nodal-agents 0.7.8 → 0.7.95

package/runner.js

@@ -1438,17 +1438,30 @@ var init_model_catalog = __esm({
           contextWindow: 4e5
         }
       ],
+      // ─── Native Google (generativelanguage.googleapis.com) ──────────────────────
+      // gemini-2.0-flash and gemini-2.5-pro were verified live (2026-07-12, real
+      // key) to 404 / be shut down — dropped per product decision (family 3.x
+      // only in the native catalog; gemini-2.5-flash deliberately NOT added).
+      // Both entries below confirmed alive via ai.google.dev/gemini-api/docs/models
+      // and openrouter.ai/google/… (2026-07-12): 1M-token context window, native
+      // reasoning ("thinking") models, multimodal (text/image/video/audio/PDF).
+      // forcedToolChoice:false — matches this file's reasoning-model convention
+      // (MiniMax M3, Moonshot, GLM 5.2): don't force tool_choice on a thinking
+      // model, let the runtime completion floor relax it to 'auto'. google.ts's
+      // fetch shim injects generationConfig.thinkingConfig for these two entries
+      // (reasoning:true gates it) so the API returns the chain-of-thought the
+      // execute.ts round-trip needs across tool-call turns.
       google: [
         {
-          modelId: "gemini-2.0-flash",
-          label: "Gemini 2.0 Flash",
-          capabilities: { tools: true, forcedToolChoice: true },
+          modelId: "gemini-3.5-flash",
+          label: "Gemini 3.5 Flash",
+          capabilities: { tools: true, forcedToolChoice: false, reasoning: true },
           contextWindow: 1048576
         },
         {
-          modelId: "gemini-2.5-pro",
-          label: "Gemini 2.5 Pro",
-          capabilities: { tools: true, forcedToolChoice: true },
+          modelId: "gemini-3.1-pro-preview",
+          label: "Gemini 3.1 Pro (preview)",
+          capabilities: { tools: true, forcedToolChoice: false, reasoning: true },
           contextWindow: 1048576
         }
       ],
@@ -1536,23 +1549,30 @@ var init_model_catalog = __esm({
           contextWindow: 1048576,
           providerOrder: ["deepseek"]
         },
-        // Google
+        // Google — all three are thinking models on OpenRouter (supported_parameters
+        // includes "reasoning", verified via openrouter.ai/google/… 2026-07-12).
+        // reasoning:true makes the OpenRouter provider enable reasoning + round-trip
+        // reasoning_details across tool-call turns. Unlike the M-series/Kimi/GLM
+        // reasoning entries above, forcedToolChoice stays true here — no evidence
+        // (live or documented) that OpenRouter's Gemini routes reject a forced
+        // tool_choice, matching how deepseek/deepseek-v4-flash (also reasoning:true)
+        // keeps forcedToolChoice:true in this file.
         {
           modelId: "google/gemini-3.1-flash-lite-preview",
           label: "Gemini 3.1 Flash Lite (preview)",
-          capabilities: { tools: true, forcedToolChoice: true },
+          capabilities: { tools: true, forcedToolChoice: true, reasoning: true },
           contextWindow: 1048576
         },
         {
           modelId: "google/gemini-3.1-pro-preview",
           label: "Gemini 3.1 Pro (preview)",
-          capabilities: { tools: true, forcedToolChoice: true },
+          capabilities: { tools: true, forcedToolChoice: true, reasoning: true },
           contextWindow: 1048576
         },
         {
           modelId: "google/gemini-3.5-flash",
           label: "Gemini 3.5 Flash",
-          capabilities: { tools: true, forcedToolChoice: true },
+          capabilities: { tools: true, forcedToolChoice: true, reasoning: true },
           contextWindow: 1048576
         },
         {
@@ -1630,8 +1650,8 @@ var init_model_catalog = __esm({
       "claude-haiku-4-5-20251001",
       "gpt-5",
       "gpt-5-mini",
-      "gemini-2.0-flash",
-      "gemini-2.5-pro",
+      "gemini-3.5-flash",
+      "gemini-3.1-pro-preview",
       "mistral-large-latest",
       "MiniMax-M3",
       "kimi-k2.6",
@@ -2352,6 +2372,17 @@ var init_schedules = __esm({
         // forces the agent to send the user a success confirmation before finishing.
         // Default false → the cron runs silently (the user must opt in per schedule).
         notifyOnSuccess: boolean5("notify_on_success").notNull().default(false),
+        // Explicit notify channel choice (B1, notify-channel-choice plan). One of
+        // 'telegram'|'discord'|'slack'|'whatsapp', or NULL = auto (the historical
+        // behavior: first active channel by CHANNEL_PRIORITY — see run-schedules.ts).
+        // Choosing a channel here LINKS chatId resolution to it: the owner
+        // conversation resolved at fire time is the owner's conversation ON THIS
+        // CHANNEL, not whichever channel happened to win priority. 'whatsapp' is
+        // accepted at the DB layer for forward-compat but the UI does not offer it
+        // yet — no outbound send tool exists for whatsapp (TOOL_ONLY_DELIVERY_CHANNELS,
+        // execute.ts), so a whatsapp notify would only ever reach the user through
+        // deliver-results.ts's adapter-direct path, never a mid-run agent send.
+        notifyChannel: text5("notify_channel"),
         // Per-schedule daily cost ceiling in USD (Event Triggers, Brique 3). Rolled
         // up against agent_jobs.total_cost_usd for this schedule since the start
         // of its local day — see runScheduleTick (apps/runner/src/cron/run-schedules.ts).
@@ -2367,7 +2398,11 @@ var init_schedules = __esm({
         check3("agent_schedules_type_check", sql3`${table.type} IN ('cron','heartbeat')`),
         check3(
           "agent_schedules_last_status_check",
-          sql3`${table.lastStatus} IN ('success','failed','no_action','budget_exhausted') OR ${table.lastStatus} IS NULL`
+          sql3`${table.lastStatus} IN ('success','failed','no_action','budget_exhausted','notify_unreachable') OR ${table.lastStatus} IS NULL`
+        ),
+        check3(
+          "agent_schedules_notify_channel_check",
+          sql3`${table.notifyChannel} IN ('telegram','discord','slack','whatsapp') OR ${table.notifyChannel} IS NULL`
         )
       ]
     );
@@ -2898,7 +2933,17 @@ var init_memory2 = __esm({
 });
 
 // ../../packages/db/src/schema/webhooks.ts
-import { pgTable as pgTable13, text as text13, uuid as uuid13, boolean as boolean8, integer as integer7, timestamp as timestamp13, index as index12 } from "drizzle-orm/pg-core";
+import {
+  pgTable as pgTable13,
+  text as text13,
+  uuid as uuid13,
+  boolean as boolean8,
+  integer as integer7,
+  timestamp as timestamp13,
+  index as index12,
+  check as check10
+} from "drizzle-orm/pg-core";
+import { sql as sql11 } from "drizzle-orm";
 var webhookTriggers;
 var init_webhooks = __esm({
   "../../packages/db/src/schema/webhooks.ts"() {
@@ -2919,10 +2964,30 @@ var init_webhooks = __esm({
         secret: text13("secret"),
         lastTriggeredAt: timestamp13("last_triggered_at", { withTimezone: true }),
         triggerCount: integer7("trigger_count").default(0),
+        // B2 (notify-channel-choice plan): same pair of columns as
+        // agent_schedules (see schedules.ts), same mechanic — the schedules
+        // brique (B1) established the pattern, this just closes the gap the plan
+        // identified: webhooks had no notify at all, not by design, just because
+        // the original webhooks brique scoped delivery to the HTTP caller (202 +
+        // jobId) and never to the owner. Default false → firing stays silent
+        // unless opted in per trigger.
+        notifyOnSuccess: boolean8("notify_on_success").notNull().default(false),
+        // Explicit notify channel choice, NULL = auto (first active channel by
+        // CHANNEL_PRIORITY — see routes/webhook.ts). Unlike agent_schedules,
+        // there is no legacy webhook-notify behavior to preserve, so "auto" here
+        // is a plain first-active-channel resolution from the start (no
+        // telegram-only wrapper).
+        notifyChannel: text13("notify_channel"),
         createdAt: timestamp13("created_at", { withTimezone: true }).defaultNow(),
         updatedAt: timestamp13("updated_at", { withTimezone: true }).defaultNow()
       },
-      (table) => [index12("idx_webhook_triggers_entity_id").on(table.entityId)]
+      (table) => [
+        index12("idx_webhook_triggers_entity_id").on(table.entityId),
+        check10(
+          "webhook_triggers_notify_channel_check",
+          sql11`${table.notifyChannel} IN ('telegram','discord','slack','whatsapp') OR ${table.notifyChannel} IS NULL`
+        )
+      ]
     );
   }
 });
@@ -2939,7 +3004,7 @@ import {
   index as index13,
   unique as unique3
 } from "drizzle-orm/pg-core";
-import { sql as sql11 } from "drizzle-orm";
+import { sql as sql12 } from "drizzle-orm";
 var agentSkills, skillVersions, skillConnectors, agentSkillAssignments;
 var init_skills = __esm({
   "../../packages/db/src/schema/skills.ts"() {
@@ -2959,9 +3024,9 @@ var init_skills = __esm({
         description: text14("description"),
         defaultContent: text14("default_content"),
         contentOverridden: boolean9("content_overridden").default(false),
-        requiredConfig: jsonb7("required_config").default(sql11`'[]'::jsonb`),
-        operations: jsonb7("operations").default(sql11`'[]'::jsonb`),
-        requiredBuiltins: text14("required_builtins").array().notNull().default(sql11`'{}'::text[]`),
+        requiredConfig: jsonb7("required_config").default(sql12`'[]'::jsonb`),
+        operations: jsonb7("operations").default(sql12`'[]'::jsonb`),
+        requiredBuiltins: text14("required_builtins").array().notNull().default(sql12`'{}'::text[]`),
         // ─── Community-installed skills (open Agent Skills / SKILL.md format) ───
         // is_community = true for skills installed at runtime from an external
         // source (vs system catalog or user-authored custom skills). source is the
@@ -3022,7 +3087,7 @@ var init_skills = __esm({
       },
       (table) => [
         index13("idx_skill_versions_entity_id").on(table.entityId),
-        index13("idx_skill_versions_skill_id").on(table.skillId, sql11`${table.version} DESC`)
+        index13("idx_skill_versions_skill_id").on(table.skillId, sql12`${table.version} DESC`)
       ]
     );
     skillConnectors = pgTable14(
@@ -3044,7 +3109,7 @@ var init_skills = __esm({
         entityId: uuid14("entity_id").notNull().references(() => entities.id, { onDelete: "cascade" }),
         agentId: uuid14("agent_id").notNull().references(() => agents.id, { onDelete: "cascade" }),
         skillId: uuid14("skill_id").notNull().references(() => agentSkills.id, { onDelete: "cascade" }),
-        approvalOverrides: jsonb7("approval_overrides").default(sql11`'{}'::jsonb`),
+        approvalOverrides: jsonb7("approval_overrides").default(sql12`'{}'::jsonb`),
         useCustomInstructions: boolean9("use_custom_instructions").notNull().default(false),
         enabledOperations: text14("enabled_operations").array(),
         // Per-skill × per-agent authorization to EXECUTE the skill's bundled scripts
@@ -3085,9 +3150,9 @@ import {
   timestamp as timestamp15,
   index as index14,
   uniqueIndex as uniqueIndex2,
-  check as check10
+  check as check11
 } from "drizzle-orm/pg-core";
-import { sql as sql12 } from "drizzle-orm";
+import { sql as sql13 } from "drizzle-orm";
 var mcpServers, agentMcpServers, mcpConnections;
 var init_mcp = __esm({
   "../../packages/db/src/schema/mcp.ts"() {
@@ -3104,8 +3169,8 @@ var init_mcp = __esm({
         transport: text15("transport").notNull(),
         url: text15("url"),
         command: text15("command"),
-        args: text15("args").array().default(sql12`'{}'::text[]`),
-        envVars: jsonb8("env_vars").default(sql12`'{}'::jsonb`),
+        args: text15("args").array().default(sql13`'{}'::text[]`),
+        envVars: jsonb8("env_vars").default(sql13`'{}'::jsonb`),
         // Encrypted (enc:v1: blob) credential for HTTP MCP servers — same pattern
         // as connectors.api_key. NULL for servers that need no auth.
         apiKey: text15("api_key"),
@@ -3123,10 +3188,10 @@ var init_mcp = __esm({
         updatedAt: timestamp15("updated_at", { withTimezone: true }).defaultNow()
       },
       (table) => [
-        check10("mcp_servers_transport_check", sql12`${table.transport} IN ('http','stdio')`),
-        check10(
+        check11("mcp_servers_transport_check", sql13`${table.transport} IN ('http','stdio')`),
+        check11(
           "mcp_servers_auth_scheme_check",
-          sql12`${table.authScheme} IN ('header','query','bearer') OR ${table.authScheme} IS NULL`
+          sql13`${table.authScheme} IN ('header','query','bearer') OR ${table.authScheme} IS NULL`
         )
         // Multi-instance brique (migration 0017): the (entity_id, slug) UNIQUE
         // index was dropped to allow multiple instances of the same MCP server
@@ -3159,7 +3224,7 @@ var init_mcp = __esm({
         entityId: uuid15("entity_id").notNull().references(() => entities.id, { onDelete: "cascade" }),
         slug: text15("slug").notNull(),
         active: boolean10("active").notNull().default(true),
-        toolConfig: jsonb8("tool_config").notNull().default(sql12`'{}'::jsonb`),
+        toolConfig: jsonb8("tool_config").notNull().default(sql13`'{}'::jsonb`),
         createdAt: timestamp15("created_at", { withTimezone: true }).notNull().defaultNow(),
         updatedAt: timestamp15("updated_at", { withTimezone: true }).notNull().defaultNow()
       },
@@ -3185,10 +3250,10 @@ import {
   jsonb as jsonb9,
   timestamp as timestamp16,
   index as index15,
-  check as check11,
+  check as check12,
   unique as unique4
 } from "drizzle-orm/pg-core";
-import { sql as sql13 } from "drizzle-orm";
+import { sql as sql14 } from "drizzle-orm";
 var configuratorSessions, agentPlugins, rateLimits;
 var init_misc = __esm({
   "../../packages/db/src/schema/misc.ts"() {
@@ -3201,7 +3266,7 @@ var init_misc = __esm({
         id: uuid16("id").primaryKey().defaultRandom(),
         entityId: uuid16("entity_id").notNull().references(() => entities.id, { onDelete: "cascade" }),
         agentId: uuid16("agent_id").references(() => agents.id, { onDelete: "cascade" }),
-        messages: jsonb9("messages").notNull().default(sql13`'[]'::jsonb`),
+        messages: jsonb9("messages").notNull().default(sql14`'[]'::jsonb`),
         status: text16("status").notNull().default("active"),
         turnCount: integer9("turn_count").notNull().default(0),
         createdAt: timestamp16("created_at", { withTimezone: true }).notNull().defaultNow(),
@@ -3221,7 +3286,7 @@ var init_misc = __esm({
         slug: text16("slug").notNull(),
         description: text16("description"),
         pluginType: text16("plugin_type").notNull(),
-        config: jsonb9("config").default(sql13`'{}'::jsonb`),
+        config: jsonb9("config").default(sql14`'{}'::jsonb`),
         active: boolean11("active").default(true),
         hook: text16("hook").notNull(),
         webhookUrl: text16("webhook_url"),
@@ -3229,13 +3294,13 @@ var init_misc = __esm({
         updatedAt: timestamp16("updated_at", { withTimezone: true }).defaultNow()
       },
       (table) => [
-        check11(
+        check12(
           "agent_plugins_plugin_type_check",
-          sql13`${table.pluginType} IN ('webhook','transform','schedule')`
+          sql14`${table.pluginType} IN ('webhook','transform','schedule')`
         ),
-        check11(
+        check12(
           "agent_plugins_hook_check",
-          sql13`${table.hook} IN ('pre_task','post_task','pre_tool','post_tool','on_memory_save')`
+          sql14`${table.hook} IN ('pre_task','post_task','pre_tool','post_tool','on_memory_save')`
         ),
         // R5 (audit #2 follow-up): the pglite test DDL (packages/db/src/tests/
         // helpers.ts) already assumed a per-entity unique slug here — same class
@@ -3365,8 +3430,8 @@ var init_agent_workspaces = __esm({
 });
 
 // ../../packages/db/src/schema/chat-messages.ts
-import { pgTable as pgTable20, text as text20, uuid as uuid20, timestamp as timestamp20, index as index18, check as check12 } from "drizzle-orm/pg-core";
-import { sql as sql14 } from "drizzle-orm";
+import { pgTable as pgTable20, text as text20, uuid as uuid20, timestamp as timestamp20, index as index18, check as check13 } from "drizzle-orm/pg-core";
+import { sql as sql15 } from "drizzle-orm";
 var conversations, chatMessages;
 var init_chat_messages = __esm({
   "../../packages/db/src/schema/chat-messages.ts"() {
@@ -3392,7 +3457,7 @@ var init_chat_messages = __esm({
       },
       (table) => [
         index18("idx_conversations_entity_agent").on(table.entityId, table.agentId, table.updatedAt),
-        check12("conversations_origin_check", sql14`${table.origin} IN ('user','onboarding')`)
+        check13("conversations_origin_check", sql15`${table.origin} IN ('user','onboarding')`)
       ]
     );
     chatMessages = pgTable20(
@@ -3413,7 +3478,7 @@ var init_chat_messages = __esm({
       },
       (table) => [
         index18("idx_chat_messages_conversation").on(table.conversationId, table.createdAt),
-        check12("chat_messages_role_check", sql14`${table.role} IN ('user','assistant')`)
+        check13("chat_messages_role_check", sql15`${table.role} IN ('user','assistant')`)
       ]
     );
   }
@@ -3451,11 +3516,11 @@ import {
   uuid as uuid22,
   timestamp as timestamp22,
   index as index19,
-  check as check13,
+  check as check14,
   unique as unique6,
   uniqueIndex as uniqueIndex4
 } from "drizzle-orm/pg-core";
-import { sql as sql15 } from "drizzle-orm";
+import { sql as sql16 } from "drizzle-orm";
 var telegramAllowedChats;
 var init_telegram_allowed_chats = __esm({
   "../../packages/db/src/schema/telegram-allowed-chats.ts"() {
@@ -3484,8 +3549,8 @@ var init_telegram_allowed_chats = __esm({
         unique6("telegram_allowed_chats_agent_chat_unique").on(table.agentId, table.chatId),
         index19("idx_telegram_allowed_chats_agent").on(table.agentId),
         index19("idx_telegram_allowed_chats_entity").on(table.entityId),
-        check13("telegram_allowed_chats_role_check", sql15`${table.role} IN ('owner','member')`),
-        check13("telegram_allowed_chats_status_check", sql15`${table.status} IN ('active','pending')`),
+        check14("telegram_allowed_chats_role_check", sql16`${table.role} IN ('owner','member')`),
+        check14("telegram_allowed_chats_status_check", sql16`${table.status} IN ('active','pending')`),
         // F1 (audit #2 remediation follow-up, migration 0060): concurrent
         // first-contact claims could each pass the "no owner yet" check before
         // either row committed, creating two role='owner' rows for one agent —
@@ -3493,7 +3558,7 @@ var init_telegram_allowed_chats = __esm({
         // resolveApprovalDeliveryTarget) does LIMIT 1 assuming uniqueness. A
         // partial unique index (owner rows only; 'member' rows are unrestricted)
         // closes the race at the DB level.
-        uniqueIndex4("telegram_allowed_chats_single_owner").on(table.agentId).where(sql15`${table.role} = 'owner'`)
+        uniqueIndex4("telegram_allowed_chats_single_owner").on(table.agentId).where(sql16`${table.role} = 'owner'`)
       ]
     );
   }
@@ -3508,10 +3573,10 @@ import {
   jsonb as jsonb10,
   timestamp as timestamp23,
   index as index20,
-  check as check14,
+  check as check15,
   unique as unique7
 } from "drizzle-orm/pg-core";
-import { sql as sql16 } from "drizzle-orm";
+import { sql as sql17 } from "drizzle-orm";
 var channelBindings;
 var init_channel_bindings = __esm({
   "../../packages/db/src/schema/channel-bindings.ts"() {
@@ -3540,9 +3605,9 @@ var init_channel_bindings = __esm({
         unique7("channel_bindings_agent_channel_unique").on(table.agentId, table.channel),
         index20("idx_channel_bindings_agent").on(table.agentId),
         index20("idx_channel_bindings_entity").on(table.entityId),
-        check14(
+        check15(
           "channel_bindings_channel_check",
-          sql16`${table.channel} IN ('telegram','discord','slack','whatsapp')`
+          sql17`${table.channel} IN ('telegram','discord','slack','whatsapp')`
         )
       ]
     );
@@ -3556,11 +3621,11 @@ import {
   uuid as uuid24,
   timestamp as timestamp24,
   index as index21,
-  check as check15,
+  check as check16,
   unique as unique8,
   uniqueIndex as uniqueIndex5
 } from "drizzle-orm/pg-core";
-import { sql as sql17 } from "drizzle-orm";
+import { sql as sql18 } from "drizzle-orm";
 var channelAllowedConversations;
 var init_channel_allowed_conversations = __esm({
   "../../packages/db/src/schema/channel-allowed-conversations.ts"() {
@@ -3596,24 +3661,24 @@ var init_channel_allowed_conversations = __esm({
         ),
         index21("idx_channel_allowed_conversations_agent").on(table.agentId),
         index21("idx_channel_allowed_conversations_entity").on(table.entityId),
-        check15(
+        check16(
           "channel_allowed_conversations_channel_check",
-          sql17`${table.channel} IN ('telegram','discord','slack','whatsapp')`
+          sql18`${table.channel} IN ('telegram','discord','slack','whatsapp')`
         ),
-        check15(
+        check16(
           "channel_allowed_conversations_kind_check",
-          sql17`${table.kind} IN ('private','group','channel','thread')`
+          sql18`${table.kind} IN ('private','group','channel','thread')`
         ),
-        check15("channel_allowed_conversations_role_check", sql17`${table.role} IN ('owner','member')`),
-        check15(
+        check16("channel_allowed_conversations_role_check", sql18`${table.role} IN ('owner','member')`),
+        check16(
           "channel_allowed_conversations_status_check",
-          sql17`${table.status} IN ('active','pending')`
+          sql18`${table.status} IN ('active','pending')`
         ),
         // Mirrors telegram_allowed_chats_single_owner (migration 0060): at most one
         // active-owner-authority row per (agent, channel) — same race this closes
         // (concurrent first-contact claims), scoped so each channel gets its OWN
         // owner rather than sharing one across an agent's whole multichannel surface.
-        uniqueIndex5("channel_allowed_conversations_single_owner").on(table.agentId, table.channel).where(sql17`${table.role} = 'owner'`)
+        uniqueIndex5("channel_allowed_conversations_single_owner").on(table.agentId, table.channel).where(sql18`${table.role} = 'owner'`)
       ]
     );
   }
@@ -19064,12 +19129,12 @@ var require_formdata_parser = __commonJS({
               return "failure";
             }
             if (bufferStartsWith(input, filenameBuffer, position)) {
-              let check16 = position.position + filenameBuffer.length;
-              if (input[check16] === 42) {
+              let check17 = position.position + filenameBuffer.length;
+              if (input[check17] === 42) {
                 position.position += 1;
-                check16 += 1;
+                check17 += 1;
               }
-              if (input[check16] !== 61 || input[check16 + 1] !== 34) {
+              if (input[check17] !== 61 || input[check17 + 1] !== 34) {
                 return "failure";
               }
               position.position += 12;
@@ -46554,7 +46619,7 @@ var require_Util = __commonJS({
       await client.rest.patch(route, { body: updatedItems, reason });
       return updatedItems;
     }
-    function basename6(path2, ext) {
+    function basename5(path2, ext) {
       const res = parse2(path2);
       return ext && res.ext.startsWith(ext) ? res.name : res.base.split("?")[0];
     }
@@ -46677,7 +46742,7 @@ var require_Util = __commonJS({
       resolveColor,
       discordSort,
       setPosition,
-      basename: basename6,
+      basename: basename5,
       cleanContent,
       cleanCodeBlockContent,
       parseWebhookURL,
@@ -65369,7 +65434,7 @@ var require_MessagePayload = __commonJS({
     var { DiscordjsError: DiscordjsError2, DiscordjsRangeError: DiscordjsRangeError2, ErrorCodes: ErrorCodes2 } = require_errors2();
     var { resolveFile } = require_DataResolver();
     var MessageFlagsBitField = require_MessageFlagsBitField();
-    var { basename: basename6, verifyString, resolvePartialEmoji } = require_Util();
+    var { basename: basename5, verifyString, resolvePartialEmoji } = require_Util();
     var getBaseInteraction = lazy(() => require_BaseInteraction());
     var MessagePayload = class {
       /**
@@ -65588,10 +65653,10 @@ var require_MessagePayload = __commonJS({
         let name;
         const findName = (thing) => {
           if (typeof thing === "string") {
-            return basename6(thing);
+            return basename5(thing);
           }
           if (thing.path) {
-            return basename6(thing.path);
+            return basename5(thing.path);
           }
           return "file.jpg";
         };
@@ -88043,7 +88108,7 @@ var require_EmbedBuilder = __commonJS({
 var require_AttachmentBuilder = __commonJS({
   "../../node_modules/.pnpm/discord.js@14.26.5/node_modules/discord.js/src/structures/AttachmentBuilder.js"(exports2, module2) {
     "use strict";
-    var { basename: basename6, flatten } = require_Util();
+    var { basename: basename5, flatten } = require_Util();
     var AttachmentBuilder = class _AttachmentBuilder {
       /**
        * @param {BufferResolvable|Stream} attachment The file
@@ -88103,7 +88168,7 @@ var require_AttachmentBuilder = __commonJS({
        * @readonly
        */
       get spoiler() {
-        return basename6(this.name).startsWith("SPOILER_");
+        return basename5(this.name).startsWith("SPOILER_");
       }
       toJSON() {
         return flatten(this);
@@ -156710,7 +156775,7 @@ var require_wait2 = __commonJS({
         return;
       }
       let prior = current;
-      const check16 = (backoff) => {
+      const check17 = (backoff) => {
         if (Date.now() > max2) {
           done(null, "timed-out");
         } else {
@@ -156718,7 +156783,7 @@ var require_wait2 = __commonJS({
             prior = current;
             current = Atomics.load(state, index22);
             if (current === prior) {
-              check16(backoff >= MAX_TIMEOUT ? MAX_TIMEOUT : backoff * 2);
+              check17(backoff >= MAX_TIMEOUT ? MAX_TIMEOUT : backoff * 2);
             } else {
               if (current === expected) done(null, "ok");
               else done(null, "not-equal");
@@ -156726,7 +156791,7 @@ var require_wait2 = __commonJS({
           }, backoff);
         }
       };
-      check16(1);
+      check17(1);
     }
     function waitDiff(state, index22, expected, timeout, done) {
       const max2 = Date.now() + timeout;
@@ -156735,7 +156800,7 @@ var require_wait2 = __commonJS({
         done(null, "ok");
         return;
       }
-      const check16 = (backoff) => {
+      const check17 = (backoff) => {
         if (Date.now() > max2) {
           done(null, "timed-out");
         } else {
@@ -156744,12 +156809,12 @@ var require_wait2 = __commonJS({
             if (current !== expected) {
               done(null, "ok");
             } else {
-              check16(backoff >= MAX_TIMEOUT ? MAX_TIMEOUT : backoff * 2);
+              check17(backoff >= MAX_TIMEOUT ? MAX_TIMEOUT : backoff * 2);
             }
           }, backoff);
         }
       };
-      check16(1);
+      check17(1);
     }
     module2.exports = { wait, waitDiff };
   }
@@ -199107,7 +199172,7 @@ var require_view2 = __commonJS({
     var path2 = __require("node:path");
     var fs4 = __require("node:fs");
     var dirname8 = path2.dirname;
-    var basename6 = path2.basename;
+    var basename5 = path2.basename;
     var extname2 = path2.extname;
     var join16 = path2.join;
     var resolve3 = path2.resolve;
@@ -199146,7 +199211,7 @@ var require_view2 = __commonJS({
         var root = roots[i];
         var loc = resolve3(root, name);
         var dir = dirname8(loc);
-        var file = basename6(loc);
+        var file = basename5(loc);
         path3 = this.resolve(dir, file);
       }
       return path3;
@@ -199176,7 +199241,7 @@ var require_view2 = __commonJS({
       if (stat11 && stat11.isFile()) {
         return path3;
       }
-      path3 = join16(dir, basename6(file, ext), "index" + ext);
+      path3 = join16(dir, basename5(file, ext), "index" + ext);
       stat11 = tryStat(path3);
       if (stat11 && stat11.isFile()) {
         return path3;
@@ -202138,9 +202203,9 @@ var require_content_disposition = __commonJS({
       if (typeof fallback === "string" && NON_LATIN1_REGEXP.test(fallback)) {
         throw new TypeError("fallback must be ISO-8859-1 string");
       }
-      var name = basename6(filename);
+      var name = basename5(filename);
       var isQuotedString = TEXT_REGEXP.test(name);
-      var fallbackName = typeof fallback !== "string" ? fallback && getlatin1(name) : basename6(fallback);
+      var fallbackName = typeof fallback !== "string" ? fallback && getlatin1(name) : basename5(fallback);
       var hasFallback = typeof fallbackName === "string" && fallbackName !== name;
       if (hasFallback || !isQuotedString || hasHexEscape(name)) {
         params["filename*"] = name;
@@ -202260,7 +202325,7 @@ var require_content_disposition = __commonJS({
       this.type = type;
       this.parameters = parameters;
     }
-    function basename6(path2) {
+    function basename5(path2) {
       const normalized = path2.replaceAll("\\", "/");
       let end = normalized.length;
       while (end > 0 && normalized[end - 1] === "/") {
@@ -204667,8 +204732,6 @@ var envSchema = z.object({
   EMBEDDING_PROVIDER: z.enum(["ollama", "openai", "keyword"]).default("keyword"),
   EMBEDDING_MODEL: z.string().optional(),
   EMBEDDING_BASE_URL: z.string().optional(),
-  // Delivery
-  TELEGRAM_BOT_TOKEN: z.string().optional(),
   // Auth
   AUTH_MODE: z.enum(["local-trust", "local-auth", "bearer-token"]).default("local-trust"),
   WORKER_SECRET: z.string().default(""),
@@ -204695,8 +204758,6 @@ var envSchema = z.object({
   // Enable reflection per entity via the dashboard toggle — NOT via this env var.
   // The other knobs gate WHICH jobs qualify and bound the pass.
   REFLECTION_ENABLED: z.string().default(""),
-  // Minimum job turns before a completed job is "substantial" enough to reflect on.
-  REFLECTION_MIN_TURNS: z.coerce.number().default(3),
   // Per-entity rolling-hour cap on reflection passes (rate limit / cost guard).
   REFLECTION_MAX_PER_HOUR: z.coerce.number().default(6),
   // Max LLM turns inside a single reflection pass (the reflection loop itself).
@@ -204839,7 +204900,7 @@ init_schema();
 
 // ../../packages/db/src/queries/credentials.ts
 init_credentials();
-import { eq, sql as sql18 } from "drizzle-orm";
+import { eq, sql as sql19 } from "drizzle-orm";
 
 // ../../packages/secrets/src/index.ts
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
@@ -205031,7 +205092,7 @@ async function getDecryptedCredentialById(db, credentialId) {
     if (provider?.supportsRefresh && payload.refreshToken) {
       try {
         payload = await db.transaction(async (tx) => {
-          await tx.execute(sql18`SELECT pg_advisory_xact_lock(hashtext(${credentialId}))`);
+          await tx.execute(sql19`SELECT pg_advisory_xact_lock(hashtext(${credentialId}))`);
           const [freshRow] = await tx.select().from(credentials).where(eq(credentials.id, credentialId));
           if (!freshRow) return payload;
           const freshPayload = decryptPayload(freshRow.payload);
@@ -205299,7 +205360,7 @@ async function attachAgentToOrchestrator(db, entityId, orchestratorId, agentSlug
 // ../../packages/db/src/repos/skills.ts
 init_agents();
 init_skills();
-import { eq as eq4, and as and3, or as or3, inArray as inArray2, sql as sql19 } from "drizzle-orm";
+import { eq as eq4, and as and3, or as or3, inArray as inArray2, sql as sql20 } from "drizzle-orm";
 async function createSkillRepo(db, entityId, input, reservedSlugs = []) {
   if (reservedSlugs.includes(input.slug)) {
     return { error: "slug_reserved" };
@@ -205342,7 +205403,7 @@ async function updateSkillRepo(db, entityId, skillId, patch) {
   }
   if (patch.createdBy === "agent") {
     set.createdBy = "agent";
-    set.patchCount = sql19`${agentSkills.patchCount} + 1`;
+    set.patchCount = sql20`${agentSkills.patchCount} + 1`;
   }
   await db.update(agentSkills).set(set).where(eq4(agentSkills.id, skillId));
   return { ok: true };
@@ -205378,7 +205439,7 @@ async function assignSkillRepo(db, entityId, input, systemSkillSlugs2) {
 }
 async function touchSkillsLastUsed(db, skillIds) {
   if (skillIds.length === 0) return;
-  await db.update(agentSkills).set({ lastUsedAt: sql19`now()` }).where(inArray2(agentSkills.id, skillIds));
+  await db.update(agentSkills).set({ lastUsedAt: sql20`now()` }).where(inArray2(agentSkills.id, skillIds));
 }
 async function transitionSkillLifecycle(db, thresholds) {
   const now = /* @__PURE__ */ new Date();
@@ -205392,21 +205453,21 @@ async function transitionSkillLifecycle(db, thresholds) {
     and3(
       eq4(agentSkills.createdBy, "agent"),
       eq4(agentSkills.state, "active"),
-      sql19`coalesce(${agentSkills.lastUsedAt}, ${agentSkills.createdAt}) < ${staleAt}`
+      sql20`coalesce(${agentSkills.lastUsedAt}, ${agentSkills.createdAt}) < ${staleAt}`
     )
   ).returning({ id: agentSkills.id });
   const archivedRows = await db.update(agentSkills).set({ state: "archived", archivedAt: now, updatedAt: now }).where(
     and3(
       eq4(agentSkills.createdBy, "agent"),
       eq4(agentSkills.state, "stale"),
-      sql19`coalesce(${agentSkills.lastUsedAt}, ${agentSkills.createdAt}) < ${archiveAt}`
+      sql20`coalesce(${agentSkills.lastUsedAt}, ${agentSkills.createdAt}) < ${archiveAt}`
     )
   ).returning({ id: agentSkills.id });
   const reactivatedRows = await db.update(agentSkills).set({ state: "active", updatedAt: now }).where(
     and3(
       eq4(agentSkills.createdBy, "agent"),
       eq4(agentSkills.state, "stale"),
-      sql19`${agentSkills.lastUsedAt} >= ${staleAt}`
+      sql20`${agentSkills.lastUsedAt} >= ${staleAt}`
     )
   ).returning({ id: agentSkills.id });
   return {
@@ -205425,25 +205486,25 @@ async function archiveAgentSkill(db, entityId, skillId) {
 
 // ../../packages/db/src/repos/retention.ts
 init_schema();
-import { sql as sql20, inArray as inArray3 } from "drizzle-orm";
+import { sql as sql21, inArray as inArray3 } from "drizzle-orm";
 async function pruneOldJobs(db, retentionDays, batchSize = 1e3) {
   if (retentionDays <= 0) {
     return { jobsDeleted: 0, toolCallsDeleted: 0 };
   }
-  const cutoffExpr = sql20`now() - make_interval(days => ${retentionDays})`;
+  const cutoffExpr = sql21`now() - make_interval(days => ${retentionDays})`;
   let jobsDeleted = 0;
   let toolCallsDeleted = 0;
   for (; ; ) {
     const batch = await db.transaction(async (tx) => {
       const prunableRows = await tx.select({ id: agentJobs.id }).from(agentJobs).where(
-        sql20`${agentJobs.status} IN ('completed','failed','cancelled')
+        sql21`${agentJobs.status} IN ('completed','failed','cancelled')
               AND ${agentJobs.completedAt} < ${cutoffExpr}`
       ).limit(batchSize);
       if (prunableRows.length === 0) {
         return null;
       }
       const jobIds = prunableRows.map((r) => r.id);
-      const [tcCountRow] = await tx.select({ n: sql20`count(*)::int` }).from(toolCalls).where(inArray3(toolCalls.jobId, jobIds));
+      const [tcCountRow] = await tx.select({ n: sql21`count(*)::int` }).from(toolCalls).where(inArray3(toolCalls.jobId, jobIds));
       const batchToolCallsDeleted = tcCountRow?.n ?? 0;
       await tx.delete(agentJobs).where(inArray3(agentJobs.id, jobIds));
       return { jobsDeleted: jobIds.length, toolCallsDeleted: batchToolCallsDeleted };
@@ -205458,7 +205519,7 @@ async function pruneOldJobs(db, retentionDays, batchSize = 1e3) {
 
 // ../../packages/db/src/repos/app-settings.ts
 init_schema();
-import { and as and4, eq as eq5, sql as sql21 } from "drizzle-orm";
+import { and as and4, eq as eq5, sql as sql22 } from "drizzle-orm";
 var INSTALL_NOTES_KEY = "install_notes";
 async function getEntitySetting(db, entityId, key) {
   const [row] = await db.select({ value: entitySettings.value }).from(entitySettings).where(and4(eq5(entitySettings.entityId, entityId), eq5(entitySettings.key, key))).limit(1);
@@ -205473,7 +205534,7 @@ import {
   eq as eq6,
   and as and5,
   or as or4,
-  sql as sql22,
+  sql as sql23,
   desc,
   asc,
   not,
@@ -206109,11 +206170,51 @@ function buildOpenAICompatibleModel(config) {
 }
 
 // ../../packages/llm/src/providers/google.ts
+init_src();
 import { createGoogleGenerativeAI } from "@ai-sdk/google";
+var GOOGLE_HOSTS = /* @__PURE__ */ new Set(["generativelanguage.googleapis.com"]);
+function requestHost(input) {
+  try {
+    if (typeof input === "string") return new URL(input).host;
+    if (input instanceof URL) return input.host;
+    return new URL(input.url).host;
+  } catch {
+    return void 0;
+  }
+}
+function injectGoogleThinking(body) {
+  if (typeof body !== "object" || body === null) return body;
+  const b = body;
+  const generationConfig = typeof b["generationConfig"] === "object" && b["generationConfig"] !== null ? b["generationConfig"] : {};
+  if (generationConfig["thinkingConfig"] === void 0) {
+    generationConfig["thinkingConfig"] = { includeThoughts: true };
+  }
+  b["generationConfig"] = generationConfig;
+  return body;
+}
+function createGoogleFetch(opts, baseFetch = globalThis.fetch) {
+  return async (input, init2) => {
+    const host = requestHost(input);
+    if (!opts.injectThinking || !host || !GOOGLE_HOSTS.has(host) || !init2?.body) {
+      return baseFetch(input, init2);
+    }
+    let patchedInit = init2;
+    try {
+      const rawBody = typeof init2.body === "string" ? init2.body : await new Response(init2.body).text();
+      const patched = injectGoogleThinking(JSON.parse(rawBody));
+      patchedInit = { ...init2, body: JSON.stringify(patched) };
+    } catch {
+    }
+    return baseFetch(input, patchedInit);
+  };
+}
 function buildGoogleModel(config) {
+  const entry = findModelCatalogEntry("google", config.model);
+  const isReasoning = entry?.capabilities.reasoning === true;
   const provider = createGoogleGenerativeAI({
     apiKey: config.apiKey,
-    ...config.baseURL ? { baseURL: config.baseURL } : {}
+    ...config.baseURL ? { baseURL: config.baseURL } : {},
+    fetch: createGoogleFetch({ injectThinking: isReasoning })
   });
   return provider(config.model);
 }
@@ -206346,7 +206447,13 @@ var nodalToolCallMiddleware = createNativeToolCallMiddleware(nodalNativeParser);
 // ../../packages/llm/src/providers/moonshot-schema.ts
 var SCHEMA_MAP_KEYS = /* @__PURE__ */ new Set(["properties", "patternProperties", "$defs", "definitions"]);
 var SCHEMA_LIST_KEYS = /* @__PURE__ */ new Set(["anyOf", "oneOf", "allOf", "prefixItems"]);
-var SCHEMA_NODE_KEYS = /* @__PURE__ */ new Set(["items", "contains", "not", "additionalProperties", "propertyNames"]);
+var SCHEMA_NODE_KEYS = /* @__PURE__ */ new Set([
+  "items",
+  "contains",
+  "not",
+  "additionalProperties",
+  "propertyNames"
+]);
 function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -206712,7 +206819,7 @@ function buildMiniMaxModel(config) {
 init_src();
 import { createOpenAICompatible as createOpenAICompatible2 } from "@ai-sdk/openai-compatible";
 var MOONSHOT_HOSTS = /* @__PURE__ */ new Set(["api.moonshot.ai", "api.moonshot.cn"]);
-function requestHost(input) {
+function requestHost2(input) {
   try {
     if (typeof input === "string") return new URL(input).host;
     if (input instanceof URL) return input.host;
@@ -206737,7 +206844,7 @@ function patchMoonshotRequestBody(body, opts) {
 function createMoonshotFetch(opts, baseFetch = globalThis.fetch) {
   const tolerant = createTolerantFetch(baseFetch);
   return async (input, init2) => {
-    const host = requestHost(input);
+    const host = requestHost2(input);
     if (!host || !MOONSHOT_HOSTS.has(host) || !init2?.body) {
       return tolerant(input, init2);
     }
@@ -207544,8 +207651,8 @@ function rowToMemory(row) {
 // ../../packages/memory/src/access-tracking.ts
 async function touchMemory(db, id, entityId) {
   await db.update(agentMemory).set({
-    lastAccessedAt: sql22`now()`,
-    accessCount: sql22`${agentMemory.accessCount} + 1`
+    lastAccessedAt: sql23`now()`,
+    accessCount: sql23`${agentMemory.accessCount} + 1`
   }).where(and5(eq6(agentMemory.id, id), eq6(agentMemory.entityId, entityId)));
 }
 async function touchMemories(db, ids, entityId) {
@@ -207563,9 +207670,9 @@ async function keywordSearch(db, query, filters, sort = "importance") {
   const conditions = buildWhereConditions({ entityId, agentId, skillTags, category });
   const orderBy = keywordOrderBy(sort);
   if (orTerms.length > 0) {
-    const tsv = sql22`"agent_memory"."search_tsv"`;
-    const tsq = sql22`to_tsquery('english', ${orTerms.join(" | ")})`;
-    const rows2 = await db.select().from(agentMemory).where(and5(...conditions, sql22`${tsv} @@ ${tsq}`)).orderBy(sql22`ts_rank(${tsv}, ${tsq}) DESC`, ...orderBy).limit(limit);
+    const tsv = sql23`"agent_memory"."search_tsv"`;
+    const tsq = sql23`to_tsquery('english', ${orTerms.join(" | ")})`;
+    const rows2 = await db.select().from(agentMemory).where(and5(...conditions, sql23`${tsv} @@ ${tsq}`)).orderBy(sql23`ts_rank(${tsv}, ${tsq}) DESC`, ...orderBy).limit(limit);
     return rows2;
   }
   const rows = await db.select().from(agentMemory).where(and5(...conditions)).orderBy(...orderBy).limit(limit);
@@ -207610,10 +207717,10 @@ function buildWhereConditions(filters) {
   if (skillTags && skillTags.length > 0) {
     const tagLiteral = pgTextArray(skillTags);
     conditions.push(
-      sql22`(
+      sql23`(
         ${agentMemory.skillTags} = '{}'::text[]
         OR ${agentMemory.skillTags} IS NULL
-        OR ${agentMemory.skillTags} && ${sql22.raw(tagLiteral)}::text[]
+        OR ${agentMemory.skillTags} && ${sql23.raw(tagLiteral)}::text[]
       )`
     );
   }
@@ -207654,10 +207761,10 @@ async function transitionMemoryLifecycle(db, opts) {
   const rows = await db.update(agentMemory).set({ archived: true, updatedAt: /* @__PURE__ */ new Date() }).where(
     and5(
       eq6(agentMemory.archived, false),
-      sql22`${agentMemory.source} IN ('agent','reflection')`,
-      sql22`${agentMemory.importance} <= ${opts.importanceMax}`,
-      sql22`coalesce(${agentMemory.accessCount}, 0) = 0`,
-      sql22`coalesce(${agentMemory.importanceLocked}, false) = false`,
+      sql23`${agentMemory.source} IN ('agent','reflection')`,
+      sql23`${agentMemory.importance} <= ${opts.importanceMax}`,
+      sql23`coalesce(${agentMemory.accessCount}, 0) = 0`,
+      sql23`coalesce(${agentMemory.importanceLocked}, false) = false`,
       lt(agentMemory.createdAt, cutoff)
     )
   ).returning({ id: agentMemory.id });
@@ -207862,16 +207969,16 @@ async function selectMemoriesForInjection(db, opts) {
   const baseConditions = and5(
     eq6(agentMemory.entityId, opts.entityId),
     eq6(agentMemory.archived, false),
-    sql22`(${agentMemory.validTo} IS NULL OR ${agentMemory.validTo} > now())`
+    sql23`(${agentMemory.validTo} IS NULL OR ${agentMemory.validTo} > now())`
   );
   const rawQuery = opts.query ?? "";
   const tokens = tokenizeQuery(rawQuery);
   let packed;
   if (tokens.length > 0) {
-    const tsv = sql22`"agent_memory"."search_tsv"`;
-    const tsq = sql22`to_tsquery('english', ${tokens.join(" | ")})`;
+    const tsv = sql23`"agent_memory"."search_tsv"`;
+    const tsq = sql23`to_tsquery('english', ${tokens.join(" | ")})`;
     const candidates = await db.select().from(agentMemory).where(baseConditions).orderBy(
-      sql22`ts_rank(${tsv}, ${tsq}) DESC`,
+      sql23`ts_rank(${tsv}, ${tsq}) DESC`,
       desc(agentMemory.importance),
       desc(agentMemory.lastAccessedAt)
     ).limit(MAX_CANDIDATES);
@@ -207902,7 +208009,7 @@ async function findMemoriesByFactSubstring(db, entityId, substring, limit = 5) {
     and5(
       eq6(agentMemory.entityId, entityId),
       eq6(agentMemory.archived, false),
-      sql22`(${agentMemory.validTo} IS NULL OR ${agentMemory.validTo} > now())`,
+      sql23`(${agentMemory.validTo} IS NULL OR ${agentMemory.validTo} > now())`,
       ilike2(agentMemory.fact, `%${substring}%`)
     )
   ).limit(limit);
@@ -208029,16 +208136,16 @@ var searchHistoryTool = {
   riskLevel: "read",
   execute: async (input, ctx) => {
     const limit = input.limit ?? 6;
-    const tsq = sql22`plainto_tsquery('simple', ${input.query})`;
-    const tsv = sql22`"agent_jobs"."search_tsv"`;
+    const tsq = sql23`plainto_tsquery('simple', ${input.query})`;
+    const tsv = sql23`"agent_jobs"."search_tsv"`;
     const rows = await ctx.db.select({
       job_id: agentJobs.id,
       agent: agents.slug,
       channel: agentJobs.channel,
       when: agentJobs.createdAt,
       task: agentJobs.task,
-      snippet: sql22`ts_headline('simple', coalesce(${agentJobs.searchText}, ${agentJobs.task}, ''), ${tsq}, 'StartSel=«, StopSel=», MaxFragments=2, MinWords=4, MaxWords=18, FragmentDelimiter= … ')`
-    }).from(agentJobs).leftJoin(agents, eq6(agents.id, agentJobs.agentId)).where(and5(eq6(agentJobs.entityId, ctx.entityId), sql22`${tsv} @@ ${tsq}`)).orderBy(sql22`ts_rank(${tsv}, ${tsq}) DESC`, desc(agentJobs.createdAt)).limit(limit);
+      snippet: sql23`ts_headline('simple', coalesce(${agentJobs.searchText}, ${agentJobs.task}, ''), ${tsq}, 'StartSel=«, StopSel=», MaxFragments=2, MinWords=4, MaxWords=18, FragmentDelimiter= … ')`
+    }).from(agentJobs).leftJoin(agents, eq6(agents.id, agentJobs.agentId)).where(and5(eq6(agentJobs.entityId, ctx.entityId), sql23`${tsv} @@ ${tsq}`)).orderBy(sql23`ts_rank(${tsv}, ${tsq}) DESC`, desc(agentJobs.createdAt)).limit(limit);
     return rows.map((r) => ({
       job_id: r.job_id,
       agent: r.agent ?? null,
@@ -208255,7 +208362,7 @@ import { z as z29 } from "zod";
 
 // ../../packages/tools/src/builtin/file-ops/workspace.ts
 import { realpath, stat } from "node:fs/promises";
-import { resolve as resolvePath, sep, isAbsolute, basename } from "node:path";
+import { resolve as resolvePath, sep, isAbsolute } from "node:path";
 var SHARED_WORKSPACE_LABEL = "shared";
 var MAX_READ_BYTES = 1024 * 1024;
 var MAX_READ_FILE_BYTES = 50 * 1024 * 1024;
@@ -208567,7 +208674,7 @@ var fileReadTool = {
 
 // ../../packages/tools/src/builtin/file-ops/file-write.ts
 import { writeFile, rename, mkdir, unlink } from "node:fs/promises";
-import { dirname as dirname2, basename as basename2 } from "node:path";
+import { dirname as dirname2, basename } from "node:path";
 import { randomBytes as randomBytes2 } from "node:crypto";
 import { z as z30 } from "zod";
 var FileWriteInputSchema = z30.object({
@@ -208601,7 +208708,7 @@ var fileWriteTool = {
       if (input.create_dirs) {
         await mkdir(dir, { recursive: true });
       }
-      const tmp = `${dir}/.${basename2(path2)}.${randomBytes2(6).toString("hex")}.tmp`;
+      const tmp = `${dir}/.${basename(path2)}.${randomBytes2(6).toString("hex")}.tmp`;
       try {
         await writeFile(tmp, input.content, "utf8");
         await rename(tmp, path2);
@@ -208626,7 +208733,7 @@ var fileWriteTool = {
 
 // ../../packages/tools/src/builtin/file-ops/file-edit.ts
 import { readFile as readFile2, writeFile as writeFile2, rename as rename2, unlink as unlink2 } from "node:fs/promises";
-import { dirname as dirname3, basename as basename3 } from "node:path";
+import { dirname as dirname3, basename as basename2 } from "node:path";
 import { randomBytes as randomBytes3 } from "node:crypto";
 import { z as z31 } from "zod";
 var FileEditInputSchema = z31.object({
@@ -208684,7 +208791,7 @@ var fileEditTool = {
         };
       }
       const dir = dirname3(path2);
-      const tmp = `${dir}/.${basename3(path2)}.${randomBytes3(6).toString("hex")}.tmp`;
+      const tmp = `${dir}/.${basename2(path2)}.${randomBytes3(6).toString("hex")}.tmp`;
       try {
         await writeFile2(tmp, updated, "utf8");
         await rename2(tmp, path2);
@@ -208925,7 +209032,7 @@ import { z as z34 } from "zod";
 // ../../packages/tools/src/builtin/office-ops/office-helpers.ts
 var import_jszip = __toESM(require_lib3(), 1);
 import { readFile as readFile4, writeFile as writeFile3, rename as rename3, unlink as unlink3, stat as stat5 } from "node:fs/promises";
-import { dirname as dirname4, basename as basename4 } from "node:path";
+import { dirname as dirname4, basename as basename3 } from "node:path";
 import { randomBytes as randomBytes4 } from "node:crypto";
 var MAX_OFFICE_BYTES = 25 * 1024 * 1024;
 var MAX_OFFICE_INFLATED_BYTES = 1024 * 1024 * 1024;
@@ -209039,7 +209146,7 @@ async function writeWorkspaceBinary(ctx, path2, buffer2, { overwrite = false } =
       };
     }
     const dir = dirname4(resolvedPath);
-    const tmp = `${dir}/.${basename4(resolvedPath)}.${randomBytes4(6).toString("hex")}.tmp`;
+    const tmp = `${dir}/.${basename3(resolvedPath)}.${randomBytes4(6).toString("hex")}.tmp`;
     try {
       await writeFile3(tmp, buffer2);
       await rename3(tmp, resolvedPath);
@@ -211673,8 +211780,8 @@ var createAgentTool = {
     const { dbRole, orchestratorMode } = mapRole(input.role);
     const resolved = await resolveAgentProvider(ctx.db, ctx.entityId, null);
     if (resolved) {
-      const check16 = validateModelForProvider(resolved.provider, input.model);
-      if (!check16.ok) return check16;
+      const check17 = validateModelForProvider(resolved.provider, input.model);
+      if (!check17.ok) return check17;
     }
     let result;
     try {
@@ -211746,8 +211853,8 @@ var updateAgentTool = {
     if (input.model) {
       const resolved = await resolveAgentProvider(ctx.db, ctx.entityId, agent.llmKeyId);
       if (resolved) {
-        const check16 = validateModelForProvider(resolved.provider, input.model);
-        if (!check16.ok) return check16;
+        const check17 = validateModelForProvider(resolved.provider, input.model);
+        if (!check17.ok) return check17;
       }
     }
     const patch = { updatedAt: /* @__PURE__ */ new Date() };
@@ -212490,13 +212597,15 @@ var runScheduleTool = {
       task: agentSchedules.task,
       chatId: agentSchedules.chatId,
       notifyOnSuccess: agentSchedules.notifyOnSuccess,
+      // B1 (notify-channel-choice): the schedule's explicit channel choice, if any.
+      notifyChannel: agentSchedules.notifyChannel,
       // Manual "run now": prevRunAt is still "when did this schedule last
       // actually run" — this fire doesn't change that semantic.
       lastRun: agentSchedules.lastRun
     }).from(agentSchedules).where(and5(eq6(agentSchedules.entityId, ctx.entityId), eq6(agentSchedules.name, input.name))).limit(1);
     if (!sched) return { ok: false, error: `No schedule named "${input.name}" in this workspace.` };
     if (!sched.task) return { ok: false, error: `Schedule "${input.name}" has no task to run.` };
-    const resolvedChatId = sched.notifyOnSuccess ? sched.chatId ?? await resolveOwnerChatId(ctx.db, sched.agentId) ?? null : null;
+    const resolvedChatId = sched.notifyOnSuccess ? sched.notifyChannel ? sched.chatId ?? await resolveOwnerConversation(ctx.db, sched.agentId, sched.notifyChannel) : sched.chatId ?? await resolveOwnerChatId(ctx.db, sched.agentId) ?? null : null;
     const [job] = await ctx.db.insert(agentJobs).values({
       entityId: ctx.entityId,
       agentId: sched.agentId,
@@ -212509,7 +212618,8 @@ var runScheduleTool = {
       triggerContext: {
         type: "cron",
         scheduleName: input.name,
-        prevRunAt: sched.lastRun ? sched.lastRun.toISOString() : null
+        prevRunAt: sched.lastRun ? sched.lastRun.toISOString() : null,
+        notifyChannel: sched.notifyChannel ?? null
       }
     }).returning({ id: agentJobs.id });
     if (!job) return { ok: false, error: "Failed to queue the schedule run." };
@@ -320983,7 +321093,7 @@ var generateMessageIDV2 = (userId) => {
 };
 var generateMessageID = () => "3EB0" + randomBytes5(18).toString("hex").toUpperCase();
 function bindWaitForEvent(ev, event) {
-  return async (check16, timeoutMs) => {
+  return async (check17, timeoutMs) => {
     let listener;
     let closeListener;
     await promiseTimeout(timeoutMs, (resolve3, reject) => {
@@ -320994,7 +321104,7 @@ function bindWaitForEvent(ev, event) {
       };
       ev.on("connection.update", closeListener);
       listener = async (update) => {
-        if (await check16(update)) {
+        if (await check17(update)) {
           resolve3();
         }
       };
@@ -335272,16 +335382,28 @@ function getAdapter3(channel2) {
 }
 
 // ../../packages/delivery/src/transport-channel.ts
-var TRANSPORT_CHANNELS = /* @__PURE__ */ new Set([
-  "telegram",
-  "discord",
-  "slack",
-  "whatsapp"
-]);
-function resolveTransportChannel(channel2) {
+var CHANNEL_PRIORITY = ["telegram", "discord", "slack", "whatsapp"];
+var TRANSPORT_CHANNELS = new Set(CHANNEL_PRIORITY);
+function resolveTransportChannel(channel2, activeChannels) {
   if (channel2 && TRANSPORT_CHANNELS.has(channel2)) return channel2;
+  if (activeChannels && activeChannels.length > 0) {
+    const active = new Set(activeChannels);
+    const preferred = CHANNEL_PRIORITY.find((c) => active.has(c));
+    if (preferred) return preferred;
+  }
   return "telegram";
 }
+async function listActiveChannelsForAgent(db, agentId) {
+  const [agentRow] = await db.select({ telegramBotToken: agents.telegramBotToken }).from(agents).where(eq6(agents.id, agentId)).limit(1);
+  const bindings = await listChannelBindings(db, agentId);
+  const enabled = new Set(bindings.filter((b) => b.enabled).map((b) => b.channel));
+  const active = [];
+  if (agentRow?.telegramBotToken) active.push("telegram");
+  for (const channel2 of CHANNEL_PRIORITY) {
+    if (channel2 !== "telegram" && enabled.has(channel2)) active.push(channel2);
+  }
+  return active;
+}
 
 // ../../packages/tools/src/builtin/list-conversations.ts
 var MAX_ROWS = 150;
@@ -335442,8 +335564,11 @@ import { z as z60 } from "zod";
 import { realpath as realpath3 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
 import path from "node:path";
+function defaultChannelForJob(ctx) {
+  return ctx.notifyChannelOverride ?? resolveTransportChannel(ctx.jobChannel, ctx.activeChannels);
+}
 async function resolveChannelForJob(ctx, explicitChannel) {
-  const jobChannel = resolveTransportChannel(ctx.jobChannel);
+  const jobChannel = defaultChannelForJob(ctx);
   if (explicitChannel === void 0 || explicitChannel === jobChannel) {
     return jobChannel;
   }
@@ -335489,7 +335614,7 @@ async function resolveRecipientChatId(explicitChatId, ctx, noRecipientErrorName,
     throw err;
   }
   const channel2 = await resolveChannelForJob(ctx, explicitChannel);
-  const crossChannel = explicitChannel !== void 0 && explicitChannel !== resolveTransportChannel(ctx.jobChannel);
+  const crossChannel = explicitChannel !== void 0 && explicitChannel !== defaultChannelForJob(ctx);
   let chatId = explicitChatId ?? (crossChannel ? null : ctx.jobChatId);
   if (explicitChatId === void 0 && chatId === null) {
     chatId = await resolveOwnerConversation(ctx.db, ctx.agentId, channel2);
@@ -335522,7 +335647,32 @@ async function resolveRecipientChatId(explicitChatId, ctx, noRecipientErrorName,
   return chatId;
 }
 async function assertLocalSourceAllowed(source, ctx) {
-  const real3 = await realpath3(source);
+  let candidate = source;
+  if (!path.isAbsolute(source)) {
+    try {
+      candidate = await resolveAndCheckPath(ctx, source);
+    } catch (err) {
+      if (err instanceof WorkspaceError) {
+        const wrapped = new Error(`source_path_not_allowed: ${err.message}`);
+        wrapped.name = "source_path_not_allowed";
+        throw wrapped;
+      }
+      throw err;
+    }
+  }
+  let real3;
+  try {
+    real3 = await realpath3(candidate);
+  } catch (err) {
+    if (err.code === "ENOENT") {
+      const wrapped = new Error(
+        path.isAbsolute(source) ? `source_path_not_allowed: no file found at "${source}".` : `source_path_not_allowed: no file found at workspace-relative path "${source}" (resolved to "${candidate}").`
+      );
+      wrapped.name = "source_path_not_allowed";
+      throw wrapped;
+    }
+    throw err;
+  }
   const roots = [
     ...(ctx.workspaces ?? []).map((w) => w.path),
     ...ctx.skillStoreDir ? [ctx.skillStoreDir] : [],
@@ -336211,7 +336361,7 @@ async function healthRoute(c, deps) {
     // LLM is not pinged on every health check (expensive)
   };
   try {
-    await deps.db.execute(sql22`SELECT 1`);
+    await deps.db.execute(sql23`SELECT 1`);
     result.db = "ok";
   } catch (err) {
     console.error("[health] DB ping failed:", err instanceof Error ? err.message : err);
@@ -351608,7 +351758,9 @@ async function walkJobChainToRoot(db, jobId) {
 async function resolveChannelApprovalDeliveryTarget(db, jobId) {
   const chain = await walkJobChainToRoot(db, jobId);
   if (!chain) return null;
-  const rootChannel = resolveTransportChannel(chain[chain.length - 1].channel);
+  const rootHop = chain[chain.length - 1];
+  const activeChannels = await listActiveChannelsForAgent(db, rootHop.agentId);
+  const rootChannel = resolveTransportChannel(rootHop.channel, activeChannels);
   if (rootChannel === "telegram") {
     const target = await resolveApprovalDeliveryTarget(db, jobId);
     if (!target) return null;
@@ -351697,7 +351849,7 @@ import { join as join12 } from "node:path";
 
 // src/skills/install.ts
 import { cp, rm as rm2, mkdir as mkdir5, readFile as readFile11 } from "node:fs/promises";
-import { dirname as dirname7, join as join11, basename as basename5, sep as sep5, resolve as resolve2 } from "node:path";
+import { dirname as dirname7, join as join11, basename as basename4, sep as sep5, resolve as resolve2 } from "node:path";
 
 // src/skills/source.ts
 var SkillSourceError = class extends Error {
@@ -352477,7 +352629,7 @@ async function pickManifest(extractRoot, subdir, skillName) {
       }
     }
     if (byFrontmatter.length > 0) return byFrontmatter[0];
-    const byFolder = manifests.filter((rel) => basename5(dirname7(rel)) === skillName);
+    const byFolder = manifests.filter((rel) => basename4(dirname7(rel)) === skillName);
     if (byFolder.length > 0) return byFolder[0];
     throw new SkillInstallError(
       `Repository has multiple skills but none named "${skillName}". Found: ${manifests.map((m) => dirname7(m)).join(", ")}.`
@@ -353380,13 +353532,15 @@ async function runJob(jobId, deps, runnerEnv, opts) {
   const canSeeImages = llmClient.capabilities.vision === true || modelCanSeeImages(llmClient.config.model);
   const imageCache = /* @__PURE__ */ new Map();
   const isOrchestrator = agent.role === "orchestrator";
-  const cronWantsConfirmation = job.channel === "cron" && job.chatId != null;
+  const triggerWantsConfirmation = (job.channel === "cron" || job.channel === "webhook") && job.chatId != null;
+  const jobTriggerContext = job.triggerContext;
+  const notifyChannelOverride = jobTriggerContext?.type === "cron" || jobTriggerContext?.type === "webhook" ? jobTriggerContext.notifyChannel ?? void 0 : void 0;
   const deployment = await getDeploymentContext(db, job.entityId ?? void 0);
   const jobContext = {
     origin: job.channel ?? "unknown",
     ...job.task ? { task: job.task } : {},
     ...job.chatId ? { telegramChatId: job.chatId } : {},
-    ...cronWantsConfirmation ? { notifyOnSuccess: true } : {},
+    ...triggerWantsConfirmation ? { notifyOnSuccess: true } : {},
     ...job.parentJobId ? { isDelegated: true } : {},
     ...job.triggerContext ? { triggerContext: job.triggerContext } : {},
     deployment
@@ -353422,6 +353576,11 @@ async function runJob(jobId, deps, runnerEnv, opts) {
     capabilityTools.push(createSendVoiceTool());
     capabilityTools.push(createListConversationsTool());
   }
+  const activeChannels = [
+    ...deliveryBotToken ? ["telegram"] : [],
+    ...hasDiscordBinding ? ["discord"] : [],
+    ...hasSlackBinding ? ["slack"] : []
+  ];
   const mcpClosers = [];
   try {
     const [rootEntityRow] = await db.select({
@@ -353511,7 +353670,10 @@ async function runJob(jobId, deps, runnerEnv, opts) {
             decryptedEnv = Object.fromEntries(
               Object.entries(rawEnv).map(([k, v]) => [k, decrypt(v)])
             );
-          } catch {
+          } catch (err) {
+            console.error(
+              `[execute] MCP server '${ms.slug}' env vars failed to decrypt (tampered, or wrong/rotated master key): ${err instanceof Error ? err.message : String(err)}`
+            );
             continue;
           }
           const connectOpts = {
@@ -353625,8 +353787,8 @@ async function runJob(jobId, deps, runnerEnv, opts) {
     return { status: "failed", error: errorCode };
   }
   const ruleRows = await db.select().from(approvalRules).where(eq6(approvalRules.entityId, job.entityId ?? "")).orderBy(
-    sql22`${approvalRules.agentId} IS NULL`,
-    sql22`${approvalRules.toolName} = '*'`,
+    sql23`${approvalRules.agentId} IS NULL`,
+    sql23`${approvalRules.toolName} = '*'`,
     approvalRules.id
   );
   let approvalRuleList = ruleRows.map((r) => ({
@@ -353745,6 +353907,8 @@ async function runJob(jobId, deps, runnerEnv, opts) {
                 db,
                 jobChatId: job.chatId ?? null,
                 jobChannel: job.channel,
+                activeChannels,
+                notifyChannelOverride,
                 resolvedTelegramBotToken: inheritedRootBotToken ?? void 0,
                 embeddingClient: deps.embeddingClient,
                 workspaces: agentWorkspacesList,
@@ -353846,7 +354010,7 @@ async function runJob(jobId, deps, runnerEnv, opts) {
   const MAX_EMPTY_TURN_RETRIES = 2;
   let emptyTurnRetries = 0;
   let consecutiveDeliveryOnlyTurns = 0;
-  const requiresToolDelivery = TOOL_ONLY_DELIVERY_CHANNELS.has(job.channel ?? "") || cronWantsConfirmation;
+  const requiresToolDelivery = TOOL_ONLY_DELIVERY_CHANNELS.has(job.channel ?? "") || triggerWantsConfirmation;
   const CHANNEL_DISPLAY_NAMES = {
     telegram: "Telegram",
     discord: "Discord",
@@ -354179,17 +354343,21 @@ ${notice}` : notice;
         return part.providerMetadata != null && part.providerOptions == null ? { ...p, providerOptions: part.providerMetadata } : p;
       });
       const hasText = (response.text ?? "").trim().length > 0;
+      const toolCallParts = rawToolCalls.map((tc) => {
+        const base = {
+          type: "tool-call",
+          toolCallId: tc.toolCallId,
+          toolName: tc.toolName,
+          input: tc.input
+        };
+        return tc.providerMetadata != null ? { ...base, providerOptions: tc.providerMetadata } : base;
+      });
       const assistantMsg = {
         role: "assistant",
         content: rawToolCalls.length > 0 ? [
           ...reasoningParts,
           ...hasText ? [{ type: "text", text: response.text || "" }] : [],
-          ...rawToolCalls.map((tc) => ({
-            type: "tool-call",
-            toolCallId: tc.toolCallId,
-            toolName: tc.toolName,
-            input: tc.input
-          }))
+          ...toolCallParts
         ] : reasoningParts.length > 0 ? [...reasoningParts, { type: "text", text: response.text || "" }] : response.text || ""
       };
       messages = [...messages, assistantMsg];
@@ -354293,6 +354461,8 @@ ${notice}` : notice;
         db,
         jobChatId: job.chatId ?? null,
         jobChannel: job.channel,
+        activeChannels,
+        notifyChannelOverride,
         resolvedTelegramBotToken: inheritedRootBotToken ?? void 0,
         embeddingClient: deps.embeddingClient,
         workspaces: agentWorkspacesList,
@@ -354481,6 +354651,8 @@ ${notice}` : notice;
                 db,
                 jobChatId: job.chatId ?? null,
                 jobChannel: job.channel,
+                activeChannels,
+                notifyChannelOverride,
                 resolvedTelegramBotToken: inheritedRootBotToken ?? void 0,
                 embeddingClient: deps.embeddingClient,
                 workspaces: agentWorkspacesList,
@@ -355637,7 +355809,8 @@ async function notifyBudgetExhausted(db, agentId, scheduleName, dailyBudgetUsd)
   try {
     const ownerChatId = await resolveOwnerChatId(db, agentId);
     if (!ownerChatId) return;
-    const channel2 = resolveTransportChannel("cron");
+    const activeChannels = await listActiveChannelsForAgent(db, agentId);
+    const channel2 = resolveTransportChannel("cron", activeChannels);
     const creds = await getBindingCredentials(db, agentId, channel2);
     if (!creds) return;
     const adapter2 = getAdapter3(channel2);
@@ -355671,6 +355844,9 @@ async function runScheduleTick(db, deps, max2 = 5) {
     notifyOnSuccess: agentSchedules.notifyOnSuccess,
     // Explicit delivery target (e.g. "post to #team"), null for the common case.
     chatId: agentSchedules.chatId,
+    // Explicit notify channel choice (B1), null = auto (first active channel
+    // by priority, the historical behavior — see the chatId resolution below).
+    notifyChannel: agentSchedules.notifyChannel,
     // Read BEFORE this tick's writes — "was it already budget_exhausted" is
     // the transition check the notify-once-per-day dedup relies on below.
     lastStatus: agentSchedules.lastStatus,
@@ -355683,6 +355859,7 @@ async function runScheduleTick(db, deps, max2 = 5) {
   ).limit(max2 * 2);
   if (candidates.length === 0) return 0;
   const fires = [];
+  const notifyUnreachableScheduleIds = /* @__PURE__ */ new Set();
   for (const sched of candidates.slice(0, max2)) {
     if (!sched.task || !sched.entityId) continue;
     const [liveJob] = await db.select({ id: agentJobs.id, createdAt: agentJobs.createdAt }).from(agentJobs).where(and5(eq6(agentJobs.scheduleId, sched.id), inArray4(agentJobs.status, LIVE_JOB_STATUSES))).orderBy(desc(agentJobs.createdAt)).limit(1);
@@ -355700,8 +355877,8 @@ async function runScheduleTick(db, deps, max2 = 5) {
       continue;
     }
     const tz = resolveTimezone(sched.timezone);
-    const [spentRow] = await db.select({ spent: sql22`COALESCE(SUM(${agentJobs.totalCostUsd}), 0)` }).from(agentJobs).where(
-      sql22`${agentJobs.scheduleId} = ${sched.id} AND ${agentJobs.createdAt} >= (date_trunc('day', now() AT TIME ZONE ${tz}) AT TIME ZONE ${tz})`
+    const [spentRow] = await db.select({ spent: sql23`COALESCE(SUM(${agentJobs.totalCostUsd}), 0)` }).from(agentJobs).where(
+      sql23`${agentJobs.scheduleId} = ${sched.id} AND ${agentJobs.createdAt} >= (date_trunc('day', now() AT TIME ZONE ${tz}) AT TIME ZONE ${tz})`
     );
     const spentToday = Number(spentRow?.spent ?? 0);
     if (spentToday >= sched.dailyBudgetUsd) {
@@ -355742,7 +355919,21 @@ async function runScheduleTick(db, deps, max2 = 5) {
       )
     ).returning({ id: agentSchedules.id });
     if (claimed.length === 0) continue;
-    const notifyChatId = sched.notifyOnSuccess ? sched.chatId ?? await resolveOwnerChatId(db, sched.agentId) ?? null : null;
+    let notifyChatId = null;
+    if (sched.notifyOnSuccess) {
+      if (sched.notifyChannel) {
+        const channel2 = sched.notifyChannel;
+        notifyChatId = sched.chatId ?? await resolveOwnerConversation(db, sched.agentId, channel2);
+        if (!notifyChatId) {
+          notifyUnreachableScheduleIds.add(sched.id);
+          console.error(
+            `[runScheduleTick] schedule "${sched.name}" (${sched.id}) chose notify channel '${channel2}' but has no owner conversation there yet (never DMed on that channel). Firing WITHOUT a delivery target \u2014 not falling back to another channel. lastStatus will read 'notify_unreachable'.`
+          );
+        }
+      } else {
+        notifyChatId = sched.chatId ?? await resolveOwnerChatId(db, sched.agentId) ?? null;
+      }
+    }
     const [job] = await db.insert(agentJobs).values({
       entityId: sched.entityId,
       agentId: sched.agentId,
@@ -355755,7 +355946,8 @@ async function runScheduleTick(db, deps, max2 = 5) {
       triggerContext: {
         type: "cron",
         scheduleName: sched.name,
-        prevRunAt: sched.lastRun ? sched.lastRun.toISOString() : null
+        prevRunAt: sched.lastRun ? sched.lastRun.toISOString() : null,
+        notifyChannel: sched.notifyChannel ?? null
       }
     }).returning({ id: agentJobs.id });
     if (!job) {
@@ -355784,7 +355976,9 @@ async function runScheduleTick(db, deps, max2 = 5) {
     if (settled.status === "rejected") continue;
     const { fire, result } = settled.value;
     let lastStatus;
-    if (result.status === "completed") lastStatus = "success";
+    if (notifyUnreachableScheduleIds.has(fire.scheduleId)) {
+      lastStatus = "notify_unreachable";
+    } else if (result.status === "completed") lastStatus = "success";
     else if (result.status === "failed") lastStatus = "failed";
     else if (result.status === "cancelled") lastStatus = "failed";
     else lastStatus = "no_action";
@@ -355818,7 +356012,8 @@ async function deliverCompletedRoots(db) {
       chatId: agentJobs.chatId,
       agentId: agentJobs.agentId,
       entityId: agentJobs.entityId,
-      task: agentJobs.task
+      task: agentJobs.task,
+      triggerContext: agentJobs.triggerContext
     }).from(agentJobs).where(eq6(agentJobs.id, rootJobId)).limit(1);
     const rootJob = rootJobRows[0];
     if (!rootJob) continue;
@@ -355863,7 +356058,10 @@ async function deliverCompletedRoots(db) {
     }
     if (rootJob.chatId && rootJob.agentId && compiledResult.trim()) {
       try {
-        const channel2 = resolveTransportChannel(rootJob.channel);
+        const activeChannels = await listActiveChannelsForAgent(db, rootJob.agentId);
+        const triggerContext = rootJob.triggerContext;
+        const notifyChannelOverride = triggerContext?.type === "cron" || triggerContext?.type === "webhook" ? triggerContext.notifyChannel ?? void 0 : void 0;
+        const channel2 = notifyChannelOverride ?? resolveTransportChannel(rootJob.channel, activeChannels);
         const allowed = rootJob.entityId !== null && await isConversationAllowed(db, {
           entityId: rootJob.entityId,
           agentId: rootJob.agentId,
@@ -356376,12 +356574,12 @@ async function runCuratorTick(db, _deps, runnerEnv) {
         eq6(agentSkills.state, "active"),
         eq6(entities.reflectionEnabled, true)
       )
-    ).groupBy(agentSkills.entityId).having(sql22`count(${agentSkills.id}) >= ${e2.CURATOR_MIN_SKILLS}`);
+    ).groupBy(agentSkills.entityId).having(sql23`count(${agentSkills.id}) >= ${e2.CURATOR_MIN_SKILLS}`);
     for (const c of skillCandidates) if (c.entityId) skillSet.add(c.entityId);
   }
   const memorySet = /* @__PURE__ */ new Set();
   if (e2.MEMORY_CURATION_ENABLED !== "false") {
-    const memoryCandidates = await db.select({ entityId: agentMemory.entityId }).from(agentMemory).innerJoin(entities, eq6(entities.id, agentMemory.entityId)).where(and5(eq6(agentMemory.archived, false), eq6(entities.memoryCurationEnabled, true))).groupBy(agentMemory.entityId).having(sql22`count(${agentMemory.id}) >= ${e2.CURATOR_MEMORY_MIN}`);
+    const memoryCandidates = await db.select({ entityId: agentMemory.entityId }).from(agentMemory).innerJoin(entities, eq6(entities.id, agentMemory.entityId)).where(and5(eq6(agentMemory.archived, false), eq6(entities.memoryCurationEnabled, true))).groupBy(agentMemory.entityId).having(sql23`count(${agentMemory.id}) >= ${e2.CURATOR_MEMORY_MIN}`);
     for (const c of memoryCandidates) if (c.entityId) memorySet.add(c.entityId);
   }
   if (skillSet.size === 0 && memorySet.size === 0) {
@@ -357024,18 +357222,38 @@ async function webhookRoute(c, deps, runnerEnv) {
   const triggeredAt = (/* @__PURE__ */ new Date()).toISOString();
   const interpolated = interpolateTemplate(trigger.taskTemplate, bodyResult.value);
   const task = buildWebhookEnvelope(trigger.name, triggeredAt, interpolated);
+  let notifyChatId = null;
+  let notifyChannel = null;
+  if (trigger.notifyOnSuccess) {
+    if (trigger.notifyChannel) {
+      notifyChannel = trigger.notifyChannel;
+    } else {
+      const activeChannels = (await listActiveChannelsForAgent(deps.db, agentId)).filter(
+        (c2) => c2 !== "whatsapp"
+      );
+      notifyChannel = resolveTransportChannel("webhook", activeChannels);
+    }
+    notifyChatId = await resolveOwnerConversation(deps.db, agentId, notifyChannel);
+    if (!notifyChatId) {
+      console.error(
+        `[webhook] trigger "${trigger.name}" (${trigger.slug}) chose notify channel '${notifyChannel}' but has no owner conversation there yet (never DMed on that channel). Firing WITHOUT a delivery target \u2014 not falling back to another channel.`
+      );
+    }
+  }
   const [job] = await deps.db.insert(agentJobs).values({
     entityId: trigger.entityId ?? void 0,
     agentId,
     channel: "webhook",
     task,
     status: "pending",
+    chatId: notifyChatId,
     messages: [{ role: "user", content: task }],
     triggerContext: {
       type: "webhook",
       webhookName: trigger.name,
       slug: trigger.slug,
-      triggeredAt
+      triggeredAt,
+      notifyChannel
     }
   }).returning({ id: agentJobs.id });
   if (!job) {
@@ -359351,7 +359569,18 @@ function startSlackSocket(opts) {
       );
     });
   });
-  void app.start().catch((err) => {
+  void app.start().then(async () => {
+    try {
+      const identity = await app.client.auth.test();
+      console.warn(
+        `[slack-socket agent=${agentId}] connected (socket mode) as ${identity.user ?? "unknown"} (team=${identity.team ?? "unknown"})`
+      );
+    } catch (err) {
+      console.warn(
+        `[slack-socket agent=${agentId}] connected (socket mode), but auth.test failed: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }).catch((err) => {
     console.warn(
       `[slack-socket agent=${agentId}] start failed (invalid token(s)?): ${err instanceof Error ? err.message : String(err)}; will retry on the manager's next refresh`
     );