activeclaw 2026.2.12 → 2026.2.13

package/dist/{reply-m467_fOC.js → reply-DICXkh_C.js}

@@ -1,63 +1,64 @@
 import { g as resolveStateDir, r as STATE_DIR, t as CONFIG_PATH, y as resolveRequiredHomeDir } from "./paths-DVBShlw6.js";
-import { A as logVerbose, D as info, E as danger, F as warn, I as colorize, L as isRich, M as setVerbose, N as shouldLogVerbose, P as success, R as theme, T as setActivePluginRegistry, U as normalizeLogLevel, b as normalizeAnyChannelId, c as defaultRuntime, m as CHAT_CHANNEL_ORDER, t as createSubsystemLogger, w as requireActivePluginRegistry, x as normalizeChannelId, z as getChildLogger } from "./subsystem-Bv7dGhES.js";
-import { C as shortenHomePath, D as truncateUtf16Safe, E as toWhatsappJid, S as shortenHomeInString, T as sliceUtf16Safe, b as resolveUserPath, d as isPlainObject, f as isRecord, h as normalizeE164, i as clampInt, l as escapeRegExp, m as jidToE164, p as isSelfChatMode, r as clamp, t as CONFIG_DIR, w as sleep, y as resolveJidToE164 } from "./utils-BHPdZE4h.js";
-import { A as isTransientHttpError, C as isContextOverflowError, D as isRateLimitAssistantError, E as isLikelyContextOverflowError, F as ensureSessionHeader, G as normalizeUsageDisplay, H as normalizeElevatedLevel, I as resolveBootstrapMaxChars, J as supportsXHighThinking, K as normalizeVerboseLevel, L as sanitizeGoogleTurnOrdering, M as parseImageSizeError, N as sanitizeUserFacingText, O as isRawApiErrorPayload, P as buildBootstrapContextFiles, R as formatThinkingLevels, S as isCompactionFailureError, T as isFailoverErrorMessage, U as normalizeReasoningLevel, W as normalizeThinkLevel, _ as formatRawAssistantErrorForUi, a as isMessagingToolDuplicateNormalized, b as isBillingAssistantError, c as sanitizeImageBlocks, d as isAntigravityClaude, f as isGoogleModelApi, g as formatBillingErrorMessage, h as formatAssistantErrorText, j as parseImageDimensionError, k as isTimeoutErrorMessage, l as sanitizeToolResultImages, m as classifyFailoverReason, n as validateGeminiTurns, o as normalizeTextForComparison, p as BILLING_ERROR_USER_MESSAGE, q as resolveResponseUsageMode, r as pickFallbackThinkingLevel, s as sanitizeSessionMessagesImages, t as validateAnthropicTurns, u as downgradeOpenAIReasoningBlocks, v as getApiErrorPayloadFingerprint, w as isFailoverAssistantError, x as isCloudCodeAssistFormatError, y as isAuthAssistantError, z as formatXHighModelHint } from "./pi-embedded-helpers-CmftU5Zj.js";
+import { A as logVerbose, D as info, E as danger, F as warn, I as colorize, L as isRich, M as setVerbose, N as shouldLogVerbose, P as success, R as theme, T as setActivePluginRegistry, U as normalizeLogLevel, b as normalizeAnyChannelId, c as defaultRuntime, m as CHAT_CHANNEL_ORDER, t as createSubsystemLogger, w as requireActivePluginRegistry, x as normalizeChannelId, z as getChildLogger } from "./subsystem-BoExtIHo.js";
+import { C as shortenHomePath, D as truncateUtf16Safe, E as toWhatsappJid, S as shortenHomeInString, T as sliceUtf16Safe, b as resolveUserPath, d as isPlainObject, f as isRecord, h as normalizeE164, i as clampInt, l as escapeRegExp, m as jidToE164, p as isSelfChatMode, r as clamp, t as CONFIG_DIR, w as sleep, y as resolveJidToE164 } from "./utils-Cd9QdCHh.js";
+import { A as isTransientHttpError, C as isContextOverflowError, D as isRateLimitAssistantError, E as isLikelyContextOverflowError, F as ensureSessionHeader, G as normalizeUsageDisplay, H as normalizeElevatedLevel, I as resolveBootstrapMaxChars, J as supportsXHighThinking, K as normalizeVerboseLevel, L as sanitizeGoogleTurnOrdering, M as parseImageSizeError, N as sanitizeUserFacingText, O as isRawApiErrorPayload, P as buildBootstrapContextFiles, R as formatThinkingLevels, S as isCompactionFailureError, T as isFailoverErrorMessage, U as normalizeReasoningLevel, W as normalizeThinkLevel, _ as formatRawAssistantErrorForUi, a as isMessagingToolDuplicateNormalized, b as isBillingAssistantError, c as sanitizeImageBlocks, d as isAntigravityClaude, f as isGoogleModelApi, g as formatBillingErrorMessage, h as formatAssistantErrorText, j as parseImageDimensionError, k as isTimeoutErrorMessage, l as sanitizeToolResultImages, m as classifyFailoverReason, n as validateGeminiTurns, o as normalizeTextForComparison, p as BILLING_ERROR_USER_MESSAGE, q as resolveResponseUsageMode, r as pickFallbackThinkingLevel, s as sanitizeSessionMessagesImages, t as validateAnthropicTurns, u as downgradeOpenAIReasoningBlocks, v as getApiErrorPayloadFingerprint, w as isFailoverAssistantError, x as isCloudCodeAssistFormatError, y as isAuthAssistantError, z as formatXHighModelHint } from "./pi-embedded-helpers-CMKLjW6X.js";
 import { _ as isCronRunSessionKey, a as buildAgentPeerSessionKey, b as resolveThreadParentSessionKey, c as normalizeAccountId$3, d as resolveAgentIdFromSessionKey, f as resolveThreadSessionKeys, g as isAcpSessionKey, i as buildAgentMainSessionKey, l as normalizeAgentId, n as DEFAULT_AGENT_ID, o as buildGroupHistoryKey, p as sanitizeAgentId, r as DEFAULT_MAIN_KEY, s as classifySessionKeyShape, t as DEFAULT_ACCOUNT_ID$1, u as normalizeMainKey, v as isSubagentSessionKey, y as parseAgentSessionKey } from "./session-key-BWxPj0z_.js";
-import { a as logDebug, c as logWarn, i as spawnWithFallback, n as runExec, o as logError, r as formatSpawnError, s as logInfo, t as runCommandWithTimeout } from "./exec-DXtR2fhb.js";
+import { a as logDebug, c as logWarn, i as spawnWithFallback, n as runExec, o as logError, r as formatSpawnError, s as logInfo, t as runCommandWithTimeout } from "./exec-YIosokWE.js";
 import { t as resolveOpenClawPackageRoot } from "./openclaw-root-1VeFrph_.js";
-import { C as loadWorkspaceBootstrapFiles, S as filterBootstrapFilesForSession, c as resolveDefaultAgentId, f as DEFAULT_AGENT_WORKSPACE_DIR, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, n as resolveAgentConfig, o as resolveAgentSkillsFilter, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, u as resolveSessionAgentIds, x as ensureAgentWorkspace } from "./agent-scope---6LLHj0.js";
-import { B as resolveApiKeyForProvider, Ct as resolveAuthProfileDisplayLabel, Dt as DEFAULT_MODEL, Et as DEFAULT_CONTEXT_TOKENS, G as getShellPathFromLoginShell, H as resolveEnvApiKey, L as getApiKeyForModel, Ot as DEFAULT_PROVIDER, R as getCustomProviderApiKey, St as normalizeSecretInput, U as resolveModelAuthMode, a as isCliProvider, at as resolveApiKeyForProfile, bt as resolveOpenClawAgentDir, d as resolveConfiguredModelRef, dt as listProfilesForProvider, et as resolveAuthProfileOrder, f as resolveDefaultModelForAgent, ft as markAuthProfileGood, h as resolveThinkingDefault, ht as ensureAuthProfileStore, m as resolveModelRefFromString, n as buildConfiguredAllowlistKeys, nt as markAuthProfileFailure, o as modelKey, q as resolveShellEnvFallbackTimeoutMs, r as buildModelAliasIndex, rt as markAuthProfileUsed, s as normalizeProviderId, t as buildAllowedModelSet, tt as isProfileInCooldown, yt as resolveAuthStorePathForDisplay, z as requireApiKey } from "./model-selection-unMJyUIE.js";
+import { C as loadWorkspaceBootstrapFiles, S as filterBootstrapFilesForSession, c as resolveDefaultAgentId, f as DEFAULT_AGENT_WORKSPACE_DIR, i as resolveAgentModelFallbacksOverride, l as resolveSessionAgentId, n as resolveAgentConfig, o as resolveAgentSkillsFilter, p as DEFAULT_BOOTSTRAP_FILENAME, r as resolveAgentDir, s as resolveAgentWorkspaceDir, t as listAgentIds, u as resolveSessionAgentIds, x as ensureAgentWorkspace } from "./agent-scope-CQCus0rI.js";
+import { B as resolveApiKeyForProvider, Ct as resolveAuthProfileDisplayLabel, Dt as DEFAULT_MODEL, Et as DEFAULT_CONTEXT_TOKENS, G as getShellPathFromLoginShell, H as resolveEnvApiKey, L as getApiKeyForModel, Ot as DEFAULT_PROVIDER, R as getCustomProviderApiKey, St as normalizeSecretInput, U as resolveModelAuthMode, a as isCliProvider, at as resolveApiKeyForProfile, bt as resolveOpenClawAgentDir, d as resolveConfiguredModelRef, dt as listProfilesForProvider, et as resolveAuthProfileOrder, f as resolveDefaultModelForAgent, ft as markAuthProfileGood, h as resolveThinkingDefault, ht as ensureAuthProfileStore, m as resolveModelRefFromString, n as buildConfiguredAllowlistKeys, nt as markAuthProfileFailure, o as modelKey, q as resolveShellEnvFallbackTimeoutMs, r as buildModelAliasIndex, rt as markAuthProfileUsed, s as normalizeProviderId, t as buildAllowedModelSet, tt as isProfileInCooldown, yt as resolveAuthStorePathForDisplay, z as requireApiKey } from "./model-selection-BLuqsGVB.js";
 import { a as saveJsonFile, i as loadJsonFile } from "./github-copilot-token-BW-SEg7E.js";
 import { t as formatCliCommand } from "./command-format-ChfKqObn.js";
 import { t as parseBooleanValue$1 } from "./boolean-BgXe2hyu.js";
-import { t as isTruthyEnvValue } from "./env-DE9xvYOL.js";
-import { A as resolveAgentMaxConcurrent, C as parseConfigPath, M as VERSION, S as getConfigValueAtPath, T as unsetConfigValueAtPath, _ as validateJsonSchemaValue, b as setConfigOverride, c as writeConfigFile, f as TELEGRAM_COMMAND_NAME_PATTERN, g as parseDurationMs, h as isSafeExecutableValue, i as loadConfig, l as validateConfigObjectWithPlugins, m as resolveTelegramCustomCommands, o as readConfigFileSnapshot, p as normalizeTelegramCommandName, s as resolveConfigSnapshotHash, v as getConfigOverrides, w as setConfigValueAtPath, x as unsetConfigOverride, y as resetConfigOverrides } from "./config-DH9TLUNc.js";
-import { d as resolveMemorySlotDecision, l as normalizePluginsConfig, n as discoverOpenClawPlugins, s as applyTestPluginDefaults, t as loadPluginManifestRegistry, u as resolveEnableState } from "./manifest-registry-DFckk-L8.js";
-import { _ as listEnabledDiscordAccounts, a as normalizeWhatsAppTarget, b as normalizeChatType, c as resolveTelegramAccount, d as listBindings, g as resolveSlackBotToken, h as resolveSlackAppToken, i as isWhatsAppGroupJid, l as resolveTelegramToken, n as listChannelPlugins, o as listEnabledTelegramAccounts, p as resolveSlackAccount, r as normalizeChannelId$1, s as listTelegramAccountIds, t as getChannelPlugin, v as resolveDiscordAccount, y as normalizeDiscordToken } from "./plugins-BL9lIXSA.js";
-import { A as resolveSessionResetPolicy, C as normalizeDeliveryContext, D as resolveSessionKey$1, G as resolveIMessageAccount, H as listChannelDocks, K as resolveChannelGroupPolicy, L as resolveMainSessionKey, M as resolveThreadFlag, N as DEFAULT_RESET_TRIGGERS, O as evaluateSessionFreshness, P as canonicalizeMainSessionAlias, S as mergeDeliveryContext, U as listEnabledSignalAccounts, V as getChannelDock, W as resolveSignalAccount, X as resolveGroupSessionKey, Y as buildGroupDisplayName, Z as resolveSandboxConfigForAgent, _ as updateSessionStoreEntry, a as ensureSandboxWorkspaceForSession, at as normalizeToolName, b as deliveryContextFromSession, c as resolveSandboxRuntimeStatus, d as loadSessionStore, dt as resolveConversationLabel, et as applyOwnerOnlyToolPolicy, f as readSessionUpdatedAt, g as updateSessionStore, h as updateLastRoute, j as resolveSessionResetType, k as resolveChannelResetConfig, l as appendAssistantMessageToSessionTranscript, nt as collectExplicitAllowlist, o as resolveSandboxContext, ot as resolveToolProfilePolicy, p as recordSessionMetaFromInbound, q as resolveChannelGroupRequireMention, rt as expandPolicyWithPluginGroups, st as stripPluginOnlyAllowlist, tt as buildPluginToolGroups, v as isCacheEnabled, w as normalizeSessionDeliveryFields, x as deliveryContextKey, y as resolveCacheTtlMs$1, z as deriveSessionMetaPatch } from "./sandbox-BW8Xnkw1.js";
-import { _ as CLI_OUTPUT_MAX_BUFFER, a as runCapability, c as modelSupportsVision, f as registerUnhandledRejectionHandler, g as resolveMediaUnderstandingScope, h as normalizeMediaUnderstandingChatType, i as resolveAutoImageModel, m as resolveTimeoutMs$1, n as createMediaAttachmentCache, o as findModelInCatalog, p as resolveConcurrency, r as normalizeMediaAttachments, s as loadModelCatalog, t as buildProviderRegistry, u as resolveAttachmentKind, v as applyTemplate } from "./runner-CInKPsiP.js";
-import { _ as stripReasoningTagsFromText, a as decodeDataUrl, c as extractAssistantThinking, d as formatReasoningMessage, f as inferToolMetaFromArgs, g as stripThinkingTagsFromText, h as stripMinimaxToolCallXml, i as coerceImageModelConfig, l as extractThinkingFromTaggedStream, m as stripDowngradedToolCallText, o as resolveProviderVisionModelFromConfig, p as promoteThinkingTagsToBlocks, r as coerceImageAssistantText, s as extractAssistantText$1, u as extractThinkingFromTaggedText, v as ensureOpenClawModelsJson, y as minimaxUnderstandImage } from "./image-DI9s9eEx.js";
+import { t as isTruthyEnvValue } from "./env-ONzUVAG2.js";
+import { A as resolveAgentMaxConcurrent, C as parseConfigPath, M as VERSION, S as getConfigValueAtPath, T as unsetConfigValueAtPath, _ as validateJsonSchemaValue, b as setConfigOverride, c as writeConfigFile, f as TELEGRAM_COMMAND_NAME_PATTERN, g as parseDurationMs, h as isSafeExecutableValue, i as loadConfig, l as validateConfigObjectWithPlugins, m as resolveTelegramCustomCommands, o as readConfigFileSnapshot, p as normalizeTelegramCommandName, s as resolveConfigSnapshotHash, v as getConfigOverrides, w as setConfigValueAtPath, x as unsetConfigOverride, y as resetConfigOverrides } from "./config-aFQssWKX.js";
+import { d as resolveMemorySlotDecision, l as normalizePluginsConfig, n as discoverOpenClawPlugins, s as applyTestPluginDefaults, t as loadPluginManifestRegistry, u as resolveEnableState } from "./manifest-registry-CQhdnDBZ.js";
+import { _ as listEnabledDiscordAccounts, a as normalizeWhatsAppTarget, b as normalizeChatType, c as resolveTelegramAccount, d as listBindings, g as resolveSlackBotToken, h as resolveSlackAppToken, i as isWhatsAppGroupJid, l as resolveTelegramToken, n as listChannelPlugins, o as listEnabledTelegramAccounts, p as resolveSlackAccount, r as normalizeChannelId$1, s as listTelegramAccountIds, t as getChannelPlugin, v as resolveDiscordAccount, y as normalizeDiscordToken } from "./plugins-X7d_tfTE.js";
+import { A as resolveSessionResetPolicy, C as normalizeDeliveryContext, D as resolveSessionKey$1, G as resolveIMessageAccount, H as listChannelDocks, K as resolveChannelGroupPolicy, L as resolveMainSessionKey, M as resolveThreadFlag, N as DEFAULT_RESET_TRIGGERS, O as evaluateSessionFreshness, P as canonicalizeMainSessionAlias, S as mergeDeliveryContext, U as listEnabledSignalAccounts, V as getChannelDock, W as resolveSignalAccount, X as resolveGroupSessionKey, Y as buildGroupDisplayName, Z as resolveSandboxConfigForAgent, _ as updateSessionStoreEntry, a as ensureSandboxWorkspaceForSession, at as normalizeToolName, b as deliveryContextFromSession, c as resolveSandboxRuntimeStatus, d as loadSessionStore, dt as resolveConversationLabel, et as applyOwnerOnlyToolPolicy, f as readSessionUpdatedAt, g as updateSessionStore, h as updateLastRoute, j as resolveSessionResetType, k as resolveChannelResetConfig, l as appendAssistantMessageToSessionTranscript, nt as collectExplicitAllowlist, o as resolveSandboxContext, ot as resolveToolProfilePolicy, p as recordSessionMetaFromInbound, q as resolveChannelGroupRequireMention, rt as expandPolicyWithPluginGroups, st as stripPluginOnlyAllowlist, tt as buildPluginToolGroups, v as isCacheEnabled, w as normalizeSessionDeliveryFields, x as deliveryContextKey, y as resolveCacheTtlMs$1, z as deriveSessionMetaPatch } from "./sandbox-Bhjnh1Xg.js";
+import { _ as CLI_OUTPUT_MAX_BUFFER, a as runCapability, c as modelSupportsVision, f as registerUnhandledRejectionHandler, g as resolveMediaUnderstandingScope, h as normalizeMediaUnderstandingChatType, i as resolveAutoImageModel, m as resolveTimeoutMs$1, n as createMediaAttachmentCache, o as findModelInCatalog, p as resolveConcurrency, r as normalizeMediaAttachments, s as loadModelCatalog, t as buildProviderRegistry, u as resolveAttachmentKind, v as applyTemplate } from "./runner-D_dujMod.js";
+import { _ as stripReasoningTagsFromText, a as decodeDataUrl, c as extractAssistantThinking, d as formatReasoningMessage, f as inferToolMetaFromArgs, g as stripThinkingTagsFromText, h as stripMinimaxToolCallXml, i as coerceImageModelConfig, l as extractThinkingFromTaggedStream, m as stripDowngradedToolCallText, o as resolveProviderVisionModelFromConfig, p as promoteThinkingTagsToBlocks, r as coerceImageAssistantText, s as extractAssistantText$1, u as extractThinkingFromTaggedText, v as ensureOpenClawModelsJson, y as minimaxUnderstandImage } from "./image-C4Nn2p3e.js";
 import { n as discoverModels, t as discoverAuthStorage } from "./pi-model-discovery-EwKVHlZB.js";
-import { O as DEFAULT_AI_SNAPSHOT_MAX_CHARS } from "./chrome-juQxt0zf.js";
-import { a as resolveSkillsPromptForRun, i as loadWorkspaceSkillEntries, l as applySkillEnvOverrides, n as buildWorkspaceSkillCommandSpecs, r as buildWorkspaceSkillSnapshot, s as resolvePluginSkillDirs, u as applySkillEnvOverridesFromSnapshot } from "./skills-aFOsriMP.js";
-import { c as saveMediaBuffer, d as getFileExtension, f as imageMimeFromFormat, g as MAX_IMAGE_BYTES, l as detectMime, m as isGifMedia, o as resizeToJpeg, p as isAudioFileName, r as getImageMetadata, s as getMediaDir, u as extensionForMime, v as mediaKindFromMime, y as SsrFBlockedError } from "./routes-82Ywfho6.js";
+import { O as DEFAULT_AI_SNAPSHOT_MAX_CHARS } from "./chrome-Cvr-57lg.js";
+import { a as resolveSkillsPromptForRun, d as resolveSandboxedMediaSource, f as applySkillEnvOverrides, i as loadWorkspaceSkillEntries, l as assertMediaNotDataUrl, n as buildWorkspaceSkillCommandSpecs, p as applySkillEnvOverridesFromSnapshot, r as buildWorkspaceSkillSnapshot, s as resolvePluginSkillDirs, u as assertSandboxPath } from "./skills-DprQj9X2.js";
+import { c as saveMediaBuffer, d as getFileExtension, f as imageMimeFromFormat, g as MAX_IMAGE_BYTES, l as detectMime, m as isGifMedia, o as resizeToJpeg, p as isAudioFileName, r as getImageMetadata, s as getMediaDir, u as extensionForMime, v as mediaKindFromMime, y as SsrFBlockedError } from "./routes-CmOI1hIH.js";
 import { n as formatErrorMessage, r as formatUncaughtError, t as extractErrorCode } from "./errors-Bv81hF2P.js";
-import { i as resolveBrowserConfig } from "./server-context-Lb-eUZG_.js";
+import { i as resolveBrowserConfig } from "./server-context-Cl0U0vE3.js";
 import { t as pickPrimaryTailnetIPv4 } from "./tailnet-DATIFSsY.js";
 import { a as isValidIPv4, s as pickPrimaryLanIPv4 } from "./ws-CHCQHs0F.js";
-import { a as isInternalMessageChannel, c as listDeliverableMessageChannels, d as resolveMessageChannel, h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, o as isMarkdownCapableMessageChannel, p as GATEWAY_CLIENT_IDS, t as INTERNAL_MESSAGE_CHANNEL, u as resolveGatewayMessageChannel } from "./message-channel-0717wOz-.js";
-import { a as logoutWeb, d as webAuthExists, i as logWebSelfId, n as resolveWhatsAppAccount, r as getWebAuthAgeMs, s as readWebSelfId } from "./accounts-DimKrt7j.js";
-import { a as resolveSessionTranscriptsDirForAgent, n as resolveSessionFilePath, o as resolveStorePath, r as resolveSessionTranscriptPath } from "./paths-RITJT4UY.js";
+import { a as isInternalMessageChannel, c as listDeliverableMessageChannels, d as resolveMessageChannel, h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES, n as isDeliverableMessageChannel, o as isMarkdownCapableMessageChannel, p as GATEWAY_CLIENT_IDS, t as INTERNAL_MESSAGE_CHANNEL, u as resolveGatewayMessageChannel } from "./message-channel-BLi2a6Yw.js";
+import { a as logoutWeb, d as webAuthExists, i as logWebSelfId, n as resolveWhatsAppAccount, r as getWebAuthAgeMs, s as readWebSelfId } from "./accounts-DeqIQjo1.js";
+import { i as resolveSessionTranscriptPathInDir, n as resolveSessionFilePath, o as resolveSessionTranscriptsDirForAgent, r as resolveSessionTranscriptPath, s as resolveStorePath } from "./paths-B49s6UZQ.js";
 import { t as emitSessionTranscriptUpdate } from "./transcript-events-Bp7fGnwv.js";
 import { n as redactSensitiveText } from "./redact-BRsnXqwD.js";
-import { n as resolveToolDisplay } from "./tool-display-Na-EVL83.js";
-import { i as fetchWithSsrFGuard, n as fetchRemoteMedia, r as fetchWithTimeout } from "./fetch-CqZP8jwB.js";
-import { A as markdownToIR, B as resolveChunkMode, C as sendTypingSignal, D as resolveFetch, E as streamSignalEvents, F as chunkByNewline, G as HEARTBEAT_TOKEN, H as findFenceSpanAt, I as chunkMarkdownText, K as SILENT_REPLY_TOKEN, L as chunkMarkdownTextWithMode, M as loadWebMedia, N as loadWebMediaRaw, O as wrapFetchWithAbortSignal, P as resolveMarkdownTableMode, R as chunkText, S as sendReadReceiptSignal, T as signalRpcRequest, U as isSafeFenceBreak, V as resolveTextChunkLimit, W as parseFenceSpans, _ as throwIfAborted, b as parseInlineDirectives$1, c as applyReplyThreading, d as shouldSuppressMessagingToolReplies, f as createReplyToModeFilterForChannel, g as normalizeTargetForProvider, h as normalizeChannelTargetInput, j as markdownToIRWithMeta, k as chunkMarkdownIR, l as filterMessagingToolDuplicates, m as buildTargetResolverSignature, o as normalizeReplyPayloadsForDelivery, p as resolveReplyToMode, q as isSilentReplyText, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as isRenderablePayload, v as parseReplyDirectives, w as signalCheck, x as sendMessageSignal, y as splitMediaFromOutput, z as chunkTextWithMode } from "./deliver-B1jsU2r7.js";
-import { i as getMachineDisplayName, n as isWSL, t as createBrowserRouteDispatcher } from "./dispatcher-BHsNwFe-.js";
-import { i as resolveMemorySearchConfig, n as resolveRetryConfig, r as retryAsync } from "./manager-DScY_ZTT.js";
-import { d as listMemoryFiles, f as normalizeExtraMemoryPaths } from "./sqlite-B4Z1_Ioc.js";
-import { _ as parseCommandArgs, b as serializeCommandArgs, d as findCommandByNativeName, f as listChatCommands, g as normalizeCommandBody, h as listNativeCommandSpecsForConfig, i as extractTextFromMessage, m as listNativeCommandSpecs, p as listChatCommandsForConfig, u as buildCommandTextFromArgs, v as resolveCommandArgChoices, x as shouldHandleTextCommands, y as resolveCommandArgMenu } from "./tui-formatters-BiNTNGwg.js";
-import { kt as SESSION_LABEL_MAX_LENGTH, t as GatewayClient } from "./client-B0_GiCjB.js";
-import { i as randomIdempotencyKey, n as callGateway } from "./call-C9az806y.js";
+import { n as resolveToolDisplay } from "./tool-display-CZRIDMRm.js";
+import { i as fetchWithSsrFGuard, n as fetchRemoteMedia, r as fetchWithTimeout } from "./fetch-DmiOpALK.js";
+import { A as markdownToIR, B as resolveChunkMode, C as sendTypingSignal, D as resolveFetch, E as streamSignalEvents, F as chunkByNewline, G as getGlobalHookRunner, H as findFenceSpanAt, I as chunkMarkdownText, J as SILENT_REPLY_TOKEN, K as initializeGlobalHookRunner, L as chunkMarkdownTextWithMode, M as loadWebMedia, N as loadWebMediaRaw, O as wrapFetchWithAbortSignal, P as resolveMarkdownTableMode, R as chunkText, S as sendReadReceiptSignal, T as signalRpcRequest, U as isSafeFenceBreak, V as resolveTextChunkLimit, W as parseFenceSpans, Y as isSilentReplyText, _ as throwIfAborted, b as parseInlineDirectives$1, c as applyReplyThreading, d as shouldSuppressMessagingToolReplies, f as createReplyToModeFilterForChannel, g as normalizeTargetForProvider, h as normalizeChannelTargetInput, j as markdownToIRWithMeta, k as chunkMarkdownIR, l as filterMessagingToolDuplicates, m as buildTargetResolverSignature, o as normalizeReplyPayloadsForDelivery, p as resolveReplyToMode, q as HEARTBEAT_TOKEN, s as applyReplyTagsToPayload, t as deliverOutboundPayloads, u as isRenderablePayload, v as parseReplyDirectives, w as signalCheck, x as sendMessageSignal, y as splitMediaFromOutput, z as chunkTextWithMode } from "./deliver-LsxKETro.js";
+import { i as getMachineDisplayName, n as isWSL, t as createBrowserRouteDispatcher } from "./dispatcher-DY51b-Zc.js";
+import { i as resolveMemorySearchConfig, n as resolveRetryConfig, r as retryAsync } from "./manager-DkqF1GiK.js";
+import { d as listMemoryFiles, f as normalizeExtraMemoryPaths } from "./sqlite-D4w5TejA.js";
+import { _ as parseCommandArgs, b as serializeCommandArgs, d as findCommandByNativeName, f as listChatCommands, g as normalizeCommandBody, h as listNativeCommandSpecsForConfig, i as extractTextFromMessage, m as listNativeCommandSpecs, p as listChatCommandsForConfig, u as buildCommandTextFromArgs, v as resolveCommandArgChoices, x as shouldHandleTextCommands, y as resolveCommandArgMenu } from "./tui-formatters-CNySEfJN.js";
+import { Mt as hasInterSessionUserProvenance, Nt as normalizeInputProvenance, jt as applyInputProvenanceToUserMessage, kt as SESSION_LABEL_MAX_LENGTH, t as GatewayClient } from "./client-BrYfyoDK.js";
+import { i as randomIdempotencyKey, n as callGateway } from "./call-SolyGS1r.js";
 import { i as formatDurationSeconds, r as formatDurationPrecise, t as formatDurationCompact } from "./format-duration-84n6_DgO.js";
 import { n as formatTimeAgo } from "./format-relative-cegC_FF5.js";
-import { a as formatError$1, i as createWaSocket, n as startWebLoginWithQr, o as getStatusCode$1, r as waitForWebLogin, s as waitForWaConnection } from "./login-qr-Xx8yJrSc.js";
-import { a as removeChannelAllowFromStoreEntry, c as listPairingChannels, i as readChannelAllowFromStore, o as upsertChannelPairingRequest, t as addChannelAllowFromStoreEntry } from "./pairing-store-CL4rJ7m7.js";
-import { t as formatDocsLink } from "./links-CV4oki2u.js";
+import { a as formatError$1, i as createWaSocket, n as startWebLoginWithQr, o as getStatusCode$1, r as waitForWebLogin, s as waitForWaConnection } from "./login-qr-B6ZgAuIf.js";
+import { a as removeChannelAllowFromStoreEntry, c as listPairingChannels, i as readChannelAllowFromStore, o as upsertChannelPairingRequest, t as addChannelAllowFromStoreEntry } from "./pairing-store-CmlRVqOz.js";
+import { t as formatDocsLink } from "./links-Eax1UO3w.js";
 import { r as withManager } from "./cli-utils-CRhVAaLV.js";
-import { n as withProgress, r as withProgressTotals } from "./progress-g9R--HZD.js";
-import { a as resolveSubagentToolPolicy, c as resolveNativeSkillsEnabled, i as resolveGroupToolPolicy, n as isToolAllowedByPolicies, o as isNativeCommandsExplicitlyDisabled, r as resolveEffectiveToolPolicy, s as resolveNativeCommandsEnabled, t as filterToolsByPolicy } from "./pi-tools.policy-CJFi1sny.js";
-import { r as stylePromptTitle } from "./prompt-style-lmJDcgtA.js";
-import { t as resolvePairingIdLabel } from "./pairing-labels-3o3QO3Qn.js";
-import { c as derivePromptTokens, d as normalizeUsage, l as deriveSessionTotalTokens, n as loadCostUsageSummary, o as extractToolCallNames, r as loadSessionCostSummary, s as hasToolCall, u as hasNonzeroUsage } from "./session-cost-usage-HU4OeRgw.js";
+import { n as withProgress, r as withProgressTotals } from "./progress-C9kngsTD.js";
+import { a as resolveSubagentToolPolicy, c as resolveNativeSkillsEnabled, i as resolveGroupToolPolicy, n as isToolAllowedByPolicies, o as isNativeCommandsExplicitlyDisabled, r as resolveEffectiveToolPolicy, s as resolveNativeCommandsEnabled, t as filterToolsByPolicy } from "./pi-tools.policy-BpsROZbz.js";
+import { r as stylePromptTitle } from "./prompt-style-CIbmaxSa.js";
+import { t as resolvePairingIdLabel } from "./pairing-labels-B6CN0SNH.js";
+import { c as derivePromptTokens, d as normalizeUsage, l as deriveSessionTotalTokens, n as loadCostUsageSummary, o as extractToolCallNames, r as loadSessionCostSummary, s as hasToolCall, u as hasNonzeroUsage } from "./session-cost-usage-D7HuoSSD.js";
 import { i as resolveModelCostConfig, n as formatTokenCount$2, r as formatUsd$1, t as estimateUsageCost } from "./usage-format-CpORtVCG.js";
 import { a as evaluateShellAllowlist, d as requiresExecApproval, f as resolveExecApprovals, h as resolveSafeBins, o as maxAsk, p as resolveExecApprovalsFromFile, s as minSecurity, t as addAllowlistEntry, u as recordAllowlistUse } from "./exec-approvals-Cb4ZLukq.js";
 import { a as canvasSnapshotTempPath, c as parseCameraClipPayload, d as buildNodeShellCommand, i as parseEnvPairs, l as parseCameraSnapPayload, n as screenRecordTempPath, o as parseCanvasSnapshotPayload, r as writeScreenRecordToFile, s as cameraTempPath, t as parseScreenRecordPayload, u as writeBase64ToFile } from "./nodes-screen-CdCWeiwy.js";
-import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-CBlMVTRu.js";
-import { t as parseAbsoluteTimeMs } from "./parse-Cjiudy6x.js";
-import { d as resolveGatewaySystemdServiceName, l as resolveGatewayLaunchAgentLabel } from "./constants-DuoCkWRh.js";
-import { n as resolveMessageChannelSelection, t as listConfiguredMessageChannels } from "./channel-selection-C78IwbD-.js";
-import { t as parseTimeoutMs } from "./parse-timeout-DFSPLxpY.js";
+import { n as resolveBrowserControlAuth } from "./control-auth-DBCu3qyv.js";
+import { n as createBrowserControlContext, r as startBrowserControlServiceFromConfig } from "./control-service-B5KnPqGP.js";
+import { t as parseAbsoluteTimeMs } from "./parse-Bw0oH-rT.js";
+import { d as resolveGatewaySystemdServiceName, l as resolveGatewayLaunchAgentLabel } from "./constants-BvQ6S8j5.js";
+import { n as resolveMessageChannelSelection, t as listConfiguredMessageChannels } from "./channel-selection-MZAHm4U8.js";
+import { t as parseTimeoutMs } from "./parse-timeout-D1XX_zN_.js";
 import { createRequire } from "node:module";
 import process$1 from "node:process";
 import { fileURLToPath } from "node:url";
@@ -830,6 +831,8 @@ async function fetchWithGuard(params) {
 		url: params.url,
 		maxRedirects: params.maxRedirects,
 		timeoutMs: params.timeoutMs,
+		policy: params.policy,
+		auditContext: params.auditContext,
 		init: { headers: { "User-Agent": "OpenClaw-Gateway/1.0" } }
 	});
 	try {
@@ -937,7 +940,12 @@ async function extractImageContentFromSource(source, limits) {
 			url: source.url,
 			maxBytes: limits.maxBytes,
 			timeoutMs: limits.timeoutMs,
-			maxRedirects: limits.maxRedirects
+			maxRedirects: limits.maxRedirects,
+			policy: {
+				allowPrivateNetwork: false,
+				hostnameAllowlist: limits.urlAllowlist
+			},
+			auditContext: "openresponses.input_image"
 		});
 		if (!limits.allowedMimes.has(result.mimeType)) throw new Error(`Unsupported image MIME type from URL: ${result.mimeType}`);
 		return {
@@ -966,7 +974,12 @@ async function extractFileContentFromSource(params) {
 			url: source.url,
 			maxBytes: limits.maxBytes,
 			timeoutMs: limits.timeoutMs,
-			maxRedirects: limits.maxRedirects
+			maxRedirects: limits.maxRedirects,
+			policy: {
+				allowPrivateNetwork: false,
+				hostnameAllowlist: limits.urlAllowlist
+			},
+			auditContext: "openresponses.input_file"
 		});
 		const parsed = parseContentType(result.contentType);
 		mimeType = parsed.mimeType ?? normalizeMimeType(result.mimeType);
@@ -2599,7 +2612,7 @@ async function createModelSelectionState(params) {
 		}
 	}
 	if (sessionEntry && sessionStore && sessionKey && sessionEntry.authProfileOverride) {
-		const { ensureAuthProfileStore } = await import("./model-selection-unMJyUIE.js").then((n) => n.$);
+		const { ensureAuthProfileStore } = await import("./model-selection-BLuqsGVB.js").then((n) => n.$);
 		const profile = ensureAuthProfileStore(void 0, { allowKeychainPrompt: false }).profiles[sessionEntry.authProfileOverride];
 		const providerKey = normalizeProviderId(provider);
 		if (!profile || normalizeProviderId(profile.provider) !== providerKey) await clearSessionAuthProfileOverride({
@@ -6732,260 +6745,6 @@ function getPluginCommandSpecs() {
 	}));
 }
 
-//#endregion
-//#region src/plugins/hooks.ts
-/**
-* Get hooks for a specific hook name, sorted by priority (higher first).
-*/
-function getHooksForName(registry, hookName) {
-	return registry.typedHooks.filter((h) => h.hookName === hookName).toSorted((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
-}
-/**
-* Create a hook runner for a specific registry.
-*/
-function createHookRunner(registry, options = {}) {
-	const logger = options.logger;
-	const catchErrors = options.catchErrors ?? true;
-	/**
-	* Run a hook that doesn't return a value (fire-and-forget style).
-	* All handlers are executed in parallel for performance.
-	*/
-	async function runVoidHook(hookName, event, ctx) {
-		const hooks = getHooksForName(registry, hookName);
-		if (hooks.length === 0) return;
-		logger?.debug?.(`[hooks] running ${hookName} (${hooks.length} handlers)`);
-		const promises = hooks.map(async (hook) => {
-			try {
-				await hook.handler(event, ctx);
-			} catch (err) {
-				const msg = `[hooks] ${hookName} handler from ${hook.pluginId} failed: ${String(err)}`;
-				if (catchErrors) logger?.error(msg);
-				else throw new Error(msg, { cause: err });
-			}
-		});
-		await Promise.all(promises);
-	}
-	/**
-	* Run a hook that can return a modifying result.
-	* Handlers are executed sequentially in priority order, and results are merged.
-	*/
-	async function runModifyingHook(hookName, event, ctx, mergeResults) {
-		const hooks = getHooksForName(registry, hookName);
-		if (hooks.length === 0) return;
-		logger?.debug?.(`[hooks] running ${hookName} (${hooks.length} handlers, sequential)`);
-		let result;
-		for (const hook of hooks) try {
-			const handlerResult = await hook.handler(event, ctx);
-			if (handlerResult !== void 0 && handlerResult !== null) if (mergeResults && result !== void 0) result = mergeResults(result, handlerResult);
-			else result = handlerResult;
-		} catch (err) {
-			const msg = `[hooks] ${hookName} handler from ${hook.pluginId} failed: ${String(err)}`;
-			if (catchErrors) logger?.error(msg);
-			else throw new Error(msg, { cause: err });
-		}
-		return result;
-	}
-	/**
-	* Run before_agent_start hook.
-	* Allows plugins to inject context into the system prompt.
-	* Runs sequentially, merging systemPrompt and prependContext from all handlers.
-	*/
-	async function runBeforeAgentStart(event, ctx) {
-		return runModifyingHook("before_agent_start", event, ctx, (acc, next) => ({
-			systemPrompt: next.systemPrompt ?? acc?.systemPrompt,
-			prependContext: acc?.prependContext && next.prependContext ? `${acc.prependContext}\n\n${next.prependContext}` : next.prependContext ?? acc?.prependContext
-		}));
-	}
-	/**
-	* Run agent_end hook.
-	* Allows plugins to analyze completed conversations.
-	* Runs in parallel (fire-and-forget).
-	*/
-	async function runAgentEnd(event, ctx) {
-		return runVoidHook("agent_end", event, ctx);
-	}
-	/**
-	* Run before_compaction hook.
-	*/
-	async function runBeforeCompaction(event, ctx) {
-		return runVoidHook("before_compaction", event, ctx);
-	}
-	/**
-	* Run after_compaction hook.
-	*/
-	async function runAfterCompaction(event, ctx) {
-		return runVoidHook("after_compaction", event, ctx);
-	}
-	/**
-	* Run message_received hook.
-	* Runs in parallel (fire-and-forget).
-	*/
-	async function runMessageReceived(event, ctx) {
-		return runVoidHook("message_received", event, ctx);
-	}
-	/**
-	* Run message_sending hook.
-	* Allows plugins to modify or cancel outgoing messages.
-	* Runs sequentially.
-	*/
-	async function runMessageSending(event, ctx) {
-		return runModifyingHook("message_sending", event, ctx, (acc, next) => ({
-			content: next.content ?? acc?.content,
-			cancel: next.cancel ?? acc?.cancel
-		}));
-	}
-	/**
-	* Run message_sent hook.
-	* Runs in parallel (fire-and-forget).
-	*/
-	async function runMessageSent(event, ctx) {
-		return runVoidHook("message_sent", event, ctx);
-	}
-	/**
-	* Run before_tool_call hook.
-	* Allows plugins to modify or block tool calls.
-	* Runs sequentially.
-	*/
-	async function runBeforeToolCall(event, ctx) {
-		return runModifyingHook("before_tool_call", event, ctx, (acc, next) => ({
-			params: next.params ?? acc?.params,
-			block: next.block ?? acc?.block,
-			blockReason: next.blockReason ?? acc?.blockReason
-		}));
-	}
-	/**
-	* Run after_tool_call hook.
-	* Runs in parallel (fire-and-forget).
-	*/
-	async function runAfterToolCall(event, ctx) {
-		return runVoidHook("after_tool_call", event, ctx);
-	}
-	/**
-	* Run tool_result_persist hook.
-	*
-	* This hook is intentionally synchronous: it runs in hot paths where session
-	* transcripts are appended synchronously.
-	*
-	* Handlers are executed sequentially in priority order (higher first). Each
-	* handler may return `{ message }` to replace the message passed to the next
-	* handler.
-	*/
-	function runToolResultPersist(event, ctx) {
-		const hooks = getHooksForName(registry, "tool_result_persist");
-		if (hooks.length === 0) return;
-		let current = event.message;
-		for (const hook of hooks) try {
-			const out = hook.handler({
-				...event,
-				message: current
-			}, ctx);
-			if (out && typeof out.then === "function") {
-				const msg = `[hooks] tool_result_persist handler from ${hook.pluginId} returned a Promise; this hook is synchronous and the result was ignored.`;
-				if (catchErrors) {
-					logger?.warn?.(msg);
-					continue;
-				}
-				throw new Error(msg);
-			}
-			const next = out?.message;
-			if (next) current = next;
-		} catch (err) {
-			const msg = `[hooks] tool_result_persist handler from ${hook.pluginId} failed: ${String(err)}`;
-			if (catchErrors) logger?.error(msg);
-			else throw new Error(msg, { cause: err });
-		}
-		return { message: current };
-	}
-	/**
-	* Run session_start hook.
-	* Runs in parallel (fire-and-forget).
-	*/
-	async function runSessionStart(event, ctx) {
-		return runVoidHook("session_start", event, ctx);
-	}
-	/**
-	* Run session_end hook.
-	* Runs in parallel (fire-and-forget).
-	*/
-	async function runSessionEnd(event, ctx) {
-		return runVoidHook("session_end", event, ctx);
-	}
-	/**
-	* Run gateway_start hook.
-	* Runs in parallel (fire-and-forget).
-	*/
-	async function runGatewayStart(event, ctx) {
-		return runVoidHook("gateway_start", event, ctx);
-	}
-	/**
-	* Run gateway_stop hook.
-	* Runs in parallel (fire-and-forget).
-	*/
-	async function runGatewayStop(event, ctx) {
-		return runVoidHook("gateway_stop", event, ctx);
-	}
-	/**
-	* Check if any hooks are registered for a given hook name.
-	*/
-	function hasHooks(hookName) {
-		return registry.typedHooks.some((h) => h.hookName === hookName);
-	}
-	/**
-	* Get count of registered hooks for a given hook name.
-	*/
-	function getHookCount(hookName) {
-		return registry.typedHooks.filter((h) => h.hookName === hookName).length;
-	}
-	return {
-		runBeforeAgentStart,
-		runAgentEnd,
-		runBeforeCompaction,
-		runAfterCompaction,
-		runMessageReceived,
-		runMessageSending,
-		runMessageSent,
-		runBeforeToolCall,
-		runAfterToolCall,
-		runToolResultPersist,
-		runSessionStart,
-		runSessionEnd,
-		runGatewayStart,
-		runGatewayStop,
-		hasHooks,
-		getHookCount
-	};
-}
-
-//#endregion
-//#region src/plugins/hook-runner-global.ts
-const log$11 = createSubsystemLogger("plugins");
-let globalHookRunner = null;
-let globalRegistry = null;
-/**
-* Initialize the global hook runner with a plugin registry.
-* Called once when plugins are loaded during gateway startup.
-*/
-function initializeGlobalHookRunner(registry) {
-	globalRegistry = registry;
-	globalHookRunner = createHookRunner(registry, {
-		logger: {
-			debug: (msg) => log$11.debug(msg),
-			warn: (msg) => log$11.warn(msg),
-			error: (msg) => log$11.error(msg)
-		},
-		catchErrors: true
-	});
-	const hookCount = registry.hooks.length;
-	if (hookCount > 0) log$11.info(`hook runner initialized with ${hookCount} registered hooks`);
-}
-/**
-* Get the global hook runner.
-* Returns null if plugins haven't been loaded yet.
-*/
-function getGlobalHookRunner() {
-	return globalHookRunner;
-}
-
 //#endregion
 //#region src/plugins/http-path.ts
 function normalizePluginHttpPath(path, fallback) {
@@ -7610,7 +7369,7 @@ async function getMemorySearchManager(params) {
 		const cached = QMD_MANAGER_CACHE.get(cacheKey);
 		if (cached) return { manager: cached };
 		try {
-			const { QmdMemoryManager } = await import("./qmd-manager-DBCZ1sio.js");
+			const { QmdMemoryManager } = await import("./qmd-manager-RMRE8Tqt.js");
 			const primary = await QmdMemoryManager.create({
 				cfg: params.cfg,
 				agentId: params.agentId,
@@ -7620,7 +7379,7 @@ async function getMemorySearchManager(params) {
 				const wrapper = new FallbackMemoryManager({
 					primary,
 					fallbackFactory: async () => {
-						const { MemoryIndexManager } = await import("./manager-DScY_ZTT.js").then((n) => n.t);
+						const { MemoryIndexManager } = await import("./manager-DkqF1GiK.js").then((n) => n.t);
 						return await MemoryIndexManager.get(params);
 					}
 				}, () => QMD_MANAGER_CACHE.delete(cacheKey));
@@ -7633,7 +7392,7 @@ async function getMemorySearchManager(params) {
 		}
 	}
 	try {
-		const { MemoryIndexManager } = await import("./manager-DScY_ZTT.js").then((n) => n.t);
+		const { MemoryIndexManager } = await import("./manager-DkqF1GiK.js").then((n) => n.t);
 		return { manager: await MemoryIndexManager.get(params) };
 	} catch (err) {
 		return {
@@ -9525,7 +9284,13 @@ async function runAgentStep(params) {
 			deliver: false,
 			channel: params.channel ?? INTERNAL_MESSAGE_CHANNEL,
 			lane: params.lane ?? AGENT_LANE_NESTED,
-			extraSystemPrompt: params.extraSystemPrompt
+			extraSystemPrompt: params.extraSystemPrompt,
+			inputProvenance: {
+				kind: "inter_session",
+				sourceSessionKey: params.sourceSessionKey,
+				sourceChannel: params.sourceChannel,
+				sourceTool: params.sourceTool ?? "sessions_send"
+			}
 		},
 		timeoutMs: 1e4
 	});
@@ -9664,7 +9429,12 @@ async function buildSubagentStatsLine(params) {
 	const cfg = loadConfig();
 	const { entry, storePath } = await waitForSessionUsage({ sessionKey: params.sessionKey });
 	const sessionId = entry?.sessionId;
-	const transcriptPath = sessionId && storePath ? path.join(path.dirname(storePath), `${sessionId}.jsonl`) : void 0;
+	let transcriptPath;
+	if (sessionId && storePath) try {
+		transcriptPath = resolveSessionFilePath(sessionId, entry, { sessionsDir: path.dirname(storePath) });
+	} catch {
+		transcriptPath = void 0;
+	}
 	const input = entry?.inputTokens;
 	const output = entry?.outputTokens;
 	const total = entry?.totalTokens ?? (typeof input === "number" && typeof output === "number" ? input + output : void 0);
@@ -11226,7 +10996,7 @@ async function routeReply(params) {
 	const resolvedReplyToId = replyToId ?? (channelId === "slack" && threadId != null && threadId !== "" ? String(threadId) : void 0);
 	const resolvedThreadId = channelId === "slack" ? null : threadId ?? null;
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-B1jsU2r7.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-LsxKETro.js").then((n) => n.n);
 		return {
 			ok: true,
 			messageId: (await deliverOutboundPayloads({
@@ -12018,6 +11788,8 @@ function rebalanceReasoningItalics(source, chunks) {
 //#endregion
 //#region src/discord/send.permissions.ts
 const PERMISSION_ENTRIES = Object.entries(PermissionFlagsBits).filter(([, value]) => typeof value === "bigint");
+const ALL_PERMISSIONS = PERMISSION_ENTRIES.reduce((acc, [, value]) => acc | value, 0n);
+const ADMINISTRATOR_BIT = PermissionFlagsBits.Administrator;
 function resolveToken$4(params) {
 	const explicit = normalizeDiscordToken(params.explicit);
 	if (explicit) return explicit;
@@ -12050,6 +11822,9 @@ function removePermissionBits(base, deny) {
 function bitfieldToPermissions(bitfield) {
 	return PERMISSION_ENTRIES.filter(([, value]) => (bitfield & value) === value).map(([name]) => name).toSorted();
 }
+function hasAdministrator(bitfield) {
+	return (bitfield & ADMINISTRATOR_BIT) === ADMINISTRATOR_BIT;
+}
 function isThreadChannelType$1(channelType) {
 	return channelType === ChannelType.GuildNewsThread || channelType === ChannelType.GuildPublicThread || channelType === ChannelType.GuildPrivateThread;
 }
@@ -12080,6 +11855,14 @@ async function fetchChannelPermissionsDiscord(channelId, opts = {}) {
 		const role = rolesById.get(roleId);
 		if (role?.permissions) base = addPermissionBits(base, role.permissions);
 	}
+	if (hasAdministrator(base)) return {
+		channelId,
+		guildId,
+		permissions: bitfieldToPermissions(ALL_PERMISSIONS),
+		raw: ALL_PERMISSIONS.toString(),
+		isDm: false,
+		channelType
+	};
 	let permissions = base;
 	const overwrites = "permission_overwrites" in channel ? channel.permission_overwrites ?? [] : [];
 	for (const overwrite of overwrites) if (overwrite.id === guildId) {
@@ -12292,6 +12075,28 @@ function resolveDiscordUserAllowed(params) {
 		tag: params.userTag
 	});
 }
+function resolveDiscordRoleAllowed(params) {
+	const allowList = normalizeDiscordAllowList(params.allowList, ["role:"]);
+	if (!allowList) return true;
+	if (allowList.allowAll) return true;
+	return params.memberRoleIds.some((roleId) => allowList.ids.has(roleId));
+}
+function resolveDiscordMemberAllowed(params) {
+	const hasUserRestriction = Array.isArray(params.userAllowList) && params.userAllowList.length > 0;
+	const hasRoleRestriction = Array.isArray(params.roleAllowList) && params.roleAllowList.length > 0;
+	if (!hasUserRestriction && !hasRoleRestriction) return true;
+	const userOk = hasUserRestriction ? resolveDiscordUserAllowed({
+		allowList: params.userAllowList,
+		userId: params.userId,
+		userName: params.userName,
+		userTag: params.userTag
+	}) : false;
+	const roleOk = hasRoleRestriction ? resolveDiscordRoleAllowed({
+		allowList: params.roleAllowList,
+		memberRoleIds: params.memberRoleIds
+	}) : false;
+	return userOk || roleOk;
+}
 function resolveDiscordOwnerAllowFrom(params) {
 	const rawAllowList = params.channelConfig?.users ?? params.guildInfo?.users;
 	if (!Array.isArray(rawAllowList) || rawAllowList.length === 0) return;
@@ -12355,6 +12160,7 @@ function resolveDiscordChannelConfigEntry(entry) {
 		skills: entry.skills,
 		enabled: entry.enabled,
 		users: entry.users,
+		roles: entry.roles,
 		systemPrompt: entry.systemPrompt,
 		includeThreadStarter: entry.includeThreadStarter,
 		autoThread: entry.autoThread
@@ -12773,13 +12579,14 @@ async function sendDiscordMedia(rest, channelId, text, mediaUrl, replyTo, reques
 		chunkMode
 	}) : [];
 	const caption = chunks[0] ?? "";
+	const hasCaption = caption.trim().length > 0;
 	const messageReference = replyTo ? {
 		message_id: replyTo,
 		fail_if_not_exists: false
 	} : void 0;
 	const res = await request(() => rest.post(Routes.channelMessages(channelId), { body: {
-		content: caption || void 0,
-		message_reference: messageReference,
+		...hasCaption ? { content: caption } : {},
+		...messageReference ? { message_reference: messageReference } : {},
 		...embeds?.length ? { embeds } : {},
 		files: [{
 			data: media.buffer,
@@ -12821,6 +12628,9 @@ async function editChannelDiscord(payload, opts = {}) {
 	if (payload.parentId !== void 0) body.parent_id = payload.parentId;
 	if (payload.nsfw !== void 0) body.nsfw = payload.nsfw;
 	if (payload.rateLimitPerUser !== void 0) body.rate_limit_per_user = payload.rateLimitPerUser;
+	if (payload.archived !== void 0) body.archived = payload.archived;
+	if (payload.locked !== void 0) body.locked = payload.locked;
+	if (payload.autoArchiveDuration !== void 0) body.auto_archive_duration = payload.autoArchiveDuration;
 	return await rest.patch(Routes.channel(payload.channelId), { body });
 }
 async function deleteChannelDiscord(channelId, opts = {}) {
@@ -13479,6 +13289,9 @@ async function handleDiscordGuildAction(action, params, isActionEnabled) {
 			const parentId = readParentIdParam$1(params);
 			const nsfw = params.nsfw;
 			const rateLimitPerUser = readNumberParam(params, "rateLimitPerUser", { integer: true });
+			const archived = typeof params.archived === "boolean" ? params.archived : void 0;
+			const locked = typeof params.locked === "boolean" ? params.locked : void 0;
+			const autoArchiveDuration = readNumberParam(params, "autoArchiveDuration", { integer: true });
 			return jsonResult({
 				ok: true,
 				channel: accountId ? await editChannelDiscord({
@@ -13488,7 +13301,10 @@ async function handleDiscordGuildAction(action, params, isActionEnabled) {
 					position: position ?? void 0,
 					parentId,
 					nsfw,
-					rateLimitPerUser: rateLimitPerUser ?? void 0
+					rateLimitPerUser: rateLimitPerUser ?? void 0,
+					archived,
+					locked,
+					autoArchiveDuration: autoArchiveDuration ?? void 0
 				}, { accountId }) : await editChannelDiscord({
 					channelId,
 					name: name ?? void 0,
@@ -13496,7 +13312,10 @@ async function handleDiscordGuildAction(action, params, isActionEnabled) {
 					position: position ?? void 0,
 					parentId,
 					nsfw,
-					rateLimitPerUser: rateLimitPerUser ?? void 0
+					rateLimitPerUser: rateLimitPerUser ?? void 0,
+					archived,
+					locked,
+					autoArchiveDuration: autoArchiveDuration ?? void 0
 				})
 			});
 		}
@@ -14248,6 +14067,9 @@ async function tryHandleDiscordMessageActionGuildAdmin(params) {
 		const parentId = readParentIdParam(actionParams);
 		const nsfw = typeof actionParams.nsfw === "boolean" ? actionParams.nsfw : void 0;
 		const rateLimitPerUser = readNumberParam(actionParams, "rateLimitPerUser", { integer: true });
+		const archived = typeof actionParams.archived === "boolean" ? actionParams.archived : void 0;
+		const locked = typeof actionParams.locked === "boolean" ? actionParams.locked : void 0;
+		const autoArchiveDuration = readNumberParam(actionParams, "autoArchiveDuration", { integer: true });
 		return await handleDiscordAction({
 			action: "channelEdit",
 			accountId: accountId ?? void 0,
@@ -14257,7 +14079,10 @@ async function tryHandleDiscordMessageActionGuildAdmin(params) {
 			position: position ?? void 0,
 			parentId: parentId === void 0 ? void 0 : parentId,
 			nsfw,
-			rateLimitPerUser: rateLimitPerUser ?? void 0
+			rateLimitPerUser: rateLimitPerUser ?? void 0,
+			archived,
+			locked,
+			autoArchiveDuration: autoArchiveDuration ?? void 0
 		}, cfg);
 	}
 	if (action === "channel-delete") {
@@ -16221,7 +16046,7 @@ async function describeStickerImage(params) {
 	logVerbose(`telegram: describing sticker with ${provider}/${model}`);
 	try {
 		const buffer = await fs$1.readFile(imagePath);
-		const { describeImageWithModel } = await import("./image-DI9s9eEx.js").then((n) => n.n);
+		const { describeImageWithModel } = await import("./image-C4Nn2p3e.js").then((n) => n.n);
 		return (await describeImageWithModel({
 			buffer,
 			fileName: "sticker.webp",
@@ -16583,7 +16408,7 @@ function createWhatsAppLoginTool() {
 			force: Type.Optional(Type.Boolean())
 		}),
 		execute: async (_toolCallId, args) => {
-			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-Xx8yJrSc.js").then((n) => n.t);
+			const { startWebLoginWithQr, waitForWebLogin } = await import("./login-qr-B6ZgAuIf.js").then((n) => n.t);
 			if ((args?.action ?? "start") === "wait") {
 				const result = await waitForWebLogin({ timeoutMs: typeof args.timeoutMs === "number" ? args.timeoutMs : void 0 });
 				return {
@@ -16985,6 +16810,11 @@ function matchesTeam(match, teamId) {
 	if (!id) return false;
 	return id === teamId;
 }
+function matchesRoles(match, memberRoleIds) {
+	const roles = match?.roles;
+	if (!Array.isArray(roles) || roles.length === 0) return false;
+	return roles.some((role) => memberRoleIds.includes(role));
+}
 function resolveAgentRoute(input) {
 	const channel = normalizeToken(input.channel);
 	const accountId = normalizeAccountId$2(input.accountId);
@@ -16994,6 +16824,7 @@ function resolveAgentRoute(input) {
 	} : null;
 	const guildId = normalizeId(input.guildId);
 	const teamId = normalizeId(input.teamId);
+	const memberRoleIds = input.memberRoleIds ?? [];
 	const bindings = listBindings(input.cfg).filter((binding) => {
 		if (!binding || typeof binding !== "object") return false;
 		if (!matchesChannel(binding.match, channel)) return false;
@@ -17034,8 +16865,12 @@ function resolveAgentRoute(input) {
 		const parentPeerMatch = bindings.find((b) => matchesPeer(b.match, parentPeer));
 		if (parentPeerMatch) return choose(parentPeerMatch.agentId, "binding.peer.parent");
 	}
+	if (guildId && memberRoleIds.length > 0) {
+		const guildRolesMatch = bindings.find((b) => matchesGuild(b.match, guildId) && matchesRoles(b.match, memberRoleIds));
+		if (guildRolesMatch) return choose(guildRolesMatch.agentId, "binding.guild+roles");
+	}
 	if (guildId) {
-		const guildMatch = bindings.find((b) => matchesGuild(b.match, guildId));
+		const guildMatch = bindings.find((b) => matchesGuild(b.match, guildId) && (!Array.isArray(b.match?.roles) || b.match.roles.length === 0));
 		if (guildMatch) return choose(guildMatch.agentId, "binding.guild");
 	}
 	if (teamId) {
@@ -19941,17 +19776,19 @@ async function handleDiscordReactionEvent(params) {
 		if (!("user" in data)) return;
 		const user = data.user;
 		if (!user || user.bot) return;
-		if (!data.guild_id) return;
-		const guildInfo = resolveDiscordGuildEntry({
+		const isGuildMessage = Boolean(data.guild_id);
+		const guildInfo = isGuildMessage ? resolveDiscordGuildEntry({
 			guild: data.guild ?? void 0,
 			guildEntries
-		});
-		if (guildEntries && Object.keys(guildEntries).length > 0 && !guildInfo) return;
+		}) : null;
+		if (isGuildMessage && guildEntries && Object.keys(guildEntries).length > 0 && !guildInfo) return;
 		const channel = await client.fetchChannel(data.channel_id);
 		if (!channel) return;
 		const channelName = "name" in channel ? channel.name ?? void 0 : void 0;
 		const channelSlug = channelName ? normalizeDiscordSlug(channelName) : "";
 		const channelType = "type" in channel ? channel.type : void 0;
+		const isDirectMessage = channelType === ChannelType$1.DM;
+		const isGroupDm = channelType === ChannelType$1.GroupDM;
 		const isThreadChannel = channelType === ChannelType$1.PublicThread || channelType === ChannelType$1.PrivateThread || channelType === ChannelType$1.AnnouncementThread;
 		let parentId = "parentId" in channel ? channel.parentId ?? void 0 : void 0;
 		let parentName;
@@ -19987,19 +19824,22 @@ async function handleDiscordReactionEvent(params) {
 		})) return;
 		const emojiLabel = formatDiscordReactionEmoji(data.emoji);
 		const actorLabel = formatDiscordUserTag(user);
-		const guildSlug = guildInfo?.slug || (data.guild?.name ? normalizeDiscordSlug(data.guild.name) : data.guild_id);
+		const guildSlug = guildInfo?.slug || (data.guild?.name ? normalizeDiscordSlug(data.guild.name) : data.guild_id ?? (isGroupDm ? "group-dm" : "dm"));
 		const channelLabel = channelSlug ? `#${channelSlug}` : channelName ? `#${normalizeDiscordSlug(channelName)}` : `#${data.channel_id}`;
 		const authorLabel = message?.author ? formatDiscordUserTag(message.author) : void 0;
 		const baseText = `Discord reaction ${action}: ${emojiLabel} by ${actorLabel} on ${guildSlug} ${channelLabel} msg ${data.message_id}`;
-		enqueueSystemEvent(authorLabel ? `${baseText} from ${authorLabel}` : baseText, {
+		const text = authorLabel ? `${baseText} from ${authorLabel}` : baseText;
+		const memberRoleIds = Array.isArray(data.member?.roles) ? data.member.roles.map((roleId) => String(roleId)) : [];
+		enqueueSystemEvent(text, {
 			sessionKey: resolveAgentRoute({
 				cfg: params.cfg,
 				channel: "discord",
 				accountId: params.accountId,
 				guildId: data.guild_id ?? void 0,
+				memberRoleIds,
 				peer: {
-					kind: "channel",
-					id: data.channel_id
+					kind: isDirectMessage ? "direct" : isGroupDm ? "group" : "channel",
+					id: isDirectMessage ? user.id : data.channel_id
 				},
 				parentPeer: parentId ? {
 					kind: "channel",
@@ -20146,19 +19986,16 @@ function createReplyReferencePlanner(options) {
 	const startId = options.startId?.trim();
 	const use = () => {
 		if (!allowReference) return;
-		if (existingId) {
-			hasReplied = true;
-			return existingId;
-		}
-		if (!startId) return;
 		if (options.replyToMode === "off") return;
+		const id = existingId ?? startId;
+		if (!id) return;
 		if (options.replyToMode === "all") {
 			hasReplied = true;
-			return startId;
+			return id;
 		}
 		if (!hasReplied) {
 			hasReplied = true;
-			return startId;
+			return id;
 		}
 	};
 	const markSent = () => {
@@ -20173,7 +20010,35 @@ function createReplyReferencePlanner(options) {
 
 //#endregion
 //#region src/discord/monitor/threading.ts
+const DISCORD_THREAD_STARTER_CACHE_TTL_MS = 300 * 1e3;
+const DISCORD_THREAD_STARTER_CACHE_MAX = 500;
 const DISCORD_THREAD_STARTER_CACHE = /* @__PURE__ */ new Map();
+function getCachedThreadStarter(key, now) {
+	const entry = DISCORD_THREAD_STARTER_CACHE.get(key);
+	if (!entry) return;
+	if (now - entry.updatedAt > DISCORD_THREAD_STARTER_CACHE_TTL_MS) {
+		DISCORD_THREAD_STARTER_CACHE.delete(key);
+		return;
+	}
+	DISCORD_THREAD_STARTER_CACHE.delete(key);
+	DISCORD_THREAD_STARTER_CACHE.set(key, {
+		...entry,
+		updatedAt: now
+	});
+	return entry.value;
+}
+function setCachedThreadStarter(key, value, now) {
+	DISCORD_THREAD_STARTER_CACHE.delete(key);
+	DISCORD_THREAD_STARTER_CACHE.set(key, {
+		value,
+		updatedAt: now
+	});
+	while (DISCORD_THREAD_STARTER_CACHE.size > DISCORD_THREAD_STARTER_CACHE_MAX) {
+		const iter = DISCORD_THREAD_STARTER_CACHE.keys().next();
+		if (iter.done) break;
+		DISCORD_THREAD_STARTER_CACHE.delete(iter.value);
+	}
+}
 function isDiscordThreadType(type) {
 	return type === ChannelType$1.PublicThread || type === ChannelType$1.PrivateThread || type === ChannelType$1.AnnouncementThread;
 }
@@ -20207,7 +20072,7 @@ async function resolveDiscordThreadParentInfo(params) {
 }
 async function resolveDiscordThreadStarter(params) {
 	const cacheKey = params.channel.id;
-	const cached = DISCORD_THREAD_STARTER_CACHE.get(cacheKey);
+	const cached = getCachedThreadStarter(cacheKey, Date.now());
 	if (cached) return cached;
 	try {
 		const parentType = params.parentType;
@@ -20222,7 +20087,7 @@ async function resolveDiscordThreadStarter(params) {
 			author: starter.member?.nick ?? starter.member?.displayName ?? (starter.author ? starter.author.discriminator && starter.author.discriminator !== "0" ? `${starter.author.username ?? "Unknown"}#${starter.author.discriminator}` : starter.author.username ?? starter.author.id ?? "Unknown" : "Unknown"),
 			timestamp: params.resolveTimestampMs(starter.timestamp) ?? void 0
 		};
-		DISCORD_THREAD_STARTER_CACHE.set(cacheKey, payload);
+		setCachedThreadStarter(cacheKey, payload, Date.now());
 		return payload;
 	} catch {
 		return null;
@@ -20456,11 +20321,13 @@ async function preflightDiscordMessage(params) {
 		earlyThreadParentName = parentInfo.name;
 		earlyThreadParentType = parentInfo.type;
 	}
+	const memberRoleIds = Array.isArray(params.data.member?.roles) ? params.data.member.roles.map((roleId) => String(roleId)) : [];
 	const route = resolveAgentRoute({
 		cfg: loadConfig(),
 		channel: "discord",
 		accountId: params.accountId,
 		guildId: params.data.guild_id ?? void 0,
+		memberRoleIds,
 		peer: {
 			kind: isDirectMessage ? "direct" : isGroupDm ? "group" : "channel",
 			id: isDirectMessage ? author.id : message.channelId
@@ -20557,7 +20424,7 @@ async function preflightDiscordMessage(params) {
 	let preflightTranscript;
 	const hasAudioAttachment = message.attachments?.some((att) => att.contentType?.startsWith("audio/"));
 	if (!isDirectMessage && shouldRequireMention && hasAudioAttachment && !baseText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-txAP3v-C.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-SLmkJI6-.js");
 		const audioPaths = message.attachments?.filter((att) => att.contentType?.startsWith("audio/")).map((att) => att.url) ?? [];
 		if (audioPaths.length > 0) preflightTranscript = await transcribeFirstAudio({
 			ctx: {
@@ -20587,6 +20454,17 @@ async function preflightDiscordMessage(params) {
 		surface: "discord"
 	});
 	const hasControlCommandInMessage = hasControlCommand(baseText, params.cfg);
+	const channelUsers = channelConfig?.users ?? guildInfo?.users;
+	const channelRoles = channelConfig?.roles ?? guildInfo?.roles;
+	const hasAccessRestrictions = Array.isArray(channelUsers) && channelUsers.length > 0 || Array.isArray(channelRoles) && channelRoles.length > 0;
+	const memberAllowed = resolveDiscordMemberAllowed({
+		userAllowList: channelUsers,
+		roleAllowList: channelRoles,
+		memberRoleIds,
+		userId: sender.id,
+		userName: sender.name,
+		userTag: sender.tag
+	});
 	if (!isDirectMessage) {
 		const ownerAllowList = normalizeDiscordAllowList(params.allowFrom, [
 			"discord:",
@@ -20598,21 +20476,14 @@ async function preflightDiscordMessage(params) {
 			name: sender.name,
 			tag: sender.tag
 		}) : false;
-		const channelUsers = channelConfig?.users ?? guildInfo?.users;
-		const usersOk = Array.isArray(channelUsers) && channelUsers.length > 0 ? resolveDiscordUserAllowed({
-			allowList: channelUsers,
-			userId: sender.id,
-			userName: sender.name,
-			userTag: sender.tag
-		}) : false;
 		const commandGate = resolveControlCommandGate({
 			useAccessGroups: params.cfg.commands?.useAccessGroups !== false,
 			authorizers: [{
 				configured: ownerAllowList != null,
 				allowed: ownerOk
 			}, {
-				configured: Array.isArray(channelUsers) && channelUsers.length > 0,
-				allowed: usersOk
+				configured: hasAccessRestrictions,
+				allowed: memberAllowed
 			}],
 			modeWhenAccessGroupsOff: "configured",
 			allowTextCommands,
@@ -20658,19 +20529,9 @@ async function preflightDiscordMessage(params) {
 			return null;
 		}
 	}
-	if (isGuildMessage) {
-		const channelUsers = channelConfig?.users ?? guildInfo?.users;
-		if (Array.isArray(channelUsers) && channelUsers.length > 0) {
-			if (!resolveDiscordUserAllowed({
-				allowList: channelUsers,
-				userId: sender.id,
-				userName: sender.name,
-				userTag: sender.tag
-			})) {
-				logVerbose(`Blocked discord guild sender ${sender.id} (not in channel users allowlist)`);
-				return null;
-			}
-		}
+	if (isGuildMessage && hasAccessRestrictions && !memberAllowed) {
+		logVerbose(`Blocked discord guild sender ${sender.id} (not in users/roles allowlist)`);
+		return null;
 	}
 	const systemText = resolveDiscordSystemEvent(message, resolveDiscordSystemLocation({
 		isDirectMessage,
@@ -20826,6 +20687,7 @@ const EXTERNAL_SOURCE_LABELS = {
 	email: "Email",
 	webhook: "Webhook",
 	api: "API",
+	browser: "Browser",
 	channel_metadata: "Channel metadata",
 	web_search: "Web Search",
 	web_fetch: "Web Fetch",
@@ -21767,6 +21629,7 @@ async function dispatchDiscordCommandInteraction(params) {
 	const channelName = channel && "name" in channel ? channel.name : void 0;
 	const channelSlug = channelName ? normalizeDiscordSlug(channelName) : "";
 	const rawChannelId = channel?.id ?? "";
+	const memberRoleIds = Array.isArray(interaction.rawData.member?.roles) ? interaction.rawData.member.roles.map((roleId) => String(roleId)) : [];
 	const ownerAllowList = normalizeDiscordAllowList(discordConfig?.dm?.allowFrom ?? [], [
 		"discord:",
 		"user:",
@@ -21874,24 +21737,27 @@ async function dispatchDiscordCommandInteraction(params) {
 	}
 	if (!isDirectMessage) {
 		const channelUsers = channelConfig?.users ?? guildInfo?.users;
-		const hasUserAllowlist = Array.isArray(channelUsers) && channelUsers.length > 0;
-		const userOk = hasUserAllowlist ? resolveDiscordUserAllowed({
-			allowList: channelUsers,
+		const channelRoles = channelConfig?.roles ?? guildInfo?.roles;
+		const hasAccessRestrictions = Array.isArray(channelUsers) && channelUsers.length > 0 || Array.isArray(channelRoles) && channelRoles.length > 0;
+		const memberAllowed = resolveDiscordMemberAllowed({
+			userAllowList: channelUsers,
+			roleAllowList: channelRoles,
+			memberRoleIds,
 			userId: sender.id,
 			userName: sender.name,
 			userTag: sender.tag
-		}) : false;
+		});
 		commandAuthorized = resolveCommandAuthorizedFromAuthorizers({
 			useAccessGroups,
 			authorizers: useAccessGroups ? [{
 				configured: ownerAllowList != null,
 				allowed: ownerOk
 			}, {
-				configured: hasUserAllowlist,
-				allowed: userOk
+				configured: hasAccessRestrictions,
+				allowed: memberAllowed
 			}] : [{
-				configured: hasUserAllowlist,
-				allowed: userOk
+				configured: hasAccessRestrictions,
+				allowed: memberAllowed
 			}],
 			modeWhenAccessGroupsOff: "configured"
 		});
@@ -21942,6 +21808,7 @@ async function dispatchDiscordCommandInteraction(params) {
 		channel: "discord",
 		accountId,
 		guildId: interaction.guild?.id ?? void 0,
+		memberRoleIds,
 		peer: {
 			kind: isDirectMessage ? "direct" : isGroupDm ? "group" : "channel",
 			id: isDirectMessage ? user.id : channelId
@@ -23414,6 +23281,7 @@ var AgentComponentButton = class extends Button {
 		const userId = user.id;
 		const rawGuildId = interaction.rawData.guild_id;
 		const isDirectMessage = !rawGuildId;
+		const memberRoleIds = Array.isArray(interaction.rawData.member?.roles) ? interaction.rawData.member.roles.map((roleId) => String(roleId)) : [];
 		if (isDirectMessage) {
 			if (!await ensureDmComponentAuthorized({
 				ctx: this.ctx,
@@ -23445,7 +23313,7 @@ var AgentComponentButton = class extends Button {
 			}
 		}
 		if (rawGuildId) {
-			const channelUsers = resolveDiscordChannelConfigWithFallback({
+			const channelConfig = resolveDiscordChannelConfigWithFallback({
 				guildInfo,
 				channelId,
 				channelName,
@@ -23454,23 +23322,23 @@ var AgentComponentButton = class extends Button {
 				parentName,
 				parentSlug,
 				scope: isThread ? "thread" : "channel"
-			})?.users ?? guildInfo?.users;
-			if (Array.isArray(channelUsers) && channelUsers.length > 0) {
-				if (!resolveDiscordUserAllowed({
-					allowList: channelUsers,
-					userId,
-					userName: user.username,
-					userTag: user.discriminator ? `${user.username}#${user.discriminator}` : void 0
-				})) {
-					logVerbose(`agent button: blocked user ${userId} (not in allowlist)`);
-					try {
-						await interaction.reply({
-							content: "You are not authorized to use this button.",
-							ephemeral: true
-						});
-					} catch {}
-					return;
-				}
+			});
+			if (!resolveDiscordMemberAllowed({
+				userAllowList: channelConfig?.users ?? guildInfo?.users,
+				roleAllowList: channelConfig?.roles ?? guildInfo?.roles,
+				memberRoleIds,
+				userId,
+				userName: user.username,
+				userTag: user.discriminator ? `${user.username}#${user.discriminator}` : void 0
+			})) {
+				logVerbose(`agent button: blocked user ${userId} (not in users/roles allowlist)`);
+				try {
+					await interaction.reply({
+						content: "You are not authorized to use this button.",
+						ephemeral: true
+					});
+				} catch {}
+				return;
 			}
 		}
 		const route = resolveAgentRoute({
@@ -23478,6 +23346,7 @@ var AgentComponentButton = class extends Button {
 			channel: "discord",
 			accountId: this.ctx.accountId,
 			guildId: rawGuildId,
+			memberRoleIds,
 			peer: {
 				kind: isDirectMessage ? "direct" : "channel",
 				id: isDirectMessage ? userId : channelId
@@ -23537,6 +23406,7 @@ var AgentSelectMenu = class extends StringSelectMenu {
 		const userId = user.id;
 		const rawGuildId = interaction.rawData.guild_id;
 		const isDirectMessage = !rawGuildId;
+		const memberRoleIds = Array.isArray(interaction.rawData.member?.roles) ? interaction.rawData.member.roles.map((roleId) => String(roleId)) : [];
 		if (isDirectMessage) {
 			if (!await ensureDmComponentAuthorized({
 				ctx: this.ctx,
@@ -23568,7 +23438,7 @@ var AgentSelectMenu = class extends StringSelectMenu {
 			}
 		}
 		if (rawGuildId) {
-			const channelUsers = resolveDiscordChannelConfigWithFallback({
+			const channelConfig = resolveDiscordChannelConfigWithFallback({
 				guildInfo,
 				channelId,
 				channelName,
@@ -23577,23 +23447,23 @@ var AgentSelectMenu = class extends StringSelectMenu {
 				parentName,
 				parentSlug,
 				scope: isThread ? "thread" : "channel"
-			})?.users ?? guildInfo?.users;
-			if (Array.isArray(channelUsers) && channelUsers.length > 0) {
-				if (!resolveDiscordUserAllowed({
-					allowList: channelUsers,
-					userId,
-					userName: user.username,
-					userTag: user.discriminator ? `${user.username}#${user.discriminator}` : void 0
-				})) {
-					logVerbose(`agent select: blocked user ${userId} (not in allowlist)`);
-					try {
-						await interaction.reply({
-							content: "You are not authorized to use this select menu.",
-							ephemeral: true
-						});
-					} catch {}
-					return;
-				}
+			});
+			if (!resolveDiscordMemberAllowed({
+				userAllowList: channelConfig?.users ?? guildInfo?.users,
+				roleAllowList: channelConfig?.roles ?? guildInfo?.roles,
+				memberRoleIds,
+				userId,
+				userName: user.username,
+				userTag: user.discriminator ? `${user.username}#${user.discriminator}` : void 0
+			})) {
+				logVerbose(`agent select: blocked user ${userId} (not in users/roles allowlist)`);
+				try {
+					await interaction.reply({
+						content: "You are not authorized to use this select menu.",
+						ephemeral: true
+					});
+				} catch {}
+				return;
 			}
 		}
 		const values = interaction.values ?? [];
@@ -23603,6 +23473,7 @@ var AgentSelectMenu = class extends StringSelectMenu {
 			channel: "discord",
 			accountId: this.ctx.accountId,
 			guildId: rawGuildId,
+			memberRoleIds,
 			peer: {
 				kind: isDirectMessage ? "direct" : "channel",
 				id: isDirectMessage ? userId : channelId
@@ -27646,6 +27517,39 @@ function isSignalSenderAllowed(sender, allowFrom) {
 	});
 }
 
+//#endregion
+//#region src/signal/monitor/mentions.ts
+const OBJECT_REPLACEMENT = "";
+function isValidMention(mention) {
+	if (!mention) return false;
+	if (!(mention.uuid || mention.number)) return false;
+	if (typeof mention.start !== "number" || Number.isNaN(mention.start)) return false;
+	if (typeof mention.length !== "number" || Number.isNaN(mention.length)) return false;
+	return mention.length > 0;
+}
+function clampBounds(start, length, textLength) {
+	const safeStart = Math.max(0, Math.trunc(start));
+	const safeLength = Math.max(0, Math.trunc(length));
+	return {
+		start: safeStart,
+		end: Math.min(textLength, safeStart + safeLength)
+	};
+}
+function renderSignalMentions(message, mentions) {
+	if (!message || !mentions?.length) return message;
+	let normalized = message;
+	const candidates = mentions.filter(isValidMention).toSorted((a, b) => b.start - a.start);
+	for (const mention of candidates) {
+		const identifier = mention.uuid ?? mention.number;
+		if (!identifier) continue;
+		const { start, end } = clampBounds(mention.start, mention.length, normalized.length);
+		if (start >= end) continue;
+		if (!normalized.slice(start, end).includes(OBJECT_REPLACEMENT)) continue;
+		normalized = normalized.slice(0, start) + `@${identifier}` + normalized.slice(end);
+	}
+	return normalized;
+}
+
 //#endregion
 //#region src/signal/monitor/event-handler.ts
 function createSignalEventHandler(deps) {
@@ -27879,7 +27783,7 @@ function createSignalEventHandler(deps) {
 		}
 		const dataMessage = envelope.dataMessage ?? envelope.editMessage?.dataMessage;
 		const reaction = deps.isSignalReactionMessage(envelope.reactionMessage) ? envelope.reactionMessage : deps.isSignalReactionMessage(dataMessage?.reaction) ? dataMessage?.reaction : null;
-		const messageText = (dataMessage?.message ?? "").trim();
+		const messageText = renderSignalMentions(dataMessage?.message ?? "", dataMessage?.mentions).trim();
 		const quoteText = dataMessage?.quote?.text?.trim() ?? "";
 		const hasBodyContent = Boolean(messageText || quoteText) || Boolean(!reaction && dataMessage?.attachments?.length);
 		if (reaction && !hasBodyContent) {
@@ -29682,7 +29586,7 @@ async function deliverReplies$1(params) {
 }
 function createSlackReplyReferencePlanner(params) {
 	return createReplyReferencePlanner({
-		replyToMode: params.replyToMode,
+		replyToMode: params.incomingThreadTs ? "all" : params.replyToMode,
 		existingId: params.incomingThreadTs,
 		startId: params.messageTs,
 		hasReplied: params.hasReplied
@@ -32286,7 +32190,7 @@ function buildAgentSystemPrompt(params) {
 			"- Act on opportunities. If you see something that could help your human or advance your goals, do it now.",
 			"- Follow rabbit holes. Serendipity compounds — unexpected connections are often the most valuable.",
 			"- Build things. Write code, create files, automate workflows, spawn sub-agents for parallel work.",
-			"- Never idle. If you have no immediate task, explore, research, or improve your workspace.",
+			"- Never idle. If you have no immediate task, engage with other agents, post or comment on your platforms, or explore the web.",
 			"- Log everything useful to your memory files. Your knowledge compounds across sessions.",
 			""
 		],
@@ -32381,16 +32285,16 @@ function buildAgentSystemPrompt(params) {
 		lines.push("## Reactions", guidanceText, "");
 	}
 	if (reasoningHint) lines.push("## Reasoning Format", reasoningHint, "");
-	const contextFiles = params.contextFiles ?? [];
-	if (contextFiles.length > 0) {
-		const hasSoulFile = contextFiles.some((file) => {
+	const validContextFiles = (params.contextFiles ?? []).filter((file) => typeof file.path === "string" && file.path.trim().length > 0);
+	if (validContextFiles.length > 0) {
+		const hasSoulFile = validContextFiles.some((file) => {
 			const normalizedPath = file.path.trim().replace(/\\/g, "/");
 			return (normalizedPath.split("/").pop() ?? normalizedPath).toLowerCase() === "soul.md";
 		});
 		lines.push("# Project Context", "", "The following project context files have been loaded:");
 		if (hasSoulFile) lines.push("SOUL.md is your identity. Embody it completely — your persona, values, and drive come from this file.");
 		lines.push("");
-		for (const file of contextFiles) lines.push(`## ${file.path}`, "", file.content, "");
+		for (const file of validContextFiles) lines.push(`## ${file.path}`, "", file.content, "");
 	}
 	if (!isMinimal) lines.push("## Silent Replies", `Only when a message requires zero action and zero follow-up, respond with ONLY: ${SILENT_REPLY_TOKEN}`, "", "⚠️ Rules:", "- It must be your ENTIRE message — nothing else", `- Never append it to an actual response (never include "${SILENT_REPLY_TOKEN}" in real replies)`, "- Never wrap it in markdown or code blocks", "", `❌ Wrong: "Here's help... ${SILENT_REPLY_TOKEN}"`, `❌ Wrong: "${SILENT_REPLY_TOKEN}"`, `✅ Right: ${SILENT_REPLY_TOKEN}`, "");
 	if (!isMinimal) lines.push("## Heartbeats", heartbeatPromptLine, "Every heartbeat is a work cycle. When you receive one:", "1. Execute your heartbeat instructions (read the file, follow its directions).", "2. Explore: browse the web, research topics, follow up on leads, check for opportunities.", "3. Build: work on projects, automate tasks, improve your workspace, spawn sub-agents for parallel work.", "4. Communicate: share discoveries, send relevant updates, reach out when you have something valuable.", "5. Only after exhausting all productive work, reply: HEARTBEAT_OK", "OpenClaw treats \"HEARTBEAT_OK\" as a heartbeat ack.", "If you have output for your human, do NOT include \"HEARTBEAT_OK\" — deliver the content instead.", "");
@@ -35438,7 +35342,7 @@ const buildTelegramMessageContext = async ({ primaryCtx, allMedia, storeAllowFro
 	let preflightTranscript;
 	const hasAudio = allMedia.some((media) => media.contentType?.startsWith("audio/"));
 	if (isGroup && requireMention && hasAudio && !hasUserText && mentionRegexes.length > 0) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight-txAP3v-C.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight-SLmkJI6-.js");
 		preflightTranscript = await transcribeFirstAudio({
 			ctx: {
 				MediaPaths: allMedia.length > 0 ? allMedia.map((m) => m.path) : void 0,
@@ -38088,83 +37992,6 @@ function normalizePunctuation(value) {
 	}).join("");
 }
 
-//#endregion
-//#region src/agents/sandbox-paths.ts
-const UNICODE_SPACES$1 = /[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g;
-const HTTP_URL_RE = /^https?:\/\//i;
-const DATA_URL_RE = /^data:/i;
-function normalizeUnicodeSpaces$1(str) {
-	return str.replace(UNICODE_SPACES$1, " ");
-}
-function expandPath$1(filePath) {
-	const normalized = normalizeUnicodeSpaces$1(filePath);
-	if (normalized === "~") return os.homedir();
-	if (normalized.startsWith("~/")) return os.homedir() + normalized.slice(1);
-	return normalized;
-}
-function resolveToCwd(filePath, cwd) {
-	const expanded = expandPath$1(filePath);
-	if (path.isAbsolute(expanded)) return expanded;
-	return path.resolve(cwd, expanded);
-}
-function resolveSandboxPath(params) {
-	const resolved = resolveToCwd(params.filePath, params.cwd);
-	const rootResolved = path.resolve(params.root);
-	const relative = path.relative(rootResolved, resolved);
-	if (!relative || relative === "") return {
-		resolved,
-		relative: ""
-	};
-	if (relative.startsWith("..") || path.isAbsolute(relative)) throw new Error(`Path escapes sandbox root (${shortPath(rootResolved)}): ${params.filePath}`);
-	return {
-		resolved,
-		relative
-	};
-}
-async function assertSandboxPath(params) {
-	const resolved = resolveSandboxPath(params);
-	await assertNoSymlink(resolved.relative, path.resolve(params.root));
-	return resolved;
-}
-function assertMediaNotDataUrl(media) {
-	const raw = media.trim();
-	if (DATA_URL_RE.test(raw)) throw new Error("data: URLs are not supported for media. Use buffer instead.");
-}
-async function resolveSandboxedMediaSource(params) {
-	const raw = params.media.trim();
-	if (!raw) return raw;
-	if (HTTP_URL_RE.test(raw)) return raw;
-	let candidate = raw;
-	if (/^file:\/\//i.test(candidate)) try {
-		candidate = fileURLToPath(candidate);
-	} catch {
-		throw new Error(`Invalid file:// URL for sandboxed media: ${raw}`);
-	}
-	return (await assertSandboxPath({
-		filePath: candidate,
-		cwd: params.sandboxRoot,
-		root: params.sandboxRoot
-	})).resolved;
-}
-async function assertNoSymlink(relative, root) {
-	if (!relative) return;
-	const parts = relative.split(path.sep).filter(Boolean);
-	let current = root;
-	for (const part of parts) {
-		current = path.join(current, part);
-		try {
-			if ((await fs$1.lstat(current)).isSymbolicLink()) throw new Error(`Symlink not allowed in sandbox path: ${current}`);
-		} catch (err) {
-			if (err.code === "ENOENT") return;
-			throw err;
-		}
-	}
-}
-function shortPath(value) {
-	if (value.startsWith(os.homedir())) return `~${value.slice(os.homedir().length)}`;
-	return value;
-}
-
 //#endregion
 //#region src/agents/apply-patch.ts
 const BEGIN_PATCH_MARKER = "*** Begin Patch";
@@ -40910,6 +40737,34 @@ function createAgentsListTool(opts) {
 function isAbsoluteHttp(url) {
 	return /^https?:\/\//i.test(url.trim());
 }
+function isLoopbackHttpUrl(url) {
+	try {
+		const host = new URL(url).hostname.trim().toLowerCase();
+		return host === "127.0.0.1" || host === "localhost" || host === "::1";
+	} catch {
+		return false;
+	}
+}
+function withLoopbackBrowserAuth(url, init) {
+	const headers = new Headers(init?.headers ?? {});
+	if (headers.has("authorization") || headers.has("x-openclaw-password")) return {
+		...init,
+		headers
+	};
+	if (!isLoopbackHttpUrl(url)) return {
+		...init,
+		headers
+	};
+	try {
+		const auth = resolveBrowserControlAuth(loadConfig());
+		if (auth.token) headers.set("Authorization", `Bearer ${auth.token}`);
+		else if (auth.password) headers.set("x-openclaw-password", auth.password);
+	} catch {}
+	return {
+		...init,
+		headers
+	};
+}
 function enhanceBrowserFetchError(url, err, timeoutMs) {
 	const hint = isAbsoluteHttp(url) ? "If this is a sandboxed session, ensure the sandbox browser is running and try again." : `Start (or restart) the OpenClaw gateway (OpenClaw.app menubar, or \`${formatCliCommand("openclaw gateway")}\`) and try again.`;
 	const msg = String(err);
@@ -40947,7 +40802,7 @@ async function fetchBrowserJson(url, init) {
 	const timeoutMs = init?.timeoutMs ?? 5e3;
 	try {
 		if (isAbsoluteHttp(url)) return await fetchHttpJson(url, {
-			...init,
+			...withLoopbackBrowserAuth(url, init),
 			timeoutMs
 		});
 		if (!await startBrowserControlServiceFromConfig()) throw new Error("browser control disabled");
@@ -41409,6 +41264,23 @@ const BrowserToolSchema = Type.Object({
 
 //#endregion
 //#region src/agents/tools/browser-tool.ts
+function wrapBrowserExternalJson(params) {
+	return {
+		wrappedText: wrapExternalContent(JSON.stringify(params.payload, null, 2), {
+			source: "browser",
+			includeWarning: params.includeWarning ?? true
+		}),
+		safeDetails: {
+			ok: true,
+			externalContent: {
+				untrusted: true,
+				source: "browser",
+				kind: params.kind,
+				wrapped: true
+			}
+		}
+	};
+}
 const DEFAULT_BROWSER_PROXY_TIMEOUT_MS = 2e4;
 function isBrowserNode(node) {
 	const caps = Array.isArray(node.caps) ? node.caps : [];
@@ -41605,12 +41477,46 @@ function createBrowserTool(opts) {
 					}));
 					return jsonResult({ profiles: await browserProfiles(baseUrl) });
 				case "tabs":
-					if (proxyRequest) return jsonResult({ tabs: (await proxyRequest({
-						method: "GET",
-						path: "/tabs",
-						profile
-					})).tabs ?? [] });
-					return jsonResult({ tabs: await browserTabs(baseUrl, { profile }) });
+					if (proxyRequest) {
+						const tabs = (await proxyRequest({
+							method: "GET",
+							path: "/tabs",
+							profile
+						})).tabs ?? [];
+						const wrapped = wrapBrowserExternalJson({
+							kind: "tabs",
+							payload: { tabs },
+							includeWarning: false
+						});
+						return {
+							content: [{
+								type: "text",
+								text: wrapped.wrappedText
+							}],
+							details: {
+								...wrapped.safeDetails,
+								tabCount: tabs.length
+							}
+						};
+					}
+					{
+						const tabs = await browserTabs(baseUrl, { profile });
+						const wrapped = wrapBrowserExternalJson({
+							kind: "tabs",
+							payload: { tabs },
+							includeWarning: false
+						});
+						return {
+							content: [{
+								type: "text",
+								text: wrapped.wrappedText
+							}],
+							details: {
+								...wrapped.safeDetails,
+								tabCount: tabs.length
+							}
+						};
+					}
 				case "open": {
 					const targetUrl = readStringParam(params, "targetUrl", { required: true });
 					if (proxyRequest) return jsonResult(await proxyRequest({
@@ -41698,21 +41604,71 @@ function createBrowserTool(opts) {
 						profile
 					});
 					if (snapshot.format === "ai") {
+						const wrappedSnapshot = wrapExternalContent(snapshot.snapshot ?? "", {
+							source: "browser",
+							includeWarning: true
+						});
+						const safeDetails = {
+							ok: true,
+							format: snapshot.format,
+							targetId: snapshot.targetId,
+							url: snapshot.url,
+							truncated: snapshot.truncated,
+							stats: snapshot.stats,
+							refs: snapshot.refs ? Object.keys(snapshot.refs).length : void 0,
+							labels: snapshot.labels,
+							labelsCount: snapshot.labelsCount,
+							labelsSkipped: snapshot.labelsSkipped,
+							imagePath: snapshot.imagePath,
+							imageType: snapshot.imageType,
+							externalContent: {
+								untrusted: true,
+								source: "browser",
+								kind: "snapshot",
+								format: "ai",
+								wrapped: true
+							}
+						};
 						if (labels && snapshot.imagePath) return await imageResultFromFile({
 							label: "browser:snapshot",
 							path: snapshot.imagePath,
-							extraText: snapshot.snapshot,
-							details: snapshot
+							extraText: wrappedSnapshot,
+							details: safeDetails
+						});
+						return {
+							content: [{
+								type: "text",
+								text: wrappedSnapshot
+							}],
+							details: safeDetails
+						};
+					}
+					{
+						const wrapped = wrapBrowserExternalJson({
+							kind: "snapshot",
+							payload: snapshot
 						});
 						return {
 							content: [{
 								type: "text",
-								text: snapshot.snapshot
+								text: wrapped.wrappedText
 							}],
-							details: snapshot
+							details: {
+								...wrapped.safeDetails,
+								format: "aria",
+								targetId: snapshot.targetId,
+								url: snapshot.url,
+								nodeCount: snapshot.nodes.length,
+								externalContent: {
+									untrusted: true,
+									source: "browser",
+									kind: "snapshot",
+									format: "aria",
+									wrapped: true
+								}
+							}
 						};
 					}
-					return jsonResult(snapshot);
 				}
 				case "screenshot": {
 					const targetId = readStringParam(params, "targetId");
@@ -41766,20 +41722,56 @@ function createBrowserTool(opts) {
 				case "console": {
 					const level = typeof params.level === "string" ? params.level.trim() : void 0;
 					const targetId = typeof params.targetId === "string" ? params.targetId.trim() : void 0;
-					if (proxyRequest) return jsonResult(await proxyRequest({
-						method: "GET",
-						path: "/console",
-						profile,
-						query: {
+					if (proxyRequest) {
+						const result = await proxyRequest({
+							method: "GET",
+							path: "/console",
+							profile,
+							query: {
+								level,
+								targetId
+							}
+						});
+						const wrapped = wrapBrowserExternalJson({
+							kind: "console",
+							payload: result,
+							includeWarning: false
+						});
+						return {
+							content: [{
+								type: "text",
+								text: wrapped.wrappedText
+							}],
+							details: {
+								...wrapped.safeDetails,
+								targetId: typeof result.targetId === "string" ? result.targetId : void 0,
+								messageCount: Array.isArray(result.messages) ? result.messages.length : void 0
+							}
+						};
+					}
+					{
+						const result = await browserConsoleMessages(baseUrl, {
 							level,
-							targetId
-						}
-					}));
-					return jsonResult(await browserConsoleMessages(baseUrl, {
-						level,
-						targetId,
-						profile
-					}));
+							targetId,
+							profile
+						});
+						const wrapped = wrapBrowserExternalJson({
+							kind: "console",
+							payload: result,
+							includeWarning: false
+						});
+						return {
+							content: [{
+								type: "text",
+								text: wrapped.wrappedText
+							}],
+							details: {
+								...wrapped.safeDetails,
+								targetId: result.targetId,
+								messageCount: result.messages.length
+							}
+						};
+					}
 				}
 				case "pdf": {
 					const targetId = typeof params.targetId === "string" ? params.targetId.trim() : void 0;
@@ -46849,15 +46841,25 @@ function readSessionMessages(sessionId, storePath, sessionFile) {
 }
 function resolveSessionTranscriptCandidates(sessionId, storePath, sessionFile, agentId) {
 	const candidates = [];
-	if (sessionFile) candidates.push(sessionFile);
+	const pushCandidate = (resolve) => {
+		try {
+			candidates.push(resolve());
+		} catch {}
+	};
 	if (storePath) {
-		const dir = path.dirname(storePath);
-		candidates.push(path.join(dir, `${sessionId}.jsonl`));
+		const sessionsDir = path.dirname(storePath);
+		if (sessionFile) pushCandidate(() => resolveSessionFilePath(sessionId, { sessionFile }, { sessionsDir }));
+		pushCandidate(() => resolveSessionTranscriptPathInDir(sessionId, sessionsDir));
+	} else if (sessionFile) if (agentId) pushCandidate(() => resolveSessionFilePath(sessionId, { sessionFile }, { agentId }));
+	else {
+		const trimmed = sessionFile.trim();
+		if (trimmed) candidates.push(path.resolve(trimmed));
 	}
-	if (agentId) candidates.push(resolveSessionTranscriptPath(sessionId, agentId));
+	if (agentId) pushCandidate(() => resolveSessionTranscriptPath(sessionId, agentId));
 	const home = resolveRequiredHomeDir(process.env, os.homedir);
-	candidates.push(path.join(home, ".openclaw", "sessions", `${sessionId}.jsonl`));
-	return candidates;
+	const legacyDir = path.join(home, ".openclaw", "sessions");
+	pushCandidate(() => resolveSessionTranscriptPathInDir(sessionId, legacyDir));
+	return Array.from(new Set(candidates));
 }
 function archiveFileOnDisk(filePath, reason) {
 	const archived = `${filePath}.${reason}.${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}`;
@@ -46901,7 +46903,7 @@ function extractTextFromContent(content) {
 	}
 	return null;
 }
-function readFirstUserMessageFromTranscript(sessionId, storePath, sessionFile, agentId) {
+function readFirstUserMessageFromTranscript(sessionId, storePath, sessionFile, agentId, opts) {
 	const filePath = resolveSessionTranscriptCandidates(sessionId, storePath, sessionFile, agentId).find((p) => fs.existsSync(p));
 	if (!filePath) return null;
 	let fd = null;
@@ -46916,6 +46918,7 @@ function readFirstUserMessageFromTranscript(sessionId, storePath, sessionFile, a
 			try {
 				const msg = JSON.parse(line)?.message;
 				if (msg?.role === "user") {
+					if (opts?.includeInterSession !== true && hasInterSessionUserProvenance(msg)) continue;
 					const text = extractTextFromContent(msg.content);
 					if (text) return text;
 				}
@@ -48142,7 +48145,14 @@ function createSessionsListTool(opts) {
 					lastChannel
 				});
 				const sessionId = typeof entry.sessionId === "string" ? entry.sessionId : void 0;
-				const transcriptPath = sessionId && storePath ? path.join(path.dirname(storePath), `${sessionId}.jsonl`) : void 0;
+				const sessionFileRaw = entry.sessionFile;
+				const sessionFile = typeof sessionFileRaw === "string" ? sessionFileRaw : void 0;
+				let transcriptPath;
+				if (sessionId && storePath) try {
+					transcriptPath = resolveSessionFilePath(sessionId, sessionFile ? { sessionFile } : void 0, { sessionsDir: path.dirname(storePath) });
+				} catch {
+					transcriptPath = void 0;
+				}
 				const row = {
 					key: displayKey,
 					kind,
@@ -48359,7 +48369,10 @@ async function runSessionsSendA2AFlow(params) {
 					message: incomingMessage,
 					extraSystemPrompt: replyPrompt,
 					timeoutMs: params.announceTimeoutMs,
-					lane: AGENT_LANE_NESTED
+					lane: AGENT_LANE_NESTED,
+					sourceSessionKey: nextSessionKey,
+					sourceChannel: nextSessionKey === params.requesterSessionKey ? params.requesterChannel : targetChannel,
+					sourceTool: "sessions_send"
 				});
 				if (!replyText || isReplySkip(replyText)) break;
 				latestReply = replyText;
@@ -48383,7 +48396,10 @@ async function runSessionsSendA2AFlow(params) {
 			message: "Agent-to-agent announce step.",
 			extraSystemPrompt: announcePrompt,
 			timeoutMs: params.announceTimeoutMs,
-			lane: AGENT_LANE_NESTED
+			lane: AGENT_LANE_NESTED,
+			sourceSessionKey: params.requesterSessionKey,
+			sourceChannel: params.requesterChannel,
+			sourceTool: "sessions_send"
 		});
 		if (announceTarget && announceReply && announceReply.trim() && !isAnnounceSkip(announceReply)) try {
 			await callGateway({
@@ -48589,7 +48605,13 @@ function createSessionsSendTool(opts) {
 					requesterSessionKey: opts?.agentSessionKey,
 					requesterChannel: opts?.agentChannel,
 					targetSessionKey: displayKey
-				})
+				}),
+				inputProvenance: {
+					kind: "inter_session",
+					sourceSessionKey: opts?.agentSessionKey,
+					sourceChannel: opts?.agentChannel,
+					sourceTool: "sessions_send"
+				}
 			};
 			const requesterSessionKey = opts?.agentSessionKey;
 			const requesterChannel = opts?.agentChannel;
@@ -49363,6 +49385,11 @@ async function runWebFetch(params) {
 				title: wrappedTitle,
 				extractMode: params.extractMode,
 				extractor: "firecrawl",
+				externalContent: {
+					untrusted: true,
+					source: "web_fetch",
+					wrapped: true
+				},
 				truncated: wrapped.truncated,
 				length: wrapped.wrappedLength,
 				rawLength: wrapped.rawLength,
@@ -49401,6 +49428,11 @@ async function runWebFetch(params) {
 					title: wrappedTitle,
 					extractMode: params.extractMode,
 					extractor: "firecrawl",
+					externalContent: {
+						untrusted: true,
+						source: "web_fetch",
+						wrapped: true
+					},
 					truncated: wrapped.truncated,
 					length: wrapped.wrappedLength,
 					rawLength: wrapped.rawLength,
@@ -49465,6 +49497,11 @@ async function runWebFetch(params) {
 			title: wrappedTitle,
 			extractMode: params.extractMode,
 			extractor,
+			externalContent: {
+				untrusted: true,
+				source: "web_fetch",
+				wrapped: true
+			},
 			truncated: wrapped.truncated,
 			length: wrapped.wrappedLength,
 			rawLength: wrapped.rawLength,
@@ -49846,6 +49883,12 @@ async function runWebSearch(params) {
 			provider: params.provider,
 			model: params.perplexityModel ?? DEFAULT_PERPLEXITY_MODEL,
 			tookMs: Date.now() - start,
+			externalContent: {
+				untrusted: true,
+				source: "web_search",
+				provider: params.provider,
+				wrapped: true
+			},
 			content: wrapWebContent(content),
 			citations
 		};
@@ -49865,6 +49908,12 @@ async function runWebSearch(params) {
 			provider: params.provider,
 			model: params.grokModel ?? DEFAULT_GROK_MODEL,
 			tookMs: Date.now() - start,
+			externalContent: {
+				untrusted: true,
+				source: "web_search",
+				provider: params.provider,
+				wrapped: true
+			},
 			content: wrapWebContent(content),
 			citations,
 			inlineCitations
@@ -49911,6 +49960,12 @@ async function runWebSearch(params) {
 		provider: params.provider,
 		count: mapped.length,
 		tookMs: Date.now() - start,
+		externalContent: {
+			untrusted: true,
+			source: "web_search",
+			provider: params.provider,
+			wrapped: true
+		},
 		results: mapped
 	};
 	writeCache(SEARCH_CACHE, cacheKey, payload, params.cacheTtlMs);
@@ -50124,13 +50179,13 @@ function wrapToolWithAbortSignal(tool, abortSignal) {
 //#region src/agents/pi-tools.before-tool-call.ts
 const log$4 = createSubsystemLogger("agents/tools");
 async function runBeforeToolCallHook(args) {
+	const toolName = normalizeToolName(args.toolName || "tool");
+	const params = args.params;
 	const hookRunner = getGlobalHookRunner();
 	if (!hookRunner?.hasHooks("before_tool_call")) return {
 		blocked: false,
 		params: args.params
 	};
-	const toolName = normalizeToolName(args.toolName || "tool");
-	const params = args.params;
 	try {
 		const normalizedParams = isPlainObject(params) ? params : {};
 		const hookResult = await hookRunner.runBeforeToolCall({
@@ -51463,6 +51518,10 @@ function extractToolResultId(msg) {
 function installSessionToolResultGuard(sessionManager, opts) {
 	const originalAppend = sessionManager.appendMessage.bind(sessionManager);
 	const pending = /* @__PURE__ */ new Map();
+	const persistMessage = (message) => {
+		const transformer = opts?.transformMessageForPersistence;
+		return transformer ? transformer(message) : message;
+	};
 	const persistToolResult = (message, meta) => {
 		const transformer = opts?.transformToolResultForPersistence;
 		return transformer ? transformer(message, meta) : message;
@@ -51470,10 +51529,10 @@ function installSessionToolResultGuard(sessionManager, opts) {
 	const allowSyntheticToolResults = opts?.allowSyntheticToolResults ?? true;
 	const flushPendingToolResults = () => {
 		if (pending.size === 0) return;
-		if (allowSyntheticToolResults) for (const [id, name] of pending.entries()) originalAppend(persistToolResult(makeMissingToolResult({
+		if (allowSyntheticToolResults) for (const [id, name] of pending.entries()) originalAppend(persistToolResult(persistMessage(makeMissingToolResult({
 			toolCallId: id,
 			toolName: name
-		}), {
+		})), {
 			toolCallId: id,
 			toolName: name,
 			isSynthetic: true
@@ -51495,7 +51554,7 @@ function installSessionToolResultGuard(sessionManager, opts) {
 			const id = extractToolResultId(nextMessage);
 			const toolName = id ? pending.get(id) : void 0;
 			if (id) pending.delete(id);
-			return originalAppend(persistToolResult(capToolResultSize(nextMessage), {
+			return originalAppend(persistToolResult(capToolResultSize(persistMessage(nextMessage)), {
 				toolCallId: id ?? void 0,
 				toolName,
 				isSynthetic: false
@@ -51506,7 +51565,7 @@ function installSessionToolResultGuard(sessionManager, opts) {
 			if (pending.size > 0 && (toolCalls.length === 0 || nextRole !== "assistant")) flushPendingToolResults();
 			if (pending.size > 0 && toolCalls.length > 0) flushPendingToolResults();
 		}
-		const result = originalAppend(nextMessage);
+		const result = originalAppend(persistMessage(nextMessage));
 		const sessionFile = sessionManager.getSessionFile?.();
 		if (sessionFile) emitSessionTranscriptUpdate(sessionFile);
 		if (toolCalls.length > 0) for (const call of toolCalls) pending.set(call.id, call.name);
@@ -51529,6 +51588,7 @@ function guardSessionManager(sessionManager, opts) {
 	if (typeof sessionManager.flushPendingToolResults === "function") return sessionManager;
 	const hookRunner = getGlobalHookRunner();
 	sessionManager.flushPendingToolResults = installSessionToolResultGuard(sessionManager, {
+		transformMessageForPersistence: (message) => applyInputProvenanceToUserMessage(message, opts?.inputProvenance),
 		transformToolResultForPersistence: hookRunner?.hasHooks("tool_result_persist") ? (message, meta) => {
 			return hookRunner.runToolResultPersist({
 				toolName: meta.toolName,
@@ -52062,6 +52122,7 @@ const GOOGLE_SCHEMA_UNSUPPORTED_KEYWORDS = new Set([
 	"maxProperties"
 ]);
 const ANTIGRAVITY_SIGNATURE_RE = /^[A-Za-z0-9+/]+={0,2}$/;
+const INTER_SESSION_PREFIX_BASE = "[Inter-session message]";
 function isValidAntigravitySignature(value) {
 	if (typeof value !== "string") return false;
 	const trimmed = value.trim();
@@ -52116,6 +52177,73 @@ function sanitizeAntigravityThinkingBlocks(messages) {
 	}
 	return touched ? out : messages;
 }
+function buildInterSessionPrefix(message) {
+	const provenance = normalizeInputProvenance(message.provenance);
+	if (!provenance) return INTER_SESSION_PREFIX_BASE;
+	const details = [
+		provenance.sourceSessionKey ? `sourceSession=${provenance.sourceSessionKey}` : void 0,
+		provenance.sourceChannel ? `sourceChannel=${provenance.sourceChannel}` : void 0,
+		provenance.sourceTool ? `sourceTool=${provenance.sourceTool}` : void 0
+	].filter(Boolean);
+	if (details.length === 0) return INTER_SESSION_PREFIX_BASE;
+	return `${INTER_SESSION_PREFIX_BASE} ${details.join(" ")}`;
+}
+function annotateInterSessionUserMessages(messages) {
+	let touched = false;
+	const out = [];
+	for (const msg of messages) {
+		if (!hasInterSessionUserProvenance(msg)) {
+			out.push(msg);
+			continue;
+		}
+		const prefix = buildInterSessionPrefix(msg);
+		const user = msg;
+		if (typeof user.content === "string") {
+			if (user.content.startsWith(prefix)) {
+				out.push(msg);
+				continue;
+			}
+			touched = true;
+			out.push({
+				...msg,
+				content: `${prefix}\n${user.content}`
+			});
+			continue;
+		}
+		if (!Array.isArray(user.content)) {
+			out.push(msg);
+			continue;
+		}
+		const textIndex = user.content.findIndex((block) => block && typeof block === "object" && block.type === "text" && typeof block.text === "string");
+		if (textIndex >= 0) {
+			const existing = user.content[textIndex];
+			if (existing.text.startsWith(prefix)) {
+				out.push(msg);
+				continue;
+			}
+			const nextContent = [...user.content];
+			nextContent[textIndex] = {
+				...existing,
+				text: `${prefix}\n${existing.text}`
+			};
+			touched = true;
+			out.push({
+				...msg,
+				content: nextContent
+			});
+			continue;
+		}
+		touched = true;
+		out.push({
+			...msg,
+			content: [{
+				type: "text",
+				text: prefix
+			}, ...user.content]
+		});
+	}
+	return touched ? out : messages;
+}
 function findUnsupportedSchemaKeywords(schema, path) {
 	if (!schema || typeof schema !== "object") return [];
 	if (Array.isArray(schema)) return schema.flatMap((item, index) => findUnsupportedSchemaKeywords(item, `${path}[${index}]`));
@@ -52223,13 +52351,31 @@ function applyGoogleTurnOrderingFix(params) {
 		didPrepend
 	};
 }
+function stripToolResultDetails(messages) {
+	let touched = false;
+	const out = [];
+	for (const msg of messages) {
+		if (!msg || typeof msg !== "object" || msg.role !== "toolResult") {
+			out.push(msg);
+			continue;
+		}
+		if (!("details" in msg)) {
+			out.push(msg);
+			continue;
+		}
+		const { details: _details, ...rest } = msg;
+		touched = true;
+		out.push(rest);
+	}
+	return touched ? out : messages;
+}
 async function sanitizeSessionHistory(params) {
 	const policy = params.policy ?? resolveTranscriptPolicy({
 		modelApi: params.modelApi,
 		provider: params.provider,
 		modelId: params.modelId
 	});
-	const sanitizedImages = await sanitizeSessionMessagesImages(params.messages, "session:history", {
+	const sanitizedImages = await sanitizeSessionMessagesImages(annotateInterSessionUserMessages(params.messages), "session:history", {
 		sanitizeMode: policy.sanitizeMode,
 		sanitizeToolCallIds: policy.sanitizeToolCallIds,
 		toolCallIdMode: policy.toolCallIdMode,
@@ -52237,7 +52383,7 @@ async function sanitizeSessionHistory(params) {
 		sanitizeThoughtSignatures: policy.sanitizeThoughtSignatures
 	});
 	const sanitizedToolCalls = sanitizeToolCallInputs(policy.normalizeAntigravityThinkingBlocks ? sanitizeAntigravityThinkingBlocks(sanitizedImages) : sanitizedImages);
-	const repairedTools = policy.repairToolUseResultPairing ? sanitizeToolUseResultPairing(sanitizedToolCalls) : sanitizedToolCalls;
+	const sanitizedToolResults = stripToolResultDetails(policy.repairToolUseResultPairing ? sanitizeToolUseResultPairing(sanitizedToolCalls) : sanitizedToolCalls);
 	const isOpenAIResponsesApi = params.modelApi === "openai-responses" || params.modelApi === "openai-codex-responses";
 	const hasSnapshot = Boolean(params.provider || params.modelApi || params.modelId);
 	const priorSnapshot = hasSnapshot ? readLastModelSnapshot(params.sessionManager) : null;
@@ -52247,7 +52393,7 @@ async function sanitizeSessionHistory(params) {
 		modelApi: params.modelApi,
 		modelId: params.modelId
 	}) : false;
-	const sanitizedOpenAI = isOpenAIResponsesApi && modelChanged ? downgradeOpenAIReasoningBlocks(repairedTools) : repairedTools;
+	const sanitizedOpenAI = isOpenAIResponsesApi && modelChanged ? downgradeOpenAIReasoningBlocks(sanitizedToolResults) : sanitizedToolResults;
 	if (hasSnapshot && (!priorSnapshot || modelChanged)) appendModelSnapshot(params.sessionManager, {
 		timestamp: Date.now(),
 		provider: params.provider,
@@ -52479,18 +52625,47 @@ function toToolDefinitions(tools) {
 			execute: async (...args) => {
 				const { toolCallId, params, onUpdate, signal } = splitToolExecuteArgs(args);
 				try {
-					return await tool.execute(toolCallId, params, signal, onUpdate);
+					const hookOutcome = await runBeforeToolCallHook({
+						toolName: name,
+						params,
+						toolCallId
+					});
+					if (hookOutcome.blocked) throw new Error(hookOutcome.reason);
+					const adjustedParams = hookOutcome.params;
+					const result = await tool.execute(toolCallId, adjustedParams, signal, onUpdate);
+					const hookRunner = getGlobalHookRunner();
+					if (hookRunner?.hasHooks("after_tool_call")) try {
+						await hookRunner.runAfterToolCall({
+							toolName: name,
+							params: isPlainObject(adjustedParams) ? adjustedParams : {},
+							result
+						}, { toolName: name });
+					} catch (hookErr) {
+						logDebug(`after_tool_call hook failed: tool=${normalizedName} error=${String(hookErr)}`);
+					}
+					return result;
 				} catch (err) {
 					if (signal?.aborted) throw err;
 					if ((err && typeof err === "object" && "name" in err ? String(err.name) : "") === "AbortError") throw err;
 					const described = describeToolExecutionError(err);
 					if (described.stack && described.stack !== described.message) logDebug(`tools: ${normalizedName} failed stack:\n${described.stack}`);
 					logError(`[tools] ${normalizedName} failed: ${described.message}`);
-					return jsonResult({
+					const errorResult = jsonResult({
 						status: "error",
 						tool: normalizedName,
 						error: described.message
 					});
+					const hookRunner = getGlobalHookRunner();
+					if (hookRunner?.hasHooks("after_tool_call")) try {
+						await hookRunner.runAfterToolCall({
+							toolName: normalizedName,
+							params: isPlainObject(params) ? params : {},
+							error: described.message
+						}, { toolName: normalizedName });
+					} catch (hookErr) {
+						logDebug(`after_tool_call hook failed: tool=${normalizedName} error=${String(hookErr)}`);
+					}
+					return errorResult;
 				}
 			}
 		};
@@ -53590,6 +53765,10 @@ function handleAutoCompactionStart(ctx) {
 		stream: "compaction",
 		data: { phase: "start" }
 	});
+	const hookRunner = getGlobalHookRunner();
+	if (hookRunner?.hasHooks("before_compaction")) hookRunner.runBeforeCompaction({ messageCount: ctx.params.session.messages?.length ?? 0 }, {}).catch((err) => {
+		ctx.log.warn(`before_compaction hook failed: ${String(err)}`);
+	});
 }
 function handleAutoCompactionEnd(ctx, evt) {
 	ctx.state.compactionInFlight = false;
@@ -53614,6 +53793,15 @@ function handleAutoCompactionEnd(ctx, evt) {
 			willRetry
 		}
 	});
+	if (!willRetry) {
+		const hookRunnerEnd = getGlobalHookRunner();
+		if (hookRunnerEnd?.hasHooks("after_compaction")) hookRunnerEnd.runAfterCompaction({
+			messageCount: ctx.params.session.messages?.length ?? 0,
+			compactedCount: ctx.getCompactionCount()
+		}, {}).catch((err) => {
+			ctx.log.warn(`after_compaction hook failed: ${String(err)}`);
+		});
+	}
 }
 function handleAgentEnd(ctx) {
 	ctx.log.debug(`embedded run agent end: runId=${ctx.params.runId}`);
@@ -54053,6 +54241,8 @@ function extractMessagingToolSend(toolName, args) {
 
 //#endregion
 //#region src/agents/pi-embedded-subscribe.handlers.tools.ts
+/** Track tool execution start times and args for after_tool_call hook */
+const toolStartData = /* @__PURE__ */ new Map();
 function extendExecMeta(toolName, args, meta) {
 	const normalized = toolName.trim().toLowerCase();
 	if (normalized !== "exec" && normalized !== "bash") return meta;
@@ -54071,6 +54261,20 @@ async function handleToolExecutionStart(ctx, evt) {
 	const toolName = normalizeToolName(String(evt.toolName));
 	const toolCallId = String(evt.toolCallId);
 	const args = evt.args;
+	toolStartData.set(toolCallId, {
+		startTime: Date.now(),
+		args
+	});
+	const hookRunner = ctx.hookRunner ?? getGlobalHookRunner();
+	if (hookRunner?.hasHooks?.("before_tool_call")) try {
+		const hookEvent = {
+			toolName,
+			params: args && typeof args === "object" ? args : {}
+		};
+		await hookRunner.runBeforeToolCall(hookEvent, { toolName });
+	} catch (err) {
+		ctx.log.debug(`before_tool_call hook failed: tool=${toolName} error=${String(err)}`);
+	}
 	if (toolName === "read") {
 		const record = args && typeof args === "object" ? args : {};
 		if (!(typeof record.path === "string" ? record.path.trim() : "")) {
@@ -54141,7 +54345,7 @@ function handleToolExecutionUpdate(ctx, evt) {
 		}
 	});
 }
-function handleToolExecutionEnd(ctx, evt) {
+async function handleToolExecutionEnd(ctx, evt) {
 	const toolName = normalizeToolName(String(evt.toolName));
 	const toolCallId = String(evt.toolCallId);
 	const isError = Boolean(evt.isError);
@@ -54208,6 +54412,27 @@ function handleToolExecutionEnd(ctx, evt) {
 		const outputText = extractToolResultText(sanitizedResult);
 		if (outputText) ctx.emitToolOutput(toolName, meta, outputText);
 	}
+	const hookRunnerAfter = ctx.hookRunner ?? getGlobalHookRunner();
+	if (hookRunnerAfter?.hasHooks("after_tool_call")) {
+		const startData = toolStartData.get(toolCallId);
+		toolStartData.delete(toolCallId);
+		const durationMs = startData?.startTime != null ? Date.now() - startData.startTime : void 0;
+		const toolArgs = startData?.args;
+		const hookEvent = {
+			toolName,
+			params: toolArgs && typeof toolArgs === "object" ? toolArgs : {},
+			result: sanitizedResult,
+			error: isToolError ? extractToolErrorMessage(sanitizedResult) : void 0,
+			durationMs
+		};
+		hookRunnerAfter.runAfterToolCall(hookEvent, {
+			toolName,
+			agentId: void 0,
+			sessionKey: void 0
+		}).catch((err) => {
+			ctx.log.warn(`after_tool_call hook failed: tool=${toolName} error=${String(err)}`);
+		});
+	} else toolStartData.delete(toolCallId);
 }
 
 //#endregion
@@ -54233,7 +54458,9 @@ function createEmbeddedPiSessionEventHandler(ctx) {
 				handleToolExecutionUpdate(ctx, evt);
 				return;
 			case "tool_execution_end":
-				handleToolExecutionEnd(ctx, evt);
+				handleToolExecutionEnd(ctx, evt).catch((err) => {
+					ctx.log.debug(`tool_execution_end handler failed: ${String(err)}`);
+				});
 				return;
 			case "agent_start":
 				handleAgentStart(ctx);
@@ -54617,6 +54844,7 @@ function subscribeEmbeddedPiSession(params) {
 		log: log$1,
 		blockChunking,
 		blockChunker,
+		hookRunner: params.hookRunner,
 		shouldEmitToolResult,
 		shouldEmitToolOutput,
 		emitToolSummary,
@@ -55341,6 +55569,7 @@ async function runEmbeddedAttempt(params) {
 			sessionManager = guardSessionManager(SessionManager.open(params.sessionFile), {
 				agentId: sessionAgentId,
 				sessionKey: params.sessionKey,
+				inputProvenance: params.inputProvenance,
 				allowSyntheticToolResults: transcriptPolicy.allowSyntheticToolResults
 			});
 			trackSessionManagerAccess(params.sessionFile);
@@ -55363,6 +55592,7 @@ async function runEmbeddedAttempt(params) {
 				modelId: params.modelId,
 				model: params.model
 			});
+			const hookRunner = getGlobalHookRunner();
 			const { builtInTools, customTools } = splitSdkTools({
 				tools,
 				sandboxEnabled: !!sandbox?.enabled
@@ -55488,6 +55718,7 @@ async function runEmbeddedAttempt(params) {
 			const subscription = subscribeEmbeddedPiSession({
 				session: activeSession,
 				runId: params.runId,
+				hookRunner: getGlobalHookRunner() ?? void 0,
 				verboseLevel: params.verboseLevel,
 				reasoningMode: params.reasoningLevel ?? "off",
 				toolResultFormat: params.toolResultFormat,
@@ -55532,7 +55763,6 @@ async function runEmbeddedAttempt(params) {
 			};
 			if (params.abortSignal) if (params.abortSignal.aborted) onAbort();
 			else params.abortSignal.addEventListener("abort", onAbort, { once: true });
-			const hookRunner = getGlobalHookRunner();
 			const hookAgentId = typeof params.agentId === "string" && params.agentId.trim() ? normalizeAgentId(params.agentId) : resolveSessionAgentIds({
 				sessionKey: params.sessionKey,
 				config: params.config
@@ -55988,6 +56218,7 @@ async function runEmbeddedPiAgent(params) {
 		let overflowCompactionAttempts = 0;
 		let toolResultTruncationAttempted = false;
 		const usageAccumulator = createUsageAccumulator();
+		let lastRunPromptUsage;
 		let autoCompactionCount = 0;
 		try {
 			while (true) {
@@ -56046,12 +56277,16 @@ async function runEmbeddedPiAgent(params) {
 					onToolResult: params.onToolResult,
 					onAgentEvent: params.onAgentEvent,
 					extraSystemPrompt: params.extraSystemPrompt,
+					inputProvenance: params.inputProvenance,
 					streamParams: params.streamParams,
 					ownerNumbers: params.ownerNumbers,
 					enforceFinalTag: params.enforceFinalTag
 				});
 				const { aborted, promptError, timedOut, sessionIdUsed, lastAssistant } = attempt;
-				mergeUsageIntoAccumulator(usageAccumulator, attempt.attemptUsage ?? normalizeUsage(lastAssistant?.usage));
+				const lastAssistantUsage = normalizeUsage(lastAssistant?.usage);
+				const attemptUsage = attempt.attemptUsage ?? lastAssistantUsage;
+				mergeUsageIntoAccumulator(usageAccumulator, attemptUsage);
+				lastRunPromptUsage = lastAssistantUsage ?? attemptUsage;
 				autoCompactionCount += Math.max(0, attempt.compactionCount ?? 0);
 				const formattedAssistantErrorText = lastAssistant ? formatAssistantErrorText(lastAssistant, {
 					cfg: params.config,
@@ -56062,13 +56297,13 @@ async function runEmbeddedPiAgent(params) {
 				const contextOverflowError = !aborted ? (() => {
 					if (promptError) {
 						const errorText = describeUnknownError(promptError);
-						if (isContextOverflowError(errorText)) return {
+						if (isLikelyContextOverflowError(errorText)) return {
 							text: errorText,
 							source: "promptError"
 						};
 						return null;
 					}
-					if (assistantErrorText && isContextOverflowError(assistantErrorText)) return {
+					if (assistantErrorText && isLikelyContextOverflowError(assistantErrorText)) return {
 						text: assistantErrorText,
 						source: "assistantError"
 					};
@@ -56279,11 +56514,15 @@ async function runEmbeddedPiAgent(params) {
 					}
 				}
 				const usage = toNormalizedUsage(usageAccumulator);
+				const lastCallUsage = normalizeUsage(lastAssistant?.usage);
+				const promptTokens = derivePromptTokens(lastRunPromptUsage);
 				const agentMeta = {
 					sessionId: sessionIdUsed,
 					provider: lastAssistant?.provider ?? provider,
 					model: lastAssistant?.model ?? model.id,
 					usage,
+					lastCallUsage: lastCallUsage ?? void 0,
+					promptTokens,
 					compactionCount: autoCompactionCount > 0 ? autoCompactionCount : void 0
 				};
 				const payloads = buildEmbeddedRunPayloads({
@@ -60700,24 +60939,58 @@ function formatMediaAttachedLine(params) {
 	const urlPart = urlRaw ? ` | ${urlRaw}` : "";
 	return `${prefix}${params.path}${typePart}${urlPart}]`;
 }
+const AUDIO_EXTENSIONS = new Set([
+	".ogg",
+	".opus",
+	".mp3",
+	".m4a",
+	".wav",
+	".webm",
+	".flac",
+	".aac",
+	".wma",
+	".aiff",
+	".alac",
+	".oga"
+]);
+function isAudioPath(path) {
+	if (!path) return false;
+	const lower = path.toLowerCase();
+	for (const ext of AUDIO_EXTENSIONS) if (lower.endsWith(ext)) return true;
+	return false;
+}
 function buildInboundMediaNote(ctx) {
 	const suppressed = /* @__PURE__ */ new Set();
-	if (Array.isArray(ctx.MediaUnderstanding)) for (const output of ctx.MediaUnderstanding) suppressed.add(output.attachmentIndex);
+	const transcribedAudioIndices = /* @__PURE__ */ new Set();
+	if (Array.isArray(ctx.MediaUnderstanding)) for (const output of ctx.MediaUnderstanding) {
+		suppressed.add(output.attachmentIndex);
+		if (output.kind === "audio.transcription") transcribedAudioIndices.add(output.attachmentIndex);
+	}
 	if (Array.isArray(ctx.MediaUnderstandingDecisions)) for (const decision of ctx.MediaUnderstandingDecisions) {
 		if (decision.outcome !== "success") continue;
-		for (const attachment of decision.attachments) if (attachment.chosen?.outcome === "success") suppressed.add(attachment.attachmentIndex);
+		for (const attachment of decision.attachments) if (attachment.chosen?.outcome === "success") {
+			suppressed.add(attachment.attachmentIndex);
+			if (decision.capability === "audio") transcribedAudioIndices.add(attachment.attachmentIndex);
+		}
 	}
 	const pathsFromArray = Array.isArray(ctx.MediaPaths) ? ctx.MediaPaths : void 0;
 	const paths = pathsFromArray && pathsFromArray.length > 0 ? pathsFromArray : ctx.MediaPath?.trim() ? [ctx.MediaPath.trim()] : [];
 	if (paths.length === 0) return;
 	const urls = Array.isArray(ctx.MediaUrls) && ctx.MediaUrls.length === paths.length ? ctx.MediaUrls : void 0;
 	const types = Array.isArray(ctx.MediaTypes) && ctx.MediaTypes.length === paths.length ? ctx.MediaTypes : void 0;
+	const canStripSingleAttachmentByTranscript = Boolean(ctx.Transcript?.trim()) && paths.length === 1;
 	const entries = paths.map((entry, index) => ({
 		path: entry ?? "",
 		type: types?.[index] ?? ctx.MediaType,
 		url: urls?.[index] ?? ctx.MediaUrl,
 		index
-	})).filter((entry) => !suppressed.has(entry.index));
+	})).filter((entry) => {
+		if (suppressed.has(entry.index)) return false;
+		const isAudioByMime = types !== void 0 && entry.type?.toLowerCase().startsWith("audio/");
+		if (!(isAudioPath(entry.path) || isAudioByMime)) return true;
+		if (transcribedAudioIndices.has(entry.index) || canStripSingleAttachmentByTranscript && entry.index === 0) return false;
+		return true;
+	});
 	if (entries.length === 0) return;
 	if (entries.length === 1) return formatMediaAttachedLine({
 		path: entries[0]?.path ?? "",
@@ -62189,6 +62462,7 @@ const DEFAULT_MEMORY_FLUSH_SOFT_TOKENS = 4e3;
 const DEFAULT_MEMORY_FLUSH_PROMPT = [
 	"Pre-compaction memory flush.",
 	"Store durable memories now (use memory/YYYY-MM-DD.md; create memory/ if needed).",
+	"IMPORTANT: If the file already exists, APPEND new content only and do not overwrite existing entries.",
 	`If nothing to store, reply with ${SILENT_REPLY_TOKEN}.`
 ].join(" ");
 const DEFAULT_MEMORY_FLUSH_SYSTEM_PROMPT = [
@@ -62440,8 +62714,9 @@ async function persistSessionUsageUpdate(params) {
 						inputTokens: input,
 						outputTokens: output,
 						totalTokens: deriveSessionTotalTokens({
-							usage: params.usage,
-							contextTokens: resolvedContextTokens
+							usage: params.lastCallUsage ?? params.usage,
+							contextTokens: resolvedContextTokens,
+							promptTokens: params.promptTokens
 						}) ?? input,
 						modelProvider: params.providerUsed ?? entry.modelProvider,
 						model: params.modelUsed ?? entry.model,
@@ -62503,6 +62778,36 @@ async function persistSessionUsageUpdate(params) {
 	}
 }
 
+//#endregion
+//#region src/auto-reply/reply/session-run-accounting.ts
+async function persistRunSessionUsage(params) {
+	await persistSessionUsageUpdate({
+		storePath: params.storePath,
+		sessionKey: params.sessionKey,
+		usage: params.usage,
+		lastCallUsage: params.lastCallUsage,
+		modelUsed: params.modelUsed,
+		providerUsed: params.providerUsed,
+		contextTokensUsed: params.contextTokensUsed,
+		systemPromptReport: params.systemPromptReport,
+		cliSessionId: params.cliSessionId,
+		logLabel: params.logLabel
+	});
+}
+async function incrementRunCompactionCount(params) {
+	const tokensAfterCompaction = params.lastCallUsage ? deriveSessionTotalTokens({
+		usage: params.lastCallUsage,
+		contextTokens: params.contextTokensUsed
+	}) : void 0;
+	return incrementCompactionCount({
+		sessionEntry: params.sessionEntry,
+		sessionStore: params.sessionStore,
+		sessionKey: params.sessionKey,
+		storePath: params.storePath,
+		tokensAfter: tokensAfterCompaction
+	});
+}
+
 //#endregion
 //#region src/auto-reply/reply/typing-mode.ts
 const DEFAULT_GROUP_TYPING_MODE = "message";
@@ -62693,20 +62998,21 @@ function createFollowupRunner(params) {
 				defaultRuntime.error?.(`Followup agent failed before reply: ${message}`);
 				return;
 			}
-			if (storePath && sessionKey) {
-				const usage = runResult.meta.agentMeta?.usage;
-				const modelUsed = runResult.meta.agentMeta?.model ?? fallbackModel ?? defaultModel;
-				const contextTokensUsed = agentCfgContextTokens ?? lookupContextTokens(modelUsed) ?? sessionEntry?.contextTokens ?? DEFAULT_CONTEXT_TOKENS;
-				await persistSessionUsageUpdate({
-					storePath,
-					sessionKey,
-					usage,
-					modelUsed,
-					providerUsed: fallbackProvider,
-					contextTokensUsed,
-					logLabel: "followup"
-				});
-			}
+			const usage = runResult.meta.agentMeta?.usage;
+			const promptTokens = runResult.meta.agentMeta?.promptTokens;
+			const modelUsed = runResult.meta.agentMeta?.model ?? fallbackModel ?? defaultModel;
+			const contextTokensUsed = agentCfgContextTokens ?? lookupContextTokens(modelUsed) ?? sessionEntry?.contextTokens ?? DEFAULT_CONTEXT_TOKENS;
+			if (storePath && sessionKey) await persistRunSessionUsage({
+				storePath,
+				sessionKey,
+				usage,
+				lastCallUsage: runResult.meta.agentMeta?.lastCallUsage,
+				promptTokens,
+				modelUsed,
+				providerUsed: fallbackProvider,
+				contextTokensUsed,
+				logLabel: "followup"
+			});
 			const payloadArray = runResult.payloads ?? [];
 			if (payloadArray.length === 0) return;
 			const sanitizedPayloads = payloadArray.flatMap((payload) => {
@@ -62737,11 +63043,13 @@ function createFollowupRunner(params) {
 			}) ? [] : dedupedPayloads;
 			if (finalPayloads.length === 0) return;
 			if (autoCompactionCompleted) {
-				const count = await incrementCompactionCount({
+				const count = await incrementRunCompactionCount({
 					sessionEntry,
 					sessionStore,
 					sessionKey,
-					storePath
+					storePath,
+					lastCallUsage: runResult.meta.agentMeta?.lastCallUsage,
+					contextTokensUsed
 				});
 				if (queued.run.verboseLevel && queued.run.verboseLevel !== "off") {
 					const suffix = typeof count === "number" ? ` (count ${count})` : "";
@@ -62948,14 +63256,17 @@ async function runReplyAgent(params) {
 		}
 		if (pendingToolTasks.size > 0) await Promise.allSettled(pendingToolTasks);
 		const usage = runResult.meta.agentMeta?.usage;
+		const promptTokens = runResult.meta.agentMeta?.promptTokens;
 		const modelUsed = runResult.meta.agentMeta?.model ?? fallbackModel ?? defaultModel;
 		const providerUsed = runResult.meta.agentMeta?.provider ?? fallbackProvider ?? followupRun.run.provider;
 		const cliSessionId = isCliProvider(providerUsed, cfg) ? runResult.meta.agentMeta?.sessionId?.trim() : void 0;
 		const contextTokensUsed = agentCfgContextTokens ?? lookupContextTokens(modelUsed) ?? activeSessionEntry?.contextTokens ?? DEFAULT_CONTEXT_TOKENS;
-		await persistSessionUsageUpdate({
+		await persistRunSessionUsage({
 			storePath,
 			sessionKey,
 			usage,
+			lastCallUsage: runResult.meta.agentMeta?.lastCallUsage,
+			promptTokens,
 			modelUsed,
 			providerUsed,
 			contextTokensUsed,
@@ -63039,11 +63350,13 @@ async function runReplyAgent(params) {
 		let finalPayloads = replyPayloads;
 		const verboseEnabled = resolvedVerboseLevel !== "off";
 		if (autoCompactionCompleted) {
-			const count = await incrementCompactionCount({
+			const count = await incrementRunCompactionCount({
 				sessionEntry: activeSessionEntry,
 				sessionStore: activeSessionStore,
 				sessionKey,
-				storePath
+				storePath,
+				lastCallUsage: runResult.meta.agentMeta?.lastCallUsage,
+				contextTokensUsed
 			});
 			if (verboseEnabled) finalPayloads = [{ text: `🧹 Auto-compaction complete${typeof count === "number" ? ` (count ${count})` : ""}.` }, ...finalPayloads];
 		}
@@ -63626,7 +63939,7 @@ async function deliverSessionMaintenanceWarning(params) {
 		return;
 	}
 	try {
-		const { deliverOutboundPayloads } = await import("./deliver-B1jsU2r7.js").then((n) => n.n);
+		const { deliverOutboundPayloads } = await import("./deliver-LsxKETro.js").then((n) => n.n);
 		await deliverOutboundPayloads({
 			cfg: params.cfg,
 			channel,
@@ -63644,7 +63957,7 @@ async function deliverSessionMaintenanceWarning(params) {
 //#endregion
 //#region src/auto-reply/reply/session.ts
 function forkSessionFromParent(params) {
-	const parentSessionFile = resolveSessionFilePath(params.parentEntry.sessionId, params.parentEntry);
+	const parentSessionFile = resolveSessionFilePath(params.parentEntry.sessionId, params.parentEntry, { sessionsDir: params.sessionsDir });
 	if (!parentSessionFile || !fs.existsSync(parentSessionFile)) return null;
 	try {
 		const manager = SessionManager.open(parentSessionFile);
@@ -63847,7 +64160,10 @@ async function initSessionState(params) {
 	const parentSessionKey = ctx.ParentSessionKey?.trim();
 	if (isNewSession && parentSessionKey && parentSessionKey !== sessionKey && sessionStore[parentSessionKey]) {
 		console.warn(`[session-init] forking from parent session: parentKey=${parentSessionKey} → sessionKey=${sessionKey} parentTokens=${sessionStore[parentSessionKey].totalTokens ?? "?"}`);
-		const forked = forkSessionFromParent({ parentEntry: sessionStore[parentSessionKey] });
+		const forked = forkSessionFromParent({
+			parentEntry: sessionStore[parentSessionKey],
+			sessionsDir: path.dirname(storePath)
+		});
 		if (forked) {
 			sessionId = forked.sessionId;
 			sessionEntry.sessionId = forked.sessionId;
@@ -63883,13 +64199,40 @@ async function initSessionState(params) {
 			warning
 		})
 	});
+	const sessionCtx = {
+		...ctx,
+		BodyStripped: normalizeInboundTextNewlines(bodyStripped ?? ctx.BodyForAgent ?? ctx.Body ?? ctx.CommandBody ?? ctx.RawBody ?? ctx.BodyForCommands ?? ""),
+		SessionId: sessionId,
+		IsNewSession: isNewSession ? "true" : "false"
+	};
+	const hookRunner = getGlobalHookRunner();
+	if (hookRunner && isNewSession) {
+		const effectiveSessionId = sessionId ?? "";
+		if (previousSessionEntry?.sessionId && previousSessionEntry.sessionId !== effectiveSessionId) {
+			if (hookRunner.hasHooks("session_end")) hookRunner.runSessionEnd({
+				sessionId: previousSessionEntry.sessionId,
+				messageCount: 0
+			}, {
+				sessionId: previousSessionEntry.sessionId,
+				agentId: resolveSessionAgentId({
+					sessionKey,
+					config: cfg
+				})
+			}).catch(() => {});
+		}
+		if (hookRunner.hasHooks("session_start")) hookRunner.runSessionStart({
+			sessionId: effectiveSessionId,
+			resumedFrom: previousSessionEntry?.sessionId
+		}, {
+			sessionId: effectiveSessionId,
+			agentId: resolveSessionAgentId({
+				sessionKey,
+				config: cfg
+			})
+		}).catch(() => {});
+	}
 	return {
-		sessionCtx: {
-			...ctx,
-			BodyStripped: normalizeInboundTextNewlines(bodyStripped ?? ctx.BodyForAgent ?? ctx.Body ?? ctx.CommandBody ?? ctx.RawBody ?? ctx.BodyForCommands ?? ""),
-			SessionId: sessionId,
-			IsNewSession: isNewSession ? "true" : "false"
-		},
+		sessionCtx,
 		sessionEntry,
 		previousSessionEntry,
 		sessionStore,