@pixelzx/genesis 2026.5.5-4 → 2026.5.5-5

package/dist/extensions/msteams/runtime-api.js

@@ -14,7 +14,7 @@ import { u as isPrivateIpAddress } from "../../ssrf-Blp2w01T.js";
 import { n as fetchWithSsrFGuard } from "../../fetch-guard-DKzLBD09.js";
 import { S as buildMediaPayload, f as resolveOutboundMediaUrls, m as resolveSendableOutboundReplyParts } from "../../reply-payload-ChFsXpe2.js";
 import { o as extractOriginalFilename } from "../../store-Fge4lGwN.js";
-import { t as loadWebMedia } from "../../web-media-UhS-eUvv.js";
+import { t as loadWebMedia } from "../../web-media-PnHEx5HT.js";
 import { i as resolveToolsBySender } from "../../group-policy-BMwhQr9i.js";
 import { n as writeJsonFileAtomically, t as readJsonFileWithFallback } from "../../json-store-B4Qmu2O2.js";
 import { n as emptyPluginConfigSchema } from "../../config-schema-Db8uIJi-.js";
@@ -37,11 +37,11 @@ import { a as buildRuntimeAccountStatusSnapshot, d as createDefaultChannelRuntim
 import { n as DEFAULT_WEBHOOK_MAX_BODY_BYTES } from "../../http-body-DDG39e3E.js";
 import { n as filterSupplementalContextItems, r as shouldIncludeSupplementalContext } from "../../context-visibility-Coe5PM9K.js";
 import { t as resolveChannelContextVisibilityMode } from "../../context-visibility-DU6hvbA_.js";
-import { r as dispatchReplyFromConfigWithSettledDispatcher } from "../../inbound-reply-dispatch-jVlLaSqn.js";
-import { t as loadOutboundMediaFromUrl } from "../../outbound-media-0d3HzPSa.js";
+import { r as dispatchReplyFromConfigWithSettledDispatcher } from "../../inbound-reply-dispatch-CYtgAOpZ.js";
+import { t as loadOutboundMediaFromUrl } from "../../outbound-media-DBOgVtv-.js";
 import { a as isHttpsUrlAllowedByHostnameSuffixAllowlist, l as normalizeHostnameSuffixAllowlist, n as buildHostnameAllowlistPolicyFromSuffixAllowlist } from "../../ssrf-policy-l2DzrZX2.js";
 import { t as chunkTextForOutbound } from "../../text-chunking-DSfOm2r0.js";
 import { t as resolveInboundSessionEnvelopeContext } from "../../session-envelope-SoEaHn7u.js";
-import { n as msteamsSetupWizard, t as msteamsSetupAdapter } from "../../msteams-DUDRy3xt.js";
-import { n as setMSTeamsRuntime } from "../../runtime-api-CdhgyHMB.js";
+import { n as msteamsSetupWizard, t as msteamsSetupAdapter } from "../../msteams-nwubaeIt.js";
+import { n as setMSTeamsRuntime } from "../../runtime-api-DfP95G4h.js";
 export { DEFAULT_ACCOUNT_ID, DEFAULT_GROUP_HISTORY_LIMIT, DEFAULT_WEBHOOK_MAX_BODY_BYTES, MSTeamsConfigSchema, PAIRING_APPROVED_MESSAGE, SILENT_REPLY_TOKEN, addWildcardAllowFrom, buildBaseChannelStatusSummary, buildChannelConfigSchema, buildChannelKeyCandidates, buildHostnameAllowlistPolicyFromSuffixAllowlist, buildMediaPayload, buildPendingHistoryContextFromMap, buildProbeChannelStatusSummary, buildRuntimeAccountStatusSnapshot, chunkTextForOutbound, clearHistoryEntriesIfEnabled, createChannelPairingController, createChannelReplyPipeline, createDefaultChannelRuntimeState, detectMime, dispatchReplyFromConfigWithSettledDispatcher, emptyPluginConfigSchema, evaluateSenderGroupAccessForPolicy, extensionForMime, extractOriginalFilename, fetchWithSsrFGuard, filterSupplementalContextItems, formatAllowlistMatchMeta, formatDocsLink, getFileExtension, hasConfiguredSecretInput, isDangerousNameMatchingEnabled, isHttpsUrlAllowedByHostnameSuffixAllowlist, isPrivateIpAddress, isSilentReplyText, keepHttpServerTaskAlive, loadOutboundMediaFromUrl, loadWebMedia, logInboundDrop, logTypingFailure, mergeAllowFromEntries, mergeAllowlist, msteamsSetupAdapter, msteamsSetupWizard, normalizeChannelSlug, normalizeHostnameSuffixAllowlist, normalizeResolvedSecretInputString, normalizeSecretInputString, normalizeStringEntries, readJsonFileWithFallback, readStoreAllowFromForDmPolicy, recordPendingHistoryEntryIfEnabled, resolveAllowlistMatchSimple, resolveAllowlistProviderRuntimeGroupPolicy, resolveChannelContextVisibilityMode, resolveChannelEntryMatchWithFallback, resolveChannelMediaMaxBytes, resolveControlCommandGate, resolveDefaultGroupPolicy, resolveDmGroupAccessWithLists, resolveDualTextControlCommandGate, resolveEffectiveAllowFromLists, resolveInboundMentionDecision, resolveInboundSessionEnvelopeContext, resolveMentionGating, resolveMentionGatingWithBypass, resolveNestedAllowlistDecision, resolveOutboundMediaUrls, resolveSendableOutboundReplyParts, resolveSenderScopedGroupPolicy, resolveToolsBySender, setMSTeamsRuntime, setTopLevelChannelAllowFrom, setTopLevelChannelDmPolicyWithAllowFrom, setTopLevelChannelGroupPolicy, shouldIncludeSupplementalContext, sleep, splitSetupEntries, summarizeMapping, withFileLock, writeJsonFileAtomically };

package/dist/extensions/msteams/test-api.js

@@ -1,2 +1,2 @@
-import { t as msteamsPlugin } from "../../channel-BNUblayu.js";
+import { t as msteamsPlugin } from "../../channel-DDs9mkGR.js";
 export { msteamsPlugin };

package/dist/extensions/nextcloud-talk/api.js

@@ -1,2 +1,2 @@
-import { t as nextcloudTalkPlugin } from "../../channel-CY2xEOzR.js";
+import { t as nextcloudTalkPlugin } from "../../channel-E_FCZxzs.js";
 export { nextcloudTalkPlugin };

package/dist/extensions/nextcloud-talk/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as nextcloudTalkPlugin } from "../../channel-CY2xEOzR.js";
+import { t as nextcloudTalkPlugin } from "../../channel-E_FCZxzs.js";
 export { nextcloudTalkPlugin };

package/dist/extensions/nextcloud-talk/runtime-api.js

@@ -30,7 +30,7 @@ import { r as WEBHOOK_RATE_LIMIT_DEFAULTS } from "../../webhook-memory-guards-Co
 import { a as isRequestBodyLimitError, c as requestBodyErrorToText, s as readRequestBodyWithLimit } from "../../http-body-DDG39e3E.js";
 import { t as createLoggerBackedRuntime } from "../../runtime-logger-BQpdDyJA.js";
 import { t as waitForAbortSignal } from "../../abort-signal-BF5LQl9w.js";
-import { n as dispatchInboundReplyWithBase } from "../../inbound-reply-dispatch-jVlLaSqn.js";
+import { n as dispatchInboundReplyWithBase } from "../../inbound-reply-dispatch-CYtgAOpZ.js";
 import { n as createPersistentDedupe } from "../../persistent-dedupe-BTyTh8iP.js";
-import { n as setNextcloudTalkRuntime } from "../../runtime-api-CmlBBCCY.js";
+import { n as setNextcloudTalkRuntime } from "../../runtime-api-Dju3YRRE.js";
 export { BlockStreamingCoalesceSchema, DEFAULT_ACCOUNT_ID, DmConfigSchema, DmPolicySchema, GROUP_POLICY_BLOCKED_LABEL, GroupPolicySchema, MarkdownConfigSchema, ReplyRuntimeConfigSchemaShape, ToolPolicySchema, WEBHOOK_RATE_LIMIT_DEFAULTS, addWildcardAllowFrom, applyAccountNameToChannelSection, buildBaseChannelStatusSummary, buildChannelConfigSchema, buildChannelKeyCandidates, buildRuntimeAccountStatusSnapshot, buildSecretInputSchema, buildSingleChannelSecretPromptState, clearAccountEntryFields, createAccountListHelpers, createAuthRateLimiter, createChannelPairingController, createChannelReplyPipeline, createLoggerBackedRuntime, createNormalizedOutboundDeliverer, createPersistentDedupe, createSetupInputPresenceValidator, createTopLevelChannelDmPolicy, deleteAccountFromConfigSection, deliverFormattedTextWithAttachments, dispatchInboundReplyWithBase, emptyPluginConfigSchema, evaluateMatchedGroupAccessForPolicy, fetchWithSsrFGuard, formatDocsLink, formatPairingApproveHint, formatTextWithAttachmentLinks, hasConfiguredSecretInput, isRequestBodyLimitError, listConfiguredAccountIds, logInboundDrop, mapAllowFromEntries, mergeAllowFromEntries, normalizeAccountId, normalizeChannelSlug, normalizeResolvedSecretInputString, normalizeSecretInputString, patchScopedAccountConfig, promptParsedAllowFromForAccount, promptSingleChannelSecretInput, readRequestBodyWithLimit, readStoreAllowFromForDmPolicy, requestBodyErrorToText, requireOpenAllowFrom, resolveAccountWithDefaultFallback, resolveAllowlistProviderRuntimeGroupPolicy, resolveChannelEntryMatchWithFallback, resolveDefaultGroupPolicy, resolveDmGroupAccessWithCommandGate, resolveInboundMentionDecision, resolveMentionGating, resolveMentionGatingWithBypass, resolveNestedAllowlistDecision, resolveOutboundMediaUrls, resolveSetupAccountId, runSingleChannelSecretStep, setAccountEnabledInConfigSection, setNextcloudTalkRuntime, setSetupChannelEnabled, setTopLevelChannelDmPolicyWithAllowFrom, waitForAbortSignal, warnMissingProviderGroupPolicyFallbackOnce };

package/dist/extensions/openshell/index.js

@@ -6,10 +6,10 @@ import { _ as createRemoteShellSandboxFsBridge, b as createWritableRenameTargetR
 import "../../text-runtime-B4pK_Jpd.js";
 import { t as buildPluginConfigSchema } from "../../config-schema-Db8uIJi-.js";
 import { t as definePluginEntry } from "../../plugin-entry-ouFNyhVS.js";
-import "../../core-DbPzffGG.js";
+import "../../core-BlXGwz2n.js";
 import { t as runPluginCommandWithTimeout } from "../../run-command-DOWGvlN2.js";
 import "../../sandbox-C95gEa17.js";
-import "../../infra-runtime-D2Pqjk-r.js";
+import "../../infra-runtime-DXR8kcRT.js";
 import { c as mapPluginConfigIssues, s as formatPluginConfigIssue } from "../../extension-shared-DIc0GChj.js";
 import { t as zod_exports } from "../../zod-Bqvft_ty.js";
 import { createRequire } from "node:module";

package/dist/extensions/signal/api.js

@@ -1,14 +1,14 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "../../accounts-CJJT0vS7.js";
 import { a as isSignalSenderAllowed, c as resolveSignalRecipient, d as looksLikeSignalTargetId, f as normalizeSignalMessagingTarget, i as isSignalGroupAllowed, l as resolveSignalSender, n as formatSignalSenderDisplay, o as normalizeSignalAllowRecipient, r as formatSignalSenderId, s as resolveSignalPeerId, t as formatSignalPairingIdLine, u as looksLikeUuid } from "../../identity-PVMitPyT.js";
-import { i as resolveSignalOutboundTarget, n as createSignalPluginBase, r as signalSetupWizard, t as signalPlugin } from "../../channel-B5L9LJBF.js";
+import { i as resolveSignalOutboundTarget, n as createSignalPluginBase, r as signalSetupWizard, t as signalPlugin } from "../../channel-D0m2o2Vx.js";
 import { n as markdownToSignalTextChunks, t as markdownToSignalText } from "../../format-Dv6HmuyW.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "../../reaction-runtime-api-D7i4oMn9.js";
-import { n as resolveSignalReactionLevel, t as signalMessageActions } from "../../message-actions-BjBGSsJB.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "../../reaction-runtime-api-B_tKpY7u.js";
+import { n as resolveSignalReactionLevel, t as signalMessageActions } from "../../message-actions-BoLjX-Cs.js";
 import { r as normalizeSignalAccountInput, s as signalSetupAdapter } from "../../setup-core-dF4To6Jd.js";
 import { i as pickAsset, n as installSignalCli, r as looksLikeArchive, t as extractSignalCliArchive } from "../../install-signal-cli-BGP-9Zvn.js";
-import { t as monitorSignalProvider } from "../../monitor-AyGe8vyk.js";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "../../send-C4mKkkWW.js";
-import { t as probeSignal } from "../../probe-KtX2HjXM.js";
+import { t as monitorSignalProvider } from "../../monitor-C51eRypH.js";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "../../send-DS-hlqsq.js";
+import { t as probeSignal } from "../../probe-Bht75arj.js";
 //#region extensions/signal/src/channel.setup.ts
 const signalSetupPlugin = { ...createSignalPluginBase({
 	setupWizard: signalSetupWizard,

package/dist/extensions/signal/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as signalPlugin } from "../../channel-B5L9LJBF.js";
+import { t as signalPlugin } from "../../channel-D0m2o2Vx.js";
 export { signalPlugin };

package/dist/extensions/signal/reaction-runtime-api.js

@@ -1,2 +1,2 @@
-import { n as sendReactionSignal, t as removeReactionSignal } from "../../reaction-runtime-api-D7i4oMn9.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "../../reaction-runtime-api-B_tKpY7u.js";
 export { removeReactionSignal, sendReactionSignal };

package/dist/extensions/signal/runtime-api.js

@@ -10,7 +10,7 @@ import { n as formatPairingApproveHint } from "../../helpers-C1NDWBfW.js";
 import "../../text-runtime-B4pK_Jpd.js";
 import { n as emptyPluginConfigSchema } from "../../config-schema-Db8uIJi-.js";
 import { s as migrateBaseNameToDefaultAccount, t as applyAccountNameToChannelSection } from "../../setup-helpers-DdXv0uuQ.js";
-import { c as getChatChannelMeta } from "../../core-DbPzffGG.js";
+import { c as getChatChannelMeta } from "../../core-BlXGwz2n.js";
 import { t as createPluginRuntimeStore } from "../../runtime-store-IKEgvhfQ.js";
 import { n as resolveAllowlistProviderRuntimeGroupPolicy, r as resolveDefaultGroupPolicy } from "../../runtime-group-policy-CX-BIMex.js";
 import { t as resolveChannelMediaMaxBytes } from "../../media-limits-C5cR4ACY.js";
@@ -19,18 +19,18 @@ import { c as collectStatusIssuesFromLastError, d as createDefaultChannelRuntime
 import { t as detectBinary } from "../../detect-binary-CABvUdOS.js";
 import "../../setup-tools-BWYYb4UX.js";
 import "../../config-runtime-CiIsBMuo.js";
-import "../../reply-runtime-B4VQJnqi.js";
-import "../../media-runtime-D2xH8y9Y.js";
+import "../../reply-runtime-POkwAYBF.js";
+import "../../media-runtime-Cz9iit6D.js";
 import "../../channel-status-CWpi8vFs.js";
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "../../accounts-CJJT0vS7.js";
 import { d as looksLikeSignalTargetId, f as normalizeSignalMessagingTarget } from "../../identity-PVMitPyT.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "../../reaction-runtime-api-D7i4oMn9.js";
-import { n as resolveSignalReactionLevel, t as signalMessageActions } from "../../message-actions-BjBGSsJB.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "../../reaction-runtime-api-B_tKpY7u.js";
+import { n as resolveSignalReactionLevel, t as signalMessageActions } from "../../message-actions-BoLjX-Cs.js";
 import "../../config-api-Bmj_w5T7.js";
 import { n as installSignalCli } from "../../install-signal-cli-BGP-9Zvn.js";
-import { t as monitorSignalProvider } from "../../monitor-AyGe8vyk.js";
-import { t as sendMessageSignal } from "../../send-C4mKkkWW.js";
-import { t as probeSignal } from "../../probe-KtX2HjXM.js";
+import { t as monitorSignalProvider } from "../../monitor-C51eRypH.js";
+import { t as sendMessageSignal } from "../../send-DS-hlqsq.js";
+import { t as probeSignal } from "../../probe-Bht75arj.js";
 //#region extensions/signal/src/runtime.ts
 const { setRuntime: setSignalRuntime, clearRuntime: clearSignalRuntime, getRuntime: getSignalRuntime } = createPluginRuntimeStore({
 	pluginId: "signal",

package/dist/extensions/skill-workshop/api.js

@@ -2,5 +2,5 @@ import { x as resolveDefaultAgentId } from "../../agent-scope-CDjZLqNk.js";
 import { l as jsonResult } from "../../common-YOU2Qb73.js";
 import { t as definePluginEntry } from "../../plugin-entry-ouFNyhVS.js";
 import { t as bumpSkillsSnapshotVersion } from "../../refresh-state-Cwos3Yi0.js";
-import "../../api-DE6RYTxv.js";
+import "../../api-W3n67ens.js";
 export { bumpSkillsSnapshotVersion, definePluginEntry, jsonResult, resolveDefaultAgentId };

package/dist/extensions/skill-workshop/index.js

@@ -3,7 +3,7 @@ import { l as jsonResult } from "../../common-YOU2Qb73.js";
 import { t as definePluginEntry } from "../../plugin-entry-ouFNyhVS.js";
 import { n as resolveLivePluginConfigObject } from "../../config-runtime-CiIsBMuo.js";
 import { t as bumpSkillsSnapshotVersion } from "../../refresh-state-Cwos3Yi0.js";
-import "../../api-DE6RYTxv.js";
+import "../../api-W3n67ens.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { createHash, randomUUID } from "node:crypto";

package/dist/extensions/synology-chat/api.js

@@ -1,3 +1,3 @@
-import { n as setSynologyRuntime, t as synologyChatPlugin } from "../../channel-YI2aIJFQ.js";
+import { n as setSynologyRuntime, t as synologyChatPlugin } from "../../channel-wlrRJszs.js";
 import { t as collectSynologyChatSecurityAuditFindings } from "../../security-audit-C2thFNGm.js";
 export { collectSynologyChatSecurityAuditFindings, setSynologyRuntime, synologyChatPlugin };

package/dist/extensions/synology-chat/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as synologyChatPlugin } from "../../channel-YI2aIJFQ.js";
+import { t as synologyChatPlugin } from "../../channel-wlrRJszs.js";
 export { synologyChatPlugin };

package/dist/extensions/tlon/api.js

@@ -3,7 +3,7 @@ import { c as isBlockedHostnameOrIp, t as SsrFBlockedError } from "../../ssrf-Bl
 import { n as fetchWithSsrFGuard } from "../../fetch-guard-DKzLBD09.js";
 import { t as createLoggerBackedRuntime } from "../../runtime-logger-BQpdDyJA.js";
 import { d as ssrfPolicyFromDangerouslyAllowPrivateNetwork, u as ssrfPolicyFromAllowPrivateNetwork } from "../../ssrf-policy-l2DzrZX2.js";
-import "../../runtime-api-BkVIoPU9.js";
-import { t as tlonPlugin } from "../../channel-D2kKLWUA.js";
+import "../../runtime-api-Bjv_K-bW.js";
+import { t as tlonPlugin } from "../../channel-D1x8Tidv.js";
 import { n as setTlonRuntime } from "../../runtime-B9fXPSOT.js";
 export { SsrFBlockedError, createDedupeCache, createLoggerBackedRuntime, fetchWithSsrFGuard, isBlockedHostnameOrIp, setTlonRuntime, ssrfPolicyFromAllowPrivateNetwork, ssrfPolicyFromDangerouslyAllowPrivateNetwork, tlonPlugin };

package/dist/extensions/tlon/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as tlonPlugin } from "../../channel-D2kKLWUA.js";
+import { t as tlonPlugin } from "../../channel-D1x8Tidv.js";
 export { tlonPlugin };

package/dist/extensions/tlon/runtime-api.js

@@ -3,5 +3,5 @@ import { c as isBlockedHostnameOrIp, t as SsrFBlockedError } from "../../ssrf-Bl
 import { n as fetchWithSsrFGuard } from "../../fetch-guard-DKzLBD09.js";
 import { t as createLoggerBackedRuntime } from "../../runtime-logger-BQpdDyJA.js";
 import { d as ssrfPolicyFromDangerouslyAllowPrivateNetwork, u as ssrfPolicyFromAllowPrivateNetwork } from "../../ssrf-policy-l2DzrZX2.js";
-import "../../runtime-api-BkVIoPU9.js";
+import "../../runtime-api-Bjv_K-bW.js";
 export { SsrFBlockedError, createDedupeCache, createLoggerBackedRuntime, fetchWithSsrFGuard, isBlockedHostnameOrIp, ssrfPolicyFromAllowPrivateNetwork, ssrfPolicyFromDangerouslyAllowPrivateNetwork };

package/dist/extensions/tlon/test-api.js

@@ -1,2 +1,2 @@
-import { t as tlonPlugin } from "../../channel-D2kKLWUA.js";
+import { t as tlonPlugin } from "../../channel-D1x8Tidv.js";
 export { tlonPlugin };

package/dist/extensions/twitch/api.js

@@ -6,6 +6,6 @@ import { n as emptyPluginConfigSchema } from "../../config-schema-Db8uIJi-.js";
 import { t as createChannelReplyPipeline } from "../../channel-reply-pipeline-BgPhKdUO.js";
 import { n as twitchSetupWizard, t as twitchSetupAdapter } from "../../twitch-CixBpqZH.js";
 import "../../runtime-api-DM_-EkaW.js";
-import { t as twitchPlugin } from "../../plugin-DmBZwzWQ.js";
+import { t as twitchPlugin } from "../../plugin-CuJOfAQA.js";
 import { n as setTwitchRuntime } from "../../runtime-Dwo8BLUl.js";
 export { DEFAULT_ACCOUNT_ID, MarkdownConfigSchema, buildChannelConfigSchema, createChannelReplyPipeline, emptyPluginConfigSchema, formatDocsLink, normalizeAccountId, setTwitchRuntime, twitchPlugin, twitchSetupAdapter, twitchSetupWizard };

package/dist/extensions/twitch/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as twitchPlugin } from "../../plugin-DmBZwzWQ.js";
+import { t as twitchPlugin } from "../../plugin-CuJOfAQA.js";
 export { twitchPlugin };

package/dist/extensions/twitch/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { n as twitchSetupPlugin } from "../../setup-surface-CfcFHZln.js";
+import { n as twitchSetupPlugin } from "../../setup-surface-DoYhuKb1.js";
 export { twitchSetupPlugin };

package/dist/extensions/zalo/api.js

@@ -1,5 +1,5 @@
-import { t as zaloPlugin } from "../../channel-BzOKSC4e.js";
-import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "../../setup-core-CFAiauCt.js";
+import { t as zaloPlugin } from "../../channel-DwwRtWIy.js";
+import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "../../setup-core-D1XPjfQr.js";
 import { r as resolveZaloRuntimeGroupPolicy, t as evaluateZaloGroupAccess } from "../../group-access-CxQFLlFL.js";
-import { t as zaloSetupWizard } from "../../setup-api-DilgjV01.js";
+import { t as zaloSetupWizard } from "../../setup-api-DvrmJaiq.js";
 export { createZaloSetupWizardProxy, evaluateZaloGroupAccess, resolveZaloRuntimeGroupPolicy, zaloDmPolicy, zaloPlugin, zaloSetupAdapter, zaloSetupWizard };

package/dist/extensions/zalo/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as zaloPlugin } from "../../channel-BzOKSC4e.js";
+import { t as zaloPlugin } from "../../channel-DwwRtWIy.js";
 export { zaloPlugin };

package/dist/extensions/zalo/runtime-api.js

@@ -25,7 +25,7 @@ import { l as withResolvedWebhookRequestPipeline, n as registerWebhookTargetWith
 import { t as waitForAbortSignal } from "../../abort-signal-BF5LQl9w.js";
 import { r as resolveInboundRouteEnvelopeBuilderWithRuntime } from "../../inbound-envelope-XMbnqfOv.js";
 import { t as chunkTextForOutbound } from "../../text-chunking-DSfOm2r0.js";
-import { i as resolveDirectDmAuthorizationOutcome, o as resolveSenderCommandAuthorizationWithRuntime } from "../../command-auth-CvFUTCCJ.js";
-import "../../runtime-api-DnhXPE_z.js";
+import { i as resolveDirectDmAuthorizationOutcome, o as resolveSenderCommandAuthorizationWithRuntime } from "../../command-auth-CtA0lbtD.js";
+import "../../runtime-api--BeXVwyz.js";
 import { n as setZaloRuntime } from "../../runtime-DwmT6lFp.js";
 export { DEFAULT_ACCOUNT_ID, PAIRING_APPROVED_MESSAGE, WEBHOOK_ANOMALY_COUNTER_DEFAULTS, WEBHOOK_RATE_LIMIT_DEFAULTS, addWildcardAllowFrom, applyAccountNameToChannelSection, applyBasicWebhookRequestGuards, applySetupAccountConfigPatch, buildBaseAccountStatusSnapshot, buildChannelConfigSchema, buildSecretInputSchema, buildSingleChannelSecretPromptState, buildTokenChannelStatusSummary, chunkTextForOutbound, createChannelPairingController, createChannelReplyPipeline, createDedupeCache, createFixedWindowRateLimiter, createWebhookAnomalyTracker, deliverTextOrMediaReply, evaluateSenderGroupAccess, formatAllowFromLowercase, formatPairingApproveHint, hasConfiguredSecretInput, isNormalizedSenderAllowed, isNumericTargetId, jsonResult, logTypingFailure, mergeAllowFromEntries, migrateBaseNameToDefaultAccount, normalizeAccountId, normalizeResolvedSecretInputString, normalizeSecretInputString, promptSingleChannelSecretInput, readJsonWebhookBodyOrReject, readStringParam, registerPluginHttpRoute, registerWebhookTarget, registerWebhookTargetWithPluginRoute, resolveClientIp, resolveDefaultGroupPolicy, resolveDirectDmAuthorizationOutcome, resolveInboundRouteEnvelopeBuilderWithRuntime, resolveOpenProviderRuntimeGroupPolicy, resolveSenderCommandAuthorizationWithRuntime, resolveWebhookPath, resolveWebhookTargetWithAuthOrRejectSync, runSingleChannelSecretStep, sendPayloadWithChunkedTextAndMedia, setTopLevelChannelDmPolicyWithAllowFrom, setZaloRuntime, waitForAbortSignal, warnMissingProviderGroupPolicyFallbackOnce, withResolvedWebhookRequestPipeline };

package/dist/extensions/zalo/setup-api.js

@@ -1,4 +1,4 @@
-import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "../../setup-core-CFAiauCt.js";
+import { n as zaloDmPolicy, r as zaloSetupAdapter, t as createZaloSetupWizardProxy } from "../../setup-core-D1XPjfQr.js";
 import { r as resolveZaloRuntimeGroupPolicy, t as evaluateZaloGroupAccess } from "../../group-access-CxQFLlFL.js";
-import { t as zaloSetupWizard } from "../../setup-api-DilgjV01.js";
+import { t as zaloSetupWizard } from "../../setup-api-DvrmJaiq.js";
 export { createZaloSetupWizardProxy, evaluateZaloGroupAccess, resolveZaloRuntimeGroupPolicy, zaloDmPolicy, zaloSetupAdapter, zaloSetupWizard };

package/dist/extensions/zalouser/api.js

@@ -1,7 +1,7 @@
 import { n as zalouserSetupAdapter, t as createZalouserSetupWizardProxy } from "../../setup-core-Dmo80gGF.js";
-import { t as zalouserPlugin } from "../../channel-Bej-TN7f.js";
+import { t as zalouserPlugin } from "../../channel-C8_SXfQR.js";
 import { n as isZalouserMutableGroupEntry, t as collectZalouserSecurityAuditFindings } from "../../security-audit-DDA6pOHn.js";
-import { t as zalouserSetupWizard } from "../../setup-surface-BpSH7F_m.js";
-import { t as zalouserSetupPlugin } from "../../channel.setup-gaiRZ-r8.js";
-import { t as createZalouserTool } from "../../api-D-4gHdrl.js";
+import { t as zalouserSetupWizard } from "../../setup-surface-B7_Ps6_r.js";
+import { t as zalouserSetupPlugin } from "../../channel.setup-C61m_WuB.js";
+import { t as createZalouserTool } from "../../api-BzsECesc.js";
 export { collectZalouserSecurityAuditFindings, createZalouserSetupWizardProxy, createZalouserTool, isZalouserMutableGroupEntry, zalouserPlugin, zalouserSetupAdapter, zalouserSetupPlugin, zalouserSetupWizard };

package/dist/extensions/zalouser/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as zalouserPlugin } from "../../channel-Bej-TN7f.js";
+import { t as zalouserPlugin } from "../../channel-C8_SXfQR.js";
 export { zalouserPlugin };

package/dist/extensions/zalouser/runtime-api.js

@@ -2,7 +2,7 @@ import { n as resolvePreferredGenesisTmpDir } from "../../tmp-genesis-dir-B4F3mz
 import { r as buildChannelConfigSchema } from "../../config-schema-BEt8F1Tk.js";
 import { n as normalizeAccountId, t as DEFAULT_ACCOUNT_ID } from "../../account-id-C3j_3_su.js";
 import { b as sendPayloadWithChunkedTextAndMedia, i as deliverTextOrMediaReply, l as isNumericTargetId, m as resolveSendableOutboundReplyParts } from "../../reply-payload-ChFsXpe2.js";
-import "../../core-DbPzffGG.js";
+import "../../core-BlXGwz2n.js";
 import { n as resolveInboundMentionDecision } from "../../mention-gating-C2K3rSdY.js";
 import { i as mergeAllowlist, o as summarizeMapping } from "../../resolve-utils-giqd2YMk.js";
 import { t as formatAllowFromLowercase } from "../../allow-from-okpwNGqY.js";
@@ -13,16 +13,16 @@ import { t as createChannelReplyPipeline } from "../../channel-reply-pipeline-Bg
 import { n as createChannelPairingController } from "../../channel-pairing-B3r45ANt.js";
 import { t as buildBaseAccountStatusSnapshot } from "../../status-helpers-BPJZpVuU.js";
 import "../../config-runtime-CiIsBMuo.js";
-import { t as loadOutboundMediaFromUrl } from "../../outbound-media-0d3HzPSa.js";
+import { t as loadOutboundMediaFromUrl } from "../../outbound-media-DBOgVtv-.js";
 import { t as chunkTextForOutbound } from "../../text-chunking-DSfOm2r0.js";
 import "../../browser-security-runtime-mU_AyWtD.js";
-import { a as resolveSenderCommandAuthorization } from "../../command-auth-CvFUTCCJ.js";
-import "../../channel-inbound-CzgMd2Xi.js";
+import { a as resolveSenderCommandAuthorization } from "../../command-auth-CtA0lbtD.js";
+import "../../channel-inbound-BvfXTTbL.js";
 import { n as setZalouserRuntime } from "../../runtime-Bu_cc482.js";
 import { n as zalouserSetupAdapter, t as createZalouserSetupWizardProxy } from "../../setup-core-Dmo80gGF.js";
-import { t as zalouserPlugin } from "../../channel-Bej-TN7f.js";
+import { t as zalouserPlugin } from "../../channel-C8_SXfQR.js";
 import { n as isZalouserMutableGroupEntry, t as collectZalouserSecurityAuditFindings } from "../../security-audit-DDA6pOHn.js";
-import { t as zalouserSetupWizard } from "../../setup-surface-BpSH7F_m.js";
-import { t as zalouserSetupPlugin } from "../../channel.setup-gaiRZ-r8.js";
-import { t as createZalouserTool } from "../../api-D-4gHdrl.js";
+import { t as zalouserSetupWizard } from "../../setup-surface-B7_Ps6_r.js";
+import { t as zalouserSetupPlugin } from "../../channel.setup-C61m_WuB.js";
+import { t as createZalouserTool } from "../../api-BzsECesc.js";
 export { DEFAULT_ACCOUNT_ID, buildBaseAccountStatusSnapshot, buildChannelConfigSchema, chunkTextForOutbound, collectZalouserSecurityAuditFindings, createChannelPairingController, createChannelReplyPipeline, createZalouserSetupWizardProxy, createZalouserTool, deliverTextOrMediaReply, evaluateGroupRouteAccessForPolicy, formatAllowFromLowercase, isDangerousNameMatchingEnabled, isNumericTargetId, isZalouserMutableGroupEntry, loadOutboundMediaFromUrl, mergeAllowlist, normalizeAccountId, resolveDefaultGroupPolicy, resolveInboundMentionDecision, resolveOpenProviderRuntimeGroupPolicy, resolvePreferredGenesisTmpDir, resolveSendableOutboundReplyParts, resolveSenderCommandAuthorization, resolveSenderScopedGroupPolicy, sendPayloadWithChunkedTextAndMedia, setZalouserRuntime, summarizeMapping, warnMissingProviderGroupPolicyFallbackOnce, zalouserPlugin, zalouserSetupAdapter, zalouserSetupPlugin, zalouserSetupWizard };

package/dist/extensions/zalouser/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as zalouserSetupPlugin } from "../../channel.setup-gaiRZ-r8.js";
+import { t as zalouserSetupPlugin } from "../../channel.setup-C61m_WuB.js";
 export { zalouserSetupPlugin };

package/dist/extensions/zalouser/test-api.js

@@ -1,5 +1,5 @@
-import { a as resolveZalouserAccountSync, i as resolveDefaultZalouserAccountId, n as getZcaUserInfo, r as listZalouserAccountIds, t as checkZcaAuthenticated } from "../../accounts-Co4cbVCU.js";
-import { r as parseZalouserOutboundTarget } from "../../session-route-rem428sJ.js";
-import { a as listZaloGroupMembers, b as waitForZaloQrLogin, c as logoutZaloProfile, d as resolveZaloGroupsByEntries, i as listZaloFriendsMatching, l as resolveZaloAllowFromEntries, n as getZaloUserInfo, s as listZaloGroupsMatching, t as checkZaloAuthenticated, y as startZaloQrLogin } from "../../zalo-js-B0dhviG7.js";
-import { i as sendMessageZalouser } from "../../send-CMqcsAS2.js";
+import { a as resolveZalouserAccountSync, i as resolveDefaultZalouserAccountId, n as getZcaUserInfo, r as listZalouserAccountIds, t as checkZcaAuthenticated } from "../../accounts-CbIPkOW8.js";
+import { r as parseZalouserOutboundTarget } from "../../session-route-BOJjXlWV.js";
+import { a as listZaloGroupMembers, b as waitForZaloQrLogin, c as logoutZaloProfile, d as resolveZaloGroupsByEntries, i as listZaloFriendsMatching, l as resolveZaloAllowFromEntries, n as getZaloUserInfo, s as listZaloGroupsMatching, t as checkZaloAuthenticated, y as startZaloQrLogin } from "../../zalo-js-BH-o_WTn.js";
+import { i as sendMessageZalouser } from "../../send-Bjv6gz1i.js";
 export { checkZaloAuthenticated, checkZcaAuthenticated, getZaloUserInfo, getZcaUserInfo, listZaloFriendsMatching, listZaloGroupMembers, listZaloGroupsMatching, listZalouserAccountIds, logoutZaloProfile, parseZalouserOutboundTarget, resolveDefaultZalouserAccountId, resolveZaloAllowFromEntries, resolveZaloGroupsByEntries, resolveZalouserAccountSync, sendMessageZalouser, startZaloQrLogin, waitForZaloQrLogin };

package/dist/fallbacks-CR6GSZx5.js

@@ -0,0 +1,31 @@
+import { i as removeFallbackCommand, n as clearFallbacksCommand, r as listFallbacksCommand, t as addFallbackCommand } from "./fallbacks-shared-cZD0oSnX.js";
+//#region src/commands/models/fallbacks.ts
+async function modelsFallbacksListCommand(opts, runtime) {
+	return await listFallbacksCommand({
+		label: "Fallbacks",
+		key: "model"
+	}, opts, runtime);
+}
+async function modelsFallbacksAddCommand(modelRaw, runtime) {
+	return await addFallbackCommand({
+		label: "Fallbacks",
+		key: "model",
+		logPrefix: "Fallbacks"
+	}, modelRaw, runtime);
+}
+async function modelsFallbacksRemoveCommand(modelRaw, runtime) {
+	return await removeFallbackCommand({
+		label: "Fallbacks",
+		key: "model",
+		notFoundLabel: "Fallback",
+		logPrefix: "Fallbacks"
+	}, modelRaw, runtime);
+}
+async function modelsFallbacksClearCommand(runtime) {
+	return await clearFallbacksCommand({
+		key: "model",
+		clearedMessage: "Fallback list cleared."
+	}, runtime);
+}
+//#endregion
+export { modelsFallbacksRemoveCommand as i, modelsFallbacksClearCommand as n, modelsFallbacksListCommand as r, modelsFallbacksAddCommand as t };

package/dist/fallbacks-DuO41eqR.js

@@ -0,0 +1,2 @@
+import { i as modelsFallbacksRemoveCommand, n as modelsFallbacksClearCommand, r as modelsFallbacksListCommand, t as modelsFallbacksAddCommand } from "./fallbacks-CR6GSZx5.js";
+export { modelsFallbacksAddCommand, modelsFallbacksClearCommand, modelsFallbacksListCommand, modelsFallbacksRemoveCommand };

package/dist/fallbacks-shared-cZD0oSnX.js

@@ -0,0 +1,111 @@
+import { r as writeRuntimeJson } from "./runtime-CQ7eH0le.js";
+import { r as DEFAULT_PROVIDER } from "./defaults-DM8yIn8C.js";
+import { r as toAgentModelListLike, t as resolveAgentModelFallbackValues } from "./model-input-BkKFdMSQ.js";
+import { h as resolveModelRefFromString, i as buildModelAliasIndex, y as modelKey } from "./model-selection-shared-DKTBpEsk.js";
+import "./model-selection-BRmopwFB.js";
+import { n as logConfigUpdated } from "./logging-ct4GyQVj.js";
+import { c as resolveModelKeysFromEntries, d as upsertCanonicalModelConfigEntry, l as resolveModelTarget, n as ensureFlagCompatibility, o as mergePrimaryFallbackConfig, u as updateConfig } from "./shared-u-3RmeL1.js";
+import { t as loadModelsConfig } from "./load-config-C-QpKZNj.js";
+//#region src/commands/models/fallbacks-shared.ts
+function getFallbacks(cfg, key) {
+	return resolveAgentModelFallbackValues(cfg.agents?.defaults?.[key]);
+}
+function patchDefaultsFallbacks(cfg, params) {
+	const existing = toAgentModelListLike(cfg.agents?.defaults?.[params.key]);
+	return {
+		...cfg,
+		agents: {
+			...cfg.agents,
+			defaults: {
+				...cfg.agents?.defaults,
+				[params.key]: mergePrimaryFallbackConfig(existing, { fallbacks: params.fallbacks }),
+				...params.models ? { models: params.models } : void 0
+			}
+		}
+	};
+}
+async function listFallbacksCommand(params, opts, runtime) {
+	ensureFlagCompatibility(opts);
+	const fallbacks = getFallbacks(await loadModelsConfig({
+		commandName: `models ${params.key} list`,
+		runtime
+	}), params.key);
+	if (opts.json) {
+		writeRuntimeJson(runtime, { fallbacks });
+		return;
+	}
+	if (opts.plain) {
+		for (const entry of fallbacks) runtime.log(entry);
+		return;
+	}
+	runtime.log(`${params.label} (${fallbacks.length}):`);
+	if (fallbacks.length === 0) {
+		runtime.log("- none");
+		return;
+	}
+	for (const entry of fallbacks) runtime.log(`- ${entry}`);
+}
+async function addFallbackCommand(params, modelRaw, runtime) {
+	const updated = await updateConfig((cfg) => {
+		const resolved = resolveModelTarget({
+			raw: modelRaw,
+			cfg
+		});
+		const nextModels = { ...cfg.agents?.defaults?.models };
+		const targetKey = upsertCanonicalModelConfigEntry(nextModels, resolved);
+		const existing = getFallbacks(cfg, params.key);
+		if (resolveModelKeysFromEntries({
+			cfg,
+			entries: existing
+		}).includes(targetKey)) return cfg;
+		return patchDefaultsFallbacks(cfg, {
+			key: params.key,
+			fallbacks: [...existing, targetKey],
+			models: nextModels
+		});
+	});
+	logConfigUpdated(runtime);
+	runtime.log(`${params.logPrefix}: ${getFallbacks(updated, params.key).join(", ")}`);
+}
+async function removeFallbackCommand(params, modelRaw, runtime) {
+	const updated = await updateConfig((cfg) => {
+		const resolved = resolveModelTarget({
+			raw: modelRaw,
+			cfg
+		});
+		const targetKey = modelKey(resolved.provider, resolved.model);
+		const aliasIndex = buildModelAliasIndex({
+			cfg,
+			defaultProvider: DEFAULT_PROVIDER
+		});
+		const existing = getFallbacks(cfg, params.key);
+		const filtered = existing.filter((entry) => {
+			const resolvedEntry = resolveModelRefFromString({
+				raw: entry ?? "",
+				defaultProvider: DEFAULT_PROVIDER,
+				aliasIndex
+			});
+			if (!resolvedEntry) return true;
+			return modelKey(resolvedEntry.ref.provider, resolvedEntry.ref.model) !== targetKey;
+		});
+		if (filtered.length === existing.length) throw new Error(`${params.notFoundLabel} not found: ${targetKey}`);
+		return patchDefaultsFallbacks(cfg, {
+			key: params.key,
+			fallbacks: filtered
+		});
+	});
+	logConfigUpdated(runtime);
+	runtime.log(`${params.logPrefix}: ${getFallbacks(updated, params.key).join(", ")}`);
+}
+async function clearFallbacksCommand(params, runtime) {
+	await updateConfig((cfg) => {
+		return patchDefaultsFallbacks(cfg, {
+			key: params.key,
+			fallbacks: []
+		});
+	});
+	logConfigUpdated(runtime);
+	runtime.log(params.clearedMessage);
+}
+//#endregion
+export { removeFallbackCommand as i, clearFallbacksCommand as n, listFallbacksCommand as r, addFallbackCommand as t };

package/dist/gateway-CTi4P0bk.js

@@ -0,0 +1,115 @@
+import { i as formatErrorMessage } from "./errors-Jbvi20TW.js";
+import { a as normalizeLowercaseStringOrEmpty, c as normalizeOptionalString } from "./string-coerce-C1IzJjqi.js";
+import { u as resolveGatewayPort } from "./paths-DmR9mjUX.js";
+import { a as trimToUndefined } from "./credential-planner-Bf6MFQ6Y.js";
+import { r as resolveGatewayCredentialsFromConfig } from "./credentials-C7JHJpIV.js";
+import { a as loadConfig } from "./io-DNd8mbjy.js";
+import "./config-3He3LWHw.js";
+import { i as GATEWAY_CLIENT_NAMES, r as GATEWAY_CLIENT_MODES } from "./client-info-CfESmEX1.js";
+import { a as resolveLeastPrivilegeOperatorScopesForMethod } from "./method-scopes-CVKEoi44.js";
+import { r as callGateway } from "./call-Bu6qiSj3.js";
+import { g as readStringParam } from "./common-YOU2Qb73.js";
+//#region src/agents/tools/gateway.ts
+function readGatewayCallOptions(params) {
+	return {
+		gatewayUrl: readStringParam(params, "gatewayUrl", { trim: false }),
+		gatewayToken: readStringParam(params, "gatewayToken", { trim: false }),
+		timeoutMs: typeof params.timeoutMs === "number" ? params.timeoutMs : void 0
+	};
+}
+function canonicalizeToolGatewayWsUrl(raw) {
+	const input = raw.trim();
+	let url;
+	try {
+		url = new URL(input);
+	} catch (error) {
+		const message = formatErrorMessage(error);
+		throw new Error(`invalid gatewayUrl: ${input} (${message})`, { cause: error });
+	}
+	if (url.protocol !== "ws:" && url.protocol !== "wss:") throw new Error(`invalid gatewayUrl protocol: ${url.protocol} (expected ws:// or wss://)`);
+	if (url.username || url.password) throw new Error("invalid gatewayUrl: credentials are not allowed");
+	if (url.search || url.hash) throw new Error("invalid gatewayUrl: query/hash not allowed");
+	if (url.pathname && url.pathname !== "/") throw new Error("invalid gatewayUrl: path not allowed");
+	return {
+		origin: url.origin,
+		key: `${url.protocol}//${normalizeLowercaseStringOrEmpty(url.host)}`
+	};
+}
+function validateGatewayUrlOverrideForAgentTools(params) {
+	const { cfg } = params;
+	const port = resolveGatewayPort(cfg);
+	const localAllowed = new Set([
+		`ws://127.0.0.1:${port}`,
+		`wss://127.0.0.1:${port}`,
+		`ws://localhost:${port}`,
+		`wss://localhost:${port}`,
+		`ws://[::1]:${port}`,
+		`wss://[::1]:${port}`
+	]);
+	let remoteKey;
+	const remoteUrl = normalizeOptionalString(cfg.gateway?.remote?.url) ?? "";
+	if (remoteUrl) try {
+		remoteKey = canonicalizeToolGatewayWsUrl(remoteUrl).key;
+	} catch {}
+	const parsed = canonicalizeToolGatewayWsUrl(params.urlOverride);
+	if (localAllowed.has(parsed.key)) return {
+		url: parsed.origin,
+		target: "local"
+	};
+	if (remoteKey && parsed.key === remoteKey) return {
+		url: parsed.origin,
+		target: "remote"
+	};
+	throw new Error([
+		"gatewayUrl override rejected.",
+		`Allowed: ws(s) loopback on port ${port} (127.0.0.1/localhost/[::1])`,
+		"Or: configure gateway.remote.url and omit gatewayUrl to use the configured remote gateway."
+	].join(" "));
+}
+function resolveGatewayOverrideToken(params) {
+	if (params.explicitToken) return params.explicitToken;
+	return resolveGatewayCredentialsFromConfig({
+		cfg: params.cfg,
+		env: process.env,
+		modeOverride: params.target,
+		remoteTokenFallback: params.target === "remote" ? "remote-only" : "remote-env-local",
+		remotePasswordFallback: params.target === "remote" ? "remote-only" : "remote-env-local"
+	}).token;
+}
+function resolveGatewayOptions(opts) {
+	const cfg = loadConfig();
+	const validatedOverride = trimToUndefined(opts?.gatewayUrl) !== void 0 ? validateGatewayUrlOverrideForAgentTools({
+		cfg,
+		urlOverride: String(opts?.gatewayUrl)
+	}) : void 0;
+	const explicitToken = trimToUndefined(opts?.gatewayToken);
+	const token = validatedOverride ? resolveGatewayOverrideToken({
+		cfg,
+		target: validatedOverride.target,
+		explicitToken
+	}) : explicitToken;
+	const timeoutMs = typeof opts?.timeoutMs === "number" && Number.isFinite(opts.timeoutMs) ? Math.max(1, Math.floor(opts.timeoutMs)) : 3e4;
+	return {
+		url: validatedOverride?.url,
+		token,
+		timeoutMs
+	};
+}
+async function callGatewayTool(method, opts, params, extra) {
+	const gateway = resolveGatewayOptions(opts);
+	const scopes = Array.isArray(extra?.scopes) ? extra.scopes : resolveLeastPrivilegeOperatorScopesForMethod(method);
+	return await callGateway({
+		url: gateway.url,
+		token: gateway.token,
+		method,
+		params,
+		timeoutMs: gateway.timeoutMs,
+		expectFinal: extra?.expectFinal,
+		clientName: GATEWAY_CLIENT_NAMES.GATEWAY_CLIENT,
+		clientDisplayName: "agent",
+		mode: GATEWAY_CLIENT_MODES.BACKEND,
+		scopes
+	});
+}
+//#endregion
+export { readGatewayCallOptions as n, resolveGatewayOptions as r, callGatewayTool as t };