@qwen-code/qwen-code 0.24.4 → 0.24.5-nightly.20260924.ffea2d024e

package/chunks/{daemon-trust-policy-monitor-VKUSL32L.js → daemon-trust-policy-monitor-IUMXEDZO.js}

@@ -2,56 +2,56 @@
 "use strict";
 import {
   readDaemonTrustPolicySnapshot
-} from "./chunk-K22NDLL4.js";
-import "./chunk-LYEINKJD.js";
+} from "./chunk-HQTMH3GI.js";
+import "./chunk-BCW42UYG.js";
 import "./chunk-RKUWKYED.js";
-import "./chunk-D2H63VR2.js";
+import "./chunk-JYOYZTGR.js";
 import "./chunk-LDNRKF24.js";
 import "./chunk-5EJZE3FP.js";
-import "./chunk-DYLGEL4Y.js";
+import "./chunk-YID5BOAE.js";
 import "./chunk-BW4333PP.js";
 import "./chunk-CCGFXABG.js";
-import "./chunk-KY4HZXLV.js";
+import "./chunk-GLPNIOEV.js";
 import "./chunk-IDS7MSUP.js";
 import {
   onTrustedFoldersChanged
-} from "./chunk-RIQQLEYE.js";
+} from "./chunk-DVQCM4OJ.js";
 import "./chunk-756HBF3F.js";
 import "./chunk-MR3PXB6E.js";
-import "./chunk-CK5HUN74.js";
+import "./chunk-BAV7Z5KE.js";
 import "./chunk-GELRJXE2.js";
 import "./chunk-32CM56LO.js";
 import "./chunk-ALGGS7UH.js";
 import "./chunk-A45QOTO4.js";
 import "./chunk-LJZSMWOH.js";
-import "./chunk-H4W6TJFJ.js";
+import "./chunk-RONRTFAQ.js";
 import "./chunk-ZPJWUGCS.js";
 import "./chunk-DZJK32EE.js";
-import "./chunk-QROZDIMB.js";
-import "./chunk-NXZD3VNX.js";
-import "./chunk-SNMYJZZG.js";
-import "./chunk-GGUOO2XC.js";
-import "./chunk-7I63HEBQ.js";
-import "./chunk-I46MJUYS.js";
+import "./chunk-HJUAP436.js";
+import "./chunk-TL7DSR47.js";
+import "./chunk-TKEDWZ44.js";
+import "./chunk-7RCAMBLN.js";
+import "./chunk-YCWU2MD3.js";
+import "./chunk-AT4FRIF6.js";
 import "./chunk-6URMIIZO.js";
 import "./chunk-BCTEBRTF.js";
-import "./chunk-U2BS2NNZ.js";
-import "./chunk-TS4Y2MHO.js";
-import "./chunk-J5C5SQQJ.js";
+import "./chunk-4UGMA2PY.js";
+import "./chunk-CGREZDGO.js";
+import "./chunk-TTHRVIPY.js";
 import "./chunk-WKLD4E5L.js";
-import "./chunk-TX5DMDUG.js";
+import "./chunk-FAXPWBVN.js";
 import "./chunk-V2XJJTAB.js";
-import "./chunk-IFWXQC7B.js";
+import "./chunk-ZKZTUR7U.js";
 import "./chunk-MFWTREVT.js";
 import "./chunk-VCJNMND5.js";
 import "./chunk-YDERQ7ZV.js";
-import "./chunk-6IGW6HIV.js";
+import "./chunk-GXLCL2SC.js";
 import "./chunk-PPDPLILM.js";
 import "./chunk-FTKXJMQV.js";
 import "./chunk-S5BHLTHK.js";
 import {
   ideContextStore
-} from "./chunk-DPEB6S2R.js";
+} from "./chunk-5QEJKW7V.js";
 import "./chunk-27CVFKVI.js";
 import "./chunk-VU6JX6MN.js";
 import "./chunk-GOFAQQZA.js";
@@ -62,15 +62,15 @@ import "./chunk-7TK2HU3T.js";
 import "./chunk-YNURCIW7.js";
 import "./chunk-KNMT4XIN.js";
 import "./chunk-HORVWHWX.js";
-import "./chunk-6N2PJAZG.js";
+import "./chunk-PX2ZOOGQ.js";
 import "./chunk-JBUMBQAO.js";
 import "./chunk-5EZRLTLQ.js";
 import "./chunk-QHWCP53L.js";
 import "./chunk-E4YH24E6.js";
 import "./chunk-FDOMQENS.js";
 import "./chunk-SLQ4C6GN.js";
-import "./chunk-DXXCNZW4.js";
-import "./chunk-N4VKU36J.js";
+import "./chunk-GDOTFZKX.js";
+import "./chunk-465XOJLQ.js";
 import "./chunk-U6H3XTFA.js";
 import "./chunk-6PVPNMXU.js";
 import "./chunk-NLHFXAC4.js";
@@ -80,7 +80,7 @@ import "./chunk-SK3RZOPS.js";
 import "./chunk-YVD6XEO3.js";
 import "./chunk-ELRMZTPF.js";
 import "./chunk-6C3D7BKK.js";
-import "./chunk-A5QPMBRL.js";
+import "./chunk-USEHQ5O2.js";
 import "./chunk-MNU36NGH.js";
 import "./chunk-QXQMBRGL.js";
 import "./chunk-TWPJO254.js";
@@ -90,22 +90,21 @@ import "./chunk-O6GEWCJA.js";
 import "./chunk-I3K2QRZ5.js";
 import "./chunk-5ZPFMX67.js";
 import "./chunk-RSKMN2JH.js";
-import "./chunk-ADPNUPK3.js";
+import "./chunk-2JY2LCUU.js";
 import "./chunk-VNTJJ4WQ.js";
 import "./chunk-BQMSZSG6.js";
-import "./chunk-LNUQA3OE.js";
-import "./chunk-47C3HPMW.js";
+import "./chunk-CVRZNFXO.js";
+import "./chunk-O5YL6KSX.js";
 import "./chunk-JX6XHPTX.js";
 import "./chunk-QCG3JVIW.js";
-import "./chunk-JE3J5HFM.js";
+import "./chunk-KAOHUUM7.js";
 import "./chunk-P6OZD6V2.js";
-import "./chunk-QKXZOHHQ.js";
+import "./chunk-LDURD6EP.js";
 import "./chunk-BKVPLSEI.js";
-import "./chunk-XWCLIEJ2.js";
+import "./chunk-UDXFQTUI.js";
 import "./chunk-H7VK3YDS.js";
 import "./chunk-S6LOFUVP.js";
 import "./chunk-Z72PLR74.js";
-import "./chunk-GC3J5W2O.js";
 import "./chunk-OK6PQW7O.js";
 import "./chunk-NAVJD2PQ.js";
 import "./chunk-Z27N2QYZ.js";
@@ -117,20 +116,23 @@ import "./chunk-DJ2GSRLV.js";
 import "./chunk-U6673AVW.js";
 import "./chunk-VXQQCZPP.js";
 import "./chunk-KP2FHIFR.js";
-import "./chunk-VOHPPFJI.js";
+import "./chunk-MHAVM3RF.js";
 import "./chunk-KBVGO6H4.js";
-import "./chunk-2VS5EEXU.js";
+import "./chunk-WFHS3WCK.js";
 import "./chunk-VBT4BMCQ.js";
-import "./chunk-NNN2PKPV.js";
+import "./chunk-PYYPSK6Q.js";
 import "./chunk-CFMZLE3L.js";
 import "./chunk-OJSU46VD.js";
 import "./chunk-HD7O6WLV.js";
 import "./chunk-GHKVBSBY.js";
+import "./chunk-Q4FJVWI4.js";
+import "./chunk-CLNDQINM.js";
 import "./chunk-GMTJ3YQW.js";
 import "./chunk-5ETULJLP.js";
+import "./chunk-GC3J5W2O.js";
 import "./chunk-WZAD4ZNJ.js";
 import "./chunk-XASQGHGO.js";
-import "./chunk-P5OXAI4R.js";
+import "./chunk-7ELTXG6G.js";
 import "./chunk-XZA32HII.js";
 import "./chunk-DYPTD5P5.js";
 import "./chunk-HHJLM3WQ.js";

package/chunks/{deferred-core-runtime-PCWM2NAR.js → deferred-core-runtime-DJBM4M2A.js}

@@ -1,36 +1,36 @@
 // Force strict mode and setup for ESM
 "use strict";
-import "./chunk-CK5HUN74.js";
+import "./chunk-BAV7Z5KE.js";
 import "./chunk-GELRJXE2.js";
 import "./chunk-32CM56LO.js";
 import "./chunk-A45QOTO4.js";
 import "./chunk-LJZSMWOH.js";
-import "./chunk-H4W6TJFJ.js";
+import "./chunk-RONRTFAQ.js";
 import "./chunk-ZPJWUGCS.js";
 import "./chunk-DZJK32EE.js";
-import "./chunk-QROZDIMB.js";
-import "./chunk-NXZD3VNX.js";
-import "./chunk-SNMYJZZG.js";
-import "./chunk-GGUOO2XC.js";
-import "./chunk-7I63HEBQ.js";
-import "./chunk-I46MJUYS.js";
+import "./chunk-HJUAP436.js";
+import "./chunk-TL7DSR47.js";
+import "./chunk-TKEDWZ44.js";
+import "./chunk-7RCAMBLN.js";
+import "./chunk-YCWU2MD3.js";
+import "./chunk-AT4FRIF6.js";
 import "./chunk-6URMIIZO.js";
 import "./chunk-BCTEBRTF.js";
-import "./chunk-U2BS2NNZ.js";
-import "./chunk-TS4Y2MHO.js";
-import "./chunk-J5C5SQQJ.js";
+import "./chunk-4UGMA2PY.js";
+import "./chunk-CGREZDGO.js";
+import "./chunk-TTHRVIPY.js";
 import "./chunk-WKLD4E5L.js";
-import "./chunk-TX5DMDUG.js";
+import "./chunk-FAXPWBVN.js";
 import "./chunk-V2XJJTAB.js";
-import "./chunk-IFWXQC7B.js";
+import "./chunk-ZKZTUR7U.js";
 import "./chunk-MFWTREVT.js";
 import "./chunk-VCJNMND5.js";
 import "./chunk-YDERQ7ZV.js";
-import "./chunk-6IGW6HIV.js";
+import "./chunk-GXLCL2SC.js";
 import "./chunk-PPDPLILM.js";
 import "./chunk-FTKXJMQV.js";
 import "./chunk-S5BHLTHK.js";
-import "./chunk-DPEB6S2R.js";
+import "./chunk-5QEJKW7V.js";
 import "./chunk-27CVFKVI.js";
 import "./chunk-VU6JX6MN.js";
 import "./chunk-GOFAQQZA.js";
@@ -41,15 +41,15 @@ import "./chunk-7TK2HU3T.js";
 import "./chunk-YNURCIW7.js";
 import "./chunk-KNMT4XIN.js";
 import "./chunk-HORVWHWX.js";
-import "./chunk-6N2PJAZG.js";
+import "./chunk-PX2ZOOGQ.js";
 import "./chunk-JBUMBQAO.js";
 import "./chunk-5EZRLTLQ.js";
 import "./chunk-QHWCP53L.js";
 import "./chunk-E4YH24E6.js";
 import "./chunk-FDOMQENS.js";
 import "./chunk-SLQ4C6GN.js";
-import "./chunk-DXXCNZW4.js";
-import "./chunk-N4VKU36J.js";
+import "./chunk-GDOTFZKX.js";
+import "./chunk-465XOJLQ.js";
 import "./chunk-U6H3XTFA.js";
 import "./chunk-6PVPNMXU.js";
 import "./chunk-NLHFXAC4.js";
@@ -59,7 +59,7 @@ import "./chunk-SK3RZOPS.js";
 import "./chunk-YVD6XEO3.js";
 import "./chunk-ELRMZTPF.js";
 import "./chunk-6C3D7BKK.js";
-import "./chunk-A5QPMBRL.js";
+import "./chunk-USEHQ5O2.js";
 import "./chunk-MNU36NGH.js";
 import "./chunk-QXQMBRGL.js";
 import "./chunk-TWPJO254.js";
@@ -69,24 +69,23 @@ import "./chunk-O6GEWCJA.js";
 import "./chunk-I3K2QRZ5.js";
 import "./chunk-5ZPFMX67.js";
 import "./chunk-RSKMN2JH.js";
-import "./chunk-ADPNUPK3.js";
+import "./chunk-2JY2LCUU.js";
 import "./chunk-VNTJJ4WQ.js";
 import "./chunk-BQMSZSG6.js";
-import "./chunk-LNUQA3OE.js";
-import "./chunk-47C3HPMW.js";
+import "./chunk-CVRZNFXO.js";
+import "./chunk-O5YL6KSX.js";
 import "./chunk-JX6XHPTX.js";
 import "./chunk-QCG3JVIW.js";
-import "./chunk-JE3J5HFM.js";
+import "./chunk-KAOHUUM7.js";
 import {
   getGitRepoName
 } from "./chunk-P6OZD6V2.js";
-import "./chunk-QKXZOHHQ.js";
+import "./chunk-LDURD6EP.js";
 import "./chunk-BKVPLSEI.js";
-import "./chunk-XWCLIEJ2.js";
+import "./chunk-UDXFQTUI.js";
 import "./chunk-H7VK3YDS.js";
 import "./chunk-S6LOFUVP.js";
 import "./chunk-Z72PLR74.js";
-import "./chunk-GC3J5W2O.js";
 import "./chunk-OK6PQW7O.js";
 import "./chunk-NAVJD2PQ.js";
 import "./chunk-Z27N2QYZ.js";
@@ -98,20 +97,23 @@ import "./chunk-DJ2GSRLV.js";
 import "./chunk-U6673AVW.js";
 import "./chunk-VXQQCZPP.js";
 import "./chunk-KP2FHIFR.js";
-import "./chunk-VOHPPFJI.js";
+import "./chunk-MHAVM3RF.js";
 import "./chunk-KBVGO6H4.js";
-import "./chunk-2VS5EEXU.js";
+import "./chunk-WFHS3WCK.js";
 import "./chunk-VBT4BMCQ.js";
-import "./chunk-NNN2PKPV.js";
+import "./chunk-PYYPSK6Q.js";
 import "./chunk-CFMZLE3L.js";
 import "./chunk-OJSU46VD.js";
 import "./chunk-HD7O6WLV.js";
 import "./chunk-GHKVBSBY.js";
+import "./chunk-Q4FJVWI4.js";
+import "./chunk-CLNDQINM.js";
 import "./chunk-GMTJ3YQW.js";
 import "./chunk-5ETULJLP.js";
+import "./chunk-GC3J5W2O.js";
 import "./chunk-WZAD4ZNJ.js";
 import "./chunk-XASQGHGO.js";
-import "./chunk-P5OXAI4R.js";
+import "./chunk-7ELTXG6G.js";
 import "./chunk-XZA32HII.js";
 import "./chunk-DYPTD5P5.js";
 import "./chunk-HHJLM3WQ.js";

package/chunks/{dist-54LGNLWW.js → dist-3M75XY4G.js}

@@ -15,7 +15,7 @@ import {
   isChannelProactiveDeliveryError,
   isTerminalTaskLifecycleType,
   sanitizeSenderName
-} from "./chunk-YWZOEHBT.js";
+} from "./chunk-DE2WI7RU.js";
 import "./chunk-6HOTTZKB.js";
 import "./chunk-XIOVKC72.js";
 import {

package/chunks/{dist-YZBMQPNS.js → dist-6U5NQYA7.js}

@@ -3,7 +3,7 @@
 import {
   ChannelBase,
   isTerminalTaskLifecycleType
-} from "./chunk-YWZOEHBT.js";
+} from "./chunk-DE2WI7RU.js";
 import "./chunk-6HOTTZKB.js";
 import "./chunk-XIOVKC72.js";
 import {
@@ -9774,7 +9774,7 @@ var TelegramChannel = class extends ChannelBase {
           mkdirSync(dir, { recursive: true });
           const filePath = join(dir, basename(fileName) || `file_${Date.now()}`);
           writeFileSync(filePath, buf);
-          envelope.text = msg.caption || "";
+          envelope.text = msg.caption ? envelope.text : "";
           envelope.attachments = [
             {
               type: "file",
@@ -9786,7 +9786,7 @@ var TelegramChannel = class extends ChannelBase {
         } catch (err) {
           process.stderr.write(`[Telegram:${this.name}] Failed to download document: ${err instanceof Error ? err.message : err}
 `);
-          const promptText = msg.caption || "";
+          const promptText = msg.caption ? envelope.text : "";
           envelope.text = `${promptText}
 
 (User sent a file "${fileName}" but download failed)`;
@@ -9819,7 +9819,7 @@ var TelegramChannel = class extends ChannelBase {
           mkdirSync(dir, { recursive: true });
           const filePath = join(dir, fileName);
           writeFileSync(filePath, buf);
-          envelope.text = msg.caption || "";
+          envelope.text = msg.caption ? envelope.text : "";
           envelope.attachments = [
             {
               type: "audio",
@@ -9831,7 +9831,7 @@ var TelegramChannel = class extends ChannelBase {
         } catch (err) {
           process.stderr.write(`[Telegram:${this.name}] Failed to download voice message: ${err instanceof Error ? err.message : err}
 `);
-          const promptText = msg.caption || "";
+          const promptText = msg.caption ? envelope.text : "";
           envelope.text = `${promptText}
 
 (User sent a voice message but download failed)`;

package/chunks/{dist-FVMLRUVM.js → dist-AS2RPYOB.js}

@@ -16,7 +16,7 @@ import {
   sanitizePromptText,
   sanitizeSenderName,
   truncateUtf16Units
-} from "./chunk-YWZOEHBT.js";
+} from "./chunk-DE2WI7RU.js";
 import "./chunk-6HOTTZKB.js";
 import "./chunk-XIOVKC72.js";
 import {

package/chunks/{dist-HANHY2MK.js → dist-GFT4GU72.js}

@@ -11,11 +11,11 @@ import {
   sendMessage,
   sendTyping,
   uploadToCdn
-} from "./chunk-6PRSQUPJ.js";
+} from "./chunk-GQZZGEMS.js";
 import {
   ChannelBase,
   isTerminalTaskLifecycleType
-} from "./chunk-YWZOEHBT.js";
+} from "./chunk-DE2WI7RU.js";
 import "./chunk-6HOTTZKB.js";
 import "./chunk-XIOVKC72.js";
 import {

package/chunks/{dist-Y5GP7SWL.js → dist-J7JK3GPY.js}

@@ -8,7 +8,7 @@ import {
   sanitizePromptText,
   sanitizeSenderName,
   truncateCodePoints
-} from "./chunk-YWZOEHBT.js";
+} from "./chunk-DE2WI7RU.js";
 import "./chunk-6HOTTZKB.js";
 import {
   require_main
@@ -2088,6 +2088,7 @@ var QQChannel = class _QQChannel extends ChannelBase {
       safeName,
       cleanText,
       commandText,
+      routeText: sanitizePromptText(safeDisplayText),
       text,
       senderName
     };
@@ -2126,7 +2127,7 @@ var QQChannel = class _QQChannel extends ChannelBase {
     const safeContent = cleanText.replace(/\[atMention=[^\]]*]/g, "").replace(/\[botOpenId:[^\]]*]/g, "").replace(/\[bot]/g, "");
     const isSlash = safeContent.startsWith("/");
     const body = sanitizePromptText(safeContent);
-    const text = isSlash ? body : `[atMention=true] [${safeName}]: ${body}`;
+    const text = isSlash || this.config.messageRoutes ? body : `[atMention=true] [${safeName}]: ${body}`;
     this.handleInbound({
       channelName: this.name,
       senderId: chatId,
@@ -2137,7 +2138,7 @@ var QQChannel = class _QQChannel extends ChannelBase {
       isGroup: false,
       isMentioned: true,
       isReplyToBot: false,
-      ...isSlash ? {} : { alreadyPrefixed: true }
+      ...isSlash || this.config.messageRoutes ? {} : { alreadyPrefixed: true }
     }).catch((e) => process.stderr.write(`[QQ:${this.name}] C2C handler error: ${sanitizeLogText(e instanceof Error ? e.message : String(e), 200)}
 `));
   }
@@ -2172,7 +2173,7 @@ var QQChannel = class _QQChannel extends ChannelBase {
     });
     if (!result)
       return;
-    const { isSlash, text, commandText, senderName, safeName } = result;
+    const { isSlash, text, commandText, routeText, senderName, safeName } = result;
     if (this.isDuplicate(event.id))
       return;
     if (isSlash) {
@@ -2195,12 +2196,12 @@ var QQChannel = class _QQChannel extends ChannelBase {
       senderId,
       senderName,
       chatId,
-      text,
+      text: this.config.messageRoutes ? routeText : text,
       messageId: event.id,
       isGroup: true,
       isMentioned: true,
       isReplyToBot: true,
-      ...isSlash ? {} : { alreadyPrefixed: true }
+      ...isSlash || this.config.messageRoutes ? {} : { alreadyPrefixed: true }
     }).catch((e) => process.stderr.write(`[QQ:${this.name}] Group handler error: ${sanitizeLogText(e instanceof Error ? e.message : String(e), 200)}
 `));
   }
@@ -2233,7 +2234,7 @@ var QQChannel = class _QQChannel extends ChannelBase {
     const result = this.prepareGroupMessage(event, chatId);
     if (!result)
       return;
-    const { isSlash, text, commandText, senderName, isAtBot, safeName } = result;
+    const { isSlash, text, commandText, routeText, senderName, isAtBot, safeName } = result;
     if (!isAtBot) {
       if (this.groupActiveMsgEnabled.get(chatId) === false) {
         process.stderr.write(`[QQ:${this.name}] handleGroupAll blocked: active messages disabled for ${sanitizeLogText(chatId, 64)}
@@ -2297,14 +2298,14 @@ var QQChannel = class _QQChannel extends ChannelBase {
     this.handleInbound({
       channelName: this.name,
       chatId,
-      text,
+      text: this.config.messageRoutes ? routeText : text,
       senderId,
       senderName,
       messageId: event.id,
       isGroup: true,
       isMentioned: isAtBot,
       isReplyToBot: isAtBot,
-      ...isSlash ? {} : { alreadyPrefixed: true }
+      ...isSlash || this.config.messageRoutes ? {} : { alreadyPrefixed: true }
     }).catch((e) => {
       process.stderr.write(`[QQ:${this.name}] handleGroupAll error: ${sanitizeLogText(e instanceof Error ? e.message : String(e), 200)}
 `);

package/chunks/{dist-O723VE2K.js → dist-JTPRKF5H.js}

@@ -4,9 +4,10 @@ import {
   PollingChannelBase,
   getGlobalQwenDir,
   getWorkspaceScopeDirName,
+  lowercaseGroupAllowedUsers,
   sanitizeDisplayText,
   sanitizeLogText
-} from "./chunk-YWZOEHBT.js";
+} from "./chunk-DE2WI7RU.js";
 import "./chunk-6HOTTZKB.js";
 import "./chunk-XIOVKC72.js";
 import {
@@ -4070,15 +4071,28 @@ var GithubChannel = class extends PollingChannelBase {
     }
     const allowed = (this.config.allowedUsers ?? []).map((u) => u.toLowerCase());
     this.config.allowedUsers = allowed;
+    this.gate.replaceAllowedUsers(allowed);
+    lowercaseGroupAllowedUsers(this.config.groups);
     const botUsername = this.botUsername?.toLowerCase();
-    if (this.config.senderPolicy === "allowlist" && botUsername && allowed.includes(botUsername)) {
-      if (allowed.every((user) => user === botUsername)) {
-        throw new Error(`[Channel:${this.name}] GitHub allowlist only contains the authenticated GitHub account "${this.botUsername}", which cannot trigger this channel because self-authored comments are ignored. Use a separate bot account (or a separate bot-owned PAT) and allowlist the operator account.`);
+    for (const [groupId, group] of Object.entries(this.config.groups)) {
+      const defaults = this.config.groups["*"];
+      if ((group.senders ?? defaults?.senders ?? "open") !== "allowlist") {
+        continue;
+      }
+      const groupUsers = group.allowedUsers ?? defaults?.allowedUsers ?? [];
+      if (!botUsername || !groupUsers.includes(botUsername))
+        continue;
+      if (groupUsers.every((user) => user === botUsername)) {
+        process2.stderr.write(`[Channel:${this.name}] warning: GitHub group "${groupId}" allowlist only contains the authenticated GitHub account "${this.botUsername}", which cannot trigger this group because self-authored comments are ignored. Use a separate bot account (or a separate bot-owned PAT) and allowlist the operator account.
+`);
+        continue;
       }
-      process2.stderr.write(`[Channel:${this.name}] warning: authenticated GitHub account "${this.botUsername}" is allowlisted but cannot trigger this channel; use a separate operator account.
+      process2.stderr.write(`[Channel:${this.name}] warning: authenticated GitHub account "${this.botUsername}" is allowlisted in group "${groupId}" but cannot trigger this channel; use a separate operator account.
 `);
     }
-    this.gate.replaceAllowedUsers(allowed);
+    if (this.config.operators) {
+      this.config.operators = this.config.operators.map((u) => u.toLowerCase());
+    }
     this.migrateLegacyPublicationState();
     this.inboundPersistenceBlocked = false;
     this.inboundRecoveryPending = true;
@@ -4567,7 +4581,10 @@ var GithubChannel = class extends PollingChannelBase {
       if (onlyMentioned && !hasMention)
         continue;
       const senderId = (comment.user?.login || "unknown").toLowerCase();
-      const allowed = this.gate.isAllowed(senderId) || directed && this.config.groupPolicy === "pairing" && this.groupGate.isGroupApproved(ctx.chatId);
+      const allowed = this.senderGateFor({
+        isGroup: true,
+        chatId: ctx.chatId
+      }).isAllowed(senderId);
       const envelope = {
         channelName: this.name,
         senderId,
@@ -4634,14 +4651,18 @@ ${details}`
     this.recordDispatched("dispatchedEvents", trigger.key);
   }
   async processAggregateLane(ctx) {
-    if (this.config.senderPolicy === "pairing" || this.config.groupPolicy === "pairing") {
+    if (this.config.groupPolicy === "pairing") {
       await this.processCommentLane(ctx, false, true);
       return;
     }
+    const senderGate = this.senderGateFor({
+      isGroup: true,
+      chatId: ctx.chatId
+    });
     const newComments = (await this.fetchNewComments(ctx)).filter((comment) => {
       const key = comment.node_id || String(comment.id);
       const sender = (comment.user?.login || "unknown").toLowerCase();
-      return !this.cursor.dispatchedComments?.includes(key) && this.gate.isAllowed(sender);
+      return !this.cursor.dispatchedComments?.includes(key) && senderGate.isAllowed(sender);
     });
     for (const comment of newComments) {
       this.recordDispatchedComment(comment.node_id || String(comment.id));
@@ -5175,24 +5196,6 @@ var plugin = {
           { value: "disabled", label: "Disabled" }
         ]
       },
-      {
-        key: "senderPolicy",
-        label: "Sender Policy",
-        kind: "enum",
-        required: true,
-        description: 'Use "Allowlist" with allowed users on public repos',
-        options: [
-          { value: "allowlist", label: "Allowlist" },
-          { value: "pairing", label: "Pairing" },
-          { value: "open", label: "Open" }
-        ]
-      },
-      {
-        key: "allowedUsers",
-        label: "Allowed Users",
-        kind: "string-list",
-        description: "GitHub usernames, used by Allowlist and Pairing policies"
-      },
       {
         key: "reasonFilter",
         label: "Reason Filter",

package/chunks/{dist-MGZKUISU.js → dist-MOO5VOC5.js}

@@ -5,8 +5,9 @@ import {
 } from "./chunk-CKXUWR6I.js";
 import "./chunk-TZBFVXNX.js";
 import {
-  PollingChannelBase
-} from "./chunk-YWZOEHBT.js";
+  PollingChannelBase,
+  lowercaseGroupAllowedUsers
+} from "./chunk-DE2WI7RU.js";
 import "./chunk-6HOTTZKB.js";
 import {
   external_exports
@@ -13227,6 +13228,10 @@ var GitlabChannel = class extends PollingChannelBase {
     const allowed = (this.config.allowedUsers ?? []).map((u) => u.toLowerCase());
     this.config.allowedUsers = allowed;
     this.gate.replaceAllowedUsers(allowed);
+    lowercaseGroupAllowedUsers(this.config.groups);
+    if (this.config.operators) {
+      this.config.operators = this.config.operators.map((u) => u.toLowerCase());
+    }
     this.startPollLoop();
   }
   disconnect() {
@@ -13496,24 +13501,6 @@ var plugin = {
           { value: "disabled", label: "Disabled" }
         ]
       },
-      {
-        key: "senderPolicy",
-        label: "Sender Policy",
-        kind: "enum",
-        required: true,
-        description: 'Use "Allowlist" with allowed users on public projects',
-        options: [
-          { value: "allowlist", label: "Allowlist" },
-          { value: "pairing", label: "Pairing" },
-          { value: "open", label: "Open" }
-        ]
-      },
-      {
-        key: "allowedUsers",
-        label: "Allowed Users",
-        kind: "string-list",
-        description: "GitLab usernames, used by Allowlist and Pairing policies"
-      },
       {
         key: "action_prompt_template",
         label: "Action Templates",

package/chunks/{dist-IZ66D5A3.js → dist-NJ2L5QKL.js}

@@ -9,7 +9,7 @@ import "./chunk-TZBFVXNX.js";
 import {
   ChannelBase,
   sanitizeLogText
-} from "./chunk-YWZOEHBT.js";
+} from "./chunk-DE2WI7RU.js";
 import "./chunk-6HOTTZKB.js";
 import "./chunk-XIOVKC72.js";
 import "./chunk-RVIGZBIT.js";