activeclaw 2026.2.11 → 2026.2.13

package/dist/{deliver-T9d44OpZ.js → deliver-LsxKETro.js}

@@ -1,295 +1,283 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { A as logVerbose, C as getActivePluginRegistry, N as shouldLogVerbose } from "./subsystem-Bh1Y_6Uv.js";
-import { b as resolveUserPath, l as escapeRegExp } from "./utils-es4ygvQ-.js";
-import { i as isMessagingToolDuplicate } from "./pi-embedded-helpers-DYH6OWft.js";
+import { A as logVerbose, C as getActivePluginRegistry, N as shouldLogVerbose, t as createSubsystemLogger } from "./subsystem-BoExtIHo.js";
+import { b as resolveUserPath, l as escapeRegExp } from "./utils-Cd9QdCHh.js";
+import { i as isMessagingToolDuplicate } from "./pi-embedded-helpers-CMKLjW6X.js";
 import { c as normalizeAccountId$1 } from "./session-key-BWxPj0z_.js";
-import { i as loadConfig } from "./config--NUdpACy.js";
-import { r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CNaHNND_.js";
-import { V as getChannelDock, W as resolveSignalAccount, l as appendAssistantMessageToSessionTranscript, u as resolveMirroredTranscriptText } from "./sandbox-DqUO2K83.js";
-import { C as resolvePinnedHostnameWithPolicy, S as resolvePinnedHostname, _ as maxBytesForKind, a as optimizeImageToPng, b as closeDispatcher, c as saveMediaBuffer, i as hasAlphaChannel, l as detectMime, n as convertHeicToJpeg, o as resizeToJpeg, u as extensionForMime, v as mediaKindFromMime, x as createPinnedDispatcher } from "./routes-DUkEKAc1.js";
-import { t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-Cu61-7H6.js";
+import { i as loadConfig } from "./config-aFQssWKX.js";
+import { r as normalizeChannelId, t as getChannelPlugin } from "./plugins-X7d_tfTE.js";
+import { V as getChannelDock, W as resolveSignalAccount, l as appendAssistantMessageToSessionTranscript, u as resolveMirroredTranscriptText } from "./sandbox-Bhjnh1Xg.js";
+import { _ as maxBytesForKind, a as optimizeImageToPng, c as saveMediaBuffer, i as hasAlphaChannel, l as detectMime, n as convertHeicToJpeg, o as resizeToJpeg, u as extensionForMime, v as mediaKindFromMime } from "./routes-CmOI1hIH.js";
+import { t as INTERNAL_MESSAGE_CHANNEL } from "./message-channel-BLi2a6Yw.js";
+import { n as fetchRemoteMedia, r as fetchWithTimeout } from "./fetch-DmiOpALK.js";
 import { fileURLToPath } from "node:url";
+import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { randomUUID } from "node:crypto";
 import MarkdownIt from "markdown-it";
 
-//#region src/infra/net/fetch-guard.ts
-const DEFAULT_MAX_REDIRECTS = 3;
-function isRedirectStatus(status) {
-	return status === 301 || status === 302 || status === 303 || status === 307 || status === 308;
-}
-function buildAbortSignal(params) {
-	const { timeoutMs, signal } = params;
-	if (!timeoutMs && !signal) return {
-		signal: void 0,
-		cleanup: () => {}
-	};
-	if (!timeoutMs) return {
-		signal,
-		cleanup: () => {}
-	};
-	const controller = new AbortController();
-	const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
-	const onAbort = () => controller.abort();
-	if (signal) if (signal.aborted) controller.abort();
-	else signal.addEventListener("abort", onAbort, { once: true });
-	const cleanup = () => {
-		clearTimeout(timeoutId);
-		if (signal) signal.removeEventListener("abort", onAbort);
-	};
-	return {
-		signal: controller.signal,
-		cleanup
-	};
-}
-async function fetchWithSsrFGuard(params) {
-	const fetcher = params.fetchImpl ?? globalThis.fetch;
-	if (!fetcher) throw new Error("fetch is not available");
-	const maxRedirects = typeof params.maxRedirects === "number" && Number.isFinite(params.maxRedirects) ? Math.max(0, Math.floor(params.maxRedirects)) : DEFAULT_MAX_REDIRECTS;
-	const { signal, cleanup } = buildAbortSignal({
-		timeoutMs: params.timeoutMs,
-		signal: params.signal
-	});
-	let released = false;
-	const release = async (dispatcher) => {
-		if (released) return;
-		released = true;
-		cleanup();
-		await closeDispatcher(dispatcher ?? void 0);
-	};
-	const visited = /* @__PURE__ */ new Set();
-	let currentUrl = params.url;
-	let redirectCount = 0;
-	while (true) {
-		let parsedUrl;
-		try {
-			parsedUrl = new URL(currentUrl);
-		} catch {
-			await release();
-			throw new Error("Invalid URL: must be http or https");
-		}
-		if (!["http:", "https:"].includes(parsedUrl.protocol)) {
-			await release();
-			throw new Error("Invalid URL: must be http or https");
-		}
-		let dispatcher = null;
-		try {
-			const pinned = Boolean(params.policy?.allowPrivateNetwork || params.policy?.allowedHostnames?.length) ? await resolvePinnedHostnameWithPolicy(parsedUrl.hostname, {
-				lookupFn: params.lookupFn,
-				policy: params.policy
-			}) : await resolvePinnedHostname(parsedUrl.hostname, params.lookupFn);
-			if (params.pinDns !== false) dispatcher = createPinnedDispatcher(pinned);
-			const init = {
-				...params.init ? { ...params.init } : {},
-				redirect: "manual",
-				...dispatcher ? { dispatcher } : {},
-				...signal ? { signal } : {}
-			};
-			const response = await fetcher(parsedUrl.toString(), init);
-			if (isRedirectStatus(response.status)) {
-				const location = response.headers.get("location");
-				if (!location) {
-					await release(dispatcher);
-					throw new Error(`Redirect missing location header (${response.status})`);
-				}
-				redirectCount += 1;
-				if (redirectCount > maxRedirects) {
-					await release(dispatcher);
-					throw new Error(`Too many redirects (limit: ${maxRedirects})`);
-				}
-				const nextUrl = new URL(location, parsedUrl).toString();
-				if (visited.has(nextUrl)) {
-					await release(dispatcher);
-					throw new Error("Redirect loop detected");
-				}
-				visited.add(nextUrl);
-				response.body?.cancel();
-				await closeDispatcher(dispatcher);
-				currentUrl = nextUrl;
-				continue;
-			}
-			return {
-				response,
-				finalUrl: currentUrl,
-				release: async () => release(dispatcher)
-			};
-		} catch (err) {
-			await release(dispatcher);
-			throw err;
-		}
-	}
+//#region src/auto-reply/tokens.ts
+const HEARTBEAT_TOKEN = "HEARTBEAT_OK";
+const SILENT_REPLY_TOKEN = "NO_REPLY";
+function isSilentReplyText(text, token = SILENT_REPLY_TOKEN) {
+	if (!text) return false;
+	const escaped = escapeRegExp(token);
+	if (new RegExp(`^\\s*${escaped}(?=$|\\W)`).test(text)) return true;
+	return new RegExp(`\\b${escaped}\\b\\W*$`).test(text);
 }
 
 //#endregion
-//#region src/utils/fetch-timeout.ts
+//#region src/plugins/hooks.ts
 /**
-* Fetch wrapper that adds timeout support via AbortController.
-*
-* @param url - The URL to fetch
-* @param init - RequestInit options (headers, method, body, etc.)
-* @param timeoutMs - Timeout in milliseconds
-* @param fetchFn - The fetch implementation to use (defaults to global fetch)
-* @returns The fetch Response
-* @throws AbortError if the request times out
+* Get hooks for a specific hook name, sorted by priority (higher first).
 */
-async function fetchWithTimeout(url, init, timeoutMs, fetchFn = fetch) {
-	const controller = new AbortController();
-	const timer = setTimeout(() => controller.abort(), Math.max(1, timeoutMs));
-	try {
-		return await fetchFn(url, {
-			...init,
-			signal: controller.signal
-		});
-	} finally {
-		clearTimeout(timer);
-	}
+function getHooksForName(registry, hookName) {
+	return registry.typedHooks.filter((h) => h.hookName === hookName).toSorted((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
 }
-
-//#endregion
-//#region src/media/fetch.ts
-var MediaFetchError = class extends Error {
-	constructor(code, message) {
-		super(message);
-		this.code = code;
-		this.name = "MediaFetchError";
-	}
-};
-function stripQuotes(value) {
-	return value.replace(/^["']|["']$/g, "");
-}
-function parseContentDispositionFileName(header) {
-	if (!header) return;
-	const starMatch = /filename\*\s*=\s*([^;]+)/i.exec(header);
-	if (starMatch?.[1]) {
-		const cleaned = stripQuotes(starMatch[1].trim());
-		const encoded = cleaned.split("''").slice(1).join("''") || cleaned;
-		try {
-			return path.basename(decodeURIComponent(encoded));
-		} catch {
-			return path.basename(encoded);
-		}
-	}
-	const match = /filename\s*=\s*([^;]+)/i.exec(header);
-	if (match?.[1]) return path.basename(stripQuotes(match[1].trim()));
-}
-async function readErrorBodySnippet(res, maxChars = 200) {
-	try {
-		const text = await res.text();
-		if (!text) return;
-		const collapsed = text.replace(/\s+/g, " ").trim();
-		if (!collapsed) return;
-		if (collapsed.length <= maxChars) return collapsed;
-		return `${collapsed.slice(0, maxChars)}…`;
-	} catch {
-		return;
-	}
-}
-async function fetchRemoteMedia(options) {
-	const { url, fetchImpl, filePathHint, maxBytes, maxRedirects, ssrfPolicy, lookupFn } = options;
-	let res;
-	let finalUrl = url;
-	let release = null;
-	try {
-		const result = await fetchWithSsrFGuard({
-			url,
-			fetchImpl,
-			maxRedirects,
-			policy: ssrfPolicy,
-			lookupFn
-		});
-		res = result.response;
-		finalUrl = result.finalUrl;
-		release = result.release;
-	} catch (err) {
-		throw new MediaFetchError("fetch_failed", `Failed to fetch media from ${url}: ${String(err)}`);
-	}
-	try {
-		if (!res.ok) {
-			const statusText = res.statusText ? ` ${res.statusText}` : "";
-			const redirected = finalUrl !== url ? ` (redirected to ${finalUrl})` : "";
-			let detail = `HTTP ${res.status}${statusText}`;
-			if (!res.body) detail = `HTTP ${res.status}${statusText}; empty response body`;
-			else {
-				const snippet = await readErrorBodySnippet(res);
-				if (snippet) detail += `; body: ${snippet}`;
+/**
+* Create a hook runner for a specific registry.
+*/
+function createHookRunner(registry, options = {}) {
+	const logger = options.logger;
+	const catchErrors = options.catchErrors ?? true;
+	/**
+	* Run a hook that doesn't return a value (fire-and-forget style).
+	* All handlers are executed in parallel for performance.
+	*/
+	async function runVoidHook(hookName, event, ctx) {
+		const hooks = getHooksForName(registry, hookName);
+		if (hooks.length === 0) return;
+		logger?.debug?.(`[hooks] running ${hookName} (${hooks.length} handlers)`);
+		const promises = hooks.map(async (hook) => {
+			try {
+				await hook.handler(event, ctx);
+			} catch (err) {
+				const msg = `[hooks] ${hookName} handler from ${hook.pluginId} failed: ${String(err)}`;
+				if (catchErrors) logger?.error(msg);
+				else throw new Error(msg, { cause: err });
 			}
-			throw new MediaFetchError("http_error", `Failed to fetch media from ${url}${redirected}: ${detail}`);
-		}
-		const contentLength = res.headers.get("content-length");
-		if (maxBytes && contentLength) {
-			const length = Number(contentLength);
-			if (Number.isFinite(length) && length > maxBytes) throw new MediaFetchError("max_bytes", `Failed to fetch media from ${url}: content length ${length} exceeds maxBytes ${maxBytes}`);
-		}
-		const buffer = maxBytes ? await readResponseWithLimit(res, maxBytes) : Buffer.from(await res.arrayBuffer());
-		let fileNameFromUrl;
-		try {
-			const parsed = new URL(finalUrl);
-			fileNameFromUrl = path.basename(parsed.pathname) || void 0;
-		} catch {}
-		const headerFileName = parseContentDispositionFileName(res.headers.get("content-disposition"));
-		let fileName = headerFileName || fileNameFromUrl || (filePathHint ? path.basename(filePathHint) : void 0);
-		const filePathForMime = headerFileName && path.extname(headerFileName) ? headerFileName : filePathHint ?? finalUrl;
-		const contentType = await detectMime({
-			buffer,
-			headerMime: res.headers.get("content-type"),
-			filePath: filePathForMime
 		});
-		if (fileName && !path.extname(fileName) && contentType) {
-			const ext = extensionForMime(contentType);
-			if (ext) fileName = `${fileName}${ext}`;
+		await Promise.all(promises);
+	}
+	/**
+	* Run a hook that can return a modifying result.
+	* Handlers are executed sequentially in priority order, and results are merged.
+	*/
+	async function runModifyingHook(hookName, event, ctx, mergeResults) {
+		const hooks = getHooksForName(registry, hookName);
+		if (hooks.length === 0) return;
+		logger?.debug?.(`[hooks] running ${hookName} (${hooks.length} handlers, sequential)`);
+		let result;
+		for (const hook of hooks) try {
+			const handlerResult = await hook.handler(event, ctx);
+			if (handlerResult !== void 0 && handlerResult !== null) if (mergeResults && result !== void 0) result = mergeResults(result, handlerResult);
+			else result = handlerResult;
+		} catch (err) {
+			const msg = `[hooks] ${hookName} handler from ${hook.pluginId} failed: ${String(err)}`;
+			if (catchErrors) logger?.error(msg);
+			else throw new Error(msg, { cause: err });
 		}
-		return {
-			buffer,
-			contentType: contentType ?? void 0,
-			fileName
-		};
-	} finally {
-		if (release) await release();
-	}
-}
-async function readResponseWithLimit(res, maxBytes) {
-	const body = res.body;
-	if (!body || typeof body.getReader !== "function") {
-		const fallback = Buffer.from(await res.arrayBuffer());
-		if (fallback.length > maxBytes) throw new MediaFetchError("max_bytes", `Failed to fetch media from ${res.url || "response"}: payload exceeds maxBytes ${maxBytes}`);
-		return fallback;
+		return result;
 	}
-	const reader = body.getReader();
-	const chunks = [];
-	let total = 0;
-	try {
-		while (true) {
-			const { done, value } = await reader.read();
-			if (done) break;
-			if (value?.length) {
-				total += value.length;
-				if (total > maxBytes) {
-					try {
-						await reader.cancel();
-					} catch {}
-					throw new MediaFetchError("max_bytes", `Failed to fetch media from ${res.url || "response"}: payload exceeds maxBytes ${maxBytes}`);
+	/**
+	* Run before_agent_start hook.
+	* Allows plugins to inject context into the system prompt.
+	* Runs sequentially, merging systemPrompt and prependContext from all handlers.
+	*/
+	async function runBeforeAgentStart(event, ctx) {
+		return runModifyingHook("before_agent_start", event, ctx, (acc, next) => ({
+			systemPrompt: next.systemPrompt ?? acc?.systemPrompt,
+			prependContext: acc?.prependContext && next.prependContext ? `${acc.prependContext}\n\n${next.prependContext}` : next.prependContext ?? acc?.prependContext
+		}));
+	}
+	/**
+	* Run agent_end hook.
+	* Allows plugins to analyze completed conversations.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runAgentEnd(event, ctx) {
+		return runVoidHook("agent_end", event, ctx);
+	}
+	/**
+	* Run before_compaction hook.
+	*/
+	async function runBeforeCompaction(event, ctx) {
+		return runVoidHook("before_compaction", event, ctx);
+	}
+	/**
+	* Run after_compaction hook.
+	*/
+	async function runAfterCompaction(event, ctx) {
+		return runVoidHook("after_compaction", event, ctx);
+	}
+	/**
+	* Run message_received hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runMessageReceived(event, ctx) {
+		return runVoidHook("message_received", event, ctx);
+	}
+	/**
+	* Run message_sending hook.
+	* Allows plugins to modify or cancel outgoing messages.
+	* Runs sequentially.
+	*/
+	async function runMessageSending(event, ctx) {
+		return runModifyingHook("message_sending", event, ctx, (acc, next) => ({
+			content: next.content ?? acc?.content,
+			cancel: next.cancel ?? acc?.cancel
+		}));
+	}
+	/**
+	* Run message_sent hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runMessageSent(event, ctx) {
+		return runVoidHook("message_sent", event, ctx);
+	}
+	/**
+	* Run before_tool_call hook.
+	* Allows plugins to modify or block tool calls.
+	* Runs sequentially.
+	*/
+	async function runBeforeToolCall(event, ctx) {
+		return runModifyingHook("before_tool_call", event, ctx, (acc, next) => ({
+			params: next.params ?? acc?.params,
+			block: next.block ?? acc?.block,
+			blockReason: next.blockReason ?? acc?.blockReason
+		}));
+	}
+	/**
+	* Run after_tool_call hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runAfterToolCall(event, ctx) {
+		return runVoidHook("after_tool_call", event, ctx);
+	}
+	/**
+	* Run tool_result_persist hook.
+	*
+	* This hook is intentionally synchronous: it runs in hot paths where session
+	* transcripts are appended synchronously.
+	*
+	* Handlers are executed sequentially in priority order (higher first). Each
+	* handler may return `{ message }` to replace the message passed to the next
+	* handler.
+	*/
+	function runToolResultPersist(event, ctx) {
+		const hooks = getHooksForName(registry, "tool_result_persist");
+		if (hooks.length === 0) return;
+		let current = event.message;
+		for (const hook of hooks) try {
+			const out = hook.handler({
+				...event,
+				message: current
+			}, ctx);
+			if (out && typeof out.then === "function") {
+				const msg = `[hooks] tool_result_persist handler from ${hook.pluginId} returned a Promise; this hook is synchronous and the result was ignored.`;
+				if (catchErrors) {
+					logger?.warn?.(msg);
+					continue;
 				}
-				chunks.push(value);
+				throw new Error(msg);
 			}
+			const next = out?.message;
+			if (next) current = next;
+		} catch (err) {
+			const msg = `[hooks] tool_result_persist handler from ${hook.pluginId} failed: ${String(err)}`;
+			if (catchErrors) logger?.error(msg);
+			else throw new Error(msg, { cause: err });
 		}
-	} finally {
-		try {
-			reader.releaseLock();
-		} catch {}
+		return { message: current };
+	}
+	/**
+	* Run session_start hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runSessionStart(event, ctx) {
+		return runVoidHook("session_start", event, ctx);
+	}
+	/**
+	* Run session_end hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runSessionEnd(event, ctx) {
+		return runVoidHook("session_end", event, ctx);
+	}
+	/**
+	* Run gateway_start hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runGatewayStart(event, ctx) {
+		return runVoidHook("gateway_start", event, ctx);
+	}
+	/**
+	* Run gateway_stop hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runGatewayStop(event, ctx) {
+		return runVoidHook("gateway_stop", event, ctx);
+	}
+	/**
+	* Check if any hooks are registered for a given hook name.
+	*/
+	function hasHooks(hookName) {
+		return registry.typedHooks.some((h) => h.hookName === hookName);
+	}
+	/**
+	* Get count of registered hooks for a given hook name.
+	*/
+	function getHookCount(hookName) {
+		return registry.typedHooks.filter((h) => h.hookName === hookName).length;
 	}
-	return Buffer.concat(chunks.map((chunk) => Buffer.from(chunk)), total);
+	return {
+		runBeforeAgentStart,
+		runAgentEnd,
+		runBeforeCompaction,
+		runAfterCompaction,
+		runMessageReceived,
+		runMessageSending,
+		runMessageSent,
+		runBeforeToolCall,
+		runAfterToolCall,
+		runToolResultPersist,
+		runSessionStart,
+		runSessionEnd,
+		runGatewayStart,
+		runGatewayStop,
+		hasHooks,
+		getHookCount
+	};
 }
 
 //#endregion
-//#region src/auto-reply/tokens.ts
-const HEARTBEAT_TOKEN = "HEARTBEAT_OK";
-const SILENT_REPLY_TOKEN = "NO_REPLY";
-function isSilentReplyText(text, token = SILENT_REPLY_TOKEN) {
-	if (!text) return false;
-	const escaped = escapeRegExp(token);
-	if (new RegExp(`^\\s*${escaped}(?=$|\\W)`).test(text)) return true;
-	return new RegExp(`\\b${escaped}\\b\\W*$`).test(text);
+//#region src/plugins/hook-runner-global.ts
+const log = createSubsystemLogger("plugins");
+let globalHookRunner = null;
+let globalRegistry = null;
+/**
+* Initialize the global hook runner with a plugin registry.
+* Called once when plugins are loaded during gateway startup.
+*/
+function initializeGlobalHookRunner(registry) {
+	globalRegistry = registry;
+	globalHookRunner = createHookRunner(registry, {
+		logger: {
+			debug: (msg) => log.debug(msg),
+			warn: (msg) => log.warn(msg),
+			error: (msg) => log.error(msg)
+		},
+		catchErrors: true
+	});
+	const hookCount = registry.hooks.length;
+	if (hookCount > 0) log.info(`hook runner initialized with ${hookCount} registered hooks`);
+}
+/**
+* Get the global hook runner.
+* Returns null if plugins haven't been loaded yet.
+*/
+function getGlobalHookRunner() {
+	return globalHookRunner;
 }
 
 //#endregion
@@ -637,6 +625,34 @@ function resolveMarkdownTableMode(params) {
 
 //#endregion
 //#region src/web/media.ts
+function getDefaultLocalRoots() {
+	const home = os.homedir();
+	return [
+		os.tmpdir(),
+		path.join(home, ".openclaw", "media"),
+		path.join(home, ".openclaw", "agents")
+	];
+}
+async function assertLocalMediaAllowed(mediaPath, localRoots) {
+	if (localRoots === "any") return;
+	const roots = localRoots ?? getDefaultLocalRoots();
+	let resolved;
+	try {
+		resolved = await fs.realpath(mediaPath);
+	} catch {
+		resolved = path.resolve(mediaPath);
+	}
+	for (const root of roots) {
+		let resolvedRoot;
+		try {
+			resolvedRoot = await fs.realpath(root);
+		} catch {
+			resolvedRoot = path.resolve(root);
+		}
+		if (resolved === resolvedRoot || resolved.startsWith(resolvedRoot + path.sep)) return;
+	}
+	throw new Error(`Local media path is not under an allowed directory: ${mediaPath}`);
+}
 const HEIC_MIME_RE = /^image\/hei[cf]$/i;
 const HEIC_EXT_RE = /\.(heic|heif)$/i;
 const MB$1 = 1024 * 1024;
@@ -695,7 +711,7 @@ async function optimizeImageWithFallback(params) {
 	};
 }
 async function loadWebMediaInternal(mediaUrl, options = {}) {
-	const { maxBytes, optimizeImages = true, ssrfPolicy } = options;
+	const { maxBytes, optimizeImages = true, ssrfPolicy, localRoots } = options;
 	if (mediaUrl.startsWith("file://")) try {
 		mediaUrl = fileURLToPath(mediaUrl);
 	} catch {
@@ -763,6 +779,7 @@ async function loadWebMediaInternal(mediaUrl, options = {}) {
 		});
 	}
 	if (mediaUrl.startsWith("~")) mediaUrl = resolveUserPath(mediaUrl);
+	await assertLocalMediaAllowed(mediaUrl, localRoots);
 	const data = await fs.readFile(mediaUrl);
 	const mime = await detectMime({
 		buffer: data,
@@ -785,14 +802,16 @@ async function loadWebMedia(mediaUrl, maxBytes, options) {
 	return await loadWebMediaInternal(mediaUrl, {
 		maxBytes,
 		optimizeImages: true,
-		ssrfPolicy: options?.ssrfPolicy
+		ssrfPolicy: options?.ssrfPolicy,
+		localRoots: options?.localRoots
 	});
 }
 async function loadWebMediaRaw(mediaUrl, maxBytes, options) {
 	return await loadWebMediaInternal(mediaUrl, {
 		maxBytes,
 		optimizeImages: false,
-		ssrfPolicy: options?.ssrfPolicy
+		ssrfPolicy: options?.ssrfPolicy,
+		localRoots: options?.localRoots
 	});
 }
 async function optimizeImageToJpeg(buffer, maxBytes, opts = {}) {
@@ -1235,8 +1254,10 @@ function renderTokens(tokens, state) {
 			break;
 		case "blockquote_open":
 			if (state.blockquotePrefix) state.text += state.blockquotePrefix;
+			openStyle(state, "blockquote");
 			break;
 		case "blockquote_close":
+			closeStyle(state, "blockquote");
 			state.text += "\n";
 			break;
 		case "bullet_list_open":
@@ -2012,12 +2033,20 @@ function normalizeMediaSource(src) {
 function cleanCandidate(raw) {
 	return raw.replace(/^[`"'[{(]+/, "").replace(/[`"'\\})\],]+$/, "");
 }
+const WINDOWS_DRIVE_RE = /^[a-zA-Z]:[\\/]/;
+const SCHEME_RE = /^[a-zA-Z][a-zA-Z0-9+.-]*:/;
+const HAS_FILE_EXT = /\.\w{1,10}$/;
+function isLikelyLocalPath(candidate) {
+	return candidate.startsWith("/") || candidate.startsWith("./") || candidate.startsWith("../") || candidate.startsWith("~") || WINDOWS_DRIVE_RE.test(candidate) || candidate.startsWith("\\\\") || !SCHEME_RE.test(candidate) && (candidate.includes("/") || candidate.includes("\\"));
+}
 function isValidMedia(candidate, opts) {
 	if (!candidate) return false;
 	if (candidate.length > 4096) return false;
 	if (!opts?.allowSpaces && /\s/.test(candidate)) return false;
 	if (/^https?:\/\//i.test(candidate)) return true;
-	return candidate.startsWith("./") && !candidate.includes("..");
+	if (isLikelyLocalPath(candidate)) return true;
+	if (opts?.allowBareFilename && !SCHEME_RE.test(candidate) && HAS_FILE_EXT.test(candidate)) return true;
+	return false;
 }
 function unwrapQuoted(value) {
 	const trimmed = value.trim();
@@ -2079,7 +2108,7 @@ function splitMediaFromOutput(raw) {
 				} else invalidParts.push(part);
 			}
 			const trimmedPayload = payloadValue.trim();
-			const looksLikeLocalPath = trimmedPayload.startsWith("/") || trimmedPayload.startsWith("./") || trimmedPayload.startsWith("../") || trimmedPayload.startsWith("~") || trimmedPayload.startsWith("file://");
+			const looksLikeLocalPath = isLikelyLocalPath(trimmedPayload) || trimmedPayload.startsWith("file://");
 			if (!unwrapped && validCount === 1 && invalidParts.length > 0 && /\s/.test(payloadValue) && looksLikeLocalPath) {
 				const fallback = normalizeMediaSource(cleanCandidate(payloadValue));
 				if (isValidMedia(fallback, { allowSpaces: true })) {
@@ -2092,7 +2121,10 @@ function splitMediaFromOutput(raw) {
 			}
 			if (!hasValidMedia) {
 				const fallback = normalizeMediaSource(cleanCandidate(payloadValue));
-				if (isValidMedia(fallback, { allowSpaces: true })) {
+				if (isValidMedia(fallback, {
+					allowSpaces: true,
+					allowBareFilename: true
+				})) {
 					media.push(fallback);
 					hasValidMedia = true;
 					foundMediaToken = true;
@@ -2101,7 +2133,8 @@ function splitMediaFromOutput(raw) {
 			}
 			if (hasValidMedia) {
 				if (invalidParts.length > 0) pieces.push(invalidParts.join(" "));
-			} else pieces.push(match[0]);
+			} else if (looksLikeLocalPath) foundMediaToken = true;
+			else pieces.push(match[0]);
 			cursor = start + match[0].length;
 		}
 		pieces.push(line.slice(cursor));
@@ -2177,7 +2210,7 @@ function normalizeChannelTargetInput(raw) {
 function normalizeTargetForProvider(provider, raw) {
 	if (!raw) return;
 	const providerId = normalizeChannelId(provider);
-	return ((providerId ? getChannelPlugin(providerId) : void 0)?.messaging?.normalizeTarget?.(raw) ?? (raw.trim().toLowerCase() || void 0)) || void 0;
+	return ((providerId ? getChannelPlugin(providerId) : void 0)?.messaging?.normalizeTarget?.(raw) ?? (raw.trim() || void 0)) || void 0;
 }
 function buildTargetResolverSignature(channel) {
 	const resolver = getChannelPlugin(channel)?.messaging?.targetResolver;
@@ -2564,23 +2597,80 @@ async function deliverOutboundPayloads(params) {
 			})
 		};
 	};
-	const normalizedPayloads = normalizeReplyPayloadsForDelivery(payloads);
+	const normalizeWhatsAppPayload = (payload) => {
+		const hasMedia = Boolean(payload.mediaUrl) || (payload.mediaUrls?.length ?? 0) > 0;
+		const normalizedText = (typeof payload.text === "string" ? payload.text : "").replace(/^(?:[ \t]*\r?\n)+/, "");
+		if (!normalizedText.trim()) {
+			if (!hasMedia) return null;
+			return {
+				...payload,
+				text: ""
+			};
+		}
+		return {
+			...payload,
+			text: normalizedText
+		};
+	};
+	const normalizedPayloads = normalizeReplyPayloadsForDelivery(payloads).flatMap((payload) => {
+		if (channel !== "whatsapp") return [payload];
+		const normalized = normalizeWhatsAppPayload(payload);
+		return normalized ? [normalized] : [];
+	});
+	const hookRunner = getGlobalHookRunner();
 	for (const payload of normalizedPayloads) {
 		const payloadSummary = {
 			text: payload.text ?? "",
 			mediaUrls: payload.mediaUrls ?? (payload.mediaUrl ? [payload.mediaUrl] : []),
 			channelData: payload.channelData
 		};
+		const emitMessageSent = (success, error) => {
+			if (!hookRunner?.hasHooks("message_sent")) return;
+			hookRunner.runMessageSent({
+				to,
+				content: payloadSummary.text,
+				success,
+				...error ? { error } : {}
+			}, {
+				channelId: channel,
+				accountId: accountId ?? void 0
+			}).catch(() => {});
+		};
 		try {
 			throwIfAborted(abortSignal);
+			let effectivePayload = payload;
+			if (hookRunner?.hasHooks("message_sending")) try {
+				const sendingResult = await hookRunner.runMessageSending({
+					to,
+					content: payloadSummary.text,
+					metadata: {
+						channel,
+						accountId,
+						mediaUrls: payloadSummary.mediaUrls
+					}
+				}, {
+					channelId: channel,
+					accountId: accountId ?? void 0
+				});
+				if (sendingResult?.cancel) continue;
+				if (sendingResult?.content != null) {
+					effectivePayload = {
+						...payload,
+						text: sendingResult.content
+					};
+					payloadSummary.text = sendingResult.content;
+				}
+			} catch {}
 			params.onPayload?.(payloadSummary);
-			if (handler.sendPayload && payload.channelData) {
-				results.push(await handler.sendPayload(payload));
+			if (handler.sendPayload && effectivePayload.channelData) {
+				results.push(await handler.sendPayload(effectivePayload));
+				emitMessageSent(true);
 				continue;
 			}
 			if (payloadSummary.mediaUrls.length === 0) {
 				if (isSignalChannel) await sendSignalTextChunks(payloadSummary.text);
 				else await sendTextChunks(payloadSummary.text);
+				emitMessageSent(true);
 				continue;
 			}
 			let first = true;
@@ -2591,7 +2681,9 @@ async function deliverOutboundPayloads(params) {
 				if (isSignalChannel) results.push(await sendSignalMedia(caption, url));
 				else results.push(await handler.sendMedia(caption, url));
 			}
+			emitMessageSent(true);
 		} catch (err) {
+			emitMessageSent(false, err instanceof Error ? err.message : String(err));
 			if (!params.bestEffort) throw err;
 			params.onError?.(err, payloadSummary);
 		}
@@ -2611,4 +2703,4 @@ async function deliverOutboundPayloads(params) {
 }
 
 //#endregion
-export { markdownToIR as A, resolveChunkMode as B, sendTypingSignal as C, resolveFetch as D, streamSignalEvents as E, chunkByNewline as F, HEARTBEAT_TOKEN as G, findFenceSpanAt as H, chunkMarkdownText as I, MediaFetchError as J, SILENT_REPLY_TOKEN as K, chunkMarkdownTextWithMode as L, loadWebMedia as M, loadWebMediaRaw as N, wrapFetchWithAbortSignal as O, resolveMarkdownTableMode as P, chunkText as R, sendReadReceiptSignal as S, signalRpcRequest as T, isSafeFenceBreak as U, resolveTextChunkLimit as V, parseFenceSpans as W, fetchWithTimeout as X, fetchRemoteMedia as Y, fetchWithSsrFGuard as Z, throwIfAborted as _, normalizeOutboundPayloadsForJson as a, parseInlineDirectives as b, applyReplyThreading as c, shouldSuppressMessagingToolReplies as d, createReplyToModeFilterForChannel as f, normalizeTargetForProvider as g, normalizeChannelTargetInput as h, normalizeOutboundPayloads as i, markdownToIRWithMeta as j, chunkMarkdownIR as k, filterMessagingToolDuplicates as l, buildTargetResolverSignature as m, deliver_exports as n, normalizeReplyPayloadsForDelivery as o, resolveReplyToMode as p, isSilentReplyText as q, formatOutboundPayloadLog as r, applyReplyTagsToPayload as s, deliverOutboundPayloads as t, isRenderablePayload as u, parseReplyDirectives as v, signalCheck as w, sendMessageSignal as x, splitMediaFromOutput as y, chunkTextWithMode as z };
+export { markdownToIR as A, resolveChunkMode as B, sendTypingSignal as C, resolveFetch as D, streamSignalEvents as E, chunkByNewline as F, getGlobalHookRunner as G, findFenceSpanAt as H, chunkMarkdownText as I, SILENT_REPLY_TOKEN as J, initializeGlobalHookRunner as K, chunkMarkdownTextWithMode as L, loadWebMedia as M, loadWebMediaRaw as N, wrapFetchWithAbortSignal as O, resolveMarkdownTableMode as P, chunkText as R, sendReadReceiptSignal as S, signalRpcRequest as T, isSafeFenceBreak as U, resolveTextChunkLimit as V, parseFenceSpans as W, isSilentReplyText as Y, throwIfAborted as _, normalizeOutboundPayloadsForJson as a, parseInlineDirectives as b, applyReplyThreading as c, shouldSuppressMessagingToolReplies as d, createReplyToModeFilterForChannel as f, normalizeTargetForProvider as g, normalizeChannelTargetInput as h, normalizeOutboundPayloads as i, markdownToIRWithMeta as j, chunkMarkdownIR as k, filterMessagingToolDuplicates as l, buildTargetResolverSignature as m, deliver_exports as n, normalizeReplyPayloadsForDelivery as o, resolveReplyToMode as p, HEARTBEAT_TOKEN as q, formatOutboundPayloadLog as r, applyReplyTagsToPayload as s, deliverOutboundPayloads as t, isRenderablePayload as u, parseReplyDirectives as v, signalCheck as w, sendMessageSignal as x, splitMediaFromOutput as y, chunkTextWithMode as z };