omnius 1.0.17 → 1.0.19

package/dist/index.js

@@ -84452,7 +84452,7 @@ var require_mime_types = __commonJS({
   "../node_modules/mime-types/index.js"(exports) {
     "use strict";
     var db = require_mime_db();
-    var extname15 = __require("path").extname;
+    var extname16 = __require("path").extname;
     var EXTRACT_TYPE_REGEXP = /^\s*([^;\s]*)(?:;|\s|$)/;
     var TEXT_TYPE_REGEXP = /^text\//i;
     exports.charset = charset;
@@ -84506,7 +84506,7 @@ var require_mime_types = __commonJS({
       if (!path11 || typeof path11 !== "string") {
         return false;
       }
-      var extension4 = extname15("x." + path11).toLowerCase().substr(1);
+      var extension4 = extname16("x." + path11).toLowerCase().substr(1);
       if (!extension4) {
         return false;
       }
@@ -477005,7 +477005,7 @@ var require_path_browserify = __commonJS({
           return path11.slice(start2, end);
         }
       },
-      extname: function extname15(path11) {
+      extname: function extname16(path11) {
         assertPath(path11);
         var startDot = -1;
         var startPart = 0;
@@ -507302,12 +507302,23 @@ function ensureGeneratedVoiceDir() {
   mkdirSync16(generatedVoiceDir(), { recursive: true });
 }
 function ttsOutputPath(args, backend) {
-  const output = typeof args["output"] === "string" ? args["output"] : typeof args["output_path"] === "string" ? args["output_path"] : "";
-  if (output.trim())
-    return resolvePath(output.trim());
+  for (const key of ["output", "output_path", "path", "file_path", "file"]) {
+    const output = args[key];
+    if (typeof output === "string" && output.trim()) {
+      return resolvePath(output.trim());
+    }
+  }
   ensureGeneratedVoiceDir();
   return join58(generatedVoiceDir(), `tts-${backend}-${Date.now()}-${Math.random().toString(36).slice(2, 7)}.wav`);
 }
+function ttsTextArg(args) {
+  for (const key of ["text", "input", "prompt", "content", "message"]) {
+    const value2 = args[key];
+    if (typeof value2 === "string" && value2.trim())
+      return value2.trim();
+  }
+  return "";
+}
 function listCloneRefs() {
   try {
     return readdirSync14(cloneRefsDir()).filter((file) => /\.(wav|mp3|flac|ogg|m4a)$/i.test(file) && existsSync40(join58(cloneRefsDir(), file))).sort((a2, b) => a2.localeCompare(b));
@@ -507348,6 +507359,12 @@ function supertonicInferScript() {
 function mlxVenvPy() {
   return process.platform === "win32" ? join58(voiceDir(), "mlx-venv", "Scripts", "python.exe") : join58(voiceDir(), "mlx-venv", "bin", "python3");
 }
+function piperVenvDir() {
+  return join58(voiceDir(), "piper-venv");
+}
+function piperVenvBin() {
+  return process.platform === "win32" ? join58(piperVenvDir(), "Scripts", "piper.exe") : join58(piperVenvDir(), "bin", "piper");
+}
 function ensureSupertonicInstalled() {
   const venvPy = supertonicVenvPy();
   if (!existsSync40(venvPy)) {
@@ -507385,6 +507402,25 @@ function ensureMlxInstalled() {
   }
   return venvPy;
 }
+function ensurePiperInstalled() {
+  if (hasCommand3("piper"))
+    return "piper";
+  const bin = piperVenvBin();
+  if (!existsSync40(bin)) {
+    const py = findPython32();
+    if (!py)
+      throw new Error("python3 is required to set up Piper TTS.");
+    mkdirSync16(voiceDir(), { recursive: true });
+    execFileSync2(py, ["-m", "venv", piperVenvDir()], { stdio: "pipe", timeout: 18e4 });
+    const venvPy = process.platform === "win32" ? join58(piperVenvDir(), "Scripts", "python.exe") : join58(piperVenvDir(), "bin", "python3");
+    execFileSync2(venvPy, ["-m", "pip", "install", "--quiet", "--upgrade", "pip"], { stdio: "pipe", timeout: 12e4 });
+    execFileSync2(venvPy, ["-m", "pip", "install", "--quiet", "piper-tts"], { stdio: "pipe", timeout: 6e5 });
+  }
+  if (!existsSync40(bin)) {
+    throw new Error("Piper TTS installed but the piper executable was not found in the managed venv.");
+  }
+  return bin;
+}
 function saveCloneRefFromSample(sample, cloneName) {
   const source = resolvePath(sample);
   if (!existsSync40(source))
@@ -507552,7 +507588,7 @@ except Exception as exc:
 `;
     AudioPlaybackTool = class {
       name = "audio_playback";
-      description = "Play audio through speakers, synthesize text-to-speech, and manage TTS clone voices. Actions: 'play' to play an audio file (WAV/MP3/OGG — including recordings from memory episodes), 'speak' to synthesize and play text, 'synthesize' to save TTS to a WAV file, 'clone' to register a voice-clone sample, 'list_voices' to inspect available clone refs/backends, 'volume' to get or set system volume, 'list' to enumerate audio output devices. TTS backends are explicit: auto, luxtts, supertonic, mlx, onnx/piper, or espeak. Use generate_tts when the task is specifically to create a TTS file.";
+      description = "Play audio through speakers, synthesize text-to-speech, and manage TTS clone voices. Actions: 'play' to play an audio file (WAV/MP3/OGG — including recordings from memory episodes), 'speak' to synthesize and play text, 'synthesize' to save TTS to a WAV file, 'clone' to register a voice-clone sample, 'list_voices' to inspect available clone refs/backends, 'volume' to get or set system volume, 'list' to enumerate audio output devices. TTS backends are explicit: auto, luxtts, supertonic, mlx, onnx/piper, or espeak. Neural TTS backends self-provision into ~/.omnius/voice on first use where supported. Use generate_tts when the task is specifically to create a TTS file; do not use shell speech commands or generate_audio for spoken TTS.";
       parameters = {
         type: "object",
         properties: {
@@ -507569,6 +507605,14 @@ except Exception as exc:
             type: "string",
             description: "Text to speak or synthesize"
           },
+          input: {
+            type: "string",
+            description: "Alias for text."
+          },
+          prompt: {
+            type: "string",
+            description: "Alias for text."
+          },
           backend: {
             type: "string",
             enum: ["auto", "luxtts", "supertonic", "mlx", "onnx", "piper", "espeak"],
@@ -507598,6 +507642,10 @@ except Exception as exc:
             type: "string",
             description: "Backend model id or raw ONNX/Piper model path. MLX default is mlx-community/Kokoro-82M-bf16."
           },
+          strict_backend: {
+            type: "boolean",
+            description: "When true, fail instead of falling back if the requested TTS backend is unavailable. Defaults false."
+          },
           volume: {
             type: "number",
             description: "Volume level 0-100 (for 'volume' action to SET volume)"
@@ -507693,7 +507741,7 @@ except Exception as exc:
           `  luxtts: ${existsSync40(join58(voiceDir(), "luxtts-venv", "bin", "python3")) ? "installed" : "not installed"}; clone refs: ${refs.length}`,
           `  supertonic: ${existsSync40(supertonicVenvPy()) ? "installed" : "not installed"}; voices include M1, M2, M3, M4 when package assets are available`,
           `  mlx: ${existsSync40(mlxVenvPy()) ? "installed" : "not installed"}; Apple Silicon only; default model mlx-community/Kokoro-82M-bf16`,
-          `  piper/onnx: ${hasCommand3("piper") ? "available" : "not found"}; pass model=<path.onnx> for raw ONNX voices`,
+          `  piper/onnx: ${hasCommand3("piper") || existsSync40(piperVenvBin()) ? "available" : "not installed"}; first use installs piper-tts into ${piperVenvDir()}; pass model=<path.onnx> for raw ONNX voices`,
           `  espeak: ${hasCommand3("espeak-ng") ? "available" : "not found"}`,
           "",
           "Registered clone refs:",
@@ -507702,16 +507750,18 @@ except Exception as exc:
         return { success: true, output: lines.join("\n"), durationMs: performance.now() - start2 };
       }
       async synthesizeText(args, start2, speakDefault) {
-        const text = typeof args["text"] === "string" ? args["text"].trim() : "";
+        const text = ttsTextArg(args);
         if (!text) {
           return { success: false, output: "", error: "Missing 'text' parameter. Provide text to synthesize.", durationMs: performance.now() - start2 };
         }
         const requestedBackend = normalizeTtsBackend(args["backend"]);
+        const strictBackend = boolArg(args["strict_backend"] ?? args["strictBackend"], false);
         const playback = playbackArg(args, speakDefault);
         const outputPath2 = ttsOutputPath(args, requestedBackend);
         const device = typeof args["device"] === "string" ? args["device"] : "default";
         const tried = [];
-        const candidates = requestedBackend === "auto" ? ["luxtts", "supertonic", ...process.platform === "darwin" && process.arch === "arm64" ? ["mlx"] : [], "piper", "espeak"] : [requestedBackend];
+        const autoCandidates = ["luxtts", "supertonic", ...process.platform === "darwin" && process.arch === "arm64" ? ["mlx"] : [], "piper", "espeak"];
+        const candidates = requestedBackend === "auto" ? autoCandidates : strictBackend ? [requestedBackend] : [requestedBackend, ...autoCandidates.filter((backend) => backend !== requestedBackend)];
         let usedBackend = "";
         let voiceSummary = "";
         for (const backend of candidates) {
@@ -507734,7 +507784,7 @@ except Exception as exc:
           } catch (err) {
             const message2 = err instanceof Error ? err.message : String(err);
             tried.push(`${backend}: ${message2.slice(0, 300)}`);
-            if (requestedBackend !== "auto") {
+            if (requestedBackend !== "auto" && strictBackend) {
               return { success: false, output: "", error: `${backend} TTS failed: ${message2}`, durationMs: performance.now() - start2 };
             }
           }
@@ -507754,11 +507804,13 @@ ${tried.map((line) => `- ${line}`).join("\n")}`,
         })() : "  Playback: disabled";
         const size = Math.round(statSync18(outputPath2).size / 1024);
         const preview = text.length > 140 ? `${text.slice(0, 137)}...` : text;
+        const fallbackLine = requestedBackend !== "auto" && usedBackend !== requestedBackend ? `  Fallback: requested ${requestedBackend}; ${tried[0] ?? "requested backend unavailable"}` : "";
         return {
           success: true,
           output: [
             `TTS generated: ${outputPath2}`,
             `  Backend: ${usedBackend}`,
+            fallbackLine,
             voiceSummary ? `  Voice: ${voiceSummary}` : "",
             `  Size: ${size}KB`,
             playbackLine,
@@ -507783,8 +507835,9 @@ ${tried.map((line) => `- ${line}`).join("\n")}`,
         }
         const venvPy = join58(voiceDir(), "luxtts-venv", "bin", "python3");
         const repoDir = join58(voiceDir(), "LuxTTS");
-        if (!existsSync40(venvPy) || !existsSync40(repoDir))
-          throw new Error("LuxTTS is not installed. Run /voice model luxtts or set up the LuxTTS voice backend first.");
+        if (!existsSync40(venvPy) || !existsSync40(repoDir)) {
+          throw new Error("LuxTTS is not installed in the managed voice environment yet.");
+        }
         const pyScript = [
           "import json, sys, wave",
           "import numpy as np, torch",
@@ -507842,8 +507895,7 @@ ${tried.map((line) => `- ${line}`).join("\n")}`,
         return `${voice} (${model})`;
       }
       synthesizePiper(text, outputPath2, args, requireModel) {
-        if (!hasCommand3("piper"))
-          throw new Error("piper command not found. Install Piper for ONNX TTS.");
+        const piper = ensurePiperInstalled();
         const rawModel = typeof args["model"] === "string" ? args["model"] : typeof args["voice"] === "string" && /\.(onnx|onnx\.json)$/i.test(args["voice"]) ? args["voice"] : "";
         const argv = ["--output_file", outputPath2];
         let summary = "default piper voice";
@@ -507853,10 +507905,10 @@ ${tried.map((line) => `- ${line}`).join("\n")}`,
             throw new Error(`Piper/ONNX model file not found: ${rawModel}`);
           argv.unshift("--model", modelPath);
           summary = basename12(modelPath);
-        } else if (requireModel) {
-          throw new Error("Raw ONNX TTS requires model=<path.onnx> or voice=<path.onnx>.");
+        } else {
+          throw new Error(`${requireModel ? "Raw ONNX" : "Piper"} TTS requires model=<path.onnx> or voice=<path.onnx>.`);
         }
-        execFileSync2("piper", argv, { input: text, stdio: ["pipe", "pipe", "pipe"], timeout: 12e4 });
+        execFileSync2(piper, argv, { input: text, stdio: ["pipe", "pipe", "pipe"], timeout: 12e4 });
         return summary;
       }
       synthesizeEspeak(text, outputPath2, args) {
@@ -507943,14 +507995,18 @@ ${devices.join("\n")}`,
     };
     TtsGenerateTool = class {
       name = "generate_tts";
-      description = "Generate text-to-speech audio as a WAV file, optionally playing it after synthesis. Supports explicit backends: auto, luxtts voice cloning, supertonic, mlx, onnx/piper, and espeak. Use clone_ref to select a registered LuxTTS voice, sample+clone_name to register a clone sample via audio_playback action=clone, and playback=false for silent file generation.";
+      description = "Generate text-to-speech audio as a WAV file, optionally playing it after synthesis. Supports explicit backends: auto, luxtts voice cloning, supertonic, mlx, onnx/piper, and espeak. Neural TTS backends self-provision into ~/.omnius/voice on first use where supported. Use clone_ref to select a registered LuxTTS voice, sample+clone_name to register a clone sample via audio_playback action=clone, and playback=false for silent file generation. Use this tool for speech/TTS requests; do not use shell commands or generate_audio as a TTS fallback.";
       parameters = {
         type: "object",
         properties: {
           text: { type: "string", description: "Text to synthesize" },
+          input: { type: "string", description: "Alias for text." },
+          prompt: { type: "string", description: "Alias for text." },
           backend: { type: "string", enum: ["auto", "luxtts", "supertonic", "mlx", "onnx", "piper", "espeak"] },
           output: { type: "string", description: "Output WAV path. Defaults to ~/.omnius/voice/generated/tts-*.wav." },
+          path: { type: "string", description: "Alias for output." },
           playback: { type: "boolean", description: "Whether to play after generating. Defaults false for generate_tts." },
+          strict_backend: { type: "boolean", description: "When true, fail instead of falling back if the requested backend is unavailable. Defaults false." },
           voice: { type: "string", description: "Voice id/name, or raw Piper/ONNX path when backend=onnx/piper." },
           clone_ref: { type: "string", description: "LuxTTS clone reference path, filename, or registered clone name." },
           model: { type: "string", description: "Backend model id or raw ONNX/Piper model path." },
@@ -507958,7 +508014,7 @@ ${devices.join("\n")}`,
           speed: { type: "number", description: "Speech speed multiplier or backend-specific rate." },
           device: { type: "string", description: "Playback output device when playback=true." }
         },
-        required: ["text"]
+        required: []
       };
       async execute(args) {
         const tool = new AudioPlaybackTool();
@@ -512308,7 +512364,7 @@ var init_agent_tool = __esm({
         })();
         if (isolation === "worktree") {
           this.callbacks.onViewRegister?.(agentId, label);
-          const spawn32 = this.callbacks.spawnSubprocess({
+          const spawn31 = this.callbacks.spawnSubprocess({
             id: agentId,
             task: composedPrompt,
             model,
@@ -512318,7 +512374,7 @@ var init_agent_tool = __esm({
             success: true,
             output: `Agent spawned (subprocess, worktree): ${agentId}
   Type: ${subagentType}
-  PID: ${spawn32.pid}
+  PID: ${spawn31.pid}
   Task: ${prompt.slice(0, 100)}
   Use task_status("${agentId}") to check progress.`,
             durationMs: performance.now() - start2
@@ -530830,7 +530886,7 @@ RECOVERY: cd to the directory containing '${file}', run a plain install with no
 import { existsSync as _fsExistsSync, readFileSync as _fsReadFileSync, writeFileSync as _fsWriteFileSync, unlinkSync as _fsUnlinkSync, mkdirSync as _fsMkdirSync } from "node:fs";
 import { execFile as _execFile } from "node:child_process";
 import { createHash as _createHash } from "node:crypto";
-import { join as _pathJoin } from "node:path";
+import { join as _pathJoin, resolve as _pathResolve } from "node:path";
 import { tmpdir as _osTmpdir } from "node:os";
 import { homedir as _osHomedir } from "node:os";
 import { z as z15 } from "zod";
@@ -531578,6 +531634,9 @@ var init_agenticRunner = __esm({
           compactionThreshold: options2?.compactionThreshold ?? 4e4,
           deepContext: options2?.deepContext ?? false,
           dynamicContext: options2?.dynamicContext ?? "",
+          stateDir: options2?.stateDir ?? "",
+          disablePersistentMemory: options2?.disablePersistentMemory ?? false,
+          disableCodebaseMap: options2?.disableCodebaseMap ?? false,
           sessionId: options2?.sessionId ?? "",
           streamEnabled: options2?.streamEnabled ?? false,
           thinking: options2?.thinking ?? true,
@@ -531604,6 +531663,11 @@ var init_agenticRunner = __esm({
       setWorkingDirectory(dir) {
         this._workingDirectory = dir;
       }
+      /** State root for runner-owned memory/artifacts. Defaults to cwd/.omnius. */
+      omniusStateDir() {
+        const configured = (this.options.stateDir || "").trim();
+        return configured ? _pathResolve(configured) : _pathJoin(process.cwd(), ".omnius");
+      }
       /** Get current task state (for external inspection) */
       get taskState() {
         return this._taskState;
@@ -534298,10 +534362,10 @@ Respond with your assessment, then take action.`;
         this._toolLastUsedTurn.clear();
         this._contextTree = null;
         this._lastSurfacedAnchorIds.clear();
-        if (!this._memoryInitialized) {
+        if (!this.options.disablePersistentMemory && !this._memoryInitialized) {
           try {
             const path11 = await import("node:path");
-            const omniusDir = path11.join(process.cwd(), ".omnius");
+            const omniusDir = this.omniusStateDir();
             const rawEpisodeStore = new EpisodeStore(path11.join(omniusDir, "episodes.db"));
             const crlConfig = getCRLConfigStore(process.cwd());
             if (crlConfig.get().mode !== "json") {
@@ -534334,8 +534398,9 @@ Respond with your assessment, then take action.`;
           const path11 = await import("node:path");
           const os8 = await import("node:os");
           const globalFile = path11.join(os8.homedir(), ".omnius", "error-patterns.json");
-          const localFile = path11.join(process.cwd(), ".omnius", "error-patterns.json");
-          for (const patternsFile of [globalFile, localFile]) {
+          const localFile = this.options.stateDir ? path11.join(this.omniusStateDir(), "error-patterns.json") : path11.join(process.cwd(), ".omnius", "error-patterns.json");
+          const patternFiles = this.options.stateDir ? [localFile] : [globalFile, localFile];
+          for (const patternsFile of patternFiles) {
             try {
               if (fs10.existsSync(patternsFile)) {
                 const saved = JSON.parse(fs10.readFileSync(patternsFile, "utf8"));
@@ -534426,7 +534491,7 @@ Respond with your assessment, then take action.`;
           } catch {
           }
         }
-        if (process.env["OMNIUS_DISABLE_STAGE_CONTEXT"] !== "1") {
+        if (!this.options.disablePersistentMemory && process.env["OMNIUS_DISABLE_STAGE_CONTEXT"] !== "1") {
           try {
             const memMod = await Promise.resolve().then(() => (init_dist7(), dist_exports2));
             if (!this._stageContext) {
@@ -534459,7 +534524,7 @@ Respond with your assessment, then take action.`;
           } catch {
           }
         }
-        if (process.env["OMNIUS_DISABLE_EMBEDDING_DRIFT_CHECK"] !== "1" && this._episodeStore) {
+        if (!this.options.disablePersistentMemory && process.env["OMNIUS_DISABLE_EMBEDDING_DRIFT_CHECK"] !== "1" && this._episodeStore) {
           try {
             const memMod = await Promise.resolve().then(() => (init_dist7(), dist_exports2));
             const currentModel = process.env["OMNIUS_EMBEDDING_MODEL"] || "default";
@@ -534483,7 +534548,7 @@ Respond with your assessment, then take action.`;
           } catch {
           }
         }
-        if (process.env["OMNIUS_DISABLE_CODEBASE_MAP"] !== "1" && this._episodeStore && this._workingDirectory) {
+        if (!this.options.disablePersistentMemory && !this.options.disableCodebaseMap && !this.options.subAgent && !this.options.stateDir && process.env["OMNIUS_DISABLE_CODEBASE_MAP"] !== "1" && this._episodeStore && this._workingDirectory) {
           try {
             const memMod = await Promise.resolve().then(() => (init_dist7(), dist_exports2));
             let commitSha = "no-commit";
@@ -534604,7 +534669,7 @@ TASK: ${task}` : task;
         }
         try {
           if (!this._reflectionBuffer) {
-            const omniusDir = this._workingDirectory ? _pathJoin(this._workingDirectory, ".omnius", "memory") : null;
+            const omniusDir = this.options.stateDir ? _pathJoin(this.omniusStateDir(), "memory") : this._workingDirectory ? _pathJoin(this._workingDirectory, ".omnius", "memory") : null;
             if (omniusDir) {
               this._reflectionBuffer = new TaskReflectionBuffer(_pathJoin(omniusDir, "reflections.json"));
             }
@@ -536572,7 +536637,7 @@ ${memoryLines.join("\n")}`
                       timestamp: (/* @__PURE__ */ new Date()).toISOString()
                     });
                     try {
-                      const archDir = __require("node:path").join(process.cwd(), ".omnius", "phases");
+                      const archDir = __require("node:path").join(this.omniusStateDir(), "phases");
                       __require("node:fs").mkdirSync(archDir, { recursive: true });
                       for (const phaseName of contracted) {
                         const node = this._contextTree.getSnapshot().phases[phaseName];
@@ -539190,8 +539255,9 @@ Full content available via: repl_exec(code="data = retrieve('${handleId}')")  or
             const path11 = await import("node:path");
             const os8 = await import("node:os");
             const globalFile = path11.join(os8.homedir(), ".omnius", "error-patterns.json");
-            const localFile = path11.join(process.cwd(), ".omnius", "error-patterns.json");
-            for (const targetFile of [globalFile, localFile]) {
+            const localFile = path11.join(this.options.stateDir ? this.omniusStateDir() : path11.join(process.cwd(), ".omnius"), "error-patterns.json");
+            const targetFiles = this.options.stateDir ? [localFile] : [globalFile, localFile];
+            for (const targetFile of targetFiles) {
               try {
                 const dir = path11.dirname(targetFile);
                 fs10.mkdirSync(dir, { recursive: true });
@@ -539243,10 +539309,11 @@ Full content available via: repl_exec(code="data = retrieve('${handleId}')")  or
           };
           const fs10 = await import("node:fs");
           const path11 = await import("node:path");
-          const consolidDir = path11.join(process.cwd(), ".omnius", "consolidations");
+          const stateDir = this.omniusStateDir();
+          const consolidDir = path11.join(stateDir, "consolidations");
           fs10.mkdirSync(consolidDir, { recursive: true });
           fs10.writeFileSync(path11.join(consolidDir, `${this._sessionId}.json`), JSON.stringify(consolidation, null, 2));
-          const provenanceDir = path11.join(process.cwd(), ".omnius", "provenance");
+          const provenanceDir = path11.join(stateDir, "provenance");
           fs10.mkdirSync(provenanceDir, { recursive: true });
           const provenanceGraph = {
             sessionId: this._sessionId,
@@ -539746,7 +539813,7 @@ Full content available via: repl_exec(code="data = retrieve('${handleId}')")  or
         try {
           const fs10 = await import("node:fs");
           const path11 = await import("node:path");
-          const trajDir = path11.join(process.cwd(), ".omnius", "trajectories");
+          const trajDir = path11.join(this.omniusStateDir(), "trajectories");
           fs10.mkdirSync(trajDir, { recursive: true });
           const trajectory = {
             id: this._sessionId,
@@ -539918,7 +539985,7 @@ ${errOutput}`;
         try {
           const { mkdirSync: mkdirSync76, writeFileSync: writeFileSync71 } = __require("node:fs");
           const { join: join142 } = __require("node:path");
-          const resultsDir = join142(process.cwd(), ".omnius", "tool-results");
+          const resultsDir = join142(this.omniusStateDir(), "tool-results");
           mkdirSync76(resultsDir, { recursive: true });
           writeFileSync71(join142(resultsDir, `${handleId}.txt`), `# Tool: ${toolName}
 # Turn: ${turn}
@@ -539929,7 +539996,7 @@ ${result.output}`, "utf-8");
         } catch {
         }
         const { join: _pj } = __require("node:path");
-        const savedPath = _pj(process.cwd(), ".omnius", "tool-results", `${handleId}.txt`);
+        const savedPath = _pj(this.omniusStateDir(), "tool-results", `${handleId}.txt`);
         const folded = this.foldOutput(modelContent, maxLen);
         return `[Tool output truncated — ${result.output.length} chars, ${lineCount} lines]
 Full output saved to: ${savedPath}
@@ -540283,7 +540350,7 @@ Actions: (1) list_directory on the parent directory to see what's there, (2) Che
         try {
           const { mkdirSync: mkdirSync76, writeFileSync: writeFileSync71 } = __require("node:fs");
           const { join: join142 } = __require("node:path");
-          const sessionDir = join142(this._workingDirectory, ".omnius", "session", this._sessionId);
+          const sessionDir = this.options.stateDir ? join142(this.omniusStateDir(), "session", this._sessionId) : join142(this._workingDirectory, ".omnius", "session", this._sessionId);
           mkdirSync76(sessionDir, { recursive: true });
           const checkpoint = {
             timestamp: (/* @__PURE__ */ new Date()).toISOString(),
@@ -579164,13 +579231,13 @@ async function runSudoScript(ctx3, script) {
   } catch {
   }
   try {
-    const { spawn: spawn32 } = await import("node:child_process");
+    const { spawn: spawn31 } = await import("node:child_process");
     const full = `set -e; ${script}`;
     await new Promise((resolve48) => {
       const usePkexec = process.platform === "linux";
       const cmd = usePkexec ? "pkexec" : "sudo";
       const args = usePkexec ? ["bash", "-lc", full] : ["-n", "bash", "-lc", full];
-      const child = spawn32(cmd, args, { stdio: ["ignore", "pipe", "pipe"] });
+      const child = spawn31(cmd, args, { stdio: ["ignore", "pipe", "pipe"] });
       let stdout = "";
       let stderr = "";
       child.stdout?.on("data", (data) => {
@@ -581357,8 +581424,8 @@ async function handleSlashCommand(input, ctx3) {
         writeFileSync50(jwtFile, JSON.stringify(jwtPayload, null, 2));
         renderInfo(`Launching fortemi-react from ${fDir}...`);
         try {
-          const { spawn: spawn32 } = __require("node:child_process");
-          const child = spawn32(
+          const { spawn: spawn31 } = __require("node:child_process");
+          const child = spawn31(
             "npx",
             ["vite", "dev", "--host", "0.0.0.0", "--port", "3000"],
             {
@@ -582293,9 +582360,9 @@ systemctl --user daemon-reload || true
 systemctl --user enable --now omnius-daemon.service || true
 sleep 1
 `;
-          const { spawn: spawn32 } = await import("node:child_process");
+          const { spawn: spawn31 } = await import("node:child_process");
           await new Promise((resolve48) => {
-            const child = spawn32("bash", ["-lc", takeover], {
+            const child = spawn31("bash", ["-lc", takeover], {
               stdio: "inherit"
             });
             onChildExit(child, () => resolve48());
@@ -588307,8 +588374,8 @@ ${escapedContent}EOF'`, {
       }
       await new Promise((r2) => setTimeout(r2, 1e3));
       process.env.OLLAMA_NUM_PARALLEL = String(n2);
-      const { spawn: spawn32 } = await import("node:child_process");
-      const child = spawn32("ollama", ["serve"], {
+      const { spawn: spawn31 } = await import("node:child_process");
+      const child = spawn31("ollama", ["serve"], {
         stdio: "ignore",
         detached: true,
         env: { ...process.env, OLLAMA_NUM_PARALLEL: String(n2) }
@@ -596226,9 +596293,9 @@ function getDefaultPolicy(context2) {
     case "telegram-admin-dm":
       return { blocked: /* @__PURE__ */ new Set(), allowed: /* @__PURE__ */ new Set() };
     case "telegram-admin-group":
-      return { blocked: /* @__PURE__ */ new Set(), allowed: SAFE_GROUP_ADMIN_TOOLS };
+      return { blocked: new Set(SYSTEM_TOOLS), allowed: SAFE_GROUP_ADMIN_TOOLS };
     case "telegram-public":
-      return { blocked: /* @__PURE__ */ new Set(), allowed: SAFE_PUBLIC_TOOLS };
+      return { blocked: new Set(SYSTEM_TOOLS), allowed: SAFE_PUBLIC_TOOLS };
     case "api":
       return { blocked: /* @__PURE__ */ new Set(), allowed: /* @__PURE__ */ new Set() };
     default:
@@ -596263,10 +596330,45 @@ function applyToolPolicy(tools, context2, userConfig) {
     return policy.allowed.has(tool.name);
   });
 }
-var SAFE_PUBLIC_TOOLS, SAFE_GROUP_ADMIN_TOOLS;
+var SYSTEM_TOOLS, SAFE_PUBLIC_TOOLS, SAFE_GROUP_ADMIN_TOOLS;
 var init_tool_policy = __esm({
   "packages/cli/src/tui/tool-policy.ts"() {
     "use strict";
+    SYSTEM_TOOLS = /* @__PURE__ */ new Set([
+      "shell",
+      "file_write",
+      "file_edit",
+      "file_read",
+      "file_patch",
+      "batch_edit",
+      "structured_file",
+      "grep_search",
+      "glob_find",
+      "list_directory",
+      "code_sandbox",
+      "full_sub_agent",
+      "telegram_sandbox_handoff",
+      "codebase_map",
+      "diagnostic",
+      "git_info",
+      "structured_read",
+      "screenshot",
+      "desktop_click",
+      "desktop_describe",
+      "background_run",
+      "task_status",
+      "task_output",
+      "task_stop",
+      "create_tool",
+      "manage_tools",
+      "aiwg_setup",
+      "aiwg_health",
+      "aiwg_workflow",
+      "autoresearch",
+      "scheduler",
+      "reminder",
+      "agenda"
+    ]);
     SAFE_PUBLIC_TOOLS = /* @__PURE__ */ new Set([
       "memory_read",
       "memory_write",
@@ -596280,7 +596382,6 @@ var init_tool_policy = __esm({
       "generate_tts",
       "create_audio_file",
       "telegram_send_file",
-      "telegram_sandbox_handoff",
       "task_complete"
     ]);
     SAFE_GROUP_ADMIN_TOOLS = /* @__PURE__ */ new Set([
@@ -596297,14 +596398,12 @@ var init_tool_policy = __esm({
       "generate_tts",
       "create_audio_file",
       "telegram_send_file",
-      "telegram_sandbox_handoff",
       "task_complete"
     ]);
   }
 });
 
 // packages/cli/src/tui/telegram-creative-tools.ts
-import { spawn as spawn27 } from "node:child_process";
 import {
   existsSync as existsSync104,
   mkdirSync as mkdirSync59,
@@ -596316,6 +596415,7 @@ import { mkdir as mkdir17 } from "node:fs/promises";
 import {
   basename as basename22,
   dirname as dirname33,
+  extname as extname14,
   isAbsolute as isAbsolute6,
   join as join119,
   relative as relative12,
@@ -596334,11 +596434,26 @@ function formatTelegramCreativeWorkspacePrompt(root) {
     "Public/group creative workspace is enabled.",
     `Workspace root: ${root}`,
     "Creative file tools are scoped to that folder only.",
-    "Allowed: create new files, read/list files in this workspace, and edit/patch files already created in this workspace.",
-    "Forbidden: delete files, access paths outside this workspace, mutate the project tree, run shell commands, or touch system state.",
+    "Allowed: create and send non-executable creative artifacts in this workspace.",
+    "Forbidden: delete files, create scripts/executables, access paths outside this workspace, mutate the project tree, run shell/Python/code commands, or touch system state.",
     "When a user asks for an artifact to be sent, create it here and then call telegram_send_file. The bridge also auto-attaches recorded artifacts as a fallback. Refer to the attachment naturally; do not expose filesystem paths unless the admin explicitly asks."
   ].join("\n");
 }
+function publicCreativeArtifactPolicyError(path11) {
+  const ext = extname14(path11).toLowerCase();
+  if (PUBLIC_EXECUTABLE_ARTIFACT_EXTENSIONS.has(ext)) {
+    return `Public Telegram creative work cannot create or send executable/script/code artifacts (${ext || "no extension"}). Use a non-executable artifact such as .md, .txt, .json, image, audio, or PDF.`;
+  }
+  return null;
+}
+function publicCreativeContentPolicyError(args) {
+  const content = args["content"] ?? args["text"] ?? args["data"];
+  if (typeof content !== "string") return null;
+  if (/^\s*#!/.test(content)) {
+    return "Public Telegram creative work cannot create executable scripts or shebang files.";
+  }
+  return null;
+}
 function collectGeneratedArtifactPathsFromText(text, root) {
   const rootAbs = resolve38(root);
   const paths = /* @__PURE__ */ new Set();
@@ -596418,6 +596533,10 @@ function scopedTool(base3, root, mode) {
       if (pathKey) {
         const guarded = guardPath(rootAbs, String(next[pathKey]));
         if (!guarded.ok) return denied(guarded.error);
+        const pathPolicyError = publicCreativeArtifactPolicyError(guarded.path.abs);
+        if (pathPolicyError) return denied(pathPolicyError);
+        const contentPolicyError = mode === "create" || mode === "edit" ? publicCreativeContentPolicyError(next) : null;
+        if (contentPolicyError) return denied(contentPolicyError);
         if (mode === "edit" && !manifestHas(rootAbs, guarded.path.rel)) {
           return denied(`Public Telegram creative tools can only edit files created in this chat workspace: ${guarded.path.rel}`);
         }
@@ -596530,33 +596649,7 @@ function denied(error) {
     mutatedFiles: []
   };
 }
-function runProcess4(command, args, cwd4, timeoutMs) {
-  return new Promise((resolveProcess) => {
-    const child = spawn27(command, args, {
-      cwd: cwd4,
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    let stdout = "";
-    let stderr = "";
-    const timer = setTimeout(() => child.kill("SIGTERM"), timeoutMs);
-    timer.unref();
-    child.stdout?.on("data", (chunk) => {
-      stdout += chunk.toString();
-    });
-    child.stderr?.on("data", (chunk) => {
-      stderr += chunk.toString();
-    });
-    onChildError(child, (err) => {
-      clearTimeout(timer);
-      resolveProcess({ code: 127, stdout, stderr: stderr + String(err.message || err) });
-    });
-    onChildClose(child, (code8) => {
-      clearTimeout(timer);
-      resolveProcess({ code: code8, stdout, stderr });
-    });
-  });
-}
-var MANIFEST_FILE, PATH_KEYS, MEDIA_PATH_RE, CreativeAudioFileTool;
+var MANIFEST_FILE, PATH_KEYS, MEDIA_PATH_RE, PUBLIC_EXECUTABLE_ARTIFACT_EXTENSIONS, CreativeAudioFileTool;
 var init_telegram_creative_tools = __esm({
   "packages/cli/src/tui/telegram-creative-tools.ts"() {
     "use strict";
@@ -596565,6 +596658,65 @@ var init_telegram_creative_tools = __esm({
     MANIFEST_FILE = ".omnius-creative-manifest.json";
     PATH_KEYS = ["path", "file", "file_path", "filename", "filepath", "filePath"];
     MEDIA_PATH_RE = /(?:^|[\s([])(\/[^\s<>"')\]]+\.[A-Za-z0-9]{1,12})(?:$|[\s),.\]])/g;
+    PUBLIC_EXECUTABLE_ARTIFACT_EXTENSIONS = /* @__PURE__ */ new Set([
+      ".sh",
+      ".bash",
+      ".zsh",
+      ".fish",
+      ".ksh",
+      ".csh",
+      ".py",
+      ".pyw",
+      ".pyc",
+      ".pyo",
+      ".ipynb",
+      ".js",
+      ".mjs",
+      ".cjs",
+      ".ts",
+      ".tsx",
+      ".jsx",
+      ".rb",
+      ".pl",
+      ".pm",
+      ".php",
+      ".lua",
+      ".r",
+      ".jl",
+      ".ps1",
+      ".psm1",
+      ".bat",
+      ".cmd",
+      ".com",
+      ".exe",
+      ".msi",
+      ".jar",
+      ".class",
+      ".war",
+      ".ear",
+      ".go",
+      ".rs",
+      ".c",
+      ".cc",
+      ".cpp",
+      ".cxx",
+      ".h",
+      ".hpp",
+      ".java",
+      ".kt",
+      ".kts",
+      ".scala",
+      ".swift",
+      ".cs",
+      ".vb",
+      ".fs",
+      ".so",
+      ".dylib",
+      ".dll",
+      ".app",
+      ".appimage",
+      ".desktop"
+    ]);
     CreativeAudioFileTool = class {
       constructor(root) {
         this.root = root;
@@ -596576,15 +596728,20 @@ var init_telegram_creative_tools = __esm({
         type: "object",
         properties: {
           text: { type: "string", description: "Text to synthesize into speech" },
+          input: { type: "string", description: "Alias for text" },
+          prompt: { type: "string", description: "Alias for text" },
           path: { type: "string", description: "Output .wav path inside the creative workspace" },
-          voice: { type: "string", description: "espeak-ng voice/language, default en" },
-          speed: { type: "number", description: "Speech speed, default 160" }
+          backend: { type: "string", enum: ["auto", "luxtts", "supertonic", "mlx", "onnx", "piper", "espeak"], description: "TTS backend. Defaults to auto." },
+          voice: { type: "string", description: "Voice id/name for the selected TTS backend" },
+          clone_ref: { type: "string", description: "Optional LuxTTS clone reference" },
+          model: { type: "string", description: "Optional backend model id or raw Piper/ONNX path" },
+          speed: { type: "number", description: "Speech speed multiplier or backend-specific rate" }
         },
-        required: ["text", "path"]
+        required: []
       };
       async execute(args) {
         const start2 = performance.now();
-        const text = typeof args["text"] === "string" ? args["text"].trim() : "";
+        const text = typeof args["text"] === "string" && args["text"].trim() ? args["text"].trim() : typeof args["input"] === "string" && args["input"].trim() ? args["input"].trim() : typeof args["prompt"] === "string" && args["prompt"].trim() ? args["prompt"].trim() : "";
         if (!text) return { success: false, output: "", error: "text is required", durationMs: performance.now() - start2 };
         const rawPath = typeof args["path"] === "string" && args["path"].trim() ? String(args["path"]) : `speech-${Date.now()}.wav`;
         const guarded = guardPath(this.root, rawPath);
@@ -596596,15 +596753,23 @@ var init_telegram_creative_tools = __esm({
           return denied("create_audio_file currently writes WAV files; use a .wav output path.");
         }
         await mkdir17(dirname33(guarded.path.abs), { recursive: true });
-        const voice = typeof args["voice"] === "string" && args["voice"].trim() ? String(args["voice"]) : "en";
-        const speed = Number.isFinite(Number(args["speed"])) ? String(Math.round(Number(args["speed"]))) : "160";
-        const result = await runProcess4("espeak-ng", ["-w", guarded.path.abs, "-v", voice, "-s", speed, text], this.root, 12e4);
-        if (result.code !== 0 || !existsSync104(guarded.path.abs)) {
+        const tts = new TtsGenerateTool();
+        const result = await tts.execute({
+          text,
+          output: guarded.path.abs,
+          playback: false,
+          backend: args["backend"],
+          voice: args["voice"],
+          clone_ref: args["clone_ref"],
+          model: args["model"],
+          speed: args["speed"]
+        });
+        if (!result.success || !existsSync104(guarded.path.abs)) {
           return {
             success: false,
             output: "",
-            error: `Audio synthesis failed. Install espeak-ng or check voice settings.
-${(result.stderr || result.stdout).slice(0, 800)}`,
+            error: `Audio synthesis failed through generate_tts.
+${(result.error || result.output || "").slice(0, 1200)}`,
             durationMs: performance.now() - start2
           };
         }
@@ -596612,7 +596777,8 @@ ${(result.stderr || result.stdout).slice(0, 800)}`,
         const sizeKB = Math.round(statSync35(guarded.path.abs).size / 1024);
         return {
           success: true,
-          output: `Created audio file: ${guarded.path.abs} (${sizeKB}KB WAV)`,
+          output: `Created audio file: ${guarded.path.abs} (${sizeKB}KB WAV)
+${result.output}`,
           llmContent: `Created audio file at ${guarded.path.abs}.`,
           durationMs: performance.now() - start2,
           mutated: true,
@@ -596777,7 +596943,7 @@ var init_vision_ingress = __esm({
 });
 
 // packages/cli/src/tui/telegram-bridge.ts
-import { mkdirSync as mkdirSync60, existsSync as existsSync106, unlinkSync as unlinkSync20, statSync as statSync36, readFileSync as readFileSync87, writeFileSync as writeFileSync57 } from "node:fs";
+import { mkdirSync as mkdirSync60, existsSync as existsSync106, unlinkSync as unlinkSync20, readdirSync as readdirSync36, statSync as statSync36, readFileSync as readFileSync87, writeFileSync as writeFileSync57 } from "node:fs";
 import { join as join121, resolve as resolve39, basename as basename23, relative as relative13, isAbsolute as isAbsolute7 } from "node:path";
 import { writeFile as writeFileAsync } from "node:fs/promises";
 import { createHash as createHash19, randomInt } from "node:crypto";
@@ -597093,7 +597259,8 @@ function telegramSyntheticHelpSignatures() {
   return [
     { signature: "/help", description: "Show Telegram command help" },
     { signature: "/start", description: "Show Telegram bridge status and authentication instructions" },
-    { signature: "/auth <code>", description: "Authenticate this Telegram user as bot admin using the TUI code" }
+    { signature: "/auth <code>", description: "Authenticate this Telegram user as bot admin using the TUI code" },
+    { signature: "/call", description: "Get the active voice call link when a call session is running" }
   ];
 }
 function telegramHelpCommandAllowed(cmd, scope) {
@@ -597592,6 +597759,14 @@ You are responding to an ADMIN user in a private Telegram DM. This user has full
 and is the operator of this agent. You may use all available tools including memory read/write,
 file access, and code analysis. Respond thoroughly and helpfully.
 
+When asked to send a generated or existing file to Telegram, call telegram_send_file with
+path and target. Do not search for Telegram bot tokens, environment secrets, or Bot API
+credentials; upload authorization is encapsulated by telegram_send_file.
+
+When asked to generate speech, narration, or TTS, use generate_tts or audio_playback.
+Those tools handle first-use backend setup where supported. Do not fall back to shell
+commands or generic audio generation for speech synthesis while those tools are available.
+
 Keep responses concise for Telegram but don't withhold information from the admin.
 `.trim();
     ADMIN_GROUP_PROMPT = `
@@ -597821,6 +597996,8 @@ Telegram response contract:
       telegramConversationDir;
       /** Session keys loaded from persistent conversation memory */
       loadedConversationState = /* @__PURE__ */ new Set();
+      /** True once persisted Telegram conversation scopes have been bulk-loaded. */
+      loadedAllConversationState = false;
       /** Media metadata store per chat — chatId → metadata entries */
       mediaMetadata = /* @__PURE__ */ new Map();
       /** Cleanup timer for expired media cache entries */
@@ -598027,6 +598204,22 @@ Telegram response contract:
         } catch {
         }
       }
+      ensureAllTelegramConversationsLoaded() {
+        if (this.loadedAllConversationState) return;
+        this.loadedAllConversationState = true;
+        if (!existsSync106(this.telegramConversationDir)) return;
+        try {
+          for (const file of readdirSync36(this.telegramConversationDir)) {
+            if (!file.endsWith(".json")) continue;
+            try {
+              const parsed = JSON.parse(readFileSync87(join121(this.telegramConversationDir, file), "utf8"));
+              if (parsed.sessionKey) this.ensureTelegramConversationLoaded(parsed.sessionKey);
+            } catch {
+            }
+          }
+        } catch {
+        }
+      }
       saveTelegramConversationState(sessionKey) {
         if (!this.repoRoot) return;
         try {
@@ -598505,8 +598698,91 @@ ${lines.join("\n")}${suffix}`;
 Checklist unavailable: ${reason}`;
         }
       }
+      knownTelegramChatTargets() {
+        this.ensureAllTelegramConversationsLoaded();
+        const targets = /* @__PURE__ */ new Map();
+        for (const [sessionKey, history] of this.chatHistory.entries()) {
+          if (history.length === 0) continue;
+          const latest = [...history].reverse().find((entry) => entry.chatId !== void 0);
+          if (!latest || latest.chatId === void 0) continue;
+          const key = String(latest.chatId);
+          const participants = [...this.chatParticipants.get(sessionKey)?.values() ?? []];
+          const existing = targets.get(key);
+          const target = existing ?? {
+            chatId: latest.chatId,
+            chatType: latest.chatType ?? "private",
+            title: latest.chatTitle,
+            sessionKey,
+            lastSeenTs: latest.ts ?? 0,
+            participantUserIds: [],
+            participantUsernames: []
+          };
+          target.chatType = latest.chatType ?? target.chatType;
+          target.title = latest.chatTitle || target.title;
+          target.lastSeenTs = Math.max(target.lastSeenTs, latest.ts ?? 0);
+          for (const participant of participants) {
+            if (participant.fromUserId && !target.participantUserIds.includes(participant.fromUserId)) {
+              target.participantUserIds.push(participant.fromUserId);
+            }
+            const username = (participant.username || "").replace(/^@/, "").trim().toLowerCase();
+            if (username && username !== "unknown" && !target.participantUsernames.includes(username)) {
+              target.participantUsernames.push(username);
+            }
+          }
+          targets.set(key, target);
+        }
+        return [...targets.values()].sort((a2, b) => b.lastSeenTs - a2.lastSeenTs);
+      }
+      telegramGroupTargetsForSender(msg) {
+        const username = (msg.username || "").replace(/^@/, "").trim().toLowerCase();
+        return this.knownTelegramChatTargets().filter((target) => {
+          if (target.chatType !== "group" && target.chatType !== "supergroup") return false;
+          if (msg.fromUserId && target.participantUserIds.includes(msg.fromUserId)) return true;
+          return !!username && target.participantUsernames.includes(username);
+        });
+      }
+      formatTelegramSendTargetList(targets, max = 14) {
+        if (targets.length === 0) return "";
+        const lines = targets.slice(0, max).map((target) => {
+          const label = target.title ? ` "${target.title}"` : "";
+          const participants = target.participantUsernames.length ? ` participants:@${target.participantUsernames.slice(0, 8).join(", @")}` : "";
+          return `- chat_id ${String(target.chatId)} (${target.chatType}${label}; session ${target.sessionKey})${participants}`;
+        });
+        const suffix = targets.length > lines.length ? `
+- ... ${targets.length - lines.length} more known chat(s)` : "";
+        return `${lines.join("\n")}${suffix}`;
+      }
+      buildTelegramSendTargetContext(msg, isAdminDM) {
+        if (isAdminDM) {
+          const targets = this.knownTelegramChatTargets();
+          const list = this.formatTelegramSendTargetList(targets, 18);
+          return [
+            "## Telegram Send Targets",
+            "telegram_send_file is the only supported way to send generated/existing files to Telegram. Never look for or reveal the bot token; the bridge already owns upload auth.",
+            "Use target with one of these known chat ids when the admin asks to send a file to a group/private chat:",
+            list || "- No known prior Telegram chats are loaded yet. Numeric chat_id or @username can still be used if the admin provides one."
+          ].join("\n");
+        }
+        if (msg.chatType === "private") {
+          const targets = this.telegramGroupTargetsForSender(msg);
+          const list = this.formatTelegramSendTargetList(targets, 10);
+          return [
+            "## Telegram Send Targets",
+            "This private user may send generated files to this DM or to shared public groups where this sender has been observed by the bot. Public groups can never target private DMs.",
+            list ? `Allowed shared group targets:
+${list}` : "No shared group target is currently known for this sender. Ask in the group once or provide a numeric group chat_id the bot already participates in."
+          ].join("\n");
+        }
+        return "";
+      }
+      telegramRunnerStateDir(sessionKey) {
+        if (!this.repoRoot) return void 0;
+        const safe = createHash19("sha1").update(sessionKey).digest("hex").slice(0, 20);
+        return join121(this.repoRoot, ".omnius", "telegram-runner-state", safe);
+      }
       buildTelegramAdminOverviewContext(currentSessionKey) {
         const sections = [];
+        this.ensureAllTelegramConversationsLoaded();
         const chatEntries = [...this.chatHistory.entries()].filter(([sessionKey, history]) => sessionKey !== currentSessionKey && history.length > 0).sort(([, a2], [, b]) => (b[b.length - 1]?.ts ?? 0) - (a2[a2.length - 1]?.ts ?? 0)).slice(0, 18);
         for (const [sessionKey, history] of chatEntries) {
           const latest = history[history.length - 1];
@@ -598519,7 +598795,7 @@ Checklist unavailable: ${reason}`;
           ).join("\n");
           const cards = (this.chatMemoryCards.get(sessionKey) ?? []).slice(0, 4).map((card) => `    - ${card.title}: ${card.notes.slice(-1)[0] ?? ""}`).join("\n");
           sections.push([
-            `- ${sessionKey} (${latest.chatType || "chat"}${latest.chatTitle ? `: ${latest.chatTitle}` : ""})`,
+            `- ${sessionKey} (chat_id ${String(latest.chatId ?? "unknown")}; ${latest.chatType || "chat"}${latest.chatTitle ? `: ${latest.chatTitle}` : ""})`,
             participants ? `  Participants: ${participants}` : "",
             `  Latest: ${telegramHistorySpeaker(latest)}: ${truncateTelegramContextLine(latest.text, 180)}`,
             recent ? `  Recent:
@@ -598560,6 +598836,8 @@ ${chatLabel}`,
           TELEGRAM_ACTION_RESPONSE_CONTRACT
         ];
         sections.push(conversationStream);
+        const sendTargetContext = this.buildTelegramSendTargetContext(msg, isAdminDM);
+        if (sendTargetContext) sections.push(sendTargetContext);
         if (isAdminDM) {
           sections.push(`## Admin Capability Contract
 
@@ -599374,6 +599652,7 @@ ${mediaContext}` : ""}`
         const creativeWorkspace = subAgent.creativeWorkspaceRoot ? formatTelegramCreativeWorkspacePrompt(subAgent.creativeWorkspaceRoot) : "";
         const sessionContext = this.buildTelegramSessionContext(msg, ctx3, profile, modelTier);
         const contextWindowSize = this.contextWindowSize;
+        const runnerStateDir = isAdminDM ? void 0 : this.telegramRunnerStateDir(sessionContext.sessionKey);
         const backend = new OllamaAgenticBackend(
           config.backendUrl,
           config.model,
@@ -599390,7 +599669,11 @@ ${mediaContext}` : ""}`
           modelTier,
           streamEnabled: true,
           dynamicContext: sessionContext.context,
-          sessionId: sessionContext.sessionId
+          stateDir: runnerStateDir,
+          sessionId: sessionContext.sessionId,
+          disablePersistentMemory: false,
+          disableCodebaseMap: !isAdminDM,
+          subAgent: !isAdminDM
         });
         runner.setWorkingDirectory(repoRoot);
         subAgent.runner = runner;
@@ -599406,6 +599689,9 @@ ${mediaContext}` : ""}`
         runner.onEvent((event) => {
           if (subAgent.aborted) return;
           let suppressExternalEvent = false;
+          if (!isAdminDM && event.type === "status") {
+            suppressExternalEvent = true;
+          }
           if (event.type === "tool_call" && event.toolName) {
             if (event.toolName === "task_complete") {
               subAgent.completionBoundarySeen = true;
@@ -599441,7 +599727,9 @@ ${mediaContext}` : ""}`
               }
             }
           } else if (event.type === "status" && event.content) {
-            this.subAgentViewCallbacks?.onWrite(subAgent.viewId, `status: ${event.content}`);
+            if (isAdminDM) {
+              this.subAgentViewCallbacks?.onWrite(subAgent.viewId, `status: ${event.content}`);
+            }
           } else if (event.type === "assistant_text" && event.content && event.source !== "task_complete_summary") {
             subAgent.assistantText = event.content;
           } else if (event.type === "stream_start") {
@@ -599456,7 +599744,7 @@ ${mediaContext}` : ""}`
             subAgent.accumulated += event.content;
           }
           const intermediateLine = formatTelegramProgressEvent(event);
-          if (intermediateLine) {
+          if (intermediateLine && (isAdminDM || event.type !== "status")) {
             subAgent.intermediateLines.push(intermediateLine);
           }
           if (!msg.guestQueryId) {
@@ -599878,6 +600166,9 @@ Scoped workspace: ${scopedRoot}`,
           new PlaywrightBrowserTool(),
           new ImageGenerateTool(repoRoot, this.agentConfig?.backendUrl, imageDefaults),
           new AudioGenerateTool(repoRoot, audioDefaults),
+          new TtsGenerateTool(),
+          new AudioPlaybackTool(),
+          new SoundPlaybackTool(),
           new NotebookEditTool(),
           new RepoMapTool(repoRoot),
           new ImportGraphTool(repoRoot),
@@ -599886,7 +600177,7 @@ Scoped workspace: ${scopedRoot}`,
           new CodeNeighborsTool(repoRoot),
           new ProcessHealthTool(),
           fullSubAgentTool,
-          this.buildTelegramSendFileTool(context2, repoRoot, chatId)
+          this.buildTelegramSendFileTool(context2, repoRoot, chatId, msg)
         ];
         const allTools = context2 === "telegram-admin-dm" ? adminTools : sharedReadMemoryWebTools;
         if (this.contextWindowSize > 0) {
@@ -599908,11 +600199,28 @@ Scoped workspace: ${scopedRoot}`,
             audioDefaults
           ).map((tool) => adaptTool5(tool, todoSessionId));
           adaptedTools.push(...creativeTools);
-          adaptedTools.push(adaptTool5(this.buildTelegramSendFileTool(context2, repoRoot, chatId), todoSessionId));
-          adaptedTools.push(adaptTool5(this.buildTelegramSandboxHandoffTool(context2, repoRoot, `chat:${String(chatId ?? "unknown")}`, chatId), todoSessionId));
+          adaptedTools.push(adaptTool5(this.buildTelegramSendFileTool(context2, repoRoot, chatId, msg), todoSessionId));
+          adaptedTools = this.filterNonAdminTelegramTools(adaptedTools);
         }
         return [...adaptedTools, taskComplete];
       }
+      filterNonAdminTelegramTools(tools) {
+        const blocked = /* @__PURE__ */ new Set([
+          "shell",
+          "code_sandbox",
+          "background_run",
+          "task_output",
+          "task_status",
+          "task_stop",
+          "full_sub_agent",
+          "telegram_sandbox_handoff",
+          "create_tool",
+          "manage_tools",
+          "aiwg_setup",
+          "aiwg_workflow"
+        ]);
+        return tools.filter((tool) => !blocked.has(tool.name));
+      }
       imageGenerationDefaultsForRepo(repoRoot) {
         const settings = resolveSettings(repoRoot);
         return {
@@ -599929,13 +600237,13 @@ Scoped workspace: ${scopedRoot}`,
           musicBackend: settings.musicBackend
         };
       }
-      buildTelegramSendFileTool(context2, repoRoot, currentChatId) {
+      buildTelegramSendFileTool(context2, repoRoot, currentChatId, currentMsg) {
         const bridge = this;
         const adminDm = context2 === "telegram-admin-dm";
         const scopedRoot = adminDm ? void 0 : telegramCreativeWorkspaceRoot(repoRoot, currentChatId);
         return {
           name: "telegram_send_file",
-          description: adminDm ? "Upload an existing local file to a Telegram chat. Admin DM scope may target the current chat, a numeric chat/user id, or a @username if the bot is allowed to message it. This only sends the file; it does not create, edit, or delete files." : `Upload an existing file from this chat's scoped creative workspace to the current Telegram chat. Public/group scope cannot target other chats and cannot send files outside ${scopedRoot}.`,
+          description: adminDm ? "Upload an existing local file to a Telegram target. Use target=<chat_id|user_id|@username> to send to a specific group/user the bot can message. This only sends the file; it does not create, edit, delete, or inspect bot tokens." : currentMsg?.chatType === "private" ? `Upload an existing file from this private chat's scoped creative workspace. target may be omitted for this DM or set to a known shared group chat_id for this sender. It cannot target other private users and cannot send files outside ${scopedRoot}.` : `Upload an existing file from this chat's scoped creative workspace to the current Telegram chat. Public/group scope cannot target private DMs or other chats and cannot send files outside ${scopedRoot}.`,
           parameters: {
             type: "object",
             properties: {
@@ -599943,13 +600251,25 @@ Scoped workspace: ${scopedRoot}`,
                 type: "string",
                 description: adminDm ? "Local file path to send. Relative paths resolve from the repo root; absolute paths are allowed for admin DM." : "File path inside the scoped creative workspace."
               },
+              target: {
+                type: "string",
+                description: adminDm ? "Optional target chat/user. Use a known numeric group chat_id (for example -100...), a numeric user id, or @username. Defaults to the current private chat." : currentMsg?.chatType === "private" ? "Optional target. Omit for this DM, or use a known shared group chat_id/title/session key for this sender." : "Public/group scope ignores external targets and may only send to the current chat."
+              },
               chat_id: {
                 type: "string",
-                description: "Admin DM only. Optional target chat/user id or @username. Defaults to the current Telegram chat."
+                description: "Alias for target. Admin/private DM only."
+              },
+              target_chat_id: {
+                type: "string",
+                description: "Alias for target/chat_id. Admin/private DM only."
               },
               user_id: {
                 type: "string",
-                description: "Admin DM only. Optional numeric Telegram user id to send to, if the bot can message that user."
+                description: "Alias for target when sending to a numeric Telegram user id from admin/private DM."
+              },
+              username: {
+                type: "string",
+                description: "Alias for target when sending to @username from admin/private DM."
               },
               kind: {
                 type: "string",
@@ -599973,7 +600293,7 @@ Scoped workspace: ${scopedRoot}`,
             if (!rawPath) {
               return { success: false, output: "", error: "path is required", durationMs: performance.now() - start2 };
             }
-            const target = bridge.resolveTelegramFileTarget(args, currentChatId, adminDm);
+            const target = bridge.resolveTelegramFileTarget(args, currentChatId, adminDm, currentMsg);
             if (!target.ok) {
               return { success: false, output: "", error: target.error, durationMs: performance.now() - start2 };
             }
@@ -600009,9 +600329,34 @@ Scoped workspace: ${scopedRoot}`,
           }
         };
       }
-      resolveTelegramFileTarget(args, currentChatId, adminDm) {
-        const rawTarget = args["chat_id"] ?? args["target_chat_id"] ?? args["user_id"] ?? args["username"];
+      resolveTelegramFileTarget(args, currentChatId, adminDm, currentMsg) {
+        const rawTarget = args["target"] ?? args["chat_id"] ?? args["target_chat_id"] ?? args["user_id"] ?? args["username"];
         if (!adminDm) {
+          if (currentMsg?.chatType === "private") {
+            if (rawTarget === void 0 || !String(rawTarget).trim()) {
+              if (currentChatId === void 0) return { ok: false, error: "Current Telegram chat id is unavailable." };
+              return { ok: true, chatId: currentChatId };
+            }
+            const target2 = String(rawTarget).trim();
+            if (currentChatId !== void 0 && target2 === String(currentChatId)) {
+              return { ok: true, chatId: currentChatId };
+            }
+            const knownGroups = this.telegramGroupTargetsForSender(currentMsg);
+            const normalized = target2.replace(/^@/, "").trim().toLowerCase();
+            const match = knownGroups.find((candidate) => {
+              if (String(candidate.chatId) === target2) return true;
+              if (candidate.sessionKey === target2) return true;
+              if (candidate.title && candidate.title.trim().toLowerCase() === normalized) return true;
+              return false;
+            });
+            if (match) return { ok: true, chatId: match.chatId };
+            const knownList = this.formatTelegramSendTargetList(knownGroups, 8);
+            return {
+              ok: false,
+              error: knownList ? `Private-user telegram_send_file target must be this DM or a known shared group for this sender. Known shared groups:
+${knownList}` : "Private-user telegram_send_file target must be this DM or a known shared group for this sender. No shared group is currently known."
+            };
+          }
           if (rawTarget !== void 0 && String(rawTarget).trim() && String(rawTarget).trim() !== String(currentChatId)) {
             return { ok: false, error: "Public/group telegram_send_file cannot target another chat. It may only send to the current chat." };
           }
@@ -600037,6 +600382,10 @@ Scoped workspace: ${scopedRoot}`,
         if (scopedRoot && !isPathInside(base3, abs)) {
           return { ok: false, error: `Public/group telegram_send_file can only send files inside ${base3}.` };
         }
+        if (scopedRoot) {
+          const policyError = publicCreativeArtifactPolicyError(abs);
+          if (policyError) return { ok: false, error: policyError };
+        }
         if (!existsSync106(abs)) return { ok: false, error: `File does not exist: ${trimmed}` };
         if (!statSync36(abs).isFile()) return { ok: false, error: `Path is not a file: ${trimmed}` };
         return { ok: true, path: abs };
@@ -604417,7 +604766,7 @@ __export(graphical_sudo_exports, {
   detectSudoHelper: () => detectSudoHelper,
   runGraphicalSudo: () => runGraphicalSudo
 });
-import { spawn as spawn28 } from "node:child_process";
+import { spawn as spawn27 } from "node:child_process";
 import { existsSync as existsSync115, mkdirSync as mkdirSync67, writeFileSync as writeFileSync62, chmodSync as chmodSync2 } from "node:fs";
 import { join as join129 } from "node:path";
 import { tmpdir as tmpdir21 } from "node:os";
@@ -604487,7 +604836,7 @@ async function runGraphicalSudo(opts) {
     args = ["/bin/bash", opts.scriptPath, ...opts.args ?? []];
   }
   return new Promise((resolve48, reject) => {
-    const child = spawn28(cmd, args, {
+    const child = spawn27(cmd, args, {
       env: { ...process.env, ...opts.env || {}, ...extraEnv },
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -616921,7 +617270,7 @@ var init_profiles = __esm({
 });
 
 // packages/cli/src/docker.ts
-import { execSync as execSync56, spawn as spawn29 } from "node:child_process";
+import { execSync as execSync56, spawn as spawn28 } from "node:child_process";
 import { existsSync as existsSync119, mkdirSync as mkdirSync70, writeFileSync as writeFileSync65 } from "node:fs";
 import { join as join133, resolve as resolve42, dirname as dirname36 } from "node:path";
 import { homedir as homedir44 } from "node:os";
@@ -617202,7 +617551,7 @@ function runInContainer(opts) {
   if (opts.maxTurns) omniusArgs.push("--max-turns", String(opts.maxTurns));
   if (opts.timeoutS) omniusArgs.push("--timeout", String(opts.timeoutS));
   args.push(...omniusArgs);
-  return spawn29("docker", args, {
+  return spawn28("docker", args, {
     stdio: ["ignore", "pipe", "pipe"]
   });
 }
@@ -617405,7 +617754,7 @@ import { createRequire as createRequire7 } from "node:module";
 import { fileURLToPath as fileURLToPath17 } from "node:url";
 import { dirname as dirname37, join as join135, resolve as resolve43 } from "node:path";
 import { homedir as homedir45 } from "node:os";
-import { spawn as spawn30, execSync as execSync57 } from "node:child_process";
+import { spawn as spawn29, execSync as execSync57 } from "node:child_process";
 import { mkdirSync as mkdirSync71, writeFileSync as writeFileSync66, readFileSync as readFileSync98, readdirSync as readdirSync41, existsSync as existsSync120, watch as fsWatch3, renameSync as renameSync8, unlinkSync as unlinkSync24 } from "node:fs";
 import { randomBytes as randomBytes23, randomUUID as randomUUID16 } from "node:crypto";
 import { createHash as createHash23 } from "node:crypto";
@@ -619678,7 +620027,7 @@ ${task}` : task;
   runEnv["OMNIUS_RUN_SCOPE"] = req2._authScope || "admin";
   runEnv["OLLAMA_HOST"] = currentCfg.backendUrl || process.env["OLLAMA_HOST"] || "http://127.0.0.1:11434";
   if (currentCfg.apiKey) runEnv["OMNIUS_API_KEY_INHERIT"] = currentCfg.apiKey;
-  const child = spawn30(process.execPath, [omniusBin, ...args], {
+  const child = spawn29(process.execPath, [omniusBin, ...args], {
     cwd: resolve43(process.cwd()),
     env: runEnv,
     stdio: ["ignore", "pipe", "pipe"]
@@ -620007,7 +620356,7 @@ async function handleV1Update(req2, res, requestId) {
     cleanEnv.PATH = pathParts.join(":");
     let child;
     if (isWin2) {
-      child = spawn30(npmBin, ["install", "-g", pkgSpec, "--no-audit", "--no-fund", "--no-progress"], {
+      child = spawn29(npmBin, ["install", "-g", pkgSpec, "--no-audit", "--no-fund", "--no-progress"], {
         detached: true,
         stdio: ["ignore", logFd, logFd],
         windowsHide: true,
@@ -620029,13 +620378,13 @@ async function handleV1Update(req2, res, requestId) {
         }
       }
       if (npmCli) {
-        child = spawn30(nodeBin, [npmCli, "install", "-g", pkgSpec, "--no-audit", "--no-fund", "--no-progress"], {
+        child = spawn29(nodeBin, [npmCli, "install", "-g", pkgSpec, "--no-audit", "--no-fund", "--no-progress"], {
           detached: true,
           stdio: ["ignore", logFd, logFd],
           env: cleanEnv
         });
       } else {
-        child = spawn30(npmBin, ["install", "-g", pkgSpec, "--no-audit", "--no-fund", "--no-progress"], {
+        child = spawn29(npmBin, ["install", "-g", pkgSpec, "--no-audit", "--no-fund", "--no-progress"], {
           detached: true,
           stdio: ["ignore", logFd, logFd],
           env: cleanEnv
@@ -620046,7 +620395,7 @@ async function handleV1Update(req2, res, requestId) {
     const installPid = child.pid ?? 0;
     if (installPid > 0 && !isWin2) {
       try {
-        const follower = spawn30("bash", ["-c", `while kill -0 ${installPid} 2>/dev/null; do sleep 1; done; echo "__EXIT_CODE=0" >> "${logPath3}"`], {
+        const follower = spawn29("bash", ["-c", `while kill -0 ${installPid} 2>/dev/null; do sleep 1; done; echo "__EXIT_CODE=0" >> "${logPath3}"`], {
           detached: true,
           stdio: "ignore"
         });
@@ -620069,7 +620418,7 @@ async function handleV1Update(req2, res, requestId) {
           hasSystemdUnit ? `systemctl --user restart omnius-daemon.service >/dev/null 2>&1 || true` : `${JSON.stringify(omniusAbs)} serve --quiet --daemon >/dev/null 2>&1 & disown`,
           `kill -TERM ${process.pid} >/dev/null 2>&1 || true`
         ].join("; ");
-        const relauncher = spawn30("bash", ["-c", relaunchScript], {
+        const relauncher = spawn29("bash", ["-c", relaunchScript], {
           detached: true,
           stdio: "ignore",
           env: cleanEnv
@@ -620291,7 +620640,7 @@ async function handleV1Run(req2, res) {
     });
     job.sandbox = "container";
   } else {
-    child = spawn30(process.execPath, [omniusBin, ...args], {
+    child = spawn29(process.execPath, [omniusBin, ...args], {
       cwd: cwd4,
       env: runEnv,
       stdio: ["ignore", "pipe", "pipe"],
@@ -622270,7 +622619,7 @@ ${historyLines}
       }
       runEnv["OLLAMA_HOST"] = currentCfg.backendUrl || process.env["OLLAMA_HOST"] || "http://127.0.0.1:11434";
       if (currentCfg.apiKey) runEnv["OMNIUS_API_KEY_INHERIT"] = currentCfg.apiKey;
-      const child = spawn30(process.execPath, [omniusBin, ...args], {
+      const child = spawn29(process.execPath, [omniusBin, ...args], {
         cwd: cwdPath,
         env: runEnv,
         stdio: ["ignore", "pipe", "pipe"],
@@ -624842,7 +625191,7 @@ var init_clipboard_media = __esm({
 
 // packages/cli/src/tui/interactive.ts
 import { cwd } from "node:process";
-import { resolve as resolve44, join as join137, dirname as dirname38, extname as extname14, relative as relative14 } from "node:path";
+import { resolve as resolve44, join as join137, dirname as dirname38, extname as extname15, relative as relative14 } from "node:path";
 import { createRequire as createRequire8 } from "node:module";
 import { fileURLToPath as fileURLToPath18 } from "node:url";
 import {
@@ -632144,7 +632493,7 @@ Execute this skill now. Follow the behavioral guidance above.`;
           const imgPath = resolve44(repoRoot, cleanPath);
           const imgBuffer = readFileSync100(imgPath);
           const base642 = imgBuffer.toString("base64");
-          const ext = extname14(cleanPath).toLowerCase();
+          const ext = extname15(cleanPath).toLowerCase();
           const mime = ext === ".png" ? "image/png" : ext === ".gif" ? "image/gif" : ext === ".webp" ? "image/webp" : "image/jpeg";
           const asciiContext = await renderAsciiPreviewForImage(
             imgPath,
@@ -633325,7 +633674,7 @@ __export(run_exports, {
   statusCommand: () => statusCommand
 });
 import { resolve as resolve45 } from "node:path";
-import { spawn as spawn31 } from "node:child_process";
+import { spawn as spawn30 } from "node:child_process";
 import { mkdirSync as mkdirSync74, writeFileSync as writeFileSync69, readFileSync as readFileSync101, readdirSync as readdirSync43, existsSync as existsSync122 } from "node:fs";
 import { randomBytes as randomBytes24 } from "node:crypto";
 import { join as join138 } from "node:path";
@@ -633438,7 +633787,7 @@ async function runBackground(task, config, opts) {
   const omniusBin = process.argv[1] || "omnius";
   const args = [task, "--json"];
   if (config.model) args.push("--model", config.model);
-  const child = spawn31(process.execPath, [omniusBin, ...args], {
+  const child = spawn30(process.execPath, [omniusBin, ...args], {
     cwd: repoRoot,
     env: { ...process.env, OMNIUS_JOB_ID: id },
     stdio: ["ignore", "pipe", "pipe"],
@@ -634626,9 +634975,9 @@ async function main() {
           const mode = process.argv[process.argv.indexOf("--self-test") + 1] || "crossmodal";
           if (mode === "crossmodal") {
             process.stdout.write("Running crossmodal smoke tests...\n");
-            const { spawn: spawn32 } = await import("node:child_process");
+            const { spawn: spawn31 } = await import("node:child_process");
             const run = (file) => new Promise((resolve48, reject) => {
-              const p2 = spawn32(process.execPath, [file], { stdio: ["ignore", "pipe", "pipe"] });
+              const p2 = spawn31(process.execPath, [file], { stdio: ["ignore", "pipe", "pipe"] });
               p2.stdout.on("data", (d2) => process.stdout.write(d2));
               p2.stderr.on("data", (d2) => process.stdout.write(d2));
               onChildExit(p2, (code8) => code8 === 0 ? resolve48() : reject(new Error(`${file} exited ${code8}`)));