@nikolasp98/minion 2026.6.14-dev.20260616061802 → 2026.6.16-dev

package/dist/{subagent-registry-0zv9UyYz.js → subagent-registry-C_UHFYRY.js}

@@ -14,16 +14,16 @@ import { a as trackToolExecution, c as flushSentry, f as startSentrySpan, i as t
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-BLXsXccX.js";
 import { a as buildModelAliasLines, n as resolveModel$2 } from "./model-CQQlHE0j.js";
 import { n as recordCommandPoll, r as resetCommandPollCount } from "./command-poll-backoff-BYTEhHLM.js";
-import { i as resolveSkillsPromptForRun, l as assertSandboxPath, n as buildWorkspaceSkillSnapshot, o as resolvePluginSkillDirs, r as loadWorkspaceSkillEntries, t as buildWorkspaceSkillCommandSpecs, u as resolveSandboxInputPath } from "./workspace-CSBTFAxh.js";
-import { n as resolveSkillEnvMap, r as resolveSkillEnvMapFromSnapshot } from "./skills-DMPRReoe.js";
+import { i as resolveSkillsPromptForRun, l as assertSandboxPath, n as buildWorkspaceSkillSnapshot, o as resolvePluginSkillDirs, r as loadWorkspaceSkillEntries, t as buildWorkspaceSkillCommandSpecs, u as resolveSandboxInputPath } from "./workspace-D5-DoTNR.js";
+import { n as resolveSkillEnvMap, r as resolveSkillEnvMapFromSnapshot } from "./skills-DDhWBAii.js";
 import { c as applyTestPluginDefaults, d as resolveEnableState, f as resolveMemorySlotDecision, h as isMemorySlotPlugin, i as discoverOpenClawPlugins, n as loadPluginManifestRegistry, o as emptyPluginConfigSchema, u as normalizePluginsConfig } from "./manifest-registry-DCVfom1u.js";
-import { E as parseDurationMs, n as validateConfigObjectWithPlugins, s as validateJsonSchemaValue } from "./validation-CG8Ui8_v.js";
-import { S as VERSION, _ as setConfigValueAtPath, d as getConfigOverrides, f as resetConfigOverrides, g as parseConfigPath, h as getConfigValueAtPath, i as loadConfig, l as writeConfigFile, m as unsetConfigOverride, o as readConfigFileSnapshot, p as setConfigOverride, v as unsetConfigValueAtPath } from "./io-TKYkFbcF.js";
-import "./config-ClkrcdId.js";
-import { n as callGateway } from "./call-DkT-xA-u.js";
+import { E as parseDurationMs, n as validateConfigObjectWithPlugins, s as validateJsonSchemaValue } from "./validation-B-XaORq2.js";
+import { S as VERSION, _ as setConfigValueAtPath, d as getConfigOverrides, f as resetConfigOverrides, g as parseConfigPath, h as getConfigValueAtPath, i as loadConfig, l as writeConfigFile, m as unsetConfigOverride, o as readConfigFileSnapshot, p as setConfigOverride, v as unsetConfigValueAtPath } from "./io-C_Q6AU5E.js";
+import "./config-DHYot764.js";
+import { n as callGateway } from "./call-BrDNyQiZ.js";
 import { a as isInternalMessageChannel, c as listDeliverableMessageChannels, d as resolveMessageChannel, h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, o as isMarkdownCapableMessageChannel, t as INTERNAL_MESSAGE_CHANNEL, u as resolveGatewayMessageChannel } from "./message-channel-C02KGm4w.js";
 import { i as normalizeInputProvenance, n as applyInputProvenanceToUserMessage, r as hasInterSessionUserProvenance } from "./input-provenance-ChJN5mZj.js";
-import { $ as mergeDeliveryContext, A as resolveThreadFlag, B as getChannelDock, D as resolveChannelResetConfig, E as evaluateSessionFreshness, G as resolveConversationLabel, H as resolveChannelGroupPolicy, I as resolveMainSessionKey, J as normalizeAtHashSlug, M as resolveFreshSessionTotalTokens, O as resolveSessionResetPolicy, Q as deliveryContextKey, R as deriveSessionMetaPatch, S as acquireSessionWriteLock, T as resolveSessionKey, U as resolveChannelGroupRequireMention, V as listChannelDocks, Z as deliveryContextFromSession, a as loadSessionStore, d as updateSessionStoreEntry, et as normalizeDeliveryContext, f as isCacheEnabled, h as archiveSessionTranscripts, j as DEFAULT_RESET_TRIGGERS, k as resolveSessionResetType, l as updateLastRoute, o as readSessionUpdatedAt, p as resolveCacheTtlMs, q as resolveGroupSessionKey, s as recordSessionMetaFromInbound, tt as normalizeSessionDeliveryFields, u as updateSessionStore, w as resolveSessionLockMaxHoldFromTimeout } from "./sessions-D_b2UXud.js";
+import { $ as mergeDeliveryContext, A as resolveThreadFlag, B as getChannelDock, D as resolveChannelResetConfig, E as evaluateSessionFreshness, G as resolveConversationLabel, H as resolveChannelGroupPolicy, I as resolveMainSessionKey, J as normalizeAtHashSlug, M as resolveFreshSessionTotalTokens, O as resolveSessionResetPolicy, Q as deliveryContextKey, R as deriveSessionMetaPatch, S as acquireSessionWriteLock, T as resolveSessionKey, U as resolveChannelGroupRequireMention, V as listChannelDocks, Z as deliveryContextFromSession, a as loadSessionStore, d as updateSessionStoreEntry, et as normalizeDeliveryContext, f as isCacheEnabled, h as archiveSessionTranscripts, j as DEFAULT_RESET_TRIGGERS, k as resolveSessionResetType, l as updateLastRoute, o as readSessionUpdatedAt, p as resolveCacheTtlMs, q as resolveGroupSessionKey, s as recordSessionMetaFromInbound, tt as normalizeSessionDeliveryFields, u as updateSessionStore, w as resolveSessionLockMaxHoldFromTimeout } from "./sessions-C0Qs0Flz.js";
 import { n as SILENT_REPLY_TOKEN, r as isSilentReplyText } from "./tokens-BkvS7DSy.js";
 import { _ as resolveDiscordAccount, b as normalizeChatType, c as resolveWhatsAppAccount, m as resolveSlackAccount, n as listChannelPlugins, r as normalizeChannelId$1, t as getChannelPlugin, u as resolveTelegramAccount, v as normalizeDiscordToken } from "./plugins-irMKpl65.js";
 import { t as resolveIMessageAccount } from "./accounts-BVGaPXBP.js";
@@ -33,51 +33,51 @@ import { i as resolveUserMemoryPath, n as resolveUserCredentialsPath } from "./u
 import { c as resolveStorePath, i as resolveSessionTranscriptPath, n as resolveSessionFilePath, r as resolveSessionFilePathOptions, s as resolveSessionTranscriptsDirForAgent, t as resolveDefaultSessionStorePath } from "./paths-D59m1grH.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-Cti88ciS.js";
 import { a as stripHeartbeatToken, i as resolveHeartbeatPrompt, n as AGENT_LANE_SUBAGENT } from "./lanes-L5j3C7cx.js";
-import { d as resolveChannelMessageToolHints, f as resolveTelegramInlineButtonsScope, l as listChannelAgentTools, n as resolveAgentRoute, o as resolveSessionDeliveryTarget, u as listChannelSupportedActions } from "./resolve-route-FLi7kFo1.js";
-import { n as getMachineDisplayName, t as withTimeout$2 } from "./with-timeout-BVhDEOTB.js";
+import { d as resolveChannelMessageToolHints, f as resolveTelegramInlineButtonsScope, l as listChannelAgentTools, n as resolveAgentRoute, o as resolveSessionDeliveryTarget, u as listChannelSupportedActions } from "./resolve-route-0arQsERr.js";
+import { n as getMachineDisplayName, t as withTimeout$3 } from "./with-timeout-BVhDEOTB.js";
 import { a as logMessageProcessed, d as isDiagnosticsEnabled, i as logLaneEnqueue, o as logMessageQueued, r as logLaneDequeue, s as logSessionStateChange, t as diag, u as emitDiagnosticEvent } from "./diagnostic-BEEvI8Zw.js";
 import { r as getDiagnosticSessionState } from "./diagnostic-session-state-BnA8DWCj.js";
-import { _ as initializeGlobalHookRunner, a as isRenderablePayload, c as resolveReplyToMode, d as normalizeTargetForProvider, f as parseReplyDirectives, g as getGlobalHookRunner, h as parseInlineDirectives$1, i as filterMessagingToolMediaDuplicates, m as splitMediaFromOutput, n as applyReplyThreading, o as shouldSuppressMessagingToolReplies, p as MEDIA_TOKEN_RE, r as filterMessagingToolDuplicates, s as createReplyToModeFilterForChannel, t as applyReplyTagsToPayload } from "./reply-payloads-CikGrhVL.js";
-import { S as textToSpeechTelephony, _ as setTtsEnabled, a as isSummarizationEnabled, b as stripTtsDirectivesFromText, c as maybeApplyTtsToPayload, d as resolveTtsAutoMode, f as resolveTtsConfig, g as setSummarizationEnabled, h as setLastTtsAttempt, i as getTtsProvider, l as normalizeTtsAutoMode, n as getLastTtsAttempt, o as isTtsEnabled, p as resolveTtsPrefsPath, r as getTtsMaxLength, s as isTtsProviderConfigured, t as buildTtsSystemPromptHint, u as resolveTtsApiKey, v as setTtsMaxLength, x as textToSpeech, y as setTtsProvider } from "./tts-CRpGlsYO.js";
+import { _ as initializeGlobalHookRunner, a as isRenderablePayload, c as resolveReplyToMode, d as normalizeTargetForProvider, f as parseReplyDirectives, g as getGlobalHookRunner, h as parseInlineDirectives$1, i as filterMessagingToolMediaDuplicates, m as splitMediaFromOutput, n as applyReplyThreading, o as shouldSuppressMessagingToolReplies, p as MEDIA_TOKEN_RE, r as filterMessagingToolDuplicates, s as createReplyToModeFilterForChannel, t as applyReplyTagsToPayload } from "./reply-payloads-Dk-zLmJC.js";
+import { S as textToSpeechTelephony, _ as setTtsEnabled, a as isSummarizationEnabled, b as stripTtsDirectivesFromText, c as maybeApplyTtsToPayload, d as resolveTtsAutoMode, f as resolveTtsConfig, g as setSummarizationEnabled, h as setLastTtsAttempt, i as getTtsProvider, l as normalizeTtsAutoMode, n as getLastTtsAttempt, o as isTtsEnabled, p as resolveTtsPrefsPath, r as getTtsMaxLength, s as isTtsProviderConfigured, t as buildTtsSystemPromptHint, u as resolveTtsApiKey, v as setTtsMaxLength, x as textToSpeech, y as setTtsProvider } from "./tts-DrFhyLnB.js";
 import { c as detectMime, f as isAudioFileName, g as MAX_IMAGE_BYTES, i as getImageMetadata, m as kindFromMime, s as resizeToJpeg, u as getFileExtension, v as mediaKindFromMime } from "./image-ops-QvmG4zb9.js";
 import { n as isVoiceCompatibleAudio } from "./audio-COkH8CV-.js";
-import { A as formatAssistantErrorText, B as isTimeoutErrorMessage, C as isGoogleModelApi, D as isFailoverAssistantError, E as isBillingAssistantError, F as isRawApiErrorPayload, G as ensureSessionHeader, H as parseImageDimensionError, I as isCloudCodeAssistFormatError, J as sanitizeGoogleTurnOrdering, K as resolveBootstrapMaxChars, L as isCompactionFailureError, M as formatRawAssistantErrorForUi, N as sanitizeUserFacingText, O as isFailoverErrorMessage, P as getApiErrorPayloadFingerprint, R as isContextOverflowError, S as isAntigravityClaude, T as isAuthAssistantError, U as parseImageSizeError, V as isTransientHttpError, W as buildBootstrapContextFiles, _ as normalizeTextForComparison, a as formatXHighModelHint, b as extractToolResultId, c as normalizeElevatedLevel, d as normalizeUsageDisplay, f as normalizeVerboseLevel, g as isMessagingToolDuplicateNormalized, i as formatThinkingLevels, j as formatBillingErrorMessage, k as isRateLimitAssistantError, l as normalizeReasoningLevel, m as supportsXHighThinking, n as validateGeminiTurns, p as resolveResponseUsageMode, q as resolveBootstrapTotalMaxChars, r as pickFallbackThinkingLevel, t as validateAnthropicTurns, u as normalizeThinkLevel, v as sanitizeSessionMessagesImages, w as classifyFailoverReason, x as downgradeOpenAIReasoningBlocks, y as extractToolCallsFromAssistant, z as isLikelyContextOverflowError } from "./pi-embedded-helpers-D-m7pmXE.js";
-import { C as compileGlobPatterns, S as stripPluginOnlyAllowlist, _ as expandPolicyWithPluginGroups, a as ensureSandboxWorkspaceForSession, b as normalizeToolName, c as resolveSandboxRuntimeStatus, g as collectExplicitAllowlist, h as buildPluginToolGroups, m as applyOwnerOnlyToolPolicy, o as resolveSandboxContext, u as resolveSandboxConfigForAgent, w as matchesAnyGlobPattern, x as resolveToolProfilePolicy, y as mergeAlsoAllowPolicy } from "./sandbox-pZvVQZ-a.js";
+import { A as formatAssistantErrorText, B as isTimeoutErrorMessage, C as isGoogleModelApi, D as isFailoverAssistantError, E as isBillingAssistantError, F as isRawApiErrorPayload, G as ensureSessionHeader, H as parseImageDimensionError, I as isCloudCodeAssistFormatError, J as sanitizeGoogleTurnOrdering, K as resolveBootstrapMaxChars, L as isCompactionFailureError, M as formatRawAssistantErrorForUi, N as sanitizeUserFacingText, O as isFailoverErrorMessage, P as getApiErrorPayloadFingerprint, R as isContextOverflowError, S as isAntigravityClaude, T as isAuthAssistantError, U as parseImageSizeError, V as isTransientHttpError, W as buildBootstrapContextFiles, _ as normalizeTextForComparison, a as formatXHighModelHint, b as extractToolResultId, c as normalizeElevatedLevel, d as normalizeUsageDisplay, f as normalizeVerboseLevel, g as isMessagingToolDuplicateNormalized, i as formatThinkingLevels, j as formatBillingErrorMessage, k as isRateLimitAssistantError, l as normalizeReasoningLevel, m as supportsXHighThinking, n as validateGeminiTurns, p as resolveResponseUsageMode, q as resolveBootstrapTotalMaxChars, r as pickFallbackThinkingLevel, t as validateAnthropicTurns, u as normalizeThinkLevel, v as sanitizeSessionMessagesImages, w as classifyFailoverReason, x as downgradeOpenAIReasoningBlocks, y as extractToolCallsFromAssistant, z as isLikelyContextOverflowError } from "./pi-embedded-helpers-BsRnajNh.js";
+import { C as compileGlobPatterns, S as stripPluginOnlyAllowlist, _ as expandPolicyWithPluginGroups, a as ensureSandboxWorkspaceForSession, b as normalizeToolName, c as resolveSandboxRuntimeStatus, g as collectExplicitAllowlist, h as buildPluginToolGroups, m as applyOwnerOnlyToolPolicy, o as resolveSandboxContext, u as resolveSandboxConfigForAgent, w as matchesAnyGlobPattern, x as resolveToolProfilePolicy, y as mergeAlsoAllowPolicy } from "./sandbox-CDGF9AVA.js";
 import { l as safeEqualSecret } from "./auth-CFiHbm6v.js";
 import { r as formatUncaughtError, t as extractErrorCode } from "./errors-iV4-NKRR.js";
 import { a as isPrivateIpAddress, i as isBlockedHostname } from "./ssrf-DWqM0QRy.js";
 import { n as getMediaDir, r as saveMediaBuffer } from "./store-CoD1VHWb.js";
 import { i as resolveImageSanitizationLimits, n as sanitizeImageBlocks, r as sanitizeToolResultImages } from "./tool-images-BeP6oYp4.js";
-import { n as ensureOpenClawModelsJson, t as ensureMinionModelsJson } from "./models-config-Df7nRCU-.js";
+import { n as ensureOpenClawModelsJson, t as ensureMinionModelsJson } from "./models-config-ChIAfklN.js";
 import { a as traceGatewayEvent, i as traceChatEvent, t as deriveTraceId } from "./chat-trace-BMcJ2gl7.js";
 import { n as createAuditStore, r as getToolPrivacyDeclaration } from "./audit-store-DJPME7n7.js";
 import { t as wrapToolWithTracking } from "./tool-tracking-cC4VNDsZ.js";
-import { i as resolveMemoryBackendConfig, n as registerMemoryCli, r as getMemorySearchManager } from "./memory-cli-Y_w-AsVt.js";
+import { i as resolveMemoryBackendConfig, n as registerMemoryCli, r as getMemorySearchManager } from "./memory-cli-ilkHc_D4.js";
 import { a as resolveMemorySearchConfig, i as executeWithApiKeyRotation, n as parseGeminiAuth, r as collectProviderApiKeysForExecution } from "./manager-BRl2NvLA.js";
 import { h as runTasksWithConcurrency } from "./session-files-CzSsU7Yu.js";
 import { a as readNumberParam, i as jsonResult, s as readStringParam } from "./common-BHzo6lXS.js";
 import { a as chunkByNewline, c as chunkMarkdownTextWithMode, d as resolveChunkMode, f as resolveTextChunkLimit, h as parseFenceSpans, i as resolveMarkdownTableMode, l as chunkText, m as isSafeFenceBreak, p as findFenceSpanAt, s as chunkMarkdownText, u as chunkTextWithMode } from "./ir-CWeDtRRp.js";
-import { i as shouldHandleTextCommands, n as listChatCommandsForConfig, r as normalizeCommandBody, t as listChatCommands } from "./commands-registry-dia3m7-M.js";
-import { a as stripToolMessages, d as resolveDisplaySessionKey, f as resolveInternalSessionKey, i as sanitizeTextContent, p as resolveMainSessionAlias, r as extractAssistantText } from "./sessions-helpers-uZ0Taeh3.js";
-import { a as formatReasoningMessage, c as promoteThinkingTagsToBlocks, f as extractTextFromChatContent, i as extractThinkingFromTaggedText, l as stripDowngradedToolCallText, n as extractAssistantThinking, o as inferToolMetaFromArgs, r as extractThinkingFromTaggedStream, s as isAssistantMessage, t as extractAssistantText$1 } from "./pi-embedded-utils-DIGchmzO.js";
+import { i as shouldHandleTextCommands, n as listChatCommandsForConfig, r as normalizeCommandBody, t as listChatCommands } from "./commands-registry-UnBqSA67.js";
+import { a as stripToolMessages, d as resolveDisplaySessionKey, f as resolveInternalSessionKey, i as sanitizeTextContent, p as resolveMainSessionAlias, r as extractAssistantText } from "./sessions-helpers-xH-u6Byb.js";
+import { a as formatReasoningMessage, c as promoteThinkingTagsToBlocks, f as extractTextFromChatContent, i as extractThinkingFromTaggedText, l as stripDowngradedToolCallText, n as extractAssistantThinking, o as inferToolMetaFromArgs, r as extractThinkingFromTaggedStream, s as isAssistantMessage, t as extractAssistantText$1 } from "./pi-embedded-utils-Bql42QTv.js";
 import { n as resolveToolDisplay } from "./tool-display-DQ7I53Xn.js";
 import { n as formatTimeAgo } from "./format-relative-Bjc3l98W.js";
 import { n as detectSuspiciousPatterns } from "./external-content-Css-cJoz.js";
-import { a as isTimeoutError, l as resolveWorkspaceRoot, m as minimaxUnderstandImage, n as runWithModelFallback, o as resolveFailoverReasonFromError, r as FailoverError, s as resolveFailoverStatus, u as coerceImageAssistantText } from "./model-fallback-C92G-WUW.js";
+import { a as isTimeoutError, l as resolveWorkspaceRoot, m as minimaxUnderstandImage, n as runWithModelFallback, o as resolveFailoverReasonFromError, r as FailoverError, s as resolveFailoverStatus, u as coerceImageAssistantText } from "./model-fallback-DXR7ZbvM.js";
 import { n as fetchWithTimeout, t as bindAbortRelay } from "./fetch-timeout-DyZRVfXm.js";
 import { t as fetchWithSsrFGuard } from "./fetch-guard-2x6L37KS.js";
 import { a as fetchRemoteMedia, i as MediaFetchError, n as loadWebMedia, o as readResponseWithLimit } from "./load-DKN9eCoe.js";
-import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-AiXYmm_2.js";
-import { f as lookupContextTokens, o as loadSessionEntry } from "./session-utils-0BYkk3f_.js";
-import { a as resolveSubagentToolPolicy, c as SCOPE_DECLARED_TOOL_NAMES, d as listAgentWorkspaceDirs, i as resolveGroupToolPolicy, l as isRestrictedAgent, n as isToolAllowedByPolicies, r as resolveEffectiveToolPolicy, s as archetypeDefault, t as filterToolsByPolicy, u as shouldForceWorkspaceOnly } from "./pi-tools.policy-Dt2kTSid.js";
+import { n as loadModelCatalog, r as modelSupportsVision, t as findModelInCatalog } from "./model-catalog-7Ew4iFgU.js";
+import { f as lookupContextTokens, o as loadSessionEntry } from "./session-utils-DDCd8HC9.js";
+import { a as resolveSubagentToolPolicy, c as SCOPE_DECLARED_TOOL_NAMES, d as listAgentWorkspaceDirs, i as resolveGroupToolPolicy, l as isRestrictedAgent, n as isToolAllowedByPolicies, r as resolveEffectiveToolPolicy, s as archetypeDefault, t as filterToolsByPolicy, u as shouldForceWorkspaceOnly } from "./pi-tools.policy-DDJ31-0E.js";
 import { t as resolveFetch } from "./fetch-79DaZarF.js";
 import { n as fetchDiscord, t as normalizeDiscordSlug } from "./allow-list-B-j8hjG8.js";
 import { t as createSlackWebClient } from "./client-B0alQSqy.js";
 import { a as removeChannelAllowFromStoreEntry, c as listPairingChannels, i as readChannelAllowFromStore, o as upsertChannelPairingRequest, t as addChannelAllowFromStoreEntry } from "./pairing-store-msaEKSLt.js";
 import { d as resolveExecApprovals, f as resolveExecApprovalsFromFile, g as resolveSafeBins, h as evaluateShellAllowlist, i as maxAsk, l as recordAllowlistUse, n as addAllowlistEntry, o as minSecurity, u as requiresExecApproval, v as buildSafeBinsShellCommand, y as buildSafeShellCommand } from "./exec-approvals-9-5NQEhL.js";
 import { i as buildNodeShellCommand, n as mergePathPrepend, r as normalizePathPrepend, t as applyPathPrepend } from "./path-prepend-DJZoKorq.js";
-import { t as callGatewayTool } from "./gateway-CqhiWZQd.js";
-import { r as resolveNodeIdFromList, t as listNodes } from "./nodes-utils-Eo4ilZ36.js";
+import { t as callGatewayTool } from "./gateway-D_kwhuup.js";
+import { r as resolveNodeIdFromList, t as listNodes } from "./nodes-utils-DVNKajNN.js";
 import { t as formatDurationCompact$1 } from "./format-duration-DxxnRZtB.js";
 import { c as hasNonzeroUsage, l as normalizeUsage, n as loadCostUsageSummary, o as derivePromptTokens, r as loadSessionCostSummary, s as deriveSessionTotalTokens } from "./session-cost-usage-b8aNuBYW.js";
 import { i as resolveModelCostConfig, n as formatTokenCount$2, r as formatUsd, t as estimateUsageCost } from "./usage-format--dK3YoXf.js";
@@ -105,6 +105,7 @@ import { Type } from "@sinclair/typebox";
 import { createJiti } from "jiti";
 import { Type as Type$1 } from "typebox";
 import chokidar from "chokidar";
+import { Bash, InMemoryFs, MountableFs, ReadWriteFs } from "just-bash";
 import { EventEmitter } from "node:events";
 //#region src/infra/agent-events.ts
 const seqByRun = /* @__PURE__ */ new Map();
@@ -3060,7 +3061,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-C40KRMzm.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-BCijF1xe.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -11323,6 +11324,189 @@ function buildLandlockSandboxEnv(workdir) {
 	};
 }
 //#endregion
+//#region src/agents/sandbox/tier0/router.ts
+/**
+* Tier-0 routing + interpreter-limitation heuristics.
+*
+* `shouldTryTier0` decides — cheaply, before running anything — whether a command
+* is a candidate for the in-process virtual sandbox. It is CONSERVATIVE: anything
+* that needs the network, a real runtime/toolchain, a privileged syscall, or an
+* external binary that lives outside the virtual command set escalates straight
+* to Docker. When tier-0 is tried and just-bash can't serve it, the exec result
+* is flagged `unsupported` (see isInterpreterLimitation) and the caller escalates.
+*/
+const ESCALATE_PATTERNS = [
+	/\b(curl|wget|nc|ncat|netcat|ssh|scp|sftp|rsync|ping|dig|nslookup|host)\b/,
+	/\b(python3?|pip3?|node|npm|pnpm|yarn|bun|deno|ruby|perl|php|cargo|rustc|go|gcc|g\+\+|cc|clang|make|cmake|java|javac|dotnet)\b/,
+	/\b(apt|apt-get|dpkg|yum|dnf|apk|brew|sudo|su|systemctl|service|mount|umount|chroot|insmod|modprobe|iptables)\b/,
+	/\b(docker|kubectl|helm|git|gh|aws|gcloud|az|terraform|ffmpeg|convert|magick|pandoc)\b/,
+	/(^|\s|=)\/(dev|proc|sys)\//,
+	/<\(|>\(/
+];
+function shouldTryTier0(command) {
+	const cmd = command.trim();
+	if (!cmd) return false;
+	for (const re of ESCALATE_PATTERNS) if (re.test(cmd)) return false;
+	return true;
+}
+/**
+* Distinguish "just-bash can't do this" from "the user's command legitimately
+* failed". Known limitations in just-bash@3.0.1 include `$(( ))` arithmetic
+* expansion (trips its own defense-in-depth `node:module` guard) and any
+* unimplemented builtin. These must escalate to Docker, not surface as failures.
+*/
+function isInterpreterLimitation(stderr) {
+	if (!stderr) return false;
+	return /security violation/i.test(stderr) || /indicates a bug in just-bash/i.test(stderr) || /\bcommand not found\b/i.test(stderr) || /not (yet )?(supported|implemented)/i.test(stderr) || /unknown command/i.test(stderr);
+}
+//#endregion
+//#region src/agents/sandbox/tier0/virtual-sandbox.ts
+/**
+* Tier-0 virtual sandbox — an in-process bash backend powered by just-bash.
+*
+* This is the cheap/fast tier in front of the Docker sandbox. For the high-volume
+* "safe" majority of agent shell calls (string munging, fs reads/writes in the
+* workspace, grep/sed/jq-style pipelines) it runs the command in-process against
+* an in-memory shell with the real workspace dir mounted — no container spawn.
+*
+* Correctness: the agent's real workspace dir is mounted (read-write, symlink-
+* blocked, root-jailed via just-bash's ReadWriteFs) at the container workdir, so
+* file visibility is identical to the Docker path. `/tmp` etc. live on an
+* InMemoryFs base. Network and python are OFF by default (just-bash defaults).
+*
+* Anything just-bash can't serve (an unimplemented builtin, an internal error)
+* sets `unsupported: true`; callers MUST escalate those to the Docker backend.
+* See ./router.ts for the routing + interpreter-limitation heuristics.
+*/
+var Tier0VirtualSandbox = class {
+	constructor() {
+		this.instances = /* @__PURE__ */ new Map();
+	}
+	getInstance(req) {
+		const existing = this.instances.get(req.scopeKey);
+		if (existing && existing.workspaceHostDir === req.workspaceHostDir && existing.workdir === req.workdir) {
+			existing.lastUsed = Date.now();
+			return existing.bash;
+		}
+		const fs = new MountableFs({ base: new InMemoryFs() });
+		fs.mount(req.workdir, new ReadWriteFs({ root: req.workspaceHostDir }));
+		const bash = new Bash({
+			fs,
+			cwd: req.workdir,
+			env: {
+				LANG: "C.UTF-8",
+				...req.env
+			},
+			executionLimits: {
+				maxCommandCount: 1e4,
+				maxLoopIterations: 1e6
+			}
+		});
+		const inst = {
+			bash,
+			workspaceHostDir: req.workspaceHostDir,
+			workdir: req.workdir,
+			lastUsed: Date.now()
+		};
+		this.instances.set(req.scopeKey, inst);
+		return bash;
+	}
+	async exec(req) {
+		const startedAt = Date.now();
+		let bash;
+		try {
+			bash = this.getInstance(req);
+		} catch {
+			return {
+				status: "failed",
+				exitCode: null,
+				durationMs: Date.now() - startedAt,
+				aggregated: "",
+				timedOut: false,
+				unsupported: true
+			};
+		}
+		try {
+			const result = await withTimeout$2(bash.exec(req.command, {
+				cwd: req.workdir,
+				env: req.env
+			}), req.timeoutSec ? req.timeoutSec * 1e3 : void 0);
+			const durationMs = Date.now() - startedAt;
+			const combined = [result.stdout, result.stderr].filter(Boolean).join("").trim();
+			if (result.exitCode === 0) return {
+				status: "completed",
+				exitCode: 0,
+				durationMs,
+				aggregated: combined,
+				timedOut: false,
+				unsupported: false
+			};
+			return {
+				status: "failed",
+				exitCode: result.exitCode,
+				durationMs,
+				aggregated: combined,
+				timedOut: false,
+				unsupported: isInterpreterLimitation(result.stderr)
+			};
+		} catch (err) {
+			const timedOut = err instanceof TimeoutError;
+			return {
+				status: "failed",
+				exitCode: null,
+				durationMs: Date.now() - startedAt,
+				aggregated: "",
+				timedOut,
+				unsupported: !timedOut
+			};
+		}
+	}
+	dispose(scopeKey) {
+		if (scopeKey) this.instances.delete(scopeKey);
+		else this.instances.clear();
+	}
+	/** test/inspection helper */
+	get liveInstances() {
+		return this.instances.size;
+	}
+};
+var TimeoutError = class extends Error {};
+function withTimeout$2(p, ms) {
+	if (!ms) return p;
+	return new Promise((resolve, reject) => {
+		const timer = setTimeout(() => reject(new TimeoutError()), ms);
+		p.then((value) => {
+			clearTimeout(timer);
+			resolve(value);
+		}, (error) => {
+			clearTimeout(timer);
+			reject(error);
+		});
+	});
+}
+//#endregion
+//#region src/agents/sandbox/tier0/registry.ts
+let singleton$1;
+function getTier0Sandbox() {
+	if (!singleton$1) singleton$1 = new Tier0VirtualSandbox();
+	return singleton$1;
+}
+/**
+* Resolve the tier-0 binding for an exec, or undefined to use the Docker/host
+* path. `workspaceHostDir` is the real sandbox workspace dir (mounted into the
+* Docker container too), so tier-0 sees the same files.
+*/
+function resolveTier0Binding(params) {
+	if (!params.workspaceHostDir) return;
+	const sandboxCfg = resolveSandboxConfigForAgent(params.config ?? loadConfig(), params.agentId);
+	if (!sandboxCfg.tier0.enabled) return;
+	if (sandboxCfg.workspaceAccess === "ro") return;
+	return {
+		backend: getTier0Sandbox(),
+		workspaceHostDir: params.workspaceHostDir
+	};
+}
+//#endregion
 //#region src/infra/heartbeat-reason.ts
 function trimReason(reason) {
 	return typeof reason === "string" ? reason.trim() : "";
@@ -12523,10 +12707,112 @@ function emitExecSystemEvent(text, opts) {
 	});
 	requestHeartbeatNow({ reason: "exec-event" });
 }
+/**
+* Tier-0 fast path: run `execCommand` in the in-process virtual sandbox. Returns
+* a completed ExecProcessHandle on success, or null when just-bash can't serve
+* the command (so the caller escalates to Docker). Output is sanitized and a
+* ProcessSession is registered exactly like the normal path, so downstream
+* session listing / tailing is unaffected.
+*/
+async function tryTier0Exec(args) {
+	const { opts, sessionId, startedAt, execCommand } = args;
+	const tier0 = opts.tier0;
+	const sandbox = opts.sandbox;
+	if (!tier0 || !sandbox) return null;
+	const workdir = opts.containerWorkdir ?? sandbox.containerWorkdir;
+	let outcome;
+	try {
+		outcome = await tier0.backend.exec({
+			command: execCommand,
+			workdir,
+			workspaceHostDir: tier0.workspaceHostDir,
+			env: opts.env,
+			scopeKey: sandbox.containerName,
+			timeoutSec: opts.timeoutSec
+		});
+	} catch {
+		return null;
+	}
+	if (outcome.unsupported) return null;
+	const session = {
+		id: sessionId,
+		command: opts.command,
+		scopeKey: opts.scopeKey,
+		sessionKey: opts.sessionKey,
+		notifyOnExit: opts.notifyOnExit,
+		notifyOnExitEmptySuccess: opts.notifyOnExitEmptySuccess === true,
+		exitNotified: false,
+		child: void 0,
+		stdin: void 0,
+		pid: void 0,
+		startedAt,
+		cwd: opts.workdir,
+		maxOutputChars: opts.maxOutput,
+		pendingMaxOutputChars: opts.pendingMaxOutput,
+		totalOutputChars: 0,
+		pendingStdout: [],
+		pendingStderr: [],
+		pendingStdoutChars: 0,
+		pendingStderrChars: 0,
+		aggregated: "",
+		tail: "",
+		exited: false,
+		exitCode: void 0,
+		exitSignal: void 0,
+		truncated: false,
+		backgrounded: false
+	};
+	addSession(session);
+	const sanitized = stripAnsi(sanitizeBinaryOutput(outcome.aggregated));
+	for (const chunk of chunkString(sanitized)) appendOutput(session, "stdout", chunk);
+	const status = outcome.status === "completed" ? "completed" : "failed";
+	markExited(session, outcome.exitCode ?? 0, null, status);
+	const durationMs = Date.now() - startedAt;
+	const aggregated = session.aggregated.trim();
+	let result;
+	if (status === "completed") {
+		const exitCode = outcome.exitCode ?? 0;
+		result = {
+			status: "completed",
+			exitCode,
+			exitSignal: null,
+			durationMs,
+			aggregated: aggregated + (exitCode !== 0 ? `\n\n(Command exited with code ${exitCode})` : ""),
+			timedOut: false
+		};
+	} else {
+		const reason = outcome.timedOut ? `Command timed out after ${opts.timeoutSec} seconds` : `Command exited with code ${outcome.exitCode ?? 1}`;
+		result = {
+			status: "failed",
+			exitCode: outcome.exitCode,
+			exitSignal: null,
+			durationMs,
+			aggregated,
+			timedOut: outcome.timedOut,
+			reason: aggregated ? `${aggregated}\n\n${reason}` : reason
+		};
+	}
+	return {
+		session,
+		startedAt,
+		pid: void 0,
+		promise: Promise.resolve(result),
+		kill: () => {}
+	};
+}
 async function runExecProcess(opts) {
 	const startedAt = Date.now();
 	const sessionId = createSessionSlug();
 	const execCommand = opts.execCommand ?? opts.command;
+	if (opts.tier0 && opts.sandbox && !opts.usePty && shouldTryTier0(execCommand)) {
+		const tier0Handle = await tryTier0Exec({
+			opts,
+			sessionId,
+			startedAt,
+			execCommand
+		});
+		if (tier0Handle) return tier0Handle;
+	}
 	const supervisor = getProcessSupervisor();
 	const session = {
 		id: sessionId,
@@ -13306,7 +13592,11 @@ function createExecTool(defaults) {
 				scopeKey: defaults?.scopeKey,
 				sessionKey: notifySessionKey,
 				timeoutSec: effectiveTimeout,
-				onUpdate
+				onUpdate,
+				tier0: sandbox ? resolveTier0Binding({
+					agentId,
+					workspaceHostDir: sandbox.workspaceDir
+				}) : void 0
 			});
 			let yielded = false;
 			let yieldTimer = null;
@@ -15973,11 +16263,12 @@ const AGENT_TYPE_SECTIONS = [
 			if (!trimmed) return [];
 			return [
 				"## Skills (mandatory)",
-				"Before replying: scan <available_skills> <description> entries.",
-				`- If exactly one skill clearly applies: read its SKILL.md at <location> with \`${ctx.readToolName}\`, then follow it.`,
-				"- If multiple could apply: choose the most specific one, then read/follow it.",
-				"- If none clearly apply: do not read any SKILL.md.",
-				"Constraints: never read more than one skill up front; only read after selecting.",
+				"Before replying: scan the <available_skills> entries.",
+				"- If exactly one skill clearly applies: load its full instructions, then follow it.",
+				"- If multiple could apply: choose the most specific one, then load/follow it.",
+				"- If none clearly apply: do not load any skill.",
+				`To load a skill's full instructions: if they aren't already shown, call the \`skill_view\` tool with the skill name; otherwise read its SKILL.md at <location> with \`${ctx.readToolName}\`.`,
+				"Constraints: never load more than one skill up front; only load after selecting.",
 				trimmed,
 				""
 			];
@@ -16122,6 +16413,40 @@ const AGENT_TYPE_SECTIONS = [
 	}
 ];
 //#endregion
+//#region src/agents/sections/behaviour.ts
+/**
+* Identity-layer section that injects the agent's self-maintained operating
+* rules. The rules live at `<workspaceDir>/prompts/behaviour.md` and are
+* written by the `update_behaviour` tool. There is intentionally no global
+* fallback file — the section renders nothing unless the agent has authored
+* its own behaviour.md.
+*/
+const BEHAVIOUR_SECTIONS = [{
+	id: "behaviour",
+	layer: "identity",
+	order: 2200,
+	modes: ["full", "minimal"],
+	cacheable: false,
+	header: "## Operating Rules (self-maintained)",
+	source: "file",
+	render: (ctx) => {
+		const workspaceDir = ctx.params.workspaceDir;
+		if (!workspaceDir) return [];
+		const content = resolveProse({
+			layer: "identity",
+			id: "behaviour",
+			agentWorkspaceDir: workspaceDir
+		})?.content.trim();
+		if (!content) return [];
+		return [
+			"## Operating Rules (self-maintained)",
+			"",
+			content,
+			""
+		];
+	}
+}];
+//#endregion
 //#region src/agents/sections/identity.ts
 /** Identity-layer section definitions (3 sections). */
 const IDENTITY_SECTIONS = [
@@ -17137,6 +17462,7 @@ function getBuiltinRegistry() {
 	_registry.registerAll(PLATFORM_SECTIONS);
 	_registry.registerAll(AGENT_TYPE_SECTIONS);
 	_registry.registerAll(IDENTITY_SECTIONS);
+	_registry.registerAll(BEHAVIOUR_SECTIONS);
 	_registry.registerAll(USER_SECTIONS);
 	_registry.registerAll(SESSION_SECTIONS);
 	return _registry;
@@ -23063,7 +23389,7 @@ const TOOL_REGISTRY = {
 			},
 			contextKeys: ["agentSessionKey"]
 		},
-		load: () => import("./cron-tool-B3ffaxAO.js")
+		load: () => import("./cron-tool-Dcr3QMih.js")
 	},
 	"gateway": {
 		meta: {
@@ -23080,7 +23406,7 @@ const TOOL_REGISTRY = {
 			},
 			contextKeys: ["agentSessionKey", "config"]
 		},
-		load: () => import("./gateway-tool-DtlbDV6N.js")
+		load: () => import("./gateway-tool-Bi96OPGe.js")
 	},
 	"crm_search": {
 		meta: {
@@ -23146,7 +23472,7 @@ const TOOL_REGISTRY = {
 			],
 			condition: "hasAgentDir"
 		},
-		load: () => import("./image-tool-CwCxITcF.js")
+		load: () => import("./image-tool-D_dhIXLT.js")
 	},
 	"tts": {
 		meta: {
@@ -23160,7 +23486,7 @@ const TOOL_REGISTRY = {
 			},
 			contextKeys: ["agentChannel", "config"]
 		},
-		load: () => import("./tts-tool-DsLN8-ZT.js")
+		load: () => import("./tts-tool-CdaKVWBM.js")
 	},
 	"message": {
 		meta: {
@@ -23418,7 +23744,7 @@ const TOOL_REGISTRY = {
 			],
 			condition: "messageEnabled"
 		},
-		load: () => import("./message-tool-_MODnjgC.js")
+		load: () => import("./message-tool-GTRrYMuR.js")
 	},
 	"agents_list": {
 		meta: {
@@ -23432,7 +23758,7 @@ const TOOL_REGISTRY = {
 			},
 			contextKeys: ["agentSessionKey", "requesterAgentIdOverride"]
 		},
-		load: () => import("./agents-list-tool-D9mHFLLa.js")
+		load: () => import("./agents-list-tool-CzUTgXov.js")
 	},
 	"architect_pipeline": {
 		meta: {
@@ -23518,7 +23844,7 @@ const TOOL_REGISTRY = {
 			},
 			contextKeys: ["agentSessionKey", "config"]
 		},
-		load: () => import("./nodes-tool-CR8MmpTZ.js")
+		load: () => import("./nodes-tool-BkgixWxk.js")
 	},
 	"venture_studio": {
 		meta: {
@@ -23546,7 +23872,7 @@ const TOOL_REGISTRY = {
 			},
 			contextKeys: ["agentSessionKey", "config"]
 		},
-		load: () => import("./session-status-tool-DnD354sJ.js")
+		load: () => import("./session-status-tool-CtbF1-VI.js")
 	},
 	"sessions_history": {
 		meta: {
@@ -23564,7 +23890,7 @@ const TOOL_REGISTRY = {
 			},
 			contextKeys: ["agentSessionKey", "sandboxed"]
 		},
-		load: () => import("./sessions-history-tool-6WMcHpxy.js")
+		load: () => import("./sessions-history-tool-DKXNjv5X.js")
 	},
 	"sessions_list": {
 		meta: {
@@ -23583,7 +23909,7 @@ const TOOL_REGISTRY = {
 			},
 			contextKeys: ["agentSessionKey", "sandboxed"]
 		},
-		load: () => import("./sessions-list-tool-CwTLRwGc.js")
+		load: () => import("./sessions-list-tool-6DJtypdD.js")
 	},
 	"sessions_send": {
 		meta: {
@@ -23606,7 +23932,7 @@ const TOOL_REGISTRY = {
 				"sandboxed"
 			]
 		},
-		load: () => import("./sessions-send-tool-BKNgicV5.js")
+		load: () => import("./sessions-send-tool-C3ggqtMe.js")
 	},
 	"sessions_spawn": {
 		meta: {
@@ -23639,7 +23965,7 @@ const TOOL_REGISTRY = {
 				"requesterAgentIdOverride"
 			]
 		},
-		load: () => import("./sessions-spawn-tool-DqfoPFrK.js")
+		load: () => import("./sessions-spawn-tool-BgkkNWMg.js")
 	},
 	"subagents": {
 		meta: {
@@ -23666,7 +23992,7 @@ const TOOL_REGISTRY = {
 			},
 			contextKeys: ["agentSessionKey"]
 		},
-		load: () => import("./subagents-tool-usr_WpP2.js")
+		load: () => import("./subagents-tool-BdWYv7Mb.js")
 	},
 	"browser": {
 		meta: {
@@ -23756,7 +24082,7 @@ const TOOL_REGISTRY = {
 			},
 			contextKeys: ["sandboxBrowserBridgeUrl", "allowHostBrowserControl"]
 		},
-		load: () => import("./browser-tool-CWG74LXa.js")
+		load: () => import("./browser-tool-BVAlCkv9.js")
 	},
 	"canvas": {
 		meta: {
@@ -23819,7 +24145,7 @@ const TOOL_REGISTRY = {
 			},
 			contextKeys: ["config"]
 		},
-		load: () => import("./canvas-tool-yqzOmVk8.js")
+		load: () => import("./canvas-tool-C8kJ8X6t.js")
 	},
 	"web_fetch": {
 		meta: {
@@ -23851,7 +24177,7 @@ const TOOL_REGISTRY = {
 			},
 			contextKeys: ["config", "sandboxed"]
 		},
-		load: () => import("./web-search-B5d6ODyB.js")
+		load: () => import("./web-search-CCeGZMBD.js")
 	}
 };
 //#endregion
@@ -28011,7 +28337,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-C40KRMzm.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-BCijF1xe.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg: params.cfg,
 			channel,
@@ -34130,7 +34456,7 @@ function guardSessionManager(sessionManager, opts) {
 //#region src/agents/pi-embedded-runner/compaction-safety-timeout.ts
 const EMBEDDED_COMPACTION_TIMEOUT_MS = 3e5;
 async function compactWithSafetyTimeout(compact, timeoutMs = EMBEDDED_COMPACTION_TIMEOUT_MS) {
-	return await withTimeout$2(() => compact(), timeoutMs, "Compaction");
+	return await withTimeout$3(() => compact(), timeoutMs, "Compaction");
 }
 //#endregion
 //#region src/agents/pi-extensions/session-manager-runtime-registry.ts
@@ -36858,6 +37184,13 @@ function resolvePrivacyModeOverride(currentProvider, currentModelId) {
 //#region src/agents/pi-embedded-runner/lifecycle-hooks.ts
 const hookRegistry = /* @__PURE__ */ new Map();
 /**
+* Register lifecycle hooks for a plugin.
+* Replaces any previously registered hooks for the same pluginId.
+*/
+function registerLifecycleHooks(pluginId, hooks) {
+	hookRegistry.set(pluginId, hooks);
+}
+/**
 * Fire preLlmCall hooks in registration order.
 * If any hook returns a modified context, subsequent hooks receive the modified version.
 * Errors in individual hooks are caught and logged (never block the LLM call).
@@ -40106,6 +40439,35 @@ async function prepareSessionManagerForRun(params) {
 	}
 }
 //#endregion
+//#region src/agents/pi-embedded-runner/tool-result-reduce.ts
+/** Pure text reducer for oversized/repetitive tool output. Never throws. */
+function reduceToolOutputText(text, opts) {
+	let lines = text.split("\n");
+	if (opts.collapseRuns) {
+		const collapsed = [];
+		let i = 0;
+		while (i < lines.length) {
+			let j = i + 1;
+			while (j < lines.length && lines[j] === lines[i]) j += 1;
+			const run = j - i;
+			if (run >= 5) collapsed.push(`${lines[i]}  (repeated ${run}×)`);
+			else for (let k = i; k < j; k++) collapsed.push(lines[k]);
+			i = j;
+		}
+		lines = collapsed;
+	}
+	if (lines.length <= opts.maxLines) return lines.join("\n");
+	if (opts.headLines + opts.tailLines >= lines.length) return lines.join("\n");
+	const head = lines.slice(0, opts.headLines);
+	const tail = lines.slice(lines.length - opts.tailLines);
+	const elided = lines.length - head.length - tail.length;
+	return [
+		...head,
+		`… ${elided} lines elided …`,
+		...tail
+	].join("\n");
+}
+//#endregion
 //#region src/agents/pi-embedded-runner/tool-result-context-guard.ts
 const CHARS_PER_TOKEN_ESTIMATE = 4;
 const CONTEXT_INPUT_HEADROOM_RATIO = .75;
@@ -40248,8 +40610,31 @@ function applyMessageMutationInPlace(target, source) {
 	for (const key of Object.keys(targetRecord)) if (!(key in sourceRecord)) delete targetRecord[key];
 	Object.assign(targetRecord, sourceRecord);
 }
+const REDUCE_MAX_LINES = 200;
+const REDUCE_HEAD_LINES = 40;
+const REDUCE_TAIL_LINES = 40;
+/**
+* Run the pure line-reducer over each tool-result message's text content,
+* mutating messages in place. Skips reductions that wouldn't shrink the text.
+*/
+function reduceToolResultOutputsInPlace(messages) {
+	for (const message of messages) {
+		if (!isToolResultMessage(message)) continue;
+		const rawText = getToolResultText(message);
+		if (!rawText) continue;
+		const reduced = reduceToolOutputText(rawText, {
+			maxLines: REDUCE_MAX_LINES,
+			headLines: REDUCE_HEAD_LINES,
+			tailLines: REDUCE_TAIL_LINES,
+			collapseRuns: true
+		});
+		if (reduced === rawText) continue;
+		applyMessageMutationInPlace(message, replaceToolResultText(message, reduced));
+	}
+}
 function enforceToolResultContextBudgetInPlace(params) {
-	const { messages, contextBudgetChars, maxSingleToolResultChars } = params;
+	const { messages, contextBudgetChars, maxSingleToolResultChars, reduceOutput } = params;
+	if (reduceOutput) reduceToolResultOutputsInPlace(messages);
 	for (const message of messages) {
 		if (!isToolResultMessage(message)) continue;
 		applyMessageMutationInPlace(message, truncateToolResultToChars(message, maxSingleToolResultChars));
@@ -40271,6 +40656,7 @@ function enforceToolResultContextBudgetInPlace(params) {
 * @returns An async function suitable for use as Agent's transformContext callback.
 */
 function createToolResultContextGuardTransform(params) {
+	const reduceOutput = params.reduceOutput !== false;
 	const contextWindowTokens = Math.max(1, Math.floor(params.contextWindowTokens));
 	const contextBudgetChars = Math.max(1024, Math.floor(contextWindowTokens * CHARS_PER_TOKEN_ESTIMATE * CONTEXT_INPUT_HEADROOM_RATIO));
 	const maxSingleToolResultChars = Math.max(1024, Math.floor(contextWindowTokens * TOOL_RESULT_CHARS_PER_TOKEN_ESTIMATE * SINGLE_TOOL_RESULT_CONTEXT_SHARE));
@@ -40281,7 +40667,8 @@ function createToolResultContextGuardTransform(params) {
 		enforceToolResultContextBudgetInPlace({
 			messages: contextMessages,
 			contextBudgetChars,
-			maxSingleToolResultChars
+			maxSingleToolResultChars,
+			reduceOutput
 		});
 		return contextMessages;
 	};
@@ -40377,7 +40764,10 @@ async function createRunSession(params, env) {
 		applySystemPromptOverrideToSession(session, env.systemPromptText);
 		if (!session) throw new Error("Embedded agent session missing");
 		const activeSession = session;
-		const contextGuardTransform = createToolResultContextGuardTransform({ contextWindowTokens: Math.max(1, Math.floor(params.model.contextWindow ?? params.model.maxTokens ?? 2e5)) });
+		const contextGuardTransform = createToolResultContextGuardTransform({
+			contextWindowTokens: Math.max(1, Math.floor(params.model.contextWindow ?? params.model.maxTokens ?? 2e5)),
+			reduceOutput: params.config?.tools?.outputReduce?.enabled !== false
+		});
 		activeSession.agent.transformContext = contextGuardTransform;
 		const cacheTrace = createCacheTrace({
 			cfg: params.config,
@@ -43610,4 +44000,4 @@ function initSubagentRegistry() {
 	restoreSubagentRunsOnce();
 }
 //#endregion
-export { isSteppedBuildEnabled as $, resolveIdentityName as $n, setSkillsRemoteRegistry as $t, loadOpenClawPlugins as A, registerUnhandledRejectionHandler as An, buildSectionRenderContext as At, getTotalPendingReplies as B, formatZonedTimestamp as Bn, buildStatusMessage as Bt, createOpenClawCodingTools as C, applyVerboseOverride as Cn, formatUsageReportLines as Ct, getPluginToolMeta as D, peekSystemEventEntries as Dn, assembleAgentSystemPromptWithSections as Dt, buildDefaultToolPolicyPipelineSteps as E, isSystemEventContextChanged as En, resolveModelAuthLabel as Et, openMessageLedger as F, extractImageContentFromSource as Fn, buildSystemPromptParams as Ft, appendCronStyleCurrentTimeLine as G, stopSubagentsForRequester as Gn, normalizeSendPolicy as Gt, createDedupeCache as H, resolveUserTimeFormat as Hn, requestHeartbeatNow as Ht, patchRouting as I, normalizeMimeList as In, buildSystemPromptReport as It, setCliSessionId as J, extractShortModelName as Jn, primeRemoteSkillsCache as Jt, resolveCronStyleNow as K, resolveQueueSettings as Kn, resolveSendPolicy as Kt, record as L, resolveInputFileLimits as Ln, buildChannelSummary as Lt, closeMessageLedger as M, DEFAULT_INPUT_IMAGE_MIMES as Mn, PromptSectionRegistry as Mt, markFailed as N, DEFAULT_INPUT_TIMEOUT_MS as Nn, PROSE_GLOBAL_ROOT as Nt, createPluginLoaderLogger as O, peekSystemEvents as On, getBuiltinSectionRegistry as Ot, markSynced as P, extractFileContentFromSource as Pn, _clearProseCache as Pt, debugStepContinue as Q, resolveEffectiveMessagesConfig as Qn, removeRemoteNodeInfo as Qt, dispatchInboundMessage as R, estimateBase64DecodedBytes as Rn, buildChannelAccountSnapshot as Rt, readConsolidationState as S, applyModelOverrideToSessionEntry as Sn, loadProviderUsageSummary as St, applyToolPolicyPipeline as T, enqueueSystemEvent as Tn, resolveUsageProviderId as Tt, getReplyFromConfig as U, resolveUserTimezone as Un, setHeartbeatWakeHandler as Ut, sanitizeOutboundText as V, formatUserTime as Vn, resolveCommitHash as Vt, BARE_SESSION_RESET_PROMPT as W, isAbortTrigger as Wn, resolveHeartbeatReasonKind as Wt, sha256HexPrefix as X, CURRENT_MESSAGE_MARKER as Xn, refreshRemoteBinsForConnectedNodes as Xt, runCliAgent as Y, clearSessionQueues as Yn, recordRemoteNodeInfo as Yt, debugSkipAll as Z, resolveAgentIdentity as Zn, refreshRemoteNodeBins as Zt, listForCurrentInstance as _, clearSessionAuthProfileOverride as _n, getSubagentDepthFromSessionStore as _t, listSubagentRunsForRequester as a, updatePairedNodeMetadata as an, setCommandLaneConcurrency as ar, formatTokenUsageDisplay as at, markRecoveryAttempt as b, buildAuthHealthSummary as bn, sortSubagentRuns as bt, replaceSubagentRunAfterSteer as c, hashToken as cn, clearAgentRunContext as cr, spawnSubagentDirect as ct, abortEmbeddedPiRun as d, resolvePairingPaths as dn, onAgentEvent as dr, getTemplateCache as dt, approveNodePairing as en, resolveBootstrapContextForRun as er, setDebugStepBroadcaster as et, getActiveEmbeddedRunCount as f, readJsonFile as fn, registerAgentRunContext as fr, getTemplateLoadErrors as ft, deleteRow as g, registerSkillsChangeListener as gn, validateTemplate as gt, closeInFlightTurnsStore as h, getSkillsSnapshotVersion as hn, stopTemplateWatcher as ht, listDescendantRunsForRequester as i, requestNodePairing as in, resetAllLanes as ir, formatDurationCompact as it, claimBatch as j, DEFAULT_INPUT_IMAGE_MAX_BYTES as jn, buildToolSummaryMap as jt, loadMinionPlugins as k, installUnhandledRejectionHandler as kn, resolveUserContext as kt, runSubagentAnnounceFlow as l, verifyPairingToken as ln, emitAgentEvent as lr, getLastReloadAt as lt, waitForEmbeddedPiRunEnd as m, createAsyncLock as mn, initTemplateLoader as mt, countActiveDescendantRuns as n, rejectNodePairing as nn, getQueueSize as nr, createOpenClawTools as nt, markSubagentRunForSteerRestart as o, verifyNodeToken as on, waitForActiveTasks as or, resolveTotalTokens as ot, queueEmbeddedPiMessage as p, writeJsonAtomic as pn, getTemplateUsageStats as pt, getCliSessionId as q, getFollowupQueueDepth as qn, getRemoteSkillEligibility as qt, initSubagentRegistry as r, renamePairedNode as rn, getTotalQueueSize as rr, TOOL_REGISTRY as rt, markSubagentRunTerminated as s, generatePairingToken as sn, resolveAgentTimeoutMs as sr, truncateLine as st, clearSubagentRunSteerRestart as t, listNodePairing as tn, getActiveTaskCount as tr, setSteppedBuild as tt, runEmbeddedPiAgent as u, pruneExpiredPending as un, getAgentRunContext as ur, getTemplate as ut, listFromOtherInstances as v, maskApiKey as vn, resolveSubagentLabel as vt, sniffMimeFromBase64 as w, parseVerboseOverride as wn, formatUsageWindowSummary as wt, openInFlightTurnsStore as x, formatRemainingShort as xn, normalizeGroupActivation as xt, markInterrupted as y, DEFAULT_OAUTH_WARN_MS as yn, resolveSubagentTargetFromRuns as yt, createReplyDispatcher as z, transcribeOpenAiCompatibleAudio as zn, formatChannelAllowFrom as zt };
+export { debugStepContinue as $, resolveEffectiveMessagesConfig as $n, removeRemoteNodeInfo as $t, loadMinionPlugins as A, installUnhandledRejectionHandler as An, resolveUserContext as At, createReplyDispatcher as B, transcribeOpenAiCompatibleAudio as Bn, formatChannelAllowFrom as Bt, readConsolidationState as C, applyModelOverrideToSessionEntry as Cn, loadProviderUsageSummary as Ct, buildDefaultToolPolicyPipelineSteps as D, isSystemEventContextChanged as Dn, resolveModelAuthLabel as Dt, applyToolPolicyPipeline as E, enqueueSystemEvent as En, resolveUsageProviderId as Et, markSynced as F, extractFileContentFromSource as Fn, _clearProseCache as Ft, BARE_SESSION_RESET_PROMPT as G, isAbortTrigger as Gn, resolveHeartbeatReasonKind as Gt, sanitizeOutboundText as H, formatUserTime as Hn, resolveCommitHash as Ht, openMessageLedger as I, extractImageContentFromSource as In, buildSystemPromptParams as It, getCliSessionId as J, getFollowupQueueDepth as Jn, getRemoteSkillEligibility as Jt, appendCronStyleCurrentTimeLine as K, stopSubagentsForRequester as Kn, normalizeSendPolicy as Kt, patchRouting as L, normalizeMimeList as Ln, buildSystemPromptReport as Lt, claimBatch as M, DEFAULT_INPUT_IMAGE_MAX_BYTES as Mn, buildToolSummaryMap as Mt, closeMessageLedger as N, DEFAULT_INPUT_IMAGE_MIMES as Nn, PromptSectionRegistry as Nt, getPluginToolMeta as O, peekSystemEventEntries as On, assembleAgentSystemPromptWithSections as Ot, markFailed as P, DEFAULT_INPUT_TIMEOUT_MS as Pn, PROSE_GLOBAL_ROOT as Pt, debugSkipAll as Q, resolveAgentIdentity as Qn, refreshRemoteNodeBins as Qt, record as R, resolveInputFileLimits as Rn, buildChannelSummary as Rt, openInFlightTurnsStore as S, formatRemainingShort as Sn, normalizeGroupActivation as St, sniffMimeFromBase64 as T, parseVerboseOverride as Tn, formatUsageWindowSummary as Tt, createDedupeCache as U, resolveUserTimeFormat as Un, requestHeartbeatNow as Ut, getTotalPendingReplies as V, formatZonedTimestamp as Vn, buildStatusMessage as Vt, getReplyFromConfig as W, resolveUserTimezone as Wn, setHeartbeatWakeHandler as Wt, runCliAgent as X, clearSessionQueues as Xn, recordRemoteNodeInfo as Xt, setCliSessionId as Y, extractShortModelName as Yn, primeRemoteSkillsCache as Yt, sha256HexPrefix as Z, CURRENT_MESSAGE_MARKER as Zn, refreshRemoteBinsForConnectedNodes as Zt, deleteRow as _, registerSkillsChangeListener as _n, validateTemplate as _t, listSubagentRunsForRequester as a, requestNodePairing as an, resetAllLanes as ar, formatDurationCompact as at, markInterrupted as b, DEFAULT_OAUTH_WARN_MS as bn, resolveSubagentTargetFromRuns as bt, replaceSubagentRunAfterSteer as c, generatePairingToken as cn, resolveAgentTimeoutMs as cr, truncateLine as ct, abortEmbeddedPiRun as d, pruneExpiredPending as dn, getAgentRunContext as dr, getTemplate as dt, setSkillsRemoteRegistry as en, resolveIdentityName as er, isSteppedBuildEnabled as et, getActiveEmbeddedRunCount as f, resolvePairingPaths as fn, onAgentEvent as fr, getTemplateCache as ft, closeInFlightTurnsStore as g, getSkillsSnapshotVersion as gn, stopTemplateWatcher as gt, registerLifecycleHooks as h, createAsyncLock as hn, initTemplateLoader as ht, listDescendantRunsForRequester as i, renamePairedNode as in, getTotalQueueSize as ir, TOOL_REGISTRY as it, loadOpenClawPlugins as j, registerUnhandledRejectionHandler as jn, buildSectionRenderContext as jt, createPluginLoaderLogger as k, peekSystemEvents as kn, getBuiltinSectionRegistry as kt, runSubagentAnnounceFlow as l, hashToken as ln, clearAgentRunContext as lr, spawnSubagentDirect as lt, waitForEmbeddedPiRunEnd as m, writeJsonAtomic as mn, getTemplateUsageStats as mt, countActiveDescendantRuns as n, listNodePairing as nn, getActiveTaskCount as nr, setSteppedBuild as nt, markSubagentRunForSteerRestart as o, updatePairedNodeMetadata as on, setCommandLaneConcurrency as or, formatTokenUsageDisplay as ot, queueEmbeddedPiMessage as p, readJsonFile as pn, registerAgentRunContext as pr, getTemplateLoadErrors as pt, resolveCronStyleNow as q, resolveQueueSettings as qn, resolveSendPolicy as qt, initSubagentRegistry as r, rejectNodePairing as rn, getQueueSize as rr, createOpenClawTools as rt, markSubagentRunTerminated as s, verifyNodeToken as sn, waitForActiveTasks as sr, resolveTotalTokens as st, clearSubagentRunSteerRestart as t, approveNodePairing as tn, resolveBootstrapContextForRun as tr, setDebugStepBroadcaster as tt, runEmbeddedPiAgent as u, verifyPairingToken as un, emitAgentEvent as ur, getLastReloadAt as ut, listForCurrentInstance as v, clearSessionAuthProfileOverride as vn, getSubagentDepthFromSessionStore as vt, createOpenClawCodingTools as w, applyVerboseOverride as wn, formatUsageReportLines as wt, markRecoveryAttempt as x, buildAuthHealthSummary as xn, sortSubagentRuns as xt, listFromOtherInstances as y, maskApiKey as yn, resolveSubagentLabel as yt, dispatchInboundMessage as z, estimateBase64DecodedBytes as zn, buildChannelAccountSnapshot as zt };