
+	const sandboxRoot = params.sandboxRoot?.trim();
+	const normalized = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const value of params.values) {
+		const raw = value?.trim();
+		if (!raw) continue;
+		assertMediaNotDataUrl(raw);
+		const resolved = sandboxRoot ? await resolveSandboxedMediaSource({
+			media: raw,
+			sandboxRoot
+		}) : raw;
+		if (seen.has(resolved)) continue;
+		seen.add(resolved);
+		normalized.push(resolved);
+	}
+	return normalized;
+}
 async function hydrateSetGroupIconParams(params) {
 	if (params.action !== "setGroupIcon") return;
 	const mediaHint = readStringParam(params.args, "media", { trim: false });
@@ -46078,6 +46458,7 @@ async function handleSendAction(ctx) {
 		required: !mediaHint && !hasCard,
 		allowEmpty: true
 	}) ?? "";
+	if (message.includes("\\n")) message = message.replaceAll("\\n", "\n");
 	const parsed = parseReplyDirectives(message);
 	const mergedMediaUrls = [];
 	const seenMedia = /* @__PURE__ */ new Set();
@@ -46091,6 +46472,12 @@ async function handleSendAction(ctx) {
 	pushMedia(mediaHint);
 	for (const url of parsed.mediaUrls ?? []) pushMedia(url);
 	pushMedia(parsed.mediaUrl);
+	const normalizedMediaUrls = await normalizeSandboxMediaList({
+		values: mergedMediaUrls,
+		sandboxRoot: input.sandboxRoot
+	});
+	mergedMediaUrls.length = 0;
+	mergedMediaUrls.push(...normalizedMediaUrls);
 	message = parsed.text;
 	params.message = message;
 	if (!params.replyTo && parsed.replyToId) params.replyTo = parsed.replyToId;
@@ -46115,6 +46502,12 @@ async function handleSendAction(ctx) {
 		to,
 		toolContext: input.toolContext
 	}) : void 0;
+	const telegramAutoThreadId = channel === "telegram" && !threadId ? resolveTelegramAutoThreadId({
+		to,
+		toolContext: input.toolContext
+	}) : void 0;
+	const resolvedThreadId = threadId ?? slackAutoThreadId ?? telegramAutoThreadId;
+	if (resolvedThreadId && !params.threadId) params.threadId = resolvedThreadId;
 	const outboundRoute = agentId && !dryRun ? await resolveOutboundSessionRoute({
 		cfg,
 		channel,
@@ -46123,7 +46516,7 @@ async function handleSendAction(ctx) {
 		target: to,
 		resolvedTarget,
 		replyToId,
-		threadId: threadId ?? slackAutoThreadId
+		threadId: resolvedThreadId
 	}) : null;
 	if (outboundRoute && agentId && !dryRun) await ensureOutboundSessionEntry({
 		cfg,
@@ -46306,6 +46699,10 @@ async function runMessageAction(input) {
 	const accountId = readStringParam(params, "accountId") ?? input.defaultAccountId;
 	if (accountId) params.accountId = accountId;
 	const dryRun = Boolean(input.dryRun ?? readBooleanParam(params, "dryRun"));
+	await normalizeSandboxMediaParams({
+		args: params,
+		sandboxRoot: input.sandboxRoot
+	});
 	await hydrateSendAttachmentParams({
 		cfg,
 		channel,
@@ -46399,7 +46796,7 @@ function buildSendSchema(options) {
 		message: Type.Optional(Type.String()),
 		effectId: Type.Optional(Type.String({ description: "Message effect name/id for sendWithEffect (e.g., invisible ink)." })),
 		effect: Type.Optional(Type.String({ description: "Alias for effectId (e.g., invisible-ink, balloons)." })),
-		media: Type.Optional(Type.String()),
+		media: Type.Optional(Type.String({ description: "Media URL or local path. data: URLs are not supported here, use buffer." })),
 		filename: Type.Optional(Type.String()),
 		buffer: Type.Optional(Type.String({ description: "Base64 payload for attachments (optionally a data: URL)." })),
 		contentType: Type.Optional(Type.String()),
@@ -46629,15 +47026,6 @@ function createMessageTool(options) {
 			if (options?.requireExplicitTarget === true && actionNeedsExplicitTarget(action)) {
 				if (!(typeof params.target === "string" && params.target.trim().length > 0 || typeof params.to === "string" && params.to.trim().length > 0 || typeof params.channelId === "string" && params.channelId.trim().length > 0 || Array.isArray(params.targets) && params.targets.some((value) => typeof value === "string" && value.trim().length > 0))) throw new Error("Explicit message target required for this run. Provide target/targets (and channel when needed).");
 			}
-			const sandboxRoot = options?.sandboxRoot;
-			if (sandboxRoot) for (const key of ["filePath", "path"]) {
-				const raw = readStringParam(params, key, { trim: false });
-				if (raw) await assertSandboxPath({
-					filePath: raw,
-					cwd: sandboxRoot,
-					root: sandboxRoot
-				});
-			}
 			const accountId = readStringParam(params, "accountId") ?? agentAccountId;
 			if (accountId) params.accountId = accountId;
 			const gateway = {
@@ -46667,6 +47055,7 @@ function createMessageTool(options) {
 					sessionKey: options.agentSessionKey,
 					config: cfg
 				}) : void 0,
+				sandboxRoot: options?.sandboxRoot,
 				abortSignal: signal
 			});
 			const toolResult = getToolResult(result);
@@ -47119,7 +47508,7 @@ function archiveFileOnDisk(filePath, reason) {
 	fs.renameSync(filePath, archived);
 	return archived;
 }
-function jsonUtf8Bytes(value) {
+function jsonUtf8Bytes$1(value) {
 	try {
 		return Buffer.byteLength(JSON.stringify(value), "utf8");
 	} catch {
@@ -47131,7 +47520,7 @@ function capArrayByJsonBytes(items, maxBytes) {
 		items,
 		bytes: 2
 	};
-	const parts = items.map((item) => jsonUtf8Bytes(item));
+	const parts = items.map((item) => jsonUtf8Bytes$1(item));
 	let bytes = 2 + parts.reduce((a, b) => a + b, 0) + (items.length - 1);
 	let start = 0;
 	while (bytes > maxBytes && start < items.length - 1) {
@@ -47248,22 +47637,10 @@ function extractPreviewText(message) {
 	return null;
 }
 function isToolCall(message) {
-	if (message.toolName || message.tool_name) return true;
-	if (!Array.isArray(message.content)) return false;
-	return message.content.some((entry) => {
-		if (entry?.name) return true;
-		const raw = typeof entry?.type === "string" ? entry.type.toLowerCase() : "";
-		return raw === "toolcall" || raw === "tool_call";
-	});
+	return hasToolCall(message);
 }
 function extractToolNames(message) {
-	const names = [];
-	if (Array.isArray(message.content)) {
-		for (const entry of message.content) if (typeof entry?.name === "string" && entry.name.trim()) names.push(entry.name.trim());
-	}
-	const toolName = typeof message.toolName === "string" ? message.toolName : message.tool_name;
-	if (typeof toolName === "string" && toolName.trim()) names.push(toolName.trim());
-	return names;
+	return extractToolCallNames(message);
 }
 function extractMediaSummary(message) {
 	if (!Array.isArray(message.content)) return null;
@@ -47643,8 +48020,11 @@ function getSessionDefaults(cfg) {
 		contextTokens: contextTokens ?? null
 	};
 }
-function resolveSessionModelRef(cfg, entry) {
-	const resolved = resolveConfiguredModelRef({
+function resolveSessionModelRef(cfg, entry, agentId) {
+	const resolved = agentId ? resolveDefaultModelForAgent({
+		cfg,
+		agentId
+	}) : resolveConfiguredModelRef({
 		cfg,
 		defaultProvider: DEFAULT_PROVIDER,
 		defaultModel: DEFAULT_MODEL
@@ -47712,6 +48092,9 @@ function listSessionsFromStore(params) {
 			key
 		}) : void 0) ?? entry?.label ?? originLabel;
 		const deliveryFields = normalizeSessionDeliveryFields(entry);
+		const resolvedModel = resolveSessionModelRef(cfg, entry, normalizeAgentId(parseAgentSessionKey(key)?.agentId ?? resolveDefaultAgentId(cfg)));
+		const modelProvider = resolvedModel.provider ?? DEFAULT_PROVIDER;
+		const model = resolvedModel.model ?? DEFAULT_MODEL;
 		return {
 			key,
 			entry,
@@ -47737,8 +48120,8 @@ function listSessionsFromStore(params) {
 			outputTokens: entry?.outputTokens,
 			totalTokens: total,
 			responseUsage: entry?.responseUsage,
-			modelProvider: entry?.modelProvider,
-			model: entry?.model,
+			modelProvider,
+			model,
 			contextTokens: entry?.contextTokens,
 			deliveryContext: deliveryFields.deliveryContext,
 			lastChannel: deliveryFields.lastChannel ?? entry?.lastChannel,
@@ -48082,6 +48465,131 @@ const SessionsHistoryToolSchema = Type.Object({
 	limit: Type.Optional(Type.Number({ minimum: 1 })),
 	includeTools: Type.Optional(Type.Boolean())
 });
+const SESSIONS_HISTORY_MAX_BYTES = 80 * 1024;
+const SESSIONS_HISTORY_TEXT_MAX_CHARS = 4e3;
+function truncateHistoryText(text) {
+	if (text.length <= SESSIONS_HISTORY_TEXT_MAX_CHARS) return {
+		text,
+		truncated: false
+	};
+	return {
+		text: `${truncateUtf16Safe(text, SESSIONS_HISTORY_TEXT_MAX_CHARS)}\n…(truncated)…`,
+		truncated: true
+	};
+}
+function sanitizeHistoryContentBlock(block) {
+	if (!block || typeof block !== "object") return {
+		block,
+		truncated: false
+	};
+	const entry = { ...block };
+	let truncated = false;
+	const type = typeof entry.type === "string" ? entry.type : "";
+	if (typeof entry.text === "string") {
+		const res = truncateHistoryText(entry.text);
+		entry.text = res.text;
+		truncated ||= res.truncated;
+	}
+	if (type === "thinking") {
+		if (typeof entry.thinking === "string") {
+			const res = truncateHistoryText(entry.thinking);
+			entry.thinking = res.text;
+			truncated ||= res.truncated;
+		}
+		if ("thinkingSignature" in entry) {
+			delete entry.thinkingSignature;
+			truncated = true;
+		}
+	}
+	if (typeof entry.partialJson === "string") {
+		const res = truncateHistoryText(entry.partialJson);
+		entry.partialJson = res.text;
+		truncated ||= res.truncated;
+	}
+	if (type === "image") {
+		const data = typeof entry.data === "string" ? entry.data : void 0;
+		const bytes = data ? data.length : void 0;
+		if ("data" in entry) {
+			delete entry.data;
+			truncated = true;
+		}
+		entry.omitted = true;
+		if (bytes !== void 0) entry.bytes = bytes;
+	}
+	return {
+		block: entry,
+		truncated
+	};
+}
+function sanitizeHistoryMessage(message) {
+	if (!message || typeof message !== "object") return {
+		message,
+		truncated: false
+	};
+	const entry = { ...message };
+	let truncated = false;
+	if ("details" in entry) {
+		delete entry.details;
+		truncated = true;
+	}
+	if ("usage" in entry) {
+		delete entry.usage;
+		truncated = true;
+	}
+	if ("cost" in entry) {
+		delete entry.cost;
+		truncated = true;
+	}
+	if (typeof entry.content === "string") {
+		const res = truncateHistoryText(entry.content);
+		entry.content = res.text;
+		truncated ||= res.truncated;
+	} else if (Array.isArray(entry.content)) {
+		const updated = entry.content.map((block) => sanitizeHistoryContentBlock(block));
+		entry.content = updated.map((item) => item.block);
+		truncated ||= updated.some((item) => item.truncated);
+	}
+	if (typeof entry.text === "string") {
+		const res = truncateHistoryText(entry.text);
+		entry.text = res.text;
+		truncated ||= res.truncated;
+	}
+	return {
+		message: entry,
+		truncated
+	};
+}
+function jsonUtf8Bytes(value) {
+	try {
+		return Buffer.byteLength(JSON.stringify(value), "utf8");
+	} catch {
+		return Buffer.byteLength(String(value), "utf8");
+	}
+}
+function enforceSessionsHistoryHardCap(params) {
+	if (params.bytes <= params.maxBytes) return {
+		items: params.items,
+		bytes: params.bytes,
+		hardCapped: false
+	};
+	const last = params.items.at(-1);
+	const lastOnly = last ? [last] : [];
+	const lastBytes = jsonUtf8Bytes(lastOnly);
+	if (lastBytes <= params.maxBytes) return {
+		items: lastOnly,
+		bytes: lastBytes,
+		hardCapped: true
+	};
+	const placeholder = [{
+		role: "assistant",
+		content: "[sessions_history omitted: message too large]"
+	}];
+	return {
+		items: placeholder,
+		bytes: jsonUtf8Bytes(placeholder),
+		hardCapped: true
+	};
+}
 function resolveSandboxSessionToolsVisibility$1(cfg) {
 	return cfg.agents?.defaults?.sandbox?.sessionToolsVisibility ?? "spawned";
 }
@@ -48165,9 +48673,23 @@ function createSessionsHistoryTool(opts) {
 				}
 			});
 			const rawMessages = Array.isArray(result?.messages) ? result.messages : [];
+			const selectedMessages = includeTools ? rawMessages : stripToolMessages(rawMessages);
+			const sanitizedMessages = selectedMessages.map((message) => sanitizeHistoryMessage(message));
+			const contentTruncated = sanitizedMessages.some((entry) => entry.truncated);
+			const cappedMessages = capArrayByJsonBytes(sanitizedMessages.map((entry) => entry.message), SESSIONS_HISTORY_MAX_BYTES);
+			const droppedMessages = cappedMessages.items.length < selectedMessages.length;
+			const hardened = enforceSessionsHistoryHardCap({
+				items: cappedMessages.items,
+				bytes: cappedMessages.bytes,
+				maxBytes: SESSIONS_HISTORY_MAX_BYTES
+			});
 			return jsonResult({
 				sessionKey: displayKey,
-				messages: includeTools ? rawMessages : stripToolMessages(rawMessages)
+				messages: hardened.items,
+				truncated: droppedMessages || contentTruncated || hardened.hardCapped,
+				droppedMessages: droppedMessages || hardened.hardCapped,
+				contentTruncated,
+				bytes: hardened.bytes
 			});
 		}
 	};
@@ -48974,6 +49496,9 @@ function createSessionsSpawnTool(opts) {
 						message: task,
 						sessionKey: childSessionKey,
 						channel: requesterOrigin?.channel,
+						to: requesterOrigin?.to ?? void 0,
+						accountId: requesterOrigin?.accountId ?? void 0,
+						threadId: requesterOrigin?.threadId != null ? String(requesterOrigin.threadId) : void 0,
 						idempotencyKey: childIdem,
 						deliver: false,
 						lane: AGENT_LANE_SUBAGENT,
@@ -50826,7 +51351,7 @@ function createOpenClawCodingTools(options) {
 		cwd: sandboxRoot ?? workspaceRoot,
 		sandboxRoot: sandboxRoot && allowWorkspaceWrites ? sandboxRoot : void 0
 	});
-	const tools = [
+	const toolsByAuthorization = applyOwnerOnlyToolPolicy([
 		...base,
 		...sandboxRoot ? allowWorkspaceWrites ? [createSandboxedEditTool(sandboxRoot), createSandboxedWriteTool(sandboxRoot)] : [] : [],
 		...applyPatchTool ? [applyPatchTool] : [],
@@ -50869,10 +51394,10 @@ function createOpenClawCodingTools(options) {
 			disableMessageTool: options?.disableMessageTool,
 			requesterAgentIdOverride: agentId
 		})
-	];
-	const coreToolNames = new Set(tools.filter((tool) => !getPluginToolMeta(tool)).map((tool) => normalizeToolName(tool.name)).filter(Boolean));
+	], options?.senderIsOwner === true);
+	const coreToolNames = new Set(toolsByAuthorization.filter((tool) => !getPluginToolMeta(tool)).map((tool) => normalizeToolName(tool.name)).filter(Boolean));
 	const pluginGroups = buildPluginToolGroups({
-		tools,
+		tools: toolsByAuthorization,
 		toolMeta: (tool) => getPluginToolMeta(tool)
 	});
 	const resolvePolicy = (policy, label) => {
@@ -50889,7 +51414,7 @@ function createOpenClawCodingTools(options) {
 	const groupPolicyExpanded = resolvePolicy(groupPolicy, "group tools.allow");
 	const sandboxPolicyExpanded = expandPolicyWithPluginGroups(sandbox?.tools, pluginGroups);
 	const subagentPolicyExpanded = expandPolicyWithPluginGroups(subagentPolicy, pluginGroups);
-	const toolsFiltered = profilePolicyExpanded ? filterToolsByPolicy(tools, profilePolicyExpanded) : tools;
+	const toolsFiltered = profilePolicyExpanded ? filterToolsByPolicy(toolsByAuthorization, profilePolicyExpanded) : toolsByAuthorization;
 	const providerProfileFiltered = providerProfileExpanded ? filterToolsByPolicy(toolsFiltered, providerProfileExpanded) : toolsFiltered;
 	const globalFiltered = globalPolicyExpanded ? filterToolsByPolicy(providerProfileFiltered, globalPolicyExpanded) : providerProfileFiltered;
 	const globalProviderFiltered = globalProviderExpanded ? filterToolsByPolicy(globalFiltered, globalProviderExpanded) : globalFiltered;
@@ -51130,7 +51655,13 @@ function repairToolUseResultPairing(messages) {
 			}
 			continue;
 		}
-		const toolCalls = extractToolCallsFromAssistant(msg);
+		const assistant = msg;
+		const stopReason = assistant.stopReason;
+		if (stopReason === "error" || stopReason === "aborted") {
+			out.push(msg);
+			continue;
+		}
+		const toolCalls = extractToolCallsFromAssistant(assistant);
 		if (toolCalls.length === 0) {
 			out.push(msg);
 			continue;
@@ -52339,7 +52870,7 @@ async function compactEmbeddedPiSessionDirect(params) {
 		if (!apiKeyInfo.apiKey) {
 			if (apiKeyInfo.mode !== "aws-sdk") throw new Error(`No API key resolved for provider "${model.provider}" (auth mode: ${apiKeyInfo.mode}).`);
 		} else if (model.provider === "github-copilot") {
-			const { resolveCopilotApiToken } = await import("./github-copilot-token-B_uWT0Yi.js");
+			const { resolveCopilotApiToken } = await import("./github-copilot-token-pGSmVaW-.js").then((n) => n.n);
 			const copilotToken = await resolveCopilotApiToken({ githubToken: apiKeyInfo.apiKey });
 			authStorage.setRuntimeApiKey(model.provider, copilotToken.token);
 		} else authStorage.setRuntimeApiKey(model.provider, apiKeyInfo.apiKey);
@@ -52408,6 +52939,7 @@ async function compactEmbeddedPiSessionDirect(params) {
 				groupChannel: params.groupChannel,
 				groupSpace: params.groupSpace,
 				spawnedBy: params.spawnedBy,
+				senderIsOwner: params.senderIsOwner,
 				agentDir,
 				workspaceDir: effectiveWorkspace,
 				config: params.config,
@@ -53460,6 +53992,7 @@ function handleMessageUpdate(ctx, evt) {
 					mediaUrls: hasMedia ? mediaUrls : void 0
 				}
 			});
+			ctx.state.emittedAssistantUpdate = true;
 			if (ctx.params.onPartialReply && ctx.state.shouldEmitPartialReplies) ctx.params.onPartialReply({
 				text: cleanedText,
 				mediaUrls: hasMedia ? mediaUrls : void 0
@@ -53503,6 +54036,41 @@ function handleMessageEnd(ctx, evt) {
 	});
 	const rawThinking = ctx.state.includeReasoning || ctx.state.streamReasoning ? extractAssistantThinking(assistantMessage) || extractThinkingFromTaggedText(rawText) : "";
 	const formattedReasoning = rawThinking ? formatReasoningMessage(rawThinking) : "";
+	const trimmedText = text.trim();
+	const parsedText = trimmedText ? parseReplyDirectives(stripTrailingDirective(trimmedText)) : null;
+	let cleanedText = parsedText?.text ?? "";
+	let mediaUrls = parsedText?.mediaUrls;
+	let hasMedia = Boolean(mediaUrls && mediaUrls.length > 0);
+	if (!cleanedText && !hasMedia) {
+		const rawTrimmed = rawText.trim();
+		const rawCandidate = rawTrimmed.replace(/<\s*\/?\s*final\s*>/gi, "").trim() || rawTrimmed;
+		if (rawCandidate) {
+			const parsedFallback = parseReplyDirectives(stripTrailingDirective(rawCandidate));
+			cleanedText = parsedFallback.text ?? rawCandidate;
+			mediaUrls = parsedFallback.mediaUrls;
+			hasMedia = Boolean(mediaUrls && mediaUrls.length > 0);
+		}
+	}
+	if (!ctx.state.emittedAssistantUpdate && (cleanedText || hasMedia)) {
+		emitAgentEvent({
+			runId: ctx.params.runId,
+			stream: "assistant",
+			data: {
+				text: cleanedText,
+				delta: cleanedText,
+				mediaUrls: hasMedia ? mediaUrls : void 0
+			}
+		});
+		ctx.params.onAgentEvent?.({
+			stream: "assistant",
+			data: {
+				text: cleanedText,
+				delta: cleanedText,
+				mediaUrls: hasMedia ? mediaUrls : void 0
+			}
+		});
+		ctx.state.emittedAssistantUpdate = true;
+	}
 	const addedDuringMessage = ctx.state.assistantTexts.length > ctx.state.assistantTextBaseline;
 	const chunkerHasBuffered = ctx.blockChunker?.hasBuffered() ?? false;
 	ctx.finalizeAssistantTexts({
@@ -53955,6 +54523,7 @@ function subscribeEmbeddedPiSession(params) {
 		},
 		lastStreamedAssistant: void 0,
 		lastStreamedAssistantCleaned: void 0,
+		emittedAssistantUpdate: false,
 		lastStreamedReasoning: void 0,
 		lastBlockReplyText: void 0,
 		assistantMessageIndex: 0,
@@ -53999,6 +54568,7 @@ function subscribeEmbeddedPiSession(params) {
 		state.partialBlockState.inlineCode = createInlineCodeState();
 		state.lastStreamedAssistant = void 0;
 		state.lastStreamedAssistantCleaned = void 0;
+		state.emittedAssistantUpdate = false;
 		state.lastBlockReplyText = void 0;
 		state.lastStreamedReasoning = void 0;
 		state.lastReasoningSent = void 0;
@@ -54779,6 +55349,7 @@ async function runEmbeddedAttempt(params) {
 				senderName: params.senderName,
 				senderUsername: params.senderUsername,
 				senderE164: params.senderE164,
+				senderIsOwner: params.senderIsOwner,
 				sessionKey: params.sessionKey ?? params.sessionId,
 				agentDir,
 				workspaceDir: effectiveWorkspace,
@@ -55486,7 +56057,7 @@ async function runEmbeddedPiAgent(params) {
 				return;
 			}
 			if (model.provider === "github-copilot") {
-				const { resolveCopilotApiToken } = await import("./github-copilot-token-B_uWT0Yi.js");
+				const { resolveCopilotApiToken } = await import("./github-copilot-token-pGSmVaW-.js").then((n) => n.n);
 				const copilotToken = await resolveCopilotApiToken({ githubToken: apiKeyInfo.apiKey });
 				authStorage.setRuntimeApiKey(model.provider, copilotToken.token);
 			} else authStorage.setRuntimeApiKey(model.provider, apiKeyInfo.apiKey);
@@ -55536,7 +56107,8 @@ async function runEmbeddedPiAgent(params) {
 				error: err
 			});
 		}
-		let overflowCompactionAttempted = false;
+		const MAX_OVERFLOW_COMPACTION_ATTEMPTS = 3;
+		let overflowCompactionAttempts = 0;
 		try {
 			while (true) {
 				attemptedThinking.add(thinkLevel);
@@ -55554,6 +56126,7 @@ async function runEmbeddedPiAgent(params) {
 					groupChannel: params.groupChannel,
 					groupSpace: params.groupSpace,
 					spawnedBy: params.spawnedBy,
+					senderIsOwner: params.senderIsOwner,
 					currentChannelId: params.currentChannelId,
 					currentThreadTs: params.currentThreadTs,
 					replyToMode: params.replyToMode,
@@ -55600,10 +56173,12 @@ async function runEmbeddedPiAgent(params) {
 				if (promptError && !aborted) {
 					const errorText = describeUnknownError(promptError);
 					if (isContextOverflowError(errorText)) {
+						const msgCount = attempt.messagesSnapshot?.length ?? 0;
+						log$3.warn(`[context-overflow-diag] sessionKey=${params.sessionKey ?? params.sessionId} provider=${provider}/${modelId} messages=${msgCount} sessionFile=${params.sessionFile} compactionAttempts=${overflowCompactionAttempts} error=${errorText.slice(0, 200)}`);
 						const isCompactionFailure = isCompactionFailureError(errorText);
-						if (!isCompactionFailure && !overflowCompactionAttempted) {
-							log$3.warn(`context overflow detected; attempting auto-compaction for ${provider}/${modelId}`);
-							overflowCompactionAttempted = true;
+						if (!isCompactionFailure && overflowCompactionAttempts < MAX_OVERFLOW_COMPACTION_ATTEMPTS) {
+							overflowCompactionAttempts++;
+							log$3.warn(`context overflow detected (attempt ${overflowCompactionAttempts}/${MAX_OVERFLOW_COMPACTION_ATTEMPTS}); attempting auto-compaction for ${provider}/${modelId}`);
 							const compactResult = await compactEmbeddedPiSessionDirect({
 								sessionId: params.sessionId,
 								sessionKey: params.sessionKey,
@@ -55616,6 +56191,7 @@ async function runEmbeddedPiAgent(params) {
 								agentDir,
 								config: params.config,
 								skillsSnapshot: params.skillsSnapshot,
+								senderIsOwner: params.senderIsOwner,
 								provider,
 								model: modelId,
 								thinkLevel,
@@ -55732,6 +56308,7 @@ async function runEmbeddedPiAgent(params) {
 				}
 				const authFailure = isAuthAssistantError(lastAssistant);
 				const rateLimitFailure = isRateLimitAssistantError(lastAssistant);
+				const billingFailure = isBillingAssistantError(lastAssistant);
 				const failoverFailure = isFailoverAssistantError(lastAssistant);
 				const assistantFailoverReason = classifyFailoverReason(lastAssistant?.errorMessage ?? "");
 				const cloudCodeAssistFormatError = attempt.cloudCodeAssistFormatError;
@@ -55761,7 +56338,7 @@ async function runEmbeddedPiAgent(params) {
 						const message = (lastAssistant ? formatAssistantErrorText(lastAssistant, {
 							cfg: params.config,
 							sessionKey: params.sessionKey ?? params.sessionId
-						}) : void 0) || lastAssistant?.errorMessage?.trim() || (timedOut ? "LLM request timed out." : rateLimitFailure ? "LLM request rate limited." : authFailure ? "LLM request unauthorized." : "LLM request failed.");
+						}) : void 0) || lastAssistant?.errorMessage?.trim() || (timedOut ? "LLM request timed out." : rateLimitFailure ? "LLM request rate limited." : billingFailure ? BILLING_ERROR_USER_MESSAGE : authFailure ? "LLM request unauthorized." : "LLM request failed.");
 						const status = resolveFailoverStatus(assistantFailoverReason ?? "unknown") ?? (isTimeoutErrorMessage(message) ? 408 : void 0);
 						throw new FailoverError(message, {
 							reason: assistantFailoverReason ?? "unknown",
@@ -56667,6 +57244,7 @@ function buildCommandContext(params) {
 		channel,
 		channelId: auth.providerId,
 		ownerList: auth.ownerList,
+		senderIsOwner: auth.senderIsOwner,
 		isAuthorizedSender: auth.isAuthorizedSender,
 		senderId: auth.senderId,
 		abortKey,
@@ -57861,6 +58439,7 @@ const handleCompactCommand = async (params) => {
 			defaultLevel: "off"
 		},
 		customInstructions,
+		senderIsOwner: params.command.senderIsOwner,
 		ownerNumbers: params.command.ownerList.length > 0 ? params.command.ownerList : void 0
 	});
 	const compactLabel = result.ok ? result.compacted ? result.result?.tokensBefore != null && result.result?.tokensAfter != null ? `Compacted (${formatTokenCount(result.result.tokensBefore)} → ${formatTokenCount(result.result.tokensAfter)})` : result.result?.tokensBefore ? `Compacted (${formatTokenCount(result.result.tokensBefore)} before)` : "Compacted" : "Compaction skipped" : "Compaction failed";
@@ -58225,165 +58804,6 @@ const handlePluginCommand = async (params, allowTextCommands) => {
 	};
 };
 
-//#endregion
-//#region src/infra/session-cost-usage.ts
-const emptyTotals = () => ({
-	input: 0,
-	output: 0,
-	cacheRead: 0,
-	cacheWrite: 0,
-	totalTokens: 0,
-	totalCost: 0,
-	missingCostEntries: 0
-});
-const toFiniteNumber = (value) => {
-	if (typeof value !== "number") return;
-	if (!Number.isFinite(value)) return;
-	return value;
-};
-const extractCostTotal = (usageRaw) => {
-	if (!usageRaw || typeof usageRaw !== "object") return;
-	const cost = usageRaw.cost;
-	const total = toFiniteNumber(cost?.total);
-	if (total === void 0) return;
-	if (total < 0) return;
-	return total;
-};
-const parseTimestamp = (entry) => {
-	const raw = entry.timestamp;
-	if (typeof raw === "string") {
-		const parsed = new Date(raw);
-		if (!Number.isNaN(parsed.valueOf())) return parsed;
-	}
-	const message = entry.message;
-	const messageTimestamp = toFiniteNumber(message?.timestamp);
-	if (messageTimestamp !== void 0) {
-		const parsed = new Date(messageTimestamp);
-		if (!Number.isNaN(parsed.valueOf())) return parsed;
-	}
-};
-const parseUsageEntry = (entry) => {
-	const message = entry.message;
-	if (message?.role !== "assistant") return null;
-	const usageRaw = message?.usage ?? entry.usage;
-	const usage = normalizeUsage(usageRaw);
-	if (!usage) return null;
-	const provider = (typeof message?.provider === "string" ? message?.provider : void 0) ?? (typeof entry.provider === "string" ? entry.provider : void 0);
-	const model = (typeof message?.model === "string" ? message?.model : void 0) ?? (typeof entry.model === "string" ? entry.model : void 0);
-	return {
-		usage,
-		costTotal: extractCostTotal(usageRaw),
-		provider,
-		model,
-		timestamp: parseTimestamp(entry)
-	};
-};
-const formatDayKey = (date) => date.toLocaleDateString("en-CA", { timeZone: Intl.DateTimeFormat().resolvedOptions().timeZone });
-const applyUsageTotals = (totals, usage) => {
-	totals.input += usage.input ?? 0;
-	totals.output += usage.output ?? 0;
-	totals.cacheRead += usage.cacheRead ?? 0;
-	totals.cacheWrite += usage.cacheWrite ?? 0;
-	const totalTokens = usage.total ?? (usage.input ?? 0) + (usage.output ?? 0) + (usage.cacheRead ?? 0) + (usage.cacheWrite ?? 0);
-	totals.totalTokens += totalTokens;
-};
-const applyCostTotal = (totals, costTotal) => {
-	if (costTotal === void 0) {
-		totals.missingCostEntries += 1;
-		return;
-	}
-	totals.totalCost += costTotal;
-};
-async function scanUsageFile(params) {
-	const fileStream = fs.createReadStream(params.filePath, { encoding: "utf-8" });
-	const rl = readline.createInterface({
-		input: fileStream,
-		crlfDelay: Infinity
-	});
-	for await (const line of rl) {
-		const trimmed = line.trim();
-		if (!trimmed) continue;
-		try {
-			const entry = parseUsageEntry(JSON.parse(trimmed));
-			if (!entry) continue;
-			if (entry.costTotal === void 0) {
-				const cost = resolveModelCostConfig({
-					provider: entry.provider,
-					model: entry.model,
-					config: params.config
-				});
-				entry.costTotal = estimateUsageCost({
-					usage: entry.usage,
-					cost
-				});
-			}
-			params.onEntry(entry);
-		} catch {}
-	}
-}
-async function loadCostUsageSummary(params) {
-	const days = Math.max(1, Math.floor(params?.days ?? 30));
-	const now = /* @__PURE__ */ new Date();
-	const since = new Date(now);
-	since.setDate(since.getDate() - (days - 1));
-	const sinceTime = since.getTime();
-	const dailyMap = /* @__PURE__ */ new Map();
-	const totals = emptyTotals();
-	const sessionsDir = resolveSessionTranscriptsDirForAgent(params?.agentId);
-	const entries = await fs.promises.readdir(sessionsDir, { withFileTypes: true }).catch(() => []);
-	const files = (await Promise.all(entries.filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).map(async (entry) => {
-		const filePath = path.join(sessionsDir, entry.name);
-		const stats = await fs.promises.stat(filePath).catch(() => null);
-		if (!stats) return null;
-		if (stats.mtimeMs < sinceTime) return null;
-		return filePath;
-	}))).filter((filePath) => Boolean(filePath));
-	for (const filePath of files) await scanUsageFile({
-		filePath,
-		config: params?.config,
-		onEntry: (entry) => {
-			const ts = entry.timestamp?.getTime();
-			if (!ts || ts < sinceTime) return;
-			const dayKey = formatDayKey(entry.timestamp ?? now);
-			const bucket = dailyMap.get(dayKey) ?? emptyTotals();
-			applyUsageTotals(bucket, entry.usage);
-			applyCostTotal(bucket, entry.costTotal);
-			dailyMap.set(dayKey, bucket);
-			applyUsageTotals(totals, entry.usage);
-			applyCostTotal(totals, entry.costTotal);
-		}
-	});
-	const daily = Array.from(dailyMap.entries()).map(([date, bucket]) => Object.assign({ date }, bucket)).toSorted((a, b) => a.date.localeCompare(b.date));
-	return {
-		updatedAt: Date.now(),
-		days,
-		daily,
-		totals
-	};
-}
-async function loadSessionCostSummary(params) {
-	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry) : void 0);
-	if (!sessionFile || !fs.existsSync(sessionFile)) return null;
-	const totals = emptyTotals();
-	let lastActivity;
-	await scanUsageFile({
-		filePath: sessionFile,
-		config: params.config,
-		onEntry: (entry) => {
-			applyUsageTotals(totals, entry.usage);
-			applyCostTotal(totals, entry.costTotal);
-			const ts = entry.timestamp?.getTime();
-			if (ts && (!lastActivity || ts > lastActivity)) lastActivity = ts;
-		}
-	});
-	return {
-		sessionId: params.sessionId,
-		sessionFile,
-		lastActivity,
-		...totals
-	};
-}
-
 //#endregion
 //#region src/auto-reply/send-policy.ts
 function normalizeSendPolicyOverride(raw) {
@@ -60314,8 +60734,10 @@ const DEFAULT_CLAUDE_BACKEND = {
 	modelArg: "--model",
 	modelAliases: {
 		opus: "opus",
+		"opus-4.6": "opus",
 		"opus-4.5": "opus",
 		"opus-4": "opus",
+		"claude-opus-4-6": "opus",
 		"claude-opus-4-5": "opus",
 		"claude-opus-4": "opus",
 		sonnet: "sonnet",
@@ -62808,6 +63230,7 @@ async function runPreparedReply(params) {
 			senderName: sessionCtx.SenderName?.trim() || void 0,
 			senderUsername: sessionCtx.SenderUsername?.trim() || void 0,
 			senderE164: sessionCtx.SenderE164?.trim() || void 0,
+			senderIsOwner: command.senderIsOwner,
 			sessionFile,
 			workspaceDir,
 			config: cfg,
@@ -63180,11 +63603,13 @@ async function initSessionState(params) {
 	if (threadLabel) sessionEntry.displayName = threadLabel;
 	const parentSessionKey = ctx.ParentSessionKey?.trim();
 	if (isNewSession && parentSessionKey && parentSessionKey !== sessionKey && sessionStore[parentSessionKey]) {
+		console.warn(`[session-init] forking from parent session: parentKey=${parentSessionKey} → sessionKey=${sessionKey} parentTokens=${sessionStore[parentSessionKey].totalTokens ?? "?"}`);
 		const forked = forkSessionFromParent({ parentEntry: sessionStore[parentSessionKey] });
 		if (forked) {
 			sessionId = forked.sessionId;
 			sessionEntry.sessionId = forked.sessionId;
 			sessionEntry.sessionFile = forked.sessionFile;
+			console.warn(`[session-init] forked session created: file=${forked.sessionFile}`);
 		}
 	}
 	if (!sessionEntry.sessionFile) sessionEntry.sessionFile = resolveSessionTranscriptPath(sessionEntry.sessionId, agentId, ctx.MessageThreadId);
@@ -63192,6 +63617,10 @@ async function initSessionState(params) {
 		sessionEntry.compactionCount = 0;
 		sessionEntry.memoryFlushCompactionCount = void 0;
 		sessionEntry.memoryFlushAt = void 0;
+		sessionEntry.totalTokens = void 0;
+		sessionEntry.inputTokens = void 0;
+		sessionEntry.outputTokens = void 0;
+		sessionEntry.contextTokens = void 0;
 	}
 	sessionStore[sessionKey] = {
 		...sessionStore[sessionKey],
@@ -63690,4 +64119,4 @@ async function getReplyFromConfig(ctx, opts, configOverride) {
 }
 
 //#endregion
-export { formatUsageReportLines as $, setCommandLaneConcurrency as $n, waitForever as $t, resolveHeartbeatSenderContext as A, resolveEffectiveMessagesConfig as An, normalizeMimeList as Ar, recordRemoteNodeInfo as At, isGatewaySigusr1RestartExternallyAllowed as B, OPENAI_TTS_VOICES as Bn, verifyNodeToken as Bt, readSessionPreviewItemsFromTranscript as C, registerAgentRunContext as Cn, DEFAULT_INPUT_MAX_REDIRECTS as Cr, waitForGatewayReachable as Ct, ensureOutboundSessionEntry as D, createSlackWebClient as Dn, DEFAULT_INPUT_TIMEOUT_MS as Dr, resolveAssistantAvatarUrl as Dt, runMessageAction as E, sendMessageSlack as En, DEFAULT_INPUT_PDF_MIN_TEXT_CHARS as Er, normalizeControlUiBasePath as Et, CHANNEL_MESSAGE_ACTION_NAMES as F, clearInternalHooks as Fn, listNodePairing as Ft, migrateLegacyCronPayload as G, resolveTtsAutoMode as Gn, getHookType as Gt, setGatewaySigusr1RestartPolicy as H, isTtsEnabled as Hn, registerSkillsChangeListener as Ht, runWithModelFallback as I, createInternalHookEvent as In, rejectNodePairing as It, requestHeartbeatNow as J, resolveTtsProviderOrder as Jn, runMemoryStatus as Jt, CHANNEL_TARGETS_DESCRIPTION as K, resolveTtsConfig as Kn, isExternalHookSession as Kt, describeFailoverError as L, registerInternalHook as Ln, renamePairedNode as Lt, resolveSessionDeliveryTarget as M, formatUserTime as Mn, resolveAgentTimeoutMs as Mr, refreshRemoteNodeBins as Mt, formatTargetDisplay as N, resolveUserTimeFormat as Nn, setSkillsRemoteRegistry as Nt, resolveOutboundSessionRoute as O, getMemorySearchManager as On, extractFileContentFromSource as Or, getRemoteSkillEligibility as Ot, resetDirectoryCache as P, resolveUserTimezone as Pn, approveNodePairing as Pt, loadProviderUsageSummary as Q, getQueueSize as Qn, registerUnhandledRejectionHandler as Qt, authorizeGatewaySigusr1Restart as R, triggerInternalHook as Rn, requestNodePairing as Rt, readSessionMessages as S, onAgentEvent as Sn, DEFAULT_INPUT_IMAGE_MIMES as Sr, summarizeExistingConfig as St, stripEnvelopeFromMessages as T, normalizePollInput as Tn, DEFAULT_INPUT_PDF_MAX_PIXELS as Tr, buildControlUiAvatarUrl as Tt, normalizeCronJobCreate as U, isTtsProviderConfigured as Un, buildSafeExternalPrompt as Ut, scheduleGatewaySigusr1Restart as V, getTtsProvider as Vn, getSkillsSnapshotVersion as Vt, normalizeCronJobPatch as W, resolveTtsApiKey as Wn, detectSuspiciousPatterns as Wt, getPluginToolMeta as X, setTtsProvider as Xn, normalizeGroupActivation as Xt, setHeartbeatWakeHandler as Y, setTtsEnabled as Yn, monitorWebChannel as Yt, loadOpenClawPlugins as Z, textToSpeech as Zn, installUnhandledRejectionHandler as Zt, loadSessionEntry as _, initSubagentRegistry as _n, loadModelCatalog as _r, printWizardHeader as _t, loadCostUsageSummary as a, resolveIndicatorType as an, DEFAULT_HEARTBEAT_EVERY as ar, sendMessageIMessage as at, archiveFileOnDisk as b, emitAgentEvent as bn, DEFAULT_INPUT_FILE_MIMES as br, resolveControlUiLinks as bt, clearSessionQueues as c, getChannelActivity as cn, stripHeartbeatToken as cr, detectBinary as ct, waitForEmbeddedPiRunEnd as d, dispatchInboundMessage as dn, applyModelOverrideToSessionEntry as dr, formatControlUiSshHint as dt, buildHistoryContextFromEntries as en, CommandLane as er, formatUsageWindowSummary as et, createOpenClawTools as f, createReplyDispatcher as fn, applyVerboseOverride as fr, guardCancel as ft, loadCombinedSessionStoreForGateway as g, stopSubagentsForRequester as gn, peekSystemEvents as gr, openUrl as gt, listSessionsFromStore as h, isAbortTrigger as hn, isSystemEventContextChanged as hr, normalizeGatewayTokenInput as ht, runCliAgent as i, onHeartbeatEvent as in, DEFAULT_HEARTBEAT_ACK_MAX_CHARS as ir, handleSlackHttpRequest as it, resolveOutboundTarget as j, resolveIdentityName as jn, applyTemplate as jr, refreshRemoteBinsForConnectedNodes as jt, resolveHeartbeatDeliveryTarget as k, resolveAgentIdentity as kn, extractImageContentFromSource as kr, primeRemoteSkillsCache as kt, runEmbeddedPiAgent as l, parseDiscordTarget as ln, lookupContextTokens as lr, detectBrowserOpenSupport as lt, listAgentsForGateway as m, formatZonedTimestamp as mn, enqueueSystemEvent as mr, moveToTrash as mt, getCliSessionId as n, emitHeartbeatEvent as nn, stopDiagnosticHeartbeat as nr, resolveCommitHash as nt, normalizeSendPolicy as o, sendMessageTelegram as on, isHeartbeatContentEffectivelyEmpty as or, DEFAULT_WORKSPACE as ot, resolveAnnounceTargetFromKey as p, extractShortModelName as pn, parseVerboseOverride as pr, handleReset as pt, CHANNEL_TARGET_DESCRIPTION as q, resolveTtsPrefsPath as qn, registerMemoryCli as qt, setCliSessionId as r, getLastHeartbeatEvent as rn, isDiagnosticsEnabled as rr, hasNonzeroUsage as rt, resolveSendPolicy as s, sendMessageDiscord as sn, resolveHeartbeatPrompt as sr, applyWizardMetadata as st, getReplyFromConfig as t, resolveHeartbeatVisibility as tn, startDiagnosticHeartbeat as tr, resolveUsageProviderId as tt, abortEmbeddedPiRun as u, fetchChannelPermissionsDiscord as un, clearSessionAuthProfileOverride as ur, ensureWorkspaceAndSessions as ut, resolveGatewaySessionStoreTarget as v, AGENT_LANE_NESTED as vn, DEFAULT_INPUT_FILE_MAX_BYTES as vr, probeGatewayReachable as vt, resolveSessionTranscriptCandidates as w, sendMessageWhatsApp as wn, DEFAULT_INPUT_PDF_MAX_PAGES as wr, CONTROL_UI_AVATAR_PREFIX as wt, capArrayByJsonBytes as x, getAgentRunContext as xn, DEFAULT_INPUT_IMAGE_MAX_BYTES as xr, resolveNodeManagerOptions as xt, resolveSessionModelRef as y, clearAgentRunContext as yn, DEFAULT_INPUT_FILE_MAX_CHARS as yr, randomToken as yt, consumeGatewaySigusr1RestartAuthorization as z, OPENAI_TTS_MODELS as zn, updatePairedNodeMetadata as zt };
+export { CHANNEL_TARGET_DESCRIPTION as $, setTtsEnabled as $n, runMemoryStatus as $t, resolveOutboundTarget as A, normalizePollInput as An, DEFAULT_INPUT_PDF_MIN_TEXT_CHARS as Ar, buildControlUiAvatarUrl as At, scheduleGatewaySigusr1Restart as B, createInternalHookEvent as Bn, listNodePairing as Bt, resolveSessionTranscriptCandidates as C, AGENT_LANE_NESTED as Cn, DEFAULT_INPUT_FILE_MAX_CHARS as Cr, probeGatewayReachable as Ct, resolveOutboundSessionRoute as D, onAgentEvent as Dn, DEFAULT_INPUT_MAX_REDIRECTS as Dr, summarizeExistingConfig as Dt, ensureOutboundSessionEntry as E, getAgentRunContext as En, DEFAULT_INPUT_IMAGE_MIMES as Er, resolveNodeManagerOptions as Et, runWithModelFallback as F, resolveEffectiveMessagesConfig as Fn, applyTemplate as Fr, recordRemoteNodeInfo as Ft, readRestartSentinel as G, getTtsProvider as Gn, verifyNodeToken as Gt, consumeRestartSentinel as H, triggerInternalHook as Hn, renamePairedNode as Ht, describeFailoverError as I, formatUserTime as In, resolveAgentTimeoutMs as Ir, refreshRemoteBinsForConnectedNodes as It, writeRestartSentinel as J, resolveTtsApiKey as Jn, buildSafeExternalPrompt as Jt, summarizeRestartSentinel as K, isTtsEnabled as Kn, getSkillsSnapshotVersion as Kt, authorizeGatewaySigusr1Restart as L, resolveUserTimeFormat as Ln, refreshRemoteNodeBins as Lt, formatTargetDisplay as M, createSlackWebClient as Mn, extractFileContentFromSource as Mr, resolveAssistantAvatarUrl as Mt, resetDirectoryCache as N, getMemorySearchManager as Nn, extractImageContentFromSource as Nr, getRemoteSkillEligibility as Nt, resolveHeartbeatDeliveryTarget as O, registerAgentRunContext as On, DEFAULT_INPUT_PDF_MAX_PAGES as Or, waitForGatewayReachable as Ot, CHANNEL_MESSAGE_ACTION_NAMES as P, resolveAgentIdentity as Pn, normalizeMimeList as Pr, primeRemoteSkillsCache as Pt, CHANNEL_TARGETS_DESCRIPTION as Q, resolveTtsProviderOrder as Qn, registerMemoryCli as Qt, consumeGatewaySigusr1RestartAuthorization as R, resolveUserTimezone as Rn, setSkillsRemoteRegistry as Rt, readSessionPreviewItemsFromTranscript as S, initSubagentRegistry as Sn, DEFAULT_INPUT_FILE_MAX_BYTES as Sr, printWizardHeader as St, runMessageAction as T, emitAgentEvent as Tn, DEFAULT_INPUT_IMAGE_MAX_BYTES as Tr, resolveControlUiLinks as Tt, formatDoctorNonInteractiveHint as U, OPENAI_TTS_MODELS as Un, requestNodePairing as Ut, setGatewaySigusr1RestartPolicy as V, registerInternalHook as Vn, rejectNodePairing as Vt, formatRestartSentinelMessage as W, OPENAI_TTS_VOICES as Wn, updatePairedNodeMetadata as Wt, normalizeCronJobPatch as X, resolveTtsConfig as Xn, getHookType as Xt, normalizeCronJobCreate as Y, resolveTtsAutoMode as Yn, detectSuspiciousPatterns as Yt, migrateLegacyCronPayload as Z, resolveTtsPrefsPath as Zn, isExternalHookSession as Zt, resolveGatewaySessionStoreTarget as _, dispatchInboundMessage as _n, parseVerboseOverride as _r, guardCancel as _t, normalizeSendPolicy as a, waitForever as an, startDiagnosticHeartbeat as ar, formatUsageReportLines as at, capArrayByJsonBytes as b, isAbortTrigger as bn, peekSystemEvents as br, normalizeGatewayTokenInput as bt, runEmbeddedPiAgent as c, emitHeartbeatEvent as cn, DEFAULT_HEARTBEAT_ACK_MAX_CHARS as cr, resolveCommitHash as ct, createOpenClawTools as d, resolveIndicatorType as dn, resolveHeartbeatPrompt as dr, DEFAULT_WORKSPACE as dt, monitorWebChannel as en, setTtsProvider as er, requestHeartbeatNow as et, resolveAnnounceTargetFromKey as f, sendMessageTelegram as fn, stripHeartbeatToken as fr, applyWizardMetadata as ft, loadSessionEntry as g, fetchChannelPermissionsDiscord as gn, applyVerboseOverride as gr, formatControlUiSshHint as gt, loadCombinedSessionStoreForGateway as h, parseDiscordTarget as hn, applyModelOverrideToSessionEntry as hr, ensureWorkspaceAndSessions as ht, runCliAgent as i, registerUnhandledRejectionHandler as in, CommandLane as ir, loadProviderUsageSummary as it, resolveSessionDeliveryTarget as j, sendMessageSlack as jn, DEFAULT_INPUT_TIMEOUT_MS as jr, normalizeControlUiBasePath as jt, resolveHeartbeatSenderContext as k, sendMessageWhatsApp as kn, DEFAULT_INPUT_PDF_MAX_PIXELS as kr, CONTROL_UI_AVATAR_PREFIX as kt, abortEmbeddedPiRun as l, getLastHeartbeatEvent as ln, DEFAULT_HEARTBEAT_EVERY as lr, handleSlackHttpRequest as lt, listSessionsFromStore as m, getChannelActivity as mn, clearSessionAuthProfileOverride as mr, detectBrowserOpenSupport as mt, getCliSessionId as n, normalizeGroupActivation as nn, getQueueSize as nr, getPluginToolMeta as nt, resolveSendPolicy as o, buildHistoryContextFromEntries as on, stopDiagnosticHeartbeat as or, formatUsageWindowSummary as ot, listAgentsForGateway as p, sendMessageDiscord as pn, lookupContextTokens as pr, detectBinary as pt, trimLogTail as q, isTtsProviderConfigured as qn, registerSkillsChangeListener as qt, setCliSessionId as r, installUnhandledRejectionHandler as rn, setCommandLaneConcurrency as rr, loadOpenClawPlugins as rt, clearSessionQueues as s, resolveHeartbeatVisibility as sn, isDiagnosticsEnabled as sr, resolveUsageProviderId as st, getReplyFromConfig as t, createReplyPrefixOptions as tn, textToSpeech as tr, setHeartbeatWakeHandler as tt, waitForEmbeddedPiRunEnd as u, onHeartbeatEvent as un, isHeartbeatContentEffectivelyEmpty as ur, sendMessageIMessage as ut, resolveSessionModelRef as v, createReplyDispatcher as vn, enqueueSystemEvent as vr, handleReset as vt, stripEnvelopeFromMessages as w, clearAgentRunContext as wn, DEFAULT_INPUT_FILE_MIMES as wr, randomToken as wt, readSessionMessages as x, stopSubagentsForRequester as xn, loadModelCatalog as xr, openUrl as xt, archiveFileOnDisk as y, formatZonedTimestamp as yn, isSystemEventContextChanged as yr, moveToTrash as yt, isGatewaySigusr1RestartExternallyAllowed as z, clearInternalHooks as zn, approveNodePairing as zt };