clawgram 2.25.0 → 2.26.1

package/dist/channel.js

@@ -1,13 +1,7 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createChannelPlugin = exports.canonicalAction = exports.CORE_ACTION_SYNONYMS = void 0;
-exports.resolveAccountOperatorIds = resolveAccountOperatorIds;
+exports.createChannelPlugin = exports.canonicalAction = exports.CORE_ACTION_SYNONYMS = exports.resolveAccountOperatorIds = void 0;
 const core_1 = require("openclaw/plugin-sdk/core");
-const node_os_1 = __importDefault(require("node:os"));
-const node_path_1 = __importDefault(require("node:path"));
 /**
  * How long a file fetched by `fetch-media` stays on disk.
  *
@@ -16,10 +10,6 @@ const node_path_1 = __importDefault(require("node:path"));
  * that a chat full of images does not silently become a copy of itself in the
  * temp directory.
  */
-// Час, а не сутки: `fetch-media` существует ради «прочитать и переслать», и
-// файл нужен ровно на время хода. Сутки означали сутки чужой личной переписки
-// на диске (A5-13).
-const FETCHED_MEDIA_TTL_MS = 60 * 60 * 1000;
 /**
  * What this channel promises the Gateway.
  *
@@ -50,53 +40,29 @@ const CHANNEL_CAPABILITIES = {
         },
     },
 };
-const media_1 = require("./media");
-const fetch_media_1 = require("./fetch-media");
 const channel_runtime_1 = require("openclaw/plugin-sdk/channel-runtime");
-const param_readers_1 = require("openclaw/plugin-sdk/param-readers");
 const tool_send_1 = require("openclaw/plugin-sdk/tool-send");
-const channel_pairing_1 = require("openclaw/plugin-sdk/channel-pairing");
 const events_1 = require("telegram/events");
 const gramjs_client_1 = require("./gramjs-client");
-const history_1 = require("./history");
-const send_scope_1 = require("./send-scope");
+const account_registry_1 = require("./account-registry");
 const joins_1 = require("./joins");
-const reactions_1 = require("./reactions");
-const manage_1 = require("./manage");
-const system_notice_1 = require("./system-notice");
-const state_dir_1 = require("./state-dir");
-const chat_info_1 = require("./chat-info");
-const topics_1 = require("./topics");
-const dialogs_1 = require("./dialogs");
 const group_tool_policy_1 = require("./group-tool-policy");
 const secret_refs_1 = require("./secret-refs");
 const secret_ref_runtime_1 = require("openclaw/plugin-sdk/secret-ref-runtime");
-const group_reply_address_1 = require("./group-reply-address");
-const group_visible_reply_guard_1 = require("./group-visible-reply-guard");
 const helpers_1 = require("./helpers");
 const proxy_config_1 = require("./proxy-config");
 const constants_1 = require("./constants");
+const actions_1 = require("./actions");
+Object.defineProperty(exports, "CORE_ACTION_SYNONYMS", { enumerable: true, get: function () { return actions_1.CORE_ACTION_SYNONYMS; } });
+Object.defineProperty(exports, "canonicalAction", { enumerable: true, get: function () { return actions_1.canonicalAction; } });
+const actions_read_1 = require("./actions-read");
+const actions_manage_1 = require("./actions-manage");
+const actions_send_1 = require("./actions-send");
+const account_scopes_1 = require("./account-scopes");
+Object.defineProperty(exports, "resolveAccountOperatorIds", { enumerable: true, get: function () { return account_scopes_1.resolveAccountOperatorIds; } });
+const outbound_1 = require("./outbound");
+const inbound_pipeline_1 = require("./inbound-pipeline");
 const actionLog = (0, core_1.createSubsystemLogger)("channels/clawgram");
-/**
- * Read scope as configured for the account. Left `undefined` when the key is
- * absent so `isChatReadable` can tell "not configured" from "configured empty" —
- * the first means no restriction, the second denies everything.
- */
-function readAccountReadChats(account) {
-    const raw = account?.readChats;
-    if (raw === undefined || raw === null)
-        return undefined;
-    const entries = Array.isArray(raw) ? raw : [raw];
-    return entries.map((entry) => String(entry).trim()).filter(Boolean);
-}
-function resolveAccountReadChats(cfg, accountId) {
-    return readAccountReadChats(cfg?.channels?.["clawgram"]?.accounts?.[accountId]);
-}
-/**
- * Outbound scope as configured. Handed to `isChatSendable` raw: an absent
- * value means "unrestricted" and an empty list means "deny", and only the
- * raw value tells those apart — same shape as `readChats`.
- */
 /**
  * Хэндл в `allowFrom` — обещание, которое Telegram не держит.
  *
@@ -123,78 +89,6 @@ function warnAboutHandleAllowlistEntries(cfg, accountId) {
         why: "a released handle can be taken by someone else; numeric ids do not change hands",
     });
 }
-function resolveAccountSendChats(cfg, accountId) {
-    return cfg?.channels?.["clawgram"]?.accounts?.[accountId]?.sendChats;
-}
-/** One refusal for every outbound action, so the three read the same. */
-function refuseOutboundOutsideScope(action, accountId, target) {
-    const phone = (0, send_scope_1.isPhoneNumberTarget)(target);
-    const reason = phone ? "phone-number target" : "chat outside send scope";
-    // Телефонный номер — персональные данные: в журнал идёт вид цели, не значение (B5-09).
-    actionLog.warn(`clawgram ${action} refused: ${reason}`, { accountId, ...(phone ? { targetKind: "phone" } : { target }) });
-    throw new Error(`clawgram: not-allowed-chat ${target}`);
-}
-/**
- * Management scope as configured. Handed to `isChatManageable` raw: unlike
- * `readChats`, an absent value already means "deny", so there is nothing to
- * tell apart here.
- */
-/** Chat discovery as configured; absent means "deny", like management scope. */
-/**
- * Кому уходит операционная телеметрия ядра в личке.
- *
- * `operatorIds` — если задан. Иначе `allowFrom`, но только когда это
- * конкретный список: со звёздочкой он означает «пишет кто угодно», и слать
- * туда пути secret-store нельзя (A5-11). Пустой результат означает «оператор
- * не назван», и уведомление подавляется везде.
- *
- * Запоминается при старте аккаунта — см. реестр в system-notice.ts.
- */
-function resolveAccountOperatorIds(cfg, accountId) {
-    const account = cfg?.channels?.["clawgram"]?.accounts?.[accountId];
-    // Только явный список. Умолчание «operatorIds = allowFrom» делало
-    // оператором каждого допущенного собеседника — и телеметрию с путями
-    // secret-store получал любой из них (D2-03, A5-11). Не назван — не
-    // назван: уведомления подавляются везде.
-    const raw = account?.operatorIds;
-    if (raw === undefined || raw === null)
-        return [];
-    const entries = Array.isArray(raw) ? raw : [raw];
-    return entries.map((entry) => String(entry).trim()).filter(Boolean);
-}
-function resolveAccountDiscoverChats(cfg, accountId) {
-    return cfg?.channels?.["clawgram"]?.accounts?.[accountId]?.discoverChats;
-}
-function resolveAccountManageChats(cfg, accountId) {
-    return cfg?.channels?.["clawgram"]?.accounts?.[accountId]?.manageChats;
-}
-/** Same normalization `readChats` gets, for the resolved-account copy. */
-function readAccountManageChats(account) {
-    const raw = account?.manageChats;
-    if (raw === undefined || raw === null)
-        return undefined;
-    const entries = Array.isArray(raw) ? raw : [raw];
-    return entries.map((entry) => String(entry).trim()).filter(Boolean);
-}
-const actions_1 = require("./actions");
-Object.defineProperty(exports, "CORE_ACTION_SYNONYMS", { enumerable: true, get: function () { return actions_1.CORE_ACTION_SYNONYMS; } });
-Object.defineProperty(exports, "canonicalAction", { enumerable: true, get: function () { return actions_1.canonicalAction; } });
-const outbound_1 = require("./outbound");
-const inbound_pipeline_1 = require("./inbound-pipeline");
-/**
- * Turns an inbound attachment into text the agent can read.
- *
- * The work is deliberately delegated: `runtime.mediaUnderstanding` already
- * knows which backend this installation uses for speech and for images, so
- * the channel stays out of that choice — a local model today, something else
- * tomorrow, without touching this file.
- *
- * Failure is not an error worth dropping the message over. An attachment that
- * could not be read still happened, and the assistant is better off saying
- * "you sent something I could not read" than staying silent, which is
- * indistinguishable from being offline.
- */
-const attachments_1 = require("./attachments");
 const createChannelPlugin = (runtimes, pluginRuntime) => {
     const resolveRuntimeAccountId = (cfg, preferred) => {
         const configured = (0, helpers_1.resolveConfiguredAccountId)(cfg, preferred);
@@ -206,20 +100,8 @@ const createChannelPlugin = (runtimes, pluginRuntime) => {
         }
         return configured ?? runtimes.keys().next().value;
     };
-    /**
-     * The connected runtime for an account, or a refusal naming it.
-     *
-     * One helper instead of the eleven copies of this three-liner that used to
-     * sit inside each dispatch branch — the same repetition that made every new
-     * action cost a scaffold (finding A6-11).
-     */
-    const requireRuntimeFor = (id) => {
-        const gram = runtimes.get(id);
-        if (!gram) {
-            throw new Error(`clawgram: runtime not found for account ${id}`);
-        }
-        return gram;
-    };
+    /** The connected runtime for an account, or a refusal naming it (A6-11, D2-11). */
+    const requireRuntimeFor = (id) => (0, account_registry_1.requireRuntime)(runtimes, id);
     return {
         id: "clawgram",
         meta: {
@@ -298,7 +180,7 @@ const createChannelPlugin = (runtimes, pluginRuntime) => {
                     apiHash: (0, secret_refs_1.readSecretInput)(account?.apiHash),
                     sessionString: (0, secret_refs_1.readSecretInput)(account?.sessionString),
                     ...(0, helpers_1.resolveAccountScopes)(cfg, accountId),
-                    readChats: readAccountReadChats(account),
+                    readChats: (0, account_scopes_1.readAccountReadChats)(account),
                     enabled: account?.enabled,
                     accountId,
                     proxy: (0, proxy_config_1.resolveProxyConfig)(account?.proxy),
@@ -307,7 +189,7 @@ const createChannelPlugin = (runtimes, pluginRuntime) => {
                     // client from a config object this function had already stripped it
                     // from, so the setting validated, deployed and did nothing.
                     replyParseMode: account?.replyParseMode,
-                    manageChats: readAccountManageChats(account),
+                    manageChats: (0, account_scopes_1.readAccountManageChats)(account),
                     // Optional secret: absent must stay absent, not become "".
                     twoFaPassword: account?.twoFaPassword === undefined || account?.twoFaPassword === null
                         ? undefined
@@ -364,18 +246,14 @@ const createChannelPlugin = (runtimes, pluginRuntime) => {
                 const gram = new gramjs_client_1.GramJsClientManager(resolvedAccount);
                 await gram.start();
                 runtimes.set(accountId, gram);
-                (0, system_notice_1.rememberOperatorIds)(accountId, resolveAccountOperatorIds(cfg, accountId));
-                // Область отправки — туда же и по той же причине: в `outbound.*`
-                // конфига нет, а барьер нужен и на пути доставки ядра (A5-12).
-                (0, send_scope_1.rememberSendScope)(accountId, resolveAccountSendChats(cfg, accountId));
-                warnAboutHandleAllowlistEntries(cfg, accountId);
-                const pairing = (0, channel_pairing_1.createChannelPairingController)({
-                    // The controller only reads core.channel.pairing, but its parameter is typed
-                    // as the full PluginRuntime, and ctx (hence channelRuntime) is untyped.
-                    core: { channel: channelRuntime },
-                    channel: "clawgram",
-                    accountId,
+                // Что `outbound.*` должен знать об аккаунте без конфига: область
+                // отправки (A5-12) и операторы (A5-11). Одна запись, снимается при
+                // остановке аккаунта (D2-11).
+                (0, account_registry_1.rememberAccount)(accountId, {
+                    sendChats: (0, account_scopes_1.resolveAccountSendChats)(cfg, accountId),
+                    operatorIds: (0, account_scopes_1.resolveAccountOperatorIds)(cfg, accountId),
                 });
+                warnAboutHandleAllowlistEntries(cfg, accountId);
                 const me = await gram.getMe();
                 const selfId = me?.id ? String(me.id) : undefined;
                 const selfUsername = (0, helpers_1.resolveActiveUsername)(me);
@@ -394,7 +272,7 @@ const createChannelPlugin = (runtimes, pluginRuntime) => {
                 const client = gram.getClient();
                 const eventBuilder = new events_1.NewMessage({});
                 const eventHandler = async (event) => (0, inbound_pipeline_1.handleInboundEvent)(event, {
-                    accountId, cfg, channelRuntime, client, gram, log, pairing,
+                    accountId, cfg, channelRuntime, client, gram, log,
                     pluginRuntime, runtimes, selfId, selfLabel, selfUsername,
                 });
                 client.addEventHandler(eventHandler, eventBuilder);
@@ -431,6 +309,7 @@ const createChannelPlugin = (runtimes, pluginRuntime) => {
                 await (0, channel_runtime_1.waitUntilAbort)(ctx.abortSignal, async () => {
                     client.removeEventHandler(eventHandler, eventBuilder);
                     client.removeEventHandler(joinEventHandler, joinEventBuilder);
+                    (0, account_registry_1.forgetAccount)(accountId);
                     const runtime = runtimes.get(accountId);
                     if (!runtime) {
                         return;
@@ -618,8 +497,9 @@ const createChannelPlugin = (runtimes, pluginRuntime) => {
             // bundled channels enforce them. This one used to take `filePath`
             // verbatim, so a path naming the secret store or the config holding
             // `sessionString` was uploaded like any attachment.
-            mediaLocalRoots, mediaAccess, }) => {
+            mediaLocalRoots, mediaReadFile, mediaAccess, }) => {
                 const allowedMediaRoots = mediaLocalRoots ?? mediaAccess?.localRoots;
+                const readMedia = mediaReadFile ?? mediaAccess?.readFile;
                 // Core passes the flag beside `params`; callers write it inside.
                 // Both count, because a rehearsal flag that is silently ignored puts
                 // a real message in a real chat — twice, so far (2.13.1).
@@ -629,835 +509,17 @@ const createChannelPlugin = (runtimes, pluginRuntime) => {
                 // decides what a name means. An unknown name stays itself and falls
                 // through to the unsupported-action error, as before.
                 const canonical = (0, actions_1.canonicalAction)(action);
-                // `read` is what OpenClaw core dispatches (`openclaw message read`,
-                // MCP `messages_read`); `list` resolves to it too.
-                if (canonical === "read") {
-                    const listParams = (0, history_1.parseListMessagesParams)(params);
-                    const listAccountId = resolveRuntimeAccountId(cfg, accountId);
-                    if (!listAccountId) {
-                        throw new Error("clawgram: no configured account found");
-                    }
-                    // Reading is not a side effect, so a dry run still answers — reporting
-                    // an empty window would look like a quiet chat rather than a no-op.
-                    if (!(0, history_1.isChatReadable)(listParams.target, resolveAccountReadChats(cfg, listAccountId))) {
-                        actionLog.warn("clawgram list refused: chat outside read scope", {
-                            accountId: listAccountId,
-                            target: listParams.target,
-                        });
-                        throw new Error(`clawgram: not-allowed-chat ${listParams.target}`);
-                    }
-                    const listGram = runtimes.get(listAccountId);
-                    if (!listGram) {
-                        throw new Error(`clawgram: runtime not found for account ${listAccountId}`);
-                    }
-                    const history = await listGram.listMessages(listParams);
-                    // Metadata only. Message text is the user's correspondence and has no
-                    // business in a log that is read while debugging something else.
-                    actionLog.info("clawgram handleAction list completed", {
-                        accountId: listAccountId,
-                        target: listParams.target,
-                        limit: listParams.limit,
-                        since: listParams.since ?? null,
-                        until: listParams.until ?? null,
-                        returned: history.messages.length,
-                        truncated: history.truncated,
-                    });
-                    return (0, core_1.jsonResult)({
-                        ok: true,
-                        accountId: listAccountId,
-                        chatId: history.chatId ?? listParams.target,
-                        count: history.messages.length,
-                        truncated: history.truncated,
-                        messages: history.messages,
-                    });
-                }
-                // The attachment on a message that is already in a chat.
-                //
-                // `read` says a photo exists; it does not fetch it, and the inbound
-                // path only ever reads what arrives while the agent is being addressed.
-                // Everything else — a screenshot posted an hour ago, a diagram in a
-                // chat the agent reads but was not tagged in — was visible to the
-                // channel and unreachable to the agent. Same `readChats` scope as
-                // history: this must not become a way to pull bytes out of a chat the
-                // account was never allowed to read.
-                if (canonical === "fetch-media") {
-                    const fetchParams = (0, fetch_media_1.parseFetchMediaParams)(params);
-                    const fetchAccountId = resolveRuntimeAccountId(cfg, accountId);
-                    if (!fetchAccountId) {
-                        throw new Error("clawgram: no configured account found");
-                    }
-                    if (!(0, history_1.isChatReadable)(fetchParams.target, resolveAccountReadChats(cfg, fetchAccountId))) {
-                        actionLog.warn("clawgram fetch-media refused: chat outside read scope", {
-                            accountId: fetchAccountId,
-                            target: fetchParams.target,
-                        });
-                        throw new Error(`clawgram: not-allowed-chat ${fetchParams.target}`);
-                    }
-                    const fetchGram = runtimes.get(fetchAccountId);
-                    if (!fetchGram) {
-                        throw new Error(`clawgram: runtime not found for account ${fetchAccountId}`);
-                    }
-                    // Fetching is a read: a dry run answers for real, the same way `read`
-                    // does. Nothing leaves the machine — the file lands in a temp
-                    // directory this channel prunes — so a rehearsal that reported
-                    // "would fetch" would only teach the agent to ask twice.
-                    const found = await fetchGram.getMessageById(fetchParams.target, fetchParams.messageId);
-                    const fetchChatId = found.chatId ?? fetchParams.target;
-                    if (!found.message) {
-                        actionLog.info("clawgram fetch-media found no message", {
-                            accountId: fetchAccountId,
-                            chatId: fetchChatId,
-                            messageId: fetchParams.messageId,
-                        });
-                        return (0, core_1.jsonResult)({
-                            ok: false,
-                            accountId: fetchAccountId,
-                            chatId: fetchChatId,
-                            messageId: String(fetchParams.messageId),
-                            error: "message-not-found",
-                        });
-                    }
-                    // `read` throws the file away, so it gets a directory of its own —
-                    // the shared directory is keyed by chat and message, and deleting
-                    // that path would pull the file out from under an earlier `both`
-                    // fetch of the same message that handed the caller a path.
-                    // Не общий /tmp: там файлы видит каждый локальный пользователь, а на
-                    // этом хосте живёт ещё и раннер деплоя. Каталог состояния OpenClaw
-                    // принадлежит агенту; если он не задан, остаётся /tmp — но права
-                    // 0700/0600 ставятся в любом случае (A5-13).
-                    // Каталог состояния принадлежит агенту; при явно заданном
-                    // OPENCLAW_STATE_DIR вложения не покидают его.
-                    const mediaRoot = process.env.OPENCLAW_STATE_DIR?.trim()
-                        ? node_path_1.default.join((0, state_dir_1.resolveStateDir)(), "tmp")
-                        : node_os_1.default.tmpdir();
-                    const sharedFetchDir = node_path_1.default.join(mediaRoot, "clawgram-fetched");
-                    let fetchDir = sharedFetchDir;
-                    if (fetchParams.mode === "read") {
-                        const { mkdtemp, mkdir } = await import("node:fs/promises");
-                        await mkdir(mediaRoot, { recursive: true, mode: 0o700 });
-                        fetchDir = await mkdtemp(node_path_1.default.join(mediaRoot, "clawgram-media-"));
-                    }
-                    else {
-                        await (0, media_1.pruneFetchedMedia)(sharedFetchDir, FETCHED_MEDIA_TTL_MS, Date.now());
-                    }
-                    const downloaded = await (0, media_1.downloadMessageMediaToFile)({
-                        client: fetchGram.getClient(),
-                        message: found.message,
-                        maxBytes: attachments_1.INBOUND_MEDIA_MAX_BYTES,
-                        dir: fetchDir,
-                        fileNameFor: ({ media, extension }) => (0, fetch_media_1.fetchedMediaFileName)({
-                            chatId: fetchChatId,
-                            messageId: fetchParams.messageId,
-                            extension,
-                            fileName: media.fileName,
-                        }),
-                    });
-                    if (!downloaded) {
-                        // Three different nothings, and the agent has to be able to tell
-                        // them apart: a message with no attachment, an attachment this
-                        // channel does not read (a video, a spreadsheet), and one too
-                        // large to be worth the transfer. Saying "could not fetch" to all
-                        // three is how "she ignored the picture" starts.
-                        const described = (0, media_1.describeMedia)(found.message?.media);
-                        const tooLarge = typeof described?.size === "number" && described.size > attachments_1.INBOUND_MEDIA_MAX_BYTES;
-                        const error = !described
-                            ? "no-media"
-                            : tooLarge
-                                ? "media-too-large"
-                                : "unsupported-media";
-                        actionLog.info("clawgram fetch-media returned nothing", {
-                            accountId: fetchAccountId,
-                            chatId: fetchChatId,
-                            messageId: fetchParams.messageId,
-                            kind: described?.kind ?? null,
-                            error,
-                        });
-                        return (0, core_1.jsonResult)({
-                            ok: false,
-                            accountId: fetchAccountId,
-                            chatId: fetchChatId,
-                            messageId: String(fetchParams.messageId),
-                            media: described ?? null,
-                            error,
-                        });
-                    }
-                    let read;
-                    let readError;
-                    if (fetchParams.mode !== "file") {
-                        try {
-                            read = await (0, attachments_1.understandAttachmentFile)({
-                                runtime: pluginRuntime,
-                                cfg,
-                                filePath: downloaded.path,
-                                mimeType: downloaded.mimeType,
-                                understanding: downloaded.understanding,
-                            });
-                            if (!read) {
-                                readError = "read-empty";
-                            }
-                        }
-                        catch (err) {
-                            // The bytes are already here. A failed reading is worth
-                            // reporting, but it does not undo a successful fetch: the file
-                            // still exists and can still be forwarded.
-                            readError = String(err);
-                        }
-                    }
-                    // `read` mode is the inbound contract — the words, not the file — so
-                    // the bytes go away with the answer. Any other mode keeps them:
-                    // that is the whole point of asking for a path.
-                    if (fetchParams.mode === "read") {
-                        try {
-                            const { rm } = await import("node:fs/promises");
-                            await rm(fetchDir, { recursive: true, force: true });
-                        }
-                        catch {
-                            // A file left behind is pruned within a day; failing the call
-                            // over it would throw away a reading that already succeeded.
-                        }
-                    }
-                    actionLog.info("clawgram fetch-media completed", {
-                        accountId: fetchAccountId,
-                        chatId: fetchChatId,
-                        messageId: fetchParams.messageId,
-                        mode: fetchParams.mode,
-                        kind: downloaded.media.kind,
-                        understanding: downloaded.understanding,
-                        characters: read?.length ?? 0,
-                        readError: readError ?? null,
-                    });
-                    return (0, core_1.jsonResult)({
-                        ok: true,
-                        accountId: fetchAccountId,
-                        chatId: fetchChatId,
-                        messageId: String(fetchParams.messageId),
-                        mode: fetchParams.mode,
-                        media: downloaded.media,
-                        understanding: downloaded.understanding,
-                        filePath: fetchParams.mode === "read" ? undefined : downloaded.path,
-                        text: read,
-                        readError,
-                    });
-                }
-                /**
-                 * The scaffold every chat-shaped read shares.
-                 *
-                 * `participants`, `topics`, `dialogs`, `joins` and `chatInfo` each
-                 * spelled out the same sequence: parse, resolve the account, check a
-                 * scope, fetch the runtime, call it, log counts, answer. Roughly
-                 * forty lines apiece, differing in four places — which is how a new
-                 * action came to cost sixty lines of scaffold and how the two gates
-                 * drifted apart (finding A6-11).
-                 *
-                 * The gate follows from the shape rather than being restated: an
-                 * action that names a chat is gated by `readChats`, `dialogs` has its
-                 * own discovery gate precisely because its point is to find chats
-                 * that are not in scope yet, and `joins` has none — the journal only
-                 * ever holds chats this account was put into.
-                 *
-                 * The runtime is a getter, not a value: `joins` reads a file and must
-                 * not fail merely because no runtime is connected.
-                 */
-                const runRead = async (spec) => {
-                    const parsed = spec.parse();
-                    const readAccountId = resolveRuntimeAccountId(cfg, accountId);
-                    if (!readAccountId) {
-                        throw new Error("clawgram: no configured account found");
-                    }
-                    const target = spec.target?.(parsed);
-                    if (target !== undefined) {
-                        if (!(0, history_1.isChatReadable)(target, resolveAccountReadChats(cfg, readAccountId))) {
-                            actionLog.warn(`clawgram ${spec.name} refused: chat outside read scope`, {
-                                accountId: readAccountId,
-                                target,
-                            });
-                            throw new Error(`clawgram: not-allowed-chat ${target}`);
-                        }
-                    }
-                    else if (spec.discovery) {
-                        if (!(0, dialogs_1.isChatDiscoveryEnabled)(resolveAccountDiscoverChats(cfg, readAccountId))) {
-                            actionLog.warn(`clawgram ${spec.name} refused: chat-discovery is not enabled`, {
-                                accountId: readAccountId,
-                            });
-                            throw new Error("clawgram: chat-discovery is not enabled");
-                        }
-                    }
-                    const gram = () => requireRuntimeFor(readAccountId);
-                    const result = await spec.run({ parsed, accountId: readAccountId, gram });
-                    actionLog.info(`clawgram handleAction ${spec.name} completed`, {
-                        accountId: readAccountId,
-                        ...spec.after(parsed, result),
-                    });
-                    return (0, core_1.jsonResult)({ ok: true, accountId: readAccountId, ...spec.result(parsed, result) });
+                const context = {
+                    action, canonical, params, cfg, accountId, dryRun, toolContext,
+                    allowedMediaRoots, readMedia, pluginRuntime,
+                    resolveRuntimeAccountId, requireRuntimeFor,
                 };
-                // Membership is a read, so the same `readChats` scope that gates history
-                // gates it too: this cannot become a way to enumerate chats the account
-                // was never allowed to read.
-                if (canonical === "participants") {
-                    return await runRead({
-                        name: "participants",
-                        parse: () => (0, history_1.parseListParticipantsParams)(params),
-                        target: (p) => p.target,
-                        run: ({ parsed, gram }) => gram().listParticipants(parsed),
-                        // Counts only. Member ids are personal data and have no business in
-                        // a log that is read while debugging something else.
-                        after: (p, m) => ({
-                            target: p.target,
-                            limit: p.limit,
-                            returned: m.participants.length,
-                            truncated: m.truncated,
-                        }),
-                        result: (p, m) => ({
-                            chatId: m.chatId ?? p.target,
-                            count: m.participants.length,
-                            truncated: m.truncated,
-                            participants: m.participants,
-                        }),
-                    });
-                }
-                // Topic names. A forum chat is addressed by topic id, and until now an
-                // id could only be lifted off an inbound message — so a topic nobody had
-                // written in yet was unreachable, and one named in words was unfindable.
-                // Titles say what a chat is working on, so the read scope gates them.
-                if (canonical === "topics") {
-                    return await runRead({
-                        name: "topics",
-                        parse: () => (0, topics_1.parseTopicsParams)(params),
-                        target: (p) => p.target,
-                        run: ({ parsed, gram }) => gram().listTopics(parsed),
-                        after: (p, f) => ({
-                            target: p.target,
-                            limit: p.limit,
-                            returned: f.topics.length,
-                            truncated: f.truncated,
-                        }),
-                        result: (p, f) => ({
-                            chatId: f.chatId ?? p.target,
-                            count: f.topics.length,
-                            truncated: f.truncated,
-                            topics: f.topics,
-                        }),
-                    });
-                }
-                // Which chats this account is in. Not gated by `readChats` — the whole
-                // point is to find chats that are not in it yet — so it has a gate of
-                // its own, is metadata only, and never reports direct chats.
-                if (canonical === "dialogs") {
-                    return await runRead({
-                        name: "dialogs",
-                        parse: () => (0, dialogs_1.parseDialogsParams)(params),
-                        discovery: true,
-                        run: ({ parsed, gram }) => gram().listDialogs(parsed),
-                        // Counts only: which chats a person's account sits in is exactly
-                        // the kind of thing that should not be sitting in a log.
-                        after: (p, f) => ({ limit: p.limit, returned: f.dialogs.length, truncated: f.truncated }),
-                        result: (_p, f) => ({ count: f.dialogs.length, truncated: f.truncated, dialogs: f.dialogs }),
-                    });
-                }
-                // Where this account was recently added, and by whom. Reading the journal
-                // has no scope check of its own: it only ever contains chats this account
-                // was put into, which is exactly what the caller is allowed to learn.
-                if (canonical === "joins") {
-                    return await runRead({
-                        name: "joins",
-                        parse: () => (0, joins_1.parseJoinsParams)(params),
-                        // No runtime: this reads a file, and must answer with none connected.
-                        run: async ({ parsed, accountId: joinsAccountId }) => (0, joins_1.selectJoinRecords)((0, joins_1.readJoinRecords)((0, joins_1.resolveJoinsJournalPath)(cfg?.channels?.["clawgram"]?.accounts?.[joinsAccountId], joinsAccountId)), parsed),
-                        after: (p, selected) => ({
-                            since: p.since ?? null,
-                            limit: p.limit,
-                            returned: selected.length,
-                        }),
-                        result: (_p, selected) => ({ count: selected.length, joins: selected }),
-                    });
-                }
-                // Describing a chat is a read, so the same `readChats` scope that gates
-                // history gates it too — this must not become a way to learn the title
-                // and size of a chat the account was never allowed to read.
-                if (canonical === "chatInfo") {
-                    return await runRead({
-                        name: "chatInfo",
-                        parse: () => (0, chat_info_1.parseChatInfoParams)(params, toolContext),
-                        target: (p) => p.target,
-                        run: async ({ parsed, gram }) => {
-                            const { entity, full } = await gram().getChatInfo(parsed.target);
-                            return (0, chat_info_1.describeChat)(entity, full);
-                        },
-                        // Type and size only. The title of a private chat is as personal as
-                        // its contents and has no business in a debugging log.
-                        after: (_p, info) => ({
-                            type: info.type,
-                            memberCount: info.memberCount ?? null,
-                            isForum: info.isForum ?? null,
-                        }),
-                        result: (p, info) => ({ chat: { ...info, chatId: info.chatId ?? p.target } }),
-                    });
-                }
-                // A reaction is an outbound act on someone else's message, so it is
-                // gated like sending rather than like reading — and it respects
-                // `dryRun`, which reading does not need to.
-                if (canonical === "react") {
-                    const reactionParams = (0, reactions_1.parseReactionParams)(params, toolContext);
-                    const reactionAccountId = resolveRuntimeAccountId(cfg, accountId);
-                    if (!reactionAccountId) {
-                        throw new Error("clawgram: no configured account found");
-                    }
-                    // Реакция — видимое действие от имени владельца в чужом чате, и
-                    // адресуется она так же, как сообщение: та же область (A5-12).
-                    if (!(0, send_scope_1.isChatSendable)(reactionParams.target, resolveAccountSendChats(cfg, reactionAccountId))) {
-                        refuseOutboundOutsideScope("react", reactionAccountId, String(reactionParams.target));
-                    }
-                    actionLog.info("clawgram handleAction react", {
-                        accountId: reactionAccountId,
-                        dryRun: dryRun === true,
-                        target: reactionParams.target,
-                        messageId: reactionParams.messageId,
-                        remove: reactionParams.remove,
-                    });
-                    if (dryRun === true) {
-                        return (0, core_1.jsonResult)({
-                            ok: true,
-                            dryRun: true,
-                            accountId: reactionAccountId,
-                            chatId: reactionParams.target,
-                            messageId: reactionParams.messageId,
-                            removed: reactionParams.remove,
-                        });
-                    }
-                    const reactionGram = runtimes.get(reactionAccountId);
-                    if (!reactionGram) {
-                        throw new Error(`clawgram: runtime not found for account ${reactionAccountId}`);
-                    }
-                    await reactionGram.sendReaction(reactionParams);
-                    return (0, core_1.jsonResult)({
-                        ok: true,
-                        accountId: reactionAccountId,
-                        chatId: reactionParams.target,
-                        messageId: reactionParams.messageId,
-                        removed: reactionParams.remove,
-                    });
-                }
-                // ---- Chat management (2.12.0) ----
-                //
-                // Assembling a chat rather than speaking in it: create a supergroup,
-                // add and remove people, appoint admins, hand the chat over, issue an
-                // invite link. All of it is possible only because this is a personal
-                // MTProto account — a bot could do almost none of this.
-                //
-                // Every branch is gated by the account's `manageChats` scope, which is
-                // opt-in (absent = deny, see manage.ts) — these are the first actions
-                // that change a chat rather than write into it. Parsing runs before
-                // the gate so a malformed call fails on its own shape, and `dryRun`
-                // returns after the gate so a dry run exercises the same refusals a
-                // real call would hit. People's ids stay out of the logs throughout;
-                // the JSON result carries them to the caller, the journal does not.
-                const manageAction = actions_1.MANAGE_ACTIONS.has(canonical) ? canonical : undefined;
-                if (manageAction) {
-                    const manageAccountId = resolveRuntimeAccountId(cfg, accountId);
-                    if (!manageAccountId) {
-                        throw new Error("clawgram: no configured account found");
-                    }
-                    const manageScope = resolveAccountManageChats(cfg, manageAccountId);
-                    const requireRuntime = () => requireRuntimeFor(manageAccountId);
-                    /**
-                     * The scaffold every management action shares.
-                     *
-                     * Six actions used to spell it out one after another: resolve the
-                     * account, check the scope, log, answer a dry run, call the
-                     * runtime, log again, build the result. A change to any of those —
-                     * the dry-run contract, say — was a six-place edit in the plugin's
-                     * largest file, and the one deliberate exception (createGroup does
-                     * not check a chat scope, because the chat does not exist yet) was
-                     * invisible among the copies (finding A12-06).
-                     *
-                     * The differences stay written at each call site: what to parse,
-                     * what to log, what to run, what to answer. Only the scaffold moved.
-                     */
-                    const runManage = async (spec) => {
-                        const parsed = spec.parse();
-                        const target = spec.target(parsed);
-                        if (target === undefined) {
-                            // Nothing to check a scope against yet, so the gate is coarser:
-                            // management must be enabled at all for this account.
-                            if (!(0, manage_1.isManagementEnabled)(manageScope)) {
-                                actionLog.warn(`clawgram ${spec.name} refused: management is not enabled`, {
-                                    accountId: manageAccountId,
-                                });
-                                throw new Error("clawgram: chat management is not enabled for this account — "
-                                    + `set channels.clawgram.accounts.${manageAccountId}.manageChats`);
-                            }
-                        }
-                        else if (!(0, manage_1.isChatManageable)(target, manageScope)) {
-                            actionLog.warn("clawgram management refused: chat outside manage scope", {
-                                accountId: manageAccountId,
-                                action: manageAction,
-                                target,
-                            });
-                            throw new Error(`clawgram: not-managed-chat ${target}`);
-                        }
-                        actionLog.info(`clawgram handleAction ${spec.name}`, {
-                            accountId: manageAccountId,
-                            dryRun: dryRun === true,
-                            ...spec.before(parsed),
-                        });
-                        if (dryRun === true) {
-                            return (0, core_1.jsonResult)({
-                                ok: true,
-                                dryRun: true,
-                                accountId: manageAccountId,
-                                ...(target === undefined ? {} : { chatId: target }),
-                            });
-                        }
-                        const gram = requireRuntime();
-                        spec.precondition?.(gram);
-                        const result = await spec.run(gram, parsed);
-                        actionLog.info(`clawgram handleAction ${spec.name} completed`, {
-                            accountId: manageAccountId,
-                            ...spec.after(parsed, result),
-                        });
-                        return (0, core_1.jsonResult)({ ok: true, accountId: manageAccountId, ...spec.result(parsed, result) });
-                    };
-                    if (manageAction === "createGroup") {
-                        return await runManage({
-                            name: "createGroup",
-                            parse: () => (0, manage_1.parseCreateGroupParams)(params),
-                            // A group being created is not in any scope yet.
-                            target: () => undefined,
-                            before: (p) => ({ users: p.users.length, hasAbout: Boolean(p.about) }),
-                            run: (gram, p) => gram.createGroup(p),
-                            after: (_p, created) => ({ chatId: created.chatId ?? null, missing: created.missing.length }),
-                            result: (_p, created) => ({ chatId: created.chatId, missing: created.missing }),
-                        });
-                    }
-                    if (manageAction === "addMembers") {
-                        return await runManage({
-                            name: "addMembers",
-                            parse: () => (0, manage_1.parseAddMembersParams)(params, toolContext),
-                            target: (p) => p.target,
-                            before: (p) => ({ target: p.target, users: p.users.length }),
-                            run: (gram, p) => gram.addChatMembers(p),
-                            after: (p, added) => ({
-                                target: p.target,
-                                requested: p.users.length,
-                                missing: added.missing.length,
-                            }),
-                            result: (p, added) => ({
-                                chatId: added.chatId ?? p.target,
-                                requested: p.users.length,
-                                // Telegram refuses silently-restricted invites per user; the
-                                // caller gets the ids so it can hand them an invite link.
-                                missing: added.missing,
-                            }),
-                        });
-                    }
-                    if (manageAction === "removeMember") {
-                        return await runManage({
-                            name: "removeMember",
-                            parse: () => (0, manage_1.parseRemoveMemberParams)(params, toolContext),
-                            target: (p) => p.target,
-                            before: (p) => ({ target: p.target, ban: p.ban }),
-                            run: (gram, p) => gram.removeChatMember(p),
-                            after: (p) => ({ target: p.target, ban: p.ban }),
-                            result: (p) => ({ chatId: p.target, user: p.user, banned: p.ban }),
-                        });
-                    }
-                    if (manageAction === "promoteAdmin" || manageAction === "demoteAdmin") {
-                        const promote = manageAction === "promoteAdmin";
-                        return await runManage({
-                            // Both spellings log as `setAdmin`, as they always have.
-                            name: "setAdmin",
-                            parse: () => (promote
-                                ? (0, manage_1.parsePromoteAdminParams)(params, toolContext)
-                                : (0, manage_1.parseDemoteAdminParams)(params, toolContext)),
-                            target: (p) => p.target,
-                            before: (p) => ({ target: p.target, isAdmin: p.isAdmin, hasRank: Boolean(p.rank) }),
-                            run: (gram, p) => gram.setChatAdmin(p),
-                            after: (p) => ({ target: p.target, isAdmin: p.isAdmin }),
-                            result: (p) => ({
-                                chatId: p.target,
-                                user: p.user,
-                                isAdmin: p.isAdmin,
-                                ...(p.rank ? { rank: p.rank } : {}),
-                            }),
-                        });
-                    }
-                    if (manageAction === "transferOwnership") {
-                        return await runManage({
-                            name: "transferOwnership",
-                            parse: () => (0, manage_1.parseTransferOwnershipParams)(params, toolContext),
-                            target: (p) => p.target,
-                            before: (p) => ({ target: p.target }),
-                            // The password stays inside the runtime: it is read from the
-                            // account config at start-up and never travels through dispatch
-                            // arguments, which are one log call away from the journal.
-                            precondition: (gram) => {
-                                if (!gram.twoFaPassword) {
-                                    throw new Error("clawgram: ownership transfer requires twoFaPassword in the account config "
-                                        + "(the account's Telegram 2FA password, as a literal or a SecretRef)");
-                                }
-                            },
-                            run: (gram, p) => gram.transferChatOwnership(p),
-                            after: (p) => ({ target: p.target }),
-                            result: (p) => ({ chatId: p.target, newOwner: p.user }),
-                        });
-                    }
-                    // inviteLink — the only management action left.
-                    return await runManage({
-                        name: "inviteLink",
-                        parse: () => (0, manage_1.parseInviteLinkParams)(params, toolContext),
-                        target: (p) => p.target,
-                        before: (p) => ({
-                            target: p.target,
-                            hasExpiry: p.expireDate !== undefined,
-                            usageLimit: p.usageLimit ?? null,
-                            requestNeeded: p.requestNeeded,
-                        }),
-                        run: (gram, p) => gram.exportChatInviteLink(p),
-                        after: (p, exported) => ({ target: p.target, hasLink: Boolean(exported.link) }),
-                        result: (p, exported) => ({ chatId: p.target, link: exported.link }),
-                    });
-                }
-                // Core normalizes whichever of these it filled in to a local path (see
-                // `mediaSourceParams` above); `mediaUrl` stays a URL, which GramJS
-                // accepts as well.
-                const attachedFile = (0, param_readers_1.readStringParam)(params, "filePath")
-                    ?? (0, param_readers_1.readStringParam)(params, "path")
-                    ?? (0, param_readers_1.readStringParam)(params, "media")
-                    ?? (0, param_readers_1.readStringParam)(params, "mediaUrl");
-                // Core dispatches `upload-file`; `sendAttachment` is its legacy alias
-                // and arrives from older callers. A plain `send` carrying a file lands
-                // here too — `openclaw message send --media` does exactly that, and
-                // routing it to the text path dropped the file without a word.
-                if (canonical === "upload-file" || (canonical === "send" && attachedFile)) {
-                    const rawUploadTo = (0, helpers_1.resolveActionTarget)(params, toolContext);
-                    const uploadTo = (0, helpers_1.normalizeOutboundTarget)(rawUploadTo);
-                    const uploadAccountId = resolveRuntimeAccountId(cfg, accountId);
-                    if (!uploadAccountId) {
-                        throw new Error("clawgram: no configured account found");
-                    }
-                    // Та же граница, что у `send`: файл наружу — такое же исходящее.
-                    if (!(0, send_scope_1.isChatSendable)(uploadTo, resolveAccountSendChats(cfg, uploadAccountId))) {
-                        refuseOutboundOutsideScope("upload-file", uploadAccountId, uploadTo);
-                    }
-                    const file = attachedFile;
-                    if (!file) {
-                        throw new Error("clawgram: upload-file requires filePath, path, media, or mediaUrl");
-                    }
-                    // Before anything else about the message is considered: an
-                    // out-of-scope path is refused, not sent and then regretted.
-                    (0, media_1.assertLocalMediaWithinRoots)(file, allowedMediaRoots);
-                    const captionText = (0, helpers_1.readMessageText)(params) || ((0, param_readers_1.readStringParam)(params, "caption") ?? "");
-                    // A caption is optional, but the silent-reply sentinel must never
-                    // reach Telegram as one — same reasoning as the `send` path below.
-                    const caption = captionText.trim() && (0, helpers_1.isSilentReplyText)(captionText)
-                        ? ""
-                        : captionText.replaceAll("\\n", "\n");
-                    const uploadReplyToId = (0, param_readers_1.readStringOrNumberParam)(params, "replyToId") ?? (0, param_readers_1.readStringOrNumberParam)(params, "replyTo");
-                    const uploadThreadId = (0, param_readers_1.readStringOrNumberParam)(params, "threadId");
-                    const asVoice = (0, helpers_1.readVoiceNoteFlag)(params);
-                    actionLog.info("clawgram handleAction upload-file", {
-                        accountId: uploadAccountId,
-                        dryRun: dryRun === true,
-                        to: uploadTo,
-                        hasCaption: Boolean(caption),
-                        replyToId: uploadReplyToId ?? null,
-                        threadId: uploadThreadId ?? null,
-                        asVoice,
-                    });
-                    if (dryRun === true) {
-                        return (0, core_1.jsonResult)({
-                            ok: true,
-                            dryRun: true,
-                            to: uploadTo,
-                            accountId: uploadAccountId,
-                        });
-                    }
-                    const uploadGram = runtimes.get(uploadAccountId);
-                    if (!uploadGram) {
-                        throw new Error(`clawgram: runtime not found for account ${uploadAccountId}`);
-                    }
-                    const uploaded = await uploadGram.sendMedia({
-                        target: uploadTo,
-                        file,
-                        caption: caption || undefined,
-                        // Same resolution as the text `send`: per-call value wins, an
-                        // omitted one inherits the account format (2.15.0). A caption is
-                        // the same prose as a message and renders identically.
-                        parseMode: (0, helpers_1.resolveOutboundParseMode)(params, cfg, uploadAccountId),
-                        replyToMessageId: (0, helpers_1.resolveReplyToMessageIdForTarget)(rawUploadTo, uploadReplyToId),
-                        messageThreadId: (0, helpers_1.parseOptionalThreadId)(uploadThreadId),
-                        asVoice,
-                    });
-                    actionLog.info("clawgram handleAction upload-file completed", {
-                        accountId: uploadAccountId,
-                        to: uploadTo,
-                        sentMessageId: String(uploaded?.id ?? ""),
-                    });
-                    return (0, core_1.jsonResult)({
-                        ok: true,
-                        to: uploadTo,
-                        accountId: uploadAccountId,
-                        messageId: String(uploaded?.id ?? ""),
-                    });
-                }
-                if (action !== "send") {
-                    throw new Error(`clawgram: unsupported message action ${action}`);
-                }
-                const rawTo = (0, helpers_1.resolveActionTarget)(params, toolContext);
-                const targetKind = (0, helpers_1.inferOutboundTargetKind)(rawTo);
-                const to = (0, helpers_1.normalizeOutboundTarget)(rawTo);
-                const replyToId = (0, param_readers_1.readStringOrNumberParam)(params, "replyToId") ?? (0, param_readers_1.readStringOrNumberParam)(params, "replyTo");
-                const threadId = (0, param_readers_1.readStringOrNumberParam)(params, "threadId");
-                const messageThreadId = (0, helpers_1.parseOptionalThreadId)(threadId);
-                // Omitting parseMode inherits the account's configured mode rather
-                // than falling back to plain text (2.13.0): an account set to `html`
-                // used to render replies as HTML and these sends as raw markup.
-                const parseMode = (0, helpers_1.resolveOutboundParseMode)(params, cfg, (0, helpers_1.resolveConfiguredAccountId)(cfg, accountId) ?? accountId ?? "default");
-                actionLog.info("clawgram handleAction send", {
-                    requestedAccountId: accountId,
-                    dryRun: dryRun === true,
-                    rawTo,
-                    to,
-                    targetKind,
-                    replyToId: replyToId ?? null,
-                    threadId: threadId ?? null,
-                    parseMode: parseMode ?? null,
-                    toolContextCurrentChannelId: toolContext?.currentChannelId ?? null,
-                });
-                const resolvedAccountId = resolveRuntimeAccountId(cfg, accountId);
-                if (!resolvedAccountId) {
-                    throw new Error("clawgram: no configured account found");
-                }
-                // Проверка ПОСЛЕ резолва аккаунта и ДО любой доставки: область задаётся
-                // на аккаунт, а отказ должен случиться раньше, чем цель разрешена в
-                // Telegram-сущность — resolve сам по себе виден собеседнику (A5-12).
-                if (!(0, send_scope_1.isChatSendable)(to, resolveAccountSendChats(cfg, resolvedAccountId))) {
-                    refuseOutboundOutsideScope("send", resolvedAccountId, to);
-                }
-                const currentChannelId = toolContext?.currentChannelId?.trim() ?? "";
-                const currentMessageId = toolContext?.currentMessageId;
-                const currentChannelTarget = currentChannelId ? (0, helpers_1.normalizeOutboundTarget)(currentChannelId) : "";
-                const sendingToCurrentGroup = Boolean(currentChannelTarget &&
-                    currentChannelTarget === to &&
-                    targetKind === "group");
-                if (sendingToCurrentGroup &&
-                    !replyToId &&
-                    currentMessageId !== null &&
-                    currentMessageId !== undefined &&
-                    (0, group_visible_reply_guard_1.hasRecentVisibleGroupReply)({
-                        accountId: resolvedAccountId,
-                        chatId: to,
-                        currentMessageId,
-                    })) {
-                    actionLog.warn("clawgram suppressing duplicate visible group reply", {
-                        accountId: resolvedAccountId,
-                        to,
-                        currentMessageId: String(currentMessageId),
-                        toolContextCurrentChannelId: currentChannelId || null,
-                    });
-                    // A dry run reports the suppression instead of impersonating it: the
-                    // caller asked what would happen, and what would happen is nothing.
-                    return (0, core_1.jsonResult)({
-                        ok: true,
-                        ...(dryRun ? { dryRun: true } : {}),
-                        suppressedDuplicate: true,
-                        to,
-                        accountId: resolvedAccountId,
-                    });
-                }
-                // Whom to greet is decided by the message this turn is answering, not
-                // by whoever spoke last. An agent replying to a request rarely passes
-                // `replyToId`, and until 2026-08-10 that fell through to the most
-                // recent sender: in an interleaved chat the owner's report went out
-                // addressed to a colleague who had asked something else entirely.
-                // A dry run peeks: consuming the address here left the real send with
-                // no greeting, so a rehearsal silently changed the message that went
-                // out afterwards.
-                const groupReplyAddress = (dryRun ? group_reply_address_1.peekGroupReplyAddress : group_reply_address_1.consumeGroupReplyAddress)({
-                    accountId: resolvedAccountId,
-                    chatId: to,
-                    replyToId: replyToId ?? currentMessageId,
-                });
-                const requestedText = (0, helpers_1.readMessageText)(params).replaceAll("\\n", "\n");
-                // `NO_REPLY` is OpenClaw's "say nothing" sentinel. The inbound pipeline
-                // and core both strip it, but an explicit `message.action` call is
-                // neither path — and the SDK itself prompts agents to send a message
-                // and *then* answer NO_REPLY, so the two are one slip apart. Posting
-                // the token into a work chat looks like the assistant malfunctioning.
-                //
-                // Checked before the reply-address prefix on purpose: prefixing first
-                // leaves "Name: " behind, which is not empty, and the token goes out.
-                // That is precisely how it once reached the inbound path.
-                if (requestedText.trim() && (0, helpers_1.isSilentReplyText)(requestedText)) {
-                    actionLog.info("clawgram suppressing silent send", {
-                        accountId: resolvedAccountId,
-                        to,
-                    });
-                    return (0, core_1.jsonResult)({
-                        ok: true,
-                        skipped: "silent",
-                        sent: false,
-                        to,
-                        accountId: resolvedAccountId,
-                    });
-                }
-                const text = (0, helpers_1.prefixReplyTextToAddress)(requestedText, groupReplyAddress);
-                if (!text) {
-                    throw new Error("clawgram: message text is required");
-                }
-                if (dryRun) {
-                    return (0, core_1.jsonResult)({
-                        ok: true,
-                        dryRun: true,
-                        to,
-                        accountId: resolvedAccountId,
-                    });
-                }
-                const gram = runtimes.get(resolvedAccountId);
-                if (!gram) {
-                    throw new Error(`clawgram: runtime not found for account ${resolvedAccountId}`);
-                }
-                const sent = await gram.sendText({
-                    target: to,
-                    text,
-                    targetKind,
-                    replyToMessageId: (0, helpers_1.resolveReplyToMessageIdForTarget)(rawTo, replyToId),
-                    messageThreadId,
-                    parseMode,
-                });
-                if (sendingToCurrentGroup &&
-                    !replyToId &&
-                    currentMessageId !== null &&
-                    currentMessageId !== undefined) {
-                    (0, group_visible_reply_guard_1.rememberVisibleGroupReply)({
-                        accountId: resolvedAccountId,
-                        chatId: to,
-                        currentMessageId,
-                    });
-                }
-                // The turn has now spoken for itself. Recorded for every send into the
-                // chat this turn came from — with or without an explicit replyToId —
-                // so that core delivering the turn's final text a few seconds later
-                // can be recognised as an echo of this same answer.
-                if (currentMessageId !== null && currentMessageId !== undefined) {
-                    (0, group_visible_reply_guard_1.rememberTurnSend)({
-                        accountId: resolvedAccountId,
-                        chatId: to,
-                        currentMessageId,
-                    });
-                }
-                actionLog.info("clawgram handleAction send completed", {
-                    accountId: resolvedAccountId,
-                    to,
-                    replyToId: replyToId ?? null,
-                    sentMessageId: String(sent?.id ?? ""),
-                });
-                return (0, core_1.jsonResult)({
-                    ok: true,
-                    to,
-                    accountId: resolvedAccountId,
-                    messageId: String(sent?.id ?? ""),
-                });
+                // Reads first, then management, then the outbound actions — which end
+                // with `send` and refuse whatever nobody claimed. Each module answers
+                // `undefined` for an action that is not its own (B5-13, part 3).
+                return (await (0, actions_read_1.handleReadAction)(context))
+                    ?? (await (0, actions_manage_1.handleManageAction)(context))
+                    ?? (await (0, actions_send_1.handleSendAction)(context));
             },
         },
         outbound: (0, outbound_1.createOutbound)(runtimes),