@sinm/kai 1.9.0 → 1.9.2

package/dist-cli/kai-cli.js

@@ -34,7 +34,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/shared/ipc-events.ts
-var IPC_SEND_USER_MESSAGE, IPC_STOP_RUN, IPC_CREATE_NEW_SESSION, IPC_COMPACT_CONVERSATION, IPC_CANCEL_QUEUED_MESSAGES, IPC_REQUEST_CONVERSATION_SNAPSHOT, IPC_CONVERSATION_EVENT, IPC_GET_SETTINGS, IPC_SAVE_SETTINGS, IPC_FETCH_MODELS, IPC_GET_MCP_SERVERS, IPC_SAVE_MCP_SERVERS, IPC_TEST_MCP_SERVER, IPC_GET_SKILLS, IPC_GET_SKILL, IPC_TOGGLE_SKILL, IPC_CREATE_AGENT, IPC_GET_AGENT, IPC_GET_AGENT_CONFIG, IPC_LIST_AGENTS, IPC_UPDATE_AGENT, IPC_DELETE_AGENT, IPC_OPTIMIZE_AGENT_DESCRIPTION, IPC_GET_AGENT_CHANNELS, IPC_UPDATE_AGENT_CHANNELS, IPC_SWITCH_CHANNEL, IPC_CREATE_CONVERSATION, IPC_GET_CONVERSATION, IPC_LIST_CONVERSATIONS, IPC_GET_CONVERSATION_AGENTS, IPC_UPDATE_CONVERSATION, IPC_DELETE_CONVERSATION, IPC_CREATE_GROUP, IPC_GET_GROUP, IPC_UPDATE_GROUP, IPC_DELETE_GROUP, IPC_GET_GROUP_MEMBERS, IPC_GET_TEAM_MEMORY, IPC_SAVE_GROUP_FILE, IPC_GET_GROUP_SETTINGS, IPC_GET_GROUP_MEMORY, IPC_LIST_GROUP_THREADS, IPC_GET_GROUP_THREAD, IPC_CREATE_GROUP_THREAD, IPC_UPDATE_GROUP_THREAD, IPC_DELETE_GROUP_THREAD, IPC_ARCHIVE_GROUP_THREAD, IPC_GET_MESSAGES, IPC_GET_MESSAGE, IPC_CREATE_LLM_CHANNEL, IPC_GET_LLM_CHANNEL, IPC_LIST_LLM_CHANNELS, IPC_UPDATE_LLM_CHANNEL, IPC_DELETE_LLM_CHANNEL, IPC_SET_DEFAULT_LLM_CHANNEL, IPC_GET_WORKSPACE_FILE, IPC_UPDATE_WORKSPACE_FILE, IPC_LIST_WORKSPACE_FILES, IPC_OPEN_WORKSPACE_DIR, IPC_OPEN_CHAT_DATA_DIR, IPC_GET_SEARCH_ENGINES, IPC_ADD_CUSTOM_ENGINE, IPC_UPDATE_CUSTOM_ENGINE, IPC_DELETE_CUSTOM_ENGINE, IPC_SET_DEFAULT_ENGINE, IPC_CREATE_SCHEDULED_TASK, IPC_GET_SCHEDULED_TASK, IPC_LIST_SCHEDULED_TASKS, IPC_UPDATE_SCHEDULED_TASK, IPC_DELETE_SCHEDULED_TASK, IPC_TOGGLE_SCHEDULED_TASK, IPC_LIST_TASK_EXECUTIONS, IPC_TASK_EXECUTION_EVENT, IPC_TRIGGER_MEMORY_UPDATE, IPC_GET_NIGHTLY_MEMORY_CONFIG, IPC_UPDATE_NIGHTLY_MEMORY_CONFIG, IPC_RUN_NIGHTLY_MEMORY_NOW, IPC_LIST_NIGHTLY_MEMORY_EXECUTIONS, IPC_OPEN_EXTERNAL_URL, IPC_OPEN_LOCAL_PATH, IPC_READ_FILE_CONTENT, IPC_SHOW_LOCAL_ITEM_IN_FOLDER, IPC_UPLOAD_ATTACHMENT, IPC_OPEN_ATTACHMENT, IPC_MEMORY_UPDATE_PROGRESS, IPC_HEALTH_GET_ALL, IPC_HEALTH_GET, IPC_HEALTH_UPDATE, IPC_REMOTE_ACCESS_START, IPC_REMOTE_ACCESS_STOP, IPC_REMOTE_ACCESS_ROTATE, IPC_REMOTE_ACCESS_STATUS, IPC_GET_APP_INFO, IPC_GET_RELEASE_NOTES, IPC_UPDATE_CHECK, IPC_UPDATE_DOWNLOAD, IPC_UPDATE_INSTALL, IPC_UPDATE_STATUS, IPC_UPDATE_STATUS_EVENT, IPC_UPDATE_AVAILABLE_EVENT, IPC_UPDATE_ERROR_EVENT, IPC_GET_PINNED, IPC_TOGGLE_PIN, IPC_CHANNEL_LIST, IPC_CHANNEL_BIND, IPC_CHANNEL_UPDATE_TARGET, IPC_CHANNEL_UNBIND, IPC_CHANNEL_TEST, IPC_CHANNEL_RECONNECT, IPC_CHANNEL_STATUS, IPC_CHANNEL_QRCODE, IPC_CHANNEL_QRCODE_POLL, IPC_CHANNEL_WECHAT_PERSONAL_QRCODE, IPC_CHANNEL_WECHAT_PERSONAL_QRCODE_POLL, IPC_TELEMETRY_TRACK, IPC_TELEMETRY_FEEDBACK, IPC_TELEMETRY_SET_ENABLED, IPC_TELEMETRY_IS_ENABLED;
+var IPC_SEND_USER_MESSAGE, IPC_STOP_RUN, IPC_CREATE_NEW_SESSION, IPC_COMPACT_CONVERSATION, IPC_CANCEL_QUEUED_MESSAGES, IPC_REQUEST_CONVERSATION_SNAPSHOT, IPC_CONVERSATION_EVENT, IPC_GET_SETTINGS, IPC_SAVE_SETTINGS, IPC_FETCH_MODELS, IPC_GET_MCP_SERVERS, IPC_SAVE_MCP_SERVERS, IPC_TEST_MCP_SERVER, IPC_GET_SKILLS, IPC_GET_SKILL, IPC_TOGGLE_SKILL, IPC_CREATE_AGENT, IPC_GET_AGENT, IPC_GET_AGENT_CONFIG, IPC_LIST_AGENTS, IPC_UPDATE_AGENT, IPC_DELETE_AGENT, IPC_SET_AGENT_AVATAR, IPC_REMOVE_AGENT_AVATAR, IPC_OPTIMIZE_AGENT_DESCRIPTION, IPC_GET_AGENT_CHANNELS, IPC_UPDATE_AGENT_CHANNELS, IPC_SWITCH_CHANNEL, IPC_CREATE_CONVERSATION, IPC_GET_CONVERSATION, IPC_LIST_CONVERSATIONS, IPC_GET_CONVERSATION_AGENTS, IPC_UPDATE_CONVERSATION, IPC_DELETE_CONVERSATION, IPC_CREATE_GROUP, IPC_GET_GROUP, IPC_UPDATE_GROUP, IPC_DELETE_GROUP, IPC_SET_GROUP_AVATAR, IPC_REMOVE_GROUP_AVATAR, IPC_GET_GROUP_MEMBERS, IPC_GET_TEAM_MEMORY, IPC_SAVE_GROUP_FILE, IPC_GET_GROUP_SETTINGS, IPC_GET_GROUP_MEMORY, IPC_LIST_GROUP_THREADS, IPC_GET_GROUP_THREAD, IPC_CREATE_GROUP_THREAD, IPC_UPDATE_GROUP_THREAD, IPC_DELETE_GROUP_THREAD, IPC_ARCHIVE_GROUP_THREAD, IPC_GET_MESSAGES, IPC_GET_MESSAGE, IPC_CREATE_LLM_CHANNEL, IPC_GET_LLM_CHANNEL, IPC_LIST_LLM_CHANNELS, IPC_UPDATE_LLM_CHANNEL, IPC_DELETE_LLM_CHANNEL, IPC_SET_DEFAULT_LLM_CHANNEL, IPC_GET_WORKSPACE_FILE, IPC_UPDATE_WORKSPACE_FILE, IPC_LIST_WORKSPACE_FILES, IPC_OPEN_WORKSPACE_DIR, IPC_OPEN_CHAT_DATA_DIR, IPC_GET_SEARCH_ENGINES, IPC_ADD_CUSTOM_ENGINE, IPC_UPDATE_CUSTOM_ENGINE, IPC_DELETE_CUSTOM_ENGINE, IPC_SET_DEFAULT_ENGINE, IPC_CREATE_SCHEDULED_TASK, IPC_GET_SCHEDULED_TASK, IPC_LIST_SCHEDULED_TASKS, IPC_UPDATE_SCHEDULED_TASK, IPC_DELETE_SCHEDULED_TASK, IPC_TOGGLE_SCHEDULED_TASK, IPC_LIST_TASK_EXECUTIONS, IPC_TASK_EXECUTION_EVENT, IPC_TRIGGER_MEMORY_UPDATE, IPC_GET_NIGHTLY_MEMORY_CONFIG, IPC_UPDATE_NIGHTLY_MEMORY_CONFIG, IPC_RUN_NIGHTLY_MEMORY_NOW, IPC_LIST_NIGHTLY_MEMORY_EXECUTIONS, IPC_OPEN_EXTERNAL_URL, IPC_OPEN_LOCAL_PATH, IPC_READ_FILE_CONTENT, IPC_SHOW_LOCAL_ITEM_IN_FOLDER, IPC_COPY_IMAGE_TO_CLIPBOARD, IPC_UPLOAD_ATTACHMENT, IPC_OPEN_ATTACHMENT, IPC_MEMORY_UPDATE_PROGRESS, IPC_HEALTH_GET_ALL, IPC_HEALTH_GET, IPC_HEALTH_UPDATE, IPC_REMOTE_ACCESS_START, IPC_REMOTE_ACCESS_STOP, IPC_REMOTE_ACCESS_ROTATE, IPC_REMOTE_ACCESS_STATUS, IPC_GET_APP_INFO, IPC_GET_RELEASE_NOTES, IPC_UPDATE_CHECK, IPC_UPDATE_DOWNLOAD, IPC_UPDATE_INSTALL, IPC_UPDATE_STATUS, IPC_UPDATE_STATUS_EVENT, IPC_UPDATE_AVAILABLE_EVENT, IPC_UPDATE_ERROR_EVENT, IPC_GET_PINNED, IPC_TOGGLE_PIN, IPC_CHANNEL_LIST, IPC_CHANNEL_BIND, IPC_CHANNEL_UPDATE_TARGET, IPC_CHANNEL_UNBIND, IPC_CHANNEL_TEST, IPC_CHANNEL_RECONNECT, IPC_CHANNEL_STATUS, IPC_CHANNEL_QRCODE, IPC_CHANNEL_QRCODE_POLL, IPC_CHANNEL_WECHAT_PERSONAL_QRCODE, IPC_CHANNEL_WECHAT_PERSONAL_QRCODE_POLL, IPC_TELEMETRY_TRACK, IPC_TELEMETRY_FEEDBACK, IPC_TELEMETRY_SET_ENABLED, IPC_TELEMETRY_IS_ENABLED;
 var init_ipc_events = __esm({
   "src/shared/ipc-events.ts"() {
     "use strict";
@@ -60,6 +60,8 @@ var init_ipc_events = __esm({
     IPC_LIST_AGENTS = "LIST_AGENTS";
     IPC_UPDATE_AGENT = "UPDATE_AGENT";
     IPC_DELETE_AGENT = "DELETE_AGENT";
+    IPC_SET_AGENT_AVATAR = "SET_AGENT_AVATAR";
+    IPC_REMOVE_AGENT_AVATAR = "REMOVE_AGENT_AVATAR";
     IPC_OPTIMIZE_AGENT_DESCRIPTION = "OPTIMIZE_AGENT_DESCRIPTION";
     IPC_GET_AGENT_CHANNELS = "GET_AGENT_CHANNELS";
     IPC_UPDATE_AGENT_CHANNELS = "UPDATE_AGENT_CHANNELS";
@@ -74,6 +76,8 @@ var init_ipc_events = __esm({
     IPC_GET_GROUP = "GET_GROUP";
     IPC_UPDATE_GROUP = "UPDATE_GROUP";
     IPC_DELETE_GROUP = "DELETE_GROUP";
+    IPC_SET_GROUP_AVATAR = "SET_GROUP_AVATAR";
+    IPC_REMOVE_GROUP_AVATAR = "REMOVE_GROUP_AVATAR";
     IPC_GET_GROUP_MEMBERS = "GET_GROUP_MEMBERS";
     IPC_GET_TEAM_MEMORY = "GET_TEAM_MEMORY";
     IPC_SAVE_GROUP_FILE = "SAVE_GROUP_FILE";
@@ -120,6 +124,7 @@ var init_ipc_events = __esm({
     IPC_OPEN_LOCAL_PATH = "OPEN_LOCAL_PATH";
     IPC_READ_FILE_CONTENT = "READ_FILE_CONTENT";
     IPC_SHOW_LOCAL_ITEM_IN_FOLDER = "SHOW_LOCAL_ITEM_IN_FOLDER";
+    IPC_COPY_IMAGE_TO_CLIPBOARD = "COPY_IMAGE_TO_CLIPBOARD";
     IPC_UPLOAD_ATTACHMENT = "UPLOAD_ATTACHMENT";
     IPC_OPEN_ATTACHMENT = "OPEN_ATTACHMENT";
     IPC_MEMORY_UPDATE_PROGRESS = "MEMORY_UPDATE_PROGRESS";
@@ -219,7 +224,7 @@ var require_lodash = __commonJS({
       var HOT_COUNT = 800, HOT_SPAN = 16;
       var LAZY_FILTER_FLAG = 1, LAZY_MAP_FLAG = 2, LAZY_WHILE_FLAG = 3;
       var INFINITY = 1 / 0, MAX_SAFE_INTEGER = 9007199254740991, MAX_INTEGER = 17976931348623157e292, NAN = 0 / 0;
-      var MAX_ARRAY_LENGTH = 4294967295, MAX_ARRAY_INDEX = MAX_ARRAY_LENGTH - 1, HALF_MAX_ARRAY_LENGTH = MAX_ARRAY_LENGTH >>> 1;
+      var MAX_ARRAY_LENGTH2 = 4294967295, MAX_ARRAY_INDEX = MAX_ARRAY_LENGTH2 - 1, HALF_MAX_ARRAY_LENGTH = MAX_ARRAY_LENGTH2 >>> 1;
       var wrapFlags = [
         ["ary", WRAP_ARY_FLAG],
         ["bind", WRAP_BIND_FLAG],
@@ -1015,7 +1020,7 @@ var require_lodash = __commonJS({
           this.__dir__ = 1;
           this.__filtered__ = false;
           this.__iteratees__ = [];
-          this.__takeCount__ = MAX_ARRAY_LENGTH;
+          this.__takeCount__ = MAX_ARRAY_LENGTH2;
           this.__views__ = [];
         }
         function lazyClone() {
@@ -3518,7 +3523,7 @@ var require_lodash = __commonJS({
           }
           return mapped.length && mapped[0] === arrays[0] ? baseIntersection(mapped, undefined2, comparator) : [];
         });
-        function join20(array3, separator) {
+        function join21(array3, separator) {
           return array3 == null ? "" : nativeJoin.call(array3, separator);
         }
         function last2(array3) {
@@ -4116,7 +4121,7 @@ var require_lodash = __commonJS({
         var defer = baseRest(function(func, args2) {
           return baseDelay(func, 1, args2);
         });
-        var delay2 = baseRest(function(func, wait, args2) {
+        var delay4 = baseRest(function(func, wait, args2) {
           return baseDelay(func, toNumber(wait) || 0, args2);
         });
         function flip(func) {
@@ -4426,7 +4431,7 @@ var require_lodash = __commonJS({
           return result2 === result2 ? remainder ? result2 - remainder : result2 : 0;
         }
         function toLength(value) {
-          return value ? baseClamp(toInteger(value), 0, MAX_ARRAY_LENGTH) : 0;
+          return value ? baseClamp(toInteger(value), 0, MAX_ARRAY_LENGTH2) : 0;
         }
         function toNumber(value) {
           if (typeof value == "number") {
@@ -4831,7 +4836,7 @@ var require_lodash = __commonJS({
           if (limit && typeof limit != "number" && isIterateeCall(string4, separator, limit)) {
             separator = limit = undefined2;
           }
-          limit = limit === undefined2 ? MAX_ARRAY_LENGTH : limit >>> 0;
+          limit = limit === undefined2 ? MAX_ARRAY_LENGTH2 : limit >>> 0;
           if (!limit) {
             return [];
           }
@@ -4946,7 +4951,7 @@ var require_lodash = __commonJS({
           var strSymbols = stringToArray(string4), start = charsStartIndex(strSymbols, stringToArray(chars));
           return castSlice(strSymbols, start).join("");
         }
-        function truncate(string4, options2) {
+        function truncate2(string4, options2) {
           var length = DEFAULT_TRUNC_LENGTH, omission = DEFAULT_TRUNC_OMISSION;
           if (isObject2(options2)) {
             var separator = "separator" in options2 ? options2.separator : separator;
@@ -5150,9 +5155,9 @@ var require_lodash = __commonJS({
           if (n < 1 || n > MAX_SAFE_INTEGER) {
             return [];
           }
-          var index2 = MAX_ARRAY_LENGTH, length = nativeMin(n, MAX_ARRAY_LENGTH);
+          var index2 = MAX_ARRAY_LENGTH2, length = nativeMin(n, MAX_ARRAY_LENGTH2);
           iteratee2 = getIteratee(iteratee2);
-          n -= MAX_ARRAY_LENGTH;
+          n -= MAX_ARRAY_LENGTH2;
           var result2 = baseTimes(length, iteratee2);
           while (++index2 < n) {
             iteratee2(index2);
@@ -5235,7 +5240,7 @@ var require_lodash = __commonJS({
         lodash.defaults = defaults2;
         lodash.defaultsDeep = defaultsDeep;
         lodash.defer = defer;
-        lodash.delay = delay2;
+        lodash.delay = delay4;
         lodash.difference = difference;
         lodash.differenceBy = differenceBy;
         lodash.differenceWith = differenceWith;
@@ -5442,7 +5447,7 @@ var require_lodash = __commonJS({
         lodash.isUndefined = isUndefined;
         lodash.isWeakMap = isWeakMap;
         lodash.isWeakSet = isWeakSet;
-        lodash.join = join20;
+        lodash.join = join21;
         lodash.kebabCase = kebabCase;
         lodash.last = last2;
         lodash.lastIndexOf = lastIndexOf;
@@ -5506,7 +5511,7 @@ var require_lodash = __commonJS({
         lodash.trim = trim;
         lodash.trimEnd = trimEnd;
         lodash.trimStart = trimStart;
-        lodash.truncate = truncate;
+        lodash.truncate = truncate2;
         lodash.unescape = unescape2;
         lodash.uniqueId = uniqueId;
         lodash.upperCase = upperCase;
@@ -5535,7 +5540,7 @@ var require_lodash = __commonJS({
               result2.__takeCount__ = nativeMin(n, result2.__takeCount__);
             } else {
               result2.__views__.push({
-                "size": nativeMin(n, MAX_ARRAY_LENGTH),
+                "size": nativeMin(n, MAX_ARRAY_LENGTH2),
                 "type": methodName + (result2.__dir__ < 0 ? "Right" : "")
               });
             }
@@ -5610,7 +5615,7 @@ var require_lodash = __commonJS({
           return this.reverse().takeWhile(predicate).reverse();
         };
         LazyWrapper.prototype.toArray = function() {
-          return this.take(MAX_ARRAY_LENGTH);
+          return this.take(MAX_ARRAY_LENGTH2);
         };
         baseForOwn(LazyWrapper.prototype, function(func, methodName) {
           var checkIteratee = /^(?:filter|find|map|reject)|While$/.test(methodName), isTaker = /^(?:head|last)$/.test(methodName), lodashFunc = lodash[isTaker ? "take" + (methodName == "last" ? "Right" : "") : methodName], retUnwrapped = isTaker || /^find/.test(methodName);
@@ -31570,11 +31575,11 @@ var require_core = __commonJS({
     Ajv2.ValidationError = validation_error_1.default;
     Ajv2.MissingRefError = ref_error_1.default;
     exports2.default = Ajv2;
-    function checkOptions(checkOpts, options2, msg, log21 = "error") {
+    function checkOptions(checkOpts, options2, msg, log23 = "error") {
       for (const key in checkOpts) {
         const opt = key;
         if (opt in options2)
-          this.logger[log21](`${msg}: option ${key}. ${checkOpts[opt]}`);
+          this.logger[log23](`${msg}: option ${key}. ${checkOpts[opt]}`);
       }
     }
     function getSchEnv(keyRef) {
@@ -34881,15 +34886,15 @@ var require_windows = __commonJS({
       }
       return false;
     }
-    function checkStat(stat4, path10, options2) {
-      if (!stat4.isSymbolicLink() && !stat4.isFile()) {
+    function checkStat(stat5, path10, options2) {
+      if (!stat5.isSymbolicLink() && !stat5.isFile()) {
         return false;
       }
       return checkPathExt(path10, options2);
     }
     function isexe(path10, options2, cb) {
-      fs6.stat(path10, function(er, stat4) {
-        cb(er, er ? false : checkStat(stat4, path10, options2));
+      fs6.stat(path10, function(er, stat5) {
+        cb(er, er ? false : checkStat(stat5, path10, options2));
       });
     }
     function sync(path10, options2) {
@@ -34905,20 +34910,20 @@ var require_mode = __commonJS({
     isexe.sync = sync;
     var fs6 = require("fs");
     function isexe(path10, options2, cb) {
-      fs6.stat(path10, function(er, stat4) {
-        cb(er, er ? false : checkStat(stat4, options2));
+      fs6.stat(path10, function(er, stat5) {
+        cb(er, er ? false : checkStat(stat5, options2));
       });
     }
     function sync(path10, options2) {
       return checkStat(fs6.statSync(path10), options2);
     }
-    function checkStat(stat4, options2) {
-      return stat4.isFile() && checkMode(stat4, options2);
+    function checkStat(stat5, options2) {
+      return stat5.isFile() && checkMode(stat5, options2);
     }
-    function checkMode(stat4, options2) {
-      var mod = stat4.mode;
-      var uid = stat4.uid;
-      var gid = stat4.gid;
+    function checkMode(stat5, options2) {
+      var mod = stat5.mode;
+      var uid = stat5.uid;
+      var gid = stat5.gid;
       var myUid = options2.uid !== void 0 ? options2.uid : process.getuid && process.getuid();
       var myGid = options2.gid !== void 0 ? options2.gid : process.getgid && process.getgid();
       var u = parseInt("100", 8);
@@ -36735,13 +36740,13 @@ var init_streamableHttp = __esm({
           this.onerror?.(new Error(`Maximum reconnection attempts (${maxRetries}) exceeded.`));
           return;
         }
-        const delay2 = this._getNextReconnectionDelay(attemptCount);
+        const delay4 = this._getNextReconnectionDelay(attemptCount);
         this._reconnectionTimeout = setTimeout(() => {
           this._startOrAuthSse(options2).catch((error48) => {
             this.onerror?.(new Error(`Failed to reconnect SSE stream: ${error48 instanceof Error ? error48.message : String(error48)}`));
             this._scheduleReconnection(options2, attemptCount + 1);
           });
-        }, delay2);
+        }, delay4);
       }
       _handleSseStream(stream, options2, isReconnectable) {
         if (!stream) {
@@ -40066,43 +40071,337 @@ var init_client3 = __esm({
   }
 });
 
+// src/shared/logging/structured-logger.ts
+function createStructuredLogger(options2) {
+  return new DefaultStructuredLogger(
+    normalizeScope(options2.scope),
+    options2.context ?? {},
+    options2.sinks ?? [new ConsoleLogSink()],
+    options2.minLevel ?? resolveDefaultLevel()
+  );
+}
+function normalizeLogError(error48) {
+  if (error48 instanceof Error) {
+    const code = typeof error48.code === "string" ? error48.code : void 0;
+    return {
+      name: error48.name,
+      message: sanitizeErrorMessage(error48.message),
+      ...code ? { code } : {},
+      ...error48.stack ? { stack: sanitizeErrorStack(error48.stack) } : {},
+      fingerprint: fingerprintError(error48.name, code, error48.message)
+    };
+  }
+  if (typeof error48 === "object" && error48 !== null) {
+    const obj = error48;
+    const name21 = typeof obj.name === "string" ? obj.name : void 0;
+    const code = typeof obj.code === "string" ? obj.code : void 0;
+    const message2 = typeof obj.message === "string" ? obj.message : safeString(error48);
+    const stack = typeof obj.stack === "string" ? sanitizeErrorStack(obj.stack) : void 0;
+    return {
+      ...name21 ? { name: name21 } : {},
+      ...code ? { code } : {},
+      message: sanitizeErrorMessage(message2),
+      ...stack ? { stack } : {},
+      fingerprint: fingerprintError(name21, code, message2)
+    };
+  }
+  const message = safeString(error48);
+  return {
+    message: sanitizeErrorMessage(message),
+    fingerprint: fingerprintError(void 0, void 0, message)
+  };
+}
+function writeLogEventToSinks(event, sinks2) {
+  const safeEvent = sanitizeLogEvent(event);
+  for (const sink of sinks2) {
+    try {
+      sink.write(safeEvent);
+    } catch {
+    }
+  }
+}
+function sanitizeLogEvent(event) {
+  const sanitized = {
+    ...event,
+    scope: normalizeScope(event.scope),
+    event: normalizeEventName(event.event)
+  };
+  if (event.message) sanitized.message = truncate(event.message, MAX_STRING_LENGTH);
+  if (event.context) sanitized.context = sanitizeContext(event.context);
+  if (event.data) sanitized.data = sanitizeValue(event.data, 0);
+  if (event.error) sanitized.error = normalizeLogError(event.error);
+  return sanitized;
+}
+function compactConsolePayload(event) {
+  const payload = {};
+  if (event.context) payload.context = event.context;
+  if (event.message) payload.message = event.message;
+  if (event.data) payload.data = event.data;
+  if (event.error) payload.error = event.error;
+  return payload;
+}
+function shouldLog(level, minLevel) {
+  return levelRank(level) >= levelRank(minLevel);
+}
+function levelRank(level) {
+  switch (level) {
+    case "debug":
+      return 10;
+    case "info":
+      return 20;
+    case "warn":
+      return 30;
+    case "error":
+      return 40;
+    case "fatal":
+      return 50;
+  }
+}
+function resolveDefaultLevel() {
+  return process.env.NODE_ENV === "development" || process.env.KAI_DEBUG ? "debug" : "info";
+}
+function sanitizeContext(context2) {
+  const out = {};
+  for (const [key, value] of Object.entries(context2)) {
+    if (typeof value === "string" && value.trim()) out[key] = truncate(value, 200);
+  }
+  return out;
+}
+function sanitizeValue(value, depth) {
+  if (depth > MAX_DEPTH) return "[MaxDepth]";
+  if (value instanceof Error) return normalizeLogError(value);
+  if (typeof value === "string") return redactString(truncate(value, MAX_STRING_LENGTH));
+  if (typeof value === "number" || typeof value === "boolean" || value === null) return value;
+  if (typeof value === "undefined") return void 0;
+  if (typeof value === "bigint") return value.toString();
+  if (typeof value === "function") return `[Function ${value.name || "anonymous"}]`;
+  if (typeof value === "symbol") return String(value);
+  if (Array.isArray(value)) {
+    return value.slice(0, MAX_ARRAY_LENGTH).map((item) => sanitizeValue(item, depth + 1));
+  }
+  if (typeof value === "object") {
+    const result = {};
+    let count = 0;
+    for (const [key, child] of Object.entries(value)) {
+      if (count >= MAX_OBJECT_KEYS) {
+        result.__truncatedKeys = true;
+        break;
+      }
+      if (SENSITIVE_KEY_PATTERN.test(key)) {
+        result[key] = "[REDACTED]";
+      } else {
+        const sanitized = sanitizeValue(child, depth + 1);
+        if (sanitized !== void 0) result[key] = sanitized;
+      }
+      count++;
+    }
+    return result;
+  }
+  return redactString(truncate(String(value), MAX_STRING_LENGTH));
+}
+function safeString(value) {
+  try {
+    return typeof value === "string" ? value : JSON.stringify(sanitizeValue(value, 0));
+  } catch {
+    return String(value);
+  }
+}
+function sanitizeErrorMessage(message) {
+  return redactString(truncate(message, 500));
+}
+function sanitizeErrorStack(stack) {
+  return redactString(truncate(stack, 4e3));
+}
+function redactString(value) {
+  return value.replace(/(sk-[A-Za-z0-9_-]{12,})/g, "[REDACTED_API_KEY]").replace(/(Bearer\s+)[A-Za-z0-9._~+/=-]{12,}/gi, "$1[REDACTED]").replace(/(api[_-]?key\s*[:=]\s*)[^\s,;&]+/gi, "$1[REDACTED]").replace(/(token\s*[:=]\s*)[^\s,;&]+/gi, "$1[REDACTED]");
+}
+function truncate(value, max) {
+  return value.length > max ? `${value.slice(0, max)}\u2026` : value;
+}
+function normalizeScope(scope) {
+  return scope.trim().replace(/[^a-zA-Z0-9_.-]/g, ".").replace(/\.+/g, ".").slice(0, 120) || "app";
+}
+function normalizeEventName(event) {
+  return event.trim().replace(/[^a-zA-Z0-9_.:-]/g, ".").replace(/\.+/g, ".").slice(0, 160) || "log.message";
+}
+function fingerprintError(name21, code, message) {
+  const base = `${name21 ?? "Error"}:${code ?? "none"}:${message.slice(0, 160)}`;
+  let hash2 = 0;
+  for (let i = 0; i < base.length; i++) {
+    hash2 = (hash2 << 5) - hash2 + base.charCodeAt(i) | 0;
+  }
+  return Math.abs(hash2).toString(36);
+}
+var SENSITIVE_KEY_PATTERN, MAX_STRING_LENGTH, MAX_ARRAY_LENGTH, MAX_OBJECT_KEYS, MAX_DEPTH, DefaultStructuredLogger, ConsoleLogSink;
+var init_structured_logger = __esm({
+  "src/shared/logging/structured-logger.ts"() {
+    "use strict";
+    SENSITIVE_KEY_PATTERN = /(api[-_]?key|token|secret|password|authorization|cookie|set-cookie|access[-_]?token|refresh[-_]?token)/i;
+    MAX_STRING_LENGTH = 2e3;
+    MAX_ARRAY_LENGTH = 20;
+    MAX_OBJECT_KEYS = 50;
+    MAX_DEPTH = 4;
+    DefaultStructuredLogger = class _DefaultStructuredLogger {
+      constructor(scope, context2, sinks2, minLevel) {
+        this.scope = scope;
+        this.context = context2;
+        this.sinks = sinks2;
+        this.minLevel = minLevel;
+      }
+      scope;
+      context;
+      sinks;
+      minLevel;
+      child(context2) {
+        const { scope, ...childContext } = context2;
+        return new _DefaultStructuredLogger(
+          scope ? normalizeScope(scope) : this.scope,
+          { ...this.context, ...childContext },
+          this.sinks,
+          this.minLevel
+        );
+      }
+      debug(event, data2) {
+        this.write("debug", event, data2);
+      }
+      info(event, data2) {
+        this.write("info", event, data2);
+      }
+      warn(event, data2) {
+        this.write("warn", event, data2);
+      }
+      error(event, data2) {
+        this.write("error", event, data2);
+      }
+      fatal(event, data2) {
+        this.write("fatal", event, data2);
+      }
+      write(level, event, data2) {
+        if (!shouldLog(level, this.minLevel)) return;
+        const { error: error48, ...rest } = data2 ?? {};
+        const logEvent = {
+          ts: (/* @__PURE__ */ new Date()).toISOString(),
+          level,
+          event,
+          scope: this.scope,
+          ...Object.keys(this.context).length > 0 ? { context: this.context } : {},
+          ...Object.keys(rest).length > 0 ? { data: rest } : {},
+          ...error48 !== void 0 ? { error: normalizeLogError(error48) } : {}
+        };
+        writeLogEventToSinks(logEvent, this.sinks);
+      }
+    };
+    ConsoleLogSink = class {
+      write(event) {
+        const prefix = `[${event.scope}] ${event.event}`;
+        const payload = compactConsolePayload(event);
+        if (event.level === "error" || event.level === "fatal") {
+          console.error(prefix, payload);
+        } else if (event.level === "warn") {
+          console.warn(prefix, payload);
+        } else if (event.level === "info") {
+          console.info(prefix, payload);
+        } else {
+          console.log(prefix, payload);
+        }
+      }
+    };
+  }
+});
+
+// src/shared/logging/index.ts
+var init_logging = __esm({
+  "src/shared/logging/index.ts"() {
+    "use strict";
+    init_structured_logger();
+  }
+});
+
 // src/shared/utils/logger.ts
 function createLogger(prefix) {
+  const scope = legacyScope(prefix);
+  const logger40 = createStructuredLogger({
+    scope,
+    sinks,
+    minLevel: currentLevel <= LOG_LEVELS.noise ? "debug" : "info"
+  });
   return {
     noise: (...args2) => {
       if (currentLevel <= LOG_LEVELS.noise) {
-        console.log(`[${prefix}]`, ...args2);
+        writeLegacy(logger40, "debug", "legacy.noise", args2);
       }
     },
     debug: (...args2) => {
       if (currentLevel <= LOG_LEVELS.debug) {
-        console.log(`[${prefix}]`, ...args2);
+        writeLegacy(logger40, "debug", "legacy.debug", args2);
       }
     },
     info: (...args2) => {
-      console.info(`[${prefix}]`, ...args2);
+      writeLegacy(logger40, "info", "legacy.info", args2);
     },
     warn: (...args2) => {
-      console.warn(`[${prefix}]`, ...args2);
+      writeLegacy(logger40, "warn", "legacy.warn", args2);
     },
     error: (...args2) => {
-      console.error(`[${prefix}]`, ...args2);
+      writeLegacy(logger40, "error", "legacy.error", args2);
     }
   };
 }
-var LOG_LEVELS, currentLevel, logger;
+function writeLegacy(logger40, level, event, args2) {
+  const { message, data: data2, error: error48 } = normalizeLegacyArgs(args2);
+  const payload = {
+    ...message ? { message } : {},
+    ...data2.length > 0 ? { args: data2 } : {},
+    ...error48 ? { error: error48 } : {}
+  };
+  if (level === "debug") logger40.debug(event, payload);
+  else if (level === "info") logger40.info(event, payload);
+  else if (level === "warn") logger40.warn(event, payload);
+  else if (level === "error") logger40.error(event, payload);
+  else logger40.fatal(event, payload);
+}
+function normalizeLegacyArgs(args2) {
+  const [first2, ...rest] = args2;
+  const message = typeof first2 === "string" ? first2 : void 0;
+  const values = message ? rest : args2;
+  const errorIndex = values.findIndex((value) => value instanceof Error);
+  const error48 = errorIndex >= 0 ? values[errorIndex] : void 0;
+  const data2 = errorIndex >= 0 ? values.filter((_4, index2) => index2 !== errorIndex) : values;
+  return { message, data: data2, error: error48 };
+}
+function createDefaultSinks() {
+  const defaults2 = [new ConsoleLogSink()];
+  return defaults2;
+}
+function resolveLegacyLogLevel() {
+  const env2 = typeof process !== "undefined" ? process.env : void 0;
+  return env2?.NODE_ENV === "development" || env2?.KAI_DEBUG ? LOG_LEVELS.noise : LOG_LEVELS.info;
+}
+function legacyScope(prefix) {
+  return prefix.trim().replace(/([a-z0-9])([A-Z])/g, "$1.$2").replace(/[^a-zA-Z0-9_.-]/g, ".").replace(/\.+/g, ".").toLowerCase().slice(0, 120) || "legacy";
+}
+var LOG_LEVELS, currentLevel, globalLogState, sinks, structuredLogger, logger;
 var init_logger = __esm({
   "src/shared/utils/logger.ts"() {
     "use strict";
+    init_logging();
     LOG_LEVELS = {
       noise: 0,
       debug: 1,
-      info: 2
-    };
-    currentLevel = LOG_LEVELS.info;
-    if (process.env.NODE_ENV === "development" || process.env.KAI_DEBUG) {
-      currentLevel = LOG_LEVELS.noise;
-    }
+      info: 2,
+      warn: 3,
+      error: 4,
+      fatal: 5
+    };
+    currentLevel = resolveLegacyLogLevel();
+    globalLogState = globalThis;
+    sinks = globalLogState.__KAI_LOG_SINKS__ ?? createDefaultSinks();
+    globalLogState.__KAI_LOG_SINKS__ = sinks;
+    structuredLogger = createStructuredLogger({
+      scope: "global",
+      sinks,
+      minLevel: currentLevel <= LOG_LEVELS.noise ? "debug" : "info"
+    });
     logger = createLogger("global");
   }
 });
@@ -56280,7 +56579,7 @@ var require_node = __commonJS({
     var tty = require("tty");
     var util2 = require("util");
     exports2.init = init;
-    exports2.log = log21;
+    exports2.log = log23;
     exports2.formatArgs = formatArgs;
     exports2.save = save;
     exports2.load = load2;
@@ -56415,7 +56714,7 @@ var require_node = __commonJS({
       }
       return (/* @__PURE__ */ new Date()).toISOString() + " ";
     }
-    function log21(...args2) {
+    function log23(...args2) {
       return process.stderr.write(util2.formatWithOptions(exports2.inspectOpts, ...args2) + "\n");
     }
     function save(namespaces) {
@@ -72158,9 +72457,9 @@ var require_query_generator = __commonJS({
             }
             return `json_unquote(json_extract(${quotedColumn},${pathStr}))`;
           case "postgres":
-            const join20 = isJson ? "#>" : "#>>";
+            const join21 = isJson ? "#>" : "#>>";
             pathStr = this.escape(`{${paths.join(",")}}`);
-            return `(${quotedColumn}${join20}${pathStr})`;
+            return `(${quotedColumn}${join21}${pathStr})`;
           default:
             throw new Error(`Unsupported ${this.dialect} for JSON operations`);
         }
@@ -72848,7 +73147,7 @@ https://github.com/sequelize/sequelize/discussions/15694`);
           const isBelongsTo = topAssociation.associationType === "BelongsTo";
           const sourceField = isBelongsTo ? topAssociation.identifierField : topAssociation.sourceKeyField || topParent.model.primaryKeyField;
           const targetField = isBelongsTo ? topAssociation.sourceKeyField || topInclude.model.primaryKeyField : topAssociation.identifierField;
-          const join20 = [
+          const join21 = [
             `${this.quoteIdentifier(topInclude.as)}.${this.quoteIdentifier(targetField)}`,
             `${this.quoteTable(topParent.as || topParent.model.name)}.${this.quoteIdentifier(sourceField)}`
           ].join(" = ");
@@ -72859,7 +73158,7 @@ https://github.com/sequelize/sequelize/discussions/15694`);
             where: {
               [Op2.and]: [
                 topInclude.where,
-                { [Op2.join]: this.sequelize.literal(join20) }
+                { [Op2.join]: this.sequelize.literal(join21) }
               ]
             },
             limit: 1,
@@ -95700,12 +95999,12 @@ var require_form_data = __commonJS({
         if (value.end != void 0 && value.end != Infinity && value.start != void 0) {
           callback(null, value.end + 1 - (value.start ? value.start : 0));
         } else {
-          fs6.stat(value.path, function(err, stat4) {
+          fs6.stat(value.path, function(err, stat5) {
             if (err) {
               callback(err);
               return;
             }
-            var fileSize = stat4.size - (value.start ? value.start : 0);
+            var fileSize = stat5.size - (value.start ? value.start : 0);
             callback(null, fileSize);
           });
         }
@@ -104289,15 +104588,15 @@ var require_index_cjs = __commonJS({
             return;
           }
           this.authFailureAttempts++;
-          const delay2 = Math.min(this.reconnectBaseDelay * Math.pow(2, this.authFailureAttempts - 1), this.reconnectMaxDelay);
-          this.logger.info(`Auth failed, reconnecting in ${delay2}ms (auth attempt ${this.authFailureAttempts}/${this.maxAuthFailureAttempts})...`);
+          const delay4 = Math.min(this.reconnectBaseDelay * Math.pow(2, this.authFailureAttempts - 1), this.reconnectMaxDelay);
+          this.logger.info(`Auth failed, reconnecting in ${delay4}ms (auth attempt ${this.authFailureAttempts}/${this.maxAuthFailureAttempts})...`);
           this.onReconnecting?.(this.authFailureAttempts);
           this.reconnectTimer = setTimeout(() => {
             this.reconnectTimer = null;
             if (this.isManualClose)
               return;
             this.connect();
-          }, delay2);
+          }, delay4);
         } else {
           if (this.maxReconnectAttempts !== -1 && this.reconnectAttempts >= this.maxReconnectAttempts) {
             this.logger.error(`Max reconnect attempts reached (${this.maxReconnectAttempts}), giving up`);
@@ -104305,15 +104604,15 @@ var require_index_cjs = __commonJS({
             return;
           }
           this.reconnectAttempts++;
-          const delay2 = Math.min(this.reconnectBaseDelay * Math.pow(2, this.reconnectAttempts - 1), this.reconnectMaxDelay);
-          this.logger.info(`Connection lost, reconnecting in ${delay2}ms (attempt ${this.reconnectAttempts}/${this.maxReconnectAttempts})...`);
+          const delay4 = Math.min(this.reconnectBaseDelay * Math.pow(2, this.reconnectAttempts - 1), this.reconnectMaxDelay);
+          this.logger.info(`Connection lost, reconnecting in ${delay4}ms (attempt ${this.reconnectAttempts}/${this.maxReconnectAttempts})...`);
           this.onReconnecting?.(this.reconnectAttempts);
           this.reconnectTimer = setTimeout(() => {
             this.reconnectTimer = null;
             if (this.isManualClose)
               return;
             this.connect();
-          }, delay2);
+          }, delay4);
         }
       }
       /**
@@ -104900,9 +105199,9 @@ var require_index_cjs = __commonJS({
             } catch (err) {
               lastError = err;
               if (attempt < MAX_CHUNK_RETRIES) {
-                const delay2 = 500 * (attempt + 1);
-                this.logger.warn(`Chunk ${chunkIndex} upload failed (attempt ${attempt + 1}/${MAX_CHUNK_RETRIES + 1}), retrying in ${delay2}ms... error: ${err instanceof Error ? err.message : JSON.stringify(err)}`);
-                await new Promise((r) => setTimeout(r, delay2));
+                const delay4 = 500 * (attempt + 1);
+                this.logger.warn(`Chunk ${chunkIndex} upload failed (attempt ${attempt + 1}/${MAX_CHUNK_RETRIES + 1}), retrying in ${delay4}ms... error: ${err instanceof Error ? err.message : JSON.stringify(err)}`);
+                await new Promise((r) => setTimeout(r, delay4));
               }
             }
           }
@@ -106736,19 +107035,19 @@ var require_token_io = __commonJS({
       getUserDataDir: () => getUserDataDir
     });
     module2.exports = __toCommonJS2(token_io_exports);
-    var import_path30 = __toESM2(require("path"));
+    var import_path31 = __toESM2(require("path"));
     var import_fs22 = __toESM2(require("fs"));
     var import_os4 = __toESM2(require("os"));
     var import_token_error = require_token_error();
     function findRootDir() {
       try {
         let dir = process.cwd();
-        while (dir !== import_path30.default.dirname(dir)) {
-          const pkgPath = import_path30.default.join(dir, ".vercel");
+        while (dir !== import_path31.default.dirname(dir)) {
+          const pkgPath = import_path31.default.join(dir, ".vercel");
           if (import_fs22.default.existsSync(pkgPath)) {
             return dir;
           }
-          dir = import_path30.default.dirname(dir);
+          dir = import_path31.default.dirname(dir);
         }
       } catch (e) {
         throw new import_token_error.VercelOidcTokenError(
@@ -106763,9 +107062,9 @@ var require_token_io = __commonJS({
       }
       switch (import_os4.default.platform()) {
         case "darwin":
-          return import_path30.default.join(import_os4.default.homedir(), "Library/Application Support");
+          return import_path31.default.join(import_os4.default.homedir(), "Library/Application Support");
         case "linux":
-          return import_path30.default.join(import_os4.default.homedir(), ".local/share");
+          return import_path31.default.join(import_os4.default.homedir(), ".local/share");
         case "win32":
           if (process.env.LOCALAPPDATA) {
             return process.env.LOCALAPPDATA;
@@ -116300,12 +116599,12 @@ function simulateReadableStream({
   _internal
 }) {
   var _a212;
-  const delay2 = (_a212 = _internal == null ? void 0 : _internal.delay) != null ? _a212 : delay;
+  const delay22 = (_a212 = _internal == null ? void 0 : _internal.delay) != null ? _a212 : delay;
   let index2 = 0;
   return new ReadableStream({
     async pull(controller) {
       if (index2 < chunks.length) {
-        await delay2(index2 === 0 ? initialDelayInMs : chunkDelayInMs);
+        await delay22(index2 === 0 ? initialDelayInMs : chunkDelayInMs);
         controller.enqueue(chunks[index2++]);
       } else {
         controller.close();
@@ -116521,7 +116820,7 @@ function pruneMessages({
 function smoothStream({
   delayInMs = 10,
   chunking = "word",
-  _internal: { delay: delay2 = delay } = {}
+  _internal: { delay: delay22 = delay } = {}
 } = {}) {
   let detectChunk;
   if (chunking != null && typeof chunking === "object" && "segment" in chunking && typeof chunking.segment === "function") {
@@ -116602,7 +116901,7 @@ function smoothStream({
         while ((match = detectChunk(buffer)) != null) {
           controller.enqueue({ type, text: match, id });
           buffer = buffer.slice(match.length);
-          await delay2(delayInMs);
+          await delay22(delayInMs);
         }
       }
     });
@@ -124030,7 +124329,7 @@ var init_message_summarizer = __esm({
     SUMMARIZER_MAX_TOOL_RESULT_CHARS = 2e3;
     SUMMARIZER_MAX_TOOL_CALL_ARGS_CHARS_WRITE = 1500;
     SUMMARIZER_MAX_TOOL_CALL_ARGS_CHARS_DEFAULT = 500;
-    WRITE_TOOL_NAMES = /* @__PURE__ */ new Set(["write", "edit", "createFile"]);
+    WRITE_TOOL_NAMES = /* @__PURE__ */ new Set(["writeFile", "editFile", "write", "edit", "createFile"]);
     SUMMARIZER_SYSTEM_PROMPT = [
       "You are a continuation summarizer for an AI agent's working session.",
       "Your summary will replace the original conversation history \u2014 the agent can only see your summary to continue the work.",
@@ -124575,8 +124874,8 @@ function getMaxImageDimension() {
   return configured && configured > 0 ? configured : DEFAULT_MAX_IMAGE_DIMENSION;
 }
 async function resizeImageBuffer(buffer, maxDimension) {
-  const sharp = (await import("sharp")).default;
-  const image = sharp(buffer);
+  const sharp2 = (await import("sharp")).default;
+  const image = sharp2(buffer);
   const metadata = await image.metadata();
   const width = metadata.width || 0;
   const height = metadata.height || 0;
@@ -124589,7 +124888,7 @@ async function resizeImageBuffer(buffer, maxDimension) {
     };
   }
   const resizedBuffer = await image.resize(maxDimension, maxDimension, { fit: "inside", withoutEnlargement: true }).toBuffer();
-  const resizedMetadata = await sharp(resizedBuffer).metadata();
+  const resizedMetadata = await sharp2(resizedBuffer).metadata();
   return {
     buffer: resizedBuffer,
     mediaType: `image/${resizedMetadata.format || metadata.format || "png"}`,
@@ -124846,21 +125145,30 @@ var FILE_PATH_TOOLS;
 var init_tool_args = __esm({
   "src/core/tools/shared/tool-args.ts"() {
     "use strict";
-    FILE_PATH_TOOLS = /* @__PURE__ */ new Set(["read", "write", "edit", "patch"]);
+    FILE_PATH_TOOLS = /* @__PURE__ */ new Set(["readFile", "writeFile", "editFile", "applyPatch", "read", "write", "edit", "patch"]);
   }
 });
 
 // src/core/tools/shared/display.ts
-function resolveFilePath(filePath, agentId) {
+function getWorkdirArg(args2) {
+  if (!args2 || typeof args2 !== "object") return null;
+  const workdir = args2.workdir;
+  return typeof workdir === "string" && workdir.length > 0 ? workdir : null;
+}
+function resolveFilePath(filePath, scope) {
   if ((0, import_path14.isAbsolute)(filePath)) return filePath;
-  const baseDir = agentId ? getAgentWorkspaceDir(agentId) : process.cwd();
+  const baseDir = scope?.groupId ? getGroupDir(scope.groupId) : scope?.agentId ? getAgentWorkspaceDir(scope.agentId) : process.cwd();
   return (0, import_path14.resolve)(baseDir, filePath);
 }
-function normalizeToolArgsForDisplay(toolName, args2, agentId) {
+function normalizeToolArgsForDisplay(toolName, args2, agentId, groupId) {
   if (!isFilePathTool(toolName)) return args2;
   const path10 = getToolPathArg(args2);
   if (!path10) return args2;
-  return replaceToolPathArg(args2, resolveFilePath(path10, agentId));
+  const workdir = getWorkdirArg(args2);
+  if (workdir) {
+    return replaceToolPathArg(args2, (0, import_path14.isAbsolute)(path10) ? path10 : (0, import_path14.resolve)(workdir, path10));
+  }
+  return replaceToolPathArg(args2, resolveFilePath(path10, { agentId, groupId }));
 }
 var import_path14;
 var init_display = __esm({
@@ -124868,6 +125176,7 @@ var init_display = __esm({
     "use strict";
     import_path14 = require("path");
     init_workspace();
+    init_group_file_store();
     init_tool_args();
   }
 });
@@ -124948,7 +125257,7 @@ function buildSystemInfo(agentId) {
     `- \u4E3B\u673A\u540D\uFF1A${(0, import_os2.hostname)()}`,
     `- \u7528\u6237\u540D\uFF1A${(0, import_os2.userInfo)().username}`,
     `- \u9ED8\u8BA4Shell\uFF1A${process.env.SHELL || "/bin/sh"}`,
-    `- Agent\u5DE5\u4F5C\u76EE\u5F55\uFF1A${getAgentWorkspaceDir(agentId)}`,
+    `- Agent\u9ED8\u8BA4\u5DE5\u4F5C\u76EE\u5F55\uFF1A${getAgentWorkspaceDir(agentId)}`,
     `- \u9644\u4EF6\u76EE\u5F55\uFF1A${config.getAttachmentsPath()}`
   ];
   return `${sysInfoLines.join("\n")}
@@ -125008,10 +125317,7 @@ var init_PromptBuilder = __esm({
         if (workspaceContent) {
           sections.push(workspaceContent);
         }
-        sections.push(
-          buildSystemInfo(this.agent.id),
-          SYSTEM_RUNTIME_INSTRUCTIONS
-        );
+        sections.push(buildSystemInfo(this.agent.id), SYSTEM_RUNTIME_INSTRUCTIONS);
         if (this.additionalInstructions) {
           sections.push(this.additionalInstructions);
         }
@@ -125037,7 +125343,7 @@ function buildGroupWorkspaceInstructions(groupDir) {
 - \`memory/YYYY-MM-DD.md\` \u2014 \u6BCF\u65E5\u8BA8\u8BBA\u8BB0\u5F55
 - \`docs/\` \u2014 \u5171\u4EAB\u6587\u6863
 
-\u4F7F\u7528 \`read\`\u3001\`write\`\u3001\`edit\` \u67E5\u770B\u6216\u4FEE\u6539\u8FD9\u4E9B\u6587\u4EF6\u3002
+\u4F7F\u7528 \`readFile\`\u3001\`writeFile\`\u3001\`editFile\`\u3001\`applyPatch\` \u67E5\u770B\u6216\u4FEE\u6539\u8FD9\u4E9B\u6587\u4EF6\u3002\u8C03\u7528\u65F6 \`workdir\` \u4F7F\u7528\u7FA4\u76EE\u5F55\uFF0C\`path\` \u4F7F\u7528\u76F8\u5BF9\u7FA4\u76EE\u5F55\u7684\u8DEF\u5F84\u3002
 
 \u53D7\u4FDD\u62A4\u6587\u4EF6\uFF08\u7981\u6B62\u4FEE\u6539\uFF09\uFF1A
 - \`GROUP_SETTINGS.md\`
@@ -125178,7 +125484,67 @@ var init_prompts = __esm({
   }
 });
 
+// src/shared/crash-breadcrumb-port.ts
+function recordAppCrashBreadcrumb(event, data2, level = "info") {
+  try {
+    recorder?.(event, data2, level);
+  } catch {
+  }
+}
+var recorder;
+var init_crash_breadcrumb_port = __esm({
+  "src/shared/crash-breadcrumb-port.ts"() {
+    "use strict";
+  }
+});
+
 // src/core/agent/kernel/AgentExecutor.ts
+function isGlm51Thinking(ctx) {
+  return ctx.model.toLowerCase().includes("glm-5.1") && Boolean(ctx.reasoningEffort && ctx.reasoningEffort !== "off");
+}
+function buildLlmRequestSettings(ctx) {
+  const omitSampling = isGlm51Thinking(ctx);
+  return {
+    temperature: omitSampling ? void 0 : ctx.temperature,
+    topP: omitSampling ? void 0 : ctx.topP,
+    maxOutputTokens: resolveMaxOutputTokens(
+      ctx.maxTokens,
+      modelCapability.getMaxOutputTokens(ctx.model)
+    ),
+    providerOptions: buildProviderOptions(ctx.apiType, ctx.reasoningEffort),
+    filtered: {
+      temperature: omitSampling && ctx.temperature !== void 0,
+      topP: omitSampling && ctx.topP !== void 0,
+      reasoningMetadata: omitSampling
+    }
+  };
+}
+function stripUnsupportedReasoningMetadataForModel(messages, ctx) {
+  if (!isGlm51Thinking(ctx)) return messages;
+  let changed = false;
+  const sanitized = messages.map((message) => {
+    if (!Array.isArray(message.content)) return message;
+    let contentChanged = false;
+    const content = message.content.map((part) => {
+      if (part.type !== "reasoning") return part;
+      const record2 = part;
+      if (!("providerOptions" in record2) && !("providerMetadata" in record2) && !("experimental_providerMetadata" in record2)) {
+        return part;
+      }
+      const {
+        providerOptions: _providerOptions,
+        providerMetadata: _providerMetadata,
+        experimental_providerMetadata: _experimentalProviderMetadata,
+        ...rest
+      } = record2;
+      contentChanged = true;
+      changed = true;
+      return rest;
+    });
+    return contentChanged ? { ...message, content } : message;
+  });
+  return changed ? sanitized : messages;
+}
 function buildProviderOptions(apiType, reasoningEffort) {
   if (!reasoningEffort || reasoningEffort === "off") return void 0;
   const budgetMap = {
@@ -125232,7 +125598,18 @@ function isReasoningOnlyAssistantMessage(message) {
   }
   return hasReasoning;
 }
-var logger17, FallbackExhaustedError, AgentExecutor, StreamContentState, TextStreamState, ReasoningStreamState;
+function getMissingToolFields(toolName, parsed) {
+  const policy = TOOL_REPAIR_POLICIES[toolName];
+  if (!policy || !parsed || typeof parsed !== "object") return [];
+  const args2 = parsed;
+  return policy.fields.filter((field) => {
+    if (toolName === "applyPatch" && field === "patch") {
+      return (typeof args2.patch !== "string" || args2.patch.length === 0) && (typeof args2.input !== "string" || args2.input.length === 0);
+    }
+    return typeof args2[field] !== "string" || args2[field].length === 0;
+  });
+}
+var logger17, FallbackExhaustedError, TOOL_REPAIR_POLICIES, AgentExecutor, StreamContentState, TextStreamState, ReasoningStreamState;
 var init_AgentExecutor = __esm({
   "src/core/agent/kernel/AgentExecutor.ts"() {
     "use strict";
@@ -125251,6 +125628,7 @@ var init_AgentExecutor = __esm({
     init_execution();
     init_execution_deps();
     init_prompts();
+    init_crash_breadcrumb_port();
     logger17 = createLogger("AgentExecutor");
     FallbackExhaustedError = class extends Error {
       constructor(attempts) {
@@ -125262,6 +125640,24 @@ var init_AgentExecutor = __esm({
       }
       attempts;
     };
+    TOOL_REPAIR_POLICIES = {
+      readFile: {
+        fields: ["workdir", "path"],
+        guidance: '\u8BF7\u91CD\u65B0\u8C03\u7528\u5DE5\u5177\uFF0C\u52A1\u5FC5\u5148\u8F93\u51FA "workdir" \u5B57\u6BB5\uFF0C\u518D\u8F93\u51FA "path" \u5B57\u6BB5\u3002'
+      },
+      writeFile: {
+        fields: ["workdir", "path", "content"],
+        guidance: '\u8BF7\u91CD\u65B0\u8C03\u7528\u5DE5\u5177\uFF0C\u52A1\u5FC5\u5148\u8F93\u51FA "workdir" \u5B57\u6BB5\uFF0C\u518D\u8F93\u51FA "path" \u5B57\u6BB5\uFF0C\u6700\u540E\u8F93\u51FA "content" \u5927\u6587\u672C\u5B57\u6BB5\u3002'
+      },
+      editFile: {
+        fields: ["workdir", "path", "oldString", "newString"],
+        guidance: '\u8BF7\u91CD\u65B0\u8C03\u7528\u5DE5\u5177\uFF0C\u52A1\u5FC5\u5148\u8F93\u51FA "workdir" \u5B57\u6BB5\uFF0C\u518D\u8F93\u51FA "path" \u5B57\u6BB5\uFF0C\u6700\u540E\u8F93\u51FA "oldString"/"newString" \u5927\u6587\u672C\u5B57\u6BB5\u3002'
+      },
+      applyPatch: {
+        fields: ["workdir", "patch"],
+        guidance: '\u8BF7\u91CD\u65B0\u8C03\u7528\u5DE5\u5177\uFF0C\u52A1\u5FC5\u5148\u8F93\u51FA "workdir" \u5B57\u6BB5\uFF0C\u6700\u540E\u8F93\u51FA "patch" \u5927\u6587\u672C\u5B57\u6BB5\u3002'
+      }
+    };
     AgentExecutor = class _AgentExecutor {
       streamCallback;
       lastCompactedMessages = [];
@@ -125283,6 +125679,7 @@ var init_AgentExecutor = __esm({
       tools;
       deps;
       runtime;
+      groupId;
       customStopWhen;
       _ctx;
       /** 上下文压缩重试计数（独立于瞬时错误重试） */
@@ -125302,6 +125699,7 @@ var init_AgentExecutor = __esm({
         this.tools = options2.tools;
         this.deps = resolveAgentExecutionDeps(options2.deps);
         this.runtime = options2.runtime ?? createExecutionRuntime();
+        this.groupId = options2.groupId;
         this.contextId = options2.contextId;
         this.saveContext = options2.saveContext;
         this.saveSeq = options2.saveSeqMessages;
@@ -125505,6 +125903,15 @@ var init_AgentExecutor = __esm({
               `Fallback: ${ctx.channelId}:${ctx.model} \u2192 ${targetChannel.id}:${fallbackModel}`
             );
             messages = this.getMessagesForRetry(messages);
+            this.runInfoCallback?.({
+              model: fallbackModel,
+              fallback: true,
+              fallbackTransition: {
+                fromModel: ctx.model,
+                toModel: fallbackModel,
+                reason: this.classifyFallbackReason(error48)
+              }
+            });
             this.switchContext(targetChannel, fallbackModel);
             this.contextWindowOverride = void 0;
             this.compressionRetryCount = 0;
@@ -125560,6 +125967,19 @@ var init_AgentExecutor = __esm({
         if (/terminated/.test(msg)) return true;
         return false;
       }
+      /**
+       * 前端只需要稳定、可翻译的原因枚举；原始 provider 错误留在日志里。
+       */
+      classifyFallbackReason(error48) {
+        const msg = error48 instanceof Error ? error48.message?.toLowerCase() ?? "" : String(error48).toLowerCase();
+        if (/\b(rate\s*limit|too\s+many\s+requests|429)\b/.test(msg)) return "rate_limit";
+        if (/\b(timeout|timed\s*out|etimedout|deadline)\b/.test(msg)) return "timeout";
+        if (/context|token|maximum|too\s+long|length/.test(msg)) return "context_overflow";
+        if (/api|provider|server|5\d\d|overloaded|unavailable|connection|econnreset|terminated/.test(msg)) {
+          return "api_error";
+        }
+        return "unknown";
+      }
       /**
        * 查找下一个可用的 fallback 条目
        * 排除：已尝试的、锁定的
@@ -125589,6 +126009,7 @@ var init_AgentExecutor = __esm({
         let latency = 0;
         this.runInfoCallback?.({ model: ctx.model, fallback: this.triedKeys.size > 0 });
         messages = this.projectMessagesForProvider(messages, ctx.apiType);
+        messages = stripUnsupportedReasoningMetadataForModel(messages, ctx);
         messages = await multimodalTransformer.transform(messages, ctx.model);
         const model = this.deps.languageModelFactory.createLanguageModel(
           {
@@ -125605,6 +126026,25 @@ var init_AgentExecutor = __esm({
           if (!lastStep) return true;
           return (lastStep.toolCalls || []).length === 0;
         };
+        const requestSettings = buildLlmRequestSettings(ctx);
+        const streamId = genId(ID_TYPE.MSG);
+        const breadcrumbBase = {
+          streamId,
+          contextId: this.contextId,
+          threadId: this.groupId ? this.contextId : void 0,
+          agentId: ctx.agentId,
+          channelId: ctx.channelId,
+          provider: ctx.apiType,
+          model: ctx.model,
+          groupId: this.groupId
+        };
+        recordAppCrashBreadcrumb("llm.stream.start", {
+          ...breadcrumbBase,
+          messageCount: messages.length,
+          hasTools: Object.keys(this.tools).length > 0,
+          reasoningEffort: ctx.reasoningEffort,
+          filtered: requestSettings.filtered
+        });
         const agent = new ToolLoopAgent({
           ...this.settings,
           model,
@@ -125613,15 +126053,16 @@ var init_AgentExecutor = __esm({
               try {
                 const repaired = jsonrepair(toolCall.input);
                 const parsed = JSON.parse(repaired);
-                if ((toolCall.toolName === "write" || toolCall.toolName === "edit") && !parsed.path) {
-                  throw new Error('\u7F3A\u5C11 path \u5B57\u6BB5\u3002\u8BF7\u91CD\u65B0\u8C03\u7528\u5DE5\u5177\uFF0C\u52A1\u5FC5\u5148\u8F93\u51FA "path" \u5B57\u6BB5\u3002');
+                const missingFields = getMissingToolFields(toolCall.toolName, parsed);
+                if (missingFields.length > 0) {
+                  const policy = TOOL_REPAIR_POLICIES[toolCall.toolName];
+                  throw new Error(`\u7F3A\u5C11 ${missingFields.join("/")} \u5B57\u6BB5\u3002${policy.guidance}`);
                 }
                 return { ...toolCall, input: repaired };
               } catch (err) {
-                if (toolCall.toolName === "write" || toolCall.toolName === "edit") {
-                  throw new Error(
-                    'JSON \u89E3\u6790\u5931\u8D25\u3002\u8BF7\u91CD\u65B0\u8C03\u7528\u5DE5\u5177\uFF0C\u52A1\u5FC5\u5148\u8F93\u51FA "path" \u5B57\u6BB5\uFF0C\u518D\u8F93\u51FA "content"/"oldString" \u7B49\u5927\u6587\u672C\u5B57\u6BB5\u3002'
-                  );
+                const policy = TOOL_REPAIR_POLICIES[toolCall.toolName];
+                if (policy) {
+                  throw new Error(`JSON \u89E3\u6790\u5931\u8D25\u3002${policy.guidance}`);
                 }
                 throw new Error(`${toolCall.toolName}:\u53C2\u6570\u89E3\u6790\u51FA\u9519\uFF0C\u8BF7\u7B80\u5316\u8F93\u51FA\u6216\u4F7F\u7528\u5176\u4ED6\u5DE5\u5177\u518D\u8BD5`);
               }
@@ -125630,13 +126071,10 @@ var init_AgentExecutor = __esm({
           },
           stopWhen: this.customStopWhen || defaultStopWhen,
           tools: this.tools,
-          temperature: ctx.temperature,
-          topP: ctx.topP,
-          maxOutputTokens: resolveMaxOutputTokens(
-            ctx.maxTokens,
-            modelCapability.getMaxOutputTokens(ctx.model)
-          ),
-          providerOptions: buildProviderOptions(ctx.apiType, ctx.reasoningEffort)
+          temperature: requestSettings.temperature,
+          topP: requestSettings.topP,
+          maxOutputTokens: requestSettings.maxOutputTokens,
+          providerOptions: requestSettings.providerOptions
         });
         try {
           const result = await agent.stream({
@@ -125647,6 +126085,12 @@ var init_AgentExecutor = __esm({
           const steps = await result.steps;
           const response = await result.response;
           const responseUsage = await result.totalUsage;
+          recordAppCrashBreadcrumb("llm.stream.end", {
+            ...breadcrumbBase,
+            latencyMs: Date.now() - startTime,
+            stepCount: steps.length,
+            usage: responseUsage
+          });
           const allMessages = this.lastCompactedMessages;
           logger17.debug(
             `executeInternal: lastCompactedMessages=${this.lastCompactedMessages.length}, response.messages=${response.messages.length}, allMessages=${allMessages.length}`
@@ -125675,6 +126119,11 @@ var init_AgentExecutor = __esm({
             steps
           };
         } catch (error48) {
+          recordAppCrashBreadcrumb("llm.stream.error", {
+            ...breadcrumbBase,
+            latencyMs: Date.now() - startTime,
+            error: error48
+          }, "error");
           if (error48 instanceof DOMException && error48.name === "AbortError" || abortSignal?.aborted) {
             throw error48;
           }
@@ -125993,7 +126442,7 @@ var init_AgentExecutor = __esm({
             toolCall: {
               id: chunk.toolCallId,
               name: chunk.toolName,
-              args: normalizeToolArgsForDisplay(chunk.toolName, chunk.input ?? {}, this.agent.id),
+              args: normalizeToolArgsForDisplay(chunk.toolName, chunk.input ?? {}, this.agent.id, this.groupId),
               status: "pending",
               startedAt: meta3?.startedAt ?? Date.now()
             }
@@ -126031,7 +126480,8 @@ var init_AgentExecutor = __esm({
               args: normalizeToolArgsForDisplay(
                 chunk.toolName,
                 chunk.input ?? void 0,
-                this.agent.id
+                this.agent.id,
+                this.groupId
               ),
               status: "success",
               result: (() => {
@@ -126069,7 +126519,8 @@ var init_AgentExecutor = __esm({
               args: normalizeToolArgsForDisplay(
                 chunk.toolName,
                 chunk.input ?? void 0,
-                this.agent.id
+                this.agent.id,
+                this.groupId
               ),
               status: "error",
               error: String(chunk.error),
@@ -130193,7 +130644,9 @@ function mergeUsage(...usages) {
   return {
     inputTokens: validUsages.reduce((sum, u) => sum + (u.inputTokens || 0), 0),
     outputTokens: validUsages.reduce((sum, u) => sum + (u.outputTokens || 0), 0),
-    totalTokens: validUsages.reduce((sum, u) => sum + (u.totalTokens || 0), 0)
+    totalTokens: validUsages.reduce((sum, u) => sum + (u.totalTokens || 0), 0),
+    cachedInputTokens: validUsages.reduce((sum, u) => sum + (u.cachedInputTokens || 0), 0),
+    reasoningTokens: validUsages.reduce((sum, u) => sum + (u.reasoningTokens || 0), 0)
   };
 }
 var init_message = __esm({
@@ -130585,6 +131038,9 @@ var init_PlanCoordinator = __esm({
         const result = await this.deps.taskOrchestrator.runPlanStepInternal(abortSignal, retryTodoIds);
         return this.buildCheckpoint(plan, result, checkpointIndex);
       }
+      buildProgressSnapshot() {
+        return this.buildTodoProgress(this.requirePlan().todos);
+      }
       buildCheckpoint(plan, step, checkpointIndex) {
         const todoProgress = this.buildTodoProgress(plan.todos);
         const failure = this.findFailure(step.results, plan.todos);
@@ -130969,7 +131425,8 @@ var init_TaskOrchestrator = __esm({
           tools: allTools,
           stopWhen: createTaskStopWhen(),
           deps: this.agentDeps,
-          runtime
+          runtime,
+          groupId: this.deps.thread.groupId
         });
         return [taskExecutor, input];
       }
@@ -131132,7 +131589,9 @@ var init_TaskOrchestrator = __esm({
             };
           },
           broadcast: async (options2) => {
-            return this.executeBroadcast(options2.question, options2.targetAgentIds, abortSignal);
+            return this.executeBroadcast(options2.question, options2.targetAgentIds, abortSignal, {
+              contextMessages: this.deps.getInheritedMessages()
+            });
           },
           listTasks: async () => {
             return {
@@ -131328,12 +131787,13 @@ var init_TaskOrchestrator = __esm({
        *
        * @returns 各 Agent 的回答内容（供调用方 — 通常是 LLM — 汇总使用）
        */
-      async executeBroadcast(question, targetAgentIds, abortSignal) {
+      async executeBroadcast(question, targetAgentIds, abortSignal, options2 = {}) {
         const uniqueTargetAgentIds = Array.from(new Set(targetAgentIds));
         const { pass, reason } = this.deps.context.canBroadcast(uniqueTargetAgentIds.length);
         if (!pass) {
           return {
-            responses: [{ agentId: "", agentName: "", content: `\u5E7F\u64AD\u5931\u8D25\uFF1A${reason}` }]
+            responses: [{ agentId: "", agentName: "", content: `\u5E7F\u64AD\u5931\u8D25\uFF1A${reason}`, status: "failed", error: reason }],
+            error: reason
           };
         }
         const broadcastId = genId(ID_TYPE.BROADCAST);
@@ -131344,6 +131804,17 @@ var init_TaskOrchestrator = __esm({
           const agent = await this.deps.thread.getGroup().findMember(agentId);
           if (!agent) {
             invalidIds.push(agentId);
+            responses.push({
+              agentId,
+              agentName: agentId,
+              status: "failed",
+              blocks: [{
+                type: "text",
+                text: "\u76EE\u6807\u6210\u5458\u4E0D\u5B58\u5728\uFF0C\u5DF2\u8DF3\u8FC7\u8BE5\u76EE\u6807\uFF0C\u8BF7\u4ECE\u76EE\u6807\u5217\u8868\u4E2D\u79FB\u9664\u65E0\u6548 agentId \u540E\u518D\u8BD5\u3002",
+                id: `broadcast-error-${agentId}`
+              }],
+              error: `Agent ${agentId} \u4E0D\u5728\u5F53\u524D\u7FA4\u804A\u6210\u5458\u4E2D\u3002\u5F53\u524D\u6210\u5458 ID\uFF1A${memberIds.join(", ")}\u3002`
+            });
             continue;
           }
           responses.push({
@@ -131354,15 +131825,6 @@ var init_TaskOrchestrator = __esm({
             blocks: []
           });
         }
-        if (invalidIds.length > 0) {
-          return {
-            responses: [{
-              agentId: "",
-              agentName: "",
-              content: `\u5E7F\u64AD\u5931\u8D25\uFF1AAgent ${invalidIds.join(", ")} \u4E0D\u5728\u5F53\u524D\u7FA4\u804A\u6210\u5458\u4E2D\u3002\u5F53\u524D\u6210\u5458 ID\uFF1A${memberIds.join(", ")}\u3002\u8BF7\u68C0\u67E5 agentId \u662F\u5426\u6B63\u786E\u3002`
-            }]
-          };
-        }
         const emitBroadcastBlock = (status) => {
           this.deps.onStream({
             type: "broadcast",
@@ -131377,11 +131839,13 @@ var init_TaskOrchestrator = __esm({
           });
         };
         emitBroadcastBlock("pending");
-        const validResponses = new Map(responses.map((response) => [response.agentId, response]));
+        const validResponses = new Map(
+          responses.filter((response) => response.status !== "failed").map((response) => [response.agentId, response])
+        );
         const executors = uniqueTargetAgentIds.map(async (agentId) => {
           const response = validResponses.get(agentId);
           if (!response) {
-            return { agentId, agentName: "", content: "\u6267\u884C\u5931\u8D25\uFF1AAgent \u4E0D\u5728\u7FA4\u804A\u6210\u5458\u4E2D" };
+            return { agentId, agentName: "", content: "\u76EE\u6807\u6210\u5458\u4E0D\u5B58\u5728\uFF0C\u5DF2\u8DF3\u8FC7\u8BE5\u76EE\u6807\u3002", status: "failed", error: "Agent \u4E0D\u5728\u5F53\u524D\u7FA4\u804A\u6210\u5458\u4E2D" };
           }
           response.status = "thinking";
           emitBroadcastBlock("running");
@@ -131391,7 +131855,7 @@ var init_TaskOrchestrator = __esm({
               response.status = "failed";
               response.blocks = [{ type: "text", text: `Agent ${agentId} \u4E0D\u5728\u5F53\u524D\u7FA4\u804A\u6210\u5458\u4E2D`, id: `broadcast-error-${agentId}` }];
               emitBroadcastBlock("running");
-              return { agentId, agentName: response.agentName, content: "\u6267\u884C\u5931\u8D25\uFF1AAgent \u4E0D\u5728\u7FA4\u804A\u6210\u5458\u4E2D" };
+              return { agentId, agentName: response.agentName, content: "\u6267\u884C\u5931\u8D25\uFF1AAgent \u4E0D\u5728\u5F53\u524D\u7FA4\u804A\u6210\u5458\u4E2D", status: "failed", error: "Agent \u4E0D\u5728\u5F53\u524D\u7FA4\u804A\u6210\u5458\u4E2D" };
             }
             const agentConfig = await agent.getConfig();
             const runtime = this.deps.getRuntime?.() ?? createExecutionRuntime();
@@ -131405,11 +131869,12 @@ var init_TaskOrchestrator = __esm({
               runtime
             );
             const skills = await this.deps.getSkills(agent);
+            const contextMessages = this.deps.removeSystem(options2.contextMessages ?? []);
             const broadcastPrompt = [
               `\u4F60\u662F @${agent.name}\u3002${agent.description || ""}`,
               "",
               `# \u5E7F\u64AD\u95EE\u9898`,
-              `\u4EE5\u4E0B\u662F\u6765\u81EA\u56E2\u961F\u7684\u5E7F\u64AD\u95EE\u9898\uFF0C\u8BF7\u57FA\u4E8E\u4F60\u7684\u4E13\u4E1A\u89D2\u8272\u548C\u89C6\u89D2\u72EC\u7ACB\u56DE\u7B54\u3002`,
+              `\u4EE5\u4E0B\u662F\u6765\u81EA\u56E2\u961F\u7684\u5E7F\u64AD\u95EE\u9898\u3002\u8BF7\u5148\u7406\u89E3\u4E0A\u9762\u7684\u5F53\u524D\u8BA8\u8BBA\u4E0A\u4E0B\u6587\uFF0C\u518D\u57FA\u4E8E\u4F60\u7684\u4E13\u4E1A\u89D2\u8272\u548C\u89C6\u89D2\u72EC\u7ACB\u56DE\u7B54\u3002`,
               "",
               `## \u95EE\u9898`,
               question
@@ -131424,6 +131889,7 @@ var init_TaskOrchestrator = __esm({
                   mode: "broadcast"
                 })
               },
+              ...contextMessages,
               {
                 role: "user",
                 content: broadcastPrompt
@@ -131439,7 +131905,8 @@ var init_TaskOrchestrator = __esm({
               tools,
               stopWhen: createTaskStopWhen(),
               deps: this.agentDeps,
-              runtime
+              runtime,
+              groupId: this.deps.thread.groupId
             });
             executor.onStream((block) => {
               const existingIdx = response.blocks.findIndex(
@@ -131464,23 +131931,29 @@ var init_TaskOrchestrator = __esm({
               (msg) => msg.role === "assistant"
             );
             const content = extractAssistantText(lastAssistant?.content) || "\uFF08\u65E0\u6587\u672C\u56DE\u590D\uFF09";
-            return { agentId, agentName: agent.name, content };
+            return { agentId, agentName: agent.name, content, status: "done" };
           } catch (err) {
             response.status = "failed";
+            const errorText = `\u6267\u884C\u5931\u8D25\uFF1A${err instanceof Error ? err.message : String(err)}`;
             response.blocks = [
               {
                 type: "text",
-                text: `\u6267\u884C\u5931\u8D25\uFF1A${err instanceof Error ? err.message : String(err)}`,
+                text: errorText,
                 id: `broadcast-error-${agentId}`
               }
             ];
+            response.error = errorText;
             emitBroadcastBlock("running");
-            return { agentId, agentName: response.agentName, content: "\u6267\u884C\u5931\u8D25" };
+            return { agentId, agentName: response.agentName, content: "\u6267\u884C\u5931\u8D25", status: "failed", error: errorText };
           }
         });
         const results = await Promise.all(executors);
         emitBroadcastBlock("done");
-        return { responses: results };
+        const failedCount = results.filter((result) => result.status === "failed").length;
+        return {
+          responses: results,
+          ...failedCount === results.length && results.length > 0 ? { error: "\u5E7F\u64AD\u5168\u90E8\u5931\u8D25" } : {}
+        };
       }
     };
   }
@@ -131936,7 +132409,8 @@ var init_SwarmExecutor = __esm({
         const { responses } = await this.taskOrchestrator.executeBroadcast(
           question,
           targetIds,
-          abortSignal
+          abortSignal,
+          { contextMessages: resultMessages }
         );
         const broadcastResultMessage = {
           role: "assistant",
@@ -132170,7 +132644,8 @@ var init_SwarmExecutor = __esm({
           tools: { ...tools, ...swarmTools },
           stopWhen: createSwarmStopWhen(),
           deps: this.agentDeps,
-          runtime
+          runtime,
+          groupId: this.thread.groupId
         });
         if (options2?.suppressStream) {
           executor.onStream((block) => options2?.onBlock?.(block));
@@ -132207,10 +132682,8 @@ var init_SwarmExecutor = __esm({
        * 监督者模式执行流程
        *
        * 1. 阶段 1: Planning — supervisor 调用 plan 工具制定计划（不执行任务）
-       * 2. 阶段 2+3: Execute & Review 循环
-       *    - 每轮注入 plan + 进度上下文
-       *    - supervisor 执行任务或调用 evaluate_result 评审
-       *    - achieved=true → 结束；否则继续下一轮
+       * 2. 阶段 2: Runtime 自动调度 ready todos 并等待本批收口
+       * 3. 阶段 3: Supervisor 只在 checkpoint 调用 verdict 做语义裁决
        */
       async executeSupervised(messages, supervisor, abortSignal) {
         let totalUsage;
@@ -132462,7 +132935,8 @@ var init_SwarmExecutor = __esm({
           tools: { ...tools, ...swarmTools },
           stopWhen,
           deps: this.agentDeps,
-          runtime
+          runtime,
+          groupId: this.thread.groupId
         });
         if (this.streamCallback) {
           executor.onStream(this.streamCallback);
@@ -133441,8 +133915,139 @@ var init_error_classifier = __esm({
   }
 });
 
+// src/core/message/queue/StreamingPersistScheduler.ts
+var log15, DEFAULT_PERSIST_INTERVAL_MS, StreamingPersistScheduler;
+var init_StreamingPersistScheduler = __esm({
+  "src/core/message/queue/StreamingPersistScheduler.ts"() {
+    "use strict";
+    init_logger();
+    log15 = createLogger("StreamingPersistScheduler");
+    DEFAULT_PERSIST_INTERVAL_MS = 500;
+    StreamingPersistScheduler = class {
+      constructor(options2) {
+        this.options = options2;
+      }
+      options;
+      skeletonPersisted = false;
+      skeletonPromise = null;
+      inflightUpdate = null;
+      dirty = false;
+      timer = null;
+      flushed = false;
+      flushPromise = null;
+      notify() {
+        if (this.flushed) return;
+        if (!this.skeletonPersisted && !this.skeletonPromise) {
+          this.startSkeletonInsert();
+          return;
+        }
+        this.dirty = true;
+        if (this.skeletonPersisted) {
+          this.scheduleUpdate();
+        }
+      }
+      flush() {
+        if (!this.flushPromise) {
+          this.flushPromise = this.doFlush();
+        }
+        return this.flushPromise;
+      }
+      async doFlush() {
+        this.flushed = true;
+        this.clearTimer();
+        await this.skeletonPromise;
+        await this.inflightUpdate;
+        if (this.dirty && this.skeletonPersisted) {
+          this.dirty = false;
+          await this.runFinalUpdate();
+        }
+      }
+      get hasPersistedSkeleton() {
+        return this.skeletonPersisted;
+      }
+      cancel() {
+        this.flushed = true;
+        this.flushPromise ??= Promise.resolve();
+        this.clearTimer();
+      }
+      startSkeletonInsert() {
+        const snapshot = this.cloneBlocks();
+        const promise2 = this.options.insertSkeleton(snapshot).then(() => {
+          this.skeletonPersisted = true;
+          log15.noise(`streaming skeleton persisted, aiMessageId=${this.options.messageId}`);
+        }).catch((error48) => {
+          log15.warn(`streaming skeleton insert failed, aiMessageId=${this.options.messageId}`, error48);
+        }).finally(() => {
+          this.skeletonPromise = null;
+          if (this.dirty && this.skeletonPersisted && !this.flushed) {
+            this.scheduleUpdate();
+          }
+        });
+        this.skeletonPromise = promise2;
+        this.track(promise2, `streaming-skeleton:${this.options.messageId}`);
+      }
+      scheduleUpdate() {
+        if (this.flushed || this.timer || this.inflightUpdate) return;
+        this.timer = setTimeout(() => {
+          this.timer = null;
+          this.startUpdate();
+        }, this.options.persistIntervalMs ?? DEFAULT_PERSIST_INTERVAL_MS);
+      }
+      startUpdate() {
+        if (this.flushed || !this.skeletonPersisted || !this.dirty || this.inflightUpdate) return;
+        const snapshot = this.cloneBlocks();
+        if (snapshot.length === 0) return;
+        this.dirty = false;
+        const promise2 = this.options.updateBlocks(snapshot).catch((error48) => {
+          this.dirty = true;
+          log15.noise(`streaming update failed, aiMessageId=${this.options.messageId}`, error48);
+        }).finally(() => {
+          this.inflightUpdate = null;
+          if (this.dirty && !this.flushed) {
+            this.scheduleUpdate();
+          }
+        });
+        this.inflightUpdate = promise2;
+        this.track(promise2, `streaming-update:${this.options.messageId}`);
+      }
+      async runFinalUpdate() {
+        const snapshot = this.cloneBlocks();
+        if (snapshot.length === 0) return;
+        const promise2 = this.options.updateBlocks(snapshot);
+        this.track(promise2, `streaming-final-update:${this.options.messageId}`);
+        try {
+          await promise2;
+        } catch (error48) {
+          log15.warn(`streaming final flush failed, aiMessageId=${this.options.messageId}`, error48);
+        }
+      }
+      cloneBlocks() {
+        return structuredClone(this.options.getBlocks());
+      }
+      clearTimer() {
+        if (!this.timer) return;
+        clearTimeout(this.timer);
+        this.timer = null;
+      }
+      track(promise2, label) {
+        this.options.pendingDbWrites?.track(promise2, label);
+      }
+    };
+  }
+});
+
 // src/core/message/queue/MessageProcessor.ts
-var log15, MAX_RETRIES, RETRY_DELAY_BASE, MessageProcessor;
+function normalizeUsage(usage) {
+  const normalized = {};
+  for (const key of TOKEN_USAGE_KEYS) {
+    const value = usage[key];
+    if (typeof value === "number") {
+      normalized[key] = value;
+    }
+  }
+  return Object.keys(normalized).length > 0 ? normalized : void 0;
+}
+var log16, TOKEN_USAGE_KEYS, MAX_RETRIES, RETRY_DELAY_BASE, MessageProcessor;
 var init_MessageProcessor = __esm({
   "src/core/message/queue/MessageProcessor.ts"() {
     "use strict";
@@ -133454,16 +134059,26 @@ var init_MessageProcessor = __esm({
     init_logger();
     init_error_classifier();
     init_message_deps();
-    log15 = createLogger("MessageProcessor");
+    init_StreamingPersistScheduler();
+    log16 = createLogger("MessageProcessor");
+    TOKEN_USAGE_KEYS = [
+      "inputTokens",
+      "outputTokens",
+      "totalTokens",
+      "cachedInputTokens",
+      "reasoningTokens"
+    ];
     MAX_RETRIES = 3;
     RETRY_DELAY_BASE = 1e3;
     MessageProcessor = class {
-      constructor(callbacks, messageQueue2) {
+      constructor(callbacks, messageQueue2, pendingDbWrites) {
         this.callbacks = callbacks;
         this.messageQueue = messageQueue2;
+        this.pendingDbWrites = pendingDbWrites;
       }
       callbacks;
       messageQueue;
+      pendingDbWrites;
       /**
        * 处理消息。
        *
@@ -133481,10 +134096,12 @@ var init_MessageProcessor = __esm({
           agentId = conversationId;
         }
         if (!agentId) {
-          log15.error(`no agentId found for conversation ${conversationId}`);
+          log16.error(`no agentId found for conversation ${conversationId}`);
           return { success: false };
         }
         const aiMessageId = aiMessageIdOverride || genId(ID_TYPE.MSG);
+        const createdAt = Date.now();
+        const startTime = Date.now();
         const ctx = {
           conversationId,
           thread,
@@ -133492,20 +134109,38 @@ var init_MessageProcessor = __esm({
           metadata,
           agentId,
           runId: genId(ID_TYPE.RUN),
-          aiMessageId: genId(ID_TYPE.MSG),
-          createdAt: Date.now(),
-          startTime: Date.now(),
+          aiMessageId,
+          createdAt,
+          startTime,
           streamingBlocks: [],
           retryCount,
           model: void 0,
           fallback: void 0,
           streamingUsage: {},
-          streamingPersisted: false,
-          blockCountSincePersist: 0,
+          persistScheduler: new StreamingPersistScheduler({
+            messageId: aiMessageId,
+            getBlocks: () => ctx.streamingBlocks,
+            insertSkeleton: async (blocks) => {
+              await messageRepository2.insertWithId(
+                {
+                  conversationId,
+                  senderId: agentId,
+                  senderRole: "agent",
+                  blocks
+                },
+                { id: aiMessageId, createdAt, updatedAt: Date.now() }
+              );
+            },
+            updateBlocks: (blocks) => messageRepository2.update(aiMessageId, {
+              blocks,
+              updatedAt: Date.now()
+            }),
+            pendingDbWrites: this.pendingDbWrites
+          }),
           isThread
         };
         this.messageQueue?.registerRunId(ctx.runId, conversationId);
-        log15.noise(`runId=${ctx.runId}, agentId=${agentId}, isThread=${isThread}`);
+        log16.noise(`runId=${ctx.runId}, agentId=${agentId}, isThread=${isThread}`);
         try {
           return await this.executeAgent(ctx);
         } catch (err) {
@@ -133538,7 +134173,7 @@ var init_MessageProcessor = __esm({
         if (isThread) {
           const mgr = await this.callbacks.getThreadManager(conversationId);
           if (!mgr) {
-            log15.error(`thread manager not found, threadId=${conversationId}`);
+            log16.error(`thread manager not found, threadId=${conversationId}`);
             this.callbacks.unregisterAbortController(conversationId);
             return { success: false };
           }
@@ -133563,18 +134198,20 @@ var init_MessageProcessor = __esm({
             streamingBlocks.push(block);
           }
           messageCache.set(aiMessageId, conversationId, streamingBlocks);
-          this.persistStreamingBlock(ctx);
+          ctx.persistScheduler.notify();
         });
         chat.onRunInfo((info) => {
           ctx.model = info.model;
           ctx.fallback = info.fallback;
+          ctx.fallbackTransition = info.fallbackTransition ?? ctx.fallbackTransition;
           eventBus.emit({
             type: "run.progress",
             conversationId,
             runId,
             messageId: aiMessageId,
             model: info.model,
-            fallback: info.fallback
+            fallback: info.fallback,
+            fallbackTransition: info.fallbackTransition
           });
         });
         chat.onUsageUpdate((usage2) => {
@@ -133583,13 +134220,6 @@ var init_MessageProcessor = __esm({
         const PROGRESS_INTERVAL_MS = 3e3;
         ctx.progressTimer = setInterval(() => {
           if (abortController.signal.aborted) return;
-          const u = ctx.streamingUsage;
-          const hasUsage = (u.inputTokens ?? 0) > 0 || (u.outputTokens ?? 0) > 0;
-          const usage2 = hasUsage ? {
-            inputTokens: u.inputTokens ?? void 0,
-            outputTokens: u.outputTokens ?? void 0,
-            totalTokens: u.totalTokens ?? void 0
-          } : void 0;
           eventBus.emit({
             type: "run.progress",
             conversationId,
@@ -133597,21 +134227,23 @@ var init_MessageProcessor = __esm({
             messageId: aiMessageId,
             model: ctx.model,
             fallback: ctx.fallback,
-            usage: usage2
+            fallbackTransition: ctx.fallbackTransition,
+            usage: normalizeUsage(ctx.streamingUsage)
           });
         }, PROGRESS_INTERVAL_MS);
-        log15.noise(`calling chat.reply, conversationId=${conversationId}`);
+        log16.noise(`calling chat.reply, conversationId=${conversationId}`);
         const { usage, model, fallback, finalAgentId } = await chat.reply(message, abortController.signal, metadata);
         if (finalAgentId) {
           ctx.agentId = finalAgentId;
         }
         const durationMs = Date.now() - startTime;
-        log15.noise(`chat.reply completed, conversationId=${conversationId}, usage=`, usage, "model=", model, "fallback=", fallback, "durationMs=", durationMs);
+        log16.noise(`chat.reply completed, conversationId=${conversationId}, usage=`, usage, "model=", model, "fallback=", fallback, "durationMs=", durationMs);
         if (ctx.progressTimer) {
           clearInterval(ctx.progressTimer);
           ctx.progressTimer = void 0;
         }
-        if (ctx.streamingPersisted) {
+        await ctx.persistScheduler.flush();
+        if (ctx.persistScheduler.hasPersistedSkeleton) {
           await messageRepository2.update(aiMessageId, {
             blocks: streamingBlocks,
             senderId: ctx.agentId,
@@ -133649,7 +134281,7 @@ var init_MessageProcessor = __esm({
           model,
           fallback
         });
-        log15.noise(`run.completed, conversationId=${conversationId}, runId=${runId}`);
+        log16.noise(`run.completed, conversationId=${conversationId}, runId=${runId}`);
         this.callbacks.unregisterAbortController(conversationId);
         return { success: true };
       }
@@ -133662,7 +134294,7 @@ var init_MessageProcessor = __esm({
           clearInterval(ctx.progressTimer);
           ctx.progressTimer = void 0;
         }
-        log15.error(`error occurred, conversationId=${conversationId}, runId=${runId}, error=`, err);
+        log16.error(`error occurred, conversationId=${conversationId}, runId=${runId}, error=`, err);
         this.callbacks.unregisterAbortController(conversationId);
         try {
           if (err instanceof DOMException ? err.name === "AbortError" : err instanceof Error && err.name === "AbortError") {
@@ -133679,9 +134311,9 @@ var init_MessageProcessor = __esm({
           }
           if (isRetryableError(err) && retryCount < MAX_RETRIES) {
             const attempt = retryCount + 1;
-            const delay2 = RETRY_DELAY_BASE * Math.pow(2, retryCount);
-            log15.warn(
-              `[Retry] conversationId=${conversationId}, runId=${runId}, messageId=${aiMessageId}, attempt=${attempt}/${MAX_RETRIES}, delay=${delay2}ms, error=${getErrorMessage3(err)}`
+            const delay4 = RETRY_DELAY_BASE * Math.pow(2, retryCount);
+            log16.warn(
+              `[Retry] conversationId=${conversationId}, runId=${runId}, messageId=${aiMessageId}, attempt=${attempt}/${MAX_RETRIES}, delay=${delay4}ms, error=${getErrorMessage3(err)}`
             );
             eventBus.emit({
               type: "run.retrying",
@@ -133690,12 +134322,12 @@ var init_MessageProcessor = __esm({
               messageId: aiMessageId,
               attempt,
               maxAttempts: MAX_RETRIES,
-              delay: delay2
+              delay: delay4
             });
             return {
               success: false,
               shouldRetry: true,
-              retryDelay: delay2,
+              retryDelay: delay4,
               aiMessageId
             };
           }
@@ -133719,53 +134351,17 @@ var init_MessageProcessor = __esm({
           messageCache.delete(aiMessageId);
         }
       }
-      /**
-       * 流式持久化：第一个 block 时 insert 骨架，之后每 2 个 block  update 一次。
-       * 防止中途崩溃导致消息丢失。
-       */
-      persistStreamingBlock(ctx) {
-        const { streamingBlocks, streamingPersisted, aiMessageId, conversationId, agentId, createdAt } = ctx;
-        const { messageRepository: messageRepository2 } = resolveMessageDeps();
-        if (!streamingPersisted) {
-          ctx.streamingPersisted = true;
-          ctx.blockCountSincePersist = 0;
-          messageRepository2.insertWithId(
-            {
-              conversationId,
-              senderId: agentId,
-              senderRole: "agent",
-              blocks: streamingBlocks
-            },
-            { id: aiMessageId, createdAt, updatedAt: Date.now() }
-          ).then(() => {
-            log15.noise(`streaming skeleton persisted, aiMessageId=${aiMessageId}`);
-          }).catch((err) => {
-            log15.warn(`streaming skeleton insert failed, aiMessageId=${aiMessageId}`, err);
-          });
-          return;
-        }
-        ctx.blockCountSincePersist++;
-        if (ctx.blockCountSincePersist >= 2) {
-          ctx.blockCountSincePersist = 0;
-          if (streamingBlocks.length === 0) return;
-          messageRepository2.update(aiMessageId, {
-            blocks: streamingBlocks,
-            updatedAt: Date.now()
-          }).catch((err) => {
-            log15.noise(`streaming update failed, aiMessageId=${aiMessageId}`, err);
-          });
-        }
-      }
       /**
        * 持久化错误消息到数据库
        */
       async persistErrorMessage(ctx, error48) {
-        const { conversationId, aiMessageId, createdAt, startTime, streamingBlocks, agentId, streamingPersisted, model, fallback, metadata, streamingUsage } = ctx;
+        const { conversationId, aiMessageId, createdAt, startTime, streamingBlocks, agentId, model, fallback, metadata, streamingUsage } = ctx;
         const durationMs = Date.now() - startTime;
         const { messageRepository: messageRepository2 } = resolveMessageDeps();
         const usage = Object.keys(streamingUsage).length > 0 ? streamingUsage : void 0;
         try {
-          if (streamingPersisted) {
+          await ctx.persistScheduler.flush();
+          if (ctx.persistScheduler.hasPersistedSkeleton) {
             await messageRepository2.update(aiMessageId, {
               blocks: streamingBlocks,
               ...error48 ? { error: error48 } : {},
@@ -133794,8 +134390,50 @@ var init_MessageProcessor = __esm({
             );
           }
         } catch (persistErr) {
-          log15.error(`failed to persist error message, aiMessageId=${aiMessageId}`, persistErr);
+          log16.error(`failed to persist error message, aiMessageId=${aiMessageId}`, persistErr);
+        }
+      }
+    };
+  }
+});
+
+// src/core/message/queue/PendingDbWrites.ts
+function delay2(ms) {
+  return new Promise((resolve9) => setTimeout(resolve9, ms));
+}
+var log17, PendingDbWrites;
+var init_PendingDbWrites = __esm({
+  "src/core/message/queue/PendingDbWrites.ts"() {
+    "use strict";
+    init_logger();
+    log17 = createLogger("PendingDbWrites");
+    PendingDbWrites = class {
+      pending = /* @__PURE__ */ new Set();
+      track(promise2, label) {
+        const tracked = promise2.then(() => void 0).catch((error48) => {
+          log17.warn(`pending DB write failed: ${label}`, error48);
+        }).finally(() => {
+          this.pending.delete(tracked);
+        });
+        this.pending.add(tracked);
+      }
+      snapshot() {
+        return { pending: this.pending.size };
+      }
+      async drain(timeoutMs) {
+        if (this.pending.size === 0) return "drained";
+        const deadline = Date.now() + timeoutMs;
+        while (this.pending.size > 0) {
+          const remaining = deadline - Date.now();
+          if (remaining <= 0) return "timeout";
+          const batch = [...this.pending];
+          const result = await Promise.race([
+            Promise.allSettled(batch).then(() => "settled"),
+            delay2(remaining).then(() => "timeout")
+          ]);
+          if (result === "timeout") return "timeout";
         }
+        return "drained";
       }
     };
   }
@@ -133817,7 +134455,10 @@ var init_time = __esm({
 function stripSystemTag(content) {
   return content.replace(/\n<current_time>[^<]*<\/current_time>/g, "");
 }
-var log16, MessageQueue, messageQueue;
+function delay3(ms) {
+  return new Promise((resolve9) => setTimeout(resolve9, ms));
+}
+var log18, MessageQueue, messageQueue;
 var init_MessageQueue = __esm({
   "src/core/message/queue/MessageQueue.ts"() {
     "use strict";
@@ -133825,9 +134466,10 @@ var init_MessageQueue = __esm({
     init_message_deps();
     init_ThreadManagerPool();
     init_MessageProcessor();
+    init_PendingDbWrites();
     init_logger();
     init_time();
-    log16 = createLogger("MessageQueue");
+    log18 = createLogger("MessageQueue");
     MessageQueue = class {
       constructor(threadManagerProvider) {
         this.threadManagerProvider = threadManagerProvider;
@@ -133848,7 +134490,7 @@ var init_MessageQueue = __esm({
             this.abortMap.delete(conversationId);
           },
           getThreadManager: (threadId) => this.threadManagerProvider.getManager(threadId)
-        }, this);
+        }, this, this.pendingDbWrites);
       }
       threadManagerProvider;
       queueMap = /* @__PURE__ */ new Map();
@@ -133861,8 +134503,14 @@ var init_MessageQueue = __esm({
       isDestroyed = false;
       processingSet = /* @__PURE__ */ new Set();
       // 通道 ID（单聊=agentId，群线程=threadId）。同线程串行，不同线程可并行
+      processingPromises = /* @__PURE__ */ new Set();
+      pendingDbWrites = new PendingDbWrites();
       processor;
       push(conversationId, message, metadata, queueContext) {
+        if (this.isDestroyed) {
+          log18.warn(`push ignored after destroy, conversationId=${conversationId}`);
+          return;
+        }
         const prev2 = this.queueMap.get(conversationId) || [];
         this.queueMap.set(conversationId, [...prev2, {
           message,
@@ -133871,9 +134519,9 @@ var init_MessageQueue = __esm({
           originalContent: queueContext?.originalContent ?? "",
           hasAttachments: queueContext?.hasAttachments ?? false
         }]);
-        log16.noise(`push: conversationId=${conversationId}, queueLength=${prev2.length + 1}`);
+        log18.noise(`push: conversationId=${conversationId}, queueLength=${prev2.length + 1}`);
         this.emitQueueUpdated(conversationId);
-        this.consume(conversationId);
+        this.startConsume(conversationId);
       }
       getQueuedMessages(conversationId) {
         return this.queueMap.get(conversationId) || [];
@@ -133882,7 +134530,7 @@ var init_MessageQueue = __esm({
         return this.processingSet.has(conversationId);
       }
       stop(conversationId) {
-        log16.noise(`stop: conversationId=${conversationId}`);
+        log18.noise(`stop: conversationId=${conversationId}`);
         this.abortMap.get(conversationId)?.abort();
       }
       /**
@@ -133894,7 +134542,7 @@ var init_MessageQueue = __esm({
         if (!items || items.length === 0) return [];
         const cancelled = items.splice(0);
         this.queueMap.set(conversationId, []);
-        log16.noise(`cancelQueuedMessages: conversationId=${conversationId}, cancelled=${cancelled.length}`);
+        log18.noise(`cancelQueuedMessages: conversationId=${conversationId}, cancelled=${cancelled.length}`);
         this.emitQueueUpdated(conversationId);
         return cancelled;
       }
@@ -133902,7 +134550,7 @@ var init_MessageQueue = __esm({
         return this.runIdMap.get(runId);
       }
       registerRunId(runId, conversationId) {
-        log16.noise(`registerRunId: runId=${runId}, conversationId=${conversationId}`);
+        log18.noise(`registerRunId: runId=${runId}, conversationId=${conversationId}`);
         this.runIdMap.set(runId, conversationId);
         this.conversationRunIdMap.set(conversationId, runId);
       }
@@ -133917,7 +134565,7 @@ var init_MessageQueue = __esm({
       emitQueueUpdated(conversationId) {
         const pending = this.queueMap.get(conversationId)?.length || 0;
         const running = this.processingSet.has(conversationId);
-        log16.noise(
+        log18.noise(
           `emitQueueUpdated: conversationId=${conversationId}, pending=${pending}, running=${running}, processingSet=${this.processingSet.size}`
         );
         eventBus.emit({
@@ -133926,21 +134574,30 @@ var init_MessageQueue = __esm({
           queue: { pending, running }
         });
       }
+      startConsume(conversationId, retryCount = 0) {
+        if (this.isDestroyed) return;
+        const promise2 = this.consume(conversationId, retryCount).catch((error48) => {
+          log18.error(`consume failed, conversationId=${conversationId}`, error48);
+        }).finally(() => {
+          this.processingPromises.delete(promise2);
+        });
+        this.processingPromises.add(promise2);
+      }
       async consume(conversationId, retryCount = 0) {
         if (this.isDestroyed) return;
         if (this.processingSet.has(conversationId)) {
-          log16.noise(`consume: already processing, conversationId=${conversationId}`);
+          log18.noise(`consume: already processing, conversationId=${conversationId}`);
           return;
         }
         const queue = this.queueMap.get(conversationId);
         if (!queue || queue.length === 0) {
-          log16.noise(`consume: no message in queue, conversationId=${conversationId}`);
+          log18.noise(`consume: no message in queue, conversationId=${conversationId}`);
           return;
         }
         const items = queue.splice(0);
         const hasAttachments = items.some((item) => item.hasAttachments);
         this.processingSet.add(conversationId);
-        log16.noise(`consume: start processing, conversationId=${conversationId}, merged=${items.length}, hasAttachments=${hasAttachments}`);
+        log18.noise(`consume: start processing, conversationId=${conversationId}, merged=${items.length}, hasAttachments=${hasAttachments}`);
         this.emitQueueUpdated(conversationId);
         let shouldContinue = false;
         let willRetry = false;
@@ -133954,7 +134611,7 @@ var init_MessageQueue = __esm({
             if (skippedIds.length > 0) {
               await resolveMessageDeps().messageRepository.delete(skippedIds);
               eventBus.emit({ type: "messages.revoked", conversationId, messageIds: skippedIds });
-              log16.noise(`consume: cleaned up ${skippedIds.length} skipped DB messages (attachment conflict)`);
+              log18.noise(`consume: cleaned up ${skippedIds.length} skipped DB messages (attachment conflict)`);
             }
             const result = await this.processor.processMessage(
               conversationId,
@@ -133970,9 +134627,10 @@ var init_MessageQueue = __esm({
               this.queueMap.set(conversationId, [current, ...this.queueMap.get(conversationId) || []]);
               const nextRetryCount = retryCount + 1;
               const timerId = setTimeout(() => {
+                if (this.isDestroyed) return;
                 this.timers.delete(conversationId);
                 this.processingSet.delete(conversationId);
-                this.consume(conversationId, nextRetryCount);
+                this.startConsume(conversationId, nextRetryCount);
               }, result.retryDelay);
               this.timers.set(conversationId, timerId);
               willRetry = true;
@@ -134011,15 +134669,16 @@ ${stripped}`;
               this.queueMap.set(conversationId, [...items, ...this.queueMap.get(conversationId) || []]);
               const nextRetryCount = retryCount + 1;
               const timerId = setTimeout(() => {
+                if (this.isDestroyed) return;
                 this.timers.delete(conversationId);
                 this.processingSet.delete(conversationId);
-                this.consume(conversationId, nextRetryCount);
+                this.startConsume(conversationId, nextRetryCount);
               }, result.retryDelay);
               this.timers.set(conversationId, timerId);
               willRetry = true;
               return;
             }
-            log16.noise(`consume: completed, conversationId=${conversationId}`);
+            log18.noise(`consume: completed, conversationId=${conversationId}`);
             const mergedIds = items.slice(0, -1).map((item) => item.dbMessageId).filter((id) => Boolean(id));
             if (mergedIds.length > 0) {
               await resolveMessageDeps().messageRepository.delete(mergedIds);
@@ -134028,7 +134687,7 @@ ${stripped}`;
                 conversationId,
                 messageIds: mergedIds
               });
-              log16.noise(`consume: cleaned up ${mergedIds.length} merged DB messages`);
+              log18.noise(`consume: cleaned up ${mergedIds.length} merged DB messages`);
             }
             shouldContinue = (this.queueMap.get(conversationId)?.length ?? 0) > 0;
           }
@@ -134039,11 +134698,37 @@ ${stripped}`;
           }
         }
         if (shouldContinue) {
-          log16.noise(`consume: continuing with next message, conversationId=${conversationId}`);
-          await this.consume(conversationId);
+          log18.noise(`consume: continuing with next message, conversationId=${conversationId}`);
+          this.startConsume(conversationId);
+        }
+      }
+      async shutdown(options2 = {}) {
+        const timeoutMs = options2.timeoutMs ?? 3e3;
+        const deadline = Date.now() + timeoutMs;
+        this.isDestroyed = true;
+        for (const timer of this.timers.values()) {
+          clearTimeout(timer);
+        }
+        this.timers.clear();
+        for (const controller of this.abortMap.values()) {
+          controller.abort();
+        }
+        const processingResult = await this.drainProcessing(deadline);
+        if (processingResult === "timeout") {
+          log18.warn(`shutdown timed out waiting for active processing, remaining=${this.processingPromises.size}`);
+        }
+        const dbWritesResult = await this.pendingDbWrites.drain(Math.max(0, deadline - Date.now()));
+        if (dbWritesResult === "timeout") {
+          log18.warn(`shutdown timed out waiting for pending DB writes, remaining=${this.pendingDbWrites.snapshot().pending}`);
+        }
+        this.abortMap.clear();
+        this.processingSet.clear();
+        for (const conversationId of this.queueMap.keys()) {
+          this.emitQueueUpdated(conversationId);
         }
       }
       destroy() {
+        if (this.isDestroyed) return;
         this.isDestroyed = true;
         for (const timer of this.timers.values()) {
           clearTimeout(timer);
@@ -134055,6 +134740,23 @@ ${stripped}`;
         this.abortMap.clear();
         this.processingSet.clear();
       }
+      getPendingDbWritesCount() {
+        return this.pendingDbWrites.snapshot().pending;
+      }
+      async drainProcessing(deadline) {
+        if (this.processingPromises.size === 0) return "drained";
+        while (this.processingPromises.size > 0) {
+          const remaining = deadline - Date.now();
+          if (remaining <= 0) return "timeout";
+          const batch = [...this.processingPromises];
+          const result = await Promise.race([
+            Promise.allSettled(batch).then(() => "settled"),
+            delay3(remaining).then(() => "timeout")
+          ]);
+          if (result === "timeout") return "timeout";
+        }
+        return "drained";
+      }
     };
     messageQueue = new MessageQueue(threadManagerPool);
   }
@@ -134077,7 +134779,7 @@ var init_message2 = __esm({
 });
 
 // src/core/message/MessagePublisher.ts
-var log17, MessagePublisherImpl, messagePublisher;
+var log19, MessagePublisherImpl, messagePublisher;
 var init_MessagePublisher = __esm({
   "src/core/message/MessagePublisher.ts"() {
     "use strict";
@@ -134087,7 +134789,7 @@ var init_MessagePublisher = __esm({
     init_message_deps();
     init_logger();
     init_time();
-    log17 = createLogger("MessagePublisher");
+    log19 = createLogger("MessagePublisher");
     MessagePublisherImpl = class {
       /**
        * 发送用户消息
@@ -134122,7 +134824,7 @@ var init_MessagePublisher = __esm({
             }
           );
         }
-        log17.noise(`published user message, id=${message.id}, conversationId=${conversationId}`);
+        log19.noise(`published user message, id=${message.id}, conversationId=${conversationId}`);
         return message;
       }
       /**
@@ -134144,7 +134846,7 @@ var init_MessagePublisher = __esm({
         });
         await sessionContextStore.saveAgentContext(conversationId, []);
         this.emitAccepted(message);
-        log17.noise(`reset context (single), conversationId=${conversationId}`);
+        log19.noise(`reset context (single), conversationId=${conversationId}`);
         return conversationId;
       }
       /**
@@ -134172,7 +134874,7 @@ var init_MessagePublisher = __esm({
             // 保持 QueueItem 不变量
           );
         }
-        log17.noise(`published system message, id=${message.id}, conversationId=${conversationId}`);
+        log19.noise(`published system message, id=${message.id}, conversationId=${conversationId}`);
         return message;
       }
       /**
@@ -134275,7 +134977,7 @@ var require_logger2 = __commonJS({
     };
     var GREEN = "\x1B[32m";
     var RESET = "\x1B[0m";
-    function log21(level, message, extra) {
+    function log23(level, message, extra) {
       const timestamp = (/* @__PURE__ */ new Date()).toISOString();
       const color = levelColors[level] ?? "";
       const prefix = `[${timestamp}] [PID: ${process.pid}] ${GREEN}[NODE-CRON]${GREEN} ${color}[${level}]${RESET}`;
@@ -134298,23 +135000,23 @@ var require_logger2 = __commonJS({
     }
     var logger40 = {
       info(message) {
-        log21("INFO", message);
+        log23("INFO", message);
       },
       warn(message) {
-        log21("WARN", message);
+        log23("WARN", message);
       },
       error(message, err) {
         if (message instanceof Error) {
-          log21("ERROR", message.message, message);
+          log23("ERROR", message.message, message);
         } else {
-          log21("ERROR", message, err);
+          log23("ERROR", message, err);
         }
       },
       debug(message, err) {
         if (message instanceof Error) {
-          log21("DEBUG", message.message, message);
+          log23("DEBUG", message.message, message);
         } else {
-          log21("DEBUG", message, err);
+          log23("DEBUG", message, err);
         }
       }
     };
@@ -134562,11 +135264,11 @@ var require_runner = __commonJS({
       const maxDelay = 864e5;
       const nextRun = timeMatcher.getNextMatch(currentDate);
       const now2 = /* @__PURE__ */ new Date();
-      const delay2 = nextRun.getTime() - now2.getTime();
-      if (delay2 > maxDelay) {
+      const delay4 = nextRun.getTime() - now2.getTime();
+      if (delay4 > maxDelay) {
         return maxDelay;
       }
-      return Math.max(0, delay2);
+      return Math.max(0, delay4);
     }
     function nowWithoutMs() {
       const date5 = /* @__PURE__ */ new Date();
@@ -135992,7 +136694,7 @@ var init_MemoryUpdateExecutor = __esm({
         for (const block of toolBlocks) {
           const toolCall = block.toolCall;
           if (toolCall.status !== "success") continue;
-          if (toolCall.name !== "write" && toolCall.name !== "edit") continue;
+          if (!["writeFile", "editFile", "write", "edit"].includes(toolCall.name)) continue;
           const output = this.readToolOutput(toolCall.result);
           if (!output?.success || typeof output.path !== "string") continue;
           const relativePath = this.toRelativeWorkspacePath(workspaceDir, output.path);
@@ -140001,23 +140703,23 @@ function getKaiRoot() {
   return config.getAppDataPath();
 }
 function getDbPath() {
-  return (0, import_path19.join)(config.getAppDataPath(), "kai.db");
+  return (0, import_path20.join)(config.getAppDataPath(), "kai.db");
 }
 function getThreadsRoot(groupId) {
-  return (0, import_path19.join)(getGroupDir(groupId), "threads");
+  return (0, import_path20.join)(getGroupDir(groupId), "threads");
 }
 function getThreadMetaPath(groupId, threadId) {
-  return (0, import_path19.join)(getThreadsRoot(groupId), threadId, "meta.json");
+  return (0, import_path20.join)(getThreadsRoot(groupId), threadId, "meta.json");
 }
 async function atomicWriteJson5(filePath, data2) {
-  await (0, import_promises20.mkdir)((0, import_path19.dirname)(filePath), { recursive: true });
+  await (0, import_promises21.mkdir)((0, import_path20.dirname)(filePath), { recursive: true });
   const tmp = `${filePath}.tmp`;
-  await (0, import_promises20.writeFile)(tmp, `${JSON.stringify(data2, null, 2)}
+  await (0, import_promises21.writeFile)(tmp, `${JSON.stringify(data2, null, 2)}
 `, "utf-8");
-  await (0, import_promises20.rename)(tmp, filePath);
+  await (0, import_promises21.rename)(tmp, filePath);
 }
 async function isMigrationNeeded() {
-  const groupsRoot = (0, import_path19.join)(getKaiRoot(), "groups");
+  const groupsRoot = (0, import_path20.join)(getKaiRoot(), "groups");
   if ((0, import_fs13.existsSync)(groupsRoot)) {
     try {
       const { readdir: readdir9 } = await import("fs/promises");
@@ -140025,7 +140727,7 @@ async function isMigrationNeeded() {
       const dirs = entries.filter((e) => e.isDirectory()).map((e) => e.name);
       if (dirs.length > 0) {
         const allMigrated = dirs.every(
-          (g) => (0, import_fs13.existsSync)((0, import_path19.join)(getGroupDir(g), "threads"))
+          (g) => (0, import_fs13.existsSync)((0, import_path20.join)(getGroupDir(g), "threads"))
         );
         if (allMigrated) return false;
       }
@@ -140070,7 +140772,7 @@ async function migrateGroupsToThreads() {
   const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
   const backupPath = `${dbPath}.bak.${timestamp}`;
   logger33.debug(`Backing up database to ${backupPath}`);
-  await (0, import_promises20.copyFile)(dbPath, backupPath);
+  await (0, import_promises21.copyFile)(dbPath, backupPath);
   try {
     logger33.debug("Rebuilding messages table (removing FK)");
     await sequelize.transaction(async (t) => {
@@ -140202,13 +140904,13 @@ async function migrateGroupsToThreads() {
     for (const conv of groupConversations) {
       const row = conv;
       const groupId = row.target_id;
-      const threadsDir = (0, import_path19.join)(getGroupDir(groupId), "threads");
+      const threadsDir = (0, import_path20.join)(getGroupDir(groupId), "threads");
       if (!(0, import_fs13.existsSync)(threadsDir)) continue;
       try {
         const { readdir: readdirAsync } = await import("fs/promises");
         const threadDirs = (await readdirAsync(threadsDir, { withFileTypes: true })).filter((e) => e.isDirectory());
         const hasMeta = threadDirs.some(
-          (td) => (0, import_fs13.existsSync)((0, import_path19.join)(threadsDir, td.name, "meta.json"))
+          (td) => (0, import_fs13.existsSync)((0, import_path20.join)(threadsDir, td.name, "meta.json"))
         );
         if (hasMeta) groupsWithThread++;
       } catch {
@@ -140244,7 +140946,7 @@ async function migrateGroupsToThreads() {
     if ((0, import_fs13.existsSync)(backupPath)) {
       logger33.debug("Restoring database from backup...");
       try {
-        await (0, import_promises20.copyFile)(backupPath, dbPath);
+        await (0, import_promises21.copyFile)(backupPath, dbPath);
         logger33.debug("Database restored from backup");
       } catch (restoreError) {
         logger33.error(
@@ -140259,7 +140961,7 @@ async function migrateGroupsToThreads() {
 async function rollbackThreads() {
   const sequelize = getSequelize();
   const dbPath = getDbPath();
-  const groupsRoot = (0, import_path19.join)(getKaiRoot(), "groups");
+  const groupsRoot = (0, import_path20.join)(getKaiRoot(), "groups");
   if (!(0, import_fs13.existsSync)(groupsRoot)) {
     logger33.debug("No groups directory, nothing to rollback.");
     return;
@@ -140267,7 +140969,7 @@ async function rollbackThreads() {
   const { readdir: readdir9 } = await import("fs/promises");
   const dirs = (await readdir9(groupsRoot, { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
   const hasThreads = dirs.some(
-    (g) => (0, import_fs13.existsSync)((0, import_path19.join)(getGroupDir(g), "threads"))
+    (g) => (0, import_fs13.existsSync)((0, import_path20.join)(getGroupDir(g), "threads"))
   );
   if (!hasThreads) {
     logger33.debug("No threads directories found, nothing to rollback.");
@@ -140282,12 +140984,12 @@ async function rollbackThreads() {
   const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
   const backupPath = `${dbPath}.bak.rollback.${timestamp}`;
   logger33.debug(`Backing up database to ${backupPath}`);
-  await (0, import_promises20.copyFile)(dbPath, backupPath);
+  await (0, import_promises21.copyFile)(dbPath, backupPath);
   try {
     logger33.debug("Restoring group conversations from thread files");
     let restored = 0;
     for (const groupId of dirs) {
-      const threadsDir = (0, import_path19.join)(getGroupDir(groupId), "threads");
+      const threadsDir = (0, import_path20.join)(getGroupDir(groupId), "threads");
       if (!(0, import_fs13.existsSync)(threadsDir)) continue;
       let threadDirs;
       try {
@@ -140298,7 +141000,7 @@ async function rollbackThreads() {
       for (const threadId of threadDirs) {
         const metaPath = getThreadMetaPath(groupId, threadId);
         if (!(0, import_fs13.existsSync)(metaPath)) continue;
-        const raw = await (0, import_promises20.readFile)(metaPath, "utf-8");
+        const raw = await (0, import_promises21.readFile)(metaPath, "utf-8");
         const meta3 = JSON.parse(raw);
         if (!meta3.isDefault) {
           const orphanCount = await sequelize.query(
@@ -140425,9 +141127,9 @@ async function rollbackThreads() {
     logger33.debug("Messages table rebuilt with FK restored");
     logger33.debug("Removing threads directories");
     for (const groupId of dirs) {
-      const threadsDir = (0, import_path19.join)(getGroupDir(groupId), "threads");
+      const threadsDir = (0, import_path20.join)(getGroupDir(groupId), "threads");
       if ((0, import_fs13.existsSync)(threadsDir)) {
-        await (0, import_promises20.rm)(threadsDir, { recursive: true, force: true });
+        await (0, import_promises21.rm)(threadsDir, { recursive: true, force: true });
       }
     }
     const finalRows = await sequelize.query(
@@ -140448,7 +141150,7 @@ async function rollbackThreads() {
     if ((0, import_fs13.existsSync)(backupPath)) {
       logger33.debug("Restoring database from backup...");
       try {
-        await (0, import_promises20.copyFile)(backupPath, dbPath);
+        await (0, import_promises21.copyFile)(backupPath, dbPath);
         logger33.debug("Database restored from backup");
       } catch (restoreError) {
         logger33.error(
@@ -140460,13 +141162,13 @@ async function rollbackThreads() {
     throw error48;
   }
 }
-var import_path19, import_fs13, import_promises20, logger33;
+var import_path20, import_fs13, import_promises21, logger33;
 var init_threads_migration = __esm({
   "src/adapters/db/migration/threads-migration.ts"() {
     "use strict";
-    import_path19 = require("path");
+    import_path20 = require("path");
     import_fs13 = require("fs");
-    import_promises20 = require("fs/promises");
+    import_promises21 = require("fs/promises");
     init_lib();
     init_sequelize();
     init_config();
@@ -140484,13 +141186,13 @@ __export(cron_sqlite_migration_exports, {
   migrateCronSqliteToFileStore: () => migrateCronSqliteToFileStore
 });
 function getDataCronDir2() {
-  return (0, import_path20.join)(config.getAppDataPath(), "data", CRON_DIR2);
+  return (0, import_path21.join)(config.getAppDataPath(), "data", CRON_DIR2);
 }
 function getAgentsDir2() {
-  return (0, import_path20.join)(config.getAppDataPath(), "agents");
+  return (0, import_path21.join)(config.getAppDataPath(), "agents");
 }
 function getGroupsDir2() {
-  return (0, import_path20.join)(config.getAppDataPath(), "groups");
+  return (0, import_path21.join)(config.getAppDataPath(), "groups");
 }
 function parseDatetime(value) {
   if (!value) return 0;
@@ -140508,17 +141210,17 @@ function parseScriptArgs(raw) {
 }
 async function writeJsonAtomic(filePath, data2) {
   const dir = filePath.substring(0, filePath.lastIndexOf("/"));
-  await (0, import_promises21.mkdir)(dir, { recursive: true });
+  await (0, import_promises22.mkdir)(dir, { recursive: true });
   const tmp = `${filePath}.tmp`;
-  await (0, import_promises21.writeFile)(tmp, JSON.stringify(data2, null, 2), "utf-8");
-  await (0, import_promises21.rename)(tmp, filePath);
+  await (0, import_promises22.writeFile)(tmp, JSON.stringify(data2, null, 2), "utf-8");
+  await (0, import_promises22.rename)(tmp, filePath);
 }
 function getTaskDir2(task) {
   if (task.type === "agent" && task.agentId) {
-    return (0, import_path20.join)(getAgentsDir2(), task.agentId, CRON_DIR2);
+    return (0, import_path21.join)(getAgentsDir2(), task.agentId, CRON_DIR2);
   }
   if (task.type === "group" && task.groupId) {
-    return (0, import_path20.join)(getGroupsDir2(), task.groupId, CRON_DIR2);
+    return (0, import_path21.join)(getGroupsDir2(), task.groupId, CRON_DIR2);
   }
   return getDataCronDir2();
 }
@@ -140555,7 +141257,7 @@ async function migrateTasks(sequelize) {
         continue;
       }
       const dir = getTaskDir2(task);
-      const filePath = (0, import_path20.join)(dir, `${task.id}.json`);
+      const filePath = (0, import_path21.join)(dir, `${task.id}.json`);
       if ((0, import_fs14.existsSync)(filePath)) {
         logger34.debug(`Task ${task.id} already exists in filesystem, skipping`);
         continue;
@@ -140588,9 +141290,9 @@ async function migrateExecutions(sequelize) {
   for (const [taskId, execs] of byTask) {
     try {
       const taskDir = await findTaskBaseDir(taskId);
-      const execDir = (0, import_path20.join)(taskDir, taskId);
+      const execDir = (0, import_path21.join)(taskDir, taskId);
       for (const row of execs) {
-        const filePath = (0, import_path20.join)(execDir, `${row.id}.json`);
+        const filePath = (0, import_path21.join)(execDir, `${row.id}.json`);
         if ((0, import_fs14.existsSync)(filePath)) continue;
         const execution = {
           id: row.id,
@@ -140683,15 +141385,15 @@ function rowToTask(row, conversationMap) {
   };
 }
 async function findTaskBaseDir(taskId) {
-  const directGlobalPath = (0, import_path20.join)(getDataCronDir2(), `${taskId}.json`);
+  const directGlobalPath = (0, import_path21.join)(getDataCronDir2(), `${taskId}.json`);
   if ((0, import_fs14.existsSync)(directGlobalPath)) return getDataCronDir2();
   const agentsDir = getAgentsDir2();
   if ((0, import_fs14.existsSync)(agentsDir)) {
     try {
-      const owners = await (0, import_promises21.readdir)(agentsDir);
+      const owners = await (0, import_promises22.readdir)(agentsDir);
       for (const ownerId of owners) {
-        const cronDir = (0, import_path20.join)(agentsDir, ownerId, CRON_DIR2);
-        const filePath = (0, import_path20.join)(cronDir, `${taskId}.json`);
+        const cronDir = (0, import_path21.join)(agentsDir, ownerId, CRON_DIR2);
+        const filePath = (0, import_path21.join)(cronDir, `${taskId}.json`);
         if ((0, import_fs14.existsSync)(filePath)) return cronDir;
       }
     } catch {
@@ -140700,10 +141402,10 @@ async function findTaskBaseDir(taskId) {
   const groupsDir = getGroupsDir2();
   if ((0, import_fs14.existsSync)(groupsDir)) {
     try {
-      const owners = await (0, import_promises21.readdir)(groupsDir);
+      const owners = await (0, import_promises22.readdir)(groupsDir);
       for (const ownerId of owners) {
-        const cronDir = (0, import_path20.join)(groupsDir, ownerId, CRON_DIR2);
-        const filePath = (0, import_path20.join)(cronDir, `${taskId}.json`);
+        const cronDir = (0, import_path21.join)(groupsDir, ownerId, CRON_DIR2);
+        const filePath = (0, import_path21.join)(cronDir, `${taskId}.json`);
         if ((0, import_fs14.existsSync)(filePath)) return cronDir;
       }
     } catch {
@@ -140737,13 +141439,13 @@ async function migrateCronSqliteToFileStore() {
   logger34.debug(`Migrated ${tasksMigrated} tasks and ${execsMigrated} executions to filesystem`);
   await dropLegacyTables(sequelize);
 }
-var import_path20, import_promises21, import_fs14, logger34, CRON_DIR2;
+var import_path21, import_promises22, import_fs14, logger34, CRON_DIR2;
 var init_cron_sqlite_migration = __esm({
   "src/adapters/db/migration/cron-sqlite-migration.ts"() {
     "use strict";
     init_lib();
-    import_path20 = require("path");
-    import_promises21 = require("fs/promises");
+    import_path21 = require("path");
+    import_promises22 = require("fs/promises");
     import_fs14 = require("fs");
     init_config();
     init_logger();
@@ -144409,24 +145111,24 @@ var require_dbcs_codec = __commonJS({
       return this.encodeTable[high];
     };
     DBCSCodec.prototype._setEncodeChar = function(uCode, dbcsCode) {
-      var bucket = this._getEncodeBucket(uCode);
+      var bucket2 = this._getEncodeBucket(uCode);
       var low = uCode & 255;
-      if (bucket[low] <= SEQ_START)
-        this.encodeTableSeq[SEQ_START - bucket[low]][DEF_CHAR] = dbcsCode;
-      else if (bucket[low] == UNASSIGNED)
-        bucket[low] = dbcsCode;
+      if (bucket2[low] <= SEQ_START)
+        this.encodeTableSeq[SEQ_START - bucket2[low]][DEF_CHAR] = dbcsCode;
+      else if (bucket2[low] == UNASSIGNED)
+        bucket2[low] = dbcsCode;
     };
     DBCSCodec.prototype._setEncodeSequence = function(seq, dbcsCode) {
       var uCode = seq[0];
-      var bucket = this._getEncodeBucket(uCode);
+      var bucket2 = this._getEncodeBucket(uCode);
       var low = uCode & 255;
       var node;
-      if (bucket[low] <= SEQ_START) {
-        node = this.encodeTableSeq[SEQ_START - bucket[low]];
+      if (bucket2[low] <= SEQ_START) {
+        node = this.encodeTableSeq[SEQ_START - bucket2[low]];
       } else {
         node = {};
-        if (bucket[low] !== UNASSIGNED) node[DEF_CHAR] = bucket[low];
-        bucket[low] = SEQ_START - this.encodeTableSeq.length;
+        if (bucket2[low] !== UNASSIGNED) node[DEF_CHAR] = bucket2[low];
+        bucket2[low] = SEQ_START - this.encodeTableSeq.length;
         this.encodeTableSeq.push(node);
       }
       for (var j = 1; j < seq.length - 1; j++) {
@@ -146915,9 +147617,9 @@ var require_timers = __commonJS({
        * before the specified function or code is executed.
        * @param {*} arg
        */
-      constructor(callback, delay2, arg) {
+      constructor(callback, delay4, arg) {
         this._onTimeout = callback;
-        this._idleTimeout = delay2;
+        this._idleTimeout = delay4;
         this._timerArg = arg;
         this.refresh();
       }
@@ -146962,8 +147664,8 @@ var require_timers = __commonJS({
        * when the timer expires.
        * @returns {NodeJS.Timeout|FastTimer}
        */
-      setTimeout(callback, delay2, arg) {
-        return delay2 <= RESOLUTION_MS ? setTimeout(callback, delay2, arg) : new FastTimer(callback, delay2, arg);
+      setTimeout(callback, delay4, arg) {
+        return delay4 <= RESOLUTION_MS ? setTimeout(callback, delay4, arg) : new FastTimer(callback, delay4, arg);
       },
       /**
        * The clearTimeout method cancels an instantiated Timer previously created
@@ -146989,8 +147691,8 @@ var require_timers = __commonJS({
        * when the timer expires.
        * @returns {FastTimer}
        */
-      setFastTimeout(callback, delay2, arg) {
-        return new FastTimer(callback, delay2, arg);
+      setFastTimeout(callback, delay4, arg) {
+        return new FastTimer(callback, delay4, arg);
       },
       /**
        * The clearTimeout method cancels an instantiated FastTimer previously
@@ -147016,8 +147718,8 @@ var require_timers = __commonJS({
        * @deprecated
        * @param {number} [delay=0] The delay in milliseconds to add to the now value.
        */
-      tick(delay2 = 0) {
-        fastNow += delay2 - RESOLUTION_MS + 1;
+      tick(delay4 = 0) {
+        fastNow += delay4 - RESOLUTION_MS + 1;
         onTick();
         onTick();
       },
@@ -153410,21 +154112,21 @@ var require_client_h1 = __commonJS({
         this.connection = "";
         this.maxResponseSize = client[kMaxResponseSize];
       }
-      setTimeout(delay2, type) {
-        if (delay2 !== this.timeoutValue || type & USE_FAST_TIMER ^ this.timeoutType & USE_FAST_TIMER) {
+      setTimeout(delay4, type) {
+        if (delay4 !== this.timeoutValue || type & USE_FAST_TIMER ^ this.timeoutType & USE_FAST_TIMER) {
           if (this.timeout) {
             timers.clearTimeout(this.timeout);
             this.timeout = null;
           }
-          if (delay2) {
+          if (delay4) {
             if (type & USE_FAST_TIMER) {
-              this.timeout = timers.setFastTimeout(onParserTimeout, delay2, new WeakRef(this));
+              this.timeout = timers.setFastTimeout(onParserTimeout, delay4, new WeakRef(this));
             } else {
-              this.timeout = setTimeout(onParserTimeout, delay2, new WeakRef(this));
+              this.timeout = setTimeout(onParserTimeout, delay4, new WeakRef(this));
               this.timeout?.unref();
             }
           }
-          this.timeoutValue = delay2;
+          this.timeoutValue = delay4;
         } else if (this.timeout) {
           if (this.timeout.refresh) {
             this.timeout.refresh();
@@ -159290,7 +159992,7 @@ var require_mock_utils = __commonJS({
       if (mockDispatch2.data.callback) {
         mockDispatch2.data = { ...mockDispatch2.data, ...mockDispatch2.data.callback(opts) };
       }
-      const { data: { statusCode, data: data2, headers, trailers, error: error48 }, delay: delay2, persist } = mockDispatch2;
+      const { data: { statusCode, data: data2, headers, trailers, error: error48 }, delay: delay4, persist } = mockDispatch2;
       const { timesInvoked, times } = mockDispatch2;
       mockDispatch2.consumed = !persist && timesInvoked >= times;
       mockDispatch2.pending = timesInvoked < times;
@@ -159313,11 +160015,11 @@ var require_mock_utils = __commonJS({
         handler.onError(err);
       }
       handler.onConnect?.(abort, null);
-      if (typeof delay2 === "number" && delay2 > 0) {
+      if (typeof delay4 === "number" && delay4 > 0) {
         timer = setTimeout(() => {
           timer = null;
           handleReply(this[kDispatches]);
-        }, delay2);
+        }, delay4);
       } else {
         handleReply(this[kDispatches]);
       }
@@ -159687,13 +160389,13 @@ var require_mock_call_history = __commonJS({
     function makeFilterCalls(parameterName) {
       return (parameterValue) => {
         if (typeof parameterValue === "string" || parameterValue == null) {
-          return this.logs.filter((log21) => {
-            return log21[parameterName] === parameterValue;
+          return this.logs.filter((log23) => {
+            return log23[parameterName] === parameterValue;
           });
         }
         if (parameterValue instanceof RegExp) {
-          return this.logs.filter((log21) => {
-            return parameterValue.test(log21[parameterName]);
+          return this.logs.filter((log23) => {
+            return parameterValue.test(log23[parameterName]);
           });
         }
         throw new InvalidArgumentError3(`${parameterName} parameter should be one of string, regexp, undefined or null`);
@@ -159788,8 +160490,8 @@ var require_mock_call_history = __commonJS({
           return this.logs.filter(criteria);
         }
         if (criteria instanceof RegExp) {
-          return this.logs.filter((log21) => {
-            return criteria.test(log21.toString());
+          return this.logs.filter((log23) => {
+            return criteria.test(log23.toString());
           });
         }
         if (typeof criteria === "object" && criteria !== null) {
@@ -159839,13 +160541,13 @@ var require_mock_call_history = __commonJS({
         this.logs = [];
       }
       [kMockCallHistoryAddLog](requestInit) {
-        const log21 = new MockCallHistoryLog(requestInit);
-        this.logs.push(log21);
-        return log21;
+        const log23 = new MockCallHistoryLog(requestInit);
+        this.logs.push(log23);
+        return log23;
       }
       *[Symbol.iterator]() {
-        for (const log21 of this.calls()) {
-          yield log21;
+        for (const log23 of this.calls()) {
+          yield log23;
         }
       }
     };
@@ -160230,7 +160932,7 @@ var require_snapshot_utils = __commonJS({
 var require_snapshot_recorder = __commonJS({
   "node_modules/undici/lib/mock/snapshot-recorder.js"(exports2, module2) {
     "use strict";
-    var { writeFile: writeFile15, readFile: readFile18, mkdir: mkdir14 } = require("node:fs/promises");
+    var { writeFile: writeFile15, readFile: readFile18, mkdir: mkdir15 } = require("node:fs/promises");
     var { dirname: dirname9, resolve: resolve9 } = require("node:path");
     var { setTimeout: setTimeout2, clearTimeout: clearTimeout2 } = require("node:timers");
     var { InvalidArgumentError: InvalidArgumentError3, UndiciError } = require_errors3();
@@ -160462,7 +161164,7 @@ var require_snapshot_recorder = __commonJS({
           throw new InvalidArgumentError3("Snapshot path is required");
         }
         const resolvedPath = resolve9(path10);
-        await mkdir14(dirname9(resolvedPath), { recursive: true });
+        await mkdir15(dirname9(resolvedPath), { recursive: true });
         const data2 = Array.from(this.#snapshots.entries()).map(([hash2, snapshot]) => ({
           hash: hash2,
           snapshot
@@ -189145,14 +189847,14 @@ var require_turndown_cjs = __commonJS({
         } else if (node.nodeType === 1) {
           replacement = replacementForNode.call(self2, node);
         }
-        return join20(output, replacement);
+        return join21(output, replacement);
       }, "");
     }
     function postProcess(output) {
       var self2 = this;
       this.rules.forEach(function(rule) {
         if (typeof rule.append === "function") {
-          output = join20(output, rule.append(self2.options));
+          output = join21(output, rule.append(self2.options));
         }
       });
       return output.replace(/^[\t\r\n]+/, "").replace(/[\t\r\n\s]+$/, "");
@@ -189164,7 +189866,7 @@ var require_turndown_cjs = __commonJS({
       if (whitespace2.leading || whitespace2.trailing) content = content.trim();
       return whitespace2.leading + rule.replacement(content, node, this.options) + whitespace2.trailing;
     }
-    function join20(output, replacement) {
+    function join21(output, replacement) {
       var s1 = trimTrailingNewlines(output);
       var s2 = trimLeadingNewlines(replacement);
       var nls = Math.max(output.length - s1.length, replacement.length - s2.length);
@@ -189263,9 +189965,9 @@ var McpManager = class {
         if (attempt === maxRetries - 1) {
           break;
         }
-        const delay2 = Math.pow(2, attempt) * 100;
-        logger2.debug(`Tool ${name21} failed (attempt ${attempt + 1}/${maxRetries}), retrying in ${delay2}ms...`);
-        await new Promise((resolve9) => setTimeout(resolve9, delay2));
+        const delay4 = Math.pow(2, attempt) * 100;
+        logger2.debug(`Tool ${name21} failed (attempt ${attempt + 1}/${maxRetries}), retrying in ${delay4}ms...`);
+        await new Promise((resolve9) => setTimeout(resolve9, delay4));
       }
     }
     throw lastError || new Error(`Tool ${name21} execution failed after ${maxRetries} attempts`);
@@ -189618,8 +190320,8 @@ var SessionCleaner = class {
       for (const dir of dirs) {
         const fullPath = import_path6.default.join(sessionsDir, dir);
         try {
-          const stat4 = await import_promises4.default.stat(fullPath);
-          if (stat4.isDirectory() && stat4.mtimeMs < cutoffTime) {
+          const stat5 = await import_promises4.default.stat(fullPath);
+          if (stat5.isDirectory() && stat5.mtimeMs < cutoffTime) {
             await import_promises4.default.rm(fullPath, { recursive: true, force: true });
             cleaned++;
             logger7.debug("Removed old session:", dir);
@@ -189893,11 +190595,11 @@ var WeComBotClient = class {
   scheduleReconnect() {
     if (this.reconnectTimer || this.disposed || this.intentionalDisconnect) return;
     this.reconnectAttempts += 1;
-    const delay2 = Math.min(
+    const delay4 = Math.min(
       INITIAL_RECONNECT_DELAY_MS * 2 ** (this.reconnectAttempts - 1),
       MAX_RECONNECT_DELAY_MS
     );
-    log2.info(`schedule reconnect in ${delay2}ms, attempt=${this.reconnectAttempts}`);
+    log2.info(`schedule reconnect in ${delay4}ms, attempt=${this.reconnectAttempts}`);
     this.setState("reconnecting");
     this.reconnectTimer = setTimeout(() => {
       this.reconnectTimer = null;
@@ -189907,7 +190609,7 @@ var WeComBotClient = class {
           this.scheduleReconnect();
         }
       });
-    }, delay2);
+    }, delay4);
   }
   clearReconnectTimer() {
     if (!this.reconnectTimer) return;
@@ -191620,7 +192322,7 @@ function checkSendFilePolicy(resolvedPath) {
 // src/adapters/channel/shared/ChannelManager.ts
 var import_promises13 = require("node:fs/promises");
 init_config();
-var log18 = createLogger("ChannelManager");
+var log20 = createLogger("ChannelManager");
 var ChannelManager = class {
   adapters = /* @__PURE__ */ new Map();
   configStore;
@@ -191656,7 +192358,7 @@ var ChannelManager = class {
     this.adapters.set(config3.connectionId, adapter2);
     this.subscribeAdapter(config3.connectionId, adapter2);
     await adapter2.connect();
-    log18.info(`registered channel: ${config3.connectionId}`);
+    log20.info(`registered channel: ${config3.connectionId}`);
   }
   /** 更新已注册接入的绑定目标 */
   async updateTarget(connectionId, target) {
@@ -191669,7 +192371,7 @@ var ChannelManager = class {
     this.adapters.set(connectionId, adapter2);
     this.subscribeAdapter(connectionId, adapter2);
     await adapter2.connect();
-    log18.info(`updated target for channel: ${connectionId}`);
+    log20.info(`updated target for channel: ${connectionId}`);
   }
   /** 连接已注册的接入 */
   async connect(connectionId) {
@@ -191704,7 +192406,7 @@ var ChannelManager = class {
       await this.secretStore.delete(config3.secretRef);
       await this.configStore.delete(connectionId);
     }
-    log18.info(`unregistered channel: ${connectionId}`);
+    log20.info(`unregistered channel: ${connectionId}`);
   }
   /** 发送消息到外部 */
   async send(reply) {
@@ -191767,11 +192469,11 @@ var ChannelManager = class {
         this.subscribeAdapter(config3.connectionId, adapter2);
         await adapter2.connect();
       } catch (error48) {
-        log18.error(`failed to init channel ${config3.connectionId}:`, error48);
+        log20.error(`failed to init channel ${config3.connectionId}:`, error48);
       }
     }
     this.initialized = true;
-    log18.info(`channel manager initialized, adapters=${this.adapters.size}`);
+    log20.info(`channel manager initialized, adapters=${this.adapters.size}`);
   }
   /** 清理所有资源（app quit 时调用） */
   async dispose() {
@@ -191783,9 +192485,9 @@ var ChannelManager = class {
         if (adapter2?.stream) {
           try {
             await adapter2.stream.finish(pending.streamFrame, pending.streamId, "\u26A0\uFE0F \u7CFB\u7EDF\u5173\u95ED");
-            log18.info(`stream finished (dispose): runId=${runId}`);
+            log20.info(`stream finished (dispose): runId=${runId}`);
           } catch (err) {
-            log18.warn(`stream finish failed during dispose: runId=${runId}`, err);
+            log20.warn(`stream finish failed during dispose: runId=${runId}`, err);
           }
         }
       }
@@ -191794,7 +192496,7 @@ var ChannelManager = class {
       try {
         await adapter2.disconnect();
       } catch (error48) {
-        log18.warn(`disconnect failed: ${connectionId}`, error48);
+        log20.warn(`disconnect failed: ${connectionId}`, error48);
       }
       adapter2.dispose();
     }
@@ -191868,7 +192570,7 @@ var ChannelManager = class {
     switch (event.type) {
       case "message.received":
         if (this.dedupe.isProcessed(event.message.channelType, event.message.connectionId, event.message.id)) {
-          log18.info(`skip duplicated inbound message: ${event.message.id}`);
+          log20.info(`skip duplicated inbound message: ${event.message.id}`);
           return;
         }
         if (this.aggregator.enabled) {
@@ -191878,10 +192580,10 @@ var ChannelManager = class {
         }
         return;
       case "status.changed":
-        log18.info(`channel status changed: ${connectionId} -> ${event.status.state}`);
+        log20.info(`channel status changed: ${connectionId} -> ${event.status.state}`);
         return;
       case "error":
-        log18.warn(`channel error: ${connectionId} ${event.error.code} ${event.error.message}`);
+        log20.warn(`channel error: ${connectionId} ${event.error.code} ${event.error.message}`);
         return;
       default: {
         const exhaustive = event;
@@ -191897,12 +192599,12 @@ var ChannelManager = class {
   }
   async routeInboundMessage(message) {
     if (this.dedupe.isProcessed(message.channelType, message.connectionId, message.id)) {
-      log18.info(`skip duplicated inbound message: ${message.id}`);
+      log20.info(`skip duplicated inbound message: ${message.id}`);
       return;
     }
     const config3 = await this.configStore.get(message.connectionId);
     if (!config3) {
-      log18.warn(`channel config not found for inbound message: ${message.connectionId}`);
+      log20.warn(`channel config not found for inbound message: ${message.connectionId}`);
       return;
     }
     try {
@@ -191913,7 +192615,7 @@ var ChannelManager = class {
       }
       this.dedupe.markProcessed(message.channelType, message.connectionId, message.id);
     } catch (error48) {
-      log18.error(`failed to route inbound message ${message.id}:`, error48);
+      log20.error(`failed to route inbound message ${message.id}:`, error48);
     }
   }
   async deliverToAgent(config3, message) {
@@ -192035,9 +192737,9 @@ var ChannelManager = class {
       if (adapter2.sendTyping) {
         try {
           await adapter2.sendTyping(pending.chatId, pending.chatType);
-          log18.noise(`typing sent: runId=${runId}, chatId=${pending.chatId}`);
+          log20.noise(`typing sent: runId=${runId}, chatId=${pending.chatId}`);
         } catch (err) {
-          log18.noise(`typing send failed: ${err instanceof Error ? err.message : String(err)}`);
+          log20.noise(`typing send failed: ${err instanceof Error ? err.message : String(err)}`);
         }
       }
       return;
@@ -192045,10 +192747,10 @@ var ChannelManager = class {
     try {
       await adapter2.stream.start(pending.streamFrame, pending.streamId);
       pending.streamStarted = true;
-      log18.noise(`stream started: runId=${runId}, streamId=${pending.streamId}`);
+      log20.noise(`stream started: runId=${runId}, streamId=${pending.streamId}`);
     } catch (err) {
       pending.streamStarted = false;
-      log18.warn(`stream start failed, will fallback to send on completed: ${err instanceof Error ? err.message : String(err)}`);
+      log20.warn(`stream start failed, will fallback to send on completed: ${err instanceof Error ? err.message : String(err)}`);
     }
   }
   /** message.block.updated → 刷新流式内容 */
@@ -192063,14 +192765,14 @@ var ChannelManager = class {
     try {
       await adapter2.stream.update(pending.streamFrame, pending.streamId, block.text);
     } catch (err) {
-      log18.noise(`stream update failed: ${err instanceof Error ? err.message : String(err)}`);
+      log20.noise(`stream update failed: ${err instanceof Error ? err.message : String(err)}`);
     }
   }
   /** run.completed → 结束流式回复（或降级为一次性 send） */
   async handleRunCompleted(conversationId, runId, messageId) {
     const pending = this.pendingReplies.get(runId);
     if (!pending) {
-      log18.warn(`handleRunCompleted: no pending reply for runId=${runId}, conversationId=${conversationId}`);
+      log20.warn(`handleRunCompleted: no pending reply for runId=${runId}, conversationId=${conversationId}`);
       return;
     }
     this.pendingReplies.delete(runId);
@@ -192078,20 +192780,20 @@ var ChannelManager = class {
     try {
       const assistantMsg = await messageRepository.findById(messageId);
       if (!assistantMsg || assistantMsg.senderRole !== "agent") {
-        log18.warn(`no assistant reply found for channel outbound: ${conversationId}, messageId=${messageId}`);
+        log20.warn(`no assistant reply found for channel outbound: ${conversationId}, messageId=${messageId}`);
         return;
       }
       await this.sendFilesFromBlocks(pending, assistantMsg.blocks);
       const text4 = assistantMsg.blocks.filter((b) => b.type === "text").map((b) => b.text).join("");
       if (!text4) {
-        log18.info(`assistant reply has no text, skip text outbound: ${conversationId}`);
+        log20.info(`assistant reply has no text, skip text outbound: ${conversationId}`);
         return;
       }
       if (pending.streamStarted) {
         const adapter2 = this.adapters.get(pending.connectionId);
         if (adapter2?.stream) {
           await adapter2.stream.finish(pending.streamFrame, pending.streamId, text4);
-          log18.info(`stream finished: conversationId=${conversationId}`);
+          log20.info(`stream finished: conversationId=${conversationId}`);
           return;
         }
       }
@@ -192103,12 +192805,12 @@ var ChannelManager = class {
       };
       const result = await this.send(reply);
       if (result.ok) {
-        log18.info(`channel reply sent: conversationId=${conversationId}`);
+        log20.info(`channel reply sent: conversationId=${conversationId}`);
       } else {
-        log18.error(`channel reply failed: ${result.code} ${result.message}`);
+        log20.error(`channel reply failed: ${result.code} ${result.message}`);
       }
     } catch (error48) {
-      log18.error(`channel reply error:`, error48);
+      log20.error(`channel reply error:`, error48);
     }
   }
   /** 清理 run 失败/停止时的残留上下文（含流式会话收尾） */
@@ -192119,9 +192821,9 @@ var ChannelManager = class {
       if (adapter2?.stream) {
         try {
           await adapter2.stream.finish(pending.streamFrame, pending.streamId, "\u26A0\uFE0F \u56DE\u590D\u51FA\u9519");
-          log18.info(`stream finished (run cleanup): conversationId=${conversationId}, runId=${runId}`);
+          log20.info(`stream finished (run cleanup): conversationId=${conversationId}, runId=${runId}`);
         } catch (err) {
-          log18.warn(`stream finish failed during cleanup: ${err instanceof Error ? err.message : String(err)}`);
+          log20.warn(`stream finish failed during cleanup: ${err instanceof Error ? err.message : String(err)}`);
         }
       }
     }
@@ -192132,28 +192834,28 @@ var ChannelManager = class {
   async sendFilesFromBlocks(pending, blocks) {
     const adapter2 = this.adapters.get(pending.connectionId);
     if (!adapter2) {
-      log18.error(`sendFilesFromBlocks: adapter not found for connectionId=${pending.connectionId}`);
+      log20.error(`sendFilesFromBlocks: adapter not found for connectionId=${pending.connectionId}`);
       return;
     }
     const failures = [];
     let total = 0;
-    log18.info(`sendFilesFromBlocks: scanning ${blocks.length} blocks, channelType=${pending.channelType}`);
+    log20.info(`sendFilesFromBlocks: scanning ${blocks.length} blocks, channelType=${pending.channelType}`);
     for (const block of blocks) {
       if (block.type === "tool") {
         const toolCall = block.toolCall;
         if (toolCall.name !== "sendFile" || toolCall.status !== "success") continue;
         const filePath = this.extractSendFilePath(toolCall.args);
-        log18.info(`sendFilesFromBlocks: found sendFile toolCall, filePath=${filePath}, args=${JSON.stringify(toolCall.args)}`);
+        log20.info(`sendFilesFromBlocks: found sendFile toolCall, filePath=${filePath}, args=${JSON.stringify(toolCall.args)}`);
         if (!filePath) continue;
         total++;
         try {
           await this.assertSendableFilePath(filePath);
           await adapter2.sendFile(pending.chatId, filePath, pending.chatType);
-          log18.info(`channel file sent: ${pending.channelType} -> ${filePath}`);
+          log20.info(`channel file sent: ${pending.channelType} -> ${filePath}`);
         } catch (err) {
           const msg = err instanceof Error ? err.message : String(err);
           failures.push(`${filePath}: ${msg}`);
-          log18.error(`channel file send failed: ${pending.channelType} -> ${msg}`);
+          log20.error(`channel file send failed: ${pending.channelType} -> ${msg}`);
         }
         continue;
       }
@@ -192166,17 +192868,17 @@ var ChannelManager = class {
             const absolutePath = await attachmentStorage.getAttachmentPath(att.path);
             await this.assertSendableFilePath(absolutePath);
             await adapter2.sendFile(pending.chatId, absolutePath, pending.chatType);
-            log18.info(`channel image sent: ${pending.channelType} -> ${absolutePath}`);
+            log20.info(`channel image sent: ${pending.channelType} -> ${absolutePath}`);
           } catch (err) {
             const msg = err instanceof Error ? err.message : String(err);
             failures.push(`${att.path}: ${msg}`);
-            log18.error(`channel image send failed: ${pending.channelType} -> ${msg}`);
+            log20.error(`channel image send failed: ${pending.channelType} -> ${msg}`);
           }
         }
       }
     }
     if (failures.length > 0) {
-      log18.error(`sendFiles: ${failures.length}/${total} files failed: ${failures.join("; ")}`);
+      log20.error(`sendFiles: ${failures.length}/${total} files failed: ${failures.join("; ")}`);
     }
   }
   extractSendFilePath(args2) {
@@ -211498,6 +212200,7 @@ var DESKTOP_ONLY_CHANNELS = /* @__PURE__ */ new Set([
   IPC_OPEN_EXTERNAL_URL,
   IPC_OPEN_LOCAL_PATH,
   IPC_SHOW_LOCAL_ITEM_IN_FOLDER,
+  IPC_COPY_IMAGE_TO_CLIPBOARD,
   IPC_OPEN_ATTACHMENT
 ]);
 var RpcRouter = class {
@@ -211553,12 +212256,83 @@ function registerRpc(channel, handler) {
 
 // src/electron/main/telemetry/MainTelemetryService.ts
 init_logger();
+
+// src/electron/main/telemetry/TelemetryPolicy.ts
+var DEFAULT_UPLOAD_ALLOWLIST = /* @__PURE__ */ new Set([
+  "app.started",
+  "conversation.created",
+  "conversation.deleted",
+  "session.created",
+  "session.deleted",
+  "message.sent",
+  "message.stopped",
+  "group.thread.created",
+  "update.check",
+  "update.available",
+  "feedback.sent",
+  "run_completed",
+  "llm_call_finished",
+  "crash.summary",
+  "memory.alert"
+]);
+var BLOCKED_PROPERTY_PATTERN = /(prompt|content|messageText|response|stack|path|file|directory|command|stdout|stderr|url|query|apikey|api_key|secret|password|authorization|cookie)/i;
+var MAX_PROPERTIES = 50;
+var MAX_STRING_LENGTH2 = 200;
+var DefaultTelemetryPolicy = class {
+  constructor(allowlist = DEFAULT_UPLOAD_ALLOWLIST) {
+    this.allowlist = allowlist;
+  }
+  allowlist;
+  shouldUploadEventName(name21) {
+    return this.allowlist.has(name21);
+  }
+  sanitizeProperties(name21, properties) {
+    if (!properties) return void 0;
+    const out = {};
+    let count = 0;
+    for (const [rawKey, value] of Object.entries(properties)) {
+      if (count >= MAX_PROPERTIES) break;
+      const key = rawKey.trim();
+      if (!key || key.length > 100 || BLOCKED_PROPERTY_PATTERN.test(key)) continue;
+      if (typeof value === "string") {
+        out[key] = normalizeStringProperty(key, value);
+        count++;
+      } else if (typeof value === "number" && Number.isFinite(value)) {
+        out[key] = bucketNumberIfNeeded(key, value);
+        count++;
+      } else if (typeof value === "boolean") {
+        out[key] = value;
+        count++;
+      }
+    }
+    return Object.keys(out).length > 0 ? out : void 0;
+  }
+};
+var defaultTelemetryPolicy = new DefaultTelemetryPolicy();
+function normalizeStringProperty(key, value) {
+  return value.slice(0, MAX_STRING_LENGTH2);
+}
+function bucketNumberIfNeeded(key, value) {
+  if (/duration|latency|elapsed/i.test(key)) return bucket(value, [1e3, 3e3, 1e4, 3e4, 6e4], "ms");
+  if (/token/i.test(key)) return bucket(value, [1e3, 4e3, 16e3, 64e3, 128e3], "tokens");
+  if (/length|size|bytes|count/i.test(key)) return bucket(value, [1, 10, 100, 1e3, 1e4], "count");
+  if (/rss|heap|memory/i.test(key)) return bucket(value, [256, 512, 1024, 1536, 2200, 4096], "mb");
+  return value;
+}
+function bucket(value, limits, suffix) {
+  for (const limit of limits) {
+    if (value <= limit) return `<=${limit}${suffix}`;
+  }
+  return `>${limits[limits.length - 1]}${suffix}`;
+}
+
+// src/electron/main/telemetry/MainTelemetryService.ts
 var logger22 = createLogger("telemetry");
 function sanitizeEventName(value) {
   if (typeof value !== "string") return "";
   return value.trim().slice(0, 200);
 }
-function sanitizeProperties(input) {
+function sanitizeProperties(name21, input) {
   if (!input || typeof input !== "object" || Array.isArray(input)) return void 0;
   const out = {};
   let count = 0;
@@ -211577,7 +212351,7 @@ function sanitizeProperties(input) {
       count++;
     }
   }
-  return Object.keys(out).length > 0 ? out : void 0;
+  return defaultTelemetryPolicy.sanitizeProperties(name21, Object.keys(out).length > 0 ? out : void 0);
 }
 function sanitizeFeedback(input) {
   if (!input || typeof input !== "object") return null;
@@ -211611,7 +212385,8 @@ var MainTelemetryService = class {
   }
   track(name21, properties) {
     try {
-      this.client.track(name21, properties);
+      if (!defaultTelemetryPolicy.shouldUploadEventName(name21)) return;
+      this.client.track(name21, defaultTelemetryPolicy.sanitizeProperties(name21, properties));
     } catch (err) {
       logger22.debug("telemetry track ignored", err);
     }
@@ -211669,7 +212444,7 @@ var MainTelemetryService = class {
     registerRpc(IPC_TELEMETRY_TRACK, (name21, properties) => {
       const safeName = sanitizeEventName(name21);
       if (!safeName) return;
-      this.track(safeName, sanitizeProperties(properties));
+      this.track(safeName, sanitizeProperties(safeName, properties));
     });
     registerRpc(IPC_TELEMETRY_FEEDBACK, async (feedback) => {
       const safe = sanitizeFeedback(feedback);
@@ -211781,7 +212556,8 @@ function withLlmLanguageTelemetry(model, context2) {
           ok: true,
           streaming: false,
           durationMs: Date.now() - startedAt,
-          finishReason: result.finishReason?.unified
+          finishReason: result.finishReason?.unified,
+          ...summarizeUsage(result.usage)
         });
         return result;
       } catch (error48) {
@@ -211913,6 +212689,11 @@ function sanitizeLlmTelemetry(event) {
   addBoolean(properties, "hasFiles", event.hasFiles);
   addBoolean(properties, "hasTools", event.hasTools);
   addString(properties, "finishReason", event.finishReason);
+  addNumber(properties, "inputTokens", event.inputTokens);
+  addNumber(properties, "outputTokens", event.outputTokens);
+  addNumber(properties, "totalTokens", event.totalTokens);
+  addNumber(properties, "cachedInputTokens", event.cachedInputTokens);
+  addNumber(properties, "reasoningTokens", event.reasoningTokens);
   return properties;
 }
 function summarizeLanguageInput(params) {
@@ -211955,12 +212736,14 @@ function summarizeImageInput(params) {
 function instrumentStream(stream, context2, input, startedAt) {
   let captured = false;
   let finishReason;
+  let usage;
   const captureOnce = (event) => {
     if (captured) return;
     captured = true;
     captureLlmCallFinished({
       ...context2,
       ...input,
+      ...usage,
       ...event,
       streaming: true,
       durationMs: Date.now() - startedAt
@@ -211970,6 +212753,7 @@ function instrumentStream(stream, context2, input, startedAt) {
     transform(chunk, controller) {
       if (isStreamFinishChunk(chunk)) {
         finishReason = chunk.finishReason?.unified;
+        usage = summarizeUsage(chunk.usage);
       } else if (isStreamErrorChunk(chunk)) {
         captureOnce({ ok: false, ...classifyLlmError(chunk.error) });
       }
@@ -211986,6 +212770,28 @@ function isStreamFinishChunk(chunk) {
 function isStreamErrorChunk(chunk) {
   return !!chunk && typeof chunk === "object" && chunk.type === "error";
 }
+function summarizeUsage(usage) {
+  if (!usage || typeof usage !== "object") return void 0;
+  const record2 = usage;
+  const inputTokens = getFiniteNumber(record2.inputTokens);
+  const outputTokens = getFiniteNumber(record2.outputTokens);
+  const totalTokens = getFiniteNumber(record2.totalTokens) ?? (typeof inputTokens === "number" || typeof outputTokens === "number" ? (inputTokens ?? 0) + (outputTokens ?? 0) : void 0);
+  const cachedInputTokens = getFiniteNumber(record2.cachedInputTokens);
+  const reasoningTokens = getFiniteNumber(record2.reasoningTokens);
+  if (inputTokens === void 0 && outputTokens === void 0 && totalTokens === void 0 && cachedInputTokens === void 0 && reasoningTokens === void 0) {
+    return void 0;
+  }
+  const summarizedUsage = {};
+  setUsageField(summarizedUsage, "inputTokens", inputTokens);
+  setUsageField(summarizedUsage, "outputTokens", outputTokens);
+  setUsageField(summarizedUsage, "totalTokens", totalTokens);
+  setUsageField(summarizedUsage, "cachedInputTokens", cachedInputTokens);
+  setUsageField(summarizedUsage, "reasoningTokens", reasoningTokens);
+  return summarizedUsage;
+}
+function getFiniteNumber(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
 function isLanguageModelV3(model) {
   return typeof model === "object" && model !== null && model.specificationVersion === "v3";
 }
@@ -212036,6 +212842,11 @@ function addNumber(properties, key, value) {
 function addBoolean(properties, key, value) {
   if (typeof value === "boolean") properties[key] = value;
 }
+function setUsageField(usage, key, value) {
+  if (typeof value === "number") {
+    usage[key] = value;
+  }
+}
 function hasOwnInputImages(value) {
   if (!value || typeof value !== "object") return false;
   return Object.keys(value).some((key) => key.toLowerCase().includes("image"));
@@ -212217,6 +213028,7 @@ var AutoUpdaterManager = class {
   }
   /** 用户每日首次发送消息后静默检查（延迟 3s） */
   triggerDailyAutoCheck() {
+    if (process.env.KAI_RUNTIME === "cli") return;
     const { app } = getElectron();
     if (!app.isPackaged) return;
     const enabled = config.get("autoCheckForUpdates");
@@ -212326,7 +213138,7 @@ async function resolveIdType(id) {
   }
   return { type: "single", conversationId: id };
 }
-async function resolveTargetAgent(threadId, groupId, mentionDirective) {
+async function resolveTargetAgent(threadId, groupId, mentionDirective, supervisorId) {
   if (!groupId) {
     const targetAgentId2 = mentionDirective.kind === "single" ? mentionDirective.agentId : threadId;
     if (!targetAgentId2) {
@@ -212334,6 +213146,10 @@ async function resolveTargetAgent(threadId, groupId, mentionDirective) {
     }
     return targetAgentId2;
   }
+  if (supervisorId) {
+    await threadService.updateSpeaker(threadId, supervisorId);
+    return supervisorId;
+  }
   if (mentionDirective.kind === "broadcast") {
     const thread2 = await threadFileStore.findById(threadId);
     if (thread2?.speakerId) return thread2.speakerId;
@@ -212423,7 +213239,12 @@ async function handleSendUserMessage(request) {
     throw new Error("Conversation is being compacted, please wait");
   }
   const blocks = buildUserBlocks(content, attachments);
-  const targetAgentId = await resolveTargetAgent(conversationId, groupId, mentionDirective);
+  const targetAgentId = await resolveTargetAgent(
+    conversationId,
+    groupId,
+    mentionDirective,
+    normalizedMetadata?.supervisorId
+  );
   try {
     const message = await messagePublisher.publishUserMessage(conversationId, blocks, {
       metadata: normalizedMetadata,
@@ -212542,7 +213363,7 @@ function registerChatHandlers() {
 }
 
 // src/electron/main/handlers/conversation-handlers.ts
-var import_promises14 = require("fs/promises");
+var import_promises15 = require("fs/promises");
 init_conversation_event_bus();
 init_message2();
 init_agent_file_store();
@@ -212557,6 +213378,40 @@ init_thread_file_store();
 init_agent_file_store();
 init_ThreadManagerPool();
 init_logger();
+
+// src/electron/main/handlers/avatar-storage.ts
+var import_promises14 = require("fs/promises");
+var import_path18 = require("path");
+var import_sharp = __toESM(require("sharp"));
+var AVATAR_DIR = "avatars";
+var AVATAR_FILE = "avatar.png";
+var AVATAR_RELATIVE_PATH = `${AVATAR_DIR}/${AVATAR_FILE}`;
+var MAX_AVATAR_SOURCE_BYTES = 10 * 1024 * 1024;
+var AVATAR_SIZE = 256;
+async function writeOwnerAvatar(ownerDir, sourcePath) {
+  const source = sourcePath.trim();
+  if (!source) throw new Error("AVATAR_SOURCE_REQUIRED");
+  const sourceStats = await (0, import_promises14.stat)(source).catch(() => null);
+  if (!sourceStats?.isFile()) throw new Error("AVATAR_SOURCE_NOT_FILE");
+  if (sourceStats.size > MAX_AVATAR_SOURCE_BYTES) throw new Error("AVATAR_IMAGE_TOO_LARGE");
+  const avatarDir = (0, import_path18.join)(ownerDir, AVATAR_DIR);
+  const avatarPath = (0, import_path18.join)(avatarDir, AVATAR_FILE);
+  await (0, import_promises14.mkdir)(avatarDir, { recursive: true });
+  try {
+    await (0, import_sharp.default)(source, { failOn: "error" }).rotate().resize(AVATAR_SIZE, AVATAR_SIZE, { fit: "cover", position: "centre" }).png().toFile(avatarPath);
+  } catch (error48) {
+    if (error48 instanceof Error && /Input file contains unsupported image format|corrupt|invalid/i.test(error48.message)) {
+      throw new Error("AVATAR_IMAGE_UNREADABLE");
+    }
+    throw new Error("AVATAR_SAVE_FAILED");
+  }
+  return AVATAR_RELATIVE_PATH;
+}
+async function removeOwnerAvatar(ownerDir) {
+  await (0, import_promises14.rm)((0, import_path18.join)(ownerDir, AVATAR_DIR), { force: true, recursive: true }).catch(() => void 0);
+}
+
+// src/electron/main/handlers/conversation-handlers.ts
 var logger25 = createLogger("conversation-handlers");
 var filterVisibleMessages = (messages) => messages.filter((message) => !message.compressionMetadata?.isSummary);
 async function removeAgentFromAllGroups(agentId) {
@@ -212592,6 +213447,7 @@ async function resolveConversationView(id) {
     title: group.name,
     type: "group",
     groupId: group.id,
+    avatar: group.avatar,
     createdAt: thread.createdAt,
     updatedAt: thread.updatedAt,
     messageCount: 0
@@ -212678,6 +213534,7 @@ async function handleListConversations() {
       title: group.name,
       type: "group",
       groupId: group.id,
+      avatar: group.avatar,
       createdAt: defaultThreadWithMsg.createdAt,
       updatedAt: defaultThreadWithMsg.updatedAt,
       messageCount: 0,
@@ -212739,6 +213596,17 @@ async function handleUpdateGroup(id, updates) {
     await emitConversationSnapshot(defaultThread.id);
   }
 }
+async function handleSetGroupAvatar(groupId, sourcePath) {
+  if (!await groupFileStore.exists(groupId)) throw new Error("GROUP_NOT_FOUND");
+  const avatar = await writeOwnerAvatar(getGroupDir(groupId), sourcePath);
+  await handleUpdateGroup(groupId, { avatar });
+  return { avatar };
+}
+async function handleRemoveGroupAvatar(groupId) {
+  if (!await groupFileStore.exists(groupId)) throw new Error("GROUP_NOT_FOUND");
+  await removeOwnerAvatar(getGroupDir(groupId));
+  await handleUpdateGroup(groupId, { avatar: null });
+}
 async function handleDeleteGroup(id) {
   threadManagerPool.removeManagersByGroup(id);
   const threads = await threadFileStore.listByGroupId(id);
@@ -212807,7 +213675,7 @@ async function handleOpenAttachment(relativePath) {
   await shell2.openPath(absolutePath);
 }
 async function openDir(dir) {
-  await (0, import_promises14.mkdir)(dir, { recursive: true });
+  await (0, import_promises15.mkdir)(dir, { recursive: true });
   const { shell: shell2 } = require("electron");
   const error48 = await shell2.openPath(dir);
   if (error48) throw new Error(error48);
@@ -212836,6 +213704,8 @@ function registerConversationHandlers() {
   registerRpc(IPC_GET_GROUP, handleGetGroup);
   registerRpc(IPC_UPDATE_GROUP, handleUpdateGroup);
   registerRpc(IPC_DELETE_GROUP, handleDeleteGroup);
+  registerRpc(IPC_SET_GROUP_AVATAR, handleSetGroupAvatar);
+  registerRpc(IPC_REMOVE_GROUP_AVATAR, handleRemoveGroupAvatar);
   registerRpc(IPC_GET_GROUP_MEMBERS, handleGetGroupMembers);
   registerRpc(IPC_LIST_GROUP_THREADS, handleListGroupThreads);
   registerRpc(IPC_GET_GROUP_THREAD, handleGetGroupThread);
@@ -213032,6 +213902,19 @@ async function handleDeleteAgent(id) {
   );
   await agentFileStore.delete(id);
 }
+async function handleSetAgentAvatar(agentId, sourcePath) {
+  const agent = await loadAgent(agentId, true);
+  if (!agent) throw new Error("AGENT_NOT_FOUND");
+  const avatar = await writeOwnerAvatar(getAgentRootDir(agentId), sourcePath);
+  await agentFileStore.writeMeta({ ...agent, avatar, updatedAt: Date.now() });
+  return { avatar };
+}
+async function handleRemoveAgentAvatar(agentId) {
+  const agent = await loadAgent(agentId, true);
+  if (!agent) throw new Error("AGENT_NOT_FOUND");
+  await removeOwnerAvatar(getAgentRootDir(agentId));
+  await agentFileStore.writeMeta({ ...agent, avatar: void 0, updatedAt: Date.now() });
+}
 async function handleGetWorkspaceFile(agentId, filename) {
   return getWorkspaceFile(agentId, filename);
 }
@@ -213179,6 +214062,8 @@ function registerAgentHandlers() {
   registerRpc(IPC_LIST_AGENTS, handleListAgents);
   registerRpc(IPC_UPDATE_AGENT, handleUpdateAgent);
   registerRpc(IPC_DELETE_AGENT, handleDeleteAgent);
+  registerRpc(IPC_SET_AGENT_AVATAR, handleSetAgentAvatar);
+  registerRpc(IPC_REMOVE_AGENT_AVATAR, handleRemoveAgentAvatar);
   registerRpc(IPC_GET_WORKSPACE_FILE, handleGetWorkspaceFile);
   registerRpc(IPC_UPDATE_WORKSPACE_FILE, handleUpdateWorkspaceFile);
   registerRpc(IPC_LIST_WORKSPACE_FILES, handleListWorkspaceFiles);
@@ -213628,13 +214513,17 @@ function registerSearchHandlers() {
 }
 
 // src/electron/main/handlers/url-handlers.ts
-var import_promises15 = __toESM(require("node:fs/promises"));
+var import_promises16 = __toESM(require("node:fs/promises"));
 var import_node_path4 = __toESM(require("node:path"));
 init_ipc_events();
 init_config();
 init_workspace();
+init_agent_file_store();
+init_group_file_store();
 var SAFE_PROTOCOLS = ["http:", "https:"];
 var INVALID_PATH_CHARS = /[\0\r\n`$<>|;&]/;
+var WINDOWS_DRIVE_ABSOLUTE_PATH = /^[A-Za-z]:[\\/]/;
+var WINDOWS_UNC_ABSOLUTE_PATH = /^\\\\[^\\/]+[\\/][^\\/]+/;
 function isUrlSafe(urlString) {
   try {
     const url2 = new URL(urlString);
@@ -213647,6 +214536,9 @@ function isSubPath(parentDir, targetPath) {
   const relative4 = import_node_path4.default.relative(parentDir, targetPath);
   return relative4 === "" || !relative4.startsWith("..") && !import_node_path4.default.isAbsolute(relative4);
 }
+function isAvatarPath(parts) {
+  return parts.length === 2 && parts[0] === "avatars" && parts[1] === "avatar.png";
+}
 function resolveKaiLocalPath(urlString) {
   let pathname;
   try {
@@ -213683,6 +214575,18 @@ function resolveKaiLocalPath(urlString) {
     }
     return resolvedPath;
   }
+  if (pathname.startsWith("/agent/") || pathname.startsWith("/group/")) {
+    const [kind, ownerId, ...relativeParts] = pathname.slice(1).split("/");
+    if (!ownerId || !isAvatarPath(relativeParts)) {
+      throw new Error("ERROR_INVALID_LOCAL_PATH");
+    }
+    const ownerDir = kind === "agent" ? getAgentRootDir(ownerId) : getGroupDir(ownerId);
+    const resolvedPath = import_node_path4.default.resolve(ownerDir, relativeParts.join("/"));
+    if (!isSubPath(ownerDir, resolvedPath)) {
+      throw new Error("ERROR_INVALID_LOCAL_PATH");
+    }
+    return resolvedPath;
+  }
   throw new Error("ERROR_INVALID_LOCAL_PATH");
 }
 function resolveLocalPath(inputPath) {
@@ -213697,12 +214601,14 @@ function resolveLocalPath(inputPath) {
     resolvedPath = import_node_path4.default.join(homeDir, trimmedPath.slice(2));
   } else if (trimmedPath.startsWith("./")) {
     resolvedPath = import_node_path4.default.resolve(process.cwd(), trimmedPath);
+  } else if (WINDOWS_DRIVE_ABSOLUTE_PATH.test(trimmedPath) || WINDOWS_UNC_ABSOLUTE_PATH.test(trimmedPath)) {
+    resolvedPath = import_node_path4.default.win32.normalize(trimmedPath);
   } else if (trimmedPath.startsWith("/")) {
     resolvedPath = import_node_path4.default.normalize(trimmedPath);
   } else {
     throw new Error("ERROR_INVALID_LOCAL_PATH");
   }
-  if (!import_node_path4.default.isAbsolute(resolvedPath)) {
+  if (!import_node_path4.default.isAbsolute(resolvedPath) && !import_node_path4.default.win32.isAbsolute(resolvedPath)) {
     throw new Error("ERROR_INVALID_LOCAL_PATH");
   }
   return resolvedPath;
@@ -213714,7 +214620,7 @@ async function handleOpenExternalUrl(url2) {
 }
 async function handleOpenLocalPath(inputPath) {
   const resolvedPath = resolveLocalPath(inputPath);
-  const stats = await import_promises15.default.stat(resolvedPath).catch(() => null);
+  const stats = await import_promises16.default.stat(resolvedPath).catch(() => null);
   if (!stats?.isFile()) {
     throw new Error("ERROR_LOCAL_PATH_NOT_FILE");
   }
@@ -213724,7 +214630,7 @@ async function handleOpenLocalPath(inputPath) {
 }
 async function handleReadFileContent(inputPath) {
   const resolvedPath = resolveLocalPath(inputPath);
-  const stats = await import_promises15.default.stat(resolvedPath).catch(() => null);
+  const stats = await import_promises16.default.stat(resolvedPath).catch(() => null);
   if (!stats?.isFile()) {
     throw new Error("ERROR_LOCAL_PATH_NOT_FILE");
   }
@@ -213738,7 +214644,7 @@ async function handleReadFileContent(inputPath) {
       mimeType
     };
   }
-  const buffer = await import_promises15.default.readFile(resolvedPath);
+  const buffer = await import_promises16.default.readFile(resolvedPath);
   const isText2 = !isBufferBinary(buffer);
   const content = isText2 ? buffer.toString("utf-8") : "";
   return {
@@ -213753,11 +214659,29 @@ async function handleShowLocalItemInFolder(localUrlOrPath) {
   const { shell: shell2 } = require("electron");
   shell2.showItemInFolder(resolvedPath);
 }
+async function handleCopyImageToClipboard(localUrlOrPath) {
+  const resolvedPath = localUrlOrPath.startsWith("kai://local/") ? resolveKaiLocalPath(localUrlOrPath) : resolveLocalPath(localUrlOrPath);
+  const stats = await import_promises16.default.stat(resolvedPath).catch(() => null);
+  if (!stats?.isFile()) {
+    throw new Error("ERROR_LOCAL_PATH_NOT_FILE");
+  }
+  const mimeType = getMimeType2(import_node_path4.default.extname(resolvedPath).toLowerCase());
+  if (!mimeType.startsWith("image/")) {
+    throw new Error("ERROR_LOCAL_PATH_NOT_IMAGE");
+  }
+  const { clipboard, nativeImage } = require("electron");
+  const image = nativeImage.createFromPath(resolvedPath);
+  if (image.isEmpty()) {
+    throw new Error("ERROR_IMAGE_CLIPBOARD_UNSUPPORTED");
+  }
+  clipboard.writeImage(image);
+}
 function registerUrlHandlers() {
   registerRpc(IPC_OPEN_EXTERNAL_URL, handleOpenExternalUrl);
   registerRpc(IPC_OPEN_LOCAL_PATH, handleOpenLocalPath);
   registerRpc(IPC_READ_FILE_CONTENT, handleReadFileContent);
   registerRpc(IPC_SHOW_LOCAL_ITEM_IN_FOLDER, handleShowLocalItemInFolder);
+  registerRpc(IPC_COPY_IMAGE_TO_CLIPBOARD, handleCopyImageToClipboard);
 }
 function getMimeType2(ext) {
   const map3 = {
@@ -214248,7 +215172,7 @@ function setupHealthIPC() {
 
 // src/electron/main/handlers/app-info-handlers.ts
 init_ipc_events();
-var import_promises16 = __toESM(require("node:fs/promises"));
+var import_promises17 = __toESM(require("node:fs/promises"));
 var import_node_path5 = __toESM(require("node:path"));
 function getReleaseNotesPath() {
   const { app } = require("electron");
@@ -214267,7 +215191,7 @@ async function handleGetAppInfo() {
 }
 async function handleGetReleaseNotes() {
   try {
-    return await import_promises16.default.readFile(getReleaseNotesPath(), "utf-8");
+    return await import_promises17.default.readFile(getReleaseNotesPath(), "utf-8");
   } catch {
     return "";
   }
@@ -214285,12 +215209,12 @@ init_config();
 
 // src/adapters/transport/http-server.ts
 var import_node_http = __toESM(require("node:http"));
-var import_promises17 = __toESM(require("node:fs/promises"));
+var import_promises18 = __toESM(require("node:fs/promises"));
 var import_node_path6 = __toESM(require("node:path"));
 var import_node_os2 = __toESM(require("node:os"));
 var import_node_zlib = __toESM(require("node:zlib"));
 var import_node_fs = require("node:fs");
-var import_promises18 = require("node:stream/promises");
+var import_promises19 = require("node:stream/promises");
 
 // node_modules/ws/wrapper.mjs
 var import_stream5 = __toESM(require_stream(), 1);
@@ -214444,8 +215368,17 @@ var WsConnectionManager = class {
 // src/adapters/transport/http-server.ts
 init_workspace();
 init_config();
+init_agent_file_store();
+init_group_file_store();
 var DEFAULT_PORT = 9527;
 var MAX_JSON_BODY_SIZE = 5 * 1024 * 1024;
+function isSubPath2(parent2, child) {
+  const rel = import_node_path6.default.relative(parent2, child);
+  return rel === "" || !!rel && !rel.startsWith("..") && !import_node_path6.default.isAbsolute(rel);
+}
+function isAvatarPath2(parts) {
+  return parts.length === 2 && parts[0] === "avatars" && parts[1] === "avatar.png";
+}
 var MAX_UPLOAD_SIZE = ATTACHMENT.MAX_SIZE;
 var RENDERER_DIST_DIR = (() => {
   const electronPath = import_node_path6.default.resolve(__dirname, "../renderer");
@@ -214490,8 +215423,8 @@ function getCacheControl2(filePath) {
 }
 async function fileExists(filePath) {
   try {
-    const stat4 = await import_promises17.default.stat(filePath);
-    return stat4.isFile();
+    const stat5 = await import_promises18.default.stat(filePath);
+    return stat5.isFile();
   } catch {
     return false;
   }
@@ -214520,7 +215453,7 @@ async function sendStaticAsset(filePath, response, requestHeaders) {
   }
   response.writeHead(200, headers);
   try {
-    await (0, import_promises18.pipeline)((0, import_node_fs.createReadStream)(actualPath), response);
+    await (0, import_promises19.pipeline)((0, import_node_fs.createReadStream)(actualPath), response);
   } catch (error48) {
     if (!response.headersSent) {
       response.writeHead(500);
@@ -214541,8 +215474,8 @@ async function serveStaticFile(urlPath, response, requestHeaders) {
     return;
   }
   try {
-    const stat4 = await import_promises17.default.stat(resolvedPath);
-    const filePath = stat4.isDirectory() ? import_node_path6.default.join(resolvedPath, "index.html") : resolvedPath;
+    const stat5 = await import_promises18.default.stat(resolvedPath);
+    const filePath = stat5.isDirectory() ? import_node_path6.default.join(resolvedPath, "index.html") : resolvedPath;
     if (!await fileExists(filePath)) throw new Error("Not a file");
     await sendStaticAsset(filePath, response, requestHeaders);
   } catch {
@@ -214661,7 +215594,7 @@ var HttpTransportServer = class {
   }
   /**
    * 提供本地文件访问（与 kai:// protocol handler 同构）
-   * 路径格式：/full/absolute/path、/workspace/{agentId}/relative/path、/attachment/{relativePath}
+   * 路径格式：/full/absolute/path、/workspace/{agentId}/relative/path、/attachment/{relativePath}、/agent/{agentId}/avatars/avatar.png、/group/{groupId}/avatars/avatar.png
    */
   async serveLocalFile(pathname, response, isDownload = false) {
     let decodedPathname;
@@ -214685,7 +215618,21 @@ var HttpTransportServer = class {
       const relativePath = decodedPathname.slice(12);
       const attachmentsDir = config.getAttachmentsPath();
       resolvedPath = import_node_path6.default.resolve(attachmentsDir, relativePath);
-      if (!resolvedPath.startsWith(attachmentsDir)) {
+      if (!isSubPath2(attachmentsDir, resolvedPath)) {
+        response.writeHead(403);
+        response.end("Forbidden");
+        return;
+      }
+    } else if (decodedPathname.startsWith("/agent/") || decodedPathname.startsWith("/group/")) {
+      const [kind, ownerId, ...relativeParts] = decodedPathname.slice(1).split("/");
+      if (!ownerId || !isAvatarPath2(relativeParts)) {
+        response.writeHead(400);
+        response.end("Bad Request");
+        return;
+      }
+      const ownerDir = kind === "agent" ? getAgentRootDir(ownerId) : getGroupDir(ownerId);
+      resolvedPath = import_node_path6.default.resolve(ownerDir, relativeParts.join("/"));
+      if (!isSubPath2(ownerDir, resolvedPath)) {
         response.writeHead(403);
         response.end("Forbidden");
         return;
@@ -214702,7 +215649,7 @@ var HttpTransportServer = class {
       const imagePath = parts.slice(1).join("/");
       const workspaceDir = getAgentWorkspaceDir(agentId);
       resolvedPath = import_node_path6.default.resolve(workspaceDir, imagePath);
-      if (!resolvedPath.startsWith(workspaceDir)) {
+      if (!isSubPath2(workspaceDir, resolvedPath)) {
         response.writeHead(403);
         response.end("Forbidden");
         return;
@@ -214713,10 +215660,13 @@ var HttpTransportServer = class {
       return;
     }
     try {
-      await import_promises17.default.stat(resolvedPath);
+      await import_promises18.default.stat(resolvedPath);
       const ext = import_node_path6.default.extname(resolvedPath).toLowerCase();
       const mimeType = getMimeType(ext);
       const headers = { "Content-Type": mimeType };
+      if (decodedPathname.startsWith("/agent/") || decodedPathname.startsWith("/group/")) {
+        headers["Cache-Control"] = "no-store";
+      }
       if (isDownload) {
         const filename = import_node_path6.default.basename(resolvedPath);
         const asciiSafe = filename.replace(/[^\x20-\x7E]/g, "");
@@ -215150,14 +216100,14 @@ function registerUpdateHandlers() {
 }
 
 // src/adapters/storage/PinnedStore.ts
-var import_path18 = require("path");
-var import_promises19 = require("fs/promises");
+var import_path19 = require("path");
+var import_promises20 = require("fs/promises");
 var import_fs12 = require("fs");
 init_config();
 var FILE_NAME = "pinned.json";
 var SCHEMA_VERSION4 = 1;
 function getPinnedPath() {
-  return (0, import_path18.join)(config.getAppDataPath(), "config", FILE_NAME);
+  return (0, import_path19.join)(config.getAppDataPath(), "config", FILE_NAME);
 }
 function createDefaultPinnedFile() {
   return { version: SCHEMA_VERSION4, agents: {}, groups: {} };
@@ -215192,17 +216142,17 @@ function clonePinnedFile(data2) {
   };
 }
 async function atomicWriteJson4(path10, data2) {
-  const dir = (0, import_path18.dirname)(path10);
-  await (0, import_promises19.mkdir)(dir, { recursive: true });
+  const dir = (0, import_path19.dirname)(path10);
+  await (0, import_promises20.mkdir)(dir, { recursive: true });
   const tmp = `${path10}.tmp`;
-  await (0, import_promises19.writeFile)(tmp, `${JSON.stringify(data2, null, 2)}
+  await (0, import_promises20.writeFile)(tmp, `${JSON.stringify(data2, null, 2)}
 `, "utf-8");
-  await (0, import_promises19.rename)(tmp, path10);
+  await (0, import_promises20.rename)(tmp, path10);
 }
 async function readJsonFile5(path10) {
   if (!(0, import_fs12.existsSync)(path10)) return null;
   try {
-    const raw = await (0, import_promises19.readFile)(path10, "utf-8");
+    const raw = await (0, import_promises20.readFile)(path10, "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -215226,14 +216176,14 @@ var PinnedStore = class {
   }
   async pin(type, id) {
     const data2 = await this.load();
-    const bucket = type === "agent" ? data2.agents : data2.groups;
-    bucket[id] = Date.now();
+    const bucket2 = type === "agent" ? data2.agents : data2.groups;
+    bucket2[id] = Date.now();
     await this.flush();
   }
   async unpin(type, id) {
     const data2 = await this.load();
-    const bucket = type === "agent" ? data2.agents : data2.groups;
-    delete bucket[id];
+    const bucket2 = type === "agent" ? data2.agents : data2.groups;
+    delete bucket2[id];
     await this.flush();
   }
 };
@@ -215261,7 +216211,7 @@ var import_node_https = __toESM(require("node:https"));
 init_id2();
 init_ipc_events();
 init_logger();
-var log19 = createLogger("ChannelHandlers");
+var log21 = createLogger("ChannelHandlers");
 var VALID_CHANNEL_TYPES = ["wecom-bot", "wechat-personal"];
 function httpsGetJson(url2, timeoutMs = 1e4) {
   return new Promise((resolve9, reject) => {
@@ -215464,9 +216414,9 @@ function registerHandlers() {
 }
 
 // src/adapters/db/migration/kai-migration.ts
-var import_path21 = require("path");
+var import_path22 = require("path");
 var import_fs15 = require("fs");
-var import_promises22 = require("fs/promises");
+var import_promises23 = require("fs/promises");
 var import_lt2 = __toESM(require_lt());
 init_lib();
 init_agent_file_store();
@@ -215493,7 +216443,7 @@ function getKaiRootDir() {
   return config.getAppDataPath();
 }
 function getKaiConfigPath() {
-  return (0, import_path21.join)(getKaiRootDir(), KAI_CONFIG_FILE);
+  return (0, import_path22.join)(getKaiRootDir(), KAI_CONFIG_FILE);
 }
 function ensureKaiRootDir() {
   const root2 = getKaiRootDir();
@@ -215518,9 +216468,9 @@ async function writeKaiDataFile(version3) {
   ensureKaiRootDir();
   const path10 = getKaiConfigPath();
   const tmp = `${path10}.tmp`;
-  await (0, import_promises22.writeFile)(tmp, `${JSON.stringify({ version: version3 }, null, 2)}
+  await (0, import_promises23.writeFile)(tmp, `${JSON.stringify({ version: version3 }, null, 2)}
 `, "utf-8");
-  await (0, import_promises22.rename)(tmp, path10);
+  await (0, import_promises23.rename)(tmp, path10);
 }
 function currentVersion() {
   return readKaiDataFile()?.version ?? "0.0.0";
@@ -215697,16 +216647,16 @@ async function migrateConversationIds() {
     });
     await sequelize.query("PRAGMA foreign_keys = ON");
   }
-  const conversationsDir = (0, import_path21.resolve)(config.getAppDataPath(), "conversations");
+  const conversationsDir = (0, import_path22.resolve)(config.getAppDataPath(), "conversations");
   if ((0, import_fs15.existsSync)(conversationsDir)) {
     try {
       const entries = (0, import_fs15.readdirSync)(conversationsDir, { withFileTypes: true });
       for (const entry of entries) {
         if (!entry.isDirectory()) continue;
-        const oldDir = (0, import_path21.join)(conversationsDir, entry.name);
+        const oldDir = (0, import_path22.join)(conversationsDir, entry.name);
         const targetId = idMap.get(entry.name);
         if (targetId) {
-          const newDir = (0, import_path21.join)(conversationsDir, targetId);
+          const newDir = (0, import_path22.join)(conversationsDir, targetId);
           if (!(0, import_fs15.existsSync)(newDir)) {
             (0, import_fs15.renameSync)(oldDir, newDir);
             logger35.debug(`Renamed dir ${entry.name} \u2192 ${targetId}`);
@@ -215956,7 +216906,7 @@ init_normalize_tool_schema();
 var import_child_process3 = require("child_process");
 init_dist6();
 init_zod();
-var import_path22 = require("path");
+var import_path23 = require("path");
 init_workspace();
 
 // node_modules/shell-env/index.js
@@ -216073,10 +217023,10 @@ function getUserShellEnv() {
 // src/adapters/tools/tool-names.ts
 var BUILT_IN_TOOL_NAMES = Object.freeze({
   SHELL: "shell",
-  READ: "read",
-  WRITE: "write",
-  EDIT: "edit",
-  PATCH: "patch",
+  READ: "readFile",
+  WRITE: "writeFile",
+  EDIT: "editFile",
+  PATCH: "applyPatch",
   WEB_FETCH: "webFetch",
   WEB_SEARCH: "webSearch"
 });
@@ -216111,7 +217061,7 @@ function createShellTool(agentId) {
           };
           if (workdir) {
             const baseDir = agentId ? getAgentWorkspaceDir(agentId) : process.cwd();
-            options2.cwd = (0, import_path22.isAbsolute)(workdir) ? workdir : (0, import_path22.resolve)(baseDir, workdir);
+            options2.cwd = (0, import_path23.isAbsolute)(workdir) ? workdir : (0, import_path23.resolve)(baseDir, workdir);
           } else if (agentId) {
             options2.cwd = getAgentWorkspaceDir(agentId);
           }
@@ -216236,11 +217186,11 @@ function spawnWithAbort(shell2, command, options2, timeoutMs, abortSignal) {
 // src/adapters/tools/filesystem/read-file.ts
 init_dist6();
 init_zod();
-var import_promises23 = require("fs/promises");
+var import_promises24 = require("fs/promises");
 var import_fs16 = require("fs");
 
 // src/adapters/tools/filesystem/resolve-file-path.ts
-var import_path23 = require("path");
+var import_path24 = require("path");
 init_workspace();
 init_group_file_store();
 var GROUP_PROTECTED_JSON_FILES = /* @__PURE__ */ new Set([
@@ -216249,38 +217199,38 @@ var GROUP_PROTECTED_JSON_FILES = /* @__PURE__ */ new Set([
   "members.json"
 ]);
 function containsPathTraversal(p) {
-  return (0, import_path23.normalize)(p).split(/[/\\]+/).some((part) => part === "..");
+  return (0, import_path24.normalize)(p).split(/[/\\]+/).some((part) => part === "..");
 }
 function isWithinBase(resolvedPath, baseDir) {
-  const rel = (0, import_path23.relative)(baseDir, resolvedPath);
-  return !rel.startsWith("..") && !(0, import_path23.isAbsolute)(rel);
+  const rel = (0, import_path24.relative)(baseDir, resolvedPath);
+  return !rel.startsWith("..") && !(0, import_path24.isAbsolute)(rel);
 }
 function isGroupProtectedFile(resolvedPath, groupDir) {
-  const name21 = (0, import_path23.basename)(resolvedPath);
+  if (!isWithinBase((0, import_path24.normalize)(resolvedPath), (0, import_path24.normalize)(groupDir))) {
+    return false;
+  }
+  const name21 = (0, import_path24.basename)(resolvedPath);
   return name21.endsWith(".json") && GROUP_PROTECTED_JSON_FILES.has(name21);
 }
-function resolveFilePath2(filePath, scope) {
-  const agentId = scope?.agentId;
-  const groupId = scope?.groupId;
-  if (!agentId && !groupId) {
-    if ((0, import_path23.isAbsolute)(filePath)) return filePath;
-    return (0, import_path23.resolve)(process.cwd(), filePath);
+function resolveToolFilePath(workdir, filePath) {
+  if (!workdir || !(0, import_path24.isAbsolute)(workdir)) {
+    throw new Error("workdir is required and must be an absolute path");
+  }
+  if (!filePath) {
+    throw new Error("path is required and must be relative to workdir");
+  }
+  if ((0, import_path24.isAbsolute)(filePath)) {
+    throw new Error("path must be relative to workdir, not absolute");
   }
   if (containsPathTraversal(filePath)) {
     throw new Error(`Path traversal not allowed: ${filePath}`);
   }
-  if (groupId) {
-    const groupDir = getGroupDir(groupId);
-    if ((0, import_path23.isAbsolute)(filePath)) return (0, import_path23.normalize)(filePath);
-    const resolved = (0, import_path23.resolve)(groupDir, filePath);
-    if (!isWithinBase(resolved, groupDir)) {
-      throw new Error(`Path escapes group directory: ${filePath}`);
-    }
-    return resolved;
+  const normalizedWorkdir = (0, import_path24.normalize)(workdir);
+  const resolvedPath = (0, import_path24.resolve)(normalizedWorkdir, filePath);
+  if (!isWithinBase(resolvedPath, normalizedWorkdir)) {
+    throw new Error(`Path escapes workdir: ${filePath}`);
   }
-  if ((0, import_path23.isAbsolute)(filePath)) return filePath;
-  const baseDir = agentId ? getAgentWorkspaceDir(agentId) : process.cwd();
-  return (0, import_path23.resolve)(baseDir, filePath);
+  return resolvedPath;
 }
 
 // src/adapters/tools/filesystem/read-file.ts
@@ -216337,28 +217287,29 @@ var BINARY_EXTENSIONS2 = /* @__PURE__ */ new Set([
   ".pyc",
   ".wasm"
 ]);
-function createReadFileTool(scope = {}, tracker) {
+function createReadFileTool(_scope = {}, tracker) {
   return {
-    read: tool({
-      description: "Read file content from the local filesystem.\n- Returns content with line numbers.\n- If the path is a directory, lists its contents.\n- For large files, use `offset` and `limit` to read in chunks.",
+    readFile: tool({
+      description: "Read file content from the local filesystem.\n- `workdir` is REQUIRED and must be an absolute path.\n- `path` must be relative to `workdir`; absolute paths and `..` are rejected.\n- Returns content with line numbers.\n- If the path is a directory, lists its contents.\n- For large files, use `offset` and `limit` to read in chunks.",
       inputSchema: zodSchema(
         external_exports3.object({
-          path: external_exports3.string().describe("The file or directory path (absolute or relative to workspace)"),
+          workdir: external_exports3.string().describe("REQUIRED FIRST FIELD. Absolute root directory for this file operation."),
+          path: external_exports3.string().describe("The file or directory path, relative to workdir. Do not use absolute paths or .."),
           offset: external_exports3.number().optional().describe("Line number to start reading from (1-indexed, default: 1)"),
           limit: external_exports3.number().optional().describe("Maximum number of lines to read (default: 2000)")
         })
       ),
-      execute: async ({ path: filePath, offset = 1, limit = DEFAULT_LIMIT }, { abortSignal }) => {
+      execute: async ({ workdir, path: filePath, offset = 1, limit = DEFAULT_LIMIT }, { abortSignal }) => {
         if (abortSignal?.aborted) throw new DOMException("The operation was aborted", "AbortError");
         try {
-          const resolvedPath = resolveFilePath2(filePath, scope);
+          const resolvedPath = resolveToolFilePath(workdir, filePath);
           if (!(0, import_fs16.existsSync)(resolvedPath)) {
             return { error: `Path does not exist: ${filePath}`, content: "" };
           }
-          const fileStat = await (0, import_promises23.stat)(resolvedPath);
+          const fileStat = await (0, import_promises24.stat)(resolvedPath);
           if (fileStat.isDirectory()) {
             tracker?.markKnown(resolvedPath);
-            const entries = await (0, import_promises23.readdir)(resolvedPath, { withFileTypes: true });
+            const entries = await (0, import_promises24.readdir)(resolvedPath, { withFileTypes: true });
             const lines = entries.sort((a, b) => {
               if (a.isDirectory() && !b.isDirectory()) return -1;
               if (!a.isDirectory() && b.isDirectory()) return 1;
@@ -216381,7 +217332,7 @@ function createReadFileTool(scope = {}, tracker) {
               content: ""
             };
           }
-          const content = await (0, import_promises23.readFile)(resolvedPath, "utf-8");
+          const content = await (0, import_promises24.readFile)(resolvedPath, "utf-8");
           const allLines = content.split("\n");
           if (allLines.length > 0 && allLines[allLines.length - 1] === "") {
             allLines.pop();
@@ -216415,8 +217366,8 @@ function createReadFileTool(scope = {}, tracker) {
 // src/adapters/tools/filesystem/write-file.ts
 init_dist6();
 init_zod();
-var import_promises24 = require("fs/promises");
-var import_path24 = require("path");
+var import_promises25 = require("fs/promises");
+var import_path25 = require("path");
 var import_fs17 = require("fs");
 init_group_file_store();
 
@@ -217189,18 +218140,20 @@ function createUnifiedFileDiff(displayPath, previousContent, nextContent) {
 // src/adapters/tools/filesystem/write-file.ts
 function createWriteFileTool(scope = {}, tracker) {
   return {
-    write: tool({
-      description: "Write content to a file on the local filesystem. Creates parent directories if they do not exist. Overwrites existing files. IMPORTANT: For editing specific parts of an existing file, prefer `edit` \u2014 it is more token-efficient and less error-prone than rewriting the entire file.",
+    writeFile: tool({
+      description: "Write content to a file on the local filesystem. Creates parent directories if they do not exist. `workdir` is REQUIRED and must be an absolute path. `path` must be relative to `workdir`; absolute paths and `..` are rejected. mode defaults to `overwrite`; use `append` only for append-only files such as logs or memory notes. IMPORTANT: For editing specific parts of an existing file, prefer `editFile` \u2014 it is more token-efficient and less error-prone than rewriting the entire file.",
       inputSchema: zodSchema(
         external_exports3.object({
-          path: external_exports3.string().describe("REQUIRED FIRST FIELD. The file path (absolute or relative to workspace)"),
-          content: external_exports3.string().describe("The content to write to the file")
+          workdir: external_exports3.string().describe("REQUIRED FIRST FIELD. Absolute root directory for this file operation."),
+          path: external_exports3.string().describe("The file path, relative to workdir. Do not use absolute paths or .."),
+          content: external_exports3.string().describe("The content to write to the file"),
+          mode: external_exports3.enum(["overwrite", "append"]).optional().describe("Write mode. Defaults to overwrite. Use append only for append-only text files.")
         })
       ),
-      execute: async ({ path: filePath, content }, { abortSignal }) => {
+      execute: async ({ workdir, path: filePath, content, mode = "overwrite" }, { abortSignal }) => {
         if (abortSignal?.aborted) throw new DOMException("The operation was aborted", "AbortError");
         try {
-          const resolvedPath = resolveFilePath2(filePath, scope);
+          const resolvedPath = resolveToolFilePath(workdir, filePath);
           if (scope.groupId) {
             const groupDir = getGroupDir(scope.groupId);
             if (isGroupProtectedFile(resolvedPath, groupDir)) {
@@ -217211,27 +218164,35 @@ function createWriteFileTool(scope = {}, tracker) {
             }
           }
           const isNewFile = !(0, import_fs17.existsSync)(resolvedPath);
-          if (!isNewFile && tracker && !tracker.isKnown(resolvedPath)) {
+          if (mode === "overwrite" && !isNewFile && tracker && !tracker.isKnown(resolvedPath)) {
             return {
               success: false,
-              error: `Cannot overwrite existing file without reading it first. Call read on "${filePath}" before using write to overwrite it.`
+              error: `Cannot modify existing file without reading it first. Call readFile on "${filePath}" before using writeFile to overwrite it.`
             };
           }
           let oldContent = "";
           if (!isNewFile) {
             try {
-              oldContent = await (0, import_promises24.readFile)(resolvedPath, "utf-8");
+              oldContent = await (0, import_promises25.readFile)(resolvedPath, "utf-8");
             } catch {
             }
           }
-          const diff = createUnifiedFileDiff(filePath, oldContent, content);
-          await (0, import_promises24.mkdir)((0, import_path24.dirname)(resolvedPath), { recursive: true });
-          await (0, import_promises24.writeFile)(resolvedPath, content, "utf-8");
-          tracker?.markKnown(resolvedPath);
+          const nextContent = mode === "append" ? oldContent + content : content;
+          const diff = createUnifiedFileDiff(filePath, oldContent, nextContent);
+          await (0, import_promises25.mkdir)((0, import_path25.dirname)(resolvedPath), { recursive: true });
+          if (mode === "append") {
+            await (0, import_promises25.appendFile)(resolvedPath, content, "utf-8");
+          } else {
+            await (0, import_promises25.writeFile)(resolvedPath, content, "utf-8");
+          }
+          if (isNewFile) {
+            tracker?.markKnown(resolvedPath);
+          }
           return {
             success: true,
             path: resolvedPath,
             bytesWritten: Buffer.byteLength(content, "utf-8"),
+            mode,
             isNewFile,
             diff
           };
@@ -217249,25 +218210,26 @@ function createWriteFileTool(scope = {}, tracker) {
 // src/adapters/tools/filesystem/edit-file.ts
 init_dist6();
 init_zod();
-var import_promises25 = require("fs/promises");
+var import_promises26 = require("fs/promises");
 var import_fs18 = require("fs");
 init_group_file_store();
-function createEditFileTool(scope = {}) {
+function createEditFileTool(scope = {}, tracker) {
   return {
-    edit: tool({
-      description: "Perform exact string replacement in a file. The oldString must match exactly (including whitespace and indentation). Fails if oldString is not found or found multiple times (unless replaceAll is true).",
+    editFile: tool({
+      description: "Perform exact string replacement in a file. The oldString must match exactly (including whitespace and indentation). Fails if oldString is not found or found multiple times (unless replaceAll is true). `workdir` is REQUIRED and must be an absolute path. `path` must be relative to `workdir`; absolute paths and `..` are rejected.",
       inputSchema: zodSchema(
         external_exports3.object({
-          path: external_exports3.string().describe("REQUIRED FIRST FIELD. The file path (absolute or relative to workspace)"),
+          workdir: external_exports3.string().describe("REQUIRED FIRST FIELD. Absolute root directory for this file operation."),
+          path: external_exports3.string().describe("The file path, relative to workdir. Do not use absolute paths or .."),
           oldString: external_exports3.string().describe("The exact text to be replaced"),
           newString: external_exports3.string().describe("The text to replace it with"),
           replaceAll: external_exports3.boolean().optional().describe("Replace all occurrences of oldString (default: false)")
         })
       ),
-      execute: async ({ path: filePath, oldString, newString, replaceAll = false }, { abortSignal }) => {
+      execute: async ({ workdir, path: filePath, oldString, newString, replaceAll = false }, { abortSignal }) => {
         if (abortSignal?.aborted) throw new DOMException("The operation was aborted", "AbortError");
         try {
-          const resolvedPath = resolveFilePath2(filePath, scope);
+          const resolvedPath = resolveToolFilePath(workdir, filePath);
           if (scope.groupId) {
             const groupDir = getGroupDir(scope.groupId);
             if (isGroupProtectedFile(resolvedPath, groupDir)) {
@@ -217280,7 +218242,11 @@ function createEditFileTool(scope = {}) {
           if (!(0, import_fs18.existsSync)(resolvedPath)) {
             return { success: false, error: `File does not exist: ${filePath}` };
           }
-          const content = await (0, import_promises25.readFile)(resolvedPath, "utf-8");
+          const accessError = tracker?.assertKnownForMutation(resolvedPath, "edit", "editFile", filePath);
+          if (accessError) {
+            return { success: false, error: accessError };
+          }
+          const content = await (0, import_promises26.readFile)(resolvedPath, "utf-8");
           const matchCount = content.split(oldString).length - 1;
           if (matchCount === 0) {
             return { success: false, error: "oldString not found in file" };
@@ -217293,7 +218259,8 @@ function createEditFileTool(scope = {}) {
           }
           const updatedContent = replaceAll ? content.split(oldString).join(newString) : content.replace(oldString, newString);
           const diff = createUnifiedFileDiff(filePath, content, updatedContent);
-          await (0, import_promises25.writeFile)(resolvedPath, updatedContent, "utf-8");
+          await (0, import_promises26.writeFile)(resolvedPath, updatedContent, "utf-8");
+          tracker?.markKnown(resolvedPath);
           return {
             success: true,
             path: resolvedPath,
@@ -217314,39 +218281,47 @@ function createEditFileTool(scope = {}) {
 // src/adapters/tools/filesystem/apply-patch.ts
 init_dist6();
 init_zod();
-var import_promises26 = require("fs/promises");
+var import_promises27 = require("fs/promises");
 var import_fs19 = require("fs");
-var import_path25 = require("path");
+var import_path26 = require("path");
 init_group_file_store();
 function containsPathTraversal2(p) {
-  return (0, import_path25.normalize)(p).split(/[/\\]+/).some((part) => part === "..");
+  return (0, import_path26.normalize)(p).split(/[/\\]+/).some((part) => part === "..");
 }
 function isWithinBase2(resolvedPath, baseDir) {
-  const rel = (0, import_path25.relative)(baseDir, resolvedPath);
-  return !rel.startsWith("..") && !(0, import_path25.isAbsolute)(rel);
+  const rel = (0, import_path26.relative)(baseDir, resolvedPath);
+  return !rel.startsWith("..") && !(0, import_path26.isAbsolute)(rel);
 }
 function resolvePatchWorkdir(workdir) {
   if (typeof workdir !== "string" || workdir.length === 0) {
     throw new Error("patch workdir is required and must be an absolute path");
   }
-  if (!(0, import_path25.isAbsolute)(workdir)) {
+  if (!(0, import_path26.isAbsolute)(workdir)) {
     throw new Error("patch workdir must be an absolute path");
   }
-  return (0, import_path25.normalize)(workdir);
+  return (0, import_path26.normalize)(workdir);
 }
 function resolvePatchPath(filePath, workdir) {
-  if ((0, import_path25.isAbsolute)(filePath)) {
+  if ((0, import_path26.isAbsolute)(filePath)) {
     throw new Error(`Patch file paths must be relative to workdir; pass workdir instead of absolute paths: ${filePath}`);
   }
   if (containsPathTraversal2(filePath)) {
     throw new Error(`Path traversal not allowed in patch file path: ${filePath}`);
   }
-  const resolved = (0, import_path25.resolve)(workdir, filePath);
+  const resolved = (0, import_path26.resolve)(workdir, filePath);
   if (!isWithinBase2(resolved, workdir)) {
     throw new Error(`Patch file path escapes workdir: ${filePath}`);
   }
   return resolved;
 }
+function getPatchMutationAccessError(filePatch, resolvedPath, displayPath, tracker) {
+  if (filePatch.action === "add" && !(0, import_fs19.existsSync)(resolvedPath)) return null;
+  if (filePatch.action !== "add" && !(0, import_fs19.existsSync)(resolvedPath)) return null;
+  if (filePatch.action === "add") {
+    return tracker.assertKnownForMutation(resolvedPath, "replace", "applyPatch", displayPath);
+  }
+  return tracker.assertKnownForMutation(resolvedPath, filePatch.action, "applyPatch", displayPath);
+}
 function parsePatch2(input) {
   const lines = input.split("\n");
   const patches = [];
@@ -217437,19 +218412,26 @@ function applyHunks(content, filePath, hunks) {
   }
   return { result };
 }
-function createApplyPatchTool(scope = {}) {
+function createApplyPatchTool(scope = {}, tracker) {
   return {
-    patch: tool({
-      description: 'Apply a multi-file patch using a structured diff format. This is ideal for multi-file or multi-location edits where calling `edit` multiple times would be brittle.\n\nThe patch is a stripped-down, file-oriented diff format with no line numbers. It uses a high-level envelope:\n\n```\n*** Begin Patch\n[ one or more file operations ]\n*** End Patch\n```\n\nEach operation starts with one of three headers:\n- `*** Add File: <path>` \u2014 create a new file. Every following line must start with `+`.\n- `*** Delete File: <path>` \u2014 remove an existing file.\n- `*** Update File: <path>` \u2014 modify an existing file in place (optionally with a rename).\n\nFor Update operations, you may add `*** Move to: <new path>` on the next line to rename the file.\nThen include one or more "hunks", each introduced by `@@` (optionally followed by a context header).\n\nWithin a hunk, each line starts with:\n- ` ` (space) \u2014 context line (unchanged, used for matching)\n- `-` \u2014 line to remove\n- `+` \u2014 line to add\n\n**Important guidelines for Update hunks:**\n- Always include 3 lines of context before and after each change. Context lines help locate the correct position in the file.\n- If 3 lines of context is insufficient to uniquely identify the code, use `@@` with a class or function name to narrow down the location. Example: `@@ class UserService`\n- For deeply nested or repeated code, use multiple `@@` markers to jump to the right context. Example:\n  ```\n  @@ class UserService\n  @@   async login():\n  -    return false\n  +    return await authenticate()\n  ```\n- Use `*** End of File` to mark a pure insertion at the end of a file.\n- `workdir` is REQUIRED and must be an absolute path. It is the root directory where the patch is applied.\n- File paths inside the patch are relative to `workdir`, never absolute.\n- Do not use `..` in patch file paths; paths may not escape `workdir`.\n\nFull example combining multiple operations:\n```\n*** Begin Patch\n*** Add File: hello.txt\n+Hello world\n*** Update File: src/app.py\n*** Move to: src/main.py\n@@ def greet():\n-    print("Hi")\n+    print("Hello, world!")\n*** Delete File: obsolete.txt\n*** End Patch\n```',
+    applyPatch: tool({
+      description: 'Apply a multi-file patch using a structured diff format. This is ideal for multi-file or multi-location edits where calling `editFile` multiple times would be brittle.\n\nThe patch is a stripped-down, file-oriented diff format with no line numbers. It uses a high-level envelope:\n\n```\n*** Begin Patch\n[ one or more file operations ]\n*** End Patch\n```\n\nEach operation starts with one of three headers:\n- `*** Add File: <path>` \u2014 create a new file. Every following line must start with `+`.\n- `*** Delete File: <path>` \u2014 remove an existing file.\n- `*** Update File: <path>` \u2014 modify an existing file in place (optionally with a rename).\n\nFor Update operations, you may add `*** Move to: <new path>` on the next line to rename the file.\nThen include one or more "hunks", each introduced by `@@` (optionally followed by a context header).\n\nWithin a hunk, each line starts with:\n- ` ` (space) \u2014 context line (unchanged, used for matching)\n- `-` \u2014 line to remove\n- `+` \u2014 line to add\n\n**Important guidelines for Update hunks:**\n- Always include 3 lines of context before and after each change. Context lines help locate the correct position in the file.\n- If 3 lines of context is insufficient to uniquely identify the code, use `@@` with a class or function name to narrow down the location. Example: `@@ class UserService`\n- For deeply nested or repeated code, use multiple `@@` markers to jump to the right context. Example:\n  ```\n  @@ class UserService\n  @@   async login():\n  -    return false\n  +    return await authenticate()\n  ```\n- Use `*** End of File` to mark a pure insertion at the end of a file.\n- `workdir` is REQUIRED and must be an absolute path. It is the root directory where the patch is applied.\n- File paths inside the patch are relative to `workdir`, never absolute.\n- Do not use `..` in patch file paths; paths may not escape `workdir`.\n\nFull example combining multiple operations:\n```\n*** Begin Patch\n*** Add File: hello.txt\n+Hello world\n*** Update File: src/app.py\n*** Move to: src/main.py\n@@ def greet():\n-    print("Hi")\n+    print("Hello, world!")\n*** Delete File: obsolete.txt\n*** End Patch\n```',
       inputSchema: zodSchema(
         external_exports3.object({
           workdir: external_exports3.string().describe("REQUIRED FIRST FIELD. Absolute root directory where the patch is applied. Patch file paths are relative to this directory."),
-          input: external_exports3.string().describe(
+          patch: external_exports3.string().optional().describe(
             "The patch content. Must start with *** Begin Patch and end with *** End Patch."
           )
+        }).passthrough().superRefine((args2, ctx) => {
+          const legacyInput = args2.input;
+          if (typeof args2.patch !== "string" && typeof legacyInput !== "string") {
+            ctx.addIssue({ code: external_exports3.ZodIssueCode.custom, message: "patch is required" });
+          }
         })
       ),
-      execute: async ({ workdir, input }, { abortSignal }) => {
+      execute: async (args2, { abortSignal }) => {
+        const { workdir, patch } = args2;
+        const input = args2.input;
         if (abortSignal?.aborted) throw new DOMException("The operation was aborted", "AbortError");
         let patchWorkdir;
         try {
@@ -217457,7 +218439,11 @@ function createApplyPatchTool(scope = {}) {
         } catch (error48) {
           return { success: false, error: error48 instanceof Error ? error48.message : String(error48) };
         }
-        const patches = parsePatch2(input);
+        const patchContent = patch ?? input;
+        if (typeof patchContent !== "string") {
+          return { success: false, error: "patch is required" };
+        }
+        const patches = parsePatch2(patchContent);
         if (patches.length === 0) {
           return { success: false, error: "No file operations found in patch" };
         }
@@ -217487,6 +218473,18 @@ function createApplyPatchTool(scope = {}) {
               continue;
             }
           }
+          if (tracker) {
+            const mutationError = getPatchMutationAccessError(filePatch, resolvedPath, filePatch.path, tracker);
+            if (mutationError) {
+              results.push({
+                action: filePatch.action,
+                path: filePatch.path,
+                success: false,
+                error: mutationError
+              });
+              continue;
+            }
+          }
           try {
             switch (filePatch.action) {
               case "add": {
@@ -217500,8 +218498,9 @@ function createApplyPatchTool(scope = {}) {
                   continue;
                 }
                 const content = (filePatch.content || "").replace(/\n$/, "");
-                await (0, import_promises26.mkdir)((0, import_path25.dirname)(resolvedPath), { recursive: true });
-                await (0, import_promises26.writeFile)(resolvedPath, content, "utf-8");
+                await (0, import_promises27.mkdir)((0, import_path26.dirname)(resolvedPath), { recursive: true });
+                await (0, import_promises27.writeFile)(resolvedPath, content, "utf-8");
+                tracker?.markKnown(resolvedPath);
                 results.push({
                   action: "add",
                   path: filePatch.path,
@@ -217519,7 +218518,7 @@ function createApplyPatchTool(scope = {}) {
                   });
                   continue;
                 }
-                const oldContent = await (0, import_promises26.readFile)(resolvedPath, "utf-8");
+                const oldContent = await (0, import_promises27.readFile)(resolvedPath, "utf-8");
                 let newContent;
                 if (filePatch.hunks && filePatch.hunks.length > 0) {
                   const { result, error: error48 } = applyHunks(oldContent, filePatch.path, filePatch.hunks);
@@ -217538,9 +218537,46 @@ function createApplyPatchTool(scope = {}) {
                 }
                 if (filePatch.moveTo) {
                   const newResolvedPath = resolvePatchPath(filePatch.moveTo, patchWorkdir);
-                  await (0, import_promises26.mkdir)((0, import_path25.dirname)(newResolvedPath), { recursive: true });
-                  await (0, import_promises26.writeFile)(newResolvedPath, newContent, "utf-8");
-                  await (0, import_promises26.unlink)(resolvedPath);
+                  if (newResolvedPath === resolvedPath) {
+                    results.push({
+                      action: "rename",
+                      path: `${filePatch.path} \u2192 ${filePatch.moveTo}`,
+                      success: false,
+                      error: "Move target must differ from source path"
+                    });
+                    continue;
+                  }
+                  if (scope.groupId) {
+                    const groupDir = getGroupDir(scope.groupId);
+                    if (isGroupProtectedFile(newResolvedPath, groupDir)) {
+                      results.push({
+                        action: "rename",
+                        path: `${filePatch.path} \u2192 ${filePatch.moveTo}`,
+                        success: false,
+                        error: `Cannot modify protected file: ${filePatch.moveTo}`
+                      });
+                      continue;
+                    }
+                  }
+                  await (0, import_promises27.mkdir)((0, import_path26.dirname)(newResolvedPath), { recursive: true });
+                  const moveTargetError = tracker?.assertKnownForMutation(
+                    newResolvedPath,
+                    "overwrite rename target",
+                    "applyPatch",
+                    filePatch.moveTo
+                  );
+                  if ((0, import_fs19.existsSync)(newResolvedPath) && moveTargetError) {
+                    results.push({
+                      action: "rename",
+                      path: `${filePatch.path} \u2192 ${filePatch.moveTo}`,
+                      success: false,
+                      error: moveTargetError
+                    });
+                    continue;
+                  }
+                  await (0, import_promises27.writeFile)(newResolvedPath, newContent, "utf-8");
+                  await (0, import_promises27.unlink)(resolvedPath);
+                  tracker?.markKnown(newResolvedPath);
                   const diff = createUnifiedFileDiff(filePatch.path, oldContent, newContent);
                   results.push({
                     action: "rename",
@@ -217550,7 +218586,8 @@ function createApplyPatchTool(scope = {}) {
                   });
                 } else {
                   const diff = createUnifiedFileDiff(filePatch.path, oldContent, newContent);
-                  await (0, import_promises26.writeFile)(resolvedPath, newContent, "utf-8");
+                  await (0, import_promises27.writeFile)(resolvedPath, newContent, "utf-8");
+                  tracker?.markKnown(resolvedPath);
                   results.push({
                     action: "update",
                     path: filePatch.path,
@@ -217570,7 +218607,7 @@ function createApplyPatchTool(scope = {}) {
                   });
                   continue;
                 }
-                await (0, import_promises26.unlink)(resolvedPath);
+                await (0, import_promises27.unlink)(resolvedPath);
                 results.push({
                   action: "delete",
                   path: filePatch.path,
@@ -232278,12 +233315,12 @@ function createWebSearchTool(executor) {
 }
 
 // src/electron/main/utils/icon.ts
-var import_path26 = require("path");
+var import_path27 = require("path");
 function getIconPath() {
   if (process.env.NODE_ENV === "development") {
-    return (0, import_path26.join)(__dirname, "../../resources/icon.png");
+    return (0, import_path27.join)(__dirname, "../../resources/icon.png");
   }
-  return (0, import_path26.join)(process.resourcesPath, "icon.png");
+  return (0, import_path27.join)(process.resourcesPath, "icon.png");
 }
 
 // src/adapters/tools/web/search/electron/search-with-window.ts
@@ -232727,16 +233764,16 @@ function createSchedulerTools(scope) {
 // src/adapters/tools/image/analyze.ts
 init_dist6();
 init_zod();
-var import_promises27 = require("fs/promises");
+var import_promises28 = require("fs/promises");
 var import_fs20 = require("fs");
-var import_path27 = require("path");
+var import_path28 = require("path");
 init_config();
 init_multimodal();
 init_logger();
 var logger37 = createLogger("AnalyzeImageTool");
 function resolveImagePath(imagePath) {
-  if ((0, import_path27.isAbsolute)(imagePath)) return imagePath;
-  return (0, import_path27.resolve)(process.cwd(), imagePath);
+  if ((0, import_path28.isAbsolute)(imagePath)) return imagePath;
+  return (0, import_path28.resolve)(process.cwd(), imagePath);
 }
 function createModelFromCandidate(candidate) {
   const channels = config.get("llmChannels") ?? [];
@@ -232787,8 +233824,8 @@ async function loadImageAsDataUrl(imagePathOrUrl, abortSignal) {
   } else {
     const absPath = resolveImagePath(imagePathOrUrl);
     if (!(0, import_fs20.existsSync)(absPath)) throw new Error(`\u56FE\u7247\u6587\u4EF6\u4E0D\u5B58\u5728: ${absPath}`);
-    buffer = await (0, import_promises27.readFile)(absPath);
-    mimeType = extToMime((0, import_path27.extname)(absPath));
+    buffer = await (0, import_promises28.readFile)(absPath);
+    mimeType = extToMime((0, import_path28.extname)(absPath));
   }
   const maxDim = getMaxImageDimension();
   const resized = await resizeImageBuffer(buffer, maxDim);
@@ -232855,9 +233892,9 @@ function createAnalyzeImageTool() {
 // src/adapters/tools/image/generate.ts
 init_dist6();
 init_zod();
-var import_promises28 = require("fs/promises");
+var import_promises29 = require("fs/promises");
 var import_fs21 = require("fs");
-var import_path28 = require("path");
+var import_path29 = require("path");
 init_config();
 init_logger();
 var logger38 = createLogger("GenerateImageTool");
@@ -232894,9 +233931,9 @@ async function loadImageBuffer(imagePathOrUrl, abortSignal) {
     if (!response.ok) throw new Error(`\u83B7\u53D6\u56FE\u7247\u5931\u8D25: ${response.status} ${response.statusText}`);
     return Buffer.from(await response.arrayBuffer());
   }
-  const absPath = (0, import_path28.isAbsolute)(imagePathOrUrl) ? imagePathOrUrl : (0, import_path28.resolve)(process.cwd(), imagePathOrUrl);
+  const absPath = (0, import_path29.isAbsolute)(imagePathOrUrl) ? imagePathOrUrl : (0, import_path29.resolve)(process.cwd(), imagePathOrUrl);
   if (!(0, import_fs21.existsSync)(absPath)) throw new Error(`\u56FE\u7247\u6587\u4EF6\u4E0D\u5B58\u5728: ${absPath}`);
-  return (0, import_promises28.readFile)(absPath);
+  return (0, import_promises29.readFile)(absPath);
 }
 function createGenerateImageTool() {
   return {
@@ -233000,6 +234037,16 @@ var FileAccessTracker = class {
   isKnown(resolvedPath) {
     return this.knownPaths.has(resolvedPath);
   }
+  /**
+   * Enforce the mutation policy for an existing path.
+   *
+   * New files are allowed by the tools themselves. Existing files must have been
+   * read, or created by a previous write in this tool set, before any mutation.
+   */
+  assertKnownForMutation(resolvedPath, action, toolName, filePath) {
+    if (this.isKnown(resolvedPath)) return null;
+    return `Cannot ${action} existing file without reading it first. Call readFile on "${filePath}" before using ${toolName}.`;
+  }
   /** 重置（新会话 / 新工具实例时调用） */
   clear() {
     this.knownPaths.clear();
@@ -233041,8 +234088,8 @@ function getBuiltInTools(context2 = {}) {
     ...createShellTool(agentId),
     ...createReadFileTool(scope, tracker),
     ...createWriteFileTool(scope, tracker),
-    ...createEditFileTool(scope),
-    ...createApplyPatchTool(scope),
+    ...createEditFileTool(scope, tracker),
+    ...createApplyPatchTool(scope, tracker),
     ...createWebFetchTool(),
     ...createWebSearchTool2(),
     ...createDatabaseTool()
@@ -233075,7 +234122,7 @@ init_zod();
 var import_node_fs2 = require("node:fs");
 var import_node_path7 = require("node:path");
 init_logger();
-var log20 = createLogger("SendFileTool");
+var log22 = createLogger("SendFileTool");
 function createSendFileTool(attachmentPort) {
   return {
     sendFile: tool({
@@ -233113,7 +234160,7 @@ function createSendFileTool(attachmentPort) {
           const fileBuffer = (0, import_node_fs2.readFileSync)(filePath);
           const metadata = await attachmentPort.saveAttachment(fileBuffer, filename, mimeType);
           const type = isImageExtension(ext) ? "\u56FE\u7247" : "\u6587\u4EF6";
-          log20.info(`sendFile: ${filePath} \u2192 attachment ${metadata.id} (${type}, ${(fileStat.size / 1024).toFixed(1)}KB)`);
+          log22.info(`sendFile: ${filePath} \u2192 attachment ${metadata.id} (${type}, ${(fileStat.size / 1024).toFixed(1)}KB)`);
           return {
             text: `${type}\u5DF2\u53D1\u9001: ${filename}`,
             attachment: {
@@ -233126,7 +234173,7 @@ function createSendFileTool(attachmentPort) {
           };
         } catch (error48) {
           const message = error48 instanceof Error ? error48.message : String(error48);
-          log20.error("sendFile error:", message);
+          log22.error("sendFile error:", message);
           return `\u53D1\u9001\u6587\u4EF6\u5931\u8D25: ${message}`;
         }
       }
@@ -233328,8 +234375,8 @@ var ToolOutputArtifactStateSlot = defineExecutionSlot({
 });
 
 // src/adapters/tools/middleware/save-tool-output-artifact.ts
-var import_promises29 = require("fs/promises");
-var import_path29 = require("path");
+var import_promises30 = require("fs/promises");
+var import_path30 = require("path");
 init_workspace();
 init_thread_file_store();
 
@@ -233520,7 +234567,7 @@ async function handleWebFetchResult(ctx, result) {
 
 ---
 [\u5185\u5BB9\u8D85\u8FC7 ${WEB_MAX_CHARS} \u5B57\u7B26\uFF0C\u5DF2\u622A\u65AD\u3002\u5B8C\u6574\u5185\u5BB9\u5DF2\u4FDD\u5B58\u5230: ${artifact.absolutePath}]
-[\u53EF\u7528 read \u8BFB\u53D6\u5B8C\u6574\u5185\u5BB9]`;
+[\u53EF\u7528 readFile \u8BFB\u53D6\u5B8C\u6574\u5185\u5BB9]`;
     recordArtifact(ctx, "content", artifact);
     return {
       kind: "success",
@@ -233570,7 +234617,7 @@ async function handleWebSearchResult(ctx, result) {
 
 ---
 [\u5185\u5BB9\u8D85\u8FC7 ${WEB_MAX_CHARS} \u5B57\u7B26\uFF0C\u5DF2\u622A\u65AD\u3002\u5B8C\u6574\u5185\u5BB9\u5DF2\u4FDD\u5B58\u5230: ${artifact.absolutePath}]
-[\u53EF\u7528 read \u8BFB\u53D6\u5B8C\u6574\u5185\u5BB9]`;
+[\u53EF\u7528 readFile \u8BFB\u53D6\u5B8C\u6574\u5185\u5BB9]`;
     recordArtifact(ctx, "content", artifact);
     return {
       kind: "success",
@@ -233601,11 +234648,11 @@ async function saveArtifact(ctx, filename, text4) {
   const resultsRoot = resolveToolResultsRoot(ctx);
   const now2 = ctx.runtime.now();
   const today = now2.toISOString().split("T")[0];
-  const dir = (0, import_path29.join)(resultsRoot, today);
-  await (0, import_promises29.mkdir)(dir, { recursive: true });
-  const absolutePath = (0, import_path29.join)(dir, filename);
+  const dir = (0, import_path30.join)(resultsRoot, today);
+  await (0, import_promises30.mkdir)(dir, { recursive: true });
+  const absolutePath = (0, import_path30.join)(dir, filename);
   const content = limitArtifactBytes(text4);
-  await (0, import_promises29.writeFile)(absolutePath, content, "utf-8");
+  await (0, import_promises30.writeFile)(absolutePath, content, "utf-8");
   return {
     absolutePath,
     relativePath: `tool_results/${today}/${filename}`,
@@ -233616,9 +234663,9 @@ async function saveArtifact(ctx, filename, text4) {
 }
 function resolveToolResultsRoot(ctx) {
   if (ctx.groupId && ctx.threadId) {
-    return (0, import_path29.join)(getThreadDir(ctx.groupId, ctx.threadId), "tool_results");
+    return (0, import_path30.join)(getThreadDir(ctx.groupId, ctx.threadId), "tool_results");
   }
-  return (0, import_path29.join)(getAgentWorkspaceDir(ctx.agentId), "tool_results");
+  return (0, import_path30.join)(getAgentWorkspaceDir(ctx.agentId), "tool_results");
 }
 function recordArtifact(ctx, stream, artifact) {
   const state = ctx.runtime.runState.getOrCreate(ToolOutputArtifactStateSlot, () => ({ artifacts: [] }));
@@ -233672,6 +234719,16 @@ registry2.seal();
 var toolExecutionRegistry = registry2;
 
 // src/adapters/tools/agent-tool-provider.ts
+var LEGACY_TOOL_NAME_ALIASES = {
+  read: "readFile",
+  write: "writeFile",
+  edit: "editFile",
+  patch: "applyPatch"
+};
+function getDisabledToolNames(toolName) {
+  const canonical = LEGACY_TOOL_NAME_ALIASES[toolName];
+  return canonical ? [toolName, canonical] : [toolName];
+}
 var DefaultAgentToolProvider = class {
   async getTools(agent, conversationIdOrContext, runtime) {
     const toolContext = normalizeToolProviderContext(conversationIdOrContext);
@@ -233686,7 +234743,9 @@ var DefaultAgentToolProvider = class {
     const tools = { ...mcpTools, ...skillTool, ...builtInTools };
     if (disabledTools?.length) {
       for (const toolName of disabledTools) {
-        delete tools[toolName];
+        for (const disabledToolName of getDisabledToolNames(toolName)) {
+          delete tools[disabledToolName];
+        }
       }
     }
     const wrappedTools = wrapToolsWithExecutionPipeline(tools, {
@@ -233794,6 +234853,7 @@ function bootstrapAgentExecutionDeps() {
 
 // src/app/bootstrap.ts
 init_logger();
+init_sequelize();
 var logger39 = createLogger("bootstrap");
 var unsubscribeConversationEvents = null;
 async function bootstrapApplication() {
@@ -233848,6 +234908,7 @@ async function cleanup() {
   threadManagerPool.stopCleanup();
   await channelManager.dispose();
   await mcpManager?.dispose();
+  await closeSequelize();
 }
 
 // src/cli/index.ts