activeclaw 2026.2.11 → 2026.2.13

package/dist/{deliver-CPy8jYj9.js → deliver-xUU3mGHo.js}

@@ -1,9 +1,11 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { j as normalizeAccountId$1 } from "./agent-scope-BEf5crnU.js";
-import { J as logVerbose, O as escapeRegExp, R as resolveUserPath, X as shouldLogVerbose, b as getActivePluginRegistry } from "./exec-57A8Rlc8.js";
-import { At as hasAlphaChannel, En as mediaKindFromMime, G as appendAssistantMessageToSessionTranscript, It as closeDispatcher, K as resolveMirroredTranscriptText, Lt as createPinnedDispatcher, Mt as resizeToJpeg, On as resolveSignalAccount, Ot as convertHeicToJpeg, Pt as saveMediaBuffer, Rt as resolvePinnedHostname, Tn as maxBytesForKind, _n as detectMime, gt as getChannelDock, jn as normalizeChannelId, jt as optimizeImageToPng, kn as getChannelPlugin, m as isMessagingToolDuplicate, on as INTERNAL_MESSAGE_CHANNEL, vn as extensionForMime, zt as resolvePinnedHostnameWithPolicy } from "./pi-embedded-helpers-y1_Se0yq.js";
-import { t as loadConfig } from "./config-BqGVMf1y.js";
+import { j as normalizeAccountId$1 } from "./agent-scope-DPIFau3f.js";
+import { J as logVerbose, O as escapeRegExp, R as resolveUserPath, X as shouldLogVerbose, b as getActivePluginRegistry, l as createSubsystemLogger } from "./exec-CJFFoM7H.js";
+import { An as mediaKindFromMime, At as convertHeicToJpeg, Fn as normalizeChannelId, It as saveMediaBuffer, J as resolveMirroredTranscriptText, Mn as resolveSignalAccount, Mt as hasAlphaChannel, Nn as getChannelPlugin, Nt as optimizeImageToPng, Pt as resizeToJpeg, Sn as extensionForMime, kn as maxBytesForKind, m as isMessagingToolDuplicate, q as appendAssistantMessageToSessionTranscript, un as INTERNAL_MESSAGE_CHANNEL, vt as getChannelDock, xn as detectMime } from "./pi-embedded-helpers-CUzTc1v6.js";
+import { t as loadConfig } from "./config-QYrbd7x7.js";
+import { r as fetchRemoteMedia, t as fetchWithTimeout } from "./fetch-timeout-DEoXG_SF.js";
 import path from "node:path";
+import os from "node:os";
 import fs from "node:fs/promises";
 import { fileURLToPath } from "node:url";
 import { randomUUID } from "node:crypto";
@@ -19,6 +21,260 @@ function isSilentReplyText(text, token = SILENT_REPLY_TOKEN) {
 	return new RegExp(`\\b${escaped}\\b\\W*$`).test(text);
 }
 
+//#endregion
+//#region src/plugins/hooks.ts
+/**
+* Get hooks for a specific hook name, sorted by priority (higher first).
+*/
+function getHooksForName(registry, hookName) {
+	return registry.typedHooks.filter((h) => h.hookName === hookName).toSorted((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+}
+/**
+* Create a hook runner for a specific registry.
+*/
+function createHookRunner(registry, options = {}) {
+	const logger = options.logger;
+	const catchErrors = options.catchErrors ?? true;
+	/**
+	* Run a hook that doesn't return a value (fire-and-forget style).
+	* All handlers are executed in parallel for performance.
+	*/
+	async function runVoidHook(hookName, event, ctx) {
+		const hooks = getHooksForName(registry, hookName);
+		if (hooks.length === 0) return;
+		logger?.debug?.(`[hooks] running ${hookName} (${hooks.length} handlers)`);
+		const promises = hooks.map(async (hook) => {
+			try {
+				await hook.handler(event, ctx);
+			} catch (err) {
+				const msg = `[hooks] ${hookName} handler from ${hook.pluginId} failed: ${String(err)}`;
+				if (catchErrors) logger?.error(msg);
+				else throw new Error(msg, { cause: err });
+			}
+		});
+		await Promise.all(promises);
+	}
+	/**
+	* Run a hook that can return a modifying result.
+	* Handlers are executed sequentially in priority order, and results are merged.
+	*/
+	async function runModifyingHook(hookName, event, ctx, mergeResults) {
+		const hooks = getHooksForName(registry, hookName);
+		if (hooks.length === 0) return;
+		logger?.debug?.(`[hooks] running ${hookName} (${hooks.length} handlers, sequential)`);
+		let result;
+		for (const hook of hooks) try {
+			const handlerResult = await hook.handler(event, ctx);
+			if (handlerResult !== void 0 && handlerResult !== null) if (mergeResults && result !== void 0) result = mergeResults(result, handlerResult);
+			else result = handlerResult;
+		} catch (err) {
+			const msg = `[hooks] ${hookName} handler from ${hook.pluginId} failed: ${String(err)}`;
+			if (catchErrors) logger?.error(msg);
+			else throw new Error(msg, { cause: err });
+		}
+		return result;
+	}
+	/**
+	* Run before_agent_start hook.
+	* Allows plugins to inject context into the system prompt.
+	* Runs sequentially, merging systemPrompt and prependContext from all handlers.
+	*/
+	async function runBeforeAgentStart(event, ctx) {
+		return runModifyingHook("before_agent_start", event, ctx, (acc, next) => ({
+			systemPrompt: next.systemPrompt ?? acc?.systemPrompt,
+			prependContext: acc?.prependContext && next.prependContext ? `${acc.prependContext}\n\n${next.prependContext}` : next.prependContext ?? acc?.prependContext
+		}));
+	}
+	/**
+	* Run agent_end hook.
+	* Allows plugins to analyze completed conversations.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runAgentEnd(event, ctx) {
+		return runVoidHook("agent_end", event, ctx);
+	}
+	/**
+	* Run before_compaction hook.
+	*/
+	async function runBeforeCompaction(event, ctx) {
+		return runVoidHook("before_compaction", event, ctx);
+	}
+	/**
+	* Run after_compaction hook.
+	*/
+	async function runAfterCompaction(event, ctx) {
+		return runVoidHook("after_compaction", event, ctx);
+	}
+	/**
+	* Run message_received hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runMessageReceived(event, ctx) {
+		return runVoidHook("message_received", event, ctx);
+	}
+	/**
+	* Run message_sending hook.
+	* Allows plugins to modify or cancel outgoing messages.
+	* Runs sequentially.
+	*/
+	async function runMessageSending(event, ctx) {
+		return runModifyingHook("message_sending", event, ctx, (acc, next) => ({
+			content: next.content ?? acc?.content,
+			cancel: next.cancel ?? acc?.cancel
+		}));
+	}
+	/**
+	* Run message_sent hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runMessageSent(event, ctx) {
+		return runVoidHook("message_sent", event, ctx);
+	}
+	/**
+	* Run before_tool_call hook.
+	* Allows plugins to modify or block tool calls.
+	* Runs sequentially.
+	*/
+	async function runBeforeToolCall(event, ctx) {
+		return runModifyingHook("before_tool_call", event, ctx, (acc, next) => ({
+			params: next.params ?? acc?.params,
+			block: next.block ?? acc?.block,
+			blockReason: next.blockReason ?? acc?.blockReason
+		}));
+	}
+	/**
+	* Run after_tool_call hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runAfterToolCall(event, ctx) {
+		return runVoidHook("after_tool_call", event, ctx);
+	}
+	/**
+	* Run tool_result_persist hook.
+	*
+	* This hook is intentionally synchronous: it runs in hot paths where session
+	* transcripts are appended synchronously.
+	*
+	* Handlers are executed sequentially in priority order (higher first). Each
+	* handler may return `{ message }` to replace the message passed to the next
+	* handler.
+	*/
+	function runToolResultPersist(event, ctx) {
+		const hooks = getHooksForName(registry, "tool_result_persist");
+		if (hooks.length === 0) return;
+		let current = event.message;
+		for (const hook of hooks) try {
+			const out = hook.handler({
+				...event,
+				message: current
+			}, ctx);
+			if (out && typeof out.then === "function") {
+				const msg = `[hooks] tool_result_persist handler from ${hook.pluginId} returned a Promise; this hook is synchronous and the result was ignored.`;
+				if (catchErrors) {
+					logger?.warn?.(msg);
+					continue;
+				}
+				throw new Error(msg);
+			}
+			const next = out?.message;
+			if (next) current = next;
+		} catch (err) {
+			const msg = `[hooks] tool_result_persist handler from ${hook.pluginId} failed: ${String(err)}`;
+			if (catchErrors) logger?.error(msg);
+			else throw new Error(msg, { cause: err });
+		}
+		return { message: current };
+	}
+	/**
+	* Run session_start hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runSessionStart(event, ctx) {
+		return runVoidHook("session_start", event, ctx);
+	}
+	/**
+	* Run session_end hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runSessionEnd(event, ctx) {
+		return runVoidHook("session_end", event, ctx);
+	}
+	/**
+	* Run gateway_start hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runGatewayStart(event, ctx) {
+		return runVoidHook("gateway_start", event, ctx);
+	}
+	/**
+	* Run gateway_stop hook.
+	* Runs in parallel (fire-and-forget).
+	*/
+	async function runGatewayStop(event, ctx) {
+		return runVoidHook("gateway_stop", event, ctx);
+	}
+	/**
+	* Check if any hooks are registered for a given hook name.
+	*/
+	function hasHooks(hookName) {
+		return registry.typedHooks.some((h) => h.hookName === hookName);
+	}
+	/**
+	* Get count of registered hooks for a given hook name.
+	*/
+	function getHookCount(hookName) {
+		return registry.typedHooks.filter((h) => h.hookName === hookName).length;
+	}
+	return {
+		runBeforeAgentStart,
+		runAgentEnd,
+		runBeforeCompaction,
+		runAfterCompaction,
+		runMessageReceived,
+		runMessageSending,
+		runMessageSent,
+		runBeforeToolCall,
+		runAfterToolCall,
+		runToolResultPersist,
+		runSessionStart,
+		runSessionEnd,
+		runGatewayStart,
+		runGatewayStop,
+		hasHooks,
+		getHookCount
+	};
+}
+
+//#endregion
+//#region src/plugins/hook-runner-global.ts
+const log = createSubsystemLogger("plugins");
+let globalHookRunner = null;
+let globalRegistry = null;
+/**
+* Initialize the global hook runner with a plugin registry.
+* Called once when plugins are loaded during gateway startup.
+*/
+function initializeGlobalHookRunner(registry) {
+	globalRegistry = registry;
+	globalHookRunner = createHookRunner(registry, {
+		logger: {
+			debug: (msg) => log.debug(msg),
+			warn: (msg) => log.warn(msg),
+			error: (msg) => log.error(msg)
+		},
+		catchErrors: true
+	});
+	const hookCount = registry.hooks.length;
+	if (hookCount > 0) log.info(`hook runner initialized with ${hookCount} registered hooks`);
+}
+/**
+* Get the global hook runner.
+* Returns null if plugins haven't been loaded yet.
+*/
+function getGlobalHookRunner() {
+	return globalHookRunner;
+}
+
 //#endregion
 //#region src/markdown/fences.ts
 function parseFenceSpans(buffer) {
@@ -363,250 +619,35 @@ function resolveMarkdownTableMode(params) {
 }
 
 //#endregion
-//#region src/infra/net/fetch-guard.ts
-const DEFAULT_MAX_REDIRECTS = 3;
-function isRedirectStatus(status) {
-	return status === 301 || status === 302 || status === 303 || status === 307 || status === 308;
-}
-function buildAbortSignal(params) {
-	const { timeoutMs, signal } = params;
-	if (!timeoutMs && !signal) return {
-		signal: void 0,
-		cleanup: () => {}
-	};
-	if (!timeoutMs) return {
-		signal,
-		cleanup: () => {}
-	};
-	const controller = new AbortController();
-	const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
-	const onAbort = () => controller.abort();
-	if (signal) if (signal.aborted) controller.abort();
-	else signal.addEventListener("abort", onAbort, { once: true });
-	const cleanup = () => {
-		clearTimeout(timeoutId);
-		if (signal) signal.removeEventListener("abort", onAbort);
-	};
-	return {
-		signal: controller.signal,
-		cleanup
-	};
-}
-async function fetchWithSsrFGuard(params) {
-	const fetcher = params.fetchImpl ?? globalThis.fetch;
-	if (!fetcher) throw new Error("fetch is not available");
-	const maxRedirects = typeof params.maxRedirects === "number" && Number.isFinite(params.maxRedirects) ? Math.max(0, Math.floor(params.maxRedirects)) : DEFAULT_MAX_REDIRECTS;
-	const { signal, cleanup } = buildAbortSignal({
-		timeoutMs: params.timeoutMs,
-		signal: params.signal
-	});
-	let released = false;
-	const release = async (dispatcher) => {
-		if (released) return;
-		released = true;
-		cleanup();
-		await closeDispatcher(dispatcher ?? void 0);
-	};
-	const visited = /* @__PURE__ */ new Set();
-	let currentUrl = params.url;
-	let redirectCount = 0;
-	while (true) {
-		let parsedUrl;
-		try {
-			parsedUrl = new URL(currentUrl);
-		} catch {
-			await release();
-			throw new Error("Invalid URL: must be http or https");
-		}
-		if (!["http:", "https:"].includes(parsedUrl.protocol)) {
-			await release();
-			throw new Error("Invalid URL: must be http or https");
-		}
-		let dispatcher = null;
-		try {
-			const pinned = Boolean(params.policy?.allowPrivateNetwork || params.policy?.allowedHostnames?.length) ? await resolvePinnedHostnameWithPolicy(parsedUrl.hostname, {
-				lookupFn: params.lookupFn,
-				policy: params.policy
-			}) : await resolvePinnedHostname(parsedUrl.hostname, params.lookupFn);
-			if (params.pinDns !== false) dispatcher = createPinnedDispatcher(pinned);
-			const init = {
-				...params.init ? { ...params.init } : {},
-				redirect: "manual",
-				...dispatcher ? { dispatcher } : {},
-				...signal ? { signal } : {}
-			};
-			const response = await fetcher(parsedUrl.toString(), init);
-			if (isRedirectStatus(response.status)) {
-				const location = response.headers.get("location");
-				if (!location) {
-					await release(dispatcher);
-					throw new Error(`Redirect missing location header (${response.status})`);
-				}
-				redirectCount += 1;
-				if (redirectCount > maxRedirects) {
-					await release(dispatcher);
-					throw new Error(`Too many redirects (limit: ${maxRedirects})`);
-				}
-				const nextUrl = new URL(location, parsedUrl).toString();
-				if (visited.has(nextUrl)) {
-					await release(dispatcher);
-					throw new Error("Redirect loop detected");
-				}
-				visited.add(nextUrl);
-				response.body?.cancel();
-				await closeDispatcher(dispatcher);
-				currentUrl = nextUrl;
-				continue;
-			}
-			return {
-				response,
-				finalUrl: currentUrl,
-				release: async () => release(dispatcher)
-			};
-		} catch (err) {
-			await release(dispatcher);
-			throw err;
-		}
-	}
-}
-
-//#endregion
-//#region src/media/fetch.ts
-var MediaFetchError = class extends Error {
-	constructor(code, message) {
-		super(message);
-		this.code = code;
-		this.name = "MediaFetchError";
-	}
-};
-function stripQuotes(value) {
-	return value.replace(/^["']|["']$/g, "");
-}
-function parseContentDispositionFileName(header) {
-	if (!header) return;
-	const starMatch = /filename\*\s*=\s*([^;]+)/i.exec(header);
-	if (starMatch?.[1]) {
-		const cleaned = stripQuotes(starMatch[1].trim());
-		const encoded = cleaned.split("''").slice(1).join("''") || cleaned;
-		try {
-			return path.basename(decodeURIComponent(encoded));
-		} catch {
-			return path.basename(encoded);
-		}
-	}
-	const match = /filename\s*=\s*([^;]+)/i.exec(header);
-	if (match?.[1]) return path.basename(stripQuotes(match[1].trim()));
+//#region src/web/media.ts
+function getDefaultLocalRoots() {
+	const home = os.homedir();
+	return [
+		os.tmpdir(),
+		path.join(home, ".openclaw", "media"),
+		path.join(home, ".openclaw", "agents")
+	];
 }
-async function readErrorBodySnippet(res, maxChars = 200) {
+async function assertLocalMediaAllowed(mediaPath, localRoots) {
+	if (localRoots === "any") return;
+	const roots = localRoots ?? getDefaultLocalRoots();
+	let resolved;
 	try {
-		const text = await res.text();
-		if (!text) return;
-		const collapsed = text.replace(/\s+/g, " ").trim();
-		if (!collapsed) return;
-		if (collapsed.length <= maxChars) return collapsed;
-		return `${collapsed.slice(0, maxChars)}…`;
+		resolved = await fs.realpath(mediaPath);
 	} catch {
-		return;
+		resolved = path.resolve(mediaPath);
 	}
-}
-async function fetchRemoteMedia(options) {
-	const { url, fetchImpl, filePathHint, maxBytes, maxRedirects, ssrfPolicy, lookupFn } = options;
-	let res;
-	let finalUrl = url;
-	let release = null;
-	try {
-		const result = await fetchWithSsrFGuard({
-			url,
-			fetchImpl,
-			maxRedirects,
-			policy: ssrfPolicy,
-			lookupFn
-		});
-		res = result.response;
-		finalUrl = result.finalUrl;
-		release = result.release;
-	} catch (err) {
-		throw new MediaFetchError("fetch_failed", `Failed to fetch media from ${url}: ${String(err)}`);
-	}
-	try {
-		if (!res.ok) {
-			const statusText = res.statusText ? ` ${res.statusText}` : "";
-			const redirected = finalUrl !== url ? ` (redirected to ${finalUrl})` : "";
-			let detail = `HTTP ${res.status}${statusText}`;
-			if (!res.body) detail = `HTTP ${res.status}${statusText}; empty response body`;
-			else {
-				const snippet = await readErrorBodySnippet(res);
-				if (snippet) detail += `; body: ${snippet}`;
-			}
-			throw new MediaFetchError("http_error", `Failed to fetch media from ${url}${redirected}: ${detail}`);
-		}
-		const contentLength = res.headers.get("content-length");
-		if (maxBytes && contentLength) {
-			const length = Number(contentLength);
-			if (Number.isFinite(length) && length > maxBytes) throw new MediaFetchError("max_bytes", `Failed to fetch media from ${url}: content length ${length} exceeds maxBytes ${maxBytes}`);
-		}
-		const buffer = maxBytes ? await readResponseWithLimit(res, maxBytes) : Buffer.from(await res.arrayBuffer());
-		let fileNameFromUrl;
+	for (const root of roots) {
+		let resolvedRoot;
 		try {
-			const parsed = new URL(finalUrl);
-			fileNameFromUrl = path.basename(parsed.pathname) || void 0;
-		} catch {}
-		const headerFileName = parseContentDispositionFileName(res.headers.get("content-disposition"));
-		let fileName = headerFileName || fileNameFromUrl || (filePathHint ? path.basename(filePathHint) : void 0);
-		const filePathForMime = headerFileName && path.extname(headerFileName) ? headerFileName : filePathHint ?? finalUrl;
-		const contentType = await detectMime({
-			buffer,
-			headerMime: res.headers.get("content-type"),
-			filePath: filePathForMime
-		});
-		if (fileName && !path.extname(fileName) && contentType) {
-			const ext = extensionForMime(contentType);
-			if (ext) fileName = `${fileName}${ext}`;
-		}
-		return {
-			buffer,
-			contentType: contentType ?? void 0,
-			fileName
-		};
-	} finally {
-		if (release) await release();
-	}
-}
-async function readResponseWithLimit(res, maxBytes) {
-	const body = res.body;
-	if (!body || typeof body.getReader !== "function") {
-		const fallback = Buffer.from(await res.arrayBuffer());
-		if (fallback.length > maxBytes) throw new MediaFetchError("max_bytes", `Failed to fetch media from ${res.url || "response"}: payload exceeds maxBytes ${maxBytes}`);
-		return fallback;
-	}
-	const reader = body.getReader();
-	const chunks = [];
-	let total = 0;
-	try {
-		while (true) {
-			const { done, value } = await reader.read();
-			if (done) break;
-			if (value?.length) {
-				total += value.length;
-				if (total > maxBytes) {
-					try {
-						await reader.cancel();
-					} catch {}
-					throw new MediaFetchError("max_bytes", `Failed to fetch media from ${res.url || "response"}: payload exceeds maxBytes ${maxBytes}`);
-				}
-				chunks.push(value);
-			}
+			resolvedRoot = await fs.realpath(root);
+		} catch {
+			resolvedRoot = path.resolve(root);
 		}
-	} finally {
-		try {
-			reader.releaseLock();
-		} catch {}
+		if (resolved === resolvedRoot || resolved.startsWith(resolvedRoot + path.sep)) return;
 	}
-	return Buffer.concat(chunks.map((chunk) => Buffer.from(chunk)), total);
+	throw new Error(`Local media path is not under an allowed directory: ${mediaPath}`);
 }
-
-//#endregion
-//#region src/web/media.ts
 const HEIC_MIME_RE = /^image\/hei[cf]$/i;
 const HEIC_EXT_RE = /\.(heic|heif)$/i;
 const MB$1 = 1024 * 1024;
@@ -665,7 +706,7 @@ async function optimizeImageWithFallback(params) {
 	};
 }
 async function loadWebMediaInternal(mediaUrl, options = {}) {
-	const { maxBytes, optimizeImages = true, ssrfPolicy } = options;
+	const { maxBytes, optimizeImages = true, ssrfPolicy, localRoots } = options;
 	if (mediaUrl.startsWith("file://")) try {
 		mediaUrl = fileURLToPath(mediaUrl);
 	} catch {
@@ -733,6 +774,7 @@ async function loadWebMediaInternal(mediaUrl, options = {}) {
 		});
 	}
 	if (mediaUrl.startsWith("~")) mediaUrl = resolveUserPath(mediaUrl);
+	await assertLocalMediaAllowed(mediaUrl, localRoots);
 	const data = await fs.readFile(mediaUrl);
 	const mime = await detectMime({
 		buffer: data,
@@ -755,14 +797,16 @@ async function loadWebMedia(mediaUrl, maxBytes, options) {
 	return await loadWebMediaInternal(mediaUrl, {
 		maxBytes,
 		optimizeImages: true,
-		ssrfPolicy: options?.ssrfPolicy
+		ssrfPolicy: options?.ssrfPolicy,
+		localRoots: options?.localRoots
 	});
 }
 async function loadWebMediaRaw(mediaUrl, maxBytes, options) {
 	return await loadWebMediaInternal(mediaUrl, {
 		maxBytes,
 		optimizeImages: false,
-		ssrfPolicy: options?.ssrfPolicy
+		ssrfPolicy: options?.ssrfPolicy,
+		localRoots: options?.localRoots
 	});
 }
 async function optimizeImageToJpeg(buffer, maxBytes, opts = {}) {
@@ -1205,8 +1249,10 @@ function renderTokens(tokens, state) {
 			break;
 		case "blockquote_open":
 			if (state.blockquotePrefix) state.text += state.blockquotePrefix;
+			openStyle(state, "blockquote");
 			break;
 		case "blockquote_close":
+			closeStyle(state, "blockquote");
 			state.text += "\n";
 			break;
 		case "bullet_list_open":
@@ -1437,31 +1483,6 @@ function chunkMarkdownIR(ir, limit) {
 	return results;
 }
 
-//#endregion
-//#region src/utils/fetch-timeout.ts
-/**
-* Fetch wrapper that adds timeout support via AbortController.
-*
-* @param url - The URL to fetch
-* @param init - RequestInit options (headers, method, body, etc.)
-* @param timeoutMs - Timeout in milliseconds
-* @param fetchFn - The fetch implementation to use (defaults to global fetch)
-* @returns The fetch Response
-* @throws AbortError if the request times out
-*/
-async function fetchWithTimeout(url, init, timeoutMs, fetchFn = fetch) {
-	const controller = new AbortController();
-	const timer = setTimeout(() => controller.abort(), Math.max(1, timeoutMs));
-	try {
-		return await fetchFn(url, {
-			...init,
-			signal: controller.signal
-		});
-	} finally {
-		clearTimeout(timer);
-	}
-}
-
 //#endregion
 //#region src/infra/fetch.ts
 function withDuplex(init, input) {
@@ -1579,12 +1600,20 @@ function normalizeMediaSource(src) {
 function cleanCandidate(raw) {
 	return raw.replace(/^[`"'[{(]+/, "").replace(/[`"'\\})\],]+$/, "");
 }
+const WINDOWS_DRIVE_RE = /^[a-zA-Z]:[\\/]/;
+const SCHEME_RE = /^[a-zA-Z][a-zA-Z0-9+.-]*:/;
+const HAS_FILE_EXT = /\.\w{1,10}$/;
+function isLikelyLocalPath(candidate) {
+	return candidate.startsWith("/") || candidate.startsWith("./") || candidate.startsWith("../") || candidate.startsWith("~") || WINDOWS_DRIVE_RE.test(candidate) || candidate.startsWith("\\\\") || !SCHEME_RE.test(candidate) && (candidate.includes("/") || candidate.includes("\\"));
+}
 function isValidMedia(candidate, opts) {
 	if (!candidate) return false;
 	if (candidate.length > 4096) return false;
 	if (!opts?.allowSpaces && /\s/.test(candidate)) return false;
 	if (/^https?:\/\//i.test(candidate)) return true;
-	return candidate.startsWith("./") && !candidate.includes("..");
+	if (isLikelyLocalPath(candidate)) return true;
+	if (opts?.allowBareFilename && !SCHEME_RE.test(candidate) && HAS_FILE_EXT.test(candidate)) return true;
+	return false;
 }
 function unwrapQuoted(value) {
 	const trimmed = value.trim();
@@ -1646,7 +1675,7 @@ function splitMediaFromOutput(raw) {
 				} else invalidParts.push(part);
 			}
 			const trimmedPayload = payloadValue.trim();
-			const looksLikeLocalPath = trimmedPayload.startsWith("/") || trimmedPayload.startsWith("./") || trimmedPayload.startsWith("../") || trimmedPayload.startsWith("~") || trimmedPayload.startsWith("file://");
+			const looksLikeLocalPath = isLikelyLocalPath(trimmedPayload) || trimmedPayload.startsWith("file://");
 			if (!unwrapped && validCount === 1 && invalidParts.length > 0 && /\s/.test(payloadValue) && looksLikeLocalPath) {
 				const fallback = normalizeMediaSource(cleanCandidate(payloadValue));
 				if (isValidMedia(fallback, { allowSpaces: true })) {
@@ -1659,7 +1688,10 @@ function splitMediaFromOutput(raw) {
 			}
 			if (!hasValidMedia) {
 				const fallback = normalizeMediaSource(cleanCandidate(payloadValue));
-				if (isValidMedia(fallback, { allowSpaces: true })) {
+				if (isValidMedia(fallback, {
+					allowSpaces: true,
+					allowBareFilename: true
+				})) {
 					media.push(fallback);
 					hasValidMedia = true;
 					foundMediaToken = true;
@@ -1668,7 +1700,8 @@ function splitMediaFromOutput(raw) {
 			}
 			if (hasValidMedia) {
 				if (invalidParts.length > 0) pieces.push(invalidParts.join(" "));
-			} else pieces.push(match[0]);
+			} else if (looksLikeLocalPath) foundMediaToken = true;
+			else pieces.push(match[0]);
 			cursor = start + match[0].length;
 		}
 		pieces.push(line.slice(cursor));
@@ -1744,7 +1777,7 @@ function normalizeChannelTargetInput(raw) {
 function normalizeTargetForProvider(provider, raw) {
 	if (!raw) return;
 	const providerId = normalizeChannelId(provider);
-	return ((providerId ? getChannelPlugin(providerId) : void 0)?.messaging?.normalizeTarget?.(raw) ?? (raw.trim().toLowerCase() || void 0)) || void 0;
+	return ((providerId ? getChannelPlugin(providerId) : void 0)?.messaging?.normalizeTarget?.(raw) ?? (raw.trim() || void 0)) || void 0;
 }
 function buildTargetResolverSignature(channel) {
 	const resolver = getChannelPlugin(channel)?.messaging?.targetResolver;
@@ -2534,23 +2567,80 @@ async function deliverOutboundPayloads(params) {
 			})
 		};
 	};
-	const normalizedPayloads = normalizeReplyPayloadsForDelivery(payloads);
+	const normalizeWhatsAppPayload = (payload) => {
+		const hasMedia = Boolean(payload.mediaUrl) || (payload.mediaUrls?.length ?? 0) > 0;
+		const normalizedText = (typeof payload.text === "string" ? payload.text : "").replace(/^(?:[ \t]*\r?\n)+/, "");
+		if (!normalizedText.trim()) {
+			if (!hasMedia) return null;
+			return {
+				...payload,
+				text: ""
+			};
+		}
+		return {
+			...payload,
+			text: normalizedText
+		};
+	};
+	const normalizedPayloads = normalizeReplyPayloadsForDelivery(payloads).flatMap((payload) => {
+		if (channel !== "whatsapp") return [payload];
+		const normalized = normalizeWhatsAppPayload(payload);
+		return normalized ? [normalized] : [];
+	});
+	const hookRunner = getGlobalHookRunner();
 	for (const payload of normalizedPayloads) {
 		const payloadSummary = {
 			text: payload.text ?? "",
 			mediaUrls: payload.mediaUrls ?? (payload.mediaUrl ? [payload.mediaUrl] : []),
 			channelData: payload.channelData
 		};
+		const emitMessageSent = (success, error) => {
+			if (!hookRunner?.hasHooks("message_sent")) return;
+			hookRunner.runMessageSent({
+				to,
+				content: payloadSummary.text,
+				success,
+				...error ? { error } : {}
+			}, {
+				channelId: channel,
+				accountId: accountId ?? void 0
+			}).catch(() => {});
+		};
 		try {
 			throwIfAborted(abortSignal);
+			let effectivePayload = payload;
+			if (hookRunner?.hasHooks("message_sending")) try {
+				const sendingResult = await hookRunner.runMessageSending({
+					to,
+					content: payloadSummary.text,
+					metadata: {
+						channel,
+						accountId,
+						mediaUrls: payloadSummary.mediaUrls
+					}
+				}, {
+					channelId: channel,
+					accountId: accountId ?? void 0
+				});
+				if (sendingResult?.cancel) continue;
+				if (sendingResult?.content != null) {
+					effectivePayload = {
+						...payload,
+						text: sendingResult.content
+					};
+					payloadSummary.text = sendingResult.content;
+				}
+			} catch {}
 			params.onPayload?.(payloadSummary);
-			if (handler.sendPayload && payload.channelData) {
-				results.push(await handler.sendPayload(payload));
+			if (handler.sendPayload && effectivePayload.channelData) {
+				results.push(await handler.sendPayload(effectivePayload));
+				emitMessageSent(true);
 				continue;
 			}
 			if (payloadSummary.mediaUrls.length === 0) {
 				if (isSignalChannel) await sendSignalTextChunks(payloadSummary.text);
 				else await sendTextChunks(payloadSummary.text);
+				emitMessageSent(true);
 				continue;
 			}
 			let first = true;
@@ -2561,7 +2651,9 @@ async function deliverOutboundPayloads(params) {
 				if (isSignalChannel) results.push(await sendSignalMedia(caption, url));
 				else results.push(await handler.sendMedia(caption, url));
 			}
+			emitMessageSent(true);
 		} catch (err) {
+			emitMessageSent(false, err instanceof Error ? err.message : String(err));
 			if (!params.bestEffort) throw err;
 			params.onError?.(err, payloadSummary);
 		}
@@ -2581,4 +2673,4 @@ async function deliverOutboundPayloads(params) {
 }
 
 //#endregion
-export { loadWebMedia as A, chunkTextWithMode as B, parseInlineDirectives as C, chunkMarkdownIR as D, fetchWithTimeout as E, resolveMarkdownTableMode as F, parseFenceSpans as G, resolveTextChunkLimit as H, chunkByNewline as I, isSilentReplyText as J, HEARTBEAT_TOKEN as K, chunkMarkdownText as L, MediaFetchError as M, fetchRemoteMedia as N, markdownToIR as O, fetchWithSsrFGuard as P, chunkMarkdownTextWithMode as R, splitMediaFromOutput as S, wrapFetchWithAbortSignal as T, findFenceSpanAt as U, resolveChunkMode as V, isSafeFenceBreak as W, buildTargetResolverSignature as _, applyReplyThreading as a, throwIfAborted as b, shouldSuppressMessagingToolReplies as c, sendMessageSignal as d, sendReadReceiptSignal as f, streamSignalEvents as g, signalRpcRequest as h, applyReplyTagsToPayload as i, loadWebMediaRaw as j, markdownToIRWithMeta as k, createReplyToModeFilterForChannel as l, signalCheck as m, deliver_exports as n, filterMessagingToolDuplicates as o, sendTypingSignal as p, SILENT_REPLY_TOKEN as q, normalizeReplyPayloadsForDelivery as r, isRenderablePayload as s, deliverOutboundPayloads as t, resolveReplyToMode as u, normalizeChannelTargetInput as v, resolveFetch as w, parseReplyDirectives as x, normalizeTargetForProvider as y, chunkText as z };
+export { loadWebMediaRaw as A, isSafeFenceBreak as B, parseInlineDirectives as C, markdownToIR as D, chunkMarkdownIR as E, chunkText as F, SILENT_REPLY_TOKEN as G, getGlobalHookRunner as H, chunkTextWithMode as I, isSilentReplyText as K, resolveChunkMode as L, chunkByNewline as M, chunkMarkdownText as N, markdownToIRWithMeta as O, chunkMarkdownTextWithMode as P, resolveTextChunkLimit as R, splitMediaFromOutput as S, wrapFetchWithAbortSignal as T, initializeGlobalHookRunner as U, parseFenceSpans as V, HEARTBEAT_TOKEN as W, buildTargetResolverSignature as _, applyReplyThreading as a, throwIfAborted as b, shouldSuppressMessagingToolReplies as c, sendMessageSignal as d, sendReadReceiptSignal as f, streamSignalEvents as g, signalRpcRequest as h, applyReplyTagsToPayload as i, resolveMarkdownTableMode as j, loadWebMedia as k, createReplyToModeFilterForChannel as l, signalCheck as m, deliver_exports as n, filterMessagingToolDuplicates as o, sendTypingSignal as p, normalizeReplyPayloadsForDelivery as r, isRenderablePayload as s, deliverOutboundPayloads as t, resolveReplyToMode as u, normalizeChannelTargetInput as v, resolveFetch as w, parseReplyDirectives as x, normalizeTargetForProvider as y, findFenceSpanAt as z };