@qwen-code/qwen-code 0.24.5-preview.0 → 0.24.5

package/chunks/{chunk-3DBI3LLL.js → chunk-CWLTXYKP.js}

@@ -3,7 +3,7 @@
 import {
   captureRuntimeFileVersion,
   writeRuntimeFile
-} from "./chunk-WVNCMGAO.js";
+} from "./chunk-6FURC4LI.js";
 import {
   checkTeamMemorySecrets
 } from "./chunk-6URMIIZO.js";
@@ -15,17 +15,17 @@ import {
   detectLineEnding,
   getDiffStat,
   needsUtf8Bom
-} from "./chunk-RL2HSTEB.js";
+} from "./chunk-SYZPPX3O.js";
 import {
   FileOperationEvent,
   ReadFileTool,
   getLanguageFromFilePath,
   logFileOperation
-} from "./chunk-MZRJ2JJS.js";
+} from "./chunk-HDSI3RDN.js";
 import {
   fileExists,
   getSpecificMimeType
-} from "./chunk-NNN2PKPV.js";
+} from "./chunk-PYYPSK6Q.js";
 import {
   isAnyAutoMemPath,
   isTeamAutoMemPath

package/chunks/{chunk-B3XMX4SN.js → chunk-DACCX4JI.js}

@@ -4,16 +4,16 @@ import {
   LoadedSettings,
   getNestedProperty,
   getPersistScopeForModelSelection
-} from "./chunk-OQE7AA2W.js";
+} from "./chunk-36ZMEEBW.js";
 import {
   getHomeEnvFallbackVars
-} from "./chunk-2KZURPTB.js";
+} from "./chunk-DZCTQ2MF.js";
 import {
   writeWithBackupSync
-} from "./chunk-JOFZBTVL.js";
+} from "./chunk-245NB3M4.js";
 import {
   preserveModelProviderPlaceholders
-} from "./chunk-3JSIWFNA.js";
+} from "./chunk-XHHUGXYW.js";
 import {
   resolveEnvVarsInObject
 } from "./chunk-7TK2HU3T.js";

package/chunks/{chunk-YWZOEHBT.js → chunk-DE2WI7RU.js}

@@ -13,6 +13,25 @@ import {
   __name
 } from "./chunk-J2S4EL5Y.js";
 
+// packages/channels/base/dist/private-policy.js
+init_esbuild_shims();
+function resolvePrivatePolicy(config) {
+  const policy = config.privatePolicy !== void 0 ? config.privatePolicy : config.dmPolicy === "disabled" ? "disabled" : config.senderPolicy ?? "allowlist";
+  switch (policy) {
+    case "disabled":
+      return "disabled";
+    case "allowlist":
+      return "allowlist";
+    case "pairing":
+      return "pairing";
+    case "open":
+      return "open";
+    default:
+      throw new Error("Channel privatePolicy must be one of: disabled, allowlist, pairing, open.");
+  }
+}
+__name(resolvePrivatePolicy, "resolvePrivatePolicy");
+
 // packages/channels/base/dist/PairingStore.js
 init_esbuild_shims();
 import * as crypto2 from "node:crypto";
@@ -1372,8 +1391,7 @@ var GroupGate = class {
         pairing: result ?? { rejected: "cap_reached" }
       };
     }
-    const groupConfig = this.groups[envelope.chatId] || this.groups["*"] || {};
-    const requireMention = groupConfig.requireMention ?? true;
+    const requireMention = this.groups[envelope.chatId]?.requireMention ?? this.groups["*"]?.requireMention ?? true;
     if (requireMention && !envelope.isMentioned && !envelope.isReplyToBot) {
       return { allowed: false, reason: "mention_required" };
     }
@@ -1383,6 +1401,14 @@ var GroupGate = class {
     return this.pairingStore?.isGroupApproved(groupId) ?? false;
   }
 };
+function lowercaseGroupAllowedUsers(groups) {
+  for (const group of Object.values(groups)) {
+    if (group.allowedUsers) {
+      group.allowedUsers = group.allowedUsers.map((u) => u.toLowerCase());
+    }
+  }
+}
+__name(lowercaseGroupAllowedUsers, "lowercaseGroupAllowedUsers");
 
 // packages/channels/base/dist/DmGate.js
 init_esbuild_shims();
@@ -1692,6 +1718,8 @@ var SenderGate = class {
   }
   isAllowed(senderId) {
     switch (this.policy) {
+      case "disabled":
+        return false;
       case "open":
         return true;
       case "allowlist":
@@ -1704,6 +1732,8 @@ var SenderGate = class {
   }
   check(senderId, senderName) {
     switch (this.policy) {
+      case "disabled":
+        return { allowed: false };
       case "open":
         return { allowed: true };
       case "allowlist":
@@ -1831,7 +1861,13 @@ var SessionRouter = class {
       this.channelsWithoutLoops.add(channelName);
     }
   }
-  routingKey(channelName, senderId, chatId, threadId) {
+  routingKey(channelName, senderId, chatId, threadId, routeKey) {
+    if (routeKey !== void 0) {
+      return JSON.stringify([
+        this.routingKey(channelName, senderId, chatId, threadId),
+        routeKey
+      ]);
+    }
     const scope = this.channelScopes.get(channelName) || this.defaultScope;
     switch (scope) {
       case "thread":
@@ -1855,14 +1891,15 @@ var SessionRouter = class {
     };
   }
   async resolve(channelName, senderId, chatId, threadId, cwd, isGroup, options) {
-    const key = this.routingKey(channelName, senderId, chatId, options?.routingThreadId ?? threadId);
+    const key = this.routingKey(channelName, senderId, chatId, options?.routingThreadId ?? threadId, options?.routeKey);
     const input = {
       channelName,
       senderId,
       chatId,
       threadId,
       cwd: cwd || this.defaultCwd,
-      isGroup
+      isGroup,
+      ...options?.routeKey !== void 0 ? { messageRoute: options.routeKey } : {}
     };
     let failedWaits = 0;
     for (; ; ) {
@@ -1902,7 +1939,8 @@ var SessionRouter = class {
         senderId: input.senderId,
         chatId: input.chatId,
         threadId: input.threadId,
-        isGroup: input.isGroup
+        isGroup: input.isGroup,
+        ...input.messageRoute !== void 0 ? { messageRoute: input.messageRoute } : {}
       }, (currentOperation) => existing ? this.loadOrReplaceSession(key, existing, input, currentOperation) : this.createAndStoreSession(key, input, currentOperation));
       this.creatingSessions.set(key, operation);
       try {
@@ -1942,7 +1980,8 @@ var SessionRouter = class {
         senderId: input.senderId,
         chatId: input.chatId,
         threadId: input.threadId,
-        isGroup: input.isGroup
+        isGroup: input.isGroup,
+        ...input.messageRoute !== void 0 ? { messageRoute: input.messageRoute } : {}
       });
       this.toCwd.set(sessionId, input.cwd);
       this.liveSessionIds.add(sessionId);
@@ -1999,7 +2038,8 @@ var SessionRouter = class {
             senderId: input.senderId,
             chatId: input.chatId,
             threadId: input.threadId,
-            isGroup: input.isGroup
+            isGroup: input.isGroup,
+            ...input.messageRoute !== void 0 ? { messageRoute: input.messageRoute } : {}
           });
           this.toCwd.set(replacement, input.cwd);
           this.liveSessionIds.add(replacement);
@@ -2024,13 +2064,13 @@ var SessionRouter = class {
   isSessionLive(sessionId) {
     return this.toTarget.has(sessionId) && this.isLive(sessionId);
   }
-  getSession(channelName, senderId, chatId, threadId) {
-    return this.toSession.get(this.routingKey(channelName, senderId, chatId, threadId));
+  getSession(channelName, senderId, chatId, threadId, routeKey) {
+    return this.toSession.get(this.routingKey(channelName, senderId, chatId, threadId, routeKey));
   }
-  hasSession(channelName, senderId, chatId, threadId) {
+  hasSession(channelName, senderId, chatId, threadId, routeKey) {
     const scope = this.channelScopes.get(channelName) || this.defaultScope;
     if (chatId) {
-      return this.toSession.has(this.routingKey(channelName, senderId, chatId, threadId));
+      return this.toSession.has(this.routingKey(channelName, senderId, chatId, threadId, routeKey));
     }
     if (scope === "single") {
       return false;
@@ -2292,11 +2332,11 @@ var SessionRouter = class {
   /**
    * Remove session(s) for the given sender. Returns the removed session IDs.
    */
-  removeSession(channelName, senderId, chatId, threadId) {
+  removeSession(channelName, senderId, chatId, threadId, routeKey) {
     const removedIds = [];
     const scope = this.channelScopes.get(channelName) || this.defaultScope;
     if (chatId) {
-      const key = this.routingKey(channelName, senderId, chatId, threadId);
+      const key = this.routingKey(channelName, senderId, chatId, threadId, routeKey);
       this.invalidateRouteOperation(key);
       const sessionId = this.deleteByKey(key);
       if (sessionId)
@@ -2597,7 +2637,7 @@ var SessionRouter = class {
     if (typeof target !== "object" || target === null)
       return false;
     const typedTarget = target;
-    const wellFormed = typeof entry["sessionId"] === "string" && entry["sessionId"].length > 0 && typeof entry["cwd"] === "string" && entry["cwd"].length > 0 && typeof typedTarget["channelName"] === "string" && typeof typedTarget["senderId"] === "string" && typeof typedTarget["chatId"] === "string" && (typedTarget["threadId"] === void 0 || typeof typedTarget["threadId"] === "string") && (typedTarget["isGroup"] === void 0 || typeof typedTarget["isGroup"] === "boolean");
+    const wellFormed = typeof entry["sessionId"] === "string" && entry["sessionId"].length > 0 && typeof entry["cwd"] === "string" && entry["cwd"].length > 0 && typeof typedTarget["channelName"] === "string" && typeof typedTarget["senderId"] === "string" && typeof typedTarget["chatId"] === "string" && (typedTarget["messageRoute"] === void 0 || typeof typedTarget["messageRoute"] === "string") && (typedTarget["threadId"] === void 0 || typeof typedTarget["threadId"] === "string") && (typedTarget["isGroup"] === void 0 || typeof typedTarget["isGroup"] === "boolean");
     if (!wellFormed)
       return false;
     if (entry["isolation"] === void 0)
@@ -2755,6 +2795,35 @@ var SessionRouter = class {
   }
 };
 
+// packages/channels/base/dist/message-routes.js
+init_esbuild_shims();
+function matchMessageRoute(text, routes, defaultRoute) {
+  for (const [prefix, instructions] of [...routes].sort(([a], [b]) => b.length - a.length)) {
+    let candidate = text.trim();
+    while (!(candidate.startsWith(prefix) && (candidate.length === prefix.length || /\s/u.test(candidate.charAt(prefix.length))))) {
+      const mention = candidate.match(/^(?:@[^@\s]+|<@[^>]{1,64}>)\s+/u)?.[0];
+      if (!mention)
+        break;
+      candidate = candidate.slice(mention.length);
+    }
+    if (candidate.startsWith(prefix) && /^\s+\S[\s\S]*$/u.test(candidate.slice(prefix.length))) {
+      return {
+        prefix,
+        instructions,
+        text: candidate.slice(prefix.length).trim()
+      };
+    }
+  }
+  if (defaultRoute !== void 0) {
+    const instructions = routes.get(defaultRoute);
+    if (instructions !== void 0) {
+      return { prefix: defaultRoute, instructions, text };
+    }
+  }
+  return void 0;
+}
+__name(matchMessageRoute, "matchMessageRoute");
+
 // packages/channels/base/dist/named-session-manager.js
 init_esbuild_shims();
 import { randomUUID as randomUUID2 } from "node:crypto";
@@ -4276,7 +4345,10 @@ var ChannelBase = class {
   groupGate;
   dmGate;
   gate;
+  privatePolicy;
   router;
+  messageRoutes;
+  routedEnvelopes = /* @__PURE__ */ new WeakSet();
   name;
   /** Resolved (defaulted + frozen) identity/scope — adapters should read these, not raw config. */
   identity;
@@ -4898,6 +4970,17 @@ No answer is available from the current conversation context.`;
   constructor(name, config, bridge, options) {
     this.name = name;
     this.config = config;
+    this.messageRoutes = new Map(Object.entries(config.messageRoutes ?? {}));
+    if (config.multiSession && this.messageRoutes.size > 0) {
+      throw new Error("messageRoutes cannot be combined with multiSession.");
+    }
+    if ([...this.messageRoutes].some(([prefix, instructions]) => !prefix.trim() || prefix !== prefix.trim() || typeof instructions !== "string")) {
+      throw new Error("Message routes require non-empty prefixes and string instructions.");
+    }
+    if (config.defaultMessageRoute !== void 0 && !this.messageRoutes.has(config.defaultMessageRoute)) {
+      throw new Error("defaultMessageRoute must name a configured message route.");
+    }
+    this.privatePolicy = resolvePrivatePolicy(config);
     this.bridge = bridge;
     this.locale = options?.locale ?? "en";
     this.proxy = options?.proxy;
@@ -4911,10 +4994,10 @@ No answer is available from the current conversation context.`;
     this.loopController = options?.loopController;
     this.observedContacts = options?.observedContacts;
     this.bridgeRecovery = options?.bridgeRecovery;
-    const pairingStore = config.senderPolicy === "pairing" || config.groupPolicy === "pairing" ? new PairingStore(name, config.cwd) : void 0;
+    const pairingStore = this.privatePolicy === "pairing" || config.groupPolicy === "pairing" ? new PairingStore(name, config.cwd) : void 0;
     this.groupGate = new GroupGate(config.groupPolicy, config.groups, pairingStore);
-    this.dmGate = new DmGate(config.dmPolicy);
-    this.gate = new SenderGate(config.senderPolicy, config.allowedUsers, pairingStore);
+    this.dmGate = new DmGate(this.privatePolicy === "disabled" ? "disabled" : "open");
+    this.gate = new SenderGate(this.privatePolicy, config.allowedUsers, pairingStore);
     this.router = options?.router || new SessionRouter(bridge, config.cwd, config.sessionScope);
     if (config.multiSession) {
       if (config.sessionScope !== "user") {
@@ -5182,6 +5265,9 @@ No answer is available from the current conversation context.`;
       if (this.config.instructions) {
         staticContext.push(this.config.instructions);
       }
+      const routeInstructions = target.messageRoute === void 0 ? void 0 : this.messageRoutes.get(target.messageRoute);
+      if (routeInstructions)
+        staticContext.push(routeInstructions);
       if (this.shouldPrependChannelBoundaryPrompt()) {
         staticContext.push(this.channelBoundaryPrompt());
       }
@@ -5373,7 +5459,7 @@ No answer is available from the current conversation context.`;
       throw new Error(`Loop ${job.id} target is no longer authorized.`);
     }
     await this.waitForBridgeRecovery();
-    const sessionId = await this.router.resolve(this.name, job.target.senderId, job.target.chatId, job.target.threadId, job.cwd, job.target.isGroup);
+    const sessionId = await this.router.resolve(this.name, job.target.senderId, job.target.chatId, job.target.threadId, job.cwd, job.target.isGroup, { routeKey: job.target.messageRoute });
     const label = sanitizeQuotedText(job.label || job.id, 80);
     const createdBy = sanitizeSenderName(job.createdBy || "unknown");
     const promptText = `[Loop "${label}" created by ${createdBy}] Scheduled task running unattended: no one is present to answer questions, and your final response is delivered to this chat automatically \u2014 do whatever work the task requires, then put the result in your final response instead of trying to deliver it to this chat yourself.
@@ -6384,7 +6470,7 @@ ${requestList}`);
     if (this.namedSessions) {
       return (await this.namedSessions.current(this.namedSessionOwner(envelope)))?.sessionId;
     }
-    return this.router.getSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId);
+    return this.router.getSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId, envelope.messageRoute);
   }
   reserveQueuedTurn(sessionId) {
     this.queuedTurns.set(sessionId, (this.queuedTurns.get(sessionId) ?? 0) + 1);
@@ -6636,7 +6722,7 @@ ${requestList}`);
       let resetTaskName;
       let resetWorktreeKept = false;
       let removedIds;
-      const retiringSessionId = this.namedSessions ? void 0 : this.router.getSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId);
+      const retiringSessionId = this.namedSessions ? void 0 : this.router.getSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId, envelope.messageRoute);
       if (retiringSessionId)
         this.onSessionRetiring(retiringSessionId);
       if (this.namedSessions) {
@@ -6659,7 +6745,7 @@ ${requestList}`);
           return;
         }
       } else {
-        removedIds = this.router.removeSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId);
+        removedIds = this.router.removeSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId, envelope.messageRoute);
       }
       this.clearPendingGroupHistory(envelope);
       if (removedIds.length > 0) {
@@ -6743,7 +6829,7 @@ ${requestList}`);
         await this.sendThreadMessage(envelope.chatId, envelope.threadId, "Only authorized members can view this shared session.");
         return true;
       }
-      const active = this.namedSessions ? Boolean(await this.currentSessionId(envelope)) : this.router.hasSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId);
+      const active = this.namedSessions ? Boolean(await this.currentSessionId(envelope)) : this.router.hasSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId, envelope.messageRoute);
       const scopeNote = this.config.sessionScope === "single" ? " (shared channel-wide)" : this.isSharedSession(envelope) ? envelope.isGroup ? " (shared by this group)" : "" : envelope.isGroup ? " (private to you)" : "";
       await this.sendThreadMessage(envelope.chatId, envelope.threadId, [
         `Channel: ${this.name}`,
@@ -6820,8 +6906,8 @@ ${requestList}`);
         await this.sendThreadMessage(envelope.chatId, envelope.threadId, "Only authorized members can view this shared session.");
         return true;
       }
-      const hasSession = this.namedSessions ? Boolean(await this.currentSessionId(envelope)) : this.router.hasSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId);
-      const policy = this.config.senderPolicy;
+      const hasSession = this.namedSessions ? Boolean(await this.currentSessionId(envelope)) : this.router.hasSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId, envelope.messageRoute);
+      const policy = envelope.isGroup && !this.isPersonalConversation(envelope) ? this.groupSendersFor(envelope) : this.privatePolicy;
       const lines = [
         `Session: ${hasSession ? "active" : "none"}`,
         `Access: ${policy}`,
@@ -7103,6 +7189,7 @@ ${requestList}`);
   loopTargetFromEnvelope(envelope) {
     return this.normalizeLoopTarget({
       channelName: this.name,
+      ...envelope.messageRoute !== void 0 ? { messageRoute: envelope.messageRoute } : {},
       senderId: envelope.senderId,
       chatId: envelope.chatId,
       threadId: envelope.threadId,
@@ -7128,6 +7215,8 @@ ${requestList}`);
     return normalizedTarget;
   }
   isStoredLoopTargetAuthorized(target, senderName) {
+    if (target.messageRoute !== void 0 && !this.messageRoutes.has(target.messageRoute))
+      return false;
     const normalizedTarget = this.normalizeLoopTarget(target);
     const envelope = {
       channelName: this.name,
@@ -7140,7 +7229,7 @@ ${requestList}`);
       isMentioned: true,
       isReplyToBot: true
     };
-    return this.groupGate.check(envelope, { createPairingRequest: false }).allowed && this.dmGate.check(envelope).allowed && (normalizedTarget.isGroup && this.config.groupPolicy === "pairing" ? true : this.gate.isAllowed(normalizedTarget.senderId)) && this.isAuthorizedForSharedSession(envelope);
+    return this.groupGate.check(envelope, { createPairingRequest: false }).allowed && this.dmGate.check(envelope).allowed && this.senderGateFor(envelope).isAllowed(normalizedTarget.senderId) && this.isAuthorizedForSharedSession(envelope);
   }
   /** Check if a message text matches a registered local command. */
   isLocalCommand(text) {
@@ -7148,7 +7237,7 @@ ${requestList}`);
     return parsed !== null && this.commands.has(parsed.command);
   }
   findActiveSessionId(envelope) {
-    const sessionId = this.router.getSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId);
+    const sessionId = this.router.getSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId, envelope.messageRoute);
     return sessionId && this.activePrompts.has(sessionId) ? sessionId : void 0;
   }
   async findNamedActiveSessionId(envelope) {
@@ -7202,7 +7291,7 @@ ${requestList}`);
     if (matched) {
       return;
     }
-    const sessionId = this.router.getSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId);
+    const sessionId = this.router.getSession(this.name, envelope.senderId, envelope.chatId, envelope.threadId, envelope.messageRoute);
     if (sessionId) {
       this.unattendedMemorySessions.delete(sessionId);
     }
@@ -7644,29 +7733,21 @@ ${sanitizePromptText(entry.text).trim()}` : `No channel memory entry ${intent.id
     return this.config.sessionScope === "single" || this.config.sessionScope === "chat_thread" || target.isGroup === true && this.config.sessionScope === "thread";
   }
   /**
-   * Whether `envelope.senderId` may act on the resolved session's destructive or
-   * workspace-leaking commands (/clear, /who). A SHARED session with a non-empty
-   * allowedUsers list is restricted to those members; a per-user session, or one
-   * with no allowlist, is unrestricted. Shared verbatim by /clear and /who so the
-   * gate can't drift; each caller sends its own rejection wording.
+   * Whether `envelope.senderId` may operate the resolved session: answer its
+   * permission prompts, steer it, or run /cancel, /clear, /who, /status, /loop
+   * and /btw. Shared verbatim by every such command so the gate can't drift;
+   * each caller sends its own rejection wording.
    */
   isAuthorizedForSharedSession(envelope) {
-    return this.isAuthorizedForSharedSessionTarget(envelope);
-  }
-  isAuthorizedForSharedSessionTarget(target) {
-    if (!this.isSharedSessionTarget(target))
-      return true;
-    const authorized = this.config.allowedUsers;
-    return authorized.length === 0 || authorized.includes(target.senderId);
+    return this.isSharedSessionOperator(envelope, envelope.senderId);
   }
   isAuthorizedForSharedSessionToolCall(target, sessionId) {
+    return this.isSharedSessionOperator(target, this.activePrompts.get(sessionId)?.senderId);
+  }
+  isSharedSessionOperator(target, senderId) {
     if (!this.isSharedSessionTarget(target))
       return true;
-    const authorized = this.config.allowedUsers;
-    if (authorized.length === 0)
-      return true;
-    const senderId = this.activePrompts.get(sessionId)?.senderId;
-    return senderId !== void 0 && authorized.includes(senderId);
+    return senderId !== void 0 && this.config.operators?.includes(senderId) === true;
   }
   toolCallerName(sessionId, target) {
     const active = this.activePrompts.get(sessionId);
@@ -7784,7 +7865,8 @@ ${sanitizePromptText(entry.text).trim()}` : `No channel memory entry ${intent.id
     return JSON.stringify([
       this.name,
       envelope.chatId,
-      envelope.threadId ?? null
+      envelope.threadId ?? null,
+      ...envelope.messageRoute !== void 0 ? [envelope.messageRoute] : []
     ]);
   }
   groupHistoryLimit(envelope) {
@@ -7800,6 +7882,8 @@ ${sanitizePromptText(entry.text).trim()}` : `No channel memory entry ${intent.id
     return Math.floor(configured);
   }
   recordPendingGroupHistory(envelope) {
+    if (!this.applyMessageRoute(envelope))
+      return;
     const limit = this.groupHistoryLimit(envelope);
     if (limit <= 0 || envelope.text.trim().length === 0) {
       return;
@@ -7807,7 +7891,7 @@ ${sanitizePromptText(entry.text).trim()}` : `No channel memory entry ${intent.id
     if (envelope.syntheticText)
       return;
     const senderId = truncateGroupHistoryField(envelope.senderId);
-    if (this.config.groupPolicy !== "pairing" && !this.gate.isAllowed(senderId)) {
+    if (!this.senderGateFor(envelope).isAllowed(senderId)) {
       return;
     }
     const entry = {
@@ -7866,11 +7950,12 @@ ${sanitizePromptText(entry.text).trim()}` : `No channel memory entry ${intent.id
 `);
     }
   }
-  prependGroupHistoryContext(promptText, entries) {
+  prependGroupHistoryContext(envelope, promptText, entries) {
     if (entries.length === 0) {
       return promptText;
     }
-    const lines = this.config.groupPolicy === "pairing" ? entries : entries.filter((entry) => this.gate.isAllowed(entry.senderId));
+    const senderGate = this.senderGateFor(envelope);
+    const lines = entries.filter((entry) => senderGate.isAllowed(entry.senderId));
     if (lines.length === 0) {
       return promptText;
     }
@@ -7885,7 +7970,35 @@ ${formatted.join("\n")}
 ${CURRENT_MESSAGE_MARKER}
 ${promptText}`;
   }
+  senderGateFor(target) {
+    if (target.isGroup !== true || this.isPersonalConversation(target)) {
+      return this.gate;
+    }
+    const senders = this.groupSendersFor(target);
+    return new SenderGate(senders, senders === "allowlist" ? this.groupAllowedUsersFor(target.chatId) : []);
+  }
+  groupSendersFor(target) {
+    return this.groupConfigFor(target.chatId)?.senders ?? this.groupConfigFor("*")?.senders ?? "open";
+  }
+  /**
+   * Whether a group-shaped conversation acts on behalf of one person, such as
+   * a document comment thread or a task. Its sender follows `privatePolicy`
+   * like a direct message, and `groups` does not apply; its
+   * group shape still decides routing, memory, and presentation.
+   */
+  isPersonalConversation(_target) {
+    return false;
+  }
+  groupAllowedUsersFor(chatId) {
+    return this.groupConfigFor(chatId)?.allowedUsers ?? this.groupConfigFor("*")?.allowedUsers ?? [];
+  }
+  groupConfigFor(key) {
+    const groups = this.config.groups;
+    return Object.hasOwn(groups, key) ? groups[key] : void 0;
+  }
   preflightInbound(envelope, options = {}) {
+    if (!this.applyMessageRoute(envelope))
+      return false;
     const groupResult = this.groupGate.check(envelope, {
       createPairingRequest: !options.deferPairingRequests
     });
@@ -7913,15 +8026,12 @@ ${promptText}`;
       this.logPreflightRejected(`dm_${dmResult.reason ?? "denied"}`);
       return false;
     }
-    if (envelope.isGroup && this.config.groupPolicy === "pairing") {
-      this.markPreflighted(envelope);
-      return true;
-    }
-    if (options.deferPairingRequests === true && this.config.senderPolicy === "pairing" && !this.gate.isAllowed(envelope.senderId)) {
+    const senderGate = this.senderGateFor(envelope);
+    if (options.deferPairingRequests === true && senderGate === this.gate && this.privatePolicy === "pairing" && !senderGate.isAllowed(envelope.senderId)) {
       this.markPreflighted(envelope);
       return true;
     }
-    const result = this.gate.check(envelope.senderId, envelope.senderName);
+    const result = senderGate.check(envelope.senderId, envelope.senderName);
     if (!result.allowed) {
       if (result.pairing !== void 0) {
         this.logPreflightRejected("sender_pairing_required");
@@ -7931,7 +8041,7 @@ ${promptText}`;
           return false;
         });
       }
-      this.logPreflightRejected("sender_denied");
+      this.logPreflightRejected(senderGate === this.gate ? "sender_denied" : "group_sender_denied");
       return false;
     }
     this.markPreflighted(envelope);
@@ -8103,6 +8213,21 @@ ${text}`;
   markPreflighted(envelope) {
     this.preflightedEnvelopes.add(envelope);
   }
+  applyMessageRoute(envelope) {
+    if (this.routedEnvelopes.has(envelope))
+      return true;
+    if (this.messageRoutes.size === 0 || envelope.bypassMessageRoutes || envelope.syntheticText) {
+      this.routedEnvelopes.add(envelope);
+      return true;
+    }
+    const matched = matchMessageRoute(envelope.text, this.messageRoutes, this.config.defaultMessageRoute);
+    if (!matched)
+      return false;
+    envelope.text = matched.text;
+    envelope.messageRoute = matched.prefix;
+    this.routedEnvelopes.add(envelope);
+    return true;
+  }
   /** Wait until the currently active bridge recovery, if any, has completed. */
   async waitForBridgeRecovery() {
     let completedRecovery;
@@ -8238,7 +8363,7 @@ ${text}`;
         return;
       }
     } else {
-      sessionId = await this.router.resolve(this.name, envelope.senderId, envelope.chatId, envelope.threadId, this.config.cwd, envelope.isGroup);
+      sessionId = await this.router.resolve(this.name, envelope.senderId, envelope.chatId, envelope.threadId, this.config.cwd, envelope.isGroup, { routeKey: envelope.messageRoute });
     }
     const sourceLabel = this.namedSessions ? this.sourceLabelForTurn(sessionId, envelope) : void 0;
     if (this.namedSessions && !sourceLabel) {
@@ -8320,8 +8445,8 @@ ${promptText}`;
     if (envelope.metadata) {
       promptText = promptText + "\n\n" + sanitizePromptText(envelope.metadata);
     }
-    const groupCfg = envelope.isGroup ? this.config.groups[envelope.chatId] || this.config.groups["*"] : void 0;
-    const mode = groupCfg?.dispatchMode || this.config.dispatchMode || "steer";
+    const groupMode = envelope.isGroup ? this.groupConfigFor(envelope.chatId)?.dispatchMode ?? this.groupConfigFor("*")?.dispatchMode : void 0;
+    const mode = groupMode ?? this.config.dispatchMode ?? "steer";
     const active = this.activePrompts.get(sessionId);
     let steerWatchdog;
     if (active) {
@@ -8405,6 +8530,9 @@ ${promptText}`;
         if (this.config.instructions) {
           sessionContext.push(this.config.instructions);
         }
+        const routeInstructions = envelope.messageRoute === void 0 ? void 0 : this.messageRoutes.get(envelope.messageRoute);
+        if (routeInstructions)
+          sessionContext.push(routeInstructions);
         if (this.shouldPrependChannelBoundaryPrompt()) {
           sessionContext.push(this.channelBoundaryPrompt());
         }
@@ -8441,7 +8569,7 @@ ${promptText}`;
         this.forgetPendingGroupHistory(envelope);
       }
       const groupHistoryEntries = recognizedSlashCommand ? [] : this.drainPendingGroupHistory(envelope);
-      let promptToSend = this.prependGroupHistoryContext(promptText, groupHistoryEntries);
+      let promptToSend = this.prependGroupHistoryContext(envelope, promptText, groupHistoryEntries);
       const hiddenContext = [
         ...acceptedRecallContext ? [acceptedRecallContext] : [],
         ...sessionContext
@@ -9883,7 +10011,7 @@ var ChannelLoopStore = class {
   }
 };
 function sameTarget(a, b) {
-  return a.channelName === b.channelName && a.senderId === b.senderId && a.chatId === b.chatId && a.threadId === b.threadId;
+  return a.channelName === b.channelName && a.senderId === b.senderId && a.chatId === b.chatId && a.threadId === b.threadId && a.messageRoute === b.messageRoute;
 }
 __name(sameTarget, "sameTarget");
 function normalizeTarget(target) {
@@ -9897,7 +10025,7 @@ function isSessionTarget(value) {
   if (typeof value !== "object" || value === null)
     return false;
   const target = value;
-  return typeof target["channelName"] === "string" && typeof target["senderId"] === "string" && typeof target["chatId"] === "string" && (target["threadId"] === void 0 || typeof target["threadId"] === "string") && (target["isGroup"] === void 0 || typeof target["isGroup"] === "boolean");
+  return typeof target["channelName"] === "string" && typeof target["senderId"] === "string" && typeof target["chatId"] === "string" && (target["messageRoute"] === void 0 || typeof target["messageRoute"] === "string") && (target["threadId"] === void 0 || typeof target["threadId"] === "string") && (target["isGroup"] === void 0 || typeof target["isGroup"] === "boolean");
 }
 __name(isSessionTarget, "isSessionTarget");
 function isChannelLoop(value) {
@@ -10543,6 +10671,8 @@ export {
   getWorkspaceScopeDirName,
   ChannelProactiveDeliveryError,
   isChannelProactiveDeliveryError,
+  lowercaseGroupAllowedUsers,
+  resolvePrivatePolicy,
   PairingStore,
   truncateCodePoints,
   truncateUtf16Units,

package/chunks/{chunk-3TQVPDCN.js → chunk-DU53RB7A.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-A4MRRFBI.js";
 import {
   createStderrForwarder
-} from "./chunk-MICQVBPI.js";
+} from "./chunk-WCLHOKAZ.js";
 import {
   ClientSideConnection,
   PROTOCOL_VERSION,
@@ -15,7 +15,7 @@ import {
 import {
   AgentEventEmitter,
   renderSubagentSystemPrompt
-} from "./chunk-RL2HSTEB.js";
+} from "./chunk-SYZPPX3O.js";
 import {
   sanitizeChildEnv
 } from "./chunk-5ZPFMX67.js";