@spacebar_ai/moldclaw-core 2026.3.33 → 2026.3.36

package/dist/{auth-profiles-UQD1RQkG.js → auth-profiles-ozqrH6RR.js}

@@ -72,7 +72,7 @@ import { n as buildSingleProviderApiKeyCatalog, r as findCatalogTemplate } from
 import { A as DEFAULT_RESET_TRIGGERS, E as formatDurationCompact$1, F as setSessionRuntimeModel, I as hasMeaningfulChannelConfig, M as mergeSessionEntryPreserveActivity, N as normalizeSessionRuntimeModelFields, O as formatDurationPrecise, P as resolveFreshSessionTotalTokens, _ as stripSilentToken, b as enqueueSystemEvent, c as stripHeartbeatToken, d as resolveExplicitAgentSessionKey, f as resolveMainSessionKey, g as isSilentReplyText, h as isSilentReplyPrefixText, j as mergeSessionEntry, l as canonicalizeMainSessionAlias, m as SILENT_REPLY_TOKEN, n as createLazyRuntimeSurface, p as HEARTBEAT_TOKEN, s as resolveHeartbeatPrompt, t as createLazyRuntimeMethod, u as resolveAgentMainSessionKey, v as drainSystemEventEntries } from "./lazy-runtime-BoGB4usD.js";
 import { o as toDirectoryEntries, t as applyDirectoryQueryAndLimit } from "./directory-config-helpers-CbRZemIs.js";
 import { t as resolveAccountEntry } from "./account-lookup-pPy9O6oq.js";
-import { l as resolveLeastPrivilegeOperatorScopesForMethod, nn as hasInterSessionUserProvenance, rn as normalizeInputProvenance, tn as applyInputProvenanceToUserMessage, xt as validateSecretsResolveResult } from "./method-scopes-DTNYkocH.js";
+import { l as resolveLeastPrivilegeOperatorScopesForMethod, nn as hasInterSessionUserProvenance, rn as normalizeInputProvenance, tn as applyInputProvenanceToUserMessage, xt as validateSecretsResolveResult } from "./method-scopes-CfRtamRU.js";
 import { _ as extractInboundSenderLabel, b as extractToolCallNames, c as formatUsd, d as deriveSessionTotalTokens, f as hasNonzeroUsage, g as stripMessageIdHints, h as stripEnvelope, l as resolveModelCostConfig, m as normalizeUsage, n as loadCostUsageSummary, o as estimateUsageCost, p as makeZeroUsageSnapshot, r as loadSessionCostSummary, s as formatTokenCount$2, u as derivePromptTokens, v as stripInboundMetadata, x as hasToolCall } from "./session-cost-usage-DWgQk6XT.js";
 import { r as parseStrictNonNegativeInteger } from "./parse-finite-number-U5TetQpk.js";
 import { a as resolveSessionTranscriptPath$1, c as resolveSessionTranscriptsDirForAgent, i as resolveSessionFilePathOptions, l as resolveStorePath, n as resolveDefaultSessionStorePath, o as resolveSessionTranscriptPathInDir, r as resolveSessionFilePath, t as resolveAgentsDirFromSessionStorePath } from "./paths-ApLcu1Uu.js";
@@ -89,20 +89,20 @@ import { i as tryReadSecretFileSync } from "./secret-file-p1IhQzwJ.js";
 import { t as waitForAbortSignal } from "./abort-signal-BtS9aSBg.js";
 import { a as ACP_ERROR_CODES, c as toAcpRuntimeError, d as PROVIDER_ENV_VARS, f as listKnownProviderAuthEnvVarNames, g as resolveWithSecureFallbackMulti, h as isSecurePlaceholder, l as withAcpRuntimeErrorBoundary, o as AcpRuntimeError, r as requireAcpRuntimeBackend, t as getAcpRuntimeBackend, u as PROVIDER_AUTH_ENV_VAR_CANDIDATES } from "./registry-BFMbkmgR.js";
 import { r as applyProviderConfigWithDefaultModel, t as applyAgentDefaultModelPrimary } from "./provider-onboard-Ca0TaNud.js";
-import { r as isSubscriptionMode } from "./usage-mHPlkPI4.js";
-import { a as hasDeviceIdentity } from "./auth-C-elARYa.js";
-import { n as buildSubscriptionProvider, t as SUBSCRIPTION_PROVIDER_ID } from "./subscription-D9tfSJfc.js";
+import { r as isSubscriptionMode } from "./usage-R609A5oV.js";
+import { a as hasDeviceIdentity } from "./auth-44xGYGG8.js";
+import { n as buildSubscriptionProvider, t as SUBSCRIPTION_PROVIDER_ID } from "./subscription-Eg2IiICZ.js";
 import { a as logLaneEnqueue, i as logLaneDequeue, l as logSessionStateChange, o as logMessageProcessed, s as logMessageQueued, t as diag, y as getDiagnosticSessionState } from "./diagnostic-D96Xaqrj.js";
 import { a as toInternalMessageSentContext, c as toPluginInboundClaimEvent, d as toPluginMessageSentEvent, f as fireAndForgetHook, i as toInternalMessageReceivedContext, l as toPluginMessageContext, n as deriveInboundMessageHookContext, o as toInternalMessageTranscribedContext, r as toInternalMessagePreprocessedContext, s as toPluginInboundClaimContext, t as buildCanonicalSentMessageHookContext, u as toPluginMessageReceivedEvent } from "./message-hook-mappers-CeiHXgSQ.js";
 import { t as KeyedAsyncQueue } from "./keyed-async-queue-q1DnXPL8.js";
 import { t as resolveBrewExecutable } from "./brew-DXkftFyr.js";
 import { n as writeJsonFileAtomically, t as readJsonFileWithFallback } from "./json-store--7cBPxTG.js";
-import { i as callGatewayLeastPrivilege, n as callGateway, s as randomIdempotencyKey } from "./call-7m_dY36v.js";
+import { i as callGatewayLeastPrivilege, n as callGateway, s as randomIdempotencyKey } from "./call-DPyZUKSd.js";
 import { i as getMemoryMultimodalExtensions, r as classifyMemoryMultimodalPath, t as buildCaseInsensitiveExtensionGlob } from "./multimodal-BJBBn_4F.js";
 import { t as resolveMemorySearchConfig } from "./memory-search-Cv1SBrn7.js";
 import { t as parseGeminiAuth } from "./google-CWlY451I.js";
 import { C as isFileMissingError, S as splitTextToUtf8ByteLimit, _ as remapChunkLines, a as listSessionFilesForAgent, b as estimateStructuredEmbeddingInputBytes, c as buildMultimodalChunkForIndexing, d as ensureDir$2, f as hashText$1, g as parseEmbedding, h as normalizeExtraMemoryPaths, i as buildSessionEntry, l as chunkMarkdown, m as listMemoryFiles, n as isQueryStopWordToken, o as sessionPathForFile, p as isMemoryPath, r as requireNodeSqlite, s as buildFileEntry, t as extractKeywords, u as cosineSimilarity, v as runWithConcurrency$1, w as statRegularFile, x as estimateUtf8Bytes, y as hasNonTextEmbeddingParts } from "./query-expansion-D_Mm5Hhi.js";
-import { n as getMemorySearchManager, r as resolveMemoryBackendConfig } from "./search-manager-D7p2NkG9.js";
+import { n as getMemorySearchManager, r as resolveMemoryBackendConfig } from "./search-manager-B4K_Cjxy.js";
 import { a as buildOutboundBaseSessionKey, c as buildOauthProviderAuthResult, i as normalizeOutboundThreadId, n as definePluginEntry } from "./core-CvDzLs7B.js";
 import { n as formatConfigIssueLines } from "./issue-format-B0SI57Es.js";
 import { n as logConfigUpdated } from "./logging-CxP9suT8.js";
@@ -125,13 +125,13 @@ import { a as resolvePairingPaths, i as pruneExpiredPending, n as verifyPairingT
 import { i as resolveLineAccount, n as normalizeAccountId$2, r as resolveDefaultLineAccountId, t as listLineAccountIds } from "./accounts-J2OhhhQi.js";
 import { t as buildTemplateMessageFromPayload } from "./template-messages-dPxEb-WR.js";
 import { r as isAllowedParsedChatSender } from "./allow-from-Brz0jyla.js";
-import { n as collectTelegramUnmentionedGroupIds } from "./audit-BBzX-cxP.js";
+import { n as collectTelegramUnmentionedGroupIds } from "./audit-w7tl35VI.js";
 import { t as waitForever } from "./cli-runtime-DTCHPjCi.js";
 import { r as withManager } from "./cli-utils-BCuSS4l6.js";
 import { t as formatHelpExamples } from "./help-format-BFzPm_8V.js";
 import { n as withProgress, r as withProgressTotals } from "./progress-Cwq59vgZ.js";
 import { t as resolveRequestUrl$1 } from "./request-url-Dr0KbLMK.js";
-import { r as createConnectedChannelStatusPatch } from "./gateway-runtime-D4jWu9X8.js";
+import { r as createConnectedChannelStatusPatch } from "./gateway-runtime-BY9n2Yad.js";
 import { createRequire } from "node:module";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";
@@ -197,7 +197,7 @@ function resolveAuthProfileDisplayLabel(params) {
 //#region src/agents/auth-profiles/doctor.ts
 let providerRuntimePromise$3;
 function loadProviderRuntime$3() {
-	providerRuntimePromise$3 ??= import("./provider-runtime.runtime-BPOa2DFq.js");
+	providerRuntimePromise$3 ??= import("./provider-runtime.runtime-Wmf2T2Tj.js");
 	return providerRuntimePromise$3;
 }
 async function formatAuthDoctorHint(params) {
@@ -1133,7 +1133,7 @@ function repairOAuthProfileIdMismatch(params) {
 const OAUTH_PROVIDER_IDS = new Set(getOAuthProviders().map((provider) => provider.id));
 let providerRuntimePromise$2;
 function loadProviderRuntime$2() {
-	providerRuntimePromise$2 ??= import("./provider-runtime.runtime-BPOa2DFq.js");
+	providerRuntimePromise$2 ??= import("./provider-runtime.runtime-Wmf2T2Tj.js");
 	return providerRuntimePromise$2;
 }
 const isOAuthProvider = (provider) => OAUTH_PROVIDER_IDS.has(provider);
@@ -5691,15 +5691,15 @@ let discordInspectModulePromise;
 let slackInspectModulePromise;
 let telegramInspectModulePromise;
 function loadDiscordInspectModule() {
-	discordInspectModulePromise ??= import("./read-only-account-inspect.discord.runtime-BTtgfapn.js");
+	discordInspectModulePromise ??= import("./read-only-account-inspect.discord.runtime-TLVpUc-c.js");
 	return discordInspectModulePromise;
 }
 function loadSlackInspectModule() {
-	slackInspectModulePromise ??= import("./read-only-account-inspect.slack.runtime-DlvWJqmw.js");
+	slackInspectModulePromise ??= import("./read-only-account-inspect.slack.runtime-BUM63lzY.js");
 	return slackInspectModulePromise;
 }
 function loadTelegramInspectModule() {
-	telegramInspectModulePromise ??= import("./read-only-account-inspect.telegram.runtime-B7bHrqcp.js");
+	telegramInspectModulePromise ??= import("./read-only-account-inspect.telegram.runtime-U2B5ndvX.js");
 	return telegramInspectModulePromise;
 }
 async function inspectReadOnlyChannelAccount(params) {
@@ -10460,7 +10460,7 @@ const AWS_SECRET_KEY_ENV = "AWS_SECRET_ACCESS_KEY";
 const AWS_PROFILE_ENV = "AWS_PROFILE";
 let providerRuntimePromise$1;
 function loadProviderRuntime$1() {
-	providerRuntimePromise$1 ??= import("./provider-runtime.runtime-BPOa2DFq.js");
+	providerRuntimePromise$1 ??= import("./provider-runtime.runtime-Wmf2T2Tj.js");
 	return providerRuntimePromise$1;
 }
 function resolveProviderConfig(cfg, provider) {
@@ -10580,7 +10580,7 @@ function resolveAwsSdkAuthInfo() {
 async function resolveApiKeyForProvider(params) {
 	const { provider, cfg, profileId, preferredProfile } = params;
 	const store = params.store ?? ensureAuthProfileStore(params.agentDir);
-	const { isSubscriptionProvider, createSubscriptionAuthHeaders } = await import("./subscription-Bf50WgMm.js");
+	const { isSubscriptionProvider, createSubscriptionAuthHeaders } = await import("./subscription-D-Zb5prd.js");
 	if (isSubscriptionProvider(provider)) {
 		const authResult = createSubscriptionAuthHeaders();
 		if (authResult.success) return {
@@ -11974,17 +11974,17 @@ async function ensuremoldClawModelsJson(config, agentDirOverride) {
 const log$35 = createSubsystemLogger("model-catalog");
 let modelCatalogPromise = null;
 let hasLoggedModelCatalogError = false;
-const defaultImportPiSdk = () => import("./pi-model-discovery-runtime-BqZJ5MIC.js");
+const defaultImportPiSdk = () => import("./pi-model-discovery-runtime-DL-B9m0b.js");
 let importPiSdk = defaultImportPiSdk;
 let providerRuntimePromise;
 let modelSuppressionPromise;
 const NON_PI_NATIVE_MODEL_PROVIDERS = new Set(["kilocode"]);
 function loadProviderRuntime() {
-	providerRuntimePromise ??= import("./provider-runtime.runtime-BPOa2DFq.js");
+	providerRuntimePromise ??= import("./provider-runtime.runtime-Wmf2T2Tj.js");
 	return providerRuntimePromise;
 }
 function loadModelSuppression() {
-	modelSuppressionPromise ??= import("./model-suppression.runtime-Bwv0x2oy.js");
+	modelSuppressionPromise ??= import("./model-suppression.runtime-BC21P3GS.js");
 	return modelSuppressionPromise;
 }
 function normalizeConfiguredModelInput(input) {
@@ -16322,7 +16322,7 @@ function resolveProviderVisionModelFromConfig(params) {
 //#region src/media-understanding/providers/image.ts
 let piModelDiscoveryRuntimePromise = null;
 function loadPiModelDiscoveryRuntime() {
-	piModelDiscoveryRuntimePromise ??= import("./pi-model-discovery-runtime-BqZJ5MIC.js");
+	piModelDiscoveryRuntimePromise ??= import("./pi-model-discovery-runtime-DL-B9m0b.js");
 	return piModelDiscoveryRuntimePromise;
 }
 function resolveImageToolMaxTokens$1(modelMaxTokens, requestedMaxTokens = 4096) {
@@ -23069,7 +23069,7 @@ async function runWithConcurrency(tasks, limit) {
 //#region src/media-understanding/echo-transcript.ts
 let deliverRuntimePromise$2 = null;
 function loadDeliverRuntime$2() {
-	deliverRuntimePromise$2 ??= import("./deliver-runtime-BYu04h61.js");
+	deliverRuntimePromise$2 ??= import("./deliver-runtime-BVyq78pb.js");
 	return deliverRuntimePromise$2;
 }
 function formatEchoTranscript(transcript, format) {
@@ -29945,7 +29945,7 @@ var LegacyContextEngine = class {
 	}
 	async afterTurn(_params) {}
 	async compact(params) {
-		const { compactEmbeddedPiSessionDirect } = await import("./compact.runtime-CY8RDHOD.js");
+		const { compactEmbeddedPiSessionDirect } = await import("./compact.runtime-B1pgyf4u.js");
 		const runtimeContext = params.runtimeContext ?? {};
 		const currentTokenCount = params.currentTokenCount ?? (typeof runtimeContext.currentTokenCount === "number" && Number.isFinite(runtimeContext.currentTokenCount) && runtimeContext.currentTokenCount > 0 ? Math.floor(runtimeContext.currentTokenCount) : void 0);
 		const result = await compactEmbeddedPiSessionDirect({
@@ -35803,7 +35803,7 @@ async function loginOpenAICodexOAuth(params) {
 }
 //#endregion
 //#region src/plugins/provider-api-key-auth.ts
-const loadProviderApiKeyAuthRuntime = createLazyRuntimeSurface(() => import("./provider-api-key-auth.runtime-eD-77DII.js"), ({ providerApiKeyAuthRuntime }) => providerApiKeyAuthRuntime);
+const loadProviderApiKeyAuthRuntime = createLazyRuntimeSurface(() => import("./provider-api-key-auth.runtime-CzhlrkuU.js"), ({ providerApiKeyAuthRuntime }) => providerApiKeyAuthRuntime);
 function resolveStringOption(opts, optionKey) {
 	return normalizeOptionalSecretInput(opts?.[optionKey]);
 }
@@ -60534,7 +60534,7 @@ function ensureContextWindowCacheLoaded() {
 			await ensuremoldClawModelsJson(cfg);
 		} catch {}
 		try {
-			const { discoverAuthStorage, discoverModels } = await import("./pi-model-discovery-runtime-BqZJ5MIC.js");
+			const { discoverAuthStorage, discoverModels } = await import("./pi-model-discovery-runtime-DL-B9m0b.js");
 			const agentDir = resolvemoldClawAgentDir();
 			const modelRegistry = discoverModels(discoverAuthStorage(agentDir), agentDir);
 			applyDiscoveredContextWindows({
@@ -81147,6 +81147,21 @@ async function runEmbeddedPiAgent(params) {
 			}
 			if (preparedAuth?.apiKey) {
 				authStorage.setRuntimeApiKey(runtimeModel.provider, preparedAuth.apiKey);
+				const authHeader = { Authorization: `Bearer ${preparedAuth.apiKey}` };
+				runtimeModel = {
+					...runtimeModel,
+					headers: {
+						...runtimeModel.headers,
+						...authHeader
+					}
+				};
+				effectiveModel = {
+					...effectiveModel,
+					headers: {
+						...effectiveModel.headers,
+						...authHeader
+					}
+				};
 				runtimeAuthState = {
 					sourceApiKey: apiKeyInfo.apiKey,
 					authMode: apiKeyInfo.mode,
@@ -82291,7 +82306,7 @@ function normalizeReplyPayload(payload, opts = {}) {
 */
 let deliverRuntimePromise$1 = null;
 function loadDeliverRuntime$1() {
-	deliverRuntimePromise$1 ??= import("./deliver-runtime-BYu04h61.js");
+	deliverRuntimePromise$1 ??= import("./deliver-runtime-BVyq78pb.js");
 	return deliverRuntimePromise$1;
 }
 /**
@@ -82843,7 +82858,7 @@ const MAX_TIMER_SAFE_TIMEOUT_MS = 2147e6;
 const GATEWAY_TIMEOUT_PATTERN = /gateway timeout/i;
 let subagentRegistryRuntimePromise = null;
 function loadSubagentRegistryRuntime() {
-	subagentRegistryRuntimePromise ??= import("./subagent-registry-runtime-B3ut_MAC.js");
+	subagentRegistryRuntimePromise ??= import("./subagent-registry-runtime-kWDgdsma.js");
 	return subagentRegistryRuntimePromise;
 }
 const DIRECT_ANNOUNCE_TRANSIENT_RETRY_DELAYS_MS = FAST_TEST_MODE ? [
@@ -84390,7 +84405,7 @@ function restoreSubagentRunsOnce() {
 		ensureListener();
 		if ([...subagentRuns.values()].some((entry) => entry.archiveAtMs)) startSweeper();
 		for (const runId of subagentRuns.keys()) resumeSubagentRun(runId);
-		import("./subagent-orphan-recovery-D8zETHgn.js").then(({ scheduleOrphanRecovery }) => {
+		import("./subagent-orphan-recovery-BmATH2ck.js").then(({ scheduleOrphanRecovery }) => {
 			scheduleOrphanRecovery({ getActiveRuns: () => subagentRuns });
 		}, () => {});
 	} catch {}
@@ -93990,7 +94005,7 @@ async function createDiscordTypingLease(params) {
 }
 //#endregion
 //#region src/plugins/runtime/runtime-discord.ts
-const loadRuntimeDiscordOps = createLazyRuntimeSurface(() => import("./runtime-discord-ops.runtime-BzUTTYye.js"), ({ runtimeDiscordOps }) => runtimeDiscordOps);
+const loadRuntimeDiscordOps = createLazyRuntimeSurface(() => import("./runtime-discord-ops.runtime-B24GgxZO.js"), ({ runtimeDiscordOps }) => runtimeDiscordOps);
 const auditChannelPermissionsLazy = createLazyRuntimeMethod(loadRuntimeDiscordOps, (runtimeDiscordOps) => runtimeDiscordOps.auditChannelPermissions);
 const listDirectoryGroupsLiveLazy$1 = createLazyRuntimeMethod(loadRuntimeDiscordOps, (runtimeDiscordOps) => runtimeDiscordOps.listDirectoryGroupsLive);
 const listDirectoryPeersLiveLazy$1 = createLazyRuntimeMethod(loadRuntimeDiscordOps, (runtimeDiscordOps) => runtimeDiscordOps.listDirectoryPeersLive);
@@ -97064,7 +97079,7 @@ function createRuntimeSignal() {
 }
 //#endregion
 //#region src/plugins/runtime/runtime-slack.ts
-const loadRuntimeSlackOps = createLazyRuntimeSurface(() => import("./runtime-slack-ops.runtime-C9tOGiGm.js"), ({ runtimeSlackOps }) => runtimeSlackOps);
+const loadRuntimeSlackOps = createLazyRuntimeSurface(() => import("./runtime-slack-ops.runtime-BmCBeQ2r.js"), ({ runtimeSlackOps }) => runtimeSlackOps);
 const listDirectoryGroupsLiveLazy = createLazyRuntimeMethod(loadRuntimeSlackOps, (runtimeSlackOps) => runtimeSlackOps.listDirectoryGroupsLive);
 const listDirectoryPeersLiveLazy = createLazyRuntimeMethod(loadRuntimeSlackOps, (runtimeSlackOps) => runtimeSlackOps.listDirectoryPeersLive);
 const probeSlackLazy = createLazyRuntimeMethod(loadRuntimeSlackOps, (runtimeSlackOps) => runtimeSlackOps.probeSlack);
@@ -97565,7 +97580,7 @@ async function createTelegramTypingLease(params) {
 }
 //#endregion
 //#region src/plugins/runtime/runtime-telegram.ts
-const loadRuntimeTelegramOps = createLazyRuntimeSurface(() => import("./runtime-telegram-ops.runtime-eRT0SWbJ.js"), ({ runtimeTelegramOps }) => runtimeTelegramOps);
+const loadRuntimeTelegramOps = createLazyRuntimeSurface(() => import("./runtime-telegram-ops.runtime-B8acueqK.js"), ({ runtimeTelegramOps }) => runtimeTelegramOps);
 const auditGroupMembershipLazy = createLazyRuntimeMethod(loadRuntimeTelegramOps, (runtimeTelegramOps) => runtimeTelegramOps.auditGroupMembership);
 const probeTelegramLazy = createLazyRuntimeMethod(loadRuntimeTelegramOps, (runtimeTelegramOps) => runtimeTelegramOps.probeTelegram);
 const sendMessageTelegramLazy = createLazyRuntimeMethod(loadRuntimeTelegramOps, (runtimeTelegramOps) => runtimeTelegramOps.sendMessageTelegram);
@@ -97808,7 +97823,7 @@ function createWhatsAppLoginTool() {
 			force: Type.Optional(Type.Boolean())
 		}),
 		execute: async (_toolCallId, args) => {
-			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-CR3gO3c8.js");
+			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-DFpRXoBB.js");
 			if ((args?.action ?? "start") === "wait") {
 				const result = await waitForWebLogin({ timeoutMs: typeof args.timeoutMs === "number" ? args.timeoutMs : void 0 });
 				return {
@@ -97848,8 +97863,8 @@ function createWhatsAppLoginTool() {
 }
 //#endregion
 //#region src/plugins/runtime/runtime-whatsapp.ts
-const loadWebOutbound = createLazyRuntimeSurface(() => import("./runtime-whatsapp-outbound.runtime-C1m8S-Sr.js"), ({ runtimeWhatsAppOutbound }) => runtimeWhatsAppOutbound);
-const loadWebLogin = createLazyRuntimeSurface(() => import("./runtime-whatsapp-login.runtime-BKt_-ogC.js"), ({ runtimeWhatsAppLogin }) => runtimeWhatsAppLogin);
+const loadWebOutbound = createLazyRuntimeSurface(() => import("./runtime-whatsapp-outbound.runtime-Dj1nfX1O.js"), ({ runtimeWhatsAppOutbound }) => runtimeWhatsAppOutbound);
+const loadWebLogin = createLazyRuntimeSurface(() => import("./runtime-whatsapp-login.runtime-BKek__y3.js"), ({ runtimeWhatsAppLogin }) => runtimeWhatsAppLogin);
 const sendMessageWhatsAppLazy = createLazyRuntimeMethod(loadWebOutbound, (runtimeWhatsAppOutbound) => runtimeWhatsAppOutbound.sendMessageWhatsApp);
 const sendPollWhatsAppLazy = createLazyRuntimeMethod(loadWebOutbound, (runtimeWhatsAppOutbound) => runtimeWhatsAppOutbound.sendPollWhatsApp);
 const loginWebLazy = createLazyRuntimeMethod(loadWebLogin, (runtimeWhatsAppLogin) => runtimeWhatsAppLogin.loginWeb);
@@ -97873,15 +97888,15 @@ let webLoginQrPromise = null;
 let webChannelPromise = null;
 let whatsappActionsPromise = null;
 function loadWebLoginQr() {
-	webLoginQrPromise ??= import("./login-qr-CR3gO3c8.js");
+	webLoginQrPromise ??= import("./login-qr-DFpRXoBB.js");
 	return webLoginQrPromise;
 }
 function loadWebChannel() {
-	webChannelPromise ??= import("./web-CzVpTTAL.js");
+	webChannelPromise ??= import("./web-CrbTRvB4.js");
 	return webChannelPromise;
 }
 function loadWhatsAppActions() {
-	whatsappActionsPromise ??= import("./whatsapp-actions-CZ6MyW6o.js");
+	whatsappActionsPromise ??= import("./whatsapp-actions-C2Q1UAjq.js");
 	return whatsappActionsPromise;
 }
 function createRuntimeWhatsApp() {
@@ -101158,7 +101173,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./auth-profiles.runtime-B223nYV4.js");
+		const { ensureAuthProfileStore } = await import("./auth-profiles.runtime-oxdwjTv2.js");
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId(provider);
 		if (!profile || normalizeProviderId(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -107479,7 +107494,7 @@ const warnedContexts = /* @__PURE__ */ new Map();
 const log$4 = createSubsystemLogger("session-maintenance-warning");
 let deliverRuntimePromise = null;
 function loadDeliverRuntime() {
-	deliverRuntimePromise ??= import("./deliver-runtime-BYu04h61.js");
+	deliverRuntimePromise ??= import("./deliver-runtime-BVyq78pb.js");
 	return deliverRuntimePromise;
 }
 function shouldSendWarning() {
@@ -113953,12 +113968,12 @@ function createLazySender(channelId, loader) {
 }
 function createDefaultDeps() {
 	return {
-		whatsapp: createLazySender("whatsapp", () => import("./whatsapp-D0EoEm43.js")),
-		telegram: createLazySender("telegram", () => import("./telegram-BeIWQjrz.js")),
-		discord: createLazySender("discord", () => import("./discord-CxF9gPiE.js")),
-		slack: createLazySender("slack", () => import("./slack-3RAe-QKB.js")),
-		signal: createLazySender("signal", () => import("./signal-XBre5Y26.js")),
-		imessage: createLazySender("imessage", () => import("./imessage-B-6wVnay.js"))
+		whatsapp: createLazySender("whatsapp", () => import("./whatsapp-RAGlzDHm.js")),
+		telegram: createLazySender("telegram", () => import("./telegram-lodKdDQ8.js")),
+		discord: createLazySender("discord", () => import("./discord-hCm1ESTu.js")),
+		slack: createLazySender("slack", () => import("./slack-BpwI64lE.js")),
+		signal: createLazySender("signal", () => import("./signal-DoU1C4Pa.js")),
+		imessage: createLazySender("imessage", () => import("./imessage-pQpJFECm.js"))
 	};
 }
 function createOutboundSendDeps$1(deps) {
@@ -121569,7 +121584,7 @@ function wrapProviderStreamFn(params) {
 	return resolveProviderRuntimePlugin(params)?.wrapStreamFn?.(params.context) ?? void 0;
 }
 async function prepareProviderRuntimeAuth(params) {
-	const { isSubscriptionProvider, createSubscriptionAuthHeaders } = await import("./subscription-Bf50WgMm.js");
+	const { isSubscriptionProvider, createSubscriptionAuthHeaders } = await import("./subscription-D-Zb5prd.js");
 	if (isSubscriptionProvider(params.provider)) {
 		const authResult = createSubscriptionAuthHeaders();
 		if (authResult.success) return { apiKey: authResult.headers["X-Device-Identity"] };

package/dist/{auth-profiles.runtime-B223nYV4.js → auth-profiles.runtime-oxdwjTv2.js}

@@ -15,7 +15,7 @@ import "./warning-filter-B1UOeM0G.js";
 import "./utils-C7ykRPCQ.js";
 import "./links-BcahUP5U.js";
 import "./setup-binary-C17YnmA8.js";
-import { wE as ensureAuthProfileStore$1 } from "./auth-profiles-UQD1RQkG.js";
+import { wE as ensureAuthProfileStore$1 } from "./auth-profiles-ozqrH6RR.js";
 import "./model-selection-hL8i1Jbs.js";
 import "./agent-scope-C-YmLnnb.js";
 import "./boundary-file-read-tPYh_8fH.js";
@@ -60,7 +60,7 @@ import "./resolve-route-CSHDsa_m.js";
 import "./internal-hooks-83AcmxP3.js";
 import "./lazy-runtime-BoGB4usD.js";
 import "./config-schema-BNU4GQh_.js";
-import "./method-scopes-DTNYkocH.js";
+import "./method-scopes-CfRtamRU.js";
 import "./session-cost-usage-DWgQk6XT.js";
 import "./paths-ApLcu1Uu.js";
 import "./routing-DQ-fpTaA.js";
@@ -75,18 +75,18 @@ import "./runtime-env-BlEtPF6b.js";
 import "./registry-BFMbkmgR.js";
 import "./provider-onboard-Ca0TaNud.js";
 import "./model-definitions-Cyyzm6Kr.js";
-import "./usage-mHPlkPI4.js";
-import "./device-identity-DdfNLdug.js";
-import "./auth-C-elARYa.js";
-import "./subscription-D9tfSJfc.js";
+import "./usage-R609A5oV.js";
+import "./device-identity-B4itFxET.js";
+import "./auth-44xGYGG8.js";
+import "./subscription-Eg2IiICZ.js";
 import "./diagnostic-D96Xaqrj.js";
 import "./message-hook-mappers-CeiHXgSQ.js";
 import "./json-store--7cBPxTG.js";
-import "./call-7m_dY36v.js";
+import "./call-DPyZUKSd.js";
 import "./multimodal-BJBBn_4F.js";
 import "./memory-search-Cv1SBrn7.js";
 import "./query-expansion-D_Mm5Hhi.js";
-import "./search-manager-D7p2NkG9.js";
+import "./search-manager-B4K_Cjxy.js";
 import "./core-CvDzLs7B.js";
 import "./issue-format-B0SI57Es.js";
 import "./logging-CxP9suT8.js";
@@ -102,12 +102,12 @@ import "./delivery-queue-BOf5wYIc.js";
 import "./pairing-token-bu1e6z6X.js";
 import "./accounts-J2OhhhQi.js";
 import "./process-runtime-D27SftX_.js";
-import "./audit-BBzX-cxP.js";
+import "./audit-w7tl35VI.js";
 import "./cli-runtime-DTCHPjCi.js";
 import "./cli-utils-BCuSS4l6.js";
 import "./help-format-BFzPm_8V.js";
 import "./progress-Cwq59vgZ.js";
-import "./gateway-runtime-D4jWu9X8.js";
+import "./gateway-runtime-BY9n2Yad.js";
 //#region src/agents/auth-profiles.runtime.ts
 function ensureAuthProfileStore(...args) {
 	return ensureAuthProfileStore$1(...args);

package/dist/{bluebubbles-x7xbgesn.d.ts → bluebubbles-CnT9wiS4.d.ts}

@@ -1,4 +1,4 @@
-import { NA as ChannelStatusIssue, uA as ChannelAccountSnapshot } from "./types-DiF9p1vl.js";
+import { NA as ChannelStatusIssue, uA as ChannelAccountSnapshot } from "./types-Ckufs_BY.js";
 
 //#region src/channels/plugins/status-issues/bluebubbles.d.ts
 declare function collectBlueBubblesStatusIssues(accounts: ChannelAccountSnapshot[]): ChannelStatusIssue[];

package/dist/{bluebubbles-Dck6XKIh.js → bluebubbles-D-2sjBVH.js}

@@ -1,5 +1,5 @@
 import { d as isRecord } from "./utils-C7ykRPCQ.js";
-import { bt as collectIssuesForEnabledAccounts, yt as asString } from "./auth-profiles-UQD1RQkG.js";
+import { bt as collectIssuesForEnabledAccounts, yt as asString } from "./auth-profiles-ozqrH6RR.js";
 //#region src/channels/plugins/status-issues/bluebubbles.ts
 function readBlueBubblesAccountStatus(value) {
 	if (!isRecord(value)) return null;

package/dist/{bot-BixEgQvP.d.ts → bot-CuzVYwa_.d.ts}

@@ -1,4 +1,4 @@
-import { cA as BaseProbeResult } from "./types-DiF9p1vl.js";
+import { cA as BaseProbeResult } from "./types-Ckufs_BY.js";
 import { z as z$1 } from "zod";
 
 //#region extensions/feishu/src/config-schema.d.ts

package/dist/{browser-cli-BxWtHM96.js → browser-cli-BNn6Kq3C.js}

@@ -46,13 +46,13 @@ import "./image-ops-Ck_D_vpe.js";
 import "./fs-safe-CRXFoBmh.js";
 import "./mime-DGFQe4XX.js";
 import "./message-channel-DFE4FuE_.js";
-import "./method-scopes-DTNYkocH.js";
-import "./device-identity-DdfNLdug.js";
-import "./call-7m_dY36v.js";
+import "./method-scopes-CfRtamRU.js";
+import "./device-identity-B4itFxET.js";
+import "./call-DPyZUKSd.js";
 import { n as runCommandWithRuntime } from "./cli-utils-BCuSS4l6.js";
 import { t as formatHelpExamples } from "./help-format-BFzPm_8V.js";
 import "./progress-Cwq59vgZ.js";
-import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-DCttnSpr.js";
+import { n as callGatewayFromCli, t as addGatewayClientOptions } from "./gateway-rpc-JBaYzgfZ.js";
 //#region src/cli/browser-cli-shared.ts
 function normalizeQuery(query) {
 	if (!query) return;

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "2026.3.33",
-  "commit": "da7768af8a214996e9c268779460588c092e4a3c",
-  "builtAt": "2026-03-28T09:12:19.554Z"
+  "version": "2026.3.36",
+  "commit": "8afaef1da1007cf815ab959748349167a3afe89d",
+  "builtAt": "2026-03-29T02:42:58.757Z"
 }

package/dist/bundled/boot-md/handler.d.ts

@@ -1,4 +1,4 @@
-import { t as HookHandler } from "../../hooks-DEFv44B9.js";
+import { t as HookHandler } from "../../hooks-06OUQvAV.js";
 
 //#region src/hooks/bundled/boot-md/handler.d.ts
 declare const runBootChecklist: HookHandler;

package/dist/bundled/boot-md/handler.js

@@ -15,7 +15,7 @@ import "../../warning-filter-B1UOeM0G.js";
 import "../../utils-C7ykRPCQ.js";
 import "../../links-BcahUP5U.js";
 import "../../setup-binary-C17YnmA8.js";
-import { fi as agentCommand, lC as updateSessionStore, rC as loadSessionStore, vi as createDefaultDeps } from "../../auth-profiles-UQD1RQkG.js";
+import { fi as agentCommand, lC as updateSessionStore, rC as loadSessionStore, vi as createDefaultDeps } from "../../auth-profiles-ozqrH6RR.js";
 import "../../model-selection-hL8i1Jbs.js";
 import { p as resolveAgentWorkspaceDir, r as listAgentIds } from "../../agent-scope-C-YmLnnb.js";
 import { u as resolveAgentIdFromSessionKey } from "../../session-key-UoG7Kfw5.js";
@@ -61,7 +61,7 @@ import "../../resolve-route-CSHDsa_m.js";
 import { a as isGatewayStartupEvent } from "../../internal-hooks-83AcmxP3.js";
 import { f as resolveMainSessionKey, m as SILENT_REPLY_TOKEN, u as resolveAgentMainSessionKey } from "../../lazy-runtime-BoGB4usD.js";
 import "../../config-schema-BNU4GQh_.js";
-import "../../method-scopes-DTNYkocH.js";
+import "../../method-scopes-CfRtamRU.js";
 import "../../session-cost-usage-DWgQk6XT.js";
 import { l as resolveStorePath } from "../../paths-ApLcu1Uu.js";
 import "../../routing-DQ-fpTaA.js";
@@ -76,18 +76,18 @@ import "../../runtime-env-BlEtPF6b.js";
 import "../../registry-BFMbkmgR.js";
 import "../../provider-onboard-Ca0TaNud.js";
 import "../../model-definitions-Cyyzm6Kr.js";
-import "../../usage-mHPlkPI4.js";
-import "../../device-identity-DdfNLdug.js";
-import "../../auth-C-elARYa.js";
-import "../../subscription-D9tfSJfc.js";
+import "../../usage-R609A5oV.js";
+import "../../device-identity-B4itFxET.js";
+import "../../auth-44xGYGG8.js";
+import "../../subscription-Eg2IiICZ.js";
 import "../../diagnostic-D96Xaqrj.js";
 import "../../message-hook-mappers-CeiHXgSQ.js";
 import "../../json-store--7cBPxTG.js";
-import "../../call-7m_dY36v.js";
+import "../../call-DPyZUKSd.js";
 import "../../multimodal-BJBBn_4F.js";
 import "../../memory-search-Cv1SBrn7.js";
 import "../../query-expansion-D_Mm5Hhi.js";
-import "../../search-manager-D7p2NkG9.js";
+import "../../search-manager-B4K_Cjxy.js";
 import "../../core-CvDzLs7B.js";
 import "../../issue-format-B0SI57Es.js";
 import "../../logging-CxP9suT8.js";
@@ -103,12 +103,12 @@ import "../../delivery-queue-BOf5wYIc.js";
 import "../../pairing-token-bu1e6z6X.js";
 import "../../accounts-J2OhhhQi.js";
 import "../../process-runtime-D27SftX_.js";
-import "../../audit-BBzX-cxP.js";
+import "../../audit-w7tl35VI.js";
 import "../../cli-runtime-DTCHPjCi.js";
 import "../../cli-utils-BCuSS4l6.js";
 import "../../help-format-BFzPm_8V.js";
 import "../../progress-Cwq59vgZ.js";
-import "../../gateway-runtime-D4jWu9X8.js";
+import "../../gateway-runtime-BY9n2Yad.js";
 import "../../agent-DND0GjcQ.js";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/bundled/bootstrap-extra-files/handler.d.ts

@@ -1,4 +1,4 @@
-import { t as HookHandler } from "../../hooks-DEFv44B9.js";
+import { t as HookHandler } from "../../hooks-06OUQvAV.js";
 
 //#region src/hooks/bundled/bootstrap-extra-files/handler.d.ts
 declare const bootstrapExtraFilesHook: HookHandler;

package/dist/bundled/command-logger/handler.d.ts

@@ -1,4 +1,4 @@
-import { t as HookHandler } from "../../hooks-DEFv44B9.js";
+import { t as HookHandler } from "../../hooks-06OUQvAV.js";
 
 //#region src/hooks/bundled/command-logger/handler.d.ts
 /**

package/dist/bundled/session-memory/handler.d.ts

@@ -1,4 +1,4 @@
-import { t as HookHandler } from "../../hooks-DEFv44B9.js";
+import { t as HookHandler } from "../../hooks-06OUQvAV.js";
 
 //#region src/hooks/bundled/session-memory/handler.d.ts
 /**

package/dist/bundled/session-memory/handler.js

@@ -15,7 +15,7 @@ import "../../warning-filter-B1UOeM0G.js";
 import "../../utils-C7ykRPCQ.js";
 import "../../links-BcahUP5U.js";
 import "../../setup-binary-C17YnmA8.js";
-import "../../auth-profiles-UQD1RQkG.js";
+import "../../auth-profiles-ozqrH6RR.js";
 import "../../model-selection-hL8i1Jbs.js";
 import { c as resolveAgentIdByWorkspacePath, p as resolveAgentWorkspaceDir } from "../../agent-scope-C-YmLnnb.js";
 import { S as parseAgentSessionKey, h as toAgentStoreSessionKey, u as resolveAgentIdFromSessionKey } from "../../session-key-UoG7Kfw5.js";
@@ -61,7 +61,7 @@ import "../../resolve-route-CSHDsa_m.js";
 import "../../internal-hooks-83AcmxP3.js";
 import "../../lazy-runtime-BoGB4usD.js";
 import "../../config-schema-BNU4GQh_.js";
-import { nn as hasInterSessionUserProvenance } from "../../method-scopes-DTNYkocH.js";
+import { nn as hasInterSessionUserProvenance } from "../../method-scopes-CfRtamRU.js";
 import "../../session-cost-usage-DWgQk6XT.js";
 import "../../paths-ApLcu1Uu.js";
 import "../../routing-DQ-fpTaA.js";
@@ -76,18 +76,18 @@ import "../../runtime-env-BlEtPF6b.js";
 import "../../registry-BFMbkmgR.js";
 import "../../provider-onboard-Ca0TaNud.js";
 import "../../model-definitions-Cyyzm6Kr.js";
-import "../../usage-mHPlkPI4.js";
-import "../../device-identity-DdfNLdug.js";
-import "../../auth-C-elARYa.js";
-import "../../subscription-D9tfSJfc.js";
+import "../../usage-R609A5oV.js";
+import "../../device-identity-B4itFxET.js";
+import "../../auth-44xGYGG8.js";
+import "../../subscription-Eg2IiICZ.js";
 import "../../diagnostic-D96Xaqrj.js";
 import "../../message-hook-mappers-CeiHXgSQ.js";
 import "../../json-store--7cBPxTG.js";
-import "../../call-7m_dY36v.js";
+import "../../call-DPyZUKSd.js";
 import "../../multimodal-BJBBn_4F.js";
 import "../../memory-search-Cv1SBrn7.js";
 import "../../query-expansion-D_Mm5Hhi.js";
-import "../../search-manager-D7p2NkG9.js";
+import "../../search-manager-B4K_Cjxy.js";
 import "../../core-CvDzLs7B.js";
 import "../../issue-format-B0SI57Es.js";
 import "../../logging-CxP9suT8.js";
@@ -103,13 +103,13 @@ import "../../delivery-queue-BOf5wYIc.js";
 import "../../pairing-token-bu1e6z6X.js";
 import "../../accounts-J2OhhhQi.js";
 import "../../process-runtime-D27SftX_.js";
-import "../../audit-BBzX-cxP.js";
+import "../../audit-w7tl35VI.js";
 import "../../cli-runtime-DTCHPjCi.js";
 import "../../cli-utils-BCuSS4l6.js";
 import "../../help-format-BFzPm_8V.js";
 import "../../progress-Cwq59vgZ.js";
-import "../../gateway-runtime-D4jWu9X8.js";
-import { t as generateSlugViaLLM } from "../../llm-slug-generator-4Dt-vgUK.js";
+import "../../gateway-runtime-BY9n2Yad.js";
+import { t as generateSlugViaLLM } from "../../llm-slug-generator-DLOIaTso.js";
 import { n as resolveHookConfig } from "../../config--YtWGcOa.js";
 import path from "node:path";
 import os from "node:os";

package/dist/{call-DMTt4nWs.js → call-BmrlO1_v.js}

@@ -33,7 +33,7 @@ import "./tailnet-fFTz5Twr.js";
 import "./net-K181nxTH.js";
 import "./credentials-D-5Pb-aZ.js";
 import "./message-channel-DFE4FuE_.js";
-import "./method-scopes-DTNYkocH.js";
-import "./device-identity-DdfNLdug.js";
-import { a as callGatewayScoped, c as resolveExplicitGatewayAuth, i as callGatewayLeastPrivilege, l as resolveGatewayCredentialsWithSecretInputs, n as callGateway, o as ensureExplicitGatewayAuth, r as callGatewayCli, s as randomIdempotencyKey, t as buildGatewayConnectionDetails } from "./call-7m_dY36v.js";
+import "./method-scopes-CfRtamRU.js";
+import "./device-identity-B4itFxET.js";
+import { a as callGatewayScoped, c as resolveExplicitGatewayAuth, i as callGatewayLeastPrivilege, l as resolveGatewayCredentialsWithSecretInputs, n as callGateway, o as ensureExplicitGatewayAuth, r as callGatewayCli, s as randomIdempotencyKey, t as buildGatewayConnectionDetails } from "./call-DPyZUKSd.js";
 export { buildGatewayConnectionDetails, callGateway, callGatewayCli, callGatewayLeastPrivilege, callGatewayScoped, ensureExplicitGatewayAuth, randomIdempotencyKey, resolveExplicitGatewayAuth, resolveGatewayCredentialsWithSecretInputs };

package/dist/{call-7m_dY36v.js → call-DPyZUKSd.js}

@@ -7,8 +7,8 @@ import { n as resolveSecretRefString } from "./resolve-PSlwZjg3.js";
 import { i as isSecureWebSocketUrl } from "./net-K181nxTH.js";
 import { f as trimToUndefined, r as resolveGatewayCredentialsFromConfig, t as GatewaySecretRefUnavailableError } from "./credentials-D-5Pb-aZ.js";
 import { _ as GATEWAY_CLIENT_MODES, v as GATEWAY_CLIENT_NAMES } from "./message-channel-DFE4FuE_.js";
-import { en as normalizeFingerprint, l as resolveLeastPrivilegeOperatorScopesForMethod, r as CLI_DEFAULT_OPERATOR_SCOPES, u as GatewayClient } from "./method-scopes-DTNYkocH.js";
-import { n as loadOrCreateDeviceIdentity } from "./device-identity-DdfNLdug.js";
+import { en as normalizeFingerprint, l as resolveLeastPrivilegeOperatorScopesForMethod, r as CLI_DEFAULT_OPERATOR_SCOPES, u as GatewayClient } from "./method-scopes-CfRtamRU.js";
+import { n as loadOrCreateDeviceIdentity } from "./device-identity-B4itFxET.js";
 import path from "node:path";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-af74cdfa9017bab75a6d9fa488181688e0376537f6dde279e4e49171fde24016
+e250ed898d05a72a72474e924877f8951470349ea34b98b1e93de4532a334108